@xopcai/xopc 0.0.351 → 0.0.352

package/dist/src/gateway/agents-admin.d.ts

@@ -64,6 +64,7 @@ export type UpdateAgentBody = {
     setDefault?: boolean;
     skills?: SkillOverride | null;
     tools?: AgentEntry['tools'] | null;
+    toolAllowlist?: AgentEntry['toolAllowlist'] | null;
     workflows?: AgentEntry['workflows'] | null;
     runtime?: AgentEntry['runtime'] | null;
 };

package/dist/src/gateway/agents-admin.js

@@ -5,8 +5,8 @@ import { WORKSPACE_FILES, init_paths } from "../config/paths.js";
 import { AGENT_PROFILE_MARKDOWN_SYSTEM_FILES, REQUIRED_AGENT_PROFILE_MARKDOWN_FILE_SET } from "../agent/context/workspace.js";
 import { AgentCatalogService } from "../agent-catalog/service.js";
 import { resolveEffectiveAgentProfile } from "../config/agent-profile.js";
-import { isPathUnderWorkspace, resolveWorkspaceSafePath } from "./workspace-editor-path.js";
 import { GATEWAY_BUILTIN_TOOL_IDS } from "./agent-builtin-tools.js";
+import { isPathUnderWorkspace, resolveWorkspaceSafePath } from "./workspace-editor-path.js";
 import { join, resolve } from "node:path";
 import { mkdir, readFile, realpath, stat, unlink, writeFile } from "node:fs/promises";
 //#region src/gateway/agents-admin.ts
@@ -153,6 +153,7 @@ async function updateGatewayAgent(agentIdRaw, body) {
 	if (body.models !== void 0) patch.models = body.models ?? void 0;
 	if (body.skills !== void 0) patch.skills = body.skills ?? void 0;
 	if (body.tools !== void 0) patch.tools = body.tools ?? void 0;
+	if (body.toolAllowlist !== void 0) patch.toolAllowlist = body.toolAllowlist ?? void 0;
 	if (body.workflows !== void 0) patch.workflows = body.workflows ?? void 0;
 	if (body.runtime !== void 0) patch.runtime = body.runtime ?? void 0;
 	try {

package/dist/src/gateway/device-routes.js

@@ -1,6 +1,6 @@
-import { getTunnelService } from "../tunnel/tunnel-service.js";
-import { resolveReverseProxyPublicUrl } from "./public-url.js";
 import { getTailscaleExposureState } from "./tailscale-lifecycle.js";
+import { resolveReverseProxyPublicUrl } from "./public-url.js";
+import { getTunnelService } from "../tunnel/tunnel-service.js";
 import crypto from "node:crypto";
 //#region src/gateway/device-routes.ts
 function secureUrl(value) {

package/dist/src/gateway/file-path-classifier.js

@@ -2,8 +2,8 @@ import { init_paths_state, resolveStateDir } from "../config/paths-state.js";
 import { init_agent_scope, resolveAgentProfileDir } from "../agent/agent-scope.js";
 import { init_paths, resolveConfigPath, resolveSkillsDir } from "../config/paths.js";
 import { extractProfileAgentId } from "../config/agent-profile.js";
-import { isBareProfileMarkdownFileName, resolveProfileMarkdownPathIfBareName } from "../agent/tools/tool-paths.js";
 import { isPathUnderWorkspace, resolveWorkspaceSafePath } from "./workspace-editor-path.js";
+import { isBareProfileMarkdownFileName, resolveProfileMarkdownPathIfBareName } from "../agent/tools/tool-paths.js";
 import { basename, isAbsolute, resolve } from "node:path";
 import { stat } from "node:fs/promises";
 //#region src/gateway/file-path-classifier.ts

package/dist/src/gateway/global-defaults-admin.js

@@ -2,8 +2,8 @@ import { AgentDefaultsSchema } from "../agent-config/schema.js";
 import { init_agent_config } from "../agent-config/index.js";
 import { AgentCatalogRepository, init_repository } from "../agent-catalog/repository.js";
 import { AgentCatalogService } from "../agent-catalog/service.js";
-import { GATEWAY_BUILTIN_TOOLS } from "./agent-builtin-tools.js";
 import { validateComputerModelChange } from "../computer/model-config.js";
+import { GATEWAY_BUILTIN_TOOLS } from "./agent-builtin-tools.js";
 import { isDeepStrictEqual } from "node:util";
 //#region src/gateway/global-defaults-admin.ts
 init_agent_config();

package/dist/src/gateway/hono/app.js

@@ -2,13 +2,13 @@ import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
 import { init_device_access_repository, listDevices } from "../../storage/sqlite/device-access-repository.js";
 import { ENDPOINT_MAX_FILE_BYTES, init_src } from "../../../packages/endpoint-tools-protocol/src/index.js";
+import { BROWSER_EXTENSION_ID } from "../../browser/extension-identity.js";
 import { resolveAllowedBrowserOrigins, resolveGatewayServiceListenPort } from "../host.js";
 import { resolveGatewayEffectiveHost } from "../../config/gateway-bind.js";
-import { loadTunnelState } from "../../tunnel/tunnel-state.js";
-import { resolveReverseProxyPublicUrl } from "../public-url.js";
 import { maxSessionInputRequestBodyBytes } from "../chat-limits.js";
-import { BROWSER_EXTENSION_ID } from "../../browser/extension-identity.js";
 import { isLoopbackIpAddress, isTrustedProxyAddress } from "../client-ip.js";
+import { resolveReverseProxyPublicUrl } from "../public-url.js";
+import { loadTunnelState } from "../../tunnel/tunnel-state.js";
 import { buildGatewayConsoleCspHeader } from "../security/csp.js";
 import { checkBrowserOrigin, isChromeExtensionOrigin } from "../security/origin-check.js";
 import { auth } from "./middleware/auth.js";

