@k2b/cloud 0.27.0 → 0.29.0

package/src/ai/routes.ts

@@ -10,6 +10,7 @@ import {
   err,
   fail,
   getLocale,
+  getTimeZone,
   ok,
   type RequestActor,
   rateLimit,
@@ -17,12 +18,15 @@ import {
   v,
 } from "../server";
 import { isRequestCredentialCurrent } from "../server/middleware/auth";
+import { ImageMetadataError } from "../services/image-metadata";
 import { logger } from "../services/logging";
 import { coreSettings } from "../services/settings/api";
+import { readThemeFromCookieHeader } from "../shared/theme";
 import type { AiToolApprovalContext } from "./approvals";
-import { assistantAiSettingsState, listAssistantAiModels, selectAssistantAiModelId } from "./assistant-models";
+import { assistantAiSettingsState, listAssistantAiModels, resolveAssistantAudioModel, selectAssistantAiModelId } from "./assistant-models";
 import { AI_AUDIO_MAX_BYTES } from "./audio-format";
 import { buildAiCapabilityCatalog } from "./capabilities";
+import { aiChatMessages } from "./chat/messages";
 import { getAiChatQuotas } from "./chat-quotas";
 import { createConfiguredDefaultCloudAiTools } from "./default-tools";
 import { enqueueAiDictation } from "./dictation-runtime";
@@ -56,7 +60,6 @@ import {
   queuedMessageAccepted,
   updateQueuedMessage,
 } from "./message-queue";
-import { aiModelAccess } from "./model-access";
 import { personalAiModelPolicy } from "./personal-agent";
 import { aiActorUser, aiPrefsUserId, aiUserPrefs } from "./prefs";
 import { aiProjects } from "./projects";
@@ -82,7 +85,6 @@ import { aiConversations } from "./store";
 import { createAiConversationStreamResponse, loadAiStreamState } from "./stream";
 import { composeAiSystemPrompt } from "./system-prompt";
 import { aiToolPromptHints } from "./tools";
-import { resolveAiAudioModel } from "./transcription";
 import type { AiConversation, AiModelPolicy, AiTurn } from "./types";
 
 /** Everything a resolved, authorized request needs to run against the shared runtime. */
@@ -418,7 +420,10 @@ export const aiRoutes = (() => {
         const skillCatalog = selectAiSkillCatalog(availableSkills, previewProfile?.contextWindow ?? 0, "");
         const tools = toolsSupported
           ? [
-              ...(await createConfiguredDefaultCloudAiTools()),
+              ...(await createConfiguredDefaultCloudAiTools({
+                accessSubject: c.get("accessSubject"),
+                allowedDataBoundaries: ctx.modelPolicy.allowedDataBoundaries,
+              })),
               ...(memoryEnabled ? [createCloudAiMemoryTool()] : []),
               ...(availableSkills.length ? [createCloudAiLoadSkillTool(c.get("accessSubject"))] : []),
               ...(skillCatalog.omitted > 0 ? [createCloudAiSearchSkillsTool(c.get("accessSubject"))] : []),
@@ -524,7 +529,14 @@ export const aiRoutes = (() => {
             return respond(c, fail(err.internal("The live capability catalog is unavailable.")));
           }
         }
-        const builtInNames = new Set((await createConfiguredDefaultCloudAiTools()).map((tool) => tool.def.name));
+        const builtInNames = new Set(
+          (
+            await createConfiguredDefaultCloudAiTools({
+              accessSubject: c.get("accessSubject"),
+              allowedDataBoundaries: ctx.modelPolicy.allowedDataBoundaries,
+            })
+          ).map((tool) => tool.def.name),
+        );
         const preloadTools = (body.preloadTools ?? []).map((requested) => {
           if ("name" in requested) return builtInNames.has(requested.name) ? requested.name : null;
           return (
@@ -884,6 +896,8 @@ export const aiRoutes = (() => {
             userMessage: message,
             actor: ctx.actor,
             locale: getLocale(c),
+            theme: readThemeFromCookieHeader(c.req.header("cookie")),
+            timeZone: getTimeZone(c),
             requestedModelId: body.modelProfileId ?? project?.defaultModelProfileId ?? undefined,
             modelPolicy: ctx.modelPolicy,
             project: project ?? undefined,
@@ -991,6 +1005,8 @@ export const aiRoutes = (() => {
             userMessage: message,
             actor: ctx.actor,
             locale: getLocale(c),
+            theme: readThemeFromCookieHeader(c.req.header("cookie")),
+            timeZone: getTimeZone(c),
             requestedModelId,
             modelPolicy: ctx.modelPolicy,
             systemPrompt,
@@ -1172,11 +1188,7 @@ export const aiRoutes = (() => {
             conversationId: conversation.id,
             userId: ctx.ownerUserId,
             bytes: new Uint8Array(await file.arrayBuffer()),
-            resolveModel: async () => {
-              const model = await resolveAiAudioModel({ allowedDataBoundaries: ctx.modelPolicy.allowedDataBoundaries });
-              await aiModelAccess.assertAllowed(model.profile.id, c.get("accessSubject"));
-              return model;
-            },
+            resolveModel: () => resolveAssistantAudioModel(c.get("accessSubject"), ctx.modelPolicy.allowedDataBoundaries),
           });
           await enqueueAiDictation(dictation.id).catch(() => undefined); // The DB sweep heals failed delivery.
           return respond(c, ok(dictation));
@@ -1306,6 +1318,8 @@ export const aiRoutes = (() => {
           });
           return respond(c, ok({ file: stat }));
         } catch (error) {
+          if (error instanceof ImageMetadataError)
+            return respond(c, { ok: false, error: aiChatMessages(getLocale(c)).malformedImage, status: 422, code: error.code });
           logger("ai:files").warn("Conversation upload failed", {
             code: "file_upload_failed",
             conversationId: conversation.id,
@@ -1366,6 +1380,8 @@ export const aiRoutes = (() => {
             allowUserOverwrite: existing?.origin === "user",
           });
         } catch (error) {
+          if (error instanceof ImageMetadataError)
+            return respond(c, { ok: false, error: aiChatMessages(getLocale(c)).malformedImage, status: 422, code: error.code });
           return respond(c, fail(err.badInput(error instanceof Error ? error.message : "Failed to write file")));
         }
         return respond(c, ok({ file: await aiFileStore.stat({ conversationId: conversation.id, path }) }));

