@xopcai/xopc 0.0.372 → 0.0.374

package/dist/src/cli/commands/models.js

@@ -1,8 +1,11 @@
+import { creditDecimal } from "../../../packages/gateway-contract/src/cloud-credits.js";
+import { init_src } from "../../../packages/gateway-contract/src/index.js";
 import { AgentCatalogRepository, init_repository } from "../../agent-catalog/repository.js";
 import { AgentCatalogService } from "../../agent-catalog/service.js";
 import { CredentialResolver, init_credentials } from "../../auth/credentials.js";
 import { getAgentDefaultModelRef, init_schema } from "../../config/schema.js";
 import { getAllModels, getAvailableModels, getConfiguredProviders, getProviderAuthState, getProviderDisplayName, init_providers, isProviderConfigured, providerSupportsApiKey, providerSupportsOAuth, resolveModel } from "../../providers/index.js";
+import { XopcCloudAccountService } from "../../providers/xopc-cloud-account-service.js";
 import { listImageProviderSpecs } from "../../../packages/image-providers/src/catalog.js";
 import "../../../packages/image-providers/src/index.js";
 import { loadConfig } from "../../config/loader.js";
@@ -20,6 +23,7 @@ init_credentials();
 init_schema();
 init_repository();
 init_providers();
+init_src();
 const IMAGE_GENERATION_IDS = new Set(listImageProviderSpecs().flatMap((provider) => provider.models.map((model) => model.id)));
 const VISION_IDS = new Set([
 	"gpt-6-sol",
@@ -222,6 +226,43 @@ function createModelsCommand(_ctx) {
 	cmd.command("set <model>").description("Set the default model").action(async (model) => {
 		await runModelsSet(model);
 	});
+	const cloud = cmd.command("cloud").description("Inspect XOPC Cloud Credit usage");
+	cloud.command("balance").option("--json", "Output the versioned Credit summary").action(async (options) => {
+		const summary = await new XopcCloudAccountService().getSummary();
+		if (!summary) throw new Error("XOPC Cloud is not configured");
+		if (options.json) {
+			console.log(JSON.stringify(summary, null, 2));
+			return;
+		}
+		console.log(`Available: ${creditDecimal(summary.balance.availableCreditMicro)} Credits`);
+		console.log(`Reserved: ${creditDecimal(summary.balance.usageReservedCreditMicro)} Credits`);
+		console.log(`Last 7 days: ${creditDecimal(summary.usage.chargedCreditMicro)} Credits`);
+		console.log(`Details: ${summary.links.details}`);
+	});
+	cloud.command("receipt <requestId>").option("--json", "Output the billing receipt").action(async (requestId, options) => {
+		const receipt = await new XopcCloudAccountService().getReceipt(requestId);
+		if (!receipt) throw new Error("XOPC Cloud is not configured");
+		if (options.json) {
+			console.log(JSON.stringify(receipt, null, 2));
+			return;
+		}
+		console.log(`State: ${receipt.state}`);
+		console.log(`Charged: ${receipt.chargedCreditMicro === null ? "pending" : `${creditDecimal(receipt.chargedCreditMicro)} Credits`}`);
+		console.log(`Reserved: ${creditDecimal(receipt.reservedCreditMicro)} Credits`);
+		console.log(`Released: ${creditDecimal(receipt.releasedCreditMicro)} Credits`);
+	});
+	cloud.command("budget <id>").option("--json", "Output the budget contract").action(async (id, options) => {
+		const budget = await new XopcCloudAccountService().getBudget(id);
+		if (!budget) throw new Error("XOPC Cloud is not configured");
+		if (options.json) {
+			console.log(JSON.stringify(budget, null, 2));
+			return;
+		}
+		console.log(`Limit: ${creditDecimal(budget.limitCreditMicro)} Credits`);
+		console.log(`Charged: ${creditDecimal(budget.chargedCreditMicro)} Credits`);
+		console.log(`Reserved: ${creditDecimal(budget.reservedCreditMicro)} Credits`);
+		console.log(`Remaining: ${creditDecimal(budget.remainingCreditMicro)} Credits`);
+	});
 	const auth = cmd.command("auth").description("Manage model provider auth");
 	auth.command("list").description("List model auth credentials").option("--provider <id>", "Filter by provider id").option("--json", "Output as JSON", false).action(async (options) => {
 		await runAuthList(options);

package/dist/src/computer/runtime.js

@@ -4,6 +4,7 @@ import { resolveEffectiveAgentConfigForSession } from "../config/agent-profile.j
 import { COMPUTER_CONTROL_TOOL, ComputerAppSchema, ComputerObservationSchema, ComputerWindowSchema, init_src } from "../../packages/computer-control-contract/src/index.js";
 import { ComputerServiceLimitsSchema, computerModelProfile, init_model_policy } from "./model-policy.js";
 import { getApiKey, init_providers, resolveModel } from "../providers/index.js";
+import { rejectUnbudgetedCloudTransport } from "../providers/xopc-cloud-credit-budget.js";
 import { enterComputerControl, leaveComputerControl } from "./control-guard.js";
 import { ComputerDiagnosticSchema, ComputerOperationError, computerDiagnostic, computerRecovery } from "./errors.js";
 import { createComputerModelAdapter, predictComputerStep, readComputerJson } from "./model-adapter.js";
@@ -130,6 +131,7 @@ var ComputerRuntime = class {
 			throw new Error("COMPUTER_DISABLED");
 		}
 		let s = this.sessions.get(owner);
+		if (s?.binding.modelRef.startsWith("xopc-cloud/")) rejectUnbudgetedCloudTransport("computer use");
 		if (input.op === "discover") {
 			const endpoint = this.resolveEndpoint(owner);
 			const id = randomUUID();
@@ -161,6 +163,7 @@ var ComputerRuntime = class {
 			let deployment;
 			let serviceLimits;
 			if (model.provider === "xopc-cloud") {
+				rejectUnbudgetedCloudTransport("computer use");
 				const response = await fetch(`${model.baseUrl.replace(/\/$/, "")}/models`, {
 					headers: { Authorization: `Bearer ${apiKey}` },
 					redirect: "error",

package/dist/src/config/gateway-bind.js

@@ -1,8 +1,9 @@
+import { init_host, isLoopbackHost } from "../gateway/host.js";
 import { getTailnetIPv4Sync } from "../infra/tailscale.js";
-import { isLoopbackHost } from "../gateway/host.js";
 import { existsSync } from "node:fs";
 import net from "node:net";
 //#region src/config/gateway-bind.ts
+init_host();
 function resolveGatewayBindMode(cfg, bindOverride) {
 	if (bindOverride) return bindOverride;
 	return cfg.gateway?.bind ?? defaultGatewayBindMode();

