@xopcai/xopc 0.0.187 → 0.0.189

package/dist/src/storage/sqlite/endpoint-tool-invocation-repository.d.ts

@@ -0,0 +1,25 @@
+import type { EndpointEffect, EndpointToolErrorCode } from '@xopcai/endpoint-tools-protocol';
+export interface EndpointToolInvocationAudit {
+    id: string;
+    principalId: string;
+    endpointId: string;
+    toolCallId: string;
+    toolName: string;
+    effect: EndpointEffect;
+    confirmationRequired: boolean;
+    argumentsSha256: string;
+    status: 'running' | 'succeeded' | 'failed';
+    errorCode?: EndpointToolErrorCode;
+    errorMessage?: string;
+    startedAt: number;
+    completedAt?: number;
+}
+export declare function startEndpointToolInvocationAudit(audit: Omit<EndpointToolInvocationAudit, 'status' | 'completedAt' | 'errorCode' | 'errorMessage'>): void;
+export declare function finishEndpointToolInvocationAudit(params: {
+    id: string;
+    status: 'succeeded' | 'failed';
+    errorCode?: EndpointToolErrorCode;
+    errorMessage?: string;
+    completedAt?: number;
+}): void;
+export declare function listEndpointToolInvocationAudits(limit?: number): EndpointToolInvocationAudit[];

package/dist/src/storage/sqlite/endpoint-tool-invocation-repository.js

@@ -0,0 +1,42 @@
+import { getSqliteDatabase } from "./transaction.js";
+//#region src/storage/sqlite/endpoint-tool-invocation-repository.ts
+function fromRow(row) {
+	return {
+		id: row.id,
+		principalId: row.principal_id,
+		endpointId: row.endpoint_id,
+		toolCallId: row.tool_call_id,
+		toolName: row.tool_name,
+		effect: row.effect,
+		confirmationRequired: row.confirmation_required === 1,
+		argumentsSha256: row.arguments_sha256,
+		status: row.status,
+		...row.error_code === null ? {} : { errorCode: row.error_code },
+		...row.error_message === null ? {} : { errorMessage: row.error_message },
+		startedAt: row.started_at,
+		...row.completed_at === null ? {} : { completedAt: row.completed_at }
+	};
+}
+function startEndpointToolInvocationAudit(audit) {
+	getSqliteDatabase().prepare(`
+    INSERT INTO endpoint_tool_invocations (
+      id, principal_id, endpoint_id, tool_call_id, tool_name, effect,
+      confirmation_required, arguments_sha256, status, started_at
+    ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, 'running', ?)
+  `).run(audit.id, audit.principalId, audit.endpointId, audit.toolCallId, audit.toolName, audit.effect, audit.confirmationRequired ? 1 : 0, audit.argumentsSha256, audit.startedAt);
+}
+function finishEndpointToolInvocationAudit(params) {
+	getSqliteDatabase().prepare(`
+    UPDATE endpoint_tool_invocations
+    SET status = ?, error_code = ?, error_message = ?, completed_at = ?
+    WHERE id = ? AND status = 'running'
+  `).run(params.status, params.errorCode ?? null, params.errorMessage?.slice(0, 2e3) ?? null, params.completedAt ?? Date.now(), params.id);
+}
+function listEndpointToolInvocationAudits(limit = 100) {
+	const boundedLimit = Math.max(1, Math.min(500, Math.trunc(limit)));
+	return getSqliteDatabase().prepare(`
+    SELECT * FROM endpoint_tool_invocations ORDER BY started_at DESC LIMIT ?
+  `).all(boundedLimit).map(fromRow);
+}
+//#endregion
+export { finishEndpointToolInvocationAudit, listEndpointToolInvocationAudits, startEndpointToolInvocationAudit };

