@xopcai/xopc 0.0.400 → 0.0.401

package/dist/src/agent/embedded/codemode-output.js

@@ -1,5 +1,5 @@
-import { tmpdir } from "node:os";
 import { basename, dirname, join, relative, sep } from "node:path";
+import { tmpdir } from "node:os";
 import { constants } from "node:fs";
 import { randomUUID } from "node:crypto";
 import { mkdir, open, realpath, writeFile } from "node:fs/promises";

package/dist/src/agent/embedded/external-tool-discovery.js

@@ -1,5 +1,5 @@
-import { setXopcToolMetadata } from "./tool-metadata.js";
 import { getEmbeddedExecutionRunId, runWithEmbeddedExecutionSession } from "./execution-context.js";
+import { setXopcToolMetadata } from "./tool-metadata.js";
 import { parseExternalToolRef } from "../external-tools/refs.js";
 import { wrapToolsWithProtection } from "../tools/executor.js";
 import { getExternalToolRegistry } from "../external-tools/tool-registry.js";

package/dist/src/agent/embedded/model-runtime.js

@@ -2,9 +2,9 @@ import { init_paths, resolveModelsJsonPath } from "../../config/paths.js";
 import { assertCurrentModelProvider, init_provider_policy } from "../../providers/provider-policy.js";
 import { init_register_bundled_oauth_flows, registerBundledOAuthFlows } from "../../providers/register-bundled-oauth-flows.js";
 import { CredentialResolver, init_credentials } from "../../auth/credentials.js";
-import { init_sync_provider_auth, resolveProviderApiKeySync } from "../../auth/sync-provider-auth.js";
 import { XopcModelCredentialStore, init_model_credential_store } from "../../auth/model-credential-store.js";
 import { init_register_runtime_providers, registerRuntimeProviders } from "../../providers/register-runtime-providers.js";
+import { init_sync_provider_auth, resolveProviderApiKeySync } from "../../auth/sync-provider-auth.js";
 import { getApiKeySync, init_providers } from "../../providers/index.js";
 import { InMemoryModelsStore } from "@earendil-works/pi-ai";
 import { ModelRuntime } from "@earendil-works/pi-coding-agent";

package/dist/src/agent/embedded/run-for-session.js

@@ -3,14 +3,14 @@ import { init_logger } from "../../utils/logger.js";
 import { parseTurnOutcome } from "../../../packages/gateway-contract/src/turn-outcome.js";
 import { init_src } from "../../../packages/gateway-contract/src/index.js";
 import { assertProviderUsage, getModelUsageOrigin, init_model_usage, isProviderUsageScopeError } from "../../providers/model-usage.js";
+import { runWithEmbeddedExecutionSession } from "./execution-context.js";
+import { setTraceIdentity, startObservation, traceOperation, traceRun } from "../../observability/runtime.js";
 import { resolveEffectiveAgentProfileForSession } from "../../config/agent-profile.js";
 import { init_providers, resolveModel } from "../../providers/index.js";
 import { appendDynamicPromptSection } from "../prompt/cache-boundary.js";
-import { setTraceIdentity, startObservation, traceOperation, traceRun } from "../../observability/runtime.js";
 import { resolveAgentTurnTimeoutMs } from "../orchestration/run-agent-turn-with-timeout.js";
 import { isPersonalConversation } from "../../personal-agent/repository.js";
 import { filterExecutionTools, resolveExecutionToolPolicy } from "./execution-tool-policy.js";
-import { runWithEmbeddedExecutionSession } from "./execution-context.js";
 import { resolvePromptCachePolicy } from "../../providers/prompt-cache-plan.js";
 import { prepareNativeMcpConfig } from "../mcp/native-mcp.js";
 import { evaluateContextBudget } from "../memory/context-budget.js";
@@ -18,6 +18,7 @@ import { assessContext, recoverContext as recoverContext$1 } from "../memory/con
 import { resolveCompactionPolicy } from "../memory/compaction-policy.js";
 import { runXopcEmbeddedTurn } from "./run-turn.js";
 import { projectTurnOutcome } from "../../session/turn-outcome-projector.js";
+import { refreshPluginRuntimeAccess } from "../../extensions/agent-plugins/refresh-runtime-access.js";
 import { connectionObjectiveContext } from "../context/connection-objective-context.js";
 import { voicePresentationPrompt } from "../prompt/voice-presentation.js";
 import { applyStartupContextToUserMessage } from "../reply/apply-turn-user-enrichment.js";
@@ -112,6 +113,11 @@ async function runEmbeddedTurnForSessionInner(params) {
 			ok: false,
 			errorMessage: "aborted"
 		});
+		if (config && await refreshPluginRuntimeAccess(config, agentManager.getResolvedWorkspaceForSession(conversationId), resolveEffectiveAgentProfileForSession(conversationId).agentId)) agentManager.removeAgent(conversationId);
+		if (supervisor.signal.aborted) return await finish({
+			ok: false,
+			errorMessage: "aborted"
+		});
 		const agent = agentManager.getOrCreateAgent(conversationId);
 		const mm = modelManager;
 		const configuredModelRef = String(mm.getModelForSession(conversationId));