package/dist/src/gateway/hono/lib/config-payload.js

@@ -7,13 +7,13 @@ import { init_models_json, loadModelsJson } from "../../../config/models-json.js
 import { CredentialResolver, init_credentials } from "../../../auth/credentials.js";
 import { getProviderRegistry, init_plugin_registry } from "../../../providers/plugin-registry.js";
 import { getAllProviders, init_providers, isProviderConfigured } from "../../../providers/index.js";
-import { normalizeConfiguredMcpServers } from "../../../config/mcp-config-normalize.js";
-import { resolveShareConfig } from "../../../share/share-config.js";
-import { maskTunnelSecretForWeb } from "../../../tunnel/env.js";
 import { buildChannelCatalogForConfig, buildChannelCatalogFromSnapshot, getChannelSetupStatus } from "../../../channels/catalog/channel-catalog-service.js";
+import { normalizeConfiguredMcpServers } from "../../../config/mcp-config-normalize.js";
 import { resolveSessionConfigForWeb, resolveUpdateConfigForWeb } from "../../../config/web-patch.js";
 import { GENERIC_MASKED_SECRET, maskSecretLength } from "./mask-secret-length.js";
 import { safeToolsWebForGet } from "../../config-tools-web.js";
+import { maskTunnelSecretForWeb } from "../../../tunnel/env.js";
+import { resolveShareConfig } from "../../../share/share-config.js";
 import { buildSafeProvidersConfigForWeb } from "./safe-providers-config.js";
 import { maskRealtimeVoiceConfigForWeb, maskSttConfigForWeb, maskTtsConfigForWeb } from "./safe-voice-config.js";
 //#region src/gateway/hono/lib/config-payload.ts

package/dist/src/gateway/hono/routes/agents.js

@@ -1,9 +1,9 @@
-import { AgentModelsOverrideSchema, AgentProfileSchema, RuntimePolicySchema, SkillOverrideSchema, ToolPoliciesSchema, WorkflowPolicySchema } from "../../../agent-config/schema.js";
+import { AgentEntrySchema, AgentModelsOverrideSchema, AgentProfileSchema, RuntimePolicySchema, SkillOverrideSchema, ToolPoliciesSchema, WorkflowPolicySchema } from "../../../agent-config/schema.js";
 import { init_agent_config } from "../../../agent-config/index.js";
 import { normalizeAgentId } from "../../../agent-catalog/id.js";
 import { init_agent_scope } from "../../../agent/agent-scope.js";
-import { createGatewayAgent, deleteAgentAvatarFile, deleteGatewayAgent, getGatewayAgentEffectiveConfig, listAgentProfileFiles, listGatewayAgents, readAgentAvatarFile, readAgentProfileFile, updateGatewayAgent, writeAgentAvatarFromBase64, writeAgentProfileFile } from "../../agents-admin.js";
 import { getVoiceModelsConfig } from "../../../config/voice.js";
+import { createGatewayAgent, deleteAgentAvatarFile, deleteGatewayAgent, getGatewayAgentEffectiveConfig, listAgentProfileFiles, listGatewayAgents, readAgentAvatarFile, readAgentProfileFile, updateGatewayAgent, writeAgentAvatarFromBase64, writeAgentProfileFile } from "../../agents-admin.js";
 //#region src/gateway/hono/routes/agents.ts
 init_agent_config();
 init_agent_scope();
@@ -105,6 +105,7 @@ function registerAgentsRoutes(authenticated, deps) {
 			"models",
 			"skills",
 			"tools",
+			"toolAllowlist",
 			"workflows",
 			"runtime",
 			"setDefault"
@@ -132,6 +133,11 @@ function registerAgentsRoutes(authenticated, deps) {
 			ok: false,
 			error: { message: "tools must be an object or null" }
 		}, 400);
+		const toolAllowlistPatch = body.toolAllowlist === null ? null : Object.hasOwn(body, "toolAllowlist") ? AgentEntrySchema.shape.toolAllowlist.safeParse(body.toolAllowlist) : void 0;
+		if (toolAllowlistPatch && toolAllowlistPatch !== null && !toolAllowlistPatch.success) return c.json({
+			ok: false,
+			error: { message: `toolAllowlist ${toolAllowlistPatch.error.issues[0]?.message ?? "is invalid"}` }
+		}, 400);
 		const modelsPatch = Object.hasOwn(body, "models") ? parsePatchModels(body.models) : void 0;
 		if (isParseError(modelsPatch)) return c.json({
 			ok: false,
@@ -166,6 +172,7 @@ function registerAgentsRoutes(authenticated, deps) {
 			setDefault: body.setDefault === true,
 			...skillsPatch !== void 0 ? { skills: skillsPatch === null ? null : skillsPatch.data } : {},
 			...toolsPatch !== void 0 ? { tools: toolsPatch } : {},
+			...toolAllowlistPatch !== void 0 ? { toolAllowlist: toolAllowlistPatch === null ? null : toolAllowlistPatch.data } : {},
 			...workflowsPatch !== void 0 ? { workflows: workflowsPatch === null ? null : workflowsPatch.data } : {},
 			...runtimePatch !== void 0 ? { runtime: runtimePatch === null ? null : runtimePatch.data } : {}
 		});

