@xopcai/xopc 0.0.285 → 0.0.291

package/dist/src/automations/domain/types.d.ts

@@ -116,7 +116,7 @@ export interface AutomationRun {
     durationMs?: number;
     summary?: string;
     error?: string;
-    sessionKey?: string;
+    conversationId?: string;
     workflowRunId?: string;
     model?: string;
     deadlineAtMs?: number;
@@ -164,7 +164,7 @@ export interface AutomationMetrics {
 }
 export interface PrepareAutomationAgentSessionInput {
     automationName?: string;
-    sessionKey: string;
+    conversationId: string;
     projectId?: string;
     agentId: string;
     peerId: string;
@@ -174,17 +174,17 @@ export interface PrepareAutomationAgentSessionInput {
 export interface AutomationDeps {
     agentService?: {
         sessionConfig?: {
-            applyAutomationWorkingDirectory?: (sessionKey: string, workingDirectory: string | undefined) => Promise<void>;
-            applyAutomationModelOverride?: (sessionKey: string, model: string | undefined) => Promise<boolean>;
+            applyAutomationWorkingDirectory?: (conversationId: string, workingDirectory: string | undefined) => Promise<void>;
+            applyAutomationModelOverride?: (conversationId: string, model: string | undefined) => Promise<boolean>;
         };
         turnDispatcher?: {
-            processDirect: (message: string, sessionKey: string, origin: TurnOrigin, attachments?: unknown[], thinking?: string, options?: {
+            processDirect: (message: string, conversationId: string, origin: TurnOrigin, attachments?: unknown[], thinking?: string, options?: {
                 signal?: AbortSignal;
                 runId?: string;
                 deadlineAtMs?: number;
             }) => Promise<string>;
         };
-        getModelForSession?: (sessionKey: string) => string | undefined;
+        getModelForSession?: (conversationId: string) => string | undefined;
     };
     getDefaultAgentId?: () => string;
     prepareAgentSession?: (input: PrepareAutomationAgentSessionInput) => Promise<void>;
@@ -212,7 +212,7 @@ export interface AutomationActionTask {
     status: 'succeeded' | 'failed' | 'timeout' | 'cancelled';
     summary?: string;
     error?: string;
-    sessionKey?: string;
+    conversationId?: string;
     workflowRunId?: string;
     model?: string;
     deadlineAtMs?: number;

package/dist/src/automations/domain/validation.js

@@ -1,7 +1,9 @@
 import { TaskCommandSchema } from "../../../packages/gateway-contract/src/tasks.js";
+import { init_src } from "../../../packages/gateway-contract/src/index.js";
 import { z } from "zod";
 import { CronExpressionParser } from "cron-parser";
 //#region src/automations/domain/validation.ts
+init_src();
 const nonEmptyString = z.string().trim().min(1);
 const optionalTrimmedString = (max) => z.preprocess((value) => {
 	if (value == null) return void 0;

