@xopcai/xopc 0.0.313 → 0.0.314

package/dist/src/agent/external-tools/composio-provider.js

@@ -5,16 +5,19 @@ import { getConnectorAccount } from "../../storage/sqlite/connector-account-repo
 import { consumeConnectorApproval, createConnectorApproval, getConnectorApproval, getConnectorConnection, getConnectorInstallation, listConnectorActionMetadata, listConnectorConnections, listConnectorInstallations, upsertConnectorActionMetadata, upsertConnectorInstallation } from "../../storage/sqlite/connector-repository.js";
 import { bindObjectiveAccount, connectionBinding, connectionBindings, connectorObjectiveScope, init_connection_wait_repository, publishConnectionWait, requireSessionConnection } from "../../storage/sqlite/connection-wait-repository.js";
 import "../../storage/sqlite/index.js";
-import { connectorIdentitySummary } from "../../connectors/connector-identity.js";
+import { CapabilityError } from "../../capabilities/runtime/errors.js";
+import { ExternalEffectNotAppliedError, executeExternalOperation } from "../../capabilities/runtime/external-operations.js";
+import { connectorArgumentsHash, connectorArgumentsPreview } from "../../connectors/approval.js";
 import { canAccessConnectorAccount, currentAccountConnections } from "../../connectors/account-access.js";
+import { connectorIdentitySummary } from "../../connectors/connector-identity.js";
+import { evaluateConnectorExecutionPolicy } from "../../connectors/policy.js";
 import { ComposioSessionsAdapter } from "../../connectors/composio-sessions.js";
 import { getComposioToolkitScope, getConfiguredComposioAuthConfigs, isComposioActionAllowedByCatalog, scopeForComposioAction } from "../../connectors/composio.js";
 import { getConnectorDefinition } from "../../connectors/catalog.js";
 import { listConnectorInstances } from "../../connectors/instances.js";
-import { connectorArgumentsHash, connectorArgumentsPreview } from "../../connectors/approval.js";
-import { isToolInputSchema } from "../../connectors/connection-capabilities.js";
 import { connectorPrincipalForSession } from "../../connectors/principal.js";
 import { externalToolRef, parseExternalToolRef } from "./refs.js";
+import { isToolInputSchema } from "../../connectors/connection-capabilities.js";
 import { ExternalToolSearchError } from "./search-error.js";
 //#region src/agent/external-tools/composio-provider.ts
 init_session_input_repository();
@@ -41,6 +44,10 @@ function textResult(value) {
 		details: {}
 	};
 }
+function actionDigest(action) {
+	const { cachedAt: _cachedAt, ...contract } = action;
+	return connectorArgumentsHash(contract);
+}
 function installedConfigToolkits(config) {
 	return Object.values(config?.connectors?.instances ?? {}).flatMap((record) => {
 		if (!record || typeof record !== "object" || Array.isArray(record)) return [];
@@ -227,7 +234,7 @@ var ComposioToolProvider = class {
 			batchRead: accounts.length > 0 && action.scope === "read" && action.curated && BATCH_READ_ACTIONS.has(action.actionId)
 		};
 	}
-	async execute(toolRef, args, approvalId, _context) {
+	async execute(toolRef, args, approvalId, context) {
 		const available = this.availableInstallations();
 		const resolved = this.resolve(toolRef, available.installations);
 		if (!resolved) return textResult("This connected app tool is not allowed for this user and agent.");
@@ -283,21 +290,47 @@ var ComposioToolProvider = class {
 		if (available.context && connection.accountId) bindObjectiveAccount(available.context.conversationId, resolved.installation.connectorId, connection.accountId);
 		const actionArgs = { ...executionArgs };
 		delete actionArgs[CONNECTION_ARGUMENT];
-		const argsHash = connectorArgumentsHash({
+		const descriptorDigest = actionDigest(action);
+		const argumentIdentity = () => connectorArgumentsHash({
 			args: actionArgs,
 			accountId: connection.accountId,
+			connectionId: connection.id,
+			descriptorDigest,
+			principalId: available.principalId,
+			agentId: available.agentId,
+			conversationId: available.context?.conversationId,
 			objective: available.context ? connectorObjectiveScope(available.context.conversationId) : void 0
 		});
+		const argsHash = argumentIdentity();
 		let confirmed = false;
 		if (approvalId) {
 			const pending = getConnectorApproval(approvalId);
-			if (!pending || pending.principalId !== available.principalId || pending.connectorId !== resolved.installation.connectorId || pending.actionId !== action.actionId || pending.conversationId !== available.context?.conversationId || pending.agentId !== available.agentId || !pending.connectionId || getConnectorConnection(pending.connectionId)?.accountId !== connection.accountId) return textResult("The connector approval is invalid for this session or action.");
