@xopcai/xopc 0.0.367 → 0.0.369

package/dist/gateway/static/root/assets/{workspace-api-CdVUhyPo.js → workspace-api-Si2o3inw.js}

@@ -1,2 +1,2 @@
-const __vite__mapDeps=(i,m=__vite__mapDeps,d=(m.f||(m.f=["assets/session-manager-CzCto5zT.js","assets/rolldown-runtime-aKtaBQYM.js","assets/locale-store-C8TMD2gn.js","assets/vendor-react-BOUWij0V.js","assets/messages-Dy26npMy.js","assets/schemas-CObaziC7.js","assets/gateway-realtime-DCCLdyQD.js","assets/gateway-realtime-store-C_Th8kGg.js","assets/local-session-drafts-Cvv7I0fw.js","assets/session-api-_HIN8or3.js","assets/gateway-startup-retry-CXKmdVzN.js","assets/tool-activity-BtJkgjFf.js","assets/constants-Dy8Gw0sF.js","assets/registry-api-AdnxowbH.js","assets/preload-helper-zJ_50EbN.js","assets/attachment-utils-core-BIOUBrpT.js","assets/agents-admin-api-D842OcNo.js","assets/gateway-config-swr-Cjnkle5J.js","assets/vendor-swr-BIWyz7Rc.js"])))=>i.map(i=>d[i]);
-import{t as e}from"./preload-helper-zJ_50EbN.js";import{i as t,r as n}from"./locale-store-C8TMD2gn.js";import{i as r,n as i,r as a,t as o}from"./files-Bw4SBGdM.js";async function s(e){let t=await e.json().catch(()=>null);return Error(t?.error?.message??`HTTP ${e.status}`)}async function c(e,r){let i=await t(n(e),r);if(!i.ok)throw await s(i);return i.json()}async function l(t){if(!t?.projectId&&t?.conversationId){let{SessionManager:n}=await e(async()=>{let{SessionManager:e}=await import(`./session-manager-CzCto5zT.js`).then(e=>e.n);return{SessionManager:e}},__vite__mapDeps([0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18]));await new n().materialize(t.conversationId,`session_resources`)}let n=t?.projectId?{kind:`project`,id:t.projectId}:t?.conversationId?{kind:`session`,id:t.conversationId}:t?.agentId?{kind:`agent`,id:t.agentId}:null;if(n){let e=await c(`/api/files/contexts/${n.kind}/${encodeURIComponent(n.id)}`);return r.parse(e.space)}let i=await c(`/api/files/default-space`);return r.parse(i.space)}function u(e){return{id:e.id,name:e.name,path:e.relativePath,isDirectory:e.kind===`directory`,mimeType:e.mimeType,revision:e.revision}}async function d(e,t){let n=await l(t),r=await c(`/api/files/resolve`,{method:`POST`,body:JSON.stringify({spaceId:n.id,path:e,taskRunId:t?.taskRunId})});return i.parse(r.resource)}async function f(e,t){return d(e,t)}async function p(e=``,t){let n=await l(t),r=new URLSearchParams;return e&&r.set(`path`,e),{entries:a.parse(await c(`/api/files/spaces/${encodeURIComponent(n.id)}/children${r.size?`?${r}`:``}`)).items.map(u)}}async function m(e=``,t){return(await p(e,t)).entries}async function h(e){let t=await l(e);return u(o.parse(await c(`/api/files/spaces/${encodeURIComponent(t.id)}/root`)).resource)}async function g(e,t,n=50){let r=await l(t),i=new URLSearchParams({q:e.trim(),limit:String(n),spaceId:r.id});return a.parse(await c(`/api/files/search?${i}`)).items.map(u)}async function _(e,r){let i=await d(e,r),a=await t(n(`/api/files/${encodeURIComponent(i.id)}/content`));if(!a.ok)throw await s(a);return{content:await a.text(),path:i.relativePath,mtimeMs:i.modifiedAt,revision:i.revision}}async function v(e,t){let n;try{n=await l(t)}catch{return null}try{let r=await c(`/api/files/resolve`,{method:`POST`,body:JSON.stringify({spaceId:n.id,path:e,taskRunId:t?.taskRunId})}),a=i.parse(r.resource);return{absolutePath:r.absolutePath,fileId:a.id,inputPath:e,displayName:a.name,scope:r.absolutePath?`external`:`workspace`,locationKind:r.absolutePath?`host`:`workspace`,exists:!0,isDirectory:a.kind===`directory`,workspaceRelativePath:a.relativePath,capabilities:a.capabilities.filter(e=>e===`preview`||e===`edit`),mtimeMs:a.modifiedAt}}catch{try{return(await c(`/api/files/resolve-reference`,{method:`POST`,body:JSON.stringify({spaceId:n.id,path:e,conversationId:t?.conversationId})})).reference}catch{return null}}}async function y(e,t,n){return await c(`/api/files/references/${encodeURIComponent(e)}/action`,{method:`POST`,body:JSON.stringify({action:t,conversationId:n?.conversationId})})}async function b(e,r){let i=await d(e,r),a=await t(n(`/api/files/${encodeURIComponent(i.id)}/content`),{headers:{Accept:`*/*`}});if(!a.ok)throw await s(a);return a.blob()}async function x(e,t,n){let r=await d(e,n),a=await c(`/api/files/${encodeURIComponent(r.id)}/content`,{method:`PUT`,body:JSON.stringify({content:t,revision:r.revision})}),o=i.parse(a.resource);return{path:o.relativePath,mtimeMs:o.modifiedAt,revision:o.revision}}async function S(e,r=``,i){let a=await l(i),c=new FormData;c.set(`directory`,r),c.set(`file`,e);let d=await t(n(`/api/files/spaces/${encodeURIComponent(a.id)}/upload`),{method:`POST`,body:c});if(!d.ok)throw await s(d);return u(o.parse(await d.json()).resource)}async function C(e){let r=await t(n(`/api/files/${encodeURIComponent(e)}`),{method:`DELETE`});if(!r.ok)throw await s(r)}function w(e,t){let n=new Blob([t],{type:`text/plain;charset=utf-8`}),r=URL.createObjectURL(n),i=document.createElement(`a`);i.href=r,i.download=e,document.body.appendChild(i),i.click(),document.body.removeChild(i),URL.revokeObjectURL(r)}function T(e,t,n){let r=new Blob([t],{type:n}),i=URL.createObjectURL(r),a=document.createElement(`a`);a.href=i,a.download=e,document.body.appendChild(a),a.click(),document.body.removeChild(a),URL.revokeObjectURL(i)}export{b as a,_ as c,f as d,g as f,p as i,y as l,x as m,T as n,h as o,S as p,w as r,m as s,C as t,v as u};
