@xopcai/xopc 0.0.368 → 0.0.370

package/dist/src/agent/tools/browser-automation-tool.d.ts

@@ -1,7 +1,7 @@
 import type { AgentTool } from '@earendil-works/pi-agent-core';
 import type { BrowserAutomationService } from '../../browser/automations/index.js';
 declare const BrowserAutomationToolSchema: import("@sinclair/typebox").TObject<{
-    action: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"list">, import("@sinclair/typebox").TLiteral<"get">, import("@sinclair/typebox").TLiteral<"save">, import("@sinclair/typebox").TLiteral<"enable">, import("@sinclair/typebox").TLiteral<"disable">, import("@sinclair/typebox").TLiteral<"delete">, import("@sinclair/typebox").TLiteral<"run">]>;
+    action: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"list">, import("@sinclair/typebox").TLiteral<"get">, import("@sinclair/typebox").TLiteral<"save">, import("@sinclair/typebox").TLiteral<"enable">, import("@sinclair/typebox").TLiteral<"disable">, import("@sinclair/typebox").TLiteral<"delete">, import("@sinclair/typebox").TLiteral<"run">, import("@sinclair/typebox").TLiteral<"test">, import("@sinclair/typebox").TLiteral<"validate">]>;
     automationId: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
     definition: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TObject<{
         id: import("@sinclair/typebox").TString;
@@ -32,6 +32,11 @@ declare const BrowserAutomationToolSchema: import("@sinclair/typebox").TObject<{
                 role: import("@sinclair/typebox").TString;
                 name: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
                 nameIncludes: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+                testId: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+                scope: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TObject<{
+                    role: import("@sinclair/typebox").TString;
+                    name: import("@sinclair/typebox").TString;
+                }>>;
             }>;
             expect: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TObject<{
                 urlIncludes: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
@@ -46,6 +51,11 @@ declare const BrowserAutomationToolSchema: import("@sinclair/typebox").TObject<{
                 role: import("@sinclair/typebox").TString;
                 name: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
                 nameIncludes: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+                testId: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+                scope: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TObject<{
+                    role: import("@sinclair/typebox").TString;
+                    name: import("@sinclair/typebox").TString;
+                }>>;
             }>;
             value: import("@sinclair/typebox").TString;
             submit: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TBoolean>;
@@ -56,12 +66,30 @@ declare const BrowserAutomationToolSchema: import("@sinclair/typebox").TObject<{
                 ref: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
                 state: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"visible">, import("@sinclair/typebox").TLiteral<"hidden">]>>;
             }>>;
+        }>, import("@sinclair/typebox").TObject<{
+            action: import("@sinclair/typebox").TLiteral<"check">;
+            target: import("@sinclair/typebox").TObject<{
+                role: import("@sinclair/typebox").TString;
+                name: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+                nameIncludes: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+                testId: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+                scope: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TObject<{
+                    role: import("@sinclair/typebox").TString;
+                    name: import("@sinclair/typebox").TString;
+                }>>;
+            }>;
+            checked: import("@sinclair/typebox").TBoolean;
         }>, import("@sinclair/typebox").TObject<{
             action: import("@sinclair/typebox").TLiteral<"select">;
             target: import("@sinclair/typebox").TObject<{
                 role: import("@sinclair/typebox").TString;
                 name: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
                 nameIncludes: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+                testId: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+                scope: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TObject<{
+                    role: import("@sinclair/typebox").TString;
+                    name: import("@sinclair/typebox").TString;
+                }>>;
             }>;
             value: import("@sinclair/typebox").TString;
