@poolzin/pool-bot 2026.1.39 → 2026.2.1

package/dist/gateway/node-command-policy.js

@@ -8,10 +8,22 @@ const CANVAS_COMMANDS = [
     "canvas.a2ui.pushJSONL",
     "canvas.a2ui.reset",
 ];
-const CAMERA_COMMANDS = ["camera.list", "camera.snap", "camera.clip"];
-const SCREEN_COMMANDS = ["screen.record"];
+const CAMERA_COMMANDS = ["camera.list"];
+const CAMERA_DANGEROUS_COMMANDS = ["camera.snap", "camera.clip"];
+const SCREEN_DANGEROUS_COMMANDS = ["screen.record"];
 const LOCATION_COMMANDS = ["location.get"];
-const SMS_COMMANDS = ["sms.send"];
+const DEVICE_COMMANDS = ["device.info", "device.status"];
+const CONTACTS_COMMANDS = ["contacts.search"];
+const CONTACTS_DANGEROUS_COMMANDS = ["contacts.add"];
+const CALENDAR_COMMANDS = ["calendar.events"];
+const CALENDAR_DANGEROUS_COMMANDS = ["calendar.add"];
+const REMINDERS_COMMANDS = ["reminders.list"];
+const REMINDERS_DANGEROUS_COMMANDS = ["reminders.add"];
+const PHOTOS_COMMANDS = ["photos.latest"];
+const MOTION_COMMANDS = ["motion.activity", "motion.pedometer"];
+const SMS_DANGEROUS_COMMANDS = ["sms.send"];
+// iOS nodes don't implement system.run/which, but they do support notifications.
+const IOS_SYSTEM_COMMANDS = ["system.notify"];
 const SYSTEM_COMMANDS = [
     "system.run",
     "system.which",
@@ -20,32 +32,55 @@ const SYSTEM_COMMANDS = [
     "system.execApprovals.set",
     "browser.proxy",
 ];
+// "High risk" node commands. These can be enabled by explicitly adding them to
+// `gateway.nodes.allowCommands` (and ensuring they're not blocked by denyCommands).
+export const DEFAULT_DANGEROUS_NODE_COMMANDS = [
+    ...CAMERA_DANGEROUS_COMMANDS,
+    ...SCREEN_DANGEROUS_COMMANDS,
+    ...CONTACTS_DANGEROUS_COMMANDS,
+    ...CALENDAR_DANGEROUS_COMMANDS,
+    ...REMINDERS_DANGEROUS_COMMANDS,
+    ...SMS_DANGEROUS_COMMANDS,
+];
 const PLATFORM_DEFAULTS = {
-    ios: [...CANVAS_COMMANDS, ...CAMERA_COMMANDS, ...SCREEN_COMMANDS, ...LOCATION_COMMANDS],
-    android: [
+    ios: [
         ...CANVAS_COMMANDS,
         ...CAMERA_COMMANDS,
-        ...SCREEN_COMMANDS,
         ...LOCATION_COMMANDS,
-        ...SMS_COMMANDS,
+        ...DEVICE_COMMANDS,
+        ...CONTACTS_COMMANDS,
+        ...CALENDAR_COMMANDS,
+        ...REMINDERS_COMMANDS,
+        ...PHOTOS_COMMANDS,
+        ...MOTION_COMMANDS,
+        ...IOS_SYSTEM_COMMANDS,
     ],
-    macos: [
+    android: [
         ...CANVAS_COMMANDS,
         ...CAMERA_COMMANDS,
-        ...SCREEN_COMMANDS,
         ...LOCATION_COMMANDS,
-        ...SYSTEM_COMMANDS,
+        ...DEVICE_COMMANDS,
+        ...CONTACTS_COMMANDS,
+        ...CALENDAR_COMMANDS,
+        ...REMINDERS_COMMANDS,
+        ...PHOTOS_COMMANDS,
+        ...MOTION_COMMANDS,
     ],
-    linux: [...SYSTEM_COMMANDS],
-    windows: [...SYSTEM_COMMANDS],
-    unknown: [
+    macos: [
         ...CANVAS_COMMANDS,
         ...CAMERA_COMMANDS,
-        ...SCREEN_COMMANDS,
         ...LOCATION_COMMANDS,
-        ...SMS_COMMANDS,
+        ...DEVICE_COMMANDS,
+        ...CONTACTS_COMMANDS,
+        ...CALENDAR_COMMANDS,
+        ...REMINDERS_COMMANDS,
+        ...PHOTOS_COMMANDS,
+        ...MOTION_COMMANDS,
         ...SYSTEM_COMMANDS,
     ],
+    linux: [...SYSTEM_COMMANDS],
+    windows: [...SYSTEM_COMMANDS],
+    unknown: [...CANVAS_COMMANDS, ...CAMERA_COMMANDS, ...LOCATION_COMMANDS, ...SYSTEM_COMMANDS],
 };
 function normalizePlatformId(platform, deviceFamily) {
     const raw = (platform ?? "").trim().toLowerCase();

package/dist/gateway/openai-http.js

@@ -167,7 +167,7 @@ export async function handleOpenAiHttpRequest(req, res, opts) {
                     .map((p) => (typeof p.text === "string" ? p.text : ""))
                     .filter(Boolean)
                     .join("\n\n")
-                : "No response from Moltbot.";
+                : "No response from Poolbot.";
             sendJson(res, 200, {
                 id: runId,
                 object: "chat.completion",
@@ -275,7 +275,7 @@ export async function handleOpenAiHttpRequest(req, res, opts) {
                         .map((p) => (typeof p.text === "string" ? p.text : ""))
                         .filter(Boolean)
                         .join("\n\n")
-                    : "No response from Moltbot.";
+                    : "No response from Poolbot.";
                 sawAssistantDelta = true;
                 writeSse(res, {
                     id: runId,

