@ixo/oracle-runtime-workers 0.23.0 → 0.25.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ixo/oracle-runtime-workers",
-  "version": "0.23.0",
+  "version": "0.25.0",
   "description": "QiForge oracle runtime for Cloudflare Workers — Durable Object per user (SQLite in WASM over DO storage), Matrix E2EE gateway Durable Object, Hono HTTP/SSE shell.",
   "private": false,
   "publishConfig": {
@@ -33,7 +33,7 @@
     "!src/plugins/pod-creator/test-fixtures.ts"
   ],
   "dependencies": {
-    "@ixo/action-protocol": "0.4.1",
+    "@ixo/action-protocol": "0.5.0",
     "@blocknote/server-util": "0.29.1",
     "@composio/core": "0.10.0",
     "@composio/langchain": "0.9.2",
@@ -65,12 +65,13 @@
     "protobufjs": "^7.6.5",
     "@ixo/topic-protocol": "1.0.0-rc.8",
     "@ixo/common": "1.7.1",
-    "@ixo/ixo-transaction": "0.2.0",
-    "@ixo/ucan": "2.3.0"
+    "@ixo/ucan": "2.3.0",
+    "@ixo/ixo-transaction": "0.2.0"
   },
   "devDependencies": {
     "@cloudflare/vitest-pool-workers": "^0.22.0",
     "@cloudflare/workers-types": "^5.20260825.1",
+    "@ixo/action-protocol-041": "npm:@ixo/action-protocol@0.4.1",
     "@modelcontextprotocol/sdk": "1.30.0",
     "happy-dom": "^19.0.0",
     "typescript": "^5.9.3",

package/src/action-proposals/store.ts

@@ -76,12 +76,6 @@ export const ACTION_PROPOSAL_UNRESOLVED_RETENTION_MS = 180 * 24 * 60 * 60_000;
  * still possible, so the link stays used up.
  */
 export const ACTION_PROPOSAL_EXECUTION_WINDOW_MS = 60 * 60_000;
-/** Cards one agent run may prepare; more is a looping run, refused. */
-export const ACTION_PROPOSALS_PER_RUN = 8;
-/** Cards still awaiting the owner (live `prepared`, `claimed`, hash-less `unknown`) per owner. */
-export const ACTION_PROPOSALS_OPEN_PER_OWNER = 16;
-/** A `prepared` card counts as open this long after creation (its TTL plus clock skew). */
-export const OPEN_PREPARED_MS = 20 * 60_000;
 
 /**
  * A card's claim time from its lifecycle JSON, NULL when the JSON is not
@@ -256,11 +250,6 @@ export class ActionProposalStore {
       }
       if (Date.parse(subject.expiresAt) <= this.now())
         throw new ActionProposalConflict('Proposal expired');
-      await this.assertCapacity(
-        subject.ownerDid,
-        subject.origin.sessionId,
-        subject.origin.runId,
-      );
       await this.db.run(
         `INSERT INTO action_proposals (id,owner_did,invocation_id,session_id,run_id,subject,digest,lifecycle,status,created_at) VALUES (?,?,?,?,?,?,?,?,?,?)`,
         [
@@ -293,35 +282,6 @@ export class ActionProposalStore {
     });
   }
 
-  /**
-   * A looping or injected run must not mint cards without bound: at most
-   * `ACTION_PROPOSALS_PER_RUN` per run and `ACTION_PROPOSALS_OPEN_PER_OWNER`
-   * still awaiting the owner. A resumed tool call never reaches here (it
-   * returns its original card above).
-   */
-  private async assertCapacity(
-    ownerDid: string,
-    sessionId: string,
-    runId: string,
-  ): Promise<void> {
-    const run = await this.db.get<{ n: number }>(
-      `SELECT COUNT(*) AS n FROM action_proposals WHERE owner_did=? AND session_id=? AND run_id=?`,
-      [ownerDid, sessionId, runId],
-    );
-    if ((run?.n ?? 0) >= ACTION_PROPOSALS_PER_RUN)
-      throw new ActionProposalConflict(
-        'Too many action cards in this request; finish the open ones first',
-      );
-    const open = await this.db.get<{ n: number }>(
-      `SELECT COUNT(*) AS n FROM action_proposals WHERE owner_did=? AND ((status='prepared' AND created_at>?) OR status='claimed' OR (status='unknown' AND transaction_hash IS NULL))`,
-      [ownerDid, this.now() - OPEN_PREPARED_MS],
-    );
-    if ((open?.n ?? 0) >= ACTION_PROPOSALS_OPEN_PER_OWNER)
-      throw new ActionProposalConflict(
-        'Too many action cards are open; finish or decline them first',
-      );
-  }
-
   async get(ownerDid: string, id: string): Promise<ActionProposal | null> {
     const row = await this.db.get<{
       subject: string;

