@xopcai/xopc 0.0.313 → 0.0.314

package/dist/src/gateway/service/marketplace-service.js

@@ -2,12 +2,12 @@ import { resolveStateDir } from "../../config/paths-state.js";
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
 import { init_paths, resolveExtensionsDir } from "../../config/paths.js";
-import { removeSkillsLockEntry } from "../../agent/skills/hub-lock.js";
-import { deleteManagedSkill, installSkillFromZip, listManagedSkillDirs } from "../../agent/skills/managed-store.js";
 import { createSkillConfigManager } from "../../agent/skills/config.js";
 import { resolveWorkspaceSkillsDir, resolveWorkspaceSkillsLockPath } from "../../agent/skills/workspace-skills-dir.js";
-import { getExtensionLockfileManager } from "../../extensions/lockfile.js";
+import { removeSkillsLockEntry } from "../../agent/skills/hub-lock.js";
+import { deleteManagedSkill, installSkillFromZip, listManagedSkillDirs } from "../../agent/skills/managed-store.js";
 import { normalizeSkillInstallTarget } from "../../agent/skills/install-target.js";
+import { getExtensionLockfileManager } from "../../extensions/lockfile.js";
 import { existsSync, rmSync } from "node:fs";
 //#region src/gateway/service/marketplace-service.ts
 /**

package/dist/src/gateway/service/run-gateway-agent.js

@@ -7,13 +7,13 @@ import { getConnectionResumeInput, init_connection_wait_repository, isConnection
 import "../../storage/sqlite/index.js";
 import { getConversationRouting } from "../../storage/sqlite/conversation-repository.js";
 import { init_session_key } from "../../routing/session-key.js";
-import { prependEnvelopeTimestamp } from "../../channels/envelope-timestamp.js";
-import "../chat-limits.js";
-import { formatAgentRunErrorForClient } from "../../agent/client-error-format.js";
 import { resolveExecutionContext } from "../../tasks/execution-context.js";
 import { TaskRunCoordinator } from "../../tasks/task-run-coordinator.js";
+import { formatAgentRunErrorForClient } from "../../agent/client-error-format.js";
+import "../chat-limits.js";
 import { ChatStreamMapper } from "../chat-stream/mapper.js";
 import { markdownNotificationPreview } from "../../notifications/plain-text.js";
+import { prependEnvelopeTimestamp } from "../../channels/envelope-timestamp.js";
 import { resolveWebchatConversationId } from "../resolve-webchat-session-key.js";
 import { recordExplicitRelationshipFollowUp } from "../../user-context/relationship-continuity.js";
 import { coalesceThinkingDeltas } from "../chat-stream/thinking-delta-coalescer.js";
@@ -142,7 +142,16 @@ async function* runGatewayAgent(deps, message, channel, chatId, origin, attachme
 					signal: mergedSignal,
 					runId,
 					sourceContexts: runOptions?.sourceContexts,
-					presentation: runOptions?.presentation
+					presentation: runOptions?.presentation,
+					onDeferredAudio: (audio) => {
+						publishRealtime("sessions", "session.audio_ready", {
+							conversationId,
+							runId,
+							...audio,
+							createdAtMs: Date.now()
+						});
+						emit("session.transcript_updated", { key: conversationId });
+					}
 				});
 				const mappedEvents = (async function* () {
 					for await (const event of eventStream) yield* mapper.map(event);

