@xopcai/xopc 0.0.370 → 0.0.372

package/dist/src/capabilities/runtime/product.js

@@ -1,5 +1,6 @@
 import { CapabilityError } from "./errors.js";
 import { CapabilityDispatcher } from "./dispatcher.js";
+import { registerAgentCapabilities } from "../../agent-catalog/capabilities.js";
 import { registerLocalAppReadCapabilities } from "../../local-apps/capabilities/read.js";
 import { registerNoteReadCapabilities } from "../../notes/capabilities/read.js";
 import { registerNoteWriteCapabilities } from "../../notes/capabilities/write.js";
@@ -18,7 +19,6 @@ import { registerSceneReadCapabilities } from "../../scenes/capabilities/read.js
 import { registerSceneWriteCapabilities } from "../../scenes/capabilities/write.js";
 import { registerSettingsCapability } from "./settings.js";
 import { registerAppContextCapability } from "./app-context.js";
-import { registerAgentCapabilities } from "../../agent-catalog/capabilities.js";
 //#region src/capabilities/runtime/product.ts
 function createProductDispatcher(getNotes, taskWrites) {
 	const dispatcher = new CapabilityDispatcher();

package/dist/src/cli/commands/agents.js

@@ -1,8 +1,8 @@
 import { normalizeAgentId, validateAgentIdForNewAgent } from "../../agent-catalog/id.js";
 import { AgentCatalogRepository, init_repository } from "../../agent-catalog/repository.js";
 import { init_agent_scope, resolveAgentDir, resolveAgentWorkspaceDir, resolveDefaultAgentId } from "../../agent/agent-scope.js";
-import { resolveEffectiveAgentConfigForAgent } from "../../config/agent-profile.js";
 import { AgentCatalogService } from "../../agent-catalog/service.js";
+import { resolveEffectiveAgentConfigForAgent } from "../../config/agent-profile.js";
 import { colors } from "../utils/colors.js";
 //#region src/cli/commands/agents.ts
 init_repository();

package/dist/src/cli/commands/doctor/checks/provider-auth.js

@@ -1,5 +1,5 @@
-import { PROVIDER_ENV_MAP, init_env_keys } from "../../../../providers/env-keys.js";
 import { AgentCatalogRepository, init_repository } from "../../../../agent-catalog/repository.js";
+import { PROVIDER_ENV_MAP, init_env_keys } from "../../../../providers/env-keys.js";
 import { getModelOAuthProviderIds, init_registry } from "../../../../auth/oauth/registry.js";
 import { CredentialResolver, init_credentials } from "../../../../auth/credentials.js";
 import { getAgentDefaultModelRef, init_schema, parseModelRef } from "../../../../config/schema.js";

package/dist/src/cli/commands/models.js

@@ -1,8 +1,8 @@
 import { AgentCatalogRepository, init_repository } from "../../agent-catalog/repository.js";
+import { AgentCatalogService } from "../../agent-catalog/service.js";
 import { CredentialResolver, init_credentials } from "../../auth/credentials.js";
 import { getAgentDefaultModelRef, init_schema } from "../../config/schema.js";
 import { getAllModels, getAvailableModels, getConfiguredProviders, getProviderAuthState, getProviderDisplayName, init_providers, isProviderConfigured, providerSupportsApiKey, providerSupportsOAuth, resolveModel } from "../../providers/index.js";
-import { AgentCatalogService } from "../../agent-catalog/service.js";
 import { listImageProviderSpecs } from "../../../packages/image-providers/src/catalog.js";
 import "../../../packages/image-providers/src/index.js";
 import { loadConfig } from "../../config/loader.js";

package/dist/src/cli/commands/onboard/model.js

@@ -1,12 +1,12 @@
-import { getApiKeyFromEnv } from "../../../providers/env-keys.js";
 import { AgentCatalogRepository, init_repository } from "../../../agent-catalog/repository.js";
+import { AgentCatalogService } from "../../../agent-catalog/service.js";
+import { getApiKeyFromEnv } from "../../../providers/env-keys.js";
 import { resolveModelsJsonPath } from "../../../config/paths.js";
 import { CredentialResolver, init_credentials } from "../../../auth/credentials.js";
 import { getAgentDefaultModelRef, init_schema } from "../../../config/schema.js";
 import { init_models_json, loadModelsJson, saveModelsJson } from "../../../config/models-json.js";
 import { getModelRegistry } from "../../../providers/model-registry.js";
 import { getAllProviders, getModelsByProvider, getProviderDisplayName, init_providers, providerSupportsApiKey, providerSupportsOAuth } from "../../../providers/index.js";
-import { AgentCatalogService } from "../../../agent-catalog/service.js";
 import { prepareUpdateGlobalDefaults } from "../../../gateway/global-defaults-admin.js";
 import { discoverProviderModels, isProviderApiDiscoverable } from "../../../providers/model-discovery.js";
 import { getXopcCloudCatalogCoordinator } from "../../../providers/xopc-cloud-catalog-coordinator.js";

package/dist/src/cli/utils/init-workspace-core.js

@@ -1,6 +1,6 @@
 import { AgentCatalogRepository, init_repository } from "../../agent-catalog/repository.js";
-import { ConfigSchema, init_schema } from "../../config/schema.js";
 import { AgentCatalogService } from "../../agent-catalog/service.js";
+import { ConfigSchema, init_schema } from "../../config/schema.js";
 import { assertConfigRewriteSafeForRunningGateway, saveConfig } from "../../config/loader.js";
 import { ensureStarterAgentsInitialized } from "../../agent/starter-agents.js";
 import { bootstrapApplicationStateSync } from "../../bootstrap/application-state.js";

