@xopcai/xopc 0.0.251 → 0.0.253

package/dist/src/config/schema.d.ts

@@ -204,54 +204,54 @@ export declare const AgentsConfigSchema: z.ZodDefault<z.ZodObject<{
 }, z.core.$strict>>;
 export declare const BrowserConfigSchema: z.ZodDefault<z.ZodObject<{
     enabled: z.ZodDefault<z.ZodBoolean>;
-    backend: z.ZodDefault<z.ZodEnum<{
-        extension: "extension";
-        local: "local";
-        cdp: "cdp";
-        cloud: "cloud";
-        cloakbrowser: "cloakbrowser";
-    }>>;
-    headless: z.ZodOptional<z.ZodBoolean>;
-    allowPrivateUrls: z.ZodOptional<z.ZodBoolean>;
-    commandTimeout: z.ZodOptional<z.ZodNumber>;
-    cloudProvider: z.ZodOptional<z.ZodEnum<{
-        local: "local";
-        browserbase: "browserbase";
-        "browser-use": "browser-use";
-    }>>;
-    cloud: z.ZodOptional<z.ZodObject<{
+    driver: z.ZodDefault<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"extension">;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"playwright">;
+        headless: z.ZodDefault<z.ZodBoolean>;
+        executablePath: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"cdp">;
+        endpoint: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"remote">;
+        provider: z.ZodEnum<{
+            browserbase: "browserbase";
+            "browser-use": "browser-use";
+        }>;
         apiKey: z.ZodOptional<z.ZodString>;
         projectId: z.ZodOptional<z.ZodString>;
         region: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>], "kind">>;
+    observation: z.ZodDefault<z.ZodObject<{
+        maxNodes: z.ZodDefault<z.ZodNumber>;
+        maxCharacters: z.ZodDefault<z.ZodNumber>;
+        visualFallback: z.ZodDefault<z.ZodBoolean>;
     }, z.core.$strict>>;
-    cdpUrl: z.ZodOptional<z.ZodString>;
-    extension: z.ZodOptional<z.ZodObject<{
-        port: z.ZodOptional<z.ZodNumber>;
-        host: z.ZodOptional<z.ZodString>;
-        connectionTimeout: z.ZodOptional<z.ZodNumber>;
+    limits: z.ZodDefault<z.ZodObject<{
+        actionTimeoutMs: z.ZodDefault<z.ZodNumber>;
+        sessionTimeoutMs: z.ZodDefault<z.ZodNumber>;
+        maxSequenceLength: z.ZodDefault<z.ZodNumber>;
     }, z.core.$strict>>;
-    cloakbrowser: z.ZodOptional<z.ZodObject<{
-        keepOpen: z.ZodOptional<z.ZodBoolean>;
-        temporaryProfile: z.ZodOptional<z.ZodBoolean>;
-        cacheDir: z.ZodOptional<z.ZodString>;
-        binaryPath: z.ZodOptional<z.ZodString>;
-        timezone: z.ZodOptional<z.ZodString>;
-        locale: z.ZodOptional<z.ZodString>;
-        webrtcIp: z.ZodOptional<z.ZodString>;
-        fingerprintPlatform: z.ZodOptional<z.ZodString>;
-        extraArgs: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    security: z.ZodDefault<z.ZodObject<{
+        privateNetworks: z.ZodDefault<z.ZodLiteral<"deny">>;
+        allowedPrivateHosts: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        crossDomainNavigation: z.ZodDefault<z.ZodEnum<{
+            allow: "allow";
+            deny: "deny";
+            ask: "ask";
+        }>>;
+        uploads: z.ZodDefault<z.ZodEnum<{
+            allow: "allow";
+            deny: "deny";
+            ask: "ask";
+        }>>;
+        consequentialActions: z.ZodDefault<z.ZodEnum<{
+            allow: "allow";
+            deny: "deny";
+            ask: "ask";
+        }>>;
     }, z.core.$strict>>;
-    humanize: z.ZodOptional<z.ZodBoolean>;
-    humanPreset: z.ZodOptional<z.ZodEnum<{
-        default: "default";
-        careful: "careful";
-    }>>;
