@xopcai/xopc 0.0.392 → 0.0.393

package/dist/src/config/schema.d.ts

@@ -233,6 +233,7 @@ export declare const SearchProviderEntrySchema: z.ZodObject<{
         tavily: "tavily";
         bing: "bing";
         searxng: "searxng";
+        deepseek: "deepseek";
     }>;
     apiKey: z.ZodOptional<z.ZodString>;
     url: z.ZodOptional<z.ZodString>;
@@ -247,6 +248,7 @@ export declare const WebSearchConfigSchema: z.ZodObject<{
             tavily: "tavily";
             bing: "bing";
             searxng: "searxng";
+            deepseek: "deepseek";
         }>;
         apiKey: z.ZodOptional<z.ZodString>;
         url: z.ZodOptional<z.ZodString>;
@@ -272,6 +274,7 @@ export declare const WebToolsConfigSchema: z.ZodObject<{
                 tavily: "tavily";
                 bing: "bing";
                 searxng: "searxng";
+                deepseek: "deepseek";
             }>;
             apiKey: z.ZodOptional<z.ZodString>;
             url: z.ZodOptional<z.ZodString>;
@@ -298,6 +301,7 @@ export declare const ToolsConfigSchema: z.ZodDefault<z.ZodObject<{
                     tavily: "tavily";
                     bing: "bing";
                     searxng: "searxng";
+                    deepseek: "deepseek";
                 }>;
                 apiKey: z.ZodOptional<z.ZodString>;
                 url: z.ZodOptional<z.ZodString>;
@@ -552,6 +556,15 @@ export declare const GatewayWebchatConfigSchema: z.ZodDefault<z.ZodObject<{
     }>>;
 }, z.core.$strip>>;
 export declare const GatewayConfigSchema: z.ZodDefault<z.ZodObject<{
+    outboundProxy: z.ZodOptional<z.ZodObject<{
+        mode: z.ZodDefault<z.ZodEnum<{
+            custom: "custom";
+            environment: "environment";
+            direct: "direct";
+        }>>;
+        url: z.ZodDefault<z.ZodString>;
+        noProxy: z.ZodDefault<z.ZodString>;
+    }, z.core.$strict>>;
     bind: z.ZodOptional<z.ZodEnum<{
         custom: "custom";
         auto: "auto";
@@ -1191,14 +1204,14 @@ export declare const McpServerSchema: z.ZodObject<{
     timeout: z.ZodOptional<z.ZodNumber>;
     enabled: z.ZodOptional<z.ZodBoolean>;
     exposure: z.ZodOptional<z.ZodEnum<{
-        codemode: "codemode";
         direct: "direct";
+        codemode: "codemode";
         deferred: "deferred";
         hidden: "hidden";
     }>>;
     toolExposure: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<{
-        codemode: "codemode";
         direct: "direct";
+        codemode: "codemode";
         deferred: "deferred";
         hidden: "hidden";
     }>>>;
@@ -1256,14 +1269,14 @@ export declare const McpConfigSchema: z.ZodOptional<z.ZodObject<{
         timeout: z.ZodOptional<z.ZodNumber>;
         enabled: z.ZodOptional<z.ZodBoolean>;
         exposure: z.ZodOptional<z.ZodEnum<{
-            codemode: "codemode";
             direct: "direct";
+            codemode: "codemode";
             deferred: "deferred";
             hidden: "hidden";
         }>>;
         toolExposure: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<{
-            codemode: "codemode";
             direct: "direct";
+            codemode: "codemode";
             deferred: "deferred";
             hidden: "hidden";
         }>>>;
@@ -1507,6 +1520,15 @@ export declare const ConfigSchema: z.ZodDefault<z.ZodObject<{
     }, z.core.$strict>>;
     channels: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
     gateway: z.ZodDefault<z.ZodObject<{
+        outboundProxy: z.ZodOptional<z.ZodObject<{
+            mode: z.ZodDefault<z.ZodEnum<{
+                custom: "custom";
+                environment: "environment";
+                direct: "direct";
+            }>>;
+            url: z.ZodDefault<z.ZodString>;
+            noProxy: z.ZodDefault<z.ZodString>;
+        }, z.core.$strict>>;
         bind: z.ZodOptional<z.ZodEnum<{
             custom: "custom";
             auto: "auto";
@@ -1740,6 +1762,7 @@ export declare const ConfigSchema: z.ZodDefault<z.ZodObject<{
                         tavily: "tavily";
                         bing: "bing";
                         searxng: "searxng";
+                        deepseek: "deepseek";
                     }>;
                     apiKey: z.ZodOptional<z.ZodString>;
                     url: z.ZodOptional<z.ZodString>;
@@ -1903,14 +1926,14 @@ export declare const ConfigSchema: z.ZodDefault<z.ZodObject<{
             timeout: z.ZodOptional<z.ZodNumber>;
             enabled: z.ZodOptional<z.ZodBoolean>;
             exposure: z.ZodOptional<z.ZodEnum<{
-                codemode: "codemode";
                 direct: "direct";
+                codemode: "codemode";
                 deferred: "deferred";
                 hidden: "hidden";
             }>>;
             toolExposure: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<{
-                codemode: "codemode";
                 direct: "direct";
+                codemode: "codemode";
                 deferred: "deferred";
                 hidden: "hidden";
             }>>>;