package/dist/src/config/index.js

@@ -5,7 +5,7 @@ import { resolveAgentWorkspaceDir } from "../agent/agent-scope.js";
 import { FILENAMES, WORKSPACE_FILES, existsSync, hasBundledExtensionManifest, init_paths, resolveAgentAuthProfilesPath, resolveAgentDir, resolveAgentHomeDir, resolveAgentProfileDir, resolveAgentProfileMarkdownPath, resolveAuthProfilesPath, resolveBinDir, resolveBundledExtensionsDir, resolveBundledSkillsDir, resolveConfigPath, resolveCredentialsDir, resolveExtensionSdkPath, resolveExtensionsDir, resolveExtensionsLockPath, resolveInboxDir, resolveInboxMessagePath, resolveInboxPendingDir, resolveInboxProcessedDir, resolveLogPath, resolveLogsDir, resolveModelsJsonPath, resolveNodeBinDir, resolveNodeBinPath, resolveNodeToolsDir, resolveNpmBinPath, resolveOAuthPath, resolvePidPath, resolveSkillPath, resolveSkillsCachePath, resolveSkillsDir, resolveSkillsLockPath, resolveSocketPath, resolveStatusPath, resolveToolsDir, resolveWorkspaceExtensionsDir, resolveWorkspaceFile, resolveWorkspaceStateDir, resolveWorkspaceStatePath, resolveXopcBinPath } from "./paths.js";
 import { TelegramAccountConfigSchema, TelegramConfigSchema, TelegramGroupConfigSchema, TelegramTopicConfigSchema } from "../../extensions/telegram/src/config-schema.js";
 import { WeixinAccountConfigSchema, WeixinConfigSchema } from "../../extensions/weixin/src/config-schema.js";
-import { AgentImageGenerationModelSchema, AgentModelRefSchema, AgentModelsSchema, BrowserConfigSchema, ChannelsConfigSchema, CommandsConfigSchema, ConfigSchema, ConnectorsConfigSchema, ExperimentalConfigSchema, ExtensionSecurityConfigSchema, ExtensionSlotsConfigSchema, ExtensionsConfigSchema, GatewayAuthRateLimitSchema, GatewayAuthSchema, GatewayBindModeSchema, GatewayChannelConnectDeferModeSchema, GatewayConfigSchema, GatewayModeSchema, GatewayRemoteSchema, GatewayScenesConfigSchema, GatewaySecuritySchema, GatewayTailscaleConsentSchema, GatewayTailscaleSchema, GatewayTlsSchema, GatewayTrustedProxySchema, GatewayWebchatConfigSchema, McpConfigSchema, McpOAuthConfigSchema, McpServerSchema, MediaUnderstandingCapabilitiesSchema, MediaUnderstandingModelSchema, MessagesConfigSchema, ModelCatalogConfigSchema, ModelsDevConfigSchema, ProviderAuthConfigSchema, ProviderAzureConfigSchema, ProviderRequestOverridesSchema, ProvidersConfigSchema, RuntimeToolsConfigSchema, STTConfigSchema, STTFallbackConfigSchema, STTProviderConfigSchema, SearchProviderEntrySchema, SessionConfigSchema, SessionDmScopeSchema, SessionResetByTypeSchema, SessionResetConfigSchema, SessionResetModeSchema, SessionScopeSchema, SessionStorageConfigSchema, TTSConfigSchema, TTSEdgeConfigSchema, TTSFallbackConfigSchema, TTSModelOverridesConfigSchema, TTSProviderConfigSchema, TTSSummarizationConfigSchema, ToolsConfigSchema, ToolsMediaAudioConfigSchema, ToolsMediaConfigSchema, TunnelConfigSchema, TunnelConsentSchema, UpdateAutoConfigSchema, UpdateConfigSchema, VoiceConfigSchema, VoiceRefinementConfigSchema, WebSearchConfigSchema, WebToolsConfigSchema, WebsiteBlocklistSchema, WorkspaceConfigSchema, WorkspaceImportConfigSchema, getAgentDefaultImageGenerationModelConfig, getAgentDefaultImageModelConfig, getAgentDefaultModelRef, init_schema, parseModelRef } from "./schema.js";
+import { AgentImageGenerationModelSchema, AgentModelRefSchema, AgentModelsSchema, BrowserConfigSchema, ChannelsConfigSchema, CommandsConfigSchema, ConfigSchema, ConnectorsConfigSchema, ExperimentalConfigSchema, ExtensionSecurityConfigSchema, ExtensionSlotsConfigSchema, ExtensionsConfigSchema, GatewayAuthRateLimitSchema, GatewayAuthSchema, GatewayBindModeSchema, GatewayChannelConnectDeferModeSchema, GatewayConfigSchema, GatewayModeSchema, GatewayRemoteSchema, GatewayScenesConfigSchema, GatewaySecuritySchema, GatewayTailscaleConsentSchema, GatewayTailscaleSchema, GatewayTlsSchema, GatewayTrustedProxySchema, GatewayWebchatConfigSchema, McpConfigSchema, McpOAuthConfigSchema, McpServerSchema, MediaUnderstandingCapabilitiesSchema, MediaUnderstandingModelSchema, MessagesConfigSchema, ModelCatalogConfigSchema, ModelsDevConfigSchema, ProviderAuthConfigSchema, ProviderAzureConfigSchema, ProviderRequestOverridesSchema, ProvidersConfigSchema, RuntimeToolsConfigSchema, STTConfigSchema, STTFallbackConfigSchema, STTProviderConfigSchema, SearchProviderEntrySchema, SessionConfigSchema, SessionDmScopeSchema, SessionResetByTypeSchema, SessionResetConfigSchema, SessionResetModeSchema, SessionScopeSchema, SessionStorageConfigSchema, TTSConfigSchema, TTSEdgeConfigSchema, TTSFallbackConfigSchema, TTSModelOverridesConfigSchema, TTSProviderConfigSchema, TTSSummarizationConfigSchema, ToolsConfigSchema, ToolsMediaAudioConfigSchema, ToolsMediaConfigSchema, TunnelBrokerUrlSchema, TunnelConfigSchema, TunnelConsentSchema, UpdateAutoConfigSchema, UpdateConfigSchema, VoiceConfigSchema, VoiceRefinementConfigSchema, WebSearchConfigSchema, WebToolsConfigSchema, WebsiteBlocklistSchema, WorkspaceConfigSchema, WorkspaceImportConfigSchema, getAgentDefaultImageGenerationModelConfig, getAgentDefaultImageModelConfig, getAgentDefaultModelRef, init_schema, parseModelRef } from "./schema.js";
 import { applyConfigOverrides, getConfigOverrides, resetConfigOverrides, setConfigOverride, unsetConfigOverride } from "./runtime-overrides.js";
 import { extractProfileAgentId, resolveEffectiveAgentConfigForAgent, resolveEffectiveAgentConfigForSession, resolveEffectiveAgentProfile, resolveEffectiveAgentProfileForSession } from "./agent-profile.js";
 import { clearConfigValueCache, getAllowedCommands, getCacheStats, init_resolve_config_value, resolveConfigValue, resolveHeaders, testApiKeyResolution } from "./resolve-config-value.js";
@@ -26,4 +26,4 @@ init_workspace_path();
 init_models_json();
 init_resolve_config_value();
 //#endregion
-export { AgentImageGenerationModelSchema, AgentModelRefSchema, AgentModelsSchema, BASE_RELOAD_RULES, BrowserConfigSchema, ChannelsConfigSchema, CommandsConfigSchema, ConfigHotReloader, ConfigSchema, ConnectorsConfigSchema, CustomModelSchema, ENV_VARS, ExperimentalConfigSchema, ExtensionSecurityConfigSchema, ExtensionSlotsConfigSchema, ExtensionsConfigSchema, FILENAMES, GatewayAuthRateLimitSchema, GatewayAuthSchema, GatewayBindModeSchema, GatewayChannelConnectDeferModeSchema, GatewayConfigSchema, GatewayModeSchema, GatewayRemoteSchema, GatewayScenesConfigSchema, GatewaySecuritySchema, GatewayTailscaleConsentSchema, GatewayTailscaleSchema, GatewayTlsSchema, GatewayTrustedProxySchema, GatewayWebchatConfigSchema, ImageGenerationCapabilitiesSchema, ImageGenerationModelSchema, ImageGenerationProviderSchema, McpConfigSchema, McpOAuthConfigSchema, McpServerSchema, MediaUnderstandingCapabilitiesSchema, MediaUnderstandingModelSchema, MessagesConfigSchema, ModelCatalogConfigSchema, ModelOverrideSchema, ModelsDevConfigSchema, ModelsJsonSchema, OpenAICompatSchema, OpenAICompletionsCompatSchema, OpenAIResponsesCompatSchema, OpenRouterRoutingSchema, ProfileManager, ProviderAuthConfigSchema, ProviderAzureConfigSchema, ProviderConfigSchema, ProviderRequestOverridesSchema, ProvidersConfigSchema, RuntimeToolsConfigSchema, STTConfigSchema, STTFallbackConfigSchema, STTProviderConfigSchema, SearchProviderEntrySchema, SessionConfigSchema, SessionDmScopeSchema, SessionResetByTypeSchema, SessionResetConfigSchema, SessionResetModeSchema, SessionScopeSchema, SessionStorageConfigSchema, TTSConfigSchema, TTSEdgeConfigSchema, TTSFallbackConfigSchema, TTSModelOverridesConfigSchema, TTSProviderConfigSchema, TTSSummarizationConfigSchema, TelegramAccountConfigSchema, TelegramConfigSchema, TelegramGroupConfigSchema, TelegramTopicConfigSchema, ToolsConfigSchema, ToolsMediaAudioConfigSchema, ToolsMediaConfigSchema, TunnelConfigSchema, TunnelConsentSchema, UpdateAutoConfigSchema, UpdateConfigSchema, VercelGatewayRoutingSchema, VoiceConfigSchema, VoiceRefinementConfigSchema, WORKSPACE_FILES, WebSearchConfigSchema, WebToolsConfigSchema, WebsiteBlocklistSchema, WeixinAccountConfigSchema, WeixinConfigSchema, WorkspaceConfigSchema, WorkspaceImportConfigSchema, XOPC_DB_FILENAME, applyConfigOverrides, assertConfigRewriteSafeForRunningGateway, buildReloadPlan, canonicalizeConfiguredMcpServer, clearConfigValueCache, createProfile, deleteProfile, diffConfigPaths, existsSync, expandWorkspacePathString, extractProfileAgentId, formatThinkingLevels, getAgentDefaultImageGenerationModelConfig, getAgentDefaultImageModelConfig, getAgentDefaultModelRef, getAllowedCommands, getCacheStats, getConfigOverrides, getCurrentProfile, getDefaultModelValues, resolveModelsJsonPath