@xopcai/xopc 0.0.369 → 0.0.370

package/dist/src/auth/model-credential-store.js

@@ -1,5 +1,6 @@
 import { __esmMin } from "../../_virtual/_rolldown/runtime.js";
 import { init_oauth_provider_lock, withOAuthProviderLock } from "./oauth-provider-lock.js";
+import { assertCurrentModelProvider, init_provider_policy, isRetiredModelProvider } from "../providers/provider-policy.js";
 import { CredentialResolver, init_credentials } from "./credentials.js";
 //#region src/auth/model-credential-store.ts
 function normalizeProviderId(providerId) {
@@ -35,6 +36,7 @@ var XopcModelCredentialStore;
 var init_model_credential_store = __esmMin((() => {
 	init_credentials();
 	init_oauth_provider_lock();
+	init_provider_policy();
 	XopcModelCredentialStore = class {
 		runtimeApiKeys = /* @__PURE__ */ new Map();
 		constructor(repository = new CredentialResolver()) {
@@ -43,6 +45,7 @@ var init_model_credential_store = __esmMin((() => {
 		async read(providerId, options) {
 			options?.signal?.throwIfAborted();
 			const normalizedProvider = normalizeProviderId(providerId);
+			if (isRetiredModelProvider(normalizedProvider)) return void 0;
 			const runtimeApiKey = this.runtimeApiKeys.get(normalizedProvider);
 			if (runtimeApiKey) return runtimeApiKey;
 			const token = await this.repository.loadOAuthTokenRecord(normalizedProvider);
@@ -54,10 +57,13 @@ var init_model_credential_store = __esmMin((() => {
 			const oauthTokens = await this.repository.listOAuthTokens();
 			options?.signal?.throwIfAborted();
 			const credentials = /* @__PURE__ */ new Map();
-			for (const token of oauthTokens) credentials.set(normalizeProviderId(token.provider), {
-				providerId: normalizeProviderId(token.provider),
-				type: "oauth"
-			});
+			for (const token of oauthTokens) {
+				if (isRetiredModelProvider(token.provider)) continue;
+				credentials.set(normalizeProviderId(token.provider), {
+					providerId: normalizeProviderId(token.provider),
+					type: "oauth"
+				});
+			}
 			for (const providerId of this.runtimeApiKeys.keys()) credentials.set(providerId, {
 				providerId,
 				type: "api_key"
@@ -66,6 +72,7 @@ var init_model_credential_store = __esmMin((() => {
 		}
 		async modify(providerId, update, options) {
 			const normalizedProvider = normalizeProviderId(providerId);
+			assertCurrentModelProvider(normalizedProvider);
 			return withOAuthProviderLock(normalizedProvider, async () => {
 				options?.signal?.throwIfAborted();
 				const persisted = await this.repository.loadOAuthTokenRecord(normalizedProvider);

package/dist/src/auth/oauth/index.d.ts

@@ -11,6 +11,6 @@ export * from './kimi-coding.js';
 export * from './github-copilot.js';
 export * from './google-gemini-cli.js';
 export * from './google-antigravity.js';
-export * from './openai-codex.js';
+export * from './openai.js';
 export * from './xopc-cloud.js';
 export * from './registry.js';

package/dist/src/auth/oauth/index.js

@@ -7,7 +7,7 @@ import { init_google_gemini_cli } from "./google-gemini-cli.js";
 import { init_kimi_coding, kimiCodingOAuthProvider } from "./kimi-coding.js";
 import { init_minimax_cn, minimaxCnOAuthProvider } from "./minimax-cn.js";
 import { init_minimax, minimaxOAuthProvider } from "./minimax.js";
-import { init_openai_codex, loginOpenAICodex, openaiCodexOAuthProvider, refreshOpenAICodexToken } from "./openai-codex.js";
+import { init_openai, openaiOAuthProvider } from "./openai.js";
 import { init_xopc_cloud, xopcCloudOAuthProvider, xopcShareOAuthProvider, xopcTunnelOAuthProvider } from "./xopc-cloud.js";
 import { OAUTH_PROVIDER_DEFINITIONS, getModelOAuthProviderIds, getOAuthProviderDefinition, getOAuthProviderIds, getOAuthProviderInterfaces, init_registry, isOAuthOnlyProvider } from "./registry.js";
 //#region src/auth/oauth/index.ts
@@ -18,8 +18,8 @@ init_kimi_coding();
 init_github_copilot();
 init_google_gemini_cli();
 init_google_antigravity();
-init_openai_codex();
+init_openai();
 init_xopc_cloud();
 init_registry();
 //#endregion
-export { OAUTH_PROVIDER_DEFINITIONS, anthropicOAuthProvider, getModelOAuthProviderIds, getOAuthProviderDefinition, getOAuthProviderIds, getOAuthProviderInterfaces, githubCopilotOAuthProvider, antigravityOAuthProvider as googleAntigravityOAuthProvider, geminiCliOAuthProvider as googleGeminiCliOAuthProvider, isOAuthOnlyProvider, kimiCodingOAuthProvider, loginAnthropic, loginAntigravity, loginGeminiCli, loginOpenAICodex, minimaxCnOAuthProvider, minimaxOAuthProvider, openaiCodexOAuthProvider, refreshAnthropicToken, refreshAntigravityToken, refreshGoogleCloudToken, refreshOpenAICodexToken, xopcCloudOAuthProvider, xopcShareOAuthProvider, xopcTunnelOAuthProvider };
+export { OAUTH_PROVIDER_DEFINITIONS, anthropicOAuthProvider, getModelOAuthProviderIds, getOAuthProviderDefinition, getOAuthProviderIds, getOAuthProviderInterfaces, githubCopilotOAuthProvider, antigravityOAuthProvider as googleAntigravityOAuthProvider, geminiCliOAuthProvider as googleGeminiCliOAuthProvider, isOAuthOnlyProvider, kimiCodingOAuthProvider, loginAnthropic, loginAntigravity, loginGeminiCli, minimaxCnOAuthProvider, minimaxOAuthProvider, openaiOAuthProvider, refreshAnthropicToken, refreshAntigravityToken, refreshGoogleCloudToken, xopcCloudOAuthProvider, xopcShareOAuthProvider, xopcTunnelOAuthProvider };

package/dist/src/auth/oauth/openai.d.ts

@@ -0,0 +1,2 @@
+import type { OAuthProviderInterface } from './types.js';
+export declare const openaiOAuthProvider: OAuthProviderInterface;