-    dialogPolicy: z.ZodOptional<z.ZodEnum<{
-        must_respond: "must_respond";
-        auto_dismiss: "auto_dismiss";
-        auto_accept: "auto_accept";
-    }>>;
-    dialogTimeoutSeconds: z.ZodOptional<z.ZodNumber>;
 }, z.core.$strict>>;
 export { TelegramTopicConfigSchema, TelegramGroupConfigSchema, TelegramAccountConfigSchema, TelegramConfigSchema, } from '../../extensions/telegram/src/config-schema.js';
 export type { TelegramConfig } from '../../extensions/telegram/src/config-schema.js';
@@ -1915,54 +1915,54 @@ export declare const ConfigSchema: z.ZodDefault<z.ZodObject<{
     }, z.core.$strip>>;
     browser: z.ZodDefault<z.ZodObject<{
         enabled: z.ZodDefault<z.ZodBoolean>;
-        backend: z.ZodDefault<z.ZodEnum<{
-            extension: "extension";
-            local: "local";
-            cdp: "cdp";
-            cloud: "cloud";
-            cloakbrowser: "cloakbrowser";
-        }>>;
-        headless: z.ZodOptional<z.ZodBoolean>;
-        allowPrivateUrls: z.ZodOptional<z.ZodBoolean>;
-        commandTimeout: z.ZodOptional<z.ZodNumber>;
-        cloudProvider: z.ZodOptional<z.ZodEnum<{
-            local: "local";
-            browserbase: "browserbase";
-            "browser-use": "browser-use";
-        }>>;
-        cloud: z.ZodOptional<z.ZodObject<{
+        driver: z.ZodDefault<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"extension">;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"playwright">;
+            headless: z.ZodDefault<z.ZodBoolean>;
+            executablePath: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"cdp">;
+            endpoint: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"remote">;
+            provider: z.ZodEnum<{
+                browserbase: "browserbase";
+                "browser-use": "browser-use";
+            }>;
             apiKey: z.ZodOptional<z.ZodString>;
             projectId: z.ZodOptional<z.ZodString>;
             region: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>], "kind">>;
+        observation: z.ZodDefault<z.ZodObject<{
+            maxNodes: z.ZodDefault<z.ZodNumber>;
+            maxCharacters: z.ZodDefault<z.ZodNumber>;
+            visualFallback: z.ZodDefault<z.ZodBoolean>;
         }, z.core.$strict>>;
-        cdpUrl: z.ZodOptional<z.ZodString>;
-        extension: z.ZodOptional<z.ZodObject<{
-            port: z.ZodOptional<z.ZodNumber>;
-            host: z.ZodOptional<z.ZodString>;
-            connectionTimeout: z.ZodOptional<z.ZodNumber>;
+        limits: z.ZodDefault<z.ZodObject<{
+            actionTimeoutMs: z.ZodDefault<z.ZodNumber>;
+            sessionTimeoutMs: z.ZodDefault<z.ZodNumber>;
+            maxSequenceLength: z.ZodDefault<z.ZodNumber>;
         }, z.core.$strict>>;
-        cloakbrowser: z.ZodOptional<z.ZodObject<{
-            keepOpen: z.ZodOptional<z.ZodBoolean>;
-            temporaryProfile: z.ZodOptional<z.ZodBoolean>;
-            cacheDir: z.ZodOptional<z.ZodString>;
-            binaryPath: z.ZodOptional<z.ZodString>;
-            timezone: z.ZodOptional<z.ZodString>;
-            locale: z.ZodOptional<z.ZodString>;
-            webrtcIp: z.ZodOptional<z.ZodString>;
-            fingerprintPlatform: z.ZodOptional<z.ZodString>;
-            extraArgs: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        security: z.ZodDefault<z.ZodObject<{
+            privateNetworks: z.ZodDefault<z.ZodLiteral<"deny">>;
+            allowedPrivateHosts: z.ZodDefault<z.ZodArray<z.ZodString>>;
+            crossDomainNavigation: z.ZodDefault<z.ZodEnum<{