package/src/action-proposals/topic-store.ts

@@ -24,9 +24,6 @@ import {
   ActionProposalConflict,
   ACTION_PROPOSAL_RETENTION_MS,
   ACTION_PROPOSAL_UNRESOLVED_RETENTION_MS,
-  ACTION_PROPOSALS_OPEN_PER_OWNER,
-  ACTION_PROPOSALS_PER_RUN,
-  OPEN_PREPARED_MS,
   RECEIPT_MAX_ATTEMPTS,
   RECEIPT_RETRY_BASE_MS,
   RECEIPT_RETRY_MAX_MS,
@@ -163,11 +160,6 @@ export class TopicProposalStore {
       }
       if (Date.parse(subject.expiresAt) <= this.now())
         throw new ActionProposalConflict('Proposal expired');
-      await this.assertCapacity(
-        subject.ownerDid,
-        subject.origin.sessionId,
-        subject.origin.runId,
-      );
       const steps: TopicStepId[] =
         subject.action.name === 'create_topic'
           ? ['anchor', 'body', 'operation', 'snapshot']
@@ -201,40 +193,6 @@ export class TopicProposalStore {
       return TopicProposalV2Schema.parse({ ...subject, digest, lifecycle });
     });
   }
-  /**
-   * At most `ACTION_PROPOSALS_PER_RUN` cards per run and
-   * `ACTION_PROPOSALS_OPEN_PER_OWNER` open ones (prepared in the last 20
-   * minutes, or claimed / unknown in the last two hours: the claim window
-   * plus the execution window). The owner object runs this before the
-   * authority read a refused card would waste; `create` runs it again.
-   */
-  async assertCapacity(
-    owner: string,
-    sessionId: string,
-    runId: string,
-  ): Promise<void> {
-    const now = this.now();
-    const run = await this.db.get<{ n: number }>(
-      `SELECT COUNT(*) AS n FROM topic_action_proposals WHERE owner_did=? AND session_id=? AND run_id=?`,
-      [owner, sessionId, runId],
-    );
-    if ((run?.n ?? 0) >= ACTION_PROPOSALS_PER_RUN)
-      throw new ActionProposalConflict(
-        'Too many action cards in this request; finish the open ones first',
-      );
-    const open = await this.db.get<{ n: number }>(
-      `SELECT COUNT(*) AS n FROM topic_action_proposals WHERE owner_did=? AND ((status='prepared' AND created_at>?) OR (status IN ('claimed','unknown') AND created_at>?))`,
-      [
-        owner,
-        now - OPEN_PREPARED_MS,
-        now - OPEN_PREPARED_MS - TOPIC_EXECUTION_WINDOW_MS - 40 * 60_000,
-      ],
-    );
-    if ((open?.n ?? 0) >= ACTION_PROPOSALS_OPEN_PER_OWNER)
-      throw new ActionProposalConflict(
-        'Too many action cards are open; finish or decline them first',
-      );
-  }
   async get(owner: string, id: string): Promise<TopicActionProposal | null> {
     const row = await this.db.get<{
       subject: string;

package/src/core/env.ts

@@ -129,7 +129,10 @@ export const baseEnvSchema = z.object({
   ORACLE_DID: z.string().min(1),
   /**
    * On-chain entity DID surfaced to the agent as `identity.entityDid`. Falls
-   * back to `ORACLE_DID` when unset (see `createRuntimeCore`).
+   * back to `ORACLE_DID` when unset (see `createRuntimeCore`) for rooms and
+   * feedback. The memory plugin redeclares it as required
+   * (`did:ixo:entity:<32 hex>`): the Memory Engine keys every space by it and
+   * never receives the fallback.
    */
   ORACLE_ENTITY_DID: z.string().min(1).optional(),
   NETWORK: z.enum(['mainnet', 'testnet', 'devnet']).default('mainnet'),

