@xopcai/xopc 0.0.401 → 0.0.402

package/dist/src/connectors/connected-source-ingestion.js

@@ -2,10 +2,10 @@ import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
 import { getConnectorInstallation, listConnectorConnections } from "../storage/sqlite/connector-repository.js";
 import { init_sqlite } from "../storage/sqlite/index.js";
-import { getWorkspacePath } from "../config/workspace-path-helpers.js";
 import { getActiveUnderstandingConsent, grantUnderstandingConsent } from "../user-context/sources/consent-repository.js";
 import { listUnderstandingSourceGrants, upsertUnderstandingSourceGrant } from "../user-context/sources/repository.js";
 import { ConnectedKnowledgePipeline } from "../knowledge/connected-knowledge-pipeline.js";
+import { getWorkspacePath } from "../config/workspace-path-helpers.js";
 import { canAccessConnectorAccount, currentAccountConnections } from "./account-access.js";
 import { ComposioSessionsAdapter } from "./composio-sessions.js";
 import { decodeConnectedSourceCursor, encodeConnectedSourceCursor } from "./connected-source-cursor.js";

package/dist/src/connectors/content-enrichment.js

@@ -4,8 +4,8 @@ import { init_sqlite } from "../storage/sqlite/index.js";
 import { ConnectedKnowledgePipeline } from "../knowledge/connected-knowledge-pipeline.js";
 import { ComposioSessionsAdapter } from "./composio-sessions.js";
 import { sanitizeConnectedSourceValue } from "./connected-source-sanitization.js";
-import { isAbsolute, join, relative, sep } from "node:path";
 import { tmpdir } from "node:os";
+import { isAbsolute, join, relative, sep } from "node:path";
 import { createHash } from "node:crypto";
 import { mkdtemp, readFile, realpath, rm } from "node:fs/promises";
 //#region src/connectors/content-enrichment.ts

package/dist/src/connectors/endpoint-policy.d.ts

@@ -0,0 +1,7 @@
+export type ConnectorEndpointPolicy = {
+    domains: string[];
+    pathPrefixes?: string[];
+    encodeValue?: boolean;
+};
+export declare function validEndpointDomain(domain: string): boolean;
+export declare function assertConnectorEndpoint(value: string, policy: ConnectorEndpointPolicy): string;

package/dist/src/connectors/endpoint-policy.js

@@ -0,0 +1,14 @@
+import { isIP } from "node:net";
+//#region src/connectors/endpoint-policy.ts
+function validEndpointDomain(domain) {
+	return /^(?:\*\.)?(?:[a-z0-9](?:[a-z0-9-]*[a-z0-9])?\.)+[a-z]{2,}$/i.test(domain) && !domain.endsWith(".localhost") && !domain.endsWith(".local");
+}
+function assertConnectorEndpoint(value, policy) {
+	const url = new URL(value);
+	const host = url.hostname.toLowerCase();
+	if (url.protocol !== "https:" || url.username || url.password || url.hash || isIP(host) || !policy.domains.length || policy.domains.some((domain) => !validEndpointDomain(domain)) || !policy.domains.some((domain) => domain.startsWith("*.") ? host.endsWith(domain.slice(1)) && host !== domain.slice(2) : host === domain.toLowerCase())) throw new Error("Connector endpoint must use HTTPS on a declared provider domain.");
+	if (policy.pathPrefixes?.length && !policy.pathPrefixes.some((prefix) => url.pathname === prefix || url.pathname.startsWith(`${prefix.replace(/\/$/, "")}/`))) throw new Error("Connector endpoint is outside the declared MCP path.");
+	return value;
+}
+//#endregion
+export { assertConnectorEndpoint, validEndpointDomain };

package/dist/src/connectors/materialize.js

@@ -1,5 +1,6 @@
 import { McpServerSchema, init_schema } from "../config/schema.js";
-import { createConnectorSecretReference } from "./secret-store.js";
+import { assertConnectorEndpoint } from "./endpoint-policy.js";
+import { createConnectorSecretReference, isConnectorSecretReference } from "./secret-store.js";
 //#region src/connectors/materialize.ts
 init_schema();
 const SERVER_ID_PATTERN = /^[a-z][a-z0-9_-]{0,63}$/;
@@ -62,6 +63,20 @@ function materializeConnectorMcpServer(definition, input) {
 	assertValidConnectorServerId(serverId);
 	const rawServer = materializeTemplate(definition.runtime.serverTemplate, definition, input);
 	if (!rawServer || typeof rawServer !== "object" || Array.isArray(rawServer)) throw new Error("Connector MCP server template must resolve to a JSON object.");
+	const remote = rawServer;
+	if (isConnectorSecretReference(remote.url)) {
+		const templateUrl = definition.runtime.serverTemplate.url;
+		if (typeof templateUrl !== "string") throw new Error("Connector endpoint template is missing.");
+		const embedded = !TEMPLATE_PATTERN.test(templateUrl);
+		const policy = definition.runtime.endpointPolicy ?? { domains: [new URL(templateUrl.replace(EMBEDDED_SECRET_PATTERN, "credential")).hostname] };
+		remote.url.xopcSecretRef.urlPolicy = {
+			...policy,
+			...embedded ? { encodeValue: true } : {}
+		};
+		const key = remote.url.xopcSecretRef.fieldKey;
+		const rawInput = input.secrets?.[key];
+		if (typeof rawInput === "string" && !rawInput.startsWith("secret://")) assertConnectorEndpoint(`${remote.url.xopcSecretRef.prefix ?? ""}${embedded ? encodeURIComponent(rawInput) : rawInput}${remote.url.xopcSecretRef.suffix ?? ""}`, policy);
+	}
 	const marker = {
 		managed: true,
 		connectorId: definition.id,