package/dist/src/storage/sqlite/index.d.ts

@@ -12,6 +12,8 @@ export { acknowledgeHomeAttention, isHomeAttentionAcknowledged, type HomeAttenti
 export { getUserClaim, linkUserClaimMemoryRecord, listUserClaimEvidence, listUserClaimStatsBySource, listUserClaims, listUserPeopleGraphRows, removeUserClaimEvidenceForSource, reinforceUserClaim, resolveUserEntity, setUserClaimDecision, type UserClaim, type UserClaimClass, type UserClaimState, type UserEntity, } from './user-claims-repository.js';
 export { claimNextConnectorLearningJob, enqueueConnectorLearningJob, listConnectorLearningJobs, recoverStaleConnectorLearningJobs, setConnectorLearningPaused, updateConnectorLearningJob, type ConnectorLearningJob, type ConnectorLearningMode, type ConnectorLearningPhase, type ConnectorLearningStatus, } from './connector-learning-repository.js';
 export { appendComposerInputHistory, clearComposerInputHistory, listComposerInputHistory, COMPOSER_INPUT_HISTORY_LIMIT, type ComposerInputHistoryItem, } from './composer-input-history-repository.js';
+export { bindEndpointPrincipal, createEndpointPrincipal, getEndpointPrincipal, listEndpointPrincipals, revokeEndpointPrincipal, touchEndpointPrincipal, type EndpointPrincipal, } from './endpoint-principal-repository.js';
+export { finishEndpointToolInvocationAudit, listEndpointToolInvocationAudits, startEndpointToolInvocationAudit, type EndpointToolInvocationAudit, } from './endpoint-tool-invocation-repository.js';
 export { getInteractionState, setInteractionState, updateInteractionStateFromMessage, type InteractionState, } from './interaction-state-repository.js';
 export { getSessionTaskPlan, setSessionTaskPlan, type SessionTaskPlan, type SessionTaskPlanItem, type SessionTaskPlanItemStatus, } from './session-task-plan-repository.js';
 export { buildRelationshipPrompt, getRelationshipSettings, isProactiveSupportAllowed, updateRelationshipSettings, type RelationshipSettings, type SupportMode, } from './relationship-settings-repository.js';

