@xopcai/xopc 0.0.413 → 0.0.414

package/dist/src/phone/applications.js

@@ -0,0 +1,49 @@
+import { PhoneError, init_contracts } from "./contracts.js";
+import { SCRCPY_VERSION } from "../runtime-tools/phone-dependency-catalog.js";
+//#region src/phone/applications.ts
+init_contracts();
+const packageName = /^[a-zA-Z]\w*(?:\.\w+)+$/;
+function phoneApplicationsCommand(remote) {
+	return [
+		"env",
+		`CLASSPATH=${remote}`,
+		"app_process",
+		"/",
+		"com.genymobile.scrcpy.Server",
+		SCRCPY_VERSION,
+		"list_apps=true",
+		"video=false",
+		"audio=false",
+		"control=false"
+	];
+}
+/** Parse the pinned scrcpy server's app list, including wrapped long labels. */
+function parsePhoneApplications(raw) {
+	const text = raw.replace(/\u001b\[[\d;]*m/g, "");
+	if (text.length > 1024 * 1024 || !text.includes("List of apps:")) throw new PhoneError("PHONE_APPS_UNAVAILABLE", "Unable to read the phone application list. Check the phone connection and scrcpy dependency.");
+	const apps = /* @__PURE__ */ new Map();
+	let pending;
+	for (const line of text.split(/\r?\n/)) {
+		const entry = /^\s*[*-]\s+(.+)$/.exec(line);
+		if (entry) {
+			const match = /^(.*?)\s+([a-zA-Z]\w*(?:\.\w+)+)$/.exec(entry[1].trim());
+			if (match) {
+				pending = void 0;
+				apps.set(match[2], {
+					packageName: match[2],
+					label: match[1].trim().slice(0, 120) || match[2]
+				});
+			} else pending = entry[1].trim().slice(0, 120);
+		} else if (pending && packageName.test(line.trim())) {
+			apps.set(line.trim(), {
+				packageName: line.trim(),
+				label: pending
+			});
+			pending = void 0;
+		}
+		if (apps.size > 500) throw new PhoneError("PHONE_APPS_LIMIT", "Phone application list exceeds 500 entries");
+	}
+	return [...apps.values()].sort((a, b) => a.label.localeCompare(b.label));
+}
+//#endregion
+export { parsePhoneApplications, phoneApplicationsCommand };

package/dist/src/phone/cloud-adb.d.ts

@@ -30,5 +30,6 @@ export declare class CloudAdbConnection {
     client(): Promise<Adb>;
     private open;
     command(_path: string, args: string[], signal?: AbortSignal, timeout?: number): Promise<Buffer>;
+    applications(signal: AbortSignal): Promise<import("./contracts.js").PhoneApplication[]>;
     driver(): AdbPhoneDriver;
 }

package/dist/src/phone/cloud-adb.js

@@ -1,5 +1,7 @@
 import { init_paths, resolveCredentialsDir } from "../config/paths.js";
 import { PhoneError, init_contracts } from "./contracts.js";
+import { readScrcpyServer } from "./scrcpy-assets.js";
+import { parsePhoneApplications, phoneApplicationsCommand } from "./applications.js";
 import { AdbPhoneDriver } from "./adb-driver.js";
 import { join } from "node:path";
 import { createPrivateKey, randomUUID } from "node:crypto";
@@ -66,7 +68,7 @@ var PhoneCloudKeyStore = class {
 	}
 };
 /** Direct daemon transport never starts or modifies the host ADB server. */
-var CloudAdbConnection = class {
+var CloudAdbConnection = class CloudAdbConnection {
 	socket;
 	adb;
 	pending;
@@ -215,8 +217,56 @@ var CloudAdbConnection = class {
 			this.idle.unref();
 		}
 	}
+	async applications(signal) {
+		const combined = AbortSignal.any([signal, AbortSignal.timeout(3e4)]);
+		const abort = () => this.close();
+		combined.addEventListener("abort", abort, { once: true });
+		const remote = `/data/local/tmp/xopc-apps-${randomUUID()}.jar`;
+		try {
+			combined.throwIfAborted();
+			const binary = await readScrcpyServer();
+			const adb = await this.client();
+			combined.throwIfAborted();
+			const sync = await adb.sync();
+			try {
+				await sync.write({
+					filename: remote,
+					permission: 384,
+					file: new ReadableStream({ start(controller) {
+						controller.enqueue(binary);
+						controller.close();
+					} })
+				});
+			} finally {
+				await sync.dispose();
+			}
+			return parsePhoneApplications((await this.command("", [
+				"-s",
+				this.endpoint,
+				"shell",
+				...phoneApplicationsCommand(remote)
+			], combined)).toString());
+		} finally {
+			combined.removeEventListener("abort", abort);
+			await this.command("", [
+				"-s",
+				this.endpoint,
+				"shell",
+				"rm",
+				"-f",
+				remote
+			], void 0, 3e3).catch(() => {});
+		}
+	}
 	driver() {
-		return new AdbPhoneDriver("", this.command.bind(this), false);
+		return new AdbPhoneDriver("", this.command.bind(this), false, async (signal) => {
+			const listing = new CloudAdbConnection(this.endpoint, Buffer.from(this.key));
+			try {
+				return await listing.applications(signal);
+			} finally {
+				listing.dispose();
+			}
+		});
 	}
 };
 //#endregion

