@xopcai/xopc 0.0.350 → 0.0.352

package/README.md

@@ -167,7 +167,7 @@ Windows git install: `& ([scriptblock]::Create((irm https://xopc.ai/install.ps1)
 | **TUI** | `xopc` or `xopc tui` (remote: `xopc tui --url …`) | Full keyboard, streaming, fastest terminal path |
 | **CLI** | `xopc agent -i` / `xopc agent -m "…"` | Scripts and minimal TTY |
 | **Web** | `xopc gateway` → open console URL | Chat, settings, logs in the browser |
-| **Mobile** | [mobile app](./apps/mobile-expo) + QR gateway pairing ([mobile app](https://xopcai.github.io/xopc/mobile-app), [remote access](https://xopcai.github.io/xopc/remote-access)) | Chat, record notes, and capture ideas from iOS/Android while the agent keeps running on your computer |
+| **Mobile** | [native Android and iOS apps](./docs/design/release/mobile-build-release.md) + QR gateway pairing ([mobile app](https://xopcai.github.io/xopc/mobile-app), [remote access](https://xopcai.github.io/xopc/remote-access)) | Chat, record notes, and capture ideas from iOS/Android while the agent keeps running on your computer |
 | **Messengers** | `channels.*` + gateway | Telegram, WeChat, Feishu/Lark |
 
 ---
@@ -261,7 +261,7 @@ Read the [community guide](https://xopcai.github.io/xopc/community) and [Code of
 
 **How is this different from another chat UI?** — Chat is only one surface. xopc preserves understanding, long-term goals, projects, tasks, decisions, and run history so the same assistant can continue working across time and surfaces.
 
-**Can I use it from my phone or messengers?** — Yes. Pair the [mobile app](./apps/mobile-expo) by QR code, or configure Telegram, WeChat, or Feishu/Lark via the gateway.
+**Can I use it from my phone or messengers?** — Yes. Pair the [native mobile app](./docs/design/release/mobile-build-release.md) by QR code, or configure Telegram, WeChat, or Feishu/Lark via the gateway.
 
 **Have a question?** — Ask on [GitHub Discussions](https://github.com/xopcai/xopc/discussions/categories/q-a).
 

package/README.zh-CN.md

@@ -167,7 +167,7 @@ Windows 源码安装：`& ([scriptblock]::Create((irm https://xopc.ai/install.ps
 | **TUI** | `xopc` 或 `xopc tui`（远程：`xopc tui --url …`） | 全键盘、流式输出，最快终端路径 |
 | **CLI** | `xopc agent -i` / `xopc agent -m "…"` | 脚本、最小终端环境 |
 | **网页** | `xopc gateway` → 打开控制台地址 | 聊天、设置、日志 |
-| **手机** | [移动端 App](./apps/mobile-expo) + 网关扫码配对（[移动端 App](https://xopcai.github.io/xopc/zh/mobile-app)、[远程访问](https://xopcai.github.io/xopc/zh/remote-access)） | 在 iOS/Android 上继续对话，记录文字、语音、图片和附件；Agent 仍运行在你的电脑或本地环境里 |
+| **手机** | [原生 Android 与 iOS App](./docs/design/release/mobile-build-release.md) + 网关扫码配对（[移动端 App](https://xopcai.github.io/xopc/zh/mobile-app)、[远程访问](https://xopcai.github.io/xopc/zh/remote-access)） | 在 iOS/Android 上继续对话，记录文字、语音、图片和附件；Agent 仍运行在你的电脑或本地环境里 |
 | **即时通讯** | 配置 `channels.*` 并启动网关 | Telegram、微信、飞书/Lark |
 
 ---
@@ -261,7 +261,7 @@ xopc extensions dev ./my-extension
 
 **它和普通聊天 UI 有什么区别？** — 聊天只是入口。xopc 会把对你的理解、长期目标、项目、Task、决定和执行记录保留下来，让同一个助手可以跨越时间和入口继续工作。
 
-**能在手机或即时通讯里用吗？** — 可以。用 [移动端 App](./apps/mobile-expo) 扫码连接，或配置 Telegram、微信、飞书/Lark。
+**能在手机或即时通讯里用吗？** — 可以。用 [原生移动端 App](./docs/design/release/mobile-build-release.md) 扫码连接，或配置 Telegram、微信、飞书/Lark。
 