package/dist/gateway/openresponses-http.js

@@ -1,7 +1,7 @@
 /**
  * OpenResponses HTTP Handler
  *
- * Implements the OpenResponses `/v1/responses` endpoint for Moltbot Gateway.
+ * Implements the OpenResponses `/v1/responses` endpoint for Poolbot Gateway.
  *
  * @see https://www.open-responses.com/
  */
@@ -405,7 +405,7 @@ export async function handleOpenResponsesHttpRequest(req, res, opts) {
                     .map((p) => (typeof p.text === "string" ? p.text : ""))
                     .filter(Boolean)
                     .join("\n\n")
-                : "No response from Moltbot.";
+                : "No response from Poolbot.";
             const response = createResponseResource({
                 id: responseId,
                 model,
@@ -543,7 +543,7 @@ export async function handleOpenResponsesHttpRequest(req, res, opts) {
         if (evt.stream === "lifecycle") {
             const phase = evt.data?.phase;
             if (phase === "end" || phase === "error") {
-                const finalText = accumulatedText || "No response from Moltbot.";
+                const finalText = accumulatedText || "No response from Poolbot.";
                 const finalStatus = phase === "error" ? "failed" : "completed";
                 requestFinalize(finalStatus, finalText);
             }
@@ -647,7 +647,7 @@ export async function handleOpenResponsesHttpRequest(req, res, opts) {
                         .map((p) => (typeof p.text === "string" ? p.text : ""))
                         .filter(Boolean)
                         .join("\n\n")
-                    : "No response from Moltbot.";
+                    : "No response from Poolbot.";
                 accumulatedText = content;
                 sawAssistantDelta = true;
                 writeSseEvent(res, {

package/dist/gateway/origin-check.js

@@ -0,0 +1,56 @@
+import { isLoopbackHost } from "./net.js";
+function normalizeHostHeader(hostHeader) {
+    return (hostHeader ?? "").trim().toLowerCase();
+}
+function resolveHostName(hostHeader) {
+    const host = normalizeHostHeader(hostHeader);
+    if (!host) {
+        return "";
+    }
+    if (host.startsWith("[")) {
+        const end = host.indexOf("]");
+        if (end !== -1) {
+            return host.slice(1, end);
+        }
+    }
+    const [name] = host.split(":");
+    return name ?? "";
+}
+function parseOrigin(originRaw) {
+    const trimmed = (originRaw ?? "").trim();
+    if (!trimmed || trimmed === "null") {
+        return null;
+    }
+    try {
+        const url = new URL(trimmed);
+        return {
+            origin: url.origin.toLowerCase(),
+            host: url.host.toLowerCase(),
+            hostname: url.hostname.toLowerCase(),
+        };
+    }
+    catch {
+        return null;
+    }
+}
+export function checkBrowserOrigin(params) {
+    const parsedOrigin = parseOrigin(params.origin);
+    if (!parsedOrigin) {
+        return { ok: false, reason: "origin missing or invalid" };
+    }
+    const allowlist = (params.allowedOrigins ?? [])
+        .map((value) => value.trim().toLowerCase())
+        .filter(Boolean);
+    if (allowlist.includes(parsedOrigin.origin)) {
+        return { ok: true };
+    }
+    const requestHost = normalizeHostHeader(params.requestHost);
+    if (requestHost && parsedOrigin.host === requestHost) {
+        return { ok: true };
+    }
+    const requestHostname = resolveHostName(requestHost);
+    if (isLoopbackHost(parsedOrigin.hostname) && isLoopbackHost(requestHostname)) {
+        return { ok: true };
+    }
+    return { ok: false, reason: "origin not allowed" };
+}

package/dist/gateway/protocol/client-info.js

@@ -23,6 +23,9 @@ export const GATEWAY_CLIENT_MODES = {
     PROBE: "probe",
     TEST: "test",
 };
+export const GATEWAY_CLIENT_CAPS = {
+    TOOL_EVENTS: "tool-events",
+};
 const GATEWAY_CLIENT_ID_SET = new Set(Object.values(GATEWAY_CLIENT_IDS));
 const GATEWAY_CLIENT_MODE_SET = new Set(Object.values(GATEWAY_CLIENT_MODES));
 export function normalizeGatewayClientId(raw) {
@@ -44,3 +47,9 @@ export function normalizeGatewayClientMode(raw) {
         ? normalized
         : undefined;
 }
+export function hasGatewayClientCap(caps, cap) {
+    if (!Array.isArray(caps)) {
+        return false;
+    }
+    return caps.includes(cap);
+}

