@xopcai/xopc 0.0.321 → 0.0.324

package/dist/src/gateway/hono/routes/mcp.js

@@ -1,5 +1,7 @@
 import { isManagedConnectorServer } from "../../../connectors/materialize.js";
+import { AgentPluginStore } from "../../../extensions/agent-plugins/store.js";
 import { canonicalizeConfiguredMcpServer, normalizeConfiguredMcpServers } from "../../../config/mcp-config-normalize.js";
+import { savePluginAuthBinding } from "../../../extensions/agent-plugins/auth.js";
 import { loadMergedBundleMcpConfig } from "../../../agent/mcp/bundle-mcp-config.js";
 import { getWorkspacePath } from "../../../config/workspace-path-helpers.js";
 import { getMcpOAuthManager } from "../../../agent/mcp/oauth/mcp-oauth-manager.js";
@@ -20,12 +22,12 @@ function registerMcpRoutes(authenticated, deps) {
 			cfg
 		});
 		const configured = normalizeConfiguredMcpServers(cfg.mcp?.servers);
-		const oauthManager = getMcpOAuthManager();
-		const servers = await Promise.all(Object.entries(configured).map(async ([id, server]) => ({
+		const servers = await Promise.all(Object.entries(merged.config.mcpServers).map(async ([id, server]) => ({
 			id,
+			plugin: server.xopcPlugin,
 			managed: isManagedConnectorServer(server),
 			connectorId: isManagedConnectorServer(server) ? server.xopcConnector.connectorId : void 0,
-			oauth: await oauthManager.status(id, server)
+			oauth: await getMcpOAuthManager(server).status(id, server)
 		})));
 		return c.json({
 			ok: true,
@@ -76,9 +78,30 @@ function registerMcpRoutes(authenticated, deps) {
 		}, 404);
 		return c.json({
 			ok: true,
-			payload: await getMcpOAuthManager().status(id, server)
+			payload: await getMcpOAuthManager(server).status(id, server)
 		});
 	});
+	authenticated.post("/api/mcp/servers/:id/oauth/callback", deps.strictRateLimitMiddleware, async (c) => {
+		const id = c.req.param("id");
+		const server = resolveServer(id);
+		if (!server) return c.json({
+			ok: false,
+			error: "Unknown MCP server"
+		}, 404);
+		try {
+			const body = await c.req.json();
+			if (typeof body.callbackUrl !== "string" || body.callbackUrl.length > 16384) throw new Error("Expected callbackUrl");
+			return c.json({
+				ok: true,
+				payload: await getMcpOAuthManager(server).submitCallback(id, server, body.callbackUrl)
+			});
+		} catch {
+			return c.json({
+				ok: false,
+				error: "OAuth callback rejected; verify the URL and active authorization session"
+			}, 400);
+		}
+	});
 	authenticated.post("/api/mcp/servers/:id/oauth/start", deps.strictRateLimitMiddleware, async (c) => {
 		const id = c.req.param("id");
 		const server = resolveServer(id);
@@ -87,9 +110,12 @@ function registerMcpRoutes(authenticated, deps) {
 			error: `Unknown MCP server: ${id}`
 		}, 404);
 		try {
-			const payload = await getMcpOAuthManager().start({
+			const origin = server.xopcPlugin;
+			if (origin) await savePluginAuthBinding(new AgentPluginStore(), origin.id, origin.serverName, { mode: "oauth" });
+			const oauthServer = origin ? resolveServer(id) : server;
+			const payload = await getMcpOAuthManager(oauthServer).start({
 				serverId: id,
-				rawServer: server,
+				rawServer: oauthServer,
 				cfg: deps.service.currentConfig
 			});
 			return c.json({
@@ -111,7 +137,7 @@ function registerMcpRoutes(authenticated, deps) {
 			error: `Unknown MCP server: ${id}`
 		}, 404);
 		try {
-			const payload = await getMcpOAuthManager().disconnect(id, server);
+			const payload = await getMcpOAuthManager(server).disconnect(id, server);
 			return c.json({
 				ok: true,
 				payload
@@ -171,20 +197,25 @@ function registerMcpRoutes(authenticated, deps) {
 		const workspaceDir = getWorkspacePath(cfg) || "./workspace";
 		const body = await c.req.json().catch(() => ({}));
 		const inlineServer = body && typeof body === "object" && !Array.isArray(body) && body.server && typeof body.server === "object" ? body.server : void 0;
-		const servers = normalizeConfiguredMcpServers(cfg.mcp?.servers);
+		if (inlineServer && id.startsWith("plugin/")) return c.json({
+			ok: false,
+			error: "Plugin servers must use their installed configuration"
+		}, 400);
 		const mergedServers = loadMergedBundleMcpConfig({
 			workspaceDir,
 			cfg
 		}).config.mcpServers;
-		const knownServer = inlineServer ?? servers[id] ?? mergedServers[id];
+		const knownServer = inlineServer ?? mergedServers[id];
 		if (!knownServer) return c.json({
 			ok: false,
 			error: `Unknown MCP server: ${id}`
 		}, 404);
 		try {
-			const oauth = await getMcpOAuthManager().status(id, knownServer);
-			if (oauth.configured && oauth.status !== "connected") return c.json({
+			const oauth = await getMcpOAuthManager(knownServer).status(id, knownServer);
+			if (oauth.configured && knownServer.xopcAutoAuth !== true && oauth.status !== "connected") return c.json({
 				ok: false,
+				code: "MCP_AUTHORIZATION_REQUIRED",
+				serverId: id,
 				error: oauth.session?.error ?? "MCP server authorization is required"
 			}, 409);
 			const capabilities = await listBundleMcpServerCapabilitiesForGateway({
@@ -198,6 +229,12 @@ function registerMcpRoutes(authenticated, deps) {
 				} : cfg,
 				serverId: id
 			});
+			if (capabilities.error) return c.json({
+				ok: false,
+				code: capabilities.error.code,
+				serverId: id,
+				error: capabilities.error.message
+			}, capabilities.error.code === "MCP_AUTHORIZATION_REQUIRED" ? 409 : 502);
 			return c.json({
 				ok: true,
 				payload: {
@@ -212,16 +249,6 @@ function registerMcpRoutes(authenticated, deps) {
 			}, 500);
 		}
 	});
-	authenticated.post("/api/mcp/approvals/respond", async (c) => {
-		const body = await c.req.json().catch(() => ({}));
-		return c.json({
-			ok: true,
-			payload: {
-				acknowledged: true,
-				body
-			}
-		});
-	});
 }
 //#endregion
 export { registerMcpRoutes };