package/dist/src/config/schema.js

@@ -1,14 +1,16 @@
 import { __esmMin } from "../../_virtual/_rolldown/runtime.js";
-import { DEFAULT_CONTEXT_COMPACTION_POLICY, UserContextConfigSchema, init_config } from "../user-context/config.js";
-import { getModelUsageOrigin, init_model_usage } from "../providers/model-usage.js";
 import { AgentModelsOverrideSchema, ImageGenerationRouteSchema, ModelRouteSchema } from "../agent-config/schema.js";
 import { resolveEffectiveAgentConfig } from "../agent-config/resolver.js";
 import { init_agent_config } from "../agent-config/index.js";
 import { AgentCatalogRepository, init_repository } from "../agent-catalog/repository.js";
+import { DEFAULT_CONTEXT_COMPACTION_POLICY, UserContextConfigSchema, init_config } from "../user-context/config.js";
+import { getModelUsageOrigin, init_model_usage } from "../providers/model-usage.js";
 import { TracingConfigSchema, init_config as init_config$1 } from "../observability/config.js";
+import { OutboundProxySchema, init_outbound_proxy } from "./outbound-proxy.js";
 import { ComputerConfigSchema, init_config as init_config$2 } from "../computer/config.js";
 import { init_public_url, validatePublicUrl } from "./public-url.js";
 import { PlatformConfigSchema, init_contracts } from "../platform/contracts.js";
+import { deepseekSearchEndpoint, init_deepseek_protocol } from "../agent/tools/search/providers/deepseek-protocol.js";
 import { TelegramAccountConfigSchema, TelegramConfigSchema, TelegramGroupConfigSchema, TelegramTopicConfigSchema, init_config_schema } from "../../extensions/telegram/src/config-schema.js";
 import { WeixinAccountConfigSchema, WeixinConfigSchema, init_config_schema as init_config_schema$1 } from "../../extensions/weixin/src/config-schema.js";
 import { z } from "zod";
@@ -52,12 +54,14 @@ var AgentModelRefSchema, AgentImageGenerationModelSchema, AgentModelsSchema, Bro
 var init_schema = __esmMin((() => {
 	init_model_usage();
 	init_config$1();
+	init_outbound_proxy();
 	init_config$2();
 	init_agent_config();
 	init_repository();
 	init_config();
 	init_public_url();
 	init_contracts();
+	init_deepseek_protocol();
 	init_config_schema();
 	init_config_schema$1();
 	AgentModelRefSchema = ModelRouteSchema;
@@ -202,12 +206,24 @@ var init_schema = __esmMin((() => {
 			"brave",
 			"tavily",
 			"bing",
-			"searxng"
+			"searxng",
+			"deepseek"
 		]),
 		apiKey: z.string().optional(),
-		/** SearXNG instance base URL (e.g. http://localhost:8080) */
+		/** SearXNG instance URL or optional DeepSeek HTTPS API base URL. */
 		url: z.string().optional(),
 		disabled: z.boolean().optional()
+	}).superRefine((entry, context) => {
+		if (entry.type !== "deepseek" || !entry.url) return;
+		try {
+			deepseekSearchEndpoint(entry.url);
+		} catch {
+			context.addIssue({
+				code: "custom",
+				path: ["url"],
+				message: "Invalid DeepSeek API base URL"
+			});
+		}
 	});
 	WebSearchConfigSchema = z.object({
 		maxResults: z.number().default(5),
@@ -441,6 +457,7 @@ activityDetailDefault: z.enum([
 		"stream"
 	]).default("on") }).default({ activityDetailDefault: "on" });
 	GatewayConfigSchema = z.object({
+		outboundProxy: OutboundProxySchema.optional(),
 		/** Semantic bind mode. */
 		bind: GatewayBindModeSchema.optional(),
 		/** IPv4 listen address when `bind` is `custom`. */

package/dist/src/extensions/agent-plugins/validation.js

@@ -2,8 +2,8 @@ import { dirname, isAbsolute, join, relative, resolve } from "node:path";
 import { existsSync, lstatSync, readFileSync, readdirSync, realpathSync, statSync } from "node:fs";
 import { createHash } from "node:crypto";
 import { z } from "zod";
-import { validateHeaderName, validateHeaderValue } from "node:http";
 import yaml from "js-yaml";
+import { validateHeaderName, validateHeaderValue } from "node:http";
 //#region src/extensions/agent-plugins/validation.ts
 const PLUGIN_SCHEMA = "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json";
 const MCP_SCHEMA = "https://agent-plugins.org/schemas/1.0.0/mcp.schema.json";

