@xopcai/xopc 0.0.415 → 0.0.417

package/dist/src/connectors/learning-coordinator.js

@@ -5,18 +5,17 @@ import { getConnectorAccount, reconcileConnectorAccount } from "../storage/sqlit
 import { getConnectorInstallation, listConnectorConnections, upsertConnectorConnection } from "../storage/sqlite/connector-repository.js";
 import { pruneBoundedKnowledgeSourceItems } from "../storage/sqlite/knowledge-repository.js";
 import { getConnectorSyncPolicyForConnection } from "../storage/sqlite/connector-sync-policy-repository.js";
-import { init_sqlite } from "../storage/sqlite/index.js";
+import "../storage/sqlite/index.js";
 import { getActiveUnderstandingConsent, grantUnderstandingConsent } from "../user-context/sources/consent-repository.js";
 import { connectorIdentityKey, normalizeConnectorIdentity } from "./connector-identity.js";
 import { ComposioSessionsAdapter } from "./composio-sessions.js";
 import { buildConnectorLearningArguments, getConnectorLearningPlan } from "./learning-recipes.js";
 import { getConnectorDefinition } from "./catalog.js";
 import { getConnectorUnderstandingSourceRun, getOrCreateConnectorUnderstandingSourceRun, getUnderstandingSourceGrant, listUnderstandingSourceGrants, updateUnderstandingSourceGrantCheckpoint, updateUnderstandingSourceRun, upsertUnderstandingSourceGrant } from "../user-context/sources/repository.js";
-import { deriveConnectedSourceUnderstanding } from "./connected-source-understanding.js";
 import { ingestComposioConnectedSource } from "./connected-source-ingestion.js";
+import { deriveConnectedSourceUnderstanding } from "./connected-source-understanding.js";
 import { listConnectedContentCandidates, readConnectedContent } from "./content-enrichment.js";
 //#region src/connectors/learning-coordinator.ts
-init_sqlite();
 init_logger();
 const log = createLogger("ConnectorLearning");
 const CONNECTED_ACCOUNT_UNAVAILABLE = "connected_account_unavailable";

package/dist/src/connectors/runtime-adapter-registry.js

@@ -1,6 +1,6 @@
 import { isXopcDatabaseOpen } from "../storage/sqlite/connection.js";
 import { deleteConnectorInstallation, getConnectorInstallation, upsertConnectorInstallation } from "../storage/sqlite/connector-repository.js";
-import { init_sqlite } from "../storage/sqlite/index.js";
+import "../storage/sqlite/index.js";
 import { getCliAdapter } from "./cli/adapterRegistry.js";
 import { assertComposioAccessConfigured } from "./composio-sessions.js";
 import { saveConnectorSecrets } from "./secret-store.js";
@@ -10,7 +10,6 @@ import { listConnectorInstances } from "./instances.js";
 import { installCli } from "./cli/installer.js";
 import { stopCliInstance } from "./cli/lifecycle.js";
 //#region src/connectors/runtime-adapter-registry.ts
-init_sqlite();
 const adapters = /* @__PURE__ */ new Map();
 function registerConnectorRuntimeAdapter(adapter) {
 	if (adapters.has(adapter.type)) throw new Error(`Connector runtime adapter is already registered: ${adapter.type}`);

