@xopcai/xopc 0.0.420 → 0.0.422

package/dist/src/gateway/automation-completion-delivery.js

@@ -0,0 +1,14 @@
+//#region src/gateway/automation-completion-delivery.ts
+/** Commit the inbox handoff before acknowledging the durable result outbox. */
+function deliverAutomationCompletion(run, context, notifications, emit) {
+	const payload = {
+		run,
+		...context
+	};
+	const notification = notifications.persistGatewayEvent("automation.run.completed", payload);
+	emit("automation.run.completed", payload);
+	if (notification) emit("notification.created", notification);
+	notifications.drain();
+}
+//#endregion
+export { deliverAutomationCompletion };

package/dist/src/gateway/global-defaults-admin.js

@@ -1,8 +1,8 @@
 import { AgentDefaultsSchema } from "../agent-config/schema.js";
 import { init_agent_config } from "../agent-config/index.js";
 import { AgentCatalogRepository, init_repository } from "../agent-catalog/repository.js";
-import { AgentCatalogService } from "../agent-catalog/service.js";
 import { validatePhoneModelChange } from "../phone/model-adapter.js";
+import { AgentCatalogService } from "../agent-catalog/service.js";
 import { validateComputerModelChange } from "../computer/model-config.js";
 import { GATEWAY_BUILTIN_TOOLS } from "./agent-builtin-tools.js";
 import { isDeepStrictEqual } from "node:util";

package/dist/src/gateway/hono/middleware/auth.js

@@ -9,8 +9,8 @@ import { authenticateDeviceAccessToken, getDevice } from "../../../storage/sqlit
 import { getOrCreateGatewayIdentity } from "../../../storage/sqlite/gateway-identity-repository.js";
 import { safeEqualSecret } from "../../security/secret-equal.js";
 import { resolveClientIpFromRequest } from "../../client-ip.js";
-import { authenticateBrowserSession } from "../../../storage/sqlite/browser-session-repository.js";
 import { PROOF_HEADER, acquireProofBodyBudget, consumeRequestNonce, parseRequestProof, proofDigest, requestProofMessage, verifyRequestProofSignature } from "../../security/device-request-proof.js";
+import { authenticateBrowserSession } from "../../../storage/sqlite/browser-session-repository.js";
 import { isChromeExtensionOrigin } from "../../security/origin-check.js";
 import { browserCookieRequestAllowed, readBrowserSessionCookie, writeBrowserSessionCookie } from "../../security/browser-session.js";
 import { authorizeTrustedProxy } from "../../trusted-proxy.js";

package/dist/src/gateway/hono/routes/agents.js

@@ -1,6 +1,6 @@
+import { normalizeAgentId } from "../../../agent-catalog/id.js";
 import { AgentEntrySchema, AgentModelsOverrideSchema, AgentProfileSchema, RuntimePolicySchema, SkillOverrideSchema, ToolPoliciesSchema } from "../../../agent-config/schema.js";
 import { init_agent_config } from "../../../agent-config/index.js";
-import { normalizeAgentId } from "../../../agent-catalog/id.js";
 import { init_agent_scope } from "../../../agent/agent-scope.js";
 import { getVoiceModelsConfig } from "../../../config/voice.js";
 import { createGatewayAgent, deleteAgentAvatarFile, deleteGatewayAgent, getGatewayAgentEffectiveConfig, listAgentProfileFiles, listGatewayAgents, readAgentAvatarFile, readAgentProfileFile, resolveAgentAvatarImage, updateGatewayAgent, writeAgentAvatarFromBase64, writeAgentProfileFile } from "../../agents-admin.js";

package/dist/src/gateway/hono/routes/config-patch/misc.js

@@ -1,10 +1,10 @@
 import { BindingsSchema, init_binding_schema } from "../../../../routing/binding-schema.js";
-import { AgentCatalogService } from "../../../../agent-catalog/service.js";
 import { ComputerConfigSchema, init_config } from "../../../../computer/config.js";
 import { ContextPlanningConfigSchema, HomeIntelligenceConfigSchema, KnowledgeMemoryConfigSchema, UserContextConfigSchema, UserModelConfigSchema, init_config as init_config$1 } from "../../../../user-context/config.js";
 import { BrowserConfigSchema, McpConfigSchema, VoiceConfigSchema, init_schema } from "../../../../config/schema.js";
 import { CredentialResolver, init_credentials } from "../../../../auth/credentials.js";
 import { canonicalizeConfiguredMcpServer } from "../../../../config/mcp-config-normalize.js";
+import { AgentCatalogService } from "../../../../agent-catalog/service.js";
 import { mergeGatewaySkillsMarketplacePatch, mergeSessionConfigPatch, mergeUpdateConfigPatch } from "../../../../config/web-patch.js";
 import { assertGatewayAuthConfigured, resolveGatewayAuth } from "../../../auth.js";
 import { isMaskedSecretPatchValue } from "../../lib/mask-secret-length.js";