-			confirmed = Boolean(consumeConnectorApproval(approvalId, argsHash));
-			if (!confirmed) return textResult("The connector approval is not approved, has expired, or was already used.");
+			if (!pending || pending.principalId !== available.principalId || pending.connectorId !== resolved.installation.connectorId || pending.actionId !== action.actionId || pending.conversationId !== available.context?.conversationId || pending.agentId !== available.agentId || pending.connectionId !== connection.id || pending.argumentsHash !== argsHash || !["approved", "consumed"].includes(pending.status) || pending.status === "approved" && Date.parse(pending.expiresAt) <= Date.now()) return textResult("The connector approval is invalid for this session or action.");
+			confirmed = true;
 		}
+		const authorizeCurrent = () => {
+			context.signal?.throwIfAborted();
+			const current = this.availableInstallations();
+			const installation = this.resolve(toolRef, current.installations)?.installation;
+			const active = getConnectorConnection(connection.id);
+			const contract = listConnectorActionMetadata(resolved.installation.connectorId).find((item) => item.actionId === action.actionId);
+			if (!installation || current.principalId !== available.principalId || current.agentId !== available.agentId || current.context?.conversationId !== available.context?.conversationId || !active || active.status !== "active" || active.accountId !== connection.accountId || active.providerConnectionId !== connection.providerConnectionId || getConnectorAccount(active.accountId)?.currentConnectionId !== active.id || !canAccessConnectorAccount(active, installation, current.agentId)) throw new CapabilityError("FORBIDDEN", "Connected account authorization changed");
+			if (!contract || actionDigest(contract) !== descriptorDigest || argumentIdentity() !== argsHash) throw new CapabilityError("REVISION_CONFLICT", "Action contract or objective changed");
+			const evaluation = evaluateConnectorExecutionPolicy({
+				installation,
+				action: contract,
+				agentId: current.agentId,
+				accountId: active.accountId,
+				confirmed
+			});
+			if (evaluation.decision === "denied") throw new CapabilityError("FORBIDDEN", evaluation.reason);
+			return evaluation;
+		};
+		const evaluation = authorizeCurrent();
 		let result;
 		try {
-			result = await this.adapter.executeWithPolicy({
+			const execute = async () => this.adapter.executeWithPolicy({
+				signal: context.signal,
 				context: {
 					principalId: available.principalId,
 					toolkits: [toolkit],
@@ -309,7 +342,36 @@ var ComposioToolProvider = class {
 				args: actionArgs,
 				agentId: available.agentId,
 				conversationId: available.context?.conversationId,
-				confirmed
+				confirmed,
+				beforeExecute: () => {
+					const current = authorizeCurrent();
+					if (current.decision !== "allowed") throw new ExternalEffectNotAppliedError(current.reason);
+					if (approvalId && !consumeConnectorApproval(approvalId, argsHash)) throw new ExternalEffectNotAppliedError("Approval is no longer available");
+				}
+			});
+			if (evaluation.decision === "confirmation_required") result = {
+				decision: "confirmation_required",
+				reason: evaluation.reason
+			};
+			else if (action.scope === "read") result = await execute();
+			else result = await executeExternalOperation({
+				principalId: available.principalId,
+				capabilityId: toolRef,
+				idempotencyKey: connectorArgumentsHash(approvalId ? { approvalId } : {
+					conversationId: available.context?.conversationId,
+					toolCallId: context.toolCallId
+				}),
+				requestDigest: argsHash,
+				descriptorDigest,
+				surface: "agent",
+				recovery: "manual"
+			}, async () => {
+				const outcome = await execute();
+				if (outcome.decision !== "allowed") throw new ExternalEffectNotAppliedError(outcome.reason);
+				return outcome;
+			}, (outcome) => {
+				if (outcome.result && typeof outcome.result === "object" && "successful" in outcome.result && outcome.result.successful === false) throw new Error("Provider reported an unsuccessful action without proving that no effect was applied");
+				return outcome;
 			});
 		} catch (error) {
 			if (action.scope === "read") {
@@ -342,11 +404,7 @@ var ComposioToolProvider = class {
 				conversationId: available.context?.conversationId,
 				actionId: action.actionId,
 				scope: action.scope,
-				argumentsHash: connectorArgumentsHash({
-					args: actionArgs,
-					accountId: connection.accountId,
-					objective: available.context ? connectorObjectiveScope(available.context.conversationId) : void 0
-				}),
+				argumentsHash: argumentIdentity(),
 				argumentsPreview: {
 					account: {
 						id: connection.accountId,

