@xopcai/xopc 0.0.321 → 0.0.324

package/dist/src/gateway/hono/routes/config.js

@@ -2,7 +2,6 @@ import { enumerateLanGatewayCandidates } from "../../host.js";
 import { getTunnelService } from "../../../tunnel/tunnel-service.js";
 import { prepareLocalVoiceModelAfterProviderSwitch } from "../../../voice/local/provider-switch.js";
 import { buildSafeWebConfigPayload } from "../lib/config-payload.js";
-import { applyAgentsPatch } from "./config-patch/agents.js";
 import { applyChannelsPatch } from "./config-patch/channels.js";
 import { applyGatewayPatch } from "./config-patch/gateway.js";
 import { applyMiscPatch, validateGatewayAfterPatch } from "./config-patch/misc.js";
@@ -39,7 +38,6 @@ function registerConfigRoutes(authenticated, deps) {
 		const body = await c.req.json();
 		const config = service.currentConfig;
 		const previousSttProvider = config.tools?.media?.audio?.provider;
-		applyAgentsPatch(config, body);
 		applyChannelsPatch(config, body);
 		const gatewayResult = applyGatewayPatch(config, body);
 		if (gatewayResult.ok === false) return c.json({

package/dist/src/gateway/hono/routes/connection-waits.js

@@ -13,11 +13,13 @@ const actionSchema = z.object({
 		"cancel",
 		"select_account",
 		"confirm_scope",
-		"replace_source"
+		"replace_source",
+		"submit_callback"
 	]),
 	candidateRef: z.string().optional(),
 	needKey: z.string().optional(),
-	accountId: z.string().optional()
+	accountId: z.string().optional(),
+	callbackUrl: z.string().max(16384).optional()
 }).strict();
 function registerConnectionWaitRoutes(app, { service, strictRateLimitMiddleware }) {
 	app.get("/api/sessions/:conversationId/connection-wait", (c) => {

package/dist/src/gateway/hono/routes/connectors.js

@@ -1,11 +1,12 @@
 import { createLogger } from "../../../utils/logger/index.js";
 import { init_logger } from "../../../utils/logger.js";
-import { hasGatewayScope } from "../../security/gateway-scopes.js";
+import { hasGatewayScope, init_gateway_scopes } from "../../security/gateway-scopes.js";
 import { listConnectorLearningJobs } from "../../../storage/sqlite/connector-learning-repository.js";
 import { getConnectorAccount, init_connector_account_repository, listConnectorAccounts, updateConnectorAccount } from "../../../storage/sqlite/connector-account-repository.js";
 import { decideConnectorApproval, getConnectorApproval, listConnectorApprovals, listConnectorConnections } from "../../../storage/sqlite/connector-repository.js";
 import { getConnectorSyncPolicy, upsertConnectorSyncPolicy } from "../../../storage/sqlite/connector-sync-policy-repository.js";
-import "../../../storage/sqlite/index.js";
+import { init_sqlite } from "../../../storage/sqlite/index.js";
+import { AgentCatalogRepository, init_repository } from "../../../agent-catalog/repository.js";
 import { init_agent_scope, resolveDefaultAgentId } from "../../../agent/agent-scope.js";
 import { activateComposioBackend, addComposioBackend, ensureComposioBackend, getComposioBackend, listComposioBackends, removeComposioBackend } from "../../../connectors/composio-backends.js";
 import { getAuthorizationAttempt } from "../../../connectors/authorization-attempts.js";
@@ -38,6 +39,9 @@ import { registerCliConnectorRoutes } from "./cli-connectors.js";
 init_logger();
 init_agent_scope();
 init_connector_account_repository();
+init_repository();
+init_sqlite();
+init_gateway_scopes();
 function errorMessage(error) {
 	return error instanceof Error ? error.message : String(error);
 }
@@ -621,7 +625,7 @@ function registerConnectorRoutes(authenticated, deps) {
 		const config = service.currentConfig;
 		try {
 			const policy = getComposioInstallationPolicy(config, c.req.param("toolkit"));
-			const agents = config.agents.list.filter((agent) => agent.enabled).map((agent) => ({
+			const agents = new AgentCatalogRepository().snapshot().agents.filter((agent) => agent.enabled).map((agent) => ({
 				id: agent.id,
 				name: agent.id
 			}));
@@ -911,7 +915,7 @@ function registerConnectorRoutes(authenticated, deps) {
 			const result = await ingestLocalFolderSource({
 				config,
 				connectorId: c.req.param("id"),
-				agentId: resolveDefaultAgentId(config)
+				agentId: resolveDefaultAgentId()
 			});
 			return c.json({
 				ok: true,

