@xopcai/xopc 0.0.369 → 0.0.371

package/dist/src/providers/index.js

@@ -1,6 +1,7 @@
 import { __esmMin, __exportAll } from "../../_virtual/_rolldown/runtime.js";
 import { PROVIDER_ENV_MAP, getApiKeyFromEnv, init_env_keys } from "./env-keys.js";
 import { getModelOAuthProviderIds, init_registry } from "../auth/oauth/registry.js";
+import { assertCurrentModelProvider, init_provider_policy, isRetiredModelProvider } from "./provider-policy.js";
 import { CredentialResolver, hasCredentials, init_credentials } from "../auth/credentials.js";
 import { getAgentDefaultModelRef, init_schema } from "../config/schema.js";
 import { hasProviderAuthOnDiskSync, init_sync_provider_auth } from "../auth/sync-provider-auth.js";
@@ -45,12 +46,8 @@ var providers_exports = /* @__PURE__ */ __exportAll({
 	resolveModel: () => resolveModel
 });
 function normalizeProviderModel(model) {
-	const correctedModel = applyOfficialModelMetadataCorrections(model);
-	if (model.provider === "openai-codex" && model.api === "openai-codex-responses") return {
-		...correctedModel,
-		baseUrl: OPENAI_CODEX_CANONICAL_BASE_URL
-	};
-	return correctedModel;
+	assertCurrentModelProvider(model.provider);
+	return applyOfficialModelMetadataCorrections(model);
 }
 /** Map a plugin registry model to the pi-ai {@link Model} shape. */
 function pluginModelToModel(providerId, definition) {
@@ -77,6 +74,7 @@ function pluginModelToModel(providerId, definition) {
 * Use this for Agent's getApiKey callback which must be synchronous.
 */
 function getApiKeySync(provider) {
+	assertCurrentModelProvider(provider);
 	if (getProviderRegistry().has(provider)) return "extension-managed";
 	const registryKey = getModelRegistry().getApiKey(provider);
 	if (registryKey) return registryKey;
@@ -91,6 +89,8 @@ function getApiKeySync(provider) {
 function resolveModel(ref) {
 	const trimmedRef = typeof ref === "string" ? ref.trim() : "";
 	if (!trimmedRef) throw new Error("No default model configured. Choose a model in onboarding or update global Agent defaults.");
+	const requestedProvider = splitProviderModelRef(trimmedRef)?.provider;
+	if (requestedProvider) assertCurrentModelProvider(requestedProvider);
 	const customModel = getModelRegistry().resolve(trimmedRef);
 	if (customModel) return normalizeProviderModel(customModel);
 	const qualifiedRef = splitProviderModelRef(trimmedRef);
@@ -107,11 +107,14 @@ function resolveModel(ref) {
 		}
 		throw new Error(`Model not found: ${trimmedRef}`);
 	}
-	for (const provider of getProviders()) try {
-		const found = getModels(provider).find((m) => m.id === trimmedRef);
-		if (found) return normalizeProviderModel(found);
-	} catch {
-		continue;
+	for (const provider of getProviders()) {
+		if (isRetiredModelProvider(provider)) continue;
+		try {
+			const found = getModels(provider).find((m) => m.id === trimmedRef);
+			if (found) return normalizeProviderModel(found);
+		} catch {
+			continue;
+		}
 	}
 	const supplementalModel = getSupplementalModels().find((m) => m.id === trimmedRef);
 	if (supplementalModel) return normalizeProviderModel(supplementalModel);
@@ -123,6 +126,7 @@ function resolveModel(ref) {
 	throw new Error(`Model not found: ${trimmedRef}. Use format: provider/model-id`);
 }
 function getModelsByProvider(provider) {
+	assertCurrentModelProvider(provider);
 	const fromRegistry = getModelRegistry().getAll().filter((m) => m.provider === provider).map(normalizeProviderModel);
 	const existingIds = new Set(fromRegistry.map((m) => m.id));
 	const supplementalModels = getSupplementalModels().filter((m) => m.provider === provider && !existingIds.has(m.id)).map(normalizeProviderModel);
@@ -138,13 +142,14 @@ function getModelsByProvider(provider) {
 function getAllProviders() {
 	const registry = getModelRegistry();
 	const providers = /* @__PURE__ */ new Set();
-	for (const p of getProviders()) providers.add(p);
-	for (const m of registry.getAll()) providers.add(m.provider);
+	for (const p of getProviders()) if (!isRetiredModelProvider(p)) providers.add(p);
+	for (const m of registry.getAll()) if (!isRetiredModelProvider(m.provider)) providers.add(m.provider);
 	for (const plugin of getProviderRegistry().listAll()) providers.add(plugin.id);
 	for (const provider of getModelOAuthProviderIds()) providers.add(provider);
 	return Array.from(providers);
 }
 async function getApiKey(provider, credentialOptions) {
+	assertCurrentModelProvider(provider);
 	if (getProviderRegistry().has(provider)) return "extension-managed";
 	const credentialKey = await resolveProviderApiKey(provider, credentialOptions);
 	if (credentialKey) return credentialKey;
@@ -157,12 +162,14 @@ async function getApiKey(provider, credentialOptions) {
 * Only checks environment variables and registry, not credential system
 */
 function isProviderConfiguredSync(provider) {
+	assertCurrentModelProvider(provider);
 	if (getProviderRegistry().has(provider)) return true;
 	if (getModelRegistry().getApiKey(provider)) return true;
 	if (getApiKeyFromEnv(provider)) return true;
 	return hasProviderAuthOnDiskSync(provider);
 }
 async function isProviderConfigured(provider) {
+	assertCurrentModelProvider(provider);
 	if (getProviderRegistry().has(provider)) return true;
 	if (getModelRegistry().getApiKey(provider)) return true;
 	return await hasCredentials(provider);
@@ -310,7 +317,7 @@ function getDefaultModelSync(config) {
 	if (modelRef) return modelRef;
 	return "";
 }
-var OPENAI_CODEX_CANONICAL_BASE_URL, PROVIDER_META;
+var PROVIDER_META;
 var init_providers = __esmMin((() => {
 	init_schema();
 	init_model_registry();
@@ -322,8 +329,8 @@ var init_providers = __esmMin((() => {
 	init_model_supplements();
 	init_model_ref();
 	init_plugin_registry();
+	init_provider_policy();
 	init_provider_auth_service();
-	OPENAI_CODEX_CANONICAL_BASE_URL = "https://chatgpt.com/backend-api/codex";
 	PROVIDER_META = {
 		"xopc-cloud": {
 			name: "XOPC Model Service",
@@ -334,7 +341,8 @@ var init_providers = __esmMin((() => {
 		"openai": {
 			name: "OpenAI",
 			category: "common",
-			supportsApiKey: true
+			supportsApiKey: true,
+			supportsOAuth: true
 		},
 		"anthropic": {
 			name: "Anthropic",
@@ -556,8 +564,8 @@ var init_providers = __esmMin((() => {
 			category: "enterprise",
 			supportsApiKey: true
 		},
-		"azure-openai-responses": {
-			name: "Azure OpenAI",
+		"azure": {
+			name: "Azure",
 			category: "enterprise",
 			supportsApiKey: true
 		},
@@ -577,12 +585,6 @@ var init_providers = __esmMin((() => {
 			supportsOAuth: true,
 			supportsApiKey: false
 		},
-		"openai-codex": {
-			name: "OpenAI Codex (OAuth)",
-			category: "oauth",
-			supportsOAuth: true,
-			supportsApiKey: false
-		},
 		"google-gemini-cli": {
 			name: "Google Gemini CLI (OAuth)",
 			category: "oauth",