package/dist/src/gateway/hono/routes/auth-registry-extensions.js

@@ -1,6 +1,6 @@
 import { getAllModels, getAvailableModels, init_providers } from "../../../providers/index.js";
-import { ActivationPlanner } from "../../../extensions/activation-planner.js";
 import { mergeActivationContext } from "../../../extensions/activation-context.js";
+import { ActivationPlanner } from "../../../extensions/activation-planner.js";
 import { validateExtensionConfig } from "../../../extensions/config-validation.js";
 import { fetchRegistry, listExtensions, searchExtensions } from "../../../extensions/marketplace.js";
 import { createOAuthAsyncHandler } from "../oauth-async.js";

package/dist/src/gateway/hono/routes/browser.js

@@ -2,8 +2,8 @@ import { deleteBrowserTabBinding, getBrowserTabBinding, init_browser_tab_binding
 import { browserTabBindingRequestSchema } from "../../../../packages/gateway-contract/src/browser-tab-binding.js";
 import { init_src } from "../../../../packages/gateway-contract/src/index.js";
 import { getDevice, init_device_access_repository } from "../../../storage/sqlite/device-access-repository.js";
-import "../../../../packages/browser-control-contract/src/index.js";
 import { decideBrowserApproval, listBrowserApprovals } from "../../../browser/policy/approval-store.js";
+import "../../../../packages/browser-control-contract/src/index.js";
 import { createBrowserDriver } from "../../../browser/drivers/create-driver.js";
 import { checkBrowserReadiness } from "../../../browser/readiness.js";
 import { isLoopbackClientIp } from "../../security/loopback.js";

package/dist/src/gateway/hono/routes/commands-skills.js

@@ -1,15 +1,15 @@
 import { init_agent_scope, resolveDefaultAgentId } from "../../../agent/agent-scope.js";
+import { commandRegistry } from "../../../chat-commands/registry.js";
 import { resolveEffectiveAgentProfile } from "../../../config/agent-profile.js";
 import { effectiveWorkspacePathForSession, projectWorkspacePath } from "../../../session/session-workspace.js";
 import { getProjectForSession } from "../../../projects/workspace.js";
-import { ProjectService } from "../../../projects/project-service.js";
+import { buildReviewContext, resolveGitRoot } from "../../../review/review-git.js";
+import "../../../chat-commands/index.js";
 import { isRegisteredProvider } from "../../../agent/skills/marketplace/registry.js";
+import { ProjectService } from "../../../projects/project-service.js";
 import "../../../agent/skills/skills-marketplace.js";
 import "../../../projects/index.js";
 import { isSkillInstallTarget } from "../../../agent/skills/install-target.js";
-import { commandRegistry } from "../../../chat-commands/registry.js";
-import { buildReviewContext, resolveGitRoot } from "../../../review/review-git.js";
-import "../../../chat-commands/index.js";
 //#region src/gateway/hono/routes/commands-skills.ts
 init_agent_scope();
 function parseMarketplaceProviderQuery(raw) {

package/dist/src/gateway/hono/routes/config-patch/gateway.js

@@ -1,8 +1,8 @@
 import { init_public_url, validatePublicUrl } from "../../../../config/public-url.js";
 import { isValidIPv4 } from "../../../../config/gateway-bind.js";
+import { isMaskedSecretPatchValue } from "../../lib/mask-secret-length.js";
 import { mergeShareConfigPatch } from "../../../../share/share-config.js";
 import { mergeSiteShareConfigPatch } from "../../../../share/site-share-config.js";
-import { isMaskedSecretPatchValue } from "../../lib/mask-secret-length.js";
 import { PATCH_OK, patchError } from "./result.js";
 //#region src/gateway/hono/routes/config-patch/gateway.ts
 init_public_url();

package/dist/src/gateway/hono/routes/connectors.js

@@ -20,6 +20,7 @@ import { createConnectorSetupSecretRequest, submitConnectorSetupSecret } from ".
 import { recordConnectorHealthUsage } from "../../../connectors/usage.js";
 import { getConnectorInstance, getInstalledConnectorDefinition, listConnectorInstances } from "../../../connectors/instances.js";
 import { installConnector, installConnectorDefinition, uninstallConnector, updateConnectorConfig } from "../../../connectors/install.js";
+import { ConfigPersistenceError, persistConfigMutation } from "../../../config/config-mutation.js";
 import { resumeApprovedConnectorAction } from "../../../connectors/approval-resume.js";
 import { getMcpOAuthManager } from "../../../agent/mcp/oauth/mcp-oauth-manager.js";
 import { startConnectorAuthorization } from "../../../connectors/auth-provider-registry.js";
@@ -28,7 +29,6 @@ import { inspectManagedComposioStatus } from "../../../connectors/composio-manag
 import { appendComposioTriggerEvent, listComposioTriggerEvents } from "../../../connectors/composio-triggers.js";
 import { ingestLocalFolderSource } from "../../../connectors/connected-source-ingestion.js";
 import { listUnderstandingSourceGrants, revokeUnderstandingSourceGrant } from "../../../user-context/sources/repository.js";
-import { ConfigPersistenceError, persistConfigMutation } from "../../../config/config-mutation.js";
 import { previewConnectorDefinition, testConnectorInstance } from "../../../connectors/health.js";
 import { setConnectorEnabled } from "../../../connectors/lifecycle.js";
 import { projectComposioConnectionStatus } from "../../../connectors/runtime-status.js";

package/dist/src/gateway/hono/routes/device-push.js

@@ -30,7 +30,7 @@ function parsePreferences(value) {
 	return result;
 }
 function parsePlatform(value) {
-	return value === "ios" || value === "android" || value === "harmonyos" ? value : null;
+	return value === "harmonyos" ? value : null;
 }
 function parsePermission(value) {
 	return value === "granted" || value === "denied" || value === "unknown" ? value : null;

