@xopcai/xopc 0.0.400 → 0.0.402

package/dist/src/extensions/agent-plugins/refresh-runtime-access.js

@@ -0,0 +1,36 @@
+import { createLogger } from "../../utils/logger/index.js";
+import { init_logger } from "../../utils/logger.js";
+import { pluginAuthorizations } from "./setup-contract.js";
+import { resolvePluginCapabilityAccess } from "./capability-access.js";
+import { AgentPluginStore } from "./store.js";
+import { PluginSetupService } from "./setup.js";
+//#region src/extensions/agent-plugins/refresh-runtime-access.ts
+init_logger();
+const log = createLogger("PluginRuntimeAccess");
+/** Check provider-defined credentials before constructing a new turn's Skill index and MCP config. */
+async function refreshPluginRuntimeAccess(config, workspace, agentId) {
+	const store = new AgentPluginStore(), service = new PluginSetupService(store);
+	const signature = () => JSON.stringify(store.active(agentId, workspace).map((plugin) => {
+		const access = resolvePluginCapabilityAccess(plugin, store);
+		return [
+			plugin.id,
+			plugin.skills.filter((s) => access.skill(s.name)).map((s) => s.name),
+			Object.keys(plugin.servers).filter(access.server)
+		];
+	}));
+	const before = signature();
+	for (const plugin of store.active(agentId, workspace)) {
+		if (!pluginAuthorizations(plugin.manifest).length && !Object.values(plugin.layout?.userConfig ?? {}).some((field) => field.sensitive) && Object.values(plugin.servers).every((server) => server.type === "stdio" || server.connectionAuth?.mode === "none")) continue;
+		try {
+			await service.refreshRuntime(plugin.id, config, workspace);
+		} catch (err) {
+			log.warn({
+				err,
+				pluginId: plugin.id
+			}, "Could not refresh plugin authorization state");
+		}
+	}
+	return before !== signature();
+}
+//#endregion
+export { refreshPluginRuntimeAccess };

package/dist/src/extensions/agent-plugins/setup-contract.d.ts

@@ -71,4 +71,5 @@ export declare function parsePluginAuthorizationCheck(output: string, methodIds:
         method?: string;
         helpUrl?: string;
     }[];
+    expiresAt?: number;
 };

package/dist/src/extensions/agent-plugins/setup-contract.js

@@ -65,6 +65,7 @@ const pluginPermissionIssueSchema = z.strictObject({
 function parsePluginAuthorizationCheck(output, methodIds) {
 	const result = z.object({
 		authenticated: z.boolean(),
+		expiresAt: z.number().finite().optional(),
 		issues: z.array(pluginPermissionIssueSchema).max(20).default([])
 	}).parse(JSON.parse(output.trim().split("\n").at(-1)));
 	for (const issue of result.issues) {

package/dist/src/extensions/agent-plugins/setup.d.ts

@@ -39,6 +39,7 @@ declare const schema: z.ZodObject<{
     deferred: z.ZodDefault<z.ZodBoolean>;
     authorizations: z.ZodDefault<z.ZodArray<z.ZodObject<{
         id: z.ZodString;
+        expiresAt: z.ZodOptional<z.ZodNumber>;
         state: z.ZodEnum<{
             error: "error";
             pending: "pending";
@@ -117,10 +118,12 @@ export declare class PluginSetupService {
         id: string;
         name: string;
     }>>>;
-    authorization(id: string, owner: string, server: string, config: Config): Promise<import("../../agent/mcp/connection-setup.js").McpAuthorization | import("./cli-authorization.js").PluginCliAuthorization>;
+    authorization(id: string, owner: string, server: string, config: Config): Promise<import("./cli-authorization.js").PluginCliAuthorization | import("../../agent/mcp/connection-setup.js").McpAuthorization>;
     redirect(id: string, owner: string, server: string, url: string, config: Config): boolean;
     private config;
     startPrepare(id: string, owner: string, revision: number, config: Config, workspace: string, idempotencyKey?: string): PluginSetupJob;
+    /** Recheck an installed revision without login prompts or resource downloads. */
+    refreshRuntime(id: string, config: Config, workspace: string): Promise<void>;
     act(id: string, owner: string, input: z.infer<typeof setupActionSchema>, config: Config, workspace: string): Promise<PluginSetupJob>;
     private perform;
 }

