@xopcai/xopc 0.0.272 → 0.0.273

package/README.md

@@ -28,14 +28,10 @@
 
 <p align="center">
   <a href="https://xopcai.github.io/xopc/xopc-desktop.mp4">
-    <img src="docs/public/xopc-desktop-preview.gif" alt="xopc desktop onboarding demo" width="960">
+    <img src="docs/public/xopc-desktop-preview.gif" alt="xopc desktop app demo" width="960">
   </a>
 </p>
 
-<p align="center">
-  <a href="https://xopcai.github.io/xopc/xopc-desktop.mp4"><strong>Watch the full onboarding video (1:02) →</strong></a>
-</p>
-
 > After setup, try: **“One thing I want to move forward this week is ____. Help me find the smallest credible next step.”**
 
 <details>

package/README.zh-CN.md

@@ -28,14 +28,10 @@
 
 <p align="center">
   <a href="https://xopcai.github.io/xopc/xopc-desktop.mp4">
-    <img src="docs/public/xopc-desktop-preview.gif" alt="xopc 桌面端 onboarding 演示" width="960">
+    <img src="docs/public/xopc-desktop-preview.gif" alt="xopc 桌面应用演示" width="960">
   </a>
 </p>
 
-<p align="center">
-  <a href="https://xopcai.github.io/xopc/xopc-desktop.mp4"><strong>观看完整 onboarding 视频（1:02）→</strong></a>
-</p>
-
 > 安装后可以直接告诉它：**“这周我最想推进的一件事是 ____。帮我找到最小但可信的下一步。”**
 
