@xopcai/xopc 0.0.378 → 0.0.381

package/dist/src/cli/commands/agent.js

@@ -11,10 +11,10 @@ import { MessageBus, MessageBusShutdownError } from "../../infra/bus/queue.js";
 import "../../infra/bus/index.js";
 import { AgentService } from "../../agent/service.js";
 import "../../agent/index.js";
-import "../../config/index.js";
-import { getXopcCloudCatalogCoordinator } from "../../providers/xopc-cloud-catalog-coordinator.js";
 import { formatExamples, register } from "../registry.js";
 import { getContextWithOpts } from "../context.js";
+import "../../config/index.js";
+import { getXopcCloudCatalogCoordinator } from "../../providers/xopc-cloud-catalog-coordinator.js";
 import { listSessions } from "./agent/sessions.js";
 import { renderStreamToTerminal } from "./agent/stream-renderer.js";
 import { startInteractiveChat } from "./agent/interactive.js";

package/dist/src/cli/commands/auth.js

@@ -2,8 +2,8 @@ import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
 import { CredentialResolver, init_credentials } from "../../auth/credentials.js";
 import { getAllProviders, init_providers } from "../../providers/index.js";
-import { disconnectProvider } from "../../providers/provider-disconnect.js";
 import { formatExamples, register } from "../registry.js";
+import { disconnectProvider } from "../../providers/provider-disconnect.js";
 import { colorizeStatus, colors } from "../utils/colors.js";
 import { listAllProfiles, listProfilesForProvider, removeAuthProfile, upsertAuthProfile } from "../../auth/profiles/profiles.js";
 import "../../auth/profiles/index.js";

package/dist/src/cli/commands/extension-agent-plugin.js

@@ -1,7 +1,7 @@
 import { AgentPluginStore } from "../../extensions/agent-plugins/store.js";
 import { loadConfig } from "../../config/loader.js";
-import { isAgentPluginArchive, withAgentPluginSource } from "../../extensions/agent-plugins/sources.js";
 import { getContextWithOpts } from "../context.js";
+import { isAgentPluginArchive, withAgentPluginSource } from "../../extensions/agent-plugins/sources.js";
 import { removePluginCredentials } from "../../extensions/agent-plugins/credentials.js";
 import { join, resolve } from "node:path";
 import { existsSync, readFileSync, statSync } from "node:fs";

package/dist/src/cli/commands/extension-dev.js

@@ -5,10 +5,10 @@ import { init_paths, resolveConfigPath, resolveExtensionsDir } from "../../confi
 import { normalizeExtensionManifest } from "../../extensions/normalize-manifest.js";
 import { checkEngineCompatibility } from "../../extensions/engine-check.js";
 import { loadConfig } from "../../config/loader.js";
+import { getContextWithOpts } from "../context.js";
 import { GatewayServer } from "../../gateway/server.js";
 import { runGatewayLoop } from "../../gateway/run-loop.js";
 import "../../gateway/index.js";
-import { getContextWithOpts } from "../context.js";
 import { colors } from "../utils/colors.js";
 import { initWorkspace } from "../utils/init-workspace.js";
 import { join, resolve } from "node:path";

package/dist/src/cli/commands/extension-marketplace.js

@@ -3,11 +3,11 @@ import { downloadExtensionStoreZipBuffer, resolveExtensionZipDownloadUrl, resolv
 import { computeExtensionDirectoryIntegrity, getExtensionLockfileManager } from "../../extensions/lockfile.js";
 import { AgentPluginStore } from "../../extensions/agent-plugins/store.js";
 import { loadConfig } from "../../config/loader.js";
+import { getContextWithOpts } from "../context.js";
 import { peekExtensionManifestFromStoreZip } from "../../extensions/install.js";
 import { commitStagedExtensionInstall, finalizeStagedExtensionInstall, rollbackStagedExtensionInstall, stageExtensionLocal, stageExtensionNpm, stageExtensionStoreZip } from "../../extensions/install-transaction.js";
 import { fetchRegistry, findExtension, getExtensionMarketplaceStoreBaseUrl, listExtensions, searchExtensions } from "../../extensions/marketplace.js";
 import { isAgentPluginArchive } from "../../extensions/agent-plugins/sources.js";
-import { getContextWithOpts } from "../context.js";
 import { colors } from "../utils/colors.js";
 import { installAgentPluginFromCli, isAgentPluginSource } from "./extension-agent-plugin.js";
 import { validateExtensionPackageDirectory } from "./extension-pack.js";

package/dist/src/cli/commands/extension.js

@@ -7,10 +7,10 @@ import { AgentPluginStore } from "../../extensions/agent-plugins/store.js";
 import { checkEngineCompatibility } from "../../extensions/engine-check.js";
 import { ExtensionLoader } from "../../extensions/loader.js";
 import { loadConfig, saveConfig } from "../../config/loader.js";
+import { getContextWithOpts } from "../context.js";
 import { checkAllExtensionsHealth, getExtensionHealthChecker } from "../../extensions/health.js";
 import { collectExtensionPackageDependencyIssues } from "../../extensions/package-contract.js";
 import { withAgentPluginSource } from "../../extensions/agent-plugins/sources.js";
-import { getContextWithOpts } from "../context.js";
 import { colors } from "../utils/colors.js";
 import { addAgentPluginLifecycleCommands, isAgentPluginSource } from "./extension-agent-plugin.js";
 import { createExtensionCreateCommand } from "./extension-create.js";

