@xopcai/xopc 0.0.313 → 0.0.315

package/dist/src/config/models-json.d.ts

@@ -266,6 +266,7 @@ export declare const CustomModelSchema: z.ZodObject<{
         profile: z.ZodEnum<{
             "gui-plus-2026-02-26": "gui-plus-2026-02-26";
             "structured-tools-v1": "structured-tools-v1";
+            "openai-responses-computer-v1": "openai-responses-computer-v1";
         }>;
     }, z.core.$strict>>;
     id: z.ZodString;
@@ -347,6 +348,7 @@ export declare const ModelOverrideSchema: z.ZodObject<{
         profile: z.ZodEnum<{
             "gui-plus-2026-02-26": "gui-plus-2026-02-26";
             "structured-tools-v1": "structured-tools-v1";
+            "openai-responses-computer-v1": "openai-responses-computer-v1";
         }>;
     }, z.core.$strict>>;
     name: z.ZodOptional<z.ZodString>;
@@ -432,6 +434,7 @@ export declare const ProviderConfigSchema: z.ZodObject<{
             profile: z.ZodEnum<{
                 "gui-plus-2026-02-26": "gui-plus-2026-02-26";
                 "structured-tools-v1": "structured-tools-v1";
+                "openai-responses-computer-v1": "openai-responses-computer-v1";
             }>;
         }, z.core.$strict>>;
         id: z.ZodString;
@@ -513,6 +516,7 @@ export declare const ProviderConfigSchema: z.ZodObject<{
             profile: z.ZodEnum<{
                 "gui-plus-2026-02-26": "gui-plus-2026-02-26";
                 "structured-tools-v1": "structured-tools-v1";
+                "openai-responses-computer-v1": "openai-responses-computer-v1";
             }>;
         }, z.core.$strict>>;
         name: z.ZodOptional<z.ZodString>;
@@ -679,6 +683,7 @@ export declare const ModelsJsonSchema: z.ZodObject<{
                 profile: z.ZodEnum<{
                     "gui-plus-2026-02-26": "gui-plus-2026-02-26";
                     "structured-tools-v1": "structured-tools-v1";
+                    "openai-responses-computer-v1": "openai-responses-computer-v1";
                 }>;
             }, z.core.$strict>>;
             id: z.ZodString;
@@ -760,6 +765,7 @@ export declare const ModelsJsonSchema: z.ZodObject<{
                 profile: z.ZodEnum<{
                     "gui-plus-2026-02-26": "gui-plus-2026-02-26";
                     "structured-tools-v1": "structured-tools-v1";
+                    "openai-responses-computer-v1": "openai-responses-computer-v1";
                 }>;
             }, z.core.$strict>>;
             name: z.ZodOptional<z.ZodString>;

package/dist/src/config/models-json.js

@@ -1,7 +1,7 @@
 import { __esmMin } from "../../_virtual/_rolldown/runtime.js";
-import { ComputerProfileSchema, init_src } from "../../packages/computer-control-contract/src/index.js";
-import { init_write_file_atomic, writeTextAtomicSync } from "../infra/write-file-atomic.js";
 import { init_paths, resolveModelsJsonPath } from "./paths.js";
+import { init_write_file_atomic, writeTextAtomicSync } from "../infra/write-file-atomic.js";
+import { ComputerProfileSchema, init_src } from "../../packages/computer-control-contract/src/index.js";
 import { init_model_policy, isComputerModel } from "../computer/model-policy.js";
 import { existsSync, readFileSync } from "fs";
 import { z } from "zod";
@@ -118,7 +118,7 @@ function validateModelsConfig(config) {
 				api: model.api ?? providerConfig.api
 			})) errors.push({
 				path: `providers.${providerName}.models[${i}].computerUse`,
-				message: "Computer Use requires image input and the openai-completions API",
+				message: "Computer Use requires image input and an API matching its protocol",
 				severity: "error"
 			});
 			if (!model.api && !providerConfig.api) errors.push({

package/dist/src/config/schema.d.ts

@@ -1562,6 +1562,10 @@ export declare const ConfigSchema: z.ZodDefault<z.ZodObject<{
                 summaryChunkTokens: z.ZodDefault<z.ZodNumber>;
                 summaryTimeoutMs: z.ZodDefault<z.ZodNumber>;
                 summaryRetries: z.ZodDefault<z.ZodNumber>;
+                reasoningLevel: z.ZodDefault<z.ZodEnum<{
+                    low: "low";
+                    off: "off";
+                }>>;
                 qualityGuard: z.ZodDefault<z.ZodBoolean>;
                 gapAudit: z.ZodDefault<z.ZodBoolean>;
                 model: z.ZodOptional<z.ZodString>;