package/dist/src/phone/cloud-phones.js

@@ -90,7 +90,8 @@ var CloudPhones = class {
 				serial: draft.endpoint,
 				name,
 				enabled: true,
-				allowedApps: ["com.android.settings"],
+				appAccess: "all",
+				allowedApps: [],
 				connection: {
 					kind: "aliyun-adb",
 					endpoint: draft.endpoint,

package/dist/src/phone/cloud-scrcpy.js

@@ -1,6 +1,7 @@
 import { PhoneError, init_contracts } from "./contracts.js";
 import { SCRCPY_VERSION } from "../runtime-tools/phone-dependency-catalog.js";
-import { ScrcpyProvider, ScrcpyVideoParser, readScrcpyServer } from "./scrcpy.js";
+import { readScrcpyServer } from "./scrcpy-assets.js";
+import { ScrcpyProvider, ScrcpyVideoParser } from "./scrcpy.js";
 import { CloudAdbConnection } from "./cloud-adb.js";
 import { randomBytes } from "node:crypto";
 import { setTimeout as setTimeout$1 } from "node:timers/promises";

package/dist/src/phone/contracts.d.ts

@@ -25,7 +25,11 @@ export declare const PhoneDeviceSchema: z.ZodObject<{
     serial: z.ZodString;
     name: z.ZodString;
     enabled: z.ZodDefault<z.ZodBoolean>;
-    allowedApps: z.ZodArray<z.ZodString>;
+    appAccess: z.ZodOptional<z.ZodEnum<{
+        all: "all";
+        selected: "selected";
+    }>>;
+    allowedApps: z.ZodDefault<z.ZodArray<z.ZodString>>;
     connection: z.ZodOptional<z.ZodObject<{
         kind: z.ZodLiteral<"aliyun-adb">;
         endpoint: z.ZodString;
@@ -35,6 +39,10 @@ export declare const PhoneDeviceSchema: z.ZodObject<{
     revision: z.ZodNumber;
 }, z.core.$strict>;
 export type PhoneDevice = z.infer<typeof PhoneDeviceSchema>;
+export type PhoneApplication = {
+    packageName: string;
+    label: string;
+};
 export type DiscoveredPhone = {
     serial: string;
     state: string;

package/dist/src/phone/contracts.js

@@ -20,7 +20,8 @@ var init_contracts = __esmMin((() => {
 		serial: z.string().min(1).max(200),
 		name: z.string().trim().min(1).max(100),
 		enabled: z.boolean().default(true),
-		allowedApps: z.array(z.string().regex(/^[a-zA-Z][\w]*(?:\.[\w]+)+$/)).min(1).max(50),
+		appAccess: z.enum(["all", "selected"]).optional(),
+		allowedApps: z.array(z.string().regex(/^[a-zA-Z][\w]*(?:\.[\w]+)+$/)).max(500).default([]),
 		connection: z.object({
 			kind: z.literal("aliyun-adb"),
 			endpoint: z.string().max(200),

package/dist/src/phone/model-adapter.d.ts

@@ -1,5 +1,6 @@
+import { type PhoneAppAccess } from './app-access.js';
 import type { Config } from '../config/schema.js';
-import { type PhoneAction, type PhoneDecision, type PhoneObservation } from './contracts.js';
+import { type PhoneAction, type PhoneApplication, type PhoneDecision, type PhoneObservation } from './contracts.js';
 export declare function phoneModelProfile(model: unknown): "autoglm-phone-v1" | "structured-phone-v1";
 export declare function validatePhoneModelChange(next: {
     primary: string;
@@ -7,11 +8,16 @@ export declare function validatePhoneModelChange(next: {
     primary: string;
 } | null): void;
 /** Parse only a function name and literal keyword arguments; model text is never executable code. */
-export declare function parseAutoGlmResponse(raw: string, allowedApps: string[]): PhoneDecision;
+export declare function parseAutoGlmResponse(raw: string, allowedApps: string[], options?: {
+    appAccess?: PhoneAppAccess['appAccess'];
+    applications?: PhoneApplication[];
+}): PhoneDecision;
 export interface PhonePrediction {
     goal: string;
     observation: PhoneObservation;
     allowedApps: string[];
+    appAccess?: PhoneAppAccess['appAccess'];
+    applications?: PhoneApplication[];
     history: PhoneAction['type'][];
     scenario?: 'settings-about';
 }