package/dist/src/auth/oauth/openai.js

@@ -0,0 +1,90 @@
+import { __esmMin } from "../../../_virtual/_rolldown/runtime.js";
+import { init_write_file_atomic, writeTextAtomic } from "../../infra/write-file-atomic.js";
+import { init_paths, resolveCredentialsDir } from "../../config/paths.js";
+import { init_oauth_provider_lock, withOAuthProviderLock } from "../oauth-provider-lock.js";
+import { init_register_bundled_oauth_flows, registerBundledOAuthFlows } from "../../providers/register-bundled-oauth-flows.js";
+import { join } from "node:path";
+import { randomUUID } from "node:crypto";
+import { readFile } from "node:fs/promises";
+import { openaiProvider } from "@earendil-works/pi-ai/providers/openai";
+//#region src/auth/oauth/openai.ts
+async function getDeviceId(signal) {
+	return withOAuthProviderLock("openai-device-id", async () => {
+		const path = join(resolveCredentialsDir(), "openai-device-id");
+		try {
+			const id = (await readFile(path, "utf8")).trim();
+			if (!/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(id)) throw new Error("Invalid OpenAI installation device ID");
+			return id;
+		} catch (error) {
+			if (error.code !== "ENOENT") throw error;
+			const id = randomUUID();
+			await writeTextAtomic(path, id);
+			return id;
+		}
+	}, { signal });
+}
+function getOpenaiOAuth() {
+	registerBundledOAuthFlows();
+	const oauth = openaiProvider().auth.oauth;
+	if (!oauth) throw new Error("OpenAI ChatGPT OAuth is unavailable");
+	return oauth;
+}
+function fromPiCredential({ type: _type, ...credentials }) {
+	return credentials;
+}
+function toAuthInteraction(callbacks) {
+	return {
+		signal: callbacks.signal ?? new AbortController().signal,
+		async prompt(prompt) {
+			if (prompt.type === "select") return await callbacks.onSelect({
+				message: prompt.message,
+				options: [...prompt.options]
+			}) ?? "";
+			return callbacks.onPrompt({
+				message: prompt.message,
+				placeholder: prompt.placeholder,
+				signal: prompt.signal
+			});
+		},
+		notify(event) {
+			if (event.type === "auth_url") callbacks.onAuth({
+				url: event.url,
+				instructions: event.instructions
+			});
+			else if (event.type === "device_code") callbacks.onDeviceCode(event);
+			else callbacks.onProgress?.(event.message);
+		}
+	};
+}
+var openaiOAuthProvider;
+var init_openai = __esmMin((() => {
+	init_paths();
+	init_write_file_atomic();
+	init_oauth_provider_lock();
+	init_register_bundled_oauth_flows();
+	openaiOAuthProvider = {
+		id: "openai",
+		name: "OpenAI (ChatGPT subscription)",
+		usesCallbackServer: true,
+		loginMethods: ["browser"],
+		async login(callbacks) {
+			const deviceId = await getDeviceId(callbacks.signal);
+			return fromPiCredential(await getOpenaiOAuth().login(toAuthInteraction(callbacks), {
+				getDeviceId: () => deviceId,
+				agentName: "xopc"
+			}));
+		},
+		async refreshToken(credentials, signal) {
+			return fromPiCredential(await getOpenaiOAuth().refresh({
+				...credentials,
+				type: "oauth"
+			}, signal ?? new AbortController().signal));
+		},
+		getApiKey(credentials) {
+			return credentials.access;
+		}
+	};
+}));
+//#endregion
+init_openai();
+export { init_openai, openaiOAuthProvider };

package/dist/src/auth/oauth/registry.js

@@ -8,7 +8,7 @@ import { init_google_gemini_cli } from "./google-gemini-cli.js";
 import { init_kimi_coding, kimiCodingOAuthProvider } from "./kimi-coding.js";
 import { init_minimax_cn, minimaxCnOAuthProvider } from "./minimax-cn.js";
 import { init_minimax, minimaxOAuthProvider } from "./minimax.js";
-import { init_openai_codex, openaiCodexOAuthProvider } from "./openai-codex.js";
+import { init_openai, openaiOAuthProvider } from "./openai.js";
 import { init_xopc_cloud, xopcCloudOAuthProvider, xopcShareOAuthProvider, xopcTunnelOAuthProvider } from "./xopc-cloud.js";
 //#region src/auth/oauth/registry.ts
 function definition(provider, purpose, displayName = provider.name) {
@@ -44,7 +44,7 @@ var init_registry = __esmMin((() => {
 	init_kimi_coding();
 	init_minimax_cn();
 	init_minimax();
-	init_openai_codex();
+	init_openai();
 	init_xopc_cloud();
 	OAUTH_PROVIDER_DEFINITIONS = {
 		"xopc-cloud": {
@@ -69,7 +69,7 @@ var init_registry = __esmMin((() => {
 		"github-copilot": definition(githubCopilotOAuthProvider, "models"),
 		"google-gemini-cli": definition(geminiCliOAuthProvider, "models"),
 		"google-antigravity": definition(antigravityOAuthProvider, "models"),
-		"openai-codex": definition(openaiCodexOAuthProvider, "models")
+		openai: definition(openaiOAuthProvider, "models")
 	};
 }));
 //#endregion

package/dist/src/auth/oauth/types.d.ts

@@ -15,6 +15,7 @@ export type OAuthPrompt = {
     message: string;
     placeholder?: string;
     allowEmpty?: boolean;
+    signal?: AbortSignal;
 };
 export type OAuthAuthInfo = {
     url: string;

package/dist/src/auth/oauth/xopc-cloud.js

@@ -3,8 +3,8 @@ import { generatePKCE, init_pkce } from "./pkce.js";
 import { init_resolution, resolveConnectedPlatformEndpoint } from "../../platform/resolution.js";
 import { hostname } from "node:os";
 import { randomBytes } from "node:crypto";
-import http from "node:http";
 import { setTimeout as setTimeout$1 } from "node:timers/promises";
+import http from "node:http";
 //#region src/auth/oauth/xopc-cloud.ts
 function consoleUrl() {
 	return (process.env.XOPC_CONSOLE_URL ?? resolveConnectedPlatformEndpoint("authorizationServer") ?? DEFAULT_CONSOLE_URL).replace(/\/+$/, "");

