@xopcai/xopc 0.0.285 → 0.0.286

package/dist/src/automations/domain/types.d.ts

@@ -116,7 +116,7 @@ export interface AutomationRun {
     durationMs?: number;
     summary?: string;
     error?: string;
-    sessionKey?: string;
+    conversationId?: string;
     workflowRunId?: string;
     model?: string;
     deadlineAtMs?: number;
@@ -164,7 +164,7 @@ export interface AutomationMetrics {
 }
 export interface PrepareAutomationAgentSessionInput {
     automationName?: string;
-    sessionKey: string;
+    conversationId: string;
     projectId?: string;
     agentId: string;
     peerId: string;
@@ -174,17 +174,17 @@ export interface PrepareAutomationAgentSessionInput {
 export interface AutomationDeps {
     agentService?: {
         sessionConfig?: {
-            applyAutomationWorkingDirectory?: (sessionKey: string, workingDirectory: string | undefined) => Promise<void>;
-            applyAutomationModelOverride?: (sessionKey: string, model: string | undefined) => Promise<boolean>;
+            applyAutomationWorkingDirectory?: (conversationId: string, workingDirectory: string | undefined) => Promise<void>;
+            applyAutomationModelOverride?: (conversationId: string, model: string | undefined) => Promise<boolean>;
         };
         turnDispatcher?: {
-            processDirect: (message: string, sessionKey: string, origin: TurnOrigin, attachments?: unknown[], thinking?: string, options?: {
+            processDirect: (message: string, conversationId: string, origin: TurnOrigin, attachments?: unknown[], thinking?: string, options?: {
                 signal?: AbortSignal;
                 runId?: string;
                 deadlineAtMs?: number;
             }) => Promise<string>;
         };
-        getModelForSession?: (sessionKey: string) => string | undefined;
+        getModelForSession?: (conversationId: string) => string | undefined;
     };
     getDefaultAgentId?: () => string;
     prepareAgentSession?: (input: PrepareAutomationAgentSessionInput) => Promise<void>;
@@ -212,7 +212,7 @@ export interface AutomationActionTask {
     status: 'succeeded' | 'failed' | 'timeout' | 'cancelled';
     summary?: string;
     error?: string;
-    sessionKey?: string;
+    conversationId?: string;
     workflowRunId?: string;
     model?: string;
     deadlineAtMs?: number;

package/dist/src/automations/domain/validation.js

@@ -1,7 +1,9 @@
 import { TaskCommandSchema } from "../../../packages/gateway-contract/src/tasks.js";
+import { init_src } from "../../../packages/gateway-contract/src/index.js";
 import { z } from "zod";
 import { CronExpressionParser } from "cron-parser";
 //#region src/automations/domain/validation.ts
+init_src();
 const nonEmptyString = z.string().trim().min(1);
 const optionalTrimmedString = (max) => z.preprocess((value) => {
 	if (value == null) return void 0;

