@xopcai/xopc 0.0.401 → 0.0.403

package/dist/src/computer/semantic-plan.js

@@ -0,0 +1,95 @@
+import { z } from "zod";
+//#region src/computer/semantic-plan.ts
+const ComputerButtonPlanSchema = z.object({
+	kind: z.literal("button_plan"),
+	steps: z.array(z.object({
+		label: z.string().min(1).max(300),
+		when: z.union([
+			z.object({ text: z.string().min(1).max(1e3) }).strict(),
+			z.object({
+				role: z.literal("AXStaticText"),
+				label: z.string().max(300),
+				value: z.string().max(1e3).optional()
+			}).strict(),
+			z.object({
+				role: z.enum(["AXTextField", "AXTextArea"]),
+				label: z.string().max(300),
+				value: z.string().max(1e3)
+			}).strict()
+		])
+	}).strict()).min(2).max(6)
+}).strict();
+const NativeContextSchema = z.object({
+	text: z.string().optional(),
+	truncated: z.boolean().optional(),
+	elements: z.array(z.object({
+		role: z.string(),
+		label: z.string().optional(),
+		value: z.unknown().optional(),
+		ref: z.string().optional(),
+		enabled: z.boolean().optional(),
+		in_web_content: z.boolean().optional(),
+		semanticActions: z.array(z.string()).optional()
+	})).max(180)
+});
+const displayText = (value) => typeof value === "string" ? value.replace(/[\u200e\u200f\u2066-\u2069]/g, "") : void 0;
+/** A call-local conditional plan. Every yielded action still goes through broker validation. */
+var ComputerButtonPlan = class {
+	steps = [];
+	goal;
+	awaiting;
+	get pending() {
+		return this.steps.length > 0;
+	}
+	reset() {
+		this.steps = [];
+		this.goal = void 0;
+		this.awaiting = void 0;
+	}
+	install(plan, goal, limit) {
+		this.reset();
+		if (plan.steps.length > limit) throw new Error("COMPUTER_INVALID_MODEL_OUTPUT");
+		this.goal = goal;
+		this.steps = [...plan.steps];
+	}
+	next(input) {
+		if (!this.steps.length) return;
+		const reject = () => {
+			this.reset();
+		};
+		if (!input.maxPlanActions || this.goal !== input.goal || !input.stateDigest) return reject();
+		if (this.awaiting) {
+			const last = input.history?.at(-1);
+			if (last?.dispatch !== "completed" || last.actionPreview !== this.awaiting.preview || last.afterStateDigest !== input.stateDigest || this.awaiting.digest === input.stateDigest) return reject();
+		}
+		try {
+			const data = NativeContextSchema.parse(JSON.parse(input.summary));
+			if (!data.elements.some((e) => e.role === "AXWindow")) return reject();
+			const step = this.steps[0];
+			const when = step.when;
+			if ("text" in when) {
+				if ((typeof data.text === "string" ? [...data.text.matchAll(/^\s*- AXStaticText = "([^"\n]*)"\s*$/gm)] : []).filter((match) => displayText(match[1]) === displayText(when.text)).length !== 1) return reject();
+			} else {
+				if (data.truncated === true) return reject();
+				const guards = data.elements.filter((e) => e.role === when.role && displayText(e.label) === displayText(when.label));
+				if (guards.length !== 1 || guards[0].in_web_content === true || when.value !== void 0 && displayText(guards[0].value) !== displayText(when.value)) return reject();
+			}
+			const buttons = data.elements.filter((e) => e.role === "AXButton" && e.label === step.label);
+			if (buttons.length !== 1 || buttons[0].enabled === false || buttons[0].in_web_content === true || typeof buttons[0].ref !== "string" || !buttons[0].semanticActions?.includes("activate")) return reject();
+			const action = {
+				kind: "activate",
+				ref: buttons[0].ref
+			};
+			this.steps.shift();
+			this.awaiting = {
+				preview: JSON.stringify(action),
+				digest: input.stateDigest
+			};
+			return action;
+		} catch {
+			return reject();
+		}
+	}
+};
+//#endregion
+export { ComputerButtonPlan, ComputerButtonPlanSchema };

package/dist/src/computer/task-state.js

@@ -28,8 +28,9 @@ function verifyComputerExpectation(expectation, observation, before) {
 		const data = JSON.parse(observation.summary);
 		if (!Array.isArray(data.elements) || !data.elements.some((e) => e.role === "AXWindow")) return result("unavailable");
 		if (expectation.kind === "text") {
-			if (typeof data.text !== "string" || !data.text) return result("unavailable");
-			const verification = result(data.text.includes(expectation.text) ? "satisfied" : data.truncated ? "unavailable" : "not_met");
+			const evidence = [data.text, ...data.elements.filter((e) => ["AXTextField", "AXTextArea"].includes(String(e.role)) && e.in_web_content !== true).map((e) => e.value)].filter((text) => typeof text === "string" && text.length > 0);
+			if (!evidence.length) return result("unavailable");
+			const verification = result(evidence.some((text) => text.includes(expectation.text)) ? "satisfied" : data.truncated ? "unavailable" : "not_met");
 			if (verification.status === "satisfied" && before && verifyComputerExpectation(expectation, before)?.status === "satisfied") verification.preexisting = true;
 			return verification;
 		}

