@xopcai/xopc 0.0.410 → 0.0.411

package/dist/src/gateway/hono/middleware/auth.js

@@ -257,10 +257,10 @@ function auth(config) {
 			let releaseBodyBudget = () => {};
 			try {
 				const proofHeader = c.req.header(PROOF_HEADER);
-				if (device?.requestProofVersion || proofHeader) {
+				if (device || proofHeader) {
 					const proof = parseRequestProof(proofHeader);
 					const url = new URL(c.req.url);
-					if (!device || !proof || Math.abs(Date.now() - proof.timestamp) > 12e4 || !verifyRequestProofSignature(device, proof, requestProofMessage({
+					if (!device || device.requestProofVersion !== 1 || !proof || Math.abs(Date.now() - proof.timestamp) > 12e4 || !verifyRequestProofSignature(device, proof, requestProofMessage({
 						gatewayId: getOrCreateGatewayIdentity().id,
 						credential: providedCredential,
 						method: c.req.method,

package/dist/src/gateway/hono/routes/activity.js

@@ -6,7 +6,6 @@ const ACTIVITY_OBJECT_KINDS = new Set([
 	"note",
 	"session",
 	"task",
-	"workflow_run",
 	"automation"
 ]);
 function parseActivityVisibility(raw) {

package/dist/src/gateway/hono/routes/agents.js

@@ -1,9 +1,9 @@
-import { AgentEntrySchema, AgentModelsOverrideSchema, AgentProfileSchema, RuntimePolicySchema, SkillOverrideSchema, ToolPoliciesSchema, WorkflowPolicySchema } from "../../../agent-config/schema.js";
+import { AgentEntrySchema, AgentModelsOverrideSchema, AgentProfileSchema, RuntimePolicySchema, SkillOverrideSchema, ToolPoliciesSchema } from "../../../agent-config/schema.js";
 import { init_agent_config } from "../../../agent-config/index.js";
 import { normalizeAgentId } from "../../../agent-catalog/id.js";
 import { init_agent_scope } from "../../../agent/agent-scope.js";
-import { createGatewayAgent, deleteAgentAvatarFile, deleteGatewayAgent, getGatewayAgentEffectiveConfig, listAgentProfileFiles, listGatewayAgents, readAgentAvatarFile, readAgentProfileFile, resolveAgentAvatarImage, updateGatewayAgent, writeAgentAvatarFromBase64, writeAgentProfileFile } from "../../agents-admin.js";
 import { getVoiceModelsConfig } from "../../../config/voice.js";
+import { createGatewayAgent, deleteAgentAvatarFile, deleteGatewayAgent, getGatewayAgentEffectiveConfig, listAgentProfileFiles, listGatewayAgents, readAgentAvatarFile, readAgentProfileFile, resolveAgentAvatarImage, updateGatewayAgent, writeAgentAvatarFromBase64, writeAgentProfileFile } from "../../agents-admin.js";
 //#region src/gateway/hono/routes/agents.ts
 init_agent_config();
 init_agent_scope();
@@ -112,7 +112,6 @@ function registerAgentsRoutes(authenticated, deps) {
 			"skills",
 			"tools",
 			"toolAllowlist",
-			"workflows",
 			"runtime",
 			"setDefault"
 		]);
@@ -163,11 +162,6 @@ function registerAgentsRoutes(authenticated, deps) {
 			ok: false,
 			error: { message: `profile ${profilePatch.error.issues[0]?.message ?? "is invalid"}` }
 		}, 400);
-		const workflowsPatch = body.workflows === null ? null : Object.hasOwn(body, "workflows") ? WorkflowPolicySchema.safeParse(body.workflows) : void 0;
-		if (workflowsPatch && workflowsPatch !== null && !workflowsPatch.success) return c.json({
-			ok: false,
-			error: { message: `workflows ${workflowsPatch.error.issues[0]?.message ?? "is invalid"}` }
-		}, 400);
 		const runtimePatch = body.runtime === null ? null : Object.hasOwn(body, "runtime") ? RuntimePolicySchema.safeParse(body.runtime) : void 0;
 		if (runtimePatch && runtimePatch !== null && !runtimePatch.success) return c.json({
 			ok: false,
@@ -190,7 +184,6 @@ function registerAgentsRoutes(authenticated, deps) {
 			...skillsPatch !== void 0 ? { skills: skillsPatch === null ? null : skillsPatch.data } : {},
 			...toolsPatch !== void 0 ? { tools: toolsPatch } : {},
 			...toolAllowlistPatch !== void 0 ? { toolAllowlist: toolAllowlistPatch === null ? null : toolAllowlistPatch.data } : {},
-			...workflowsPatch !== void 0 ? { workflows: workflowsPatch === null ? null : workflowsPatch.data } : {},
 			...runtimePatch !== void 0 ? { runtime: runtimePatch === null ? null : runtimePatch.data } : {}
 		});
 		if (prep.ok === false) return c.json({

