@xopcai/xopc 0.0.314 → 0.0.316

package/dist/src/gateway/hono/lib/config-payload.d.ts

@@ -28,7 +28,7 @@ export declare function buildSafeWebConfigPayload(service: GatewayService, optio
                     primary: string;
                     fallbacks: string[];
                 };
-                intents?: Partial<Record<"review" | "coding" | "understanding" | "fast" | "reasoning" | "vision", {
+                intents?: Partial<Record<"review" | "coding" | "fast" | "reasoning" | "vision" | "understanding", {
                     primary: string;
                     fallbacks: string[];
                 }>>;
@@ -72,7 +72,7 @@ export declare function buildSafeWebConfigPayload(service: GatewayService, optio
                     primary: string;
                     fallbacks: string[];
                 };
-                intents: Partial<Record<"review" | "coding" | "understanding" | "fast" | "reasoning" | "vision", {
+                intents: Partial<Record<"review" | "coding" | "fast" | "reasoning" | "vision" | "understanding", {
                     primary: string;
                     fallbacks: string[];
                 }>>;

package/dist/src/gateway/hono/lib/config-payload.js

@@ -1,9 +1,9 @@
 import { ContextPlanningConfigSchema, KnowledgeMemoryConfigSchema, UserModelConfigSchema, init_config } from "../../../user-context/config.js";
 import { init_agent_scope, listAgentEntries, normalizeAgentId, resolveDefaultAgentId } from "../../../agent/agent-scope.js";
 import { resolveModelsJsonPath } from "../../../config/paths.js";
-import { buildChannelCatalogForConfig, buildChannelCatalogFromSnapshot, getChannelSetupStatus, init_channel_catalog_service } from "../../../channels/catalog/channel-catalog-service.js";
 import { init_models_json, loadModelsJson } from "../../../config/models-json.js";
 import { CredentialResolver, init_credentials } from "../../../auth/credentials.js";
+import { buildChannelCatalogForConfig, buildChannelCatalogFromSnapshot, getChannelSetupStatus, init_channel_catalog_service } from "../../../channels/catalog/channel-catalog-service.js";
 import { getProviderRegistry, init_plugin_registry } from "../../../providers/plugin-registry.js";
 import { getAllProviders, init_providers, isProviderConfigured } from "../../../providers/index.js";
 import { normalizeConfiguredMcpServers } from "../../../config/mcp-config-normalize.js";

package/dist/src/gateway/hono/routes/agent-stream.js

@@ -57,7 +57,7 @@ function registerAgentStreamRoutes(authenticated, deps) {
 			ok: false,
 			error: {
 				code: "BAD_REQUEST",
-				message: "Invalid Note context references"
+				message: "Invalid source context references"
 			}
 		}, 400);
 		if (body.content !== void 0) {
@@ -93,7 +93,7 @@ function registerAgentStreamRoutes(authenticated, deps) {
 			ok: false,
 			error: {
 				code: result.contextUnavailable ? "CONTEXT_UNAVAILABLE" : "CONFLICT",
-				message: result.contextUnavailable ? "A referenced Note changed or is no longer available. Select it again." : "Input changed"
+				message: result.contextUnavailable ? "A referenced source changed or is no longer available. Select it again." : "Input changed"
 			},
 			payload: result.state
 		}, 409);