package/dist/src/extensions/agent-plugins/setup.js

@@ -11,8 +11,8 @@ import { readPluginAuthBinding, savePluginAuthBinding, savePluginOAuthReference
 import { pluginConfigMissing, readPluginUserConfig, savePluginUserConfig } from "./user-config.js";
 import { materializePluginServers } from "./mcp-adapter.js";
 import { getNativePiAgentDir } from "../../agent/mcp/native-mcp.js";
-import { cancelMcpAuthorization, getMcpAuthorization, probeMcpConnection, startMcpAuthorization, submitMcpRedirect } from "../../agent/mcp/connection-setup.js";
 import { cancelPluginCliAuthorizations, getPluginCliAuthorization, inspectPluginCliAuthorization, startPluginCliAuthorization } from "./cli-authorization.js";
+import { cancelMcpAuthorization, getMcpAuthorization, probeMcpConnection, startMcpAuthorization, submitMcpRedirect } from "../../agent/mcp/connection-setup.js";
 import { join } from "node:path";
 import { existsSync, readFileSync } from "node:fs";
 import { randomUUID } from "node:crypto";
@@ -60,6 +60,7 @@ const schema = z.object({
 	deferred: z.boolean().default(false),
 	authorizations: z.array(z.object({
 		id: z.string(),
+		expiresAt: z.number().finite().optional(),
 		state: z.enum([
 			"pending",
 			"connected",
@@ -206,7 +207,7 @@ var PluginSetupService = class {
 		for (const [name, target] of Object.entries(plugin.servers)) {
 			result[name] = [];
 			for (const [sourceId, source] of Object.entries(config.mcp?.servers ?? {})) {
-				if (!matchingReusableConnection(target, source) || !source.url || !source.xopcOAuthCredentialId) continue;
+				if (!matchingReusableConnection(target, source) || typeof source.url !== "string" || !source.xopcOAuthCredentialId) continue;
 				if (await credentials.tokens(source.xopcOAuthCredentialId, source.url)) result[name].push({
 					id: sourceId,
 					name: source.displayName ?? sourceId
@@ -265,6 +266,21 @@ var PluginSetupService = class {
 		});
 		return this.get(id, owner);
 	}
+	/** Recheck an installed revision without login prompts or resource downloads. */
+	async refreshRuntime(id, config, workspace) {
+		if (!existsSync(this.path(id)) || this.store.pending(id)) return;
+		const saved = schema.parse(JSON.parse(readFileSync(this.path(id), "utf8")));
+		if (saved.packageRevision !== this.store.receipt(id)?.revision || !saved.installed || saved.resources !== "ready" || !saved.connections.some((value) => value.state === "connected") && !saved.authorizations.some((value) => value.state === "connected") || saved.state === "cancelled" || running.has(this.key(id)) || lockfile.checkSync(this.path(id), { realpath: false })) return;
+		const release = lockfile.lockSync(this.path(id), { realpath: false });
+		try {
+			await this.perform(id, saved.owner, {
+				action: "prepare",
+				expectedRevision: saved.revision
+			}, config, workspace, true);
+		} finally {
+			release();
+		}
+	}
 	async act(id, owner, input, config, workspace) {
 		const current = this.get(id, owner);
 		const previous = input.idempotencyKey && current?.operations.find((op) => op.key === input.idempotencyKey);
@@ -290,7 +306,7 @@ var PluginSetupService = class {
 			release();
 		}
 	}
-	async perform(id, owner, input, config, workspace) {
+	async perform(id, owner, input, config, workspace, refreshOnly = false) {
 		const job = this.get(id, owner);
 		if (!job) throw new Error("Setup not found");
 		if (job.revision !== input.expectedRevision) throw new Error("Setup changed. Refresh and retry.");
@@ -428,49 +444,58 @@ var PluginSetupService = class {
 		delete job.error;
 		this.write(job);
 		try {
-			await preparePluginResources(this.store, plugin, controller.signal);
+			if (!refreshOnly) await preparePluginResources(this.store, plugin, controller.signal);
 			job.resources = "ready";
 			job.missingConfig = pluginConfigMissing(this.store, plugin);
 			if (job.missingConfig.length) {
 				job.state = "action_required";
 				job.error = "Complete the required configuration fields.";
-			} else {
-				for (const target of job.authorizations) {
-					const method = declarations.find((value) => value.id === target.id).methods.find((value) => value.id === target.method);
-					if (method?.type === "cli") {
-						const check = await inspectPluginCliAuthorization(this.store, plugin, target.id, method, controller.signal);
-						target.state = check.authenticated ? "connected" : "pending";
-						target.issues = check.issues;
-					} else if (method?.type === "form") {
-						const values = readPluginUserConfig(this.store, id, plugin.receipt.revision);
-						target.state = method.fields.every((key) => values[key] !== void 0 && values[key] !== "") ? "connected" : "pending";
-					}
+			}
+			for (const target of job.authorizations) {
+				const method = declarations.find((value) => value.id === target.id).methods.find((value) => value.id === target.method);
+				if (method?.type === "cli" && method.fields.some((key) => job.missingConfig.includes(key))) {
+					target.state = "pending";
+					continue;
 				}
-				for (const server of job.connections) {
-					controller.signal.throwIfAborted();
-					if (declarations.filter((value) => value.servers.includes(server.name)).some((gate) => {
