@xopcai/xopc 0.0.368 → 0.0.370

package/dist/src/endpoint-tools/policy.js

@@ -1,6 +1,8 @@
-import { ENDPOINT_CONTACT_LIST_OUTPUT_SCHEMA, ENDPOINT_CONTACT_OUTPUT_SCHEMA, ENDPOINT_FILE_OUTPUT_SCHEMA, ENDPOINT_TEXT_OUTPUT_SCHEMA, canonicalJson, init_src } from "../../packages/endpoint-tools-protocol/src/index.js";
+import { BRIDGE_LIST_OUTPUT_SCHEMA, BRIDGE_READ_INPUT_SCHEMA, BRIDGE_READ_OUTPUT_SCHEMA } from "../../packages/endpoint-tools-protocol/src/bridge.js";
+import { LOCATION_INPUT_SCHEMA, LOCATION_OUTPUT_SCHEMA } from "../../packages/endpoint-tools-protocol/src/location.js";
+import { DEVICE_EMPTY_INPUT_SCHEMA, DEVICE_POWER_OUTPUT_SCHEMA, DEVICE_STATE_OUTPUT_SCHEMA, ENDPOINT_CONTACT_LIST_OUTPUT_SCHEMA, ENDPOINT_CONTACT_OUTPUT_SCHEMA, ENDPOINT_FILE_OUTPUT_SCHEMA, ENDPOINT_TEXT_OUTPUT_SCHEMA, canonicalJson, init_src } from "../../packages/endpoint-tools-protocol/src/index.js";
 import { COMPUTER_INPUT_SCHEMA, COMPUTER_OUTPUT_SCHEMA, init_src as init_src$1 } from "../../packages/computer-control-contract/src/index.js";
-import { BROWSER_CONTROL_ENDPOINT_INPUT_SCHEMA, BROWSER_CONTROL_ENDPOINT_OUTPUT_SCHEMA } from "../../packages/browser-control-contract/src/index.js";
+import { BROWSER_CONTROL_ENDPOINT_DESCRIPTOR, BROWSER_CONTROL_ENDPOINT_INPUT_SCHEMA, BROWSER_CONTROL_ENDPOINT_OUTPUT_SCHEMA, BROWSER_RECORDING_ENDPOINT_DESCRIPTOR, BROWSER_RECORDING_ENDPOINT_INPUT_SCHEMA } from "../../packages/browser-control-contract/src/index.js";
 import Ajv2020 from "ajv/dist/2020.js";
 //#region src/endpoint-tools/policy.ts
 init_src$1();
@@ -17,6 +19,19 @@ function contract(policyId, outputSchema, resultKinds, permissions, legacyPolicy
 	};
 }
 const POLICY_BY_TOOL = {
+	...Object.fromEntries([
+		"mobile",
+		"desktop",
+		"web",
+		"browser"
+	].flatMap((kind) => [[`${kind}.device.get_state`, contract("public.background-read", DEVICE_STATE_OUTPUT_SCHEMA, ["json"], [], [], DEVICE_EMPTY_INPUT_SCHEMA)], [`${kind}.device.get_power`, contract("public.background-read", DEVICE_POWER_OUTPUT_SCHEMA, ["json"], [], [], DEVICE_EMPTY_INPUT_SCHEMA)]])),
+	...Object.fromEntries([
+		"mobile",
+		"desktop",
+		"web"
+	].map((kind) => [`${kind}.device.get_location`, contract("personal.foreground-read", LOCATION_OUTPUT_SCHEMA, ["json"], ["location-read-once"], [], LOCATION_INPUT_SCHEMA)])),
+	"desktop.bridge.list_resources": contract("public.background-read", BRIDGE_LIST_OUTPUT_SCHEMA, ["json"], [], [], DEVICE_EMPTY_INPUT_SCHEMA),
+	"desktop.bridge.read_sensor": contract("public.background-read", BRIDGE_READ_OUTPUT_SCHEMA, ["json"], [], [], BRIDGE_READ_INPUT_SCHEMA),
 	"desktop.computer.control": contract("computer.session-scoped", COMPUTER_OUTPUT_SCHEMA, ["json", "file"], ["computer-control"], [], COMPUTER_INPUT_SCHEMA),
 	"web.file.pick": contract("personal.foreground-read", ENDPOINT_FILE_OUTPUT_SCHEMA, ["file"], ["file-read"]),
 	"web.file.download": contract("user.foreground-write", ENDPOINT_TEXT_OUTPUT_SCHEMA, ["text"], ["file-download"]),
@@ -38,7 +53,8 @@ const POLICY_BY_TOOL = {
 	"mobile.device.get_info": contract("public.background-read", ENDPOINT_TEXT_OUTPUT_SCHEMA, ["text"], []),
 	"mobile.clipboard.write": contract("user.foreground-write", ENDPOINT_TEXT_OUTPUT_SCHEMA, ["text"], ["clipboard-write"]),
 	"mobile.app.open_url": contract("user.foreground-write", ENDPOINT_TEXT_OUTPUT_SCHEMA, ["text"], ["open-external-url"]),
-	"browser.control": contract("browser.control", BROWSER_CONTROL_ENDPOINT_OUTPUT_SCHEMA, ["json"], ["browser-control"], [], BROWSER_CONTROL_ENDPOINT_INPUT_SCHEMA)
+	"browser.control": contract("browser.control", BROWSER_CONTROL_ENDPOINT_OUTPUT_SCHEMA, ["json"], ["browser-control"], [], BROWSER_CONTROL_ENDPOINT_INPUT_SCHEMA),
+	"browser.recording": contract("browser.control", BROWSER_CONTROL_ENDPOINT_OUTPUT_SCHEMA, ["json"], ["browser-control"], [], BROWSER_RECORDING_ENDPOINT_INPUT_SCHEMA)
 };
 var EndpointToolPolicy = class {
 	ajv = new Ajv2020({
@@ -88,7 +104,7 @@ var EndpointToolPolicy = class {
 				return;
 			case "browser.control":
 				this.assertFields(descriptor, "write", "never", false, "personal");
-				if (descriptor.requiredPermissions.length !== 1 || descriptor.requiredPermissions[0] !== "browser-control" || descriptor.timeoutMs !== 12e4 || descriptor.maxConcurrency !== 4 || descriptor.supportsCancellation !== true || descriptor.idempotent !== false) throw new EndpointToolPolicyError(`Browser tool ${descriptor.name} violates its trusted policy`);
+				if (descriptor.requiredPermissions.length !== 1 || descriptor.requiredPermissions[0] !== "browser-control" || descriptor.timeoutMs !== 12e4 || descriptor.maxConcurrency !== (descriptor.name === BROWSER_RECORDING_ENDPOINT_DESCRIPTOR.name ? BROWSER_RECORDING_ENDPOINT_DESCRIPTOR.maxConcurrency : BROWSER_CONTROL_ENDPOINT_DESCRIPTOR.maxConcurrency) || descriptor.supportsCancellation !== true || descriptor.idempotent !== false) throw new EndpointToolPolicyError(`Browser tool ${descriptor.name} violates its trusted policy`);
 				return;
 			case "computer.session-scoped":
 				this.assertFields(descriptor, "write", "never", false, "personal");

