@xopcai/xopc 0.0.161 → 0.0.163

package/dist/src/config/schema.d.ts

@@ -782,16 +782,16 @@ export declare const WorkspaceConfigSchema: z.ZodOptional<z.ZodObject<{
 }, z.core.$strip>>;
 export type WorkspaceConfig = z.infer<typeof WorkspaceConfigSchema>;
 export declare const GatewayBindModeSchema: z.ZodEnum<{
-    custom: "custom";
     auto: "auto";
+    custom: "custom";
     loopback: "loopback";
     lan: "lan";
     tailnet: "tailnet";
 }>;
 export declare const GatewayConfigSchema: z.ZodDefault<z.ZodObject<{
     bind: z.ZodOptional<z.ZodEnum<{
-        custom: "custom";
         auto: "auto";
+        custom: "custom";
         loopback: "loopback";
         lan: "lan";
         tailnet: "tailnet";
@@ -934,6 +934,11 @@ export declare const GatewayConfigSchema: z.ZodDefault<z.ZodObject<{
 export declare const ModelsDevConfigSchema: z.ZodDefault<z.ZodObject<{
     enabled: z.ZodDefault<z.ZodBoolean>;
 }, z.core.$strip>>;
+export declare const ModelCatalogConfigSchema: z.ZodDefault<z.ZodObject<{
+    enabled: z.ZodDefault<z.ZodBoolean>;
+    refreshOnStartup: z.ZodDefault<z.ZodBoolean>;
+    intervalHours: z.ZodDefault<z.ZodNumber>;
+}, z.core.$strict>>;
 export declare const STTProviderConfigSchema: z.ZodObject<{
     apiKey: z.ZodOptional<z.ZodString>;
     model: z.ZodOptional<z.ZodString>;
@@ -1247,15 +1252,14 @@ export declare const ProviderRequestOverridesSchema: z.ZodObject<{
 }, z.core.$strict>;
 /**
  * Generic per-vendor provider config — used by image / audio / video
- * capability providers via `cfg.providers.<id>`. Kept loose (`.strict()` but
- * everything optional) so adding a new vendor never requires a config
- * migration.
+ * capability providers via `cfg.providers.<id>`.
  */
 export declare const ProviderAuthConfigSchema: z.ZodObject<{
-    apiKey: z.ZodOptional<z.ZodString>;
     baseUrl: z.ZodOptional<z.ZodString>;
-    region: z.ZodOptional<z.ZodString>;
-    imageBaseUrl: z.ZodOptional<z.ZodString>;
+    region: z.ZodOptional<z.ZodEnum<{
+        cn: "cn";
+        intl: "intl";
+    }>>;
     request: z.ZodOptional<z.ZodObject<{
         timeoutMs: z.ZodOptional<z.ZodNumber>;
         headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
@@ -1268,15 +1272,16 @@ export declare const ProviderAuthConfigSchema: z.ZodObject<{
 }, z.core.$strict>;
 export type ProviderAuthConfig = z.infer<typeof ProviderAuthConfigSchema>;
 /**
- * `cfg.providers.<id>` is keyed by provider id (`openai`, `dashscope`,
- * `minimax`, `google`, `fal`, …). Every entry is optional and validated by
+ * `cfg.providers.<id>` stores non-secret connection settings. Credentials
+ * live in the credential store or environment. Every entry is validated by
  * {@link ProviderAuthConfigSchema}.
  */
 export declare const ProvidersConfigSchema: z.ZodRecord<z.ZodString, z.ZodObject<{
-    apiKey: z.ZodOptional<z.ZodString>;
     baseUrl: z.ZodOptional<z.ZodString>;
-    region: z.ZodOptional<z.ZodString>;
-    imageBaseUrl: z.ZodOptional<z.ZodString>;
+    region: z.ZodOptional<z.ZodEnum<{
+        cn: "cn";
+        intl: "intl";
+    }>>;
     request: z.ZodOptional<z.ZodObject<{
         timeoutMs: z.ZodOptional<z.ZodNumber>;
         headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
@@ -1951,8 +1956,8 @@ export declare const ConfigSchema: z.ZodDefault<z.ZodObject<{
     channels: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
     gateway: z.ZodDefault<z.ZodObject<{
         bind: z.ZodOptional<z.ZodEnum<{
-            custom: "custom";
             auto: "auto";
+            custom: "custom";
             loopback: "loopback";
             lan: "lan";
             tailnet: "tailnet";
@@ -2330,10 +2335,11 @@ export declare const ConfigSchema: z.ZodDefault<z.ZodObject<{
     }, z.core.$strict>>;
     extensions: z.ZodDefault<z.ZodType<Record<string, unknown>, unknown, z.core.$ZodTypeInternals<Record<string, unknown>, unknown>>>;
     providers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
-        apiKey: z.ZodOptional<z.ZodString>;
         baseUrl: z.ZodOptional<z.ZodString>;
-        region: z.ZodOptional<z.ZodString>;
-        imageBaseUrl: z.ZodOptional<z.ZodString>;
+        region: z.ZodOptional<z.ZodEnum<{
+            cn: "cn";
+            intl: "intl";
+        }>>;
         request: z.ZodOptional<z.ZodObject<{
             timeoutMs: z.ZodOptional<z.ZodNumber>;
             headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
@@ -2347,6 +2353,11 @@ export declare const ConfigSchema: z.ZodDefault<z.ZodObject<{
     modelsDev: z.ZodDefault<z.ZodObject<{
         enabled: z.ZodDefault<z.ZodBoolean>;
     }, z.core.$strip>>;
+    modelCatalog: z.ZodDefault<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        refreshOnStartup: z.ZodDefault<z.ZodBoolean>;
+        intervalHours: z.ZodDefault<z.ZodNumber>;
+    }, z.core.$strict>>;
     messages: z.ZodOptional<z.ZodObject<{
         tts: z.ZodOptional<z.ZodObject<{
             enabled: z.ZodDefault<z.ZodBoolean>;
@@ -2446,6 +2457,6 @@ export interface ParsedModelRef {
 }
 export declare function getAgentDefaultModelRef(config: Config): string | undefined;
 export declare function getAgentDefaultImageModelConfig(config: Config): AgentModelConfig | undefined;
-export declare function getAgentDefaultImageGenerationModelConfig(config: Config): AgentImageGenerationModelConfig | undefined;
+export declare function getAgentDefaultImageGenerationModelConfig(config: Config, agentId: string): AgentImageGenerationModelConfig | undefined;
 /** `provider/model` or null when invalid. */
 export declare function parseModelRef(ref: string): ParsedModelRef | null;

