@xopcai/xopc 0.0.333 → 0.0.334

package/dist/browser-ext/dist/assets/{auth-DocRzRlS.js → auth-Cjj5SuoT.js}

@@ -5713,6 +5713,43 @@ class RealtimeClient {
   }
 }
 
+const MAX_BROWSER_CONTEXTS_PER_TURN = 2;
+const MAX_BROWSER_SELECTION_BYTES = 32 * 1024;
+const MAX_BROWSER_PAGE_TEXT_BYTES = 128 * 1024;
+const MAX_BROWSER_CONTEXT_BODY_BYTES = 256 * 1024;
+const utf8Bytes = (value) => new TextEncoder().encode(value).byteLength;
+const browserPageContextInputSchema = strictObject({
+  kind: literal("browser_page"),
+  sourceId: uuid(),
+  version: string().regex(/^[a-f0-9]{64}$/),
+  title: string().trim().min(1).max(512),
+  url: url(),
+  capturedAt: number().int().nonnegative(),
+  documentId: string().trim().min(1).max(256),
+  selection: string().optional(),
+  text: string().optional(),
+  truncated: boolean()
+}).superRefine((value, ctx) => {
+  const url = new URL(value.url);
+  if (!["http:", "https:"].includes(url.protocol) || url.username || url.password || url.hash) {
+    ctx.addIssue({ code: "custom", path: ["url"], message: "URL must be a sanitized HTTP(S) URL" });
+  }
+  if (!value.selection?.trim() && !value.text?.trim()) {
+    ctx.addIssue({ code: "custom", message: "A browser context must include selection or page text" });
+  }
+  if (value.selection && utf8Bytes(value.selection) > MAX_BROWSER_SELECTION_BYTES) {
+    ctx.addIssue({ code: "custom", path: ["selection"], message: "Selection is too large" });
+  }
+  if (value.text && utf8Bytes(value.text) > MAX_BROWSER_PAGE_TEXT_BYTES) {
+    ctx.addIssue({ code: "custom", path: ["text"], message: "Page text is too large" });
+  }
+});
+const browserPageContextsInputSchema = array(browserPageContextInputSchema).max(MAX_BROWSER_CONTEXTS_PER_TURN).superRefine((value, ctx) => {
+  if (utf8Bytes(JSON.stringify(value)) > MAX_BROWSER_CONTEXT_BODY_BYTES) {
+    ctx.addIssue({ code: "custom", message: "Browser contexts are too large" });
+  }
+});
+
 const DEVICE_PAIRING_VERSION = 3;
 const MOBILE_PAIRING_INVITATION_VERSION = 4;
 const BROWSER_PAIRING_INVITATION_VERSION = 1;
@@ -5819,43 +5856,6 @@ ${action}
 ${canonical(payload)}`;
 }
 