package/dist/src/connectors/secret-store.js

@@ -1,5 +1,6 @@
 import { CredentialResolver, init_credentials } from "../auth/credentials.js";
 import { consumeConnectorSetupSecretRef } from "./setup-secrets.js";
+import { assertConnectorEndpoint } from "./endpoint-policy.js";
 //#region src/connectors/secret-store.ts
 init_credentials();
 function normalizeSecretSegment(value) {
@@ -32,7 +33,9 @@ async function saveConnectorSecrets(definition, input, resolver = new Credential
 async function resolveSecretReference(reference, resolver) {
 	const value = await resolver.resolveApiKey(reference.xopcSecretRef.provider);
 	if (!value) return void 0;
-	return `${reference.xopcSecretRef.prefix ?? ""}${value}${reference.xopcSecretRef.suffix ?? ""}`;
+	const policy = reference.xopcSecretRef.urlPolicy;
+	const resolved = `${reference.xopcSecretRef.prefix ?? ""}${policy?.encodeValue ? encodeURIComponent(value) : value}${reference.xopcSecretRef.suffix ?? ""}`;
+	return policy ? assertConnectorEndpoint(resolved, policy) : resolved;
 }
 async function resolveConnectorSecretReferences(value, resolver = new CredentialResolver()) {
 	if (isConnectorSecretReference(value)) return resolveSecretReference(value, resolver);

package/dist/src/connectors/types.d.ts

@@ -43,6 +43,7 @@ export type ConnectorSecretReference = {
         fieldKey: string;
         prefix?: string;
         suffix?: string;
+        urlPolicy?: import('./endpoint-policy.js').ConnectorEndpointPolicy;
     };
 };
 export type ConnectorSecretField = {
@@ -74,6 +75,7 @@ export type ConnectorRuntimeDefinition = {
     type: 'mcp';
     serverId: string;
     serverTemplate: Record<string, unknown>;
+    endpointPolicy?: import('./endpoint-policy.js').ConnectorEndpointPolicy;
     localPackage?: {
         registry: 'npm';
         name: string;

package/dist/src/daemon/constants.js

@@ -1,6 +1,6 @@
 import { __esmMin } from "../../_virtual/_rolldown/runtime.js";
-import path from "node:path";
 import os from "node:os";
+import path from "node:path";
 //#region src/daemon/constants.ts
 /**
 * Daemon Constants - Service labels, paths, and configuration values

package/dist/src/daemon/install-plan.js

@@ -2,8 +2,8 @@ import { PACKAGE_VERSION, init_package_version } from "../package-version.js";
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
 import { SERVICE_VERSION_ENV_KEY, formatGatewayServiceDescription, init_constants } from "./constants.js";
-import path from "node:path";
 import { homedir } from "node:os";
+import path from "node:path";
 import { existsSync } from "node:fs";
 import { fileURLToPath } from "node:url";
 //#region src/daemon/install-plan.ts

package/dist/src/daemon/launchd.js

@@ -1,8 +1,8 @@
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
 import { init_constants, resolveGatewayLaunchAgentLabel, resolveLaunchAgentPlistPath as resolveLaunchAgentPlistPath$1 } from "./constants.js";
-import path from "node:path";
 import os from "node:os";
+import path from "node:path";
 import { existsSync } from "node:fs";
 import { spawn, spawnSync } from "node:child_process";
 import { mkdir, readFile, rm, writeFile } from "node:fs/promises";

package/dist/src/daemon/schtasks.js

@@ -1,8 +1,8 @@
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
 import { init_constants, resolveGatewayWindowsTaskName } from "./constants.js";
-import path from "node:path";
 import os from "node:os";
+import path from "node:path";
 import { mkdirSync, readFileSync, rmSync, writeFileSync } from "node:fs";
 import { spawn, spawnSync } from "node:child_process";
 //#region src/daemon/schtasks.ts

package/dist/src/daemon/systemd.js

@@ -1,8 +1,8 @@
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
 import { init_constants, resolveGatewaySystemdServiceName, resolveSystemdUnitPath } from "./constants.js";
-import path from "node:path";
 import os from "node:os";
+import path from "node:path";
 import { existsSync } from "node:fs";
 import { spawn, spawnSync } from "node:child_process";
 import { access, constants as constants$1, mkdir, readFile, rm, writeFile } from "node:fs/promises";