package/dist/src/gateway/hono/routes/browser.js

@@ -78,6 +78,38 @@ function canManageBrowserSession(c, service, conversationId) {
 }
 function registerBrowserRoutes(authenticated, deps) {
 	const { service, strictRateLimitMiddleware } = deps;
+	authenticated.get("/api/browser/tabs", (c) => {
+		const conversationId = (c.req.query("conversationId") ?? "").trim();
+		if (!conversationId) return c.json({
+			ok: false,
+			error: {
+				code: "BAD_REQUEST",
+				message: "Missing conversationId"
+			}
+		}, 400);
+		const binding = getBrowserTabBinding(conversationId);
+		if (!binding) return c.json({
+			ok: true,
+			payload: { tabs: [] }
+		});
+		if (!canManageBrowserSession(c, service, conversationId)) return c.json({
+			ok: false,
+			error: {
+				code: "FORBIDDEN",
+				message: "Tab binding belongs to another device"
+			}
+		}, 403);
+		return c.json({
+			ok: true,
+			payload: { tabs: [{
+				id: binding.id,
+				title: new URL(binding.urlOrigin).hostname,
+				url: binding.urlOrigin,
+				documentId: binding.documentId,
+				active: true
+			}] }
+		});
+	});
 	authenticated.get("/api/browser/tab-bindings/:conversationId", (c) => {
 		const conversationId = c.req.param("conversationId").trim();
 		const binding = getBrowserTabBinding(conversationId);

package/dist/src/gateway/hono/routes/connectors.js

@@ -19,7 +19,6 @@ import { createConnectorSetupSecretRequest, submitConnectorSetupSecret } from ".
 import { recordConnectorHealthUsage } from "../../../connectors/usage.js";
 import { getConnectorInstance, getInstalledConnectorDefinition, listConnectorInstances } from "../../../connectors/instances.js";
 import { installConnector, installConnectorDefinition, uninstallConnector, updateConnectorConfig } from "../../../connectors/install.js";
-import { ConfigPersistenceError, persistConfigMutation } from "../../../config/config-mutation.js";
 import { resumeApprovedConnectorAction } from "../../../connectors/approval-resume.js";
 import { getMcpOAuthManager } from "../../../agent/mcp/oauth/mcp-oauth-manager.js";
 import { startConnectorAuthorization } from "../../../connectors/auth-provider-registry.js";
@@ -27,6 +26,7 @@ import { composioLogoResponse } from "../../../connectors/composio-logo.js";
 import { inspectManagedComposioStatus } from "../../../connectors/composio-managed-client.js";
 import { appendComposioTriggerEvent, listComposioTriggerEvents } from "../../../connectors/composio-triggers.js";
 import { ingestLocalFolderSource } from "../../../connectors/connected-source-ingestion.js";
+import { ConfigPersistenceError, persistConfigMutation } from "../../../config/config-mutation.js";
 import { previewConnectorDefinition, testConnectorInstance } from "../../../connectors/health.js";
 import { listUnderstandingSourceGrants, revokeUnderstandingSourceGrant } from "../../../user-context/sources/repository.js";
 import { setConnectorEnabled } from "../../../connectors/lifecycle.js";

package/dist/src/gateway/hono/routes/devices.js

@@ -180,10 +180,6 @@ function registerDeviceRoutes(authenticated, deps) {
 			}
 		}, 201);
 	});
-	authenticated.get("/api/devices", (c) => c.json({
-		ok: true,
-		devices: listDevices()
-	}));
 	authenticated.get("/api/devices/me", (c) => {
 		const principal = getGatewayPrincipal(c);
 		if (principal.kind !== "device" || !principal.deviceId) return c.json({
@@ -224,18 +220,6 @@ function registerDeviceRoutes(authenticated, deps) {
 			revoked
 		});
 	});
-	authenticated.delete("/api/devices/:deviceId", (c) => {
-		const deviceId = c.req.param("deviceId");
-		const revoked = revokeDevice(deviceId);
-		if (revoked) {
-			deps.service.realtime.disconnectPrincipal(deviceId);
-			deps.service.voiceRealtime.disconnectPrincipal(deviceId);
-		}
-		return c.json({
-			ok: true,
-			revoked
-		});
-	});
 }
 //#endregion
 export { registerDeviceAuthPublicRoutes, registerDeviceRoutes };