package/dist/src/providers/model-call.d.ts

@@ -2,8 +2,6 @@ import { type Api, type AssistantMessage, type Context, type Model, type SimpleS
 import type { CredentialResolverOptions } from '../auth/credentials.js';
 import type { AiUsageContext } from '../usage/types.js';
 export declare function isLocalModelBaseUrl(baseUrl: string | undefined): boolean;
-/** Codex Responses rejects the temperature request parameter. */
-export declare function supportsModelTemperature(model: Model<Api>): boolean;
 export declare function resolveModelCallApiKey(model: Model<Api>, credentialOptions?: CredentialResolverOptions): Promise<string | undefined>;
 export declare function resolveModelCallOptions(model: Model<Api>, options?: SimpleStreamOptions, credentialOptions?: CredentialResolverOptions): Promise<SimpleStreamOptions>;
 /**

package/dist/src/providers/model-call.js

@@ -15,10 +15,6 @@ function isLocalModelBaseUrl(baseUrl) {
 		return false;
 	}
 }
-/** Codex Responses rejects the temperature request parameter. */
-function supportsModelTemperature(model) {
-	return model.api !== "openai-codex-responses";
-}
 async function resolveModelCallApiKey(model, credentialOptions) {
 	try {
 		const apiKey = credentialOptions ? await getApiKey(model.provider, credentialOptions) : await getApiKey(model.provider);
@@ -35,7 +31,7 @@ async function resolveModelCallOptions(model, options = {}, credentialOptions) {
 	return {
 		...rest,
 		apiKey,
-		...temperature !== void 0 && supportsModelTemperature(model) ? { temperature } : {}
+		...temperature !== void 0 ? { temperature } : {}
 	};
 }
 /**
@@ -94,4 +90,4 @@ async function createResolvedModelStream(model, context, options, credentialOpti
 	}
 }
 //#endregion
-export { completeWithResolvedCredentials, createResolvedModelStream, isLocalModelBaseUrl, resolveModelCallApiKey, resolveModelCallOptions, supportsModelTemperature };
+export { completeWithResolvedCredentials, createResolvedModelStream, isLocalModelBaseUrl, resolveModelCallApiKey, resolveModelCallOptions };