package/dist/src/gateway/service/session-input-coordinator.js

@@ -9,16 +9,25 @@ import { summarizeSourceContext } from "../../agent/source-context/types.js";
 import { deleteMediaUrisNoLongerReferenced } from "../../media/session-references.js";
 import { fitSourceContextsToBudget } from "../../agent/source-context/budget.js";
 import crypto from "node:crypto";
+import { isDeepStrictEqual } from "node:util";
 //#region src/gateway/service/session-input-coordinator.ts
 init_connection_wait_repository();
 init_session_input_repository();
 init_logger();
 const log = createLogger("SessionInputCoordinator");
 const MAX_PENDING_INPUTS = 10;
+function sameAppContext(input, existing) {
+	const identity = (sources) => sources?.filter((source) => source.kind === "app_context").map((source) => ({
+		snapshot: source.appContext,
+		principal: source.appContextGrant?.principal.principalId
+	})) ?? [];
+	return isDeepStrictEqual(identity(input.sourceContexts), identity(existing.contextSnapshots));
+}
 function contextRefsMatchFrozenSnapshot(requested, frozen) {
-	if (requested.length !== (frozen?.length ?? 0)) return false;
+	const editable = frozen?.filter((ref) => ref.kind === "note" || ref.kind === "task") ?? [];
+	if (requested.length !== editable.length) return false;
 	return requested.every((ref, index) => {
-		const snapshot = frozen?.[index];
+		const snapshot = editable[index];
 		return snapshot?.kind === ref.kind && snapshot.sourceId === ref.sourceId && ref.expectedVersion === snapshot.version;
 	});
 }
@@ -53,6 +62,7 @@ var SessionInputCoordinator = class {
 		}
 	}
 	async submit(input) {
+		input = structuredClone(input);
 		const conversationId = input.conversationId.trim();
 		try {
 			return await this.runSubmissionExclusive(conversationId, () => this.submitLocked({
@@ -68,6 +78,7 @@ var SessionInputCoordinator = class {
 		}
 	}
 	async replaceLatestTurn(input, beforeReplace) {
+		input = structuredClone(input);
 		const conversationId = input.conversationId.trim();
 		return this.runSubmissionExclusive(conversationId, async () => {
 			const clientMessageId = input.clientMessageId.trim();
@@ -81,14 +92,20 @@ var SessionInputCoordinator = class {
 				ok: false,
 				code: "BAD_REQUEST"
 			};
-			if (findSessionInput(conversationId, clientMessageId)) return {
-				ok: true,
-				effectiveDelivery: "next",
-				state: this.snapshot(conversationId)
-			};
+			const existing = findSessionInput(conversationId, clientMessageId);
+			if (existing) {
+				if (!sameAppContext(input, existing)) return {
+					ok: false,
+					code: "CONTEXT_UNAVAILABLE"
+				};
+				return {
+					ok: true,
+					effectiveDelivery: "next",
+					state: this.snapshot(conversationId)
+				};
+			}
 			const target = validateLatestSessionTurnTarget(conversationId, targetTurnId);
 			if (target.ok === false) return target;
-			await beforeReplace();
 			const attachments = await this.deps.prepareAttachments(conversationId, input.attachments);
 			let sourceContexts;
 			try {
@@ -103,6 +120,7 @@ var SessionInputCoordinator = class {
 					code: "CONTEXT_UNAVAILABLE"
 				};
 			}
+			await beforeReplace();
 			const result = replaceLatestSessionTurnAndQueueInput({
 				conversationId,
 				targetTurnId,
@@ -149,11 +167,17 @@ var SessionInputCoordinator = class {
 			code: "BAD_REQUEST"
 		};
 		const existing = findSessionInput(conversationId, clientMessageId);
-		if (existing) return {
-			ok: true,
-			effectiveDelivery: existing.effectiveDelivery,
-			state: this.snapshot(conversationId)
-		};
+		if (existing) {
+			if (!sameAppContext(input, existing)) return {
+				ok: false,
+				code: "CONTEXT_UNAVAILABLE"
+			};
+			return {
+				ok: true,
+				effectiveDelivery: existing.effectiveDelivery,
+				state: this.snapshot(conversationId)
+			};
+		}
 		if (this.snapshot(conversationId).inputs.length >= MAX_PENDING_INPUTS) return {
 			ok: false,
 			code: "QUEUE_FULL"
@@ -227,7 +251,21 @@ var SessionInputCoordinator = class {
 				const runId = crypto.randomUUID();
 				const input = claimNextSessionInput(conversationId, runId);
 				if (!input) return;
-				if (this.deps.beforeExecute && !await this.deps.beforeExecute(input) || !consumeConnectionResume(input) || !consumeClarificationResume(input)) {
+				let allowed;
+				try {
+					allowed = (!this.deps.beforeExecute || await this.deps.beforeExecute(input)) && consumeConnectionResume(input) && consumeClarificationResume(input);
+				} catch (err) {
+					log.warn({
+						err,
+						conversationId,
+						runId,
+						inputId: input.id
+					}, "Session input preflight failed");
+					finishSessionInputRun(conversationId, runId, "failed", "Input preflight failed");
+					this.publish(conversationId);
+					continue;
+				}
+				if (!allowed) {
 					finishSessionInputRun(conversationId, runId, "cancelled");
 					this.publish(conversationId);
 					continue;
@@ -272,7 +310,8 @@ var SessionInputCoordinator = class {
 		if (body.contextRefs !== void 0) {
 			const existing = getSessionInputById(conversationId, id);
 			if (!contextRefsMatchFrozenSnapshot(body.contextRefs, existing?.contextRefs)) try {
-				sourceContexts = await this.deps.prepareContexts(body.contextRefs) ?? [];
+				const resolved = await this.deps.prepareContexts(body.contextRefs) ?? [];
+				sourceContexts = fitSourceContextsToBudget([...existing?.contextSnapshots?.filter((source) => source.kind !== "note" && source.kind !== "task") ?? [], ...resolved]);
 			} catch (err) {
 				log.warn({
 					err,