package/dist/src/daemon/constants.js

@@ -1,10 +1,10 @@
-import { __esmMin } from "../../_virtual/_rolldown/runtime.js";
 import os from "node:os";
 import path from "node:path";
 //#region src/daemon/constants.ts
 /**
 * Daemon Constants - Service labels, paths, and configuration values
 */
+const SERVICE_BASE_LABEL = "ai.xopc.gateway";
 function resolveGatewayLaunchAgentLabel(profile) {
 	const normalized = normalizeProfile(profile);
 	return normalized ? `${SERVICE_BASE_LABEL}.${normalized}` : SERVICE_BASE_LABEL;
@@ -39,17 +39,12 @@ function normalizeProfile(profile) {
 	if (!trimmed || trimmed.toLowerCase() === "default") return null;
 	return trimmed;
 }
-var SERVICE_BASE_LABEL, DEFAULT_GATEWAY_PORT, LAUNCH_AGENT_THROTTLE_INTERVAL_SECONDS, LAUNCH_AGENT_EXIT_TIMEOUT_SECONDS, SYSTEMD_RESTART_SEC, SYSTEMD_START_LIMIT_BURST, SYSTEMD_START_LIMIT_INTERVAL_SEC, SERVICE_VERSION_ENV_KEY;
-var init_constants = __esmMin((() => {
-	SERVICE_BASE_LABEL = "ai.xopc.gateway";
-	DEFAULT_GATEWAY_PORT = 18790;
-	LAUNCH_AGENT_THROTTLE_INTERVAL_SECONDS = 10;
-	LAUNCH_AGENT_EXIT_TIMEOUT_SECONDS = 20;
-	SYSTEMD_RESTART_SEC = 5;
-	SYSTEMD_START_LIMIT_BURST = 5;
-	SYSTEMD_START_LIMIT_INTERVAL_SEC = 60;
-	SERVICE_VERSION_ENV_KEY = "XOPC_SERVICE_VERSION";
-}));
+const DEFAULT_GATEWAY_PORT = 18790;
+const LAUNCH_AGENT_THROTTLE_INTERVAL_SECONDS = 10;
+const LAUNCH_AGENT_EXIT_TIMEOUT_SECONDS = 20;
+const SYSTEMD_RESTART_SEC = 5;
+const SYSTEMD_START_LIMIT_BURST = 5;
+const SYSTEMD_START_LIMIT_INTERVAL_SEC = 60;
+const SERVICE_VERSION_ENV_KEY = "XOPC_SERVICE_VERSION";
 //#endregion
-init_constants();
-export { DEFAULT_GATEWAY_PORT, LAUNCH_AGENT_EXIT_TIMEOUT_SECONDS, LAUNCH_AGENT_THROTTLE_INTERVAL_SECONDS, SERVICE_VERSION_ENV_KEY, SYSTEMD_RESTART_SEC, SYSTEMD_START_LIMIT_BURST, SYSTEMD_START_LIMIT_INTERVAL_SEC, formatGatewayServiceDescription, init_constants, resolveGatewayLaunchAgentLabel, resolveGatewaySystemdServiceName, resolveGatewayWindowsTaskName, resolveLaunchAgentPlistPath, resolveSystemdUnitPath };
+export { DEFAULT_GATEWAY_PORT, LAUNCH_AGENT_EXIT_TIMEOUT_SECONDS, LAUNCH_AGENT_THROTTLE_INTERVAL_SECONDS, SERVICE_VERSION_ENV_KEY, SYSTEMD_RESTART_SEC, SYSTEMD_START_LIMIT_BURST, SYSTEMD_START_LIMIT_INTERVAL_SEC, formatGatewayServiceDescription, resolveGatewayLaunchAgentLabel, resolveGatewaySystemdServiceName, resolveGatewayWindowsTaskName, resolveLaunchAgentPlistPath, resolveSystemdUnitPath };

package/dist/src/daemon/index.js

@@ -1,7 +1,4 @@
-import { DEFAULT_GATEWAY_PORT, LAUNCH_AGENT_EXIT_TIMEOUT_SECONDS, LAUNCH_AGENT_THROTTLE_INTERVAL_SECONDS, SERVICE_VERSION_ENV_KEY, SYSTEMD_RESTART_SEC, SYSTEMD_START_LIMIT_BURST, SYSTEMD_START_LIMIT_INTERVAL_SEC, formatGatewayServiceDescription, init_constants, resolveGatewayLaunchAgentLabel, resolveGatewaySystemdServiceName, resolveGatewayWindowsTaskName, resolveLaunchAgentPlistPath, resolveSystemdUnitPath } from "./constants.js";
+import { DEFAULT_GATEWAY_PORT, LAUNCH_AGENT_EXIT_TIMEOUT_SECONDS, LAUNCH_AGENT_THROTTLE_INTERVAL_SECONDS, SERVICE_VERSION_ENV_KEY, SYSTEMD_RESTART_SEC, SYSTEMD_START_LIMIT_BURST, SYSTEMD_START_LIMIT_INTERVAL_SEC, formatGatewayServiceDescription, resolveGatewayLaunchAgentLabel, resolveGatewaySystemdServiceName, resolveGatewayWindowsTaskName, resolveLaunchAgentPlistPath, resolveSystemdUnitPath } from "./constants.js";
 import { describeGatewayServiceRestart, getPlatformName, getServiceLabel, isDaemonAvailable, isDaemonAvailableAsync, resolveGatewayService, startGatewayService } from "./service.js";
 import { buildGatewayInstallArgs, buildGatewayInstallPlan, validateInstallPlanProgram } from "./install-plan.js";
-//#region src/daemon/index.ts
-init_constants();
-//#endregion
 export { DEFAULT_GATEWAY_PORT, LAUNCH_AGENT_EXIT_TIMEOUT_SECONDS, LAUNCH_AGENT_THROTTLE_INTERVAL_SECONDS, SERVICE_VERSION_ENV_KEY, SYSTEMD_RESTART_SEC, SYSTEMD_START_LIMIT_BURST, SYSTEMD_START_LIMIT_INTERVAL_SEC, buildGatewayInstallArgs, buildGatewayInstallPlan, describeGatewayServiceRestart, formatGatewayServiceDescription, getPlatformName, getServiceLabel, isDaemonAvailable, isDaemonAvailableAsync, resolveGatewayLaunchAgentLabel, resolveGatewayService, resolveGatewaySystemdServiceName, resolveGatewayWindowsTaskName, resolveLaunchAgentPlistPath, resolveSystemdUnitPath, startGatewayService, validateInstallPlanProgram };

package/dist/src/daemon/install-plan.js

@@ -1,7 +1,7 @@
 import { PACKAGE_VERSION, init_package_version } from "../package-version.js";
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
-import { SERVICE_VERSION_ENV_KEY, formatGatewayServiceDescription, init_constants } from "./constants.js";
+import { SERVICE_VERSION_ENV_KEY, formatGatewayServiceDescription } from "./constants.js";
 import { homedir } from "node:os";
 import path from "node:path";
 import { existsSync } from "node:fs";
@@ -14,7 +14,6 @@ import { fileURLToPath } from "node:url";
 * supports binary runtime detection, and --foreground arg passing.
 */
 init_logger();
-init_constants();
 init_package_version();
 const log = createLogger("InstallPlan");
 function resolveDefaultConfigPath() {