+const __vite__mapDeps=(i,m=__vite__mapDeps,d=(m.f||(m.f=["assets/session-manager-LInoZ_Yi.js","assets/rolldown-runtime-aKtaBQYM.js","assets/locale-store-COVscAqC.js","assets/vendor-react-BOUWij0V.js","assets/messages-Bb2GK-Nj.js","assets/schemas-CObaziC7.js","assets/gateway-realtime-DDWymi-o.js","assets/gateway-realtime-store-BheKaO6d.js","assets/local-session-drafts-DRPsDCj1.js","assets/session-api-yjpEz4pP.js","assets/gateway-startup-retry-jiV5sbEX.js","assets/tool-activity-BtJkgjFf.js","assets/constants-Dy8Gw0sF.js","assets/registry-api-Bh9UBb-f.js","assets/preload-helper-zJ_50EbN.js","assets/attachment-utils-core-BIOUBrpT.js","assets/agents-admin-api-HBZvVyzF.js","assets/gateway-config-swr-7RKqgU_U.js","assets/vendor-swr-BIWyz7Rc.js"])))=>i.map(i=>d[i]);
+import{t as e}from"./preload-helper-zJ_50EbN.js";import{i as t,r as n}from"./locale-store-COVscAqC.js";import{i as r,n as i,r as a,t as o}from"./files-Bw4SBGdM.js";async function s(e){let t=await e.json().catch(()=>null);return Error(t?.error?.message??`HTTP ${e.status}`)}async function c(e,r){let i=await t(n(e),r);if(!i.ok)throw await s(i);return i.json()}async function l(t){if(!t?.projectId&&t?.conversationId){let{SessionManager:n}=await e(async()=>{let{SessionManager:e}=await import(`./session-manager-LInoZ_Yi.js`).then(e=>e.n);return{SessionManager:e}},__vite__mapDeps([0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18]));await new n().materialize(t.conversationId,`session_resources`)}let n=t?.projectId?{kind:`project`,id:t.projectId}:t?.conversationId?{kind:`session`,id:t.conversationId}:t?.agentId?{kind:`agent`,id:t.agentId}:null;if(n){let e=await c(`/api/files/contexts/${n.kind}/${encodeURIComponent(n.id)}`);return r.parse(e.space)}let i=await c(`/api/files/default-space`);return r.parse(i.space)}function u(e){return{id:e.id,name:e.name,path:e.relativePath,isDirectory:e.kind===`directory`,mimeType:e.mimeType,revision:e.revision}}async function d(e,t){let n=await l(t),r=await c(`/api/files/resolve`,{method:`POST`,body:JSON.stringify({spaceId:n.id,path:e,taskRunId:t?.taskRunId})});return i.parse(r.resource)}async function f(e,t){return d(e,t)}async function p(e=``,t){let n=await l(t),r=new URLSearchParams;return e&&r.set(`path`,e),{entries:a.parse(await c(`/api/files/spaces/${encodeURIComponent(n.id)}/children${r.size?`?${r}`:``}`)).items.map(u)}}async function m(e=``,t){return(await p(e,t)).entries}async function h(e){let t=await l(e);return u(o.parse(await c(`/api/files/spaces/${encodeURIComponent(t.id)}/root`)).resource)}async function g(e,t,n=50){let r=await l(t),i=new URLSearchParams({q:e.trim(),limit:String(n),spaceId:r.id});return a.parse(await c(`/api/files/search?${i}`)).items.map(u)}async function _(e,r){let i=await d(e,r),a=await t(n(`/api/files/${encodeURIComponent(i.id)}/content`));if(!a.ok)throw await s(a);return{content:await a.text(),path:i.relativePath,mtimeMs:i.modifiedAt,revision:i.revision}}async function v(e,t){let n;try{n=await l(t)}catch{return null}try{let r=await c(`/api/files/resolve`,{method:`POST`,body:JSON.stringify({spaceId:n.id,path:e,taskRunId:t?.taskRunId})}),a=i.parse(r.resource);return{absolutePath:r.absolutePath,fileId:a.id,inputPath:e,displayName:a.name,scope:r.absolutePath?`external`:`workspace`,locationKind:r.absolutePath?`host`:`workspace`,exists:!0,isDirectory:a.kind===`directory`,workspaceRelativePath:a.relativePath,capabilities:a.capabilities.filter(e=>e===`preview`||e===`edit`),mtimeMs:a.modifiedAt}}catch{try{return(await c(`/api/files/resolve-reference`,{method:`POST`,body:JSON.stringify({spaceId:n.id,path:e,conversationId:t?.conversationId})})).reference}catch{return null}}}async function y(e,t,n){return await c(`/api/files/references/${encodeURIComponent(e)}/action`,{method:`POST`,body:JSON.stringify({action:t,conversationId:n?.conversationId})})}async function b(e,r){let i=await d(e,r),a=await t(n(`/api/files/${encodeURIComponent(i.id)}/content`),{headers:{Accept:`*/*`}});if(!a.ok)throw await s(a);return a.blob()}async function x(e,t,n){let r=await d(e,n),a=await c(`/api/files/${encodeURIComponent(r.id)}/content`,{method:`PUT`,body:JSON.stringify({content:t,revision:r.revision})}),o=i.parse(a.resource);return{path:o.relativePath,mtimeMs:o.modifiedAt,revision:o.revision}}async function S(e,r=``,i){let a=await l(i),c=new FormData;c.set(`directory`,r),c.set(`file`,e);let d=await t(n(`/api/files/spaces/${encodeURIComponent(a.id)}/upload`),{method:`POST`,body:c});if(!d.ok)throw await s(d);return u(o.parse(await d.json()).resource)}async function C(e){let r=await t(n(`/api/files/${encodeURIComponent(e)}`),{method:`DELETE`});if(!r.ok)throw await s(r)}function w(e,t){let n=new Blob([t],{type:`text/plain;charset=utf-8`}),r=URL.createObjectURL(n),i=document.createElement(`a`);i.href=r,i.download=e,document.body.appendChild(i),i.click(),document.body.removeChild(i),URL.revokeObjectURL(r)}function T(e,t,n){let r=new Blob([t],{type:n}),i=URL.createObjectURL(r),a=document.createElement(`a`);a.href=i,a.download=e,document.body.appendChild(a),a.click(),document.body.removeChild(a),URL.revokeObjectURL(i)}export{b as a,_ as c,f as d,g as f,p as i,y as l,x as m,T as n,h as o,S as p,w as r,m as s,C as t,v as u};

