@xopcai/xopc 0.0.249 → 0.0.251

package/dist/src/agent/tools/factory.js

@@ -2,6 +2,7 @@ import { init_paths_state, resolveStateDir } from "../../config/paths-state.js";
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
 import { isXopcDatabaseOpen } from "../../storage/sqlite/connection.js";
+import { getSessionMetadata } from "../../storage/sqlite/session-repository.js";
 import { getSessionTaskPlan, setSessionTaskPlan } from "../../storage/sqlite/session-task-plan-repository.js";
 import "../../storage/sqlite/index.js";
 import { init_agent_scope, resolveDefaultAgentId } from "../agent-scope.js";
@@ -55,6 +56,7 @@ import { createManagedJobTool } from "./managed-job-tool.js";
 import { createImageTool } from "./image-tool.js";
 import { createImageGenerateTool } from "./image-generate-tool.js";
 import "./index.js";
+import { resolveUserContextSessionAccess } from "../../user-context/access-policy.js";
 import { createBrowserUseTool } from "./browser/tool/browser-use-tool.js";
 import { createReviewWorkspaceTool } from "./review-workspace.js";
 import { createLanguageDiagnosticsTool } from "./language-diagnostics.js";
@@ -199,6 +201,13 @@ var AgentToolsFactory = class AgentToolsFactory {
 		});
 		const agentId = options?.agentId;
 		const resolvedAgentId = agentId ?? (cfg ? resolveDefaultAgentId(cfg) : "main");
+		const currentSessionKey = () => options?.sessionKey ?? this.deps.getCurrentContext?.()?.sessionKey;
+		const currentAccess = () => resolveUserContextSessionAccess(this.deps.getConfig?.(), currentSessionKey());
+		const knowledgeWritePolicy = () => this.deps.getConfig?.()?.userContext.knowledgeMemory.writePolicy ?? "deny";
+		const currentProjectId = () => {
+			const key = currentSessionKey();
+			return key ? getSessionMetadata(key)?.projectId : void 0;
+		};
 		const getCommandIsolation = () => {
 			const config = this.deps.getConfig?.();
 			return config ? resolveEffectiveAgentConfigForSession(config, this.deps.getCurrentContext()?.sessionKey ?? `agent:${agentId ?? "main"}:internal`).config.runtime.commandIsolation : void 0;
@@ -213,7 +222,8 @@ var AgentToolsFactory = class AgentToolsFactory {
 			disabledTools: disabled,
 			hookRunner: this.deps.hookRunner,
 			toolExecutorConfig: this.deps.toolExecutorConfig,
-			getMemoryManager: getMemMgr
+			getMemoryManager: getMemMgr,
+			canAccessMemory: () => currentAccess().knowledge
 		});
 		const optionalTools = [imageTool, imageGenerateTool].filter((t) => t != null);
 		const readTool = createReadFileTool(workspace, { profileMarkdownRoot: options?.profileMarkdownRoot });
@@ -314,27 +324,46 @@ var AgentToolsFactory = class AgentToolsFactory {
 			createUserContextSearchTool({
 				agentId: resolvedAgentId,
 				workspaceId: workspace,
-				getSessionId: () => this.deps.getCurrentContext?.()?.sessionKey
+				getSessionId: currentSessionKey,
+				getProjectId: currentProjectId,
+				canRead: () => currentAccess().userModel
 			}),
 			createUserContextGetTool({
 				agentId: resolvedAgentId,
 				workspaceId: workspace,
-				getSessionId: () => this.deps.getCurrentContext?.()?.sessionKey
+				getSessionId: currentSessionKey,
+				getProjectId: currentProjectId,
+				canRead: () => currentAccess().userModel
 			}),
 			createKnowledgeSearchTool({
 				agentId: resolvedAgentId,
 				workspaceId: workspace,
-				getSessionId: () => this.deps.getCurrentContext?.()?.sessionKey
+				getSessionId: currentSessionKey,
+				getProjectId: currentProjectId,
+				canRead: () => currentAccess().knowledge,
+				canWrite: () => currentAccess().knowledge,
+				getWritePolicy: knowledgeWritePolicy,
+				getSources: () => currentAccess().knowledgeSources
 			}),
 			createKnowledgeGetTool({
 				agentId: resolvedAgentId,
 				workspaceId: workspace,
-				getSessionId: () => this.deps.getCurrentContext?.()?.sessionKey
+				getSessionId: currentSessionKey,
+				getProjectId: currentProjectId,
+				canRead: () => currentAccess().knowledge,
+				canWrite: () => currentAccess().knowledge,
+				getWritePolicy: knowledgeWritePolicy,
+				getSources: () => currentAccess().knowledgeSources
 			}),
 			createKnowledgeWriteTool({
 				agentId: resolvedAgentId,
 				workspaceId: workspace,
-				getSessionId: () => this.deps.getCurrentContext?.()?.sessionKey
+				getSessionId: currentSessionKey,
+				getProjectId: currentProjectId,
+				canRead: () => currentAccess().knowledge,
+				canWrite: () => currentAccess().knowledge,
+				getWritePolicy: knowledgeWritePolicy,
+				getSources: () => currentAccess().knowledgeSources
 			}),
 			...this.deps.getSessionStore ? [createSessionRecallTool({
 				getSessionStore: this.deps.getSessionStore,
@@ -343,7 +372,8 @@ var AgentToolsFactory = class AgentToolsFactory {
 			...this.deps.getSessionStore && getPrimary ? [createSessionSearchTool({
 				getSessionStore: this.deps.getSessionStore,
 				getPrimaryModel: getPrimary,
-				getCurrentSessionKey: () => this.deps.getCurrentContext()?.sessionKey
+				getCurrentSessionKey: () => this.deps.getCurrentContext()?.sessionKey,
+				canAccess: () => currentAccess().crossSessionHistory
 			})] : [],
 			...this.deps.getAutomationService ? [createAutomationTool({ getAutomationService: this.deps.getAutomationService })] : [],
 			...browserEnabled && this.deps.getBrowserRecipeService ? [createBrowserRecipeTool({ getBrowserRecipeService: this.deps.getBrowserRecipeService })] : [],

