@xopcai/xopc 0.0.401 → 0.0.402

package/dist/src/capabilities/store-connector.js

@@ -1,10 +1,11 @@
 import { getCliAdapter } from "../connectors/cli/adapterRegistry.js";
+import { validEndpointDomain } from "../connectors/endpoint-policy.js";
 import { listConnectorInstances } from "../connectors/instances.js";
 import { installConnectorDefinition } from "../connectors/install.js";
 import { downloadConnectorStoreZipBuffer, fetchStoreConnectorPackageDetail, listConnectorPackages, resolveSkillsStoreBaseUrl } from "../agent/skills/marketplace/adapters/store/store-api-client.js";
 import { createHash } from "node:crypto";
-import { isIP } from "node:net";
 import AdmZip from "adm-zip";
+import { isIP } from "node:net";
 //#region src/capabilities/store-connector.ts
 const STORE_CONNECTOR_CANDIDATE_PREFIX = "store-connector:";
 function storeConnectorCandidateRef(packageName, version) {
@@ -130,8 +131,7 @@ function readSetup(value) {
 }
 function assertDeclaredTemplateReferences(value, setupKeys) {
 	if (typeof value === "string") {
-		const match = TEMPLATE_PATTERN.exec(value.trim());
-		if (match && !setupKeys.has(`${match[1]}:${match[2]}`)) throw new Error(`Connector template references undeclared ${match[1]} field "${match[2]}".`);
+		for (const match of value.matchAll(/\{\{(secrets|config)\.([A-Za-z0-9_.-]+)\}\}/g)) if (!setupKeys.has(`${match[1]}:${match[2]}`)) throw new Error(`Connector template references undeclared ${match[1]} field "${match[2]}".`);
 		return;
 	}
 	if (Array.isArray(value)) {
@@ -152,6 +152,10 @@ function assertSafeRemoteUrl(value) {
 	}
 	const hostname = url.hostname.toLowerCase().replace(/^\[|\]$/g, "");
 	if (url.protocol !== "https:" || url.username || url.password || hostname === "localhost" || hostname.endsWith(".localhost") || isIP(hostname)) throw new Error("Store connectors must use a public HTTPS MCP endpoint.");
+	if (/\{\{/.test(urlString)) {
+		if ([...urlString.matchAll(/\{\{secrets\.([A-Za-z0-9_.-]+)\}\}/g)].length !== 1 || /^https:\/\/[^/?#]*\{\{/.test(urlString) || url.hash) throw new Error("Connector URL may contain one secret in its path or query only.");
+		return urlString;
+	}
 	return url.toString();
 }
 function readPermissions(value, isLocal) {
@@ -263,7 +267,21 @@ function readConnectorManifest(value, packageName, version, sha256) {
 		mode: "oauth",
 		...clientId ? { clientId } : {}
 	} : { mode: authMode };
-	const category = asString(manifest.category, "Connector category");
+	const marketCategory = asString(manifest.category, "Connector category");
+	const category = {
+		logistics: "data",
+		commerce: "data",
+		analytics: "data",
+		projects: "automation",
+		design: "docs",
+		productivity: "automation",
+		industry: "data",
+		sales: "automation",
+		marketing: "automation",
+		finance: "data",
+		hr: "automation",
+		legal: "docs"
+	}[marketCategory] ?? marketCategory;
 	if (![
 		"code",
 		"docs",
@@ -271,7 +289,7 @@ function readConnectorManifest(value, packageName, version, sha256) {
 		"data",
 		"automation",
 		"custom"
-	].includes(category)) throw new Error(`Unsupported connector category: ${category}`);
+	].includes(category)) throw new Error(`Unsupported connector category: ${marketCategory}`);
 	const capabilities = asStringArray(manifest.capabilities, "Connector capabilities");
 	const allowedCapabilities = new Set([
 		"tools",
@@ -291,8 +309,20 @@ function readConnectorManifest(value, packageName, version, sha256) {
 	const { setup, keys: setupKeys } = readSetup(manifest.setup);
 	assertDeclaredTemplateReferences(serverTemplate, setupKeys);
 	const permissions = readPermissions(manifest.permissions, Boolean(localPackage));
-	const endpoint = localPackage ? void 0 : assertSafeRemoteUrl(serverTemplate.url);
-	const hostname = endpoint ? new URL(endpoint).hostname : void 0;
+	const endpointReference = typeof serverTemplate.url === "string" ? TEMPLATE_PATTERN.exec(serverTemplate.url) : null;
+	let endpointPolicy;
+	if (!localPackage && endpointReference) {
+		const policy = asRecord(runtime.endpointPolicy, "Connector endpoint policy");
+		const domains = asStringArray(policy.domains, "Connector endpoint domains");
+		const pathPrefixes = asStringArray(policy.pathPrefixes, "Connector endpoint paths");
+		if (endpointReference[1] !== "secrets" || !domains.length || domains.some((domain) => !validEndpointDomain(domain)) || !pathPrefixes.length || pathPrefixes.some((path) => !path.startsWith("/") || /[?#]|\.\./.test(path)) || domains.some((domain) => !permissions.networkDomains?.includes(domain))) throw new Error("Connector endpoint policy must constrain a secret URL to declared provider domains and MCP paths.");
+		endpointPolicy = {
+			domains,
+			pathPrefixes
+		};
+	}
+	const endpoint = localPackage ? void 0 : endpointReference ? serverTemplate.url : assertSafeRemoteUrl(serverTemplate.url);
+	const hostname = endpoint && !endpointReference ? new URL(endpoint).hostname : void 0;
 	if (hostname && permissions.networkDomains?.length && !permissions.networkDomains.some((domain) => domain.toLowerCase() === hostname.toLowerCase())) throw new Error("Connector network permissions must include the MCP endpoint host.");
 	return {
 		id: packageName,
@@ -310,14 +340,19 @@ function readConnectorManifest(value, packageName, version, sha256) {
 			type: "mcp",
 			serverId: asString(runtime.serverId, "Connector MCP serverId"),
 			serverTemplate: localPackage ? serverTemplate : {
-				...serverTemplate,
+				...Object.fromEntries(Object.entries(serverTemplate).filter(([key]) => ![
+					"transport",
+					"connectionTimeoutMs",
+					"requestTimeoutMs",
+					"oauth"
+				].includes(key))),
 				url: endpoint,
-				...authMode === "oauth" ? { auth: {
-					type: "oauth",
-					...clientId ? { clientId } : {}
-				} } : {}
+				type: "http",
+				...typeof serverTemplate.requestTimeoutMs === "number" || typeof serverTemplate.connectionTimeoutMs === "number" ? { timeout: serverTemplate.requestTimeoutMs ?? serverTemplate.connectionTimeoutMs } : {},
+				...authMode === "oauth" ? { oauth: { ...clientId ? { clientId } : {} } } : {}
 			},
-			...localPackage ? { localPackage } : {}
+			...localPackage ? { localPackage } : {},
+			...endpointPolicy ? { endpointPolicy } : {}
 		},
 		permissions,
 		provenance: {