package/dist/src/endpoint-tools/registry.d.ts

@@ -29,6 +29,8 @@ export declare function endpointToolRevision(descriptor: EndpointToolDescriptor)
 export declare class EndpointRegistry {
     private readonly policy;
     private readonly connectionByEndpointId;
+    private readonly changeListeners;
+    onChange(listener: (endpointId: string) => void): () => void;
     constructor(policy?: EndpointToolPolicy);
     register(hello: EndpointHelloPayload, connectionId: string, transport: EndpointTransport, now?: number): EndpointRegistration;
     remove(endpointId: string, connectionId: string): boolean;

package/dist/src/endpoint-tools/registry.js

@@ -22,6 +22,13 @@ function snapshot(connection) {
 }
 var EndpointRegistry = class {
 	connectionByEndpointId = /* @__PURE__ */ new Map();
+	changeListeners = /* @__PURE__ */ new Set();
+	onChange(listener) {
+		this.changeListeners.add(listener);
+		return () => {
+			this.changeListeners.delete(listener);
+		};
+	}
 	constructor(policy = new EndpointToolPolicy()) {
 		this.policy = policy;
 	}
@@ -54,6 +61,7 @@ var EndpointRegistry = class {
 			toolByName
 		};
 		this.connectionByEndpointId.set(connection.endpointId, connection);
+		for (const listener of this.changeListeners) listener(connection.endpointId);
 		return {
 			connection: snapshot(connection),
 			turnToken: connection.turnToken
@@ -63,6 +71,7 @@ var EndpointRegistry = class {
 		const connection = this.connectionByEndpointId.get(endpointId);
 		if (!connection || connection.connectionId !== connectionId) return false;
 		this.connectionByEndpointId.delete(endpointId);
+		for (const listener of this.changeListeners) listener(endpointId);
 		return true;
 	}
 	heartbeat(endpointId, connectionId, availability, now = Date.now()) {

