@xopcai/xopc 0.0.321 → 0.0.324

package/dist/src/gateway/image-generation-setup.js

@@ -1,10 +1,14 @@
+import { normalizeAgentId } from "../agent-catalog/id.js";
+import { AgentCatalogRepository, init_repository } from "../agent-catalog/repository.js";
+import { init_agent_scope } from "../agent/agent-scope.js";
+import { AgentCatalogService } from "../agent-catalog/service.js";
 import { ConfigSchema, init_schema } from "../config/schema.js";
-import { init_agent_scope, normalizeAgentId } from "../agent/agent-scope.js";
 import { resolveEffectiveAgentConfigForAgent } from "../config/agent-profile.js";
 import { fetchWithTimeoutGuarded } from "../media-shared/http/provider-http.js";
 import "../media-shared/http/index.js";
 import { getImageGenerationProvider, listImageGenerationProvidersSummary } from "../agent/image/generation/provider-registry.js";
 //#region src/gateway/image-generation-setup.ts
+init_repository();
 init_agent_scope();
 init_schema();
 function getImageGenerationCatalog(config) {
@@ -51,18 +55,18 @@ function parseProviderConfig(provider, input) {
 		value
 	};
 }
-function getAgentImageGenerationConfig(config, agentIdRaw) {
+function getAgentImageGenerationConfig(agentIdRaw) {
 	const agentId = normalizeAgentId(agentIdRaw);
-	if (!config.agents.list.some((entry) => entry.enabled !== false && normalizeAgentId(entry.id) === agentId)) throw new Error(`Agent not found: ${agentId}`);
+	if (!new AgentCatalogRepository().get(agentId)) throw new Error(`Agent not found: ${agentId}`);
 	return {
 		agentId,
-		model: resolveEffectiveAgentConfigForAgent(config, agentId).config.models.imageGeneration ?? null
+		model: resolveEffectiveAgentConfigForAgent(agentId).config.models.imageGeneration ?? null
 	};
 }
-function getDefaultImageGenerationConfig(config) {
-	return { model: config.agents.defaults.models.imageGeneration ?? null };
+function getDefaultImageGenerationConfig() {
+	return { model: new AgentCatalogRepository().getSettings().defaults.models.imageGeneration ?? null };
 }
-function prepareImageGenerationConfig(config, input, applyModel) {
+function prepareImageGenerationConfig(config, input) {
 	const providerId = input.providerId.trim();
 	const provider = getImageGenerationProvider(providerId);
 	if (!provider) return {
@@ -87,11 +91,11 @@ function prepareImageGenerationConfig(config, input, applyModel) {
 			...parsedProviderConfig.value
 		}
 	};
-	applyModel(next, {
+	const model = {
 		primary: `${providerId}/${modelId}`,
 		fallbacks: [],
 		autoProviderFallback: false
-	});
+	};
 	const parsed = ConfigSchema.safeParse(next);
 	if (!parsed.success) return {
 		ok: false,
@@ -101,28 +105,60 @@ function prepareImageGenerationConfig(config, input, applyModel) {
 		ok: true,
 		config: next,
 		providerId,
-		modelId
+		modelId,
+		model
 	};
 }
 function prepareDefaultImageGenerationSetup(config, input) {
-	return prepareImageGenerationConfig(config, input, (next, model) => {
-		next.agents.defaults.models.imageGeneration = model;
-	});
+	const prepared = prepareImageGenerationConfig(config, input);
+	if (prepared.ok === false) return prepared;
+	const { model, ...rest } = prepared;
+	return {
+		...rest,
+		catalogUpdate: {
+			target: "defaults",
+			model
+		}
+	};
 }
 function prepareImageGenerationSetup(config, agentIdRaw, input) {
 	const agentId = normalizeAgentId(agentIdRaw);
-	if (!config.agents.list.some((entry) => entry.enabled !== false && normalizeAgentId(entry.id) === agentId)) return {
+	if (!new AgentCatalogRepository().get(agentId)) return {
 		ok: false,
 		error: `Agent not found: ${agentId}`
 	};
-	return prepareImageGenerationConfig(config, input, (next, model) => {
-		const index = next.agents.list.findIndex((entry) => entry.enabled !== false && normalizeAgentId(entry.id) === agentId);
-		const entry = next.agents.list[index];
-		entry.models = {
-			...entry.models ?? {},
-			imageGeneration: model
-		};
-	});
+	const prepared = prepareImageGenerationConfig(config, input);
+	if (prepared.ok === false) return prepared;
+	const { model, ...rest } = prepared;
+	return {
+		...rest,
+		catalogUpdate: {
+			target: "agent",
+			agentId,
+			model
+		}
+	};
+}
+async function applyImageGenerationCatalogUpdate(update) {
+	const repository = new AgentCatalogRepository();
+	const service = new AgentCatalogService(repository);
+	if (update.target === "defaults") {
+		const defaults = repository.getSettings().defaults;
+		service.updateDefaults({
+			...defaults,
+			models: {
+				...defaults.models,
+				imageGeneration: update.model
+			}
+		});
+		return;
+	}
+	const agent = repository.get(update.agentId);
+	if (!agent) throw new Error(`Agent not found: ${update.agentId}`);
+	await service.update(update.agentId, { models: {
+		...agent.models ?? {},
+		imageGeneration: update.model
+	} });
 }
 async function verifyImageGenerationCredential(input) {
 	const apiKey = input.apiKey.trim();
@@ -174,4 +210,4 @@ async function verifyImageGenerationCredential(input) {
 	}
 }
 //#endregion
-export { getAgentImageGenerationConfig, getDefaultImageGenerationConfig, getImageGenerationCatalog, prepareDefaultImageGenerationSetup, prepareImageGenerationSetup, verifyImageGenerationCredential };
+export { applyImageGenerationCatalogUpdate, getAgentImageGenerationConfig, getDefaultImageGenerationConfig, getImageGenerationCatalog, prepareDefaultImageGenerationSetup, prepareImageGenerationSetup, verifyImageGenerationCredential };

