@xopcai/xopc 0.0.391 → 0.0.393

package/dist/src/config/models-json.d.ts

@@ -29,9 +29,9 @@ export declare const OpenAICompletionsCompatSchema: z.ZodObject<{
     requiresThinkingAsText: z.ZodOptional<z.ZodBoolean>;
     requiresMistralToolIds: z.ZodOptional<z.ZodBoolean>;
     thinkingFormat: z.ZodOptional<z.ZodEnum<{
+        deepseek: "deepseek";
         openai: "openai";
         "ant-ling": "ant-ling";
-        deepseek: "deepseek";
         openrouter: "openrouter";
         zai: "zai";
         together: "together";
@@ -67,9 +67,9 @@ export declare const OpenAICompatSchema: z.ZodUnion<readonly [z.ZodObject<{
     requiresThinkingAsText: z.ZodOptional<z.ZodBoolean>;
     requiresMistralToolIds: z.ZodOptional<z.ZodBoolean>;
     thinkingFormat: z.ZodOptional<z.ZodEnum<{
+        deepseek: "deepseek";
         openai: "openai";
         "ant-ling": "ant-ling";
-        deepseek: "deepseek";
         openrouter: "openrouter";
         zai: "zai";
         together: "together";
@@ -364,6 +364,7 @@ export declare const ImageGenerationProviderSchema: z.ZodObject<{
     }, z.core.$strict>>;
 }, z.core.$strict>;
 export declare const CustomModelSchema: z.ZodObject<{
+    supportsTools: z.ZodOptional<z.ZodBoolean>;
     computerUse: z.ZodOptional<z.ZodObject<{
         profile: z.ZodEnum<{
             "gui-plus-2026-02-26": "gui-plus-2026-02-26";
@@ -420,9 +421,9 @@ export declare const CustomModelSchema: z.ZodObject<{
         requiresThinkingAsText: z.ZodOptional<z.ZodBoolean>;
         requiresMistralToolIds: z.ZodOptional<z.ZodBoolean>;
         thinkingFormat: z.ZodOptional<z.ZodEnum<{
+            deepseek: "deepseek";
             openai: "openai";
             "ant-ling": "ant-ling";
-            deepseek: "deepseek";
             openrouter: "openrouter";
             zai: "zai";
             together: "together";
@@ -445,6 +446,7 @@ export declare const CustomModelSchema: z.ZodObject<{
     }, z.core.$strip>, z.ZodObject<{}, z.core.$strip>]>>;
 }, z.core.$strip>;
 export declare const ModelOverrideSchema: z.ZodObject<{
+    supportsTools: z.ZodOptional<z.ZodBoolean>;
     computerUse: z.ZodOptional<z.ZodObject<{
         profile: z.ZodEnum<{
             "gui-plus-2026-02-26": "gui-plus-2026-02-26";
@@ -490,9 +492,9 @@ export declare const ModelOverrideSchema: z.ZodObject<{
         requiresThinkingAsText: z.ZodOptional<z.ZodBoolean>;
         requiresMistralToolIds: z.ZodOptional<z.ZodBoolean>;
         thinkingFormat: z.ZodOptional<z.ZodEnum<{
+            deepseek: "deepseek";
             openai: "openai";
             "ant-ling": "ant-ling";
-            deepseek: "deepseek";
             openrouter: "openrouter";
             zai: "zai";
             together: "together";
@@ -530,6 +532,7 @@ export declare const ProviderConfigSchema: z.ZodObject<{
     headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
     authHeader: z.ZodOptional<z.ZodBoolean>;
     models: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        supportsTools: z.ZodOptional<z.ZodBoolean>;
         computerUse: z.ZodOptional<z.ZodObject<{
             profile: z.ZodEnum<{
                 "gui-plus-2026-02-26": "gui-plus-2026-02-26";
@@ -586,9 +589,9 @@ export declare const ProviderConfigSchema: z.ZodObject<{
             requiresThinkingAsText: z.ZodOptional<z.ZodBoolean>;
             requiresMistralToolIds: z.ZodOptional<z.ZodBoolean>;
             thinkingFormat: z.ZodOptional<z.ZodEnum<{
+                deepseek: "deepseek";
                 openai: "openai";
                 "ant-ling": "ant-ling";
-                deepseek: "deepseek";
                 openrouter: "openrouter";
                 zai: "zai";
                 together: "together";
@@ -611,6 +614,7 @@ export declare const ProviderConfigSchema: z.ZodObject<{
         }, z.core.$strip>, z.ZodObject<{}, z.core.$strip>]>>;
     }, z.core.$strip>>>;
     modelOverrides: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+        supportsTools: z.ZodOptional<z.ZodBoolean>;
         computerUse: z.ZodOptional<z.ZodObject<{
             profile: z.ZodEnum<{
                 "gui-plus-2026-02-26": "gui-plus-2026-02-26";
@@ -656,9 +660,9 @@ export declare const ProviderConfigSchema: z.ZodObject<{
             requiresThinkingAsText: z.ZodOptional<z.ZodBoolean>;
             requiresMistralToolIds: z.ZodOptional<z.ZodBoolean>;
             thinkingFormat: z.ZodOptional<z.ZodEnum<{
+                deepseek: "deepseek";
                 openai: "openai";
                 "ant-ling": "ant-ling";
-                deepseek: "deepseek";
                 openrouter: "openrouter";
                 zai: "zai";
                 together: "together";
@@ -811,6 +815,7 @@ export declare const ModelsJsonSchema: z.ZodObject<{
         headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
         authHeader: z.ZodOptional<z.ZodBoolean>;
         models: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            supportsTools: z.ZodOptional<z.ZodBoolean>;
             computerUse: z.ZodOptional<z.ZodObject<{
                 profile: z.ZodEnum<{
                     "gui-plus-2026-02-26": "gui-plus-2026-02-26";
@@ -867,9 +872,9 @@ export declare const ModelsJsonSchema: z.ZodObject<{
                 requiresThinkingAsText: z.ZodOptional<z.ZodBoolean>;
                 requiresMistralToolIds: z.ZodOptional<z.ZodBoolean>;
                 thinkingFormat: z.ZodOptional<z.ZodEnum<{
+                    deepseek: "deepseek";
                     openai: "openai";
                     "ant-ling": "ant-ling";
-                    deepseek: "deepseek";
                     openrouter: "openrouter";
                     zai: "zai";
                     together: "together";
@@ -892,6 +897,7 @@ export declare const ModelsJsonSchema: z.ZodObject<{
             }, z.core.$strip>, z.ZodObject<{}, z.core.$strip>]>>;
         }, z.core.$strip>>>;
         modelOverrides: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+            supportsTools: z.ZodOptional<z.ZodBoolean>;
             computerUse: z.ZodOptional<z.ZodObject<{
                 profile: z.ZodEnum<{
                     "gui-plus-2026-02-26": "gui-plus-2026-02-26";
@@ -937,9 +943,9 @@ export declare const ModelsJsonSchema: z.ZodObject<{
                 requiresThinkingAsText: z.ZodOptional<z.ZodBoolean>;
                 requiresMistralToolIds: z.ZodOptional<z.ZodBoolean>;
                 thinkingFormat: z.ZodOptional<z.ZodEnum<{
+                    deepseek: "deepseek";
                     openai: "openai";
                     "ant-ling": "ant-ling";
-                    deepseek: "deepseek";
                     openrouter: "openrouter";
                     zai: "zai";
                     together: "together";

