@xopcai/xopc 0.0.368 → 0.0.370

package/dist/src/config/index.js

@@ -2,7 +2,7 @@ import { ENV_VARS, XOPC_DB_FILENAME, resolveHomeDir, resolveStateDir, resolveXop
 import { expandWorkspacePathString, init_workspace_path, normalizeWorkspaceDir, resolveWorkspaceRoot } from "./workspace-path.js";
 import { resolveDefaultAgentWorkspaceDir } from "./workspace-defaults.js";
 import { resolveAgentWorkspaceDir } from "../agent/agent-scope.js";
-import { FILENAMES, WORKSPACE_FILES, existsSync, hasBundledExtensionManifest, init_paths, resolveAgentAuthProfilesPath, resolveAgentDir, resolveAgentHomeDir, resolveAgentProfileDir, resolveAgentProfileMarkdownPath, resolveAuthProfilesPath, resolveBinDir, resolveBundledExtensionsDir, resolveBundledSkillsDir, resolveConfigPath, resolveCredentialsDir, resolveExtensionSdkPath, resolveExtensionsDir, resolveExtensionsLockPath, resolveInboxDir, resolveInboxMessagePath, resolveInboxPendingDir, resolveInboxProcessedDir, resolveLogPath, resolveLogsDir, resolveMcpOAuthPath, resolveModelsJsonPath, resolveNodeBinDir, resolveNodeBinPath, resolveNodeToolsDir, resolveNpmBinPath, resolveOAuthPath, resolvePidPath, resolveSkillPath, resolveSkillsCachePath, resolveSkillsDir, resolveSkillsLockPath, resolveSocketPath, resolveStatusPath, resolveToolsDir, resolveWorkspaceExtensionsDir, resolveWorkspaceFile, resolveWorkspaceStateDir, resolveWorkspaceStatePath, resolveXopcBinPath } from "./paths.js";
+import { FILENAMES, WORKSPACE_FILES, existsSync, hasBundledExtensionManifest, init_paths, resolveAgentAuthProfilesPath, resolveAgentDir, resolveAgentHomeDir, resolveAgentProfileDir, resolveAgentProfileMarkdownPath, resolveAuthProfilesPath, resolveBinDir, resolveBundledExtensionsDir, resolveBundledSkillsDir, resolveConfigPath, resolveCredentialsDir, resolveExtensionSdkPath, resolveExtensionsDir, resolveExtensionsLockPath, resolveInboxDir, resolveInboxMessagePath, resolveInboxPendingDir, resolveInboxProcessedDir, resolveLogPath, resolveLogsDir, resolveModelsJsonPath, resolveNodeBinDir, resolveNodeBinPath, resolveNodeToolsDir, resolveNpmBinPath, resolveOAuthPath, resolvePidPath, resolveSkillPath, resolveSkillsCachePath, resolveSkillsDir, resolveSkillsLockPath, resolveSocketPath, resolveStatusPath, resolveToolsDir, resolveWorkspaceExtensionsDir, resolveWorkspaceFile, resolveWorkspaceStateDir, resolveWorkspaceStatePath, resolveXopcBinPath } from "./paths.js";
 import { TelegramAccountConfigSchema, TelegramConfigSchema, TelegramGroupConfigSchema, TelegramTopicConfigSchema } from "../../extensions/telegram/src/config-schema.js";
 import { WeixinAccountConfigSchema, WeixinConfigSchema } from "../../extensions/weixin/src/config-schema.js";
 import { AgentImageGenerationModelSchema, AgentModelRefSchema, AgentModelsSchema, BrowserConfigSchema, ChannelsConfigSchema, CommandsConfigSchema, ConfigSchema, ConnectorsConfigSchema, ExperimentalConfigSchema, ExtensionSecurityConfigSchema, ExtensionSlotsConfigSchema, ExtensionsConfigSchema, GatewayAuthRateLimitSchema, GatewayAuthSchema, GatewayBindModeSchema, GatewayChannelConnectDeferModeSchema, GatewayConfigSchema, GatewayModeSchema, GatewayRemoteSchema, GatewayScenesConfigSchema, GatewaySecuritySchema, GatewayTailscaleConsentSchema, GatewayTailscaleSchema, GatewayTlsSchema, GatewayTrustedProxySchema, GatewayWebchatConfigSchema, McpConfigSchema, McpOAuthConfigSchema, McpServerSchema, MediaUnderstandingCapabilitiesSchema, MediaUnderstandingModelSchema, MessagesConfigSchema, ModelCatalogConfigSchema, ModelsDevConfigSchema, ProviderAuthConfigSchema, ProviderAzureConfigSchema, ProviderRequestOverridesSchema, ProvidersConfigSchema, RuntimeToolsConfigSchema, STTConfigSchema, STTFallbackConfigSchema, STTProviderConfigSchema, SearchProviderEntrySchema, SessionConfigSchema, SessionDmScopeSchema, SessionResetByTypeSchema, SessionResetConfigSchema, SessionResetModeSchema, SessionScopeSchema, SessionStorageConfigSchema, TTSConfigSchema, TTSEdgeConfigSchema, TTSFallbackConfigSchema, TTSModelOverridesConfigSchema, TTSProviderConfigSchema, TTSSummarizationConfigSchema, ToolsConfigSchema, ToolsMediaAudioConfigSchema, ToolsMediaConfigSchema, TunnelConfigSchema, TunnelConsentSchema, UpdateAutoConfigSchema, UpdateConfigSchema, VoiceConfigSchema, VoiceRefinementConfigSchema, WebSearchConfigSchema, WebToolsConfigSchema, WebsiteBlocklistSchema, WorkspaceConfigSchema, WorkspaceImportConfigSchema, getAgentDefaultImageGenerationModelConfig, getAgentDefaultImageModelConfig, getAgentDefaultModelRef, init_schema, parseModelRef } from "./schema.js";
@@ -10,7 +10,7 @@ import { applyConfigOverrides, getConfigOverrides, resetConfigOverrides, setConf
 import { extractProfileAgentId, resolveEffectiveAgentConfigForAgent, resolveEffectiveAgentConfigForSession, resolveEffectiveAgentProfile, resolveEffectiveAgentProfileForSession } from "./agent-profile.js";
 import { clearConfigValueCache, getAllowedCommands, getCacheStats, init_resolve_config_value, resolveConfigValue, resolveHeaders, testApiKeyResolution } from "./resolve-config-value.js";