package/dist/src/agent/external-tools/endpoint-provider.js

@@ -1,6 +1,9 @@
 import { COMPUTER_CONTROL_TOOL, init_src } from "../../../packages/computer-control-contract/src/index.js";
 import { BROWSER_CONTROL_ENDPOINT_TOOL_NAME } from "../../../packages/browser-control-contract/src/index.js";
+import { executeExternalOperation } from "../../capabilities/runtime/external-operations.js";
+import { canonicalCapabilityJson } from "../../capabilities/runtime/dispatcher.js";
 import { externalToolRef, parseExternalToolRef } from "./refs.js";
+import { createHash } from "node:crypto";
 //#region src/agent/external-tools/endpoint-provider.ts
 init_src();
 function contentText(content) {
@@ -40,7 +43,7 @@ var EndpointToolProvider = class {
 	async execute(toolRef, args, _approvalId, context) {
 		const resolved = this.resolve(toolRef);
 		if (!resolved) throw new Error(`Endpoint tool is unavailable for this turn: ${toolRef}`);
-		const result = await this.deps.runtime.invocations.invoke({
+		const invoke = () => this.deps.runtime.invocations.invoke({
 			endpointId: resolved.endpointId,
 			toolCallId: context.toolCallId,
 			toolName: resolved.tool.descriptor.name,
@@ -60,6 +63,15 @@ var EndpointToolProvider = class {
 				});
 			}
 		});
+		const result = resolved.tool.descriptor.effect === "read" ? await invoke() : await executeExternalOperation({
+			principalId: resolved.principalId,
+			capabilityId: toolRef,
+			idempotencyKey: createHash("sha256").update(`${this.deps.getCurrentContext()?.conversationId}:${context.toolCallId}`).digest("hex"),
+			requestDigest: createHash("sha256").update(canonicalCapabilityJson(args)).digest("hex"),
+			descriptorDigest: resolved.tool.revision,
+			surface: "agent",
+			recovery: "manual"
+		}, invoke);
 		const files = result.content.filter((item) => item.type === "file");
 		return {
 			content: result.content.map((item) => ({
@@ -92,6 +104,7 @@ var EndpointToolProvider = class {
 		if (tool && ["browser.control", "desktop.computer.control"].includes(tool.descriptor.name)) return void 0;
 		return tool ? {
 			endpointId: endpoint.endpointId,
+			principalId: endpoint.principalId,
 			displayName: endpoint.displayName,
 			tool
 		} : void 0;

package/dist/src/agent/external-tools/gateway-tools.js

@@ -1,7 +1,7 @@
 import { init_connector_repository, listConnectorConnections } from "../../storage/sqlite/connector-repository.js";
 import { connectionBindings, getActiveConnectionWait, init_connection_wait_repository, publishConnectionWait, requireSessionConnection, reviseCurrentConnectionObjective } from "../../storage/sqlite/connection-wait-repository.js";
-import { connectionCandidates, resolveConnectionCandidate } from "../../connectors/connection-candidates.js";
 import { connectorPrincipalForSession } from "../../connectors/principal.js";
+import { connectionCandidates, resolveConnectionCandidate } from "../../connectors/connection-candidates.js";
 import { ExternalToolService } from "./service.js";
 import { EXTERNAL_TOOL_SOURCES } from "./types.js";
 import { Type } from "@sinclair/typebox";

package/dist/src/agent/external-tools/mcp-provider.js

@@ -1,7 +1,7 @@
 import { resolveEffectiveAgentProfileForSession } from "../../config/agent-profile.js";
-import { getOrCreateSessionMcpRuntime } from "../mcp/bundle-mcp-runtime.js";
-import { mcpToolPolicyId } from "../mcp/bundle-mcp-policy.js";
 import { externalToolRef, parseExternalToolRef } from "./refs.js";
+import { mcpToolPolicyId } from "../mcp/bundle-mcp-policy.js";
+import { getOrCreateSessionMcpRuntime } from "../mcp/bundle-mcp-runtime.js";
 //#region src/agent/external-tools/mcp-provider.ts
 function policyToolId(tool) {
 	return mcpToolPolicyId(tool.safeServerName, tool.toolName);

package/dist/src/agent/image/generation/openai-images-provider.js

@@ -1,11 +1,11 @@
 import { createLogger } from "../../../utils/logger/index.js";
 import { init_logger } from "../../../utils/logger.js";
+import { imageAssetFromBase64, imageFileExtensionForMimeType } from "./image-assets.js";
 import { pickTimeoutMsOrFallback } from "../../../media-shared/http/deadline.js";
 import { privateNetworkPolicyToSsrfGuardOptions } from "../../../media-shared/http/private-network.js";
 import { resolveProviderHttpRequestConfig } from "../../../media-shared/http/resolve-provider-http-request-config.js";
 import { postJsonRequest, postMultipartRequest, readJsonResponseLimited } from "../../../media-shared/http/provider-http.js";
 import "../../../media-shared/http/index.js";
-import { imageAssetFromBase64, imageFileExtensionForMimeType } from "./image-assets.js";
 //#region src/agent/image/generation/openai-images-provider.ts
 init_logger();
 const log = createLogger("ImageGen:OpenAIImages");

package/dist/src/agent/image/generation/providers/dashscope.js

@@ -1,5 +1,6 @@
 import { createLogger } from "../../../../utils/logger/index.js";
 import { init_logger } from "../../../../utils/logger.js";
+import { imageFileExtensionForMimeType } from "../image-assets.js";
 import { pickTimeoutMsOrFallback } from "../../../../media-shared/http/deadline.js";
 import { privateNetworkPolicyToSsrfGuardOptions } from "../../../../media-shared/http/private-network.js";
 import { resolveProviderHttpRequestConfig } from "../../../../media-shared/http/resolve-provider-http-request-config.js";
@@ -8,7 +9,6 @@ import "../../../../media-shared/http/index.js";
 import { resolveApiKeyForProvider } from "../../../../providers/auth-runtime/resolve-api-key.js";
 import { isProviderApiKeyConfigured } from "../../../../providers/auth-runtime/is-configured.js";
 import "../../../../providers/auth-runtime/index.js";
-import { imageFileExtensionForMimeType } from "../image-assets.js";
 //#region src/agent/image/generation/providers/dashscope.ts
 /**
 * Built-in DashScope (Alibaba Model Studio) image-generation provider.

