@xopcai/xopc 0.0.388 → 0.0.390

package/dist/src/extensions/loader.js

@@ -6,11 +6,11 @@ import { init_paths, resolveBundledExtensionsDir, resolveExtensionSdkPath, resol
 import { getProviderRegistry, init_plugin_registry } from "../providers/plugin-registry.js";
 import { normalizeExtensionManifest } from "./normalize-manifest.js";
 import { areExtensionsGloballyDisabled, discoverExtensionsFromDisk } from "./discover-extensions.js";
-import { ManifestRegistry } from "./manifest-registry.js";
-import { mergeActivationContext } from "./activation-context.js";
 import { ExtensionRegistryImpl } from "./extension-registry-impl.js";
 import { ExtensionApiImpl, createExtensionLogger, createPathResolver } from "./api.js";
 import { ActivationPlanner } from "./activation-planner.js";
+import { mergeActivationContext } from "./activation-context.js";
+import { ManifestRegistry } from "./manifest-registry.js";
 import { checkEngineCompatibility } from "./engine-check.js";
 import { validateSpeechProviderContracts } from "./speech-provider-contracts.js";
 import { validateMediaUnderstandingProviderContracts } from "./media-provider-contracts.js";

package/dist/src/extensions/sdk/index.js

@@ -1,5 +1,4 @@
 import { ProviderPluginRegistry, getProviderRegistry, init_plugin_registry } from "../../providers/plugin-registry.js";
-import { defineChannelPluginEntry } from "./channel-entry.js";
 import { HOOK_EXECUTION_MODES } from "../types/hooks.js";
 import { TypedEventBus } from "../typed-event-bus.js";
 import { ExtensionRegistryImpl } from "../extension-registry-impl.js";
@@ -9,6 +8,7 @@ import { SlotRegistry, getSlotRegistry, registerSlotType } from "../slots.js";
 import { ExtensionDiagnostics, ExtensionLoaderCacheImpl, getExtensionCache, getExtensionDiagnostics } from "../diagnostics.js";
 import { ExtensionHookRunner, createHookContext, isHookEvent } from "../hooks.js";
 import { registerExtensionCliProgram } from "./channel-helpers.js";
+import { defineChannelPluginEntry } from "./channel-entry.js";
 import { lazyFunction, lazyModule } from "./lazy.js";
 import { createMockExtensionApi, createTestGateway } from "./testing.js";
 //#region src/extensions/sdk/index.ts

package/dist/src/extensions/sdk/media.js

@@ -1,7 +1,7 @@
+import { getMediaUnderstandingProvider, listMediaUnderstandingProviders, registerMediaUnderstandingProvider } from "../../media-understanding/registry.js";
 import { ProviderHttpError, assertOkOrThrowHttpError } from "../../media-shared/http/provider-http-errors.js";
 import { SsrfBlockedError, assertSafeUrl } from "../../media-shared/http/ssrf-guard.js";
 import { fetchWithTimeoutGuarded, normalizeBaseUrl, postMultipartRequest } from "../../media-shared/http/provider-http.js";
 import "../../media-shared/http/index.js";
-import { getMediaUnderstandingProvider, listMediaUnderstandingProviders, registerMediaUnderstandingProvider } from "../../media-understanding/registry.js";
 import { buildAudioTranscriptionFormData, createOpenAiCompatibleAudioProvider, registerOpenAiCompatibleAudioProvider, resolveAudioTranscriptionUploadFileName, transcribeOpenAiCompatibleAudio } from "../../media-understanding/openai-compatible-audio.js";
 export { ProviderHttpError, SsrfBlockedError, assertOkOrThrowHttpError, assertSafeUrl, buildAudioTranscriptionFormData, createOpenAiCompatibleAudioProvider, fetchWithTimeoutGuarded, getMediaUnderstandingProvider, listMediaUnderstandingProviders, normalizeBaseUrl, postMultipartRequest, registerMediaUnderstandingProvider, registerOpenAiCompatibleAudioProvider, resolveAudioTranscriptionUploadFileName, transcribeOpenAiCompatibleAudio };

package/dist/src/extensions/update.js

@@ -1,8 +1,8 @@
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
 import { init_paths, resolveBundledExtensionsDir, resolveExtensionsDir } from "../config/paths.js";
-import { computeExtensionDirectoryIntegrity, getExtensionLockfileManager } from "./lockfile.js";
 import { downloadExtensionStoreZipBuffer, resolveExtensionZipDownloadUrl, resolveExtensionsStoreBaseUrl, verifyStoreArtifactSha256 } from "../agent/skills/marketplace/adapters/store/store-api-client.js";
+import { computeExtensionDirectoryIntegrity, getExtensionLockfileManager } from "./lockfile.js";
 import { loadConfig } from "../config/loader.js";
 import { commitStagedExtensionInstall, finalizeStagedExtensionInstall, rollbackStagedExtensionInstall, stageExtensionNpm, stageExtensionStoreZip } from "./install-transaction.js";
 import { findExtension } from "./marketplace.js";

