@xopcai/xopc 0.0.331 → 0.0.332

package/dist/src/auth/oauth-provider-lock.js

@@ -3,8 +3,8 @@ import { init_paths, resolveOAuthPath } from "../config/paths.js";
 import { AsyncLocalStorage } from "node:async_hooks";
 import { dirname } from "node:path";
 import { randomUUID } from "node:crypto";
-import { mkdir, open, readFile, rm, stat } from "node:fs/promises";
 import { setTimeout } from "node:timers/promises";
+import { mkdir, open, readFile, rm, stat } from "node:fs/promises";
 //#region src/auth/oauth-provider-lock.ts
 function lockPath(providerId) {
 	return `${resolveOAuthPath(providerId.toLowerCase())}.lock`;

package/dist/src/auth/sync-provider-auth.js

@@ -1,6 +1,6 @@
 import { __esmMin } from "../../_virtual/_rolldown/runtime.js";
-import { init_paths, resolveAgentAuthProfilesPath, resolveAuthProfilesPath, resolveOAuthPath } from "../config/paths.js";
 import { getDefaultAgentId, init_resolve_route } from "../routing/resolve-route.js";
+import { init_paths, resolveAgentAuthProfilesPath, resolveAuthProfilesPath, resolveOAuthPath } from "../config/paths.js";
 import { init_registry, isOAuthOnlyProvider } from "./oauth/registry.js";
 import { existsSync, readFileSync } from "node:fs";
 //#region src/auth/sync-provider-auth.ts

package/dist/src/automations/capabilities/drafts.js

@@ -3,10 +3,10 @@ import { init_src } from "../../../packages/gateway-contract/src/index.js";
 import { init_trust_policy, resolveAutomationSafetyForTrust } from "../../user-context/trust-policy.js";
 import { getUserTrustPolicy } from "../../storage/sqlite/user-trust-repository.js";
 import { init_sqlite } from "../../storage/sqlite/index.js";
+import { init_agent_scope, resolveDefaultAgentId } from "../../agent/agent-scope.js";
 import { CapabilityError } from "../../capabilities/runtime/errors.js";
 import { ExternalEffectNotAppliedError } from "../../capabilities/runtime/external-operations.js";
 import { defineExternalCapability, defineReadCapability } from "../../capabilities/runtime/dispatcher.js";
-import { init_agent_scope, resolveDefaultAgentId } from "../../agent/agent-scope.js";
 import { AutomationCreateCapabilityInputSchema } from "./write.js";
 import { simulateAutomation } from "../draft/automation-draft-validator.js";
 import { AutomationDraftService } from "../draft/automation-draft-service.js";

package/dist/src/automations/capabilities/write.d.ts

@@ -121,6 +121,14 @@ export declare const AutomationCreateCapabilityInputSchema: z.ZodObject<{
                 outputDestinations: z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
             }, z.core.$strip>;
         }, z.core.$strip>], "type">;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"system">;
+        capability: z.ZodEnum<{
+            "home.advisor.refresh": "home.advisor.refresh";
+            "memory.temporal_sweep": "memory.temporal_sweep";
+            "memory.daily_reconciliation": "memory.daily_reconciliation";
+            "memory.weekly_knowledge": "memory.weekly_knowledge";
+        }>;
     }, z.core.$strict>], "kind">;
     id: z.ZodPipe<z.ZodOptional<z.ZodNullable<z.ZodString>>, z.ZodTransform<string, string>>;
     trigger: z.ZodDiscriminatedUnion<[z.ZodObject<{
@@ -293,6 +301,14 @@ export declare const AutomationUpdatePatchSchema: z.ZodObject<{
                 outputDestinations: z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
             }, z.core.$strip>;
         }, z.core.$strip>], "type">;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"system">;
+        capability: z.ZodEnum<{
+            "home.advisor.refresh": "home.advisor.refresh";
+            "memory.temporal_sweep": "memory.temporal_sweep";
+            "memory.daily_reconciliation": "memory.daily_reconciliation";
+            "memory.weekly_knowledge": "memory.weekly_knowledge";
+        }>;
     }, z.core.$strict>], "kind">>;
     trigger: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
         kind: z.ZodLiteral<"manual">;
@@ -345,5 +361,6 @@ export declare const AutomationUpdatePatchSchema: z.ZodObject<{
         none: "none";
     }>>;
     state: z.ZodOptional<z.ZodNever>;
+    management: z.ZodOptional<z.ZodNever>;
 }, z.core.$strict>;
 export declare function registerAutomationWriteCapabilities(dispatcher: CapabilityDispatcher, service: AutomationService, projects?: ProjectService): void;