package/dist/src/daemon/launchd.js

@@ -1,6 +1,6 @@
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
-import { init_constants, resolveGatewayLaunchAgentLabel, resolveLaunchAgentPlistPath as resolveLaunchAgentPlistPath$1 } from "./constants.js";
+import { resolveGatewayLaunchAgentLabel, resolveLaunchAgentPlistPath as resolveLaunchAgentPlistPath$1 } from "./constants.js";
 import os from "node:os";
 import path from "node:path";
 import { existsSync } from "node:fs";
@@ -18,7 +18,6 @@ import { mkdir, readFile, rm, writeFile } from "node:fs/promises";
 * - launchctl kickstart -k for restart
 */
 init_logger();
-init_constants();
 const log = createLogger("LaunchdService");
 function resolveGuiDomain() {
 	return `gui/${typeof process.getuid === "function" ? process.getuid() : 501}`;

package/dist/src/daemon/schtasks.js

@@ -1,6 +1,6 @@
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
-import { init_constants, resolveGatewayWindowsTaskName } from "./constants.js";
+import { resolveGatewayWindowsTaskName } from "./constants.js";
 import os from "node:os";
 import path from "node:path";
 import { mkdirSync, readFileSync, rmSync, writeFileSync } from "node:fs";
@@ -15,7 +15,6 @@ import { spawn, spawnSync } from "node:child_process";
 * - Proper start/stop/restart lifecycle
 */
 init_logger();
-init_constants();
 const log = createLogger("SchtasksService");
 function resolveProfileFromEnv(env) {
 	return env?.XOPC_PROFILE?.trim() || void 0;

package/dist/src/daemon/service-audit.js

@@ -1,5 +1,5 @@
 import { PACKAGE_VERSION, init_package_version } from "../package-version.js";
-import { SERVICE_VERSION_ENV_KEY, init_constants } from "./constants.js";
+import { SERVICE_VERSION_ENV_KEY } from "./constants.js";
 import { existsSync } from "node:fs";
 import { readFile } from "node:fs/promises";
 //#region src/daemon/service-audit.ts
@@ -14,7 +14,6 @@ import { readFile } from "node:fs/promises";
 * - Platform-specific configuration issues
 */
 init_package_version();
-init_constants();
 /** Audit installed service configuration against current config and version */
 async function auditGatewayServiceConfig(params) {
 	const { service, env = process.env, expectedToken, expectedPort, currentVersion = PACKAGE_VERSION } = params;

package/dist/src/daemon/service.js

@@ -1,7 +1,7 @@
 import { PACKAGE_VERSION, init_package_version } from "../package-version.js";
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
-import { SERVICE_VERSION_ENV_KEY, init_constants } from "./constants.js";
+import { SERVICE_VERSION_ENV_KEY } from "./constants.js";
 import { existsSync } from "node:fs";
 //#region src/daemon/service.ts
 /**
@@ -14,7 +14,6 @@ import { existsSync } from "node:fs";
 */
 init_logger();
 init_package_version();
-init_constants();
 const log = createLogger("DaemonService");
 let _isDaemonAvailable = null;
 async function resolveGatewayService() {

package/dist/src/daemon/systemd.js

@@ -1,6 +1,6 @@
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
-import { init_constants, resolveGatewaySystemdServiceName, resolveSystemdUnitPath } from "./constants.js";
+import { resolveGatewaySystemdServiceName, resolveSystemdUnitPath } from "./constants.js";
 import os from "node:os";
 import path from "node:path";
 import { existsSync } from "node:fs";
@@ -17,7 +17,6 @@ import { access, constants as constants$1, mkdir, readFile, rm, writeFile } from
 * - network-online.target dependency
 */
 init_logger();
-init_constants();
 const log = createLogger("SystemdService");
 function resolveProfileFromEnv(env) {
 	return env?.XOPC_PROFILE?.trim() || void 0;

package/dist/src/discussions/analyzer.d.ts

@@ -4,9 +4,9 @@ import type { Config } from '../config/schema.js';
 import type { DiscussionOrganization, DiscussionTranscriptSegment, DiscussionTemplate } from './types.js';
 declare const LiveEnrichmentSchema: z.ZodObject<{
     title: z.ZodString;
-    projectCandidateId: z.ZodPreprocess<z.ZodOptional<z.ZodString>>;
-    projectConfidence: z.ZodPreprocess<z.ZodOptional<z.ZodNumber>>;
-    projectAlternativeConfidence: z.ZodPreprocess<z.ZodOptional<z.ZodNumber>>;
+    projectCandidateId: z.ZodPreprocess<z.ZodOptional<z.ZodString>, unknown>;
+    projectConfidence: z.ZodPreprocess<z.ZodOptional<z.ZodNumber>, unknown>;
+    projectAlternativeConfidence: z.ZodPreprocess<z.ZodOptional<z.ZodNumber>, unknown>;
 }, z.core.$strip>;
 export declare function normalizeDiscussionOrganization(value: unknown): DiscussionOrganization;
 /** Every input character is covered, including an unusually long individual segment. */

