@xopcai/xopc 0.0.231 → 0.0.233

package/dist/packages/endpoint-tools-protocol/src/index.js

@@ -18,6 +18,7 @@ const endpointResultKindSchema = z.enum([
 	"json",
 	"file"
 ]);
+const endpointSensitivitySchema = z.enum(["public", "personal"]);
 const identifierSchema = z.string().min(1).max(160);
 const turnTokenSchema = z.string().min(32).max(160).regex(/^[A-Za-z0-9_-]+$/);
 const turnOriginSchema = z.discriminatedUnion("type", [
@@ -49,6 +50,9 @@ const endpointToolDescriptorSchema = z.strictObject({
 	title: z.string().min(1).max(120),
 	description: z.string().min(1).max(2e3),
 	inputSchema: jsonObjectSchema,
+	outputSchema: jsonObjectSchema,
+	policyId: z.string().regex(/^[a-z][a-z0-9_.-]+$/).max(120),
+	sensitivity: endpointSensitivitySchema,
 	effect: endpointEffectSchema,
 	confirmation: endpointConfirmationSchema,
 	requiresForeground: z.boolean(),
@@ -66,6 +70,42 @@ const endpointPrincipalRegistrationSchema = z.strictObject({
 	platform: z.string().min(1).max(80),
 	publicKey: z.string().min(32).max(2048)
 });
+const endpointSessionBindingRequestSchema = z.strictObject({ endpointId: identifierSchema });
+const backgroundCapabilitySchema = z.string().regex(/^[a-z][a-z0-9_]*(?:\.[a-z][a-z0-9_]*)+$/).max(120);
+z.strictObject({
+	jobId: z.uuid(),
+	endpointId: identifierSchema,
+	capability: backgroundCapabilitySchema,
+	input: jsonObjectSchema,
+	idempotencyKey: identifierSchema,
+	consentGrantId: identifierSchema,
+	createdAt: timestampSchema,
+	expiresAt: timestampSchema
+});
+z.strictObject({
+	jobId: z.uuid(),
+	status: z.enum([
+		"queued",
+		"running",
+		"succeeded",
+		"failed",
+		"cancelled"
+	]),
+	updatedAt: timestampSchema,
+	output: jsonObjectSchema.optional(),
+	error: z.strictObject({
+		code: identifierSchema,
+		message: z.string().min(1).max(2e3)
+	}).optional()
+});
+z.strictObject({
+	eventId: z.uuid(),
+	endpointId: identifierSchema,
+	subscriptionId: identifierSchema,
+	eventType: backgroundCapabilitySchema,
+	data: jsonObjectSchema,
+	occurredAt: timestampSchema
+});
 const endpointHelloPayloadSchema = z.strictObject({
 	principalId: identifierSchema,
 	endpointId: identifierSchema,
@@ -135,7 +175,7 @@ const endpointToolErrorCodeSchema = z.enum([
 	"PROTOCOL_ERROR"
 ]);
 const envelope = (type, payload) => z.strictObject({
-	protocolVersion: z.literal(1),
+	protocolVersion: z.literal(2),
 	messageId: messageIdSchema,
 	type: z.literal(type),
 	sentAt: timestampSchema,
@@ -162,6 +202,126 @@ const clientEndpointMessageSchema = z.discriminatedUnion("type", [
 	envelope("tool.cancelled", invocationPayloadSchema)
 ]);
 const serverEndpointMessageSchema = z.discriminatedUnion("type", [envelope("tool.invoke", toolInvokePayloadSchema), envelope("tool.cancel", toolCancelPayloadSchema)]);
+const ENDPOINT_TEXT_OUTPUT_SCHEMA = {
+	type: "array",
+	minItems: 1,
+	maxItems: 20,
+	items: {
+		type: "object",
+		additionalProperties: false,
+		required: ["type", "text"],
