@xopcai/xopc 0.0.369 → 0.0.370

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (384) hide show
  1. package/README.md +59 -174
  2. package/README.zh-CN.md +59 -174
  3. package/dist/.pnpm/@noble_hashes@1.8.0/node_modules/@noble/hashes/esm/_md.js +131 -0
  4. package/dist/.pnpm/@noble_hashes@1.8.0/node_modules/@noble/hashes/esm/_u64.js +30 -0
  5. package/dist/.pnpm/@noble_hashes@1.8.0/node_modules/@noble/hashes/esm/sha2.js +252 -0
  6. package/dist/.pnpm/@noble_hashes@1.8.0/node_modules/@noble/hashes/esm/sha256.js +16 -0
  7. package/dist/.pnpm/@noble_hashes@1.8.0/node_modules/@noble/hashes/esm/utils.js +66 -0
  8. package/dist/browser-ext/dist/sidepanel.js +21 -1
  9. package/dist/browser-ext/manifest.json +1 -1
  10. package/dist/extensions/telegram/xopc.extension.json +1 -1
  11. package/dist/gateway/static/root/assets/{agent-avatar-dicebear-Stj17S9u.js → agent-avatar-dicebear-C61i1QbX.js} +1 -1
  12. package/dist/gateway/static/root/assets/agent-defaults-settings-panel-0fCR1DHx.js +1 -0
  13. package/dist/gateway/static/root/assets/agent-plugin-dialog-Di99mUTT.js +1 -0
  14. package/dist/gateway/static/root/assets/agents-BRZZmYH_.js +66 -0
  15. package/dist/gateway/static/root/assets/{app-management-settings-panel-pJFe6M6c.js → app-management-settings-panel-noqqxkds.js} +1 -1
  16. package/dist/gateway/static/root/assets/{appearance-settings-BrxSpBWa.js → appearance-settings-DG8QN0gR.js} +1 -1
  17. package/dist/gateway/static/root/assets/{apps-page-DegSl5Lh.js → apps-page-CgiyzFYo.js} +1 -1
  18. package/dist/gateway/static/root/assets/{automations-page-BZQ_VHjp.js → automations-page-CgAcRFDS.js} +1 -1
  19. package/dist/gateway/static/root/assets/automations-workspace-BIkxIpab.js +6 -0
  20. package/dist/gateway/static/root/assets/{block-editor-3XjFv3kK.js → block-editor-B1VE-jAe.js} +3 -3
  21. package/dist/gateway/static/root/assets/browser-automations-page-CIjyMS6f.js +3 -0
  22. package/dist/gateway/static/root/assets/{browser-settings-page-ch2_bQF0.js → browser-settings-page-BMAivBfp.js} +2 -2
  23. package/dist/gateway/static/root/assets/{capabilities-DO-vfNKI.js → capabilities-CY4SiHcP.js} +1 -1
  24. package/dist/gateway/static/root/assets/{capabilities-B48r0DDa.js → capabilities-gjQtMhKu.js} +1 -1
  25. package/dist/gateway/static/root/assets/capabilities-page-DRdcfo68.js +2 -0
  26. package/dist/gateway/static/root/assets/{capabilities-settings-panel-NckMsJ5N.js → capabilities-settings-panel-ZuL6pWjM.js} +4 -4
  27. package/dist/gateway/static/root/assets/{capability-header-actions-CY8KCO9j.js → capability-header-actions-D0GC1FEv.js} +1 -1
  28. package/dist/gateway/static/root/assets/{channels-CHOS2CGa.js → channels-CgE22Pzd.js} +1 -1
  29. package/dist/gateway/static/root/assets/{chat-terminal-dock-Bwknnb4c.js → chat-terminal-dock-CEjh1utz.js} +2 -2
  30. package/dist/gateway/static/root/assets/{computer-settings-page-B2xeFCSt.js → computer-settings-page-vFHJAmQr.js} +1 -1
  31. package/dist/gateway/static/root/assets/{connector-service-page-C83DnAqK.js → connector-service-page-DTrwZ4kV.js} +1 -1
  32. package/dist/gateway/static/root/assets/connectors-page-DRcMiTWu.js +1 -0
  33. package/dist/gateway/static/root/assets/copy-text-row-C1gaJwlZ.js +1 -0
  34. package/dist/gateway/static/root/assets/{date-picker-Bq9GR-DU.js → date-picker-NfGIPSYY.js} +1 -1
  35. package/dist/gateway/static/root/assets/dependency-picker-CqguveUi.js +1 -0
  36. package/dist/gateway/static/root/assets/{desktop-pet-BwsbQw8V.js → desktop-pet-CTx1zkJm.js} +1 -1
  37. package/dist/gateway/static/root/assets/{desktop-pet-settings-sL9i44pP.js → desktop-pet-settings-BRDS3EGc.js} +1 -1
  38. package/dist/gateway/static/root/assets/device-pairing-wizard-Du4Ciuyw.js +1 -0
  39. package/dist/gateway/static/root/assets/{directory-picker-path-field-BFlDmsS5.js → directory-picker-path-field-CjstlxFl.js} +1 -1
  40. package/dist/gateway/static/root/assets/{extension-debug-page-7Z1Tp7-w.js → extension-debug-page-BfAtjhoK.js} +1 -1
  41. package/dist/gateway/static/root/assets/{extension-page-uGqvb8QX.js → extension-page-BJmudejr.js} +1 -1
  42. package/dist/gateway/static/root/assets/{extension-provider-xlSyz4Z6.js → extension-provider-Br6LXyIj.js} +1 -1
  43. package/dist/gateway/static/root/assets/{extension-settings-page-CKHgrjOs.js → extension-settings-page-UvmHniyz.js} +1 -1
  44. package/dist/gateway/static/root/assets/{fallback-models-BwQg0G1D.js → fallback-models-euw9MGdt.js} +1 -1
  45. package/dist/gateway/static/root/assets/gateway-realtime-F6D4A7N5.js +1 -0
  46. package/dist/gateway/static/root/assets/{gateway-settings-BAQnSEMJ.js → gateway-settings-C7roPHh1.js} +1 -1
  47. package/dist/gateway/static/root/assets/home-page-BGNCTtM3.js +2 -0
  48. package/dist/gateway/static/root/assets/{imports-page-re1_Nh64.js → imports-page-DxCoT0VV.js} +1 -1
  49. package/dist/gateway/static/root/assets/index-BGBkIIzM.css +1 -0
  50. package/dist/gateway/static/root/assets/index-FCEE325-.js +106 -0
  51. package/dist/gateway/static/root/assets/{keyboard-shortcuts-settings-B_xja9LN.js → keyboard-shortcuts-settings-CnLln9Ds.js} +1 -1
  52. package/dist/gateway/static/root/assets/{local-app-workbench-page-CErdCrPX.js → local-app-workbench-page-yXRkSrEj.js} +1 -1
  53. package/dist/gateway/static/root/assets/{local-apps-page-BPL2RXdK.js → local-apps-page-D46buzTk.js} +1 -1
  54. package/dist/gateway/static/root/assets/local-session-drafts-pox8evDV.js +1 -0
  55. package/dist/gateway/static/root/assets/logs-page-DmcCHnH0.js +2 -0
  56. package/dist/gateway/static/root/assets/management-settings-khN1ThNL.js +1 -0
  57. package/dist/gateway/static/root/assets/note-detail-panel-C_t58yha.js +5 -0
  58. package/dist/gateway/static/root/assets/notes-page-BJ0QS6xx.js +8 -0
  59. package/dist/gateway/static/root/assets/{page-context-capture-button-tf77xIz3.js → page-context-capture-button-DfRODHv1.js} +1 -1
  60. package/dist/gateway/static/root/assets/personal-page-CiiXwwQE.js +1 -0
  61. package/dist/gateway/static/root/assets/{product-open-page-Dc3Y-Y7J.js → product-open-page-_Bp6HRmm.js} +1 -1
  62. package/dist/gateway/static/root/assets/{product-preview-content-MG_hmVA3.js → product-preview-content-BUdiO0Ct.js} +1 -1
  63. package/dist/gateway/static/root/assets/project-detail-page-Clb-fXYk.js +1 -0
  64. package/dist/gateway/static/root/assets/{projects-page-MllfNLGA.js → projects-page-D9JEEqhh.js} +1 -1
  65. package/dist/gateway/static/root/assets/{remote-access-hub-Bs-C70el.js → remote-access-hub-CmyTq3_l.js} +1 -1
  66. package/dist/gateway/static/root/assets/{runtime-tools-settings-panel-DpJ5jNzR.js → runtime-tools-settings-panel-B1_inj8L.js} +1 -1
  67. package/dist/gateway/static/root/assets/{scenes-page-Dpxamkw6.js → scenes-page-CUNAZN2_.js} +2 -2