-const MAX_BROWSER_CONTEXTS_PER_TURN = 2;
-const MAX_BROWSER_SELECTION_BYTES = 32 * 1024;
-const MAX_BROWSER_PAGE_TEXT_BYTES = 128 * 1024;
-const MAX_BROWSER_CONTEXT_BODY_BYTES = 256 * 1024;
-const utf8Bytes = (value) => new TextEncoder().encode(value).byteLength;
-const browserPageContextInputSchema = strictObject({
-  kind: literal("browser_page"),
-  sourceId: uuid(),
-  version: string().regex(/^[a-f0-9]{64}$/),
-  title: string().trim().min(1).max(512),
-  url: url(),
-  capturedAt: number().int().nonnegative(),
-  documentId: string().trim().min(1).max(256),
-  selection: string().optional(),
-  text: string().optional(),
-  truncated: boolean()
-}).superRefine((value, ctx) => {
-  const url = new URL(value.url);
-  if (!["http:", "https:"].includes(url.protocol) || url.username || url.password || url.hash) {
-    ctx.addIssue({ code: "custom", path: ["url"], message: "URL must be a sanitized HTTP(S) URL" });
-  }
-  if (!value.selection?.trim() && !value.text?.trim()) {
-    ctx.addIssue({ code: "custom", message: "A browser context must include selection or page text" });
-  }
-  if (value.selection && utf8Bytes(value.selection) > MAX_BROWSER_SELECTION_BYTES) {
-    ctx.addIssue({ code: "custom", path: ["selection"], message: "Selection is too large" });
-  }
-  if (value.text && utf8Bytes(value.text) > MAX_BROWSER_PAGE_TEXT_BYTES) {
-    ctx.addIssue({ code: "custom", path: ["text"], message: "Page text is too large" });
-  }
-});
-const browserPageContextsInputSchema = array(browserPageContextInputSchema).max(MAX_BROWSER_CONTEXTS_PER_TURN).superRefine((value, ctx) => {
-  if (utf8Bytes(JSON.stringify(value)) > MAX_BROWSER_CONTEXT_BODY_BYTES) {
-    ctx.addIssue({ code: "custom", message: "Browser contexts are too large" });
-  }
-});
-
 const LOCALE_STORAGE_KEY = "xopc.sidepanel.locale";
 const LOCALE_PATHS = {
   en: "_locales/en/messages.json",
@@ -6126,6 +6126,9 @@ const GATEWAY_REQUEST_TIMEOUT_MS = 8e3;
 const ACCESS_TOKEN_EXPIRY_MARGIN_MS = 3e4;
 const REFRESH_LOCK_NAME = "xopc.browser.auth-refresh";
 let refreshTask;
+function assertProfileIdentity(profile, expected) {
+  if (!profile || profile.gatewayId !== expected.gatewayId || profile.deviceId !== expected.deviceId || profile.gatewayPublicKey !== expected.gatewayPublicKey) throw new Error("Gateway identity changed");
+}
 async function browserPublicKeyThumbprint(jwk) {
   const canonical = JSON.stringify({ crv: jwk.crv, kty: jwk.kty, x: jwk.x, y: jwk.y });
   return encodeBase64Url(new Uint8Array(await crypto.subtle.digest(
@@ -6628,6 +6631,7 @@ async function refreshStoredProfile(options) {
         journal
       );
       const current = await readProfile();
+      assertProfileIdentity(current, profile);
       if (current && current.gatewayId === profile.gatewayId && current.refreshToken !== profile.refreshToken) {
         return current;
       }
@@ -6641,6 +6645,7 @@ async function refreshStoredProfile(options) {
       return next;
     } catch (cause) {
       const current = await readProfile();
+      assertProfileIdentity(current, profile);
       if (current && current.gatewayId === profile.gatewayId && current.refreshToken !== profile.refreshToken && current.accessTokenExpiresAt > Date.now()) return current;
       if (!isRefreshDenied(cause)) throw cause;
       const recovered = await recoverLocalProfile(profile.gatewayId);
@@ -6665,17 +6670,22 @@ async function getAccessProfile(options) {
     refreshTask = void 0;
   }
 }
-async function gatewayFetch(path, init = {}) {
+async function gatewayFetch(path, init = {}, expectedIdentity) {
   let profile = await getAccessProfile();
+  const identity = expectedIdentity ?? profile;
+  assertProfileIdentity(profile, identity);
   const request = () => {
     const headers = new Headers(init.headers);
     headers.set("Authorization", `Bearer ${profile.accessToken}`);
     return fetch(`${profile.gatewayUrl}${path}`, { ...init, headers });
   };
   let response = await request();
+  assertProfileIdentity(await readProfile(), identity);
   if (response.status !== 401) return response;
   profile = await getAccessProfile({ rejectedAccessToken: profile.accessToken });
+  assertProfileIdentity(profile, identity);
   response = await request();
+  assertProfileIdentity(await readProfile(), identity);
   return response;
 }
 async function registerBrowserEndpoint() {
@@ -6741,4 +6751,4 @@ async function revokeAndForgetProfile() {
   }
 }
 
-export { ENDPOINT_PROTOCOL_VERSION as E, MAX_BROWSER_CONTEXTS_PER_TURN as M, PENDING_CONTEXT_KEY as P, REALTIME_PROTOCOL_VERSION as R, TAB_BINDING_PREFIX as T, RealtimeClient as a, activeTabId as b, browserPageContextsInputSchema as c, cancelPendingBrowserPairing as d, canonicalJson as e, captureTabWithPermission as f, createBrowserEndpointHello as g, currentTabDescriptor as h, discoverLocalGateway as i, endpointToolContentSchema as j, extensionLocale as k, gatewayFetch as l, getAccessProfile as m, loadExtensionLocalePreference as n, openDatabase as o, pairGateway as p, readProfile as q, readPendingBrowserPairing as r, registerBrowserEndpoint as s, revokeAndForgetProfile as t, runWithTabSiteAccess as u, saveExtensionLocalePreference as v, setAutoConnectEnabled as w, t as x };
+export { runWithTabSiteAccess as A, saveExtensionLocalePreference as B, setAutoConnectEnabled as C, strictObject as D, ENDPOINT_PROTOCOL_VERSION as E, string as F, t as G, MAX_BROWSER_CONTEXTS_PER_TURN as M, PENDING_CONTEXT_KEY as P, REALTIME_PROTOCOL_VERSION as R, TAB_BINDING_PREFIX as T, _enum as _, RealtimeClient as a, activeTabId as b, array as c, boolean as d, browserPageContextsInputSchema as e, cancelPendingBrowserPairing as f, canonicalJson as g, captureTabWithPermission as h, createBrowserEndpointHello as i, currentTabDescriptor as j, discoverLocalGateway as k, discriminatedUnion as l, endpointToolContentSchema as m, extensionLocale as n, gatewayFetch as o, getAccessProfile as p, literal as q, loadExtensionLocalePreference as r, number as s, object as t, openDatabase as u, pairGateway as v, readPendingBrowserPairing as w, readProfile as x, registerBrowserEndpoint as y, revokeAndForgetProfile as z };

