@xopcai/xopc 0.0.293 → 0.0.295

package/dist/src/notifications/device-store.js

@@ -27,7 +27,7 @@ function normalizePreferences(input) {
 function deviceFromRow(row) {
 	return {
 		id: row.device_id,
-		platform: row.platform === "android" ? "android" : "ios",
+		platform: row.platform === "harmonyos" ? "harmonyos" : row.platform === "android" ? "android" : "ios",
 		pushToken: row.push_token,
 		enabled: row.enabled !== 0,
 		permissions: row.permissions === "granted" || row.permissions === "denied" ? row.permissions : "unknown",

package/dist/src/notifications/harmony-push.d.ts

@@ -0,0 +1,26 @@
+import type { NotificationTarget } from '@xopcai/gateway-contract';
+type ServiceAccount = {
+    project_id: string;
+    key_id: string;
+    sub_account: string;
+    private_key: string;
+};
+type PushCategory = 'WORK' | 'IM' | 'MARKETING';
+export type HarmonyPushConfig = {
+    accountFile: string;
+    category: PushCategory;
+    testMessage: boolean;
+};
+export type HarmonyNotification = {
+    pushToken: string;
+    eventId: string;
+    title: string;
+    body?: string;
+    gatewayId?: string;
+    target?: NotificationTarget;
+};
+export declare function harmonyPushConfig(env?: NodeJS.ProcessEnv): HarmonyPushConfig | undefined;
+export declare function createHarmonyPushJwt(account: ServiceAccount, now?: number): string;
+/** Uses HarmonyOS V3 service-account authentication, not the Android HMS OAuth flow. */
+export declare function sendHarmonyPush(notification: HarmonyNotification, fetchImpl?: typeof fetch, config?: HarmonyPushConfig | undefined): Promise<string>;
+export {};

package/dist/src/notifications/harmony-push.js

@@ -0,0 +1,94 @@
+import { isAbsolute } from "node:path";
+import { constants, createHash, createPrivateKey, sign } from "node:crypto";
+import { readFile } from "node:fs/promises";
+//#region src/notifications/harmony-push.ts
+function harmonyPushConfig(env = process.env) {
+	const accountFile = env.XOPC_HARMONY_PUSH_SERVICE_ACCOUNT?.trim();
+	const category = env.XOPC_HARMONY_PUSH_CATEGORY;
+	if (!accountFile || !isAbsolute(accountFile) || ![
+		"WORK",
+		"IM",
+		"MARKETING"
+	].includes(category ?? "")) return void 0;
+	return {
+		accountFile,
+		category,
+		testMessage: env.XOPC_HARMONY_PUSH_TEST_MESSAGE === "true"
+	};
+}
+function createHarmonyPushJwt(account, now = Date.now()) {
+	if (!/^\d+$/.test(account.project_id) || !account.key_id || !account.sub_account || !account.private_key) throw new Error("Invalid Harmony push service account");
+	const key = createPrivateKey(account.private_key);
+	if (key.asymmetricKeyType !== "rsa" || (key.asymmetricKeyDetails?.modulusLength ?? 0) < 2048) throw new Error("Harmony push requires an RSA service account key of at least 2048 bits");