package/dist/src/discussions/action-tasks.js

@@ -1,6 +1,6 @@
+import { getSqliteDatabase, init_transaction, runSqliteWriteTransaction } from "../storage/sqlite/transaction.js";
 import { TaskCreateRequestSchema } from "../../packages/gateway-contract/src/tasks.js";
 import { init_src } from "../../packages/gateway-contract/src/index.js";
-import { getSqliteDatabase, init_transaction, runSqliteWriteTransaction } from "../storage/sqlite/transaction.js";
 import { TaskRepository, init_task_repository } from "../tasks/task-repository.js";
 import { TaskApplicationService } from "../tasks/task-application-service.js";
 import { DiscussionServiceError } from "./errors.js";

package/dist/src/discussions/live-worker.js

@@ -1,9 +1,9 @@
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
-import { init_model_usage, withModelUsageOrigin } from "../providers/model-usage.js";
-import { isSTTAvailable } from "../voice/stt/availability.js";
 import { ObjectLinkService } from "../activity/service.js";
+import { init_model_usage, withModelUsageOrigin } from "../providers/model-usage.js";
 import { transcribe } from "../voice/stt/transcribe-core.js";
+import { isSTTAvailable } from "../voice/stt/availability.js";
 import { mergeSttConfigFromAppConfig } from "../voice/stt/config.js";
 import "../voice/stt/index.js";
 import { claimNextDiscussionTranscriptSegment, completeDiscussionTranscriptSegment, getDiscussionCapture, listDiscussionTranscriptSegments, retryOrFailDiscussionTranscriptSegment, updateDiscussionCapture } from "./repository.js";

package/dist/src/discussions/recording.js

@@ -1,6 +1,6 @@
+import { getSqliteDatabase, init_transaction, runSqliteWriteTransaction } from "../storage/sqlite/transaction.js";
 import { DISCUSSION_MAX_SAVED_DURATION_MS } from "../../packages/gateway-contract/src/discussions.js";
 import { init_src } from "../../packages/gateway-contract/src/index.js";
-import { getSqliteDatabase, init_transaction, runSqliteWriteTransaction } from "../storage/sqlite/transaction.js";
 import { resolveNoteMediaDir } from "../notes/paths.js";
 import { DiscussionServiceError } from "./errors.js";
 import { getDiscussionCapture, updateDiscussionCapture } from "./repository.js";

package/dist/src/discussions/repository.js

@@ -1,5 +1,5 @@
-import { DISCUSSION_STATUSES } from "../../packages/gateway-contract/src/discussions.js";
 import { getSqliteDatabase, init_transaction, runSqliteWriteTransaction } from "../storage/sqlite/transaction.js";
+import { DISCUSSION_STATUSES } from "../../packages/gateway-contract/src/discussions.js";
 import { randomUUID } from "node:crypto";
 //#region src/discussions/repository.ts
 init_transaction();

package/dist/src/discussions/sealer.js

@@ -1,11 +1,11 @@
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
+import { init_transaction, runSqliteWriteTransaction } from "../storage/sqlite/transaction.js";
 import { DISCUSSION_MAX_SAVED_DURATION_MS } from "../../packages/gateway-contract/src/discussions.js";
 import { init_src } from "../../packages/gateway-contract/src/index.js";
-import { init_transaction, runSqliteWriteTransaction } from "../storage/sqlite/transaction.js";
 import { init_model_usage, withModelUsageOrigin } from "../providers/model-usage.js";
-import { isSTTAvailable } from "../voice/stt/availability.js";
 import { transcribe } from "../voice/stt/transcribe-core.js";
+import { isSTTAvailable } from "../voice/stt/availability.js";
 import { mergeSttConfigFromAppConfig } from "../voice/stt/config.js";
 import "../voice/stt/index.js";
 import { listDiscussionTranscriptSegments, updateDiscussionCapture } from "./repository.js";

package/dist/src/discussions/service.js

@@ -1,8 +1,8 @@
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
+import { init_transaction, runSqliteWriteTransaction } from "../storage/sqlite/transaction.js";
 import { DISCUSSION_AUDIO_MAX_BYTES, DISCUSSION_MAX_DURATION_MS, DISCUSSION_SEGMENT_MAX_BYTES } from "../../packages/gateway-contract/src/discussions.js";
 import { init_src } from "../../packages/gateway-contract/src/index.js";
-import { init_transaction, runSqliteWriteTransaction } from "../storage/sqlite/transaction.js";
 import { ObjectLinkService } from "../activity/service.js";
 import { DiscussionServiceError } from "./errors.js";
 import { acknowledgeDiscussionCaptureConsent, correctDiscussionTranscriptSegment, createDiscussionCapture, createDiscussionTranscriptSegment, deleteDiscussionSegmentAudio, getDiscussionCapture, getDiscussionCaptureByClientRequestId, getDiscussionCaptureByNoteId, getDiscussionCaptureSettings, getDiscussionMetrics, getDiscussionTranscriptSegment, getLatestDiscussionOrganization, listDiscussionCaptures, listDiscussionTranscriptSegments, updateDiscussionCapture } from "./repository.js";