 import { CustomModelSchema, ImageGenerationCapabilitiesSchema, ImageGenerationModelSchema, ImageGenerationProviderSchema, ModelOverrideSchema, ModelsJsonSchema, OpenAICompatSchema, OpenAICompletionsCompatSchema, OpenAIResponsesCompatSchema, OpenRouterRoutingSchema, ProviderConfigSchema, VercelGatewayRoutingSchema, getDefaultModelValues, init_models_json, loadModelsJson, modelsJsonExists, saveModelsJson, validateModelsConfig } from "./models-json.js";
-import { canonicalizeConfiguredMcpServer, isKnownCliMcpTypeAlias, normalizeConfiguredMcpServers, resolveXopcMcpTransportAlias } from "./mcp-config-normalize.js";
+import { canonicalizeConfiguredMcpServer, normalizeConfiguredMcpServers } from "./mcp-config-normalize.js";
 import { formatThinkingLevels, listThinkingLevels, normalizeElevatedMode, normalizeReasoningLevel, normalizeThinkLevel, normalizeVerboseLevel, thinkLevelToNumber } from "../agent/transcript/thinking-types.js";
 import { assertConfigRewriteSafeForRunningGateway, loadConfig, saveConfig } from "./loader.js";
 import { getWorkspacePath } from "./workspace-path-helpers.js";
@@ -26,4 +26,4 @@ init_workspace_path();
 init_models_json();
 init_resolve_config_value();
 //#endregion
-export { AgentImageGenerationModelSchema, AgentModelRefSchema, AgentModelsSchema, BASE_RELOAD_RULES, BrowserConfigSchema, ChannelsConfigSchema, CommandsConfigSchema, ConfigHotReloader, ConfigSchema, ConnectorsConfigSchema, CustomModelSchema, ENV_VARS, ExperimentalConfigSchema, ExtensionSecurityConfigSchema, ExtensionSlotsConfigSchema, ExtensionsConfigSchema, FILENAMES, GatewayAuthRateLimitSchema, GatewayAuthSchema, GatewayBindModeSchema, GatewayChannelConnectDeferModeSchema, GatewayConfigSchema, GatewayModeSchema, GatewayRemoteSchema, GatewayScenesConfigSchema, GatewaySecuritySchema, GatewayTailscaleConsentSchema, GatewayTailscaleSchema, GatewayTlsSchema, GatewayTrustedProxySchema, GatewayWebchatConfigSchema, ImageGenerationCapabilitiesSchema, ImageGenerationModelSchema, ImageGenerationProviderSchema, McpConfigSchema, McpOAuthConfigSchema, McpServerSchema, MediaUnderstandingCapabilitiesSchema, MediaUnderstandingModelSchema, MessagesConfigSchema, ModelCatalogConfigSchema, ModelOverrideSchema, ModelsDevConfigSchema, ModelsJsonSchema, OpenAICompatSchema, OpenAICompletionsCompatSchema, OpenAIResponsesCompatSchema, OpenRouterRoutingSchema, ProfileManager, ProviderAuthConfigSchema, ProviderAzureConfigSchema, ProviderConfigSchema, ProviderRequestOverridesSchema, ProvidersConfigSchema, RuntimeToolsConfigSchema, STTConfigSchema, STTFallbackConfigSchema, STTProviderConfigSchema, SearchProviderEntrySchema, SessionConfigSchema, SessionDmScopeSchema, SessionResetByTypeSchema, SessionResetConfigSchema, SessionResetModeSchema, SessionScopeSchema, SessionStorageConfigSchema, TTSConfigSchema, TTSEdgeConfigSchema, TTSFallbackConfigSchema, TTSModelOverridesConfigSchema, TTSProviderConfigSchema, TTSSummarizationConfigSchema, TelegramAccountConfigSchema, TelegramConfigSchema, TelegramGroupConfigSchema, TelegramTopicConfigSchema, ToolsConfigSchema, ToolsMediaAudioConfigSchema, ToolsMediaConfigSchema, TunnelConfigSchema, TunnelConsentSchema, UpdateAutoConfigSchema, UpdateConfigSchema, VercelGatewayRoutingSchema, VoiceConfigSchema, VoiceRefinementConfigSchema, WORKSPACE_FILES, WebSearchConfigSchema, WebToolsConfigSchema, WebsiteBlocklistSchema, WeixinAccountConfigSchema, WeixinConfigSchema, WorkspaceConfigSchema, WorkspaceImportConfigSchema, XOPC_DB_FILENAME, applyConfigOverrides, assertConfigRewriteSafeForRunningGateway, buildReloadPlan, canonicalizeConfiguredMcpServer, clearConfigValueCache, createProfile, deleteProfile, diffConfigPaths, existsSync, expandWorkspacePathString, extractProfileAgentId, formatThinkingLevels, getAgentDefaultImageGenerationModelConfig, getAgentDefaultImageModelConfig, getAgentDefaultModelRef, getAllowedCommands, getCacheStats, getConfigOverrides, getCurrentProfile, getDefaultModelValues, resolveModelsJsonPath as getModelsJsonPath, getProfileManager, getProfileNameFromDir, getSwitchCommand, getWorkspacePath, hasBundledExtensionManifest, isKnownCliMcpTypeAlias, listAgentProfileMarkdownDirs, listAgentWorkspaceDirs, listProfiles, listThinkingLevels, loadConfig, loadModelsJson, matchReloadRule, modelsJsonExists, normalizeConfiguredMcpServers, normalizeElevatedMode, normalizeReasoningLevel, normalizeThinkLevel, normalizeVerboseLevel, normalizeWorkspaceDir, parseModelRef, resetConfigOverrides, resolveAgentAuthProfilesPath, resolveAgentDir, resolveAgentHomeDir, resolveAgentProfileDir, resolveAgentProfileMarkdownPath, resolveAgentWorkspaceDir, resolveAuthProfilesPath, resolveBinDir, resolveBundledExtensionsDir, resolveBundledSkillsDir, resolveConfigPath, resolveConfigValue, resolveCredentialsDir, resolveDefaultAgentWorkspaceDir, resolveEffectiveAgentConfigForAgent, resolveEffectiveAgentConfigForSession, resolveEffectiveAgentProfile, resolveEffectiveAgentProfileForSession, resolveExtensionSdkPath, resolveExtensionsDir, resolveExtensionsLockPath, resolveHeaders, resolveHomeDir, resolveInboxDir, resolveInboxMessagePath, resolveInboxPendingDir, resolveInboxProcessedDir, resolveLogPath, resolveLogsDir, resolveMcpOAuthPath, resolveModelsJsonPath, resolveNodeBinDir, resolveNodeBinPath, resolveNodeToolsDir, resolveNpmBinPath, resolveOAuthPath, resolvePidPath, resolveProfileStateDir, resolveSkillPath, resolveSkillsCachePath, resolveSkillsDir, resolveSkillsLockPath, resolveSocketPath, resolveStateDir, resolveStatusPath, resolveToolsDir, resolveWorkspaceExtensionsDir, resolveWorkspaceFile, resolveWorkspaceRoot, resolveWorkspaceStateDir, resolveWorkspaceStatePath, resolveXopcBinPath, resolveXopcCloudCatalogCachePath, resolveXopcDatabasePath, resolveXopcMcpTransportAlias, saveConfig, saveModelsJson, setConfigOverride, testApiKeyResolution, thinkLevelToNumber, unsetConfigOverride, validateModelsConfig };