package/dist/gateway/protocol/index.js

@@ -1,5 +1,5 @@
 import AjvPkg from "ajv";
-import { AgentEventSchema, AgentIdentityParamsSchema, AgentIdentityResultSchema, AgentParamsSchema, AgentSummarySchema, AgentsListParamsSchema, AgentsListResultSchema, AgentWaitParamsSchema, ChannelsLogoutParamsSchema, ChannelsStatusParamsSchema, ChannelsStatusResultSchema, ChatAbortParamsSchema, ChatEventSchema, ChatHistoryParamsSchema, ChatInjectParamsSchema, ChatSendParamsSchema, ConfigApplyParamsSchema, ConfigGetParamsSchema, ConfigPatchParamsSchema, ConfigSchemaParamsSchema, ConfigSchemaResponseSchema, ConfigSetParamsSchema, ConnectParamsSchema, CronAddParamsSchema, CronJobSchema, CronListParamsSchema, CronRemoveParamsSchema, CronRunParamsSchema, CronRunsParamsSchema, CronStatusParamsSchema, CronUpdateParamsSchema, DevicePairApproveParamsSchema, DevicePairListParamsSchema, DevicePairRejectParamsSchema, DeviceTokenRevokeParamsSchema, DeviceTokenRotateParamsSchema, ExecApprovalsGetParamsSchema, ExecApprovalsNodeGetParamsSchema, ExecApprovalsNodeSetParamsSchema, ExecApprovalsSetParamsSchema, ExecApprovalRequestParamsSchema, ExecApprovalResolveParamsSchema, ErrorCodes, ErrorShapeSchema, EventFrameSchema, errorShape, GatewayFrameSchema, HelloOkSchema, LogsTailParamsSchema, LogsTailResultSchema, ModelsListParamsSchema, NodeDescribeParamsSchema, NodeEventParamsSchema, NodeInvokeParamsSchema, NodeInvokeResultParamsSchema, NodeListParamsSchema, NodePairApproveParamsSchema, NodePairListParamsSchema, NodePairRejectParamsSchema, NodePairRequestParamsSchema, NodePairVerifyParamsSchema, NodeRenameParamsSchema, PollParamsSchema, PROTOCOL_VERSION, PresenceEntrySchema, ProtocolSchemas, RequestFrameSchema, ResponseFrameSchema, SendParamsSchema, SessionsCompactParamsSchema, SessionsDeleteParamsSchema, SessionsListParamsSchema, SessionsPatchParamsSchema, SessionsPreviewParamsSchema, SessionsResetParamsSchema, SessionsResolveParamsSchema, ShutdownEventSchema, SkillsBinsParamsSchema, SkillsInstallParamsSchema, SkillsStatusParamsSchema, SkillsUpdateParamsSchema, SnapshotSchema, StateVersionSchema, TalkModeParamsSchema, TickEventSchema, UpdateRunParamsSchema, WakeParamsSchema, WebLoginStartParamsSchema, WebLoginWaitParamsSchema, WizardCancelParamsSchema, WizardNextParamsSchema, WizardNextResultSchema, WizardStartParamsSchema, WizardStartResultSchema, WizardStatusParamsSchema, WizardStatusResultSchema, WizardStepSchema, } from "./schema.js";
+import { AgentEventSchema, AgentIdentityParamsSchema, AgentIdentityResultSchema, AgentParamsSchema, AgentSummarySchema, AgentsFileEntrySchema, AgentsCreateParamsSchema, AgentsCreateResultSchema, AgentsUpdateParamsSchema, AgentsUpdateResultSchema, AgentsDeleteParamsSchema, AgentsDeleteResultSchema, AgentsFilesGetParamsSchema, AgentsFilesGetResultSchema, AgentsFilesListParamsSchema, AgentsFilesListResultSchema, AgentsFilesSetParamsSchema, AgentsFilesSetResultSchema, AgentsListParamsSchema, AgentsListResultSchema, AgentWaitParamsSchema, ChannelsLogoutParamsSchema, ChannelsStatusParamsSchema, ChannelsStatusResultSchema, ChatAbortParamsSchema, ChatEventSchema, ChatHistoryParamsSchema, ChatInjectParamsSchema, ChatSendParamsSchema, ConfigApplyParamsSchema, ConfigGetParamsSchema, ConfigPatchParamsSchema, ConfigSchemaParamsSchema, ConfigSchemaResponseSchema, ConfigSetParamsSchema, ConnectParamsSchema, CronAddParamsSchema, CronJobSchema, CronListParamsSchema, CronRemoveParamsSchema, CronRunParamsSchema, CronRunsParamsSchema, CronStatusParamsSchema, CronUpdateParamsSchema, DevicePairApproveParamsSchema, DevicePairListParamsSchema, DevicePairRejectParamsSchema, DeviceTokenRevokeParamsSchema, DeviceTokenRotateParamsSchema, ExecApprovalsGetParamsSchema, ExecApprovalsNodeGetParamsSchema, ExecApprovalsNodeSetParamsSchema, ExecApprovalsSetParamsSchema, ExecApprovalRequestParamsSchema, ExecApprovalResolveParamsSchema, ErrorCodes, ErrorShapeSchema, EventFrameSchema, errorShape, GatewayFrameSchema, HelloOkSchema, LogsTailParamsSchema, LogsTailResultSchema, ModelsListParamsSchema, NodeDescribeParamsSchema, NodeEventParamsSchema, NodeInvokeParamsSchema, NodeInvokeResultParamsSchema, NodeListParamsSchema, NodePairApproveParamsSchema, NodePairListParamsSchema, NodePairRejectParamsSchema, NodePairRequestParamsSchema, NodePairVerifyParamsSchema, NodeRenameParamsSchema, PollParamsSchema, PROTOCOL_VERSION, PresenceEntrySchema, ProtocolSchemas, RequestFrameSchema, ResponseFrameSchema, SendParamsSchema, SessionsCompactParamsSchema, SessionsDeleteParamsSchema, SessionsListParamsSchema, SessionsPatchParamsSchema, SessionsPreviewParamsSchema, SessionsResetParamsSchema, SessionsResolveParamsSchema, SessionsUsageParamsSchema, ShutdownEventSchema, SkillsBinsParamsSchema, SkillsInstallParamsSchema, SkillsStatusParamsSchema, SkillsUpdateParamsSchema, SnapshotSchema, StateVersionSchema, TalkModeParamsSchema, TickEventSchema, UpdateRunParamsSchema, WakeParamsSchema, WebLoginStartParamsSchema, WebLoginWaitParamsSchema, WizardCancelParamsSchema, WizardNextParamsSchema, WizardNextResultSchema, WizardStartParamsSchema, WizardStartResultSchema, WizardStatusParamsSchema, WizardStatusResultSchema, WizardStepSchema, } from "./schema.js";
 const ajv = new AjvPkg({
     allErrors: true,
     strict: false,
@@ -16,6 +16,12 @@ export const validateAgentIdentityParams = ajv.compile(AgentIdentityParamsSchema
 export const validateAgentWaitParams = ajv.compile(AgentWaitParamsSchema);
 export const validateWakeParams = ajv.compile(WakeParamsSchema);
