@xopcai/xopc 0.0.161 → 0.0.163

package/dist/src/gateway/service/run-gateway-agent.js

@@ -1,6 +1,11 @@
 import { inboundCorrelationMetadataFromAsyncLogContext, updateAsyncLogContext } from "../../utils/logger/context.js";
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
+import { updateInteractionStateFromMessage } from "../../storage/sqlite/interaction-state-repository.js";
+import { completeTaskOutcome, startTaskOutcome, updateTaskOutcome } from "../../storage/sqlite/task-outcome-repository.js";
+import "../../storage/sqlite/index.js";
+import { init_session_key, parseSessionKey } from "../../routing/session-key.js";
+import { recordExplicitRelationshipFollowUp } from "../../user-context/relationship-continuity.js";
 import { formatAgentRunErrorForClient } from "../../agent/client-error-format.js";
 import { prependEnvelopeTimestamp } from "../../channels/envelope-timestamp.js";
 import { shouldSkipWebchatInboundByAbortCutoff } from "../../session/abort-cutoff.js";
@@ -11,6 +16,7 @@ import { coalesceThinkingDeltas } from "../chat-stream/thinking-delta-coalescer.
 import crypto from "crypto";
 //#region src/gateway/service/run-gateway-agent.ts
 init_logger();
+init_session_key();
 const log = createLogger("Gateway:Service");
 /**
 * @param runOptions.signal — When set (e.g. client disconnect), aborts in-flight generation and persists partial output.
@@ -24,6 +30,11 @@ async function* runGatewayAgent(deps, message, channel, chatId, attachments, thi
 	const runId = crypto.randomUUID();
 	const { agentService, bus, runRelay, runAbortControllers, activeWebchatRunBySession, sessionIndex: sessionIndexFromDeps, emit } = deps;
 	const sessionIndex = sessionIndexFromDeps;
+	let taskOutcomeStarted = false;
+	let taskOutcomeStatus = "failed";
+	let taskOutcomeSummary = "Agent run ended unexpectedly";
+	let taskContract;
+	const taskEvidence = [];
 	let webchatSessionKey;
 	let webchatSessionId;
 	let webchatStaleSkip = false;
@@ -40,15 +51,65 @@ async function* runGatewayAgent(deps, message, channel, chatId, attachments, thi
 		runAbortControllers.set(runId, new AbortController());
 	}
 	const streamSessionKey = webchatSessionKey ?? chatId;
+	if (webchatSessionKey) {
+		const parsedSession = parseSessionKey(webchatSessionKey);
+		if (!parsedSession) throw new Error("Resolved webchat session key is invalid");
+		updateInteractionStateFromMessage({
+			sessionKey: webchatSessionKey,
+			message
+		});
+		recordExplicitRelationshipFollowUp({
+			sessionKey: webchatSessionKey,
+			sourceAgentId: parsedSession.agentId,
+			message
+		});
+		startTaskOutcome({
+			runId,
+			sessionKey: webchatSessionKey,
+			channel,
+			objective: message.trim()
+		});
+		taskOutcomeStarted = true;
+	}
 	const mapper = new ChatStreamMapper({
 		runId,
 		sessionKey: streamSessionKey,
 		channel
 	});
 	let registeredActiveWebchatRun = false;
+	const addTaskEvidence = (evidence) => {
+		if (taskEvidence.some((item) => item.kind === evidence.kind && item.title === evidence.title)) return;
+		taskEvidence.push(evidence);
+	};
+	const captureTaskEvent = (event) => {
+		if (event.type === "turn_plan") {
+			taskContract = {
+				objective: message.trim(),
+				deliverables: [],
+				acceptanceCriteria: event.payload.plan.map((item) => item.step),
+				constraints: [],
+				approvalRequired: []
+			};
+			return;
+		}
+		if (event.type === "patch_applied") {
+			addTaskEvidence({
+				kind: "state",
+				title: "Changes applied",
+				summary: `${event.payload.added} additions and ${event.payload.removed} removals`
+			});
+			return;
+		}
+		if (event.type === "command_completed" && event.payload.exitCode === 0 && /(^|\s)(test|vitest|jest|pytest|lint|typecheck|build)(\s|$|:)/i.test(event.payload.command)) addTaskEvidence({
+			kind: "test",
+			title: event.payload.command.slice(0, 120),
+			summary: event.payload.durationMs === void 0 ? "Command completed successfully" : `Command completed successfully in ${event.payload.durationMs} ms`
+		});
+	};
 	const publishStreamEvent = (event) => channel === "webchat" ? runRelay.publish(runId, event) ?? event : event;
 	const emitAndYield = function* (events) {
 		for (const event of events) {
+			if (taskOutcomeStarted) captureTaskEvent(event);
 			const relayedEvent = publishStreamEvent(event);
 			if (channel === "webchat") emit("agent.stream", {
 				sessionKey: streamSessionKey,
@@ -61,6 +122,8 @@ async function* runGatewayAgent(deps, message, channel, chatId, attachments, thi
 	try {
 		if (channel === "webchat" && webchatSessionKey) {
 			if (webchatStaleSkip) {
+				taskOutcomeStatus = "cancelled";
+				taskOutcomeSummary = "Stale inbound message skipped";
 				yield* emitAndYield(mapper.end("cancelled", "Stale inbound after abort (clientCreatedAtMs before cutoff)"));
 				runRelay.complete(runId);
 				runAbortControllers.delete(runId);
@@ -97,6 +160,8 @@ async function* runGatewayAgent(deps, message, channel, chatId, attachments, thi
 				for await (const event of coalesceThinkingDeltas(mappedEvents)) yield* emitAndYield([event]);
 				const endStatus = mergedSignal.aborted ? "cancelled" : "success";
 				const endSummary = mergedSignal.aborted ? "Interrupted" : "Message processed successfully";
+				taskOutcomeStatus = mergedSignal.aborted ? "cancelled" : "succeeded";
+				taskOutcomeSummary = endSummary;
 				yield* emitAndYield(mapper.end(endStatus, endSummary));
 				runRelay.complete(runId);
 				try {
@@ -121,6 +186,8 @@ async function* runGatewayAgent(deps, message, channel, chatId, attachments, thi
 					channel: "webchat"
 				}, `Agent processing failed: ${em}`);
 				streamError = em;
+				taskOutcomeStatus = "failed";
+				taskOutcomeSummary = em;
 				const errorContent = formatAgentRunErrorForClient(streamError);
 				yield* emitAndYield(mapper.error(errorContent));
 				yield* emitAndYield(mapper.end("error", streamError));
@@ -198,12 +265,16 @@ async function* runGatewayAgent(deps, message, channel, chatId, attachments, thi
 			payload: { messageId }
 		}]);
 		yield* emitAndYield(mapper.end("success", "Message processed"));
+		taskOutcomeStatus = "succeeded";
+		taskOutcomeSummary = "Message processed";
 		return {
 			status: "ok",
 			summary: "Message processed"
 		};
 	} catch (error) {
 		const em = error instanceof Error ? error.message : String(error);
+		taskOutcomeStatus = "failed";
+		taskOutcomeSummary = em;
 		log.error({
 			err: error,
 			errorMessage: em,
@@ -213,6 +284,19 @@ async function* runGatewayAgent(deps, message, channel, chatId, attachments, thi
 			chatId
 		}, `Agent run failed: ${em}`);
 		throw error;
+	} finally {
+		if (taskOutcomeStarted) {
+			updateTaskOutcome({
+				runId,
+				...taskContract ? { contract: taskContract } : {},
+				evidence: taskEvidence
+			});
+			completeTaskOutcome({
+				runId,
+				status: taskOutcomeStatus,
+				summary: taskOutcomeSummary
+			});
+		}
 	}
 }
 //#endregion