package/dist/src/gateway/hono/routes/home.js

@@ -3,9 +3,9 @@ import { init_src } from "../../../../packages/gateway-contract/src/index.js";
 import { acknowledgeHomeAttention } from "../../../storage/sqlite/home-attention-repository.js";
 import { decideConnectorApproval } from "../../../storage/sqlite/connector-repository.js";
 import { init_sqlite } from "../../../storage/sqlite/index.js";
+import { resumeApprovedConnectorAction } from "../../../connectors/approval-resume.js";
 import { listGatewayAgents } from "../../agents-admin.js";
 import { HomeQueryService, buildHomeWorkbench, decisionFromTask } from "../../../tasks/home-query-service.js";
-import { resumeApprovedConnectorAction } from "../../../connectors/approval-resume.js";
 import { HomeOpportunityActionError, HomeOpportunityNotFoundError } from "../../../home-intelligence/application-service.js";
 //#region src/gateway/hono/routes/home.ts
 init_src();

package/dist/src/gateway/hono/routes/mcp.js

@@ -1,9 +1,9 @@
 import { isManagedConnectorServer } from "../../../connectors/materialize.js";
-import { AgentPluginStore } from "../../../extensions/agent-plugins/store.js";
+import { getWorkspacePath } from "../../../config/workspace-path-helpers.js";
 import { canonicalizeConfiguredMcpServer, normalizeConfiguredMcpServers } from "../../../config/mcp-config-normalize.js";
+import { AgentPluginStore } from "../../../extensions/agent-plugins/store.js";
 import { savePluginAuthBinding } from "../../../extensions/agent-plugins/auth.js";
 import { loadMergedBundleMcpConfig } from "../../../agent/mcp/bundle-mcp-config.js";
-import { getWorkspacePath } from "../../../config/workspace-path-helpers.js";
 import { getMcpOAuthManager } from "../../../agent/mcp/oauth/mcp-oauth-manager.js";
 import { listBundleMcpResourcesForGateway, listBundleMcpServerCapabilitiesForGateway, listBundleMcpServerToolsForGateway } from "../../../agent/mcp/bundle-mcp-gateway.js";
 //#region src/gateway/hono/routes/mcp.ts

package/dist/src/gateway/hono/routes/media.js

@@ -1,6 +1,6 @@
+import { MAX_WEBCHAT_ATTACHMENT_FILE_BYTES } from "../../chat-limits.js";
 import { mimeTypeFromMediaPath, saveMediaBuffer } from "../../../media/store.js";
 import { readMediaReference } from "../../../media/media-reference.js";
-import { MAX_WEBCHAT_ATTACHMENT_FILE_BYTES } from "../../chat-limits.js";
 import { createGatewayRouteLogger } from "../lib/route-logger.js";
 import { resolveScopedMediaReference } from "../../media-access.js";
 //#region src/gateway/hono/routes/media.ts

package/dist/src/gateway/hono/routes/models.js

@@ -1,5 +1,4 @@
 import { resolveModelsJsonPath } from "../../../config/paths.js";
-import { resolveEffectiveAgentConfigForAgent } from "../../../config/agent-profile.js";
 import { init_resolve_config_value, testApiKeyResolution } from "../../../config/resolve-config-value.js";
 import { computerModelProfile, init_model_policy, isDedicatedComputerModel } from "../../../computer/model-policy.js";
 import { init_models_json, loadModelsJson, saveModelsJson, validateModelsConfig } from "../../../config/models-json.js";
@@ -9,13 +8,14 @@ import { CredentialResolver, init_credentials } from "../../../auth/credentials.
 import "../../../providers/constants.js";
 import { getProviderRegistry, init_plugin_registry } from "../../../providers/plugin-registry.js";
 import { PROVIDER_META, getAllModels, getAllProviders, getAvailableModels, getProviderAuthState, init_providers, isProviderConfigured, isProviderConfiguredSync } from "../../../providers/index.js";
-import { buildCapabilityPlansForConfig } from "../../../capabilities/readiness/from-config.js";
-import "../../../capabilities/readiness/index.js";
+import { resolveEffectiveAgentConfigForAgent } from "../../../config/agent-profile.js";
+import { deleteCustomImageProvider, listCustomImageProviders, upsertCustomImageProvider } from "../../custom-image-providers.js";
 import { getImageGenerationProvider, reloadImageGenerationProviders, resolveImageGenerationCredentialMode } from "../../../agent/image/generation/provider-registry.js";
+import { applyImageGenerationCatalogUpdate, getAgentImageGenerationConfig, getDefaultImageGenerationConfig, getImageGenerationCatalog, prepareDefaultImageGenerationSetup, prepareImageGenerationSetup, verifyImageGenerationCredential } from "../../image-generation-setup.js";
 import { SessionConfigStore } from "../../../session/config-store.js";
+import { buildCapabilityPlansForConfig } from "../../../capabilities/readiness/from-config.js";
+import "../../../capabilities/readiness/index.js";
 import { getModelThinking } from "../../../providers/model-thinking.js";
-import { deleteCustomImageProvider, listCustomImageProviders, upsertCustomImageProvider } from "../../custom-image-providers.js";
-import { applyImageGenerationCatalogUpdate, getAgentImageGenerationConfig, getDefaultImageGenerationConfig, getImageGenerationCatalog, prepareDefaultImageGenerationSetup, prepareImageGenerationSetup, verifyImageGenerationCredential } from "../../image-generation-setup.js";
 import { discoverProviderModels, isProviderApiDiscoverable } from "../../../providers/model-discovery.js";
 import { getXopcCloudCatalogCoordinator } from "../../../providers/xopc-cloud-catalog-coordinator.js";
 import { respondStartupUnavailable } from "../lib/startup-unavailable.js";