package/dist/src/providers/model-registry.js

@@ -3,6 +3,7 @@ import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
 import { getApiKeyFromEnv, init_env_keys } from "./env-keys.js";
 import { resolveModelsJsonPath } from "../config/paths.js";
+import { init_provider_policy, isRetiredModelProvider } from "./provider-policy.js";
 import { init_resolve_config_value, resolveConfigValue, resolveHeaders } from "../config/resolve-config-value.js";
 import { getDefaultModelValues, init_models_json, validateModelsConfig } from "../config/models-json.js";
 import { getModelCatalogStore, init_model_catalog_store } from "./model-catalog-store.js";
@@ -100,6 +101,7 @@ var init_model_registry = __esmMin((() => {
 	init_env_keys();
 	init_model_catalog_store();
 	init_model_ref();
+	init_provider_policy();
 	log = createLogger("ModelRegistry");
 	ModelRegistry = class {
 		models = [];
@@ -238,7 +240,7 @@ var init_model_registry = __esmMin((() => {
 				log.warn({ err }, "Failed to load remote model catalog");
 				return [];
 			}
-			return Object.values(sources).flatMap((source) => source.models.filter((model) => model.availability === "available" && model.kind === "language").map((model) => ({
+			return Object.values(sources).filter((source) => !isRetiredModelProvider(source.providerId)).flatMap((source) => source.models.filter((model) => model.availability === "available" && model.kind === "language").map((model) => ({
 				id: model.id,
 				computerUse: model.computerUse,
 				name: model.name,
@@ -261,7 +263,7 @@ var init_model_registry = __esmMin((() => {
 		* Load built-in models and apply provider/model overrides
 		*/
 		loadBuiltInModels(overrides, modelOverrides) {
-			return getProviders().flatMap((provider) => {
+			return getProviders().filter((provider) => !isRetiredModelProvider(provider)).flatMap((provider) => {
 				try {
 					const models = getModels(provider);
 					const providerOverride = overrides.get(provider);

package/dist/src/providers/model-supplements.d.ts

@@ -1,8 +1,8 @@
-import { type Api, type Model } from '@earendil-works/pi-ai/compat';
-/** Correct narrowly scoped upstream catalog metadata while older pi-ai data is still installed. */
+import type { Api, Model } from '@earendil-works/pi-ai';
+/** Attach xopc's Computer Use contract to supported OpenAI Responses models. */
 export declare function applyOfficialModelMetadataCorrections(model: Model<Api>): Model<Api>;
 /**
- * Small local supplement for official model aliases that may lag in pi-ai.
+ * Local catalog entries required by xopc's Computer Use providers.
  * Keep this list narrow: full provider catalogs should come from pi-ai.
  */
 export declare function getSupplementalModels(): Model<Api>[];