package/dist/src/automations/service/action-executor.js

@@ -1,7 +1,7 @@
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
 import { init_agent_scope, normalizeAgentId } from "../../agent/agent-scope.js";
-import { buildSessionKey, init_session_key } from "../../routing/session-key.js";
+import { init_session_key, resolveConversationId } from "../../routing/session-key.js";
 import { resolveAutomationTimeoutSeconds } from "../domain/defaults.js";
 //#region src/automations/service/action-executor.ts
 init_agent_scope();
@@ -158,7 +158,7 @@ var AutomationActionExecutor = class {
 		};
 		const agentId = normalizeAgentId(action.agentId || this.deps.getDefaultAgentId?.() || "main");
 		const peerId = automation.conversationMode === "continuous" ? automation.id : `${automation.id}-${run.id}`;
-		const sessionKey = buildSessionKey({
+		const conversationId = resolveConversationId({
 			agentId,
 			source: "automation",
 			accountId: "default",
@@ -166,27 +166,27 @@ var AutomationActionExecutor = class {
 			peerId
 		});
 		await hooks.onRunPatch?.({
-			sessionKey,
+			conversationId,
 			currentPhase: "action"
 		});
 		await this.deps.prepareAgentSession?.({
 			automationName: automation.name,
-			sessionKey,
+			conversationId,
 			projectId: automation.projectId,
 			agentId,
 			peerId,
 			automationId: automation.id,
 			runId: run.id
 		});
-		await agentService.sessionConfig?.applyAutomationWorkingDirectory?.(sessionKey, automation.projectId ? void 0 : action.workingDirectory);
+		await agentService.sessionConfig?.applyAutomationWorkingDirectory?.(conversationId, automation.projectId ? void 0 : action.workingDirectory);
 		if (agentService.sessionConfig?.applyAutomationModelOverride) {
-			if (!await agentService.sessionConfig.applyAutomationModelOverride(sessionKey, action.model) && action.model) log.warn({
+			if (!await agentService.sessionConfig.applyAutomationModelOverride(conversationId, action.model) && action.model) log.warn({
 				automationId: automation.id,
-				sessionKey,
+				conversationId,
 				model: action.model
 			}, "Automation model override invalid; using agent default");
 		}
-		const response = await agentService.turnDispatcher.processDirect(buildSafetyInstruction(automation, action.instruction), sessionKey, {
+		const response = await agentService.turnDispatcher.processDirect(buildSafetyInstruction(automation, action.instruction), conversationId, {
 			type: "system",
 			source: "automation"
 		}, void 0, void 0, {
@@ -194,11 +194,11 @@ var AutomationActionExecutor = class {
 			runId: run.id,
 			deadlineAtMs
 		});
-		const model = agentService.getModelForSession?.(sessionKey);
+		const model = agentService.getModelForSession?.(conversationId);
 		return {
 			status: "succeeded",
 			summary: response.slice(0, 4e3),
-			sessionKey,
+			conversationId,
 			model
 		};
 	}
@@ -240,14 +240,14 @@ var AutomationActionExecutor = class {
 			error: result.message
 		};
 		await hooks.onRunPatch?.({
-			sessionKey: result.sessionKey,
+			conversationId: result.conversationId,
 			workflowRunId: result.runId,
 			currentPhase: "action"
 		});
 		if (!workflowRunService.readWorkflowRunView) return {
 			status: "succeeded",
 			summary: `Started workflow run ${result.runId}`,
-			sessionKey: result.sessionKey,
+			conversationId: result.conversationId,
 			workflowRunId: result.runId
 		};
 		while (!signal.aborted) {
@@ -260,13 +260,13 @@ var AutomationActionExecutor = class {
 			if (workflowStatus === "succeeded") return {
 				status: "succeeded",
 				summary: `Workflow run ${result.runId} completed`,
-				sessionKey: result.sessionKey,
+				conversationId: result.conversationId,
 				workflowRunId: result.runId
 			};
 			if (workflowStatus === "failed" || workflowStatus === "cancelled" || workflowStatus === "timeout") return {
 				status: workflowStatus,
 				error: view.run.error?.message ?? `Workflow run ${result.runId} ${workflowStatus}`,
-				sessionKey: result.sessionKey,
+				conversationId: result.conversationId,
 				workflowRunId: result.runId
 			};
 			await waitForSignalOrDelay(signal, 500);
@@ -279,7 +279,7 @@ var AutomationActionExecutor = class {
 		return {
 			status: "cancelled",
 			error: "Parent automation stopped while the workflow was running",
-			sessionKey: result.sessionKey,
+			conversationId: result.conversationId,
 			workflowRunId: result.runId
 		};
 	}

package/dist/src/automations/service/automation-service.js

@@ -1,6 +1,6 @@
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
-import { runSqliteWriteTransaction } from "../../storage/sqlite/transaction.js";
+import { init_transaction, runSqliteWriteTransaction } from "../../storage/sqlite/transaction.js";
 import { computeNextAutomationRunAtMs, timerDelayUntil } from "../domain/schedule.js";
 import { AutomationSchema, CreateAutomationSchema, UpdateAutomationSchema } from "../domain/validation.js";
 import { AutomationActionExecutor } from "./action-executor.js";
@@ -10,6 +10,7 @@ import "../storage/index.js";
 import { randomUUID } from "node:crypto";
 //#region src/automations/service/automation-service.ts
 init_logger();
+init_transaction();
 const log = createLogger("AutomationService");
 const DEFAULT_MAX_CONCURRENT_RUNS = 5;
 const MISSED_RUN_STAGGER_MS = 5e3;
@@ -372,7 +373,7 @@ var AutomationService = class {
 			this.appendRunEvent(run, status === "succeeded" ? "action.completed" : "action.failed", status === "succeeded" ? `${automation.action.kind} action completed` : `${automation.action.kind} action ${status}`, {
 				summary: task.summary,
 				error: task.error,
-				sessionKey: task.sessionKey ?? run.sessionKey,
+				conversationId: task.conversationId ?? run.conversationId,
 				workflowRunId: task.workflowRunId,
 				model: task.model
 			});
@@ -381,7 +382,7 @@ var AutomationService = class {
 				status,
 				summary: task.summary,
 				error,
-				sessionKey: task.sessionKey ?? run.sessionKey,
+				conversationId: task.conversationId ?? run.conversationId,
 				workflowRunId: task.workflowRunId,
 				model: task.model,
 				deadlineAtMs: task.deadlineAtMs ?? run.deadlineAtMs,

