@xopcai/xopc 0.0.409 → 0.0.411

package/dist/src/endpoint-tools/policy.js

@@ -10,10 +10,9 @@ import Ajv2020 from "ajv/dist/2020.js";
 init_src$1();
 init_src();
 var EndpointToolPolicyError = class extends Error {};
-function contract(policyId, outputSchema, resultKinds, permissions, legacyPolicyIds = [], inputSchema) {
+function contract(policyId, outputSchema, resultKinds, permissions, inputSchema) {
 	return {
 		policyId,
-		legacyPolicyIds,
 		inputSchema,
 		outputSchema,
 		resultKinds,
@@ -26,15 +25,15 @@ const POLICY_BY_TOOL = {
 		"desktop",
 		"web",
 		"browser"
-	].flatMap((kind) => [[`${kind}.device.get_state`, contract("public.background-read", DEVICE_STATE_OUTPUT_SCHEMA, ["json"], [], [], DEVICE_EMPTY_INPUT_SCHEMA)], [`${kind}.device.get_power`, contract("public.background-read", DEVICE_POWER_OUTPUT_SCHEMA, ["json"], [], [], DEVICE_EMPTY_INPUT_SCHEMA)]])),
+	].flatMap((kind) => [[`${kind}.device.get_state`, contract("public.background-read", DEVICE_STATE_OUTPUT_SCHEMA, ["json"], [], DEVICE_EMPTY_INPUT_SCHEMA)], [`${kind}.device.get_power`, contract("public.background-read", DEVICE_POWER_OUTPUT_SCHEMA, ["json"], [], DEVICE_EMPTY_INPUT_SCHEMA)]])),
 	...Object.fromEntries([
 		"mobile",
 		"desktop",
 		"web"
-	].map((kind) => [`${kind}.device.get_location`, contract("personal.foreground-read", LOCATION_OUTPUT_SCHEMA, ["json"], ["location-read-once"], [], LOCATION_INPUT_SCHEMA)])),
-	"desktop.bridge.list_resources": contract("public.background-read", BRIDGE_LIST_OUTPUT_SCHEMA, ["json"], [], [], DEVICE_EMPTY_INPUT_SCHEMA),
-	"desktop.bridge.read_sensor": contract("public.background-read", BRIDGE_READ_OUTPUT_SCHEMA, ["json"], [], [], BRIDGE_READ_INPUT_SCHEMA),
-	"desktop.computer.control": contract("computer.session-scoped", COMPUTER_OUTPUT_SCHEMA, ["json", "file"], ["computer-control"], [], COMPUTER_INPUT_SCHEMA),
+	].map((kind) => [`${kind}.device.get_location`, contract("personal.foreground-read", LOCATION_OUTPUT_SCHEMA, ["json"], ["location-read-once"], LOCATION_INPUT_SCHEMA)])),
+	"desktop.bridge.list_resources": contract("public.background-read", BRIDGE_LIST_OUTPUT_SCHEMA, ["json"], [], DEVICE_EMPTY_INPUT_SCHEMA),
+	"desktop.bridge.read_sensor": contract("public.background-read", BRIDGE_READ_OUTPUT_SCHEMA, ["json"], [], BRIDGE_READ_INPUT_SCHEMA),
+	"desktop.computer.control": contract("computer.session-scoped", COMPUTER_OUTPUT_SCHEMA, ["json", "file"], ["computer-control"], COMPUTER_INPUT_SCHEMA),
 	"web.file.pick": contract("personal.foreground-read", ENDPOINT_FILE_OUTPUT_SCHEMA, ["file"], ["file-read"]),
 	"web.file.download": contract("user.foreground-write", ENDPOINT_TEXT_OUTPUT_SCHEMA, ["text"], ["file-download"]),
 	"web.page.get_selection": contract("public.foreground-read", ENDPOINT_TEXT_OUTPUT_SCHEMA, ["text"], []),
@@ -46,21 +45,21 @@ const POLICY_BY_TOOL = {
 	"desktop.clipboard.read": contract("personal.foreground-read", ENDPOINT_TEXT_OUTPUT_SCHEMA, ["text"], ["clipboard-read"]),
 	"desktop.clipboard.write": contract("user.foreground-write", ENDPOINT_TEXT_OUTPUT_SCHEMA, ["text"], ["clipboard-write"]),
 	"desktop.app.open_external": contract("user.foreground-write", ENDPOINT_TEXT_OUTPUT_SCHEMA, ["text"], ["open-external-url"]),
-	"mobile.contacts.pick": contract("personal.foreground-mediated-read", ENDPOINT_CONTACT_OUTPUT_SCHEMA, ["json"], ["contacts-read-selected"], ["personal.foreground-read"]),
+	"mobile.contacts.pick": contract("personal.foreground-mediated-read", ENDPOINT_CONTACT_OUTPUT_SCHEMA, ["json"], ["contacts-read-selected"]),
 	"mobile.contacts.search": contract("personal.foreground-read", ENDPOINT_CONTACT_LIST_OUTPUT_SCHEMA, ["json"], ["contacts-read"]),