package/dist/gateway/static/root/index.html

@@ -11,7 +11,7 @@
     <link rel="apple-touch-icon" sizes="180x180" href="/apple-touch-icon.png?v=20260910-1" />
     <link rel="manifest" href="/site.webmanifest?v=20260910-1" />
     <title>XOPC — Keep what matters moving.</title>
-    <script type="module" crossorigin src="/assets/index-BQgqzhQj.js"></script>
+    <script type="module" crossorigin src="/assets/index-BB1z8QxA.js"></script>
     <link rel="modulepreload" crossorigin href="/assets/rolldown-runtime-aKtaBQYM.js">
     <link rel="modulepreload" crossorigin href="/assets/preload-helper-zJ_50EbN.js">
     <link rel="modulepreload" crossorigin href="/assets/vendor-react-BOUWij0V.js">
@@ -25,15 +25,15 @@
     <link rel="modulepreload" crossorigin href="/assets/download-Dk-ZjtO6.js">
     <link rel="modulepreload" crossorigin href="/assets/plus-Q2yW6OE7.js">
     <link rel="modulepreload" crossorigin href="/assets/x-B_N4OPjy.js">
-    <link rel="modulepreload" crossorigin href="/assets/messages-Dy26npMy.js">
-    <link rel="modulepreload" crossorigin href="/assets/locale-store-C8TMD2gn.js">
+    <link rel="modulepreload" crossorigin href="/assets/messages-Bb2GK-Nj.js">
+    <link rel="modulepreload" crossorigin href="/assets/locale-store-COVscAqC.js">
     <link rel="modulepreload" crossorigin href="/assets/cn-JdwAhgNB.js">
     <link rel="modulepreload" crossorigin href="/assets/schemas-CObaziC7.js">
     <link rel="modulepreload" crossorigin href="/assets/local-apps-yys1VChX.js">
     <link rel="modulepreload" crossorigin href="/assets/product-delivery-BAks11S4.js">
     <link rel="modulepreload" crossorigin href="/assets/app-link-4gpFbdsr.js">
     <link rel="modulepreload" crossorigin href="/assets/copy-to-clipboard-HOJ79TWv.js">
-    <link rel="modulepreload" crossorigin href="/assets/markdown-view-Dse7rkio.js">
+    <link rel="modulepreload" crossorigin href="/assets/markdown-view-B_qnAcW2.js">
     <link rel="modulepreload" crossorigin href="/assets/dist-Che_jiQF.js">
     <link rel="modulepreload" crossorigin href="/assets/vendor-swr-BIWyz7Rc.js">
     <link rel="modulepreload" crossorigin href="/assets/activity-YogQEteU.js">
@@ -70,30 +70,30 @@
     <link rel="modulepreload" crossorigin href="/assets/rotate-cw-LIg3Am9S.js">
     <link rel="modulepreload" crossorigin href="/assets/search-DA7gz22f.js">
     <link rel="modulepreload" crossorigin href="/assets/index.module-Cd9ENXfk.js">
-    <link rel="modulepreload" crossorigin href="/assets/gateway-startup-retry-CXKmdVzN.js">
-    <link rel="modulepreload" crossorigin href="/assets/session-api-_HIN8or3.js">
+    <link rel="modulepreload" crossorigin href="/assets/gateway-startup-retry-jiV5sbEX.js">
+    <link rel="modulepreload" crossorigin href="/assets/session-api-yjpEz4pP.js">
     <link rel="modulepreload" crossorigin href="/assets/constants-Dy8Gw0sF.js">
     <link rel="modulepreload" crossorigin href="/assets/app-chrome-BeB4KgOf.js">
     <link rel="modulepreload" crossorigin href="/assets/attachment-utils-core-BIOUBrpT.js">
     <link rel="modulepreload" crossorigin href="/assets/files-Bw4SBGdM.js">
-    <link rel="modulepreload" crossorigin href="/assets/workspace-api-CdVUhyPo.js">
+    <link rel="modulepreload" crossorigin href="/assets/workspace-api-Si2o3inw.js">
     <link rel="modulepreload" crossorigin href="/assets/electron-env-Dit0bHgy.js">
     <link rel="modulepreload" crossorigin href="/assets/use-async-resource-GrnWNwMZ.js">
-    <link rel="modulepreload" crossorigin href="/assets/activity-store-Cuf3JFFJ.js">
-    <link rel="modulepreload" crossorigin href="/assets/use-file-preview-expanded-CJvzfQvw.js">
+    <link rel="modulepreload" crossorigin href="/assets/activity-store-BQ3PMp2q.js">
+    <link rel="modulepreload" crossorigin href="/assets/use-file-preview-expanded-Db2VYg1b.js">
     <link rel="modulepreload" crossorigin href="/assets/globe-DSSGFWFn.js">
     <link rel="modulepreload" crossorigin href="/assets/button-CS04eWY9.js">
     <link rel="modulepreload" crossorigin href="/assets/copy-text-row-BHDs3cBa.js">
-    <link rel="modulepreload" crossorigin href="/assets/share-link-dialog-Dg5os066.js">
-    <link rel="modulepreload" crossorigin href="/assets/local-session-drafts-Cvv7I0fw.js">
+    <link rel="modulepreload" crossorigin href="/assets/share-link-dialog-DJTabLAM.js">