package/dist/src/config/agent-profile.js

@@ -1,6 +1,6 @@
-import { normalizeAgentId } from "../agent-catalog/id.js";
 import { resolveEffectiveAgentConfig } from "../agent-config/resolver.js";
 import { init_agent_config } from "../agent-config/index.js";
+import { normalizeAgentId } from "../agent-catalog/id.js";
 import { AgentCatalogRepository, init_repository } from "../agent-catalog/repository.js";
 import { init_agent_scope, resolveAgentWorkspaceDir } from "../agent/agent-scope.js";
 import { getConversationRouting } from "../storage/sqlite/conversation-repository.js";

package/dist/src/config/index.js

@@ -2,14 +2,14 @@ import { ENV_VARS, XOPC_DB_FILENAME, resolveHomeDir, resolveStateDir, resolveXop
 import { expandWorkspacePathString, init_workspace_path, normalizeWorkspaceDir, resolveWorkspaceRoot } from "./workspace-path.js";
 import { resolveDefaultAgentWorkspaceDir } from "./workspace-defaults.js";
 import { resolveAgentWorkspaceDir } from "../agent/agent-scope.js";
-import { getWorkspacePath } from "./workspace-path-helpers.js";
-import { TelegramAccountConfigSchema, TelegramConfigSchema, TelegramGroupConfigSchema, TelegramTopicConfigSchema } from "../../extensions/telegram/src/config-schema.js";
 import { FILENAMES, WORKSPACE_FILES, existsSync, hasBundledExtensionManifest, init_paths, resolveAgentAuthProfilesPath, resolveAgentDir, resolveAgentHomeDir, resolveAgentProfileDir, resolveAgentProfileMarkdownPath, resolveAuthProfilesPath, resolveBinDir, resolveBundledExtensionsDir, resolveBundledSkillsDir, resolveConfigPath, resolveCredentialsDir, resolveExtensionSdkPath, resolveExtensionsDir, resolveExtensionsLockPath, resolveInboxDir, resolveInboxMessagePath, resolveInboxPendingDir, resolveInboxProcessedDir, resolveLogPath, resolveLogsDir, resolveModelsJsonPath, resolveNodeBinDir, resolveNodeBinPath, resolveNodeToolsDir, resolveNpmBinPath, resolveOAuthPath, resolvePidPath, resolveSkillPath, resolveSkillsCachePath, resolveSkillsDir, resolveSkillsLockPath, resolveSocketPath, resolveStatusPath, resolveToolsDir, resolveWorkspaceExtensionsDir, resolveWorkspaceFile, resolveWorkspaceStateDir, resolveWorkspaceStatePath, resolveXopcBinPath } from "./paths.js";
-import { CustomModelSchema, ImageGenerationCapabilitiesSchema, ImageGenerationModelSchema, ImageGenerationProviderSchema, ModelOverrideSchema, ModelsJsonSchema, OpenAICompatSchema, OpenAICompletionsCompatSchema, OpenAIResponsesCompatSchema, OpenRouterRoutingSchema, ProviderConfigSchema, VercelGatewayRoutingSchema, getDefaultModelValues, init_models_json, loadModelsJson, modelsJsonExists, saveModelsJson, validateModelsConfig } from "./models-json.js";
+import { TelegramAccountConfigSchema, TelegramConfigSchema, TelegramGroupConfigSchema, TelegramTopicConfigSchema } from "../../extensions/telegram/src/config-schema.js";
 import { WeixinAccountConfigSchema, WeixinConfigSchema } from "../../extensions/weixin/src/config-schema.js";
 import { AgentImageGenerationModelSchema, AgentModelRefSchema, AgentModelsSchema, BrowserConfigSchema, ChannelsConfigSchema, CommandsConfigSchema, ConfigSchema, ConnectorsConfigSchema, ExperimentalConfigSchema, ExtensionSecurityConfigSchema, ExtensionSlotsConfigSchema, ExtensionsConfigSchema, GatewayAuthRateLimitSchema, GatewayAuthSchema, GatewayBindModeSchema, GatewayChannelConnectDeferModeSchema, GatewayConfigSchema, GatewayModeSchema, GatewayRemoteSchema, GatewaySecuritySchema, GatewayTailscaleConsentSchema, GatewayTailscaleSchema, GatewayTlsSchema, GatewayTrustedProxySchema, GatewayWebchatConfigSchema, McpConfigSchema, McpOAuthConfigSchema, McpServerSchema, MediaUnderstandingCapabilitiesSchema, MediaUnderstandingModelSchema, MessagesConfigSchema, ModelCatalogConfigSchema, ModelsDevConfigSchema, ProviderAuthConfigSchema, ProviderAzureConfigSchema, ProviderRequestOverridesSchema, ProvidersConfigSchema, RuntimeToolsConfigSchema, STTConfigSchema, STTFallbackConfigSchema, STTProviderConfigSchema, SearchProviderEntrySchema, SessionConfigSchema, SessionDmScopeSchema, SessionResetByTypeSchema, SessionResetConfigSchema, SessionResetModeSchema, SessionScopeSchema, SessionStorageConfigSchema, TTSConfigSchema, TTSEdgeConfigSchema, TTSFallbackConfigSchema, TTSModelOverridesConfigSchema, TTSProviderConfigSchema, TTSSummarizationConfigSchema, ToolsConfigSchema, ToolsMediaAudioConfigSchema, ToolsMediaConfigSchema, TunnelBrokerUrlSchema, TunnelConfigSchema, TunnelConsentSchema, UpdateAutoConfigSchema, UpdateConfigSchema, VoiceConfigSchema, VoiceRefinementConfigSchema, WebSearchConfigSchema, WebToolsConfigSchema, WebsiteBlocklistSchema, WorkspaceConfigSchema, WorkspaceImportConfigSchema, getAgentDefaultChatModelConfig, getAgentDefaultImageGenerationModelConfig, getAgentDefaultImageModelConfig, getAgentDefaultModelRef, init_schema, parseModelRef } from "./schema.js";
 import { extractProfileAgentId, resolveEffectiveAgentConfigForAgent, resolveEffectiveAgentConfigForSession, resolveEffectiveAgentProfile, resolveEffectiveAgentProfileForSession } from "./agent-profile.js";
 import { clearConfigValueCache, getAllowedCommands, getCacheStats, init_resolve_config_value, resolveConfigValue, resolveHeaders, testApiKeyResolution } from "./resolve-config-value.js";
+import { CustomModelSchema, ImageGenerationCapabilitiesSchema, ImageGenerationModelSchema, ImageGenerationProviderSchema, ModelOverrideSchema, ModelsJsonSchema, OpenAICompatSchema, OpenAICompletionsCompatSchema, OpenAIResponsesCompatSchema, OpenRouterRoutingSchema, ProviderConfigSchema, VercelGatewayRoutingSchema, getDefaultModelValues, init_models_json, loadModelsJson, modelsJsonExists, saveModelsJson, validateModelsConfig } from "./models-json.js";
+import { getWorkspacePath } from "./workspace-path-helpers.js";
 import { applyConfigOverrides, getConfigOverrides, resetConfigOverrides, setConfigOverride, unsetConfigOverride } from "./runtime-overrides.js";
 import { canonicalizeConfiguredMcpServer, normalizeConfiguredMcpServers } from "./mcp-config-normalize.js";
 import { formatThinkingLevels, listThinkingLevels, normalizeElevatedMode, normalizeReasoningLevel, normalizeThinkLevel, normalizeVerboseLevel, thinkLevelToNumber } from "../agent/transcript/thinking-types.js";