package/dist/src/channels/attachments/voice-stt-webchat.js

@@ -1,8 +1,8 @@
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
-import { isSTTAvailable } from "../../voice/stt/availability.js";
 import { decodeInboundAttachmentBase64, readInboundAttachmentBuffer } from "./inbound-persist.js";
 import { transcribe } from "../../voice/stt/transcribe-core.js";
+import { isSTTAvailable } from "../../voice/stt/availability.js";
 import "../../voice/stt/index.js";
 //#region src/channels/attachments/voice-stt-webchat.ts
 init_logger();

package/dist/src/channels/format.js

@@ -1,9 +1,9 @@
+import { parseFrontmatterBlock } from "../markdown/frontmatter.js";
 import { findFenceSpanAt, isSafeFenceBreak, parseFenceSpans } from "../markdown/fences.js";
 import { chunkText } from "../markdown/chunk.js";
 import { chunkMarkdownIR, markdownToIR, markdownToIRWithMeta } from "../markdown/ir.js";
 import { renderMarkdownWithMarkers } from "../markdown/render.js";
 import { convertMarkdownTables } from "../markdown/tables.js";
-import { parseFrontmatterBlock } from "../markdown/frontmatter.js";
 import { buildCodeSpanIndex, createInlineCodeState } from "../markdown/code-spans.js";
 import "../markdown/index.js";
 export { buildCodeSpanIndex, chunkMarkdownIR, chunkText, convertMarkdownTables, createInlineCodeState, findFenceSpanAt, isSafeFenceBreak, markdownToIR, markdownToIRWithMeta, parseFenceSpans, parseFrontmatterBlock, renderMarkdownWithMarkers };

package/dist/src/channels/index.js

@@ -1,12 +1,12 @@
+import { parseFrontmatterBlock } from "../markdown/frontmatter.js";
+import { getChannelPlugin, getChannelRegistryVersion, listChannelPlugins, syncChannelPluginsFromManager } from "./plugins/registry.js";
 import { findFenceSpanAt, isSafeFenceBreak, parseFenceSpans } from "../markdown/fences.js";
 import { chunkText } from "../markdown/chunk.js";
 import { chunkMarkdownIR, markdownToIR, markdownToIRWithMeta } from "../markdown/ir.js";
+import { compileAllowlist, evaluateAccess, hasBotMention, removeBotMention, resolveAllowlistMatch, resolveAllowlistMatchSimple, resolveDmPolicy, resolveGroupPolicy } from "./security.js";
 import { renderMarkdownWithMarkers } from "../markdown/render.js";
 import { convertMarkdownTables } from "../markdown/tables.js";
-import { parseFrontmatterBlock } from "../markdown/frontmatter.js";
 import { buildCodeSpanIndex, createInlineCodeState } from "../markdown/code-spans.js";
-import { compileAllowlist, evaluateAccess, hasBotMention, removeBotMention, resolveAllowlistMatch, resolveAllowlistMatchSimple, resolveDmPolicy, resolveGroupPolicy } from "./security.js";
-import { getChannelPlugin, getChannelRegistryVersion, listChannelPlugins, syncChannelPluginsFromManager } from "./plugins/registry.js";
 import "./format.js";
 import { MessagePipeline, createEnvelopeTimestampHandler, createFilterCommandsHandler, createFilterEmptyHandler, createFilterSelfHandler, createPipeline, standardPreflightHandlers, standardProcessHandlers } from "./pipeline.js";
 import { ChannelManager, createChannelManager } from "./manager.js";