package/dist/src/gateway/hono/routes/context-sources.js

@@ -1,7 +1,7 @@
 import { getSqliteDatabase, init_transaction } from "../../../storage/sqlite/transaction.js";
 import { getConnectorAccount } from "../../../storage/sqlite/connector-account-repository.js";
 import { countKnowledgeSourceItems, deleteKnowledgeSourceItems } from "../../../storage/sqlite/knowledge-repository.js";
-import "../../../storage/sqlite/index.js";
+import { init_sqlite } from "../../../storage/sqlite/index.js";
 import { init_agent_scope, resolveDefaultAgentId } from "../../../agent/agent-scope.js";
 import { setAssertionStatus } from "../../../user-model/repository.js";
 import "../../../user-model/index.js";
@@ -10,6 +10,7 @@ import { getUnderstandingSourceGrant, listUnderstandingSourceGrants, listUnderst
 import { listUnderstandingSourceDefinitions } from "../../../user-context/sources/catalog.js";
 //#region src/gateway/hono/routes/context-sources.ts
 init_agent_scope();
+init_sqlite();
 init_transaction();
 function stringField(value, field) {
 	if (!value || typeof value !== "object") return "";
@@ -89,14 +90,14 @@ function registerContextSourceRoutes(authenticated, deps) {
 			rawDeleted
 		});
 	});
-	authenticated.get("/api/context-sources/content-candidates", (c) => c.json({ candidates: listConnectedContentCandidates({ agentId: resolveDefaultAgentId(deps.service.currentConfig) }) }));
+	authenticated.get("/api/context-sources/content-candidates", (c) => c.json({ candidates: listConnectedContentCandidates({ agentId: resolveDefaultAgentId() }) }));
 	authenticated.post("/api/context-sources/content-reads", limited, async (c) => {
 		const input = await c.req.json().catch(() => null);
 		const sourceItemIds = input && typeof input === "object" && Array.isArray(input.sourceItemIds) ? input.sourceItemIds.filter((item) => typeof item === "string") : [];
 		try {
 			return c.json({ result: await readConnectedContent({
 				sourceItemIds,
-				agentId: resolveDefaultAgentId(deps.service.currentConfig)
+				agentId: resolveDefaultAgentId()
 			}) });
 		} catch (error) {
 			return c.json({ error: error instanceof Error ? error.message : String(error) }, 400);

package/dist/src/gateway/hono/routes/device-pairing-approval.js

@@ -1,6 +1,6 @@
 import { devicePairingCompleteSchema, devicePairingProofSchema, devicePairingRequestSchema } from "../../../../packages/gateway-contract/src/device-pairing.js";
 import { init_src } from "../../../../packages/gateway-contract/src/index.js";
-import { getOrCreateGatewayIdentity, signGatewayPayload } from "../../../storage/sqlite/gateway-identity-repository.js";
+import { getOrCreateGatewayIdentity, init_gateway_identity_repository, signGatewayPayload } from "../../../storage/sqlite/gateway-identity-repository.js";
 import { resolveClientIpFromRequest } from "../../client-ip.js";
 import { buckets } from "../../rate-limit/buckets.js";
 import "../../rate-limit/index.js";
@@ -11,6 +11,7 @@ import { bodyLimit } from "hono/body-limit";
 import { getConnInfo } from "@hono/node-server/conninfo";
 //#region src/gateway/hono/routes/device-pairing-approval.ts
 init_src();
+init_gateway_identity_repository();
 function pairingClientKey(c, options) {
 	let remoteAddress;
 	try {