package/dist/src/phone/model-adapter.js

@@ -1,5 +1,6 @@
 import { PhoneDecisionSchema, PhoneError, PhoneModelMetadataSchema, init_contracts } from "./contracts.js";
 import { getApiKey, init_providers, resolveModel } from "../providers/index.js";
+import { phoneAllowsApp } from "./app-access.js";
 import { z } from "zod";
 //#region src/phone/model-adapter.ts
 init_providers();
@@ -17,7 +18,7 @@ function validatePhoneModelChange(next, previous) {
 	throw new PhoneError("PHONE_MODEL_INCOMPATIBLE", "Select a model with a supported Phone Use profile");
 }
 /** Parse only a function name and literal keyword arguments; model text is never executable code. */
-function parseAutoGlmResponse(raw, allowedApps) {
+function parseAutoGlmResponse(raw, allowedApps, options) {
 	let text = raw.trim();
 	if (text.includes("<answer>")) text = text.split("<answer>").at(-1).replace(/<\/answer>[\s\S]*$/, "").trim();
 	else {
@@ -133,8 +134,15 @@ function parseAutoGlmResponse(raw, allowedApps) {
 	let action;
 	switch (args.action) {
 		case "Launch": {
-			const app = args.app === "设置" || args.app === "Settings" ? "com.android.settings" : args.app;
-			if (typeof app !== "string" || !allowedApps.includes(app)) throw new PhoneError("PHONE_APP_DENIED", "Model requested an application outside the device allowlist");
+			let app = args.app === "设置" || args.app === "Settings" ? "com.android.settings" : args.app;
+			if (typeof app === "string" && !/^[a-zA-Z]\w*(?:\.\w+)+$/.test(app)) {
+				const matches = options?.applications?.filter((candidate) => candidate.label.toLocaleLowerCase() === String(app).toLocaleLowerCase()) ?? [];
+				if (matches.length === 1) app = matches[0].packageName;
+			}
+			if (typeof app !== "string" || !/^[a-zA-Z]\w*(?:\.\w+)+$/.test(app) || !phoneAllowsApp({
+				allowedApps,
+				appAccess: options?.appAccess ?? "selected"
+			}, app)) throw new PhoneError("PHONE_APP_DENIED", "Model requested an application outside the device allowlist");
 			action = {
 				type: "launch",
 				package: app
@@ -314,7 +322,9 @@ async function createPhoneModel(modelRef, config, agentId) {
 						type: "text",
 						text: JSON.stringify({
 							goal: input.goal,
+							appAccess: input.appAccess ?? "selected",
 							allowedApps: input.allowedApps,
+							applications: input.applications?.slice(0, 100),
 							currentApp: input.observation.package,
 							recentActions: input.history.slice(-6)
 						})
@@ -328,7 +338,7 @@ async function createPhoneModel(modelRef, config, agentId) {
 		const payload = z.object({ choices: z.array(z.object({ message: z.object({ content: z.string() }) })).min(1) }).safeParse(await boundedJson(response));
 		if (!payload.success) throw new PhoneError("PHONE_MODEL_PROTOCOL", "Phone model returned no action");
 		const text = payload.data.choices[0].message.content;
-		if (profile === "autoglm-phone-v1") return parseAutoGlmResponse(text, input.allowedApps);
+		if (profile === "autoglm-phone-v1") return parseAutoGlmResponse(text, input.allowedApps, input);
 		try {
 			return PhoneDecisionSchema.parse(JSON.parse(text));
 		} catch {