package/dist/src/agent/embedded/run-turn.js

@@ -7,10 +7,11 @@ import { getSessionMetadata } from "../../storage/sqlite/session-read-repository
 import { init_session_repository } from "../../storage/sqlite/session-repository.js";
 import { init_sqlite } from "../../storage/sqlite/index.js";
 import { ProviderUsageScopeError, init_model_usage } from "../../providers/model-usage.js";
-import { resolveEffectiveAgentConfigForSession } from "../../config/agent-profile.js";
+import { runWithEmbeddedExecutionSession } from "./execution-context.js";
 import { setTraceIdentity, traceOperation, traceRun, traceTools } from "../../observability/runtime.js";
 import { continuesAfterTool, trackAiUsageStream } from "../../usage/recorder.js";
 import { cloudCreditBudgetStopMessage, isCloudCreditBudgetExhausted, reportCloudCreditError, withCloudCreditBudget } from "../../providers/xopc-cloud-credit-budget.js";
+import { resolveEffectiveAgentConfigForSession } from "../../config/agent-profile.js";
 import { resolveAgentAbortReason } from "../orchestration/run-termination.js";
 import { isAgentTurnTimeoutError, isAgentTurnUnsettledError, resolveAgentTurnTimeoutMs, runAgentTurnWithTimeout } from "../orchestration/run-agent-turn-with-timeout.js";
 import { isContextOverflowError } from "../orchestration/context-overflow.js";
@@ -18,7 +19,6 @@ import { ACCEPTANCE_REPAIR_READ_TOOLS, canResumeAfterModelFailure, completedReco
 import { getAssistantTurnErrorMessage, isAssistantTurnAborted, isAssistantTurnFailed, maybeRetryTurnAfterTransientLlmFailure, stripTrailingErrorAssistantMessages } from "../orchestration/llm-turn-retry.js";
 import { allowsExecutionTool, filterExecutionTools, resolveExecutionToolPolicy } from "./execution-tool-policy.js";
 import { externalPolicyContext, getXopcToolMetadata } from "./tool-metadata.js";
-import { runWithEmbeddedExecutionSession } from "./execution-context.js";
 import { isNestedCodemodePolicy } from "./codemode-extension.js";
 import { isComputerControlActive, isComputerLeaseTool, stopComputerControl } from "../../computer/control-guard.js";
 import { EmbeddedRunConflictError, abortEmbeddedRun, acquireEmbeddedRunLease, queueEmbeddedSteer } from "./runs.js";

package/dist/src/agent/embedded/xopc-stream-bridge.js

@@ -1,9 +1,9 @@
-import { assertProviderUsage, init_model_usage } from "../../providers/model-usage.js";
 import "../../providers/constants.js";
-import { init_providers } from "../../providers/index.js";
-import { createExtensionAwareStreamFn } from "../../providers/extension-stream-bridge.js";
+import { assertProviderUsage, init_model_usage } from "../../providers/model-usage.js";
 import { withCloudUsageResponse } from "../../usage/cloud-receipts.js";
 import { assertCloudCreditBudgetActive, cloudCreditBudgetHeaders, hasCloudCreditBudget, reportCloudCreditError } from "../../providers/xopc-cloud-credit-budget.js";
+import { init_providers } from "../../providers/index.js";
+import { createExtensionAwareStreamFn } from "../../providers/extension-stream-bridge.js";
 import { preparePromptCacheContext, withPromptCachePayloadTransform } from "../../providers/prompt-cache-payload.js";
 import { getCurrentSystemPrompt, getCurrentTools, normalizeContext } from "@earendil-works/pi-ai";
 //#region src/agent/embedded/xopc-stream-bridge.ts

package/dist/src/agent/external-tools/cliProvider.js

@@ -5,11 +5,11 @@ import { getConnectorAccount, init_connector_account_repository } from "../../st
 import { appendConnectorExecutionAudit, consumeConnectorApproval, createConnectorApproval, getConnectorApproval, getConnectorConnection, getConnectorInstallation, init_connector_repository } from "../../storage/sqlite/connector-repository.js";
 import { connectorObjectiveScope, init_connection_wait_repository, publishConnectionWait, requireSessionConnection } from "../../storage/sqlite/connection-wait-repository.js";
 import { init_sqlite } from "../../storage/sqlite/index.js";
+import { connectorArgumentsHash, connectorArgumentsPreview } from "../../connectors/approval.js";
+import { connectorPrincipalForSession } from "../../connectors/principal.js";
 import { CapabilityError } from "../../capabilities/runtime/errors.js";
 import { ExternalEffectNotAppliedError, executeExternalOperation } from "../../capabilities/runtime/external-operations.js";
 import "../../capabilities/runtime/dispatcher.js";
-import { connectorArgumentsHash, connectorArgumentsPreview } from "../../connectors/approval.js";
-import { connectorPrincipalForSession } from "../../connectors/principal.js";
 import { selectConnectorAccount } from "../../connectors/account-selection.js";
 import { cliContextPath } from "../../connectors/cli/process.js";
 import { validateActionInput } from "../../connectors/cli/protocol.js";

