@xopcai/xopc 0.0.415 → 0.0.417

package/dist/src/gateway/hono/routes/shares.js

@@ -1,6 +1,6 @@
-import { getClientIpFromHeaders, init_loopback } from "../../security/loopback.js";
+import { getClientIpFromHeaders } from "../../security/loopback.js";
 import { loadCompactionSourceSnapshot } from "../../../storage/sqlite/transcript-repository.js";
-import { init_sqlite } from "../../../storage/sqlite/index.js";
+import "../../../storage/sqlite/index.js";
 import { FileServiceError } from "../../../files/file-service.js";
 import { resolveGatewayEffectiveHost } from "../../../config/gateway-bind.js";
 import { SHARE_CONFIG_DEFAULTS } from "../../../share/share-types.js";
@@ -31,8 +31,6 @@ import { createHash } from "node:crypto";
 import { stat } from "node:fs/promises";
 import { Readable } from "node:stream";
 //#region src/gateway/hono/routes/shares.ts
-init_loopback();
-init_sqlite();
 function getShareUrlContext(service) {
 	const gateway = service.currentConfig.gateway;
 	return {

package/dist/src/gateway/hono/routes/tasks.js

@@ -2,13 +2,13 @@ import { init_transaction, runSqliteWriteTransaction } from "../../../storage/sq
 import { TaskCommandRequestSchema, TaskCreateRequestSchema, TaskCriterionReviewInputSchema, TaskHandoffRequestSchema } from "../../../../packages/gateway-contract/src/tasks.js";
 import { ProductReadContracts, TaskRunCancelOutputSchema, TaskRunFeedbackOutputSchema } from "../../../../packages/gateway-contract/src/capabilities.js";
 import { init_src } from "../../../../packages/gateway-contract/src/index.js";
-import { hasGatewayScope, init_gateway_scopes } from "../../security/gateway-scopes.js";
+import { hasGatewayScope } from "../../security/gateway-scopes.js";
 import { enqueueTaskChangedEvent, init_task_change_events } from "../../../tasks/task-change-events.js";
 import { TaskRepository, init_task_repository } from "../../../tasks/task-repository.js";
 import { TaskRunRepository, init_task_run_repository } from "../../../tasks/task-run-repository.js";
+import { TaskConversationRepository } from "../../../tasks/task-conversation-repository.js";
 import { CapabilityError } from "../../../capabilities/runtime/errors.js";
 import "../../../capabilities/runtime/dispatcher.js";
-import { TaskConversationRepository } from "../../../tasks/task-conversation-repository.js";
 import { TaskCollaborationRepository } from "../../../tasks/task-collaboration-repository.js";
 import { TaskCriterionReviewRepository } from "../../../tasks/task-criterion-review-repository.js";
 import { TaskContextMutationOutputSchema } from "../../../tasks/capabilities/relations.js";
@@ -30,7 +30,6 @@ init_transaction();
 init_task_change_events();
 init_task_repository();
 init_task_run_repository();
-init_gateway_scopes();
 function registerTaskRoutes(authenticated, deps) {
 	const capabilities = createProductDispatcher(() => deps.service.notesServiceInstance, {
 		getConfig: () => deps.service.currentConfig,

package/dist/src/gateway/hono/routes/user-model-refresh.js

@@ -1,6 +1,6 @@
 import { listConnectorLearningJobs } from "../../../storage/sqlite/connector-learning-repository.js";
 import { getConnectorAccount } from "../../../storage/sqlite/connector-account-repository.js";
-import { init_sqlite } from "../../../storage/sqlite/index.js";
+import "../../../storage/sqlite/index.js";
 import { getWorkDiscoveryRun } from "../../../work-discovery/repository.js";
 import { getConnectorUnderstandingSourceRun } from "../../../user-context/sources/repository.js";
 import { isLocalUnderstandingSourceId } from "../../../user-context/sources/local-source-contract.js";
@@ -8,7 +8,6 @@ import { normalizeUnderstandingSourceItems } from "../../../work-discovery/servi
 import { UnderstandingRefreshService } from "../../../user-context/sources/refresh-service.js";
 import { randomUUID } from "node:crypto";
 //#region src/gateway/hono/routes/user-model-refresh.ts
-init_sqlite();
 function createUnderstandingRefreshService(deps) {
 	const service = deps.service;
 	return new UnderstandingRefreshService({