 <details>

package/dist/browser-ext/dist/assets/{auth-C1QI-uMG.js → auth-DkwOUI6_.js}

@@ -5977,12 +5977,12 @@ async function clearBrowserOutboxes() {
 }
 
 const PROFILE_KEY = "xopc.browser.profile";
-const PENDING_PAIRING_LINK_KEY = "xopc.browser.pending-pairing-link";
 const AUTO_CONNECT_KEY = "xopc.browser.auto-connect";
 const KEY_DATABASE = "xopc-browser-identity";
 const KEY_STORE = "identity";
 const KEY_NAME = "device-key";
 const NATIVE_HOST_NAME = "ai.xopc.browser";
+const GATEWAY_REQUEST_TIMEOUT_MS = 8e3;
 let refreshTask;
 async function browserPublicKeyThumbprint(jwk) {
   const canonical = JSON.stringify({ crv: jwk.crv, kty: jwk.kty, x: jwk.x, y: jwk.y });
@@ -6070,13 +6070,6 @@ function parseBrowserPairingLink(value) {
   }
   return payload;
 }
-async function takePendingPairingLink() {
-  const stored = await chrome.storage.session.get(PENDING_PAIRING_LINK_KEY);
-  const link = stored[PENDING_PAIRING_LINK_KEY];
-  if (typeof link !== "string") return void 0;
-  await chrome.storage.session.remove(PENDING_PAIRING_LINK_KEY);
-  return link;
-}
 function openIdentityDatabase() {
   return new Promise((resolve, reject) => {
     const request = indexedDB.open(KEY_DATABASE, 1);
@@ -6153,13 +6146,13 @@ async function verifyGateway(publicKey, payload, signature) {
     return false;
   }
 }
-async function requestGatewayOriginPermission(origin) {
-  const url = new URL(origin);
-  const pattern = `${url.origin}/*`;
-  if (await chrome.permissions.contains({ origins: [pattern] })) return;
-  if (!await chrome.permissions.request({ origins: [pattern] })) {
-    throw new Error("Gateway site permission was not granted");
-  }
+function requestGatewayOriginPermissions(origins) {
+  const patterns = origins.filter((origin) => {
+    const url = new URL(origin);
+    return !(url.protocol === "http:" && ["127.0.0.1", "localhost"].includes(url.hostname));
+  }).map((origin) => `${new URL(origin).origin}/*`);
+  if (!patterns.length) return Promise.resolve(true);
+  return chrome.permissions.request({ origins: patterns });
 }
 class GatewayHttpError extends Error {
   constructor(message, status) {
@@ -6170,11 +6163,22 @@ class GatewayHttpError extends Error {
   status;
 }
 async function post(origin, path, body) {
-  const response = await fetch(`${origin}${path}`, {
-    method: "POST",
-    headers: { "Content-Type": "application/json" },
-    body: JSON.stringify(body)
-  });
+  const controller = new AbortController();
+  const timeout = setTimeout(() => controller.abort(), GATEWAY_REQUEST_TIMEOUT_MS);
+  let response;
+  try {
+    response = await fetch(`${origin}${path}`, {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify(body),
+      signal: controller.signal
+    });
+  } catch (cause) {
+    if (controller.signal.aborted) throw new Error(`Gateway did not respond within ${GATEWAY_REQUEST_TIMEOUT_MS / 1e3} seconds`);
+    throw cause;
+  } finally {
+    clearTimeout(timeout);
+  }
   const json = await response.json().catch(() => ({}));
   if (!response.ok) {
     throw new GatewayHttpError(
@@ -6217,7 +6221,22 @@ async function signedPairingRequest(pair, payload, origin, requestId, action, co
   }
   return decoded;
 }
-async function refreshAccessToken(gatewayUrl, refreshToken, pair, gateway) {
+function shouldTryNextRoute(cause) {
+  return !(cause instanceof GatewayHttpError) || cause.status >= 500 || [404, 408, 425, 429].includes(cause.status);
+}
+async function signedPairingRequestAcrossRoutes(pair, payload, origins, requestId, action, completion) {
+  let lastRouteError;
+  for (const origin of origins) {
+    try {
+      return { origin, result: await signedPairingRequest(pair, payload, origin, requestId, action, completion) };
+    } catch (cause) {
+      if (!shouldTryNextRoute(cause)) throw cause;
+      lastRouteError = cause;
+    }
+  }
+  throw lastRouteError instanceof Error ? lastRouteError : new Error("No Gateway route could be reached");
+}
+async function refreshAccessToken(gatewayUrls, refreshToken, pair, gateway) {
   const nextRefreshToken = createRefreshToken();
   const requestId = crypto.randomUUID();
   const timestamp = Date.now();
@@ -6230,14 +6249,30 @@ ${nonce}
 ${requestId}
 ${nextRefreshToken}`;
   const signature = await sign(pair, proof);
-  const response = await post(gatewayUrl, "/api/device-auth/refresh", {
+  const body = {
     refreshToken,
     nextRefreshToken,
     requestId,
     timestamp,
     nonce,
     signature
-  });
+  };
+  let gatewayUrl;
+  let response;
+  let lastRouteError;
+  for (const origin of gatewayUrls) {
+    try {
+      response = await post(origin, "/api/device-auth/refresh", body);
+      gatewayUrl = origin;
+      break;
+    } catch (cause) {
+      if (!shouldTryNextRoute(cause)) throw cause;
+      lastRouteError = cause;
+    }
+  }
+  if (!response || !gatewayUrl) {
+    throw lastRouteError instanceof Error ? lastRouteError : new Error("No Gateway route could be reached");
+  }
   if (typeof response.signedPayload !== "string" || typeof response.signature !== "string" || !await verifyGateway(gateway.gatewayPublicKey, response.signedPayload, response.signature)) throw new Error("Gateway identity could not be verified");
