@xopcai/xopc 0.0.187 → 0.0.189

package/dist/src/agent/tools/factory.js

@@ -4,6 +4,8 @@ import { isXopcDatabaseOpen } from "../../storage/sqlite/connection.js";
 import { getSessionTaskPlan, setSessionTaskPlan } from "../../storage/sqlite/session-task-plan-repository.js";
 import "../../storage/sqlite/index.js";
 import { init_agent_scope, resolveDefaultAgentId } from "../agent-scope.js";
+import { wrapToolsWithProtection } from "./executor.js";
+import { createDefaultExternalToolGatewayTools } from "../external-tools/index.js";
 import { createReadFileTool } from "./read.js";
 import { createWriteFileTool } from "./write.js";
 import { createListDirTool } from "./list-dir.js";
@@ -16,7 +18,6 @@ import { createFindTool } from "./find.js";
 import { createWebFetchTool, createWebSearchTool } from "./web.js";
 import { createWebExtractTool } from "./web-extract.js";
 import { createMessageTool } from "./communication.js";
-import { createComposioTools } from "./composio-tool.js";
 import { createSendMediaTool } from "./send-media.js";
 import { createReadMediaTool } from "./media-read-tool.js";
 import { createCreateShareTool, isShareToolAvailable } from "./create-share-tool.js";
@@ -49,7 +50,6 @@ import { createImageGenerateTool } from "./image-generate-tool.js";
 import "./index.js";
 import { createBrowserUseTool } from "./browser/tool/browser-use-tool.js";
 import { createWorkflowCatalog } from "../workflow/catalog.js";
-import { wrapToolsWithProtection } from "./executor.js";
 import { mergeTtsConfigFromAppConfig } from "../../voice/tts/merge-config.js";
 import { createTextToSpeechTool } from "./tts-tool.js";
 import { getAgentCapabilityToolNames } from "../capabilities/registry.js";
@@ -178,15 +178,19 @@ var AgentToolsFactory = class {
 		const codeIntelligenceConfig = cfg?.codeIntelligence;
 		const agentId = options?.agentId;
 		const codeIntelligenceTools = isCodeIntelligenceEnabledForAgent(codeIntelligenceConfig, agentId) && this.deps.getCodeIntelligenceRuntime ? createCodeIntelligenceTools({ getRuntime: () => this.deps.getCodeIntelligenceRuntime(workspace) }) : [];
-		const optionalTools = [
-			imageTool,
-			imageGenerateTool,
-			...createComposioTools({
-				getConfig: () => this.deps.getConfig?.(),
-				getCurrentContext: this.deps.getCurrentContext,
-				agentId
-			})
-		].filter((t) => t != null);
+		const externalTools = createDefaultExternalToolGatewayTools({
+			workspace,
+			getConfig: () => this.deps.getConfig?.(),
+			getCurrentContext: this.deps.getCurrentContext,
+			endpointTools: this.deps.endpointTools,
+			agentId,
+			extensionRegistry: this.deps.extensionRegistry,
+			disabledTools: disabled,
+			hookRunner: this.deps.hookRunner,
+			toolExecutorConfig: this.deps.toolExecutorConfig,
+			getMemoryManager: getMemMgr
+		});
+		const optionalTools = [imageTool, imageGenerateTool].filter((t) => t != null);
 		const readTool = createReadFileTool(workspace, { profileMarkdownRoot: options?.profileMarkdownRoot });
 		const writeTool = createWriteFileTool(workspace, { profileMarkdownRoot: options?.profileMarkdownRoot });
 		const applyPatchTool = createApplyPatchTool(workspace);
@@ -223,6 +227,7 @@ var AgentToolsFactory = class {
 				}
 			}),
 			createUpdatePlanTool(),
+			...externalTools,
 			...getSkillMgr ? [
 				createSkillsListTool({
 					getSkillManager: getSkillMgr,
@@ -287,7 +292,6 @@ var AgentToolsFactory = class {
 					...this.deps.getCurrentContext?.()?.sessionKey ? { sessionKey: this.deps.getCurrentContext().sessionKey } : {}
 				})
 			})] : [],
-			...getMemMgr?.().getAdditionalTools() ?? [],
 			...this.deps.getSessionStore && getPrimary ? [createSessionSearchTool({
 				getSessionStore: this.deps.getSessionStore,
 				getPrimaryModel: getPrimary,
@@ -341,16 +345,7 @@ var AgentToolsFactory = class {
 		return ["create_desktop_pet"];
 	}
 	createAllTools(coreOptions) {
-		const coreTools = this.createCoreTools(coreOptions);
-		const disableExtensions = coreOptions?.disabledTools?.has("extensions");
-		let bundled;
-		if (!this.deps.extensionRegistry || disableExtensions) bundled = coreTools;
-		else {
-			const extensionTools = this.deps.extensionRegistry.getAllTools();
-			log.info({ count: extensionTools.length }, "Loaded extension tools");
-			bundled = [...coreTools, ...extensionTools];
-		}
-		return wrapToolsWithProtection(bundled, this.deps.toolExecutorConfig);
+		return wrapToolsWithProtection(this.createCoreTools(coreOptions), this.deps.toolExecutorConfig);
 	}
 };
 function filterToolsByDisabledSet(tools, disabled) {