package/dist/src/endpoint-tools/result-projector.d.ts

@@ -0,0 +1,15 @@
+import type { EndpointToolContent } from '@xopcai/endpoint-tools-protocol';
+/** Only fixed bounded state contracts are retained; personal tools use their existing policies. */
+export declare function projectDeviceReading(toolName: string, endpointId: string, principalId: string, content: EndpointToolContent[], receivedAt?: number, args?: Record<string, unknown>): {
+    version: number;
+    source: {
+        resourceId?: unknown;
+        endpointId: string;
+        principalId: string;
+    };
+    capturedAt: number;
+    receivedAt: number;
+    validUntil: number;
+    cached: boolean;
+    data: object;
+};

package/dist/src/endpoint-tools/result-projector.js

@@ -0,0 +1,31 @@
+//#region src/endpoint-tools/result-projector.ts
+/** Only fixed bounded state contracts are retained; personal tools use their existing policies. */
+function projectDeviceReading(toolName, endpointId, principalId, content, receivedAt = Date.now(), args) {
+	const sensor = toolName === "desktop.bridge.read_sensor";
+	if (!sensor && !/^(mobile|desktop|web|browser)\.device\.get_(state|power)$/.test(toolName)) return void 0;
+	const item = content[0];
+	if (item?.type !== "json" || !item.value || typeof item.value !== "object") throw new Error("Invalid device reading");
+	if (sensor) {
+		const reading = item.value;
+		if (reading.resourceId !== args?.resourceId) throw new Error("Bridge returned a different resource");
+		const expectedUnit = reading.measurement === "humidity" ? "percent" : "celsius";
+		if (reading.unit !== expectedUnit || reading.measurement === "humidity" && reading.value !== null && (typeof reading.value !== "number" || reading.value < 0 || reading.value > 100)) throw new Error("Invalid Bridge measurement");
+	}
+	const capturedAt = item.value.capturedAt;
+	if (typeof capturedAt !== "number" || !Number.isSafeInteger(capturedAt) || capturedAt > receivedAt + 6e4 || capturedAt < receivedAt - 3e4) throw new Error("Device sample is stale or has an invalid clock");
+	return {
+		version: 1,
+		source: {
+			endpointId,
+			principalId,
+			...sensor ? { resourceId: item.value.resourceId } : {}
+		},
+		capturedAt,
+		receivedAt,
+		validUntil: Math.min(receivedAt, capturedAt) + 3e4,
+		cached: false,
+		data: item.value
+	};
+}
+//#endregion
+export { projectDeviceReading };

package/dist/src/endpoint-tools/runtime.d.ts

@@ -1,11 +1,13 @@
 import { type ClientEndpointMessage, type EndpointHelloPayload } from '@xopcai/endpoint-tools-protocol';
 import { type EndpointAuthenticatorDeps } from './auth.js';
+import { DeviceGrantService } from './grant-service.js';
 import { EndpointBindingService } from './binding-service.js';
 import { EndpointInvocationService, type EndpointInvocationAuditSink } from './invocation-service.js';
 import { EndpointRegistry, type EndpointRegistration, type EndpointTransport } from './registry.js';
 import { EndpointUploadService } from './upload-service.js';
 export declare class EndpointToolRuntime {
     readonly registry: EndpointRegistry;
+    readonly grants: DeviceGrantService;
     readonly invocations: EndpointInvocationService;
     readonly uploads: EndpointUploadService;
     readonly bindings: EndpointBindingService;