package/dist/src/agent/image/generation/providers/fal.js

@@ -1,5 +1,6 @@
 import { createLogger } from "../../../../utils/logger/index.js";
 import { init_logger } from "../../../../utils/logger.js";
+import { imageFileExtensionForMimeType } from "../image-assets.js";
 import { pickTimeoutMsOrFallback } from "../../../../media-shared/http/deadline.js";
 import { privateNetworkPolicyToSsrfGuardOptions } from "../../../../media-shared/http/private-network.js";
 import { resolveProviderHttpRequestConfig } from "../../../../media-shared/http/resolve-provider-http-request-config.js";
@@ -8,7 +9,6 @@ import "../../../../media-shared/http/index.js";
 import { resolveApiKeyForProvider } from "../../../../providers/auth-runtime/resolve-api-key.js";
 import { isProviderApiKeyConfigured } from "../../../../providers/auth-runtime/is-configured.js";
 import "../../../../providers/auth-runtime/index.js";
-import { imageFileExtensionForMimeType } from "../image-assets.js";
 //#region src/agent/image/generation/providers/fal.ts
 /**
 * Built-in Fal.ai image-generation provider.

package/dist/src/agent/image/generation/providers/google.js

@@ -1,5 +1,6 @@
 import { createLogger } from "../../../../utils/logger/index.js";
 import { init_logger } from "../../../../utils/logger.js";
+import { imageFileExtensionForMimeType } from "../image-assets.js";
 import { pickTimeoutMsOrFallback } from "../../../../media-shared/http/deadline.js";
 import { privateNetworkPolicyToSsrfGuardOptions } from "../../../../media-shared/http/private-network.js";
 import { resolveProviderHttpRequestConfig } from "../../../../media-shared/http/resolve-provider-http-request-config.js";
@@ -8,7 +9,6 @@ import "../../../../media-shared/http/index.js";
 import { resolveApiKeyForProvider } from "../../../../providers/auth-runtime/resolve-api-key.js";
 import { isProviderApiKeyConfigured } from "../../../../providers/auth-runtime/is-configured.js";
 import "../../../../providers/auth-runtime/index.js";
-import { imageFileExtensionForMimeType } from "../image-assets.js";
 //#region src/agent/image/generation/providers/google.ts
 /**
 * Built-in Google Gemini image-generation provider.

package/dist/src/agent/image/generation/runtime.js

@@ -1,12 +1,12 @@
 import { createLogger } from "../../../utils/logger/index.js";
 import { init_logger } from "../../../utils/logger.js";
 import { PROVIDER_ENV_MAP, init_env_keys } from "../../../providers/env-keys.js";
-import { getImageGenerationProvider, listImageGenerationProviders, listImageGenerationProvidersSummary as listImageGenerationProvidersSummary$1 } from "./provider-registry.js";
 import { describeFailoverError, isFailoverError } from "../../failover-error.js";
 import { buildMediaGenerationNormalizationMetadata, buildNoCapabilityModelConfiguredMessage, recordCapabilityCandidateFailure, resolveCapabilityModelCandidates, throwCapabilityGenerationFailure } from "../../media-generation/runtime-shared.js";
 import "../../media-generation/index.js";
 import { parseImageGenerationModelRef } from "./model-ref.js";
 import { resolveImageGenerationOverrides } from "./normalization.js";
+import { getImageGenerationProvider, listImageGenerationProviders, listImageGenerationProvidersSummary as listImageGenerationProvidersSummary$1 } from "./provider-registry.js";
 //#region src/agent/image/generation/runtime.ts
 init_env_keys();
 init_logger();

package/dist/src/agent/image/index.js

@@ -1,9 +1,9 @@
-import { getImageGenerationProvider, listImageGenerationProviders } from "./generation/provider-registry.js";
 import { getImageUnderstandingProvider, listImageUnderstandingProviders, registerImageUnderstandingProvider } from "./understanding/provider-registry.js";
 import { resolveImageModelConfigForTool } from "./tool-model-config.js";
 import { describeImages, describeImagesWithFallback } from "./understanding/runtime.js";
 import { modelSupportsVision, resolveImageHandlingStrategy } from "./vision-detection.js";
 import { runWithImageModelFallback } from "./image-model-fallback.js";
 import { loadImageForToolInput } from "./load-image-media.js";
+import { getImageGenerationProvider, listImageGenerationProviders } from "./generation/provider-registry.js";
 import { generateImage, listImageGenerationProvidersSummary } from "./generation/runtime.js";
 export { describeImages, describeImagesWithFallback, generateImage, getImageGenerationProvider, getImageUnderstandingProvider, listImageGenerationProviders, listImageGenerationProvidersSummary, listImageUnderstandingProviders, loadImageForToolInput, modelSupportsVision, registerImageUnderstandingProvider, resolveImageHandlingStrategy, resolveImageModelConfigForTool, runWithImageModelFallback };