+export { AgentImageGenerationModelSchema, AgentModelRefSchema, AgentModelsSchema, BASE_RELOAD_RULES, BrowserConfigSchema, ChannelsConfigSchema, CommandsConfigSchema, ConfigHotReloader, ConfigSchema, ConnectorsConfigSchema, CustomModelSchema, ENV_VARS, ExperimentalConfigSchema, ExtensionSecurityConfigSchema, ExtensionSlotsConfigSchema, ExtensionsConfigSchema, FILENAMES, GatewayAuthRateLimitSchema, GatewayAuthSchema, GatewayBindModeSchema, GatewayChannelConnectDeferModeSchema, GatewayConfigSchema, GatewayModeSchema, GatewayRemoteSchema, GatewayScenesConfigSchema, GatewaySecuritySchema, GatewayTailscaleConsentSchema, GatewayTailscaleSchema, GatewayTlsSchema, GatewayTrustedProxySchema, GatewayWebchatConfigSchema, ImageGenerationCapabilitiesSchema, ImageGenerationModelSchema, ImageGenerationProviderSchema, McpConfigSchema, McpOAuthConfigSchema, McpServerSchema, MediaUnderstandingCapabilitiesSchema, MediaUnderstandingModelSchema, MessagesConfigSchema, ModelCatalogConfigSchema, ModelOverrideSchema, ModelsDevConfigSchema, ModelsJsonSchema, OpenAICompatSchema, OpenAICompletionsCompatSchema, OpenAIResponsesCompatSchema, OpenRouterRoutingSchema, ProfileManager, ProviderAuthConfigSchema, ProviderAzureConfigSchema, ProviderConfigSchema, ProviderRequestOverridesSchema, ProvidersConfigSchema, RuntimeToolsConfigSchema, STTConfigSchema, STTFallbackConfigSchema, STTProviderConfigSchema, SearchProviderEntrySchema, SessionConfigSchema, SessionDmScopeSchema, SessionResetByTypeSchema, SessionResetConfigSchema, SessionResetModeSchema, SessionScopeSchema, SessionStorageConfigSchema, TTSConfigSchema, TTSEdgeConfigSchema, TTSFallbackConfigSchema, TTSModelOverridesConfigSchema, TTSProviderConfigSchema, TTSSummarizationConfigSchema, TelegramAccountConfigSchema, TelegramConfigSchema, TelegramGroupConfigSchema, TelegramTopicConfigSchema, ToolsConfigSchema, ToolsMediaAudioConfigSchema, ToolsMediaConfigSchema, TunnelConfigSchema, TunnelConsentSchema, UpdateAutoConfigSchema, UpdateConfigSchema, VercelGatewayRoutingSchema, VoiceConfigSchema, VoiceRefinementConfigSchema, WORKSPACE_FILES, WebSearchConfigSchema, WebToolsConfigSchema, WebsiteBlocklistSchema, WeixinAccountConfigSchema, WeixinConfigSchema, WorkspaceConfigSchema, WorkspaceImportConfigSchema, XOPC_DB_FILENAME, applyConfigOverrides, assertConfigRewriteSafeForRunningGateway, buildReloadPlan, canonicalizeConfiguredMcpServer, clearConfigValueCache, createProfile, deleteProfile, diffConfigPaths, existsSync, expandWorkspacePathString, extractProfileAgentId, formatThinkingLevels, getAgentDefaultImageGenerationModelConfig, getAgentDefaultImageModelConfig, getAgentDefaultModelRef, getAllowedCommands, getCacheStats, getConfigOverrides, getCurrentProfile, getDefaultModelValues, resolveModelsJsonPath as getModelsJsonPath, getProfileManager, getProfileNameFromDir, getSwitchCommand, getWorkspacePath, hasBundledExtensionManifest, listAgentProfileMarkdownDirs, listAgentWorkspaceDirs, listProfiles, listThinkingLevels, loadConfig, loadModelsJson, matchReloadRule, modelsJsonExists, normalizeConfiguredMcpServers, normalizeElevatedMode, normalizeReasoningLevel, normalizeThinkLevel, normalizeVerboseLevel, normalizeWorkspaceDir, parseModelRef, resetConfigOverrides, resolveAgentAuthProfilesPath, resolveAgentDir, resolveAgentHomeDir, resolveAgentProfileDir, resolveAgentProfileMarkdownPath, resolveAgentWorkspaceDir, resolveAuthProfilesPath, resolveBinDir, resolveBundledExtensionsDir, resolveBundledSkillsDir, resolveConfigPath, resolveConfigValue, resolveCredentialsDir, resolveDefaultAgentWorkspaceDir, resolveEffectiveAgentConfigForAgent, resolveEffectiveAgentConfigForSession, resolveEffectiveAgentProfile, resolveEffectiveAgentProfileForSession, resolveExtensionSdkPath, resolveExtensionsDir, resolveExtensionsLockPath, resolveHeaders, resolveHomeDir, resolveInboxDir, resolveInboxMessagePath, resolveInboxPendingDir, resolveInboxProcessedDir, resolveLogPath, resolveLogsDir, resolveModelsJsonPath, resolveNodeBinDir, resolveNodeBinPath, resolveNodeToolsDir, resolveNpmBinPath, resolveOAuthPath, resolvePidPath, resolveProfileStateDir, resolveSkillPath, resolveSkillsCachePath, resolveSkillsDir, resolveSkillsLockPath, resolveSocketPath, resolveStateDir, resolveStatusPath, resolveToolsDir, resolveWorkspaceExtensionsDir, resolveWorkspaceFile, resolveWorkspaceRoot, resolveWorkspaceStateDir, resolveWorkspaceStatePath, resolveXopcBinPath, resolveXopcCloudCatalogCachePath, resolveXopcDatabasePath, saveConfig, saveModelsJson, setConfigOverride, testApiKeyResolution, thinkLevelToNumber, unsetConfigOverride, validateModelsConfig };

