@xopcai/xopc 0.0.416 → 0.0.418

package/dist/src/gateway/hono/routes/phone.js

@@ -1,14 +1,17 @@
 import { createLogger } from "../../../utils/logger/index.js";
 import { init_logger } from "../../../utils/logger.js";
-import { MOCK_PHONE_MODEL, PhoneActionSchema, PhoneConfigSchema, PhoneDeviceSchema, PhoneError, PhoneInputSchema, init_contracts } from "../../../phone/contracts.js";
+import { MOCK_PHONE_MODEL, PhoneActionSchema, PhoneConfigSchema, PhoneDeviceSchema, PhoneError, PhoneExecutionModeSchema, PhoneInputSchema, init_contracts } from "../../../phone/contracts.js";
+import { createConversation, init_conversation_repository } from "../../../storage/sqlite/conversation-repository.js";
 import { getDefaultAgentId, init_resolve_route } from "../../../routing/resolve-route.js";
 import { getModelRegistry, init_model_registry } from "../../../providers/model-registry.js";
 import { init_providers, isProviderConfiguredSync } from "../../../providers/index.js";
 import { normalizePhoneAppAccess, phoneAppAccess } from "../../../phone/app-access.js";
+import { resolveAdbPath } from "../../../phone/adb-driver.js";
 import { createPhoneModel, phoneModelProfile } from "../../../phone/model-adapter.js";
 import { getPhoneRuntime, phoneExecutionContext } from "../../../phone/runtime.js";
 import { registerPhoneSetupRoutes } from "./phone-setup.js";
 import { getGatewayPrincipal } from "../../security/gateway-principal.js";
+import { registerPhoneWirelessRoutes } from "./phone-wireless.js";
 import { randomUUID } from "node:crypto";
 import { z } from "zod";
 import { Hono } from "hono";
@@ -19,12 +22,14 @@ init_model_registry();
 init_providers();
 init_contracts();
 init_logger();
+init_conversation_repository();
 const log = createLogger("Hono:Phone");
 const deviceInput = PhoneDeviceSchema.omit({
 	id: true,
 	createdAt: true,
 	revision: true,
-	connection: true
+	connection: true,
+	wireless: true
 });
 function registerPhoneRoutes(parent, deps, runtime = getPhoneRuntime()) {
 	const app = new Hono();
@@ -38,6 +43,7 @@ function registerPhoneRoutes(parent, deps, runtime = getPhoneRuntime()) {
 			ok: false,
 			error: {
 				code,
+				...error instanceof PhoneError ? error.details : {},
 				message: error instanceof PhoneError ? error.message : error instanceof z.ZodError ? "Invalid phone request" : "Phone operation failed. Check device diagnostics."
 			}
 		}, error instanceof PhoneError ? error.status : error instanceof z.ZodError ? 400 : 500);
@@ -55,6 +61,52 @@ function registerPhoneRoutes(parent, deps, runtime = getPhoneRuntime()) {
 		return next();
 	});
 	registerPhoneSetupRoutes(app, deps);
+	registerPhoneWirelessRoutes(app, deps, runtime);
+	app.get("/api/phone/connections", async (c) => {
+		c.header("Cache-Control", "no-store");
+		const payload = await Promise.all(runtime.reports().filter((report) => report.status !== "closed").map(async (report) => {
+			const source = report.sourceConversationId ?? report.owner;
+			const conversation = /^[\da-f]{8}-[\da-f-]{27}$/i.test(source) ? await service.sessions.getSession(source) : void 0;
+			const { facts: _facts, readings: _readings, steps: _steps, task: _task, feedback: _feedback, ...metadata } = report;
+			return {
+				...metadata,
+				sourceConversationName: conversation?.name
+			};
+		}));
+		return c.json({
+			ok: true,
+			payload
+		});
+	});
+	app.post("/api/phone/devices/:id/disconnect", strictRateLimitMiddleware, async (c) => {