             expect: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TObject<{
@@ -77,6 +105,11 @@ declare const BrowserAutomationToolSchema: import("@sinclair/typebox").TObject<{
                 role: import("@sinclair/typebox").TString;
                 name: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
                 nameIncludes: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+                testId: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+                scope: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TObject<{
+                    role: import("@sinclair/typebox").TString;
+                    name: import("@sinclair/typebox").TString;
+                }>>;
             }>>;
             key: import("@sinclair/typebox").TString;
             expect: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TObject<{
@@ -92,6 +125,11 @@ declare const BrowserAutomationToolSchema: import("@sinclair/typebox").TObject<{
                 role: import("@sinclair/typebox").TString;
                 name: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
                 nameIncludes: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+                testId: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+                scope: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TObject<{
+                    role: import("@sinclair/typebox").TString;
+                    name: import("@sinclair/typebox").TString;
+                }>>;
             }>>;
             deltaY: import("@sinclair/typebox").TNumber;
             expect: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TObject<{
@@ -109,11 +147,46 @@ declare const BrowserAutomationToolSchema: import("@sinclair/typebox").TObject<{
                 role: import("@sinclair/typebox").TString;
                 name: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
                 nameIncludes: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+                testId: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+                scope: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TObject<{
+                    role: import("@sinclair/typebox").TString;
+                    name: import("@sinclair/typebox").TString;
+                }>>;
             }>>;
             timeoutMs: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TInteger>;
         }>]>>;
+        successCriteria: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TObject<{
+            target: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TObject<{
+                role: import("@sinclair/typebox").TString;
+                name: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+                nameIncludes: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+                testId: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+                scope: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TObject<{
+                    role: import("@sinclair/typebox").TString;
+                    name: import("@sinclair/typebox").TString;
+                }>>;
+            }>>;
+            field: import("@sinclair/typebox").TUnion<import("@sinclair/typebox").TLiteral<string>[]>;
+            equals: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TString, import("@sinclair/typebox").TBoolean]>>;
+            includes: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+        }>>>;
+        outputs: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TRecord<import("@sinclair/typebox").TString, import("@sinclair/typebox").TObject<{
+            target: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TObject<{
+                role: import("@sinclair/typebox").TString;
+                name: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+                nameIncludes: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+                testId: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+                scope: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TObject<{
+                    role: import("@sinclair/typebox").TString;
+                    name: import("@sinclair/typebox").TString;
+                }>>;
+            }>>;
+            field: import("@sinclair/typebox").TUnion<import("@sinclair/typebox").TLiteral<string>[]>;
+        }>>>;
     }>>;
     inputs: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TRecord<import("@sinclair/typebox").TString, import("@sinclair/typebox").TUnknown>>;
+    revision: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TInteger>;
+    expectedRevision: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TInteger>;
 }>;
 export declare function createBrowserAutomationTool(deps: {
     getBrowserAutomationService: () => BrowserAutomationService | undefined;