package/dist/browser-ext/dist/background.js

@@ -1,4 +1,4 @@
-import { j as endpointToolContentSchema, E as ENDPOINT_PROTOCOL_VERSION, e as canonicalJson, T as TAB_BINDING_PREFIX, f as captureTabWithPermission, P as PENDING_CONTEXT_KEY, x as t, q as readProfile, s as registerBrowserEndpoint, m as getAccessProfile, a as RealtimeClient, g as createBrowserEndpointHello, l as gatewayFetch, R as REALTIME_PROTOCOL_VERSION } from './assets/auth-DocRzRlS.js';
+import { m as endpointToolContentSchema, E as ENDPOINT_PROTOCOL_VERSION, g as canonicalJson, T as TAB_BINDING_PREFIX, h as captureTabWithPermission, P as PENDING_CONTEXT_KEY, G as t, x as readProfile, y as registerBrowserEndpoint, p as getAccessProfile, a as RealtimeClient, i as createBrowserEndpointHello, o as gatewayFetch, R as REALTIME_PROTOCOL_VERSION } from './assets/auth-Cjj5SuoT.js';
 
 const BROWSER_EXTENSION_PROTOCOL_VERSION = 5;
 const BROWSER_CONTROL_ENDPOINT_TOOL_NAME = "browser.control";

package/dist/browser-ext/dist/sidepanel.html

@@ -5,7 +5,7 @@
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
     <title>xopc</title>
     <script type="module" crossorigin src="./sidepanel.js"></script>
-    <link rel="modulepreload" crossorigin href="./assets/auth-DocRzRlS.js">
+    <link rel="modulepreload" crossorigin href="./assets/auth-Cjj5SuoT.js">
     <link rel="stylesheet" crossorigin href="./assets/sidepanel-DD6GEMvc.css">
   </head>
   <body>