 export const validateAgentsListParams = ajv.compile(AgentsListParamsSchema);
+export const validateAgentsCreateParams = ajv.compile(AgentsCreateParamsSchema);
+export const validateAgentsUpdateParams = ajv.compile(AgentsUpdateParamsSchema);
+export const validateAgentsDeleteParams = ajv.compile(AgentsDeleteParamsSchema);
+export const validateAgentsFilesListParams = ajv.compile(AgentsFilesListParamsSchema);
+export const validateAgentsFilesGetParams = ajv.compile(AgentsFilesGetParamsSchema);
+export const validateAgentsFilesSetParams = ajv.compile(AgentsFilesSetParamsSchema);
 export const validateNodePairRequestParams = ajv.compile(NodePairRequestParamsSchema);
 export const validateNodePairListParams = ajv.compile(NodePairListParamsSchema);
 export const validateNodePairApproveParams = ajv.compile(NodePairApproveParamsSchema);
@@ -34,6 +40,7 @@ export const validateSessionsPatchParams = ajv.compile(SessionsPatchParamsSchema
 export const validateSessionsResetParams = ajv.compile(SessionsResetParamsSchema);
 export const validateSessionsDeleteParams = ajv.compile(SessionsDeleteParamsSchema);
 export const validateSessionsCompactParams = ajv.compile(SessionsCompactParamsSchema);
+export const validateSessionsUsageParams = ajv.compile(SessionsUsageParamsSchema);
 export const validateConfigGetParams = ajv.compile(ConfigGetParamsSchema);
 export const validateConfigSetParams = ajv.compile(ConfigSetParamsSchema);
 export const validateConfigApplyParams = ajv.compile(ConfigApplyParamsSchema);
@@ -106,4 +113,4 @@ export function formatValidationErrors(errors) {
     }
     return unique.join("; ");
 }
-export { ConnectParamsSchema, HelloOkSchema, RequestFrameSchema, ResponseFrameSchema, EventFrameSchema, GatewayFrameSchema, PresenceEntrySchema, SnapshotSchema, ErrorShapeSchema, StateVersionSchema, AgentEventSchema, ChatEventSchema, SendParamsSchema, PollParamsSchema, AgentParamsSchema, AgentIdentityParamsSchema, AgentIdentityResultSchema, WakeParamsSchema, NodePairRequestParamsSchema, NodePairListParamsSchema, NodePairApproveParamsSchema, NodePairRejectParamsSchema, NodePairVerifyParamsSchema, NodeListParamsSchema, NodeInvokeParamsSchema, SessionsListParamsSchema, SessionsPreviewParamsSchema, SessionsPatchParamsSchema, SessionsResetParamsSchema, SessionsDeleteParamsSchema, SessionsCompactParamsSchema, ConfigGetParamsSchema, ConfigSetParamsSchema, ConfigApplyParamsSchema, ConfigPatchParamsSchema, ConfigSchemaParamsSchema, ConfigSchemaResponseSchema, WizardStartParamsSchema, WizardNextParamsSchema, WizardCancelParamsSchema, WizardStatusParamsSchema, WizardStepSchema, WizardNextResultSchema, WizardStartResultSchema, WizardStatusResultSchema, ChannelsStatusParamsSchema, ChannelsStatusResultSchema, ChannelsLogoutParamsSchema, WebLoginStartParamsSchema, WebLoginWaitParamsSchema, AgentSummarySchema, AgentsListParamsSchema, AgentsListResultSchema, ModelsListParamsSchema, SkillsStatusParamsSchema, SkillsInstallParamsSchema, SkillsUpdateParamsSchema, CronJobSchema, CronListParamsSchema, CronStatusParamsSchema, CronAddParamsSchema, CronUpdateParamsSchema, CronRemoveParamsSchema, CronRunParamsSchema, CronRunsParamsSchema, LogsTailParamsSchema, LogsTailResultSchema, ChatHistoryParamsSchema, ChatSendParamsSchema, ChatInjectParamsSchema, UpdateRunParamsSchema, TickEventSchema, ShutdownEventSchema, ProtocolSchemas, PROTOCOL_VERSION, ErrorCodes, errorShape, };
+export { ConnectParamsSchema, HelloOkSchema, RequestFrameSchema, ResponseFrameSchema, EventFrameSchema, GatewayFrameSchema, PresenceEntrySchema, SnapshotSchema, ErrorShapeSchema, StateVersionSchema, AgentEventSchema, ChatEventSchema, SendParamsSchema, PollParamsSchema, AgentParamsSchema, AgentIdentityParamsSchema, AgentIdentityResultSchema, WakeParamsSchema, NodePairRequestParamsSchema, NodePairListParamsSchema, NodePairApproveParamsSchema, NodePairRejectParamsSchema, NodePairVerifyParamsSchema, NodeListParamsSchema, NodeInvokeParamsSchema, SessionsListParamsSchema, SessionsPreviewParamsSchema, SessionsPatchParamsSchema, SessionsResetParamsSchema, SessionsDeleteParamsSchema, SessionsCompactParamsSchema, SessionsUsageParamsSchema, ConfigGetParamsSchema, ConfigSetParamsSchema, ConfigApplyParamsSchema, ConfigPatchParamsSchema, ConfigSchemaParamsSchema, ConfigSchemaResponseSchema, WizardStartParamsSchema, WizardNextParamsSchema, WizardCancelParamsSchema, WizardStatusParamsSchema, WizardStepSchema, WizardNextResultSchema, WizardStartResultSchema, WizardStatusResultSchema, ChannelsStatusParamsSchema, ChannelsStatusResultSchema, ChannelsLogoutParamsSchema, WebLoginStartParamsSchema, WebLoginWaitParamsSchema, AgentSummarySchema, AgentsListParamsSchema, AgentsListResultSchema, AgentsFileEntrySchema, AgentsCreateParamsSchema, AgentsCreateResultSchema, AgentsUpdateParamsSchema, AgentsUpdateResultSchema, AgentsDeleteParamsSchema, AgentsDeleteResultSchema, AgentsFilesListParamsSchema, AgentsFilesListResultSchema, AgentsFilesGetParamsSchema, AgentsFilesGetResultSchema, AgentsFilesSetParamsSchema, AgentsFilesSetResultSchema, ModelsListParamsSchema, SkillsStatusParamsSchema, SkillsInstallParamsSchema, SkillsUpdateParamsSchema, CronJobSchema, CronListParamsSchema, CronStatusParamsSchema, CronAddParamsSchema, CronUpdateParamsSchema, CronRemoveParamsSchema, CronRunParamsSchema, CronRunsParamsSchema, LogsTailParamsSchema, LogsTailResultSchema, ChatHistoryParamsSchema, ChatSendParamsSchema, ChatInjectParamsSchema, UpdateRunParamsSchema, TickEventSchema, ShutdownEventSchema, ProtocolSchemas, PROTOCOL_VERSION, ErrorCodes, errorShape, };