+		await runtime.stopDevice(z.string().uuid().parse(c.req.param("id")));
+		return c.json({ ok: true });
+	});
+	app.post("/api/phone/devices/:id/view", strictRateLimitMiddleware, async (c) => {
+		const id = z.string().uuid().parse(c.req.param("id"));
+		await runtime.viewDevice(id, service.currentConfig, getDefaultAgentId(), c.req.raw.signal);
+		c.header("Cache-Control", "no-store");
+		return c.json({ ok: true });
+	});
+	app.post("/api/phone/devices/:id/conversations", strictRateLimitMiddleware, async (c) => {
+		const device = runtime.repository.get(z.string().uuid().parse(c.req.param("id")));
+		if (!device.enabled) throw new PhoneError("PHONE_DEVICE_DENIED", "This phone is disabled", 403);
+		const conversation = createConversation({
+			agentId: getDefaultAgentId(),
+			sourceChannel: "webchat",
+			sourceChatId: "webchat",
+			name: device.name,
+			customData: { phoneDeviceId: device.id }
+		});
+		c.header("Cache-Control", "no-store");
+		return c.json({
+			ok: true,
+			payload: {
+				conversationId: conversation.key,
+				deviceId: device.id
+			}
+		}, 201);
+	});
 	app.use("/api/phone/cloud/aliyun/*", bodyLimit({
 		maxSize: 24 * 1024,
 		onError: (c) => c.json({
@@ -105,10 +157,11 @@ function registerPhoneRoutes(parent, deps, runtime = getPhoneRuntime()) {
 	}));
 	app.patch("/api/phone/settings", strictRateLimitMiddleware, async (c) => {
 		const config = PhoneConfigSchema.parse(await c.req.json());
-		await runtime.shutdown();
+		if (!config.enabled || config.adbPath !== service.currentConfig.phone.adbPath) await runtime.shutdown();
 		const next = structuredClone(service.currentConfig);
 		next.phone = config;
 		if (!(await service.saveConfig(next)).saved) throw new PhoneError("PHONE_CONFIG_SAVE_FAILED", "Unable to save Phone Use settings");
+		runtime.updateConnectionPolicy(next);
 		return c.json({
 			ok: true,
 			payload: { config }
@@ -160,7 +213,12 @@ function registerPhoneRoutes(parent, deps, runtime = getPhoneRuntime()) {
 	app.post("/api/phone/devices", strictRateLimitMiddleware, async (c) => {
 		const input = deviceInput.parse(await c.req.json());
 		if (!(await runtime.discover(service.currentConfig, c.req.raw.signal)).some((device) => device.serial === input.serial && device.state === "device")) throw new PhoneError("PHONE_DEVICE_OFFLINE", "Choose a connected and authorized ADB device");
-		const device = runtime.repository.save(input);
+		const wireless = runtime.wireless.known(input.serial);
+		if (wireless) input.serial = (await runtime.wireless.connect(resolveAdbPath(service.currentConfig.phone.adbPath), wireless, c.req.raw.signal, wireless)).device.serial;
+		const device = runtime.repository.save({
+			...input,
+			...wireless ? { wireless } : {}
+		});
 		if (!runtime.repository.defaultDevice()) runtime.repository.setDefault(device.id);
 		return c.json({
 			ok: true,
@@ -289,6 +347,18 @@ function registerPhoneRoutes(parent, deps, runtime = getPhoneRuntime()) {
 		action: PhoneActionSchema.optional()
 	}).strict();
 	async function conversationPhone(conversationId, requestedSessionId) {
+		if (conversationId.startsWith("device:")) {
+			const deviceId = z.string().uuid().parse(conversationId.slice(7));
+			const report = runtime.reports().find((report) => report.deviceId === deviceId && report.status !== "closed");
+			if (!report || requestedSessionId && report.sessionId !== requestedSessionId) throw new PhoneError("PHONE_SESSION_NOT_FOUND", "Phone connection changed. Refresh the phone panel.", 404);
