@xopcai/xopc 0.0.231 → 0.0.233

package/dist/src/config/schema.js

@@ -1,58 +1,30 @@
 import { __esmMin } from "../../_virtual/_rolldown/runtime.js";
-import { AgentConfigEntrySchema, CapabilityPresetSchema, DEFAULT_CAPABILITY_PRESET_ID, init_schema as init_schema$1 } from "../agent-manifest/schema.js";
-import { init_preset_chain, linearizePresetIds } from "../agent-manifest/preset-chain.js";
+import { AgentModelsOverrideSchema, AgentsConfigSchema as AgentsConfigSchema$1, DEFAULT_AGENT_MODEL_REF, ImageGenerationRouteSchema, ModelRouteSchema } from "../agent-config/schema.js";
+import { init_agent_config } from "../agent-config/index.js";
 import { checkCacheDir, init_cache_dir_policy } from "../browser/cache-dir-policy.js";
 import { UserContextConfigSchema, init_config } from "../user-context/config.js";
-import { DEFAULT_AGENT_MODELS, init_default_model } from "./default-model.js";
+import { init_default_model } from "./default-model.js";
 import { init_public_url, validatePublicUrl } from "./public-url.js";
 import { TelegramAccountConfigSchema, TelegramConfigSchema, TelegramGroupConfigSchema, TelegramTopicConfigSchema, init_config_schema } from "../../extensions/telegram/src/config-schema.js";
 import { WeixinAccountConfigSchema, WeixinConfigSchema, init_config_schema as init_config_schema$1 } from "../../extensions/weixin/src/config-schema.js";
 import { z } from "zod";
 //#region src/config/schema.ts
 function getAgentDefaultModelRef(config) {
-	const list = Array.isArray(config.agents?.list) ? config.agents.list : [];
-	const defaultId = config.agents?.default?.trim() || list.find((entry) => entry.default === true)?.id?.trim() || list[0]?.id;
-	const agent = list.find((entry) => entry.enabled !== false && entry.id === defaultId) ?? list[0];
-	if (!agent) return void 0;
-	let modelRef;
-	const applyModels = (models) => {
-		const roles = models?.roles ?? {};
-		const defaultRole = models?.defaultRole ?? Object.keys(roles)[0];
-		const next = (defaultRole ? roles[defaultRole] : void 0)?.model.trim();
-		if (next) modelRef = next;
-	};
-	const rootPresetIds = [...config.agents.capabilityPresets[config.agents.defaultPreset] ? [config.agents.defaultPreset] : [], ...(agent.extends ?? []).filter((id) => id !== config.agents.defaultPreset)];
-	for (const presetId of linearizePresetIds(rootPresetIds, config.agents.capabilityPresets)) applyModels(config.agents.capabilityPresets[presetId]?.models);
-	applyModels(agent.models);
-	return modelRef;
+	return config.agents.list.find((entry) => entry.enabled !== false && entry.id === config.agents.default)?.models?.chat?.primary ?? config.agents.defaults.models.chat.primary;
 }
 function getAgentDefaultModelsConfig(config, requestedAgentId) {
-	const list = Array.isArray(config.agents?.list) ? config.agents.list : [];
-	const defaultId = requestedAgentId?.trim() || config.agents?.default?.trim() || list.find((entry) => entry.default === true)?.id?.trim() || list[0]?.id;
-	const agent = list.find((entry) => entry.enabled !== false && entry.id === defaultId) ?? list[0];
-	if (!agent) return void 0;
-	let modelConfig;
-	const applyModels = (models) => {
-		if (!models) return;
-		modelConfig = {
-			...modelConfig,
-			...models,
-			roles: {
-				...modelConfig?.roles ?? {},
-				...models.roles ?? {}
-			}
-		};
-	};
-	const rootPresetIds = [...config.agents.capabilityPresets[config.agents.defaultPreset] ? [config.agents.defaultPreset] : [], ...(agent.extends ?? []).filter((id) => id !== config.agents.defaultPreset)];
-	for (const presetId of linearizePresetIds(rootPresetIds, config.agents.capabilityPresets)) applyModels(config.agents.capabilityPresets[presetId]?.models);
-	applyModels(agent.models);
-	return modelConfig;
+	const id = requestedAgentId?.trim() || config.agents.default;
+	return config.agents.list.find((entry) => entry.enabled !== false && entry.id === id)?.models;
 }
 function getAgentDefaultImageModelConfig(config) {
-	return getAgentDefaultModelsConfig(config)?.imageModel;
+	const models = getAgentDefaultModelsConfig(config);
+	if (models && Object.hasOwn(models, "imageUnderstanding")) return models.imageUnderstanding ?? void 0;
+	return config.agents.defaults.models.imageUnderstanding;
 }
 function getAgentDefaultImageGenerationModelConfig(config, agentId) {
-	return getAgentDefaultModelsConfig(config, agentId)?.imageGenerationModel;
+	const models = getAgentDefaultModelsConfig(config, agentId);
+	if (models && Object.hasOwn(models, "imageGeneration")) return models.imageGeneration ?? void 0;