package/dist/src/gateway/agents-admin.js

@@ -1,10 +1,10 @@
 import { normalizeAgentId, validateAgentIdForNewAgent } from "../agent-catalog/id.js";
 import { AgentCatalogRepository, init_repository } from "../agent-catalog/repository.js";
 import { init_agent_scope, listAgentEntries, resolveAgentProfileDir, resolveAgentWorkspaceDir, resolveDefaultAgentId, resolveUserPath } from "../agent/agent-scope.js";
-import { resolveEffectiveAgentProfile } from "../config/agent-profile.js";
 import { AGENT_PROFILE_MARKDOWN_SYSTEM_FILES, REQUIRED_AGENT_PROFILE_MARKDOWN_FILE_SET } from "../agent/context/workspace.js";
-import { isPathUnderWorkspace, resolveWorkspaceSafePath } from "./workspace-editor-path.js";
 import { AgentCatalogService } from "../agent-catalog/service.js";
+import { resolveEffectiveAgentProfile } from "../config/agent-profile.js";
+import { isPathUnderWorkspace, resolveWorkspaceSafePath } from "./workspace-editor-path.js";
 import { GATEWAY_BUILTIN_TOOL_IDS } from "./agent-builtin-tools.js";
 import { resolve } from "node:path";
 import { mkdir, readFile, realpath, stat, unlink, writeFile } from "node:fs/promises";

package/dist/src/gateway/config-tools-web.js

@@ -1,5 +1,7 @@
+import { deepseekSearchEndpoint, init_deepseek_protocol } from "../agent/tools/search/providers/deepseek-protocol.js";
 import { isMaskedSecretPatchValue, maskSecretLength } from "./hono/lib/mask-secret-length.js";
 //#region src/gateway/config-tools-web.ts
+init_deepseek_protocol();
 function isMaskedApiKey(v) {
 	return typeof v === "string" && isMaskedSecretPatchValue(v);
 }
@@ -76,13 +78,22 @@ function applyToolsWebPatch(config, body) {
 		if (!rawRow || typeof rawRow !== "object") return "Invalid search provider entry";
 		const row = rawRow;
 		const type = row.type;
-		if (type !== "brave" && type !== "tavily" && type !== "bing" && type !== "searxng") return `Invalid search provider type: ${String(type)}`;
-		const prev = prevProviders?.[i];
+		if (type !== "brave" && type !== "tavily" && type !== "bing" && type !== "searxng" && type !== "deepseek") return `Invalid search provider type: ${String(type)}`;
+		const previousOfType = prevProviders?.filter((entry) => entry.type === type) ?? [];
+		const prev = previousOfType.length === 1 ? previousOfType[0] : prevProviders?.[i]?.type === type ? prevProviders[i] : void 0;
 		let apiKey = typeof row.apiKey === "string" ? row.apiKey : "";
-		if (isMaskedApiKey(apiKey) && prev?.apiKey) apiKey = prev.apiKey;
+		if (isMaskedApiKey(apiKey)) {
+			if (!prev?.apiKey) return "Cannot preserve an API key after changing provider type";
+			apiKey = prev.apiKey;
+		}
 		const urlRaw = typeof row.url === "string" ? row.url.trim().replace(/\/+$/, "") : "";
 		const entry = { type };
-		if (type === "searxng") {
+		if (type === "deepseek" && urlRaw) try {
+			deepseekSearchEndpoint(urlRaw);
+		} catch {
+			return "Invalid DeepSeek API base URL";
+		}
+		if (type === "searxng" || type === "deepseek") {
 			if (urlRaw) entry.url = urlRaw;
 			if (apiKey) entry.apiKey = apiKey;
 		} else if (apiKey) entry.apiKey = apiKey;

package/dist/src/gateway/gateway-workflow-host.types.d.ts

@@ -3,6 +3,9 @@ import type { EndpointToolRuntime } from '../endpoint-tools/index.js';
 import type { MessageBus } from '../infra/bus/index.js';
 import type { SessionStore } from '../session/store.js';
 export interface GatewayWorkflowAgentSurface {
+    getWorkspaceTrust?(workspacePath: string): {
+        trusted: boolean;
+    };
     getModelForSession(conversationId: string): string;
     getWorkflowSkillInstructions(agentId: string, names: readonly string[]): string | undefined;
 }

package/dist/src/gateway/hono/lib/config-payload.d.ts

@@ -165,6 +165,11 @@ export declare function buildSafeWebConfigPayload(service: GatewayService, optio
     /** Masked `cfg.providers` for capability keys (image / STT / etc.). */
     providersConfig: Record<string, import("./safe-providers-config.js").SafeProviderAuthEntry>;
     gateway: {
+        outboundProxy: {
+            mode: "custom" | "environment" | "direct";
+            url: string;
+            noProxy: string;
+        };
         bind: "custom" | "auto" | "loopback" | "lan" | "tailnet";
         customBindHost: string;
         port: number;