package/dist/src/channels/pairing/pairing-service.js

@@ -1,9 +1,9 @@
+import { resolveDmPolicy } from "../security.js";
 import { resolveStandardAllowFromPath, resolveStandardPairingPath } from "./paths.js";
 import { readAllowFromIdsSync, removeAllowFromIdSync } from "./allow-from-file.js";
 import "./pairing-constants.js";
 import { PAIRING_PENDING_TTL_MS, approvePairingBySenderIdSync, approvePairingCodeSync, dismissPairingBySenderIdSync, listPendingPairingRequestsSync } from "./pairing-store.js";
 import { broadcastPairingEvent } from "./pairing-events.js";
-import { resolveDmPolicy } from "../security.js";
 //#region src/channels/pairing/pairing-service.ts
 const pairingResolvers = /* @__PURE__ */ new Map();
 function registerPairingChannelResolver(channel, resolver) {

package/dist/src/chat-commands/agent-edit.js

@@ -1,7 +1,7 @@
 import { normalizeAgentId } from "../agent-catalog/id.js";
 import { init_agent_scope, resolveAgentProfileDir } from "../agent/agent-scope.js";
-import { init_agent_session_key, resolveAgentIdFromConversationId } from "../routing/agent-session-key.js";
 import { WORKSPACE_FILES, init_paths } from "../config/paths.js";
+import { init_agent_session_key, resolveAgentIdFromConversationId } from "../routing/agent-session-key.js";
 import { commandRegistry } from "./registry.js";
 import { join } from "node:path";
 import { readFile } from "node:fs/promises";

package/dist/src/chat-commands/builtins/config.js

@@ -1,4 +1,3 @@
-import { resolveAllowlistMatchSimple } from "../../channels/security.js";
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
 import { init_paths, resolveConfigPath } from "../../config/paths.js";
@@ -7,6 +6,7 @@ import { commandRegistry } from "../registry.js";
 import { parseConfigValue } from "../config-value.js";
 import { getConfigValueAtPath, parseConfigPath, setConfigValueAtPath, unsetConfigValueAtPath } from "../config-paths.js";
 import { loadConfig, saveConfig } from "../../config/loader.js";
+import { resolveAllowlistMatchSimple } from "../../channels/security.js";
 //#region src/chat-commands/builtins/config.ts
 init_schema();
 init_paths();

package/dist/src/chat-commands/builtins/session.js

@@ -1,5 +1,5 @@
-import { getSessionDisplayName } from "../session-key.js";
 import { commandRegistry } from "../registry.js";
+import { getSessionDisplayName } from "../session-key.js";
 //#region src/chat-commands/builtins/session.ts
 const newCommand = {
 	id: "session.new",

package/dist/src/chat-commands/context.js

@@ -1,10 +1,10 @@
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
-import { getSessionDisplayName } from "./session-key.js";
 import { getAgentDefaultModelRef, init_schema } from "../config/schema.js";
 import { resolveEffectiveAgentConfigForSession } from "../config/agent-profile.js";
 import { effectiveWorkspacePathForSession } from "../session/session-workspace.js";
 import { getProjectForSession } from "../projects/workspace.js";
+import { getSessionDisplayName } from "./session-key.js";
 import { saveConfig } from "../config/loader.js";
 import { wrapMarkdownExportAsHtml } from "../session/chat-export.js";
 import { join } from "path";

package/dist/src/chat-commands/index.js

@@ -1,6 +1,6 @@
-import { generateConversationId, getSessionDisplayName } from "./session-key.js";
 import { normalizeTelegramCommandName, parseSlashCommand } from "./command-parse.js";
 import { CommandRegistry, commandRegistry } from "./registry.js";
+import { generateConversationId, getSessionDisplayName } from "./session-key.js";
 import { registerSessionCommands } from "./builtins/session.js";
 import { registerModelCommands } from "./builtins/model.js";
 import { registerSystemCommands } from "./builtins/system.js";

package/dist/src/cli/commands/agent.js

@@ -1,9 +1,9 @@
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
 import { init_agent_scope, resolveDefaultAgentId } from "../../agent/agent-scope.js";
-import { getWorkspacePath } from "../../config/workspace-path-helpers.js";
-import { init_agent_session_key, resolveAgentMainConversationId } from "../../routing/agent-session-key.js";
 import { getAgentDefaultModelRef, init_schema } from "../../config/schema.js";
+import { init_agent_session_key, resolveAgentMainConversationId } from "../../routing/agent-session-key.js";
+import { getWorkspacePath } from "../../config/workspace-path-helpers.js";
 import { ExtensionLoader } from "../../extensions/loader.js";
 import "../../extensions/index.js";
 import { loadConfig } from "../../config/loader.js";

package/dist/src/cli/commands/channels.js

@@ -1,7 +1,7 @@
-import { listChannelPairingState } from "../../channels/pairing/pairing-service.js";
-import { approveChannelPairingFromCli } from "../../channels/pairing/approve-cli.js";
 import { buildChannelCatalogForConfig } from "../../channels/catalog/channel-catalog-service.js";
 import { loadConfig, saveConfig } from "../../config/loader.js";
+import { listChannelPairingState } from "../../channels/pairing/pairing-service.js";
+import { approveChannelPairingFromCli } from "../../channels/pairing/approve-cli.js";
 import { formatExamples, register } from "../registry.js";
 import { colors } from "../utils/colors.js";
 import { Command } from "commander";

package/dist/src/cli/commands/doctor/checks/channel-pairing-pending.js

@@ -1,5 +1,5 @@
-import { collectPairingPendingIssues } from "../../../../channels/pairing/pairing-service.js";
 import { loadConfig } from "../../../../config/loader.js";
+import { collectPairingPendingIssues } from "../../../../channels/pairing/pairing-service.js";
 import { existsSync } from "node:fs";
 //#region src/cli/commands/doctor/checks/channel-pairing-pending.ts
 function hasEnabledChannel(cfg) {

