@xopcai/xopc 0.0.373 → 0.0.375

package/dist/src/gateway/hono/middleware/public-device-rate-limit.js

@@ -0,0 +1,43 @@
+import { buckets } from "../../rate-limit/buckets.js";
+import { init_rate_limit } from "../../rate-limit/index.js";
+import { resolveClientIpFromRequest } from "../../client-ip.js";
+import { createMiddleware } from "hono/factory";
+import { getConnInfo } from "@hono/node-server/conninfo";
+//#region src/gateway/hono/middleware/public-device-rate-limit.ts
+init_rate_limit();
+function pairingClientKey(c, options) {
+	let remoteAddress;
+	try {
+		remoteAddress = getConnInfo(c).remote.address;
+	} catch {
+		remoteAddress = void 0;
+	}
+	const proxy = options?.getTrustedProxyContext?.();
+	return resolveClientIpFromRequest({
+		remoteAddress,
+		getHeader: (name) => c.req.header(name),
+		trustedProxies: proxy?.trustedProxies,
+		allowRealIpFallback: proxy?.allowRealIpFallback
+	});
+}
+/** Shared local-hop budgets allow normal mobile polling while bounding pre-auth work. */
+function publicDeviceRateLimit(family, options) {
+	return createMiddleware(async (c, next) => {
+		const source = buckets.publicDeviceSource().consume(`${family}:${pairingClientKey(c, options)}`);
+		const total = buckets.publicDeviceGlobal().consume(family);
+		if (!source.allowed || !total.allowed) {
+			const retry = Math.max(source.retryAfterMs, total.retryAfterMs);
+			c.header("Retry-After", String(Math.max(1, Math.ceil(retry / 1e3))));
+			return c.json({
+				ok: false,
+				error: {
+					code: "RATE_LIMITED",
+					message: "Too many requests"
+				}
+			}, 429);
+		}
+		return next();
+	});
+}
+//#endregion
+export { pairingClientKey, publicDeviceRateLimit };

package/dist/src/gateway/hono/middleware/strict-rate-limit.js

@@ -1,8 +1,8 @@
 import { createLogger } from "../../../utils/logger/index.js";
 import { init_logger } from "../../../utils/logger.js";
-import { resolveClientIpFromRequest } from "../../client-ip.js";
 import { buckets } from "../../rate-limit/buckets.js";
-import "../../rate-limit/index.js";
+import { init_rate_limit } from "../../rate-limit/index.js";
+import { resolveClientIpFromRequest } from "../../client-ip.js";
 import { createMiddleware } from "hono/factory";
 import { getConnInfo } from "@hono/node-server/conninfo";
 //#region src/gateway/hono/middleware/strict-rate-limit.ts
@@ -10,6 +10,7 @@ import { getConnInfo } from "@hono/node-server/conninfo";
 * Per-client request-rate gate for sensitive admin/mutation endpoints.
 * Backed by `buckets.strictApi()` — see {@link ../../rate-limit/buckets.ts}.
 */
+init_rate_limit();
 init_logger();
 const log = createLogger("Hono:StrictRateLimit");
 function resolveClientIp(c, deps) {

package/dist/src/gateway/hono/oauth-async.js

@@ -1,8 +1,8 @@
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
+import { init_host, isLoopbackHost } from "../host.js";
 import { getOAuthProviderInterfaces, init_registry } from "../../auth/oauth/registry.js";
 import { CredentialResolver, init_credentials } from "../../auth/credentials.js";
-import { isLoopbackHost } from "../host.js";
 import { resolveReverseProxyPublicUrl } from "../public-url.js";
 import { buildCapabilityPlansForConfig } from "../../capabilities/readiness/from-config.js";
 import "../../capabilities/readiness/index.js";
@@ -18,6 +18,7 @@ import { Hono } from "hono";
 */
 init_registry();
 init_credentials();
+init_host();
 init_logger();
 const log = createLogger("OAuthAsync");
 function buildOAuthCompletionReadiness(config, catalog) {

package/dist/src/gateway/hono/routes/browser.js

@@ -1,16 +1,17 @@
 import { deleteBrowserTabBinding, getBrowserTabBinding, init_browser_tab_binding_repository, setBrowserTabBinding } from "../../../storage/sqlite/browser-tab-binding-repository.js";
 import { browserTabBindingRequestSchema } from "../../../../packages/gateway-contract/src/browser-tab-binding.js";
 import { init_src } from "../../../../packages/gateway-contract/src/index.js";
+import { init_loopback, isLoopbackClientIp } from "../../security/loopback.js";
 import { getDevice, init_device_access_repository } from "../../../storage/sqlite/device-access-repository.js";
 import "../../../../packages/browser-control-contract/src/index.js";
 import { createBrowserDriver } from "../../../browser/drivers/create-driver.js";
 import { checkBrowserReadiness } from "../../../browser/readiness.js";
-import { isLoopbackClientIp } from "../../security/loopback.js";
 import { getGatewayPrincipal } from "../../security/gateway-principal.js";
 import { getConnInfo } from "@hono/node-server/conninfo";
 //#region src/gateway/hono/routes/browser.ts
 /** Browser Control status and driver diagnostics. */
 init_src();
+init_loopback();
 init_device_access_repository();
 init_browser_tab_binding_repository();
 async function extensionStatus(service, includeLocalArtifacts) {