 **还有问题？** — 去 [GitHub Discussions](https://github.com/xopcai/xopc/discussions/categories/q-a) 提问。
 

package/dist/browser-ext/dist/sidepanel.js

@@ -55,7 +55,7 @@ const sessionInputContentSchema = strictObject({
   content: string(),
   attachments: array(attachmentSchema).optional(),
   contextRefs: array(strictObject({
-    kind: _enum(["note", "task", "file", "session", "browser_tab", "mcp_resource"]),
+    kind: _enum(["note", "task", "file", "session", "browser_tab", "mcp_resource", "user_assertion"]),
     sourceId: string().trim().min(1),
     refId: string().regex(/^[A-Za-z0-9_-]{1,64}$/).optional(),
     expectedVersion: string().optional()

package/dist/browser-ext/manifest.json

@@ -3,7 +3,7 @@
   "minimum_chrome_version": "120",
   "default_locale": "en",
   "name": "__MSG_appName__",
-  "version": "0.0.350",
+  "version": "0.0.352",
   "description": "__MSG_appDescription__",
   "key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnpr4vpLC/nmvy+wiOWk3SWlp2nEZkFijfk8ivGw7StNZgCK90nOMvwhdEtlkk3GOWDvdVnq8HxCsM3UNQ8FnGUyerpH1FJXqXuradxeHf8ZxFjiQU/mIWfnKbUuONWQORon3/pigyoXoK/VUXgg0Wbm/rbVwsS0bv+25R6m+mZgBspOLeKuoH7ivhL+48WV6POtMBsFPZweY26477EM7ukh+56Ff5ENevB8ymxBBn7qK5ZoeZd2a23U8ioX5TsHfe6fnrjitPWjIxD8G0NoKQxcaa/Mo+xs+T6UiLKxP0wjz5bm7jB5H+CXtkRJqzBWUB0h+RSLJckzZfA8BAJrRwIDAQAB",
   "permissions": [

package/dist/extensions/feishu/src/adapters/cli-login.js

@@ -1,6 +1,6 @@
 import { mergeDistinctSenderIds } from "../../../../src/channels/pairing/preseed-allow-from.js";
 import { beginAppRegistration, initAppRegistration, pollAppRegistration, printQrCode } from "../auth/app-registration.js";
-import fs from "node:fs";
+import fsSync from "node:fs";
 import { confirm, input, select } from "@inquirer/prompts";
 //#region extensions/feishu/src/adapters/cli-login.ts
 /**
@@ -11,14 +11,14 @@ import { confirm, input, select } from "@inquirer/prompts";
 */
 function loadConfigFromPath(configPath) {
 	try {
-		const raw = fs.readFileSync(configPath, "utf8");
+		const raw = fsSync.readFileSync(configPath, "utf8");
 		return JSON.parse(raw);
 	} catch {
 		return {};
 	}
 }
 function writeConfigToPath(configPath, config) {
-	fs.writeFileSync(configPath, JSON.stringify(config, null, 2) + "\n", "utf8");
+	fsSync.writeFileSync(configPath, JSON.stringify(config, null, 2) + "\n", "utf8");
 }
 function isFeishuConfigured(config) {
 	const feishu = config.channels?.feishu;

package/dist/extensions/feishu/src/outbound/media-load.js

@@ -1,6 +1,6 @@
-import { checkFileSafety } from "../../../../src/agent/prompt/safety.js";
 import { getMimeType } from "../../../../src/channels/media.js";
 import { getWorkspacePath } from "../../../../src/config/workspace-path-helpers.js";
+import { checkFileSafety } from "../../../../src/agent/prompt/safety.js";
 import path from "node:path";
 import { promises } from "node:fs";
 import { Readable } from "node:stream";

