@xopcai/xopc 0.0.388 → 0.0.390

package/dist/src/gateway/hono/routes/shares.js

@@ -3,8 +3,6 @@ import { loadCompactionSourceSnapshot } from "../../../storage/sqlite/transcript
 import { init_sqlite } from "../../../storage/sqlite/index.js";
 import { FileServiceError } from "../../../files/file-service.js";
 import { resolveGatewayEffectiveHost } from "../../../config/gateway-bind.js";
-import { resolveReverseProxyPublicUrl } from "../../public-url.js";
-import { getGatewayFileSpaceService } from "../../file-space-service.js";
 import { SHARE_CONFIG_DEFAULTS } from "../../../share/share-types.js";
 import { resolveSiteShareConfig } from "../../../share/site-share-config.js";
 import { logShareAudit } from "../../../share/share-audit.js";
@@ -15,8 +13,10 @@ import { SessionShareService, SessionShareSnapshotConflictError } from "../../..
 import { HostedPublicationPublisher, HostedSessionShareBuilder, HostedShareAuthorizationError, HostedShareBindingStore, HostedShareRemoteError } from "../../../share/hosted-session-share.js";
 import { HostedStaticSitePublicationBuilder } from "../../../share/hosted-static-site-publication.js";
 import { publishHostedStaticSite } from "../../../share/hosted-static-site-publish.js";
+import { resolveReverseProxyPublicUrl } from "../../public-url.js";
 import { audienceDefaults, cleanupStagedSite, decideShareKind, forgetStagedSite, makeDescription, makeTitle, probeShareTarget, rememberStagedSite, stageSingleHtmlAsSite } from "../../../share/share-auto.js";
 import { deleteThumbnail, placeholderSvg, readThumbnail, scheduleThumbnail, thumbnailContentType, thumbnailExists } from "../../../share/share-thumbnail.js";
+import { getGatewayFileSpaceService } from "../../file-space-service.js";
 import { SHARED_HTML_CSP } from "../../security/csp.js";
 import { getGatewayPrincipal } from "../../security/gateway-principal.js";
 import { renderFolderLandingPage, renderShareExpiredPage, renderShareLandingPage, renderSnapshotShareLandingPage } from "../../../share/share-landing.js";

package/dist/src/gateway/hono/routes/side-chats.js

@@ -1,8 +1,9 @@
 import { chooseModelThinking } from "../../../../packages/gateway-contract/src/model-selection.js";
+import { clarificationSubmissionSchema } from "../../../../packages/gateway-contract/src/clarifications.js";
 import { init_src } from "../../../../packages/gateway-contract/src/index.js";
 import { init_providers, resolveModel } from "../../../providers/index.js";
-import { validateWebchatAttachments, validateWebchatContent } from "../../chat-limits.js";
 import { getModelThinking } from "../../../providers/model-thinking.js";
+import { validateWebchatAttachments, validateWebchatContent } from "../../chat-limits.js";
 import { validateSideChatSelections } from "../../side-chat/context-snapshot.js";
 import { SideChatError, parseThinkingLevel } from "../../side-chat/manager.js";
 import "../../side-chat/index.js";
@@ -149,9 +150,9 @@ function registerSideChatRoutes(authenticated, deps) {
 	authenticated.post("/api/side-chats/:sideChatId/clarify/:requestId", deps.chatRateLimitMiddleware, async (c) => {
 		try {
 			const body = await c.req.json().catch(() => ({}));
-			const answer = body.skip === true ? "" : typeof body.answer === "string" ? body.answer.trim() : "";
-			if (body.skip !== true && !answer) throw new SideChatError("answer is required", "INVALID_REQUEST");
-			if (!service.sideChatRuns.submitClarification(c.req.param("sideChatId"), readClientInstanceId(c, body.clientInstanceId), c.req.param("requestId"), answer)) throw new SideChatError("Clarification request not found", "NOT_FOUND");
+			const submission = clarificationSubmissionSchema.safeParse(body);
+			if (!submission.success) throw new SideChatError("Invalid clarification response", "INVALID_REQUEST");
+			if (!service.sideChatRuns.submitClarification(c.req.param("sideChatId"), readClientInstanceId(c, body.clientInstanceId), c.req.param("requestId"), submission.data)) throw new SideChatError("Clarification request not found", "NOT_FOUND");
 			return c.json({ ok: true });
 		} catch (error) {
 			return respondSideChatError(c, error);

package/dist/src/gateway/hono/routes/site-shares.js

@@ -1,8 +1,8 @@
 import { resolveGatewayEffectiveHost } from "../../../config/gateway-bind.js";
-import { resolveReverseProxyPublicUrl } from "../../public-url.js";
 import { resolveSiteShareConfig } from "../../../share/site-share-config.js";
 import { getSiteShareStore } from "../../../share/site-share-store.js";
 import { resolveSiteShareUrl } from "../../../share/share-url.js";
+import { resolveReverseProxyPublicUrl } from "../../public-url.js";
 import { getGatewayPrincipal } from "../../security/gateway-principal.js";
 import { createHash } from "node:crypto";
 //#region src/gateway/hono/routes/site-shares.ts