package/dist/src/config/models-json.js

@@ -372,6 +372,7 @@ var init_models_json = __esmMin((() => {
 		models: z.array(ImageGenerationModelSchema).min(1)
 	}).strict();
 	CustomModelSchema = z.object({
+		supportsTools: z.boolean().optional(),
 		computerUse: z.object({ profile: ComputerProfileSchema }).strict().optional(),
 		id: z.string().min(1),
 		name: z.string().min(1).optional(),
@@ -408,6 +409,7 @@ var init_models_json = __esmMin((() => {
 		compat: OpenAICompatSchema.optional()
 	});
 	ModelOverrideSchema = z.object({
+		supportsTools: z.boolean().optional(),
 		computerUse: z.object({ profile: ComputerProfileSchema }).strict().optional(),
 		name: z.string().min(1).optional(),
 		reasoning: z.boolean().optional(),

package/dist/src/config/outbound-proxy.d.ts

@@ -0,0 +1,11 @@
+import { z } from 'zod';
+export declare const OutboundProxySchema: z.ZodObject<{
+    mode: z.ZodDefault<z.ZodEnum<{
+        custom: "custom";
+        environment: "environment";
+        direct: "direct";
+    }>>;
+    url: z.ZodDefault<z.ZodString>;
+    noProxy: z.ZodDefault<z.ZodString>;
+}, z.core.$strict>;
+export type OutboundProxyConfig = z.infer<typeof OutboundProxySchema>;

package/dist/src/config/outbound-proxy.js

@@ -0,0 +1,30 @@
+import { __esmMin } from "../../_virtual/_rolldown/runtime.js";
+import { z } from "zod";
+//#region src/config/outbound-proxy.ts
+var OutboundProxySchema;
+var init_outbound_proxy = __esmMin((() => {
+	OutboundProxySchema = z.object({
+		mode: z.enum([
+			"environment",
+			"custom",
+			"direct"
+		]).default("environment"),
+		url: z.string().trim().max(2048).default(""),
+		noProxy: z.string().trim().max(4096).default("")
+	}).strict().superRefine((value, ctx) => {
+		if (!value.url && value.mode !== "custom") return;
+		try {
+			const url = new URL(value.url);
+			if (!["http:", "https:"].includes(url.protocol) || !url.hostname || url.username || url.password || url.search || url.hash || url.pathname && url.pathname !== "/") throw new Error("Invalid proxy origin");
+		} catch {
+			ctx.addIssue({
+				code: "custom",
+				path: ["url"],
+				message: "Use an HTTP or HTTPS proxy origin without credentials, path, query or fragment"
+			});
+		}
+	});
+}));
+//#endregion
+init_outbound_proxy();
+export { OutboundProxySchema, init_outbound_proxy };

package/dist/src/config/rules.js

@@ -13,6 +13,11 @@ const BASE_RELOAD_RULES = [
 		kind: "hot",
 		description: "Model merge mode"
 	},
+	{
+		prefix: "gateway.outboundProxy",
+		kind: "restart",
+		description: "Outbound HTTP proxy"
+	},
 	{
 		prefix: "gateway.bind",
 		kind: "restart",