  68. package/dist/gateway/static/root/assets/{schema-form-DUeyQ1zh.js → schema-form-CfT-9UVw.js} +1 -1
  69. package/dist/gateway/static/root/assets/{send-session-input-Dgn4BRk_.js → send-session-input-BW40VHiL.js} +1 -1
  70. package/dist/gateway/static/root/assets/session-manager-BqlvrjPE.js +16 -0
  71. package/dist/gateway/static/root/assets/sessions-page-CXZKScvu.js +1 -0
  72. package/dist/gateway/static/root/assets/settings-advanced-gate-B2vKXmzg.js +1 -0
  73. package/dist/gateway/static/root/assets/{settings-page-DouHuBXt.js → settings-page-1h3vyueg.js} +1 -1
  74. package/dist/gateway/static/root/assets/setup-status-panel-Cqc7UlZy.js +1 -0
  75. package/dist/gateway/static/root/assets/{share-link-dialog-DJTabLAM.js → share-link-dialog-HCHM8qnf.js} +1 -1
  76. package/dist/gateway/static/root/assets/{share-preview-page-jw7h4t_B.js → share-preview-page-Ce6FNWt1.js} +1 -1
  77. package/dist/gateway/static/root/assets/shares-settings-Dh5jisCK.js +1 -0
  78. package/dist/gateway/static/root/assets/{skill-api-CfyX_0zN.js → skill-api-deDZeQS8.js} +1 -1
  79. package/dist/gateway/static/root/assets/skills-page-DZozl9U_.js +2 -0
  80. package/dist/gateway/static/root/assets/{system-settings-panel-DWf256TE.js → system-settings-panel-CtzyMxqq.js} +1 -1
  81. package/dist/gateway/static/root/assets/{task-detail-page-DE6N1ZQe.js → task-detail-page-5f_V0h-p.js} +2 -2
  82. package/dist/gateway/static/root/assets/{tunnel-api-BBm9esrY.js → tunnel-api-vMtlbJ-m.js} +1 -1
  83. package/dist/gateway/static/root/assets/{usage-page-C93x89uW.js → usage-page-B1-BCW8U.js} +1 -1
  84. package/dist/gateway/static/root/assets/{use-composer-attachments-C7Gaaai1.js → use-composer-attachments-DJya1hIL.js} +1 -1
  85. package/dist/gateway/static/root/assets/use-file-preview-expanded-C5ONO7sF.js +2 -0
  86. package/dist/gateway/static/root/assets/user-model-page-D4BSq9HJ.js +2 -0
  87. package/dist/gateway/static/root/assets/{work-discovery-overlay-Bs2MKiTv.js → work-discovery-overlay-CjiNYJV5.js} +1 -1
  88. package/dist/gateway/static/root/assets/{workflow-run-setup-panel-BR_U_snV.js → workflow-run-setup-panel-DJOetXvm.js} +2 -2
  89. package/dist/gateway/static/root/assets/workflows-page-CcAPFh2R.js +6 -0
  90. package/dist/gateway/static/root/assets/{workspace-api-Si2o3inw.js → workspace-api-WhbMvdBE.js} +2 -2
  91. package/dist/gateway/static/root/index.html +18 -20
  92. package/dist/package.js +1 -1
  93. package/dist/packages/endpoint-tools-client/src/index.js +189 -0
  94. package/dist/packages/endpoint-tools-protocol/src/bridge.js +105 -0
  95. package/dist/packages/endpoint-tools-protocol/src/index.js +93 -2
  96. package/dist/packages/endpoint-tools-protocol/src/location.js +109 -0
  97. package/dist/packages/gateway-contract/src/session-input-command.js +30 -5
  98. package/dist/src/agent/agent-manager.js +22 -26
  99. package/dist/src/agent/embedded/codemode-extension.d.ts +7 -0
  100. package/dist/src/agent/embedded/codemode-extension.js +232 -0
  101. package/dist/src/agent/embedded/codemode-output.d.ts +2 -0
  102. package/dist/src/agent/embedded/codemode-output.js +34 -0
  103. package/dist/src/agent/embedded/external-tool-discovery.d.ts +6 -0
  104. package/dist/src/agent/embedded/external-tool-discovery.js +60 -0
  105. package/dist/src/agent/embedded/model-runtime.js +5 -2
  106. package/dist/src/agent/embedded/run-for-session.js +10 -1
  107. package/dist/src/agent/embedded/run-turn.js +10 -3
  108. package/dist/src/agent/embedded/session-runner.d.ts +9 -1
  109. package/dist/src/agent/embedded/session-runner.js +111 -23
  110. package/dist/src/agent/embedded/session-tool-result-guard.d.ts +2 -0
  111. package/dist/src/agent/embedded/session-tool-result-guard.js +17 -0
  112. package/dist/src/agent/embedded/subscribe-session.js +14 -4
  113. package/dist/src/agent/embedded/tool-metadata.d.ts +15 -0
  114. package/dist/src/agent/embedded/tool-metadata.js +38 -0
  115. package/dist/src/agent/embedded/tool-search-extension.d.ts +5 -0
  116. package/dist/src/agent/embedded/tool-search-extension.js +31 -0
  117. package/dist/src/agent/embedded/types.d.ts +7 -0
  118. package/dist/src/agent/embedded/xopc-tools-bridge.js +6 -0
  119. package/dist/src/agent/external-tools/endpoint-provider.d.ts +1 -1
  120. package/dist/src/agent/external-tools/endpoint-provider.js +148 -56
  121. package/dist/src/agent/external-tools/extension-provider.js +8 -1
  122. package/dist/src/agent/external-tools/gateway-tools.d.ts +1 -1
  123. package/dist/src/agent/external-tools/gateway-tools.js +45 -22
  124. package/dist/src/agent/external-tools/index.js +46 -14
  125. package/dist/src/agent/external-tools/memory-provider.js +8 -1
  126. package/dist/src/agent/external-tools/read-policy.js +2 -1
  127. package/dist/src/agent/external-tools/service.d.ts +2 -0
  128. package/dist/src/agent/external-tools/service.js +25 -3
  129. package/dist/src/agent/external-tools/tool-registry.d.ts +14 -0
  130. package/dist/src/agent/external-tools/tool-registry.js +14 -0
  131. package/dist/src/agent/external-tools/types.d.ts +8 -1
  132. package/dist/src/agent/external-tools/types.js +0 -1
  133. package/dist/src/agent/mcp/config.d.ts +18 -0
  134. package/dist/src/agent/mcp/{bundle-mcp-config.js → config.js} +8 -25
  135. package/dist/src/agent/mcp/native-mcp.d.ts +6 -0
  136. package/dist/src/agent/mcp/native-mcp.js +73 -0
  137. package/dist/src/agent/service.js +2 -5
  138. package/dist/src/agent/skills/installer.js +1 -1
  139. package/dist/src/agent/skills/skill-manager.js +1 -1
  140. package/dist/src/agent/skills/skill-sources.js +1 -1
  141. package/dist/src/agent/source-context/index.d.ts +0 -1
  142. package/dist/src/agent/source-context/index.js +1 -2
  143. package/dist/src/agent/source-context/injector.js +1 -0
  144. package/dist/src/agent/source-context/types.d.ts +2 -2
  145. package/dist/src/agent/source-context/types.js +1 -1
  146. package/dist/src/agent/tools/cli-clarify.js +1 -1
  147. package/dist/src/agent/tools/codemode-permissions.d.ts +4 -0
  148. package/dist/src/agent/tools/codemode-permissions.js +23 -0
  149. package/dist/src/agent/tools/dataBatch.js +3 -1
  150. package/dist/src/agent/tools/delegation-parent-policy.js +1 -4
  151. package/dist/src/agent/tools/factory.js +4 -3
  152. package/dist/src/agent/transcript/provider-capabilities.js +0 -1
  153. package/dist/src/agent/transcript/transcript-policy.js +1 -2
  154. package/dist/src/agent-config/schema.d.ts +28 -0
  155. package/dist/src/agent-config/schema.js +7 -0
  156. package/dist/src/auth/credentials.js +7 -20
  157. package/dist/src/auth/model-credential-store.js +11 -4
  158. package/dist/src/auth/oauth/index.d.ts +1 -1
  159. package/dist/src/auth/oauth/index.js +3 -3