package/dist/src/config/loader.js

@@ -2,8 +2,8 @@ import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
 import { init_write_file_atomic, writeTextAtomic } from "../infra/write-file-atomic.js";
 import { init_paths, resolveConfigPath } from "./paths.js";
-import { init_resolution, setActivePlatformDiscovery } from "../platform/resolution.js";
 import { ConfigSchema, init_schema } from "./schema.js";
+import { init_resolution, setActivePlatformDiscovery } from "../platform/resolution.js";
 import { assertChannelPluginConfigs } from "./validate-channel-configs.js";
 import { isGatewayConfigLockedByAnotherProcessSync } from "../gateway/lock.js";
 import { dirname } from "path";

package/dist/src/config/models-json.js

@@ -1,7 +1,7 @@
 import { __esmMin } from "../../_virtual/_rolldown/runtime.js";
-import { ComputerProfileSchema, init_src } from "../../packages/computer-control-contract/src/index.js";
 import { init_write_file_atomic, writeTextAtomicSync } from "../infra/write-file-atomic.js";
 import { init_paths, resolveModelsJsonPath } from "./paths.js";
+import { ComputerProfileSchema, init_src } from "../../packages/computer-control-contract/src/index.js";
 import { init_model_policy, isComputerModel } from "../computer/model-policy.js";
 import { assertCurrentModelProvider, init_provider_policy } from "../providers/provider-policy.js";
 import { existsSync, readFileSync } from "fs";

package/dist/src/config/paths-state.js

@@ -1,6 +1,6 @@
 import { __esmMin } from "../../_virtual/_rolldown/runtime.js";
-import { join } from "node:path";
 import { homedir } from "node:os";
+import { join } from "node:path";
 //#region src/config/paths-state.ts
 function resolveHomeDir(env = process.env) {
 	return env[ENV_VARS.HOME] || homedir();