package/dist/src/gateway/hono/routes/devices.js

@@ -230,6 +230,7 @@ function registerDeviceRoutes(authenticated, deps) {
 			deps.service.endpointTools.registry.revokePrincipal(principal.deviceId);
 			deps.service.realtime.disconnectPrincipal(principal.deviceId);
 			deps.service.voiceRealtime.disconnectPrincipal(principal.deviceId);
+			deps.service.phoneStreams.disconnectPrincipal(principal.deviceId);
 		}
 		return c.json({
 			ok: true,

package/dist/src/gateway/hono/routes/endpoint-compatibility.js

@@ -19,6 +19,10 @@ function registerEndpointCompatibilityRoutes(authenticated) {
 					capabilities: REALTIME_CAPABILITIES
 				},
 				turnDeviceContextV1: true,
+				endpointEnvironmentV1: true,
+				locationSharingV1: true,
+				mobilePhoneWorkspaceV1: true,
+				phoneMediaProtocolVersion: 1,
 				deviceStateToolsV1: true,
 				hardwareBridgeV1: true,
 				deviceLocationTasksV1: true,

package/dist/src/gateway/hono/routes/endpoint-environment.d.ts

@@ -0,0 +1,3 @@
+import type { Hono } from 'hono';
+import type { AuthenticatedRouteDeps } from './deps.js';
+export declare function registerEndpointEnvironmentRoutes(app: Hono, deps: AuthenticatedRouteDeps): void;

package/dist/src/gateway/hono/routes/endpoint-environment.js

@@ -0,0 +1,98 @@
+import { endpointTurnClaimSchema, init_src } from "../../../../packages/endpoint-tools-protocol/src/index.js";
+import { EndpointContextError } from "../../../endpoint-tools/context-store.js";
+import { endpointClaimBelongsToPrincipal } from "../../../endpoint-tools/turn-context.js";
+import { getGatewayPrincipal } from "../../security/gateway-principal.js";
+import { z } from "zod";
+import { bodyLimit } from "hono/body-limit";
+//#region src/gateway/hono/routes/endpoint-environment.ts
+init_src();
+const root = "/api/user-context/environment";
+const mutationSchema = z.strictObject({
+	origin: endpointTurnClaimSchema,
+	report: z.unknown().optional(),
+	heartbeat: z.unknown().optional()
+});
+function registerEndpointEnvironmentRoutes(app, deps) {
+	const runtime = deps.service.endpointTools;
+	app.get(root, (c) => {
+		const actor = getGatewayPrincipal(c);
+		c.header("Cache-Control", "no-store");
+		const snapshots = runtime.registry.list().filter((endpoint) => endpointClaimBelongsToPrincipal(runtime.registry, endpoint.endpointId, actor)).map((endpoint) => runtime.contexts.view(endpoint.endpointId)).filter(Boolean);
+		return c.json({
+			ok: true,
+			payload: snapshots
+		});
+	});
+	app.get(`${root}/endpoints/:endpointId`, (c) => {
+		c.header("Cache-Control", "no-store");
+		const id = c.req.param("endpointId");
+		if (!endpointClaimBelongsToPrincipal(runtime.registry, id, getGatewayPrincipal(c))) return c.json({
+			ok: false,
+			error: {
+				code: "FORBIDDEN",
+				message: "Context source is not accessible"
+			}
+		}, 403);
+		try {
+			return c.json({
+				ok: true,
+				payload: {
+					...runtime.contexts.connection(id),
+					context: runtime.contexts.view(id)
+				}
+			});
+		} catch {
+			return c.json({
+				ok: false,
+				error: {
+					code: "SOURCE_UNAVAILABLE",
+					message: "Context source is unavailable"
+				}
+			}, 409);
+		}
+	});
+	for (const action of ["reports", "heartbeats"]) app.post(`${root}/${action}`, bodyLimit({ maxSize: 16384 }), async (c) => {
+		c.header("Cache-Control", "no-store");
+		const parsed = mutationSchema.safeParse(await c.req.json().catch(() => null));
+		if (!parsed.success || (action === "reports" ? parsed.data.heartbeat !== void 0 || parsed.data.report === void 0 : parsed.data.report !== void 0 || parsed.data.heartbeat === void 0)) return c.json({
+			ok: false,
+			error: {
+				code: "CONTEXT_INVALID",
+				message: "Invalid context request"
+			}
+		}, 400);
+		const { origin } = parsed.data;
+		if (!endpointClaimBelongsToPrincipal(runtime.registry, origin.endpointId, getGatewayPrincipal(c))) return c.json({
+			ok: false,
+			error: {
+				code: "FORBIDDEN",
+				message: "Context source is not accessible"
+			}
+		}, 403);
+		if (!runtime.registry.verifyTurnClaim(origin.endpointId, origin.token)) return c.json({
+			ok: false,
+			error: {
+				code: "SOURCE_UNAVAILABLE",
+				message: "Context connection changed"
+			}
+		}, 409);
+		try {
+			const payload = action === "reports" ? runtime.contexts.report(origin.endpointId, parsed.data.report) : runtime.contexts.heartbeat(origin.endpointId, parsed.data.heartbeat);
+			return c.json({
+				ok: true,
+				payload
+			});
+		} catch (error) {
+			if (!(error instanceof EndpointContextError)) throw error;
+			return c.json({
+				ok: false,
+				error: {
+					code: error.code,
+					message: error.message
+				}
+			}, error.code === "CONTEXT_INVALID" ? 400 : 409);
+		}
+	});
+}
+//#endregion
+export { registerEndpointEnvironmentRoutes };