  160. package/dist/src/auth/oauth/openai.d.ts +2 -0
  161. package/dist/src/auth/oauth/openai.js +90 -0
  162. package/dist/src/auth/oauth/registry.js +3 -3
  163. package/dist/src/auth/oauth/types.d.ts +1 -0
  164. package/dist/src/auth/oauth/xopc-cloud.js +1 -1
  165. package/dist/src/auth/sync-provider-auth.js +5 -0
  166. package/dist/src/chat-commands/builtins/model.js +2 -2
  167. package/dist/src/cli/command-manifest.js +1 -1
  168. package/dist/src/cli/commands/doctor/checks/database-schema.js +1 -1
  169. package/dist/src/cli/commands/extension-agent-plugin.js +0 -19
  170. package/dist/src/cli/commands/mcp.js +36 -2
  171. package/dist/src/cli/commands/models.js +1 -1
  172. package/dist/src/cli/utils/oauth-login.js +2 -2
  173. package/dist/src/config/index.js +3 -3
  174. package/dist/src/config/mcp-config-normalize.d.ts +0 -3
  175. package/dist/src/config/mcp-config-normalize.js +2 -22
  176. package/dist/src/config/models-json.d.ts +0 -5
  177. package/dist/src/config/models-json.js +13 -4
  178. package/dist/src/config/paths.d.ts +0 -1
  179. package/dist/src/config/paths.js +1 -4
  180. package/dist/src/config/schema.d.ts +130 -36
  181. package/dist/src/config/schema.js +52 -35
  182. package/dist/src/connectors/auth-provider-registry.d.ts +1 -1
  183. package/dist/src/connectors/auth-provider-registry.js +1 -21
  184. package/dist/src/connectors/china-catalog.js +5 -5
  185. package/dist/src/connectors/connection-recovery-service.d.ts +1 -6
  186. package/dist/src/connectors/connection-recovery-service.js +3 -105
  187. package/dist/src/connectors/health.d.ts +1 -2
  188. package/dist/src/connectors/health.js +2 -101
  189. package/dist/src/connectors/types.d.ts +1 -1
  190. package/dist/src/endpoint-tools/binding-service.d.ts +2 -0
  191. package/dist/src/endpoint-tools/binding-service.js +14 -2
  192. package/dist/src/endpoint-tools/bridge-host.d.ts +15 -0
  193. package/dist/src/endpoint-tools/bridge-host.js +166 -0
  194. package/dist/src/endpoint-tools/bridge.d.ts +27 -0
  195. package/dist/src/endpoint-tools/bridge.js +88 -0
  196. package/dist/src/endpoint-tools/capability-catalog.d.ts +2 -0
  197. package/dist/src/endpoint-tools/capability-catalog.js +8 -0
  198. package/dist/src/endpoint-tools/grant-service.d.ts +69 -0
  199. package/dist/src/endpoint-tools/grant-service.js +113 -0
  200. package/dist/src/endpoint-tools/index.js +1 -1
  201. package/dist/src/endpoint-tools/invocation-service.js +6 -2
  202. package/dist/src/endpoint-tools/location-task.d.ts +22 -0
  203. package/dist/src/endpoint-tools/location-task.js +114 -0
  204. package/dist/src/endpoint-tools/policy.js +16 -1
  205. package/dist/src/endpoint-tools/registry.d.ts +2 -0
  206. package/dist/src/endpoint-tools/registry.js +9 -0
  207. package/dist/src/endpoint-tools/result-projector.d.ts +15 -0
  208. package/dist/src/endpoint-tools/result-projector.js +31 -0
  209. package/dist/src/endpoint-tools/runtime.d.ts +2 -0
  210. package/dist/src/endpoint-tools/runtime.js +15 -2
  211. package/dist/src/endpoint-tools/target-resolver.d.ts +12 -0
  212. package/dist/src/endpoint-tools/target-resolver.js +27 -0
  213. package/dist/src/endpoint-tools/turn-context.d.ts +6 -0
  214. package/dist/src/endpoint-tools/turn-context.js +29 -0
  215. package/dist/src/extensions/agent-plugins/auth.d.ts +0 -2
  216. package/dist/src/extensions/agent-plugins/auth.js +2 -19
  217. package/dist/src/extensions/agent-plugins/credentials.js +3 -19
  218. package/dist/src/extensions/agent-plugins/inventory.d.ts +2 -2
  219. package/dist/src/extensions/agent-plugins/mcp-adapter.js +1 -5
  220. package/dist/src/extensions/agent-plugins/source-http-fetch.d.ts +2 -0
  221. package/dist/src/{agent/mcp/plugin-http-fetch.js → extensions/agent-plugins/source-http-fetch.js} +7 -7
  222. package/dist/src/extensions/agent-plugins/sources.js +2 -2
  223. package/dist/src/extensions/agent-plugins/store.js +1 -3
  224. package/dist/src/extensions/agent-plugins/validation.d.ts +0 -4
  225. package/dist/src/extensions/agent-plugins/validation.js +13 -20
  226. package/dist/src/gateway/agents-admin.d.ts +5 -0
  227. package/dist/src/gateway/agents-admin.js +56 -1
  228. package/dist/src/gateway/chat-stream/mapper.js +9 -0
  229. package/dist/src/gateway/chat-stream/protocol.d.ts +4 -4
  230. package/dist/src/gateway/hono/lib/config-payload.d.ts +9 -4
  231. package/dist/src/gateway/hono/lib/config-payload.js +2 -5
  232. package/dist/src/gateway/hono/oauth-async.js +9 -2
  233. package/dist/src/gateway/hono/routes/agent-plugins.js +4 -9
  234. package/dist/src/gateway/hono/routes/agents.js +4 -3
  235. package/dist/src/gateway/hono/routes/connection-waits.js +2 -5
  236. package/dist/src/gateway/hono/routes/connectors.js +5 -60
  237. package/dist/src/gateway/hono/routes/device-authorizations.d.ts +3 -0
  238. package/dist/src/gateway/hono/routes/device-authorizations.js +74 -0
  239. package/dist/src/gateway/hono/routes/endpoint-compatibility.js +7 -0
  240. package/dist/src/gateway/hono/routes/endpoint-tools.d.ts +1 -0
  241. package/dist/src/gateway/hono/routes/endpoint-tools.js +53 -3
  242. package/dist/src/gateway/hono/routes/lazy-bundles.js +17 -1
  243. package/dist/src/gateway/hono/routes/mcp.d.ts +1 -1
  244. package/dist/src/gateway/hono/routes/mcp.js +11 -237
  245. package/dist/src/gateway/hono/routes/session-command-handler.js +11 -1
  246. package/dist/src/gateway/hono/routes/session-input-handler.d.ts +8 -2
  247. package/dist/src/gateway/hono/routes/session-input-handler.js +25 -1
  248. package/dist/src/gateway/service/config-coordinator.js +2 -5
  249. package/dist/src/gateway/service/marketplace-service.js +2 -2
  250. package/dist/src/gateway/service/run-gateway-agent.js +13 -5
  251. package/dist/src/gateway/service/session-input-coordinator.d.ts +1 -1
  252. package/dist/src/gateway/service/session-input-coordinator.js +29 -9
  253. package/dist/src/gateway/service/sessions-api.js +0 -6
  254. package/dist/src/gateway/service.js +3 -12
  255. package/dist/src/gateway/session-reset-service.js +0 -6
  256. package/dist/src/imports/compatibility.js +12 -10
  257. package/dist/src/mcp/channel-bridge.js +1 -1
  258. package/dist/src/providers/env-keys.js +1 -1
  259. package/dist/src/providers/index.js +26 -24
  260. package/dist/src/providers/model-call.d.ts +0 -2
  261. package/dist/src/providers/model-call.js +2 -6
  262. package/dist/src/providers/model-registry.js +4 -2
  263. package/dist/src/providers/model-supplements.d.ts +3 -3
  264. package/dist/src/providers/model-supplements.js +6 -27
  265. package/dist/src/providers/presentation.js +3 -8
  266. package/dist/src/providers/prompt-cache-plan.js +1 -1
  267. package/dist/src/providers/provider-auth-service.d.ts +1 -1