+		properties: {
+			type: { const: "text" },
+			text: {
+				type: "string",
+				maxLength: 256 * 1024
+			}
+		}
+	}
+};
+const ENDPOINT_FILE_OUTPUT_SCHEMA = {
+	type: "array",
+	minItems: 1,
+	maxItems: 20,
+	items: {
+		type: "object",
+		additionalProperties: false,
+		required: [
+			"type",
+			"fileId",
+			"name",
+			"mimeType",
+			"size",
+			"sha256"
+		],
+		properties: {
+			type: { const: "file" },
+			fileId: {
+				type: "string",
+				minLength: 1,
+				maxLength: 160
+			},
+			name: {
+				type: "string",
+				minLength: 1,
+				maxLength: 255
+			},
+			mimeType: {
+				type: "string",
+				minLength: 1,
+				maxLength: 255
+			},
+			size: {
+				type: "integer",
+				minimum: 0
+			},
+			sha256: {
+				type: "string",
+				pattern: "^[a-f0-9]{64}$"
+			}
+		}
+	}
+};
+const ENDPOINT_CONTACT_RECORD_SCHEMA = {
+	type: "object",
+	additionalProperties: false,
+	required: [
+		"id",
+		"name",
+		"phones",
+		"emails"
+	],
+	properties: {
+		id: {
+			type: "string",
+			minLength: 1,
+			maxLength: 512
+		},
+		name: {
+			type: "string",
+			minLength: 1,
+			maxLength: 500
+		},
+		phones: {
+			type: "array",
+			maxItems: 20,
+			items: {
+				type: "string",
+				maxLength: 100
+			}
+		},
+		emails: {
+			type: "array",
+			maxItems: 20,
+			items: {
+				type: "string",
+				maxLength: 320
+			}
+		}
+	}
+};
+function contactOutputSchema(multiple) {
+	return {
+		type: "array",
+		minItems: 1,
+		maxItems: 1,
+		items: {
+			type: "object",
+			additionalProperties: false,
+			required: ["type", "value"],
+			properties: {
+				type: { const: "json" },
+				value: multiple ? {
+					type: "array",
+					maxItems: 20,
+					items: ENDPOINT_CONTACT_RECORD_SCHEMA
+				} : ENDPOINT_CONTACT_RECORD_SCHEMA
+			}
+		}
+	};
+}
+const ENDPOINT_CONTACT_OUTPUT_SCHEMA = contactOutputSchema(false);
+const ENDPOINT_CONTACT_LIST_OUTPUT_SCHEMA = contactOutputSchema(true);
 function canonicalJson(value) {
 	if (value === null) return "null";
 	if (typeof value === "string" || typeof value === "boolean") return JSON.stringify(value);
@@ -181,4 +341,4 @@ function endpointHelloSigningPayload(payload) {
 	return canonicalJson(unsigned);
 }
 //#endregion
-export { ENDPOINT_INVOCATION_RECEIPT_TIMEOUT_MS, ENDPOINT_MAX_FILE_BYTES, canonicalJson, clientEndpointMessageSchema, endpointHelloPayloadSchema, endpointHelloSigningPayload, endpointPrincipalRegistrationSchema, endpointTurnClaimSchema, serverEndpointMessageSchema, turnOriginSchema };
+export { ENDPOINT_CONTACT_LIST_OUTPUT_SCHEMA, ENDPOINT_CONTACT_OUTPUT_SCHEMA, ENDPOINT_FILE_OUTPUT_SCHEMA, ENDPOINT_INVOCATION_RECEIPT_TIMEOUT_MS, ENDPOINT_MAX_FILE_BYTES, ENDPOINT_TEXT_OUTPUT_SCHEMA, canonicalJson, clientEndpointMessageSchema, endpointHelloPayloadSchema, endpointHelloSigningPayload, endpointPrincipalRegistrationSchema, endpointSessionBindingRequestSchema, endpointTurnClaimSchema, serverEndpointMessageSchema, turnOriginSchema };