package/dist/src/gateway/service/sessions-api.d.ts

@@ -133,6 +133,7 @@ export declare class GatewaySessionsApi {
     }>;
     search(query: string): Promise<import("../../session/types.js").SessionMetadata[]>;
     searchIn(key: string, keyword: string): Promise<import("../../session/types.js").Message[]>;
+    findMessages(key: string, query: string, limit?: number): Promise<import("../../session/session-find.js").SessionFindResult>;
     export(key: string, format: ExportFormat): Promise<{
         content: string;
     }>;

package/dist/src/gateway/service/sessions-api.js

@@ -2,8 +2,8 @@ import { init_agent_session_key, resolveAgentIdFromConversationId } from "../../
 import { retireSessionMcpRuntimeForConversationId } from "../../agent/mcp/bundle-mcp-runtime.js";
 import { buildSessionTimeline } from "../../session/transcript-outline.js";
 import { transcriptRowsToClientHistory } from "../../session/client-history.js";
-import { collectMediaUrisFromValues, deleteMediaUris } from "../../media/session-references.js";
 import "../../agent/mcp/bundle-mcp-tools.js";
+import { collectMediaUrisFromValues, deleteMediaUris } from "../../media/session-references.js";
 import { withModelConfigLock } from "../../session/model-config-lock.js";
 import { getDistinctSessionChatIds } from "./session-chat-ids.js";
 import { performSessionReset } from "../session-reset-service.js";
@@ -201,6 +201,9 @@ var GatewaySessionsApi = class {
 	searchIn(key, keyword) {
 		return this.opts.sessionIndex.searchInSession(key, keyword);
 	}
+	findMessages(key, query, limit) {
+		return this.opts.sessionIndex.getStore().findInSession(key, query, limit);
+	}
 	async export(key, format) {
 		return { content: await this.opts.sessionIndex.exportSession(key, format) };
 	}

package/dist/src/gateway/service/task-conversation-query-service.d.ts

@@ -1,3 +1,4 @@
+import type { SessionFindResult } from '../../session/session-find.js';
 import type { SessionTimelineItem } from '../../session/transcript-outline.js';
 import { TaskConversationRepository } from '../../tasks/task-conversation-repository.js';
 import type { GatewaySessionsApi } from './sessions-api.js';
@@ -5,7 +6,7 @@ export declare class TaskConversationQueryService {
     #private;
     private readonly sessions;
     private readonly conversations;
-    constructor(sessions: Pick<GatewaySessionsApi, 'getMessagePage' | 'getTimeline'>, conversations?: Pick<TaskConversationRepository, 'listSessions'>);
+    constructor(sessions: Pick<GatewaySessionsApi, 'findMessages' | 'getMessagePage' | 'getTimeline'>, conversations?: Pick<TaskConversationRepository, 'listSessions'>);
     getMessagePage(taskId: string, options: {
         limit: number;
         offset: number;
@@ -56,4 +57,5 @@ export declare class TaskConversationQueryService {
         };
     }>;
     getTimeline(taskId: string): Promise<SessionTimelineItem[] | null>;
+    findMessages(taskId: string, query: string, limit?: number): Promise<SessionFindResult | null>;
 }

package/dist/src/gateway/service/task-conversation-query-service.js

@@ -1,5 +1,8 @@
 import { TaskConversationRepository } from "../../tasks/task-conversation-repository.js";
 //#region src/gateway/service/task-conversation-query-service.ts
+function displayMessageCount(items) {
+	return items.reduce((count, item) => item.displayIndex === void 0 ? count : Math.max(count, item.displayIndex + 1), 0);
+}
 var TaskConversationQueryService = class {
 	constructor(sessions, conversations = new TaskConversationRepository()) {
 		this.sessions = sessions;
@@ -53,8 +56,8 @@ var TaskConversationQueryService = class {
 		let displayOffset = 0;
 		let turnOffset = 0;
 		for (const [index, link] of links.entries()) {
-			const [items, page] = await Promise.all([this.sessions.getTimeline(link.conversationId), this.sessions.getMessagePage(link.conversationId, { limit: 1 })]);
-			if (!items || !page) return null;
+			const items = await this.sessions.getTimeline(link.conversationId);
+			if (!items) return null;
 			if (index > 0) output.push({
 				id: `assignment:${link.id}`,
 				kind: "branch",
@@ -70,12 +73,38 @@ var TaskConversationQueryService = class {
 				turn: item.turn + turnOffset,
 				...item.displayIndex === void 0 ? {} : { displayIndex: item.displayIndex + displayOffset }
 			})));
-			displayOffset += page.pagination.total;
+			displayOffset += displayMessageCount(items);
 			const highestTurn = items.reduce((max, item) => Math.max(max, item.turn), -1);
 			turnOffset += highestTurn + 1;
 		}
 		return output;
 	}
+	async findMessages(taskId, query, limit = 1e3) {
+		const links = this.#executionSessions(taskId);
+		if (links.length === 0) return null;
+		const matches = [];
+		let displayOffset = 0;
+		let total = 0;
+		for (const link of links) {
+			const [result, items] = await Promise.all([this.sessions.findMessages(link.conversationId, query, limit), this.sessions.getTimeline(link.conversationId)]);
+			if (!result || !items) return null;
+			total += result.total;
+			for (const match of result.matches) {
+				if (matches.length >= limit) break;
+				matches.push({
+					...match,
+					displayIndex: match.displayIndex + displayOffset
+				});
+			}
+			displayOffset += displayMessageCount(items);
+		}
+		return {
+			query: query.trim(),
+			total,
+			truncated: total > matches.length,
+			matches
+		};
+	}
 	#executionSessions(taskId) {
 		return this.conversations.listSessions(taskId).filter((link) => link.role === "execution").sort((a, b) => a.assignmentEpoch - b.assignmentEpoch || a.startedAt - b.startedAt);
 	}