package/dist/src/gateway/hono/routes/endpoint-tools.js

@@ -106,6 +106,7 @@ function registerEndpointToolRoutes(authenticated, deps) {
 			if (accessRevoked) {
 				deps.service.realtime.disconnectPrincipal(id);
 				deps.service.voiceRealtime.disconnectPrincipal(id);
+				deps.service.phoneStreams.disconnectPrincipal(id);
 			}
 			if (principalRevoked) {
 				for (const endpoint of deps.service.endpointTools.registry.list()) if (endpoint.principalId === id) deps.service.endpointTools.disconnect(endpoint.endpointId, "Device revoked");

package/dist/src/gateway/hono/routes/lazy-bundles.js

@@ -3,6 +3,22 @@ function startsWithAny(path, prefixes) {
 	return prefixes.some((prefix) => path === prefix || path.startsWith(`${prefix}/`));
 }
 const AUTHENTICATED_LAZY_ROUTE_BUNDLES = [
+	{
+		id: "location-sharing",
+		match: (path) => /^\/api\/user-context\/environment\/location-shares(?:\/[^/]+(?:\/samples)?)?$/.test(path),
+		load: async () => {
+			const { registerLocationSharingRoutes } = await import("./location-sharing.js");
+			return { register: registerLocationSharingRoutes };
+		}
+	},
+	{
+		id: "endpoint-environment",
+		match: (path) => /^\/api\/user-context\/environment(?:\/(?:reports|heartbeats|endpoints\/[^/]+))?$/.test(path),
+		load: async () => {
+			const { registerEndpointEnvironmentRoutes } = await import("./endpoint-environment.js");
+			return { register: registerEndpointEnvironmentRoutes };
+		}
+	},
 	{
 		id: "phone",
 		match: (path) => startsWithAny(path, ["/api/phone"]),

package/dist/src/gateway/hono/routes/location-sharing.d.ts

@@ -0,0 +1,3 @@
+import { Hono } from 'hono';
+import type { AuthenticatedRouteDeps } from './deps.js';
+export declare function registerLocationSharingRoutes(parent: Hono, deps: AuthenticatedRouteDeps): void;