+                allow: "allow";
+                deny: "deny";
+                ask: "ask";
+            }>>;
+            uploads: z.ZodDefault<z.ZodEnum<{
+                allow: "allow";
+                deny: "deny";
+                ask: "ask";
+            }>>;
+            consequentialActions: z.ZodDefault<z.ZodEnum<{
+                allow: "allow";
+                deny: "deny";
+                ask: "ask";
+            }>>;
         }, z.core.$strict>>;
-        humanize: z.ZodOptional<z.ZodBoolean>;
-        humanPreset: z.ZodOptional<z.ZodEnum<{
-            default: "default";
-            careful: "careful";
-        }>>;
-        dialogPolicy: z.ZodOptional<z.ZodEnum<{
-            must_respond: "must_respond";
-            auto_dismiss: "auto_dismiss";
-            auto_accept: "auto_accept";
-        }>>;
-        dialogTimeoutSeconds: z.ZodOptional<z.ZodNumber>;
     }, z.core.$strict>>;
     tunnel: z.ZodOptional<z.ZodDefault<z.ZodObject<{
         enabled: z.ZodDefault<z.ZodBoolean>;
@@ -2149,6 +2149,53 @@ export declare const ConfigSchema: z.ZodDefault<z.ZodObject<{
     experimental: z.ZodDefault<z.ZodObject<{
         workDiscoveryOnboarding: z.ZodDefault<z.ZodBoolean>;
     }, z.core.$strict>>;
+    platform: z.ZodDefault<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        mode: z.ZodLiteral<"standalone">;
+    }, z.core.$strict>, z.ZodObject<{
+        mode: z.ZodLiteral<"connected">;
+        url: z.ZodString;
+        workspaceId: z.ZodOptional<z.ZodString>;
+        discovery: z.ZodObject<{
+            schemaVersion: z.ZodLiteral<"1">;
+            platformId: z.ZodString;
+            displayName: z.ZodString;
+            deploymentMode: z.ZodEnum<{
+                development: "development";
+                private: "private";
+                cloud: "cloud";
+            }>;
+            region: z.ZodString;
+            endpoints: z.ZodObject<{
+                authorizationServer: z.ZodString;
+                controlApi: z.ZodString;
+                modelApi: z.ZodOptional<z.ZodString>;
+                storeApi: z.ZodOptional<z.ZodString>;
+                tunnelApi: z.ZodOptional<z.ZodString>;
+                shareApi: z.ZodOptional<z.ZodString>;
+                agentApi: z.ZodOptional<z.ZodString>;
+                a2aApi: z.ZodOptional<z.ZodString>;
+                realtime: z.ZodOptional<z.ZodString>;
+            }, z.core.$strict>;
+            capabilities: z.ZodRecord<z.ZodEnum<{
+                models: "models";
+                connectors: "connectors";
+                tunnels: "tunnels";
+                shares: "shares";
+                managedRuntime: "managedRuntime";
+                runtimeFleet: "runtimeFleet";
+                traceUpload: "traceUpload";
+                a2a: "a2a";
+            }>, z.ZodBoolean>;
+            protocols: z.ZodObject<{
+                xopc: z.ZodObject<{
+                    min: z.ZodString;
+                    max: z.ZodString;
+                }, z.core.$strict>;
+                mcp: z.ZodDefault<z.ZodArray<z.ZodString>>;
+                a2a: z.ZodDefault<z.ZodArray<z.ZodString>>;
+            }, z.core.$strict>;
+        }, z.core.$strict>;
+    }, z.core.$strict>], "mode">>;
     extensions: z.ZodDefault<z.ZodType<Record<string, unknown>, unknown, z.core.$ZodTypeInternals<Record<string, unknown>, unknown>>>;
     providers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
         baseUrl: z.ZodOptional<z.ZodString>;