package/dist/src/gateway/hono/routes/device-push.js

@@ -1,8 +1,9 @@
-import { getDevice } from "../../../storage/sqlite/device-access-repository.js";
+import { getDevice, init_device_access_repository } from "../../../storage/sqlite/device-access-repository.js";
 import { registerNotificationDevice, removeNotificationDevice, updateNotificationDevicePreferences } from "../../../notifications/device-store.js";
 import { harmonyPushConfig } from "../../../notifications/harmony-push.js";
 import { getGatewayPrincipal } from "../../security/gateway-principal.js";
 //#region src/gateway/hono/routes/device-push.ts
+init_device_access_repository();
 function stringField(value, maxLength) {
 	return typeof value === "string" && value.trim().length > 0 && value.trim().length <= maxLength ? value.trim() : null;
 }
@@ -20,7 +21,7 @@ function parsePreferences(value) {
 		"taskCompleted",
 		"automationCompleted",
 		"automationFailed",
-		"proactiveInsight"
+		"homeOpportunity"
 	]) {
 		if (source[key] === void 0) continue;
 		if (typeof source[key] !== "boolean") return null;

package/dist/src/gateway/hono/routes/devices.js

@@ -1,8 +1,8 @@
 import { browserPairingInvitationPayloadSchema, devicePairingTargetKindSchema, formatBrowserPairingInvitation, formatMobilePairingInvitation } from "../../../../packages/gateway-contract/src/device-pairing.js";
 import { init_src } from "../../../../packages/gateway-contract/src/index.js";
-import { listDevices, revokeDevice, rotateDeviceRefreshToken } from "../../../storage/sqlite/device-access-repository.js";
-import { getGatewayIdentityPublicKeyRaw, getOrCreateGatewayIdentity, signGatewayPayload } from "../../../storage/sqlite/gateway-identity-repository.js";
-import { createDevicePairingSetup, isDevicePairingSetupActive } from "../../../storage/sqlite/device-pairing-repository.js";
+import { init_device_access_repository, listDevices, revokeDevice, rotateDeviceRefreshToken } from "../../../storage/sqlite/device-access-repository.js";
+import { getGatewayIdentityPublicKeyRaw, getOrCreateGatewayIdentity, init_gateway_identity_repository, signGatewayPayload } from "../../../storage/sqlite/gateway-identity-repository.js";
+import { createDevicePairingSetup, init_device_pairing_repository, isDevicePairingSetupActive } from "../../../storage/sqlite/device-pairing-repository.js";
 import { resolveSecureDeviceRoutes } from "../../device-routes.js";
 import { buckets } from "../../rate-limit/buckets.js";
 import "../../rate-limit/index.js";
@@ -13,6 +13,9 @@ import { z } from "zod";
 import { bodyLimit } from "hono/body-limit";
 //#region src/gateway/hono/routes/devices.ts
 init_src();
+init_device_access_repository();
+init_device_pairing_repository();
+init_gateway_identity_repository();
 const refreshRequestSchema = z.strictObject({
 	refreshToken: z.string().min(1).max(256),
 	timestamp: z.number().int().positive(),

package/dist/src/gateway/hono/routes/discussions.js

@@ -1,5 +1,5 @@
 import { DISCUSSION_STATUSES } from "../../../../packages/gateway-contract/src/discussions.js";
-import { hasGatewayScope } from "../../security/gateway-scopes.js";
+import { hasGatewayScope, init_gateway_scopes } from "../../security/gateway-scopes.js";
 import { DiscussionServiceError } from "../../../discussions/errors.js";
 import { convertMeetingAction, meetingActionTasks } from "../../../discussions/action-tasks.js";
 import { MeetingEditSchema } from "../../../discussions/edits.js";
@@ -10,6 +10,7 @@ import { createReadStream } from "node:fs";
 import { stat } from "node:fs/promises";
 import { Readable } from "node:stream";
 //#region src/gateway/hono/routes/discussions.ts
+init_gateway_scopes();
 function errorResponse(error) {
 	if (!(error instanceof DiscussionServiceError)) return null;
 	const status = error.code === "not_found" ? 404 : error.code === "conflict" ? 409 : 400;