package/dist/src/providers/model-supplements.js

@@ -1,30 +1,19 @@
 import { __esmMin } from "../../_virtual/_rolldown/runtime.js";
-import { getModel } from "@earendil-works/pi-ai/compat";
 //#region src/providers/model-supplements.ts
-/** Correct narrowly scoped upstream catalog metadata while older pi-ai data is still installed. */
+/** Attach xopc's Computer Use contract to supported OpenAI Responses models. */
 function applyOfficialModelMetadataCorrections(model) {
-	const correctedContextWindow = OPENAI_CONTEXT_WINDOW_CORRECTIONS.get(model.id);
-	const corrected = (model.provider === "openai" || model.provider === "openai-codex") && correctedContextWindow !== void 0 && model.contextWindow === STALE_OPENAI_CONTEXT_WINDOW ? {
-		...model,
-		contextWindow: correctedContextWindow
-	} : model;
-	if (corrected.provider !== "openai" || corrected.api !== "openai-responses" || !OPENAI_COMPUTER_MODELS.has(corrected.id)) return corrected;
+	if (model.provider !== "openai" || model.api !== "openai-responses" || !OPENAI_COMPUTER_MODELS.has(model.id)) return model;
 	return {
-		...corrected,
+		...model,
 		computerUse: { profile: "openai-responses-computer-v1" }
 	};
 }
 /**
-* Small local supplement for official model aliases that may lag in pi-ai.
+* Local catalog entries required by xopc's Computer Use providers.
 * Keep this list narrow: full provider catalogs should come from pi-ai.
 */
 function getSupplementalModels() {
-	const gpt56Sol = getModel("openai", "gpt-5.6-sol");
-	return [...gpt56Sol ? [{
-		...gpt56Sol,
-		id: "gpt-5.6",
-		name: "GPT-5.6"
-	}] : [], {
+	return [{
 		id: "gui-plus-2026-02-26",
 		name: "GUI-Plus (2026-02-26)",
 		provider: "dashscope-cn",
@@ -43,18 +32,8 @@ function getSupplementalModels() {
 		computerUse: { profile: "gui-plus-2026-02-26" }
 	}];
 }
-var STALE_OPENAI_CONTEXT_WINDOW, OPENAI_CONTEXT_WINDOW_CORRECTIONS, OPENAI_COMPUTER_MODELS;
+var OPENAI_COMPUTER_MODELS;
 var init_model_supplements = __esmMin((() => {
-	STALE_OPENAI_CONTEXT_WINDOW = 272e3;
-	OPENAI_CONTEXT_WINDOW_CORRECTIONS = new Map([
-		["gpt-5.4", 105e4],
-		["gpt-5.4-mini", 4e5],
-		["gpt-5.5", 105e4],
-		["gpt-5.6", 105e4],
-		["gpt-5.6-luna", 105e4],
-		["gpt-5.6-sol", 105e4],
-		["gpt-5.6-terra", 105e4]
-	]);
 	OPENAI_COMPUTER_MODELS = new Set([
 		"gpt-6-astra",
 		"gpt-5.6-sol",

package/dist/src/providers/presentation.js

@@ -71,26 +71,21 @@ const PROVIDER_HINTS = {
 	"zhipu-coding-cn": "Zhipu GLM coding-plan China endpoint.",
 	minimax: "MiniMax text models; Anthropic-compatible endpoint is preferred for agent workflows.",
 	"minimax-cn": "MiniMax China endpoint for domestic access.",
-	"openai-codex": "OpenAI Codex models through OAuth.",
 	"google-gemini-cli": "Gemini through Google Cloud Code Assist OAuth.",
 	"google-antigravity": "Gemini/Antigravity OAuth model access."
 };
 const RECOMMENDED_MODEL_PATTERNS = {
 	"xopc-cloud": [/^auto$/],
 	openai: [
-		/^gpt-5\.6$/i,
+		/^gpt-6-sol$/i,
+		/^gpt-6-luna$/i,
+		/^gpt-6-astra$/i,
 		/^gpt-5\.6-sol$/i,
 		/^gpt-5\.6-terra$/i,
 		/^gpt-5\.6-luna$/i,
 		/^gpt-5\.5$/i,
 		/^gpt-5\.5-pro$/i
 	],
-	"openai-codex": [
-		/^gpt-5\.6-sol$/i,
-		/^gpt-5\.6-terra$/i,
-		/^gpt-5\.6-luna$/i,
-		/^gpt-5\.5$/i
-	],
 	anthropic: [
 		/^claude-sonnet-5$/i,
 		/^claude-opus-4-8$/i,

package/dist/src/providers/prompt-cache-plan.js

@@ -10,7 +10,7 @@ function resolvePromptCachePolicy(policy) {
 	};
 }
 function isOfficialOpenAIModel(model) {
-	if (model.api === "openai-codex-responses" || model.api === "azure-openai-responses") return true;
+	if (model.api === "azure-openai-responses") return true;
 	if (model.api !== "openai-completions" && model.api !== "openai-responses") return false;
 	return model.provider === "openai" || model.baseUrl?.includes("api.openai.com") === true;
 }

package/dist/src/providers/provider-auth-service.d.ts

@@ -1,7 +1,7 @@
 import { ModelRuntime } from '@earendil-works/pi-coding-agent';
 import { CredentialResolver, type CredentialResolverOptions } from '../auth/credentials.js';
 import { XopcModelCredentialStore } from '../auth/model-credential-store.js';
-type ApiKeyResolver = Pick<CredentialResolver, 'resolveApiKey'>;
+type ApiKeyResolver = Pick<CredentialResolver, 'resolveApiKey'> & Partial<Pick<CredentialResolver, 'resolveApiKeySource'>>;
 export interface ProviderAuthServiceOptions {
     credentials?: XopcModelCredentialStore;
     resolver?: ApiKeyResolver;