package/dist/src/config/schema.d.ts

@@ -1173,16 +1173,38 @@ export declare const McpServerSchema: z.ZodObject<{
             fieldKey: z.ZodString;
             prefix: z.ZodOptional<z.ZodString>;
             suffix: z.ZodOptional<z.ZodString>;
+            urlPolicy: z.ZodOptional<z.ZodObject<{
+                domains: z.ZodArray<z.ZodString>;
+                pathPrefixes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                encodeValue: z.ZodOptional<z.ZodBoolean>;
+            }, z.core.$strict>>;
         }, z.core.$strip>;
     }, z.core.$strip>]>>>;
     cwd: z.ZodOptional<z.ZodString>;
-    url: z.ZodOptional<z.ZodString>;
+    url: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+        xopcSecretRef: z.ZodObject<{
+            provider: z.ZodString;
+            fieldKey: z.ZodString;
+            prefix: z.ZodOptional<z.ZodString>;
+            suffix: z.ZodOptional<z.ZodString>;
+            urlPolicy: z.ZodOptional<z.ZodObject<{
+                domains: z.ZodArray<z.ZodString>;
+                pathPrefixes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                encodeValue: z.ZodOptional<z.ZodBoolean>;
+            }, z.core.$strict>>;
+        }, z.core.$strip>;
+    }, z.core.$strip>]>>;
     headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
         xopcSecretRef: z.ZodObject<{
             provider: z.ZodString;
             fieldKey: z.ZodString;
             prefix: z.ZodOptional<z.ZodString>;
             suffix: z.ZodOptional<z.ZodString>;
+            urlPolicy: z.ZodOptional<z.ZodObject<{
+                domains: z.ZodArray<z.ZodString>;
+                pathPrefixes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                encodeValue: z.ZodOptional<z.ZodBoolean>;
+            }, z.core.$strict>>;
         }, z.core.$strip>;
     }, z.core.$strip>]>>>;
     oauth: z.ZodOptional<z.ZodObject<{
@@ -1238,16 +1260,38 @@ export declare const McpConfigSchema: z.ZodOptional<z.ZodObject<{
                 fieldKey: z.ZodString;
                 prefix: z.ZodOptional<z.ZodString>;
                 suffix: z.ZodOptional<z.ZodString>;
+                urlPolicy: z.ZodOptional<z.ZodObject<{
+                    domains: z.ZodArray<z.ZodString>;
+                    pathPrefixes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                    encodeValue: z.ZodOptional<z.ZodBoolean>;
+                }, z.core.$strict>>;
             }, z.core.$strip>;
         }, z.core.$strip>]>>>;
         cwd: z.ZodOptional<z.ZodString>;
-        url: z.ZodOptional<z.ZodString>;
+        url: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+            xopcSecretRef: z.ZodObject<{
+                provider: z.ZodString;
+                fieldKey: z.ZodString;
+                prefix: z.ZodOptional<z.ZodString>;
+                suffix: z.ZodOptional<z.ZodString>;
+                urlPolicy: z.ZodOptional<z.ZodObject<{
+                    domains: z.ZodArray<z.ZodString>;
+                    pathPrefixes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                    encodeValue: z.ZodOptional<z.ZodBoolean>;
+                }, z.core.$strict>>;
+            }, z.core.$strip>;
+        }, z.core.$strip>]>>;
         headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
             xopcSecretRef: z.ZodObject<{
                 provider: z.ZodString;
                 fieldKey: z.ZodString;
                 prefix: z.ZodOptional<z.ZodString>;
                 suffix: z.ZodOptional<z.ZodString>;
+                urlPolicy: z.ZodOptional<z.ZodObject<{
+                    domains: z.ZodArray<z.ZodString>;
+                    pathPrefixes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                    encodeValue: z.ZodOptional<z.ZodBoolean>;
+                }, z.core.$strict>>;
             }, z.core.$strip>;
         }, z.core.$strip>]>>>;
         oauth: z.ZodOptional<z.ZodObject<{
@@ -1895,16 +1939,38 @@ export declare const ConfigSchema: z.ZodDefault<z.ZodObject<{
                     fieldKey: z.ZodString;
                     prefix: z.ZodOptional<z.ZodString>;
                     suffix: z.ZodOptional<z.ZodString>;
+                    urlPolicy: z.ZodOptional<z.ZodObject<{
+                        domains: z.ZodArray<z.ZodString>;
+                        pathPrefixes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                        encodeValue: z.ZodOptional<z.ZodBoolean>;
+                    }, z.core.$strict>>;
                 }, z.core.$strip>;
             }, z.core.$strip>]>>>;
             cwd: z.ZodOptional<z.ZodString>;
-            url: z.ZodOptional<z.ZodString>;
+            url: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+                xopcSecretRef: z.ZodObject<{
+                    provider: z.ZodString;
+                    fieldKey: z.ZodString;
+                    prefix: z.ZodOptional<z.ZodString>;
+                    suffix: z.ZodOptional<z.ZodString>;
+                    urlPolicy: z.ZodOptional<z.ZodObject<{
+                        domains: z.ZodArray<z.ZodString>;
+                        pathPrefixes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                        encodeValue: z.ZodOptional<z.ZodBoolean>;
+                    }, z.core.$strict>>;
+                }, z.core.$strip>;
+            }, z.core.$strip>]>>;
             headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
                 xopcSecretRef: z.ZodObject<{
                     provider: z.ZodString;
                     fieldKey: z.ZodString;
                     prefix: z.ZodOptional<z.ZodString>;
                     suffix: z.ZodOptional<z.ZodString>;
+                    urlPolicy: z.ZodOptional<z.ZodObject<{
+                        domains: z.ZodArray<z.ZodString>;
+                        pathPrefixes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                        encodeValue: z.ZodOptional<z.ZodBoolean>;
+                    }, z.core.$strict>>;
                 }, z.core.$strip>;
             }, z.core.$strip>]>>>;
             oauth: z.ZodOptional<z.ZodObject<{

