@xopcai/xopc 0.0.399 → 0.0.401

package/dist/src/computer/runtime.d.ts

@@ -146,6 +146,21 @@ export declare const ComputerUseInputSchema: z.ZodDiscriminatedUnion<[z.ZodObjec
         label: z.ZodString;
     }, z.core.$strict>], "kind">>;
     flowId: z.ZodOptional<z.ZodUUID>;
+}, z.core.$strict>, z.ZodObject<{
+    op: z.ZodLiteral<"run">;
+    goal: z.ZodString;
+    expect: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"text">;
+        text: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"field">;
+        label: z.ZodString;
+        value: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"selected">;
+        label: z.ZodString;
+    }, z.core.$strict>], "kind">;
+    maxActions: z.ZodOptional<z.ZodNumber>;
 }, z.core.$strict>, z.ZodObject<{
     op: z.ZodLiteral<"close">;
     saveFlowAs: z.ZodOptional<z.ZodString>;
@@ -197,6 +212,13 @@ export interface ComputerPublicResult {
     report?: ComputerSessionReport;
     flows?: ReturnType<typeof computerFlowMetadata>[];
     savedFlow?: ReturnType<typeof computerFlowMetadata>;
+    run?: {
+        actionsExecuted: number;
+        modelRequests: number;
+        observationsReused: number;
+        elapsedMs: number;
+        stopReason: 'condition_satisfied' | 'condition_present' | 'action_limit' | 'time_limit' | 'handoff';
+    };
 }
 export declare class ComputerRuntime {
     private readonly endpoints;
@@ -210,6 +232,7 @@ export declare class ComputerRuntime {
     constructor(endpoints: EndpointToolRuntime, getConfig: () => Config, getTurnEndpoint?: (owner: string) => string | undefined, flowStore?: ComputerFlowRepository);
     execute(owner: string, input: ComputerUseInput, signal?: AbortSignal): Promise<ComputerPublicResult>;
     private flowScope;
+    private executeGoal;
     private executeInput;
     private isUndispatchedChange;
     private reserveRescue;

