@xopcai/xopc 0.0.250 → 0.0.252

package/dist/src/config/schema.js

@@ -1,10 +1,10 @@
 import { __esmMin } from "../../_virtual/_rolldown/runtime.js";
 import { AgentModelsOverrideSchema, AgentsConfigSchema as AgentsConfigSchema$1, DEFAULT_AGENT_MODEL_REF, ImageGenerationRouteSchema, ModelRouteSchema } from "../agent-config/schema.js";
 import { init_agent_config } from "../agent-config/index.js";
-import { checkCacheDir, init_cache_dir_policy } from "../browser/cache-dir-policy.js";
 import { DEFAULT_CONTEXT_COMPACTION_POLICY, UserContextConfigSchema, init_config } from "../user-context/config.js";
 import { init_default_model } from "./default-model.js";
 import { init_public_url, validatePublicUrl } from "./public-url.js";
+import { PlatformConfigSchema, init_contracts } from "../platform/contracts.js";
 import { TelegramAccountConfigSchema, TelegramConfigSchema, TelegramGroupConfigSchema, TelegramTopicConfigSchema, init_config_schema } from "../../extensions/telegram/src/config-schema.js";
 import { WeixinAccountConfigSchema, WeixinConfigSchema, init_config_schema as init_config_schema$1 } from "../../extensions/weixin/src/config-schema.js";
 import { z } from "zod";
@@ -37,13 +37,13 @@ function parseModelRef(ref) {
 		model: trimmed.slice(idx + 1).trim()
 	};
 }
-var AgentModelRefSchema, AgentImageGenerationModelSchema, AgentModelsSchema, AgentsConfigSchema, BrowserCloudConfigSchema, BrowserExtensionConfigSchema, BrowserCloakConfigSchema, BrowserConfigSchema, BindingMatchSchema, BindingRuleSchema, BindingsConfigSchema, SessionDmScopeSchema, SessionStorageConfigSchema, SessionResetModeSchema, SessionResetConfigSchema, SessionResetByTypeSchema, SessionScopeSchema, SessionConfigSchema, ChannelsConfigSchema, SearchProviderEntrySchema, WebSearchConfigSchema, WebsiteBlocklistSchema, WebToolsConfigSchema, ToolsConfigSchema, RuntimePreferenceSchema, RuntimeProvisionSchema, RuntimeVersionRequestSchema, LanguageRuntimeSchema, DEFAULT_RUNTIME_TOOLS_CONFIG, RuntimeToolsConfigSchema, GatewayAuthRateLimitSchema, GatewaySecuritySchema, GatewayTrustedProxySchema, GatewayAuthSchema, GatewayTailscaleConsentSchema, GatewayTailscaleSchema, GatewayRemoteSchema, GatewayTlsSchema, GatewayModeSchema, HeartbeatConfigSchema, GatewayChannelConnectDeferModeSchema, TunnelConsentSchema, TunnelConfigSchema, WorkspaceImportConfigSchema, WorkspaceConfigSchema, GatewayBindModeSchema, GatewayWebchatConfigSchema, GatewayConfigSchema, ModelsDevConfigSchema, ModelCatalogConfigSchema, SttProviderConfigCatchallSchema, STTProviderConfigSchema, STTFallbackConfigSchema, MediaUnderstandingCapabilitiesSchema, MediaUnderstandingModelSchema, STTConfigSchema, TtsProviderConfigCatchallSchema, TTSProviderConfigSchema, TTSFallbackConfigSchema, TTSModelOverridesConfigSchema, TTSEdgeConfigSchema, TTSSummarizationConfigSchema, TTSConfigSchema, VoiceRefinementConfigSchema, VoiceConfigSchema, MessagesConfigSchema, ToolsMediaAudioConfigSchema, ToolsMediaConfigSchema, ProviderAzureConfigSchema, ProviderRequestOverridesSchema, ProviderAuthConfigSchema, ProvidersConfigSchema, ExtensionSecurityConfigSchema, ExtensionSlotsConfigSchema, ExtensionsConfigSchema, UpdateAutoConfigSchema, UpdateConfigSchema, CommandsConfigSchema, TuiConfigSchema, McpHttpUrlSchema, ConnectorSecretReferenceSchema, McpConfigScalarSchema, McpOAuthConfigSchema, McpServerSchema, McpConfigSchema, ConnectorsConfigSchema, ExperimentalConfigSchema, ConfigSchema;
