@xopcai/xopc 0.0.53 → 0.0.54

package/dist/src/gateway/hono/oauth.js

@@ -1,6 +1,6 @@
 import { CredentialResolver, init_credentials } from "../../auth/credentials.js";
-import { anthropicOAuthProvider } from "../../auth/oauth/anthropic.js";
 import { init_providers, isProviderConfigured } from "../../providers/index.js";
+import { anthropicOAuthProvider } from "../../auth/oauth/anthropic.js";
 import { minimaxOAuthProvider } from "../../auth/oauth/minimax.js";
 import { minimaxCnOAuthProvider } from "../../auth/oauth/minimax-cn.js";
 import { kimiCodingOAuthProvider } from "../../auth/oauth/kimi-coding.js";

package/dist/src/gateway/hono/routes/auth-registry-extensions.js

@@ -7,8 +7,8 @@ import { createOAuthHandler } from "../oauth.js";
 import { createOAuthAsyncHandler } from "../oauth-async.js";
 import { extensionAssetMimeType } from "../lib/extension-assets.js";
 import { loadExtensionStore, saveExtensionStore } from "../lib/extension-store.js";
-import { existsSync, readFileSync, statSync } from "node:fs";
 import { relative, resolve } from "node:path";
+import { existsSync, readFileSync, statSync } from "node:fs";
 //#region src/gateway/hono/routes/auth-registry-extensions.ts
 init_providers();
 const EXTENSION_ASSET_CSP = "default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; connect-src 'none'; frame-ancestors 'self'; frame-src 'none'; base-uri 'none'; object-src 'none'; form-action 'none'";

package/dist/src/gateway/hono/routes/config.js

@@ -1,5 +1,5 @@
-import { CredentialResolver, init_credentials } from "../../../auth/credentials.js";
 import { BindingsConfigSchema, init_schema } from "../../../config/schema.js";
+import { CredentialResolver, init_credentials } from "../../../auth/credentials.js";
 import { normalizePatchAgentImageGenerationModel, normalizePatchAgentModel } from "../lib/agent-model.js";
 import { applyToolsWebPatch } from "../../config-tools-web.js";
 import { buildSafeWebConfigPayload } from "../lib/config-payload.js";

package/dist/src/gateway/hono/routes/dreaming.js

@@ -5,8 +5,8 @@ import { resolveDreamingConfig } from "../../../agent/memory/dreaming/config.js"
 import { parseDreamingLastRunFile } from "../../../agent/memory/dreaming/last-run.js";
 import { readDreamingEvents } from "../../../agent/memory/dreaming/events.js";
 import { previewDreamingDeepPromotion } from "../../../agent/memory/dreaming/preview.js";
-import fs from "node:fs/promises";
 import path from "node:path";
+import fs from "node:fs/promises";
 //#region src/gateway/hono/routes/dreaming.ts
 init_schema();
 function isRecord(v) {

package/dist/src/gateway/hono/routes/host-fs.js

@@ -1,8 +1,8 @@
 import { createLogger } from "../../../utils/logger/index.js";
 import { init_logger } from "../../../utils/logger.js";
-import { readdir, realpath, stat } from "node:fs/promises";
 import * as path$1 from "node:path";
 import * as os$1 from "node:os";
+import { readdir, realpath, stat } from "node:fs/promises";
 //#region src/gateway/hono/routes/host-fs.ts
 init_logger();
 const log = createLogger("HostFs");

package/dist/src/gateway/hono/routes/models.js

@@ -1,8 +1,8 @@
 import { resolveModelsJsonPath } from "../../../config/paths.js";
-import { CredentialResolver, init_credentials } from "../../../auth/credentials.js";
 import { init_resolve_config_value, testApiKeyResolution } from "../../../config/resolve-config-value.js";
 import { init_models_json, loadModelsJson, saveModelsJson, validateModelsConfig } from "../../../config/models-json.js";
 import { getModelRegistry } from "../../../providers/model-registry.js";
+import { CredentialResolver, init_credentials } from "../../../auth/credentials.js";
 import { getProviderRegistry, init_plugin_registry } from "../../../providers/plugin-registry.js";
 import { PROVIDER_META, getAllModels, getAllProviders, getAvailableModels, getProviderActiveKeySource, init_providers, isProviderConfigured } from "../../../providers/index.js";
 import { getImageGenerationProvider } from "../../../agent/image/generation/provider-registry.js";