package/dist/src/config/agent-profile.js

@@ -1,6 +1,6 @@
-import { normalizeAgentId } from "../agent-catalog/id.js";
 import { resolveEffectiveAgentConfig } from "../agent-config/resolver.js";
 import { init_agent_config } from "../agent-config/index.js";
+import { normalizeAgentId } from "../agent-catalog/id.js";
 import { AgentCatalogRepository, init_repository } from "../agent-catalog/repository.js";
 import { init_agent_scope, resolveAgentWorkspaceDir } from "../agent/agent-scope.js";
 import { getConversationRouting } from "../storage/sqlite/conversation-repository.js";

package/dist/src/endpoint-tools/capability-catalog.js

@@ -1,7 +1,7 @@
 //#region src/endpoint-tools/capability-catalog.ts
 /** Server-owned targeting rules; device descriptors cannot change these defaults. */
 function deviceCapabilityTarget(toolName) {
-	if (/^(mobile|desktop|web|browser)\.device\./.test(toolName) || toolName === "web.page.get_selection") return "turn_origin";
+	if (/^(mobile|desktop|web|browser)\.device\./.test(toolName) || /^(mobile|desktop|web)\.(file\.pick|media\.pick|camera\.capture|contacts\.(pick|search|get)|calendar\.query_(events|free_busy))$/.test(toolName) || toolName === "desktop.clipboard.read" || toolName === "web.page.get_selection") return "turn_origin";
 	return "session_bound";
 }
 //#endregion

package/dist/src/endpoint-tools/invocation-service.js

@@ -33,8 +33,10 @@ var EndpointInvocationService = class {
 		const tool = this.registry.getTool(params.endpointId, params.toolName);
 		if (!tool) return Promise.reject(this.error("TOOL_NOT_FOUND", "Endpoint tool is unavailable"));
 		if (tool.revision !== params.descriptorRevision) return Promise.reject(this.error("TOOL_REVISION_MISMATCH", "Endpoint tool contract changed"));
-		if (params.toolName.endsWith(".device.get_location")) {
-			if (!this.ajv.compile(tool.descriptor.inputSchema)(params.arguments)) return Promise.reject(this.error("INVALID_ARGUMENTS", "Invalid location task request"));
+		if (!this.ajv.compile(tool.descriptor.inputSchema)(params.arguments)) return Promise.reject(this.error("INVALID_ARGUMENTS", "Invalid endpoint tool arguments"));
+		if (params.toolName.startsWith("mobile.calendar.")) {
+			const { startAt, endAt } = params.arguments;
+			if (typeof startAt !== "number" || typeof endAt !== "number" || endAt <= startAt || endAt - startAt > 7 * 864e5) return Promise.reject(this.error("INVALID_ARGUMENTS", "Calendar range must be positive and at most seven days"));
 		}
 		let confirmationRequired;
 		try {
@@ -45,11 +47,12 @@ var EndpointInvocationService = class {
 		}
 		if (params.signal?.aborted) return Promise.reject(this.error("TOOL_CANCELLED", "Endpoint tool call was cancelled"));
 		const endpointPending = [...this.pending.values()].filter((item) => item.endpointId === params.endpointId);
+		if (tool.descriptor.sensitivity === "personal" && tool.descriptor.requiresForeground && endpointPending.some((item) => item.descriptor.sensitivity === "personal" && item.descriptor.requiresForeground)) return Promise.reject(this.error("TOOL_BUSY", "A personal device request is already awaiting user participation"));
 		if (endpointPending.length >= 4) return Promise.reject(this.error("TOOL_BUSY", "Endpoint has reached its invocation limit"));
 		if (endpointPending.filter((item) => item.toolName === params.toolName).length >= tool.descriptor.maxConcurrency) return Promise.reject(this.error("TOOL_BUSY", "Endpoint tool has reached its invocation limit"));
 		const invocationId = crypto.randomUUID();
 		const startedAt = Date.now();
-		const uploadGrant = tool.descriptor.resultKinds.includes("file") ? this.options.uploads?.createGrant(invocationId, params.endpointId, startedAt, params.toolName === "desktop.computer.control" ? "computer-frame" : "durable") : void 0;
+		const uploadGrant = tool.descriptor.resultKinds.includes("file") ? this.options.uploads?.createGrant(invocationId, params.endpointId, startedAt, params.toolName === "desktop.computer.control" ? "computer-frame" : params.toolName.startsWith("mobile.") ? "personal" : "durable", endpoint.principalId) : void 0;
 		try {
 			this.options.audit?.started({
 				id: invocationId,
@@ -72,6 +75,7 @@ var EndpointInvocationService = class {
 				endpointId: params.endpointId,
 				toolName: params.toolName,
 				descriptor: tool.descriptor,
+				arguments: params.arguments,
 				state: "sent",
 				receiptTimer: setTimeout(() => {
 					this.fail(invocationId, this.error("TOOL_TIMEOUT", "Endpoint did not receive the invocation"));
@@ -116,7 +120,7 @@ var EndpointInvocationService = class {
 				clearTimeout(pending.receiptTimer);
 				return;
 			case "tool.progress":
-				if (pending.toolName.endsWith(".device.get_location")) return;
+				if (pending.descriptor.sensitivity === "personal" && pending.descriptor.effect === "read") return;
 				if (pending.state !== "running") return;
 				pending.onProgress?.({
 					...message.payload.message === void 0 ? {} : { message: message.payload.message },
@@ -128,18 +132,27 @@ var EndpointInvocationService = class {
 				try {
 					const validate = this.ajv.compile(pending.descriptor.outputSchema);
 					if (!validate(message.payload.content)) throw new Error(`Endpoint result does not match its contract: ${this.ajv.errorsText(validate.errors)}`);
+					const reading = message.payload.content[0];
+					if (pending.toolName.startsWith("mobile.calendar.") && reading?.type === "json") {
+						const value = reading.value;
+						if (value.startAt !== pending.arguments.startAt || value.endAt !== pending.arguments.endAt || value.events.some((event) => event.endAt <= event.startAt || event.endAt <= value.startAt || event.startAt >= value.endAt) || pending.toolName.endsWith("free_busy") && value.events.some((event) => event.title !== void 0)) throw new Error("Calendar result exceeded the approved scope");
+					}
+					if (pending.toolName === "mobile.contacts.pick" && reading?.type === "json" && pending.arguments.field) {
+						const value = reading.value;
+						if (pending.arguments.field === "phone" && (value.phones.length > 1 || value.emails.length) || pending.arguments.field === "email" && (value.emails.length > 1 || value.phones.length)) throw new Error("Contact result exceeded the selected field");
+					}
 					this.options.uploads?.validateAndClose(invocationId, message.payload.content);
 				} catch (error) {
-					this.fail(invocationId, this.error("PROTOCOL_ERROR", pending.toolName.endsWith(".device.get_location") ? "Invalid location result" : error instanceof Error ? error.message : String(error)));
+					this.fail(invocationId, this.error("PROTOCOL_ERROR", pending.descriptor.sensitivity === "personal" && pending.descriptor.effect === "read" ? "Invalid personal device result" : error instanceof Error ? error.message : String(error)));
 					return;
 				}
 				this.succeed(invocationId, {
 					content: message.payload.content,
-					...message.payload.details === void 0 ? {} : { details: message.payload.details }
+					...message.payload.details === void 0 || pending.descriptor.sensitivity === "personal" && pending.descriptor.effect === "read" ? {} : { details: message.payload.details }
 				});
 				return;
 			case "tool.error":
-				this.fail(invocationId, this.error(message.payload.code, pending.toolName.endsWith(".device.get_location") ? `Location request failed: ${message.payload.code}` : message.payload.message));
+				this.fail(invocationId, this.error(message.payload.code, pending.descriptor.sensitivity === "personal" && pending.descriptor.effect === "read" ? `Personal device request failed: ${message.payload.code}` : message.payload.message));
 				return;
 			case "tool.cancelled": this.fail(invocationId, this.error("TOOL_CANCELLED", "Endpoint cancelled the tool call"));
 		}