package/dist/src/gateway/hono/routes/endpoint-tools.js

@@ -4,12 +4,13 @@ import { getDevice, listDevices, revokeDevice } from "../../../storage/sqlite/de
 import { endpointPrincipalRegistrationSchema, endpointSessionBindingRequestSchema, init_src } from "../../../../packages/endpoint-tools-protocol/src/index.js";
 import { createEndpointPrincipal, getEndpointPrincipal, listEndpointPrincipals, revokeEndpointPrincipal } from "../../../storage/sqlite/endpoint-principal-repository.js";
 import { listEndpointToolInvocationAuditPage } from "../../../storage/sqlite/endpoint-tool-invocation-repository.js";
-import "../../../storage/sqlite/index.js";
+import { init_sqlite } from "../../../storage/sqlite/index.js";
 import { parseEndpointPublicKey } from "../../../endpoint-tools/auth.js";
 import { ENDPOINT_UPLOAD_MAX_BYTES, EndpointUploadError } from "../../../endpoint-tools/upload-service.js";
 import { getGatewayPrincipal } from "../../security/gateway-principal.js";
 //#region src/gateway/hono/routes/endpoint-tools.ts
 init_src();
+init_sqlite();
 init_logger();
 const log = createLogger("EndpointUpload");
 async function readBoundedBody(body, maxBytes) {

package/dist/src/gateway/hono/routes/global-defaults.js

@@ -1,6 +1,6 @@
 import { AgentDefaultsSchema } from "../../../agent-config/schema.js";
 import { init_agent_config } from "../../../agent-config/index.js";
-import { listGlobalDefaults, prepareUpdateGlobalDefaults } from "../../global-defaults-admin.js";
+import { listGlobalDefaults, updateGlobalDefaults } from "../../global-defaults-admin.js";
 //#region src/gateway/hono/routes/global-defaults.ts
 init_agent_config();
 function parsePatchBody(raw) {
@@ -17,7 +17,7 @@ function registerGlobalDefaultsRoutes(authenticated, deps) {
 	authenticated.get("/api/global-defaults", async (c) => {
 		return c.json({
 			ok: true,
-			payload: await listGlobalDefaults(service.currentConfig)
+			payload: listGlobalDefaults()
 		});
 	});
 	authenticated.patch("/api/global-defaults", strictRateLimitMiddleware, async (c) => {
@@ -35,23 +35,15 @@ function registerGlobalDefaultsRoutes(authenticated, deps) {
 			ok: false,
 			error: { message: body.error }
 		}, 400);
-		const prep = prepareUpdateGlobalDefaults(service.currentConfig, body);
-		if (prep.ok === false) return c.json({
+		const result = updateGlobalDefaults(body);
+		if (result.ok === false) return c.json({
 			ok: false,
-			error: { message: prep.error }
-		}, prep.status ?? 400);
-		if (!prep.data.changed) return c.json({
-			ok: true,
-			payload: await listGlobalDefaults(service.currentConfig)
-		});
-		const save = await service.saveConfig(prep.data.nextConfig);
-		if (!save.saved) return c.json({
-			ok: false,
-			error: { message: save.error ?? "save failed" }
-		}, 500);
+			error: { message: result.error }
+		}, result.status ?? 400);
+		if (result.data.changed) service.refreshAgentCatalog();
 		return c.json({
 			ok: true,
-			payload: await listGlobalDefaults(service.currentConfig)
+			payload: listGlobalDefaults()
 		});
 	});
 }