package/dist/src/config/schema.js

@@ -1,7 +1,7 @@
 import { __esmMin } from "../../_virtual/_rolldown/runtime.js";
-import { AgentModelsOverrideSchema, AgentsConfigSchema as AgentsConfigSchema$1, DEFAULT_AGENT_MODEL_REF, ImageGenerationRouteSchema, ModelRouteSchema } from "../agent-config/schema.js";
-import { init_agent_config } from "../agent-config/index.js";
 import { ComputerConfigSchema, init_config } from "../computer/config.js";
+import { AgentModelsOverrideSchema, AgentsConfigSchema as AgentsConfigSchema$1, DEFAULT_AGENT_MODEL_REF, DEFAULT_SKILL_POLICY, ImageGenerationRouteSchema, ModelRouteSchema } from "../agent-config/schema.js";
+import { init_agent_config } from "../agent-config/index.js";
 import { DEFAULT_CONTEXT_COMPACTION_POLICY, UserContextConfigSchema, init_config as init_config$1 } from "../user-context/config.js";
 import { init_default_model } from "./default-model.js";
 import { init_public_url, validatePublicUrl } from "./public-url.js";
@@ -61,10 +61,7 @@ var init_schema = __esmMin((() => {
 				},
 				intents: {}
 			},
-			skills: {
-				mode: "all-enabled",
-				exclude: []
-			},
+			skills: DEFAULT_SKILL_POLICY,
 			tools: {},
 			workflows: {},
 			runtime: {}
@@ -1107,10 +1104,7 @@ workDiscoveryOnboarding: z.boolean().default(true) }).strict().default({ workDis
 					},
 					intents: {}
 				},
-				skills: {
-					mode: "all-enabled",
-					exclude: []
-				},
+				skills: DEFAULT_SKILL_POLICY,
 				tools: {},
 				workflows: {},
 				runtime: {}

package/dist/src/connectors/cli/authorization.js

@@ -2,9 +2,9 @@ import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
 import { getConnectorAccount, init_connector_account_repository } from "../../storage/sqlite/connector-account-repository.js";
 import { getConnectorConnection, getConnectorInstallation, init_connector_repository, upsertConnectorInstallation } from "../../storage/sqlite/connector-repository.js";
+import { cliContextPath, startCliProcess } from "./process.js";
 import { getCliAdapter } from "./adapterRegistry.js";
 import { getConnectorInstance, getInstalledConnectorDefinition } from "../instances.js";
-import { cliContextPath, startCliProcess } from "./process.js";
 import { verifyInstalledCli } from "./installer.js";
 import { cliAuthorizationView, commitCliIdentity, createCliAuthorization, readCliAuthorization, updateCliAuthorization } from "./store.js";
 import { join, relative } from "node:path";

package/dist/src/connectors/cli/runtime.js

@@ -1,6 +1,6 @@
 import { getConnectorAccount, init_connector_account_repository } from "../../storage/sqlite/connector-account-repository.js";
-import { normalizeCliResult, parseJson, validateActionInput } from "./protocol.js";
 import { startCliProcess } from "./process.js";
+import { normalizeCliResult, parseJson, validateActionInput } from "./protocol.js";
 import { verifyInstalledCli } from "./installer.js";
 import { requireCliInstance } from "./authorization.js";
 //#region src/connectors/cli/runtime.ts

package/dist/src/connectors/composio-sessions.d.ts

@@ -52,8 +52,8 @@ export declare class ComposioSessionsAdapter {
         alias?: string;
         expectedAccountId?: string;
     }): Promise<ComposioAuthorizeResult>;
-    /** Verify a replacement credential without changing local authorizations. */
-    verifyConnections(connections: ConnectorConnection[]): Promise<void>;
+    /** Verify a project credential using read-only APIs without changing remote or local state. */
+    verifyProjectAccess(context: Pick<ComposioSessionContext, 'principalId' | 'installationScope'>, connections?: ConnectorConnection[]): Promise<void>;
     private listAllAccounts;
     syncConnections(context: Pick<ComposioSessionContext, 'principalId' | 'installationScope' | 'backendId'>): Promise<ConnectorConnection[]>;
     revokeConnection(connection: ConnectorConnection): Promise<void>;
@@ -68,6 +68,8 @@ export declare class ComposioSessionsAdapter {
         agentId?: string;
         conversationId?: string;
         confirmed?: boolean;
+        /** Recheck authorization immediately before sending an action after session setup. */
+        beforeExecute?: () => void;
     }): Promise<{
         decision: 'allowed';
         result: unknown;