package/dist/src/gateway/hono/routes/models.js

@@ -14,7 +14,7 @@ import { getImageGenerationProvider, reloadImageGenerationProviders, resolveImag
 import { SessionConfigStore } from "../../../session/config-store.js";
 import { getModelThinking } from "../../../providers/model-thinking.js";
 import { deleteCustomImageProvider, listCustomImageProviders, upsertCustomImageProvider } from "../../custom-image-providers.js";
-import { getAgentImageGenerationConfig, getDefaultImageGenerationConfig, getImageGenerationCatalog, prepareDefaultImageGenerationSetup, prepareImageGenerationSetup, verifyImageGenerationCredential } from "../../image-generation-setup.js";
+import { applyImageGenerationCatalogUpdate, getAgentImageGenerationConfig, getDefaultImageGenerationConfig, getImageGenerationCatalog, prepareDefaultImageGenerationSetup, prepareImageGenerationSetup, verifyImageGenerationCredential } from "../../image-generation-setup.js";
 import { discoverProviderModels, isProviderApiDiscoverable } from "../../../providers/model-discovery.js";
 import { getXopcCloudCatalogCoordinator } from "../../../providers/xopc-cloud-catalog-coordinator.js";
 import { respondStartupUnavailable } from "../lib/startup-unavailable.js";
@@ -141,8 +141,7 @@ function registerModelsRoutes(authenticated, deps) {
 	});
 	authenticated.get("/api/models/catalog", async (c) => {
 		const catalog = getModelCatalogStore().load();
-		const sessionConfigs = await new SessionConfigStore("").getAll();
-		const references = auditModelReferences(service.currentConfig, sessionConfigs, { catalog });
+		const references = auditModelReferences(await new SessionConfigStore("").getAll(), { catalog });
 		return c.json({
 			ok: true,
 			payload: {
@@ -515,7 +514,7 @@ function registerModelsRoutes(authenticated, deps) {
 	});
 	authenticated.get("/api/image-generation/default", (c) => c.json({
 		ok: true,
-		payload: getDefaultImageGenerationConfig(service.currentConfig)
+		payload: getDefaultImageGenerationConfig()
 	}));
 	authenticated.post("/api/image-generation/default/setup", strictRateLimitMiddleware, async (c) => {
 		const body = await c.req.json().catch(() => null);
@@ -563,10 +562,11 @@ function registerModelsRoutes(authenticated, deps) {
 				error: { message: saved.error ?? "Failed to save configuration" }
 			}, 500);
 		}
+		await applyImageGenerationCatalogUpdate(prepared.catalogUpdate);
 		return c.json({
 			ok: true,
 			payload: {
-				default: getDefaultImageGenerationConfig(service.currentConfig),
+				default: getDefaultImageGenerationConfig(),
 				providers: getImageGenerationCatalog(service.currentConfig),
 				verification
 			}
@@ -576,7 +576,7 @@ function registerModelsRoutes(authenticated, deps) {
 		try {
 			return c.json({
 				ok: true,
-				payload: getAgentImageGenerationConfig(service.currentConfig, c.req.param("agentId"))
+				payload: getAgentImageGenerationConfig(c.req.param("agentId"))
 			});
 		} catch (error) {
 			return c.json({
@@ -631,10 +631,11 @@ function registerModelsRoutes(authenticated, deps) {
 				error: { message: saved.error ?? "Failed to save configuration" }
 			}, 500);
 		}
+		await applyImageGenerationCatalogUpdate(prepared.catalogUpdate);
 		return c.json({
 			ok: true,
 			payload: {
-				agent: getAgentImageGenerationConfig(service.currentConfig, c.req.param("agentId")),
+				agent: getAgentImageGenerationConfig(c.req.param("agentId")),
 				providers: getImageGenerationCatalog(service.currentConfig),
 				verification
 			}