package/dist/src/automations/capabilities/write.js

@@ -10,8 +10,28 @@ import { AutomationAlreadyExistsError, AutomationAlreadyRunningError } from "../
 import { z } from "zod";
 //#region src/automations/capabilities/write.ts
 init_src();
-const AutomationCreateCapabilityInputSchema = CreateAutomationSchema.omit({ state: true });
-const AutomationUpdatePatchSchema = UpdateAutomationSchema.safeExtend({ state: z.never().optional() });
+const AutomationCreateCapabilityInputSchema = CreateAutomationSchema.omit({
+	state: true,
+	management: true
+}).refine((input) => input.action.kind !== "system", { message: "System actions can only be created by the runtime" });
+const AutomationUpdatePatchSchema = UpdateAutomationSchema.safeExtend({
+	state: z.never().optional(),
+	management: z.never().optional()
+});
+function assertManagedOperation(automation, operation, patch) {
+	const management = automation.management;
+	if (!management) return;
+	if (operation === "run") {
+		if (!management.runnable) throw new CapabilityError("FORBIDDEN", "This managed automation cannot be run manually");
+		return;
+	}
+	if (operation === "delete") {
+		if (!management.deletable) throw new CapabilityError("FORBIDDEN", "This managed automation cannot be deleted");
+		return;
+	}
+	const forbidden = Object.entries(patch ?? {}).filter(([key, value]) => JSON.stringify(automation[key]) !== JSON.stringify(value)).map(([key]) => key).filter((field) => !management.editable.includes(field));
+	if (forbidden.length > 0) throw new CapabilityError("FORBIDDEN", `Managed fields cannot be changed: ${forbidden.join(", ")}`);
+}
 function registerAutomationWriteCapabilities(dispatcher, service, projects) {
 	const policy = {
 		majorVersion: 1,
@@ -75,6 +95,7 @@ function registerAutomationWriteCapabilities(dispatcher, service, projects) {
 			const automationId = command === "run" ? id : getAutomationRun(id)?.automationId;
 			const automation = automationId ? getAutomation(automationId) : null;
 			if (!automation) throw new CapabilityError("NOT_FOUND", "Automation or source run not found");
+			assertManagedOperation(automation, "run");
 			try {
 				const run = command === "run" ? service.queueRunAtomically(id) : service.queueRerunAtomically(id);
 				return {
@@ -98,6 +119,7 @@ function registerAutomationWriteCapabilities(dispatcher, service, projects) {
 		execute({ id, expectedRevision }) {
 			const current = getAutomation(id);
 			if (current && current.updatedAtMs !== expectedRevision) throw new CapabilityError("REVISION_CONFLICT", "Automation changed");
+			if (current) assertManagedOperation(current, "delete");
 			const result = service.removeAtomically(id);
 			return {
 				ok: true,
@@ -138,6 +160,7 @@ function registerAutomationWriteCapabilities(dispatcher, service, projects) {
 			const current = getAutomation(id);
 			if (!current) throw new CapabilityError("NOT_FOUND", "Automation not found");
 			if (current.updatedAtMs !== expectedRevision) throw new CapabilityError("REVISION_CONFLICT", "Automation changed");
+			assertManagedOperation(current, "update", patch);
 			requireProject(patch.projectId);
 			return {
 				ok: true,
@@ -158,6 +181,7 @@ function registerAutomationWriteCapabilities(dispatcher, service, projects) {
 			const current = getAutomation(id);
 			if (!current) throw new CapabilityError("NOT_FOUND", "Automation not found");
 			if (current.updatedAtMs !== expectedRevision) throw new CapabilityError("REVISION_CONFLICT", "Automation changed");
+			assertManagedOperation(current, "update", { enabled });
 			const automation = service.updateAtomically(id, { enabled });
 			if (!automation) throw new CapabilityError("NOT_FOUND", "Automation not found");
 			return {

package/dist/src/automations/domain/defaults.js

@@ -2,7 +2,7 @@
 const DEFAULT_AUTOMATION_TIMEOUT_SECONDS = 1800;
 const DEFAULT_BROWSER_AUTOMATION_TIMEOUT_SECONDS = 600;
 function defaultAutomationTimeoutSeconds(action) {
-	return action.kind === "browser_automation" ? 600 : DEFAULT_AUTOMATION_TIMEOUT_SECONDS;
+	return action.kind === "system" ? 60 : action.kind === "browser_automation" ? 600 : DEFAULT_AUTOMATION_TIMEOUT_SECONDS;
 }
 function resolveAutomationTimeoutSeconds(action, reliability) {
 	return reliability?.executionTimeoutSeconds ?? ("timeoutSeconds" in action ? action.timeoutSeconds : void 0) ?? reliability?.timeoutSeconds ?? defaultAutomationTimeoutSeconds(action);

package/dist/src/automations/domain/index.js

@@ -1,4 +1,4 @@
-import { AutomationActionSchema, AutomationReliabilitySchema, AutomationSafetyPolicySchema, AutomationScheduleSchema, AutomationSchema, AutomationStateSchema, AutomationTriggerSchema, CreateAutomationSchema, UpdateAutomationSchema } from "./validation.js";
+import { AutomationActionSchema, AutomationManagementSchema, AutomationReliabilitySchema, AutomationSafetyPolicySchema, AutomationScheduleSchema, AutomationSchema, AutomationStateSchema, AutomationTriggerSchema, CreateAutomationSchema, UpdateAutomationSchema } from "./validation.js";
 import { computeNextAutomationRunAtMs, computeNextScheduleRunAtMs, timerDelayUntil } from "./schedule.js";
 import { DEFAULT_AUTOMATION_TIMEOUT_SECONDS, DEFAULT_BROWSER_AUTOMATION_TIMEOUT_SECONDS, defaultAutomationTimeoutSeconds, resolveAutomationTimeoutSeconds } from "./defaults.js";
-export { AutomationActionSchema, AutomationReliabilitySchema, AutomationSafetyPolicySchema, AutomationScheduleSchema, AutomationSchema, AutomationStateSchema, AutomationTriggerSchema, CreateAutomationSchema, DEFAULT_AUTOMATION_TIMEOUT_SECONDS, DEFAULT_BROWSER_AUTOMATION_TIMEOUT_SECONDS, UpdateAutomationSchema, computeNextAutomationRunAtMs, computeNextScheduleRunAtMs, defaultAutomationTimeoutSeconds, resolveAutomationTimeoutSeconds, timerDelayUntil };
+export { AutomationActionSchema, AutomationManagementSchema, AutomationReliabilitySchema, AutomationSafetyPolicySchema, AutomationScheduleSchema, AutomationSchema, AutomationStateSchema, AutomationTriggerSchema, CreateAutomationSchema, DEFAULT_AUTOMATION_TIMEOUT_SECONDS, DEFAULT_BROWSER_AUTOMATION_TIMEOUT_SECONDS, UpdateAutomationSchema, computeNextAutomationRunAtMs, computeNextScheduleRunAtMs, defaultAutomationTimeoutSeconds, resolveAutomationTimeoutSeconds, timerDelayUntil };