package/dist/packages/gateway-contract/src/product-delivery.js

@@ -41,12 +41,16 @@ const ProductDeliveryOperationSchema = z.enum([
 	"completed",
 	"failed"
 ]);
-z.object({
+const ProductDeliveryEnvelopeSchema = z.object({
 	version: z.literal(1),
 	operation: ProductDeliveryOperationSchema,
 	primary: ProductReferenceSchema.optional(),
 	related: z.array(ProductReferenceSchema).optional()
 });
+function parseProductDeliveryEnvelope(value) {
+	const parsed = ProductDeliveryEnvelopeSchema.safeParse(value);
+	return parsed.success ? parsed.data : null;
+}
 const PRODUCT_DELIVERY_TEXT_PREFIX = "xopc-product-delivery:";
 function appendProductDeliveryText(text, delivery) {
 	if (!delivery) return text;
@@ -59,4 +63,4 @@ function productReferenceDeepLink(reference) {
 	}).toString()}`;
 }
 //#endregion
-export { appendProductDeliveryText };
+export { appendProductDeliveryText, parseProductDeliveryEnvelope };

package/dist/packages/gateway-contract/src/turn-outcome.js

@@ -106,9 +106,85 @@ const TurnOutcomeSchema = z.object({
 	evidence: z.array(TurnOutcomeEvidenceSchema),
 	createdAt: z.string()
 });
+const FILE_RESOURCE_ARTIFACT_URI_PREFIX = "xopc-file:";
+function fileResourceArtifactUri(fileResourceId) {
+	return `${FILE_RESOURCE_ARTIFACT_URI_PREFIX}${encodeURIComponent(fileResourceId)}`;
+}
+function turnOutcomeKindFromFileName(fileName) {
+	const extension = fileName.toLowerCase().split(".").pop() ?? "";
+	if (extension === "xlsx" || extension === "xls" || extension === "csv" || extension === "tsv") return "spreadsheet";
+	if (extension === "pptx" || extension === "ppt") return "presentation";
+	if (extension === "pdf") return "pdf";
+	if ([
+		"doc",
+		"docx",
+		"md",
+		"rtf",
+		"txt"
+	].includes(extension)) return "document";
+	if ([
+		"png",
+		"jpg",
+		"jpeg",
+		"gif",
+		"webp",
+		"svg",
+		"bmp"
+	].includes(extension)) return "image";
+	if ([
+		"mp4",
+		"mov",
+		"webm"
+	].includes(extension)) return "video";
+	if ([
+		"mp3",
+		"wav",
+		"ogg",
+		"m4a"
+	].includes(extension)) return "audio";
+	if ([
+		"zip",
+		"tar",
+		"gz",
+		"tgz"
+	].includes(extension)) return "archive";
+	if (extension === "html" || extension === "htm") return "site";
+	return "file";
+}
+function turnOutcomeMimeTypeFromFileName(fileName) {
+	return {
+		xlsx: "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet",
+		xls: "application/vnd.ms-excel",
+		csv: "text/csv",
+		tsv: "text/tab-separated-values",
+		pptx: "application/vnd.openxmlformats-officedocument.presentationml.presentation",
+		ppt: "application/vnd.ms-powerpoint",
+		docx: "application/vnd.openxmlformats-officedocument.wordprocessingml.document",
+		doc: "application/msword",
+		pdf: "application/pdf",
+		md: "text/markdown",
+		txt: "text/plain",
+		html: "text/html",
+		htm: "text/html",
+		png: "image/png",
+		jpg: "image/jpeg",
+		jpeg: "image/jpeg",
+		gif: "image/gif",
+		webp: "image/webp",
+		svg: "image/svg+xml",
+		mp4: "video/mp4",
+		mov: "video/quicktime",
+		webm: "video/webm",
+		mp3: "audio/mpeg",
+		wav: "audio/wav",
+		ogg: "audio/ogg",
+		m4a: "audio/mp4",
+		zip: "application/zip"
+	}[fileName.toLowerCase().split(".").pop() ?? ""];
+}
 function parseTurnOutcome(value) {
 	const parsed = TurnOutcomeSchema.safeParse(value);
 	return parsed.success ? parsed.data : null;
 }
 //#endregion
-export { TurnOutcomeDeliverableSchema, parseTurnOutcome };
+export { TurnOutcomeDeliverableSchema, fileResourceArtifactUri, parseTurnOutcome, turnOutcomeKindFromFileName, turnOutcomeMimeTypeFromFileName };

package/dist/src/agent/agent-manager.d.ts

@@ -178,8 +178,6 @@ export declare class AgentManager implements AgentInstanceGateway {
      * Pass `null` to clear when the session has no `workingDirectoryOverride` on disk.
      */
     setSessionWorkspaceOverride(sessionKey: string, absolutePath: string | null): void;
-    /** Merged `thinkingDefault` for this session's agent id (defaults + `agents.list`). */
-    getThinkingDefaultForSession(sessionKey: string): import('./transcript/thinking-types.js').ThinkLevel | undefined;
     private pickDefaultModelRef;
     private resolveModelStringToModel;
     /**
@@ -232,6 +230,7 @@ export declare class AgentManager implements AgentInstanceGateway {
     getSkillCatalog(): SkillCatalogEntry[];
     getSkillCatalogSnapshot(): SkillCatalogSnapshot;
     private buildAgentSkillAvailability;
+    private materializeSkillAllowlist;
     getAgentSkillAvailability(agentId: string): AgentSkillAvailabilityPayload;
     getSessionSkillAvailability(sessionKey: string): AgentSkillAvailabilityPayload;
     getSessionWorkspaceTrust(sessionKey: string): WorkspaceTrustState;