-						const target = job.authorizations.find((value) => value.id === gate.id);
-						const method = gate.methods.find((value) => value.id === target.method);
-						return !method || method.type !== "oauth" && target.state !== "connected";
-					})) {
-						server.state = "skipped";
-						delete server.toolCount;
-						continue;
-					}
-					const result = await probeMcpConnection(effective, workspace, pluginServerId(id, server.name), { signal: controller.signal });
-					controller.signal.throwIfAborted();
-					server.state = result.state;
-					server.toolCount = result.toolCount;
-					const persisted = this.get(id, owner);
-					if (!persisted || persisted.id !== job.id || persisted.revision !== job.revision || persisted.state === "cancelled" || !this.store.receipt(id)) throw new Error("Setup changed");
-					this.config(id, job.packageRevision, config);
-					this.write(job);
+				if (method?.type === "cli") {
+					const check = await inspectPluginCliAuthorization(this.store, plugin, target.id, method, controller.signal);
+					target.state = check.authenticated && (check.expiresAt === void 0 || check.expiresAt > Date.now()) ? "connected" : "pending";
+					target.issues = check.issues;
+					target.expiresAt = check.expiresAt;
+				} else if (method?.type === "form") {
+					const values = readPluginUserConfig(this.store, id, plugin.receipt.revision);
+					target.state = method.fields.every((key) => values[key] !== void 0 && values[key] !== "") ? "connected" : "pending";
 				}
-				for (const target of job.authorizations) target.state = declarations.find((value) => value.id === target.id).servers.every((name) => job.connections.find((value) => value.name === name)?.state === "connected") ? "connected" : "pending";
-				job.partial = plugin.diagnostics.length > 0;
-				if (job.connections.some((value) => value.state === "error")) job.error = "Connection verification failed. Check the credentials or login status and try again.";
-				job.state = "action_required";
 			}
+			for (const server of job.connections) {
+				controller.signal.throwIfAborted();
+				const unavailable = declarations.filter((value) => value.servers.includes(server.name)).some((gate) => {
+					const target = job.authorizations.find((value) => value.id === gate.id);
+					const method = gate.methods.find((value) => value.id === target.method);
+					return !method || method.type !== "oauth" && target.state !== "connected";
+				});
+				const missingServerConfig = job.missingConfig.some((key) => JSON.stringify(plugin.servers[server.name]).includes(`\${user_config.${key}}`));
+				if (unavailable || missingServerConfig) {
+					server.state = "skipped";
+					delete server.toolCount;
+					continue;
+				}
+				const result = await probeMcpConnection(effective, workspace, pluginServerId(id, server.name), { signal: controller.signal });
+				controller.signal.throwIfAborted();
+				server.state = result.state;
+				server.toolCount = result.toolCount;
+				const persisted = this.get(id, owner);
+				if (!persisted || persisted.id !== job.id || persisted.revision !== job.revision || persisted.state === "cancelled" || !this.store.receipt(id)) throw new Error("Setup changed");
+				this.config(id, job.packageRevision, config);
+				this.write(job);
+			}
+			for (const target of job.authorizations) {
+				const declaration = declarations.find((value) => value.id === target.id);
+				target.state = (declaration.methods.find((value) => value.id === target.method)?.type === "oauth" || target.state === "connected") && declaration.servers.every((name) => job.connections.find((value) => value.name === name)?.state === "connected") ? "connected" : "pending";
+			}
+			job.partial = plugin.diagnostics.length > 0;
+			if (job.connections.some((value) => value.state === "error")) job.error = "Connection verification failed. Check the credentials or login status and try again.";
+			job.state = "action_required";
 			this.config(id, job.packageRevision, config);
 			controller.signal.throwIfAborted();
 			if (this.get(id, owner)?.id !== job.id || this.get(id, owner)?.state === "cancelled") throw new Error("Setup changed");
@@ -478,6 +503,14 @@ var PluginSetupService = class {
 		} catch {
 			const current = this.get(id, owner);
 			if (!controller.signal.aborted && current?.id === job.id && current.revision === job.revision && current.state !== "cancelled" && (this.store.pending(id) ?? this.store.get(id))?.receipt.revision === job.packageRevision) {
+				for (const target of job.authorizations) target.state = "pending";
+				for (const connection of job.connections) {
+					const server = plugin.servers[connection.name];
+					if (server && (server.type !== "stdio" ? server.connectionAuth?.mode !== "none" : Object.values(server.env ?? {}).some((value) => Object.entries(plugin.layout?.userConfig ?? {}).some(([key, field]) => field.sensitive && value.includes(`\${user_config.${key}}`))))) {
+						connection.state = "error";
+						delete connection.toolCount;
+					}
+				}
 				job.state = "failed";
 				if (job.resources !== "ready") job.resources = "error";
 				job.error = "Preparation failed. Retry after checking resources and connections.";

