@xopcai/xopc 0.0.285 → 0.0.291

package/dist/src/gateway/global-defaults-admin.js

@@ -1,6 +1,7 @@
 import { AgentDefaultsSchema } from "../agent-config/schema.js";
 import { init_agent_config } from "../agent-config/index.js";
 import { GATEWAY_BUILTIN_TOOLS } from "./agent-builtin-tools.js";
+import { validateComputerModelChanges } from "../computer/model-config.js";
 import { isDeepStrictEqual } from "node:util";
 //#region src/gateway/global-defaults-admin.ts
 init_agent_config();
@@ -20,6 +21,21 @@ function prepareUpdateGlobalDefaults(cfg, body) {
 		error: `defaults ${parsed.error.issues[0]?.message ?? "is invalid"}`,
 		status: 400
 	};
+	try {
+		validateComputerModelChanges({
+			...cfg,
+			agents: {
+				...cfg.agents,
+				defaults: parsed.data
+			}
+		}, cfg);
+	} catch (error) {
+		return {
+			ok: false,
+			error: error instanceof Error ? error.message : String(error),
+			status: 400
+		};
+	}
 	return {
 		ok: true,
 		data: {

package/dist/src/gateway/heartbeat/check-store.js

@@ -1,8 +1,9 @@
-import { getSqliteDatabase, runSqliteWriteTransaction } from "../../storage/sqlite/transaction.js";
+import { getSqliteDatabase, init_transaction, runSqliteWriteTransaction } from "../../storage/sqlite/transaction.js";
 import { proactiveChecksAllowed, proactivePreferences, quietHoursEnd } from "../../proactive/policy/service.js";
 import { reserveWorkspaceAttention } from "../../proactive/inbox/digest.js";
 import { createHash, randomUUID } from "node:crypto";
 //#region src/gateway/heartbeat/check-store.ts
+init_transaction();
 function beginHeartbeatCheck(workspace) {
 	const id = randomUUID();
 	const now = /* @__PURE__ */ new Date();

package/dist/src/gateway/heartbeat/service.js

@@ -1,15 +1,19 @@
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
+import { init_agent_scope, resolveDefaultAgentId } from "../../agent/agent-scope.js";
+import { createConversation, init_conversation_repository, resolveRoutedConversation } from "../../storage/sqlite/conversation-repository.js";
 import { shouldSilence, stripHeartbeatToken } from "../../heartbeat/tokens.js";
 import { proactiveChecksAllowed, proactivePreferences } from "../../proactive/policy/service.js";
-import { beginHeartbeatCheck, completeHeartbeatCheck, deliverHeartbeatChecks, recentHeartbeatChecks, recoverHeartbeatChecks } from "./check-store.js";
-import { appendCronEventLines } from "../../heartbeat/event-prompt.js";
 import { isWithinActiveHours } from "../../heartbeat/active-hours.js";
 import { isHeartbeatContentEmpty } from "../../heartbeat/content-check.js";
+import { appendCronEventLines } from "../../heartbeat/event-prompt.js";
 import { createHeartbeatWake } from "../../heartbeat/wake.js";
+import { beginHeartbeatCheck, completeHeartbeatCheck, deliverHeartbeatChecks, recentHeartbeatChecks, recoverHeartbeatChecks } from "./check-store.js";
 import { resolveHeartbeatMdPath } from "../workspace-heartbeat-path.js";
 import { readFile } from "fs/promises";
 //#region src/gateway/heartbeat/service.ts
+init_conversation_repository();
+init_agent_scope();
 init_logger();
 const log = createLogger("HeartbeatService");
 const DEFAULT_PROMPT = "Read HEARTBEAT.md if it exists. Follow it strictly. If nothing needs attention, reply HEARTBEAT_OK.";
@@ -145,7 +149,17 @@ var HeartbeatService = class {
 			completeHeartbeatCheck(checkId, "blocked", "Checklist could not be read");
 			return;
 		}
-		const sessionKey = cfg.isolatedSession ? `heartbeat:isolated:${Date.now()}` : "heartbeat:main";
+		const agentId = resolveDefaultAgentId(this.deps.getConfig());
+		const conversationId = cfg.isolatedSession ? createConversation({
+			agentId,
+			sourceChannel: "heartbeat",
+			sessionType: "heartbeat"
+		}).key : resolveRoutedConversation({
+			agentId,
+			source: "heartbeat",
+			peerKind: "direct",
+			peerId: "main"
+		}, { sessionType: "heartbeat" });
 		let basePrompt = (cfg.prompt?.trim() || DEFAULT_PROMPT).trim();
 		if (heartbeatContent) basePrompt = `${basePrompt}\n\n---\nHEARTBEAT.md:\n${heartbeatContent}\n---`;
 		basePrompt = appendCronEventLines(basePrompt, reasons);
@@ -153,17 +167,17 @@ var HeartbeatService = class {
 		const prompt = `${basePrompt}\n\nCurrent time: ${(/* @__PURE__ */ new Date()).toISOString()}`;
 		const ackMax = cfg.ackMaxChars ?? 300;
 		log.debug({
-			sessionKey,
+			conversationId,
 			reasons: reasonSummary
 		}, "Heartbeat: invoking agent");
-		if (sessionKey === "heartbeat:main") try {
-			await this.deps.sessionStore.saveMessages(sessionKey, [], { metadata: {
+		if (!cfg.isolatedSession) try {
+			await this.deps.sessionStore.saveMessages(conversationId, [], { metadata: {
 				sourceChannel: "heartbeat",
 				sourceChatId: "main",
 				sessionType: "heartbeat",
 				customData: { heartbeatTarget: "main" },
 				routing: {
-					agentId: "main",
+					agentId,
 					source: "heartbeat",
 					accountId: "default",
 					peerKind: "direct",
@@ -173,12 +187,12 @@ var HeartbeatService = class {
 		} catch (err) {
 			log.warn({
 				err,
-				sessionKey
+				conversationId
 			}, "Heartbeat: failed to reset main session transcript");
 		}
 		let reply;
 		try {
-			reply = await this.deps.agentService.turnDispatcher.processDirect(prompt, sessionKey, {
+			reply = await this.deps.agentService.turnDispatcher.processDirect(prompt, conversationId, {
 				type: "system",
 				source: "heartbeat"
 			});