package/dist/src/storage/sqlite/index.js

@@ -13,6 +13,8 @@ import { acknowledgeHomeAttention, isHomeAttentionAcknowledged } from "./home-at
 import { getUserClaim, linkUserClaimMemoryRecord, listUserClaimEvidence, listUserClaimStatsBySource, listUserClaims, listUserPeopleGraphRows, reinforceUserClaim, removeUserClaimEvidenceForSource, resolveUserEntity, setUserClaimDecision } from "./user-claims-repository.js";
 import { claimNextConnectorLearningJob, enqueueConnectorLearningJob, listConnectorLearningJobs, recoverStaleConnectorLearningJobs, setConnectorLearningPaused, updateConnectorLearningJob } from "./connector-learning-repository.js";
 import { COMPOSER_INPUT_HISTORY_LIMIT, appendComposerInputHistory, clearComposerInputHistory, listComposerInputHistory } from "./composer-input-history-repository.js";
+import { bindEndpointPrincipal, createEndpointPrincipal, getEndpointPrincipal, listEndpointPrincipals, revokeEndpointPrincipal, touchEndpointPrincipal } from "./endpoint-principal-repository.js";
+import { finishEndpointToolInvocationAudit, listEndpointToolInvocationAudits, startEndpointToolInvocationAudit } from "./endpoint-tool-invocation-repository.js";
 import { getInteractionState, setInteractionState, updateInteractionStateFromMessage } from "./interaction-state-repository.js";
 import { buildDefaultSessionMetadata } from "./session-metadata.js";
 import { buildGlobalSessionStats, classifyStoredRow, estimateTokensFromMessages, extractFtsContent, metadataToSessionInsert, sessionConfigRowToConfig, sessionRowToMetadata, transcriptEntryRowToStoredRow } from "./row-mappers.js";
@@ -32,4 +34,4 @@ import { getConnectorSyncPolicy, getConnectorSyncPolicyForConnection, listConnec
 import { getUserTrustPolicy, setUserTrustPolicy } from "./user-trust-repository.js";
 import { consumeMemoryReferenceConsent, decideMemoryReferenceConsent, ensureMemoryReferenceConsentRequest, hasMemoryReferenceConsent, listMemoryReferenceConsents, revokeMemoryReferenceConsent } from "./memory-reference-consent-repository.js";
 import { getUserProfilePromptState, setUserProfilePromptState } from "./user-profile-setup-repository.js";
-export { COMPOSER_INPUT_HISTORY_LIMIT, DatabaseSchemaMigrationGapError, DatabaseSchemaTooNewError, SCHEMA_META_SCHEMA_VERSION_KEY, USER_UNDERSTANDING_REMEDIATION_POLICY, XOPC_DB_BASELINE_SCHEMA_VERSION, XOPC_DB_FILENAME, XOPC_DB_SCHEMA_VERSION, acknowledgeHomeAttention, appendCompactionBoundary, appendComposerInputHistory, appendConnectorExecutionAudit, appendMemorySignal, appendMemoryTraceEvent, appendTranscriptEntry, applyPendingMigrations, attachMemoryEvidence, buildDefaultSessionMetadata, buildGlobalSessionStats, buildRelationshipPrompt, cancelQueuedSessionInput, claimConnectorWebhookDelivery, claimKnowledgeSourceItems, claimNextConnectorLearningJob, claimNextSessionInput, classifyStoredRow, clearComposerInputHistory, closeXopcDatabase, completeConnectorWebhookDelivery, completeKnowledgeSourceItemSynthesis, consumeConnectorApproval, consumeMemoryReferenceConsent, createConnectorApproval, createObjectLinkRecord, decideConnectorApproval, decideMemoryReferenceConsent, deleteConnectorConnection, deleteConnectorInstallation, deleteMemoryEvidenceForRecord, deleteMemoryRecord, deleteNoteAgentContextRecord, deleteNoteRecord, deleteObjectLinkRecord, deleteSessionConfig, deleteSessionRecord, discoverSqlMigrations, enqueueConnectorLearningJob, ensureMemoryReferenceConsentRequest, ensureSessionRecord, ensureXopcDatabaseSchema, estimateTokensFromMessages, extractFtsContent, findSessionInput, findSessionKeyBySessionId, finishDreamingRun, finishKnowledgeSyncRun, finishSessionInputRun, getActivityEventRecord, getCachedConnectorCatalogEntry, getConnectorAccount, getConnectorApproval, getConnectorConnection, getConnectorInstallation, getConnectorSyncPolicy, getConnectorSyncPolicyForConnection, getCurrentSessionId, getDreamingRun, getGlobalSessionStats, getInteractionState, getKnowledgeConsumerWatermark, getKnowledgeSourceCursor, getKnowledgeSourceItem, getMemoryProviderState, getMemoryReadiness, getMemoryRecord, getMemoryTurnFeedback, getNoteAgentContextRecord, getNoteRecord, getRelationshipSettings, getSessionConfig, getSessionInputState, getSessionMetadata, getSessionPersistedLevels, getSessionTaskPlan, getSqliteDatabase, getUserClaim, getUserProfilePromptState, getUserTrustPolicy, getXopcDatabase, hasMemoryReferenceConsent, hasSessionConfig, hasUnresolvedMemoryConflict, incrementSessionStatsOnAppend, insertSessionInput, inspectSchemaMigrationStatus, isHomeAttentionAcknowledged, isProactiveSupportAllowed, isXopcDatabaseOpen, linkUserClaimMemoryRecord, listActivityRecords, listCachedConnectorCatalogEntries, listCompactionBoundaries, listComposerInputHistory, listConnectorAccounts, listConnectorActionMetadata, listConnectorApprovals, listConnectorConnections, listConnectorExecutionAudit, listConnectorInstallations, listConnectorLearningJobs, listConnectorSyncPolicies, listDreamingDecisions, listDreamingRuns, listKnowledgeSourceChanges, listKnowledgeSourceItems, listKnowledgeSyncRuns, listMemoryEvidence, listMemoryRecords, listMemoryReferenceConsents, listMemorySignals, listMemoryTraceEvents, listNoteRecords, listObjectActivityRecords, listObjectLinkRecords, listProjectActivityRecords, listRegisteredMigrationTargets, listSessionMetadata, listSessionsByAgent, listUserClaimEvidence, listUserClaimStatsBySource, listUserClaims, listUserPeopleGraphRows, loadLlmMessagesForSession, loadTranscriptHistoryRowsForSession, loadTranscriptRows, loadTranscriptRowsForSession, markMemoryRecordsConflicted, metadataToSessionInsert, mutateQueuedSessionInput, openXopcDatabase, paginateTranscriptMessages, patchSessionMetadata, pruneBoundedKnowledgeSourceItems, readSchemaVersion, readSchemaVersionForTest, reconcileConnectorAccount, recordActivityEvent, recordDreamingDecision, recoverSessionInputState, recoverStaleConnectorLearningJobs, refreshConnectorAccountCurrent, reinforceUserClaim, releaseConnectorWebhookDelivery, removeUserClaimEvidenceForSource, replaceConnectorCatalogEntries, replaceTranscriptRows, requireXopcDatabase, resetSessionRecord, resetXopcDatabaseSingletonForTest, resolveMigrationsDir, resolveSessionAgentId, resolveUserEntity, resolveXopcDatabasePath, restoreBeforeCompactionBoundary, revokeMemoryReferenceConsent, runSqliteWriteTransaction, searchMemoryRecords, sessionConfigRowToConfig, sessionRowToMetadata, setConnectorLearningPaused, setInteractionState, setKnowledgeConsumerWatermark, setKnowledgeSourceCursor, setKnowledgeSourceItemSynthesisStatus, setMemoryProviderState, setMemoryRecordStatus, setMemoryTurnFeedback, setSessionConfig, setSessionInputStatus, setSessionTaskPlan, setUserClaimDecision, setUserProfilePromptState, setUserTrustPolicy, startDreamingRun, startKnowledgeSyncRun, summarizeMemoryRecallFeedback, summarizeUserUnderstandingQuality, transcriptEntryRowToStoredRow, updateConnectorLearningJob, updateInteractionStateFromMessage, updateRelationshipSettings, updateSessionConfig, updateSessionStats, upsertConnectorActionMetadata, upsertConnectorCatalogEntry, upsertConnectorConnection, upsertConnectorInstallation, upsertConnectorSyncPolicy, upsertKnowledgeSourceItems, upsertMemoryRecord, upsertNoteAgentContextRecord, upsertNoteRecord };
+export { COMPOSER_INPUT_HISTORY_LIMIT, DatabaseSchemaMigrationGapError, DatabaseSchemaTooNewError, SCHEMA_META_SCHEMA_VERSION_KEY, USER_UNDERSTANDING_REMEDIATION_POLICY, XOPC_DB_BASELINE_SCHEMA_VERSION, XOPC_DB_FILENAME, XOPC_DB_SCHEMA_VERSION, acknowledgeHomeAttention, appendCompactionBoundary, appendComposerInputHistory, appendConnectorExecutionAudit, appendMemorySignal, appendMemoryTraceEvent, appendTranscriptEntry, applyPendingMigrations, attachMemoryEvidence, bindEndpointPrincipal, buildDefaultSessionMetadata, buildGlobalSessionStats, buildRelationshipPrompt, cancelQueuedSessionInput, claimConnectorWebhookDelivery, claimKnowledgeSourceItems, claimNextConnectorLearningJob, claimNextSessionInput, classifyStoredRow, clearComposerInputHistory, closeXopcDatabase, completeConnectorWebhookDelivery, completeKnowledgeSourceItemSynthesis, consumeConnectorApproval, consumeMemoryReferenceConsent, createConnectorApproval, createEndpointPrincipal, createObjectLinkRecord, decideConnectorApproval, decideMemoryReferenceConsent, deleteConnectorConnection, deleteConnectorInstallation, deleteMemoryEvidenceForRecord, deleteMemoryRecord, deleteNoteAgentContextRecord, deleteNoteRecord, deleteObjectLinkRecord, deleteSessionConfig, deleteSessionRecord, discoverSqlMigrations, enqueueConnectorLearningJob, ensureMemoryReferenceConsentRequest, ensureSessionRecord, ensureXopcDatabaseSchema, estimateTokensFromMessages, extractFtsContent, findSessionInput, findSessionKeyBySessionId, finishDreamingRun, finishEndpointToolInvocationAudit, finishKnowledgeSyncRun, finishSessionInputRun, getActivityEventRecord, getCachedConnectorCatalogEntry, getConnectorAccount, getConnectorApproval, getConnectorConnection, getConnectorInstallation, getConnectorSyncPolicy, getConnectorSyncPolicyForConnection, getCurrentSessionId, getDreamingRun, getEndpointPrincipal, getGlobalSessionStats, getInteractionState, getKnowledgeConsumerWatermark, getKnowledgeSourceCursor, getKnowledgeSourceItem, getMemoryProviderState, getMemoryReadiness, getMemoryRecord, getMemoryTurnFeedback, getNoteAgentContextRecord, getNoteRecord, getRelationshipSettings, getSessionConfig, getSessionInputState, getSessionMetadata, getSessionPersistedLevels, getSessionTaskPlan, getSqliteDatabase, getUserClaim, getUserProfilePromptState, getUserTrustPolicy, getXopcDatabase, hasMemoryReferenceConsent, hasSessionConfig, hasUnresolvedMemoryConflict, incrementSessionStatsOnAppend, insertSessionInput, inspectSchemaMigrationStatus, isHomeAttentionAcknowledged, isProactiveSupportAllowed, isXopcDatabaseOpen, linkUserClaimMemoryRecord, listActivityRecords, listCachedConnectorCatalogEntries, listCompactionBoundaries, listComposerInputHistory, listConnectorAccounts, listConnectorActionMetadata, listConnectorApprovals, listConnectorConnections, listConnectorExecutionAudit, listConnectorInstallations, listConnectorLearningJobs, listConnectorSyncPolicies, listDreamingDecisions, listDreamingRuns, listEndpointPrincipals, listEndpointToolInvocationAudits, listKnowledgeSourceChanges, listKnowledgeSourceItems, listKnowledgeSyncRuns, listMemoryEvidence, listMemoryRecords, listMemoryReferenceConsents, listMemorySignals, listMemoryTraceEvents, listNoteRecords, listObjectActivityRecords, listObjectLinkRecords, listProjectActivityRecords, listRegisteredMigrationTargets, listSessionMetadata, listSessionsByAgent, listUserClaimEvidence, listUserClaimStatsBySource, listUserClaims, listUserPeopleGraphRows, loadLlmMessagesForSession, loadTranscriptHistoryRowsForSession, loadTranscriptRows, loadTranscriptRowsForSession, markMemoryRecordsConflicted, metadataToSessionInsert, mutateQueuedSessionInput, openXopcDatabase, paginateTranscriptMessages, patchSessionMetadata, pruneBoundedKnowledgeSourceItems, readSchemaVersion, readSchemaVersionForTest, reconcileConnectorAccount, recordActivityEvent, recordDreamingDecision, recoverSessionInputState, recoverStaleConnectorLearningJobs, refreshConnectorAccountCurrent, reinforceUserClaim, releaseConnectorWebhookDelivery, removeUserClaimEvidenceForSource, replaceConnectorCatalogEntries, replaceTranscriptRows, requireXopcDatabase, resetSessionRecord, resetXopcDatabaseSingletonForTest, resolveMigrationsDir, resolveSessionAgentId, resolveUserEntity, resolveXopcDatabasePath, restoreBeforeCompactionBoundary, revokeEndpointPrincipal, revokeMemoryReferenceConsent, runSqliteWriteTransaction, searchMemoryRecords, sessionConfigRowToConfig, sessionRowToMetadata, setConnectorLearningPaused, setInteractionState, setKnowledgeConsumerWatermark, setKnowledgeSourceCursor, setKnowledgeSourceItemSynthesisStatus, setMemoryProviderState, setMemoryRecordStatus, setMemoryTurnFeedback, setSessionConfig, setSessionInputStatus, setSessionTaskPlan, setUserClaimDecision, setUserProfilePromptState, setUserTrustPolicy, startDreamingRun, startEndpointToolInvocationAudit, startKnowledgeSyncRun, summarizeMemoryRecallFeedback, summarizeUserUnderstandingQuality, touchEndpointPrincipal, transcriptEntryRowToStoredRow, updateConnectorLearningJob, updateInteractionStateFromMessage, updateRelationshipSettings, updateSessionConfig, updateSessionStats, upsertConnectorActionMetadata, upsertConnectorCatalogEntry, upsertConnectorConnection, upsertConnectorInstallation, upsertConnectorSyncPolicy, upsertKnowledgeSourceItems, upsertMemoryRecord, upsertNoteAgentContextRecord, upsertNoteRecord };