package/dist/src/automations/domain/types.d.ts

@@ -54,7 +54,17 @@ export type AutomationAction = {
     kind: 'task_command';
     taskId: string;
     command: TaskCommand;
+} | {
+    kind: 'system';
+    capability: 'home.advisor.refresh' | 'memory.temporal_sweep' | 'memory.daily_reconciliation' | 'memory.weekly_knowledge';
 };
+export type AutomationEditableField = 'enabled' | 'trigger';
+export interface AutomationManagement {
+    owner: string;
+    editable: AutomationEditableField[];
+    runnable: boolean;
+    deletable: boolean;
+}
 export type AutomationConversationMode = 'new_session' | 'continuous';
 export type AutomationNotificationPolicy = 'attention' | 'all' | 'none';
 export interface AutomationReliability {
@@ -97,6 +107,7 @@ export interface Automation {
     notificationPolicy: AutomationNotificationPolicy;
     completionWebhookUrl?: string;
     reliability?: AutomationReliability;
+    management?: AutomationManagement;
     state: AutomationState;
     createdAtMs: number;
     updatedAtMs: number;
@@ -210,6 +221,17 @@ export interface AutomationDeps {
         reason?: string;
         runId?: string;
     };
+    executeSystemAction?: (input: {
+        capability: Extract<AutomationAction, {
+            kind: 'system';
+        }>['capability'];
+        automationId: string;
+        runId: string;
+    }) => Promise<{
+        summary?: string;
+    }> | {
+        summary?: string;
+    };
 }
 export interface AutomationActionTask {
     status: 'succeeded' | 'failed' | 'timeout' | 'cancelled';

package/dist/src/automations/domain/validation.d.ts

@@ -151,7 +151,24 @@ export declare const AutomationActionSchema: z.ZodDiscriminatedUnion<[z.ZodObjec
             outputDestinations: z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
         }, z.core.$strip>;
     }, z.core.$strip>], "type">;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"system">;
+    capability: z.ZodEnum<{
+        "home.advisor.refresh": "home.advisor.refresh";
+        "memory.temporal_sweep": "memory.temporal_sweep";
+        "memory.daily_reconciliation": "memory.daily_reconciliation";
+        "memory.weekly_knowledge": "memory.weekly_knowledge";
+    }>;
 }, z.core.$strict>], "kind">;
+export declare const AutomationManagementSchema: z.ZodObject<{
+    owner: z.ZodString;
+    editable: z.ZodArray<z.ZodEnum<{
+        enabled: "enabled";
+        trigger: "trigger";
+    }>>;
+    runnable: z.ZodBoolean;
+    deletable: z.ZodBoolean;
+}, z.core.$strict>;
 export declare const AutomationReliabilitySchema: z.ZodObject<{
     executionTimeoutSeconds: z.ZodOptional<z.ZodNumber>;
     timeoutSeconds: z.ZodOptional<z.ZodNumber>;
@@ -328,6 +345,14 @@ export declare const AutomationSchema: z.ZodObject<{
                 outputDestinations: z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
             }, z.core.$strip>;
         }, z.core.$strip>], "type">;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"system">;
+        capability: z.ZodEnum<{
+            "home.advisor.refresh": "home.advisor.refresh";
+            "memory.temporal_sweep": "memory.temporal_sweep";
+            "memory.daily_reconciliation": "memory.daily_reconciliation";
+            "memory.weekly_knowledge": "memory.weekly_knowledge";
+        }>;
     }, z.core.$strict>], "kind">;
     safety: z.ZodOptional<z.ZodObject<{
         mode: z.ZodEnum<{
@@ -353,6 +378,15 @@ export declare const AutomationSchema: z.ZodObject<{
         maxConcurrentRuns: z.ZodOptional<z.ZodNumber>;
         disableAfterConsecutiveFailures: z.ZodOptional<z.ZodNumber>;
     }, z.core.$strict>>;
+    management: z.ZodOptional<z.ZodObject<{
+        owner: z.ZodString;
+        editable: z.ZodArray<z.ZodEnum<{
+            enabled: "enabled";
+            trigger: "trigger";
+        }>>;
+        runnable: z.ZodBoolean;
+        deletable: z.ZodBoolean;
+    }, z.core.$strict>>;
     state: z.ZodDefault<z.ZodObject<{
         nextRunAtMs: z.ZodOptional<z.ZodNumber>;
         runningRunId: z.ZodPipe<z.ZodOptional<z.ZodNullable<z.ZodString>>, z.ZodTransform<string, string>>;
@@ -490,6 +524,14 @@ export declare const CreateAutomationSchema: z.ZodObject<{
                 outputDestinations: z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
             }, z.core.$strip>;
         }, z.core.$strip>], "type">;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"system">;
+        capability: z.ZodEnum<{
+            "home.advisor.refresh": "home.advisor.refresh";
+            "memory.temporal_sweep": "memory.temporal_sweep";
+            "memory.daily_reconciliation": "memory.daily_reconciliation";
+            "memory.weekly_knowledge": "memory.weekly_knowledge";
+        }>;
     }, z.core.$strict>], "kind">;
     trigger: z.ZodDiscriminatedUnion<[z.ZodObject<{
         kind: z.ZodLiteral<"manual">;
@@ -541,6 +583,15 @@ export declare const CreateAutomationSchema: z.ZodObject<{
         maxConcurrentRuns: z.ZodOptional<z.ZodNumber>;
         disableAfterConsecutiveFailures: z.ZodOptional<z.ZodNumber>;
     }, z.core.$strict>>;
+    management: z.ZodOptional<z.ZodObject<{
+        owner: z.ZodString;
+        editable: z.ZodArray<z.ZodEnum<{
+            enabled: "enabled";
+            trigger: "trigger";
+        }>>;
+        runnable: z.ZodBoolean;
+        deletable: z.ZodBoolean;
+    }, z.core.$strict>>;
     id: z.ZodPipe<z.ZodOptional<z.ZodNullable<z.ZodString>>, z.ZodTransform<string, string>>;
     enabled: z.ZodOptional<z.ZodBoolean>;
     state: z.ZodOptional<z.ZodObject<{
@@ -679,6 +730,14 @@ export declare const UpdateAutomationSchema: z.ZodObject<{
                 outputDestinations: z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
             }, z.core.$strip>;
         }, z.core.$strip>], "type">;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"system">;
+        capability: z.ZodEnum<{
+            "home.advisor.refresh": "home.advisor.refresh";
+            "memory.temporal_sweep": "memory.temporal_sweep";
+            "memory.daily_reconciliation": "memory.daily_reconciliation";
+            "memory.weekly_knowledge": "memory.weekly_knowledge";
+        }>;
     }, z.core.$strict>], "kind">>;
     trigger: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
         kind: z.ZodLiteral<"manual">;
@@ -721,6 +780,15 @@ export declare const UpdateAutomationSchema: z.ZodObject<{
         maxConcurrentRuns: z.ZodOptional<z.ZodNumber>;
         disableAfterConsecutiveFailures: z.ZodOptional<z.ZodNumber>;
     }, z.core.$strict>>>;
+    management: z.ZodOptional<z.ZodOptional<z.ZodObject<{
+        owner: z.ZodString;
+        editable: z.ZodArray<z.ZodEnum<{
+            enabled: "enabled";
+            trigger: "trigger";
+        }>>;
+        runnable: z.ZodBoolean;
+        deletable: z.ZodBoolean;
+    }, z.core.$strict>>>;
     conversationMode: z.ZodOptional<z.ZodEnum<{
         new_session: "new_session";
         continuous: "continuous";