package/dist/src/gateway/hono/routes/auth-registry-extensions.js

@@ -189,28 +189,6 @@ function registerAuthRegistryExtensionsRoutes(authenticated, deps) {
 	const updateExtensionActivation = async (extensionId, enabled) => {
 		return service.setExtensionActivationTarget(extensionId, enabled);
 	};
-	/** Backward-compatible endpoint used by older gateway consoles. */
-	authenticated.post("/api/extensions/bundled/activation", strictRateLimitMiddleware, async (c) => {
-		const body = await c.req.json().catch(() => null);
-		const extensionId = typeof body?.extensionId === "string" ? body.extensionId.trim() : "";
-		if (!extensionId) return c.json({
-			ok: false,
-			error: { message: "extensionId is required" }
-		}, 400);
-		if (typeof body?.enabled !== "boolean") return c.json({
-			ok: false,
-			error: { message: "enabled must be a boolean" }
-		}, 400);
-		const result = await updateExtensionActivation(extensionId, body.enabled);
-		if (!result.ok) return c.json({
-			ok: false,
-			error: { message: result.error ?? "Request failed" }
-		}, 400);
-		return c.json({
-			ok: true,
-			payload: { requiresGatewayRestart: result.requiresGatewayRestart }
-		});
-	});
 	/** Enable/disable any discovered native extension. */
 	authenticated.post("/api/extensions/:id/activation", strictRateLimitMiddleware, async (c) => {
 		const body = await c.req.json().catch(() => null);

package/dist/src/gateway/hono/routes/chat-model-config.d.ts

@@ -14,7 +14,6 @@ export declare function patchChatModelConfig(c: Context, service: AuthenticatedR
         model: string;
         configVersion: number;
         fixedModel: boolean;
-        reasoningLevel: import("../../../config/index.js").ReasoningLevel;
         activityDetail: {
             default: import("../../../config/index.js").ReasoningLevel;
             override: import("../../../config/index.js").ReasoningLevel | null;

package/dist/src/gateway/hono/routes/config-patch/misc.js

@@ -218,11 +218,10 @@ async function applyMiscPatch(config, body) {
 	if (body.voice !== void 0) {
 		if (!body.voice || typeof body.voice !== "object" || Array.isArray(body.voice)) return patchError("voice must be an object");
 		if (body.voice.realtime !== void 0 && (!body.voice.realtime || typeof body.voice.realtime !== "object" || Array.isArray(body.voice.realtime))) return patchError("voice.realtime must be an object");
-		if (body.voicePatchMode !== void 0 && body.voicePatchMode !== "merge") return patchError("Invalid voice patch mode");
-		const voicePatch = body.voicePatchMode === "merge" ? {
+		const voicePatch = {
 			...config.voice,
 			...body.voice
-		} : body.voice;
+		};
 		const parsed = VoiceConfigSchema.safeParse(mergeRealtimeVoiceConfigPatch(config.voice, voicePatch));
 		if (!parsed.success) return patchError(parsed.error.issues.map((i) => i.message).join("; "));
 		config.voice = parsed.data;

package/dist/src/gateway/hono/routes/config.js

@@ -88,7 +88,8 @@ function registerConfigRoutes(authenticated, deps) {
 		});
 	}));
 	const revealGatewayAuthSecretHandler = async (c) => {
-		const field = await resolveRevealGatewayAuthField(c);
+		const value = c.req.param("field");
+		const field = value === "token" || value === "password" ? value : null;
 		if (!field) return c.json({
 			ok: false,
 			error: { message: "field must be token or password" }
@@ -104,12 +105,7 @@ function registerConfigRoutes(authenticated, deps) {
 			}
 		});
 	};
-	/**
-	* POST /api/gateway/reveal-auth-secret/:field — preferred; no JSON body required.
-	* POST /api/gateway/reveal-auth-secret — legacy JSON body `{ field: "token" | "password" }`.
-	*/
 	authenticated.post("/api/gateway/reveal-auth-secret/:field", strictRateLimitMiddleware, revealGatewayAuthSecretHandler);
-	authenticated.post("/api/gateway/reveal-auth-secret", strictRateLimitMiddleware, revealGatewayAuthSecretHandler);
 	/** POST /api/tools/web/reveal-search-api-key — plaintext search provider apiKey by index. */
 	authenticated.post("/api/tools/web/reveal-search-api-key", strictRateLimitMiddleware, async (c) => {
 		let index = -1;
@@ -135,20 +131,5 @@ function registerConfigRoutes(authenticated, deps) {
 		});
 	});
 }
-function normalizeRevealGatewayAuthField(raw) {
-	return raw === "token" || raw === "password" ? raw : null;
-}
-async function resolveRevealGatewayAuthField(c) {
-	const fromPath = normalizeRevealGatewayAuthField(c.req.param("field"));
-	if (fromPath) return fromPath;
-	const fromQuery = normalizeRevealGatewayAuthField(c.req.query("field"));
-	if (fromQuery) return fromQuery;
-	try {
-		const body = await c.req.json();
-		return normalizeRevealGatewayAuthField(body && typeof body === "object" && !Array.isArray(body) ? body.field : void 0);
-	} catch {
-		return null;
-	}
-}
 //#endregion
 export { registerConfigRoutes };