package/dist/src/storage/sqlite/memory-records-repository.js

@@ -79,6 +79,7 @@ function parseSource(json) {
 function rowToRecord(row) {
 	return {
 		id: row.record_id,
+		providerId: row.provider_id,
 		kind: row.kind,
 		status: row.status,
 		...row.canonical_key ? { canonicalKey: row.canonical_key } : {},
@@ -191,6 +192,7 @@ function upsertMemoryRecord(input) {
 	});
 	return {
 		id,
+		providerId: input.providerId,
 		kind: input.kind,
 		status,
 		...input.canonicalKey ? { canonicalKey: input.canonicalKey } : {},
@@ -351,7 +353,7 @@ function searchMemoryRecords(options) {
 		score: memoryLexicalSimilarity(options.query, record.content),
 		snippet: record.content,
 		citation: {
-			providerId: record.source.provider ?? options.providerId ?? "local",
+			providerId: record.providerId,
 			recordId: record.id,
 			path: record.source.path,
 			lineStart: record.source.lineStart,

package/dist/src/storage/sqlite/migrations/108_repair_user_memory_provider.sql

@@ -0,0 +1,18 @@
+UPDATE memory_records
+SET provider_id = 'local'
+WHERE provider_id IN ('personal-context', 'connected-understanding')
+  AND EXISTS (
+    SELECT 1
+    FROM json_each(memory_records.tags_json)
+    WHERE json_each.value = 'user-understanding'
+  );
+
+DELETE FROM memory_records_fts;
+
+INSERT INTO memory_records_fts (
+  content, record_id, provider_id, kind, user_id, source_agent_id, workspace_id
+)
+SELECT
+  content, record_id, provider_id, kind, user_id, source_agent_id, workspace_id
+FROM memory_records
+WHERE trim(content) <> '';

package/dist/src/storage/sqlite/migrations/109_endpoint_principals.sql

@@ -0,0 +1,14 @@
+CREATE TABLE endpoint_principals (
+  id           TEXT PRIMARY KEY,
+  kind         TEXT NOT NULL CHECK(kind IN ('web', 'desktop', 'mobile')),
+  display_name TEXT NOT NULL,
+  platform     TEXT NOT NULL,
+  public_key   TEXT NOT NULL,
+  created_at   INTEGER NOT NULL,
+  last_seen_at INTEGER,
+  revoked_at   INTEGER
+);
+
+CREATE INDEX idx_endpoint_principals_active
+  ON endpoint_principals(kind, last_seen_at DESC)
+  WHERE revoked_at IS NULL;