package/dist/src/gateway/index.js

@@ -1,6 +1,6 @@
-import { GatewayLockError, acquireGatewayLock, init_lock } from "./lock.js";
 import { buildDefaultCorsOrigins, isAllInterfacesHost, isLoopbackHost, resolveEffectiveGatewayPort, resolveGatewayServiceListenPort } from "./host.js";
 import { defaultGatewayBindMode, isContainerEnvironment, resolveGatewayBindHost, resolveGatewayBindHostSync, resolveGatewayBindMode, resolveGatewayEffectiveHost } from "../config/gateway-bind.js";
+import { GatewayLockError, acquireGatewayLock } from "./lock.js";
 import { assertGatewayAuthConfigured, extractToken, resolveGatewayAuth, validateToken } from "./auth.js";
 import { resolveGatewayListenHost, resolveGatewayListenPlan } from "./listen.js";
 import { buckets } from "./rate-limit/buckets.js";
@@ -16,7 +16,4 @@ import { checkPortAvailable, forceFreePortAndWait, listPortListeners, parseLsofO
 import { apiError, apiOk } from "./protocol.js";
 import "./hono/index.js";
 import { assertSecureGatewayHttpUrl, assertSecureWebSocketUrl, isInsecurePrivateWsAllowed, isSecureWebSocketUrl } from "./ws-security.js";
-//#region src/gateway/index.ts
-init_lock();
-//#endregion
 export { GatewayLockError, GatewayServer, GatewayService, acquireGatewayLock, apiError, apiOk, assertGatewayAuthConfigured, assertGatewayRuntimeConfig, assertSecureGatewayHttpUrl, assertSecureWebSocketUrl, buckets, buildDefaultCorsOrigins, checkPortAvailable, createHonoApp, defaultGatewayBindMode, extractToken, forceFreePortAndWait, isAllInterfacesHost, isContainerEnvironment, isGatewayStrictSecurityEnabled, isInsecurePrivateWsAllowed, isLoopbackHost, isSecureWebSocketUrl, listPortListeners, parseLsofOutput, resolveEffectiveGatewayPort, resolveGatewayAuth, resolveGatewayBindHost, resolveGatewayBindHostSync, resolveGatewayBindMode, resolveGatewayEffectiveHost, resolveGatewayListenHost, resolveGatewayListenPlan, resolveGatewayServiceListenPort, restartGatewayProcessWithFreshPid, runGatewayLoop, validateToken };

package/dist/src/gateway/lock.js

@@ -1,14 +1,24 @@
-import { __esmMin } from "../../_virtual/_rolldown/runtime.js";
 import path from "node:path";
 import fs from "node:fs";
 import { createHash } from "node:crypto";
-import net from "node:net";
 import fs$1 from "node:fs/promises";
+import net from "node:net";
 import { homedir } from "os";
 //#region src/gateway/lock.ts
 /**
 * Gateway Lock - Prevents multiple gateway instances from running simultaneously
 */
+const DEFAULT_TIMEOUT_MS = 5e3;
+const DEFAULT_POLL_INTERVAL_MS = 100;
+const DEFAULT_STALE_MS = 3e4;
+const DEFAULT_PORT_PROBE_TIMEOUT_MS = 1e3;
+var GatewayLockError = class extends Error {
+	constructor(message, cause) {
+		super(message);
+		this.cause = cause;
+		this.name = "GatewayLockError";
+	}
+};
 function resolveLockDir() {
 	return path.join(homedir(), ".xopc", "locks");
 }
@@ -162,20 +172,5 @@ async function acquireGatewayLock(configPath, opts = {}) {
 	}
 	throw new GatewayLockError(`Gateway already running${lastPayload?.pid ? ` (pid ${lastPayload.pid})` : ""}; lock timeout after ${timeoutMs}ms`);
 }
-var DEFAULT_TIMEOUT_MS, DEFAULT_POLL_INTERVAL_MS, DEFAULT_STALE_MS, DEFAULT_PORT_PROBE_TIMEOUT_MS, GatewayLockError;
-var init_lock = __esmMin((() => {
-	DEFAULT_TIMEOUT_MS = 5e3;
-	DEFAULT_POLL_INTERVAL_MS = 100;
-	DEFAULT_STALE_MS = 3e4;
-	DEFAULT_PORT_PROBE_TIMEOUT_MS = 1e3;
-	GatewayLockError = class extends Error {
-		constructor(message, cause) {
-			super(message);
-			this.cause = cause;
-			this.name = "GatewayLockError";
-		}
-	};
-}));
 //#endregion
-init_lock();
-export { GatewayLockError, acquireGatewayLock, init_lock, isGatewayConfigLockedByAnotherProcessSync, resolveGatewayLockPath };
+export { GatewayLockError, acquireGatewayLock, isGatewayConfigLockedByAnotherProcessSync, resolveGatewayLockPath };