package/dist/src/gateway/service.d.ts

@@ -25,6 +25,7 @@ import type { GatewayServiceConfig } from './service/types.js';
 import { type GatewayReadinessSnapshot } from './startup-readiness.js';
 import { type ConnectorLearningCoordinator } from '../connectors/learning-coordinator.js';
 import type { SceneAccess } from '../scenes/httpServices.js';
+import type { GatewayPrincipal } from './security/gateway-principal.js';
 import { type ProductLanguage } from '../voice/language-profile.js';
 import { EndpointToolRuntime } from '../endpoint-tools/index.js';
 export type { GatewayChannelStartupPhase1Metrics, GatewayChannelStartupPhase2Metrics, GatewayServiceConfig, } from './service/types.js';
@@ -137,6 +138,8 @@ export declare class GatewayService {
         ok: false;
         code: "BAD_REQUEST" | "QUEUE_FULL" | "CONTEXT_UNAVAILABLE" | "SESSION_CHANGED";
     }>;
+    private appContextDispatcher;
+    prepareSessionAppContext(input: unknown, principal: GatewayPrincipal, conversationId: string, clientMessageId: string): Promise<import("../agent/source-context/types.js").AgentSourceContext>;
     replaceLatestSessionTurn(...args: Parameters<GatewayAgentRunner['replaceLatestSessionTurn']>): Promise<{
         ok: true;
         effectiveDelivery: "next";

