@xopcai/xopc 0.0.312 → 0.0.314

package/dist/src/projects/project-service.js

@@ -2,12 +2,36 @@ import { init_transaction, runSqliteWriteTransaction } from "../storage/sqlite/t
 import { getSessionMetadata } from "../storage/sqlite/session-read-repository.js";
 import "../storage/sqlite/index.js";
 import { changedFieldsFromPatch, emitActivity, systemActivityActor, systemActivitySource } from "../activity/emitter.js";
+import { ExecutionEnvironmentStore } from "../execution-environments/store.js";
 import { ProjectStore } from "./project-store.js";
-import { ProjectWorkspaceConflictError, ProjectWorkspaceMissingError, canonicalWorkspacePath, ensureWorkspaceDirectory, inferProjectNameFromWorkspaceRoot, isPathSameOrInsideWorkspace, isSafeAutoCreateWorkspaceRoot, resolveWorkspaceProjectRoot, workspaceDirectoryExists } from "./workspace-project.js";
+import { enqueueProjectChanged } from "./project-change-events.js";
+import { ProjectWorkspaceConflictError, ProjectWorkspaceMissingError, canonicalWorkspacePath, inferProjectNameFromWorkspaceRoot, isPathSameOrInsideWorkspace, isSafeAutoCreateWorkspaceRoot, resolveWorkspaceProjectRoot, workspaceDirectoryExists } from "./workspace-project.js";
+import { drainProjectWorkspaceCreation, queueProjectWorkspaceCreation } from "./project-workspace-creation.js";
+import { DomainOutboxDispatcher } from "../infra/domain-outbox-dispatcher.js";
+import { publishAutomationProductEvent } from "../automations/product-events.js";
+import { listPendingProjectUnderstandingRuns } from "../work-discovery/repository.js";
 import { inferProjectExecutionMode } from "./project-kind.js";
 import { bindSessionToProject, listProjectConversationIds, unbindSessionFromProject } from "./session-bind.js";
 //#region src/projects/project-service.ts
 init_transaction();
+var ProjectDeletionBlockedError = class extends Error {
+	constructor() {
+		super("Delete the project execution environments before deleting the project");
+		this.name = "ProjectDeletionBlockedError";
+	}
+};
+var ProjectWorkspaceInvalidError = class extends Error {
+	constructor() {
+		super("Invalid workspace root");
+		this.name = "ProjectWorkspaceInvalidError";
+	}
+};
+var ProjectWorkspaceInUseError = class extends Error {
+	constructor() {
+		super("Delete the project execution environments before changing its workspace");
+		this.name = "ProjectWorkspaceInUseError";
+	}
+};
 var ProjectService = class {
 	constructor(store = new ProjectStore()) {
 		this.store = store;
@@ -30,12 +54,12 @@ var ProjectService = class {
 	create(input) {
 		const rawWorkspaceRoot = input.workspaceRoot?.trim();
 		const workspaceRoot = rawWorkspaceRoot ? canonicalWorkspacePath(rawWorkspaceRoot) : void 0;
-		if (rawWorkspaceRoot && !workspaceRoot) throw new Error("Invalid workspace root");
+		if (rawWorkspaceRoot && !workspaceRoot) throw new ProjectWorkspaceInvalidError();
+		const needsWorkspaceCreation = Boolean(workspaceRoot && !workspaceDirectoryExists(workspaceRoot));
 		if (workspaceRoot) {
 			const existing = this.findByWorkspaceRoot(workspaceRoot);
 			if (existing) throw new ProjectWorkspaceConflictError(existing);
-			if (!workspaceDirectoryExists(workspaceRoot)) if (input.createWorkspaceRoot === true) ensureWorkspaceDirectory(workspaceRoot);
-			else throw new ProjectWorkspaceMissingError(workspaceRoot);
+			if (needsWorkspaceCreation && input.createWorkspaceRoot !== true) throw new ProjectWorkspaceMissingError(workspaceRoot);
 		}
 		const name = input.name?.trim() || inferProjectNameFromWorkspaceRoot(workspaceRoot) || "";