package/dist/src/agent/agent-manager.js

@@ -21,7 +21,7 @@ import { clearBootstrapSnapshot } from "./bootstrap/bootstrap-cache.js";
 import { resolveBootstrapContextSync } from "./bootstrap/bootstrap-files.js";
 import { loadProjectAgentsContextFile } from "./bootstrap/project-agents-context.js";
 import { parseExternalToolRef } from "./external-tools/refs.js";
-import { mcpToolPolicyId, resolveMcpToolPolicy } from "./mcp/bundle-mcp-policy.js";
+import { mcpToolPolicyId } from "./mcp/bundle-mcp-policy.js";
 import { disposeAllSessionMcpRuntimes, retireSessionMcpRuntimeForSessionKey } from "./mcp/bundle-mcp-runtime.js";
 import { createSkillConfigManager, isSkillEnabled, resolveSkillConfig } from "./skills/config.js";
 import { isValidSkillEnvVarName } from "./skills/required-env-vars.js";
@@ -40,7 +40,6 @@ import { WorkspaceRuntimeRegistry } from "./workspace-runtime/registry.js";
 import { runTurnUnderstandingReview } from "./background-review/run-background-review.js";
 import { BackgroundReviewCoordinator } from "./background-review/coordinator.js";
 import { maybeRequestChannelExecApproval } from "../channels/exec-approval-runtime.js";
-import { checkBoundary } from "../agent-runtime/boundary-guard.js";
 import { SkillFilesystemWatcher } from "./skills/filesystem-watcher.js";
 import { ProjectTrustStore, hasTrustRequiringProjectResources } from "../project-trust/trust-store.js";
 import { createAgentTurnPolicy } from "./orchestration/agent-turn-policy.js";
@@ -186,12 +185,6 @@ var AgentManager = class {
 		if (absolutePath === null || absolutePath === "") this.sessionWorkspaceOverrides.delete(sessionKey);
 		else this.sessionWorkspaceOverrides.set(sessionKey, absolutePath);
 	}
-	/** Merged `thinkingDefault` for this session's agent id (defaults + `agents.list`). */
-	getThinkingDefaultForSession(sessionKey) {
-		const cfg = this.mergedConfig();
-		if (!cfg) return;
-		return resolveEffectiveAgentProfileForSession(cfg, sessionKey).thinkingDefault;
-	}
 	pickDefaultModelRef() {
 		const cfg = this.mergedConfig();
 		return getAgentDefaultModelRef(cfg)?.trim() || getDefaultModelSync(cfg);
@@ -243,7 +236,7 @@ var AgentManager = class {
 			toolExecutorConfig: { resolveTimeoutMs: (toolName) => {
 				const config = this.mergedConfig();
 				const sessionKey = this.config.getCurrentContext?.()?.sessionKey;
-				return resolveEffectiveAgentProfileForSession(config, sessionKey).manifest.tools.builtin[toolName]?.limits?.timeoutMs;
+				return resolveEffectiveAgentProfileForSession(config, sessionKey).config.tools[toolName]?.timeoutMs;
 			} },
 			getConfig: () => this.mergedConfig(),
 			getPrimaryModel: () => this.resolveModelStringToModel(this.pickDefaultModelRef()),
@@ -410,7 +403,7 @@ var AgentManager = class {
 		const rt = this.workspaceRuntimes.getOrCreate(resolvedWorkspacePath, instance.effectiveProfile.agentId);
 		const contextFiles = this.resolveContextFilesForSession(instance.sessionKey, instance.effectiveProfile);
 		const modelRef = instance.effectiveProfile.primaryModelRef?.trim() || this.defaultModel;
-		const thinkingLevel = instance.agent.state.thinkingLevel ?? instance.effectiveProfile.thinkingDefault ?? this.config.thinkingLevel ?? "medium";
+		const thinkingLevel = instance.agent.state.thinkingLevel ?? this.config.thinkingLevel ?? "medium";
 		return rt.systemPromptBuilder.build(contextFiles, {
 			externalMemoryInstructions: rt.memoryManager.buildExternalSystemPrompt(),
 			workspaceOverride: resolvedWorkspacePath,
@@ -520,10 +513,11 @@ var AgentManager = class {
 			status: rt.skillManager.getStatus()
 		};
 	}
-	buildAgentSkillAvailability(profile, workspaceDir, registeredToolNames) {
+	buildAgentSkillAvailability(unresolvedProfile, workspaceDir, registeredToolNames) {
 		const cfg = this.config.config;
+		const rt = this.workspaceRuntimes.getOrCreate(workspaceDir, unresolvedProfile.agentId);
+		const profile = this.materializeSkillAllowlist(unresolvedProfile, rt);
 		const entry = Array.isArray(cfg.agents?.list) ? cfg.agents.list.find((a) => a && a.enabled !== false && a.id.toLowerCase() === profile.agentId.toLowerCase()) : void 0;
-		const rt = this.workspaceRuntimes.getOrCreate(workspaceDir, profile.agentId);
