@xopcai/xopc 0.0.270 → 0.0.273

package/dist/src/cli/commands/auth.js

@@ -2,8 +2,8 @@ import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
 import { CredentialResolver, init_credentials } from "../../auth/credentials.js";
 import { getAllProviders, init_providers } from "../../providers/index.js";
-import { disconnectProvider } from "../../providers/provider-disconnect.js";
 import { formatExamples, register } from "../registry.js";
+import { disconnectProvider } from "../../providers/provider-disconnect.js";
 import { colorizeStatus, colors } from "../utils/colors.js";
 import { listAllProfiles, listProfilesForProvider, removeAuthProfile, upsertAuthProfile } from "../../auth/profiles/profiles.js";
 import { getOAuthProvider, getSupportedOAuthProviders } from "../utils/oauth-providers.js";

package/dist/src/cli/commands/doctor/checks/database-schema.js

@@ -52,7 +52,7 @@ async function checkDatabaseSchema(ctx) {
 		id: "database-schema",
 		label: "Database schema",
 		status: "pass",
-		message: `SQLite schema v${status.dbVersion} (current release v163).`,
+		message: `SQLite schema v${status.dbVersion} (current release v165).`,
 		hints: []
 	};
 }

package/dist/src/cli/commands/extension-dev.js

@@ -5,10 +5,10 @@ import { init_paths, resolveConfigPath, resolveExtensionsDir } from "../../confi
 import { init_normalize_manifest, normalizeExtensionManifest } from "../../extensions/normalize-manifest.js";
 import { init_loader, loadConfig } from "../../config/loader.js";
 import { checkEngineCompatibility } from "../../extensions/engine-check.js";
+import { getContextWithOpts } from "../context.js";
 import { GatewayServer } from "../../gateway/server.js";
 import { runGatewayLoop } from "../../gateway/run-loop.js";
 import "../../gateway/index.js";
-import { getContextWithOpts } from "../context.js";
 import { colors } from "../utils/colors.js";
 import { initWorkspace } from "../utils/init-workspace.js";
 import { join, resolve } from "node:path";

package/dist/src/cli/commands/extension-marketplace.js

@@ -1,11 +1,11 @@
 import { init_paths, resolveExtensionsDir } from "../../config/paths.js";
 import { init_loader, loadConfig } from "../../config/loader.js";
 import { downloadExtensionStoreZipBuffer, resolveExtensionZipDownloadUrl, resolveExtensionsStoreBaseUrl, verifyStoreArtifactSha256 } from "../../agent/skills/marketplace/adapters/store/store-api-client.js";
+import { getContextWithOpts } from "../context.js";
 import { getExtensionLockfileManager } from "../../extensions/lockfile.js";
 import { installFromLocal, installFromNpm, peekExtensionManifestFromStoreZip } from "../../extensions/install.js";
 import { commitStagedExtensionInstall, finalizeStagedExtensionInstall, rollbackStagedExtensionInstall, stageExtensionStoreZip } from "../../extensions/install-transaction.js";
 import { fetchRegistry, findExtension, getExtensionMarketplaceStoreBaseUrl, listExtensions, searchExtensions } from "../../extensions/marketplace.js";
-import { getContextWithOpts } from "../context.js";
 import { colors } from "../utils/colors.js";
 import { validateExtensionPackageDirectory } from "./extension-pack.js";
 import { join, resolve } from "node:path";

package/dist/src/cli/commands/extension.js

@@ -5,10 +5,10 @@ import { init_paths, resolveExtensionsDir } from "../../config/paths.js";
 import { init_loader, loadConfig, saveConfig } from "../../config/loader.js";
 import { checkEngineCompatibility } from "../../extensions/engine-check.js";
 import { ExtensionLoader } from "../../extensions/loader.js";
+import { getContextWithOpts } from "../context.js";
 import { getExtensionLockfileManager } from "../../extensions/lockfile.js";
 import { checkAllExtensionsHealth, getExtensionHealthChecker } from "../../extensions/health.js";
 import { collectExtensionPackageDependencyIssues } from "../../extensions/package-contract.js";
-import { getContextWithOpts } from "../context.js";
 import { colors } from "../utils/colors.js";
 import { createExtensionCreateCommand } from "./extension-create.js";
 import { createExtensionDevCommand } from "./extension-dev.js";