+	return config.agents.defaults.models.imageGeneration;
 }
 /** `provider/model` or null when invalid. */
 function parseModelRef(ref) {
@@ -64,88 +36,39 @@ function parseModelRef(ref) {
 		model: trimmed.slice(idx + 1).trim()
 	};
 }
-var AgentModelRefSchema, AgentImageGenerationModelSchema, AgentTypedModelRoleSchema, AgentTypedModelRolesSchema, AgentModelsSchema, AgentsConfigSchema, BrowserCloudConfigSchema, BrowserExtensionConfigSchema, BrowserCloakConfigSchema, BrowserConfigSchema, BindingMatchSchema, BindingRuleSchema, BindingsConfigSchema, SessionDmScopeSchema, SessionStorageConfigSchema, SessionResetModeSchema, SessionResetConfigSchema, SessionResetByTypeSchema, SessionScopeSchema, SessionConfigSchema, ChannelsConfigSchema, SearchProviderEntrySchema, WebSearchConfigSchema, WebsiteBlocklistSchema, WebToolsConfigSchema, ToolsConfigSchema, RuntimePreferenceSchema, RuntimeProvisionSchema, LanguageRuntimeSchema, DEFAULT_RUNTIME_TOOLS_CONFIG, RuntimeToolsConfigSchema, GatewayAuthRateLimitSchema, GatewaySecuritySchema, GatewayTrustedProxySchema, GatewayAuthSchema, GatewayTailscaleConsentSchema, GatewayTailscaleSchema, GatewayRemoteSchema, GatewayTlsSchema, GatewayModeSchema, HeartbeatConfigSchema, GatewayChannelConnectDeferModeSchema, TunnelConsentSchema, TunnelConfigSchema, WorkspaceImportConfigSchema, WorkspaceConfigSchema, GatewayBindModeSchema, GatewayWebchatConfigSchema, GatewayConfigSchema, ModelsDevConfigSchema, ModelCatalogConfigSchema, SttProviderConfigCatchallSchema, STTProviderConfigSchema, STTFallbackConfigSchema, MediaUnderstandingCapabilitiesSchema, MediaUnderstandingModelSchema, STTConfigSchema, TtsProviderConfigCatchallSchema, TTSProviderConfigSchema, TTSFallbackConfigSchema, TTSModelOverridesConfigSchema, TTSEdgeConfigSchema, TTSSummarizationConfigSchema, TTSConfigSchema, VoiceRefinementConfigSchema, VoiceConfigSchema, MessagesConfigSchema, ToolsMediaAudioConfigSchema, ToolsMediaConfigSchema, ProviderAzureConfigSchema, ProviderRequestOverridesSchema, ProviderAuthConfigSchema, ProvidersConfigSchema, ExtensionSecurityConfigSchema, ExtensionSlotsConfigSchema, ExtensionsConfigSchema, UpdateAutoConfigSchema, UpdateConfigSchema, CommandsConfigSchema, TuiConfigSchema, McpHttpUrlSchema, ConnectorSecretReferenceSchema, McpConfigScalarSchema, McpOAuthConfigSchema, McpServerSchema, McpConfigSchema, ConnectorsConfigSchema, ExperimentalConfigSchema, ConfigSchema;
+var AgentModelRefSchema, AgentImageGenerationModelSchema, AgentModelsSchema, AgentsConfigSchema, BrowserCloudConfigSchema, BrowserExtensionConfigSchema, BrowserCloakConfigSchema, BrowserConfigSchema, BindingMatchSchema, BindingRuleSchema, BindingsConfigSchema, SessionDmScopeSchema, SessionStorageConfigSchema, SessionResetModeSchema, SessionResetConfigSchema, SessionResetByTypeSchema, SessionScopeSchema, SessionConfigSchema, ChannelsConfigSchema, SearchProviderEntrySchema, WebSearchConfigSchema, WebsiteBlocklistSchema, WebToolsConfigSchema, ToolsConfigSchema, RuntimePreferenceSchema, RuntimeProvisionSchema, LanguageRuntimeSchema, DEFAULT_RUNTIME_TOOLS_CONFIG, RuntimeToolsConfigSchema, GatewayAuthRateLimitSchema, GatewaySecuritySchema, GatewayTrustedProxySchema, GatewayAuthSchema, GatewayTailscaleConsentSchema, GatewayTailscaleSchema, GatewayRemoteSchema, GatewayTlsSchema, GatewayModeSchema, HeartbeatConfigSchema, GatewayChannelConnectDeferModeSchema, TunnelConsentSchema, TunnelConfigSchema, WorkspaceImportConfigSchema, WorkspaceConfigSchema, GatewayBindModeSchema, GatewayWebchatConfigSchema, GatewayConfigSchema, ModelsDevConfigSchema, ModelCatalogConfigSchema, SttProviderConfigCatchallSchema, STTProviderConfigSchema, STTFallbackConfigSchema, MediaUnderstandingCapabilitiesSchema, MediaUnderstandingModelSchema, STTConfigSchema, TtsProviderConfigCatchallSchema, TTSProviderConfigSchema, TTSFallbackConfigSchema, TTSModelOverridesConfigSchema, TTSEdgeConfigSchema, TTSSummarizationConfigSchema, TTSConfigSchema, VoiceRefinementConfigSchema, VoiceConfigSchema, MessagesConfigSchema, ToolsMediaAudioConfigSchema, ToolsMediaConfigSchema, ProviderAzureConfigSchema, ProviderRequestOverridesSchema, ProviderAuthConfigSchema, ProvidersConfigSchema, ExtensionSecurityConfigSchema, ExtensionSlotsConfigSchema, ExtensionsConfigSchema, UpdateAutoConfigSchema, UpdateConfigSchema, CommandsConfigSchema, TuiConfigSchema, McpHttpUrlSchema, ConnectorSecretReferenceSchema, McpConfigScalarSchema, McpOAuthConfigSchema, McpServerSchema, McpConfigSchema, ConnectorsConfigSchema, ExperimentalConfigSchema, ConfigSchema;
 var init_schema = __esmMin((() => {