package/dist/src/gateway/hono/routes/workspace.js

@@ -1,16 +1,16 @@
-import { createLogger } from "../../../utils/logger/index.js";
-import { init_logger } from "../../../utils/logger.js";
 import { init_agent_scope, listAgentEntries, normalizeAgentId, resolveAgentHomeDir, resolveAgentWorkspaceDir, resolveDefaultAgentId } from "../../../agent/agent-scope.js";
 import { getWorkspacePath, init_schema } from "../../../config/schema.js";
 import { extractProfileAgentId } from "../../../config/agent-profile.js";
+import { createLogger } from "../../../utils/logger/index.js";
+import { init_logger } from "../../../utils/logger.js";
 import { resolveSafeInboundFilePath } from "../../../channels/attachments/inbound-persist.js";
 import { isPathUnderWorkspace, resolveWorkspaceSafePath, toWorkspaceRelativePosix } from "../../workspace-editor-path.js";
 import { resolveSafeTtsFilePath } from "../../../channels/attachments/outbound-tts-persist.js";
 import { resolveHeartbeatMdPath } from "../../workspace-heartbeat-path.js";
 import { listWorkspaceRelativeFilesFsFallback } from "../../workspace-fs-file-list.js";
 import { runRipgrepInDirectory, runRipgrepListFiles } from "../../workspace-ripgrep.js";
-import { readFile, readdir, stat, writeFile } from "node:fs/promises";
 import { join, resolve } from "node:path";
+import { readFile, readdir, stat, writeFile } from "node:fs/promises";
 //#region src/gateway/hono/routes/workspace.ts
 init_schema();
 init_agent_scope();

package/dist/src/gateway/hono/sse.js

@@ -1,8 +1,8 @@
+import { buildSessionKey, init_session_key, parseSessionKey } from "../../routing/session-key.js";
+import { getDefaultAgentId, init_resolve_route } from "../../routing/resolve-route.js";
 import { updateAsyncLogContext } from "../../utils/logger/context.js";
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
-import { buildSessionKey, init_session_key, parseSessionKey } from "../../routing/session-key.js";
-import { getDefaultAgentId, init_resolve_route } from "../../routing/resolve-route.js";
 import { MAX_WEBCHAT_ATTACHMENT_FILE_BYTES } from "../chat-limits.js";
 import { stringifySSEData } from "./sse-json.js";
 import { randomUUID } from "node:crypto";

package/dist/src/gateway/lock.js

@@ -1,7 +1,7 @@
-import { createHash } from "node:crypto";
+import path from "node:path";
 import fsSync from "node:fs";
+import { createHash } from "node:crypto";
 import fs from "node:fs/promises";
-import path from "node:path";
 import net from "node:net";
 import { homedir } from "os";
 //#region src/gateway/lock.ts

package/dist/src/gateway/security/csp.d.ts

@@ -9,6 +9,7 @@ export declare function computeInlineScriptHashes(html: string): string[];
  * For the gateway console, we use:
  * - `script-src 'self'` + optional SHA-256 hashes for inline scripts (no unsafe-inline)
  * - `style-src 'self' 'unsafe-inline'` (Tailwind + runtime style injection)
+ * - `media-src 'self' blob:` (chat voice previews / recorded clips use blob URLs)
  * - `frame-ancestors 'none'` (prevent clickjacking)
  * - `base-uri 'none'` (prevent base tag hijacking)
  * - `object-src 'none'` (prevent plugin execution)

package/dist/src/gateway/security/csp.js

@@ -27,6 +27,7 @@ function hasSrcAttribute(openTag) {
 * For the gateway console, we use:
 * - `script-src 'self'` + optional SHA-256 hashes for inline scripts (no unsafe-inline)
 * - `style-src 'self' 'unsafe-inline'` (Tailwind + runtime style injection)
+* - `media-src 'self' blob:` (chat voice previews / recorded clips use blob URLs)
 * - `frame-ancestors 'none'` (prevent clickjacking)
 * - `base-uri 'none'` (prevent base tag hijacking)
 * - `object-src 'none'` (prevent plugin execution)
@@ -41,6 +42,7 @@ function buildGatewayConsoleCspHeader(options) {
 		hashes?.length ? `script-src 'self' ${hashes.map((hash) => `'${hash}'`).join(" ")}` : "script-src 'self'",
 		"style-src 'self' 'unsafe-inline'",
 		"img-src 'self' data: blob: https:",
+		"media-src 'self' blob: data:",
 		"font-src 'self'",
 		`connect-src ${options?.connectSrc ?? "'self' ws: wss:"}`,
 		"worker-src 'self'"