package/dist/src/config/schema.js

@@ -26,9 +26,9 @@ function getAgentDefaultModelRef(config) {
 	applyModels(agent.models);
 	return modelRef;
 }
-function getAgentDefaultModelsConfig(config) {
+function getAgentDefaultModelsConfig(config, requestedAgentId) {
 	const list = Array.isArray(config.agents?.list) ? config.agents.list : [];
-	const defaultId = config.agents?.default?.trim() || list.find((entry) => entry.default === true)?.id?.trim() || list[0]?.id;
+	const defaultId = requestedAgentId?.trim() || config.agents?.default?.trim() || list.find((entry) => entry.default === true)?.id?.trim() || list[0]?.id;
 	const agent = list.find((entry) => entry.enabled !== false && entry.id === defaultId) ?? list[0];
 	if (!agent) return void 0;
 	let modelConfig;
@@ -51,8 +51,8 @@ function getAgentDefaultModelsConfig(config) {
 function getAgentDefaultImageModelConfig(config) {
 	return getAgentDefaultModelsConfig(config)?.imageModel;
 }
-function getAgentDefaultImageGenerationModelConfig(config) {
-	return getAgentDefaultModelsConfig(config)?.imageGenerationModel;
+function getAgentDefaultImageGenerationModelConfig(config, agentId) {
+	return getAgentDefaultModelsConfig(config, agentId)?.imageGenerationModel;
 }
 /** `provider/model` or null when invalid. */
 function parseModelRef(ref) {
@@ -64,7 +64,7 @@ function parseModelRef(ref) {
 		model: trimmed.slice(idx + 1).trim()
 	};
 }
-var AgentModelRefSchema, AgentImageGenerationModelSchema, AgentTypedModelRoleSchema, AgentTypedModelRolesSchema, AgentModelsSchema, AgentsConfigSchema, BrowserCloudConfigSchema, BrowserExtensionConfigSchema, BrowserCloakConfigSchema, BrowserConfigSchema, BindingMatchSchema, BindingRuleSchema, BindingsConfigSchema, SessionDmScopeSchema, SessionStorageConfigSchema, SessionResetModeSchema, SessionResetConfigSchema, SessionResetByTypeSchema, SessionScopeSchema, SessionConfigSchema, ChannelsConfigSchema, SearchProviderEntrySchema, WebSearchConfigSchema, WebsiteBlocklistSchema, WebToolsConfigSchema, ToolsConfigSchema, GatewayAuthRateLimitSchema, GatewaySecuritySchema, GatewayTrustedProxySchema, GatewayAuthSchema, GatewayTailscaleConsentSchema, GatewayTailscaleSchema, GatewayRemoteSchema, GatewayTlsSchema, GatewayModeSchema, HeartbeatConfigSchema, GatewayChannelConnectDeferModeSchema, TunnelConsentSchema, TunnelConfigSchema, WorkspaceImportConfigSchema, WorkspaceConfigSchema, GatewayBindModeSchema, GatewayConfigSchema, ModelsDevConfigSchema, SttProviderConfigCatchallSchema, STTProviderConfigSchema, STTFallbackConfigSchema, MediaUnderstandingCapabilitiesSchema, MediaUnderstandingModelSchema, STTConfigSchema, TtsProviderConfigCatchallSchema, TTSProviderConfigSchema, TTSFallbackConfigSchema, TTSModelOverridesConfigSchema, TTSEdgeConfigSchema, TTSSummarizationConfigSchema, TTSConfigSchema, VoiceRefinementConfigSchema, VoiceConfigSchema, MessagesConfigSchema, ToolsMediaAudioConfigSchema, ToolsMediaConfigSchema, ProviderAzureConfigSchema, ProviderRequestOverridesSchema, ProviderAuthConfigSchema, ProvidersConfigSchema, ExtensionSecurityConfigSchema, ExtensionSlotsConfigSchema, ExtensionsConfigSchema, UpdateAutoConfigSchema, GoalNotificationEventSchema, GoalNotificationTargetSchema, GoalNotificationsConfigSchema, GoalsConfigSchema, UpdateConfigSchema, CommandsConfigSchema, TuiConfigSchema, McpHttpUrlSchema, ConnectorSecretReferenceSchema, McpConfigScalarSchema, McpServerSchema, McpConfigSchema, CodeIntelligenceConfigSchema, ConnectorsConfigSchema, ExperimentalConfigSchema, ConfigSchema;