 		const skillsConfig = createSkillConfigManager(resolveStateDir()).load();
 		const lock = loadSkillsLock();
 		const workspaceLock = loadSkillsLock(resolveWorkspaceSkillsLockPath(workspaceDir));
@@ -560,11 +554,19 @@ var AgentManager = class {
 			loadedAt: rt.skillManager.getLoadedAt(),
 			diagnostics: rt.skillManager.getDiagnostics(),
 			status: rt.skillManager.getStatus(),
-			...entry?.skills?.mode === "allowlist" ? { agentAllowlist: [...entry.skills.allow ?? []] } : {},
+			...entry?.skills?.mode === "replace" ? { agentAllowlist: [...entry.skills.include] } : {},
 			...profile.skillsAllowlist !== void 0 ? { effectiveAllowlist: [...profile.skillsAllowlist] } : {},
 			skills
 		};
 	}
+	materializeSkillAllowlist(profile, runtime) {
+		if (profile.skillsAllowlist !== void 0 || profile.skillsDenylist.length === 0) return profile;
+		const denied = new Set(profile.skillsDenylist.map((name) => name.toLowerCase()));
+		return {
+			...profile,
+			skillsAllowlist: runtime.skillManager.getSkills().map((skill) => skill.name).filter((name) => !denied.has(name.toLowerCase()))
+		};
+	}
 	getAgentSkillAvailability(agentId) {
 		const profile = resolveEffectiveAgentProfile(this.config.config, agentId);
 		return this.buildAgentSkillAvailability(profile, profile.resolvedWorkspacePath);
@@ -621,7 +623,7 @@ var AgentManager = class {
 				sessionKey: instance.sessionKey,
 				modelRef: instance.effectiveProfile.primaryModelRef?.trim() || this.defaultModel,
 				agentId: instance.effectiveProfile.agentId,
-				thinkingLevel: instance.effectiveProfile.thinkingDefault ?? this.config.thinkingLevel ?? "medium",
+				thinkingLevel: this.config.thinkingLevel ?? "medium",
 				activeProjectContext: this.composeDynamicProjectContext(instance.activeProjectContext, instance.activeSelfVerifyContext)
 			});
 			instance.agent.state.systemPrompt = newPrompt;
@@ -697,7 +699,7 @@ var AgentManager = class {
 				sessionKey: instance.sessionKey,
 				modelRef: instance.effectiveProfile.primaryModelRef?.trim() || this.defaultModel,
 				agentId: instance.effectiveProfile.agentId,
-				thinkingLevel: instance.effectiveProfile.thinkingDefault ?? this.config.thinkingLevel ?? "medium",
+				thinkingLevel: this.config.thinkingLevel ?? "medium",
 				activeProjectContext: this.composeDynamicProjectContext(instance.activeProjectContext, instance.activeSelfVerifyContext)
 			});
 			instance.agent.state.systemPrompt = newPrompt;
@@ -718,9 +720,10 @@ var AgentManager = class {
 			log.debug({ sessionKey }, "Reusing existing agent instance");
 			return existing.agent;
 		}
-		const profile = resolveEffectiveAgentProfileForSession(cfg, sessionKey);
+		let profile = resolveEffectiveAgentProfileForSession(cfg, sessionKey);
 		const resolvedPath = targetPath;
 		const rt = this.workspaceRuntimes.getOrCreate(resolvedPath, profile.agentId);
+		profile = this.materializeSkillAllowlist(profile, rt);
 		if (isMemorySubsystemEnabled(cfg)) rt.memoryManager.initializeAll(sessionKey, {
 			workspace: resolvedPath,
 			agentId: profile.agentId
@@ -828,7 +831,7 @@ var AgentManager = class {
 		const rt = this.workspaceRuntimes.getOrCreate(resolvedWorkspacePath, instance.effectiveProfile.agentId);
 		const contextFiles = this.resolveContextFilesForSession(sessionKey, instance.effectiveProfile);
 		const modelRef = instance.effectiveProfile.primaryModelRef?.trim() || this.defaultModel;
-		const thinkingLevel = instance.effectiveProfile.thinkingDefault ?? this.config.thinkingLevel ?? "medium";
+		const thinkingLevel = this.config.thinkingLevel ?? "medium";
 		const activeProjectContext = buildExecutionScopeContextForPrompt(sessionKey);
 		const activeSelfVerifyContext = this.getSelfVerifyPromptContext(sessionKey, instance.effectiveProfile.agentId);
 		instance.agent.state.systemPrompt = rt.systemPromptBuilder.build(contextFiles, {
@@ -929,7 +932,7 @@ var AgentManager = class {
 			getSkillManager: () => rt.skillManager
 		});
 		const registeredToolNames = tools.map((t) => t.name);
-		const thinkingLevel = profile.thinkingDefault ?? this.config.thinkingLevel ?? "medium";
+		const thinkingLevel = this.config.thinkingLevel ?? "medium";