package/dist/extensions/telegram/src/inbound-processor.js

@@ -1,14 +1,14 @@
 import { createLogger } from "../../../src/utils/logger/index.js";
 import { init_logger } from "../../../src/utils/logger.js";
 import { resolveRoute } from "../../../src/routing/resolve-route.js";
-import { checkMentionInTranscription } from "../../../src/voice/stt/mention.js";
-import { normalizeTelegramCommandName, parseSlashCommand } from "../../../src/chat-commands/command-parse.js";
 import { answerClarificationTextFromChannel } from "../../../src/gateway/clarify-runtime.js";
 import { buildTelegramUpdateKey, telegramUpdateDedupe } from "./dedupe.js";
+import { normalizeTelegramCommandName, parseSlashCommand } from "../../../src/chat-commands/command-parse.js";
 import "../../../src/routing/index.js";
 import { resolveTelegramGroupContext } from "./group-config-resolver.js";
 import { buildTelegramConversationId } from "./conversation-id.js";
 import { resolveTelegramFocusedConversationId } from "./focus-handler.js";
+import { checkMentionInTranscription } from "../../../src/voice/stt/mention.js";
 //#region extensions/telegram/src/inbound-processor.ts
 init_logger();
 const log = createLogger("TelegramInboundProcessor");

package/dist/extensions/telegram/src/outbound-sender.js

@@ -1,10 +1,10 @@
 import { createLogger } from "../../../src/utils/logger/index.js";
 import { init_logger } from "../../../src/utils/logger.js";
-import { createRetryRunner, isRecoverableNetworkError } from "../../../src/infra/retry.js";
 import { buildSendOptions, parseDataUrl, resolveMediaMethod } from "./send-options.js";
 import { splitTelegramCaption } from "./caption.js";
 import { markdownToTelegramChunks, renderTelegramHtmlText } from "./format.js";
 import { sentMessageCache } from "./sent-cache.js";
+import { createRetryRunner, isRecoverableNetworkError } from "../../../src/infra/retry.js";
 import { isTelegramHtmlParseError } from "./errors.js";
 import { InputFile } from "grammy";
 //#region extensions/telegram/src/outbound-sender.ts

package/dist/extensions/telegram/src/plugin.js

@@ -1,17 +1,17 @@
 import { createLogger } from "../../../src/utils/logger/index.js";
 import { init_logger } from "../../../src/utils/logger.js";
 import { TelegramConfigSchema, init_config_schema } from "./config-schema.js";
-import { isSTTAvailable } from "../../../src/voice/stt/availability.js";
 import { registerChannelExecApprovalHandler } from "../../../src/channels/exec-approval-runtime.js";
-import { generateConversationId } from "../../../src/chat-commands/session-key.js";
 import { resolveStandardPairingPath } from "../../../src/channels/pairing/paths.js";
 import { issuePairingChallenge } from "../../../src/channels/pairing/pairing-challenge.js";
 import { createStandardPairingAdapter } from "../../../src/channels/pairing/pairing-store-adapter.js";
 import "./pairing-config-resolver.js";
+import { generateConversationId } from "../../../src/chat-commands/session-key.js";
 import { answerClarificationChoiceFromChannel } from "../../../src/gateway/clarify-runtime.js";
 import { createTimeoutAbortSignal } from "./timeout-abort.js";
 import { createInboundDebouncer } from "../../../src/infra/debounce.js";
 import { getMimeType } from "../../../src/channels/media.js";
+import { isSTTAvailable } from "../../../src/voice/stt/availability.js";
 import { TelegramAccountManager } from "./account-manager.js";
 import { createOutboundSender } from "./outbound-sender.js";
 import { createTelegramCommandHandler } from "./command-handler.js";

package/dist/extensions/telegram/xopc.extension.json

@@ -2,7 +2,7 @@
   "id": "telegram",
   "name": "Telegram Channel",
   "description": "Bundled Telegram Bot channel (private workspace sources; ships inside @xopcai/xopc dist/)",
-  "version": "0.0.350",
+  "version": "0.0.352",
   "kind": "channel",
   "main": "src/index.js",
   "channels": [

