@xopcai/xopc 0.0.391 → 0.0.393

package/dist/src/agent/tools/search/registry.js

@@ -4,6 +4,7 @@ import { executeWithTimeout } from "../../lifecycle/timeout-wrapper.js";
 import { SearchError, classifySearchError, searchFailureInfo } from "./errors.js";
 import { SearchCacheWriteError, currentSearchCache } from "./cache.js";
 import { BraveProvider } from "./providers/brave.js";
+import { DeepSeekProvider } from "./providers/deepseek.js";
 import { TavilyProvider } from "./providers/tavily.js";
 import { BingApiProvider } from "./providers/bing-api.js";
 import { BingHtmlProvider } from "./providers/bing-html.js";
@@ -21,6 +22,7 @@ var SearchProviderRegistry = class {
 	cache;
 	cachePrefix;
 	requestTimeoutMs;
+	cloudRequestTimeoutMs;
 	retryDelayMs;
 	sourceRequests = 0;
 	cooldowns = /* @__PURE__ */ new Map();
@@ -43,6 +45,7 @@ var SearchProviderRegistry = class {
 			this.fallbackProvider?.name
 		])).digest("hex");
 		this.requestTimeoutMs = options.requestTimeoutMs ?? 1e4;
+		this.cloudRequestTimeoutMs = options.requestTimeoutMs ?? 3e4;
 		this.retryDelayMs = options.retryDelayMs ?? 300;
 		log.debug({
 			region: config.region,
@@ -58,6 +61,9 @@ var SearchProviderRegistry = class {
 		for (const p of config.providers) {
 			if (p.disabled) continue;
 			switch (p.type) {
+				case "deepseek":
+					list.push(new DeepSeekProvider(p.apiKey ?? "", p.url));
+					break;
 				case "brave":
 					list.push(new BraveProvider(p.apiKey ?? ""));
 					break;
@@ -91,7 +97,8 @@ var SearchProviderRegistry = class {
 			results: structuredClone(cached.results),
 			provider: cached.provider,
 			cached: true,
-			capturedAt: cached.capturedAt
+			capturedAt: cached.capturedAt,
+			...cached.metadata ? { metadata: structuredClone(cached.metadata) } : {}
 		} : void 0;
 	}
 	remember(query, count, response) {
@@ -102,6 +109,7 @@ var SearchProviderRegistry = class {
 				count,
 				results: structuredClone(response.results),
 				provider: response.provider,
+				...response.metadata ? { metadata: structuredClone(response.metadata) } : {},
 				capturedAt: response.capturedAt ?? Date.now()
 			});
 		} catch (error) {
@@ -117,7 +125,7 @@ var SearchProviderRegistry = class {
 		try {
 			return await executeWithTimeout(() => execute(controller.signal), {
 				toolName: `web_search:${name}`,
-				timeoutMs: this.requestTimeoutMs,
+				timeoutMs: name === "xopc-cloud" ? this.cloudRequestTimeoutMs : this.requestTimeoutMs,
 				signal,
 				onTimeout: (error) => controller.abort(error)
 			});
@@ -139,6 +147,7 @@ var SearchProviderRegistry = class {
 		const hit = this.cached(query, count);
 		if (hit) return hit;
 		let lastError;
+		const attempts = [];
 		for (const provider of [...this.providers, ...this.fallbackProvider ? [this.fallbackProvider] : []]) {
 			signal?.throwIfAborted();
 			authorize();
@@ -152,13 +161,24 @@ var SearchProviderRegistry = class {
 				signal?.throwIfAborted();
 				authorize();
 				try {
-					const results = await this.attempt(provider.name, signal, (requestSignal) => provider.search(query, count, requestSignal));
+					const execution = await this.attempt(provider.name, signal, async (requestSignal) => provider.searchWithMetadata ? provider.searchWithMetadata(query, count, requestSignal) : { results: await provider.search(query, count, requestSignal) });
 					signal?.throwIfAborted();
 					authorize();
+					const metadata = execution.metadata;
+					const route = metadata?.attempts?.length ? metadata.attempts : provider.name === "xopc-cloud" && (metadata?.attemptCount ?? 1) > 1 ? [] : [{
+						provider: provider.name,
+						...metadata?.upstream ? { upstream: metadata.upstream } : {},
+						outcome: execution.results.length ? "success" : "empty"
+					}];
 					const response = {
-						results,
+						results: execution.results,
 						provider: provider.name,
-						capturedAt: Date.now()
+						capturedAt: Date.now(),
+						metadata: {
+							...metadata,
+							attemptCount: attempts.length + (metadata?.attemptCount ?? route.length),
+							attempts: [...attempts, ...route].slice(-24)
+						}
 					};
 					this.remember(query, count, response);
 					return response;
@@ -167,6 +187,11 @@ var SearchProviderRegistry = class {
 					const failure = classifySearchError(error, signal);
 					if (signal?.aborted || failure.kind === "permission_denied" || failure.kind === "cancelled") throw failure;
 					lastError = failure;
+					attempts.push({
+						provider: provider.name,
+						outcome: "error",
+						reason: failure.kind
+					});
 					if (failure.kind === "rate_limited") this.cooldowns.set(provider.name, {
 						until: Date.now() + (failure.retryAfterMs ?? this.retryDelayMs),
 						error: failure
@@ -218,7 +243,8 @@ var SearchProviderRegistry = class {
 					const response = {
 						results: item.results,
 						provider: provider.name,
-						capturedAt: Date.now()
+						capturedAt: Date.now(),
+						metadata: item.metadata
 					};
 					this.remember(request.query, request.count, response);
 					outputs.set(this.key(request.query, request.count), {