+var AgentModelRefSchema, AgentImageGenerationModelSchema, AgentModelsSchema, AgentsConfigSchema, BrowserDriverSchema, BrowserHostnameSchema, BrowserConfigSchema, BindingMatchSchema, BindingRuleSchema, BindingsConfigSchema, SessionDmScopeSchema, SessionStorageConfigSchema, SessionResetModeSchema, SessionResetConfigSchema, SessionResetByTypeSchema, SessionScopeSchema, SessionConfigSchema, ChannelsConfigSchema, SearchProviderEntrySchema, WebSearchConfigSchema, WebsiteBlocklistSchema, WebToolsConfigSchema, ToolsConfigSchema, RuntimePreferenceSchema, RuntimeProvisionSchema, RuntimeVersionRequestSchema, LanguageRuntimeSchema, DEFAULT_RUNTIME_TOOLS_CONFIG, RuntimeToolsConfigSchema, GatewayAuthRateLimitSchema, GatewaySecuritySchema, GatewayTrustedProxySchema, GatewayAuthSchema, GatewayTailscaleConsentSchema, GatewayTailscaleSchema, GatewayRemoteSchema, GatewayTlsSchema, GatewayModeSchema, HeartbeatConfigSchema, GatewayChannelConnectDeferModeSchema, TunnelConsentSchema, TunnelConfigSchema, WorkspaceImportConfigSchema, WorkspaceConfigSchema, GatewayBindModeSchema, GatewayWebchatConfigSchema, GatewayConfigSchema, ModelsDevConfigSchema, ModelCatalogConfigSchema, SttProviderConfigCatchallSchema, STTProviderConfigSchema, STTFallbackConfigSchema, MediaUnderstandingCapabilitiesSchema, MediaUnderstandingModelSchema, STTConfigSchema, TtsProviderConfigCatchallSchema, TTSProviderConfigSchema, TTSFallbackConfigSchema, TTSModelOverridesConfigSchema, TTSEdgeConfigSchema, TTSSummarizationConfigSchema, TTSConfigSchema, VoiceRefinementConfigSchema, VoiceConfigSchema, MessagesConfigSchema, ToolsMediaAudioConfigSchema, ToolsMediaConfigSchema, ProviderAzureConfigSchema, ProviderRequestOverridesSchema, ProviderAuthConfigSchema, ProvidersConfigSchema, ExtensionSecurityConfigSchema, ExtensionSlotsConfigSchema, ExtensionsConfigSchema, UpdateAutoConfigSchema, UpdateConfigSchema, CommandsConfigSchema, TuiConfigSchema, McpHttpUrlSchema, ConnectorSecretReferenceSchema, McpConfigScalarSchema, McpOAuthConfigSchema, McpServerSchema, McpConfigSchema, ConnectorsConfigSchema, ExperimentalConfigSchema, ConfigSchema;
 var init_schema = __esmMin((() => {
 	init_agent_config();
-	init_cache_dir_policy();
 	init_config();
 	init_default_model();
 	init_public_url();
+	init_contracts();
 	init_config_schema();
 	init_config_schema$1();
 	AgentModelRefSchema = ModelRouteSchema;
@@ -72,65 +72,99 @@ var init_schema = __esmMin((() => {
 			enabled: true
 		}]
 	});
-	BrowserCloudConfigSchema = z.object({
-		apiKey: z.string().optional(),
-		projectId: z.string().optional(),
-		region: z.string().optional()
-	}).strict().optional();
-	BrowserExtensionConfigSchema = z.object({
-		port: z.number().int().min(1024).max(65535).optional(),
-		host: z.string().min(1).optional(),
-		connectionTimeout: z.number().int().positive().optional()
-	}).strict().optional();
-	BrowserCloakConfigSchema = z.object({
-		keepOpen: z.boolean().optional(),
-		temporaryProfile: z.boolean().optional(),
-		cacheDir: z.string().optional().superRefine((value, ctx) => {
-			const result = checkCacheDir(value);
-			if (result.ok === false) ctx.addIssue({
-				code: "custom",
-				message: result.message
-			});
-		}),
-		binaryPath: z.string().optional(),
-		timezone: z.string().optional(),
-		locale: z.string().optional(),
-		webrtcIp: z.string().optional(),
-		fingerprintPlatform: z.string().optional(),
-		extraArgs: z.array(z.string()).optional()
-	}).strict().optional();
+	BrowserDriverSchema = z.discriminatedUnion("kind", [
+		z.object({ kind: z.literal("extension") }).strict(),
+		z.object({
+			kind: z.literal("playwright"),
+			headless: z.boolean().default(false),
+			executablePath: z.string().min(1).optional()
+		}).strict(),
+		z.object({
+			kind: z.literal("cdp"),
+			endpoint: z.string().url()
+		}).strict(),
+		z.object({
+			kind: z.literal("remote"),
+			provider: z.enum(["browserbase", "browser-use"]),
+			apiKey: z.string().optional(),
+			projectId: z.string().optional(),
+			region: z.string().optional()
+		}).strict()
+	]);
+	BrowserHostnameSchema = z.string().min(1).refine((value) => {
+		if (value !== value.toLowerCase() || value.includes("/") || value.includes(":") && !value.startsWith("[")) return false;
+		try {
+			return new URL(`http://${value}`).hostname === value;
+		} catch {
+			return false;
+		}
+	}, "Host must be one exact lowercase hostname or IP address.");
 	BrowserConfigSchema = z.object({
 		enabled: z.boolean().default(true),