+	const iat = Math.floor(now / 1e3);
+	const input = `${Buffer.from(JSON.stringify({
+		alg: "PS256",
+		typ: "JWT",
+		kid: account.key_id
+	})).toString("base64url")}.${Buffer.from(JSON.stringify({
+		iss: account.sub_account,
+		aud: "https://oauth-login.cloud.huawei.com/oauth2/v3/token",
+		iat,
+		exp: iat + 3600
+	})).toString("base64url")}`;
+	return `${input}.${sign("sha256", Buffer.from(input), {
+		key,
+		padding: constants.RSA_PKCS1_PSS_PADDING,
+		saltLength: constants.RSA_PSS_SALTLEN_DIGEST
+	}).toString("base64url")}`;
+}
+/** Uses HarmonyOS V3 service-account authentication, not the Android HMS OAuth flow. */
+async function sendHarmonyPush(notification, fetchImpl = fetch, config = harmonyPushConfig()) {
+	if (!config) throw new Error("Harmony push is not configured");
+	let account;
+	let jwt;
+	try {
+		account = JSON.parse(await readFile(config.accountFile, "utf8"));
+		jwt = createHarmonyPushJwt(account);
+	} catch {
+		throw new Error("Harmony push service account could not be loaded");
+	}
+	const notifyId = createHash("sha256").update(notification.eventId).digest().readUInt32BE(0) & 2147483647;
+	const navigation = notification.gatewayId && notification.target ? Buffer.from(JSON.stringify({
+		gatewayId: notification.gatewayId,
+		eventId: notification.eventId,
+		target: notification.target
+	})).toString("base64url") : void 0;
+	const response = await fetchImpl(`https://push-api.cloud.huawei.com/v3/${account.project_id}/messages:send`, {
+		method: "POST",
+		redirect: "error",
+		signal: AbortSignal.timeout(1e4),
+		headers: {
+			"Content-Type": "application/json",
+			Authorization: `Bearer ${jwt}`,
+			"push-type": "0"
+		},
+		body: JSON.stringify({
+			payload: { notification: {
+				category: config.category,
+				title: notification.title.slice(0, 100),
+				body: (notification.body || notification.title).slice(0, 200),
+				clickAction: navigation ? {
+					actionType: 1,
+					uri: `xopc://notification#p=${navigation}`
+				} : { actionType: 0 },
+				foregroundShow: false,
+				notifyId
+			} },
+			target: { token: [notification.pushToken] },
+			pushOptions: {
+				testMessage: config.testMessage,
+				ttl: 86400
+			}
+		})
+	});
+	if (!response.ok) throw new Error(`Harmony push request failed (${response.status})`);
+	const result = await response.json();
+	if (result.code !== "80000000" || typeof result.requestId !== "string" || !result.requestId) {
+		const code = typeof result.code === "string" && /^\d{8}$/.test(result.code) ? result.code : "invalid_response";
+		throw new Error(`Harmony push rejected (${code})`);
+	}
+	return result.requestId;
+}
+//#endregion
+export { createHarmonyPushJwt, harmonyPushConfig, sendHarmonyPush };