package/dist/src/execution-environments/local-worktree-manager.js

@@ -8,8 +8,8 @@ import { assertManagedWorktreePath, assertNoNestedRegisteredWorktrees, readDirec
 import { dirname, resolve } from "node:path";
 import { existsSync } from "node:fs";
 import { randomUUID } from "node:crypto";
-import { mkdir, rm, stat } from "node:fs/promises";
 import lockfile from "proper-lockfile";
+import { mkdir, rm, stat } from "node:fs/promises";
 //#region src/execution-environments/local-worktree-manager.ts
 init_logger();
 const log = createLogger("ExecutionEnvironment:LocalWorktree");

package/dist/src/execution-environments/worktree-safety.js

@@ -1,7 +1,7 @@
 import { listGitWorktrees } from "./git.js";
 import { resolveExecutionWorktreesRoot } from "./paths.js";
-import { isAbsolute, relative, resolve, sep } from "node:path";
 import { homedir } from "node:os";
+import { isAbsolute, relative, resolve, sep } from "node:path";
 import { lstat } from "node:fs/promises";
 //#region src/execution-environments/worktree-safety.ts
 function isInside(parent, candidate) {

package/dist/src/extensions/activation-context.js

@@ -1,7 +1,7 @@
-import { PROVIDER_ENV_MAP, init_env_keys } from "../providers/env-keys.js";
-import { collectSttProviderConfigEntries } from "../voice/stt/config-slice.js";
 import { getAgentDefaultModelRef, init_schema } from "../config/schema.js";
+import { PROVIDER_ENV_MAP, init_env_keys } from "../providers/env-keys.js";
 import { init_providers, isProviderConfiguredSync } from "../providers/index.js";
+import { collectSttProviderConfigEntries } from "../voice/stt/config-slice.js";
 import { mergeSttConfigFromAppConfig } from "../voice/stt/config.js";
 import "../voice/stt/index.js";
 import { collectTtsProviderConfigEntries } from "../voice/tts/config-slice.js";

package/dist/src/extensions/agent-plugins/auth.js

@@ -1,7 +1,7 @@
 import { init_paths_state, resolveStateDir } from "../../config/paths-state.js";
 import { init_write_file_atomic, writeTextAtomic, writeTextAtomicSync } from "../../infra/write-file-atomic.js";
-import { CredentialResolver, init_credentials } from "../../auth/credentials.js";
 import { pluginName } from "./validation.js";
+import { CredentialResolver, init_credentials } from "../../auth/credentials.js";
 import { isDangerousHostEnvVarName } from "../../infra/host-env-security.js";
 import { join } from "node:path";
 import { existsSync, readFileSync } from "node:fs";

package/dist/src/extensions/agent-plugins/cli-authorization.js

@@ -1,10 +1,10 @@
-import { CredentialResolver, init_credentials } from "../../auth/credentials.js";
 import { parsePluginAuthorizationCheck, pluginAuthorizations, safeAuthorizationUrl } from "./setup-contract.js";
 import { containedPath, expandPluginVariables, resolvePluginCwd, validatePluginServer } from "./validation.js";
 import { spawnProcess } from "../../process/run-process.js";
+import { CredentialResolver, init_credentials } from "../../auth/credentials.js";
 import { expandUserConfig, readPluginUserConfig } from "./user-config.js";
-import { join, resolve } from "node:path";
 import { homedir } from "node:os";
+import { join, resolve } from "node:path";
 import { mkdirSync, readFileSync } from "node:fs";
 import { randomUUID } from "node:crypto";
 //#region src/extensions/agent-plugins/cli-authorization.ts

package/dist/src/extensions/agent-plugins/credentials.js

@@ -1,6 +1,6 @@
 import { init_paths_state, resolveStateDir } from "../../config/paths-state.js";
-import { CredentialResolver, init_credentials } from "../../auth/credentials.js";
 import { pluginName, pluginServerId } from "./validation.js";
+import { CredentialResolver, init_credentials } from "../../auth/credentials.js";
 import { createNativeMcpCredentials } from "../../agent/mcp/credential-store.js";
 import { pluginCredentialProviderPrefix } from "./auth.js";
 import { pluginOAuthCredentialId } from "./mcp-adapter.js";

package/dist/src/extensions/agent-plugins/mcp-adapter.js

@@ -3,8 +3,8 @@ import { containedPath, expandPluginVariables, pluginServerId, resolvePluginCwd
 import { AgentPluginStore } from "./store.js";
 import { applyPluginAuthBinding, readPluginAuthBinding } from "./auth.js";
 import { expandUserConfig, readPluginUserConfig } from "./user-config.js";
-import { join, resolve } from "node:path";
 import { homedir } from "node:os";
+import { join, resolve } from "node:path";
 import { mkdirSync } from "node:fs";
 import { createHash } from "node:crypto";
 //#region src/extensions/agent-plugins/mcp-adapter.ts