package/dist/src/endpoint-tools/runtime.js

@@ -7,10 +7,12 @@ import { bindEndpointPrincipal, getEndpointPrincipal, touchEndpointPrincipal } f
 import { finishEndpointToolInvocationAudit, startEndpointToolInvocationAudit } from "../storage/sqlite/endpoint-tool-invocation-repository.js";
 import { init_sqlite } from "../storage/sqlite/index.js";
 import { init_paths } from "../config/paths.js";
-import { EndpointAuthenticator } from "./auth.js";
-import { EndpointBindingService } from "./binding-service.js";
 import { EndpointToolPolicy } from "./policy.js";
 import { EndpointInvocationService } from "./invocation-service.js";
+import { EndpointAuthenticator } from "./auth.js";
+import { EndpointBindingService } from "./binding-service.js";
+import { DeviceGrantService } from "./grant-service.js";
+import { recordDeviceGrantEvent } from "../storage/sqlite/device-grant-audit-repository.js";
 import { EndpointRegistry } from "./registry.js";
 import { EndpointUploadService } from "./upload-service.js";
 import { join } from "node:path";
@@ -22,6 +24,7 @@ const log = createLogger("EndpointTools");
 const MAX_MESSAGE_CLOCK_SKEW_MS = 6e4;
 var EndpointToolRuntime = class {
 	registry;
+	grants;
 	invocations;
 	uploads;
 	bindings;
@@ -30,6 +33,7 @@ var EndpointToolRuntime = class {
 	constructor(options = {}) {
 		const policy = new EndpointToolPolicy();
 		this.registry = new EndpointRegistry(policy);
+		this.grants = new DeviceGrantService(this.registry, Date.now, recordDeviceGrantEvent);
 		this.bindings = new EndpointBindingService(this.registry, {
 			get: getEndpointSessionBinding,
 			set: setEndpointSessionBinding,
@@ -53,6 +57,11 @@ var EndpointToolRuntime = class {
 	connect(hello, connectionId, transport) {
 		if (this.closed) throw new Error("Endpoint runtime is closed");
 		this.authenticator.authenticate(hello);
+		const previous = this.registry.get(hello.endpointId);
+		if (previous) {
+			this.grants.revokeEndpoint(previous.endpointId, previous.principalId);
+			this.invocations.failEndpoint(previous.endpointId);
+		}
 		const registration = this.registry.register(hello, connectionId, transport);
 		log.info({
 			endpointId: hello.endpointId,
@@ -75,7 +84,9 @@ var EndpointToolRuntime = class {
 		if (endpoint?.connectionId === connectionId) this.registry.heartbeat(endpointId, connectionId, endpoint.availability);
 	}
 	remove(endpointId, connectionId) {
+		const principalId = this.registry.get(endpointId)?.principalId;
 		if (!this.registry.remove(endpointId, connectionId)) return;
+		this.grants.revokeEndpoint(endpointId, principalId);
 		this.invocations.failEndpoint(endpointId);
 		deleteBrowserTabBindingsByEndpoint(endpointId);
 		log.info({
@@ -84,11 +95,13 @@ var EndpointToolRuntime = class {
 		}, "Endpoint disconnected");
 	}
 	disconnect(endpointId, reason) {
+		this.grants.revokeEndpoint(endpointId);
 		this.registry.disconnect(endpointId, 4003, reason);
 	}
 	close() {
 		if (this.closed) return;
 		this.closed = true;
+		this.grants.close();
 		this.invocations.close();
 		this.uploads.close();
 		this.registry.closeAll();

package/dist/src/endpoint-tools/target-resolver.d.ts

@@ -0,0 +1,12 @@
+import type { TurnOrigin } from '@xopcai/endpoint-tools-protocol';
+import type { DeviceGrantService } from './grant-service.js';
+import type { EndpointBindingService } from './binding-service.js';
+import type { EndpointRegistry } from './registry.js';
+export declare class DeviceTargetResolver {
+    private readonly registry;
+    private readonly bindings;
+    private readonly grants?;
+    constructor(registry: EndpointRegistry, bindings: EndpointBindingService, grants?: DeviceGrantService);
+    candidates(conversationId: string, origin: TurnOrigin): import("./registry.js").EndpointConnectionSnapshot[];
+    resolve(conversationId: string, origin: TurnOrigin, endpointId: string, toolName: string): import("./registry.js").EndpointConnectionSnapshot;
+}

package/dist/src/endpoint-tools/target-resolver.js

@@ -0,0 +1,27 @@
+import { deviceCapabilityTarget } from "./capability-catalog.js";
+//#region src/endpoint-tools/target-resolver.ts
+var DeviceTargetResolver = class {
+	constructor(registry, bindings, grants) {
+		this.registry = registry;
+		this.bindings = bindings;
+		this.grants = grants;
+	}
+	candidates(conversationId, origin) {
+		const source = origin.type === "endpoint" ? this.registry.get(origin.endpointId) : void 0;
+		const execution = this.bindings.get(conversationId) ? this.bindings.resolve(conversationId) : source;
+		const authorized = (this.grants?.candidates(conversationId, origin) ?? []).map((grant) => this.registry.get(grant.targetEndpointId));
+		return [...new Map([
+			source,
+			execution,
+			...authorized
+		].filter((endpoint) => endpoint !== void 0).map((endpoint) => [endpoint.endpointId, endpoint])).values()];
+	}
+	resolve(conversationId, origin, endpointId, toolName) {
+		const grant = this.grants?.find(conversationId, origin, endpointId, toolName);
+		if (grant) return this.registry.get(grant.targetEndpointId);
+		const binding = this.bindings.get(conversationId);
+		return (deviceCapabilityTarget(toolName) === "turn_origin" ? origin.type === "endpoint" ? origin.endpointId : void 0 : binding?.endpointId ?? (origin.type === "endpoint" ? origin.endpointId : void 0)) === endpointId ? this.registry.get(endpointId) : void 0;
+	}
+};
+//#endregion
+export { DeviceTargetResolver };

