@xopcai/xopc 0.0.331 → 0.0.333

package/dist/src/connectors/connection-recovery-service.js

@@ -16,8 +16,8 @@ import { getInstalledConnectorDefinition, listConnectorInstances } from "./insta
 import { describeCliAction, verifyCliConnection } from "./cli/runtime.js";
 import { connectorPrincipalForSession } from "./principal.js";
 import { capabilityActions, isToolInputSchema, missingConnectionCapabilities } from "./connection-capabilities.js";
-import { resolveConnectionCandidate } from "./connection-candidates.js";
 import { installConnector } from "./install.js";
+import { resolveConnectionCandidate } from "./connection-candidates.js";
 import { persistConfigMutation } from "../config/config-mutation.js";
 import { HostPluginMcpRecovery } from "./plugin-mcp-recovery.js";
 import { randomUUID } from "node:crypto";
@@ -108,6 +108,32 @@ var ConnectionRecoveryService = class {
 					...availability.reason || need.capabilityError ? { reason: availability.reason ?? need.capabilityError } : {}
 				};
 			}
+			if (need.target.type === "store-connector") {
+				const target = need.target;
+				const instance = listConnectorInstances(this.deps.getConfig()).find((item) => item.connectorId === target.connectorId);
+				const definition = instance ? getInstalledConnectorDefinition(this.deps.getConfig(), instance.instanceId) : void 0;
+				const digestMatches = definition?.provenance?.packageName === target.packageName && definition.provenance.sha256 === target.sha256 && definition.version === target.version;
+				const unhealthy = instance && (!instance.enabled || [
+					"failed",
+					"disabled",
+					"not_configured",
+					"unauthorized",
+					"degraded"
+				].includes(instance.status) || [
+					"missing",
+					"expired",
+					"unauthorized"
+				].includes(instance.authStatus ?? ""));
+				const phase = !instance ? "install" : !digestMatches || unhealthy ? "blocked" : "ready";
+				return {
+					...need,
+					...instance ? { connectionId: instance.instanceId } : {},
+					phase,
+					accounts: [],
+					alternatives: [],
+					...phase === "blocked" ? { reason: !digestMatches ? "The installed Connector does not match the reviewed Store package." : "Connector setup is incomplete. Review its settings and try again." } : {}
+				};
+			}
 			const id = need.target.connectorId;
 			const instance = listConnectorInstances(this.deps.getConfig()).find((instance) => instance.connectorId === id);
 			const installation = getConnectorInstallation(`${id}-${wait.principalId}`);
@@ -193,7 +219,7 @@ var ConnectionRecoveryService = class {
 			}))
 		}, verified).needs;
 		return Promise.all(wait.needs.map(async (need) => {
-			if (need.target.type === "plugin-mcp") return need;
+			if (need.target.type === "plugin-mcp" || need.target.type === "store-connector") return need;
 			if (views.find((view) => view.key === need.key)?.phase !== "ready") return {
 				...need,
 				capabilityError: void 0
@@ -370,6 +396,50 @@ var ConnectionRecoveryService = class {
 					intent: void 0
 				}, "skipped");
 				this.deps.drain(conversationId);
+			} else if (action.action === "install_complete") {
+				const need = wait.needs.find((need) => need.key === action.needKey);
+				if (!need || need.target.type !== "store-connector" || !action.instanceId) throw new Error("Unknown Store Connector installation.");
+				const instance = listConnectorInstances(this.deps.getConfig()).find((item) => item.instanceId === action.instanceId);
+				const definition = instance ? getInstalledConnectorDefinition(this.deps.getConfig(), instance.instanceId) : void 0;
+				if (!instance || instance.connectorId !== need.target.connectorId || !instance.enabled || definition?.provenance?.packageName !== need.target.packageName || definition.provenance.sha256 !== need.target.sha256 || definition.version !== need.target.version) throw new Error("The installed Connector does not match the reviewed package.");
+				if ([
+					"failed",
+					"disabled",
+					"not_configured",
+					"unauthorized",
+					"degraded"
+				].includes(instance.status) || [
+					"missing",
+					"expired",
+					"unauthorized"
+				].includes(instance.authStatus ?? "")) throw new Error("Connector setup is incomplete. Finish setup before continuing.");
+				wait = updateConnectionWait({
+					...wait,
+					needs: wait.needs.map((item) => item.key === need.key ? {
+						...item,
+						connectionId: instance.instanceId,
+						unavailable: false,
+						capabilityError: void 0
+					} : item),
+					intent: {
+						objectiveRevision: wait.objectiveRevision,
+						validUntil: Date.now() + INTENT_TTL
+					}
+				}, wait.version);
+				const view = this.view(wait);
+				if (view.phase === "ready") {
+					queueConnectionResolution({
+						...wait,
+						needs: view.needs.map(({ phase: _phase, accounts: _accounts, reason: _reason, alternatives: _alternatives, ...item }) => item)
+					}, "continued");
+					log.info({
+						conversationId,
+						waitId: wait.id,
+						objectiveRevision: wait.objectiveRevision,
+						phase: "resume_queued"
+					}, "Connector installation continuation queued");
+					this.deps.drain(conversationId);
+				}
 			} else if (action.action === "connect") {
 				const need = wait.needs.find((need) => need.key === action.needKey);
 				if (!need) throw new Error("Unknown connection requirement.");
@@ -498,6 +568,18 @@ var ConnectionRecoveryService = class {
 				if (!latest || latest.version !== wait.version || latest.status !== "open") throw new Error("WAIT_CHANGED");
 				let needs = wait.needs.map((need) => {
 					if (need.target.type === "plugin-mcp") return need;
+					if (need.target.type === "store-connector") {
+						const selected = this.view({
+							...wait,
+							needs
+						}).needs.find((item) => item.key === need.key);
+						return selected?.phase === "ready" ? {
+							...need,
+							connectionId: selected.connectionId,
+							unavailable: false,
+							capabilityError: void 0
+						} : need;
+					}
 					const id = need.target.connectorId;
 					const authorized = fresh.find((item) => item.providerConnectionId === need.attempt?.connectionId && item.status === "active" && item.connectorId === id && (!need.accountId || item.accountId === need.accountId));
 					return authorized ? {
@@ -540,7 +622,10 @@ var ConnectionRecoveryService = class {
 					needs
 				}, verified);
 				if (getConnectionWait(wait.id)?.version !== wait.version) throw new Error("WAIT_CHANGED");
-				const explicitContinue = action.action === "continue" || action.action === "confirm_scope";
+				const readyWithoutReview = this.view({
+					...wait,
+					needs
+				}, verified).phase === "ready";
 				wait = updateConnectionWait({
 					...wait,
 					needs,
@@ -548,7 +633,7 @@ var ConnectionRecoveryService = class {
 						scopeConfirmedAt: Date.now(),
 						reviewRequired: false
 					} : {},
-					...needs.some((need) => need.capabilityError) ? { intent: void 0 } : explicitContinue ? { intent: {
+					...needs.some((need) => need.capabilityError) ? { intent: void 0 } : readyWithoutReview || action.action === "confirm_scope" ? { intent: {
 						objectiveRevision: wait.objectiveRevision,
 						validUntil: Date.now() + INTENT_TTL
 					} } : {}