package/dist/browser-ext/dist/sidepanel.js

@@ -1,4 +1,101 @@
-import { x as t, M as MAX_BROWSER_CONTEXTS_PER_TURN, c as browserPageContextsInputSchema, l as gatewayFetch, k as extensionLocale, o as openDatabase, a as RealtimeClient, R as REALTIME_PROTOCOL_VERSION, b as activeTabId, h as currentTabDescriptor, T as TAB_BINDING_PREFIX, m as getAccessProfile, u as runWithTabSiteAccess, P as PENDING_CONTEXT_KEY, f as captureTabWithPermission, p as pairGateway, w as setAutoConnectEnabled, r as readPendingBrowserPairing, q as readProfile, i as discoverLocalGateway, v as saveExtensionLocalePreference, t as revokeAndForgetProfile, d as cancelPendingBrowserPairing, n as loadExtensionLocalePreference } from './assets/auth-DocRzRlS.js';
+import { D as strictObject, s as number, d as boolean, F as string, c as array, _ as _enum, q as literal, t as object, l as discriminatedUnion, e as browserPageContextsInputSchema, G as t, M as MAX_BROWSER_CONTEXTS_PER_TURN, o as gatewayFetch, n as extensionLocale, u as openDatabase, a as RealtimeClient, R as REALTIME_PROTOCOL_VERSION, b as activeTabId, j as currentTabDescriptor, T as TAB_BINDING_PREFIX, p as getAccessProfile, x as readProfile, A as runWithTabSiteAccess, P as PENDING_CONTEXT_KEY, h as captureTabWithPermission, v as pairGateway, C as setAutoConnectEnabled, w as readPendingBrowserPairing, k as discoverLocalGateway, B as saveExtensionLocalePreference, z as revokeAndForgetProfile, f as cancelPendingBrowserPairing, r as loadExtensionLocalePreference } from './assets/auth-Cjj5SuoT.js';
+
+const AppContextResourceSchema = strictObject({
+  kind: _enum(["note", "task", "project", "scene", "local_app"]),
+  id: string().min(1).max(512),
+  revision: string().min(1).max(128)
+});
+const AppContextEnvelopeSchema = strictObject({
+  version: literal(1),
+  clientInstanceId: string().uuid(),
+  tabId: string().uuid(),
+  sequence: number().int().nonnegative().max(Number.MAX_SAFE_INTEGER),
+  surface: _enum(["web", "electron", "mobile"]),
+  resourceRefs: array(AppContextResourceSchema).max(20),
+  selection: strictObject({ text: string().max(16e3), draft: boolean().default(false) }).optional(),
+  capturedAt: number().int().nonnegative().max(Number.MAX_SAFE_INTEGER)
+});
+object({
+  snapshot: AppContextEnvelopeSchema,
+  resources: array(object({
+    reference: AppContextResourceSchema,
+    title: string(),
+    text: string().max(16e3),
+    truncated: boolean()
+  })).max(20),
+  selectionTrust: literal("user-supplied")
+});
+
+const sessionCreationSchema = strictObject({
+  agentId: string().trim().min(1),
+  projectId: string().trim().min(1).nullable(),
+  execution: strictObject({
+    mode: _enum(["local_checkout", "managed_worktree"]),
+    baseRef: string().trim().min(1).optional()
+  }).nullable(),
+  temporary: boolean(),
+  model: string().trim().min(1),
+  thinkingLevel: string().min(1)
+}).refine((value) => value.projectId !== null || value.execution === null, {
+  message: "An execution environment requires a project",
+  path: ["execution"]
+});
+const attachmentSchema = strictObject({
+  id: string().optional(),
+  type: string().min(1),
+  mimeType: string().optional(),
+  data: string().optional(),
+  uri: string().optional(),
+  name: string().optional(),
+  size: number().nonnegative().optional(),
+  workspaceRelativePath: string().optional(),
+  durationSeconds: number().nonnegative().optional()
+});
+const sessionInputContentSchema = strictObject({
+  content: string(),
+  attachments: array(attachmentSchema).optional(),
+  contextRefs: array(strictObject({
+    kind: _enum(["note", "task", "file", "session", "browser_tab", "mcp_resource"]),
+    sourceId: string().trim().min(1),
+    refId: string().regex(/^[A-Za-z0-9_-]{1,64}$/).optional(),
+    expectedVersion: string().optional()
+  })).max(5).optional(),
+  browserContexts: browserPageContextsInputSchema.optional(),
+  appContext: AppContextEnvelopeSchema.optional()
+});
+const originSchema = discriminatedUnion("type", [
+  strictObject({ type: literal("endpoint"), endpointId: string().min(1), token: string().min(1) }),
+  strictObject({ type: literal("system"), source: literal("cli") })
+]);
+const sessionInputCommandSchema = discriminatedUnion("kind", [
+  strictObject({
+    kind: literal("start"),
+    clientMessageId: string().min(1).max(128),
+    creation: sessionCreationSchema,
+    input: sessionInputContentSchema,
+    origin: originSchema
+  }),
+  strictObject({
+    kind: literal("append"),
+    clientMessageId: string().min(1).max(128),
+    expectedTranscriptId: string().min(1).max(128),
+    configVersion: number().int().nonnegative(),
+    delivery: _enum(["next", "steer"]),
+    input: sessionInputContentSchema,
+    origin: originSchema
+  })
+]);
+strictObject({
+  commandId: string().min(1).max(128),
+  creation: sessionCreationSchema,
+  purpose: _enum(["voice", "session_resources"])
+});
+object({
+  operationId: string(),
+  revision: number().int(),
+  state: _enum(["preparing", "ready", "preparation_failed"]),
+  lastError: string().nullable()
+});
 