package/dist/src/gateway/hono/routes/notes.js

@@ -1,9 +1,9 @@
 import { NoteDeleteOutputSchema, NoteGetOutputSchema, ProductReadContracts } from "../../../../packages/gateway-contract/src/capabilities.js";
 import { init_src } from "../../../../packages/gateway-contract/src/index.js";
-import { init_session_key, resolveConversationId } from "../../../routing/session-key.js";
-import { agentExists, getDefaultAgentId, init_resolve_route } from "../../../routing/resolve-route.js";
 import { CapabilityError } from "../../../capabilities/runtime/errors.js";
 import "../../../capabilities/runtime/dispatcher.js";
+import { init_session_key, resolveConversationId } from "../../../routing/session-key.js";
+import { agentExists, getDefaultAgentId, init_resolve_route } from "../../../routing/resolve-route.js";
 import { resolveGatewayEffectiveHost } from "../../../config/gateway-bind.js";
 import { getShareStore } from "../../../share/share-store.js";
 import { resolveShareUrl } from "../../../share/share-url.js";
@@ -248,12 +248,11 @@ function registerNotesRoutes(authenticated, deps) {
 		const note = await service.notesServiceInstance.getNote(noteId);
 		if (!note) return c.json(noteNotFound(), 404);
 		const body = await c.req.json().catch(() => ({}));
-		const routingCfg = service.currentConfig;
 		const projectId = typeof body.projectId === "string" ? body.projectId.trim() : void 0;
 		const project = projectId ? service.projects.get(projectId) : void 0;
 		if (projectId && !project) return c.json({ error: "Project not found" }, 400);
-		let agentId = typeof body.agentId === "string" && body.agentId.trim() ? body.agentId.trim().toLowerCase() : project?.defaultAgentId ?? getDefaultAgentId(routingCfg);
-		if (!agentExists(agentId, routingCfg)) agentId = getDefaultAgentId(routingCfg);
+		let agentId = typeof body.agentId === "string" && body.agentId.trim() ? body.agentId.trim().toLowerCase() : project?.defaultAgentId ?? getDefaultAgentId();
+		if (!agentExists(agentId)) agentId = getDefaultAgentId();
 		const sourceBinding = {
 			kind: "note",
 			sourceId: noteId,