package/dist/src/phone/repository.js

@@ -1,11 +1,12 @@
 import { PhoneDeviceSchema, PhoneError, init_contracts } from "./contracts.js";
+import { normalizePhoneAppAccess } from "./app-access.js";
 import { DurableState } from "../storage/sqlite/durable-state.js";
 import { randomUUID } from "node:crypto";
 //#region src/phone/repository.ts
 init_contracts();
 function parseDevice(value) {
 	const { agentIds: _removed, ...device } = value;
-	return PhoneDeviceSchema.parse(device);
+	return normalizePhoneAppAccess(PhoneDeviceSchema.parse(device));
 }
 /** Small settings and latest metadata-only reports; pixels and input text are never stored. */
 var PhoneRepository = class {
@@ -24,12 +25,12 @@ var PhoneRepository = class {
 	save(input, id) {
 		const previous = id ? this.get(id) : void 0;
 		if (this.list().some((device) => device.serial === input.serial && device.id !== id)) throw new PhoneError("PHONE_DEVICE_DUPLICATE", "This ADB device is already registered");
-		const next = PhoneDeviceSchema.parse({
+		const next = normalizePhoneAppAccess(PhoneDeviceSchema.parse({
 			...input,
 			id: id ?? randomUUID(),
 			createdAt: previous?.createdAt ?? Date.now(),
 			revision: (previous?.revision ?? 0) + 1
-		});
+		}));
 		this.devices.set(next.id, next);
 		return next;
 	}

package/dist/src/phone/runtime.d.ts

@@ -5,7 +5,7 @@ import { CloudPhones } from './cloud-phones.js';
 import { type PhoneDriver } from './adb-driver.js';
 import { createPhoneModel } from './model-adapter.js';
 import { PhoneRepository } from './repository.js';
-import { type PhoneAction, type PhoneDevice, type PhoneInput, type PhoneObservation, type PhoneReport } from './contracts.js';
+import { type PhoneAction, type PhoneDevice, type PhoneInput, type PhoneApplication, type PhoneObservation, type PhoneReport } from './contracts.js';
 type ExecutionContext = {
     config: Config;
     agentId: string;
@@ -26,6 +26,10 @@ export declare class PhoneRuntime {
     constructor(repository?: PhoneRepository, driverFactory?: (path: string) => PhoneDriver, modelFactory?: typeof createPhoneModel, interactiveFactory?: (adb: string, serial: string, failed: () => void) => PhoneInteractiveProvider);
     driverFor(device: PhoneDevice, config: Config): Promise<PhoneDriver>;
     discover(config: Config, signal?: AbortSignal): Promise<import("./contracts.js").DiscoveredPhone[]>;
+    applications(input: {
+        deviceId?: string;
+        serial?: string;
+    }, config: Config, signal: AbortSignal): Promise<PhoneApplication[]>;
     preview(id: string, config: Config, signal: AbortSignal): Promise<PhoneObservation>;
     previewSession(owner: string, context: ExecutionContext, signal: AbortSignal): Promise<PhoneObservation>;
     reports(): PhoneReport[];
@@ -50,6 +54,7 @@ export declare class PhoneRuntime {
         report: PhoneReport;
         ownControl: boolean;
         allowedApps: string[];
+        appAccess: "all" | "selected";
         frame: {
             seq: number;
             capturedAt: number;

