@xopcai/xopc 0.0.276 → 0.0.278

package/dist/src/extensions/index.js

@@ -2,12 +2,12 @@ import { init_normalize_manifest, normalizeExtensionManifest } from "./normalize
 import { areExtensionsGloballyDisabled, discoverExtensionsFromDisk, init_discover_extensions } from "./discover-extensions.js";
 import { ManifestRegistry, init_manifest_registry } from "./manifest-registry.js";
 import { buildExtensionMetadataSnapshot, init_extension_metadata_snapshot, resolveExtensionLoaderOptionsFromConfig } from "./extension-metadata-snapshot.js";
+import { collectConfiguredChannelIds, collectConfiguredProviderIds, mergeActivationContext } from "./activation-context.js";
 import { HOOK_EXECUTION_MODES } from "./types/hooks.js";
 import { BUILTIN_PROVIDERS } from "./types/providers.js";
 import { ExtensionRegistryImpl } from "./extension-registry-impl.js";
 import { ExtensionApiImpl, createExtensionLogger, createPathResolver } from "./api.js";
 import { ActivationPlanner } from "./activation-planner.js";
-import { collectConfiguredChannelIds, collectConfiguredProviderIds, mergeActivationContext } from "./activation-context.js";
 import { ExtensionLoader, normalizeExtensionConfig, resolveExtensionPath } from "./loader.js";
 import { listOnboardChannels, listOnboardProviders, resolveProviderForModel } from "./onboard-helpers.js";
 import { ExtensionHookRunner, createHookContext, isHookEvent } from "./hooks.js";

package/dist/src/extensions/loader.js

@@ -8,10 +8,10 @@ import { areExtensionsGloballyDisabled, discoverExtensionsFromDisk, init_discove
 import { ManifestRegistry, init_manifest_registry } from "./manifest-registry.js";
 import { init_loader, loadConfig } from "../config/loader.js";
 import { getProviderRegistry, init_plugin_registry } from "../providers/plugin-registry.js";
+import { mergeActivationContext } from "./activation-context.js";
 import { ExtensionRegistryImpl } from "./extension-registry-impl.js";
 import { ExtensionApiImpl, createExtensionLogger, createPathResolver } from "./api.js";
 import { ActivationPlanner } from "./activation-planner.js";
-import { mergeActivationContext } from "./activation-context.js";
 import { checkEngineCompatibility } from "./engine-check.js";
 import { validateSpeechProviderContracts } from "./speech-provider-contracts.js";
 import { validateMediaUnderstandingProviderContracts } from "./media-provider-contracts.js";

package/dist/src/extensions/lockfile.js

@@ -1,7 +1,7 @@
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
-import { init_paths, resolveExtensionsDir, resolveExtensionsLockPath } from "../config/paths.js";
 import { init_write_file_atomic, writeTextAtomic } from "../infra/write-file-atomic.js";
+import { init_paths, resolveExtensionsDir, resolveExtensionsLockPath } from "../config/paths.js";
 import { dirname, join } from "path";
 import { existsSync } from "fs";
 import { mkdir, readFile } from "fs/promises";

package/dist/src/extensions/sdk/index.js

@@ -1,4 +1,5 @@
 import { ProviderPluginRegistry, getProviderRegistry, init_plugin_registry } from "../../providers/plugin-registry.js";
+import { defineChannelPluginEntry } from "./channel-entry.js";
 import { HOOK_EXECUTION_MODES } from "../types/hooks.js";
 import { TypedEventBus } from "../typed-event-bus.js";
 import { ExtensionRegistryImpl } from "../extension-registry-impl.js";
@@ -8,7 +9,6 @@ import { ExtensionDiagnostics, ExtensionLoaderCacheImpl, getExtensionCache, getE
 import "../loader.js";
 import { ExtensionHookRunner, createHookContext, isHookEvent } from "../hooks.js";
 import { registerExtensionCliProgram } from "./channel-helpers.js";
-import { defineChannelPluginEntry } from "./channel-entry.js";
 import { lazyFunction, lazyModule } from "./lazy.js";
 import { createMockExtensionApi, createTestGateway } from "./testing.js";
 //#region src/extensions/sdk/index.ts

package/dist/src/extensions/update.js

@@ -4,8 +4,8 @@ import { init_paths, resolveBundledExtensionsDir, resolveExtensionsDir } from ".
 import { init_loader, loadConfig } from "../config/loader.js";
 import { downloadExtensionStoreZipBuffer, resolveExtensionZipDownloadUrl, resolveExtensionsStoreBaseUrl, verifyStoreArtifactSha256 } from "../agent/skills/marketplace/adapters/store/store-api-client.js";
 import { getExtensionLockfileManager } from "./lockfile.js";
-import { findExtension } from "./marketplace.js";
 import { installExtensionFromStoreZip, installFromNpm } from "./install.js";
+import { findExtension } from "./marketplace.js";
 import { join } from "node:path";
 import { existsSync, readFileSync, readdirSync, rmSync } from "node:fs";
 import semver from "semver";