package/dist/src/gateway/hono/routes/connectors.js

@@ -8,7 +8,6 @@ import { getConnectorSyncPolicy, upsertConnectorSyncPolicy } from "../../../stor
 import { init_sqlite } from "../../../storage/sqlite/index.js";
 import { AgentCatalogRepository, init_repository } from "../../../agent-catalog/repository.js";
 import { init_agent_scope, resolveDefaultAgentId } from "../../../agent/agent-scope.js";
-import { listUnderstandingSourceGrants, revokeUnderstandingSourceGrant } from "../../../user-context/sources/repository.js";
 import { activateComposioBackend, addComposioBackend, ensureComposioBackend, getComposioBackend, listComposioBackends, removeComposioBackend } from "../../../connectors/composio-backends.js";
 import { getAuthorizationAttempt } from "../../../connectors/authorization-attempts.js";
 import { ComposioSessionsAdapter, resolveComposioApiKey } from "../../../connectors/composio-sessions.js";
@@ -27,6 +26,7 @@ import { startConnectorAuthorization } from "../../../connectors/auth-provider-r
 import { composioLogoResponse } from "../../../connectors/composio-logo.js";
 import { inspectManagedComposioStatus } from "../../../connectors/composio-managed-client.js";
 import { appendComposioTriggerEvent, listComposioTriggerEvents } from "../../../connectors/composio-triggers.js";
+import { listUnderstandingSourceGrants, revokeUnderstandingSourceGrant } from "../../../user-context/sources/repository.js";
 import { ingestLocalFolderSource } from "../../../connectors/connected-source-ingestion.js";
 import { testConnectorInstance } from "../../../connectors/health.js";
 import { setConnectorEnabled } from "../../../connectors/lifecycle.js";

package/dist/src/gateway/hono/routes/context-sources.js

@@ -4,9 +4,9 @@ import { countKnowledgeSourceItems, deleteKnowledgeSourceItems } from "../../../
 import { init_sqlite } from "../../../storage/sqlite/index.js";
 import { init_agent_scope, resolveDefaultAgentId } from "../../../agent/agent-scope.js";
 import { getActiveUnderstandingConsent } from "../../../user-context/sources/consent-repository.js";
-import { getUnderstandingSourceGrant, listUnderstandingSourceGrants, listUnderstandingSourceRuns, revokeUnderstandingSourceGrant, updateUnderstandingSourceGrantPolicies } from "../../../user-context/sources/repository.js";
 import { listUserModelObservations } from "../../../user-model/observation-repository.js";
 import "../../../user-model/index.js";
+import { getUnderstandingSourceGrant, listUnderstandingSourceGrants, listUnderstandingSourceRuns, revokeUnderstandingSourceGrant, updateUnderstandingSourceGrantPolicies } from "../../../user-context/sources/repository.js";
 import { listConnectedContentCandidates, readConnectedContent } from "../../../connectors/content-enrichment.js";
 import { listUnderstandingSourceDefinitions } from "../../../user-context/sources/catalog.js";
 //#region src/gateway/hono/routes/context-sources.ts

package/dist/src/gateway/hono/routes/devices.js

@@ -25,7 +25,7 @@ const refreshRequestSchema = z.strictObject({
 	requestId: z.string().uuid(),
 	nextRefreshToken: z.string().min(80).max(256),
 	signature: z.string().min(1).max(256),
-	requestProofVersion: z.literal(1).optional()
+	requestProofVersion: z.literal(1)
 });
 const pairingProbeSchema = z.strictObject({ pairingId: z.string().uuid() });
 const pairingSetupSchema = z.strictObject({ targetKind: devicePairingTargetKindSchema });
@@ -71,7 +71,7 @@ function registerDeviceAuthPublicRoutes(app, options) {
 				requestId: parsed.data.requestId,
 				nonce: parsed.data.nonce,
 				expiresAt: Date.now() + 3e4,
-				requestProofVersion: parsed.data.requestProofVersion ?? 0,
+				requestProofVersion: parsed.data.requestProofVersion,
 				tokens
 			})).toString("base64url");
 			return c.json({