 		const slug = input.slug?.trim() || this.store.generateSlug(name);
@@ -45,35 +69,39 @@ var ProjectService = class {
 			workspaceRoot,
 			projectKind: input.projectKind
 		});
-		const project = this.store.create({
-			...input,
-			name,
-			slug,
-			workspaceRoot,
-			executionMode
-		});
-		emitActivity({
-			type: "project.created",
-			primaryObject: {
-				kind: "project",
-				id: project.id,
-				title: project.name
-			},
-			actor: systemActivityActor(),
-			source: systemActivitySource(),
-			payload: {
-				name: project.name,
-				workspaceRoot: project.workspaceRoot,
-				brief: project.brief
-			},
-			scopes: [{
-				scopeKind: "project",
-				scopeId: project.id,
-				reason: "object_owner"
-			}],
-			nowMs: project.createdAt
+		return runSqliteWriteTransaction(() => {
+			const project = this.store.create({
+				...input,
+				name,
+				slug,
+				workspaceRoot,
+				executionMode
+			});
+			if (needsWorkspaceCreation && workspaceRoot) queueProjectWorkspaceCreation(project.id, workspaceRoot);
+			emitActivity({
+				type: "project.created",
+				primaryObject: {
+					kind: "project",
+					id: project.id,
+					title: project.name
+				},
+				actor: systemActivityActor(),
+				source: systemActivitySource(),
+				payload: {
+					name: project.name,
+					workspaceRoot: project.workspaceRoot,
+					brief: project.brief
+				},
+				scopes: [{
+					scopeKind: "project",
+					scopeId: project.id,
+					reason: "object_owner"
+				}],
+				nowMs: project.createdAt
+			});
+			enqueueProjectChanged(project, [], "created");
+			return project;
 		});
-		return project;
 	}
 	get(id) {
 		return this.store.get(id);
@@ -143,19 +171,26 @@ var ProjectService = class {
 		};
 	}
 	update(id, input) {
+		if (!this.store.get(id)) throw new Error(`Project not found: ${id}`);
 		const patch = { ...input };
+		let needsWorkspaceCreation = false;
 		if (input.workspaceRoot !== void 0 && input.workspaceRoot !== null && input.workspaceRoot.trim()) {
 			const workspaceRoot = canonicalWorkspacePath(input.workspaceRoot);
-			if (!workspaceRoot) throw new Error("Invalid workspace root");
+			if (!workspaceRoot) throw new ProjectWorkspaceInvalidError();
 			const existing = this.findByWorkspaceRoot(workspaceRoot, { excludeProjectId: id });
 			if (existing) throw new ProjectWorkspaceConflictError(existing);
-			if (!workspaceDirectoryExists(workspaceRoot)) if (input.createWorkspaceRoot === true) ensureWorkspaceDirectory(workspaceRoot);
-			else throw new ProjectWorkspaceMissingError(workspaceRoot);
+			needsWorkspaceCreation = !workspaceDirectoryExists(workspaceRoot);
+			if (needsWorkspaceCreation && input.createWorkspaceRoot !== true) throw new ProjectWorkspaceMissingError(workspaceRoot);
 			patch.workspaceRoot = workspaceRoot;
 		}
 		return runSqliteWriteTransaction(() => {
 			const before = this.store.get(id);
+			if (patch.workspaceRoot !== void 0 && (patch.workspaceRoot || void 0) !== before?.workspaceRoot && new ExecutionEnvironmentStore().list({
+				projectId: id,
+				limit: 1
+			}).length) throw new ProjectWorkspaceInUseError();
 			const project = this.store.update(id, patch);
+			if (needsWorkspaceCreation && project.workspaceRoot) queueProjectWorkspaceCreation(project.id, project.workspaceRoot);
 			const changes = changedFieldsFromPatch(patch, ["createWorkspaceRoot"]);
 			const type = before?.status !== project.status ? "project.status_changed" : before?.workspaceRoot !== project.workspaceRoot ? "project.workspace_changed" : "project.updated";
