@xopcai/xopc 0.0.83 → 0.0.85

package/dist/src/config/schema.d.ts

@@ -220,6 +220,12 @@ export declare const AgentDefaultsSchema: z.ZodObject<{
     executeCode: z.ZodOptional<z.ZodObject<{
         enabled: z.ZodOptional<z.ZodBoolean>;
     }, z.core.$strip>>;
+    workflow: z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        maxConcurrency: z.ZodDefault<z.ZodNumber>;
+        maxSubagents: z.ZodDefault<z.ZodNumber>;
+        defaultTimeoutSec: z.ZodDefault<z.ZodNumber>;
+    }, z.core.$strip>>;
     systemPromptOverride: z.ZodOptional<z.ZodString>;
     skills: z.ZodOptional<z.ZodArray<z.ZodString>>;
     tools: z.ZodOptional<z.ZodObject<{
@@ -470,6 +476,12 @@ export declare const AgentsConfigSchema: z.ZodDefault<z.ZodObject<{
         executeCode: z.ZodOptional<z.ZodObject<{
             enabled: z.ZodOptional<z.ZodBoolean>;
         }, z.core.$strip>>;
+        workflow: z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodBoolean>;
+            maxConcurrency: z.ZodDefault<z.ZodNumber>;
+            maxSubagents: z.ZodDefault<z.ZodNumber>;
+            defaultTimeoutSec: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strip>>;
         systemPromptOverride: z.ZodOptional<z.ZodString>;
         skills: z.ZodOptional<z.ZodArray<z.ZodString>>;
         tools: z.ZodOptional<z.ZodObject<{
@@ -965,6 +977,7 @@ export declare const GatewayConfigSchema: z.ZodDefault<z.ZodObject<{
     }, z.core.$strip>>>;
     maxSseConnections: z.ZodOptional<z.ZodNumber>;
     corsOrigins: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    publicUrl: z.ZodOptional<z.ZodString>;
     dangerouslyAllowHostHeaderOriginFallback: z.ZodOptional<z.ZodBoolean>;
     trustedProxies: z.ZodOptional<z.ZodArray<z.ZodString>>;
     allowRealIpFallback: z.ZodOptional<z.ZodBoolean>;
@@ -987,6 +1000,37 @@ export declare const GatewayConfigSchema: z.ZodDefault<z.ZodObject<{
         maxActiveShares: z.ZodDefault<z.ZodNumber>;
         maxFileSize: z.ZodDefault<z.ZodNumber>;
         inlinePreviewMimes: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        directory: z.ZodDefault<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodBoolean>;
+            maxFolderSize: z.ZodDefault<z.ZodNumber>;
+            maxFileCount: z.ZodDefault<z.ZodNumber>;
+            maxDepth: z.ZodDefault<z.ZodNumber>;
+            listingCacheMs: z.ZodDefault<z.ZodNumber>;
+            zipConcurrency: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+    siteShare: z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        publicHostSuffix: z.ZodDefault<z.ZodString>;
+        defaultTtlMs: z.ZodDefault<z.ZodNumber>;
+        maxTtlMs: z.ZodDefault<z.ZodNumber>;
+        maxActiveSites: z.ZodDefault<z.ZodNumber>;
+        static: z.ZodDefault<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodBoolean>;
+            maxRootDirSize: z.ZodDefault<z.ZodNumber>;
+            maxFileCount: z.ZodDefault<z.ZodNumber>;
+            rewriteEnabledByDefault: z.ZodDefault<z.ZodBoolean>;
+        }, z.core.$strip>>;
+        proxy: z.ZodDefault<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodBoolean>;
+            allowedUpstreamHosts: z.ZodDefault<z.ZodArray<z.ZodString>>;
+            allowedUpstreamPorts: z.ZodDefault<z.ZodArray<z.ZodNumber>>;
+            forwardWebSocket: z.ZodDefault<z.ZodBoolean>;
+            bodySizeLimit: z.ZodDefault<z.ZodNumber>;
+            requestTimeoutMs: z.ZodDefault<z.ZodNumber>;
+            wsIdleTimeoutMs: z.ZodDefault<z.ZodNumber>;
+            rewriteSetCookiePath: z.ZodDefault<z.ZodBoolean>;
+        }, z.core.$strip>>;
     }, z.core.$strip>>;
 }, z.core.$strip>>;
 export declare const CronConfigSchema: z.ZodDefault<z.ZodObject<{