package/dist/src/gateway/service.d.ts

@@ -7,10 +7,12 @@ import { ExtensionLoader } from '../extensions/index.js';
 import { SessionIndex } from '../session/index.js';
 import type { Config } from '../config/schema.js';
 import { type ResolvedGatewayAuth } from './auth.js';
+import { ModelCatalogSyncService } from '../providers/model-catalog-sync-service.js';
 import { AgentRunRelay } from './agent-run-relay.js';
 import { type EnqueueGoalRunOptions } from '../goals/index.js';
 import { ProjectService } from '../projects/index.js';
 import { LocalAppService } from '../local-apps/index.js';
+import { type BrowserRecipeService } from '../browser/recipes/index.js';
 import { GatewaySessionsApi } from './service/sessions-api.js';
 import { GatewayMarketplaceService } from './service/marketplace-service.js';
 import { GatewayAgentRunner } from './service/agent-runner.js';
@@ -26,6 +28,7 @@ export declare class GatewayService {
     private _agentService;
     private channelManager;
     private automationService;
+    private browserRecipeService;
     private notesService;
     private extensionLoader;
     private extensionMetadataSnapshot;
@@ -39,9 +42,12 @@ export declare class GatewayService {
     private startTime;
     private workspacePath;
     private readonly configCoordinator;
+    private readonly modelCatalogSync;
     private auth;
     private readonly sse;
     getConfig(): Config;
+    getModelCatalogSync(): ModelCatalogSyncService;
+    get browserRecipes(): BrowserRecipeService;
     private stopGatewayUpdateCheck;
     /** When set (e.g. by `GatewayServer`), `triggerGatewayProcessRestart` can stop HTTP then exit. */
     private gatewayShutdownForRestart;