as getModelsJsonPath, getProfileManager, getProfileNameFromDir, getSwitchCommand, getWorkspacePath, hasBundledExtensionManifest, listAgentProfileMarkdownDirs, listAgentWorkspaceDirs, listProfiles, listThinkingLevels, loadConfig, loadModelsJson, matchReloadRule, modelsJsonExists, normalizeConfiguredMcpServers, normalizeElevatedMode, normalizeReasoningLevel, normalizeThinkLevel, normalizeVerboseLevel, normalizeWorkspaceDir, parseModelRef, resetConfigOverrides, resolveAgentAuthProfilesPath, resolveAgentDir, resolveAgentHomeDir, resolveAgentProfileDir, resolveAgentProfileMarkdownPath, resolveAgentWorkspaceDir, resolveAuthProfilesPath, resolveBinDir, resolveBundledExtensionsDir, resolveBundledSkillsDir, resolveConfigPath, resolveConfigValue, resolveCredentialsDir, resolveDefaultAgentWorkspaceDir, resolveEffectiveAgentConfigForAgent, resolveEffectiveAgentConfigForSession, resolveEffectiveAgentProfile, resolveEffectiveAgentProfileForSession, resolveExtensionSdkPath, resolveExtensionsDir, resolveExtensionsLockPath, resolveHeaders, resolveHomeDir, resolveInboxDir, resolveInboxMessagePath, resolveInboxPendingDir, resolveInboxProcessedDir, resolveLogPath, resolveLogsDir, resolveModelsJsonPath, resolveNodeBinDir, resolveNodeBinPath, resolveNodeToolsDir, resolveNpmBinPath, resolveOAuthPath, resolvePidPath, resolveProfileStateDir, resolveSkillPath, resolveSkillsCachePath, resolveSkillsDir, resolveSkillsLockPath, resolveSocketPath, resolveStateDir, resolveStatusPath, resolveToolsDir, resolveWorkspaceExtensionsDir, resolveWorkspaceFile, resolveWorkspaceRoot, resolveWorkspaceStateDir, resolveWorkspaceStatePath, resolveXopcBinPath, resolveXopcCloudCatalogCachePath, resolveXopcDatabasePath, saveConfig, saveModelsJson, setConfigOverride, testApiKeyResolution, thinkLevelToNumber, unsetConfigOverride, validateModelsConfig };
+export { AgentImageGenerationModelSchema, AgentModelRefSchema, AgentModelsSchema, BASE_RELOAD_RULES, BrowserConfigSchema, ChannelsConfigSchema, CommandsConfigSchema, ConfigHotReloader, ConfigSchema, ConnectorsConfigSchema, CustomModelSchema, ENV_VARS, ExperimentalConfigSchema, ExtensionSecurityConfigSchema, ExtensionSlotsConfigSchema, ExtensionsConfigSchema, FILENAMES, GatewayAuthRateLimitSchema, GatewayAuthSchema, GatewayBindModeSchema, GatewayChannelConnectDeferModeSchema, GatewayConfigSchema, GatewayModeSchema, GatewayRemoteSchema, GatewayScenesConfigSchema, GatewaySecuritySchema, GatewayTailscaleConsentSchema, GatewayTailscaleSchema, GatewayTlsSchema, GatewayTrustedProxySchema, GatewayWebchatConfigSchema, ImageGenerationCapabilitiesSchema, ImageGenerationModelSchema, ImageGenerationProviderSchema, McpConfigSchema, McpOAuthConfigSchema, McpServerSchema, MediaUnderstandingCapabilitiesSchema, MediaUnderstandingModelSchema, MessagesConfigSchema, ModelCatalogConfigSchema, ModelOverrideSchema, ModelsDevConfigSchema, ModelsJsonSchema, OpenAICompatSchema, OpenAICompletionsCompatSchema, OpenAIResponsesCompatSchema, OpenRouterRoutingSchema, ProfileManager, ProviderAuthConfigSchema, ProviderAzureConfigSchema, ProviderConfigSchema, ProviderRequestOverridesSchema, ProvidersConfigSchema, RuntimeToolsConfigSchema, STTConfigSchema, STTFallbackConfigSchema, STTProviderConfigSchema, SearchProviderEntrySchema, SessionConfigSchema, SessionDmScopeSchema, SessionResetByTypeSchema, SessionResetConfigSchema, SessionResetModeSchema, SessionScopeSchema, SessionStorageConfigSchema, TTSConfigSchema, TTSEdgeConfigSchema, TTSFallbackConfigSchema, TTSModelOverridesConfigSchema, TTSProviderConfigSchema, TTSSummarizationConfigSchema, TelegramAccountConfigSchema, TelegramConfigSchema, TelegramGroupConfigSchema, TelegramTopicConfigSchema, ToolsConfigSchema, ToolsMediaAudioConfigSchema, ToolsMediaConfigSchema, TunnelBrokerUrlSchema, TunnelConfigSchema, TunnelConsentSchema, UpdateAutoConfigSchema, UpdateConfigSchema, VercelGatewayRoutingSchema, VoiceConfigSchema, VoiceRefinementConfigSchema, WORKSPACE_FILES, WebSearchConfigSchema, WebToolsConfigSchema, WebsiteBlocklistSchema, WeixinAccountConfigSchema, WeixinConfigSchema, WorkspaceConfigSchema, WorkspaceImportConfigSchema, XOPC_DB_FILENAME, applyConfigOverrides, assertConfigRewriteSafeForRunningGateway, buildReloadPlan, canonicalizeConfiguredMcpServer, clearConfigValueCache, createProfile, deleteProfile, diffConfigPaths, existsSync, expandWorkspacePathString, extractProfileAgentId, formatThinkingLevels, getAgentDefaultImageGenerationModelConfig, getAgentDefaultImageModelConfig, getAgentDefaultModelRef, getAllowedCommands, getCacheStats, getConfigOverrides, getCurrentProfile, getDefaultModelValues, resolveModelsJsonPath as getModelsJsonPath, getProfileManager, getProfileNameFromDir, getSwitchCommand, getWorkspacePath, hasBundledExtensionManifest, listAgentProfileMarkdownDirs, listAgentWorkspaceDirs, listProfiles, listThinkingLevels, loadConfig, loadModelsJson, matchReloadRule, modelsJsonExists, normalizeConfiguredMcpServers, normalizeElevatedMode, normalizeReasoningLevel, normalizeThinkLevel, normalizeVerboseLevel, normalizeWorkspaceDir, parseModelRef, resetConfigOverrides, resolveAgentAuthProfilesPath, resolveAgentDir, resolveAgentHomeDir, resolveAgentProfileDir, resolveAgentProfileMarkdownPath, resolveAgentWorkspaceDir, resolveAuthProfilesPath, resolveBinDir, resolveBundledExtensionsDir, resolveBundledSkillsDir, resolveConfigPath, resolveConfigValue, resolveCredentialsDir, resolveDefaultAgentWorkspaceDir, resolveEffectiveAgentConfigForAgent, resolveEffectiveAgentConfigForSession, resolveEffectiveAgentProfile, resolveEffectiveAgentProfileForSession, resolveExtensionSdkPath, resolveExtensionsDir, resolveExtensionsLockPath, resolveHeaders, resolveHomeDir, resolveInboxDir, resolveInboxMessagePath, resolveInboxPendingDir, resolveInboxProcessedDir, resolveLogPath, resolveLogsDir, resolveModelsJsonPath, resolveNodeBinDir, resolveNodeBinPath, resolveNodeToolsDir, resolveNpmBinPath, resolveOAuthPath, resolvePidPath, resolveProfileStateDir, resolveSkillPath, resolveSkillsCachePath, resolveSkillsDir, resolveSkillsLockPath, resolveSocketPath, resolveStateDir, resolveStatusPath, resolveToolsDir, resolveWorkspaceExtensionsDir, resolveWorkspaceFile, resolveWorkspaceRoot, resolveWorkspaceStateDir, resolveWorkspaceStatePath, resolveXopcBinPath, resolveXopcCloudCatalogCachePath, resolveXopcDatabasePath, saveConfig, saveModelsJson, setConfigOverride, testApiKeyResolution, thinkLevelToNumber, unsetConfigOverride, validateModelsConfig };

