@xopcai/xopc 0.0.276 → 0.0.278

package/dist/src/agent/tools/review-workspace.js

@@ -1,7 +1,10 @@
+import { prepareSafeToolEnv } from "../sandbox/sanitize-env-vars.js";
 import { readWorkspaceRevision } from "../coding/workspace-revision.js";
+import { evaluateFilePolicy } from "../sandbox/exec-policy.js";
+import { checkedFilePath, readWorkspaceFile } from "../sandbox/fileAccess.js";
 import { resolve } from "node:path";
 import { execFile } from "node:child_process";
-import { lstat, readFile, readlink, realpath } from "node:fs/promises";
+import { lstat, readlink, realpath } from "node:fs/promises";
 import { promisify } from "node:util";
 import { Type } from "@sinclair/typebox";
 //#region src/agent/tools/review-workspace.ts
@@ -15,62 +18,125 @@ function createReviewWorkspaceTool(workspace) {
 		supportsParallel: true,
 		idempotent: true,
 		async execute(_id, _args, signal) {
-			let cwd = workspace;
+			let cwd = checkedFilePath(workspace, workspace, "read");
 			const git = async (args) => (await exec("git", [
 				"-c",
 				"core.fsmonitor=false",
 				...args
 			], {
 				cwd,
+				env: prepareSafeToolEnv(process.env),
 				signal,
 				timeout: 1e4,
 				maxBuffer: 8 * 1024 * 1024
 			})).stdout;
-			cwd = await realpath((await git(["rev-parse", "--show-toplevel"])).trim());
+			cwd = checkedFilePath(workspace, await realpath((await git(["rev-parse", "--show-toplevel"])).trim()), "read");
 			const startRevision = await readWorkspaceRevision(cwd);
 			const head = await git([
 				"rev-parse",
 				"--verify",
 				"HEAD"
 			]).catch(() => "");
-			const [diff, names] = await Promise.all([head ? git([
+			const changedNames = head ? await git([
 				"diff",
+				"--no-renames",
+				"--name-only",
+				"-z",
+				"HEAD",
+				"--"
+			]) : (await Promise.all([git([
+				"diff",
+				"--name-only",
+				"-z",
+				"--cached",
+				"--"
+			]), git([
+				"diff",
+				"--name-only",
+				"-z",
+				"--"
+			])])).join("");
+			const safePaths = [];
+			let complete = true;
+			for (const path of new Set(changedNames.split("\0").filter(Boolean))) {
+				const file = resolve(cwd, path);
+				if (!evaluateFilePolicy({
+					workspaceRoot: workspace,
+					path: file,
+					operation: "read"
+				}).allowed) {
+					complete = false;
+					continue;
+				}
+				const info = await lstat(file).catch((error) => {
+					if (error.code === "ENOENT") return null;
+					throw error;
+				});
+				if (info && (!info.isFile() || info.nlink !== 1)) {
+					complete = false;
+					continue;
+				}
+				safePaths.push(`:(literal)${path}`);
+			}
+			if (safePaths.length > 1e3) throw new Error("Too many changed files for a bounded workspace review");
+			const [diff, names] = await Promise.all([safePaths.length === 0 ? Promise.resolve("") : head ? git([
+				"diff",
+				"--no-renames",
 				"--no-ext-diff",
 				"--no-textconv",
 				"--binary",
 				"HEAD",
-				"--"
+				"--",
+				...safePaths
 			]) : Promise.all([git([
 				"diff",
+				"--no-renames",
 				"--no-ext-diff",
 				"--no-textconv",
 				"--binary",
 				"--cached",
-				"--"
+				"--",
+				...safePaths
 			]), git([
 				"diff",
+				"--no-renames",
 				"--no-ext-diff",
 				"--no-textconv",
 				"--binary",
-				"--"
+				"--",
+				...safePaths
 			])]).then((parts) => parts.join("\n")), git([
 				"ls-files",
 				"--others",
 				"--exclude-standard",
 				"-z"
 			])]);
-			let text = diff.slice(0, 2e5), complete = diff.length <= 2e5;
+			let text = diff.slice(0, 2e5);
+			complete &&= diff.length <= 2e5;
 			for (const path of names.split("\0").filter(Boolean)) {
 				signal?.throwIfAborted();
 				if (text.length >= 2e5) {
 					complete = false;
 					break;
 				}
-				const file = resolve(cwd, path), info = await lstat(file);
+				const file = resolve(cwd, path);
+				if (!evaluateFilePolicy({
+					workspaceRoot: workspace,
+					path: file,
+					operation: "read"
+				}).allowed) {
+					complete = false;
+					continue;
+				}
+				const info = await lstat(file);
+				if (info.isFile() && info.nlink !== 1) {
+					complete = false;
+					continue;
+				}
 				text += `\nUntracked file: ${path}\n`;
 				if (info.isSymbolicLink()) text += `Symlink to ${await readlink(file)}\n`;
 				else if (info.isFile() && info.size <= 5e4) {
-					const content = await readFile(file);
+					const content = readWorkspaceFile(workspace, file, 5e4);
 					if (content.includes(0)) {
 						text += "(binary file; inspect separately)\n";
 						complete = false;