+			const conversation = /^[\da-f]{8}-[\da-f-]{27}$/i.test(report.owner) ? await service.sessions.getSession(report.owner) : void 0;
+			return {
+				owner: report.owner,
+				report,
+				transcriptId: conversation?.transcriptId,
+				context: runtime.deviceContext(deviceId, service.currentConfig)
+			};
+		}
 		z.string().uuid().parse(conversationId);
 		const conversation = await service.sessions.getSession(conversationId);
 		if (!conversation) throw new PhoneError("PHONE_CONVERSATION_NOT_FOUND", "Conversation not found", 404);
@@ -296,25 +366,45 @@ function registerPhoneRoutes(parent, deps, runtime = getPhoneRuntime()) {
 		if (requestedSessionId && report?.sessionId !== requestedSessionId) throw new PhoneError("PHONE_SESSION_NOT_FOUND", "Phone session not found", 404);
 		if (report && report.agentId !== conversation.agentId) throw new PhoneError("PHONE_ACCESS_CHANGED", "Conversation Agent changed", 403);
 		return {
+			owner: conversationId,
 			report,
 			transcriptId: conversation.transcriptId,
 			context: phoneExecutionContext(service.currentConfig, conversation.agentId)
 		};
 	}
 	app.get("/api/phone/conversations/:conversationId", async (c) => {
-		const owner = c.req.param("conversationId");
+		let owner = c.req.param("conversationId");
 		const client = liveClient.parse(c.req.query("clientId"));
-		const { report, context } = await conversationPhone(owner);
+		const { report, context, owner: resolvedOwner } = await conversationPhone(owner);
+		owner = resolvedOwner;
+		c.header("Cache-Control", "no-store");
+		return c.json({
+			ok: true,
+			payload: report ? runtime.liveStatus(owner, report.sessionId, context, `${getGatewayPrincipal(c).principalId}:${client}${c.req.param("conversationId").startsWith("device:") ? ":viewer" : ""}`) : null
+		});
+	});
+	app.post("/api/phone/conversations/:conversationId/:sessionId/execution-mode", strictRateLimitMiddleware, async (c) => {
+		const address = c.req.param("conversationId");
+		if (address.startsWith("device:")) throw new PhoneError("PHONE_OBSERVE_ONLY", "Change execution mode from the source conversation", 403);
+		const { owner, context } = await conversationPhone(address, c.req.param("sessionId"));
+		const input = z.object({
+			executionMode: PhoneExecutionModeSchema,
+			applyCurrent: z.boolean().default(false),
+			epoch: z.number().int().positive(),
+			clientId: liveClient
+		}).strict().parse(await c.req.json());
+		await runtime.setExecutionMode(owner, input.executionMode, context, input.applyCurrent, input.epoch);
 		c.header("Cache-Control", "no-store");
 		return c.json({
 			ok: true,
-			payload: report ? runtime.liveStatus(owner, report.sessionId, context, `${getGatewayPrincipal(c).principalId}:${client}`) : null
+			payload: runtime.liveStatus(owner, c.req.param("sessionId"), context, `${getGatewayPrincipal(c).principalId}:${input.clientId}`)
 		});
 	});
 	app.get("/api/phone/conversations/:conversationId/:sessionId/frame", async (c) => {
-		const owner = c.req.param("conversationId");
+		let owner = c.req.param("conversationId");
 		const id = c.req.param("sessionId");
-		const { context } = await conversationPhone(owner, id);
+		const { context, owner: resolvedOwner } = await conversationPhone(owner, id);
+		owner = resolvedOwner;
 		const frame = await runtime.liveFrame(owner, id, context, c.req.raw.signal);
 		c.header("Cache-Control", "no-store");