package/dist/src/endpoint-tools/policy.js

@@ -1,6 +1,8 @@
+import { DEVICE_EMPTY_INPUT_SCHEMA, ENDPOINT_CONTACT_LIST_OUTPUT_SCHEMA, ENDPOINT_CONTACT_OUTPUT_SCHEMA, ENDPOINT_FILE_OUTPUT_SCHEMA } from "../../packages/endpoint-tools-protocol/src/shared-schemas.js";
 import { BRIDGE_LIST_OUTPUT_SCHEMA, BRIDGE_READ_INPUT_SCHEMA, BRIDGE_READ_OUTPUT_SCHEMA } from "../../packages/endpoint-tools-protocol/src/bridge.js";
 import { LOCATION_INPUT_SCHEMA, LOCATION_OUTPUT_SCHEMA } from "../../packages/endpoint-tools-protocol/src/location.js";
-import { DEVICE_EMPTY_INPUT_SCHEMA, DEVICE_POWER_OUTPUT_SCHEMA, DEVICE_STATE_OUTPUT_SCHEMA, ENDPOINT_CONTACT_LIST_OUTPUT_SCHEMA, ENDPOINT_CONTACT_OUTPUT_SCHEMA, ENDPOINT_FILE_OUTPUT_SCHEMA, ENDPOINT_TEXT_OUTPUT_SCHEMA, canonicalJson, init_src } from "../../packages/endpoint-tools-protocol/src/index.js";
+import { PERSONAL_TOOL_NAMES, personalDescriptor } from "../../packages/endpoint-tools-protocol/src/personal.js";
+import { DEVICE_POWER_OUTPUT_SCHEMA, DEVICE_STATE_OUTPUT_SCHEMA, ENDPOINT_TEXT_OUTPUT_SCHEMA, canonicalJson, init_src } from "../../packages/endpoint-tools-protocol/src/index.js";
 import { COMPUTER_INPUT_SCHEMA, COMPUTER_OUTPUT_SCHEMA, init_src as init_src$1 } from "../../packages/computer-control-contract/src/index.js";
 import { BROWSER_CONTROL_ENDPOINT_DESCRIPTOR, BROWSER_CONTROL_ENDPOINT_INPUT_SCHEMA, BROWSER_CONTROL_ENDPOINT_OUTPUT_SCHEMA, BROWSER_RECORDING_ENDPOINT_DESCRIPTOR, BROWSER_RECORDING_ENDPOINT_INPUT_SCHEMA } from "../../packages/browser-control-contract/src/index.js";
 import Ajv2020 from "ajv/dist/2020.js";
@@ -48,6 +50,10 @@ const POLICY_BY_TOOL = {
 	"mobile.contacts.search": contract("personal.foreground-read", ENDPOINT_CONTACT_LIST_OUTPUT_SCHEMA, ["json"], ["contacts-read"]),
 	"mobile.contacts.get": contract("personal.foreground-read", ENDPOINT_CONTACT_OUTPUT_SCHEMA, ["json"], ["contacts-read"]),
 	"mobile.file.pick": contract("personal.foreground-mediated-read", ENDPOINT_FILE_OUTPUT_SCHEMA, ["file"], ["file-read"], ["personal.foreground-read"]),
+	...Object.fromEntries(PERSONAL_TOOL_NAMES.map((name) => {
+		const descriptor = personalDescriptor(name);
+		return [name, contract(descriptor.policyId, descriptor.outputSchema, descriptor.resultKinds, descriptor.requiredPermissions, ["mobile.file.pick", "mobile.contacts.pick"].includes(name) ? ["personal.foreground-read"] : [], ["mobile.file.pick", "mobile.contacts.pick"].includes(name) ? void 0 : descriptor.inputSchema)];
+	})),
 	"mobile.file.share": contract("user.foreground-mediated-write", ENDPOINT_TEXT_OUTPUT_SCHEMA, ["text"], ["file-share"], ["user.foreground-write"]),
 	"mobile.notification.show": contract("user.foreground-write", ENDPOINT_TEXT_OUTPUT_SCHEMA, ["text"], ["notifications"]),
 	"mobile.device.get_info": contract("public.background-read", ENDPOINT_TEXT_OUTPUT_SCHEMA, ["text"], []),