package/dist/src/gateway/hono/routes/status.js

@@ -3,6 +3,7 @@ import { isSTTAvailable } from "../../../voice/stt/availability.js";
 import { mergeSttConfigFromAppConfig } from "../../../voice/stt/config.js";
 import "../../../voice/stt/index.js";
 import { getGatewayAgentEffectiveConfig } from "../../agents-admin.js";
+import { resolveDictationRoute } from "../../../voice/dictation.js";
 import { createHash } from "node:crypto";
 //#region src/gateway/hono/routes/status.ts
 init_providers();
@@ -82,6 +83,7 @@ function buildStatusPayload(service) {
 			sttAvailable: sttConfig ? isSTTAvailable(sttConfig) : false,
 			sttEnabled: sttConfig?.enabled === true,
 			sttProvider: sttConfig?.provider ?? null,
+			dictation: config ? resolveDictationRoute(config) : { mode: "unavailable" },
 			refineAvailable: isRefineAvailable(config)
 		}
 	};

package/dist/src/gateway/hono/routes/tasks.js

@@ -8,8 +8,8 @@ import { TaskRepository, init_task_repository } from "../../../tasks/task-reposi
 import { TaskRunRepository, init_task_run_repository } from "../../../tasks/task-run-repository.js";
 import { CapabilityError } from "../../../capabilities/runtime/errors.js";
 import "../../../capabilities/runtime/dispatcher.js";
-import { TaskCollaborationRepository } from "../../../tasks/task-collaboration-repository.js";
 import { TaskConversationRepository } from "../../../tasks/task-conversation-repository.js";
+import { TaskCollaborationRepository } from "../../../tasks/task-collaboration-repository.js";
 import { TaskCriterionReviewRepository } from "../../../tasks/task-criterion-review-repository.js";
 import { TaskContextMutationOutputSchema } from "../../../tasks/capabilities/relations.js";
 import { TaskDeleteOutputSchema } from "../../../tasks/capabilities/management.js";

package/dist/src/gateway/hono/routes/user-model-refresh.js

@@ -1,8 +1,8 @@
 import { listConnectorLearningJobs } from "../../../storage/sqlite/connector-learning-repository.js";
 import { getConnectorAccount } from "../../../storage/sqlite/connector-account-repository.js";
 import { init_sqlite } from "../../../storage/sqlite/index.js";
-import { getWorkDiscoveryRun } from "../../../work-discovery/repository.js";
 import { getConnectorUnderstandingSourceRun } from "../../../user-context/sources/repository.js";
+import { getWorkDiscoveryRun } from "../../../work-discovery/repository.js";
 import { isLocalUnderstandingSourceId } from "../../../user-context/sources/local-source-contract.js";
 import { normalizeUnderstandingSourceItems } from "../../../work-discovery/service.js";
 import { UnderstandingRefreshService } from "../../../user-context/sources/refresh-service.js";

package/dist/src/gateway/hono/routes/user-model.js

@@ -1,20 +1,20 @@
 import { init_transaction, runSqliteWriteTransaction } from "../../../storage/sqlite/transaction.js";
 import { createCollaborationRule, getCollaborationRule, init_collaboration_rule_repository, listCollaborationRules, setCollaborationRuleStatus } from "../../../storage/sqlite/collaboration-rule-repository.js";
+import { getActiveUnderstandingConsent } from "../../../user-context/sources/consent-repository.js";
+import { listUnderstandingSourceGrants } from "../../../user-context/sources/repository.js";
+import { KnowledgeReviewConflictError, deleteKnowledgeItem, getKnowledgeItem, listKnowledgeItems, reviewKnowledgeItem, searchKnowledgeItems } from "../../../knowledge-memory/repository.js";
+import "../../../knowledge-memory/index.js";
+import { createPriorityWindow, createUserGoal, listPriorityWindows, listUserGoals, setUserGoalStatus, updatePriorityWindow, updateUserGoal } from "../../../user-model/goals.js";
 import { deleteUserAssertion, getAssertionSlot, getUserAssertion, listUserAssertionSources, listUserAssertions, reconcileAssertion, setAssertionStatus, setUserAssertionScope } from "../../../user-model/repository.js";
-import { applyUserProfilePatch, getUserProfileSnapshot } from "../../../user-model/profile.js";
 import { listActionRuleSuggestions } from "../../../user-model/action-rule-suggestions.js";
-import { createPriorityWindow, createUserGoal, listPriorityWindows, listUserGoals, setUserGoalStatus, updatePriorityWindow, updateUserGoal } from "../../../user-model/goals.js";
 import { listUserAssertionEdges, listUserModelObservations } from "../../../user-model/observation-repository.js";
+import { applyUserProfilePatch, getUserProfileSnapshot } from "../../../user-model/profile.js";
 import { bootstrapUserModel } from "../../../user-model/bootstrap.js";
-import { getActiveUnderstandingConsent } from "../../../user-context/sources/consent-repository.js";
 import { canUseAssertion } from "../../../user-model/usage-policy.js";
 import "../../../user-model/index.js";
-import { listUnderstandingSourceGrants } from "../../../user-context/sources/repository.js";
-import { KnowledgeReviewConflictError, deleteKnowledgeItem, getKnowledgeItem, listKnowledgeItems, reviewKnowledgeItem, searchKnowledgeItems } from "../../../knowledge-memory/repository.js";
-import "../../../knowledge-memory/index.js";
-import { getExecutionContextAudit, recordExecutionContextFeedback } from "../../../agent/context/audit.js";
 import { listMemoryMaintenanceRuns } from "../../../memory-maintenance/service.js";
 import "../../../memory-maintenance/index.js";
+import { getExecutionContextAudit, recordExecutionContextFeedback } from "../../../agent/context/audit.js";
 import { registerMemoryLearningRoutes } from "./memory-learning.js";
 import { userInfo } from "node:os";
 //#region src/gateway/hono/routes/user-model.ts