 		c.header("Content-Type", "image/png");
@@ -329,15 +419,15 @@ function registerPhoneRoutes(parent, deps, runtime = getPhoneRuntime()) {
 		return c.body(bytes);
 	});
 	app.post("/api/phone/conversations/:conversationId/:sessionId/video-ticket", strictRateLimitMiddleware, async (c) => {
-		const owner = c.req.param("conversationId");
+		const address = c.req.param("conversationId");
 		const id = c.req.param("sessionId");
 		const { clientId } = z.object({ clientId: liveClient }).strict().parse(await c.req.json());
-		await conversationPhone(owner, id);
+		await conversationPhone(address, id);
 		const principal = getGatewayPrincipal(c);
-		const client = `${principal.principalId}:${clientId}`;
+		const client = `${principal.principalId}:${clientId}${c.req.param("conversationId").startsWith("device:") ? ":viewer" : ""}`;
 		const validate = async () => {
-			const { context } = await conversationPhone(owner, id);
-			runtime.liveStatus(owner, id, context, client);
+			const resolved = await conversationPhone(address, id);
+			runtime.liveStatus(resolved.owner, id, resolved.context, client);
 		};
 		const issued = service.phoneStreams.issue({
 			origin: new URL(c.req.url).origin,
@@ -345,10 +435,13 @@ function registerPhoneRoutes(parent, deps, runtime = getPhoneRuntime()) {
 			client,
 			validate,
 			connect: async () => {
-				const { context } = await conversationPhone(owner, id);
-				return runtime.liveVideo(owner, id, context);
+				const resolved = await conversationPhone(address, id);
+				return runtime.liveVideo(resolved.owner, id, resolved.context);
 			},
-			disconnect: () => runtime.disconnectVideo(owner, id, client)
+			disconnect: async () => {
+				const resolved = await conversationPhone(address, id).catch(() => void 0);
+				if (resolved) await runtime.disconnectVideo(resolved.owner, id, client);
+			}
 		});
 		c.header("Cache-Control", "no-store");
 		return c.json({
@@ -361,18 +454,20 @@ function registerPhoneRoutes(parent, deps, runtime = getPhoneRuntime()) {
 		});
 	});
 	app.post("/api/phone/conversations/:conversationId/:sessionId/control", async (c) => {
-		const owner = c.req.param("conversationId");
+		if (c.req.param("conversationId").startsWith("device:")) throw new PhoneError("PHONE_OBSERVE_ONLY", "The global phone viewer is read only. Use the controlling conversation for input.", 403);
+		let owner = c.req.param("conversationId");
 		const id = c.req.param("sessionId");
-		const { context, transcriptId } = await conversationPhone(owner, id);
+		const { context, transcriptId, owner: resolvedOwner } = await conversationPhone(owner, id);
+		owner = resolvedOwner;
 		const { clientId, ...input } = liveControlInput.parse(await c.req.json());
 		const result = await runtime.liveControl(owner, id, context, `${getGatewayPrincipal(c).principalId}:${clientId}`, input);
-		if (input.op === "handback" && result.resumeTurnRequired && !service.sessions.getActiveRun(owner).active) {
+		if (transcriptId && input.op === "handback" && result.resumeTurnRequired && !service.sessions.getActiveRun(owner).active) {
 			if (!(await service.submitSessionInput({
 				conversationId: owner,
 				expectedTranscriptId: transcriptId,
 				clientMessageId: input.operationId,
 				delivery: "next",
-				content: "手机已交还，请先确认当前页面，继续未完成的任务；已完成的步骤不要重复，结束后关闭手机会话。",
+				content: "手机已交还，请先确认当前页面，继续未完成的任务；已完成的步骤不要重复，结束后释放操作权，保持手机连接。",
 				origin: {
 					type: "system",
 					source: "internal"