+    <link rel="modulepreload" crossorigin href="/assets/local-session-drafts-DRPsDCj1.js">
     <link rel="modulepreload" crossorigin href="/assets/tasks-DwKXgZ-I.js">
-    <link rel="modulepreload" crossorigin href="/assets/capabilities-BzWFO_x_.js">
+    <link rel="modulepreload" crossorigin href="/assets/capabilities-DO-vfNKI.js">
     <link rel="modulepreload" crossorigin href="/assets/skill-wire-pattern-BPpeIcCi.js">
-    <link rel="modulepreload" crossorigin href="/assets/shares-api-C96IO4qJ.js">
-    <link rel="modulepreload" crossorigin href="/assets/capabilities-K0Zb_lH0.js">
-    <link rel="modulepreload" crossorigin href="/assets/use-composer-attachments-OLrvSjn5.js">
+    <link rel="modulepreload" crossorigin href="/assets/shares-api-c0dfWz6h.js">
+    <link rel="modulepreload" crossorigin href="/assets/capabilities-B48r0DDa.js">
+    <link rel="modulepreload" crossorigin href="/assets/use-composer-attachments-C7Gaaai1.js">
     <link rel="modulepreload" crossorigin href="/assets/git-branch-Dh9uxTot.js">
-    <link rel="modulepreload" crossorigin href="/assets/notes-api-DKiVeQKG.js">
+    <link rel="modulepreload" crossorigin href="/assets/notes-api-sBgBcyLW.js">
     <link rel="modulepreload" crossorigin href="/assets/message-square-fVE7Ghj1.js">
     <link rel="modulepreload" crossorigin href="/assets/pause-DuPxgSxk.js">
     <link rel="modulepreload" crossorigin href="/assets/play-kxZvpBg8.js">
@@ -101,25 +101,24 @@
     <link rel="modulepreload" crossorigin href="/assets/settings-2-D-csvaET.js">
     <link rel="modulepreload" crossorigin href="/assets/sparkles-DHlfQFAF.js">
     <link rel="modulepreload" crossorigin href="/assets/middleware-Pd0e8Igk.js">
-    <link rel="modulepreload" crossorigin href="/assets/gateway-realtime-store-C_Th8kGg.js">
-    <link rel="modulepreload" crossorigin href="/assets/gateway-realtime-DCCLdyQD.js">
+    <link rel="modulepreload" crossorigin href="/assets/gateway-realtime-store-BheKaO6d.js">
+    <link rel="modulepreload" crossorigin href="/assets/gateway-realtime-DDWymi-o.js">
     <link rel="modulepreload" crossorigin href="/assets/tool-activity-BtJkgjFf.js">
-    <link rel="modulepreload" crossorigin href="/assets/registry-api-AdnxowbH.js">
-    <link rel="modulepreload" crossorigin href="/assets/gateway-config-swr-Cjnkle5J.js">
-    <link rel="modulepreload" crossorigin href="/assets/agents-admin-api-D842OcNo.js">
-    <link rel="modulepreload" crossorigin href="/assets/session-manager-CzCto5zT.js">
-    <link rel="modulepreload" crossorigin href="/assets/send-session-input-CgOzhDZ0.js">
-    <link rel="modulepreload" crossorigin href="/assets/theme-store-DQ6KJa4l.js">
-    <link rel="modulepreload" crossorigin href="/assets/extension-provider-CX-sK0Tw.js">
+    <link rel="modulepreload" crossorigin href="/assets/registry-api-Bh9UBb-f.js">
+    <link rel="modulepreload" crossorigin href="/assets/gateway-config-swr-7RKqgU_U.js">
+    <link rel="modulepreload" crossorigin href="/assets/agents-admin-api-HBZvVyzF.js">
+    <link rel="modulepreload" crossorigin href="/assets/session-manager-LInoZ_Yi.js">
+    <link rel="modulepreload" crossorigin href="/assets/send-session-input-Dgn4BRk_.js">
+    <link rel="modulepreload" crossorigin href="/assets/theme-store-BOfCKgl6.js">
+    <link rel="modulepreload" crossorigin href="/assets/extension-provider-xlSyz4Z6.js">
     <link rel="modulepreload" crossorigin href="/assets/loopi-Djb8XU3l.js">
-    <link rel="modulepreload" crossorigin href="/assets/models-hub-cache-B1C86nRp.js">
-    <link rel="modulepreload" crossorigin href="/assets/oauth-api-BwpzpRwC.js">
+    <link rel="modulepreload" crossorigin href="/assets/models-hub-cache-DyPPksMP.js">
     <link rel="modulepreload" crossorigin href="/assets/skill-api-utils-C7V4JVXM.js">
     <link rel="modulepreload" crossorigin href="/assets/date-formatters-CUZAyDEg.js">
     <link rel="modulepreload" crossorigin href="/assets/settings-form-draft-Dy10ldo8.js">
     <link rel="stylesheet" crossorigin href="/assets/markdown-view-DSjfHfaW.css">
     <link rel="stylesheet" crossorigin href="/assets/loopi-C09I2mNj.css">
-    <link rel="stylesheet" crossorigin href="/assets/index-COB4QIJp.css">
+    <link rel="stylesheet" crossorigin href="/assets/index-D9R6tU7r.css">
   </head>
   <body>
     <div id="root"></div>