package/dist/src/gateway/memory-maintenance-automation-reconciler.js

@@ -1,4 +1,5 @@
-import { init_agent_scope, normalizeAgentId, resolveAgentWorkspaceDir, resolveDefaultAgentId } from "../agent/agent-scope.js";
+import { normalizeAgentId } from "../agent-catalog/id.js";
+import { init_agent_scope, resolveAgentWorkspaceDir, resolveDefaultAgentId } from "../agent/agent-scope.js";
 import { maintenanceInstruction, resolveMemoryMaintenanceSchedules } from "../memory-maintenance/schedule.js";
 import "../memory-maintenance/index.js";
 //#region src/gateway/memory-maintenance-automation-reconciler.ts
@@ -16,8 +17,8 @@ async function reconcileMemoryMaintenanceAutomations(input) {
 	};
 	const schedules = resolveMemoryMaintenanceSchedules(input.config);
 	const enabledIds = new Set(schedules.map((item) => item.automationId));
-	const agentId = normalizeAgentId(resolveDefaultAgentId(input.config));
-	const workingDirectory = resolveAgentWorkspaceDir(input.config, agentId);
+	const agentId = normalizeAgentId(resolveDefaultAgentId());
+	const workingDirectory = resolveAgentWorkspaceDir(agentId);
 	for (const id of AUTOMATION_IDS) {
 		if (enabledIds.has(id)) continue;
 		if ((await input.automationService.get(id))?.enabled) {

package/dist/src/gateway/run-loop.js

@@ -1,15 +1,14 @@
-import { acquireGatewayLock, init_lock } from "./lock.js";
+import { acquireGatewayLock } from "./lock.js";
 import { loadConfig } from "../config/loader.js";
+import { runBootstrapMigrationsSync } from "../migrations/runner.js";
 import "../config/index.js";
 import { isRestartEnabled } from "../config/commands.flags.js";
-import { runBootstrapMigrationsSync } from "../migrations/runner.js";
 import { restartGatewayProcessWithFreshPid } from "./respawn.js";
 import { consumeGatewayRestartIntentSync, consumeGatewaySigusr1RestartAuthorization, isGatewaySigusr1RestartExternallyAllowed, resetGatewayRestartStateForInProcessRestart, scheduleGatewaySigusr1Restart, setGatewaySigusr1RestartPolicy } from "../infra/restart.js";
 //#region src/gateway/run-loop.ts
 /**
 * Gateway Run Loop - Core run loop for gateway process management
 */
-init_lock();
 async function runGatewayLoop(opts) {
 	runBootstrapMigrationsSync(opts.configPath);
 	setGatewaySigusr1RestartPolicy({ allowExternal: isRestartEnabled(loadConfig(opts.configPath)) });

package/dist/src/gateway/security/gateway-scopes.js

@@ -1,7 +1,7 @@
+import { __esmMin } from "../../../_virtual/_rolldown/runtime.js";
 import { DEFAULT_BROWSER_EXTENSION_SCOPES, DEFAULT_MOBILE_SCOPES, GATEWAY_SCOPES, isGatewayScope } from "../../../packages/gateway-contract/src/gateway-scopes.js";
 import { init_src } from "../../../packages/gateway-contract/src/index.js";
 //#region src/gateway/security/gateway-scopes.ts
-init_src();
 function parseGatewayScopes(value) {
 	const parsed = JSON.parse(value);
 	if (!Array.isArray(parsed) || !parsed.every(isGatewayScope)) throw new Error("Stored device scopes are invalid");
@@ -40,5 +40,9 @@ function requiredGatewayScope(method, path) {
 function hasGatewayScope(granted, required) {
 	return granted.includes("gateway.admin") || granted.includes(required);
 }
+var init_gateway_scopes = __esmMin((() => {
+	init_src();
+}));
 //#endregion
-export { DEFAULT_BROWSER_EXTENSION_SCOPES, DEFAULT_MOBILE_SCOPES, GATEWAY_SCOPES, hasGatewayScope, isGatewayScope, parseGatewayScopes, requiredGatewayScope };
+init_gateway_scopes();
+export { DEFAULT_BROWSER_EXTENSION_SCOPES, DEFAULT_MOBILE_SCOPES, GATEWAY_SCOPES, hasGatewayScope, init_gateway_scopes, isGatewayScope, parseGatewayScopes, requiredGatewayScope };