package/dist/src/gateway/hono/routes/home.js

@@ -3,7 +3,6 @@ import { init_src } from "../../../../packages/gateway-contract/src/index.js";
 import { acknowledgeHomeAttention } from "../../../storage/sqlite/home-attention-repository.js";
 import { decideConnectorApproval } from "../../../storage/sqlite/connector-repository.js";
 import { init_sqlite } from "../../../storage/sqlite/index.js";
-import { listGatewayAgents } from "../../agents-admin.js";
 import { HomeQueryService, buildHomeWorkbench, decisionFromTask } from "../../../tasks/home-query-service.js";
 import { resumeApprovedConnectorAction } from "../../../connectors/approval-resume.js";
 import { HomeOpportunityActionError, HomeOpportunityNotFoundError } from "../../../home-intelligence/application-service.js";
@@ -16,7 +15,7 @@ function registerHomeRoutes(authenticated, deps) {
 	const home = new HomeQueryService(service, (locale) => service.homeIntelligence.getAdvisor(locale));
 	authenticated.get("/api/home", async (c) => {
 		const locale = c.req.query("locale");
-		return c.json(await home.getSnapshot(locale));
+		return c.json(await home.getSnapshot(locale, c.req.query("attention") === "all"));
 	});
 	authenticated.get("/api/home/advisor/metrics", (c) => {
 		const rawSince = c.req.query("since");
@@ -129,7 +128,7 @@ function registerHomeRoutes(authenticated, deps) {
 	});
 	authenticated.post("/api/home/attention/acknowledge", deps.strictRateLimitMiddleware, async (c) => {
 		const body = await c.req.json().catch(() => ({}));
-		const kind = body.kind === "automation_run" || body.kind === "workflow_run" ? body.kind : void 0;
+		const kind = body.kind === "automation_run" ? body.kind : void 0;
 		const runId = typeof body.runId === "string" ? body.runId.trim() : "";
 		if (!kind || !runId) return c.json({
 			ok: false,
@@ -143,7 +142,7 @@ function registerHomeRoutes(authenticated, deps) {
 	});
 	authenticated.post("/api/home/attention/retry", deps.strictRateLimitMiddleware, async (c) => {
 		const body = await c.req.json().catch(() => ({}));
-		const kind = body.kind === "automation_run" || body.kind === "workflow_run" ? body.kind : void 0;
+		const kind = body.kind === "automation_run" ? body.kind : void 0;
 		const runId = typeof body.runId === "string" ? body.runId.trim() : "";
 		if (!kind || !runId) return c.json({
 			ok: false,
@@ -162,22 +161,6 @@ function registerHomeRoutes(authenticated, deps) {
 				error: error instanceof Error ? error.message : "Failed to retry automation"
 			}, 400);
 		}
-		const agents = await listGatewayAgents();
-		const result = await service.createWorkflowRunService().retryWorkflowRun({
-			agentId: agents.defaultId,
-			runId
-		});
-		if (result.ok === false) return c.json({
-			ok: false,
-			error: result.message,
-			code: result.code
-		}, result.httpStatus);
-		acknowledgeHomeAttention(kind, runId);
-		return c.json({
-			ok: true,
-			runId: result.runId,
-			conversationId: result.conversationId
-		}, 202);
 	});
 }
 //#endregion

package/dist/src/gateway/hono/routes/lazy-bundles.js

@@ -305,14 +305,6 @@ const AUTHENTICATED_LAZY_ROUTE_BUNDLES = [
 			return { register: registerHomeRoutes };
 		}
 	},
-	{
-		id: "workflows",
-		match: (path) => startsWithAny(path, ["/api/workflows"]),
-		load: async () => {
-			const { registerWorkflowRoutes } = await import("./workflows.js");
-			return { register: registerWorkflowRoutes };
-		}
-	},
 	{
 		id: "logs",
 		match: (path) => startsWithAny(path, ["/api/logs"]),

package/dist/src/gateway/hono/routes/memory-learning.js

@@ -4,9 +4,9 @@ import { init_session_repository } from "../../../storage/sqlite/session-reposit
 import { getSessionConfig, init_config_repository } from "../../../storage/sqlite/config-repository.js";
 import { init_config, resolveKnowledgeReadPolicy } from "../../../user-context/config.js";
 import { bindOwnerIdentity } from "../../../user-context/identity-bindings.js";
+import { enqueueConversationLearning, learningStatus } from "../../../memory-learning/repository.js";
 import { canUseKnowledge, knowledgeExclusion } from "../../../knowledge-memory/usage-policy.js";
 import { getKnowledgeItem } from "../../../knowledge-memory/repository.js";
-import { enqueueConversationLearning, learningStatus } from "../../../memory-learning/repository.js";
 import "../../../knowledge-memory/index.js";
 import { resolveEffectiveAgentProfileForSession } from "../../../config/agent-profile.js";
 //#region src/gateway/hono/routes/memory-learning.ts