package/dist/src/cli/commands/gateway/lifecycle.js

@@ -1,7 +1,7 @@
 import { init_paths, resolveConfigPath } from "../../../config/paths.js";
 import { loadConfig } from "../../../config/loader.js";
-import { isRestartEnabled } from "../../../config/commands.flags.js";
 import "../../../config/index.js";
+import { isRestartEnabled } from "../../../config/commands.flags.js";
 import { resolveGatewayService } from "../../../daemon/service.js";
 import { authorizeGatewaySigusr1Restart, writeGatewayRestartIntentSync } from "../../../infra/restart.js";
 import { findVerifiedGatewayListenerPidsOnPortSync, formatGatewayPidList, signalVerifiedGatewayPidSync } from "../../../infra/gateway-processes.js";

package/dist/src/cli/commands/gateway/run-foreground.js

@@ -69,10 +69,13 @@ async function runGatewayFromCliOptions(options, ctx) {
 	const { resolveGatewayAuth, assertGatewayAuthConfigured } = await import("../../../gateway/auth.js");
 	const { assertGatewayRuntimeConfig } = await import("../../../gateway/runtime-config.js");
 	let auth = resolveGatewayAuth({ authConfig: effectiveConfig.gateway?.auth });
-	if (typeof options.token === "string" && options.token.trim().length > 0) auth = {
-		mode: "token",
-		token: options.token.trim()
-	};
+	if (typeof options.token === "string" && options.token.trim().length > 0) {
+		auth = {
+			mode: "token",
+			token: options.token.trim()
+		};
+		process.env.XOPC_GATEWAY_TOKEN = auth.token;
+	}
 	try {
 		assertGatewayAuthConfigured(auth);
 		assertGatewayRuntimeConfig({
@@ -126,7 +129,7 @@ async function runGatewayFromCliOptions(options, ctx) {
 			});
 			await server.start();
 			const displayHost = bindHost === "0.0.0.0" ? "localhost" : bindHost;
-			const token = options.token || config?.gateway?.auth?.token;
+			const token = auth.mode === "token" ? auth.token : void 0;
 			console.log("✅ Gateway started");
 			console.log(`   URL: http://${displayHost}:${port}`);
 			if (token) console.log(`   Token: ${token.slice(0, 8)}...${token.slice(-8)}`);

package/dist/src/cli/commands/gateway/service.js

@@ -9,8 +9,9 @@ init_paths();
 * Create service install subcommand - actually installs the OS service
 */
 function createInstallCommand() {
-	return new Command("install").description("Install gateway as OS service (LaunchAgent / systemd / Task)").option("--port <port>", "Gateway port").option("--token <token>", "Gateway auth token").option("--force", "Force reinstall if already installed").option("--json", "Output JSON").action(async (options) => {
+	return new Command("install").description("Install gateway as OS service (LaunchAgent / systemd / Task)").option("--port <port>", "Gateway port").option("--token <token>", "Gateway auth token").option("--force", "Force reinstall if already installed").option("--json", "Output JSON").action(async (options, command) => {
 		const configPath = getContextWithOpts().configPath || resolveConfigPath();
+		const force = options.force === true || command.optsWithGlobals().force === true;
 		const [{ loadConfig }, { resolveGatewayService, isDaemonAvailableAsync, getPlatformName }, { buildGatewayInstallArgs }] = await Promise.all([
 			import("../../../config/index.js"),
 			import("../../../daemon/service.js"),
@@ -30,7 +31,7 @@ function createInstallCommand() {
 		}
 		const service = await resolveGatewayService();
 		const loaded = await service.isLoaded({ env: process.env });
-		if (loaded && !options.force) {
+		if (loaded && !force) {
 			if (options.json) console.log(JSON.stringify({
 				ok: true,
 				result: "already-installed"
@@ -38,7 +39,7 @@ function createInstallCommand() {
 			else console.log("ℹ️  Service already installed. Use --force to reinstall.");
 			return;
 		}
-		if (loaded && options.force) try {
+		if (loaded && force) try {
 			await service.uninstall({ env: process.env });
 		} catch {}
 		const installArgs = buildGatewayInstallArgs({