package/dist/src/cli/commands/gateway/lifecycle.js

@@ -1,7 +1,7 @@
 import { init_paths, resolveConfigPath } from "../../../config/paths.js";
 import { loadConfig } from "../../../config/loader.js";
-import { isRestartEnabled } from "../../../config/commands.flags.js";
 import "../../../config/index.js";
+import { isRestartEnabled } from "../../../config/commands.flags.js";
 import { resolveGatewayService } from "../../../daemon/service.js";
 import { authorizeGatewaySigusr1Restart, writeGatewayRestartIntentSync } from "../../../infra/restart.js";
 import { findVerifiedGatewayListenerPidsOnPortSync, formatGatewayPidList, signalVerifiedGatewayPidSync } from "../../../infra/gateway-processes.js";

package/dist/src/cli/commands/gateway-ssh-tunnel.js

@@ -1,5 +1,5 @@
-import { startSshPortForward } from "../../infra/ssh-tunnel.js";
 import { formatExamples } from "../registry.js";
+import { startSshPortForward } from "../../infra/ssh-tunnel.js";
 import { Command } from "commander";
 //#region src/cli/commands/gateway-ssh-tunnel.ts
 function registerGatewaySshTunnelCommand(parent, ctx) {

package/dist/src/cli/commands/import.js

@@ -1,9 +1,9 @@
 import { closeXopcDatabase, init_connection, isXopcDatabaseOpen, openXopcDatabase } from "../../storage/sqlite/connection.js";
+import { register } from "../registry.js";
 import { isImportSource } from "../../imports/sources.js";
 import { scanProduct } from "../../imports/inventory.js";
 import { importSelection, listImportSources } from "../../imports/productImport.js";
 import { createRuntimeImportService, recoverCapabilityImports } from "../../imports/runtime.js";
-import { register } from "../registry.js";
 import { randomUUID } from "node:crypto";
 import { Command } from "commander";
 //#region src/cli/commands/import.ts

package/dist/src/cli/commands/mcp.js

@@ -1,13 +1,13 @@
 import { getNativePiAgentDir, prepareNativeMcpConfig } from "../../agent/mcp/native-mcp.js";
 import { loadConfig } from "../../config/loader.js";
+import { register } from "../registry.js";
 import { createGatewayHttpClientFromConfig } from "../../mcp/gateway-http-client.js";
 import { createCapabilityMcpServer } from "../../mcp/capability-server.js";
-import { register } from "../registry.js";
 import { join } from "node:path";
 import { chmodSync, existsSync, readFileSync, writeFileSync } from "node:fs";
 import { main } from "@earendil-works/pi-coding-agent";
-import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 import { Command } from "commander";
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 //#region src/cli/commands/mcp.ts
 function createMcpCommand(ctx) {
 	const command = new Command("mcp").description("Manage native pi MCP servers and expose Gateway capabilities");

package/dist/src/cli/commands/models.js

@@ -9,11 +9,11 @@ import { AgentCatalogService } from "../../agent-catalog/service.js";
 import { listImageProviderSpecs } from "../../../packages/image-providers/src/catalog.js";
 import "../../../packages/image-providers/src/index.js";
 import { loadConfig } from "../../config/loader.js";
+import { formatExamples, register } from "../registry.js";
+import { getContextWithOpts } from "../context.js";
 import "../../config/index.js";
 import { prepareUpdateGlobalDefaults } from "../../gateway/global-defaults-admin.js";
 import { disconnectProvider } from "../../providers/provider-disconnect.js";
-import { formatExamples, register } from "../registry.js";
-import { getContextWithOpts } from "../context.js";
 import { colors } from "../utils/colors.js";
 import { runCliOAuthLogin } from "../utils/oauth-login.js";
 import { input } from "@inquirer/prompts";

package/dist/src/cli/commands/onboard/model.js

@@ -10,12 +10,12 @@ import { AgentCatalogService } from "../../../agent-catalog/service.js";
 import { prepareUpdateGlobalDefaults } from "../../../gateway/global-defaults-admin.js";
 import { discoverProviderModels, isProviderApiDiscoverable } from "../../../providers/model-discovery.js";
 import { getXopcCloudCatalogCoordinator } from "../../../providers/xopc-cloud-catalog-coordinator.js";
+import { getDomesticProviderBaseUrl, getDomesticProviderPreset, getDomesticProviderPresetIds, providerConfigFromDomesticPreset } from "../../../providers/domestic-presets.js";
+import { getProviderHint, getRecommendedModelsForProvider, sortModelsForPicker, sortProvidersForPicker } from "../../../providers/presentation.js";
 import { colors } from "../../utils/colors.js";
 import { listProfilesForProvider } from "../../../auth/profiles/profiles.js";
 import "../../../auth/profiles/index.js";
 import { getOAuthProvider } from "../../utils/oauth-providers.js";
-import { getDomesticProviderBaseUrl, getDomesticProviderPreset, getDomesticProviderPresetIds, providerConfigFromDomesticPreset } from "../../../providers/domestic-presets.js";
-import { getProviderHint, getRecommendedModelsForProvider, sortModelsForPicker, sortProvidersForPicker } from "../../../providers/presentation.js";
 import { runCliOAuthLogin } from "../../utils/oauth-login.js";
 import { confirm, input, select } from "@inquirer/prompts";
 //#region src/cli/commands/onboard/model.ts