package/dist/src/automations/domain/validation.js

@@ -89,8 +89,23 @@ const AutomationActionSchema = z.discriminatedUnion("kind", [
 		kind: z.literal("task_command"),
 		taskId: nonEmptyString.max(200),
 		command: TaskCommandSchema
+	}).strict(),
+	z.object({
+		kind: z.literal("system"),
+		capability: z.enum([
+			"home.advisor.refresh",
+			"memory.temporal_sweep",
+			"memory.daily_reconciliation",
+			"memory.weekly_knowledge"
+		])
 	}).strict()
 ]);
+const AutomationManagementSchema = z.object({
+	owner: nonEmptyString.max(100),
+	editable: z.array(z.enum(["enabled", "trigger"])).max(2),
+	runnable: z.boolean(),
+	deletable: z.boolean()
+}).strict();
 const AutomationReliabilitySchema = z.object({
 	executionTimeoutSeconds: z.number().int().min(1).max(86400).optional(),
 	timeoutSeconds: z.number().int().min(1).max(86400).optional(),
@@ -136,6 +151,7 @@ const AutomationSchema = z.object({
 	]).default("attention"),
 	completionWebhookUrl: optionalTrimmedString(2e3),
 	reliability: AutomationReliabilitySchema.optional(),
+	management: AutomationManagementSchema.optional(),
 	state: AutomationStateSchema.default({}),
 	createdAtMs: z.number().int().nonnegative(),
 	updatedAtMs: z.number().int().nonnegative()
@@ -165,4 +181,4 @@ const UpdateAutomationSchema = AutomationSchema.omit({
 	state: AutomationStateSchema
 }).partial().refine((data) => Object.keys(data).length > 0, { message: "At least one field must be provided" });
 //#endregion
-export { AutomationActionSchema, AutomationReliabilitySchema, AutomationSafetyPolicySchema, AutomationScheduleSchema, AutomationSchema, AutomationStateSchema, AutomationTriggerSchema, CreateAutomationSchema, UpdateAutomationSchema };
+export { AutomationActionSchema, AutomationManagementSchema, AutomationReliabilitySchema, AutomationSafetyPolicySchema, AutomationScheduleSchema, AutomationSchema, AutomationStateSchema, AutomationTriggerSchema, CreateAutomationSchema, UpdateAutomationSchema };

package/dist/src/automations/draft/automation-draft-validator.d.ts

@@ -102,6 +102,9 @@ export declare function buildAutomationDraftResponse(draft: GeneratedAutomationD
                     outputDestinations: Record<string, unknown>[];
                 };
             };
+        } | {
+            kind: "system";
+            capability: "home.advisor.refresh" | "memory.temporal_sweep" | "memory.daily_reconciliation" | "memory.weekly_knowledge";
         };
         trigger?: {
             kind: "manual";
@@ -140,6 +143,12 @@ export declare function buildAutomationDraftResponse(draft: GeneratedAutomationD
             maxConcurrentRuns?: number;
             disableAfterConsecutiveFailures?: number;
         };
+        management?: {
+            owner: string;
+            editable: ("enabled" | "trigger")[];
+            runnable: boolean;
+            deletable: boolean;
+        };
         id?: string;
         enabled?: boolean;
         state?: {

package/dist/src/automations/draft/automation-draft-validator.js

@@ -92,6 +92,7 @@ function summarizeAction(action) {
 	if (action.kind === "workflow") return `Starts workflow ${action.workflowId}.`;
 	if (action.kind === "browser_automation") return `Runs browser automation ${action.automationId}.`;
 	if (action.kind === "task_command") return `Applies ${action.command?.type ?? "a command"} to task ${action.taskId}.`;
+	if (action.kind === "system") return `Runs system capability ${action.capability}.`;
 	return action.agentId ? `Runs agent ${action.agentId}.` : "Runs the default agent.";
 }
 function repairPatchNeedsApproval(patch) {

