@xopcai/xopc 0.0.277 → 0.0.278

package/dist/src/agent/tools/skills-tools.js

@@ -1,7 +1,7 @@
 import { resolveStateDir } from "../../config/paths-state.js";
 import { init_paths } from "../../config/paths.js";
-import { DEFAULT_MAX_BYTES, formatSize, truncateHead } from "./truncate.js";
 import { createSkillConfigManager, isSkillEnabled, resolveSkillConfig } from "../skills/config.js";
+import { DEFAULT_MAX_BYTES, formatSize, truncateHead } from "./truncate.js";
 import { resolveSkillReadablePath } from "../skills/skill-view-path.js";
 import { readFileSync, statSync } from "fs";
 import { Type } from "@sinclair/typebox";

package/dist/src/agent/tools/tool-paths.js

@@ -16,7 +16,9 @@ function resolvePathUnderWorkspace(userPath, workspaceRoot) {
 }
 /** True if `userPath` is only a profile-system filename, e.g. `SOUL.md` or `.\SOUL.md` (basename matches). */
 function isBareProfileMarkdownFileName(userPath) {
-	const b = basename(userPath.replace(/\\/g, "/"));
+	const normalized = userPath.replace(/\\/g, "/").replace(/^\.\//, "");
+	if (normalized.includes("/")) return false;
+	const b = basename(normalized);
 	if (!b || b === "." || b === "..") return false;
 	return PROFILE_SYSTEM_MARKDOWN_NAME_LOWER.has(b.toLowerCase());
 }

package/dist/src/agent/tools/tts-tool.js

@@ -1,8 +1,8 @@
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
-import { speak } from "../../voice/tts/speak-core.js";
 import { mergeTtsConfigFromAppConfig } from "../../voice/tts/merge-config.js";
 import { getChannelOutputFormat } from "../../voice/tts/service.js";
+import { speak } from "../../voice/tts/speak-core.js";
 import { compressAudio } from "../../voice/tts/audio.js";
 import { persistOutboundTtsAudio } from "../../channels/attachments/outbound-tts-persist.js";
 import { Type } from "@sinclair/typebox";

package/dist/src/agent/tools/user-context-tool.js

@@ -1,7 +1,7 @@
-import { retrievalLexicalSimilarity } from "../../retrieval/textFeatures.js";
 import { getAssertionSlot, getUserAssertion, listUserAssertions, reconcileAssertion, setAssertionStatus } from "../../user-model/repository.js";
 import { isWorkingAssumption } from "../../user-model/usage-policy.js";
 import "../../user-model/index.js";
+import { retrievalLexicalSimilarity } from "../../retrieval/textFeatures.js";
 import { Type } from "@sinclair/typebox";
 //#region src/agent/tools/user-context-tool.ts
 const SearchSchema = Type.Object({

package/dist/src/agent/tools/write.js

@@ -1,10 +1,10 @@
 import { appendProductDeliveryText } from "../../../packages/gateway-contract/src/product-delivery.js";
-import { checkFileSafety } from "../prompt/safety.js";
-import { isBareProfileMarkdownFileName, resolvePathUnderWorkspace, resolveProfileMarkdownPathIfBareName } from "./tool-paths.js";
 import { fileResourceId, fileSpaceId } from "../../files/file-service.js";
-import { evaluateFilePolicy } from "../sandbox/exec-policy.js";
-import { basename, dirname, relative, sep } from "path";
-import { mkdir, realpath, writeFile } from "fs/promises";
+import { isBareProfileMarkdownFileName, resolvePathUnderWorkspace, resolveProfileMarkdownPathIfBareName } from "./tool-paths.js";
+import { writeWorkspaceFile } from "../sandbox/fileAccess.js";
+import { checkFileSafety } from "../prompt/safety.js";
+import { basename, relative, sep } from "path";
+import { realpath } from "fs/promises";
 import { Type } from "@sinclair/typebox";
 //#region src/agent/tools/write.ts
 const MAX_FILE_SIZE = 10 * 1024 * 1024;
@@ -37,18 +37,6 @@ function createWriteFileTool(workspace, options) {
 				};
 				const writesProfileFile = Boolean(options?.profileMarkdownRoot && isBareProfileMarkdownFileName(p.path));
 				const workspaceRoot = writesProfileFile ? options.profileMarkdownRoot : workspace;
-				const pathPolicy = evaluateFilePolicy({
-					operation: "write",
-					path: p.path,
-					workspaceRoot
-				});
-				if (!pathPolicy.allowed) return {
-					content: [{
-						type: "text",
-						text: `🚫 Sandbox: ${pathPolicy.reason}`
-					}],
-					details: { status: "failed" }
-				};
 				const contentBytes = Buffer.byteLength(p.content, "utf-8");
 				if (contentBytes > MAX_FILE_SIZE) return {
 					content: [{
@@ -58,8 +46,7 @@ function createWriteFileTool(workspace, options) {
 					details: { status: "failed" }
 				};
 				const target = writesProfileFile ? resolveProfileMarkdownPathIfBareName(p.path, options.profileMarkdownRoot) : resolvePathUnderWorkspace(p.path, workspace);
-				await mkdir(dirname(target), { recursive: true });
-				await writeFile(target, p.content, "utf-8");
+				writeWorkspaceFile(workspaceRoot, target, p.content);
 				const delivery = writesProfileFile ? void 0 : await Promise.all([realpath(workspace), realpath(target)]).then(([root, canonicalTarget]) => ({
 					version: 1,
 					operation: "updated",