 			emitActivity({
@@ -185,6 +220,7 @@ var ProjectService = class {
 				}],
 				nowMs: project.updatedAt
 			});
+			enqueueProjectChanged(project, changes);
 			return project;
 		});
 	}
@@ -195,7 +231,21 @@ var ProjectService = class {
 		return this.update(id, { pinnedAt: null });
 	}
 	delete(id) {
-		this.store.delete(id);
+		runSqliteWriteTransaction(() => {
+			const project = this.store.get(id);
+			if (!project) return;
+			if (new ExecutionEnvironmentStore().list({
+				projectId: id,
+				limit: 1
+			}).length) throw new ProjectDeletionBlockedError();
+			const deletedUnderstandingRunIds = listPendingProjectUnderstandingRuns(id).map((run) => run.id);
+			this.store.delete(id);
+			enqueueProjectChanged({
+				...project,
+				version: project.version + 1,
+				updatedAt: Math.max(Date.now(), project.updatedAt + 1)
+			}, [], "deleted", deletedUnderstandingRunIds);
+		});
 	}
 	getWithDetails(id) {
 		return this.store.getWithDetails(id);
@@ -204,22 +254,51 @@ var ProjectService = class {
 		return this.store.listMilestones(projectId);
 	}
 	createMilestone(projectId, input) {
-		return this.store.createMilestone(projectId, input);
+		return runSqliteWriteTransaction(() => {
+			const milestone = this.store.createMilestone(projectId, input);
+			this.recordMilestoneChange(projectId);
+			return milestone;
+		});
 	}
 	updateMilestone(projectId, milestoneId, input) {
-		return this.store.updateMilestone(projectId, milestoneId, input);
+		return runSqliteWriteTransaction(() => {
+			const milestone = this.store.updateMilestone(projectId, milestoneId, input);
+			this.recordMilestoneChange(projectId);
+			return milestone;
+		});
 	}
 	deleteMilestone(projectId, milestoneId) {
-		return this.store.deleteMilestone(projectId, milestoneId);
+		return runSqliteWriteTransaction(() => {
+			const deleted = this.store.deleteMilestone(projectId, milestoneId);
+			if (deleted) this.recordMilestoneChange(projectId);
+			return deleted;
+		});
+	}
+	recordMilestoneChange(projectId) {
+		enqueueProjectChanged(this.store.update(projectId, {}), ["milestones"]);
+	}
+	flushCommittedEffects(projectId) {
+		drainProjectWorkspaceCreation(projectId);
+		new DomainOutboxDispatcher(publishAutomationProductEvent).drain(100, "project");
 	}
 	listUpdates(projectId, limit) {
 		return this.store.listUpdates(projectId, limit);
 	}
 	createUpdate(projectId, input) {
-		return this.store.createUpdate(projectId, input);
+		return runSqliteWriteTransaction(() => {
+			const update = this.store.createUpdate(projectId, input);
+			enqueueProjectChanged(this.store.get(projectId), ["health", "updates"]);
+			return update;
+		});
 	}
 	attachSession(conversationId, projectId) {
-		bindSessionToProject(conversationId, projectId);
+		runSqliteWriteTransaction(() => {
+			const previousProjectId = getSessionMetadata(conversationId)?.projectId;
+			if (previousProjectId === projectId) return;
+			bindSessionToProject(conversationId, projectId);
+			enqueueProjectChanged(this.store.update(projectId, {}), ["sessions"]);
+			if (previousProjectId && this.store.get(previousProjectId)) enqueueProjectChanged(this.store.update(previousProjectId, {}), ["sessions"]);
+		});
 	}
 	detachSession(conversationId) {
 		unbindSessionFromProject(conversationId);
@@ -265,4 +344,4 @@ var ProjectService = class {
 	}
 };
 //#endregion
-export { ProjectService };
+export { ProjectDeletionBlockedError, ProjectService, ProjectWorkspaceInUseError, ProjectWorkspaceInvalidError };