package/dist/src/config/schema.js

@@ -3,7 +3,6 @@ import { AgentModelsOverrideSchema, ImageGenerationRouteSchema, ModelRouteSchema
 import { resolveEffectiveAgentConfig } from "../agent-config/resolver.js";
 import { init_agent_config } from "../agent-config/index.js";
 import { AgentCatalogRepository, init_repository } from "../agent-catalog/repository.js";
-import { TelegramAccountConfigSchema, TelegramConfigSchema, TelegramGroupConfigSchema, TelegramTopicConfigSchema, init_config_schema } from "../../extensions/telegram/src/config-schema.js";
 import { getModelUsageOrigin, init_model_usage } from "../providers/model-usage.js";
 import { TracingConfigSchema, init_config } from "../observability/config.js";
 import { OutboundProxySchema, init_outbound_proxy } from "./outbound-proxy.js";
@@ -12,6 +11,7 @@ import { DEFAULT_CONTEXT_COMPACTION_POLICY, UserContextConfigSchema, init_config
 import { init_public_url, validatePublicUrl } from "./public-url.js";
 import { PlatformConfigSchema, init_contracts } from "../platform/contracts.js";
 import { deepseekSearchEndpoint, init_deepseek_protocol } from "../agent/tools/search/providers/deepseek-protocol.js";
+import { TelegramAccountConfigSchema, TelegramConfigSchema, TelegramGroupConfigSchema, TelegramTopicConfigSchema, init_config_schema } from "../../extensions/telegram/src/config-schema.js";
 import { WeixinAccountConfigSchema, WeixinConfigSchema, init_config_schema as init_config_schema$1 } from "../../extensions/weixin/src/config-schema.js";
 import { z } from "zod";
 import semver from "semver";
@@ -928,7 +928,12 @@ tts: TTSConfigSchema.optional() }).optional();
 		provider: z.string().min(1),
 		fieldKey: z.string().min(1),
 		prefix: z.string().optional(),
-		suffix: z.string().optional()
+		suffix: z.string().optional(),
+		urlPolicy: z.object({
+			domains: z.array(z.string()).min(1),
+			pathPrefixes: z.array(z.string()).optional(),
+			encodeValue: z.boolean().optional()
+		}).strict().optional()
 	}) });
 	McpConfigScalarSchema = z.union([z.string(), ConnectorSecretReferenceSchema]);
 	McpExposureSchema = z.enum([
@@ -959,7 +964,7 @@ tts: TTSConfigSchema.optional() }).optional();
 		args: z.array(z.string()).optional(),
 		env: z.record(z.string(), McpConfigScalarSchema).optional(),
 		cwd: z.string().optional(),
-		url: McpHttpUrlSchema.optional(),
+		url: z.union([McpHttpUrlSchema, ConnectorSecretReferenceSchema]).optional(),
 		headers: z.record(z.string(), McpConfigScalarSchema).optional(),
 		oauth: McpOAuthConfigSchema.optional(),
 		auth: z.object({ provider: z.string().min(1) }).strict().optional(),

package/dist/src/config/workspace-path.js

@@ -1,6 +1,6 @@
 import { __esmMin } from "../../_virtual/_rolldown/runtime.js";
-import { parse, resolve } from "node:path";
 import { homedir } from "node:os";
+import { parse, resolve } from "node:path";
 //#region src/config/workspace-path.ts
 /** Expand leading `~` to the user home directory. */
 function expandWorkspacePathString(raw) {

package/dist/src/connectors/connected-source-ingestion.js

@@ -2,10 +2,10 @@ import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
 import { getConnectorInstallation, listConnectorConnections } from "../storage/sqlite/connector-repository.js";
 import { init_sqlite } from "../storage/sqlite/index.js";
-import { getWorkspacePath } from "../config/workspace-path-helpers.js";
 import { getActiveUnderstandingConsent, grantUnderstandingConsent } from "../user-context/sources/consent-repository.js";
 import { listUnderstandingSourceGrants, upsertUnderstandingSourceGrant } from "../user-context/sources/repository.js";
 import { ConnectedKnowledgePipeline } from "../knowledge/connected-knowledge-pipeline.js";
+import { getWorkspacePath } from "../config/workspace-path-helpers.js";
 import { canAccessConnectorAccount, currentAccountConnections } from "./account-access.js";
 import { ComposioSessionsAdapter } from "./composio-sessions.js";
 import { decodeConnectedSourceCursor, encodeConnectedSourceCursor } from "./connected-source-cursor.js";

package/dist/src/connectors/content-enrichment.js

@@ -4,8 +4,8 @@ import { init_sqlite } from "../storage/sqlite/index.js";
 import { ConnectedKnowledgePipeline } from "../knowledge/connected-knowledge-pipeline.js";
 import { ComposioSessionsAdapter } from "./composio-sessions.js";
 import { sanitizeConnectedSourceValue } from "./connected-source-sanitization.js";
-import { isAbsolute, join, relative, sep } from "node:path";
 import { tmpdir } from "node:os";
+import { isAbsolute, join, relative, sep } from "node:path";
 import { createHash } from "node:crypto";
 import { mkdtemp, readFile, realpath, rm } from "node:fs/promises";
 //#region src/connectors/content-enrichment.ts

package/dist/src/connectors/endpoint-policy.d.ts

@@ -0,0 +1,7 @@
+export type ConnectorEndpointPolicy = {
+    domains: string[];
+    pathPrefixes?: string[];
+    encodeValue?: boolean;
+};
+export declare function validEndpointDomain(domain: string): boolean;
+export declare function assertConnectorEndpoint(value: string, policy: ConnectorEndpointPolicy): string;