package/dist/extensions/weixin/src/api/api.js

@@ -2,7 +2,7 @@ import { hasProxyEnv } from "../../../../src/infra/http-proxy-env.js";
 import { logger } from "../util/logger.js";
 import { redactBody, redactUrl } from "../util/redact.js";
 import path from "node:path";
-import fs from "node:fs";
+import fsSync from "node:fs";
 import { fileURLToPath } from "node:url";
 import crypto from "node:crypto";
 import { Agent, EnvHttpProxyAgent, fetch as fetch$1 } from "undici";
@@ -11,7 +11,7 @@ function readPackageJson() {
 	try {
 		const dir = path.dirname(fileURLToPath(import.meta.url));
 		const pkgPath = path.resolve(dir, "..", "..", "package.json");
-		return JSON.parse(fs.readFileSync(pkgPath, "utf-8"));
+		return JSON.parse(fsSync.readFileSync(pkgPath, "utf-8"));
 	} catch {
 		return {};
 	}

package/dist/extensions/weixin/src/auth/accounts.js

@@ -3,7 +3,7 @@ import { normalizeWeixinAccountId } from "./weixin-account-id.js";
 import { resolveWeixinRootDir } from "../storage/state-dir.js";
 import { deleteGetUpdatesBuf } from "../storage/sync-buf.js";
 import path from "node:path";
-import fs from "node:fs";
+import fsSync from "node:fs";
 //#region extensions/weixin/src/auth/accounts.ts
 const DEFAULT_BASE_URL = "https://ilinkai.weixin.qq.com";
 const CDN_BASE_URL = "https://novac2c.cdn.weixin.qq.com/c2c";
@@ -16,8 +16,8 @@ function resolveAccountIndexPath() {
 function listIndexedWeixinAccountIds() {
 	const filePath = resolveAccountIndexPath();
 	try {
-		if (!fs.existsSync(filePath)) return [];
-		const raw = fs.readFileSync(filePath, "utf-8");
+		if (!fsSync.existsSync(filePath)) return [];
+		const raw = fsSync.readFileSync(filePath, "utf-8");
 		const parsed = JSON.parse(raw);
 		if (!Array.isArray(parsed)) return [];
 		return parsed.filter((id) => typeof id === "string" && id.trim() !== "");
@@ -27,16 +27,16 @@ function listIndexedWeixinAccountIds() {
 }
 function registerWeixinAccountId(accountId) {
 	const dir = resolveWeixinStateDir();
-	fs.mkdirSync(dir, { recursive: true });
+	fsSync.mkdirSync(dir, { recursive: true });
 	const existing = listIndexedWeixinAccountIds();
 	if (existing.includes(accountId)) return;
 	const updated = [...existing, accountId];
-	fs.writeFileSync(resolveAccountIndexPath(), JSON.stringify(updated, null, 2), "utf-8");
+	fsSync.writeFileSync(resolveAccountIndexPath(), JSON.stringify(updated, null, 2), "utf-8");
 }
 function unregisterWeixinAccountId(accountId) {
 	const existing = listIndexedWeixinAccountIds();
 	const updated = existing.filter((id) => id !== accountId);
-	if (updated.length !== existing.length) fs.writeFileSync(resolveAccountIndexPath(), JSON.stringify(updated, null, 2), "utf-8");
+	if (updated.length !== existing.length) fsSync.writeFileSync(resolveAccountIndexPath(), JSON.stringify(updated, null, 2), "utf-8");
 }
 function clearStaleAccountsForUserId(currentAccountId, userId, onClearContextTokens) {
 	if (!userId) return;
@@ -59,7 +59,7 @@ function resolveAccountPath(accountId) {
 }
 function readAccountFile(filePath) {
 	try {
-		if (fs.existsSync(filePath)) return JSON.parse(fs.readFileSync(filePath, "utf-8"));
+		if (fsSync.existsSync(filePath)) return JSON.parse(fsSync.readFileSync(filePath, "utf-8"));
 	} catch {}
 	return null;
 }
@@ -68,7 +68,7 @@ function loadWeixinAccount(accountId) {
 }
 function saveWeixinAccount(accountId, update) {
 	const dir = resolveAccountsDir();
-	fs.mkdirSync(dir, { recursive: true });
+	fsSync.mkdirSync(dir, { recursive: true });
 	const existing = loadWeixinAccount(accountId) ?? {};
 	const token = update.token?.trim() || existing.token;
 	const baseUrl = update.baseUrl?.trim() || existing.baseUrl;
@@ -82,9 +82,9 @@ function saveWeixinAccount(accountId, update) {
 		...userId ? { userId } : {}
 	};
 	const filePath = resolveAccountPath(accountId);
-	fs.writeFileSync(filePath, JSON.stringify(data, null, 2), "utf-8");
+	fsSync.writeFileSync(filePath, JSON.stringify(data, null, 2), "utf-8");
 	try {
-		fs.chmodSync(filePath, 384);
+		fsSync.chmodSync(filePath, 384);
 	} catch {}
 }
 function clearWeixinAccount(accountId) {
@@ -92,10 +92,10 @@ function clearWeixinAccount(accountId) {
 	const dir = resolveAccountsDir();
 	const accountFiles = [`${accountId}.json`, `${accountId}.context-tokens.json`];
 	for (const file of accountFiles) try {
-		fs.unlinkSync(path.join(dir, file));
+		fsSync.unlinkSync(path.join(dir, file));
 	} catch {}
 	try {
-		fs.unlinkSync(resolveFrameworkAllowFromPath(accountId));
+		fsSync.unlinkSync(resolveFrameworkAllowFromPath(accountId));
 	} catch {}
 }
 function weixinSection(cfg) {