package/dist/src/phone/runtime.js

@@ -2,6 +2,7 @@ import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
 import { MOCK_PHONE_MODEL, PhoneError, PhoneInputSchema, init_contracts } from "./contracts.js";
 import { resolveEffectiveAgentConfigForAgent } from "../config/agent-profile.js";
+import { phoneAllowsApp, phoneAppAccess } from "./app-access.js";
 import { PhoneFrameCache, PhoneOperationBudget } from "./live-state.js";
 import { PhoneInteractiveSession } from "./interactive-session.js";
 import { AdbPhoneDriver, resolveAdbPath } from "./adb-driver.js";
@@ -40,13 +41,30 @@ var PhoneRuntime = class {
 	async discover(config, signal) {
 		return this.driverFactory(resolveAdbPath(config.phone.adbPath)).discover(signal);
 	}
+	async applications(input, config, signal) {
+		let driver;
+		let serial;
+		if (input.deviceId) {
+			const device = this.repository.get(input.deviceId);
+			if (!device.enabled) throw new PhoneError("PHONE_DEVICE_DENIED", "Phone access is disabled", 403);
+			driver = await this.driverFor(device, config);
+			serial = device.serial;
+		} else {
+			const found = (await this.discover(config, signal)).find((device) => device.serial === input.serial && device.state === "device");
+			if (!found) throw new PhoneError("PHONE_DEVICE_OFFLINE", "Choose a connected and authorized phone");
+			driver = this.driverFactory(resolveAdbPath(config.phone.adbPath));
+			serial = found.serial;
+		}
+		if (!driver.applications) throw new PhoneError("PHONE_APPS_UNAVAILABLE", "The phone provider cannot list applications");
+		return driver.applications(serial, signal);
+	}
 	async preview(id, config, signal) {
 		const device = this.repository.get(id);
 		if (!device.enabled) throw new PhoneError("PHONE_DEVICE_DENIED", "Phone access is disabled", 403);
 		const lease = this.repository.acquire(device.serial);
 		try {
 			const observation = await (await this.driverFor(device, config)).observe(device.serial, signal);
-			if (!device.allowedApps.includes(observation.package)) {
+			if (!phoneAllowsApp(device, observation.package)) {
 				observation.frame.fill(0);
 				throw new PhoneError("PHONE_APP_DENIED", "Open an allowed app before previewing the screen");
 			}
@@ -91,7 +109,7 @@ var PhoneRuntime = class {
 		this.repository.renew(session.device.serial, session.lease);
 	}
 	allowedScreen(session, observation) {
-		if (!session.device.allowedApps.includes(observation.package)) throw new PhoneError("PHONE_APP_DENIED", "The foreground application is outside this phone session allowlist. Open an allowed app or reopen with appPackage.");
+		if (!phoneAllowsApp(session.device, observation.package)) throw new PhoneError("PHONE_APP_DENIED", "The foreground application is outside this phone session allowlist. Open an allowed app or reopen with appPackage.");
 	}
 	async execute(owner, raw, context, signal = new AbortController().signal) {
 		const input = PhoneInputSchema.parse(raw);
@@ -132,6 +150,12 @@ var PhoneRuntime = class {
 				try {
 					const adapter = await this.modelFactory(modelRef, context.config, context.agentId);
 					signal.throwIfAborted();
+					let applications = [];
+					if (input.mode === "control" && modelRef !== "phone-mock/settings-about" && driver.applications) try {
+						applications = await driver.applications(device.serial, signal);
+					} catch {
+						signal.throwIfAborted();
+					}
 					const now = Date.now();
 					const session = {
 						device,
@@ -143,6 +167,7 @@ var PhoneRuntime = class {
 						modelRef,
 						adbPath,
 						context,
+						applications,
 						frames: new PhoneFrameCache(),
 						io: Promise.resolve(),
 						ioBusy: false,
@@ -174,7 +199,7 @@ var PhoneRuntime = class {
 					};
 					this.sessions.set(owner, session);
 					if (input.appPackage) {
-						if (input.mode !== "control" || !device.allowedApps.includes(input.appPackage)) throw new PhoneError("PHONE_APP_DENIED", "Launching requires control mode and an allowed application");
+						if (input.mode !== "control" || !phoneAllowsApp(device, input.appPackage)) throw new PhoneError("PHONE_APP_DENIED", "Launching requires control mode and an allowed application");
 						const epoch = session.report.controlEpoch;
 						const observation = await this.observe(session, signal);
 						try {
@@ -291,6 +316,8 @@ var PhoneRuntime = class {
 						goal: input.goal,
 						observation,
 						allowedApps: session.device.allowedApps,
+						appAccess: phoneAppAccess(session.device),
+						applications: session.applications.filter((app) => phoneAllowsApp(session.device, app.packageName)),
 						history: session.report.steps.map((step) => step.action),
 						scenario: input.scenario
 					}, AbortSignal.any([signal, session.prediction.signal]));
@@ -416,8 +443,8 @@ var PhoneRuntime = class {
 			if (session.human && Date.now() > (session.humanExpiresAt ?? 0)) throw new PhoneError("PHONE_CONTROL_REQUIRED", "Manual control expired", 409);
 			if (!session.human && session.report.actions - (session.report.humanActions ?? 0) >= context.config.phone.maxActionsPerSession) throw new PhoneError("PHONE_ACTION_LIMIT", "Phone action limit reached");
 			if (session.human && (session.report.humanActions ?? 0) >= 1200) throw new PhoneError("PHONE_ACTION_LIMIT", "Manual input limit reached; reopen the session");
-			if (action.type === "launch" && !session.device.allowedApps.includes(action.package)) throw new PhoneError("PHONE_APP_DENIED", "Application is not authorized");
-			if (action.type === "home") throw new PhoneError("PHONE_APP_DENIED", "Home leaves the app allowlist");
+			if (action.type === "launch" && !phoneAllowsApp(session.device, action.package)) throw new PhoneError("PHONE_APP_DENIED", "Application is not authorized");
+			if (action.type === "home" && phoneAppAccess(session.device) !== "all") throw new PhoneError("PHONE_APP_DENIED", "Home leaves the app allowlist");
 			if (action.type === "typeText" && !observation.elements.some((node) => node.focused && node.editable && !node.password)) throw new PhoneError("PHONE_INPUT_NOT_FOCUSED", "Focus a non-password editable field before typing", 409);
 			const step = {
 				action: action.type,
@@ -497,7 +524,7 @@ var PhoneRuntime = class {
 		return this.io(session, async () => {
 			signal.throwIfAborted();
 			const observation = await (forText && session.driver.observeForText ? session.driver.observeForText : session.driver.observe).call(session.driver, session.device.serial, signal);
-			if (session.device.allowedApps.includes(observation.package)) {
+			if (phoneAllowsApp(session.device, observation.package)) {
 				if (Date.now() - session.viewedAt < 3e4 && !terminal.has(session.report.status)) session.frames.set(observation);
 			} else session.frames.clear();
 			return observation;
@@ -597,6 +624,7 @@ var PhoneRuntime = class {
 			report: structuredClone(session.report),
 			ownControl: Boolean(session.human === client),
 			allowedApps: [...session.device.allowedApps],
+			appAccess: phoneAppAccess(session.device),
 			frame: session.frames.get() ? {
 				seq: session.frames.get().seq,
 				capturedAt: session.frames.get().capturedAt
@@ -631,7 +659,7 @@ var PhoneRuntime = class {
 				if (terminal.has(session.report.status)) throw new PhoneError("PHONE_VIDEO_ENDED", "Phone session ended", 409);
 				this.guard(session, session.context);
 				const app = await provider.foreground(AbortSignal.timeout(2e3));
-				if (!session.device.allowedApps.includes(app)) throw new PhoneError("PHONE_APP_DENIED", "Current page is outside the authorized applications", 403);
+				if (!phoneAllowsApp(session.device, app)) throw new PhoneError("PHONE_APP_DENIED", "Current page is outside the authorized applications", 403);
 				session.viewedAt = Date.now();
 			}, (client, epoch) => {
 				if (terminal.has(session.report.status) || session.report.handoff !== "idle" || session.report.controlOwner !== "human" || session.human !== client || session.report.controlEpoch !== epoch || Date.now() > (session.humanExpiresAt ?? 0)) throw new PhoneError("PHONE_CONTROL_CHANGED", "Manual control is no longer available", 409);
@@ -811,7 +839,7 @@ var PhoneRuntime = class {
 				for (const wake of session.wake) wake();
 			} else if (input.op === "recover") {
 				if (session.human !== client || Date.now() > (session.humanExpiresAt ?? 0)) throw new PhoneError("PHONE_CONTROL_REQUIRED", "Take over the phone first", 409);
-				if (input.action?.type !== "launch" || !session.device.allowedApps.includes(input.action.package)) throw new PhoneError("PHONE_APP_DENIED", "Choose an authorized recovery application", 403);
+				if (input.action?.type !== "launch" || !phoneAllowsApp(session.device, input.action.package)) throw new PhoneError("PHONE_APP_DENIED", "Choose an authorized recovery application", 403);
 				const observation = await this.io(session, () => session.driver.capture ? session.driver.capture(session.device.serial, session.controller.signal) : session.driver.observe(session.device.serial, session.controller.signal));
 				try {
 					if (!await this.dispatch(session, input.action, observation, context, session.controller.signal, input.epoch, true)) throw new PhoneError("PHONE_CONTROL_CHANGED", "Control changed before recovery", 409);