package/dist/src/agent/tools/xopc-use-tool.js

@@ -9,19 +9,19 @@ import "../../storage/sqlite/index.js";
 import { ObjectLinkService } from "../../activity/service.js";
 import "../../activity/index.js";
 import { getDefaultAgentId, init_resolve_route } from "../../routing/resolve-route.js";
-import { TaskRepository } from "../../tasks/task-repository.js";
-import { TaskReadModelProjector } from "../../tasks/task-read-model-projector.js";
+import { CreateAutomationSchema, UpdateAutomationSchema } from "../../automations/domain/validation.js";
+import "../../automations/index.js";
 import { isValidProjectAgentId, normalizeProjectAgentId, resolveProjectAgentId } from "../../projects/project-agent.js";
 import "../../projects/index.js";
-import { updateControlledSubscription } from "../../proactive/scenarios/control.js";
-import { continueMailFollowUp, mailFollowUpSources, startMailFollowUp, updateMailFollowUp } from "../../proactive/follow-ups.js";
 import { TaskContextRepository } from "../../tasks/task-context-repository.js";
+import { TaskRepository } from "../../tasks/task-repository.js";
+import { TaskReadModelProjector } from "../../tasks/task-read-model-projector.js";
 import { TaskDependencyError, TaskDependencyService } from "../../tasks/task-dependency-service.js";
 import { TaskApplicationService } from "../../tasks/task-application-service.js";
+import { updateControlledSubscription } from "../../proactive/scenarios/control.js";
 import { getCard } from "../../proactive/inbox/cards.js";
+import { continueMailFollowUp, mailFollowUpSources, startMailFollowUp, updateMailFollowUp } from "../../proactive/follow-ups.js";
 import { checkDelegation, delegationOverview, startDelegation } from "../../proactive/experience.js";
-import { CreateAutomationSchema, UpdateAutomationSchema } from "../../automations/domain/validation.js";
-import "../../automations/index.js";
 import { defineTaskContract } from "../../tasks/task-contract-definition.js";
 import { TaskDeletionService } from "../../tasks/task-deletion-service.js";
 import "../../tasks/index.js";

package/dist/src/agent/workflow/subagent-runner.js

@@ -1,9 +1,9 @@
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
 import { createSqliteTranscriptRuntime } from "../embedded/transcript-runtime.js";
+import { STRUCTURED_OUTPUT_TOOL_NAME, createStructuredOutputTool } from "./structured-output-tool.js";
 import { createDelegateChildHandle } from "../child-agent-factory.js";
 import { DEFAULT_DELEGATE_TOOLS, DELEGATE_BLOCKED_TOOLS } from "../tools/delegate-tool.js";
-import { STRUCTURED_OUTPUT_TOOL_NAME, createStructuredOutputTool } from "./structured-output-tool.js";
 //#region src/agent/workflow/subagent-runner.ts
 init_logger();
 const log = createLogger("Agent:WorkflowSubagent");