package/dist/src/notifications/service.d.ts

@@ -1,5 +1,6 @@
 import { type ProactiveChannelSender } from './proactive-channel.js';
 import { type NotificationPlan } from './planner.js';
+import { sendHarmonyPush } from './harmony-push.js';
 export declare class NotificationService {
     private readonly options;
     private timer;
@@ -9,6 +10,7 @@ export declare class NotificationService {
         publish: (type: string, payload: unknown) => void;
         fetch?: typeof fetch;
         sendChannel?: ProactiveChannelSender;
+        sendHarmony?: typeof sendHarmonyPush;
     });
     start(): void;
     stop(): void;

package/dist/src/notifications/service.js

@@ -3,6 +3,7 @@ import { init_logger } from "../utils/logger.js";
 import { getSqliteDatabase, init_transaction, runSqliteWriteTransaction } from "../storage/sqlite/transaction.js";
 import { localizeNotification } from "../../packages/gateway-contract/src/notifications.js";
 import { init_src } from "../../packages/gateway-contract/src/index.js";
+import { getOrCreateGatewayIdentity } from "../storage/sqlite/gateway-identity-repository.js";
 import { proactivePreferences } from "../proactive/policy/service.js";
 import { flushDueDigests } from "../proactive/inbox/digest.js";
 import { notificationPlanFromGatewayEvent } from "./planner.js";
@@ -11,6 +12,7 @@ import { createNotificationEvent, deferNotificationDelivery, expireUndeliverable
 import { drainChannelNotifications, enqueueChannelNotification } from "./proactive-channel.js";
 import { drainBrowserPush, enqueueBrowserPush } from "./web-push.js";
 import { disableNotificationDeviceForPushToken, listDeliverableNotificationDevices } from "./device-store.js";
+import { sendHarmonyPush } from "./harmony-push.js";
 //#region src/notifications/service.ts
 init_transaction();
 init_src();
@@ -162,6 +164,18 @@ var NotificationService = class {
 		const fetchImpl = this.options.fetch ?? fetch;
 		const localized = localizeNotification(delivery.event, delivery.locale);
 		try {
+			if (delivery.platform === "harmonyos") {
+				const ticket = await (this.options.sendHarmony ?? sendHarmonyPush)({
+					pushToken: delivery.pushToken,
+					eventId: delivery.event.id,
+					gatewayId: getOrCreateGatewayIdentity().id,
+					target: delivery.event.target,
+					title: delivery.event.type === "proactive.insight" ? delivery.locale === "zh" ? "有一项工作需要查看" : "A work update is ready" : localized.localizedTitle,
+					body: delivery.event.type === "proactive.insight" ? delivery.locale === "zh" ? "打开 xopc 查看详情。" : "Open xopc to review it." : localized.localizedBody
+				}, fetchImpl);
+				markNotificationDeliveryAccepted(delivery.event.id, delivery.deviceId, ticket, Number.MAX_SAFE_INTEGER);
+				return;
+			}
 			const response = await fetchImpl(EXPO_PUSH_URL, {
 				method: "POST",
 				headers: {
@@ -200,7 +214,7 @@ var NotificationService = class {
 		}
 	}
 	async checkReceipts() {
-		const withTickets = listDueNotificationDeliveries("accepted").filter((delivery) => delivery.providerTicketId);
+		const withTickets = listDueNotificationDeliveries("accepted").filter((delivery) => delivery.platform !== "harmonyos" && delivery.providerTicketId);
 		if (withTickets.length === 0) return;
 		const fetchImpl = this.options.fetch ?? fetch;
 		try {

package/dist/src/notifications/store.d.ts

@@ -1,8 +1,10 @@
 import { type ProductNotification } from '@xopcai/gateway-contract';
+import type { NotificationDevicePlatform } from './types.js';
 export type NotificationDelivery = {
     event: ProductNotification;
     deviceId: string;
     pushToken: string;
+    platform: NotificationDevicePlatform;
     locale: 'en' | 'zh';
     attempts: number;
     providerTicketId?: string;

package/dist/src/notifications/store.js

@@ -36,6 +36,7 @@ function deliveryFromRow(row) {
 		event: eventFromRow(row),
 		deviceId: row.device_id,
 		pushToken: row.push_token,
+		platform: row.platform,
 		locale: row.locale === "zh" ? "zh" : "en",
 		attempts: row.attempts,
 		...row.provider_ticket_id ? { providerTicketId: row.provider_ticket_id } : {}
@@ -88,7 +89,7 @@ function acknowledgeNotification(eventId, consumerId, surface) {
 }
 const DELIVERY_JOIN = `
   SELECT e.*, d.device_id, d.attempts, d.provider_ticket_id,
-         n.push_token, n.locale
+         n.push_token, n.locale, n.platform
   FROM notification_deliveries d
   JOIN notification_events e ON e.event_id = d.event_id
   JOIN device_push_endpoints n ON n.device_id = d.device_id

package/dist/src/notifications/types.d.ts

@@ -1,4 +1,4 @@
-export type NotificationDevicePlatform = 'ios' | 'android';
+export type NotificationDevicePlatform = 'ios' | 'android' | 'harmonyos';
 export type NotificationPermission = 'granted' | 'denied' | 'unknown';
 export type NotificationLanguage = 'en' | 'zh';
 export type NotificationPreferences = {

package/dist/src/storage/sqlite/device-access-repository.d.ts

@@ -1,6 +1,6 @@
 import crypto from 'node:crypto';
 import type { GatewayScope } from '../../gateway/security/gateway-scopes.js';
-export type DevicePlatform = 'ios' | 'android' | 'chrome';
+export type DevicePlatform = import('@xopcai/gateway-contract').DevicePlatform;
 export type DevicePublicKeyJwk = crypto.webcrypto.JsonWebKey;
 export type DeviceRecord = {
     id: string;