 	"mobile.contacts.get": contract("personal.foreground-read", ENDPOINT_CONTACT_OUTPUT_SCHEMA, ["json"], ["contacts-read"]),
-	"mobile.file.pick": contract("personal.foreground-mediated-read", ENDPOINT_FILE_OUTPUT_SCHEMA, ["file"], ["file-read"], ["personal.foreground-read"]),
+	"mobile.file.pick": contract("personal.foreground-mediated-read", ENDPOINT_FILE_OUTPUT_SCHEMA, ["file"], ["file-read"]),
 	...Object.fromEntries(PERSONAL_TOOL_NAMES.map((name) => {
 		const descriptor = personalDescriptor(name);
-		return [name, contract(descriptor.policyId, descriptor.outputSchema, descriptor.resultKinds, descriptor.requiredPermissions, ["mobile.file.pick", "mobile.contacts.pick"].includes(name) ? ["personal.foreground-read"] : [], ["mobile.file.pick", "mobile.contacts.pick"].includes(name) ? void 0 : descriptor.inputSchema)];
+		return [name, contract(descriptor.policyId, descriptor.outputSchema, descriptor.resultKinds, descriptor.requiredPermissions, ["mobile.file.pick", "mobile.contacts.pick"].includes(name) ? void 0 : descriptor.inputSchema)];
 	})),
-	"mobile.file.share": contract("user.foreground-mediated-write", ENDPOINT_TEXT_OUTPUT_SCHEMA, ["text"], ["file-share"], ["user.foreground-write"]),
+	"mobile.file.share": contract("user.foreground-mediated-write", ENDPOINT_TEXT_OUTPUT_SCHEMA, ["text"], ["file-share"]),
 	"mobile.notification.show": contract("user.foreground-write", ENDPOINT_TEXT_OUTPUT_SCHEMA, ["text"], ["notifications"]),
 	"mobile.device.get_info": contract("public.background-read", ENDPOINT_TEXT_OUTPUT_SCHEMA, ["text"], []),
 	"mobile.clipboard.write": contract("user.foreground-write", ENDPOINT_TEXT_OUTPUT_SCHEMA, ["text"], ["clipboard-write"]),
 	"mobile.app.open_url": contract("user.foreground-write", ENDPOINT_TEXT_OUTPUT_SCHEMA, ["text"], ["open-external-url"]),
-	"browser.control": contract("browser.control", BROWSER_CONTROL_ENDPOINT_OUTPUT_SCHEMA, ["json"], ["browser-control"], [], BROWSER_CONTROL_ENDPOINT_INPUT_SCHEMA),
-	"browser.recording": contract("browser.control", BROWSER_CONTROL_ENDPOINT_OUTPUT_SCHEMA, ["json"], ["browser-control"], [], BROWSER_RECORDING_ENDPOINT_INPUT_SCHEMA)
+	"browser.control": contract("browser.control", BROWSER_CONTROL_ENDPOINT_OUTPUT_SCHEMA, ["json"], ["browser-control"], BROWSER_CONTROL_ENDPOINT_INPUT_SCHEMA),
+	"browser.recording": contract("browser.control", BROWSER_CONTROL_ENDPOINT_OUTPUT_SCHEMA, ["json"], ["browser-control"], BROWSER_RECORDING_ENDPOINT_INPUT_SCHEMA)
 };
 var EndpointToolPolicy = class {
 	ajv = new Ajv2020({
@@ -71,7 +70,7 @@ var EndpointToolPolicy = class {
 		if (!descriptor.name.startsWith(`${kind}.`)) throw new EndpointToolPolicyError(`Tool ${descriptor.name} does not belong to ${kind}`);
 		const contract = POLICY_BY_TOOL[descriptor.name];
 		if (!contract) throw new EndpointToolPolicyError(`Tool ${descriptor.name} has no trusted server policy`);
-		if (descriptor.policyId !== contract.policyId && !contract.legacyPolicyIds.includes(descriptor.policyId)) throw new EndpointToolPolicyError(`Tool ${descriptor.name} does not match its trusted server policy`);
+		if (descriptor.policyId !== contract.policyId) throw new EndpointToolPolicyError(`Tool ${descriptor.name} does not match its trusted server policy`);
 		if (contract.inputSchema && canonicalJson(descriptor.inputSchema) !== canonicalJson(contract.inputSchema) || canonicalJson(descriptor.outputSchema) !== canonicalJson(contract.outputSchema) || canonicalJson(descriptor.resultKinds) !== canonicalJson(contract.resultKinds) || canonicalJson([...descriptor.requiredPermissions].sort()) !== canonicalJson([...contract.permissions].sort())) throw new EndpointToolPolicyError(`Tool ${descriptor.name} does not match its trusted server contract`);
 		this.validatePolicyFields(descriptor);
 		try {