package/dist/src/endpoint-tools/upload-service.d.ts

@@ -3,6 +3,8 @@ export declare const ENDPOINT_UPLOAD_MAX_BYTES: number;
 export interface EndpointUploadedFile {
     fileId: string;
     invocationId: string;
+    endpointId: string;
+    principalId?: string;
     name: string;
     mimeType: string;
     size: number;
@@ -28,7 +30,7 @@ export declare class EndpointUploadService {
     private readonly pruneTimer;
     private readonly validatingFrames;
     constructor(rootDir: string);
-    createGrant(invocationId: string, endpointId: string, now?: number, profile?: 'durable' | 'computer-frame'): EndpointUploadGrant;
+    createGrant(invocationId: string, endpointId: string, now?: number, profile?: 'durable' | 'computer-frame' | 'personal', principalId?: string): EndpointUploadGrant;
     upload(params: {
         invocationId: string;
         endpointId: string;
@@ -45,7 +47,7 @@ export declare class EndpointUploadService {
     readFile(fileId: string): Uint8Array | undefined;
     getGrantLimits(invocationId: string, endpointId: string, token: string): {
         maxBytes: number;
-        profile: "durable" | "computer-frame";
+        profile: "personal" | "durable" | "computer-frame";
     };
     uploadValidated(params: Parameters<EndpointUploadService['upload']>[0]): Promise<EndpointUploadedFile>;
     /** Single-consumer handoff, inaccessible through generic attachment routes. */

package/dist/src/endpoint-tools/upload-service.js

@@ -31,16 +31,17 @@ var EndpointUploadService = class {
 		this.pruneTimer = setInterval(() => this.pruneFrames(Date.now()), 1e3);
 		this.pruneTimer.unref();
 	}
-	createGrant(invocationId, endpointId, now = Date.now(), profile = "durable") {
+	createGrant(invocationId, endpointId, now = Date.now(), profile = "durable", principalId) {
 		const token = crypto.randomUUID();
 		const grant = {
 			profile,
+			principalId,
 			invocationId,
 			endpointId,
 			token,
 			expiresAt: now + GRANT_TTL_MS,
-			maxBytes: profile === "computer-frame" ? COMPUTER_FRAME_MAX_BYTES : ENDPOINT_UPLOAD_MAX_BYTES,
-			maxFiles: profile === "computer-frame" ? 1 : DEFAULT_MAX_FILES,
+			maxBytes: profile === "computer-frame" ? COMPUTER_FRAME_MAX_BYTES : profile === "personal" ? 10 * 1024 * 1024 : ENDPOINT_UPLOAD_MAX_BYTES,
+			maxFiles: profile === "durable" ? DEFAULT_MAX_FILES : 1,
 			uploadedFileIds: []
 		};
 		this.grants.set(invocationId, grant);
@@ -66,7 +67,7 @@ var EndpointUploadService = class {
 		const fileId = crypto.randomUUID();
 		const path = join(this.rootDir, fileId);
 		const sha256 = crypto.createHash("sha256").update(params.bytes).digest("hex");
-		if (grant.profile === "durable") writeFileSync(path, params.bytes, {
+		if (grant.profile !== "computer-frame") writeFileSync(path, params.bytes, {
 			flag: "wx",
 			mode: 384
 		});
@@ -83,6 +84,8 @@ var EndpointUploadService = class {
 		const file = {
 			fileId,
 			invocationId: params.invocationId,
+			endpointId: params.endpointId,
+			principalId: grant.principalId,
 			name: params.name,
 			mimeType: params.mimeType,
 			size: params.bytes.byteLength,
@@ -154,6 +157,28 @@ var EndpointUploadService = class {
 				validatedFrame: true
 			});
 		}
+		if (grant.profile === "personal" && params.mimeType.startsWith("image/")) try {
+			const image = sharp(params.bytes, {
+				limitInputPixels: 4e7,
+				failOn: "warning"
+			});
+			if (((await image.metadata()).pages ?? 1) !== 1) throw new Error("Animated images are unsupported");
+			const bytes = await image.rotate().resize({
+				width: 2048,
+				height: 2048,
+				fit: "inside",
+				withoutEnlargement: true
+			}).jpeg({ quality: 85 }).toBuffer();
+			return this.upload({
+				...params,
+				bytes,
+				name: params.name.replace(/\.[^.]*$/, "").slice(0, 251) + ".jpg",
+				mimeType: "image/jpeg"
+			});
+		} catch (error) {
+			if (error instanceof EndpointUploadError) throw error;
+			throw new EndpointUploadError("Selected image could not be decoded");
+		}
 		return this.upload(params);
 	}
 	/** Single-consumer handoff, inaccessible through generic attachment routes. */