package/dist/src/cli/commands/doctor/checks/image-providers.js

@@ -1,8 +1,8 @@
 import { resolveModelsJsonPath } from "../../../../config/paths.js";
 import { init_models_json, loadModelsJson } from "../../../../config/models-json.js";
+import { CredentialResolver, init_credentials } from "../../../../auth/credentials.js";
 import { classifyHost } from "../../../../media-shared/http/private-network.js";
 import "../../../../media-shared/http/index.js";
-import { CredentialResolver, init_credentials } from "../../../../auth/credentials.js";
 import { existsSync } from "node:fs";
 //#region src/cli/commands/doctor/checks/image-providers.ts
 init_credentials();

package/dist/src/cli/commands/doctor/checks/provider-auth.js

@@ -1,9 +1,9 @@
 import { AgentCatalogRepository, init_repository } from "../../../../agent-catalog/repository.js";
+import { getAgentDefaultModelRef, init_schema, parseModelRef } from "../../../../config/schema.js";
 import { getDefaultAgentId, init_resolve_route } from "../../../../routing/resolve-route.js";
 import { PROVIDER_ENV_MAP, init_env_keys } from "../../../../providers/env-keys.js";
 import { getModelOAuthProviderIds, init_registry } from "../../../../auth/oauth/registry.js";
 import { CredentialResolver, init_credentials } from "../../../../auth/credentials.js";
-import { getAgentDefaultModelRef, init_schema, parseModelRef } from "../../../../config/schema.js";
 import { loadConfig } from "../../../../config/loader.js";
 import { existsSync } from "node:fs";
 //#region src/cli/commands/doctor/checks/provider-auth.ts

package/dist/src/cli/commands/extension-agent-plugin.js

@@ -1,9 +1,9 @@
-import { getWorkspacePath } from "../../config/workspace-path-helpers.js";
 import { pluginAuthorizations } from "../../extensions/agent-plugins/setup-contract.js";
 import { PLUGIN_MANIFEST_PATHS } from "../../extensions/agent-plugins/formats.js";
 import { pluginServerId } from "../../extensions/agent-plugins/validation.js";
 import { isGitPluginSource } from "../../extensions/agent-plugins/source-catalog.js";
 import { AgentPluginStore } from "../../extensions/agent-plugins/store.js";
+import { getWorkspacePath } from "../../config/workspace-path-helpers.js";
 import { loadConfig } from "../../config/loader.js";
 import { PluginSetupService } from "../../extensions/agent-plugins/setup.js";
 import { getContextWithOpts } from "../context.js";

package/dist/src/cli/commands/extension-marketplace.js

@@ -13,10 +13,10 @@ import { installAgentPluginFromCli, isAgentPluginSource } from "./extension-agen
 import { validateExtensionPackageDirectory } from "./extension-pack.js";
 import { join, resolve } from "node:path";
 import { existsSync, readFileSync, statSync } from "node:fs";
-import { createHash } from "node:crypto";
 import { execSync } from "node:child_process";
-import { confirm } from "@inquirer/prompts";
+import { createHash } from "node:crypto";
 import semver from "semver";
+import { confirm } from "@inquirer/prompts";
 import { Command } from "commander";
 //#region src/cli/commands/extension-marketplace.ts
 init_paths();

package/dist/src/cli/commands/extension-pack.js

@@ -7,8 +7,8 @@ import { collectExtensionPackageDependencyIssues } from "../../extensions/packag
 import { colors } from "../utils/colors.js";
 import { basename, join, relative, resolve } from "node:path";
 import { existsSync, mkdirSync, readFileSync, readdirSync, statSync, writeFileSync } from "node:fs";
-import { createHash } from "node:crypto";
 import { execSync } from "node:child_process";
+import { createHash } from "node:crypto";
 import AdmZip from "adm-zip";
 import { Command } from "commander";
 //#region src/cli/commands/extension-pack.ts

package/dist/src/cli/commands/gateway/lifecycle.js

@@ -1,8 +1,8 @@
 import { init_paths, resolveConfigPath } from "../../../config/paths.js";
 import { loadConfig } from "../../../config/loader.js";
 import "../../../config/index.js";
-import { isRestartEnabled } from "../../../config/commands.flags.js";
 import { resolveGatewayService } from "../../../daemon/service.js";
+import { isRestartEnabled } from "../../../config/commands.flags.js";
 import { authorizeGatewaySigusr1Restart, writeGatewayRestartIntentSync } from "../../../infra/restart.js";
 import { findVerifiedGatewayListenerPidsOnPortSync, formatGatewayPidList, signalVerifiedGatewayPidSync } from "../../../infra/gateway-processes.js";
 import { runServiceRestart, runServiceStop } from "./lifecycle-core.js";

package/dist/src/cli/commands/models.js

@@ -1,10 +1,10 @@
 import { creditDecimal } from "../../../packages/gateway-contract/src/cloud-credits.js";
 import { init_src } from "../../../packages/gateway-contract/src/index.js";
 import { AgentCatalogRepository, init_repository } from "../../agent-catalog/repository.js";
-import { CredentialResolver, init_credentials } from "../../auth/credentials.js";
-import { XopcCloudAccountService } from "../../providers/xopc-cloud-account-service.js";
 import { getAgentDefaultModelRef, init_schema } from "../../config/schema.js";
+import { CredentialResolver, init_credentials } from "../../auth/credentials.js";
 import { getAllModels, getAvailableModels, getConfiguredProviders, getProviderAuthState, getProviderDisplayName, init_providers, isProviderConfigured, providerSupportsApiKey, providerSupportsOAuth, resolveModel } from "../../providers/index.js";
+import { XopcCloudAccountService } from "../../providers/xopc-cloud-account-service.js";
 import { AgentCatalogService } from "../../agent-catalog/service.js";
 import { listImageProviderSpecs } from "../../../packages/image-providers/src/catalog.js";
 import "../../../packages/image-providers/src/index.js";