package/dist/src/gateway/hono/routes/projects.js

@@ -4,15 +4,15 @@ import { init_src } from "../../../../packages/gateway-contract/src/index.js";
 import { TaskRepository } from "../../../tasks/task-repository.js";
 import { getSessionMetadata } from "../../../storage/sqlite/session-read-repository.js";
 import { loadTranscriptRowsForSession } from "../../../storage/sqlite/transcript-repository.js";
-import "../../../storage/sqlite/index.js";
+import { init_sqlite } from "../../../storage/sqlite/index.js";
 import { ActivityService } from "../../../activity/service.js";
 import "../../../activity/index.js";
+import { CapabilityError } from "../../../capabilities/runtime/errors.js";
+import "../../../capabilities/runtime/dispatcher.js";
 import { resolveEffectiveAgentProfile } from "../../../config/agent-profile.js";
 import { TaskReadModelProjector } from "../../../tasks/task-read-model-projector.js";
 import { listKnowledgeItems, writeKnowledgeItem } from "../../../knowledge-memory/repository.js";
 import "../../../knowledge-memory/index.js";
-import { CapabilityError } from "../../../capabilities/runtime/errors.js";
-import "../../../capabilities/runtime/dispatcher.js";
 import { ProjectWorkspaceConflictError, ProjectWorkspaceMissingError } from "../../../projects/workspace-project.js";
 import { inferProjectExecutionMode, inferProjectKind } from "../../../projects/project-kind.js";
 import { ProjectDeletionBlockedError, ProjectWorkspaceInUseError } from "../../../projects/project-service.js";
@@ -30,6 +30,7 @@ import { capabilityHttpContext, capabilityHttpError } from "../../../capabilitie
 import { randomUUID } from "node:crypto";
 //#region src/gateway/hono/routes/projects.ts
 init_src();
+init_sqlite();
 function projectWriteError(c, error) {
 	const cause = error instanceof CapabilityError ? error.cause : error;
 	if (cause instanceof ProjectWorkspaceConflictError) return c.json({
@@ -63,12 +64,11 @@ function textField(body, key) {
 function resolveEffectiveWorkspaceRoot(service, project) {
 	const fixedRoot = project.workspaceRoot?.trim();
 	if (fixedRoot) return fixedRoot;
-	const agentId = resolveProjectAgentId({
+	return resolveEffectiveAgentProfile(resolveProjectAgentId({
 		config: service.currentConfig,
 		projects: service.projects,
 		projectId: project.id
-	});
-	return resolveEffectiveAgentProfile(service.currentConfig, agentId).resolvedWorkspacePath;
+	})).resolvedWorkspacePath;
 }
 function enrichProjectWorkspace(service, project) {
 	return {

package/dist/src/gateway/hono/routes/public-gateway.js

@@ -1,12 +1,13 @@
 import { PACKAGE_VERSION, init_package_version } from "../../../package-version.js";
 import { claimConnectorWebhookDelivery, completeConnectorWebhookDelivery, releaseConnectorWebhookDelivery } from "../../../storage/sqlite/connector-repository.js";
-import "../../../storage/sqlite/index.js";
+import { init_sqlite } from "../../../storage/sqlite/index.js";
 import { composioLogoResponse } from "../../../connectors/composio-logo.js";
 import { appendComposioTriggerEvent, applyComposioConnectionLifecycleEvent, normalizeComposioTriggerPayload, verifyComposioWebhook } from "../../../connectors/composio-triggers.js";
 import { serveStaticFile } from "../lib/static-ui.js";
 import { createHash } from "node:crypto";
 //#region src/gateway/hono/routes/public-gateway.ts
 init_package_version();
+init_sqlite();
 const PUBLIC_UI_ROOT_ASSETS = [
 	"apple-touch-icon.png",
 	"favicon-16x16.png",

package/dist/src/gateway/hono/routes/session-input-handler.d.ts

@@ -53,6 +53,7 @@ export declare function submitSessionInput(c: Context, deps: AuthenticatedRouteD
                 };
                 attachments?: import("hono/dist/types/utils/types.js").JSONValue[];
                 contextRefs?: {
+                    refId?: string;
                     kind: import("../../../agent/source-context/types.js").AgentSourceContext["kind"];
                     sourceId: string;
                     version: string;
@@ -65,6 +66,7 @@ export declare function submitSessionInput(c: Context, deps: AuthenticatedRouteD
                     fileKind?: "file" | "directory";
                 }[];
                 contextSnapshots?: {
+                    refId?: string;
                     kind: import("../../../agent/source-context/types.js").SessionSourceBinding["kind"] | "task" | "file" | "session" | "mcp_resource" | "browser_tab" | "browser_page" | "app_context";
                     sourceId: string;
                     version: string;
@@ -189,6 +191,7 @@ export declare function replaceLatestSessionTurn(c: Context, deps: Authenticated
                 };
                 attachments?: import("hono/dist/types/utils/types.js").JSONValue[];
                 contextRefs?: {
+                    refId?: string;
                     kind: import("../../../agent/source-context/types.js").AgentSourceContext["kind"];
                     sourceId: string;
                     version: string;
@@ -201,6 +204,7 @@ export declare function replaceLatestSessionTurn(c: Context, deps: Authenticated
                     fileKind?: "file" | "directory";
                 }[];
                 contextSnapshots?: {
+                    refId?: string;
                     kind: import("../../../agent/source-context/types.js").SessionSourceBinding["kind"] | "task" | "file" | "session" | "mcp_resource" | "browser_tab" | "browser_page" | "app_context";
                     sourceId: string;
                     version: string;