 		const turnPolicy = this.buildAgentTurnPolicy(sessionKey, profile);
 		agent = new Agent({
 			initialState: {
@@ -968,11 +971,11 @@ var AgentManager = class {
 	}
 	buildAgentTurnPolicy(sessionKey, profile) {
 		return createAgentTurnPolicy({
-			maxTurns: profile.manifest.runtime?.maxTurns,
-			maxToolFailures: profile.manifest.runtime?.maxToolFailuresPerTurn,
+			maxTurns: profile.config.runtime.maxTurns,
+			maxToolFailures: profile.config.runtime.maxToolFailuresPerTurn,
 			resolveToolLimit: (toolName, args) => {
 				const policy = this.resolveToolPolicy(profile, toolName, args);
-				const maxCalls = policy?.limits?.maxCallsPerTurn;
+				const maxCalls = policy?.maxCallsPerTurn;
 				return policy && maxCalls ? {
 					id: policy.id,
 					maxCalls
@@ -982,22 +985,7 @@ var AgentManager = class {
 				const toolName = toolCall.name;
 				const policy = this.resolveToolPolicy(profile, toolName, args);
 				const detail = JSON.stringify(args ?? {});
-				const boundary = checkBoundary({
-					manifest: profile.manifest,
-					action: policy?.id ?? toolName,
-					detail
-				});
-				if (boundary.decision === "deny") return {
-					block: true,
-					terminate: true,
-					reason: `Blocked by boundary rule: ${boundary.matchedRule}`
-				};
-				if (boundary.decision === "escalate") return {
-					block: true,
-					terminate: true,
-					reason: `Escalation required by boundary rule: ${boundary.matchedRule}`
-				};
-				if (policy?.mode === "confirm" || boundary.decision === "confirm") {
+				if (policy?.mode === "ask") {
 					if (!await this.requestToolConfirmation(sessionKey, policy?.id ?? toolName, detail)) return {
 						block: true,
 						terminate: true,
@@ -1039,7 +1027,7 @@ var AgentManager = class {
 	}
 	resolveToolPolicy(profile, toolName, args) {
 		if (toolName !== "xopc_tool_execute") {
-			const policy = profile.manifest.tools.builtin[toolName];
+			const policy = profile.config.tools[toolName];
 			return policy ? {
 				id: toolName,
 				...policy
@@ -1048,10 +1036,7 @@ var AgentManager = class {
 		const parsed = parseExternalToolRef(typeof args?.toolRef === "string" ? args.toolRef : "", "mcp");
 		if (!parsed) return void 0;
 		const id = mcpToolPolicyId(parsed.namespace, parsed.toolName);
-		const policy = resolveMcpToolPolicy({
-			serverId: parsed.namespace,
-			policyToolId: id
-		}, profile.manifest.tools.mcp);
+		const policy = profile.config.tools[id];
 		return policy ? {
 			id,
 			...policy
@@ -1075,7 +1060,7 @@ var AgentManager = class {
 		const rt = this.workspaceRuntimes.getOrCreate(resolvedWorkspacePath, instance.effectiveProfile.agentId);
 		const contextFiles = this.resolveContextFilesForSession(instance.sessionKey, instance.effectiveProfile);
 		const modelRef = instance.effectiveProfile.primaryModelRef?.trim() || this.defaultModel;
-		const thinkingLevel = instance.agent.state.thinkingLevel ?? instance.effectiveProfile.thinkingDefault ?? this.config.thinkingLevel ?? "medium";
+		const thinkingLevel = instance.agent.state.thinkingLevel ?? this.config.thinkingLevel ?? "medium";
 		instance.agent.state.systemPrompt = rt.systemPromptBuilder.build(contextFiles, {
 			externalMemoryInstructions: rt.memoryManager.buildExternalSystemPrompt(),
 			workspaceOverride: resolvedWorkspacePath,
@@ -1113,7 +1098,7 @@ var AgentManager = class {
 			const resolvedWorkspacePath = this.getResolvedWorkspaceForSession(sessionKey);
 			const rt = this.workspaceRuntimes.getOrCreate(resolvedWorkspacePath, instance.effectiveProfile.agentId);
 			const contextFiles = this.resolveContextFilesForSession(sessionKey, instance.effectiveProfile);
-			const thinkingLevel = instance.agent.state.thinkingLevel ?? instance.effectiveProfile.thinkingDefault ?? this.config.thinkingLevel ?? "medium";
+			const thinkingLevel = instance.agent.state.thinkingLevel ?? this.config.thinkingLevel ?? "medium";
 			const activeProjectContext = buildExecutionScopeContextForPrompt(sessionKey);
 			const activeSelfVerifyContext = this.getSelfVerifyPromptContext(sessionKey, instance.effectiveProfile.agentId);
 			instance.agent.state.systemPrompt = rt.systemPromptBuilder.build(contextFiles, {