package/dist/src/auth/sync-provider-auth.js

@@ -1,6 +1,7 @@
 import { __esmMin } from "../../_virtual/_rolldown/runtime.js";
 import { init_paths, resolveAgentAuthProfilesPath, resolveAuthProfilesPath, resolveOAuthPath } from "../config/paths.js";
 import { init_registry, isOAuthOnlyProvider } from "./oauth/registry.js";
+import { assertCurrentModelProvider, init_provider_policy } from "../providers/provider-policy.js";
 import { getDefaultAgentId, init_resolve_route } from "../routing/resolve-route.js";
 import { existsSync, readFileSync } from "node:fs";
 //#region src/auth/sync-provider-auth.ts
@@ -81,6 +82,7 @@ function readOAuthAccessTokenSync(provider) {
 */
 function resolveProviderApiKeySync(provider) {
 	const normalized = provider.toLowerCase();
+	assertCurrentModelProvider(normalized);
 	if (isOAuthOnlyProvider(normalized)) return readOAuthAccessTokenSync(normalized);
 	const fromAgent = readApiKeyFromProfilesFile(resolveAgentAuthProfilesPath(getDefaultAgentId()), normalized);
 	if (fromAgent) return fromAgent;
@@ -91,6 +93,7 @@ function resolveProviderApiKeySync(provider) {
 /** Resolve one agent's private credential, then the shared credential and OAuth token. */
 function resolveProviderApiKeyForAgentSync(provider, agentId, _config) {
 	const normalized = provider.toLowerCase();
+	assertCurrentModelProvider(normalized);
 	if (isOAuthOnlyProvider(normalized)) return readOAuthAccessTokenSync(normalized);
 	if (agentId?.trim()) {
 		const fromAgent = readApiKeyFromProfilesFile(resolveAgentAuthProfilesPath(agentId.trim()), normalized);
@@ -105,6 +108,7 @@ function resolveProviderApiKeyForAgentSync(provider, agentId, _config) {
 * matching async CredentialResolver resolution (excluding env — callers check env separately).
 */
 function hasProviderAuthOnDiskSync(provider) {
+	assertCurrentModelProvider(provider.toLowerCase());
 	if (isOAuthOnlyProvider(provider.toLowerCase())) return hasOAuthTokenSync(provider);
 	if (hasApiKeyInProfilesFile(resolveAgentAuthProfilesPath(getDefaultAgentId()), provider)) return true;
 	if (hasApiKeyInProfilesFile(resolveAuthProfilesPath(), provider)) return true;
@@ -114,6 +118,7 @@ function hasProviderAuthOnDiskSync(provider) {
 var init_sync_provider_auth = __esmMin((() => {
 	init_paths();
 	init_resolve_route();
+	init_provider_policy();
 	init_registry();
 }));
 //#endregion

package/dist/src/chat-commands/builtins/model.js

@@ -66,10 +66,10 @@ const switchCommand = {
 		"group"
 	],
 	acceptsArgs: true,
-	examples: ["/switch openai/gpt-5.6", "/switch anthropic/claude-sonnet-5"],
+	examples: ["/switch openai/gpt-6-sol", "/switch anthropic/claude-sonnet-5"],
 	handler: async (ctx, args) => {
 		if (!args.trim()) return {
-			content: joinBlocks("❌ Missing model ref.", "**Usage:** `/switch provider/model-id`", "Run `/models` — each line shows a display name and a `provider/model` ref in backticks. Copy that ref.", "**Example:** `/switch openai/gpt-5.6`"),
+			content: joinBlocks("❌ Missing model ref.", "**Usage:** `/switch provider/model-id`", "Run `/models` — each line shows a display name and a `provider/model` ref in backticks. Copy that ref.", "**Example:** `/switch openai/gpt-6-sol`"),
 			success: false
 		};
 		await ctx.setTyping(true);

package/dist/src/cli/command-manifest.js

@@ -97,7 +97,7 @@ const ROOT_HELP_COMMANDS = [
 	},
 	{
 		name: "mcp",
-		description: "Expose selected Gateway capabilities over MCP"
+		description: "Manage native pi MCP servers and expose Gateway capabilities"
 	},
 	{
 		name: "platform",

package/dist/src/cli/commands/doctor/checks/database-schema.js

@@ -53,7 +53,7 @@ async function checkDatabaseSchema(ctx) {
 		id: "database-schema",
 		label: "Database schema",
 		status: "pass",
-		message: `SQLite schema v${status.dbVersion} (current release v239).`,
+		message: `SQLite schema v${status.dbVersion} (current release v241).`,
 		hints: []
 	};
 }

package/dist/src/cli/commands/extension-agent-plugin.js

@@ -1,10 +1,6 @@
-import { pluginServerId } from "../../extensions/agent-plugins/validation.js";
 import { AgentPluginStore } from "../../extensions/agent-plugins/store.js";
-import { savePluginAuthBinding } from "../../extensions/agent-plugins/auth.js";
-import { materializePluginServers } from "../../extensions/agent-plugins/mcp-adapter.js";
 import { loadConfig } from "../../config/loader.js";
 import { getContextWithOpts } from "../context.js";
-import { getMcpOAuthManager } from "../../agent/mcp/oauth/mcp-oauth-manager.js";
 import { isAgentPluginArchive, withAgentPluginSource } from "../../extensions/agent-plugins/sources.js";
 import { removePluginCredentials } from "../../extensions/agent-plugins/credentials.js";
 import { join, resolve } from "node:path";
@@ -63,21 +59,6 @@ function addAgentPluginLifecycleCommands(command) {
 		store.remove(id, options.removeData);
 		console.log(`Removed ${raw}; credentials ${options.removeCredentials ? "deleted" : "retained"}${options.removeData ? ", plugin data deleted" : ", plugin data retained"}.`);
 	});
-	command.command("connect").argument("<id>", "plugin:<name>").requiredOption("--mcp <server>", "MCP server name").action(async (raw, options) => {
-		const store = new AgentPluginStore();
-		const id = raw.replace(/^plugin:/, "");
-		const plugin = store.get(id);
-		if (!plugin || plugin.readiness === "blocked") throw new Error("Plugin is unavailable");
-		await savePluginAuthBinding(store, id, options.mcp, { mode: "oauth" });
-		const serverId = pluginServerId(id, options.mcp);
-		const server = materializePluginServers(plugin, store)[serverId];
-		if (!server) throw new Error("MCP server not found");
-		const status = await getMcpOAuthManager(server).start({
-			serverId,
-			rawServer: server
-		});
-		console.log(JSON.stringify(status, null, 2));
-	});
 }
 //#endregion
 export { addAgentPluginLifecycleCommands, installAgentPluginFromCli, isAgentPluginSource };