package/dist/src/agent/external-tools/composio-provider.js

@@ -5,11 +5,11 @@ import { getConnectorAccount } from "../../storage/sqlite/connector-account-repo
 import { consumeConnectorApproval, createConnectorApproval, getConnectorApproval, getConnectorConnection, getConnectorInstallation, listConnectorActionMetadata, listConnectorConnections, listConnectorInstallations, upsertConnectorActionMetadata, upsertConnectorInstallation } from "../../storage/sqlite/connector-repository.js";
 import { bindObjectiveAccount, connectionBinding, connectionBindings, connectorObjectiveScope, init_connection_wait_repository, publishConnectionWait, requireSessionConnection } from "../../storage/sqlite/connection-wait-repository.js";
 import { init_sqlite } from "../../storage/sqlite/index.js";
-import { CapabilityError } from "../../capabilities/runtime/errors.js";
-import { ExternalEffectNotAppliedError, executeExternalOperation } from "../../capabilities/runtime/external-operations.js";
 import { connectorArgumentsHash, connectorArgumentsPreview } from "../../connectors/approval.js";
 import { canAccessConnectorAccount, currentAccountConnections } from "../../connectors/account-access.js";
 import { connectorPrincipalForSession } from "../../connectors/principal.js";
+import { CapabilityError } from "../../capabilities/runtime/errors.js";
+import { ExternalEffectNotAppliedError, executeExternalOperation } from "../../capabilities/runtime/external-operations.js";
 import { connectorIdentitySummary } from "../../connectors/connector-identity.js";
 import { evaluateConnectorExecutionPolicy } from "../../connectors/policy.js";
 import { ComposioSessionsAdapter } from "../../connectors/composio-sessions.js";

package/dist/src/agent/external-tools/endpoint-provider.js

@@ -1,7 +1,7 @@
-import { ExternalEffectNotAppliedError, executeExternalOperation } from "../../capabilities/runtime/external-operations.js";
-import { canonicalCapabilityJson } from "../../capabilities/runtime/dispatcher.js";
 import { init_src } from "../../../packages/computer-control-contract/src/index.js";
 import "../../../packages/browser-control-contract/src/index.js";
+import { ExternalEffectNotAppliedError, executeExternalOperation } from "../../capabilities/runtime/external-operations.js";
+import { canonicalCapabilityJson } from "../../capabilities/runtime/dispatcher.js";
 import { externalToolRef, parseExternalToolRef } from "./refs.js";
 import { extractDocumentText } from "../../document-understanding/extract.js";
 import { prepareImageForModel } from "../image/prepare-image-for-model.js";

package/dist/src/agent/external-tools/index.js

@@ -1,5 +1,5 @@
-import { resolveEffectiveAgentConfigForAgent, resolveEffectiveAgentConfigForSession } from "../../config/agent-profile.js";
 import { getEmbeddedExecutionSession } from "../embedded/execution-context.js";
+import { resolveEffectiveAgentConfigForAgent, resolveEffectiveAgentConfigForSession } from "../../config/agent-profile.js";
 import { parseExternalToolRef } from "./refs.js";
 import { CliToolProvider } from "./cliProvider.js";
 import { ComposioToolProvider } from "./composio-provider.js";

package/dist/src/agent/image/generation/openai-images-provider.js

@@ -1,11 +1,11 @@
 import { createLogger } from "../../../utils/logger/index.js";
 import { init_logger } from "../../../utils/logger.js";
-import { imageFileExtensionForMimeType } from "./image-assets.js";
 import { pickTimeoutMsOrFallback } from "../../../media-shared/http/deadline.js";
 import { privateNetworkPolicyToSsrfGuardOptions } from "../../../media-shared/http/private-network.js";
 import { resolveProviderHttpRequestConfig } from "../../../media-shared/http/resolve-provider-http-request-config.js";
 import { postJsonRequest, postMultipartRequest, readJsonResponseLimited } from "../../../media-shared/http/provider-http.js";
 import "../../../media-shared/http/index.js";
+import { imageFileExtensionForMimeType } from "./image-assets.js";
 import { ImageProviderError, validateImageRequest } from "../../../../packages/image-providers/src/validation.js";
 import { decodeBase64, imageFromBytes } from "../../../../packages/image-providers/src/http.js";
 import "../../../../packages/image-providers/src/index.js";

package/dist/src/agent/image/generation/providers/xopc-cloud.js

@@ -1,10 +1,10 @@
 import { getModelCatalogStore, init_model_catalog_store } from "../../../../providers/model-catalog-store.js";
+import { compareCatalogModels } from "../../../../providers/model-catalog-ranking.js";
 import { init_xopc_cloud_config, resolveXopcModelRouterUrl } from "../../../../providers/xopc-cloud-config.js";
 import { getProviderAuthService, init_provider_auth_service } from "../../../../providers/provider-auth-service.js";
 import { captureCloudUsageResponse } from "../../../../usage/cloud-receipts.js";
-import { cloudCreditBudgetHeaders, reportCloudCreditError } from "../../../../providers/xopc-cloud-credit-budget.js";
-import { compareCatalogModels } from "../../../../providers/model-catalog-ranking.js";
 import { trackCloudCapabilityUsage } from "../../../../usage/cloud-capability.js";
+import { cloudCreditBudgetHeaders, reportCloudCreditError } from "../../../../providers/xopc-cloud-credit-budget.js";
 import { createOpenAiImagesProvider } from "../openai-images-provider.js";
 //#region src/agent/image/generation/providers/xopc-cloud.ts
 init_model_catalog_store();

package/dist/src/agent/image/load-image-media.js

@@ -1,7 +1,7 @@
 import { checkFileSafety } from "../prompt/safety.js";
 import { decodeDataUrl } from "./image-helpers.js";
-import { homedir } from "node:os";
 import path from "node:path";
+import { homedir } from "node:os";
 import { promises } from "node:fs";
 //#region src/agent/image/load-image-media.ts
 function expandUser(p) {