package/dist/src/gateway/hono/routes/config-patch/misc.js

@@ -1,10 +1,10 @@
+import { ContextPlanningConfigSchema, HomeIntelligenceConfigSchema, KnowledgeMemoryConfigSchema, UserContextConfigSchema, UserModelConfigSchema, init_config } from "../../../../user-context/config.js";
 import { BindingsSchema, init_binding_schema } from "../../../../routing/binding-schema.js";
-import { AgentCatalogService } from "../../../../agent-catalog/service.js";
-import { ComputerConfigSchema, init_config } from "../../../../computer/config.js";
-import { ContextPlanningConfigSchema, HomeIntelligenceConfigSchema, KnowledgeMemoryConfigSchema, UserContextConfigSchema, UserModelConfigSchema, init_config as init_config$1 } from "../../../../user-context/config.js";
+import { ComputerConfigSchema, init_config as init_config$1 } from "../../../../computer/config.js";
 import { BrowserConfigSchema, McpConfigSchema, VoiceConfigSchema, init_schema } from "../../../../config/schema.js";
 import { CredentialResolver, init_credentials } from "../../../../auth/credentials.js";
 import { canonicalizeConfiguredMcpServer } from "../../../../config/mcp-config-normalize.js";
+import { AgentCatalogService } from "../../../../agent-catalog/service.js";
 import { mergeGatewaySkillsMarketplacePatch, mergeSessionConfigPatch, mergeUpdateConfigPatch } from "../../../../config/web-patch.js";
 import { assertGatewayAuthConfigured, resolveGatewayAuth } from "../../../auth.js";
 import { isMaskedSecretPatchValue } from "../../lib/mask-secret-length.js";
@@ -14,11 +14,11 @@ import { assertGatewayRuntimeConfig } from "../../../runtime-config.js";
 import { mergeRealtimeVoiceConfigPatch, mergeSttConfigPatch, mergeTtsConfigPatch } from "../../lib/safe-voice-config.js";
 import { PATCH_OK, patchError } from "./result.js";
 //#region src/gateway/hono/routes/config-patch/misc.ts
-init_config();
+init_config$1();
 init_schema();
 init_binding_schema();
 init_credentials();
-init_config$1();
+init_config();
 async function applyMiscPatch(config, body) {
 	if (body.update !== void 0 && typeof body.update === "object" && body.update !== null) {
 		const updateResult = mergeUpdateConfigPatch(config, body.update);

package/dist/src/gateway/hono/routes/config.js

@@ -1,4 +1,4 @@
-import { enumerateLanGatewayCandidates } from "../../host.js";
+import { enumerateLanGatewayCandidates, init_host } from "../../host.js";
 import { getTunnelService } from "../../../tunnel/tunnel-service.js";
 import { buildSafeWebConfigPayload } from "../lib/config-payload.js";
 import { applyChannelsPatch } from "./config-patch/channels.js";
@@ -6,6 +6,7 @@ import { applyGatewayPatch } from "./config-patch/gateway.js";
 import { applyMiscPatch, validateGatewayAfterPatch } from "./config-patch/misc.js";
 import "./config-patch/index.js";
 //#region src/gateway/hono/routes/config.ts
+init_host();
 function localeFromRequest(c) {
 	return c.req.query("locale") ?? c.req.header("X-XOPC-Locale") ?? c.req.header("Accept-Language")?.split(",")[0];
 }

package/dist/src/gateway/hono/routes/connectors.js

@@ -6,6 +6,7 @@ import { getConnectorAccount, init_connector_account_repository, listConnectorAc
 import { decideConnectorApproval, getConnectorApproval, listConnectorApprovals, listConnectorConnections } from "../../../storage/sqlite/connector-repository.js";
 import { getConnectorSyncPolicy, upsertConnectorSyncPolicy } from "../../../storage/sqlite/connector-sync-policy-repository.js";
 import { init_sqlite } from "../../../storage/sqlite/index.js";
+import { listUnderstandingSourceGrants, revokeUnderstandingSourceGrant } from "../../../user-context/sources/repository.js";
 import { AgentCatalogRepository, init_repository } from "../../../agent-catalog/repository.js";
 import { init_agent_scope, resolveDefaultAgentId } from "../../../agent/agent-scope.js";
 import { activateComposioBackend, addComposioBackend, ensureComposioBackend, getComposioBackend, listComposioBackends, removeComposioBackend } from "../../../connectors/composio-backends.js";
@@ -27,7 +28,6 @@ import { composioLogoResponse } from "../../../connectors/composio-logo.js";
 import { inspectManagedComposioStatus } from "../../../connectors/composio-managed-client.js";
 import { appendComposioTriggerEvent, listComposioTriggerEvents } from "../../../connectors/composio-triggers.js";
 import { ingestLocalFolderSource } from "../../../connectors/connected-source-ingestion.js";
-import { listUnderstandingSourceGrants, revokeUnderstandingSourceGrant } from "../../../user-context/sources/repository.js";
 import { testConnectorInstance } from "../../../connectors/health.js";
 import { setConnectorEnabled } from "../../../connectors/lifecycle.js";
 import { projectComposioConnectionStatus } from "../../../connectors/runtime-status.js";