package/dist/src/gateway/hono/routes/voice.js

@@ -1,30 +1,33 @@
-import { isPersonalConversation } from "../../../personal-agent/repository.js";
+import { init_model_usage, withModelUsageOrigin } from "../../../providers/model-usage.js";
 import { voiceSelectionSchema } from "../../../../packages/realtime-protocol/src/voice-catalog.js";
 import { VOICE_TIMING_METRICS, createVoiceSessionRequestSchema, init_voice } from "../../../../packages/realtime-protocol/src/voice.js";
 import { getDefaultModelSync, init_providers, resolveModel } from "../../../providers/index.js";
 import { completeWithResolvedCredentials } from "../../../providers/model-call.js";
+import { isPersonalConversation } from "../../../personal-agent/repository.js";
 import { PlatformVoiceError } from "../../../voice/platform-streams.js";
-import { resolveTtsProviderConfigSlice } from "../../../voice/tts/config-slice.js";
-import { isTTSAvailable, resolveSpeechProvider } from "../../../voice/tts/factory.js";
-import { mergeTtsConfigFromAppConfig } from "../../../voice/tts/merge-config.js";
-import { speak, speakStream } from "../../../voice/tts/speak-core.js";
 import { resolveSttProviderConfigSlice } from "../../../voice/stt/config-slice.js";
-import { isSTTAvailable } from "../../../voice/stt/availability.js";
-import "../../../voice/tts/index.js";
+import { resolveSTTProviderChain } from "../../../voice/stt/factory.js";
 import { STTTranscriptionError, transcribe } from "../../../voice/stt/transcribe-core.js";
+import { isSTTAvailable } from "../../../voice/stt/availability.js";
 import { mergeSttConfigFromAppConfig } from "../../../voice/stt/config.js";
 import "../../../voice/stt/index.js";
+import { resolveTtsProviderConfigSlice } from "../../../voice/tts/config-slice.js";
+import { isTTSAvailable, resolveSpeechProvider } from "../../../voice/tts/factory.js";
+import { speak, speakStream } from "../../../voice/tts/speak-core.js";
+import { mergeTtsConfigFromAppConfig } from "../../../voice/tts/merge-config.js";
 import { listSttProvidersForApi } from "../../../voice/stt/list-providers.js";
+import "../../../voice/tts/index.js";
 import { withModelConfigLock } from "../../../session/model-config-lock.js";
 import { getSessionPreparation } from "../../../storage/sqlite/session-creation-repository.js";
 import { resolveOmniRoute } from "../../../voice/realtime/omniRoute.js";
 import { VoiceSessionCreationError, resolveStreamingStt, resolveStreamingTts } from "../../../voice/realtime/runtime.js";
 import { getGatewayPrincipal } from "../../security/gateway-principal.js";
 import { createGatewayRouteLogger } from "../lib/route-logger.js";
-import { selectPlatformVoice, voiceSettingsCatalog } from "../../../voice/platform-settings.js";
 import { listTtsProvidersForApi } from "../../../voice/tts/list-providers.js";
+import { selectPlatformVoice, voiceSettingsCatalog } from "../../../voice/platform-settings.js";
 import { z } from "zod";
 //#region src/gateway/hono/routes/voice.ts
+init_model_usage();
 init_voice();
 init_providers();
 const log = createGatewayRouteLogger("Voice");
@@ -104,7 +107,10 @@ async function refineTranscript(raw, config, signal) {
 			maxTokens: Math.min(raw.length * 3, 4096),
 			temperature: .2,
 			signal: mergedSignal
-		}, void 0, { operation: "voice.select" });
+		}, void 0, {
+			operation: "voice.select",
+			trigger: "user"
+		});
 		let out = "";
 		if (Array.isArray(result.content)) {
 			for (const c of result.content) if (c && typeof c === "object" && c.type === "text") out += String(c.text || "");
@@ -246,12 +252,13 @@ function registerVoiceRoutes(authenticated, deps) {
 		let result;
 		let reader;
 		try {
-			result = await speakStream(config.voice?.language === "en" ? "Hello, I am your assistant. You can talk to me naturally." : "你好，我是你的助手。现在可以和我自然对话了。", previewConfig, {
+			const text = config.voice?.language === "en" ? "Hello, I am your assistant. You can talk to me naturally." : "你好，我是你的助手。现在可以和我自然对话了。";