package/dist/src/gateway/agents-admin.js

@@ -1,11 +1,11 @@
 import { init_agent_scope, listAgentEntries, normalizeAgentId, resolveAgentDir, resolveAgentProfileDir, resolveAgentWorkspaceDir, resolveDefaultAgentId, resolveUserPath, validateAgentIdForNewAgent } from "../agent/agent-scope.js";
-import { resolveEffectiveAgentProfile } from "../config/agent-profile.js";
 import { WORKSPACE_FILES, init_paths } from "../config/paths.js";
-import { AGENT_PROFILE_MARKDOWN_SYSTEM_FILES, REQUIRED_AGENT_PROFILE_MARKDOWN_FILE_SET } from "../agent/context/workspace.js";
-import { isPathUnderWorkspace, resolveWorkspaceSafePath } from "./workspace-editor-path.js";
-import { seedAgentProfileMarkdownFiles } from "../agent/context/workspace-seed.js";
+import { resolveEffectiveAgentProfile } from "../config/agent-profile.js";
 import { applyAgentConfig, findAgentEntryIndex, getAgentDeleteBlocker, pruneAgentConfig, removeAgentDirsFromDisk } from "../commands/agents.config.js";
 import { GATEWAY_BUILTIN_TOOL_IDS } from "./agent-builtin-tools.js";
+import { AGENT_PROFILE_MARKDOWN_SYSTEM_FILES, REQUIRED_AGENT_PROFILE_MARKDOWN_FILE_SET } from "../agent/context/workspace.js";
+import { seedAgentProfileMarkdownFiles } from "../agent/context/workspace-seed.js";
+import { isPathUnderWorkspace, resolveWorkspaceSafePath } from "./workspace-editor-path.js";
 import { join, resolve } from "node:path";
 import { mkdir, readFile, realpath, stat, unlink, writeFile } from "node:fs/promises";
 //#region src/gateway/agents-admin.ts

package/dist/src/gateway/device-routes.js

@@ -1,6 +1,6 @@
-import { getTunnelService } from "../tunnel/tunnel-service.js";
-import { resolveReverseProxyPublicUrl } from "./public-url.js";
 import { getTailscaleExposureState } from "./tailscale-lifecycle.js";
+import { resolveReverseProxyPublicUrl } from "./public-url.js";
+import { getTunnelService } from "../tunnel/tunnel-service.js";
 import crypto from "node:crypto";
 //#region src/gateway/device-routes.ts
 function secureUrl(value) {

package/dist/src/gateway/file-path-classifier.js

@@ -1,9 +1,9 @@
 import { init_paths_state, resolveStateDir } from "../config/paths-state.js";
 import { init_agent_scope, resolveAgentProfileDir } from "../agent/agent-scope.js";
-import { extractProfileAgentId } from "../config/agent-profile.js";
 import { init_paths, resolveConfigPath, resolveSkillsDir } from "../config/paths.js";
-import { isBareProfileMarkdownFileName, resolveProfileMarkdownPathIfBareName } from "../agent/tools/tool-paths.js";
+import { extractProfileAgentId } from "../config/agent-profile.js";
 import { isPathUnderWorkspace, resolveWorkspaceSafePath } from "./workspace-editor-path.js";
+import { isBareProfileMarkdownFileName, resolveProfileMarkdownPathIfBareName } from "../agent/tools/tool-paths.js";
 import { basename, isAbsolute, resolve } from "node:path";
 import { stat } from "node:fs/promises";
 //#region src/gateway/file-path-classifier.ts

package/dist/src/gateway/hono/app.js

@@ -1,13 +1,13 @@
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
 import { listDevices } from "../../storage/sqlite/device-access-repository.js";
+import { BROWSER_EXTENSION_ID } from "../../browser/extension-identity.js";
 import { resolveAllowedBrowserOrigins, resolveGatewayServiceListenPort } from "../host.js";
 import { resolveGatewayEffectiveHost } from "../../config/gateway-bind.js";
-import { loadTunnelState } from "../../tunnel/tunnel-state.js";
-import { resolveReverseProxyPublicUrl } from "../public-url.js";
 import { maxSessionInputRequestBodyBytes } from "../chat-limits.js";
-import { BROWSER_EXTENSION_ID } from "../../browser/extension-identity.js";
 import { isLoopbackIpAddress, isTrustedProxyAddress } from "../client-ip.js";
+import { resolveReverseProxyPublicUrl } from "../public-url.js";
+import { loadTunnelState } from "../../tunnel/tunnel-state.js";
 import { buildGatewayConsoleCspHeader } from "../security/csp.js";
 import { checkBrowserOrigin, isChromeExtensionOrigin } from "../security/origin-check.js";
 import { auth } from "./middleware/auth.js";

package/dist/src/gateway/hono/lib/config-payload.d.ts

@@ -105,6 +105,7 @@ export declare function buildSafeWebConfigPayload(service: GatewayService, optio
                     mode: "docker";
                     image: string;
                     network: boolean;
+                    workspaceAccess: "read-only" | "read-write";
                 };
                 maxTurns?: number;
                 timeoutMs?: number;