package/dist/src/gateway/hono/routes/projects.js

@@ -3,7 +3,7 @@ import { init_src } from "../../../../packages/gateway-contract/src/index.js";
 import { TaskRepository } from "../../../tasks/task-repository.js";
 import { getSessionMetadata } from "../../../storage/sqlite/session-read-repository.js";
 import { loadTranscriptRowsForSession } from "../../../storage/sqlite/transcript-repository.js";
-import { init_sqlite } from "../../../storage/sqlite/index.js";
+import "../../../storage/sqlite/index.js";
 import { ActivityService } from "../../../activity/service.js";
 import "../../../activity/index.js";
 import { CapabilityError } from "../../../capabilities/runtime/errors.js";
@@ -29,7 +29,6 @@ import { capabilityHttpContext, capabilityHttpError } from "../../../capabilitie
 import { randomUUID } from "node:crypto";
 //#region src/gateway/hono/routes/projects.ts
 init_src();
-init_sqlite();
 function projectWriteError(c, error) {
 	const cause = error instanceof CapabilityError ? error.cause : error;
 	if (cause instanceof ProjectWorkspaceConflictError) return c.json({

package/dist/src/gateway/hono/routes/public-gateway.js

@@ -1,6 +1,6 @@
 import { PACKAGE_VERSION, init_package_version } from "../../../package-version.js";
 import { claimConnectorWebhookDelivery, completeConnectorWebhookDelivery, releaseConnectorWebhookDelivery } from "../../../storage/sqlite/connector-repository.js";
-import { init_sqlite } from "../../../storage/sqlite/index.js";
+import "../../../storage/sqlite/index.js";
 import { resolveAutomationWebhookSecret } from "../../../automations/webhook-secrets.js";
 import { composioLogoResponse } from "../../../connectors/composio-logo.js";
 import { appendComposioTriggerEvent, applyComposioConnectionLifecycleEvent, normalizeComposioTriggerPayload, verifyComposioWebhook } from "../../../connectors/composio-triggers.js";
@@ -8,7 +8,6 @@ import { serveStaticFile } from "../lib/static-ui.js";
 import { createHash, timingSafeEqual } from "node:crypto";
 //#region src/gateway/hono/routes/public-gateway.ts
 init_package_version();
-init_sqlite();
 const PUBLIC_UI_ROOT_ASSETS = [
 	"browser-setup-test.html",
 	"browser-setup-test.js",

package/dist/src/gateway/hono/routes/sessions.js

@@ -1,8 +1,8 @@
-import { deleteBrowserTabBinding, init_browser_tab_binding_repository } from "../../../storage/sqlite/browser-tab-binding-repository.js";
+import { deleteBrowserTabBinding } from "../../../storage/sqlite/browser-tab-binding-repository.js";
 import { SessionDiscoveryQuerySchema } from "../../../../packages/gateway-contract/src/session-identity.js";
 import { init_src } from "../../../../packages/gateway-contract/src/index.js";
 import "../../../session/types.js";
-import { SidebarLayoutConflictError, getSidebarLayout, init_sidebar_layout_repository, replaceSidebarLayout, sortBySidebarLayout } from "../../../storage/sqlite/sidebar-layout-repository.js";
+import { SidebarLayoutConflictError, getSidebarLayout, replaceSidebarLayout, sortBySidebarLayout } from "../../../storage/sqlite/sidebar-layout-repository.js";
 import { summarizeAiUsageByConversations } from "../../../storage/sqlite/ai-usage-repository.js";
 import { isPersonalConversation } from "../../../personal-agent/repository.js";
 import { messagesToClientHistory } from "../../../session/client-history.js";
@@ -18,8 +18,6 @@ import { listSidebarTaskGroups } from "../../../tasks/task-sidebar-hierarchy.js"
 import { createHash } from "node:crypto";
 //#region src/gateway/hono/routes/sessions.ts
 init_src();
-init_browser_tab_binding_repository();
-init_sidebar_layout_repository();
 const log = createGatewayRouteLogger("Sessions");
 const SESSION_TYPES = new Set([
 	"chat",

package/dist/src/gateway/hono/routes/shares.js

@@ -1,6 +1,6 @@
-import { getClientIpFromHeaders, init_loopback } from "../../security/loopback.js";
+import { getClientIpFromHeaders } from "../../security/loopback.js";
 import { loadCompactionSourceSnapshot } from "../../../storage/sqlite/transcript-repository.js";
-import { init_sqlite } from "../../../storage/sqlite/index.js";
+import "../../../storage/sqlite/index.js";
 import { FileServiceError } from "../../../files/file-service.js";
 import { resolveGatewayEffectiveHost } from "../../../config/gateway-bind.js";
 import { SHARE_CONFIG_DEFAULTS } from "../../../share/share-types.js";
@@ -31,8 +31,6 @@ import { createHash } from "node:crypto";
 import { stat } from "node:fs/promises";
 import { Readable } from "node:stream";
 //#region src/gateway/hono/routes/shares.ts
-init_loopback();
-init_sqlite();
 function getShareUrlContext(service) {
 	const gateway = service.currentConfig.gateway;
 	return {