package/dist/src/agent/tools/index.d.ts

@@ -12,7 +12,6 @@ export { findTool, createFindTool, type FindToolInput, type FindToolDetails, } f
 export { createWebSearchTool, createWebFetchTool } from './web.js';
 export { createWebExtractTool, stripHtmlBoilerplate, DEFAULT_WEB_EXTRACT_MAX_LENGTH, MAX_RAW_HTML_CHARS_FOR_WEB_EXTRACT, } from './web-extract.js';
 export { createMessageTool } from './communication.js';
-export { createComposioTools } from './composio-tool.js';
 export { createSendMediaTool } from './send-media.js';
 export { createReadMediaTool } from './media-read-tool.js';
 export { createCreateShareTool, isShareToolAvailable, type CreateShareToolDeps, } from './create-share-tool.js';

package/dist/src/agent/tools/index.js

@@ -14,7 +14,6 @@ import { createFindTool, findTool } from "./find.js";
 import { createWebFetchTool, createWebSearchTool } from "./web.js";
 import { DEFAULT_WEB_EXTRACT_MAX_LENGTH, MAX_RAW_HTML_CHARS_FOR_WEB_EXTRACT, createWebExtractTool, stripHtmlBoilerplate } from "./web-extract.js";
 import { createMessageTool } from "./communication.js";
-import { createComposioTools } from "./composio-tool.js";
 import { createSendMediaTool } from "./send-media.js";
 import { createReadMediaTool } from "./media-read-tool.js";
 import { createCreateShareTool, isShareToolAvailable } from "./create-share-tool.js";
@@ -43,4 +42,4 @@ import { createManagedJobTool } from "./managed-job-tool.js";
 import { resolveImageModelConfigForTool } from "../image/tool-model-config.js";
 import { createImageTool } from "./image-tool.js";
 import { createImageGenerateTool, resolveImageGenerationModelConfigForTool } from "./image-generate-tool.js";
-export { BrowserManager, DEFAULT_DELEGATE_TOOLS, DEFAULT_MAX_BYTES, DEFAULT_MAX_LINES, DEFAULT_TOOL_METADATA, DEFAULT_WEB_EXTRACT_MAX_LENGTH, DELEGATE_BLOCKED_TOOLS, GREP_MAX_LINE_LENGTH, MAX_RAW_HTML_CHARS_FOR_WEB_EXTRACT, SANDBOX_ALLOWED_TOOLS, TodoStore, ToolConcurrencyController, assertBrowserUrlAllowed, buildSandboxToolMap, createApplyPatchTool, createAutomationTool, createBrowserRecipeTool, createClarifyTool, createCodeIntelligenceTools, createComposioTools, createCreateShareTool, createDelegateTool, createDesktopPetTool, createDreamingTool, createExecCommandTool, createExecuteCodeTool, createFindTool, createGrepTool, createImageGenerateTool, createImageTool, createListDirTool, createManagedJobTool, createMemoryGetTool, createMemorySearchTool, createMessageTool, createReadFileTool, createReadMediaTool, createSendMediaTool, createSessionSearchTool, createSessionStatusTool, createSkillInstallTool, createSkillManageTool, createSkillViewTool, createSkillsListTool, createSkillsMarketplaceSearchTool, createTodoTool, createToolManualTool, createUpdatePlanTool, createWebExtractTool, createWebFetchTool, createWebSearchTool, createWorkflowTool, createWriteFileTool, createXopcUseTool, findTool, formatSize, fuzzyFindText, generateDiffString, getToolMetadata, grepTool, isShareToolAvailable, listDirTool, normalizeForFuzzyMatch, normalizeToLF, resolveImageGenerationModelConfigForTool, resolveImageModelConfigForTool, resolveToolLockMode, restoreLineEndings, stripBom, stripHtmlBoilerplate, truncateHead, truncateLine, truncateTail, writeFileTool };
+export { BrowserManager, DEFAULT_DELEGATE_TOOLS, DEFAULT_MAX_BYTES, DEFAULT_MAX_LINES, DEFAULT_TOOL_METADATA, DEFAULT_WEB_EXTRACT_MAX_LENGTH, DELEGATE_BLOCKED_TOOLS, GREP_MAX_LINE_LENGTH, MAX_RAW_HTML_CHARS_FOR_WEB_EXTRACT, SANDBOX_ALLOWED_TOOLS, TodoStore, ToolConcurrencyController, assertBrowserUrlAllowed, buildSandboxToolMap, createApplyPatchTool, createAutomationTool, createBrowserRecipeTool, createClarifyTool, createCodeIntelligenceTools, createCreateShareTool, createDelegateTool, createDesktopPetTool, createDreamingTool, createExecCommandTool, createExecuteCodeTool, createFindTool, createGrepTool, createImageGenerateTool, createImageTool, createListDirTool, createManagedJobTool, createMemoryGetTool, createMemorySearchTool, createMessageTool, createReadFileTool, createReadMediaTool, createSendMediaTool, createSessionSearchTool, createSessionStatusTool, createSkillInstallTool, createSkillManageTool, createSkillViewTool, createSkillsListTool, createSkillsMarketplaceSearchTool, createTodoTool, createToolManualTool, createUpdatePlanTool, createWebExtractTool, createWebFetchTool, createWebSearchTool, createWorkflowTool, createWriteFileTool, createXopcUseTool, findTool, formatSize, fuzzyFindText, generateDiffString, getToolMetadata, grepTool, isShareToolAvailable, listDirTool, normalizeForFuzzyMatch, normalizeToLF, resolveImageGenerationModelConfigForTool, resolveImageModelConfigForTool, resolveToolLockMode, restoreLineEndings, stripBom, stripHtmlBoilerplate, truncateHead, truncateLine, truncateTail, writeFileTool };

package/dist/src/agent/workflow/workflow-child-tools.js

@@ -1,3 +1,5 @@
+import { EXTERNAL_TOOL_NAMES } from "../external-tools/gateway-tools.js";
+import "../external-tools/index.js";
 import { AgentToolsFactory } from "../tools/factory.js";
 //#region src/agent/workflow/workflow-child-tools.ts
 /** Builds the tool set for workflow child agents (wired from gateway to avoid cycles). */
@@ -13,7 +15,11 @@ function buildWorkflowChildTools(childOptions) {
 		workspace: childOptions.workspace,
 		getPrimaryModel: () => childOptions.model,
 		agentId: childOptions.agentId,
-		disabledTools: new Set(["extensions"])
+		disabledTools: new Set([
+			EXTERNAL_TOOL_NAMES.search,
+			EXTERNAL_TOOL_NAMES.describe,
+			EXTERNAL_TOOL_NAMES.execute
+		])
 	});
 }
 //#endregion