package/dist/src/agent/tools/browser-automation-tool.js

@@ -10,7 +10,12 @@ const ExpectationSchema = Type.Object({
 const TargetSchema = Type.Object({
 	role: Type.String(),
 	name: Type.Optional(Type.String()),
-	nameIncludes: Type.Optional(Type.String())
+	nameIncludes: Type.Optional(Type.String()),
+	testId: Type.Optional(Type.String()),
+	scope: Type.Optional(Type.Object({
+		role: Type.String(),
+		name: Type.String()
+	}, { additionalProperties: false }))
 }, { additionalProperties: false });
 const StepSchema = Type.Union([
 	Type.Object({
@@ -30,6 +35,11 @@ const StepSchema = Type.Union([
 		submit: Type.Optional(Type.Boolean()),
 		expect: Type.Optional(ExpectationSchema)
 	}, { additionalProperties: false }),
+	Type.Object({
+		action: Type.Literal("check"),
+		target: TargetSchema,
+		checked: Type.Boolean()
+	}, { additionalProperties: false }),
 	Type.Object({
 		action: Type.Literal("select"),
 		target: TargetSchema,
@@ -69,7 +79,9 @@ const BrowserAutomationToolSchema = Type.Object({
 		Type.Literal("enable"),
 		Type.Literal("disable"),
 		Type.Literal("delete"),
-		Type.Literal("run")
+		Type.Literal("run"),
+		Type.Literal("test"),
+		Type.Literal("validate")
 	]),
 	automationId: Type.Optional(Type.String()),
 	definition: Type.Optional(Type.Object({
@@ -103,9 +115,33 @@ const BrowserAutomationToolSchema = Type.Object({
 				Type.Boolean()
 			])))
 		}, { additionalProperties: false })),
-		steps: Type.Array(StepSchema)
+		steps: Type.Array(StepSchema),
+		successCriteria: Type.Optional(Type.Array(Type.Object({
+			target: Type.Optional(TargetSchema),
+			field: Type.Union([
+				"text",
+				"value",
+				"url",
+				"title",
+				"checked"
+			].map((field) => Type.Literal(field))),
+			equals: Type.Optional(Type.Union([Type.String(), Type.Boolean()])),
+			includes: Type.Optional(Type.String())
+		}, { additionalProperties: false }))),
+		outputs: Type.Optional(Type.Record(Type.String(), Type.Object({
+			target: Type.Optional(TargetSchema),
+			field: Type.Union([
+				"text",
+				"value",
+				"url",
+				"title",
+				"href"
+			].map((field) => Type.Literal(field)))
+		}, { additionalProperties: false })))
 	}, { additionalProperties: false })),
-	inputs: Type.Optional(Type.Record(Type.String(), Type.Unknown()))
+	inputs: Type.Optional(Type.Record(Type.String(), Type.Unknown())),
+	revision: Type.Optional(Type.Integer({ minimum: 1 })),
+	expectedRevision: Type.Optional(Type.Integer({ minimum: 1 }))
 }, { additionalProperties: false });
 function createBrowserAutomationTool(deps) {
 	return {
@@ -123,10 +159,17 @@ function createBrowserAutomationTool(deps) {
 					automations
 				});
 			}
+			if (params.action === "validate") {
+				const parsed = service.validate(params.definition);
+				return output(parsed.success ? "Definition is valid; it has not been executed." : JSON.stringify(parsed.error.issues), { ok: parsed.success });
+			}
 			if (params.action === "save") {
 				if (!params.definition) return output("definition is required.", { ok: false });
 				try {
-					const automation = service.save({ definition: params.definition });
+					const automation = service.save({
+						definition: params.definition,
+						expectedRevision: params.expectedRevision
+					});
 					return output(`Saved browser automation: ${automation.definition.name}`, {
 						ok: true,
 						automation
@@ -167,7 +210,10 @@ function createBrowserAutomationTool(deps) {
 				});
 			}
 			try {
-				const run = await service.runAndWait(id, params.inputs ?? {}, signal);
+				const run = await service.runAndWait(id, params.inputs ?? {}, signal, {
+					revision: params.revision,
+					clientRequestId: _toolCallId
+				});
 				return output(run.status === "succeeded" ? `Browser automation ${id} completed.` : `Browser automation ${id} ${run.status}: ${run.error ?? "No details"}`, {
 					ok: run.status === "succeeded",
 					run

package/dist/src/agent/tools/cli-clarify.js

@@ -1,5 +1,5 @@
-import { stdin, stdout } from "node:process";
 import * as readline from "node:readline/promises";
+import { stdin, stdout } from "node:process";
 //#region src/agent/tools/cli-clarify.ts
 /**
 * stdin/stdout prompts for `clarify` when running the CLI agent (no gateway).

package/dist/src/agent/tools/codemode-permissions.d.ts

@@ -0,0 +1,4 @@
+import type { AgentTool } from '@earendil-works/pi-agent-core';
+/** Only mark tools assembled by the core factory, before external extensions are merged. */
+export declare function markCodemodeCoreRead(tool: AgentTool): AgentTool;
+export declare function isCodemodeCoreRead(tool: AgentTool): boolean;

package/dist/src/agent/tools/codemode-permissions.js

@@ -0,0 +1,23 @@
+//#region src/agent/tools/codemode-permissions.ts
+const trustedRead = Symbol("xopc.codemode.trustedRead");
+const READ_TOOLS = new Set([
+	"read_file",
+	"list_dir",
+	"grep",
+	"find",
+	"knowledge_search",
+	"knowledge_get",
+	"web_search",
+	"web_fetch",
+	"data_batch"
+]);
+/** Only mark tools assembled by the core factory, before external extensions are merged. */
+function markCodemodeCoreRead(tool) {
+	if (READ_TOOLS.has(tool.name)) Object.assign(tool, { [trustedRead]: true });
+	return tool;
+}
+function isCodemodeCoreRead(tool) {
+	return READ_TOOLS.has(tool.name) && Reflect.get(tool, trustedRead) === true;
+}
+//#endregion
+export { isCodemodeCoreRead, markCodemodeCoreRead };