package/dist/src/automations/service/action-executor.js

@@ -1,7 +1,7 @@
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
 import { init_agent_scope, normalizeAgentId } from "../../agent/agent-scope.js";
-import { buildSessionKey, init_session_key } from "../../routing/session-key.js";
+import { init_session_key, resolveConversationId } from "../../routing/session-key.js";
 import { resolveAutomationTimeoutSeconds } from "../domain/defaults.js";
 //#region src/automations/service/action-executor.ts
 init_agent_scope();
@@ -158,7 +158,7 @@ var AutomationActionExecutor = class {
 		};
 		const agentId = normalizeAgentId(action.agentId || this.deps.getDefaultAgentId?.() || "main");
 		const peerId = automation.conversationMode === "continuous" ? automation.id : `${automation.id}-${run.id}`;
-		const sessionKey = buildSessionKey({
+		const conversationId = resolveConversationId({
 			agentId,
 			source: "automation",
 			accountId: "default",
@@ -166,27 +166,27 @@ var AutomationActionExecutor = class {
 			peerId
 		});
 		await hooks.onRunPatch?.({
-			sessionKey,
+			conversationId,
 			currentPhase: "action"
 		});
 		await this.deps.prepareAgentSession?.({
 			automationName: automation.name,
-			sessionKey,
+			conversationId,
 			projectId: automation.projectId,
 			agentId,
 			peerId,
 			automationId: automation.id,
 			runId: run.id
 		});
-		await agentService.sessionConfig?.applyAutomationWorkingDirectory?.(sessionKey, automation.projectId ? void 0 : action.workingDirectory);
+		await agentService.sessionConfig?.applyAutomationWorkingDirectory?.(conversationId, automation.projectId ? void 0 : action.workingDirectory);
 		if (agentService.sessionConfig?.applyAutomationModelOverride) {
-			if (!await agentService.sessionConfig.applyAutomationModelOverride(sessionKey, action.model) && action.model) log.warn({
+			if (!await agentService.sessionConfig.applyAutomationModelOverride(conversationId, action.model) && action.model) log.warn({
 				automationId: automation.id,
-				sessionKey,
+				conversationId,
 				model: action.model
 			}, "Automation model override invalid; using agent default");
 		}
-		const response = await agentService.turnDispatcher.processDirect(buildSafetyInstruction(automation, action.instruction), sessionKey, {
+		const response = await agentService.turnDispatcher.processDirect(buildSafetyInstruction(automation, action.instruction), conversationId, {
 			type: "system",
 			source: "automation"
 		}, void 0, void 0, {
@@ -194,11 +194,11 @@ var AutomationActionExecutor = class {
 			runId: run.id,
 			deadlineAtMs
 		});
-		const model = agentService.getModelForSession?.(sessionKey);
+		const model = agentService.getModelForSession?.(conversationId);
 		return {
 			status: "succeeded",
 			summary: response.slice(0, 4e3),
-			sessionKey,
+			conversationId,
 			model
 		};
 	}
@@ -240,14 +240,14 @@ var AutomationActionExecutor = class {
 			error: result.message
 		};
 		await hooks.onRunPatch?.({
-			sessionKey: result.sessionKey,
+			conversationId: result.conversationId,
 			workflowRunId: result.runId,
 			currentPhase: "action"
 		});
 		if (!workflowRunService.readWorkflowRunView) return {
 			status: "succeeded",
 			summary: `Started workflow run ${result.runId}`,
-			sessionKey: result.sessionKey,
+			conversationId: result.conversationId,
 			workflowRunId: result.runId
 		};
 		while (!signal.aborted) {
@@ -260,13 +260,13 @@ var AutomationActionExecutor = class {
 			if (workflowStatus === "succeeded") return {
 				status: "succeeded",
 				summary: `Workflow run ${result.runId} completed`,
-				sessionKey: result.sessionKey,
+				conversationId: result.conversationId,
 				workflowRunId: result.runId
 			};
 			if (workflowStatus === "failed" || workflowStatus === "cancelled" || workflowStatus === "timeout") return {
 				status: workflowStatus,
 				error: view.run.error?.message ?? `Workflow run ${result.runId} ${workflowStatus}`,
-				sessionKey: result.sessionKey,
+				conversationId: result.conversationId,
 				workflowRunId: result.runId
 			};
 			await waitForSignalOrDelay(signal, 500);
@@ -279,7 +279,7 @@ var AutomationActionExecutor = class {
 		return {
 			status: "cancelled",
 			error: "Parent automation stopped while the workflow was running",
-			sessionKey: result.sessionKey,
+			conversationId: result.conversationId,
 			workflowRunId: result.runId
 		};
 	}

package/dist/src/automations/service/automation-service.js

@@ -1,6 +1,6 @@
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
-import { runSqliteWriteTransaction } from "../../storage/sqlite/transaction.js";
+import { init_transaction, runSqliteWriteTransaction } from "../../storage/sqlite/transaction.js";
 import { computeNextAutomationRunAtMs, timerDelayUntil } from "../domain/schedule.js";
 import { AutomationSchema, CreateAutomationSchema, UpdateAutomationSchema } from "../domain/validation.js";
 import { AutomationActionExecutor } from "./action-executor.js";
@@ -10,6 +10,7 @@ import "../storage/index.js";
 import { randomUUID } from "node:crypto";
 //#region src/automations/service/automation-service.ts
 init_logger();
+init_transaction();
 const log = createLogger("AutomationService");
 const DEFAULT_MAX_CONCURRENT_RUNS = 5;
 const MISSED_RUN_STAGGER_MS = 5e3;
@@ -372,7 +373,7 @@ var AutomationService = class {
 			this.appendRunEvent(run, status === "succeeded" ? "action.completed" : "action.failed", status === "succeeded" ? `${automation.action.kind} action completed` : `${automation.action.kind} action ${status}`, {
 				summary: task.summary,
 				error: task.error,
-				sessionKey: task.sessionKey ?? run.sessionKey,
+				conversationId: task.conversationId ?? run.conversationId,
 				workflowRunId: task.workflowRunId,
 				model: task.model
 			});
@@ -381,7 +382,7 @@ var AutomationService = class {
 				status,
 				summary: task.summary,
 				error,
-				sessionKey: task.sessionKey ?? run.sessionKey,
+				conversationId: task.conversationId ?? run.conversationId,
 				workflowRunId: task.workflowRunId,
 				model: task.model,
 				deadlineAtMs: task.deadlineAtMs ?? run.deadlineAtMs,