package/dist/src/extensions/agent-plugins/setup.js

@@ -207,7 +207,7 @@ var PluginSetupService = class {
 		for (const [name, target] of Object.entries(plugin.servers)) {
 			result[name] = [];
 			for (const [sourceId, source] of Object.entries(config.mcp?.servers ?? {})) {
-				if (!matchingReusableConnection(target, source) || !source.url || !source.xopcOAuthCredentialId) continue;
+				if (!matchingReusableConnection(target, source) || typeof source.url !== "string" || !source.xopcOAuthCredentialId) continue;
 				if (await credentials.tokens(source.xopcOAuthCredentialId, source.url)) result[name].push({
 					id: sourceId,
 					name: source.displayName ?? sourceId

package/dist/src/extensions/agent-plugins/skill-catalog.js

@@ -1,6 +1,6 @@
-import { parseFrontmatter } from "../../markdown/frontmatter.js";
 import { containedPath } from "./validation.js";
 import { AgentPluginStore } from "./store.js";
+import { parseFrontmatter } from "../../markdown/frontmatter.js";
 import { createSkillConfigManager } from "../../agent/skills/config.js";
 import { parseSkillLocalizations } from "../../agent/skills/parse-skill-metadata.js";
 import { buildSkillMarkdownPreviewFromRaw } from "../../agent/skills/skill-markdown-preview-from-raw.js";

package/dist/src/extensions/agent-plugins/source-catalog.js

@@ -1,8 +1,8 @@
 import { PLUGIN_MANIFEST_PATHS } from "./formats.js";
 import { containedPath } from "./validation.js";
 import { runExec } from "../../infra/exec.js";
-import { join, resolve } from "node:path";
 import { tmpdir } from "node:os";
+import { join, resolve } from "node:path";
 import { existsSync, mkdtempSync, readFileSync, realpathSync, rmSync, statSync } from "node:fs";
 import { createHash } from "node:crypto";
 //#region src/extensions/agent-plugins/source-catalog.ts

package/dist/src/extensions/agent-plugins/source-http-fetch.js

@@ -1,6 +1,6 @@
-import { Agent, fetch } from "undici";
 import { BlockList, isIP } from "node:net";
 import { lookup } from "node:dns";
+import { Agent, fetch } from "undici";
 //#region src/extensions/agent-plugins/source-http-fetch.ts
 const blocked = new BlockList();
 for (const [network, prefix] of [

package/dist/src/extensions/agent-plugins/sources.js

@@ -1,8 +1,8 @@
 import { createPluginSourceFetch } from "./source-http-fetch.js";
 import { PLUGIN_MANIFEST_PATHS } from "./formats.js";
 import { PluginSourceRedirect, isGitPluginSource, withCatalogSource } from "./source-catalog.js";
-import { join } from "node:path";
 import { tmpdir } from "node:os";
+import { join } from "node:path";
 import { mkdtempSync, rmSync, writeFileSync } from "node:fs";
 import AdmZip from "adm-zip";
 //#region src/extensions/agent-plugins/sources.ts

package/dist/src/extensions/agent-plugins/store.js

@@ -7,8 +7,8 @@ import { prunePluginResourceCache } from "./resources.js";
 import { PLUGIN_MANIFEST_PATHS } from "./formats.js";
 import { containedPath, inspectAgentPlugin, pluginName } from "./validation.js";
 import { pluginSourceKey } from "./source-catalog.js";
-import { dirname, join, resolve } from "node:path";
 import { tmpdir } from "node:os";
+import { dirname, join, resolve } from "node:path";
 import { cpSync, existsSync, lstatSync, mkdirSync, mkdtempSync, readFileSync, readdirSync, realpathSync, rmSync, statSync, writeFileSync } from "node:fs";
 import { createHash, randomUUID } from "node:crypto";
 import { z } from "zod";

package/dist/src/extensions/agent-plugins/user-config.js

@@ -1,7 +1,7 @@
 import { init_write_file_atomic, writeTextAtomicSync } from "../../infra/write-file-atomic.js";
-import { CredentialResolver, init_credentials } from "../../auth/credentials.js";
 import { pluginAuthorizations } from "./setup-contract.js";
 import { pluginName } from "./validation.js";
+import { CredentialResolver, init_credentials } from "../../auth/credentials.js";
 import { pluginCredentialProviderPrefix } from "./auth.js";
 import { join } from "node:path";
 import { existsSync, readFileSync } from "node:fs";

package/dist/src/extensions/agent-plugins/validation.js

@@ -4,12 +4,12 @@ import { normalizePluginMcpServer } from "./mcp-format.js";
 import { McpOAuthConfigSchema, init_schema } from "../../config/schema.js";
 import { pluginResources } from "./resources.js";
 import { collectPluginSkillFiles, readPluginLayout } from "./formats.js";
-import yaml from "js-yaml";
 import { dirname, isAbsolute, join, relative, resolve } from "node:path";
 import { existsSync, lstatSync, readFileSync, readdirSync, realpathSync, statSync } from "node:fs";
 import { createHash } from "node:crypto";
 import { z } from "zod";
 import { validateHeaderName, validateHeaderValue } from "node:http";
+import yaml from "js-yaml";
 //#region src/extensions/agent-plugins/validation.ts
 init_schema();
 const PLUGIN_SCHEMA = "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json";