package/dist/src/endpoint-tools/runtime.js

@@ -5,7 +5,7 @@ import { deleteEndpointSessionBinding, getEndpointSessionBinding, setEndpointSes
 import { deleteBrowserTabBindingsByEndpoint } from "../storage/sqlite/browser-tab-binding-repository.js";
 import { bindEndpointPrincipal, getEndpointPrincipal, touchEndpointPrincipal } from "../storage/sqlite/endpoint-principal-repository.js";
 import { finishEndpointToolInvocationAudit, startEndpointToolInvocationAudit } from "../storage/sqlite/endpoint-tool-invocation-repository.js";
-import { init_sqlite } from "../storage/sqlite/index.js";
+import "../storage/sqlite/index.js";
 import { init_paths } from "../config/paths.js";
 import { EndpointToolPolicy } from "./policy.js";
 import { EndpointInvocationService } from "./invocation-service.js";
@@ -18,7 +18,6 @@ import { EndpointUploadService } from "./upload-service.js";
 import { join } from "node:path";
 //#region src/endpoint-tools/runtime.ts
 init_paths();
-init_sqlite();
 init_logger();
 const log = createLogger("EndpointTools");
 const MAX_MESSAGE_CLOCK_SKEW_MS = 6e4;

package/dist/src/execution-environments/local-worktree-manager.js

@@ -8,8 +8,8 @@ import { assertManagedWorktreePath, assertNoNestedRegisteredWorktrees, readDirec
 import { dirname, resolve } from "node:path";
 import { existsSync } from "node:fs";
 import { randomUUID } from "node:crypto";
-import { mkdir, rm, stat } from "node:fs/promises";
 import lockfile from "proper-lockfile";
+import { mkdir, rm, stat } from "node:fs/promises";
 //#region src/execution-environments/local-worktree-manager.ts
 init_logger();
 const log = createLogger("ExecutionEnvironment:LocalWorktree");

package/dist/src/execution-environments/subject.js

@@ -1,8 +1,7 @@
 import { isXopcDatabaseOpen } from "../storage/sqlite/connection.js";
-import { init_sqlite } from "../storage/sqlite/index.js";
+import "../storage/sqlite/index.js";
 import { ExecutionEnvironmentStore } from "./store.js";
 //#region src/execution-environments/subject.ts
-init_sqlite();
 function getExecutionEnvironmentForSession(conversationId) {
 	if (!isXopcDatabaseOpen()) return void 0;
 	const store = new ExecutionEnvironmentStore();

package/dist/src/extensions/agent-plugins/branding.js

@@ -1,4 +1,5 @@
-import { containedPath } from "./validation.js";
+import { containedPath } from "./contained-path.js";
+import "./validation.js";
 import { extname, resolve } from "node:path";
 import { readFileSync, statSync } from "node:fs";
 import { createHash } from "node:crypto";

package/dist/src/extensions/agent-plugins/cli-authorization.js

@@ -1,5 +1,6 @@
 import { parsePluginAuthorizationCheck, pluginAuthorizations, safeAuthorizationUrl } from "./setup-contract.js";
-import { containedPath, expandPluginVariables, resolvePluginCwd, validatePluginServer } from "./validation.js";
+import { containedPath } from "./contained-path.js";
+import { expandPluginVariables, resolvePluginCwd, validatePluginServer } from "./validation.js";
 import { spawnProcess } from "../../process/run-process.js";
 import { CredentialResolver, init_credentials } from "../../auth/credentials.js";
 import { expandUserConfig, readPluginUserConfig } from "./user-config.js";

package/dist/src/extensions/agent-plugins/contained-path.d.ts

@@ -0,0 +1 @@
+export declare function containedPath(root: string, path: string): string;

package/dist/src/extensions/agent-plugins/contained-path.js

@@ -0,0 +1,29 @@
+import { dirname, isAbsolute, relative, resolve } from "node:path";
+import { existsSync, lstatSync, realpathSync } from "node:fs";
+//#region src/extensions/agent-plugins/contained-path.ts
+function containedPath(root, path) {
+	const base = resolve(root);
+	const target = resolve(path);
+	const rel = relative(base, target);
+	if (rel === ".." || rel.startsWith(`..${process.platform === "win32" ? "\\" : "/"}`) || isAbsolute(rel)) throw new Error("Path escapes package boundary");
+	let ancestor = target;
+	while (!existsSync(ancestor)) {
+		try {
+			lstatSync(ancestor);
+			throw new Error("Broken package symlink");
+		} catch (error) {
+			if (error.code !== "ENOENT") throw error;
+		}
+		if (dirname(ancestor) === ancestor) break;
+		ancestor = dirname(ancestor);
+	}
+	let baseAncestor = base;
+	while (!existsSync(baseAncestor)) baseAncestor = dirname(baseAncestor);
+	const canonicalBase = resolve(realpathSync(baseAncestor), relative(baseAncestor, base));
+	const canonicalTarget = resolve(realpathSync(ancestor), relative(ancestor, target));
+	const resolvedRelative = relative(canonicalBase, canonicalTarget);
+	if (resolvedRelative === ".." || resolvedRelative.startsWith("../") || resolvedRelative.startsWith("..\\") || isAbsolute(resolvedRelative)) throw new Error("Resolved path escapes package boundary");
+	return canonicalTarget;
+}
+//#endregion
+export { containedPath };