package/src/ai/run-timeout.ts

@@ -1,12 +1,11 @@
+import type { AiTurnError } from "./types";
+
 /** Preserve why execution stopped instead of reporting an operator deadline as a user abort. */
 export class AiRunTimeout extends Error {
   constructor(readonly budgetMs: number | null) {
     super("AI_RUN_TIMEOUT");
   }
-  messageFor(locale?: string): string {
-    const minutes = this.budgetMs ? this.budgetMs / 60_000 : null;
-    return locale?.startsWith("de")
-      ? `Laufzeitlimit${minutes ? ` von ${minutes} Minuten` : ""} erreicht. Du kannst die Aufgabe mit einer neuen Nachricht fortsetzen.`
-      : `Run time limit${minutes ? ` of ${minutes} minutes` : ""} reached. You can continue the task with a new message.`;
+  turnError(): AiTurnError {
+    return this.budgetMs ? { code: "time_limit", limitMinutes: Math.round(this.budgetMs / 60_000) } : { code: "time_limit" };
   }
 }

package/src/ai/runtime.ts

@@ -94,6 +94,8 @@ export type SubmitAiChatTurnInput = {
   userMessage: Message;
   actor?: RequestActor;
   locale?: string;
+  theme?: "light" | "dark";
+  timeZone?: string;
   modelPolicy?: AiModelPolicy;
   requestedModelId?: string;
   /** Optional instructions that apply only to this turn. */
@@ -155,6 +157,8 @@ export const prepareAiChatTurn = async (input: SubmitAiChatTurnInput) => {
     chatId: input.chatId,
     actor: input.actor,
     ...(input.locale ? { locale: input.locale } : {}),
+    ...(input.theme ? { theme: input.theme } : {}),
+    ...(input.timeZone ? { timeZone: input.timeZone } : {}),
     modelPolicy: input.modelPolicy,
     requestedModelId,
     systemPrompt: input.systemPrompt,
@@ -190,6 +194,8 @@ export const deliverAiInterChatMessage = async (input: {
   chatId?: string;
   actor: RequestActor;
   locale?: string;
+  theme?: "light" | "dark";
+  timeZone?: string;
   modelPolicy?: AiModelPolicy;
   systemPrompt?: string;
   project?: AiChatTurnRunConfig["project"];
@@ -209,6 +215,8 @@ export const deliverAiInterChatMessage = async (input: {
     chatId: input.chatId,
     actor: input.actor,
     ...(input.locale ? { locale: input.locale } : {}),
+    ...(input.theme ? { theme: input.theme } : {}),
+    ...(input.timeZone ? { timeZone: input.timeZone } : {}),
     modelPolicy: input.modelPolicy,
     systemPrompt: input.systemPrompt,
     project: input.project,

package/src/ai/settings.ts

@@ -1,5 +1,6 @@
 import { z } from "zod";
 import { coreSettings } from "../services";
+import { stripImageDataUrlMetadata } from "../services/image-metadata";
 import { AiModelPricingSchema } from "../shared/ai-costs";
 import {
   AI_REQUEST_HEADERS_PROVIDER_ERROR,
@@ -152,6 +153,18 @@ const normalizeProfile = (raw: z.infer<typeof ModelProfileSchema>): AiModelProfi
   };
 };
 