package/dist/src/computer/runtime.js

@@ -1,10 +1,10 @@
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
-import { resolveEffectiveAgentConfigForSession } from "../config/agent-profile.js";
 import { COMPUTER_CONTROL_TOOL, ComputerAppSchema, ComputerObservationSchema, ComputerWindowSchema, init_src } from "../../packages/computer-control-contract/src/index.js";
 import { ComputerServiceLimitsSchema, computerModelProfile, init_model_policy } from "./model-policy.js";
-import { getApiKey, init_providers, resolveModel } from "../providers/index.js";
 import { rejectUnbudgetedCloudTransport } from "../providers/xopc-cloud-credit-budget.js";
+import { resolveEffectiveAgentConfigForSession } from "../config/agent-profile.js";
+import { getApiKey, init_providers, resolveModel } from "../providers/index.js";
 import { enterComputerControl, leaveComputerControl } from "./control-guard.js";
 import { ComputerDiagnosticSchema, ComputerOperationError, computerDiagnostic, computerRecovery } from "./errors.js";
 import { createComputerModelAdapter, predictComputerStep, readComputerJson } from "./model-adapter.js";
@@ -14,6 +14,7 @@ import { ComputerSessionDiagnostics } from "./diagnostics.js";
 import { ComputerExpectationSchema, ComputerTaskState, verifyComputerExpectation } from "./task-state.js";
 import { randomUUID } from "node:crypto";
 import { z } from "zod";
+import { setTimeout } from "node:timers/promises";
 //#region src/computer/runtime.ts
 init_src();
 init_providers();
@@ -83,6 +84,12 @@ const ComputerUseInputSchema = z.discriminatedUnion("op", [
 		expect: ComputerExpectationSchema.optional(),
 		flowId: z.uuid().optional()
 	}).strict(),
+	z.object({
+		op: z.literal("run"),
+		goal: z.string().min(1).max(4e3),
+		expect: ComputerExpectationSchema,
+		maxActions: z.number().int().min(1).max(12).optional()
+	}).strict(),
 	z.object({
 		op: z.literal("close"),
 		saveFlowAs: z.string().trim().min(1).max(160).optional()
@@ -198,7 +205,8 @@ var ComputerRuntime = class {
 		const diagnostics = this.sessions.get(owner)?.diagnostics ?? (input.op === "open" ? new ComputerSessionDiagnostics() : void 0);
 		if (diagnostics) this.openingReports.set(owner, diagnostics);
 		try {
-			const result = await this.executeInput(owner, input, signal ? AbortSignal.any([signal, operation.signal]) : operation.signal, diagnostics);
+			const operationSignal = signal ? AbortSignal.any([signal, operation.signal]) : operation.signal;
+			const result = input.op === "run" ? await this.executeGoal(owner, input, operationSignal, diagnostics) : await this.executeInput(owner, input, operationSignal, diagnostics);
 			if (result.errorCode) diagnostics?.fail(new Error(result.errorCode), diagnostics.phase, result.receipt?.dispatch ?? "notStarted");
 			if (diagnostics && !this.sessions.has(owner)) this.retainReport(owner, diagnostics);
 			return {
@@ -233,7 +241,63 @@ var ComputerRuntime = class {
 		const effective = resolveEffectiveAgentConfigForSession(owner).config;
 		return JSON.stringify([effective.id, effective.workspace]);
 	}
-	async executeInput(owner, input, signal, diagnostics) {
+	async executeGoal(owner, input, signal, diagnostics) {
+		const startedAt = Date.now();
+		const requestsBefore = diagnostics?.snapshot().counters.modelRequests ?? 0;
+		const context = { observationsReused: 0 };
+		let actionsExecuted = 0;
+		const finish = (result, stopReason) => ({
+			...result,
+			run: {
+				actionsExecuted,
+				modelRequests: (diagnostics?.snapshot().counters.modelRequests ?? 0) - requestsBefore,
+				observationsReused: context.observationsReused,
+				elapsedMs: Math.max(0, Date.now() - startedAt),
+				stopReason
+			}
+		});
+		const step = {
+			op: "step",
+			goal: input.goal,
+			expect: input.expect
+		};
+		try {
+			while (true) {
+				signal.throwIfAborted();
+				let result = await this.executeInput(owner, step, signal, diagnostics, context);
+				const authorizationDeadline = Date.now() + 6e4;
+				while (result.status === "pending_authorization" || result.status === "pending_action") {
+					const authorizingSession = result.status === "pending_authorization";
+					if (Date.now() >= authorizationDeadline) {
+						await this.close(owner);
+						throw new Error("COMPUTER_AUTHORIZATION_TIMEOUT");
+					}
+					await setTimeout(250, void 0, { signal });
+					result = await this.executeInput(owner, authorizingSession ? { op: "observe" } : step, signal, diagnostics, context);
+					if (authorizingSession && result.status === "ready" && !result.errorCode) result = await this.executeInput(owner, step, signal, diagnostics, context);
+				}
+				if (result.receipt?.dispatch === "completed") actionsExecuted++;