package/dist/src/connectors/composio-sessions.js

@@ -4,11 +4,11 @@ import { getSqliteDatabase, init_transaction } from "../storage/sqlite/transacti
 import { getConnectorAccount, init_connector_account_repository, reconcileConnectorAccount } from "../storage/sqlite/connector-account-repository.js";
 import { appendConnectorExecutionAudit, getConnectorConnection, getConnectorInstallation, init_connector_repository, listConnectorConnections, upsertConnectorConnection } from "../storage/sqlite/connector-repository.js";
 import { CredentialResolver, init_credentials } from "../auth/credentials.js";
+import { canAccessConnectorAccount } from "./account-access.js";
 import { ensureComposioBackend, getComposioBackend, listComposioBackends, resolveBackendKey } from "./composio-backends.js";
 import { saveAuthorizationAttempt } from "./authorization-attempts.js";
 import { connectorIdentityKey, mergeConnectorIdentity } from "./connector-identity.js";
 import { evaluateConnectorExecutionPolicy } from "./policy.js";
-import { canAccessConnectorAccount } from "./account-access.js";
 import { createHash } from "node:crypto";
 //#region src/connectors/composio-sessions.ts
 init_credentials();
@@ -255,16 +255,16 @@ var ComposioSessionsAdapter = class {
 			status: request.status
 		};
 	}
-	/** Verify a replacement credential without changing local authorizations. */
-	async verifyConnections(connections) {
+	/** Verify a project credential using read-only APIs without changing remote or local state. */
+	async verifyProjectAccess(context, connections = []) {
 		const client = await this.createClient();
-		const users = [...new Set(connections.map((connection) => connection.metadata.providerPrincipalId))];
-		for (const userId of users) {
-			if (typeof userId !== "string" || !userId) throw new Error("Refresh existing account identities before replacing this key.");
-			const rows = await this.listAllAccounts(client, [userId]);
-			const ids = new Set(rows.flatMap((row) => row && typeof row === "object" ? [readString(row, ["id", "connected_account_id"])] : []));
-			if (connections.some((connection) => connection.metadata.providerPrincipalId === userId && !ids.has(connection.providerConnectionId))) throw new Error("This key cannot access the existing accounts. Add it as a new project instead.");
-		}
+		const providerPrincipalId = createComposioPrincipalId(context.principalId, context.installationScope);
+		const storedUserIds = connections.map((connection) => connection.metadata.providerPrincipalId);
+		if (storedUserIds.some((userId) => typeof userId !== "string" || !userId)) throw new Error("Refresh existing account identities before replacing this key.");
+		const userIds = [...new Set([providerPrincipalId, ...storedUserIds])];
+		const rows = await this.listAllAccounts(client, userIds);
+		const ids = new Set(rows.flatMap((row) => row && typeof row === "object" ? [readString(row, ["id", "connected_account_id"])] : []));
+		if (connections.some((connection) => !ids.has(connection.providerConnectionId))) throw new Error("This key cannot access the existing accounts. Add it as a new project instead.");
 	}
 	async listAllAccounts(client, userIds) {
 		const rows = [];
@@ -439,6 +439,7 @@ var ComposioSessionsAdapter = class {
 				...typeof providerPrincipalId === "string" ? { providerPrincipalId } : {}
 			});
 			input.signal?.throwIfAborted();
+			input.beforeExecute?.();
 			const result = await session.execute(input.action.actionId, input.args ?? {}, input.connection ? { account: input.connection.providerConnectionId } : void 0);
 			input.signal?.throwIfAborted();
 			appendConnectorExecutionAudit({

package/dist/src/connectors/composio.js

@@ -1,9 +1,9 @@
 import { getConnectorAccount, init_connector_account_repository, refreshConnectorAccountCurrent, updateConnectorAccount } from "../storage/sqlite/connector-account-repository.js";
 import { getConnectorConnection, getConnectorInstallation, init_connector_repository, listConnectorConnections, upsertConnectorActionMetadata, upsertConnectorConnection, upsertConnectorInstallation } from "../storage/sqlite/connector-repository.js";
 import { CredentialResolver, init_credentials } from "../auth/credentials.js";
+import { canAccessConnectorAccount, currentAccountConnections } from "./account-access.js";
 import { activateComposioBackend, addComposioBackend, ensureComposioBackend, getComposioBackend, listComposioBackends, markComposioBackendVerified, resolveBackendKey } from "./composio-backends.js";
 import { connectorIdentityKey } from "./connector-identity.js";
-import { canAccessConnectorAccount, currentAccountConnections } from "./account-access.js";
 import { ComposioSessionsAdapter, assertComposioAccessConfigured } from "./composio-sessions.js";
 import { getConnectorLearningPlan } from "./learning-recipes.js";
 import { COMPOSIO_AGENT_READY_TOOLKITS, COMPOSIO_TOOLKIT_DISPLAY_NAMES, connectorDefinitionFromComposioToolkit } from "./composio-catalog.js";
@@ -320,15 +320,17 @@ async function configureComposioApiKey(apiKey, resolver = new CredentialResolver
 	if (!normalized) throw new Error("Composio API key is required.");
 	if (normalized.length > 4096) throw new Error("Composio API key is too long.");
 	const adapter = new ComposioSessionsAdapter({ apiKey: normalized });
-	await adapter.listToolkitCatalog({ principalId: LOCAL_OWNER_PRINCIPAL });
-	await ensureComposioBackend(resolver);
+	const replacement = replaceBackendId ? getComposioBackend(replaceBackendId) : void 0;
 	if (replaceBackendId) {
-		const backend = getComposioBackend(replaceBackendId);
-		if (!backend || backend.mode !== "byok" || !backend.credential_ref) throw new Error("Unknown Composio project.");
-		if (backend.credential_source === "environment") throw new Error("Update this key in the gateway environment, or add a locally stored project.");
-		await adapter.verifyConnections(listConnectorConnections({ principalId: LOCAL_OWNER_PRINCIPAL }).filter((connection) => getConnectorAccount(connection.accountId)?.backendId === backend.id && connection.status !== "revoked"));
-		await resolver.saveApiKey(backend.credential_ref, normalized, { profileName: "default" });
-		markComposioBackendVerified(backend.id);
+		if (!replacement || replacement.mode !== "byok" || !replacement.credential_ref) throw new Error("Unknown Composio project.");
+		if (replacement.credential_source === "environment") throw new Error("Update this key in the gateway environment, or add a locally stored project.");
+	}
+	const existingConnections = replacement ? listConnectorConnections({ principalId: LOCAL_OWNER_PRINCIPAL }).filter((connection) => getConnectorAccount(connection.accountId)?.backendId === replacement.id && connection.status !== "revoked") : [];
+	await adapter.verifyProjectAccess({ principalId: LOCAL_OWNER_PRINCIPAL }, existingConnections);
+	await ensureComposioBackend(resolver);
+	if (replacement) {
+		await resolver.saveApiKey(replacement.credential_ref, normalized, { profileName: "default" });
+		markComposioBackendVerified(replacement.id);
 		return;
 	}
 	for (const backend of listComposioBackends()) if (backend.mode === "byok" && await resolveBackendKey(backend, resolver) === normalized) {