package/dist/src/gateway/hono/lib/config-payload.js

@@ -1,17 +1,17 @@
 import { ContextPlanningConfigSchema, KnowledgeMemoryConfigSchema, UserModelConfigSchema, init_config } from "../../../user-context/config.js";
 import { init_agent_scope, listAgentEntries, normalizeAgentId, resolveDefaultAgentId } from "../../../agent/agent-scope.js";
 import { resolveModelsJsonPath } from "../../../config/paths.js";
-import { buildChannelCatalogForConfig, buildChannelCatalogFromSnapshot, getChannelSetupStatus, init_channel_catalog_service } from "../../../channels/catalog/channel-catalog-service.js";
 import { init_models_json, loadModelsJson } from "../../../config/models-json.js";
 import { CredentialResolver, init_credentials } from "../../../auth/credentials.js";
+import { buildChannelCatalogForConfig, buildChannelCatalogFromSnapshot, getChannelSetupStatus, init_channel_catalog_service } from "../../../channels/catalog/channel-catalog-service.js";
 import { getProviderRegistry, init_plugin_registry } from "../../../providers/plugin-registry.js";
 import { getAllProviders, init_providers, isProviderConfigured } from "../../../providers/index.js";
 import { normalizeConfiguredMcpServers } from "../../../config/mcp-config-normalize.js";
-import { resolveShareConfig } from "../../../share/share-config.js";
-import { maskTunnelSecretForWeb } from "../../../tunnel/env.js";
 import { resolveSessionConfigForWeb, resolveUpdateConfigForWeb } from "../../../config/web-patch.js";
 import { GENERIC_MASKED_SECRET, maskSecretLength } from "./mask-secret-length.js";
 import { safeToolsWebForGet } from "../../config-tools-web.js";
+import { maskTunnelSecretForWeb } from "../../../tunnel/env.js";
+import { resolveShareConfig } from "../../../share/share-config.js";
 import { buildSafeProvidersConfigForWeb } from "./safe-providers-config.js";
 import { maskRealtimeVoiceConfigForWeb, maskSttConfigForWeb, maskTtsConfigForWeb } from "./safe-voice-config.js";
 //#region src/gateway/hono/lib/config-payload.ts

package/dist/src/gateway/hono/routes/agents.js

@@ -1,8 +1,8 @@
 import { AgentModelsOverrideSchema, AgentProfileSchema, RuntimePolicySchema, SkillOverrideSchema, ToolPoliciesSchema, WorkflowPolicySchema } from "../../../agent-config/schema.js";
 import { init_agent_config } from "../../../agent-config/index.js";
 import { init_agent_scope, normalizeAgentId } from "../../../agent/agent-scope.js";
-import { deleteAgentAvatarFile, finalizeCreateAgentDirs, getGatewayAgentEffectiveConfig, listAgentProfileFiles, listGatewayAgents, prepareCreateAgent, prepareDeleteAgent, prepareUpdateAgent, readAgentAvatarFile, readAgentProfileFile, runAfterDeletePurge, writeAgentAvatarFromBase64, writeAgentProfileFile } from "../../agents-admin.js";
 import { getVoiceModelsConfig } from "../../../config/voice.js";
+import { deleteAgentAvatarFile, finalizeCreateAgentDirs, getGatewayAgentEffectiveConfig, listAgentProfileFiles, listGatewayAgents, prepareCreateAgent, prepareDeleteAgent, prepareUpdateAgent, readAgentAvatarFile, readAgentProfileFile, runAfterDeletePurge, writeAgentAvatarFromBase64, writeAgentProfileFile } from "../../agents-admin.js";
 //#region src/gateway/hono/routes/agents.ts
 init_agent_config();
 init_agent_scope();

package/dist/src/gateway/hono/routes/auth-registry-extensions.js

@@ -1,8 +1,8 @@
 import { getAllModels, getAvailableModels, init_providers } from "../../../providers/index.js";
-import { ActivationPlanner } from "../../../extensions/activation-planner.js";
 import { mergeActivationContext } from "../../../extensions/activation-context.js";
-import { buildWhenContextSnapshot } from "../../../extensions/when-context.js";
+import { ActivationPlanner } from "../../../extensions/activation-planner.js";
 import { fetchRegistry, listExtensions, searchExtensions } from "../../../extensions/marketplace.js";
+import { buildWhenContextSnapshot } from "../../../extensions/when-context.js";
 import { createOAuthAsyncHandler } from "../oauth-async.js";
 import { createOAuthHandler } from "../oauth.js";
 import { extensionAssetMimeType } from "../lib/extension-assets.js";

package/dist/src/gateway/hono/routes/browser.js

@@ -1,8 +1,8 @@
 import { deleteBrowserTabBinding, getBrowserTabBinding, setBrowserTabBinding } from "../../../storage/sqlite/browser-tab-binding-repository.js";
 import { browserTabBindingRequestSchema } from "../../../../packages/gateway-contract/src/browser-tab-binding.js";
 import { getDevice } from "../../../storage/sqlite/device-access-repository.js";
-import "../../../../packages/browser-control-contract/src/index.js";
 import { decideBrowserApproval, listBrowserApprovals } from "../../../browser/policy/approval-store.js";
+import "../../../../packages/browser-control-contract/src/index.js";
 import { createBrowserDriver } from "../../../browser/drivers/create-driver.js";
 import { checkBrowserReadiness } from "../../../browser/readiness.js";
 import { isLoopbackClientIp } from "../../security/loopback.js";

package/dist/src/gateway/hono/routes/commands-skills.js

@@ -1,11 +1,11 @@
+import { commandRegistry } from "../../../chat-commands/registry.js";
 import { effectiveWorkspacePathForSession } from "../../../session/session-workspace.js";
 import { getProjectForSession } from "../../../projects/workspace.js";
+import { buildReviewContext, resolveGitRoot } from "../../../review/review-git.js";
+import "../../../chat-commands/index.js";
 import { isRegisteredProvider } from "../../../agent/skills/marketplace/registry.js";
 import "../../../agent/skills/skills-marketplace.js";
 import { isSkillInstallTarget } from "../../../agent/skills/install-target.js";
-import { commandRegistry } from "../../../chat-commands/registry.js";
-import { buildReviewContext, resolveGitRoot } from "../../../review/review-git.js";
-import "../../../chat-commands/index.js";
 //#region src/gateway/hono/routes/commands-skills.ts
 function parseMarketplaceProviderQuery(raw) {
 	const v = raw?.trim().toLowerCase();