   const responseProof = decodeJson(response.signedPayload);
   if (responseProof.purpose !== "device-refresh-v3" || responseProof.gatewayId !== gateway.gatewayId || responseProof.requestId !== requestId || responseProof.nonce !== nonce || !(responseProof.expiresAt > Date.now()) || responseProof.expiresAt > Date.now() + 6e4) throw new Error("Gateway refresh response does not match this request");
@@ -6245,55 +6280,63 @@ ${nextRefreshToken}`;
   if (!payload?.accessToken || !payload.accessTokenExpiresAt || payload.refreshToken !== nextRefreshToken) {
     throw new Error("Gateway returned invalid browser credentials");
   }
-  return payload;
+  return { ...payload, gatewayUrl };
 }
 function wait(milliseconds) {
   return new Promise((resolve) => setTimeout(resolve, milliseconds));
 }
 async function pairGateway(link, onApproval) {
   const payload = parseBrowserPairingLink(link);
+  const origins = [...new Set(payload.routes.map((route) => new URL(route.url).origin))];
+  const permissionTask = requestGatewayOriginPermissions(origins);
+  if (!await permissionTask) throw new Error("Gateway site permission was not granted");
   const pair = await getOrCreateKeyPair();
   const requestId = crypto.randomUUID();
   const initialRefreshToken = createRefreshToken();
-  let origin;
-  let result;
-  let lastRouteError;
-  for (const candidate of [...new Set(payload.routes.map((route) => new URL(route.url).origin))]) {
-    await requestGatewayOriginPermission(candidate);
-    try {
-      result = await signedPairingRequest(pair, payload, candidate, requestId, "request");
-      origin = candidate;
-      break;
-    } catch (cause) {
-      if (cause instanceof GatewayHttpError && cause.status < 500 && ![404, 408, 425, 429].includes(cause.status)) {
-        throw cause;
-      }
-      lastRouteError = cause;
-    }
-  }
-  if (!origin || !result) {
-    throw lastRouteError instanceof Error ? lastRouteError : new Error("No Gateway route could be reached");
-  }
+  let { origin, result } = await signedPairingRequestAcrossRoutes(
+    pair,
+    payload,
+    origins,
+    requestId,
+    "request"
+  );
   if (result.request.status === "pending") onApproval(result.request.confirmationCode);
   while (result.request.status === "pending") {
     await wait(1500);
-    result = await signedPairingRequest(pair, payload, origin, requestId, "status");
+    const response = await signedPairingRequestAcrossRoutes(
+      pair,
+      payload,
+      [origin, ...origins.filter((candidate) => candidate !== origin)],
+      requestId,
+      "status"
+    );
+    ({ origin, result } = response);
   }
   if (result.request.status !== "approved" && result.request.status !== "completed") {
     throw new Error(`Pairing ${result.request.status}`);
   }
   if (result.request.status !== "completed") {
-    result = await signedPairingRequest(pair, payload, origin, requestId, "complete", {
-      idempotencyKey: crypto.randomUUID(),
-      initialRefreshToken
-    });
+    const response = await signedPairingRequestAcrossRoutes(
+      pair,
+      payload,
+      [origin, ...origins.filter((candidate) => candidate !== origin)],
+      requestId,
+      "complete",
+      {
+        idempotencyKey: crypto.randomUUID(),
+        initialRefreshToken
+      }
+    );
+    ({ origin, result } = response);
   }
   if (!result.request.deviceId) throw new Error("Gateway did not register the browser");
-  const tokens = await refreshAccessToken(origin, initialRefreshToken, pair, payload);
+  const orderedOrigins = [origin, ...origins.filter((candidate) => candidate !== origin)];
+  const tokens = await refreshAccessToken(orderedOrigins, initialRefreshToken, pair, payload);
   const profile = {
     gatewayId: payload.gatewayId,
     gatewayName: result.gateway.name,
-    gatewayUrl: origin,
+    gatewayUrl: tokens.gatewayUrl,
+    gatewayUrls: [tokens.gatewayUrl, ...orderedOrigins.filter((candidate) => candidate !== tokens.gatewayUrl)],
     gatewayPublicKey: payload.gatewayPublicKey,
     deviceId: result.request.deviceId,
     refreshToken: tokens.refreshToken,
@@ -6314,8 +6357,13 @@ async function getAccessProfile() {
   if (profile.accessTokenExpiresAt > Date.now() + 3e4) return profile;
   if (refreshTask) return refreshTask;
   refreshTask = (async () => {
-    const tokens = await refreshAccessToken(profile.gatewayUrl, profile.refreshToken, await getOrCreateKeyPair(), profile);
-    const next = { ...profile, ...tokens };
+    const gatewayUrls = profile.gatewayUrls?.length ? profile.gatewayUrls : [profile.gatewayUrl];
+    const tokens = await refreshAccessToken(gatewayUrls, profile.refreshToken, await getOrCreateKeyPair(), profile);
+    const next = {
+      ...profile,
+      ...tokens,
+      gatewayUrls: [tokens.gatewayUrl, ...gatewayUrls.filter((candidate) => candidate !== tokens.gatewayUrl)]
+    };
     await chrome.storage.local.set({ [PROFILE_KEY]: next });
     return next;
   })();
@@ -6403,4 +6451,4 @@ async function revokeAndForgetProfile() {
   }
 }
 