@@ -1709,6 +1753,12 @@ export declare const ConfigSchema: z.ZodDefault<z.ZodObject<{
             executeCode: z.ZodOptional<z.ZodObject<{
                 enabled: z.ZodOptional<z.ZodBoolean>;
             }, z.core.$strip>>;
+            workflow: z.ZodOptional<z.ZodObject<{
+                enabled: z.ZodDefault<z.ZodBoolean>;
+                maxConcurrency: z.ZodDefault<z.ZodNumber>;
+                maxSubagents: z.ZodDefault<z.ZodNumber>;
+                defaultTimeoutSec: z.ZodDefault<z.ZodNumber>;
+            }, z.core.$strip>>;
             systemPromptOverride: z.ZodOptional<z.ZodString>;
             skills: z.ZodOptional<z.ZodArray<z.ZodString>>;
             tools: z.ZodOptional<z.ZodObject<{
@@ -1871,6 +1921,7 @@ export declare const ConfigSchema: z.ZodDefault<z.ZodObject<{
         }, z.core.$strip>>>;
         maxSseConnections: z.ZodOptional<z.ZodNumber>;
         corsOrigins: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        publicUrl: z.ZodOptional<z.ZodString>;
         dangerouslyAllowHostHeaderOriginFallback: z.ZodOptional<z.ZodBoolean>;
         trustedProxies: z.ZodOptional<z.ZodArray<z.ZodString>>;
         allowRealIpFallback: z.ZodOptional<z.ZodBoolean>;
@@ -1893,6 +1944,37 @@ export declare const ConfigSchema: z.ZodDefault<z.ZodObject<{
             maxActiveShares: z.ZodDefault<z.ZodNumber>;
             maxFileSize: z.ZodDefault<z.ZodNumber>;
             inlinePreviewMimes: z.ZodDefault<z.ZodArray<z.ZodString>>;
+            directory: z.ZodDefault<z.ZodObject<{
+                enabled: z.ZodDefault<z.ZodBoolean>;
+                maxFolderSize: z.ZodDefault<z.ZodNumber>;
+                maxFileCount: z.ZodDefault<z.ZodNumber>;
+                maxDepth: z.ZodDefault<z.ZodNumber>;
+                listingCacheMs: z.ZodDefault<z.ZodNumber>;
+                zipConcurrency: z.ZodDefault<z.ZodNumber>;
+            }, z.core.$strip>>;
+        }, z.core.$strip>>;
+        siteShare: z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodBoolean>;
+            publicHostSuffix: z.ZodDefault<z.ZodString>;
+            defaultTtlMs: z.ZodDefault<z.ZodNumber>;
+            maxTtlMs: z.ZodDefault<z.ZodNumber>;
+            maxActiveSites: z.ZodDefault<z.ZodNumber>;
+            static: z.ZodDefault<z.ZodObject<{
+                enabled: z.ZodDefault<z.ZodBoolean>;
+                maxRootDirSize: z.ZodDefault<z.ZodNumber>;
+                maxFileCount: z.ZodDefault<z.ZodNumber>;
+                rewriteEnabledByDefault: z.ZodDefault<z.ZodBoolean>;
+            }, z.core.$strip>>;
+            proxy: z.ZodDefault<z.ZodObject<{
+                enabled: z.ZodDefault<z.ZodBoolean>;
+                allowedUpstreamHosts: z.ZodDefault<z.ZodArray<z.ZodString>>;
+                allowedUpstreamPorts: z.ZodDefault<z.ZodArray<z.ZodNumber>>;
+                forwardWebSocket: z.ZodDefault<z.ZodBoolean>;
+                bodySizeLimit: z.ZodDefault<z.ZodNumber>;
+                requestTimeoutMs: z.ZodDefault<z.ZodNumber>;
+                wsIdleTimeoutMs: z.ZodDefault<z.ZodNumber>;
+                rewriteSetCookiePath: z.ZodDefault<z.ZodBoolean>;
+            }, z.core.$strip>>;
         }, z.core.$strip>>;
     }, z.core.$strip>>;
     tunnel: z.ZodOptional<z.ZodDefault<z.ZodObject<{

package/dist/src/config/schema.js

@@ -1,5 +1,6 @@
 import { __esmMin } from "../../_virtual/_rolldown/runtime.js";
 import { checkCacheDir, init_cache_dir_policy } from "../browser/cache-dir-policy.js";
+import { init_public_url, validatePublicUrl } from "./public-url.js";
 import { TelegramAccountConfigSchema, TelegramConfigSchema, TelegramGroupConfigSchema, TelegramTopicConfigSchema, init_config_schema } from "../../extensions/telegram/src/config-schema.js";