package/dist/src/gateway/hono/routes/home.js

@@ -1,15 +1,104 @@
+import { HomeAdviceMetricsSchema, HomeAdvisorRefreshRequestSchema, HomeOpportunityActionRequestSchema, HomeOpportunityFeedbackRequestSchema, HomeOpportunityFeedbackUndoRequestSchema, HomeOpportunityHistoryResponseSchema } from "../../../../packages/gateway-contract/src/home.js";
+import { init_src } from "../../../../packages/gateway-contract/src/index.js";
 import { acknowledgeHomeAttention } from "../../../storage/sqlite/home-attention-repository.js";
 import { decideConnectorApproval } from "../../../storage/sqlite/connector-repository.js";
-import "../../../storage/sqlite/index.js";
+import { init_sqlite } from "../../../storage/sqlite/index.js";
 import { listGatewayAgents } from "../../agents-admin.js";
 import { HomeQueryService, buildHomeWorkbench, decisionFromTask } from "../../../tasks/home-query-service.js";
 import { resumeApprovedConnectorAction } from "../../../connectors/approval-resume.js";
+import { HomeOpportunityActionError, HomeOpportunityNotFoundError } from "../../../home-intelligence/application-service.js";
 //#region src/gateway/hono/routes/home.ts
+init_src();
+init_sqlite();
 /** Register the unified work-home read model and its decision actions. */
 function registerHomeRoutes(authenticated, deps) {
 	const { service } = deps;
-	const home = new HomeQueryService(service);
-	authenticated.get("/api/home", async (c) => c.json(await home.getSnapshot(c.req.query("locale"))));
+	const home = new HomeQueryService(service, () => service.homeIntelligence.getAdvisor());
+	authenticated.get("/api/home", async (c) => {
+		const locale = c.req.query("locale");
+		service.homeIntelligence.requestRefresh("home_opened", void 0, locale);
+		return c.json(await home.getSnapshot(locale));
+	});
+	authenticated.get("/api/home/advisor/metrics", (c) => {
+		const rawSince = c.req.query("since");
+		const since = rawSince === void 0 ? void 0 : Number(rawSince);
+		if (since !== void 0 && (!Number.isSafeInteger(since) || since < 0)) return c.json({
+			ok: false,
+			error: "since must be a non-negative integer timestamp"
+		}, 400);
+		return c.json(HomeAdviceMetricsSchema.parse(service.homeIntelligence.getMetrics(since)));
+	});
+	authenticated.get("/api/home/advisor/history", (c) => c.json(HomeOpportunityHistoryResponseSchema.parse({ items: service.homeIntelligence.getHistory() })));
+	authenticated.post("/api/home/advisor/refresh", deps.strictRateLimitMiddleware, async (c) => {
+		const parsed = HomeAdvisorRefreshRequestSchema.safeParse(await c.req.json().catch(() => ({})));
+		if (!parsed.success) return c.json({
+			ok: false,
+			error: "Invalid refresh request"
+		}, 400);
+		const generationId = service.homeIntelligence.requestRefresh("manual_refresh", parsed.data.idempotencyKey, parsed.data.locale);
+		return c.json({
+			ok: true,
+			generationId
+		}, 202);
+	});
+	authenticated.post("/api/home/opportunities/:id/action", deps.strictRateLimitMiddleware, async (c) => {
+		const parsed = HomeOpportunityActionRequestSchema.safeParse(await c.req.json().catch(() => ({})));
+		if (!parsed.success) return c.json({
+			ok: false,
+			error: "Invalid opportunity action"
+		}, 400);
+		try {
+			return c.json(service.homeIntelligence.act(c.req.param("id"), parsed.data));
+		} catch (error) {
+			if (error instanceof HomeOpportunityNotFoundError) return c.json({
+				ok: false,
+				error: error.message
+			}, 404);
+			if (error instanceof HomeOpportunityActionError || error instanceof Error && error.message.includes("stale")) return c.json({
+				ok: false,
+				error: error.message
+			}, 409);
+			throw error;
+		}
+	});
+	authenticated.post("/api/home/opportunities/:id/feedback", deps.strictRateLimitMiddleware, async (c) => {
+		const parsed = HomeOpportunityFeedbackRequestSchema.safeParse(await c.req.json().catch(() => ({})));
+		if (!parsed.success) return c.json({
+			ok: false,
+			error: "Invalid opportunity feedback"
+		}, 400);
+		try {
+			service.homeIntelligence.feedback(c.req.param("id"), parsed.data);
+			return c.json({ ok: true });
+		} catch (error) {
+			if (error instanceof HomeOpportunityNotFoundError) return c.json({
+				ok: false,
+				error: error.message
+			}, 404);
+			if (error instanceof Error && (error.message.includes("stale") || error.message.includes("snoozedUntil"))) return c.json({
+				ok: false,
+				error: error.message
+			}, 409);
+			throw error;
+		}
+	});
+	authenticated.post("/api/home/opportunities/:id/feedback/undo", deps.strictRateLimitMiddleware, async (c) => {
+		const parsed = HomeOpportunityFeedbackUndoRequestSchema.safeParse(await c.req.json().catch(() => ({})));
+		if (!parsed.success) return c.json({
+			ok: false,
+			error: "Invalid feedback undo request"
+		}, 400);
+		try {
+			service.homeIntelligence.undoFeedback(c.req.param("id"), parsed.data.idempotencyKey);
+			return c.json({ ok: true });
+		} catch (error) {
+			if (error instanceof Error) return c.json({
+				ok: false,
+				error: error.message
+			}, 409);
+			throw error;
+		}
+	});
 	authenticated.post("/api/home/decisions/respond", deps.strictRateLimitMiddleware, async (c) => {
 		const body = await c.req.json().catch(() => ({}));
 		const decision = body.decision === "approve" ? "approve" : body.decision === "deny" ? "deny" : void 0;
@@ -74,7 +163,7 @@ function registerHomeRoutes(authenticated, deps) {
 				error: error instanceof Error ? error.message : "Failed to retry automation"
 			}, 400);
 		}
-		const agents = await listGatewayAgents(service.currentConfig);
+		const agents = await listGatewayAgents();
 		const result = await service.createWorkflowRunService().retryWorkflowRun({
 			agentId: agents.defaultId,
 			runId