package/dist/src/gateway/service.js

@@ -74,10 +74,13 @@ import { isGatewayStrictSecurityEnabled } from "./rate-limit/env-flags.js";
 import "./rate-limit/index.js";
 import { assertGatewayRuntimeConfig } from "./runtime-config.js";
 import { auditGatewayConfig } from "./security/audit.js";
+import { ModelCatalogSyncService } from "../providers/model-catalog-sync-service.js";
 import { runBootstrapMigrationsSync } from "../migrations/runner.js";
 import { MobileNotificationService } from "../mobile/notification-service.js";
 import { LocalAppService } from "../local-apps/service.js";
 import "../local-apps/index.js";
+import { createRuntimeBrowserRecipeService } from "../browser/recipes/runtime-service.js";
+import "../browser/recipes/index.js";
 import { scheduleGatewayUpdateCheck } from "../infra/update-startup.js";
 import { resolveChannelConnectDeferSet } from "./resolve-channel-connect-defer.js";
 import { restartGatewayProcessWithFreshPid } from "./respawn.js";
@@ -108,6 +111,7 @@ var GatewayService = class {
 	_agentService = null;
 	channelManager;
 	automationService;
+	browserRecipeService = null;
 	notesService;
 	extensionLoader = null;
 	extensionMetadataSnapshot = null;
@@ -121,11 +125,25 @@ var GatewayService = class {
 	startTime = Date.now();
 	workspacePath;
 	configCoordinator;
+	modelCatalogSync = new ModelCatalogSyncService({
+		onUpdated: (modelCount) => this.emit("model-catalog.updated", { modelCount }),
+		getConfig: () => this.config
+	});
 	auth;
 	sse = new GatewaySseHub();
 	getConfig() {
 		return this.config;
 	}
+	getModelCatalogSync() {
+		return this.modelCatalogSync;
+	}
+	get browserRecipes() {
+		if (!this.browserRecipeService) this.browserRecipeService = createRuntimeBrowserRecipeService({
+			getConfig: () => this.config,
+			emit: (type, payload) => this.emit(type, payload)
+		});
+		return this.browserRecipeService;
+	}
 	stopGatewayUpdateCheck = null;
 	/** When set (e.g. by `GatewayServer`), `triggerGatewayProcessRestart` can stop HTTP then exit. */
 	gatewayShutdownForRestart = null;
@@ -322,6 +340,7 @@ var GatewayService = class {
 			},
 			extensionRegistry: this.extensionLoader?.getRegistry(),
 			getAutomationService: () => this.automationService,
+			getBrowserRecipeService: () => this.browserRecipes,
 			getNotesService: () => this.notesService,
 			getProjectService: () => this.projects,
 			getWorkItemService: () => new WorkItemService(),
@@ -361,6 +380,7 @@ var GatewayService = class {
 			getDefaultAgentId: () => getDefaultAgentId(this.config),
 			getProjectWorkspaceRoot: (projectId) => this.projects.get(projectId)?.workspaceRoot,
 			workflowRunService: this.createWorkflowRunService(),
+			browserRecipeService: this.browserRecipes,
 			onRunCompleted: (run) => this.handleAutomationRunCompleted(run)
 		});
 		this._agentService.persistentGoals.setWebchatContinuationScheduler((sessionKey, message) => {
@@ -570,6 +590,7 @@ var GatewayService = class {
 				phase: "sidecars.model_prewarm"
 			}, `Model registry prewarm failed: ${em}`);
 		}
+		this.modelCatalogSync.start();
 		if (!this.extensionLoader || areExtensionsGloballyDisabled(this.config)) return;
 		try {
 			if (trace) await trace.measure("extensions.deferred-load", () => this.loadDeferredExtensions());
@@ -671,6 +692,7 @@ var GatewayService = class {
 			agentService: this.agentService,
 			getDefaultAgentId: () => getDefaultAgentId(this.config),
 			workflowRunService: this.createWorkflowRunService(),
+			browserRecipeService: this.browserRecipes,
 			onRunCompleted: (run) => this.handleAutomationRunCompleted(run)
 		});
 		this.startAutomationProductEventBridge();
@@ -814,6 +836,7 @@ var GatewayService = class {
 			this.stopGatewayUpdateCheck();
 			this.stopGatewayUpdateCheck = null;
 		}
+		this.modelCatalogSync.stop();
 		await this.configCoordinator.stopHotReloader();
 		this.heartbeatService?.stop();
 		this.connectorSupervisor?.stop();
@@ -822,6 +845,7 @@ var GatewayService = class {
 		this.connectorMemorySyncCoordinator = null;
 		this.connectedKnowledgeCoordinator?.stop();
 		this.connectedKnowledgeCoordinator = null;
+		await this.browserRecipeService?.shutdown();
 		if (this.browserExtensionRelease) {
 			await this.browserExtensionRelease();
 			this.browserExtensionRelease = null;