package/dist/src/endpoint-tools/turn-context.d.ts

@@ -0,0 +1,6 @@
+import type { EndpointContext } from '@xopcai/gateway-contract';
+import type { AgentSourceContext } from '../agent/source-context/types.js';
+import type { GatewayPrincipal } from '../gateway/security/gateway-principal.js';
+import type { EndpointConnectionSnapshot, EndpointRegistry } from './registry.js';
+export declare function endpointClaimBelongsToPrincipal(registry: EndpointRegistry, endpointId: string, principal: GatewayPrincipal): boolean;
+export declare function deviceTurnSourceContext(endpoint: EndpointConnectionSnapshot, environment?: EndpointContext): AgentSourceContext;

package/dist/src/endpoint-tools/turn-context.js

@@ -0,0 +1,29 @@
+import { getEndpointDeviceSettings } from "../storage/sqlite/endpoint-device-settings-repository.js";
+import { createHash } from "node:crypto";
+//#region src/endpoint-tools/turn-context.ts
+function endpointClaimBelongsToPrincipal(registry, endpointId, principal) {
+	const endpoint = registry.get(endpointId);
+	return Boolean(endpoint && (principal.kind === "owner" || principal.kind === "device" && endpoint.principalId === principal.deviceId));
+}
+function deviceTurnSourceContext(endpoint, environment) {
+	const name = getEndpointDeviceSettings(endpoint.principalId)?.nickname ?? endpoint.displayName;
+	const snapshot = {
+		endpointId: endpoint.endpointId,
+		principalId: endpoint.principalId,
+		name: name.slice(0, 80),
+		platform: endpoint.platform.slice(0, 40),
+		kind: endpoint.kind,
+		...environment ? { environment } : {}
+	};
+	const text = JSON.stringify(snapshot).replaceAll("<", "\\u003c").replaceAll(">", "\\u003e");
+	return {
+		kind: "device_context",
+		sourceId: endpoint.endpointId,
+		version: createHash("sha256").update(text).digest("hex"),
+		title: name.slice(0, 80),
+		text,
+		capturedAt: environment?.capturedAt ?? Date.now()
+	};
+}
+//#endregion
+export { deviceTurnSourceContext, endpointClaimBelongsToPrincipal };

package/dist/src/extensions/agent-plugins/auth.d.ts

@@ -4,9 +4,7 @@ import { type PluginServer } from './validation.js';
 declare const bindingSchema: z.ZodObject<{
     serverName: z.ZodString;
     mode: z.ZodEnum<{
-        none: "none";
         auto: "auto";
-        oauth: "oauth";
         "api-key": "api-key";
     }>;
     identityScope: z.ZodLiteral<"owner">;

package/dist/src/extensions/agent-plugins/auth.js

@@ -1,9 +1,8 @@
 import { init_paths_state, resolveStateDir } from "../../config/paths-state.js";
 import { init_write_file_atomic, writeTextAtomic } from "../../infra/write-file-atomic.js";
 import { CredentialResolver, init_credentials } from "../../auth/credentials.js";
-import { pluginName } from "./validation.js";
-import { clearPluginMcpHealth } from "./health.js";
 import { isDangerousHostEnvVarName } from "../../infra/host-env-security.js";
+import { pluginName } from "./validation.js";
 import { join } from "node:path";
 import { existsSync, readFileSync } from "node:fs";
 import { createHash } from "node:crypto";
@@ -15,12 +14,7 @@ init_write_file_atomic();
 init_paths_state();
 const bindingSchema = z.strictObject({
 	serverName: z.string(),
-	mode: z.enum([
-		"auto",
-		"oauth",
-		"api-key",
-		"none"
-	]),
+	mode: z.enum(["auto", "api-key"]),
 	identityScope: z.literal("owner"),
 	endpointFingerprint: z.string(),
 	fields: z.array(z.strictObject({
@@ -49,7 +43,6 @@ async function savePluginAuthBinding(store, id, name, input) {
 	const plugin = store.get(id);
 	const server = plugin?.servers[name];
 	if (!server || plugin?.readiness === "blocked") throw new Error("Plugin MCP server unavailable");
-	if (input.mode === "oauth" && server.type !== "streamable-http") throw new Error("OAuth requires streamable HTTP");
 	const endpointFingerprint = pluginEndpointFingerprint(server);
 	const fields = [];
 	const resolver = new CredentialResolver(store.stateDir === resolveStateDir() ? {} : { stateDir: store.stateDir });
@@ -95,20 +88,10 @@ async function savePluginAuthBinding(store, id, name, input) {
 		fields
 	});
 	await writeTextAtomic(bindingPath(store, id, name), JSON.stringify(binding));
-	clearPluginMcpHealth(id, name, store.stateDir);
 }
 function applyPluginAuthBinding(raw, binding) {
 	if (!binding) return raw;
 	const result = { ...raw };
-	if (binding.mode === "none" || binding.mode === "api-key") {
-		delete result.auth;
-		delete result.xopcAutoAuth;
-	}
-	if (binding.mode === "oauth") {
-		result.auth = { type: "oauth" };
-		delete result.xopcAutoAuth;
-		result.headers = Object.fromEntries(Object.entries(result.headers ?? {}).filter(([key]) => key.toLowerCase() !== "authorization"));
-	}
 	for (const field of binding.fields) {
 		const values = { ...result[field.target] };
 		const insensitive = field.target === "headers" || process.platform === "win32";