package/dist/src/gateway/hono/lib/config-payload.js

@@ -1,7 +1,7 @@
-import { ContextPlanningConfigSchema, KnowledgeMemoryConfigSchema, UserModelConfigSchema, init_config } from "../../../user-context/config.js";
 import { normalizeAgentId } from "../../../agent-catalog/id.js";
 import { AgentCatalogRepository, init_repository } from "../../../agent-catalog/repository.js";
 import { init_agent_scope, listAgentEntries, resolveDefaultAgentId } from "../../../agent/agent-scope.js";
+import { ContextPlanningConfigSchema, KnowledgeMemoryConfigSchema, UserModelConfigSchema, init_config } from "../../../user-context/config.js";
 import { resolveModelsJsonPath } from "../../../config/paths.js";
 import { init_models_json, loadModelsJson } from "../../../config/models-json.js";
 import { CredentialResolver, init_credentials } from "../../../auth/credentials.js";
@@ -99,6 +99,11 @@ async function buildSafeWebConfigPayload(service, options = {}) {
 		/** Masked `cfg.providers` for capability keys (image / STT / etc.). */
 		providersConfig: buildSafeProvidersConfigForWeb(config.providers),
 		gateway: {
+			outboundProxy: config.gateway?.outboundProxy ?? {
+				mode: "environment",
+				url: "",
+				noProxy: ""
+			},
 			bind: config.gateway?.bind ?? "loopback",
 			customBindHost: config.gateway?.customBindHost,
 			port: config.gateway?.port,

package/dist/src/gateway/hono/routes/config-patch/gateway.js

@@ -1,3 +1,4 @@
+import { OutboundProxySchema, init_outbound_proxy } from "../../../../config/outbound-proxy.js";
 import { init_public_url, validatePublicUrl } from "../../../../config/public-url.js";
 import { isValidIPv4 } from "../../../../config/gateway-bind.js";
 import { mergeShareConfigPatch } from "../../../../share/share-config.js";
@@ -5,6 +6,7 @@ import { mergeSiteShareConfigPatch } from "../../../../share/site-share-config.j
 import { isMaskedSecretPatchValue } from "../../lib/mask-secret-length.js";
 import { PATCH_OK, patchError } from "./result.js";
 //#region src/gateway/hono/routes/config-patch/gateway.ts
+init_outbound_proxy();
 init_public_url();
 /**
 * Shared default for "user PATCH'd a gateway subsection but `config.gateway`
@@ -26,6 +28,11 @@ function parseDeferIdList(raw) {
 	return ids;
 }
 function applyGatewayPatch(config, body) {
+	if (body.gateway?.outboundProxy !== void 0) {
+		const parsed = OutboundProxySchema.safeParse(body.gateway.outboundProxy);
+		if (!parsed.success) return patchError("Invalid outbound proxy: use an HTTP(S) origin without credentials, with environment/custom/direct mode");
+		ensureGateway(config).outboundProxy = parsed.data;
+	}
 	if (body.gateway?.webchat?.activityDetailDefault !== void 0) {
 		const level = body.gateway.webchat.activityDetailDefault;
 		if (level !== "off" && level !== "on" && level !== "stream") return patchError("gateway.webchat.activityDetailDefault must be off, on, or stream");

package/dist/src/gateway/hono/routes/config-patch/misc.js

@@ -1,10 +1,10 @@
-import { ContextPlanningConfigSchema, HomeIntelligenceConfigSchema, KnowledgeMemoryConfigSchema, UserContextConfigSchema, UserModelConfigSchema, init_config } from "../../../../user-context/config.js";
 import { BindingsSchema, init_binding_schema } from "../../../../routing/binding-schema.js";
+import { AgentCatalogService } from "../../../../agent-catalog/service.js";
+import { ContextPlanningConfigSchema, HomeIntelligenceConfigSchema, KnowledgeMemoryConfigSchema, UserContextConfigSchema, UserModelConfigSchema, init_config } from "../../../../user-context/config.js";
 import { ComputerConfigSchema, init_config as init_config$1 } from "../../../../computer/config.js";
 import { BrowserConfigSchema, McpConfigSchema, VoiceConfigSchema, init_schema } from "../../../../config/schema.js";
 import { CredentialResolver, init_credentials } from "../../../../auth/credentials.js";
 import { canonicalizeConfiguredMcpServer } from "../../../../config/mcp-config-normalize.js";
-import { AgentCatalogService } from "../../../../agent-catalog/service.js";
 import { mergeGatewaySkillsMarketplacePatch, mergeSessionConfigPatch, mergeUpdateConfigPatch } from "../../../../config/web-patch.js";
 import { assertGatewayAuthConfigured, resolveGatewayAuth } from "../../../auth.js";
 import { isMaskedSecretPatchValue } from "../../lib/mask-secret-length.js";