package/dist/src/config/schema.d.ts

@@ -233,6 +233,7 @@ export declare const SearchProviderEntrySchema: z.ZodObject<{
         tavily: "tavily";
         bing: "bing";
         searxng: "searxng";
+        deepseek: "deepseek";
     }>;
     apiKey: z.ZodOptional<z.ZodString>;
     url: z.ZodOptional<z.ZodString>;
@@ -247,6 +248,7 @@ export declare const WebSearchConfigSchema: z.ZodObject<{
             tavily: "tavily";
             bing: "bing";
             searxng: "searxng";
+            deepseek: "deepseek";
         }>;
         apiKey: z.ZodOptional<z.ZodString>;
         url: z.ZodOptional<z.ZodString>;
@@ -272,6 +274,7 @@ export declare const WebToolsConfigSchema: z.ZodObject<{
                 tavily: "tavily";
                 bing: "bing";
                 searxng: "searxng";
+                deepseek: "deepseek";
             }>;
             apiKey: z.ZodOptional<z.ZodString>;
             url: z.ZodOptional<z.ZodString>;
@@ -298,6 +301,7 @@ export declare const ToolsConfigSchema: z.ZodDefault<z.ZodObject<{
                     tavily: "tavily";
                     bing: "bing";
                     searxng: "searxng";
+                    deepseek: "deepseek";
                 }>;
                 apiKey: z.ZodOptional<z.ZodString>;
                 url: z.ZodOptional<z.ZodString>;
@@ -551,10 +555,16 @@ export declare const GatewayWebchatConfigSchema: z.ZodDefault<z.ZodObject<{
         off: "off";
     }>>;
 }, z.core.$strip>>;
-export declare const GatewayScenesConfigSchema: z.ZodDefault<z.ZodObject<{
-    enabled: z.ZodDefault<z.ZodBoolean>;
-}, z.core.$strip>>;
 export declare const GatewayConfigSchema: z.ZodDefault<z.ZodObject<{
+    outboundProxy: z.ZodOptional<z.ZodObject<{
+        mode: z.ZodDefault<z.ZodEnum<{
+            custom: "custom";
+            environment: "environment";
+            direct: "direct";
+        }>>;
+        url: z.ZodDefault<z.ZodString>;
+        noProxy: z.ZodDefault<z.ZodString>;
+    }, z.core.$strict>>;
     bind: z.ZodOptional<z.ZodEnum<{
         custom: "custom";
         auto: "auto";
@@ -631,9 +641,6 @@ export declare const GatewayConfigSchema: z.ZodDefault<z.ZodObject<{
             off: "off";
         }>>;
     }, z.core.$strip>>>;
-    scenes: z.ZodOptional<z.ZodDefault<z.ZodObject<{
-        enabled: z.ZodDefault<z.ZodBoolean>;
-    }, z.core.$strip>>>;
     corsOrigins: z.ZodOptional<z.ZodArray<z.ZodString>>;
     publicUrl: z.ZodOptional<z.ZodString>;
     dangerouslyAllowHostHeaderOriginFallback: z.ZodOptional<z.ZodBoolean>;
@@ -1513,6 +1520,15 @@ export declare const ConfigSchema: z.ZodDefault<z.ZodObject<{
     }, z.core.$strict>>;
     channels: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
     gateway: z.ZodDefault<z.ZodObject<{
+        outboundProxy: z.ZodOptional<z.ZodObject<{
+            mode: z.ZodDefault<z.ZodEnum<{
+                custom: "custom";
+                environment: "environment";
+                direct: "direct";
+            }>>;
+            url: z.ZodDefault<z.ZodString>;
+            noProxy: z.ZodDefault<z.ZodString>;
+        }, z.core.$strict>>;
         bind: z.ZodOptional<z.ZodEnum<{
             custom: "custom";
             auto: "auto";
@@ -1589,9 +1605,6 @@ export declare const ConfigSchema: z.ZodDefault<z.ZodObject<{
                 off: "off";
             }>>;
         }, z.core.$strip>>>;
-        scenes: z.ZodOptional<z.ZodDefault<z.ZodObject<{
-            enabled: z.ZodDefault<z.ZodBoolean>;
-        }, z.core.$strip>>>;
         corsOrigins: z.ZodOptional<z.ZodArray<z.ZodString>>;
         publicUrl: z.ZodOptional<z.ZodString>;
         dangerouslyAllowHostHeaderOriginFallback: z.ZodOptional<z.ZodBoolean>;
@@ -1713,6 +1726,7 @@ export declare const ConfigSchema: z.ZodDefault<z.ZodObject<{
         enabled: z.ZodDefault<z.ZodBoolean>;
         maxActionsPerSession: z.ZodDefault<z.ZodNumber>;
         maxModelRequests: z.ZodDefault<z.ZodNumber>;
+        maxRescuesPerSession: z.ZodDefault<z.ZodNumber>;
         maxSessionDurationMs: z.ZodDefault<z.ZodNumber>;
         idleGrantTtlMs: z.ZodDefault<z.ZodNumber>;
     }, z.core.$strict>>;
@@ -1748,6 +1762,7 @@ export declare const ConfigSchema: z.ZodDefault<z.ZodObject<{
                         tavily: "tavily";
                         bing: "bing";
                         searxng: "searxng";
+                        deepseek: "deepseek";
                     }>;
                     apiKey: z.ZodOptional<z.ZodString>;
                     url: z.ZodOptional<z.ZodString>;
@@ -1963,10 +1978,10 @@ export declare const ConfigSchema: z.ZodDefault<z.ZodObject<{
                 realtime: z.ZodOptional<z.ZodString>;
             }, z.core.$strict>;
             capabilities: z.ZodRecord<z.ZodEnum<{
-                shares: "shares";
                 models: "models";
                 connectors: "connectors";
                 tunnels: "tunnels";
+                shares: "shares";
                 managedRuntime: "managedRuntime";
                 runtimeFleet: "runtimeFleet";
                 traceUpload: "traceUpload";