package/dist/src/extensions/agent-plugins/credentials.js

@@ -1,31 +1,15 @@
 import { init_paths_state, resolveStateDir } from "../../config/paths-state.js";
 import { CredentialResolver, init_credentials } from "../../auth/credentials.js";
-import { pluginName, pluginServerId } from "./validation.js";
-import { parsePluginAuthBinding, pluginCredentialProviderPrefix } from "./auth.js";
-import { McpOAuthStore } from "../../agent/mcp/oauth/mcp-oauth-store.js";
-import { getMcpOAuthManager } from "../../agent/mcp/oauth/mcp-oauth-manager.js";
+import { pluginName } from "./validation.js";
+import { pluginCredentialProviderPrefix } from "./auth.js";
 import { join } from "node:path";
-import { existsSync, readFileSync, readdirSync, rmSync } from "node:fs";
+import { existsSync, rmSync } from "node:fs";
 //#region src/extensions/agent-plugins/credentials.ts
 init_credentials();
 init_paths_state();
 async function removePluginCredentials(store, id) {
 	pluginName.parse(id);
-	const plugin = store.get(id);
-	const serverNames = new Set(Object.keys(plugin?.servers ?? {}));
 	const dir = join(store.stateDir, "plugin-auth", id);
-	if (existsSync(dir)) for (const file of readdirSync(dir)) {
-		if (!/^[a-f0-9]{64}\.json$/.test(file)) throw new Error("Unexpected plugin auth store entry");
-		const binding = parsePluginAuthBinding(JSON.parse(readFileSync(join(dir, file), "utf8")));
-		serverNames.add(binding.serverName);
-	}
-	for (const name of serverNames) {
-		await getMcpOAuthManager({ xopcPlugin: {
-			id,
-			serverName: name
-		} }).cancelPending();
-		await new McpOAuthStore(`owner:${pluginServerId(id, name)}`).deleteScope();
-	}
 	const resolver = new CredentialResolver(store.stateDir === resolveStateDir() ? {} : { stateDir: store.stateDir });
 	for (const profile of await resolver.listProfiles()) if (profile.provider.startsWith(pluginCredentialProviderPrefix(id))) await resolver.deleteProviderCredential(profile.provider);
 	if (existsSync(dir)) rmSync(dir, {

package/dist/src/extensions/agent-plugins/inventory.d.ts

@@ -7,7 +7,7 @@ export declare function agentPluginInventoryRow(plugin: InstalledAgentPlugin): {
         mcp: {
             name: string;
             id: string;
-            type: "sse" | "streamable-http" | "stdio";
+            type: "stdio" | "streamable-http";
         }[];
     };
     diagnostics: import("./validation.js").PluginDiagnostic[];
@@ -45,7 +45,7 @@ export declare function listAgentPluginInventory(): {
         mcp: {
             name: string;
             id: string;
-            type: "sse" | "streamable-http" | "stdio";
+            type: "stdio" | "streamable-http";
         }[];
     };
     diagnostics: import("./validation.js").PluginDiagnostic[];

package/dist/src/extensions/agent-plugins/mcp-adapter.js

@@ -17,11 +17,7 @@ function materializePluginServers(plugin, store = new AgentPluginStore(), diagno
 		};
 		const raw = server.type !== "stdio" ? {
 			...server,
-			xopcPlugin: origin,
-			...server.type === "streamable-http" && !Object.keys(server.headers ?? {}).some((key) => key.toLowerCase() === "authorization") ? {
-				auth: { type: "oauth" },
-				xopcAutoAuth: true
-			} : {}
+			xopcPlugin: origin
 		} : {
 			type: "stdio",
 			xopcPlugin: origin,