  268. package/dist/src/providers/provider-auth-service.js +7 -2
  269. package/dist/src/providers/provider-policy.d.ts +3 -0
  270. package/dist/src/providers/provider-policy.js +14 -0
  271. package/dist/src/providers/register-runtime-providers.js +6 -1
  272. package/dist/src/realtime/runtime.js +1 -1
  273. package/dist/src/session/store.js +7 -1
  274. package/dist/src/session/transcript-events.d.ts +5 -0
  275. package/dist/src/session/transcript-events.js +1 -0
  276. package/dist/src/session/types.d.ts +2 -0
  277. package/dist/src/storage/sqlite/device-grant-audit-repository.d.ts +11 -0
  278. package/dist/src/storage/sqlite/device-grant-audit-repository.js +10 -0
  279. package/dist/src/storage/sqlite/endpoint-device-settings-repository.d.ts +7 -0
  280. package/dist/src/storage/sqlite/endpoint-device-settings-repository.js +17 -0
  281. package/dist/src/storage/sqlite/migrations/240_device_settings.sql +5 -0
  282. package/dist/src/storage/sqlite/migrations/241_device_grant_audit.sql +13 -0
  283. package/dist/src/storage/sqlite/migrations/runner.d.ts +1 -1
  284. package/dist/src/storage/sqlite/migrations/runner.js +3 -3
  285. package/dist/src/storage/sqlite/schema.js +1 -1
  286. package/dist/src/storage/sqlite/session-input-repository.d.ts +1 -0
  287. package/dist/src/storage/sqlite/session-input-repository.js +5 -1
  288. package/dist/src/tui/backends/gateway-realtime-backend.js +1 -1
  289. package/dist/src/tui/xopc-tui-keybindings.d.ts +4 -4
  290. package/package.json +19 -8
  291. package/dist/gateway/static/root/assets/agent-defaults-settings-panel-CCRfvuov.js +0 -1
  292. package/dist/gateway/static/root/assets/agent-plugin-dialog-CRlzd8El.js +0 -1
  293. package/dist/gateway/static/root/assets/agents-_ug2LCQb.js +0 -66
  294. package/dist/gateway/static/root/assets/automations-workspace-BQywN6nG.js +0 -6
  295. package/dist/gateway/static/root/assets/browser-automations-page-yiEuG1v7.js +0 -3
  296. package/dist/gateway/static/root/assets/capabilities-page-BEnFt_dj.js +0 -2
  297. package/dist/gateway/static/root/assets/connectors-page-D6wTmWA6.js +0 -2
  298. package/dist/gateway/static/root/assets/copy-text-row-BHDs3cBa.js +0 -1
  299. package/dist/gateway/static/root/assets/dependency-picker-BTERkA9X.js +0 -1
  300. package/dist/gateway/static/root/assets/device-pairing-wizard-DI2bqaKO.js +0 -1
  301. package/dist/gateway/static/root/assets/dist-Che_jiQF.js +0 -1
  302. package/dist/gateway/static/root/assets/gateway-realtime-DDWymi-o.js +0 -1
  303. package/dist/gateway/static/root/assets/home-page-BZDjvwet.js +0 -2
  304. package/dist/gateway/static/root/assets/index-BB1z8QxA.js +0 -106
  305. package/dist/gateway/static/root/assets/index-D9R6tU7r.css +0 -1
  306. package/dist/gateway/static/root/assets/link-2-D_ZKYUW7.js +0 -1
  307. package/dist/gateway/static/root/assets/local-session-drafts-DRPsDCj1.js +0 -1
  308. package/dist/gateway/static/root/assets/logs-page-DL-BM0xq.js +0 -2
  309. package/dist/gateway/static/root/assets/management-settings-BOVRHhXk.js +0 -1
  310. package/dist/gateway/static/root/assets/note-detail-panel-DJJK2yL4.js +0 -5
  311. package/dist/gateway/static/root/assets/notes-page-oCxO7ZTv.js +0 -8
  312. package/dist/gateway/static/root/assets/personal-page-DOk9gUK5.js +0 -1
  313. package/dist/gateway/static/root/assets/project-detail-page-3uAzbW4T.js +0 -1
  314. package/dist/gateway/static/root/assets/session-manager-LInoZ_Yi.js +0 -16
  315. package/dist/gateway/static/root/assets/sessions-page-BCVlNHtq.js +0 -1
  316. package/dist/gateway/static/root/assets/settings-advanced-gate-Bz-ue9fZ.js +0 -1
  317. package/dist/gateway/static/root/assets/setup-status-panel-B5BoZ-1y.js +0 -1
  318. package/dist/gateway/static/root/assets/shares-settings-BlnlzGjH.js +0 -1
  319. package/dist/gateway/static/root/assets/skills-page-DjdTeYzm.js +0 -2
  320. package/dist/gateway/static/root/assets/use-file-preview-expanded-Db2VYg1b.js +0 -2
  321. package/dist/gateway/static/root/assets/user-model-page-B74LkVbp.js +0 -2
  322. package/dist/gateway/static/root/assets/workflows-page-Crk4SxtC.js +0 -6
  323. package/dist/src/agent/embedded/system-prompt-override.d.ts +0 -2
  324. package/dist/src/agent/embedded/system-prompt-override.js +0 -21
  325. package/dist/src/agent/external-tools/mcp-provider.d.ts +0 -32
  326. package/dist/src/agent/external-tools/mcp-provider.js +0 -208
  327. package/dist/src/agent/mcp/bundle-mcp-config.d.ts +0 -20
  328. package/dist/src/agent/mcp/bundle-mcp-gateway.d.ts +0 -79
  329. package/dist/src/agent/mcp/bundle-mcp-gateway.js +0 -93
  330. package/dist/src/agent/mcp/bundle-mcp-names.d.ts +0 -1
  331. package/dist/src/agent/mcp/bundle-mcp-names.js +0 -25
  332. package/dist/src/agent/mcp/bundle-mcp-policy.d.ts +0 -1
  333. package/dist/src/agent/mcp/bundle-mcp-policy.js +0 -6
  334. package/dist/src/agent/mcp/bundle-mcp-runtime.d.ts +0 -46
  335. package/dist/src/agent/mcp/bundle-mcp-runtime.js +0 -571
  336. package/dist/src/agent/mcp/bundle-mcp-tools.d.ts +0 -2
  337. package/dist/src/agent/mcp/bundle-mcp-tools.js +0 -2
  338. package/dist/src/agent/mcp/bundle-mcp-types.d.ts +0 -76
  339. package/dist/src/agent/mcp/bundle-mcp-types.js +0 -1
  340. package/dist/src/agent/mcp/embedded-mcp.d.ts +0 -10
  341. package/dist/src/agent/mcp/embedded-mcp.js +0 -14
  342. package/dist/src/agent/mcp/index.d.ts +0 -5
  343. package/dist/src/agent/mcp/index.js +0 -12
  344. package/dist/src/agent/mcp/mcp-config-shared.d.ts +0 -8
  345. package/dist/src/agent/mcp/mcp-config-shared.js +0 -39
  346. package/dist/src/agent/mcp/mcp-http.d.ts +0 -23
  347. package/dist/src/agent/mcp/mcp-http.js +0 -67
  348. package/dist/src/agent/mcp/mcp-resource-id.d.ts +0 -6
  349. package/dist/src/agent/mcp/mcp-resource-id.js +0 -19
  350. package/dist/src/agent/mcp/mcp-stdio-transport.d.ts +0 -26
  351. package/dist/src/agent/mcp/mcp-stdio-transport.js +0 -120
  352. package/dist/src/agent/mcp/mcp-stdio.d.ts +0 -18
  353. package/dist/src/agent/mcp/mcp-stdio.js +0 -35
  354. package/dist/src/agent/mcp/mcp-transport-config.d.ts +0 -28
  355. package/dist/src/agent/mcp/mcp-transport-config.js +0 -91
  356. package/dist/src/agent/mcp/mcp-transport.d.ts +0 -17
  357. package/dist/src/agent/mcp/mcp-transport.js +0 -141
  358. package/dist/src/agent/mcp/oauth/index.d.ts +0 -6
  359. package/dist/src/agent/mcp/oauth/index.js +0 -6
  360. package/dist/src/agent/mcp/oauth/mcp-oauth-errors.d.ts +0 -5
  361. package/dist/src/agent/mcp/oauth/mcp-oauth-errors.js +0 -14
  362. package/dist/src/agent/mcp/oauth/mcp-oauth-manager.d.ts +0 -30
  363. package/dist/src/agent/mcp/oauth/mcp-oauth-manager.js +0 -276
  364. package/dist/src/agent/mcp/oauth/mcp-oauth-provider.d.ts +0 -33