+/** Sanitize every submitted model logo, including unchanged images from stored profiles. */
+export const prepareAiModelProfileImages = (rawJson: string): string => {
+  const raw: unknown = JSON.parse(rawJson);
+  if (!Array.isArray(raw)) return rawJson;
+  return JSON.stringify(
+    raw.map((profile: unknown) => {
+      if (typeof profile !== "object" || profile === null || !("image" in profile) || typeof profile.image !== "string") return profile;
+      return { ...profile, image: stripImageDataUrlMetadata(profile.image) };
+    }),
+  );
+};
+
 export const parseAiModelProfiles = (rawJson: string): { profiles: AiModelProfile[]; error?: AiSettingsError } => {
   let raw: unknown;
   try {
@@ -468,13 +481,18 @@ export const selectAiModelProfile = (
   const modelId = resolvePolicyModelId(state, policy, requestedModelId);
   const profile = state.profiles.find((candidate) => candidate.id === modelId);
   if (!profile || !matchesPolicy(profile, policy)) {
-    throw Object.assign(new Error(`AI model "${modelId}" is not allowed for this chat.`), {
-      aiError: {
-        code: "model_policy_mismatch",
-        message: `AI model "${modelId}" is not allowed for this chat.`,
-        fields: { modelProfileId: "Choose an allowed enabled model profile." },
-      } satisfies AiSettingsError,
-    });
+    throw Object.assign(
+      new Error(
+        `AI model "${modelId}" is unavailable or not allowed for this chat or data boundary. An administrator can enable a compatible model permitted by the application policy in the AI settings.`,
+      ),
+      {
+        aiError: {
+          code: "model_policy_mismatch",
+          message: `AI model "${modelId}" is unavailable or not allowed for this chat or data boundary. An administrator can enable a compatible model permitted by the application policy in the AI settings.`,
+          fields: { modelProfileId: "Choose an allowed enabled model profile." },
+        } satisfies AiSettingsError,
+      },
+    );
   }
   return profile;
 };
@@ -497,8 +515,19 @@ const visionModelPolicy = (modelId: string, allowedDataBoundaries?: AiDataBounda
 export const resolveAiVisionModel = async (allowedDataBoundaries?: AiDataBoundary[]): Promise<AiResolvedModel> => {
   const state = await readAiSettingsState();
   if (!state.ok) throw Object.assign(new Error(state.error.message), { aiError: state.error });
+  if (!state.enabled) {
+    throw Object.assign(new Error("AI is disabled. An administrator can enable AI in the AI settings."), {
+      aiError: {
+        code: "ai_disabled",
+        message: "AI is disabled. An administrator can enable AI in the AI settings.",
+      } satisfies AiSettingsError,
+    });
+  }
   const modelId = (state.visionModelId ?? "").trim();
-  if (!modelId) throw new Error("No vision model is configured.");
+  if (!modelId)
+    throw new Error(
+      "Image inspection is not set up: no vision model is configured. An administrator can configure a vision model in the AI settings.",
+    );
   return resolveAiModelFromState(state, visionModelPolicy(modelId, allowedDataBoundaries));
 };
 
@@ -520,8 +549,11 @@ export const resolveAiModelFromState = async (
 ): Promise<AiResolvedModel> => {
   if (!state.ok) throw Object.assign(new Error(state.error.message), { aiError: state.error });
   if (!state.enabled) {
-    throw Object.assign(new Error("AI is disabled."), {
-      aiError: { code: "ai_disabled", message: "AI is disabled." } satisfies AiSettingsError,
+    throw Object.assign(new Error("AI is disabled. An administrator can enable AI in the AI settings."), {
+      aiError: {
+        code: "ai_disabled",
+        message: "AI is disabled. An administrator can enable AI in the AI settings.",
+      } satisfies AiSettingsError,
     });
   }
 