package/dist/src/extensions/agent-plugins/auth.js

@@ -54,9 +54,7 @@ function readPluginAuthBinding(store, id, name, server, revision) {
 		if (!existsSync(candidate)) continue;
 		const binding = bindingSchema.parse(JSON.parse(readFileSync(candidate, "utf8")));
 		const fingerprint = pluginEndpointFingerprint(server);
-		const legacy = server.type !== "stdio" && !server.oauth && !server.connectionAuth && binding.endpointFingerprint === hash(new URL(server.url).toString());
-		if (binding.endpointFingerprint !== fingerprint && !legacy) continue;
-		if (legacy) binding.endpointFingerprint = fingerprint;
+		if (binding.endpointFingerprint !== fingerprint) continue;
 		if (targetRevision && candidate !== bindingPath(store, id, name, targetRevision)) writeTextAtomicSync(bindingPath(store, id, name, targetRevision), JSON.stringify(binding));
 		return binding;
 	}

package/dist/src/extensions/agent-plugins/formats.js

@@ -73,8 +73,8 @@ function readPluginLayout(root, read, safe, importManifest) {
 		const config = guarded("mcp", () => json("mcp.json"), void 0);
 		if (config) mcpConfigs.push(config);
 	}
-	const legacyDefault = has(".mcp.json");
-	if (dialect !== "portable" && legacyDefault && (dialect === "claude" || overlay.mcpServers === void 0)) {
+	const externalMcpConfig = has(".mcp.json");
+	if (dialect !== "portable" && externalMcpConfig && (dialect === "claude" || overlay.mcpServers === void 0)) {
 		const config = guarded("mcp", () => json(".mcp.json"), void 0);
 		if (config) mcpConfigs.push(config);
 	}
@@ -98,7 +98,6 @@ function readPluginLayout(root, read, safe, importManifest) {
 		lspServers: ".lsp.json",
 		outputStyles: "output-styles",
 		settings: "settings.json",
-		workflows: "workflows",
 		monitors: "monitors",
 		channels: "channels",
 		themes: "themes"
@@ -164,7 +163,6 @@ function readPluginLayout(root, read, safe, importManifest) {
 		"lspServers",
 		"outputStyles",
 		"settings",
-		"workflows",
 		"monitors",
 		"channels",
 		"themes"

package/dist/src/extensions/agent-plugins/mcp-format.d.ts

@@ -1,2 +1,2 @@
 /** Only map authentication settings that native pi can represent without semantic loss. */
-export declare function normalizePluginMcpServer(input: unknown, legacy: boolean, warn: (message: string) => void): unknown;
+export declare function normalizePluginMcpServer(input: unknown, externalDialect: boolean, warn: (message: string) => void): unknown;

package/dist/src/extensions/agent-plugins/mcp-format.js

@@ -25,7 +25,7 @@ const authSchema = z.discriminatedUnion("type", [
 	})
 ]);
 /** Only map authentication settings that native pi can represent without semantic loss. */
-function normalizePluginMcpServer(input, legacy, warn) {
+function normalizePluginMcpServer(input, externalDialect, warn) {
 	const value = { ...z.record(z.string(), z.unknown()).parse(input) };
 	const extensions = value.extensions;
 	if (extensions !== void 0) {
@@ -53,7 +53,7 @@ function normalizePluginMcpServer(input, legacy, warn) {
 		}
 		delete value.extensions;
 	}
-	if (legacy) {
+	if (externalDialect) {
 		const allowed = new Set([
 			"type",
 			"command",

package/dist/src/extensions/bundled-extension-activation.d.ts

@@ -12,5 +12,3 @@ export declare function computeExtensionActivationPatch(loader: ExtensionLoader,
     ok: false;
     error: string;
 };
-/** @deprecated Use {@link computeExtensionActivationPatch}. */
-export declare const computeBundledExtensionExtensionsPatch: typeof computeExtensionActivationPatch;

package/dist/src/extensions/bundled-extension-activation.js

@@ -68,7 +68,5 @@ function computeExtensionActivationPatch(loader, config, extensionId, wanted) {
 		extensions: buildExtensionsRecord(base, enabled, disabled)
 	};
 }
-/** @deprecated Use {@link computeExtensionActivationPatch}. */
-const computeBundledExtensionExtensionsPatch = computeExtensionActivationPatch;
 //#endregion
-export { computeBundledExtensionExtensionsPatch, computeExtensionActivationPatch, isExtensionActivationEligible };
+export { computeExtensionActivationPatch, isExtensionActivationEligible };

package/dist/src/extensions/install.js

@@ -6,9 +6,9 @@ import { MAX_EXTENSION_STORE_ZIP_BYTES } from "./store-zip-limits.js";
 import { checkEngineCompatibility } from "./engine-check.js";
 import { EXTENSION_API_VERSION, EXTENSION_UI_API_VERSION, checkExtensionApiCompatibility } from "./api-version.js";
 import { collectExtensionPackageDependencyIssues } from "./package-contract.js";
+import { execFileSync } from "node:child_process";
 import { dirname, isAbsolute, join, resolve, sep } from "path";
 import { cpSync, existsSync, mkdirSync, mkdtempSync, readFileSync, readdirSync, rmSync, writeFileSync } from "fs";
-import { execFileSync } from "node:child_process";
 import AdmZip from "adm-zip";
 import semver from "semver";
 import { tmpdir } from "os";

package/dist/src/extensions/types/tui.d.ts

@@ -210,9 +210,8 @@ export interface TuiOverlayHandle {
     isFocused(): boolean;
 }
 export type TuiCustomFactoryResult = TuiCustomComponent | Promise<TuiCustomComponent>;
-export type TuiCustomLegacyFactory<T> = (done: (result: T) => void) => TuiCustomFactoryResult;
 export type TuiCustomFullFactory<T> = (tui: unknown, theme: unknown, keybindings: unknown, done: (result: T) => void) => TuiCustomFactoryResult;
-export type TuiCustomFactory<T> = TuiCustomLegacyFactory<T> | TuiCustomFullFactory<T>;
+export type TuiCustomFactory<T> = TuiCustomFullFactory<T>;
 export interface TuiCustomOptions {
     /** xopc currently renders custom components as overlays. */
     overlay?: boolean;