package/dist/src/gateway/hono/routes/location-sharing.js

@@ -0,0 +1,164 @@
+import { hasGatewayScope } from "../../security/gateway-scopes.js";
+import { locationShareRequestSchema } from "../../../../packages/endpoint-tools-protocol/src/location-sharing.js";
+import { endpointTurnClaimSchema, init_src } from "../../../../packages/endpoint-tools-protocol/src/index.js";
+import { PhoneError, init_contracts } from "../../../phone/contracts.js";
+import { getPhoneRuntime } from "../../../phone/runtime.js";
+import { LocationSharingError } from "../../../endpoint-tools/location-sharing.js";
+import { endpointClaimBelongsToPrincipal } from "../../../endpoint-tools/turn-context.js";
+import { getGatewayPrincipal } from "../../security/gateway-principal.js";
+import { z } from "zod";
+import { Hono } from "hono";
+import { bodyLimit } from "hono/body-limit";
+//#region src/gateway/hono/routes/location-sharing.ts
+init_src();
+init_contracts();
+const root = "/api/user-context/environment/location-shares";
+const originBody = z.strictObject({ origin: endpointTurnClaimSchema });
+function registerLocationSharingRoutes(parent, deps) {
+	const app = new Hono();
+	app.onError((error, c) => {
+		if (error instanceof LocationSharingError || error instanceof PhoneError) return c.json({
+			ok: false,
+			error: {
+				code: error.code,
+				message: error.message
+			}
+		}, 409);
+		return c.json({
+			ok: false,
+			error: {
+				code: "LOCATION_UNAVAILABLE",
+				message: "Location sharing is unavailable"
+			}
+		}, 503);
+	});
+	const runtime = deps.service.endpointTools;
+	runtime.locations?.setConsumer({
+		apply: (input, signal) => getPhoneRuntime().environment.apply(input, signal),
+		clear: (id, phoneId) => getPhoneRuntime().environment.clear(id, phoneId),
+		state: (id, phoneId) => {
+			const state = getPhoneRuntime().environment.status(phoneId);
+			return state.status === "clean" || state.shareId !== id ? "clean" : state.status === "applied" ? "applied" : state.status === "pending" ? "pending" : "cleanup_pending";
+		}
+	});
+	const authorize = (c, origin) => endpointClaimBelongsToPrincipal(runtime.registry, origin.endpointId, getGatewayPrincipal(c)) && runtime.registry.verifyTurnClaim(origin.endpointId, origin.token);
+	for (const path of [root, `${root}/*`]) app.use(path, bodyLimit({
+		maxSize: 4096,
+		onError: (c) => c.json({
+			ok: false,
+			error: {
+				code: "LOCATION_TOO_LARGE",
+				message: "Location request exceeds 4 KB"
+			}
+		}, 413)
+	}), async (c, next) => {
+		c.header("Cache-Control", "no-store");
+		await next();
+	});
+	app.post(root, async (c) => {
+		const parsed = originBody.extend({
+			request: locationShareRequestSchema,
+			disclosureVersion: z.literal("location-sharing-v1")
+		}).safeParse(await c.req.json().catch(() => null));
+		if (!parsed.success) return c.json({
+			ok: false,
+			error: {
+				code: "LOCATION_INVALID",
+				message: "Invalid location sharing request"
+			}
+		}, 400);
+		if (!authorize(c, parsed.data.origin)) return c.json({
+			ok: false,
+			error: {
+				code: "FORBIDDEN",
+				message: "Location source is not accessible"
+			}
+		}, 403);
+		if (!hasGatewayScope(getGatewayPrincipal(c).scopes, "agents.run") || !await deps.service.sessions.getSession(parsed.data.request.conversationId)) return c.json({
+			ok: false,
+			error: {
+				code: "FORBIDDEN",
+				message: "Conversation is not accessible"
+			}
+		}, 403);
+		if (parsed.data.request.phoneId) {
+			if (!deps.service.currentConfig.phone.enabled) return c.json({
+				ok: false,
+				error: {
+					code: "PHONE_DISABLED",
+					message: "Enable Phone Use before sharing location"
+				}
+			}, 409);
+			const phone = getPhoneRuntime().repository.get(parsed.data.request.phoneId);
+			if (!phone.enabled || phone.connection?.kind !== "aliyun-adb") return c.json({
+				ok: false,
+				error: {
+					code: "PHONE_ENV_UNSUPPORTED",
+					message: "Choose an enabled Alibaba cloud phone"
+				}
+			}, 409);
+		}
+		return c.json({
+			ok: true,
+			payload: runtime.locations.create(parsed.data.origin.endpointId, parsed.data.request)
+		}, 201);
+	});
+	app.get(root, (c) => {
+		const endpointId = c.req.query("endpointId") ?? "";
+		if (!endpointClaimBelongsToPrincipal(runtime.registry, endpointId, getGatewayPrincipal(c))) return c.json({
+			ok: false,
+			error: {
+				code: "FORBIDDEN",
+				message: "Location source is not accessible"
+			}
+		}, 403);
+		return c.json({
+			ok: true,
+			payload: runtime.locations.list(endpointId, c.req.query("conversationId"))
+		});
+	});
+	app.post(`${root}/:id/samples`, async (c) => {
+		const parsed = originBody.extend({
+			sequence: z.number().int().positive(),
+			sample: z.unknown()
+		}).safeParse(await c.req.json().catch(() => null));
+		if (!parsed.success) return c.json({
+			ok: false,
+			error: {
+				code: "LOCATION_INVALID",
+				message: "Invalid location sample"
+			}
+		}, 400);
+		if (!authorize(c, parsed.data.origin)) return c.json({
+			ok: false,
+			error: {
+				code: "FORBIDDEN",
+				message: "Location source is not accessible"
+			}
+		}, 403);
+		return c.json({
+			ok: true,
+			payload: await runtime.locations.sample(c.req.param("id"), parsed.data.origin.endpointId, {
+				sequence: parsed.data.sequence,
+				sample: parsed.data.sample
+			})
+		});
+	});
+	app.delete(`${root}/:id`, async (c) => {
+		const parsed = originBody.safeParse(await c.req.json().catch(() => null));
+		if (!parsed.success || !authorize(c, parsed.data.origin)) return c.json({
+			ok: false,
+			error: {
+				code: "FORBIDDEN",
+				message: "Location source is not accessible"
+			}
+		}, 403);
+		return c.json({
+			ok: true,
+			payload: await runtime.locations.revoke(c.req.param("id"), parsed.data.origin.endpointId)
+		});
+	});
+	parent.route("/", app);
+}
+//#endregion
+export { registerLocationSharingRoutes };