package/dist/src/gateway/hono/routes/config-patch/gateway.js

@@ -1,8 +1,8 @@
 import { init_public_url, validatePublicUrl } from "../../../../config/public-url.js";
 import { isValidIPv4 } from "../../../../config/gateway-bind.js";
+import { isMaskedSecretPatchValue } from "../../lib/mask-secret-length.js";
 import { mergeShareConfigPatch } from "../../../../share/share-config.js";
 import { mergeSiteShareConfigPatch } from "../../../../share/site-share-config.js";
-import { isMaskedSecretPatchValue } from "../../lib/mask-secret-length.js";
 import { PATCH_OK, patchError } from "./result.js";
 //#region src/gateway/hono/routes/config-patch/gateway.ts
 init_public_url();

package/dist/src/gateway/hono/routes/mcp.js

@@ -1,7 +1,7 @@
-import { canonicalizeConfiguredMcpServer, normalizeConfiguredMcpServers } from "../../../config/mcp-config-normalize.js";
-import { loadMergedBundleMcpConfig } from "../../../agent/mcp/bundle-mcp-config.js";
 import { isManagedConnectorServer } from "../../../connectors/materialize.js";
 import { getWorkspacePath } from "../../../config/workspace-path-helpers.js";
+import { canonicalizeConfiguredMcpServer, normalizeConfiguredMcpServers } from "../../../config/mcp-config-normalize.js";
+import { loadMergedBundleMcpConfig } from "../../../agent/mcp/bundle-mcp-config.js";
 import { getMcpOAuthManager } from "../../../agent/mcp/oauth/mcp-oauth-manager.js";
 import { listBundleMcpServerCapabilitiesForGateway, listBundleMcpServerToolsForGateway } from "../../../agent/mcp/bundle-mcp-gateway.js";
 //#region src/gateway/hono/routes/mcp.ts

package/dist/src/gateway/hono/routes/media.js

@@ -1,6 +1,6 @@
+import { MAX_WEBCHAT_ATTACHMENT_FILE_BYTES } from "../../chat-limits.js";
 import { mimeTypeFromMediaPath, saveMediaBuffer } from "../../../media/store.js";
 import { readMediaReference } from "../../../media/media-reference.js";
-import { MAX_WEBCHAT_ATTACHMENT_FILE_BYTES } from "../../chat-limits.js";
 import { createGatewayRouteLogger } from "../lib/route-logger.js";
 import { resolveScopedMediaReference } from "../../media-access.js";
 //#region src/gateway/hono/routes/media.ts

package/dist/src/gateway/hono/routes/models.js

@@ -1,5 +1,5 @@
-import { resolveModelsJsonPath } from "../../../config/paths.js";
 import { init_resolve_config_value, testApiKeyResolution } from "../../../config/resolve-config-value.js";
+import { resolveModelsJsonPath } from "../../../config/paths.js";
 import { init_models_json, loadModelsJson, saveModelsJson, validateModelsConfig } from "../../../config/models-json.js";
 import { getModelCatalogStore, init_model_catalog_store } from "../../../providers/model-catalog-store.js";
 import { getModelRegistry } from "../../../providers/model-registry.js";
@@ -7,13 +7,13 @@ import { CredentialResolver, init_credentials } from "../../../auth/credentials.
 import "../../../providers/constants.js";
 import { getProviderRegistry, init_plugin_registry } from "../../../providers/plugin-registry.js";
 import { PROVIDER_META, getAllModels, getAllProviders, getAvailableModels, getProviderAuthState, init_providers, isProviderConfigured, isProviderConfiguredSync } from "../../../providers/index.js";
-import { buildCapabilityPlansForConfig } from "../../../capabilities/readiness/from-config.js";
-import "../../../capabilities/readiness/index.js";
+import { deleteCustomImageProvider, listCustomImageProviders, upsertCustomImageProvider } from "../../custom-image-providers.js";
 import { getImageGenerationProvider, reloadImageGenerationProviders, resolveImageGenerationCredentialMode } from "../../../agent/image/generation/provider-registry.js";
+import { getAgentImageGenerationConfig, getDefaultImageGenerationConfig, getImageGenerationCatalog, prepareDefaultImageGenerationSetup, prepareImageGenerationSetup, verifyImageGenerationCredential } from "../../image-generation-setup.js";
 import { SessionConfigStore } from "../../../session/config-store.js";
+import { buildCapabilityPlansForConfig } from "../../../capabilities/readiness/from-config.js";
+import "../../../capabilities/readiness/index.js";
 import { getModelThinking } from "../../../providers/model-thinking.js";
-import { deleteCustomImageProvider, listCustomImageProviders, upsertCustomImageProvider } from "../../custom-image-providers.js";
-import { getAgentImageGenerationConfig, getDefaultImageGenerationConfig, getImageGenerationCatalog, prepareDefaultImageGenerationSetup, prepareImageGenerationSetup, verifyImageGenerationCredential } from "../../image-generation-setup.js";
 import { discoverProviderModels, isProviderApiDiscoverable } from "../../../providers/model-discovery.js";
 import { getXopcCloudCatalogCoordinator } from "../../../providers/xopc-cloud-catalog-coordinator.js";
 import { respondStartupUnavailable } from "../lib/startup-unavailable.js";