package/dist/src/phone/scrcpy-assets.d.ts

@@ -0,0 +1,4 @@
+import { SCRCPY_SHA256, SCRCPY_VERSION } from '../runtime-tools/phone-dependency-catalog.js';
+export { SCRCPY_SHA256, SCRCPY_VERSION };
+export declare const scrcpyServerPath: (stateDir?: string) => string;
+export declare function readScrcpyServer(): Promise<Buffer>;

package/dist/src/phone/scrcpy-assets.js

@@ -0,0 +1,16 @@
+import { PhoneError, init_contracts } from "./contracts.js";
+import { SCRCPY_SHA256, SCRCPY_VERSION, managedScrcpyServerPath } from "../runtime-tools/phone-dependency-catalog.js";
+import { createHash } from "node:crypto";
+import { readFile } from "node:fs/promises";
+//#region src/phone/scrcpy-assets.ts
+init_contracts();
+const scrcpyServerPath = managedScrcpyServerPath;
+async function readScrcpyServer() {
+	const binary = await readFile(scrcpyServerPath()).catch(() => {
+		throw new PhoneError("PHONE_VIDEO_SETUP_REQUIRED", "Install scrcpy server in Settings → Phone Use → Dependencies");
+	});
+	if (createHash("sha256").update(binary).digest("hex") !== "7e70323ba7f259649dd4acce97ac4fefbae8102b2c6d91e2e7be613fd5354be0") throw new PhoneError("PHONE_VIDEO_HASH_MISMATCH", "Phone video server checksum mismatch");
+	return binary;
+}
+//#endregion
+export { SCRCPY_SHA256, SCRCPY_VERSION, readScrcpyServer, scrcpyServerPath };