package/dist/src/cli/commands/onboard/model.js

@@ -1,10 +1,10 @@
 import { AgentCatalogRepository, init_repository } from "../../../agent-catalog/repository.js";
 import { resolveModelsJsonPath } from "../../../config/paths.js";
+import { ConfigSchema, getAgentDefaultModelRef, init_schema } from "../../../config/schema.js";
 import { init_models_json, loadModelsJson, saveModelsJson } from "../../../config/models-json.js";
 import { getApiKeyFromEnv } from "../../../providers/env-keys.js";
-import { CredentialResolver, init_credentials } from "../../../auth/credentials.js";
-import { ConfigSchema, getAgentDefaultModelRef, init_schema } from "../../../config/schema.js";
 import { getModelRegistry } from "../../../providers/model-registry.js";
+import { CredentialResolver, init_credentials } from "../../../auth/credentials.js";
 import { getAllProviders, getModelsByProvider, getProviderDisplayName, init_providers, providerSupportsApiKey, providerSupportsOAuth } from "../../../providers/index.js";
 import { AgentCatalogService } from "../../../agent-catalog/service.js";
 import { prepareUpdateGlobalDefaults } from "../../../gateway/global-defaults-admin.js";

package/dist/src/computer/broker.js

@@ -1,7 +1,7 @@
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
-import { ActionEnvelopeSchema, ComputerCommandSchema, init_src } from "../../packages/computer-control-contract/src/index.js";
 import { ComputerConfigSchema, init_config } from "./config.js";
+import { ActionEnvelopeSchema, ComputerCommandSchema, init_src } from "../../packages/computer-control-contract/src/index.js";
 import { ComputerTargetError } from "./errors.js";
 import { createHash, randomUUID } from "node:crypto";
 //#region src/computer/broker.ts

package/dist/src/computer/flows.js

@@ -1,5 +1,5 @@
-import { DurableState } from "../storage/sqlite/durable-state.js";
 import { inferMemorySensitivity } from "../agent/memory/sensitivity.js";
+import { DurableState } from "../storage/sqlite/durable-state.js";
 import { createHash, randomUUID } from "node:crypto";
 import { z } from "zod";
 //#region src/computer/flows.ts

package/dist/src/computer/runtime.js

@@ -1,10 +1,10 @@
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
+import { resolveEffectiveAgentConfigForSession } from "../config/agent-profile.js";
 import { COMPUTER_CONTROL_TOOL, ComputerAppSchema, ComputerObservationSchema, ComputerWindowSchema, init_src } from "../../packages/computer-control-contract/src/index.js";
 import { ComputerServiceLimitsSchema, computerModelProfile, init_model_policy } from "./model-policy.js";
-import { rejectUnbudgetedCloudTransport } from "../providers/xopc-cloud-credit-budget.js";
-import { resolveEffectiveAgentConfigForSession } from "../config/agent-profile.js";
 import { getApiKey, init_providers, resolveModel } from "../providers/index.js";
+import { rejectUnbudgetedCloudTransport } from "../providers/xopc-cloud-credit-budget.js";
 import { enterComputerControl, leaveComputerControl } from "./control-guard.js";
 import { ComputerDiagnosticSchema, ComputerOperationError, computerDiagnostic, computerRecovery } from "./errors.js";
 import { createComputerModelAdapter, predictComputerStep, readComputerJson } from "./model-adapter.js";