package/dist/src/agent/tools/search/request-gate.d.ts

@@ -0,0 +1,13 @@
+export declare class SearchRateLimitError extends Error {
+    readonly retryAfterMs: number;
+    readonly status = 429;
+    constructor(retryAfterMs: number);
+}
+/** Process-wide callers share a gate, including when credentials belong to one account. */
+export declare class SearchRequestGate {
+    private nextStartAt;
+    private cooldownUntil;
+    private pending;
+    cooldown(ms: number): void;
+    wait(signal?: AbortSignal): Promise<void>;
+}

package/dist/src/agent/tools/search/request-gate.js

@@ -0,0 +1,41 @@
+import { setTimeout } from "node:timers/promises";
+//#region src/agent/tools/search/request-gate.ts
+var SearchRateLimitError = class extends Error {
+	status = 429;
+	constructor(retryAfterMs) {
+		super("Search upstream rate limit exceeded");
+		this.retryAfterMs = retryAfterMs;
+	}
+};
+/** Process-wide callers share a gate, including when credentials belong to one account. */
+var SearchRequestGate = class {
+	nextStartAt = 0;
+	cooldownUntil = 0;
+	pending = 0;
+	cooldown(ms) {
+		this.cooldownUntil = Math.max(this.cooldownUntil, Date.now() + ms);
+	}
+	async wait(signal) {
+		signal?.throwIfAborted();
+		if (this.pending >= 8) throw new SearchRateLimitError(1e3);
+		this.pending++;
+		const queuedAt = Date.now();
+		try {
+			while (true) {
+				signal?.throwIfAborted();
+				const now = Date.now();
+				const waitMs = Math.max(0, this.nextStartAt - now, this.cooldownUntil - now);
+				if (now - queuedAt + waitMs > 2e3) throw new SearchRateLimitError(waitMs || 250);
+				if (!waitMs) {
+					this.nextStartAt = now + 250;
+					return;
+				}
+				await setTimeout(waitMs, void 0, { signal });
+			}
+		} finally {
+			this.pending--;
+		}
+	}
+};
+//#endregion
+export { SearchRateLimitError, SearchRequestGate };

package/dist/src/agent/tools/search/resolve-config.js

@@ -11,7 +11,7 @@ function resolveWebSearchConfig(web) {
 	const search = web?.search;
 	const region = resolveWebSearchRegion(web);
 	const providers = (search?.providers ?? []).map((p) => {
-		const resolvedKey = p.apiKey !== void 0 && p.apiKey !== "" ? resolveKey(p.apiKey) : void 0;
+		const resolvedKey = p.type === "deepseek" && /^[A-Z][A-Z0-9_]*$/.test(p.apiKey ?? "") ? process.env[p.apiKey] : p.apiKey !== void 0 && p.apiKey !== "" ? resolveKey(p.apiKey) : void 0;
 		const url = p.url?.replace(/\/+$/, "");
 		return {
 			type: p.type,

package/dist/src/agent/tools/search/search-info.d.ts

@@ -0,0 +1,8 @@
+import type { SearchMetadata } from './types.js';
+export interface SearchInfo extends SearchMetadata {
+    provider: string;
+    cached?: boolean;
+    capturedAt?: number;
+}
+/** Keep compact provenance through transcript truncation, excluding query and result payloads. */
+export declare function sanitizeSearchInfo(value: unknown): SearchInfo | undefined;

package/dist/src/agent/tools/search/search-info.js

@@ -0,0 +1,34 @@
+//#region src/agent/tools/search/search-info.ts
+/** Keep compact provenance through transcript truncation, excluding query and result payloads. */
+function sanitizeSearchInfo(value) {
+	if (!value || typeof value !== "object" || Array.isArray(value)) return void 0;
+	const row = value;
+	const id = (v) => typeof v === "string" && /^[a-z0-9][a-z0-9_-]{0,63}$/.test(v);
+	if (!id(row.provider)) return void 0;
+	const attempts = Array.isArray(row.attempts) ? row.attempts.slice(0, 24).flatMap((item) => {
+		if (!item || typeof item !== "object") return [];
+		const step = item;
+		if (!id(step.provider) || ![
+			"success",
+			"empty",
+			"error",
+			"skipped"
+		].includes(String(step.outcome))) return [];
+		return [{
+			provider: step.provider,
+			outcome: step.outcome,
+			...id(step.upstream) ? { upstream: step.upstream } : {},
+			...typeof step.reason === "string" && /^[a-z_]{1,64}$/.test(step.reason) ? { reason: step.reason } : {}
+		}];
+	}) : void 0;
+	return {
+		provider: row.provider,
+		...id(row.upstream) ? { upstream: row.upstream } : {},
+		...typeof row.cached === "boolean" ? { cached: row.cached } : {},
+		...typeof row.capturedAt === "number" && Number.isSafeInteger(row.capturedAt) && row.capturedAt > 0 ? { capturedAt: row.capturedAt } : {},
+		...typeof row.attemptCount === "number" && Number.isSafeInteger(row.attemptCount) && row.attemptCount > 0 && row.attemptCount <= 1e4 ? { attemptCount: row.attemptCount } : {},
+		...attempts?.length ? { attempts } : {}
+	};
+}
+//#endregion
+export { sanitizeSearchInfo };