package/dist/src/gateway/security/csp.js.map

@@ -1 +1 @@
-{"version":3,"file":"csp.js","names":[],"sources":["../../../../src/gateway/security/csp.ts"],"sourcesContent":["import { createHash } from 'node:crypto';\n\n/**\n * Compute SHA-256 CSP hashes for inline `<script>` blocks in an HTML string.\n * Only scripts without a `src` attribute are considered inline.\n */\nexport function computeInlineScriptHashes(html: string): string[] {\n  const hashes: string[] = [];\n  const scriptRegex = /<script(?:\\s[^>]*)?>([^]*?)<\\/script>/gi;\n  let match: RegExpExecArray | null;\n  while ((match = scriptRegex.exec(html)) !== null) {\n    const openTag = match[0].slice(0, match[0].indexOf('>') + 1);\n    if (hasSrcAttribute(openTag)) {\n      continue;\n    }\n    const content = match[1];\n    if (!content) {\n      continue;\n    }\n    const hash = createHash('sha256').update(content, 'utf8').digest('base64');\n    hashes.push(`sha256-${hash}`);\n  }\n  return hashes;\n}\n\nconst ATTRIBUTE_NAME_REGEX = /\\s([^\\s=/>]+)(?:\\s*=\\s*(?:\"[^\"]*\"|'[^']*'|[^\\s>]+))?/g;\n\nfunction hasSrcAttribute(openTag: string): boolean {\n  return Array.from(openTag.matchAll(ATTRIBUTE_NAME_REGEX)).some(\n    (attrMatch) => attrMatch[1]?.toLowerCase() === 'src',\n  );\n}\n\n/**\n * Build a Content-Security-Policy header string.\n *\n * For the gateway console, we use:\n * - `script-src 'self'` + optional SHA-256 hashes for inline scripts (no unsafe-inline)\n * - `style-src 'self' 'unsafe-inline'` (Tailwind + runtime style injection)\n * - `frame-ancestors 'none'` (prevent clickjacking)\n * - `base-uri 'none'` (prevent base tag hijacking)\n * - `object-src 'none'` (prevent plugin execution)\n */\nexport function buildGatewayConsoleCspHeader(options?: {\n  inlineScriptHashes?: string[];\n  connectSrc?: string;\n}): string {\n  const hashes = options?.inlineScriptHashes;\n  const scriptSrc = hashes?.length\n    ? `script-src 'self' ${hashes.map((hash) => `'${hash}'`).join(' ')}`\n    : \"script-src 'self'\";\n  const connectSrc = options?.connectSrc ?? \"'self' ws: wss:\";\n\n  return [\n    \"default-src 'self'\",\n    \"base-uri 'none'\",\n    \"object-src 'none'\",\n    \"frame-ancestors 'none'\",\n    scriptSrc,\n    \"style-src 'self' 'unsafe-inline'\",\n    \"img-src 'self' data: blob: https:\",\n    \"font-src 'self'\",\n    `connect-src ${connectSrc}`,\n    \"worker-src 'self'\",\n  ].join('; ');\n}\n"],"mappings":";;;;;;AAMA,SAAgB,0BAA0B,MAAwB;CAChE,MAAM,SAAmB,EAAE;CAC3B,MAAM,cAAc;CACpB,IAAI;AACJ,SAAQ,QAAQ,YAAY,KAAK,KAAK,MAAM,MAAM;AAEhD,MAAI,gBADY,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,QAAQ,IAAI,GAAG,EAC/B,CAAC,CAC1B;EAEF,MAAM,UAAU,MAAM;AACtB,MAAI,CAAC,QACH;EAEF,MAAM,OAAO,WAAW,SAAS,CAAC,OAAO,SAAS,OAAO,CAAC,OAAO,SAAS;AAC1E,SAAO,KAAK,UAAU,OAAO;;AAE/B,QAAO;;AAGT,MAAM,uBAAuB;AAE7B,SAAS,gBAAgB,SAA0B;AACjD,QAAO,MAAM,KAAK,QAAQ,SAAS,qBAAqB,CAAC,CAAC,MACvD,cAAc,UAAU,IAAI,aAAa,KAAK,MAChD;;;;;;;;;;;;AAaH,SAAgB,6BAA6B,SAGlC;CACT,MAAM,SAAS,SAAS;AAMxB,QAAO;EACL;EACA;EACA;EACA;EATgB,QAAQ,SACtB,qBAAqB,OAAO,KAAK,SAAS,IAAI,KAAK,GAAG,CAAC,KAAK,IAAI,KAChE;EASF;EACA;EACA;EACA,eAXiB,SAAS,cAAc;EAYxC;EACD,CAAC,KAAK,KAAK"}