package/dist/src/extensions/agent-plugins/skill-catalog.js

@@ -1,8 +1,8 @@
+import { containedPath } from "./validation.js";
+import { AgentPluginStore } from "./store.js";
 import { parseFrontmatter } from "../../markdown/frontmatter.js";
 import { createSkillConfigManager } from "../../agent/skills/config.js";
 import { parseSkillLocalizations } from "../../agent/skills/parse-skill-metadata.js";
-import { containedPath } from "./validation.js";
-import { AgentPluginStore } from "./store.js";
 import { buildSkillMarkdownPreviewFromRaw } from "../../agent/skills/skill-markdown-preview-from-raw.js";
 import { agentPluginInventoryRow } from "./inventory.js";
 import { basename, dirname } from "node:path";

package/dist/src/extensions/agent-plugins/source-http-fetch.js

@@ -1,6 +1,6 @@
 import { BlockList, isIP } from "node:net";
-import { Agent, fetch } from "undici";
 import { lookup } from "node:dns";
+import { Agent, fetch } from "undici";
 //#region src/extensions/agent-plugins/source-http-fetch.ts
 const blocked = new BlockList();
 for (const [network, prefix] of [

package/dist/src/extensions/agent-plugins/store.d.ts

@@ -98,6 +98,7 @@ export declare class AgentPluginStore {
     constructor(stateDir?: string);
     private receiptsDir;
     revisionKey(): string;
+    private authorizationExpiryState;
     dataDir(id: string): string;
     private revisionDir;
     private receiptPath;

package/dist/src/extensions/agent-plugins/store.js

@@ -66,12 +66,19 @@ var AgentPluginStore = class {
 		return readdirSync(this.receiptsDir()).filter((name) => name.endsWith(".json")).sort().map((name) => {
 			try {
 				const setupPath = join(this.stateDir, "plugin-setup", name);
-				return createHash("sha256").update(readFileSync(join(this.receiptsDir(), name))).update(existsSync(setupPath) ? readFileSync(setupPath) : "").digest("hex");
+				return createHash("sha256").update(readFileSync(join(this.receiptsDir(), name))).update(existsSync(setupPath) ? readFileSync(setupPath) : "").update(JSON.stringify(this.authorizationExpiryState(setupPath))).digest("hex");
 			} catch {
 				return "";
 			}
 		}).join("|");
 	}
+	authorizationExpiryState(path) {
+		try {
+			return (JSON.parse(readFileSync(path, "utf8")).authorizations ?? []).map((value) => value.expiresAt !== void 0 && value.expiresAt <= Date.now());
+		} catch {
+			return [];
+		}
+	}
 	dataDir(id) {
 		return containedPath(this.stateDir, join(this.stateDir, "plugin-data", pluginName.parse(id)));
 	}
@@ -127,7 +134,7 @@ var AgentPluginStore = class {
 			});
 			const setupPath = join(this.stateDir, "plugin-setup", `${id}.json`);
 			const setup = existsSync(setupPath) ? JSON.parse(readFileSync(setupPath, "utf8")) : void 0;
-			const readiness = !valid || adapterChanged || capabilityChanged || inspection.layout?.compatibility.some((item) => item.component === "hooks" || item.component === "authorizations" && item.support === "invalid") ? "blocked" : setup?.packageRevision === receipt.revision && setup.state !== "completed" && !setup.installed ? "setup_required" : inspection.diagnostics.length || setup?.packageRevision === receipt.revision && (setup.partial || setup.installed && (setup.missingConfig?.length || setup.connections?.some((value) => value.state !== "connected") || setup.authorizations?.some((value) => value.state !== "connected" || !!value.issues?.length))) ? "degraded" : "ready";
+			const readiness = !valid || adapterChanged || capabilityChanged || inspection.layout?.compatibility.some((item) => item.component === "hooks" || ["authorizations", "capability-access"].includes(item.component) && item.support === "invalid") ? "blocked" : setup?.packageRevision === receipt.revision && setup.state !== "completed" && !setup.installed ? "setup_required" : inspection.diagnostics.length || setup?.packageRevision === receipt.revision && (setup.partial || setup.installed && (setup.missingConfig?.length || setup.connections?.some((value) => value.state !== "connected") || setup.authorizations?.some((value) => value.state !== "connected" || !!value.issues?.length))) ? "degraded" : "ready";
 			return {
 				...inspection,
 				id,

package/dist/src/extensions/agent-plugins/user-config.js

@@ -1,7 +1,7 @@
 import { init_write_file_atomic, writeTextAtomicSync } from "../../infra/write-file-atomic.js";
-import { CredentialResolver, init_credentials } from "../../auth/credentials.js";
 import { pluginAuthorizations } from "./setup-contract.js";
 import { pluginName } from "./validation.js";
+import { CredentialResolver, init_credentials } from "../../auth/credentials.js";
 import { pluginCredentialProviderPrefix } from "./auth.js";
 import { join } from "node:path";
 import { existsSync, readFileSync } from "node:fs";

package/dist/src/extensions/agent-plugins/validation.js

@@ -1,14 +1,15 @@
-import { McpOAuthConfigSchema, init_schema } from "../../config/schema.js";
 import { pluginAuthorizations, safeAuthorizationUrl } from "./setup-contract.js";
+import { pluginCapabilityAccess } from "./capability-access.js";
 import { normalizePluginMcpServer } from "./mcp-format.js";
+import { McpOAuthConfigSchema, init_schema } from "../../config/schema.js";
 import { pluginResources } from "./resources.js";
 import { collectPluginSkillFiles, readPluginLayout } from "./formats.js";
 import { dirname, isAbsolute, join, relative, resolve } from "node:path";
 import { existsSync, lstatSync, readFileSync, readdirSync, realpathSync, statSync } from "node:fs";
 import { createHash } from "node:crypto";
 import { z } from "zod";
-import yaml from "js-yaml";
 import { validateHeaderName, validateHeaderValue } from "node:http";
+import yaml from "js-yaml";
 //#region src/extensions/agent-plugins/validation.ts
 init_schema();
 const PLUGIN_SCHEMA = "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json";
@@ -309,6 +310,15 @@ function inspectAgentPlugin(rootDir, dataDir = join(rootDir, ".inspection-data")
 			}
 		}
 	});
+	attempt("capability-access", () => {
+		const access = pluginCapabilityAccess(manifest);
+		const accounts = new Set(pluginAuthorizations(manifest).map((value) => value.id));
+		for (const [kind, rules] of Object.entries(access)) for (const [name, rule] of Object.entries(rules)) {
+			if (kind === "skills" ? !result.skills.some((skill) => skill.name === name) : !result.servers[name]) throw new Error(`Unknown ${kind} capability: ${name}`);
+			if (rule.servers.some((server) => !result.servers[server]) || rule.authorizations.some((value) => !accounts.has(typeof value === "string" ? value : value.id))) throw new Error(`Unknown capability dependency: ${name}`);
+		}
+		if (Object.keys(access.skills).length || Object.keys(access.mcp).length) result.capabilities.push(`runtime.capability-access:${JSON.stringify(access)}`);
+	});
 	result.capabilities.sort();
 	return result;
 }