package/dist/src/agent/tools/search/types.d.ts

@@ -11,11 +11,12 @@ export interface SearchProvider {
     isAvailable(): boolean;
     cacheIdentity?(): string;
     search(query: string, count: number, signal?: AbortSignal): Promise<SearchResult[]>;
+    searchWithMetadata?(query: string, count: number, signal?: AbortSignal): Promise<SearchExecution>;
     /** Optional host-implemented batch transport; ids must be echoed for partial results. */
     searchBatch?(requests: SearchRequest[], signal?: AbortSignal): Promise<SearchBatchItem[]>;
 }
 export interface ResolvedSearchProviderEntry {
-    type: 'brave' | 'tavily' | 'bing' | 'searxng';
+    type: 'brave' | 'tavily' | 'bing' | 'searxng' | 'deepseek';
     apiKey?: string;
     url?: string;
     disabled?: boolean;
@@ -35,12 +36,29 @@ export interface SearchBatchItem {
     id: string;
     results?: SearchResult[];
     error?: SearchFailureInfo;
+    metadata?: SearchMetadata;
+}
+export interface SearchAttempt {
+    provider: string;
+    upstream?: string;
+    outcome: 'success' | 'empty' | 'error' | 'skipped';
+    reason?: string;
+}
+export interface SearchMetadata {
+    upstream?: string;
+    attemptCount?: number;
+    attempts?: SearchAttempt[];
+}
+export interface SearchExecution {
+    results: SearchResult[];
+    metadata?: SearchMetadata;
 }
 export interface SearchResponse {
     results: SearchResult[];
     provider: string;
     cached?: boolean;
     capturedAt?: number;
+    metadata?: SearchMetadata;
 }
 export interface SearchBatchResponse extends SearchRequest {
     response?: SearchResponse;

package/dist/src/agent/tools/toolExposure.d.ts

@@ -0,0 +1,3 @@
+import type { AgentTool } from '@earendil-works/pi-agent-core';
+/** Defer declarations, not permissions. pi tool_search loads the unchanged contract on demand. */
+export declare function withCoreToolExposure(tool: AgentTool): AgentTool;

package/dist/src/agent/tools/toolExposure.js

@@ -0,0 +1,25 @@
+import { getXopcToolMetadata, setXopcToolMetadata } from "../embedded/tool-metadata.js";
+//#region src/agent/tools/toolExposure.ts
+const EAGER_CORE_TOOLS = new Set([
+	"read_file",
+	"write_file",
+	"apply_patch",
+	"grep",
+	"find",
+	"list_dir",
+	"exec_command",
+	"review_workspace",
+	"publish_artifacts",
+	"task_collaboration",
+	"publish_task_result"
+]);
+/** Defer declarations, not permissions. pi tool_search loads the unchanged contract on demand. */
+function withCoreToolExposure(tool) {
+	if (EAGER_CORE_TOOLS.has(tool.name) || getXopcToolMetadata(tool)?.exposure !== void 0) return tool;
+	return setXopcToolMetadata(tool, {
+		...getXopcToolMetadata(tool),
+		exposure: "deferred"
+	});
+}
+//#endregion
+export { withCoreToolExposure };

package/dist/src/agent/tools/web.js

@@ -1,6 +1,7 @@
 import { SearchError, classifySearchError, searchFailureInfo } from "./search/errors.js";
 import { SearchProviderRegistry } from "./search/registry.js";
 import { resolveWebSearchConfig } from "./search/resolve-config.js";
+import { sanitizeSearchInfo } from "./search/search-info.js";
 import { fetchPublicText } from "./fetch-text.js";
 import { Type } from "@sinclair/typebox";
 //#region src/agent/tools/web.ts
@@ -23,7 +24,13 @@ function searchToolResult(query, count, response) {
 			query,
 			count,
 			cached: response.cached ?? false,
-			capturedAt: response.capturedAt
+			capturedAt: response.capturedAt,
+			searchInfo: sanitizeSearchInfo({
+				...response.metadata,
+				provider: response.provider,
+				cached: response.cached ?? false,
+				capturedAt: response.capturedAt
+			})
 		}
 	};
 }