 import { WeixinAccountConfigSchema, WeixinConfigSchema, init_config_schema as init_config_schema$1 } from "../../extensions/weixin/src/config-schema.js";
 import { z } from "zod";
@@ -29,6 +30,7 @@ function parseModelRef(ref) {
 var AgentModelRefSchema, AgentImageGenerationModelSchema, AgentDefaultsSchema, AgentConfigSchema, AgentsConfigSchema, BindingMatchSchema, BindingRuleSchema, BindingsConfigSchema, SessionDmScopeSchema, SessionStorageConfigSchema, SessionConfigSchema, ChannelsConfigSchema, SearchProviderEntrySchema, WebSearchConfigSchema, WebsiteBlocklistSchema, WebToolsConfigSchema, ToolsConfigSchema, GatewayAuthRateLimitSchema, GatewaySecuritySchema, GatewayTrustedProxySchema, GatewayAuthSchema, GatewayTailscaleConsentSchema, GatewayTailscaleSchema, GatewayRemoteSchema, GatewayTlsSchema, GatewayModeSchema, HeartbeatConfigSchema, GatewayChannelConnectDeferModeSchema, TunnelConsentSchema, TunnelConfigSchema, WorkspaceImportConfigSchema, WorkspaceConfigSchema, GatewayBindModeSchema, GatewayConfigSchema, CronConfigSchema, ModelsDevConfigSchema, SttProviderConfigCatchallSchema, STTProviderConfigSchema, STTFallbackConfigSchema, MediaUnderstandingCapabilitiesSchema, MediaUnderstandingModelSchema, STTConfigSchema, TtsProviderConfigCatchallSchema, TTSProviderConfigSchema, TTSFallbackConfigSchema, TTSModelOverridesConfigSchema, TTSEdgeConfigSchema, TTSSummarizationConfigSchema, TTSConfigSchema, MessagesConfigSchema, ToolsMediaAudioConfigSchema, ToolsMediaConfigSchema, ProviderAzureConfigSchema, ProviderRequestOverridesSchema, ProviderAuthConfigSchema, ProvidersConfigSchema, ExtensionSecurityConfigSchema, ExtensionSlotsConfigSchema, ExtensionsConfigSchema, UpdateAutoConfigSchema, GoalsConfigSchema, UpdateConfigSchema, CommandsConfigSchema, McpHttpUrlSchema, McpServerSchema, McpConfigSchema, ConfigSchema;
 var init_schema = __esmMin((() => {
 	init_cache_dir_policy();
+	init_public_url();
 	init_config_schema();
 	init_config_schema$1();
 	AgentModelRefSchema = z.union([z.string(), z.object({
@@ -297,6 +299,18 @@ summaryModel: z.string().optional() }).optional(),
 		delegate: z.object({ enabled: z.boolean().optional() }).optional(),
 		/** Sandboxed `execute_code` (programmatic tool calls). Opt-in. */
 		executeCode: z.object({ enabled: z.boolean().optional() }).optional(),
+		/**
+		* Dynamic workflows (`workflow` tool). On by default — disable to remove the
+		* tool from the agent surface entirely. Subagents spawned by workflows still
+		* obey the global `delegate` allowlist; `maxSubagents` caps a single workflow
+		* run, `defaultTimeoutSec` caps wall-clock per run.
+		*/
+		workflow: z.object({
+			enabled: z.boolean().default(true),
+			maxConcurrency: z.number().int().min(1).max(64).default(16),
+			maxSubagents: z.number().int().min(1).max(1e4).default(1e3),
+			defaultTimeoutSec: z.number().int().min(60).max(14400).default(1800)
+		}).optional(),
 		/** Optional full system prompt replacement (merged with per-agent entry; entry wins). */
 		systemPromptOverride: z.string().optional(),
 		/** Optional allowlist of skill names for `<available_skills>`; when set, replaces unfiltered list. */
@@ -629,6 +643,21 @@ strict: z.boolean().optional() }).optional();
 		heartbeat: HeartbeatConfigSchema.optional(),
 		maxSseConnections: z.number().optional(),
 		corsOrigins: z.array(z.string()).optional(),
+		/**
+		* Reverse-proxy publicly reachable URL (e.g. `https://gateway.example.com`).
+		* Optional. When set, mobile pairing surfaces this URL as the preferred
+		* baseUrl and it is auto-added to the browser CORS/CSRF allowlist.
+		* - Must be a URL with no path / query / userinfo.
+		* - Must use `https:` for public hosts; `http:` is only allowed when the
+		*   hostname is in an RFC1918 / `.local` private range.