package/dist/src/agent-config/schema.d.ts

@@ -122,6 +122,10 @@ export declare const RuntimePolicySchema: z.ZodObject<{
         mode: z.ZodLiteral<"docker">;
         image: z.ZodString;
         network: z.ZodDefault<z.ZodBoolean>;
+        workspaceAccess: z.ZodDefault<z.ZodEnum<{
+            "read-only": "read-only";
+            "read-write": "read-write";
+        }>>;
     }, z.core.$strict>], "mode">>;
     maxTurns: z.ZodOptional<z.ZodNumber>;
     timeoutMs: z.ZodOptional<z.ZodNumber>;
@@ -192,6 +196,10 @@ export declare const AgentDefaultsSchema: z.ZodObject<{
             mode: z.ZodLiteral<"docker">;
             image: z.ZodString;
             network: z.ZodDefault<z.ZodBoolean>;
+            workspaceAccess: z.ZodDefault<z.ZodEnum<{
+                "read-only": "read-only";
+                "read-write": "read-write";
+            }>>;
         }, z.core.$strict>], "mode">>;
         maxTurns: z.ZodOptional<z.ZodNumber>;
         timeoutMs: z.ZodOptional<z.ZodNumber>;
@@ -275,6 +283,10 @@ export declare const AgentEntrySchema: z.ZodObject<{
             mode: z.ZodLiteral<"docker">;
             image: z.ZodString;
             network: z.ZodDefault<z.ZodBoolean>;
+            workspaceAccess: z.ZodDefault<z.ZodEnum<{
+                "read-only": "read-only";
+                "read-write": "read-write";
+            }>>;
         }, z.core.$strict>], "mode">>;
         maxTurns: z.ZodOptional<z.ZodNumber>;
         timeoutMs: z.ZodOptional<z.ZodNumber>;
@@ -348,6 +360,10 @@ export declare const AgentsConfigSchema: z.ZodObject<{
                 mode: z.ZodLiteral<"docker">;
                 image: z.ZodString;
                 network: z.ZodDefault<z.ZodBoolean>;
+                workspaceAccess: z.ZodDefault<z.ZodEnum<{
+                    "read-only": "read-only";
+                    "read-write": "read-write";
+                }>>;
             }, z.core.$strict>], "mode">>;
             maxTurns: z.ZodOptional<z.ZodNumber>;
             timeoutMs: z.ZodOptional<z.ZodNumber>;
@@ -427,6 +443,10 @@ export declare const AgentsConfigSchema: z.ZodObject<{
                 mode: z.ZodLiteral<"docker">;
                 image: z.ZodString;
                 network: z.ZodDefault<z.ZodBoolean>;
+                workspaceAccess: z.ZodDefault<z.ZodEnum<{
+                    "read-only": "read-only";
+                    "read-write": "read-write";
+                }>>;
             }, z.core.$strict>], "mode">>;
             maxTurns: z.ZodOptional<z.ZodNumber>;
             timeoutMs: z.ZodOptional<z.ZodNumber>;
@@ -506,6 +526,10 @@ export declare const EffectiveAgentConfigSchema: z.ZodObject<{
             mode: z.ZodLiteral<"docker">;
             image: z.ZodString;
             network: z.ZodDefault<z.ZodBoolean>;
+            workspaceAccess: z.ZodDefault<z.ZodEnum<{
+                "read-only": "read-only";
+                "read-write": "read-write";
+            }>>;
         }, z.core.$strict>], "mode">>;
         maxTurns: z.ZodOptional<z.ZodNumber>;
         timeoutMs: z.ZodOptional<z.ZodNumber>;

package/dist/src/agent-config/schema.js

@@ -80,7 +80,8 @@ var init_schema = __esmMin((() => {
 		commandIsolation: z.discriminatedUnion("mode", [z.object({ mode: z.literal("host") }).strict(), z.object({
 			mode: z.literal("docker"),
 			image: z.string().regex(/^[a-zA-Z0-9][a-zA-Z0-9./:_-]*@sha256:[a-f0-9]{64}$/),
-			network: z.boolean().default(false)
+			network: z.boolean().default(false),
+			workspaceAccess: z.enum(["read-only", "read-write"]).default("read-only")
 		}).strict()]).optional(),
 		maxTurns: z.number().int().positive().optional(),
 		timeoutMs: z.number().int().positive().optional(),

package/dist/src/ai-assist/text-assist.js

@@ -1,9 +1,9 @@
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
+import { getAssistantMessageErrorReason, stripCodeFences } from "../providers/model-response.js";
 import { getDefaultModelSync, init_providers, resolveModel } from "../providers/index.js";
 import { createExtensionAwareStreamFn } from "../providers/extension-stream-bridge.js";
 import { isLocalModelBaseUrl, resolveModelCallApiKey, resolveModelCallOptions } from "../providers/model-call.js";
-import { getAssistantMessageErrorReason, stripCodeFences } from "../providers/model-response.js";
 //#region src/ai-assist/text-assist.ts
 init_providers();
 init_logger();

