@xopcai/xopc 0.0.273 → 0.0.275

package/dist/src/gateway/hono/routes/devices.js

@@ -1,4 +1,4 @@
-import { devicePairingTargetKindSchema } from "../../../../packages/gateway-contract/src/device-pairing.js";
+import { devicePairingInvitationPayloadSchema, devicePairingTargetKindSchema, formatBrowserPairingInvitation } from "../../../../packages/gateway-contract/src/device-pairing.js";
 import { listDevices, revokeDevice, rotateDeviceRefreshToken } from "../../../storage/sqlite/device-access-repository.js";
 import { getGatewayIdentityPublicKeyRaw, getOrCreateGatewayIdentity, signGatewayPayload } from "../../../storage/sqlite/gateway-identity-repository.js";
 import { createDevicePairingSetup, isDevicePairingSetupActive } from "../../../storage/sqlite/device-pairing-repository.js";
@@ -6,7 +6,7 @@ import { resolveSecureDeviceRoutes } from "../../device-routes.js";
 import { buckets } from "../../rate-limit/buckets.js";
 import "../../rate-limit/index.js";
 import { getGatewayPrincipal } from "../../security/gateway-principal.js";
-import { registerPairingApprovalAdminRoutes, registerPairingApprovalPublicRoutes } from "./device-pairing-approval.js";
+import { pairingClientKey, registerPairingApprovalAdminRoutes, registerPairingApprovalPublicRoutes } from "./device-pairing-approval.js";
 import os from "node:os";
 import { z } from "zod";
 import { bodyLimit } from "hono/body-limit";
@@ -21,10 +21,10 @@ const refreshRequestSchema = z.strictObject({
 });
 const pairingProbeSchema = z.strictObject({ pairingId: z.string().uuid() });
 const pairingSetupSchema = z.strictObject({ targetKind: devicePairingTargetKindSchema });
-function pairingLinkPayload(input) {
-	return Buffer.from(JSON.stringify(input)).toString("base64url");
+function pairingPayload(input) {
+	return Buffer.from(JSON.stringify(devicePairingInvitationPayloadSchema.parse(input))).toString("base64url");
 }
-function registerDeviceAuthPublicRoutes(app) {
+function registerDeviceAuthPublicRoutes(app, options) {
 	app.post("/api/gateway-identity/challenge", bodyLimit({ maxSize: 512 }), async (c) => {
 		const budget = buckets.identityChallenge().consume("gateway");
 		if (!budget.allowed) {
@@ -46,7 +46,7 @@ function registerDeviceAuthPublicRoutes(app) {
 			signature: signGatewayPayload(signedPayload)
 		});
 	});
-	registerPairingApprovalPublicRoutes(app);
+	registerPairingApprovalPublicRoutes(app, options);
 	app.post("/api/device-auth/refresh", async (c) => {
 		const parsed = refreshRequestSchema.safeParse(await c.req.json().catch(() => null));
 		if (!parsed.success) return c.json({
@@ -81,21 +81,37 @@ function registerDeviceAuthPublicRoutes(app) {
 			}, 401);
 		}
 	});
-	app.post("/api/device-pairing/probe", async (c) => {
+	app.post("/api/device-pairing/probe", bodyLimit({ maxSize: 512 }), async (c) => {
+		const clientKey = pairingClientKey(c, options);
+		const blocked = buckets.pairingExchange().check(clientKey);
+		if (blocked.blocked) {
+			c.header("Retry-After", String(blocked.retryAfterSec));
+			return c.json({
+				ok: false,
+				error: {
+					code: "PAIRING_RATE_LIMITED",
+					message: "Too many failed pairing attempts"
+				}
+			}, 429);
+		}
 		const parsed = pairingProbeSchema.safeParse(await c.req.json().catch(() => null));
-		if (!parsed.success || !isDevicePairingSetupActive(parsed.data.pairingId)) return c.json({
-			ok: false,
-			error: {
-				code: "PAIRING_NOT_FOUND",
-				message: "Pairing setup not found"
-			}
-		}, 404);
+		if (!parsed.success || !isDevicePairingSetupActive(parsed.data.pairingId)) {
+			buckets.pairingExchange().fail(clientKey);
+			return c.json({
+				ok: false,
+				error: {
+					code: "PAIRING_NOT_FOUND",
+					message: "Pairing setup not found"
+				}
+			}, 404);
+		}
 		const identity = getOrCreateGatewayIdentity();
 		const payload = Buffer.from(JSON.stringify({
 			gatewayId: identity.id,
 			pairingId: parsed.data.pairingId,
 			issuedAt: Date.now()
 		})).toString("base64url");
+		buckets.pairingExchange().succeed(clientKey);
 		return c.json({
 			ok: true,
 			signedPayload: payload,
@@ -136,7 +152,7 @@ function registerDeviceRoutes(authenticated, deps) {
 		}, 409);
 		const setup = createDevicePairingSetup(routes, Date.now(), { targetKind: parsed.data.targetKind });
 		const identity = getOrCreateGatewayIdentity();
-		const encoded = pairingLinkPayload({
+		const encoded = pairingPayload({
 			version: 3,
 			pairingToken: setup.token,
 			gatewayId: identity.id,
@@ -146,11 +162,12 @@ function registerDeviceRoutes(authenticated, deps) {
 			targetKind: setup.targetKind,
 			expiresAt: setup.expiresAt
 		});
+		const invitation = setup.targetKind === "mobile" ? { universalLink: `https://link.xopc.ai/connect#p=${encoded}` } : { browserInvitation: formatBrowserPairingInvitation(encoded) };
 		return c.json({
 			ok: true,
 			setup: {
 				id: setup.id,
-				universalLink: `https://link.xopc.ai/connect#p=${encoded}`,
+				...invitation,
 				expiresAt: setup.expiresAt,
 				routes,
 				protocolVersion: 3,