package/dist/src/gateway/hono/routes/tasks.js

@@ -2,7 +2,7 @@ import { init_transaction, runSqliteWriteTransaction } from "../../../storage/sq
 import { TaskCommandRequestSchema, TaskCreateRequestSchema, TaskCriterionReviewInputSchema, TaskHandoffRequestSchema } from "../../../../packages/gateway-contract/src/tasks.js";
 import { ProductReadContracts, TaskRunCancelOutputSchema, TaskRunFeedbackOutputSchema } from "../../../../packages/gateway-contract/src/capabilities.js";
 import { init_src } from "../../../../packages/gateway-contract/src/index.js";
-import { hasGatewayScope, init_gateway_scopes } from "../../security/gateway-scopes.js";
+import { hasGatewayScope } from "../../security/gateway-scopes.js";
 import { enqueueTaskChangedEvent, init_task_change_events } from "../../../tasks/task-change-events.js";
 import { TaskRepository, init_task_repository } from "../../../tasks/task-repository.js";
 import { TaskRunRepository, init_task_run_repository } from "../../../tasks/task-run-repository.js";
@@ -30,7 +30,6 @@ init_transaction();
 init_task_change_events();
 init_task_repository();
 init_task_run_repository();
-init_gateway_scopes();
 function registerTaskRoutes(authenticated, deps) {
 	const capabilities = createProductDispatcher(() => deps.service.notesServiceInstance, {
 		getConfig: () => deps.service.currentConfig,

package/dist/src/gateway/hono/routes/user-model-refresh.js

@@ -1,6 +1,6 @@
 import { listConnectorLearningJobs } from "../../../storage/sqlite/connector-learning-repository.js";
 import { getConnectorAccount } from "../../../storage/sqlite/connector-account-repository.js";
-import { init_sqlite } from "../../../storage/sqlite/index.js";
+import "../../../storage/sqlite/index.js";
 import { getWorkDiscoveryRun } from "../../../work-discovery/repository.js";
 import { getConnectorUnderstandingSourceRun } from "../../../user-context/sources/repository.js";
 import { isLocalUnderstandingSourceId } from "../../../user-context/sources/local-source-contract.js";
@@ -8,7 +8,6 @@ import { normalizeUnderstandingSourceItems } from "../../../work-discovery/servi
 import { UnderstandingRefreshService } from "../../../user-context/sources/refresh-service.js";
 import { randomUUID } from "node:crypto";
 //#region src/gateway/hono/routes/user-model-refresh.ts
-init_sqlite();
 function createUnderstandingRefreshService(deps) {
 	const service = deps.service;
 	return new UnderstandingRefreshService({

package/dist/src/gateway/hono/routes/user-model.js

@@ -1,5 +1,5 @@
 import { init_transaction, runSqliteWriteTransaction } from "../../../storage/sqlite/transaction.js";
-import { createCollaborationRule, getCollaborationRule, init_collaboration_rule_repository, listCollaborationRules, setCollaborationRuleStatus } from "../../../storage/sqlite/collaboration-rule-repository.js";
+import { createCollaborationRule, getCollaborationRule, listCollaborationRules, setCollaborationRuleStatus } from "../../../storage/sqlite/collaboration-rule-repository.js";
 import { getActiveUnderstandingConsent } from "../../../user-context/sources/consent-repository.js";
 import { KnowledgeReviewConflictError, deleteKnowledgeItem, getKnowledgeItem, listKnowledgeItems, reviewKnowledgeItem, searchKnowledgeItems } from "../../../knowledge-memory/repository.js";
 import "../../../knowledge-memory/index.js";
@@ -19,7 +19,6 @@ import { registerMemoryLearningRoutes } from "./memory-learning.js";
 import { userInfo } from "node:os";
 //#region src/gateway/hono/routes/user-model.ts
 init_transaction();
-init_collaboration_rule_repository();
 function object(value) {
 	return value && typeof value === "object" && !Array.isArray(value) ? value : void 0;
 }