package/dist/src/gateway/agent-builtin-tools.d.ts

@@ -277,4 +277,4 @@ export declare const GATEWAY_BUILTIN_TOOLS: readonly [{
         readonly zh: "使用已验证的参数执行选定的外部工具。";
     };
 }];
-export declare const GATEWAY_BUILTIN_TOOL_IDS: ("automation" | "workflow" | "find" | "image" | "knowledge_search" | "knowledge_get" | "knowledge_write" | "user_context_search" | "user_context_get" | "user_context_update" | "web_search" | "web_fetch" | "browser_use" | "grep" | "session_search" | "read_file" | "list_dir" | "write_file" | "apply_patch" | "exec_command" | "update_plan" | "todo" | "clarify" | "xopc_tool_execute" | "web_extract" | "tool_manual" | "session_status" | "read_media" | "xopc_tool_search" | "xopc_tool_describe" | "image_generate" | "skills_list" | "skill_view" | "skill_manage" | "skills_marketplace_search" | "computer_use" | "send_message" | "text_to_speech" | "execute_code" | "send_media" | "create_share" | "memory_maintenance" | "delegate_task" | "skill_install" | "create_desktop_pet")[];
+export declare const GATEWAY_BUILTIN_TOOL_IDS: ("automation" | "workflow" | "find" | "image" | "knowledge_search" | "knowledge_get" | "knowledge_write" | "user_context_search" | "user_context_get" | "user_context_update" | "web_search" | "web_fetch" | "browser_use" | "grep" | "session_search" | "read_file" | "list_dir" | "write_file" | "apply_patch" | "exec_command" | "update_plan" | "todo" | "web_extract" | "clarify" | "xopc_tool_execute" | "tool_manual" | "session_status" | "read_media" | "xopc_tool_search" | "xopc_tool_describe" | "image_generate" | "skills_list" | "skill_view" | "skill_manage" | "skills_marketplace_search" | "computer_use" | "send_message" | "text_to_speech" | "execute_code" | "send_media" | "create_share" | "memory_maintenance" | "delegate_task" | "skill_install" | "create_desktop_pet")[];

package/dist/src/gateway/agents-admin.js

@@ -4,8 +4,8 @@ import { init_agent_scope, listAgentEntries, resolveAgentProfileDir, resolveAgen
 import { AGENT_PROFILE_MARKDOWN_SYSTEM_FILES, REQUIRED_AGENT_PROFILE_MARKDOWN_FILE_SET } from "../agent/context/workspace.js";
 import { AgentCatalogService } from "../agent-catalog/service.js";
 import { resolveEffectiveAgentProfile } from "../config/agent-profile.js";
-import { GATEWAY_BUILTIN_TOOL_IDS } from "./agent-builtin-tools.js";
 import { isPathUnderWorkspace, resolveWorkspaceSafePath } from "./workspace-editor-path.js";
+import { GATEWAY_BUILTIN_TOOL_IDS } from "./agent-builtin-tools.js";
 import { resolve } from "node:path";
 import { mkdir, readFile, realpath, stat, unlink, writeFile } from "node:fs/promises";
 //#region src/gateway/agents-admin.ts

package/dist/src/gateway/chat-stream/mapper.js

@@ -1,6 +1,7 @@
 import { parseTurnOutcome } from "../../../packages/gateway-contract/src/turn-outcome.js";
 import { resolveToolActivity } from "../../../packages/gateway-contract/src/tool-activity.js";
 import { isUserTurnDocument } from "../../../packages/gateway-contract/src/user-turn-document.js";
+import { readClarificationPresentation } from "../../../packages/gateway-contract/src/clarifications.js";
 import { init_src } from "../../../packages/gateway-contract/src/index.js";
 import { productDeliveries } from "../../session/compact-history.js";
 import { createPetFeedback } from "./pet-feedback.js";
@@ -98,11 +99,10 @@ var ChatStreamMapper = class {
 				...this.lastAssistantMessageId ? { messageId: this.lastAssistantMessageId } : {}
 			})];
 			case "clarify_request": return [this.make("clarify_request", {
+				...readClarificationPresentation(event),
 				requestId: String(event.requestId ?? ""),
 				kind: event.kind === "approval" ? "approval" : "input",
 				question: String(event.question ?? ""),
-				choices: Array.isArray(event.choices) ? event.choices.filter((x) => typeof x === "string") : void 0,
-				suggestedAnswer: typeof event.suggestedAnswer === "string" ? event.suggestedAnswer : void 0,
 				version: typeof event.version === "number" ? event.version : 1,
 				createdAt: typeof event.createdAt === "number" ? event.createdAt : Date.now(),
 				expiresAt: typeof event.expiresAt === "number" ? event.expiresAt : void 0,