package/dist/src/gateway/hono/routes/context-sources.js

@@ -2,11 +2,11 @@ import { getSqliteDatabase, init_transaction } from "../../../storage/sqlite/tra
 import { getConnectorAccount } from "../../../storage/sqlite/connector-account-repository.js";
 import { countKnowledgeSourceItems, deleteKnowledgeSourceItems } from "../../../storage/sqlite/knowledge-repository.js";
 import { init_sqlite } from "../../../storage/sqlite/index.js";
+import { getActiveUnderstandingConsent } from "../../../user-context/sources/consent-repository.js";
+import { getUnderstandingSourceGrant, listUnderstandingSourceGrants, listUnderstandingSourceRuns, revokeUnderstandingSourceGrant, updateUnderstandingSourceGrantPolicies } from "../../../user-context/sources/repository.js";
 import { init_agent_scope, resolveDefaultAgentId } from "../../../agent/agent-scope.js";
 import { listUserModelObservations } from "../../../user-model/observation-repository.js";
 import "../../../user-model/index.js";
-import { getActiveUnderstandingConsent } from "../../../user-context/sources/consent-repository.js";
-import { getUnderstandingSourceGrant, listUnderstandingSourceGrants, listUnderstandingSourceRuns, revokeUnderstandingSourceGrant, updateUnderstandingSourceGrantPolicies } from "../../../user-context/sources/repository.js";
 import { listConnectedContentCandidates, readConnectedContent } from "../../../connectors/content-enrichment.js";
 import { listUnderstandingSourceDefinitions } from "../../../user-context/sources/catalog.js";
 //#region src/gateway/hono/routes/context-sources.ts

package/dist/src/gateway/hono/routes/device-pairing-approval.d.ts

@@ -1,10 +1,5 @@
-import type { Context, Hono } from 'hono';
-export type PairingPublicRouteOptions = {
-    getTrustedProxyContext?: () => {
-        trustedProxies?: string[];
-        allowRealIpFallback?: boolean;
-    };
-};
-export declare function pairingClientKey(c: Context, options?: PairingPublicRouteOptions): string;
+import type { Hono } from 'hono';
+import { type PairingPublicRouteOptions } from '../middleware/public-device-rate-limit.js';
+export { pairingClientKey, type PairingPublicRouteOptions } from '../middleware/public-device-rate-limit.js';
 export declare function registerPairingApprovalPublicRoutes(app: Hono, options?: PairingPublicRouteOptions): void;
 export declare function registerPairingApprovalAdminRoutes(app: Hono): void;

package/dist/src/gateway/hono/routes/device-pairing-approval.js

@@ -1,32 +1,17 @@
 import { devicePairingCompleteSchema, devicePairingProofSchema, devicePairingRequestSchema } from "../../../../packages/gateway-contract/src/device-pairing.js";
 import { init_src } from "../../../../packages/gateway-contract/src/index.js";
-import { getOrCreateGatewayIdentity, init_gateway_identity_repository, signGatewayPayload } from "../../../storage/sqlite/gateway-identity-repository.js";
-import { resolveClientIpFromRequest } from "../../client-ip.js";
 import { buckets } from "../../rate-limit/buckets.js";
-import "../../rate-limit/index.js";
+import { init_rate_limit } from "../../rate-limit/index.js";
+import { getOrCreateGatewayIdentity, init_gateway_identity_repository, signGatewayPayload } from "../../../storage/sqlite/gateway-identity-repository.js";
+import { pairingClientKey, publicDeviceRateLimit } from "../middleware/public-device-rate-limit.js";
 import { DevicePairingError, cancelDevicePairingSetup, decideDevicePairingRequest, operateDevicePairingRequest, readDevicePairingSetup, submitDevicePairingRequest } from "../../../storage/sqlite/device-pairing-approval.js";
 import os from "node:os";
 import { z } from "zod";
 import { bodyLimit } from "hono/body-limit";
-import { getConnInfo } from "@hono/node-server/conninfo";
 //#region src/gateway/hono/routes/device-pairing-approval.ts
 init_src();
 init_gateway_identity_repository();
-function pairingClientKey(c, options) {
-	let remoteAddress;
-	try {
-		remoteAddress = getConnInfo(c).remote.address;
-	} catch {
-		remoteAddress = void 0;
-	}
-	const proxy = options?.getTrustedProxyContext?.();
-	return resolveClientIpFromRequest({
-		remoteAddress,
-		getHeader: (name) => c.req.header(name),
-		trustedProxies: proxy?.trustedProxies,
-		allowRealIpFallback: proxy?.allowRealIpFallback
-	});
-}
+init_rate_limit();
 function pairingBlocked(c, key) {
 	const blocked = buckets.pairingExchange().check(key);
 	if (!blocked.blocked) return void 0;
@@ -63,7 +48,7 @@ function registerPairingApprovalPublicRoutes(app, options) {
 		"cancel"
 	]) {
 		const path = action === "request" ? "/api/device-pairing/requests" : `/api/device-pairing/requests/:id/${action}`;
-		app.post(path, bodyLimit({ maxSize: 4 * 1024 }), async (c) => {
+		app.post(path, publicDeviceRateLimit("pairing", options), bodyLimit({ maxSize: 4 * 1024 }), async (c) => {
 			const clientKey = pairingClientKey(c, options);
 			const blocked = pairingBlocked(c, clientKey);
 			if (blocked) return blocked;