-	init_schema$1();
-	init_preset_chain();
+	init_agent_config();
 	init_cache_dir_policy();
 	init_config();
 	init_default_model();
 	init_public_url();
 	init_config_schema();
 	init_config_schema$1();
-	AgentModelRefSchema = z.object({
-		primary: z.string().min(1),
-		fallbacks: z.array(z.string()).optional()
-	}).strict();
-	AgentImageGenerationModelSchema = z.object({
-		primary: z.string().min(1),
-		fallbacks: z.array(z.string()).optional(),
-		/** Hard cap for the whole generation attempt (ms). */
-		timeoutMs: z.number().int().positive().optional(),
-		/**
-		* When all `primary + fallbacks` candidates fail, sweep every other
-		* configured provider before giving up.
-		*/
-		autoProviderFallback: z.boolean().optional()
-	}).strict();
-	AgentTypedModelRoleSchema = z.object({
-		description: z.string().max(500).optional(),
-		model: z.string().min(1),
-		fallbacks: z.array(z.string().min(1)).optional()
-	}).strict().superRefine((entry, ctx) => {
-		const validateRef = (ref) => {
-			const trimmed = ref.trim();
-			const idx = trimmed.indexOf("/");
-			return idx > 0 && idx < trimmed.length - 1;
-		};
-		if (!validateRef(entry.model)) ctx.addIssue({
-			code: "custom",
-			message: `model must be provider/model format (got '${entry.model}')`,
-			path: ["model"]
-		});
-		for (const [index, fallback] of (entry.fallbacks ?? []).entries()) if (!validateRef(fallback)) ctx.addIssue({
-			code: "custom",
-			message: `fallback must be provider/model format (got '${fallback}')`,
-			path: ["fallbacks", index]
-		});
-	});
-	AgentTypedModelRolesSchema = z.record(z.string().regex(/^[a-z][a-z0-9_-]{0,63}$/), AgentTypedModelRoleSchema).optional();
-	AgentModelsSchema = z.object({
-		defaultRole: z.string().regex(/^[a-z][a-z0-9_-]{0,63}$/).optional(),
-		roles: AgentTypedModelRolesSchema,
-		imageModel: AgentModelRefSchema.optional(),
-		imageGenerationModel: AgentImageGenerationModelSchema.optional()
-	}).strict().optional();
-	AgentsConfigSchema = z.object({
-		/** Default agent id when not specified (routing / session creation). */
-		default: z.string().optional(),
-		/** Protected global defaults preset applied before each agent's own presets. */
-		defaultPreset: z.string().default(DEFAULT_CAPABILITY_PRESET_ID),
-		capabilityPresets: z.record(z.string(), CapabilityPresetSchema).default({}),
-		list: z.array(AgentConfigEntrySchema).default([])
-	}).strict().default({
+	AgentModelRefSchema = ModelRouteSchema;
+	AgentImageGenerationModelSchema = ImageGenerationRouteSchema;
+	AgentModelsSchema = AgentModelsOverrideSchema;
+	AgentsConfigSchema = AgentsConfigSchema$1.default({
 		default: "main",
-		defaultPreset: DEFAULT_CAPABILITY_PRESET_ID,
-		capabilityPresets: { [DEFAULT_CAPABILITY_PRESET_ID]: {
-			id: DEFAULT_CAPABILITY_PRESET_ID,
-			name: "Global defaults",
-			description: "Default capabilities inherited by every agent.",
-			version: 1,
-			models: DEFAULT_AGENT_MODELS
-		} },
+		defaults: {
+			models: {
+				chat: {
+					primary: DEFAULT_AGENT_MODEL_REF,
+					fallbacks: []
+				},
+				intents: {}
+			},
+			skills: {
+				mode: "all-enabled",
+				exclude: []
+			},
+			tools: {},
+			workflows: {},
+			runtime: {}
+		},
 		list: [{
 			id: "main",
-			enabled: true,
-			identity: {
-				name: "Smart Assistant",
-				description: "General-purpose personal assistant.",
-				role: "General assistant",
-				language: "en",
-				tone: "direct"
-			},
-			responsibilities: { primary: ["Help the user complete tasks"] },
-			workspace: { root: "~/.xopc/workspace/main" }
+			enabled: true
 		}]
 	});
 	BrowserCloudConfigSchema = z.object({
@@ -1080,26 +1003,25 @@ workDiscoveryOnboarding: z.boolean().default(true) }).strict().default({ workDis
 		},
 		agents: {
 			default: "main",
-			defaultPreset: DEFAULT_CAPABILITY_PRESET_ID,
-			capabilityPresets: { [DEFAULT_CAPABILITY_PRESET_ID]: {
-				id: DEFAULT_CAPABILITY_PRESET_ID,
-				name: "Global defaults",
-				description: "Default capabilities inherited by every agent.",
-				version: 1,
-				models: DEFAULT_AGENT_MODELS
-			} },
+			defaults: {
+				models: {
+					chat: {
+						primary: DEFAULT_AGENT_MODEL_REF,
+						fallbacks: []
+					},
+					intents: {}
+				},
+				skills: {
+					mode: "all-enabled",
+					exclude: []
+				},
+				tools: {},
+				workflows: {},
+				runtime: {}
+			},
 			list: [{
 				id: "main",
-				enabled: true,
-				identity: {
-					name: "Smart Assistant",
-					description: "General-purpose personal assistant.",
-					role: "General assistant",
-					language: "en",