  365. package/dist/src/agent/mcp/oauth/mcp-oauth-provider.js +0 -103
  366. package/dist/src/agent/mcp/oauth/mcp-oauth-session.d.ts +0 -31
  367. package/dist/src/agent/mcp/oauth/mcp-oauth-session.js +0 -181
  368. package/dist/src/agent/mcp/oauth/mcp-oauth-store.d.ts +0 -12
  369. package/dist/src/agent/mcp/oauth/mcp-oauth-store.js +0 -91
  370. package/dist/src/agent/mcp/oauth/mcp-oauth-types.d.ts +0 -22
  371. package/dist/src/agent/mcp/oauth/mcp-oauth-types.js +0 -1
  372. package/dist/src/agent/mcp/plugin-http-fetch.d.ts +0 -2
  373. package/dist/src/agent/source-context/mcp-resource-context.d.ts +0 -8
  374. package/dist/src/agent/source-context/mcp-resource-context.js +0 -30
  375. package/dist/src/auth/oauth/openai-codex.d.ts +0 -9
  376. package/dist/src/auth/oauth/openai-codex.js +0 -414
  377. package/dist/src/connectors/plugin-mcp-recovery.d.ts +0 -28
  378. package/dist/src/connectors/plugin-mcp-recovery.js +0 -90
  379. package/dist/src/extensions/agent-plugins/connection.d.ts +0 -8
  380. package/dist/src/extensions/agent-plugins/connection.js +0 -41
  381. package/dist/src/extensions/agent-plugins/health.d.ts +0 -4
  382. package/dist/src/extensions/agent-plugins/health.js +0 -48
  383. package/dist/src/extensions/agent-plugins/plugin-oauth-scope.d.ts +0 -1
  384. package/dist/src/extensions/agent-plugins/plugin-oauth-scope.js +0 -8
@@ -1132,13 +1132,27 @@ export declare const CommandsConfigSchema: z.ZodOptional<z.ZodObject<{
1132
1132
  }, z.core.$strict>>;
1133
1133
  export type CommandsConfig = z.infer<typeof CommandsConfigSchema>;
1134
1134
  export declare const McpOAuthConfigSchema: z.ZodObject<{
1135
- type: z.ZodLiteral<"oauth">;
1136
1135
  clientId: z.ZodOptional<z.ZodString>;
1136
+ clientSecret: z.ZodOptional<z.ZodString>;
1137
+ callbackPort: z.ZodOptional<z.ZodNumber>;
1138
+ callbackUrl: z.ZodOptional<z.ZodString>;
1139
+ scope: z.ZodOptional<z.ZodString>;
1140
+ clientName: z.ZodOptional<z.ZodString>;
1141
+ clientRegistration: z.ZodOptional<z.ZodEnum<{
1142
+ dcr: "dcr";
1143
+ cimd: "cimd";
1144
+ }>>;
1145
+ authServerMetadataUrl: z.ZodOptional<z.ZodString>;
1137
1146
  }, z.core.$strict>;
1138
1147
  export declare const McpServerSchema: z.ZodObject<{
1148
+ type: z.ZodOptional<z.ZodEnum<{
1149
+ http: "http";
1150
+ stdio: "stdio";
1151
+ "streamable-http": "streamable-http";
1152
+ }>>;
1139
1153
  command: z.ZodOptional<z.ZodString>;
1140
1154
  args: z.ZodOptional<z.ZodArray<z.ZodString>>;
1141
- env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodObject<{
1155
+ env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
1142
1156
  xopcSecretRef: z.ZodObject<{
1143
1157
  provider: z.ZodString;
1144
1158
  fieldKey: z.ZodString;
@@ -1147,13 +1161,8 @@ export declare const McpServerSchema: z.ZodObject<{
1147
1161
  }, z.core.$strip>;
1148
1162
  }, z.core.$strip>]>>>;
1149
1163
  cwd: z.ZodOptional<z.ZodString>;
1150
- workingDirectory: z.ZodOptional<z.ZodString>;
1151
1164
  url: z.ZodOptional<z.ZodString>;
1152
- transport: z.ZodOptional<z.ZodEnum<{
1153
- sse: "sse";
1154
- "streamable-http": "streamable-http";
1155
- }>>;
1156
- headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodObject<{
1165
+ headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
1157
1166
  xopcSecretRef: z.ZodObject<{
1158
1167
  provider: z.ZodString;
1159
1168
  fieldKey: z.ZodString;
@@ -1161,18 +1170,52 @@ export declare const McpServerSchema: z.ZodObject<{
1161
1170
  suffix: z.ZodOptional<z.ZodString>;
1162
1171
  }, z.core.$strip>;
1163
1172
  }, z.core.$strip>]>>>;
1164
- auth: z.ZodOptional<z.ZodObject<{
1165
- type: z.ZodLiteral<"oauth">;
1173
+ oauth: z.ZodOptional<z.ZodObject<{
1166
1174
  clientId: z.ZodOptional<z.ZodString>;
1175
+ clientSecret: z.ZodOptional<z.ZodString>;
1176
+ callbackPort: z.ZodOptional<z.ZodNumber>;
1177
+ callbackUrl: z.ZodOptional<z.ZodString>;
1178
+ scope: z.ZodOptional<z.ZodString>;
1179
+ clientName: z.ZodOptional<z.ZodString>;
1180
+ clientRegistration: z.ZodOptional<z.ZodEnum<{
1181
+ dcr: "dcr";
1182
+ cimd: "cimd";
1183
+ }>>;
1184
+ authServerMetadataUrl: z.ZodOptional<z.ZodString>;
1185
+ }, z.core.$strict>>;
1186
+ auth: z.ZodOptional<z.ZodObject<{
1187
+ provider: z.ZodString;
1167
1188
  }, z.core.$strict>>;
1168
- connectionTimeoutMs: z.ZodOptional<z.ZodNumber>;
1169
- requestTimeoutMs: z.ZodOptional<z.ZodNumber>;
1189
+ timeout: z.ZodOptional<z.ZodNumber>;
1190
+ enabled: z.ZodOptional<z.ZodBoolean>;
1191
+ exposure: z.ZodOptional<z.ZodEnum<{
1192
+ direct: "direct";
1193
+ hidden: "hidden";
1194
+ deferred: "deferred";
1195
+ codemode: "codemode";
1196
+ }>>;
1197
+ toolExposure: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<{
1198
+ direct: "direct";
1199
+ hidden: "hidden";
1200
+ deferred: "deferred";
1201
+ codemode: "codemode";
1202
+ }>>>;
1203
+ description: z.ZodOptional<z.ZodString>;
1204
+ transport: z.ZodOptional<z.ZodNever>;
1205
+ workingDirectory: z.ZodOptional<z.ZodNever>;
1206
+ connectionTimeoutMs: z.ZodOptional<z.ZodNever>;
1207
+ requestTimeoutMs: z.ZodOptional<z.ZodNever>;
1170
1208
  }, z.core.$catchall<z.ZodUnknown>>;
1171
1209
  export declare const McpConfigSchema: z.ZodOptional<z.ZodObject<{
1172
1210
  servers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
1211
+ type: z.ZodOptional<z.ZodEnum<{
1212
+ http: "http";
1213
+ stdio: "stdio";
1214
+ "streamable-http": "streamable-http";
1215
+ }>>;
1173
1216
  command: z.ZodOptional<z.ZodString>;
1174
1217
  args: z.ZodOptional<z.ZodArray<z.ZodString>>;
1175
- env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodObject<{
1218
+ env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
1176
1219
  xopcSecretRef: z.ZodObject<{
1177
1220
  provider: z.ZodString;
1178
1221
  fieldKey: z.ZodString;
@@ -1181,13 +1224,8 @@ export declare const McpConfigSchema: z.ZodOptional<z.ZodObject<{
1181
1224
  }, z.core.$strip>;
1182
1225
  }, z.core.$strip>]>>>;
1183
1226
  cwd: z.ZodOptional<z.ZodString>;
1184
- workingDirectory: z.ZodOptional<z.ZodString>;
1185
1227
  url: z.ZodOptional<z.ZodString>;
1186
- transport: z.ZodOptional<z.ZodEnum<{
1187
- sse: "sse";
1188
- "streamable-http": "streamable-http";
1189
- }>>;
1190
- headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodObject<{
1228
+ headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
1191
1229
  xopcSecretRef: z.ZodObject<{
1192
1230
  provider: z.ZodString;
1193
1231
  fieldKey: z.ZodString;
@@ -1195,14 +1233,42 @@ export declare const McpConfigSchema: z.ZodOptional<z.ZodObject<{
1195
1233
  suffix: z.ZodOptional<z.ZodString>;
1196
1234
  }, z.core.$strip>;
1197
1235
  }, z.core.$strip>]>>>;
1198
- auth: z.ZodOptional<z.ZodObject<{
1199
- type: z.ZodLiteral<"oauth">;
1236
+ oauth: z.ZodOptional<z.ZodObject<{