package/dist/src/connectors/connected-source-understanding.js

@@ -2,10 +2,10 @@ import { finishContextExtractionRun } from "../storage/sqlite/context-extraction
 import { createContextEvidence } from "../storage/sqlite/context-evidence-repository.js";
 import { listKnowledgeSourceItems } from "../storage/sqlite/knowledge-repository.js";
 import "../storage/sqlite/index.js";
-import { reconcileAssertion } from "../user-model/repository.js";
-import "../user-model/index.js";
 import { writeKnowledgeItem } from "../knowledge-memory/repository.js";
 import "../knowledge-memory/index.js";
+import { reconcileAssertion } from "../user-model/repository.js";
+import "../user-model/index.js";
 import { claimRegisteredExtraction } from "../user-context/extraction/registry.js";
 import { allowsRemoteSourceProcessing } from "../user-context/sources/processing-policy.js";
 import { analyzeUnderstandingSources } from "../work-discovery/analyzer.js";

package/dist/src/connectors/connection-recovery-service.js

@@ -7,18 +7,18 @@ import { getConnectorAccount, init_connector_account_repository } from "../stora
 import { getConnectorConnection, getConnectorInstallation, init_connector_repository, listConnectorConnections, upsertConnectorInstallation } from "../storage/sqlite/connector-repository.js";
 import { cancelConnectionObjective, getActiveConnectionWait, getConnectionWait, init_connection_wait_repository, listConnectionWaitsToCheck, publishConnectionWait, queueConnectionResolution, updateConnectionWait } from "../storage/sqlite/connection-wait-repository.js";
 import { init_session_repository } from "../storage/sqlite/session-repository.js";
-import { getCliAdapter } from "./cli/adapterRegistry.js";
 import { canAccessConnectorAccount, currentAccountConnections } from "./account-access.js";
+import { getCliAdapter } from "./cli/adapterRegistry.js";
 import { ComposioSessionsAdapter } from "./composio-sessions.js";
 import { getConfiguredComposioAuthConfigs, isComposioActionAllowedByCatalog, scopeForComposioAction } from "./composio.js";
 import { getConnectorDefinition } from "./catalog.js";
 import { getInstalledConnectorDefinition, listConnectorInstances } from "./instances.js";
-import { installConnector } from "./install.js";
-import { persistConfigMutation } from "../config/config-mutation.js";
-import { resolveConnectionCandidate } from "./connection-candidates.js";
-import { capabilityActions, isToolInputSchema, missingConnectionCapabilities } from "./connection-capabilities.js";
 import { describeCliAction, verifyCliConnection } from "./cli/runtime.js";
 import { connectorPrincipalForSession } from "./principal.js";
+import { capabilityActions, isToolInputSchema, missingConnectionCapabilities } from "./connection-capabilities.js";
+import { resolveConnectionCandidate } from "./connection-candidates.js";
+import { installConnector } from "./install.js";
+import { persistConfigMutation } from "../config/config-mutation.js";
 import { randomUUID } from "node:crypto";
 //#region src/connectors/connection-recovery-service.ts
 init_transaction();

package/dist/src/connectors/health.js

@@ -2,8 +2,8 @@ import { init_connector_repository, listConnectorConnections } from "../storage/
 import { currentAccountConnections } from "./account-access.js";
 import { materializeConnectorMcpServer } from "./materialize.js";
 import { getConnectorInstance } from "./instances.js";
-import { getWorkspacePath } from "../config/workspace-path-helpers.js";
 import { describeCliAction, verifyCliConnection } from "./cli/runtime.js";
+import { getWorkspacePath } from "../config/workspace-path-helpers.js";
 import { listBundleMcpServerCapabilitiesForGateway } from "../agent/mcp/bundle-mcp-gateway.js";
 //#region src/connectors/health.ts
 init_connector_repository();

package/dist/src/discussions/action-tasks.js

@@ -1,7 +1,7 @@
 import { getSqliteDatabase, init_transaction, runSqliteWriteTransaction } from "../storage/sqlite/transaction.js";
 import { TaskCreateRequestSchema } from "../../packages/gateway-contract/src/tasks.js";
 import { init_src } from "../../packages/gateway-contract/src/index.js";
-import { TaskRepository } from "../tasks/task-repository.js";
+import { TaskRepository, init_task_repository } from "../tasks/task-repository.js";
 import { TaskApplicationService } from "../tasks/task-application-service.js";
 import { DiscussionServiceError } from "./errors.js";
 import { getDiscussionCapture, getLatestDiscussionOrganization } from "./repository.js";
@@ -9,6 +9,7 @@ import { readTranscriptRevision } from "./revisions.js";
 //#region src/discussions/action-tasks.ts
 init_src();
 init_transaction();
+init_task_repository();
 function meetingActionTasks(id) {
 	const rows = getSqliteDatabase().prepare("SELECT action_id, task_id FROM discussion_action_tasks WHERE discussion_id=?").all(id);
 	const tasks = new TaskRepository();