package/dist/src/gateway/hono/routes/devices.js

@@ -1,13 +1,14 @@
 import { browserPairingInvitationPayloadSchema, devicePairingTargetKindSchema, formatBrowserPairingInvitation, formatMobilePairingInvitation } from "../../../../packages/gateway-contract/src/device-pairing.js";
 import { init_src } from "../../../../packages/gateway-contract/src/index.js";
-import { init_device_access_repository, listDevices, revokeDevice, rotateDeviceRefreshToken } from "../../../storage/sqlite/device-access-repository.js";
+import { buckets } from "../../rate-limit/buckets.js";
+import { init_rate_limit } from "../../rate-limit/index.js";
+import { DeviceRefreshRateLimitError, init_device_access_repository, listDevices, revokeDevice, rotateDeviceRefreshToken } from "../../../storage/sqlite/device-access-repository.js";
 import { getGatewayIdentityPublicKeyRaw, getOrCreateGatewayIdentity, init_gateway_identity_repository, signGatewayPayload } from "../../../storage/sqlite/gateway-identity-repository.js";
 import { createDevicePairingSetup, init_device_pairing_repository, isDevicePairingSetupActive } from "../../../storage/sqlite/device-pairing-repository.js";
 import { resolveSecureDeviceRoutes } from "../../device-routes.js";
-import { buckets } from "../../rate-limit/buckets.js";
-import "../../rate-limit/index.js";
 import { getGatewayPrincipal } from "../../security/gateway-principal.js";
-import { pairingClientKey, registerPairingApprovalAdminRoutes, registerPairingApprovalPublicRoutes } from "./device-pairing-approval.js";
+import { pairingClientKey, publicDeviceRateLimit } from "../middleware/public-device-rate-limit.js";
+import { registerPairingApprovalAdminRoutes, registerPairingApprovalPublicRoutes } from "./device-pairing-approval.js";
 import os from "node:os";
 import { z } from "zod";
 import { bodyLimit } from "hono/body-limit";
@@ -16,18 +17,20 @@ init_src();
 init_device_access_repository();
 init_device_pairing_repository();
 init_gateway_identity_repository();
+init_rate_limit();
 const refreshRequestSchema = z.strictObject({
 	refreshToken: z.string().min(1).max(256),
 	timestamp: z.number().int().positive(),
 	nonce: z.string().min(16).max(128),
 	requestId: z.string().uuid(),
 	nextRefreshToken: z.string().min(80).max(256),
-	signature: z.string().min(1).max(256)
+	signature: z.string().min(1).max(256),
+	requestProofVersion: z.literal(1).optional()
 });
 const pairingProbeSchema = z.strictObject({ pairingId: z.string().uuid() });
 const pairingSetupSchema = z.strictObject({ targetKind: devicePairingTargetKindSchema });
 function registerDeviceAuthPublicRoutes(app, options) {
-	app.post("/api/gateway-identity/challenge", bodyLimit({ maxSize: 512 }), async (c) => {
+	app.post("/api/gateway-identity/challenge", publicDeviceRateLimit("challenge", options), bodyLimit({ maxSize: 512 }), async (c) => {
 		const budget = buckets.identityChallenge().consume("gateway");
 		if (!budget.allowed) {
 			c.header("Retry-After", String(Math.ceil(budget.retryAfterMs / 1e3)));
@@ -40,6 +43,8 @@ function registerDeviceAuthPublicRoutes(app, options) {
 			purpose: "gateway-route-v1",
 			gatewayId: identity.id,
 			nonce: parsed.data.nonce,
+			serverTime: Date.now(),
+			requestProofVersion: 1,
 			expiresAt: Date.now() + 3e4
 		})).toString("base64url");
 		c.header("Cache-Control", "no-store");
@@ -49,7 +54,7 @@ function registerDeviceAuthPublicRoutes(app, options) {
 		});
 	});
 	registerPairingApprovalPublicRoutes(app, options);
-	app.post("/api/device-auth/refresh", async (c) => {
+	app.post("/api/device-auth/refresh", publicDeviceRateLimit("refresh", options), bodyLimit({ maxSize: 4096 }), async (c) => {
 		const parsed = refreshRequestSchema.safeParse(await c.req.json().catch(() => null));
 		if (!parsed.success) return c.json({
 			ok: false,
@@ -66,6 +71,7 @@ function registerDeviceAuthPublicRoutes(app, options) {
 				requestId: parsed.data.requestId,
 				nonce: parsed.data.nonce,
 				expiresAt: Date.now() + 3e4,
+				requestProofVersion: parsed.data.requestProofVersion ?? 0,
 				tokens
 			})).toString("base64url");
 			return c.json({
@@ -74,16 +80,26 @@ function registerDeviceAuthPublicRoutes(app, options) {
 				signature: signGatewayPayload(signedPayload)
 			});
 		} catch (error) {
+			if (error instanceof DeviceRefreshRateLimitError) {
+				c.header("Retry-After", String(Math.max(1, Math.ceil(error.retryAfterMs / 1e3))));
+				return c.json({
+					ok: false,
+					error: {
+						code: "RATE_LIMITED",
+						message: "Too many requests"
+					}
+				}, 429);
+			}
 			return c.json({
 				ok: false,
 				error: {
 					code: "REFRESH_DENIED",
-					message: error instanceof Error ? error.message : "Refresh denied"
+					message: "Refresh denied"
 				}
 			}, 401);
 		}
 	});
-	app.post("/api/device-pairing/probe", bodyLimit({ maxSize: 512 }), async (c) => {
+	app.post("/api/device-pairing/probe", publicDeviceRateLimit("pairing", options), bodyLimit({ maxSize: 512 }), async (c) => {
 		const clientKey = pairingClientKey(c, options);
 		const blocked = buckets.pairingExchange().check(clientKey);
 		if (blocked.blocked) {