package/dist/src/gateway/hono/routes/session-input-handler.js

@@ -1,11 +1,12 @@
 import { createLogger } from "../../../utils/logger/index.js";
 import { init_logger } from "../../../utils/logger.js";
+import { parseUserTurnDocument, userTurnDocumentRefIds } from "../../../../packages/gateway-contract/src/user-turn-document.js";
 import { browserPageContextsInputSchema } from "../../../../packages/gateway-contract/src/browser-page-context.js";
 import { init_src } from "../../../../packages/gateway-contract/src/index.js";
 import { endpointTurnClaimSchema, init_src as init_src$1 } from "../../../../packages/endpoint-tools-protocol/src/index.js";
-import { init_providers, resolveModel } from "../../../providers/index.js";
 import { CapabilityError } from "../../../capabilities/runtime/errors.js";
 import "../../../capabilities/runtime/dispatcher.js";
+import { init_providers, resolveModel } from "../../../providers/index.js";
 import { validateWebchatAttachments, validateWebchatContent } from "../../chat-limits.js";
 import { isTaskDestructiveCommand } from "../../../session/reset-triggers.js";
 import { parseSlashCommand } from "../../../chat-commands/command-parse.js";
@@ -24,6 +25,13 @@ init_providers();
 init_logger();
 const MAX_TURN_CONTEXTS = 5;
 const log = createLogger("Gateway:SessionInput");
+function contextDocumentIsValid(content, refs) {
+	if (!refs) return false;
+	const document = parseUserTurnDocument(content);
+	if (!document) return true;
+	const available = new Set(refs.flatMap((ref) => ref.refId ? [ref.refId] : []));
+	return userTurnDocumentRefIds(document).every((refId) => available.has(refId));
+}
 async function submitSessionInput(c, deps, conversationId, options) {
 	const body = await c.req.json().catch(() => null);
 	if (!body || !conversationId) return c.json({
@@ -51,6 +59,13 @@ async function submitSessionInput(c, deps, conversationId, options) {
 		}
 	}, 400);
 	const content = typeof body.content === "string" ? body.content : "";
+	if (!contextDocumentIsValid(content, contextRefs)) return c.json({
+		ok: false,
+		error: {
+			code: "BAD_REQUEST",
+			message: "Input contains an unknown context reference"
+		}
+	}, 400);
 	if (options?.taskConversation && isTaskDestructiveCommand(content)) return c.json({
 		ok: false,
 		error: {
@@ -239,6 +254,13 @@ async function replaceLatestSessionTurn(c, deps, conversationId, targetTurnId) {
 		}
 	}, 400);
 	const content = typeof body.content === "string" ? body.content : "";
+	if (!contextDocumentIsValid(content, contextRefs)) return c.json({
+		ok: false,
+		error: {
+			code: "BAD_REQUEST",
+			message: "Input contains an unknown context reference"
+		}
+	}, 400);
 	const contentError = validateWebchatContent(content);
 	if (contentError) return c.json({
 		ok: false,

package/dist/src/gateway/hono/routes/sessions.js

@@ -1,10 +1,10 @@
-import { deleteBrowserTabBinding } from "../../../storage/sqlite/browser-tab-binding-repository.js";
+import { deleteBrowserTabBinding, init_browser_tab_binding_repository } from "../../../storage/sqlite/browser-tab-binding-repository.js";
 import { conversationIdSchema } from "../../../../packages/gateway-contract/src/conversation-identity.js";
 import { SessionDiscoveryQuerySchema } from "../../../../packages/gateway-contract/src/session-identity.js";
 import { init_src } from "../../../../packages/gateway-contract/src/index.js";
 import "../../../session/types.js";
 import { deleteSessionRecord, init_session_repository } from "../../../storage/sqlite/session-repository.js";
-import { SidebarLayoutConflictError, getSidebarLayout, replaceSidebarLayout, sortBySidebarLayout } from "../../../storage/sqlite/sidebar-layout-repository.js";
+import { SidebarLayoutConflictError, getSidebarLayout, init_sidebar_layout_repository, replaceSidebarLayout, sortBySidebarLayout } from "../../../storage/sqlite/sidebar-layout-repository.js";
 import { ConversationAlreadyExistsError, createConversation, init_conversation_repository } from "../../../storage/sqlite/conversation-repository.js";
 import { resolveProjectAgentId } from "../../../projects/project-agent.js";
 import "../../../projects/index.js";
@@ -22,6 +22,8 @@ import { randomUUID } from "node:crypto";
 init_src();
 init_conversation_repository();
 init_session_repository();
+init_browser_tab_binding_repository();
+init_sidebar_layout_repository();
 const log = createGatewayRouteLogger("Sessions");
 const SESSION_TYPES = new Set([
 	"chat",