package/dist/src/cli/commands/gateway/token.js

@@ -4,6 +4,17 @@ import crypto from "crypto";
 import { Command } from "commander";
 //#region src/cli/commands/gateway/token.ts
 init_paths();
+async function readInstalledServiceToken() {
+	try {
+		const { isDaemonAvailableAsync, resolveGatewayService } = await import("../../../daemon/service.js");
+		if (!await isDaemonAvailableAsync()) return void 0;
+		const service = await resolveGatewayService();
+		if (!await service.isLoaded({ env: process.env })) return void 0;
+		return (await service.readCommand(process.env))?.environment?.XOPC_GATEWAY_TOKEN?.trim() || void 0;
+	} catch {
+		return;
+	}
+}
 /**
 * Create the token subcommand for managing gateway authentication token.
 */
@@ -14,6 +25,7 @@ function createTokenCommand() {
 		const log = createLogger("GatewayTokenCommand");
 		try {
 			const config = loadConfig(configPath);
+			const installedServiceToken = await readInstalledServiceToken();
 			if (options.generate) {
 				const newToken = crypto.randomBytes(24).toString("hex");
 				config.gateway = config.gateway || {};
@@ -31,9 +43,16 @@ function createTokenCommand() {
 				console.log("");
 				console.log("Or set environment variable:");
 				console.log(`   export XOPC_GATEWAY_TOKEN=${newToken}`);
+				if (installedServiceToken && installedServiceToken !== newToken) {
+					console.log("");
+					console.log("⚠️  The installed gateway service still uses its previous token.");
+					console.log("   Run `xopc gateway service install --force`, then restart the service.");
+				}
 				process.exit(0);
 			} else {
-				const currentToken = config.gateway?.auth?.token;
+				const configToken = config.gateway?.auth?.token?.trim();
+				const environmentToken = process.env.XOPC_GATEWAY_TOKEN?.trim();
+				const currentToken = installedServiceToken || environmentToken || configToken;
 				if ((config.gateway?.auth?.mode || "token") === "none") {
 					console.log("⚠️  Gateway authentication is disabled (mode: none)");
 					console.log("");
@@ -46,6 +65,14 @@ function createTokenCommand() {
 					console.log(`   ${currentToken}`);
 					console.log("");
 					console.log(`Preview: ${tokenPreview}`);
+					if (installedServiceToken) console.log("Source: installed gateway service");
+					else if (environmentToken) console.log("Source: XOPC_GATEWAY_TOKEN");
+					else console.log(`Source: ${configPath}`);
+					if (installedServiceToken && configToken && installedServiceToken !== configToken) {
+						console.log("");
+						console.log("⚠️  Token drift detected: the installed service token overrides the config token.");
+						console.log("   Run `xopc gateway service install --force`, then restart the service to sync.");
+					}
 					console.log("");
 					console.log("Usage:");
 					console.log(`   xopc gateway --token ${currentToken}`);

package/dist/src/cli/commands/gateway-ssh-tunnel.js

@@ -1,5 +1,5 @@
-import { startSshPortForward } from "../../infra/ssh-tunnel.js";
 import { formatExamples } from "../registry.js";
+import { startSshPortForward } from "../../infra/ssh-tunnel.js";
 import { Command } from "commander";
 //#region src/cli/commands/gateway-ssh-tunnel.ts
 function registerGatewaySshTunnelCommand(parent, ctx) {

package/dist/src/cli/commands/models.js

@@ -2,11 +2,11 @@ import { getAgentDefaultModelRef, init_schema } from "../../config/schema.js";
 import { loadConfig, saveConfig } from "../../config/loader.js";
 import { CredentialResolver, init_credentials } from "../../auth/credentials.js";
 import { getAllModels, getAvailableModels, getConfiguredProviders, getProviderAuthState, getProviderDisplayName, init_providers, isProviderConfigured, providerSupportsApiKey, providerSupportsOAuth, resolveModel } from "../../providers/index.js";
+import { formatExamples, register } from "../registry.js";
+import { getContextWithOpts } from "../context.js";
 import "../../config/index.js";
 import { prepareUpdateGlobalDefaults } from "../../gateway/global-defaults-admin.js";
 import { disconnectProvider } from "../../providers/provider-disconnect.js";
-import { formatExamples, register } from "../registry.js";
-import { getContextWithOpts } from "../context.js";
 import { colors } from "../utils/colors.js";
 import { runCliOAuthLogin } from "../utils/oauth-login.js";
 import { input } from "@inquirer/prompts";

package/dist/src/cli/commands/onboard.js

@@ -2,8 +2,8 @@ import { init_paths_state, resolveStateDir } from "../../config/paths-state.js";
 import { ConfigSchema, init_schema } from "../../config/schema.js";
 import { saveConfig } from "../../config/loader.js";
 import { resolveGatewayLocalClientHost } from "../../config/gateway-bind.js";
-import "../../config/index.js";
 import { formatExamples, register } from "../registry.js";
+import "../../config/index.js";
 import { provisionEagerRuntimes } from "../../runtime-tools/bootstrap.js";
 import { colors } from "../utils/colors.js";
 import { initWorkspace } from "../utils/init-workspace.js";