package/dist/src/config/models-json.d.ts

@@ -29,8 +29,8 @@ export declare const OpenAICompletionsCompatSchema: z.ZodObject<{
     requiresThinkingAsText: z.ZodOptional<z.ZodBoolean>;
     requiresMistralToolIds: z.ZodOptional<z.ZodBoolean>;
     thinkingFormat: z.ZodOptional<z.ZodEnum<{
-        "ant-ling": "ant-ling";
         openai: "openai";
+        "ant-ling": "ant-ling";
         deepseek: "deepseek";
         openrouter: "openrouter";
         zai: "zai";
@@ -67,8 +67,8 @@ export declare const OpenAICompatSchema: z.ZodUnion<readonly [z.ZodObject<{
     requiresThinkingAsText: z.ZodOptional<z.ZodBoolean>;
     requiresMistralToolIds: z.ZodOptional<z.ZodBoolean>;
     thinkingFormat: z.ZodOptional<z.ZodEnum<{
-        "ant-ling": "ant-ling";
         openai: "openai";
+        "ant-ling": "ant-ling";
         deepseek: "deepseek";
         openrouter: "openrouter";
         zai: "zai";
@@ -420,8 +420,8 @@ export declare const CustomModelSchema: z.ZodObject<{
         requiresThinkingAsText: z.ZodOptional<z.ZodBoolean>;
         requiresMistralToolIds: z.ZodOptional<z.ZodBoolean>;
         thinkingFormat: z.ZodOptional<z.ZodEnum<{
-            "ant-ling": "ant-ling";
             openai: "openai";
+            "ant-ling": "ant-ling";
             deepseek: "deepseek";
             openrouter: "openrouter";
             zai: "zai";
@@ -490,8 +490,8 @@ export declare const ModelOverrideSchema: z.ZodObject<{
         requiresThinkingAsText: z.ZodOptional<z.ZodBoolean>;
         requiresMistralToolIds: z.ZodOptional<z.ZodBoolean>;
         thinkingFormat: z.ZodOptional<z.ZodEnum<{
-            "ant-ling": "ant-ling";
             openai: "openai";
+            "ant-ling": "ant-ling";
             deepseek: "deepseek";
             openrouter: "openrouter";
             zai: "zai";
@@ -586,8 +586,8 @@ export declare const ProviderConfigSchema: z.ZodObject<{
             requiresThinkingAsText: z.ZodOptional<z.ZodBoolean>;
             requiresMistralToolIds: z.ZodOptional<z.ZodBoolean>;
             thinkingFormat: z.ZodOptional<z.ZodEnum<{
-                "ant-ling": "ant-ling";
                 openai: "openai";
+                "ant-ling": "ant-ling";
                 deepseek: "deepseek";
                 openrouter: "openrouter";
                 zai: "zai";
@@ -656,8 +656,8 @@ export declare const ProviderConfigSchema: z.ZodObject<{
             requiresThinkingAsText: z.ZodOptional<z.ZodBoolean>;
             requiresMistralToolIds: z.ZodOptional<z.ZodBoolean>;
             thinkingFormat: z.ZodOptional<z.ZodEnum<{
-                "ant-ling": "ant-ling";
                 openai: "openai";
+                "ant-ling": "ant-ling";
                 deepseek: "deepseek";
                 openrouter: "openrouter";
                 zai: "zai";
@@ -867,8 +867,8 @@ export declare const ModelsJsonSchema: z.ZodObject<{
                 requiresThinkingAsText: z.ZodOptional<z.ZodBoolean>;
                 requiresMistralToolIds: z.ZodOptional<z.ZodBoolean>;
                 thinkingFormat: z.ZodOptional<z.ZodEnum<{
-                    "ant-ling": "ant-ling";
                     openai: "openai";
+                    "ant-ling": "ant-ling";
                     deepseek: "deepseek";
                     openrouter: "openrouter";
                     zai: "zai";
@@ -937,8 +937,8 @@ export declare const ModelsJsonSchema: z.ZodObject<{
                 requiresThinkingAsText: z.ZodOptional<z.ZodBoolean>;
                 requiresMistralToolIds: z.ZodOptional<z.ZodBoolean>;
                 thinkingFormat: z.ZodOptional<z.ZodEnum<{
-                    "ant-ling": "ant-ling";
                     openai: "openai";
+                    "ant-ling": "ant-ling";
                     deepseek: "deepseek";
                     openrouter: "openrouter";
                     zai: "zai";