-		backend: z.enum([
-			"local",
-			"cdp",
-			"cloud",
-			"extension",
-			"cloakbrowser"
-		]).default("extension"),
-		headless: z.boolean().optional(),
-		allowPrivateUrls: z.boolean().optional(),
-		commandTimeout: z.number().int().min(5).max(900).optional(),
-		cloudProvider: z.enum([
-			"local",
-			"browserbase",
-			"browser-use"
-		]).optional(),
-		cloud: BrowserCloudConfigSchema,
-		cdpUrl: z.string().optional(),
-		extension: BrowserExtensionConfigSchema,
-		cloakbrowser: BrowserCloakConfigSchema,
-		humanize: z.boolean().optional(),
-		humanPreset: z.enum(["default", "careful"]).optional(),
-		dialogPolicy: z.enum([
-			"must_respond",
-			"auto_dismiss",
-			"auto_accept"
-		]).optional(),
-		dialogTimeoutSeconds: z.number().int().positive().optional()
+		driver: BrowserDriverSchema.default({ kind: "extension" }),
+		observation: z.object({
+			maxNodes: z.number().int().min(20).max(500).default(180),
+			maxCharacters: z.number().int().min(1e3).max(5e4).default(12e3),
+			visualFallback: z.boolean().default(true)
+		}).strict().default({
+			maxNodes: 180,
+			maxCharacters: 12e3,
+			visualFallback: true
+		}),
+		limits: z.object({
+			actionTimeoutMs: z.number().int().min(1e3).max(12e4).default(3e4),
+			sessionTimeoutMs: z.number().int().min(6e4).max(36e5).default(9e5),
+			maxSequenceLength: z.number().int().min(1).max(10).default(5)
+		}).strict().default({
+			actionTimeoutMs: 3e4,
+			sessionTimeoutMs: 9e5,
+			maxSequenceLength: 5
+		}),
+		security: z.object({
+			privateNetworks: z.literal("deny").default("deny"),
+			allowedPrivateHosts: z.array(BrowserHostnameSchema).default([]),
+			crossDomainNavigation: z.enum([
+				"allow",
+				"ask",
+				"deny"
+			]).default("ask"),
+			uploads: z.enum([
+				"allow",
+				"ask",
+				"deny"
+			]).default("ask"),
+			consequentialActions: z.enum([
+				"allow",
+				"ask",
+				"deny"
+			]).default("ask")
+		}).strict().default({
+			privateNetworks: "deny",
+			allowedPrivateHosts: [],
+			crossDomainNavigation: "ask",
+			uploads: "ask",
+			consequentialActions: "ask"
+		})
 	}).strict().default({
 		enabled: true,
-		backend: "extension"
+		driver: { kind: "extension" },
+		observation: {
+			maxNodes: 180,
+			maxCharacters: 12e3,
+			visualFallback: true
+		},
+		limits: {
+			actionTimeoutMs: 3e4,
+			sessionTimeoutMs: 9e5,
+			maxSequenceLength: 5
+		},
+		security: {
+			privateNetworks: "deny",
+			allowedPrivateHosts: [],
+			crossDomainNavigation: "ask",
+			uploads: "ask",
+			consequentialActions: "ask"
+		}
 	});
 	BindingMatchSchema = z.object({
 		channel: z.string(),
@@ -991,6 +1025,7 @@ workDiscoveryOnboarding: z.boolean().default(true) }).strict().default({ workDis
 		mcp: McpConfigSchema,
 		connectors: ConnectorsConfigSchema,
 		experimental: ExperimentalConfigSchema,
+		platform: PlatformConfigSchema,
 		extensions: ExtensionsConfigSchema.default({}),
 		/** Per-vendor capability provider config (image / audio / video). */
 		providers: ProvidersConfigSchema.optional(),
@@ -1108,7 +1143,24 @@ workDiscoveryOnboarding: z.boolean().default(true) }).strict().default({ workDis
 		},
 		browser: {
 			enabled: true,
-			backend: "extension"
+			driver: { kind: "extension" },
+			observation: {
+				maxNodes: 180,
+				maxCharacters: 12e3,
+				visualFallback: true
+			},
+			limits: {
+				actionTimeoutMs: 3e4,
+				sessionTimeoutMs: 9e5,
+				maxSequenceLength: 5
+			},
+			security: {
+				privateNetworks: "deny",
+				allowedPrivateHosts: [],
+				crossDomainNavigation: "ask",
+				uploads: "ask",
+				consequentialActions: "ask"
+			}
 		},
 		tools: { web: { search: {
 			maxResults: 5,
@@ -1116,6 +1168,7 @@ workDiscoveryOnboarding: z.boolean().default(true) }).strict().default({ workDis
 		} } },
 		runtimeTools: DEFAULT_RUNTIME_TOOLS_CONFIG,
 		experimental: { workDiscoveryOnboarding: true },
+		platform: { mode: "standalone" },
 		extensions: {
 			allow: [],
 			security: {