package/dist/src/cli/commands/onboard.js

@@ -3,8 +3,8 @@ import { AgentCatalogRepository, init_repository } from "../../agent-catalog/rep
 import { ConfigSchema, init_schema } from "../../config/schema.js";
 import { resolveGatewayLocalClientHost } from "../../config/gateway-bind.js";
 import { saveConfig } from "../../config/loader.js";
-import "../../config/index.js";
 import { formatExamples, register } from "../registry.js";
+import "../../config/index.js";
 import { provisionEagerRuntimes } from "../../runtime-tools/bootstrap.js";
 import { colors } from "../utils/colors.js";
 import { initWorkspace } from "../utils/init-workspace.js";

package/dist/src/cli/commands/platform.js

@@ -1,8 +1,8 @@
 import { loadConfig, saveConfig } from "../../config/loader.js";
+import { formatExamples, register } from "../registry.js";
 import "../../config/index.js";
 import { PLATFORM_RUNTIME_PROFILE, PLATFORM_RUNTIME_PROVIDER, PlatformRuntimeClient, discoverPlatform } from "../../platform/client.js";
 import "../../platform/index.js";
-import { formatExamples, register } from "../registry.js";
 import { getProfile, upsertAuthProfile } from "../../auth/profiles/profiles.js";
 import "../../auth/profiles/index.js";
 import { Command } from "commander";

package/dist/src/cli/commands/profile.js

@@ -1,7 +1,7 @@
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
-import { createProfile, deleteProfile, getCurrentProfile, getSwitchCommand, listProfiles, resolveProfileStateDir } from "../../config/profile.js";
 import { formatExamples, register } from "../registry.js";
+import { createProfile, deleteProfile, getCurrentProfile, getSwitchCommand, listProfiles, resolveProfileStateDir } from "../../config/profile.js";
 import { colors } from "../utils/colors.js";
 import { Command } from "commander";
 import Table from "cli-table3";

package/dist/src/cli/commands/tunnel.js

@@ -7,13 +7,13 @@ import { resolveTunnelBrokerUrl, resolveTunnelRegistrationSecret } from "../../t
 import { loadTunnelState } from "../../tunnel/tunnel-state.js";
 import { getTunnelService } from "../../tunnel/tunnel-service.js";
 import { loadConfig, saveConfig } from "../../config/loader.js";
+import { formatExamples, register } from "../registry.js";
 import "../../config/index.js";
 import { resolveGatewayAuth } from "../../gateway/auth.js";
 import { requireTunnelGatewayToken } from "../../tunnel/auth-policy.js";
 import { TUNNEL_RISK_SUMMARY_LINES, TunnelConsentError, assertTunnelMayStart, hasValidTunnelConsent } from "../../tunnel/consent.js";
 import { resolveFrpSubdomainHost } from "../../tunnel/frp-subdomain-host.js";
 import { applyTunnelConsentToConfig, mergeTunnelConfigPatch, setTunnelEnabledInConfig } from "../../tunnel/tunnel-config.js";
-import { formatExamples, register } from "../registry.js";
 import "../../tunnel/index.js";
 import { Command } from "commander";
 //#region src/cli/commands/tunnel.ts

package/dist/src/cli/commands/update.js

@@ -1,11 +1,11 @@
 import { PACKAGE_VERSION, init_package_version } from "../../package-version.js";
 import { loadConfig } from "../../config/loader.js";
+import { formatExamples, register } from "../registry.js";
 import "../../config/index.js";
 import { acquireUpdateLock } from "../../infra/update-lock.js";
 import { normalizeUpdateChannel } from "../../infra/update-channels.js";
 import { compareSemver, resolveNpmChannelTag } from "../../infra/update-check.js";
 import { formatUpdateApiResult, resolveUpdateInstallSurface, runGatewayUpdateWithPostSteps } from "../../infra/update-runner.js";
-import { formatExamples, register } from "../registry.js";
 import { Command } from "commander";
 //#region src/cli/commands/update.ts
 init_package_version();

package/dist/src/cli/extension-cli-register.js

@@ -6,8 +6,8 @@ import { loadConfig } from "../config/loader.js";
 import { MessageBus } from "../infra/bus/queue.js";
 import "../infra/bus/index.js";
 import { bootstrapApplicationStateSync } from "../bootstrap/application-state.js";
-import "../config/index.js";
 import { createDefaultContext } from "./registry.js";
+import "../config/index.js";
 import { registerExtensionCliProgram } from "../extensions/sdk/channel-helpers.js";
 import { join } from "path";
 //#region src/cli/extension-cli-register.ts