package/dist/src/gateway/hono/lib/config-payload.d.ts

@@ -36,6 +36,10 @@ export declare function buildSafeWebConfigPayload(service: GatewayService, optio
                     primary: string;
                     fallbacks: string[];
                 };
+                computerUse?: {
+                    primary: string;
+                    fallbacks: string[];
+                };
                 imageGeneration?: {
                     primary: string;
                     fallbacks: string[];
@@ -75,6 +79,10 @@ export declare function buildSafeWebConfigPayload(service: GatewayService, optio
                     primary: string;
                     fallbacks: string[];
                 };
+                computerUse?: {
+                    primary: string;
+                    fallbacks: string[];
+                };
                 imageGeneration?: {
                     primary: string;
                     fallbacks: string[];
@@ -117,6 +125,13 @@ export declare function buildSafeWebConfigPayload(service: GatewayService, optio
             };
         };
     };
+    computer: {
+        enabled: boolean;
+        maxActionsPerSession: number;
+        maxModelRequests: number;
+        maxSessionDurationMs: number;
+        idleGrantTtlMs: number;
+    };
     channels: {
         [k: string]: {
             enabled: boolean;

package/dist/src/gateway/hono/lib/config-payload.js

@@ -1,9 +1,9 @@
 import { ContextPlanningConfigSchema, KnowledgeMemoryConfigSchema, UserModelConfigSchema, init_config } from "../../../user-context/config.js";
 import { init_agent_scope, listAgentEntries, normalizeAgentId, resolveDefaultAgentId } from "../../../agent/agent-scope.js";
 import { resolveModelsJsonPath } from "../../../config/paths.js";
-import { buildChannelCatalogForConfig, buildChannelCatalogFromSnapshot, getChannelSetupStatus, init_channel_catalog_service } from "../../../channels/catalog/channel-catalog-service.js";
 import { init_models_json, loadModelsJson } from "../../../config/models-json.js";
 import { CredentialResolver, init_credentials } from "../../../auth/credentials.js";
+import { buildChannelCatalogForConfig, buildChannelCatalogFromSnapshot, getChannelSetupStatus, init_channel_catalog_service } from "../../../channels/catalog/channel-catalog-service.js";
 import { getProviderRegistry, init_plugin_registry } from "../../../providers/plugin-registry.js";
 import { getAllProviders, init_providers, isProviderConfigured } from "../../../providers/index.js";
 import { normalizeConfiguredMcpServers } from "../../../config/mcp-config-normalize.js";
@@ -92,6 +92,7 @@ async function buildSafeWebConfigPayload(service, options = {}) {
 			})),
 			defaults: config.agents.defaults
 		},
+		computer: config.computer,
 		channels: channelsPayload,
 		providers: Object.fromEntries(await Promise.all(getAllProviders().map(async (provider) => [provider, await maskLlmProviderApiKeyForWeb(provider)]))),
 		/** Masked `cfg.providers` for capability keys (image / STT / etc.). */