package/dist/src/extensions/install.js

@@ -9,8 +9,8 @@ import { collectExtensionPackageDependencyIssues } from "./package-contract.js";
 import { dirname, isAbsolute, join, resolve, sep } from "path";
 import { cpSync, existsSync, mkdirSync, mkdtempSync, readFileSync, readdirSync, rmSync, writeFileSync } from "fs";
 import { execFileSync } from "node:child_process";
-import semver from "semver";
 import AdmZip from "adm-zip";
+import semver from "semver";
 import { tmpdir } from "os";
 //#region src/extensions/install.ts
 /**

package/dist/src/extensions/update.js

@@ -1,8 +1,8 @@
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
 import { init_paths, resolveBundledExtensionsDir, resolveExtensionsDir } from "../config/paths.js";
-import { downloadExtensionStoreZipBuffer, resolveExtensionZipDownloadUrl, resolveExtensionsStoreBaseUrl, verifyStoreArtifactSha256 } from "../agent/skills/marketplace/adapters/store/store-api-client.js";
 import { computeExtensionDirectoryIntegrity, getExtensionLockfileManager } from "./lockfile.js";
+import { downloadExtensionStoreZipBuffer, resolveExtensionZipDownloadUrl, resolveExtensionsStoreBaseUrl, verifyStoreArtifactSha256 } from "../agent/skills/marketplace/adapters/store/store-api-client.js";
 import { loadConfig } from "../config/loader.js";
 import { commitStagedExtensionInstall, finalizeStagedExtensionInstall, rollbackStagedExtensionInstall, stageExtensionNpm, stageExtensionStoreZip } from "./install-transaction.js";
 import { findExtension } from "./marketplace.js";

package/dist/src/gateway/agents-admin.js

@@ -1,10 +1,10 @@
 import { normalizeAgentId, validateAgentIdForNewAgent } from "../agent-catalog/id.js";
 import { AgentCatalogRepository, init_repository } from "../agent-catalog/repository.js";
 import { init_agent_scope, listAgentEntries, resolveAgentProfileDir, resolveAgentWorkspaceDir, resolveDefaultAgentId, resolveUserPath } from "../agent/agent-scope.js";
-import { AGENT_PROFILE_MARKDOWN_SYSTEM_FILES, REQUIRED_AGENT_PROFILE_MARKDOWN_FILE_SET } from "../agent/context/workspace.js";
-import { AgentCatalogService } from "../agent-catalog/service.js";
 import { resolveEffectiveAgentProfile } from "../config/agent-profile.js";
+import { AGENT_PROFILE_MARKDOWN_SYSTEM_FILES, REQUIRED_AGENT_PROFILE_MARKDOWN_FILE_SET } from "../agent/context/workspace.js";
 import { isPathUnderWorkspace, resolveWorkspaceSafePath } from "./workspace-editor-path.js";
+import { AgentCatalogService } from "../agent-catalog/service.js";
 import { GATEWAY_BUILTIN_TOOL_IDS } from "./agent-builtin-tools.js";
 import { resolve } from "node:path";
 import { mkdir, readFile, realpath, stat, unlink, writeFile } from "node:fs/promises";

package/dist/src/gateway/file-path-classifier.js

@@ -1,7 +1,7 @@
 import { init_paths_state, resolveStateDir } from "../config/paths-state.js";
 import { init_agent_scope, resolveAgentProfileDir } from "../agent/agent-scope.js";
-import { extractProfileAgentId } from "../config/agent-profile.js";
 import { init_paths, resolveConfigPath, resolveSkillsDir } from "../config/paths.js";
+import { extractProfileAgentId } from "../config/agent-profile.js";
 import { isBareProfileMarkdownFileName, resolveProfileMarkdownPathIfBareName } from "../agent/tools/tool-paths.js";
 import { isPathUnderWorkspace } from "./workspace-editor-path.js";
 import { homedir } from "node:os";