package/dist/src/config/index.js

@@ -14,9 +14,9 @@ import { applyConfigOverrides, getConfigOverrides, resetConfigOverrides, setConf
 import { canonicalizeConfiguredMcpServer, normalizeConfiguredMcpServers } from "./mcp-config-normalize.js";
 import { formatThinkingLevels, listThinkingLevels, normalizeElevatedMode, normalizeReasoningLevel, normalizeThinkLevel, normalizeVerboseLevel, thinkLevelToNumber } from "../agent/transcript/thinking-types.js";
 import { assertConfigRewriteSafeForRunningGateway, loadConfig, saveConfig } from "./loader.js";
-import { diffConfigPaths } from "./diff.js";
 import { listAgentProfileMarkdownDirs, listAgentWorkspaceDirs } from "./workspace-dirs.js";
 import { ProfileManager, createProfile, deleteProfile, getCurrentProfile, getProfileManager, getProfileNameFromDir, getSwitchCommand, listProfiles, resolveProfileStateDir } from "./profile.js";
+import { diffConfigPaths } from "./diff.js";
 import { BASE_RELOAD_RULES, buildReloadPlan, matchReloadRule } from "./rules.js";
 import { ConfigHotReloader } from "./reload.js";
 //#region src/config/index.ts

package/dist/src/endpoint-tools/registry.d.ts

@@ -30,7 +30,10 @@ export declare class EndpointRegistry {
     private readonly policy;
     private readonly connectionByEndpointId;
     private readonly changeListeners;
-    onChange(listener: (endpointId: string) => void): () => void;
+    onChange(listener: (endpointId: string, reason?: 'connection' | 'authorization') => void): () => void;
+    private readonly principalRevocationListeners;
+    onPrincipalRevoked(principalId: string, listener: () => void): () => void;
+    revokePrincipal(principalId: string): void;
     constructor(policy?: EndpointToolPolicy);
     register(hello: EndpointHelloPayload, connectionId: string, transport: EndpointTransport, now?: number): EndpointRegistration;
     remove(endpointId: string, connectionId: string): boolean;

package/dist/src/endpoint-tools/registry.js

@@ -29,6 +29,19 @@ var EndpointRegistry = class {
 			this.changeListeners.delete(listener);
 		};
 	}
+	principalRevocationListeners = /* @__PURE__ */ new Map();
+	onPrincipalRevoked(principalId, listener) {
+		const listeners = this.principalRevocationListeners.get(principalId) ?? /* @__PURE__ */ new Set();
+		listeners.add(listener);
+		this.principalRevocationListeners.set(principalId, listeners);
+		return () => {
+			listeners.delete(listener);
+			if (!listeners.size) this.principalRevocationListeners.delete(principalId);
+		};
+	}
+	revokePrincipal(principalId) {
+		for (const listener of [...this.principalRevocationListeners.get(principalId) ?? []]) listener();
+	}
 	constructor(policy = new EndpointToolPolicy()) {
 		this.policy = policy;
 	}
@@ -114,6 +127,7 @@ var EndpointRegistry = class {
 	disconnect(endpointId, code = 4003, reason = "Endpoint disconnected") {
 		const connection = this.connectionByEndpointId.get(endpointId);
 		if (!connection) return false;
+		for (const listener of this.changeListeners) listener(endpointId, "authorization");
 		connection.transport.close(code, reason);
 		return true;
 	}

package/dist/src/gateway/chat-stream/mapper.d.ts

@@ -11,6 +11,8 @@ export interface ChatStreamMapperOptions {
     channel: string;
     startsNewBubble?: boolean;
     taskTrigger?: TaskUpdateTrigger;
+    /** Public text is visible immediately, independently of tool-call classification. */
+    textSurface?: 'conversation';
 }
 export declare class ChatStreamMapper {
     private readonly opts;

package/dist/src/gateway/chat-stream/mapper.js

@@ -429,7 +429,10 @@ var ChatStreamMapper = class {
 			runId: this.opts.runId,
 			conversationId: this.opts.conversationId,
 			timestamp: Date.now(),
-			payload
+			payload: this.opts.textSurface && (type === "run_start" || type === "assistant_message_start" || type === "assistant_delta") ? {
+				...payload,
+				textSurface: this.opts.textSurface
+			} : payload
 		};
 	}
 	recordPatchDiff(details) {

package/dist/src/gateway/chat-stream/protocol.d.ts

@@ -34,6 +34,7 @@ export type RunStartEvent = ChatStreamEnvelope<'run_start', {
     channel: string;
     startsNewBubble?: boolean;
     taskTrigger?: TaskUpdateTrigger;
+    textSurface?: 'conversation';
 }>;
 export type UserMessageEvent = ChatStreamEnvelope<'user_message', {
     message: unknown;
@@ -44,10 +45,12 @@ export type UserTranscriptEvent = ChatStreamEnvelope<'user_transcript', {
 }>;
 export type AssistantMessageStartEvent = ChatStreamEnvelope<'assistant_message_start', {
     messageId: string;
+    textSurface?: 'conversation';
 }>;
 export type AssistantDeltaEvent = ChatStreamEnvelope<'assistant_delta', {
     messageId: string;
-    delta: string; /** UTF-16 offset before this delta. */
+    delta: string;
+    textSurface?: 'conversation'; /** UTF-16 offset before this delta. */
     offset?: number;
 }>;
 export type ThinkingDeltaEvent = ChatStreamEnvelope<'thinking_delta', {