package/dist/src/gateway/hono/middleware/log-context.d.ts

@@ -1,5 +1,5 @@
 /**
  * Binds request (and optional session) correlation into AsyncLocalStorage so
- * all pino logs in the request inherit requestId / sessionId without a child logger.
+ * all pino logs in the request inherit requestId / transcriptId without a child logger.
  */
 export declare function logContextMiddleware(): import("hono/dist/types/types.js").MiddlewareHandler<any, string, {}, Response>;

package/dist/src/gateway/hono/middleware/log-context.js

@@ -7,17 +7,17 @@ import { createMiddleware } from "hono/factory";
 init_context();
 /**
 * Binds request (and optional session) correlation into AsyncLocalStorage so
-* all pino logs in the request inherit requestId / sessionId without a child logger.
+* all pino logs in the request inherit requestId / transcriptId without a child logger.
 */
 function logContextMiddleware() {
 	return createMiddleware(async (c, next) => {
 		const headerRequestId = c.req.header("x-request-id")?.trim();
 		const requestId = headerRequestId && headerRequestId.length > 0 ? headerRequestId : randomUUID();
-		const sessionHeader = c.req.header("x-session-id")?.trim();
+		const sessionHeader = c.req.header("x-transcript-id")?.trim();
 		c.header("X-Request-Id", requestId);
 		return runWithLogContext({
 			requestId,
-			...sessionHeader ? { sessionId: sessionHeader } : {}
+			...sessionHeader ? { transcriptId: sessionHeader } : {}
 		}, async () => {
 			await runWithActivityContext({ source: {
 				kind: "gateway_api",