package/dist/src/gateway/agent-builtin-tools.d.ts

@@ -216,12 +216,6 @@ export declare const GATEWAY_BUILTIN_TOOLS: readonly [{
         readonly en: "Create and manage scheduled or recurring automations.";
         readonly zh: "创建和管理定时或重复执行的自动化。";
     };
-}, {
-    readonly id: "workflow";
-    readonly description: {
-        readonly en: "Start and interact with configured workflows.";
-        readonly zh: "启动并操作已配置的工作流。";
-    };
 }, {
     readonly id: "delegate_task";
     readonly description: {
@@ -277,4 +271,4 @@ export declare const GATEWAY_BUILTIN_TOOLS: readonly [{
         readonly zh: "使用已验证的参数执行选定的外部工具。";
     };
 }];
-export declare const GATEWAY_BUILTIN_TOOL_IDS: ("automation" | "workflow" | "find" | "image" | "knowledge_search" | "knowledge_get" | "knowledge_write" | "user_context_search" | "user_context_get" | "user_context_update" | "web_search" | "web_fetch" | "browser_use" | "grep" | "session_search" | "read_file" | "list_dir" | "write_file" | "apply_patch" | "exec_command" | "update_plan" | "todo" | "web_extract" | "clarify" | "xopc_tool_execute" | "tool_manual" | "session_status" | "read_media" | "xopc_tool_search" | "xopc_tool_describe" | "image_generate" | "skills_list" | "skill_view" | "skill_manage" | "skills_marketplace_search" | "computer_use" | "send_message" | "text_to_speech" | "execute_code" | "send_media" | "create_share" | "memory_maintenance" | "delegate_task" | "skill_install" | "create_desktop_pet")[];
+export declare const GATEWAY_BUILTIN_TOOL_IDS: ("automation" | "find" | "image" | "knowledge_search" | "knowledge_get" | "knowledge_write" | "user_context_search" | "user_context_get" | "user_context_update" | "web_search" | "web_fetch" | "browser_use" | "grep" | "session_search" | "read_file" | "list_dir" | "write_file" | "apply_patch" | "exec_command" | "update_plan" | "todo" | "web_extract" | "clarify" | "xopc_tool_execute" | "tool_manual" | "session_status" | "read_media" | "xopc_tool_search" | "xopc_tool_describe" | "image_generate" | "skills_list" | "skill_view" | "skill_manage" | "skills_marketplace_search" | "computer_use" | "send_message" | "text_to_speech" | "execute_code" | "send_media" | "create_share" | "memory_maintenance" | "delegate_task" | "skill_install" | "create_desktop_pet")[];

package/dist/src/gateway/agent-builtin-tools.js

@@ -248,13 +248,6 @@ const GATEWAY_BUILTIN_TOOLS = [
 			zh: "创建和管理定时或重复执行的自动化。"
 		}
 	},
-	{
-		id: "workflow",
-		description: {
-			en: "Start and interact with configured workflows.",
-			zh: "启动并操作已配置的工作流。"
-		}
-	},
 	{
 		id: "delegate_task",
 		description: {

package/dist/src/gateway/agents-admin.d.ts

@@ -61,7 +61,6 @@ export type UpdateAgentBody = {
     skills?: SkillOverride | null;
     tools?: AgentEntry['tools'] | null;
     toolAllowlist?: AgentEntry['toolAllowlist'] | null;
-    workflows?: AgentEntry['workflows'] | null;
     runtime?: AgentEntry['runtime'] | null;
 };
 export declare function updateGatewayAgent(agentIdRaw: string, body: UpdateAgentBody): Promise<AgentAdminResult<void>>;

package/dist/src/gateway/agents-admin.js

@@ -132,7 +132,6 @@ async function updateGatewayAgent(agentIdRaw, body) {
 	if (body.skills !== void 0) patch.skills = body.skills ?? void 0;
 	if (body.tools !== void 0) patch.tools = body.tools ?? void 0;
 	if (body.toolAllowlist !== void 0) patch.toolAllowlist = body.toolAllowlist ?? void 0;
-	if (body.workflows !== void 0) patch.workflows = body.workflows ?? void 0;
 	if (body.runtime !== void 0) patch.runtime = body.runtime ?? void 0;
 	try {
 		const service = new AgentCatalogService();

package/dist/src/gateway/global-defaults-admin.js

@@ -2,8 +2,8 @@ import { AgentDefaultsSchema } from "../agent-config/schema.js";
 import { init_agent_config } from "../agent-config/index.js";
 import { AgentCatalogRepository, init_repository } from "../agent-catalog/repository.js";
 import { AgentCatalogService } from "../agent-catalog/service.js";
-import { GATEWAY_BUILTIN_TOOLS } from "./agent-builtin-tools.js";
 import { validateComputerModelChange } from "../computer/model-config.js";
+import { GATEWAY_BUILTIN_TOOLS } from "./agent-builtin-tools.js";
 import { isDeepStrictEqual } from "node:util";
 //#region src/gateway/global-defaults-admin.ts
 init_agent_config();

package/dist/src/gateway/hono/lib/config-payload.d.ts

@@ -64,10 +64,6 @@ export declare function buildSafeWebConfigPayload(service: GatewayService, optio
                 mode: "replace";
                 include: string[];
             };
-            workflows: {
-                default?: string;
-                allowed?: string[];
-            };
         }[];
         defaults: {
             models: {
@@ -111,10 +107,6 @@ export declare function buildSafeWebConfigPayload(service: GatewayService, optio
                 maxCallsPerTurn?: number;
                 timeoutMs?: number;
             }>;
-            workflows: {
-                default?: string;
-                allowed?: string[];
-            };
             runtime: {
                 codemode?: {
                     enabled: boolean;