package/dist/src/connectors/composio-sessions.js

@@ -97,9 +97,8 @@ var ComposioSessionsAdapter = class {
 				return new ManagedComposioClient();
 			}
 			let Composio;
-			let PiProvider;
 			try {
-				[{Composio}, {PiProvider}] = await Promise.all([import("@composio/core"), import("@composio/experimental")]);
+				({Composio} = await import("@composio/core"));
 			} catch (cause) {
 				throw new Error("The xopc installation is missing the bundled Composio runtime. Reinstall @xopcai/xopc and restart the gateway.", { cause });
 			}
@@ -110,7 +109,6 @@ var ComposioSessionsAdapter = class {
 				dangerouslyAllowAutoUploadDownloadFiles: Boolean(options.fileDownloadDir),
 				fileUploadDirs: false,
 				...options.fileDownloadDir ? { fileDownloadDir: options.fileDownloadDir } : {},
-				provider: new PiProvider(),
 				host: "xopc"
 			});
 			client.mode = "byok";

package/dist/src/extensions/marketplace.js

@@ -1,9 +1,11 @@
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
+import { init_resolution, resolveConnectedPlatformEndpoint } from "../platform/resolution.js";
 import { init_loader, loadConfig } from "../config/loader.js";
 //#region src/extensions/marketplace.ts
 init_loader();
 init_logger();
+init_resolution();
 const log = createLogger("ExtensionMarketplace");
 const DEFAULT_STORE_BASE = "https://store.xopc.ai";
 const CACHE_TTL_MS = 300 * 1e3;
@@ -24,6 +26,8 @@ function normalizeStoreBaseUrl() {
 	if (env) try {
 		return new URL(env).toString().replace(/\/$/, "");
 	} catch {}
+	const fromPlatform = resolveConnectedPlatformEndpoint("storeApi");
+	if (fromPlatform) return fromPlatform.replace(/\/+$/, "");
 	try {
 		const fromCfg = loadConfig().gateway?.skillsStoreBaseUrl?.trim();
 		if (fromCfg) try {