package/dist/src/config/schema.d.ts

@@ -501,6 +501,7 @@ export declare const TunnelConsentSchema: z.ZodObject<{
     version: z.ZodString;
     acceptedAt: z.ZodString;
 }, z.core.$strip>;
+export declare const TunnelBrokerUrlSchema: z.ZodString;
 export declare const TunnelConfigSchema: z.ZodDefault<z.ZodObject<{
     enabled: z.ZodDefault<z.ZodBoolean>;
     brokerUrl: z.ZodDefault<z.ZodString>;
@@ -1190,15 +1191,15 @@ export declare const McpServerSchema: z.ZodObject<{
     enabled: z.ZodOptional<z.ZodBoolean>;
     exposure: z.ZodOptional<z.ZodEnum<{
         direct: "direct";
-        hidden: "hidden";
-        deferred: "deferred";
         codemode: "codemode";
+        deferred: "deferred";
+        hidden: "hidden";
     }>>;
     toolExposure: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<{
         direct: "direct";
-        hidden: "hidden";
-        deferred: "deferred";
         codemode: "codemode";
+        deferred: "deferred";
+        hidden: "hidden";
     }>>>;
     description: z.ZodOptional<z.ZodString>;
     transport: z.ZodOptional<z.ZodNever>;
@@ -1253,15 +1254,15 @@ export declare const McpConfigSchema: z.ZodOptional<z.ZodObject<{
         enabled: z.ZodOptional<z.ZodBoolean>;
         exposure: z.ZodOptional<z.ZodEnum<{
             direct: "direct";
-            hidden: "hidden";
-            deferred: "deferred";
             codemode: "codemode";
+            deferred: "deferred";
+            hidden: "hidden";
         }>>;
         toolExposure: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<{
             direct: "direct";
-            hidden: "hidden";
-            deferred: "deferred";
             codemode: "codemode";
+            deferred: "deferred";
+            hidden: "hidden";
         }>>>;
         description: z.ZodOptional<z.ZodString>;
         transport: z.ZodOptional<z.ZodNever>;
@@ -1895,15 +1896,15 @@ export declare const ConfigSchema: z.ZodDefault<z.ZodObject<{
             enabled: z.ZodOptional<z.ZodBoolean>;
             exposure: z.ZodOptional<z.ZodEnum<{
                 direct: "direct";
-                hidden: "hidden";
-                deferred: "deferred";
                 codemode: "codemode";
+                deferred: "deferred";
+                hidden: "hidden";
             }>>;
             toolExposure: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<{
                 direct: "direct";
-                hidden: "hidden";
-                deferred: "deferred";
                 codemode: "codemode";
+                deferred: "deferred";
+                hidden: "hidden";
             }>>>;
             description: z.ZodOptional<z.ZodString>;
             transport: z.ZodOptional<z.ZodNever>;