package/dist/src/projects/project-store.js

@@ -112,7 +112,7 @@ var ProjectStore = class {
 			...input.status !== void 0 ? { status: input.status } : {},
 			...input.targetAt !== void 0 ? { targetAt: input.targetAt ?? void 0 } : {},
 			...input.sortOrder !== void 0 ? { sortOrder: Math.floor(input.sortOrder) } : {},
-			updatedAt: Date.now()
+			updatedAt: Math.max(Date.now(), current.updatedAt + 1)
 		};
 		getSqliteDatabase().prepare(`UPDATE project_milestones SET title = ?, description = ?, status = ?, target_at = ?,
         sort_order = ?, updated_at = ? WHERE milestone_id = ? AND project_id = ?`).run(next.title, next.description ?? null, next.status, next.targetAt ?? null, next.sortOrder, next.updatedAt, milestoneId, projectId);
@@ -145,7 +145,17 @@ var ProjectStore = class {
          VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)`).run(id, projectId, input.health, summary, JSON.stringify(input.progress ?? []), JSON.stringify(input.risks ?? []), JSON.stringify(input.nextSteps ?? []), JSON.stringify(input.actor), createdAt);
 			db.prepare(`UPDATE projects SET health = ?, updated_at = ?, version = version + 1 WHERE project_id = ?`).run(input.health, createdAt, projectId);
 		});
-		return this.listUpdates(projectId, 1)[0];
+		return {
+			id,
+			projectId,
+			health: input.health,
+			summary,
+			progress: input.progress ?? [],
+			risks: input.risks ?? [],
+			nextSteps: input.nextSteps ?? [],
+			actor: input.actor,
+			createdAt
+		};
 	}
 	create(input) {
 		const now = Date.now();

package/dist/src/projects/project-workspace-creation.d.ts

@@ -0,0 +1,3 @@
+export declare function queueProjectWorkspaceCreation(projectId: string, workspaceRoot: string): void;
+/** A requested project ID means an explicit retry; background drains honor backoff. */
+export declare function drainProjectWorkspaceCreation(projectId?: string): void;

package/dist/src/projects/project-workspace-creation.js

@@ -0,0 +1,45 @@
+import { createLogger } from "../utils/logger/index.js";
+import { init_logger } from "../utils/logger.js";
+import { afterSqliteCommit, getSqliteDatabase, init_transaction } from "../storage/sqlite/transaction.js";
+import { canonicalWorkspacePath, ensureWorkspaceDirectory } from "./workspace-project.js";
+import { isAbsolute } from "node:path";
+//#region src/projects/project-workspace-creation.ts
+init_transaction();
+init_logger();
+const log = createLogger("ProjectWorkspaceCreation");
+function queueProjectWorkspaceCreation(projectId, workspaceRoot) {
+	getSqliteDatabase().prepare(`INSERT INTO project_workspace_creation (project_id, workspace_root, created_at)
+    VALUES (?, ?, ?) ON CONFLICT(project_id) DO UPDATE SET workspace_root = excluded.workspace_root,
+      created_at = excluded.created_at, attempts = 0, next_attempt_at = 0`).run(projectId, workspaceRoot, Date.now());
+	afterSqliteCommit(() => drainProjectWorkspaceCreation(projectId));
+}
+/** A requested project ID means an explicit retry; background drains honor backoff. */
+function drainProjectWorkspaceCreation(projectId) {
+	const db = getSqliteDatabase();
+	const rows = db.prepare(`SELECT q.project_id, q.workspace_root, q.attempts, p.workspace_root AS current_root
+    FROM project_workspace_creation q JOIN projects p ON p.project_id = q.project_id
+    WHERE (? IS NULL OR q.project_id = ?) AND (? IS NOT NULL OR q.next_attempt_at <= ?)
+    ORDER BY q.created_at LIMIT 100`).all(projectId ?? null, projectId ?? null, projectId ?? null, Date.now());
+	for (const row of rows) {
+		if (row.current_root !== row.workspace_root) {
+			db.prepare("DELETE FROM project_workspace_creation WHERE project_id = ? AND workspace_root = ?").run(row.project_id, row.workspace_root);
+			continue;
+		}
+		try {
+			if (!isAbsolute(row.workspace_root) || canonicalWorkspacePath(row.workspace_root) !== row.workspace_root) throw new Error("Workspace path changed since creation was requested");
+			ensureWorkspaceDirectory(row.workspace_root);
+			db.prepare("DELETE FROM project_workspace_creation WHERE project_id = ? AND workspace_root = ?").run(row.project_id, row.workspace_root);
+		} catch (error) {
+			db.prepare(`UPDATE project_workspace_creation SET attempts = attempts + 1, next_attempt_at = ?
+        WHERE project_id = ? AND workspace_root = ?`).run(Date.now() + Math.min(3e5, 1e3 * 2 ** Math.min(row.attempts, 8)), row.project_id, row.workspace_root);
+			if (row.attempts === 0) log.warn({
+				err: error,
+				projectId: row.project_id,
+				path: row.workspace_root
+			}, "Project workspace creation failed; recovery is pending");
+			if (projectId) throw error;
+		}
+	}
+}
+//#endregion
+export { drainProjectWorkspaceCreation, queueProjectWorkspaceCreation };