package/dist/src/phone/scrcpy.d.ts

@@ -1,7 +1,5 @@
-import { SCRCPY_SHA256, SCRCPY_VERSION } from '../runtime-tools/phone-dependency-catalog.js';
 import type { PhoneInteractiveProvider, PhonePointer, PhoneVideoGeometry, PhoneVideoPacket } from './live-provider.js';
-export { SCRCPY_VERSION, SCRCPY_SHA256 };
-export declare const scrcpyServerPath: (stateDir?: string) => string;
+export { readScrcpyServer, scrcpyServerPath, SCRCPY_VERSION, SCRCPY_SHA256 } from './scrcpy-assets.js';
 /** The pinned server sends codec metadata followed by bounded, length-prefixed packets. */
 export declare class ScrcpyVideoParser {
     private buffer;
@@ -9,7 +7,6 @@ export declare class ScrcpyVideoParser {
     push(chunk: Buffer, packet: (packet: PhoneVideoPacket) => void): void;
 }
 export declare function scrcpyTouch(phase: PhonePointer['phase'], x: number, y: number, width: number, height: number): Buffer;
-export declare function readScrcpyServer(): Promise<Buffer>;
 /** Local and cloud transports share geometry, gesture sequencing and revocation. */
 export declare abstract class ScrcpyProvider implements PhoneInteractiveProvider {
     private onFailure;

package/dist/src/phone/scrcpy.js

@@ -1,15 +1,14 @@
 import { PhoneError, init_contracts } from "./contracts.js";
 import { spawnPhoneCommand } from "../process/phone-process.js";
-import { SCRCPY_SHA256, SCRCPY_VERSION, managedScrcpyServerPath } from "../runtime-tools/phone-dependency-catalog.js";
+import { SCRCPY_SHA256, SCRCPY_VERSION } from "../runtime-tools/phone-dependency-catalog.js";
+import { readScrcpyServer, scrcpyServerPath } from "./scrcpy-assets.js";
 import { AdbPhoneDriver, runAdb } from "./adb-driver.js";
-import { createHash, randomBytes } from "node:crypto";
-import { readFile } from "node:fs/promises";
+import { randomBytes } from "node:crypto";
 import { connect } from "node:net";
 import { setTimeout as setTimeout$1 } from "node:timers/promises";
 import { h264ParseConfiguration } from "@yume-chan/scrcpy";
 //#region src/phone/scrcpy.ts
 init_contracts();
-const scrcpyServerPath = managedScrcpyServerPath;
 /** The pinned server sends codec metadata followed by bounded, length-prefixed packets. */
 var ScrcpyVideoParser = class {
 	buffer = Buffer.alloc(0);
@@ -55,13 +54,6 @@ function scrcpyTouch(phase, x, y, width, height) {
 	buffer.writeUInt16BE(phase === "up" || phase === "cancel" ? 0 : 65535, 22);
 	return buffer;
 }
-async function readScrcpyServer() {
-	const binary = await readFile(scrcpyServerPath()).catch(() => {
-		throw new PhoneError("PHONE_VIDEO_SETUP_REQUIRED", "Install scrcpy server in Settings → Phone Use → Dependencies");
-	});
-	if (createHash("sha256").update(binary).digest("hex") !== "7e70323ba7f259649dd4acce97ac4fefbae8102b2c6d91e2e7be613fd5354be0") throw new PhoneError("PHONE_VIDEO_HASH_MISMATCH", "Phone video server checksum mismatch");
-	return binary;
-}
 /** Local and cloud transports share geometry, gesture sequencing and revocation. */
 var ScrcpyProvider = class {
 	descriptor = {

package/dist/src/runtime-tools/archive.js

@@ -1,8 +1,8 @@
 import { RuntimeError } from "./errors.js";
 import { isAbsolute, join, posix, relative, resolve } from "node:path";
 import { spawn } from "node:child_process";
-import AdmZip from "adm-zip";
 import { lstat, mkdir, readdir, readlink, rename, rm, stat } from "node:fs/promises";
+import AdmZip from "adm-zip";
 //#region src/runtime-tools/archive.ts
 const MAX_ARCHIVE_ENTRIES = 5e4;
 const MAX_TAR_OUTPUT_BYTES = 16 * 1024 * 1024;