package/dist/extensions/weixin/src/messaging/debug-mode.js

@@ -1,7 +1,7 @@
 import { logger } from "../util/logger.js";
 import { resolveWeixinRootDir } from "../storage/state-dir.js";
 import path from "node:path";
-import fs from "node:fs";
+import fsSync from "node:fs";
 //#region extensions/weixin/src/messaging/debug-mode.ts
 /**
 * Per-bot debug mode toggle, persisted to disk so it survives gateway restarts.
@@ -17,7 +17,7 @@ function resolveDebugModePath() {
 }
 function loadState() {
 	try {
-		const raw = fs.readFileSync(resolveDebugModePath(), "utf-8");
+		const raw = fsSync.readFileSync(resolveDebugModePath(), "utf-8");
 		const parsed = JSON.parse(raw);
 		if (parsed && typeof parsed.accounts === "object") return parsed;
 	} catch {}
@@ -25,8 +25,8 @@ function loadState() {
 }
 function saveState(state) {
 	const filePath = resolveDebugModePath();
-	fs.mkdirSync(path.dirname(filePath), { recursive: true });
-	fs.writeFileSync(filePath, JSON.stringify(state, null, 2), "utf-8");
+	fsSync.mkdirSync(path.dirname(filePath), { recursive: true });
+	fsSync.writeFileSync(filePath, JSON.stringify(state, null, 2), "utf-8");
 }
 /** Toggle debug mode for a bot account. Returns the new state. */
 function toggleDebugMode(accountId) {
@@ -50,7 +50,7 @@ function isDebugMode(accountId) {
 */
 function _resetForTest() {
 	try {
-		fs.unlinkSync(resolveDebugModePath());
+		fsSync.unlinkSync(resolveDebugModePath());
 	} catch {}
 }
 //#endregion