package/dist/src/discussions/live-worker.js

@@ -1,8 +1,8 @@
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
 import { ObjectLinkService } from "../activity/service.js";
-import { isSTTAvailable } from "../voice/stt/availability.js";
 import { transcribe } from "../voice/stt/transcribe-core.js";
+import { isSTTAvailable } from "../voice/stt/availability.js";
 import { mergeSttConfigFromAppConfig } from "../voice/stt/config.js";
 import "../voice/stt/index.js";
 import { claimNextDiscussionTranscriptSegment, completeDiscussionTranscriptSegment, getDiscussionCapture, listDiscussionTranscriptSegments, retryOrFailDiscussionTranscriptSegment, updateDiscussionCapture } from "./repository.js";

package/dist/src/discussions/recording.js

@@ -3,9 +3,9 @@ import { DISCUSSION_MAX_DURATION_MS } from "../../packages/gateway-contract/src/
 import { init_src } from "../../packages/gateway-contract/src/index.js";
 import { decodeWavToMonoFloat32 } from "../voice/local/wav.js";
 import { forEachNormalizedAudioSegment } from "../voice/audio/normalize.js";
+import { resolveNoteMediaDir } from "../notes/paths.js";
 import { DiscussionServiceError } from "./errors.js";
 import { getDiscussionCapture, updateDiscussionCapture } from "./repository.js";
-import { resolveNoteMediaDir } from "../notes/paths.js";
 import { join } from "node:path";
 import { createReadStream } from "node:fs";
 import { createHash, randomUUID } from "node:crypto";

package/dist/src/discussions/sealer.js

@@ -2,8 +2,8 @@ import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
 import { decodeWavToMonoFloat32 } from "../voice/local/wav.js";
 import { forEachNormalizedAudioSegment } from "../voice/audio/normalize.js";
-import { isSTTAvailable } from "../voice/stt/availability.js";
 import { transcribe } from "../voice/stt/transcribe-core.js";
+import { isSTTAvailable } from "../voice/stt/availability.js";
 import { mergeSttConfigFromAppConfig } from "../voice/stt/config.js";
 import "../voice/stt/index.js";
 import { getDiscussionCapture, listDiscussionCaptures, listDiscussionTranscriptSegments, updateDiscussionCapture } from "./repository.js";

package/dist/src/execution-environments/local-worktree-manager.d.ts

@@ -5,6 +5,7 @@ export interface ProvisionManagedWorktreeInput {
     repositoryPath: string;
     baseRef?: string;
     environmentId?: string;
+    branchRef?: string;
 }
 export interface LocalWorktreeInspection {
     healthy: boolean;

package/dist/src/execution-environments/local-worktree-manager.js

@@ -82,6 +82,14 @@ var LocalWorktreeManager = class {
 		if (repository.dirty) throw new ExecutionEnvironmentConflictError(`Repository has uncommitted changes: ${repository.repositoryRoot}`);
 		const baseRef = input.baseRef?.trim() || "HEAD";
 		const baseSha = await resolveGitCommit(repository.repositoryRoot, baseRef);
+		if (input.branchRef) {
+			if (!/^xopc\/task-[a-f0-9-]{36}$/.test(input.branchRef)) throw new Error("Invalid task branch name");
+			await runGit(repository.repositoryRoot, [
+				"check-ref-format",
+				"--branch",
+				input.branchRef
+			]);
+		}
 		const environmentId = input.environmentId?.trim() || randomUUID();
 		const rootPath = resolveManagedWorktreePath(input.projectId, environmentId, this.stateDir);
 		assertManagedWorktreePath(rootPath, this.stateDir, repository.repositoryRoot);
@@ -94,7 +102,8 @@ var LocalWorktreeManager = class {
 			repositoryRoot: repository.repositoryRoot,
 			gitCommonDir: repository.gitCommonDir,
 			baseRef,
-			baseSha
+			baseSha,
+			...input.branchRef ? { branchRef: input.branchRef } : {}
 		});
 		const provisioning = this.store.transition({
 			environmentId: environment.id,
@@ -112,9 +121,11 @@ var LocalWorktreeManager = class {
 				await mkdir(rootPath, { mode: 448 });
 				createdDirectory = await readDirectoryIdentity(rootPath);
 				await runGit(repository.repositoryRoot, [
+					"-c",
+					"core.hooksPath=/dev/null",
 					"worktree",
 					"add",
-					"--detach",
+					...input.branchRef ? ["-b", input.branchRef] : ["--detach"],
 					"--lock",
 					rootPath,
 					baseSha

package/dist/src/extensions/activation-context.js

@@ -1,11 +1,11 @@
 import { PROVIDER_ENV_MAP, init_env_keys } from "../providers/env-keys.js";
 import { init_providers, isProviderConfiguredSync } from "../providers/index.js";
-import { collectTtsProviderConfigEntries } from "../voice/tts/config-slice.js";
-import { isProviderConfigured } from "../voice/tts/factory.js";
-import { mergeTtsConfigFromAppConfig } from "../voice/tts/merge-config.js";
 import { collectSttProviderConfigEntries } from "../voice/stt/config-slice.js";
 import { mergeSttConfigFromAppConfig } from "../voice/stt/config.js";
 import "../voice/stt/index.js";
+import { collectTtsProviderConfigEntries } from "../voice/tts/config-slice.js";
+import { isProviderConfigured } from "../voice/tts/factory.js";
+import { mergeTtsConfigFromAppConfig } from "../voice/tts/merge-config.js";
 import { isSttProviderConfigured } from "../voice/stt/list-providers.js";
 //#region src/extensions/activation-context.ts
 init_providers();