package/dist/src/gateway/hono/routes/notes.js

@@ -5,9 +5,9 @@ import "../../../capabilities/runtime/dispatcher.js";
 import { init_session_key, resolveConversationId } from "../../../routing/session-key.js";
 import { agentExists, getDefaultAgentId, init_resolve_route } from "../../../routing/resolve-route.js";
 import { resolveGatewayEffectiveHost } from "../../../config/gateway-bind.js";
+import { resolveReverseProxyPublicUrl } from "../../public-url.js";
 import { getShareStore } from "../../../share/share-store.js";
 import { resolveShareUrl } from "../../../share/share-url.js";
-import { resolveReverseProxyPublicUrl } from "../../public-url.js";
 import { createProductDispatcher } from "../../../capabilities/runtime/product.js";
 import { getGatewayPrincipal } from "../../security/gateway-principal.js";
 import { capabilityHttpContext, capabilityHttpError } from "../../../capabilities/adapters/http.js";

package/dist/src/gateway/hono/routes/projects.js

@@ -10,9 +10,10 @@ import "../../../activity/index.js";
 import { CapabilityError } from "../../../capabilities/runtime/errors.js";
 import "../../../capabilities/runtime/dispatcher.js";
 import { resolveEffectiveAgentProfile } from "../../../config/agent-profile.js";
-import { TaskReadModelProjector } from "../../../tasks/task-read-model-projector.js";
 import { listKnowledgeItems, writeKnowledgeItem } from "../../../knowledge-memory/repository.js";
 import "../../../knowledge-memory/index.js";
+import { TaskReadModelProjector } from "../../../tasks/task-read-model-projector.js";
+import { TaskApplicationService } from "../../../tasks/task-application-service.js";
 import { ProjectWorkspaceConflictError, ProjectWorkspaceMissingError } from "../../../projects/workspace-project.js";
 import { inferProjectExecutionMode, inferProjectKind } from "../../../projects/project-kind.js";
 import { ProjectDeletionBlockedError, ProjectWorkspaceInUseError } from "../../../projects/project-service.js";
@@ -20,7 +21,6 @@ import { resolveProjectAgentId } from "../../../projects/project-agent.js";
 import { inferSuggestedProjectDefaultAgentId } from "../../../projects/project-agent-suggestion.js";
 import { buildProjectLoopOverview } from "../../../projects/project-loop.js";
 import "../../../projects/index.js";
-import { TaskApplicationService } from "../../../tasks/task-application-service.js";
 import { createProductDispatcher } from "../../../capabilities/runtime/product.js";
 import { defineTaskContract } from "../../../tasks/task-contract-definition.js";
 import { ProjectOperatingViewService, summarizeProjectOperatingView } from "../../../tasks/project-operating-view-service.js";

package/dist/src/gateway/hono/routes/session-command-handler.js

@@ -5,10 +5,10 @@ import { sessionInputCommandSchema, sessionMaterializeCommandSchema } from "../.
 import { parseUserTurnDocument, userTurnDocumentRefIds } from "../../../../packages/gateway-contract/src/user-turn-document.js";
 import { init_src } from "../../../../packages/gateway-contract/src/index.js";
 import { endpointTurnClaimSchema, init_src as init_src$1 } from "../../../../packages/endpoint-tools-protocol/src/index.js";
-import { validateWebchatAttachments, validateWebchatContent } from "../../chat-limits.js";
 import { parseSlashCommand } from "../../../chat-commands/command-parse.js";
 import { commandRegistry } from "../../../chat-commands/registry.js";
 import "../../../chat-commands/index.js";
+import { validateWebchatAttachments, validateWebchatContent } from "../../chat-limits.js";
 import { isVoiceLikeAttachment } from "../../../channels/attachments/voice-stt-webchat.js";
 import { SessionCommandError, getSessionInputReceipt, isConversationDeleted, retrySessionPreparation } from "../../../storage/sqlite/session-creation-repository.js";
 import { getGatewayPrincipal } from "../../security/gateway-principal.js";

package/dist/src/gateway/hono/routes/session-input-handler.js

@@ -7,11 +7,11 @@ import { endpointTurnClaimSchema, init_src as init_src$1 } from "../../../../pac
 import { CapabilityError } from "../../../capabilities/runtime/errors.js";
 import "../../../capabilities/runtime/dispatcher.js";
 import { init_providers, resolveModel } from "../../../providers/index.js";
-import { validateWebchatAttachments, validateWebchatContent } from "../../chat-limits.js";
-import { isTaskDestructiveCommand } from "../../../session/reset-triggers.js";
 import { parseSlashCommand } from "../../../chat-commands/command-parse.js";
 import { commandRegistry } from "../../../chat-commands/registry.js";
 import "../../../chat-commands/index.js";
+import { validateWebchatAttachments, validateWebchatContent } from "../../chat-limits.js";
+import { isTaskDestructiveCommand } from "../../../session/reset-triggers.js";
 import { isVoiceLikeAttachment } from "../../../channels/attachments/voice-stt-webchat.js";
 import { parseTurnContextRefs } from "../../../agent/source-context/types.js";
 import { getModelThinking } from "../../../providers/model-thinking.js";