package/dist/src/gateway/security/index.js

@@ -1,5 +1,5 @@
 import { DEFAULT_MOBILE_SCOPES, GATEWAY_SCOPES, isGatewayScope } from "../../../packages/gateway-contract/src/gateway-scopes.js";
-import { hasGatewayScope, parseGatewayScopes, requiredGatewayScope } from "./gateway-scopes.js";
+import { hasGatewayScope, init_gateway_scopes, parseGatewayScopes, requiredGatewayScope } from "./gateway-scopes.js";
 import { safeEqualSecret } from "./secret-equal.js";
 import { KNOWN_WEAK_GATEWAY_TOKEN_PLACEHOLDERS, assertGatewayAuthNotKnownWeak } from "./known-weak-secrets.js";
 import { auditGatewayConfig, collectGatewayConfigFindings, collectGatewaySecurityFindings, collectGatewayStartupGuardFindings } from "./audit.js";
@@ -9,4 +9,7 @@ import { checkBrowserOrigin } from "./origin-check.js";
 import { getGatewayPrincipal, setGatewayPrincipal } from "./gateway-principal.js";
 import { DEFAULT_GATEWAY_HTTP_TOOL_DENY, filterDangerousHttpTools, isDangerousHttpTool } from "./dangerous-tools.js";
 import { detectSuspiciousPatterns, wrapExternalContent, wrapWebContent } from "./external-content.js";
+//#region src/gateway/security/index.ts
+init_gateway_scopes();
+//#endregion
 export { DEFAULT_GATEWAY_HTTP_TOOL_DENY, DEFAULT_MOBILE_SCOPES, GATEWAY_SCOPES, KNOWN_WEAK_GATEWAY_TOKEN_PLACEHOLDERS, assertGatewayAuthNotKnownWeak, auditGatewayConfig, buildGatewayConsoleCspHeader, checkBrowserOrigin, collectGatewayConfigFindings, collectGatewaySecurityFindings, collectGatewayStartupGuardFindings, computeInlineScriptHashes, createPreauthConnectionBudget, detectSuspiciousPatterns, filterDangerousHttpTools, getGatewayPrincipal, getMaxPreauthConnectionsPerIp, hasGatewayScope, isDangerousHttpTool, isGatewayScope, parseGatewayScopes, requiredGatewayScope, safeEqualSecret, setGatewayPrincipal, wrapExternalContent, wrapWebContent };

package/dist/src/gateway/service/agent-runner.js

@@ -1,9 +1,9 @@
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
 import { listActiveSessionInputRuns } from "../../storage/sqlite/session-input-repository.js";
-import { createClarificationWait, getClarification, getClarificationSnapshot, resolveClarification, supersedeActiveClarification } from "../../storage/sqlite/clarification-wait-repository.js";
+import { createClarificationWait, getClarification, getClarificationSnapshot, init_clarification_wait_repository, resolveClarification, supersedeActiveClarification } from "../../storage/sqlite/clarification-wait-repository.js";
 import { init_connection_wait_repository, onConnectionWaitChanged } from "../../storage/sqlite/connection-wait-repository.js";
-import "../../storage/sqlite/index.js";
+import { init_sqlite } from "../../storage/sqlite/index.js";
 import { EphemeralClarificationWaiter } from "../ephemeral-clarification-waiter.js";
 import { runGatewayAgent } from "./run-gateway-agent.js";
 import { fitSourceContextsToBudget } from "../../agent/source-context/budget.js";
@@ -11,7 +11,9 @@ import { SessionInputCoordinator } from "./session-input-coordinator.js";
 import crypto from "node:crypto";
 //#region src/gateway/service/agent-runner.ts
 init_connection_wait_repository();
+init_clarification_wait_repository();
 init_logger();
+init_sqlite();
 /**
 * Owns gateway agent runs, durable clarification coordination, and the
 * lifecycle-bound clarification waiter used by ephemeral side chats.
@@ -87,7 +89,13 @@ var GatewayAgentRunner = class {
 					});
 				}
 				if (unique.size > MAX_TURN_CONTEXTS) throw new Error(`A message can reference at most ${MAX_TURN_CONTEXTS} sources`);
-				const contexts = await Promise.all([...unique.values()].map((ref) => opts.resolveTurnContext(ref, conversationId)));
+				const contexts = await Promise.all([...unique.values()].map(async (ref) => {
+					const context = await opts.resolveTurnContext(ref, conversationId);
+					return context && ref.refId ? {
+						...context,
+						refId: ref.refId
+					} : context;
+				}));
 				if (contexts.some((context) => context === null)) throw new Error("A referenced source is unavailable or has changed; select it again");
 				return fitSourceContextsToBudget(contexts.filter((context) => context !== null));
 			},