package/dist/src/agent/image/tool-model-config.js

@@ -1,6 +1,6 @@
 import { init_agent_scope, resolveDefaultAgentId } from "../agent-scope.js";
-import { resolveEffectiveAgentConfigForAgent } from "../../config/agent-profile.js";
 import { getAgentDefaultImageModelConfig, getAgentDefaultModelRef, init_schema, parseModelRef } from "../../config/schema.js";
+import { resolveEffectiveAgentConfigForAgent } from "../../config/agent-profile.js";
 import { getDefaultModelSync, getModelsByProvider, init_providers, isProviderConfiguredSync, resolveModel } from "../../providers/index.js";
 import { resolveAgentModelFallbackValues, resolveAgentModelPrimaryValue } from "../../config/model-input.js";
 import { buildCapabilityPlansForConfig } from "../../capabilities/readiness/from-config.js";

package/dist/src/agent/independent-execution.js

@@ -1,5 +1,5 @@
-import { withoutCloudCreditBudget } from "../providers/xopc-cloud-credit-budget.js";
 import { withoutEmbeddedExecutionSession } from "./embedded/execution-context.js";
+import { withoutCloudCreditBudget } from "../providers/xopc-cloud-credit-budget.js";
 import { withoutDataToolPermissions } from "./tools/dataBatch.js";
 import { withoutSearchCache } from "./tools/search/cache.js";
 import { withoutDelegationScope } from "./orchestration/delegation-scope.js";

package/dist/src/agent/mcp/connection-drafts.js

@@ -1,5 +1,5 @@
-import { McpServerSchema, init_schema } from "../../config/schema.js";
 import { getWorkspacePath } from "../../config/workspace-path-helpers.js";
+import { McpServerSchema, init_schema } from "../../config/schema.js";
 import { isManagedConnectorServer } from "../../connectors/materialize.js";
 import { createNativeMcpCredentials } from "./credential-store.js";
 import { loadMergedMcpConfig } from "./config.js";

package/dist/src/agent/mcp/credential-store-modules.d.ts

@@ -0,0 +1,5 @@
+/** pi 1.1 exposes credential injection but keeps its store constructors internal. */
+export declare function loadNativeMcpCredentialModules(): Promise<{
+    McpOAuthCredentialStore: any;
+    InMemoryAuthStorageBackend: any;
+}>;

package/dist/src/agent/mcp/credential-store-modules.js

@@ -0,0 +1,13 @@
+//#region src/agent/mcp/credential-store-modules.ts
+/** pi 1.1 exposes credential injection but keeps its store constructors internal. */
+async function loadNativeMcpCredentialModules() {
+	const root = import.meta.resolve("@earendil-works/pi-coding-agent");
+	const { McpOAuthCredentialStore } = await import(new URL("./extensions/mcp/oauth.js", root).href);
+	const { InMemoryAuthStorageBackend } = await import(new URL("./core/auth-storage.js", root).href);
+	return {
+		McpOAuthCredentialStore,
+		InMemoryAuthStorageBackend
+	};
+}
+//#endregion
+export { loadNativeMcpCredentialModules };

package/dist/src/agent/mcp/credential-store.js

@@ -1,10 +1,9 @@
+import { loadNativeMcpCredentialModules } from "./credential-store-modules.js";
 //#region src/agent/mcp/credential-store.ts
 /** Use pi's own stores; never change PI_CODING_AGENT_DIR for an individual connection. */
 async function createNativeMcpCredentials(memory = false) {
-	const root = import.meta.resolve("@earendil-works/pi-coding-agent");
-	const { McpOAuthCredentialStore } = await import(new URL("./extensions/mcp/oauth.js", root).href);
+	const { McpOAuthCredentialStore, InMemoryAuthStorageBackend } = await loadNativeMcpCredentialModules();
 	if (!memory) return new McpOAuthCredentialStore();
-	const { InMemoryAuthStorageBackend } = await import(new URL("./core/auth-storage.js", root).href);
 	return new McpOAuthCredentialStore(new InMemoryAuthStorageBackend());
 }
 /** Credential identity may change on commit without changing the public tool namespace. */

package/dist/src/agent/sandbox/path-policy.js

@@ -1,5 +1,5 @@
-import { homedir } from "node:os";
 import { isAbsolute, normalize, posix, resolve, sep } from "node:path";
+import { homedir } from "node:os";
 import { lstatSync, realpathSync } from "node:fs";
 //#region src/agent/sandbox/path-policy.ts
 /**

package/dist/src/agent/service/direct-turn-helpers.js

@@ -1,11 +1,11 @@
 import { getClarificationResumeInput, init_clarification_wait_repository } from "../../storage/sqlite/clarification-wait-repository.js";
 import { getConnectionResumeInput, init_connection_wait_repository } from "../../storage/sqlite/connection-wait-repository.js";
+import { parseSlashCommand } from "../../chat-commands/command-parse.js";
 import { isPersonalConversation } from "../../personal-agent/repository.js";
 import { resolveImageHandlingStrategy } from "../image/vision-detection.js";
 import { hydrateUserTurnForLlm } from "../inbound/attachment-pipeline.js";
 import { buildDelegatedTaskDirective, buildTaskExecutionDirective } from "../../tasks/task-context-assembler.js";
 import { shouldSkipResetOverlapCommand } from "../../session/reset-triggers.js";
-import { parseSlashCommand } from "../../chat-commands/command-parse.js";
 import { personalCommandRejection } from "../../chat-commands/personal-command-policy.js";
 import { commandRegistry } from "../../chat-commands/registry.js";
 import "../../chat-commands/index.js";