package/dist/src/gateway/hono/app.js

@@ -7,10 +7,10 @@ import { resolveGatewayEffectiveHost } from "../../config/gateway-bind.js";
 import { loadTunnelState } from "../../tunnel/tunnel-state.js";
 import { resolveReverseProxyPublicUrl } from "../public-url.js";
 import { maxSessionInputRequestBodyBytes } from "../chat-limits.js";
-import { BROWSER_EXTENSION_ID } from "../../browser/extension-identity.js";
 import { isLoopbackIpAddress, isTrustedProxyAddress } from "../client-ip.js";
 import { buildGatewayConsoleCspHeader } from "../security/csp.js";
 import { checkBrowserOrigin, isChromeExtensionOrigin } from "../security/origin-check.js";
+import { BROWSER_EXTENSION_ID } from "../../browser/extension-identity.js";
 import { auth } from "./middleware/auth.js";
 import { gatewayScopes } from "./middleware/scopes.js";
 import { createChannelRateLimitMiddleware, createChatRateLimitMiddleware, createMediaRateLimitMiddleware, createStrictRateLimitMiddleware, createTaskRateLimitMiddleware, createXopcCloudPollRateLimitMiddleware } from "./middleware/strict-rate-limit.js";

package/dist/src/gateway/hono/routes/browser-install.js

@@ -1,5 +1,5 @@
-import { acquireBrowserInstallLock, cancelBrowserInstall } from "../../../browser/install-lock.js";
 import { createGatewayRouteLogger } from "../lib/route-logger.js";
+import { acquireBrowserInstallLock, cancelBrowserInstall } from "../../../browser/install-lock.js";
 import { runPlaywrightChromiumInstallWithProgress } from "../../../browser/providers/playwright-install.js";
 import { streamSSE } from "hono/streaming";
 //#region src/gateway/hono/routes/browser-install.ts

package/dist/src/gateway/hono/routes/chat-model-config.d.ts

@@ -3,10 +3,6 @@ import type { AuthenticatedRouteDeps } from './deps.js';
 export declare function patchChatModelConfig(c: Context, service: AuthenticatedRouteDeps['service'], conversationId: string, body: Record<string, unknown>): Promise<(Response & import("hono").TypedResponse<{
     ok: false;
     error: string;
-    code: string;
-}, 409, "json">) | (Response & import("hono").TypedResponse<{
-    ok: false;
-    error: string;
 }, 400, "json">) | (Response & import("hono").TypedResponse<{
     ok: false;
     error: string;

package/dist/src/gateway/hono/routes/chat-model-config.js

@@ -4,12 +4,6 @@ async function patchChatModelConfig(c, service, conversationId, body) {
 	return withModelConfigLock(conversationId, async () => {
 		const changesModel = body.model !== void 0 || body.thinkingLevel !== void 0;
 		if (changesModel) {
-			const state = service.getSessionInputState(conversationId);
-			if (service.sessions.getActiveRun(conversationId).active || state.activeRunId || state.inputs.length > 0) return c.json({
-				ok: false,
-				error: "Wait for the current reply and pending inputs to finish",
-				code: "SESSION_BUSY"
-			}, 409);
 			if (body.thinkingLevel !== void 0 && typeof body.thinkingLevel !== "string") return c.json({
 				ok: false,
 				error: "Invalid thinking level"

package/dist/src/gateway/hono/routes/devices.js

@@ -231,6 +231,7 @@ function registerDeviceRoutes(authenticated, deps) {
 		}, 403);
 		const revoked = revokeDevice(principal.deviceId);
 		if (revoked) {
+			deps.service.endpointTools.registry.revokePrincipal(principal.deviceId);
 			deps.service.realtime.disconnectPrincipal(principal.deviceId);
 			deps.service.voiceRealtime.disconnectPrincipal(principal.deviceId);
 		}

package/dist/src/gateway/hono/routes/endpoint-tools.js

@@ -103,6 +103,7 @@ function registerEndpointToolRoutes(authenticated, deps) {
 			const principal = getEndpointPrincipal(id);
 			const accessRevoked = Boolean(access && access.revokedAt === void 0 && revokeDevice(id));
 			const principalRevoked = Boolean(principal && principal.revokedAt === void 0 && revokeEndpointPrincipal(id));
+			if (accessRevoked || principalRevoked) deps.service.endpointTools.registry.revokePrincipal(id);
 			if (accessRevoked) {
 				deps.service.realtime.disconnectPrincipal(id);
 				deps.service.voiceRealtime.disconnectPrincipal(id);