package/dist/src/auth/credentials.js

@@ -1,10 +1,10 @@
 import { __esmMin } from "../../_virtual/_rolldown/runtime.js";
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
-import { init_paths, resolveAgentAuthProfilesPath, resolveAuthProfilesPath, resolveCredentialsDir, resolveOAuthPath } from "../config/paths.js";
 import { init_write_file_atomic, writeTextAtomic } from "../infra/write-file-atomic.js";
-import { getOAuthProviderDefinition, init_registry } from "./oauth/registry.js";
+import { init_paths, resolveAgentAuthProfilesPath, resolveAuthProfilesPath, resolveCredentialsDir, resolveOAuthPath } from "../config/paths.js";
 import { getApiKeyFromEnv, init_env_keys } from "../providers/env-keys.js";
+import { getOAuthProviderDefinition, init_registry } from "./oauth/registry.js";
 import { init_oauth_provider_lock, withOAuthProviderLock } from "./oauth-provider-lock.js";
 import { dirname, join } from "path";
 import { mkdir, readFile, readdir, rm } from "fs/promises";

package/dist/src/auth/oauth/xopc-cloud.js

@@ -1,6 +1,6 @@
 import { __esmMin } from "../../../_virtual/_rolldown/runtime.js";
-import { init_resolution, resolveConnectedPlatformEndpoint } from "../../platform/resolution.js";
 import { generatePKCE, init_pkce } from "./pkce.js";
+import { init_resolution, resolveConnectedPlatformEndpoint } from "../../platform/resolution.js";
 import { hostname } from "node:os";
 import { randomBytes } from "node:crypto";
 import http from "node:http";

package/dist/src/auth/profiles/store.js

@@ -1,5 +1,5 @@
-import { init_paths, resolveCredentialsDir } from "../../config/paths.js";
 import { init_write_file_atomic, writeTextAtomicSync } from "../../infra/write-file-atomic.js";
+import { init_paths, resolveCredentialsDir } from "../../config/paths.js";
 import path from "node:path";
 import { chmodSync, existsSync, mkdirSync, readFileSync } from "node:fs";
 //#region src/auth/profiles/store.ts

package/dist/src/auth/sync-provider-auth.js

@@ -1,8 +1,8 @@
 import { __esmMin } from "../../_virtual/_rolldown/runtime.js";
-import { getDefaultAgentId, init_resolve_route } from "../routing/resolve-route.js";
 import { init_paths, resolveAgentAuthProfilesPath, resolveAuthProfilesPath, resolveOAuthPath } from "../config/paths.js";
-import { init_loader, loadConfig } from "../config/loader.js";
 import { init_registry, isOAuthOnlyProvider } from "./oauth/registry.js";
+import { init_loader, loadConfig } from "../config/loader.js";
+import { getDefaultAgentId, init_resolve_route } from "../routing/resolve-route.js";
 import { existsSync, readFileSync } from "node:fs";
 //#region src/auth/sync-provider-auth.ts
 /**

package/dist/src/browser/providers/browser-ext-install.js

@@ -2,8 +2,8 @@ import { PACKAGE_VERSION, init_package_version } from "../../package-version.js"
 import { resolveStateDir } from "../../config/paths-state.js";
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
-import { init_paths, resolveBinDir, resolveConfigPath } from "../../config/paths.js";
 import { init_write_file_atomic, writeTextAtomic } from "../../infra/write-file-atomic.js";
+import { init_paths, resolveBinDir, resolveConfigPath } from "../../config/paths.js";
 import { assertCacheDir } from "../cache-dir-policy.js";
 import { BROWSER_EXTENSION_ID, BROWSER_NATIVE_HOST_NAME } from "../extension-identity.js";
 import "../native-messaging-host.js";

package/dist/src/capabilities/store-connector.js

@@ -1,5 +1,5 @@
-import { downloadConnectorStoreZipBuffer, fetchStoreConnectorPackageDetail, listConnectorPackages, resolveSkillsStoreBaseUrl } from "../agent/skills/marketplace/adapters/store/store-api-client.js";
 import { installConnectorDefinition } from "../connectors/install.js";
+import { downloadConnectorStoreZipBuffer, fetchStoreConnectorPackageDetail, listConnectorPackages, resolveSkillsStoreBaseUrl } from "../agent/skills/marketplace/adapters/store/store-api-client.js";
 import { createHash } from "node:crypto";
 import { isIP } from "node:net";
 import AdmZip from "adm-zip";