package/dist/src/agent/tools/knowledge-memory-tool.d.ts

@@ -1,8 +1,14 @@
 import type { AgentTool } from '@earendil-works/pi-agent-core';
+import { type KnowledgeSource } from '../../knowledge-memory/index.js';
 export interface KnowledgeToolOptions {
     agentId: string;
     workspaceId: string;
     getSessionId: () => string | undefined;
+    getProjectId?: () => string | undefined;
+    canRead: () => boolean;
+    canWrite: () => boolean;
+    getWritePolicy: () => 'deny' | 'confirm' | 'allow';
+    getSources: () => readonly KnowledgeSource[];
 }
 export declare function createKnowledgeSearchTool(options: KnowledgeToolOptions): AgentTool;
 export declare function createKnowledgeGetTool(options: KnowledgeToolOptions): AgentTool;

package/dist/src/agent/tools/knowledge-memory-tool.js

@@ -1,4 +1,4 @@
-import { getKnowledgeItem, searchKnowledgeItems, writeKnowledgeItem } from "../../knowledge-memory/repository.js";
+import { getKnowledgeItem, knowledgeSourceAllowed, searchKnowledgeItems, writeKnowledgeItem } from "../../knowledge-memory/repository.js";
 import "../../knowledge-memory/index.js";
 import { Type } from "@sinclair/typebox";
 //#region src/agent/tools/knowledge-memory-tool.ts
@@ -23,17 +23,23 @@ const WriteSchema = Type.Object({
 	]),
 	content: Type.String(),
 	canonicalKey: Type.String(),
-	scope: Type.Union([Type.Literal("workspace"), Type.Literal("session")]),
+	scope: Type.Union([
+		Type.Literal("workspace"),
+		Type.Literal("project"),
+		Type.Literal("session")
+	]),
 	importance: Type.Optional(Type.Number({
 		minimum: 0,
 		maximum: 1
 	}))
 });
 function visibility(options) {
+	const projectId = options.getProjectId?.();
 	return {
 		agentId: options.agentId,
 		workspaceId: options.workspaceId,
-		sessionId: options.getSessionId() ?? ""
+		sessionId: options.getSessionId() ?? "",
+		...projectId ? { projectId } : {}
 	};
 }
 function createKnowledgeSearchTool(options) {
@@ -43,10 +49,18 @@ function createKnowledgeSearchTool(options) {
 		description: "Search project, workspace, and session knowledge for prior decisions, facts, lessons, and commitments.",
 		parameters: SearchSchema,
 		async execute(_toolCallId, raw) {
+			if (!options.canRead()) return {
+				content: [{
+					type: "text",
+					text: "Knowledge memory is disabled for this session."
+				}],
+				details: { error: "knowledge_memory_disabled" }
+			};
 			const input = raw;
 			const results = searchKnowledgeItems({
 				query: input.query,
 				context: visibility(options),
+				sources: options.getSources(),
 				limit: input.maxResults ?? 12
 			});
 			return {
@@ -60,7 +74,7 @@ function createKnowledgeSearchTool(options) {
 	};
 }
 function visibleItem(options, item) {
-	return item.scope.type === "global" || item.scope.type === "agent" && item.scope.id === options.agentId || item.scope.type === "workspace" && item.scope.id === options.workspaceId || item.scope.type === "session" && item.scope.id === options.getSessionId();
+	return item.scope.type === "global" || item.scope.type === "agent" && item.scope.id === options.agentId || item.scope.type === "workspace" && item.scope.id === options.workspaceId || item.scope.type === "project" && item.scope.id === options.getProjectId?.() || item.scope.type === "session" && item.scope.id === options.getSessionId();
 }
 function createKnowledgeGetTool(options) {
 	return {
@@ -69,9 +83,16 @@ function createKnowledgeGetTool(options) {
 		description: "Read one knowledge item returned by knowledge_search.",