package/dist/src/agent/background-review/run-background-review.js

@@ -11,9 +11,9 @@ import { createExtensionAwareStreamFn } from "../../providers/extension-stream-b
 import { extractTextContent } from "../context/workspace.js";
 import { readAgentMessageContent } from "../memory/agent-message-access.js";
 import { resolveAgentTurnTimeoutMs, runAgentTurnWithTimeout } from "../orchestration/run-agent-turn-with-timeout.js";
-import { resolveTypedModelRef } from "../../config/agent-typed-models.js";
 import { claimRegisteredExtraction } from "../../user-context/extraction/registry.js";
 import { isAssistantTurnAborted, isAssistantTurnFailed } from "../orchestration/llm-turn-retry.js";
+import { resolveModelIntentRef } from "../../config/agent-model-intents.js";
 import { emptyUnderstandingReview, executeUnderstandingInterpretation } from "../../user-context/extraction/executor.js";
 import { parseSemanticUnderstanding } from "../../user-context/extraction/semantic.js";
 import { UNDERSTANDING_INTERPRETER_SYSTEM_PROMPT, buildUnderstandingInterpreterPrompt } from "./prompts.js";
@@ -95,20 +95,15 @@ function resolveInterpreterRuntime(params) {
 	let model;
 	if (config) {
 		const agentId = extractProfileAgentId(params.sessionKey, config);
-		for (const role of ["understanding", "small"]) {
-			const ref = resolveTypedModelRef(config, agentId, role);
-			if (!ref) continue;
-			try {
-				model = resolveModel(ref);
-				break;
-			} catch (err) {
-				log.debug({
-					err,
-					agentId,
-					role,
-					modelRef: ref
-				}, "Configured understanding model could not be resolved");
-			}
+		const ref = resolveModelIntentRef(config, agentId, "understanding");
+		if (ref) try {
+			model = resolveModel(ref);
+		} catch (err) {
+			log.debug({
+				err,
+				agentId,
+				modelRef: ref
+			}, "Configured understanding model could not be resolved");
 		}
 	}
 	model ??= params.mainAgent.state.model;

package/dist/src/agent/capabilities/definitions.d.ts

@@ -156,7 +156,7 @@ export declare const AGENT_CAPABILITY_DEFINITIONS: readonly [{
     readonly label: "Data analysis";
     readonly description: "Analyze local structured data and produce derived tables, summaries, or artifacts.";
     readonly category: "analysis";
-    readonly tools: readonly ["read_file", "write_file", "list_dir", "grep", "find"];
+    readonly tools: readonly ["read_file", "write_file", "list_dir", "grep", "find", "publish_artifacts"];
     readonly activation: {
         readonly mode: "explicit";
         readonly ttl: "session";

package/dist/src/agent/capabilities/definitions.js

@@ -159,7 +159,8 @@ const AGENT_CAPABILITY_DEFINITIONS = [
 			"write_file",
 			"list_dir",
 			"grep",
-			"find"
+			"find",
+			"publish_artifacts"
 		],
 		activation: {
 			mode: "explicit",