package/dist/src/gateway/hono/routes/endpoint-tools.js

@@ -177,6 +177,15 @@ function registerEndpointToolRoutes(authenticated, deps) {
 				message: "Invalid endpoint binding"
 			}
 		}, 400);
+		const gatewayPrincipal = getGatewayPrincipal(c);
+		const endpoint = deps.service.endpointTools.registry.get(parsed.data.endpointId);
+		if (gatewayPrincipal.kind === "device" && (!endpoint || !gatewayPrincipal.deviceId || endpoint.principalId !== gatewayPrincipal.deviceId)) return c.json({
+			ok: false,
+			error: {
+				code: "FORBIDDEN",
+				message: "Endpoint does not belong to this device"
+			}
+		}, 403);
 		try {
 			const binding = deps.service.endpointTools.bindings.bind(c.req.param("sessionKey"), parsed.data.endpointId);
 			return c.json({

package/dist/src/gateway/hono/routes/models.js

@@ -28,6 +28,10 @@ init_providers();
 init_credentials();
 init_model_catalog_store();
 init_plugin_registry();
+function catalogDisplayNames(providerId, modelId) {
+	const model = getModelCatalogStore().getSource(providerId)?.models.find((item) => item.id === modelId);
+	return model?.displayNames ? { displayNames: model.displayNames } : {};
+}
 function readModelsJsonProviderApiKey(providerId) {
 	const { config } = loadModelsJson(resolveModelsJsonPath());
 	const key = (config.providers?.[providerId.trim()])?.apiKey;
@@ -292,6 +296,7 @@ function registerModelsRoutes(authenticated, deps) {
 		const models = sortModelsForPicker(await getAvailableModels()).map((m) => ({
 			id: `${m.provider}/${m.id}`,
 			name: m.name,
+			...catalogDisplayNames(m.provider, m.id),
 			provider: m.provider,
 			contextWindow: m.contextWindow ?? 128e3,
 			maxTokens: m.maxTokens ?? 4096,
@@ -656,6 +661,7 @@ function registerModelsRoutes(authenticated, deps) {
 		const models = sortModelsForPicker(allModels).map((m) => ({
 			id: `${m.provider}/${m.id}`,
 			name: m.name,
+			...catalogDisplayNames(m.provider, m.id),
 			provider: m.provider,
 			contextWindow: m.contextWindow ?? 128e3,
 			maxTokens: m.maxTokens ?? 4096,

package/dist/src/gateway/hono/routes/session-input-handler.d.ts

@@ -136,7 +136,7 @@ export declare function replaceLatestSessionTurn(c: Context, deps: Authenticated
         code: "TARGET_NOT_FOUND" | "NOT_LATEST" | "SESSION_BUSY" | "BAD_REQUEST" | "CONTEXT_UNAVAILABLE";
         message: string;
     };
-}, 400 | 404 | 409, "json">) | (Response & import("hono").TypedResponse<{
+}, 404 | 400 | 409, "json">) | (Response & import("hono").TypedResponse<{
     ok: true;
     payload: {
         sessionKey: string;

package/dist/src/gateway/hono/routes/session-input-handler.js

@@ -1,9 +1,9 @@
 import { browserPageContextsInputSchema } from "../../../../packages/gateway-contract/src/browser-page-context.js";
 import { endpointTurnClaimSchema } from "../../../../packages/endpoint-tools-protocol/src/index.js";
 import { init_providers, resolveModel } from "../../../providers/index.js";
+import { validateWebchatAttachments, validateWebchatContent } from "../../chat-limits.js";
 import { parseTurnContextRefs } from "../../../agent/source-context/types.js";
 import { getModelThinking } from "../../../providers/model-thinking.js";
-import { validateWebchatAttachments, validateWebchatContent } from "../../chat-limits.js";
 import { withModelConfigLock } from "../../../session/model-config-lock.js";
 import { browserPageContextToAgentContext } from "../../../agent/source-context/browser-page.js";
 //#region src/gateway/hono/routes/session-input-handler.ts

package/dist/src/gateway/hono/routes/side-chats.js

@@ -1,7 +1,7 @@
 import { chooseModelThinking } from "../../../../packages/gateway-contract/src/model-selection.js";
 import { init_providers, resolveModel } from "../../../providers/index.js";
-import { getModelThinking } from "../../../providers/model-thinking.js";
 import { validateWebchatAttachments, validateWebchatContent } from "../../chat-limits.js";
+import { getModelThinking } from "../../../providers/model-thinking.js";
 import { validateSideChatSelections } from "../../side-chat/context-snapshot.js";
 import { SideChatError, parseThinkingLevel } from "../../side-chat/manager.js";
 import "../../side-chat/index.js";