package/dist/src/automations/domain/types.d.ts

@@ -1,5 +1,6 @@
 import type { WorkflowRunInputEnvelope } from '../../workflows/domain/index.js';
 import type { TaskCommand } from '@xopcai/gateway-contract';
+import type { TurnOrigin } from '@xopcai/endpoint-tools-protocol';
 import type { WorkflowRunServiceLike } from '../../workflows/service/workflow-run-service.types.js';
 export type AutomationSchedule = {
     kind: 'once';
@@ -171,7 +172,7 @@ export interface AutomationDeps {
             applyAutomationModelOverride?: (sessionKey: string, model: string | undefined) => Promise<boolean>;
         };
         turnDispatcher?: {
-            processDirect: (message: string, sessionKey: string, attachments?: unknown[], thinking?: string, options?: {
+            processDirect: (message: string, sessionKey: string, origin: TurnOrigin, attachments?: unknown[], thinking?: string, options?: {
                 signal?: AbortSignal;
                 runId?: string;
                 deadlineAtMs?: number;

package/dist/src/automations/domain/validation.d.ts

@@ -656,6 +656,7 @@ export declare const UpdateAutomationSchema: z.ZodObject<{
             }, z.core.$strip>;
         }, z.core.$strip>], "type">;
     }, z.core.$strict>], "kind">>;
+    description: z.ZodOptional<z.ZodOptional<z.ZodString>>;
     state: z.ZodOptional<z.ZodDefault<z.ZodObject<{
         nextRunAtMs: z.ZodOptional<z.ZodNumber>;
         runningRunId: z.ZodPreprocess<z.ZodOptional<z.ZodString>>;
@@ -672,7 +673,6 @@ export declare const UpdateAutomationSchema: z.ZodObject<{
         lastError: z.ZodOptional<z.ZodString>;
         consecutiveFailures: z.ZodOptional<z.ZodNumber>;
     }, z.core.$strict>>>;
-    description: z.ZodOptional<z.ZodOptional<z.ZodString>>;
     trigger: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
         kind: z.ZodLiteral<"manual">;
     }, z.core.$strict>, z.ZodObject<{

package/dist/src/automations/service/action-executor.js

@@ -177,7 +177,10 @@ var AutomationActionExecutor = class {
 				model: action.model
 			}, "Automation model override invalid; using agent default");
 		}
-		const response = await agentService.turnDispatcher.processDirect(buildSafetyInstruction(automation, action.instruction), sessionKey, void 0, void 0, {
+		const response = await agentService.turnDispatcher.processDirect(buildSafetyInstruction(automation, action.instruction), sessionKey, {
+			type: "system",
+			source: "automation"
+		}, void 0, void 0, {
 			signal,
 			runId: run.id,
 			deadlineAtMs

package/dist/src/browser/providers/cloakbrowser.js

@@ -11,9 +11,9 @@ import { createReadStream, createWriteStream } from "node:fs";
 import { spawn } from "node:child_process";
 import { createHash } from "node:crypto";
 import { mkdir, mkdtemp, rm, stat } from "node:fs/promises";
+import { Readable, Transform } from "node:stream";
 import AdmZip from "adm-zip";
 import { pipeline } from "node:stream/promises";
-import { Readable, Transform } from "node:stream";
 //#region src/browser/providers/cloakbrowser.ts
 /**
 * CloakBrowser provider — anti-fingerprint Chromium with stealth capabilities.

package/dist/src/channels/channel-domain.d.ts

@@ -3,8 +3,6 @@
  */
 import type { MessageBus } from '../infra/bus/index.js';
 import type { Config } from '../config/schema.js';
-import type { ProgressStage } from '../agent/lifecycle/progress.js';
-export type { ProgressStage } from '../agent/lifecycle/progress.js';
 export type ChatType = 'direct' | 'group' | 'channel' | 'thread';
 export type DmPolicy = 'pairing' | 'allowlist' | 'open' | 'disabled';
 export type GroupPolicy = 'open' | 'disabled' | 'allowlist';
@@ -74,8 +72,6 @@ export interface ChannelSendResult {
 }
 export interface ChannelStreamHandle {
     update: (text: string) => void;
-    updateProgress?: (text: string, stage: ProgressStage, detail?: string) => void;
-    setProgress?: (stage: ProgressStage, detail?: string) => void;
     end: () => Promise<void>;
     abort: () => Promise<void>;
     messageId: () => number | undefined;