package/dist/src/gateway/hono/lib/config-payload.js

@@ -1,8 +1,8 @@
 import { normalizeAgentId } from "../../../agent-catalog/id.js";
 import { AgentCatalogRepository, init_repository } from "../../../agent-catalog/repository.js";
 import { init_agent_scope, listAgentEntries, resolveDefaultAgentId } from "../../../agent/agent-scope.js";
-import { ContextPlanningConfigSchema, KnowledgeMemoryConfigSchema, UserModelConfigSchema, init_config } from "../../../user-context/config.js";
 import { resolveModelsJsonPath } from "../../../config/paths.js";
+import { ContextPlanningConfigSchema, KnowledgeMemoryConfigSchema, UserModelConfigSchema, init_config } from "../../../user-context/config.js";
 import { init_models_json, loadModelsJson } from "../../../config/models-json.js";
 import { CredentialResolver, init_credentials } from "../../../auth/credentials.js";
 import { getProviderRegistry, init_plugin_registry } from "../../../providers/plugin-registry.js";

package/dist/src/gateway/hono/routes/agent-plugins.js

@@ -1,13 +1,13 @@
-import { getWorkspacePath } from "../../../config/workspace-path-helpers.js";
 import { PluginSelectionRequired } from "../../../extensions/agent-plugins/source-catalog.js";
 import { AgentPluginStore } from "../../../extensions/agent-plugins/store.js";
+import { getWorkspacePath } from "../../../config/workspace-path-helpers.js";
 import { savePluginAuthBinding } from "../../../extensions/agent-plugins/auth.js";
 import { evictAllEmbeddedSessionRunners } from "../../../agent/embedded/session-runner.js";
+import { cancelPluginCliAuthorizations } from "../../../extensions/agent-plugins/cli-authorization.js";
+import { PluginSetupService, setupActionSchema } from "../../../extensions/agent-plugins/setup.js";
 import { agentPluginInventoryRow } from "../../../extensions/agent-plugins/inventory.js";
 import { withAgentPluginSource } from "../../../extensions/agent-plugins/sources.js";
 import { getGatewayPrincipal } from "../../security/gateway-principal.js";
-import { cancelPluginCliAuthorizations } from "../../../extensions/agent-plugins/cli-authorization.js";
-import { PluginSetupService, setupActionSchema } from "../../../extensions/agent-plugins/setup.js";
 import { removePluginCredentials } from "../../../extensions/agent-plugins/credentials.js";
 import { z } from "zod";
 //#region src/gateway/hono/routes/agent-plugins.ts

package/dist/src/gateway/hono/routes/agents.js

@@ -1,6 +1,6 @@
+import { normalizeAgentId } from "../../../agent-catalog/id.js";
 import { AgentEntrySchema, AgentModelsOverrideSchema, AgentProfileSchema, RuntimePolicySchema, SkillOverrideSchema, ToolPoliciesSchema, WorkflowPolicySchema } from "../../../agent-config/schema.js";
 import { init_agent_config } from "../../../agent-config/index.js";
-import { normalizeAgentId } from "../../../agent-catalog/id.js";
 import { init_agent_scope } from "../../../agent/agent-scope.js";
 import { createGatewayAgent, deleteAgentAvatarFile, deleteGatewayAgent, getGatewayAgentEffectiveConfig, listAgentProfileFiles, listGatewayAgents, readAgentAvatarFile, readAgentProfileFile, resolveAgentAvatarImage, updateGatewayAgent, writeAgentAvatarFromBase64, writeAgentProfileFile } from "../../agents-admin.js";
 import { getVoiceModelsConfig } from "../../../config/voice.js";

package/dist/src/gateway/hono/routes/config-patch/misc.js

@@ -1,10 +1,10 @@
 import { BindingsSchema, init_binding_schema } from "../../../../routing/binding-schema.js";
-import { AgentCatalogService } from "../../../../agent-catalog/service.js";
-import { ContextPlanningConfigSchema, HomeIntelligenceConfigSchema, KnowledgeMemoryConfigSchema, UserContextConfigSchema, UserModelConfigSchema, init_config } from "../../../../user-context/config.js";
-import { ComputerConfigSchema, init_config as init_config$1 } from "../../../../computer/config.js";
+import { ComputerConfigSchema, init_config } from "../../../../computer/config.js";
+import { ContextPlanningConfigSchema, HomeIntelligenceConfigSchema, KnowledgeMemoryConfigSchema, UserContextConfigSchema, UserModelConfigSchema, init_config as init_config$1 } from "../../../../user-context/config.js";
 import { BrowserConfigSchema, McpConfigSchema, VoiceConfigSchema, init_schema } from "../../../../config/schema.js";
 import { CredentialResolver, init_credentials } from "../../../../auth/credentials.js";
 import { canonicalizeConfiguredMcpServer } from "../../../../config/mcp-config-normalize.js";
+import { AgentCatalogService } from "../../../../agent-catalog/service.js";
 import { mergeGatewaySkillsMarketplacePatch, mergeSessionConfigPatch, mergeUpdateConfigPatch } from "../../../../config/web-patch.js";
 import { assertGatewayAuthConfigured, resolveGatewayAuth } from "../../../auth.js";
 import { isMaskedSecretPatchValue } from "../../lib/mask-secret-length.js";
@@ -14,11 +14,11 @@ import { assertGatewayRuntimeConfig } from "../../../runtime-config.js";
 import { mergeRealtimeVoiceConfigPatch, mergeSttConfigPatch, mergeTtsConfigPatch } from "../../lib/safe-voice-config.js";
 import { PATCH_OK, patchError } from "./result.js";
 //#region src/gateway/hono/routes/config-patch/misc.ts
-init_config$1();
+init_config();
 init_schema();
 init_binding_schema();
 init_credentials();
-init_config();
+init_config$1();
 async function applyMiscPatch(config, body) {
 	if (body.update !== void 0 && typeof body.update === "object" && body.update !== null) {
 		const updateResult = mergeUpdateConfigPatch(config, body.update);