-export { ENDPOINT_PROTOCOL_VERSION as E, PENDING_CONTEXT_KEY as P, RealtimeClient as R, TAB_BINDING_PREFIX as T, PENDING_PAIRING_LINK_KEY as a, activeTabId as b, canonicalJson as c, captureTabWithPermission as d, createBrowserEndpointHello as e, currentTabDescriptor as f, deleteBrowserOutbox as g, discoverLocalGateway as h, endpointToolContentSchema as i, gatewayFetch as j, getAccessProfile as k, parseBrowserPairingLink as l, readProfile as m, registerBrowserEndpoint as n, revokeAndForgetProfile as o, pairGateway as p, runWithTabSiteAccess as q, readBrowserOutbox as r, setAutoConnectEnabled as s, takePendingPairingLink as t, writeBrowserOutbox as w };
+export { ENDPOINT_PROTOCOL_VERSION as E, PENDING_CONTEXT_KEY as P, RealtimeClient as R, TAB_BINDING_PREFIX as T, activeTabId as a, captureTabWithPermission as b, canonicalJson as c, createBrowserEndpointHello as d, currentTabDescriptor as e, deleteBrowserOutbox as f, discoverLocalGateway as g, endpointToolContentSchema as h, gatewayFetch as i, getAccessProfile as j, readProfile as k, registerBrowserEndpoint as l, revokeAndForgetProfile as m, runWithTabSiteAccess as n, pairGateway as p, readBrowserOutbox as r, setAutoConnectEnabled as s, writeBrowserOutbox as w };