package/dist/src/extensions/api.js

@@ -1,13 +1,13 @@
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
 import { getProviderRegistry, init_plugin_registry } from "../providers/plugin-registry.js";
-import { commandRegistry } from "../chat-commands/registry.js";
-import { registerSpeechProvider } from "../voice/tts/speech-registry.js";
+import { registerMarketplaceAdapter, unregisterMarketplaceAdapter } from "../agent/skills/marketplace/registry.js";
 import { registerMediaUnderstandingProvider } from "../media-understanding/registry.js";
+import { registerSpeechProvider } from "../voice/tts/speech-registry.js";
 import { HOOK_EXECUTION_MODES } from "./types/hooks.js";
+import { commandRegistry } from "../chat-commands/registry.js";
 import { TypedEventBus } from "./typed-event-bus.js";
 import { ExtensionRegistryImpl } from "./extension-registry-impl.js";
-import { registerMarketplaceAdapter, unregisterMarketplaceAdapter } from "../agent/skills/marketplace/registry.js";
 import { registerMigration } from "../migrations/registry.js";
 import { isAbsolute, resolve } from "path";
 import { EventEmitter } from "events";

package/dist/src/extensions/bundled-extension-activation.js

@@ -1,5 +1,5 @@
-import { mergeActivationContext } from "./activation-context.js";
 import { ActivationPlanner } from "./activation-planner.js";
+import { mergeActivationContext } from "./activation-context.js";
 //#region src/extensions/bundled-extension-activation.ts
 function asSurfaceConfig(config) {
 	return config;

package/dist/src/extensions/index.js

@@ -2,12 +2,12 @@ import { init_normalize_manifest, normalizeExtensionManifest } from "./normalize
 import { areExtensionsGloballyDisabled, discoverExtensionsFromDisk, init_discover_extensions } from "./discover-extensions.js";
 import { ManifestRegistry, init_manifest_registry } from "./manifest-registry.js";
 import { buildExtensionMetadataSnapshot, init_extension_metadata_snapshot, resolveExtensionLoaderOptionsFromConfig } from "./extension-metadata-snapshot.js";
-import { collectConfiguredChannelIds, collectConfiguredProviderIds, mergeActivationContext } from "./activation-context.js";
 import { HOOK_EXECUTION_MODES } from "./types/hooks.js";
 import { BUILTIN_PROVIDERS } from "./types/providers.js";
 import { ExtensionRegistryImpl } from "./extension-registry-impl.js";
 import { ExtensionApiImpl, createExtensionLogger, createPathResolver } from "./api.js";
 import { ActivationPlanner } from "./activation-planner.js";
+import { collectConfiguredChannelIds, collectConfiguredProviderIds, mergeActivationContext } from "./activation-context.js";
 import { ExtensionLoader, normalizeExtensionConfig, resolveExtensionPath } from "./loader.js";
 import { listOnboardChannels, listOnboardProviders, resolveProviderForModel } from "./onboard-helpers.js";
 import { ExtensionHookRunner, createHookContext, isHookEvent } from "./hooks.js";

package/dist/src/extensions/loader.js

@@ -8,10 +8,10 @@ import { areExtensionsGloballyDisabled, discoverExtensionsFromDisk, init_discove
 import { ManifestRegistry, init_manifest_registry } from "./manifest-registry.js";
 import { init_loader, loadConfig } from "../config/loader.js";
 import { getProviderRegistry, init_plugin_registry } from "../providers/plugin-registry.js";
-import { mergeActivationContext } from "./activation-context.js";
 import { ExtensionRegistryImpl } from "./extension-registry-impl.js";
 import { ExtensionApiImpl, createExtensionLogger, createPathResolver } from "./api.js";
 import { ActivationPlanner } from "./activation-planner.js";
+import { mergeActivationContext } from "./activation-context.js";
 import { checkEngineCompatibility } from "./engine-check.js";
 import { validateSpeechProviderContracts } from "./speech-provider-contracts.js";
 import { validateMediaUnderstandingProviderContracts } from "./media-provider-contracts.js";

package/dist/src/extensions/lockfile.js

@@ -1,7 +1,7 @@
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
-import { init_write_file_atomic, writeTextAtomic } from "../infra/write-file-atomic.js";
 import { init_paths, resolveExtensionsDir, resolveExtensionsLockPath } from "../config/paths.js";
+import { init_write_file_atomic, writeTextAtomic } from "../infra/write-file-atomic.js";
 import { dirname, join } from "path";
 import { existsSync, lstatSync, readFileSync, readdirSync, readlinkSync } from "fs";
 import { mkdir, readFile } from "fs/promises";