package/dist/src/gateway/hono/routes/endpoint-tools.js

@@ -1,9 +1,9 @@
 import { createLogger } from "../../../utils/logger/index.js";
 import { init_logger } from "../../../utils/logger.js";
-import { getDevice } from "../../../storage/sqlite/device-access-repository.js";
+import { getDevice, listDevices, revokeDevice } from "../../../storage/sqlite/device-access-repository.js";
 import { endpointPrincipalRegistrationSchema, endpointSessionBindingRequestSchema, init_src } from "../../../../packages/endpoint-tools-protocol/src/index.js";
 import { createEndpointPrincipal, getEndpointPrincipal, listEndpointPrincipals, revokeEndpointPrincipal } from "../../../storage/sqlite/endpoint-principal-repository.js";
-import { listEndpointToolInvocationAudits } from "../../../storage/sqlite/endpoint-tool-invocation-repository.js";
+import { listEndpointToolInvocationAuditPage } from "../../../storage/sqlite/endpoint-tool-invocation-repository.js";
 import "../../../storage/sqlite/index.js";
 import { parseEndpointPublicKey } from "../../../endpoint-tools/auth.js";
 import { ENDPOINT_UPLOAD_MAX_BYTES, EndpointUploadError } from "../../../endpoint-tools/upload-service.js";
@@ -42,19 +42,75 @@ async function readBoundedBody(body, maxBytes) {
 	}
 }
 function registerEndpointToolRoutes(authenticated, deps) {
-	authenticated.get("/api/endpoint-tools/principals", (c) => {
+	authenticated.get("/api/endpoint-tools/devices", (c) => {
 		const endpointsByPrincipal = /* @__PURE__ */ new Map();
 		for (const endpoint of deps.service.endpointTools.registry.list()) {
 			const endpoints = endpointsByPrincipal.get(endpoint.principalId) ?? [];
 			endpoints.push(endpoint);
 			endpointsByPrincipal.set(endpoint.principalId, endpoints);
 		}
+		const devicesById = new Map(listDevices().map((device) => [device.id, device]));
+		const principalsById = new Map(listEndpointPrincipals().map((principal) => [principal.id, principal]));
+		const devices = [...new Set([...devicesById.keys(), ...principalsById.keys()])].map((id) => {
+			const access = devicesById.get(id);
+			const principal = principalsById.get(id);
+			const lastSeenAt = Math.max(access?.lastSeenAt ?? 0, principal?.lastSeenAt ?? 0) || void 0;
+			return {
+				id,
+				displayName: principal?.displayName ?? access?.displayName ?? id,
+				kind: principal?.kind ?? (access?.platform === "chrome" ? "browser" : "mobile"),
+				platform: principal?.platform ?? access?.platform ?? "unknown",
+				createdAt: Math.min(access?.createdAt ?? Number.POSITIVE_INFINITY, principal?.createdAt ?? Number.POSITIVE_INFINITY),
+				...lastSeenAt ? { lastSeenAt } : {},
+				access: access ? {
+					scopes: access.scopes,
+					createdAt: access.createdAt,
+					...access.lastSeenAt ? { lastSeenAt: access.lastSeenAt } : {},
+					...access.revokedAt ? { revokedAt: access.revokedAt } : {}
+				} : null,
+				principal: principal ? {
+					createdAt: principal.createdAt,
+					...principal.lastSeenAt ? { lastSeenAt: principal.lastSeenAt } : {},
+					...principal.revokedAt ? { revokedAt: principal.revokedAt } : {}
+				} : null,
+				endpoints: endpointsByPrincipal.get(id) ?? []
+			};
+		}).sort((left, right) => (right.lastSeenAt ?? right.createdAt) - (left.lastSeenAt ?? left.createdAt));
 		return c.json({
 			ok: true,
-			payload: listEndpointPrincipals().map(({ publicKey: _publicKey, ...principal }) => ({
-				...principal,
-				endpoints: endpointsByPrincipal.get(principal.id) ?? []