package/dist/src/agent/tools/send-media.js

@@ -1,13 +1,14 @@
 import { turnOutcomeKindFromFileName } from "../../../packages/gateway-contract/src/turn-outcome.js";
-import { checkFileSafety } from "../prompt/safety.js";
 import { resolvePathUnderWorkspace } from "./tool-paths.js";
+import { MEDIA_MAX_BYTES } from "../../media/store.js";
+import { readWorkspaceFile } from "../sandbox/fileAccess.js";
+import { checkFileSafety } from "../prompt/safety.js";
 import { persistToolMedia } from "./tool-media.js";
 import { basename } from "node:path";
-import { readFile } from "fs/promises";
 import { Type } from "@sinclair/typebox";
 //#region src/agent/tools/send-media.ts
 const SendMediaSchema = Type.Object({
-	filePath: Type.String({ description: "File to send. Relative paths are under the current agent workspace; absolute paths are used as given." }),
+	filePath: Type.String({ description: "File to send. Relative paths are under the current agent workspace; absolute paths must remain inside the workspace." }),
 	mediaType: Type.Optional(Type.Enum({
 		photo: "photo",
 		video: "video",
@@ -42,7 +43,7 @@ function createSendMediaTool(workspace, bus, getContext) {
 				details: {}
 			};
 			try {
-				const fileBuffer = await readFile(resolved);
+				const fileBuffer = readWorkspaceFile(workspace, resolved, MEDIA_MAX_BYTES);
 				const media = await persistToolMedia({
 					buffer: fileBuffer,
 					filePath: resolved,

package/dist/src/agent/tools/skills-tools.js

@@ -1,7 +1,7 @@
 import { resolveStateDir } from "../../config/paths-state.js";
 import { init_paths } from "../../config/paths.js";
-import { DEFAULT_MAX_BYTES, formatSize, truncateHead } from "./truncate.js";
 import { createSkillConfigManager, isSkillEnabled, resolveSkillConfig } from "../skills/config.js";
+import { DEFAULT_MAX_BYTES, formatSize, truncateHead } from "./truncate.js";
 import { resolveSkillReadablePath } from "../skills/skill-view-path.js";
 import { readFileSync, statSync } from "fs";
 import { Type } from "@sinclair/typebox";

package/dist/src/agent/tools/tool-paths.js

@@ -16,7 +16,9 @@ function resolvePathUnderWorkspace(userPath, workspaceRoot) {
 }
 /** True if `userPath` is only a profile-system filename, e.g. `SOUL.md` or `.\SOUL.md` (basename matches). */
 function isBareProfileMarkdownFileName(userPath) {
-	const b = basename(userPath.replace(/\\/g, "/"));
+	const normalized = userPath.replace(/\\/g, "/").replace(/^\.\//, "");
+	if (normalized.includes("/")) return false;
+	const b = basename(normalized);
 	if (!b || b === "." || b === "..") return false;
 	return PROFILE_SYSTEM_MARKDOWN_NAME_LOWER.has(b.toLowerCase());
 }

package/dist/src/agent/tools/tts-tool.js

@@ -1,8 +1,8 @@
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
-import { speak } from "../../voice/tts/speak-core.js";
 import { mergeTtsConfigFromAppConfig } from "../../voice/tts/merge-config.js";
 import { getChannelOutputFormat } from "../../voice/tts/service.js";
+import { speak } from "../../voice/tts/speak-core.js";
 import { compressAudio } from "../../voice/tts/audio.js";
 import { persistOutboundTtsAudio } from "../../channels/attachments/outbound-tts-persist.js";
 import { Type } from "@sinclair/typebox";