+var AgentModelRefSchema, AgentImageGenerationModelSchema, AgentTypedModelRoleSchema, AgentTypedModelRolesSchema, AgentModelsSchema, AgentsConfigSchema, BrowserCloudConfigSchema, BrowserExtensionConfigSchema, BrowserCloakConfigSchema, BrowserConfigSchema, BindingMatchSchema, BindingRuleSchema, BindingsConfigSchema, SessionDmScopeSchema, SessionStorageConfigSchema, SessionResetModeSchema, SessionResetConfigSchema, SessionResetByTypeSchema, SessionScopeSchema, SessionConfigSchema, ChannelsConfigSchema, SearchProviderEntrySchema, WebSearchConfigSchema, WebsiteBlocklistSchema, WebToolsConfigSchema, ToolsConfigSchema, GatewayAuthRateLimitSchema, GatewaySecuritySchema, GatewayTrustedProxySchema, GatewayAuthSchema, GatewayTailscaleConsentSchema, GatewayTailscaleSchema, GatewayRemoteSchema, GatewayTlsSchema, GatewayModeSchema, HeartbeatConfigSchema, GatewayChannelConnectDeferModeSchema, TunnelConsentSchema, TunnelConfigSchema, WorkspaceImportConfigSchema, WorkspaceConfigSchema, GatewayBindModeSchema, GatewayConfigSchema, ModelsDevConfigSchema, ModelCatalogConfigSchema, SttProviderConfigCatchallSchema, STTProviderConfigSchema, STTFallbackConfigSchema, MediaUnderstandingCapabilitiesSchema, MediaUnderstandingModelSchema, STTConfigSchema, TtsProviderConfigCatchallSchema, TTSProviderConfigSchema, TTSFallbackConfigSchema, TTSModelOverridesConfigSchema, TTSEdgeConfigSchema, TTSSummarizationConfigSchema, TTSConfigSchema, VoiceRefinementConfigSchema, VoiceConfigSchema, MessagesConfigSchema, ToolsMediaAudioConfigSchema, ToolsMediaConfigSchema, ProviderAzureConfigSchema, ProviderRequestOverridesSchema, ProviderAuthConfigSchema, ProvidersConfigSchema, ExtensionSecurityConfigSchema, ExtensionSlotsConfigSchema, ExtensionsConfigSchema, UpdateAutoConfigSchema, GoalNotificationEventSchema, GoalNotificationTargetSchema, GoalNotificationsConfigSchema, GoalsConfigSchema, UpdateConfigSchema, CommandsConfigSchema, TuiConfigSchema, McpHttpUrlSchema, ConnectorSecretReferenceSchema, McpConfigScalarSchema, McpServerSchema, McpConfigSchema, CodeIntelligenceConfigSchema, ConnectorsConfigSchema, ExperimentalConfigSchema, ConfigSchema;
 var init_schema = __esmMin((() => {
 	init_schema$1();
 	init_preset_chain();
@@ -510,12 +510,12 @@ strict: z.boolean().optional() }).optional();
 			enabled: z.boolean().default(true),
 			/** Default TTL in ms (default 24h). */
 			defaultTtlMs: z.number().min(6e4).max(6048e5).default(864e5),
-			/** Maximum TTL in ms (default 7 days). */
-			maxTtlMs: z.number().min(6e4).max(2592e6).default(6048e5),
-			/** Maximum concurrent active shares (default 100). */
-			maxActiveShares: z.number().min(1).max(1e4).default(100),
-			/** Maximum shareable file size in bytes (default 100MB). */
-			maxFileSize: z.number().min(1048576).max(10737418240).default(104857600),
+			/** Maximum TTL in ms (default 30 days). */
+			maxTtlMs: z.number().min(6e4).max(2592e6).default(2592e6),
+			/** Maximum concurrent active shares (default 500). */
+			maxActiveShares: z.number().min(1).max(1e4).default(500),
+			/** Maximum shareable file size in bytes (default 500 MB). */
+			maxFileSize: z.number().min(1048576).max(10737418240).default(524288e3),
 			/** MIME types allowed for inline preview (?inline=1). */
 			inlinePreviewMimes: z.array(z.string()).default([
 				"image/png",
@@ -532,10 +532,10 @@ strict: z.boolean().optional() }).optional();
 			/** Folder-sharing controls (browse + ZIP). */
 			directory: z.object({
 				enabled: z.boolean().default(true),
-				/** Maximum folder size in bytes at scan time (default 1 GB). */
-				maxFolderSize: z.number().int().min(1048576).max(10737418240).default(1073741824),
+				/** Maximum folder size in bytes at scan time (default 2 GB). */
+				maxFolderSize: z.number().int().min(1048576).max(10737418240).default(2147483648),
 				/** Maximum number of entries scanned for a single folder share. */
-				maxFileCount: z.number().int().min(1).max(1e5).default(1e3),
+				maxFileCount: z.number().int().min(1).max(1e5).default(1e4),
 				/** Traversal depth cap (defense against recursive symlinks). */
 				maxDepth: z.number().int().min(1).max(64).default(20),
 				/** In-memory directory listing cache TTL. */
@@ -544,8 +544,8 @@ strict: z.boolean().optional() }).optional();
 				zipConcurrency: z.number().int().min(1).max(8).default(1)
 			}).default({
 				enabled: true,
-				maxFolderSize: 1073741824,
-				maxFileCount: 1e3,
+				maxFolderSize: 2147483648,
+				maxFileCount: 1e4,
 				maxDepth: 20,
 				listingCacheMs: 6e4,
 				zipConcurrency: 1
@@ -556,24 +556,24 @@ strict: z.boolean().optional() }).optional();
 			enabled: z.boolean().default(true),