package/dist/src/config/index.js

@@ -2,14 +2,14 @@ import { ENV_VARS, XOPC_DB_FILENAME, resolveHomeDir, resolveStateDir, resolveXop
 import { expandWorkspacePathString, init_workspace_path, normalizeWorkspaceDir, resolveWorkspaceRoot } from "./workspace-path.js";
 import { resolveDefaultAgentWorkspaceDir } from "./workspace-defaults.js";
 import { resolveAgentWorkspaceDir } from "../agent/agent-scope.js";
-import { getWorkspacePath } from "./workspace-path-helpers.js";
-import { TelegramAccountConfigSchema, TelegramConfigSchema, TelegramGroupConfigSchema, TelegramTopicConfigSchema } from "../../extensions/telegram/src/config-schema.js";
 import { FILENAMES, WORKSPACE_FILES, existsSync, hasBundledExtensionManifest, init_paths, resolveAgentAuthProfilesPath, resolveAgentDir, resolveAgentHomeDir, resolveAgentProfileDir, resolveAgentProfileMarkdownPath, resolveAuthProfilesPath, resolveBinDir, resolveBundledExtensionsDir, resolveBundledSkillsDir, resolveConfigPath, resolveCredentialsDir, resolveExtensionSdkPath, resolveExtensionsDir, resolveExtensionsLockPath, resolveInboxDir, resolveInboxMessagePath, resolveInboxPendingDir, resolveInboxProcessedDir, resolveLogPath, resolveLogsDir, resolveModelsJsonPath, resolveNodeBinDir, resolveNodeBinPath, resolveNodeToolsDir, resolveNpmBinPath, resolveOAuthPath, resolvePidPath, resolveSkillPath, resolveSkillsCachePath, resolveSkillsDir, resolveSkillsLockPath, resolveSocketPath, resolveStatusPath, resolveToolsDir, resolveWorkspaceExtensionsDir, resolveWorkspaceFile, resolveWorkspaceStateDir, resolveWorkspaceStatePath, resolveXopcBinPath } from "./paths.js";
-import { CustomModelSchema, ImageGenerationCapabilitiesSchema, ImageGenerationModelSchema, ImageGenerationProviderSchema, ModelOverrideSchema, ModelsJsonSchema, OpenAICompatSchema, OpenAICompletionsCompatSchema, OpenAIResponsesCompatSchema, OpenRouterRoutingSchema, ProviderConfigSchema, VercelGatewayRoutingSchema, getDefaultModelValues, init_models_json, loadModelsJson, modelsJsonExists, saveModelsJson, validateModelsConfig } from "./models-json.js";
+import { TelegramAccountConfigSchema, TelegramConfigSchema, TelegramGroupConfigSchema, TelegramTopicConfigSchema } from "../../extensions/telegram/src/config-schema.js";
 import { WeixinAccountConfigSchema, WeixinConfigSchema } from "../../extensions/weixin/src/config-schema.js";
 import { AgentImageGenerationModelSchema, AgentModelRefSchema, AgentModelsSchema, BrowserConfigSchema, ChannelsConfigSchema, CommandsConfigSchema, ConfigSchema, ConnectorsConfigSchema, ExperimentalConfigSchema, ExtensionSecurityConfigSchema, ExtensionSlotsConfigSchema, ExtensionsConfigSchema, GatewayAuthRateLimitSchema, GatewayAuthSchema, GatewayBindModeSchema, GatewayChannelConnectDeferModeSchema, GatewayConfigSchema, GatewayModeSchema, GatewayRemoteSchema, GatewaySecuritySchema, GatewayTailscaleConsentSchema, GatewayTailscaleSchema, GatewayTlsSchema, GatewayTrustedProxySchema, GatewayWebchatConfigSchema, McpConfigSchema, McpOAuthConfigSchema, McpServerSchema, MediaUnderstandingCapabilitiesSchema, MediaUnderstandingModelSchema, MessagesConfigSchema, ModelCatalogConfigSchema, ModelsDevConfigSchema, ProviderAuthConfigSchema, ProviderAzureConfigSchema, ProviderRequestOverridesSchema, ProvidersConfigSchema, RuntimeToolsConfigSchema, STTConfigSchema, STTFallbackConfigSchema, STTProviderConfigSchema, SearchProviderEntrySchema, SessionConfigSchema, SessionDmScopeSchema, SessionResetByTypeSchema, SessionResetConfigSchema, SessionResetModeSchema, SessionScopeSchema, SessionStorageConfigSchema, TTSConfigSchema, TTSEdgeConfigSchema, TTSFallbackConfigSchema, TTSModelOverridesConfigSchema, TTSProviderConfigSchema, TTSSummarizationConfigSchema, ToolsConfigSchema, ToolsMediaAudioConfigSchema, ToolsMediaConfigSchema, TunnelBrokerUrlSchema, TunnelConfigSchema, TunnelConsentSchema, UpdateAutoConfigSchema, UpdateConfigSchema, VoiceConfigSchema, VoiceRefinementConfigSchema, WebSearchConfigSchema, WebToolsConfigSchema, WebsiteBlocklistSchema, WorkspaceConfigSchema, WorkspaceImportConfigSchema, getAgentDefaultChatModelConfig, getAgentDefaultImageGenerationModelConfig, getAgentDefaultImageModelConfig, getAgentDefaultModelRef, init_schema, parseModelRef } from "./schema.js";
 import { extractProfileAgentId, resolveEffectiveAgentConfigForAgent, resolveEffectiveAgentConfigForSession, resolveEffectiveAgentProfile, resolveEffectiveAgentProfileForSession } from "./agent-profile.js";
 import { clearConfigValueCache, getAllowedCommands, getCacheStats, init_resolve_config_value, resolveConfigValue, resolveHeaders, testApiKeyResolution } from "./resolve-config-value.js";
+import { CustomModelSchema, ImageGenerationCapabilitiesSchema, ImageGenerationModelSchema, ImageGenerationProviderSchema, ModelOverrideSchema, ModelsJsonSchema, OpenAICompatSchema, OpenAICompletionsCompatSchema, OpenAIResponsesCompatSchema, OpenRouterRoutingSchema, ProviderConfigSchema, VercelGatewayRoutingSchema, getDefaultModelValues, init_models_json, loadModelsJson, modelsJsonExists, saveModelsJson, validateModelsConfig } from "./models-json.js";
+import { getWorkspacePath } from "./workspace-path-helpers.js";
 import { applyConfigOverrides, getConfigOverrides, resetConfigOverrides, setConfigOverride, unsetConfigOverride } from "./runtime-overrides.js";
 import { canonicalizeConfiguredMcpServer, normalizeConfiguredMcpServers } from "./mcp-config-normalize.js";
 import { formatThinkingLevels, listThinkingLevels, normalizeElevatedMode, normalizeReasoningLevel, normalizeThinkLevel, normalizeVerboseLevel, thinkLevelToNumber } from "../agent/transcript/thinking-types.js";