package/dist/src/agent/service.js

@@ -2,20 +2,20 @@ import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
 import { init_attachment_ref, parseNoteAttachmentTarget } from "../notes/attachment-ref.js";
 import { init_agent_scope, resolveAgentHomeDir, resolveDefaultAgentId } from "./agent-scope.js";
-import { extractTextContent } from "./context/workspace.js";
 import { init_agent_session_key, resolveAgentIdFromConversationId } from "../routing/agent-session-key.js";
-import { extractProfileAgentId, resolveEffectiveAgentConfigForSession } from "../config/agent-profile.js";
+import { runWithEmbeddedExecutionSession } from "./embedded/execution-context.js";
+import { configureTracing, flushTracing } from "../observability/runtime.js";
 import { getAgentDefaultModelRef, init_schema } from "../config/schema.js";
+import { extractProfileAgentId, resolveEffectiveAgentConfigForSession } from "../config/agent-profile.js";
 import { init_providers, resolveModel } from "../providers/index.js";
-import { configureTracing, flushTracing } from "../observability/runtime.js";
 import { getUserTimezone } from "../user-model/repository.js";
+import { extractTextContent } from "./context/workspace.js";
 import { resolveAgentTurnTimeoutMs } from "./orchestration/run-agent-turn-with-timeout.js";
 import { applyConfigOverrides } from "../config/runtime-overrides.js";
 import { effectiveWorkspacePathForSession } from "../session/session-workspace.js";
 import { getProjectForSession } from "../projects/workspace.js";
 import "../user-model/index.js";
 import { onSessionTranscriptUpdate } from "../session/transcript-events.js";
-import { runWithEmbeddedExecutionSession } from "./embedded/execution-context.js";
 import { removeSkillsLockEntry } from "./skills/hub-lock.js";
 import { installSkillFromZip } from "./skills/managed-store.js";
 import { resolveWorkspaceSkillsDir, resolveWorkspaceSkillsLockPath } from "./skills/workspace-skills-dir.js";

package/dist/src/agent/skills/hub-pull.js

@@ -3,13 +3,13 @@ import { getSkillsLockEntry, recordSkillsHubInstall } from "./hub-lock.js";
 import { installSkillFromZip, isIgnorableZipEntry, isValidSkillId, prepareManagedSkillTempDir, promoteManagedSkillTempDir } from "./managed-store.js";
 import { formatScanSummary, scanSkillDirectory } from "./scanner.js";
 import { computeSkillTreeHashSync } from "./hub-hash.js";
-import { tmpdir } from "node:os";
 import { basename, dirname, join, normalize, resolve, sep } from "node:path";
+import { tmpdir } from "node:os";
 import { cpSync, existsSync, mkdirSync, mkdtempSync, readFileSync, readdirSync, rmSync, statSync, writeFileSync } from "node:fs";
 import { fileURLToPath } from "node:url";
 import { execFileSync } from "node:child_process";
-import AdmZip from "adm-zip";
 import { fetch } from "undici";
+import AdmZip from "adm-zip";
 //#region src/agent/skills/hub-pull.ts
 /**
 * CLI / hub: install or update skills from git or archive (zip / tar.gz) into ~/.xopc/skills.

package/dist/src/agent/skills/index.js

@@ -1,7 +1,7 @@
+import { parseFrontmatter } from "../../markdown/frontmatter.js";
 import { resolveStateDir } from "../../config/paths-state.js";
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
-import { parseFrontmatter } from "../../markdown/frontmatter.js";
 import { init_paths } from "../../config/paths.js";
 import { findInstallSpec, hasBinary, installSkill } from "./installer.js";
 import { applySkillEnvOverrides, createSkillConfigManager, getSkillEnvironment, isSkillEnabled, resolveSkillConfig, validateSkillConfig } from "./config.js";

package/dist/src/agent/skills/installer.js

@@ -3,11 +3,11 @@ import { init_logger } from "../../utils/logger.js";
 import { prepareSafeToolEnv } from "../sandbox/sanitize-env-vars.js";
 import { ManagedRuntimeManager } from "../../runtime-tools/manager.js";
 import { buildRuntimeEnvironment } from "../../runtime-tools/environment.js";
+import { createHash } from "node:crypto";
 import { delimiter, join } from "path";
-import { accessSync, constants, existsSync } from "fs";
+import { accessSync, constants as constants$1, existsSync } from "fs";
 import { access, mkdir, writeFile } from "fs/promises";
 import { promisify } from "util";
-import { createHash } from "node:crypto";
 import { execFile } from "child_process";
 //#region src/agent/skills/installer.ts
 /**
@@ -36,7 +36,7 @@ function hasBinary(name) {
 	for (const dir of pathEntries) for (const ext of extensions) {
 		const candidate = join(dir, `${name}${ext}`);
 		try {
-			accessSync(candidate, constants.X_OK);
+			accessSync(candidate, constants$1.X_OK);
 			return true;
 		} catch {}
 	}

package/dist/src/agent/skills/skill-manager.js

@@ -2,9 +2,9 @@ import { resolveStateDir } from "../../config/paths-state.js";
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
 import { init_paths, resolveBundledSkillsDir } from "../../config/paths.js";
+import { AgentPluginStore } from "../../extensions/agent-plugins/store.js";
 import { createSkillConfigManager, isSkillEnabled } from "./config.js";
 import { formatSkillsForPrompt, selectSkillsVisibleInPrompt } from "./format-skills-prompt.js";
-import { AgentPluginStore } from "../../extensions/agent-plugins/store.js";
 import { createSkillLoader } from "./index.js";
 //#region src/agent/skills/skill-manager.ts
 /**
@@ -157,6 +157,7 @@ var SkillManager = class {
 		return this.skillLoader.getDiagnostics();
 	}
 	getVersion() {
+		this.refreshPlugins();
 		return String(this.version);
 	}
 	getLoadedAt() {