+				if (result.errorCode || result.pending || result.receipt && result.receipt.dispatch !== "completed") return finish(result, "handoff");
+				if (result.verified) return finish({
+					...result,
+					status: "goal_satisfied"
+				}, "condition_satisfied");
+				if (result.status === "condition_present") return finish(result, "condition_present");
+				if (!result.receipt || result.status !== "ready") return finish(result, "handoff");
+				const stopReason = actionsExecuted >= (input.maxActions ?? 6) ? "action_limit" : Date.now() - startedAt >= 12e4 ? "time_limit" : void 0;
+				if (stopReason) return finish({
+					...result,
+					status: "goal_limit",
+					verified: false,
+					nextAction: "The small-goal budget ended without verifying the condition. Inspect the result and remaining requirements before continuing; do not claim success."
+				}, stopReason);
+			}
+		} finally {
+			context.observation?.frame?.fill(0);
+			context.observation = void 0;
+		}
+	}
+	async executeInput(owner, input, signal, diagnostics, goalContext) {
 		signal.throwIfAborted();
 		const config = this.getConfig();
 		if (!config.computer.enabled) {
@@ -383,7 +447,7 @@ var ComputerRuntime = class {
 				if (input.op === "observe") return this.present(status.value);
 				const context = s.pendingContext;
 				phase = "dispatch";
-				const result = await this.dispatchAction(s, s.pending, signal);
+				const result = await this.dispatchAction(s, s.pending, signal, goalContext);
 				if (!this.isUndispatchedChange(result) || !context) return result;
 				input = {
 					op: "step",
@@ -401,7 +465,12 @@ var ComputerRuntime = class {
 				signal.throwIfAborted();
 				if (Date.now() - s.createdAt >= config.computer.maxSessionDurationMs) throw new Error("COMPUTER_SESSION_BUDGET");
 				phase = "observe";
-				const observed = await this.send(s, {
+				const cached = goalContext?.observation;
+				if (goalContext) goalContext.observation = void 0;
+				const reuse = cached && status.value.status === "ready" && cached.value.brokerEpoch === status.value.brokerEpoch && cached.value.generation === status.value.generation && cached.value.grantId === status.value.grantId && cached.value.observation && Date.now() - cached.value.observation.capturedAt >= 0 && Date.now() - cached.value.observation.capturedAt <= 5e3;
+				if (cached && !reuse) cached.frame?.fill(0);
+				if (reuse) goalContext.observationsReused++;
+				const observed = reuse ? cached : await this.send(s, {
 					op: "observe",
 					sessionId: s.id,
 					owner
@@ -415,6 +484,17 @@ var ComputerRuntime = class {
 						verified: verification?.status === "satisfied",
 						budget: this.budget(s)
 					};
+					if (goalContext && input.op === "step" && input.expect?.kind === "text" && verification?.status === "satisfied") return {
+						...this.present(observed.value),
+						status: "condition_present",
+						verified: false,
+						verification: {
+							...verification,
+							preexisting: true
+						},
+						budget: this.budget(s),
+						nextAction: "This text was already visible before input. Choose a page-specific or selected-state condition; no action was dispatched."
+					};
 					if (input.op === "step" && input.expect?.kind !== "text" && verification?.status === "satisfied") {
 						s.diagnostics.verify(verification);
 						s.adapter.reset?.();
@@ -507,7 +587,7 @@ var ComputerRuntime = class {
 						flowId: input.flowId
 					};
 					phase = "dispatch";
-					const result = await this.dispatchAction(s, e, signal);
+					const result = await this.dispatchAction(s, e, signal, goalContext);
 					if (!this.isUndispatchedChange(result)) return result;
 					this.reserveRescue(s, signal);
 				} finally {
@@ -539,7 +619,7 @@ var ComputerRuntime = class {
 		s.diagnostics.count("rescueAttempts");
 		s.adapter.reset?.();
 	}
-	async dispatchAction(s, envelope, signal) {
+	async dispatchAction(s, envelope, signal, goalContext) {
 		if (!s.pending) {
 			if (s.actions >= this.getConfig().computer.maxActionsPerSession) throw new Error("COMPUTER_ACTION_BUDGET");
 			s.actions++;
@@ -557,7 +637,10 @@ var ComputerRuntime = class {
 			throw new Error("COMPUTER_RECEIPT_MISMATCH");
 		}
 		if (reply.value.status !== "pending_action") s.pending = void 0;
-		reply.frame?.fill(0);
+		if (goalContext && reply.value.status === "ready" && !reply.value.errorCode && reply.value.receipt?.dispatch === "completed" && reply.frame && reply.mimeType && reply.value.observation) {
+			goalContext.observation?.frame?.fill(0);
+			goalContext.observation = reply;
+		} else reply.frame?.fill(0);
 		if (reply.value.status === "ready" && reply.value.errorCode === "COMPUTER_OBSERVATION_CHANGED" && !reply.value.receipt) {
 			s.diagnostics.discard();
 			s.actions--;