package/dist/src/automations/storage/automation-repository.js

@@ -1,6 +1,7 @@
-import { getSqliteDatabase, runSqliteWriteTransaction } from "../../storage/sqlite/transaction.js";
+import { getSqliteDatabase, init_transaction, runSqliteWriteTransaction } from "../../storage/sqlite/transaction.js";
 import { AutomationSchema } from "../domain/validation.js";
 //#region src/automations/storage/automation-repository.ts
+init_transaction();
 function parseJson(value) {
 	if (!value) return void 0;
 	return JSON.parse(value);

package/dist/src/automations/storage/automation-run-repository.js

@@ -1,5 +1,6 @@
-import { getSqliteDatabase, runSqliteWriteTransaction } from "../../storage/sqlite/transaction.js";
+import { getSqliteDatabase, init_transaction, runSqliteWriteTransaction } from "../../storage/sqlite/transaction.js";
 //#region src/automations/storage/automation-run-repository.ts
+init_transaction();
 const MAX_RUNS_PER_AUTOMATION = 2e3;
 const TRIM_TO_RUNS = 1500;
 function rowToRun(row) {
@@ -17,7 +18,7 @@ function rowToRun(row) {
 		durationMs: row.duration_ms ?? void 0,
 		summary: row.summary ?? void 0,
 		error: row.error ?? void 0,
-		sessionKey: row.session_key ?? void 0,
+		conversationId: row.conversation_id ?? void 0,
 		workflowRunId: row.workflow_run_id ?? void 0,
 		model: row.model ?? void 0,
 		deadlineAtMs: row.deadline_at_ms ?? void 0,
@@ -66,11 +67,11 @@ function saveAutomationRun(run) {
 		db.prepare(`INSERT OR REPLACE INTO automation_runs (
         run_id, automation_id, automation_name, status, trigger_snapshot_json,
         action_snapshot_json, manual, created_at_ms, started_at_ms, ended_at_ms,
-        duration_ms, summary, error, session_key, workflow_run_id, model,
+        duration_ms, summary, error, conversation_id, workflow_run_id, model,
         deadline_at_ms, current_phase, cancel_requested_at_ms, cancel_confirmed_at_ms,
         termination_json, heartbeat_at_ms, lease_owner, lease_expires_at_ms,
         attempt_number, root_run_id, read_at_ms
-      ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`).run(run.id, run.automationId, run.automationName, run.status, JSON.stringify(run.triggerSnapshot), JSON.stringify(run.actionSnapshot), run.manual ? 1 : 0, run.createdAtMs, run.startedAtMs ?? null, run.endedAtMs ?? null, run.durationMs ?? null, run.summary ?? null, run.error ?? null, run.sessionKey ?? null, run.workflowRunId ?? null, run.model ?? null, run.deadlineAtMs ?? null, run.currentPhase ?? null, run.cancelRequestedAtMs ?? null, run.cancelConfirmedAtMs ?? null, run.termination ? JSON.stringify(run.termination) : null, run.heartbeatAtMs ?? null, run.leaseOwner ?? null, run.leaseExpiresAtMs ?? null, run.attemptNumber ?? 1, run.rootRunId ?? run.id, run.readAtMs ?? null);
+      ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`).run(run.id, run.automationId, run.automationName, run.status, JSON.stringify(run.triggerSnapshot), JSON.stringify(run.actionSnapshot), run.manual ? 1 : 0, run.createdAtMs, run.startedAtMs ?? null, run.endedAtMs ?? null, run.durationMs ?? null, run.summary ?? null, run.error ?? null, run.conversationId ?? null, run.workflowRunId ?? null, run.model ?? null, run.deadlineAtMs ?? null, run.currentPhase ?? null, run.cancelRequestedAtMs ?? null, run.cancelConfirmedAtMs ?? null, run.termination ? JSON.stringify(run.termination) : null, run.heartbeatAtMs ?? null, run.leaseOwner ?? null, run.leaseExpiresAtMs ?? null, run.attemptNumber ?? 1, run.rootRunId ?? run.id, run.readAtMs ?? null);
 		trimRuns(db, run.automationId);
 	});
 }
@@ -88,7 +89,7 @@ function listAutomationRunEvents(runId) {
 function getAutomationRun(runId) {
 	const row = getSqliteDatabase().prepare(`SELECT run_id, automation_id, automation_name, status, trigger_snapshot_json,
               action_snapshot_json, manual, created_at_ms, started_at_ms, ended_at_ms,