package/dist/src/agent/image/load-image-media.js

@@ -1,5 +1,5 @@
-import { decodeDataUrl } from "./image-helpers.js";
 import { checkFileSafety } from "../prompt/safety.js";
+import { decodeDataUrl } from "./image-helpers.js";
 import { homedir } from "node:os";
 import path from "node:path";
 import { promises } from "node:fs";

package/dist/src/agent/image/tool-model-config.js

@@ -1,7 +1,7 @@
 import { getAgentDefaultImageModelConfig, getAgentDefaultModelRef, init_schema, parseModelRef } from "../../config/schema.js";
 import { init_agent_scope, resolveDefaultAgentId } from "../agent-scope.js";
-import { getDefaultModelSync, getModelsByProvider, init_providers, isProviderConfiguredSync, resolveModel } from "../../providers/index.js";
 import { resolveEffectiveAgentConfigForAgent } from "../../config/agent-profile.js";
+import { getDefaultModelSync, getModelsByProvider, init_providers, isProviderConfiguredSync, resolveModel } from "../../providers/index.js";
 import { resolveAgentModelFallbackValues, resolveAgentModelPrimaryValue } from "../../config/model-input.js";
 import { buildCapabilityPlansForConfig } from "../../capabilities/readiness/from-config.js";
 import "../../capabilities/readiness/index.js";

package/dist/src/agent/inbound/attachment-pipeline.js

@@ -1,8 +1,8 @@
 import { stripRuntimeUserMessageEnvelope } from "../../../packages/gateway-contract/src/user-message-display.js";
 import { init_src } from "../../../packages/gateway-contract/src/index.js";
 import { extractProfileAgentId } from "../../config/agent-profile.js";
-import { readAgentMessageContent } from "../memory/agent-message-access.js";
 import { mimeTypeFromMediaPath } from "../../media/store.js";
+import { readAgentMessageContent } from "../memory/agent-message-access.js";
 import { readMediaReference } from "../../media/media-reference.js";
 import { isImageInboundAttachment } from "../../channels/attachments/attachment-classifiers.js";
 import "../../channels/attachments/inbound-persist.js";

package/dist/src/agent/inbound/inbound-loop.js

@@ -1,9 +1,9 @@
 import { runWithLogContext, updateAsyncLogContext } from "../../utils/logger/context.js";
 import { init_logger } from "../../utils/logger.js";
-import { MessageBusShutdownError } from "../../infra/bus/queue.js";
-import "../../infra/bus/index.js";
 import { shouldSkipResetOverlapCommand } from "../../session/reset-triggers.js";
 import { initSessionTurn } from "../../session/init-session-turn.js";
+import { MessageBusShutdownError } from "../../infra/bus/queue.js";
+import "../../infra/bus/index.js";
 import { runEmbeddedTurnForSession } from "../embedded/run-for-session.js";
 import { inboundMessageLogRequestId } from "../service-inbound-utils.js";
 //#region src/agent/inbound/inbound-loop.ts

package/dist/src/agent/inbound/turn-dispatcher.d.ts

@@ -25,6 +25,7 @@ import type { SessionStore } from '../../session/store.js';
 import type { SessionContext, SessionHydrator, SessionStateBag } from '../session/index.js';
 import type { InboundAttachmentInput, MediaRef } from '../../channels/attachments/inbound-persist.js';
 import { type ProcessDirectStreamEvent } from '../service/process-direct-streaming.js';
+import { type WebchatTtsResult } from '../service/webchat-tts.js';
 import type { AgentSourceContext, AgentSourceContextResolver } from '../source-context/types.js';
 export interface TurnDispatcherConfig {
     log: ContextualLogger;
@@ -76,6 +77,7 @@ export declare class TurnDispatcher {
         runId?: string;
         sourceContexts?: AgentSourceContext[];
         presentation?: 'voice';
+        onDeferredAudio?: (audio: WebchatTtsResult) => void;
     }): AsyncGenerator<ProcessDirectStreamEvent, void, unknown>;
     /** Push an out-of-band event into the live webchat stream for a session. */
     enqueueWebchatStreamEvent(conversationId: string, event: {

package/dist/src/agent/inbound/turn-dispatcher.js

@@ -35,7 +35,8 @@ var TurnDispatcher = class {
 			signal: options?.signal,
 			runId: options?.runId,
 			sourceContexts: options?.sourceContexts,
-			presentation: options?.presentation
+			presentation: options?.presentation,
+			onDeferredAudio: options?.onDeferredAudio
 		});
 	}
 	/** Push an out-of-band event into the live webchat stream for a session. */