package/dist/src/config/agent-model-intents.js

@@ -1,8 +1,8 @@
 import { ModelIntentSchema } from "../agent-config/schema.js";
 import { init_agent_config } from "../agent-config/index.js";
 import { getModelUsageOrigin, init_model_usage } from "../providers/model-usage.js";
-import { resolveEffectiveAgentConfigForAgent } from "./agent-profile.js";
 import { init_schema, parseModelRef } from "./schema.js";
+import { resolveEffectiveAgentConfigForAgent } from "./agent-profile.js";
 //#region src/config/agent-model-intents.ts
 init_model_usage();
 init_agent_config();

package/dist/src/config/agent-profile.js

@@ -1,6 +1,6 @@
+import { normalizeAgentId } from "../agent-catalog/id.js";
 import { resolveEffectiveAgentConfig } from "../agent-config/resolver.js";
 import { init_agent_config } from "../agent-config/index.js";
-import { normalizeAgentId } from "../agent-catalog/id.js";
 import { AgentCatalogRepository, init_repository } from "../agent-catalog/repository.js";
 import { init_agent_scope, resolveAgentWorkspaceDir } from "../agent/agent-scope.js";
 import { getConversationRouting } from "../storage/sqlite/conversation-repository.js";

package/dist/src/config/index.js

@@ -2,14 +2,14 @@ import { ENV_VARS, XOPC_DB_FILENAME, resolveHomeDir, resolveStateDir, resolveXop
 import { expandWorkspacePathString, init_workspace_path, normalizeWorkspaceDir, resolveWorkspaceRoot } from "./workspace-path.js";
 import { resolveDefaultAgentWorkspaceDir } from "./workspace-defaults.js";
 import { resolveAgentWorkspaceDir } from "../agent/agent-scope.js";
-import { extractProfileAgentId, resolveEffectiveAgentConfigForAgent, resolveEffectiveAgentConfigForSession, resolveEffectiveAgentProfile, resolveEffectiveAgentProfileForSession } from "./agent-profile.js";
+import { getWorkspacePath } from "./workspace-path-helpers.js";
 import { TelegramAccountConfigSchema, TelegramConfigSchema, TelegramGroupConfigSchema, TelegramTopicConfigSchema } from "../../extensions/telegram/src/config-schema.js";
+import { FILENAMES, WORKSPACE_FILES, existsSync, hasBundledExtensionManifest, init_paths, resolveAgentAuthProfilesPath, resolveAgentDir, resolveAgentHomeDir, resolveAgentProfileDir, resolveAgentProfileMarkdownPath, resolveAuthProfilesPath, resolveBinDir, resolveBundledExtensionsDir, resolveBundledSkillsDir, resolveConfigPath, resolveCredentialsDir, resolveExtensionSdkPath, resolveExtensionsDir, resolveExtensionsLockPath, resolveInboxDir, resolveInboxMessagePath, resolveInboxPendingDir, resolveInboxProcessedDir, resolveLogPath, resolveLogsDir, resolveModelsJsonPath, resolveNodeBinDir, resolveNodeBinPath, resolveNodeToolsDir, resolveNpmBinPath, resolveOAuthPath, resolvePidPath, resolveSkillPath, resolveSkillsCachePath, resolveSkillsDir, resolveSkillsLockPath, resolveSocketPath, resolveStatusPath, resolveToolsDir, resolveWorkspaceExtensionsDir, resolveWorkspaceFile, resolveWorkspaceStateDir, resolveWorkspaceStatePath, resolveXopcBinPath } from "./paths.js";
+import { CustomModelSchema, ImageGenerationCapabilitiesSchema, ImageGenerationModelSchema, ImageGenerationProviderSchema, ModelOverrideSchema, ModelsJsonSchema, OpenAICompatSchema, OpenAICompletionsCompatSchema, OpenAIResponsesCompatSchema, OpenRouterRoutingSchema, ProviderConfigSchema, VercelGatewayRoutingSchema, getDefaultModelValues, init_models_json, loadModelsJson, modelsJsonExists, saveModelsJson, validateModelsConfig } from "./models-json.js";
 import { WeixinAccountConfigSchema, WeixinConfigSchema } from "../../extensions/weixin/src/config-schema.js";
 import { AgentImageGenerationModelSchema, AgentModelRefSchema, AgentModelsSchema, BrowserConfigSchema, ChannelsConfigSchema, CommandsConfigSchema, ConfigSchema, ConnectorsConfigSchema, ExperimentalConfigSchema, ExtensionSecurityConfigSchema, ExtensionSlotsConfigSchema, ExtensionsConfigSchema, GatewayAuthRateLimitSchema, GatewayAuthSchema, GatewayBindModeSchema, GatewayChannelConnectDeferModeSchema, GatewayConfigSchema, GatewayModeSchema, GatewayRemoteSchema, GatewaySecuritySchema, GatewayTailscaleConsentSchema, GatewayTailscaleSchema, GatewayTlsSchema, GatewayTrustedProxySchema, GatewayWebchatConfigSchema, McpConfigSchema, McpOAuthConfigSchema, McpServerSchema, MediaUnderstandingCapabilitiesSchema, MediaUnderstandingModelSchema, MessagesConfigSchema, ModelCatalogConfigSchema, ModelsDevConfigSchema, ProviderAuthConfigSchema, ProviderAzureConfigSchema, ProviderRequestOverridesSchema, ProvidersConfigSchema, RuntimeToolsConfigSchema, STTConfigSchema, STTFallbackConfigSchema, STTProviderConfigSchema, SearchProviderEntrySchema, SessionConfigSchema, SessionDmScopeSchema, SessionResetByTypeSchema, SessionResetConfigSchema, SessionResetModeSchema, SessionScopeSchema, SessionStorageConfigSchema, TTSConfigSchema, TTSEdgeConfigSchema, TTSFallbackConfigSchema, TTSModelOverridesConfigSchema, TTSProviderConfigSchema, TTSSummarizationConfigSchema, ToolsConfigSchema, ToolsMediaAudioConfigSchema, ToolsMediaConfigSchema, TunnelBrokerUrlSchema, TunnelConfigSchema, TunnelConsentSchema, UpdateAutoConfigSchema, UpdateConfigSchema, VoiceConfigSchema, VoiceRefinementConfigSchema, WebSearchConfigSchema, WebToolsConfigSchema, WebsiteBlocklistSchema, WorkspaceConfigSchema, WorkspaceImportConfigSchema, getAgentDefaultChatModelConfig, getAgentDefaultImageGenerationModelConfig, getAgentDefaultImageModelConfig, getAgentDefaultModelRef, init_schema, parseModelRef } from "./schema.js";
+import { extractProfileAgentId, resolveEffectiveAgentConfigForAgent, resolveEffectiveAgentConfigForSession, resolveEffectiveAgentProfile, resolveEffectiveAgentProfileForSession } from "./agent-profile.js";
 import { clearConfigValueCache, getAllowedCommands, getCacheStats, init_resolve_config_value, resolveConfigValue, resolveHeaders, testApiKeyResolution } from "./resolve-config-value.js";
-import { FILENAMES, WORKSPACE_FILES, existsSync, hasBundledExtensionManifest, init_paths, resolveAgentAuthProfilesPath, resolveAgentDir, resolveAgentHomeDir, resolveAgentProfileDir, resolveAgentProfileMarkdownPath, resolveAuthProfilesPath, resolveBinDir, resolveBundledExtensionsDir, resolveBundledSkillsDir, resolveConfigPath, resolveCredentialsDir, resolveExtensionSdkPath, resolveExtensionsDir, resolveExtensionsLockPath, resolveInboxDir, resolveInboxMessagePath, resolveInboxPendingDir, resolveInboxProcessedDir, resolveLogPath, resolveLogsDir, resolveModelsJsonPath, resolveNodeBinDir, resolveNodeBinPath, resolveNodeToolsDir, resolveNpmBinPath, resolveOAuthPath, resolvePidPath, resolveSkillPath, resolveSkillsCachePath, resolveSkillsDir, resolveSkillsLockPath, resolveSocketPath, resolveStatusPath, resolveToolsDir, resolveWorkspaceExtensionsDir, resolveWorkspaceFile, resolveWorkspaceStateDir, resolveWorkspaceStatePath, resolveXopcBinPath } from "./paths.js";
-import { CustomModelSchema, ImageGenerationCapabilitiesSchema, ImageGenerationModelSchema, ImageGenerationProviderSchema, ModelOverrideSchema, ModelsJsonSchema, OpenAICompatSchema, OpenAICompletionsCompatSchema, OpenAIResponsesCompatSchema, OpenRouterRoutingSchema, ProviderConfigSchema, VercelGatewayRoutingSchema, getDefaultModelValues, init_models_json, loadModelsJson, modelsJsonExists, saveModelsJson, validateModelsConfig } from "./models-json.js";
-import { getWorkspacePath } from "./workspace-path-helpers.js";
 import { applyConfigOverrides, getConfigOverrides, resetConfigOverrides, setConfigOverride, unsetConfigOverride } from "./runtime-overrides.js";
 import { canonicalizeConfiguredMcpServer, normalizeConfiguredMcpServers } from "./mcp-config-normalize.js";
 import { formatThinkingLevels, listThinkingLevels, normalizeElevatedMode, normalizeReasoningLevel, normalizeThinkLevel, normalizeVerboseLevel, thinkLevelToNumber } from "../agent/transcript/thinking-types.js";