package/dist/src/gateway/hono/routes/sessions.js

@@ -4,9 +4,9 @@ import { init_src } from "../../../../packages/gateway-contract/src/index.js";
 import "../../../session/types.js";
 import { SidebarLayoutConflictError, getSidebarLayout, init_sidebar_layout_repository, replaceSidebarLayout, sortBySidebarLayout } from "../../../storage/sqlite/sidebar-layout-repository.js";
 import { summarizeAiUsageByConversations } from "../../../storage/sqlite/ai-usage-repository.js";
+import { SessionEnvironmentService } from "../../../execution-environments/session-environment-service.js";
 import { messagesToClientHistory } from "../../../session/client-history.js";
 import { evictEmbeddedSessionRunner } from "../../../agent/embedded/session-runner.js";
-import { SessionEnvironmentService } from "../../../execution-environments/session-environment-service.js";
 import { deleteMediaUrisNoLongerReferenced } from "../../../media/session-references.js";
 import { getGatewayPrincipal } from "../../security/gateway-principal.js";
 import { createGatewayRouteLogger, logRouteError } from "../lib/route-logger.js";

package/dist/src/gateway/hono/routes/shares.js

@@ -1,7 +1,9 @@
 import { loadCompactionSourceSnapshot } from "../../../storage/sqlite/transcript-repository.js";
 import { init_sqlite } from "../../../storage/sqlite/index.js";
-import { FileServiceError } from "../../../files/file-service.js";
 import { resolveGatewayEffectiveHost } from "../../../config/gateway-bind.js";
+import { FileServiceError } from "../../../files/file-service.js";
+import { resolveReverseProxyPublicUrl } from "../../public-url.js";
+import { getGatewayFileSpaceService } from "../../file-space-service.js";
 import { SHARE_CONFIG_DEFAULTS } from "../../../share/share-types.js";
 import { resolveSiteShareConfig } from "../../../share/site-share-config.js";
 import { logShareAudit } from "../../../share/share-audit.js";
@@ -12,10 +14,8 @@ import { SessionShareService, SessionShareSnapshotConflictError } from "../../..
 import { HostedPublicationPublisher, HostedSessionShareBuilder, HostedShareAuthorizationError, HostedShareBindingStore, HostedShareRemoteError } from "../../../share/hosted-session-share.js";
 import { HostedStaticSitePublicationBuilder } from "../../../share/hosted-static-site-publication.js";
 import { publishHostedStaticSite } from "../../../share/hosted-static-site-publish.js";
-import { resolveReverseProxyPublicUrl } from "../../public-url.js";
 import { audienceDefaults, cleanupStagedSite, decideShareKind, forgetStagedSite, makeDescription, makeTitle, probeShareTarget, rememberStagedSite, stageSingleHtmlAsSite } from "../../../share/share-auto.js";
 import { deleteThumbnail, placeholderSvg, readThumbnail, scheduleThumbnail, thumbnailContentType, thumbnailExists } from "../../../share/share-thumbnail.js";
-import { getGatewayFileSpaceService } from "../../file-space-service.js";
 import { getClientIpFromHeaders } from "../../security/loopback.js";
 import { SHARED_HTML_CSP } from "../../security/csp.js";
 import { getGatewayPrincipal } from "../../security/gateway-principal.js";

package/dist/src/gateway/hono/routes/site-shares.js

@@ -1,8 +1,8 @@
 import { resolveGatewayEffectiveHost } from "../../../config/gateway-bind.js";
+import { resolveReverseProxyPublicUrl } from "../../public-url.js";
 import { resolveSiteShareConfig } from "../../../share/site-share-config.js";
 import { getSiteShareStore } from "../../../share/site-share-store.js";
 import { resolveSiteShareUrl } from "../../../share/share-url.js";
-import { resolveReverseProxyPublicUrl } from "../../public-url.js";
 import { getGatewayPrincipal } from "../../security/gateway-principal.js";
 import { createHash } from "node:crypto";
 //#region src/gateway/hono/routes/site-shares.ts

package/dist/src/gateway/hono/routes/tasks.js

@@ -8,10 +8,10 @@ import { TaskRepository, init_task_repository } from "../../../tasks/task-reposi
 import { TaskRunRepository, init_task_run_repository } from "../../../tasks/task-run-repository.js";
 import { CapabilityError } from "../../../capabilities/runtime/errors.js";
 import "../../../capabilities/runtime/dispatcher.js";
+import { TaskCollaborationRepository } from "../../../tasks/task-collaboration-repository.js";
 import { TaskConversationRepository } from "../../../tasks/task-conversation-repository.js";
 import { TaskContextMutationOutputSchema } from "../../../tasks/capabilities/relations.js";
 import { TaskDeleteOutputSchema } from "../../../tasks/capabilities/management.js";
-import { TaskCollaborationRepository } from "../../../tasks/task-collaboration-repository.js";
 import { TaskMutationOutputSchema } from "../../../tasks/capabilities/write.js";
 import { createProductDispatcher } from "../../../capabilities/runtime/product.js";
 import { ProjectOperatingViewService } from "../../../tasks/project-operating-view-service.js";

package/dist/src/gateway/hono/routes/user-model-refresh.js

@@ -1,8 +1,8 @@
 import { listConnectorLearningJobs } from "../../../storage/sqlite/connector-learning-repository.js";
 import { getConnectorAccount } from "../../../storage/sqlite/connector-account-repository.js";
 import { init_sqlite } from "../../../storage/sqlite/index.js";
-import { getWorkDiscoveryRun } from "../../../work-discovery/repository.js";
 import { getConnectorUnderstandingSourceRun } from "../../../user-context/sources/repository.js";
+import { getWorkDiscoveryRun } from "../../../work-discovery/repository.js";
 import { isLocalUnderstandingSourceId } from "../../../user-context/sources/local-source-contract.js";
 import { normalizeUnderstandingSourceItems } from "../../../work-discovery/service.js";
 import { UnderstandingRefreshService } from "../../../user-context/sources/refresh-service.js";