package/dist/src/agent/tools/xopc-use-tool.d.ts

@@ -1,4 +1,3 @@
-import type { SceneAccess } from '../../scenes/httpServices.js';
 import { type CapabilityContext } from '../../capabilities/runtime/dispatcher.js';
 import type { AgentTool } from '@earendil-works/pi-agent-core';
 import { type ProductDeliveryEnvelope } from '@xopcai/gateway-contract';
@@ -10,12 +9,12 @@ import type { LocalAppService } from '../../local-apps/index.js';
 import type { ChatPreviewService } from '../../chat-previews/index.js';
 import { TaskApplicationService } from '../../tasks/task-application-service.js';
 declare const XopcUseToolSchema: import("@sinclair/typebox").TObject<{
-    mode: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"context">, import("@sinclair/typebox").TLiteral<"scene">, import("@sinclair/typebox").TLiteral<"project">, import("@sinclair/typebox").TLiteral<"automation">, import("@sinclair/typebox").TLiteral<"note">, import("@sinclair/typebox").TLiteral<"task">, import("@sinclair/typebox").TLiteral<"task_run">, import("@sinclair/typebox").TLiteral<"local_app">, import("@sinclair/typebox").TLiteral<"chat_preview">, import("@sinclair/typebox").TLiteral<"agent">, import("@sinclair/typebox").TLiteral<"settings">]>;
+    mode: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"context">, import("@sinclair/typebox").TLiteral<"project">, import("@sinclair/typebox").TLiteral<"automation">, import("@sinclair/typebox").TLiteral<"note">, import("@sinclair/typebox").TLiteral<"task">, import("@sinclair/typebox").TLiteral<"task_run">, import("@sinclair/typebox").TLiteral<"local_app">, import("@sinclair/typebox").TLiteral<"chat_preview">, import("@sinclair/typebox").TLiteral<"agent">, import("@sinclair/typebox").TLiteral<"settings">]>;
     command: import("@sinclair/typebox").TString;
     args: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TRecord<import("@sinclair/typebox").TString, import("@sinclair/typebox").TAny>>;
     dryRun: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TBoolean>;
 }>;
-export type XopcUseMode = 'context' | 'scene' | 'project' | 'automation' | 'note' | 'task' | 'task_run' | 'chat_preview' | 'local_app' | 'agent' | 'settings';
+export type XopcUseMode = 'context' | 'project' | 'automation' | 'note' | 'task' | 'task_run' | 'chat_preview' | 'local_app' | 'agent' | 'settings';
 export interface XopcUseToolInput {
     mode: XopcUseMode;
     command: string;
@@ -29,7 +28,6 @@ export interface XopcUseToolDeps {
     getCurrentAgentId?: () => string | undefined;
     getCurrentConversationId?: () => string | undefined;
     getAutomationService?: () => AutomationService | undefined;
-    getSceneAccess?: () => SceneAccess | undefined;
     getNotesService?: () => NotesService | undefined;
     getProjectService?: () => ProjectService | undefined;
     getWorkDiscovery?: () => import('../../work-discovery/service.js').WorkDiscoveryService | undefined;