package/dist/src/gateway/hono/routes/notes.js

@@ -2,9 +2,9 @@ import { ObjectLinkService } from "../../../activity/service.js";
 import { buildSessionKey, init_session_key } from "../../../routing/session-key.js";
 import { agentExists, getDefaultAgentId, init_resolve_route } from "../../../routing/resolve-route.js";
 import { resolveGatewayEffectiveHost } from "../../../config/gateway-bind.js";
+import { resolveReverseProxyPublicUrl } from "../../public-url.js";
 import { getShareStore } from "../../../share/share-store.js";
 import { resolveShareUrl } from "../../../share/share-url.js";
-import { resolveReverseProxyPublicUrl } from "../../public-url.js";
 import { getGatewayPrincipal } from "../../security/gateway-principal.js";
 import { NoteShareService, NoteShareVersionConflictError } from "../../../share/note-share-service.js";
 import { createReadStream } from "node:fs";

package/dist/src/gateway/hono/routes/proactive-control.js

@@ -1,11 +1,11 @@
 import { getSqliteDatabase } from "../../../storage/sqlite/transaction.js";
 import { ProactiveConflict, proactivePreferences, updateProactivePreferences } from "../../../proactive/policy/service.js";
+import { recordProactivePresence } from "../../../proactive/policy/presence.js";
 import { controlledSubscriptions, createControlledSubscription, requireSubscription, templateCatalog, updateControlledSubscription } from "../../../proactive/scenarios/control.js";
-import { listMailFollowUps, mailFollowUpSources, startMailFollowUp, updateMailFollowUp } from "../../../proactive/follow-ups.js";
 import { cardChanges, getCard, listCards, performCardAction } from "../../../proactive/inbox/cards.js";
-import { checkDelegation, delegationOverview, startDelegation } from "../../../proactive/experience.js";
-import { recordProactivePresence } from "../../../proactive/policy/presence.js";
 import { digestCards } from "../../../proactive/inbox/digest.js";
+import { listMailFollowUps, mailFollowUpSources, startMailFollowUp, updateMailFollowUp } from "../../../proactive/follow-ups.js";
+import { checkDelegation, delegationOverview, startDelegation } from "../../../proactive/experience.js";
 import { acknowledgeBrowserProbe, listBrowserProbes, prepareBrowserPush, registerBrowserPush, testBrowserPush, unregisterBrowserPush } from "../../../notifications/web-push.js";
 import { ReadonlyProactiveAgentExecutor } from "../../../proactive/execution/agent-executor.js";
 import { proactiveMetrics } from "../../../proactive/metrics.js";
@@ -127,7 +127,7 @@ function registerProactiveControlRoutes(app, deps) {
 		return c.json({
 			ok: true,
 			runs: getSqliteDatabase().prepare(`SELECT run_id AS id, status, outcome_reason AS reason,
-      started_at AS startedAt, completed_at AS completedAt, error_message AS error FROM proactive_runs WHERE subscription_id = ? ORDER BY started_at DESC LIMIT 30`).all(c.req.param("id"))
+      started_at AS startedAt, completed_at AS completedAt, error_message AS error, attempt, next_attempt_at AS nextAttemptAt FROM proactive_runs WHERE subscription_id = ? ORDER BY started_at DESC LIMIT 30`).all(c.req.param("id"))
 		});
 	});
 	app.get("/api/proactive/cards", (c) => c.json({

package/dist/src/gateway/hono/routes/projects.js

@@ -5,8 +5,6 @@ import "../../../storage/sqlite/index.js";
 import { ActivityService } from "../../../activity/service.js";
 import "../../../activity/index.js";
 import { resolveEffectiveAgentProfile } from "../../../config/agent-profile.js";
-import { TaskRepository } from "../../../tasks/task-repository.js";
-import { TaskReadModelProjector } from "../../../tasks/task-read-model-projector.js";
 import { ExecutionEnvironmentStore } from "../../../execution-environments/store.js";
 import { listKnowledgeItems, writeKnowledgeItem } from "../../../knowledge-memory/repository.js";
 import "../../../knowledge-memory/index.js";
@@ -16,6 +14,8 @@ import { isValidProjectAgentId, normalizeProjectAgentId, resolveProjectAgentId }
 import { inferSuggestedProjectDefaultAgentId } from "../../../projects/project-agent-suggestion.js";
 import { buildProjectLoopOverview } from "../../../projects/project-loop.js";
 import "../../../projects/index.js";
+import { TaskRepository } from "../../../tasks/task-repository.js";
+import { TaskReadModelProjector } from "../../../tasks/task-read-model-projector.js";
 import { TaskApplicationService } from "../../../tasks/task-application-service.js";
 import { defineTaskContract } from "../../../tasks/task-contract-definition.js";
 import { ProjectOperatingViewService, summarizeProjectOperatingView } from "../../../tasks/project-operating-view-service.js";

package/dist/src/gateway/hono/routes/sessions.js

@@ -1,11 +1,11 @@
 import { deleteBrowserTabBinding } from "../../../storage/sqlite/browser-tab-binding-repository.js";
 import { SessionDiscoveryQuerySchema } from "../../../../packages/gateway-contract/src/session-identity.js";
 import { buildSessionKey, init_session_key } from "../../../routing/session-key.js";
+import { SessionEnvironmentService } from "../../../execution-environments/session-environment-service.js";
 import { resolveProjectAgentId } from "../../../projects/project-agent.js";
 import "../../../projects/index.js";
 import { messagesToClientHistory } from "../../../session/client-history.js";
 import { evictEmbeddedSessionRunner } from "../../../agent/embedded/session-runner.js";
-import { SessionEnvironmentService } from "../../../execution-environments/session-environment-service.js";
 import { deleteMediaUrisNoLongerReferenced } from "../../../media/session-references.js";
 import { getGatewayPrincipal } from "../../security/gateway-principal.js";
 import { createGatewayRouteLogger, logRouteError } from "../lib/route-logger.js";