package/dist/src/config/mcp-config-normalize.d.ts

@@ -1,6 +1,3 @@
 export type ConfigMcpServers = Record<string, Record<string, unknown>>;
-export type XopcMcpHttpTransport = 'sse' | 'streamable-http';
-export declare function resolveXopcMcpTransportAlias(value: unknown): XopcMcpHttpTransport | undefined;
-export declare function isKnownCliMcpTypeAlias(value: unknown): boolean;
 export declare function canonicalizeConfiguredMcpServer(server: Record<string, unknown>): Record<string, unknown>;
 export declare function normalizeConfiguredMcpServers(value: unknown): ConfigMcpServers;

package/dist/src/config/mcp-config-normalize.js

@@ -1,31 +1,11 @@
 import { isRecord } from "../utils/is-record.js";
 //#region src/config/mcp-config-normalize.ts
-const CLI_MCP_TYPE_TO_XOPC_TRANSPORT = {
-	http: "streamable-http",
-	"streamable-http": "streamable-http",
-	sse: "sse",
-	stdio: "stdio"
-};
-function normalizeMcpString(value) {
-	return typeof value === "string" ? value.trim().toLowerCase() : "";
-}
-function resolveXopcMcpTransportAlias(value) {
-	const mapped = CLI_MCP_TYPE_TO_XOPC_TRANSPORT[normalizeMcpString(value)];
-	return mapped === "sse" || mapped === "streamable-http" ? mapped : void 0;
-}
-function isKnownCliMcpTypeAlias(value) {
-	return Object.hasOwn(CLI_MCP_TYPE_TO_XOPC_TRANSPORT, normalizeMcpString(value));
-}
 function canonicalizeConfiguredMcpServer(server) {
-	const next = { ...server };
-	const transportAlias = resolveXopcMcpTransportAlias(next.type);
-	if (typeof next.transport !== "string" && transportAlias) next.transport = transportAlias;
-	if (isKnownCliMcpTypeAlias(next.type)) delete next.type;
-	return next;
+	return { ...server };
 }
 function normalizeConfiguredMcpServers(value) {
 	if (!isRecord(value)) return {};
 	return Object.fromEntries(Object.entries(value).filter(([, server]) => isRecord(server)).map(([name, server]) => [name, { ...server }]));
 }
 //#endregion
-export { canonicalizeConfiguredMcpServer, isKnownCliMcpTypeAlias, normalizeConfiguredMcpServers, resolveXopcMcpTransportAlias };
+export { canonicalizeConfiguredMcpServer, normalizeConfiguredMcpServers };