package/dist/src/gateway/hono/routes/shares.js

@@ -1,5 +1,5 @@
 import { loadCompactionSourceSnapshot } from "../../../storage/sqlite/transcript-repository.js";
-import "../../../storage/sqlite/index.js";
+import { init_sqlite } from "../../../storage/sqlite/index.js";
 import { FileServiceError } from "../../../files/file-service.js";
 import { resolveGatewayEffectiveHost } from "../../../config/gateway-bind.js";
 import { SHARE_CONFIG_DEFAULTS } from "../../../share/share-types.js";
@@ -31,6 +31,7 @@ import { createHash } from "node:crypto";
 import { stat } from "node:fs/promises";
 import { Readable } from "node:stream";
 //#region src/gateway/hono/routes/shares.ts
+init_sqlite();
 function getShareUrlContext(service) {
 	const gateway = service.currentConfig.gateway;
 	return {
@@ -1894,10 +1895,10 @@ async function resolveWorkspaceRootForShare(service, conversationId, agentId) {
 	} catch {}
 	const { getWorkspacePath } = await import("../../../config/workspace-path-helpers.js");
 	const { resolveAgentWorkspaceDir, normalizeAgentId, resolveDefaultAgentId } = await import("../../../agent/agent-scope.js");
-	if (agentId) return resolveAgentWorkspaceDir(cfg, normalizeAgentId(agentId));
+	if (agentId) return resolveAgentWorkspaceDir(normalizeAgentId(agentId));
 	const root = getWorkspacePath(cfg);
 	if (root) return root;
-	return resolveAgentWorkspaceDir(cfg, resolveDefaultAgentId(cfg));
+	return resolveAgentWorkspaceDir(resolveDefaultAgentId());
 }
 async function handleFileDownload(c, store, record, clientIp, inline = false) {
 	if (!acquireDownloadSlot(record.token)) return new Response("Too many concurrent downloads for this share", { status: 429 });

package/dist/src/gateway/hono/routes/side-chats.js

@@ -157,6 +157,17 @@ function registerSideChatRoutes(authenticated, deps) {
 			return respondSideChatError(c, error);
 		}
 	});
+	authenticated.post("/api/side-chats/:sideChatId/promote", deps.chatRateLimitMiddleware, async (c) => {
+		try {
+			const result = await service.sideChatPromotions.promote(c.req.param("sideChatId"), readClientInstanceId(c));
+			return c.json({
+				ok: true,
+				...result
+			}, result.created ? 201 : 200);
+		} catch (error) {
+			return respondSideChatError(c, error);
+		}
+	});
 	authenticated.delete("/api/side-chats/:sideChatId", async (c) => {
 		try {
 			return await service.sideChatRuns.dispose(c.req.param("sideChatId"), readClientInstanceId(c)) ? c.json({ ok: true }) : c.json({

package/dist/src/gateway/hono/routes/site-shares.js

@@ -36,10 +36,10 @@ function registerSiteShareRoutes(authenticated, deps) {
 		} catch {}
 		const { getWorkspacePath } = await import("../../../config/workspace-path-helpers.js");
 		const { resolveAgentWorkspaceDir, normalizeAgentId, resolveDefaultAgentId } = await import("../../../agent/agent-scope.js");
-		if (agentId) return resolveAgentWorkspaceDir(cfg, normalizeAgentId(agentId));
+		if (agentId) return resolveAgentWorkspaceDir(normalizeAgentId(agentId));
 		const root = getWorkspacePath(cfg);
 		if (root) return root;
-		return resolveAgentWorkspaceDir(cfg, resolveDefaultAgentId(cfg));
+		return resolveAgentWorkspaceDir(resolveDefaultAgentId());
 	}
 	authenticated.post("/api/site-shares", async (c) => {
 		const principalId = getGatewayPrincipal(c).principalId;