package/dist/src/gateway/hono/routes/connectors.js

@@ -21,13 +21,13 @@ import { createConnectorSetupSecretRequest, submitConnectorSetupSecret } from ".
 import { recordConnectorHealthUsage } from "../../../connectors/usage.js";
 import { getConnectorInstance, getInstalledConnectorDefinition, listConnectorInstances } from "../../../connectors/instances.js";
 import { installConnector, installConnectorDefinition, uninstallConnector, updateConnectorConfig } from "../../../connectors/install.js";
-import { ConfigPersistenceError, persistConfigMutation } from "../../../config/config-mutation.js";
 import { resumeApprovedConnectorAction } from "../../../connectors/approval-resume.js";
 import { startConnectorAuthorization } from "../../../connectors/auth-provider-registry.js";
 import { composioLogoResponse } from "../../../connectors/composio-logo.js";
 import { inspectManagedComposioStatus } from "../../../connectors/composio-managed-client.js";
 import { appendComposioTriggerEvent, listComposioTriggerEvents } from "../../../connectors/composio-triggers.js";
 import { ingestLocalFolderSource } from "../../../connectors/connected-source-ingestion.js";
+import { ConfigPersistenceError, persistConfigMutation } from "../../../config/config-mutation.js";
 import { testConnectorInstance } from "../../../connectors/health.js";
 import { setConnectorEnabled } from "../../../connectors/lifecycle.js";
 import { projectComposioConnectionStatus } from "../../../connectors/runtime-status.js";

package/dist/src/gateway/hono/routes/mcp.js

@@ -1,10 +1,10 @@
 import { getWorkspacePath } from "../../../config/workspace-path-helpers.js";
 import { isManagedConnectorServer } from "../../../connectors/materialize.js";
 import { loadMergedMcpConfig } from "../../../agent/mcp/config.js";
-import { getGatewayPrincipal } from "../../security/gateway-principal.js";
 import { resolveMcpSetupConfig } from "../../../agent/mcp/effective-server.js";
 import { discoverMcpTools } from "../../../agent/mcp/tool-catalog.js";
 import { cancelMcpAuthorization, getMcpAuthorization, probeMcpConnection, startMcpAuthorization, submitMcpRedirect } from "../../../agent/mcp/connection-setup.js";
+import { getGatewayPrincipal } from "../../security/gateway-principal.js";
 import { McpConnectionDrafts, McpDraftError, mcpConfigRevision } from "../../../agent/mcp/connection-drafts.js";
 import { withGatewayConfigWriteLock } from "../lib/config-write-lock.js";
 //#region src/gateway/hono/routes/mcp.ts

package/dist/src/gateway/hono/routes/memory-learning.js

@@ -2,10 +2,10 @@ import { getSqliteDatabase, init_transaction } from "../../../storage/sqlite/tra
 import { getSessionMetadata } from "../../../storage/sqlite/session-read-repository.js";
 import { init_session_repository } from "../../../storage/sqlite/session-repository.js";
 import { getSessionConfig, init_config_repository } from "../../../storage/sqlite/config-repository.js";
+import { init_config, resolveKnowledgeReadPolicy } from "../../../user-context/config.js";
 import { bindOwnerIdentity } from "../../../user-context/identity-bindings.js";
 import { canUseKnowledge, knowledgeExclusion } from "../../../knowledge-memory/usage-policy.js";
 import { getKnowledgeItem } from "../../../knowledge-memory/repository.js";
-import { init_config, resolveKnowledgeReadPolicy } from "../../../user-context/config.js";
 import { enqueueConversationLearning, learningStatus } from "../../../memory-learning/repository.js";
 import "../../../knowledge-memory/index.js";
 import { resolveEffectiveAgentProfileForSession } from "../../../config/agent-profile.js";

package/dist/src/gateway/hono/routes/models.js

@@ -1,8 +1,8 @@
+import { resolveModelsJsonPath } from "../../../config/paths.js";
 import { getProviderSetupProfile, init_profiles } from "../../../providers/setup/profiles.js";
 import { init_model_usage, withModelUsageOrigin } from "../../../providers/model-usage.js";
 import { resolveEffectiveAgentConfigForAgent } from "../../../config/agent-profile.js";
 import { init_resolve_config_value, testApiKeyResolution } from "../../../config/resolve-config-value.js";
-import { resolveModelsJsonPath } from "../../../config/paths.js";
 import "../../../providers/constants.js";
 import { computerModelProfile, init_model_policy, isDedicatedComputerModel } from "../../../computer/model-policy.js";
 import { init_models_json, loadModelsJson, saveModelsJson, validateModelsConfig } from "../../../config/models-json.js";