package/src/delivery/plan.ts

@@ -163,7 +163,10 @@ export function draftReplyPlan(input: {
       else parts.push({ kind: 'spill', key: `step-${i}`, spill: shape.spill });
     }
     for (const call of step.toolCalls) {
-      if (call.name === 'request_hub_action') {
+      if (
+        call.name === 'request_hub_action' ||
+        call.name === 'request_hub_transfer'
+      ) {
         try {
           const result = JSON.parse(input.toolResults.get(call.id) ?? 'null');
           if (result?.status === 'prepared') {

package/src/do/contracts.ts

@@ -85,7 +85,6 @@ export interface OracleWorkerEnv {
   AUTH_HUB_URL?: string;
   AUTH_HUB_CHANNEL_SERVICE_KEY?: string;
   HUB_ACTIONS_ENABLED?: string;
-  AUTH_HUB_ACTION_OUTCOME_KEY?: string;
 
   // --- matrix -------------------------------------------------------------
   MATRIX_BASE_URL: string;

package/src/do/user-oracle-do.ts

@@ -39,6 +39,11 @@ import type {
 import { ChannelTurns } from '../channels/turns';
 import { HubActionClient } from '../hub-actions/client';
 import { prepareHubAction } from '../hub-actions/request';
+import {
+  bankReceiptSummary,
+  describeAmount,
+  toBaseUnits,
+} from '../hub-actions/transfer';
 import {
   HUB_CHECK_AFTER_EXPIRY_MS,
   HubActionRefused,
@@ -49,6 +54,9 @@ import {
   canonicalJson,
   type ActionCapabilitiesV1,
   type HubActionOptionsV2,
+  type HubActionOptionsV3,
+  parseOperation,
+  v1Receipt,
   type ActionOperationV1,
   type ActionOutcomeV1,
 } from '@ixo/action-protocol';
@@ -381,6 +389,10 @@ import {
   fetchMemorySchemaDump,
   getMemorySchemaDump,
 } from '../plugins/memory/memory-tools';
+import {
+  MEMORY_ENTITY_HEADER,
+  memoryEntityDid,
+} from '../plugins/memory/memory-entity';
 import {
   contentToText,
   isSummarizationMessage,
@@ -595,6 +607,25 @@ const ACTION_TICK_BUDGET_MS = 15_000;
 const ACTION_PRUNE_INTERVAL_MS = 60 * 60_000;
 /** How long the Hub's capabilities answer is reused per object. */
 const HUB_CAPABILITIES_CACHE_MS = 60_000;
+/** A Hub network name as the chain-id config key it is configured under. */
+/**
+ * Whether two Hub outcomes are the same event. Receipts are compared in the
+ * 0.4.1 shape: an action prepared at protocol version 2 (runtime 0.23.0) gets
+ * its callback without the 0.5.0 bank fields (`denom`, `amountBaseUnits`),
+ * while the confirming status read (version 3) carries them.
+ */
+function sameHubOutcome(a: ActionOutcomeV1, b: ActionOutcomeV1): boolean {
+  return (
+    canonicalJson({ ...a, receipt: v1Receipt(a.receipt) }) ===
+    canonicalJson({ ...b, receipt: v1Receipt(b.receipt) })
+  );
+}
+
+const HUB_NETWORK_CHAIN = {
+  'ixo mainnet': 'mainnet',
+  'ixo testnet': 'testnet',
+  'ixo devnet': 'devnet',
+} as const;
 /** How long a `hub_action_options` answer vouches for a Gmail connection. */
 const HUB_OPTIONS_REUSE_MS = 10 * 60_000;
 /** A channel poll waits this long for Auth Hub, once per poll at most. */
@@ -998,8 +1029,10 @@ export function createUserOracleDO(opts: UserOracleDOOptions) {
       at: number;
     } | null = null;
     /** The last `hub_action_options` answer for this owner (Gmail connection checks). */
-    private lastHubOptions: { value: HubActionOptionsV2; at: number } | null =
-      null;
+    private lastHubOptions: {
+      value: HubActionOptionsV2 | HubActionOptionsV3;
+      at: number;
+    } | null = null;
     private topicProposals: TopicProposalStore | null = null;
     /** `assertTopicDependenciesMemo`: card id and digest -> when it passed. */
     private topicAuthorityMemo: Map<string, number> | undefined;
@@ -2183,8 +2216,9 @@ export function createUserOracleDO(opts: UserOracleDOOptions) {
                   requestKey: string;
                   operation: ActionOperationV1;
                 }) => this.requestHubAction(input),
+                transfer: (input) => this.transferHubAction(input),
                 status: (ownerDid: string, actionId: string) =>
-                  this.statusHubAction(ownerDid, actionId),
+                  this.hubActionStatusForTool(ownerDid, actionId),
               },
             }
           : {}),
@@ -3203,11 +3237,13 @@ export function createUserOracleDO(opts: UserOracleDOOptions) {
         this.markDirty();
         await this.requestHousekeeping(Date.now() + 1000);
       }
-      const hubActionOutcomes = await this.hubOutcomesForRun(
-        ownerDid,
-        result.sessionId,
-        result.runId,
-      );
+      // The gateway parses with @ixo/action-protocol 0.4.1, whose bank
+      // receipt is exact: the 0.5.0 `denom`/`amountBaseUnits` fields are
+      // dropped here (the owner-facing amount line comes from
+      // hub_action_status instead), so the emitted shape stays 0.4.1.
+      const hubActionOutcomes = (
+        await this.hubOutcomesForRun(ownerDid, result.sessionId, result.runId)
+      ).map((outcome) => ({ ...outcome, receipt: v1Receipt(outcome.receipt) }));
       return {
         ...result,
         ...(actionOutcomes.length ? { actionOutcomes } : {}),
@@ -3215,14 +3251,64 @@ export function createUserOracleDO(opts: UserOracleDOOptions) {
       };
     }
 