package/dist/src/extensions/agent-plugins/validation.js

@@ -2,8 +2,8 @@ import { dirname, isAbsolute, join, relative, resolve } from "node:path";
 import { existsSync, lstatSync, readFileSync, readdirSync, realpathSync, statSync } from "node:fs";
 import { createHash } from "node:crypto";
 import { z } from "zod";
-import { validateHeaderName, validateHeaderValue } from "node:http";
 import yaml from "js-yaml";
+import { validateHeaderName, validateHeaderValue } from "node:http";
 //#region src/extensions/agent-plugins/validation.ts
 const PLUGIN_SCHEMA = "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json";
 const MCP_SCHEMA = "https://agent-plugins.org/schemas/1.0.0/mcp.schema.json";

package/dist/src/gateway/agents-admin.js

@@ -1,10 +1,10 @@
 import { normalizeAgentId, validateAgentIdForNewAgent } from "../agent-catalog/id.js";
 import { AgentCatalogRepository, init_repository } from "../agent-catalog/repository.js";
 import { init_agent_scope, listAgentEntries, resolveAgentProfileDir, resolveAgentWorkspaceDir, resolveDefaultAgentId, resolveUserPath } from "../agent/agent-scope.js";
-import { resolveEffectiveAgentProfile } from "../config/agent-profile.js";
 import { AGENT_PROFILE_MARKDOWN_SYSTEM_FILES, REQUIRED_AGENT_PROFILE_MARKDOWN_FILE_SET } from "../agent/context/workspace.js";
-import { isPathUnderWorkspace, resolveWorkspaceSafePath } from "./workspace-editor-path.js";
 import { AgentCatalogService } from "../agent-catalog/service.js";
+import { resolveEffectiveAgentProfile } from "../config/agent-profile.js";
+import { isPathUnderWorkspace, resolveWorkspaceSafePath } from "./workspace-editor-path.js";
 import { GATEWAY_BUILTIN_TOOL_IDS } from "./agent-builtin-tools.js";
 import { resolve } from "node:path";
 import { mkdir, readFile, realpath, stat, unlink, writeFile } from "node:fs/promises";

package/dist/src/gateway/hono/routes/agents.js

@@ -1,6 +1,6 @@
-import { normalizeAgentId } from "../../../agent-catalog/id.js";
 import { AgentEntrySchema, AgentModelsOverrideSchema, AgentProfileSchema, RuntimePolicySchema, SkillOverrideSchema, ToolPoliciesSchema, WorkflowPolicySchema } from "../../../agent-config/schema.js";
 import { init_agent_config } from "../../../agent-config/index.js";
+import { normalizeAgentId } from "../../../agent-catalog/id.js";
 import { init_agent_scope } from "../../../agent/agent-scope.js";
 import { createGatewayAgent, deleteAgentAvatarFile, deleteGatewayAgent, getGatewayAgentEffectiveConfig, listAgentProfileFiles, listGatewayAgents, readAgentAvatarFile, readAgentProfileFile, resolveAgentAvatarImage, updateGatewayAgent, writeAgentAvatarFromBase64, writeAgentProfileFile } from "../../agents-admin.js";
 import { getVoiceModelsConfig } from "../../../config/voice.js";

package/dist/src/gateway/hono/routes/config-patch/misc.js

@@ -1,10 +1,10 @@
 import { BindingsSchema, init_binding_schema } from "../../../../routing/binding-schema.js";
+import { AgentCatalogService } from "../../../../agent-catalog/service.js";
 import { CredentialResolver, init_credentials } from "../../../../auth/credentials.js";
 import { ComputerConfigSchema, init_config } from "../../../../computer/config.js";
 import { ContextPlanningConfigSchema, HomeIntelligenceConfigSchema, KnowledgeMemoryConfigSchema, UserContextConfigSchema, UserModelConfigSchema, init_config as init_config$1 } from "../../../../user-context/config.js";
 import { BrowserConfigSchema, McpConfigSchema, VoiceConfigSchema, init_schema } from "../../../../config/schema.js";
 import { canonicalizeConfiguredMcpServer } from "../../../../config/mcp-config-normalize.js";
-import { AgentCatalogService } from "../../../../agent-catalog/service.js";
 import { mergeGatewaySkillsMarketplacePatch, mergeSessionConfigPatch, mergeUpdateConfigPatch } from "../../../../config/web-patch.js";
 import { assertGatewayAuthConfigured, resolveGatewayAuth } from "../../../auth.js";
 import { isMaskedSecretPatchValue } from "../../lib/mask-secret-length.js";

package/dist/src/gateway/hono/routes/endpoint-compatibility.js

@@ -22,6 +22,7 @@ function registerEndpointCompatibilityRoutes(authenticated) {
 				deviceStateToolsV1: true,
 				hardwareBridgeV1: true,
 				deviceLocationTasksV1: true,
+				mobilePersonalToolsV1: true,
 				...principal.kind === "device" ? { deviceId: principal.deviceId } : {},
 				endpointProtocolVersion: 2,
 				computerControl: COMPUTER_DESCRIPTOR,