package/dist/src/agent/tools/user-context-tool.js

@@ -1,7 +1,7 @@
-import { retrievalLexicalSimilarity } from "../../retrieval/textFeatures.js";
 import { getAssertionSlot, getUserAssertion, listUserAssertions, reconcileAssertion, setAssertionStatus } from "../../user-model/repository.js";
 import { isWorkingAssumption } from "../../user-model/usage-policy.js";
 import "../../user-model/index.js";
+import { retrievalLexicalSimilarity } from "../../retrieval/textFeatures.js";
 import { Type } from "@sinclair/typebox";
 //#region src/agent/tools/user-context-tool.ts
 const SearchSchema = Type.Object({

package/dist/src/agent/tools/write.js

@@ -1,10 +1,10 @@
 import { appendProductDeliveryText } from "../../../packages/gateway-contract/src/product-delivery.js";
-import { checkFileSafety } from "../prompt/safety.js";
-import { isBareProfileMarkdownFileName, resolvePathUnderWorkspace, resolveProfileMarkdownPathIfBareName } from "./tool-paths.js";
 import { fileResourceId, fileSpaceId } from "../../files/file-service.js";
-import { evaluateFilePolicy } from "../sandbox/exec-policy.js";
-import { basename, dirname, relative, sep } from "path";
-import { mkdir, realpath, writeFile } from "fs/promises";
+import { isBareProfileMarkdownFileName, resolvePathUnderWorkspace, resolveProfileMarkdownPathIfBareName } from "./tool-paths.js";
+import { writeWorkspaceFile } from "../sandbox/fileAccess.js";
+import { checkFileSafety } from "../prompt/safety.js";
+import { basename, relative, sep } from "path";
+import { realpath } from "fs/promises";
 import { Type } from "@sinclair/typebox";
 //#region src/agent/tools/write.ts
 const MAX_FILE_SIZE = 10 * 1024 * 1024;
@@ -37,18 +37,6 @@ function createWriteFileTool(workspace, options) {
 				};
 				const writesProfileFile = Boolean(options?.profileMarkdownRoot && isBareProfileMarkdownFileName(p.path));
 				const workspaceRoot = writesProfileFile ? options.profileMarkdownRoot : workspace;
-				const pathPolicy = evaluateFilePolicy({
-					operation: "write",
-					path: p.path,
-					workspaceRoot
-				});
-				if (!pathPolicy.allowed) return {
-					content: [{
-						type: "text",
-						text: `🚫 Sandbox: ${pathPolicy.reason}`
-					}],
-					details: { status: "failed" }
-				};
 				const contentBytes = Buffer.byteLength(p.content, "utf-8");
 				if (contentBytes > MAX_FILE_SIZE) return {
 					content: [{
@@ -58,8 +46,7 @@ function createWriteFileTool(workspace, options) {
 					details: { status: "failed" }
 				};
 				const target = writesProfileFile ? resolveProfileMarkdownPathIfBareName(p.path, options.profileMarkdownRoot) : resolvePathUnderWorkspace(p.path, workspace);
-				await mkdir(dirname(target), { recursive: true });
-				await writeFile(target, p.content, "utf-8");
+				writeWorkspaceFile(workspaceRoot, target, p.content);
 				const delivery = writesProfileFile ? void 0 : await Promise.all([realpath(workspace), realpath(target)]).then(([root, canonicalTarget]) => ({
 					version: 1,
 					operation: "updated",

package/dist/src/agent/tools/xopc-use-tool.js

@@ -9,19 +9,19 @@ import "../../storage/sqlite/index.js";
 import { ObjectLinkService } from "../../activity/service.js";
 import "../../activity/index.js";
 import { getDefaultAgentId, init_resolve_route } from "../../routing/resolve-route.js";
-import { TaskRepository } from "../../tasks/task-repository.js";
-import { TaskReadModelProjector } from "../../tasks/task-read-model-projector.js";
+import { CreateAutomationSchema, UpdateAutomationSchema } from "../../automations/domain/validation.js";
+import "../../automations/index.js";
 import { isValidProjectAgentId, normalizeProjectAgentId, resolveProjectAgentId } from "../../projects/project-agent.js";
 import "../../projects/index.js";
-import { updateControlledSubscription } from "../../proactive/scenarios/control.js";
-import { continueMailFollowUp, mailFollowUpSources, startMailFollowUp, updateMailFollowUp } from "../../proactive/follow-ups.js";
 import { TaskContextRepository } from "../../tasks/task-context-repository.js";
+import { TaskRepository } from "../../tasks/task-repository.js";
+import { TaskReadModelProjector } from "../../tasks/task-read-model-projector.js";
 import { TaskDependencyError, TaskDependencyService } from "../../tasks/task-dependency-service.js";
 import { TaskApplicationService } from "../../tasks/task-application-service.js";
+import { updateControlledSubscription } from "../../proactive/scenarios/control.js";
 import { getCard } from "../../proactive/inbox/cards.js";
+import { continueMailFollowUp, mailFollowUpSources, startMailFollowUp, updateMailFollowUp } from "../../proactive/follow-ups.js";
 import { checkDelegation, delegationOverview, startDelegation } from "../../proactive/experience.js";
-import { CreateAutomationSchema, UpdateAutomationSchema } from "../../automations/domain/validation.js";
-import "../../automations/index.js";
 import { defineTaskContract } from "../../tasks/task-contract-definition.js";
 import { TaskDeletionService } from "../../tasks/task-deletion-service.js";
 import "../../tasks/index.js";