package/dist/src/gateway/hono/routes/status.js

@@ -15,13 +15,12 @@ function contentHash(value) {
 	return createHash("sha256").update(JSON.stringify(stableValue(value))).digest("hex");
 }
 function buildEvalRuntimeIdentity(service, agentId) {
-	const config = service.currentConfig;
-	if (!config) return {
+	if (!service.currentConfig) return {
 		ok: false,
 		error: "Gateway configuration is unavailable",
 		status: 503
 	};
-	const effective = getGatewayAgentEffectiveConfig(config, agentId);
+	const effective = getGatewayAgentEffectiveConfig(agentId);
 	if ("error" in effective) return {
 		ok: false,
 		error: effective.error,

package/dist/src/gateway/hono/routes/tasks.js

@@ -5,9 +5,9 @@ import { init_src } from "../../../../packages/gateway-contract/src/index.js";
 import { enqueueTaskChangedEvent, init_task_change_events } from "../../../tasks/task-change-events.js";
 import { TaskRepository, init_task_repository } from "../../../tasks/task-repository.js";
 import { TaskRunRepository, init_task_run_repository } from "../../../tasks/task-run-repository.js";
-import { TaskConversationRepository } from "../../../tasks/task-conversation-repository.js";
 import { CapabilityError } from "../../../capabilities/runtime/errors.js";
 import "../../../capabilities/runtime/dispatcher.js";
+import { TaskConversationRepository } from "../../../tasks/task-conversation-repository.js";
 import { TaskContextMutationOutputSchema } from "../../../tasks/capabilities/relations.js";
 import { TaskDeleteOutputSchema } from "../../../tasks/capabilities/management.js";
 import { TaskMutationOutputSchema } from "../../../tasks/capabilities/write.js";
@@ -49,7 +49,6 @@ function registerTaskRoutes(authenticated, deps) {
 	const conversations = new TaskConversationRepository();
 	const conversationQuery = new TaskConversationQueryService(deps.service.sessions);
 	const handoffs = new TaskHandoffService({
-		getConfig: () => deps.service.currentConfig,
 		sessionIndex: deps.service.sessionIndexInstance,
 		getActiveRunId: (conversationId) => deps.service.getActiveWebchatRunId(conversationId),
 		abortRun: (runId) => deps.service.abortAgentRun(runId)

package/dist/src/gateway/hono/routes/user-model-refresh.js

@@ -1,6 +1,6 @@
 import { listConnectorLearningJobs } from "../../../storage/sqlite/connector-learning-repository.js";
 import { getConnectorAccount } from "../../../storage/sqlite/connector-account-repository.js";
-import "../../../storage/sqlite/index.js";
+import { init_sqlite } from "../../../storage/sqlite/index.js";
 import { getWorkDiscoveryRun } from "../../../work-discovery/repository.js";
 import { getConnectorUnderstandingSourceRun } from "../../../user-context/sources/repository.js";
 import { isLocalUnderstandingSourceId } from "../../../user-context/sources/local-source-contract.js";
@@ -8,6 +8,7 @@ import { normalizeUnderstandingSourceItems } from "../../../work-discovery/servi
 import { UnderstandingRefreshService } from "../../../user-context/sources/refresh-service.js";
 import { randomUUID } from "node:crypto";
 //#region src/gateway/hono/routes/user-model-refresh.ts
+init_sqlite();
 function createUnderstandingRefreshService(deps) {
 	const service = deps.service;
 	return new UnderstandingRefreshService({

package/dist/src/gateway/hono/routes/user-model.js

@@ -1,5 +1,5 @@
 import { init_transaction, runSqliteWriteTransaction } from "../../../storage/sqlite/transaction.js";
-import { createCollaborationRule, getCollaborationRule, listCollaborationRules, setCollaborationRuleStatus } from "../../../storage/sqlite/collaboration-rule-repository.js";
+import { createCollaborationRule, getCollaborationRule, init_collaboration_rule_repository, listCollaborationRules, setCollaborationRuleStatus } from "../../../storage/sqlite/collaboration-rule-repository.js";
 import { KnowledgeReviewConflictError, deleteKnowledgeItem, getKnowledgeItem, listKnowledgeItems, reviewKnowledgeItem, searchKnowledgeItems } from "../../../knowledge-memory/repository.js";
 import "../../../knowledge-memory/index.js";
 import { createPriorityWindow, createUserGoal, listPriorityWindows, listUserGoals, setUserGoalStatus, updatePriorityWindow, updateUserGoal } from "../../../user-model/goals.js";
@@ -15,6 +15,7 @@ import { listUnderstandingSourceGrants } from "../../../user-context/sources/rep
 import { userInfo } from "node:os";
 //#region src/gateway/hono/routes/user-model.ts
 init_transaction();
+init_collaboration_rule_repository();
 function object(value) {
 	return value && typeof value === "object" && !Array.isArray(value) ? value : void 0;
 }
@@ -105,7 +106,7 @@ const RULE_CATEGORIES = new Set([
 	"execution",
 	"boundary",
 	"routine",
-	"proactive"
+	"initiative"
 ]);
 const RULE_STATUSES = new Set([
 	"active",