+{"version":3,"file":"csp.js","names":[],"sources":["../../../../src/gateway/security/csp.ts"],"sourcesContent":["import { createHash } from 'node:crypto';\n\n/**\n * Compute SHA-256 CSP hashes for inline `<script>` blocks in an HTML string.\n * Only scripts without a `src` attribute are considered inline.\n */\nexport function computeInlineScriptHashes(html: string): string[] {\n  const hashes: string[] = [];\n  const scriptRegex = /<script(?:\\s[^>]*)?>([^]*?)<\\/script>/gi;\n  let match: RegExpExecArray | null;\n  while ((match = scriptRegex.exec(html)) !== null) {\n    const openTag = match[0].slice(0, match[0].indexOf('>') + 1);\n    if (hasSrcAttribute(openTag)) {\n      continue;\n    }\n    const content = match[1];\n    if (!content) {\n      continue;\n    }\n    const hash = createHash('sha256').update(content, 'utf8').digest('base64');\n    hashes.push(`sha256-${hash}`);\n  }\n  return hashes;\n}\n\nconst ATTRIBUTE_NAME_REGEX = /\\s([^\\s=/>]+)(?:\\s*=\\s*(?:\"[^\"]*\"|'[^']*'|[^\\s>]+))?/g;\n\nfunction hasSrcAttribute(openTag: string): boolean {\n  return Array.from(openTag.matchAll(ATTRIBUTE_NAME_REGEX)).some(\n    (attrMatch) => attrMatch[1]?.toLowerCase() === 'src',\n  );\n}\n\n/**\n * Build a Content-Security-Policy header string.\n *\n * For the gateway console, we use:\n * - `script-src 'self'` + optional SHA-256 hashes for inline scripts (no unsafe-inline)\n * - `style-src 'self' 'unsafe-inline'` (Tailwind + runtime style injection)\n * - `media-src 'self' blob:` (chat voice previews / recorded clips use blob URLs)\n * - `frame-ancestors 'none'` (prevent clickjacking)\n * - `base-uri 'none'` (prevent base tag hijacking)\n * - `object-src 'none'` (prevent plugin execution)\n */\nexport function buildGatewayConsoleCspHeader(options?: {\n  inlineScriptHashes?: string[];\n  connectSrc?: string;\n}): string {\n  const hashes = options?.inlineScriptHashes;\n  const scriptSrc = hashes?.length\n    ? `script-src 'self' ${hashes.map((hash) => `'${hash}'`).join(' ')}`\n    : \"script-src 'self'\";\n  const connectSrc = options?.connectSrc ?? \"'self' ws: wss:\";\n\n  return [\n    \"default-src 'self'\",\n    \"base-uri 'none'\",\n    \"object-src 'none'\",\n    \"frame-ancestors 'none'\",\n    scriptSrc,\n    \"style-src 'self' 'unsafe-inline'\",\n    \"img-src 'self' data: blob: https:\",\n    \"media-src 'self' blob: data:\",\n    \"font-src 'self'\",\n    `connect-src ${connectSrc}`,\n    \"worker-src 'self'\",\n  ].join('; ');\n}\n"],"mappings":";;;;;;AAMA,SAAgB,0BAA0B,MAAwB;CAChE,MAAM,SAAmB,EAAE;CAC3B,MAAM,cAAc;CACpB,IAAI;AACJ,SAAQ,QAAQ,YAAY,KAAK,KAAK,MAAM,MAAM;AAEhD,MAAI,gBADY,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,QAAQ,IAAI,GAAG,EAC/B,CAAC,CAC1B;EAEF,MAAM,UAAU,MAAM;AACtB,MAAI,CAAC,QACH;EAEF,MAAM,OAAO,WAAW,SAAS,CAAC,OAAO,SAAS,OAAO,CAAC,OAAO,SAAS;AAC1E,SAAO,KAAK,UAAU,OAAO;;AAE/B,QAAO;;AAGT,MAAM,uBAAuB;AAE7B,SAAS,gBAAgB,SAA0B;AACjD,QAAO,MAAM,KAAK,QAAQ,SAAS,qBAAqB,CAAC,CAAC,MACvD,cAAc,UAAU,IAAI,aAAa,KAAK,MAChD;;;;;;;;;;;;;AAcH,SAAgB,6BAA6B,SAGlC;CACT,MAAM,SAAS,SAAS;AAMxB,QAAO;EACL;EACA;EACA;EACA;EATgB,QAAQ,SACtB,qBAAqB,OAAO,KAAK,SAAS,IAAI,KAAK,GAAG,CAAC,KAAK,IAAI,KAChE;EASF;EACA;EACA;EACA;EACA,eAZiB,SAAS,cAAc;EAaxC;EACD,CAAC,KAAK,KAAK"}