package/dist/src/gateway/hono/routes/endpoint-tools.js

@@ -308,6 +308,15 @@ function registerEndpointToolRoutes(authenticated, deps) {
 				message: "Uploaded file is too large"
 			}
 		}, 413);
+		const actor = getGatewayPrincipal(c);
+		const endpoint = deps.service.endpointTools.registry.get(endpointId);
+		if (actor.kind !== "owner" && !(actor.kind === "device" && actor.deviceId === endpoint?.principalId)) return c.json({
+			ok: false,
+			error: {
+				code: "FORBIDDEN",
+				message: "Upload belongs to another device"
+			}
+		}, 403);
 		let bytes;
 		try {
 			const limits = deps.service.endpointTools.uploads.getGrantLimits(invocationId, endpointId, token);
@@ -356,6 +365,14 @@ function registerEndpointToolRoutes(authenticated, deps) {
 	});
 	authenticated.get("/api/endpoint-tools/files/:fileId", (c) => {
 		const file = deps.service.endpointTools.uploads.getFile(c.req.param("fileId"));
+		const actor = getGatewayPrincipal(c);
+		if (file && actor.kind !== "owner" && !(actor.kind === "device" && actor.deviceId === file.principalId)) return c.json({
+			ok: false,
+			error: {
+				code: "FORBIDDEN",
+				message: "Endpoint file is not accessible"
+			}
+		}, 403);
 		const bytes = file && deps.service.endpointTools.uploads.readFile(file.fileId);
 		if (!file || !bytes) return c.json({
 			ok: false,

package/dist/src/gateway/hono/routes/notes.js

@@ -1,9 +1,9 @@
 import { NoteDeleteOutputSchema, NoteGetOutputSchema, ProductReadContracts } from "../../../../packages/gateway-contract/src/capabilities.js";
 import { init_src } from "../../../../packages/gateway-contract/src/index.js";
-import { init_session_key, resolveConversationId } from "../../../routing/session-key.js";
-import { agentExists, getDefaultAgentId, init_resolve_route } from "../../../routing/resolve-route.js";
 import { CapabilityError } from "../../../capabilities/runtime/errors.js";
 import "../../../capabilities/runtime/dispatcher.js";
+import { init_session_key, resolveConversationId } from "../../../routing/session-key.js";
+import { agentExists, getDefaultAgentId, init_resolve_route } from "../../../routing/resolve-route.js";
 import { resolveGatewayEffectiveHost } from "../../../config/gateway-bind.js";
 import { getShareStore } from "../../../share/share-store.js";
 import { resolveShareUrl } from "../../../share/share-url.js";

package/dist/src/gateway/hono/routes/projects.js

@@ -7,12 +7,12 @@ import { loadTranscriptRowsForSession } from "../../../storage/sqlite/transcript
 import { init_sqlite } from "../../../storage/sqlite/index.js";
 import { ActivityService } from "../../../activity/service.js";
 import "../../../activity/index.js";
+import { CapabilityError } from "../../../capabilities/runtime/errors.js";
+import "../../../capabilities/runtime/dispatcher.js";
 import { resolveEffectiveAgentProfile } from "../../../config/agent-profile.js";
 import { listKnowledgeItems, writeKnowledgeItem } from "../../../knowledge-memory/repository.js";
 import "../../../knowledge-memory/index.js";
 import { TaskReadModelProjector } from "../../../tasks/task-read-model-projector.js";
-import { CapabilityError } from "../../../capabilities/runtime/errors.js";
-import "../../../capabilities/runtime/dispatcher.js";
 import { ProjectWorkspaceConflictError, ProjectWorkspaceMissingError } from "../../../projects/workspace-project.js";
 import { inferProjectExecutionMode, inferProjectKind } from "../../../projects/project-kind.js";
 import { ProjectDeletionBlockedError, ProjectWorkspaceInUseError } from "../../../projects/project-service.js";

package/dist/src/gateway/hono/routes/session-input-handler.js

@@ -5,9 +5,9 @@ import { endpointContextSchema } from "../../../../packages/gateway-contract/src
 import { parseUserTurnDocument, userTurnDocumentRefIds } from "../../../../packages/gateway-contract/src/user-turn-document.js";
 import { init_src } from "../../../../packages/gateway-contract/src/index.js";
 import { endpointTurnClaimSchema, init_src as init_src$1 } from "../../../../packages/endpoint-tools-protocol/src/index.js";
-import { init_providers, resolveModel } from "../../../providers/index.js";
 import { CapabilityError } from "../../../capabilities/runtime/errors.js";
 import "../../../capabilities/runtime/dispatcher.js";
+import { init_providers, resolveModel } from "../../../providers/index.js";
 import { getModelThinking } from "../../../providers/model-thinking.js";
 import { validateWebchatAttachments, validateWebchatContent } from "../../chat-limits.js";
 import { isTaskDestructiveCommand } from "../../../session/reset-triggers.js";

package/dist/src/gateway/hono/routes/tasks.js

@@ -6,9 +6,9 @@ import { hasGatewayScope, init_gateway_scopes } from "../../security/gateway-sco
 import { enqueueTaskChangedEvent, init_task_change_events } from "../../../tasks/task-change-events.js";
 import { TaskRepository, init_task_repository } from "../../../tasks/task-repository.js";
 import { TaskRunRepository, init_task_run_repository } from "../../../tasks/task-run-repository.js";
-import { TaskConversationRepository } from "../../../tasks/task-conversation-repository.js";
 import { CapabilityError } from "../../../capabilities/runtime/errors.js";
 import "../../../capabilities/runtime/dispatcher.js";
+import { TaskConversationRepository } from "../../../tasks/task-conversation-repository.js";
 import { TaskCriterionReviewRepository } from "../../../tasks/task-criterion-review-repository.js";
 import { TaskContextMutationOutputSchema } from "../../../tasks/capabilities/relations.js";
 import { TaskDeleteOutputSchema } from "../../../tasks/capabilities/management.js";