package/dist/src/channels/attachments/voice-stt-webchat.js

@@ -1,9 +1,9 @@
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
-import { decodeInboundAttachmentBase64, readInboundAttachmentBuffer } from "./inbound-persist.js";
-import { transcribe } from "../../voice/stt/transcribe-core.js";
 import { isSTTAvailable } from "../../voice/stt/availability.js";
+import { transcribe } from "../../voice/stt/transcribe-core.js";
 import "../../voice/stt/index.js";
+import { decodeInboundAttachmentBase64, readInboundAttachmentBuffer } from "./inbound-persist.js";
 //#region src/channels/attachments/voice-stt-webchat.ts
 init_logger();
 const STT_MAX_BYTES = 25 * 1024 * 1024;

package/dist/src/channels/index.js

@@ -1,6 +1,4 @@
 import { parseFrontmatterBlock } from "../markdown/frontmatter.js";
-import { getChannelPlugin, getChannelRegistryVersion, listChannelPlugins, syncChannelPluginsFromManager } from "./plugins/registry.js";
-import { compileAllowlist, evaluateAccess, hasBotMention, removeBotMention, resolveAllowlistMatch, resolveAllowlistMatchSimple, resolveDmPolicy, resolveGroupPolicy } from "./security.js";
 import { findFenceSpanAt, isSafeFenceBreak, parseFenceSpans } from "../markdown/fences.js";
 import { chunkText } from "../markdown/chunk.js";
 import { chunkMarkdownIR, markdownToIR, markdownToIRWithMeta } from "../markdown/ir.js";
@@ -8,7 +6,9 @@ import { renderMarkdownWithMarkers } from "../markdown/render.js";
 import { convertMarkdownTables } from "../markdown/tables.js";
 import { buildCodeSpanIndex, createInlineCodeState } from "../markdown/code-spans.js";
 import "./format.js";
+import { compileAllowlist, evaluateAccess, hasBotMention, removeBotMention, resolveAllowlistMatch, resolveAllowlistMatchSimple, resolveDmPolicy, resolveGroupPolicy } from "./security.js";
 import { MessagePipeline, createEnvelopeTimestampHandler, createFilterCommandsHandler, createFilterEmptyHandler, createFilterSelfHandler, createPipeline, standardPreflightHandlers, standardProcessHandlers } from "./pipeline.js";
+import { getChannelPlugin, getChannelRegistryVersion, listChannelPlugins, syncChannelPluginsFromManager } from "./plugins/registry.js";
 import { ChannelManager, createChannelManager } from "./manager.js";
 import { collectSetupWizardChannels } from "./setup-wizard-discovery.js";
 export { ChannelManager, MessagePipeline, buildCodeSpanIndex, chunkMarkdownIR, chunkText, collectSetupWizardChannels, compileAllowlist, convertMarkdownTables, createChannelManager, createEnvelopeTimestampHandler, createFilterCommandsHandler, createFilterEmptyHandler, createFilterSelfHandler, createInlineCodeState, createPipeline, evaluateAccess, findFenceSpanAt, getChannelPlugin, getChannelRegistryVersion, hasBotMention, isSafeFenceBreak, listChannelPlugins, markdownToIR, markdownToIRWithMeta, parseFenceSpans, parseFrontmatterBlock, removeBotMention, renderMarkdownWithMarkers, resolveAllowlistMatch, resolveAllowlistMatchSimple, resolveDmPolicy, resolveGroupPolicy, standardPreflightHandlers, standardProcessHandlers, syncChannelPluginsFromManager };

package/dist/src/channels/outbound-sender.js

@@ -1,8 +1,8 @@
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
+import "./internal-outbound.js";
 import { mergeTtsConfigFromAppConfig } from "../voice/tts/merge-config.js";
 import { maybeApplyTtsToPayload } from "../voice/tts/payload.js";
-import "./internal-outbound.js";
 import { deliverOutboundMessage } from "./outbound/deliver.js";
 import { OutboundPersistStore } from "./outbound/persist-store.js";
 //#region src/channels/outbound-sender.ts