1200
1237
  clientId: z.ZodOptional<z.ZodString>;
1238
+ clientSecret: z.ZodOptional<z.ZodString>;
1239
+ callbackPort: z.ZodOptional<z.ZodNumber>;
1240
+ callbackUrl: z.ZodOptional<z.ZodString>;
1241
+ scope: z.ZodOptional<z.ZodString>;
1242
+ clientName: z.ZodOptional<z.ZodString>;
1243
+ clientRegistration: z.ZodOptional<z.ZodEnum<{
1244
+ dcr: "dcr";
1245
+ cimd: "cimd";
1246
+ }>>;
1247
+ authServerMetadataUrl: z.ZodOptional<z.ZodString>;
1248
+ }, z.core.$strict>>;
1249
+ auth: z.ZodOptional<z.ZodObject<{
1250
+ provider: z.ZodString;
1201
1251
  }, z.core.$strict>>;
1202
- connectionTimeoutMs: z.ZodOptional<z.ZodNumber>;
1203
- requestTimeoutMs: z.ZodOptional<z.ZodNumber>;
1252
+ timeout: z.ZodOptional<z.ZodNumber>;
1253
+ enabled: z.ZodOptional<z.ZodBoolean>;
1254
+ exposure: z.ZodOptional<z.ZodEnum<{
1255
+ direct: "direct";
1256
+ hidden: "hidden";
1257
+ deferred: "deferred";
1258
+ codemode: "codemode";
1259
+ }>>;
1260
+ toolExposure: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<{
1261
+ direct: "direct";
1262
+ hidden: "hidden";
1263
+ deferred: "deferred";
1264
+ codemode: "codemode";
1265
+ }>>>;
1266
+ description: z.ZodOptional<z.ZodString>;
1267
+ transport: z.ZodOptional<z.ZodNever>;
1268
+ workingDirectory: z.ZodOptional<z.ZodNever>;
1269
+ connectionTimeoutMs: z.ZodOptional<z.ZodNever>;
1270
+ requestTimeoutMs: z.ZodOptional<z.ZodNever>;
1204
1271
  }, z.core.$catchall<z.ZodUnknown>>>>;
1205
- sessionIdleTtlMs: z.ZodOptional<z.ZodNumber>;
1206
1272
  }, z.core.$strict>>;
1207
1273
  export type McpServerConfig = z.infer<typeof McpServerSchema>;
1208
1274
  export type McpOAuthConfig = z.infer<typeof McpOAuthConfigSchema>;
@@ -1784,9 +1850,14 @@ export declare const ConfigSchema: z.ZodDefault<z.ZodObject<{
1784
1850
  }, z.core.$strip>>;
1785
1851
  mcp: z.ZodOptional<z.ZodObject<{
1786
1852
  servers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
1853
+ type: z.ZodOptional<z.ZodEnum<{
1854
+ http: "http";
1855
+ stdio: "stdio";
1856
+ "streamable-http": "streamable-http";
1857
+ }>>;
1787
1858
  command: z.ZodOptional<z.ZodString>;
1788
1859
  args: z.ZodOptional<z.ZodArray<z.ZodString>>;
1789
- env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodObject<{
1860
+ env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
1790
1861
  xopcSecretRef: z.ZodObject<{
1791
1862
  provider: z.ZodString;
1792
1863
  fieldKey: z.ZodString;
@@ -1795,13 +1866,8 @@ export declare const ConfigSchema: z.ZodDefault<z.ZodObject<{
1795
1866
  }, z.core.$strip>;
1796
1867
  }, z.core.$strip>]>>>;
1797
1868
  cwd: z.ZodOptional<z.ZodString>;
1798
- workingDirectory: z.ZodOptional<z.ZodString>;
1799
1869
  url: z.ZodOptional<z.ZodString>;
1800
- transport: z.ZodOptional<z.ZodEnum<{
1801
- sse: "sse";
1802
- "streamable-http": "streamable-http";
1803
- }>>;
1804
- headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodObject<{
1870
+ headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
1805
1871
  xopcSecretRef: z.ZodObject<{
1806
1872
  provider: z.ZodString;
1807
1873
  fieldKey: z.ZodString;
@@ -1809,14 +1875,42 @@ export declare const ConfigSchema: z.ZodDefault<z.ZodObject<{
1809
1875
  suffix: z.ZodOptional<z.ZodString>;
1810
1876
  }, z.core.$strip>;
1811
1877
  }, z.core.$strip>]>>>;
1812
- auth: z.ZodOptional<z.ZodObject<{
1813
- type: z.ZodLiteral<"oauth">;
1878
+ oauth: z.ZodOptional<z.ZodObject<{
1814
1879
  clientId: z.ZodOptional<z.ZodString>;
1880
+ clientSecret: z.ZodOptional<z.ZodString>;
1881
+ callbackPort: z.ZodOptional<z.ZodNumber>;
1882
+ callbackUrl: z.ZodOptional<z.ZodString>;
1883
+ scope: z.ZodOptional<z.ZodString>;
1884
+ clientName: z.ZodOptional<z.ZodString>;
1885
+ clientRegistration: z.ZodOptional<z.ZodEnum<{
1886
+ dcr: "dcr";
1887
+ cimd: "cimd";
1888
+ }>>;
1889
+ authServerMetadataUrl: z.ZodOptional<z.ZodString>;
1890
+ }, z.core.$strict>>;
1891
+ auth: z.ZodOptional<z.ZodObject<{
1892
+ provider: z.ZodString;
1815
1893
  }, z.core.$strict>>;
1816
- connectionTimeoutMs: z.ZodOptional<z.ZodNumber>;
1817
- requestTimeoutMs: z.ZodOptional<z.ZodNumber>;
1894
+ timeout: z.ZodOptional<z.ZodNumber>;
1895
+ enabled: z.ZodOptional<z.ZodBoolean>;
1896
+ exposure: z.ZodOptional<z.ZodEnum<{
1897
+ direct: "direct";
1898
+ hidden: "hidden";
1899
+ deferred: "deferred";
1900
+ codemode: "codemode";
1901
+ }>>;
1902
+ toolExposure: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<{
1903
+ direct: "direct";
1904
+ hidden: "hidden";
1905
+ deferred: "deferred";
1906
+ codemode: "codemode";
1907
+ }>>>;
1908
+ description: z.ZodOptional<z.ZodString>;
1909
+ transport: z.ZodOptional<z.ZodNever>;
1910
+ workingDirectory: z.ZodOptional<z.ZodNever>;
1911
+ connectionTimeoutMs: z.ZodOptional<z.ZodNever>;
1912
+ requestTimeoutMs: z.ZodOptional<z.ZodNever>;
1818
1913
  }, z.core.$catchall<z.ZodUnknown>>>>;
1819
- sessionIdleTtlMs: z.ZodOptional<z.ZodNumber>;
1820
1914
  }, z.core.$strict>>;
1821
1915
  connectors: z.ZodOptional<z.ZodObject<{
1822
1916
  instances: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
@@ -42,7 +42,7 @@ function parseModelRef(ref) {
42
42
  model: trimmed.slice(idx + 1).trim()
43
43
  };
44
44
  }
45
- var AgentModelRefSchema, AgentImageGenerationModelSchema, AgentModelsSchema, BrowserDriverSchema, BrowserHostnameSchema, BrowserConfigSchema, SessionDmScopeSchema, SessionStorageConfigSchema, SessionResetModeSchema, SessionResetConfigSchema, SessionResetByTypeSchema, SessionScopeSchema, SessionConfigSchema, ChannelsConfigSchema, SearchProviderEntrySchema, WebSearchConfigSchema, WebsiteBlocklistSchema, WebToolsConfigSchema, ToolsConfigSchema, RuntimePreferenceSchema, RuntimeProvisionSchema, RuntimeVersionRequestSchema, LanguageRuntimeSchema, DEFAULT_RUNTIME_TOOLS_CONFIG, RuntimeToolsConfigSchema, GatewayAuthRateLimitSchema, GatewaySecuritySchema, GatewayTrustedProxySchema, GatewayAuthSchema, GatewayTailscaleConsentSchema, GatewayTailscaleSchema, GatewayRemoteSchema, GatewayTlsSchema, GatewayModeSchema, GatewayChannelConnectDeferModeSchema, TunnelConsentSchema, TunnelConfigSchema, WorkspaceImportConfigSchema, WorkspaceConfigSchema, GatewayBindModeSchema, GatewayWebchatConfigSchema, GatewayScenesConfigSchema, GatewayConfigSchema, ModelsDevConfigSchema, ModelCatalogConfigSchema, SttProviderConfigCatchallSchema, STTProviderConfigSchema, STTFallbackConfigSchema, MediaUnderstandingCapabilitiesSchema, MediaUnderstandingModelSchema, STTConfigSchema, TtsProviderConfigCatchallSchema, TTSProviderConfigSchema, TTSFallbackConfigSchema, TTSModelOverridesConfigSchema, TTSEdgeConfigSchema, TTSSummarizationConfigSchema, TTSConfigSchema, VoiceRefinementConfigSchema, VoiceConfigSchema, MessagesConfigSchema, ToolsMediaAudioConfigSchema, ToolsMediaConfigSchema, ProviderAzureConfigSchema, ProviderRequestOverridesSchema, ProviderAuthConfigSchema, ProvidersConfigSchema, ExtensionSecurityConfigSchema, ExtensionSlotsConfigSchema, ExtensionsConfigSchema, UpdateAutoConfigSchema, UpdateConfigSchema, CommandsConfigSchema, McpHttpUrlSchema, ConnectorSecretReferenceSchema, McpConfigScalarSchema, McpOAuthConfigSchema, McpServerSchema, McpConfigSchema, ConnectorsConfigSchema, ExperimentalConfigSchema, ConfigSchema;