package/dist/src/gateway/service/run-gateway-agent.js

@@ -1,8 +1,8 @@
+import { buildSessionKey, init_session_key, parseSessionKey } from "../../routing/session-key.js";
+import { getDefaultAgentId, init_resolve_route } from "../../routing/resolve-route.js";
 import { inboundCorrelationMetadataFromAsyncLogContext } from "../../utils/logger/context.js";
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
-import { buildSessionKey, init_session_key, parseSessionKey } from "../../routing/session-key.js";
-import { getDefaultAgentId, init_resolve_route } from "../../routing/resolve-route.js";
 import { prependEnvelopeTimestamp } from "../../channels/envelope-timestamp.js";
 import { shouldSkipWebchatInboundByAbortCutoff } from "../../session/abort-cutoff.js";
 import "../chat-limits.js";

package/dist/src/gateway/service.js

@@ -1,15 +1,15 @@
 import { __toCommonJS } from "../../_virtual/_rolldown/runtime.js";
 import { PACKAGE_VERSION, init_package_version } from "../package-version.js";
+import { resolveStateDir } from "../config/paths-state.js";
+import { getWorkspacePath, init_schema } from "../config/schema.js";
+import { buildSessionKey, init_session_key, parseSessionKey } from "../routing/session-key.js";
+import { getDefaultAgentId, init_resolve_route } from "../routing/resolve-route.js";
 import { getLogDir } from "../utils/logger/config.js";
 import { getLogStats } from "../utils/logger/stats.js";
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
-import { resolveStateDir } from "../config/paths-state.js";
 import { init_paths, resolveAgentDir, resolveConfigPath, resolveCronJobsPath, resolveExtensionsDir } from "../config/paths.js";
-import { getWorkspacePath, init_schema } from "../config/schema.js";
 import { loadConfig, saveConfig } from "../config/loader.js";
-import { buildSessionKey, init_session_key, parseSessionKey } from "../routing/session-key.js";
-import { getDefaultAgentId, init_resolve_route } from "../routing/resolve-route.js";
 import { getModelRegistry } from "../providers/model-registry.js";
 import { init_providers, providers_exports } from "../providers/index.js";
 import { createSkillConfigManager } from "../agent/skills/config.js";
@@ -48,8 +48,8 @@ import { restartGatewayProcessWithFreshPid } from "./respawn.js";
 import { getDistinctSessionChatIds } from "./service/session-chat-ids.js";
 import { runGatewayAgent } from "./service/run-gateway-agent.js";
 import { GatewaySseHub } from "./service/sse-hub.js";
-import { existsSync, mkdirSync, rmSync } from "node:fs";
 import { join } from "node:path";
+import { existsSync, mkdirSync, rmSync } from "node:fs";
 import crypto from "crypto";
 //#region src/gateway/service.ts
 init_schema();

package/dist/src/gateway/workspace-fs-file-list.js

@@ -1,7 +1,7 @@
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
-import { readdir } from "node:fs/promises";
 import { join, relative } from "node:path";
+import { readdir } from "node:fs/promises";
 //#region src/gateway/workspace-fs-file-list.ts
 init_logger();
 const log = createLogger("WorkspaceFsFileList");

package/dist/src/gateway/workspace-heartbeat-path.js

@@ -1,6 +1,6 @@
 import { init_agent_scope, resolveAgentWorkspaceDir, resolveDefaultAgentId } from "../agent/agent-scope.js";
-import { WORKSPACE_FILES, init_paths } from "../config/paths.js";
 import { getWorkspacePath, init_schema } from "../config/schema.js";
+import { WORKSPACE_FILES, init_paths } from "../config/paths.js";
 import { join } from "node:path";
 //#region src/gateway/workspace-heartbeat-path.ts
 init_schema();

package/dist/src/infra/update-check.js

@@ -1,7 +1,7 @@
 import { PACKAGE_VERSION, init_package_version } from "../package-version.js";
 import { channelToNpmTag } from "./update-channels.js";
-import { access, readFile } from "node:fs/promises";
 import { dirname, join } from "node:path";
+import { access, readFile } from "node:fs/promises";
 import { fileURLToPath } from "node:url";
 //#region src/infra/update-check.ts
 init_package_version();

package/dist/src/infra/update-lock.js

@@ -1,9 +1,9 @@
-import { init_write_file_atomic, writeTextAtomic } from "./write-file-atomic.js";
+import { init_paths_state, resolveUpdateLockPath } from "../config/paths-state.js";
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
-import { init_paths_state, resolveUpdateLockPath } from "../config/paths-state.js";
-import { mkdir, readFile, unlink } from "node:fs/promises";
+import { init_write_file_atomic, writeTextAtomic } from "./write-file-atomic.js";
 import { dirname } from "node:path";
+import { mkdir, readFile, unlink } from "node:fs/promises";
 //#region src/infra/update-lock.ts
 init_write_file_atomic();
 init_paths_state();

package/dist/src/infra/update-runner.js

@@ -1,7 +1,7 @@
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
-import { access, readdir, unlink } from "node:fs/promises";
 import { join } from "node:path";
+import { access, readdir, unlink } from "node:fs/promises";
 import { spawn } from "node:child_process";
 //#region src/infra/update-runner.ts
 init_logger();