package/dist/src/discussions/analyzer.js

@@ -188,7 +188,7 @@ async function analyzeDiscussion(input) {
 			maxTokens: 8e3,
 			temperature: .1,
 			signal: input.signal
-		})).content)));
+		}, void 0, { operation: "discussion.analyze" })).content)));
 		validateDiscussionEvidence(organization, new Set(batch.map((segment) => segment.sequence)));
 		organization.chapters = [{
 			title: organization.title,
@@ -234,7 +234,7 @@ async function analyzeDiscussion(input) {
 			maxTokens: 2e3,
 			temperature: 0,
 			signal: input.signal
-		});
+		}, void 0, { operation: "discussion.analyze" });
 		const parsed = MeetingChangesSchema.parse(parseJsonObject(extractText(response.content)));
 		if (parsed.changes.some((change) => change.fromId === change.toId || !earlier.some((item) => item.id === change.fromId) || !later.some((item) => item.id === change.toId))) throw new Error("Invalid meeting change evidence");
 		getSqliteDatabase().prepare("INSERT OR REPLACE INTO discussion_analysis_chunks (discussion_id,input_hash,result_json) VALUES (?,?,?)").run(input.discussionId, cacheKey, JSON.stringify(parsed));
@@ -260,7 +260,7 @@ async function analyzeDiscussion(input) {
 				maxTokens: 2e3,
 				temperature: .1,
 				signal: input.signal
-			});
+			}, void 0, { operation: "discussion.analyze" });
 			return z.object({
 				title: z.string().min(1).max(200),
 				summary: z.string().min(1).max(2e3)
@@ -295,7 +295,7 @@ async function enrichLiveDiscussion(input) {
 		maxTokens: 400,
 		temperature: .1,
 		signal: input.signal
-	});
+	}, void 0, { operation: "discussion.analyze" });
 	return {
 		modelRef,
 		...LiveEnrichmentSchema.parse(parseJsonObject(extractText(response.content)))