package/dist/src/gateway/service/app-context-access.js

@@ -1,6 +1,6 @@
 import { parseAppContextEnvelope } from "../../../packages/gateway-contract/src/app-context.js";
 import { init_src } from "../../../packages/gateway-contract/src/index.js";
-import { getDevice } from "../../storage/sqlite/device-access-repository.js";
+import { getDevice, init_device_access_repository } from "../../storage/sqlite/device-access-repository.js";
 import { CapabilityError } from "../../capabilities/runtime/errors.js";
 import { canonicalCapabilityJson } from "../../capabilities/runtime/dispatcher.js";
 import { isBrowserSessionActive } from "../../storage/sqlite/browser-session-repository.js";
@@ -8,6 +8,7 @@ import { appContextToAgentContext } from "../../agent/source-context/app-context
 import { createHmac, randomBytes } from "node:crypto";
 //#region src/gateway/service/app-context-access.ts
 init_src();
+init_device_access_repository();
 const authorizationEpochKey = randomBytes(32);
 function authRevision(auth) {
 	return createHmac("sha256", authorizationEpochKey).update(canonicalCapabilityJson(JSON.parse(JSON.stringify(auth)))).digest("hex");

package/dist/src/gateway/service/config-coordinator.d.ts

@@ -87,7 +87,6 @@ export declare class GatewayConfigCoordinator {
      */
     handleChannelsReload(newConfig: Config): Promise<void>;
     private handleModelsReload;
-    private handleAgentDefaultsReload;
     /**
      * Coalesces rapid saves so Telegram/Weixin do not stop/start repeatedly.
      * The persist path schedules the channel apply; the same coalescer absorbs

package/dist/src/gateway/service/config-coordinator.js

@@ -1,14 +1,13 @@
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
-import { loadConfig, saveConfig } from "../../config/loader.js";
 import { getModelRegistry } from "../../providers/model-registry.js";
 import { init_providers } from "../../providers/index.js";
 import { disposeAllSessionMcpRuntimes } from "../../agent/mcp/bundle-mcp-runtime.js";
 import { reloadImageGenerationProviders } from "../../agent/image/generation/provider-registry.js";
 import "../../agent/mcp/bundle-mcp-tools.js";
+import { loadConfig, saveConfig } from "../../config/loader.js";
 import { ConfigHotReloader } from "../../config/reload.js";
 import "../../config/index.js";
-import { validateComputerModelChanges } from "../../computer/model-config.js";
 import { computeBundledExtensionExtensionsPatch } from "../../extensions/bundled-extension-activation.js";
 import { sanitizeTunnelConfig } from "../../tunnel/tunnel-config.js";
 //#region src/gateway/service/config-coordinator.ts
@@ -28,7 +27,6 @@ var GatewayConfigCoordinator = class {
 		if (this.configReloader) return;
 		this.configReloader = new ConfigHotReloader(this.opts.configPath, this.opts.getConfig(), {
 			onModelsReload: (newConfig) => this.handleModelsReload(newConfig),
-			onAgentDefaultsReload: (newConfig) => this.handleAgentDefaultsReload(newConfig),
 			onChannelsReload: (newConfig) => this.handleChannelsReload(newConfig),
 			onCronReload: (newConfig) => this.handleAutomationReload(newConfig),
 			onToolsReload: (newConfig) => this.handleToolsReload(newConfig),
@@ -72,7 +70,6 @@ var GatewayConfigCoordinator = class {
 	}
 	async saveConfig(config) {
 		try {
-			validateComputerModelChanges(config, this.opts.getConfig());
 			await this.writeConfigAndReloadFromDisk(config);
 			this.scheduleChannelPluginsAfterPersist();
 			return { saved: true };
@@ -97,7 +94,6 @@ var GatewayConfigCoordinator = class {
 				...this.opts.getConfig(),
 				...updates
 			};
-			validateComputerModelChanges(merged, this.opts.getConfig());
 			this.opts.setConfig(merged);
 			await this.writeConfigAndReloadFromDisk(merged);
 			this.scheduleChannelPluginsAfterPersist();
@@ -177,7 +173,7 @@ var GatewayConfigCoordinator = class {
 	async afterWeixinCredentialsPersisted() {
 		const next = loadConfig(this.opts.configPath);
 		this.opts.setConfig(next);
-		this.opts.getAgentService().applyAgentDefaultsFromConfig(next);
+		this.opts.getAgentService().applyRuntimeConfiguration(next);
 		this.configReloader?.syncCurrentConfig(next);
 		await this.handleChannelsReload(next);
 		const { weixinPlugin } = await import("../../channels/weixin/index.js");
@@ -187,7 +183,7 @@ var GatewayConfigCoordinator = class {
 	async afterFeishuCredentialsPersisted() {
 		const next = loadConfig(this.opts.configPath);
 		this.opts.setConfig(next);
-		this.opts.getAgentService().applyAgentDefaultsFromConfig(next);
+		this.opts.getAgentService().applyRuntimeConfiguration(next);
 		this.configReloader?.syncCurrentConfig(next);
 		await this.handleChannelsReload(next);
 		log.info("Feishu config applied after QR setup");
@@ -213,20 +209,6 @@ var GatewayConfigCoordinator = class {
 		this.opts.emit("config.reload", { section: "models" });
 		log.debug("Models config reloaded");
 	}
-	handleAgentDefaultsReload(newConfig) {
-		log.debug("Reloading agent defaults...");
-		this.opts.setConfig(newConfig);
-		this.opts.getAgentService().applyAgentDefaultsFromConfig(newConfig);
-		this.opts.reconcileMemoryMaintenanceAutomations().catch((err) => {
-			const em = err instanceof Error ? err.message : String(err);
-			log.warn({
-				err,
-				errorMessage: em
-			}, `Memory maintenance automation refresh failed: ${em}`);
-		});
-		this.opts.emit("config.reload", { section: "agents" });
-		log.debug("Agent defaults reloaded");
-	}
 	/**
 	* Coalesces rapid saves so Telegram/Weixin do not stop/start repeatedly.
 	* The persist path schedules the channel apply; the same coalescer absorbs
@@ -335,7 +317,7 @@ var GatewayConfigCoordinator = class {
 		const reloaded = loadConfig(this.opts.configPath);
 		this.opts.setConfig(reloaded);
 		if (sanitizeTunnelConfig(reloaded)) await saveConfig(reloaded, this.opts.configPath);
-		this.opts.getAgentService().applyAgentDefaultsFromConfig(reloaded);
+		this.opts.getAgentService().applyRuntimeConfiguration(reloaded);
 		await this.opts.reconcileMemoryMaintenanceAutomations().catch((err) => {
 			const em = err instanceof Error ? err.message : String(err);
 			log.warn({