 		parameters: GetSchema,
 		async execute(_toolCallId, raw) {
+			if (!options.canRead()) return {
+				content: [{
+					type: "text",
+					text: "Knowledge memory is disabled for this session."
+				}],
+				details: { error: "knowledge_memory_disabled" }
+			};
 			const id = raw.id;
 			const item = getKnowledgeItem(id);
-			return item && visibleItem(options, item) ? {
+			return item && visibleItem(options, item) && knowledgeSourceAllowed(item, options.getSources()) ? {
 				content: [{
 					type: "text",
 					text: JSON.stringify(item, null, 2)
@@ -91,36 +112,70 @@ function createKnowledgeWriteTool(options) {
 	return {
 		name: "knowledge_write",
 		label: "Knowledge Write",
-		description: "Store a scoped knowledge candidate with provenance for later review and retrieval.",
+		description: "Store scoped knowledge with provenance, subject to the configured write policy.",
 		parameters: WriteSchema,
 		async execute(_toolCallId, raw) {
+			if (!options.canWrite()) return {
+				content: [{
+					type: "text",
+					text: "Knowledge memory writes are disabled for this session."
+				}],
+				details: { error: "knowledge_memory_disabled" }
+			};
+			const writePolicy = options.getWritePolicy();
+			if (writePolicy === "deny") return {
+				content: [{
+					type: "text",
+					text: "Knowledge memory writes are denied by policy."
+				}],
+				details: { error: "knowledge_write_denied" }
+			};
 			const input = raw;
+			if (!options.getSources().includes(input.scope)) return {
+				content: [{
+					type: "text",
+					text: `Knowledge source is disabled: ${input.scope}`
+				}],
+				details: {
+					error: "knowledge_source_disabled",
+					source: input.scope
+				}
+			};
 			const sessionId = options.getSessionId();
 			if (input.scope === "session" && !sessionId) throw new Error("A current session is required for session knowledge.");
-			const result = writeKnowledgeItem({
-				kind: input.kind,
-				scope: input.scope === "workspace" ? {
-					type: "workspace",
-					id: options.workspaceId
-				} : {
-					type: "session",
-					id: sessionId
-				},
-				content: input.content,
-				canonicalKey: input.canonicalKey,
-				confidence: .7,
-				importance: input.importance ?? .5,
-				originClass: "agent",
-				sourceAgentId: options.agentId,
-				...sessionId ? { sourceSessionId: sessionId } : {},
-				source: { tool: "knowledge_write" }
-			});
+			const projectId = options.getProjectId?.();
+			if (input.scope === "project" && !projectId) throw new Error("A current project is required for project knowledge.");
+			const details = {
+				...writeKnowledgeItem({
+					kind: input.kind,
+					scope: input.scope === "workspace" ? {
+						type: "workspace",
+						id: options.workspaceId
+					} : input.scope === "project" ? {
+						type: "project",
+						id: projectId
+					} : {
+						type: "session",
+						id: sessionId
+					},
+					content: input.content,
+					canonicalKey: input.canonicalKey,
+					status: writePolicy === "allow" ? "active" : "candidate",
+					confidence: .7,
+					importance: input.importance ?? .5,
+					originClass: "agent",
+					sourceAgentId: options.agentId,
+					...sessionId ? { sourceSessionId: sessionId } : {},
+					source: { tool: "knowledge_write" }
+				}),
+				writePolicy
+			};
 			return {
 				content: [{
 					type: "text",
-					text: JSON.stringify(result, null, 2)
+					text: JSON.stringify(details, null, 2)
 				}],
-				details: result
+				details
 			};
 		}
 	};