package/dist/src/agent/workflow/subagent-runner.js

@@ -1,9 +1,9 @@
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
 import { createSqliteTranscriptRuntime } from "../embedded/transcript-runtime.js";
+import { STRUCTURED_OUTPUT_TOOL_NAME, createStructuredOutputTool } from "./structured-output-tool.js";
 import { createDelegateChildHandle } from "../child-agent-factory.js";
 import { DEFAULT_DELEGATE_TOOLS, DELEGATE_BLOCKED_TOOLS } from "../tools/delegate-tool.js";
-import { STRUCTURED_OUTPUT_TOOL_NAME, createStructuredOutputTool } from "./structured-output-tool.js";
 //#region src/agent/workflow/subagent-runner.ts
 init_logger();
 const log = createLogger("Agent:WorkflowSubagent");

package/dist/src/agent-config/schema.d.ts

@@ -122,6 +122,10 @@ export declare const RuntimePolicySchema: z.ZodObject<{
         mode: z.ZodLiteral<"docker">;
         image: z.ZodString;
         network: z.ZodDefault<z.ZodBoolean>;
+        workspaceAccess: z.ZodDefault<z.ZodEnum<{
+            "read-only": "read-only";
+            "read-write": "read-write";
+        }>>;
     }, z.core.$strict>], "mode">>;
     maxTurns: z.ZodOptional<z.ZodNumber>;
     timeoutMs: z.ZodOptional<z.ZodNumber>;
@@ -192,6 +196,10 @@ export declare const AgentDefaultsSchema: z.ZodObject<{
             mode: z.ZodLiteral<"docker">;
             image: z.ZodString;
             network: z.ZodDefault<z.ZodBoolean>;
+            workspaceAccess: z.ZodDefault<z.ZodEnum<{
+                "read-only": "read-only";
+                "read-write": "read-write";
+            }>>;
         }, z.core.$strict>], "mode">>;
         maxTurns: z.ZodOptional<z.ZodNumber>;
         timeoutMs: z.ZodOptional<z.ZodNumber>;
@@ -275,6 +283,10 @@ export declare const AgentEntrySchema: z.ZodObject<{
             mode: z.ZodLiteral<"docker">;
             image: z.ZodString;
             network: z.ZodDefault<z.ZodBoolean>;
+            workspaceAccess: z.ZodDefault<z.ZodEnum<{
+                "read-only": "read-only";
+                "read-write": "read-write";
+            }>>;
         }, z.core.$strict>], "mode">>;
         maxTurns: z.ZodOptional<z.ZodNumber>;
         timeoutMs: z.ZodOptional<z.ZodNumber>;
@@ -348,6 +360,10 @@ export declare const AgentsConfigSchema: z.ZodObject<{
                 mode: z.ZodLiteral<"docker">;
                 image: z.ZodString;
                 network: z.ZodDefault<z.ZodBoolean>;
+                workspaceAccess: z.ZodDefault<z.ZodEnum<{
+                    "read-only": "read-only";
+                    "read-write": "read-write";
+                }>>;
             }, z.core.$strict>], "mode">>;
             maxTurns: z.ZodOptional<z.ZodNumber>;
             timeoutMs: z.ZodOptional<z.ZodNumber>;
@@ -427,6 +443,10 @@ export declare const AgentsConfigSchema: z.ZodObject<{
                 mode: z.ZodLiteral<"docker">;
                 image: z.ZodString;
                 network: z.ZodDefault<z.ZodBoolean>;
+                workspaceAccess: z.ZodDefault<z.ZodEnum<{
+                    "read-only": "read-only";
+                    "read-write": "read-write";
+                }>>;
             }, z.core.$strict>], "mode">>;
             maxTurns: z.ZodOptional<z.ZodNumber>;
             timeoutMs: z.ZodOptional<z.ZodNumber>;
@@ -506,6 +526,10 @@ export declare const EffectiveAgentConfigSchema: z.ZodObject<{
             mode: z.ZodLiteral<"docker">;
             image: z.ZodString;
             network: z.ZodDefault<z.ZodBoolean>;
+            workspaceAccess: z.ZodDefault<z.ZodEnum<{
+                "read-only": "read-only";
+                "read-write": "read-write";
+            }>>;
         }, z.core.$strict>], "mode">>;
         maxTurns: z.ZodOptional<z.ZodNumber>;
         timeoutMs: z.ZodOptional<z.ZodNumber>;