package/dist/src/gateway/service/marketplace-service.d.ts

@@ -52,6 +52,7 @@ export interface SkillSourceInstallResultPayload extends SkillInstallResultPaylo
     contentHash: string;
 }
 export interface ExtensionMarketplacePackageDetailPayload extends MarketplacePackageDetail {
+    format?: 'native-extension' | 'agent-plugin';
     installability: {
         available: boolean;
         reason?: string;

package/dist/src/gateway/service/marketplace-service.js

@@ -1,13 +1,16 @@
 import { resolveStateDir } from "../../config/paths-state.js";
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
+import { init_agent_scope, resolveDefaultAgentId } from "../../agent/agent-scope.js";
 import { init_paths, resolveExtensionsDir } from "../../config/paths.js";
+import { getExtensionLockfileManager } from "../../extensions/lockfile.js";
+import { AgentPluginStore } from "../../extensions/agent-plugins/store.js";
 import { createSkillConfigManager } from "../../agent/skills/config.js";
 import { resolveWorkspaceSkillsDir, resolveWorkspaceSkillsLockPath } from "../../agent/skills/workspace-skills-dir.js";
 import { removeSkillsLockEntry } from "../../agent/skills/hub-lock.js";
 import { deleteManagedSkill, installSkillFromZip, listManagedSkillDirs } from "../../agent/skills/managed-store.js";
 import { normalizeSkillInstallTarget } from "../../agent/skills/install-target.js";
-import { getExtensionLockfileManager } from "../../extensions/lockfile.js";
+import { isAgentPluginArchive, withAgentPluginArchive } from "../../extensions/agent-plugins/sources.js";
 import { existsSync, rmSync } from "node:fs";
 //#region src/gateway/service/marketplace-service.ts
 /**
@@ -27,6 +30,7 @@ import { existsSync, rmSync } from "node:fs";
 * lives here too so callers (commands-skills routes) depend on a single narrow
 * service instead of the full `GatewayService`.
 */
+init_agent_scope();
 init_paths();
 init_logger();
 const log = createLogger("Gateway:Marketplace");
@@ -173,7 +177,7 @@ var GatewayMarketplaceService = class {
 		return listRegisteredProviders();
 	}
 	getDefaultAgentId() {
-		return this.opts.getConfig().agents?.default || "main";
+		return resolveDefaultAgentId();
 	}
 	getInstallAvailability(skillId) {
 		const snapshot = this.opts.getAgentService().getSkillCatalogSnapshot();
@@ -206,6 +210,18 @@ var GatewayMarketplaceService = class {
 			const resolved = await resolveExtensionZipDownloadUrl(base, packageName.trim());
 			const buffer = await downloadExtensionStoreZipBuffer(base, resolved.downloadUrl);
 			verifyStoreArtifactSha256(buffer, resolved.sha256);
+			if (isAgentPluginArchive(buffer)) {
+				const plan = withAgentPluginArchive(buffer, (path) => new AgentPluginStore().inspect(path));
+				return {
+					...detail,
+					format: "agent-plugin",
+					manifest: plan.manifest,
+					installability: {
+						available: true,
+						sha256: resolved.sha256
+					}
+				};
+			}
 			const { peekExtensionManifestFromStoreZip, peekExtensionPackageJsonFromStoreZip } = await import("../../extensions/install.js");
 			const manifest = peekExtensionManifestFromStoreZip(buffer);
 			const packageJson = peekExtensionPackageJsonFromStoreZip(buffer);