 			/** Public host suffix that subdomain shares are served under. */
 			publicHostSuffix: z.string().min(1).default("share.xopc.ai"),
-			/** Default TTL in ms (default 6h, shorter than file shares — live app surface). */
-			defaultTtlMs: z.number().int().min(6e4).max(6048e5).default(216e5),
-			/** Maximum TTL in ms (default 7 days). */
-			maxTtlMs: z.number().int().min(6e4).max(2592e6).default(6048e5),
-			/** Maximum concurrent active site shares. */
-			maxActiveSites: z.number().int().min(1).max(1e3).default(5),
+			/** Default TTL in ms (default 24h). */
+			defaultTtlMs: z.number().int().min(6e4).max(6048e5).default(864e5),
+			/** Maximum TTL in ms (default 30 days). */
+			maxTtlMs: z.number().int().min(6e4).max(2592e6).default(2592e6),
+			/** Maximum concurrent active site shares (default 50). */
+			maxActiveSites: z.number().int().min(1).max(1e3).default(50),
 			static: z.object({
 				enabled: z.boolean().default(true),
 				/** Maximum total bytes of files served per static site. */
-				maxRootDirSize: z.number().int().min(1048576).max(10737418240).default(524288e3),
+				maxRootDirSize: z.number().int().min(1048576).max(10737418240).default(1073741824),
 				/** Maximum file count under root dir. */
-				maxFileCount: z.number().int().min(1).max(1e5).default(1e4),
+				maxFileCount: z.number().int().min(1).max(1e5).default(2e4),
 				/** Whether HTML/CSS rewrite of absolute paths is on by default. */
 				rewriteEnabledByDefault: z.boolean().default(false)
 			}).default({
 				enabled: true,
-				maxRootDirSize: 524288e3,
-				maxFileCount: 1e4,
+				maxRootDirSize: 1073741824,
+				maxFileCount: 2e4,
 				rewriteEnabledByDefault: false
 			}),
 			proxy: z.object({
@@ -645,6 +645,15 @@ strict: z.boolean().optional() }).optional();
 		skillsStoreBaseUrl: "https://store.xopc.ai"
 	});
 	ModelsDevConfigSchema = z.object({ enabled: z.boolean().default(true) }).default({ enabled: true });
+	ModelCatalogConfigSchema = z.object({
+		enabled: z.boolean().default(true),
+		refreshOnStartup: z.boolean().default(true),
+		intervalHours: z.number().min(.25).default(6)
+	}).strict().default({
+		enabled: true,
+		refreshOnStartup: true,
+		intervalHours: 6
+	});
 	SttProviderConfigCatchallSchema = z.union([
 		z.string(),
 		z.number(),
@@ -804,14 +813,10 @@ tts: TTSConfigSchema.optional() }).optional();
 		headers: z.record(z.string(), z.string()).optional()
 	}).strict();
 	ProviderAuthConfigSchema = z.object({
-		/** Static API key (api-key / azure-key modes). */
-		apiKey: z.string().optional(),
 		/** Override the default REST base URL. */
 		baseUrl: z.string().url().optional(),
-		/** Vendor region (DashScope: `beijing` / `singapore`; AWS: region id). */
-		region: z.string().optional(),
-		/** Image-only base URL override (DashScope splits image vs LLM). */
-		imageBaseUrl: z.string().url().optional(),
+		/** Provider deployment region. */
+		region: z.enum(["cn", "intl"]).optional(),
 		/** Per-vendor request overrides. */
 		request: ProviderRequestOverridesSchema.optional(),
 		/** Azure OpenAI deployment overrides; only consumed by OpenAI image provider. */
@@ -1015,6 +1020,7 @@ workDiscoveryOnboarding: z.boolean().default(true) }).strict().default({ workDis
 		/** Per-vendor capability provider config (image / audio / video). */
 		providers: ProvidersConfigSchema.optional(),
 		modelsDev: ModelsDevConfigSchema,
+		modelCatalog: ModelCatalogConfigSchema,
 		/** Delivery / presentation concerns (currently `tts`). */
 		messages: MessagesConfigSchema,
 		/** User-facing voice input behavior beyond provider selection. */
@@ -1168,9 +1174,14 @@ workDiscoveryOnboarding: z.boolean().default(true) }).strict().default({ workDis
 			slots: {}
 		},
 		modelsDev: { enabled: true },
+		modelCatalog: {
+			enabled: true,
+			refreshOnStartup: true,
+			intervalHours: 6
+		},
 		tui: {}
 	});
 }));
 //#endregion
 init_schema();