package/dist/src/agent/skills/skill-sources.js

@@ -1,8 +1,9 @@
 import { init_paths, resolveSkillsDir } from "../../config/paths.js";
-import { resolveWorkspaceSkillsDir } from "./workspace-skills-dir.js";
+import { resolvePluginCapabilityAccess } from "../../extensions/agent-plugins/capability-access.js";
 import { AgentPluginStore } from "../../extensions/agent-plugins/store.js";
-import { homedir } from "node:os";
+import { resolveWorkspaceSkillsDir } from "./workspace-skills-dir.js";
 import { isAbsolute, join, relative, resolve } from "node:path";
+import { homedir } from "node:os";
 import { existsSync, realpathSync } from "node:fs";
 //#region src/agent/skills/skill-sources.ts
 init_paths();
@@ -48,7 +49,11 @@ function resolveSkillSources(options, skillsConfig) {
 	const extraDirs = [...configuredExtraDirs, ...optionExtraDirs];
 	const sources = [];
 	const diagnostics = [];
-	for (const plugin of new AgentPluginStore().active(options.agentId, options.workspaceDir)) {
+	const pluginStore = new AgentPluginStore();
+	for (const plugin of pluginStore.active(options.agentId, options.workspaceDir)) {
+		const access = resolvePluginCapabilityAccess(plugin, pluginStore);
+		const skills = plugin.skills.filter((skill) => access.skill(skill.name));
+		if (!skills.length) continue;
 		sources.push({
 			id: `plugin:${plugin.id}`,
 			rootDir: plugin.rootDir,
@@ -56,8 +61,8 @@ function resolveSkillSources(options, skillsConfig) {
 			scope: "global",
 			managed: false,
 			writable: false,
-			skillFiles: plugin.skills.map((skill) => skill.filePath),
-			skillAliases: plugin.layout?.dialect !== "portable" ? Object.fromEntries(plugin.skills.map((skill) => [skill.filePath, `${plugin.id}.${skill.name}`])) : void 0
+			skillFiles: skills.map((skill) => skill.filePath),
+			skillAliases: plugin.layout?.dialect !== "portable" ? Object.fromEntries(skills.map((skill) => [skill.filePath, `${plugin.id}.${skill.name}`])) : void 0
 		});
 		diagnostics.push(...plugin.diagnostics.map((diagnostic) => ({
 			type: "warning",

package/dist/src/agent/skills/test-framework.js

@@ -1,6 +1,6 @@
+import { parseFrontmatter } from "../../markdown/frontmatter.js";
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
-import { parseFrontmatter } from "../../markdown/frontmatter.js";
 import { hasBinary } from "./installer.js";
 import { parseSkillMetadata } from "./parse-skill-metadata.js";
 import { scanSkillDirectory } from "./scanner.js";

package/dist/src/agent/tasks/task-judge-service.js

@@ -2,8 +2,8 @@ import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
 import { TaskRepository, init_task_repository } from "../../tasks/task-repository.js";
 import { TaskRunRepository, init_task_run_repository } from "../../tasks/task-run-repository.js";
-import { resolveEffectiveAgentProfileForSession } from "../../config/agent-profile.js";
 import { getAgentDefaultModelRef, init_schema } from "../../config/schema.js";
+import { resolveEffectiveAgentProfileForSession } from "../../config/agent-profile.js";
 import { getApiKey, init_providers, resolveModel } from "../../providers/index.js";
 import { completeWithResolvedCredentials } from "../../providers/model-call.js";
 import { extractAssistantText, getAssistantMessageErrorReason, isTransientProviderErrorMessage, stripCodeFences } from "../../providers/model-response.js";

package/dist/src/agent/tools/executor.js

@@ -1,8 +1,8 @@
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
+import { withRetry } from "../../infra/retry.js";
 import { commandTimeout } from "../commands/command-registry.js";
 import { DEFAULT_TOOL_EXECUTION_TIMEOUT_MS, TimeoutError, executeWithTimeout } from "../lifecycle/timeout-wrapper.js";
-import { withRetry } from "../../infra/retry.js";
 import { ToolConcurrencyController, resolveToolLockMode } from "./concurrency.js";
 //#region src/agent/tools/executor.ts
 init_logger();

package/dist/src/agent/tools/factory.js

@@ -9,6 +9,7 @@ import { patchSessionMetadata } from "../../storage/sqlite/session-repository.js
 import { getSessionTaskPlan, setSessionTaskPlan } from "../../storage/sqlite/session-task-plan-repository.js";
 import { init_sqlite } from "../../storage/sqlite/index.js";
 import { init_agent_scope, resolveDefaultAgentId } from "../agent-scope.js";
+import { getEmbeddedExecutionRunId, getEmbeddedExecutionSession } from "../embedded/execution-context.js";
 import { resolveUserContextSessionAccess } from "../../user-context/access-policy.js";
 import { resolveEffectiveAgentConfigForAgent } from "../../config/agent-profile.js";
 import { PERSONAL_TOOL_DESCRIPTIONS } from "../../personal-agent/policy.js";
@@ -19,7 +20,6 @@ import { createPersonalAttentionTool } from "./personal-attention-tool.js";
 import { withCoreToolExposure } from "./toolExposure.js";
 import { markCodemodeCoreRead } from "./codemode-permissions.js";
 import "../../../packages/browser-control-contract/src/index.js";
-import { getEmbeddedExecutionRunId, getEmbeddedExecutionSession } from "../embedded/execution-context.js";
 import { wrapToolsWithProtection } from "./executor.js";
 import { createDefaultExternalToolGatewayTools } from "../external-tools/index.js";
 import { createReadFileTool } from "./read.js";