package/dist/src/providers/provider-auth-service.js

@@ -1,8 +1,9 @@
 import { __esmMin } from "../../_virtual/_rolldown/runtime.js";
 import { init_paths, resolveModelsJsonPath } from "../config/paths.js";
+import { init_register_bundled_oauth_flows, registerBundledOAuthFlows } from "./register-bundled-oauth-flows.js";
+import { assertCurrentModelProvider, init_provider_policy } from "./provider-policy.js";
 import { CredentialResolver, init_credentials } from "../auth/credentials.js";
 import { XopcModelCredentialStore, init_model_credential_store } from "../auth/model-credential-store.js";
-import { init_register_bundled_oauth_flows, registerBundledOAuthFlows } from "./register-bundled-oauth-flows.js";
 import { init_register_runtime_providers, registerRuntimeProviders } from "./register-runtime-providers.js";
 import { InMemoryModelsStore } from "@earendil-works/pi-ai";
 import { ModelRuntime } from "@earendil-works/pi-coding-agent";
@@ -36,6 +37,7 @@ var init_provider_auth_service = __esmMin((() => {
 	init_paths();
 	init_register_bundled_oauth_flows();
 	init_register_runtime_providers();
+	init_provider_policy();
 	ProviderAuthService = class {
 		credentials;
 		resolver;
@@ -48,10 +50,13 @@ var init_provider_auth_service = __esmMin((() => {
 			this.runtimeFactory = options.runtimeFactory ?? createAuthRuntime;
 		}
 		async resolveApiKey(providerId, signal) {
+			assertCurrentModelProvider(providerId);
+			const source = await this.resolver.resolveApiKeySource?.(providerId);
+			if (source === "agent" || source === "global" || source === "env") return await this.resolver.resolveApiKey(providerId);
 			if ((await this.credentials.read(providerId, { signal }))?.type === "oauth") {
 				const runtime = await this.getRuntime();
 				const provider = runtime.getProvider(providerId);
-				if (provider?.auth.oauth && !provider.auth.apiKey) return (await runtime.getAuth(providerId, { signal }))?.auth.apiKey ?? null;
+				if (provider?.auth.oauth && (source === "oauth" || providerId === "openai" || !provider.auth.apiKey)) return (await runtime.getAuth(providerId, { signal }))?.auth.apiKey ?? null;
 			}
 			return await this.resolver.resolveApiKey(providerId);
 		}

package/dist/src/providers/provider-policy.d.ts

@@ -0,0 +1,3 @@
+/** Provider identities removed from xopc's current model contract. */
+export declare function isRetiredModelProvider(provider: string): boolean;
+export declare function assertCurrentModelProvider(provider: string): void;

package/dist/src/providers/provider-policy.js

@@ -0,0 +1,14 @@
+import { __esmMin } from "../../_virtual/_rolldown/runtime.js";
+//#region src/providers/provider-policy.ts
+/** Provider identities removed from xopc's current model contract. */
+function isRetiredModelProvider(provider) {
+	return provider === "openai-codex" || provider === "azure-openai-responses";
+}
+function assertCurrentModelProvider(provider) {
+	if (provider === "openai-codex") throw new Error("Provider openai-codex is no longer supported. Select openai/<model-id> and sign in with ChatGPT again under openai.");
+	if (provider === "azure-openai-responses") throw new Error("Provider azure-openai-responses is no longer supported. Update the provider ID and model references to azure; the azure-openai-responses API type remains supported.");
+}
+var init_provider_policy = __esmMin((() => {}));
+//#endregion
+init_provider_policy();
+export { assertCurrentModelProvider, init_provider_policy, isRetiredModelProvider };

package/dist/src/providers/register-runtime-providers.js

@@ -1,5 +1,6 @@
 import { __esmMin } from "../../_virtual/_rolldown/runtime.js";
 import { getOAuthProviderDefinition, init_registry } from "../auth/oauth/registry.js";
+import { init_provider_policy, isRetiredModelProvider } from "./provider-policy.js";
 import { getModelCatalogStore, init_model_catalog_store } from "./model-catalog-store.js";
 import { XOPC_CLOUD_PROVIDER_ID, init_xopc_cloud_config, resolveXopcModelRouterUrl } from "./xopc-cloud-config.js";
 //#region src/providers/register-runtime-providers.ts
@@ -34,7 +35,10 @@ function registerRuntimeProvider(modelRuntime, source) {
 }
 /** Register dynamically discovered model providers, including their OAuth contract. */
 function registerRuntimeProviders(modelRuntime, catalog = getModelCatalogStore().load()) {
-	for (const source of Object.values(catalog.sources)) registerRuntimeProvider(modelRuntime, source);
+	for (const source of Object.values(catalog.sources)) {
+		if (isRetiredModelProvider(source.providerId)) continue;
+		registerRuntimeProvider(modelRuntime, source);
+	}
 	if (!catalog.sources["xopc-cloud"]) registerRuntimeProvider(modelRuntime, {
 		providerId: XOPC_CLOUD_PROVIDER_ID,
 		baseUrl: resolveXopcModelRouterUrl(),
@@ -47,6 +51,7 @@ function registerRuntimeProviders(modelRuntime, catalog = getModelCatalogStore()
 }
 var init_register_runtime_providers = __esmMin((() => {
 	init_registry();
+	init_provider_policy();
 	init_model_catalog_store();
 	init_xopc_cloud_config();
 }));