-			}))
+			payload: devices
+		});
+	});
+	authenticated.post("/api/endpoint-tools/devices/revoke", async (c) => {
+		const body = await c.req.json().catch(() => null);
+		if (!Array.isArray(body?.ids) || body.ids.length === 0 || body.ids.length > 100 || body.ids.some((id) => typeof id !== "string" || !id.trim())) return c.json({
+			ok: false,
+			error: {
+				code: "BAD_REQUEST",
+				message: "Expected 1 to 100 device ids"
+			}
+		}, 400);
+		const results = [...new Set(body.ids.map((id) => id.trim()))].map((id) => {
+			const access = getDevice(id);
+			const principal = getEndpointPrincipal(id);
+			const accessRevoked = Boolean(access && access.revokedAt === void 0 && revokeDevice(id));
+			const principalRevoked = Boolean(principal && principal.revokedAt === void 0 && revokeEndpointPrincipal(id));
+			if (accessRevoked) {
+				deps.service.realtime.disconnectPrincipal(id);
+				deps.service.voiceRealtime.disconnectPrincipal(id);
+			}
+			if (principalRevoked) {
+				for (const endpoint of deps.service.endpointTools.registry.list()) if (endpoint.principalId === id) deps.service.endpointTools.disconnect(endpoint.endpointId, "Device revoked");
+			}
+			return {
+				id,
+				found: Boolean(access || principal),
+				revoked: accessRevoked || principalRevoked
+			};
+		});
+		return c.json({
+			ok: true,
+			payload: { results }
 		});
 	});
 	authenticated.post("/api/endpoint-tools/principals", async (c) => {
@@ -123,36 +179,36 @@ function registerEndpointToolRoutes(authenticated, deps) {
 			payload: principal
 		}, 201);
 	});
-	authenticated.delete("/api/endpoint-tools/principals/:principalId", (c) => {
-		const principalId = c.req.param("principalId").trim();
-		if (!principalId) return c.json({
+	authenticated.get("/api/endpoint-tools/invocations", (c) => {
+		const page = Number(c.req.query("page") ?? 1);
+		const pageSize = Number(c.req.query("pageSize") ?? 20);
+		const status = c.req.query("status");
+		const effect = c.req.query("effect");
+		if (!Number.isInteger(page) || page < 1 || !Number.isInteger(pageSize) || pageSize < 1 || pageSize > 100 || status && ![
+			"running",
+			"succeeded",
+			"failed"
+		].includes(status) || effect && ![
+			"read",
+			"write",
+			"destructive"
+		].includes(effect)) return c.json({
 			ok: false,
 			error: {
 				code: "BAD_REQUEST",
-				message: "Missing principal id"
+				message: "Invalid invocation filters"
 			}
 		}, 400);
-		if (!revokeEndpointPrincipal(principalId)) return c.json({
-			ok: false,
-			error: {
-				code: "NOT_FOUND",
-				message: "Endpoint principal not found"
-			}
-		}, 404);
-		for (const endpoint of deps.service.endpointTools.registry.list()) if (endpoint.principalId === principalId) deps.service.endpointTools.disconnect(endpoint.endpointId, "Endpoint principal revoked");
-		return c.json({
-			ok: true,
-			payload: {
-				principalId,
-				revoked: true
-			}
-		});
-	});
-	authenticated.get("/api/endpoint-tools/invocations", (c) => {
-		const limit = Number(c.req.query("limit") ?? 100);
 		return c.json({
 			ok: true,
-			payload: listEndpointToolInvocationAudits(Number.isFinite(limit) ? limit : 100)
+			payload: listEndpointToolInvocationAuditPage({
+				page,
+				pageSize,
+				query: c.req.query("query"),
+				principalId: c.req.query("principalId"),
+				status,
+				effect
+			})
 		});
 	});
 	authenticated.get("/api/endpoint-tools/bindings/:conversationId", (c) => {