package/dist/src/connectors/endpoint-policy.js

@@ -0,0 +1,14 @@
+import { isIP } from "node:net";
+//#region src/connectors/endpoint-policy.ts
+function validEndpointDomain(domain) {
+	return /^(?:\*\.)?(?:[a-z0-9](?:[a-z0-9-]*[a-z0-9])?\.)+[a-z]{2,}$/i.test(domain) && !domain.endsWith(".localhost") && !domain.endsWith(".local");
+}
+function assertConnectorEndpoint(value, policy) {
+	const url = new URL(value);
+	const host = url.hostname.toLowerCase();
+	if (url.protocol !== "https:" || url.username || url.password || url.hash || isIP(host) || !policy.domains.length || policy.domains.some((domain) => !validEndpointDomain(domain)) || !policy.domains.some((domain) => domain.startsWith("*.") ? host.endsWith(domain.slice(1)) && host !== domain.slice(2) : host === domain.toLowerCase())) throw new Error("Connector endpoint must use HTTPS on a declared provider domain.");
+	if (policy.pathPrefixes?.length && !policy.pathPrefixes.some((prefix) => url.pathname === prefix || url.pathname.startsWith(`${prefix.replace(/\/$/, "")}/`))) throw new Error("Connector endpoint is outside the declared MCP path.");
+	return value;
+}
+//#endregion
+export { assertConnectorEndpoint, validEndpointDomain };

package/dist/src/connectors/materialize.js

@@ -1,5 +1,6 @@
 import { McpServerSchema, init_schema } from "../config/schema.js";
-import { createConnectorSecretReference } from "./secret-store.js";
+import { assertConnectorEndpoint } from "./endpoint-policy.js";
+import { createConnectorSecretReference, isConnectorSecretReference } from "./secret-store.js";
 //#region src/connectors/materialize.ts
 init_schema();
 const SERVER_ID_PATTERN = /^[a-z][a-z0-9_-]{0,63}$/;
@@ -62,6 +63,20 @@ function materializeConnectorMcpServer(definition, input) {
 	assertValidConnectorServerId(serverId);
 	const rawServer = materializeTemplate(definition.runtime.serverTemplate, definition, input);
 	if (!rawServer || typeof rawServer !== "object" || Array.isArray(rawServer)) throw new Error("Connector MCP server template must resolve to a JSON object.");
+	const remote = rawServer;
+	if (isConnectorSecretReference(remote.url)) {
+		const templateUrl = definition.runtime.serverTemplate.url;
+		if (typeof templateUrl !== "string") throw new Error("Connector endpoint template is missing.");
+		const embedded = !TEMPLATE_PATTERN.test(templateUrl);
+		const policy = definition.runtime.endpointPolicy ?? { domains: [new URL(templateUrl.replace(EMBEDDED_SECRET_PATTERN, "credential")).hostname] };
+		remote.url.xopcSecretRef.urlPolicy = {
+			...policy,
+			...embedded ? { encodeValue: true } : {}
+		};
+		const key = remote.url.xopcSecretRef.fieldKey;
+		const rawInput = input.secrets?.[key];
+		if (typeof rawInput === "string" && !rawInput.startsWith("secret://")) assertConnectorEndpoint(`${remote.url.xopcSecretRef.prefix ?? ""}${embedded ? encodeURIComponent(rawInput) : rawInput}${remote.url.xopcSecretRef.suffix ?? ""}`, policy);
+	}
 	const marker = {
 		managed: true,
 		connectorId: definition.id,

package/dist/src/connectors/secret-store.js

@@ -1,5 +1,6 @@
 import { CredentialResolver, init_credentials } from "../auth/credentials.js";
 import { consumeConnectorSetupSecretRef } from "./setup-secrets.js";
+import { assertConnectorEndpoint } from "./endpoint-policy.js";
 //#region src/connectors/secret-store.ts
 init_credentials();
 function normalizeSecretSegment(value) {
@@ -32,7 +33,9 @@ async function saveConnectorSecrets(definition, input, resolver = new Credential
 async function resolveSecretReference(reference, resolver) {
 	const value = await resolver.resolveApiKey(reference.xopcSecretRef.provider);
 	if (!value) return void 0;
-	return `${reference.xopcSecretRef.prefix ?? ""}${value}${reference.xopcSecretRef.suffix ?? ""}`;
+	const policy = reference.xopcSecretRef.urlPolicy;
+	const resolved = `${reference.xopcSecretRef.prefix ?? ""}${policy?.encodeValue ? encodeURIComponent(value) : value}${reference.xopcSecretRef.suffix ?? ""}`;
+	return policy ? assertConnectorEndpoint(resolved, policy) : resolved;
 }
 async function resolveConnectorSecretReferences(value, resolver = new CredentialResolver()) {
 	if (isConnectorSecretReference(value)) return resolveSecretReference(value, resolver);

package/dist/src/connectors/types.d.ts

@@ -43,6 +43,7 @@ export type ConnectorSecretReference = {
         fieldKey: string;
         prefix?: string;
         suffix?: string;
+        urlPolicy?: import('./endpoint-policy.js').ConnectorEndpointPolicy;
     };
 };
 export type ConnectorSecretField = {
@@ -74,6 +75,7 @@ export type ConnectorRuntimeDefinition = {
     type: 'mcp';
     serverId: string;
     serverTemplate: Record<string, unknown>;
+    endpointPolicy?: import('./endpoint-policy.js').ConnectorEndpointPolicy;
     localPackage?: {
         registry: 'npm';
         name: string;