package/dist/src/config/loader.js

@@ -1,9 +1,9 @@
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
 import { init_write_file_atomic, writeTextAtomic } from "../infra/write-file-atomic.js";
-import { ConfigSchema, init_schema } from "./schema.js";
 import { init_paths, resolveConfigPath } from "./paths.js";
 import { init_resolution, setActivePlatformDiscovery } from "../platform/resolution.js";
+import { ConfigSchema, init_schema } from "./schema.js";
 import { assertChannelPluginConfigs } from "./validate-channel-configs.js";
 import { isGatewayConfigLockedByAnotherProcessSync } from "../gateway/lock.js";
 import { dirname } from "path";

package/dist/src/config/models-json.js

@@ -1,6 +1,6 @@
 import { __esmMin } from "../../_virtual/_rolldown/runtime.js";
-import { init_write_file_atomic, writeTextAtomicSync } from "../infra/write-file-atomic.js";
 import { ComputerProfileSchema, init_src } from "../../packages/computer-control-contract/src/index.js";
+import { init_write_file_atomic, writeTextAtomicSync } from "../infra/write-file-atomic.js";
 import { init_paths, resolveModelsJsonPath } from "./paths.js";
 import { init_model_policy, isComputerModel } from "../computer/model-policy.js";
 import { assertCurrentModelProvider, init_provider_policy } from "../providers/provider-policy.js";

package/dist/src/config/paths-state.js

@@ -1,6 +1,6 @@
 import { __esmMin } from "../../_virtual/_rolldown/runtime.js";
-import { homedir } from "node:os";
 import { join } from "node:path";
+import { homedir } from "node:os";
 //#region src/config/paths-state.ts
 function resolveHomeDir(env = process.env) {
 	return env[ENV_VARS.HOME] || homedir();