package/dist/src/gateway/hono/routes/user-model.js

@@ -1,7 +1,5 @@
 import { init_transaction, runSqliteWriteTransaction } from "../../../storage/sqlite/transaction.js";
 import { createCollaborationRule, getCollaborationRule, init_collaboration_rule_repository, listCollaborationRules, setCollaborationRuleStatus } from "../../../storage/sqlite/collaboration-rule-repository.js";
-import { KnowledgeReviewConflictError, deleteKnowledgeItem, getKnowledgeItem, listKnowledgeItems, reviewKnowledgeItem, searchKnowledgeItems } from "../../../knowledge-memory/repository.js";
-import "../../../knowledge-memory/index.js";
 import { deleteUserAssertion, getAssertionSlot, getUserAssertion, listUserAssertionSources, listUserAssertions, reconcileAssertion, setAssertionStatus, setUserAssertionScope } from "../../../user-model/repository.js";
 import { listActionRuleSuggestions } from "../../../user-model/action-rule-suggestions.js";
 import { createPriorityWindow, createUserGoal, listPriorityWindows, listUserGoals, setUserGoalStatus, updatePriorityWindow, updateUserGoal } from "../../../user-model/goals.js";
@@ -10,11 +8,13 @@ import { applyUserProfilePatch, getUserProfileSnapshot } from "../../../user-mod
 import { bootstrapUserModel } from "../../../user-model/bootstrap.js";
 import { canUseAssertion } from "../../../user-model/usage-policy.js";
 import "../../../user-model/index.js";
-import { listMemoryMaintenanceRuns } from "../../../memory-maintenance/service.js";
-import "../../../memory-maintenance/index.js";
-import { getExecutionContextAudit, recordExecutionContextFeedback } from "../../../agent/context/audit.js";
+import { KnowledgeReviewConflictError, deleteKnowledgeItem, getKnowledgeItem, listKnowledgeItems, reviewKnowledgeItem, searchKnowledgeItems } from "../../../knowledge-memory/repository.js";
+import "../../../knowledge-memory/index.js";
 import { getActiveUnderstandingConsent } from "../../../user-context/sources/consent-repository.js";
 import { listUnderstandingSourceGrants } from "../../../user-context/sources/repository.js";
+import { getExecutionContextAudit, recordExecutionContextFeedback } from "../../../agent/context/audit.js";
+import { listMemoryMaintenanceRuns } from "../../../memory-maintenance/service.js";
+import "../../../memory-maintenance/index.js";
 import { userInfo } from "node:os";
 //#region src/gateway/hono/routes/user-model.ts
 init_transaction();

package/dist/src/gateway/hono/routes/voice.js

@@ -2,17 +2,17 @@ import { voiceSelectionSchema } from "../../../../packages/realtime-protocol/src
 import { createVoiceSessionRequestSchema, init_voice } from "../../../../packages/realtime-protocol/src/voice.js";
 import { getDefaultModelSync, init_providers, resolveModel } from "../../../providers/index.js";
 import { completeWithResolvedCredentials } from "../../../providers/model-call.js";
+import { resolveTtsProviderConfigSlice } from "../../../voice/tts/config-slice.js";
+import { isTTSAvailable, resolveSpeechProvider } from "../../../voice/tts/factory.js";
+import { mergeTtsConfigFromAppConfig } from "../../../voice/tts/merge-config.js";
+import { speak, speakStream } from "../../../voice/tts/speak-core.js";
 import { resolveSttProviderConfigSlice } from "../../../voice/stt/config-slice.js";
-import { STTTranscriptionError, transcribe } from "../../../voice/stt/transcribe-core.js";
 import { isSTTAvailable } from "../../../voice/stt/availability.js";
+import "../../../voice/tts/index.js";
+import { STTTranscriptionError, transcribe } from "../../../voice/stt/transcribe-core.js";
 import { mergeSttConfigFromAppConfig } from "../../../voice/stt/config.js";
 import "../../../voice/stt/index.js";
-import { resolveTtsProviderConfigSlice } from "../../../voice/tts/config-slice.js";
-import { isTTSAvailable, resolveSpeechProvider } from "../../../voice/tts/factory.js";
-import { speak, speakStream } from "../../../voice/tts/speak-core.js";
-import { mergeTtsConfigFromAppConfig } from "../../../voice/tts/merge-config.js";
 import { listSttProvidersForApi } from "../../../voice/stt/list-providers.js";
-import "../../../voice/tts/index.js";
 import { withModelConfigLock } from "../../../session/model-config-lock.js";
 import { getSessionPreparation } from "../../../storage/sqlite/session-creation-repository.js";
 import { resolveOmniRoute } from "../../../voice/realtime/omniRoute.js";