package/dist/src/config/schema.js

@@ -6,9 +6,11 @@ import { AgentCatalogRepository, init_repository } from "../agent-catalog/reposi
 import { DEFAULT_CONTEXT_COMPACTION_POLICY, UserContextConfigSchema, init_config } from "../user-context/config.js";
 import { getModelUsageOrigin, init_model_usage } from "../providers/model-usage.js";
 import { TracingConfigSchema, init_config as init_config$1 } from "../observability/config.js";
+import { OutboundProxySchema, init_outbound_proxy } from "./outbound-proxy.js";
 import { ComputerConfigSchema, init_config as init_config$2 } from "../computer/config.js";
 import { init_public_url, validatePublicUrl } from "./public-url.js";
 import { PlatformConfigSchema, init_contracts } from "../platform/contracts.js";
+import { deepseekSearchEndpoint, init_deepseek_protocol } from "../agent/tools/search/providers/deepseek-protocol.js";
 import { TelegramAccountConfigSchema, TelegramConfigSchema, TelegramGroupConfigSchema, TelegramTopicConfigSchema, init_config_schema } from "../../extensions/telegram/src/config-schema.js";
 import { WeixinAccountConfigSchema, WeixinConfigSchema, init_config_schema as init_config_schema$1 } from "../../extensions/weixin/src/config-schema.js";
 import { z } from "zod";
@@ -48,16 +50,18 @@ function parseModelRef(ref) {
 		model: trimmed.slice(idx + 1).trim()
 	};
 }
-var AgentModelRefSchema, AgentImageGenerationModelSchema, AgentModelsSchema, BrowserDriverSchema, BrowserHostnameSchema, BrowserConfigSchema, SessionDmScopeSchema, SessionStorageConfigSchema, SessionResetModeSchema, SessionResetConfigSchema, SessionResetByTypeSchema, SessionScopeSchema, SessionConfigSchema, ChannelsConfigSchema, SearchProviderEntrySchema, WebSearchConfigSchema, WebsiteBlocklistSchema, WebToolsConfigSchema, ToolsConfigSchema, RuntimePreferenceSchema, RuntimeProvisionSchema, RuntimeVersionRequestSchema, LanguageRuntimeSchema, DEFAULT_RUNTIME_TOOLS_CONFIG, RuntimeToolsConfigSchema, GatewayAuthRateLimitSchema, GatewaySecuritySchema, GatewayTrustedProxySchema, GatewayAuthSchema, GatewayTailscaleConsentSchema, GatewayTailscaleSchema, GatewayRemoteSchema, GatewayTlsSchema, GatewayModeSchema, GatewayChannelConnectDeferModeSchema, TunnelConsentSchema, TunnelBrokerUrlSchema, TunnelConfigSchema, WorkspaceImportConfigSchema, WorkspaceConfigSchema, GatewayBindModeSchema, GatewayWebchatConfigSchema, GatewayScenesConfigSchema, GatewayConfigSchema, ModelsDevConfigSchema, ModelCatalogConfigSchema, SttProviderConfigCatchallSchema, STTProviderConfigSchema, STTFallbackConfigSchema, MediaUnderstandingCapabilitiesSchema, MediaUnderstandingModelSchema, STTConfigSchema, TtsProviderConfigCatchallSchema, TTSProviderConfigSchema, TTSFallbackConfigSchema, TTSModelOverridesConfigSchema, TTSEdgeConfigSchema, TTSSummarizationConfigSchema, TTSConfigSchema, VoiceRefinementConfigSchema, VoiceConfigSchema, MessagesConfigSchema, ToolsMediaAudioConfigSchema, ToolsMediaConfigSchema, ProviderAzureConfigSchema, ProviderRequestOverridesSchema, ProviderAuthConfigSchema, ProvidersConfigSchema, ExtensionSecurityConfigSchema, ExtensionSlotsConfigSchema, ExtensionsConfigSchema, UpdateAutoConfigSchema, UpdateConfigSchema, CommandsConfigSchema, McpHttpUrlSchema, ConnectorSecretReferenceSchema, McpConfigScalarSchema, McpExposureSchema, McpOAuthConfigSchema, McpServerSchema, McpConfigSchema, ConnectorsConfigSchema, ExperimentalConfigSchema, ConfigSchema;
+var AgentModelRefSchema, AgentImageGenerationModelSchema, AgentModelsSchema, BrowserDriverSchema, BrowserHostnameSchema, BrowserConfigSchema, SessionDmScopeSchema, SessionStorageConfigSchema, SessionResetModeSchema, SessionResetConfigSchema, SessionResetByTypeSchema, SessionScopeSchema, SessionConfigSchema, ChannelsConfigSchema, SearchProviderEntrySchema, WebSearchConfigSchema, WebsiteBlocklistSchema, WebToolsConfigSchema, ToolsConfigSchema, RuntimePreferenceSchema, RuntimeProvisionSchema, RuntimeVersionRequestSchema, LanguageRuntimeSchema, DEFAULT_RUNTIME_TOOLS_CONFIG, RuntimeToolsConfigSchema, GatewayAuthRateLimitSchema, GatewaySecuritySchema, GatewayTrustedProxySchema, GatewayAuthSchema, GatewayTailscaleConsentSchema, GatewayTailscaleSchema, GatewayRemoteSchema, GatewayTlsSchema, GatewayModeSchema, GatewayChannelConnectDeferModeSchema, TunnelConsentSchema, TunnelBrokerUrlSchema, TunnelConfigSchema, WorkspaceImportConfigSchema, WorkspaceConfigSchema, GatewayBindModeSchema, GatewayWebchatConfigSchema, GatewayConfigSchema, ModelsDevConfigSchema, ModelCatalogConfigSchema, SttProviderConfigCatchallSchema, STTProviderConfigSchema, STTFallbackConfigSchema, MediaUnderstandingCapabilitiesSchema, MediaUnderstandingModelSchema, STTConfigSchema, TtsProviderConfigCatchallSchema, TTSProviderConfigSchema, TTSFallbackConfigSchema, TTSModelOverridesConfigSchema, TTSEdgeConfigSchema, TTSSummarizationConfigSchema, TTSConfigSchema, VoiceRefinementConfigSchema, VoiceConfigSchema, MessagesConfigSchema, ToolsMediaAudioConfigSchema, ToolsMediaConfigSchema, ProviderAzureConfigSchema, ProviderRequestOverridesSchema, ProviderAuthConfigSchema, ProvidersConfigSchema, ExtensionSecurityConfigSchema, ExtensionSlotsConfigSchema, ExtensionsConfigSchema, UpdateAutoConfigSchema, UpdateConfigSchema, CommandsConfigSchema, McpHttpUrlSchema, ConnectorSecretReferenceSchema, McpConfigScalarSchema, McpExposureSchema, McpOAuthConfigSchema, McpServerSchema, McpConfigSchema, ConnectorsConfigSchema, ExperimentalConfigSchema, ConfigSchema;
 var init_schema = __esmMin((() => {
 	init_model_usage();
 	init_config$1();
+	init_outbound_proxy();
 	init_config$2();
 	init_agent_config();
 	init_repository();
 	init_config();
 	init_public_url();
 	init_contracts();
+	init_deepseek_protocol();
 	init_config_schema();
 	init_config_schema$1();
 	AgentModelRefSchema = ModelRouteSchema;
@@ -202,12 +206,24 @@ var init_schema = __esmMin((() => {
 			"brave",
 			"tavily",
 			"bing",
-			"searxng"
+			"searxng",
+			"deepseek"
 		]),
 		apiKey: z.string().optional(),
-		/** SearXNG instance base URL (e.g. http://localhost:8080) */
+		/** SearXNG instance URL or optional DeepSeek HTTPS API base URL. */
 		url: z.string().optional(),
 		disabled: z.boolean().optional()