45
+ var AgentModelRefSchema, AgentImageGenerationModelSchema, AgentModelsSchema, BrowserDriverSchema, BrowserHostnameSchema, BrowserConfigSchema, SessionDmScopeSchema, SessionStorageConfigSchema, SessionResetModeSchema, SessionResetConfigSchema, SessionResetByTypeSchema, SessionScopeSchema, SessionConfigSchema, ChannelsConfigSchema, SearchProviderEntrySchema, WebSearchConfigSchema, WebsiteBlocklistSchema, WebToolsConfigSchema, ToolsConfigSchema, RuntimePreferenceSchema, RuntimeProvisionSchema, RuntimeVersionRequestSchema, LanguageRuntimeSchema, DEFAULT_RUNTIME_TOOLS_CONFIG, RuntimeToolsConfigSchema, GatewayAuthRateLimitSchema, GatewaySecuritySchema, GatewayTrustedProxySchema, GatewayAuthSchema, GatewayTailscaleConsentSchema, GatewayTailscaleSchema, GatewayRemoteSchema, GatewayTlsSchema, GatewayModeSchema, GatewayChannelConnectDeferModeSchema, TunnelConsentSchema, TunnelConfigSchema, WorkspaceImportConfigSchema, WorkspaceConfigSchema, GatewayBindModeSchema, GatewayWebchatConfigSchema, GatewayScenesConfigSchema, GatewayConfigSchema, ModelsDevConfigSchema, ModelCatalogConfigSchema, SttProviderConfigCatchallSchema, STTProviderConfigSchema, STTFallbackConfigSchema, MediaUnderstandingCapabilitiesSchema, MediaUnderstandingModelSchema, STTConfigSchema, TtsProviderConfigCatchallSchema, TTSProviderConfigSchema, TTSFallbackConfigSchema, TTSModelOverridesConfigSchema, TTSEdgeConfigSchema, TTSSummarizationConfigSchema, TTSConfigSchema, VoiceRefinementConfigSchema, VoiceConfigSchema, MessagesConfigSchema, ToolsMediaAudioConfigSchema, ToolsMediaConfigSchema, ProviderAzureConfigSchema, ProviderRequestOverridesSchema, ProviderAuthConfigSchema, ProvidersConfigSchema, ExtensionSecurityConfigSchema, ExtensionSlotsConfigSchema, ExtensionsConfigSchema, UpdateAutoConfigSchema, UpdateConfigSchema, CommandsConfigSchema, McpHttpUrlSchema, ConnectorSecretReferenceSchema, McpConfigScalarSchema, McpExposureSchema, McpOAuthConfigSchema, McpServerSchema, McpConfigSchema, ConnectorsConfigSchema, ExperimentalConfigSchema, ConfigSchema;
46
46
  var init_schema = __esmMin((() => {
47
47
  init_config();
48
48
  init_config$1();
@@ -903,59 +903,76 @@ tts: TTSConfigSchema.optional() }).optional();
903
903
  prefix: z.string().optional(),
904
904
  suffix: z.string().optional()
905
905
  }) });
906
- McpConfigScalarSchema = z.union([
907
- z.string(),
908
- z.number(),
909
- z.boolean(),
910
- ConnectorSecretReferenceSchema
906
+ McpConfigScalarSchema = z.union([z.string(), ConnectorSecretReferenceSchema]);
907
+ McpExposureSchema = z.enum([
908
+ "codemode",
909
+ "deferred",
910
+ "direct",
911
+ "hidden"
911
912
  ]);
912
913
  McpOAuthConfigSchema = z.object({
913
- type: z.literal("oauth"),
914
- /** Optional public client id for authorization servers without dynamic registration. */
915
- clientId: z.string().min(1).optional()
914
+ clientId: z.string().min(1).optional(),
915
+ clientSecret: z.string().optional(),
916
+ callbackPort: z.number().int().min(1).max(65535).optional(),
917
+ callbackUrl: z.string().url().optional(),
918
+ scope: z.string().optional(),
919
+ clientName: z.string().optional(),
920
+ clientRegistration: z.enum(["dcr", "cimd"]).optional(),
921
+ authServerMetadataUrl: z.string().url().optional()
916
922
  }).strict();
917
923
  McpServerSchema = z.object({
918
- command: z.string().optional(),
924
+ type: z.enum([
925
+ "stdio",
926
+ "http",
927
+ "streamable-http"
928
+ ]).optional(),
929
+ command: z.string().min(1).optional(),
919
930
  args: z.array(z.string()).optional(),
920
931
  env: z.record(z.string(), McpConfigScalarSchema).optional(),
921
932
  cwd: z.string().optional(),
922
- workingDirectory: z.string().optional(),
923
933
  url: McpHttpUrlSchema.optional(),
924
- transport: z.enum(["sse", "streamable-http"]).optional(),
925
934
  headers: z.record(z.string(), McpConfigScalarSchema).optional(),
926
- auth: McpOAuthConfigSchema.optional(),
927
- connectionTimeoutMs: z.number().finite().positive().optional(),
928
- requestTimeoutMs: z.number().finite().positive().optional()
935
+ oauth: McpOAuthConfigSchema.optional(),
936
+ auth: z.object({ provider: z.string().min(1) }).strict().optional(),
937
+ timeout: z.number().finite().positive().optional(),
938
+ enabled: z.boolean().optional(),
939
+ exposure: McpExposureSchema.optional(),
940
+ toolExposure: z.record(z.string(), McpExposureSchema).optional(),
941
+ description: z.string().optional(),
942
+ transport: z.never().optional(),
943
+ workingDirectory: z.never().optional(),
944
+ connectionTimeoutMs: z.never().optional(),
945
+ requestTimeoutMs: z.never().optional()
929
946
  }).catchall(z.unknown()).superRefine((value, ctx) => {
930
- const hasCommand = typeof value.command === "string" && value.command.trim().length > 0;
931
- const hasUrl = typeof value.url === "string" && value.url.trim().length > 0;
932
- if (hasCommand && hasUrl) ctx.addIssue({
947
+ if (Boolean(value.command) === Boolean(value.url)) ctx.addIssue({
933
948
  code: "custom",
934
- message: "MCP server cannot define both command and url"
949
+ message: "MCP server requires exactly one command or url"
935
950
  });
936
- if (value.auth && !hasUrl) ctx.addIssue({
951
+ if (value.type === "stdio" && !value.command) ctx.addIssue({
937
952
  code: "custom",
938
- path: ["auth"],
939
- message: "MCP OAuth requires an HTTP server URL"
953
+ message: "stdio requires command"
940
954
  });
941
- if (value.auth && value.transport === "sse") ctx.addIssue({
955
+ if ((value.type === "http" || value.type === "streamable-http") && !value.url) ctx.addIssue({
942
956
  code: "custom",
943
- path: ["auth"],
944
- message: "MCP OAuth currently supports streamable HTTP only"
957
+ message: "HTTP requires url"
945
958
  });
946
- if (value.auth && value.headers) {
947
- const authorizationHeader = Object.keys(value.headers).find((key) => key.toLowerCase() === "authorization");
948
- if (authorizationHeader) ctx.addIssue({
959
+ if ((value.oauth || value.auth) && !value.url) ctx.addIssue({
960
+ code: "custom",
961
+ message: "MCP authentication requires HTTP"
962
+ });
963
+ });
964
+ McpConfigSchema = z.object({ servers: z.record(z.string().regex(/^[a-zA-Z0-9_-]+$/), McpServerSchema).optional() }).strict().superRefine((value, ctx) => {
965
+ const names = /* @__PURE__ */ new Set();