-export { AgentImageGenerationModelSchema, AgentModelRefSchema, AgentModelsSchema, AgentTypedModelRoleSchema, AgentsConfigSchema, BindingMatchSchema, BindingRuleSchema, BindingsConfigSchema, BrowserConfigSchema, ChannelsConfigSchema, CodeIntelligenceConfigSchema, CommandsConfigSchema, ConfigSchema, ConnectorsConfigSchema, ExperimentalConfigSchema, ExtensionSecurityConfigSchema, ExtensionSlotsConfigSchema, ExtensionsConfigSchema, GatewayAuthRateLimitSchema, GatewayAuthSchema, GatewayBindModeSchema, GatewayChannelConnectDeferModeSchema, GatewayConfigSchema, GatewayModeSchema, GatewayRemoteSchema, GatewaySecuritySchema, GatewayTailscaleConsentSchema, GatewayTailscaleSchema, GatewayTlsSchema, GatewayTrustedProxySchema, GoalNotificationEventSchema, GoalNotificationTargetSchema, GoalNotificationsConfigSchema, GoalsConfigSchema, HeartbeatConfigSchema, McpConfigSchema, McpServerSchema, MediaUnderstandingCapabilitiesSchema, MediaUnderstandingModelSchema, MessagesConfigSchema, ModelsDevConfigSchema, ProviderAuthConfigSchema, ProviderAzureConfigSchema, ProviderRequestOverridesSchema, ProvidersConfigSchema, STTConfigSchema, STTFallbackConfigSchema, STTProviderConfigSchema, SearchProviderEntrySchema, SessionConfigSchema, SessionDmScopeSchema, SessionResetByTypeSchema, SessionResetConfigSchema, SessionResetModeSchema, SessionScopeSchema, SessionStorageConfigSchema, TTSConfigSchema, TTSEdgeConfigSchema, TTSFallbackConfigSchema, TTSModelOverridesConfigSchema, TTSProviderConfigSchema, TTSSummarizationConfigSchema, TelegramAccountConfigSchema, TelegramConfigSchema, TelegramGroupConfigSchema, TelegramTopicConfigSchema, ToolsConfigSchema, ToolsMediaAudioConfigSchema, ToolsMediaConfigSchema, TuiConfigSchema, TunnelConfigSchema, TunnelConsentSchema, UpdateAutoConfigSchema, UpdateConfigSchema, VoiceConfigSchema, VoiceRefinementConfigSchema, WebSearchConfigSchema, WebToolsConfigSchema, WebsiteBlocklistSchema, WeixinAccountConfigSchema, WeixinConfigSchema, WorkspaceConfigSchema, WorkspaceImportConfigSchema, getAgentDefaultImageGenerationModelConfig, getAgentDefaultImageModelConfig, getAgentDefaultModelRef, init_schema, parseModelRef };
+export { AgentImageGenerationModelSchema, AgentModelRefSchema, AgentModelsSchema, AgentTypedModelRoleSchema, AgentsConfigSchema, BindingMatchSchema, BindingRuleSchema, BindingsConfigSchema, BrowserConfigSchema, ChannelsConfigSchema, CodeIntelligenceConfigSchema, CommandsConfigSchema, ConfigSchema, ConnectorsConfigSchema, ExperimentalConfigSchema, ExtensionSecurityConfigSchema, ExtensionSlotsConfigSchema, ExtensionsConfigSchema, GatewayAuthRateLimitSchema, GatewayAuthSchema, GatewayBindModeSchema, GatewayChannelConnectDeferModeSchema, GatewayConfigSchema, GatewayModeSchema, GatewayRemoteSchema, GatewaySecuritySchema, GatewayTailscaleConsentSchema, GatewayTailscaleSchema, GatewayTlsSchema, GatewayTrustedProxySchema, GoalNotificationEventSchema, GoalNotificationTargetSchema, GoalNotificationsConfigSchema, GoalsConfigSchema, HeartbeatConfigSchema, McpConfigSchema, McpServerSchema, MediaUnderstandingCapabilitiesSchema, MediaUnderstandingModelSchema, MessagesConfigSchema, ModelCatalogConfigSchema, ModelsDevConfigSchema, ProviderAuthConfigSchema, ProviderAzureConfigSchema, ProviderRequestOverridesSchema, ProvidersConfigSchema, STTConfigSchema, STTFallbackConfigSchema, STTProviderConfigSchema, SearchProviderEntrySchema, SessionConfigSchema, SessionDmScopeSchema, SessionResetByTypeSchema, SessionResetConfigSchema, SessionResetModeSchema, SessionScopeSchema, SessionStorageConfigSchema, TTSConfigSchema, TTSEdgeConfigSchema, TTSFallbackConfigSchema, TTSModelOverridesConfigSchema, TTSProviderConfigSchema, TTSSummarizationConfigSchema, TelegramAccountConfigSchema, TelegramConfigSchema, TelegramGroupConfigSchema, TelegramTopicConfigSchema, ToolsConfigSchema, ToolsMediaAudioConfigSchema, ToolsMediaConfigSchema, TuiConfigSchema, TunnelConfigSchema, TunnelConsentSchema, UpdateAutoConfigSchema, UpdateConfigSchema, VoiceConfigSchema, VoiceRefinementConfigSchema, WebSearchConfigSchema, WebToolsConfigSchema, WebsiteBlocklistSchema, WeixinAccountConfigSchema, WeixinConfigSchema, WorkspaceConfigSchema, WorkspaceImportConfigSchema, getAgentDefaultImageGenerationModelConfig, getAgentDefaultImageModelConfig, getAgentDefaultModelRef, init_schema, parseModelRef };