package/dist/package.js

@@ -1,4 +1,4 @@
 //#region package.json
-var version = "0.0.367";
+var version = "0.0.369";
 //#endregion
 export { version };

package/dist/packages/browser-control-contract/src/automation.js

@@ -0,0 +1,213 @@
+//#region packages/browser-control-contract/src/automation.ts
+/** Runs in the page. Keep all helpers inside this function for serialization. */
+async function browserDom(input) {
+	const root = globalThis;
+	const doc = root.document;
+	const normalize = (value) => String(value || "").trim().replace(/\s+/g, " ").slice(0, 240);
+	const sensitive = (element) => element.type === "password" || element.type === "file" || /cc-|one-time-code|transaction-|password|token|secret|otp|cvv|cvc|card.?number|验证码|密码|银行卡|卡号/i.test([
+		element.autocomplete,
+		element.name,
+		element.id,
+		element.getAttribute("aria-label"),
+		name(element)
+	].join(" "));
+	const role = (element) => element.getAttribute("role") || {
+		A: "link",
+		BUTTON: "button",
+		SUMMARY: "button",
+		SELECT: "combobox",
+		TEXTAREA: "textbox",
+		FORM: "form",
+		FIELDSET: "group",
+		SECTION: "region"
+	}[element.tagName] || (element.tagName === "INPUT" ? element.type === "checkbox" ? "checkbox" : element.type === "radio" ? "radio" : [
+		"submit",
+		"button",
+		"reset"
+	].includes(element.type) ? "button" : "textbox" : "text");
+	const name = (element) => normalize((element.getAttribute("aria-labelledby") || "").split(/\s+/).map((id) => doc.getElementById(id)?.textContent || "").join(" ") || element.getAttribute("aria-label") || element.labels?.[0]?.textContent || (element.tagName === "FIELDSET" ? element.querySelector("legend")?.textContent : "") || element.getAttribute("alt") || element.getAttribute("placeholder") || ([
+		"submit",
+		"button",
+		"reset"
+	].includes(element.type) ? element.value : "") || element.innerText || element.getAttribute("title") || "");
+	const describe = (element) => {
+		const container = element.parentElement?.closest("form,fieldset,section,[role=\"region\"],[role=\"group\"],[role=\"dialog\"]");
+		return {
+			role: role(element),
+			name: name(element),
+			...element.getAttribute("data-testid") ? { testId: element.getAttribute("data-testid") } : {},
+			...container && name(container) ? { scope: {
+				role: role(container),
+				name: name(container)
+			} } : {}
+		};
+	};
+	const selector = "a[href],button,input:not([type=\"hidden\"]),textarea,select,summary,[role],[data-testid],label,p,span,h1,h2,h3,td,output";
+	if (input.operation === "resolve") {
+		const target = input.target;
+		const matches = Array.from(doc.querySelectorAll(selector)).filter((element) => {
+			const rect = element.getBoundingClientRect();
+			const style = root.getComputedStyle(element);
+			if (!rect.width || !rect.height || style.display === "none" || style.visibility === "hidden") return false;
+			const descriptor = describe(element);
+			return descriptor.role === target.role && (!target.name || descriptor.name === target.name) && (!target.nameIncludes || descriptor.name?.includes(target.nameIncludes)) && (!target.testId || descriptor.testId === target.testId) && (!target.scope || descriptor.scope?.role === target.scope.role && descriptor.scope?.name === target.scope.name);
+		});
+		if (matches.length !== 1) return { matches: matches.length };
+		const element = matches[0];
+		const ref = `xopc-e${++root.__xopcRefCounter || (root.__xopcRefCounter = 1)}`;
+		element.setAttribute("data-xopc-ref", ref);
+		return {
+			matches: 1,
+			node: {
+				ref,
+				role: role(element),
+				name: name(element),
+				value: !sensitive(element) && "value" in element ? String(element.value).slice(0, 4096) : void 0,
+				description: !sensitive(element) ? normalize(element.textContent) : void 0,
+				href: element.tagName === "A" ? element.href : void 0,
+				states: [
+					sensitive(element) ? "sensitive" : "",
+					element.disabled ? "disabled" : "",
+					element.checked ? "checked" : "",
+					["BUTTON", "INPUT"].includes(element.tagName) && element.type === "submit" ? "submit" : ""
+				].filter(Boolean)
+			}
+		};
+	}
+	const prior = root.__xopcRecorder;
+	if (input.operation === "record" && prior?.recordingId === input.recordingId && prior?.generation === input.generation) return { recording: true };
+	if (prior) {
+		await prior.stop();
+		delete root.__xopcRecorder;
+	}
+	if (input.operation === "stop") return { stopped: true };
+	let sourceSeq = 0;
+	const pending = /* @__PURE__ */ new Set();
+	const dirty = /* @__PURE__ */ new Set();
+	const lastValues = /* @__PURE__ */ new WeakMap();
+	const listeners = [];
+	const cleanUrl = () => {
+		const url = new URL(root.location.href);
+		url.username = "";
+		url.password = "";
+		url.hash = "";
+		for (const key of [...url.searchParams.keys()]) if (/token|secret|password|key|code/i.test(key)) url.searchParams.delete(key);
+		return url.toString();
+	};
+	const documentId = `${root.performance.timeOrigin}:${input.generation}`;
+	let failed = false;
+	let ended = false;
+	let enterTarget;
+	let enterAt = 0;
+	const emit = (event) => {
+		const task = root.chrome.runtime.sendMessage({
+			type: "browser/recording-event",
+			recordingId: input.recordingId,
+			generation: input.generation,
+			event: {
+				...event,
+				id: root.crypto.randomUUID(),
+				sourceSeq: ++sourceSeq,
+				documentId,
+				url: cleanUrl()
+			}
+		}).then((ack) => {
+			if (!ack?.ok) failed = true;
+		}).catch(() => {
+			failed = true;
+		});
+		pending.add(task);
+		task.finally(() => pending.delete(task));
+	};
+	const flush = (element) => {
+		if (!dirty.delete(element) || sensitive(element)) return;
+		const value = String(element.value || "").slice(0, 4096);
+		if (lastValues.get(element) === value) return;
+		lastValues.set(element, value);
+		emit({
+			action: element.tagName === "SELECT" ? "select" : "fill",
+			target: describe(element),
+			value
+		});
+	};
+	const listen = (type, handler) => {
+		listeners.push([type, handler]);
+		(type === "pagehide" ? root : doc).addEventListener(type, handler, true);
+	};
+	listen("input", (event) => {
+		if (event.isTrusted && !sensitive(event.target) && !["checkbox", "radio"].includes(event.target.type) && "value" in event.target) dirty.add(event.target);
+	});
+	listen("dragstart", (event) => {
+		if (event.isTrusted) emit({
+			action: "unsupported",
+			value: "Drag actions are not supported by the recorder."
+		});
+	});
+	listen("change", (event) => {
+		if (!event.isTrusted || sensitive(event.target)) return;
+		if (["checkbox", "radio"].includes(event.target.type)) emit({
+			action: "check",
+			target: describe(event.target),
+			checked: !!event.target.checked
+		});
+		else {
+			dirty.add(event.target);
+			flush(event.target);
+		}
+	});
+	listen("focusout", (event) => flush(event.target));
+	listen("click", (event) => {
+		if (!event.isTrusted) return;
+		for (const element of dirty) flush(element);
+		const element = event.target.closest("a[href],button,summary,[role=\"button\"],input[type=\"submit\"],input[type=\"button\"]");
+		if (element && event.detail === 0 && Date.now() - enterAt < 500 && (element === enterTarget || element.form && element.form === enterTarget?.form)) return;
+		if (element && !sensitive(element)) emit({
+			action: "click",
+			target: describe(element)
+		});
+		else if (event.target.closest("canvas,[contenteditable=\"true\"],input[type=\"file\"]")) emit({
+			action: "unsupported",
+			value: "Canvas, rich text and file actions require an assistant to complete the workflow."
+		});
+	});
+	listen("pagehide", () => {
+		for (const element of dirty) flush(element);
+		emit({ action: "checkpoint" });
+		ended = true;
+		for (const [type, handler] of listeners) (type === "pagehide" ? root : doc).removeEventListener(type, handler, true);
+	});
+	listen("keydown", (event) => {
+		if (!event.isTrusted || event.isComposing || sensitive(event.target) || !["Enter", "Escape"].includes(event.key)) return;
+		flush(event.target);
+		if (event.key === "Enter") {
+			enterTarget = event.target;
+			enterAt = Date.now();
+		}
+		emit({
+			action: "press",
+			target: describe(event.target),
+			key: event.key
+		});
+	});
+	root.__xopcRecorder = {
+		recordingId: input.recordingId,
+		generation: input.generation,
+		stop: async () => {
+			for (const [type, handler] of listeners) (type === "pagehide" ? root : doc).removeEventListener(type, handler, true);
+			for (const element of dirty) flush(element);
+			if (!ended) {
+				emit({ action: "checkpoint" });
+				ended = true;
+			}
+			await Promise.all([...pending]);
+			if (failed) throw new Error("Recording events could not be saved.");
+		}
+	};
+	emit({ action: "navigate" });
+	return {
+		recording: true,
+		documentId
+	};
+}
+//#endregion
+export { browserDom };