package/dist/src/gateway/hono/routes/personal-agent.js

@@ -2,8 +2,8 @@ import { getDevice, init_device_access_repository } from "../../../storage/sqlit
 import { getPersonalRequest, init_request_repository, listPersonalRequests } from "../../../personal-agent/request-repository.js";
 import { getPersonalAgent } from "../../../personal-agent/repository.js";
 import { TaskOriginRepository } from "../../../tasks/task-origin-repository.js";
-import { writeAgentAvatarFromBase64 } from "../../agents-admin.js";
 import { cancelPersonalRequest, personalRequestSnapshot, publishPersonalRequest } from "../../../personal-agent/request-service.js";
+import { writeAgentAvatarFromBase64 } from "../../agents-admin.js";
 import { getGatewayPrincipal } from "../../security/gateway-principal.js";
 import { PersonalOnboardingDraftSchema, PersonalOnboardingStepSchema, finishPersonalWelcome, getPersonalOnboarding, savePersonalOnboarding } from "../../../personal-agent/onboarding.js";
 import { PersonalAppearanceSchema, createOrResumePersonalAgent, ensurePersonalConversationVisibility, listPersonalModels, patchPersonalProfile, refreshPersonalDelegationGuidance } from "../../../personal-agent/service.js";

package/dist/src/gateway/hono/routes/projects.js

@@ -1,4 +1,3 @@
-import { getSqliteDatabase } from "../../../storage/sqlite/transaction.js";
 import { ProductReadContracts, ProjectDeleteOutputSchema, ProjectMilestoneDeleteOutputSchema, ProjectMilestoneOutputSchema, ProjectMutationOutputSchema, ProjectResolveWorkspaceOutputSchema, ProjectUpdateOutputSchema } from "../../../../packages/gateway-contract/src/capabilities.js";
 import { init_src } from "../../../../packages/gateway-contract/src/index.js";
 import { TaskRepository } from "../../../tasks/task-repository.js";
@@ -102,19 +101,6 @@ function buildSessionSummaryKnowledgeContent(conversationId, explicitSummary) {
 	}).filter(Boolean);
 	return lines.length > 0 ? [`Session summary for ${conversationId}:`, ...lines].join("\n") : `Session summary for ${conversationId}: no transcript content available.`;
 }
-function listFailedProjectWorkflowRuns(projectId, limit = 5) {
-	return getSqliteDatabase().prepare(`SELECT run_id, definition_id, status, created_at_ms, error_message
-       FROM workflow_runs
-       WHERE project_id = ? AND status IN ('failed', 'timeout', 'cancelled')
-       ORDER BY created_at_ms DESC
-       LIMIT ?`).all(projectId, Math.max(1, Math.min(20, Math.floor(limit)))).map((row) => ({
-		runId: row.run_id,
-		definitionId: row.definition_id,
-		status: row.status,
-		createdAt: row.created_at_ms,
-		errorMessage: row.error_message ?? void 0
-	}));
-}
 function buildProjectDigestKnowledgeContent(input) {
 	const lines = [
 		`Project digest: ${input.projectName}`,
@@ -286,8 +272,6 @@ function registerProjectsRoutes(authenticated, deps) {
 					updatedAt: task.updatedAt
 				};
 			}),
-			recentWorkflowRuns: project.recentWorkflowRuns,
-			failedWorkflowRuns: listFailedProjectWorkflowRuns(project.id),
 			knowledgeItems: listKnowledgeItems({
 				statuses: ["active"],
 				limit: 500

package/dist/src/gateway/hono/routes/session-input-handler.d.ts

@@ -136,7 +136,7 @@ export declare function submitSessionInput(c: Context, deps: AuthenticatedRouteD
                     channel: string;
                 } | {
                     type: "system";
-                    source: "automation" | "cli" | "workflow" | "heartbeat" | "internal" | "task_update";
+                    source: "automation" | "cli" | "task" | "heartbeat" | "internal" | "task_update";
                 };
                 position: number;
                 targetRunId?: string;
@@ -295,7 +295,7 @@ export declare function replaceLatestSessionTurn(c: Context, deps: Authenticated
                     channel: string;
                 } | {
                     type: "system";
-                    source: "automation" | "cli" | "workflow" | "heartbeat" | "internal" | "task_update";
+                    source: "automation" | "cli" | "task" | "heartbeat" | "internal" | "task_update";
                 };
                 position: number;
                 targetRunId?: string;