package/dist/src/agent-config/schema.js

@@ -80,7 +80,8 @@ var init_schema = __esmMin((() => {
 		commandIsolation: z.discriminatedUnion("mode", [z.object({ mode: z.literal("host") }).strict(), z.object({
 			mode: z.literal("docker"),
 			image: z.string().regex(/^[a-zA-Z0-9][a-zA-Z0-9./:_-]*@sha256:[a-f0-9]{64}$/),
-			network: z.boolean().default(false)
+			network: z.boolean().default(false),
+			workspaceAccess: z.enum(["read-only", "read-write"]).default("read-only")
 		}).strict()]).optional(),
 		maxTurns: z.number().int().positive().optional(),
 		timeoutMs: z.number().int().positive().optional(),

package/dist/src/ai-assist/text-assist.js

@@ -1,9 +1,9 @@
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
+import { getAssistantMessageErrorReason, stripCodeFences } from "../providers/model-response.js";
 import { getDefaultModelSync, init_providers, resolveModel } from "../providers/index.js";
 import { createExtensionAwareStreamFn } from "../providers/extension-stream-bridge.js";
 import { isLocalModelBaseUrl, resolveModelCallApiKey, resolveModelCallOptions } from "../providers/model-call.js";
-import { getAssistantMessageErrorReason, stripCodeFences } from "../providers/model-response.js";
 //#region src/ai-assist/text-assist.ts
 init_providers();
 init_logger();

package/dist/src/auth/credentials.js

@@ -1,10 +1,10 @@
 import { __esmMin } from "../../_virtual/_rolldown/runtime.js";
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
-import { init_paths, resolveAgentAuthProfilesPath, resolveAuthProfilesPath, resolveCredentialsDir, resolveOAuthPath } from "../config/paths.js";
 import { init_write_file_atomic, writeTextAtomic } from "../infra/write-file-atomic.js";
-import { getOAuthProviderDefinition, init_registry } from "./oauth/registry.js";
+import { init_paths, resolveAgentAuthProfilesPath, resolveAuthProfilesPath, resolveCredentialsDir, resolveOAuthPath } from "../config/paths.js";
 import { getApiKeyFromEnv, init_env_keys } from "../providers/env-keys.js";
+import { getOAuthProviderDefinition, init_registry } from "./oauth/registry.js";
 import { init_oauth_provider_lock, withOAuthProviderLock } from "./oauth-provider-lock.js";
 import { dirname, join } from "path";
 import { mkdir, readFile, readdir, rm } from "fs/promises";

package/dist/src/auth/oauth/xopc-cloud.js

@@ -1,6 +1,6 @@
 import { __esmMin } from "../../../_virtual/_rolldown/runtime.js";
-import { init_resolution, resolveConnectedPlatformEndpoint } from "../../platform/resolution.js";
 import { generatePKCE, init_pkce } from "./pkce.js";
+import { init_resolution, resolveConnectedPlatformEndpoint } from "../../platform/resolution.js";
 import { hostname } from "node:os";
 import { randomBytes } from "node:crypto";
 import http from "node:http";

package/dist/src/auth/profiles/store.js

@@ -1,5 +1,5 @@
-import { init_paths, resolveCredentialsDir } from "../../config/paths.js";
 import { init_write_file_atomic, writeTextAtomicSync } from "../../infra/write-file-atomic.js";
+import { init_paths, resolveCredentialsDir } from "../../config/paths.js";
 import path from "node:path";
 import { chmodSync, existsSync, mkdirSync, readFileSync } from "node:fs";
 //#region src/auth/profiles/store.ts