-    private async hubActionOptions(input: {
+    /** `hub_action_options` and the transfer path: version 3, with the owner's tokens. */
+    private async hubActionOptions(
+      input: {
+        ownerDid: string;
+        provider: string;
+        bindingId: string;
+        bindingRevision: number;
+      },
+      bindingChecked = false,
+    ): Promise<HubActionOptionsV3> {
+      const client = this.hubActionClient;
+      if (!client || input.ownerDid !== this.userDid)
+        throw new Error('Hub action options are unavailable for this owner');
+      return this.readHubOptions(input, bindingChecked, (binding) =>
+        client.options(binding),
+      );
+    }
+
+    /**
+     * Read the owner's options for the trusted binding (validated here
+     * unless the caller already validated it in this same call) and keep
+     * the read for the Gmail connection check.
+     */
+    private async readHubOptions<
+      T extends HubActionOptionsV2 | HubActionOptionsV3,
+    >(
+      input: {
+        ownerDid: string;
+        provider: string;
+        bindingId: string;
+        bindingRevision: number;
+      },
+      bindingChecked: boolean,
+      read: (binding: {
+        bindingId: string;
+        bindingRevision: number;
+      }) => Promise<T>,
+    ): Promise<T> {
+      if (!bindingChecked) await this.assertHubBinding(input);
+      const options = await read(input);
+      if (
+        options.ownerDid !== input.ownerDid ||
+        options.bindingId !== input.bindingId ||
+        options.bindingRevision !== input.bindingRevision
+      )
+        throw new Error(
+          'Hub action options do not match this owner and binding',
+        );
+      this.lastHubOptions = { value: options, at: Date.now() };
+      return options;
+    }
+
+    private async assertHubBinding(input: {
       ownerDid: string;
       provider: string;
       bindingId: string;
       bindingRevision: number;
-    }) {
-      if (!this.hubActionClient || input.ownerDid !== this.userDid)
-        throw new Error('Hub action options are unavailable for this owner');
+    }): Promise<void> {
       await assertActiveChannelBinding(
         {
           userDid: input.ownerDid,
@@ -3234,17 +3320,34 @@ export function createUserOracleDO(opts: UserOracleDOOptions) {
         },
         this.env,
       );
-      const options = await this.hubActionClient.options(input);
+    }
+
+    /**
+     * Only a run an inbound channel message started may prepare a review:
+     * a scheduled or background run has no user asking for it. Checked
+     * before any Hub read.
+     */
+    private async assertHubTurnOrigin(input: {
+      ownerDid: string;
+      sessionId: string;
+      runId: string;
+    }): Promise<void> {
+      const record = await this.runStore?.get(input.runId);
+      const turn = record
+        ? (JSON.parse(record.request) as StoredRunRequest).turn
+        : null;
       if (
-        options.ownerDid !== input.ownerDid ||
-        options.bindingId !== input.bindingId ||
-        options.bindingRevision !== input.bindingRevision
+        !turn ||
+        turn.client !== 'channel' ||
+        !turn.channel?.remoteMessageRef ||
+        turn.identity.userDid !== input.ownerDid ||
+        turn.sessionId !== input.sessionId ||
+        turn.sessionId.startsWith(SYNTHETIC_SESSION_PREFIX)
       )
-        throw new Error(
-          'Hub action options do not match this owner and binding',
+        throw new HubActionRefused(
+          'limit',
+          'Reviews are prepared only in reply to a message from the user.',
         );
-      this.lastHubOptions = { value: options, at: Date.now() };
-      return options;
     }
 