package/dist/src/gateway/service/run-gateway-agent.js

@@ -1,10 +1,10 @@
 import { inboundCorrelationMetadataFromAsyncLogContext, updateAsyncLogContext } from "../../utils/logger/context.js";
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
-import { isClarificationSuspended } from "../../storage/sqlite/clarification-wait-repository.js";
+import { init_clarification_wait_repository, isClarificationSuspended } from "../../storage/sqlite/clarification-wait-repository.js";
 import { updateInteractionStateFromMessage } from "../../storage/sqlite/interaction-state-repository.js";
 import { getConnectionResumeInput, init_connection_wait_repository, isConnectionSuspended } from "../../storage/sqlite/connection-wait-repository.js";
-import "../../storage/sqlite/index.js";
+import { init_sqlite } from "../../storage/sqlite/index.js";
 import { getConversationRouting } from "../../storage/sqlite/conversation-repository.js";
 import { init_session_key } from "../../routing/session-key.js";
 import { resolveExecutionContext } from "../../tasks/execution-context.js";
@@ -20,8 +20,10 @@ import { coalesceThinkingDeltas } from "../chat-stream/thinking-delta-coalescer.
 import crypto from "crypto";
 //#region src/gateway/service/run-gateway-agent.ts
 init_connection_wait_repository();
+init_clarification_wait_repository();
 init_logger();
 init_session_key();
+init_sqlite();
 const log = createLogger("Gateway:Service");
 /**
 * @param runOptions.signal — When set (e.g. client disconnect), aborts in-flight generation and persists partial output.

package/dist/src/gateway/service/session-input-coordinator.js

@@ -1,10 +1,10 @@
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
 import { SessionInstanceChangedError, cancelQueuedSessionInput, claimNextSessionInput, findSessionInput, finishSessionInputRun, getSessionInputById, getSessionInputState, init_session_input_repository, insertSessionInput, mutateQueuedSessionInput, recoverSessionInputState, setSessionInputStatus } from "../../storage/sqlite/session-input-repository.js";
-import { consumeClarificationResume, supersedeActiveClarification } from "../../storage/sqlite/clarification-wait-repository.js";
+import { consumeClarificationResume, init_clarification_wait_repository, supersedeActiveClarification } from "../../storage/sqlite/clarification-wait-repository.js";
 import { replaceLatestSessionTurnAndQueueInput, validateLatestSessionTurnTarget } from "../../storage/sqlite/session-turn-replace-repository.js";
 import { cancelConnectionObjective, consumeConnectionResume, init_connection_wait_repository, invalidateConnectionResumeIntent, publishConnectionWait } from "../../storage/sqlite/connection-wait-repository.js";
-import "../../storage/sqlite/index.js";
+import { init_sqlite } from "../../storage/sqlite/index.js";
 import { summarizeSourceContext } from "../../agent/source-context/types.js";
 import { deleteMediaUrisNoLongerReferenced } from "../../media/session-references.js";
 import { fitSourceContextsToBudget } from "../../agent/source-context/budget.js";
@@ -12,7 +12,9 @@ import crypto from "node:crypto";
 import { isDeepStrictEqual } from "node:util";
 //#region src/gateway/service/session-input-coordinator.ts
 init_connection_wait_repository();
+init_clarification_wait_repository();
 init_session_input_repository();
+init_sqlite();
 init_logger();
 const log = createLogger("SessionInputCoordinator");
 const MAX_PENDING_INPUTS = 10;
@@ -24,11 +26,11 @@ function sameAppContext(input, existing) {
 	return isDeepStrictEqual(identity(input.sourceContexts), identity(existing.contextSnapshots));
 }
 function contextRefsMatchFrozenSnapshot(requested, frozen) {
-	const editable = frozen?.filter((ref) => ref.kind === "note" || ref.kind === "task") ?? [];
+	const editable = frozen?.filter((ref) => ref.kind === "note" || ref.kind === "task" || ref.kind === "file" || ref.kind === "session" || ref.kind === "browser_tab" || ref.kind === "mcp_resource") ?? [];
 	if (requested.length !== editable.length) return false;
 	return requested.every((ref, index) => {
 		const snapshot = editable[index];
-		return snapshot?.kind === ref.kind && snapshot.sourceId === ref.sourceId && ref.expectedVersion === snapshot.version;
+		return snapshot?.kind === ref.kind && snapshot.sourceId === ref.sourceId && snapshot.refId === ref.refId && ref.expectedVersion === snapshot.version;
 	});
 }
 var SessionInputCoordinator = class {
@@ -311,7 +313,7 @@ var SessionInputCoordinator = class {
 			const existing = getSessionInputById(conversationId, id);
 			if (!contextRefsMatchFrozenSnapshot(body.contextRefs, existing?.contextRefs)) try {
 				const resolved = await this.deps.prepareContexts(conversationId, body.contextRefs) ?? [];
-				sourceContexts = fitSourceContextsToBudget([...existing?.contextSnapshots?.filter((source) => source.kind !== "note" && source.kind !== "task") ?? [], ...resolved]);
+				sourceContexts = fitSourceContextsToBudget([...existing?.contextSnapshots?.filter((source) => source.kind === "app_context" || source.kind === "browser_page") ?? [], ...resolved]);
 			} catch (err) {
 				log.warn({
 					err,