package/dist/browser-ext/dist/background.js

@@ -1,4 +1,4 @@
-import { i as endpointToolContentSchema, E as ENDPOINT_PROTOCOL_VERSION, c as canonicalJson, T as TAB_BINDING_PREFIX, d as captureTabWithPermission, P as PENDING_CONTEXT_KEY, l as parseBrowserPairingLink, a as PENDING_PAIRING_LINK_KEY, m as readProfile, n as registerBrowserEndpoint, k as getAccessProfile, R as RealtimeClient, e as createBrowserEndpointHello, j as gatewayFetch } from './assets/auth-C1QI-uMG.js';
+import { h as endpointToolContentSchema, E as ENDPOINT_PROTOCOL_VERSION, c as canonicalJson, T as TAB_BINDING_PREFIX, b as captureTabWithPermission, P as PENDING_CONTEXT_KEY, k as readProfile, l as registerBrowserEndpoint, j as getAccessProfile, R as RealtimeClient, d as createBrowserEndpointHello, i as gatewayFetch } from './assets/auth-DkwOUI6_.js';
 
 const BROWSER_EXTENSION_PROTOCOL_VERSION = 4;
 const BROWSER_CONTROL_ENDPOINT_TOOL_NAME = "browser.control";
@@ -1253,22 +1253,6 @@ function connectWithLogging() {
     if (generation !== connectionGeneration && !realtime) connectWithLogging();
   });
 }
-async function stagePairingInvite(message, sender) {
-  if (typeof message.pairingLink !== "string" || !sender.url || !sender.tab?.id) {
-    throw new Error("Pairing handoff is missing its source tab");
-  }
-  const source = new URL(sender.url);
-  const invitation = new URL(message.pairingLink);
-  if (source.href !== invitation.href || source.protocol !== "https:" || source.hostname !== "link.xopc.ai" || source.pathname !== "/connect") {
-    throw new Error("Pairing handoff source is not trusted");
-  }
-  parseBrowserPairingLink(invitation.href);
-  const tasks = [
-    chrome.storage.session.set({ [PENDING_PAIRING_LINK_KEY]: invitation.href })
-  ];
-  if (message.open) tasks.push(chrome.sidePanel.open({ tabId: sender.tab.id }));
-  await Promise.all(tasks);
-}
 chrome.runtime.onMessage.addListener((message, sender, sendResponse) => {
   if (message.type === "browser/get-status") {
     sendResponse({ connected: Boolean(endpointClaim), transport: "gateway-realtime", error: lastConnectionError });
@@ -1278,11 +1262,6 @@ chrome.runtime.onMessage.addListener((message, sender, sendResponse) => {
     disconnect();
     connectWithLogging();
     sendResponse({ ok: true });
-  } else if (message.type === "browser/stage-pairing-invite") {
-    void stagePairingInvite(message, sender).then(() => sendResponse({ ok: true })).catch((cause) => sendResponse({
-      ok: false,
-      error: cause instanceof Error ? cause.message : String(cause)
-    }));
   } else {
     sendResponse({ ok: false, error: `Unknown message: ${message.type}` });
   }

package/dist/browser-ext/dist/sidepanel.html

@@ -5,7 +5,7 @@
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
     <title>xopc</title>
     <script type="module" crossorigin src="./sidepanel.js"></script>
-    <link rel="modulepreload" crossorigin href="./assets/auth-C1QI-uMG.js">
+    <link rel="modulepreload" crossorigin href="./assets/auth-DkwOUI6_.js">
     <link rel="stylesheet" crossorigin href="./assets/sidepanel-C86O7q5Y.css">
   </head>
   <body>

package/dist/browser-ext/dist/sidepanel.js

@@ -1,4 +1,4 @@
-import { R as RealtimeClient, j as gatewayFetch, b as activeTabId, r as readBrowserOutbox, w as writeBrowserOutbox, g as deleteBrowserOutbox, f as currentTabDescriptor, T as TAB_BINDING_PREFIX, k as getAccessProfile, q as runWithTabSiteAccess, P as PENDING_CONTEXT_KEY, d as captureTabWithPermission, p as pairGateway, s as setAutoConnectEnabled, t as takePendingPairingLink, m as readProfile, h as discoverLocalGateway, a as PENDING_PAIRING_LINK_KEY, o as revokeAndForgetProfile } from './assets/auth-C1QI-uMG.js';
+import { R as RealtimeClient, i as gatewayFetch, a as activeTabId, r as readBrowserOutbox, w as writeBrowserOutbox, f as deleteBrowserOutbox, e as currentTabDescriptor, T as TAB_BINDING_PREFIX, j as getAccessProfile, n as runWithTabSiteAccess, P as PENDING_CONTEXT_KEY, b as captureTabWithPermission, p as pairGateway, s as setAutoConnectEnabled, k as readProfile, g as discoverLocalGateway, m as revokeAndForgetProfile } from './assets/auth-DkwOUI6_.js';
 