package/dist/src/extensions/api.js

@@ -1,8 +1,8 @@
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
-import { registerMediaUnderstandingProvider } from "../media-understanding/registry.js";
 import { getProviderRegistry, init_plugin_registry } from "../providers/plugin-registry.js";
 import { registerMarketplaceAdapter, unregisterMarketplaceAdapter } from "../agent/skills/marketplace/registry.js";
+import { registerMediaUnderstandingProvider } from "../media-understanding/registry.js";
 import { registerSpeechProvider } from "../voice/tts/speech-registry.js";
 import { HOOK_EXECUTION_MODES } from "./types/hooks.js";
 import { commandRegistry } from "../chat-commands/registry.js";

package/dist/src/extensions/loader.js

@@ -19,9 +19,9 @@ import { EXTENSION_API_VERSION, EXTENSION_UI_API_VERSION, checkExtensionApiCompa
 import { DEFAULT_SECURITY_CONFIG, checkExtensionDirSafety, checkExtensionPathSafety, isExtensionAllowed, logSecurityIssue, provenanceTracker } from "./security.js";
 import { getSlotRegistry } from "./slots.js";
 import { getExtensionCache, getExtensionDiagnostics } from "./diagnostics.js";
+import { fileURLToPath, pathToFileURL } from "node:url";
 import { dirname, isAbsolute, join } from "path";
 import { existsSync, readFileSync } from "fs";
-import { fileURLToPath, pathToFileURL } from "node:url";
 import { createJiti } from "jiti";
 //#region src/extensions/loader.ts
 /**

package/dist/src/extensions/sdk/index.js

@@ -1,4 +1,3 @@
-import { defineChannelPluginEntry } from "./channel-entry.js";
 import { ProviderPluginRegistry, getProviderRegistry, init_plugin_registry } from "../../providers/plugin-registry.js";
 import { HOOK_EXECUTION_MODES } from "../types/hooks.js";
 import { TypedEventBus } from "../typed-event-bus.js";
@@ -8,6 +7,7 @@ import { DEFAULT_SECURITY_CONFIG, checkExtensionDirSafety, checkExtensionPathSaf
 import { SlotRegistry, getSlotRegistry, registerSlotType } from "../slots.js";
 import { ExtensionDiagnostics, ExtensionLoaderCacheImpl, getExtensionCache, getExtensionDiagnostics } from "../diagnostics.js";
 import { ExtensionHookRunner, createHookContext, isHookEvent } from "../hooks.js";
+import { defineChannelPluginEntry } from "./channel-entry.js";
 import { registerExtensionCliProgram } from "./channel-helpers.js";
 import { lazyFunction, lazyModule } from "./lazy.js";
 import { createMockExtensionApi, createTestGateway } from "./testing.js";

package/dist/src/gateway/file-path-classifier.js

@@ -4,8 +4,8 @@ import { init_paths, resolveConfigPath, resolveSkillsDir } from "../config/paths
 import { extractProfileAgentId } from "../config/agent-profile.js";
 import { isBareProfileMarkdownFileName, resolveProfileMarkdownPathIfBareName } from "../agent/tools/tool-paths.js";
 import { isPathUnderWorkspace } from "./workspace-editor-path.js";
-import { basename, isAbsolute, resolve } from "node:path";
 import { homedir } from "node:os";
+import { basename, isAbsolute, resolve } from "node:path";
 import { stat } from "node:fs/promises";
 //#region src/gateway/file-path-classifier.ts
 init_agent_scope();

package/dist/src/gateway/hono/lib/config-payload.js

@@ -2,9 +2,9 @@ import { normalizeAgentId } from "../../../agent-catalog/id.js";
 import { AgentCatalogRepository, init_repository } from "../../../agent-catalog/repository.js";
 import { init_agent_scope, listAgentEntries, resolveDefaultAgentId } from "../../../agent/agent-scope.js";
 import { resolveModelsJsonPath } from "../../../config/paths.js";
+import { ContextPlanningConfigSchema, KnowledgeMemoryConfigSchema, UserModelConfigSchema, init_config } from "../../../user-context/config.js";
 import { init_models_json, loadModelsJson } from "../../../config/models-json.js";
 import { CredentialResolver, init_credentials } from "../../../auth/credentials.js";
-import { ContextPlanningConfigSchema, KnowledgeMemoryConfigSchema, UserModelConfigSchema, init_config } from "../../../user-context/config.js";
 import { getProviderRegistry, init_plugin_registry } from "../../../providers/plugin-registry.js";
 import { getAllProviders, init_providers, isProviderConfigured } from "../../../providers/index.js";
 import { resolveShareConfig } from "../../../share/share-config.js";