package/dist/src/automations/storage/automation-repository.js

@@ -1,6 +1,7 @@
-import { getSqliteDatabase, runSqliteWriteTransaction } from "../../storage/sqlite/transaction.js";
+import { getSqliteDatabase, init_transaction, runSqliteWriteTransaction } from "../../storage/sqlite/transaction.js";
 import { AutomationSchema } from "../domain/validation.js";
 //#region src/automations/storage/automation-repository.ts
+init_transaction();
 function parseJson(value) {
 	if (!value) return void 0;
 	return JSON.parse(value);

package/dist/src/automations/storage/automation-run-repository.js

@@ -1,5 +1,6 @@
-import { getSqliteDatabase, runSqliteWriteTransaction } from "../../storage/sqlite/transaction.js";
+import { getSqliteDatabase, init_transaction, runSqliteWriteTransaction } from "../../storage/sqlite/transaction.js";
 //#region src/automations/storage/automation-run-repository.ts
+init_transaction();
 const MAX_RUNS_PER_AUTOMATION = 2e3;
 const TRIM_TO_RUNS = 1500;
 function rowToRun(row) {
@@ -17,7 +18,7 @@ function rowToRun(row) {
 		durationMs: row.duration_ms ?? void 0,
 		summary: row.summary ?? void 0,
 		error: row.error ?? void 0,
-		sessionKey: row.session_key ?? void 0,
+		conversationId: row.conversation_id ?? void 0,
 		workflowRunId: row.workflow_run_id ?? void 0,
 		model: row.model ?? void 0,
 		deadlineAtMs: row.deadline_at_ms ?? void 0,
@@ -66,11 +67,11 @@ function saveAutomationRun(run) {
 		db.prepare(`INSERT OR REPLACE INTO automation_runs (
         run_id, automation_id, automation_name, status, trigger_snapshot_json,
         action_snapshot_json, manual, created_at_ms, started_at_ms, ended_at_ms,
-        duration_ms, summary, error, session_key, workflow_run_id, model,
+        duration_ms, summary, error, conversation_id, workflow_run_id, model,
         deadline_at_ms, current_phase, cancel_requested_at_ms, cancel_confirmed_at_ms,
         termination_json, heartbeat_at_ms, lease_owner, lease_expires_at_ms,
         attempt_number, root_run_id, read_at_ms
-      ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`).run(run.id, run.automationId, run.automationName, run.status, JSON.stringify(run.triggerSnapshot), JSON.stringify(run.actionSnapshot), run.manual ? 1 : 0, run.createdAtMs, run.startedAtMs ?? null, run.endedAtMs ?? null, run.durationMs ?? null, run.summary ?? null, run.error ?? null, run.sessionKey ?? null, run.workflowRunId ?? null, run.model ?? null, run.deadlineAtMs ?? null, run.currentPhase ?? null, run.cancelRequestedAtMs ?? null, run.cancelConfirmedAtMs ?? null, run.termination ? JSON.stringify(run.termination) : null, run.heartbeatAtMs ?? null, run.leaseOwner ?? null, run.leaseExpiresAtMs ?? null, run.attemptNumber ?? 1, run.rootRunId ?? run.id, run.readAtMs ?? null);
+      ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`).run(run.id, run.automationId, run.automationName, run.status, JSON.stringify(run.triggerSnapshot), JSON.stringify(run.actionSnapshot), run.manual ? 1 : 0, run.createdAtMs, run.startedAtMs ?? null, run.endedAtMs ?? null, run.durationMs ?? null, run.summary ?? null, run.error ?? null, run.conversationId ?? null, run.workflowRunId ?? null, run.model ?? null, run.deadlineAtMs ?? null, run.currentPhase ?? null, run.cancelRequestedAtMs ?? null, run.cancelConfirmedAtMs ?? null, run.termination ? JSON.stringify(run.termination) : null, run.heartbeatAtMs ?? null, run.leaseOwner ?? null, run.leaseExpiresAtMs ?? null, run.attemptNumber ?? 1, run.rootRunId ?? run.id, run.readAtMs ?? null);
 		trimRuns(db, run.automationId);
 	});
 }
@@ -88,7 +89,7 @@ function listAutomationRunEvents(runId) {
 function getAutomationRun(runId) {
 	const row = getSqliteDatabase().prepare(`SELECT run_id, automation_id, automation_name, status, trigger_snapshot_json,
               action_snapshot_json, manual, created_at_ms, started_at_ms, ended_at_ms,
-              duration_ms, summary, error, session_key, workflow_run_id, model,
+              duration_ms, summary, error, conversation_id, workflow_run_id, model,
               deadline_at_ms, current_phase, cancel_requested_at_ms, cancel_confirmed_at_ms,
               termination_json, heartbeat_at_ms, lease_owner, lease_expires_at_ms,
               attempt_number, root_run_id, read_at_ms
@@ -101,7 +102,7 @@ function listAutomationRuns(options) {
 	const db = getSqliteDatabase();
 	const base = `SELECT run_id, automation_id, automation_name, status, trigger_snapshot_json,
                        action_snapshot_json, manual, created_at_ms, started_at_ms, ended_at_ms,
-                       duration_ms, summary, error, session_key, workflow_run_id, model,
+                       duration_ms, summary, error, conversation_id, workflow_run_id, model,
                        deadline_at_ms, current_phase, cancel_requested_at_ms, cancel_confirmed_at_ms,
                        termination_json, heartbeat_at_ms, lease_owner, lease_expires_at_ms,
                        attempt_number, root_run_id, read_at_ms
@@ -110,7 +111,7 @@ function listAutomationRuns(options) {
 	if (options?.automationId) rows = db.prepare(`${base} WHERE automation_id = ? ORDER BY created_at_ms DESC LIMIT ?`).all(options.automationId, limit);
 	else if (options?.projectId) rows = db.prepare(`SELECT r.run_id, r.automation_id, r.automation_name, r.status, r.trigger_snapshot_json,
               r.action_snapshot_json, r.manual, r.created_at_ms, r.started_at_ms, r.ended_at_ms,
-              r.duration_ms, r.summary, r.error, r.session_key, r.workflow_run_id, r.model,
+              r.duration_ms, r.summary, r.error, r.conversation_id, r.workflow_run_id, r.model,
               r.deadline_at_ms, r.current_phase, r.cancel_requested_at_ms, r.cancel_confirmed_at_ms,
               r.termination_json, r.heartbeat_at_ms, r.lease_owner, r.lease_expires_at_ms,
               r.attempt_number, r.root_run_id, r.read_at_ms
@@ -136,7 +137,7 @@ function listAutomationRunsForProductEvent(options) {
 	}
 	return getSqliteDatabase().prepare(`SELECT r.run_id, r.automation_id, r.automation_name, r.status, r.trigger_snapshot_json,
               r.action_snapshot_json, r.manual, r.created_at_ms, r.started_at_ms, r.ended_at_ms,
-              r.duration_ms, r.summary, r.error, r.session_key, r.workflow_run_id, r.model,
+              r.duration_ms, r.summary, r.error, r.conversation_id, r.workflow_run_id, r.model,
               r.deadline_at_ms, r.current_phase, r.cancel_requested_at_ms, r.cancel_confirmed_at_ms,
               r.termination_json, r.heartbeat_at_ms, r.lease_owner, r.lease_expires_at_ms,
               r.attempt_number, r.root_run_id, r.read_at_ms,