 true              &&(function polyfill() {
   const relList = document.createElement("link").relList;
@@ -27544,6 +27544,22 @@ function watchSidePanelTheme(gatewayUrl) {
 async function reconnectBrowserBridge() {
   await chrome.runtime.sendMessage({ type: "browser/reconnect" }).catch(() => void 0);
 }
+function pairingErrorMessage(cause) {
+  const message = cause instanceof Error ? cause.message : String(cause);
+  if (message === "Gateway site permission was not granted") {
+    return "Chrome needs access to the Gateway address. Select Connect again and allow the site permission.";
+  }
+  if (message === "PAIRING_EXPIRED" || message === "Pairing expired" || message === "Pairing link has expired") {
+    return "This invitation expired. Create and copy a new invitation from Device access.";
+  }
+  if (message === "PAIRING_DEVICE_MISMATCH") {
+    return "This invitation was created for a phone. Create a browser invitation instead.";
+  }
+  if (message === "No Gateway route could be reached") {
+    return "None of the Gateway addresses responded. Check that the Gateway is online and its secure connection is active.";
+  }
+  return message;
+}
 function SidePanelApp() {
   const [profile, setProfile] = reactExports.useState();
   const [pairingLink, setPairingLink] = reactExports.useState("");
@@ -27558,6 +27574,7 @@ function SidePanelApp() {
     pairingStarted.current = true;
     setState("pairing");
     setError("");
+    setConfirmationCode("");
     setPairingLink(link);
     try {
       const paired = await pairGateway(link, setConfirmationCode);
@@ -27566,7 +27583,7 @@ function SidePanelApp() {
       setProfile(paired);
       setState("online");
     } catch (cause) {
-      setError(cause instanceof Error ? cause.message : String(cause));
+      setError(pairingErrorMessage(cause));
       setState("unpaired");
     } finally {
       pairingStarted.current = false;
@@ -27576,11 +27593,6 @@ function SidePanelApp() {
     if (initializationStarted.current) return;
     initializationStarted.current = true;
     void (async () => {
-      const handedOff = await takePendingPairingLink();
-      if (handedOff) {
-        await connect(handedOff);
-        return;
-      }
       const stored = await readProfile();
       if (stored) {
         await reconnectBrowserBridge();
@@ -27597,16 +27609,6 @@ function SidePanelApp() {
       await connect(local.pairingLink);
     })();
   }, [connect]);
-  reactExports.useEffect(() => {
-    const handleStorageChange = (changes, area) => {
-      if (area !== "session" || !changes[PENDING_PAIRING_LINK_KEY]?.newValue) return;
-      void takePendingPairingLink().then((link) => {
-        if (link) void connect(link);
-      });
-    };
-    chrome.storage.onChanged.addListener(handleStorageChange);
-    return () => chrome.storage.onChanged.removeListener(handleStorageChange);
-  }, [connect]);
   reactExports.useEffect(() => watchSidePanelTheme(profile?.gatewayUrl), [profile?.gatewayUrl]);
   async function disconnect() {
     await revokeAndForgetProfile();
@@ -27641,18 +27643,18 @@ function SidePanelApp() {
     state !== "online" ? /* @__PURE__ */ jsxRuntimeExports.jsxs("section", { className: "center", children: [
       state === "loading" ? /* @__PURE__ */ jsxRuntimeExports.jsx("div", { className: "muted", children: "Loading…" }) : null,
       state === "unpaired" || state === "pairing" ? /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "card", children: [
-        /* @__PURE__ */ jsxRuntimeExports.jsx("h1", { children: "Connect to xopc" }),
+        /* @__PURE__ */ jsxRuntimeExports.jsx("h1", { children: "Connect a Gateway" }),
         localPairingLink ? /* @__PURE__ */ jsxRuntimeExports.jsxs(jsxRuntimeExports.Fragment, { children: [
           /* @__PURE__ */ jsxRuntimeExports.jsx("p", { className: "muted", children: "A local xopc Gateway was found. xopc connects automatically on this computer." }),
           /* @__PURE__ */ jsxRuntimeExports.jsx("button", { className: "primary local-connect", onClick: () => void connect(localPairingLink), disabled: state === "pairing", children: state === "pairing" ? "Connecting…" : "Retry local connection" }),
-          /* @__PURE__ */ jsxRuntimeExports.jsx("div", { className: "pairing-divider", children: "or use a pairing link" })
+          /* @__PURE__ */ jsxRuntimeExports.jsx("div", { className: "pairing-divider", children: "or paste an invitation" })
         ] }) : /* @__PURE__ */ jsxRuntimeExports.jsxs(jsxRuntimeExports.Fragment, { children: [
-          /* @__PURE__ */ jsxRuntimeExports.jsx("p", { className: "muted", children: "Connect to a local Gateway, or paste a pairing link for another Gateway." }),
+          /* @__PURE__ */ jsxRuntimeExports.jsx("p", { className: "muted", children: "Connect locally, or paste the one-time invitation copied from Device access." }),
           /* @__PURE__ */ jsxRuntimeExports.jsx("button", { className: "primary local-connect", onClick: () => void connectLocalGateway(), disabled: state === "pairing", children: state === "pairing" ? "Connecting…" : "Connect local Gateway" }),
-          /* @__PURE__ */ jsxRuntimeExports.jsx("div", { className: "pairing-divider", children: "or use a pairing link" })
+          /* @__PURE__ */ jsxRuntimeExports.jsx("div", { className: "pairing-divider", children: "or paste an invitation" })
         ] }),
         /* @__PURE__ */ jsxRuntimeExports.jsxs("label", { className: "field", children: [
-          "Pairing link",
+          "One-time invitation",
           /* @__PURE__ */ jsxRuntimeExports.jsx("textarea", { rows: 4, value: pairingLink, onChange: (event) => setPairingLink(event.target.value), disabled: state === "pairing" })
         ] }),
         confirmationCode ? /* @__PURE__ */ jsxRuntimeExports.jsxs(jsxRuntimeExports.Fragment, { children: [