package/dist/src/config/models-json.d.ts

@@ -377,7 +377,6 @@ export declare const CustomModelSchema: z.ZodObject<{
         "openai-completions": "openai-completions";
         "openai-responses": "openai-responses";
         "azure-openai-responses": "azure-openai-responses";
-        "openai-codex-responses": "openai-codex-responses";
         "anthropic-messages": "anthropic-messages";
         "bedrock-converse-stream": "bedrock-converse-stream";
         "google-generative-ai": "google-generative-ai";
@@ -522,7 +521,6 @@ export declare const ProviderConfigSchema: z.ZodObject<{
         "openai-completions": "openai-completions";
         "openai-responses": "openai-responses";
         "azure-openai-responses": "azure-openai-responses";
-        "openai-codex-responses": "openai-codex-responses";
         "anthropic-messages": "anthropic-messages";
         "bedrock-converse-stream": "bedrock-converse-stream";
         "google-generative-ai": "google-generative-ai";
@@ -545,7 +543,6 @@ export declare const ProviderConfigSchema: z.ZodObject<{
             "openai-completions": "openai-completions";
             "openai-responses": "openai-responses";
             "azure-openai-responses": "azure-openai-responses";
-            "openai-codex-responses": "openai-codex-responses";
             "anthropic-messages": "anthropic-messages";
             "bedrock-converse-stream": "bedrock-converse-stream";
             "google-generative-ai": "google-generative-ai";
@@ -805,7 +802,6 @@ export declare const ModelsJsonSchema: z.ZodObject<{
             "openai-completions": "openai-completions";
             "openai-responses": "openai-responses";
             "azure-openai-responses": "azure-openai-responses";
-            "openai-codex-responses": "openai-codex-responses";
             "anthropic-messages": "anthropic-messages";
             "bedrock-converse-stream": "bedrock-converse-stream";
             "google-generative-ai": "google-generative-ai";
@@ -828,7 +824,6 @@ export declare const ModelsJsonSchema: z.ZodObject<{
                 "openai-completions": "openai-completions";
                 "openai-responses": "openai-responses";
                 "azure-openai-responses": "azure-openai-responses";
-                "openai-codex-responses": "openai-codex-responses";
                 "anthropic-messages": "anthropic-messages";
                 "bedrock-converse-stream": "bedrock-converse-stream";
                 "google-generative-ai": "google-generative-ai";

package/dist/src/config/models-json.js

@@ -1,6 +1,7 @@
 import { __esmMin } from "../../_virtual/_rolldown/runtime.js";
 import { init_write_file_atomic, writeTextAtomicSync } from "../infra/write-file-atomic.js";
 import { init_paths, resolveModelsJsonPath } from "./paths.js";
+import { assertCurrentModelProvider, init_provider_policy } from "../providers/provider-policy.js";
 import { ComputerProfileSchema, init_src } from "../../packages/computer-control-contract/src/index.js";
 import { init_model_policy, isComputerModel } from "../computer/model-policy.js";
 import { existsSync, readFileSync } from "fs";
@@ -29,6 +30,16 @@ function validateModelsConfig(config) {
 	}
 	const data = result.data;
 	for (const [providerName, providerConfig] of Object.entries(data.providers)) {
+		try {
+			assertCurrentModelProvider(providerName);
+		} catch (error) {
+			errors.push({
+				path: `providers.${providerName}`,
+				message: error.message,
+				severity: "error"
+			});
+			continue;
+		}
 		if (providerName === "xopc-cloud") {
 			errors.push({
 				path: "providers.xopc-cloud",
@@ -230,6 +241,7 @@ var init_models_json = __esmMin((() => {
 	init_write_file_atomic();
 	init_paths();
 	init_model_policy();
+	init_provider_policy();
 	OpenRouterRoutingSchema = z.object({
 		only: z.array(z.string()).optional(),
 		order: z.array(z.string()).optional()
@@ -370,7 +382,6 @@ var init_models_json = __esmMin((() => {
 			"google-generative-ai",
 			"azure-openai-responses",
 			"bedrock-converse-stream",
-			"openai-codex-responses",
 			"google-gemini-cli",
 			"google-vertex"
 		]).optional(),
@@ -431,7 +442,6 @@ var init_models_json = __esmMin((() => {
 			"google-generative-ai",
 			"azure-openai-responses",
 			"bedrock-converse-stream",
-			"openai-codex-responses",
 			"google-gemini-cli",
 			"google-vertex"
 		]).optional(),
@@ -447,7 +457,7 @@ var init_models_json = __esmMin((() => {
 	RESERVED_PROVIDER_IDS = new Set([
 		"amazon-bedrock",
 		"anthropic",
-		"azure-openai-responses",
+		"azure",
 		"cerebras",
 		"cloudflare-ai-gateway",
 		"cloudflare-workers-ai",
@@ -469,7 +479,6 @@ var init_models_json = __esmMin((() => {
 		"moonshotai",
 		"moonshotai-cn",
 		"openai",
-		"openai-codex",
 		"opencode",
 		"opencode-go",
 		"openrouter",

package/dist/src/config/paths.d.ts

@@ -39,7 +39,6 @@ export declare function resolveAuthProfilesPath(): string;
  */
 export declare function resolveOAuthPath(provider: string): string;
 /** Resolve the credential record for one canonical remote MCP endpoint. */
-export declare function resolveMcpOAuthPath(serverKey: string): string;
 /**
  * Internal agent state dir: `stateDir/agents/<id>/agent/`
  * (credentials, inbox IPC, pid, agent.json — not the Markdown workspace).