package/dist/src/media-shared/http/private-network.d.ts

@@ -2,7 +2,7 @@
  * SSRF / private-network protection for provider HTTP calls.
  *
  * Provider URLs are mostly user-controllable (cfg.providers.<id>.baseUrl,
- * imageBaseUrl, etc.). Without a guard a malicious config could make xopc
+ * custom provider base URLs. Without a guard a malicious config could make xopc
  * fetch internal services (169.254.x.x metadata, 127.0.0.1, RFC1918, …).
  *
  * Policy:

package/dist/src/media-shared/http/private-network.js

@@ -4,7 +4,7 @@ import { isIP } from "node:net";
 * SSRF / private-network protection for provider HTTP calls.
 *
 * Provider URLs are mostly user-controllable (cfg.providers.<id>.baseUrl,
-* imageBaseUrl, etc.). Without a guard a malicious config could make xopc
+* custom provider base URLs. Without a guard a malicious config could make xopc
 * fetch internal services (169.254.x.x metadata, 127.0.0.1, RFC1918, …).
 *
 * Policy:

package/dist/src/proactive/insight-repository.d.ts

@@ -13,6 +13,8 @@ export declare function createProactiveInsight(input: {
     whyItMatters: string;
     nextAction: string;
     evidence: ProactiveEvidence[];
+    valueScore: number;
+    valueReasons: string[];
     nowMs?: number;
 }): ProactiveInsight | null;
 export declare function setProactiveInsightStatus(id: string, status: ProactiveInsightStatus, nowMs?: number, expectedStatus?: ProactiveInsightStatus): ProactiveInsight | null;

package/dist/src/proactive/insight-repository.js

@@ -14,6 +14,8 @@ function insightFromRow(row) {
 		nextAction: row.next_action,
 		evidence: JSON.parse(row.evidence_json),
 		status: row.status,
+		valueScore: row.value_score,
+		valueReasons: JSON.parse(row.value_reasons_json),
 		createdAt: row.created_at,
 		updatedAt: row.updated_at
 	};
@@ -58,8 +60,9 @@ function createProactiveInsight(input) {
 	runSqliteWriteTransaction((db) => {
 		created = db.prepare(`INSERT OR IGNORE INTO proactive_insights (
         insight_id, watch_id, run_id, kind, title, summary, why_it_matters,
-        next_action, evidence_json, content_hash, status, created_at, updated_at
-      ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, 'unread', ?, ?)`).run(id, input.watchId, input.runId, input.kind, input.title, input.summary, input.whyItMatters, input.nextAction, JSON.stringify(input.evidence), contentHash, now, now).changes > 0;
+        next_action, evidence_json, content_hash, status, value_score,
+        value_reasons_json, created_at, updated_at
+      ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, 'unread', ?, ?, ?, ?)`).run(id, input.watchId, input.runId, input.kind, input.title, input.summary, input.whyItMatters, input.nextAction, JSON.stringify(input.evidence), contentHash, input.valueScore, JSON.stringify(input.valueReasons), now, now).changes > 0;
 	});
 	return created ? listProactiveInsights({ limit: 100 }).find((item) => item.id === id) ?? null : null;
 }