package/dist/src/automations/index.js

@@ -1,9 +1,9 @@
 import { onAutomationProductEvent, publishAutomationProductEvent } from "./product-events.js";
-import { AutomationActionSchema, AutomationReliabilitySchema, AutomationSafetyPolicySchema, AutomationScheduleSchema, AutomationSchema, AutomationStateSchema, AutomationTriggerSchema, CreateAutomationSchema, UpdateAutomationSchema } from "./domain/validation.js";
+import { AutomationActionSchema, AutomationManagementSchema, AutomationReliabilitySchema, AutomationSafetyPolicySchema, AutomationScheduleSchema, AutomationSchema, AutomationStateSchema, AutomationTriggerSchema, CreateAutomationSchema, UpdateAutomationSchema } from "./domain/validation.js";
 import { computeNextAutomationRunAtMs, computeNextScheduleRunAtMs, timerDelayUntil } from "./domain/schedule.js";
 import { DEFAULT_AUTOMATION_TIMEOUT_SECONDS, DEFAULT_BROWSER_AUTOMATION_TIMEOUT_SECONDS, defaultAutomationTimeoutSeconds, resolveAutomationTimeoutSeconds } from "./domain/defaults.js";
 import { AutomationActionExecutor } from "./service/action-executor.js";
 import { AutomationAlreadyExistsError, AutomationAlreadyRunningError, AutomationService } from "./service/automation-service.js";
 import "./domain/index.js";
 import "./service/index.js";
-export { AutomationActionExecutor, AutomationActionSchema, AutomationAlreadyExistsError, AutomationAlreadyRunningError, AutomationReliabilitySchema, AutomationSafetyPolicySchema, AutomationScheduleSchema, AutomationSchema, AutomationService, AutomationStateSchema, AutomationTriggerSchema, CreateAutomationSchema, DEFAULT_AUTOMATION_TIMEOUT_SECONDS, DEFAULT_BROWSER_AUTOMATION_TIMEOUT_SECONDS, UpdateAutomationSchema, computeNextAutomationRunAtMs, computeNextScheduleRunAtMs, defaultAutomationTimeoutSeconds, onAutomationProductEvent, publishAutomationProductEvent, resolveAutomationTimeoutSeconds, timerDelayUntil };
+export { AutomationActionExecutor, AutomationActionSchema, AutomationAlreadyExistsError, AutomationAlreadyRunningError, AutomationManagementSchema, AutomationReliabilitySchema, AutomationSafetyPolicySchema, AutomationScheduleSchema, AutomationSchema, AutomationService, AutomationStateSchema, AutomationTriggerSchema, CreateAutomationSchema, DEFAULT_AUTOMATION_TIMEOUT_SECONDS, DEFAULT_BROWSER_AUTOMATION_TIMEOUT_SECONDS, UpdateAutomationSchema, computeNextAutomationRunAtMs, computeNextScheduleRunAtMs, defaultAutomationTimeoutSeconds, onAutomationProductEvent, publishAutomationProductEvent, resolveAutomationTimeoutSeconds, timerDelayUntil };

package/dist/src/automations/service/action-executor.js

@@ -128,6 +128,22 @@ var AutomationActionExecutor = class {
 				error: result.reason ?? "Task command failed"
 			};
 		}
+		if (automation.action.kind === "system") {
+			await hooks.onRunPatch?.({ currentPhase: "action" });
+			const execute = this.deps.executeSystemAction;
+			if (!execute) return {
+				status: "failed",
+				error: "System action executor is unavailable"
+			};
+			return {
+				status: "succeeded",
+				summary: (await execute({
+					capability: automation.action.capability,
+					automationId: automation.id,
+					runId: run.id
+				})).summary ?? "System action completed"
+			};
+		}
 		return this.executeAgent(automation, automation.action, run, signal, hooks, deadlineAtMs, context);
 	}
 	async executeBrowserAutomation(automation, action, signal, hooks, context) {

package/dist/src/automations/storage/automation-repository.js

@@ -23,6 +23,7 @@ function rowToAutomation(row) {
 		notificationPolicy: row.notification_policy,
 		completionWebhookUrl: row.completion_webhook_url ?? void 0,
 		reliability: parseJson(row.reliability_json),
+		management: parseJson(row.management_json),
 		state: parseJson(row.state_json) ?? {},
 		createdAtMs: row.created_at_ms,
 		updatedAtMs: row.updated_at_ms
@@ -32,13 +33,13 @@ function upsertAutomation(db, automation) {
 	db.prepare(`INSERT OR REPLACE INTO automations (
       automation_id, name, description, project_id, enabled, trigger_json, action_json,
       safety_json, conversation_mode, notification_policy, completion_webhook_url,
-      reliability_json, state_json, created_at_ms, updated_at_ms
-    ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`).run(automation.id, automation.name, automation.description ?? null, automation.projectId ?? null, automation.enabled ? 1 : 0, JSON.stringify(automation.trigger), JSON.stringify(automation.action), bindJson(automation.safety ?? { mode: "auto_apply" }), automation.conversationMode, automation.notificationPolicy, automation.completionWebhookUrl ?? null, bindJson(automation.reliability), JSON.stringify(automation.state ?? {}), automation.createdAtMs, automation.updatedAtMs);
+      reliability_json, management_json, state_json, created_at_ms, updated_at_ms
+    ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`).run(automation.id, automation.name, automation.description ?? null, automation.projectId ?? null, automation.enabled ? 1 : 0, JSON.stringify(automation.trigger), JSON.stringify(automation.action), bindJson(automation.safety ?? { mode: "auto_apply" }), automation.conversationMode, automation.notificationPolicy, automation.completionWebhookUrl ?? null, bindJson(automation.reliability), bindJson(automation.management), JSON.stringify(automation.state ?? {}), automation.createdAtMs, automation.updatedAtMs);
 }
 const AUTOMATION_SELECT = `
   SELECT automation_id, name, description, project_id, enabled, trigger_json, action_json,
          safety_json, conversation_mode, notification_policy, completion_webhook_url,
-         reliability_json, state_json, created_at_ms, updated_at_ms
+         reliability_json, management_json, state_json, created_at_ms, updated_at_ms
   FROM automations
 `;
 function listAutomations(options) {