package/dist/src/files/file-service.js

@@ -4,7 +4,7 @@ import "../projects/index.js";
 import { basename, dirname, isAbsolute, relative, resolve, sep } from "node:path";
 import { constants } from "node:fs";
 import { createHash } from "node:crypto";
-import { access, lstat, opendir, realpath, stat } from "node:fs/promises";
+import { access, lstat, open, opendir, realpath, stat } from "node:fs/promises";
 //#region src/files/file-service.ts
 init_agent_scope();
 const SKIPPED_NAMES = new Set([
@@ -12,26 +12,120 @@ const SKIPPED_NAMES = new Set([
 	".git",
 	"node_modules"
 ]);
+const TEXT_SNIFF_BYTES = 8 * 1024;
 const TEXT_EXTENSIONS = new Set([
+	"astro",
+	"bash",
+	"bat",
+	"c",
+	"cc",
+	"cfg",
+	"clj",
+	"cljs",
+	"cljc",
+	"cmd",
+	"conf",
+	"cpp",
+	"cs",
 	"css",
 	"csv",
-	"html",
+	"cts",
+	"cxx",
+	"dart",
+	"editorconfig",
+	"edn",
+	"env",
+	"erl",
+	"ex",
+	"exs",
+	"fish",
+	"fs",
+	"fsx",
+	"gitattributes",
+	"gitignore",
+	"go",
+	"gql",
+	"graphql",
+	"groovy",
+	"h",
+	"hh",
+	"hpp",
+	"hrl",
 	"htm",
+	"html",
+	"hxx",
+	"ini",
+	"java",
 	"js",
 	"json",
+	"json5",
+	"jsonc",
 	"jsx",
-	"md",
+	"kt",
+	"kts",
+	"less",
+	"lock",
+	"log",
+	"lua",
+	"m",
 	"markdown",
+	"md",
 	"mjs",
-	"cjs",
+	"mm",
+	"mts",
+	"nix",
+	"npmrc",
+	"php",
+	"pl",
+	"pm",
+	"properties",
+	"proto",
+	"ps1",
+	"py",
+	"pyw",
+	"r",
+	"rb",
+	"rs",
+	"sass",
+	"scala",
+	"scss",
+	"sh",
+	"sol",
+	"sql",
+	"svelte",
 	"svg",
+	"swift",
+	"tf",
+	"tfvars",
+	"toml",
 	"ts",
-	"tsx",
 	"tsv",
+	"tsx",
 	"txt",
+	"vue",
 	"xml",
+	"xsd",
+	"xsl",
 	"yaml",
-	"yml"
+	"yml",
+	"zsh"
+]);
+const TEXT_FILE_NAMES = new Set([
+	".dockerignore",
+	".eslintignore",
+	".prettierignore",
+	".stylelintignore",
+	"brewfile",
+	"changelog",
+	"codeowners",
+	"dockerfile",
+	"gemfile",
+	"jenkinsfile",
+	"license",
+	"makefile",
+	"procfile",
+	"rakefile",
+	"readme"
 ]);
 const MIME_TYPES = {
 	png: "image/png",
@@ -82,17 +176,47 @@ function normalizeRelativePath(input) {
 	if (normalized.includes("\0") || normalized.split("/").some((part) => part === "..")) throw new FileServiceError(400, "Invalid file path");
 	return normalized.split("/").filter((part) => part && part !== ".").join("/");
 }
-function mimeType(name, directory) {
+function fileExtension(name) {
+	return name.includes(".") ? name.split(".").pop().toLowerCase() : "";
+}
+function isTextFileName(name) {
+	const normalized = name.toLowerCase();
+	const extension = fileExtension(normalized);
+	return TEXT_EXTENSIONS.has(extension) || TEXT_FILE_NAMES.has(normalized) || normalized.startsWith(".env.") || normalized.startsWith("dockerfile.");
+}
+function bufferLooksText(buffer) {
+	if (buffer.length === 0) return true;
+	let controlBytes = 0;
+	for (const byte of buffer) {
+		if (byte === 0) return false;
+		if ((byte < 8 || byte > 13 && byte < 32) && byte !== 27) controlBytes += 1;
+	}
+	return controlBytes / buffer.length < .01;
+}
+async function isTextFile(name, absolutePath) {
+	if (isTextFileName(name)) return true;
+	if (MIME_TYPES[fileExtension(name)]) return false;
+	const handle = await open(absolutePath, "r").catch(() => null);
+	if (!handle) return false;
+	try {
+		const buffer = Buffer.allocUnsafe(TEXT_SNIFF_BYTES);
+		const { bytesRead } = await handle.read(buffer, 0, buffer.length, 0);
+		return bufferLooksText(buffer.subarray(0, bytesRead));
+	} finally {
+		await handle.close();
+	}
+}
+function mimeType(name, directory, textFile) {
 	if (directory) return "inode/directory";
-	return MIME_TYPES[name.includes(".") ? name.split(".").pop().toLowerCase() : ""] ?? "application/octet-stream";
+	return MIME_TYPES[fileExtension(name)] ?? (textFile ? "text/plain" : "application/octet-stream");
 }
-function capabilities(name, directory, writable) {
+function capabilities(name, directory, writable, textFile) {
 	if (directory) return writable ? ["share", "upload"] : ["share"];
-	const extension = name.includes(".") ? name.split(".").pop().toLowerCase() : "";
+	const extension = fileExtension(name);
 	const result = ["download", "share"];
-	if (MIME_TYPES[extension] || TEXT_EXTENSIONS.has(extension)) result.unshift("preview");
+	if (MIME_TYPES[extension] || textFile) result.unshift("preview");
 	if (writable) {
-		if (TEXT_EXTENSIONS.has(extension)) result.push("edit");
+		if (textFile) result.push("edit");
 		result.push("delete");
 	}
 	return result;
@@ -146,6 +270,7 @@ async function fileResourceFromPath(space, absolutePath, displayPath = absoluteP
 	const relativePath = relative(await realpath(space.root), displayPath).split(sep).join("/");
 	const name = basename(displayPath);
 	const directory = info.isDirectory();
+	const textFile = !directory && await isTextFile(name, absolutePath);
 	return {
 		id: fileResourceId(space.id, relativePath),
 		spaceId: space.id,
@@ -153,11 +278,11 @@ async function fileResourceFromPath(space, absolutePath, displayPath = absoluteP
 		relativePath,
 		parentPath: dirname(relativePath).split(sep).join("/").replace(/^\.$/, ""),
 		kind: directory ? "directory" : "file",
-		mimeType: mimeType(name, directory),
+		mimeType: mimeType(name, directory, textFile),
 		size: info.size,
 		modifiedAt: Math.max(0, Math.round(info.mtimeMs)),
 		revision: `${revisionInfo.mtimeNs}:${revisionInfo.ctimeNs}:${revisionInfo.ino}:${revisionInfo.size}`,
-		capabilities: capabilities(name, directory, space.writable)
+		capabilities: capabilities(name, directory, space.writable, textFile)
 	};
 }
 var FileSpaceService = class {