966
+ for (const name of Object.keys(value.servers ?? {})) {
967
+ const normalized = name.replace(/-/g, "_");
968
+ if (names.has(normalized)) ctx.addIssue({
949
969
  code: "custom",
950
- path: ["headers", authorizationHeader],
951
- message: "MCP OAuth cannot be combined with a static Authorization header"
970
+ path: ["servers", name],
971
+ message: "MCP names differing only by hyphens and underscores collide"
952
972
  });
973
+ names.add(normalized);
953
974
  }
954
- });
955
- McpConfigSchema = z.object({
956
- servers: z.record(z.string(), McpServerSchema).optional(),
957
- sessionIdleTtlMs: z.number().finite().min(0).optional()
958
- }).strict().optional();
975
+ }).optional();
959
976
  ConnectorsConfigSchema = z.object({ instances: z.record(z.string(), z.record(z.string(), z.unknown())).optional() }).strict().optional();
960
977
  ExperimentalConfigSchema = z.object({
961
978
  /** First-run activation that analyzes one explicitly selected local folder. */
@@ -8,4 +8,4 @@ export type ConnectorAuthStartResult = {
8
8
  connectionId?: string;
9
9
  attemptId?: string;
10
10
  };
11
- export declare function startConnectorAuthorization(definition: ConnectorDefinition, config?: Config, instanceId?: string): Promise<ConnectorAuthStartResult>;
11
+ export declare function startConnectorAuthorization(definition: ConnectorDefinition, config?: Config, _instanceId?: string): Promise<ConnectorAuthStartResult>;
@@ -1,28 +1,8 @@
1
1
  import { startComposioAuthorize } from "./composio.js";
2
- import { isManagedConnectorServer } from "./materialize.js";
3
2
  import { getConnectorInstance } from "./instances.js";
4
- import { getMcpOAuthManager } from "../agent/mcp/oauth/mcp-oauth-manager.js";
5
3
  //#region src/connectors/auth-provider-registry.ts
6
- async function startConnectorAuthorization(definition, config, instanceId) {
4
+ async function startConnectorAuthorization(definition, config, _instanceId) {
7
5
  if (definition.auth.mode !== "oauth") throw new Error(`Connector "${definition.id}" does not use OAuth.`);
8
- if (definition.runtime.type === "mcp") {
9
- if (!config) throw new Error("Connector configuration is required for MCP authorization.");
10
- const serverId = instanceId ?? definition.runtime.serverId;
11
- const server = config.mcp?.servers?.[serverId];
12
- if (!server) throw new Error(`Connector MCP server not found: ${serverId}`);
13
- if (!isManagedConnectorServer(server) || server.xopcConnector.connectorId !== definition.id) throw new Error(`MCP server "${serverId}" is not managed by connector "${definition.id}".`);
14
- const status = await getMcpOAuthManager().start({
15
- serverId,
16
- rawServer: server,
17
- cfg: config
18
- });
19
- return {
20
- connectorId: definition.id,
21
- provider: "mcp",
22
- status: status.status,
23
- authorizationUrl: status.session?.authorizationUrl
24
- };
25
- }
26
6
  if (definition.auth.provider !== "composio" || definition.runtime.type !== "composio" || definition.runtime.role !== "toolkit") throw new Error(`Connector "${definition.id}" does not support OAuth authorization.`);
27
7
  const configuredAuthConfigId = config ? getConnectorInstance(config, definition.id)?.config?.authConfigId : void 0;
28
8
  const authConfigId = typeof configuredAuthConfigId === "string" && configuredAuthConfigId.trim() ? configuredAuthConfigId.trim() : void 0;
@@ -284,7 +284,7 @@ const CHINA_CONNECTORS = [
284
284
  serverId: "tencent_meeting",
285
285
  serverTemplate: {
286
286
  url: "https://mcp.meeting.tencent.com/mcp",
287
- transport: "streamable-http",
287
+ type: "http",
288
288
  headers: { "X-Tencent-Meeting-Token": "{{secrets.token}}" }
289
289
  }
290
290
  },
@@ -352,7 +352,7 @@ const CHINA_CONNECTORS = [
352
352
  serverId: "tencent_docs",
353
353
  serverTemplate: {
354
354
  url: "https://docs.qq.com/openapi/mcp",
355
- transport: "streamable-http",
355
+ type: "http",
356
356
  headers: { Authorization: "{{secrets.token}}" }
357
357
  }
358
358
  },
@@ -576,7 +576,7 @@ const CHINA_CONNECTORS = [
576
576
  serverId: "bailian_web_search",
577
577
  serverTemplate: {
578
578
  url: "https://dashscope.aliyuncs.com/api/v1/mcps/WebSearch/mcp",
579
- transport: "streamable-http",
579
+ type: "http",
580
580
  headers: { Authorization: "Bearer {{secrets.apiKey}}" }
581
581
  }
582
582
  },
@@ -647,7 +647,7 @@ const CHINA_CONNECTORS = [
647
647
  serverId: "dida365",
648
648
  serverTemplate: {
649
649
  url: "https://mcp.dida365.com",
650
- transport: "streamable-http",
650
+ type: "http",
651
651
  headers: { Authorization: "Bearer {{secrets.token}}" }
652
652
  }
653
653
  },
@@ -721,7 +721,7 @@ const CHINA_CONNECTORS = [
721
721
  serverId: "flomo",
722
722
  serverTemplate: {
723
723
  url: "https://flomoapp.com/mcp",
724
- transport: "streamable-http",
724
+ type: "http",
725
725
  headers: { Authorization: "Bearer {{secrets.token}}" }
726
726
  }
727
727
  },
@@ -1,18 +1,16 @@
1
1
  import type { Config } from '../config/schema.js';
2
2
  import type { SessionInput } from '../storage/sqlite/session-input-repository.js';
3
3
  import { ComposioSessionsAdapter } from './composio-sessions.js';
4
- import { type PluginMcpRecovery } from './plugin-mcp-recovery.js';
5
4
  import type { ConnectionWaitSnapshot } from '@xopcai/gateway-contract';
6
5
  export type ConnectionAction = {
7
6
  waitId: string;
8
7
  expectedTranscriptId: string;
9
8
  expectedVersion: number;
10
9
  idempotencyKey: string;
11
- action: 'install_complete' | 'connect' | 'check' | 'skip' | 'cancel' | 'select_account' | 'confirm_scope' | 'replace_source' | 'submit_callback';
10
+ action: 'install_complete' | 'connect' | 'check' | 'skip' | 'cancel' | 'select_account' | 'confirm_scope' | 'replace_source';
12
11
  needKey?: string;
13
12
  accountId?: string;
14
13
  candidateRef?: string;
15
- callbackUrl?: string;
16
14
  instanceId?: string;
17
15
  };
18
16
  /** Authorization lives at click time. Chat history contains only immutable explanations. */
@@ -34,16 +32,13 @@ export declare class ConnectionRecoveryService {
34
32
  drain: (conversationId: string) => void;
35
33
  onPersonalRequestDelivered?: (conversationId: string, requestId: string) => void;
36
34
  adapter?: ComposioSessionsAdapter;
37
- pluginMcp?: PluginMcpRecovery;
38
35
  });
39
36
  private get adapter();
40
- private get pluginMcp();
41
37
  snapshot(conversationId: string): ConnectionWaitSnapshot;
42
38
  private view;
43
39
  private ensureInstallation;
44
40
  private checkCapabilities;
45
41
  private syncConnections;
46
- private syncPluginMcpNeeds;
47
42
  preflight(input: SessionInput): Promise<boolean>;
48
43
  act(conversationId: string, action: ConnectionAction): Promise<{
49
44
  snapshot: ConnectionWaitSnapshot;