+			result = await withModelUsageOrigin("interactive", () => speakStream(text, previewConfig, {
 				signal,
 				appConfig: config,
 				allowFallback: false,
 				parseDirectives: false
-			});
+			}));
 			if (result.outputFormat !== "pcm") throw new Error("Realtime preview requires PCM audio");
 			reader = result.audioStream.getReader();
 			const chunks = [];
@@ -551,12 +558,12 @@ function registerVoiceRoutes(authenticated, deps) {
 			error: { message: `TTS provider \"${provider}\" is not configured.` }
 		}, 503);
 		try {
-			const result = await speak(text, ttsConfig, {
+			const result = await withModelUsageOrigin("interactive", () => speak(text, ttsConfig, {
 				appConfig: config,
 				parseDirectives: false,
 				signal: c.req.raw.signal,
 				tts: voice ? { voice } : void 0
-			});
+			}));
 			if (!result.audio.length) throw new Error(`TTS provider \"${result.provider}\" returned empty audio`);
 			return new Response(new Uint8Array(result.audio), { headers: {
 				"Content-Type": speechMimeType(result.format),
@@ -630,14 +637,14 @@ function registerVoiceRoutes(authenticated, deps) {
 		}, 503);
 		try {
 			const startedAt = Date.now();
-			const result = await speak(text, ttsConfig, {
+			const result = await withModelUsageOrigin("interactive", () => speak(text, ttsConfig, {
 				appConfig: config,
 				parseDirectives: false,
 				tts: {
 					...typeof body.model === "string" && body.model.trim() ? { model: body.model.trim() } : {},
 					...typeof body.voice === "string" && body.voice.trim() ? { voice: body.voice.trim() } : {}
 				}
-			});
+			}));
 			if (!result.audio.length) throw new Error(`TTS provider "${result.provider}" returned empty audio`);
 			const mimeType = result.format === "opus" || result.format === "ogg" ? "audio/ogg" : result.format === "mp3" || result.format === "mpeg" ? "audio/mpeg" : result.format === "wav" ? "audio/wav" : `audio/${result.format}`;
 			return c.json({
@@ -678,18 +685,22 @@ function registerVoiceRoutes(authenticated, deps) {
 		}, 400);
 		const config = service.currentConfig;
 		const sttConfig = mergeSttConfigFromAppConfig(config.tools?.media?.audio, config.tools?.media);
+		if (input.expectedProvider && input.expectedProvider !== resolveSTTProviderChain(sttConfig)[0]?.id) return c.json({
+			ok: false,
+			error: { message: "Speech recognition provider changed during recording. Restore the previous model or start a new recording." }
+		}, 409);
 		if (!isSTTAvailable(sttConfig)) return c.json({
 			ok: false,
 			error: { message: "STT is not configured. Enable STT in gateway config (tools.media.audio)." }
 		}, 503);
 		const startedAt = Date.now();
 		try {
-			const result = await transcribe(input.audioBuffer, sttConfig, {
+			const result = await withModelUsageOrigin("interactive", () => transcribe(input.audioBuffer, sttConfig, {
 				language: input.language,
 				mime: input.mimeType,
 				fileName: input.fileName,
 				signal: c.req.raw.signal
-			});
+			}));
 			const detectedLanguage = result.language ?? input.language;
 			const refinementAvailable = (config.voice?.input?.refinement?.mode ?? "off") !== "off";
 			return c.json({
@@ -769,12 +780,14 @@ function registerVoiceRoutes(authenticated, deps) {
 			error: { message: "Missing required file field: audio" }
 		}, 400);
 		const languageValue = form.get("language");
+		const expectedProvider = form.get("expectedProvider");
 		const language = typeof languageValue === "string" && languageValue.trim() ? languageValue.trim() : void 0;
 		const fileName = "name" in audio && typeof audio.name === "string" && audio.name.trim() ? audio.name.trim() : `audio-${Date.now()}`;
 		return runTranscription(c, {
 			audioBuffer: Buffer.from(await audio.arrayBuffer()),
 			mimeType: audio.type || "audio/webm",
 			fileName,
+			...typeof expectedProvider === "string" && expectedProvider ? { expectedProvider } : {},
 			...language ? { language } : {}
 		});
 	});