package/dist/src/gateway/agents-admin.js

@@ -1,5 +1,5 @@
-import { resolveEffectiveAgentManifest } from "../agent-manifest/resolver.js";
 import { init_agent_scope, listAgentEntries, normalizeAgentId, resolveAgentDir, resolveAgentProfileDir, resolveAgentWorkspaceDir, resolveDefaultAgentId, resolveUserPath, validateAgentIdForNewAgent } from "../agent/agent-scope.js";
+import { resolveEffectiveAgentManifest } from "../agent-manifest/resolver.js";
 import { resolveEffectiveAgentProfile } from "../config/agent-profile.js";
 import { WORKSPACE_FILES, init_paths, resolveUserProfilePath } from "../config/paths.js";
 import { AGENT_PROFILE_MARKDOWN_SYSTEM_FILES, REQUIRED_AGENT_PROFILE_MARKDOWN_FILE_SET } from "../agent/context/workspace.js";

package/dist/src/gateway/hono/app.js

@@ -12,7 +12,7 @@ import { buildGatewayConsoleCspHeader } from "../security/csp.js";
 import { checkBrowserOrigin } from "../security/origin-check.js";
 import { auth } from "./middleware/auth.js";
 import { operatorScopes } from "./middleware/scopes.js";
-import { createChannelRateLimitMiddleware, createStrictRateLimitMiddleware } from "./middleware/strict-rate-limit.js";
+import { createChannelRateLimitMiddleware, createStrictRateLimitMiddleware, createXopcCloudPollRateLimitMiddleware } from "./middleware/strict-rate-limit.js";
 import { logContextMiddleware } from "./middleware/log-context.js";
 import { logger } from "./middleware/logger.js";
 import { routeErrorMiddleware } from "./middleware/route-errors.js";
@@ -204,16 +204,22 @@ function createHonoApp(config) {
 		})
 	}));
 	authenticated.use(operatorScopes());
+	const strictRateLimitMiddleware = createStrictRateLimitMiddleware({ getTrustedProxyContext: () => ({
+		trustedProxies: service.currentConfig.gateway?.trustedProxies,
+		allowRealIpFallback: service.currentConfig.gateway?.allowRealIpFallback === true
+	}) });
+	const channelRateLimitMiddleware = createChannelRateLimitMiddleware({ getTrustedProxyContext: () => ({
+		trustedProxies: service.currentConfig.gateway?.trustedProxies,
+		allowRealIpFallback: service.currentConfig.gateway?.allowRealIpFallback === true
+	}) });
 	registerAuthenticatedRoutes(app, authenticated, {
 		service,
-		strictRateLimitMiddleware: createStrictRateLimitMiddleware({ getTrustedProxyContext: () => ({
-			trustedProxies: service.currentConfig.gateway?.trustedProxies,
-			allowRealIpFallback: service.currentConfig.gateway?.allowRealIpFallback === true
-		}) }),
-		channelRateLimitMiddleware: createChannelRateLimitMiddleware({ getTrustedProxyContext: () => ({
+		strictRateLimitMiddleware,
+		xopcCloudPollRateLimitMiddleware: createXopcCloudPollRateLimitMiddleware({ getTrustedProxyContext: () => ({
 			trustedProxies: service.currentConfig.gateway?.trustedProxies,
 			allowRealIpFallback: service.currentConfig.gateway?.allowRealIpFallback === true
 		}) }),
+		channelRateLimitMiddleware,
 		sseConfig: {
 			service,
 			maxSseConnections: service.currentConfig.gateway.maxSseConnections

package/dist/src/gateway/hono/lib/config-payload.d.ts

@@ -209,7 +209,7 @@ export declare function buildSafeWebConfigPayload(service: GatewayService, optio
     /** Masked `cfg.providers` for capability keys (image / STT / etc.). */
     providersConfig: Record<string, import("./safe-providers-config.js").SafeProviderAuthEntry>;
     gateway: {
-        bind: "custom" | "auto" | "loopback" | "lan" | "tailnet";
+        bind: "auto" | "custom" | "loopback" | "lan" | "tailnet";
         customBindHost: string;
         port: number;
         corsOrigins: string[];

package/dist/src/gateway/hono/lib/safe-providers-config.d.ts

@@ -1,13 +1,10 @@
 import type { Config } from '../../../config/schema.js';
 /**
  * Per-vendor slice of {@link Config.providers} safe for GET `/api/config`.
- * Secrets are never sent verbatim; `apiKey` is length-preserving bullets when set, else empty.
  */
 export type SafeProviderAuthEntry = {
-    apiKey: string;
     region?: string;
     baseUrl?: string;
-    imageBaseUrl?: string;
 };
 /**
  * Build a redacted `providersConfig` map for the gateway console (image / audio / video keys).

package/dist/src/gateway/hono/lib/safe-providers-config.js

@@ -1,4 +1,3 @@
-import { maskSecretLength } from "./mask-secret-length.js";
 //#region src/gateway/hono/lib/safe-providers-config.ts
 /**
 * Build a redacted `providersConfig` map for the gateway console (image / audio / video keys).
@@ -10,10 +9,9 @@ function buildSafeProvidersConfigForWeb(providers) {
 		if (!id) continue;
 		if (!raw || typeof raw !== "object" || Array.isArray(raw)) continue;
 		const o = raw;
-		const entry = { apiKey: typeof o.apiKey === "string" && o.apiKey.trim() ? maskSecretLength(o.apiKey) : "" };
+		const entry = {};
 		if (typeof o.region === "string" && o.region.trim()) entry.region = o.region.trim();
 		if (typeof o.baseUrl === "string" && o.baseUrl.trim()) entry.baseUrl = o.baseUrl.trim();
-		if (typeof o.imageBaseUrl === "string" && o.imageBaseUrl.trim()) entry.imageBaseUrl = o.imageBaseUrl.trim();
 		out[id] = entry;
 	}
 	return out;

package/dist/src/gateway/hono/middleware/strict-rate-limit.d.ts

@@ -12,6 +12,10 @@ export declare function createStrictRateLimitMiddleware(deps: StrictRateLimitDep
     error: string;
     code: string;
 }, 429, "json">>;
+export declare function createXopcCloudPollRateLimitMiddleware(deps: StrictRateLimitDeps): import("hono").MiddlewareHandler<any, string, {}, Response & import("hono").TypedResponse<{
+    error: string;
+    code: string;
+}, 429, "json">>;
 export declare function createChannelRateLimitMiddleware(deps: StrictRateLimitDeps): import("hono").MiddlewareHandler<any, string, {}, Response & import("hono").TypedResponse<{
     error: string;
     code: string;