package/dist/src/gateway/hono/routes/endpoint-tools.js

@@ -71,6 +71,7 @@ function registerEndpointToolRoutes(authenticated, deps) {
 				...lastSeenAt ? { lastSeenAt } : {},
 				access: access ? {
 					scopes: access.scopes,
+					requestProofVersion: access.requestProofVersion,
 					createdAt: access.createdAt,
 					...access.lastSeenAt ? { lastSeenAt: access.lastSeenAt } : {},
 					...access.revokedAt ? { revokedAt: access.revokedAt } : {}

package/dist/src/gateway/hono/routes/lazy-bundles.js

@@ -407,6 +407,7 @@ const AUTHENTICATED_LAZY_ROUTE_BUNDLES = [
 			"/api/user-model",
 			"/api/knowledge-memory",
 			"/api/memory-maintenance",
+			"/api/memory-learning",
 			"/api/turns"
 		]),
 		load: async () => {

package/dist/src/gateway/hono/routes/mcp.js

@@ -1,6 +1,6 @@
+import { getWorkspacePath } from "../../../config/workspace-path-helpers.js";
 import { isManagedConnectorServer } from "../../../connectors/materialize.js";
 import { loadMergedMcpConfig } from "../../../agent/mcp/config.js";
-import { getWorkspacePath } from "../../../config/workspace-path-helpers.js";
 //#region src/gateway/hono/routes/mcp.ts
 function registerMcpRoutes(app, deps) {
 	app.get("/api/mcp/servers", (c) => {

package/dist/src/gateway/hono/routes/memory-learning.d.ts

@@ -0,0 +1,3 @@
+import type { Hono } from 'hono';
+import type { AuthenticatedRouteDeps } from './deps.js';
+export declare function registerMemoryLearningRoutes(app: Hono, deps: AuthenticatedRouteDeps): void;