package/dist/gateway/protocol/schema/agents-models-skills.js

@@ -25,11 +25,81 @@ export const AgentsListResultSchema = Type.Object({
     scope: Type.Union([Type.Literal("per-sender"), Type.Literal("global")]),
     agents: Type.Array(AgentSummarySchema),
 }, { additionalProperties: false });
+export const AgentsCreateParamsSchema = Type.Object({
+    name: NonEmptyString,
+    workspace: NonEmptyString,
+    emoji: Type.Optional(Type.String()),
+    avatar: Type.Optional(Type.String()),
+}, { additionalProperties: false });
+export const AgentsCreateResultSchema = Type.Object({
+    ok: Type.Literal(true),
+    agentId: NonEmptyString,
+    name: NonEmptyString,
+    workspace: NonEmptyString,
+}, { additionalProperties: false });
+export const AgentsUpdateParamsSchema = Type.Object({
+    agentId: NonEmptyString,
+    name: Type.Optional(NonEmptyString),
+    workspace: Type.Optional(NonEmptyString),
+    model: Type.Optional(NonEmptyString),
+    avatar: Type.Optional(Type.String()),
+}, { additionalProperties: false });
+export const AgentsUpdateResultSchema = Type.Object({
+    ok: Type.Literal(true),
+    agentId: NonEmptyString,
+}, { additionalProperties: false });
+export const AgentsDeleteParamsSchema = Type.Object({
+    agentId: NonEmptyString,
+    deleteFiles: Type.Optional(Type.Boolean()),
+}, { additionalProperties: false });
+export const AgentsDeleteResultSchema = Type.Object({
+    ok: Type.Literal(true),
+    agentId: NonEmptyString,
+    removedBindings: Type.Integer({ minimum: 0 }),
+}, { additionalProperties: false });
+export const AgentsFileEntrySchema = Type.Object({
+    name: NonEmptyString,
+    path: NonEmptyString,
+    missing: Type.Boolean(),
+    size: Type.Optional(Type.Integer({ minimum: 0 })),
+    updatedAtMs: Type.Optional(Type.Integer({ minimum: 0 })),
+    content: Type.Optional(Type.String()),
+}, { additionalProperties: false });
+export const AgentsFilesListParamsSchema = Type.Object({
+    agentId: NonEmptyString,
+}, { additionalProperties: false });
+export const AgentsFilesListResultSchema = Type.Object({
+    agentId: NonEmptyString,
+    workspace: NonEmptyString,
+    files: Type.Array(AgentsFileEntrySchema),
+}, { additionalProperties: false });
+export const AgentsFilesGetParamsSchema = Type.Object({
+    agentId: NonEmptyString,
+    name: NonEmptyString,
+}, { additionalProperties: false });
+export const AgentsFilesGetResultSchema = Type.Object({
+    agentId: NonEmptyString,
+    workspace: NonEmptyString,
+    file: AgentsFileEntrySchema,
+}, { additionalProperties: false });
+export const AgentsFilesSetParamsSchema = Type.Object({
+    agentId: NonEmptyString,
+    name: NonEmptyString,
+    content: Type.String(),
+}, { additionalProperties: false });
+export const AgentsFilesSetResultSchema = Type.Object({
+    ok: Type.Literal(true),
+    agentId: NonEmptyString,
+    workspace: NonEmptyString,
+    file: AgentsFileEntrySchema,
+}, { additionalProperties: false });
 export const ModelsListParamsSchema = Type.Object({}, { additionalProperties: false });
 export const ModelsListResultSchema = Type.Object({
     models: Type.Array(ModelChoiceSchema),
 }, { additionalProperties: false });
-export const SkillsStatusParamsSchema = Type.Object({}, { additionalProperties: false });
+export const SkillsStatusParamsSchema = Type.Object({
+    agentId: Type.Optional(NonEmptyString),
+}, { additionalProperties: false });
 export const SkillsBinsParamsSchema = Type.Object({}, { additionalProperties: false });
 export const SkillsBinsResultSchema = Type.Object({
     bins: Type.Array(NonEmptyString),