package/dist/src/gateway/hono/routes/index.js

@@ -16,6 +16,7 @@ import { registerEndpointToolRoutes } from "./endpoint-tools.js";
 import { registerRealtimeRoutes } from "./realtime.js";
 import { registerDeviceRoutes } from "./devices.js";
 import { registerLocalAppsRoutes } from "./local-apps.js";
+import { registerChatPreviewRoutes } from "./chat-previews.js";
 import { registerWorkDiscoveryRoutes } from "./work-discovery.js";
 import { registerContextSourceRoutes } from "./context-sources.js";
 import { registerTaskRoutes } from "./tasks.js";
@@ -34,6 +35,7 @@ function registerCoreAuthenticatedRoutes(authenticated, deps) {
 	registerProjectsRoutes(authenticated, deps);
 	registerProjectSkillRoutes(authenticated, deps);
 	registerLocalAppsRoutes(authenticated, deps);
+	registerChatPreviewRoutes(authenticated, deps);
 	registerWorkDiscoveryRoutes(authenticated, deps);
 	registerContextSourceRoutes(authenticated, deps);
 	registerTaskRoutes(authenticated, deps);

package/dist/src/gateway/hono/routes/interaction-state.js

@@ -1,6 +1,7 @@
 import { getInteractionState, setInteractionState } from "../../../storage/sqlite/interaction-state-repository.js";
-import "../../../storage/sqlite/index.js";
+import { init_sqlite } from "../../../storage/sqlite/index.js";
 //#region src/gateway/hono/routes/interaction-state.ts
+init_sqlite();
 const SUPPORT_NEEDS = new Set([
 	"listen",
 	"clarify",

package/dist/src/gateway/hono/routes/lazy-bundles.js

@@ -3,6 +3,14 @@ function startsWithAny(path, prefixes) {
 	return prefixes.some((prefix) => path === prefix || path.startsWith(`${prefix}/`));
 }
 const AUTHENTICATED_LAZY_ROUTE_BUNDLES = [
+	{
+		id: "agent-plugins",
+		match: (path) => path === "/api/extensions/inspect" || path === "/api/extensions/install" || startsWithAny(path, ["/api/extensions/agent-plugins"]),
+		load: async () => {
+			const { registerAgentPluginRoutes } = await import("./agent-plugins.js");
+			return { register: registerAgentPluginRoutes };
+		}
+	},
 	{
 		id: "local-app-capabilities",
 		match: (path) => /^\/api\/local-app-capabilities\/[^/]+(?:\/[^/]+\/invocations)?$/.test(path),