package/dist/src/gateway/chat-stream/protocol.d.ts

@@ -1,3 +1,4 @@
+import type { ClarificationPresentation } from '@xopcai/gateway-contract';
 import type { AgentStreamToolExecutionMetadata, ToolActivity, TurnOutcome } from '@xopcai/gateway-contract';
 import type { TaskUpdateTrigger } from '../../storage/sqlite/session-input-repository.js';
 export type ChatStreamStatus = 'success' | 'error' | 'cancelled' | 'suspended';
@@ -207,12 +208,10 @@ export type TtsAudioEvent = ChatStreamEnvelope<'tts_audio', {
     attachTo?: 'last_assistant';
     messageId?: string;
 }>;
-export type ClarifyRequestEvent = ChatStreamEnvelope<'clarify_request', {
+export type ClarifyRequestEvent = ChatStreamEnvelope<'clarify_request', ClarificationPresentation & {
     requestId: string;
     kind: 'input' | 'approval';
     question: string;
-    choices?: string[];
-    suggestedAnswer?: string;
     version: number;
     createdAt: number;
     expiresAt?: number;

package/dist/src/gateway/clarify-runtime.d.ts

@@ -1,7 +1,9 @@
 export type ClarificationChannelRuntime = {
     answerChoice(requestId: string, choiceIndex: number, idempotencyKey: string): boolean;
+    answerDecision(requestId: string, decision: 'approve' | 'deny', idempotencyKey: string): boolean;
     answerText(conversationId: string, text: string, idempotencyKey: string): boolean;
 };
 export declare function registerClarificationChannelRuntime(next: ClarificationChannelRuntime | null): void;
 export declare function answerClarificationChoiceFromChannel(requestId: string, choiceIndex: number, idempotencyKey: string): boolean;
 export declare function answerClarificationTextFromChannel(conversationId: string, text: string, idempotencyKey: string): boolean;
+export declare function answerClarificationDecisionFromChannel(requestId: string, decision: 'approve' | 'deny', idempotencyKey: string): boolean;

package/dist/src/gateway/clarify-runtime.js

@@ -9,5 +9,8 @@ function answerClarificationChoiceFromChannel(requestId, choiceIndex, idempotenc
 function answerClarificationTextFromChannel(conversationId, text, idempotencyKey) {
 	return runtime?.answerText(conversationId, text, idempotencyKey) ?? false;
 }
+function answerClarificationDecisionFromChannel(requestId, decision, idempotencyKey) {
+	return runtime?.answerDecision(requestId, decision, idempotencyKey) ?? false;
+}
 //#endregion
-export { answerClarificationChoiceFromChannel, answerClarificationTextFromChannel, registerClarificationChannelRuntime };
+export { answerClarificationChoiceFromChannel, answerClarificationDecisionFromChannel, answerClarificationTextFromChannel, registerClarificationChannelRuntime };

package/dist/src/gateway/device-routes.js

@@ -1,6 +1,6 @@
-import { getTailscaleExposureState } from "./tailscale-lifecycle.js";
-import { resolveReverseProxyPublicUrl } from "./public-url.js";
 import { getTunnelService } from "../tunnel/tunnel-service.js";
+import { resolveReverseProxyPublicUrl } from "./public-url.js";
+import { getTailscaleExposureState } from "./tailscale-lifecycle.js";
 import crypto from "node:crypto";
 //#region src/gateway/device-routes.ts
 function secureUrl(value) {

package/dist/src/gateway/ephemeral-clarification-waiter.d.ts

@@ -1,3 +1,4 @@
+import { type ClarificationSubmission } from '@xopcai/gateway-contract';
 import type { ClarifyRequestPayload } from '../agent/tools/clarify-tool.js';
 export type ClarificationStreamEvent = {
     type: string;
@@ -11,7 +12,7 @@ export declare class EphemeralClarificationWaiter {
         request: ClarifyRequestPayload;
         beforeResponse?: () => boolean;
     }): Promise<string>;
-    answer(requestId: string, answer: string): boolean;
+    answer(requestId: string, answer: ClarificationSubmission): boolean;
     cancelForRun(runId: string): void;
     dispose(): void;
 }

package/dist/src/gateway/ephemeral-clarification-waiter.js

@@ -1,12 +1,19 @@
+import { normalizeClarificationQuestion, normalizeClarificationSubmission, readClarificationPresentation } from "../../packages/gateway-contract/src/clarifications.js";
+import { init_src } from "../../packages/gateway-contract/src/index.js";
 //#region src/gateway/ephemeral-clarification-waiter.ts
+init_src();
 /** In-memory waiter exclusively for caller-owned ephemeral runs such as side chat. */
 var EphemeralClarificationWaiter = class {
 	pending = /* @__PURE__ */ new Map();
 	start(input) {
+		const request = normalizeClarificationQuestion(input.request);
 		const requestId = crypto.randomUUID();
+		const expiresAt = request.kind === "approval" ? Date.now() + 10 * 6e4 : void 0;
 		return new Promise((resolve, reject) => {
 			this.pending.set(requestId, {
 				runId: input.runId,
+				request,
+				expiresAt,
 				resolve,
 				reject,
 				beforeResponse: input.beforeResponse
@@ -14,10 +21,10 @@ var EphemeralClarificationWaiter = class {
 			input.publish({
 				type: "clarify_request",
 				requestId,
-				kind: input.request.kind ?? "input",
-				question: input.request.question,
-				choices: input.request.choices,
-				suggestedAnswer: input.request.suggestedAnswer,
+				...readClarificationPresentation(request),
+				kind: request.kind ?? "input",
+				question: request.question,
+				expiresAt,
 				version: 1,
 				createdAt: Date.now()
 			});
@@ -25,9 +32,15 @@ var EphemeralClarificationWaiter = class {
 	}
 	answer(requestId, answer) {
 		const pending = this.pending.get(requestId);
-		if (!pending || pending.beforeResponse?.() === false) return false;
+		if (!pending || pending.beforeResponse?.() === false || pending.expiresAt !== void 0 && pending.expiresAt <= Date.now()) return false;
+		let normalized;
+		try {
+			normalized = normalizeClarificationSubmission(pending.request, answer);
+		} catch {
+			return false;
+		}
 		this.pending.delete(requestId);
-		pending.resolve(answer.trim());
+		pending.resolve(normalized.answer);
 		return true;
 	}
 	cancelForRun(runId) {