package/dist/src/extensions/agent-plugins/source-http-fetch.d.ts

@@ -0,0 +1,2 @@
+import type { FetchLike } from '@modelcontextprotocol/sdk/shared/transport.js';
+export declare function createPluginSourceFetch(endpoint: URL, configuredHeaders: Record<string, string>): FetchLike;

package/dist/src/{agent/mcp/plugin-http-fetch.js → extensions/agent-plugins/source-http-fetch.js}

@@ -1,7 +1,7 @@
 import { BlockList, isIP } from "node:net";
 import { Agent, fetch } from "undici";
 import { lookup } from "node:dns";
-//#region src/agent/mcp/plugin-http-fetch.ts
+//#region src/extensions/agent-plugins/source-http-fetch.ts
 const blocked = new BlockList();
 for (const [network, prefix] of [
 	["0.0.0.0", 8],
@@ -29,19 +29,19 @@ const publicDispatcher = new Agent({ connect: { lookup(host, options, callback)
 		all: true
 	}, (error, addresses) => {
 		if (error) return callback(error, []);
-		if (!addresses.length || addresses.some((entry) => isBlocked(entry.address))) return callback(/* @__PURE__ */ new Error("Plugin MCP cannot access private network addresses"), []);
+		if (!addresses.length || addresses.some((entry) => isBlocked(entry.address))) return callback(/* @__PURE__ */ new Error("Plugin download cannot access private network addresses"), []);
 		if (options.all) callback(null, addresses);
 		else callback(null, addresses[0].address, addresses[0].family);
 	});
 } } });
-function createPluginHttpFetch(endpoint, configuredHeaders) {
+function createPluginSourceFetch(endpoint, configuredHeaders) {
 	return async (input, init) => {
 		const url = new URL(input);
-		if (!["https:", "http:"].includes(url.protocol) || url.username || url.password || url.hash) throw new Error("Invalid plugin MCP request URL");
+		if (!["https:", "http:"].includes(url.protocol) || url.username || url.password || url.hash) throw new Error("Invalid plugin download request URL");
 		const local = loopback(endpoint.hostname) && url.origin === endpoint.origin;
-		if (!local && url.protocol !== "https:") throw new Error("Plugin MCP requires HTTPS");
+		if (!local && url.protocol !== "https:") throw new Error("Plugin download requires HTTPS");
 		const address = url.hostname.replace(/^\[|\]$/g, "");
-		if (!local && isIP(address) && isBlocked(address)) throw new Error("Plugin MCP cannot access private network addresses");
+		if (!local && isIP(address) && isBlocked(address)) throw new Error("Plugin download cannot access private network addresses");
 		const headers = new Headers(url.origin === endpoint.origin ? configuredHeaders : void 0);
 		new Headers(init?.headers).forEach((value, key) => headers.set(key, value));
 		return await fetch(url, {
@@ -53,4 +53,4 @@ function createPluginHttpFetch(endpoint, configuredHeaders) {
 	};
 }
 //#endregion
-export { createPluginHttpFetch };
+export { createPluginSourceFetch };

package/dist/src/extensions/agent-plugins/sources.js

@@ -1,4 +1,4 @@
-import { createPluginHttpFetch } from "../../agent/mcp/plugin-http-fetch.js";
+import { createPluginSourceFetch } from "./source-http-fetch.js";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
 import { mkdtempSync, rmSync, writeFileSync } from "node:fs";
@@ -63,7 +63,7 @@ async function withAgentPluginSource(source, config, fn) {
 		};
 	} else {
 		const url = new URL(source);
-		const response = await createPluginHttpFetch(url, {})(url, { signal: AbortSignal.timeout(3e4) });
+		const response = await createPluginSourceFetch(url, {})(url, { signal: AbortSignal.timeout(3e4) });
 		if (!response.ok || !response.body) throw new Error(`Plugin download failed (${response.status})`);
 		const reader = response.body.getReader();
 		const chunks = [];