package/dist/src/gateway/hono/routes/workflows.js

@@ -1,9 +1,9 @@
 import { init_agent_scope, resolveDefaultAgentId } from "../../../agent/agent-scope.js";
+import { validateWorkflowDefinitionInput } from "../../../workflows/domain/validation.js";
+import { WorkflowNameConflictError, WorkflowRevisionConflictError, createWorkflowCatalog } from "../../../agent/workflow/catalog.js";
 import { resolveProjectAgentId } from "../../../projects/project-agent.js";
 import "../../../projects/index.js";
 import { messagesToClientHistory } from "../../../session/client-history.js";
-import { validateWorkflowDefinitionInput } from "../../../workflows/domain/validation.js";
-import { WorkflowNameConflictError, WorkflowRevisionConflictError, createWorkflowCatalog } from "../../../agent/workflow/catalog.js";
 import "../../../workflows/domain/index.js";
 import { WorkflowDraftConflictError, WorkflowDraftStore } from "../../../workflows/authoring/workflow-draft-store.js";
 import "../../../workflows/authoring/index.js";

package/dist/src/gateway/host.d.ts

@@ -4,8 +4,6 @@ export declare function isLoopbackHost(host: string | undefined): boolean;
 export declare function isAllInterfacesHost(host: string | undefined): boolean;
 /** Vite dev server origins for the gateway console (`web/` defaults to port 3000). */
 export declare const GATEWAY_DEV_CONSOLE_ORIGINS: readonly ["http://localhost:3000", "http://127.0.0.1:3000"];
-/** Expo / React Native web dev server (Metro defaults to port 8081). */
-export declare const GATEWAY_EXPO_DEV_ORIGINS: readonly ["http://localhost:8081", "http://127.0.0.1:8081"];
 export type LanGatewayCandidate = {
     url: string;
     address: string;

package/dist/src/gateway/host.js

@@ -15,9 +15,6 @@ function isAllInterfacesHost(host) {
 }
 /** Vite dev server origins for the gateway console (`web/` defaults to port 3000). */
 const GATEWAY_DEV_CONSOLE_ORIGINS = ["http://localhost:3000", "http://127.0.0.1:3000"];
-/** Expo / React Native web dev server (Metro defaults to port 8081). */
-const GATEWAY_EXPO_DEV_ORIGINS = ["http://localhost:8081", "http://127.0.0.1:8081"];
-const GATEWAY_LOOPBACK_DEV_ORIGINS = [...GATEWAY_DEV_CONSOLE_ORIGINS, ...GATEWAY_EXPO_DEV_ORIGINS];
 /** Non-internal IPv4 addresses that can serve this gateway on the local network. */
 function enumerateLanGatewayCandidates(port) {
 	const seen = /* @__PURE__ */ new Set();
@@ -47,7 +44,7 @@ function buildDefaultCorsOrigins(params) {
 	const origins = new Set([
 		`http://localhost:${params.port}`,
 		`http://127.0.0.1:${params.port}`,
-		...GATEWAY_LOOPBACK_DEV_ORIGINS
+		...GATEWAY_DEV_CONSOLE_ORIGINS
 	]);
 	const bindHost = params.bindHost?.trim();
 	if (bindHost && !isLoopbackHost(bindHost) && !isAllInterfacesHost(bindHost)) origins.add(`http://${bindHost}:${params.port}`);
@@ -90,4 +87,4 @@ function resolveAllowedBrowserOrigins(params) {
 	return origins;
 }
 //#endregion
-export { GATEWAY_DEV_CONSOLE_ORIGINS, GATEWAY_EXPO_DEV_ORIGINS, buildDefaultCorsOrigins, enumerateLanGatewayCandidates, isAllInterfacesHost, isLoopbackHost, originFromGatewayPublicUrl, resolveAllowedBrowserOrigins, resolveEffectiveGatewayPort, resolveGatewayCorsOrigins, resolveGatewayServiceListenPort };
+export { GATEWAY_DEV_CONSOLE_ORIGINS, buildDefaultCorsOrigins, enumerateLanGatewayCandidates, isAllInterfacesHost, isLoopbackHost, originFromGatewayPublicUrl, resolveAllowedBrowserOrigins, resolveEffectiveGatewayPort, resolveGatewayCorsOrigins, resolveGatewayServiceListenPort };

package/dist/src/gateway/image-generation-setup.js

@@ -3,9 +3,9 @@ import { AgentCatalogRepository, init_repository } from "../agent-catalog/reposi
 import { init_agent_scope } from "../agent/agent-scope.js";
 import { AgentCatalogService } from "../agent-catalog/service.js";
 import { ConfigSchema, init_schema } from "../config/schema.js";
-import { resolveEffectiveAgentConfigForAgent } from "../config/agent-profile.js";
 import { fetchWithTimeoutGuarded } from "../media-shared/http/provider-http.js";
 import "../media-shared/http/index.js";
+import { resolveEffectiveAgentConfigForAgent } from "../config/agent-profile.js";
 import { getImageGenerationProvider, listImageGenerationProvidersSummary } from "../agent/image/generation/provider-registry.js";
 //#region src/gateway/image-generation-setup.ts
 init_repository();

package/dist/src/gateway/index.js

@@ -1,6 +1,6 @@
+import { GatewayLockError, acquireGatewayLock } from "./lock.js";
 import { buildDefaultCorsOrigins, isAllInterfacesHost, isLoopbackHost, resolveEffectiveGatewayPort, resolveGatewayServiceListenPort } from "./host.js";
 import { defaultGatewayBindMode, isContainerEnvironment, resolveGatewayBindHost, resolveGatewayBindHostSync, resolveGatewayBindMode, resolveGatewayEffectiveHost } from "../config/gateway-bind.js";
-import { GatewayLockError, acquireGatewayLock } from "./lock.js";
 import { assertGatewayAuthConfigured, extractToken, resolveGatewayAuth, validateToken } from "./auth.js";
 import { resolveGatewayListenHost, resolveGatewayListenPlan } from "./listen.js";
 import { buckets } from "./rate-limit/buckets.js";