package/dist/src/gateway/hono/middleware/strict-rate-limit.js

@@ -63,6 +63,13 @@ function createStrictRateLimitMiddleware(deps) {
 		reason: "strict_rate_limit_exceeded"
 	});
 }
+function createXopcCloudPollRateLimitMiddleware(deps) {
+	return createClientRateLimitMiddleware(deps, {
+		limiter: () => buckets.xopcCloudPoll(),
+		exceededMessage: "XOPC Cloud polling rate limit exceeded",
+		reason: "xopc_cloud_poll_rate_limit_exceeded"
+	});
+}
 function createChannelRateLimitMiddleware(deps) {
 	return createClientRateLimitMiddleware(deps, {
 		limiter: () => buckets.channelApi(),
@@ -71,4 +78,4 @@ function createChannelRateLimitMiddleware(deps) {
 	});
 }
 //#endregion
-export { createChannelRateLimitMiddleware, createStrictRateLimitMiddleware };
+export { createChannelRateLimitMiddleware, createStrictRateLimitMiddleware, createXopcCloudPollRateLimitMiddleware };

package/dist/src/gateway/hono/routes/browser-workflows.d.ts

@@ -0,0 +1,3 @@
+import type { Hono } from 'hono';
+import type { AuthenticatedRouteDeps } from './deps.js';
+export declare function registerBrowserWorkflowRoutes(authenticated: Hono, deps: AuthenticatedRouteDeps): void;

package/dist/src/gateway/hono/routes/browser-workflows.js

@@ -0,0 +1,78 @@
+//#region src/gateway/hono/routes/browser-workflows.ts
+function presentWorkflow(service, recipe) {
+	const inputs = service.validate(recipe.yaml).document?.args ?? {};
+	return {
+		id: recipe.id,
+		name: recipe.name,
+		description: recipe.description,
+		enabled: recipe.status === "published",
+		risk: recipe.risk,
+		domains: recipe.domains,
+		inputs,
+		createdAtMs: recipe.createdAtMs,
+		updatedAtMs: recipe.updatedAtMs
+	};
+}
+function presentRun(run) {
+	return {
+		id: run.id,
+		workflowId: run.recipeId,
+		status: run.status,
+		inputs: run.args,
+		result: run.result,
+		error: run.error,
+		createdAtMs: run.createdAtMs,
+		startedAtMs: run.startedAtMs,
+		endedAtMs: run.endedAtMs,
+		durationMs: run.durationMs
+	};
+}
+function registerBrowserWorkflowRoutes(authenticated, deps) {
+	const service = deps.service.browserRecipes;
+	authenticated.get("/api/browser/workflows", (c) => c.json({ workflows: service.list().map((recipe) => presentWorkflow(service, recipe)) }));
+	authenticated.get("/api/browser/workflows/:id", (c) => {
+		const recipe = service.get(c.req.param("id"));
+		return recipe ? c.json({ workflow: presentWorkflow(service, recipe) }) : c.json({ error: "Browser automation not found" }, 404);
+	});
+	authenticated.patch("/api/browser/workflows/:id", deps.strictRateLimitMiddleware, async (c) => {
+		try {
+			const current = service.get(c.req.param("id"));
+			if (!current) return c.json({ error: "Browser automation not found" }, 404);
+			const body = await c.req.json().catch(() => null);
+			if (typeof body?.enabled !== "boolean") return c.json({ error: "enabled must be a boolean" }, 400);
+			const workflow = service.save({
+				yaml: current.yaml,
+				status: body.enabled ? "published" : "disabled",
+				expectedId: current.id
+			});
+			return c.json({ workflow: presentWorkflow(service, workflow) });
+		} catch (error) {
+			return c.json({ error: error instanceof Error ? error.message : String(error) }, 400);
+		}
+	});
+	authenticated.delete("/api/browser/workflows/:id", deps.strictRateLimitMiddleware, (c) => {
+		try {
+			return c.json({ removed: service.remove(c.req.param("id")) });
+		} catch (error) {
+			return c.json({ error: error instanceof Error ? error.message : String(error) }, 409);
+		}
+	});
+	authenticated.post("/api/browser/workflows/:id/run", deps.strictRateLimitMiddleware, async (c) => {
+		try {
+			const body = await c.req.json().catch(() => ({}));
+			if (body.inputs !== void 0 && (!body.inputs || typeof body.inputs !== "object" || Array.isArray(body.inputs))) return c.json({ error: "inputs must be an object" }, 400);
+			const run = service.startRun(c.req.param("id"), body.inputs ?? {});
+			return c.json({ run: presentRun(run) }, 202);
+		} catch (error) {
+			return c.json({ error: error instanceof Error ? error.message : String(error) }, 400);
+		}
+	});
+	authenticated.get("/api/browser/workflow-runs", (c) => c.json({ runs: service.listRuns(c.req.query("workflowId")).map(presentRun) }));
+	authenticated.get("/api/browser/workflow-runs/:id", (c) => {
+		const run = service.getRun(c.req.param("id"));
+		return run ? c.json({ run: presentRun(run) }) : c.json({ error: "Run not found" }, 404);
+	});
+	authenticated.post("/api/browser/workflow-runs/:id/cancel", deps.strictRateLimitMiddleware, (c) => c.json({ cancelled: service.cancel(c.req.param("id")) }));
+}
+//#endregion
+export { registerBrowserWorkflowRoutes };