package/dist/src/config/loader.js

@@ -2,8 +2,8 @@ import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
 import { init_write_file_atomic, writeTextAtomic } from "../infra/write-file-atomic.js";
 import { init_paths, resolveConfigPath } from "./paths.js";
-import { init_resolution, setActivePlatformDiscovery } from "../platform/resolution.js";
 import { ConfigSchema, init_schema } from "./schema.js";
+import { init_resolution, setActivePlatformDiscovery } from "../platform/resolution.js";
 import { assertChannelPluginConfigs } from "./validate-channel-configs.js";
 import { isGatewayConfigLockedByAnotherProcessSync } from "../gateway/lock.js";
 import { dirname } from "path";

package/dist/src/config/models-json.js

@@ -1,7 +1,7 @@
 import { __esmMin } from "../../_virtual/_rolldown/runtime.js";
-import { ComputerProfileSchema, init_src } from "../../packages/computer-control-contract/src/index.js";
 import { init_write_file_atomic, writeTextAtomicSync } from "../infra/write-file-atomic.js";
 import { init_paths, resolveModelsJsonPath } from "./paths.js";
+import { ComputerProfileSchema, init_src } from "../../packages/computer-control-contract/src/index.js";
 import { init_model_policy, isComputerModel } from "../computer/model-policy.js";
 import { assertCurrentModelProvider, init_provider_policy } from "../providers/provider-policy.js";
 import { existsSync, readFileSync } from "fs";

package/dist/src/config/paths-state.js

@@ -1,6 +1,6 @@
 import { __esmMin } from "../../_virtual/_rolldown/runtime.js";
-import { join } from "node:path";
 import { homedir } from "node:os";
+import { join } from "node:path";
 //#region src/config/paths-state.ts
 function resolveHomeDir(env = process.env) {
 	return env[ENV_VARS.HOME] || homedir();

package/dist/src/config/schema.d.ts

@@ -1173,16 +1173,38 @@ export declare const McpServerSchema: z.ZodObject<{
             fieldKey: z.ZodString;
             prefix: z.ZodOptional<z.ZodString>;
             suffix: z.ZodOptional<z.ZodString>;
+            urlPolicy: z.ZodOptional<z.ZodObject<{
+                domains: z.ZodArray<z.ZodString>;
+                pathPrefixes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                encodeValue: z.ZodOptional<z.ZodBoolean>;
+            }, z.core.$strict>>;
         }, z.core.$strip>;
     }, z.core.$strip>]>>>;
     cwd: z.ZodOptional<z.ZodString>;
-    url: z.ZodOptional<z.ZodString>;
+    url: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+        xopcSecretRef: z.ZodObject<{
+            provider: z.ZodString;
+            fieldKey: z.ZodString;
+            prefix: z.ZodOptional<z.ZodString>;
+            suffix: z.ZodOptional<z.ZodString>;
+            urlPolicy: z.ZodOptional<z.ZodObject<{
+                domains: z.ZodArray<z.ZodString>;
+                pathPrefixes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                encodeValue: z.ZodOptional<z.ZodBoolean>;
+            }, z.core.$strict>>;
+        }, z.core.$strip>;
+    }, z.core.$strip>]>>;
     headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
         xopcSecretRef: z.ZodObject<{
             provider: z.ZodString;
             fieldKey: z.ZodString;
             prefix: z.ZodOptional<z.ZodString>;
             suffix: z.ZodOptional<z.ZodString>;
+            urlPolicy: z.ZodOptional<z.ZodObject<{
+                domains: z.ZodArray<z.ZodString>;
+                pathPrefixes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                encodeValue: z.ZodOptional<z.ZodBoolean>;
+            }, z.core.$strict>>;
         }, z.core.$strip>;
     }, z.core.$strip>]>>>;
     oauth: z.ZodOptional<z.ZodObject<{
@@ -1238,16 +1260,38 @@ export declare const McpConfigSchema: z.ZodOptional<z.ZodObject<{
                 fieldKey: z.ZodString;
                 prefix: z.ZodOptional<z.ZodString>;
                 suffix: z.ZodOptional<z.ZodString>;
+                urlPolicy: z.ZodOptional<z.ZodObject<{
+                    domains: z.ZodArray<z.ZodString>;
+                    pathPrefixes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                    encodeValue: z.ZodOptional<z.ZodBoolean>;
+                }, z.core.$strict>>;
             }, z.core.$strip>;
         }, z.core.$strip>]>>>;
         cwd: z.ZodOptional<z.ZodString>;
-        url: z.ZodOptional<z.ZodString>;
+        url: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+            xopcSecretRef: z.ZodObject<{
+                provider: z.ZodString;
+                fieldKey: z.ZodString;
+                prefix: z.ZodOptional<z.ZodString>;
+                suffix: z.ZodOptional<z.ZodString>;
+                urlPolicy: z.ZodOptional<z.ZodObject<{
+                    domains: z.ZodArray<z.ZodString>;
+                    pathPrefixes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                    encodeValue: z.ZodOptional<z.ZodBoolean>;
+                }, z.core.$strict>>;
+            }, z.core.$strip>;
+        }, z.core.$strip>]>>;
         headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
             xopcSecretRef: z.ZodObject<{
                 provider: z.ZodString;
                 fieldKey: z.ZodString;
                 prefix: z.ZodOptional<z.ZodString>;
                 suffix: z.ZodOptional<z.ZodString>;
+                urlPolicy: z.ZodOptional<z.ZodObject<{
+                    domains: z.ZodArray<z.ZodString>;
+                    pathPrefixes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                    encodeValue: z.ZodOptional<z.ZodBoolean>;
+                }, z.core.$strict>>;
             }, z.core.$strip>;
         }, z.core.$strip>]>>>;
         oauth: z.ZodOptional<z.ZodObject<{
@@ -1895,16 +1939,38 @@ export declare const ConfigSchema: z.ZodDefault<z.ZodObject<{
                     fieldKey: z.ZodString;
                     prefix: z.ZodOptional<z.ZodString>;
                     suffix: z.ZodOptional<z.ZodString>;
+                    urlPolicy: z.ZodOptional<z.ZodObject<{
+                        domains: z.ZodArray<z.ZodString>;
+                        pathPrefixes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                        encodeValue: z.ZodOptional<z.ZodBoolean>;
+                    }, z.core.$strict>>;
                 }, z.core.$strip>;
             }, z.core.$strip>]>>>;
             cwd: z.ZodOptional<z.ZodString>;
-            url: z.ZodOptional<z.ZodString>;
+            url: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+                xopcSecretRef: z.ZodObject<{
+                    provider: z.ZodString;
+                    fieldKey: z.ZodString;
+                    prefix: z.ZodOptional<z.ZodString>;
+                    suffix: z.ZodOptional<z.ZodString>;
+                    urlPolicy: z.ZodOptional<z.ZodObject<{
+                        domains: z.ZodArray<z.ZodString>;
+                        pathPrefixes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                        encodeValue: z.ZodOptional<z.ZodBoolean>;
+                    }, z.core.$strict>>;
+                }, z.core.$strip>;
+            }, z.core.$strip>]>>;
             headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
                 xopcSecretRef: z.ZodObject<{
                     provider: z.ZodString;
                     fieldKey: z.ZodString;
                     prefix: z.ZodOptional<z.ZodString>;
                     suffix: z.ZodOptional<z.ZodString>;
+                    urlPolicy: z.ZodOptional<z.ZodObject<{
+                        domains: z.ZodArray<z.ZodString>;
+                        pathPrefixes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                        encodeValue: z.ZodOptional<z.ZodBoolean>;
+                    }, z.core.$strict>>;
                 }, z.core.$strip>;
             }, z.core.$strip>]>>>;
             oauth: z.ZodOptional<z.ZodObject<{