-					tone: "direct"
-				},
-				responsibilities: { primary: ["Help the user complete tasks"] },
-				workspace: { root: "~/.xopc/workspace/main" }
+				enabled: true
 			}]
 		},
 		bindings: [],
@@ -1173,4 +1095,4 @@ workDiscoveryOnboarding: z.boolean().default(true) }).strict().default({ workDis
 }));
 //#endregion
 init_schema();
-export { AgentImageGenerationModelSchema, AgentModelRefSchema, AgentModelsSchema, AgentTypedModelRoleSchema, AgentsConfigSchema, BindingMatchSchema, BindingRuleSchema, BindingsConfigSchema, BrowserConfigSchema, ChannelsConfigSchema, CommandsConfigSchema, ConfigSchema, ConnectorsConfigSchema, ExperimentalConfigSchema, ExtensionSecurityConfigSchema, ExtensionSlotsConfigSchema, ExtensionsConfigSchema, GatewayAuthRateLimitSchema, GatewayAuthSchema, GatewayBindModeSchema, GatewayChannelConnectDeferModeSchema, GatewayConfigSchema, GatewayModeSchema, GatewayRemoteSchema, GatewaySecuritySchema, GatewayTailscaleConsentSchema, GatewayTailscaleSchema, GatewayTlsSchema, GatewayTrustedProxySchema, GatewayWebchatConfigSchema, HeartbeatConfigSchema, McpConfigSchema, McpOAuthConfigSchema, McpServerSchema, MediaUnderstandingCapabilitiesSchema, MediaUnderstandingModelSchema, MessagesConfigSchema, ModelCatalogConfigSchema, ModelsDevConfigSchema, ProviderAuthConfigSchema, ProviderAzureConfigSchema, ProviderRequestOverridesSchema, ProvidersConfigSchema, RuntimeToolsConfigSchema, STTConfigSchema, STTFallbackConfigSchema, STTProviderConfigSchema, SearchProviderEntrySchema, SessionConfigSchema, SessionDmScopeSchema, SessionResetByTypeSchema, SessionResetConfigSchema, SessionResetModeSchema, SessionScopeSchema, SessionStorageConfigSchema, TTSConfigSchema, TTSEdgeConfigSchema, TTSFallbackConfigSchema, TTSModelOverridesConfigSchema, TTSProviderConfigSchema, TTSSummarizationConfigSchema, TelegramAccountConfigSchema, TelegramConfigSchema, TelegramGroupConfigSchema, TelegramTopicConfigSchema, ToolsConfigSchema, ToolsMediaAudioConfigSchema, ToolsMediaConfigSchema, TuiConfigSchema, TunnelConfigSchema, TunnelConsentSchema, UpdateAutoConfigSchema, UpdateConfigSchema, VoiceConfigSchema, VoiceRefinementConfigSchema, WebSearchConfigSchema, WebToolsConfigSchema, WebsiteBlocklistSchema, WeixinAccountConfigSchema, WeixinConfigSchema, WorkspaceConfigSchema, WorkspaceImportConfigSchema, getAgentDefaultImageGenerationModelConfig, getAgentDefaultImageModelConfig, getAgentDefaultModelRef, init_schema, parseModelRef };
+export { AgentImageGenerationModelSchema, AgentModelRefSchema, AgentModelsSchema, AgentsConfigSchema, BindingMatchSchema, BindingRuleSchema, BindingsConfigSchema, BrowserConfigSchema, ChannelsConfigSchema, CommandsConfigSchema, ConfigSchema, ConnectorsConfigSchema, ExperimentalConfigSchema, ExtensionSecurityConfigSchema, ExtensionSlotsConfigSchema, ExtensionsConfigSchema, GatewayAuthRateLimitSchema, GatewayAuthSchema, GatewayBindModeSchema, GatewayChannelConnectDeferModeSchema, GatewayConfigSchema, GatewayModeSchema, GatewayRemoteSchema, GatewaySecuritySchema, GatewayTailscaleConsentSchema, GatewayTailscaleSchema, GatewayTlsSchema, GatewayTrustedProxySchema, GatewayWebchatConfigSchema, HeartbeatConfigSchema, McpConfigSchema, McpOAuthConfigSchema, McpServerSchema, MediaUnderstandingCapabilitiesSchema, MediaUnderstandingModelSchema, MessagesConfigSchema, ModelCatalogConfigSchema, ModelsDevConfigSchema, ProviderAuthConfigSchema, ProviderAzureConfigSchema, ProviderRequestOverridesSchema, ProvidersConfigSchema, RuntimeToolsConfigSchema, STTConfigSchema, STTFallbackConfigSchema, STTProviderConfigSchema, SearchProviderEntrySchema, SessionConfigSchema, SessionDmScopeSchema, SessionResetByTypeSchema, SessionResetConfigSchema, SessionResetModeSchema, SessionScopeSchema, SessionStorageConfigSchema, TTSConfigSchema, TTSEdgeConfigSchema, TTSFallbackConfigSchema, TTSModelOverridesConfigSchema, TTSProviderConfigSchema, TTSSummarizationConfigSchema, TelegramAccountConfigSchema, TelegramConfigSchema, TelegramGroupConfigSchema, TelegramTopicConfigSchema, ToolsConfigSchema, ToolsMediaAudioConfigSchema, ToolsMediaConfigSchema, TuiConfigSchema, TunnelConfigSchema, TunnelConsentSchema, UpdateAutoConfigSchema, UpdateConfigSchema, VoiceConfigSchema, VoiceRefinementConfigSchema, WebSearchConfigSchema, WebToolsConfigSchema, WebsiteBlocklistSchema, WeixinAccountConfigSchema, WeixinConfigSchema, WorkspaceConfigSchema, WorkspaceImportConfigSchema, getAgentDefaultImageGenerationModelConfig, getAgentDefaultImageModelConfig, getAgentDefaultModelRef, init_schema, parseModelRef };