package/dist/src/channels/pairing/pairing-challenge.d.ts

@@ -18,7 +18,7 @@ export type IssuePairingChallengeParams = {
 };
 /**
  * OpenClaw-style pairing: mint or refresh a pending code; notify the user only on new codes.
- * Repeat DMs refresh lastSeenAt and broadcast SSE without re-sending the bot message.
+ * Repeat DMs refresh lastSeenAt and publish realtime status without re-sending the bot message.
  */
 export declare function issuePairingChallenge(params: IssuePairingChallengeParams): Promise<{
     created: boolean;

package/dist/src/channels/pairing/pairing-challenge.js

@@ -4,7 +4,7 @@ import { broadcastPairingEvent } from "./pairing-events.js";
 //#region src/channels/pairing/pairing-challenge.ts
 /**
 * OpenClaw-style pairing: mint or refresh a pending code; notify the user only on new codes.
-* Repeat DMs refresh lastSeenAt and broadcast SSE without re-sending the bot message.
+* Repeat DMs refresh lastSeenAt and publish realtime status without re-sending the bot message.
 */
 async function issuePairingChallenge(params) {
 	const normalizedAccountId = params.accountId.trim().toLowerCase() || "default";

package/dist/src/channels/plugin-types.d.ts

@@ -296,8 +296,6 @@ export interface ChannelPollResult {
 export interface ChannelStreamHandle {
     update: (text: string) => void;
     updateReasoning?: (text: string) => void;
-    updateProgress?: (text: string, stage: string, detail?: string) => void;
-    setProgress?: (stage: string, detail?: string) => void;
     end: () => Promise<void>;
     abort: () => Promise<void>;
     messageId: () => number | undefined;

package/dist/src/cli/commands/agent/stream-renderer.js

@@ -28,7 +28,10 @@ function formatToolArgs(args) {
 */
 async function renderStreamToTerminal(agent, message, sessionKey) {
 	const stamped = message.trimStart().startsWith("/") ? message : prependEnvelopeTimestamp(message);
-	const stream = agent.turnDispatcher.processDirectStreaming(stamped, sessionKey);
+	const stream = agent.turnDispatcher.processDirectStreaming(stamped, sessionKey, {
+		type: "system",
+		source: "cli"
+	});
 	let responseText = "";
 	let isFirstToken = true;
 	let isInThinking = false;

package/dist/src/cli/commands/doctor/checks/database-schema.js

@@ -52,7 +52,7 @@ async function checkDatabaseSchema(ctx) {
 		id: "database-schema",
 		label: "Database schema",
 		status: "pass",
-		message: `SQLite schema v${status.dbVersion} (current release v107).`,
+		message: `SQLite schema v${status.dbVersion} (current release v112).`,
 		hints: []
 	};
 }

package/dist/src/config/rules.js

@@ -93,11 +93,6 @@ const BASE_RELOAD_RULES = [
 		kind: "restart",
 		description: "Host-header origin fallback"
 	},
-	{
-		prefix: "gateway.maxSseConnections",
-		kind: "restart",
-		description: "SSE connection limit"
-	},
 	{
 		prefix: "gateway.channelConnectDeferMode",
 		kind: "restart",