package/dist/src/gateway/hono/routes/memory-learning.js

@@ -0,0 +1,76 @@
+import { getSqliteDatabase, init_transaction } from "../../../storage/sqlite/transaction.js";
+import { getSessionMetadata } from "../../../storage/sqlite/session-read-repository.js";
+import { init_session_repository } from "../../../storage/sqlite/session-repository.js";
+import { getSessionConfig, init_config_repository } from "../../../storage/sqlite/config-repository.js";
+import { bindOwnerIdentity } from "../../../user-context/identity-bindings.js";
+import { canUseKnowledge, knowledgeExclusion } from "../../../knowledge-memory/usage-policy.js";
+import { getKnowledgeItem } from "../../../knowledge-memory/repository.js";
+import { init_config, resolveKnowledgeReadPolicy } from "../../../user-context/config.js";
+import { enqueueConversationLearning, learningStatus } from "../../../memory-learning/repository.js";
+import "../../../knowledge-memory/index.js";
+import { resolveEffectiveAgentProfileForSession } from "../../../config/agent-profile.js";
+//#region src/gateway/hono/routes/memory-learning.ts
+init_config_repository();
+init_transaction();
+init_session_repository();
+init_config();
+function registerMemoryLearningRoutes(app, deps) {
+	app.get("/api/memory-learning/status", (c) => c.json(learningStatus(deps.service.currentConfig)));
+	app.get("/api/memory-learning/jobs/:id", (c) => {
+		const job = getSqliteDatabase().prepare(`SELECT job_id AS id, state, attempts, error_code AS errorCode,
+      created_at AS createdAt, updated_at AS updatedAt FROM memory_learning_jobs WHERE job_id = ? AND principal_id = 'local-owner'`).get(c.req.param("id"));
+		return job ? c.json({ job }) : c.json({ error: "Learning job not found" }, 404);
+	});
+	app.post("/api/memory-learning/rebuild", deps.strictRateLimitMiddleware, async (c) => {
+		const input = await c.req.json().catch(() => null);
+		if (!input || typeof input.conversationId !== "string") return c.json({ error: "conversationId is required" }, 400);
+		if (!getSessionMetadata(input.conversationId)) return c.json({ error: "Conversation not found" }, 404);
+		const jobId = enqueueConversationLearning(deps.service.currentConfig, input.conversationId, getSessionConfig(input.conversationId)?.workingDirectoryOverride ?? resolveEffectiveAgentProfileForSession(input.conversationId).resolvedWorkspacePath, true);
+		return jobId ? c.json({ jobId }, 202) : c.json({
+			queued: false,
+			reason: "not_eligible_or_already_queued"
+		});
+	});
+	app.post("/api/memory-learning/owner-identities", deps.strictRateLimitMiddleware, async (c) => {
+		const input = await c.req.json().catch(() => null);
+		if (!input || ![
+			"channel",
+			"accountId",
+			"peerId"
+		].every((key) => typeof input[key] === "string" && input[key].trim())) return c.json({ error: "channel, accountId and peerId are required" }, 400);
+		bindOwnerIdentity(input);
+		return c.json({ ok: true });
+	});
+	app.get("/api/memory-learning/owner-identities", (c) => c.json({ identities: getSqliteDatabase().prepare(`
+    SELECT channel, account_id AS accountId, peer_id AS peerId, verified_at AS verifiedAt
+    FROM owner_identity_bindings WHERE principal_id = 'local-owner' AND revoked_at IS NULL ORDER BY verified_at DESC`).all() }));
+	app.delete("/api/memory-learning/owner-identities", deps.strictRateLimitMiddleware, async (c) => {
+		const input = await c.req.json().catch(() => null);
+		if (!input || ![
+			"channel",
+			"accountId",
+			"peerId"
+		].every((key) => typeof input[key] === "string")) return c.json({ error: "Identity fields are required" }, 400);
+		getSqliteDatabase().prepare("UPDATE owner_identity_bindings SET revoked_at = ? WHERE channel = ? AND account_id = ? AND peer_id = ?").run(Date.now(), input.channel, input.accountId, input.peerId);
+		return c.json({ ok: true });
+	});
+	app.get("/api/knowledge-memory/:id/evidence", (c) => {
+		const item = getKnowledgeItem(c.req.param("id"));
+		const context = {
+			agentId: c.req.query("agentId") ?? item?.sourceAgentId ?? "main",
+			workspaceId: c.req.query("workspaceId") ?? (item?.scope.type === "workspace" ? item.scope.id : ""),
+			conversationId: c.req.query("conversationId") ?? item?.sourceConversationId ?? "",
+			projectId: c.req.query("projectId") ?? (item?.scope.type === "project" ? item.scope.id : void 0)
+		};
+		if (!item || !canUseKnowledge(item, context, resolveKnowledgeReadPolicy(deps.service.currentConfig.userContext.knowledgeMemory))) return c.json({
+			error: "Knowledge evidence not available",
+			reason: item ? knowledgeExclusion(item, context, resolveKnowledgeReadPolicy(deps.service.currentConfig.userContext.knowledgeMemory)) : "not_found"
+		}, 404);
+		const evidence = getSqliteDatabase().prepare(`SELECT e.source_type AS sourceType, e.source_ref AS sourceRef,
+      e.observed_at AS observedAt, e.redacted_excerpt AS excerpt FROM knowledge_evidence_links l
+      JOIN context_evidence e ON e.evidence_id = l.evidence_id WHERE l.knowledge_id = ?`).all(item.id);
+		return c.json({ evidence });
+	});
+}
+//#endregion
+export { registerMemoryLearningRoutes };

package/dist/src/gateway/hono/routes/models.js

@@ -1,3 +1,4 @@
+import { resolveEffectiveAgentConfigForAgent } from "../../../config/agent-profile.js";
 import { init_resolve_config_value, testApiKeyResolution } from "../../../config/resolve-config-value.js";
 import { resolveModelsJsonPath } from "../../../config/paths.js";
 import { computerModelProfile, init_model_policy, isDedicatedComputerModel } from "../../../computer/model-policy.js";
@@ -9,7 +10,6 @@ import "../../../providers/constants.js";
 import { getProviderRegistry, init_plugin_registry } from "../../../providers/plugin-registry.js";
 import { PROVIDER_META, getAllModels, getAllProviders, getAvailableModels, getProviderAuthState, init_providers, isProviderConfigured, isProviderConfiguredSync } from "../../../providers/index.js";
 import { XopcCloudAccountError, XopcCloudAccountService } from "../../../providers/xopc-cloud-account-service.js";
-import { resolveEffectiveAgentConfigForAgent } from "../../../config/agent-profile.js";
 import { buildCapabilityPlansForConfig } from "../../../capabilities/readiness/from-config.js";
 import "../../../capabilities/readiness/index.js";
 import { getModelThinking } from "../../../providers/model-thinking.js";