package/dist/src/gateway/hono/routes/agent-stream.js

@@ -20,28 +20,28 @@ function registerAgentStreamRoutes(authenticated, deps) {
 			payload: result
 		});
 	});
-	authenticated.get("/api/sessions/:sessionKey/input-state", (c) => {
-		const sessionKey = (c.req.param("sessionKey") ?? "").trim();
-		if (!sessionKey) return c.json({
+	authenticated.get("/api/sessions/:conversationId/input-state", (c) => {
+		const conversationId = (c.req.param("conversationId") ?? "").trim();
+		if (!conversationId) return c.json({
 			ok: false,
 			error: {
 				code: "BAD_REQUEST",
-				message: "Missing sessionKey"
+				message: "Missing conversationId"
 			}
 		}, 400);
 		return c.json({
 			ok: true,
-			payload: service.getSessionInputState(sessionKey)
+			payload: service.getSessionInputState(conversationId)
 		});
 	});
-	authenticated.post("/api/sessions/:sessionKey/inputs", chatRateLimitMiddleware, async (c) => {
-		return submitSessionInput(c, deps, (c.req.param("sessionKey") ?? "").trim());
+	authenticated.post("/api/sessions/:conversationId/inputs", chatRateLimitMiddleware, async (c) => {
+		return submitSessionInput(c, deps, (c.req.param("conversationId") ?? "").trim());
 	});
-	authenticated.post("/api/sessions/:sessionKey/turns/:turnId/replace", chatRateLimitMiddleware, async (c) => {
-		return replaceLatestSessionTurn(c, deps, (c.req.param("sessionKey") ?? "").trim(), (c.req.param("turnId") ?? "").trim());
+	authenticated.post("/api/sessions/:conversationId/turns/:turnId/replace", chatRateLimitMiddleware, async (c) => {
+		return replaceLatestSessionTurn(c, deps, (c.req.param("conversationId") ?? "").trim(), (c.req.param("turnId") ?? "").trim());
 	});
-	authenticated.patch("/api/sessions/:sessionKey/inputs/:inputId", chatRateLimitMiddleware, async (c) => {
-		const sessionKey = (c.req.param("sessionKey") ?? "").trim();
+	authenticated.patch("/api/sessions/:conversationId/inputs/:inputId", chatRateLimitMiddleware, async (c) => {
+		const conversationId = (c.req.param("conversationId") ?? "").trim();
 		const inputId = c.req.param("inputId")?.trim() ?? "";
 		const body = await c.req.json().catch(() => null);
 		if (!body || typeof body.version !== "number") return c.json({
@@ -78,7 +78,7 @@ function registerAgentStreamRoutes(authenticated, deps) {
 				message: attachmentError
 			}
 		}, 400);
-		const result = await service.updateSessionInput(sessionKey, inputId, {
+		const result = await service.updateSessionInput(conversationId, inputId, {
 			version: body.version,
 			content: typeof body.content === "string" ? body.content : void 0,
 			attachments,
@@ -98,8 +98,8 @@ function registerAgentStreamRoutes(authenticated, deps) {
 			payload: result.state
 		}, 409);
 	});
-	authenticated.delete("/api/sessions/:sessionKey/inputs/:inputId", chatRateLimitMiddleware, (c) => {
-		const sessionKey = (c.req.param("sessionKey") ?? "").trim();
+	authenticated.delete("/api/sessions/:conversationId/inputs/:inputId", chatRateLimitMiddleware, (c) => {
+		const conversationId = (c.req.param("conversationId") ?? "").trim();
 		const inputId = c.req.param("inputId")?.trim() ?? "";
 		const version = Number(c.req.query("version"));
 		if (!Number.isFinite(version)) return c.json({
@@ -109,7 +109,7 @@ function registerAgentStreamRoutes(authenticated, deps) {
 				message: "Missing version"
 			}
 		}, 400);
-		const result = service.removeSessionInput(sessionKey, inputId, version);
+		const result = service.removeSessionInput(conversationId, inputId, version);
 		return result.ok ? c.json({
 			ok: true,
 			payload: result.state
@@ -122,16 +122,16 @@ function registerAgentStreamRoutes(authenticated, deps) {
 			payload: result.state
 		}, 409);
 	});
-	authenticated.get("/api/sessions/:sessionKey/clarification", (c) => {
-		const sessionKey = (c.req.param("sessionKey") ?? "").trim();
-		if (!sessionKey) return c.json({
+	authenticated.get("/api/sessions/:conversationId/clarification", (c) => {
+		const conversationId = (c.req.param("conversationId") ?? "").trim();
+		if (!conversationId) return c.json({
 			ok: false,
 			error: {
 				code: "BAD_REQUEST",
-				message: "Missing sessionKey"
+				message: "Missing conversationId"
 			}
 		}, 400);
-		const snapshot = service.getClarificationState(sessionKey);
+		const snapshot = service.getClarificationState(conversationId);
 		if (!snapshot) return c.json({
 			ok: false,
 			error: {

package/dist/src/gateway/hono/routes/browser-session.js

@@ -6,7 +6,7 @@ function registerBrowserSessionRoutes(app, deps) {
 	app.get("/api/browser-session", (c) => {
 		c.header("Cache-Control", "no-store");
 		const principal = getGatewayPrincipal(c);
-		return c.json({ sessionKey: principal.principalId });
+		return c.json({ conversationId: principal.principalId });
 	});
 	app.post("/api/browser-session", deps.strictRateLimitMiddleware, (c) => {
 		const principal = getGatewayPrincipal(c);
@@ -24,7 +24,7 @@ function registerBrowserSessionRoutes(app, deps) {
 		}
 		writeBrowserSessionCookie(c, session.token, session.expiresAt);
 		c.header("Cache-Control", "no-store");
-		return c.json({ sessionKey: `browser:${session.sessionId}` });
+		return c.json({ conversationId: `browser:${session.sessionId}` });
 	});
 	app.delete("/api/browser-session", (c) => {
 		if (!browserCookieRequestAllowed(c)) return c.json({ error: "Forbidden" }, 403);