package/dist/src/gateway/host.js

@@ -1,5 +1,4 @@
-import { __esmMin } from "../../_virtual/_rolldown/runtime.js";
-import { init_constants } from "../daemon/constants.js";
+import "../daemon/constants.js";
 import { networkInterfaces } from "node:os";
 //#region src/gateway/host.ts
 /** True when the bind address is local-only (127.x, localhost, ::1). */
@@ -14,6 +13,8 @@ function isAllInterfacesHost(host) {
 	const normalized = host.trim();
 	return normalized === "0.0.0.0" || normalized === "::" || normalized === "*";
 }
+/** Vite dev server origins for the gateway console (`web/` defaults to port 3000). */
+const GATEWAY_DEV_CONSOLE_ORIGINS = ["http://localhost:3000", "http://127.0.0.1:3000"];
 /** Non-internal IPv4 addresses that can serve this gateway on the local network. */
 function enumerateLanGatewayCandidates(port) {
 	const seen = /* @__PURE__ */ new Set();
@@ -85,11 +86,5 @@ function resolveAllowedBrowserOrigins(params) {
 	if (reverseProxyOrigin && !origins.includes(reverseProxyOrigin)) origins.push(reverseProxyOrigin);
 	return origins;
 }
-var GATEWAY_DEV_CONSOLE_ORIGINS;
-var init_host = __esmMin((() => {
-	init_constants();
-	GATEWAY_DEV_CONSOLE_ORIGINS = ["http://localhost:3000", "http://127.0.0.1:3000"];
-}));
 //#endregion
-init_host();
-export { GATEWAY_DEV_CONSOLE_ORIGINS, buildDefaultCorsOrigins, enumerateLanGatewayCandidates, init_host, isAllInterfacesHost, isLoopbackHost, originFromGatewayPublicUrl, resolveAllowedBrowserOrigins, resolveEffectiveGatewayPort, resolveGatewayCorsOrigins, resolveGatewayServiceListenPort };
+export { GATEWAY_DEV_CONSOLE_ORIGINS, buildDefaultCorsOrigins, enumerateLanGatewayCandidates, isAllInterfacesHost, isLoopbackHost, originFromGatewayPublicUrl, resolveAllowedBrowserOrigins, resolveEffectiveGatewayPort, resolveGatewayCorsOrigins, resolveGatewayServiceListenPort };

package/dist/src/gateway/index.js

@@ -1,7 +1,7 @@
 import { buckets } from "./rate-limit/buckets.js";
-import { buildDefaultCorsOrigins, init_host, isAllInterfacesHost, isLoopbackHost, resolveEffectiveGatewayPort, resolveGatewayServiceListenPort } from "./host.js";
+import { buildDefaultCorsOrigins, isAllInterfacesHost, isLoopbackHost, resolveEffectiveGatewayPort, resolveGatewayServiceListenPort } from "./host.js";
 import { isGatewayStrictSecurityEnabled } from "./rate-limit/env-flags.js";
-import { init_rate_limit } from "./rate-limit/index.js";
+import "./rate-limit/index.js";
 import { defaultGatewayBindMode, isContainerEnvironment, resolveGatewayBindHost, resolveGatewayBindHostSync, resolveGatewayBindMode, resolveGatewayEffectiveHost } from "../config/gateway-bind.js";
 import { assertGatewayAuthConfigured, extractToken, resolveGatewayAuth, validateToken } from "./auth.js";
 import { resolveGatewayListenHost, resolveGatewayListenPlan } from "./listen.js";
@@ -16,8 +16,4 @@ import { checkPortAvailable, forceFreePortAndWait, listPortListeners, parseLsofO
 import { apiError, apiOk } from "./protocol.js";
 import "./hono/index.js";
 import { assertSecureGatewayHttpUrl, assertSecureWebSocketUrl, isInsecurePrivateWsAllowed, isSecureWebSocketUrl } from "./ws-security.js";
-//#region src/gateway/index.ts
-init_host();
-init_rate_limit();
-//#endregion
 export { GatewayLockError, GatewayServer, GatewayService, acquireGatewayLock, apiError, apiOk, assertGatewayAuthConfigured, assertGatewayRuntimeConfig, assertSecureGatewayHttpUrl, assertSecureWebSocketUrl, buckets, buildDefaultCorsOrigins, checkPortAvailable, createHonoApp, defaultGatewayBindMode, extractToken, forceFreePortAndWait, isAllInterfacesHost, isContainerEnvironment, isGatewayStrictSecurityEnabled, isInsecurePrivateWsAllowed, isLoopbackHost, isSecureWebSocketUrl, listPortListeners, parseLsofOutput, resolveEffectiveGatewayPort, resolveGatewayAuth, resolveGatewayBindHost, resolveGatewayBindHostSync, resolveGatewayBindMode, resolveGatewayEffectiveHost, resolveGatewayListenHost, resolveGatewayListenPlan, resolveGatewayServiceListenPort, restartGatewayProcessWithFreshPid, runGatewayLoop, validateToken };