package/dist/src/extensions/agent-plugins/mcp-adapter.js

@@ -1,5 +1,6 @@
 import { resolvePluginCapabilityAccess } from "./capability-access.js";
-import { containedPath, expandPluginVariables, pluginServerId, resolvePluginCwd } from "./validation.js";
+import { containedPath } from "./contained-path.js";
+import { expandPluginVariables, pluginServerId, resolvePluginCwd } from "./validation.js";
 import { AgentPluginStore } from "./store.js";
 import { applyPluginAuthBinding, readPluginAuthBinding } from "./auth.js";
 import { expandUserConfig, readPluginUserConfig } from "./user-config.js";

package/dist/src/extensions/agent-plugins/resources.js

@@ -1,5 +1,5 @@
+import { containedPath } from "./contained-path.js";
 import { createPluginSourceFetch } from "./source-http-fetch.js";
-import { containedPath } from "./validation.js";
 import { dirname, join } from "node:path";
 import { existsSync, mkdirSync, readFileSync, readdirSync, renameSync, rmSync, statSync, writeFileSync } from "node:fs";
 import { createHash, randomUUID } from "node:crypto";

package/dist/src/extensions/agent-plugins/skill-catalog.js

@@ -1,6 +1,7 @@
-import { parseFrontmatter } from "../../markdown/frontmatter.js";
-import { containedPath } from "./validation.js";
+import { containedPath } from "./contained-path.js";
+import "./validation.js";
 import { AgentPluginStore } from "./store.js";
+import { parseFrontmatter } from "../../markdown/frontmatter.js";
 import { createSkillConfigManager } from "../../agent/skills/config.js";
 import { parseSkillLocalizations } from "../../agent/skills/parse-skill-metadata.js";
 import { buildSkillMarkdownPreviewFromRaw } from "../../agent/skills/skill-markdown-preview-from-raw.js";

package/dist/src/extensions/agent-plugins/source-catalog.js

@@ -1,5 +1,5 @@
+import { containedPath } from "./contained-path.js";
 import { PLUGIN_MANIFEST_PATHS } from "./formats.js";
-import { containedPath } from "./validation.js";
 import { runExec } from "../../infra/exec.js";
 import { tmpdir } from "node:os";
 import { join, resolve } from "node:path";

package/dist/src/extensions/agent-plugins/store.js

@@ -3,9 +3,10 @@ import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
 import { init_write_file_atomic, writeTextAtomicSync } from "../../infra/write-file-atomic.js";
 import { computeExtensionDirectoryIntegrity } from "../lockfile.js";
+import { containedPath } from "./contained-path.js";
 import { prunePluginResourceCache } from "./resources.js";
 import { PLUGIN_MANIFEST_PATHS } from "./formats.js";
-import { containedPath, inspectAgentPlugin, pluginName } from "./validation.js";
+import { inspectAgentPlugin, pluginName } from "./validation.js";
 import { pluginSourceKey } from "./source-catalog.js";
 import { tmpdir } from "node:os";
 import { dirname, join, resolve } from "node:path";

package/dist/src/extensions/agent-plugins/validation.d.ts

@@ -1,6 +1,7 @@
 import { pluginResources } from './resources.js';
 import { type PluginLayout } from './formats.js';
 import { z } from 'zod';
+export { containedPath } from './contained-path.js';
 export declare const PLUGIN_SCHEMA = "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json";
 export declare const MCP_SCHEMA = "https://agent-plugins.org/schemas/1.0.0/mcp.schema.json";
 export declare const pluginName: z.ZodString;
@@ -71,10 +72,8 @@ export interface PluginInspection {
     capabilities: string[];
     diagnostics: PluginDiagnostic[];
 }
-export declare function containedPath(root: string, path: string): string;
 export declare function expandPluginVariables(value: string, root: string, data: string): string;
 export declare function resolvePluginCwd(cwd: string | undefined, root: string, data: string): string;
 export declare function validatePluginServer(raw: unknown, root: string, data: string): PluginServer;
 export declare function inspectAgentPlugin(rootDir: string, dataDir?: string, importManifest?: Record<string, unknown>): PluginInspection;
 export declare function pluginServerId(pluginId: string, serverName: string): string;
-export {};