package/dist/src/config/schema.js

@@ -42,7 +42,7 @@ function parseModelRef(ref) {
 		model: trimmed.slice(idx + 1).trim()
 	};
 }
-var AgentModelRefSchema, AgentImageGenerationModelSchema, AgentModelsSchema, BrowserDriverSchema, BrowserHostnameSchema, BrowserConfigSchema, SessionDmScopeSchema, SessionStorageConfigSchema, SessionResetModeSchema, SessionResetConfigSchema, SessionResetByTypeSchema, SessionScopeSchema, SessionConfigSchema, ChannelsConfigSchema, SearchProviderEntrySchema, WebSearchConfigSchema, WebsiteBlocklistSchema, WebToolsConfigSchema, ToolsConfigSchema, RuntimePreferenceSchema, RuntimeProvisionSchema, RuntimeVersionRequestSchema, LanguageRuntimeSchema, DEFAULT_RUNTIME_TOOLS_CONFIG, RuntimeToolsConfigSchema, GatewayAuthRateLimitSchema, GatewaySecuritySchema, GatewayTrustedProxySchema, GatewayAuthSchema, GatewayTailscaleConsentSchema, GatewayTailscaleSchema, GatewayRemoteSchema, GatewayTlsSchema, GatewayModeSchema, GatewayChannelConnectDeferModeSchema, TunnelConsentSchema, TunnelConfigSchema, WorkspaceImportConfigSchema, WorkspaceConfigSchema, GatewayBindModeSchema, GatewayWebchatConfigSchema, GatewayScenesConfigSchema, GatewayConfigSchema, ModelsDevConfigSchema, ModelCatalogConfigSchema, SttProviderConfigCatchallSchema, STTProviderConfigSchema, STTFallbackConfigSchema, MediaUnderstandingCapabilitiesSchema, MediaUnderstandingModelSchema, STTConfigSchema, TtsProviderConfigCatchallSchema, TTSProviderConfigSchema, TTSFallbackConfigSchema, TTSModelOverridesConfigSchema, TTSEdgeConfigSchema, TTSSummarizationConfigSchema, TTSConfigSchema, VoiceRefinementConfigSchema, VoiceConfigSchema, MessagesConfigSchema, ToolsMediaAudioConfigSchema, ToolsMediaConfigSchema, ProviderAzureConfigSchema, ProviderRequestOverridesSchema, ProviderAuthConfigSchema, ProvidersConfigSchema, ExtensionSecurityConfigSchema, ExtensionSlotsConfigSchema, ExtensionsConfigSchema, UpdateAutoConfigSchema, UpdateConfigSchema, CommandsConfigSchema, McpHttpUrlSchema, ConnectorSecretReferenceSchema, McpConfigScalarSchema, McpExposureSchema, McpOAuthConfigSchema, McpServerSchema, McpConfigSchema, ConnectorsConfigSchema, ExperimentalConfigSchema, ConfigSchema;
+var AgentModelRefSchema, AgentImageGenerationModelSchema, AgentModelsSchema, BrowserDriverSchema, BrowserHostnameSchema, BrowserConfigSchema, SessionDmScopeSchema, SessionStorageConfigSchema, SessionResetModeSchema, SessionResetConfigSchema, SessionResetByTypeSchema, SessionScopeSchema, SessionConfigSchema, ChannelsConfigSchema, SearchProviderEntrySchema, WebSearchConfigSchema, WebsiteBlocklistSchema, WebToolsConfigSchema, ToolsConfigSchema, RuntimePreferenceSchema, RuntimeProvisionSchema, RuntimeVersionRequestSchema, LanguageRuntimeSchema, DEFAULT_RUNTIME_TOOLS_CONFIG, RuntimeToolsConfigSchema, GatewayAuthRateLimitSchema, GatewaySecuritySchema, GatewayTrustedProxySchema, GatewayAuthSchema, GatewayTailscaleConsentSchema, GatewayTailscaleSchema, GatewayRemoteSchema, GatewayTlsSchema, GatewayModeSchema, GatewayChannelConnectDeferModeSchema, TunnelConsentSchema, TunnelBrokerUrlSchema, TunnelConfigSchema, WorkspaceImportConfigSchema, WorkspaceConfigSchema, GatewayBindModeSchema, GatewayWebchatConfigSchema, GatewayScenesConfigSchema, GatewayConfigSchema, ModelsDevConfigSchema, ModelCatalogConfigSchema, SttProviderConfigCatchallSchema, STTProviderConfigSchema, STTFallbackConfigSchema, MediaUnderstandingCapabilitiesSchema, MediaUnderstandingModelSchema, STTConfigSchema, TtsProviderConfigCatchallSchema, TTSProviderConfigSchema, TTSFallbackConfigSchema, TTSModelOverridesConfigSchema, TTSEdgeConfigSchema, TTSSummarizationConfigSchema, TTSConfigSchema, VoiceRefinementConfigSchema, VoiceConfigSchema, MessagesConfigSchema, ToolsMediaAudioConfigSchema, ToolsMediaConfigSchema, ProviderAzureConfigSchema, ProviderRequestOverridesSchema, ProviderAuthConfigSchema, ProvidersConfigSchema, ExtensionSecurityConfigSchema, ExtensionSlotsConfigSchema, ExtensionsConfigSchema, UpdateAutoConfigSchema, UpdateConfigSchema, CommandsConfigSchema, McpHttpUrlSchema, ConnectorSecretReferenceSchema, McpConfigScalarSchema, McpExposureSchema, McpOAuthConfigSchema, McpServerSchema, McpConfigSchema, ConnectorsConfigSchema, ExperimentalConfigSchema, ConfigSchema;
 var init_schema = __esmMin((() => {
 	init_config();
 	init_config$1();
@@ -393,9 +393,13 @@ strict: z.boolean().optional() }).optional();
 		version: z.string().min(1),
 		acceptedAt: z.string().min(1)
 	});
+	TunnelBrokerUrlSchema = z.string().url().refine((value) => {
+		const url = new URL(value);
+		return url.protocol === "https:" && !url.username && !url.password;
+	}, "Tunnel broker requires HTTPS without URL credentials");
 	TunnelConfigSchema = z.object({
 		enabled: z.boolean().default(false),
-		brokerUrl: z.string().url().default("https://frp.xopc.ai/api"),
+		brokerUrl: TunnelBrokerUrlSchema.default("https://frp.xopc.ai/api"),
 		/** Broker register API secret. */
 		registrationSecret: z.string().min(1).optional(),
 		autoStart: z.boolean().default(false),
@@ -1142,4 +1146,4 @@ workDiscoveryOnboarding: z.boolean().default(true) }).strict().default({ workDis
 }));
 //#endregion
 init_schema();
-export { AgentImageGenerationModelSchema, AgentModelRefSchema, AgentModelsSchema, BrowserConfigSchema, ChannelsConfigSchema, CommandsConfigSchema, ConfigSchema, ConnectorsConfigSchema, ExperimentalConfigSchema, ExtensionSecurityConfigSchema, ExtensionSlotsConfigSchema, ExtensionsConfigSchema, GatewayAuthRateLimitSchema, GatewayAuthSchema, GatewayBindModeSchema, GatewayChannelConnectDeferModeSchema, GatewayConfigSchema, GatewayModeSchema, GatewayRemoteSchema, GatewayScenesConfigSchema, GatewaySecuritySchema, GatewayTailscaleConsentSchema, GatewayTailscaleSchema, GatewayTlsSchema, GatewayTrustedProxySchema, GatewayWebchatConfigSchema, McpConfigSchema, McpOAuthConfigSchema, McpServerSchema, MediaUnderstandingCapabilitiesSchema, MediaUnderstandingModelSchema, MessagesConfigSchema, ModelCatalogConfigSchema, ModelsDevConfigSchema, ProviderAuthConfigSchema, ProviderAzureConfigSchema, ProviderRequestOverridesSchema, ProvidersConfigSchema, RuntimeToolsConfigSchema, STTConfigSchema, STTFallbackConfigSchema, STTProviderConfigSchema, SearchProviderEntrySchema, SessionConfigSchema, SessionDmScopeSchema, SessionResetByTypeSchema, SessionResetConfigSchema, SessionResetModeSchema, SessionScopeSchema, SessionStorageConfigSchema, TTSConfigSchema, TTSEdgeConfigSchema, TTSFallbackConfigSchema, TTSModelOverridesConfigSchema, TTSProviderConfigSchema, TTSSummarizationConfigSchema, TelegramAccountConfigSchema, TelegramConfigSchema, TelegramGroupConfigSchema, TelegramTopicConfigSchema, ToolsConfigSchema, ToolsMediaAudioConfigSchema, ToolsMediaConfigSchema, TunnelConfigSchema, TunnelConsentSchema, UpdateAutoConfigSchema, UpdateConfigSchema, VoiceConfigSchema, VoiceRefinementConfigSchema, WebSearchConfigSchema, WebToolsConfigSchema, WebsiteBlocklistSchema, WeixinAccountConfigSchema, WeixinConfigSchema, WorkspaceConfigSchema, WorkspaceImportConfigSchema, getAgentDefaultImageGenerationModelConfig, getAgentDefaultImageModelConfig, getAgentDefaultModelRef, init_schema, parseModelRef };
+export { AgentImageGenerationModelSchema, AgentModelRefSchema, AgentModelsSchema, BrowserConfigSchema, ChannelsConfigSchema, CommandsConfigSchema, ConfigSchema, ConnectorsConfigSchema, ExperimentalConfigSchema, ExtensionSecurityConfigSchema, ExtensionSlotsConfigSchema, ExtensionsConfigSchema, GatewayAuthRateLimitSchema, GatewayAuthSchema, GatewayBindModeSchema, GatewayChannelConnectDeferModeSchema, GatewayConfigSchema, GatewayModeSchema, GatewayRemoteSchema, GatewayScenesConfigSchema, GatewaySecuritySchema, GatewayTailscaleConsentSchema, GatewayTailscaleSchema, GatewayTlsSchema, GatewayTrustedProxySchema, GatewayWebchatConfigSchema, McpConfigSchema, McpOAuthConfigSchema, McpServerSchema, MediaUnderstandingCapabilitiesSchema, MediaUnderstandingModelSchema, MessagesConfigSchema, ModelCatalogConfigSchema, ModelsDevConfigSchema, ProviderAuthConfigSchema, ProviderAzureConfigSchema, ProviderRequestOverridesSchema, ProvidersConfigSchema, RuntimeToolsConfigSchema, STTConfigSchema, STTFallbackConfigSchema, STTProviderConfigSchema, SearchProviderEntrySchema, SessionConfigSchema, SessionDmScopeSchema, SessionResetByTypeSchema, SessionResetConfigSchema, SessionResetModeSchema, SessionScopeSchema, SessionStorageConfigSchema, TTSConfigSchema, TTSEdgeConfigSchema, TTSFallbackConfigSchema, TTSModelOverridesConfigSchema, TTSProviderConfigSchema, TTSSummarizationConfigSchema, TelegramAccountConfigSchema, TelegramConfigSchema, TelegramGroupConfigSchema, TelegramTopicConfigSchema, ToolsConfigSchema, ToolsMediaAudioConfigSchema, ToolsMediaConfigSchema, TunnelBrokerUrlSchema, TunnelConfigSchema, TunnelConsentSchema, UpdateAutoConfigSchema, UpdateConfigSchema, VoiceConfigSchema, VoiceRefinementConfigSchema, WebSearchConfigSchema, WebToolsConfigSchema, WebsiteBlocklistSchema, WeixinAccountConfigSchema, WeixinConfigSchema, WorkspaceConfigSchema, WorkspaceImportConfigSchema, getAgentDefaultImageGenerationModelConfig, getAgentDefaultImageModelConfig, getAgentDefaultModelRef, init_schema, parseModelRef };