package/dist/src/gateway/hono/routes/tunnel.js

@@ -1,3 +1,5 @@
+import { createLogger } from "../../../utils/logger/index.js";
+import { init_logger } from "../../../utils/logger.js";
 import { init_public_url, validatePublicUrl } from "../../../config/public-url.js";
 import { TUNNEL_REGISTRATION_SECRET_REQUIRED_CODE, TunnelRegistrationSecretError, getTunnelRegistrationSecretMeta, readTunnelRegistrationSecretFromConfigOnly, resolveTunnelBrokerUrl } from "../../../tunnel/env.js";
 import { logTunnelAudit } from "../../../tunnel/tunnel-audit.js";
@@ -9,9 +11,11 @@ import { applyTunnelConsentToConfig, mergeTunnelConfigPatch, setTunnelEnabledInC
 import { getGatewayPrincipal } from "../../security/gateway-principal.js";
 import { consumeTunnelMutationLimit } from "../../../tunnel/tunnel-rate-limit.js";
 import "../../../tunnel/index.js";
-import { provisionTunnelRegistrationKey } from "../../../tunnel/xopc-cloud-registration.js";
+import { TunnelRegistrationProvisionError, provisionTunnelRegistrationKey } from "../../../tunnel/xopc-cloud-registration.js";
 //#region src/gateway/hono/routes/tunnel.ts
+init_logger();
 init_public_url();
+const log = createLogger("Gateway:Tunnel");
 async function configureTunnelFromService(deps, opts) {
 	await configureTunnelFromGatewayConfig(deps.service.currentConfig, opts);
 }
@@ -161,6 +165,10 @@ function registerTunnelRoutes(authenticated, deps) {
 	});
 	authenticated.post("/api/tunnel/registration-key", tunnelMutationLimit, async (c) => {
 		const config = deps.service.currentConfig;
+		if (readTunnelRegistrationSecretFromConfigOnly(config)) return c.json({
+			ok: true,
+			reused: true
+		});
 		try {
 			const merged = mergeTunnelConfigPatch(config, { registrationSecret: await provisionTunnelRegistrationKey() });
 			if (merged.ok === false) return c.json({
@@ -176,9 +184,33 @@ function registerTunnelRoutes(authenticated, deps) {
 			return c.json({ ok: true });
 		} catch (error) {
 			const message = error instanceof Error ? error.message : String(error);
+			if (error instanceof TunnelRegistrationProvisionError) {
+				const status = error.code === "tunnel_key_limit_reached" ? 409 : error.code === "tunnel_oauth_required" ? 403 : 502;
+				log.warn({
+					err: error,
+					code: error.code,
+					upstreamStatus: error.status,
+					phase: "registration_key"
+				}, `Tunnel registration key failed: ${message}`);
+				return c.json({
+					ok: false,
+					error: {
+						code: error.code,
+						message
+					}
+				}, status);
+			}
+			log.warn({
+				err: error,
+				errorMessage: message,
+				phase: "registration_key"
+			}, `Tunnel registration key failed: ${message}`);
 			return c.json({
 				ok: false,
-				error: message
+				error: {
+					code: "tunnel_registration_failed",
+					message
+				}
 			}, 502);
 		}
 	});

package/dist/src/gateway/hono/routes/voice.js

@@ -19,8 +19,8 @@ import { resolveOmniRoute } from "../../../voice/realtime/omniRoute.js";
 import { VoiceSessionCreationError, resolveStreamingStt, resolveStreamingTts } from "../../../voice/realtime/runtime.js";
 import { getGatewayPrincipal } from "../../security/gateway-principal.js";
 import { createGatewayRouteLogger } from "../lib/route-logger.js";
-import { listLocalVoiceModelStatuses, removeLocalVoiceModel, startLocalVoiceModelInstall } from "../../../voice/local/model-manager.js";
 import { listTtsProvidersForApi } from "../../../voice/tts/list-providers.js";
+import { listLocalVoiceModelStatuses, removeLocalVoiceModel, startLocalVoiceModelInstall } from "../../../voice/local/model-manager.js";
 import { z } from "zod";
 //#region src/gateway/hono/routes/voice.ts
 init_providers();

package/dist/src/gateway/rate-limit/buckets.js

@@ -144,7 +144,8 @@ var BucketRegistry = class {
 		if (!this.pairingExchangeLimiter) this.pairingExchangeLimiter = new FailureLimiter({
 			maxFailures: 30,
 			windowMs: 5 * 6e4,
-			blockDurationMs: 5 * 6e4
+			blockDurationMs: 5 * 6e4,
+			burstCoalesceMs: 0
 		});
 		return this.pairingExchangeLimiter;
 	}

package/dist/src/gateway/service/run-gateway-agent.js

@@ -9,8 +9,8 @@ import { init_session_key, parseSessionKey } from "../../routing/session-key.js"
 import { resolveExecutionContext } from "../../tasks/execution-context.js";
 import { TaskRunCoordinator } from "../../tasks/task-run-coordinator.js";
 import { formatAgentRunErrorForClient } from "../../agent/client-error-format.js";
-import { prependEnvelopeTimestamp } from "../../channels/envelope-timestamp.js";
 import "../chat-limits.js";
+import { prependEnvelopeTimestamp } from "../../channels/envelope-timestamp.js";
 import { ChatStreamMapper } from "../chat-stream/mapper.js";
 import { resolveWebchatSessionKey } from "../resolve-webchat-session-key.js";
 import { recordExplicitRelationshipFollowUp } from "../../user-context/relationship-continuity.js";

package/dist/src/heartbeat/index.js

@@ -1,6 +1,6 @@
 import { DEFAULT_ACK_MAX_CHARS, HEARTBEAT_OK, NO_REPLY, shouldSilence, stripHeartbeatToken } from "./tokens.js";
-import { appendCronEventLines } from "./event-prompt.js";
 import { isWithinActiveHours } from "./active-hours.js";
 import { isHeartbeatContentEmpty } from "./content-check.js";
+import { appendCronEventLines } from "./event-prompt.js";
 import { createHeartbeatWake } from "./wake.js";
 export { DEFAULT_ACK_MAX_CHARS, HEARTBEAT_OK, NO_REPLY, appendCronEventLines, createHeartbeatWake, isHeartbeatContentEmpty, isWithinActiveHours, shouldSilence, stripHeartbeatToken };