package/dist/src/cli/commands/mcp.js

@@ -1,12 +1,46 @@
+import { getNativePiAgentDir, prepareNativeMcpConfig } from "../../agent/mcp/native-mcp.js";
 import { loadConfig } from "../../config/loader.js";
 import { register } from "../registry.js";
 import { createGatewayHttpClientFromConfig } from "../../mcp/gateway-http-client.js";
 import { createCapabilityMcpServer } from "../../mcp/capability-server.js";
+import { join } from "node:path";
+import { chmodSync, existsSync, readFileSync, writeFileSync } from "node:fs";
+import { main } from "@earendil-works/pi-coding-agent";
 import { Command } from "commander";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 //#region src/cli/commands/mcp.ts
 function createMcpCommand(ctx) {
-	const command = new Command("mcp").description("Expose selected Gateway capabilities over MCP");
+	const command = new Command("mcp").description("Manage native pi MCP servers and expose Gateway capabilities");
+	for (const action of [
+		"list",
+		"login",
+		"logout"
+	]) {
+		const native = command.command(action).description(`Use pi's native MCP ${action}`);
+		if (action !== "list") native.argument("<server>", "Configured MCP server ID");
+		if (action === "list") native.option("--json", "Print pi MCP diagnostics as JSON");
+		if (action === "login") native.option("--timeout <seconds>", "Browser sign-in timeout in seconds");
+		native.action(async (serverOrOptions, loginOptions) => {
+			const server = typeof serverOrOptions === "string" ? serverOrOptions : void 0;
+			const options = typeof serverOrOptions === "string" ? loginOptions : serverOrOptions;
+			const mcp = await prepareNativeMcpConfig(loadConfig(ctx.configPath), ctx.workspacePath || process.cwd());
+			if (mcp.errors.length) throw new Error(mcp.errors.join("\n"));
+			const path = join(getNativePiAgentDir(), "mcp.json");
+			if (existsSync(path) && JSON.parse(readFileSync(path, "utf8")).xopcGenerated !== true) throw new Error("The pi directory contains a user-managed mcp.json. Use a dedicated PI_CODING_AGENT_DIR for xopc.");
+			if (existsSync(path)) chmodSync(path, 384);
+			writeFileSync(path, JSON.stringify({
+				xopcGenerated: true,
+				mcpServers: Object.fromEntries(mcp.servers.map((entry) => [entry.name, entry.config]))
+			}), { mode: 384 });
+			await main([
+				"mcp",
+				action,
+				...server ? [server] : [],
+				...action === "list" && options?.json ? ["--json"] : [],
+				...action === "login" && loginOptions?.timeout ? ["--timeout", loginOptions.timeout] : []
+			]);
+		});
+	}
 	command.command("capabilities").description("Run an opt-in stdio MCP proxy for an explicit capability allowlist").requiredOption("--allow-capability <ids...>", "Exact capability IDs; no wildcards").action(async (options) => {
 		const server = createCapabilityMcpServer(createGatewayHttpClientFromConfig({ config: loadConfig(ctx.configPath) }), options.allowCapability);
 		const transport = new StdioServerTransport();
@@ -39,7 +73,7 @@ function createMcpCommand(ctx) {
 register({
 	id: "mcp",
 	name: "mcp",
-	description: "Expose selected Gateway capabilities over MCP",
+	description: "Manage native pi MCP servers and expose Gateway capabilities",
 	factory: createMcpCommand,
 	metadata: {
 		category: "utility",

package/dist/src/cli/commands/models.js

@@ -22,7 +22,7 @@ init_repository();
 init_providers();
 const IMAGE_GENERATION_IDS = new Set(listImageProviderSpecs().flatMap((provider) => provider.models.map((model) => model.id)));
 const VISION_IDS = new Set([
-	"gpt-5.6",
+	"gpt-6-sol",
 	"gpt-5.6-luna",
 	"gpt-5.6-sol",
 	"gpt-5.6-terra",

package/dist/src/cli/utils/oauth-login.js

@@ -51,8 +51,8 @@ function buildCliOAuthCallbacks(params) {
 		onPrompt: async (prompt) => input({
 			message: prompt.message,
 			validate: prompt.allowEmpty ? void 0 : (value) => value.trim().length > 0 || "Required"
-		}),
-		onManualCodeInput: params.provider.usesCallbackServer && params.provider.id !== "openai-codex" ? promptForManualCode : void 0,
+		}, { signal: prompt.signal }),
+		onManualCodeInput: params.provider.usesCallbackServer && params.provider.id !== "openai" ? promptForManualCode : void 0,
 		onProgress: (message) => {
 			params.onProgress?.(message);
 		},