package/dist/src/agent/tools/dataBatch.js

@@ -9,7 +9,9 @@ init_logger();
 const executionTools = new AsyncLocalStorage();
 const log = createLogger("DataAcquisition");
 function withDataToolPermissions(names, run) {
-	return executionTools.run(names, run);
+	const parent = executionTools.getStore();
+	const allowed = parent ? new Set([...names].filter((name) => parent.has(name))) : names;
+	return executionTools.run(allowed, run);
 }
 function createDataBatchTool(workspace, getAllowedTools, options = {}) {
 	return {

package/dist/src/agent/tools/delegation-parent-policy.js

@@ -1,6 +1,4 @@
 import { resolveEffectiveAgentConfigForAgent, resolveEffectiveAgentConfigForSession } from "../../config/agent-profile.js";
-import { parseExternalToolRef } from "../external-tools/refs.js";
-import { mcpToolPolicyId } from "../mcp/bundle-mcp-policy.js";
 import { createAgentTurnPolicy } from "../orchestration/agent-turn-policy.js";
 //#region src/agent/tools/delegation-parent-policy.ts
 /** Noninteractive callers cannot silently turn an ask policy into an allow. */
@@ -12,9 +10,8 @@ function createDelegationParentPolicy(options) {
 		const command = args?.command;
 		if ((name === "user_context_read" || name === "knowledge_read") && (command === "search" || command === "get")) names.push(`${name.slice(0, -5)}_${command}`);
 		if (name === "xopc_tool_execute") {
-			const parsed = parseExternalToolRef(String(args?.toolRef ?? ""), "mcp");
 			const ref = String(args?.toolRef ?? "");
-			names.push(parsed ? mcpToolPolicyId(parsed.namespace, parsed.toolName) : ref);
+			names.push(ref);
 		}
 		return names.flatMap((id) => resolved.config.tools[id] ? [{
 			id,

package/dist/src/agent/tools/factory.js

@@ -12,15 +12,16 @@ import { init_agent_scope, resolveDefaultAgentId } from "../agent-scope.js";
 import { resolveEffectiveAgentConfigForAgent, resolveEffectiveAgentConfigForSession } from "../../config/agent-profile.js";
 import { resolveUserContextSessionAccess } from "../../user-context/access-policy.js";
 import { createPersonalAttentionTool } from "./personal-attention-tool.js";
+import { markCodemodeCoreRead } from "./codemode-permissions.js";
 import "../../../packages/browser-control-contract/src/index.js";
 import { PERSONAL_TOOL_DESCRIPTIONS } from "../../personal-agent/policy.js";
 import { getEmbeddedExecutionRunId, getEmbeddedExecutionSession } from "../embedded/execution-context.js";
 import { wrapToolsWithProtection } from "./executor.js";
 import { EXTERNAL_TOOL_NAMES } from "../external-tools/gateway-tools.js";
-import { buildRuntimeEnvironment } from "../../runtime-tools/environment.js";
 import { createDefaultExternalToolGatewayTools } from "../external-tools/index.js";
 import { createReadFileTool } from "./read.js";
 import { createDataBatchTool } from "./dataBatch.js";
+import { buildRuntimeEnvironment } from "../../runtime-tools/environment.js";
 import { skillEnvironmentId } from "../skills/installer.js";
 import { createWriteFileTool } from "./write.js";
 import { createListDirTool } from "./list-dir.js";
@@ -259,7 +260,7 @@ var AgentToolsFactory = class AgentToolsFactory {
 			if (currentConversationId() && getSessionMetadata(currentConversationId())?.sessionType === "heartbeat") throw new Error("Heartbeat notifications must be returned in the final response for policy-controlled delivery.");
 			return this.deps.getCurrentContext();
 		};
-		const currentAccess = () => resolveUserContextSessionAccess(this.deps.getConfig?.(), currentConversationId());
+		const currentAccess = () => resolveUserContextSessionAccess(this.deps.getConfig?.(), getEmbeddedExecutionSession() ?? currentConversationId());
 		const knowledgeWritePolicy = () => this.deps.getConfig?.()?.userContext.knowledgeMemory.writePolicy ?? "deny";
 		const currentProjectId = () => {
 			const key = currentConversationId();
@@ -615,7 +616,7 @@ var AgentToolsFactory = class AgentToolsFactory {
 				allowHostGit: () => getCommandIsolation()?.mode !== "docker"
 			}));
 		}
-		return filterToolsByDisabledSet(core, disabled).filter((tool) => (!allowed || allowed.has(tool.name)) && !(personalToolsConfigured && tool.name === "clarify")).map((tool) => personalToolsConfigured && PERSONAL_TOOL_DESCRIPTIONS[tool.name] ? {
+		return filterToolsByDisabledSet(core.map(markCodemodeCoreRead), disabled).filter((tool) => (!allowed || allowed.has(tool.name)) && !(personalToolsConfigured && tool.name === "clarify")).map((tool) => personalToolsConfigured && PERSONAL_TOOL_DESCRIPTIONS[tool.name] ? {
 			...tool,
 			description: PERSONAL_TOOL_DESCRIPTIONS[tool.name]
 		} : tool);