package/dist/src/auth/sync-provider-auth.js

@@ -1,8 +1,8 @@
 import { __esmMin } from "../../_virtual/_rolldown/runtime.js";
-import { getDefaultAgentId, init_resolve_route } from "../routing/resolve-route.js";
 import { init_paths, resolveAgentAuthProfilesPath, resolveAuthProfilesPath, resolveOAuthPath } from "../config/paths.js";
-import { init_loader, loadConfig } from "../config/loader.js";
 import { init_registry, isOAuthOnlyProvider } from "./oauth/registry.js";
+import { init_loader, loadConfig } from "../config/loader.js";
+import { getDefaultAgentId, init_resolve_route } from "../routing/resolve-route.js";
 import { existsSync, readFileSync } from "node:fs";
 //#region src/auth/sync-provider-auth.ts
 /**

package/dist/src/browser/providers/browser-ext-install.js

@@ -2,8 +2,8 @@ import { PACKAGE_VERSION, init_package_version } from "../../package-version.js"
 import { resolveStateDir } from "../../config/paths-state.js";
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
-import { init_paths, resolveBinDir, resolveConfigPath } from "../../config/paths.js";
 import { init_write_file_atomic, writeTextAtomic } from "../../infra/write-file-atomic.js";
+import { init_paths, resolveBinDir, resolveConfigPath } from "../../config/paths.js";
 import { assertCacheDir } from "../cache-dir-policy.js";
 import { BROWSER_EXTENSION_ID, BROWSER_NATIVE_HOST_NAME } from "../extension-identity.js";
 import "../native-messaging-host.js";

package/dist/src/capabilities/store-connector.js

@@ -1,5 +1,5 @@
-import { downloadConnectorStoreZipBuffer, fetchStoreConnectorPackageDetail, listConnectorPackages, resolveSkillsStoreBaseUrl } from "../agent/skills/marketplace/adapters/store/store-api-client.js";
 import { installConnectorDefinition } from "../connectors/install.js";
+import { downloadConnectorStoreZipBuffer, fetchStoreConnectorPackageDetail, listConnectorPackages, resolveSkillsStoreBaseUrl } from "../agent/skills/marketplace/adapters/store/store-api-client.js";
 import { createHash } from "node:crypto";
 import { isIP } from "node:net";
 import AdmZip from "adm-zip";

package/dist/src/channels/attachments/voice-stt-webchat.js

@@ -1,9 +1,9 @@
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
-import { decodeInboundAttachmentBase64, readInboundAttachmentBuffer } from "./inbound-persist.js";
-import { transcribe } from "../../voice/stt/transcribe-core.js";
 import { isSTTAvailable } from "../../voice/stt/availability.js";
+import { transcribe } from "../../voice/stt/transcribe-core.js";
 import "../../voice/stt/index.js";
+import { decodeInboundAttachmentBase64, readInboundAttachmentBuffer } from "./inbound-persist.js";
 //#region src/channels/attachments/voice-stt-webchat.ts
 init_logger();
 const STT_MAX_BYTES = 25 * 1024 * 1024;

package/dist/src/channels/index.js

@@ -1,6 +1,4 @@
 import { parseFrontmatterBlock } from "../markdown/frontmatter.js";
-import { getChannelPlugin, getChannelRegistryVersion, listChannelPlugins, syncChannelPluginsFromManager } from "./plugins/registry.js";
-import { compileAllowlist, evaluateAccess, hasBotMention, removeBotMention, resolveAllowlistMatch, resolveAllowlistMatchSimple, resolveDmPolicy, resolveGroupPolicy } from "./security.js";
 import { findFenceSpanAt, isSafeFenceBreak, parseFenceSpans } from "../markdown/fences.js";
 import { chunkText } from "../markdown/chunk.js";
 import { chunkMarkdownIR, markdownToIR, markdownToIRWithMeta } from "../markdown/ir.js";
@@ -8,7 +6,9 @@ import { renderMarkdownWithMarkers } from "../markdown/render.js";
 import { convertMarkdownTables } from "../markdown/tables.js";
 import { buildCodeSpanIndex, createInlineCodeState } from "../markdown/code-spans.js";
 import "./format.js";
+import { compileAllowlist, evaluateAccess, hasBotMention, removeBotMention, resolveAllowlistMatch, resolveAllowlistMatchSimple, resolveDmPolicy, resolveGroupPolicy } from "./security.js";
 import { MessagePipeline, createEnvelopeTimestampHandler, createFilterCommandsHandler, createFilterEmptyHandler, createFilterSelfHandler, createPipeline, standardPreflightHandlers, standardProcessHandlers } from "./pipeline.js";
+import { getChannelPlugin, getChannelRegistryVersion, listChannelPlugins, syncChannelPluginsFromManager } from "./plugins/registry.js";
 import { ChannelManager, createChannelManager } from "./manager.js";
 import { collectSetupWizardChannels } from "./setup-wizard-discovery.js";
 export { ChannelManager, MessagePipeline, buildCodeSpanIndex, chunkMarkdownIR, chunkText, collectSetupWizardChannels, compileAllowlist, convertMarkdownTables, createChannelManager, createEnvelopeTimestampHandler, createFilterCommandsHandler, createFilterEmptyHandler, createFilterSelfHandler, createInlineCodeState, createPipeline, evaluateAccess, findFenceSpanAt, getChannelPlugin, getChannelRegistryVersion, hasBotMention, isSafeFenceBreak, listChannelPlugins, markdownToIR, markdownToIRWithMeta, parseFenceSpans, parseFrontmatterBlock, removeBotMention, renderMarkdownWithMarkers, resolveAllowlistMatch, resolveAllowlistMatchSimple, resolveDmPolicy, resolveGroupPolicy, standardPreflightHandlers, standardProcessHandlers, syncChannelPluginsFromManager };