package/dist/src/config/schema.js

@@ -3,7 +3,6 @@ import { AgentModelsOverrideSchema, ImageGenerationRouteSchema, ModelRouteSchema
 import { resolveEffectiveAgentConfig } from "../agent-config/resolver.js";
 import { init_agent_config } from "../agent-config/index.js";
 import { AgentCatalogRepository, init_repository } from "../agent-catalog/repository.js";
-import { TelegramAccountConfigSchema, TelegramConfigSchema, TelegramGroupConfigSchema, TelegramTopicConfigSchema, init_config_schema } from "../../extensions/telegram/src/config-schema.js";
 import { getModelUsageOrigin, init_model_usage } from "../providers/model-usage.js";
 import { TracingConfigSchema, init_config } from "../observability/config.js";
 import { OutboundProxySchema, init_outbound_proxy } from "./outbound-proxy.js";
@@ -12,6 +11,7 @@ import { DEFAULT_CONTEXT_COMPACTION_POLICY, UserContextConfigSchema, init_config
 import { init_public_url, validatePublicUrl } from "./public-url.js";
 import { PlatformConfigSchema, init_contracts } from "../platform/contracts.js";
 import { deepseekSearchEndpoint, init_deepseek_protocol } from "../agent/tools/search/providers/deepseek-protocol.js";
+import { TelegramAccountConfigSchema, TelegramConfigSchema, TelegramGroupConfigSchema, TelegramTopicConfigSchema, init_config_schema } from "../../extensions/telegram/src/config-schema.js";
 import { WeixinAccountConfigSchema, WeixinConfigSchema, init_config_schema as init_config_schema$1 } from "../../extensions/weixin/src/config-schema.js";
 import { z } from "zod";
 import semver from "semver";
@@ -928,7 +928,12 @@ tts: TTSConfigSchema.optional() }).optional();
 		provider: z.string().min(1),
 		fieldKey: z.string().min(1),
 		prefix: z.string().optional(),
-		suffix: z.string().optional()
+		suffix: z.string().optional(),
+		urlPolicy: z.object({
+			domains: z.array(z.string()).min(1),
+			pathPrefixes: z.array(z.string()).optional(),
+			encodeValue: z.boolean().optional()
+		}).strict().optional()
 	}) });
 	McpConfigScalarSchema = z.union([z.string(), ConnectorSecretReferenceSchema]);
 	McpExposureSchema = z.enum([
@@ -959,7 +964,7 @@ tts: TTSConfigSchema.optional() }).optional();
 		args: z.array(z.string()).optional(),
 		env: z.record(z.string(), McpConfigScalarSchema).optional(),
 		cwd: z.string().optional(),
-		url: McpHttpUrlSchema.optional(),
+		url: z.union([McpHttpUrlSchema, ConnectorSecretReferenceSchema]).optional(),
 		headers: z.record(z.string(), McpConfigScalarSchema).optional(),
 		oauth: McpOAuthConfigSchema.optional(),
 		auth: z.object({ provider: z.string().min(1) }).strict().optional(),

package/dist/src/config/workspace-path.js

@@ -1,6 +1,6 @@
 import { __esmMin } from "../../_virtual/_rolldown/runtime.js";
-import { parse, resolve } from "node:path";
 import { homedir } from "node:os";
+import { parse, resolve } from "node:path";
 //#region src/config/workspace-path.ts
 /** Expand leading `~` to the user home directory. */
 function expandWorkspacePathString(raw) {