package/dist/src/agent/tools/session-search-tool.d.ts

@@ -5,5 +5,6 @@ export interface SessionSearchToolDeps {
     getSessionStore: () => SessionStore;
     getPrimaryModel: () => Model<Api>;
     getCurrentSessionKey?: () => string | undefined;
+    canAccess?: () => boolean;
 }
 export declare function createSessionSearchTool(deps: SessionSearchToolDeps): AgentTool;

package/dist/src/agent/tools/session-search-tool.js

@@ -94,6 +94,13 @@ function createSessionSearchTool(deps) {
 		description: "Search other chat sessions by keywords and get short summaries, or omit `query` to list recent sessions (no LLM cost). Uses the same session store as the gateway. Narrow with roleFilter if needed.",
 		parameters: SessionSearchSchema,
 		async execute(_toolCallId, params, signal) {
+			if (deps.canAccess && !deps.canAccess()) return {
+				content: [{
+					type: "text",
+					text: "Cross-session history is disabled for this session."
+				}],
+				details: { error: "cross_session_history_disabled" }
+			};
 			const p = params;
 			const store = deps.getSessionStore();
 			const limit = Math.min(15, Math.max(1, p.limit ?? 5));

package/dist/src/agent/tools/user-context-tool.d.ts

@@ -3,6 +3,8 @@ export interface UserContextToolOptions {
     agentId: string;
     workspaceId: string;
     getSessionId: () => string | undefined;
+    getProjectId?: () => string | undefined;
+    canRead: () => boolean;
 }
 export declare function createUserContextSearchTool(options: UserContextToolOptions): AgentTool;
 export declare function createUserContextGetTool(options: UserContextToolOptions): AgentTool;

package/dist/src/agent/tools/user-context-tool.js

@@ -13,7 +13,10 @@ const SearchSchema = Type.Object({
 const GetSchema = Type.Object({ id: Type.String() });
 function visible(options, slotId) {
 	const scope = getAssertionSlot(slotId)?.scope;
-	return scope?.type === "global" || scope?.type === "agent" && scope.id === options.agentId || scope?.type === "workspace" && scope.id === options.workspaceId || scope?.type === "session" && scope.id === options.getSessionId();
+	return scope?.type === "global" || scope?.type === "agent" && scope.id === options.agentId || scope?.type === "workspace" && scope.id === options.workspaceId || scope?.type === "project" && scope.id === options.getProjectId?.() || scope?.type === "session" && scope.id === options.getSessionId();
+}
+function referenceable(assertion) {
+	return assertion.status === "active" && assertion.authority !== "external_untrusted" && assertion.sensitivity !== "secret" && assertion.sensitivity !== "regulated" && assertion.disclosurePolicy !== "ask_before_reference";
 }
 function createUserContextSearchTool(options) {
 	return {
@@ -22,11 +25,18 @@ function createUserContextSearchTool(options) {
 		description: "Search typed user assertions such as identity, preferences, routines, and current state.",
 		parameters: SearchSchema,
 		async execute(_toolCallId, raw) {
+			if (!options.canRead()) return {
+				content: [{
+					type: "text",
+					text: "User context is disabled for this session."
+				}],
+				details: { error: "user_context_disabled" }
+			};
 			const input = raw;
 			const results = listUserAssertions({
-				statuses: ["active", "needs_review"],
+				statuses: ["active"],
 				limit: 1e3
-			}).filter((assertion) => visible(options, assertion.slotId)).map((assertion) => ({
+			}).filter((assertion) => visible(options, assertion.slotId)).filter(referenceable).map((assertion) => ({
 				assertion,
 				score: retrievalLexicalSimilarity(input.query, `${assertion.statement} ${assertion.normalizedValue}`)
 			})).filter((item) => item.score > 0).sort((left, right) => right.score - left.score).slice(0, input.maxResults ?? 12).map(({ assertion, score }) => ({
@@ -54,9 +64,16 @@ function createUserContextGetTool(options) {
 		description: "Read one typed user assertion and its subject, predicate, and scope.",
 		parameters: GetSchema,
 		async execute(_toolCallId, raw) {
+			if (!options.canRead()) return {
+				content: [{
+					type: "text",
+					text: "User context is disabled for this session."
+				}],
+				details: { error: "user_context_disabled" }
+			};
 			const id = raw.id;
 			const assertion = getUserAssertion(id);
-			if (!assertion || !visible(options, assertion.slotId)) return {
+			if (!assertion || !visible(options, assertion.slotId) || !referenceable(assertion)) return {
 				content: [{
 					type: "text",
 					text: `User assertion not found: ${id}`