package/dist/src/config/schema.js

@@ -1,10 +1,10 @@
 import { __esmMin } from "../../_virtual/_rolldown/runtime.js";
 import { AgentModelsOverrideSchema, AgentsConfigSchema as AgentsConfigSchema$1, DEFAULT_AGENT_MODEL_REF, ImageGenerationRouteSchema, ModelRouteSchema } from "../agent-config/schema.js";
 import { init_agent_config } from "../agent-config/index.js";
-import { checkCacheDir, init_cache_dir_policy } from "../browser/cache-dir-policy.js";
 import { DEFAULT_CONTEXT_COMPACTION_POLICY, UserContextConfigSchema, init_config } from "../user-context/config.js";
 import { init_default_model } from "./default-model.js";
 import { init_public_url, validatePublicUrl } from "./public-url.js";
+import { PlatformConfigSchema, init_contracts } from "../platform/contracts.js";
 import { TelegramAccountConfigSchema, TelegramConfigSchema, TelegramGroupConfigSchema, TelegramTopicConfigSchema, init_config_schema } from "../../extensions/telegram/src/config-schema.js";
 import { WeixinAccountConfigSchema, WeixinConfigSchema, init_config_schema as init_config_schema$1 } from "../../extensions/weixin/src/config-schema.js";
 import { z } from "zod";
@@ -37,13 +37,13 @@ function parseModelRef(ref) {
 		model: trimmed.slice(idx + 1).trim()
 	};
 }
-var AgentModelRefSchema, AgentImageGenerationModelSchema, AgentModelsSchema, AgentsConfigSchema, BrowserCloudConfigSchema, BrowserExtensionConfigSchema, BrowserCloakConfigSchema, BrowserConfigSchema, BindingMatchSchema, BindingRuleSchema, BindingsConfigSchema, SessionDmScopeSchema, SessionStorageConfigSchema, SessionResetModeSchema, SessionResetConfigSchema, SessionResetByTypeSchema, SessionScopeSchema, SessionConfigSchema, ChannelsConfigSchema, SearchProviderEntrySchema, WebSearchConfigSchema, WebsiteBlocklistSchema, WebToolsConfigSchema, ToolsConfigSchema, RuntimePreferenceSchema, RuntimeProvisionSchema, RuntimeVersionRequestSchema, LanguageRuntimeSchema, DEFAULT_RUNTIME_TOOLS_CONFIG, RuntimeToolsConfigSchema, GatewayAuthRateLimitSchema, GatewaySecuritySchema, GatewayTrustedProxySchema, GatewayAuthSchema, GatewayTailscaleConsentSchema, GatewayTailscaleSchema, GatewayRemoteSchema, GatewayTlsSchema, GatewayModeSchema, HeartbeatConfigSchema, GatewayChannelConnectDeferModeSchema, TunnelConsentSchema, TunnelConfigSchema, WorkspaceImportConfigSchema, WorkspaceConfigSchema, GatewayBindModeSchema, GatewayWebchatConfigSchema, GatewayConfigSchema, ModelsDevConfigSchema, ModelCatalogConfigSchema, SttProviderConfigCatchallSchema, STTProviderConfigSchema, STTFallbackConfigSchema, MediaUnderstandingCapabilitiesSchema, MediaUnderstandingModelSchema, STTConfigSchema, TtsProviderConfigCatchallSchema, TTSProviderConfigSchema, TTSFallbackConfigSchema, TTSModelOverridesConfigSchema, TTSEdgeConfigSchema, TTSSummarizationConfigSchema, TTSConfigSchema, VoiceRefinementConfigSchema, VoiceConfigSchema, MessagesConfigSchema, ToolsMediaAudioConfigSchema, ToolsMediaConfigSchema, ProviderAzureConfigSchema, ProviderRequestOverridesSchema, ProviderAuthConfigSchema, ProvidersConfigSchema, ExtensionSecurityConfigSchema, ExtensionSlotsConfigSchema, ExtensionsConfigSchema, UpdateAutoConfigSchema, UpdateConfigSchema, CommandsConfigSchema, TuiConfigSchema, McpHttpUrlSchema, ConnectorSecretReferenceSchema, McpConfigScalarSchema, McpOAuthConfigSchema, McpServerSchema, McpConfigSchema, ConnectorsConfigSchema, ExperimentalConfigSchema, ConfigSchema;