+	}).superRefine((entry, context) => {
+		if (entry.type !== "deepseek" || !entry.url) return;
+		try {
+			deepseekSearchEndpoint(entry.url);
+		} catch {
+			context.addIssue({
+				code: "custom",
+				path: ["url"],
+				message: "Invalid DeepSeek API base URL"
+			});
+		}
 	});
 	WebSearchConfigSchema = z.object({
 		maxResults: z.number().default(5),
@@ -440,10 +456,8 @@ activityDetailDefault: z.enum([
 		"on",
 		"stream"
 	]).default("on") }).default({ activityDetailDefault: "on" });
-	GatewayScenesConfigSchema = z.object({ 
-	/** Explicit opt-in while real-device and sustained-load launch gates remain open. */
-enabled: z.boolean().default(false) }).default({ enabled: false });
 	GatewayConfigSchema = z.object({
+		outboundProxy: OutboundProxySchema.optional(),
 		/** Semantic bind mode. */
 		bind: GatewayBindModeSchema.optional(),
 		/** IPv4 listen address when `bind` is `custom`. */
@@ -457,7 +471,6 @@ enabled: z.boolean().default(false) }).default({ enabled: false });
 		tls: GatewayTlsSchema.optional(),
 		auth: GatewayAuthSchema.optional(),
 		webchat: GatewayWebchatConfigSchema.optional(),
-		scenes: GatewayScenesConfigSchema.optional(),
 		corsOrigins: z.array(z.string()).optional(),
 		/**
 		* Reverse-proxy publicly reachable URL (e.g. `https://gateway.example.com`).
@@ -644,7 +657,6 @@ enabled: z.boolean().default(false) }).default({ enabled: false });
 		port: 18790,
 		auth: { mode: "token" },
 		webchat: { activityDetailDefault: "on" },
-		scenes: { enabled: false },
 		corsOrigins: [],
 		skillsMarketplaceProvider: "store",
 		skillsStoreBaseUrl: "https://store.xopc.ai"
@@ -1104,7 +1116,6 @@ workDiscoveryOnboarding: z.boolean().default(true) }).strict().default({ workDis
 			port: 18790,
 			auth: { mode: "token" },
 			webchat: { activityDetailDefault: "on" },
-			scenes: { enabled: false },
 			corsOrigins: [],
 			skillsMarketplaceProvider: "store",
 			skillsStoreBaseUrl: "https://store.xopc.ai"
@@ -1159,4 +1170,4 @@ workDiscoveryOnboarding: z.boolean().default(true) }).strict().default({ workDis
 }));
 //#endregion
 init_schema();
-export { AgentImageGenerationModelSchema, AgentModelRefSchema, AgentModelsSchema, BrowserConfigSchema, ChannelsConfigSchema, CommandsConfigSchema, ConfigSchema, ConnectorsConfigSchema, ExperimentalConfigSchema, ExtensionSecurityConfigSchema, ExtensionSlotsConfigSchema, ExtensionsConfigSchema, GatewayAuthRateLimitSchema, GatewayAuthSchema, GatewayBindModeSchema, GatewayChannelConnectDeferModeSchema, GatewayConfigSchema, GatewayModeSchema, GatewayRemoteSchema, GatewayScenesConfigSchema, GatewaySecuritySchema, GatewayTailscaleConsentSchema, GatewayTailscaleSchema, GatewayTlsSchema, GatewayTrustedProxySchema, GatewayWebchatConfigSchema, McpConfigSchema, McpOAuthConfigSchema, McpServerSchema, MediaUnderstandingCapabilitiesSchema, MediaUnderstandingModelSchema, MessagesConfigSchema, ModelCatalogConfigSchema, ModelsDevConfigSchema, ProviderAuthConfigSchema, ProviderAzureConfigSchema, ProviderRequestOverridesSchema, ProvidersConfigSchema, RuntimeToolsConfigSchema, STTConfigSchema, STTFallbackConfigSchema, STTProviderConfigSchema, SearchProviderEntrySchema, SessionConfigSchema, SessionDmScopeSchema, SessionResetByTypeSchema, SessionResetConfigSchema, SessionResetModeSchema, SessionScopeSchema, SessionStorageConfigSchema, TTSConfigSchema, TTSEdgeConfigSchema, TTSFallbackConfigSchema, TTSModelOverridesConfigSchema, TTSProviderConfigSchema, TTSSummarizationConfigSchema, TelegramAccountConfigSchema, TelegramConfigSchema, TelegramGroupConfigSchema, TelegramTopicConfigSchema, ToolsConfigSchema, ToolsMediaAudioConfigSchema, ToolsMediaConfigSchema, TunnelBrokerUrlSchema, TunnelConfigSchema, TunnelConsentSchema, UpdateAutoConfigSchema, UpdateConfigSchema, VoiceConfigSchema, VoiceRefinementConfigSchema, WebSearchConfigSchema, WebToolsConfigSchema, WebsiteBlocklistSchema, WeixinAccountConfigSchema, WeixinConfigSchema, WorkspaceConfigSchema, WorkspaceImportConfigSchema, getAgentDefaultChatModelConfig, getAgentDefaultImageGenerationModelConfig, getAgentDefaultImageModelConfig, getAgentDefaultModelRef, init_schema, parseModelRef };
+export { AgentImageGenerationModelSchema, AgentModelRefSchema, AgentModelsSchema, BrowserConfigSchema, ChannelsConfigSchema, CommandsConfigSchema, ConfigSchema, ConnectorsConfigSchema, ExperimentalConfigSchema, ExtensionSecurityConfigSchema, ExtensionSlotsConfigSchema, ExtensionsConfigSchema, GatewayAuthRateLimitSchema, GatewayAuthSchema, GatewayBindModeSchema, GatewayChannelConnectDeferModeSchema, GatewayConfigSchema, GatewayModeSchema, GatewayRemoteSchema, GatewaySecuritySchema, GatewayTailscaleConsentSchema, GatewayTailscaleSchema, GatewayTlsSchema, GatewayTrustedProxySchema, GatewayWebchatConfigSchema, McpConfigSchema, McpOAuthConfigSchema, McpServerSchema, MediaUnderstandingCapabilitiesSchema, MediaUnderstandingModelSchema, MessagesConfigSchema, ModelCatalogConfigSchema, ModelsDevConfigSchema, ProviderAuthConfigSchema, ProviderAzureConfigSchema, ProviderRequestOverridesSchema, ProvidersConfigSchema, RuntimeToolsConfigSchema, STTConfigSchema, STTFallbackConfigSchema, STTProviderConfigSchema, SearchProviderEntrySchema, SessionConfigSchema, SessionDmScopeSchema, SessionResetByTypeSchema, SessionResetConfigSchema, SessionResetModeSchema, SessionScopeSchema, SessionStorageConfigSchema, TTSConfigSchema, TTSEdgeConfigSchema, TTSFallbackConfigSchema, TTSModelOverridesConfigSchema, TTSProviderConfigSchema, TTSSummarizationConfigSchema, TelegramAccountConfigSchema, TelegramConfigSchema, TelegramGroupConfigSchema, TelegramTopicConfigSchema, ToolsConfigSchema, ToolsMediaAudioConfigSchema, ToolsMediaConfigSchema, TunnelBrokerUrlSchema, TunnelConfigSchema, TunnelConsentSchema, UpdateAutoConfigSchema, UpdateConfigSchema, VoiceConfigSchema, VoiceRefinementConfigSchema, WebSearchConfigSchema, WebToolsConfigSchema, WebsiteBlocklistSchema, WeixinAccountConfigSchema, WeixinConfigSchema, WorkspaceConfigSchema, WorkspaceImportConfigSchema, getAgentDefaultChatModelConfig, getAgentDefaultImageGenerationModelConfig, getAgentDefaultImageModelConfig, getAgentDefaultModelRef, init_schema, parseModelRef };