package/dist/src/config/paths.js

@@ -31,9 +31,6 @@ function resolveOAuthPath(provider) {
 	return join(resolveCredentialsDir(), "oauth", `${provider}.json`);
 }
 /** Resolve the credential record for one canonical remote MCP endpoint. */
-function resolveMcpOAuthPath(serverKey) {
-	return join(resolveCredentialsDir(), "mcp", `${serverKey}.json`);
-}
 /**
 * Internal agent state dir: `stateDir/agents/<id>/agent/`
 * (credentials, inbox IPC, pid, agent.json — not the Markdown workspace).
@@ -322,4 +319,4 @@ var init_paths = __esmMin((() => {
 }));
 //#endregion
 init_paths();
-export { ENV_VARS, FILENAMES, WORKSPACE_FILES, XOPC_DB_FILENAME, existsSync, hasBundledExtensionManifest, init_paths, resolveAgentAuthProfilesPath, resolveAgentDir, resolveAgentHomeDir, resolveAgentProfileDir, resolveAgentProfileMarkdownPath, resolveAgentWorkspaceDir, resolveAuthProfilesPath, resolveBinDir, resolveBundledExtensionsDir, resolveBundledSkillsDir, resolveConfigPath, resolveCredentialsDir, resolveDefaultAgentWorkspaceDir, resolveExtensionSdkPath, resolveExtensionsDir, resolveExtensionsLockPath, resolveHomeDir, resolveInboxDir, resolveInboxMessagePath, resolveInboxPendingDir, resolveInboxProcessedDir, resolveLogPath, resolveLogsDir, resolveMcpOAuthPath, resolveModelsJsonPath, resolveNodeBinDir, resolveNodeBinPath, resolveNodeToolsDir, resolveNpmBinPath, resolveOAuthPath, resolvePidPath, resolveSkillPath, resolveSkillsCachePath, resolveSkillsDir, resolveSkillsLockPath, resolveSocketPath, resolveStateDir, resolveStatusPath, resolveToolsDir, resolveWorkspaceExtensionsDir, resolveWorkspaceFile, resolveWorkspaceStateDir, resolveWorkspaceStatePath, resolveXopcBinPath, resolveXopcCloudCatalogCachePath, resolveXopcDatabasePath };
+export { ENV_VARS, FILENAMES, WORKSPACE_FILES, XOPC_DB_FILENAME, existsSync, hasBundledExtensionManifest, init_paths, resolveAgentAuthProfilesPath, resolveAgentDir, resolveAgentHomeDir, resolveAgentProfileDir, resolveAgentProfileMarkdownPath, resolveAgentWorkspaceDir, resolveAuthProfilesPath, resolveBinDir, resolveBundledExtensionsDir, resolveBundledSkillsDir, resolveConfigPath, resolveCredentialsDir, resolveDefaultAgentWorkspaceDir, resolveExtensionSdkPath, resolveExtensionsDir, resolveExtensionsLockPath, resolveHomeDir, resolveInboxDir, resolveInboxMessagePath, resolveInboxPendingDir, resolveInboxProcessedDir, resolveLogPath, resolveLogsDir, resolveModelsJsonPath, resolveNodeBinDir, resolveNodeBinPath, resolveNodeToolsDir, resolveNpmBinPath, resolveOAuthPath, resolvePidPath, resolveSkillPath, resolveSkillsCachePath, resolveSkillsDir, resolveSkillsLockPath, resolveSocketPath, resolveStateDir, resolveStatusPath, resolveToolsDir, resolveWorkspaceExtensionsDir, resolveWorkspaceFile, resolveWorkspaceStateDir, resolveWorkspaceStatePath, resolveXopcBinPath, resolveXopcCloudCatalogCachePath, resolveXopcDatabasePath };