@@ -529,13 +561,18 @@ export const resolveAiModelFromState = async (
 
   const credential = providerSupportsCredential(profile.provider) ? await getAiCredential(profile.id) : null;
   if (providerRequiresCredential(profile.provider) && !credential?.trim()) {
-    throw Object.assign(new Error(`AI model "${profile.id}" is missing provider credentials.`), {
-      aiError: {
-        code: "missing_provider_credential",
-        message: `AI model "${profile.id}" is missing provider credentials.`,
-        fields: { "ai.model_profiles_json": "Enter the provider API key on this model profile." },
-      } satisfies AiSettingsError,
-    });
+    throw Object.assign(
+      new Error(
+        `AI model "${profile.id}" is missing provider credentials. An administrator can add the provider API key in the AI settings.`,
+      ),
+      {
+        aiError: {
+          code: "missing_provider_credential",
+          message: `AI model "${profile.id}" is missing provider credentials. An administrator can add the provider API key in the AI settings.`,
+          fields: { "ai.model_profiles_json": "Enter the provider API key on this model profile." },
+        } satisfies AiSettingsError,
+      },
+    );
   }
 
   const headers = providerSupportsRequestHeaders(profile.provider) ? await getAiRequestHeaders(profile.id) : {};

package/src/ai/skill-seeds.ts

@@ -223,6 +223,8 @@ Use these defaults unless the user asks otherwise or a more specific loaded Skil
 - For text lookup across Spaces, use \`spaces.item.search\`. For overdue, assigned or inactive tasks use \`spaces.task.focus\`; filter at the server instead of enumerating every Space.
 - For a date-bounded calendar use \`spaces.event.agenda\`. Follow every cursor, including after an empty page: pagination groups series with their overrides. Collect all pages and sort by startsAt for a chronological agenda. Use returned occurrences; do not expand recurrence rules yourself or equate a series anchor with the next occurrence.
 - Select a writable Space through \`spaces.space.browse\`. A known Space can be listed directly with \`spaces.task.list\` or \`spaces.event.list\`. Read \`spaces.space.read\` only when column/tag IDs or configuration are needed.
+- List entries show at most three assignees and tags: when \`assigneeCount\` is larger than the number of \`assignees\`, state the total (for example "3 of 11") or read the item before naming everyone. \`relationsTruncated\` signals that a relation preview is partial.
+- Use each entry's \`overdue\` to call a task overdue; a completed task is never overdue, so never infer it from \`deadline\` alone.
 - Read a selected \`spaces.item.read\` before changing its content or deleting it. Use a task for work and an event only with explicit valid start and end. Select assignees from \`spaces.space.assignee.list\`, never inferred names or invented IDs.
 
 ## Make focused changes
@@ -235,6 +237,12 @@ Use these defaults unless the user asks otherwise or a more specific loaded Skil
 - Use \`spaces.item.reference.find\` to find existing items for a source resource. Link on creation through references rather than a redundant second mutation. For an existing item use \`spaces.item.reference.add\`; use \`spaces.item.link-candidate.search\` when a writable target is unknown.
 - Use \`spaces.event.create\` for interactive creation. Never blindly retry an uncertain mutation.
 
+## Templates
+
+- When the user names a template or the Space has one for the request, find it with \`spaces.template.list\`; pass the person's IANA timeZone when known. Each template carries its date rule and the next proposed local dates.
+- Create from it with \`spaces.task.create\` or \`spaces.event.create\` and \`templateId\`. Set \`date\` to the proposal the user means ("next Wednesday" is the matching proposal) or to an explicit date; without \`date\` the first proposal applies. Give only the fields the user wants to change; the template fills the rest, including its checklist.
+- Never guess a date from a vague request; if the proposals do not settle it, ask. Managing templates (\`spaces.template.create\`, \`spaces.template.update\`, \`spaces.template.delete\`) needs Space admin access.
+
 ## Calendar mail and cross-app work
 
 Before importing, responding to or preparing emailed calendar invitations, read /skills/cloud-spaces/references/calendar-mail.md. Preparation, attaching to a draft and commit are distinct from sending.
@@ -257,6 +265,7 @@ Use these defaults unless the user asks otherwise or a more specific loaded Skil
 
 - For a saved place, use location search or list and pass the returned location ID to \`weather.forecast.current\` for current conditions or \`weather.forecast.get\` for hourly and daily outlooks.
 - For an unsaved German city, use \`weather.city.search\`, choose an unambiguous candidate, and pass its coordinates directly to a forecast. Save it with \`weather.location.create\` only when the user asks.
+- If city search is unavailable, use known coordinates with \`weather.forecast.current\` or \`weather.forecast.get\` and \`source.kind = "coordinates"\`; an administrator can configure the Geo API URL in Weather settings.
 - If multiple city candidates remain plausible, ask which one instead of choosing silently. Delete a saved location only when explicitly requested.
 