package/dist/src/bootstrap/application-state.js

@@ -1,9 +1,9 @@
 import { requireXopcDatabase } from "../storage/sqlite/connection.js";
 import { init_sqlite } from "../storage/sqlite/index.js";
 import { AgentCatalogService } from "../agent-catalog/service.js";
+import { ensureStarterAgentsInitialized } from "../agent/starter-agents.js";
 import { cutoverLegacyAgentConfig } from "../agent-catalog/migrations/legacy-config-cutover.js";
 import "../agent-catalog/index.js";
-import { ensureStarterAgentsInitialized } from "../agent/starter-agents.js";
 import { runBootstrapMigrationsSync } from "../migrations/runner.js";
 //#region src/bootstrap/application-state.ts
 init_sqlite();

package/dist/src/capabilities/runtime/dispatcher.js

@@ -1,7 +1,7 @@
 import { SqliteCommitEffectError, init_transaction } from "../../storage/sqlite/transaction.js";
-import { OperationConflictError, executeAtomicOperation } from "./atomic-operations.js";
 import { CapabilityError } from "./errors.js";
 import { executeExternalOperation } from "./external-operations.js";
+import { OperationConflictError, executeAtomicOperation } from "./atomic-operations.js";
 import { createHash } from "node:crypto";
 import { z } from "zod";
 //#region src/capabilities/runtime/dispatcher.ts

package/dist/src/capabilities/runtime/product.js

@@ -1,6 +1,5 @@
 import { CapabilityError } from "./errors.js";
 import { CapabilityDispatcher } from "./dispatcher.js";
-import { registerAgentCapabilities } from "../../agent-catalog/capabilities.js";
 import { registerLocalAppReadCapabilities } from "../../local-apps/capabilities/read.js";
 import { registerNoteReadCapabilities } from "../../notes/capabilities/read.js";
 import { registerNoteWriteCapabilities } from "../../notes/capabilities/write.js";
@@ -19,6 +18,7 @@ import { registerSceneReadCapabilities } from "../../scenes/capabilities/read.js
 import { registerSceneWriteCapabilities } from "../../scenes/capabilities/write.js";
 import { registerSettingsCapability } from "./settings.js";
 import { registerAppContextCapability } from "./app-context.js";
+import { registerAgentCapabilities } from "../../agent-catalog/capabilities.js";
 //#region src/capabilities/runtime/product.ts
 function createProductDispatcher(getNotes, taskWrites) {
 	const dispatcher = new CapabilityDispatcher();

package/dist/src/chat-commands/agent-edit.js

@@ -1,7 +1,7 @@
 import { normalizeAgentId } from "../agent-catalog/id.js";
 import { init_agent_scope, resolveAgentProfileDir } from "../agent/agent-scope.js";
-import { WORKSPACE_FILES, init_paths } from "../config/paths.js";
 import { init_agent_session_key, resolveAgentIdFromConversationId } from "../routing/agent-session-key.js";
+import { WORKSPACE_FILES, init_paths } from "../config/paths.js";
 import { commandRegistry } from "./registry.js";
 import { join } from "node:path";
 import { readFile } from "node:fs/promises";

package/dist/src/chat-commands/builtins/config.js

@@ -1,7 +1,7 @@
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
-import { init_paths, resolveConfigPath } from "../../config/paths.js";
 import { ConfigSchema, init_schema } from "../../config/schema.js";
+import { init_paths, resolveConfigPath } from "../../config/paths.js";
 import { commandRegistry } from "../registry.js";
 import { parseConfigValue } from "../config-value.js";
 import { getConfigValueAtPath, parseConfigPath, setConfigValueAtPath, unsetConfigValueAtPath } from "../config-paths.js";

package/dist/src/cli/commands/agent.js

@@ -1,7 +1,7 @@
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
-import { init_agent_scope, resolveDefaultAgentId } from "../../agent/agent-scope.js";
 import { getAgentDefaultModelRef, init_schema } from "../../config/schema.js";
+import { init_agent_scope, resolveDefaultAgentId } from "../../agent/agent-scope.js";
 import { init_agent_session_key, resolveAgentMainConversationId } from "../../routing/agent-session-key.js";
 import { ExtensionLoader } from "../../extensions/loader.js";
 import "../../extensions/index.js";

package/dist/src/cli/commands/agents.js

@@ -1,8 +1,8 @@
 import { normalizeAgentId, validateAgentIdForNewAgent } from "../../agent-catalog/id.js";
 import { AgentCatalogRepository, init_repository } from "../../agent-catalog/repository.js";
 import { init_agent_scope, resolveAgentDir, resolveAgentWorkspaceDir, resolveDefaultAgentId } from "../../agent/agent-scope.js";
-import { AgentCatalogService } from "../../agent-catalog/service.js";
 import { resolveEffectiveAgentConfigForAgent } from "../../config/agent-profile.js";
+import { AgentCatalogService } from "../../agent-catalog/service.js";
 import { colors } from "../utils/colors.js";
 //#region src/cli/commands/agents.ts
 init_repository();