package/dist/src/gateway/hono/lib/config-payload.js

@@ -88,8 +88,7 @@ async function buildSafeWebConfigPayload(service, options = {}) {
 				workspace: e.workspace,
 				models: e.models,
 				tools: e.tools,
-				skills: e.skills,
-				workflows: e.workflows
+				skills: e.skills
 			})),
 			defaults: agentCatalog.defaults
 		},

package/dist/src/gateway/hono/lib/config-write-lock.d.ts

@@ -1,2 +1,2 @@
-/** Keep HTTP read/merge/write sequences together, including the legacy configuration endpoint. */
+/** Keep HTTP read/merge/write sequences together, across configuration endpoints. */
 export declare function withGatewayConfigWriteLock<T>(service: object, operation: () => Promise<T>): Promise<T>;

package/dist/src/gateway/hono/lib/config-write-lock.js

@@ -1,6 +1,6 @@
 //#region src/gateway/hono/lib/config-write-lock.ts
 const writes = /* @__PURE__ */ new WeakMap();
-/** Keep HTTP read/merge/write sequences together, including the legacy configuration endpoint. */
+/** Keep HTTP read/merge/write sequences together, across configuration endpoints. */
 async function withGatewayConfigWriteLock(service, operation) {
 	const next = (writes.get(service) ?? Promise.resolve()).catch(() => {}).then(operation);
 	writes.set(service, next);

package/dist/src/gateway/hono/middleware/auth.js

@@ -257,10 +257,10 @@ function auth(config) {
 			let releaseBodyBudget = () => {};
 			try {
 				const proofHeader = c.req.header(PROOF_HEADER);
-				if (device?.requestProofVersion || proofHeader) {
+				if (device || proofHeader) {
 					const proof = parseRequestProof(proofHeader);
 					const url = new URL(c.req.url);
-					if (!device || !proof || Math.abs(Date.now() - proof.timestamp) > 12e4 || !verifyRequestProofSignature(device, proof, requestProofMessage({
+					if (!device || device.requestProofVersion !== 1 || !proof || Math.abs(Date.now() - proof.timestamp) > 12e4 || !verifyRequestProofSignature(device, proof, requestProofMessage({
 						gatewayId: getOrCreateGatewayIdentity().id,
 						credential: providedCredential,
 						method: c.req.method,

package/dist/src/gateway/hono/routes/activity.js

@@ -6,7 +6,6 @@ const ACTIVITY_OBJECT_KINDS = new Set([
 	"note",
 	"session",
 	"task",
-	"workflow_run",
 	"automation"
 ]);
 function parseActivityVisibility(raw) {

package/dist/src/gateway/hono/routes/agents.js

@@ -1,9 +1,9 @@
-import { AgentEntrySchema, AgentModelsOverrideSchema, AgentProfileSchema, RuntimePolicySchema, SkillOverrideSchema, ToolPoliciesSchema, WorkflowPolicySchema } from "../../../agent-config/schema.js";
+import { AgentEntrySchema, AgentModelsOverrideSchema, AgentProfileSchema, RuntimePolicySchema, SkillOverrideSchema, ToolPoliciesSchema } from "../../../agent-config/schema.js";
 import { init_agent_config } from "../../../agent-config/index.js";
 import { normalizeAgentId } from "../../../agent-catalog/id.js";
 import { init_agent_scope } from "../../../agent/agent-scope.js";
-import { createGatewayAgent, deleteAgentAvatarFile, deleteGatewayAgent, getGatewayAgentEffectiveConfig, listAgentProfileFiles, listGatewayAgents, readAgentAvatarFile, readAgentProfileFile, resolveAgentAvatarImage, updateGatewayAgent, writeAgentAvatarFromBase64, writeAgentProfileFile } from "../../agents-admin.js";
 import { getVoiceModelsConfig } from "../../../config/voice.js";
+import { createGatewayAgent, deleteAgentAvatarFile, deleteGatewayAgent, getGatewayAgentEffectiveConfig, listAgentProfileFiles, listGatewayAgents, readAgentAvatarFile, readAgentProfileFile, resolveAgentAvatarImage, updateGatewayAgent, writeAgentAvatarFromBase64, writeAgentProfileFile } from "../../agents-admin.js";
 //#region src/gateway/hono/routes/agents.ts
 init_agent_config();
 init_agent_scope();
@@ -112,7 +112,6 @@ function registerAgentsRoutes(authenticated, deps) {
 			"skills",
 			"tools",
 			"toolAllowlist",
-			"workflows",
 			"runtime",
 			"setDefault"
 		]);
@@ -163,11 +162,6 @@ function registerAgentsRoutes(authenticated, deps) {
 			ok: false,
 			error: { message: `profile ${profilePatch.error.issues[0]?.message ?? "is invalid"}` }
 		}, 400);
-		const workflowsPatch = body.workflows === null ? null : Object.hasOwn(body, "workflows") ? WorkflowPolicySchema.safeParse(body.workflows) : void 0;
-		if (workflowsPatch && workflowsPatch !== null && !workflowsPatch.success) return c.json({
-			ok: false,
-			error: { message: `workflows ${workflowsPatch.error.issues[0]?.message ?? "is invalid"}` }
-		}, 400);
 		const runtimePatch = body.runtime === null ? null : Object.hasOwn(body, "runtime") ? RuntimePolicySchema.safeParse(body.runtime) : void 0;
 		if (runtimePatch && runtimePatch !== null && !runtimePatch.success) return c.json({
 			ok: false,
@@ -190,7 +184,6 @@ function registerAgentsRoutes(authenticated, deps) {
 			...skillsPatch !== void 0 ? { skills: skillsPatch === null ? null : skillsPatch.data } : {},
 			...toolsPatch !== void 0 ? { tools: toolsPatch } : {},
 			...toolAllowlistPatch !== void 0 ? { toolAllowlist: toolAllowlistPatch === null ? null : toolAllowlistPatch.data } : {},
-			...workflowsPatch !== void 0 ? { workflows: workflowsPatch === null ? null : workflowsPatch.data } : {},
 			...runtimePatch !== void 0 ? { runtime: runtimePatch === null ? null : runtimePatch.data } : {}
 		});
 		if (prep.ok === false) return c.json({