package/dist/src/gateway/hono/routes/local-apps.js

@@ -1,56 +1,71 @@
+import { LocalAppSourceHashSchema } from "../../../../packages/gateway-contract/src/local-apps.js";
+import { init_src } from "../../../../packages/gateway-contract/src/index.js";
 import { CapabilityError } from "../../../capabilities/runtime/errors.js";
 import "../../../capabilities/runtime/dispatcher.js";
+import { parseLocalAppFixGuidanceInput } from "../../../local-apps/fix-guidance.js";
 import { readLocalAppAcceptanceConfig } from "../../../local-apps/acceptance.js";
 import { createProductDispatcher } from "../../../capabilities/runtime/product.js";
 import { extensionAssetMimeType } from "../lib/extension-assets.js";
 import { capabilityHttpContext, capabilityHttpError } from "../../../capabilities/adapters/http.js";
 import { LOCAL_APP_RUNTIME_BRIDGE_HASH, injectLocalAppRuntimeBridge } from "../../../local-apps/preview-runtime-bridge.js";
 import { relative, resolve } from "node:path";
-import { existsSync, readFileSync, statSync } from "node:fs";
+import { existsSync, readFileSync, realpathSync, statSync } from "node:fs";
 import { randomUUID } from "node:crypto";
 //#region src/gateway/hono/routes/local-apps.ts
+init_src();
 const LOCAL_APP_PREVIEW_CSP = `default-src 'self'; script-src 'self' 'sha256-${LOCAL_APP_RUNTIME_BRIDGE_HASH}'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; connect-src 'none'; frame-ancestors 'self'; frame-src 'none'; base-uri 'none'; object-src 'none'; form-action 'none'`;
-function registerPublicLocalAppPreviewRoutes(app, service) {
-	app.get("/api/local-apps/preview/:token/*", (c) => {
-		const origin = c.req.header("origin");
-		const cors = { "Access-Control-Allow-Origin": origin === "null" ? "null" : origin || "*" };
-		const preview = service.localApps.resolvePreview(c.req.param("token"));
-		if (!preview) return c.json({ error: "Preview not found" }, 404, cors);
-		const prefix = `/api/local-apps/preview/${preview.previewToken}/`;
-		let assetPath = c.req.path.startsWith(prefix) ? c.req.path.slice(prefix.length) : "";
+function servePreviewAsset(c, preview, prefix, cacheControl) {
+	const origin = c.req.header("origin");
+	const cors = { "Access-Control-Allow-Origin": origin === "null" ? "null" : origin || "*" };
+	let assetPath = c.req.path.startsWith(prefix) ? c.req.path.slice(prefix.length) : "";
+	try {
+		assetPath = decodeURIComponent(assetPath);
+	} catch {
+		return c.json({ error: "Invalid asset path" }, 400, cors);
+	}
+	if (!assetPath || assetPath.includes("..")) return c.json({ error: "Invalid asset path" }, 400, cors);
+	if (!existsSync(preview.uiRoot)) return c.json({ error: "Not found" }, 404, cors);
+	const root = realpathSync(resolve(preview.uiRoot));
+	const unresolvedPath = resolve(root, assetPath);
+	const fullPath = existsSync(unresolvedPath) ? realpathSync(unresolvedPath) : unresolvedPath;
+	const rel = relative(root, fullPath);
+	if (rel.startsWith("..") || rel === "") return c.json({ error: "Path traversal denied" }, 403, cors);
+	if (!existsSync(fullPath) || !statSync(fullPath).isFile()) return c.json({ error: "Not found" }, 404, cors);
+	const mimeType = extensionAssetMimeType(assetPath);
+	const content = readFileSync(fullPath);
+	let textContent = null;
+	if (mimeType.startsWith("text/html")) {
+		let acceptance;
 		try {
-			assetPath = decodeURIComponent(assetPath);
+			acceptance = readLocalAppAcceptanceConfig(preview.uiRoot);
 		} catch {
-			return c.json({ error: "Invalid asset path" }, 400, cors);
+			acceptance = {
+				schemaVersion: 1,
+				scenarios: []
+			};
 		}
-		if (!assetPath || assetPath.includes("..")) return c.json({ error: "Invalid asset path" }, 400, cors);
-		const root = resolve(preview.uiRoot);
-		const fullPath = resolve(root, assetPath);
-		const rel = relative(root, fullPath);