package/dist/browser-ext/manifest.json

@@ -2,7 +2,7 @@
   "manifest_version": 3,
   "minimum_chrome_version": "120",
   "name": "xopc",
-  "version": "0.0.272",
+  "version": "0.0.273",
   "description": "Chat with xopc and explicitly share or control the current page.",
   "key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnpr4vpLC/nmvy+wiOWk3SWlp2nEZkFijfk8ivGw7StNZgCK90nOMvwhdEtlkk3GOWDvdVnq8HxCsM3UNQ8FnGUyerpH1FJXqXuradxeHf8ZxFjiQU/mIWfnKbUuONWQORon3/pigyoXoK/VUXgg0Wbm/rbVwsS0bv+25R6m+mZgBspOLeKuoH7ivhL+48WV6POtMBsFPZweY26477EM7ukh+56Ff5ENevB8ymxBBn7qK5ZoeZd2a23U8ioX5TsHfe6fnrjitPWjIxD8G0NoKQxcaa/Mo+xs+T6UiLKxP0wjz5bm7jB5H+CXtkRJqzBWUB0h+RSLJckzZfA8BAJrRwIDAQAB",
   "permissions": [
@@ -28,17 +28,6 @@
     "service_worker": "dist/background.js",
     "type": "module"
   },
-  "content_scripts": [
-    {
-      "matches": [
-        "https://link.xopc.ai/connect*"
-      ],
-      "js": [
-        "dist/pairing-handoff.js"
-      ],
-      "run_at": "document_idle"
-    }
-  ],
   "side_panel": {
     "default_path": "dist/sidepanel.html"
   },

package/dist/extensions/telegram/xopc.extension.json

@@ -2,7 +2,7 @@
   "id": "telegram",
   "name": "Telegram Channel",
   "description": "Bundled Telegram Bot channel (private workspace sources; ships inside @xopcai/xopc dist/)",
-  "version": "0.0.272",
+  "version": "0.0.273",
   "kind": "channel",
   "main": "src/index.js",
   "channels": [

package/dist/gateway/static/root/assets/{activity-store-DffqjeqQ.js → activity-store-cF7IX2RP.js}