package/dist/src/storage/sqlite/migrations/110_session_input_origin.sql

@@ -0,0 +1,43 @@
+DROP INDEX idx_session_inputs_pending;
+
+CREATE TABLE session_inputs_v110 (
+  id TEXT PRIMARY KEY,
+  session_key TEXT NOT NULL,
+  client_message_id TEXT NOT NULL,
+  requested_delivery TEXT NOT NULL CHECK (requested_delivery IN ('next', 'steer')),
+  effective_delivery TEXT NOT NULL CHECK (effective_delivery IN ('next', 'steer')),
+  status TEXT NOT NULL CHECK (status IN (
+    'queued', 'running', 'injecting',
+    'completed', 'cancelled', 'failed', 'interrupted'
+  )),
+  content TEXT NOT NULL,
+  attachments_json TEXT,
+  thinking TEXT,
+  origin_json TEXT NOT NULL,
+  position INTEGER NOT NULL,
+  target_run_id TEXT,
+  run_id TEXT,
+  version INTEGER NOT NULL DEFAULT 1,
+  error TEXT,
+  created_at_ms INTEGER NOT NULL,
+  updated_at_ms INTEGER NOT NULL,
+  UNIQUE(session_key, client_message_id)
+);
+
+INSERT INTO session_inputs_v110 (
+  id, session_key, client_message_id, requested_delivery, effective_delivery,
+  status, content, attachments_json, thinking, origin_json, position,
+  target_run_id, run_id, version, error, created_at_ms, updated_at_ms
+)
+SELECT
+  id, session_key, client_message_id, requested_delivery, effective_delivery,
+  status, content, attachments_json, thinking,
+  '{"type":"system","source":"internal"}', position,
+  target_run_id, run_id, version, error, created_at_ms, updated_at_ms
+FROM session_inputs;
+
+DROP TABLE session_inputs;
+ALTER TABLE session_inputs_v110 RENAME TO session_inputs;
+
+CREATE INDEX idx_session_inputs_pending
+  ON session_inputs(session_key, status, position, created_at_ms);

package/dist/src/storage/sqlite/migrations/111_endpoint_tool_invocations.sql

@@ -0,0 +1,18 @@
+CREATE TABLE endpoint_tool_invocations (
+  id                    TEXT PRIMARY KEY,
+  principal_id          TEXT NOT NULL,
+  endpoint_id           TEXT NOT NULL,
+  tool_call_id          TEXT NOT NULL,
+  tool_name             TEXT NOT NULL,
+  effect                TEXT NOT NULL CHECK(effect IN ('read', 'write', 'destructive')),
+  confirmation_required INTEGER NOT NULL CHECK(confirmation_required IN (0, 1)),
+  arguments_sha256      TEXT NOT NULL,
+  status                TEXT NOT NULL CHECK(status IN ('running', 'succeeded', 'failed')),
+  error_code            TEXT,
+  error_message         TEXT,
+  started_at            INTEGER NOT NULL,
+  completed_at          INTEGER
+);
+
+CREATE INDEX idx_endpoint_tool_invocations_endpoint_started
+  ON endpoint_tool_invocations(endpoint_id, started_at DESC);

package/dist/src/storage/sqlite/migrations/112_endpoint_instance_bindings.sql

@@ -0,0 +1,8 @@
+CREATE TABLE endpoint_instance_bindings (
+  endpoint_id TEXT PRIMARY KEY,
+  principal_id TEXT NOT NULL REFERENCES endpoint_principals(id),
+  bound_at INTEGER NOT NULL
+);
+
+CREATE INDEX idx_endpoint_instance_bindings_principal
+  ON endpoint_instance_bindings(principal_id);

package/dist/src/storage/sqlite/migrations/runner.d.ts

@@ -3,7 +3,7 @@ import type { ApplyMigrationsOptions } from './types.js';
 /** Baseline schema version applied from schema.sql on first open. */
 export declare const XOPC_DB_BASELINE_SCHEMA_VERSION = 11;
 /** Latest schema version this release supports (increment when adding migrations). */
-export declare const XOPC_DB_SCHEMA_VERSION = 107;
+export declare const XOPC_DB_SCHEMA_VERSION = 112;
 export declare function resolveMigrationsDir(override?: string): string;
 /**
  * Apply sequential SQL migrations from (currentVersion + 1) through targetVersion.