package/dist/src/extensions/agent-plugins/validation.js

@@ -1,8 +1,8 @@
 import { dirname, isAbsolute, join, relative, resolve } from "node:path";
 import { existsSync, lstatSync, readFileSync, readdirSync, realpathSync, statSync } from "node:fs";
 import { z } from "zod";
-import yaml from "js-yaml";
 import { validateHeaderName, validateHeaderValue } from "node:http";
+import yaml from "js-yaml";
 //#region src/extensions/agent-plugins/validation.ts
 const PLUGIN_SCHEMA = "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json";
 const MCP_SCHEMA = "https://agent-plugins.org/schemas/1.0.0/mcp.schema.json";

package/dist/src/extensions/update.js

@@ -1,8 +1,8 @@
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
 import { init_paths, resolveBundledExtensionsDir, resolveExtensionsDir } from "../config/paths.js";
-import { computeExtensionDirectoryIntegrity, getExtensionLockfileManager } from "./lockfile.js";
 import { downloadExtensionStoreZipBuffer, resolveExtensionZipDownloadUrl, resolveExtensionsStoreBaseUrl, verifyStoreArtifactSha256 } from "../agent/skills/marketplace/adapters/store/store-api-client.js";
+import { computeExtensionDirectoryIntegrity, getExtensionLockfileManager } from "./lockfile.js";
 import { loadConfig } from "../config/loader.js";
 import { commitStagedExtensionInstall, finalizeStagedExtensionInstall, rollbackStagedExtensionInstall, stageExtensionNpm, stageExtensionStoreZip } from "./install-transaction.js";
 import { findExtension } from "./marketplace.js";

package/dist/src/gateway/agent-builtin-tools.d.ts

@@ -277,4 +277,4 @@ export declare const GATEWAY_BUILTIN_TOOLS: readonly [{
         readonly zh: "使用已验证的参数执行选定的外部工具。";
     };
 }];
-export declare const GATEWAY_BUILTIN_TOOL_IDS: ("automation" | "workflow" | "find" | "image" | "knowledge_search" | "knowledge_get" | "knowledge_write" | "user_context_search" | "user_context_get" | "user_context_update" | "web_search" | "web_fetch" | "browser_use" | "grep" | "session_search" | "read_file" | "list_dir" | "write_file" | "apply_patch" | "exec_command" | "update_plan" | "todo" | "clarify" | "xopc_tool_execute" | "computer_use" | "tool_manual" | "web_extract" | "image_generate" | "skills_list" | "skill_view" | "skill_manage" | "skills_marketplace_search" | "session_status" | "send_message" | "send_media" | "delegate_task" | "skill_install" | "text_to_speech" | "create_share" | "xopc_tool_search" | "xopc_tool_describe" | "read_media" | "memory_maintenance" | "execute_code" | "create_desktop_pet")[];
+export declare const GATEWAY_BUILTIN_TOOL_IDS: ("automation" | "workflow" | "find" | "image" | "knowledge_search" | "knowledge_get" | "knowledge_write" | "user_context_search" | "user_context_get" | "user_context_update" | "web_search" | "web_fetch" | "browser_use" | "grep" | "session_search" | "read_file" | "list_dir" | "write_file" | "apply_patch" | "exec_command" | "update_plan" | "todo" | "clarify" | "xopc_tool_execute" | "web_extract" | "image_generate" | "skills_list" | "skill_view" | "skill_manage" | "skills_marketplace_search" | "xopc_tool_search" | "xopc_tool_describe" | "send_message" | "send_media" | "read_media" | "create_share" | "session_status" | "memory_maintenance" | "computer_use" | "tool_manual" | "delegate_task" | "skill_install" | "text_to_speech" | "execute_code" | "create_desktop_pet")[];