-              duration_ms, summary, error, session_key, workflow_run_id, model,
+              duration_ms, summary, error, conversation_id, workflow_run_id, model,
               deadline_at_ms, current_phase, cancel_requested_at_ms, cancel_confirmed_at_ms,
               termination_json, heartbeat_at_ms, lease_owner, lease_expires_at_ms,
               attempt_number, root_run_id, read_at_ms
@@ -101,7 +102,7 @@ function listAutomationRuns(options) {
 	const db = getSqliteDatabase();
 	const base = `SELECT run_id, automation_id, automation_name, status, trigger_snapshot_json,
                        action_snapshot_json, manual, created_at_ms, started_at_ms, ended_at_ms,
-                       duration_ms, summary, error, session_key, workflow_run_id, model,
+                       duration_ms, summary, error, conversation_id, workflow_run_id, model,
                        deadline_at_ms, current_phase, cancel_requested_at_ms, cancel_confirmed_at_ms,
                        termination_json, heartbeat_at_ms, lease_owner, lease_expires_at_ms,
                        attempt_number, root_run_id, read_at_ms
@@ -110,7 +111,7 @@ function listAutomationRuns(options) {
 	if (options?.automationId) rows = db.prepare(`${base} WHERE automation_id = ? ORDER BY created_at_ms DESC LIMIT ?`).all(options.automationId, limit);
 	else if (options?.projectId) rows = db.prepare(`SELECT r.run_id, r.automation_id, r.automation_name, r.status, r.trigger_snapshot_json,
               r.action_snapshot_json, r.manual, r.created_at_ms, r.started_at_ms, r.ended_at_ms,
-              r.duration_ms, r.summary, r.error, r.session_key, r.workflow_run_id, r.model,
+              r.duration_ms, r.summary, r.error, r.conversation_id, r.workflow_run_id, r.model,
               r.deadline_at_ms, r.current_phase, r.cancel_requested_at_ms, r.cancel_confirmed_at_ms,
               r.termination_json, r.heartbeat_at_ms, r.lease_owner, r.lease_expires_at_ms,
               r.attempt_number, r.root_run_id, r.read_at_ms
@@ -136,7 +137,7 @@ function listAutomationRunsForProductEvent(options) {
 	}
 	return getSqliteDatabase().prepare(`SELECT r.run_id, r.automation_id, r.automation_name, r.status, r.trigger_snapshot_json,
               r.action_snapshot_json, r.manual, r.created_at_ms, r.started_at_ms, r.ended_at_ms,
-              r.duration_ms, r.summary, r.error, r.session_key, r.workflow_run_id, r.model,
+              r.duration_ms, r.summary, r.error, r.conversation_id, r.workflow_run_id, r.model,
               r.deadline_at_ms, r.current_phase, r.cancel_requested_at_ms, r.cancel_confirmed_at_ms,
               r.termination_json, r.heartbeat_at_ms, r.lease_owner, r.lease_expires_at_ms,
               r.attempt_number, r.root_run_id, r.read_at_ms,

package/dist/src/browser/native-messaging-host.js

@@ -1,5 +1,6 @@
-import { closeXopcDatabase, openXopcDatabase } from "../storage/sqlite/connection.js";
+import { closeXopcDatabase, init_connection, openXopcDatabase } from "../storage/sqlite/connection.js";
 import { devicePairingInvitationPayloadSchema, formatBrowserPairingInvitation } from "../../packages/gateway-contract/src/device-pairing.js";
+import { init_src } from "../../packages/gateway-contract/src/index.js";
 import { getGatewayIdentityPublicKeyRaw, getOrCreateGatewayIdentity } from "../storage/sqlite/gateway-identity-repository.js";
 import { createDevicePairingSetup } from "../storage/sqlite/device-pairing-repository.js";
 import { init_loader, loadConfig } from "../config/loader.js";
@@ -7,7 +8,9 @@ import { browserEnrollmentPublicKeyThumbprint } from "./enrollment.js";
 import { BROWSER_EXTENSION_ID, BROWSER_NATIVE_HOST_NAME } from "./extension-identity.js";
 import os from "node:os";
 //#region src/browser/native-messaging-host.ts
+init_src();
 init_loader();
+init_connection();
 function gatewayLoopbackUrl(port) {
 	return `http://127.0.0.1:${port}`;
 }