package/dist/src/browser/native-messaging-host.js

@@ -1,5 +1,6 @@
-import { closeXopcDatabase, openXopcDatabase } from "../storage/sqlite/connection.js";
+import { closeXopcDatabase, init_connection, openXopcDatabase } from "../storage/sqlite/connection.js";
 import { devicePairingInvitationPayloadSchema, formatBrowserPairingInvitation } from "../../packages/gateway-contract/src/device-pairing.js";
+import { init_src } from "../../packages/gateway-contract/src/index.js";
 import { getGatewayIdentityPublicKeyRaw, getOrCreateGatewayIdentity } from "../storage/sqlite/gateway-identity-repository.js";
 import { createDevicePairingSetup } from "../storage/sqlite/device-pairing-repository.js";
 import { init_loader, loadConfig } from "../config/loader.js";
@@ -7,7 +8,9 @@ import { browserEnrollmentPublicKeyThumbprint } from "./enrollment.js";
 import { BROWSER_EXTENSION_ID, BROWSER_NATIVE_HOST_NAME } from "./extension-identity.js";
 import os from "node:os";
 //#region src/browser/native-messaging-host.ts
+init_src();
 init_loader();
+init_connection();
 function gatewayLoopbackUrl(port) {
 	return `http://127.0.0.1:${port}`;
 }

package/dist/src/browser/policy/approval-store.d.ts

@@ -2,7 +2,7 @@ import type { BrowserActionInput, BrowserRiskLevel } from '@xopcai/browser-contr
 export type BrowserApprovalStatus = 'pending' | 'approved' | 'denied' | 'consumed' | 'expired';
 export interface BrowserApproval {
     id: string;
-    sessionKey: string;
+    conversationId: string;
     risk: BrowserRiskLevel;
     action: BrowserActionInput['action'];
     summary: string;
@@ -11,7 +11,7 @@ export interface BrowserApproval {
     createdAt: string;
     expiresAt: string;
 }
-export declare function createBrowserApproval(sessionKey: string, input: BrowserActionInput, risk: BrowserRiskLevel, summary: string): BrowserApproval;
-export declare function listBrowserApprovals(sessionKey?: string): BrowserApproval[];
+export declare function createBrowserApproval(conversationId: string, input: BrowserActionInput, risk: BrowserRiskLevel, summary: string): BrowserApproval;
+export declare function listBrowserApprovals(conversationId?: string): BrowserApproval[];
 export declare function decideBrowserApproval(id: string, decision: 'approved' | 'denied'): BrowserApproval | undefined;
-export declare function consumeBrowserApproval(id: string | undefined, sessionKey: string, input: BrowserActionInput): boolean;
+export declare function consumeBrowserApproval(id: string | undefined, conversationId: string, input: BrowserActionInput): boolean;