package/dist/src/projects/workspace-project.js

@@ -48,6 +48,12 @@ function canonicalWorkspacePath(raw) {
 		if (!statSync(normalized).isDirectory()) return normalized;
 		return realpathSync.native(normalized);
 	} catch {
+		let parent = dirname(normalized);
+		while (parent !== dirname(parent)) try {
+			return resolve(realpathSync.native(parent), relative(parent, normalized));
+		} catch {
+			parent = dirname(parent);
+		}
 		return normalized;
 	}
 }

package/dist/src/providers/model-catalog-types.d.ts

@@ -1,8 +1,9 @@
+import type { ComputerProfile } from '@xopcai/computer-control-contract';
 import type { VoiceManifest } from '@xopcai/realtime-protocol/voice';
 export interface CatalogModel {
     voice?: VoiceManifest;
     computerUse?: {
-        profile: 'gui-plus-2026-02-26' | 'structured-tools-v1';
+        profile: ComputerProfile;
     };
     id: string;
     name: string;

package/dist/src/providers/model-reference-auditor.js

@@ -1,12 +1,12 @@
-import { init_model_policy, isComputerModel } from "../computer/model-policy.js";
+import { init_model_policy, isComputerModel, isDedicatedComputerProfile } from "../computer/model-policy.js";
 import { getModelCatalogStore, init_model_catalog_store } from "./model-catalog-store.js";
 import { getModelRegistry, init_model_registry } from "./model-registry.js";
 import { parseImageGenerationModelRef } from "../agent/image/generation/model-ref.js";
 import { getImageGenerationProvider } from "../agent/image/generation/provider-registry.js";
 //#region src/providers/model-reference-auditor.ts
+init_model_policy();
 init_model_catalog_store();
 init_model_registry();
-init_model_policy();
 function asRecord(value) {
 	return value && typeof value === "object" && !Array.isArray(value) ? value : void 0;
 }
@@ -53,9 +53,9 @@ function suggestedRef(ref, catalog) {
 	const providerId = ref.split("/")[0];
 	const source = Object.values(catalog.sources).find((entry) => entry.providerId === providerId);
 	if (!source) return void 0;
-	const available = new Set(source.models.filter((model) => model.availability === "available" && !model.computerUse).map((model) => model.id));
+	const available = new Set(source.models.filter((model) => model.availability === "available" && !isDedicatedComputerProfile(model.computerUse?.profile)).map((model) => model.id));
 	if (source.recommendedModel && available.has(source.recommendedModel)) return `${providerId}/${source.recommendedModel}`;
-	const first = source.models.find((model) => model.availability === "available" && !model.computerUse);
+	const first = source.models.find((model) => model.availability === "available" && !isDedicatedComputerProfile(model.computerUse?.profile));
 	return first ? `${providerId}/${first.id}` : void 0;
 }
 function hasImageGenerationModel(ref) {