package/dist/src/config/index.js

@@ -2,7 +2,7 @@ import { ENV_VARS, XOPC_DB_FILENAME, resolveHomeDir, resolveStateDir, resolveXop
 import { expandWorkspacePathString, init_workspace_path, normalizeWorkspaceDir, resolveWorkspaceRoot } from "./workspace-path.js";
 import { resolveDefaultAgentWorkspaceDir } from "./workspace-defaults.js";
 import { resolveAgentWorkspaceDir } from "../agent/agent-scope.js";
-import { FILENAMES, WORKSPACE_FILES, existsSync, hasBundledExtensionManifest, init_paths, resolveAgentAuthProfilesPath, resolveAgentDir, resolveAgentHomeDir, resolveAgentProfileDir, resolveAgentProfileMarkdownPath, resolveAuthProfilesPath, resolveBinDir, resolveBundledExtensionsDir, resolveBundledSkillsDir, resolveConfigPath, resolveCredentialsDir, resolveExtensionSdkPath, resolveExtensionsDir, resolveExtensionsLockPath, resolveInboxDir, resolveInboxMessagePath, resolveInboxPendingDir, resolveInboxProcessedDir, resolveLogPath, resolveLogsDir, resolveMcpOAuthPath, resolveModelsJsonPath, resolveNodeBinDir, resolveNodeBinPath, resolveNodeToolsDir, resolveNpmBinPath, resolveOAuthPath, resolvePidPath, resolveSkillPath, resolveSkillsCachePath, resolveSkillsDir, resolveSkillsLockPath, resolveSocketPath, resolveStatusPath, resolveToolsDir, resolveWorkspaceExtensionsDir, resolveWorkspaceFile, resolveWorkspaceStateDir, resolveWorkspaceStatePath, resolveXopcBinPath } from "./paths.js";
+import { FILENAMES, WORKSPACE_FILES, existsSync, hasBundledExtensionManifest, init_paths, resolveAgentAuthProfilesPath, resolveAgentDir, resolveAgentHomeDir, resolveAgentProfileDir, resolveAgentProfileMarkdownPath, resolveAuthProfilesPath, resolveBinDir, resolveBundledExtensionsDir, resolveBundledSkillsDir, resolveConfigPath, resolveCredentialsDir, resolveExtensionSdkPath, resolveExtensionsDir, resolveExtensionsLockPath, resolveInboxDir, resolveInboxMessagePath, resolveInboxPendingDir, resolveInboxProcessedDir, resolveLogPath, resolveLogsDir, resolveModelsJsonPath, resolveNodeBinDir, resolveNodeBinPath, resolveNodeToolsDir, resolveNpmBinPath, resolveOAuthPath, resolvePidPath, resolveSkillPath, resolveSkillsCachePath, resolveSkillsDir, resolveSkillsLockPath, resolveSocketPath, resolveStatusPath, resolveToolsDir, resolveWorkspaceExtensionsDir, resolveWorkspaceFile, resolveWorkspaceStateDir, resolveWorkspaceStatePath, resolveXopcBinPath } from "./paths.js";
 import { TelegramAccountConfigSchema, TelegramConfigSchema, TelegramGroupConfigSchema, TelegramTopicConfigSchema } from "../../extensions/telegram/src/config-schema.js";
 import { WeixinAccountConfigSchema, WeixinConfigSchema } from "../../extensions/weixin/src/config-schema.js";
 import { AgentImageGenerationModelSchema, AgentModelRefSchema, AgentModelsSchema, BrowserConfigSchema, ChannelsConfigSchema, CommandsConfigSchema, ConfigSchema, ConnectorsConfigSchema, ExperimentalConfigSchema, ExtensionSecurityConfigSchema, ExtensionSlotsConfigSchema, ExtensionsConfigSchema, GatewayAuthRateLimitSchema, GatewayAuthSchema, GatewayBindModeSchema, GatewayChannelConnectDeferModeSchema, GatewayConfigSchema, GatewayModeSchema, GatewayRemoteSchema, GatewayScenesConfigSchema, GatewaySecuritySchema, GatewayTailscaleConsentSchema, GatewayTailscaleSchema, GatewayTlsSchema, GatewayTrustedProxySchema, GatewayWebchatConfigSchema, McpConfigSchema, McpOAuthConfigSchema, McpServerSchema, MediaUnderstandingCapabilitiesSchema, MediaUnderstandingModelSchema, MessagesConfigSchema, ModelCatalogConfigSchema, ModelsDevConfigSchema, ProviderAuthConfigSchema, ProviderAzureConfigSchema, ProviderRequestOverridesSchema, ProvidersConfigSchema, RuntimeToolsConfigSchema, STTConfigSchema, STTFallbackConfigSchema, STTProviderConfigSchema, SearchProviderEntrySchema, SessionConfigSchema, SessionDmScopeSchema, SessionResetByTypeSchema, SessionResetConfigSchema, SessionResetModeSchema, SessionScopeSchema, SessionStorageConfigSchema, TTSConfigSchema, TTSEdgeConfigSchema, TTSFallbackConfigSchema, TTSModelOverridesConfigSchema, TTSProviderConfigSchema, TTSSummarizationConfigSchema, ToolsConfigSchema, ToolsMediaAudioConfigSchema, ToolsMediaConfigSchema, TunnelConfigSchema, TunnelConsentSchema, UpdateAutoConfigSchema, UpdateConfigSchema, VoiceConfigSchema, VoiceRefinementConfigSchema, WebSearchConfigSchema, WebToolsConfigSchema, WebsiteBlocklistSchema, WorkspaceConfigSchema, WorkspaceImportConfigSchema, getAgentDefaultImageGenerationModelConfig, getAgentDefaultImageModelConfig, getAgentDefaultModelRef, init_schema, parseModelRef } from "./schema.js";
@@ -10,7 +10,7 @@ import { applyConfigOverrides, getConfigOverrides, resetConfigOverrides, setConf
 import { extractProfileAgentId, resolveEffectiveAgentConfigForAgent, resolveEffectiveAgentConfigForSession, resolveEffectiveAgentProfile, resolveEffectiveAgentProfileForSession } from "./agent-profile.js";
 import { clearConfigValueCache, getAllowedCommands, getCacheStats, init_resolve_config_value, resolveConfigValue, resolveHeaders, testApiKeyResolution } from "./resolve-config-value.js";
 import { CustomModelSchema, ImageGenerationCapabilitiesSchema, ImageGenerationModelSchema, ImageGenerationProviderSchema, ModelOverrideSchema, ModelsJsonSchema, OpenAICompatSchema, OpenAICompletionsCompatSchema, OpenAIResponsesCompatSchema, OpenRouterRoutingSchema, ProviderConfigSchema, VercelGatewayRoutingSchema, getDefaultModelValues, init_models_json, loadModelsJson, modelsJsonExists, saveModelsJson, validateModelsConfig } from "./models-json.js";
-import { canonicalizeConfiguredMcpServer, isKnownCliMcpTypeAlias, normalizeConfiguredMcpServers, resolveXopcMcpTransportAlias } from "./mcp-config-normalize.js";
+import { canonicalizeConfiguredMcpServer, normalizeConfiguredMcpServers } from "./mcp-config-normalize.js";
 import { formatThinkingLevels, listThinkingLevels, normalizeElevatedMode, normalizeReasoningLevel, normalizeThinkLevel, normalizeVerboseLevel, thinkLevelToNumber } from "../agent/transcript/thinking-types.js";
 import { assertConfigRewriteSafeForRunningGateway, loadConfig, saveConfig } from "./loader.js";
 import { getWorkspacePath } from "./workspace-path-helpers.js";
@@ -26,4 +26,4 @@ init_workspace_path();
 init_models_json();
 init_resolve_config_value();
 //#endregion
-export { AgentImageGenerationModelSchema, AgentModelRefSchema, AgentModelsSchema, BASE_RELOAD_RULES, BrowserConfigSchema, ChannelsConfigSchema, CommandsConfigSchema, ConfigHotReloader, ConfigSchema, ConnectorsConfigSchema, CustomModelSchema, ENV_VARS, ExperimentalConfigSchema, ExtensionSecurityConfigSchema, ExtensionSlotsConfigSchema, ExtensionsConfigSchema, FILENAMES, GatewayAuthRateLimitSchema, GatewayAuthSchema, GatewayBindModeSchema, GatewayChannelConnectDeferModeSchema, GatewayConfigSchema, GatewayModeSchema, GatewayRemoteSchema, GatewayScenesConfigSchema, GatewaySecuritySchema, GatewayTailscaleConsentSchema, GatewayTailscaleSchema, GatewayTlsSchema, GatewayTrustedProxySchema, GatewayWebchatConfigSchema, ImageGenerationCapabilitiesSchema, ImageGenerationModelSchema, ImageGenerationProviderSchema, McpConfigSchema, McpOAuthConfigSchema, McpServerSchema, MediaUnderstandingCapabilitiesSchema, MediaUnderstandingModelSchema, MessagesConfigSchema, ModelCatalogConfigSchema, ModelOverrideSchema, ModelsDevConfigSchema, ModelsJsonSchema, OpenAICompatSchema, OpenAICompletionsCompatSchema, OpenAIResponsesCompatSchema, OpenRouterRoutingSchema, ProfileManager, ProviderAuthConfigSchema, ProviderAzureConfigSchema, ProviderConfigSchema, ProviderRequestOverridesSchema, ProvidersConfigSchema, RuntimeToolsConfigSchema, STTConfigSchema, STTFallbackConfigSchema, STTProviderConfigSchema, SearchProviderEntrySchema, SessionConfigSchema, SessionDmScopeSchema, SessionResetByTypeSchema, SessionResetConfigSchema, SessionResetModeSchema, SessionScopeSchema, SessionStorageConfigSchema, TTSConfigSchema, TTSEdgeConfigSchema, TTSFallbackConfigSchema, TTSModelOverridesConfigSchema, TTSProviderConfigSchema, TTSSummarizationConfigSchema, TelegramAccountConfigSchema, TelegramConfigSchema, TelegramGroupConfigSchema, TelegramTopicConfigSchema, ToolsConfigSchema, ToolsMediaAudioConfigSchema, ToolsMediaConfigSchema, TunnelConfigSchema, TunnelConsentSchema, UpdateAutoConfigSchema, UpdateConfigSchema, VercelGatewayRoutingSchema, VoiceConfigSchema, VoiceRefinementConfigSchema, WORKSPACE_FILES, WebSearchConfigSchema, WebToolsConfigSchema, WebsiteBlocklistSchema, WeixinAccountConfigSchema, WeixinConfigSchema, WorkspaceConfigSchema, WorkspaceImportConfigSchema, XOPC_DB_FILENAME, applyConfigOverrides, assertConfigRewriteSafeForRunningGateway, buildReloadPlan, canonicalizeConfiguredMcpServer, clearConfigValueCache, createProfile, deleteProfile, diffConfigPaths, existsSync, expandWorkspacePathString, extractProfileAgentId, formatThinkingLevels, getAgentDefaultImageGenerationModelConfig, getAgentDefaultImageModelConfig, getAgentDefaultModelRef, getAllowedCommands, getCacheStats, getConfigOverrides, getCurrentProfile, getDefaultModelValues, resolveModelsJsonPath as getModelsJsonPath, getProfileManager, getProfileNameFromDir, getSwitchCommand, getWorkspacePath, hasBundledExtensionManifest, isKnownCliMcpTypeAlias, listAgentProfileMarkdownDirs, listAgentWorkspaceDirs, listProfiles, listThinkingLevels, loadConfig, loadModelsJson, matchReloadRule, modelsJsonExists, normalizeConfiguredMcpServers, normalizeElevatedMode, normalizeReasoningLevel, normalizeThinkLevel, normalizeVerboseLevel, normalizeWorkspaceDir, parseModelRef, resetConfigOverrides, resolveAgentAuthProfilesPath, resolveAgentDir, resolveAgentHomeDir, resolveAgentProfileDir, resolveAgentProfileMarkdownPath, resolveAgentWorkspaceDir, resolveAuthProfilesPath, resolveBinDir, resolveBundledExtensionsDir, resolveBundledSkillsDir, resolveConfigPath, resolveConfigValue, resolveCredentialsDir, resolveDefaultAgentWorkspaceDir, resolveEffectiveAgentConfigForAgent, resolveEffectiveAgentConfigForSession, resolveEffectiveAgentProfile, resolveEffectiveAgentProfileForSession, resolveExtensionSdkPath, resolveExtensionsDir, resolveExtensionsLockPath, resolveHeaders, resolveHomeDir, resolveInboxDir, resolveInboxMessagePath, resolveInboxPendingDir, resolveInboxProcessedDir, resolveLogPath, resolveLogsDir, resolveMcpOAuthPath, resolveModelsJsonPath, resolveNodeBinDir, resolveNodeBinPath, resolveNodeToolsDir, resolveNpmBinPath, resolveOAuthPath, resolvePidPath, resolveProfileStateDir, resolveSkillPath, resolveSkillsCachePath, resolveSkillsDir, resolveSkillsLockPath, resolveSocketPath, resolveStateDir, resolveStatusPath, resolveToolsDir, resolveWorkspaceExtensionsDir, resolveWorkspaceFile, resolveWorkspaceRoot, resolveWorkspaceStateDir, resolveWorkspaceStatePath, resolveXopcBinPath, resolveXopcCloudCatalogCachePath, resolveXopcDatabasePath, resolveXopcMcpTransportAlias, saveConfig, saveModelsJson, setConfigOverride, testApiKeyResolution, thinkLevelToNumber, unsetConfigOverride, validateModelsConfig };
+export { AgentImageGenerationModelSchema, AgentModelRefSchema, AgentModelsSchema, BASE_RELOAD_RULES, BrowserConfigSchema, ChannelsConfigSchema, CommandsConfigSchema, ConfigHotReloader, ConfigSchema, ConnectorsConfigSchema, CustomModelSchema, ENV_VARS, ExperimentalConfigSchema, ExtensionSecurityConfigSchema, ExtensionSlotsConfigSchema, ExtensionsConfigSchema, FILENAMES, GatewayAuthRateLimitSchema, GatewayAuthSchema, GatewayBindModeSchema, GatewayChannelConnectDeferModeSchema, GatewayConfigSchema, GatewayModeSchema, GatewayRemoteSchema, GatewayScenesConfigSchema, GatewaySecuritySchema, GatewayTailscaleConsentSchema, GatewayTailscaleSchema, GatewayTlsSchema, GatewayTrustedProxySchema, GatewayWebchatConfigSchema, ImageGenerationCapabilitiesSchema, ImageGenerationModelSchema, ImageGenerationProviderSchema, McpConfigSchema, McpOAuthConfigSchema, McpServerSchema, MediaUnderstandingCapabilitiesSchema, MediaUnderstandingModelSchema, MessagesConfigSchema, ModelCatalogConfigSchema, ModelOverrideSchema, ModelsDevConfigSchema, ModelsJsonSchema, OpenAICompatSchema, OpenAICompletionsCompatSchema, OpenAIResponsesCompatSchema, OpenRouterRoutingSchema, ProfileManager, ProviderAuthConfigSchema, ProviderAzureConfigSchema, ProviderConfigSchema, ProviderRequestOverridesSchema, ProvidersConfigSchema, RuntimeToolsConfigSchema, STTConfigSchema, STTFallbackConfigSchema, STTProviderConfigSchema, SearchProviderEntrySchema, SessionConfigSchema, SessionDmScopeSchema, SessionResetByTypeSchema, SessionResetConfigSchema, SessionResetModeSchema, SessionScopeSchema, SessionStorageConfigSchema, TTSConfigSchema, TTSEdgeConfigSchema, TTSFallbackConfigSchema, TTSModelOverridesConfigSchema, TTSProviderConfigSchema, TTSSummarizationConfigSchema, TelegramAccountConfigSchema, TelegramConfigSchema, TelegramGroupConfigSchema, TelegramTopicConfigSchema, ToolsConfigSchema, ToolsMediaAudioConfigSchema, ToolsMediaConfigSchema, TunnelConfigSchema, TunnelConsentSchema, UpdateAutoConfigSchema, UpdateConfigSchema, VercelGatewayRoutingSchema, VoiceConfigSchema, VoiceRefinementConfigSchema, WORKSPACE_FILES, WebSearchConfigSchema, WebToolsConfigSchema, WebsiteBlocklistSchema, WeixinAccountConfigSchema, WeixinConfigSchema, WorkspaceConfigSchema, WorkspaceImportConfigSchema, XOPC_DB_FILENAME, applyConfigOverrides, assertConfigRewriteSafeForRunningGateway, buildReloadPlan, canonicalizeConfiguredMcpServer, clearConfigValueCache, createProfile, deleteProfile, diffConfigPaths, existsSync, expandWorkspacePathString, extractProfileAgentId, formatThinkingLevels, getAgentDefaultImageGenerationModelConfig, getAgentDefaultImageModelConfig, getAgentDefaultModelRef, getAllowedCommands, getCacheStats, getConfigOverrides, getCurrentProfile, getDefaultModelValues, resolveModelsJsonPath as getModelsJsonPath, getProfileManager, getProfileNameFromDir, getSwitchCommand, getWorkspacePath, hasBundledExtensionManifest, listAgentProfileMarkdownDirs, listAgentWorkspaceDirs, listProfiles, listThinkingLevels, loadConfig, loadModelsJson, matchReloadRule, modelsJsonExists, normalizeConfiguredMcpServers, normalizeElevatedMode, normalizeReasoningLevel, normalizeThinkLevel, normalizeVerboseLevel, normalizeWorkspaceDir, parseModelRef, resetConfigOverrides, resolveAgentAuthProfilesPath, resolveAgentDir, resolveAgentHomeDir, resolveAgentProfileDir, resolveAgentProfileMarkdownPath, resolveAgentWorkspaceDir, resolveAuthProfilesPath, resolveBinDir, resolveBundledExtensionsDir, resolveBundledSkillsDir, resolveConfigPath, resolveConfigValue, resolveCredentialsDir, resolveDefaultAgentWorkspaceDir, resolveEffectiveAgentConfigForAgent, resolveEffectiveAgentConfigForSession, resolveEffectiveAgentProfile, resolveEffectiveAgentProfileForSession, resolveExtensionSdkPath, resolveExtensionsDir, resolveExtensionsLockPath, resolveHeaders, resolveHomeDir, resolveInboxDir, resolveInboxMessagePath, resolveInboxPendingDir, resolveInboxProcessedDir, resolveLogPath, resolveLogsDir, resolveModelsJsonPath, resolveNodeBinDir, resolveNodeBinPath, resolveNodeToolsDir, resolveNpmBinPath, resolveOAuthPath, resolvePidPath, resolveProfileStateDir, resolveSkillPath, resolveSkillsCachePath, resolveSkillsDir, resolveSkillsLockPath, resolveSocketPath, resolveStateDir, resolveStatusPath, resolveToolsDir, resolveWorkspaceExtensionsDir, resolveWorkspaceFile, resolveWorkspaceRoot, resolveWorkspaceStateDir, resolveWorkspaceStatePath, resolveXopcBinPath, resolveXopcCloudCatalogCachePath, resolveXopcDatabasePath, saveConfig, saveModelsJson, setConfigOverride, testApiKeyResolution, thinkLevelToNumber, unsetConfigOverride, validateModelsConfig };