package/dist/src/providers/model-catalog-persistence.js

@@ -62,6 +62,10 @@ var init_model_catalog_persistence = __esmMin((() => {
 	catalogModelSchema = z.object({
 		id: z.string().min(1),
 		name: z.string().min(1),
+		displayNames: z.object({
+			"zh-CN": z.string().min(1).optional(),
+			en: z.string().min(1).optional()
+		}).strict().optional(),
 		availability: z.enum(["available", "unavailable"]),
 		kind: z.enum([
 			"language",

package/dist/src/providers/model-catalog-types.d.ts

@@ -1,6 +1,7 @@
 export interface CatalogModel {
     id: string;
     name: string;
+    displayNames?: Partial<Record<'zh-CN' | 'en', string>>;
     availability: 'available' | 'unavailable';
     kind: 'language' | 'image' | 'stt' | 'tts';
     input: Array<'text' | 'image' | 'audio'>;

package/dist/src/providers/xopc-cloud-model-source.js

@@ -52,7 +52,8 @@ var XopcCloudModelSource = class {
 			const tts = kind === "tts" ? parseTtsCapabilities(model.xopc?.capabilities, model.xopc?.defaultVoice) : void 0;
 			const catalogModel = {
 				id: model.id,
-				name: model.id,
+				name: typeof model.xopc?.displayName === "string" && model.xopc.displayName.trim() ? model.xopc.displayName.trim() : model.id,
+				...parseDisplayNames(model.xopc?.displayNames),
 				kind,
 				input,
 				output,
@@ -180,5 +181,15 @@ function parseImageGenerationCapabilities(value) {
 		maxInputImages: Number.isSafeInteger(raw.maxInputImages) && Number(raw.maxInputImages) > 0 ? Number(raw.maxInputImages) : 0
 	};
 }
+function parseDisplayNames(value) {
+	if (!value || typeof value !== "object" || Array.isArray(value)) return {};
+	const raw = value;
+	const displayNames = {};
+	for (const locale of ["zh-CN", "en"]) {
+		const name = raw[locale];
+		if (typeof name === "string" && name.trim()) displayNames[locale] = name.trim();
+	}
+	return Object.keys(displayNames).length ? { displayNames } : {};
+}
 //#endregion
 export { XopcCloudModelError, XopcCloudModelSource };

package/dist/src/storage/sqlite/device-pairing-approval.js

@@ -48,6 +48,7 @@ function requestRow(id, now) {
 }
 function statusFromRow(row, now) {
 	const device = devicePairingDeviceSchema.parse(JSON.parse(row.device_json));
+	const connectedAt = row.device_id ? getDevice(row.device_id)?.lastSeenAt : void 0;
 	return {
 		requestId: row.request_id,
 		setupId: row.pairing_id,
@@ -58,7 +59,8 @@ function statusFromRow(row, now) {
 		confirmationCode: row.confirmation_code,
 		expiresAt: row.expires_at,
 		serverTime: now,
-		...row.device_id ? { deviceId: row.device_id } : {}
+		...row.device_id ? { deviceId: row.device_id } : {},
+		...connectedAt ? { connectedAt } : {}
 	};
 }
 function verifiedSetup(token, now) {

package/dist/src/storage/sqlite/endpoint-session-binding-repository.d.ts

@@ -6,3 +6,4 @@ export interface StoredEndpointSessionBinding {
 export declare function getEndpointSessionBinding(sessionKey: string): StoredEndpointSessionBinding | undefined;
 export declare function setEndpointSessionBinding(binding: StoredEndpointSessionBinding): StoredEndpointSessionBinding;
 export declare function deleteEndpointSessionBinding(sessionKey: string): boolean;
+export declare function deleteEndpointSessionBindingsByPrincipal(principalId: string): number;

package/dist/src/storage/sqlite/endpoint-session-binding-repository.js

@@ -28,5 +28,13 @@ function setEndpointSessionBinding(binding) {
 function deleteEndpointSessionBinding(sessionKey) {
 	return getSqliteDatabase().prepare("DELETE FROM endpoint_session_bindings WHERE session_key = ?").run(sessionKey).changes > 0;
 }
+function deleteEndpointSessionBindingsByPrincipal(principalId) {
+	return Number(getSqliteDatabase().prepare(`
+    DELETE FROM endpoint_session_bindings
+    WHERE endpoint_id IN (
+      SELECT endpoint_id FROM endpoint_instance_bindings WHERE principal_id = ?
+    )
+  `).run(principalId).changes);
+}
 //#endregion
-export { deleteEndpointSessionBinding, getEndpointSessionBinding, setEndpointSessionBinding };
+export { deleteEndpointSessionBinding, deleteEndpointSessionBindingsByPrincipal, getEndpointSessionBinding, setEndpointSessionBinding };

package/dist/src/storage/sqlite/index.d.ts

@@ -5,7 +5,7 @@ export { DatabaseSchemaMigrationGapError, DatabaseSchemaTooNewError, } from './m
 export { discoverSqlMigrations, listRegisteredMigrationTargets } from './migrations/discover.js';
 export { closeXopcDatabase, getXopcDatabase, isXopcDatabaseOpen, openXopcDatabase, requireXopcDatabase, resetXopcDatabaseSingletonForTest, type OpenXopcDatabaseOptions, type XopcDatabase, } from './connection.js';
 export { getSqliteDatabase, runSqliteWriteTransaction } from './transaction.js';
-export { deleteEndpointSessionBinding, getEndpointSessionBinding, setEndpointSessionBinding, type StoredEndpointSessionBinding, } from './endpoint-session-binding-repository.js';
+export { deleteEndpointSessionBinding, deleteEndpointSessionBindingsByPrincipal, getEndpointSessionBinding, setEndpointSessionBinding, type StoredEndpointSessionBinding, } from './endpoint-session-binding-repository.js';
 export { deleteBrowserTabBinding, deleteBrowserTabBindingsByEndpoint, deleteBrowserTabBindingsByPrincipal, getBrowserTabBinding, getBrowserTabBindingById, setBrowserTabBinding, } from './browser-tab-binding-repository.js';
 export { authenticateDeviceAccessToken, buildRefreshProofMessage, createDevice, getDevice, issueDeviceTokenPair, listDevices, revokeDevice, rotateDeviceRefreshToken, type DeviceAccessIdentity, type DevicePlatform, type DevicePublicKeyJwk, type DeviceRecord, type DeviceTokenPair, } from './device-access-repository.js';
 export { clearGatewayIdentityForTest, getOrCreateGatewayIdentity, signGatewayPayload, type GatewayIdentity, } from './gateway-identity-repository.js';