package/dist/src/connectors/cli/authorization.d.ts

@@ -6,7 +6,7 @@ export declare function requireCliInstance(config: Config, instanceId: string, o
 export declare function extractAuthorizationUrl(text: string, allowedHosts: readonly string[], field?: string): string | undefined;
 export declare function startCliAuthorization(config: Config, instanceId: string, expectedAccountId?: string): {
     id: string;
-    status: "failed" | "succeeded" | "expired" | "cancelled" | "verifying" | "preparing" | "awaiting_user";
+    status: "expired" | "cancelled" | "failed" | "succeeded" | "verifying" | "preparing" | "awaiting_user";
     challenge: import("./types.js").CliChallenge;
     error: string;
     accountId: string;

package/dist/src/connectors/cli/store.d.ts

@@ -26,7 +26,7 @@ export declare function updateCliAuthorization(id: string, input: {
 export declare function commitCliIdentity(attempt: CliAuthorization, identity: CliIdentity): string;
 export declare function cliAuthorizationView(row: CliAuthorization): {
     id: string;
-    status: "failed" | "succeeded" | "expired" | "cancelled" | "verifying" | "preparing" | "awaiting_user";
+    status: "expired" | "cancelled" | "failed" | "succeeded" | "verifying" | "preparing" | "awaiting_user";
     challenge: CliChallenge;
     error: string;
     accountId: string;