+var AgentModelRefSchema, AgentImageGenerationModelSchema, AgentModelsSchema, AgentsConfigSchema, BrowserDriverSchema, BrowserHostnameSchema, BrowserConfigSchema, BindingMatchSchema, BindingRuleSchema, BindingsConfigSchema, SessionDmScopeSchema, SessionStorageConfigSchema, SessionResetModeSchema, SessionResetConfigSchema, SessionResetByTypeSchema, SessionScopeSchema, SessionConfigSchema, ChannelsConfigSchema, SearchProviderEntrySchema, WebSearchConfigSchema, WebsiteBlocklistSchema, WebToolsConfigSchema, ToolsConfigSchema, RuntimePreferenceSchema, RuntimeProvisionSchema, RuntimeVersionRequestSchema, LanguageRuntimeSchema, DEFAULT_RUNTIME_TOOLS_CONFIG, RuntimeToolsConfigSchema, GatewayAuthRateLimitSchema, GatewaySecuritySchema, GatewayTrustedProxySchema, GatewayAuthSchema, GatewayTailscaleConsentSchema, GatewayTailscaleSchema, GatewayRemoteSchema, GatewayTlsSchema, GatewayModeSchema, HeartbeatConfigSchema, GatewayChannelConnectDeferModeSchema, TunnelConsentSchema, TunnelConfigSchema, WorkspaceImportConfigSchema, WorkspaceConfigSchema, GatewayBindModeSchema, GatewayWebchatConfigSchema, GatewayConfigSchema, ModelsDevConfigSchema, ModelCatalogConfigSchema, SttProviderConfigCatchallSchema, STTProviderConfigSchema, STTFallbackConfigSchema, MediaUnderstandingCapabilitiesSchema, MediaUnderstandingModelSchema, STTConfigSchema, TtsProviderConfigCatchallSchema, TTSProviderConfigSchema, TTSFallbackConfigSchema, TTSModelOverridesConfigSchema, TTSEdgeConfigSchema, TTSSummarizationConfigSchema, TTSConfigSchema, VoiceRefinementConfigSchema, VoiceConfigSchema, MessagesConfigSchema, ToolsMediaAudioConfigSchema, ToolsMediaConfigSchema, ProviderAzureConfigSchema, ProviderRequestOverridesSchema, ProviderAuthConfigSchema, ProvidersConfigSchema, ExtensionSecurityConfigSchema, ExtensionSlotsConfigSchema, ExtensionsConfigSchema, UpdateAutoConfigSchema, UpdateConfigSchema, CommandsConfigSchema, TuiConfigSchema, McpHttpUrlSchema, ConnectorSecretReferenceSchema, McpConfigScalarSchema, McpOAuthConfigSchema, McpServerSchema, McpConfigSchema, ConnectorsConfigSchema, ExperimentalConfigSchema, ConfigSchema;
 var init_schema = __esmMin((() => {
 	init_agent_config();
-	init_cache_dir_policy();
 	init_config();
 	init_default_model();
 	init_public_url();
+	init_contracts();
 	init_config_schema();
 	init_config_schema$1();
 	AgentModelRefSchema = ModelRouteSchema;
@@ -72,65 +72,99 @@ var init_schema = __esmMin((() => {
 			enabled: true
 		}]
 	});
-	BrowserCloudConfigSchema = z.object({
-		apiKey: z.string().optional(),
-		projectId: z.string().optional(),
-		region: z.string().optional()
-	}).strict().optional();
-	BrowserExtensionConfigSchema = z.object({
-		port: z.number().int().min(1024).max(65535).optional(),
-		host: z.string().min(1).optional(),
-		connectionTimeout: z.number().int().positive().optional()
-	}).strict().optional();
-	BrowserCloakConfigSchema = z.object({
-		keepOpen: z.boolean().optional(),
-		temporaryProfile: z.boolean().optional(),
-		cacheDir: z.string().optional().superRefine((value, ctx) => {
-			const result = checkCacheDir(value);
-			if (result.ok === false) ctx.addIssue({
-				code: "custom",
-				message: result.message
-			});
-		}),
-		binaryPath: z.string().optional(),
-		timezone: z.string().optional(),
-		locale: z.string().optional(),
-		webrtcIp: z.string().optional(),
-		fingerprintPlatform: z.string().optional(),
-		extraArgs: z.array(z.string()).optional()
-	}).strict().optional();
+	BrowserDriverSchema = z.discriminatedUnion("kind", [
+		z.object({ kind: z.literal("extension") }).strict(),
+		z.object({
+			kind: z.literal("playwright"),
+			headless: z.boolean().default(false),
+			executablePath: z.string().min(1).optional()
+		}).strict(),
+		z.object({
+			kind: z.literal("cdp"),
+			endpoint: z.string().url()
+		}).strict(),
+		z.object({
+			kind: z.literal("remote"),
+			provider: z.enum(["browserbase", "browser-use"]),
+			apiKey: z.string().optional(),
+			projectId: z.string().optional(),
+			region: z.string().optional()
+		}).strict()
+	]);
+	BrowserHostnameSchema = z.string().min(1).refine((value) => {
+		if (value !== value.toLowerCase() || value.includes("/") || value.includes(":") && !value.startsWith("[")) return false;
+		try {
+			return new URL(`http://${value}`).hostname === value;
+		} catch {
+			return false;
+		}
+	}, "Host must be one exact lowercase hostname or IP address.");
 	BrowserConfigSchema = z.object({
 		enabled: z.boolean().default(true),