package/dist/src/gateway/file-path-classifier.js

@@ -1,9 +1,9 @@
 import { init_paths_state, resolveStateDir } from "../config/paths-state.js";
 import { init_agent_scope, resolveAgentProfileDir } from "../agent/agent-scope.js";
-import { init_paths, resolveConfigPath, resolveSkillsDir } from "../config/paths.js";
 import { extractProfileAgentId } from "../config/agent-profile.js";
-import { isPathUnderWorkspace } from "./workspace-editor-path.js";
+import { init_paths, resolveConfigPath, resolveSkillsDir } from "../config/paths.js";
 import { isBareProfileMarkdownFileName, resolveProfileMarkdownPathIfBareName } from "../agent/tools/tool-paths.js";
+import { isPathUnderWorkspace } from "./workspace-editor-path.js";
 import { homedir } from "node:os";
 import { basename, isAbsolute, resolve } from "node:path";
 import { stat } from "node:fs/promises";

package/dist/src/gateway/global-defaults-admin.d.ts

@@ -6,6 +6,8 @@ export type GlobalDefaultsPayload = {
 };
 export type UpdateGlobalDefaultsBody = {
     defaults: AgentDefaults;
+    scope?: 'models' | 'agent';
+    expectedModels?: AgentDefaults['models'];
 };
 export type GlobalDefaultsAdminResult<T> = {
     ok: true;
@@ -13,7 +15,7 @@ export type GlobalDefaultsAdminResult<T> = {
 } | {
     ok: false;
     error: string;
-    status?: 400 | 404 | 500;
+    status?: 400 | 404 | 409 | 500;
 };
 export declare function listGlobalDefaults(): GlobalDefaultsPayload;
 export declare function prepareUpdateGlobalDefaults(body: UpdateGlobalDefaultsBody): GlobalDefaultsAdminResult<{

package/dist/src/gateway/global-defaults-admin.js

@@ -2,8 +2,8 @@ import { AgentDefaultsSchema } from "../agent-config/schema.js";
 import { init_agent_config } from "../agent-config/index.js";
 import { AgentCatalogRepository, init_repository } from "../agent-catalog/repository.js";
 import { AgentCatalogService } from "../agent-catalog/service.js";
-import { validateComputerModelChange } from "../computer/model-config.js";
 import { GATEWAY_BUILTIN_TOOLS } from "./agent-builtin-tools.js";
+import { validateComputerModelChange } from "../computer/model-config.js";
 import { isDeepStrictEqual } from "node:util";
 //#region src/gateway/global-defaults-admin.ts
 init_agent_config();
@@ -18,13 +18,25 @@ function listGlobalDefaults() {
 	};
 }
 function prepareUpdateGlobalDefaults(body) {
-	const parsed = AgentDefaultsSchema.safeParse(body.defaults);
+	const current = new AgentCatalogRepository().getSettings().defaults;
+	if (body.expectedModels && !isDeepStrictEqual(current.models, body.expectedModels)) return {
+		ok: false,
+		error: "Model settings changed. Refresh before retrying.",
+		status: 409
+	};
+	const requested = body.scope === "models" ? {
+		...current,
+		models: body.defaults.models
+	} : body.scope === "agent" ? {
+		...body.defaults,
+		models: current.models
+	} : body.defaults;
+	const parsed = AgentDefaultsSchema.safeParse(requested);
 	if (!parsed.success) return {
 		ok: false,
 		error: `defaults ${parsed.error.issues[0]?.message ?? "is invalid"}`,
 		status: 400
 	};
-	const current = new AgentCatalogRepository().getSettings().defaults;
 	try {
 		validateComputerModelChange(parsed.data.models.computerUse, current.models.computerUse);
 	} catch (error) {