package/dist/src/storage/sqlite/migrations/runner.js

@@ -12,7 +12,7 @@ const log = createLogger("Sqlite:Migrations");
 /** Baseline schema version applied from schema.sql on first open. */
 const XOPC_DB_BASELINE_SCHEMA_VERSION = 11;
 /** Latest schema version this release supports (increment when adding migrations). */
-const XOPC_DB_SCHEMA_VERSION = 107;
+const XOPC_DB_SCHEMA_VERSION = 112;
 const MODULE_DIR = dirname(fileURLToPath(import.meta.url));
 function backupBeforeTaskCutover(db, databasePath) {
 	db.exec("PRAGMA wal_checkpoint(FULL)");
@@ -57,7 +57,7 @@ function applySingleMigration(db, migration) {
 * Each step runs in its own transaction and updates schema_meta on success.
 */
 function applyPendingMigrations(db, options = {}) {
-	const targetVersion = options.targetVersion ?? 107;
+	const targetVersion = options.targetVersion ?? 112;
 	let currentVersion = readSchemaVersion(db);
 	if (currentVersion > targetVersion) throw new DatabaseSchemaTooNewError(currentVersion, targetVersion);
 	if (currentVersion >= targetVersion) return currentVersion;
@@ -94,7 +94,7 @@ function applyPendingMigrations(db, options = {}) {
 }
 /** Inspect schema version without mutating the database. */
 function inspectSchemaMigrationStatus(db, options = {}) {
-	const appVersion = options.targetVersion ?? 107;
+	const appVersion = options.targetVersion ?? 112;
 	const dbVersion = readSchemaVersion(db);
 	if (dbVersion > appVersion) return {
 		dbVersion,

package/dist/src/storage/sqlite/migrations/runner.ts

@@ -19,7 +19,7 @@ const log = createLogger('Sqlite:Migrations');
 export const XOPC_DB_BASELINE_SCHEMA_VERSION = 11;
 
 /** Latest schema version this release supports (increment when adding migrations). */
-export const XOPC_DB_SCHEMA_VERSION = 107;
+export const XOPC_DB_SCHEMA_VERSION = 112;
 
 const MODULE_DIR = dirname(fileURLToPath(import.meta.url));
 

package/dist/src/storage/sqlite/schema.js

@@ -32,7 +32,7 @@ function ensureXopcDatabaseSchema(db, options = {}) {
 		currentVersion = 11;
 	}
 	applyPendingMigrations(db, {
-		targetVersion: 107,
+		targetVersion: 112,
 		databasePath: options.databasePath
 	});
 }

package/dist/src/storage/sqlite/session-input-repository.d.ts

@@ -1,3 +1,4 @@
+import { type TurnOrigin } from '@xopcai/endpoint-tools-protocol';
 export type SessionInputDelivery = 'next' | 'steer';
 export type SessionInputStatus = 'queued' | 'running' | 'injecting' | 'completed' | 'cancelled' | 'failed' | 'interrupted';
 export type SessionInput = {
@@ -10,6 +11,7 @@ export type SessionInput = {
     content: string;
     attachments?: unknown[];
     thinking?: string;
+    origin: TurnOrigin;
     position: number;
     targetRunId?: string;
     runId?: string;
@@ -37,6 +39,7 @@ export declare function insertSessionInput(input: {
     content: string;
     attachments?: unknown[];
     thinking?: string;
+    origin: TurnOrigin;
     targetRunId?: string;
 }): SessionInput;
 export declare function claimNextSessionInput(sessionKey: string, runId: string): SessionInput | undefined;

package/dist/src/storage/sqlite/session-input-repository.js

@@ -1,4 +1,5 @@
 import { getSqliteDatabase, runSqliteWriteTransaction } from "./transaction.js";
+import { turnOriginSchema } from "../../../packages/endpoint-tools-protocol/src/index.js";
 //#region src/storage/sqlite/session-input-repository.ts
 function mapInput(row) {
 	return {
@@ -12,6 +13,7 @@ function mapInput(row) {
 		attachments: row.attachments_json ? JSON.parse(row.attachments_json) : void 0,
 		thinking: row.thinking ?? void 0,
 		position: row.position,
+		origin: turnOriginSchema.parse(JSON.parse(row.origin_json)),
 		targetRunId: row.target_run_id ?? void 0,
 		runId: row.run_id ?? void 0,
 		version: row.version,
@@ -21,7 +23,7 @@ function mapInput(row) {
 	};
 }
 const SELECT_INPUTS = `SELECT id, session_key, client_message_id, requested_delivery,
-  effective_delivery, status, content, attachments_json, thinking, position,
+  effective_delivery, status, content, attachments_json, thinking, origin_json, position,
   target_run_id, run_id, version, error, created_at_ms, updated_at_ms
   FROM session_inputs`;
 function ensureRuntime(db, sessionKey) {
@@ -61,8 +63,8 @@ function insertSessionInput(input) {
       WHERE session_key = ? AND status IN ('queued','running','injecting','interrupted')`).get(input.sessionKey);
 		db.prepare(`INSERT INTO session_inputs(id, session_key, client_message_id,
       requested_delivery, effective_delivery, status, content, attachments_json,
-      thinking, position, target_run_id, version, created_at_ms, updated_at_ms)
-      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, 1, ?, ?)`).run(input.id, input.sessionKey, input.clientMessageId, input.requestedDelivery, input.effectiveDelivery, input.status, input.content, input.attachments ? JSON.stringify(input.attachments) : null, input.thinking ?? null, max.value + 1, input.targetRunId ?? null, now, now);
+      thinking, origin_json, position, target_run_id, version, created_at_ms, updated_at_ms)
+      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, 1, ?, ?)`).run(input.id, input.sessionKey, input.clientMessageId, input.requestedDelivery, input.effectiveDelivery, input.status, input.content, input.attachments ? JSON.stringify(input.attachments) : null, input.thinking ?? null, JSON.stringify(input.origin), max.value + 1, input.targetRunId ?? null, now, now);
 		bumpRevision(db, input.sessionKey);
 		return mapInput(db.prepare(`${SELECT_INPUTS} WHERE id = ?`).get(input.id));
 	});