package/dist/src/daemon/constants.js

@@ -1,6 +1,6 @@
 import { __esmMin } from "../../_virtual/_rolldown/runtime.js";
-import path from "node:path";
 import os from "node:os";
+import path from "node:path";
 //#region src/daemon/constants.ts
 /**
 * Daemon Constants - Service labels, paths, and configuration values

package/dist/src/daemon/install-plan.js

@@ -2,8 +2,8 @@ import { PACKAGE_VERSION, init_package_version } from "../package-version.js";
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
 import { SERVICE_VERSION_ENV_KEY, formatGatewayServiceDescription, init_constants } from "./constants.js";
-import path from "node:path";
 import { homedir } from "node:os";
+import path from "node:path";
 import { existsSync } from "node:fs";
 import { fileURLToPath } from "node:url";
 //#region src/daemon/install-plan.ts

package/dist/src/daemon/launchd.js

@@ -1,8 +1,8 @@
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
 import { init_constants, resolveGatewayLaunchAgentLabel, resolveLaunchAgentPlistPath as resolveLaunchAgentPlistPath$1 } from "./constants.js";
-import path from "node:path";
 import os from "node:os";
+import path from "node:path";
 import { existsSync } from "node:fs";
 import { spawn, spawnSync } from "node:child_process";
 import { mkdir, readFile, rm, writeFile } from "node:fs/promises";

package/dist/src/daemon/schtasks.js

@@ -1,8 +1,8 @@
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
 import { init_constants, resolveGatewayWindowsTaskName } from "./constants.js";
-import path from "node:path";
 import os from "node:os";
+import path from "node:path";
 import { mkdirSync, readFileSync, rmSync, writeFileSync } from "node:fs";
 import { spawn, spawnSync } from "node:child_process";
 //#region src/daemon/schtasks.ts

package/dist/src/daemon/systemd.js

@@ -1,8 +1,8 @@
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
 import { init_constants, resolveGatewaySystemdServiceName, resolveSystemdUnitPath } from "./constants.js";
-import path from "node:path";
 import os from "node:os";
+import path from "node:path";
 import { existsSync } from "node:fs";
 import { spawn, spawnSync } from "node:child_process";
 import { access, constants as constants$1, mkdir, readFile, rm, writeFile } from "node:fs/promises";

package/dist/src/discussions/action-tasks.js

@@ -1,6 +1,6 @@
+import { getSqliteDatabase, init_transaction, runSqliteWriteTransaction } from "../storage/sqlite/transaction.js";
 import { TaskCreateRequestSchema } from "../../packages/gateway-contract/src/tasks.js";
 import { init_src } from "../../packages/gateway-contract/src/index.js";
-import { getSqliteDatabase, init_transaction, runSqliteWriteTransaction } from "../storage/sqlite/transaction.js";
 import { TaskRepository, init_task_repository } from "../tasks/task-repository.js";
 import { TaskApplicationService } from "../tasks/task-application-service.js";
 import { DiscussionServiceError } from "./errors.js";

package/dist/src/discussions/live-worker.js

@@ -1,9 +1,9 @@
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
-import { init_model_usage, withModelUsageOrigin } from "../providers/model-usage.js";
-import { isSTTAvailable } from "../voice/stt/availability.js";
 import { ObjectLinkService } from "../activity/service.js";
+import { init_model_usage, withModelUsageOrigin } from "../providers/model-usage.js";
 import { transcribe } from "../voice/stt/transcribe-core.js";
+import { isSTTAvailable } from "../voice/stt/availability.js";
 import { mergeSttConfigFromAppConfig } from "../voice/stt/config.js";
 import "../voice/stt/index.js";
 import { claimNextDiscussionTranscriptSegment, completeDiscussionTranscriptSegment, getDiscussionCapture, listDiscussionTranscriptSegments, retryOrFailDiscussionTranscriptSegment, updateDiscussionCapture } from "./repository.js";

package/dist/src/discussions/recording.js

@@ -1,6 +1,6 @@
+import { getSqliteDatabase, init_transaction, runSqliteWriteTransaction } from "../storage/sqlite/transaction.js";
 import { DISCUSSION_MAX_SAVED_DURATION_MS } from "../../packages/gateway-contract/src/discussions.js";
 import { init_src } from "../../packages/gateway-contract/src/index.js";
-import { getSqliteDatabase, init_transaction, runSqliteWriteTransaction } from "../storage/sqlite/transaction.js";
 import { resolveNoteMediaDir } from "../notes/paths.js";
 import { DiscussionServiceError } from "./errors.js";
 import { getDiscussionCapture, updateDiscussionCapture } from "./repository.js";

package/dist/src/discussions/repository.js

@@ -1,5 +1,5 @@
-import { DISCUSSION_STATUSES } from "../../packages/gateway-contract/src/discussions.js";
 import { getSqliteDatabase, init_transaction, runSqliteWriteTransaction } from "../storage/sqlite/transaction.js";
+import { DISCUSSION_STATUSES } from "../../packages/gateway-contract/src/discussions.js";
 import { randomUUID } from "node:crypto";
 //#region src/discussions/repository.ts
 init_transaction();