package/dist/src/gateway/hono/app.js

@@ -3,12 +3,12 @@ import { init_logger } from "../../utils/logger.js";
 import { init_host, resolveAllowedBrowserOrigins, resolveGatewayServiceListenPort } from "../host.js";
 import { init_device_access_repository, listDevices } from "../../storage/sqlite/device-access-repository.js";
 import { ENDPOINT_MAX_FILE_BYTES, init_src } from "../../../packages/endpoint-tools-protocol/src/index.js";
-import { BROWSER_EXTENSION_ID } from "../../browser/extension-identity.js";
 import { resolveGatewayEffectiveHost } from "../../config/gateway-bind.js";
+import { loadTunnelState } from "../../tunnel/tunnel-state.js";
+import { resolveReverseProxyPublicUrl } from "../public-url.js";
 import { maxSessionInputRequestBodyBytes } from "../chat-limits.js";
+import { BROWSER_EXTENSION_ID } from "../../browser/extension-identity.js";
 import { isLoopbackIpAddress, isTrustedProxyAddress } from "../client-ip.js";
-import { resolveReverseProxyPublicUrl } from "../public-url.js";
-import { loadTunnelState } from "../../tunnel/tunnel-state.js";
 import { buildGatewayConsoleCspHeader } from "../security/csp.js";
 import { checkBrowserOrigin, isChromeExtensionOrigin } from "../security/origin-check.js";
 import { auth } from "./middleware/auth.js";

package/dist/src/gateway/hono/lib/config-payload.d.ts

@@ -27,7 +27,11 @@ export declare function buildSafeWebConfigPayload(service: GatewayService, optio
                     primary: string;
                     fallbacks: string[];
                 };
-                intents?: Partial<Record<"review" | "coding" | "fast" | "reasoning" | "vision" | "understanding", {
+                background?: {
+                    primary: string;
+                    fallbacks: string[];
+                };
+                intents?: Partial<Record<"review" | "coding" | "vision" | "fast" | "reasoning" | "understanding", {
                     primary: string;
                     fallbacks: string[];
                 }>>;
@@ -71,10 +75,14 @@ export declare function buildSafeWebConfigPayload(service: GatewayService, optio
                     primary: string;
                     fallbacks: string[];
                 };
-                intents: Partial<Record<"review" | "coding" | "fast" | "reasoning" | "vision" | "understanding", {
+                intents: Partial<Record<"review" | "coding" | "vision" | "fast" | "reasoning" | "understanding", {
                     primary: string;
                     fallbacks: string[];
                 }>>;
+                background?: {
+                    primary: string;
+                    fallbacks: string[];
+                };
                 imageUnderstanding?: {
                     primary: string;
                     fallbacks: string[];
@@ -221,7 +229,7 @@ export declare function buildSafeWebConfigPayload(service: GatewayService, optio
         userModel: {
             enabled: boolean;
             writePolicy: "allow" | "deny";
-            sensitiveWritePolicy: "allow" | "confirm" | "deny";
+            sensitiveWritePolicy: "allow" | "deny" | "confirm";
             showMemoryReferences: boolean;
             processingPolicy: "local_only" | "remote_allowed";
             extraction: {
@@ -320,6 +328,7 @@ export declare function buildSafeWebConfigPayload(service: GatewayService, optio
             betaCheckIntervalHours: number;
         };
     };
+    voiceSettingsRevisions: Record<"conversation" | "transcription" | "speech", string>;
     stt: unknown;
     tts: unknown;
     voice: unknown;

package/dist/src/gateway/hono/lib/config-payload.js

@@ -1,19 +1,20 @@
 import { normalizeAgentId } from "../../../agent-catalog/id.js";
 import { AgentCatalogRepository, init_repository } from "../../../agent-catalog/repository.js";
 import { init_agent_scope, listAgentEntries, resolveDefaultAgentId } from "../../../agent/agent-scope.js";
-import { resolveModelsJsonPath } from "../../../config/paths.js";
 import { ContextPlanningConfigSchema, KnowledgeMemoryConfigSchema, UserModelConfigSchema, init_config } from "../../../user-context/config.js";
+import { resolveModelsJsonPath } from "../../../config/paths.js";
 import { init_models_json, loadModelsJson } from "../../../config/models-json.js";
 import { CredentialResolver, init_credentials } from "../../../auth/credentials.js";
 import { getProviderRegistry, init_plugin_registry } from "../../../providers/plugin-registry.js";
 import { getAllProviders, init_providers, isProviderConfigured } from "../../../providers/index.js";
-import { buildChannelCatalogForConfig, buildChannelCatalogFromSnapshot, getChannelSetupStatus } from "../../../channels/catalog/channel-catalog-service.js";
+import { resolveShareConfig } from "../../../share/share-config.js";
+import { maskTunnelSecretForWeb } from "../../../tunnel/env.js";
 import { normalizeConfiguredMcpServers } from "../../../config/mcp-config-normalize.js";
+import { buildChannelCatalogForConfig, buildChannelCatalogFromSnapshot, getChannelSetupStatus } from "../../../channels/catalog/channel-catalog-service.js";
 import { resolveSessionConfigForWeb, resolveUpdateConfigForWeb } from "../../../config/web-patch.js";
 import { GENERIC_MASKED_SECRET, maskSecretLength } from "./mask-secret-length.js";
 import { safeToolsWebForGet } from "../../config-tools-web.js";
-import { maskTunnelSecretForWeb } from "../../../tunnel/env.js";
-import { resolveShareConfig } from "../../../share/share-config.js";
+import { voiceSettingsRevisions } from "./voice-settings-revisions.js";
 import { buildSafeProvidersConfigForWeb } from "./safe-providers-config.js";
 import { maskRealtimeVoiceConfigForWeb, maskSttConfigForWeb, maskTtsConfigForWeb } from "./safe-voice-config.js";
 //#region src/gateway/hono/lib/config-payload.ts
@@ -155,6 +156,7 @@ async function buildSafeWebConfigPayload(service, options = {}) {
 			transport: { tls: "broker_terminated" }
 		},
 		update: { ...resolveUpdateConfigForWeb(config) },
+		voiceSettingsRevisions: voiceSettingsRevisions(config),
 		stt: maskSttConfigForWeb(config.tools?.media?.audio),
 		tts: maskTtsConfigForWeb(config.messages?.tts),
 		voice: maskRealtimeVoiceConfigForWeb(config.voice),