package/dist/src/agent/tools/personal-read-tool.js

@@ -1,7 +1,7 @@
-import { CapabilityDispatcher } from "../../capabilities/runtime/dispatcher.js";
+import { getEmbeddedExecutionSession } from "../embedded/execution-context.js";
 import { isPersonalConversation } from "../../personal-agent/repository.js";
 import { LOCAL_READ_MAX_CHARS } from "./local-read-budget.js";
-import { getEmbeddedExecutionSession } from "../embedded/execution-context.js";
+import { CapabilityDispatcher } from "../../capabilities/runtime/dispatcher.js";
 import { registerNoteReadCapabilities } from "../../notes/capabilities/read.js";
 import { registerProjectReadCapabilities } from "../../projects/capabilities/read.js";
 import { registerAutomationReadCapabilities } from "../../automations/capabilities/read.js";

package/dist/src/agent/tools/read.js

@@ -1,6 +1,6 @@
+import { checkFileSafety } from "../prompt/safety.js";
 import { checkedFilePath, readWorkspaceFileAsync } from "../sandbox/fileAccess.js";
 import { dataScheduler } from "../data-acquisition/scheduler.js";
-import { checkFileSafety } from "../prompt/safety.js";
 import { formatSize, truncateHead } from "./truncate.js";
 import { isBareProfileMarkdownFileName, resolvePathUnderWorkspace, resolveProfileMarkdownPathIfBareName } from "./tool-paths.js";
 import { stat } from "fs/promises";

package/dist/src/agent/tools/review-workspace.js

@@ -2,9 +2,9 @@ import { readWorkspaceRevision } from "../coding/workspace-revision.js";
 import { prepareSafeToolEnv } from "../sandbox/sanitize-env-vars.js";
 import { evaluateFilePolicy } from "../sandbox/exec-policy.js";
 import { checkedFilePath, readWorkspaceFile } from "../sandbox/fileAccess.js";
+import { promisify } from "node:util";
 import { resolve } from "node:path";
 import { execFile } from "node:child_process";
-import { promisify } from "node:util";
 import { Type } from "@sinclair/typebox";
 import { lstat, readlink, realpath } from "node:fs/promises";
 //#region src/agent/tools/review-workspace.ts

package/dist/src/agent/tools/send-media.js

@@ -1,8 +1,8 @@
 import { turnOutcomeKindFromFileName } from "../../../packages/gateway-contract/src/turn-outcome.js";
 import { init_src } from "../../../packages/gateway-contract/src/index.js";
+import { checkFileSafety } from "../prompt/safety.js";
 import { MEDIA_MAX_BYTES } from "../../media/store.js";
 import { readWorkspaceFile } from "../sandbox/fileAccess.js";
-import { checkFileSafety } from "../prompt/safety.js";
 import { resolvePathUnderWorkspace } from "./tool-paths.js";
 import { persistToolMedia } from "./tool-media.js";
 import { basename } from "node:path";

package/dist/src/agent/tools/task-collaboration-tool.js

@@ -5,9 +5,9 @@ import { TaskRunRepository, init_task_run_repository } from "../../tasks/task-ru
 import { init_request_repository, personalRequestForExecution } from "../../personal-agent/request-repository.js";
 import { getSessionMetadata } from "../../storage/sqlite/session-read-repository.js";
 import { init_session_repository } from "../../storage/sqlite/session-repository.js";
+import { getEmbeddedExecutionSession } from "../embedded/execution-context.js";
 import { TaskReadModelProjector } from "../../tasks/task-read-model-projector.js";
 import { TaskConversationRepository } from "../../tasks/task-conversation-repository.js";
-import { getEmbeddedExecutionSession } from "../embedded/execution-context.js";
 import { TaskCollaborationRepository } from "../../tasks/task-collaboration-repository.js";
 import { taskResearchEvidence } from "../../tasks/task-research-result.js";
 import { assertTaskHandoffAccess, assertTaskHandoffExecutorAccess, getTaskHandoff, materializeTaskHandoffFile, readTaskHandoffSource } from "../../tasks/task-handoff.js";

package/dist/src/agent/tools/write.js

@@ -1,7 +1,7 @@
 import { appendProductDeliveryText } from "../../../packages/gateway-contract/src/product-delivery.js";
 import { init_src } from "../../../packages/gateway-contract/src/index.js";
-import { writeWorkspaceFile } from "../sandbox/fileAccess.js";
 import { checkFileSafety } from "../prompt/safety.js";
+import { writeWorkspaceFile } from "../sandbox/fileAccess.js";
 import { isBareProfileMarkdownFileName, resolvePathUnderWorkspace, resolveProfileMarkdownPathIfBareName } from "./tool-paths.js";
 import { fileResourceId, fileSpaceId } from "../../files/file-service.js";
 import { basename, relative, sep } from "path";