package/dist/src/gateway/hono/routes/notes.js

@@ -1,9 +1,9 @@
 import { NoteDeleteOutputSchema, NoteGetOutputSchema, ProductReadContracts } from "../../../../packages/gateway-contract/src/capabilities.js";
 import { init_src } from "../../../../packages/gateway-contract/src/index.js";
-import { CapabilityError } from "../../../capabilities/runtime/errors.js";
-import "../../../capabilities/runtime/dispatcher.js";
 import { init_session_key, resolveConversationId } from "../../../routing/session-key.js";
 import { agentExists, getDefaultAgentId, init_resolve_route } from "../../../routing/resolve-route.js";
+import { CapabilityError } from "../../../capabilities/runtime/errors.js";
+import "../../../capabilities/runtime/dispatcher.js";
 import { resolveGatewayEffectiveHost } from "../../../config/gateway-bind.js";
 import { getShareStore } from "../../../share/share-store.js";
 import { resolveShareUrl } from "../../../share/share-url.js";

package/dist/src/gateway/hono/routes/projects.js

@@ -7,12 +7,12 @@ import { loadTranscriptRowsForSession } from "../../../storage/sqlite/transcript
 import { init_sqlite } from "../../../storage/sqlite/index.js";
 import { ActivityService } from "../../../activity/service.js";
 import "../../../activity/index.js";
-import { CapabilityError } from "../../../capabilities/runtime/errors.js";
-import "../../../capabilities/runtime/dispatcher.js";
 import { listKnowledgeItems, writeKnowledgeItem } from "../../../knowledge-memory/repository.js";
 import "../../../knowledge-memory/index.js";
 import { resolveEffectiveAgentProfile } from "../../../config/agent-profile.js";
 import { TaskReadModelProjector } from "../../../tasks/task-read-model-projector.js";
+import { CapabilityError } from "../../../capabilities/runtime/errors.js";
+import "../../../capabilities/runtime/dispatcher.js";
 import { ProjectWorkspaceConflictError, ProjectWorkspaceMissingError } from "../../../projects/workspace-project.js";
 import { inferProjectExecutionMode, inferProjectKind } from "../../../projects/project-kind.js";
 import { ProjectDeletionBlockedError, ProjectWorkspaceInUseError } from "../../../projects/project-service.js";

package/dist/src/gateway/hono/routes/session-input-handler.js

@@ -5,9 +5,9 @@ import { endpointContextSchema } from "../../../../packages/gateway-contract/src
 import { parseUserTurnDocument, userTurnDocumentRefIds } from "../../../../packages/gateway-contract/src/user-turn-document.js";
 import { init_src } from "../../../../packages/gateway-contract/src/index.js";
 import { endpointTurnClaimSchema, init_src as init_src$1 } from "../../../../packages/endpoint-tools-protocol/src/index.js";
+import { init_providers, resolveModel } from "../../../providers/index.js";
 import { CapabilityError } from "../../../capabilities/runtime/errors.js";
 import "../../../capabilities/runtime/dispatcher.js";
-import { init_providers, resolveModel } from "../../../providers/index.js";
 import { getModelThinking } from "../../../providers/model-thinking.js";
 import { parseTurnContextRefs } from "../../../agent/source-context/types.js";
 import { validateWebchatAttachments, validateWebchatContent } from "../../chat-limits.js";

package/dist/src/gateway/hono/routes/tasks.js

@@ -6,9 +6,9 @@ import { hasGatewayScope, init_gateway_scopes } from "../../security/gateway-sco
 import { enqueueTaskChangedEvent, init_task_change_events } from "../../../tasks/task-change-events.js";
 import { TaskRepository, init_task_repository } from "../../../tasks/task-repository.js";
 import { TaskRunRepository, init_task_run_repository } from "../../../tasks/task-run-repository.js";
+import { TaskConversationRepository } from "../../../tasks/task-conversation-repository.js";
 import { CapabilityError } from "../../../capabilities/runtime/errors.js";
 import "../../../capabilities/runtime/dispatcher.js";
-import { TaskConversationRepository } from "../../../tasks/task-conversation-repository.js";
 import { TaskCollaborationRepository } from "../../../tasks/task-collaboration-repository.js";
 import { TaskCriterionReviewRepository } from "../../../tasks/task-criterion-review-repository.js";
 import { TaskContextMutationOutputSchema } from "../../../tasks/capabilities/relations.js";

package/dist/src/gateway/image-generation-setup.js

@@ -1,11 +1,11 @@
 import { normalizeAgentId } from "../agent-catalog/id.js";
 import { AgentCatalogRepository, init_repository } from "../agent-catalog/repository.js";
 import { init_agent_scope } from "../agent/agent-scope.js";
-import { AgentCatalogService } from "../agent-catalog/service.js";
-import { resolveEffectiveAgentConfigForAgent } from "../config/agent-profile.js";
 import { ConfigSchema, init_schema } from "../config/schema.js";
+import { resolveEffectiveAgentConfigForAgent } from "../config/agent-profile.js";
 import { fetchWithTimeoutGuarded } from "../media-shared/http/provider-http.js";
 import "../media-shared/http/index.js";
+import { AgentCatalogService } from "../agent-catalog/service.js";
 import { getImageGenerationProvider, listImageGenerationProvidersSummary } from "../agent/image/generation/provider-registry.js";
 //#region src/gateway/image-generation-setup.ts
 init_repository();