package/dist/src/discussions/sealer.js

@@ -1,11 +1,11 @@
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
+import { init_transaction, runSqliteWriteTransaction } from "../storage/sqlite/transaction.js";
 import { DISCUSSION_MAX_SAVED_DURATION_MS } from "../../packages/gateway-contract/src/discussions.js";
 import { init_src } from "../../packages/gateway-contract/src/index.js";
-import { init_transaction, runSqliteWriteTransaction } from "../storage/sqlite/transaction.js";
 import { init_model_usage, withModelUsageOrigin } from "../providers/model-usage.js";
-import { isSTTAvailable } from "../voice/stt/availability.js";
 import { transcribe } from "../voice/stt/transcribe-core.js";
+import { isSTTAvailable } from "../voice/stt/availability.js";
 import { mergeSttConfigFromAppConfig } from "../voice/stt/config.js";
 import "../voice/stt/index.js";
 import { listDiscussionTranscriptSegments, updateDiscussionCapture } from "./repository.js";

package/dist/src/discussions/service.js

@@ -1,8 +1,8 @@
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
+import { init_transaction, runSqliteWriteTransaction } from "../storage/sqlite/transaction.js";
 import { DISCUSSION_AUDIO_MAX_BYTES, DISCUSSION_MAX_DURATION_MS, DISCUSSION_SEGMENT_MAX_BYTES } from "../../packages/gateway-contract/src/discussions.js";
 import { init_src } from "../../packages/gateway-contract/src/index.js";
-import { init_transaction, runSqliteWriteTransaction } from "../storage/sqlite/transaction.js";
 import { ObjectLinkService } from "../activity/service.js";
 import { DiscussionServiceError } from "./errors.js";
 import { acknowledgeDiscussionCaptureConsent, correctDiscussionTranscriptSegment, createDiscussionCapture, createDiscussionTranscriptSegment, deleteDiscussionSegmentAudio, getDiscussionCapture, getDiscussionCaptureByClientRequestId, getDiscussionCaptureByNoteId, getDiscussionCaptureSettings, getDiscussionMetrics, getDiscussionTranscriptSegment, getLatestDiscussionOrganization, listDiscussionCaptures, listDiscussionTranscriptSegments, updateDiscussionCapture } from "./repository.js";

package/dist/src/execution-environments/worktree-safety.js

@@ -1,7 +1,7 @@
 import { listGitWorktrees } from "./git.js";
 import { resolveExecutionWorktreesRoot } from "./paths.js";
-import { isAbsolute, relative, resolve, sep } from "node:path";
 import { homedir } from "node:os";
+import { isAbsolute, relative, resolve, sep } from "node:path";
 import { lstat } from "node:fs/promises";
 //#region src/execution-environments/worktree-safety.ts
 function isInside(parent, candidate) {

package/dist/src/extensions/activation-context.js

@@ -1,7 +1,7 @@
-import { PROVIDER_ENV_MAP, init_env_keys } from "../providers/env-keys.js";
-import { collectSttProviderConfigEntries } from "../voice/stt/config-slice.js";
 import { getAgentDefaultModelRef, init_schema } from "../config/schema.js";
+import { PROVIDER_ENV_MAP, init_env_keys } from "../providers/env-keys.js";
 import { init_providers, isProviderConfiguredSync } from "../providers/index.js";
+import { collectSttProviderConfigEntries } from "../voice/stt/config-slice.js";
 import { mergeSttConfigFromAppConfig } from "../voice/stt/config.js";
 import "../voice/stt/index.js";
 import { collectTtsProviderConfigEntries } from "../voice/tts/config-slice.js";

package/dist/src/extensions/agent-plugins/auth.js

@@ -1,7 +1,7 @@
 import { init_paths_state, resolveStateDir } from "../../config/paths-state.js";
 import { init_write_file_atomic, writeTextAtomic, writeTextAtomicSync } from "../../infra/write-file-atomic.js";
-import { CredentialResolver, init_credentials } from "../../auth/credentials.js";
 import { pluginName } from "./validation.js";
+import { CredentialResolver, init_credentials } from "../../auth/credentials.js";
 import { isDangerousHostEnvVarName } from "../../infra/host-env-security.js";
 import { join } from "node:path";
 import { existsSync, readFileSync } from "node:fs";

package/dist/src/extensions/agent-plugins/cli-authorization.js

@@ -1,10 +1,10 @@
-import { CredentialResolver, init_credentials } from "../../auth/credentials.js";
 import { parsePluginAuthorizationCheck, pluginAuthorizations, safeAuthorizationUrl } from "./setup-contract.js";
 import { containedPath, expandPluginVariables, resolvePluginCwd, validatePluginServer } from "./validation.js";
 import { spawnProcess } from "../../process/run-process.js";
+import { CredentialResolver, init_credentials } from "../../auth/credentials.js";
 import { expandUserConfig, readPluginUserConfig } from "./user-config.js";
-import { join, resolve } from "node:path";
 import { homedir } from "node:os";
+import { join, resolve } from "node:path";
 import { mkdirSync, readFileSync } from "node:fs";
 import { randomUUID } from "node:crypto";
 //#region src/extensions/agent-plugins/cli-authorization.ts