package/dist/packages/browser-control-contract/src/index.js

@@ -1,3 +1,4 @@
+import "./automation.js";
 //#region packages/browser-control-contract/src/index.ts
 const BROWSER_CONTROL_ENDPOINT_TOOL_NAME = "browser.control";
 const BROWSER_CONTROL_ENDPOINT_INPUT_SCHEMA = {
@@ -28,16 +29,46 @@ const BROWSER_CONTROL_ENDPOINT_OUTPUT_SCHEMA = {
 		}
 	}
 };
-function browserWireAuthenticationPayload(input) {
-	return [
-		"xopc-browser-extension-v4",
-		input.connectionId,
-		input.challenge,
-		String(input.issuedAt),
-		input.principalId,
-		input.extensionId,
-		input.extensionVersion
-	].join("\n");
-}
+const BROWSER_CONTROL_ENDPOINT_DESCRIPTOR = {
+	name: BROWSER_CONTROL_ENDPOINT_TOOL_NAME,
+	title: "Browser control transport",
+	description: "Internal authenticated transport for xopc browser-control actions.",
+	inputSchema: BROWSER_CONTROL_ENDPOINT_INPUT_SCHEMA,
+	outputSchema: BROWSER_CONTROL_ENDPOINT_OUTPUT_SCHEMA,
+	policyId: "browser.control",
+	sensitivity: "personal",
+	effect: "write",
+	confirmation: "never",
+	requiresForeground: false,
+	requiredPermissions: ["browser-control"],
+	timeoutMs: 12e4,
+	maxConcurrency: 4,
+	supportsCancellation: true,
+	idempotent: false,
+	resultKinds: ["json"]
+};
+const BROWSER_RECORDING_ENDPOINT_INPUT_SCHEMA = {
+	type: "object",
+	additionalProperties: false,
+	required: ["operation"],
+	properties: { operation: {
+		type: "string",
+		enum: [
+			"start",
+			"pause",
+			"resume",
+			"finish",
+			"status"
+		]
+	} }
+};
+const BROWSER_RECORDING_ENDPOINT_DESCRIPTOR = {
+	...BROWSER_CONTROL_ENDPOINT_DESCRIPTOR,
+	name: "browser.recording",
+	title: "Browser workflow recording",
+	description: "Record a workflow in the active browser tab and save it as an automation.",
+	inputSchema: BROWSER_RECORDING_ENDPOINT_INPUT_SCHEMA,
+	maxConcurrency: 1
+};
 //#endregion
-export { BROWSER_CONTROL_ENDPOINT_INPUT_SCHEMA, BROWSER_CONTROL_ENDPOINT_OUTPUT_SCHEMA, BROWSER_CONTROL_ENDPOINT_TOOL_NAME, browserWireAuthenticationPayload };
+export { BROWSER_CONTROL_ENDPOINT_DESCRIPTOR, BROWSER_CONTROL_ENDPOINT_INPUT_SCHEMA, BROWSER_CONTROL_ENDPOINT_OUTPUT_SCHEMA, BROWSER_CONTROL_ENDPOINT_TOOL_NAME, BROWSER_RECORDING_ENDPOINT_DESCRIPTOR, BROWSER_RECORDING_ENDPOINT_INPUT_SCHEMA };

package/dist/packages/gateway-contract/src/gateway-scopes.js

@@ -45,7 +45,9 @@ var init_gateway_scopes = __esmMin((() => {
 		"agents.run",
 		"sessions.read",
 		"sessions.write",
-		"device.self"
+		"device.self",
+		"automations.read",
+		"automations.write"
 	];
 }));
 //#endregion

package/dist/packages/gateway-contract/src/notifications.js

@@ -44,6 +44,7 @@ var init_notifications = __esmMin((() => {
 	ProductNotificationTypeSchema = z.enum([
 		"scene.result",
 		"scene.digest",
+		"chat.needs_input",
 		"chat.completed",
 		"chat.failed",
 		"task.needs_input",