package/dist/src/gateway/hono/lib/static-ui.js

@@ -1,7 +1,7 @@
 import { dirname, resolve } from "node:path";
 import { readFileSync } from "node:fs";
-import { createHash } from "node:crypto";
 import { fileURLToPath } from "node:url";
+import { createHash } from "node:crypto";
 //#region src/gateway/hono/lib/static-ui.ts
 const __dirname = dirname(fileURLToPath(import.meta.url));
 /**

package/dist/src/gateway/hono/routes/agent-plugins.js

@@ -1,6 +1,6 @@
-import { getWorkspacePath } from "../../../config/workspace-path-helpers.js";
 import { PluginSelectionRequired } from "../../../extensions/agent-plugins/source-catalog.js";
 import { AgentPluginStore } from "../../../extensions/agent-plugins/store.js";
+import { getWorkspacePath } from "../../../config/workspace-path-helpers.js";
 import { savePluginAuthBinding } from "../../../extensions/agent-plugins/auth.js";
 import { evictAllEmbeddedSessionRunners } from "../../../agent/embedded/session-runner.js";
 import { cancelPluginCliAuthorizations } from "../../../extensions/agent-plugins/cli-authorization.js";

package/dist/src/gateway/hono/routes/browser.js

@@ -1,6 +1,6 @@
+import { deleteBrowserTabBinding, getBrowserTabBinding, init_browser_tab_binding_repository, setBrowserTabBinding } from "../../../storage/sqlite/browser-tab-binding-repository.js";
 import { browserTabBindingRequestSchema } from "../../../../packages/gateway-contract/src/browser-tab-binding.js";
 import { init_src } from "../../../../packages/gateway-contract/src/index.js";
-import { deleteBrowserTabBinding, getBrowserTabBinding, init_browser_tab_binding_repository, setBrowserTabBinding } from "../../../storage/sqlite/browser-tab-binding-repository.js";
 import { init_loopback, isLoopbackClientIp } from "../../security/loopback.js";
 import { getDevice, init_device_access_repository } from "../../../storage/sqlite/device-access-repository.js";
 import "../../../../packages/browser-control-contract/src/index.js";

package/dist/src/gateway/hono/routes/channels.js

@@ -1,5 +1,5 @@
-import { approveChannelPairing, approveChannelPairingBySender, dismissChannelPairingPending, listChannelPairingState, listChannelPairingSummary, revokeChannelPairingPaired } from "../../../channels/pairing/pairing-service.js";
 import { buildChannelCatalogForConfig, buildChannelCatalogFromSnapshot, getChannelSetupStatus } from "../../../channels/catalog/channel-catalog-service.js";
+import { approveChannelPairing, approveChannelPairingBySender, dismissChannelPairingPending, listChannelPairingState, listChannelPairingSummary, revokeChannelPairingPaired } from "../../../channels/pairing/pairing-service.js";
 //#region src/gateway/hono/routes/channels.ts
 function channelIdParam(raw) {
 	return (raw ?? "").trim().toLowerCase();

package/dist/src/gateway/hono/routes/config-patch/misc.js

@@ -1,8 +1,8 @@
 import { BindingsSchema, init_binding_schema } from "../../../../routing/binding-schema.js";
-import { CredentialResolver, init_credentials } from "../../../../auth/credentials.js";
 import { ComputerConfigSchema, init_config } from "../../../../computer/config.js";
 import { ContextPlanningConfigSchema, HomeIntelligenceConfigSchema, KnowledgeMemoryConfigSchema, UserContextConfigSchema, UserModelConfigSchema, init_config as init_config$1 } from "../../../../user-context/config.js";
 import { BrowserConfigSchema, McpConfigSchema, VoiceConfigSchema, init_schema } from "../../../../config/schema.js";
+import { CredentialResolver, init_credentials } from "../../../../auth/credentials.js";
 import { canonicalizeConfiguredMcpServer } from "../../../../config/mcp-config-normalize.js";
 import { AgentCatalogService } from "../../../../agent-catalog/service.js";
 import { mergeGatewaySkillsMarketplacePatch, mergeSessionConfigPatch, mergeUpdateConfigPatch } from "../../../../config/web-patch.js";

package/dist/src/gateway/hono/routes/connectors.js

@@ -21,13 +21,13 @@ import { createConnectorSetupSecretRequest, submitConnectorSetupSecret } from ".
 import { recordConnectorHealthUsage } from "../../../connectors/usage.js";
 import { getConnectorInstance, getInstalledConnectorDefinition, listConnectorInstances } from "../../../connectors/instances.js";
 import { installConnector, installConnectorDefinition, uninstallConnector, updateConnectorConfig } from "../../../connectors/install.js";
-import { ConfigPersistenceError, persistConfigMutation } from "../../../config/config-mutation.js";
 import { resumeApprovedConnectorAction } from "../../../connectors/approval-resume.js";
 import { startConnectorAuthorization } from "../../../connectors/auth-provider-registry.js";
 import { composioLogoResponse } from "../../../connectors/composio-logo.js";
 import { inspectManagedComposioStatus } from "../../../connectors/composio-managed-client.js";
 import { appendComposioTriggerEvent, listComposioTriggerEvents } from "../../../connectors/composio-triggers.js";
 import { ingestLocalFolderSource } from "../../../connectors/connected-source-ingestion.js";
+import { ConfigPersistenceError, persistConfigMutation } from "../../../config/config-mutation.js";
 import { testConnectorInstance } from "../../../connectors/health.js";
 import { setConnectorEnabled } from "../../../connectors/lifecycle.js";
 import { projectComposioConnectionStatus } from "../../../connectors/runtime-status.js";