package/dist/src/gateway/hono/routes/auth-registry-extensions.js

@@ -189,28 +189,6 @@ function registerAuthRegistryExtensionsRoutes(authenticated, deps) {
 	const updateExtensionActivation = async (extensionId, enabled) => {
 		return service.setExtensionActivationTarget(extensionId, enabled);
 	};
-	/** Backward-compatible endpoint used by older gateway consoles. */
-	authenticated.post("/api/extensions/bundled/activation", strictRateLimitMiddleware, async (c) => {
-		const body = await c.req.json().catch(() => null);
-		const extensionId = typeof body?.extensionId === "string" ? body.extensionId.trim() : "";
-		if (!extensionId) return c.json({
-			ok: false,
-			error: { message: "extensionId is required" }
-		}, 400);
-		if (typeof body?.enabled !== "boolean") return c.json({
-			ok: false,
-			error: { message: "enabled must be a boolean" }
-		}, 400);
-		const result = await updateExtensionActivation(extensionId, body.enabled);
-		if (!result.ok) return c.json({
-			ok: false,
-			error: { message: result.error ?? "Request failed" }
-		}, 400);
-		return c.json({
-			ok: true,
-			payload: { requiresGatewayRestart: result.requiresGatewayRestart }
-		});
-	});
 	/** Enable/disable any discovered native extension. */
 	authenticated.post("/api/extensions/:id/activation", strictRateLimitMiddleware, async (c) => {
 		const body = await c.req.json().catch(() => null);

package/dist/src/gateway/hono/routes/chat-model-config.d.ts

@@ -14,7 +14,6 @@ export declare function patchChatModelConfig(c: Context, service: AuthenticatedR
         model: string;
         configVersion: number;
         fixedModel: boolean;
-        reasoningLevel: import("../../../config/index.js").ReasoningLevel;
         activityDetail: {
             default: import("../../../config/index.js").ReasoningLevel;
             override: import("../../../config/index.js").ReasoningLevel | null;

package/dist/src/gateway/hono/routes/config-patch/misc.js

@@ -218,11 +218,10 @@ async function applyMiscPatch(config, body) {
 	if (body.voice !== void 0) {
 		if (!body.voice || typeof body.voice !== "object" || Array.isArray(body.voice)) return patchError("voice must be an object");
 		if (body.voice.realtime !== void 0 && (!body.voice.realtime || typeof body.voice.realtime !== "object" || Array.isArray(body.voice.realtime))) return patchError("voice.realtime must be an object");
-		if (body.voicePatchMode !== void 0 && body.voicePatchMode !== "merge") return patchError("Invalid voice patch mode");
-		const voicePatch = body.voicePatchMode === "merge" ? {
+		const voicePatch = {
 			...config.voice,
 			...body.voice
-		} : body.voice;
+		};
 		const parsed = VoiceConfigSchema.safeParse(mergeRealtimeVoiceConfigPatch(config.voice, voicePatch));
 		if (!parsed.success) return patchError(parsed.error.issues.map((i) => i.message).join("; "));
 		config.voice = parsed.data;

package/dist/src/gateway/hono/routes/config.js

@@ -88,7 +88,8 @@ function registerConfigRoutes(authenticated, deps) {
 		});
 	}));
 	const revealGatewayAuthSecretHandler = async (c) => {
-		const field = await resolveRevealGatewayAuthField(c);
+		const value = c.req.param("field");
+		const field = value === "token" || value === "password" ? value : null;
 		if (!field) return c.json({
 			ok: false,
 			error: { message: "field must be token or password" }
@@ -104,12 +105,7 @@ function registerConfigRoutes(authenticated, deps) {
 			}
 		});
 	};
-	/**
-	* POST /api/gateway/reveal-auth-secret/:field — preferred; no JSON body required.
-	* POST /api/gateway/reveal-auth-secret — legacy JSON body `{ field: "token" | "password" }`.
-	*/
 	authenticated.post("/api/gateway/reveal-auth-secret/:field", strictRateLimitMiddleware, revealGatewayAuthSecretHandler);
-	authenticated.post("/api/gateway/reveal-auth-secret", strictRateLimitMiddleware, revealGatewayAuthSecretHandler);
 	/** POST /api/tools/web/reveal-search-api-key — plaintext search provider apiKey by index. */
 	authenticated.post("/api/tools/web/reveal-search-api-key", strictRateLimitMiddleware, async (c) => {
 		let index = -1;
@@ -135,20 +131,5 @@ function registerConfigRoutes(authenticated, deps) {
 		});
 	});
 }
-function normalizeRevealGatewayAuthField(raw) {
-	return raw === "token" || raw === "password" ? raw : null;
-}
-async function resolveRevealGatewayAuthField(c) {
-	const fromPath = normalizeRevealGatewayAuthField(c.req.param("field"));
-	if (fromPath) return fromPath;
-	const fromQuery = normalizeRevealGatewayAuthField(c.req.query("field"));
-	if (fromQuery) return fromQuery;
-	try {
-		const body = await c.req.json();
-		return normalizeRevealGatewayAuthField(body && typeof body === "object" && !Array.isArray(body) ? body.field : void 0);
-	} catch {
-		return null;
-	}
-}
 //#endregion
 export { registerConfigRoutes };