package/dist/gateway/protocol/schema/cron.js

@@ -3,7 +3,7 @@ import { NonEmptyString } from "./primitives.js";
 export const CronScheduleSchema = Type.Union([
     Type.Object({
         kind: Type.Literal("at"),
-        atMs: Type.Integer({ minimum: 0 }),
+        at: NonEmptyString,
     }, { additionalProperties: false }),
     Type.Object({
         kind: Type.Literal("every"),
@@ -27,8 +27,9 @@ export const CronPayloadSchema = Type.Union([
         model: Type.Optional(Type.String()),
         thinking: Type.Optional(Type.String()),
         timeoutSeconds: Type.Optional(Type.Integer({ minimum: 1 })),
+        allowUnsafeExternalContent: Type.Optional(Type.Boolean()),
         deliver: Type.Optional(Type.Boolean()),
-        channel: Type.Optional(Type.Union([Type.Literal("last"), NonEmptyString])),
+        channel: Type.Optional(Type.String()),
         to: Type.Optional(Type.String()),
         bestEffortDeliver: Type.Optional(Type.Boolean()),
     }, { additionalProperties: false }),
@@ -44,16 +45,24 @@ export const CronPayloadPatchSchema = Type.Union([
         model: Type.Optional(Type.String()),
         thinking: Type.Optional(Type.String()),
         timeoutSeconds: Type.Optional(Type.Integer({ minimum: 1 })),
+        allowUnsafeExternalContent: Type.Optional(Type.Boolean()),
         deliver: Type.Optional(Type.Boolean()),
-        channel: Type.Optional(Type.Union([Type.Literal("last"), NonEmptyString])),
+        channel: Type.Optional(Type.String()),
         to: Type.Optional(Type.String()),
         bestEffortDeliver: Type.Optional(Type.Boolean()),
     }, { additionalProperties: false }),
 ]);
-export const CronIsolationSchema = Type.Object({
-    postToMainPrefix: Type.Optional(Type.String()),
-    postToMainMode: Type.Optional(Type.Union([Type.Literal("summary"), Type.Literal("full")])),
-    postToMainMaxChars: Type.Optional(Type.Integer({ minimum: 0 })),
+export const CronDeliverySchema = Type.Object({
+    mode: Type.Union([Type.Literal("none"), Type.Literal("announce")]),
+    channel: Type.Optional(Type.Union([Type.Literal("last"), NonEmptyString])),
+    to: Type.Optional(Type.String()),
+    bestEffort: Type.Optional(Type.Boolean()),
+}, { additionalProperties: false });
+export const CronDeliveryPatchSchema = Type.Object({
+    mode: Type.Optional(Type.Union([Type.Literal("none"), Type.Literal("announce")])),
+    channel: Type.Optional(Type.Union([Type.Literal("last"), NonEmptyString])),
+    to: Type.Optional(Type.String()),
+    bestEffort: Type.Optional(Type.Boolean()),
 }, { additionalProperties: false });
 export const CronJobStateSchema = Type.Object({
     nextRunAtMs: Type.Optional(Type.Integer({ minimum: 0 })),
@@ -62,6 +71,7 @@ export const CronJobStateSchema = Type.Object({
     lastStatus: Type.Optional(Type.Union([Type.Literal("ok"), Type.Literal("error"), Type.Literal("skipped")])),
     lastError: Type.Optional(Type.String()),
     lastDurationMs: Type.Optional(Type.Integer({ minimum: 0 })),
+    consecutiveErrors: Type.Optional(Type.Integer({ minimum: 0 })),
 }, { additionalProperties: false });
 export const CronJobSchema = Type.Object({
     id: NonEmptyString,
@@ -76,7 +86,7 @@ export const CronJobSchema = Type.Object({
     sessionTarget: Type.Union([Type.Literal("main"), Type.Literal("isolated")]),
     wakeMode: Type.Union([Type.Literal("next-heartbeat"), Type.Literal("now")]),
     payload: CronPayloadSchema,
-    isolation: Type.Optional(CronIsolationSchema),
+    delivery: Type.Optional(CronDeliverySchema),
     state: CronJobStateSchema,
 }, { additionalProperties: false });
 export const CronListParamsSchema = Type.Object({
@@ -93,7 +103,7 @@ export const CronAddParamsSchema = Type.Object({
     sessionTarget: Type.Union([Type.Literal("main"), Type.Literal("isolated")]),
     wakeMode: Type.Union([Type.Literal("next-heartbeat"), Type.Literal("now")]),
     payload: CronPayloadSchema,
-    isolation: Type.Optional(CronIsolationSchema),
+    delivery: Type.Optional(CronDeliverySchema),
 }, { additionalProperties: false });
 export const CronJobPatchSchema = Type.Object({
     name: Type.Optional(NonEmptyString),
@@ -105,7 +115,7 @@ export const CronJobPatchSchema = Type.Object({
     sessionTarget: Type.Optional(Type.Union([Type.Literal("main"), Type.Literal("isolated")])),
     wakeMode: Type.Optional(Type.Union([Type.Literal("next-heartbeat"), Type.Literal("now")])),
     payload: Type.Optional(CronPayloadPatchSchema),
-    isolation: Type.Optional(CronIsolationSchema),
+    delivery: Type.Optional(CronDeliveryPatchSchema),
     state: Type.Optional(Type.Partial(CronJobStateSchema)),
 }, { additionalProperties: false });
 export const CronUpdateParamsSchema = Type.Union([
@@ -153,6 +163,8 @@ export const CronRunLogEntrySchema = Type.Object({
     status: Type.Optional(Type.Union([Type.Literal("ok"), Type.Literal("error"), Type.Literal("skipped")])),
     error: Type.Optional(Type.String()),
     summary: Type.Optional(Type.String()),
+    sessionId: Type.Optional(NonEmptyString),
+    sessionKey: Type.Optional(NonEmptyString),
     runAtMs: Type.Optional(Type.Integer({ minimum: 0 })),
     durationMs: Type.Optional(Type.Integer({ minimum: 0 })),
     nextRunAtMs: Type.Optional(Type.Integer({ minimum: 0 })),