 const OTHER_ACTIVITY = {
   category: "other",
@@ -18566,6 +18663,33 @@ class GatewayRequestError extends Error {
   }
   status;
 }
+async function deliveryScope(conversationId, expected) {
+  if (!expected) throw new Error(t("errorProfileNotLoaded"));
+  const profile = await readProfile();
+  if (!profile) throw new Error(t("errorEndpointNotReady"));
+  if (profile.gatewayId !== expected.gatewayId || profile.deviceId !== expected.deviceId || profile.gatewayPublicKey !== expected.gatewayPublicKey) throw new Error(t("errorChatChanged"));
+  const draftKey = `creation:${profile.gatewayId}:${profile.deviceId}:${conversationId}`;
+  return {
+    identity: profile,
+    draftKey,
+    inputKey: `input:${draftKey}`,
+    async assertCurrent() {
+      const current = await readProfile();
+      if (!current || current.gatewayId !== profile.gatewayId || current.deviceId !== profile.deviceId || current.gatewayPublicKey !== profile.gatewayPublicKey) throw new Error(t("errorChatChanged"));
+    }
+  };
+}
+async function draftStorageKey(conversationId) {
+  const profile = await readProfile();
+  if (!profile) throw new Error(t("errorEndpointNotReady"));
+  return `creation:${profile.gatewayId}:${profile.deviceId}:${conversationId}`;
+}
+async function readDraft$1(conversationId) {
+  return readBrowserOutbox(await draftStorageKey(conversationId));
+}
+async function inputStorageKey(conversationId) {
+  return `input:${await draftStorageKey(conversationId)}`;
+}
 async function json(response) {
   const raw = await response.text();
   let body;
@@ -18587,7 +18711,7 @@ async function json(response) {
   return body;
 }
 function isRetryableDeliveryError(cause) {
-  return !(cause instanceof GatewayRequestError) || cause.status === 408 || cause.status === 429 || cause.status >= 500;
+  return !(cause instanceof GatewayRequestError) || cause.status >= 200 && cause.status < 300 || cause.status === 408 || cause.status === 429 || cause.status >= 500;
 }
 function activityDetail(config, fallback = "on") {
   const detail = config.activityDetail && typeof config.activityDetail === "object" ? config.activityDetail : void 0;
@@ -18626,6 +18750,7 @@ class BrowserChatClient {
   sendingInput = false;
   lastOutboxRecoveryAt = 0;
   sessionsRequest = 0;
+  defaultModelId;
   inputsRequest = 0;
   endpointBinding;
   endpointBindingTask;
@@ -18761,6 +18886,7 @@ class BrowserChatClient {
     const conversationId = this.snapshot.conversationId;
     const endpointId = this.turnClaim?.endpointId;
     if (!conversationId || !endpointId) return;
+    if (await readDraft$1(conversationId)) return;
     const desired = `${conversationId}
 ${endpointId}`;
     if (this.endpointBinding === desired) return;
@@ -18806,13 +18932,20 @@ ${endpointId}`;
     if (requestId === this.sessionsRequest) this.update({ sessions });
   }
   async createSession() {
-    const response = await json(await gatewayFetch("/api/sessions", {
-      method: "POST",
-      headers: { "Content-Type": "application/json" },
-      body: JSON.stringify({ channel: "webchat", createdSurface: "browser_extension" })
-    }));
-    await this.loadSessions();
-    await this.openSession(response.session.key);
+    const conversationId = crypto.randomUUID();
+    const scope = await deliveryScope(conversationId, this.profileIdentity);
+    const model = this.snapshot.models.find((candidate) => candidate.id === this.defaultModelId);
+    const creation = {
+      agentId: "main",
+      projectId: null,
+      execution: null,
+      temporary: false,
+      model: model?.id ?? "",
+      thinkingLevel: model?.thinking?.initialValue ?? "off"
+    };
+    await writeBrowserOutbox(scope.draftKey, creation);
+    await scope.assertCurrent();
+    await this.openSession(conversationId);
   }
   async openSession(conversationId) {
     if (this.runTopic) this.realtime?.unsubscribe(this.runTopic);
@@ -18839,6 +18972,13 @@ ${endpointId}`;
       await chrome.storage.session.set({ [`${TAB_SESSION_PREFIX}${tabId}`]: conversationId });
     }
     try {
+      const draft = await readDraft$1(conversationId);
+      if (draft) {
+        this.update({ modelConfig: { model: draft.model, thinkingLevel: draft.thinkingLevel, fixedModel: false, activityDetail: "on" } });
+        this.update({ pendingDelivery: Boolean(await readBrowserOutbox(await inputStorageKey(conversationId))) });
+        if (this.snapshot.endpointReady) await this.recoverOutbox();
+        return;
+      }
       await Promise.all([
         this.reloadMessages(),
         this.reloadModelConfig(),
@@ -18855,7 +18995,7 @@ ${endpointId}`;
       if (run.payload?.active && run.payload.runId) await this.followRun(run.payload.runId);
       await this.reloadBrowserApproval();
       if (this.snapshot.conversationId !== conversationId) return;
-      this.update({ pendingDelivery: Boolean(await readBrowserOutbox(conversationId)) });
+      this.update({ pendingDelivery: Boolean(await readBrowserOutbox(await inputStorageKey(conversationId))) });
       if (this.snapshot.endpointReady) await this.recoverOutbox();
     } catch (cause) {
       if (this.snapshot.conversationId !== conversationId) return;
@@ -18870,6 +19010,18 @@ ${endpointId}`;
   get currentConversationId() {
     return this.snapshot.conversationId;
   }
+  async acceptReceipt(conversationId, clientMessageId, result, scope) {
+    const payload = result.payload;
+    if (payload.receipt.conversationId !== conversationId || payload.receipt.clientMessageId !== clientMessageId || payload.receipt.transcriptId !== payload.session.transcriptId) {
+      throw new Error(t("errorChatChanged"));
+    }
+    await scope.assertCurrent();
+    await deleteBrowserOutbox(scope.draftKey);
+    await scope.assertCurrent();
+    if (this.snapshot.conversationId === conversationId) {
+      this.update({ transcriptId: payload.receipt.transcriptId, modelConfig: payload.agentConfig });
+    }
+  }
   async send(content, browserContexts = [], attachments = []) {
     if (this.sendingInput) throw new Error(t("errorWaitQueuedMessage"));
     this.sendingInput = true;
@@ -18888,26 +19040,36 @@ ${endpointId}`;
     }
     if (!this.turnClaim) throw new Error(t("errorEndpointNotReady"));