package/dist/src/gateway/hono/routes/sessions.js

@@ -23,8 +23,6 @@ init_sidebar_layout_repository();
 const log = createGatewayRouteLogger("Sessions");
 const SESSION_TYPES = new Set([
 	"chat",
-	"workflow-run",
-	"workflow-subagent",
 	"cron",
 	"heartbeat"
 ]);
@@ -970,7 +968,6 @@ function registerSessionsRoutes(authenticated, deps) {
 	});
 	authenticated.get("/api/subagents/:key", async (c) => {
 		const key = c.req.param("key");
-		if ((await service.sessions.getSession(key))?.sessionType !== "workflow-subagent") return c.json({ error: "Not a subagent session" }, 400);
 		const includeRaw = c.req.query("include") ?? "";
 		const includeSet = new Set(includeRaw.split(",").map((s) => s.trim()).filter(Boolean));
 		const session = await service.sessions.getSession(key, {

package/dist/src/gateway/hono/routes/user-model-refresh.js

@@ -1,8 +1,8 @@
 import { listConnectorLearningJobs } from "../../../storage/sqlite/connector-learning-repository.js";
 import { getConnectorAccount } from "../../../storage/sqlite/connector-account-repository.js";
 import { init_sqlite } from "../../../storage/sqlite/index.js";
-import { getConnectorUnderstandingSourceRun } from "../../../user-context/sources/repository.js";
 import { getWorkDiscoveryRun } from "../../../work-discovery/repository.js";
+import { getConnectorUnderstandingSourceRun } from "../../../user-context/sources/repository.js";
 import { isLocalUnderstandingSourceId } from "../../../user-context/sources/local-source-contract.js";
 import { normalizeUnderstandingSourceItems } from "../../../work-discovery/service.js";
 import { UnderstandingRefreshService } from "../../../user-context/sources/refresh-service.js";

package/dist/src/gateway/hono/routes/user-model.js

@@ -1,7 +1,6 @@
 import { init_transaction, runSqliteWriteTransaction } from "../../../storage/sqlite/transaction.js";
 import { createCollaborationRule, getCollaborationRule, init_collaboration_rule_repository, listCollaborationRules, setCollaborationRuleStatus } from "../../../storage/sqlite/collaboration-rule-repository.js";
 import { getActiveUnderstandingConsent } from "../../../user-context/sources/consent-repository.js";
-import { listUnderstandingSourceGrants } from "../../../user-context/sources/repository.js";
 import { KnowledgeReviewConflictError, deleteKnowledgeItem, getKnowledgeItem, listKnowledgeItems, reviewKnowledgeItem, searchKnowledgeItems } from "../../../knowledge-memory/repository.js";
 import "../../../knowledge-memory/index.js";
 import { createPriorityWindow, createUserGoal, listPriorityWindows, listUserGoals, setUserGoalStatus, updatePriorityWindow, updateUserGoal } from "../../../user-model/goals.js";
@@ -15,6 +14,7 @@ import "../../../user-model/index.js";
 import { listMemoryMaintenanceRuns } from "../../../memory-maintenance/service.js";
 import "../../../memory-maintenance/index.js";
 import { getExecutionContextAudit, recordExecutionContextFeedback } from "../../../agent/context/audit.js";
+import { listUnderstandingSourceGrants } from "../../../user-context/sources/repository.js";
 import { registerMemoryLearningRoutes } from "./memory-learning.js";
 import { userInfo } from "node:os";
 //#region src/gateway/hono/routes/user-model.ts

package/dist/src/gateway/index.js

@@ -3,7 +3,6 @@ import { buildDefaultCorsOrigins, init_host, isAllInterfacesHost, isLoopbackHost
 import { isGatewayStrictSecurityEnabled } from "./rate-limit/env-flags.js";
 import { init_rate_limit } from "./rate-limit/index.js";
 import { defaultGatewayBindMode, isContainerEnvironment, resolveGatewayBindHost, resolveGatewayBindHostSync, resolveGatewayBindMode, resolveGatewayEffectiveHost } from "../config/gateway-bind.js";
-import { GatewayLockError, acquireGatewayLock } from "./lock.js";
 import { assertGatewayAuthConfigured, extractToken, resolveGatewayAuth, validateToken } from "./auth.js";
 import { resolveGatewayListenHost, resolveGatewayListenPlan } from "./listen.js";
 import { assertGatewayRuntimeConfig } from "./runtime-config.js";
@@ -11,6 +10,7 @@ import { restartGatewayProcessWithFreshPid } from "./respawn.js";
 import { GatewayService } from "./service.js";
 import { createHonoApp } from "./hono/app.js";
 import { GatewayServer } from "./server.js";
+import { GatewayLockError, acquireGatewayLock } from "./lock.js";
 import { runGatewayLoop } from "./run-loop.js";
 import { checkPortAvailable, forceFreePortAndWait, listPortListeners, parseLsofOutput } from "./ports.js";
 import { apiError, apiOk } from "./protocol.js";