package/dist/src/config/schema.d.ts

@@ -781,8 +781,8 @@ export declare const WorkspaceConfigSchema: z.ZodOptional<z.ZodObject<{
 }, z.core.$strip>>;
 export type WorkspaceConfig = z.infer<typeof WorkspaceConfigSchema>;
 export declare const GatewayBindModeSchema: z.ZodEnum<{
-    auto: "auto";
     custom: "custom";
+    auto: "auto";
     loopback: "loopback";
     lan: "lan";
     tailnet: "tailnet";
@@ -796,8 +796,8 @@ export declare const GatewayWebchatConfigSchema: z.ZodDefault<z.ZodObject<{
 }, z.core.$strip>>;
 export declare const GatewayConfigSchema: z.ZodDefault<z.ZodObject<{
     bind: z.ZodOptional<z.ZodEnum<{
-        auto: "auto";
         custom: "custom";
+        auto: "auto";
         loopback: "loopback";
         lan: "lan";
         tailnet: "tailnet";
@@ -886,7 +886,6 @@ export declare const GatewayConfigSchema: z.ZodDefault<z.ZodObject<{
             off: "off";
         }>>;
     }, z.core.$strip>>>;
-    maxSseConnections: z.ZodOptional<z.ZodNumber>;
     corsOrigins: z.ZodOptional<z.ZodArray<z.ZodString>>;
     publicUrl: z.ZodOptional<z.ZodString>;
     dangerouslyAllowHostHeaderOriginFallback: z.ZodOptional<z.ZodBoolean>;
@@ -1930,8 +1929,8 @@ export declare const ConfigSchema: z.ZodDefault<z.ZodObject<{
     channels: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
     gateway: z.ZodDefault<z.ZodObject<{
         bind: z.ZodOptional<z.ZodEnum<{
-            auto: "auto";
             custom: "custom";
+            auto: "auto";
             loopback: "loopback";
             lan: "lan";
             tailnet: "tailnet";
@@ -2020,7 +2019,6 @@ export declare const ConfigSchema: z.ZodDefault<z.ZodObject<{
                 off: "off";
             }>>;
         }, z.core.$strip>>>;
-        maxSseConnections: z.ZodOptional<z.ZodNumber>;
         corsOrigins: z.ZodOptional<z.ZodArray<z.ZodString>>;
         publicUrl: z.ZodOptional<z.ZodString>;
         dangerouslyAllowHostHeaderOriginFallback: z.ZodOptional<z.ZodBoolean>;

package/dist/src/config/schema.js

@@ -465,7 +465,6 @@ activityDetailDefault: z.enum([
 		auth: GatewayAuthSchema.optional(),
 		heartbeat: HeartbeatConfigSchema.optional(),
 		webchat: GatewayWebchatConfigSchema.optional(),
-		maxSseConnections: z.number().optional(),
 		corsOrigins: z.array(z.string()).optional(),
 		/**
 		* Reverse-proxy publicly reachable URL (e.g. `https://gateway.example.com`).
@@ -639,7 +638,6 @@ activityDetailDefault: z.enum([
 			includeSystemPromptSection: false
 		},
 		webchat: { activityDetailDefault: "on" },
-		maxSseConnections: 100,
 		corsOrigins: [],
 		skillsMarketplaceProvider: "store",
 		skillsStoreBaseUrl: "https://store.xopc.ai"
@@ -1042,7 +1040,6 @@ workDiscoveryOnboarding: z.boolean().default(true) }).strict().default({ workDis
 				includeSystemPromptSection: false
 			},
 			webchat: { activityDetailDefault: "on" },
-			maxSseConnections: 100,
 			corsOrigins: [],
 			skillsMarketplaceProvider: "store",
 			skillsStoreBaseUrl: "https://store.xopc.ai"

package/dist/src/config/web-patch.js

@@ -93,7 +93,6 @@ function mergeGatewaySkillsMarketplacePatch(config, patch) {
 			intervalMs: 18e5,
 			includeSystemPromptSection: false
 		},
-		maxSseConnections: 100,
 		corsOrigins: []
 	};
 	if (parsed.data.skillsMarketplaceProvider !== void 0) config.gateway.skillsMarketplaceProvider = parsed.data.skillsMarketplaceProvider.trim();

package/dist/src/connectors/health.js

@@ -1,7 +1,7 @@
-import { listBundleMcpServerCapabilitiesForGateway } from "../agent/mcp/bundle-mcp-materialize.js";
 import { materializeConnectorMcpServer } from "./materialize.js";
 import { getConnectorInstance } from "./instances.js";
 import { getWorkspacePath } from "../config/workspace-path-helpers.js";
+import { listBundleMcpServerCapabilitiesForGateway } from "../agent/mcp/bundle-mcp-gateway.js";
 //#region src/connectors/health.ts
 function classifyConnectorHealthError(error) {
 	const message = error instanceof Error ? error.message : String(error);