package/dist/src/extensions/normalize-manifest.js

@@ -1,4 +1,6 @@
 import { __esmMin } from "../../_virtual/_rolldown/runtime.js";
+import { ExtensionCapabilityBindingsSchema } from "../../packages/gateway-contract/src/extension-capabilities.js";
+import { init_src } from "../../packages/gateway-contract/src/index.js";
 //#region src/extensions/normalize-manifest.ts
 function isRecord(x) {
 	return typeof x === "object" && x !== null && !Array.isArray(x);
@@ -162,8 +164,10 @@ function normalizeUiManifest(raw) {
 		permissions = p.length ? p : void 0;
 	}
 	const contributions = normalizeUiContributions(raw.contributions);
-	if (!main && !icon && !permissions && !contributions) return void 0;
+	const capabilities = raw.capabilities === void 0 ? void 0 : ExtensionCapabilityBindingsSchema.parse(raw.capabilities);
+	if (!main && !icon && !permissions && !contributions && !capabilities) return void 0;
 	return {
+		...capabilities !== void 0 ? { capabilities } : {},
 		...main !== void 0 ? { main } : {},
 		...icon !== void 0 ? { icon } : {},
 		...permissions !== void 0 ? { permissions } : {},
@@ -380,6 +384,7 @@ function normalizeSetup(raw) {
 }
 var VALID_UI_PERMISSIONS;
 var init_normalize_manifest = __esmMin((() => {
+	init_src();
 	VALID_UI_PERMISSIONS = new Set([
 		"agent.send",
 		"agent.subscribe",

package/dist/src/extensions/sdk/index.js

@@ -1,5 +1,4 @@
 import { ProviderPluginRegistry, getProviderRegistry, init_plugin_registry } from "../../providers/plugin-registry.js";
-import { defineChannelPluginEntry } from "./channel-entry.js";
 import { HOOK_EXECUTION_MODES } from "../types/hooks.js";
 import { TypedEventBus } from "../typed-event-bus.js";
 import { ExtensionRegistryImpl } from "../extension-registry-impl.js";
@@ -8,6 +7,7 @@ import { DEFAULT_SECURITY_CONFIG, checkExtensionDirSafety, checkExtensionPathSaf
 import { SlotRegistry, getSlotRegistry, registerSlotType } from "../slots.js";
 import { ExtensionDiagnostics, ExtensionLoaderCacheImpl, getExtensionCache, getExtensionDiagnostics } from "../diagnostics.js";
 import { ExtensionHookRunner, createHookContext, isHookEvent } from "../hooks.js";
+import { defineChannelPluginEntry } from "./channel-entry.js";
 import { registerExtensionCliProgram } from "./channel-helpers.js";
 import { lazyFunction, lazyModule } from "./lazy.js";
 import { createMockExtensionApi, createTestGateway } from "./testing.js";

package/dist/src/extensions/sdk/media.js

@@ -1,7 +1,7 @@
+import { getMediaUnderstandingProvider, listMediaUnderstandingProviders, registerMediaUnderstandingProvider } from "../../media-understanding/registry.js";
 import { ProviderHttpError, assertOkOrThrowHttpError } from "../../media-shared/http/provider-http-errors.js";
 import { SsrfBlockedError, assertSafeUrl } from "../../media-shared/http/ssrf-guard.js";
 import { fetchWithTimeoutGuarded, normalizeBaseUrl, postMultipartRequest } from "../../media-shared/http/provider-http.js";
 import "../../media-shared/http/index.js";
-import { getMediaUnderstandingProvider, listMediaUnderstandingProviders, registerMediaUnderstandingProvider } from "../../media-understanding/registry.js";
 import { buildAudioTranscriptionFormData, createOpenAiCompatibleAudioProvider, registerOpenAiCompatibleAudioProvider, resolveAudioTranscriptionUploadFileName, transcribeOpenAiCompatibleAudio } from "../../media-understanding/openai-compatible-audio.js";
 export { ProviderHttpError, SsrfBlockedError, assertOkOrThrowHttpError, assertSafeUrl, buildAudioTranscriptionFormData, createOpenAiCompatibleAudioProvider, fetchWithTimeoutGuarded, getMediaUnderstandingProvider, listMediaUnderstandingProviders, normalizeBaseUrl, postMultipartRequest, registerMediaUnderstandingProvider, registerOpenAiCompatibleAudioProvider, resolveAudioTranscriptionUploadFileName, transcribeOpenAiCompatibleAudio };

package/dist/src/extensions/types/manifest.d.ts

@@ -2,6 +2,7 @@
  * Extension manifest — control-plane metadata (readable without loading extension code).
  */
 import type { ExtensionKind } from './core.js';
+import type { ExtensionCapabilityBinding } from '@xopcai/gateway-contract';
 /** Declared in `engines` in the extension manifest (e.g. VSCode-style). */
 export interface EnginesDeclaration {
     /** Semver range string for the running xopc CLI / gateway, e.g. `">=0.0.20"`. */
@@ -121,6 +122,8 @@ export interface ExtensionManifestCommand {
 }
 /** Top-level UI declaration within an extension manifest. */
 export interface ExtensionUiManifest {
+    /** Exact host-owned read contracts requested by this UI release. */
+    capabilities?: ExtensionCapabilityBinding[];
     /** Frontend entry HTML (relative to extension root). */
     main?: string;
     /** Extension icon path (relative to extension root; SVG recommended). */