package/dist/src/gateway/hono/routes/user-model.js

@@ -1,5 +1,5 @@
 import { init_transaction, runSqliteWriteTransaction } from "../../../storage/sqlite/transaction.js";
-import { createCollaborationRule, getCollaborationRule, init_collaboration_rule_repository, listCollaborationRules, setCollaborationRuleStatus } from "../../../storage/sqlite/collaboration-rule-repository.js";
+import { createCollaborationRule, getCollaborationRule, listCollaborationRules, setCollaborationRuleStatus } from "../../../storage/sqlite/collaboration-rule-repository.js";
 import { getActiveUnderstandingConsent } from "../../../user-context/sources/consent-repository.js";
 import { KnowledgeReviewConflictError, deleteKnowledgeItem, getKnowledgeItem, listKnowledgeItems, reviewKnowledgeItem, searchKnowledgeItems } from "../../../knowledge-memory/repository.js";
 import "../../../knowledge-memory/index.js";
@@ -19,7 +19,6 @@ import { registerMemoryLearningRoutes } from "./memory-learning.js";
 import { userInfo } from "node:os";
 //#region src/gateway/hono/routes/user-model.ts
 init_transaction();
-init_collaboration_rule_repository();
 function object(value) {
 	return value && typeof value === "object" && !Array.isArray(value) ? value : void 0;
 }

package/dist/src/gateway/host.js

@@ -1,5 +1,4 @@
-import { __esmMin } from "../../_virtual/_rolldown/runtime.js";
-import { init_constants } from "../daemon/constants.js";
+import "../daemon/constants.js";
 import { networkInterfaces } from "node:os";
 //#region src/gateway/host.ts
 /** True when the bind address is local-only (127.x, localhost, ::1). */
@@ -14,6 +13,8 @@ function isAllInterfacesHost(host) {
 	const normalized = host.trim();
 	return normalized === "0.0.0.0" || normalized === "::" || normalized === "*";
 }
+/** Vite dev server origins for the gateway console (`web/` defaults to port 3000). */
+const GATEWAY_DEV_CONSOLE_ORIGINS = ["http://localhost:3000", "http://127.0.0.1:3000"];
 /** Non-internal IPv4 addresses that can serve this gateway on the local network. */
 function enumerateLanGatewayCandidates(port) {
 	const seen = /* @__PURE__ */ new Set();
@@ -85,11 +86,5 @@ function resolveAllowedBrowserOrigins(params) {
 	if (reverseProxyOrigin && !origins.includes(reverseProxyOrigin)) origins.push(reverseProxyOrigin);
 	return origins;
 }
-var GATEWAY_DEV_CONSOLE_ORIGINS;
-var init_host = __esmMin((() => {
-	init_constants();
-	GATEWAY_DEV_CONSOLE_ORIGINS = ["http://localhost:3000", "http://127.0.0.1:3000"];
-}));
 //#endregion
-init_host();
-export { GATEWAY_DEV_CONSOLE_ORIGINS, buildDefaultCorsOrigins, enumerateLanGatewayCandidates, init_host, isAllInterfacesHost, isLoopbackHost, originFromGatewayPublicUrl, resolveAllowedBrowserOrigins, resolveEffectiveGatewayPort, resolveGatewayCorsOrigins, resolveGatewayServiceListenPort };
+export { GATEWAY_DEV_CONSOLE_ORIGINS, buildDefaultCorsOrigins, enumerateLanGatewayCandidates, isAllInterfacesHost, isLoopbackHost, originFromGatewayPublicUrl, resolveAllowedBrowserOrigins, resolveEffectiveGatewayPort, resolveGatewayCorsOrigins, resolveGatewayServiceListenPort };