package/dist/src/tasks/home-query-service.d.ts

@@ -77,7 +77,7 @@ export declare function buildHomeBriefing(input: {
         id: string;
         kind: "task" | "agent_judgment" | "connector_approval";
         title: string;
-        reason: "paused" | "external" | "blocked" | "dependency" | "user_input" | "approval_required" | "overdue" | "needs_input" | "user_approval" | "scheduled" | "retry" | "due_soon" | "decision_needed";
+        reason: "external" | "paused" | "blocked" | "dependency" | "user_input" | "approval_required" | "overdue" | "needs_input" | "user_approval" | "scheduled" | "retry" | "due_soon" | "decision_needed";
         urgency: "now" | "soon";
         href: string;
         updatedAt: number;

package/dist/src/tui/backends/embedded-backend.js

@@ -185,7 +185,7 @@ var EmbeddedBackend = class {
 				this.onEvent?.({
 					event,
 					data: payload,
-					source: "broadcast"
+					source: "embedded"
 				});
 			}
 		};
@@ -311,7 +311,10 @@ var EmbeddedBackend = class {
 		(async () => {
 			try {
 				const messageForAgent = opts.message.trimStart().startsWith("/") ? opts.message : prependEnvelopeTimestamp(opts.message);
-				const stream = agent.turnDispatcher.processDirectStreaming(messageForAgent, opts.sessionKey, opts.attachments, opts.thinking, {
+				const stream = agent.turnDispatcher.processDirectStreaming(messageForAgent, opts.sessionKey, {
+					type: "system",
+					source: "cli"
+				}, opts.attachments, opts.thinking, {
 					signal,
 					runId
 				});

package/dist/src/tui/backends/{gateway-sse-backend.d.ts → gateway-realtime-backend.d.ts}

@@ -4,22 +4,24 @@ import type { ChatSendOptions, HistoryMessage, TuiBackend, TuiCompactionResult,
 import type { SessionInfo } from '../tui-types.js';
 import type { ReviewContext } from '../../review/review-git.js';
 import { type GatewayCredential } from '../../gateway/credential.js';
-interface GatewaySSEOptions {
+interface GatewayRealtimeOptions {
     url: string;
     credential?: GatewayCredential;
 }
-export declare function normalizeGatewaySseEvent(evt: TuiEvent): TuiEvent;
 /**
- * TUI backend that communicates with a running xopc gateway via HTTP + SSE.
+ * TUI backend that communicates with a running xopc gateway via REST + realtime WebSocket.
  *
- * - Agent input: durable session input REST plus resumable run SSE
- * - Broadcast events: `GET /api/events` via long-lived SSE
+ * - Agent input: durable session input REST plus replayable run topics
+ * - Broadcast events: gateway realtime topic
  * - REST calls for sessions, models, etc.
  */
-export declare class GatewaySseBackend implements TuiBackend {
+export declare class GatewayRealtimeBackend implements TuiBackend {
     private readonly baseUrl;
     private readonly credential;
-    private eventAbort;
+    private readonly clientId;
+    private realtime;
+    private activeRunId;
+    private observedSessionKey;
     private chatAbort;
     onEvent?: (evt: TuiEvent) => void;
     onConnected?: () => void;
@@ -28,7 +30,7 @@ export declare class GatewaySseBackend implements TuiBackend {
         expected: number;
         received: number;
     }) => void;
-    constructor(opts: GatewaySSEOptions);
+    constructor(opts: GatewayRealtimeOptions);
     get connectionLabel(): string;
     start(): void;
     stop(): void;
@@ -156,7 +158,8 @@ export declare class GatewaySseBackend implements TuiBackend {
     deleteSession(sessionKey: string): Promise<{
         ok: boolean;
     }>;
-    private startEventStream;
-    private scheduleReconnect;
+    private startRealtime;
+    private handleRealtimeEvent;
+    private unsubscribeActiveRun;
 }
 export {};