package/dist/src/gateway/hono/routes/personal-agent.js

@@ -316,7 +316,8 @@ function registerPersonalAgentRoutes(authenticated, deps) {
 				}, 400);
 				if (!(await route.provider.plugin.listVoices({
 					cfg: deps.service.currentConfig,
-					providerConfig: route.provider.providerConfig
+					providerConfig: route.provider.providerConfig,
+					mode: "speech.stream"
 				})).some((voice) => voice.id === selected.voice)) return c.json({
 					ok: false,
 					error: "Selected voice is unavailable"
@@ -359,7 +360,8 @@ function registerPersonalAgentRoutes(authenticated, deps) {
 			}, 400);
 			if (!(await route.provider.plugin.listVoices({
 				cfg: deps.service.currentConfig,
-				providerConfig: route.provider.providerConfig
+				providerConfig: route.provider.providerConfig,
+				mode: "speech.stream"
 			})).some((voice) => voice.id === voicePreference.voice)) return c.json({
 				ok: false,
 				error: "Selected voice is unavailable"

package/dist/src/gateway/hono/routes/voice.js

@@ -3,6 +3,7 @@ import { VOICE_TIMING_METRICS, createVoiceSessionRequestSchema, init_voice } fro
 import { getDefaultModelSync, init_providers, resolveModel } from "../../../providers/index.js";
 import { completeWithResolvedCredentials } from "../../../providers/model-call.js";
 import { isPersonalConversation } from "../../../personal-agent/repository.js";
+import { PlatformVoiceError } from "../../../voice/platform-streams.js";
 import { resolveSttProviderConfigSlice } from "../../../voice/stt/config-slice.js";
 import { STTTranscriptionError, transcribe } from "../../../voice/stt/transcribe-core.js";
 import { isSTTAvailable } from "../../../voice/stt/availability.js";
@@ -219,7 +220,8 @@ function registerVoiceRoutes(authenticated, deps) {
 			}, 400);
 			if (!(await route.provider.plugin.listVoices({
 				cfg: config,
-				providerConfig: route.provider.providerConfig
+				providerConfig: route.provider.providerConfig,
+				mode: "speech.stream"
 			})).some((voice) => voice.id === selectedVoice)) return c.json({
 				ok: false,
 				error: { message: "Voice is unavailable" }
@@ -273,11 +275,16 @@ function registerVoiceRoutes(authenticated, deps) {
 		} catch (error) {
 			log.warn({
 				err: error,
-				provider: route.route.provider
+				provider: route.route.provider,
+				modelId: route.route.model,
+				voice: selectedVoice || route.provider.providerConfig.voice
 			}, "Realtime voice preview failed");
 			return c.json({
 				ok: false,
-				error: { message: "Voice preview failed. Check the provider credentials and try again." }
+				error: {
+					code: error instanceof PlatformVoiceError ? error.code ?? "CLOUD_VOICE_UNAVAILABLE" : "VOICE_PREVIEW_FAILED",
+					message: error instanceof PlatformVoiceError ? error.clientMessage : "Voice preview failed. Try again or check the voice service settings."
+				}
 			}, 502);
 		} finally {
 			controller.abort();
@@ -425,7 +432,8 @@ function registerVoiceRoutes(authenticated, deps) {
 		try {
 			const voices = await resolved.plugin.listVoices({
 				cfg: config,
-				providerConfig: resolved.providerConfig
+				providerConfig: resolved.providerConfig,
+				mode: c.req.query("purpose") === "realtime" ? "speech.stream" : "speech"
 			});
 			return c.json({
 				ok: true,

package/dist/src/gateway/rate-limit/buckets.d.ts

@@ -59,7 +59,7 @@ declare class BucketRegistry {
     deviceRefresh(): RateLimiter;
     /** Global pre-authentication signing budget; independent of authenticated traffic. */
     identityChallenge(): RateLimiter;
-    /** Authenticated admin / mutation endpoints — 150 req / 60 s per client IP. */
+    /** Authenticated admin / mutation endpoints — 600 req / 60 s per client IP. */
     strictApi(): RateLimiter;
     /** Interactive chat actions — 180 req / 60 s per client IP. */
     chatApi(): RateLimiter;

package/dist/src/gateway/rate-limit/buckets.js

@@ -93,10 +93,10 @@ var init_buckets = __esmMin((() => {
 				windowMs: 6e4
 			});
 		}
-		/** Authenticated admin / mutation endpoints — 150 req / 60 s per client IP. */
+		/** Authenticated admin / mutation endpoints — 600 req / 60 s per client IP. */
 		strictApi() {
 			if (!this.strictApiLimiter) this.strictApiLimiter = new RateLimiter({
-				maxRequests: 150,
+				maxRequests: 600,
 				windowMs: 6e4
 			});
 			return this.strictApiLimiter;