package/dist/src/gateway/hono/routes/browser.js

@@ -1,5 +1,6 @@
 import { deleteBrowserTabBinding, getBrowserTabBinding, setBrowserTabBinding } from "../../../storage/sqlite/browser-tab-binding-repository.js";
 import { browserTabBindingRequestSchema } from "../../../../packages/gateway-contract/src/browser-tab-binding.js";
+import { init_src } from "../../../../packages/gateway-contract/src/index.js";
 import { getDevice } from "../../../storage/sqlite/device-access-repository.js";
 import "../../../../packages/browser-control-contract/src/index.js";
 import { decideBrowserApproval, listBrowserApprovals } from "../../../browser/policy/approval-store.js";
@@ -10,6 +11,7 @@ import { getGatewayPrincipal } from "../../security/gateway-principal.js";
 import { getConnInfo } from "@hono/node-server/conninfo";
 //#region src/gateway/hono/routes/browser.ts
 /** Browser Control status, approvals, and driver diagnostics. */
+init_src();
 async function extensionStatus(service, includeLocalArtifacts) {
 	const endpoints = service.endpointTools.registry.list().filter((item) => item.kind === "browser" && item.tools.some((tool) => tool.descriptor.name === "browser.control")).sort((left, right) => right.lastHeartbeatAt - left.lastHeartbeatAt);
 	const endpoint = endpoints[0];
@@ -21,8 +23,8 @@ async function extensionStatus(service, includeLocalArtifacts) {
 		socketConnected: connected,
 		connected,
 		driverKind: "extension",
-		protocolVersion: connected ? 4 : null,
-		expectedProtocolVersion: 4,
+		protocolVersion: connected ? 5 : null,
+		expectedProtocolVersion: 5,
 		extensionVersion,
 		endpoints: endpoints.map((item) => ({
 			endpointId: item.endpointId,
@@ -67,16 +69,16 @@ function chromeDevicePrincipal(c) {
 	const device = getDevice(principal.deviceId);
 	return device?.platform === "chrome" && device.revokedAt === void 0 ? principal : void 0;
 }
-function canManageBrowserSession(c, service, sessionKey) {
+function canManageBrowserSession(c, service, conversationId) {
 	const principal = chromeDevicePrincipal(c);
-	if (principal) return getBrowserTabBinding(sessionKey)?.principalId === principal.deviceId;
+	if (principal) return getBrowserTabBinding(conversationId)?.principalId === principal.deviceId;
 	return isLocalOwnerRequest(c, service);
 }
 function registerBrowserRoutes(authenticated, deps) {
 	const { service, strictRateLimitMiddleware } = deps;
-	authenticated.get("/api/browser/tab-bindings/:sessionKey", (c) => {
-		const sessionKey = c.req.param("sessionKey").trim();
-		const binding = getBrowserTabBinding(sessionKey);
+	authenticated.get("/api/browser/tab-bindings/:conversationId", (c) => {
+		const conversationId = c.req.param("conversationId").trim();
+		const binding = getBrowserTabBinding(conversationId);
 		if (!binding) return c.json({
 			ok: false,
 			error: {
@@ -84,7 +86,7 @@ function registerBrowserRoutes(authenticated, deps) {
 				message: "Tab binding not found"
 			}
 		}, 404);
-		if (!canManageBrowserSession(c, service, sessionKey)) return c.json({
+		if (!canManageBrowserSession(c, service, conversationId)) return c.json({
 			ok: false,
 			error: {
 				code: "FORBIDDEN",
@@ -96,7 +98,7 @@ function registerBrowserRoutes(authenticated, deps) {
 			payload: binding
 		});
 	});
-	authenticated.put("/api/browser/tab-bindings/:sessionKey", async (c) => {
+	authenticated.put("/api/browser/tab-bindings/:conversationId", async (c) => {
 		const principal = chromeDevicePrincipal(c);
 		if (!principal?.deviceId) return c.json({
 			ok: false,
@@ -121,8 +123,8 @@ function registerBrowserRoutes(authenticated, deps) {
 				message: "Browser endpoint is not active"
 			}
 		}, 401);
-		const sessionKey = c.req.param("sessionKey").trim();
-		if (!sessionKey || !await service.sessions.getSession(sessionKey)) return c.json({
+		const conversationId = c.req.param("conversationId").trim();
+		if (!conversationId || !await service.sessions.getSession(conversationId)) return c.json({
 			ok: false,
 			error: {
 				code: "NOT_FOUND",
@@ -132,7 +134,7 @@ function registerBrowserRoutes(authenticated, deps) {
 		const { turnToken: _turnToken, ...bindingInput } = parsed.data;
 		const binding = setBrowserTabBinding({
 			...bindingInput,
-			sessionKey,
+			conversationId,
 			principalId: principal.deviceId
 		});
 		return c.json({
@@ -140,9 +142,9 @@ function registerBrowserRoutes(authenticated, deps) {
 			payload: binding
 		});
 	});
-	authenticated.delete("/api/browser/tab-bindings/:sessionKey", (c) => {
-		const sessionKey = c.req.param("sessionKey").trim();
-		if (!canManageBrowserSession(c, service, sessionKey)) return c.json({
+	authenticated.delete("/api/browser/tab-bindings/:conversationId", (c) => {
+		const conversationId = c.req.param("conversationId").trim();
+		if (!canManageBrowserSession(c, service, conversationId)) return c.json({
 			ok: false,
 			error: {
 				code: "FORBIDDEN",
@@ -151,7 +153,7 @@ function registerBrowserRoutes(authenticated, deps) {
 		}, 403);
 		return c.json({
 			ok: true,
-			payload: { removed: deleteBrowserTabBinding(sessionKey) }
+			payload: { removed: deleteBrowserTabBinding(conversationId) }
 		});
 	});
 	authenticated.get("/api/browser/extension-status", async (c) => {
@@ -295,20 +297,20 @@ function registerBrowserRoutes(authenticated, deps) {
 		}
 	});
 	authenticated.get("/api/browser/approvals", (c) => {
-		const sessionKey = c.req.query("sessionKey");
-		if (!isLocalOwnerRequest(c, service) && (!sessionKey || !canManageBrowserSession(c, service, sessionKey))) return c.json({
+		const conversationId = c.req.query("conversationId");
+		if (!isLocalOwnerRequest(c, service) && (!conversationId || !canManageBrowserSession(c, service, conversationId))) return c.json({
 			ok: false,
 			error: "Local owner access required."
 		}, 403);
 		return c.json({
 			ok: true,
-			approvals: listBrowserApprovals(sessionKey)
+			approvals: listBrowserApprovals(conversationId)
 		});
 	});
 	authenticated.post("/api/browser/approvals/respond", strictRateLimitMiddleware, async (c) => {
 		const body = await c.req.json().catch(() => null);
 		const approval = typeof body?.id === "string" ? listBrowserApprovals().find((candidate) => candidate.id === body.id) : void 0;
-		if (!isLocalOwnerRequest(c, service) && (!approval || !canManageBrowserSession(c, service, approval.sessionKey))) return c.json({
+		if (!isLocalOwnerRequest(c, service) && (!approval || !canManageBrowserSession(c, service, approval.conversationId))) return c.json({
 			ok: false,
 			error: "Local owner access required."
 		}, 403);