package/dist/src/gateway/agents-admin.js

@@ -1,11 +1,11 @@
 import { normalizeAgentId, validateAgentIdForNewAgent } from "../agent-catalog/id.js";
 import { AgentCatalogRepository, init_repository } from "../agent-catalog/repository.js";
 import { init_agent_scope, listAgentEntries, resolveAgentProfileDir, resolveAgentWorkspaceDir, resolveDefaultAgentId, resolveUserPath } from "../agent/agent-scope.js";
+import { resolveEffectiveAgentProfile } from "../config/agent-profile.js";
 import { WORKSPACE_FILES, init_paths } from "../config/paths.js";
 import { AGENT_PROFILE_MARKDOWN_SYSTEM_FILES, REQUIRED_AGENT_PROFILE_MARKDOWN_FILE_SET } from "../agent/context/workspace.js";
-import { AgentCatalogService } from "../agent-catalog/service.js";
-import { resolveEffectiveAgentProfile } from "../config/agent-profile.js";
 import { isPathUnderWorkspace, resolveWorkspaceSafePath } from "./workspace-editor-path.js";
+import { AgentCatalogService } from "../agent-catalog/service.js";
 import { GATEWAY_BUILTIN_TOOL_IDS } from "./agent-builtin-tools.js";
 import { join, resolve } from "node:path";
 import { mkdir, readFile, realpath, stat, unlink, writeFile } from "node:fs/promises";

package/dist/src/gateway/file-path-classifier.js

@@ -1,7 +1,7 @@
 import { init_paths_state, resolveStateDir } from "../config/paths-state.js";
 import { init_agent_scope, resolveAgentProfileDir } from "../agent/agent-scope.js";
-import { init_paths, resolveConfigPath, resolveSkillsDir } from "../config/paths.js";
 import { extractProfileAgentId } from "../config/agent-profile.js";
+import { init_paths, resolveConfigPath, resolveSkillsDir } from "../config/paths.js";
 import { isBareProfileMarkdownFileName, resolveProfileMarkdownPathIfBareName } from "../agent/tools/tool-paths.js";
 import { isPathUnderWorkspace, resolveWorkspaceSafePath } from "./workspace-editor-path.js";
 import { basename, isAbsolute, resolve } from "node:path";

package/dist/src/gateway/home-intelligence-automation-reconciler.d.ts

@@ -0,0 +1,3 @@
+import type { AutomationService } from '../automations/index.js';
+export declare const HOME_ADVISOR_REFRESH_AUTOMATION_ID = "system-home-advisor-refresh";
+export declare function reconcileHomeIntelligenceAutomation(automationService: AutomationService): Promise<'created' | 'updated' | 'unchanged'>;

package/dist/src/gateway/home-intelligence-automation-reconciler.js

@@ -0,0 +1,52 @@
+//#region src/gateway/home-intelligence-automation-reconciler.ts
+const HOME_ADVISOR_REFRESH_AUTOMATION_ID = "system-home-advisor-refresh";
+async function reconcileHomeIntelligenceAutomation(automationService) {
+	const current = await automationService.get(HOME_ADVISOR_REFRESH_AUTOMATION_ID);
+	const managed = {
+		name: "Refresh Home AI suggestions",
+		description: "Re-evaluate Home suggestions from current workspace context.",
+		action: {
+			kind: "system",
+			capability: "home.advisor.refresh"
+		},
+		safety: { mode: "auto_apply" },
+		conversationMode: "new_session",
+		delivery: {
+			notificationPolicy: "none",
+			destinations: []
+		},
+		reliability: { disableAfterConsecutiveFailures: 3 },
+		management: {
+			owner: "home-intelligence",
+			editable: ["enabled", "trigger"],
+			runnable: true,
+			deletable: false
+		}
+	};
+	if (!current) {
+		await automationService.create({
+			id: HOME_ADVISOR_REFRESH_AUTOMATION_ID,
+			enabled: false,
+			trigger: {
+				kind: "schedule",
+				schedule: {
+					kind: "interval",
+					everyMs: 30 * 6e4,
+					anchorMs: Date.now()
+				}
+			},
+			...managed
+		});
+		return "created";
+	}
+	const patch = {
+		...managed,
+		enabled: current.enabled,
+		trigger: current.trigger
+	};
+	if (!Object.entries(patch).some(([key, value]) => JSON.stringify(current[key]) !== JSON.stringify(value))) return "unchanged";
+	await automationService.update(HOME_ADVISOR_REFRESH_AUTOMATION_ID, patch);
+	return "updated";
+}
+//#endregion
+export { HOME_ADVISOR_REFRESH_AUTOMATION_ID, reconcileHomeIntelligenceAutomation };