package/dist/src/config/mcp-config-normalize.d.ts

@@ -1,6 +1,3 @@
 export type ConfigMcpServers = Record<string, Record<string, unknown>>;
-export type XopcMcpHttpTransport = 'sse' | 'streamable-http';
-export declare function resolveXopcMcpTransportAlias(value: unknown): XopcMcpHttpTransport | undefined;
-export declare function isKnownCliMcpTypeAlias(value: unknown): boolean;
 export declare function canonicalizeConfiguredMcpServer(server: Record<string, unknown>): Record<string, unknown>;
 export declare function normalizeConfiguredMcpServers(value: unknown): ConfigMcpServers;

package/dist/src/config/mcp-config-normalize.js

@@ -1,31 +1,11 @@
 import { isRecord } from "../utils/is-record.js";
 //#region src/config/mcp-config-normalize.ts
-const CLI_MCP_TYPE_TO_XOPC_TRANSPORT = {
-	http: "streamable-http",
-	"streamable-http": "streamable-http",
-	sse: "sse",
-	stdio: "stdio"
-};
-function normalizeMcpString(value) {
-	return typeof value === "string" ? value.trim().toLowerCase() : "";
-}
-function resolveXopcMcpTransportAlias(value) {
-	const mapped = CLI_MCP_TYPE_TO_XOPC_TRANSPORT[normalizeMcpString(value)];
-	return mapped === "sse" || mapped === "streamable-http" ? mapped : void 0;
-}
-function isKnownCliMcpTypeAlias(value) {
-	return Object.hasOwn(CLI_MCP_TYPE_TO_XOPC_TRANSPORT, normalizeMcpString(value));
-}
 function canonicalizeConfiguredMcpServer(server) {
-	const next = { ...server };
-	const transportAlias = resolveXopcMcpTransportAlias(next.type);
-	if (typeof next.transport !== "string" && transportAlias) next.transport = transportAlias;
-	if (isKnownCliMcpTypeAlias(next.type)) delete next.type;
-	return next;
+	return { ...server };
 }
 function normalizeConfiguredMcpServers(value) {
 	if (!isRecord(value)) return {};
 	return Object.fromEntries(Object.entries(value).filter(([, server]) => isRecord(server)).map(([name, server]) => [name, { ...server }]));
 }
 //#endregion
-export { canonicalizeConfiguredMcpServer, isKnownCliMcpTypeAlias, normalizeConfiguredMcpServers, resolveXopcMcpTransportAlias };
+export { canonicalizeConfiguredMcpServer, normalizeConfiguredMcpServers };

package/dist/src/config/models-json.d.ts

@@ -377,7 +377,6 @@ export declare const CustomModelSchema: z.ZodObject<{
         "openai-completions": "openai-completions";
         "openai-responses": "openai-responses";
         "azure-openai-responses": "azure-openai-responses";
-        "openai-codex-responses": "openai-codex-responses";
         "anthropic-messages": "anthropic-messages";
         "bedrock-converse-stream": "bedrock-converse-stream";
         "google-generative-ai": "google-generative-ai";
@@ -522,7 +521,6 @@ export declare const ProviderConfigSchema: z.ZodObject<{
         "openai-completions": "openai-completions";
         "openai-responses": "openai-responses";
         "azure-openai-responses": "azure-openai-responses";
-        "openai-codex-responses": "openai-codex-responses";
         "anthropic-messages": "anthropic-messages";
         "bedrock-converse-stream": "bedrock-converse-stream";
         "google-generative-ai": "google-generative-ai";
@@ -545,7 +543,6 @@ export declare const ProviderConfigSchema: z.ZodObject<{
             "openai-completions": "openai-completions";
             "openai-responses": "openai-responses";
             "azure-openai-responses": "azure-openai-responses";
-            "openai-codex-responses": "openai-codex-responses";
             "anthropic-messages": "anthropic-messages";
             "bedrock-converse-stream": "bedrock-converse-stream";
             "google-generative-ai": "google-generative-ai";
@@ -805,7 +802,6 @@ export declare const ModelsJsonSchema: z.ZodObject<{
             "openai-completions": "openai-completions";
             "openai-responses": "openai-responses";
             "azure-openai-responses": "azure-openai-responses";
-            "openai-codex-responses": "openai-codex-responses";
             "anthropic-messages": "anthropic-messages";
             "bedrock-converse-stream": "bedrock-converse-stream";
             "google-generative-ai": "google-generative-ai";
@@ -828,7 +824,6 @@ export declare const ModelsJsonSchema: z.ZodObject<{
                 "openai-completions": "openai-completions";
                 "openai-responses": "openai-responses";
                 "azure-openai-responses": "azure-openai-responses";
-                "openai-codex-responses": "openai-codex-responses";
                 "anthropic-messages": "anthropic-messages";
                 "bedrock-converse-stream": "bedrock-converse-stream";
                 "google-generative-ai": "google-generative-ai";