     const conversationId = this.snapshot.conversationId;
-    await this.bindSessionEndpoint();
+    const scope = await deliveryScope(conversationId, this.profileIdentity);
+    const draft = await readBrowserOutbox(scope.draftKey);
+    if (!draft) await this.bindSessionEndpoint();
+    await scope.assertCurrent();
     if (this.snapshot.conversationId !== conversationId) throw new Error(t("errorChatChanged"));
     const clientMessageId = crypto.randomUUID();
-    const request = {
+    const input = {
       content: text,
-      clientMessageId,
-      delivery: "next",
-      expectedTranscriptId: this.snapshot.transcriptId,
-      ...this.snapshot.modelConfig?.fixedModel ? { configVersion: this.snapshot.modelConfig.configVersion } : {},
-      origin: { type: "endpoint", endpointId: this.turnClaim.endpointId, token: this.turnClaim.token },
       ...browserContexts.length ? { browserContexts } : {},
       ...attachments.length ? { attachments } : {}
     };
+    const origin = { type: "endpoint", endpointId: this.turnClaim.endpointId, token: this.turnClaim.token };
+    const request = sessionInputCommandSchema.parse(draft ? { kind: "start", clientMessageId, creation: draft, input, origin } : {
+      kind: "append",
+      clientMessageId,
+      expectedTranscriptId: this.snapshot.transcriptId,
+      configVersion: this.snapshot.modelConfig?.configVersion,
+      delivery: "next",
+      input,
+      origin
+    });
     const previousMessages = this.snapshot.messages;
     let outboxStored = false;
     let deliveryAccepted = false;
     this.update({ submitting: true, pendingDelivery: false });
     try {
-      await writeBrowserOutbox(conversationId, request);
+      const { origin: _origin, ...durable } = request;
+      await writeBrowserOutbox(scope.inputKey, durable);
       outboxStored = true;
+      await scope.assertCurrent();
       this.update({
         messages: this.snapshot.runId ? this.snapshot.messages : [...this.snapshot.messages, {
           id: clientMessageId,
@@ -18930,18 +19092,26 @@ ${endpointId}`;
           method: "POST",
           headers: { "Content-Type": "application/json" },
           body: JSON.stringify(request)
-        })
+        }, scope.identity)
       );
+      await this.acceptReceipt(conversationId, clientMessageId, response, scope);
       deliveryAccepted = true;
-      await deleteBrowserOutbox(conversationId);
+      await deleteBrowserOutbox(scope.inputKey);
       outboxStored = false;
+      await scope.assertCurrent();
       if (this.snapshot.conversationId !== conversationId) return "sent";
-      const runId = response.payload.state.inputs?.find((input) => input.clientMessageId === clientMessageId)?.runId ?? response.payload.state.activeRunId ?? await this.waitForRun(conversationId, clientMessageId);
+      if (draft) await this.bindSessionEndpoint();
+      const runId = response.payload.inputState.inputs?.find((input2) => input2.clientMessageId === clientMessageId)?.runId ?? response.payload.inputState.activeRunId ?? await this.waitForRun(conversationId, clientMessageId);
       if (this.snapshot.conversationId !== conversationId) return "sent";
       if (runId) await this.followRun(runId);
       else await this.reloadMessages();
       return "sent";
     } catch (cause) {
+      try {
+        await scope.assertCurrent();
+      } catch {
+        return deliveryAccepted ? "sent" : "queued";
+      }
       if (deliveryAccepted) {
         if (this.snapshot.conversationId === conversationId) {
           this.update({
@@ -18957,19 +19127,23 @@ ${endpointId}`;
         }
         return "queued";
       }
-      if (outboxStored) await deleteBrowserOutbox(conversationId);
+      if (outboxStored) await deleteBrowserOutbox(scope.inputKey);
       if (this.snapshot.conversationId === conversationId) this.update({ messages: previousMessages });
       throw cause;
     } finally {
-      if (this.snapshot.conversationId === conversationId) this.update({ submitting: false });
+      const current = await scope.assertCurrent().then(() => true, () => false);
+      if (current && this.snapshot.conversationId === conversationId) this.update({ submitting: false });
     }
   }
   async recoverOutbox() {
     const conversationId = this.snapshot.conversationId;
     if (!conversationId || !this.turnClaim || this.recoveringOutbox) return;
     if (Date.now() - this.lastOutboxRecoveryAt < 3e3) return;
-    const pending = await readBrowserOutbox(conversationId);
-    if (!pending?.clientMessageId || typeof pending.content !== "string") return;
+    const scope = await deliveryScope(conversationId, this.profileIdentity);
+    const pending = await readBrowserOutbox(scope.inputKey);
+    await scope.assertCurrent();
+    if (this.snapshot.conversationId !== conversationId || !this.turnClaim) return;
+    if (!pending?.clientMessageId || typeof pending.input.content !== "string") return;
     this.recoveringOutbox = true;
     this.lastOutboxRecoveryAt = Date.now();
     this.update({ pendingDelivery: true });
@@ -18983,16 +19157,24 @@ ${endpointId}`;
         method: "POST",
         headers: { "Content-Type": "application/json" },
         body: JSON.stringify(request)
-      }));
+      }, scope.identity));
+      await this.acceptReceipt(conversationId, request.clientMessageId, response, scope);
       deliveryAccepted = true;
-      await deleteBrowserOutbox(conversationId);
+      await deleteBrowserOutbox(scope.inputKey);
+      await scope.assertCurrent();
       if (this.snapshot.conversationId !== conversationId) return;
+      if (request.kind === "start") await this.bindSessionEndpoint();
       this.update({ pendingDelivery: false, error: void 0 });
-      const runId = response.payload.state.inputs?.find((input) => input.clientMessageId === request.clientMessageId)?.runId ?? response.payload.state.activeRunId ?? await this.waitForRun(conversationId, request.clientMessageId);
+      const runId = response.payload.inputState.inputs?.find((input) => input.clientMessageId === request.clientMessageId)?.runId ?? response.payload.inputState.activeRunId ?? await this.waitForRun(conversationId, request.clientMessageId);