package/dist/src/realtime/runtime.js

@@ -2,8 +2,8 @@ import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
 import { hasGatewayScope, init_gateway_scopes } from "../gateway/security/gateway-scopes.js";
 import { EndpointToolPolicyError } from "../endpoint-tools/policy.js";
-import { compactRunEvent } from "./compact-run-event.js";
 import { REALTIME_CAPABILITIES, REALTIME_HEARTBEAT_INTERVAL_MS, REALTIME_HEARTBEAT_TIMEOUT_MS, REALTIME_HELLO_TIMEOUT_MS, REALTIME_MAX_CLIENT_FRAME_BYTES, parseClientRealtimeJsonFrame, parseClientRealtimeMessage } from "../../packages/realtime-protocol/src/index.js";
+import { compactRunEvent } from "./compact-run-event.js";
 import { createPreauthConnectionBudget } from "../gateway/security/preauth-connection-budget.js";
 import { RealtimeBroker } from "./broker.js";
 import { RealtimeTicketStore } from "./tickets.js";

package/dist/src/session/store.js

@@ -404,6 +404,10 @@ var SessionStore = class {
 			requireXopcDatabase();
 			ensureSessionRecord(conversationId, this.resolveWorkspaceCwd(conversationId));
 			if (update.message && isAppendOnlyLlmTranscriptMessage(update.message)) appendTranscriptEntry(conversationId, update.message);
+			if (update.customEntry) appendTranscriptEntry(conversationId, {
+				type: "custom",
+				...update.customEntry
+			});
 		});
 	}
 	async appendTranscriptContextEntry(key, entry) {
@@ -949,7 +953,9 @@ var SessionStore = class {
 				timestamp: m.timestamp ? new Date(m.timestamp).toISOString() : void 0,
 				tool_call_id: m.tool_call_id || m.toolCallId,
 				tool_calls: m.tool_calls,
-				name: m.name
+				name: m.name,
+				...m.role === "toolResult" && m.nestedCalls ? { nestedCalls: m.nestedCalls } : {},
+				...m.role === "toolResult" && typeof m.durationMs === "number" ? { durationMs: m.durationMs } : {}
 			};
 			if (Array.isArray(m.media) && m.media.length > 0) row.media = m.media;
 			if (m.metadata && typeof m.metadata === "object") row.metadata = m.metadata;

package/dist/src/session/transcript-events.d.ts

@@ -2,6 +2,11 @@ export type SessionTranscriptUpdate = {
     conversationId?: string;
     message?: unknown;
     messageId?: string;
+    customEntry?: {
+        customType: string;
+        data?: unknown;
+        timestamp: string;
+    };
 };
 type SessionTranscriptListener = (update: SessionTranscriptUpdate) => void;
 export declare function onSessionTranscriptUpdate(listener: SessionTranscriptListener): () => void;

package/dist/src/session/transcript-events.js

@@ -14,6 +14,7 @@ function emitSessionTranscriptUpdate(update) {
 	const nextUpdate = {
 		...conversationId ? { conversationId } : {},
 		...update.message !== void 0 ? { message: update.message } : {},
+		...update.customEntry ? { customEntry: update.customEntry } : {},
 		...normalizeOptionalString(update.messageId) ? { messageId: normalizeOptionalString(update.messageId) } : {}
 	};
 	for (const listener of SESSION_TRANSCRIPT_LISTENERS) try {

package/dist/src/session/types.d.ts

@@ -21,6 +21,8 @@ export interface Message {
     toolName?: string;
     isError?: boolean;
     details?: unknown;
+    nestedCalls?: import('@earendil-works/pi-ai').ToolResultMessage['nestedCalls'];
+    durationMs?: number;
     name?: string;
     /** Token usage from the LLM response (assistant messages only). */
     usage?: {

package/dist/src/storage/sqlite/device-grant-audit-repository.d.ts

@@ -0,0 +1,11 @@
+export interface DeviceGrantAuditEvent {
+    id: string;
+    conversationId: string;
+    requestorPrincipalId: string;
+    targetPrincipalId: string;
+    targetEndpointId: string;
+    toolName: string;
+    argumentsDigest: string;
+    event: 'issued' | 'reserved' | 'consumed' | 'revoked' | 'expired';
+}
+export declare function recordDeviceGrantEvent(value: DeviceGrantAuditEvent): void;