package/dist/src/gateway/hono/routes/notes.js

@@ -1,9 +1,9 @@
 import { NoteDeleteOutputSchema, NoteGetOutputSchema, ProductReadContracts } from "../../../../packages/gateway-contract/src/capabilities.js";
 import { init_src } from "../../../../packages/gateway-contract/src/index.js";
-import { CapabilityError } from "../../../capabilities/runtime/errors.js";
-import "../../../capabilities/runtime/dispatcher.js";
 import { init_session_key, resolveConversationId } from "../../../routing/session-key.js";
 import { agentExists, getDefaultAgentId, init_resolve_route } from "../../../routing/resolve-route.js";
+import { CapabilityError } from "../../../capabilities/runtime/errors.js";
+import "../../../capabilities/runtime/dispatcher.js";
 import { resolveGatewayEffectiveHost } from "../../../config/gateway-bind.js";
 import { getShareStore } from "../../../share/share-store.js";
 import { resolveShareUrl } from "../../../share/share-url.js";

package/dist/src/gateway/hono/routes/personal-agent.js

@@ -40,6 +40,7 @@ const OnboardingSchema = z.object({
 	draft: PersonalOnboardingDraftSchema
 }).strict();
 const ProfileSchema = z.object({
+	voiceCallPreferences: z.object({ openingGreetingEnabled: z.boolean() }).strict().optional(),
 	revision: z.number().int().positive(),
 	displayName: z.string().trim().min(1).max(60),
 	appearance: PersonalAppearanceSchema,
@@ -348,7 +349,7 @@ function registerPersonalAgentRoutes(authenticated, deps) {
 			ok: false,
 			error: "Invalid profile"
 		}, 400);
-		const { revision, displayName, appearance, preferences, voicePreference } = parsed.data;
+		const { revision, displayName, appearance, preferences, voicePreference, voiceCallPreferences } = parsed.data;
 		if (voicePreference) {
 			const { resolveStreamingTts } = await import("../../../voice/realtime/runtime.js");
 			const route = resolveStreamingTts(deps.service.currentConfig);
@@ -364,7 +365,7 @@ function registerPersonalAgentRoutes(authenticated, deps) {
 				error: "Selected voice is unavailable"
 			}, 400);
 		}
-		const updated = await patchPersonalProfile(deps.service, ownerId, revision, displayName, preferences, appearance, voicePreference);
+		const updated = await patchPersonalProfile(deps.service, ownerId, revision, displayName, preferences, appearance, voicePreference, voiceCallPreferences);
 		return updated ? c.json({
 			ok: true,
 			payload: updated

package/dist/src/gateway/hono/routes/projects.js

@@ -7,12 +7,12 @@ import { loadTranscriptRowsForSession } from "../../../storage/sqlite/transcript
 import { init_sqlite } from "../../../storage/sqlite/index.js";
 import { ActivityService } from "../../../activity/service.js";
 import "../../../activity/index.js";
-import { CapabilityError } from "../../../capabilities/runtime/errors.js";
-import "../../../capabilities/runtime/dispatcher.js";
-import { resolveEffectiveAgentProfile } from "../../../config/agent-profile.js";
 import { listKnowledgeItems, writeKnowledgeItem } from "../../../knowledge-memory/repository.js";
 import "../../../knowledge-memory/index.js";
+import { resolveEffectiveAgentProfile } from "../../../config/agent-profile.js";
 import { TaskReadModelProjector } from "../../../tasks/task-read-model-projector.js";
+import { CapabilityError } from "../../../capabilities/runtime/errors.js";
+import "../../../capabilities/runtime/dispatcher.js";
 import { ProjectWorkspaceConflictError, ProjectWorkspaceMissingError } from "../../../projects/workspace-project.js";
 import { inferProjectExecutionMode, inferProjectKind } from "../../../projects/project-kind.js";
 import { ProjectDeletionBlockedError, ProjectWorkspaceInUseError } from "../../../projects/project-service.js";

package/dist/src/gateway/hono/routes/public-gateway.js

@@ -25,18 +25,18 @@ function secretsEqual(actual, expected) {
 }
 function registerPublicGatewayRoutes(app, service) {
 	app.get("/health", (c) => {
-		return c.json(service.getHealth());
+		const health = service.getHealth();
+		return c.json({
+			status: health.ready ? "ok" : "starting",
+			ready: health.ready
+		});
 	});
 	/** Public liveness probe (no auth) — minimal payload for CLI / load balancers. */
 	app.get("/api/health", (c) => {
 		const health = service.getHealth();
 		return c.json({
 			status: health.ready ? "ok" : "starting",
-			ready: health.ready,
-			httpListening: health.httpListening,
-			version: health.version,
-			uptime: health.uptime,
-			startupDurationMs: health.startupDurationMs
+			ready: health.ready
 		});
 	});
 	app.post("/api/connectors/composio/webhook", async (c) => {