     /**
@@ -3276,7 +3379,9 @@ export function createUserOracleDO(opts: UserOracleDOOptions) {
         cached.value.bindingId === input.bindingId &&
         cached.value.bindingRevision === input.bindingRevision
           ? cached.value
-          : await this.hubActionOptions(input);
+          : await this.readHubOptions(input, true, (binding) =>
+              this.hubActionClient!.connectionOptions(binding),
+            );
       if (
         !options.connections.some(
           (c) =>
@@ -3316,50 +3421,32 @@ export function createUserOracleDO(opts: UserOracleDOOptions) {
       return value;
     }
 
-    private async requestHubAction(input: {
-      ownerDid: string;
-      sessionId: string;
-      runId: string;
-      requestId: string;
-      provider: string;
-      bindingId: string;
-      bindingRevision: number;
-      requestKey: string;
-      operation: ActionOperationV1;
-    }) {
+    /**
+     * `checked`: the transfer path already ran the turn-origin refusal and
+     * validated the binding in this same call.
+     */
+    private async requestHubAction(
+      input: {
+        ownerDid: string;
+        sessionId: string;
+        runId: string;
+        requestId: string;
+        provider: string;
+        bindingId: string;
+        bindingRevision: number;
+        requestKey: string;
+        operation: ActionOperationV1;
+      },
+      checked = false,
+    ) {
       const store = this.hubActionStore;
       const client = this.hubActionClient;
       if (!store || !client || input.ownerDid !== this.userDid)
         throw new Error('Hub actions are unavailable for this channel');
-      // Only a run an inbound channel message started may prepare a review:
-      // a scheduled or background run has no user asking for it.
-      const record = await this.runStore?.get(input.runId);
-      const turn = record
-        ? (JSON.parse(record.request) as StoredRunRequest).turn
-        : null;
-      if (
-        !turn ||
-        turn.client !== 'channel' ||
-        !turn.channel?.remoteMessageRef ||
-        turn.identity.userDid !== input.ownerDid ||
-        turn.sessionId !== input.sessionId ||
-        turn.sessionId.startsWith(SYNTHETIC_SESSION_PREFIX)
-      )
-        throw new HubActionRefused(
-          'limit',
-          'Reviews are prepared only in reply to a message from the user.',
-        );
-      await assertActiveChannelBinding(
-        {
-          userDid: input.ownerDid,
-          channel: {
-            provider: input.provider,
-            bindingId: input.bindingId,
-            bindingRevision: input.bindingRevision,
-          },
-        },
-        this.env,
-      );
+      if (!checked) {
+        await this.assertHubTurnOrigin(input);
+        await this.assertHubBinding(input);
+      }
       await this.assertGmailOperationAllowed(input);
       const reference = await prepareHubAction(
         {
@@ -3381,6 +3468,107 @@ export function createUserOracleDO(opts: UserOracleDOOptions) {
       return reference;
     }
 
