@xopcai/xopc 0.0.189 → 0.0.190

package/dist/src/gateway/hono/routes/you.js

@@ -1,1167 +1,283 @@
-import { runSqliteWriteTransaction } from "../../../storage/sqlite/transaction.js";
-import { getDreamingRun, listDreamingDecisions, listDreamingRuns } from "../../../storage/sqlite/dreaming-repository.js";
-import { getUserClaim, linkUserClaimMemoryRecord, listUserClaimEvidence, listUserClaimStatsBySource, listUserClaims, removeUserClaimEvidenceForSource, setUserClaimDecision } from "../../../storage/sqlite/user-claims-repository.js";
-import { listConnectorLearningJobs } from "../../../storage/sqlite/connector-learning-repository.js";
-import { setInteractionState } from "../../../storage/sqlite/interaction-state-repository.js";
-import { getRelationshipSettings, updateRelationshipSettings } from "../../../storage/sqlite/relationship-settings-repository.js";
-import { deleteMemoryRecord, getMemoryRecord, getMemoryTurnFeedback, listMemoryRecords, listMemorySignals, setMemoryTurnFeedback, upsertMemoryRecord } from "../../../storage/sqlite/memory-records-repository.js";
-import { listKnowledgeSourceItems, listKnowledgeSyncRuns } from "../../../storage/sqlite/knowledge-repository.js";
-import { listConnectorConnections } from "../../../storage/sqlite/connector-repository.js";
-import { getConnectorAccount } from "../../../storage/sqlite/connector-account-repository.js";
-import { USER_TRUST_LEVELS, isUserTrustLevel } from "../../../user-context/trust-policy.js";
-import { getUserTrustPolicy, setUserTrustPolicy } from "../../../storage/sqlite/user-trust-repository.js";
-import { decideMemoryReferenceConsent, listMemoryReferenceConsents, revokeMemoryReferenceConsent } from "../../../storage/sqlite/memory-reference-consent-repository.js";
-import { getUserProfilePromptState, setUserProfilePromptState } from "../../../storage/sqlite/user-profile-setup-repository.js";
+import { listContextConsolidationRuns } from "../../../storage/sqlite/context-consolidation-repository.js";
+import { createCollaborationRule, createUnderstanding, decideContextConsent, deleteCollaborationRule, deleteUnderstanding, getCollaborationRule, getTurnPersonalization, getUnderstanding, getUserProfile, listCollaborationRules, listUnderstandingEvidence, listUnderstandings, recordContextFeedback, rejectUnderstanding, reviseCollaborationRule, reviseUnderstanding, setCollaborationRuleStatus, setUnderstandingStatus, updateUserProfile } from "../../../storage/sqlite/user-context-repository.js";
 import "../../../storage/sqlite/index.js";
-import { DreamingSettingsSchema, UserContextConfigSchema, init_config } from "../../../user-context/config.js";
-import { init_agent_scope, resolveDefaultAgentId } from "../../../agent/agent-scope.js";
-import { TaskRepository } from "../../../tasks/task-repository.js";
-import { revokeComposioConnection } from "../../../connectors/composio.js";
-import { listConnectorCatalog } from "../../../connectors/catalog.js";
-import { nextDreamingRunTimes } from "../../../agent/memory/dreaming/schedule.js";
-import { resolveDreamingSettings } from "../../../agent/memory/dreaming/config.js";
-import { readUserProfileFile, writeUserProfileFile } from "../../agents-admin.js";
-import { TaskContextRepository } from "../../../tasks/task-context-repository.js";
-import "../../../tasks/index.js";
-import { nextMemoryReviewAt } from "../../../agent/memory/lifecycle.js";
-import { isUserContextMemoryKind, isUserContextRecord, projectPersonalContextSources, projectUserContextRecord, recordsDerivedFromPersonalContextSource } from "../../../user-context/projection.js";
-import { PERSONAL_PLAYBOOK_DISABLED_TAG, PERSONAL_PLAYBOOK_ORDER_PREFIX, PERSONAL_PLAYBOOK_RULE_TAG, patchPersonalPlaybookContextTags, personalPlaybookContext } from "../../../user-context/personal-playbook.js";