package/dist/src/gateway/hono/lib/config-payload.js

@@ -1,8 +1,8 @@
 import { normalizeAgentId } from "../../../agent-catalog/id.js";
 import { AgentCatalogRepository, init_repository } from "../../../agent-catalog/repository.js";
+import { ContextPlanningConfigSchema, KnowledgeMemoryConfigSchema, UserModelConfigSchema, init_config } from "../../../user-context/config.js";
 import { init_agent_scope, listAgentEntries, resolveDefaultAgentId } from "../../../agent/agent-scope.js";
 import { resolveModelsJsonPath } from "../../../config/paths.js";
-import { ContextPlanningConfigSchema, KnowledgeMemoryConfigSchema, UserModelConfigSchema, init_config } from "../../../user-context/config.js";
 import { init_models_json, loadModelsJson } from "../../../config/models-json.js";
 import { CredentialResolver, init_credentials } from "../../../auth/credentials.js";
 import { getProviderRegistry, init_plugin_registry } from "../../../providers/plugin-registry.js";

package/dist/src/gateway/hono/routes/capabilities.js

@@ -55,7 +55,7 @@ function registerCapabilityRoutes(authenticated, deps) {
 		try {
 			const { instance, plan } = await persistConfigMutation({
 				config,
-				mutate: () => installStoreConnector(config, c.req.param("name"), input, optionalVersion(body)),
+				mutate: () => installStoreConnector(config, c.req.param("name"), input, optionalVersion(body), typeof body.reviewHash === "string" ? body.reviewHash : void 0),
 				save: () => service.saveConfig(config)
 			});
 			return c.json({

package/dist/src/gateway/hono/routes/config-patch/misc.js

@@ -1,10 +1,10 @@
-import { BindingsSchema, init_binding_schema } from "../../../../routing/binding-schema.js";
-import { AgentCatalogService } from "../../../../agent-catalog/service.js";
 import { ComputerConfigSchema, init_config } from "../../../../computer/config.js";
-import { ContextPlanningConfigSchema, KnowledgeMemoryConfigSchema, UserContextConfigSchema, UserModelConfigSchema, init_config as init_config$1 } from "../../../../user-context/config.js";
+import { BindingsSchema, init_binding_schema } from "../../../../routing/binding-schema.js";
+import { ContextPlanningConfigSchema, HomeIntelligenceConfigSchema, KnowledgeMemoryConfigSchema, UserContextConfigSchema, UserModelConfigSchema, init_config as init_config$1 } from "../../../../user-context/config.js";
 import { BrowserConfigSchema, McpConfigSchema, VoiceConfigSchema, init_schema } from "../../../../config/schema.js";
 import { CredentialResolver, init_credentials } from "../../../../auth/credentials.js";
 import { canonicalizeConfiguredMcpServer } from "../../../../config/mcp-config-normalize.js";
+import { AgentCatalogService } from "../../../../agent-catalog/service.js";
 import { mergeGatewaySkillsMarketplacePatch, mergeSessionConfigPatch, mergeUpdateConfigPatch } from "../../../../config/web-patch.js";
 import { assertGatewayAuthConfigured, resolveGatewayAuth } from "../../../auth.js";
 import { isMaskedSecretPatchValue } from "../../lib/mask-secret-length.js";
@@ -37,7 +37,8 @@ async function applyMiscPatch(config, body) {
 			"preferences",
 			"userModel",
 			"knowledgeMemory",
-			"contextPlanning"
+			"contextPlanning",
+			"homeIntelligence"
 		].includes(key));
 		if (unknownKeys.length) return patchError(`Unknown userContext settings: ${unknownKeys.join(", ")}`);
 		if (userContextPatch.enabled !== void 0) {
@@ -111,6 +112,19 @@ async function applyMiscPatch(config, body) {
 				contextPlanning: parsed.data
 			};
 		}
+		if (userContextPatch.homeIntelligence !== void 0) {
+			const patch = userContextPatch.homeIntelligence;
+			if (typeof patch !== "object" || patch === null || Array.isArray(patch)) return patchError("userContext.homeIntelligence must be an object");
+			const parsed = HomeIntelligenceConfigSchema.safeParse({
+				...config.userContext.homeIntelligence,
+				...patch
+			});
+			if (!parsed.success) return patchError(parsed.error.issues.map((issue) => issue.message).join("; "));
+			config.userContext = {
+				...config.userContext,
+				homeIntelligence: parsed.data
+			};
+		}
 		const parsedUserContext = UserContextConfigSchema.safeParse(config.userContext);
 		if (!parsedUserContext.success) return patchError(parsedUserContext.error.issues.map((issue) => issue.message).join("; "));
 		config.userContext = parsedUserContext.data;