-		backend: z.enum([
-			"local",
-			"cdp",
-			"cloud",
-			"extension",
-			"cloakbrowser"
-		]).default("extension"),
-		headless: z.boolean().optional(),
-		allowPrivateUrls: z.boolean().optional(),
-		commandTimeout: z.number().int().min(5).max(900).optional(),
-		cloudProvider: z.enum([
-			"local",
-			"browserbase",
-			"browser-use"
-		]).optional(),
-		cloud: BrowserCloudConfigSchema,
-		cdpUrl: z.string().optional(),
-		extension: BrowserExtensionConfigSchema,
-		cloakbrowser: BrowserCloakConfigSchema,
-		humanize: z.boolean().optional(),
-		humanPreset: z.enum(["default", "careful"]).optional(),
-		dialogPolicy: z.enum([
-			"must_respond",
-			"auto_dismiss",
-			"auto_accept"
-		]).optional(),
-		dialogTimeoutSeconds: z.number().int().positive().optional()
+		driver: BrowserDriverSchema.default({ kind: "extension" }),
+		observation: z.object({
+			maxNodes: z.number().int().min(20).max(500).default(180),
+			maxCharacters: z.number().int().min(1e3).max(5e4).default(12e3),
+			visualFallback: z.boolean().default(true)
+		}).strict().default({
+			maxNodes: 180,
+			maxCharacters: 12e3,
+			visualFallback: true
+		}),
+		limits: z.object({
+			actionTimeoutMs: z.number().int().min(1e3).max(12e4).default(3e4),
+			sessionTimeoutMs: z.number().int().min(6e4).max(36e5).default(9e5),
+			maxSequenceLength: z.number().int().min(1).max(10).default(5)
+		}).strict().default({
+			actionTimeoutMs: 3e4,
+			sessionTimeoutMs: 9e5,
+			maxSequenceLength: 5
+		}),
+		security: z.object({
+			privateNetworks: z.literal("deny").default("deny"),
+			allowedPrivateHosts: z.array(BrowserHostnameSchema).default([]),
+			crossDomainNavigation: z.enum([
+				"allow",
+				"ask",
+				"deny"
+			]).default("ask"),
+			uploads: z.enum([
+				"allow",
+				"ask",
+				"deny"
+			]).default("ask"),
+			consequentialActions: z.enum([
+				"allow",
+				"ask",
+				"deny"
+			]).default("ask")
+		}).strict().default({
+			privateNetworks: "deny",
+			allowedPrivateHosts: [],
+			crossDomainNavigation: "ask",
+			uploads: "ask",
+			consequentialActions: "ask"
+		})
 	}).strict().default({
 		enabled: true,
-		backend: "extension"
+		driver: { kind: "extension" },
+		observation: {
+			maxNodes: 180,
+			maxCharacters: 12e3,
+			visualFallback: true
+		},
+		limits: {
+			actionTimeoutMs: 3e4,
+			sessionTimeoutMs: 9e5,
+			maxSequenceLength: 5
+		},
+		security: {
+			privateNetworks: "deny",
+			allowedPrivateHosts: [],
+			crossDomainNavigation: "ask",
+			uploads: "ask",
+			consequentialActions: "ask"
+		}
 	});
 	BindingMatchSchema = z.object({
 		channel: z.string(),
@@ -991,6 +1025,7 @@ workDiscoveryOnboarding: z.boolean().default(true) }).strict().default({ workDis
 		mcp: McpConfigSchema,
 		connectors: ConnectorsConfigSchema,
 		experimental: ExperimentalConfigSchema,
+		platform: PlatformConfigSchema,
 		extensions: ExtensionsConfigSchema.default({}),
 		/** Per-vendor capability provider config (image / audio / video). */
 		providers: ProvidersConfigSchema.optional(),
@@ -1108,7 +1143,24 @@ workDiscoveryOnboarding: z.boolean().default(true) }).strict().default({ workDis
 		},
 		browser: {
 			enabled: true,
-			backend: "extension"
+			driver: { kind: "extension" },
+			observation: {
+				maxNodes: 180,
+				maxCharacters: 12e3,
+				visualFallback: true
+			},
+			limits: {
+				actionTimeoutMs: 3e4,
+				sessionTimeoutMs: 9e5,
+				maxSequenceLength: 5
+			},
+			security: {
+				privateNetworks: "deny",
+				allowedPrivateHosts: [],
+				crossDomainNavigation: "ask",
+				uploads: "ask",
+				consequentialActions: "ask"
+			}
 		},
 		tools: { web: { search: {
 			maxResults: 5,
@@ -1116,6 +1168,7 @@ workDiscoveryOnboarding: z.boolean().default(true) }).strict().default({ workDis
 		} } },
 		runtimeTools: DEFAULT_RUNTIME_TOOLS_CONFIG,
 		experimental: { workDiscoveryOnboarding: true },
+		platform: { mode: "standalone" },
 		extensions: {
 			allow: [],
 			security: {