package/dist/src/channels/outbound-sender.js

@@ -1,8 +1,8 @@
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
+import "./internal-outbound.js";
 import { mergeTtsConfigFromAppConfig } from "../voice/tts/merge-config.js";
 import { maybeApplyTtsToPayload } from "../voice/tts/payload.js";
-import "./internal-outbound.js";
 import { deliverOutboundMessage } from "./outbound/deliver.js";
 import { OutboundPersistStore } from "./outbound/persist-store.js";
 //#region src/channels/outbound-sender.ts

package/dist/src/channels/pairing/allow-from-file.js

@@ -1,13 +1,13 @@
 import path from "node:path";
-import fs from "node:fs";
+import fsSync from "node:fs";
 //#region src/channels/pairing/allow-from-file.ts
 function readAllowFromFile(filePath) {
 	try {
-		if (!fs.existsSync(filePath)) return {
+		if (!fsSync.existsSync(filePath)) return {
 			version: 1,
 			allowFrom: []
 		};
-		const raw = fs.readFileSync(filePath, "utf-8");
+		const raw = fsSync.readFileSync(filePath, "utf-8");
 		const parsed = JSON.parse(raw);
 		if (Array.isArray(parsed.allowFrom)) return {
 			version: 1,
@@ -26,13 +26,13 @@ function appendAllowFromIdSync(filePath, userId) {
 	const trimmed = userId.trim();
 	if (!trimmed) return { changed: false };
 	const dir = path.dirname(filePath);
-	fs.mkdirSync(dir, { recursive: true });
+	fsSync.mkdirSync(dir, { recursive: true });
 	const content = readAllowFromFile(filePath);
 	if (content.allowFrom.includes(trimmed)) return { changed: false };
 	content.allowFrom.push(trimmed);
-	fs.writeFileSync(filePath, JSON.stringify(content, null, 2), "utf-8");
+	fsSync.writeFileSync(filePath, JSON.stringify(content, null, 2), "utf-8");
 	try {
-		fs.chmodSync(filePath, 384);
+		fsSync.chmodSync(filePath, 384);
 	} catch {}
 	return { changed: true };
 }
@@ -43,13 +43,13 @@ function removeAllowFromIdSync(filePath, userId) {
 	const next = content.allowFrom.filter((id) => id !== trimmed);
 	if (next.length === content.allowFrom.length) return { changed: false };
 	const dir = path.dirname(filePath);
-	fs.mkdirSync(dir, { recursive: true });
-	fs.writeFileSync(filePath, JSON.stringify({
+	fsSync.mkdirSync(dir, { recursive: true });
+	fsSync.writeFileSync(filePath, JSON.stringify({
 		version: 1,
 		allowFrom: next
 	}, null, 2), "utf-8");
 	try {
-		fs.chmodSync(filePath, 384);
+		fsSync.chmodSync(filePath, 384);
 	} catch {}
 	return { changed: true };
 }