package/dist/src/gateway/service.d.ts

@@ -8,12 +8,13 @@ import { NotesService } from '../notes/index.js';
 import { WorkflowRunService } from '../workflows/service/workflow-run-service.js';
 import { ExtensionLoader } from '../extensions/index.js';
 import { SessionIndex } from '../session/index.js';
-import { EphemeralSideChatManager, SideChatRunService } from './side-chat/index.js';
+import { EphemeralSideChatManager, SideChatPromotionService, SideChatRunService } from './side-chat/index.js';
 import type { Config } from '../config/schema.js';
 import { type ResolvedGatewayAuth } from './auth.js';
 import { ModelCatalogSyncService } from '../providers/model-catalog-sync-service.js';
 import { ProjectService } from '../projects/index.js';
 import { LocalAppService } from '../local-apps/index.js';
+import { ChatPreviewService } from '../chat-previews/index.js';
 import { TaskConversationRepository } from '../tasks/task-conversation-repository.js';
 import { type BrowserAutomationService } from '../browser/automations/index.js';
 import { GatewaySessionsApi } from './service/sessions-api.js';
@@ -28,6 +29,7 @@ import type { SceneAccess } from '../scenes/httpServices.js';
 import type { GatewayPrincipal } from './security/gateway-principal.js';
 import { type ProductLanguage } from '../voice/language-profile.js';
 import { EndpointToolRuntime } from '../endpoint-tools/index.js';
+import { HomeIntelligenceHost } from '../home-intelligence/host.js';
 export type { GatewayChannelStartupPhase1Metrics, GatewayChannelStartupPhase2Metrics, GatewayServiceConfig, } from './service/types.js';
 export declare class GatewayService {
     private serviceConfig;
@@ -42,6 +44,7 @@ export declare class GatewayService {
     private extensionLoader;
     private extensionMetadataSnapshot;
     private sceneHost;
+    private homeIntelligenceHost;
     private sessionIndex;
     private running;
     private startTime;
@@ -86,6 +89,7 @@ export declare class GatewayService {
     /** Process-local, non-persistent side conversations forked from durable sessions. */
     readonly sideChats: EphemeralSideChatManager;
     readonly sideChatRuns: SideChatRunService;
+    readonly sideChatPromotions: SideChatPromotionService;
     /**
      * Session CRUD / search / compaction / tag-archive-pin / stats — the gateway
      * REST surface for sessions. Routes should depend on this narrow service
@@ -107,12 +111,16 @@ export declare class GatewayService {
     readonly discussionSealer: DiscussionSealer;
     /** Local user-created apps, their coder projects, previews, and installs. */
     readonly localApps: LocalAppService;
+    /** Immutable, conversation-scoped UI previews that do not create projects. */
+    readonly chatPreviews: ChatPreviewService;
     get sceneAccess(): SceneAccess | undefined;
     constructor(serviceConfig?: GatewayServiceConfig);
     /** Lazy AgentService — constructed on first use or during `start()`. */
     get agentService(): AgentService;
     refreshActionTrustPolicy(): void;
     refreshUserProfileContext(): void;
+    /** Refresh long-lived runtime caches after an Agent catalog mutation. */
+    refreshAgentCatalog(): void;
     private ensureAgentService;
     private createTaskRunDispatcher;
     private createNotificationService;
@@ -304,6 +312,7 @@ export declare class GatewayService {
     invokeGatewayMethod(method: string, params: Record<string, unknown>): Promise<unknown>;
     get currentConfig(): Config;
     get currentWorkspacePath(): string;
+    get homeIntelligence(): HomeIntelligenceHost;
     get messageBusInstance(): MessageBus;
     /** Effective HTTP listen port (CLI `--port` override or config default). */
     getEffectiveListenPort(): number;