package/dist/src/cli/commands/doctor/checks/database-schema.js

@@ -53,7 +53,7 @@ async function checkDatabaseSchema(ctx) {
 		id: "database-schema",
 		label: "Database schema",
 		status: "pass",
-		message: `SQLite schema v${status.dbVersion} (current release v207).`,
+		message: `SQLite schema v${status.dbVersion} (current release v208).`,
 		hints: []
 	};
 }

package/dist/src/cli/commands/models.js

@@ -1,8 +1,8 @@
 import { AgentCatalogRepository, init_repository } from "../../agent-catalog/repository.js";
-import { AgentCatalogService } from "../../agent-catalog/service.js";
 import { getAgentDefaultModelRef, init_schema } from "../../config/schema.js";
 import { CredentialResolver, init_credentials } from "../../auth/credentials.js";
 import { getAllModels, getAvailableModels, getConfiguredProviders, getProviderAuthState, getProviderDisplayName, init_providers, isProviderConfigured, providerSupportsApiKey, providerSupportsOAuth, resolveModel } from "../../providers/index.js";
+import { AgentCatalogService } from "../../agent-catalog/service.js";
 import { loadConfig } from "../../config/loader.js";
 import { formatExamples, register } from "../registry.js";
 import { getContextWithOpts } from "../context.js";

package/dist/src/cli/commands/onboard/model.js

@@ -1,12 +1,12 @@
 import { AgentCatalogRepository, init_repository } from "../../../agent-catalog/repository.js";
-import { resolveModelsJsonPath } from "../../../config/paths.js";
-import { AgentCatalogService } from "../../../agent-catalog/service.js";
 import { getAgentDefaultModelRef, init_schema } from "../../../config/schema.js";
+import { resolveModelsJsonPath } from "../../../config/paths.js";
 import { init_models_json, loadModelsJson, saveModelsJson } from "../../../config/models-json.js";
 import { getApiKeyFromEnv } from "../../../providers/env-keys.js";
 import { getModelRegistry } from "../../../providers/model-registry.js";
 import { CredentialResolver, init_credentials } from "../../../auth/credentials.js";
 import { getAllProviders, getModelsByProvider, getProviderDisplayName, init_providers, providerSupportsApiKey, providerSupportsOAuth } from "../../../providers/index.js";
+import { AgentCatalogService } from "../../../agent-catalog/service.js";
 import { prepareUpdateGlobalDefaults } from "../../../gateway/global-defaults-admin.js";
 import { discoverProviderModels, isProviderApiDiscoverable } from "../../../providers/model-discovery.js";
 import { getXopcCloudCatalogCoordinator } from "../../../providers/xopc-cloud-catalog-coordinator.js";

package/dist/src/cli/utils/init-workspace-core.js

@@ -1,6 +1,6 @@
 import { AgentCatalogRepository, init_repository } from "../../agent-catalog/repository.js";
-import { AgentCatalogService } from "../../agent-catalog/service.js";
 import { ConfigSchema, init_schema } from "../../config/schema.js";
+import { AgentCatalogService } from "../../agent-catalog/service.js";
 import { assertConfigRewriteSafeForRunningGateway, saveConfig } from "../../config/loader.js";
 import { ensureStarterAgentsInitialized } from "../../agent/starter-agents.js";
 import { bootstrapApplicationStateSync } from "../../bootstrap/application-state.js";