       if (this.snapshot.conversationId !== conversationId) return;
       if (runId) await this.followRun(runId);
       else await this.reloadMessages();
     } catch (cause) {
+      try {
+        await scope.assertCurrent();
+      } catch {
+        return;
+      }
       if (this.snapshot.conversationId === conversationId) {
         if (deliveryAccepted) {
           this.update({
@@ -19002,7 +19184,7 @@ ${endpointId}`;
         } else if (isRetryableDeliveryError(cause)) {
           this.update({ pendingDelivery: true, error: void 0 });
         } else {
-          await deleteBrowserOutbox(conversationId);
+          await deleteBrowserOutbox(scope.inputKey);
           this.update({
             pendingDelivery: false,
             messages: this.snapshot.messages.filter((message) => message.id !== pending.clientMessageId),
@@ -19078,7 +19260,7 @@ ${endpointId}`;
     const current = this.snapshot.modelConfig;
     if (!conversationId || !current) return;
     const selected = this.snapshot.models.find((candidate) => candidate.id === model);
-    const thinkingLevel = selected?.thinking?.options?.includes(current.thinkingLevel) ? current.thinkingLevel : selected?.thinking?.default;
+    const thinkingLevel = selected?.thinking?.options?.includes(current.thinkingLevel) ? current.thinkingLevel : selected?.thinking?.initialValue;
     await this.patchModelConfig({ model, thinkingLevel });
   }
   async updateThinking(thinkingLevel) {
@@ -19223,7 +19405,7 @@ ${endpointId}`;
     this.update({ messages, transcriptId: session?.transcriptId });
   }
   async loadModels() {
-    const result = await json(await gatewayFetch("/api/models"));
+    const result = await json(await gatewayFetch("/api/models?agentId=main", {}, this.profileIdentity));
     const models = (result.payload?.models ?? []).flatMap((value) => {
       if (!value || typeof value !== "object") return [];
       const model = value;
@@ -19236,16 +19418,22 @@ ${endpointId}`;
           thinking: {
             mode: thinking.mode,
             ...Array.isArray(thinking.options) ? { options: thinking.options.filter((option) => typeof option === "string") } : {},
-            ...typeof thinking.default === "string" ? { default: thinking.default } : {}
+            ...typeof thinking.initialValue === "string" ? { initialValue: thinking.initialValue } : {}
           }
         } : {}
       }];
     });
+    this.defaultModelId = result.payload?.defaultId;
     this.update({ models });
   }
   async reloadModelConfig() {
     const conversationId = this.snapshot.conversationId;
     if (!conversationId) return;
+    const draft = await readDraft$1(conversationId);
+    if (draft) {
+      this.update({ modelConfig: { model: draft.model, thinkingLevel: draft.thinkingLevel, fixedModel: false, activityDetail: "on" } });
+      return;
+    }
     const result = await json(await gatewayFetch(
       `/api/sessions/${encodeURIComponent(conversationId)}/agent-config`
     ));
@@ -19266,6 +19454,14 @@ ${endpointId}`;
     const conversationId = this.snapshot.conversationId;
     const current = this.snapshot.modelConfig;
     if (!conversationId || !current) return;
+    const draft = await readDraft$1(conversationId);
+    if (draft) {
+      if (await readBrowserOutbox(await inputStorageKey(conversationId))) throw new Error(t("errorWaitQueuedMessage"));
+      const creation = { ...draft, ...patch };
+      await writeBrowserOutbox(await draftStorageKey(conversationId), creation);
+      this.update({ modelConfig: { ...current, model: creation.model, thinkingLevel: creation.thinkingLevel } });
+      return;
+    }
     const result = await json(await gatewayFetch(
       `/api/sessions/${encodeURIComponent(conversationId)}/agent-config`,
       {
@@ -19290,6 +19486,7 @@ ${endpointId}`;
   async reloadClarification() {
     const conversationId = this.snapshot.conversationId;
     if (!conversationId) return;
+    if (await readDraft$1(conversationId)) return;
     const result = await json(await gatewayFetch(
       `/api/sessions/${encodeURIComponent(conversationId)}/clarification`
     ));
@@ -19354,8 +19551,15 @@ ${endpointId}`;
     return profile;
   }
   profileUrl;
+  profileIdentity;
   async prepare() {
-    this.profileUrl = (await getAccessProfile()).gatewayUrl;
+    const profile = await getAccessProfile();
+    this.profileUrl = profile.gatewayUrl;
+    this.profileIdentity = {
+      gatewayId: profile.gatewayId,
+      deviceId: profile.deviceId,
+      gatewayPublicKey: profile.gatewayPublicKey
+    };
   }
   update(patch) {
     this.snapshot = { ...this.snapshot, ...patch };
@@ -28120,10 +28324,10 @@ function formatFileSize(size) {
   if (size < 1024 * 1024) return `${Math.round(size / 1024)} KB`;
   return `${(size / (1024 * 1024)).toFixed(1)} MB`;
 }
-function ChatPanel({ gatewayId }) {
+function ChatPanel({ gatewayId, deviceId }) {
   const client = reactExports.useMemo(() => new BrowserChatClient(), []);
   const [snapshot, setSnapshot] = reactExports.useState(EMPTY);
-  const keyForSession = (conversationId) => JSON.stringify([gatewayId, conversationId ?? "new"]);
+  const keyForSession = (conversationId) => JSON.stringify([gatewayId, deviceId, conversationId ?? "new"]);
   const draftKey = keyForSession(snapshot.conversationId);
   const { store: drafts, draft: composerDraft, ready: draftReady, update: updateDraft } = useComposerDrafts(draftKey, (cause) => setError(String(cause)));
   const draft = composerDraft.text;
@@ -29320,7 +29524,7 @@ function SidePanelApp({ initialLocale, initialTheme }) {
           invitation ? /* @__PURE__ */ jsxRuntimeExports.jsx("button", { onClick: () => void cancelPairing(), disabled: state === "pairing", children: t("cancelPairing") }) : null
         ] })
       ] }) : null
-    ] }) : /* @__PURE__ */ jsxRuntimeExports.jsx(ChatPanel, { gatewayId: profile.gatewayId }, `${profile.gatewayId}:${profile.gatewayUrl}`)
+    ] }) : /* @__PURE__ */ jsxRuntimeExports.jsx(ChatPanel, { gatewayId: profile.gatewayId, deviceId: profile.deviceId }, JSON.stringify([profile.gatewayId, profile.gatewayUrl, profile.deviceId]))
   ] });
 }
 