package/dist/src/gateway/hono/routes/connectors.js

@@ -8,7 +8,6 @@ import { getConnectorSyncPolicy, upsertConnectorSyncPolicy } from "../../../stor
 import { init_sqlite } from "../../../storage/sqlite/index.js";
 import { AgentCatalogRepository, init_repository } from "../../../agent-catalog/repository.js";
 import { init_agent_scope, resolveDefaultAgentId } from "../../../agent/agent-scope.js";
-import { listUnderstandingSourceGrants, revokeUnderstandingSourceGrant } from "../../../user-context/sources/repository.js";
 import { activateComposioBackend, addComposioBackend, ensureComposioBackend, getComposioBackend, listComposioBackends, removeComposioBackend } from "../../../connectors/composio-backends.js";
 import { getAuthorizationAttempt } from "../../../connectors/authorization-attempts.js";
 import { ComposioSessionsAdapter, resolveComposioApiKey } from "../../../connectors/composio-sessions.js";
@@ -27,6 +26,7 @@ import { startConnectorAuthorization } from "../../../connectors/auth-provider-r
 import { composioLogoResponse } from "../../../connectors/composio-logo.js";
 import { inspectManagedComposioStatus } from "../../../connectors/composio-managed-client.js";
 import { appendComposioTriggerEvent, listComposioTriggerEvents } from "../../../connectors/composio-triggers.js";
+import { listUnderstandingSourceGrants, revokeUnderstandingSourceGrant } from "../../../user-context/sources/repository.js";
 import { ingestLocalFolderSource } from "../../../connectors/connected-source-ingestion.js";
 import { testConnectorInstance } from "../../../connectors/health.js";
 import { setConnectorEnabled } from "../../../connectors/lifecycle.js";

package/dist/src/gateway/hono/routes/context-sources.js

@@ -4,9 +4,9 @@ import { countKnowledgeSourceItems, deleteKnowledgeSourceItems } from "../../../
 import { init_sqlite } from "../../../storage/sqlite/index.js";
 import { init_agent_scope, resolveDefaultAgentId } from "../../../agent/agent-scope.js";
 import { getActiveUnderstandingConsent } from "../../../user-context/sources/consent-repository.js";
-import { getUnderstandingSourceGrant, listUnderstandingSourceGrants, listUnderstandingSourceRuns, revokeUnderstandingSourceGrant, updateUnderstandingSourceGrantPolicies } from "../../../user-context/sources/repository.js";
 import { listUserModelObservations } from "../../../user-model/observation-repository.js";
 import "../../../user-model/index.js";
+import { getUnderstandingSourceGrant, listUnderstandingSourceGrants, listUnderstandingSourceRuns, revokeUnderstandingSourceGrant, updateUnderstandingSourceGrantPolicies } from "../../../user-context/sources/repository.js";
 import { listConnectedContentCandidates, readConnectedContent } from "../../../connectors/content-enrichment.js";
 import { listUnderstandingSourceDefinitions } from "../../../user-context/sources/catalog.js";
 //#region src/gateway/hono/routes/context-sources.ts

package/dist/src/gateway/hono/routes/devices.js

@@ -25,7 +25,7 @@ const refreshRequestSchema = z.strictObject({
 	requestId: z.string().uuid(),
 	nextRefreshToken: z.string().min(80).max(256),
 	signature: z.string().min(1).max(256),
-	requestProofVersion: z.literal(1).optional()
+	requestProofVersion: z.literal(1)
 });
 const pairingProbeSchema = z.strictObject({ pairingId: z.string().uuid() });
 const pairingSetupSchema = z.strictObject({ targetKind: devicePairingTargetKindSchema });
@@ -71,7 +71,7 @@ function registerDeviceAuthPublicRoutes(app, options) {
 				requestId: parsed.data.requestId,
 				nonce: parsed.data.nonce,
 				expiresAt: Date.now() + 3e4,
-				requestProofVersion: parsed.data.requestProofVersion ?? 0,
+				requestProofVersion: parsed.data.requestProofVersion,
 				tokens
 			})).toString("base64url");
 			return c.json({