package/dist/src/gateway/hono/routes/discussions.js

@@ -7,8 +7,8 @@ import { exportDiscussion } from "../../../discussions/export.js";
 import "../../../discussions/index.js";
 import { getGatewayPrincipal } from "../../security/gateway-principal.js";
 import { createReadStream } from "node:fs";
-import { Readable } from "node:stream";
 import { stat } from "node:fs/promises";
+import { Readable } from "node:stream";
 //#region src/gateway/hono/routes/discussions.ts
 init_gateway_scopes();
 function errorResponse(error) {

package/dist/src/gateway/hono/routes/host-fs.js

@@ -1,6 +1,6 @@
 import { createGatewayRouteLogger } from "../lib/route-logger.js";
-import * as path$1 from "node:path";
 import * as os$1 from "node:os";
+import * as path$1 from "node:path";
 import { mkdir, readdir, realpath, stat } from "node:fs/promises";
 //#region src/gateway/hono/routes/host-fs.ts
 const log = createGatewayRouteLogger("HostFs");

package/dist/src/gateway/hono/routes/models.js

@@ -1,17 +1,17 @@
 import { resolveModelsJsonPath } from "../../../config/paths.js";
-import "../../../providers/constants.js";
-import { computerModelProfile, init_model_policy, isDedicatedComputerModel } from "../../../computer/model-policy.js";
-import { init_models_json, loadModelsJson, saveModelsJson, validateModelsConfig } from "../../../config/models-json.js";
-import { getModelCatalogStore, init_model_catalog_store } from "../../../providers/model-catalog-store.js";
 import { getProviderSetupProfile, init_profiles } from "../../../providers/setup/profiles.js";
 import { init_model_usage, withModelUsageOrigin } from "../../../providers/model-usage.js";
-import { CredentialResolver, init_credentials } from "../../../auth/credentials.js";
-import { XopcCloudAccountError, XopcCloudAccountService } from "../../../providers/xopc-cloud-account-service.js";
 import { resolveEffectiveAgentConfigForAgent } from "../../../config/agent-profile.js";
 import { init_resolve_config_value, testApiKeyResolution } from "../../../config/resolve-config-value.js";
+import "../../../providers/constants.js";
+import { computerModelProfile, init_model_policy, isDedicatedComputerModel } from "../../../computer/model-policy.js";
+import { init_models_json, loadModelsJson, saveModelsJson, validateModelsConfig } from "../../../config/models-json.js";
+import { getModelCatalogStore, init_model_catalog_store } from "../../../providers/model-catalog-store.js";
 import { getModelRegistry } from "../../../providers/model-registry.js";
+import { CredentialResolver, init_credentials } from "../../../auth/credentials.js";
 import { getProviderRegistry, init_plugin_registry } from "../../../providers/plugin-registry.js";
 import { PROVIDER_META, getAllModels, getAllProviders, getAvailableModels, getProviderAuthState, init_providers, isProviderConfigured, isProviderConfiguredSync } from "../../../providers/index.js";
+import { XopcCloudAccountError, XopcCloudAccountService } from "../../../providers/xopc-cloud-account-service.js";
 import { buildCapabilityPlansForConfig } from "../../../capabilities/readiness/from-config.js";
 import "../../../capabilities/readiness/index.js";
 import { getModelThinking } from "../../../providers/model-thinking.js";

package/dist/src/gateway/hono/routes/notes.js

@@ -14,8 +14,8 @@ import { capabilityHttpContext, capabilityHttpError } from "../../../capabilitie
 import { NoteShareService, NoteShareVersionConflictError } from "../../../share/note-share-service.js";
 import { createReadStream } from "node:fs";
 import { createHash, randomUUID } from "node:crypto";
-import { Readable } from "node:stream";
 import { access, stat } from "node:fs/promises";
+import { Readable } from "node:stream";
 import { stream } from "hono/streaming";
 //#region src/gateway/hono/routes/notes.ts
 init_src();

package/dist/src/gateway/hono/routes/observability.js

@@ -1,5 +1,5 @@
-import { CredentialResolver, init_credentials } from "../../../auth/credentials.js";
 import { TracingConfigSchema, init_config } from "../../../observability/config.js";
+import { CredentialResolver, init_credentials } from "../../../auth/credentials.js";
 import { configureTracing, localStore, testLangfuse, tracingConfig, tracingStatus } from "../../../observability/runtime.js";
 import { z } from "zod";
 import { Hono } from "hono";