package/dist/src/gateway/hono/lib/config-write-lock.d.ts

@@ -0,0 +1,2 @@
+/** Keep HTTP read/merge/write sequences together, including the legacy configuration endpoint. */
+export declare function withGatewayConfigWriteLock<T>(service: object, operation: () => Promise<T>): Promise<T>;

package/dist/src/gateway/hono/lib/config-write-lock.js

@@ -0,0 +1,14 @@
+//#region src/gateway/hono/lib/config-write-lock.ts
+const writes = /* @__PURE__ */ new WeakMap();
+/** Keep HTTP read/merge/write sequences together, including the legacy configuration endpoint. */
+async function withGatewayConfigWriteLock(service, operation) {
+	const next = (writes.get(service) ?? Promise.resolve()).catch(() => {}).then(operation);
+	writes.set(service, next);
+	try {
+		return await next;
+	} finally {
+		if (writes.get(service) === next) writes.delete(service);
+	}
+}
+//#endregion
+export { withGatewayConfigWriteLock };

package/dist/src/gateway/hono/lib/voice-settings-revisions.d.ts

@@ -0,0 +1,5 @@
+import type { Config } from '../../../config/schema.js';
+export declare const VOICE_SETTING_SCOPES: readonly ["transcription", "speech", "conversation"];
+export type VoiceSettingScope = typeof VOICE_SETTING_SCOPES[number];
+/** Opaque per-capability versions; credentials never appear in the public snapshot. */
+export declare function voiceSettingsRevisions(config: Config): Record<VoiceSettingScope, string>;

package/dist/src/gateway/hono/lib/voice-settings-revisions.js

@@ -0,0 +1,23 @@
+import { createHmac, randomBytes } from "node:crypto";
+//#region src/gateway/hono/lib/voice-settings-revisions.ts
+const revisionKey = randomBytes(32);
+const VOICE_SETTING_SCOPES = [
+	"transcription",
+	"speech",
+	"conversation"
+];
+/** Opaque per-capability versions; credentials never appear in the public snapshot. */
+function voiceSettingsRevisions(config) {
+	const values = {
+		transcription: {
+			stt: config.tools?.media?.audio,
+			language: config.voice?.language,
+			languageMode: config.voice?.languageMode
+		},
+		speech: config.messages?.tts,
+		conversation: config.voice?.realtime
+	};
+	return Object.fromEntries(VOICE_SETTING_SCOPES.map((scope) => [scope, createHmac("sha256", revisionKey).update(JSON.stringify(values[scope]) ?? "null").digest("hex")]));
+}
+//#endregion
+export { VOICE_SETTING_SCOPES, voiceSettingsRevisions };

package/dist/src/gateway/hono/routes/agent-stream.js

@@ -1,4 +1,5 @@
 import { parseUserTurnDocument, userTurnDocumentRefIds } from "../../../../packages/gateway-contract/src/user-turn-document.js";
+import { clarificationResponseCommandSchema } from "../../../../packages/gateway-contract/src/clarifications.js";
 import { init_src } from "../../../../packages/gateway-contract/src/index.js";
 import { parseTurnContextRefs } from "../../../agent/source-context/types.js";
 import { validateWebchatAttachments, validateWebchatContent } from "../../chat-limits.js";
@@ -165,11 +166,8 @@ function registerAgentStreamRoutes(authenticated, deps) {
 	authenticated.post("/api/clarifications/:id/responses", chatRateLimitMiddleware, async (c) => {
 		const id = c.req.param("id")?.trim() ?? "";
 		const body = await c.req.json().catch(() => null);
-		const record = body && typeof body === "object" ? body : {};
-		const action = record.action;
-		const expectedVersion = record.expectedVersion;
-		const idempotencyKey = typeof record.idempotencyKey === "string" ? record.idempotencyKey.trim() : "";
-		if (!id || !idempotencyKey || typeof expectedVersion !== "number" || !Number.isInteger(expectedVersion) || action !== "answer" && action !== "agent_decide" && action !== "cancel") return c.json({
+		const command = clarificationResponseCommandSchema.safeParse(body);
+		if (!id || !command.success) return c.json({
 			ok: false,
 			error: {
 				code: "BAD_REQUEST",
@@ -178,10 +176,7 @@ function registerAgentStreamRoutes(authenticated, deps) {
 		}, 400);
 		const result = service.resolveClarificationResponse({
 			id,
-			expectedVersion,
-			idempotencyKey,
-			action,
-			answer: typeof record.answer === "string" ? record.answer : void 0
+			...command.data
 		});
 		if (result.ok === true) return c.json({
 			ok: true,