package/dist/src/gateway/hono/routes/mcp.js

@@ -3,7 +3,7 @@ import { canonicalizeConfiguredMcpServer, normalizeConfiguredMcpServers } from "
 import { loadMergedBundleMcpConfig } from "../../../agent/mcp/bundle-mcp-config.js";
 import { getWorkspacePath } from "../../../config/workspace-path-helpers.js";
 import { getMcpOAuthManager } from "../../../agent/mcp/oauth/mcp-oauth-manager.js";
-import { listBundleMcpServerCapabilitiesForGateway, listBundleMcpServerToolsForGateway } from "../../../agent/mcp/bundle-mcp-gateway.js";
+import { listBundleMcpResourcesForGateway, listBundleMcpServerCapabilitiesForGateway, listBundleMcpServerToolsForGateway } from "../../../agent/mcp/bundle-mcp-gateway.js";
 //#region src/gateway/hono/routes/mcp.ts
 function registerMcpRoutes(authenticated, deps) {
 	const resolveServer = (id) => {
@@ -36,6 +36,37 @@ function registerMcpRoutes(authenticated, deps) {
 			}
 		});
 	});
+	authenticated.get("/api/mcp/resources", async (c) => {
+		const cfg = deps.service.currentConfig;
+		const workspaceDir = getWorkspacePath(cfg) || "./workspace";
+		const query = (c.req.query("q") ?? "").trim().toLocaleLowerCase();
+		const serverId = (c.req.query("serverId") ?? "").trim();
+		try {
+			const items = (await listBundleMcpResourcesForGateway({
+				workspaceDir,
+				cfg
+			})).filter((resource) => {
+				if (serverId && resource.serverId !== serverId) return false;
+				if (!query) return true;
+				return [
+					resource.name,
+					resource.title,
+					resource.description,
+					resource.uri,
+					resource.serverId
+				].some((value) => value?.toLocaleLowerCase().includes(query));
+			}).slice(0, 20);
+			return c.json({
+				ok: true,
+				payload: { resources: items }
+			});
+		} catch (err) {
+			return c.json({
+				ok: false,
+				error: err instanceof Error ? err.message : String(err)
+			}, 500);
+		}
+	});
 	authenticated.get("/api/mcp/servers/:id/oauth", async (c) => {
 		const id = c.req.param("id");
 		const server = resolveServer(id);

package/dist/src/gateway/hono/routes/models.js

@@ -1,5 +1,5 @@
-import { resolveModelsJsonPath } from "../../../config/paths.js";
 import { init_resolve_config_value, testApiKeyResolution } from "../../../config/resolve-config-value.js";
+import { resolveModelsJsonPath } from "../../../config/paths.js";
 import { computerModelProfile, init_model_policy, isDedicatedComputerModel } from "../../../computer/model-policy.js";
 import { init_models_json, loadModelsJson, saveModelsJson, validateModelsConfig } from "../../../config/models-json.js";
 import { getModelCatalogStore, init_model_catalog_store } from "../../../providers/model-catalog-store.js";

package/dist/src/gateway/hono/routes/session-input-handler.d.ts

@@ -62,9 +62,10 @@ export declare function submitSessionInput(c: Context, deps: AuthenticatedRouteD
                     url?: string;
                     capturedAt?: number;
                     documentId?: string;
+                    fileKind?: "file" | "directory";
                 }[];
                 contextSnapshots?: {
-                    kind: import("../../../agent/source-context/types.js").SessionSourceBinding["kind"] | "task" | "browser_page" | "app_context";
+                    kind: import("../../../agent/source-context/types.js").SessionSourceBinding["kind"] | "task" | "file" | "session" | "mcp_resource" | "browser_tab" | "browser_page" | "app_context";
                     sourceId: string;
                     version: string;
                     title: string;
@@ -79,6 +80,7 @@ export declare function submitSessionInput(c: Context, deps: AuthenticatedRouteD
                     url?: string;
                     capturedAt?: number;
                     documentId?: string;
+                    fileKind?: "file" | "directory";
                     appContext?: {
                         version: 1;
                         clientInstanceId: string;
@@ -196,9 +198,10 @@ export declare function replaceLatestSessionTurn(c: Context, deps: Authenticated
                     url?: string;
                     capturedAt?: number;
                     documentId?: string;
+                    fileKind?: "file" | "directory";
                 }[];
                 contextSnapshots?: {
-                    kind: import("../../../agent/source-context/types.js").SessionSourceBinding["kind"] | "task" | "browser_page" | "app_context";
+                    kind: import("../../../agent/source-context/types.js").SessionSourceBinding["kind"] | "task" | "file" | "session" | "mcp_resource" | "browser_tab" | "browser_page" | "app_context";
                     sourceId: string;
                     version: string;
                     title: string;
@@ -213,6 +216,7 @@ export declare function replaceLatestSessionTurn(c: Context, deps: Authenticated
                     url?: string;
                     capturedAt?: number;
                     documentId?: string;
+                    fileKind?: "file" | "directory";
                     appContext?: {
                         version: 1;
                         clientInstanceId: string;