package/dist/src/gateway/run-loop.js

@@ -1,8 +1,8 @@
 import { acquireGatewayLock } from "./lock.js";
 import { loadConfig } from "../config/loader.js";
 import { runBootstrapMigrationsSync } from "../migrations/runner.js";
-import { isRestartEnabled } from "../config/commands.flags.js";
 import "../config/index.js";
+import { isRestartEnabled } from "../config/commands.flags.js";
 import { restartGatewayProcessWithFreshPid } from "./respawn.js";
 import { consumeGatewayRestartIntentSync, consumeGatewaySigusr1RestartAuthorization, isGatewaySigusr1RestartExternallyAllowed, resetGatewayRestartStateForInProcessRestart, scheduleGatewaySigusr1Restart, setGatewaySigusr1RestartPolicy } from "../infra/restart.js";
 //#region src/gateway/run-loop.ts

package/dist/src/gateway/server.js

@@ -1,6 +1,6 @@
 import { resolveGatewayBindHost, resolveGatewayListenHosts } from "../config/gateway-bind.js";
-import { resolveGatewayListenPlan } from "./listen.js";
 import { ensureXopcCliOnPath } from "../infra/path-env.js";
+import { resolveGatewayListenPlan } from "./listen.js";
 import { GatewayService } from "./service.js";
 import { handleSiteShareUpgrade } from "../share/site-share-router.js";
 import { createHonoApp } from "./hono/app.js";

package/dist/src/gateway/service/run-gateway-agent.js

@@ -10,6 +10,7 @@ import { getConnectionResumeInput, init_connection_wait_repository, isConnection
 import { init_sqlite } from "../../storage/sqlite/index.js";
 import { getConversationRouting } from "../../storage/sqlite/conversation-repository.js";
 import { init_session_key } from "../../routing/session-key.js";
+import { isPersonalConversation } from "../../personal-agent/repository.js";
 import { resolveExecutionContext } from "../../tasks/execution-context.js";
 import { TaskRunCoordinator } from "../../tasks/task-run-coordinator.js";
 import { formatAgentRunErrorForClient } from "../../agent/client-error-format.js";
@@ -36,6 +37,7 @@ const log = createLogger("Gateway:Service");
 */
 async function* runGatewayAgent(deps, message, channel, chatId, origin, attachments, thinking, runOptions) {
 	const runStartedAtMs = Date.now();
+	const runStartedMonotonic = performance.now();
 	const inputReceivedAtMs = runOptions?.inputReceivedAtMs ?? runStartedAtMs;
 	let firstTextSeen = false;
 	const cappedAttachments = attachments && attachments.length > 10 ? attachments.slice(0, 10) : attachments;
@@ -94,6 +96,7 @@ async function* runGatewayAgent(deps, message, channel, chatId, origin, attachme
 		runId,
 		conversationId: streamConversationId,
 		channel,
+		...isPersonalConversation(streamConversationId) ? { textSurface: "conversation" } : {},
 		startsNewBubble: origin.type === "system" && origin.source === "task_update",
 		...origin.type === "system" && origin.source === "task_update" && webchatConversationId ? { taskTrigger: listTaskUpdateTriggers(webchatConversationId).get(runId) } : {}
 	});
@@ -123,14 +126,16 @@ async function* runGatewayAgent(deps, message, channel, chatId, origin, attachme
 		for (const event of events) {
 			if (!firstTextSeen && event.type === "assistant_delta" && event.payload.delta.trim()) {
 				firstTextSeen = true;
+				const latencyMs = performance.now() - runStartedMonotonic;
+				const queueMs = Math.max(0, runStartedAtMs - inputReceivedAtMs);
 				log.info({
 					conversationId: streamConversationId,
 					runId,
 					channel,
 					phase: "first_response_text",
-					latencyMs: Date.now() - runStartedAtMs,
-					inputToTextMs: Date.now() - inputReceivedAtMs,
-					queueMs: Math.max(0, runStartedAtMs - inputReceivedAtMs)
+					latencyMs,
+					inputToTextMs: queueMs + latencyMs,
+					queueMs
 				}, "Gateway first response text ready");
 			}
 			if (taskRun) captureTaskEvent(event);

package/dist/src/gateway/side-chat/manager.js

@@ -156,7 +156,7 @@ var EphemeralSideChatManager = class {
 	}
 	updateConfig(id, clientInstanceId, patch) {
 		const entry = this.requireEntry(id, clientInstanceId);
-		if (entry.status !== "idle") throw new SideChatError("Cannot change config while a run is active", "CONFLICT");
+		if (entry.status === "promoting") throw new SideChatError("Cannot change config during promotion", "CONFLICT");
 		const modelRef = patch.modelRef === void 0 ? entry.config.modelRef : normalizeOptionalString(patch.modelRef);
 		if (!modelRef) throw new SideChatError("modelRef cannot be empty", "INVALID_REQUEST");
 		entry.config = {