-import { INSIGHT_ACCEPTED_TAG, INSIGHT_DISMISSED_TAG, USER_CONFIRMED_MEMORY_TAG, buildActionableInsightSuggestions } from "../../../user-context/actionableInsights.js";
-import { createManualUnderstanding } from "../../../user-context/manual-understanding.js";
-import { resolveDreamingAgentScope } from "../../../agent/memory/dreaming/scope.js";
-import { runDreamingPhase } from "../../../agent/memory/dreaming/runner.js";
-import { listConnectorInstances } from "../../../connectors/instances.js";
-import { uninstallConnector } from "../../../connectors/install.js";
-import { renderUserClaim } from "../../../knowledge/connected-understanding-pipeline.js";
-import { prepareUserContextImport } from "../../../user-context/import.js";
-import { buildUserProfileSetup, parseUserProfileMarkdown, patchUserProfileMarkdown } from "../../../user-context/profile.js";
-import { buildTaskSourceRecommendations } from "../../../user-context/source-recommendations.js";
+import { userInfo } from "node:os";
+import { createHash } from "node:crypto";
 //#region src/gateway/hono/routes/you.ts
-init_agent_scope();
-init_config();
-const VISIBLE_STATUSES = new Set([
-	"active",
-	"candidate",
-	"needs_review"
+const UNDERSTANDING_KINDS = new Set([
+	"preference",
+	"boundary",
+	"relationship",
+	"routine",
+	"current_state",
+	"long_term_goal",
+	"project_context",
+	"task_lesson",
+	"derived_insight"
 ]);
-const FEEDBACK_RATINGS = new Set([
-	"helpful",
-	"not_helpful",
-	"mixed",
-	"irrelevant",
-	"incorrect",
-	"outdated",
-	"sensitive"
-]);
-const PLAYBOOK_IDS = [
-	"communication",
-	"execution",
-	"routines"
-];
-const PLAYBOOK_SUPPORT_NEEDS = new Set([
-	"listen",
-	"clarify",
-	"advise",
-	"act",
-	"unknown"
-]);
-const PROFILE_FIELD_LIMITS = {
-	callName: 80,
-	pronouns: 80,
-	timezone: 100,
-	notes: 5e3
-};
-const PROFILE_PROMPT_SNOOZE_MS = 10080 * 60 * 1e3;
-const ALL_MEMORY_STATUSES = [
+const UNDERSTANDING_STATUSES = new Set([
 	"candidate",
 	"active",
 	"needs_review",
 	"stale",
 	"archived",
 	"rejected"
-];
-const MEMORY_SENSITIVITIES = new Set([
-	"normal",
-	"personal",
-	"secret",
-	"regulated"
 ]);
-const MEMORY_DURABILITIES = new Set([
-	"ephemeral",
-	"durable",
-	"recurring"
+const RULE_CATEGORIES = new Set([
+	"communication",
+	"execution",
+	"boundary",
+	"routine",
+	"proactive"
 ]);
-const MEMORY_DISCLOSURE_POLICIES = new Set([
-	"silent",
-	"referenceable",
-	"ask_before_reference"
+const RULE_STATUSES = new Set([
+	"active",
+	"disabled",
+	"archived"
 ]);
-function listAllUserContextRecords(statuses) {
-	return statuses.flatMap((status) => {
-		const records = [];
-		let offset = 0;
-		while (true) {
-			const page = listMemoryRecords({
-				status,
-				limit: 500,
-				offset
-			});
-			records.push(...page);
-			if (page.length < 500) break;
-			offset += page.length;
-		}
-		return records;
-	});
-}
-function projectReferenceConsent(consent, record) {
-	return {
-		id: consent.id,
-		recordId: consent.recordId,
-		sessionKey: consent.sessionKey,
-		purpose: consent.purpose,
-		statement: record.content,
-		sourceName: record.source.provider ?? "local",
-		status: consent.status,
-		grantScope: consent.grantScope,
-		expiresAt: consent.expiresAt,
-		createdAt: consent.createdAt,
-		updatedAt: consent.updatedAt
-	};
+const FEEDBACK_RATINGS = new Set([
+	"helpful",
+	"irrelevant",
+	"wrong",
+	"stale",
+	"sensitive"
+]);
+function asRecord(value) {
+	return value && typeof value === "object" && !Array.isArray(value) ? value : void 0;
 }
-function buildConflictGroups(records) {
-	const groups = /* @__PURE__ */ new Map();
-	for (const record of records) {
-		if (!record.conflictGroupId) continue;
-		const group = groups.get(record.conflictGroupId) ?? [];
-		group.push(record);
-		groups.set(record.conflictGroupId, group);
+async function readBody(c) {
+	try {
+		return asRecord(await c.req.json());
+	} catch {
+		return;
 	}