package/dist/src/config/schema.js

@@ -3,15 +3,15 @@ import { AgentModelsOverrideSchema, ImageGenerationRouteSchema, ModelRouteSchema
 import { resolveEffectiveAgentConfig } from "../agent-config/resolver.js";
 import { init_agent_config } from "../agent-config/index.js";
 import { AgentCatalogRepository, init_repository } from "../agent-catalog/repository.js";
-import { DEFAULT_CONTEXT_COMPACTION_POLICY, UserContextConfigSchema, init_config } from "../user-context/config.js";
+import { TelegramAccountConfigSchema, TelegramConfigSchema, TelegramGroupConfigSchema, TelegramTopicConfigSchema, init_config_schema } from "../../extensions/telegram/src/config-schema.js";
 import { getModelUsageOrigin, init_model_usage } from "../providers/model-usage.js";
-import { TracingConfigSchema, init_config as init_config$1 } from "../observability/config.js";
+import { TracingConfigSchema, init_config } from "../observability/config.js";
 import { OutboundProxySchema, init_outbound_proxy } from "./outbound-proxy.js";
-import { ComputerConfigSchema, init_config as init_config$2 } from "../computer/config.js";
+import { ComputerConfigSchema, init_config as init_config$1 } from "../computer/config.js";
+import { DEFAULT_CONTEXT_COMPACTION_POLICY, UserContextConfigSchema, init_config as init_config$2 } from "../user-context/config.js";
 import { init_public_url, validatePublicUrl } from "./public-url.js";
 import { PlatformConfigSchema, init_contracts } from "../platform/contracts.js";
 import { deepseekSearchEndpoint, init_deepseek_protocol } from "../agent/tools/search/providers/deepseek-protocol.js";
-import { TelegramAccountConfigSchema, TelegramConfigSchema, TelegramGroupConfigSchema, TelegramTopicConfigSchema, init_config_schema } from "../../extensions/telegram/src/config-schema.js";
 import { WeixinAccountConfigSchema, WeixinConfigSchema, init_config_schema as init_config_schema$1 } from "../../extensions/weixin/src/config-schema.js";
 import { z } from "zod";
 import semver from "semver";
@@ -53,12 +53,12 @@ function parseModelRef(ref) {
 var AgentModelRefSchema, AgentImageGenerationModelSchema, AgentModelsSchema, BrowserDriverSchema, BrowserHostnameSchema, BrowserConfigSchema, SessionDmScopeSchema, SessionStorageConfigSchema, SessionResetModeSchema, SessionResetConfigSchema, SessionResetByTypeSchema, SessionScopeSchema, SessionConfigSchema, ChannelsConfigSchema, SearchProviderEntrySchema, WebSearchConfigSchema, WebsiteBlocklistSchema, WebToolsConfigSchema, ToolsConfigSchema, RuntimePreferenceSchema, RuntimeProvisionSchema, RuntimeVersionRequestSchema, LanguageRuntimeSchema, DEFAULT_RUNTIME_TOOLS_CONFIG, RuntimeToolsConfigSchema, GatewayAuthRateLimitSchema, GatewaySecuritySchema, GatewayTrustedProxySchema, GatewayAuthSchema, GatewayTailscaleConsentSchema, GatewayTailscaleSchema, GatewayRemoteSchema, GatewayTlsSchema, GatewayModeSchema, GatewayChannelConnectDeferModeSchema, TunnelConsentSchema, TunnelBrokerUrlSchema, TunnelConfigSchema, WorkspaceImportConfigSchema, WorkspaceConfigSchema, GatewayBindModeSchema, GatewayWebchatConfigSchema, GatewayConfigSchema, ModelsDevConfigSchema, ModelCatalogConfigSchema, SttProviderConfigCatchallSchema, STTProviderConfigSchema, STTFallbackConfigSchema, MediaUnderstandingCapabilitiesSchema, MediaUnderstandingModelSchema, STTConfigSchema, TtsProviderConfigCatchallSchema, TTSProviderConfigSchema, TTSFallbackConfigSchema, TTSModelOverridesConfigSchema, TTSEdgeConfigSchema, TTSSummarizationConfigSchema, TTSConfigSchema, VoiceRefinementConfigSchema, VoiceConfigSchema, MessagesConfigSchema, ToolsMediaAudioConfigSchema, ToolsMediaConfigSchema, ProviderAzureConfigSchema, ProviderRequestOverridesSchema, ProviderAuthConfigSchema, ProvidersConfigSchema, ExtensionSecurityConfigSchema, ExtensionSlotsConfigSchema, ExtensionsConfigSchema, UpdateAutoConfigSchema, UpdateConfigSchema, CommandsConfigSchema, McpHttpUrlSchema, ConnectorSecretReferenceSchema, McpConfigScalarSchema, McpExposureSchema, McpOAuthConfigSchema, McpServerSchema, McpConfigSchema, ConnectorsConfigSchema, ExperimentalConfigSchema, ConfigSchema;
 var init_schema = __esmMin((() => {
 	init_model_usage();
-	init_config$1();
+	init_config();
 	init_outbound_proxy();
-	init_config$2();
+	init_config$1();
 	init_agent_config();
 	init_repository();
-	init_config();
+	init_config$2();
 	init_public_url();
 	init_contracts();
 	init_deepseek_protocol();

package/dist/src/config/workspace-path.js

@@ -1,6 +1,6 @@
 import { __esmMin } from "../../_virtual/_rolldown/runtime.js";
-import { homedir } from "node:os";
 import { parse, resolve } from "node:path";
+import { homedir } from "node:os";
 //#region src/config/workspace-path.ts
 /** Expand leading `~` to the user home directory. */
 function expandWorkspacePathString(raw) {

package/dist/src/connectors/connected-source-ingestion.js

@@ -2,10 +2,10 @@ import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
 import { getConnectorInstallation, listConnectorConnections } from "../storage/sqlite/connector-repository.js";
 import { init_sqlite } from "../storage/sqlite/index.js";
+import { getWorkspacePath } from "../config/workspace-path-helpers.js";
 import { getActiveUnderstandingConsent, grantUnderstandingConsent } from "../user-context/sources/consent-repository.js";
 import { listUnderstandingSourceGrants, upsertUnderstandingSourceGrant } from "../user-context/sources/repository.js";
 import { ConnectedKnowledgePipeline } from "../knowledge/connected-knowledge-pipeline.js";
-import { getWorkspacePath } from "../config/workspace-path-helpers.js";
 import { canAccessConnectorAccount, currentAccountConnections } from "./account-access.js";
 import { ComposioSessionsAdapter } from "./composio-sessions.js";
 import { decodeConnectedSourceCursor, encodeConnectedSourceCursor } from "./connected-source-cursor.js";

package/dist/src/connectors/content-enrichment.js

@@ -4,8 +4,8 @@ import { init_sqlite } from "../storage/sqlite/index.js";
 import { ConnectedKnowledgePipeline } from "../knowledge/connected-knowledge-pipeline.js";
 import { ComposioSessionsAdapter } from "./composio-sessions.js";
 import { sanitizeConnectedSourceValue } from "./connected-source-sanitization.js";
-import { tmpdir } from "node:os";
 import { isAbsolute, join, relative, sep } from "node:path";
+import { tmpdir } from "node:os";
 import { createHash } from "node:crypto";
 import { mkdtemp, readFile, realpath, rm } from "node:fs/promises";
 //#region src/connectors/content-enrichment.ts