package/dist/packages/realtime-protocol/src/voice-catalog.js

@@ -1,8 +1,12 @@
 import { __esmMin } from "../../../_virtual/_rolldown/runtime.js";
 import { z } from "zod";
 //#region packages/realtime-protocol/src/voice-catalog.ts
-var voiceModeCapabilitySchema, voiceManifestSchema, voiceSelectionSchema;
+var voiceDisplayNamesSchema, voiceModeCapabilitySchema, voiceManifestSchema, voiceSelectionSchema;
 var init_voice_catalog = __esmMin((() => {
+	voiceDisplayNamesSchema = z.strictObject({
+		"zh-CN": z.string().min(1).optional(),
+		en: z.string().min(1).optional()
+	});
 	voiceModeCapabilitySchema = z.enum([
 		"transcription",
 		"transcription.stream",
@@ -32,6 +36,7 @@ var init_voice_catalog = __esmMin((() => {
 		voices: z.array(z.strictObject({
 			id: z.string().min(1),
 			name: z.string(),
+			displayNames: voiceDisplayNamesSchema.optional(),
 			languages: z.array(z.string()),
 			gender: z.enum(["female", "male"]).optional(),
 			style: z.string().optional(),
@@ -55,6 +60,7 @@ var init_voice_catalog = __esmMin((() => {
 		models: z.array(z.strictObject({
 			id: z.string(),
 			name: z.string(),
+			displayNames: voiceDisplayNamesSchema.optional(),
 			voice: voiceManifestSchema
 		}))
 	});

package/dist/packages/realtime-protocol/src/voice.js

@@ -10,7 +10,7 @@ function parseVoiceClientJsonFrame(text) {
 	if (new TextEncoder().encode(text).byteLength > 16 * 1024) throw new Error("Voice control frame exceeds 16384 bytes");
 	return JSON.parse(text);
 }
-var VOICE_REALTIME_WS_PATH, VOICE_REALTIME_PROXY_WS_PATH, VOICE_REALTIME_MAX_BINARY_FRAME_BYTES, VOICE_REALTIME_START_TIMEOUT_MS, VOICE_REALTIME_HEARTBEAT_INTERVAL_MS, idSchema, timestampSchema, voicePurposeSchema, voiceModeSchema, voiceInputModeSchema, voiceLanguageSchema, voicePcmFormatSchema, voiceProviderRouteSchema, voiceRouteSchema, availabilitySchema, createVoiceSessionRequestSchema, clientEnvelope, voiceClientMessageSchema, transcriptPayloadSchema, serverEnvelope;
+var VOICE_REALTIME_WS_PATH, VOICE_REALTIME_PROXY_WS_PATH, VOICE_REALTIME_MAX_BINARY_FRAME_BYTES, VOICE_REALTIME_START_TIMEOUT_MS, VOICE_REALTIME_HEARTBEAT_INTERVAL_MS, idSchema, timestampSchema, voicePurposeSchema, voiceModeSchema, voiceInputModeSchema, voiceLanguageSchema, VOICE_TIMING_METRICS, voicePcmFormatSchema, voiceProviderRouteSchema, voiceRouteSchema, availabilitySchema, createVoiceSessionRequestSchema, clientEnvelope, voiceClientMessageSchema, transcriptPayloadSchema, serverEnvelope;
 var init_voice = __esmMin((() => {
 	init_voice_catalog();
 	init_voice_audio();
@@ -25,6 +25,12 @@ var init_voice = __esmMin((() => {
 	voiceModeSchema = z.enum(["natural", "assistant"]);
 	voiceInputModeSchema = z.literal("server_vad");
 	voiceLanguageSchema = z.enum(["zh", "en"]);
+	VOICE_TIMING_METRICS = [
+		"speech_end_to_audio_received",
+		"speech_end_to_audio_scheduled",
+		"speech_end_to_audio_buffered",
+		"local_stop"
+	];
 	voicePcmFormatSchema = z.strictObject({
 		encoding: z.literal("pcm_s16le"),
 		sampleRate: z.union([z.literal(16e3), z.literal(24e3)]),
@@ -126,7 +132,7 @@ var init_voice = __esmMin((() => {
 		})),
 		clientEnvelope("session.metric", z.strictObject({
 			responseId: z.string().min(1).max(160),
-			metric: z.enum(["speech_end_to_audio_received", "local_stop"]),
+			metric: z.enum(VOICE_TIMING_METRICS),
 			durationMs: z.number().finite().min(0).max(6e5)
 		})),
 		clientEnvelope("input.mute", z.strictObject({ muted: z.boolean() })),
@@ -268,4 +274,4 @@ var init_voice = __esmMin((() => {
 }));
 //#endregion
 init_voice();
-export { VOICE_REALTIME_HEARTBEAT_INTERVAL_MS, VOICE_REALTIME_MAX_BINARY_FRAME_BYTES, VOICE_REALTIME_PROXY_WS_PATH, VOICE_REALTIME_START_TIMEOUT_MS, VOICE_REALTIME_WS_PATH, createVoiceSessionRequestSchema, init_voice, parseVoiceClientJsonFrame, parseVoiceClientMessage };
+export { VOICE_REALTIME_HEARTBEAT_INTERVAL_MS, VOICE_REALTIME_MAX_BINARY_FRAME_BYTES, VOICE_REALTIME_PROXY_WS_PATH, VOICE_REALTIME_START_TIMEOUT_MS, VOICE_REALTIME_WS_PATH, VOICE_TIMING_METRICS, createVoiceSessionRequestSchema, init_voice, parseVoiceClientJsonFrame, parseVoiceClientMessage };

package/dist/src/agent/coding/repository-instructions.js

@@ -103,7 +103,14 @@ var RepositoryInstructions = class RepositoryInstructions {
 			try {
 				const canonical = await realpath(file);
 				if (!inside(this.root, canonical)) throw new Error(`Instruction file escapes repository: ${file}`);
-				if ((await stat(canonical)).size > 32768) throw new Error(`Instruction file is too large; read it explicitly: ${file}`);
+				const metadata = await stat(canonical);
+				if (metadata.size > 32768) {
+					const revision = `oversized:${canonical}:${metadata.size}:${metadata.mtimeMs}:${metadata.ctimeMs}`;
+					if (this.seen.get(file) === revision) continue;
+					this.pending.set(file, revision);
+					sections.push(`Instructions for ${dir} and its descendants (${file}):\nThis instruction file exceeds the 32 KiB automatic inclusion limit (${metadata.size} bytes). Read ${file} explicitly with read_file, in successive chunks if needed, until the entire file has been read. Apply its instructions before working in this scope.`);
+					continue;
+				}
 				const content = await readFile(canonical, "utf8");
 				if (this.seen.get(file) === content) continue;
 				this.pending.set(file, content);