package/dist/src/endpoint-tools/invocation-service.js

@@ -3,6 +3,7 @@ import { init_logger } from "../utils/logger.js";
 import { ENDPOINT_INVOCATION_RECEIPT_TIMEOUT_MS, canonicalJson, init_src } from "../../packages/endpoint-tools-protocol/src/index.js";
 import { EndpointToolPolicy, EndpointToolPolicyError } from "./policy.js";
 import crypto from "node:crypto";
+import { z } from "zod";
 import Ajv2020 from "ajv/dist/2020.js";
 //#region src/endpoint-tools/invocation-service.ts
 init_src();
@@ -26,6 +27,10 @@ var EndpointInvocationService = class {
 		this.registry = registry;
 		this.options = options;
 		this.policy = options.policy ?? new EndpointToolPolicy();
+		this.ajv.addFormat("uri", {
+			type: "string",
+			validate: (value) => z.url().safeParse(value).success
+		});
 	}
 	invoke(params) {
 		const endpoint = this.registry.get(params.endpointId);

package/dist/src/gateway/config-tools-web.js

@@ -1,5 +1,7 @@
+import { deepseekSearchEndpoint, init_deepseek_protocol } from "../agent/tools/search/providers/deepseek-protocol.js";
 import { isMaskedSecretPatchValue, maskSecretLength } from "./hono/lib/mask-secret-length.js";
 //#region src/gateway/config-tools-web.ts
+init_deepseek_protocol();
 function isMaskedApiKey(v) {
 	return typeof v === "string" && isMaskedSecretPatchValue(v);
 }
@@ -76,13 +78,22 @@ function applyToolsWebPatch(config, body) {
 		if (!rawRow || typeof rawRow !== "object") return "Invalid search provider entry";
 		const row = rawRow;
 		const type = row.type;
-		if (type !== "brave" && type !== "tavily" && type !== "bing" && type !== "searxng") return `Invalid search provider type: ${String(type)}`;
-		const prev = prevProviders?.[i];
+		if (type !== "brave" && type !== "tavily" && type !== "bing" && type !== "searxng" && type !== "deepseek") return `Invalid search provider type: ${String(type)}`;
+		const previousOfType = prevProviders?.filter((entry) => entry.type === type) ?? [];
+		const prev = previousOfType.length === 1 ? previousOfType[0] : prevProviders?.[i]?.type === type ? prevProviders[i] : void 0;
 		let apiKey = typeof row.apiKey === "string" ? row.apiKey : "";
-		if (isMaskedApiKey(apiKey) && prev?.apiKey) apiKey = prev.apiKey;
+		if (isMaskedApiKey(apiKey)) {
+			if (!prev?.apiKey) return "Cannot preserve an API key after changing provider type";
+			apiKey = prev.apiKey;
+		}
 		const urlRaw = typeof row.url === "string" ? row.url.trim().replace(/\/+$/, "") : "";
 		const entry = { type };
-		if (type === "searxng") {
+		if (type === "deepseek" && urlRaw) try {
+			deepseekSearchEndpoint(urlRaw);
+		} catch {
+			return "Invalid DeepSeek API base URL";
+		}
+		if (type === "searxng" || type === "deepseek") {
 			if (urlRaw) entry.url = urlRaw;
 			if (apiKey) entry.apiKey = apiKey;
 		} else if (apiKey) entry.apiKey = apiKey;

package/dist/src/gateway/gateway-workflow-host.types.d.ts

@@ -3,6 +3,9 @@ import type { EndpointToolRuntime } from '../endpoint-tools/index.js';
 import type { MessageBus } from '../infra/bus/index.js';
 import type { SessionStore } from '../session/store.js';
 export interface GatewayWorkflowAgentSurface {
+    getWorkspaceTrust?(workspacePath: string): {
+        trusted: boolean;
+    };
     getModelForSession(conversationId: string): string;
     getWorkflowSkillInstructions(agentId: string, names: readonly string[]): string | undefined;
 }

package/dist/src/gateway/hono/app.d.ts

@@ -1,11 +1,9 @@
 import { Hono } from 'hono';
 import type { GatewayService } from '../service.js';
-import type { SceneHttpServices } from '../../scenes/httpServices.js';
 export interface HonoAppConfig {
     service: GatewayService;
     /** Actual host selected for this process; bind config changes take effect after restart. */
     listenHost?: string;
-    scenes?: SceneHttpServices;
 }
 /**
  * Extension sandbox HTML under `/api/extensions/:id/assets/*` ships its own CSP

package/dist/src/gateway/hono/app.js

@@ -272,8 +272,7 @@ function createHonoApp(config) {
 			trustedProxies: service.currentConfig.gateway?.trustedProxies,
 			allowRealIpFallback: service.currentConfig.gateway?.allowRealIpFallback === true
 		}) }),
-		channelRateLimitMiddleware,
-		scenes: config.scenes ?? service.sceneAccess?.services
+		channelRateLimitMiddleware
 	});
 	const prewarm = prewarmStaticUiCache();
 	if (prewarm.loaded > 0) log.debug({