package/dist/src/browser/policy/approval-store.d.ts

@@ -2,7 +2,7 @@ import type { BrowserActionInput, BrowserRiskLevel } from '@xopcai/browser-contr
 export type BrowserApprovalStatus = 'pending' | 'approved' | 'denied' | 'consumed' | 'expired';
 export interface BrowserApproval {
     id: string;
-    sessionKey: string;
+    conversationId: string;
     risk: BrowserRiskLevel;
     action: BrowserActionInput['action'];
     summary: string;
@@ -11,7 +11,7 @@ export interface BrowserApproval {
     createdAt: string;
     expiresAt: string;
 }
-export declare function createBrowserApproval(sessionKey: string, input: BrowserActionInput, risk: BrowserRiskLevel, summary: string): BrowserApproval;
-export declare function listBrowserApprovals(sessionKey?: string): BrowserApproval[];
+export declare function createBrowserApproval(conversationId: string, input: BrowserActionInput, risk: BrowserRiskLevel, summary: string): BrowserApproval;
+export declare function listBrowserApprovals(conversationId?: string): BrowserApproval[];
 export declare function decideBrowserApproval(id: string, decision: 'approved' | 'denied'): BrowserApproval | undefined;
-export declare function consumeBrowserApproval(id: string | undefined, sessionKey: string, input: BrowserActionInput): boolean;
+export declare function consumeBrowserApproval(id: string | undefined, conversationId: string, input: BrowserActionInput): boolean;

package/dist/src/browser/policy/approval-store.js

@@ -2,15 +2,15 @@ import { createHash, randomUUID } from "node:crypto";
 //#region src/browser/policy/approval-store.ts
 const TTL_MS = 600 * 1e3;
 const approvals = /* @__PURE__ */ new Map();
-function createBrowserApproval(sessionKey, input, risk, summary) {
+function createBrowserApproval(conversationId, input, risk, summary) {
 	expireApprovals();
 	const argumentsHash = browserArgumentsHash(input);
-	const existing = [...approvals.values()].find((approval) => approval.sessionKey === sessionKey && approval.argumentsHash === argumentsHash && approval.status === "pending");
+	const existing = [...approvals.values()].find((approval) => approval.conversationId === conversationId && approval.argumentsHash === argumentsHash && approval.status === "pending");
 	if (existing) return existing;
 	const now = Date.now();
 	const approval = {
 		id: randomUUID(),
-		sessionKey,
+		conversationId,
 		risk,
 		action: input.action,
 		summary,
@@ -22,9 +22,9 @@ function createBrowserApproval(sessionKey, input, risk, summary) {
 	approvals.set(approval.id, approval);
 	return approval;
 }
-function listBrowserApprovals(sessionKey) {
+function listBrowserApprovals(conversationId) {
 	expireApprovals();
-	return [...approvals.values()].filter((approval) => !sessionKey || approval.sessionKey === sessionKey).sort((left, right) => right.createdAt.localeCompare(left.createdAt));
+	return [...approvals.values()].filter((approval) => !conversationId || approval.conversationId === conversationId).sort((left, right) => right.createdAt.localeCompare(left.createdAt));
 }
 function decideBrowserApproval(id, decision) {
 	expireApprovals();
@@ -33,12 +33,12 @@ function decideBrowserApproval(id, decision) {
 	approval.status = decision;
 	return approval;
 }
-function consumeBrowserApproval(id, sessionKey, input) {
+function consumeBrowserApproval(id, conversationId, input) {
 	expireApprovals();
 	const argumentsHash = browserArgumentsHash(input);
-	const approval = id ? approvals.get(id) : [...approvals.values()].find((candidate) => candidate.sessionKey === sessionKey && candidate.argumentsHash === argumentsHash && candidate.status === "approved");
+	const approval = id ? approvals.get(id) : [...approvals.values()].find((candidate) => candidate.conversationId === conversationId && candidate.argumentsHash === argumentsHash && candidate.status === "approved");
 	if (!approval || approval.status !== "approved") return false;
-	if (approval.sessionKey !== sessionKey || approval.argumentsHash !== argumentsHash) return false;
+	if (approval.conversationId !== conversationId || approval.argumentsHash !== argumentsHash) return false;
 	approval.status = "consumed";
 	return true;
 }