package/dist/gateway/protocol/schema/protocol-schemas.js

@@ -1,5 +1,5 @@
 import { AgentEventSchema, AgentIdentityParamsSchema, AgentIdentityResultSchema, AgentParamsSchema, AgentWaitParamsSchema, PollParamsSchema, SendParamsSchema, WakeParamsSchema, } from "./agent.js";
-import { AgentSummarySchema, AgentsListParamsSchema, AgentsListResultSchema, ModelChoiceSchema, ModelsListParamsSchema, ModelsListResultSchema, SkillsBinsParamsSchema, SkillsBinsResultSchema, SkillsInstallParamsSchema, SkillsStatusParamsSchema, SkillsUpdateParamsSchema, } from "./agents-models-skills.js";
+import { AgentSummarySchema, AgentsCreateParamsSchema, AgentsCreateResultSchema, AgentsDeleteParamsSchema, AgentsDeleteResultSchema, AgentsFileEntrySchema, AgentsFilesGetParamsSchema, AgentsFilesGetResultSchema, AgentsFilesListParamsSchema, AgentsFilesListResultSchema, AgentsFilesSetParamsSchema, AgentsFilesSetResultSchema, AgentsListParamsSchema, AgentsListResultSchema, AgentsUpdateParamsSchema, AgentsUpdateResultSchema, ModelChoiceSchema, ModelsListParamsSchema, ModelsListResultSchema, SkillsBinsParamsSchema, SkillsBinsResultSchema, SkillsInstallParamsSchema, SkillsStatusParamsSchema, SkillsUpdateParamsSchema, } from "./agents-models-skills.js";
 import { ChannelsLogoutParamsSchema, ChannelsStatusParamsSchema, ChannelsStatusResultSchema, TalkModeParamsSchema, WebLoginStartParamsSchema, WebLoginWaitParamsSchema, } from "./channels.js";
 import { ConfigApplyParamsSchema, ConfigGetParamsSchema, ConfigPatchParamsSchema, ConfigSchemaParamsSchema, ConfigSchemaResponseSchema, ConfigSetParamsSchema, UpdateRunParamsSchema, } from "./config.js";
 import { CronAddParamsSchema, CronJobSchema, CronListParamsSchema, CronRemoveParamsSchema, CronRunLogEntrySchema, CronRunParamsSchema, CronRunsParamsSchema, CronStatusParamsSchema, CronUpdateParamsSchema, } from "./cron.js";
@@ -8,7 +8,7 @@ import { DevicePairApproveParamsSchema, DevicePairListParamsSchema, DevicePairRe
 import { ConnectParamsSchema, ErrorShapeSchema, EventFrameSchema, GatewayFrameSchema, HelloOkSchema, RequestFrameSchema, ResponseFrameSchema, ShutdownEventSchema, TickEventSchema, } from "./frames.js";
 import { ChatAbortParamsSchema, ChatEventSchema, ChatHistoryParamsSchema, ChatInjectParamsSchema, ChatSendParamsSchema, LogsTailParamsSchema, LogsTailResultSchema, } from "./logs-chat.js";
 import { NodeDescribeParamsSchema, NodeEventParamsSchema, NodeInvokeParamsSchema, NodeInvokeResultParamsSchema, NodeInvokeRequestEventSchema, NodeListParamsSchema, NodePairApproveParamsSchema, NodePairListParamsSchema, NodePairRejectParamsSchema, NodePairRequestParamsSchema, NodePairVerifyParamsSchema, NodeRenameParamsSchema, } from "./nodes.js";
-import { SessionsCompactParamsSchema, SessionsDeleteParamsSchema, SessionsListParamsSchema, SessionsPatchParamsSchema, SessionsPreviewParamsSchema, SessionsResetParamsSchema, SessionsResolveParamsSchema, } from "./sessions.js";
+import { SessionsCompactParamsSchema, SessionsDeleteParamsSchema, SessionsListParamsSchema, SessionsPatchParamsSchema, SessionsPreviewParamsSchema, SessionsResetParamsSchema, SessionsResolveParamsSchema, SessionsUsageParamsSchema, } from "./sessions.js";
 import { PresenceEntrySchema, SnapshotSchema, StateVersionSchema } from "./snapshot.js";
 import { WizardCancelParamsSchema, WizardNextParamsSchema, WizardNextResultSchema, WizardStartParamsSchema, WizardStartResultSchema, WizardStatusParamsSchema, WizardStatusResultSchema, WizardStepSchema, } from "./wizard.js";
 export const ProtocolSchemas = {
@@ -49,6 +49,7 @@ export const ProtocolSchemas = {
     SessionsResetParams: SessionsResetParamsSchema,
     SessionsDeleteParams: SessionsDeleteParamsSchema,
     SessionsCompactParams: SessionsCompactParamsSchema,
+    SessionsUsageParams: SessionsUsageParamsSchema,
     ConfigGetParams: ConfigGetParamsSchema,
     ConfigSetParams: ConfigSetParamsSchema,
     ConfigApplyParams: ConfigApplyParamsSchema,
@@ -72,6 +73,19 @@ export const ProtocolSchemas = {
     AgentSummary: AgentSummarySchema,
     AgentsListParams: AgentsListParamsSchema,
     AgentsListResult: AgentsListResultSchema,
+    AgentsCreateParams: AgentsCreateParamsSchema,
+    AgentsCreateResult: AgentsCreateResultSchema,
+    AgentsUpdateParams: AgentsUpdateParamsSchema,
+    AgentsUpdateResult: AgentsUpdateResultSchema,
+    AgentsDeleteParams: AgentsDeleteParamsSchema,
+    AgentsDeleteResult: AgentsDeleteResultSchema,
+    AgentsFileEntry: AgentsFileEntrySchema,
+    AgentsFilesListParams: AgentsFilesListParamsSchema,
+    AgentsFilesListResult: AgentsFilesListResultSchema,
+    AgentsFilesGetParams: AgentsFilesGetParamsSchema,
+    AgentsFilesGetResult: AgentsFilesGetResultSchema,
+    AgentsFilesSetParams: AgentsFilesSetParamsSchema,
+    AgentsFilesSetResult: AgentsFilesSetResultSchema,
     ModelChoice: ModelChoiceSchema,
     ModelsListParams: ModelsListParamsSchema,
     ModelsListResult: ModelsListResultSchema,