package/dist/src/endpoint-tools/auth.d.ts

@@ -0,0 +1,20 @@
+import crypto from 'node:crypto';
+import { type EndpointHelloPayload } from '@xopcai/endpoint-tools-protocol';
+import type { EndpointPrincipal } from '../storage/sqlite/index.js';
+export interface EndpointAuthenticatorDeps {
+    getPrincipal(id: string): EndpointPrincipal | undefined;
+    bindEndpoint(endpointId: string, principalId: string, boundAt?: number): boolean;
+    touchPrincipal(id: string, seenAt?: number): void;
+    now?: () => number;
+}
+export declare class EndpointAuthenticationError extends Error {
+}
+export declare function parseEndpointPublicKey(encoded: string): crypto.KeyObject;
+export declare class EndpointAuthenticator {
+    private readonly deps;
+    private readonly usedNonces;
+    private readonly now;
+    constructor(deps: EndpointAuthenticatorDeps);
+    authenticate(payload: EndpointHelloPayload): EndpointPrincipal;
+    private pruneNonces;
+}

package/dist/src/endpoint-tools/auth.js

@@ -0,0 +1,51 @@
+import { endpointHelloSigningPayload } from "../../packages/endpoint-tools-protocol/src/index.js";
+import crypto from "node:crypto";
+//#region src/endpoint-tools/auth.ts
+const MAX_CLOCK_SKEW_MS = 6e4;
+var EndpointAuthenticationError = class extends Error {};
+function parseEndpointPublicKey(encoded) {
+	const key = crypto.createPublicKey({
+		key: Buffer.from(encoded, "base64url"),
+		format: "der",
+		type: "spki"
+	});
+	if (key.asymmetricKeyType !== "ec" || key.asymmetricKeyDetails?.namedCurve !== "prime256v1") throw new Error("Endpoint public key must be ECDSA P-256");
+	return key;
+}
+var EndpointAuthenticator = class {
+	usedNonces = /* @__PURE__ */ new Map();
+	now;
+	constructor(deps) {
+		this.deps = deps;
+		this.now = deps.now ?? Date.now;
+	}
+	authenticate(payload) {
+		const now = this.now();
+		this.pruneNonces(now);
+		if (Math.abs(now - payload.signedAt) > MAX_CLOCK_SKEW_MS) throw new EndpointAuthenticationError("Endpoint signature timestamp is outside the allowed window");
+		const nonceKey = `${payload.principalId}:${payload.nonce}`;
+		if (this.usedNonces.has(nonceKey)) throw new EndpointAuthenticationError("Endpoint hello nonce was already used");
+		const principal = this.deps.getPrincipal(payload.principalId);
+		if (!principal || principal.revokedAt !== void 0) throw new EndpointAuthenticationError("Endpoint principal is unknown or revoked");
+		if (principal.kind !== payload.kind || principal.platform !== payload.platform || principal.displayName !== payload.displayName) throw new EndpointAuthenticationError("Endpoint identity does not match its registered principal");
+		let publicKey;
+		try {
+			publicKey = parseEndpointPublicKey(principal.publicKey);
+		} catch (error) {
+			throw new EndpointAuthenticationError("Endpoint principal public key is invalid", { cause: error });
+		}
+		if (!crypto.verify("sha256", Buffer.from(endpointHelloSigningPayload(payload), "utf8"), {
+			key: publicKey,
+			dsaEncoding: "ieee-p1363"
+		}, Buffer.from(payload.signature, "base64url"))) throw new EndpointAuthenticationError("Endpoint hello signature is invalid");
+		if (!this.deps.bindEndpoint(payload.endpointId, principal.id, now)) throw new EndpointAuthenticationError("Endpoint instance belongs to another principal");
+		this.usedNonces.set(nonceKey, now + MAX_CLOCK_SKEW_MS);
+		this.deps.touchPrincipal(principal.id, now);
+		return principal;
+	}
+	pruneNonces(now) {
+		for (const [key, expiresAt] of this.usedNonces) if (expiresAt <= now) this.usedNonces.delete(key);
+	}
+};
+//#endregion
+export { EndpointAuthenticationError, EndpointAuthenticator, parseEndpointPublicKey };