package/dist/src/gateway/service.js

@@ -8,6 +8,8 @@ import { init_logger } from "../utils/logger.js";
 import { closeXopcDatabase, openXopcDatabase } from "../storage/sqlite/connection.js";
 import { getSqliteDatabase, init_transaction } from "../storage/sqlite/transaction.js";
 import { findSessionInput, init_session_input_repository, insertSessionInput } from "../storage/sqlite/session-input-repository.js";
+import { TaskRepository } from "../tasks/task-repository.js";
+import { TaskRunRepository, init_task_run_repository } from "../tasks/task-run-repository.js";
 import { init_changes, notifyUserContextChange } from "../user-context/changes.js";
 import { getSessionMetadata } from "../storage/sqlite/session-read-repository.js";
 import { init_session_repository, patchSessionMetadata } from "../storage/sqlite/session-repository.js";
@@ -15,39 +17,56 @@ import { getSessionConfig } from "../storage/sqlite/config-repository.js";
 import "../storage/sqlite/index.js";
 import { getAgentDefaultModelRef, init_schema } from "../config/schema.js";
 import { init_agent_scope, listAgentEntries, normalizeAgentId, resolveAgentWorkspaceDir, resolveDefaultAgentId } from "../agent/agent-scope.js";
+import { init_agent_session_key, resolveAgentMainConversationId } from "../routing/agent-session-key.js";
+import { init_session_key, resolveConversationId, sanitizeSegment } from "../routing/session-key.js";
+import { getDefaultAgentId, init_resolve_route } from "../routing/resolve-route.js";
+import { resolveEffectiveAgentProfileForSession } from "../config/agent-profile.js";
 import { init_paths, resolveConfigPath, resolveExtensionsDir } from "../config/paths.js";
-import { prewarmModelRegistry } from "../providers/model-registry.js";
 import { areExtensionsGloballyDisabled } from "../extensions/discover-extensions.js";
 import { buildExtensionMetadataSnapshot } from "../extensions/extension-metadata-snapshot.js";
 import { buildChannelCatalogForConfig, buildChannelCatalogFromSnapshot, init_channel_catalog_service } from "../channels/catalog/channel-catalog-service.js";
 import { loadConfig, saveConfig } from "../config/loader.js";
-import { init_agent_session_key, resolveAgentMainConversationId } from "../routing/agent-session-key.js";
-import { init_session_key, resolveConversationId, sanitizeSegment } from "../routing/session-key.js";
-import { getDefaultAgentId, init_resolve_route } from "../routing/resolve-route.js";
+import { prewarmModelRegistry } from "../providers/model-registry.js";
 import { init_providers, providers_exports } from "../providers/index.js";
-import { AutomationService } from "../automations/service/automation-service.js";
+import { TaskConversationRepository } from "../tasks/task-conversation-repository.js";
+import { getEmbeddedExecutionSession } from "../agent/embedded/execution-context.js";
+import { disposeAllSessionMcpRuntimes } from "../agent/mcp/bundle-mcp-runtime.js";
+import { DomainOutboxDispatcher } from "../infra/domain-outbox-dispatcher.js";
 import { onAutomationProductEvent, publishAutomationProductEvent } from "../automations/product-events.js";
+import { ProjectService } from "../projects/project-service.js";
+import { resolveProjectAgentId } from "../projects/project-agent.js";
+import "../projects/index.js";
+import { resolveEffectiveGatewayPort } from "./host.js";
+import { onSessionTranscriptUpdate } from "../session/transcript-events.js";
+import { buildNoteAgentContext } from "../notes/agent-context.js";
+import { NotesStore } from "../notes/store.js";
+import { NotesService } from "../notes/service.js";
+import { LocalAppService } from "../local-apps/service.js";
+import { TaskApplicationService } from "../tasks/task-application-service.js";
+import { AutomationService } from "../automations/service/automation-service.js";
+import { TaskSignalService } from "../tasks/task-signal-service.js";
+import { createProductDispatcher } from "../capabilities/runtime/product.js";
 import "../automations/index.js";
-import { resolveEffectiveAgentProfileForSession } from "../config/agent-profile.js";
-import { setPairingBroadcastSink } from "../channels/pairing/pairing-events.js";
-import { registerClarificationChannelRuntime } from "./clarify-runtime.js";
-import { ChannelManager } from "../channels/manager.js";
+import { TaskRunDispatcher } from "../tasks/task-run-dispatcher.js";
+import "../tasks/index.js";
+import "../agent/mcp/bundle-mcp-tools.js";
+import { SessionIndex } from "../session/manager.js";
+import "../session/index.js";
+import { ExtensionLoader } from "../extensions/loader.js";
+import "../extensions/index.js";
 import { MessageBus, MessageBusShutdownError } from "../infra/bus/queue.js";
 import "../infra/bus/index.js";
+import { collectMediaUrisFromMessages, deleteMediaUris } from "../media/session-references.js";
+import { AgentService } from "../agent/service.js";
+import { ensureStarterAgentsInitialized } from "../agent/starter-agents.js";
 import { getWorkspacePath } from "../config/workspace-path-helpers.js";
 import "../config/index.js";
-import { ExtensionLoader } from "../extensions/loader.js";
-import "../extensions/index.js";
-import { resolveEffectiveGatewayPort } from "./host.js";
-import { disposeAllSessionMcpRuntimes } from "../agent/mcp/bundle-mcp-runtime.js";
 import { ManagedComposioEventPoller } from "../connectors/composio-managed-events.js";
 import { startConnectedKnowledgeCoordinator } from "../knowledge/coordinator.js";
 import "../knowledge/index.js";