package/dist/src/endpoint-tools/binding-service.d.ts

@@ -0,0 +1,22 @@
+import type { EndpointConnectionSnapshot } from './registry.js';
+import { EndpointRegistry } from './registry.js';
+export interface EndpointSessionBinding {
+    sessionKey: string;
+    endpointId: string;
+    boundAt: number;
+}
+export interface EndpointSessionBindingStore {
+    get(sessionKey: string): EndpointSessionBinding | undefined;
+    set(binding: EndpointSessionBinding): EndpointSessionBinding;
+    delete(sessionKey: string): boolean;
+}
+export declare class EndpointBindingService {
+    private readonly registry;
+    private readonly store;
+    constructor(registry: EndpointRegistry, store?: EndpointSessionBindingStore);
+    bind(sessionKey: string, endpointId: string, now?: number): EndpointSessionBinding;
+    get(sessionKey: string): EndpointSessionBinding | undefined;
+    resolve(sessionKey: string): EndpointConnectionSnapshot | undefined;
+    unbind(sessionKey: string): boolean;
+    private normalizeSessionKey;
+}

package/dist/src/endpoint-tools/binding-service.js

@@ -0,0 +1,45 @@
+//#region src/endpoint-tools/binding-service.ts
+function memoryStore() {
+	const bindings = /* @__PURE__ */ new Map();
+	return {
+		get: (sessionKey) => bindings.get(sessionKey),
+		set: (binding) => {
+			bindings.set(binding.sessionKey, binding);
+			return binding;
+		},
+		delete: (sessionKey) => bindings.delete(sessionKey)
+	};
+}
+var EndpointBindingService = class {
+	constructor(registry, store = memoryStore()) {
+		this.registry = registry;
+		this.store = store;
+	}
+	bind(sessionKey, endpointId, now = Date.now()) {
+		const normalizedSessionKey = this.normalizeSessionKey(sessionKey);
+		if (!this.registry.get(endpointId)) throw new Error("Endpoint is offline");
+		const binding = {
+			sessionKey: normalizedSessionKey,
+			endpointId,
+			boundAt: now
+		};
+		return this.store.set(binding);
+	}
+	get(sessionKey) {
+		return this.store.get(this.normalizeSessionKey(sessionKey));
+	}
+	resolve(sessionKey) {
+		const binding = this.get(sessionKey);
+		return binding ? this.registry.get(binding.endpointId) : void 0;
+	}
+	unbind(sessionKey) {
+		return this.store.delete(this.normalizeSessionKey(sessionKey));
+	}
+	normalizeSessionKey(sessionKey) {
+		const normalized = sessionKey.trim();
+		if (!normalized || normalized.length > 500) throw new TypeError("Invalid session key");
+		return normalized;
+	}
+};
+//#endregion
+export { EndpointBindingService };

package/dist/src/endpoint-tools/index.d.ts

@@ -1,4 +1,5 @@
 export { EndpointToolRuntime } from './runtime.js';
+export { EndpointBindingService, type EndpointSessionBinding, type EndpointSessionBindingStore, } from './binding-service.js';
 export { EndpointInvocationService, EndpointToolExecutionError, type EndpointInvocationAuditSink, type EndpointInvocationResult, } from './invocation-service.js';
 export { EndpointToolPolicy, EndpointToolPolicyError } from './policy.js';
 export { EndpointRegistry, endpointToolRevision, type EndpointConnectionSnapshot, type RegisteredEndpointTool, } from './registry.js';

package/dist/src/endpoint-tools/index.js

@@ -1,6 +1,7 @@
+import { EndpointBindingService } from "./binding-service.js";
 import { EndpointToolPolicy, EndpointToolPolicyError } from "./policy.js";
 import { EndpointInvocationService, EndpointToolExecutionError } from "./invocation-service.js";
 import { EndpointRegistry, endpointToolRevision } from "./registry.js";
 import { ENDPOINT_UPLOAD_MAX_BYTES, EndpointUploadError, EndpointUploadService } from "./upload-service.js";
 import { EndpointToolRuntime } from "./runtime.js";
-export { ENDPOINT_UPLOAD_MAX_BYTES, EndpointInvocationService, EndpointRegistry, EndpointToolExecutionError, EndpointToolPolicy, EndpointToolPolicyError, EndpointToolRuntime, EndpointUploadError, EndpointUploadService, endpointToolRevision };
+export { ENDPOINT_UPLOAD_MAX_BYTES, EndpointBindingService, EndpointInvocationService, EndpointRegistry, EndpointToolExecutionError, EndpointToolPolicy, EndpointToolPolicyError, EndpointToolRuntime, EndpointUploadError, EndpointUploadService, endpointToolRevision };

package/dist/src/endpoint-tools/invocation-service.d.ts

@@ -43,6 +43,7 @@ export declare class EndpointInvocationService {
     private readonly options;
     private readonly pending;
     private readonly policy;
+    private readonly ajv;
     constructor(registry: EndpointRegistry, options?: EndpointInvocationServiceOptions);
     invoke(params: {
         endpointId: string;