package/dist/src/channels/pairing/allow-from-file.js

@@ -1,13 +1,13 @@
 import path from "node:path";
-import fs from "node:fs";
+import fsSync from "node:fs";
 //#region src/channels/pairing/allow-from-file.ts
 function readAllowFromFile(filePath) {
 	try {
-		if (!fs.existsSync(filePath)) return {
+		if (!fsSync.existsSync(filePath)) return {
 			version: 1,
 			allowFrom: []
 		};
-		const raw = fs.readFileSync(filePath, "utf-8");
+		const raw = fsSync.readFileSync(filePath, "utf-8");
 		const parsed = JSON.parse(raw);
 		if (Array.isArray(parsed.allowFrom)) return {
 			version: 1,
@@ -26,13 +26,13 @@ function appendAllowFromIdSync(filePath, userId) {
 	const trimmed = userId.trim();
 	if (!trimmed) return { changed: false };
 	const dir = path.dirname(filePath);
-	fs.mkdirSync(dir, { recursive: true });
+	fsSync.mkdirSync(dir, { recursive: true });
 	const content = readAllowFromFile(filePath);
 	if (content.allowFrom.includes(trimmed)) return { changed: false };
 	content.allowFrom.push(trimmed);
-	fs.writeFileSync(filePath, JSON.stringify(content, null, 2), "utf-8");
+	fsSync.writeFileSync(filePath, JSON.stringify(content, null, 2), "utf-8");
 	try {
-		fs.chmodSync(filePath, 384);
+		fsSync.chmodSync(filePath, 384);
 	} catch {}
 	return { changed: true };
 }
@@ -43,13 +43,13 @@ function removeAllowFromIdSync(filePath, userId) {
 	const next = content.allowFrom.filter((id) => id !== trimmed);
 	if (next.length === content.allowFrom.length) return { changed: false };
 	const dir = path.dirname(filePath);
-	fs.mkdirSync(dir, { recursive: true });
-	fs.writeFileSync(filePath, JSON.stringify({
+	fsSync.mkdirSync(dir, { recursive: true });
+	fsSync.writeFileSync(filePath, JSON.stringify({
 		version: 1,
 		allowFrom: next
 	}, null, 2), "utf-8");
 	try {
-		fs.chmodSync(filePath, 384);
+		fsSync.chmodSync(filePath, 384);
 	} catch {}
 	return { changed: true };
 }

package/dist/src/channels/pairing/pairing-store.js

@@ -1,7 +1,7 @@
 import { appendAllowFromIdSync } from "./allow-from-file.js";
 import "./pairing-constants.js";
 import path from "node:path";
-import fs from "node:fs";
+import fsSync from "node:fs";
 import crypto from "node:crypto";
 //#region src/channels/pairing/pairing-store.ts
 const PAIRING_CODE_LENGTH = 8;
@@ -36,11 +36,11 @@ function requestAccountId(entry) {
 }
 function readStore(filePath) {
 	try {
-		if (!fs.existsSync(filePath)) return {
+		if (!fsSync.existsSync(filePath)) return {
 			version: 1,
 			requests: []
 		};
-		const raw = fs.readFileSync(filePath, "utf-8");
+		const raw = fsSync.readFileSync(filePath, "utf-8");
 		const parsed = JSON.parse(raw);
 		if (parsed && Array.isArray(parsed.requests)) return {
 			version: 1,
@@ -54,10 +54,10 @@ function readStore(filePath) {
 }
 function writeStore(filePath, store) {
 	const dir = path.dirname(filePath);
-	fs.mkdirSync(dir, { recursive: true });
-	fs.writeFileSync(filePath, JSON.stringify(store, null, 2), "utf-8");
+	fsSync.mkdirSync(dir, { recursive: true });
+	fsSync.writeFileSync(filePath, JSON.stringify(store, null, 2), "utf-8");
 	try {
-		fs.chmodSync(filePath, 384);
+		fsSync.chmodSync(filePath, 384);
 	} catch {}
 }
 /**

package/dist/src/chat-commands/builtins/config.js

@@ -3,10 +3,10 @@ import { init_logger } from "../../utils/logger.js";
 import { ConfigSchema, init_schema } from "../../config/schema.js";
 import { init_paths, resolveConfigPath } from "../../config/paths.js";
 import { init_loader, loadConfig, saveConfig } from "../../config/loader.js";
+import { resolveAllowlistMatchSimple } from "../../channels/security.js";
 import { commandRegistry } from "../registry.js";
-import { parseConfigValue } from "../config-value.js";
 import { getConfigValueAtPath, parseConfigPath, setConfigValueAtPath, unsetConfigValueAtPath } from "../config-paths.js";
-import { resolveAllowlistMatchSimple } from "../../channels/security.js";
+import { parseConfigValue } from "../config-value.js";
 //#region src/chat-commands/builtins/config.ts
 init_schema();
 init_loader();