package/dist/src/storage/sqlite/index.js

@@ -6,7 +6,7 @@ import { XOPC_DB_BASELINE_SCHEMA_VERSION, XOPC_DB_SCHEMA_VERSION, applyPendingMi
 import { ensureXopcDatabaseSchema } from "./schema.js";
 import { closeXopcDatabase, getXopcDatabase, isXopcDatabaseOpen, openXopcDatabase, requireXopcDatabase, resetXopcDatabaseSingletonForTest } from "./connection.js";
 import { getSqliteDatabase, runSqliteWriteTransaction } from "./transaction.js";
-import { deleteEndpointSessionBinding, getEndpointSessionBinding, setEndpointSessionBinding } from "./endpoint-session-binding-repository.js";
+import { deleteEndpointSessionBinding, deleteEndpointSessionBindingsByPrincipal, getEndpointSessionBinding, setEndpointSessionBinding } from "./endpoint-session-binding-repository.js";
 import { deleteBrowserTabBinding, deleteBrowserTabBindingsByEndpoint, deleteBrowserTabBindingsByPrincipal, getBrowserTabBinding, getBrowserTabBindingById, setBrowserTabBinding } from "./browser-tab-binding-repository.js";
 import { authenticateDeviceAccessToken, buildRefreshProofMessage, createDevice, getDevice, issueDeviceTokenPair, listDevices, revokeDevice, rotateDeviceRefreshToken } from "./device-access-repository.js";
 import { clearGatewayIdentityForTest, getOrCreateGatewayIdentity, signGatewayPayload } from "./gateway-identity-repository.js";
@@ -40,4 +40,4 @@ import { appendConnectorExecutionAudit, claimConnectorWebhookDelivery, completeC
 import { getConnectorAccount, listConnectorAccounts, reconcileConnectorAccount, refreshConnectorAccountCurrent } from "./connector-account-repository.js";
 import { getConnectorSyncPolicy, getConnectorSyncPolicyForConnection, listConnectorSyncPolicies, upsertConnectorSyncPolicy } from "./connector-sync-policy-repository.js";
 import { getUserTrustPolicy, setUserTrustPolicy } from "./user-trust-repository.js";
-export { COMPOSER_INPUT_HISTORY_LIMIT, DatabaseSchemaMigrationGapError, DatabaseSchemaTooNewError, SCHEMA_META_SCHEMA_VERSION_KEY, XOPC_DB_BASELINE_SCHEMA_VERSION, XOPC_DB_FILENAME, XOPC_DB_SCHEMA_VERSION, acknowledgeHomeAttention, appendCompactionBoundaryIfUnchanged, appendComposerInputHistory, appendConnectorExecutionAudit, appendTranscriptEntry, applyPendingMigrations, authenticateDeviceAccessToken, bindEndpointPrincipal, buildDefaultSessionMetadata, buildGlobalSessionStats, buildRefreshProofMessage, buildRelationshipPrompt, cancelQueuedSessionInput, claimConnectorWebhookDelivery, claimContextExtractionRun, claimKnowledgeSourceItems, claimNextConnectorLearningJob, claimNextSessionInput, classifyStoredRow, clearComposerInputHistory, clearGatewayIdentityForTest, closeTemporalAssertions, closeXopcDatabase, completeConnectorWebhookDelivery, completeKnowledgeSourceItemSynthesis, consumeClarificationApproval, consumeClarificationResume, consumeConnectorApproval, countKnowledgeSourceItems, createClarificationWait, createCollaborationRule, createConnectorApproval, createContextEvidence, createDevice, createDevicePairingSetup, createEndpointPrincipal, createObjectLinkRecord, createTemporalAssertion, decideConnectorApproval, deleteBrowserTabBinding, deleteBrowserTabBindingsByEndpoint, deleteBrowserTabBindingsByPrincipal, deleteConnectorConnection, deleteConnectorInstallation, deleteEndpointSessionBinding, deleteKnowledgeSourceItems, deleteNoteAgentContextRecord, deleteNoteRecord, deleteObjectLinkRecord, deleteSessionConfig, deleteSessionRecord, discoverSqlMigrations, enqueueConnectorLearningJob, ensureSessionRecord, ensureXopcDatabaseSchema, estimateTokensFromMessages, extractFtsContent, findSessionInput, findSessionKeyBySessionId, finishContextExtractionRun, finishEndpointToolInvocationAudit, finishKnowledgeSyncRun, finishSessionInputRun, getActiveClarification, getActivityEventRecord, getBrowserTabBinding, getBrowserTabBindingById, getCachedConnectorCatalogEntry, getClarification, getClarificationResumeInput, getClarificationSnapshot, getCollaborationRule, getConnectorAccount, getConnectorApproval, getConnectorConnection, getConnectorInstallation, getConnectorSyncPolicy, getConnectorSyncPolicyForConnection, getContextExtractionRun, getCurrentSessionId, getDevice, getEndpointPrincipal, getEndpointSessionBinding, getGlobalSessionStats, getInteractionState, getKnowledgeConsumerWatermark, getKnowledgeSourceCursor, getKnowledgeSourceItem, getNoteAgentContextRecord, getNoteRecord, getOrCreateGatewayIdentity, getRelationshipSettings, getSessionConfig, getSessionInputById, getSessionInputState, getSessionMetadata, getSessionPersistedLevels, getSessionTaskPlan, getSqliteDatabase, getUserPeopleIndexState, getUserPerson, getUserTrustPolicy, getXopcDatabase, hasIndependentExtractionOutput, hasSessionConfig, incrementSessionStatsOnAppend, insertSessionInput, inspectSchemaMigrationStatus, isClarificationSuspended, isDevicePairingSetupActive, isHomeAttentionAcknowledged, isProactiveSupportAllowed, isXopcDatabaseOpen, issueDeviceTokenPair, linkContextObjects, listActiveSessionInputRuns, listActivityRecords, listCachedConnectorCatalogEntries, listCollaborationRules, listCompactionBoundaries, listComposerInputHistory, listConnectorAccounts, listConnectorActionMetadata, listConnectorApprovals, listConnectorConnections, listConnectorExecutionAudit, listConnectorInstallations, listConnectorLearningJobs, listConnectorSyncPolicies, listContextExtractionOutputs, listContextExtractionRuns, listContextObjectRelations, listDevices, listEndpointPrincipals, listEndpointToolInvocationAudits, listKnowledgeSourceChanges, listKnowledgeSourceItems, listKnowledgeSyncRuns, listNoteRecords, listObjectActivityRecords, listObjectLinkRecords, listProjectActivityRecords, listRegisteredMigrationTargets, listSessionMetadata, listSessionsByAgent, listTemporalAssertions, listUserPeople, loadCompactionSourceSnapshot, loadLlmMessagesForSession, loadTranscriptHistoryRowsForSession, loadTranscriptRows, loadTranscriptRowsForSession, mergeUserPeople, metadataToSessionInsert, mutateQueuedSessionInput, openXopcDatabase, paginateTranscriptMessages, patchSessionMetadata, pruneBoundedKnowledgeSourceItems, readSchemaVersion, readSchemaVersionForTest, reconcileConnectorAccount, recordActivityEvent, recoverSessionInputState, recoverStaleConnectorLearningJobs, refreshConnectorAccountCurrent, releaseConnectorWebhookDelivery, replaceConnectorCatalogEntries, replaceLatestSessionTurnAndQueueInput, replaceTranscriptRows, replaceUserPeopleIndex, requireXopcDatabase, resetSessionRecord, resetXopcDatabaseSingletonForTest, resolveClarification, resolveMigrationsDir, resolveSessionAgentId, resolveXopcDatabasePath, restoreBeforeCompactionBoundary, revokeDevice, revokeEndpointPrincipal, rotateDeviceRefreshToken, runSqliteWriteTransaction, searchSessionTranscript, sessionConfigRowToConfig, sessionRowToMetadata, setBrowserTabBinding, setCollaborationRuleStatus, setConnectorLearningPaused, setEndpointSessionBinding, setInteractionState, setKnowledgeConsumerWatermark, setKnowledgeSourceCursor, setKnowledgeSourceItemSynthesisStatus, setSessionConfig, setSessionInputStatus, setSessionTaskPlan, setUserTrustPolicy, signGatewayPayload, startEndpointToolInvocationAudit, startKnowledgeSyncRun, summarizeUserPeople, supersedeActiveClarification, touchEndpointPrincipal, transcriptEntryRowToStoredRow, updateConnectorLearningJob, updateInteractionStateFromMessage, updateRelationshipSettings, updateSessionConfig, updateSessionStats, updateUserPerson, upsertConnectorActionMetadata, upsertConnectorCatalogEntry, upsertConnectorConnection, upsertConnectorInstallation, upsertConnectorSyncPolicy, upsertKnowledgeSourceItems, upsertNoteAgentContextRecord, upsertNoteRecord, validateLatestSessionTurnTarget };
+export { COMPOSER_INPUT_HISTORY_LIMIT, DatabaseSchemaMigrationGapError, DatabaseSchemaTooNewError, SCHEMA_META_SCHEMA_VERSION_KEY, XOPC_DB_BASELINE_SCHEMA_VERSION, XOPC_DB_FILENAME, XOPC_DB_SCHEMA_VERSION, acknowledgeHomeAttention, appendCompactionBoundaryIfUnchanged, appendComposerInputHistory, appendConnectorExecutionAudit, appendTranscriptEntry, applyPendingMigrations, authenticateDeviceAccessToken, bindEndpointPrincipal, buildDefaultSessionMetadata, buildGlobalSessionStats, buildRefreshProofMessage, buildRelationshipPrompt, cancelQueuedSessionInput, claimConnectorWebhookDelivery, claimContextExtractionRun, claimKnowledgeSourceItems, claimNextConnectorLearningJob, claimNextSessionInput, classifyStoredRow, clearComposerInputHistory, clearGatewayIdentityForTest, closeTemporalAssertions, closeXopcDatabase, completeConnectorWebhookDelivery, completeKnowledgeSourceItemSynthesis, consumeClarificationApproval, consumeClarificationResume, consumeConnectorApproval, countKnowledgeSourceItems, createClarificationWait, createCollaborationRule, createConnectorApproval, createContextEvidence, createDevice, createDevicePairingSetup, createEndpointPrincipal, createObjectLinkRecord, createTemporalAssertion, decideConnectorApproval, deleteBrowserTabBinding, deleteBrowserTabBindingsByEndpoint, deleteBrowserTabBindingsByPrincipal, deleteConnectorConnection, deleteConnectorInstallation, deleteEndpointSessionBinding, deleteEndpointSessionBindingsByPrincipal, deleteKnowledgeSourceItems, deleteNoteAgentContextRecord, deleteNoteRecord, deleteObjectLinkRecord, deleteSessionConfig, deleteSessionRecord, discoverSqlMigrations, enqueueConnectorLearningJob, ensureSessionRecord, ensureXopcDatabaseSchema, estimateTokensFromMessages, extractFtsContent, findSessionInput, findSessionKeyBySessionId, finishContextExtractionRun, finishEndpointToolInvocationAudit, finishKnowledgeSyncRun, finishSessionInputRun, getActiveClarification, getActivityEventRecord, getBrowserTabBinding, getBrowserTabBindingById, getCachedConnectorCatalogEntry, getClarification, getClarificationResumeInput, getClarificationSnapshot, getCollaborationRule, getConnectorAccount, getConnectorApproval, getConnectorConnection, getConnectorInstallation, getConnectorSyncPolicy, getConnectorSyncPolicyForConnection, getContextExtractionRun, getCurrentSessionId, getDevice, getEndpointPrincipal, getEndpointSessionBinding, getGlobalSessionStats, getInteractionState, getKnowledgeConsumerWatermark, getKnowledgeSourceCursor, getKnowledgeSourceItem, getNoteAgentContextRecord, getNoteRecord, getOrCreateGatewayIdentity, getRelationshipSettings, getSessionConfig, getSessionInputById, getSessionInputState, getSessionMetadata, getSessionPersistedLevels, getSessionTaskPlan, getSqliteDatabase, getUserPeopleIndexState, getUserPerson, getUserTrustPolicy, getXopcDatabase, hasIndependentExtractionOutput, hasSessionConfig, incrementSessionStatsOnAppend, insertSessionInput, inspectSchemaMigrationStatus, isClarificationSuspended, isDevicePairingSetupActive, isHomeAttentionAcknowledged, isProactiveSupportAllowed, isXopcDatabaseOpen, issueDeviceTokenPair, linkContextObjects, listActiveSessionInputRuns, listActivityRecords, listCachedConnectorCatalogEntries, listCollaborationRules, listCompactionBoundaries, listComposerInputHistory, listConnectorAccounts, listConnectorActionMetadata, listConnectorApprovals, listConnectorConnections, listConnectorExecutionAudit, listConnectorInstallations, listConnectorLearningJobs, listConnectorSyncPolicies, listContextExtractionOutputs, listContextExtractionRuns, listContextObjectRelations, listDevices, listEndpointPrincipals, listEndpointToolInvocationAudits, listKnowledgeSourceChanges, listKnowledgeSourceItems, listKnowledgeSyncRuns, listNoteRecords, listObjectActivityRecords, listObjectLinkRecords, listProjectActivityRecords, listRegisteredMigrationTargets, listSessionMetadata, listSessionsByAgent, listTemporalAssertions, listUserPeople, loadCompactionSourceSnapshot, loadLlmMessagesForSession, loadTranscriptHistoryRowsForSession, loadTranscriptRows, loadTranscriptRowsForSession, mergeUserPeople, metadataToSessionInsert, mutateQueuedSessionInput, openXopcDatabase, paginateTranscriptMessages, patchSessionMetadata, pruneBoundedKnowledgeSourceItems, readSchemaVersion, readSchemaVersionForTest, reconcileConnectorAccount, recordActivityEvent, recoverSessionInputState, recoverStaleConnectorLearningJobs, refreshConnectorAccountCurrent, releaseConnectorWebhookDelivery, replaceConnectorCatalogEntries, replaceLatestSessionTurnAndQueueInput, replaceTranscriptRows, replaceUserPeopleIndex, requireXopcDatabase, resetSessionRecord, resetXopcDatabaseSingletonForTest, resolveClarification, resolveMigrationsDir, resolveSessionAgentId, resolveXopcDatabasePath, restoreBeforeCompactionBoundary, revokeDevice, revokeEndpointPrincipal, rotateDeviceRefreshToken, runSqliteWriteTransaction, searchSessionTranscript, sessionConfigRowToConfig, sessionRowToMetadata, setBrowserTabBinding, setCollaborationRuleStatus, setConnectorLearningPaused, setEndpointSessionBinding, setInteractionState, setKnowledgeConsumerWatermark, setKnowledgeSourceCursor, setKnowledgeSourceItemSynthesisStatus, setSessionConfig, setSessionInputStatus, setSessionTaskPlan, setUserTrustPolicy, signGatewayPayload, startEndpointToolInvocationAudit, startKnowledgeSyncRun, summarizeUserPeople, supersedeActiveClarification, touchEndpointPrincipal, transcriptEntryRowToStoredRow, updateConnectorLearningJob, updateInteractionStateFromMessage, updateRelationshipSettings, updateSessionConfig, updateSessionStats, updateUserPerson, upsertConnectorActionMetadata, upsertConnectorCatalogEntry, upsertConnectorConnection, upsertConnectorInstallation, upsertConnectorSyncPolicy, upsertKnowledgeSourceItems, upsertNoteAgentContextRecord, upsertNoteRecord, validateLatestSessionTurnTarget };