package/dist/src/endpoint-tools/invocation-service.js

@@ -1,6 +1,7 @@
 import { ENDPOINT_INVOCATION_RECEIPT_TIMEOUT_MS, canonicalJson } from "../../packages/endpoint-tools-protocol/src/index.js";
 import { EndpointToolPolicy, EndpointToolPolicyError } from "./policy.js";
 import crypto from "node:crypto";
+import Ajv2020 from "ajv/dist/2020.js";
 //#region src/endpoint-tools/invocation-service.ts
 var EndpointToolExecutionError = class extends Error {
 	constructor(code, message) {
@@ -12,6 +13,10 @@ var EndpointToolExecutionError = class extends Error {
 var EndpointInvocationService = class {
 	pending = /* @__PURE__ */ new Map();
 	policy;
+	ajv = new Ajv2020({
+		allErrors: true,
+		strict: true
+	});
 	constructor(registry, options = {}) {
 		this.registry = registry;
 		this.options = options;
@@ -58,6 +63,7 @@ var EndpointInvocationService = class {
 				id: invocationId,
 				endpointId: params.endpointId,
 				toolName: params.toolName,
+				descriptor: tool.descriptor,
 				state: "sent",
 				receiptTimer: setTimeout(() => {
 					this.fail(invocationId, this.error("TOOL_TIMEOUT", "Endpoint did not receive the invocation"));
@@ -111,6 +117,8 @@ var EndpointInvocationService = class {
 			case "tool.result":
 				if (pending.state !== "running") return;
 				try {
+					const validate = this.ajv.compile(pending.descriptor.outputSchema);
+					if (!validate(message.payload.content)) throw new Error(`Endpoint result does not match its contract: ${this.ajv.errorsText(validate.errors)}`);
 					this.options.uploads?.validateAndClose(invocationId, message.payload.content);
 				} catch (error) {
 					this.fail(invocationId, this.error("PROTOCOL_ERROR", error instanceof Error ? error.message : String(error)));

package/dist/src/endpoint-tools/policy.d.ts

@@ -1,10 +1,13 @@
-import type { EndpointAvailability, EndpointKind, EndpointToolDescriptor } from '@xopcai/endpoint-tools-protocol';
+import { type EndpointAvailability, type EndpointKind, type EndpointToolDescriptor } from '@xopcai/endpoint-tools-protocol';
 export interface EndpointToolPolicyDecision {
     confirmationRequired: boolean;
 }
 export declare class EndpointToolPolicyError extends Error {
 }
 export declare class EndpointToolPolicy {
+    private readonly ajv;
     validateDescriptor(kind: EndpointKind, descriptor: EndpointToolDescriptor): void;
     evaluate(descriptor: EndpointToolDescriptor, availability: EndpointAvailability): EndpointToolPolicyDecision;
+    private validatePolicyFields;
+    private assertFields;
 }