package/dist/src/chat-commands/builtins/review.js

@@ -1,7 +1,7 @@
+import { commandRegistry } from "../registry.js";
 import { resolveEffectiveAgentProfileForSession } from "../../config/agent-profile.js";
 import { effectiveWorkspacePathForSession } from "../../session/session-workspace.js";
 import { getProjectForSession } from "../../projects/workspace.js";
-import { commandRegistry } from "../registry.js";
 import { buildReviewDiffBundle, parseReviewTargetArgs, resolveGitRoot } from "../../review/review-git.js";
 import { formatReviewMarkdown } from "../../review/review-types.js";
 import { randomUUID } from "node:crypto";

package/dist/src/chat-commands/builtins/session.js

@@ -1,5 +1,5 @@
-import { commandRegistry } from "../registry.js";
 import { getSessionDisplayName } from "../session-key.js";
+import { commandRegistry } from "../registry.js";
 //#region src/chat-commands/builtins/session.ts
 const newCommand = {
 	id: "session.new",

package/dist/src/chat-commands/builtins/thinking.js

@@ -1,5 +1,5 @@
-import { formatThinkingLevels, normalizeReasoningLevel, normalizeThinkLevel, normalizeVerboseLevel } from "../../agent/transcript/thinking-types.js";
 import { commandRegistry } from "../registry.js";
+import { formatThinkingLevels, normalizeReasoningLevel, normalizeThinkLevel, normalizeVerboseLevel } from "../../agent/transcript/thinking-types.js";
 //#region src/chat-commands/builtins/thinking.ts
 async function setSessionAgentField(store, sessionKey, field, value) {
 	if (!store) return;

package/dist/src/chat-commands/builtins/tts.js

@@ -1,7 +1,7 @@
 import { isTTSAvailable } from "../../voice/tts/factory.js";
 import { appendTtsReadinessNote, formatTtsSetupHint, mergeTtsConfigFromAppConfig } from "../../voice/tts/merge-config.js";
-import { commandRegistry } from "../registry.js";
 import { ttsStatusTracker } from "../../voice/tts/status-tracker.js";
+import { commandRegistry } from "../registry.js";
 import "../../voice/tts/index.js";
 //#region src/chat-commands/builtins/tts.ts
 function defaultTtsVoiceForProvider(provider) {

package/dist/src/chat-commands/builtins/understanding.js

@@ -1,6 +1,6 @@
+import { commandRegistry } from "../registry.js";
 import { reconcileAssertion } from "../../user-model/repository.js";
 import "../../user-model/index.js";
-import { commandRegistry } from "../registry.js";
 import { createHash } from "node:crypto";
 //#region src/chat-commands/builtins/understanding.ts
 function parseRememberArgs(args) {

package/dist/src/chat-commands/builtins/workflow.js

@@ -1,7 +1,7 @@
-import { extractProfileAgentId } from "../../config/agent-profile.js";
-import { createWorkflowCatalog } from "../../agent/workflow/catalog.js";
 import { commandRegistry } from "../registry.js";
+import { extractProfileAgentId } from "../../config/agent-profile.js";
 import { bulletList, code, joinBlocks, section } from "../format-output.js";
+import { createWorkflowCatalog } from "../../agent/workflow/catalog.js";
 //#region src/chat-commands/builtins/workflow.ts
 /**
 * `/workflows` and `/workflow <subcommand>` — read-only commands for browsing

package/dist/src/chat-commands/context.js

@@ -2,10 +2,10 @@ import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
 import { getAgentDefaultModelRef, init_schema } from "../config/schema.js";
 import { init_loader, saveConfig } from "../config/loader.js";
-import { effectiveWorkspacePathForSession } from "../session/session-workspace.js";
-import { getProjectForSession } from "../projects/workspace.js";
 import { getSessionDisplayName } from "./session-key.js";
+import { effectiveWorkspacePathForSession } from "../session/session-workspace.js";
 import { wrapMarkdownExportAsHtml } from "../session/chat-export.js";
+import { getProjectForSession } from "../projects/workspace.js";
 import { join } from "path";
 import { mkdir, writeFile } from "fs/promises";
 //#region src/chat-commands/context.ts