package/dist/src/storage/sqlite/migrations/179_harmonyos_devices.sql

@@ -0,0 +1,41 @@
+-- The runner disables foreign keys outside the transaction for this parent-table rebuild.
+-- All existing device identities and dependent credential/session records are retained.
+-- The _new tables exist only during this rebuild; all platforms still share the original table names.
+CREATE TABLE devices_new (
+  device_id TEXT PRIMARY KEY,
+  display_name TEXT NOT NULL,
+  platform TEXT NOT NULL CHECK (platform IN ('ios', 'android', 'harmonyos', 'chrome')),
+  extension_id TEXT CHECK (extension_id IS NULL OR length(extension_id) = 32),
+  public_key_jwk TEXT NOT NULL,
+  scopes_json TEXT NOT NULL,
+  created_at INTEGER NOT NULL,
+  last_seen_at INTEGER,
+  revoked_at INTEGER,
+  CHECK ((platform = 'chrome') = (extension_id IS NOT NULL))
+);
+INSERT INTO devices_new
+  (device_id, display_name, platform, extension_id, public_key_jwk, scopes_json, created_at, last_seen_at, revoked_at)
+SELECT device_id, display_name, platform, extension_id, public_key_jwk, scopes_json, created_at, last_seen_at, revoked_at
+FROM devices;
+DROP TABLE devices;
+ALTER TABLE devices_new RENAME TO devices;
+
+CREATE TABLE device_push_endpoints_new (
+  device_id TEXT PRIMARY KEY REFERENCES devices(device_id) ON DELETE CASCADE,
+  platform TEXT NOT NULL CHECK (platform IN ('ios', 'android', 'harmonyos')),
+  push_token TEXT NOT NULL UNIQUE,
+  enabled INTEGER NOT NULL DEFAULT 1,
+  permissions TEXT NOT NULL CHECK (permissions IN ('granted', 'denied', 'unknown')),
+  preferences_json TEXT NOT NULL DEFAULT '{}',
+  locale TEXT NOT NULL CHECK (locale IN ('en', 'zh')),
+  app_version TEXT,
+  lease_expires_at INTEGER NOT NULL,
+  last_seen_at INTEGER NOT NULL,
+  created_at INTEGER NOT NULL,
+  updated_at INTEGER NOT NULL
+);
+INSERT INTO device_push_endpoints_new
+  SELECT device_id, platform, push_token, enabled, permissions, preferences_json, locale,
+    app_version, lease_expires_at, last_seen_at, created_at, updated_at FROM device_push_endpoints;
+DROP TABLE device_push_endpoints;
+ALTER TABLE device_push_endpoints_new RENAME TO device_push_endpoints;

package/dist/src/storage/sqlite/migrations/runner.d.ts

@@ -3,7 +3,7 @@ import type { ApplyMigrationsOptions } from './types.js';
 /** Baseline schema version applied from schema.sql on first open. */
 export declare const XOPC_DB_BASELINE_SCHEMA_VERSION = 165;
 /** Latest schema version this release supports (increment when adding migrations). */
-export declare const XOPC_DB_SCHEMA_VERSION = 178;
+export declare const XOPC_DB_SCHEMA_VERSION = 179;
 export declare function resolveMigrationsDir(override?: string): string;
 /**
  * Apply sequential SQL migrations from (currentVersion + 1) through targetVersion.