package/dist/src/gateway/hono/routes/connectors.js

@@ -6,9 +6,9 @@ import { getConnectorAccount, init_connector_account_repository, listConnectorAc
 import { decideConnectorApproval, getConnectorApproval, listConnectorApprovals, listConnectorConnections } from "../../../storage/sqlite/connector-repository.js";
 import { getConnectorSyncPolicy, upsertConnectorSyncPolicy } from "../../../storage/sqlite/connector-sync-policy-repository.js";
 import { init_sqlite } from "../../../storage/sqlite/index.js";
-import { listUnderstandingSourceGrants, revokeUnderstandingSourceGrant } from "../../../user-context/sources/repository.js";
 import { AgentCatalogRepository, init_repository } from "../../../agent-catalog/repository.js";
 import { init_agent_scope, resolveDefaultAgentId } from "../../../agent/agent-scope.js";
+import { listUnderstandingSourceGrants, revokeUnderstandingSourceGrant } from "../../../user-context/sources/repository.js";
 import { activateComposioBackend, addComposioBackend, ensureComposioBackend, getComposioBackend, listComposioBackends, removeComposioBackend } from "../../../connectors/composio-backends.js";
 import { getAuthorizationAttempt } from "../../../connectors/authorization-attempts.js";
 import { ComposioSessionsAdapter, resolveComposioApiKey } from "../../../connectors/composio-sessions.js";

package/dist/src/gateway/hono/routes/context-sources.js

@@ -2,9 +2,9 @@ import { getSqliteDatabase, init_transaction } from "../../../storage/sqlite/tra
 import { getConnectorAccount } from "../../../storage/sqlite/connector-account-repository.js";
 import { countKnowledgeSourceItems, deleteKnowledgeSourceItems } from "../../../storage/sqlite/knowledge-repository.js";
 import { init_sqlite } from "../../../storage/sqlite/index.js";
+import { init_agent_scope, resolveDefaultAgentId } from "../../../agent/agent-scope.js";
 import { getActiveUnderstandingConsent } from "../../../user-context/sources/consent-repository.js";
 import { getUnderstandingSourceGrant, listUnderstandingSourceGrants, listUnderstandingSourceRuns, revokeUnderstandingSourceGrant, updateUnderstandingSourceGrantPolicies } from "../../../user-context/sources/repository.js";
-import { init_agent_scope, resolveDefaultAgentId } from "../../../agent/agent-scope.js";
 import { listUserModelObservations } from "../../../user-model/observation-repository.js";
 import "../../../user-model/index.js";
 import { listConnectedContentCandidates, readConnectedContent } from "../../../connectors/content-enrichment.js";

package/dist/src/gateway/hono/routes/models.js

@@ -3,12 +3,12 @@ import { init_model_usage, withModelUsageOrigin } from "../../../providers/model
 import { resolveEffectiveAgentConfigForAgent } from "../../../config/agent-profile.js";
 import { init_resolve_config_value, testApiKeyResolution } from "../../../config/resolve-config-value.js";
 import { resolveModelsJsonPath } from "../../../config/paths.js";
+import "../../../providers/constants.js";
 import { computerModelProfile, init_model_policy, isDedicatedComputerModel } from "../../../computer/model-policy.js";
 import { init_models_json, loadModelsJson, saveModelsJson, validateModelsConfig } from "../../../config/models-json.js";
 import { getModelCatalogStore, init_model_catalog_store } from "../../../providers/model-catalog-store.js";
 import { getModelRegistry } from "../../../providers/model-registry.js";
 import { CredentialResolver, init_credentials } from "../../../auth/credentials.js";
-import "../../../providers/constants.js";
 import { getProviderRegistry, init_plugin_registry } from "../../../providers/plugin-registry.js";
 import { PROVIDER_META, getAllModels, getAllProviders, getAvailableModels, getProviderAuthState, init_providers, isProviderConfigured, isProviderConfiguredSync } from "../../../providers/index.js";
 import { XopcCloudAccountError, XopcCloudAccountService } from "../../../providers/xopc-cloud-account-service.js";
@@ -324,7 +324,10 @@ function registerModelsRoutes(authenticated, deps) {
 			name: m.name,
 			...catalogDisplayNames(m.provider, m.id),
 			provider: m.provider,
-			...computerModelProfile(m) ? { computerUse: { profile: computerModelProfile(m) } } : {},
+			...computerModelProfile(m) ? { computerUse: {
+				profile: computerModelProfile(m),
+				dedicated: isDedicatedComputerModel(m)
+			} } : {},
 			contextWindow: m.contextWindow ?? 128e3,
 			maxTokens: m.maxTokens ?? 4096,
 			reasoning: m.reasoning ?? false,