package/dist/src/extensions/agent-plugins/validation.js

@@ -2,14 +2,15 @@ import { pluginAuthorizations, safeAuthorizationUrl } from "./setup-contract.js"
 import { pluginCapabilityAccess } from "./capability-access.js";
 import { normalizePluginMcpServer } from "./mcp-format.js";
 import { McpOAuthConfigSchema, init_schema } from "../../config/schema.js";
+import { containedPath } from "./contained-path.js";
 import { pluginResources } from "./resources.js";
 import { collectPluginSkillFiles, readPluginLayout } from "./formats.js";
-import { dirname, isAbsolute, join, relative, resolve } from "node:path";
+import { dirname, join, resolve } from "node:path";
 import { existsSync, lstatSync, readFileSync, readdirSync, realpathSync, statSync } from "node:fs";
 import { createHash } from "node:crypto";
 import { z } from "zod";
-import yaml from "js-yaml";
 import { validateHeaderName, validateHeaderValue } from "node:http";
+import yaml from "js-yaml";
 //#region src/extensions/agent-plugins/validation.ts
 init_schema();
 const PLUGIN_SCHEMA = "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json";
@@ -53,30 +54,6 @@ const serverSchema = z.discriminatedUnion("type", [z.strictObject({
 		prefix: z.string().optional()
 	}).optional()
 })]);
-function containedPath(root, path) {
-	const base = resolve(root);
-	const target = resolve(path);
-	const rel = relative(base, target);
-	if (rel === ".." || rel.startsWith(`..${process.platform === "win32" ? "\\" : "/"}`) || isAbsolute(rel)) throw new Error("Path escapes package boundary");
-	let ancestor = target;
-	while (!existsSync(ancestor)) {
-		try {
-			lstatSync(ancestor);
-			throw new Error("Broken package symlink");
-		} catch (error) {
-			if (error.code !== "ENOENT") throw error;
-		}
-		if (dirname(ancestor) === ancestor) break;
-		ancestor = dirname(ancestor);
-	}
-	let baseAncestor = base;
-	while (!existsSync(baseAncestor)) baseAncestor = dirname(baseAncestor);
-	const canonicalBase = resolve(realpathSync(baseAncestor), relative(baseAncestor, base));
-	const canonicalTarget = resolve(realpathSync(ancestor), relative(ancestor, target));
-	const resolvedRelative = relative(canonicalBase, canonicalTarget);
-	if (resolvedRelative === ".." || resolvedRelative.startsWith("../") || resolvedRelative.startsWith("..\\") || isAbsolute(resolvedRelative)) throw new Error("Resolved path escapes package boundary");
-	return canonicalTarget;
-}
 function readPackageFile(root, path) {
 	const safe = containedPath(root, path);
 	const stat = statSync(safe);

package/dist/src/gateway/agent-builtin-tools.d.ts

@@ -277,4 +277,4 @@ export declare const GATEWAY_BUILTIN_TOOLS: readonly [{
         readonly zh: "使用已验证的参数执行选定的外部工具。";
     };
 }];
-export declare const GATEWAY_BUILTIN_TOOL_IDS: ("automation" | "find" | "image" | "knowledge_search" | "knowledge_get" | "knowledge_write" | "user_context_search" | "user_context_get" | "user_context_update" | "web_search" | "web_fetch" | "browser_use" | "grep" | "session_search" | "read_file" | "list_dir" | "write_file" | "apply_patch" | "exec_command" | "update_plan" | "todo" | "web_extract" | "clarify" | "xopc_tool_execute" | "tool_manual" | "session_status" | "read_media" | "xopc_tool_search" | "xopc_tool_describe" | "phone_use" | "image_generate" | "skills_list" | "skill_view" | "skill_manage" | "skills_marketplace_search" | "computer_use" | "send_message" | "text_to_speech" | "execute_code" | "send_media" | "create_share" | "memory_maintenance" | "delegate_task" | "skill_install" | "create_desktop_pet")[];
+export declare const GATEWAY_BUILTIN_TOOL_IDS: ("automation" | "find" | "image" | "knowledge_search" | "knowledge_get" | "knowledge_write" | "user_context_search" | "user_context_get" | "user_context_update" | "web_search" | "web_fetch" | "browser_use" | "grep" | "session_search" | "read_file" | "list_dir" | "write_file" | "apply_patch" | "exec_command" | "update_plan" | "todo" | "web_extract" | "clarify" | "xopc_tool_execute" | "tool_manual" | "session_status" | "read_media" | "xopc_tool_search" | "xopc_tool_describe" | "phone_use" | "skill_view" | "skills_list" | "image_generate" | "skill_manage" | "skills_marketplace_search" | "computer_use" | "send_message" | "text_to_speech" | "execute_code" | "send_media" | "create_share" | "memory_maintenance" | "delegate_task" | "skill_install" | "create_desktop_pet")[];

package/dist/src/gateway/agents-admin.js

@@ -1,10 +1,10 @@
 import { normalizeAgentId, validateAgentIdForNewAgent } from "../agent-catalog/id.js";
 import { AgentCatalogRepository, init_repository } from "../agent-catalog/repository.js";
 import { init_agent_scope, listAgentEntries, resolveAgentProfileDir, resolveAgentWorkspaceDir, resolveDefaultAgentId, resolveUserPath } from "../agent/agent-scope.js";
-import { AGENT_PROFILE_MARKDOWN_SYSTEM_FILES, REQUIRED_AGENT_PROFILE_MARKDOWN_FILE_SET } from "../agent/context/workspace.js";
-import { AgentCatalogService } from "../agent-catalog/service.js";
 import { resolveEffectiveAgentProfile } from "../config/agent-profile.js";
+import { AGENT_PROFILE_MARKDOWN_SYSTEM_FILES, REQUIRED_AGENT_PROFILE_MARKDOWN_FILE_SET } from "../agent/context/workspace.js";
 import { isPathUnderWorkspace, resolveWorkspaceSafePath } from "./workspace-editor-path.js";
+import { AgentCatalogService } from "../agent-catalog/service.js";
 import { GATEWAY_BUILTIN_TOOL_IDS } from "./agent-builtin-tools.js";
 import { resolve } from "node:path";
 import { mkdir, readFile, realpath, stat, unlink, writeFile } from "node:fs/promises";