package/dist/src/tui/tui.js

@@ -7,10 +7,10 @@ import { init_paths } from "../config/paths.js";
 import { loadConfig } from "../config/loader.js";
 import { getAllModels, getAllProviders, getApiKey, init_providers, isProviderConfiguredSync } from "../providers/index.js";
 import { ProjectTrustStore, hasTrustRequiringProjectResources } from "../project-trust/trust-store.js";
+import { MAX_WEBCHAT_ATTACHMENT_FILE_BYTES } from "../gateway/chat-limits.js";
 import { renderWorkflowFinalSummary, renderWorkflowPanel } from "../agent/workflow/snapshot.js";
 import { ensureStarterAgentsInitialized } from "../agent/starter-agents.js";
 import "../config/index.js";
-import { MAX_WEBCHAT_ATTACHMENT_FILE_BYTES } from "../gateway/chat-limits.js";
 import { isTerminalWorkflowRunStatus } from "../workflows/domain/run.js";
 import "../workflows/domain/index.js";
 import { runViewToSnapshot } from "../workflows/service/run-view-to-snapshot.js";

package/dist/src/tunnel/xopc-cloud-registration.d.ts

@@ -4,6 +4,11 @@ type ProvisionOptions = {
     resolveAccessToken?: () => Promise<string | null>;
     deviceName?: string;
 };
+export declare class TunnelRegistrationProvisionError extends Error {
+    readonly code: string;
+    readonly status: number;
+    constructor(message: string, code: string, status: number);
+}
 /** Exchange a narrowly scoped XOPC OAuth grant for a tunnel registration key. */
 export declare function provisionTunnelRegistrationKey(options?: ProvisionOptions): Promise<string>;
 export {};

package/dist/src/tunnel/xopc-cloud-registration.js

@@ -6,20 +6,26 @@ import { z } from "zod";
 init_credentials();
 init_xopc_cloud_config();
 const registrationResponseSchema = z.object({ key: z.string().min(1) });
-function responseError(body, status) {
-	if (body && typeof body === "object") {
-		const error = body.error;
-		if (error && typeof error === "object") {
-			const message = error.message;
-			if (typeof message === "string" && message.trim()) return message;
-		}
+const registrationErrorSchema = z.object({ error: z.object({
+	code: z.string().min(1).optional(),
+	message: z.string().min(1).optional()
+}) });
+var TunnelRegistrationProvisionError = class extends Error {
+	constructor(message, code, status) {
+		super(message);
+		this.code = code;
+		this.status = status;
+		this.name = "TunnelRegistrationProvisionError";
 	}
-	return `Tunnel registration failed (${status})`;
+};
+function responseError(body, status) {
+	const parsed = registrationErrorSchema.safeParse(body);
+	return new TunnelRegistrationProvisionError(parsed.success ? parsed.data.error.message ?? `Tunnel registration failed (${status})` : `Tunnel registration failed (${status})`, parsed.success ? parsed.data.error.code ?? "tunnel_registration_failed" : "tunnel_registration_failed", status);
 }
 /** Exchange a narrowly scoped XOPC OAuth grant for a tunnel registration key. */
 async function provisionTunnelRegistrationKey(options = {}) {
 	const accessToken = await (options.resolveAccessToken ?? (() => new CredentialResolver().resolveApiKey("xopc-tunnel")))();
-	if (!accessToken) throw new Error("Authorize XOPC Public Tunnel before creating a registration key");
+	if (!accessToken) throw new TunnelRegistrationProvisionError("Authorize XOPC Public Tunnel before creating a registration key", "tunnel_oauth_required", 401);
 	const routerUrl = resolveXopcModelRouterUrl(options.routerUrl);
 	const deviceName = options.deviceName?.trim() || hostname() || "XOPC gateway";
 	const response = await (options.fetchImpl ?? fetch)(`${routerUrl}/tunnel/registration-key`, {
@@ -33,10 +39,10 @@ async function provisionTunnelRegistrationKey(options = {}) {
 		signal: AbortSignal.timeout(3e4)
 	});
 	const body = await response.json().catch(() => null);
-	if (!response.ok) throw new Error(responseError(body, response.status));
+	if (!response.ok) throw responseError(body, response.status);
 	const parsed = registrationResponseSchema.safeParse(body);
 	if (!parsed.success) throw new Error("Tunnel registration returned an invalid response");
 	return parsed.data.key;
 }
 //#endregion
-export { provisionTunnelRegistrationKey };
+export { TunnelRegistrationProvisionError, provisionTunnelRegistrationKey };

package/dist/src/workflows/service/workflow-run-service.js

@@ -567,7 +567,10 @@ var WorkflowRunService = class {
 			getDefaultModel: () => resolveModel(gatewayService.agentService.getModelForSession(params.sessionKey)),
 			getConfig: () => gatewayService.currentConfig,
 			sessionStore: gatewayService.sessionIndexInstance.getStore(),
-			buildChildTools: (childOptions) => this.options.buildChildTools(childOptions)
+			buildChildTools: (childOptions) => this.options.buildChildTools({
+				...childOptions,
+				endpointTools: gatewayService.endpointTools
+			})
 		});
 		return new WorkflowEngine({
 			cwd: workspace,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xopcai/xopc",
-  "version": "0.0.273",
+  "version": "0.0.275",
   "description": "Local-first personal AI assistant with reviewable user understanding, durable tasks, workflows, automations, and local or cloud models.",
   "type": "module",
   "main": "dist/src/index.js",
@@ -166,8 +166,8 @@
     "vitest": "4.1.5",
     "vue": "^3.5.35",
     "@xopcai/browser-control-contract": "0.1.0",
-    "@xopcai/gateway-contract": "0.0.0",
     "@xopcai/endpoint-tools-protocol": "0.0.0",
+    "@xopcai/gateway-contract": "0.0.0",
     "@xopcai/realtime-client": "0.0.0",
     "@xopcai/realtime-protocol": "0.0.0"
   },