package/dist/src/endpoint-tools/index.d.ts

@@ -0,0 +1,5 @@
+export { EndpointToolRuntime } from './runtime.js';
+export { EndpointInvocationService, EndpointToolExecutionError, type EndpointInvocationAuditSink, type EndpointInvocationResult, } from './invocation-service.js';
+export { EndpointToolPolicy, EndpointToolPolicyError } from './policy.js';
+export { EndpointRegistry, endpointToolRevision, type EndpointConnectionSnapshot, type RegisteredEndpointTool, } from './registry.js';
+export { EndpointUploadError, EndpointUploadService, ENDPOINT_UPLOAD_MAX_BYTES, type EndpointUploadedFile, type EndpointUploadGrant, } from './upload-service.js';

package/dist/src/endpoint-tools/index.js

@@ -0,0 +1,6 @@
+import { EndpointToolPolicy, EndpointToolPolicyError } from "./policy.js";
+import { EndpointInvocationService, EndpointToolExecutionError } from "./invocation-service.js";
+import { EndpointRegistry, endpointToolRevision } from "./registry.js";
+import { ENDPOINT_UPLOAD_MAX_BYTES, EndpointUploadError, EndpointUploadService } from "./upload-service.js";
+import { EndpointToolRuntime } from "./runtime.js";
+export { ENDPOINT_UPLOAD_MAX_BYTES, EndpointInvocationService, EndpointRegistry, EndpointToolExecutionError, EndpointToolPolicy, EndpointToolPolicyError, EndpointToolRuntime, EndpointUploadError, EndpointUploadService, endpointToolRevision };

package/dist/src/endpoint-tools/invocation-service.d.ts

@@ -0,0 +1,68 @@
+import { type ClientEndpointMessage, type EndpointToolContent, type EndpointToolErrorCode } from '@xopcai/endpoint-tools-protocol';
+import { EndpointRegistry } from './registry.js';
+import { EndpointToolPolicy } from './policy.js';
+import type { EndpointUploadService } from './upload-service.js';
+type ToolClientMessage = Exclude<ClientEndpointMessage, {
+    type: `endpoint.${string}`;
+}>;
+export interface EndpointInvocationAuditSink {
+    started(params: {
+        id: string;
+        principalId: string;
+        endpointId: string;
+        toolCallId: string;
+        toolName: string;
+        effect: 'read' | 'write' | 'destructive';
+        confirmationRequired: boolean;
+        argumentsSha256: string;
+        startedAt: number;
+    }): void;
+    finished(params: {
+        id: string;
+        status: 'succeeded' | 'failed';
+        errorCode?: EndpointToolErrorCode;
+        errorMessage?: string;
+        completedAt: number;
+    }): void;
+}
+export interface EndpointInvocationServiceOptions {
+    audit?: EndpointInvocationAuditSink;
+    uploads?: EndpointUploadService;
+    policy?: EndpointToolPolicy;
+}
+export interface EndpointInvocationResult {
+    content: EndpointToolContent[];
+    details?: Record<string, unknown>;
+}
+export declare class EndpointToolExecutionError extends Error {
+    readonly code: EndpointToolErrorCode;
+    constructor(code: EndpointToolErrorCode, message: string);
+}
+export declare class EndpointInvocationService {
+    private readonly registry;
+    private readonly options;
+    private readonly pending;
+    private readonly policy;
+    constructor(registry: EndpointRegistry, options?: EndpointInvocationServiceOptions);
+    invoke(params: {
+        endpointId: string;
+        toolCallId: string;
+        toolName: string;
+        arguments: Record<string, unknown>;
+        descriptorRevision: string;
+        signal?: AbortSignal;
+        onProgress?: (progress: {
+            message?: string;
+            percent?: number;
+        }) => void;
+    }): Promise<EndpointInvocationResult>;
+    handleMessage(endpointId: string, message: ToolClientMessage): void;
+    failEndpoint(endpointId: string): void;
+    close(): void;
+    private cancel;
+    private succeed;
+    private fail;
+    private take;
+    private error;
+}
+export {};