package/dist/src/proactive/run-processor.js

@@ -1,7 +1,10 @@
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
+import { getRelationshipSettings, isProactiveSupportAllowed } from "../storage/sqlite/relationship-settings-repository.js";
+import "../storage/sqlite/index.js";
 import { getFocusWatchByAutomationId, recordFocusWatchRun } from "./watch-repository.js";
-import { createProactiveInsight } from "./insight-repository.js";
+import { createProactiveInsight, listProactiveInsights } from "./insight-repository.js";
+import { scoreProactiveValue } from "./value-score.js";
 //#region src/proactive/run-processor.ts
 init_logger();
 const log = createLogger("ProactiveRunProcessor");
@@ -105,6 +108,22 @@ function processFocusAutomationRun(run) {
 		nowMs: run.endedAtMs
 	})) return { handled: true };
 	if (!result.meaningful) return { handled: true };
+	if (!isProactiveSupportAllowed(getRelationshipSettings(), {
+		now: new Date(run.endedAtMs),
+		topic: watch.kind
+	})) return { handled: true };
+	const history = listProactiveInsights({
+		status: ["approved", "dismissed"],
+		limit: 50
+	});
+	const value = scoreProactiveValue({
+		kind: watch.kind,
+		evidenceCount: result.evidence.length,
+		hasNextAction: Boolean(result.nextAction),
+		approvedCount: history.filter((item) => item.status === "approved").length,
+		dismissedCount: history.filter((item) => item.status === "dismissed").length
+	});
+	if (!value.shouldDeliver) return { handled: true };
 	const insight = createProactiveInsight({
 		watchId: watch.id,
 		runId: run.id,
@@ -114,6 +133,8 @@ function processFocusAutomationRun(run) {
 		whyItMatters: result.whyItMatters,
 		nextAction: result.nextAction,
 		evidence: result.evidence,
+		valueScore: value.score,
+		valueReasons: value.reasons,
 		nowMs: run.endedAtMs
 	});
 	return insight ? {

package/dist/src/proactive/types.d.ts

@@ -49,6 +49,8 @@ export interface ProactiveInsight {
     whyItMatters: string;
     nextAction: string;
     evidence: ProactiveEvidence[];
+    valueScore: number;
+    valueReasons: string[];
     status: ProactiveInsightStatus;
     createdAt: number;
     updatedAt: number;

package/dist/src/proactive/value-score.d.ts

@@ -0,0 +1,13 @@
+import type { FocusWatchKind } from './types.js';
+export interface ProactiveValueScore {
+    score: number;
+    reasons: string[];
+    shouldDeliver: boolean;
+}
+export declare function scoreProactiveValue(input: {
+    kind: FocusWatchKind;
+    evidenceCount: number;
+    hasNextAction: boolean;
+    approvedCount: number;
+    dismissedCount: number;
+}): ProactiveValueScore;

package/dist/src/proactive/value-score.js

@@ -0,0 +1,30 @@
+//#region src/proactive/value-score.ts
+function scoreProactiveValue(input) {
+	const reasons = [];
+	let score = .15;
+	if (input.evidenceCount > 0) {
+		score += Math.min(.25, input.evidenceCount * .1);
+		reasons.push("evidence_backed");
+	}
+	if (input.hasNextAction) {
+		score += .25;
+		reasons.push("actionable");
+	}
+	const urgency = input.kind === "deadline" ? .25 : input.kind === "staleness" ? .2 : .15;
+	score += urgency;
+	reasons.push(input.kind === "deadline" ? "time_sensitive" : "focus_relevant");
+	const rated = input.approvedCount + input.dismissedCount;
+	if (rated > 0) {
+		const approvalRate = input.approvedCount / rated;
+		score += (approvalRate - .5) * .4;
+		reasons.push(approvalRate >= .5 ? "historically_useful" : "historically_dismissed");
+	}
+	score = Math.max(0, Math.min(1, score));
+	return {
+		score,
+		reasons,
+		shouldDeliver: score >= .65
+	};
+}
+//#endregion
+export { scoreProactiveValue };