package/dist/src/config/index.js

@@ -1,13 +1,13 @@
 import { ENV_VARS, XOPC_DB_FILENAME, resolveHomeDir, resolveStateDir, resolveXopcCloudCatalogCachePath, resolveXopcDatabasePath } from "./paths-state.js";
-import { expandWorkspacePathString, init_workspace_path, normalizeWorkspaceDir, resolveWorkspaceRoot } from "./workspace-path.js";
-import { resolveDefaultAgentWorkspaceDir } from "./workspace-defaults.js";
-import { resolveAgentWorkspaceDir } from "../agent/agent-scope.js";
-import { FILENAMES, WORKSPACE_FILES, existsSync, hasBundledExtensionManifest, init_paths, resolveAgentAuthProfilesPath, resolveAgentDir, resolveAgentHomeDir, resolveAgentProfileDir, resolveAgentProfileMarkdownPath, resolveAuthProfilesPath, resolveBinDir, resolveBundledExtensionsDir, resolveBundledSkillsDir, resolveConfigPath, resolveCredentialsDir, resolveExtensionSdkPath, resolveExtensionsDir, resolveExtensionsLockPath, resolveInboxDir, resolveInboxMessagePath, resolveInboxPendingDir, resolveInboxProcessedDir, resolveLogPath, resolveLogsDir, resolveMcpOAuthPath, resolveModelsJsonPath, resolveNodeBinDir, resolveNodeBinPath, resolveNodeToolsDir, resolveNpmBinPath, resolveOAuthPath, resolvePidPath, resolveSkillPath, resolveSkillsCachePath, resolveSkillsDir, resolveSkillsLockPath, resolveSocketPath, resolveStatusPath, resolveToolsDir, resolveWorkspaceExtensionsDir, resolveWorkspaceFile, resolveWorkspaceStateDir, resolveWorkspaceStatePath, resolveXopcBinPath } from "./paths.js";
 import { TelegramAccountConfigSchema, TelegramConfigSchema, TelegramGroupConfigSchema, TelegramTopicConfigSchema } from "../../extensions/telegram/src/config-schema.js";
 import { WeixinAccountConfigSchema, WeixinConfigSchema } from "../../extensions/weixin/src/config-schema.js";
 import { AgentImageGenerationModelSchema, AgentModelRefSchema, AgentModelsSchema, BrowserConfigSchema, ChannelsConfigSchema, CommandsConfigSchema, ConfigSchema, ConnectorsConfigSchema, ExperimentalConfigSchema, ExtensionSecurityConfigSchema, ExtensionSlotsConfigSchema, ExtensionsConfigSchema, GatewayAuthRateLimitSchema, GatewayAuthSchema, GatewayBindModeSchema, GatewayChannelConnectDeferModeSchema, GatewayConfigSchema, GatewayModeSchema, GatewayRemoteSchema, GatewayScenesConfigSchema, GatewaySecuritySchema, GatewayTailscaleConsentSchema, GatewayTailscaleSchema, GatewayTlsSchema, GatewayTrustedProxySchema, GatewayWebchatConfigSchema, HeartbeatConfigSchema, McpConfigSchema, McpOAuthConfigSchema, McpServerSchema, MediaUnderstandingCapabilitiesSchema, MediaUnderstandingModelSchema, MessagesConfigSchema, ModelCatalogConfigSchema, ModelsDevConfigSchema, ProviderAuthConfigSchema, ProviderAzureConfigSchema, ProviderRequestOverridesSchema, ProvidersConfigSchema, RuntimeToolsConfigSchema, STTConfigSchema, STTFallbackConfigSchema, STTProviderConfigSchema, SearchProviderEntrySchema, SessionConfigSchema, SessionDmScopeSchema, SessionResetByTypeSchema, SessionResetConfigSchema, SessionResetModeSchema, SessionScopeSchema, SessionStorageConfigSchema, TTSConfigSchema, TTSEdgeConfigSchema, TTSFallbackConfigSchema, TTSModelOverridesConfigSchema, TTSProviderConfigSchema, TTSSummarizationConfigSchema, ToolsConfigSchema, ToolsMediaAudioConfigSchema, ToolsMediaConfigSchema, TunnelConfigSchema, TunnelConsentSchema, UpdateAutoConfigSchema, UpdateConfigSchema, VoiceConfigSchema, VoiceRefinementConfigSchema, WebSearchConfigSchema, WebToolsConfigSchema, WebsiteBlocklistSchema, WorkspaceConfigSchema, WorkspaceImportConfigSchema, getAgentDefaultImageGenerationModelConfig, getAgentDefaultImageModelConfig, getAgentDefaultModelRef, init_schema, parseModelRef } from "./schema.js";
 import { applyConfigOverrides, getConfigOverrides, resetConfigOverrides, setConfigOverride, unsetConfigOverride } from "./runtime-overrides.js";
+import { expandWorkspacePathString, init_workspace_path, normalizeWorkspaceDir, resolveWorkspaceRoot } from "./workspace-path.js";
+import { resolveDefaultAgentWorkspaceDir } from "./workspace-defaults.js";
+import { resolveAgentWorkspaceDir } from "../agent/agent-scope.js";
 import { extractProfileAgentId, resolveEffectiveAgentConfigForAgent, resolveEffectiveAgentConfigForSession, resolveEffectiveAgentProfile, resolveEffectiveAgentProfileForSession } from "./agent-profile.js";
+import { FILENAMES, WORKSPACE_FILES, existsSync, hasBundledExtensionManifest, init_paths, resolveAgentAuthProfilesPath, resolveAgentDir, resolveAgentHomeDir, resolveAgentProfileDir, resolveAgentProfileMarkdownPath, resolveAuthProfilesPath, resolveBinDir, resolveBundledExtensionsDir, resolveBundledSkillsDir, resolveConfigPath, resolveCredentialsDir, resolveExtensionSdkPath, resolveExtensionsDir, resolveExtensionsLockPath, resolveInboxDir, resolveInboxMessagePath, resolveInboxPendingDir, resolveInboxProcessedDir, resolveLogPath, resolveLogsDir, resolveMcpOAuthPath, resolveModelsJsonPath, resolveNodeBinDir, resolveNodeBinPath, resolveNodeToolsDir, resolveNpmBinPath, resolveOAuthPath, resolvePidPath, resolveSkillPath, resolveSkillsCachePath, resolveSkillsDir, resolveSkillsLockPath, resolveSocketPath, resolveStatusPath, resolveToolsDir, resolveWorkspaceExtensionsDir, resolveWorkspaceFile, resolveWorkspaceStateDir, resolveWorkspaceStatePath, resolveXopcBinPath } from "./paths.js";
 import { clearConfigValueCache, getAllowedCommands, getCacheStats, init_resolve_config_value, resolveConfigValue, resolveHeaders, testApiKeyResolution } from "./resolve-config-value.js";
 import { CustomModelSchema, ImageGenerationCapabilitiesSchema, ImageGenerationModelSchema, ImageGenerationProviderSchema, ModelOverrideSchema, ModelsJsonSchema, OpenAICompatSchema, OpenAICompletionsCompatSchema, OpenAIResponsesCompatSchema, OpenRouterRoutingSchema, ProviderConfigSchema, VercelGatewayRoutingSchema, getDefaultModelValues, init_models_json, loadModelsJson, modelsJsonExists, saveModelsJson, validateModelsConfig } from "./models-json.js";
 import { canonicalizeConfiguredMcpServer, isKnownCliMcpTypeAlias, normalizeConfiguredMcpServers, resolveXopcMcpTransportAlias } from "./mcp-config-normalize.js";

package/dist/src/config/loader.js

@@ -1,9 +1,9 @@
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
-import { init_paths, resolveConfigPath } from "./paths.js";
-import { init_write_file_atomic, writeTextAtomic } from "../infra/write-file-atomic.js";
 import { ConfigSchema, init_schema } from "./schema.js";
+import { init_paths, resolveConfigPath } from "./paths.js";
 import { init_resolution, setActivePlatformDiscovery } from "../platform/resolution.js";
+import { init_write_file_atomic, writeTextAtomic } from "../infra/write-file-atomic.js";
 import { assertChannelPluginConfigs } from "./validate-channel-configs.js";
 import { isGatewayConfigLockedByAnotherProcessSync } from "../gateway/lock.js";
 import { dirname } from "path";