package/dist/src/agent/tools/xopc-use-tool.js

@@ -4,7 +4,7 @@ import { normalizeSpecialistRequirements } from "../../../packages/gateway-contr
 import { TaskCommandSchema, TaskContextInputSchema } from "../../../packages/gateway-contract/src/tasks.js";
 import { ChatPreviewCreateInputSchema, ChatPreviewReviseInputSchema } from "../../../packages/gateway-contract/src/chat-previews.js";
 import { appendProductDeliveryText } from "../../../packages/gateway-contract/src/product-delivery.js";
-import { AutomationCancelOutputSchema, AutomationDeleteOutputSchema, AutomationMutationOutputSchema, AutomationReadAllInputSchema, AutomationReadAllOutputSchema, AutomationReadOutputSchema, AutomationRecoveryOutputSchema, AutomationRunMutationOutputSchema, CapabilityCallSchema, CapabilityResourceInputSchema, NoteDeleteOutputSchema, NoteGetOutputSchema, ProjectCreateInputSchema, ProjectDeleteInputSchema, ProjectDeleteOutputSchema, ProjectEditInputSchema, ProjectMilestoneCreateInputSchema, ProjectMilestoneDeleteInputSchema, ProjectMilestoneDeleteOutputSchema, ProjectMilestoneOutputSchema, ProjectMilestoneUpdateInputSchema, ProjectMutationOutputSchema, ProjectResolveWorkspaceInputSchema, ProjectResolveWorkspaceOutputSchema, ProjectSetPinnedInputSchema, ProjectUpdateCreateInputSchema, ProjectUpdateOutputSchema, SceneWriteContracts, TaskRunCancelInputSchema, TaskRunCancelOutputSchema, TaskRunFeedbackInputSchema, TaskRunFeedbackOutputSchema } from "../../../packages/gateway-contract/src/capabilities.js";
+import { AutomationCancelOutputSchema, AutomationDeleteOutputSchema, AutomationMutationOutputSchema, AutomationReadAllInputSchema, AutomationReadAllOutputSchema, AutomationReadOutputSchema, AutomationRecoveryOutputSchema, AutomationRunMutationOutputSchema, CapabilityCallSchema, CapabilityResourceInputSchema, NoteDeleteOutputSchema, NoteGetOutputSchema, ProjectCreateInputSchema, ProjectDeleteInputSchema, ProjectDeleteOutputSchema, ProjectEditInputSchema, ProjectMilestoneCreateInputSchema, ProjectMilestoneDeleteInputSchema, ProjectMilestoneDeleteOutputSchema, ProjectMilestoneOutputSchema, ProjectMilestoneUpdateInputSchema, ProjectMutationOutputSchema, ProjectResolveWorkspaceInputSchema, ProjectResolveWorkspaceOutputSchema, ProjectSetPinnedInputSchema, ProjectUpdateCreateInputSchema, ProjectUpdateOutputSchema, TaskRunCancelInputSchema, TaskRunCancelOutputSchema, TaskRunFeedbackInputSchema, TaskRunFeedbackOutputSchema } from "../../../packages/gateway-contract/src/capabilities.js";
 import { init_src } from "../../../packages/gateway-contract/src/index.js";
 import { TaskRepository } from "../../tasks/task-repository.js";
 import { TaskRunRepository } from "../../tasks/task-run-repository.js";
@@ -14,7 +14,7 @@ import "../../activity/index.js";
 import { CapabilityError } from "../../capabilities/runtime/errors.js";
 import "../../capabilities/runtime/dispatcher.js";
 import { getDefaultAgentId, init_resolve_route } from "../../routing/resolve-route.js";
-import { resolveTaskLocale } from "../../tasks/task-language.js";
+import { hasUnlocalizedTaskText, resolveTaskLocale } from "../../tasks/task-language.js";
 import { TaskReadModelProjector } from "../../tasks/task-read-model-projector.js";
 import { TaskOriginRepository } from "../../tasks/task-origin-repository.js";
 import { TaskConversationRepository } from "../../tasks/task-conversation-repository.js";
@@ -42,7 +42,6 @@ init_transaction();
 const XopcUseToolSchema = Type.Object({
 	mode: Type.Union([
 		Type.Literal("context"),
-		Type.Literal("scene"),
 		Type.Literal("project"),
 		Type.Literal("automation"),
 		Type.Literal("note"),
@@ -53,7 +52,7 @@ const XopcUseToolSchema = Type.Object({
 		Type.Literal("agent"),
 		Type.Literal("settings")
 	]),
-	command: Type.String({ description: "Context resolve takes an explicit AppContextEnvelope; never guess a current page. Automation draft/repair_draft accept prompt/id, agentId?, language?, idempotencyKey?; simulate explains an automation without running it. Local_app record_acceptance records supplied checks and sourceHash, not proof that checks were executed. Agent commands: list, get {id}, create {id, profile, workspace?, models?, skills?, tools?, workflows?, runtime?, idempotencyKey?}, update {id, expectedRevision, patch, idempotencyKey?}, set_default {id, expectedRevision, idempotencyKey?}, disable/delete/purge {id, expectedRevision, idempotencyKey?}. Purge also removes on-disk data. Project create accepts idempotencyKey; update/pin/unpin/delete accepts {projectId, expectedVersion?, idempotencyKey?}; stable retries require the original expectedVersion. Delete preserves workspace files and does not confirm external execution stopped. Project milestone writes support idempotencyKey; update_milestone/delete_milestone require original expectedRevision for stable retries, and create_update requires original expectedVersion. TaskRun cancel accepts idempotencyKey and expectedVersion, and does not confirm external execution stopped. Automation diagnostics: get_run/run_events {runId}, metrics {}, events {eventType?, source?, limit?}, deliveries {runId?, limit?}, product_events {eventType, source?, payloadKey?, payloadValue?, limit?}; payload filters require both key and value. Recovery commands: replay_event {eventId, reason, idempotencyKey}, retry_delivery {runId, destinationKey, reason, idempotencyKey}. Automation also supports cancel/read {runId, idempotencyKey?} and read_all {projectId?, idempotencyKey?