package/dist/src/gateway/hono/routes/chat-model-config.d.ts

@@ -1,6 +1,6 @@
 import type { Context } from 'hono';
 import type { AuthenticatedRouteDeps } from './deps.js';
-export declare function patchChatModelConfig(c: Context, service: AuthenticatedRouteDeps['service'], sessionKey: string, body: Record<string, unknown>): Promise<(Response & import("hono").TypedResponse<{
+export declare function patchChatModelConfig(c: Context, service: AuthenticatedRouteDeps['service'], conversationId: string, body: Record<string, unknown>): Promise<(Response & import("hono").TypedResponse<{
     ok: false;
     error: string;
     code: string;

package/dist/src/gateway/hono/routes/chat-model-config.js

@@ -1,11 +1,11 @@
 import { withModelConfigLock } from "../../../session/model-config-lock.js";
 //#region src/gateway/hono/routes/chat-model-config.ts
-async function patchChatModelConfig(c, service, sessionKey, body) {
-	return withModelConfigLock(sessionKey, async () => {
+async function patchChatModelConfig(c, service, conversationId, body) {
+	return withModelConfigLock(conversationId, async () => {
 		const changesModel = body.model !== void 0 || body.thinkingLevel !== void 0;
 		if (changesModel) {
-			const state = service.getSessionInputState(sessionKey);
-			if (service.sessions.getActiveRun(sessionKey).active || state.activeRunId || state.inputs.length > 0) return c.json({
+			const state = service.getSessionInputState(conversationId);
+			if (service.sessions.getActiveRun(conversationId).active || state.activeRunId || state.inputs.length > 0) return c.json({
 				ok: false,
 				error: "Wait for the current reply and pending inputs to finish",
 				code: "SESSION_BUSY"
@@ -23,7 +23,7 @@ async function patchChatModelConfig(c, service, sessionKey, body) {
 				error: "Select a specific model"
 			}, 400);
 		}
-		const result = await service.sessions.patchAgentConfig(sessionKey, {
+		const result = await service.sessions.patchAgentConfig(conversationId, {
 			...body,
 			...changesModel ? { fixedModel: true } : {}
 		});
@@ -34,7 +34,7 @@ async function patchChatModelConfig(c, service, sessionKey, body) {
 		}, result.code === "CONFIG_CHANGED" ? 409 : 400);
 		return c.json({
 			ok: true,
-			payload: await service.sessions.getAgentConfig(sessionKey)
+			payload: await service.sessions.getAgentConfig(conversationId)
 		});
 	});
 }