package/dist/src/gateway/hono/routes/agents.js

@@ -2,8 +2,8 @@ import { AgentEntrySchema, AgentModelsOverrideSchema, AgentProfileSchema, Runtim
 import { init_agent_config } from "../../../agent-config/index.js";
 import { normalizeAgentId } from "../../../agent-catalog/id.js";
 import { init_agent_scope } from "../../../agent/agent-scope.js";
-import { getVoiceModelsConfig } from "../../../config/voice.js";
 import { createGatewayAgent, deleteAgentAvatarFile, deleteGatewayAgent, getGatewayAgentEffectiveConfig, listAgentProfileFiles, listGatewayAgents, readAgentAvatarFile, readAgentProfileFile, resolveAgentAvatarImage, updateGatewayAgent, writeAgentAvatarFromBase64, writeAgentProfileFile } from "../../agents-admin.js";
+import { getVoiceModelsConfig } from "../../../config/voice.js";
 //#region src/gateway/hono/routes/agents.ts
 init_agent_config();
 init_agent_scope();

package/dist/src/gateway/hono/routes/auth-registry-extensions.js

@@ -1,6 +1,6 @@
 import { getAllModels, getAvailableModels, init_providers } from "../../../providers/index.js";
-import { mergeActivationContext } from "../../../extensions/activation-context.js";
 import { ActivationPlanner } from "../../../extensions/activation-planner.js";
+import { mergeActivationContext } from "../../../extensions/activation-context.js";
 import { validateExtensionConfig } from "../../../extensions/config-validation.js";
 import { fetchRegistry, listExtensions, searchExtensions } from "../../../extensions/marketplace.js";
 import { createOAuthAsyncHandler } from "../oauth-async.js";

package/dist/src/gateway/hono/routes/commands-skills.js

@@ -1,15 +1,15 @@
 import { init_agent_scope, resolveDefaultAgentId } from "../../../agent/agent-scope.js";
-import { ProjectService } from "../../../projects/project-service.js";
-import { isRegisteredProvider } from "../../../agent/skills/marketplace/registry.js";
-import "../../../agent/skills/skills-marketplace.js";
 import { resolveEffectiveAgentProfile } from "../../../config/agent-profile.js";
 import { effectiveWorkspacePathForSession, projectWorkspacePath } from "../../../session/session-workspace.js";
 import { getProjectForSession } from "../../../projects/workspace.js";
+import { ProjectService } from "../../../projects/project-service.js";
+import { isRegisteredProvider } from "../../../agent/skills/marketplace/registry.js";
+import "../../../agent/skills/skills-marketplace.js";
 import "../../../projects/index.js";
+import { isSkillInstallTarget } from "../../../agent/skills/install-target.js";
 import { commandRegistry } from "../../../chat-commands/registry.js";
 import { buildReviewContext, resolveGitRoot } from "../../../review/review-git.js";
 import "../../../chat-commands/index.js";
-import { isSkillInstallTarget } from "../../../agent/skills/install-target.js";
 //#region src/gateway/hono/routes/commands-skills.ts
 init_agent_scope();
 function parseMarketplaceProviderQuery(raw) {

package/dist/src/gateway/hono/routes/config-patch/gateway.js

@@ -1,8 +1,8 @@
 import { init_public_url, validatePublicUrl } from "../../../../config/public-url.js";
 import { isValidIPv4 } from "../../../../config/gateway-bind.js";
-import { isMaskedSecretPatchValue } from "../../lib/mask-secret-length.js";
 import { mergeShareConfigPatch } from "../../../../share/share-config.js";
 import { mergeSiteShareConfigPatch } from "../../../../share/site-share-config.js";
+import { isMaskedSecretPatchValue } from "../../lib/mask-secret-length.js";
 import { PATCH_OK, patchError } from "./result.js";
 //#region src/gateway/hono/routes/config-patch/gateway.ts
 init_public_url();