package/dist/src/cli/commands/platform.js

@@ -1,6 +1,6 @@
 import { loadConfig, saveConfig } from "../../config/loader.js";
-import "../../config/index.js";
 import { formatExamples, register } from "../registry.js";
+import "../../config/index.js";
 import { PLATFORM_RUNTIME_PROFILE, PLATFORM_RUNTIME_PROVIDER, PlatformRuntimeClient, discoverPlatform } from "../../platform/client.js";
 import "../../platform/index.js";
 import { getProfile, upsertAuthProfile } from "../../auth/profiles/profiles.js";

package/dist/src/cli/commands/profile.js

@@ -1,7 +1,7 @@
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
-import { createProfile, deleteProfile, getCurrentProfile, getSwitchCommand, listProfiles, resolveProfileStateDir } from "../../config/profile.js";
 import { formatExamples, register } from "../registry.js";
+import { createProfile, deleteProfile, getCurrentProfile, getSwitchCommand, listProfiles, resolveProfileStateDir } from "../../config/profile.js";
 import { colors } from "../utils/colors.js";
 import { Command } from "commander";
 import Table from "cli-table3";

package/dist/src/cli/commands/tunnel.js

@@ -1,16 +1,19 @@
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
+import { isXopcDatabaseOpen, openXopcDatabase } from "../../storage/sqlite/connection.js";
 import { loadConfig, saveConfig } from "../../config/loader.js";
 import { resolveGatewayEffectiveHost } from "../../config/gateway-bind.js";
 import { ensureFrpcBinary } from "../../tunnel/frpc-binary.js";
 import { resolveTunnelBrokerUrl, resolveTunnelRegistrationSecret } from "../../tunnel/env.js";
 import { loadTunnelState } from "../../tunnel/tunnel-state.js";
 import { getTunnelService } from "../../tunnel/tunnel-service.js";
+import { formatExamples, register } from "../registry.js";
 import "../../config/index.js";
+import { resolveGatewayAuth } from "../../gateway/auth.js";
+import { requireTunnelGatewayToken } from "../../tunnel/auth-policy.js";
 import { TUNNEL_RISK_SUMMARY_LINES, TunnelConsentError, assertTunnelMayStart, hasValidTunnelConsent } from "../../tunnel/consent.js";
 import { resolveFrpSubdomainHost } from "../../tunnel/frp-subdomain-host.js";
 import { applyTunnelConsentToConfig, mergeTunnelConfigPatch, setTunnelEnabledInConfig } from "../../tunnel/tunnel-config.js";
-import { formatExamples, register } from "../registry.js";
 import "../../tunnel/index.js";
 import { Command } from "commander";
 //#region src/cli/commands/tunnel.ts
@@ -26,6 +29,7 @@ function resolveGatewayPortHost(config) {
 	};
 }
 function resolveGatewayToken(config) {
+	requireTunnelGatewayToken(resolveGatewayAuth({ authConfig: config.gateway.auth }));
 	const fromEnv = process.env.XOPC_GATEWAY_TOKEN?.trim();
 	if (fromEnv) return fromEnv;
 	const token = config.gateway.auth?.token?.trim();
@@ -155,6 +159,7 @@ function createTunnelCommand(ctx) {
 		});
 		const config = loadConfig(ctx.configPath);
 		assertTunnelMayStart(config);
+		if (!isXopcDatabaseOpen()) openXopcDatabase();
 		const { port, host } = resolveGatewayPortHost(config);
 		const token = resolveGatewayToken(config);
 		const tunnel = getTunnelService();

package/dist/src/cli/commands/update.js

@@ -1,11 +1,11 @@
 import { PACKAGE_VERSION, init_package_version } from "../../package-version.js";
 import { loadConfig } from "../../config/loader.js";
+import { formatExamples, register } from "../registry.js";
 import "../../config/index.js";
 import { acquireUpdateLock } from "../../infra/update-lock.js";
 import { normalizeUpdateChannel } from "../../infra/update-channels.js";
 import { compareSemver, resolveNpmChannelTag } from "../../infra/update-check.js";
 import { formatUpdateApiResult, resolveUpdateInstallSurface, runGatewayUpdateWithPostSteps } from "../../infra/update-runner.js";
-import { formatExamples, register } from "../registry.js";
 import { Command } from "commander";
 //#region src/cli/commands/update.ts
 init_package_version();