package/dist/src/gateway/image-generation-setup.js

@@ -1,11 +1,11 @@
 import { normalizeAgentId } from "../agent-catalog/id.js";
 import { AgentCatalogRepository, init_repository } from "../agent-catalog/repository.js";
 import { init_agent_scope } from "../agent/agent-scope.js";
-import { AgentCatalogService } from "../agent-catalog/service.js";
 import { ConfigSchema, init_schema } from "../config/schema.js";
 import { resolveEffectiveAgentConfigForAgent } from "../config/agent-profile.js";
 import { fetchWithTimeoutGuarded } from "../media-shared/http/provider-http.js";
 import "../media-shared/http/index.js";
+import { AgentCatalogService } from "../agent-catalog/service.js";
 import { getImageGenerationProvider, listImageGenerationProvidersSummary } from "../agent/image/generation/provider-registry.js";
 //#region src/gateway/image-generation-setup.ts
 init_repository();

package/dist/src/gateway/index.js

@@ -1,7 +1,7 @@
 import { buckets } from "./rate-limit/buckets.js";
-import { buildDefaultCorsOrigins, init_host, isAllInterfacesHost, isLoopbackHost, resolveEffectiveGatewayPort, resolveGatewayServiceListenPort } from "./host.js";
+import { buildDefaultCorsOrigins, isAllInterfacesHost, isLoopbackHost, resolveEffectiveGatewayPort, resolveGatewayServiceListenPort } from "./host.js";
 import { isGatewayStrictSecurityEnabled } from "./rate-limit/env-flags.js";
-import { init_rate_limit } from "./rate-limit/index.js";
+import "./rate-limit/index.js";
 import { defaultGatewayBindMode, isContainerEnvironment, resolveGatewayBindHost, resolveGatewayBindHostSync, resolveGatewayBindMode, resolveGatewayEffectiveHost } from "../config/gateway-bind.js";
 import { assertGatewayAuthConfigured, extractToken, resolveGatewayAuth, validateToken } from "./auth.js";
 import { resolveGatewayListenHost, resolveGatewayListenPlan } from "./listen.js";
@@ -16,8 +16,4 @@ import { checkPortAvailable, forceFreePortAndWait, listPortListeners, parseLsofO
 import { apiError, apiOk } from "./protocol.js";
 import "./hono/index.js";
 import { assertSecureGatewayHttpUrl, assertSecureWebSocketUrl, isInsecurePrivateWsAllowed, isSecureWebSocketUrl } from "./ws-security.js";
-//#region src/gateway/index.ts
-init_host();
-init_rate_limit();
-//#endregion
 export { GatewayLockError, GatewayServer, GatewayService, acquireGatewayLock, apiError, apiOk, assertGatewayAuthConfigured, assertGatewayRuntimeConfig, assertSecureGatewayHttpUrl, assertSecureWebSocketUrl, buckets, buildDefaultCorsOrigins, checkPortAvailable, createHonoApp, defaultGatewayBindMode, extractToken, forceFreePortAndWait, isAllInterfacesHost, isContainerEnvironment, isGatewayStrictSecurityEnabled, isInsecurePrivateWsAllowed, isLoopbackHost, isSecureWebSocketUrl, listPortListeners, parseLsofOutput, resolveEffectiveGatewayPort, resolveGatewayAuth, resolveGatewayBindHost, resolveGatewayBindHostSync, resolveGatewayBindMode, resolveGatewayEffectiveHost, resolveGatewayListenHost, resolveGatewayListenPlan, resolveGatewayServiceListenPort, restartGatewayProcessWithFreshPid, runGatewayLoop, validateToken };

package/dist/src/gateway/listen.js

@@ -1,7 +1,6 @@
-import { buildDefaultCorsOrigins, init_host, isAllInterfacesHost, isLoopbackHost } from "./host.js";
+import { buildDefaultCorsOrigins, isAllInterfacesHost, isLoopbackHost } from "./host.js";
 import { resolveGatewayBindHostSync, resolveGatewayBindMode, resolveGatewayCustomBindHost } from "../config/gateway-bind.js";
 //#region src/gateway/listen.ts
-init_host();
 /** Resolve the effective HTTP listen host (CLI bind override > config bind). */
 function resolveGatewayListenHost(params) {
 	return resolveGatewayBindHostSync({