package/dist/src/gateway/hono/routes/workflows.js

@@ -1,9 +1,9 @@
 import { init_agent_scope, resolveDefaultAgentId } from "../../../agent/agent-scope.js";
 import { resolveProjectAgentId } from "../../../projects/project-agent.js";
 import "../../../projects/index.js";
+import { messagesToClientHistory } from "../../../session/client-history.js";
 import { validateWorkflowDefinitionInput } from "../../../workflows/domain/validation.js";
 import { WorkflowNameConflictError, WorkflowRevisionConflictError, createWorkflowCatalog } from "../../../agent/workflow/catalog.js";
-import { messagesToClientHistory } from "../../../session/client-history.js";
 import "../../../workflows/domain/index.js";
 import { WorkflowDraftConflictError, WorkflowDraftStore } from "../../../workflows/authoring/workflow-draft-store.js";
 import "../../../workflows/authoring/index.js";

package/dist/src/gateway/index.js

@@ -2,8 +2,8 @@ import { buckets } from "./rate-limit/buckets.js";
 import { buildDefaultCorsOrigins, init_host, isAllInterfacesHost, isLoopbackHost, resolveEffectiveGatewayPort, resolveGatewayServiceListenPort } from "./host.js";
 import { isGatewayStrictSecurityEnabled } from "./rate-limit/env-flags.js";
 import { init_rate_limit } from "./rate-limit/index.js";
-import { GatewayLockError, acquireGatewayLock } from "./lock.js";
 import { defaultGatewayBindMode, isContainerEnvironment, resolveGatewayBindHost, resolveGatewayBindHostSync, resolveGatewayBindMode, resolveGatewayEffectiveHost } from "../config/gateway-bind.js";
+import { GatewayLockError, acquireGatewayLock } from "./lock.js";
 import { assertGatewayAuthConfigured, extractToken, resolveGatewayAuth, validateToken } from "./auth.js";
 import { resolveGatewayListenHost, resolveGatewayListenPlan } from "./listen.js";
 import { assertGatewayRuntimeConfig } from "./runtime-config.js";

package/dist/src/gateway/lock.js

@@ -1,7 +1,7 @@
 import path from "node:path";
-import fsSync from "node:fs";
+import fs from "node:fs";
 import { createHash } from "node:crypto";
-import fs from "node:fs/promises";
+import fs$1 from "node:fs/promises";
 import net from "node:net";
 import { homedir } from "os";
 //#region src/gateway/lock.ts
@@ -29,7 +29,7 @@ function resolveGatewayLockPath(configPath) {
 function isGatewayConfigLockedByAnotherProcessSync(configPath, currentPid = process.pid) {
 	const lockPath = resolveGatewayLockPath(configPath);
 	try {
-		const parsed = JSON.parse(fsSync.readFileSync(lockPath, "utf8"));
+		const parsed = JSON.parse(fs.readFileSync(lockPath, "utf8"));
 		if (typeof parsed.pid !== "number" || parsed.pid === currentPid || parsed.configPath !== configPath) return false;
 		if (!isPidAlive(parsed.pid)) return false;
 		if (process.platform !== "linux" || !Number.isFinite(parsed.startTime)) return true;
@@ -69,7 +69,7 @@ function isPidAlive(pid) {
 function readLinuxStartTime(pid) {
 	if (process.platform !== "linux") return null;
 	try {
-		const raw = fsSync.readFileSync(`/proc/${pid}/stat`, "utf8").trim();
+		const raw = fs.readFileSync(`/proc/${pid}/stat`, "utf8").trim();
 		const closeParen = raw.lastIndexOf(")");
 		if (closeParen < 0) return null;
 		const fields = raw.slice(closeParen + 1).trim().split(/\s+/);
@@ -81,7 +81,7 @@ function readLinuxStartTime(pid) {
 }
 async function readLockPayload(lockPath) {
 	try {
-		const raw = await fs.readFile(lockPath, "utf8");
+		const raw = await fs$1.readFile(lockPath, "utf8");
 		const parsed = JSON.parse(raw);
 		if (typeof parsed.pid !== "number") return null;
 		if (typeof parsed.createdAt !== "string") return null;
@@ -117,11 +117,11 @@ async function acquireGatewayLock(configPath, opts = {}) {
 	const staleMs = opts.staleMs ?? DEFAULT_STALE_MS;
 	const port = opts.port;
 	const lockPath = resolveGatewayLockPath(configPath);
-	await fs.mkdir(path.dirname(lockPath), { recursive: true });
+	await fs$1.mkdir(path.dirname(lockPath), { recursive: true });
 	const startedAt = Date.now();
 	let lastPayload = null;
 	while (Date.now() - startedAt < timeoutMs) try {
-		const handle = await fs.open(lockPath, "wx");
+		const handle = await fs$1.open(lockPath, "wx");
 		const startTime = process.platform === "linux" ? readLinuxStartTime(process.pid) : null;
 		const payload = {
 			pid: process.pid,
@@ -136,7 +136,7 @@ async function acquireGatewayLock(configPath, opts = {}) {
 			configPath,
 			release: async () => {
 				await handle.close().catch(() => void 0);
-				await fs.rm(lockPath, { force: true });
+				await fs$1.rm(lockPath, { force: true });
 				console.log(`[GatewayLock] Lock released: lockPath=${lockPath}`);
 			}
 		};
@@ -147,7 +147,7 @@ async function acquireGatewayLock(configPath, opts = {}) {
 		const ownerStatus = ownerPid ? await resolveOwnerStatus(ownerPid, lastPayload, port) : "unknown";
 		if (ownerStatus === "dead" && ownerPid) {
 			console.warn(`[GatewayLock] Cleaning up stale gateway lock: pid=${ownerPid}`);
-			await fs.rm(lockPath, { force: true });
+			await fs$1.rm(lockPath, { force: true });
 			continue;
 		}
 		if (ownerStatus !== "alive") {
@@ -157,14 +157,14 @@ async function acquireGatewayLock(configPath, opts = {}) {
 				stale = Number.isFinite(createdAt) ? Date.now() - createdAt > staleMs : false;
 			}
 			if (!stale) try {
-				const st = await fs.stat(lockPath);
+				const st = await fs$1.stat(lockPath);
 				stale = Date.now() - st.mtimeMs > staleMs;
 			} catch {
 				stale = false;
 			}
 			if (stale) {
 				console.warn(`[GatewayLock] Removing stale lock file: lockPath=${lockPath}`);
-				await fs.rm(lockPath, { force: true });
+				await fs$1.rm(lockPath, { force: true });
 				continue;
 			}
 		}