package/dist/src/gateway/hono/routes/session-input-handler.js

@@ -5,9 +5,9 @@ import { endpointContextSchema } from "../../../../packages/gateway-contract/src
 import { parseUserTurnDocument, userTurnDocumentRefIds } from "../../../../packages/gateway-contract/src/user-turn-document.js";
 import { init_src } from "../../../../packages/gateway-contract/src/index.js";
 import { endpointTurnClaimSchema, init_src as init_src$1 } from "../../../../packages/endpoint-tools-protocol/src/index.js";
+import { init_providers, resolveModel } from "../../../providers/index.js";
 import { CapabilityError } from "../../../capabilities/runtime/errors.js";
 import "../../../capabilities/runtime/dispatcher.js";
-import { init_providers, resolveModel } from "../../../providers/index.js";
 import { getModelThinking } from "../../../providers/model-thinking.js";
 import { validateWebchatAttachments, validateWebchatContent } from "../../chat-limits.js";
 import { isTaskDestructiveCommand } from "../../../session/reset-triggers.js";

package/dist/src/gateway/hono/routes/shares.js

@@ -1,3 +1,4 @@
+import { getClientIpFromHeaders, init_loopback } from "../../security/loopback.js";
 import { loadCompactionSourceSnapshot } from "../../../storage/sqlite/transcript-repository.js";
 import { init_sqlite } from "../../../storage/sqlite/index.js";
 import { FileServiceError } from "../../../files/file-service.js";
@@ -16,7 +17,6 @@ import { resolveReverseProxyPublicUrl } from "../../public-url.js";
 import { audienceDefaults, cleanupStagedSite, decideShareKind, forgetStagedSite, makeDescription, makeTitle, probeShareTarget, rememberStagedSite, stageSingleHtmlAsSite } from "../../../share/share-auto.js";
 import { deleteThumbnail, placeholderSvg, readThumbnail, scheduleThumbnail, thumbnailContentType, thumbnailExists } from "../../../share/share-thumbnail.js";
 import { getGatewayFileSpaceService } from "../../file-space-service.js";
-import { getClientIpFromHeaders } from "../../security/loopback.js";
 import { SHARED_HTML_CSP } from "../../security/csp.js";
 import { getGatewayPrincipal } from "../../security/gateway-principal.js";
 import { renderFolderLandingPage, renderShareExpiredPage, renderShareLandingPage, renderSnapshotShareLandingPage } from "../../../share/share-landing.js";
@@ -31,6 +31,7 @@ import { createHash } from "node:crypto";
 import { stat } from "node:fs/promises";
 import { Readable } from "node:stream";
 //#region src/gateway/hono/routes/shares.ts
+init_loopback();
 init_sqlite();
 function getShareUrlContext(service) {
 	const gateway = service.currentConfig.gateway;

package/dist/src/gateway/hono/routes/tasks.js

@@ -6,9 +6,9 @@ import { hasGatewayScope, init_gateway_scopes } from "../../security/gateway-sco
 import { enqueueTaskChangedEvent, init_task_change_events } from "../../../tasks/task-change-events.js";
 import { TaskRepository, init_task_repository } from "../../../tasks/task-repository.js";
 import { TaskRunRepository, init_task_run_repository } from "../../../tasks/task-run-repository.js";
+import { TaskConversationRepository } from "../../../tasks/task-conversation-repository.js";
 import { CapabilityError } from "../../../capabilities/runtime/errors.js";
 import "../../../capabilities/runtime/dispatcher.js";
-import { TaskConversationRepository } from "../../../tasks/task-conversation-repository.js";
 import { TaskCriterionReviewRepository } from "../../../tasks/task-criterion-review-repository.js";
 import { TaskContextMutationOutputSchema } from "../../../tasks/capabilities/relations.js";
 import { TaskDeleteOutputSchema } from "../../../tasks/capabilities/management.js";

package/dist/src/gateway/hono/routes/user-model-refresh.js

@@ -1,8 +1,8 @@
 import { listConnectorLearningJobs } from "../../../storage/sqlite/connector-learning-repository.js";
 import { getConnectorAccount } from "../../../storage/sqlite/connector-account-repository.js";
 import { init_sqlite } from "../../../storage/sqlite/index.js";
-import { getWorkDiscoveryRun } from "../../../work-discovery/repository.js";
 import { getConnectorUnderstandingSourceRun } from "../../../user-context/sources/repository.js";
+import { getWorkDiscoveryRun } from "../../../work-discovery/repository.js";
 import { isLocalUnderstandingSourceId } from "../../../user-context/sources/local-source-contract.js";
 import { normalizeUnderstandingSourceItems } from "../../../work-discovery/service.js";
 import { UnderstandingRefreshService } from "../../../user-context/sources/refresh-service.js";