package/dist/src/gateway/hono/routes/session-input-handler.js

@@ -39,7 +39,7 @@ async function submitSessionInput(c, deps, conversationId, options) {
 		ok: false,
 		error: {
 			code: "BAD_REQUEST",
-			message: `contextRefs must contain at most ${MAX_TURN_CONTEXTS} valid note or task references`
+			message: `contextRefs must contain at most ${MAX_TURN_CONTEXTS} valid source references`
 		}
 	}, 400);
 	const browserContexts = browserPageContextsInputSchema.safeParse(body.browserContexts ?? []);
@@ -201,7 +201,7 @@ async function submitSessionInput(c, deps, conversationId, options) {
 			ok: false,
 			error: {
 				code: result.code,
-				message: result.code === "CONTEXT_UNAVAILABLE" ? "A referenced Note changed or is no longer available. Select it again." : "Input was not accepted"
+				message: result.code === "CONTEXT_UNAVAILABLE" ? "A referenced source changed or is no longer available. Select it again." : "Input was not accepted"
 			}
 		}, result.code === "SESSION_CHANGED" || result.code === "QUEUE_FULL" || result.code === "CONTEXT_UNAVAILABLE" ? 409 : 400);
 		return c.json({
@@ -235,7 +235,7 @@ async function replaceLatestSessionTurn(c, deps, conversationId, targetTurnId) {
 		ok: false,
 		error: {
 			code: "BAD_REQUEST",
-			message: `contextRefs must contain at most ${MAX_TURN_CONTEXTS} valid note or task references`
+			message: `contextRefs must contain at most ${MAX_TURN_CONTEXTS} valid source references`
 		}
 	}, 400);
 	const content = typeof body.content === "string" ? body.content : "";
@@ -321,7 +321,7 @@ async function replaceLatestSessionTurn(c, deps, conversationId, targetTurnId) {
 		});
 		if (result.ok === false) {
 			const status = result.code === "TARGET_NOT_FOUND" ? 404 : result.code === "BAD_REQUEST" ? 400 : 409;
-			const message = result.code === "NOT_LATEST" ? "Only the latest user turn can be replaced" : result.code === "SESSION_BUSY" ? "Session has pending input" : result.code === "TARGET_NOT_FOUND" ? "User turn was not found" : result.code === "CONTEXT_UNAVAILABLE" ? "A referenced Note changed or is no longer available. Select it again." : "Replacement input was not accepted";
+			const message = result.code === "NOT_LATEST" ? "Only the latest user turn can be replaced" : result.code === "SESSION_BUSY" ? "Session has pending input" : result.code === "TARGET_NOT_FOUND" ? "User turn was not found" : result.code === "CONTEXT_UNAVAILABLE" ? "A referenced source changed or is no longer available. Select it again." : "Replacement input was not accepted";
 			return c.json({
 				ok: false,
 				error: {