package/dist/src/providers/auth-runtime/resolve-api-key.d.ts

@@ -4,8 +4,7 @@
  *
  * Resolution order:
  *   1. AuthProfileStore (per-agent / per-profile; noop in Step 1)
- *   2. cfg.providers.<id>.apiKey
- *   3. PROVIDER_ENV_MAP[providerId] env vars (or `<PROVIDER>_API_KEY` fallback)
+ *   2. PROVIDER_ENV_MAP[providerId] env vars (or `<PROVIDER>_API_KEY` fallback)
  *
  * Distinct from `src/providers/index.ts#getApiKeySync` which is keyed to the
  * LLM model registry. Capability providers care only about per-vendor API
@@ -21,7 +20,6 @@ import type { ResolveApiKeyOptions } from './types.js';
  *
  * Resolution order (matches spec §8.4):
  *   1. AuthProfileStore (per-agent profile — may be OAuth)
- *   2. cfg.providers.<id>.apiKey
- *   3. PROVIDER_ENV_MAP[providerId] env vars
+ *   2. PROVIDER_ENV_MAP[providerId] env vars
  */
 export declare function resolveApiKeyForProvider(options: ResolveApiKeyOptions): string | undefined;

package/dist/src/providers/auth-runtime/resolve-api-key.js

@@ -6,8 +6,7 @@ import { resolveAuthProfileForProvider } from "./resolve-auth.js";
 *
 * Resolution order:
 *   1. AuthProfileStore (per-agent / per-profile; noop in Step 1)
-*   2. cfg.providers.<id>.apiKey
-*   3. PROVIDER_ENV_MAP[providerId] env vars (or `<PROVIDER>_API_KEY` fallback)
+*   2. PROVIDER_ENV_MAP[providerId] env vars (or `<PROVIDER>_API_KEY` fallback)
 *
 * Distinct from `src/providers/index.ts#getApiKeySync` which is keyed to the
 * LLM model registry. Capability providers care only about per-vendor API
@@ -22,8 +21,7 @@ import { resolveAuthProfileForProvider } from "./resolve-auth.js";
 *
 * Resolution order (matches spec §8.4):
 *   1. AuthProfileStore (per-agent profile — may be OAuth)
-*   2. cfg.providers.<id>.apiKey
-*   3. PROVIDER_ENV_MAP[providerId] env vars
+*   2. PROVIDER_ENV_MAP[providerId] env vars
 */
 function resolveApiKeyForProvider(options) {
 	return resolveAuthProfileForProvider(options).apiKey;

package/dist/src/providers/auth-runtime/resolve-auth.d.ts

@@ -6,8 +6,7 @@
  *
  * Resolution order matches `resolveApiKeyForProvider`:
  *   1. AuthProfileStore (per-agent profile — may be OAuth)
- *   2. cfg.providers.<id>.apiKey
- *   3. PROVIDER_ENV_MAP[providerId] env vars
+ *   2. Environment variables
  *
  * Returns:
  *   - `mode: 'oauth' | 'azure-key' | 'api-key'`
@@ -19,8 +18,8 @@ export interface ProviderAuthResolution {
     apiKey?: string;
     mode: ProviderAuthMode;
     profileId?: string;
-    /** Source bucket: 'store' | 'config' | 'env' | 'none'. */
-    source: 'store' | 'config' | 'env' | 'none';
+    /** Source bucket. */
+    source: 'store' | 'env' | 'none';
     /** Vendor metadata copied from the matched profile (azure resource etc.). */
     meta?: Record<string, unknown>;
 }