package/dist/gateway/protocol/schema/sessions.js

@@ -67,3 +67,15 @@ export const SessionsCompactParamsSchema = Type.Object({
     key: NonEmptyString,
     maxLines: Type.Optional(Type.Integer({ minimum: 1 })),
 }, { additionalProperties: false });
+export const SessionsUsageParamsSchema = Type.Object({
+    /** Specific session key to analyze; if omitted returns all sessions. */
+    key: Type.Optional(NonEmptyString),
+    /** Start date for range filter (YYYY-MM-DD). */
+    startDate: Type.Optional(Type.String({ pattern: "^\\d{4}-\\d{2}-\\d{2}$" })),
+    /** End date for range filter (YYYY-MM-DD). */
+    endDate: Type.Optional(Type.String({ pattern: "^\\d{4}-\\d{2}-\\d{2}$" })),
+    /** Maximum sessions to return (default 50). */
+    limit: Type.Optional(Type.Integer({ minimum: 1 })),
+    /** Include context weight breakdown (systemPromptReport). */
+    includeContextWeight: Type.Optional(Type.Boolean()),
+}, { additionalProperties: false });

package/dist/gateway/server/hooks.js

@@ -25,7 +25,7 @@ export function createGatewayHooksRequestHandler(params) {
             enabled: true,
             createdAtMs: now,
             updatedAtMs: now,
-            schedule: { kind: "at", atMs: now },
+            schedule: { kind: "at", at: new Date(now).toISOString() },
             sessionTarget: "isolated",
             wakeMode: value.wakeMode,
             payload: {

package/dist/gateway/server-broadcast.js

@@ -13,20 +13,24 @@ const EVENT_SCOPE_GUARDS = {
 };
 function hasEventScope(client, event) {
     const required = EVENT_SCOPE_GUARDS[event];
-    if (!required)
+    if (!required) {
         return true;
+    }
     const role = client.connect.role ?? "operator";
-    if (role !== "operator")
+    if (role !== "operator") {
         return false;
+    }
     const scopes = Array.isArray(client.connect.scopes) ? client.connect.scopes : [];
-    if (scopes.includes(ADMIN_SCOPE))
+    if (scopes.includes(ADMIN_SCOPE)) {
         return true;
+    }
     return required.some((scope) => scopes.includes(scope));
 }
 export function createGatewayBroadcaster(params) {
     let seq = 0;
-    const broadcast = (event, payload, opts) => {
-        const eventSeq = ++seq;
+    const broadcastInternal = (event, payload, opts, targetConnIds) => {
+        const isTargeted = Boolean(targetConnIds);
+        const eventSeq = isTargeted ? undefined : ++seq;
         const frame = JSON.stringify({
             type: "event",
             event,
@@ -36,8 +40,9 @@ export function createGatewayBroadcaster(params) {
         });
         const logMeta = {
             event,
-            seq: eventSeq,
+            seq: eventSeq ?? "targeted",
             clients: params.clients.size,
+            targets: targetConnIds ? targetConnIds.size : undefined,
             dropIfSlow: opts?.dropIfSlow,
             presenceVersion: opts?.stateVersion?.presence,
             healthVersion: opts?.stateVersion?.health,
@@ -47,11 +52,16 @@ export function createGatewayBroadcaster(params) {
         }
         logWs("out", "event", logMeta);
         for (const c of params.clients) {
-            if (!hasEventScope(c, event))
+            if (targetConnIds && !targetConnIds.has(c.connId)) {
+                continue;
+            }
+            if (!hasEventScope(c, event)) {
                 continue;
+            }
             const slow = c.socket.bufferedAmount > MAX_BUFFERED_BYTES;
-            if (slow && opts?.dropIfSlow)
+            if (slow && opts?.dropIfSlow) {
                 continue;
+            }
             if (slow) {
                 try {
                     c.socket.close(1008, "slow consumer");
@@ -69,5 +79,12 @@ export function createGatewayBroadcaster(params) {
             }
         }
     };
-    return { broadcast };
+    const broadcast = (event, payload, opts) => broadcastInternal(event, payload, opts);
+    const broadcastToConnIds = (event, payload, connIds, opts) => {
+        if (connIds.size === 0) {
+            return;
+        }
+        broadcastInternal(event, payload, opts, connIds);
+    };
+    return { broadcast, broadcastToConnIds };
 }