package/dist/src/gateway/hono/lib/config-payload.d.ts

@@ -147,6 +147,7 @@ export declare function buildSafeWebConfigPayload(service: GatewayService, optio
         enabled: boolean;
         maxActionsPerSession: number;
         maxModelRequests: number;
+        maxRescuesPerSession: number;
         maxSessionDurationMs: number;
         idleGrantTtlMs: number;
     };
@@ -164,6 +165,11 @@ export declare function buildSafeWebConfigPayload(service: GatewayService, optio
     /** Masked `cfg.providers` for capability keys (image / STT / etc.). */
     providersConfig: Record<string, import("./safe-providers-config.js").SafeProviderAuthEntry>;
     gateway: {
+        outboundProxy: {
+            mode: "custom" | "environment" | "direct";
+            url: string;
+            noProxy: string;
+        };
         bind: "custom" | "auto" | "loopback" | "lan" | "tailnet";
         customBindHost: string;
         port: number;
@@ -195,9 +201,6 @@ export declare function buildSafeWebConfigPayload(service: GatewayService, optio
         webchat: {
             activityDetailDefault: "stream" | "on" | "off";
         };
-        scenes: {
-            enabled: boolean;
-        };
         channelConnectDeferMode: "explicit" | "off" | "auto";
         channelConnectDeferIds: string[];
         channelConnectDeferSkipIds: string[];

package/dist/src/gateway/hono/lib/config-payload.js

@@ -99,6 +99,11 @@ async function buildSafeWebConfigPayload(service, options = {}) {
 		/** Masked `cfg.providers` for capability keys (image / STT / etc.). */
 		providersConfig: buildSafeProvidersConfigForWeb(config.providers),
 		gateway: {
+			outboundProxy: config.gateway?.outboundProxy ?? {
+				mode: "environment",
+				url: "",
+				noProxy: ""
+			},
 			bind: config.gateway?.bind ?? "loopback",
 			customBindHost: config.gateway?.customBindHost,
 			port: config.gateway?.port,
@@ -126,7 +131,6 @@ async function buildSafeWebConfigPayload(service, options = {}) {
 				}
 			},
 			webchat: { activityDetailDefault: config.gateway?.webchat?.activityDetailDefault ?? "on" },
-			scenes: { enabled: config.gateway?.scenes?.enabled === true },
 			channelConnectDeferMode: config.gateway?.channelConnectDeferMode ?? "auto",
 			channelConnectDeferIds: Array.isArray(config.gateway?.channelConnectDeferIds) ? config.gateway.channelConnectDeferIds : [],
 			channelConnectDeferSkipIds: Array.isArray(config.gateway?.channelConnectDeferSkipIds) ? config.gateway.channelConnectDeferSkipIds : [],

package/dist/src/gateway/hono/routes/capability-operations.js

@@ -13,13 +13,6 @@ function registerCapabilityOperationRoutes(app, deps) {
 		getAutomations: () => deps.service.automationServiceInstance,
 		getWorkDiscovery: () => deps.service.workDiscovery,
 		getLocalApps: () => deps.service.localApps,
-		...deps.scenes ? { getSceneAccess: () => ({
-			services: deps.scenes,
-			principal: {
-				ownerId: "local-owner",
-				workspaceId: deps.service.currentWorkspacePath
-			}
-		}) } : {},
 		wake: (runId) => runId ? deps.service.dispatchTaskRuns() : deps.service.dispatchTaskEvents(),
 		abortConversation: async (conversationId) => {
 			const liveRunId = deps.service.getActiveWebchatRunId(conversationId);

package/dist/src/gateway/hono/routes/config-patch/gateway.js

@@ -1,3 +1,4 @@
+import { OutboundProxySchema, init_outbound_proxy } from "../../../../config/outbound-proxy.js";
 import { init_public_url, validatePublicUrl } from "../../../../config/public-url.js";
 import { isValidIPv4 } from "../../../../config/gateway-bind.js";
 import { mergeShareConfigPatch } from "../../../../share/share-config.js";
@@ -5,6 +6,7 @@ import { mergeSiteShareConfigPatch } from "../../../../share/site-share-config.j
 import { isMaskedSecretPatchValue } from "../../lib/mask-secret-length.js";
 import { PATCH_OK, patchError } from "./result.js";
 //#region src/gateway/hono/routes/config-patch/gateway.ts
+init_outbound_proxy();
 init_public_url();
 /**
 * Shared default for "user PATCH'd a gateway subsection but `config.gateway`
@@ -26,6 +28,11 @@ function parseDeferIdList(raw) {
 	return ids;
 }
 function applyGatewayPatch(config, body) {
+	if (body.gateway?.outboundProxy !== void 0) {
+		const parsed = OutboundProxySchema.safeParse(body.gateway.outboundProxy);
+		if (!parsed.success) return patchError("Invalid outbound proxy: use an HTTP(S) origin without credentials, with environment/custom/direct mode");
+		ensureGateway(config).outboundProxy = parsed.data;
+	}
 	if (body.gateway?.webchat?.activityDetailDefault !== void 0) {
 		const level = body.gateway.webchat.activityDetailDefault;
 		if (level !== "off" && level !== "on" && level !== "stream") return patchError("gateway.webchat.activityDetailDefault must be off, on, or stream");

package/dist/src/gateway/hono/routes/deps.d.ts

@@ -1,6 +1,5 @@
 import type { MiddlewareHandler } from 'hono';
 import type { GatewayService } from '../../service.js';
-import type { SceneHttpServices } from '../../../scenes/httpServices.js';
 export interface AuthenticatedRouteDeps {
     service: GatewayService;
     strictRateLimitMiddleware: MiddlewareHandler;
@@ -9,5 +8,4 @@ export interface AuthenticatedRouteDeps {
     taskRateLimitMiddleware?: MiddlewareHandler;
     xopcCloudPollRateLimitMiddleware: MiddlewareHandler;
     channelRateLimitMiddleware?: MiddlewareHandler;
-    scenes?: SceneHttpServices;
 }