package/dist/src/ai-assist/text-assist.js

@@ -1,9 +1,9 @@
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
+import { getAssistantMessageErrorReason, stripCodeFences } from "../providers/model-response.js";
 import { getDefaultModelSync, init_providers, resolveModel } from "../providers/index.js";
 import { createExtensionAwareStreamFn } from "../providers/extension-stream-bridge.js";
 import { isLocalModelBaseUrl, resolveModelCallApiKey, resolveModelCallOptions } from "../providers/model-call.js";
-import { getAssistantMessageErrorReason, stripCodeFences } from "../providers/model-response.js";
 //#region src/ai-assist/text-assist.ts
 init_providers();
 init_logger();

package/dist/src/auth/credentials.js

@@ -1,10 +1,10 @@
 import { __esmMin } from "../../_virtual/_rolldown/runtime.js";
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
-import { init_paths, resolveAgentAuthProfilesPath, resolveAuthProfilesPath, resolveCredentialsDir, resolveOAuthPath } from "../config/paths.js";
 import { init_write_file_atomic, writeTextAtomic } from "../infra/write-file-atomic.js";
-import { getOAuthProviderDefinition, init_registry } from "./oauth/registry.js";
+import { init_paths, resolveAgentAuthProfilesPath, resolveAuthProfilesPath, resolveCredentialsDir, resolveOAuthPath } from "../config/paths.js";
 import { getApiKeyFromEnv, init_env_keys } from "../providers/env-keys.js";
+import { getOAuthProviderDefinition, init_registry } from "./oauth/registry.js";
 import { init_oauth_provider_lock, withOAuthProviderLock } from "./oauth-provider-lock.js";
 import { dirname, join } from "path";
 import { mkdir, readFile, readdir, rm } from "fs/promises";

package/dist/src/auth/profiles/store.js

@@ -1,5 +1,5 @@
-import { init_paths, resolveCredentialsDir } from "../../config/paths.js";
 import { init_write_file_atomic, writeTextAtomicSync } from "../../infra/write-file-atomic.js";
+import { init_paths, resolveCredentialsDir } from "../../config/paths.js";
 import path from "node:path";
 import { chmodSync, existsSync, mkdirSync, readFileSync } from "node:fs";
 //#region src/auth/profiles/store.ts

package/dist/src/auth/sync-provider-auth.js

@@ -1,8 +1,8 @@
 import { __esmMin } from "../../_virtual/_rolldown/runtime.js";
-import { getDefaultAgentId, init_resolve_route } from "../routing/resolve-route.js";
 import { init_paths, resolveAgentAuthProfilesPath, resolveAuthProfilesPath, resolveOAuthPath } from "../config/paths.js";
-import { init_loader, loadConfig } from "../config/loader.js";
 import { init_registry, isOAuthOnlyProvider } from "./oauth/registry.js";
+import { init_loader, loadConfig } from "../config/loader.js";
+import { getDefaultAgentId, init_resolve_route } from "../routing/resolve-route.js";
 import { existsSync, readFileSync } from "node:fs";
 //#region src/auth/sync-provider-auth.ts
 /**