package/dist/src/storage/sqlite/device-grant-audit-repository.js

@@ -0,0 +1,10 @@
+import { getSqliteDatabase, init_transaction } from "./transaction.js";
+import { randomUUID } from "node:crypto";
+//#region src/storage/sqlite/device-grant-audit-repository.ts
+init_transaction();
+function recordDeviceGrantEvent(value) {
+	getSqliteDatabase().prepare(`INSERT INTO device_grant_events(id, grant_id, conversation_id, requestor_principal_id,
+    target_principal_id, target_endpoint_id, tool_name, arguments_sha256, event, created_at_ms) VALUES (?,?,?,?,?,?,?,?,?,?)`).run(randomUUID(), value.id, value.conversationId, value.requestorPrincipalId, value.targetPrincipalId, value.targetEndpointId, value.toolName, value.argumentsDigest, value.event, Date.now());
+}
+//#endregion
+export { recordDeviceGrantEvent };

package/dist/src/storage/sqlite/endpoint-device-settings-repository.d.ts

@@ -0,0 +1,7 @@
+export interface EndpointDeviceSettings {
+    nickname: string;
+    revision: number;
+}
+export declare function getEndpointDeviceSettings(principalId: string): EndpointDeviceSettings | undefined;
+/** Compare and swap; revision zero means settings have not been created yet. */
+export declare function renameEndpointDevice(principalId: string, nickname: string, expectedRevision: number): EndpointDeviceSettings | undefined;

package/dist/src/storage/sqlite/endpoint-device-settings-repository.js

@@ -0,0 +1,17 @@
+import { getSqliteDatabase, init_transaction, runSqliteWriteTransaction } from "./transaction.js";
+//#region src/storage/sqlite/endpoint-device-settings-repository.ts
+init_transaction();
+function getEndpointDeviceSettings(principalId) {
+	return getSqliteDatabase().prepare("SELECT nickname, revision FROM endpoint_device_settings WHERE principal_id = ?").get(principalId);
+}
+/** Compare and swap; revision zero means settings have not been created yet. */
+function renameEndpointDevice(principalId, nickname, expectedRevision) {
+	return runSqliteWriteTransaction((db) => {
+		if (expectedRevision === 0) {
+			if (!db.prepare("INSERT OR IGNORE INTO endpoint_device_settings (principal_id, nickname) VALUES (?, ?)").run(principalId, nickname).changes) return void 0;
+		} else if (!db.prepare("UPDATE endpoint_device_settings SET nickname = ?, revision = revision + 1 WHERE principal_id = ? AND revision = ?").run(nickname, principalId, expectedRevision).changes) return void 0;
+		return getEndpointDeviceSettings(principalId);
+	});
+}
+//#endregion
+export { getEndpointDeviceSettings, renameEndpointDevice };

package/dist/src/storage/sqlite/migrations/240_device_settings.sql

@@ -0,0 +1,5 @@
+CREATE TABLE endpoint_device_settings (
+  principal_id TEXT PRIMARY KEY REFERENCES endpoint_principals(id) ON DELETE CASCADE,
+  nickname TEXT NOT NULL CHECK(length(nickname) BETWEEN 1 AND 80),
+  revision INTEGER NOT NULL DEFAULT 1 CHECK(revision > 0)
+);

package/dist/src/storage/sqlite/migrations/241_device_grant_audit.sql

@@ -0,0 +1,13 @@
+CREATE TABLE device_grant_events (
+  id TEXT PRIMARY KEY,
+  grant_id TEXT NOT NULL,
+  conversation_id TEXT NOT NULL,
+  requestor_principal_id TEXT NOT NULL,
+  target_principal_id TEXT NOT NULL,
+  target_endpoint_id TEXT NOT NULL,
+  tool_name TEXT NOT NULL,
+  arguments_sha256 TEXT NOT NULL,
+  event TEXT NOT NULL CHECK(event IN ('issued','reserved','consumed','revoked','expired')),
+  created_at_ms INTEGER NOT NULL
+);
+CREATE INDEX device_grant_events_conversation ON device_grant_events(conversation_id, created_at_ms);

package/dist/src/storage/sqlite/migrations/runner.d.ts

@@ -3,7 +3,7 @@ import type { ApplyMigrationsOptions } from './types.js';
 /** Baseline schema version applied from schema.sql on first open. */
 export declare const XOPC_DB_BASELINE_SCHEMA_VERSION = 165;
 /** Latest schema version this release supports (increment when adding migrations). */
-export declare const XOPC_DB_SCHEMA_VERSION = 239;
+export declare const XOPC_DB_SCHEMA_VERSION = 241;
 export declare function resolveMigrationsDir(override?: string): string;
 /**
  * Apply sequential SQL migrations from (currentVersion + 1) through targetVersion.