package/dist/src/config/models-json.js

@@ -1,6 +1,7 @@
 import { __esmMin } from "../../_virtual/_rolldown/runtime.js";
 import { init_write_file_atomic, writeTextAtomicSync } from "../infra/write-file-atomic.js";
 import { init_paths, resolveModelsJsonPath } from "./paths.js";
+import { assertCurrentModelProvider, init_provider_policy } from "../providers/provider-policy.js";
 import { ComputerProfileSchema, init_src } from "../../packages/computer-control-contract/src/index.js";
 import { init_model_policy, isComputerModel } from "../computer/model-policy.js";
 import { existsSync, readFileSync } from "fs";
@@ -29,6 +30,16 @@ function validateModelsConfig(config) {
 	}
 	const data = result.data;
 	for (const [providerName, providerConfig] of Object.entries(data.providers)) {
+		try {
+			assertCurrentModelProvider(providerName);
+		} catch (error) {
+			errors.push({
+				path: `providers.${providerName}`,
+				message: error.message,
+				severity: "error"
+			});
+			continue;
+		}
 		if (providerName === "xopc-cloud") {
 			errors.push({
 				path: "providers.xopc-cloud",
@@ -230,6 +241,7 @@ var init_models_json = __esmMin((() => {
 	init_write_file_atomic();
 	init_paths();
 	init_model_policy();
+	init_provider_policy();
 	OpenRouterRoutingSchema = z.object({
 		only: z.array(z.string()).optional(),
 		order: z.array(z.string()).optional()
@@ -370,7 +382,6 @@ var init_models_json = __esmMin((() => {
 			"google-generative-ai",
 			"azure-openai-responses",
 			"bedrock-converse-stream",
-			"openai-codex-responses",
 			"google-gemini-cli",
 			"google-vertex"
 		]).optional(),
@@ -431,7 +442,6 @@ var init_models_json = __esmMin((() => {
 			"google-generative-ai",
 			"azure-openai-responses",
 			"bedrock-converse-stream",
-			"openai-codex-responses",
 			"google-gemini-cli",
 			"google-vertex"
 		]).optional(),
@@ -447,7 +457,7 @@ var init_models_json = __esmMin((() => {
 	RESERVED_PROVIDER_IDS = new Set([
 		"amazon-bedrock",
 		"anthropic",
-		"azure-openai-responses",
+		"azure",
 		"cerebras",
 		"cloudflare-ai-gateway",
 		"cloudflare-workers-ai",
@@ -469,7 +479,6 @@ var init_models_json = __esmMin((() => {
 		"moonshotai",
 		"moonshotai-cn",
 		"openai",
-		"openai-codex",
 		"opencode",
 		"opencode-go",
 		"openrouter",

package/dist/src/config/paths.d.ts

@@ -39,7 +39,6 @@ export declare function resolveAuthProfilesPath(): string;
  */
 export declare function resolveOAuthPath(provider: string): string;
 /** Resolve the credential record for one canonical remote MCP endpoint. */
-export declare function resolveMcpOAuthPath(serverKey: string): string;
 /**
  * Internal agent state dir: `stateDir/agents/<id>/agent/`
  * (credentials, inbox IPC, pid, agent.json — not the Markdown workspace).

package/dist/src/config/paths.js

@@ -31,9 +31,6 @@ function resolveOAuthPath(provider) {
 	return join(resolveCredentialsDir(), "oauth", `${provider}.json`);
 }
 /** Resolve the credential record for one canonical remote MCP endpoint. */
-function resolveMcpOAuthPath(serverKey) {
-	return join(resolveCredentialsDir(), "mcp", `${serverKey}.json`);
-}
 /**
 * Internal agent state dir: `stateDir/agents/<id>/agent/`
 * (credentials, inbox IPC, pid, agent.json — not the Markdown workspace).
@@ -322,4 +319,4 @@ var init_paths = __esmMin((() => {
 }));
 //#endregion
 init_paths();
-export { ENV_VARS, FILENAMES, WORKSPACE_FILES, XOPC_DB_FILENAME, existsSync, hasBundledExtensionManifest, init_paths, resolveAgentAuthProfilesPath, resolveAgentDir, resolveAgentHomeDir, resolveAgentProfileDir, resolveAgentProfileMarkdownPath, resolveAgentWorkspaceDir, resolveAuthProfilesPath, resolveBinDir, resolveBundledExtensionsDir, resolveBundledSkillsDir, resolveConfigPath, resolveCredentialsDir, resolveDefaultAgentWorkspaceDir, resolveExtensionSdkPath, resolveExtensionsDir, resolveExtensionsLockPath, resolveHomeDir, resolveInboxDir, resolveInboxMessagePath, resolveInboxPendingDir, resolveInboxProcessedDir, resolveLogPath, resolveLogsDir, resolveMcpOAuthPath, resolveModelsJsonPath, resolveNodeBinDir, resolveNodeBinPath, resolveNodeToolsDir, resolveNpmBinPath, resolveOAuthPath, resolvePidPath, resolveSkillPath, resolveSkillsCachePath, resolveSkillsDir, resolveSkillsLockPath, resolveSocketPath, resolveStateDir, resolveStatusPath, resolveToolsDir, resolveWorkspaceExtensionsDir, resolveWorkspaceFile, resolveWorkspaceStateDir, resolveWorkspaceStatePath, resolveXopcBinPath, resolveXopcCloudCatalogCachePath, resolveXopcDatabasePath };
+export { ENV_VARS, FILENAMES, WORKSPACE_FILES, XOPC_DB_FILENAME, existsSync, hasBundledExtensionManifest, init_paths, resolveAgentAuthProfilesPath, resolveAgentDir, resolveAgentHomeDir, resolveAgentProfileDir, resolveAgentProfileMarkdownPath, resolveAgentWorkspaceDir, resolveAuthProfilesPath, resolveBinDir, resolveBundledExtensionsDir, resolveBundledSkillsDir, resolveConfigPath, resolveCredentialsDir, resolveDefaultAgentWorkspaceDir, resolveExtensionSdkPath, resolveExtensionsDir, resolveExtensionsLockPath, resolveHomeDir, resolveInboxDir, resolveInboxMessagePath, resolveInboxPendingDir, resolveInboxProcessedDir, resolveLogPath, resolveLogsDir, resolveModelsJsonPath, resolveNodeBinDir, resolveNodeBinPath, resolveNodeToolsDir, resolveNpmBinPath, resolveOAuthPath, resolvePidPath, resolveSkillPath, resolveSkillsCachePath, resolveSkillsDir, resolveSkillsLockPath, resolveSocketPath, resolveStateDir, resolveStatusPath, resolveToolsDir, resolveWorkspaceExtensionsDir, resolveWorkspaceFile, resolveWorkspaceStateDir, resolveWorkspaceStatePath, resolveXopcBinPath, resolveXopcCloudCatalogCachePath, resolveXopcDatabasePath };