package/dist/src/browser/policy/approval-store.js

@@ -2,15 +2,15 @@ import { createHash, randomUUID } from "node:crypto";
 //#region src/browser/policy/approval-store.ts
 const TTL_MS = 600 * 1e3;
 const approvals = /* @__PURE__ */ new Map();
-function createBrowserApproval(sessionKey, input, risk, summary) {
+function createBrowserApproval(conversationId, input, risk, summary) {
 	expireApprovals();
 	const argumentsHash = browserArgumentsHash(input);
-	const existing = [...approvals.values()].find((approval) => approval.sessionKey === sessionKey && approval.argumentsHash === argumentsHash && approval.status === "pending");
+	const existing = [...approvals.values()].find((approval) => approval.conversationId === conversationId && approval.argumentsHash === argumentsHash && approval.status === "pending");
 	if (existing) return existing;
 	const now = Date.now();
 	const approval = {
 		id: randomUUID(),
-		sessionKey,
+		conversationId,
 		risk,
 		action: input.action,
 		summary,
@@ -22,9 +22,9 @@ function createBrowserApproval(sessionKey, input, risk, summary) {
 	approvals.set(approval.id, approval);
 	return approval;
 }
-function listBrowserApprovals(sessionKey) {
+function listBrowserApprovals(conversationId) {
 	expireApprovals();
-	return [...approvals.values()].filter((approval) => !sessionKey || approval.sessionKey === sessionKey).sort((left, right) => right.createdAt.localeCompare(left.createdAt));
+	return [...approvals.values()].filter((approval) => !conversationId || approval.conversationId === conversationId).sort((left, right) => right.createdAt.localeCompare(left.createdAt));
 }
 function decideBrowserApproval(id, decision) {
 	expireApprovals();
@@ -33,12 +33,12 @@ function decideBrowserApproval(id, decision) {
 	approval.status = decision;
 	return approval;
 }
-function consumeBrowserApproval(id, sessionKey, input) {
+function consumeBrowserApproval(id, conversationId, input) {
 	expireApprovals();
 	const argumentsHash = browserArgumentsHash(input);
-	const approval = id ? approvals.get(id) : [...approvals.values()].find((candidate) => candidate.sessionKey === sessionKey && candidate.argumentsHash === argumentsHash && candidate.status === "approved");
+	const approval = id ? approvals.get(id) : [...approvals.values()].find((candidate) => candidate.conversationId === conversationId && candidate.argumentsHash === argumentsHash && candidate.status === "approved");
 	if (!approval || approval.status !== "approved") return false;
-	if (approval.sessionKey !== sessionKey || approval.argumentsHash !== argumentsHash) return false;
+	if (approval.conversationId !== conversationId || approval.argumentsHash !== argumentsHash) return false;
 	approval.status = "consumed";
 	return true;
 }

package/dist/src/browser/providers/browser-ext-install.js

@@ -2,8 +2,8 @@ import { PACKAGE_VERSION, init_package_version } from "../../package-version.js"
 import { resolveStateDir } from "../../config/paths-state.js";
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
-import { init_paths, resolveBinDir, resolveConfigPath } from "../../config/paths.js";
 import { init_write_file_atomic, writeTextAtomic } from "../../infra/write-file-atomic.js";
+import { init_paths, resolveBinDir, resolveConfigPath } from "../../config/paths.js";
 import { assertCacheDir } from "../cache-dir-policy.js";
 import { BROWSER_EXTENSION_ID, BROWSER_NATIVE_HOST_NAME } from "../extension-identity.js";
 import "../native-messaging-host.js";