+    /**
+     * A bank send of one of the owner's listed tokens. The token comes from
+     * a fresh options read (its balance must be current), the amount is
+     * converted to base units with the listed decimals (unverified tokens
+     * list 0: base units), refused when zero or above the balance; the
+     * network is the account's capability, the chain id this Worker's own
+     * for that network, the sender the owner's account. No fee is sent: the
+     * Hub simulates gas and sets it.
+     */
+    private async transferHubAction(input: {
+      ownerDid: string;
+      sessionId: string;
+      runId: string;
+      requestId: string;
+      provider: string;
+      bindingId: string;
+      bindingRevision: number;
+      requestKey: string;
+      toAddress: string;
+      denom: string;
+      amount: string;
+      memo: string;
+    }) {
+      if (!this.hubActionStore || input.ownerDid !== this.userDid)
+        throw new Error('Hub actions are unavailable for this channel');
+      await this.assertHubTurnOrigin(input);
+      await this.assertHubBinding(input);
+      const options = await this.hubActionOptions(input, true);
+      const tokens = options.transfer?.tokens;
+      if (!tokens?.length)
+        throw new HubActionRefused(
+          'refused',
+          'Bank sends are not available for this owner right now (no token list from Auth Hub).',
+        );
+      const token = tokens.find((item) => item.denom === input.denom);
+      if (!token)
+        throw new HubActionRefused(
+          'refused',
+          `That token is not in the owner's list; use a denom exactly as hub_action_options lists it (${tokens
+            .map((item) => item.denom)
+            .slice(0, 10)
+            .join(', ')}).`,
+        );
+      const amountBaseUnits = toBaseUnits(input.amount, token.decimals);
+      if (amountBaseUnits > BigInt(token.balanceBaseUnits))
+        throw new HubActionRefused(
+          'refused',
+          `The owner holds ${describeAmount(token.balanceBaseUnits, token)}, less than this transfer.`,
+        );
+      const capabilities = await this.cachedHubCapabilities();
+      if (!capabilities.network)
+        throw new HubActionRefused(
+          'refused',
+          'Bank sends are not enabled for this oracle account.',
+        );
+      const network = HUB_NETWORK_CHAIN[capabilities.network];
+      const chainId = chainIdsFromConfig(chainIdConfigSchema.parse(this.env))[
+        network
+      ];
+      let operation: ActionOperationV1;
+      try {
+        operation = parseOperation({
+          kind: 'ixo.bank.send.v1',
+          chainId,
+          network: capabilities.network,
+          fromAddress: input.ownerDid.replace(/^did:ixo:/, ''),
+          toAddress: input.toAddress,
+          amountBaseUnits: amountBaseUnits.toString(),
+          denom: token.denom,
+          memo: input.memo,
+        });
+      } catch (error) {
+        // Only the protocol refusing the operation built from the model's
+        // fields (an invalid recipient or memo) is the model's to fix.
+        throw new HubActionRefused(
+          'refused',
+          `The transfer is incomplete (${error instanceof Error ? error.message : String(error)}).`,
+        );
+      }
+      const reference = await this.requestHubAction(
+        { ...input, operation },
+        true,
+      );
+      await this.hubActionStore.setToken(reference.id, token);
+      return reference;
+    }
+
+    /**
+     * `hub_action_status`: the outcome plus, for a bank send, the
+     * owner-facing line (amount from the token stored at preparation).
+     */
+    private async hubActionStatusForTool(
+      ownerDid: string,
+      actionId: string,
+    ): Promise<{ outcome: ActionOutcomeV1 | null; summary: string | null }> {
+      const outcome = await this.statusHubAction(ownerDid, actionId);
+      if (!outcome) return { outcome, summary: null };
+      const token = await this.hubActionStore!.token(ownerDid, actionId);
+      return { outcome, summary: bankReceiptSummary(outcome.receipt, token) };
+    }
+
     private async statusHubAction(
       ownerDid: string,