package/dist/src/gateway/hono/routes/notes.js

@@ -1,9 +1,9 @@
 import { NoteDeleteOutputSchema, NoteGetOutputSchema, ProductReadContracts } from "../../../../packages/gateway-contract/src/capabilities.js";
 import { init_src } from "../../../../packages/gateway-contract/src/index.js";
-import { init_session_key, resolveConversationId } from "../../../routing/session-key.js";
-import { agentExists, getDefaultAgentId, init_resolve_route } from "../../../routing/resolve-route.js";
 import { CapabilityError } from "../../../capabilities/runtime/errors.js";
 import "../../../capabilities/runtime/dispatcher.js";
+import { init_session_key, resolveConversationId } from "../../../routing/session-key.js";
+import { agentExists, getDefaultAgentId, init_resolve_route } from "../../../routing/resolve-route.js";
 import { resolveGatewayEffectiveHost } from "../../../config/gateway-bind.js";
 import { getShareStore } from "../../../share/share-store.js";
 import { resolveShareUrl } from "../../../share/share-url.js";

package/dist/src/gateway/hono/routes/projects.js

@@ -7,12 +7,12 @@ import { loadTranscriptRowsForSession } from "../../../storage/sqlite/transcript
 import { init_sqlite } from "../../../storage/sqlite/index.js";
 import { ActivityService } from "../../../activity/service.js";
 import "../../../activity/index.js";
+import { CapabilityError } from "../../../capabilities/runtime/errors.js";
+import "../../../capabilities/runtime/dispatcher.js";
 import { listKnowledgeItems, writeKnowledgeItem } from "../../../knowledge-memory/repository.js";
 import "../../../knowledge-memory/index.js";
 import { resolveEffectiveAgentProfile } from "../../../config/agent-profile.js";
 import { TaskReadModelProjector } from "../../../tasks/task-read-model-projector.js";
-import { CapabilityError } from "../../../capabilities/runtime/errors.js";
-import "../../../capabilities/runtime/dispatcher.js";
 import { ProjectWorkspaceConflictError, ProjectWorkspaceMissingError } from "../../../projects/workspace-project.js";
 import { inferProjectExecutionMode, inferProjectKind } from "../../../projects/project-kind.js";
 import { ProjectDeletionBlockedError, ProjectWorkspaceInUseError } from "../../../projects/project-service.js";

package/dist/src/gateway/hono/routes/session-input-handler.js

@@ -5,9 +5,9 @@ import { endpointContextSchema } from "../../../../packages/gateway-contract/src
 import { parseUserTurnDocument, userTurnDocumentRefIds } from "../../../../packages/gateway-contract/src/user-turn-document.js";
 import { init_src } from "../../../../packages/gateway-contract/src/index.js";
 import { endpointTurnClaimSchema, init_src as init_src$1 } from "../../../../packages/endpoint-tools-protocol/src/index.js";
-import { init_providers, resolveModel } from "../../../providers/index.js";
 import { CapabilityError } from "../../../capabilities/runtime/errors.js";
 import "../../../capabilities/runtime/dispatcher.js";
+import { init_providers, resolveModel } from "../../../providers/index.js";
 import { getModelThinking } from "../../../providers/model-thinking.js";
 import { parseTurnContextRefs } from "../../../agent/source-context/types.js";
 import { validateWebchatAttachments, validateWebchatContent } from "../../chat-limits.js";

package/dist/src/gateway/hono/routes/tasks.js

@@ -6,9 +6,9 @@ import { hasGatewayScope, init_gateway_scopes } from "../../security/gateway-sco
 import { enqueueTaskChangedEvent, init_task_change_events } from "../../../tasks/task-change-events.js";
 import { TaskRepository, init_task_repository } from "../../../tasks/task-repository.js";
 import { TaskRunRepository, init_task_run_repository } from "../../../tasks/task-run-repository.js";
-import { TaskConversationRepository } from "../../../tasks/task-conversation-repository.js";
 import { CapabilityError } from "../../../capabilities/runtime/errors.js";
 import "../../../capabilities/runtime/dispatcher.js";
+import { TaskConversationRepository } from "../../../tasks/task-conversation-repository.js";
 import { TaskCollaborationRepository } from "../../../tasks/task-collaboration-repository.js";
 import { TaskCriterionReviewRepository } from "../../../tasks/task-criterion-review-repository.js";
 import { TaskContextMutationOutputSchema } from "../../../tasks/capabilities/relations.js";