package/dist/src/gateway/client-ip.js

@@ -1,7 +1,6 @@
-import { init_host, isLoopbackHost } from "./host.js";
+import { isLoopbackHost } from "./host.js";
 import net from "node:net";
 //#region src/gateway/client-ip.ts
-init_host();
 function stripIpv6Brackets(value) {
 	if (value.startsWith("[") && value.endsWith("]")) return value.slice(1, -1);
 	return value;

package/dist/src/gateway/file-space-service.js

@@ -1,9 +1,8 @@
-import { init_config_repository, listSessionWorkspaceOverrides } from "../storage/sqlite/config-repository.js";
+import { listSessionWorkspaceOverrides } from "../storage/sqlite/config-repository.js";
 import { effectiveWorkspacePathForSession } from "../session/session-workspace.js";
 import { getProjectForSession } from "../projects/workspace.js";
 import { FileSpaceService } from "../files/file-service.js";
 //#region src/gateway/file-space-service.ts
-init_config_repository();
 const services = /* @__PURE__ */ new WeakMap();
 /** Share the file registry, including session-specific spaces, across gateway routes. */
 function getGatewayFileSpaceService(service) {

package/dist/src/gateway/global-defaults-admin.js

@@ -1,8 +1,8 @@
 import { AgentDefaultsSchema } from "../agent-config/schema.js";
 import { init_agent_config } from "../agent-config/index.js";
 import { AgentCatalogRepository, init_repository } from "../agent-catalog/repository.js";
-import { AgentCatalogService } from "../agent-catalog/service.js";
 import { validatePhoneModelChange } from "../phone/model-adapter.js";
+import { AgentCatalogService } from "../agent-catalog/service.js";
 import { validateComputerModelChange } from "../computer/model-config.js";
 import { GATEWAY_BUILTIN_TOOLS } from "./agent-builtin-tools.js";
 import { isDeepStrictEqual } from "node:util";

package/dist/src/gateway/hono/app.js

@@ -1,7 +1,7 @@
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
-import { init_host, resolveAllowedBrowserOrigins, resolveGatewayServiceListenPort } from "../host.js";
-import { init_device_access_repository, listDevices } from "../../storage/sqlite/device-access-repository.js";
+import { resolveAllowedBrowserOrigins, resolveGatewayServiceListenPort } from "../host.js";
+import { listDevices } from "../../storage/sqlite/device-access-repository.js";
 import { ENDPOINT_MAX_FILE_BYTES, init_src } from "../../../packages/endpoint-tools-protocol/src/index.js";
 import { resolveGatewayEffectiveHost } from "../../config/gateway-bind.js";
 import { loadTunnelState } from "../../tunnel/tunnel-state.js";
@@ -34,8 +34,6 @@ import { getConnInfo } from "@hono/node-server/conninfo";
 //#region src/gateway/hono/app.ts
 init_src();
 init_logger();
-init_host();
-init_device_access_repository();
 const log = createLogger("Gateway:App");
 /**
 * Extension sandbox HTML under `/api/extensions/:id/assets/*` ships its own CSP

package/dist/src/gateway/hono/middleware/auth.js

@@ -4,9 +4,9 @@ import { init_logger } from "../../../utils/logger.js";
 import { authPolicyConfig, buckets, resolveAuthRateLimit } from "../../rate-limit/buckets.js";
 import { resolveAuthTracking } from "../../rate-limit/auth-policy.js";
 import { isAuthRateLimitGloballyDisabled } from "../../rate-limit/env-flags.js";
-import { init_rate_limit } from "../../rate-limit/index.js";
-import { authenticateDeviceAccessToken, getDevice, init_device_access_repository } from "../../../storage/sqlite/device-access-repository.js";
-import { getOrCreateGatewayIdentity, init_gateway_identity_repository } from "../../../storage/sqlite/gateway-identity-repository.js";
+import "../../rate-limit/index.js";
+import { authenticateDeviceAccessToken, getDevice } from "../../../storage/sqlite/device-access-repository.js";
+import { getOrCreateGatewayIdentity } from "../../../storage/sqlite/gateway-identity-repository.js";
 import { safeEqualSecret } from "../../security/secret-equal.js";
 import { resolveClientIpFromRequest } from "../../client-ip.js";
 import { authenticateBrowserSession } from "../../../storage/sqlite/browser-session-repository.js";
@@ -18,9 +18,6 @@ import { setGatewayPrincipal } from "../../security/gateway-principal.js";
 import { createMiddleware } from "hono/factory";
 import { getConnInfo } from "@hono/node-server/conninfo";
 //#region src/gateway/hono/middleware/auth.ts
-init_gateway_identity_repository();
-init_rate_limit();
-init_device_access_repository();
 init_logger();
 const log = createLogger("Gateway:Auth");
 function resolveExpectedCredential(auth) {