package/dist/src/browser/providers/extension.js

@@ -77,7 +77,7 @@ var ExtensionBrowserProvider = class {
 			}
 			const challenge = {
 				type: "auth_challenge",
-				protocolVersion: 4,
+				protocolVersion: 5,
 				connectionId: crypto.randomUUID(),
 				challenge: crypto.randomBytes(32).toString("base64url"),
 				issuedAt: Date.now()
@@ -192,7 +192,7 @@ var ExtensionBrowserProvider = class {
 	/** Wait for the Chrome Extension to connect. */
 	async waitForConnection(timeoutMs) {
 		if (this.connected) return;
-		if (this.socketConnected && this.handshakeReceived && this.extensionProtocolVersion !== 4) throw new Error(this.protocolMismatchMessage());
+		if (this.socketConnected && this.handshakeReceived && this.extensionProtocolVersion !== 5) throw new Error(this.protocolMismatchMessage());
 		const timeout = timeoutMs ?? this.config.connectionTimeout;
 		return new Promise((resolve, reject) => {
 			const timer = setTimeout(() => {
@@ -225,7 +225,7 @@ var ExtensionBrowserProvider = class {
 		const id = `cmd_${++this.commandCounter}_${Date.now()}`;
 		const cmd = {
 			id,
-			protocolVersion: 4,
+			protocolVersion: 5,
 			connectionId: this.connectionId,
 			input,
 			timeoutMs: timeoutMs ?? this.config.commandTimeout,
@@ -259,13 +259,13 @@ var ExtensionBrowserProvider = class {
 			socketConnected: this.socketConnected,
 			connected: this.connected,
 			protocolVersion: this.extensionProtocolVersion,
-			expectedProtocolVersion: 4,
+			expectedProtocolVersion: 5,
 			extensionVersion: this.extensionVersion,
 			principalId: this.principalId
 		};
 	}
 	protocolMismatchMessage() {
-		return `Browser extension protocol mismatch (expected 4, received ${this.extensionProtocolVersion ?? "unknown"}). Reload the extension in Chrome.`;
+		return `Browser extension protocol mismatch (expected 5, received ${this.extensionProtocolVersion ?? "unknown"}). Reload the extension in Chrome.`;
 	}
 	/** Shutdown the WebSocket server. */
 	async shutdown() {
@@ -340,7 +340,7 @@ var ExtensionBrowserProvider = class {
 	_authenticateCandidate(raw, origin, challenge) {
 		try {
 			const message = JSON.parse(raw);
-			if (message.type !== "authenticate" || message.protocolVersion !== 4 || message.connectionId !== challenge.connectionId || `chrome-extension://${message.extensionId}` !== origin || Math.abs(Date.now() - challenge.issuedAt) > 5e3) return false;
+			if (message.type !== "authenticate" || message.protocolVersion !== 5 || message.connectionId !== challenge.connectionId || `chrome-extension://${message.extensionId}` !== origin || Math.abs(Date.now() - challenge.issuedAt) > 5e3) return false;
 			const device = getDevice(message.principalId);
 			if (!device || device.revokedAt !== void 0 || device.platform !== "chrome" || device.extensionId !== message.extensionId) return false;
 			const payload = browserWireAuthenticationPayload({

package/dist/src/browser/providers/realtime-extension.js

@@ -63,8 +63,8 @@ var RealtimeExtensionBrowserProvider = class {
 		return {
 			socketConnected: endpoints.length > 0,
 			connected: endpoints.length > 0,
-			protocolVersion: endpoints.length > 0 ? 4 : null,
-			expectedProtocolVersion: 4,
+			protocolVersion: endpoints.length > 0 ? 5 : null,
+			expectedProtocolVersion: 5,
 			extensionVersion: endpoint?.appVersion ?? null,
 			principalId: endpoint?.principalId ?? null,
 			endpointCount: endpoints.length,

package/dist/src/browser/runtime/browser-runtime.js

@@ -165,13 +165,13 @@ var BrowserRuntime = class {
 			}
 		};
 	}
-	authorize(sessionKey, input, risk, explicitPolicy, target) {
+	authorize(conversationId, input, risk, explicitPolicy, target) {
 		const security = this.options.getConfig().security;
 		const policy = explicitPolicy ?? (input.action === "upload" ? security.uploads : security.consequentialActions);
 		if (!browserRiskNeedsApproval(risk) || policy === "allow") return null;
 		if (policy === "deny") return failure("APPROVAL_REQUIRED", `Browser action is denied by policy (${risk}).`);
-		if (consumeBrowserApproval(input.approvalId, sessionKey, input)) return null;
-		const approval = createBrowserApproval(sessionKey, input, risk, browserApprovalSummary(input, target));
+		if (consumeBrowserApproval(input.approvalId, conversationId, input)) return null;
+		const approval = createBrowserApproval(conversationId, input, risk, browserApprovalSummary(input, target));
 		this.options.emit?.("browser.approval.required", approval);
 		return {
 			ok: false,