package/dist/src/tasks/capabilities/read.js

@@ -2,10 +2,10 @@ import { ProductReadContracts } from "../../../packages/gateway-contract/src/cap
 import { init_src } from "../../../packages/gateway-contract/src/index.js";
 import { TaskRepository, init_task_repository } from "../task-repository.js";
 import { TaskRunRepository, init_task_run_repository } from "../task-run-repository.js";
-import { TaskReadModelProjector } from "../task-read-model-projector.js";
-import { TaskConversationRepository } from "../task-conversation-repository.js";
 import { CapabilityError } from "../../capabilities/runtime/errors.js";
 import { defineReadCapability } from "../../capabilities/runtime/dispatcher.js";
+import { TaskReadModelProjector } from "../task-read-model-projector.js";
+import { TaskConversationRepository } from "../task-conversation-repository.js";
 import { TaskContextRepository } from "../task-context-repository.js";
 import { TaskDependencyService } from "../task-dependency-service.js";
 import { TaskCriterionReviewRepository } from "../task-criterion-review-repository.js";

package/dist/src/tasks/capabilities/write.js

@@ -2,9 +2,9 @@ import { TaskCommandRequestSchema, TaskCreateRequestSchema, TaskDetailResponseSc
 import { init_src } from "../../../packages/gateway-contract/src/index.js";
 import { TaskRepository, init_task_repository } from "../task-repository.js";
 import { TaskRunRepository, init_task_run_repository } from "../task-run-repository.js";
-import { resolveTaskLocale } from "../task-language.js";
 import { CapabilityError } from "../../capabilities/runtime/errors.js";
 import { defineAtomicCapability } from "../../capabilities/runtime/dispatcher.js";
+import { resolveTaskLocale } from "../task-language.js";
 import { resolveProjectAgentId } from "../../projects/project-agent.js";
 import { resolveResponseLanguageForSession } from "../../agent/prompt/response-language.js";
 import { TaskApplicationService } from "../task-application-service.js";

package/dist/src/tui/backends/embedded-backend.js

@@ -10,6 +10,7 @@ import { getSessionMetadata } from "../../storage/sqlite/session-read-repository
 import { init_sqlite } from "../../storage/sqlite/index.js";
 import { normalizeAgentId } from "../../agent-catalog/id.js";
 import { init_agent_scope, listAgentEntries } from "../../agent/agent-scope.js";
+import { AgentCatalogService } from "../../agent-catalog/service.js";
 import { init_paths } from "../../config/paths.js";
 import { getAgentDefaultModelRef, init_schema } from "../../config/schema.js";
 import { resolveEffectiveAgentProfile } from "../../config/agent-profile.js";
@@ -22,7 +23,6 @@ import { buildSessionTimeline } from "../../session/transcript-outline.js";
 import { transcriptRowsToClientHistory } from "../../session/client-history.js";
 import { createCreateShareTool, isShareToolAvailable } from "../../agent/tools/create-share-tool.js";
 import { evictEmbeddedSessionRunner } from "../../agent/embedded/session-runner.js";
-import { AgentCatalogService } from "../../agent-catalog/service.js";
 import { SessionIndex } from "../../session/manager.js";
 import "../../session/index.js";
 import { parseModelRef } from "../../agent/models/selection.js";

package/dist/src/voice/realtime/persona-context.js

@@ -1,6 +1,6 @@
 import { init_agent_scope, resolveAgentProfileDir } from "../../agent/agent-scope.js";
-import { resolveEffectiveAgentProfileForSession } from "../../config/agent-profile.js";
 import { DEFAULT_SOUL_FILENAME } from "../../agent/context/workspace.js";
+import { resolveEffectiveAgentProfileForSession } from "../../config/agent-profile.js";
 import { loadProfileBootstrapFiles } from "../../agent/bootstrap/load-bootstrap-files.js";
 import { join } from "node:path";
 import { statSync } from "node:fs";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xopcai/xopc",
-  "version": "0.0.413",
+  "version": "0.0.414",
   "description": "Local-first personal AI with Ada, task delegation, files, projects and automations. Use cloud or local models.",
   "type": "module",
   "main": "dist/src/index.js",
@@ -172,10 +172,10 @@
     "xlsx": "file:web/vendor/xlsx-0.20.3.tgz",
     "@xopcai/browser-control-contract": "0.1.0",
     "@xopcai/computer-control-contract": "0.1.0",
-    "@xopcai/endpoint-tools-protocol": "0.0.0",
-    "@xopcai/gateway-contract": "0.0.0",
     "@xopcai/endpoint-tools-client": "0.0.0",
+    "@xopcai/endpoint-tools-protocol": "0.0.0",
     "@xopcai/image-providers": "0.1.0",
+    "@xopcai/gateway-contract": "0.0.0",
     "@xopcai/realtime-client": "0.0.0",
     "@xopcai/realtime-protocol": "0.0.0"
   },