package/dist/src/agent/index.js

@@ -3,12 +3,12 @@ import { dropThinkingBlocks } from "./transcript/thinking.js";
 import { extractToolCallsFromAssistant, extractToolResultId, sanitizeToolCallId, sanitizeToolCallIdsForCloudCodeAssist } from "./transcript/tool-call-id.js";
 import { makeMissingToolResult, repairToolUseResultPairing, sanitizeToolCallInputs, sanitizeToolUseResultPairing, stripToolResultDetails } from "./transcript/session-transcript-repair.js";
 import { applySessionTranscriptHygiene, applySessionTranscriptHygieneForPersistence, applySessionTranscriptHygieneWithPolicy, resolvePolicyForModel, tryApplySessionTranscriptHygiene, tryApplySessionTranscriptHygieneForPersistence } from "./transcript/transcript-hygiene.js";
-import { AgentService } from "./service.js";
 import { createResponseMessage, createSignalMessage, createTaskMessage, isValidIPCMessage } from "./ipc/types.js";
 import { AgentInbox } from "./ipc/inbox.js";
 import { AgentBus } from "./ipc/bus.js";
 import { AgentSocketClient, AgentSocketServer, isSocketAvailable } from "./ipc/socket.js";
 import "./ipc/index.js";
+import { AgentService } from "./service.js";
 import { stripToolMessages } from "./transcript/strip-tool-messages.js";
 import "./transcript/index.js";
 export { AgentBus, AgentInbox, AgentService, AgentSocketClient, AgentSocketServer, applySessionTranscriptHygiene, applySessionTranscriptHygieneForPersistence, applySessionTranscriptHygieneWithPolicy, createResponseMessage, createSignalMessage, createTaskMessage, dropThinkingBlocks, extractToolCallsFromAssistant, extractToolResultId, isSocketAvailable, isValidIPCMessage, makeMissingToolResult, repairToolUseResultPairing, resolvePolicyForModel, resolveTranscriptPolicy, sanitizeToolCallId, sanitizeToolCallIdsForCloudCodeAssist, sanitizeToolCallInputs, sanitizeToolUseResultPairing, stripToolMessages, stripToolResultDetails, tryApplySessionTranscriptHygiene, tryApplySessionTranscriptHygieneForPersistence };

package/dist/src/agent/mcp/bundle-mcp-gateway.js

@@ -1,5 +1,5 @@
-import { createSessionMcpRuntime } from "./bundle-mcp-runtime.js";
 import { mcpToolPolicyId } from "./bundle-mcp-policy.js";
+import { createSessionMcpRuntime } from "./bundle-mcp-runtime.js";
 import crypto from "node:crypto";
 //#region src/agent/mcp/bundle-mcp-gateway.ts
 function mapTools(tools, serverId) {

package/dist/src/agent/mcp/bundle-mcp-runtime.js

@@ -9,8 +9,8 @@ import { isMcpConfigRecord } from "./mcp-config-shared.js";
 import { resolveMcpTransport } from "./mcp-transport.js";
 import { sanitizeServerName } from "./bundle-mcp-names.js";
 import crypto from "node:crypto";
-import { Client } from "@modelcontextprotocol/sdk/client/index.js";
 import Ajv2020 from "ajv/dist/2020.js";
+import { Client } from "@modelcontextprotocol/sdk/client/index.js";
 import { AjvJsonSchemaValidator } from "@modelcontextprotocol/sdk/validation/ajv-provider.js";
 //#region src/agent/mcp/bundle-mcp-runtime.ts
 init_logger();

package/dist/src/agent/mcp/index.js

@@ -1,12 +1,12 @@
+import { mcpToolPolicyId } from "./bundle-mcp-policy.js";
 import { loadMergedBundleMcpConfig } from "./bundle-mcp-config.js";
 import { loadEmbeddedMcpConfig } from "./embedded-mcp.js";
 import { McpAuthorizationRequiredError, isMcpAuthorizationError } from "./oauth/mcp-oauth-errors.js";
 import { McpOAuthStore, canonicalMcpServerUrl, mcpOAuthServerKey } from "./oauth/mcp-oauth-store.js";
 import { XopcMcpOAuthClientProvider } from "./oauth/mcp-oauth-provider.js";
 import { __testing, createSessionMcpRuntime, disposeAllSessionMcpRuntimes, disposeSessionMcpRuntime, getOrCreateSessionMcpRuntime, getSessionMcpRuntimeManager, retireSessionMcpRuntime, retireSessionMcpRuntimeForConversationId } from "./bundle-mcp-runtime.js";
+import "./bundle-mcp-tools.js";
 import { McpOAuthSession } from "./oauth/mcp-oauth-session.js";
 import { McpOAuthManager, getMcpOAuthManager } from "./oauth/mcp-oauth-manager.js";
-import { mcpToolPolicyId } from "./bundle-mcp-policy.js";
-import "./bundle-mcp-tools.js";
 import "./oauth/index.js";
 export { McpAuthorizationRequiredError, McpOAuthManager, McpOAuthSession, McpOAuthStore, XopcMcpOAuthClientProvider, __testing, canonicalMcpServerUrl, createSessionMcpRuntime, disposeAllSessionMcpRuntimes, disposeSessionMcpRuntime, getMcpOAuthManager, getOrCreateSessionMcpRuntime, getSessionMcpRuntimeManager, isMcpAuthorizationError, loadEmbeddedMcpConfig, loadMergedBundleMcpConfig, mcpOAuthServerKey, mcpToolPolicyId, retireSessionMcpRuntime, retireSessionMcpRuntimeForConversationId };