package/dist/src/gateway/next-turn-suggestions/service.js

@@ -1,14 +1,13 @@
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
 import { init_changes, onUserContextChange } from "../../user-context/changes.js";
-import { getSessionConfig, init_config_repository } from "../../storage/sqlite/config-repository.js";
+import { getSessionConfig } from "../../storage/sqlite/config-repository.js";
 import { resolveModelIntentRef, resolveModelSelector } from "../../config/agent-model-intents.js";
 import { readNextTurnSuggestion, saveNextTurnSuggestion } from "../../storage/sqlite/next-turn-suggestion-repository.js";
 import { generateNextTurnSuggestion } from "./generator.js";
 import { readSuggestionSnapshot, suggestionSnapshotKey } from "./snapshot.js";
 import { randomUUID } from "node:crypto";
 //#region src/gateway/next-turn-suggestions/service.ts
-init_config_repository();
 init_logger();
 init_changes();
 const log = createLogger("NextTurnSuggestion");

package/dist/src/gateway/next-turn-suggestions/snapshot.js

@@ -1,6 +1,6 @@
 import { getSqliteDatabase, init_transaction } from "../../storage/sqlite/transaction.js";
 import { getSessionInputState, init_session_input_repository } from "../../storage/sqlite/session-input-repository.js";
-import { getActiveClarification, init_clarification_wait_repository } from "../../storage/sqlite/clarification-wait-repository.js";
+import { getActiveClarification } from "../../storage/sqlite/clarification-wait-repository.js";
 import { buildSessionContextForLlm, init_session_context_for_llm } from "../../session/session-context-for-llm.js";
 import { getActiveConnectionWait, init_connection_wait_repository } from "../../storage/sqlite/connection-wait-repository.js";
 import { getSessionMetadata } from "../../storage/sqlite/session-read-repository.js";
@@ -11,7 +11,6 @@ init_session_repository();
 init_transaction();
 init_session_input_repository();
 init_connection_wait_repository();
-init_clarification_wait_repository();
 init_session_context_for_llm();
 /** Reads only this conversation; shared memory and tool results never enter the predictor. */
 function readSuggestionSnapshot(conversationId) {

package/dist/src/gateway/provider-model-setup.js

@@ -19,7 +19,7 @@ async function loadProviderSetupSnapshot(provider, config) {
 }
 function readProviderSetupSnapshot(provider, configured, config) {
 	const languageProvider = getAllProviders().includes(provider);
-	const models = (languageProvider ? getModelsByProvider(provider) : []).filter((model) => !("computerUse" in model && model.computerUse));
+	const models = (languageProvider ? getModelsByProvider(provider) : []).filter((model) => !("computerUse" in model && model.computerUse) && !("phoneUse" in model && model.phoneUse));
 	const recommended = new Set((languageProvider ? getRecommendedModelsForProvider(provider) : []).map((model) => model.ref));
 	const source = getModelCatalogStore().getSource(provider);
 	const image = getImageGenerationProvider(provider);

package/dist/src/gateway/rate-limit/auth-policy.js

@@ -1,7 +1,15 @@
-import { __esmMin } from "../../../_virtual/_rolldown/runtime.js";
-import { init_loopback, isLoopbackClientIp, isLoopbackEmbeddedBrowserClient } from "../security/loopback.js";
+import { isLoopbackClientIp, isLoopbackEmbeddedBrowserClient } from "../security/loopback.js";
 //#region src/gateway/rate-limit/auth-policy.ts
 /**
+* Auth-failure rate-limit policy: how to derive a tracking key from a request,
+* and whether a given client should be exempted before counting.
+*
+* The {@link FailureLimiter} primitive is intentionally policy-free — this
+* module is the only place that knows about IPs, browser origins, and the
+* loopback exemption. Adding a new exemption rule (e.g. private CIDRs) means
+* editing this file alone; the limiter primitive does not change.
+*/
+/**
 * Decide whether to track this client and, if so, what key identifies them.
 * Browser clients are tracked separately (origin + IP) so a rogue `<iframe>`
 * cannot piggyback on a CLI client's bucket and DoS it.
@@ -35,9 +43,5 @@ function resolveAuthTracking(params) {
 function buildBrowserOriginKey(origin, clientIp) {
 	return `browser-origin:${origin.trim().toLowerCase()}|${clientIp.trim()}`;
 }
-var init_auth_policy = __esmMin((() => {
-	init_loopback();
-}));
 //#endregion
-init_auth_policy();
-export { buildBrowserOriginKey, init_auth_policy, resolveAuthTracking };
+export { buildBrowserOriginKey, resolveAuthTracking };