package/dist/src/endpoint-tools/policy.js

@@ -1,17 +1,80 @@
+import { ENDPOINT_CONTACT_LIST_OUTPUT_SCHEMA, ENDPOINT_CONTACT_OUTPUT_SCHEMA, ENDPOINT_FILE_OUTPUT_SCHEMA, ENDPOINT_TEXT_OUTPUT_SCHEMA, canonicalJson } from "../../packages/endpoint-tools-protocol/src/index.js";
+import Ajv2020 from "ajv/dist/2020.js";
 //#region src/endpoint-tools/policy.ts
 var EndpointToolPolicyError = class extends Error {};
+function contract(policyId, outputSchema, resultKinds, permissions) {
+	return {
+		policyId,
+		outputSchema,
+		resultKinds,
+		permissions
+	};
+}
+const POLICY_BY_TOOL = {
+	"web.file.pick": contract("personal.foreground-read", ENDPOINT_FILE_OUTPUT_SCHEMA, ["file"], ["file-read"]),
+	"web.file.download": contract("user.foreground-write", ENDPOINT_TEXT_OUTPUT_SCHEMA, ["text"], ["file-download"]),
+	"web.page.get_selection": contract("public.foreground-read", ENDPOINT_TEXT_OUTPUT_SCHEMA, ["text"], []),
+	"web.clipboard.write": contract("user.foreground-write", ENDPOINT_TEXT_OUTPUT_SCHEMA, ["text"], ["clipboard-write"]),
+	"web.page.navigate": contract("user.foreground-write", ENDPOINT_TEXT_OUTPUT_SCHEMA, ["text"], ["navigation"]),
+	"desktop.file.pick": contract("personal.foreground-read", ENDPOINT_FILE_OUTPUT_SCHEMA, ["file"], ["file-read"]),
+	"desktop.file.save": contract("user.foreground-write", ENDPOINT_TEXT_OUTPUT_SCHEMA, ["text"], ["file-write"]),
+	"desktop.notification.show": contract("user.foreground-write", ENDPOINT_TEXT_OUTPUT_SCHEMA, ["text"], ["notifications"]),
+	"desktop.clipboard.read": contract("personal.foreground-read", ENDPOINT_TEXT_OUTPUT_SCHEMA, ["text"], ["clipboard-read"]),
+	"desktop.clipboard.write": contract("user.foreground-write", ENDPOINT_TEXT_OUTPUT_SCHEMA, ["text"], ["clipboard-write"]),
+	"desktop.app.open_external": contract("user.foreground-write", ENDPOINT_TEXT_OUTPUT_SCHEMA, ["text"], ["open-external-url"]),
+	"mobile.contacts.pick": contract("personal.foreground-read", ENDPOINT_CONTACT_OUTPUT_SCHEMA, ["json"], ["contacts-read-selected"]),
+	"mobile.contacts.search": contract("personal.foreground-read", ENDPOINT_CONTACT_LIST_OUTPUT_SCHEMA, ["json"], ["contacts-read"]),
+	"mobile.contacts.get": contract("personal.foreground-read", ENDPOINT_CONTACT_OUTPUT_SCHEMA, ["json"], ["contacts-read"]),
+	"mobile.file.pick": contract("personal.foreground-read", ENDPOINT_FILE_OUTPUT_SCHEMA, ["file"], ["file-read"]),
+	"mobile.file.share": contract("user.foreground-write", ENDPOINT_TEXT_OUTPUT_SCHEMA, ["text"], ["file-share"]),
+	"mobile.notification.show": contract("user.foreground-write", ENDPOINT_TEXT_OUTPUT_SCHEMA, ["text"], ["notifications"]),
+	"mobile.device.get_info": contract("public.background-read", ENDPOINT_TEXT_OUTPUT_SCHEMA, ["text"], []),
+	"mobile.clipboard.write": contract("user.foreground-write", ENDPOINT_TEXT_OUTPUT_SCHEMA, ["text"], ["clipboard-write"]),
+	"mobile.app.open_url": contract("user.foreground-write", ENDPOINT_TEXT_OUTPUT_SCHEMA, ["text"], ["open-external-url"])
+};
 var EndpointToolPolicy = class {
+	ajv = new Ajv2020({
+		allErrors: true,
+		strict: true
+	});
 	validateDescriptor(kind, descriptor) {
 		if (!descriptor.name.startsWith(`${kind}.`)) throw new EndpointToolPolicyError(`Tool ${descriptor.name} does not belong to ${kind}`);
-		if (descriptor.effect !== "read") {
-			if (descriptor.confirmation !== "always") throw new EndpointToolPolicyError(`Mutating tool ${descriptor.name} must always require confirmation`);
-			if (!descriptor.requiresForeground) throw new EndpointToolPolicyError(`Mutating tool ${descriptor.name} must require foreground`);
-			if (descriptor.requiredPermissions.length === 0) throw new EndpointToolPolicyError(`Mutating tool ${descriptor.name} must declare a permission`);
+		const contract = POLICY_BY_TOOL[descriptor.name];
+		if (!contract) throw new EndpointToolPolicyError(`Tool ${descriptor.name} has no trusted server policy`);
+		if (descriptor.policyId !== contract.policyId) throw new EndpointToolPolicyError(`Tool ${descriptor.name} does not match its trusted server policy`);
+		if (canonicalJson(descriptor.outputSchema) !== canonicalJson(contract.outputSchema) || canonicalJson(descriptor.resultKinds) !== canonicalJson(contract.resultKinds) || canonicalJson([...descriptor.requiredPermissions].sort()) !== canonicalJson([...contract.permissions].sort())) throw new EndpointToolPolicyError(`Tool ${descriptor.name} does not match its trusted server contract`);
+		this.validatePolicyFields(descriptor);
+		try {
+			this.ajv.compile(descriptor.outputSchema);
+		} catch (error) {
+			throw new EndpointToolPolicyError(`Tool ${descriptor.name} has an invalid output schema: ${error instanceof Error ? error.message : String(error)}`);
 		}
 	}
 	evaluate(descriptor, availability) {
 		if (descriptor.requiresForeground && availability !== "foreground") throw new EndpointToolPolicyError("Endpoint is not in the foreground");
-		return { confirmationRequired: descriptor.confirmation === "always" || descriptor.effect !== "read" };
+		return { confirmationRequired: descriptor.confirmation === "always" };
+	}
+	validatePolicyFields(descriptor) {
+		switch (descriptor.policyId) {
+			case "public.background-read":
+				this.assertFields(descriptor, "read", "never", false, "public");
+				return;
+			case "public.foreground-read":
+				this.assertFields(descriptor, "read", "never", true, "public");
+				return;
+			case "personal.foreground-read":
+				this.assertFields(descriptor, "read", "always", true, "personal");
+				if (descriptor.requiredPermissions.length === 0) throw new EndpointToolPolicyError(`Personal tool ${descriptor.name} must declare a permission`);
+				return;
+			case "user.foreground-write":
+				if (descriptor.effect === "read") throw new EndpointToolPolicyError(`Mutating tool ${descriptor.name} cannot declare a read effect`);
+				if (descriptor.confirmation !== "always" || !descriptor.requiresForeground || descriptor.sensitivity !== "personal" || descriptor.requiredPermissions.length === 0) throw new EndpointToolPolicyError(`Mutating tool ${descriptor.name} violates its trusted policy`);
+				return;
+			default: throw new EndpointToolPolicyError(`Unknown endpoint policy: ${descriptor.policyId}`);
+		}
+	}
+	assertFields(descriptor, effect, confirmation, requiresForeground, sensitivity) {
+		if (descriptor.effect !== effect || descriptor.confirmation !== confirmation || descriptor.requiresForeground !== requiresForeground || descriptor.sensitivity !== sensitivity) throw new EndpointToolPolicyError(`Tool ${descriptor.name} violates its trusted policy`);
 	}
 };
 //#endregion

package/dist/src/endpoint-tools/registry.js

@@ -93,7 +93,7 @@ var EndpointRegistry = class {
 		const connection = this.connectionByEndpointId.get(endpointId);
 		if (!connection || connection.transport.readyState !== 1) throw new Error(`Endpoint is offline: ${endpointId}`);
 		const message = {
-			protocolVersion: 1,
+			protocolVersion: 2,
 			messageId: crypto.randomUUID(),
 			type,
 			sentAt: Date.now(),

package/dist/src/endpoint-tools/runtime.d.ts

@@ -1,5 +1,6 @@
 import { type ClientEndpointMessage, type EndpointHelloPayload } from '@xopcai/endpoint-tools-protocol';
 import { type EndpointAuthenticatorDeps } from './auth.js';
+import { EndpointBindingService } from './binding-service.js';
 import { EndpointInvocationService, type EndpointInvocationAuditSink } from './invocation-service.js';
 import { EndpointRegistry, type EndpointRegistration, type EndpointTransport } from './registry.js';
 import { EndpointUploadService } from './upload-service.js';
@@ -7,6 +8,7 @@ export declare class EndpointToolRuntime {
     readonly registry: EndpointRegistry;
     readonly invocations: EndpointInvocationService;
     readonly uploads: EndpointUploadService;
+    readonly bindings: EndpointBindingService;
     private readonly authenticator;
     private closed;
     constructor(options?: {