package/dist/src/infra/update-startup.js

@@ -1,8 +1,8 @@
 import { PACKAGE_VERSION, init_package_version } from "../package-version.js";
-import { init_write_file_atomic, writeTextAtomic } from "./write-file-atomic.js";
+import { init_paths_state, resolveUpdateCheckStatePath } from "../config/paths-state.js";
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
-import { init_paths_state, resolveUpdateCheckStatePath } from "../config/paths-state.js";
+import { init_write_file_atomic, writeTextAtomic } from "./write-file-atomic.js";
 import { acquireUpdateLock } from "./update-lock.js";
 import { normalizeUpdateChannel } from "./update-channels.js";
 import { compareSemver, detectInstallKind, resolveNpmChannelTag, resolvePackageRoot } from "./update-check.js";

package/dist/src/infra/write-file-atomic.js

@@ -1,8 +1,8 @@
 import { __esmMin } from "../../_virtual/_rolldown/runtime.js";
-import { randomUUID } from "node:crypto";
+import path from "node:path";
 import { chmodSync, closeSync, copyFileSync, fsyncSync, mkdirSync, openSync, renameSync, rmSync, writeFileSync } from "node:fs";
+import { randomUUID } from "node:crypto";
 import { chmod, copyFile, mkdir, open, rename, rm } from "node:fs/promises";
-import path from "node:path";
 //#region src/infra/write-file-atomic.ts
 /**
 * Durable single-file writes: temp file → fsync → rename to target.

package/dist/src/providers/auth-runtime/auth-profile-store.js

@@ -1,7 +1,7 @@
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
-import { existsSync, mkdirSync, readFileSync, renameSync, writeFileSync } from "node:fs";
 import { dirname, join } from "node:path";
+import { existsSync, mkdirSync, readFileSync, renameSync, writeFileSync } from "node:fs";
 //#region src/providers/auth-runtime/auth-profile-store.ts
 /**
 * {@link AuthProfileStore} implementations.

package/dist/src/providers/index.js

@@ -1,8 +1,8 @@
 import { __esmMin, __exportAll } from "../../_virtual/_rolldown/runtime.js";
-import { PROVIDER_ENV_MAP, getApiKeyFromEnv, init_env_keys } from "./env-keys.js";
-import { CredentialResolver, hasCredentials, init_credentials, resolveApiKey } from "../auth/credentials.js";
 import { hasProviderAuthOnDiskSync, init_sync_provider_auth } from "../auth/sync-provider-auth.js";
+import { PROVIDER_ENV_MAP, getApiKeyFromEnv, init_env_keys } from "./env-keys.js";
 import { ModelRegistry, getModelRegistry, init_model_registry, resetModelRegistry } from "./model-registry.js";
+import { CredentialResolver, hasCredentials, init_credentials, resolveApiKey } from "../auth/credentials.js";
 import { getProviderRegistry, init_plugin_registry } from "./plugin-registry.js";
 import { getModel, getModels, getProviders } from "@earendil-works/pi-ai";
 //#region src/providers/index.ts

package/dist/src/providers/model-registry.js

@@ -1,10 +1,10 @@
 import { __esmMin } from "../../_virtual/_rolldown/runtime.js";
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
-import { getApiKeyFromEnv, init_env_keys } from "./env-keys.js";
 import { resolveModelsJsonPath } from "../config/paths.js";
 import { init_resolve_config_value, resolveConfigValue, resolveHeaders } from "../config/resolve-config-value.js";
 import { getDefaultModelValues, init_models_json, validateModelsConfig } from "../config/models-json.js";
+import { getApiKeyFromEnv, init_env_keys } from "./env-keys.js";
 import { existsSync, readFileSync } from "fs";
 import { getModels, getProviders } from "@earendil-works/pi-ai";
 //#region src/providers/model-registry.ts

package/dist/src/session/config-store.js

@@ -1,9 +1,9 @@
-import { init_write_file_atomic, writeTextAtomic } from "../infra/write-file-atomic.js";
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
-import { mkdir, readFile } from "fs/promises";
+import { init_write_file_atomic, writeTextAtomic } from "../infra/write-file-atomic.js";
 import { join } from "path";
 import { existsSync } from "fs";
+import { mkdir, readFile } from "fs/promises";
 //#region src/session/config-store.ts
 /**
 * Session Config Store

package/dist/src/session/parity/jsonl-transcript-io.js

@@ -2,9 +2,9 @@ import { init_write_file_atomic, writeTextAtomic } from "../../infra/write-file-
 import { loadEntriesFromFile } from "./load-jsonl-entries.js";
 import { withTranscriptFileLock } from "./transcript-file-lock.js";
 import { buildSessionContextForLlm, isTranscriptContextEntry } from "../session-context-for-llm.js";
-import { randomUUID } from "node:crypto";
-import { existsSync } from "node:fs";
 import path from "node:path";
+import { existsSync } from "node:fs";
+import { randomUUID } from "node:crypto";
 import { CURRENT_SESSION_VERSION, SessionManager } from "@earendil-works/pi-coding-agent";
 //#region src/session/parity/jsonl-transcript-io.ts
 init_write_file_atomic();