}; omitted projectId means all projects. Cancel acceptance is not confirmation of stopping. Object command. Scene commands: templates, list, get {id}, mail_accounts, mail_search {accountId, query}, mail_sources, read_notes {id}, preflight/start {templateKey, templateVersion, goal, scope, permissions}, configure {id, expectedRevision, goal, scope, permissions}, transition {id, expectedRevision, status: paused|active|completed|archived}, check {id}, notes {id, expectedRevision, content, validUntil?}, work_item {id, subjectId, accountId, dueAt}, update_work_item {workItemId, expectedRevision, dueAt?, status?}, schedule {id, triggerKey, expectedRevision, schedule}, results {id?}, feedback {presentationId, expectedRevision, rating}, mark_read {presentationId, read}, diagnostics, get_preferences, set_preferences {expectedRevision, ...preferences}. Start and check accept a stable requestId for retries. Scenes prepare read-only suggestions and drafts; never send mail. Only create a scene for work explicitly delegated by the user; inspect existing scenes first. Supports project list/get/create/update/resolve_workspace/list_milestones/create_milestone/update_milestone/list_updates/create_update, automation list/get/create/update/delete/run/rerun/pause/resume/history (rerun takes runId; run/rerun accept idempotencyKey), note list/get/project_summaries/history {noteId}/snapshot {noteId, timestamp}/create/append/update/preview_edit/delete, task list/get/create/update_dependencies/add_context/remove_context/command/delete, task_run list/get/cancel, chat_preview create/revise/get, local_app list/get/create/validate, and settings open." }),
+	command: Type.String({ description: "Context resolve takes an explicit AppContextEnvelope; never guess a current page. Automation draft/repair_draft accept prompt/id, agentId?, language?, idempotencyKey?; simulate explains an automation without running it. Local_app record_acceptance records supplied checks and sourceHash, not proof that checks were executed. Agent commands: list, get {id}, create {id, profile, workspace?, models?, skills?, tools?, workflows?, runtime?, idempotencyKey?}, update {id, expectedRevision, patch, idempotencyKey?}, set_default {id, expectedRevision, idempotencyKey?}, disable/delete/purge {id, expectedRevision, idempotencyKey?}. Purge also removes on-disk data. Project create accepts idempotencyKey; update/pin/unpin/delete accepts {projectId, expectedVersion?, idempotencyKey?}; stable retries require the original expectedVersion. Delete preserves workspace files and does not confirm external execution stopped. Project milestone writes support idempotencyKey; update_milestone/delete_milestone require original expectedRevision for stable retries, and create_update requires original expectedVersion. TaskRun cancel accepts idempotencyKey and expectedVersion, and does not confirm external execution stopped. Automation diagnostics: get_run/run_events {runId}, metrics {}, events {eventType?, source?, limit?}, deliveries {runId?, limit?}, product_events {eventType, source?, payloadKey?, payloadValue?, limit?}; payload filters require both key and value. Recovery commands: replay_event {eventId, reason, idempotencyKey}, retry_delivery {runId, destinationKey, reason, idempotencyKey}. Automation also supports cancel/read {runId, idempotencyKey?} and read_all {projectId?, idempotencyKey?}; omitted projectId means all projects. Cancel acceptance is not confirmation of stopping. Object command. Supports project list/get/create/update/resolve_workspace/list_milestones/create_milestone/update_milestone/list_updates/create_update, automation list/get/create/update/delete/run/rerun/pause/resume/history (rerun takes runId; run/rerun accept idempotencyKey), note list/get/project_summaries/history {noteId}/snapshot {noteId, timestamp}/create/append/update/preview_edit/delete, task list/get/create/update_dependencies/add_context/remove_context/command/delete, task_run list/get/cancel, chat_preview create/revise/get, local_app list/get/create/validate, and settings open." }),
 	args: Type.Optional(Type.Record(Type.String(), Type.Any())),
 	dryRun: Type.Optional(Type.Boolean({ description: "Validate and preview the action without mutating xopc state." }))
 });
@@ -183,10 +182,9 @@ function deliveryForXopcResult(mode, command, result, dryRun) {
 			"note",
 			"project",
 			"automation",
-			"scene",
 			"local_app"
 		].includes(mode)) return void 0;
-		const field = mode === "scene" ? "activation" : mode === "local_app" ? "app" : mode;
+		const field = mode === "local_app" ? "app" : mode;
 		const items = rows.slice(0, 50).flatMap((row) => {
 			const reference = deliveryForXopcResult(mode, "get", { [field]: row }, false)?.primary;
 			return reference ? [{
@@ -273,21 +271,6 @@ function deliveryForXopcResult(mode, command, result, dryRun) {
 				]
 			};
 		}
-	} else if (mode === "scene") {
-		source = record(resultRecord.activation);
-		const id = deliveryText(source?.id);
-		if (id) primary = {
-			kind: "scene",
-			id,
-			title: deliveryText(source?.goal) ?? "Scene",
-			status: deliveryText(source?.status),
-			revision: deliveryRevision(source?.revision),
-			capabilities: [
-				"open",
-				"edit",
-				"continue_in_chat"
-			]
-		};
 	} else if (mode === "note") {
 		source = record(resultRecord.note);
 		const id = deliveryText(source?.id);
@@ -403,7 +386,7 @@ function deliveryForXopcResult(mode, command, result, dryRun) {
 	if (mode === "chat_preview" && !chatPreviewSourceHash) return void 0;
 	return {
 		version: 2,