 import { ConnectionRecoveryService } from "../connectors/connection-recovery-service.js";
 import { startConnectorLearningCoordinator } from "../connectors/learning-coordinator.js";
 import { startConnectorSupervisor } from "../connectors/supervisor.js";
-import { TaskRepository } from "../tasks/task-repository.js";
-import { TaskApplicationService } from "../tasks/task-application-service.js";
 import { DiscussionService } from "../discussions/service.js";
 import { DiscussionOrganizer } from "../discussions/organizer.js";
 import { DiscussionLiveWorker } from "../discussions/live-worker.js";
@@ -56,11 +75,9 @@ import { DiscussionSealer } from "../discussions/sealer.js";
 import "../discussions/index.js";
 import { EndpointToolRuntime } from "../endpoint-tools/runtime.js";
 import "../endpoint-tools/index.js";
-import { ProjectService } from "../projects/project-service.js";
-import { resolveProjectAgentId } from "../projects/project-agent.js";
-import "../projects/index.js";
 import { assertGatewayAuthConfigured, extractToken, resolveGatewayAuth, validateToken } from "./auth.js";
 import { prepareAutomationAgentSession } from "./automation-agent-session.js";
+import { registerClarificationChannelRuntime } from "./clarify-runtime.js";
 import { stopTailscaleExposure } from "./tailscale-lifecycle.js";
 import { createBackgroundTask } from "../infra/background-task.js";
 import { buildTaskAgentContext } from "../agent/source-context/task-context.js";
@@ -68,22 +85,8 @@ import { WorkDiscoveryService } from "../work-discovery/service.js";
 import { buildVoiceMemoryContext } from "../voice/realtime/memory-context.js";
 import { buildVoicePersonaContext } from "../voice/realtime/persona-context.js";
 import { voiceMemoryBudget, voicePersonaBudget } from "../voice/realtime/conversation-context.js";
-import { SessionIndex } from "../session/manager.js";
-import { onSessionTranscriptUpdate } from "../session/transcript-events.js";
-import "../session/index.js";
-import { getEmbeddedExecutionSession } from "../agent/embedded/execution-context.js";
-import { TaskConversationRepository } from "../tasks/task-conversation-repository.js";
-import { collectMediaUrisFromMessages, deleteMediaUris } from "../media/session-references.js";
-import { TaskOutboxDispatcher } from "../tasks/task-outbox-dispatcher.js";
-import { TaskRunDispatcher } from "../tasks/task-run-dispatcher.js";
-import { TaskSignalService } from "../tasks/task-signal-service.js";
-import "../tasks/index.js";
-import "../agent/mcp/bundle-mcp-tools.js";
-import { AgentService } from "../agent/service.js";
-import { ensureStarterAgentsInitialized } from "../agent/starter-agents.js";
-import { NotesStore } from "../notes/store.js";
-import { buildNoteAgentContext } from "../notes/agent-context.js";
-import { NotesService } from "../notes/service.js";
+import { setPairingBroadcastSink } from "../channels/pairing/pairing-events.js";
+import { ChannelManager } from "../channels/manager.js";
 import "../notes/index.js";
 import { buildWorkflowChildTools } from "../agent/workflow/workflow-child-tools.js";
 import { WorkflowRunService } from "../workflows/service/workflow-run-service.js";
@@ -104,7 +107,6 @@ import { getXopcCloudCatalogCoordinator } from "../providers/xopc-cloud-catalog-
 import { ModelCatalogSyncService } from "../providers/model-catalog-sync-service.js";
 import { runBootstrapMigrationsSync } from "../migrations/runner.js";
 import { NotificationService } from "../notifications/service.js";
-import { LocalAppService } from "../local-apps/service.js";
 import "../local-apps/index.js";
 import { createRuntimeBrowserAutomationService } from "../browser/automations/runtime-service.js";
 import "../browser/automations/index.js";
@@ -123,6 +125,7 @@ import { reconcileMemoryMaintenanceAutomations } from "./memory-maintenance-auto
 import { GatewayReadiness } from "./startup-readiness.js";
 import { createGatewayStartupTrace } from "./startup-trace.js";
 import { GatewaySceneHost } from "./scenes/host.js";
+import { checkAppContextAccess, prepareAppContext } from "./service/app-context-access.js";
 import { applyAutomaticVoiceLanguage, inferProductLanguageFromEnvironment, initializeVoiceDefaults } from "../voice/language-profile.js";
 import crypto from "node:crypto";
 //#region src/gateway/service.ts
@@ -140,6 +143,7 @@ init_paths();
 init_package_version();
 init_resolve_route();
 init_session_key();
+init_task_run_repository();
 init_transaction();
 const log = createLogger("Gateway:Service");
 var GatewayService = class {
@@ -457,7 +461,10 @@ var GatewayService = class {
 			emit: (type, payload) => this.emit(type, payload)
 		});
 		this.agentRunner = new GatewayAgentRunner({
-			validateConnectionResume: (input) => this.connectionRecovery.preflight(input),
+			validateConnectionResume: async (input) => {
+				for (const source of input.contextSnapshots ?? []) if (source.kind === "app_context") await checkAppContextAccess(source, this.appContextDispatcher(), this.auth);
+				return this.connectionRecovery.preflight(input);
+			},
 			bus: this.bus,
 			sessionIndex: this.sessionIndex,
 			getAgentService: () => this.ensureAgentService(),
@@ -581,6 +588,7 @@ var GatewayService = class {
 			emitBrowserEvent: (type, payload) => this.emit(type, payload),
 			getNotesService: () => this.notesService,
 			getProjectService: () => this.projects,
+			getWorkDiscovery: () => this._workDiscovery ?? void 0,
 			getLocalAppService: () => this.localApps,