package/dist/src/gateway/hono/routes/user-model-refresh.js

@@ -2,7 +2,7 @@ import { listConnectorLearningJobs } from "../../../storage/sqlite/connector-lea
 import { getConnectorAccount } from "../../../storage/sqlite/connector-account-repository.js";
 import "../../../storage/sqlite/index.js";
 import { getWorkDiscoveryRun } from "../../../work-discovery/repository.js";
-import { listUnderstandingSourceRuns } from "../../../user-context/sources/repository.js";
+import { getConnectorUnderstandingSourceRun } from "../../../user-context/sources/repository.js";
 import { isLocalUnderstandingSourceId } from "../../../user-context/sources/local-source-contract.js";
 import { normalizeUnderstandingSourceItems } from "../../../work-discovery/service.js";
 import { UnderstandingRefreshService } from "../../../user-context/sources/refresh-service.js";
@@ -63,7 +63,7 @@ function createUnderstandingRefreshService(deps) {
 					phase: "completed",
 					error: "Connector update is no longer available."
 				};
-				const sourceRun = listUnderstandingSourceRuns(run.grantId, 100).find((item) => item.id !== run.id && item.metadata.connectorLearningJobId === job.id);
+				const sourceRun = getConnectorUnderstandingSourceRun(job.id);
 				if (job.status === "completed") return {
 					status: sourceRun?.status === "partial" ? "partial" : "completed",
 					phase: "completed",

package/dist/src/gateway/service/agent-runner.d.ts

@@ -22,7 +22,7 @@ export interface GatewayAgentRunnerOptions {
     emit: (type: string, payload: unknown) => void;
     publishRealtime: (topic: string, event: string, data: unknown) => void;
     completeRealtimeTopic: (topic: string) => void;
-    resolveTurnContext: (ref: TurnContextRef) => Promise<AgentSourceContext | null>;
+    resolveTurnContext: (ref: TurnContextRef, conversationId: string) => Promise<AgentSourceContext | null>;
 }
 export declare class GatewayAgentRunner {
     private readonly opts;

package/dist/src/gateway/service/agent-runner.js

@@ -76,7 +76,7 @@ var GatewayAgentRunner = class {
 					size: ref.size
 				}));
 			},
-			prepareContexts: async (refs) => {
+			prepareContexts: async (conversationId, refs) => {
 				if (!refs?.length) return void 0;
 				const unique = /* @__PURE__ */ new Map();
 				for (const ref of refs) {
@@ -87,7 +87,7 @@ var GatewayAgentRunner = class {
 					});
 				}
 				if (unique.size > MAX_TURN_CONTEXTS) throw new Error(`A message can reference at most ${MAX_TURN_CONTEXTS} sources`);
-				const contexts = await Promise.all([...unique.values()].map((ref) => opts.resolveTurnContext(ref)));
+				const contexts = await Promise.all([...unique.values()].map((ref) => opts.resolveTurnContext(ref, conversationId)));
 				if (contexts.some((context) => context === null)) throw new Error("A referenced source is unavailable or has changed; select it again");
 				return fitSourceContextsToBudget(contexts.filter((context) => context !== null));
 			},

package/dist/src/gateway/service/app-context-access.d.ts

@@ -2,10 +2,6 @@ import type { AgentSourceContext } from '../../agent/source-context/types.js';
 import { type CapabilityDispatcher } from '../../capabilities/runtime/dispatcher.js';
 import type { ResolvedGatewayAuth } from '../auth.js';
 import type { GatewayPrincipal } from '../security/gateway-principal.js';
-export interface AppContextGrant {
-    principal: GatewayPrincipal;
-    authRevision: string;
-}
 /** A queued read retains its original scope ceiling, but never a revoked identity. */
 export declare function checkAppContextAccess(source: AgentSourceContext, dispatcher: CapabilityDispatcher, auth: ResolvedGatewayAuth): Promise<void>;
 export declare function prepareAppContext(input: unknown, principal: GatewayPrincipal, auth: ResolvedGatewayAuth, dispatcher: CapabilityDispatcher, previous?: AgentSourceContext): Promise<AgentSourceContext>;