package/dist/src/capabilities/readiness/from-config.js

@@ -1,6 +1,7 @@
 import { getAgentDefaultImageGenerationModelConfig, getAgentDefaultImageModelConfig, init_schema, parseModelRef } from "../../config/schema.js";
+import { init_model_policy, isComputerModel } from "../../computer/model-policy.js";
 import { getModelCatalogStore, init_model_catalog_store } from "../../providers/model-catalog-store.js";
-import { init_providers, isProviderConfiguredSync } from "../../providers/index.js";
+import { init_providers, isProviderConfiguredSync, resolveModel } from "../../providers/index.js";
 import { compareCatalogModels } from "../../providers/model-catalog-ranking.js";
 import { DEFAULT_LOCAL_VOICE_MODEL_ID, hasInstalledLocalVoiceModel } from "../../voice/local/models.js";
 import { planCapabilities } from "./planner.js";
@@ -8,6 +9,7 @@ import { planCapabilities } from "./planner.js";
 init_schema();
 init_model_catalog_store();
 init_providers();
+init_model_policy();
 function buildCapabilityPlansForConfig(config, options = {}) {
 	const catalog = options.catalog ?? getModelCatalogStore().load();
 	const cloud = catalog.sources["xopc-cloud"];
@@ -18,6 +20,7 @@ function buildCapabilityPlansForConfig(config, options = {}) {
 	const tts = config.messages?.tts;
 	const policies = {
 		vision: { explicit: refs(getAgentDefaultImageModelConfig(config)) },
+		"computer-use": { explicit: refs(config.agents.defaults.models.computerUse) },
 		"image-generation": { explicit: refs(getAgentDefaultImageGenerationModelConfig(config, agentId)) },
 		stt: {
 			disabled: stt?.enabled === false,
@@ -92,6 +95,11 @@ function markExplicitReadiness(policies, catalog, providerReady) {
 }
 function explicitReady(capability, provider, model, catalog, providerReady) {
 	if (!providerReady(provider)) return false;
+	if (capability === "computer-use" && provider !== "xopc-cloud") try {
+		return isComputerModel(resolveModel(`${provider}/${model}`));
+	} catch {
+		return false;
+	}
 	if (provider !== "xopc-cloud") return true;
 	return (catalog.sources["xopc-cloud"]?.models ?? []).some((entry) => entry.id === model && matchesCapability(entry, capability));
 }
@@ -106,7 +114,11 @@ function cloudCandidates(capability, models, authorized, basePriority = 0, recom
 function matchesCapability(model, capability) {
 	if (model.availability !== "available") return false;
 	switch (capability) {
-		case "vision": return model.kind === "language" && model.input.includes("image");
+		case "vision": return model.kind === "language" && model.input.includes("image") && !model.computerUse;
+		case "computer-use": return model.operations.includes("chat.completions") && isComputerModel({
+			...model,
+			api: "openai-completions"
+		});
 		case "image-generation": return model.kind === "image" && model.operations.includes("images.generate");
 		case "stt": return model.kind === "stt" && model.operations.includes("audio.transcription");
 		case "tts": return model.kind === "tts" && model.operations.includes("audio.speech") && Boolean(model.tts?.defaultVoice);

package/dist/src/capabilities/readiness/planner.js

@@ -3,7 +3,8 @@ const CAPABILITIES = [
 	"vision",
 	"image-generation",
 	"stt",
-	"tts"
+	"tts",
+	"computer-use"
 ];
 function planCapabilities(input) {
 	return Object.fromEntries(CAPABILITIES.map((capability) => [capability, planCapability(capability, input)]));
@@ -28,7 +29,7 @@ function planCapability(capability, input) {
 		reasons: entry.reasons ?? (entry.ready === false ? ["explicit_model_unavailable"] : [])
 	}));
 	const automatic = [...input.automatic[capability] ?? []].sort((left, right) => left.priority - right.priority || left.provider.localeCompare(right.provider) || left.model.localeCompare(right.model));
-	const candidates = dedupeCandidates([...explicit, ...automatic]);
+	const candidates = capability === "computer-use" ? explicit.slice(0, 1) : dedupeCandidates([...explicit, ...automatic]);
 	const ready = candidates.filter((candidate) => candidate.ready);
 	const rejected = candidates.filter((candidate) => !candidate.ready);
 	const primary = ready[0];

package/dist/src/capabilities/readiness/types.d.ts

@@ -1,4 +1,4 @@
-export type CapabilityId = 'vision' | 'image-generation' | 'stt' | 'tts';
+export type CapabilityId = 'vision' | 'image-generation' | 'stt' | 'tts' | 'computer-use';
 export type CandidateSource = 'native-model' | 'explicit-config' | 'installed-local' | 'xopc-cloud-managed' | 'configured-provider' | 'credentialless-fallback';
 export interface CapabilityCandidate {
     capability: CapabilityId;

package/dist/src/channels/exec-approval-runtime.d.ts

@@ -3,7 +3,7 @@
  */
 import type { Config } from '../config/schema.js';
 export interface ExecApprovalRequestPayload {
-    sessionKey: string;
+    conversationId: string;
     channel: string;
     chatId: string;
     accountId?: string;

package/dist/src/channels/manager.js

@@ -162,7 +162,7 @@ var ChannelManager = class {
 				metadata: {
 					feishuEventType: meta.feishuEventType,
 					raw: meta.raw,
-					sessionKey: meta.sessionKey,
+					conversationId: meta.conversationId,
 					userContent: msg.content
 				}
 			});