package/dist/src/daemon/constants.js

@@ -1,6 +1,6 @@
 import { __esmMin } from "../../_virtual/_rolldown/runtime.js";
-import os from "node:os";
 import path from "node:path";
+import os from "node:os";
 //#region src/daemon/constants.ts
 /**
 * Daemon Constants - Service labels, paths, and configuration values

package/dist/src/daemon/install-plan.js

@@ -2,8 +2,8 @@ import { PACKAGE_VERSION, init_package_version } from "../package-version.js";
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
 import { SERVICE_VERSION_ENV_KEY, formatGatewayServiceDescription, init_constants } from "./constants.js";
-import { homedir } from "node:os";
 import path from "node:path";
+import { homedir } from "node:os";
 import { existsSync } from "node:fs";
 import { fileURLToPath } from "node:url";
 //#region src/daemon/install-plan.ts

package/dist/src/daemon/launchd.js

@@ -1,8 +1,8 @@
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
 import { init_constants, resolveGatewayLaunchAgentLabel, resolveLaunchAgentPlistPath as resolveLaunchAgentPlistPath$1 } from "./constants.js";
-import os from "node:os";
 import path from "node:path";
+import os from "node:os";
 import { existsSync } from "node:fs";
 import { spawn, spawnSync } from "node:child_process";
 import { mkdir, readFile, rm, writeFile } from "node:fs/promises";

package/dist/src/daemon/schtasks.js

@@ -1,8 +1,8 @@
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
 import { init_constants, resolveGatewayWindowsTaskName } from "./constants.js";
-import os from "node:os";
 import path from "node:path";
+import os from "node:os";
 import { mkdirSync, readFileSync, rmSync, writeFileSync } from "node:fs";
 import { spawn, spawnSync } from "node:child_process";
 //#region src/daemon/schtasks.ts

package/dist/src/daemon/systemd.js

@@ -1,8 +1,8 @@
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
 import { init_constants, resolveGatewaySystemdServiceName, resolveSystemdUnitPath } from "./constants.js";
-import os from "node:os";
 import path from "node:path";
+import os from "node:os";
 import { existsSync } from "node:fs";
 import { spawn, spawnSync } from "node:child_process";
 import { access, constants as constants$1, mkdir, readFile, rm, writeFile } from "node:fs/promises";

package/dist/src/discussions/action-tasks.js

@@ -1,6 +1,6 @@
-import { getSqliteDatabase, init_transaction, runSqliteWriteTransaction } from "../storage/sqlite/transaction.js";
 import { TaskCreateRequestSchema } from "../../packages/gateway-contract/src/tasks.js";
 import { init_src } from "../../packages/gateway-contract/src/index.js";
+import { getSqliteDatabase, init_transaction, runSqliteWriteTransaction } from "../storage/sqlite/transaction.js";
 import { TaskRepository, init_task_repository } from "../tasks/task-repository.js";
 import { TaskApplicationService } from "../tasks/task-application-service.js";
 import { DiscussionServiceError } from "./errors.js";

package/dist/src/discussions/live-worker.js

@@ -1,9 +1,9 @@
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
-import { ObjectLinkService } from "../activity/service.js";
 import { init_model_usage, withModelUsageOrigin } from "../providers/model-usage.js";
-import { transcribe } from "../voice/stt/transcribe-core.js";
 import { isSTTAvailable } from "../voice/stt/availability.js";
+import { ObjectLinkService } from "../activity/service.js";
+import { transcribe } from "../voice/stt/transcribe-core.js";
 import { mergeSttConfigFromAppConfig } from "../voice/stt/config.js";
 import "../voice/stt/index.js";
 import { claimNextDiscussionTranscriptSegment, completeDiscussionTranscriptSegment, getDiscussionCapture, listDiscussionTranscriptSegments, retryOrFailDiscussionTranscriptSegment, updateDiscussionCapture } from "./repository.js";

package/dist/src/discussions/recording.js

@@ -1,6 +1,6 @@
-import { getSqliteDatabase, init_transaction, runSqliteWriteTransaction } from "../storage/sqlite/transaction.js";
 import { DISCUSSION_MAX_SAVED_DURATION_MS } from "../../packages/gateway-contract/src/discussions.js";
 import { init_src } from "../../packages/gateway-contract/src/index.js";
+import { getSqliteDatabase, init_transaction, runSqliteWriteTransaction } from "../storage/sqlite/transaction.js";
 import { resolveNoteMediaDir } from "../notes/paths.js";
 import { DiscussionServiceError } from "./errors.js";
 import { getDiscussionCapture, updateDiscussionCapture } from "./repository.js";

package/dist/src/discussions/repository.js

@@ -1,5 +1,5 @@
-import { getSqliteDatabase, init_transaction, runSqliteWriteTransaction } from "../storage/sqlite/transaction.js";
 import { DISCUSSION_STATUSES } from "../../packages/gateway-contract/src/discussions.js";
+import { getSqliteDatabase, init_transaction, runSqliteWriteTransaction } from "../storage/sqlite/transaction.js";
 import { randomUUID } from "node:crypto";
 //#region src/discussions/repository.ts
 init_transaction();