package/dist/src/gateway/hono/routes/home.js

@@ -3,7 +3,6 @@ import { init_src } from "../../../../packages/gateway-contract/src/index.js";
 import { acknowledgeHomeAttention } from "../../../storage/sqlite/home-attention-repository.js";
 import { decideConnectorApproval } from "../../../storage/sqlite/connector-repository.js";
 import { init_sqlite } from "../../../storage/sqlite/index.js";
-import { listGatewayAgents } from "../../agents-admin.js";
 import { HomeQueryService, buildHomeWorkbench, decisionFromTask } from "../../../tasks/home-query-service.js";
 import { resumeApprovedConnectorAction } from "../../../connectors/approval-resume.js";
 import { HomeOpportunityActionError, HomeOpportunityNotFoundError } from "../../../home-intelligence/application-service.js";
@@ -16,7 +15,7 @@ function registerHomeRoutes(authenticated, deps) {
 	const home = new HomeQueryService(service, (locale) => service.homeIntelligence.getAdvisor(locale));
 	authenticated.get("/api/home", async (c) => {
 		const locale = c.req.query("locale");
-		return c.json(await home.getSnapshot(locale));
+		return c.json(await home.getSnapshot(locale, c.req.query("attention") === "all"));
 	});
 	authenticated.get("/api/home/advisor/metrics", (c) => {
 		const rawSince = c.req.query("since");
@@ -129,7 +128,7 @@ function registerHomeRoutes(authenticated, deps) {
 	});
 	authenticated.post("/api/home/attention/acknowledge", deps.strictRateLimitMiddleware, async (c) => {
 		const body = await c.req.json().catch(() => ({}));
-		const kind = body.kind === "automation_run" || body.kind === "workflow_run" ? body.kind : void 0;
+		const kind = body.kind === "automation_run" ? body.kind : void 0;
 		const runId = typeof body.runId === "string" ? body.runId.trim() : "";
 		if (!kind || !runId) return c.json({
 			ok: false,
@@ -143,7 +142,7 @@ function registerHomeRoutes(authenticated, deps) {
 	});
 	authenticated.post("/api/home/attention/retry", deps.strictRateLimitMiddleware, async (c) => {
 		const body = await c.req.json().catch(() => ({}));
-		const kind = body.kind === "automation_run" || body.kind === "workflow_run" ? body.kind : void 0;
+		const kind = body.kind === "automation_run" ? body.kind : void 0;
 		const runId = typeof body.runId === "string" ? body.runId.trim() : "";
 		if (!kind || !runId) return c.json({
 			ok: false,
@@ -162,22 +161,6 @@ function registerHomeRoutes(authenticated, deps) {
 				error: error instanceof Error ? error.message : "Failed to retry automation"
 			}, 400);
 		}
-		const agents = await listGatewayAgents();
-		const result = await service.createWorkflowRunService().retryWorkflowRun({
-			agentId: agents.defaultId,
-			runId
-		});
-		if (result.ok === false) return c.json({
-			ok: false,
-			error: result.message,
-			code: result.code
-		}, result.httpStatus);
-		acknowledgeHomeAttention(kind, runId);
-		return c.json({
-			ok: true,
-			runId: result.runId,
-			conversationId: result.conversationId
-		}, 202);
 	});
 }
 //#endregion

package/dist/src/gateway/hono/routes/lazy-bundles.js

@@ -305,14 +305,6 @@ const AUTHENTICATED_LAZY_ROUTE_BUNDLES = [
 			return { register: registerHomeRoutes };
 		}
 	},
-	{
-		id: "workflows",
-		match: (path) => startsWithAny(path, ["/api/workflows"]),
-		load: async () => {
-			const { registerWorkflowRoutes } = await import("./workflows.js");
-			return { register: registerWorkflowRoutes };
-		}
-	},
 	{
 		id: "logs",
 		match: (path) => startsWithAny(path, ["/api/logs"]),

package/dist/src/gateway/hono/routes/memory-learning.js

@@ -4,9 +4,9 @@ import { init_session_repository } from "../../../storage/sqlite/session-reposit
 import { getSessionConfig, init_config_repository } from "../../../storage/sqlite/config-repository.js";
 import { init_config, resolveKnowledgeReadPolicy } from "../../../user-context/config.js";
 import { bindOwnerIdentity } from "../../../user-context/identity-bindings.js";
+import { enqueueConversationLearning, learningStatus } from "../../../memory-learning/repository.js";
 import { canUseKnowledge, knowledgeExclusion } from "../../../knowledge-memory/usage-policy.js";
 import { getKnowledgeItem } from "../../../knowledge-memory/repository.js";
-import { enqueueConversationLearning, learningStatus } from "../../../memory-learning/repository.js";
 import "../../../knowledge-memory/index.js";
 import { resolveEffectiveAgentProfileForSession } from "../../../config/agent-profile.js";
 //#region src/gateway/hono/routes/memory-learning.ts

package/dist/src/gateway/hono/routes/personal-agent.js

@@ -2,8 +2,8 @@ import { getDevice, init_device_access_repository } from "../../../storage/sqlit
 import { getPersonalRequest, init_request_repository, listPersonalRequests } from "../../../personal-agent/request-repository.js";
 import { getPersonalAgent } from "../../../personal-agent/repository.js";
 import { TaskOriginRepository } from "../../../tasks/task-origin-repository.js";
-import { writeAgentAvatarFromBase64 } from "../../agents-admin.js";
 import { cancelPersonalRequest, personalRequestSnapshot, publishPersonalRequest } from "../../../personal-agent/request-service.js";
+import { writeAgentAvatarFromBase64 } from "../../agents-admin.js";
 import { getGatewayPrincipal } from "../../security/gateway-principal.js";
 import { PersonalOnboardingDraftSchema, PersonalOnboardingStepSchema, finishPersonalWelcome, getPersonalOnboarding, savePersonalOnboarding } from "../../../personal-agent/onboarding.js";
 import { PersonalAppearanceSchema, createOrResumePersonalAgent, ensurePersonalConversationVisibility, listPersonalModels, patchPersonalProfile, refreshPersonalDelegationGuidance } from "../../../personal-agent/service.js";