package/dist/src/gateway/image-generation-setup.js

@@ -1,11 +1,11 @@
 import { normalizeAgentId } from "../agent-catalog/id.js";
 import { AgentCatalogRepository, init_repository } from "../agent-catalog/repository.js";
 import { init_agent_scope } from "../agent/agent-scope.js";
+import { AgentCatalogService } from "../agent-catalog/service.js";
 import { ConfigSchema, init_schema } from "../config/schema.js";
 import { resolveEffectiveAgentConfigForAgent } from "../config/agent-profile.js";
 import { fetchWithTimeoutGuarded } from "../media-shared/http/provider-http.js";
 import "../media-shared/http/index.js";
-import { AgentCatalogService } from "../agent-catalog/service.js";
 import { getImageGenerationProvider, listImageGenerationProvidersSummary } from "../agent/image/generation/provider-registry.js";
 //#region src/gateway/image-generation-setup.ts
 init_repository();

package/dist/src/gateway/service.js

@@ -91,6 +91,10 @@ import { DiscussionSealer } from "../discussions/sealer.js";
 import "../discussions/index.js";
 import { EndpointToolRuntime } from "../endpoint-tools/runtime.js";
 import "../endpoint-tools/index.js";
+import { HomeCapabilityPreflightService } from "../home-intelligence/capability-preflight.js";
+import { HomeAdviceGenerator } from "../home-intelligence/generator.js";
+import { HomeIntelligenceHost } from "../home-intelligence/host.js";
+import { HomeSnapshotBuilder } from "../home-intelligence/snapshot.js";
 import { assertGatewayAuthConfigured, extractToken, resolveGatewayAuth, validateToken } from "./auth.js";
 import { prepareAutomationAgentSession } from "./automation-agent-session.js";
 import { stopTailscaleExposure } from "./tailscale-lifecycle.js";
@@ -155,10 +159,6 @@ import { TaskMainUpdateDecisionService } from "../tasks/task-main-update-decisio
 import { selectTaskMainUpdateAttempt, submitAndConfirmTaskMainUpdate } from "../tasks/task-main-update-input.js";
 import { checkAppContextAccess, prepareAppContext } from "./service/app-context-access.js";
 import { applyAutomaticVoiceLanguage, inferProductLanguageFromEnvironment, initializeVoiceDefaults } from "../voice/language-profile.js";
-import { HomeAdviceGenerator } from "../home-intelligence/generator.js";
-import { HomeIntelligenceHost } from "../home-intelligence/host.js";
-import { HomeSnapshotBuilder } from "../home-intelligence/snapshot.js";
-import { HomeCapabilityPreflightService } from "../home-intelligence/capability-preflight.js";
 import crypto from "node:crypto";
 //#region src/gateway/service.ts
 init_session_repository();

package/dist/src/gateway/xopc-cloud-capability-setup.js

@@ -1,8 +1,8 @@
 import { AgentCatalogRepository, init_repository } from "../agent-catalog/repository.js";
+import { AgentCatalogService } from "../agent-catalog/service.js";
 import { getModelCatalogStore, init_model_catalog_store } from "../providers/model-catalog-store.js";
 import { getAvailableModels, init_providers } from "../providers/index.js";
 import { compareCatalogModels } from "../providers/model-catalog-ranking.js";
-import { AgentCatalogService } from "../agent-catalog/service.js";
 import { prepareUpdateGlobalDefaults } from "./global-defaults-admin.js";
 //#region src/gateway/xopc-cloud-capability-setup.ts
 init_repository();

package/dist/src/home-intelligence/host.js

@@ -1,10 +1,10 @@
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
-import { HomeAdviceBudgetExceededError, isHomeProseLocalized } from "./generator.js";
 import { homePatternKey } from "./strategy.js";
-import { HomeAdvicePolicy } from "./policy.js";
 import { HomeIntelligenceRepository } from "./repository.js";
 import { HomeOpportunityApplicationService } from "./application-service.js";
+import { HomeAdvicePolicy } from "./policy.js";
+import { HomeAdviceBudgetExceededError, isHomeProseLocalized } from "./generator.js";
 import { buildHomeOpportunityNotification } from "./notification.js";
 import { createHash } from "node:crypto";
 //#region src/home-intelligence/host.ts

package/dist/src/local-apps/service.js

@@ -5,10 +5,10 @@ import { currentOperationId, init_operation_context } from "../infra/operation-c
 import { afterSqliteCommit, init_transaction, runSqliteWriteTransaction } from "../storage/sqlite/transaction.js";
 import { ExtensionCapabilityBindingsSchema, extensionCapabilityPermissions } from "../../packages/gateway-contract/src/extension-capabilities.js";
 import { init_src } from "../../packages/gateway-contract/src/index.js";
+import { CapabilityError } from "../capabilities/runtime/errors.js";
 import { init_paths, resolveExtensionsDir } from "../config/paths.js";
 import { slugifyProjectName } from "../projects/project-store.js";
 import { LocalAppStore } from "./store.js";
-import { CapabilityError } from "../capabilities/runtime/errors.js";
 import { DomainOutboxDispatcher } from "../infra/domain-outbox-dispatcher.js";
 import { validateLocalAppCapabilityContracts } from "./capabilities/contracts.js";
 import { buildLocalAppFixGuidance } from "./fix-guidance.js";

package/dist/src/notes/agent-context.js

@@ -1,8 +1,8 @@
 import { getNoteAgentContextRecord, upsertNoteAgentContextRecord } from "../storage/sqlite/note-agent-context-repository.js";
 import { init_sqlite } from "../storage/sqlite/index.js";
+import { extractDocumentText } from "../document-understanding/extract.js";
 import { resolveImageModelConfigForTool } from "../agent/image/tool-model-config.js";
 import { describeImagesWithFallback } from "../agent/image/understanding/runtime.js";
-import { extractDocumentText } from "../document-understanding/extract.js";
 import { transcribe } from "../voice/stt/transcribe-core.js";
 import { isSTTAvailable } from "../voice/stt/availability.js";
 import { mergeSttConfigFromAppConfig } from "../voice/stt/config.js";