package/dist/src/gateway/listen.js

@@ -1,7 +1,6 @@
-import { buildDefaultCorsOrigins, init_host, isAllInterfacesHost, isLoopbackHost } from "./host.js";
+import { buildDefaultCorsOrigins, isAllInterfacesHost, isLoopbackHost } from "./host.js";
 import { resolveGatewayBindHostSync, resolveGatewayBindMode, resolveGatewayCustomBindHost } from "../config/gateway-bind.js";
 //#region src/gateway/listen.ts
-init_host();
 /** Resolve the effective HTTP listen host (CLI bind override > config bind). */
 function resolveGatewayListenHost(params) {
 	return resolveGatewayBindHostSync({

package/dist/src/gateway/next-turn-suggestions/service.js

@@ -1,14 +1,13 @@
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
 import { init_changes, onUserContextChange } from "../../user-context/changes.js";
-import { getSessionConfig, init_config_repository } from "../../storage/sqlite/config-repository.js";
+import { getSessionConfig } from "../../storage/sqlite/config-repository.js";
 import { resolveModelIntentRef, resolveModelSelector } from "../../config/agent-model-intents.js";
 import { readNextTurnSuggestion, saveNextTurnSuggestion } from "../../storage/sqlite/next-turn-suggestion-repository.js";
 import { generateNextTurnSuggestion } from "./generator.js";
 import { readSuggestionSnapshot, suggestionSnapshotKey } from "./snapshot.js";
 import { randomUUID } from "node:crypto";
 //#region src/gateway/next-turn-suggestions/service.ts
-init_config_repository();
 init_logger();
 init_changes();
 const log = createLogger("NextTurnSuggestion");

package/dist/src/gateway/next-turn-suggestions/snapshot.js

@@ -1,6 +1,6 @@
 import { getSqliteDatabase, init_transaction } from "../../storage/sqlite/transaction.js";
 import { getSessionInputState, init_session_input_repository } from "../../storage/sqlite/session-input-repository.js";
-import { getActiveClarification, init_clarification_wait_repository } from "../../storage/sqlite/clarification-wait-repository.js";
+import { getActiveClarification } from "../../storage/sqlite/clarification-wait-repository.js";
 import { buildSessionContextForLlm, init_session_context_for_llm } from "../../session/session-context-for-llm.js";
 import { getActiveConnectionWait, init_connection_wait_repository } from "../../storage/sqlite/connection-wait-repository.js";
 import { getSessionMetadata } from "../../storage/sqlite/session-read-repository.js";
@@ -11,7 +11,6 @@ init_session_repository();
 init_transaction();
 init_session_input_repository();
 init_connection_wait_repository();
-init_clarification_wait_repository();
 init_session_context_for_llm();
 /** Reads only this conversation; shared memory and tool results never enter the predictor. */
 function readSuggestionSnapshot(conversationId) {

package/dist/src/gateway/rate-limit/auth-policy.js

@@ -1,7 +1,15 @@
-import { __esmMin } from "../../../_virtual/_rolldown/runtime.js";
-import { init_loopback, isLoopbackClientIp, isLoopbackEmbeddedBrowserClient } from "../security/loopback.js";
+import { isLoopbackClientIp, isLoopbackEmbeddedBrowserClient } from "../security/loopback.js";
 //#region src/gateway/rate-limit/auth-policy.ts
 /**
+* Auth-failure rate-limit policy: how to derive a tracking key from a request,
+* and whether a given client should be exempted before counting.
+*
+* The {@link FailureLimiter} primitive is intentionally policy-free — this
+* module is the only place that knows about IPs, browser origins, and the
+* loopback exemption. Adding a new exemption rule (e.g. private CIDRs) means
+* editing this file alone; the limiter primitive does not change.
+*/
+/**
 * Decide whether to track this client and, if so, what key identifies them.
 * Browser clients are tracked separately (origin + IP) so a rogue `<iframe>`
 * cannot piggyback on a CLI client's bucket and DoS it.
@@ -35,9 +43,5 @@ function resolveAuthTracking(params) {
 function buildBrowserOriginKey(origin, clientIp) {
 	return `browser-origin:${origin.trim().toLowerCase()}|${clientIp.trim()}`;
 }
-var init_auth_policy = __esmMin((() => {
-	init_loopback();
-}));
 //#endregion
-init_auth_policy();
-export { buildBrowserOriginKey, init_auth_policy, resolveAuthTracking };
+export { buildBrowserOriginKey, resolveAuthTracking };