package/dist/src/gateway/image-generation-setup.js

@@ -1,11 +1,11 @@
 import { normalizeAgentId } from "../agent-catalog/id.js";
 import { AgentCatalogRepository, init_repository } from "../agent-catalog/repository.js";
 import { init_agent_scope } from "../agent/agent-scope.js";
+import { AgentCatalogService } from "../agent-catalog/service.js";
 import { resolveEffectiveAgentConfigForAgent } from "../config/agent-profile.js";
 import { ConfigSchema, init_schema } from "../config/schema.js";
 import { fetchWithTimeoutGuarded } from "../media-shared/http/provider-http.js";
 import "../media-shared/http/index.js";
-import { AgentCatalogService } from "../agent-catalog/service.js";
 import { getImageGenerationProvider, listImageGenerationProvidersSummary } from "../agent/image/generation/provider-registry.js";
 //#region src/gateway/image-generation-setup.ts
 init_repository();

package/dist/src/gateway/lock.js

@@ -1,8 +1,8 @@
 import path from "node:path";
 import fs from "node:fs";
 import { createHash } from "node:crypto";
-import net from "node:net";
 import fs$1 from "node:fs/promises";
+import net from "node:net";
 import { homedir } from "os";
 //#region src/gateway/lock.ts
 /**

package/dist/src/gateway/service/config-coordinator.d.ts

@@ -161,6 +161,11 @@ export declare class GatewayConfigCoordinator {
         };
         channels: Record<string, unknown>;
         gateway: {
+            outboundProxy?: {
+                mode: "custom" | "environment" | "direct";
+                url: string;
+                noProxy: string;
+            };
             bind?: "custom" | "auto" | "loopback" | "lan" | "tailnet";
             customBindHost?: string;
             port?: number;
@@ -324,7 +329,7 @@ export declare class GatewayConfigCoordinator {
                 search?: {
                     maxResults: number;
                     providers: {
-                        type: "brave" | "tavily" | "bing" | "searxng";
+                        type: "brave" | "tavily" | "bing" | "searxng" | "deepseek";
                         apiKey?: string;
                         url?: string;
                         disabled?: boolean;
@@ -536,8 +541,8 @@ export declare class GatewayConfigCoordinator {
                 };
                 timeout?: number;
                 enabled?: boolean;
-                exposure?: "codemode" | "direct" | "deferred" | "hidden";
-                toolExposure?: Record<string, "codemode" | "direct" | "deferred" | "hidden">;
+                exposure?: "direct" | "codemode" | "deferred" | "hidden";
+                toolExposure?: Record<string, "direct" | "codemode" | "deferred" | "hidden">;
                 description?: string;
                 transport?: never;
                 workingDirectory?: never;

package/dist/src/gateway/service.js

@@ -20,13 +20,13 @@ import { getSessionMetadata } from "../storage/sqlite/session-read-repository.js
 import { init_session_repository, listSessionMetadata, patchSessionMetadata } from "../storage/sqlite/session-repository.js";
 import { getSessionConfig, init_config_repository } from "../storage/sqlite/config-repository.js";
 import { init_sqlite } from "../storage/sqlite/index.js";
+import { normalizeAgentId } from "../agent-catalog/id.js";
+import { init_agent_scope, listAgentEntries, resolveAgentWorkspaceDir, resolveDefaultAgentId } from "../agent/agent-scope.js";
 import { listKnowledgeItems } from "../knowledge-memory/repository.js";
 import { init_config, resolveKnowledgeReadPolicy } from "../user-context/config.js";
 import { init_agent_session_key, resolveAgentMainConversationId } from "../routing/agent-session-key.js";
 import { init_session_key, resolveConversationId, sanitizeSegment } from "../routing/session-key.js";
 import "../knowledge-memory/index.js";
-import { normalizeAgentId } from "../agent-catalog/id.js";
-import { init_agent_scope, listAgentEntries, resolveAgentWorkspaceDir, resolveDefaultAgentId } from "../agent/agent-scope.js";
 import { getDefaultAgentId, init_resolve_route } from "../routing/resolve-route.js";
 import { resolveEffectiveAgentProfileForSession } from "../config/agent-profile.js";
 import { getAgentDefaultModelRef, init_schema } from "../config/schema.js";
@@ -84,9 +84,10 @@ import { bootstrapApplicationStateSync } from "../bootstrap/application-state.js
 import { setPairingBroadcastSink } from "../channels/pairing/pairing-events.js";
 import { registerClarificationChannelRuntime } from "./clarify-runtime.js";
 import { ChannelManager } from "../channels/manager.js";
+import { configureGatewayHttpProxy } from "../infra/http-proxy-env.js";
+import "../config/index.js";
 import { ChatPreviewService } from "../chat-previews/service.js";
 import "../chat-previews/index.js";
-import "../config/index.js";
 import { ManagedComposioEventPoller } from "../connectors/composio-managed-events.js";
 import { startConnectedKnowledgeCoordinator } from "../knowledge/coordinator.js";
 import "../knowledge/index.js";
@@ -384,6 +385,7 @@ var GatewayService = class {
 		markStaleAiUsageEventsUnknown(now - 360 * 60 * 1e3, now);
 		pruneAiUsageEvents(now - AI_USAGE_RETENTION_MS);
 		this.config = loadConfig(this.configPath);
+		configureGatewayHttpProxy(this.config.gateway.outboundProxy);
 		let bootstrapConfigChanged = initializeVoiceDefaults(this.config, inferProductLanguageFromEnvironment());
 		if (sanitizeTunnelConfig(this.config)) bootstrapConfigChanged = true;
 		if (bootstrapConfigChanged) saveConfig(this.config, this.configPath).catch((err) => {