 ## Reporting defaults
@@ -475,11 +484,10 @@ const BUILTIN_CLOUD_AI_SKILLS: AiSkillTemplate[] = [
     references: [{ path: "references/query-tasks.md", content: CLOUD_GRIDS_QUERY_REFERENCE }],
   },
   {
-    version: 2,
+    version: 3,
     key: "assistant:cloud-assistant",
     name: "cloud-assistant",
-    description:
-      "Use for work involving Cloud Assistant itself: finding or reading earlier conversations, recovering resources used in chats, messaging another conversation, or creating and managing reminders and recurring scheduled chat work.",
+    description: `Use for work involving Cloud Assistant itself: finding or reading earlier conversations, recovering resources used in chats, messaging another conversation, or creating and managing reminders and recurring scheduled chat work. Also use when a request refers to earlier work, such as "like last time", "as last week", or "the report you made me".`,
     instructions: CLOUD_ASSISTANT_INSTRUCTIONS,
   },
   {
@@ -524,16 +532,16 @@ const BUILTIN_CLOUD_AI_SKILLS: AiSkillTemplate[] = [
     instructions: CLOUD_CONTACTS_INSTRUCTIONS,
   },
   {
-    version: 1,
+    version: 4,
     key: "spaces:cloud-spaces",
     name: "cloud-spaces",
     description:
-      "Use for work involving Cloud Spaces: finding, reading, creating, or updating tasks and events, assignees, blockers, comments, tags, linked Cloud resources, and calendar invitations. Load it whenever a request involves a Space, task, work item, deadline, event, calendar entry, or shared work queue.",
+      "Use for work involving Cloud Spaces: finding, reading, creating, or updating tasks and events, templates, assignees, blockers, comments, tags, linked Cloud resources, and calendar invitations. Load it whenever a request involves a Space, task, work item, deadline, event, calendar entry, or shared work queue.",
     instructions: CLOUD_SPACES_INSTRUCTIONS,
     references: [{ path: "references/calendar-mail.md", content: CLOUD_SPACES_CALENDAR_REFERENCE }],
   },
   {
-    version: 1,
+    version: 2,
     key: "weather:cloud-weather",
     name: "cloud-weather",
     description:

package/src/ai/store.ts

@@ -4,8 +4,10 @@ import { type SQL, sql } from "bun";
 import { type CapabilityActionReview, CapabilityActionReviewSchema } from "../contracts/capabilities";
 import { logger } from "../services/logging";
 import { toPgTextArray } from "../services/postgres";
+import { aiTurnErrorText } from "./chat/turn-error";
 import { AI_MEMORY_LEARNING_DEFAULT_ENABLED } from "./prefs";
 import type { AiTurnBlock } from "./protocol";
+import { AiRunTimeout } from "./run-timeout";
 import { withAiShortId, withAiShortIdForDb } from "./short-id";
 import { parseAiTodoPlan } from "./todo-contracts";
 import { activeTurnWaits } from "./turn-timing";
@@ -29,6 +31,7 @@ import type {
   AiToolPresentation,
   AiTurn,
   AiTurnClaim,
+  AiTurnError,
   AiTurnRunConfig,
   AiTurnStatus,
   AiTurnSteer,
@@ -112,6 +115,7 @@ type ConversationRow = {
   latest_browser_pending?: boolean;
   latest_turn_error?: string | null;
   latest_turn_completed_at?: Date | string | null;
+  latest_turn_short_id?: string | null;
   enrich_fail_count: number | null;
   project_id: string | null;
   draft_content: unknown;
@@ -552,6 +556,7 @@ const rowToConversation = (row: ConversationRow): AiConversation => ({
   lastUsedAt: iso(row.last_used_at),
   runStatus: conversationRunStatus(row.latest_turn_status, row.latest_browser_pending),
   runError: row.latest_turn_status === "failed" ? row.latest_turn_error?.trim() || "Assistant response failed." : null,
+  runTurnId: row.latest_turn_short_id ?? null,
   unreadCompletion:
     Boolean(
       row.background_received_at &&
@@ -723,10 +728,10 @@ const loadConversationSummary = async (input: {
       latest.status AS latest_turn_status,
       ${browserWorkPending()} AS latest_browser_pending,
       latest.error AS latest_turn_error,
-      latest.completed_at AS latest_turn_completed_at
+      latest.completed_at AS latest_turn_completed_at, latest.short_id AS latest_turn_short_id
     FROM ai.conversations conversation
     LEFT JOIN LATERAL (
-      SELECT status, error, completed_at, live_blocks
+      SELECT short_id, status, error, completed_at, live_blocks
       FROM ai.turns
       WHERE conversation_id = conversation.id AND NOT COALESCE(run_config ? 'background', false)
       ORDER BY created_at DESC, id DESC
@@ -784,13 +789,30 @@ const messageSearchText = (message: Message): string => {
  * time limit, or a turn the sweep finalizes. History reads the ending from the last assistant message, so such a turn
  * never looks finished. A failure replaces the `aborted` that a loop cut off by its run time limit recorded, so the
  * limit never looks like a user stop. A call the user approved that never returned keeps its approval in history.
+ * A failure's reason goes to the turn's last message, also when that is the user's own, so history can say why the
+ * turn failed and what to do next.
  */
 const recordTurnEnd = async (
   db: typeof sql,
-  input: { conversationId: string; turnId: string; reason: "aborted" | "error" },
+  input: { conversationId: string; turnId: string; reason: "aborted" | "error"; turnError?: AiTurnError | null },
 ): Promise<void> => {
   const replaces = input.reason === "error" ? "aborted" : null;
   for (const table of ["ai.messages", "ai.task_messages"]) {
+    if (input.turnError) {
+      await db`
+        UPDATE ${db(table)}
+        SET meta = COALESCE(meta, '{}'::jsonb) || jsonb_build_object('turnError', ${JSON.stringify(input.turnError)}::text::jsonb)
+        WHERE id = (
+          SELECT id
+          FROM ${db(table)}
+          WHERE conversation_id = ${input.conversationId}
+            AND loop_id = ${input.turnId}::text
+            AND kind = 'message'
+          ORDER BY seq DESC
+          LIMIT 1
+        )
+      `;
+    }
     await db`
       UPDATE ${db(table)}
       SET loop_done_reason = ${input.reason}
@@ -915,7 +937,7 @@ const insertMessageLocked = async (
     // 'auto' is reserved for enrichment-set titles.
     await db`
       UPDATE ai.conversations
-      SET title = ${title}, updated_at = now()
+      SET title = CASE WHEN title_source = 'default' THEN ${title} ELSE title END, updated_at = now()
       WHERE id = ${input.conversationId}
     `;
   } else {
@@ -1184,10 +1206,10 @@ export const aiConversations: AiConversationService = {
         latest.status AS latest_turn_status,
         ${browserWorkPending()} AS latest_browser_pending,
         latest.error AS latest_turn_error,
-        latest.completed_at AS latest_turn_completed_at
+        latest.completed_at AS latest_turn_completed_at, latest.short_id AS latest_turn_short_id
       FROM ai.conversations conversation
       LEFT JOIN LATERAL (
-        SELECT status, error, completed_at, live_blocks
+        SELECT short_id, status, error, completed_at, live_blocks
         FROM ai.turns
         WHERE NOT COALESCE(run_config ? 'background', false) AND conversation_id = conversation.id
         ORDER BY created_at DESC, id DESC
@@ -1240,12 +1262,12 @@ export const aiConversations: AiConversationService = {
       SELECT conversation.*, ${effectiveDone()} AS is_done,
         EXISTS (SELECT 1 FROM ai.chat_tasks schedule WHERE schedule.conversation_id = conversation.id AND schedule.state = 'active') AS has_active_schedule,
         latest.status AS latest_turn_status, ${browserWorkPending()} AS latest_browser_pending,
-        latest.error AS latest_turn_error, latest.completed_at AS latest_turn_completed_at,
+        latest.error AS latest_turn_error, latest.completed_at AS latest_turn_completed_at, latest.short_id AS latest_turn_short_id,
         jsonb_build_object('completed', COALESCE(progress.completed,0), 'total', COALESCE(progress.total,0),
           'step', progress.step, 'tool', ai.sidebar_tool_label(latest.live_blocks)->>'label') AS activity
       FROM ai.conversations conversation
       LEFT JOIN LATERAL (
-        SELECT status, error, completed_at, live_blocks FROM ai.turns
+        SELECT short_id, status, error, completed_at, live_blocks FROM ai.turns
         WHERE NOT COALESCE(run_config ? 'background', false) AND conversation_id = conversation.id ORDER BY created_at DESC, id DESC LIMIT 1
       ) latest ON TRUE
       LEFT JOIN LATERAL (
@@ -1287,10 +1309,10 @@ export const aiConversations: AiConversationService = {
         latest.status AS latest_turn_status,
         ${browserWorkPending()} AS latest_browser_pending,
         latest.error AS latest_turn_error,
-        latest.completed_at AS latest_turn_completed_at
+        latest.completed_at AS latest_turn_completed_at, latest.short_id AS latest_turn_short_id
       FROM ai.conversations conversation
       LEFT JOIN LATERAL (
-        SELECT status, error, completed_at, live_blocks
+        SELECT short_id, status, error, completed_at, live_blocks
         FROM ai.turns
         WHERE NOT COALESCE(run_config ? 'background', false) AND conversation_id = conversation.id
         ORDER BY created_at DESC, id DESC
@@ -1926,32 +1948,68 @@ export const aiConversations: AiConversationService = {
   },
 