package/dist/src/session/parity/sessions-json-file.js

@@ -1,7 +1,7 @@
 import { init_write_file_atomic, writeTextAtomic } from "../../infra/write-file-atomic.js";
+import { dirname } from "node:path";
 import { existsSync } from "node:fs";
 import { mkdir, readFile } from "node:fs/promises";
-import { dirname } from "node:path";
 import lockfile from "proper-lockfile";
 //#region src/session/parity/sessions-json-file.ts
 init_write_file_atomic();

package/dist/src/session/parity/transcript-file-lock.js

@@ -1,7 +1,7 @@
-import { createHash } from "node:crypto";
+import path from "node:path";
 import { existsSync } from "node:fs";
+import { createHash } from "node:crypto";
 import { mkdir, open, readFile, rm, stat } from "node:fs/promises";
-import path from "node:path";
 //#region src/session/parity/transcript-file-lock.ts
 /**
 * Cross-process (and re-entrant same-process) advisory lock for session transcript JSONL.

package/dist/src/session/parity/transcript-paths.js

@@ -1,8 +1,8 @@
 import { __esmMin } from "../../../_virtual/_rolldown/runtime.js";
 import { formatSessionArchiveTimestamp, init_artifacts } from "./artifacts.js";
 import { init_session_id, validateSessionId } from "./session-id.js";
-import fsSync from "node:fs";
 import { dirname, relative, resolve } from "node:path";
+import fsSync from "node:fs";
 //#region src/session/parity/transcript-paths.ts
 function resolveSessionsDir(opts) {
 	const sessionsDir = opts?.sessionsDir?.trim();

package/dist/src/session/search-index-cache.js

@@ -1,7 +1,7 @@
 import { FILENAMES, init_paths } from "../config/paths.js";
 import { SessionSearchIndex } from "./search-index.js";
-import { stat } from "node:fs/promises";
 import { join } from "node:path";
+import { stat } from "node:fs/promises";
 //#region src/session/search-index-cache.ts
 /**
 * Shared cache for {@link SessionSearchIndex} builds (invalidated on session writes).

package/dist/src/session/search-index.js

@@ -2,8 +2,8 @@ import { init_transcript_paths, resolveSessionFilePath } from "./parity/transcri
 import { FILENAMES, init_paths } from "../config/paths.js";
 import { isTranscriptContextEntry } from "./session-context-for-llm.js";
 import { readTranscriptRowsFromFile, rowsToLlmMessages } from "./parity/jsonl-transcript-io.js";
-import { readFile } from "node:fs/promises";
 import { join } from "node:path";
+import { readFile } from "node:fs/promises";
 //#region src/session/search-index.ts
 /**
 * In-memory inverted index over session transcripts (`sessions.json` + JSONL).

package/dist/src/session/session-title.js

@@ -1,6 +1,6 @@
+import { init_session_key, isCronSessionKey, parseSessionKey } from "../routing/session-key.js";
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
-import { init_session_key, isCronSessionKey, parseSessionKey } from "../routing/session-key.js";
 import { init_providers, resolveModel } from "../providers/index.js";
 import { readAgentMessageContent } from "../agent/memory/agent-message-access.js";
 import { stripInboundFileMetadataFromText } from "../channels/attachments/inbound-persist.js";

package/dist/src/session/store.js

@@ -1,11 +1,11 @@
+import { init_agent_scope, listAgentEntries, resolveDefaultAgentId } from "../agent/agent-scope.js";
+import { init_session_key, parseSessionKey } from "../routing/session-key.js";
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
-import { init_agent_scope, listAgentEntries, resolveDefaultAgentId } from "../agent/agent-scope.js";
 import { init_artifacts, parseCompactionCheckpointTranscriptFileName } from "./parity/artifacts.js";
 import { init_session_id, validateSessionId } from "./parity/session-id.js";
 import { archiveFileOnDisk, init_transcript_paths, resolveSessionFilePath, resolveSessionTranscriptPathInDir } from "./parity/transcript-paths.js";
 import { FILENAMES, init_paths, resolveSessionsDir } from "../config/paths.js";
-import { init_session_key, parseSessionKey } from "../routing/session-key.js";
 import { loadEntriesFromFile } from "./parity/load-jsonl-entries.js";
 import { mergeLlmMessagesPreservingContextRows } from "./session-context-for-llm.js";
 import { persistMergedTranscriptRows, readTranscriptRowsFromFile, rowsToLlmMessages, writeTranscriptJsonl } from "./parity/jsonl-transcript-io.js";
@@ -15,10 +15,10 @@ import { SlidingWindow } from "../agent/memory/window.js";
 import { normalizeCompactionCheckpointId } from "./compaction-checkpoints.js";
 import "./types.js";
 import { readSessionsJsonFile, withSessionsJsonLock } from "./parity/sessions-json-file.js";
-import { copyFile, mkdir, readdir, stat, unlink } from "fs/promises";
-import { randomUUID } from "node:crypto";
 import { join } from "path";
 import { existsSync } from "fs";
+import { copyFile, mkdir, readdir, stat, unlink } from "fs/promises";
+import { randomUUID } from "node:crypto";
 //#region src/session/store.ts
 init_paths();
 init_agent_scope();