package/dist/src/gateway/xopc-cloud-capability-setup.js

@@ -1,10 +1,10 @@
 import "../agent-config/schema.js";
 import { init_agent_config } from "../agent-config/index.js";
 import { AgentCatalogRepository, init_repository } from "../agent-catalog/repository.js";
+import { AgentCatalogService } from "../agent-catalog/service.js";
 import { ConfigSchema, init_schema } from "../config/schema.js";
 import { getModelCatalogStore, init_model_catalog_store } from "../providers/model-catalog-store.js";
 import { compareCatalogModels } from "../providers/model-catalog-ranking.js";
-import { AgentCatalogService } from "../agent-catalog/service.js";
 import { prepareUpdateGlobalDefaults } from "./global-defaults-admin.js";
 //#region src/gateway/xopc-cloud-capability-setup.ts
 init_schema();

package/dist/src/infra/http-proxy-env.d.ts

@@ -1,4 +1,7 @@
+import type { OutboundProxyConfig } from '../config/outbound-proxy.js';
 type ProxyEnv = Record<string, string | undefined>;
 export declare function hasProxyEnv(env?: ProxyEnv): boolean;
 export declare function installGlobalProxyDispatcherFromEnv(env?: ProxyEnv): boolean;
+/** Applied once at Gateway startup; saved changes require a process restart. */
+export declare function configureGatewayHttpProxy(config?: OutboundProxyConfig, env?: ProxyEnv): void;
 export {};

package/dist/src/infra/http-proxy-env.js

@@ -1,4 +1,4 @@
-import { EnvHttpProxyAgent, setGlobalDispatcher } from "undici";
+import { Agent, EnvHttpProxyAgent, setGlobalDispatcher } from "undici";
 //#region src/infra/http-proxy-env.ts
 const PROXY_ENV_KEYS = [
 	"http_proxy",
@@ -17,5 +17,25 @@ function installGlobalProxyDispatcherFromEnv(env = process.env) {
 	return true;
 }
 installGlobalProxyDispatcherFromEnv();
+/** Applied once at Gateway startup; saved changes require a process restart. */
+function configureGatewayHttpProxy(config, env = process.env) {
+	if (config?.mode === "direct") {
+		setGlobalDispatcher(new Agent());
+		return;
+	}
+	const httpProxy = config?.mode === "custom" ? config.url : env.http_proxy ?? env.HTTP_PROXY ?? "";
+	const httpsProxy = config?.mode === "custom" ? config.url : env.https_proxy ?? env.HTTPS_PROXY ?? httpProxy;
+	const bypass = [config?.mode === "custom" ? "" : env.no_proxy ?? env.NO_PROXY ?? "", config?.noProxy ?? ""];
+	setGlobalDispatcher(new EnvHttpProxyAgent({
+		httpProxy,
+		httpsProxy,
+		noProxy: bypass.some((value) => value.split(/[,\s]+/).includes("*")) ? "*" : [
+			"localhost",
+			"127.0.0.1",
+			"::1",
+			...bypass
+		].filter(Boolean).join(",")
+	}));
+}
 //#endregion
-export { hasProxyEnv, installGlobalProxyDispatcherFromEnv };
+export { configureGatewayHttpProxy, hasProxyEnv, installGlobalProxyDispatcherFromEnv };

package/dist/src/local-apps/service.js

@@ -5,10 +5,10 @@ import { currentOperationId, init_operation_context } from "../infra/operation-c
 import { afterSqliteCommit, init_transaction, runSqliteWriteTransaction } from "../storage/sqlite/transaction.js";
 import { ExtensionCapabilityBindingsSchema, extensionCapabilityPermissions } from "../../packages/gateway-contract/src/extension-capabilities.js";
 import { init_src } from "../../packages/gateway-contract/src/index.js";
+import { CapabilityError } from "../capabilities/runtime/errors.js";
 import { init_paths, resolveExtensionsDir } from "../config/paths.js";
 import { slugifyProjectName } from "../projects/project-store.js";
 import { LocalAppStore } from "./store.js";
-import { CapabilityError } from "../capabilities/runtime/errors.js";
 import { DomainOutboxDispatcher } from "../infra/domain-outbox-dispatcher.js";
 import { validateLocalAppCapabilityContracts } from "./capabilities/contracts.js";
 import { buildLocalAppFixGuidance } from "./fix-guidance.js";