package/dist/src/gateway/hono/routes/connection-waits.js

@@ -6,9 +6,9 @@ const actionSchema = z.object({
 	expectedVersion: z.number().int().positive(),
 	idempotencyKey: z.string().min(1).max(200),
 	action: z.enum([
+		"install_complete",
 		"connect",
 		"check",
-		"continue",
 		"skip",
 		"cancel",
 		"select_account",
@@ -19,7 +19,8 @@ const actionSchema = z.object({
 	candidateRef: z.string().optional(),
 	needKey: z.string().optional(),
 	accountId: z.string().optional(),
-	callbackUrl: z.string().max(16384).optional()
+	callbackUrl: z.string().max(16384).optional(),
+	instanceId: z.string().optional()
 }).strict();
 function registerConnectionWaitRoutes(app, { service, strictRateLimitMiddleware }) {
 	app.get("/api/sessions/:conversationId/connection-wait", (c) => {

package/dist/src/gateway/hono/routes/home.js

@@ -16,7 +16,6 @@ function registerHomeRoutes(authenticated, deps) {
 	const home = new HomeQueryService(service, () => service.homeIntelligence.getAdvisor());
 	authenticated.get("/api/home", async (c) => {
 		const locale = c.req.query("locale");
-		service.homeIntelligence.requestRefresh("home_opened", void 0, locale);
 		return c.json(await home.getSnapshot(locale));
 	});
 	authenticated.get("/api/home/advisor/metrics", (c) => {

package/dist/src/gateway/hono/routes/lazy-bundles.js

@@ -238,7 +238,12 @@ const AUTHENTICATED_LAZY_ROUTE_BUNDLES = [
 	},
 	{
 		id: "automations",
-		match: (path) => startsWithAny(path, ["/api/automations", "/api/automation-runs"]),
+		match: (path) => startsWithAny(path, [
+			"/api/automations",
+			"/api/automation-runs",
+			"/api/automation-events",
+			"/api/automation-deliveries"
+		]),
 		load: async () => {
 			const { registerAutomationRoutes } = await import("../../../automations/api/routes.js");
 			return { register: registerAutomationRoutes };
@@ -284,6 +289,14 @@ const AUTHENTICATED_LAZY_ROUTE_BUNDLES = [
 			return { register: registerLogsRoutes };
 		}
 	},
+	{
+		id: "usage",
+		match: (path) => startsWithAny(path, ["/api/usage"]),
+		load: async () => {
+			const { registerUsageRoutes } = await import("./usage.js");
+			return { register: registerUsageRoutes };
+		}
+	},
 	{
 		id: "shares",
 		match: (path) => startsWithAny(path, ["/api/shares", "/api/hosted-publications"]) || /^\/api\/notes\/[^/]+\/hosted-publications(?:\/.*)?$/.test(path) || /^\/api\/sessions\/[^/]+\/(?:share-preview|shares|hosted-shares)(?:\/.*)?$/.test(path),