package/dist/src/agent/transcript/provider-capabilities.js

@@ -29,7 +29,6 @@ const PROVIDER_CAPABILITIES = {
 		]
 	},
 	openai: { providerFamily: "openai" },
-	"openai-codex": { providerFamily: "openai" },
 	openrouter: {
 		openAiCompatTurnValidation: false,
 		geminiThoughtSignatureSanitization: true,

package/dist/src/agent/transcript/transcript-policy.js

@@ -5,8 +5,7 @@ import { isAnthropicProviderFamily, isOpenAiProviderFamily, preservesAnthropicTh
 const OPENAI_MODEL_APIS = new Set([
 	"openai",
 	"openai-completions",
-	"openai-responses",
-	"openai-codex-responses"
+	"openai-responses"
 ]);
 function isOpenAiApi(modelApi) {
 	if (!modelApi) return false;

package/dist/src/agent-config/schema.d.ts

@@ -136,6 +136,13 @@ export declare const WorkflowPolicySchema: z.ZodObject<{
     allowed: z.ZodOptional<z.ZodArray<z.ZodString>>;
 }, z.core.$strict>;
 export declare const RuntimePolicySchema: z.ZodObject<{
+    codemode: z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        timeoutMs: z.ZodDefault<z.ZodNumber>;
+        maxConcurrentCalls: z.ZodDefault<z.ZodNumber>;
+        maxCalls: z.ZodDefault<z.ZodNumber>;
+        maxOutputTokens: z.ZodDefault<z.ZodNumber>;
+    }, z.core.$strict>>;
     thinkingLevel: z.ZodOptional<z.ZodEnum<{
         low: "low";
         high: "high";
@@ -224,6 +231,13 @@ export declare const AgentDefaultsSchema: z.ZodObject<{
         allowed: z.ZodOptional<z.ZodArray<z.ZodString>>;
     }, z.core.$strict>>;
     runtime: z.ZodDefault<z.ZodObject<{
+        codemode: z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodBoolean>;
+            timeoutMs: z.ZodDefault<z.ZodNumber>;
+            maxConcurrentCalls: z.ZodDefault<z.ZodNumber>;
+            maxCalls: z.ZodDefault<z.ZodNumber>;
+            maxOutputTokens: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strict>>;
         thinkingLevel: z.ZodOptional<z.ZodEnum<{
             low: "low";
             high: "high";
@@ -435,6 +449,13 @@ export declare const AgentEntrySchema: z.ZodObject<{
         allowed: z.ZodOptional<z.ZodArray<z.ZodString>>;
     }, z.core.$strict>>;
     runtime: z.ZodOptional<z.ZodObject<{
+        codemode: z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodBoolean>;
+            timeoutMs: z.ZodDefault<z.ZodNumber>;
+            maxConcurrentCalls: z.ZodDefault<z.ZodNumber>;
+            maxCalls: z.ZodDefault<z.ZodNumber>;
+            maxOutputTokens: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strict>>;
         thinkingLevel: z.ZodOptional<z.ZodEnum<{
             low: "low";
             high: "high";
@@ -572,6 +593,13 @@ export declare const EffectiveAgentConfigSchema: z.ZodObject<{
         allowed: z.ZodOptional<z.ZodArray<z.ZodString>>;
     }, z.core.$strict>;
     runtime: z.ZodObject<{
+        codemode: z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodBoolean>;
+            timeoutMs: z.ZodDefault<z.ZodNumber>;
+            maxConcurrentCalls: z.ZodDefault<z.ZodNumber>;
+            maxCalls: z.ZodDefault<z.ZodNumber>;
+            maxOutputTokens: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strict>>;
         thinkingLevel: z.ZodOptional<z.ZodEnum<{
             low: "low";
             high: "high";