package/dist/src/cli/extension-cli-register.js

@@ -4,9 +4,9 @@ import { ExtensionLoader } from "../extensions/loader.js";
 import "../extensions/index.js";
 import { MessageBus } from "../infra/bus/queue.js";
 import "../infra/bus/index.js";
+import { createDefaultContext } from "./registry.js";
 import { getWorkspacePath } from "../config/workspace-path-helpers.js";
 import "../config/index.js";
-import { createDefaultContext } from "./registry.js";
 import { registerExtensionCliProgram } from "../extensions/sdk/channel-helpers.js";
 import { join } from "path";
 //#region src/cli/extension-cli-register.ts

package/dist/src/config/index.js

@@ -13,10 +13,10 @@ import { clearConfigValueCache, getAllowedCommands, getCacheStats, init_resolve_
 import { CustomModelSchema, ImageGenerationCapabilitiesSchema, ImageGenerationModelSchema, ImageGenerationProviderSchema, ModelOverrideSchema, ModelsJsonSchema, OpenAICompatSchema, OpenAICompletionsCompatSchema, OpenAIResponsesCompatSchema, OpenRouterRoutingSchema, ProviderConfigSchema, VercelGatewayRoutingSchema, getDefaultModelValues, init_models_json, loadModelsJson, modelsJsonExists, saveModelsJson, validateModelsConfig } from "./models-json.js";
 import { canonicalizeConfiguredMcpServer, isKnownCliMcpTypeAlias, normalizeConfiguredMcpServers, resolveXopcMcpTransportAlias } from "./mcp-config-normalize.js";
 import { formatThinkingLevels, listThinkingLevels, normalizeElevatedMode, normalizeReasoningLevel, normalizeThinkLevel, normalizeVerboseLevel, thinkLevelToNumber } from "../agent/transcript/thinking-types.js";
-import { diffConfigPaths } from "./diff.js";
 import { getWorkspacePath } from "./workspace-path-helpers.js";
 import { listAgentProfileMarkdownDirs, listAgentWorkspaceDirs } from "./workspace-dirs.js";
 import { ProfileManager, createProfile, deleteProfile, getCurrentProfile, getProfileManager, getProfileNameFromDir, getSwitchCommand, listProfiles, resolveProfileStateDir } from "./profile.js";
+import { diffConfigPaths } from "./diff.js";
 import { BASE_RELOAD_RULES, buildReloadPlan, matchReloadRule } from "./rules.js";
 import { ConfigHotReloader } from "./reload.js";
 //#region src/config/index.ts

package/dist/src/gateway/device-routes.js

@@ -19,9 +19,6 @@ function routeId(kind, url) {
 function resolveSecureDeviceRoutes(config) {
 	const tunnelStatus = getTunnelService().getStatus();
 	const candidates = [{
-		kind: "custom-https",
-		url: secureUrl(resolveReverseProxyPublicUrl(config))
-	}, {
 		kind: "xopc-secure-link",
 		url: tunnelStatus.state === "connected" ? secureUrl(tunnelStatus.publicUrl) : null
 	}];
@@ -30,6 +27,10 @@ function resolveSecureDeviceRoutes(config) {
 		kind: "tailscale",
 		url: secureUrl(`https://${tailscale.hostname}`)
 	});
+	candidates.push({
+		kind: "custom-https",
+		url: secureUrl(resolveReverseProxyPublicUrl(config))
+	});
 	const seen = /* @__PURE__ */ new Set();
 	const routes = [];
 	for (const candidate of candidates) {

package/dist/src/gateway/heartbeat/service.js

@@ -1,9 +1,9 @@
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
 import { shouldSilence, stripHeartbeatToken } from "../../heartbeat/tokens.js";
+import { appendCronEventLines } from "../../heartbeat/event-prompt.js";
 import { isWithinActiveHours } from "../../heartbeat/active-hours.js";
 import { isHeartbeatContentEmpty } from "../../heartbeat/content-check.js";
-import { appendCronEventLines } from "../../heartbeat/event-prompt.js";
 import { createHeartbeatWake } from "../../heartbeat/wake.js";
 import { resolveHeartbeatMdPath } from "../workspace-heartbeat-path.js";
 import { readFile } from "fs/promises";