package/dist/src/gateway/run-loop.js

@@ -1,9 +1,9 @@
-import { acquireGatewayLock } from "./lock.js";
 import { loadConfig } from "../config/loader.js";
-import { runBootstrapMigrationsSync } from "../migrations/runner.js";
 import "../config/index.js";
 import { isRestartEnabled } from "../config/commands.flags.js";
 import { restartGatewayProcessWithFreshPid } from "./respawn.js";
+import { acquireGatewayLock } from "./lock.js";
+import { runBootstrapMigrationsSync } from "../migrations/runner.js";
 import { consumeGatewayRestartIntentSync, consumeGatewaySigusr1RestartAuthorization, isGatewaySigusr1RestartExternallyAllowed, resetGatewayRestartStateForInProcessRestart, scheduleGatewaySigusr1Restart, setGatewaySigusr1RestartPolicy } from "../infra/restart.js";
 //#region src/gateway/run-loop.ts
 /**

package/dist/src/gateway/security/device-request-proof.js

@@ -105,7 +105,7 @@ function verifyDeviceConnectionProof(principalId, ticket, path, header) {
 	}
 	if (!device) return !header;
 	if (device.revokedAt !== void 0) return false;
-	if (!device.requestProofVersion && !header) return true;
+	if (device.requestProofVersion !== 1) return false;
 	const proof = parseRequestProof(header);
 	if (!proof || Math.abs(Date.now() - proof.timestamp) > 12e4 || proof.digest !== proofDigest("")) return false;
 	const message = requestProofMessage({

package/dist/src/gateway/security/gateway-scopes.js

@@ -36,7 +36,6 @@ function requiredGatewayScope(method, path) {
 	if (method === "POST" && path === "/api/automations/simulate") return "automations.read";
 	if (method === "POST" && /^\/api\/notes\/[^/]+\/ai\/edit$/.test(path)) return "workspace.read";
 	if (path.startsWith("/api/automations") || path.startsWith("/api/automation-runs")) return methodScope(method, "automations.read", "automations.write");
-	if (path.startsWith("/api/workflows")) return methodScope(method, "automations.read", "automations.write");
 	if (path === "/api/voice/selection" || path === "/api/voice/catalog/refresh") return "voice.configure";
 	if (path.startsWith("/api/voice") || path.startsWith("/api/media") || path.startsWith("/api/clarifications")) return "sessions.write";
 	if (path.startsWith("/api/commands") || path.startsWith("/api/skills")) return methodScope(method, "agents.read", "gateway.admin");

package/dist/src/gateway/service/active-execution.d.ts

@@ -1,5 +1,5 @@
 import type { TurnOrigin } from '@xopcai/endpoint-tools-protocol';
-export type ActiveExecutionKind = 'chat' | 'side-chat' | 'task' | 'workflow' | 'automation';
+export type ActiveExecutionKind = 'chat' | 'side-chat' | 'task' | 'automation';
 export type ActiveExecutionInitiator = 'user' | 'background';
 export type ActiveExecution = {
     conversationId: string;

package/dist/src/gateway/service/active-execution.js

@@ -2,7 +2,7 @@
 function describeActiveExecution(input) {
 	const { origin } = input;
 	const background = origin.type === "system" && (origin.source === "automation" || origin.source === "heartbeat" || origin.source === "internal" || origin.source === "task_update");
-	const kind = input.kind ?? (origin.type === "system" && origin.source === "automation" ? "automation" : origin.type === "system" && origin.source === "workflow" ? "workflow" : input.taskRunId ? "task" : "chat");
+	const kind = input.kind ?? (origin.type === "system" && origin.source === "automation" ? "automation" : origin.type === "system" && origin.source === "task" ? "task" : input.taskRunId ? "task" : "chat");
 	return {
 		conversationId: input.conversationId,
 		runId: input.runId,

package/dist/src/gateway/service/agent-runner.js

@@ -345,7 +345,7 @@ var GatewayAgentRunner = class {
 			attachments: userTurn.attachments,
 			origin: {
 				type: "system",
-				source: "workflow"
+				source: "task"
 			}
 		});
 		if (accepted.ok === false) throw new Error(`Scheduled session input was rejected: ${accepted.code}`);