package/dist/src/agent/tool-manuals/browser.d.ts

@@ -1 +1 @@
-export declare const browserUseManual = "# Browser Tool Manual\n\n## browser_use\n\nUse one typed action per call. Start with `observe` or `navigate`. Every observation returns a `sessionId`, `revision`, and semantic element refs. Element actions must use refs from the newest revision; never invent refs.\n\nAvailable actions:\n\n- `observe`: return URL, title, interactive semantic nodes, and changes. Set `visual` to `always` only when visual evidence is needed.\n- `navigate`: open an HTTP(S) URL and optionally verify an expectation.\n- `click`, `fill`, `select`: act on a semantic ref with its observation revision.\n- `press`, `scroll`: act on an optional ref or the active page.\n- `wait`: wait for page idle, text, or a ref visibility state.\n- `upload`: attach workspace files to a file input. Local approval may be required.\n- `tabs`: list, create, activate, or close task-owned tabs.\n- `sequence`: run a short list of same-document ref actions.\n- `close`: close the task-owned browser session.\n\nThe tool does not accept CSS, XPath, JavaScript, cookie, storage, or network-inspection commands. Re-observe after navigation or a stale-observation response. Cross-domain, upload, destructive, and external-effect actions follow the configured local-owner approval policy. Sensitive fields expose only their semantic identity; their values are redacted and filling them requires approval.\n\n## browser_automation\n\nReusable browser automations are strict JSON. They use semantic `role` plus `name` or `nameIncludes` targets and an exact `allowedDomains` list. Input templates use `${input.name}`. Save only a flow that has been run and verified; never store passwords, one-time codes, recovery codes, or payment details.\n";
+export declare const browserUseManual = "# Browser Tool Manual\n\n## browser_use\n\nUse one typed action per call. Start with `observe` or `navigate`. Every observation returns a `sessionId`, `revision`, and semantic element refs. Element actions must use refs from the newest revision; never invent refs.\n\nAvailable actions:\n\n- `observe`: return URL, title, interactive semantic nodes, and changes. Set `visual` to `always` only when visual evidence is needed.\n- `navigate`: open an HTTP(S) URL and optionally verify an expectation.\n- `click`, `fill`, `select`: act on a semantic ref with its observation revision.\n- `press`, `scroll`: act on an optional ref or the active page.\n- `wait`: wait for page idle, text, or a ref visibility state.\n- `upload`: attach workspace files to a file input.\n- `tabs`: list, create, activate, or close task-owned tabs.\n- `sequence`: run a short list of same-document ref actions.\n- `close`: close the task-owned browser session.\n\nThe tool does not accept CSS, XPath, JavaScript, cookie, storage, or network-inspection commands. Re-observe after navigation or a stale-observation response. Browser actions execute directly under the configured allow/deny policy. Sensitive fields expose only their semantic identity and values are redacted.\n\n## browser_automation\n\nReusable browser automations are strict JSON. They use semantic `role` plus `name` or `nameIncludes` targets and an exact `allowedDomains` list. Input templates use `${input.name}`. Save a draft, validate it, then run/test that exact saved revision when the user requests execution or testing. Never repeat a write merely to verify a recording. Only successful runs with explicit successCriteria mark a revision verified; never store passwords, one-time codes, recovery codes, or payment details.\n";

package/dist/src/agent/tool-manuals/browser.js

@@ -12,16 +12,16 @@ Available actions:
 - \`click\`, \`fill\`, \`select\`: act on a semantic ref with its observation revision.
 - \`press\`, \`scroll\`: act on an optional ref or the active page.
 - \`wait\`: wait for page idle, text, or a ref visibility state.
-- \`upload\`: attach workspace files to a file input. Local approval may be required.
+- \`upload\`: attach workspace files to a file input.
 - \`tabs\`: list, create, activate, or close task-owned tabs.
 - \`sequence\`: run a short list of same-document ref actions.
 - \`close\`: close the task-owned browser session.
 
-The tool does not accept CSS, XPath, JavaScript, cookie, storage, or network-inspection commands. Re-observe after navigation or a stale-observation response. Cross-domain, upload, destructive, and external-effect actions follow the configured local-owner approval policy. Sensitive fields expose only their semantic identity; their values are redacted and filling them requires approval.
+The tool does not accept CSS, XPath, JavaScript, cookie, storage, or network-inspection commands. Re-observe after navigation or a stale-observation response. Browser actions execute directly under the configured allow/deny policy. Sensitive fields expose only their semantic identity and values are redacted.
 
 ## browser_automation
 
-Reusable browser automations are strict JSON. They use semantic \`role\` plus \`name\` or \`nameIncludes\` targets and an exact \`allowedDomains\` list. Input templates use \`\${input.name}\`. Save only a flow that has been run and verified; never store passwords, one-time codes, recovery codes, or payment details.
+Reusable browser automations are strict JSON. They use semantic \`role\` plus \`name\` or \`nameIncludes\` targets and an exact \`allowedDomains\` list. Input templates use \`\${input.name}\`. Save a draft, validate it, then run/test that exact saved revision when the user requests execution or testing. Never repeat a write merely to verify a recording. Only successful runs with explicit successCriteria mark a revision verified; never store passwords, one-time codes, recovery codes, or payment details.
 `;
 //#endregion
 export { browserUseManual };

package/dist/src/agent/tools/browser/tool/browser-use-tool.js

@@ -56,7 +56,7 @@ function presentResult(result) {
 		content: contentWithVisual([`[${result.error.code}] ${result.error.message}`, observation ? formatBrowserObservation(observation) : ""].filter(Boolean).join("\n\n"), observation),
 		details: {
 			ok: false,
-			kind: result.error.code === "APPROVAL_REQUIRED" ? "browser_approval_required" : "browser_error",
+			kind: "browser_error",
 			error: stripVisual(result.error)
 		}
 	};