package/dist/src/personal-agent/service.js

@@ -4,12 +4,12 @@ import { init_config_repository, setSessionConfig } from "../storage/sqlite/conf
 import { ResponsePreferencesSchema } from "../agent-config/schema.js";
 import { init_agent_config } from "../agent-config/index.js";
 import { AgentCatalogRepository, init_repository } from "../agent-catalog/repository.js";
+import { AgentCatalogService } from "../agent-catalog/service.js";
 import { createConversation, init_conversation_repository } from "../storage/sqlite/conversation-repository.js";
 import { getAvailableModels, init_providers } from "../providers/index.js";
 import { DEFAULT_PERSONAL_PREFERENCES, getPersonalAgent, personalAgentId } from "./repository.js";
 import { PERSONAL_MAIN_TOOL_IDS, PERSONAL_READ_TOOL_ALIASES } from "./policy.js";
 import { getModelThinking } from "../providers/model-thinking.js";
-import { AgentCatalogService } from "../agent-catalog/service.js";
 import { personalInstructions, upgradePersonalInstructions } from "./prompts.js";
 import { completePersonalOnboarding } from "./onboarding.js";
 import { z } from "zod";

package/dist/src/tasks/capabilities/read.js

@@ -2,10 +2,10 @@ import { ProductReadContracts } from "../../../packages/gateway-contract/src/cap
 import { init_src } from "../../../packages/gateway-contract/src/index.js";
 import { TaskRepository, init_task_repository } from "../task-repository.js";
 import { TaskRunRepository, init_task_run_repository } from "../task-run-repository.js";
-import { TaskConversationRepository } from "../task-conversation-repository.js";
-import { TaskReadModelProjector } from "../task-read-model-projector.js";
 import { CapabilityError } from "../../capabilities/runtime/errors.js";
 import { defineReadCapability } from "../../capabilities/runtime/dispatcher.js";
+import { TaskConversationRepository } from "../task-conversation-repository.js";
+import { TaskReadModelProjector } from "../task-read-model-projector.js";
 import { TaskContextRepository } from "../task-context-repository.js";
 import { TaskDependencyService } from "../task-dependency-service.js";
 import { TaskCriterionReviewRepository } from "../task-criterion-review-repository.js";

package/dist/src/tui/backends/embedded-backend.js

@@ -10,6 +10,7 @@ import { getSessionMetadata } from "../../storage/sqlite/session-read-repository
 import { init_sqlite } from "../../storage/sqlite/index.js";
 import { normalizeAgentId } from "../../agent-catalog/id.js";
 import { init_agent_scope, listAgentEntries } from "../../agent/agent-scope.js";
+import { AgentCatalogService } from "../../agent-catalog/service.js";
 import { init_paths } from "../../config/paths.js";
 import { getAgentDefaultModelRef, init_schema } from "../../config/schema.js";
 import { init_agent_session_key, resolveAgentIdFromConversationId } from "../../routing/agent-session-key.js";
@@ -22,7 +23,6 @@ import { buildSessionTimeline } from "../../session/transcript-outline.js";
 import { transcriptRowsToClientHistory } from "../../session/client-history.js";
 import { createCreateShareTool, isShareToolAvailable } from "../../agent/tools/create-share-tool.js";
 import { evictEmbeddedSessionRunner } from "../../agent/embedded/session-runner.js";
-import { AgentCatalogService } from "../../agent-catalog/service.js";
 import { SessionIndex } from "../../session/manager.js";
 import "../../session/index.js";
 import { parseModelRef } from "../../agent/models/selection.js";

package/dist/src/voice/realtime/persona-context.js

@@ -1,6 +1,6 @@
 import { init_agent_scope, resolveAgentProfileDir } from "../../agent/agent-scope.js";
-import { resolveEffectiveAgentProfileForSession } from "../../config/agent-profile.js";
 import { DEFAULT_SOUL_FILENAME } from "../../agent/context/workspace.js";
+import { resolveEffectiveAgentProfileForSession } from "../../config/agent-profile.js";
 import { loadProfileBootstrapFiles } from "../../agent/bootstrap/load-bootstrap-files.js";
 import { join } from "node:path";
 import { statSync } from "node:fs";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xopcai/xopc",
-  "version": "0.0.370",
+  "version": "0.0.372",
   "description": "Local-first personal AI with Ada, task delegation, files, projects, workflows, and automations. Use cloud or local models.",
   "type": "module",
   "main": "dist/src/index.js",
@@ -165,14 +165,14 @@
     "vitepress": "^1.6.4",
     "vitest": "4.1.5",
     "vue": "^3.5.35",
-    "@xopcai/browser-control-contract": "0.1.0",
     "@xopcai/computer-control-contract": "0.1.0",
+    "@xopcai/browser-control-contract": "0.1.0",
     "@xopcai/endpoint-tools-client": "0.0.0",
     "@xopcai/endpoint-tools-protocol": "0.0.0",
-    "@xopcai/image-providers": "0.1.0",
     "@xopcai/gateway-contract": "0.0.0",
-    "@xopcai/realtime-client": "0.0.0",
-    "@xopcai/realtime-protocol": "0.0.0"
+    "@xopcai/image-providers": "0.1.0",
+    "@xopcai/realtime-protocol": "0.0.0",
+    "@xopcai/realtime-client": "0.0.0"
   },
   "scripts": {
     "generate:device-tools": "tsx scripts/devices/generate-mobile-tools.mts",