package/dist/src/gateway/hono/routes/shares.js

@@ -1,7 +1,9 @@
 import { loadCompactionSourceSnapshot } from "../../../storage/sqlite/transcript-repository.js";
 import "../../../storage/sqlite/index.js";
-import { FileServiceError } from "../../../files/file-service.js";
 import { resolveGatewayEffectiveHost } from "../../../config/gateway-bind.js";
+import { FileServiceError } from "../../../files/file-service.js";
+import { resolveReverseProxyPublicUrl } from "../../public-url.js";
+import { getGatewayFileSpaceService } from "../../file-space-service.js";
 import { SHARE_CONFIG_DEFAULTS } from "../../../share/share-types.js";
 import { resolveSiteShareConfig } from "../../../share/site-share-config.js";
 import { logShareAudit } from "../../../share/share-audit.js";
@@ -12,10 +14,8 @@ import { SessionShareService, SessionShareSnapshotConflictError } from "../../..
 import { HostedPublicationPublisher, HostedSessionShareBuilder, HostedShareAuthorizationError, HostedShareBindingStore, HostedShareRemoteError } from "../../../share/hosted-session-share.js";
 import { HostedStaticSitePublicationBuilder } from "../../../share/hosted-static-site-publication.js";
 import { publishHostedStaticSite } from "../../../share/hosted-static-site-publish.js";
-import { resolveReverseProxyPublicUrl } from "../../public-url.js";
 import { audienceDefaults, cleanupStagedSite, decideShareKind, forgetStagedSite, makeDescription, makeTitle, probeShareTarget, rememberStagedSite, stageSingleHtmlAsSite } from "../../../share/share-auto.js";
 import { deleteThumbnail, placeholderSvg, readThumbnail, scheduleThumbnail, thumbnailContentType, thumbnailExists } from "../../../share/share-thumbnail.js";
-import { getGatewayFileSpaceService } from "../../file-space-service.js";
 import { getClientIpFromHeaders } from "../../security/loopback.js";
 import { SHARED_HTML_CSP } from "../../security/csp.js";
 import { getGatewayPrincipal } from "../../security/gateway-principal.js";
@@ -1571,7 +1571,28 @@ function registerShareRoutes(authenticated, deps) {
 		const patch = {};
 		if (typeof body.extendTtlMs === "number") patch.extendTtlMs = body.extendTtlMs;
 		if (body.maxViews === null || typeof body.maxViews === "number") patch.maxViews = body.maxViews;
-		const updated = store.update(id, patch);
+		const existing = store.getById(id);
+		if (patch.extendTtlMs !== void 0 && existing) {
+			if (existing.revoked) return c.json({
+				ok: false,
+				error: { message: "This share was revoked and cannot be restored" }
+			}, 409);
+			if (existing.kind === "file" || existing.kind === "directory") {
+				if (!(await store.validateFileIntegrity(existing)).valid) return c.json({
+					ok: false,
+					error: { message: "The original artifact is missing or was replaced. Generate a new artifact from the task." }
+				}, 410);
+			}
+		}
+		let updated;
+		try {
+			updated = store.update(id, patch);
+		} catch (error) {
+			return c.json({
+				ok: false,
+				error: { message: error instanceof Error ? error.message : "Cannot renew share" }
+			}, 400);
+		}
 		if (!updated) return c.json({
 			ok: false,
 			error: { message: "Not found" }

package/dist/src/gateway/hono/routes/site-shares.js

@@ -1,8 +1,8 @@
 import { resolveGatewayEffectiveHost } from "../../../config/gateway-bind.js";
+import { resolveReverseProxyPublicUrl } from "../../public-url.js";
 import { resolveSiteShareConfig } from "../../../share/site-share-config.js";
 import { getSiteShareStore } from "../../../share/site-share-store.js";
 import { resolveSiteShareUrl } from "../../../share/share-url.js";
-import { resolveReverseProxyPublicUrl } from "../../public-url.js";
 import { getGatewayPrincipal } from "../../security/gateway-principal.js";
 import { createHash } from "node:crypto";
 //#region src/gateway/hono/routes/site-shares.ts

package/dist/src/gateway/hono/routes/status.js

@@ -1,8 +1,8 @@
 import { getDefaultModelSync, init_providers, resolveModel } from "../../../providers/index.js";
-import { getGatewayAgentEffectiveConfig } from "../../agents-admin.js";
 import { isSTTAvailable } from "../../../voice/stt/availability.js";
 import { mergeSttConfigFromAppConfig } from "../../../voice/stt/config.js";
 import "../../../voice/stt/index.js";
+import { getGatewayAgentEffectiveConfig } from "../../agents-admin.js";
 import { createHash } from "node:crypto";
 //#region src/gateway/hono/routes/status.ts
 init_providers();