package/dist/src/gateway/hono/app.js

@@ -225,6 +225,7 @@ function createHonoApp(config) {
 	authenticated.use(auth({
 		getGatewayAuth: () => service.currentConfig.gateway?.auth,
 		getResolvedAuth: () => service.getResolvedAuth(),
+		isPublicTunnelEnabled: () => service.currentConfig.tunnel?.enabled === true,
 		getTrustedProxyContext: () => ({
 			trustedProxies: service.currentConfig.gateway?.trustedProxies,
 			allowRealIpFallback: service.currentConfig.gateway?.allowRealIpFallback === true

package/dist/src/gateway/hono/middleware/auth.d.ts

@@ -4,13 +4,12 @@ export interface AuthConfig {
     /** Current gateway auth from config (for rate-limit settings); optional. */
     getGatewayAuth?: () => GatewayAuthConfig | undefined;
     getResolvedAuth?: () => ResolvedGatewayAuth;
+    isPublicTunnelEnabled?: () => boolean;
     getTrustedProxyContext?: () => {
         trustedProxies?: string[];
         allowRealIpFallback?: boolean;
     };
 }
-/** Exported for gateway security tests. */
-export declare function isQueryTokenAllowedPath(path: string, method: string): boolean;
 export declare function auth(config?: AuthConfig): import("hono").MiddlewareHandler<any, string, {}, (Response & import("hono").TypedResponse<{
     error: string;
     code: string;