package/dist/src/tui/backends/embedded-backend.js

@@ -1,6 +1,6 @@
+import { getWorkspacePath } from "../../config/schema.js";
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
-import { getWorkspacePath } from "../../config/schema.js";
 import { loadConfig } from "../../config/loader.js";
 import { getAllProviders, getModelsByProvider, init_providers } from "../../providers/index.js";
 import { MessageBus, MessageBusShutdownError } from "../../infra/bus/queue.js";

package/dist/src/tui/tui.js

@@ -17,9 +17,9 @@ import { GatewaySseBackend } from "./backends/gateway-sse-backend.js";
 import { ChatLog } from "./components/chat-log.js";
 import { CustomEditor } from "./components/custom-editor.js";
 import { TuiBottomBar } from "./components/tui-bottom-bar.js";
-import { mkdtempSync, readFileSync, unlinkSync, writeFileSync } from "node:fs";
 import { join } from "node:path";
 import { tmpdir } from "node:os";
+import { mkdtempSync, readFileSync, unlinkSync, writeFileSync } from "node:fs";
 import { spawnSync } from "node:child_process";
 import { CombinedAutocompleteProvider, Container, Loader, ProcessTerminal, TUI, Text, setKeybindings } from "@earendil-works/pi-tui";
 //#region src/tui/tui.ts

package/dist/src/utils/logger/audit.js

@@ -1,8 +1,8 @@
 import { __esmMin } from "../../../_virtual/_rolldown/runtime.js";
 import { getLogDir, init_config } from "./config.js";
-import { appendFile } from "fs/promises";
 import path from "path";
 import { existsSync, mkdirSync } from "fs";
+import { appendFile } from "fs/promises";
 //#region src/utils/logger/audit.ts
 /**
 * Audit Log

package/dist/src/utils/logger/log-store.js

@@ -1,6 +1,6 @@
-import { readFile } from "fs/promises";
 import { basename, join } from "path";
 import { createReadStream, existsSync, mkdirSync, readdirSync, statSync, unlinkSync } from "fs";
+import { readFile } from "fs/promises";
 import { gunzip } from "zlib";
 import { promisify } from "util";
 import { createInterface } from "readline";

package/dist/src/utils/logger/rotation.js

@@ -1,8 +1,8 @@
 import { __esmMin } from "../../../_virtual/_rolldown/runtime.js";
 import { config, getLogDir, init_config } from "./config.js";
-import { writeFile } from "fs/promises";
 import { join } from "path";
 import { readFileSync, readdirSync, statSync, unlinkSync } from "fs";
+import { writeFile } from "fs/promises";
 import { gzip } from "zlib";
 import { promisify } from "util";
 //#region src/utils/logger/rotation.ts

package/dist/src/voice/tts/audio.js

@@ -1,7 +1,7 @@
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
-import { unlink, writeFile } from "fs/promises";
 import { join } from "path";
+import { unlink, writeFile } from "fs/promises";
 import { spawn } from "child_process";
 import { tmpdir } from "os";
 //#region src/voice/tts/audio.ts

package/dist/src/voice/tts/providers/edge-speech.js

@@ -1,9 +1,9 @@
 import { createLogger } from "../../../utils/logger/index.js";
 import { init_logger } from "../../../utils/logger.js";
 import { registerSpeechProvider } from "../speech-registry.js";
-import { mkdtempSync, readFileSync, rmSync } from "node:fs";
 import path from "node:path";
 import { tmpdir } from "node:os";
+import { mkdtempSync, readFileSync, rmSync } from "node:fs";
 //#region src/voice/tts/providers/edge-speech.ts
 /**
 * Edge TTS provider — wraps the `node-edge-tts` package. Requires no API key

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xopcai/xopc",
-  "version": "0.0.53",
+  "version": "0.0.54",
   "description": "The OPC workstation that grows with you: AI assistant for One Person Companies — CLI, gateway, multi-channel (Telegram/WeChat), 20+ LLM providers via pi-ai, extensions and skills.",
   "type": "module",
   "main": "dist/src/index.js",