package/dist/src/storage/sqlite/migrations/runner.js

@@ -57,7 +57,7 @@ function applySingleMigration(db, migration, discardOldScenes = false) {
 */
 function applyPendingMigrations(db, options = {}) {
 	db.function("xopc_operation_id", () => currentOperationId() ?? null);
-	const targetVersion = options.targetVersion ?? 239;
+	const targetVersion = options.targetVersion ?? 241;
 	let currentVersion = readSchemaVersion(db);
 	if (currentVersion > targetVersion) throw new DatabaseSchemaTooNewError(currentVersion, targetVersion);
 	if (!options.migrationsDir && currentVersion < 165) throw new DatabaseSchemaTooOldError(currentVersion, 165);
@@ -95,7 +95,7 @@ function applyPendingMigrations(db, options = {}) {
 }
 /** Inspect schema version without mutating the database. */
 function inspectSchemaMigrationStatus(db, options = {}) {
-	const appVersion = options.targetVersion ?? 239;
+	const appVersion = options.targetVersion ?? 241;
 	const dbVersion = readSchemaVersion(db);
 	if (dbVersion > appVersion) return {
 		dbVersion,
@@ -137,7 +137,7 @@ var init_runner = __esmMin((() => {
 	init_errors();
 	log = createLogger("Sqlite:Migrations");
 	XOPC_DB_BASELINE_SCHEMA_VERSION = 165;
-	XOPC_DB_SCHEMA_VERSION = 239;
+	XOPC_DB_SCHEMA_VERSION = 241;
 }));
 //#endregion
 init_runner();

package/dist/src/storage/sqlite/schema.js

@@ -28,7 +28,7 @@ function ensureXopcDatabaseSchema(db, options = {}) {
 		currentVersion = 165;
 	}
 	applyPendingMigrations(db, {
-		targetVersion: 239,
+		targetVersion: 241,
 		databasePath: fresh ? void 0 : options.databasePath
 	});
 }

package/dist/src/storage/sqlite/session-input-repository.d.ts

@@ -71,6 +71,7 @@ export declare function listActiveSessionInputExecutions(): Array<{
     taskRunId?: string;
     startedAt: number;
 }>;
+export declare function findSessionInputByRunId(conversationId: string, runId: string): SessionInput | undefined;
 export declare function findSessionInput(conversationId: string, clientMessageId: string): SessionInput | undefined;
 export declare function getSessionInputById(conversationId: string, id: string): SessionInput | undefined;
 export declare class SessionInstanceChangedError extends Error {

package/dist/src/storage/sqlite/session-input-repository.js

@@ -112,6 +112,10 @@ function listActiveSessionInputExecutions() {
 		startedAt: row.updated_at_ms ?? Date.now()
 	}));
 }
+function findSessionInputByRunId(conversationId, runId) {
+	const row = getSqliteDatabase().prepare(`${SELECT_INPUTS} WHERE conversation_id = ? AND run_id = ? ORDER BY created_at_ms LIMIT 1`).get(conversationId, runId);
+	return row ? mapInput(row) : void 0;
+}
 function findSessionInput(conversationId, clientMessageId) {
 	const row = getSqliteDatabase().prepare(`${SELECT_INPUTS} WHERE conversation_id = ? AND client_message_id = ?`).get(conversationId, clientMessageId);
 	return row ? mapInput(row) : void 0;
@@ -251,4 +255,4 @@ var init_session_input_repository = __esmMin((() => {
 }));
 //#endregion
 init_session_input_repository();
-export { SessionInstanceChangedError, bumpSessionInputRevision, cancelQueuedSessionInput, claimNextSessionInput, findSessionInput, finishSessionInputRun, getSessionInputById, getSessionInputState, init_session_input_repository, insertSessionInput, listActiveSessionInputExecutions, listActiveSessionInputRuns, listTaskUpdateRunIds, listTaskUpdateTriggers, mutateQueuedSessionInput, recoverSessionInputState, setSessionInputStatus };
+export { SessionInstanceChangedError, bumpSessionInputRevision, cancelQueuedSessionInput, claimNextSessionInput, findSessionInput, findSessionInputByRunId, finishSessionInputRun, getSessionInputById, getSessionInputState, init_session_input_repository, insertSessionInput, listActiveSessionInputExecutions, listActiveSessionInputRuns, listTaskUpdateRunIds, listTaskUpdateTriggers, mutateQueuedSessionInput, recoverSessionInputState, setSessionInputStatus };