package/dist/src/chat-commands/index.js

@@ -1,6 +1,8 @@
+import { generateSessionKey, getSessionDisplayName } from "./session-key.js";
 import { normalizeTelegramCommandName, parseSlashCommand } from "./command-parse.js";
 import { CommandRegistry, commandRegistry } from "./registry.js";
-import { generateSessionKey, getSessionDisplayName } from "./session-key.js";
+import { registerAgentEditCommand } from "./agent-edit.js";
+import { CommandContextImpl, createCommandContext } from "./context.js";
 import { registerSessionCommands } from "./builtins/session.js";
 import { registerModelCommands } from "./builtins/model.js";
 import { registerSystemCommands } from "./builtins/system.js";
@@ -12,8 +14,6 @@ import { registerWorkflowCommands } from "./builtins/workflow.js";
 import { registerReviewCommand } from "./builtins/review.js";
 import { registerSkillCommand } from "./builtins/skill.js";
 import { registerUnderstandingCommands } from "./builtins/understanding.js";
-import { registerAgentEditCommand } from "./agent-edit.js";
-import { CommandContextImpl, createCommandContext } from "./context.js";
 //#region src/chat-commands/index.ts
 /**
 * Unified Command System

package/dist/src/cli/commands/agent.js

@@ -2,17 +2,17 @@ import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
 import { getAgentDefaultModelRef, init_schema } from "../../config/schema.js";
 import { loadConfig } from "../../config/loader.js";
-import { ExtensionLoader } from "../../extensions/loader.js";
-import "../../extensions/index.js";
-import { MessageBus, MessageBusShutdownError } from "../../infra/bus/queue.js";
-import "../../infra/bus/index.js";
-import { AgentService } from "../../agent/service.js";
-import "../../agent/index.js";
 import { formatExamples, register } from "../registry.js";
 import { getContextWithOpts } from "../context.js";
+import { MessageBus, MessageBusShutdownError } from "../../infra/bus/queue.js";
+import "../../infra/bus/index.js";
 import { getWorkspacePath } from "../../config/workspace-path-helpers.js";
 import "../../config/index.js";
+import { ExtensionLoader } from "../../extensions/loader.js";
+import "../../extensions/index.js";
+import { AgentService } from "../../agent/service.js";
 import { getXopcCloudCatalogCoordinator } from "../../providers/xopc-cloud-catalog-coordinator.js";
+import "../../agent/index.js";
 import { listSessions } from "./agent/sessions.js";
 import { renderStreamToTerminal } from "./agent/stream-renderer.js";
 import { startInteractiveChat } from "./agent/interactive.js";

package/dist/src/cli/commands/agents.js

@@ -1,8 +1,8 @@
 import { init_agent_scope, listAgentEntries, normalizeAgentId, resolveAgentDir, resolveAgentProfileDir, resolveAgentWorkspaceDir, resolveDefaultAgentId, validateAgentIdForNewAgent } from "../../agent/agent-scope.js";
 import { init_paths, resolveConfigPath } from "../../config/paths.js";
 import { init_loader, loadConfig, saveConfig } from "../../config/loader.js";
-import { seedAgentProfileMarkdownFiles } from "../../agent/context/workspace-seed.js";
 import { applyAgentConfig, findAgentEntryIndex, getAgentDeleteBlocker, pruneAgentConfig, removeAgentDirsFromDisk } from "../../commands/agents.config.js";
+import { seedAgentProfileMarkdownFiles } from "../../agent/context/workspace-seed.js";
 import { colors } from "../utils/colors.js";
 import { mkdir } from "node:fs/promises";
 //#region src/cli/commands/agents.ts

package/dist/src/cli/commands/config.js

@@ -1,7 +1,7 @@
 import { ConfigSchema, init_schema } from "../../config/schema.js";
 import { init_write_file_atomic, writeTextAtomic } from "../../infra/write-file-atomic.js";
-import { resolveGatewayLocalClientHost } from "../../config/gateway-bind.js";
 import { formatExamples, register } from "../registry.js";
+import { resolveGatewayLocalClientHost } from "../../config/gateway-bind.js";
 import { existsSync, readFileSync } from "fs";
 import { Command } from "commander";
 //#region src/cli/commands/config.ts