 			dispatchTaskEvents: () => this.dispatchTaskEvents(),
 			dispatchTaskRuns: () => this.dispatchTaskRuns(),
@@ -661,6 +669,13 @@ var GatewayService = class {
 				})).conversationId;
 			},
 			runAgent: async (runId, conversationId, message) => {
+				const taskRun = new TaskRunRepository().require(runId);
+				if (getSqliteDatabase().prepare("SELECT 1 FROM scene_task_bindings WHERE task_id = ?").get(taskRun.taskId)) {
+					if (!this.sceneHost?.http.followUps) throw new Error("Task follow-up runtime is disabled");
+					this.ensureAgentService();
+					await this.sceneHost.http.followUps.executeTask(runId, conversationId);
+					return;
+				}
 				const clientMessageId = `task:${runId}`;
 				const session = await this.sessionIndex.getSessionMetadata(conversationId);
 				if (!session) throw new Error("Task session is unavailable");
@@ -686,11 +701,17 @@ var GatewayService = class {
 		return this.taskRunDispatcher;
 	}
 	createNotificationService() {
-		if (!this.notificationService) this.notificationService = new NotificationService({ publish: (type, payload) => this.realtime.broker.publish("gateway", type, payload) });
+		if (!this.notificationService) this.notificationService = new NotificationService({
+			publish: (type, payload) => this.realtime.broker.publish("gateway", type, payload),
+			allowsNotification: (notification) => notification.target.kind !== "task" || this.sceneHost?.http.followUps?.allowsTaskNotification(notification.target.taskId) !== false
+		});
 		return this.notificationService;
 	}
 	taskRunDispatch = createBackgroundTask(async () => {
 		new TaskSignalService().tick();
+		this.notesService.flushCommittedEffects();
+		this.projects.flushCommittedEffects();
+		this._workDiscovery?.dispatchProjectUnderstanding();
 		this.dispatchTaskEvents();
 		this.createTaskRunDispatcher().dispatch();
 		await this.createWorkflowRunService().dispatchTaskRuns();
@@ -770,7 +791,10 @@ var GatewayService = class {
 		};
 	}
 	dispatchTaskEvents() {
-		new TaskOutboxDispatcher(publishAutomationProductEvent).drain();
+		new DomainOutboxDispatcher((event) => {
+			if (event.source === "local_apps") this.emit(event.type, event.payload);
+			else publishAutomationProductEvent(event);
+		}).drain();
 	}
 	runAgent(...args) {
 		return this.agentRunner.runAgent(...args);
@@ -785,6 +809,17 @@ var GatewayService = class {
 	submitSessionInput(...args) {
 		return this.agentRunner.submitSessionInput(...args);
 	}
+	appContextDispatcher() {
+		return createProductDispatcher(() => this.notesService, {
+			getProjects: () => this.projects,
+			getLocalApps: () => this.localApps,
+			getSceneAccess: () => this.sceneAccess
+		});
+	}
+	prepareSessionAppContext(input, principal, conversationId, clientMessageId) {
+		const previous = findSessionInput(conversationId, clientMessageId)?.contextSnapshots?.find((source) => source.kind === "app_context");
+		return prepareAppContext(input, principal, this.auth, this.appContextDispatcher(), previous);
+	}
 	replaceLatestSessionTurn(...args) {
 		return this.agentRunner.replaceLatestSessionTurn(...args);
 	}
@@ -949,6 +984,7 @@ var GatewayService = class {
 		});
 		log.debug("Starting gateway service...");
 		openXopcDatabase();
+		await this.localApps.recoverPendingReleases();
 		const { recoverCapabilityImports } = await import("../imports/runtime.js");
 		await recoverCapabilityImports();
 		this.createNotificationService().start();
@@ -1628,6 +1664,24 @@ var GatewayService = class {
 		this.stopAutomationProductEventBridge?.();
 		this.stopSessionTranscriptAutomationEvents?.();
 		this.stopAutomationProductEventBridge = onAutomationProductEvent((event) => {
+			if (event.type === "project.deleted" && typeof event.payload.projectId === "string") {
+				const runIds = event.payload.deletedUnderstandingRunIds;
+				if (Array.isArray(runIds) && runIds.every((id) => typeof id === "string")) this._workDiscovery?.abortDeletedProjectRuns(event.payload.projectId, runIds);
+			}
+			if (event.type === "note.created" || event.type === "note.updated" || event.type === "note.deleted" || event.type === "task.changed.v2" || event.type === "task.deleted.v1" || event.type === "project.changed" || event.type === "project.created" || event.type === "project.deleted" || event.type === "scene.changed" || event.type === "scene.created" || event.type === "scene.deleted") {
+				const note = event.type.startsWith("note.");
+				const project = event.type.startsWith("project.");
+				const scene = event.type.startsWith("scene.");
+				const payload = event.payload;
+				if (typeof payload.sourceEventId === "string") this.realtime.broker.publish(note ? "resources:notes" : project ? "resources:projects" : scene ? "resources:scenes" : "resources:tasks", "resource.changed", {
+					eventId: payload.sourceEventId,
+					kind: note ? "note" : project ? "project" : scene ? "scene" : "task",
+					id: note ? payload.noteId : project ? payload.projectId : scene ? payload.sceneId : payload.taskId,
+					revision: note || scene ? payload.revision : payload.version,
+					operation: event.type === "task.deleted.v1" || event.type.endsWith(".deleted") ? "deleted" : event.type.endsWith(".created") ? "created" : "updated",
+					...typeof payload.operationId === "string" ? { operationId: payload.operationId } : {}
+				});
+			}
 			if (event.type.startsWith("task.")) this.emit(event.type, event.payload);
 			this.automationService.triggerEvent(event).catch((err) => {
 				const em = err instanceof Error ? err.message : String(err);