package/dist/src/gateway/media-access.js

@@ -1,8 +1,8 @@
 import { TaskRepository, init_task_repository } from "../tasks/task-repository.js";
-import { TaskContextRepository } from "../tasks/task-context-repository.js";
 import { resolveMediaReference } from "../media/media-reference.js";
 import { FileServiceError } from "../files/file-service.js";
 import { pendingTranscriptReferencesMediaUri } from "../agent/inbound/attachment-pipeline.js";
+import { TaskContextRepository } from "../tasks/task-context-repository.js";
 import { messagesReferenceMediaUri, taskResultReferencesMediaUri } from "../media/session-references.js";
 //#region src/gateway/media-access.ts
 init_task_repository();

package/dist/src/gateway/mobile-privacy.js

@@ -1,9 +1,9 @@
 import { getProviderRegistry, init_plugin_registry } from "../providers/plugin-registry.js";
 import { PROVIDER_META, getAvailableModels, init_providers } from "../providers/index.js";
-import { resolveSpeechProviderChain } from "../voice/tts/factory.js";
-import { mergeTtsConfigFromAppConfig } from "../voice/tts/merge-config.js";
 import { resolveSTTProviderChain } from "../voice/stt/factory.js";
 import { mergeSttConfigFromAppConfig } from "../voice/stt/config.js";
+import { resolveSpeechProviderChain } from "../voice/tts/factory.js";
+import { mergeTtsConfigFromAppConfig } from "../voice/tts/merge-config.js";
 import { getVoiceProviderMetadata } from "../voice/metadata/registry.js";
 import "../voice/metadata/index.js";
 import { getImageGenerationCatalog } from "./image-generation-setup.js";

package/dist/src/gateway/ports.js

@@ -1,6 +1,6 @@
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
-import fsSync from "node:fs";
+import fs from "node:fs";
 import { execFileSync } from "node:child_process";
 import net from "node:net";
 //#region src/gateway/ports.ts
@@ -54,7 +54,7 @@ function listPortListenersViaProc(port) {
 	for (const procFile of ["/proc/net/tcp", "/proc/net/tcp6"]) {
 		let content;
 		try {
-			content = fsSync.readFileSync(procFile, "utf-8");
+			content = fs.readFileSync(procFile, "utf-8");
 		} catch {
 			continue;
 		}
@@ -68,7 +68,7 @@ function listPortListenersViaProc(port) {
 	if (inodeSet.size === 0) return results;
 	let pidDirs;
 	try {
-		pidDirs = fsSync.readdirSync("/proc").filter((name) => /^\d+$/.test(name));
+		pidDirs = fs.readdirSync("/proc").filter((name) => /^\d+$/.test(name));
 	} catch {
 		return results;
 	}
@@ -76,14 +76,14 @@ function listPortListenersViaProc(port) {
 		const fdDir = `/proc/${pidStr}/fd`;
 		let fds;
 		try {
-			fds = fsSync.readdirSync(fdDir);
+			fds = fs.readdirSync(fdDir);
 		} catch {
 			continue;
 		}
 		for (const fd of fds) {
 			let target;
 			try {
-				target = fsSync.readlinkSync(`${fdDir}/${fd}`);
+				target = fs.readlinkSync(`${fdDir}/${fd}`);
 			} catch {
 				continue;
 			}
@@ -93,7 +93,7 @@ function listPortListenersViaProc(port) {
 			if (!results.some((p) => p.pid === pid)) {
 				let command;
 				try {
-					command = fsSync.readFileSync(`/proc/${pidStr}/comm`, "utf-8").trim();
+					command = fs.readFileSync(`/proc/${pidStr}/comm`, "utf-8").trim();
 				} catch {}
 				results.push({
 					pid,