package/dist/src/channels/pairing/pairing-store.js

@@ -1,7 +1,7 @@
 import { appendAllowFromIdSync } from "./allow-from-file.js";
 import "./pairing-constants.js";
 import path from "node:path";
-import fs from "node:fs";
+import fsSync from "node:fs";
 import crypto from "node:crypto";
 //#region src/channels/pairing/pairing-store.ts
 const PAIRING_CODE_LENGTH = 8;
@@ -36,11 +36,11 @@ function requestAccountId(entry) {
 }
 function readStore(filePath) {
 	try {
-		if (!fs.existsSync(filePath)) return {
+		if (!fsSync.existsSync(filePath)) return {
 			version: 1,
 			requests: []
 		};
-		const raw = fs.readFileSync(filePath, "utf-8");
+		const raw = fsSync.readFileSync(filePath, "utf-8");
 		const parsed = JSON.parse(raw);
 		if (parsed && Array.isArray(parsed.requests)) return {
 			version: 1,
@@ -54,10 +54,10 @@ function readStore(filePath) {
 }
 function writeStore(filePath, store) {
 	const dir = path.dirname(filePath);
-	fs.mkdirSync(dir, { recursive: true });
-	fs.writeFileSync(filePath, JSON.stringify(store, null, 2), "utf-8");
+	fsSync.mkdirSync(dir, { recursive: true });
+	fsSync.writeFileSync(filePath, JSON.stringify(store, null, 2), "utf-8");
 	try {
-		fs.chmodSync(filePath, 384);
+		fsSync.chmodSync(filePath, 384);
 	} catch {}
 }
 /**

package/dist/src/chat-commands/builtins/config.js

@@ -3,10 +3,10 @@ import { init_logger } from "../../utils/logger.js";
 import { ConfigSchema, init_schema } from "../../config/schema.js";
 import { init_paths, resolveConfigPath } from "../../config/paths.js";
 import { init_loader, loadConfig, saveConfig } from "../../config/loader.js";
+import { resolveAllowlistMatchSimple } from "../../channels/security.js";
 import { commandRegistry } from "../registry.js";
-import { parseConfigValue } from "../config-value.js";
 import { getConfigValueAtPath, parseConfigPath, setConfigValueAtPath, unsetConfigValueAtPath } from "../config-paths.js";
-import { resolveAllowlistMatchSimple } from "../../channels/security.js";
+import { parseConfigValue } from "../config-value.js";
 //#region src/chat-commands/builtins/config.ts
 init_schema();
 init_loader();

package/dist/src/chat-commands/builtins/review.js

@@ -1,7 +1,7 @@
+import { commandRegistry } from "../registry.js";
 import { resolveEffectiveAgentProfileForSession } from "../../config/agent-profile.js";
 import { effectiveWorkspacePathForSession } from "../../session/session-workspace.js";
 import { getProjectForSession } from "../../projects/workspace.js";
-import { commandRegistry } from "../registry.js";
 import { buildReviewDiffBundle, parseReviewTargetArgs, resolveGitRoot } from "../../review/review-git.js";
 import { formatReviewMarkdown } from "../../review/review-types.js";
 import { randomUUID } from "node:crypto";

package/dist/src/chat-commands/builtins/session.js

@@ -1,5 +1,5 @@
-import { commandRegistry } from "../registry.js";
 import { getSessionDisplayName } from "../session-key.js";
+import { commandRegistry } from "../registry.js";
 //#region src/chat-commands/builtins/session.ts
 const newCommand = {
 	id: "session.new",

package/dist/src/chat-commands/builtins/thinking.js

@@ -1,5 +1,5 @@
-import { formatThinkingLevels, normalizeReasoningLevel, normalizeThinkLevel, normalizeVerboseLevel } from "../../agent/transcript/thinking-types.js";
 import { commandRegistry } from "../registry.js";
+import { formatThinkingLevels, normalizeReasoningLevel, normalizeThinkLevel, normalizeVerboseLevel } from "../../agent/transcript/thinking-types.js";
 //#region src/chat-commands/builtins/thinking.ts
 async function setSessionAgentField(store, sessionKey, field, value) {
 	if (!store) return;

package/dist/src/chat-commands/builtins/tts.js

@@ -1,7 +1,7 @@
 import { isTTSAvailable } from "../../voice/tts/factory.js";
 import { appendTtsReadinessNote, formatTtsSetupHint, mergeTtsConfigFromAppConfig } from "../../voice/tts/merge-config.js";
-import { commandRegistry } from "../registry.js";
 import { ttsStatusTracker } from "../../voice/tts/status-tracker.js";
+import { commandRegistry } from "../registry.js";
 import "../../voice/tts/index.js";
 //#region src/chat-commands/builtins/tts.ts
 function defaultTtsVoiceForProvider(provider) {