package/dist/src/config/schema.d.ts

@@ -87,21 +87,21 @@ export declare const BrowserConfigSchema: z.ZodDefault<z.ZodObject<{
     security: z.ZodDefault<z.ZodObject<{
         privateNetworks: z.ZodDefault<z.ZodLiteral<"deny">>;
         allowedPrivateHosts: z.ZodDefault<z.ZodArray<z.ZodString>>;
-        crossDomainNavigation: z.ZodDefault<z.ZodEnum<{
+        crossDomainNavigation: z.ZodPipe<z.ZodDefault<z.ZodEnum<{
             allow: "allow";
             deny: "deny";
             ask: "ask";
-        }>>;
-        uploads: z.ZodDefault<z.ZodEnum<{
+        }>>, z.ZodTransform<"allow" | "deny", "allow" | "deny" | "ask">>;
+        uploads: z.ZodPipe<z.ZodDefault<z.ZodEnum<{
             allow: "allow";
             deny: "deny";
             ask: "ask";
-        }>>;
-        consequentialActions: z.ZodDefault<z.ZodEnum<{
+        }>>, z.ZodTransform<"allow" | "deny", "allow" | "deny" | "ask">>;
+        consequentialActions: z.ZodPipe<z.ZodDefault<z.ZodEnum<{
             allow: "allow";
             deny: "deny";
             ask: "ask";
-        }>>;
+        }>>, z.ZodTransform<"allow" | "deny", "allow" | "deny" | "ask">>;
     }, z.core.$strict>>;
 }, z.core.$strict>>;
 export { TelegramTopicConfigSchema, TelegramGroupConfigSchema, TelegramAccountConfigSchema, TelegramConfigSchema, } from '../../extensions/telegram/src/config-schema.js';
@@ -1132,13 +1132,27 @@ export declare const CommandsConfigSchema: z.ZodOptional<z.ZodObject<{
 }, z.core.$strict>>;
 export type CommandsConfig = z.infer<typeof CommandsConfigSchema>;
 export declare const McpOAuthConfigSchema: z.ZodObject<{
-    type: z.ZodLiteral<"oauth">;
     clientId: z.ZodOptional<z.ZodString>;
+    clientSecret: z.ZodOptional<z.ZodString>;
+    callbackPort: z.ZodOptional<z.ZodNumber>;
+    callbackUrl: z.ZodOptional<z.ZodString>;
+    scope: z.ZodOptional<z.ZodString>;
+    clientName: z.ZodOptional<z.ZodString>;
+    clientRegistration: z.ZodOptional<z.ZodEnum<{
+        dcr: "dcr";
+        cimd: "cimd";
+    }>>;
+    authServerMetadataUrl: z.ZodOptional<z.ZodString>;
 }, z.core.$strict>;
 export declare const McpServerSchema: z.ZodObject<{
+    type: z.ZodOptional<z.ZodEnum<{
+        http: "http";
+        stdio: "stdio";
+        "streamable-http": "streamable-http";
+    }>>;
     command: z.ZodOptional<z.ZodString>;
     args: z.ZodOptional<z.ZodArray<z.ZodString>>;
-    env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodObject<{
+    env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
         xopcSecretRef: z.ZodObject<{
             provider: z.ZodString;
             fieldKey: z.ZodString;
@@ -1147,13 +1161,8 @@ export declare const McpServerSchema: z.ZodObject<{
         }, z.core.$strip>;
     }, z.core.$strip>]>>>;
     cwd: z.ZodOptional<z.ZodString>;
-    workingDirectory: z.ZodOptional<z.ZodString>;
     url: z.ZodOptional<z.ZodString>;
-    transport: z.ZodOptional<z.ZodEnum<{
-        sse: "sse";
-        "streamable-http": "streamable-http";
-    }>>;
-    headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodObject<{
+    headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
         xopcSecretRef: z.ZodObject<{
             provider: z.ZodString;
             fieldKey: z.ZodString;
@@ -1161,18 +1170,52 @@ export declare const McpServerSchema: z.ZodObject<{
             suffix: z.ZodOptional<z.ZodString>;
         }, z.core.$strip>;
     }, z.core.$strip>]>>>;
-    auth: z.ZodOptional<z.ZodObject<{
-        type: z.ZodLiteral<"oauth">;
+    oauth: z.ZodOptional<z.ZodObject<{
         clientId: z.ZodOptional<z.ZodString>;
+        clientSecret: z.ZodOptional<z.ZodString>;
+        callbackPort: z.ZodOptional<z.ZodNumber>;
+        callbackUrl: z.ZodOptional<z.ZodString>;
+        scope: z.ZodOptional<z.ZodString>;
+        clientName: z.ZodOptional<z.ZodString>;
+        clientRegistration: z.ZodOptional<z.ZodEnum<{
+            dcr: "dcr";
+            cimd: "cimd";
+        }>>;
+        authServerMetadataUrl: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
+    auth: z.ZodOptional<z.ZodObject<{
+        provider: z.ZodString;
     }, z.core.$strict>>;
-    connectionTimeoutMs: z.ZodOptional<z.ZodNumber>;
-    requestTimeoutMs: z.ZodOptional<z.ZodNumber>;
+    timeout: z.ZodOptional<z.ZodNumber>;
+    enabled: z.ZodOptional<z.ZodBoolean>;
+    exposure: z.ZodOptional<z.ZodEnum<{
+        direct: "direct";
+        hidden: "hidden";
+        deferred: "deferred";
+        codemode: "codemode";
+    }>>;
+    toolExposure: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<{
+        direct: "direct";
+        hidden: "hidden";
+        deferred: "deferred";
+        codemode: "codemode";
+    }>>>;
+    description: z.ZodOptional<z.ZodString>;
+    transport: z.ZodOptional<z.ZodNever>;
+    workingDirectory: z.ZodOptional<z.ZodNever>;
+    connectionTimeoutMs: z.ZodOptional<z.ZodNever>;
+    requestTimeoutMs: z.ZodOptional<z.ZodNever>;
 }, z.core.$catchall<z.ZodUnknown>>;
 export declare const McpConfigSchema: z.ZodOptional<z.ZodObject<{
     servers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+        type: z.ZodOptional<z.ZodEnum<{
+            http: "http";
+            stdio: "stdio";
+            "streamable-http": "streamable-http";
+        }>>;
         command: z.ZodOptional<z.ZodString>;
         args: z.ZodOptional<z.ZodArray<z.ZodString>>;
-        env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodObject<{
+        env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
             xopcSecretRef: z.ZodObject<{
                 provider: z.ZodString;
                 fieldKey: z.ZodString;
@@ -1181,13 +1224,8 @@ export declare const McpConfigSchema: z.ZodOptional<z.ZodObject<{
             }, z.core.$strip>;
         }, z.core.$strip>]>>>;
         cwd: z.ZodOptional<z.ZodString>;
-        workingDirectory: z.ZodOptional<z.ZodString>;
         url: z.ZodOptional<z.ZodString>;
-        transport: z.ZodOptional<z.ZodEnum<{
-            sse: "sse";
-            "streamable-http": "streamable-http";
-        }>>;
-        headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodObject<{
+        headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
             xopcSecretRef: z.ZodObject<{
                 provider: z.ZodString;
                 fieldKey: z.ZodString;
@@ -1195,14 +1233,42 @@ export declare const McpConfigSchema: z.ZodOptional<z.ZodObject<{
                 suffix: z.ZodOptional<z.ZodString>;
             }, z.core.$strip>;
         }, z.core.$strip>]>>>;
-        auth: z.ZodOptional<z.ZodObject<{
-            type: z.ZodLiteral<"oauth">;
+        oauth: z.ZodOptional<z.ZodObject<{
             clientId: z.ZodOptional<z.ZodString>;
+            clientSecret: z.ZodOptional<z.ZodString>;
+            callbackPort: z.ZodOptional<z.ZodNumber>;