@@ -1 +1 @@
-import{p as e}from"./locale-store-CRNble2Z.js";var t=`xopc.activity-center.v1`,n=80,r=720*60*60*1e3;function i(e){return e===`error`?`failed`:e===`warning`?`attention`:`done`}function a(){if(!(typeof window>`u`))return window.location.hash.replace(/^#/,``)||`${window.location.pathname}${window.location.search}`||void 0}function o(){try{let e=globalThis.localStorage?.getItem(t);if(!e)return[];let i=JSON.parse(e);if(!Array.isArray(i.items))return[];let a=Date.now()-r,o=i.items.filter(e=>e&&typeof e.id==`string`&&typeof e.title==`string`).filter(e=>Number.isFinite(e.updatedAt)&&e.updatedAt>=a).slice(0,n);return o.length!==i.items.length&&s(o),o}catch{return[]}}function s(e){try{globalThis.localStorage?.setItem(t,JSON.stringify({items:e}))}catch{}}function c(e){return`${e.toString(36)}-${Math.random().toString(36).slice(2,8)}`}var l=e(e=>({items:o(),add:t=>e(e=>{let r=t.title.trim();if(!r)return e;let o=Date.now(),l=t.tone??`info`,u=t.dedupeKey?e.items.findIndex(e=>e.dedupeKey===t.dedupeKey):-1,d=[{id:u>=0?e.items[u].id:c(o),tone:l,status:t.status??i(l),title:r,message:t.message?.trim()||void 0,source:t.source?.trim()||void 0,href:t.href??a(),dedupeKey:t.dedupeKey,createdAt:u>=0?e.items[u].createdAt:o,updatedAt:o,read:t.read??!1,occurrences:u>=0?e.items[u].occurrences+1:1},...u>=0?e.items.filter((e,t)=>t!==u):e.items].slice(0,n);return s(d),{items:d}}),markAllRead:()=>e(e=>{let t=e.items.map(e=>({...e,read:!0}));return s(t),{items:t}}),remove:t=>e(e=>{let n=e.items.filter(e=>e.id!==t);return s(n),{items:n}}),clearFinished:()=>e(e=>{let t=e.items.filter(e=>e.status!==`done`);return s(t),{items:t}}),clear:()=>{s([]),e({items:[]})}}));function u(e){l.getState().add(e)}export{u as t};
+import{p as e}from"./locale-store-BBSCIl4I.js";var t=`xopc.activity-center.v1`,n=80,r=720*60*60*1e3;function i(e){return e===`error`?`failed`:e===`warning`?`attention`:`done`}function a(){if(!(typeof window>`u`))return window.location.hash.replace(/^#/,``)||`${window.location.pathname}${window.location.search}`||void 0}function o(){try{let e=globalThis.localStorage?.getItem(t);if(!e)return[];let i=JSON.parse(e);if(!Array.isArray(i.items))return[];let a=Date.now()-r,o=i.items.filter(e=>e&&typeof e.id==`string`&&typeof e.title==`string`).filter(e=>Number.isFinite(e.updatedAt)&&e.updatedAt>=a).slice(0,n);return o.length!==i.items.length&&s(o),o}catch{return[]}}function s(e){try{globalThis.localStorage?.setItem(t,JSON.stringify({items:e}))}catch{}}function c(e){return`${e.toString(36)}-${Math.random().toString(36).slice(2,8)}`}var l=e(e=>({items:o(),add:t=>e(e=>{let r=t.title.trim();if(!r)return e;let o=Date.now(),l=t.tone??`info`,u=t.dedupeKey?e.items.findIndex(e=>e.dedupeKey===t.dedupeKey):-1,d=[{id:u>=0?e.items[u].id:c(o),tone:l,status:t.status??i(l),title:r,message:t.message?.trim()||void 0,source:t.source?.trim()||void 0,href:t.href??a(),dedupeKey:t.dedupeKey,createdAt:u>=0?e.items[u].createdAt:o,updatedAt:o,read:t.read??!1,occurrences:u>=0?e.items[u].occurrences+1:1},...u>=0?e.items.filter((e,t)=>t!==u):e.items].slice(0,n);return s(d),{items:d}}),markAllRead:()=>e(e=>{let t=e.items.map(e=>({...e,read:!0}));return s(t),{items:t}}),remove:t=>e(e=>{let n=e.items.filter(e=>e.id!==t);return s(n),{items:n}}),clearFinished:()=>e(e=>{let t=e.items.filter(e=>e.status!==`done`);return s(t),{items:t}}),clear:()=>{s([]),e({items:[]})}}));function u(e){l.getState().add(e)}export{u as t};