package/dist/src/gateway/hono/routes/commands-skills.js

@@ -58,9 +58,9 @@ function registerCommandsSkillsRoutes(authenticated, deps) {
 		});
 	});
 	authenticated.get("/api/review/context", async (c) => {
-		const sessionKey = c.req.query("sessionKey")?.trim() || "agent:main:main";
+		const conversationId = c.req.query("conversationId")?.trim();
 		try {
-			const payload = await buildReviewContext(await resolveGitRoot(effectiveWorkspacePathForSession(service.getConfig(), sessionKey, null, getProjectForSession(sessionKey))));
+			const payload = await buildReviewContext(await resolveGitRoot(effectiveWorkspacePathForSession(service.getConfig(), conversationId, null, getProjectForSession(conversationId))));
 			return c.json({
 				ok: true,
 				payload
@@ -76,21 +76,21 @@ function registerCommandsSkillsRoutes(authenticated, deps) {
 		}
 	});
 	authenticated.get("/api/chat/skills", async (c) => {
-		const sessionKey = c.req.query("sessionKey")?.trim();
+		const conversationId = c.req.query("conversationId")?.trim();
 		const agentId = c.req.query("agentId")?.trim() || service.getConfig().agents?.default || "main";
-		const payload = sessionKey ? await service.marketplace.getSessionSkillsApi(sessionKey) : service.marketplace.getAgentSkillsApi(agentId);
+		const payload = conversationId ? await service.marketplace.getSessionSkillsApi(conversationId) : service.marketplace.getAgentSkillsApi(agentId);
 		return c.json({
 			ok: true,
 			payload
 		});
 	});
 	authenticated.get("/api/chat/workspace-trust", async (c) => {
-		const sessionKey = c.req.query("sessionKey")?.trim();
-		if (!sessionKey) return c.json({
+		const conversationId = c.req.query("conversationId")?.trim();
+		if (!conversationId) return c.json({
 			ok: false,
-			error: "Missing sessionKey"
+			error: "Missing conversationId"
 		}, 400);
-		const payload = await service.marketplace.getSessionWorkspaceTrustApi(sessionKey);
+		const payload = await service.marketplace.getSessionWorkspaceTrustApi(conversationId);
 		return c.json({
 			ok: true,
 			payload
@@ -106,19 +106,19 @@ function registerCommandsSkillsRoutes(authenticated, deps) {
 				error: "Invalid JSON"
 			}, 400);
 		}
-		const sessionKey = typeof body.sessionKey === "string" ? body.sessionKey.trim() : "";
-		if (!sessionKey || typeof body.trusted !== "boolean") return c.json({
+		const conversationId = typeof body.conversationId === "string" ? body.conversationId.trim() : "";
+		if (!conversationId || typeof body.trusted !== "boolean") return c.json({
 			ok: false,
-			error: "Expected { sessionKey: string, trusted: boolean }"
+			error: "Expected { conversationId: string, trusted: boolean }"
 		}, 400);
-		const payload = await service.marketplace.setSessionWorkspaceTrustApi(sessionKey, body.trusted);
+		const payload = await service.marketplace.setSessionWorkspaceTrustApi(conversationId, body.trusted);
 		return c.json({
 			ok: true,
 			payload
 		});
 	});
 	authenticated.get("/api/chat/capabilities", (c) => {
-		const payload = service.agentService.getCapabilityCatalog(c.req.query("sessionKey")?.trim());
+		const payload = service.agentService.getCapabilityCatalog(c.req.query("conversationId")?.trim());
 		return c.json({
 			ok: true,
 			payload