package/dist/src/daemon/constants.js

@@ -1,10 +1,10 @@
+import { __esmMin } from "../../_virtual/_rolldown/runtime.js";
 import os from "node:os";
 import path from "node:path";
 //#region src/daemon/constants.ts
 /**
 * Daemon Constants - Service labels, paths, and configuration values
 */
-const SERVICE_BASE_LABEL = "ai.xopc.gateway";
 function resolveGatewayLaunchAgentLabel(profile) {
 	const normalized = normalizeProfile(profile);
 	return normalized ? `${SERVICE_BASE_LABEL}.${normalized}` : SERVICE_BASE_LABEL;
@@ -39,12 +39,17 @@ function normalizeProfile(profile) {
 	if (!trimmed || trimmed.toLowerCase() === "default") return null;
 	return trimmed;
 }
-const DEFAULT_GATEWAY_PORT = 18790;
-const LAUNCH_AGENT_THROTTLE_INTERVAL_SECONDS = 10;
-const LAUNCH_AGENT_EXIT_TIMEOUT_SECONDS = 20;
-const SYSTEMD_RESTART_SEC = 5;
-const SYSTEMD_START_LIMIT_BURST = 5;
-const SYSTEMD_START_LIMIT_INTERVAL_SEC = 60;
-const SERVICE_VERSION_ENV_KEY = "XOPC_SERVICE_VERSION";
+var SERVICE_BASE_LABEL, DEFAULT_GATEWAY_PORT, LAUNCH_AGENT_THROTTLE_INTERVAL_SECONDS, LAUNCH_AGENT_EXIT_TIMEOUT_SECONDS, SYSTEMD_RESTART_SEC, SYSTEMD_START_LIMIT_BURST, SYSTEMD_START_LIMIT_INTERVAL_SEC, SERVICE_VERSION_ENV_KEY;
+var init_constants = __esmMin((() => {
+	SERVICE_BASE_LABEL = "ai.xopc.gateway";
+	DEFAULT_GATEWAY_PORT = 18790;
+	LAUNCH_AGENT_THROTTLE_INTERVAL_SECONDS = 10;
+	LAUNCH_AGENT_EXIT_TIMEOUT_SECONDS = 20;
+	SYSTEMD_RESTART_SEC = 5;
+	SYSTEMD_START_LIMIT_BURST = 5;
+	SYSTEMD_START_LIMIT_INTERVAL_SEC = 60;
+	SERVICE_VERSION_ENV_KEY = "XOPC_SERVICE_VERSION";
+}));
 //#endregion
-export { DEFAULT_GATEWAY_PORT, LAUNCH_AGENT_EXIT_TIMEOUT_SECONDS, LAUNCH_AGENT_THROTTLE_INTERVAL_SECONDS, SERVICE_VERSION_ENV_KEY, SYSTEMD_RESTART_SEC, SYSTEMD_START_LIMIT_BURST, SYSTEMD_START_LIMIT_INTERVAL_SEC, formatGatewayServiceDescription, resolveGatewayLaunchAgentLabel, resolveGatewaySystemdServiceName, resolveGatewayWindowsTaskName, resolveLaunchAgentPlistPath, resolveSystemdUnitPath };
+init_constants();
+export { DEFAULT_GATEWAY_PORT, LAUNCH_AGENT_EXIT_TIMEOUT_SECONDS, LAUNCH_AGENT_THROTTLE_INTERVAL_SECONDS, SERVICE_VERSION_ENV_KEY, SYSTEMD_RESTART_SEC, SYSTEMD_START_LIMIT_BURST, SYSTEMD_START_LIMIT_INTERVAL_SEC, formatGatewayServiceDescription, init_constants, resolveGatewayLaunchAgentLabel, resolveGatewaySystemdServiceName, resolveGatewayWindowsTaskName, resolveLaunchAgentPlistPath, resolveSystemdUnitPath };

package/dist/src/daemon/index.js

@@ -1,4 +1,7 @@
-import { DEFAULT_GATEWAY_PORT, LAUNCH_AGENT_EXIT_TIMEOUT_SECONDS, LAUNCH_AGENT_THROTTLE_INTERVAL_SECONDS, SERVICE_VERSION_ENV_KEY, SYSTEMD_RESTART_SEC, SYSTEMD_START_LIMIT_BURST, SYSTEMD_START_LIMIT_INTERVAL_SEC, formatGatewayServiceDescription, resolveGatewayLaunchAgentLabel, resolveGatewaySystemdServiceName, resolveGatewayWindowsTaskName, resolveLaunchAgentPlistPath, resolveSystemdUnitPath } from "./constants.js";
+import { DEFAULT_GATEWAY_PORT, LAUNCH_AGENT_EXIT_TIMEOUT_SECONDS, LAUNCH_AGENT_THROTTLE_INTERVAL_SECONDS, SERVICE_VERSION_ENV_KEY, SYSTEMD_RESTART_SEC, SYSTEMD_START_LIMIT_BURST, SYSTEMD_START_LIMIT_INTERVAL_SEC, formatGatewayServiceDescription, init_constants, resolveGatewayLaunchAgentLabel, resolveGatewaySystemdServiceName, resolveGatewayWindowsTaskName, resolveLaunchAgentPlistPath, resolveSystemdUnitPath } from "./constants.js";
 import { describeGatewayServiceRestart, getPlatformName, getServiceLabel, isDaemonAvailable, isDaemonAvailableAsync, resolveGatewayService, startGatewayService } from "./service.js";
 import { buildGatewayInstallArgs, buildGatewayInstallPlan, validateInstallPlanProgram } from "./install-plan.js";
+//#region src/daemon/index.ts
+init_constants();
+//#endregion
 export { DEFAULT_GATEWAY_PORT, LAUNCH_AGENT_EXIT_TIMEOUT_SECONDS, LAUNCH_AGENT_THROTTLE_INTERVAL_SECONDS, SERVICE_VERSION_ENV_KEY, SYSTEMD_RESTART_SEC, SYSTEMD_START_LIMIT_BURST, SYSTEMD_START_LIMIT_INTERVAL_SEC, buildGatewayInstallArgs, buildGatewayInstallPlan, describeGatewayServiceRestart, formatGatewayServiceDescription, getPlatformName, getServiceLabel, isDaemonAvailable, isDaemonAvailableAsync, resolveGatewayLaunchAgentLabel, resolveGatewayService, resolveGatewaySystemdServiceName, resolveGatewayWindowsTaskName, resolveLaunchAgentPlistPath, resolveSystemdUnitPath, startGatewayService, validateInstallPlanProgram };