package/dist/src/extensions/agent-plugins/store.js

@@ -4,7 +4,6 @@ import { init_logger } from "../../utils/logger.js";
 import { init_write_file_atomic, writeTextAtomicSync } from "../../infra/write-file-atomic.js";
 import { computeExtensionDirectoryIntegrity } from "../lockfile.js";
 import { containedPath, inspectAgentPlugin, pluginName } from "./validation.js";
-import { readPluginMcpHealth } from "./health.js";
 import { tmpdir } from "node:os";
 import { dirname, join, resolve } from "node:path";
 import { cpSync, existsSync, lstatSync, mkdirSync, mkdtempSync, readFileSync, readdirSync, rmSync, statSync, writeFileSync } from "node:fs";
@@ -104,8 +103,7 @@ var AgentPluginStore = class {
 				component: "package",
 				message: "Installed files differ from the reviewed package"
 			});
-			const health = Object.keys(inspection.servers).map((name) => readPluginMcpHealth(id, name, receipt.revision, this.stateDir));
-			const readiness = !valid ? "blocked" : inspection.diagnostics.length || health.includes("error") ? "degraded" : health.some((status) => status !== "ready") ? "setup_required" : "ready";
+			const readiness = !valid ? "blocked" : inspection.diagnostics.length ? "degraded" : "ready";
 			return {
 				...inspection,
 				id,

package/dist/src/extensions/agent-plugins/validation.d.ts

@@ -28,10 +28,6 @@ declare const serverSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
     type: z.ZodLiteral<"streamable-http">;
     url: z.ZodString;
     headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
-}, z.core.$strict>, z.ZodObject<{
-    type: z.ZodLiteral<"sse">;
-    url: z.ZodString;
-    headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
 }, z.core.$strict>], "type">;
 export type PluginManifest = z.infer<typeof manifestSchema>;
 export type PluginServer = z.infer<typeof serverSchema>;

package/dist/src/extensions/agent-plugins/validation.js

@@ -1,5 +1,6 @@
 import { dirname, isAbsolute, join, relative, resolve } from "node:path";
 import { existsSync, lstatSync, readFileSync, readdirSync, realpathSync, statSync } from "node:fs";
+import { createHash } from "node:crypto";
 import { z } from "zod";
 import { validateHeaderName, validateHeaderValue } from "node:http";
 import yaml from "js-yaml";
@@ -24,25 +25,17 @@ const manifestSchema = z.object({
 	extensions: z.record(z.string(), z.unknown()).optional()
 });
 const strings = z.record(z.string(), z.string());
-const serverSchema = z.discriminatedUnion("type", [
-	z.strictObject({
-		type: z.literal("stdio"),
-		command: z.string().min(1),
-		args: z.array(z.string()).optional(),
-		env: strings.optional(),
-		cwd: z.string().optional()
-	}),
-	z.strictObject({
-		type: z.literal("streamable-http"),
-		url: z.string().min(1),
-		headers: strings.optional()
-	}),
-	z.strictObject({
-		type: z.literal("sse"),
-		url: z.string().min(1),
-		headers: strings.optional()
-	})
-]);
+const serverSchema = z.discriminatedUnion("type", [z.strictObject({
+	type: z.literal("stdio"),
+	command: z.string().min(1),
+	args: z.array(z.string()).optional(),
+	env: strings.optional(),
+	cwd: z.string().optional()
+}), z.strictObject({
+	type: z.literal("streamable-http"),
+	url: z.string().min(1),
+	headers: strings.optional()
+})]);
 function containedPath(root, path) {
 	const base = resolve(root);
 	const target = resolve(path);
@@ -205,7 +198,7 @@ function inspectAgentPlugin(rootDir, dataDir = join(rootDir, ".inspection-data")
 	return result;
 }
 function pluginServerId(pluginId, serverName) {
-	return `plugin/${encodeURIComponent(pluginId)}/${encodeURIComponent(serverName)}`;
+	return `plugin_${pluginId.replace(/[^a-zA-Z0-9_]/g, "_")}_${createHash("sha256").update(JSON.stringify([pluginId, serverName])).digest("hex").slice(0, 16)}`;
 }
 //#endregion
 export { MCP_SCHEMA, PLUGIN_SCHEMA, containedPath, expandPluginVariables, inspectAgentPlugin, pluginName, pluginServerId, resolvePluginCwd, validatePluginServer };

package/dist/src/gateway/agents-admin.d.ts

@@ -101,3 +101,8 @@ export declare function writeAgentAvatarFromBase64(agentId: string, base64: stri
 export declare function deleteAgentAvatarFile(agentId: string): Promise<AgentAdminResult<{
     agentId: string;
 }>>;
+/** Rasterize configured generated avatars locally for native mobile clients. */
+export declare function resolveAgentAvatarImage(agentId: string): Promise<AgentAdminResult<{
+    buffer: Buffer;
+    contentType: string;
+}>>;