-		operation: mode === "task" && deliveryText(resultRecord.runId) || mode === "automation" && (command === "run" || command === "rerun") || mode === "scene" && command === "check" ? "started" : command === "create" || mode === "scene" && command === "start" ? "created" : command === "get" || command === "resolve_workspace" || mode === "settings" ? "opened" : command === "validate" ? "completed" : "updated",
+		operation: mode === "task" && deliveryText(resultRecord.runId) || mode === "automation" && (command === "run" || command === "rerun") ? "started" : command === "create" ? "created" : command === "get" || command === "resolve_workspace" || mode === "settings" ? "opened" : command === "validate" ? "completed" : "updated",
 		primary,
 		...mode === "local_app" ? { presentation: {
 			kind: "inline_app",
@@ -1442,6 +1425,10 @@ async function handleTask(command, args, deps, dryRun, capabilities) {
 				ok: false,
 				error: `Invalid ${field}: pass a flat list of strings or omit this optional field`
 			};
+			if (hasUnlocalizedTaskText(value, taskLocale)) return {
+				ok: false,
+				error: `Write ${field} in Simplified Chinese to match the task language. Preserve all requirements, paths, URLs and proper nouns; translate only explanatory prose.`
+			};
 			contract[field] = value;
 		}
 		const originConversationId = deps.getCurrentConversationId?.();
@@ -1921,14 +1908,13 @@ function createXopcUseTool(deps) {
 		getProjects: deps.getProjectService,
 		getWorkDiscovery: deps.getWorkDiscovery,
 		getLocalApps: deps.getLocalAppService,
-		getSceneAccess: deps.getSceneAccess,
 		getAutomations: deps.getAutomationService,
 		wake: deps.dispatchTaskRuns || deps.dispatchTaskEvents ? (runId) => runId ? deps.dispatchTaskRuns?.() : deps.dispatchTaskEvents?.() : void 0
 	});
 	return {
 		name: "xopc_use",
 		label: "XOPC Use",
-		description: "Operate first-class xopc objects through one safe entry point. To delegate work for immediate execution: mode task, command create, args {title:\"Short task name\", objective:\"One-sentence outcome\", body:\"Full Markdown task brief\", createMode:\"start\", agentId:\"researcher\"}; omitting createMode creates a backlog task only. To start an existing Task: mode task, command command, args {taskId, type:\"start\", expectedVersion, commandArgs:{executor:{kind:\"agent\",agentId:\"main\"}}}. Inspect an existing Task and its run before creating another Task for the same objective. For delegated work, task delegated_tasks lists this conversation's tasks; task collaboration reads the shared board; task collaboration_post writes {taskId, kind, body, causationId?, idempotencyKey?}. Workers report progress or questions; the main Agent writes instructions and answers. Use chat_preview for lightweight UI mockups in the current conversation; do not create a Local App unless the user asks for a durable app. Local App capabilities takes extensionId and discovers already granted bindings. Local App invoke requires extensionId, the discovered manifestDigest, capabilityId and a pinned call {majorVersion, descriptorDigest, input, idempotencyKey for writes}. Never manufacture grants or change a retry key after an uncertain write. Use for Agents, scenes, projects, automations, notes, tasks, TaskRuns, chat previews, local apps, and exact settings jump targets instead of editing storage files directly. For non-trivial object changes, load the built-in manual first with tool_manual({ tool: \"xopc_use\" }).",
+		description: "Operate first-class xopc objects through one safe entry point. To delegate work for immediate execution: mode task, command create, args {title:\"Short task name\", objective:\"One-sentence outcome\", body:\"Full Markdown task brief\", createMode:\"start\", agentId:\"researcher\"}; omitting createMode creates a backlog task only. To start an existing Task: mode task, command command, args {taskId, type:\"start\", expectedVersion, commandArgs:{executor:{kind:\"agent\",agentId:\"main\"}}}. Inspect an existing Task and its run before creating another Task for the same objective. For delegated work, task delegated_tasks lists this conversation's tasks; task collaboration reads the shared board; task collaboration_post writes {taskId, kind, body, causationId?, idempotencyKey?}. Workers report progress or questions; the main Agent writes instructions and answers. Use chat_preview for lightweight UI mockups in the current conversation; do not create a Local App unless the user asks for a durable app. Local App capabilities takes extensionId and discovers already granted bindings. Local App invoke requires extensionId, the discovered manifestDigest, capabilityId and a pinned call {majorVersion, descriptorDigest, input, idempotencyKey for writes}. Never manufacture grants or change a retry key after an uncertain write. Use for Agents, projects, automations, notes, tasks, TaskRuns, chat previews, local apps, and exact settings jump targets instead of editing storage files directly. For non-trivial object changes, load the built-in manual first with tool_manual({ tool: \"xopc_use\" }).",
 		parameters: XopcUseToolSchema,
 		mutatesWorkspace: true,
 		mutationScope: "external",
@@ -1984,103 +1970,6 @@ function createXopcUseTool(deps) {
 					result: await capabilities.call("xopc.context.resolve", args, caller)
 				});
 			}
-			if (mode === "scene" && ([
-				"configure",
-				"check",
-				"notes",
-				"work_item",
-				"update_work_item",
-				"schedule",
-				"set_preferences",
-				"feedback",
-				"mark_read",
-				"transition"
-			].includes(command) || command === "start" && !dryRun)) {
-				const operation = `xopc.scenes.${command}`;