-		if (rel.startsWith("..") || rel === "") return c.json({ error: "Path traversal denied" }, 403, cors);
-		if (!existsSync(fullPath) || !statSync(fullPath).isFile()) return c.json({ error: "Not found" }, 404, cors);
-		const mimeType = extensionAssetMimeType(assetPath);
-		const content = readFileSync(fullPath);
-		let textContent = null;
-		if (mimeType.startsWith("text/html")) {
-			let acceptance;
-			try {
-				acceptance = readLocalAppAcceptanceConfig(preview.uiRoot);
-			} catch {
-				acceptance = {
-					schemaVersion: 1,
-					scenarios: []
-				};
-			}
-			textContent = injectLocalAppRuntimeBridge(content.toString("utf8"), acceptance);
-		} else if (mimeType.startsWith("text/")) textContent = content.toString("utf8");
-		return new Response(textContent ?? new Uint8Array(content), { headers: {
-			"Content-Type": mimeType,
-			"Content-Security-Policy": LOCAL_APP_PREVIEW_CSP,
-			"Cache-Control": "no-store",
-			"X-Content-Type-Options": "nosniff",
-			...cors
-		} });
+		textContent = injectLocalAppRuntimeBridge(content.toString("utf8"), acceptance);
+	} else if (mimeType.startsWith("text/")) textContent = content.toString("utf8");
+	return new Response(textContent ?? new Uint8Array(content), { headers: {
+		"Content-Type": mimeType,
+		"Content-Security-Policy": LOCAL_APP_PREVIEW_CSP,
+		"Cache-Control": cacheControl,
+		"X-Content-Type-Options": "nosniff",
+		...cors
+	} });
+}
+function registerPublicLocalAppPreviewRoutes(app, service) {
+	app.get("/api/local-apps/preview/:token/draft/*", (c) => {
+		const preview = service.localApps.resolveDraftPreview(c.req.param("token"));
+		if (!preview) return c.json({ error: "Preview not found" }, 404);
+		return servePreviewAsset(c, preview, `/api/local-apps/preview/${preview.previewToken}/draft/`, "no-store");
+	});
+	app.get("/api/local-apps/preview/:token/snapshots/:sourceHash/*", (c) => {
+		const sourceHash = LocalAppSourceHashSchema.safeParse(c.req.param("sourceHash"));
+		if (!sourceHash.success) return c.json({ error: "Invalid snapshot hash" }, 400);
+		const preview = service.localApps.resolveSnapshotPreview(c.req.param("token"), sourceHash.data);
+		if (!preview) return c.json({ error: "Preview not found" }, 404);
+		return servePreviewAsset(c, preview, `/api/local-apps/preview/${preview.previewToken}/snapshots/${sourceHash.data}/`, "private, max-age=31536000, immutable");
 	});
 }
 function registerLocalAppsRoutes(app, deps) {
@@ -79,6 +94,12 @@ function registerLocalAppsRoutes(app, deps) {
 			return capabilityHttpError(c, error);
 		}
 	});
+	app.get("/api/local-apps/:id/snapshots/:sourceHash", (c) => {
+		const sourceHash = LocalAppSourceHashSchema.safeParse(c.req.param("sourceHash"));
+		if (!sourceHash.success) return c.json({ error: "Invalid snapshot hash" }, 400);
+		const snapshot = deps.service.localApps.getSnapshot(c.req.param("id"), sourceHash.data);
+		return snapshot ? c.json({ snapshot }) : c.json({ error: "Snapshot not found" }, 404);
+	});
 	app.post("/api/local-apps/:id/validate", async (c) => {
 		try {
 			return c.json(await capabilities.call("xopc.local_apps.validate", { id: c.req.param("id") }, capabilityHttpContext(c)));
@@ -86,6 +107,17 @@ function registerLocalAppsRoutes(app, deps) {
 			return capabilityHttpError(c, error);
 		}
 	});
+	app.post("/api/local-apps/:id/fix-guidance", async (c) => {
+		try {
+			const body = await c.req.json().catch(() => {
+				throw new CapabilityError("INVALID_INPUT", "Invalid JSON body");
+			});
+			const guidance = deps.service.localApps.getFixGuidance(c.req.param("id"), parseLocalAppFixGuidanceInput(body));
+			return c.json({ guidance });
+		} catch (error) {
+			return capabilityHttpError(c, error);
+		}
+	});
 	app.post("/api/local-apps/:id/acceptance-runs", async (c) => {
 		try {
 			const body = await c.req.json().catch(() => {