package/dist/src/agent-config/schema.js

@@ -92,6 +92,13 @@ var init_schema = __esmMin((() => {
 		allowed: z.array(z.string().min(1)).optional()
 	}).strict();
 	RuntimePolicySchema = z.object({
+		codemode: z.object({
+			enabled: z.boolean().default(false),
+			timeoutMs: z.number().int().min(1).max(6e4).default(6e4),
+			maxConcurrentCalls: z.number().int().min(1).max(4).default(4),
+			maxCalls: z.number().int().min(1).max(32).default(32),
+			maxOutputTokens: z.number().int().min(1).max(4e3).default(4e3)
+		}).strict().optional(),
 		thinkingLevel: z.enum([
 			"off",
 			"minimal",

package/dist/src/auth/credentials.js

@@ -4,8 +4,9 @@ import { init_logger } from "../utils/logger.js";
 import { init_write_file_atomic, writeTextAtomic } from "../infra/write-file-atomic.js";
 import { getApiKeyFromEnv, init_env_keys } from "../providers/env-keys.js";
 import { init_paths, resolveAgentAuthProfilesPath, resolveAuthProfilesPath, resolveCredentialsDir, resolveOAuthPath } from "../config/paths.js";
-import { getOAuthProviderDefinition, init_registry } from "./oauth/registry.js";
 import { init_oauth_provider_lock, withOAuthProviderLock } from "./oauth-provider-lock.js";
+import { getOAuthProviderDefinition, init_registry } from "./oauth/registry.js";
+import { assertCurrentModelProvider, init_provider_policy } from "../providers/provider-policy.js";
 import { dirname, join } from "path";
 import { mkdir, readFile, readdir, rm } from "fs/promises";
 //#region src/auth/credentials.ts
@@ -18,24 +19,6 @@ function toOAuthCredentials(token) {
 		expires: expiresAt ?? Number.MAX_SAFE_INTEGER
 	};
 }
-function normalizeLegacyOAuthToken(token) {
-	if (token.provider !== "google-gemini-cli" && token.provider !== "google-antigravity") return token;
-	let access = token.access;
-	let projectId = token.projectId;
-	for (let depth = 0; depth < 5; depth += 1) try {
-		const legacy = JSON.parse(access);
-		if (typeof legacy.token !== "string" || !legacy.token) break;
-		access = legacy.token;
-		if (typeof projectId !== "string" && typeof legacy.projectId === "string") projectId = legacy.projectId;
-	} catch {
-		break;
-	}
-	return access === token.access ? token : {
-		...token,
-		access,
-		projectId
-	};
-}
 function getCredentialResolver(options) {
 	if (options) return new CredentialResolver(options);
 	defaultResolver ??= new CredentialResolver();
@@ -55,6 +38,7 @@ var init_credentials = __esmMin((() => {
 	init_paths();
 	init_registry();
 	init_oauth_provider_lock();
+	init_provider_policy();
 	log = createLogger("Credentials");
 	warnedExpiredOAuthTokens = /* @__PURE__ */ new Set();
 	CredentialResolver = class {
@@ -73,6 +57,7 @@ var init_credentials = __esmMin((() => {
 		*/
 		async resolveApiKey(provider) {
 			const normalizedProvider = provider.toLowerCase();
+			assertCurrentModelProvider(normalizedProvider);
 			const oauthDefinition = getOAuthProviderDefinition(normalizedProvider);
 			if (oauthDefinition?.oauthOnly) {
 				const token = await this.loadOAuthToken(normalizedProvider);
@@ -125,6 +110,7 @@ var init_credentials = __esmMin((() => {
 		*/
 		async resolveApiKeySource(provider) {
 			const normalizedProvider = provider.toLowerCase();
+			assertCurrentModelProvider(normalizedProvider);
 			if (getOAuthProviderDefinition(normalizedProvider)?.oauthOnly) return await this.hasUsableOAuthTokenRecord(normalizedProvider) ? "oauth" : null;
 			if (this.agentId) {
 				if (await this.loadFromAgentCredentials(normalizedProvider)) return "agent";
@@ -169,6 +155,7 @@ var init_credentials = __esmMin((() => {
 		*/
 		async saveApiKey(provider, key, options = {}) {
 			const normalizedProvider = provider.toLowerCase();
+			assertCurrentModelProvider(normalizedProvider);
 			if (getOAuthProviderDefinition(normalizedProvider)?.oauthOnly) throw new Error(`${normalizedProvider} only supports OAuth credentials`);
 			const profileId = options.profileName ? `${normalizedProvider}:${options.profileName}` : `${normalizedProvider}:default`;
 			const profile = {
@@ -268,7 +255,7 @@ var init_credentials = __esmMin((() => {
 			try {
 				const content = await readFile(oauthPath, "utf-8");
 				const token = JSON.parse(content);
-				return token.provider === normalizedProvider ? normalizeLegacyOAuthToken(token) : null;
+				return token.provider === normalizedProvider ? token : null;
 			} catch {
 				return null;
 			}