-				const { requestId, idempotencyKey, workItemId, presentationId, ...fields } = args;
-				if (requestId !== void 0 && typeof requestId !== "string" || idempotencyKey !== void 0 && typeof idempotencyKey !== "string") return errorText("Request identity must be a string", details);
-				const projectedInput = command === "update_work_item" ? {
-					...fields,
-					id: workItemId ?? fields.id
-				} : command === "feedback" || command === "mark_read" ? {
-					...fields,
-					id: presentationId ?? fields.id
-				} : fields;
-				const parsed = SceneWriteContracts[operation].input.safeParse(projectedInput);
-				if (!parsed.success) {
-					const issue = parsed.error.issues[0];
-					const field = issue?.path.join(".") || "input";
-					const expected = issue?.code === "invalid_type" ? issue.expected : void 0;
-					return errorText(expected ? `${field} must be ${/^[aeiou]/.test(expected) ? "an" : "a"} ${expected}` : issue?.message ?? "Invalid input", details);
-				}
-				if (dryRun) return okText({
-					...details,
-					result: {
-						preview: true,
-						command,
-						input: parsed.data
-					}
-				});
-				const caller = {
-					principalId: `agent:${deps.getCurrentAgentId?.() ?? "main"}`,
-					surface: "agent",
-					scopes: ["gateway.admin"],
-					authorize: deps.authorizeCapability ?? (() => true),
-					signal
-				};
-				try {
-					const result = await capabilities.call(operation, parsed.data, caller, {
-						...capabilities.describe(operation, caller),
-						idempotencyKey: typeof idempotencyKey === "string" ? idempotencyKey : typeof requestId === "string" ? requestId : toolCallId
-					});
-					return okText({
-						...details,
-						result,
-						delivery: deliveryForXopcResult(mode, command, result, dryRun)
-					});
-				} catch (error) {
-					if (error instanceof CapabilityError) return errorText(error.message, details);
-					throw error;
-				}
-			}
-			if (mode === "scene" && ([
-				"templates",
-				"get_template",
-				"list",
-				"get",
-				"read_notes",
-				"list_runs",
-				"list_schedules",
-				"list_work_items",
-				"get_preferences",
-				"preflight",
-				"mail_accounts",
-				"mail_sources",
-				"results",
-				"get_presentation",
-				"get_feedback",
-				"digest_results",
-				"metrics",
-				"diagnostics"
-			].includes(command) || command === "start" && dryRun)) {
-				const caller = {
-					principalId: `agent:${deps.getCurrentAgentId?.() ?? "main"}`,
-					surface: "agent",
-					scopes: ["gateway.admin"],
-					authorize: deps.authorizeCapability ?? (() => true),
-					signal
-				};
-				const { id: _id, requestId: _requestId, triggerKey: _triggerKey, ...preflightInput } = args;
-				const result = await capabilities.call(`xopc.scenes.${command === "start" ? "preflight" : command}`, command === "start" || command === "preflight" ? preflightInput : command === "results" ? {
-					...preflightInput,
-					activationId: args.activationId ?? args.id
-				} : args, caller);
-				return okText({
-					...details,
-					result,
-					delivery: deliveryForXopcResult(mode, command, result, dryRun)
-				});
-			}
 			if (mode === "settings" && command === "open") {
 				const caller = {
 					principalId: `agent:${deps.getCurrentAgentId?.() ?? "main"}`,
@@ -2377,7 +2266,7 @@ function createXopcUseTool(deps) {
 						kind: "xopc_use",
 						toolCallId
 					}
-				}, async () => mode === "scene" ? await handleScene(command, args, deps, dryRun) : mode === "agent" ? await handleAgent(command, args, dryRun, capabilities, deps, toolCallId, signal) : mode === "project" ? await handleProject(command, args, deps, dryRun, capabilities) : mode === "automation" ? await handleAutomation(command, args, deps, dryRun, capabilities) : mode === "note" ? await handleNote(command, args, deps, dryRun, capabilities) : mode === "task" ? await handleTask(command, args, deps, dryRun, capabilities) : mode === "task_run" ? await handleTaskRun(command, args, dryRun, deps, capabilities) : mode === "local_app" ? await handleLocalApp(command, args, deps, dryRun) : mode === "chat_preview" ? await handleChatPreview(command, args, deps, dryRun) : {
+				}, async () => mode === "agent" ? await handleAgent(command, args, dryRun, capabilities, deps, toolCallId, signal) : mode === "project" ? await handleProject(command, args, deps, dryRun, capabilities) : mode === "automation" ? await handleAutomation(command, args, deps, dryRun, capabilities) : mode === "note" ? await handleNote(command, args, deps, dryRun, capabilities) : mode === "task" ? await handleTask(command, args, deps, dryRun, capabilities) : mode === "task_run" ? await handleTaskRun(command, args, dryRun, deps, capabilities) : mode === "local_app" ? await handleLocalApp(command, args, deps, dryRun) : mode === "chat_preview" ? await handleChatPreview(command, args, deps, dryRun) : {
 					ok: false,
 					error: `Unsupported mode: ${String(mode)}`
 				});
@@ -2398,18 +2287,5 @@ function createXopcUseTool(deps) {
 		}
 	};
 }
-async function handleScene(command, args, deps, dryRun) {
-	if (command !== "mail_search") throw new Error("Unsupported scene command");
-	const access = deps.getSceneAccess?.();
-	if (!access) throw new Error("Scene service is unavailable");
-	const { services, principal } = access;
-	if (!services.mailDiscovery) throw new Error("Mail search is unavailable");
-	if (dryRun) return {
-		preview: true,
-		command,
-		input: args
-	};
-	return { sources: await services.mailDiscovery.searchSources(principal, args, AbortSignal.timeout(15e3)) };
-}
 //#endregion
 export { createXopcUseTool };