+		*/
+		publicUrl: z.string().superRefine((value, ctx) => {
+			const result = validatePublicUrl(value);
+			if (result.ok === false) ctx.addIssue({
+				code: "custom",
+				message: `gateway.publicUrl: ${result.message}`
+			});
+		}).optional(),
 		/** Dangerous: allow browser Origin to match the HTTP Host header when not in corsOrigins. */
 		dangerouslyAllowHostHeaderOriginFallback: z.boolean().optional(),
 		/** CIDRs or exact IPs of reverse proxies allowed to terminate auth (trusted-proxy mode). */
@@ -674,7 +703,107 @@ strict: z.boolean().optional() }).optional();
 				"text/markdown",
 				"text/plain",
 				"application/json"
-			])
+			]),
+			/** Folder-sharing controls (browse + ZIP). */
+			directory: z.object({
+				enabled: z.boolean().default(true),
+				/** Maximum folder size in bytes at scan time (default 1 GB). */
+				maxFolderSize: z.number().int().min(1048576).max(10737418240).default(1073741824),
+				/** Maximum number of entries scanned for a single folder share. */
+				maxFileCount: z.number().int().min(1).max(1e5).default(1e3),
+				/** Traversal depth cap (defense against recursive symlinks). */
+				maxDepth: z.number().int().min(1).max(64).default(20),
+				/** In-memory directory listing cache TTL. */
+				listingCacheMs: z.number().int().min(0).max(6e5).default(6e4),
+				/** Maximum simultaneous ZIP streams per share token. */
+				zipConcurrency: z.number().int().min(1).max(8).default(1)
+			}).default({
+				enabled: true,
+				maxFolderSize: 1073741824,
+				maxFileCount: 1e3,
+				maxDepth: 20,
+				listingCacheMs: 6e4,
+				zipConcurrency: 1
+			})
+		}).optional(),
+		/** Site-share configuration (static directory or reverse-proxy a local dev server). */
+		siteShare: z.object({
+			enabled: z.boolean().default(true),
+			/** Public host suffix that subdomain shares are served under. */
+			publicHostSuffix: z.string().min(1).default("share.xopc.ai"),
+			/** Default TTL in ms (default 6h, shorter than file shares — live app surface). */
+			defaultTtlMs: z.number().int().min(6e4).max(6048e5).default(216e5),
+			/** Maximum TTL in ms (default 7 days). */
+			maxTtlMs: z.number().int().min(6e4).max(2592e6).default(6048e5),
+			/** Maximum concurrent active site shares. */
+			maxActiveSites: z.number().int().min(1).max(1e3).default(5),
+			static: z.object({
+				enabled: z.boolean().default(true),
+				/** Maximum total bytes of files served per static site. */
+				maxRootDirSize: z.number().int().min(1048576).max(10737418240).default(524288e3),
+				/** Maximum file count under root dir. */
+				maxFileCount: z.number().int().min(1).max(1e5).default(1e4),
+				/** Whether HTML/CSS rewrite of absolute paths is on by default. */
+				rewriteEnabledByDefault: z.boolean().default(false)
+			}).default({
+				enabled: true,
+				maxRootDirSize: 524288e3,
+				maxFileCount: 1e4,
+				rewriteEnabledByDefault: false
+			}),
+			proxy: z.object({
+				/** Reverse-proxy mode default-enabled per the product brief. */
+				enabled: z.boolean().default(true),
+				/** Upstream host whitelist. Loopback by default. */
+				allowedUpstreamHosts: z.array(z.string().min(1)).default([
+					"127.0.0.1",
+					"localhost",
+					"::1"
+				]),
+				/** Upstream port whitelist (common dev-server ports). */
+				allowedUpstreamPorts: z.array(z.number().int().min(1).max(65535)).default([
+					3e3,
+					3001,
+					4321,
+					5173,
+					8e3,
+					8080,
+					8888,
+					9e3
+				]),
+				/** Whether to forward WebSocket upgrades. */
+				forwardWebSocket: z.boolean().default(true),
+				/** Maximum request body size in bytes (50 MB). */
+				bodySizeLimit: z.number().int().min(0).max(1073741824).default(52428800),
+				/** Per-request HTTP timeout in ms. */
+				requestTimeoutMs: z.number().int().min(1e3).max(6e5).default(3e4),
+				/** Per-WebSocket idle timeout in ms. */
+				wsIdleTimeoutMs: z.number().int().min(1e4).max(36e5).default(3e5),
+				/** Rewrite Set-Cookie Path attribute (subpath mode only). */
+				rewriteSetCookiePath: z.boolean().default(true)
+			}).default({
+				enabled: true,
+				allowedUpstreamHosts: [
+					"127.0.0.1",
+					"localhost",
+					"::1"
+				],
+				allowedUpstreamPorts: [
+					3e3,
+					3001,
+					4321,
+					5173,
+					8e3,
+					8080,
+					8888,
+					9e3
+				],
+				forwardWebSocket: true,
+				bodySizeLimit: 52428800,
+				requestTimeoutMs: 3e4,
+				wsIdleTimeoutMs: 3e5,
+				rewriteSetCookiePath: true
+			})
 		}).optional()
 	}).default({
 		bind: "loopback",