package/dist/src/gateway/provider-model-setup.d.ts

@@ -0,0 +1,4 @@
+import type { SetupSnapshot } from '../providers/setup/engine.js';
+import type { Config } from '../config/schema.js';
+export declare function loadProviderSetupSnapshot(provider: string, config?: Config): Promise<SetupSnapshot>;
+export declare function readProviderSetupSnapshot(provider: string, configured: boolean, config?: Config): SetupSnapshot;

package/dist/src/gateway/provider-model-setup.js

@@ -0,0 +1,56 @@
+import { getProviderSetupProfile, init_profiles, isInteractiveOnlyProvider } from "../providers/setup/profiles.js";
+import { getModelCatalogStore, init_model_catalog_store } from "../providers/model-catalog-store.js";
+import { getAllModels, getAllProviders, getModelsByProvider, getProviderDisplayName, init_providers, isProviderConfigured, isProviderConfiguredSync, providerSupportsOAuth } from "../providers/index.js";
+import { getImageGenerationProvider } from "../agent/image/generation/provider-registry.js";
+import { listSttProvidersForApi } from "../voice/stt/list-providers.js";
+import { listGlobalDefaults } from "./global-defaults-admin.js";
+import { getRecommendedModelsForProvider } from "../providers/presentation.js";
+import { listTtsProvidersForApi } from "../voice/tts/list-providers.js";
+import { readSetupVoiceState } from "../providers/setup/voice.js";
+//#region src/gateway/provider-model-setup.ts
+init_providers();
+init_model_catalog_store();
+init_profiles();
+async function loadProviderSetupSnapshot(provider, config) {
+	const languageProvider = getAllProviders().includes(provider);
+	const mediaProvider = getImageGenerationProvider(provider) || listSttProvidersForApi(config).providers.some((entry) => entry.id === provider) || listTtsProvidersForApi(config).providers.some((entry) => entry.id === provider);
+	if (!languageProvider && !mediaProvider) throw new Error(`Unknown model provider: ${provider}`);
+	return readProviderSetupSnapshot(provider, languageProvider && await isProviderConfigured(provider), config);
+}
+function readProviderSetupSnapshot(provider, configured, config) {
+	const languageProvider = getAllProviders().includes(provider);
+	const models = (languageProvider ? getModelsByProvider(provider) : []).filter((model) => !("computerUse" in model && model.computerUse));
+	const recommended = new Set((languageProvider ? getRecommendedModelsForProvider(provider) : []).map((model) => model.ref));
+	const source = getModelCatalogStore().getSource(provider);
+	const image = getImageGenerationProvider(provider);
+	const images = image?.models.filter((id) => provider !== "xopc-cloud" || source?.models.some((model) => model.id === id && model.availability === "available")) ?? [];
+	const configuredProviders = new Set(getAllProviders().filter(isProviderConfiguredSync));
+	const backgroundRestrictedModels = new Set(getAllModels().filter((model) => isInteractiveOnlyProvider(model.provider, model.baseUrl)).map((model) => `${model.provider}/${model.id}`));
+	for (const model of models) if (/^https?:\/\/(localhost|127\.0\.0\.1|\[::1\])(?=[:/]|$)/.test(model.baseUrl)) configuredProviders.add(provider);
+	const voice = config ? readSetupVoiceState(provider, config) : void 0;
+	const imageConfigured = image?.isConfigured({ cfg: config }) ?? false;
+	const nativeVoiceConfigured = Boolean(!["qwen-token-plan-cn", "xopc-cloud"].includes(provider) && voice && Object.values(voice.choices).some((choices) => choices.length));
+	return {
+		...config ? { voice } : {},
+		configured: configured || configuredProviders.has(provider) || imageConfigured || nativeVoiceConfigured,
+		configuredProviders,
+		backgroundRestrictedModels,
+		defaults: listGlobalDefaults().defaults,
+		profile: getProviderSetupProfile(provider, getProviderDisplayName(provider), providerSupportsOAuth(provider), models[0]?.baseUrl),
+		models: (!configured && !configuredProviders.has(provider) && (nativeVoiceConfigured || imageConfigured) ? [] : models).map((model) => ({
+			ref: `${provider}/${model.id}`,
+			name: model.name,
+			vision: model.input.includes("image"),
+			reasoning: model.reasoning,
+			baseUrl: model.baseUrl,
+			api: model.api,
+			recommended: recommended.has(`${provider}/${model.id}`)
+		})),
+		images: (nativeVoiceConfigured && !imageConfigured && !configured ? [] : images).map((id) => ({
+			ref: `${provider}/${id}`,
+			name: id
+		}))
+	};
+}
+//#endregion
+export { loadProviderSetupSnapshot, readProviderSetupSnapshot };