package/dist/src/gateway/hono/routes/config-patch/misc.js

@@ -72,17 +72,8 @@ async function applyMiscPatch(config, body) {
 			if (!raw || typeof raw !== "object" || Array.isArray(raw)) continue;
 			const next = cfgProviders[vendorId] ?? {};
 			const patch = raw;
-			for (const field of [
-				"apiKey",
-				"baseUrl",
-				"region",
-				"imageBaseUrl"
-			]) if (patch[field] === null || patch[field] === "") delete next[field];
-			else if (typeof patch[field] === "string") {
-				const trimmed = patch[field].trim();
-				if (field === "apiKey" && isMaskedSecretPatchValue(trimmed)) continue;
-				next[field] = trimmed;
-			}
+			for (const field of ["baseUrl", "region"]) if (patch[field] === null || patch[field] === "") delete next[field];
+			else if (typeof patch[field] === "string") next[field] = patch[field].trim();
 			if (patch.azure === null) delete next.azure;
 			else if (patch.azure && typeof patch.azure === "object" && !Array.isArray(patch.azure)) next.azure = {
 				...next.azure ?? {},

package/dist/src/gateway/hono/routes/deps.d.ts

@@ -4,6 +4,7 @@ import type { SSEHandlerConfig } from '../sse.js';
 export interface AuthenticatedRouteDeps {
     service: GatewayService;
     strictRateLimitMiddleware: MiddlewareHandler;
+    xopcCloudPollRateLimitMiddleware: MiddlewareHandler;
     channelRateLimitMiddleware?: MiddlewareHandler;
     sseConfig: SSEHandlerConfig;
 }

package/dist/src/gateway/hono/routes/home.js

@@ -59,6 +59,7 @@ function triggerLabel(automation) {
 }
 function actionLabel(automation) {
 	if (automation.action.kind === "workflow") return `workflow:${automation.action.workflowId}`;
+	if (automation.action.kind === "browser_recipe") return `browser-workflow:${automation.action.recipeId}`;
 	return automation.action.agentId ? `agent:${automation.action.agentId}` : "agent";
 }
 function toHomeAutomation(automation) {

package/dist/src/gateway/hono/routes/index.js

@@ -6,6 +6,8 @@ import { registerMemoryRoutes } from "./memory.js";
 import { registerProjectsRoutes } from "./projects.js";
 import { registerSearchRoutes } from "./search.js";
 import { registerMobileRoutes } from "./mobile.js";
+import { registerTaskOutcomeRoutes } from "./task-outcomes.js";
+import { registerInteractionStateRoutes } from "./interaction-state.js";
 import { registerLocalAppsRoutes } from "./local-apps.js";
 import { registerWorkDiscoveryRoutes } from "./work-discovery.js";
 import { mountAppLazyRoutePrefixes, registerAuthenticatedLazyRouteFallback } from "./lazy-fallback.js";
@@ -21,6 +23,8 @@ function registerCoreAuthenticatedRoutes(authenticated, deps) {
 	registerWorkDiscoveryRoutes(authenticated, deps);
 	registerSearchRoutes(authenticated, deps);
 	registerMobileRoutes(authenticated, deps);
+	registerTaskOutcomeRoutes(authenticated, deps);
+	registerInteractionStateRoutes(authenticated, deps);
 }
 function registerAuthenticatedRoutes(app, authenticated, deps) {
 	registerCoreAuthenticatedRoutes(authenticated, deps);

package/dist/src/gateway/hono/routes/interaction-state.d.ts

@@ -0,0 +1,3 @@
+import type { Hono } from 'hono';
+import type { AuthenticatedRouteDeps } from './deps.js';
+export declare function registerInteractionStateRoutes(authenticated: Hono, deps: AuthenticatedRouteDeps): void;

package/dist/src/gateway/hono/routes/interaction-state.js

@@ -0,0 +1,45 @@
+import { getInteractionState, setInteractionState } from "../../../storage/sqlite/interaction-state-repository.js";
+import "../../../storage/sqlite/index.js";
+//#region src/gateway/hono/routes/interaction-state.ts
+const SUPPORT_NEEDS = new Set([
+	"listen",
+	"clarify",
+	"advise",
+	"act",
+	"unknown"
+]);
+function registerInteractionStateRoutes(authenticated, deps) {
+	authenticated.get("/api/interaction-state", (c) => {
+		const sessionKey = c.req.query("sessionKey")?.trim() ?? "";
+		if (!sessionKey) return c.json({ error: "sessionKey is required" }, 400);
+		const state = getInteractionState(sessionKey);
+		return state ? c.json({
+			ok: true,
+			state
+		}) : c.json({
+			ok: false,
+			error: "Interaction state not found"
+		}, 404);
+	});
+	authenticated.patch("/api/interaction-state", deps.strictRateLimitMiddleware, async (c) => {
+		const body = await c.req.json().catch(() => null);
+		const sessionKey = body && typeof body === "object" && typeof body.sessionKey === "string" ? body.sessionKey.trim() : "";
+		const supportNeed = body && typeof body === "object" && SUPPORT_NEEDS.has(body.supportNeed) ? body.supportNeed : void 0;
+		if (!sessionKey || !supportNeed) return c.json({ error: "sessionKey and a valid supportNeed are required" }, 400);
+		const state = setInteractionState({
+			sessionKey,
+			signal: {
+				supportNeed,
+				confidence: 1,
+				source: "explicit",
+				repairStatus: "none"
+			}
+		});
+		return c.json({
+			ok: true,
+			state
+		});
+	});
+}
+//#endregion
+export { registerInteractionStateRoutes };