package/dist/src/browser/providers/extension.js

@@ -77,7 +77,7 @@ var ExtensionBrowserProvider = class {
 			}
 			const challenge = {
 				type: "auth_challenge",
-				protocolVersion: 4,
+				protocolVersion: 5,
 				connectionId: crypto.randomUUID(),
 				challenge: crypto.randomBytes(32).toString("base64url"),
 				issuedAt: Date.now()
@@ -192,7 +192,7 @@ var ExtensionBrowserProvider = class {
 	/** Wait for the Chrome Extension to connect. */
 	async waitForConnection(timeoutMs) {
 		if (this.connected) return;
-		if (this.socketConnected && this.handshakeReceived && this.extensionProtocolVersion !== 4) throw new Error(this.protocolMismatchMessage());
+		if (this.socketConnected && this.handshakeReceived && this.extensionProtocolVersion !== 5) throw new Error(this.protocolMismatchMessage());
 		const timeout = timeoutMs ?? this.config.connectionTimeout;
 		return new Promise((resolve, reject) => {
 			const timer = setTimeout(() => {
@@ -225,7 +225,7 @@ var ExtensionBrowserProvider = class {
 		const id = `cmd_${++this.commandCounter}_${Date.now()}`;
 		const cmd = {
 			id,
-			protocolVersion: 4,
+			protocolVersion: 5,
 			connectionId: this.connectionId,
 			input,
 			timeoutMs: timeoutMs ?? this.config.commandTimeout,
@@ -259,13 +259,13 @@ var ExtensionBrowserProvider = class {
 			socketConnected: this.socketConnected,
 			connected: this.connected,
 			protocolVersion: this.extensionProtocolVersion,
-			expectedProtocolVersion: 4,
+			expectedProtocolVersion: 5,
 			extensionVersion: this.extensionVersion,
 			principalId: this.principalId
 		};
 	}
 	protocolMismatchMessage() {
-		return `Browser extension protocol mismatch (expected 4, received ${this.extensionProtocolVersion ?? "unknown"}). Reload the extension in Chrome.`;
+		return `Browser extension protocol mismatch (expected 5, received ${this.extensionProtocolVersion ?? "unknown"}). Reload the extension in Chrome.`;
 	}
 	/** Shutdown the WebSocket server. */
 	async shutdown() {
@@ -340,7 +340,7 @@ var ExtensionBrowserProvider = class {
 	_authenticateCandidate(raw, origin, challenge) {
 		try {
 			const message = JSON.parse(raw);
-			if (message.type !== "authenticate" || message.protocolVersion !== 4 || message.connectionId !== challenge.connectionId || `chrome-extension://${message.extensionId}` !== origin || Math.abs(Date.now() - challenge.issuedAt) > 5e3) return false;
+			if (message.type !== "authenticate" || message.protocolVersion !== 5 || message.connectionId !== challenge.connectionId || `chrome-extension://${message.extensionId}` !== origin || Math.abs(Date.now() - challenge.issuedAt) > 5e3) return false;
 			const device = getDevice(message.principalId);
 			if (!device || device.revokedAt !== void 0 || device.platform !== "chrome" || device.extensionId !== message.extensionId) return false;
 			const payload = browserWireAuthenticationPayload({

package/dist/src/browser/providers/realtime-extension.js

@@ -63,8 +63,8 @@ var RealtimeExtensionBrowserProvider = class {
 		return {
 			socketConnected: endpoints.length > 0,
 			connected: endpoints.length > 0,
-			protocolVersion: endpoints.length > 0 ? 4 : null,
-			expectedProtocolVersion: 4,
+			protocolVersion: endpoints.length > 0 ? 5 : null,
+			expectedProtocolVersion: 5,
 			extensionVersion: endpoint?.appVersion ?? null,
 			principalId: endpoint?.principalId ?? null,
 			endpointCount: endpoints.length,