package/dist/src/gateway/hono/routes/work-discovery.js

@@ -39,7 +39,7 @@ function registerWorkDiscoveryRoutes(authenticated, deps) {
 		}, 400);
 		try {
 			const preview = await previewWorkDiscoveryRoot(rootPath);
-			const modelRef = getAgentDefaultModelRef(deps.service.currentConfig);
+			const modelRef = getAgentDefaultModelRef();
 			if (!modelRef) return c.json({
 				ok: false,
 				error: "No default model configured"

package/dist/src/gateway/hono/routes/workflows.js

@@ -514,10 +514,10 @@ function buildWorkflowRunComparison(sourceView, replayView) {
 		targetAgents
 	};
 }
-function getAgentId(rawAgentId, config) {
+function getAgentId(rawAgentId, _config) {
 	const trimmed = rawAgentId?.trim();
 	if (trimmed) return trimmed;
-	return resolveDefaultAgentId(config);
+	return resolveDefaultAgentId();
 }
 function buildWorkflowStats(runs) {
 	const activeStatuses = new Set(["queued", "running"]);

package/dist/src/gateway/image-generation-setup.d.ts

@@ -1,4 +1,5 @@
 import { listImageGenerationProvidersSummary } from '../agent/image/generation/provider-registry.js';
+import type { AgentModelsDefaults } from '../agent-config/index.js';
 import { type Config } from '../config/schema.js';
 export type ImageGenerationSetupInput = {
     providerId: string;
@@ -10,7 +11,7 @@ export type ImageGenerationCatalogItem = ReturnType<typeof listImageGenerationPr
     config: Record<string, string>;
 };
 export declare function getImageGenerationCatalog(config: Config): ImageGenerationCatalogItem[];
-export declare function getAgentImageGenerationConfig(config: Config, agentIdRaw: string): {
+export declare function getAgentImageGenerationConfig(agentIdRaw: string): {
     agentId: string;
     model: {
         primary: string;
@@ -19,7 +20,7 @@ export declare function getAgentImageGenerationConfig(config: Config, agentIdRaw
         timeoutMs?: number;
     };
 };
-export declare function getDefaultImageGenerationConfig(config: Config): {
+export declare function getDefaultImageGenerationConfig(): {
     model: {
         primary: string;
         fallbacks: string[];
@@ -27,24 +28,31 @@ export declare function getDefaultImageGenerationConfig(config: Config): {
         timeoutMs?: number;
     };
 };
-export declare function prepareDefaultImageGenerationSetup(config: Config, input: ImageGenerationSetupInput): {
+type ImageGenerationModel = NonNullable<AgentModelsDefaults['imageGeneration']>;
+export type ImageGenerationCatalogUpdate = {
+    target: 'defaults';
+    model: ImageGenerationModel;
+} | {
+    target: 'agent';
+    agentId: string;
+    model: ImageGenerationModel;
+};
+type PreparedImageGenerationSetup = {
     ok: true;
     config: Config;
     providerId: string;
     modelId: string;
-} | {
+    catalogUpdate: ImageGenerationCatalogUpdate;
+};
+export declare function prepareDefaultImageGenerationSetup(config: Config, input: ImageGenerationSetupInput): PreparedImageGenerationSetup | {
     ok: false;
     error: string;
 };
-export declare function prepareImageGenerationSetup(config: Config, agentIdRaw: string, input: ImageGenerationSetupInput): {
-    ok: true;
-    config: Config;
-    providerId: string;
-    modelId: string;
-} | {
+export declare function prepareImageGenerationSetup(config: Config, agentIdRaw: string, input: ImageGenerationSetupInput): PreparedImageGenerationSetup | {
     ok: false;
     error: string;
 };
+export declare function applyImageGenerationCatalogUpdate(update: ImageGenerationCatalogUpdate): Promise<void>;
 export declare function verifyImageGenerationCredential(input: {
     providerId: string;
     apiKey: string;
@@ -54,3 +62,4 @@ export declare function verifyImageGenerationCredential(input: {
     supported: boolean;
     message?: string;
 }>;
+export {};