package/dist/src/storage/sqlite/migrations/runner.js

@@ -35,19 +35,27 @@ function applySingleMigration(db, migration) {
 		targetVersion: migration.targetVersion,
 		file: migration.filename
 	}, "Applying SQLite migration");
-	db.exec("BEGIN IMMEDIATE");
+	const rebuildDevices = migration.targetVersion === 179;
+	const foreignKeysEnabled = Number(db.prepare("PRAGMA foreign_keys").get()?.foreign_keys) === 1;
+	if (rebuildDevices) db.exec("PRAGMA foreign_keys = OFF");
+	let transactionStarted = false;
 	try {
+		db.exec("BEGIN IMMEDIATE");
+		transactionStarted = true;
 		db.exec(migration.sql);
 		const summary = migration.targetVersion === 178 ? migrateConversationUuids(db) : void 0;
+		if (rebuildDevices && db.prepare("PRAGMA foreign_key_check").all().length > 0) throw new Error("Device platform migration would violate foreign key integrity");
 		setSchemaVersion(db, migration.targetVersion);
 		db.exec("COMMIT");
 		return summary;
 	} catch (error) {
 		try {
-			db.exec("ROLLBACK");
+			if (transactionStarted) db.exec("ROLLBACK");
 		} catch {}
 		const em = error instanceof Error ? error.message : String(error);
 		throw new Error(`SQLite migration to v${migration.targetVersion} (${migration.filename}) failed: ${em}`, { cause: error });
+	} finally {
+		if (rebuildDevices && foreignKeysEnabled) db.exec("PRAGMA foreign_keys = ON");
 	}
 }
 /**
@@ -55,7 +63,7 @@ function applySingleMigration(db, migration) {
 * Each step runs in its own transaction and updates schema_meta on success.
 */
 function applyPendingMigrations(db, options = {}) {
-	const targetVersion = options.targetVersion ?? 178;
+	const targetVersion = options.targetVersion ?? 179;
 	let currentVersion = readSchemaVersion(db);
 	if (currentVersion > targetVersion) throw new DatabaseSchemaTooNewError(currentVersion, targetVersion);
 	if (!options.migrationsDir && currentVersion < 165) throw new DatabaseSchemaTooOldError(currentVersion, 165);
@@ -110,7 +118,7 @@ function applyPendingMigrations(db, options = {}) {
 }
 /** Inspect schema version without mutating the database. */
 function inspectSchemaMigrationStatus(db, options = {}) {
-	const appVersion = options.targetVersion ?? 178;
+	const appVersion = options.targetVersion ?? 179;
 	const dbVersion = readSchemaVersion(db);
 	if (dbVersion > appVersion) return {
 		dbVersion,
@@ -149,7 +157,7 @@ var init_runner = __esmMin((() => {
 	init_errors();
 	log = createLogger("Sqlite:Migrations");
 	XOPC_DB_BASELINE_SCHEMA_VERSION = 165;
-	XOPC_DB_SCHEMA_VERSION = 178;
+	XOPC_DB_SCHEMA_VERSION = 179;
 	MODULE_DIR = dirname(fileURLToPath(import.meta.url));
 }));
 //#endregion

package/dist/src/storage/sqlite/schema.js

@@ -33,7 +33,7 @@ function ensureXopcDatabaseSchema(db, options = {}) {
 		currentVersion = 165;
 	}
 	applyPendingMigrations(db, {
-		targetVersion: 178,
+		targetVersion: 179,
 		databasePath: fresh ? void 0 : options.databasePath
 	});
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xopcai/xopc",
-  "version": "0.0.293",
+  "version": "0.0.295",
   "description": "Local-first personal AI assistant with reviewable user understanding, durable tasks, workflows, automations, and local or cloud models.",
   "type": "module",
   "main": "dist/src/index.js",
@@ -196,6 +196,8 @@
     "mobile:typecheck": "pnpm -C apps/mobile-expo run typecheck",
     "mobile:test": "pnpm -C apps/mobile-expo test",
     "mobile:test:stream": "pnpm --filter @xopcai/agent-stream-client test",
+    "harmony:verify": "tsx apps/mobile-harmony/scripts/verify.mts",
+    "harmony:test:server": "tsx apps/mobile-harmony/scripts/native-test-server.mts",
     "mobile:release:patch": "bash scripts/apps/mobile-expo/release-patch.sh",
     "mobile:configure:ios:github": "bash scripts/apps/mobile-expo/configure-ios-github-secrets.sh",
     "mobile:release:ios:testflight": "bash scripts/apps/mobile-expo/release-ios-testflight.sh",

package/dist/gateway/static/root/assets/settings-advanced-gate-BAkTtjLG.js

@@ -1 +0,0 @@
-import{xn as e}from"./index-im9qTn_e.js";function t(t){let{children:n,fallback:r}=t,i=r===void 0?null:r;return e()?n:i}export{t};