package/dist/src/gateway/hono/routes/tasks.js

@@ -4,14 +4,14 @@ import { TaskBoardPositionRequestSchema, TaskCommandRequestSchema, TaskContextIn
 import { ProjectMonitoringUpdateSchema } from "../../../../packages/gateway-contract/src/project-monitoring.js";
 import { enqueueTaskChangedEvent } from "../../../tasks/task-change-events.js";
 import { TaskRunRepository } from "../../../tasks/task-run-repository.js";
-import { TaskRepository } from "../../../tasks/task-repository.js";
-import { TaskConversationRepository } from "../../../tasks/task-conversation-repository.js";
-import { TaskReadModelProjector } from "../../../tasks/task-read-model-projector.js";
 import { resolveProjectAgentId } from "../../../projects/project-agent.js";
 import { TaskContextRepository } from "../../../tasks/task-context-repository.js";
+import { TaskRepository } from "../../../tasks/task-repository.js";
+import { TaskReadModelProjector } from "../../../tasks/task-read-model-projector.js";
 import { TaskDependencyError, TaskDependencyService } from "../../../tasks/task-dependency-service.js";
 import { TaskApplicationService } from "../../../tasks/task-application-service.js";
 import { ProjectMonitoringService } from "../../../tasks/project-monitoring-service.js";
+import { TaskConversationRepository } from "../../../tasks/task-conversation-repository.js";
 import { ProjectOperatingViewService } from "../../../tasks/project-operating-view-service.js";
 import { TaskValueMetricsService } from "../../../tasks/task-value-metrics-service.js";
 import { TaskHandoffService } from "../../../tasks/task-handoff-service.js";
@@ -406,6 +406,13 @@ function registerTaskRoutes(authenticated, deps) {
 				latest: result.model
 			}, 409);
 		}
+		if (parsed.data.command?.type === "add_wait" && parsed.data.command.wait.kind === "paused" || parsed.data.command?.type === "close" || parsed.data.command?.type === "resolve_wait" && parsed.data.command.resolution?.kind === "task_approval" && parsed.data.command.resolution.decision === "deny") {
+			const activeRun = runs.getActiveRoot(c.req.param("id"));
+			if (activeRun?.sessionKey) {
+				const liveRunId = deps.service.getActiveWebchatRunId(activeRun.sessionKey);
+				if (liveRunId) await deps.service.abortAgentRun(liveRunId);
+			}
+		}
 		if (result.runId || parsed.data.command?.type === "resolve_wait") deps.service.dispatchTaskRuns();
 		else deps.service.dispatchTaskEvents();
 		if (parsed.data.command?.type === "close" && parsed.data.command.resolution === "done") signals.dependencyClosed(c.req.param("id"));

package/dist/src/gateway/hono/routes/user-model.js

@@ -1,15 +1,15 @@
 import { createCollaborationRule, getCollaborationRule, listCollaborationRules, setCollaborationRuleStatus } from "../../../storage/sqlite/collaboration-rule-repository.js";
-import { getKnowledgeItem, listKnowledgeItems, searchKnowledgeItems, setKnowledgeStatus } from "../../../knowledge-memory/repository.js";
-import "../../../knowledge-memory/index.js";
 import { createPriorityWindow, createUserGoal, listPriorityWindows, listUserGoals, setUserGoalStatus } from "../../../user-model/goals.js";
 import { getAssertionSlot, getUserAssertion, listUserAssertionSources, listUserAssertions, reconcileAssertion, setAssertionStatus } from "../../../user-model/repository.js";
 import { applyUserProfilePatch, getUserProfileSnapshot } from "../../../user-model/profile.js";
 import { bootstrapUserModel } from "../../../user-model/bootstrap.js";
 import "../../../user-model/index.js";
+import { getKnowledgeItem, listKnowledgeItems, searchKnowledgeItems, setKnowledgeStatus } from "../../../knowledge-memory/repository.js";
+import "../../../knowledge-memory/index.js";
+import { listUnderstandingSourceGrants } from "../../../user-context/sources/repository.js";
+import { getExecutionContextAudit, recordExecutionContextFeedback } from "../../../agent/context/audit.js";
 import { listMemoryMaintenanceRuns } from "../../../memory-maintenance/service.js";
 import "../../../memory-maintenance/index.js";
-import { getExecutionContextAudit, recordExecutionContextFeedback } from "../../../agent/context/audit.js";
-import { listUnderstandingSourceGrants } from "../../../user-context/sources/repository.js";
 import { userInfo } from "node:os";
 //#region src/gateway/hono/routes/user-model.ts
 function object(value) {

package/dist/src/gateway/hono/routes/voice.js

@@ -2,17 +2,17 @@ import { getDefaultModelSync, init_providers, resolveModel } from "../../../prov
 import { completeWithResolvedCredentials } from "../../../providers/model-call.js";
 import { resolveTtsProviderConfigSlice } from "../../../voice/tts/config-slice.js";
 import { isTTSAvailable, resolveSpeechProvider } from "../../../voice/tts/factory.js";
-import { speak, speakStream } from "../../../voice/tts/speak-core.js";
 import { mergeTtsConfigFromAppConfig } from "../../../voice/tts/merge-config.js";
+import { speak, speakStream } from "../../../voice/tts/speak-core.js";
 import { getLocalVoiceRuntimeClient } from "../../../voice/local/runtime-client.js";
 import { getAudioDecoderStatus } from "../../../voice/audio/normalize.js";
 import { resolveSttProviderConfigSlice } from "../../../voice/stt/config-slice.js";
-import { STTTranscriptionError, transcribe } from "../../../voice/stt/transcribe-core.js";
 import { isSTTAvailable } from "../../../voice/stt/availability.js";
+import "../../../voice/tts/index.js";
+import { STTTranscriptionError, transcribe } from "../../../voice/stt/transcribe-core.js";
 import { mergeSttConfigFromAppConfig } from "../../../voice/stt/config.js";
 import "../../../voice/stt/index.js";
 import { listSttProvidersForApi } from "../../../voice/stt/list-providers.js";
-import "../../../voice/tts/index.js";
 import { withModelConfigLock } from "../../../session/model-config-lock.js";
 import { createVoiceSessionRequestSchema } from "../../../../packages/realtime-protocol/src/voice.js";
 import { resolveOmniRoute } from "../../../voice/realtime/omniRoute.js";