package/dist/src/agent/embedded/run-for-session.js

@@ -61,7 +61,7 @@ async function runEmbeddedTurnForSession(params) {
 		const systemPrompt = agent.state.systemPrompt ?? "";
 		const thinkingLevel = params.thinkingOverride ?? agent.state.thinkingLevel;
 		const workspaceDir = agentManager.getResolvedWorkspaceForSession(sessionKey);
-		const promptCachePolicy = resolvePromptCachePolicy(config ? resolveEffectiveAgentProfileForSession(config, sessionKey).manifest.runtime?.promptCache : void 0);
+		const promptCachePolicy = resolvePromptCachePolicy(config ? resolveEffectiveAgentProfileForSession(config, sessionKey).config.runtime.promptCache : void 0);
 		let userMessageForTurn = userMessage;
 		if (params.applyStartupContext !== false) {
 			userMessageForTurn = await applyStartupContextToUserMessage({

package/dist/src/agent/external-tools/endpoint-provider.js

@@ -66,13 +66,17 @@ var EndpointToolProvider = class {
 			details: {
 				endpointId: resolved.endpointId,
 				endpointToolName: resolved.tool.descriptor.name,
+				endpointSensitivity: resolved.tool.descriptor.sensitivity,
 				...result.details ?? {},
 				...files.length === 0 ? {} : { endpointFiles: files }
 			}
 		};
 	}
 	currentEndpoint() {
-		const origin = this.deps.getCurrentContext()?.origin;
+		const context = this.deps.getCurrentContext();
+		if (!context) return void 0;
+		if (this.deps.runtime.bindings.get(context.sessionKey)) return this.deps.runtime.bindings.resolve(context.sessionKey);
+		const origin = context.origin;
 		if (origin?.type !== "endpoint") return void 0;
 		return this.deps.runtime.registry.get(origin.endpointId);
 	}

package/dist/src/agent/external-tools/mcp-provider.js

@@ -1,6 +1,6 @@
 import { resolveEffectiveAgentProfileForSession } from "../../config/agent-profile.js";
 import { externalToolRef, parseExternalToolRef } from "./refs.js";
-import { isMcpCatalogToolDenied, mcpToolPolicyId, resolveMcpToolPolicy } from "../mcp/bundle-mcp-policy.js";
+import { mcpToolPolicyId } from "../mcp/bundle-mcp-policy.js";
 import { getOrCreateSessionMcpRuntime } from "../mcp/bundle-mcp-runtime.js";
 //#region src/agent/external-tools/mcp-provider.ts
 function policyToolId(tool) {
@@ -90,22 +90,12 @@ var McpToolProvider = class {
 		const sessionKey = this.deps.getSessionKey();
 		const profile = cfg && sessionKey ? resolveEffectiveAgentProfileForSession(cfg, sessionKey) : void 0;
 		const policyName = policyToolId(tool);
-		return !(resolveMcpToolPolicy({
-			serverId: tool.safeServerName,
-			policyToolId: policyName
-		}, profile?.manifest.tools.mcp)?.scope === "readonly" && tool.annotations?.readOnlyHint !== true) && !profile?.tools.denied.has(policyName) && !isMcpCatalogToolDenied({
-			serverId: tool.safeServerName,
-			policyToolId: policyName
-		}, profile?.manifest.tools.mcp);
+		return !profile?.tools.denied.has(policyName);
 	}
 	executionSignal(tool, signal) {
 		const cfg = this.deps.getConfig();
 		const sessionKey = this.deps.getSessionKey();
-		const profile = cfg && sessionKey ? resolveEffectiveAgentProfileForSession(cfg, sessionKey) : void 0;
-		const timeoutMs = resolveMcpToolPolicy({
-			serverId: tool.safeServerName,
-			policyToolId: policyToolId(tool)
-		}, profile?.manifest.tools.mcp)?.limits?.timeoutMs;
+		const timeoutMs = (cfg && sessionKey ? resolveEffectiveAgentProfileForSession(cfg, sessionKey) : void 0)?.config.tools[policyToolId(tool)]?.timeoutMs;
 		if (!timeoutMs) return signal;
 		const timeoutSignal = AbortSignal.timeout(timeoutMs);
 		return signal ? AbortSignal.any([signal, timeoutSignal]) : timeoutSignal;

package/dist/src/agent/image/generation/runtime.js

@@ -169,7 +169,7 @@ function toCapabilityCandidate(provider) {
 function buildNoImageGenerationModelConfiguredMessage(cfg, deps) {
 	return buildNoCapabilityModelConfiguredMessage({
 		capabilityLabel: "image-generation",
-		modelConfigKey: "imageGenerationModel",
+		modelConfigKey: "imageGeneration",
 		providers: (deps.listProviders ?? listImageGenerationProviders)(cfg).map(toCapabilityCandidate),
 		getProviderEnvVars: deps.getProviderEnvVars ?? ((id) => PROVIDER_ENV_MAP[id])
 	});