package/dist/src/connectors/composio-sessions.js

@@ -97,9 +97,8 @@ var ComposioSessionsAdapter = class {
 				return new ManagedComposioClient();
 			}
 			let Composio;
-			let PiProvider;
 			try {
-				[{Composio}, {PiProvider}] = await Promise.all([import("@composio/core"), import("@composio/experimental")]);
+				({Composio} = await import("@composio/core"));
 			} catch (cause) {
 				throw new Error("The xopc installation is missing the bundled Composio runtime. Reinstall @xopcai/xopc and restart the gateway.", { cause });
 			}
@@ -110,7 +109,6 @@ var ComposioSessionsAdapter = class {
 				dangerouslyAllowAutoUploadDownloadFiles: Boolean(options.fileDownloadDir),
 				fileUploadDirs: false,
 				...options.fileDownloadDir ? { fileDownloadDir: options.fileDownloadDir } : {},
-				provider: new PiProvider(),
 				host: "xopc"
 			});
 			client.mode = "byok";

package/dist/src/extensions/lockfile.js

@@ -1,7 +1,7 @@
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
-import { init_write_file_atomic, writeTextAtomic } from "../infra/write-file-atomic.js";
 import { init_paths, resolveExtensionsDir, resolveExtensionsLockPath } from "../config/paths.js";
+import { init_write_file_atomic, writeTextAtomic } from "../infra/write-file-atomic.js";
 import { dirname, join } from "path";
 import { existsSync } from "fs";
 import { mkdir, readFile } from "fs/promises";

package/dist/src/extensions/marketplace.js

@@ -1,9 +1,11 @@
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
+import { init_resolution, resolveConnectedPlatformEndpoint } from "../platform/resolution.js";
 import { init_loader, loadConfig } from "../config/loader.js";
 //#region src/extensions/marketplace.ts
 init_loader();
 init_logger();
+init_resolution();
 const log = createLogger("ExtensionMarketplace");
 const DEFAULT_STORE_BASE = "https://store.xopc.ai";
 const CACHE_TTL_MS = 300 * 1e3;
@@ -24,6 +26,8 @@ function normalizeStoreBaseUrl() {
 	if (env) try {
 		return new URL(env).toString().replace(/\/$/, "");
 	} catch {}
+	const fromPlatform = resolveConnectedPlatformEndpoint("storeApi");
+	if (fromPlatform) return fromPlatform.replace(/\/+$/, "");
 	try {
 		const fromCfg = loadConfig().gateway?.skillsStoreBaseUrl?.trim();
 		if (fromCfg) try {

package/dist/src/gateway/agents-admin.js

@@ -1,6 +1,6 @@
 import { init_agent_scope, listAgentEntries, normalizeAgentId, resolveAgentDir, resolveAgentProfileDir, resolveAgentWorkspaceDir, resolveDefaultAgentId, resolveUserPath, validateAgentIdForNewAgent } from "../agent/agent-scope.js";
-import { WORKSPACE_FILES, init_paths } from "../config/paths.js";
 import { resolveEffectiveAgentProfile } from "../config/agent-profile.js";
+import { WORKSPACE_FILES, init_paths } from "../config/paths.js";
 import { AGENT_PROFILE_MARKDOWN_SYSTEM_FILES, REQUIRED_AGENT_PROFILE_MARKDOWN_FILE_SET } from "../agent/context/workspace.js";
 import { isPathUnderWorkspace, resolveWorkspaceSafePath } from "./workspace-editor-path.js";
 import { seedAgentProfileMarkdownFiles } from "../agent/context/workspace-seed.js";

package/dist/src/gateway/chat-stream/mapper.js

@@ -95,9 +95,13 @@ var ChatStreamMapper = class {
 			})];
 			case "clarify_request": return [this.make("clarify_request", {
 				requestId: String(event.requestId ?? ""),
+				kind: event.kind === "approval" ? "approval" : "input",
 				question: String(event.question ?? ""),
 				choices: Array.isArray(event.choices) ? event.choices.filter((x) => typeof x === "string") : void 0,
-				default: typeof event.default === "string" ? event.default : void 0,
+				suggestedAnswer: typeof event.suggestedAnswer === "string" ? event.suggestedAnswer : void 0,
+				version: typeof event.version === "number" ? event.version : 1,
+				createdAt: typeof event.createdAt === "number" ? event.createdAt : Date.now(),
+				expiresAt: typeof event.expiresAt === "number" ? event.expiresAt : void 0,
 				petFeedback: createPetFeedback("clarify")
 			})];
 			case "turn_outcome": {