+            callbackUrl: z.ZodOptional<z.ZodString>;
+            scope: z.ZodOptional<z.ZodString>;
+            clientName: z.ZodOptional<z.ZodString>;
+            clientRegistration: z.ZodOptional<z.ZodEnum<{
+                dcr: "dcr";
+                cimd: "cimd";
+            }>>;
+            authServerMetadataUrl: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>>;
+        auth: z.ZodOptional<z.ZodObject<{
+            provider: z.ZodString;
         }, z.core.$strict>>;
-        connectionTimeoutMs: z.ZodOptional<z.ZodNumber>;
-        requestTimeoutMs: z.ZodOptional<z.ZodNumber>;
+        timeout: z.ZodOptional<z.ZodNumber>;
+        enabled: z.ZodOptional<z.ZodBoolean>;
+        exposure: z.ZodOptional<z.ZodEnum<{
+            direct: "direct";
+            hidden: "hidden";
+            deferred: "deferred";
+            codemode: "codemode";
+        }>>;
+        toolExposure: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<{
+            direct: "direct";
+            hidden: "hidden";
+            deferred: "deferred";
+            codemode: "codemode";
+        }>>>;
+        description: z.ZodOptional<z.ZodString>;
+        transport: z.ZodOptional<z.ZodNever>;
+        workingDirectory: z.ZodOptional<z.ZodNever>;
+        connectionTimeoutMs: z.ZodOptional<z.ZodNever>;
+        requestTimeoutMs: z.ZodOptional<z.ZodNever>;
     }, z.core.$catchall<z.ZodUnknown>>>>;
-    sessionIdleTtlMs: z.ZodOptional<z.ZodNumber>;
 }, z.core.$strict>>;
 export type McpServerConfig = z.infer<typeof McpServerSchema>;
 export type McpOAuthConfig = z.infer<typeof McpOAuthConfigSchema>;
@@ -1611,21 +1677,21 @@ export declare const ConfigSchema: z.ZodDefault<z.ZodObject<{
         security: z.ZodDefault<z.ZodObject<{
             privateNetworks: z.ZodDefault<z.ZodLiteral<"deny">>;
             allowedPrivateHosts: z.ZodDefault<z.ZodArray<z.ZodString>>;
-            crossDomainNavigation: z.ZodDefault<z.ZodEnum<{
+            crossDomainNavigation: z.ZodPipe<z.ZodDefault<z.ZodEnum<{
                 allow: "allow";
                 deny: "deny";
                 ask: "ask";
-            }>>;
-            uploads: z.ZodDefault<z.ZodEnum<{
+            }>>, z.ZodTransform<"allow" | "deny", "allow" | "deny" | "ask">>;
+            uploads: z.ZodPipe<z.ZodDefault<z.ZodEnum<{
                 allow: "allow";
                 deny: "deny";
                 ask: "ask";
-            }>>;
-            consequentialActions: z.ZodDefault<z.ZodEnum<{
+            }>>, z.ZodTransform<"allow" | "deny", "allow" | "deny" | "ask">>;
+            consequentialActions: z.ZodPipe<z.ZodDefault<z.ZodEnum<{
                 allow: "allow";
                 deny: "deny";
                 ask: "ask";
-            }>>;
+            }>>, z.ZodTransform<"allow" | "deny", "allow" | "deny" | "ask">>;
         }, z.core.$strict>>;
     }, z.core.$strict>>;
     computer: z.ZodPrefault<z.ZodObject<{
@@ -1784,9 +1850,14 @@ export declare const ConfigSchema: z.ZodDefault<z.ZodObject<{
     }, z.core.$strip>>;
     mcp: z.ZodOptional<z.ZodObject<{
         servers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+            type: z.ZodOptional<z.ZodEnum<{
+                http: "http";
+                stdio: "stdio";
+                "streamable-http": "streamable-http";
+            }>>;
             command: z.ZodOptional<z.ZodString>;
             args: z.ZodOptional<z.ZodArray<z.ZodString>>;
-            env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodObject<{
+            env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
                 xopcSecretRef: z.ZodObject<{
                     provider: z.ZodString;
                     fieldKey: z.ZodString;
@@ -1795,13 +1866,8 @@ export declare const ConfigSchema: z.ZodDefault<z.ZodObject<{
                 }, z.core.$strip>;
             }, z.core.$strip>]>>>;
             cwd: z.ZodOptional<z.ZodString>;
-            workingDirectory: z.ZodOptional<z.ZodString>;
             url: z.ZodOptional<z.ZodString>;
-            transport: z.ZodOptional<z.ZodEnum<{
-                sse: "sse";
-                "streamable-http": "streamable-http";
-            }>>;
-            headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodObject<{
+            headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
                 xopcSecretRef: z.ZodObject<{
                     provider: z.ZodString;
                     fieldKey: z.ZodString;
@@ -1809,14 +1875,42 @@ export declare const ConfigSchema: z.ZodDefault<z.ZodObject<{
                     suffix: z.ZodOptional<z.ZodString>;
                 }, z.core.$strip>;
             }, z.core.$strip>]>>>;
-            auth: z.ZodOptional<z.ZodObject<{
-                type: z.ZodLiteral<"oauth">;
+            oauth: z.ZodOptional<z.ZodObject<{
                 clientId: z.ZodOptional<z.ZodString>;
+                clientSecret: z.ZodOptional<z.ZodString>;
+                callbackPort: z.ZodOptional<z.ZodNumber>;
+                callbackUrl: z.ZodOptional<z.ZodString>;
+                scope: z.ZodOptional<z.ZodString>;
+                clientName: z.ZodOptional<z.ZodString>;
+                clientRegistration: z.ZodOptional<z.ZodEnum<{
+                    dcr: "dcr";
+                    cimd: "cimd";
+                }>>;
+                authServerMetadataUrl: z.ZodOptional<z.ZodString>;
+            }, z.core.$strict>>;
+            auth: z.ZodOptional<z.ZodObject<{
+                provider: z.ZodString;
             }, z.core.$strict>>;
-            connectionTimeoutMs: z.ZodOptional<z.ZodNumber>;
-            requestTimeoutMs: z.ZodOptional<z.ZodNumber>;
+            timeout: z.ZodOptional<z.ZodNumber>;
+            enabled: z.ZodOptional<z.ZodBoolean>;
+            exposure: z.ZodOptional<z.ZodEnum<{
+                direct: "direct";
+                hidden: "hidden";
+                deferred: "deferred";
+                codemode: "codemode";
+            }>>;
+            toolExposure: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<{
+                direct: "direct";
+                hidden: "hidden";
+                deferred: "deferred";
+                codemode: "codemode";
+            }>>>;
+            description: z.ZodOptional<z.ZodString>;
+            transport: z.ZodOptional<z.ZodNever>;
+            workingDirectory: z.ZodOptional<z.ZodNever>;
+            connectionTimeoutMs: z.ZodOptional<z.ZodNever>;
+            requestTimeoutMs: z.ZodOptional<z.ZodNever>;
         }, z.core.$catchall<z.ZodUnknown>>>>;
-        sessionIdleTtlMs: z.ZodOptional<z.ZodNumber>;
     }, z.core.$strict>>;
     connectors: z.ZodOptional<z.ZodObject<{
         instances: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodRecord<z.ZodString, z.ZodUnknown>>>;