package/dist/src/agent/mcp/mcp-transport.js

@@ -7,10 +7,10 @@ import { XopcStdioClientTransport } from "./mcp-stdio-transport.js";
 import { resolveMcpTransportConfig } from "./mcp-transport-config.js";
 import { McpOAuthStore } from "./oauth/mcp-oauth-store.js";
 import { XopcMcpOAuthClientProvider } from "./oauth/mcp-oauth-provider.js";
-import { fetch } from "undici";
 import { SSEClientTransport } from "@modelcontextprotocol/sdk/client/sse.js";
 import { StreamableHTTPClientTransport } from "@modelcontextprotocol/sdk/client/streamableHttp.js";
 import { getDefaultEnvironment } from "@modelcontextprotocol/sdk/client/stdio.js";
+import { fetch } from "undici";
 //#region src/agent/mcp/mcp-transport.ts
 init_paths_state();
 init_logger();

package/dist/src/agent/mcp/oauth/mcp-oauth-store.js

@@ -1,5 +1,5 @@
-import { init_write_file_atomic, writeTextAtomic } from "../../../infra/write-file-atomic.js";
 import { init_paths, resolveMcpOAuthPath } from "../../../config/paths.js";
+import { init_write_file_atomic, writeTextAtomic } from "../../../infra/write-file-atomic.js";
 import { createHash } from "node:crypto";
 import { readFile, rm } from "node:fs/promises";
 //#region src/agent/mcp/oauth/mcp-oauth-store.ts

package/dist/src/agent/memory/compaction-chunks.d.ts

@@ -7,12 +7,17 @@ export interface HandoverChunk {
     text: string;
     sourceThroughSeq: number;
 }
+export interface CompactionChunkCursorState {
+    index: number;
+    offset: number;
+}
 /** Consume source text in order, fitting each chunk against the current ledger. */
 export declare class CompactionChunkCursor {
     private readonly sources;
     private index;
     private offset;
-    constructor(sources: readonly CompactionSourceText[]);
+    constructor(sources: readonly CompactionSourceText[], state?: CompactionChunkCursorState);
     get done(): boolean;
+    checkpoint(): CompactionChunkCursorState;
     next(maxTokens: number, fits: (text: string) => boolean): HandoverChunk;
 }

package/dist/src/agent/memory/compaction-chunks.js

@@ -2,14 +2,27 @@ import { estimateTextTokens } from "./context-budget.js";
 //#region src/agent/memory/compaction-chunks.ts
 /** Consume source text in order, fitting each chunk against the current ledger. */
 var CompactionChunkCursor = class {
-	index = 0;
-	offset = 0;
-	constructor(sources) {
+	index;
+	offset;
+	constructor(sources, state = {
+		index: 0,
+		offset: 0
+	}) {
 		this.sources = sources;
+		const source = sources[state.index];
+		if (!Number.isInteger(state.index) || state.index < 0 || state.index > sources.length || !Number.isInteger(state.offset) || state.offset < 0 || (state.index === sources.length ? state.offset !== 0 : state.offset > source.text.length)) throw new Error("Invalid compaction chunk checkpoint");
+		this.index = state.index;
+		this.offset = state.offset;
 	}
 	get done() {
 		return this.index >= this.sources.length;
 	}
+	checkpoint() {
+		return {
+			index: this.index,
+			offset: this.offset
+		};
+	}
 	next(maxTokens, fits) {
 		const parts = [];
 		let sourceThroughSeq = 0;

package/dist/src/agent/memory/compaction-ledger.d.ts

@@ -1,11 +1,13 @@
 import { type CompactionHandover } from '../../session/compaction-types.js';
 import type { TranscriptSourceEntry } from '../../storage/sqlite/transcript-repository.js';
 export type { CompactionAudit, CompactionHandover, CompactionHandoverItem, HandoverItemKind, } from '../../session/compaction-types.js';
-export declare function parseCompactionHandover(params: {
+/** Apply a bounded model-produced delta to the trusted local handover. */
+export declare function applyCompactionHandoverDelta(params: {
     text: string;
     sourceThroughSeq: number;
     previousBoundaryId?: string;
     allowedSources: readonly TranscriptSourceEntry[];
+    current?: CompactionHandover;
 }): CompactionHandover;
 export declare function renderCompactionHandover(handover: CompactionHandover): string;
 export declare function handoverForPrompt(handover: CompactionHandover | undefined): object;