package/dist/src/gateway/service/config-coordinator.js

@@ -1,7 +1,7 @@
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
-import { loadConfig, saveConfig } from "../../config/loader.js";
 import { getModelRegistry } from "../../providers/model-registry.js";
+import { loadConfig, saveConfig } from "../../config/loader.js";
 import { init_providers } from "../../providers/index.js";
 import { disposeAllSessionMcpRuntimes } from "../../agent/mcp/bundle-mcp-runtime.js";
 import { reloadImageGenerationProviders } from "../../agent/image/generation/provider-registry.js";

package/dist/src/gateway/service/run-gateway-agent.js

@@ -11,9 +11,9 @@ import { resolveExecutionContext } from "../../tasks/execution-context.js";
 import { TaskRunCoordinator } from "../../tasks/task-run-coordinator.js";
 import { formatAgentRunErrorForClient } from "../../agent/client-error-format.js";
 import "../chat-limits.js";
+import { prependEnvelopeTimestamp } from "../../channels/envelope-timestamp.js";
 import { ChatStreamMapper } from "../chat-stream/mapper.js";
 import { markdownNotificationPreview } from "../../notifications/plain-text.js";
-import { prependEnvelopeTimestamp } from "../../channels/envelope-timestamp.js";
 import { resolveWebchatConversationId } from "../resolve-webchat-session-key.js";
 import { recordExplicitRelationshipFollowUp } from "../../user-context/relationship-continuity.js";
 import { coalesceThinkingDeltas } from "../chat-stream/thinking-delta-coalescer.js";

package/dist/src/gateway/service/session-input-coordinator.d.ts

@@ -39,7 +39,7 @@ export declare class SessionInputCoordinator {
             summary: string;
         }>;
         prepareAttachments: (conversationId: string, attachments?: UserTurnAttachment[]) => Promise<UserTurnAttachment[] | undefined>;
-        prepareContexts: (contextRefs?: TurnContextRef[]) => Promise<AgentSourceContext[] | undefined>;
+        prepareContexts: (conversationId: string, contextRefs?: TurnContextRef[]) => Promise<AgentSourceContext[] | undefined>;
         steer: (conversationId: string, content: string) => Promise<boolean>;
         emit: (type: string, payload: unknown) => void;
     });

package/dist/src/gateway/service/session-input-coordinator.js

@@ -109,7 +109,7 @@ var SessionInputCoordinator = class {
 			const attachments = await this.deps.prepareAttachments(conversationId, input.attachments);
 			let sourceContexts;
 			try {
-				sourceContexts = fitSourceContextsToBudget([...await this.deps.prepareContexts(input.contextRefs) ?? [], ...input.sourceContexts ?? []]);
+				sourceContexts = fitSourceContextsToBudget([...await this.deps.prepareContexts(conversationId, input.contextRefs) ?? [], ...input.sourceContexts ?? []]);
 			} catch (err) {
 				log.warn({
 					err,
@@ -185,7 +185,7 @@ var SessionInputCoordinator = class {
 		const attachments = await this.deps.prepareAttachments(conversationId, input.attachments);
 		let sourceContexts;
 		try {
-			sourceContexts = fitSourceContextsToBudget([...await this.deps.prepareContexts(input.contextRefs) ?? [], ...input.sourceContexts ?? []]);
+			sourceContexts = fitSourceContextsToBudget([...await this.deps.prepareContexts(conversationId, input.contextRefs) ?? [], ...input.sourceContexts ?? []]);
 		} catch (err) {
 			log.warn({
 				err,
@@ -310,7 +310,7 @@ var SessionInputCoordinator = class {
 		if (body.contextRefs !== void 0) {
 			const existing = getSessionInputById(conversationId, id);
 			if (!contextRefsMatchFrozenSnapshot(body.contextRefs, existing?.contextRefs)) try {
-				const resolved = await this.deps.prepareContexts(body.contextRefs) ?? [];
+				const resolved = await this.deps.prepareContexts(conversationId, body.contextRefs) ?? [];
 				sourceContexts = fitSourceContextsToBudget([...existing?.contextSnapshots?.filter((source) => source.kind !== "note" && source.kind !== "task") ?? [], ...resolved]);
 			} catch (err) {
 				log.warn({