package/dist/src/auth/model-credential-store.js

@@ -1,5 +1,6 @@
 import { __esmMin } from "../../_virtual/_rolldown/runtime.js";
 import { init_oauth_provider_lock, withOAuthProviderLock } from "./oauth-provider-lock.js";
+import { assertCurrentModelProvider, init_provider_policy, isRetiredModelProvider } from "../providers/provider-policy.js";
 import { CredentialResolver, init_credentials } from "./credentials.js";
 //#region src/auth/model-credential-store.ts
 function normalizeProviderId(providerId) {
@@ -35,6 +36,7 @@ var XopcModelCredentialStore;
 var init_model_credential_store = __esmMin((() => {
 	init_credentials();
 	init_oauth_provider_lock();
+	init_provider_policy();
 	XopcModelCredentialStore = class {
 		runtimeApiKeys = /* @__PURE__ */ new Map();
 		constructor(repository = new CredentialResolver()) {
@@ -43,6 +45,7 @@ var init_model_credential_store = __esmMin((() => {
 		async read(providerId, options) {
 			options?.signal?.throwIfAborted();
 			const normalizedProvider = normalizeProviderId(providerId);
+			if (isRetiredModelProvider(normalizedProvider)) return void 0;
 			const runtimeApiKey = this.runtimeApiKeys.get(normalizedProvider);
 			if (runtimeApiKey) return runtimeApiKey;
 			const token = await this.repository.loadOAuthTokenRecord(normalizedProvider);
@@ -54,10 +57,13 @@ var init_model_credential_store = __esmMin((() => {
 			const oauthTokens = await this.repository.listOAuthTokens();
 			options?.signal?.throwIfAborted();
 			const credentials = /* @__PURE__ */ new Map();
-			for (const token of oauthTokens) credentials.set(normalizeProviderId(token.provider), {
-				providerId: normalizeProviderId(token.provider),
-				type: "oauth"
-			});
+			for (const token of oauthTokens) {
+				if (isRetiredModelProvider(token.provider)) continue;
+				credentials.set(normalizeProviderId(token.provider), {
+					providerId: normalizeProviderId(token.provider),
+					type: "oauth"
+				});
+			}
 			for (const providerId of this.runtimeApiKeys.keys()) credentials.set(providerId, {
 				providerId,
 				type: "api_key"
@@ -66,6 +72,7 @@ var init_model_credential_store = __esmMin((() => {
 		}
 		async modify(providerId, update, options) {
 			const normalizedProvider = normalizeProviderId(providerId);
+			assertCurrentModelProvider(normalizedProvider);
 			return withOAuthProviderLock(normalizedProvider, async () => {
 				options?.signal?.throwIfAborted();
 				const persisted = await this.repository.loadOAuthTokenRecord(normalizedProvider);