package/dist/src/providers/model-supplements.js

@@ -4,11 +4,15 @@ import { getModel } from "@earendil-works/pi-ai/compat";
 /** Correct narrowly scoped upstream catalog metadata while older pi-ai data is still installed. */
 function applyOfficialModelMetadataCorrections(model) {
 	const correctedContextWindow = OPENAI_CONTEXT_WINDOW_CORRECTIONS.get(model.id);
-	if ((model.provider === "openai" || model.provider === "openai-codex") && correctedContextWindow !== void 0 && model.contextWindow === STALE_OPENAI_CONTEXT_WINDOW) return {
+	const corrected = (model.provider === "openai" || model.provider === "openai-codex") && correctedContextWindow !== void 0 && model.contextWindow === STALE_OPENAI_CONTEXT_WINDOW ? {
 		...model,
 		contextWindow: correctedContextWindow
+	} : model;
+	if (corrected.provider !== "openai" || corrected.api !== "openai-responses" || !OPENAI_COMPUTER_MODELS.has(corrected.id)) return corrected;
+	return {
+		...corrected,
+		computerUse: { profile: "openai-responses-computer-v1" }
 	};
-	return model;
 }
 /**
 * Small local supplement for official model aliases that may lag in pi-ai.
@@ -39,7 +43,7 @@ function getSupplementalModels() {
 		computerUse: { profile: "gui-plus-2026-02-26" }
 	}];
 }
-var STALE_OPENAI_CONTEXT_WINDOW, OPENAI_CONTEXT_WINDOW_CORRECTIONS;
+var STALE_OPENAI_CONTEXT_WINDOW, OPENAI_CONTEXT_WINDOW_CORRECTIONS, OPENAI_COMPUTER_MODELS;
 var init_model_supplements = __esmMin((() => {
 	STALE_OPENAI_CONTEXT_WINDOW = 272e3;
 	OPENAI_CONTEXT_WINDOW_CORRECTIONS = new Map([
@@ -51,6 +55,12 @@ var init_model_supplements = __esmMin((() => {
 		["gpt-5.6-sol", 105e4],
 		["gpt-5.6-terra", 105e4]
 	]);
+	OPENAI_COMPUTER_MODELS = new Set([
+		"gpt-6-astra",
+		"gpt-5.6-sol",
+		"gpt-5.6-terra",
+		"gpt-5.6-luna"
+	]);
 }));
 //#endregion
 init_model_supplements();

package/dist/src/providers/presentation.js

@@ -1,4 +1,4 @@
-import { init_model_policy, isComputerModel } from "../computer/model-policy.js";
+import { init_model_policy, isDedicatedComputerModel } from "../computer/model-policy.js";
 import { getProviderRegistry, init_plugin_registry } from "./plugin-registry.js";
 import { PROVIDER_META, getAllModels, getAllProviders, getModelsByProvider, getProviderDisplayName, init_providers, isProviderConfigured } from "./index.js";
 import { getDomesticProviderPreset, getDomesticProviderPresetIds } from "./domestic-presets.js";
@@ -246,7 +246,7 @@ function modelToCatalogView(model) {
 		...model.contextWindow ? { contextWindow: model.contextWindow } : {},
 		...model.maxTokens ? { maxTokens: model.maxTokens } : {},
 		vision: input.includes("image"),
-		recommended: !isComputerModel(model) && isRecommendedModel(model.provider, model.id)
+		recommended: !isDedicatedComputerModel(model) && isRecommendedModel(model.provider, model.id)
 	};
 }
 function presetModelToCatalogView(provider, model) {
@@ -274,7 +274,7 @@ function sortModelsForPicker(models) {
 	});
 }
 function getRecommendedModelsForProvider(provider, limit = 4) {
-	const fromRegistry = sortModelsForPicker(getModelsByProvider(provider)).filter((model) => !isComputerModel(model) && isRecommendedModel(provider, model.id)).slice(0, limit).map(modelToCatalogView);
+	const fromRegistry = sortModelsForPicker(getModelsByProvider(provider)).filter((model) => !isDedicatedComputerModel(model) && isRecommendedModel(provider, model.id)).slice(0, limit).map(modelToCatalogView);
 	if (fromRegistry.length > 0) return fromRegistry;
 	const preset = getDomesticProviderPreset(provider);
 	if (!preset) return [];