package/dist/src/gateway/hono/middleware/auth.js

@@ -5,11 +5,12 @@ import { authenticateDeviceAccessToken, getDevice } from "../../../storage/sqlit
 import { safeEqualSecret } from "../../security/secret-equal.js";
 import { resolveClientIpFromRequest } from "../../client-ip.js";
 import { authPolicyConfig, buckets, resolveAuthRateLimit } from "../../rate-limit/buckets.js";
-import { getClientIpFromHeaders } from "../../security/loopback.js";
 import { resolveAuthTracking } from "../../rate-limit/auth-policy.js";
 import { isAuthRateLimitGloballyDisabled } from "../../rate-limit/env-flags.js";
 import "../../rate-limit/index.js";
+import { authenticateBrowserSession } from "../../../storage/sqlite/browser-session-repository.js";
 import { isChromeExtensionOrigin } from "../../security/origin-check.js";
+import { browserCookieRequestAllowed, readBrowserSessionCookie, writeBrowserSessionCookie } from "../../security/browser-session.js";
 import { authorizeTrustedProxy } from "../../trusted-proxy.js";
 import { setGatewayPrincipal } from "../../security/gateway-principal.js";
 import { createMiddleware } from "hono/factory";
@@ -30,21 +31,6 @@ function extractTokenFromHeader(authHeader) {
 	if (parts.length === 2 && parts[0].toLowerCase() === "bearer") return parts[1];
 	return authHeader;
 }
-/**
-* SECURITY: query-string tokens leak into server logs, Referer headers, and
-* browser history. We accept them only for avatar `<img>` loads, where an
-* Authorization header cannot be set. Realtime WebSocket authentication uses a
-* one-time ticket acquired over authenticated HTTP.
-*/
-function extractTokenFromQuery(url) {
-	return new URL(url).searchParams.get("token");
-}
-const AGENT_AVATAR_GET_PATH = /^\/api\/agents\/[^/]+\/avatar$/;
-/** Exported for gateway security tests. */
-function isQueryTokenAllowedPath(path, method) {
-	if (method === "GET" && AGENT_AVATAR_GET_PATH.test(path)) return true;
-	return false;
-}
 function resolveRemoteAddress(c) {
 	try {
 		return getConnInfo(c).remote.address;
@@ -53,17 +39,16 @@ function resolveRemoteAddress(c) {
 	}
 }
 function resolveMiddlewareClientIp(c, trustedProxies, allowRealIpFallback) {
-	if (trustedProxies?.length) return resolveClientIpFromRequest({
+	return resolveClientIpFromRequest({
 		remoteAddress: resolveRemoteAddress(c),
 		getHeader: (name) => c.req.header(name),
 		trustedProxies,
 		allowRealIpFallback
 	});
-	return getClientIpFromHeaders({ get: (name) => c.req.header(name) ?? void 0 });
 }
-function buildRateLimitContext(getGatewayAuth, clientIp, origin) {
+function buildRateLimitContext(getGatewayAuth, clientIp, origin, enforce = false) {
 	const cfg = resolveAuthRateLimit(getGatewayAuth?.()?.rateLimit);
-	if (!(cfg.enabled && !isAuthRateLimitGloballyDisabled())) return {
+	if (!(cfg.enabled && (enforce || !isAuthRateLimitGloballyDisabled()))) return {
 		active: false,
 		cfg,
 		trackingKey: void 0
@@ -101,7 +86,18 @@ function blockedResponse(c, retryAfterSec) {
 	}, 429);
 }
 function auth(config) {
-	const { getGatewayAuth, getResolvedAuth, getTrustedProxyContext } = config || {};
+	const { getGatewayAuth: readGatewayAuth, getResolvedAuth, getTrustedProxyContext, isPublicTunnelEnabled } = config || {};
+	const getGatewayAuth = () => {
+		const current = readGatewayAuth?.();
+		return isPublicTunnelEnabled?.() ? {
+			...current,
+			rateLimit: {
+				...current?.rateLimit,
+				enabled: true,
+				exemptLoopback: false
+			}
+		} : current;
+	};
 	return createMiddleware(async (c, next) => {
 		const resolvedAuth = getResolvedAuth?.();
 		if (!resolvedAuth) {
@@ -115,13 +111,17 @@ function auth(config) {
 			}, 401);
 		}
 		const authMode = resolvedAuth.mode;
+		if (isPublicTunnelEnabled?.() && authMode !== "token") return c.json({
+			error: "Unauthorized",
+			code: "unsafe_tunnel_auth"
+		}, 401);
 		if (authMode === "trusted-proxy") {
 			const proxyContext = getTrustedProxyContext?.();
 			const trustedProxies = proxyContext?.trustedProxies;
 			const trustedProxyConfig = resolvedAuth?.trustedProxy;
 			const clientIp = resolveMiddlewareClientIp(c, trustedProxies, proxyContext?.allowRealIpFallback);
 			const origin = c.req.header("origin");
-			const rl = buildRateLimitContext(getGatewayAuth, clientIp, origin);
+			const rl = buildRateLimitContext(getGatewayAuth, clientIp, origin, isPublicTunnelEnabled?.());
 			if (!trustedProxyConfig) {
 				log.warn({
 					path: c.req.path,
@@ -199,16 +199,34 @@ function auth(config) {
 		const proxyContext = getTrustedProxyContext?.();
 		const clientIp = resolveMiddlewareClientIp(c, proxyContext?.trustedProxies, proxyContext?.allowRealIpFallback);
 		const origin = c.req.header("origin");
-		const rl = buildRateLimitContext(getGatewayAuth, clientIp, origin);
+		const rl = buildRateLimitContext(getGatewayAuth, clientIp, origin, isPublicTunnelEnabled?.());
 		const authHeader = extractTokenFromHeader(c.req.header("authorization"));
+		const browserCookie = readBrowserSessionCookie(c);
+		if (!authHeader && browserCookie) {
+			if (!browserCookieRequestAllowed(c)) return c.json({
+				error: "Forbidden",
+				code: "csrf_rejected"
+			}, 403);
+			const session = authenticateBrowserSession(browserCookie, resolvedAuth);
+			if (!session) {
+				recordFailure(rl);
+				return c.json({
+					error: "Unauthorized",
+					code: "browser_session_expired"
+				}, 401);
+			}
+			if (session.renewed) writeBrowserSessionCookie(c, browserCookie, session.expiresAt);
+			setGatewayPrincipal(c, {
+				kind: "owner",
+				principalId: `browser:${session.sessionId}`,
+				browserSessionId: session.sessionId,
+				scopes: ["gateway.admin"]
+			});
+			recordSuccess(rl);
+			return next();
+		}
 		const requestPath = new URL(c.req.url).pathname;
-		const queryToken = authMode === "token" && isQueryTokenAllowedPath(requestPath, c.req.method) ? extractTokenFromQuery(c.req.url) : null;
-		if (!authHeader && queryToken === null && new URL(c.req.url).searchParams.has("token")) log.warn({
-			path: requestPath,
-			method: c.req.method,
-			clientIp
-		}, "Credential in query string rejected: use Authorization header for this endpoint");
-		const providedCredential = authHeader || queryToken;
+		const providedCredential = authHeader;
 		const browserExtensionOrigin = isChromeExtensionOrigin(origin) ? origin.toLowerCase() : void 0;
 		if (providedCredential && validateCredential(providedCredential, expectedCredential)) {
 			if (browserExtensionOrigin) return c.json({
@@ -294,4 +312,4 @@ function auth(config) {
 	});
 }
 //#endregion
-export { auth, isQueryTokenAllowedPath };
+export { auth };