package/dist/src/agent/memory/compaction-ledger.js

@@ -3,18 +3,20 @@ import { createHash } from "node:crypto";
 import { z } from "zod";
 //#region src/agent/memory/compaction-ledger.ts
 init_compaction_types();
-const RawHandoverItemSchema = z.object({
+const MAX_HANDOVER_ITEMS = 120;
+const RawHandoverUpsertSchema = z.object({
+	id: z.string().min(1).max(64).optional(),
 	kind: z.enum(HANDOVER_ITEM_KINDS),
-	text: z.string().min(1),
+	text: z.string().trim().min(1).max(2e3),
 	status: z.enum([
 		"active",
 		"completed",
 		"superseded"
 	]),
 	sourceSeqs: z.array(z.number().int().positive()).min(1),
-	identifiers: z.array(z.string()).default([])
+	identifiers: z.array(z.string().max(256)).max(20).default([])
 }).strict();
-const RawHandoverSchema = z.object({ items: z.array(RawHandoverItemSchema).max(120) }).strict();
+const RawHandoverDeltaSchema = z.object({ upserts: z.array(RawHandoverUpsertSchema).max(MAX_HANDOVER_ITEMS) }).strict();
 function extractJsonObject(text) {
 	const fenced = text.match(/```(?:json)?\s*([\s\S]*?)```/i)?.[1]?.trim();
 	if (fenced) return fenced;
@@ -26,34 +28,44 @@ function extractJsonObject(text) {
 function itemId(kind, text, seqs) {
 	return createHash("sha256").update(`${kind}\0${text.trim()}\0${[...seqs].sort((a, b) => a - b).join(",")}`).digest("hex").slice(0, 20);
 }
-function parseCompactionHandover(params) {
-	const parsed = RawHandoverSchema.parse(JSON.parse(extractJsonObject(params.text)));
-	const sourceBySeq = new Map(params.allowedSources.map((source) => [source.seq, source]));
-	const items = parsed.items.map((item) => {
+/** Apply a bounded model-produced delta to the trusted local handover. */
+function applyCompactionHandoverDelta(params) {
+	const parsed = RawHandoverDeltaSchema.parse(JSON.parse(extractJsonObject(params.text)));
+	const sourceBySeq = new Map(params.allowedSources.map((source) => [source.seq, {
+		entryId: source.entryId,
+		seq: source.seq
+	}]));
+	for (const item of params.current?.items ?? []) for (const source of item.sources) sourceBySeq.set(source.seq, source);
+	const items = new Map((params.current?.items ?? []).map((item) => [item.id, item]));
+	const seenIds = /* @__PURE__ */ new Set();
+	for (const item of parsed.upserts) {
 		const seqs = [...new Set(item.sourceSeqs)].sort((a, b) => a - b);
 		const sources = seqs.map((seq) => {
 			const source = sourceBySeq.get(seq);
 			if (!source || seq > params.sourceThroughSeq) throw new Error(`Compaction handover references unavailable source seq ${seq}`);
-			return {
-				entryId: source.entryId,
-				seq
-			};
+			return source;
 		});
 		const text = item.text.trim();
-		return {
-			id: itemId(item.kind, text, seqs),
+		const id = item.id ?? itemId(item.kind, text, seqs);
+		if (item.id && !items.has(item.id)) throw new Error(`Compaction handover updates unknown item ${item.id}`);
+		if (seenIds.has(id)) throw new Error(`Compaction handover repeats item ${id}`);
+		seenIds.add(id);
+		items.set(id, {
+			id,
 			kind: item.kind,
 			text,
 			status: item.status,
 			sources,
 			identifiers: [...new Set(item.identifiers.map((value) => value.trim()).filter(Boolean))]
-		};
-	});
+		});
+	}
+	const retained = [...items.values()].filter((item) => item.status !== "superseded");
+	if (retained.length > MAX_HANDOVER_ITEMS) throw new Error(`Compaction handover exceeds ${MAX_HANDOVER_ITEMS} durable items`);
 	return {
 		version: 1,
 		sourceThroughSeq: params.sourceThroughSeq,
 		...params.previousBoundaryId ? { previousBoundaryId: params.previousBoundaryId } : {},
-		items: [...new Map(items.map((item) => [item.id, item])).values()]
+		items: retained
 	};
 }
 const SUMMARY_GROUPS = [
@@ -104,6 +116,7 @@ function renderCompactionHandover(handover) {
 }
 function handoverForPrompt(handover) {
 	return { items: handover?.items.map((item) => ({
+		id: item.id,
 		kind: item.kind,
 		text: item.text,
 		status: item.status,
@@ -112,4 +125,4 @@ function handoverForPrompt(handover) {
 	})) ?? [] };
 }
 //#endregion
-export { handoverForPrompt, parseCompactionHandover, renderCompactionHandover };
+export { applyCompactionHandoverDelta, handoverForPrompt, renderCompactionHandover };

package/dist/src/agent/memory/compaction-request.d.ts

@@ -6,6 +6,8 @@ export declare class CompactionRequestError extends Error {
     constructor(kind: 'length' | 'empty' | 'budget' | 'provider' | 'timeout', message: string);
 }
 export declare function compactionOutputLimit(model: Model<Api>, configured: number): number;
+/** Start large prompts closer to their likely delta size while retaining room to double on truncation. */
+export declare function initialCompactionOutputLimit(systemPrompt: string, prompt: string, outputLimit: number): number;
 export declare function compactionPromptFits(model: Model<Api>, systemPrompt: string, prompt: string, outputLimit: number): boolean;
 /** Bound the final provider payload, including adapters that add a thinking budget. */
 export declare function compactionPayloadGuard(limit: number, onBudget: (actual: number) => void): NonNullable<SimpleStreamOptions['onPayload']>;