package/dist/src/automations/service/automation-service.d.ts

@@ -8,6 +8,7 @@ export declare class AutomationAlreadyRunningError extends Error {
 }
 export declare class AutomationService {
     private readonly signals?;
+    private readonly workspaceId;
     private readonly executor;
     private timer;
     private stopped;
@@ -17,7 +18,7 @@ export declare class AutomationService {
     private readonly activeRuns;
     private readonly heartbeatTimers;
     private readonly leaseOwner;
-    constructor(signals?: ProactiveSignalPublisher);
+    constructor(signals?: ProactiveSignalPublisher, workspaceId?: string);
     setDeps(deps: AutomationDeps): void;
     initialize(options?: {
         maxConcurrentRuns?: number;

package/dist/src/automations/service/automation-service.js

@@ -34,8 +34,9 @@ var AutomationService = class {
 	activeRuns = /* @__PURE__ */ new Map();
 	heartbeatTimers = /* @__PURE__ */ new Map();
 	leaseOwner = `automation-service:${process.pid}:${randomUUID()}`;
-	constructor(signals) {
+	constructor(signals, workspaceId = "default") {
 		this.signals = signals;
+		this.workspaceId = workspaceId;
 	}
 	setDeps(deps) {
 		this.deps = {
@@ -462,7 +463,10 @@ var AutomationService = class {
 						id: run.id
 					},
 					actor: { kind: "system" },
-					scope: { workspaceId: "default" },
+					scope: {
+						workspaceId: this.workspaceId,
+						...automation.projectId ? { projectId: automation.projectId } : {}
+					},
 					occurredAt: new Date(endedAtMs).toISOString(),
 					dedupeKey: `automation_run:${run.id}:failed`,
 					sensitivity: "personal",

package/dist/src/browser/providers/browser-ext-install.js

@@ -2,8 +2,8 @@ import { PACKAGE_VERSION, init_package_version } from "../../package-version.js"
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
 import { assertCacheDir, init_cache_dir_policy } from "../cache-dir-policy.js";
-import { init_paths, resolveBinDir } from "../../config/paths.js";
 import { init_write_file_atomic, writeTextAtomic } from "../../infra/write-file-atomic.js";
+import { init_paths, resolveBinDir } from "../../config/paths.js";
 import { shouldRunExtensionBridgeServer } from "../backend-from-config.js";
 import { resolvePackageRoot } from "../../infra/update-check.js";
 import { dirname, join } from "node:path";

package/dist/src/cli/commands/doctor/checks/database-schema.js

@@ -52,7 +52,7 @@ async function checkDatabaseSchema(ctx) {
 		id: "database-schema",
 		label: "Database schema",
 		status: "pass",
-		message: `SQLite schema v${status.dbVersion} (current release v150).`,
+		message: `SQLite schema v${status.dbVersion} (current release v152).`,
 		hints: []
 	};
 }

package/dist/src/cli/commands/doctor/checks/provider-auth.js

@@ -1,6 +1,6 @@
 import { getAgentDefaultModelRef, init_schema, parseModelRef } from "../../../../config/schema.js";
-import { init_loader, loadConfig } from "../../../../config/loader.js";
 import { PROVIDER_ENV_MAP, getApiKeyFromEnv, init_env_keys } from "../../../../providers/env-keys.js";
+import { init_loader, loadConfig } from "../../../../config/loader.js";
 import { existsSync } from "node:fs";
 //#region src/cli/commands/doctor/checks/provider-auth.ts
 init_loader();

package/dist/src/cli/commands/models.js

@@ -1,6 +1,6 @@
 import { getAgentDefaultModelRef, init_schema } from "../../config/schema.js";
-import { loadConfig, saveConfig } from "../../config/loader.js";
 import { CredentialResolver, init_credentials } from "../../auth/credentials.js";
+import { loadConfig, saveConfig } from "../../config/loader.js";
 import { getAllModels, getAvailableModels, getConfiguredProviders, getProviderAuthState, getProviderDisplayName, init_providers, isProviderConfigured, providerSupportsApiKey, providerSupportsOAuth, resolveModel } from "../../providers/index.js";
 import { formatExamples, register } from "../registry.js";
 import { getContextWithOpts } from "../context.js";