package/dist/src/gateway/hono/routes/workflows.js

@@ -1,9 +1,9 @@
 import { init_agent_scope, resolveDefaultAgentId } from "../../../agent/agent-scope.js";
+import { validateWorkflowDefinitionInput } from "../../../workflows/domain/validation.js";
+import { WorkflowNameConflictError, WorkflowRevisionConflictError, createWorkflowCatalog } from "../../../agent/workflow/catalog.js";
 import { resolveProjectAgentId } from "../../../projects/project-agent.js";
 import "../../../projects/index.js";
 import { messagesToClientHistory } from "../../../session/client-history.js";
-import { validateWorkflowDefinitionInput } from "../../../workflows/domain/validation.js";
-import { WorkflowNameConflictError, WorkflowRevisionConflictError, createWorkflowCatalog } from "../../../agent/workflow/catalog.js";
 import "../../../workflows/domain/index.js";
 import { resolveWorkflowRunArtifactsDir } from "../../../workflows/store/paths.js";
 import { WorkflowDraftService } from "../../../workflows/draft/workflow-draft-service.js";

package/dist/src/gateway/image-generation-setup.js

@@ -1,8 +1,8 @@
 import { ConfigSchema, init_schema } from "../config/schema.js";
 import { init_agent_scope, normalizeAgentId } from "../agent/agent-scope.js";
-import { resolveEffectiveAgentConfigForAgent } from "../config/agent-profile.js";
 import { fetchWithTimeoutGuarded } from "../media-shared/http/provider-http.js";
 import "../media-shared/http/index.js";
+import { resolveEffectiveAgentConfigForAgent } from "../config/agent-profile.js";
 import { getImageGenerationProvider, listImageGenerationProvidersSummary } from "../agent/image/generation/provider-registry.js";
 //#region src/gateway/image-generation-setup.ts
 init_agent_scope();

package/dist/src/gateway/lock.js

@@ -1,8 +1,8 @@
 import path from "node:path";
-import fs from "node:fs";
+import fsSync from "node:fs";
 import { createHash } from "node:crypto";
 import net from "node:net";
-import fs$1 from "node:fs/promises";
+import fs from "node:fs/promises";
 import { homedir } from "os";
 //#region src/gateway/lock.ts
 /**
@@ -57,7 +57,7 @@ function isPidAlive(pid) {
 function readLinuxStartTime(pid) {
 	if (process.platform !== "linux") return null;
 	try {
-		const raw = fs.readFileSync(`/proc/${pid}/stat`, "utf8").trim();
+		const raw = fsSync.readFileSync(`/proc/${pid}/stat`, "utf8").trim();
 		const closeParen = raw.lastIndexOf(")");
 		if (closeParen < 0) return null;
 		const fields = raw.slice(closeParen + 1).trim().split(/\s+/);
@@ -69,7 +69,7 @@ function readLinuxStartTime(pid) {
 }
 async function readLockPayload(lockPath) {
 	try {
-		const raw = await fs$1.readFile(lockPath, "utf8");
+		const raw = await fs.readFile(lockPath, "utf8");
 		const parsed = JSON.parse(raw);
 		if (typeof parsed.pid !== "number") return null;
 		if (typeof parsed.createdAt !== "string") return null;
@@ -105,11 +105,11 @@ async function acquireGatewayLock(configPath, opts = {}) {
 	const staleMs = opts.staleMs ?? DEFAULT_STALE_MS;
 	const port = opts.port;
 	const lockPath = resolveLockPath(configPath);
-	await fs$1.mkdir(path.dirname(lockPath), { recursive: true });
+	await fs.mkdir(path.dirname(lockPath), { recursive: true });
 	const startedAt = Date.now();
 	let lastPayload = null;
 	while (Date.now() - startedAt < timeoutMs) try {
-		const handle = await fs$1.open(lockPath, "wx");
+		const handle = await fs.open(lockPath, "wx");
 		const startTime = process.platform === "linux" ? readLinuxStartTime(process.pid) : null;
 		const payload = {
 			pid: process.pid,
@@ -124,7 +124,7 @@ async function acquireGatewayLock(configPath, opts = {}) {
 			configPath,
 			release: async () => {
 				await handle.close().catch(() => void 0);
-				await fs$1.rm(lockPath, { force: true });
+				await fs.rm(lockPath, { force: true });
 				console.log(`[GatewayLock] Lock released: lockPath=${lockPath}`);
 			}
 		};
@@ -135,7 +135,7 @@ async function acquireGatewayLock(configPath, opts = {}) {
 		const ownerStatus = ownerPid ? await resolveOwnerStatus(ownerPid, lastPayload, port) : "unknown";
 		if (ownerStatus === "dead" && ownerPid) {
 			console.warn(`[GatewayLock] Cleaning up stale gateway lock: pid=${ownerPid}`);
-			await fs$1.rm(lockPath, { force: true });
+			await fs.rm(lockPath, { force: true });
 			continue;
 		}
 		if (ownerStatus !== "alive") {
@@ -145,14 +145,14 @@ async function acquireGatewayLock(configPath, opts = {}) {
 				stale = Number.isFinite(createdAt) ? Date.now() - createdAt > staleMs : false;
 			}
 			if (!stale) try {
-				const st = await fs$1.stat(lockPath);
+				const st = await fs.stat(lockPath);
 				stale = Date.now() - st.mtimeMs > staleMs;
 			} catch {
 				stale = false;
 			}
 			if (stale) {
 				console.warn(`[GatewayLock] Removing stale lock file: lockPath=${lockPath}`);
-				await fs$1.rm(lockPath, { force: true });
+				await fs.rm(lockPath, { force: true });
 				continue;
 			}
 		}