package/dist/src/gateway/hono/middleware/strict-rate-limit.js

@@ -2,7 +2,6 @@ import { createLogger } from "../../../utils/logger/index.js";
 import { init_logger } from "../../../utils/logger.js";
 import { resolveClientIpFromRequest } from "../../client-ip.js";
 import { buckets } from "../../rate-limit/buckets.js";
-import { getClientIpFromHeaders } from "../../security/loopback.js";
 import "../../rate-limit/index.js";
 import { createMiddleware } from "hono/factory";
 import { getConnInfo } from "@hono/node-server/conninfo";
@@ -15,21 +14,18 @@ init_logger();
 const log = createLogger("Hono:StrictRateLimit");
 function resolveClientIp(c, deps) {
 	const { trustedProxies, allowRealIpFallback } = deps.getTrustedProxyContext();
-	if (trustedProxies?.length) {
-		let remoteAddress;
-		try {
-			remoteAddress = getConnInfo(c).remote.address;
-		} catch {
-			remoteAddress = void 0;
-		}
-		return resolveClientIpFromRequest({
-			remoteAddress,
-			getHeader: (name) => c.req.header(name),
-			trustedProxies,
-			allowRealIpFallback
-		});
+	let remoteAddress;
+	try {
+		remoteAddress = getConnInfo(c).remote.address;
+	} catch {
+		remoteAddress = void 0;
 	}
-	return getClientIpFromHeaders({ get: (name) => c.req.header(name) ?? void 0 });
+	return resolveClientIpFromRequest({
+		remoteAddress,
+		getHeader: (name) => c.req.header(name),
+		trustedProxies,
+		allowRealIpFallback
+	});
 }
 function createClientRateLimitMiddleware(deps, options) {
 	return createMiddleware(async (c, next) => {

package/dist/src/gateway/hono/routes/browser-session.d.ts

@@ -0,0 +1,3 @@
+import type { Hono } from 'hono';
+import type { AuthenticatedRouteDeps } from './deps.js';
+export declare function registerBrowserSessionRoutes(app: Hono, deps: AuthenticatedRouteDeps): void;

package/dist/src/gateway/hono/routes/browser-session.js

@@ -0,0 +1,43 @@
+import { BrowserSessionLimitError, createBrowserSession, deleteBrowserSession } from "../../../storage/sqlite/browser-session-repository.js";
+import { browserCookieRequestAllowed, clearBrowserSessionCookie, writeBrowserSessionCookie } from "../../security/browser-session.js";
+import { getGatewayPrincipal } from "../../security/gateway-principal.js";
+//#region src/gateway/hono/routes/browser-session.ts
+function registerBrowserSessionRoutes(app, deps) {
+	app.get("/api/browser-session", (c) => {
+		c.header("Cache-Control", "no-store");
+		const principal = getGatewayPrincipal(c);
+		return c.json({ sessionKey: principal.principalId });
+	});
+	app.post("/api/browser-session", deps.strictRateLimitMiddleware, (c) => {
+		const principal = getGatewayPrincipal(c);
+		if (principal.kind !== "owner" || !browserCookieRequestAllowed(c)) return c.json({ error: "Forbidden" }, 403);
+		let session;
+		try {
+			session = createBrowserSession(deps.service.getResolvedAuth(), principal.browserSessionId);
+		} catch (error) {
+			if (error instanceof BrowserSessionLimitError) return c.json({ error: "Browser session limit reached" }, 409);
+			throw error;
+		}
+		if (principal.browserSessionId) {
+			deps.service.realtime.disconnectPrincipal(principal.principalId);
+			deps.service.voiceRealtime.disconnectPrincipal(principal.principalId);
+		}
+		writeBrowserSessionCookie(c, session.token, session.expiresAt);
+		c.header("Cache-Control", "no-store");
+		return c.json({ sessionKey: `browser:${session.sessionId}` });
+	});
+	app.delete("/api/browser-session", (c) => {
+		if (!browserCookieRequestAllowed(c)) return c.json({ error: "Forbidden" }, 403);
+		const principal = getGatewayPrincipal(c);
+		if (principal.browserSessionId) {
+			deleteBrowserSession(principal.browserSessionId);
+			deps.service.realtime.disconnectPrincipal(principal.principalId);
+			deps.service.voiceRealtime.disconnectPrincipal(principal.principalId);
+		}
+		clearBrowserSessionCookie(c);
+		c.header("Cache-Control", "no-store");
+		return c.json({ ok: true });
+	});
+}
+//#endregion
+export { registerBrowserSessionRoutes };