package/dist/src/browser/runtime/browser-runtime.js

@@ -165,13 +165,13 @@ var BrowserRuntime = class {
 			}
 		};
 	}
-	authorize(sessionKey, input, risk, explicitPolicy, target) {
+	authorize(conversationId, input, risk, explicitPolicy, target) {
 		const security = this.options.getConfig().security;
 		const policy = explicitPolicy ?? (input.action === "upload" ? security.uploads : security.consequentialActions);
 		if (!browserRiskNeedsApproval(risk) || policy === "allow") return null;
 		if (policy === "deny") return failure("APPROVAL_REQUIRED", `Browser action is denied by policy (${risk}).`);
-		if (consumeBrowserApproval(input.approvalId, sessionKey, input)) return null;
-		const approval = createBrowserApproval(sessionKey, input, risk, browserApprovalSummary(input, target));
+		if (consumeBrowserApproval(input.approvalId, conversationId, input)) return null;
+		const approval = createBrowserApproval(conversationId, input, risk, browserApprovalSummary(input, target));
 		this.options.emit?.("browser.approval.required", approval);
 		return {
 			ok: false,

package/dist/src/channels/exec-approval-runtime.d.ts

@@ -3,7 +3,7 @@
  */
 import type { Config } from '../config/schema.js';
 export interface ExecApprovalRequestPayload {
-    sessionKey: string;
+    conversationId: string;
     channel: string;
     chatId: string;
     accountId?: string;

package/dist/src/channels/manager.js

@@ -162,7 +162,7 @@ var ChannelManager = class {
 				metadata: {
 					feishuEventType: meta.feishuEventType,
 					raw: meta.raw,
-					sessionKey: meta.sessionKey,
+					conversationId: meta.conversationId,
 					userContent: msg.content
 				}
 			});

package/dist/src/channels/pipeline.js

@@ -20,7 +20,7 @@ function pipelineLogRequestId(ctx) {
 	return randomUUID();
 }
 function pipelineLogSessionId(ctx) {
-	const sk = ctx.metadata?.sessionKey;
+	const sk = ctx.metadata?.conversationId;
 	if (typeof sk === "string" && sk.trim().length > 0) return sk.trim();
 	return `${ctx.channel}:${ctx.chatId}`;
 }
@@ -67,7 +67,7 @@ var MessagePipeline = class {
 				this.onError?.(err, processedCtx);
 				return;
 			}
-			const resolvedSk = processedCtx.metadata?.sessionKey;
+			const resolvedSk = processedCtx.metadata?.conversationId;
 			if (typeof resolvedSk === "string" && resolvedSk.trim().length > 0) updateAsyncLogContext({ sessionId: resolvedSk.trim() });
 			if (!this.agentInvoke) {
 				log.warn({ channel }, "No agentInvoke configured");

package/dist/src/channels/plugin-types.d.ts

@@ -39,8 +39,8 @@ export interface ChannelAccountSnapshot {
 }
 /** Wired from Gateway so channel UIs (e.g. Telegram inline keyboards) use the same model store as AgentService. */
 export interface ChannelPluginSessionModelHooks {
-    getModelForSession: (sessionKey: string) => string;
-    switchModelForSession: (sessionKey: string, modelId: string) => Promise<boolean>;
+    getModelForSession: (conversationId: string) => string;
+    switchModelForSession: (conversationId: string, modelId: string) => Promise<boolean>;
 }
 export interface ChannelPluginInitOptions {
     bus: MessageBus;

package/dist/src/channels/plugins/types.adapters.d.ts

@@ -141,7 +141,7 @@ export type ChannelRuntimeActionPayload = {
     [key: string]: unknown;
 } | {
     type: 'qr';
-    sessionKey: string;
+    conversationId: string;
     qrcodeUrl?: string;
     qrPayload?: string;
     statusAction?: string;

package/dist/src/channels/telegram/index.d.ts

@@ -3,5 +3,5 @@
  */
 export { telegramPlugin, defineChannelPluginEntry } from '../../../extensions/telegram/src/index.js';
 export type { TelegramAccount } from '../../../extensions/telegram/src/index.js';
-export { generateSessionKeyWithRouting } from '../../../extensions/telegram/src/routing-integration.js';
+export { generateConversationIdWithRouting } from '../../../extensions/telegram/src/routing-integration.js';
 export { normalizeTelegramDeliveryChatId } from '../../../extensions/telegram/src/delivery-chat-id.js';

package/dist/src/channels/telegram/index.js

@@ -2,5 +2,5 @@ import { defineChannelPluginEntry } from "../../extensions/sdk/channel-entry.js"
 import { normalizeTelegramDeliveryChatId } from "../../../extensions/telegram/src/delivery-chat-id.js";
 import { telegramPlugin } from "../../../extensions/telegram/src/plugin.js";
 import "../../../extensions/telegram/src/index.js";
-import { generateSessionKeyWithRouting } from "../../../extensions/telegram/src/routing-integration.js";
-export { defineChannelPluginEntry, generateSessionKeyWithRouting, normalizeTelegramDeliveryChatId, telegramPlugin };
+import { generateConversationIdWithRouting } from "../../../extensions/telegram/src/routing-integration.js";
+export { defineChannelPluginEntry, generateConversationIdWithRouting, normalizeTelegramDeliveryChatId, telegramPlugin };