package/dist/src/gateway/service/session-input-coordinator.d.ts

@@ -78,7 +78,7 @@ export declare class SessionInputCoordinator {
             channel: string;
         } | {
             type: "system";
-            source: "automation" | "cli" | "workflow" | "heartbeat" | "internal" | "task_update";
+            source: "automation" | "cli" | "task" | "heartbeat" | "internal" | "task_update";
         };
     }>;
     dispatchAcceptedInput(conversationId: string, inputId: string): Promise<void>;

package/dist/src/gateway/service/sessions-api.d.ts

@@ -23,7 +23,7 @@ export declare class GatewaySessionsApi {
     private readonly opts;
     constructor(opts: GatewaySessionsApiOptions);
     listSessions(query?: SessionListQuery): Promise<import("../../session/types.js").PaginatedResult<import("../../session/types.js").SessionMetadata>>;
-    /** List conversations whose stored type is workflow-subagent. */
+    /** List active executions. */
     listSubagents(query?: SessionListQuery): Promise<import("../../session/types.js").PaginatedResult<import("../../session/types.js").SessionMetadata>>;
     getSession(key: string, options?: {
         includeTranscriptSummary?: boolean;
@@ -104,7 +104,6 @@ export declare class GatewaySessionsApi {
         configVersion?: number;
         model?: string | null;
         activityDetailLevel?: string | null;
-        reasoningLevel?: string | null;
         verboseLevel?: string;
         workingDirectory?: string;
         responseLanguage?: string | null;

package/dist/src/gateway/service/sessions-api.js

@@ -35,7 +35,7 @@ var GatewaySessionsApi = class {
 	listSessions(query) {
 		return this.opts.sessionIndex.listSessions(query);
 	}
-	/** List conversations whose stored type is workflow-subagent. */
+	/** List active executions. */
 	listSubagents(query) {
 		return this.opts.sessionIndex.listSubagents(query);
 	}

package/dist/src/gateway/service/task-conversation-query-service.d.ts

@@ -38,10 +38,6 @@ export declare class TaskConversationQueryService {
             sessionType: import("../../session/types.js").SessionType;
             hiddenFromSessionList?: boolean;
             parentConversationId?: string;
-            workflowRunId?: string;
-            workflowDefinitionId?: string;
-            workflowAgentId?: string;
-            workflowAgentLabel?: string;
             transcriptId?: string;
             cwd?: string;
             sessionStartedAt?: string;

package/dist/src/gateway/service/types.d.ts

@@ -25,6 +25,8 @@ export interface GatewayChannelStartupPhase2Metrics {
     onHttpListeningTotalMs: number;
 }
 export interface GatewayServiceConfig {
+    /** Embed a foreground-only Gateway without starting durable task dispatch. */
+    taskDispatchEnabled?: boolean;
     configPath?: string;
     /** CLI `--bind` override for startup security guards. */
     listenBind?: GatewayBindMode;

package/dist/src/gateway/service.d.ts

@@ -6,7 +6,6 @@ import { MessageBus } from '../infra/bus/index.js';
 import { AutomationService, type AutomationEvent } from '../automations/index.js';
 import { DiscussionLiveWorker, DiscussionOrganizerWorker, DiscussionSealer, DiscussionService } from '../discussions/index.js';
 import { NotesService } from '../notes/index.js';
-import { WorkflowRunService } from '../workflows/service/workflow-run-service.js';
 import { ExtensionLoader } from '../extensions/index.js';
 import { SessionIndex } from '../session/index.js';
 import { EphemeralSideChatManager, SideChatPromotionService, SideChatRunService } from './side-chat/index.js';
@@ -69,8 +68,6 @@ export declare class GatewayService {
     private lastChannelConnectDeferSource;
     private readonly readiness;
     private startupTrace;
-    private workflowSessionBridge;
-    private workflowRunServiceInstance;
     private taskAllocationDispatcher;
     private taskRunDispatcher;
     private taskRunDispatchTimer;
@@ -171,7 +168,7 @@ export declare class GatewayService {
             channel: string;
         } | {
             type: "system";
-            source: "automation" | "cli" | "workflow" | "heartbeat" | "internal" | "task_update";
+            source: "automation" | "cli" | "task" | "heartbeat" | "internal" | "task_update";
         };
     }>;
     drainSessionInputs(conversationId: string): Promise<void>;
@@ -353,10 +350,6 @@ export declare class GatewayService {
     private executeSystemAutomationAction;
     get notesServiceInstance(): NotesService;
     get sessionIndexInstance(): SessionIndex;
-    /** Shared workflow run orchestrator + session bridge (one instance per gateway). */
-    createWorkflowRunService(): WorkflowRunService;
-    private reconcileInterruptedWorkflowRuns;
-    private collectWorkflowAgentIds;
     /** Process a message directly through the agent (for CLI mode). */
     processDirect(content: string, conversationId?: string): Promise<string>;
     emit(type: string, payload: unknown): void;