       actionId: string,
@@ -3471,15 +3659,24 @@ export function createUserOracleDO(opts: UserOracleDOOptions) {
         input.reference.id,
       );
       if (!held || !this.hubActionClient) throw new Error('Unknown Hub action');
+      if (canonicalJson(input.reference) !== canonicalJson(held.reference))
+        throw new Error('Hub outcome does not match the prepared action');
+      // A replay of an outcome already confirmed and stored (a Hub retry,
+      // a callback delivered twice) is acknowledged without a Hub read.
+      const stored = await this.hubActionStore!.outcomeAt(
+        input.ownerDid,
+        input.reference.id,
+        input.sequence,
+      );
+      if (stored && sameHubOutcome(stored, input)) return;
       const remote = await this.hubActionClient.status(input.reference.id);
       if (
         !remote.outcome ||
         remote.ownerDid !== input.ownerDid ||
         canonicalJson(remote.reference) !== canonicalJson(held.reference) ||
-        canonicalJson(input.reference) !== canonicalJson(held.reference) ||
         remote.outcome.sequence < input.sequence ||
         (remote.outcome.sequence === input.sequence &&
-          canonicalJson(remote.outcome) !== canonicalJson(input))
+          !sameHubOutcome(remote.outcome, input))
       )
         throw new Error(
           'Hub outcome was not confirmed by authenticated status',
@@ -3728,13 +3925,6 @@ export function createUserOracleDO(opts: UserOracleDOOptions) {
         input.evidenceRefs,
       );
       if (prior) return prior;
-      // The caps before the authority read it would waste (create checks
-      // them again, atomically).
-      await topics.assertCapacity(
-        this.userDid,
-        input.origin.sessionId,
-        input.origin.runId,
-      );
       const rpc = {
         devnet: this.env.ACTION_PROPOSALS_RPC_DEVNET,
         testnet: this.env.ACTION_PROPOSALS_RPC_TESTNET,
@@ -4341,6 +4531,9 @@ export function createUserOracleDO(opts: UserOracleDOOptions) {
           const v = this.core.validatedEnv['MEMORY_ENGINE_URL'];
           return typeof v === 'string' && v.length > 0 ? v : undefined;
         })(),
+        // The configured entity only: `identity.entityDid` falls back to
+        // `ORACLE_DID`, which the engine refuses as a space key.
+        entityDid: memoryEntityDid(this.core.validatedEnv['ORACLE_ENTITY_DID']),
         getSession: async (id) => {
           const snapshot = this.historySnapshots.get(id);
           const row =
@@ -4429,7 +4622,11 @@ export function createUserOracleDO(opts: UserOracleDOOptions) {
       this.userContextFetcher ??= new UserContextFetcher(
         {
           memoryEngineUrl: settings.engineUrl,
-          oracleDid: this.env.ORACLE_DID,
+          // The configured entity only: `identity.entityDid` falls back to
+          // `ORACLE_DID`, which the engine refuses as a space key.
+          entityDid: memoryEntityDid(
+            this.core.validatedEnv['ORACLE_ENTITY_DID'],
+          ),
           // Looked up per call, not captured: a working-copy reset replaces
           // the ambient services while a gather may still be running.
           ucan: {
@@ -5383,6 +5580,15 @@ export function createUserOracleDO(opts: UserOracleDOOptions) {
       if (!ambient || typeof url !== 'string' || url.length === 0) {
         return { error: 'MEMORY_MCP_URL is not configured' };
       }
+      const entityDid = memoryEntityDid(
+        this.core.validatedEnv['ORACLE_ENTITY_DID'],
+      );
+      if (!entityDid) {
+        return {
+          error:
+            'ORACLE_ENTITY_DID is not a domain entity DID (did:ixo:entity:<32 hex>)',
+        };
+      }
       const memoryDid = await ambient.ucan.resolveServiceDid(url);
       if (!memoryDid)
         return { error: 'memory engine DID could not be resolved' };
@@ -5400,6 +5606,7 @@ export function createUserOracleDO(opts: UserOracleDOOptions) {
         Authorization: `Bearer ${invocation}`,
         'X-Auth-Type': 'ucan',
         'User-Agent': 'LangChain-MCP-Client/1.0',
+        [MEMORY_ENTITY_HEADER]: entityDid,
         ...(room?.roomId ? { 'x-room-id': room.roomId } : {}),
       };
       try {