package/dist/src/chat-commands/agent-edit.js

@@ -1,5 +1,5 @@
-import { init_agent_session_key, resolveAgentIdFromSessionKey } from "../routing/agent-session-key.js";
 import { init_agent_scope, normalizeAgentId, resolveAgentProfileDir } from "../agent/agent-scope.js";
+import { init_agent_session_key, resolveAgentIdFromConversationId } from "../routing/agent-session-key.js";
 import { WORKSPACE_FILES, init_paths } from "../config/paths.js";
 import { commandRegistry } from "./registry.js";
 import { join } from "node:path";
@@ -101,7 +101,7 @@ const agentEditCommand = {
 			content: `⚠️ Unsupported profile file: \`${rawFileName}\`. Use one of: ${PROFILE_FILE_NAMES.map((name) => `\`${name}\``).join(", ")}.`,
 			success: false
 		};
-		const agentId = normalizeAgentId(resolveAgentIdFromSessionKey(ctx.sessionKey));
+		const agentId = normalizeAgentId(resolveAgentIdFromConversationId(ctx.conversationId));
 		const profileDir = resolveAgentProfileDir(ctx.config, agentId);
 		const namesToShow = fileName ? [fileName] : [WORKSPACE_FILES.SOUL, WORKSPACE_FILES.IDENTITY];
 		const sections = [];

package/dist/src/chat-commands/builtins/review.js

@@ -132,10 +132,10 @@ function parseReviewJson(raw, target) {
 	};
 }
 async function reviewModelRef(ctx) {
-	const sessionOverride = await ctx.getSessionConfigStore?.()?.get(ctx.sessionKey).then((config) => config?.modelOverride?.trim()).catch(() => void 0);
+	const sessionOverride = await ctx.getSessionConfigStore?.()?.get(ctx.conversationId).then((config) => config?.modelOverride?.trim()).catch(() => void 0);
 	if (sessionOverride) return sessionOverride;
 	try {
-		const profile = resolveEffectiveAgentProfileForSession(ctx.config, ctx.sessionKey);
+		const profile = resolveEffectiveAgentProfileForSession(ctx.config, ctx.conversationId);
 		return profile.config.models.intents.review?.primary || profile.primaryModelRef;
 	} catch {
 		return;
@@ -164,8 +164,8 @@ function buildReviewPrompt(params) {
 }
 async function resolveWorkspace(ctx) {
 	const sessionConfigStore = ctx.getSessionConfigStore?.();
-	const sessionConfig = sessionConfigStore ? await sessionConfigStore.get(ctx.sessionKey).catch(() => null) : null;
-	return effectiveWorkspacePathForSession(ctx.config, ctx.sessionKey, sessionConfig, getProjectForSession(ctx.sessionKey));
+	const sessionConfig = sessionConfigStore ? await sessionConfigStore.get(ctx.conversationId).catch(() => null) : null;
+	return effectiveWorkspacePathForSession(ctx.config, ctx.conversationId, sessionConfig, getProjectForSession(ctx.conversationId));
 }
 async function buildReview(ctx, args) {
 	const cwd = await resolveGitRoot(await resolveWorkspace(ctx));

package/dist/src/chat-commands/builtins/session.js

@@ -55,7 +55,7 @@ const listCommand = {
 					...s,
 					name: getSessionDisplayName(s.key)
 				})),
-				currentSession: ctx.sessionKey
+				currentSession: ctx.conversationId
 			}]
 		};
 		return {

package/dist/src/chat-commands/builtins/system.js

@@ -60,7 +60,7 @@ const settingsCommand = {
 	],
 	handler: async (ctx) => {
 		const model = ctx.getCurrentModel();
-		const sessionKey = ctx.sessionKey;
+		const conversationId = ctx.conversationId;
 		return {
 			content: joinBlocks(section("⚙️ Current Settings"), kvList([
 				{
@@ -69,7 +69,7 @@ const settingsCommand = {
 				},
 				{
 					key: "Session",
-					value: sessionKey
+					value: conversationId
 				},
 				{
 					key: "Platform",