package/dist/src/agent/tools/xopc-use-tool.js

@@ -1,23 +1,23 @@
-import { runWithActivityContext } from "../../activity/context.js";
-import { init_transaction, runSqliteWriteTransaction } from "../../storage/sqlite/transaction.js";
 import { normalizeSpecialistRequirements } from "../../../packages/gateway-contract/src/specialists.js";
 import { TaskCommandSchema, TaskContextInputSchema } from "../../../packages/gateway-contract/src/tasks.js";
 import { ChatPreviewCreateInputSchema, ChatPreviewReviseInputSchema } from "../../../packages/gateway-contract/src/chat-previews.js";
 import { appendProductDeliveryText } from "../../../packages/gateway-contract/src/product-delivery.js";
 import { AutomationCancelOutputSchema, AutomationDeleteOutputSchema, AutomationMutationOutputSchema, AutomationReadAllInputSchema, AutomationReadAllOutputSchema, AutomationReadOutputSchema, AutomationRecoveryOutputSchema, AutomationRunMutationOutputSchema, CapabilityCallSchema, CapabilityResourceInputSchema, NoteDeleteOutputSchema, NoteGetOutputSchema, ProjectCreateInputSchema, ProjectDeleteInputSchema, ProjectDeleteOutputSchema, ProjectEditInputSchema, ProjectMilestoneCreateInputSchema, ProjectMilestoneDeleteInputSchema, ProjectMilestoneDeleteOutputSchema, ProjectMilestoneOutputSchema, ProjectMilestoneUpdateInputSchema, ProjectMutationOutputSchema, ProjectResolveWorkspaceInputSchema, ProjectResolveWorkspaceOutputSchema, ProjectSetPinnedInputSchema, ProjectUpdateCreateInputSchema, ProjectUpdateOutputSchema, TaskRunCancelInputSchema, TaskRunCancelOutputSchema, TaskRunFeedbackInputSchema, TaskRunFeedbackOutputSchema } from "../../../packages/gateway-contract/src/capabilities.js";
 import { init_src } from "../../../packages/gateway-contract/src/index.js";
+import { init_transaction, runSqliteWriteTransaction } from "../../storage/sqlite/transaction.js";
 import { TaskRepository } from "../../tasks/task-repository.js";
 import { TaskRunRepository } from "../../tasks/task-run-repository.js";
 import { getSessionMetadata } from "../../storage/sqlite/session-read-repository.js";
 import { init_sqlite } from "../../storage/sqlite/index.js";
-import "../../activity/index.js";
-import { CapabilityError } from "../../capabilities/runtime/errors.js";
-import "../../capabilities/runtime/dispatcher.js";
 import { getDefaultAgentId, init_resolve_route } from "../../routing/resolve-route.js";
+import { runWithActivityContext } from "../../activity/context.js";
+import "../../activity/index.js";
 import { hasUnlocalizedTaskText, resolveTaskLocale } from "../../tasks/task-language.js";
 import { TaskReadModelProjector } from "../../tasks/task-read-model-projector.js";
 import { TaskOriginRepository } from "../../tasks/task-origin-repository.js";
 import { TaskConversationRepository } from "../../tasks/task-conversation-repository.js";
+import { CapabilityError } from "../../capabilities/runtime/errors.js";
+import "../../capabilities/runtime/dispatcher.js";
 import { resolveProjectAgentId } from "../../projects/project-agent.js";
 import "../../projects/index.js";
 import { TaskCollaborationRepository } from "../../tasks/task-collaboration-repository.js";

package/dist/src/agent-catalog/capabilities.js

@@ -1,10 +1,10 @@
 import { AgentEntrySchema, EffectiveAgentConfigSchema } from "../agent-config/schema.js";
 import { resolveEffectiveAgentConfig } from "../agent-config/resolver.js";
 import { init_agent_config } from "../agent-config/index.js";
-import { CapabilityError } from "../capabilities/runtime/errors.js";
-import { defineAtomicCapability, defineReadCapability } from "../capabilities/runtime/dispatcher.js";
 import { AgentCatalogRepository, init_repository } from "./repository.js";
 import { init_agent_scope, resolveAgentWorkspaceDir } from "../agent/agent-scope.js";
+import { CapabilityError } from "../capabilities/runtime/errors.js";
+import { defineAtomicCapability, defineReadCapability } from "../capabilities/runtime/dispatcher.js";
 import { AgentCatalogService } from "./service.js";
 import { z } from "zod";
 //#region src/agent-catalog/capabilities.ts

package/dist/src/agent-catalog/migrations/legacy-config-cutover.js

@@ -1,9 +1,9 @@
-import { getXopcDatabase } from "../../storage/sqlite/connection.js";
-import { runSqliteWriteTransaction } from "../../storage/sqlite/transaction.js";
-import { init_sqlite } from "../../storage/sqlite/index.js";
 import { AgentDefaultsSchema, AgentEntrySchema, AgentIdSchema, DEFAULT_AGENT_MODEL_REF, DEFAULT_SKILL_POLICY } from "../../agent-config/schema.js";
 import { init_agent_config } from "../../agent-config/index.js";
 import { BindingsSchema, init_binding_schema } from "../../routing/binding-schema.js";
+import { getXopcDatabase } from "../../storage/sqlite/connection.js";
+import { runSqliteWriteTransaction } from "../../storage/sqlite/transaction.js";
+import { init_sqlite } from "../../storage/sqlite/index.js";
 import { AgentCatalogRepository, init_repository } from "../repository.js";
 import { init_write_file_atomic, writeTextAtomicSync } from "../../infra/write-file-atomic.js";
 import { backupDatabaseBeforeCutover } from "../../storage/sqlite/migrations/conversation-backup.js";