package/dist/src/daemon/install-plan.js

@@ -1,7 +1,7 @@
 import { PACKAGE_VERSION, init_package_version } from "../package-version.js";
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
-import { SERVICE_VERSION_ENV_KEY, formatGatewayServiceDescription } from "./constants.js";
+import { SERVICE_VERSION_ENV_KEY, formatGatewayServiceDescription, init_constants } from "./constants.js";
 import { homedir } from "node:os";
 import path from "node:path";
 import { existsSync } from "node:fs";
@@ -14,6 +14,7 @@ import { fileURLToPath } from "node:url";
 * supports binary runtime detection, and --foreground arg passing.
 */
 init_logger();
+init_constants();
 init_package_version();
 const log = createLogger("InstallPlan");
 function resolveDefaultConfigPath() {

package/dist/src/daemon/launchd.js

@@ -1,6 +1,6 @@
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
-import { resolveGatewayLaunchAgentLabel, resolveLaunchAgentPlistPath as resolveLaunchAgentPlistPath$1 } from "./constants.js";
+import { init_constants, resolveGatewayLaunchAgentLabel, resolveLaunchAgentPlistPath as resolveLaunchAgentPlistPath$1 } from "./constants.js";
 import os from "node:os";
 import path from "node:path";
 import { existsSync } from "node:fs";
@@ -18,6 +18,7 @@ import { mkdir, readFile, rm, writeFile } from "node:fs/promises";
 * - launchctl kickstart -k for restart
 */
 init_logger();
+init_constants();
 const log = createLogger("LaunchdService");
 function resolveGuiDomain() {
 	return `gui/${typeof process.getuid === "function" ? process.getuid() : 501}`;

package/dist/src/daemon/schtasks.js

@@ -1,6 +1,6 @@
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
-import { resolveGatewayWindowsTaskName } from "./constants.js";
+import { init_constants, resolveGatewayWindowsTaskName } from "./constants.js";
 import os from "node:os";
 import path from "node:path";
 import { mkdirSync, readFileSync, rmSync, writeFileSync } from "node:fs";
@@ -15,6 +15,7 @@ import { spawn, spawnSync } from "node:child_process";
 * - Proper start/stop/restart lifecycle
 */
 init_logger();
+init_constants();
 const log = createLogger("SchtasksService");
 function resolveProfileFromEnv(env) {
 	return env?.XOPC_PROFILE?.trim() || void 0;

package/dist/src/daemon/service-audit.js

@@ -1,5 +1,5 @@
 import { PACKAGE_VERSION, init_package_version } from "../package-version.js";
-import { SERVICE_VERSION_ENV_KEY } from "./constants.js";
+import { SERVICE_VERSION_ENV_KEY, init_constants } from "./constants.js";
 import { existsSync } from "node:fs";
 import { readFile } from "node:fs/promises";
 //#region src/daemon/service-audit.ts
@@ -14,6 +14,7 @@ import { readFile } from "node:fs/promises";
 * - Platform-specific configuration issues
 */
 init_package_version();
+init_constants();
 /** Audit installed service configuration against current config and version */
 async function auditGatewayServiceConfig(params) {
 	const { service, env = process.env, expectedToken, expectedPort, currentVersion = PACKAGE_VERSION } = params;

package/dist/src/daemon/service.js

@@ -1,7 +1,7 @@
 import { PACKAGE_VERSION, init_package_version } from "../package-version.js";
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
-import { SERVICE_VERSION_ENV_KEY } from "./constants.js";
+import { SERVICE_VERSION_ENV_KEY, init_constants } from "./constants.js";
 import { existsSync } from "node:fs";
 //#region src/daemon/service.ts
 /**
@@ -14,6 +14,7 @@ import { existsSync } from "node:fs";
 */
 init_logger();
 init_package_version();
+init_constants();
 const log = createLogger("DaemonService");
 let _isDaemonAvailable = null;
 async function resolveGatewayService() {

package/dist/src/daemon/systemd.js

@@ -1,6 +1,6 @@
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
-import { resolveGatewaySystemdServiceName, resolveSystemdUnitPath } from "./constants.js";
+import { init_constants, resolveGatewaySystemdServiceName, resolveSystemdUnitPath } from "./constants.js";
 import os from "node:os";
 import path from "node:path";
 import { existsSync } from "node:fs";
@@ -17,6 +17,7 @@ import { access, constants as constants$1, mkdir, readFile, rm, writeFile } from
 * - network-online.target dependency
 */
 init_logger();
+init_constants();
 const log = createLogger("SystemdService");
 function resolveProfileFromEnv(env) {
 	return env?.XOPC_PROFILE?.trim() || void 0;

package/dist/src/gateway/client-ip.js

@@ -1,6 +1,7 @@
-import { isLoopbackHost } from "./host.js";
+import { init_host, isLoopbackHost } from "./host.js";
 import net from "node:net";
 //#region src/gateway/client-ip.ts
+init_host();
 function stripIpv6Brackets(value) {
 	if (value.startsWith("[") && value.endsWith("]")) return value.slice(1, -1);
 	return value;

package/dist/src/gateway/hono/app.js

@@ -1,8 +1,8 @@
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
+import { init_host, resolveAllowedBrowserOrigins, resolveGatewayServiceListenPort } from "../host.js";
 import { init_device_access_repository, listDevices } from "../../storage/sqlite/device-access-repository.js";
 import { ENDPOINT_MAX_FILE_BYTES, init_src } from "../../../packages/endpoint-tools-protocol/src/index.js";
-import { resolveAllowedBrowserOrigins, resolveGatewayServiceListenPort } from "../host.js";
 import { resolveGatewayEffectiveHost } from "../../config/gateway-bind.js";
 import { loadTunnelState } from "../../tunnel/tunnel-state.js";
 import { resolveReverseProxyPublicUrl } from "../public-url.js";
@@ -34,6 +34,7 @@ import { getConnInfo } from "@hono/node-server/conninfo";
 //#region src/gateway/hono/app.ts
 init_src();
 init_logger();
+init_host();
 init_device_access_repository();
 const log = createLogger("Gateway:App");
 /**

package/dist/src/gateway/hono/lib/config-payload.d.ts

@@ -124,6 +124,7 @@ export declare function buildSafeWebConfigPayload(service: GatewayService, optio
                     network: boolean;
                     workspaceAccess: "read-only" | "read-write";
                 };
+                cloudCreditLimitPerRunMicro?: string;
                 maxTurns?: number;
                 timeoutMs?: number;
                 maxToolFailuresPerTurn?: number;

package/dist/src/gateway/hono/middleware/auth.d.ts

@@ -13,12 +13,10 @@ export interface AuthConfig {
 export declare function auth(config?: AuthConfig): import("hono").MiddlewareHandler<any, string, {}, (Response & import("hono").TypedResponse<{
     error: string;
     code: string;
-    message: string;
-    retryAfter: number;
-}, 429, "json">) | (Response & import("hono").TypedResponse<{
+}, 401, "json">) | (Response & import("hono").TypedResponse<{
     error: string;
     code: string;
-}, 401, "json">) | (Response & import("hono").TypedResponse<{
+}, 403, "json">) | (Response & import("hono").TypedResponse<{
     error: string;
     code: string;
-}, 403, "json">)>;
+}, 429, "json">)>;