package/dist/src/gateway/hono/routes/notes.js

@@ -1,9 +1,9 @@
 import { NoteDeleteOutputSchema, NoteGetOutputSchema, ProductReadContracts } from "../../../../packages/gateway-contract/src/capabilities.js";
 import { init_src } from "../../../../packages/gateway-contract/src/index.js";
-import { CapabilityError } from "../../../capabilities/runtime/errors.js";
-import "../../../capabilities/runtime/dispatcher.js";
 import { init_session_key, resolveConversationId } from "../../../routing/session-key.js";
 import { agentExists, getDefaultAgentId, init_resolve_route } from "../../../routing/resolve-route.js";
+import { CapabilityError } from "../../../capabilities/runtime/errors.js";
+import "../../../capabilities/runtime/dispatcher.js";
 import { resolveGatewayEffectiveHost } from "../../../config/gateway-bind.js";
 import { getShareStore } from "../../../share/share-store.js";
 import { resolveShareUrl } from "../../../share/share-url.js";

package/dist/src/gateway/hono/routes/phone-setup.js

@@ -1,7 +1,6 @@
 import { resolveStateDir } from "../../../config/paths-state.js";
 import { getSessionMetadata, init_session_read_repository } from "../../../storage/sqlite/session-read-repository.js";
 import { AgentCatalogRepository, init_repository } from "../../../agent-catalog/repository.js";
-import { AgentCatalogService } from "../../../agent-catalog/service.js";
 import { init_paths } from "../../../config/paths.js";
 import { resolveEffectiveAgentConfigForAgent } from "../../../config/agent-profile.js";
 import { getModelRegistry, init_model_registry } from "../../../providers/model-registry.js";
@@ -10,6 +9,7 @@ import { phoneAllowsApp } from "../../../phone/app-access.js";
 import { managedPhoneAdbPath } from "../../../runtime-tools/phone-dependency-catalog.js";
 import { phoneModelProfile } from "../../../phone/model-adapter.js";
 import { getPhoneRuntime } from "../../../phone/runtime.js";
+import { AgentCatalogService } from "../../../agent-catalog/service.js";
 import { PhoneSetupService } from "../../../phone/setup/service.js";
 import { PhoneDependencyManager, probePhoneAdb } from "../../../runtime-tools/phone-dependencies.js";
 import { createHash } from "node:crypto";