package/dist/src/channels/pipeline.js

@@ -20,7 +20,7 @@ function pipelineLogRequestId(ctx) {
 	return randomUUID();
 }
 function pipelineLogSessionId(ctx) {
-	const sk = ctx.metadata?.sessionKey;
+	const sk = ctx.metadata?.conversationId;
 	if (typeof sk === "string" && sk.trim().length > 0) return sk.trim();
 	return `${ctx.channel}:${ctx.chatId}`;
 }
@@ -67,7 +67,7 @@ var MessagePipeline = class {
 				this.onError?.(err, processedCtx);
 				return;
 			}
-			const resolvedSk = processedCtx.metadata?.sessionKey;
+			const resolvedSk = processedCtx.metadata?.conversationId;
 			if (typeof resolvedSk === "string" && resolvedSk.trim().length > 0) updateAsyncLogContext({ sessionId: resolvedSk.trim() });
 			if (!this.agentInvoke) {
 				log.warn({ channel }, "No agentInvoke configured");

package/dist/src/channels/plugin-types.d.ts

@@ -39,8 +39,8 @@ export interface ChannelAccountSnapshot {
 }
 /** Wired from Gateway so channel UIs (e.g. Telegram inline keyboards) use the same model store as AgentService. */
 export interface ChannelPluginSessionModelHooks {
-    getModelForSession: (sessionKey: string) => string;
-    switchModelForSession: (sessionKey: string, modelId: string) => Promise<boolean>;
+    getModelForSession: (conversationId: string) => string;
+    switchModelForSession: (conversationId: string, modelId: string) => Promise<boolean>;
 }
 export interface ChannelPluginInitOptions {
     bus: MessageBus;

package/dist/src/channels/plugins/types.adapters.d.ts

@@ -141,7 +141,7 @@ export type ChannelRuntimeActionPayload = {
     [key: string]: unknown;
 } | {
     type: 'qr';
-    sessionKey: string;
+    conversationId: string;
     qrcodeUrl?: string;
     qrPayload?: string;
     statusAction?: string;

package/dist/src/channels/telegram/index.d.ts

@@ -3,5 +3,5 @@
  */
 export { telegramPlugin, defineChannelPluginEntry } from '../../../extensions/telegram/src/index.js';
 export type { TelegramAccount } from '../../../extensions/telegram/src/index.js';
-export { generateSessionKeyWithRouting } from '../../../extensions/telegram/src/routing-integration.js';
+export { generateConversationIdWithRouting } from '../../../extensions/telegram/src/routing-integration.js';
 export { normalizeTelegramDeliveryChatId } from '../../../extensions/telegram/src/delivery-chat-id.js';

package/dist/src/channels/telegram/index.js

@@ -2,5 +2,5 @@ import { defineChannelPluginEntry } from "../../extensions/sdk/channel-entry.js"
 import { normalizeTelegramDeliveryChatId } from "../../../extensions/telegram/src/delivery-chat-id.js";
 import { telegramPlugin } from "../../../extensions/telegram/src/plugin.js";
 import "../../../extensions/telegram/src/index.js";
-import { generateSessionKeyWithRouting } from "../../../extensions/telegram/src/routing-integration.js";
-export { defineChannelPluginEntry, generateSessionKeyWithRouting, normalizeTelegramDeliveryChatId, telegramPlugin };
+import { generateConversationIdWithRouting } from "../../../extensions/telegram/src/routing-integration.js";
+export { defineChannelPluginEntry, generateConversationIdWithRouting, normalizeTelegramDeliveryChatId, telegramPlugin };

package/dist/src/chat-commands/agent-edit.js

@@ -1,6 +1,6 @@
-import { init_agent_session_key, resolveAgentIdFromSessionKey } from "../routing/agent-session-key.js";
 import { init_agent_scope, normalizeAgentId, resolveAgentProfileDir } from "../agent/agent-scope.js";
 import { WORKSPACE_FILES, init_paths } from "../config/paths.js";
+import { init_agent_session_key, resolveAgentIdFromConversationId } from "../routing/agent-session-key.js";
 import { commandRegistry } from "./registry.js";
 import { join } from "node:path";
 import { readFile } from "node:fs/promises";
@@ -101,7 +101,7 @@ const agentEditCommand = {
 			content: `⚠️ Unsupported profile file: \`${rawFileName}\`. Use one of: ${PROFILE_FILE_NAMES.map((name) => `\`${name}\``).join(", ")}.`,
 			success: false
 		};
-		const agentId = normalizeAgentId(resolveAgentIdFromSessionKey(ctx.sessionKey));
+		const agentId = normalizeAgentId(resolveAgentIdFromConversationId(ctx.conversationId));
 		const profileDir = resolveAgentProfileDir(ctx.config, agentId);
 		const namesToShow = fileName ? [fileName] : [WORKSPACE_FILES.SOUL, WORKSPACE_FILES.IDENTITY];
 		const sections = [];