package/dist/src/config/index.js

@@ -2,15 +2,15 @@ import { ENV_VARS, XOPC_DB_FILENAME, resolveHomeDir, resolveStateDir, resolveXop
 import { TelegramAccountConfigSchema, TelegramConfigSchema, TelegramGroupConfigSchema, TelegramTopicConfigSchema } from "../../extensions/telegram/src/config-schema.js";
 import { WeixinAccountConfigSchema, WeixinConfigSchema } from "../../extensions/weixin/src/config-schema.js";
 import { AgentImageGenerationModelSchema, AgentModelRefSchema, AgentModelsSchema, AgentsConfigSchema, BindingMatchSchema, BindingRuleSchema, BindingsConfigSchema, BrowserConfigSchema, ChannelsConfigSchema, CommandsConfigSchema, ConfigSchema, ConnectorsConfigSchema, ExperimentalConfigSchema, ExtensionSecurityConfigSchema, ExtensionSlotsConfigSchema, ExtensionsConfigSchema, GatewayAuthRateLimitSchema, GatewayAuthSchema, GatewayBindModeSchema, GatewayChannelConnectDeferModeSchema, GatewayConfigSchema, GatewayModeSchema, GatewayRemoteSchema, GatewaySecuritySchema, GatewayTailscaleConsentSchema, GatewayTailscaleSchema, GatewayTlsSchema, GatewayTrustedProxySchema, GatewayWebchatConfigSchema, HeartbeatConfigSchema, McpConfigSchema, McpOAuthConfigSchema, McpServerSchema, MediaUnderstandingCapabilitiesSchema, MediaUnderstandingModelSchema, MessagesConfigSchema, ModelCatalogConfigSchema, ModelsDevConfigSchema, ProviderAuthConfigSchema, ProviderAzureConfigSchema, ProviderRequestOverridesSchema, ProvidersConfigSchema, RuntimeToolsConfigSchema, STTConfigSchema, STTFallbackConfigSchema, STTProviderConfigSchema, SearchProviderEntrySchema, SessionConfigSchema, SessionDmScopeSchema, SessionResetByTypeSchema, SessionResetConfigSchema, SessionResetModeSchema, SessionScopeSchema, SessionStorageConfigSchema, TTSConfigSchema, TTSEdgeConfigSchema, TTSFallbackConfigSchema, TTSModelOverridesConfigSchema, TTSProviderConfigSchema, TTSSummarizationConfigSchema, ToolsConfigSchema, ToolsMediaAudioConfigSchema, ToolsMediaConfigSchema, TuiConfigSchema, TunnelConfigSchema, TunnelConsentSchema, UpdateAutoConfigSchema, UpdateConfigSchema, VoiceConfigSchema, VoiceRefinementConfigSchema, WebSearchConfigSchema, WebToolsConfigSchema, WebsiteBlocklistSchema, WorkspaceConfigSchema, WorkspaceImportConfigSchema, getAgentDefaultImageGenerationModelConfig, getAgentDefaultImageModelConfig, getAgentDefaultModelRef, init_schema, parseModelRef } from "./schema.js";
-import { applyConfigOverrides, getConfigOverrides, resetConfigOverrides, setConfigOverride, unsetConfigOverride } from "./runtime-overrides.js";
+import { clearConfigValueCache, getAllowedCommands, getCacheStats, init_resolve_config_value, resolveConfigValue, resolveHeaders, testApiKeyResolution } from "./resolve-config-value.js";
 import { expandWorkspacePathString, init_workspace_path, normalizeWorkspaceDir, resolveWorkspaceRoot } from "./workspace-path.js";
 import { resolveDefaultAgentWorkspaceDir } from "./workspace-defaults.js";
 import { resolveAgentDir as resolveAgentDir$1, resolveAgentHomeDir as resolveAgentHomeDir$1, resolveAgentWorkspaceDir } from "../agent/agent-scope.js";
-import { extractProfileAgentId, resolveEffectiveAgentConfigForAgent, resolveEffectiveAgentConfigForSession, resolveEffectiveAgentProfile, resolveEffectiveAgentProfileForSession } from "./agent-profile.js";
 import { FILENAMES, WORKSPACE_FILES, existsSync, hasBundledExtensionManifest, init_paths, resolveAgentAuthProfilesPath, resolveAgentDir, resolveAgentHomeDir, resolveAgentProfileDir, resolveAgentProfileMarkdownPath, resolveAuthProfilesPath, resolveBinDir, resolveBundledExtensionsDir, resolveBundledSkillsDir, resolveConfigPath, resolveCredentialsDir, resolveExtensionSdkPath, resolveExtensionsDir, resolveExtensionsLockPath, resolveInboxDir, resolveInboxMessagePath, resolveInboxPendingDir, resolveInboxProcessedDir, resolveLogPath, resolveLogsDir, resolveMcpOAuthPath, resolveModelsJsonPath, resolveNodeBinDir, resolveNodeBinPath, resolveNodeToolsDir, resolveNpmBinPath, resolveOAuthPath, resolvePidPath, resolveSkillPath, resolveSkillsCachePath, resolveSkillsDir, resolveSkillsLockPath, resolveSocketPath, resolveStatusPath, resolveToolsDir, resolveWorkspaceExtensionsDir, resolveWorkspaceFile, resolveWorkspaceStateDir, resolveWorkspaceStatePath, resolveXopcBinPath } from "./paths.js";
-import { init_loader, loadConfig, saveConfig } from "./loader.js";
-import { clearConfigValueCache, getAllowedCommands, getCacheStats, init_resolve_config_value, resolveConfigValue, resolveHeaders, testApiKeyResolution } from "./resolve-config-value.js";
 import { CustomModelSchema, ImageGenerationCapabilitiesSchema, ImageGenerationModelSchema, ImageGenerationProviderSchema, ModelOverrideSchema, ModelsJsonSchema, OpenAICompatSchema, OpenAICompletionsCompatSchema, OpenAIResponsesCompatSchema, OpenRouterRoutingSchema, ProviderConfigSchema, VercelGatewayRoutingSchema, getDefaultModelValues, init_models_json, loadModelsJson, modelsJsonExists, saveModelsJson, validateModelsConfig } from "./models-json.js";
+import { init_loader, loadConfig, saveConfig } from "./loader.js";
+import { applyConfigOverrides, getConfigOverrides, resetConfigOverrides, setConfigOverride, unsetConfigOverride } from "./runtime-overrides.js";
+import { extractProfileAgentId, resolveEffectiveAgentConfigForAgent, resolveEffectiveAgentConfigForSession, resolveEffectiveAgentProfile, resolveEffectiveAgentProfileForSession } from "./agent-profile.js";
 import { canonicalizeConfiguredMcpServer, isKnownCliMcpTypeAlias, normalizeConfiguredMcpServers, resolveXopcMcpTransportAlias } from "./mcp-config-normalize.js";
 import { formatThinkingLevels, listThinkingLevels, normalizeElevatedMode, normalizeReasoningLevel, normalizeThinkLevel, normalizeVerboseLevel, thinkLevelToNumber } from "../agent/transcript/thinking-types.js";
 import { getWorkspacePath } from "./workspace-path-helpers.js";