package/dist/src/gateway/hono/routes/config-patch/misc.js

@@ -1,7 +1,7 @@
 import { BindingsSchema, init_binding_schema } from "../../../../routing/binding-schema.js";
 import { AgentCatalogService } from "../../../../agent-catalog/service.js";
-import { ComputerConfigSchema, init_config } from "../../../../computer/config.js";
-import { ContextPlanningConfigSchema, HomeIntelligenceConfigSchema, KnowledgeMemoryConfigSchema, UserContextConfigSchema, UserModelConfigSchema, init_config as init_config$1 } from "../../../../user-context/config.js";
+import { ContextPlanningConfigSchema, HomeIntelligenceConfigSchema, KnowledgeMemoryConfigSchema, UserContextConfigSchema, UserModelConfigSchema, init_config } from "../../../../user-context/config.js";
+import { ComputerConfigSchema, init_config as init_config$1 } from "../../../../computer/config.js";
 import { BrowserConfigSchema, McpConfigSchema, VoiceConfigSchema, init_schema } from "../../../../config/schema.js";
 import { CredentialResolver, init_credentials } from "../../../../auth/credentials.js";
 import { canonicalizeConfiguredMcpServer } from "../../../../config/mcp-config-normalize.js";
@@ -14,11 +14,11 @@ import { assertGatewayRuntimeConfig } from "../../../runtime-config.js";
 import { mergeRealtimeVoiceConfigPatch, mergeSttConfigPatch, mergeTtsConfigPatch } from "../../lib/safe-voice-config.js";
 import { PATCH_OK, patchError } from "./result.js";
 //#region src/gateway/hono/routes/config-patch/misc.ts
-init_config();
+init_config$1();
 init_schema();
 init_binding_schema();
 init_credentials();
-init_config$1();
+init_config();
 async function applyMiscPatch(config, body) {
 	if (body.update !== void 0 && typeof body.update === "object" && body.update !== null) {
 		const updateResult = mergeUpdateConfigPatch(config, body.update);
@@ -216,7 +216,14 @@ async function applyMiscPatch(config, body) {
 		config.messages.tts = mergeTtsConfigPatch(config.messages.tts, body.tts);
 	}
 	if (body.voice !== void 0) {
-		const parsed = VoiceConfigSchema.safeParse(mergeRealtimeVoiceConfigPatch(config.voice, body.voice));
+		if (!body.voice || typeof body.voice !== "object" || Array.isArray(body.voice)) return patchError("voice must be an object");
+		if (body.voice.realtime !== void 0 && (!body.voice.realtime || typeof body.voice.realtime !== "object" || Array.isArray(body.voice.realtime))) return patchError("voice.realtime must be an object");
+		if (body.voicePatchMode !== void 0 && body.voicePatchMode !== "merge") return patchError("Invalid voice patch mode");
+		const voicePatch = body.voicePatchMode === "merge" ? {
+			...config.voice,
+			...body.voice
+		} : body.voice;
+		const parsed = VoiceConfigSchema.safeParse(mergeRealtimeVoiceConfigPatch(config.voice, voicePatch));
 		if (!parsed.success) return patchError(parsed.error.issues.map((i) => i.message).join("; "));
 		config.voice = parsed.data;
 	}

package/dist/src/gateway/hono/routes/config.js

@@ -1,6 +1,8 @@
 import { enumerateLanGatewayCandidates, init_host } from "../../host.js";
 import { getTunnelService } from "../../../tunnel/tunnel-service.js";
+import { VOICE_SETTING_SCOPES, voiceSettingsRevisions } from "../lib/voice-settings-revisions.js";
 import { buildSafeWebConfigPayload } from "../lib/config-payload.js";
+import { withGatewayConfigWriteLock } from "../lib/config-write-lock.js";
 import { applyChannelsPatch } from "./config-patch/channels.js";
 import { applyGatewayPatch } from "./config-patch/gateway.js";
 import { applyMiscPatch, validateGatewayAfterPatch } from "./config-patch/misc.js";
@@ -34,9 +36,21 @@ function registerConfigRoutes(authenticated, deps) {
 			payload: { candidates: enumerateLanGatewayCandidates(port) }
 		});
 	});
-	authenticated.patch("/api/config", strictRateLimitMiddleware, async (c) => {
+	authenticated.patch("/api/config", strictRateLimitMiddleware, async (c) => withGatewayConfigWriteLock(service, async () => {
 		const body = await c.req.json();
-		const config = service.currentConfig;
+		const expectedConfig = structuredClone(service.currentConfig);
+		const config = structuredClone(expectedConfig);
+		if (body.expectedVoiceRevision !== void 0) {
+			const guard = body.expectedVoiceRevision;
+			if (!guard || typeof guard !== "object" || !VOICE_SETTING_SCOPES.includes(guard.capability) || typeof guard.revision !== "string" || !/^[a-f0-9]{64}$/.test(guard.revision)) return c.json({
+				ok: false,
+				error: "Invalid voice settings revision"
+			}, 400);
+			if (voiceSettingsRevisions(expectedConfig)[guard.capability] !== guard.revision) return c.json({
+				ok: false,
+				error: "Voice settings changed. Reload before saving to preserve the current model."
+			}, 409);
+		}
 		applyChannelsPatch(config, body);
 		const gatewayResult = applyGatewayPatch(config, body);
 		if (gatewayResult.ok === false) return c.json({
@@ -62,17 +76,17 @@ function registerConfigRoutes(authenticated, deps) {
 				error: `Failed to stop tunnel before clearing key: ${message}`
 			}, 500);
 		}
-		const result = await service.saveConfig(config);
+		const result = await service.saveConfig(config, expectedConfig);
 		if (!result.saved) return c.json({
 			ok: false,
 			error: result.error
-		}, 500);
+		}, result.conflict ? 409 : 500);
 		const safeConfig = await buildSafeWebConfigPayload(service, { locale: localeFromRequest(c) });
 		return c.json({
 			ok: true,
 			payload: { config: safeConfig }
 		});
-	});
+	}));
 	const revealGatewayAuthSecretHandler = async (c) => {
 		const field = await resolveRevealGatewayAuthField(c);
 		if (!field) return c.json({