package/dist/src/auth/oauth/index.d.ts

@@ -11,6 +11,6 @@ export * from './kimi-coding.js';
 export * from './github-copilot.js';
 export * from './google-gemini-cli.js';
 export * from './google-antigravity.js';
-export * from './openai-codex.js';
+export * from './openai.js';
 export * from './xopc-cloud.js';
 export * from './registry.js';

package/dist/src/auth/oauth/index.js

@@ -7,7 +7,7 @@ import { init_google_gemini_cli } from "./google-gemini-cli.js";
 import { init_kimi_coding, kimiCodingOAuthProvider } from "./kimi-coding.js";
 import { init_minimax_cn, minimaxCnOAuthProvider } from "./minimax-cn.js";
 import { init_minimax, minimaxOAuthProvider } from "./minimax.js";
-import { init_openai_codex, loginOpenAICodex, openaiCodexOAuthProvider, refreshOpenAICodexToken } from "./openai-codex.js";
+import { init_openai, openaiOAuthProvider } from "./openai.js";
 import { init_xopc_cloud, xopcCloudOAuthProvider, xopcShareOAuthProvider, xopcTunnelOAuthProvider } from "./xopc-cloud.js";
 import { OAUTH_PROVIDER_DEFINITIONS, getModelOAuthProviderIds, getOAuthProviderDefinition, getOAuthProviderIds, getOAuthProviderInterfaces, init_registry, isOAuthOnlyProvider } from "./registry.js";
 //#region src/auth/oauth/index.ts
@@ -18,8 +18,8 @@ init_kimi_coding();
 init_github_copilot();
 init_google_gemini_cli();
 init_google_antigravity();
-init_openai_codex();
+init_openai();
 init_xopc_cloud();
 init_registry();
 //#endregion
-export { OAUTH_PROVIDER_DEFINITIONS, anthropicOAuthProvider, getModelOAuthProviderIds, getOAuthProviderDefinition, getOAuthProviderIds, getOAuthProviderInterfaces, githubCopilotOAuthProvider, antigravityOAuthProvider as googleAntigravityOAuthProvider, geminiCliOAuthProvider as googleGeminiCliOAuthProvider, isOAuthOnlyProvider, kimiCodingOAuthProvider, loginAnthropic, loginAntigravity, loginGeminiCli, loginOpenAICodex, minimaxCnOAuthProvider, minimaxOAuthProvider, openaiCodexOAuthProvider, refreshAnthropicToken, refreshAntigravityToken, refreshGoogleCloudToken, refreshOpenAICodexToken, xopcCloudOAuthProvider, xopcShareOAuthProvider, xopcTunnelOAuthProvider };
+export { OAUTH_PROVIDER_DEFINITIONS, anthropicOAuthProvider, getModelOAuthProviderIds, getOAuthProviderDefinition, getOAuthProviderIds, getOAuthProviderInterfaces, githubCopilotOAuthProvider, antigravityOAuthProvider as googleAntigravityOAuthProvider, geminiCliOAuthProvider as googleGeminiCliOAuthProvider, isOAuthOnlyProvider, kimiCodingOAuthProvider, loginAnthropic, loginAntigravity, loginGeminiCli, minimaxCnOAuthProvider, minimaxOAuthProvider, openaiOAuthProvider, refreshAnthropicToken, refreshAntigravityToken, refreshGoogleCloudToken, xopcCloudOAuthProvider, xopcShareOAuthProvider, xopcTunnelOAuthProvider };

package/dist/src/auth/oauth/openai.d.ts

@@ -0,0 +1,2 @@
+import type { OAuthProviderInterface } from './types.js';
+export declare const openaiOAuthProvider: OAuthProviderInterface;