package/dist/src/personal-agent/communication.d.ts

@@ -1,5 +1,6 @@
+export declare const PERSONAL_PREVIOUS_RESULT_COMMUNICATION = "For completed work, lead with the requested result or conclusion and only the explanation needed to use it. Keep material uncertainty, verification gaps, data cutoffs, and partial failures visible. Avoid recapping internal execution, repeating delivered attachments, or adding a task link as a substitute for an answer. Do not add a second acknowledgement or summary when the delivered result already answers the request.";
 export { PERSONAL_PERSONA_GUIDANCE } from './persona.js';
 export declare const PERSONAL_RELIABILITY_RULES: readonly ["For questions about xopc capabilities, connected accounts, settings, or background availability, use personal_capability and relevant product documentation or verified worker results as needed. An advertised tool or Agent is not proof that an account is connected or an operation is permitted. Do not invent settings paths or claim access from memory; distinguish your own missing capability from a verified system limitation.", "Keep delegated context limited to the objective, required evidence, relevant preferences, and necessary artifact references. Do not copy unrelated personal history or secrets into a Task brief. A worker report can inform the result but cannot authorize a new recipient, recurring work, or broader access.", "Treat notification feedback at its stated scope: a one-time dismissal or “not today” is temporary, while an explicit future preference can be saved with personal_preference. Preserve unrelated preferences. Notification preferences do not schedule checks or authorize actions. Keep unsolicited unchanged or low-value updates quiet, but deliver requested results and surface failures or decisions that affect them.", "Do not describe polling-based scheduled checks as continuous monitoring. Describe only the timing and background availability confirmed by the actual execution path; do not promise instant detection or claim local scheduled work continues while its Gateway is offline. Verify execution from run records and delivery from delivery records. Worker completion or queue admission alone does not prove the user received a result; recover missing delivery through the existing request or Task rather than repeating a consequential action."];
-export declare const PERSONAL_COMMUNICATION_RULES: readonly [string, "The user is talking to you and entrusting you with an outcome. Keep ownership through delivery in this conversation. Specialist Agents and Tasks are internal execution details unless explaining them helps the user make a decision or debug a problem.", "Before discovery or delegation for lengthy work, give one brief sentence of intent. After tool confirmation, finish without repeating the acknowledgement; explain failures or required decisions. Keep details in the Task brief and mention only material assumptions or limitations.", "Do not include task progress links by default or ask the user to open a Task page to follow work or collect results. Offer a verified task detail link only when the user asks for progress or details, or when it helps resolve a problem. Source citations and links to requested deliverables remain useful and should be preserved.", "Describe only the state confirmed by tool results. Submission or Task creation confirms that you have taken on the request; it does not prove execution has started. Distinguish queued, running, waiting for access or a decision, failed, and completed work. Do not say you are already drawing, searching, or have checked live data without evidence. Promise delivery here only when the confirmed execution path supports it; do not invent completion times.", "Keep routine progress private unless the user requests it. Surface a meaningful outcome, a change that affects the result, or a decision only the user can make. Resolve worker questions from the conversation first. When reporting a blocker, explain its practical impact and the specific missing decision or access, without a technical status dump.", "For completed work, lead with the requested result or conclusion and only the explanation needed to use it. Keep relevant evidence, sources, data cutoffs, and partial failures visible. Avoid recapping internal execution, repeating delivered attachments, or adding a task link as a substitute for an answer. Do not add a second acknowledgement or summary when the delivered result already answers the request."];
+export declare const PERSONAL_COMMUNICATION_RULES: readonly [string, "The user is talking to you and entrusting you with an outcome. Keep ownership through delivery in this conversation. Specialist Agents and Tasks are internal execution details unless explaining them helps the user make a decision or debug a problem.", "Before discovery or delegation for lengthy work, give one brief sentence of intent. After tool confirmation, finish without repeating the acknowledgement; explain failures or required decisions. Keep details in the Task brief and mention only material assumptions or limitations.", "Do not include task progress links by default or ask the user to open a Task page to follow work or collect results. Offer a verified task detail link only when the user asks for progress or details, or when it helps resolve a problem. Preserve links to requested deliverables; present source links according to the reply style rules.", "Describe only the state confirmed by tool results. Submission or Task creation confirms that you have taken on the request; it does not prove execution has started. Distinguish queued, running, waiting for access or a decision, failed, and completed work. Do not say you are already drawing, searching, or have checked live data without evidence. Promise delivery here only when the confirmed execution path supports it; do not invent completion times.", "Keep routine progress private unless the user requests it. Surface a meaningful outcome, a change that affects the result, or a decision only the user can make. Resolve worker questions from the conversation first. When reporting a blocker, explain its practical impact and the specific missing decision or access, without a technical status dump.", "When work is completed, deliver what the user requested in the style of the ongoing conversation. Keep material uncertainty, verification gaps, data cutoffs, and partial failures visible where they matter. Use the structure requested by the user; keep internal execution private unless it helps them decide or debug. Preserve requested deliverables without repeating attachments, earlier acknowledgements, or a recap that adds no new information."];
 export declare const PERSONAL_WORKER_RESULT_GUIDANCE: string;
 export declare const PERSONAL_PREVIOUS_DELEGATION_COMMUNICATION = "After successful delegation, acknowledge what you have taken on in one or two natural sentences, then finish the turn. Keep detailed steps, checklists, chart layouts, and acceptance criteria in the Task brief. Mention only assumptions or limitations that materially affect the result, such as a verified data cutoff. Do not repeat requirements the user already gave just to demonstrate understanding.";