package/dist/src/gateway/run-loop.js

@@ -1,6 +1,6 @@
 import { acquireGatewayLock } from "./lock.js";
-import { runBootstrapMigrationsSync } from "../migrations/runner.js";
 import { loadConfig } from "../config/loader.js";
+import { runBootstrapMigrationsSync } from "../migrations/runner.js";
 import "../config/index.js";
 import { isRestartEnabled } from "../config/commands.flags.js";
 import { restartGatewayProcessWithFreshPid } from "./respawn.js";

package/dist/src/gateway/scenes/mailContext.js

@@ -1,9 +1,9 @@
 import { getConnectorConnection, getConnectorInstallation, init_connector_repository } from "../../storage/sqlite/connector-repository.js";
 import { ComposioSessionsAdapter } from "../../connectors/composio-sessions.js";
 import { getConnectorDefinition } from "../../connectors/catalog.js";
+import { sceneContentHash } from "../../scenes/contracts.js";
 import { normalizeConnectedSourceResult } from "../../connectors/connected-source-normalizers.js";
 import { sanitizeConnectedSourceValue } from "../../connectors/connected-source-sanitization.js";
-import { sceneContentHash } from "../../scenes/contracts.js";
 import { SceneSourceNotReady, sceneSourceFailureReason } from "../../scenes/readiness.js";
 import { SceneMailContextProvider } from "../../scenes/mailContext.js";
 import { createHash } from "node:crypto";

package/dist/src/gateway/scenes/slackThreadSource.js

@@ -1,8 +1,8 @@
 import { getConnectorConnection, getConnectorInstallation, init_connector_repository } from "../../storage/sqlite/connector-repository.js";
 import { ComposioSessionsAdapter } from "../../connectors/composio-sessions.js";
 import { getConnectorDefinition } from "../../connectors/catalog.js";
-import { sanitizeConnectedSourceValue } from "../../connectors/connected-source-sanitization.js";
 import { sceneContentHash } from "../../scenes/contracts.js";
+import { sanitizeConnectedSourceValue } from "../../connectors/connected-source-sanitization.js";
 import { z } from "zod";
 //#region src/gateway/scenes/slackThreadSource.ts
 init_connector_repository();

package/dist/src/gateway/server.js

@@ -1,5 +1,5 @@
-import { ensureXopcCliOnPath } from "../infra/path-env.js";
 import { resolveGatewayBindHost, resolveGatewayListenHosts } from "../config/gateway-bind.js";
+import { ensureXopcCliOnPath } from "../infra/path-env.js";
 import { resolveGatewayListenPlan } from "./listen.js";
 import { GatewayService } from "./service.js";
 import { handleSiteShareUpgrade } from "../share/site-share-router.js";

package/dist/src/gateway/service/agent-runner.d.ts

@@ -1,3 +1,4 @@
+import { type ClarificationSubmission } from '@xopcai/gateway-contract';
 import type { TurnOrigin } from '@xopcai/endpoint-tools-protocol';
 import type { ClarificationResponseAction } from '@xopcai/gateway-contract';
 import type { Config } from '../../config/schema.js';
@@ -112,18 +113,18 @@ export declare class GatewayAgentRunner {
         aborted: boolean;
         idle: boolean;
     }>;
-    answerEphemeralClarification(requestId: string, answer: string): boolean;
+    answerEphemeralClarification(requestId: string, answer: ClarificationSubmission): boolean;
     getClarificationState(conversationId: string): import("@xopcai/gateway-contract").ClarificationWaitSnapshot;
-    resolveClarificationResponse(input: {
+    resolveClarificationResponse(input: ClarificationSubmission & {
         id: string;
         expectedVersion: number;
         idempotencyKey: string;
         action: ClarificationResponseAction;
-        answer?: string;
     }): import("../../storage/sqlite/clarification-wait-repository.js").ResolveClarificationResult;
     getClarificationById(id: string): import("@xopcai/gateway-contract").ClarificationWait;
     answerClarificationChoice(requestId: string, choiceIndex: number, idempotencyKey: string): boolean;
-    answerClarificationText(conversationId: string, answer: string, idempotencyKey: string): boolean;
+    answerClarificationDecision(requestId: string, decision: 'approve' | 'deny', idempotencyKey: string): boolean;
+    answerClarificationText(conversationId: string, text: string, idempotencyKey: string): boolean;
     /** Same execution path as scheduled continuation, but lets callers observe failures. */
     runScheduledWebchatTurn(conversationId: string, userTurn: UserTurnInput): Promise<void>;
     runScheduledWebchatContinuation(conversationId: string, message: string): Promise<void>;