package/dist/browser-ext/manifest.json

@@ -3,7 +3,7 @@
   "minimum_chrome_version": "120",
   "default_locale": "en",
   "name": "__MSG_appName__",
-  "version": "0.0.333",
+  "version": "0.0.334",
   "description": "__MSG_appDescription__",
   "key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnpr4vpLC/nmvy+wiOWk3SWlp2nEZkFijfk8ivGw7StNZgCK90nOMvwhdEtlkk3GOWDvdVnq8HxCsM3UNQ8FnGUyerpH1FJXqXuradxeHf8ZxFjiQU/mIWfnKbUuONWQORon3/pigyoXoK/VUXgg0Wbm/rbVwsS0bv+25R6m+mZgBspOLeKuoH7ivhL+48WV6POtMBsFPZweY26477EM7ukh+56Ff5ENevB8ymxBBn7qK5ZoeZd2a23U8ioX5TsHfe6fnrjitPWjIxD8G0NoKQxcaa/Mo+xs+T6UiLKxP0wjz5bm7jB5H+CXtkRJqzBWUB0h+RSLJckzZfA8BAJrRwIDAQAB",
   "permissions": [

package/dist/extensions/telegram/xopc.extension.json

@@ -2,7 +2,7 @@
   "id": "telegram",
   "name": "Telegram Channel",
   "description": "Bundled Telegram Bot channel (private workspace sources; ships inside @xopcai/xopc dist/)",
-  "version": "0.0.333",
+  "version": "0.0.334",
   "kind": "channel",
   "main": "src/index.js",
   "channels": [