package/dist/src/gateway/session-context-summary.js

@@ -2,20 +2,21 @@ import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
 import { getSqliteDatabase, init_transaction } from "../storage/sqlite/transaction.js";
 import { hasGatewayScope } from "./security/gateway-scopes.js";
+import { TaskRepository, init_task_repository } from "../tasks/task-repository.js";
 import { getSessionMetadata } from "../storage/sqlite/session-read-repository.js";
 import { init_session_repository } from "../storage/sqlite/session-repository.js";
 import { getSessionConfig } from "../storage/sqlite/config-repository.js";
+import { TaskConversationRepository } from "../tasks/task-conversation-repository.js";
 import { getExecutionEnvironmentForSession } from "../execution-environments/subject.js";
 import { effectiveWorkspacePathForSession } from "../session/session-workspace.js";
 import { ProjectStore } from "../projects/project-store.js";
 import { runExec } from "../infra/exec.js";
-import { TaskRepository } from "../tasks/task-repository.js";
 import { isSessionSourceBinding } from "../agent/source-context/types.js";
-import { TaskConversationRepository } from "../tasks/task-conversation-repository.js";
 import { realpath, stat } from "node:fs/promises";
 //#region src/gateway/session-context-summary.ts
 init_session_repository();
 init_transaction();
+init_task_repository();
 init_logger();
 const log = createLogger("SessionContextSummary");
 const SOURCE_LIMIT = 20;

package/dist/src/gateway/workspace-editor-path.js

@@ -1,5 +1,5 @@
 import path, { relative, resolve } from "node:path";
-import fsSync from "node:fs";
+import fs from "node:fs";
 //#region src/gateway/workspace-editor-path.ts
 /** Resolve a workspace-relative POSIX path safely (no `..`, stays under root). */
 function resolveWorkspaceSafePath(workspaceRoot, rel) {
@@ -20,7 +20,7 @@ function isPathUnderWorkspace(workspaceRoot, absPath) {
 function normalizeComparablePath(input) {
 	let resolved = resolve(input);
 	try {
-		resolved = fsSync.realpathSync.native(resolved);
+		resolved = fs.realpathSync.native(resolved);
 	} catch {}
 	return process.platform === "win32" ? resolved.toLowerCase() : resolved;
 }

package/dist/src/heartbeat/index.js

@@ -1,6 +1,6 @@
+import { DEFAULT_ACK_MAX_CHARS, HEARTBEAT_OK, NO_REPLY, shouldSilence, stripHeartbeatToken } from "./tokens.js";
 import { isWithinActiveHours } from "./active-hours.js";
 import { isHeartbeatContentEmpty } from "./content-check.js";
 import { appendCronEventLines } from "./event-prompt.js";
-import { DEFAULT_ACK_MAX_CHARS, HEARTBEAT_OK, NO_REPLY, shouldSilence, stripHeartbeatToken } from "./tokens.js";
 import { createHeartbeatWake } from "./wake.js";
 export { DEFAULT_ACK_MAX_CHARS, HEARTBEAT_OK, NO_REPLY, appendCronEventLines, createHeartbeatWake, isHeartbeatContentEmpty, isWithinActiveHours, shouldSilence, stripHeartbeatToken };

package/dist/src/i18n/share-tool-bundle.js

@@ -1,7 +1,7 @@
-import { formatI18n } from "./format.js";
-import { normalizeServerLocale, serverLocaleOrFallback } from "./locale.js";
 import share_tool_en_default from "./locales/share-tool.en.js";
 import share_tool_zh_default from "./locales/share-tool.zh.js";
+import { formatI18n } from "./format.js";
+import { normalizeServerLocale, serverLocaleOrFallback } from "./locale.js";
 //#region src/i18n/share-tool-bundle.ts
 const byLocale = {
 	en: share_tool_en_default,