package/dist/src/providers/auth-runtime/resolve-auth.js

@@ -1,7 +1,9 @@
+import { init_sync_provider_auth, resolveProviderApiKeyForAgentSync } from "../../auth/sync-provider-auth.js";
 import { getApiKeyFromEnv, init_env_keys } from "../env-keys.js";
 import { getDefaultAuthProfileStore } from "./auth-profile-store.js";
 //#region src/providers/auth-runtime/resolve-auth.ts
 init_env_keys();
+init_sync_provider_auth();
 function resolveAuthProfileForProvider(options) {
 	const { providerId } = options;
 	if (!providerId) return {
@@ -20,22 +22,28 @@ function resolveAuthProfileForProvider(options) {
 			meta: profile.meta
 		};
 	}
-	const cfgKey = readCfgApiKey(options.cfg, providerId);
-	if (cfgKey) {
+	if (!options.store && !options.envReader) {
+		const storedKey = resolveProviderApiKeyForAgentSync(providerId, options.agentId, options.cfg);
+		if (storedKey) {
+			const azure = readCfgAzureMeta(options.cfg, providerId);
+			return {
+				apiKey: storedKey,
+				mode: azure ? "azure-key" : "api-key",
+				source: "store",
+				meta: azure
+			};
+		}
+	}
+	const envKey = options.envReader ? readFromCustomEnv(options.envReader, providerId) : getApiKeyFromEnv(providerId);
+	if (envKey) {
 		const azure = readCfgAzureMeta(options.cfg, providerId);
 		return {
-			apiKey: cfgKey,
+			apiKey: envKey,
 			mode: azure ? "azure-key" : "api-key",
-			source: "config",
+			source: "env",
 			meta: azure
 		};
 	}
-	const envKey = options.envReader ? readFromCustomEnv(options.envReader, providerId) : getApiKeyFromEnv(providerId);
-	if (envKey) return {
-		apiKey: envKey,
-		mode: "api-key",
-		source: "env"
-	};
 	return {
 		apiKey: void 0,
 		mode: "api-key",
@@ -49,14 +57,6 @@ function pickProfile(store, providerId, profileName) {
 		return;
 	}
 }
-function readCfgApiKey(cfg, providerId) {
-	const providers = cfg?.providers;
-	if (!providers || typeof providers !== "object") return void 0;
-	const entry = providers[providerId];
-	if (!entry || typeof entry !== "object") return void 0;
-	const apiKey = entry.apiKey;
-	return typeof apiKey === "string" && apiKey.length > 0 ? apiKey : void 0;
-}
 function readCfgAzureMeta(cfg, providerId) {
 	const providers = cfg?.providers;
 	if (!providers || typeof providers !== "object") return void 0;

package/dist/src/providers/domestic-presets.d.ts

@@ -30,8 +30,30 @@ export interface DomesticProviderPreset {
     models: DomesticProviderModelPreset[];
     aliases: string[];
     quirks?: string[];
+    onboardingIcon?: string;
+    requiresModelDiscovery?: boolean;
 }
 export declare const DOMESTIC_PROVIDER_PRESETS: readonly [{
+    readonly id: "xopc-cloud";
+    readonly displayName: "XOPC Model Service";
+    readonly description: "Official XOPC OpenAI-compatible model service. Available models are loaded from your account.";
+    readonly docsUrl: "https://console.xopc.ai/models";
+    readonly apiKeyUrl: "https://console.xopc.ai/models";
+    readonly envVars: ["XOPC_MODEL_API_KEY"];
+    readonly api: "openai-completions";
+    readonly baseUrlPresets: [{
+        readonly id: "official";
+        readonly label: "XOPC Official";
+        readonly baseUrl: "https://router.xopc.ai/v1";
+    }];
+    readonly defaultBaseUrlPreset: "official";
+    readonly defaultModel: "";
+    readonly models: [];
+    readonly aliases: ["xopc", "xopc cloud", "xopc models"];
+    readonly onboardingIcon: "☁️";
+    readonly requiresModelDiscovery: true;
+    readonly quirks: ["Connect through XOPC Console; credentials and available models are configured automatically."];
+}, {
     readonly id: "dashscope-cn";
     readonly displayName: "Alibaba Bailian / DashScope China";
     readonly description: "Alibaba Bailian Qwen models through the China DashScope OpenAI-compatible endpoint.";

package/dist/src/providers/domestic-presets.js

@@ -87,6 +87,31 @@ const MINIMAX_MODELS = [
 	}
 ];
 const DOMESTIC_PROVIDER_PRESETS = [
+	{
+		id: "xopc-cloud",
+		displayName: "XOPC Model Service",
+		description: "Official XOPC OpenAI-compatible model service. Available models are loaded from your account.",
+		docsUrl: "https://console.xopc.ai/models",
+		apiKeyUrl: "https://console.xopc.ai/models",
+		envVars: ["XOPC_MODEL_API_KEY"],
+		api: "openai-completions",
+		baseUrlPresets: [{
+			id: "official",
+			label: "XOPC Official",
+			baseUrl: "https://router.xopc.ai/v1"
+		}],
+		defaultBaseUrlPreset: "official",
+		defaultModel: "",
+		models: [],
+		aliases: [
+			"xopc",
+			"xopc cloud",
+			"xopc models"
+		],
+		onboardingIcon: "☁️",
+		requiresModelDiscovery: true,
+		quirks: ["Connect through XOPC Console; credentials and available models are configured automatically."]
+	},
 	{
 		id: "dashscope-cn",
 		displayName: "Alibaba Bailian / DashScope China",