package/dist/extensions/weixin/src/messaging/inbound.js

@@ -4,7 +4,7 @@ import { MessageItemType } from "../api/types.js";
 import { canonicalWeixinPeerId, normalizeWeixinAccountId } from "../auth/weixin-account-id.js";
 import { resolveWeixinRootDir } from "../storage/state-dir.js";
 import path from "node:path";
-import fs from "node:fs";
+import fsSync from "node:fs";
 //#region extensions/weixin/src/messaging/inbound.ts
 /**
 * contextToken is issued per-message by the Weixin getupdates API and must
@@ -66,8 +66,8 @@ function persistContextTokens(accountId) {
 	const filePath = canonicalContextTokenFilePath(accountId);
 	try {
 		const dir = path.dirname(filePath);
-		fs.mkdirSync(dir, { recursive: true });
-		fs.writeFileSync(filePath, JSON.stringify(tokens, null, 0), "utf-8");
+		fsSync.mkdirSync(dir, { recursive: true });
+		fsSync.writeFileSync(filePath, JSON.stringify(tokens, null, 0), "utf-8");
 	} catch (err) {
 		logger.warn(`persistContextTokens: failed to write ${filePath}: ${String(err)}`);
 	}
@@ -81,8 +81,8 @@ function restoreContextTokens(accountId) {
 	const norm = normalizeWeixinAccountId(accountId);
 	const filePath = canonicalContextTokenFilePath(accountId);
 	try {
-		if (fs.existsSync(filePath)) {
-			const raw = fs.readFileSync(filePath, "utf-8");
+		if (fsSync.existsSync(filePath)) {
+			const raw = fsSync.readFileSync(filePath, "utf-8");
 			const tokens = JSON.parse(raw);
 			for (const [userId, val] of Object.entries(tokens)) {
 				const entry = parsePersistedPeerVal(val);
@@ -104,7 +104,7 @@ function clearContextTokensForAccount(accountId) {
 	for (const k of [...contextTokenStore.keys()]) if (k.startsWith(prefix)) contextTokenStore.delete(k);
 	try {
 		const filePath = canonicalContextTokenFilePath(accountId);
-		if (fs.existsSync(filePath)) fs.unlinkSync(filePath);
+		if (fsSync.existsSync(filePath)) fsSync.unlinkSync(filePath);
 	} catch (err) {
 		logger.warn(`clearContextTokensForAccount: failed to remove context tokens file: ${String(err)}`);
 	}
@@ -114,9 +114,9 @@ function tryHydratePeerEntryFromDisk(accountId, userId) {
 	const peer = normalizeIlinkUserIdForContext(userId);
 	const norm = normalizeWeixinAccountId(accountId);
 	const filePath = canonicalContextTokenFilePath(accountId);
-	if (!fs.existsSync(filePath)) return void 0;
+	if (!fsSync.existsSync(filePath)) return void 0;
 	try {
-		const raw = fs.readFileSync(filePath, "utf-8");
+		const raw = fsSync.readFileSync(filePath, "utf-8");
 		const tokens = JSON.parse(raw);
 		for (const [jsonKey, val] of Object.entries(tokens)) {
 			const entry = parsePersistedPeerVal(val);
@@ -198,11 +198,11 @@ function findContextTokenEntriesByPeer(peerUserId) {
 function tryHydrateAnyAccountContextTokenFromDisk(peerUserId) {
 	const peer = normalizeIlinkUserIdForContext(peerUserId);
 	const accountsDir = path.join(resolveWeixinRootDir(), "accounts");
-	if (!fs.existsSync(accountsDir)) return void 0;
+	if (!fsSync.existsSync(accountsDir)) return void 0;
 	const hits = [];
 	let names;
 	try {
-		names = fs.readdirSync(accountsDir);
+		names = fsSync.readdirSync(accountsDir);
 	} catch {
 		return;
 	}
@@ -212,7 +212,7 @@ function tryHydrateAnyAccountContextTokenFromDisk(peerUserId) {
 		const accountFromFile = name.slice(0, -20);
 		const filePath = path.join(accountsDir, name);
 		try {
-			const raw = fs.readFileSync(filePath, "utf-8");
+			const raw = fsSync.readFileSync(filePath, "utf-8");
 			const tokens = JSON.parse(raw);
 			for (const [jsonKey, val] of Object.entries(tokens)) {
 				const entry = parsePersistedPeerVal(val);