package/dist/src/gateway/hono/routes/notes.js

@@ -1,9 +1,9 @@
 import { NoteDeleteOutputSchema, NoteGetOutputSchema, ProductReadContracts } from "../../../../packages/gateway-contract/src/capabilities.js";
 import { init_src } from "../../../../packages/gateway-contract/src/index.js";
-import { CapabilityError } from "../../../capabilities/runtime/errors.js";
-import "../../../capabilities/runtime/dispatcher.js";
 import { init_session_key, resolveConversationId } from "../../../routing/session-key.js";
 import { agentExists, getDefaultAgentId, init_resolve_route } from "../../../routing/resolve-route.js";
+import { CapabilityError } from "../../../capabilities/runtime/errors.js";
+import "../../../capabilities/runtime/dispatcher.js";
 import { resolveGatewayEffectiveHost } from "../../../config/gateway-bind.js";
 import { getShareStore } from "../../../share/share-store.js";
 import { resolveShareUrl } from "../../../share/share-url.js";

package/dist/src/gateway/hono/routes/projects.js

@@ -7,12 +7,12 @@ import { loadTranscriptRowsForSession } from "../../../storage/sqlite/transcript
 import { init_sqlite } from "../../../storage/sqlite/index.js";
 import { ActivityService } from "../../../activity/service.js";
 import "../../../activity/index.js";
-import { CapabilityError } from "../../../capabilities/runtime/errors.js";
-import "../../../capabilities/runtime/dispatcher.js";
 import { resolveEffectiveAgentProfile } from "../../../config/agent-profile.js";
 import { TaskReadModelProjector } from "../../../tasks/task-read-model-projector.js";
 import { listKnowledgeItems, writeKnowledgeItem } from "../../../knowledge-memory/repository.js";
 import "../../../knowledge-memory/index.js";
+import { CapabilityError } from "../../../capabilities/runtime/errors.js";
+import "../../../capabilities/runtime/dispatcher.js";
 import { ProjectWorkspaceConflictError, ProjectWorkspaceMissingError } from "../../../projects/workspace-project.js";
 import { inferProjectExecutionMode, inferProjectKind } from "../../../projects/project-kind.js";
 import { ProjectDeletionBlockedError, ProjectWorkspaceInUseError } from "../../../projects/project-service.js";