package/dist/src/gateway/hono/lib/config-payload.d.ts

@@ -6,20 +6,13 @@ export declare function buildSafeMcpConfigForWeb(config: Config): {
     sessionIdleTtlMs?: number;
 };
 export declare function buildSafeBrowserConfigForWeb(browser: unknown): {
+    security?: unknown;
+    limits?: unknown;
+    observation?: unknown;
+    driver?: {
+        [x: string]: unknown;
+    };
     enabled: boolean;
-    headless: boolean;
-    allowPrivateUrls: boolean;
-    commandTimeout: number;
-    backend: unknown;
-    cloudProvider: unknown;
-    cloud: Record<string, unknown>;
-    cdpUrl: string;
-    extension: unknown;
-    cloakbrowser: unknown;
-    humanize: unknown;
-    humanPreset: unknown;
-    dialogPolicy: unknown;
-    dialogTimeoutSeconds: number;
 };
 /** Sanitized config snapshot for GET/PATCH `/api/config` (matches persisted `service.currentConfig`). */
 export declare function buildSafeWebConfigPayload(service: GatewayService, options?: {
@@ -192,20 +185,13 @@ export declare function buildSafeWebConfigPayload(service: GatewayService, optio
         skillsStoreBaseUrl: string;
     };
     browser: {
+        security?: unknown;
+        limits?: unknown;
+        observation?: unknown;
+        driver?: {
+            [x: string]: unknown;
+        };
         enabled: boolean;
-        headless: boolean;
-        allowPrivateUrls: boolean;
-        commandTimeout: number;
-        backend: unknown;
-        cloudProvider: unknown;
-        cloud: Record<string, unknown>;
-        cdpUrl: string;
-        extension: unknown;
-        cloakbrowser: unknown;
-        humanize: unknown;
-        humanPreset: unknown;
-        dialogPolicy: unknown;
-        dialogTimeoutSeconds: number;
     };
     session: {
         dmScope: "main" | "per-peer" | "per-channel-peer" | "per-account-channel-peer";