package/dist/src/gateway/hono/middleware/logger.js

@@ -1,11 +1,10 @@
 import { createLogger } from "../../../utils/logger/index.js";
 import { init_logger } from "../../../utils/logger.js";
-import { getClientIpFromHeaders, init_loopback } from "../../security/loopback.js";
+import { getClientIpFromHeaders } from "../../security/loopback.js";
 import { resolveClientIpFromRequest } from "../../client-ip.js";
 import { createMiddleware } from "hono/factory";
 import { getConnInfo } from "@hono/node-server/conninfo";
 //#region src/gateway/hono/middleware/logger.ts
-init_loopback();
 init_logger();
 const log = createLogger("Gateway:HTTP");
 function resolveRemoteAddress(c) {

package/dist/src/gateway/hono/middleware/public-device-rate-limit.js

@@ -1,10 +1,9 @@
 import { buckets } from "../../rate-limit/buckets.js";
-import { init_rate_limit } from "../../rate-limit/index.js";
+import "../../rate-limit/index.js";
 import { resolveClientIpFromRequest } from "../../client-ip.js";
 import { createMiddleware } from "hono/factory";
 import { getConnInfo } from "@hono/node-server/conninfo";
 //#region src/gateway/hono/middleware/public-device-rate-limit.ts
-init_rate_limit();
 function pairingClientKey(c, options) {
 	let remoteAddress;
 	try {

package/dist/src/gateway/hono/middleware/scopes.js

@@ -1,10 +1,9 @@
 import { createLogger } from "../../../utils/logger/index.js";
 import { init_logger } from "../../../utils/logger.js";
-import { hasGatewayScope, init_gateway_scopes, requiredGatewayScope } from "../../security/gateway-scopes.js";
+import { hasGatewayScope, requiredGatewayScope } from "../../security/gateway-scopes.js";
 import { getGatewayPrincipal } from "../../security/gateway-principal.js";
 import { createMiddleware } from "hono/factory";
 //#region src/gateway/hono/middleware/scopes.ts
-init_gateway_scopes();
 init_logger();
 const log = createLogger("Hono:Scopes");
 /** Enforces fail-closed route scopes after authentication establishes a principal. */

package/dist/src/gateway/hono/middleware/strict-rate-limit.js

@@ -1,7 +1,7 @@
 import { createLogger } from "../../../utils/logger/index.js";
 import { init_logger } from "../../../utils/logger.js";
 import { buckets } from "../../rate-limit/buckets.js";
-import { init_rate_limit } from "../../rate-limit/index.js";
+import "../../rate-limit/index.js";
 import { resolveClientIpFromRequest } from "../../client-ip.js";
 import { createMiddleware } from "hono/factory";
 import { getConnInfo } from "@hono/node-server/conninfo";
@@ -10,7 +10,6 @@ import { getConnInfo } from "@hono/node-server/conninfo";
 * Per-client request-rate gate for sensitive admin/mutation endpoints.
 * Backed by `buckets.strictApi()` — see {@link ../../rate-limit/buckets.ts}.
 */
-init_rate_limit();
 init_logger();
 const log = createLogger("Hono:StrictRateLimit");
 function resolveClientIp(c, deps) {

package/dist/src/gateway/hono/oauth-async.js

@@ -1,6 +1,6 @@
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
-import { init_host, isLoopbackHost } from "../host.js";
+import { isLoopbackHost } from "../host.js";
 import { getOAuthProviderInterfaces, init_registry } from "../../auth/oauth/registry.js";
 import { CredentialResolver, init_credentials } from "../../auth/credentials.js";
 import { resolveReverseProxyPublicUrl } from "../public-url.js";
@@ -18,7 +18,6 @@ import { Hono } from "hono";
 */
 init_registry();
 init_credentials();
-init_host();
 init_logger();
 const log = createLogger("OAuthAsync");
 function buildOAuthCompletionReadiness(config, catalog) {

package/dist/src/gateway/hono/routes/agents.js

@@ -1,6 +1,6 @@
+import { normalizeAgentId } from "../../../agent-catalog/id.js";
 import { AgentEntrySchema, AgentModelsOverrideSchema, AgentProfileSchema, RuntimePolicySchema, SkillOverrideSchema, ToolPoliciesSchema } from "../../../agent-config/schema.js";
 import { init_agent_config } from "../../../agent-config/index.js";
-import { normalizeAgentId } from "../../../agent-catalog/id.js";
 import { init_agent_scope } from "../../../agent/agent-scope.js";
 import { getVoiceModelsConfig } from "../../../config/voice.js";
 import { createGatewayAgent, deleteAgentAvatarFile, deleteGatewayAgent, getGatewayAgentEffectiveConfig, listAgentProfileFiles, listGatewayAgents, readAgentAvatarFile, readAgentProfileFile, resolveAgentAvatarImage, updateGatewayAgent, writeAgentAvatarFromBase64, writeAgentProfileFile } from "../../agents-admin.js";