package/dist/src/discussions/sealer.js

@@ -1,11 +1,11 @@
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
-import { init_transaction, runSqliteWriteTransaction } from "../storage/sqlite/transaction.js";
 import { DISCUSSION_MAX_SAVED_DURATION_MS } from "../../packages/gateway-contract/src/discussions.js";
 import { init_src } from "../../packages/gateway-contract/src/index.js";
+import { init_transaction, runSqliteWriteTransaction } from "../storage/sqlite/transaction.js";
 import { init_model_usage, withModelUsageOrigin } from "../providers/model-usage.js";
-import { transcribe } from "../voice/stt/transcribe-core.js";
 import { isSTTAvailable } from "../voice/stt/availability.js";
+import { transcribe } from "../voice/stt/transcribe-core.js";
 import { mergeSttConfigFromAppConfig } from "../voice/stt/config.js";
 import "../voice/stt/index.js";
 import { listDiscussionTranscriptSegments, updateDiscussionCapture } from "./repository.js";

package/dist/src/discussions/service.js

@@ -1,8 +1,8 @@
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
-import { init_transaction, runSqliteWriteTransaction } from "../storage/sqlite/transaction.js";
 import { DISCUSSION_AUDIO_MAX_BYTES, DISCUSSION_MAX_DURATION_MS, DISCUSSION_SEGMENT_MAX_BYTES } from "../../packages/gateway-contract/src/discussions.js";
 import { init_src } from "../../packages/gateway-contract/src/index.js";
+import { init_transaction, runSqliteWriteTransaction } from "../storage/sqlite/transaction.js";
 import { ObjectLinkService } from "../activity/service.js";
 import { DiscussionServiceError } from "./errors.js";
 import { acknowledgeDiscussionCaptureConsent, correctDiscussionTranscriptSegment, createDiscussionCapture, createDiscussionTranscriptSegment, deleteDiscussionSegmentAudio, getDiscussionCapture, getDiscussionCaptureByClientRequestId, getDiscussionCaptureByNoteId, getDiscussionCaptureSettings, getDiscussionMetrics, getDiscussionTranscriptSegment, getLatestDiscussionOrganization, listDiscussionCaptures, listDiscussionTranscriptSegments, updateDiscussionCapture } from "./repository.js";

package/dist/src/execution-environments/worktree-safety.js

@@ -1,7 +1,7 @@
 import { listGitWorktrees } from "./git.js";
 import { resolveExecutionWorktreesRoot } from "./paths.js";
-import { homedir } from "node:os";
 import { isAbsolute, relative, resolve, sep } from "node:path";
+import { homedir } from "node:os";
 import { lstat } from "node:fs/promises";
 //#region src/execution-environments/worktree-safety.ts
 function isInside(parent, candidate) {

package/dist/src/extensions/activation-context.js

@@ -1,7 +1,7 @@
-import { getAgentDefaultModelRef, init_schema } from "../config/schema.js";
 import { PROVIDER_ENV_MAP, init_env_keys } from "../providers/env-keys.js";
-import { init_providers, isProviderConfiguredSync } from "../providers/index.js";
 import { collectSttProviderConfigEntries } from "../voice/stt/config-slice.js";
+import { getAgentDefaultModelRef, init_schema } from "../config/schema.js";
+import { init_providers, isProviderConfiguredSync } from "../providers/index.js";
 import { mergeSttConfigFromAppConfig } from "../voice/stt/config.js";
 import "../voice/stt/index.js";
 import { collectTtsProviderConfigEntries } from "../voice/tts/config-slice.js";

package/dist/src/extensions/agent-plugins/auth.js

@@ -1,8 +1,8 @@
 import { init_paths_state, resolveStateDir } from "../../config/paths-state.js";
 import { init_write_file_atomic, writeTextAtomic, writeTextAtomicSync } from "../../infra/write-file-atomic.js";
 import { CredentialResolver, init_credentials } from "../../auth/credentials.js";
-import { isDangerousHostEnvVarName } from "../../infra/host-env-security.js";
 import { pluginName } from "./validation.js";
+import { isDangerousHostEnvVarName } from "../../infra/host-env-security.js";
 import { join } from "node:path";
 import { existsSync, readFileSync } from "node:fs";
 import { createHash } from "node:crypto";

package/dist/src/extensions/agent-plugins/capability-access.d.ts

@@ -0,0 +1,23 @@
+import type { AgentPluginStore, InstalledAgentPlugin } from './store.js';
+export declare function pluginCapabilityAccess(manifest: InstalledAgentPlugin['manifest']): {
+    skills: Record<string, {
+        authorizations: (string | {
+            id: string;
+            scopes: string[];
+        })[];
+        servers: string[];
+    }>;
+    mcp: Record<string, {
+        authorizations: (string | {
+            id: string;
+            scopes: string[];
+        })[];
+        servers: string[];
+    }>;
+};
+/** One fail-closed access decision shared by Skill discovery and MCP projection. */
+export declare function resolvePluginCapabilityAccess(plugin: InstalledAgentPlugin, store: AgentPluginStore, now?: number): {
+    skill: (_name: string) => boolean;
+    server: (_name: string) => boolean;
+};
+export declare function pluginRuntimeAccessKey(store: AgentPluginStore, workspace: string, agentId?: string): string;