   archiveConversation: async (input) => {
+    // Archiving considers pending learning work once, just like learning being
+    // off at completion. Restoring cannot backfill these turns or receipts.
     const rows = await sql<{ id: string }[]>`
-      UPDATE ai.conversations
-      SET archived_at = now(), pinned_at = NULL
-      WHERE id = ${input.conversationId}
-        AND (${input.ownerUserId ?? null}::uuid IS NULL OR created_by_user_id = ${input.ownerUserId ?? null})
-        AND archived_at IS NULL
-        AND NOT EXISTS (
-          SELECT 1
-          FROM ai.turns
-          WHERE conversation_id = ai.conversations.id
-            AND status IN ('queued', 'running', 'waiting_for_action')
-        )
-        AND NOT EXISTS (SELECT 1 FROM ai.queued_messages WHERE conversation_id = ai.conversations.id AND status IN ('pending','failed'))
-      RETURNING id
+      WITH archived AS (
+        UPDATE ai.conversations
+        SET archived_at = now(), pinned_at = NULL
+        WHERE id = ${input.conversationId}
+          AND (${input.ownerUserId ?? null}::uuid IS NULL OR created_by_user_id = ${input.ownerUserId ?? null})
+          AND archived_at IS NULL
+          AND NOT EXISTS (
+            SELECT 1
+            FROM ai.turns
+            WHERE conversation_id = ai.conversations.id
+              AND status IN ('queued', 'running', 'waiting_for_action')
+          )
+          AND NOT EXISTS (SELECT 1 FROM ai.queued_messages WHERE conversation_id = ai.conversations.id AND status IN ('pending','failed'))
+        RETURNING id
+      ), considered_turns AS (
+        UPDATE ai.turns
+        SET memory_learned_at = completed_at,
+            memory_learn_failed_at = NULL,
+            memory_learn_fail_count = 0
+        WHERE conversation_id IN (SELECT id FROM archived)
+          AND status = 'completed'
+          AND memory_learned_at IS NULL
+      ), reviewed_evidence AS (
+        UPDATE ai.memory_workflow_evidence
+        SET reviewed_at = now()
+        WHERE conversation_id IN (SELECT id FROM archived)
+          AND reviewed_at IS NULL
+      )
+      SELECT id FROM archived
     `;
     return Boolean(rows[0]);
   },
 
   restoreConversation: async (input) => {
+    // Restore never backfills: everything completed beforehand counts as considered,
+    // including chats archived before archiving retired pending learning work.
     const rows = await sql<{ id: string }[]>`
-      UPDATE ai.conversations
-      SET archived_at = NULL
-      WHERE id = ${input.conversationId}
-        AND (${input.ownerUserId ?? null}::uuid IS NULL OR created_by_user_id = ${input.ownerUserId ?? null})
-        AND archived_at IS NOT NULL
-      RETURNING id
+      WITH restored AS (
+        UPDATE ai.conversations
+        SET archived_at = NULL
+        WHERE id = ${input.conversationId}
+          AND (${input.ownerUserId ?? null}::uuid IS NULL OR created_by_user_id = ${input.ownerUserId ?? null})
+          AND archived_at IS NOT NULL
+        RETURNING id
+      ), considered_turns AS (
+        UPDATE ai.turns
+        SET memory_learned_at = completed_at,
+            memory_learn_failed_at = NULL,
+            memory_learn_fail_count = 0
+        WHERE conversation_id IN (SELECT id FROM restored)
+          AND status = 'completed'
+          AND memory_learned_at IS NULL
+      ), reviewed_evidence AS (
+        UPDATE ai.memory_workflow_evidence
+        SET reviewed_at = now()
+        WHERE conversation_id IN (SELECT id FROM restored)
+          AND reviewed_at IS NULL
+      )
+      SELECT id FROM restored
     `;
     return rows[0] ? loadConversationSummary(input) : null;
   },
@@ -2957,6 +3015,7 @@ export const aiConversations: AiConversationService = {
           conversationId: input.conversationId,
           turnId: input.turnId,
           reason: input.status === "aborted" ? "aborted" : "error",
+          turnError: input.status === "failed" ? (input.turnError ?? { code: "failed" }) : null,
         });
         await tx`
           UPDATE ai.turn_steers
@@ -2977,11 +3036,12 @@ export const aiConversations: AiConversationService = {
     // 1) Finalize turns that exhausted actual recovery attempts. Resuming a
     // resolved user/frontend action is normal progress and does not consume
     // this budget.
+    // The sweep does not know a turn's language; the chat words the recorded reason in the reader's.
     const exhaustedRows = await sql<{ id: string; conversation_id: string; error: string; attempt: number; live_seq: number | string }[]>`
       UPDATE ai.turns
       SET status = 'failed',
           completed_at = now(),
-          error = 'AI turn exhausted its recovery attempts.',
+          error = ${aiTurnErrorText({ code: "interrupted" }, "en")},
           lease_owner = NULL,
           lease_expires_at = NULL,
           live_blocks = NULL
@@ -3029,11 +3089,13 @@ export const aiConversations: AiConversationService = {
     `;
 