package/dist/src/gateway/hono/routes/public-gateway.js

@@ -1,10 +1,11 @@
 import { PACKAGE_VERSION, init_package_version } from "../../../package-version.js";
 import { claimConnectorWebhookDelivery, completeConnectorWebhookDelivery, releaseConnectorWebhookDelivery } from "../../../storage/sqlite/connector-repository.js";
 import { init_sqlite } from "../../../storage/sqlite/index.js";
+import { resolveAutomationWebhookSecret } from "../../../automations/webhook-secrets.js";
 import { composioLogoResponse } from "../../../connectors/composio-logo.js";
 import { appendComposioTriggerEvent, applyComposioConnectionLifecycleEvent, normalizeComposioTriggerPayload, verifyComposioWebhook } from "../../../connectors/composio-triggers.js";
 import { serveStaticFile } from "../lib/static-ui.js";
-import { createHash } from "node:crypto";
+import { createHash, timingSafeEqual } from "node:crypto";
 //#region src/gateway/hono/routes/public-gateway.ts
 init_package_version();
 init_sqlite();
@@ -19,6 +20,9 @@ const PUBLIC_UI_ROOT_ASSETS = [
 	"pwa-512x512.png",
 	"site.webmanifest"
 ];
+function secretsEqual(actual, expected) {
+	return timingSafeEqual(createHash("sha256").update(actual).digest(), createHash("sha256").update(expected).digest());
+}
 function registerPublicGatewayRoutes(app, service) {
 	app.get("/health", (c) => {
 		return c.json(service.getHealth());
@@ -84,9 +88,16 @@ function registerPublicGatewayRoutes(app, service) {
 			if (inactiveConnectionId) service.setConnectorLearningPaused(inactiveConnectionId, true);
 			const event = await appendComposioTriggerEvent(service.currentConfig, archivedPayload);
 			if (normalized.toolkit) service.requestConnectorLearningForToolkit(normalized.toolkit);
-			const runs = await service.automationServiceInstance.triggerEvent({
+			const ingested = service.ingestAutomationEvent({
+				id: `connector:composio:${webhookId}`,
 				type: `connector.${normalized.trigger ?? normalized.type}`,
 				source: normalized.toolkit ? `composio:${normalized.toolkit}` : "composio",
+				subject: {
+					kind: "connector_event",
+					id: webhookId
+				},
+				dedupeKey: webhookId,
+				trust: "connector",
 				payload: {
 					...normalized.data,
 					connectorId: normalized.toolkit ? `composio-${normalized.toolkit}` : "composio",
@@ -98,7 +109,7 @@ function registerPublicGatewayRoutes(app, service) {
 				ok: true,
 				payload: {
 					eventId: event.id,
-					automationRuns: runs.length
+					automationDeliveries: ingested.deliveryCount
 				}
 			});
 		} catch (error) {
@@ -109,6 +120,85 @@ function registerPublicGatewayRoutes(app, service) {
 			}, 500);
 		}
 	});
+	app.post("/api/automation-hooks/:automationId", async (c) => {
+		const automationId = c.req.param("automationId");
+		const automation = await service.automationServiceInstance.get(automationId);
+		if (!automation || !automation.enabled || automation.trigger.kind !== "webhook") return c.json({
+			ok: false,
+			error: "Automation webhook not found."
+		}, 404);
+		const secretId = automation.trigger.secretId?.trim();
+		let expectedSecret;
+		try {
+			expectedSecret = secretId ? resolveAutomationWebhookSecret(secretId) : void 0;
+		} catch {
+			return c.json({
+				ok: false,
+				error: "Automation webhook secrets are misconfigured."
+			}, 503);
+		}
+		if (!expectedSecret) return c.json({
+			ok: false,
+			error: "Automation webhook secret is not configured."
+		}, 503);
+		const authorization = c.req.header("authorization")?.trim() ?? "";
+		const suppliedSecret = authorization.startsWith("Bearer ") ? authorization.slice(7).trim() : c.req.header("x-xopc-webhook-secret")?.trim() ?? "";
+		if (!suppliedSecret || !secretsEqual(suppliedSecret, expectedSecret)) return c.json({
+			ok: false,
+			error: "Invalid automation webhook secret."
+		}, 401);
+		const idempotencyKey = c.req.header("idempotency-key")?.trim();
+		if (!idempotencyKey || idempotencyKey.length > 200) return c.json({
+			ok: false,
+			error: "A valid Idempotency-Key header is required."
+		}, 400);
+		const declaredSize = Number(c.req.header("content-length") ?? 0);
+		if (Number.isFinite(declaredSize) && declaredSize > 256 * 1024) return c.json({
+			ok: false,
+			error: "Webhook payload is too large."
+		}, 413);
+		const rawBody = await c.req.text();
+		if (Buffer.byteLength(rawBody) > 256 * 1024) return c.json({
+			ok: false,
+			error: "Webhook payload is too large."
+		}, 413);
+		let payload;
+		try {
+			const parsed = rawBody ? JSON.parse(rawBody) : {};
+			if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) throw new Error("invalid payload");
+			payload = parsed;
+		} catch {
+			return c.json({
+				ok: false,
+				error: "Webhook payload must be a JSON object."
+			}, 400);
+		}
+		try {
+			const result = service.ingestAutomationEvent({
+				id: `webhook:${automationId}:${idempotencyKey}`,
+				type: "automation.webhook.received",
+				source: `webhook:${automationId}`,
+				subject: {
+					kind: "automation",
+					id: automationId
+				},
+				correlationId: c.req.header("x-correlation-id")?.trim() || void 0,
+				dedupeKey: idempotencyKey,
+				trust: "untrusted_webhook",
+				payload
+			}, { targetAutomationIds: [automationId] });
+			return c.json({
+				ok: true,
+				eventId: result.event.id,
+				duplicate: !result.created
+			}, result.created ? 202 : 200);
+		} catch {
+			return c.json({
+				ok: false,
+				error: "Automation webhook ingestion failed."
+			}, 500);
+		}
+	});
 	app.get("/api", (c) => {
 		return c.json({
 			service: "xopc-gateway",