package/dist/src/config/loader.js

@@ -2,8 +2,8 @@ import { __esmMin } from "../../_virtual/_rolldown/runtime.js";
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
 import { ConfigSchema, init_schema } from "./schema.js";
-import { init_paths, resolveConfigPath } from "./paths.js";
 import { init_write_file_atomic, writeTextAtomic } from "../infra/write-file-atomic.js";
+import { init_paths, resolveConfigPath } from "./paths.js";
 import { assertChannelPluginConfigs, init_validate_channel_configs } from "./validate-channel-configs.js";
 import { dirname } from "path";
 import { existsSync, mkdirSync, promises, readFileSync } from "fs";

package/dist/src/config/models-json.js

@@ -1,6 +1,6 @@
 import { __esmMin } from "../../_virtual/_rolldown/runtime.js";
-import { init_paths, resolveModelsJsonPath } from "./paths.js";
 import { init_write_file_atomic, writeTextAtomicSync } from "../infra/write-file-atomic.js";
+import { init_paths, resolveModelsJsonPath } from "./paths.js";
 import { existsSync, readFileSync } from "fs";
 import { z } from "zod";
 //#region src/config/models-json.ts

package/dist/src/connectors/connection-recovery-service.d.ts

@@ -33,6 +33,7 @@ export declare class ConnectionRecoveryService {
     private get adapter();
     snapshot(sessionKey: string): ConnectionWaitSnapshot;
     private view;
+    private ensureInstallation;
     private checkCapabilities;
     preflight(input: SessionInput): Promise<boolean>;
     act(sessionKey: string, action: ConnectionAction): Promise<{