     // 2) Finalize over-budget turns without a live lease.
-    const budgetRows = await sql<{ id: string; conversation_id: string; error: string; attempt: number; live_seq: number | string }[]>`
+    const budgetRows = await sql<
+      { id: string; conversation_id: string; error: string; attempt: number; live_seq: number | string; run_budget_ms: number | null }[]
+    >`
       UPDATE ai.turns
       SET status = 'failed',
           completed_at = now(),
-          error = 'Run time limit reached. You can continue the task in a new message.',
+          error = ${aiTurnErrorText({ code: "time_limit" }, "en")},
           lease_owner = NULL,
           lease_expires_at = NULL,
           live_blocks = NULL
@@ -3047,8 +3109,12 @@ export const aiConversations: AiConversationService = {
           AND (lease_owner IS NULL OR lease_expires_at IS NULL OR lease_expires_at < now())
         LIMIT ${limit}
       )
-      RETURNING id, conversation_id, error, attempt, live_seq
+      RETURNING id, conversation_id, error, attempt, live_seq, run_budget_ms
     `;
+    const turnErrors = new Map<string, AiTurnError>([
+      ...exhaustedRows.map((row): [string, AiTurnError] => [row.id, { code: "interrupted" }]),
+      ...budgetRows.map((row): [string, AiTurnError] => [row.id, new AiRunTimeout(Number(row.run_budget_ms) || null).turnError()]),
+    ]);
     result.failed = [...exhaustedRows, ...budgetRows].map((row) => ({
       conversationId: row.conversation_id,
       turnId: row.id,
@@ -3087,10 +3153,12 @@ export const aiConversations: AiConversationService = {
     // History tells a stop from a turn that failed or whose wait expired, as it does for turns that end on their own.
     const stopped = new Set(abortedRows.filter((row) => row.stopped).map((row) => row.id));
     for (const finalized of [...result.failed, ...result.aborted]) {
+      const stop = stopped.has(finalized.turnId);
       await recordTurnEnd(sql, {
         conversationId: finalized.conversationId,
         turnId: finalized.turnId,
-        reason: stopped.has(finalized.turnId) ? "aborted" : "error",
+        reason: stop ? "aborted" : "error",
+        turnError: stop ? null : (turnErrors.get(finalized.turnId) ?? { code: "wait_expired" }),
       });
       await sql`
         UPDATE ai.pending_actions

package/src/ai/structured.ts

@@ -5,6 +5,7 @@ import type { AccessSubject } from "../server";
 import { coreSettings } from "../services";
 import type { TraceContext } from "../services/logging";
 import { trace } from "../services/logging";
+import { taskReasoningEffort } from "./provider";
 import { inferenceProvider } from "./quota-provider";
 import { resolveAiModel } from "./settings";
 import { type AiUsageAttribution, safelyRecordStructuredRun } from "./structured-runs";
@@ -131,7 +132,7 @@ export const runAiStructured = async <TOutput extends z.ZodType>(
           outputName: input.outputName,
           temperature: input.temperature ?? 0,
           maxOutputTokens: input.maxOutputTokens ?? resolved.profile.maxOutputTokens,
-          disableReasoning: true,
+          reasoningEffort: taskReasoningEffort(resolved.provider),
           signal: input.signal,
         });
         const durationMs = Date.now() - startedAt;