package/dist/src/gateway/chat-stream/protocol.d.ts

@@ -200,9 +200,13 @@ export type TtsAudioEvent = ChatStreamEnvelope<'tts_audio', {
 }>;
 export type ClarifyRequestEvent = ChatStreamEnvelope<'clarify_request', {
     requestId: string;
+    kind: 'input' | 'approval';
     question: string;
     choices?: string[];
-    default?: string;
+    suggestedAnswer?: string;
+    version: number;
+    createdAt: number;
+    expiresAt?: number;
     petFeedback: PetFeedback;
 }>;
 export type RunEndEvent = ChatStreamEnvelope<'run_end', {

package/dist/src/gateway/clarify-runtime.d.ts

@@ -1,5 +1,7 @@
-import type { ClarifyBridge } from './clarify-bridge.js';
-export declare function registerClarifyBridge(bridge: ClarifyBridge | null): void;
-export declare function submitClarifyResponseFromChannel(requestId: string, answer: string): boolean;
-export declare function submitClarifyChoiceFromChannel(requestId: string, choiceIndex: number): boolean;
-export declare function tryConsumeTelegramClarifyFreeText(sessionKey: string, text: string): boolean;
+export type ClarificationChannelRuntime = {
+    answerChoice(requestId: string, choiceIndex: number, idempotencyKey: string): boolean;
+    answerText(sessionKey: string, text: string, idempotencyKey: string): boolean;
+};
+export declare function registerClarificationChannelRuntime(next: ClarificationChannelRuntime | null): void;
+export declare function answerClarificationChoiceFromChannel(requestId: string, choiceIndex: number, idempotencyKey: string): boolean;
+export declare function answerClarificationTextFromChannel(sessionKey: string, text: string, idempotencyKey: string): boolean;

package/dist/src/gateway/clarify-runtime.js

@@ -1,16 +1,13 @@
 //#region src/gateway/clarify-runtime.ts
-let bridgeRef = null;
-function registerClarifyBridge(bridge) {
-	bridgeRef = bridge;
+let runtime = null;
+function registerClarificationChannelRuntime(next) {
+	runtime = next;
 }
-function submitClarifyResponseFromChannel(requestId, answer) {
-	return bridgeRef?.handleResponse(requestId, answer) ?? false;
+function answerClarificationChoiceFromChannel(requestId, choiceIndex, idempotencyKey) {
+	return runtime?.answerChoice(requestId, choiceIndex, idempotencyKey) ?? false;
 }
-function submitClarifyChoiceFromChannel(requestId, choiceIndex) {
-	return bridgeRef?.handleChoiceCallback(requestId, choiceIndex) ?? false;
-}
-function tryConsumeTelegramClarifyFreeText(sessionKey, text) {
-	return bridgeRef?.tryConsumeFreeTextReply(sessionKey, text) ?? false;
+function answerClarificationTextFromChannel(sessionKey, text, idempotencyKey) {
+	return runtime?.answerText(sessionKey, text, idempotencyKey) ?? false;
 }
 //#endregion
-export { registerClarifyBridge, submitClarifyChoiceFromChannel, submitClarifyResponseFromChannel, tryConsumeTelegramClarifyFreeText };
+export { answerClarificationChoiceFromChannel, answerClarificationTextFromChannel, registerClarificationChannelRuntime };

package/dist/src/gateway/ephemeral-clarification-waiter.d.ts

@@ -0,0 +1,17 @@
+import type { ClarifyRequestPayload } from '../agent/tools/clarify-tool.js';
+export type ClarificationStreamEvent = {
+    type: string;
+} & Record<string, unknown>;
+/** In-memory waiter exclusively for caller-owned ephemeral runs such as side chat. */
+export declare class EphemeralClarificationWaiter {
+    private readonly pending;
+    start(input: {
+        runId: string;
+        publish: (event: ClarificationStreamEvent) => void;
+        request: ClarifyRequestPayload;
+        beforeResponse?: () => boolean;
+    }): Promise<string>;
+    answer(requestId: string, answer: string): boolean;
+    cancelForRun(runId: string): void;
+    dispose(): void;
+}