package/dist/src/endpoint-tools/runtime.js

@@ -1,11 +1,13 @@
 import { resolveStateDir } from "../config/paths-state.js";
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
+import { deleteEndpointSessionBinding, getEndpointSessionBinding, setEndpointSessionBinding } from "../storage/sqlite/endpoint-session-binding-repository.js";
 import { bindEndpointPrincipal, getEndpointPrincipal, touchEndpointPrincipal } from "../storage/sqlite/endpoint-principal-repository.js";
 import { finishEndpointToolInvocationAudit, startEndpointToolInvocationAudit } from "../storage/sqlite/endpoint-tool-invocation-repository.js";
 import "../storage/sqlite/index.js";
 import { init_paths } from "../config/paths.js";
 import { EndpointAuthenticator } from "./auth.js";
+import { EndpointBindingService } from "./binding-service.js";
 import { EndpointToolPolicy } from "./policy.js";
 import { EndpointInvocationService } from "./invocation-service.js";
 import { EndpointRegistry } from "./registry.js";
@@ -20,11 +22,17 @@ var EndpointToolRuntime = class {
 	registry;
 	invocations;
 	uploads;
+	bindings;
 	authenticator;
 	closed = false;
 	constructor(options = {}) {
 		const policy = new EndpointToolPolicy();
 		this.registry = new EndpointRegistry(policy);
+		this.bindings = new EndpointBindingService(this.registry, {
+			get: getEndpointSessionBinding,
+			set: setEndpointSessionBinding,
+			delete: deleteEndpointSessionBinding
+		});
 		this.authenticator = new EndpointAuthenticator(options.auth ?? {
 			getPrincipal: getEndpointPrincipal,
 			bindEndpoint: bindEndpointPrincipal,

package/dist/src/extensions/activation-context.js

@@ -96,17 +96,13 @@ function defaultModelId(config) {
 	if (!Array.isArray(list)) return void 0;
 	const defaultId = typeof agents.default === "string" ? agents.default : void 0;
 	const entry = list.find((candidate) => isRecord(candidate) && candidate.id === defaultId) ?? list.find((candidate) => isRecord(candidate) && candidate.enabled !== false);
-	if (!isRecord(entry)) return void 0;
-	const models = entry.models;
-	if (!isRecord(models)) return void 0;
-	const defaultRole = typeof models.defaultRole === "string" ? models.defaultRole : void 0;
-	const roles = models.roles;
-	if (!defaultRole || !isRecord(roles)) return void 0;
-	const role = roles[defaultRole];
-	if (isRecord(role)) {
-		const model = role.model;
-		if (typeof model === "string" && model.trim().length > 0) return model;
-	}
+	const overrideModels = isRecord(entry) && isRecord(entry.models) ? entry.models : void 0;
+	const overrideChat = overrideModels && isRecord(overrideModels.chat) ? overrideModels.chat : void 0;
+	if (typeof overrideChat?.primary === "string" && overrideChat.primary.trim()) return overrideChat.primary;
+	const defaults = isRecord(agents.defaults) ? agents.defaults : void 0;
+	const models = defaults && isRecord(defaults.models) ? defaults.models : void 0;
+	const chat = models && isRecord(models.chat) ? models.chat : void 0;
+	return typeof chat?.primary === "string" && chat.primary.trim() ? chat.primary : void 0;
 }
 /**
 * Merge partial activation context over values inferred from loaded app config.

package/dist/src/files/file-service.js

@@ -26,6 +26,7 @@ const TEXT_EXTENSIONS = new Set([
 	"svg",
 	"ts",
 	"tsx",
+	"tsv",
 	"txt",
 	"xml",
 	"yaml",
@@ -50,10 +51,18 @@ const MIME_TYPES = {
 	ts: "text/typescript",
 	tsx: "text/typescript",
 	csv: "text/csv",
+	tsv: "text/tab-separated-values",
 	xml: "application/xml",
 	yaml: "application/yaml",
 	yml: "application/yaml",
 	pdf: "application/pdf",
+	doc: "application/msword",
+	docx: "application/vnd.openxmlformats-officedocument.wordprocessingml.document",
+	xls: "application/vnd.ms-excel",
+	xlsx: "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet",
+	ppt: "application/vnd.ms-powerpoint",
+	pptx: "application/vnd.openxmlformats-officedocument.presentationml.presentation",
+	zip: "application/zip",
 	mp3: "audio/mpeg",
 	wav: "audio/wav",
 	ogg: "audio/ogg",
@@ -106,13 +115,13 @@ async function resolveFilePath(root, path, mustExist = true) {
 	const canonicalRoot = await realpath(root).catch(() => {
 		throw new FileServiceError(404, "File space is unavailable");
 	});
-	const candidate = resolve(canonicalRoot, normalizeRelativePath(path));
-	if (!isWithin(canonicalRoot, candidate)) throw new FileServiceError(400, "Invalid file path");
+	const candidate = isAbsolute(path) ? resolve(path) : resolve(canonicalRoot, normalizeRelativePath(path));
 	if (!mustExist) {
-		if (!isWithin(canonicalRoot, await realpath(dirname(candidate)).catch(() => {
+		const parent = await realpath(dirname(candidate)).catch(() => {
 			throw new FileServiceError(404, "Parent directory not found");
-		}))) throw new FileServiceError(400, "Invalid file path");
-		return candidate;
+		});
+		if (!isWithin(canonicalRoot, parent)) throw new FileServiceError(400, "Invalid file path");
+		return resolve(parent, basename(candidate));
 	}
 	const canonicalTarget = await realpath(candidate).catch(() => {
 		throw new FileServiceError(404, "File not found");