package/dist/src/gateway/agent-builtin-tools.d.ts

@@ -277,4 +277,4 @@ export declare const GATEWAY_BUILTIN_TOOLS: readonly [{
         readonly zh: "使用已验证的参数执行选定的外部工具。";
     };
 }];
-export declare const GATEWAY_BUILTIN_TOOL_IDS: ("automation" | "workflow" | "find" | "image" | "knowledge_search" | "knowledge_get" | "knowledge_write" | "user_context_search" | "user_context_get" | "user_context_update" | "web_search" | "web_fetch" | "browser_use" | "grep" | "session_search" | "read_file" | "list_dir" | "write_file" | "apply_patch" | "exec_command" | "update_plan" | "todo" | "clarify" | "xopc_tool_execute" | "web_extract" | "image_generate" | "skills_list" | "skill_view" | "skill_manage" | "skills_marketplace_search" | "xopc_tool_search" | "xopc_tool_describe" | "send_message" | "send_media" | "read_media" | "create_share" | "session_status" | "memory_maintenance" | "computer_use" | "tool_manual" | "delegate_task" | "skill_install" | "text_to_speech" | "execute_code" | "create_desktop_pet")[];
+export declare const GATEWAY_BUILTIN_TOOL_IDS: ("automation" | "workflow" | "find" | "image" | "knowledge_search" | "knowledge_get" | "knowledge_write" | "user_context_search" | "user_context_get" | "user_context_update" | "web_search" | "web_fetch" | "browser_use" | "grep" | "session_search" | "read_file" | "list_dir" | "write_file" | "apply_patch" | "exec_command" | "update_plan" | "todo" | "clarify" | "xopc_tool_execute" | "computer_use" | "tool_manual" | "web_extract" | "image_generate" | "skills_list" | "skill_view" | "skill_manage" | "skills_marketplace_search" | "session_status" | "send_message" | "send_media" | "delegate_task" | "skill_install" | "text_to_speech" | "create_share" | "xopc_tool_search" | "xopc_tool_describe" | "read_media" | "memory_maintenance" | "execute_code" | "create_desktop_pet")[];

package/dist/src/gateway/agents-admin.js

@@ -1,11 +1,11 @@
 import { init_agent_scope, listAgentEntries, normalizeAgentId, resolveAgentDir, resolveAgentProfileDir, resolveAgentWorkspaceDir, resolveDefaultAgentId, resolveUserPath, validateAgentIdForNewAgent } from "../agent/agent-scope.js";
-import { WORKSPACE_FILES, init_paths } from "../config/paths.js";
 import { resolveEffectiveAgentProfile } from "../config/agent-profile.js";
-import { applyAgentConfig, findAgentEntryIndex, getAgentDeleteBlocker, pruneAgentConfig, removeAgentDirsFromDisk } from "../commands/agents.config.js";
-import { GATEWAY_BUILTIN_TOOL_IDS } from "./agent-builtin-tools.js";
+import { WORKSPACE_FILES, init_paths } from "../config/paths.js";
 import { AGENT_PROFILE_MARKDOWN_SYSTEM_FILES, REQUIRED_AGENT_PROFILE_MARKDOWN_FILE_SET } from "../agent/context/workspace.js";
-import { seedAgentProfileMarkdownFiles } from "../agent/context/workspace-seed.js";
 import { isPathUnderWorkspace, resolveWorkspaceSafePath } from "./workspace-editor-path.js";
+import { seedAgentProfileMarkdownFiles } from "../agent/context/workspace-seed.js";
+import { applyAgentConfig, findAgentEntryIndex, getAgentDeleteBlocker, pruneAgentConfig, removeAgentDirsFromDisk } from "../commands/agents.config.js";
+import { GATEWAY_BUILTIN_TOOL_IDS } from "./agent-builtin-tools.js";
 import { join, resolve } from "node:path";
 import { mkdir, readFile, realpath, stat, unlink, writeFile } from "node:fs/promises";
 //#region src/gateway/agents-admin.ts

package/dist/src/gateway/chat-stream/mapper.js

@@ -445,14 +445,15 @@ function userMessageDisplayMetadata(value) {
 	if (!Array.isArray(rows)) return void 0;
 	const sourceContexts = rows.flatMap((value) => {
 		const row = asRecord(value);
-		if (row?.kind !== "note" && row?.kind !== "task" || typeof row.sourceId !== "string" || typeof row.version !== "string" || typeof row.title !== "string") return [];
+		if (row?.kind !== "note" && row?.kind !== "task" && row?.kind !== "file" && row?.kind !== "session" && row?.kind !== "browser_tab" && row?.kind !== "mcp_resource" || typeof row.sourceId !== "string" || typeof row.version !== "string" || typeof row.title !== "string") return [];
 		return [{
 			kind: row.kind,
 			sourceId: row.sourceId,
 			version: row.version,
 			title: row.title,
 			...typeof row.tokenEstimate === "number" ? { tokenEstimate: row.tokenEstimate } : {},
-			...row.truncated === true ? { truncated: true } : {}
+			...row.truncated === true ? { truncated: true } : {},
+			...row.kind === "file" && (row.fileKind === "file" || row.fileKind === "directory") ? { fileKind: row.fileKind } : {}
 		}];
 	});
 	return sourceContexts.length > 0 ? { sourceContexts } : void 0;

package/dist/src/gateway/device-routes.js

@@ -1,6 +1,6 @@
-import { getTailscaleExposureState } from "./tailscale-lifecycle.js";
-import { resolveReverseProxyPublicUrl } from "./public-url.js";
 import { getTunnelService } from "../tunnel/tunnel-service.js";
+import { resolveReverseProxyPublicUrl } from "./public-url.js";
+import { getTailscaleExposureState } from "./tailscale-lifecycle.js";
 import crypto from "node:crypto";
 //#region src/gateway/device-routes.ts
 function secureUrl(value) {