package/dist/src/providers/xopc-cloud-model-source.js

@@ -1,9 +1,11 @@
+import { init_model_policy, isDedicatedComputerProfile } from "../computer/model-policy.js";
 import { voiceManifestSchema } from "../../packages/realtime-protocol/src/voice-catalog.js";
 import { init_voice } from "../../packages/realtime-protocol/src/voice.js";
 import { init_xopc_cloud_config, resolveXopcModelRouterUrl } from "./xopc-cloud-config.js";
 import { getProviderAuthService, init_provider_auth_service } from "./provider-auth-service.js";
 //#region src/providers/xopc-cloud-model-source.ts
 init_voice();
+init_model_policy();
 init_provider_auth_service();
 init_xopc_cloud_config();
 var XopcCloudModelError = class extends Error {
@@ -86,7 +88,7 @@ var XopcCloudModelSource = class {
 				baseUrl: this.routerUrl,
 				api: "openai-completions",
 				etag: response.headers.get("x-xopc-model-catalog-version"),
-				recommendedModel: models.find((model) => !model.computerUse)?.id ?? null,
+				recommendedModel: models.find((model) => !isDedicatedComputerProfile(model.computerUse?.profile))?.id ?? null,
 				...Object.keys(recommended).length > 0 ? { recommended } : {},
 				...search ? { search } : {},
 				lastSuccessAt: Date.now()
@@ -140,7 +142,7 @@ function parseRecommendations(value, models) {
 }
 function modelMatchesRecommendation(model, capability) {
 	switch (capability) {
-		case "vision": return model.kind === "language" && model.input.includes("image") && !model.computerUse;
+		case "vision": return model.kind === "language" && model.input.includes("image") && !isDedicatedComputerProfile(model.computerUse?.profile);
 		case "image-generation": return model.kind === "image" && model.operations.includes("images.generate");
 		case "stt": return model.kind === "stt" && model.operations.includes("audio.transcription");
 		case "tts": return model.kind === "tts" && model.operations.includes("audio.speech");

package/dist/src/realtime/runtime.js

@@ -27,6 +27,10 @@ function serverMessage(kind, payload) {
 	};
 }
 function isAuthorizedTopic(topic, scopes) {
+	if (topic === "resources:notes" || topic === "resources:projects") return hasGatewayScope(scopes, "workspace.read");
+	if (topic === "resources:tasks") return hasGatewayScope(scopes, "tasks.read");
+	if (topic === "resources:automations") return hasGatewayScope(scopes, "automations.read");
+	if (topic === "resources:scenes" || topic === "resources:local_apps") return hasGatewayScope(scopes, "gateway.admin");
 	if (topic === "gateway") return hasGatewayScope(scopes, "gateway.status");
 	if (topic === "logs") return hasGatewayScope(scopes, "gateway.admin");
 	if (topic === "sessions" || topic.startsWith("session:")) return hasGatewayScope(scopes, "sessions.read");

package/dist/src/scenes/capabilities/read.d.ts

@@ -0,0 +1,3 @@
+import { type CapabilityContext, type CapabilityDispatcher } from '../../capabilities/runtime/dispatcher.js';
+import type { SceneAccess } from '../httpServices.js';
+export declare function registerSceneReadCapabilities(dispatcher: CapabilityDispatcher, getAccess: (context: CapabilityContext) => SceneAccess | undefined): void;