package/dist/src/gateway/hono/routes/config-patch/misc.js

@@ -1,4 +1,5 @@
-import { ContextPlanningConfigSchema, KnowledgeMemoryConfigSchema, UserContextConfigSchema, UserModelConfigSchema, init_config } from "../../../../user-context/config.js";
+import { ComputerConfigSchema, init_config } from "../../../../computer/config.js";
+import { ContextPlanningConfigSchema, KnowledgeMemoryConfigSchema, UserContextConfigSchema, UserModelConfigSchema, init_config as init_config$1 } from "../../../../user-context/config.js";
 import { BindingsConfigSchema, BrowserConfigSchema, McpConfigSchema, VoiceConfigSchema, init_schema } from "../../../../config/schema.js";
 import { CredentialResolver, init_credentials } from "../../../../auth/credentials.js";
 import { canonicalizeConfiguredMcpServer } from "../../../../config/mcp-config-normalize.js";
@@ -12,9 +13,10 @@ import { assertGatewayRuntimeConfig } from "../../../runtime-config.js";
 import { mergeRealtimeVoiceConfigPatch, mergeSttConfigPatch, mergeTtsConfigPatch } from "../../lib/safe-voice-config.js";
 import { PATCH_OK, patchError } from "./result.js";
 //#region src/gateway/hono/routes/config-patch/misc.ts
+init_config();
 init_schema();
 init_credentials();
-init_config();
+init_config$1();
 async function applyMiscPatch(config, body) {
 	if (body.update !== void 0 && typeof body.update === "object" && body.update !== null) {
 		const updateResult = mergeUpdateConfigPatch(config, body.update);
@@ -137,6 +139,15 @@ async function applyMiscPatch(config, body) {
 		if (!parsed.success) return patchError(parsed.error.issues.map((i) => i.message).join("; "));
 		config.browser = parsed.data;
 	}
+	if (body.computer !== void 0) {
+		if (!body.computer || typeof body.computer !== "object" || Array.isArray(body.computer)) return patchError("computer must be an object");
+		const parsed = ComputerConfigSchema.safeParse({
+			...config.computer,
+			...body.computer
+		});
+		if (!parsed.success) return patchError(parsed.error.issues.map((issue) => issue.message).join("; "));
+		config.computer = parsed.data;
+	}
 	if (body.gateway !== void 0 && typeof body.gateway === "object" && body.gateway !== null && !Array.isArray(body.gateway)) {
 		const gwPatch = body.gateway;
 		if (gwPatch.skillsMarketplaceProvider !== void 0 || gwPatch.skillsStoreBaseUrl !== void 0) {

package/dist/src/gateway/hono/routes/connection-waits.js

@@ -2,7 +2,7 @@ import { z } from "zod";
 //#region src/gateway/hono/routes/connection-waits.ts
 const actionSchema = z.object({
 	waitId: z.string().min(1),
-	expectedSessionId: z.string().min(1),
+	expectedTranscriptId: z.string().min(1),
 	expectedVersion: z.number().int().positive(),
 	idempotencyKey: z.string().min(1).max(200),
 	action: z.enum([
@@ -20,11 +20,11 @@ const actionSchema = z.object({
 	accountId: z.string().optional()
 }).strict();
 function registerConnectionWaitRoutes(app, { service, strictRateLimitMiddleware }) {
-	app.get("/api/sessions/:sessionKey/connection-wait", (c) => {
+	app.get("/api/sessions/:conversationId/connection-wait", (c) => {
 		try {
 			return c.json({
 				ok: true,
-				payload: service.connectionRecovery.snapshot(c.req.param("sessionKey"))
+				payload: service.connectionRecovery.snapshot(c.req.param("conversationId"))
 			});
 		} catch {
 			return c.json({
@@ -33,14 +33,14 @@ function registerConnectionWaitRoutes(app, { service, strictRateLimitMiddleware
 			}, 404);
 		}
 	});
-	app.post("/api/sessions/:sessionKey/connection-wait/actions", strictRateLimitMiddleware, async (c) => {
+	app.post("/api/sessions/:conversationId/connection-wait/actions", strictRateLimitMiddleware, async (c) => {
 		const parsed = actionSchema.safeParse(await c.req.json().catch(() => null));
 		if (!parsed.success) return c.json({
 			ok: false,
 			error: "Invalid connection action"
 		}, 400);
 		try {
-			const payload = await service.connectionRecovery.act(c.req.param("sessionKey"), parsed.data);
+			const payload = await service.connectionRecovery.act(c.req.param("conversationId"), parsed.data);
 			return c.json({
 				ok: true,
 				payload