package/dist/src/gateway/hono/lib/config-payload.js

@@ -46,47 +46,18 @@ function buildSafeMcpConfigForWeb(config) {
 		servers: normalizeConfiguredMcpServers(mcp.servers)
 	};
 }
-function maskBrowserCloudConfigForWeb(cloud) {
-	if (!cloud || typeof cloud !== "object" || Array.isArray(cloud)) return null;
-	const raw = cloud;
-	const safe = {};
-	if (typeof raw.apiKey === "string" && raw.apiKey.trim()) safe.apiKey = maskSecretLength(raw.apiKey);
-	if (typeof raw.projectId === "string" && raw.projectId.trim()) safe.projectId = raw.projectId.trim();
-	if (typeof raw.region === "string" && raw.region.trim()) safe.region = raw.region.trim();
-	return Object.keys(safe).length > 0 ? safe : null;
-}
 function buildSafeBrowserConfigForWeb(browser) {
-	if (!browser || typeof browser !== "object") return {
-		enabled: false,
-		headless: false,
-		allowPrivateUrls: false,
-		commandTimeout: null,
-		backend: null,
-		cloudProvider: null,
-		cloud: null,
-		cdpUrl: null,
-		extension: null,
-		cloakbrowser: null,
-		humanize: null,
-		humanPreset: null,
-		dialogPolicy: null,
-		dialogTimeoutSeconds: null
-	};
+	if (!browser || typeof browser !== "object") return { enabled: false };
+	const raw = browser;
+	const rawDriver = raw.driver && typeof raw.driver === "object" && !Array.isArray(raw.driver) ? raw.driver : void 0;
+	const driver = rawDriver ? { ...rawDriver } : void 0;
+	if (driver?.kind === "remote" && typeof driver.apiKey === "string" && driver.apiKey.trim()) driver.apiKey = maskSecretLength(driver.apiKey);
 	return {
-		enabled: browser.enabled !== false,
-		headless: browser.headless === true,
-		allowPrivateUrls: browser.allowPrivateUrls === true,
-		commandTimeout: typeof browser.commandTimeout === "number" && Number.isFinite(browser.commandTimeout) ? Math.floor(browser.commandTimeout) : null,
-		backend: browser.backend === "local" || browser.backend === "cdp" || browser.backend === "cloud" || browser.backend === "extension" || browser.backend === "cloakbrowser" ? browser.backend : null,
-		cloudProvider: browser.cloudProvider === "browserbase" || browser.cloudProvider === "browser-use" ? browser.cloudProvider : null,
-		cloud: maskBrowserCloudConfigForWeb(browser.cloud),
-		cdpUrl: typeof browser.cdpUrl === "string" && browser.cdpUrl.trim() ? browser.cdpUrl.trim() : null,
-		extension: browser.extension && typeof browser.extension === "object" && !Array.isArray(browser.extension) ? browser.extension : null,
-		cloakbrowser: browser.cloakbrowser && typeof browser.cloakbrowser === "object" && !Array.isArray(browser.cloakbrowser) ? browser.cloakbrowser : null,
-		humanize: typeof browser.humanize === "boolean" ? browser.humanize : null,
-		humanPreset: browser.humanPreset === "default" || browser.humanPreset === "careful" ? browser.humanPreset : null,
-		dialogPolicy: browser.dialogPolicy === "must_respond" || browser.dialogPolicy === "auto_accept" || browser.dialogPolicy === "auto_dismiss" ? browser.dialogPolicy : null,
-		dialogTimeoutSeconds: typeof browser.dialogTimeoutSeconds === "number" && Number.isFinite(browser.dialogTimeoutSeconds) ? Math.floor(browser.dialogTimeoutSeconds) : null
+		enabled: raw.enabled === true,
+		...driver ? { driver } : {},
+		...raw.observation ? { observation: raw.observation } : {},
+		...raw.limits ? { limits: raw.limits } : {},
+		...raw.security ? { security: raw.security } : {}
 	};
 }
 /** Sanitized config snapshot for GET/PATCH `/api/config` (matches persisted `service.currentConfig`). */

package/dist/src/gateway/hono/routes/browser-automations.d.ts

@@ -0,0 +1,3 @@
+import type { Hono } from 'hono';
+import type { AuthenticatedRouteDeps } from './deps.js';
+export declare function registerBrowserAutomationRoutes(authenticated: Hono, deps: AuthenticatedRouteDeps): void;