-	return [...groups.entries()].filter(([, group]) => group.length > 1 && group.some((record) => VISIBLE_STATUSES.has(record.status))).map(([id, group]) => ({
-		id,
-		records: group.sort((left, right) => Date.parse(right.updatedAt) - Date.parse(left.updatedAt)).map((record) => ({
-			...projectUserContextRecord(record),
-			storedStatus: record.status
-		})),
-		unresolved: group.filter((record) => VISIBLE_STATUSES.has(record.status)).length > 1
-	}));
-}
-async function readProfileBundle(config) {
-	const result = await readUserProfileFile();
-	const profileContent = result.ok ? result.data.content : "";
-	const profile = parseUserProfileMarkdown(profileContent);
-	return {
-		profileContent,
-		profile,
-		profileSetup: buildUserProfileSetup({
-			profile,
-			promptState: getUserProfilePromptState(),
-			config
-		})
-	};
 }
-function parseProfilePatch(body) {
-	if (!body || typeof body !== "object" || Array.isArray(body)) return { error: "Invalid profile patch" };
-	const record = body;
-	const patch = {};
-	for (const field of Object.keys(PROFILE_FIELD_LIMITS)) {
-		if (!(field in record)) continue;
-		if (typeof record[field] !== "string") return { error: `${field} must be a string` };
-		const value = record[field].trim();
-		if (value.length > PROFILE_FIELD_LIMITS[field]) return { error: `${field} is too long` };
-		patch[field] = value;
-	}
-	return Object.keys(patch).length > 0 ? { patch } : { error: "No profile fields provided" };
+function nonEmptyString(value, max = 2e3) {
+	if (typeof value !== "string") return void 0;
+	const result = value.trim();
+	return result && result.length <= max ? result : void 0;
 }
-function playbookForRecord(record) {
-	if (!record.tags?.includes("playbook:rule")) return void 0;
-	if (record.kind === "preference" || record.kind === "boundary" || record.kind === "tool_preference") return "communication";
-	if (record.kind === "task_lesson" || record.kind === "derived_insight") return "execution";
-	if (record.kind === "routine") return "routines";
+function scopeFrom(value) {
+	const raw = asRecord(value);
+	const type = raw?.type;
+	if (type !== "global" && type !== "workspace" && type !== "project" && type !== "session") return void 0;
+	if (type === "global") return { type };
+	const id = nonEmptyString(raw.id, 500);
+	return id ? {
+		type,
+		id
+	} : void 0;
 }
-function playbookRuleOrder(record) {
-	const tag = record.tags?.find((value) => value.startsWith(PERSONAL_PLAYBOOK_ORDER_PREFIX));
-	const parsed = tag ? Number.parseInt(tag.slice(PERSONAL_PLAYBOOK_ORDER_PREFIX.length), 10) : NaN;
-	return Number.isFinite(parsed) ? parsed : 1e3;
+function canonicalKey(kind, statement) {
+	const normalized = statement.toLocaleLowerCase().replace(/[^\p{L}\p{N}]+/gu, " ").trim();
+	return `${kind}:${createHash("sha256").update(normalized).digest("hex").slice(0, 20)}`;
 }
-function patchPlaybookRuleTags(record, patch) {
-	let tags = (record.tags ?? []).filter((tag) => !tag.startsWith(PERSONAL_PLAYBOOK_ORDER_PREFIX));
-	if (patch.enabled === true) tags = tags.filter((tag) => tag !== PERSONAL_PLAYBOOK_DISABLED_TAG);
-	if (patch.enabled === false) tags.push(PERSONAL_PLAYBOOK_DISABLED_TAG);
-	if (patch.order !== void 0) tags.push(`${PERSONAL_PLAYBOOK_ORDER_PREFIX}${patch.order}`);
-	return [...new Set(tags)];
+function sameScope(left, right) {
+	return left.type === right.type && left.id === right.id;
 }
-function parsePlaybookContext(value) {
-	if (value === void 0) return { context: {} };
-	if (!value || typeof value !== "object" || Array.isArray(value)) return { error: "context must be an object" };
-	const input = value;
-	const context = {};
-	if ("channel" in input) {
-		if (input.channel !== null && (typeof input.channel !== "string" || !/^[a-z0-9_-]{1,40}$/i.test(input.channel))) return { error: "context.channel is invalid" };
-		context.channel = input.channel === null ? void 0 : String(input.channel);
-	}
-	if ("supportNeed" in input) {
-		if (input.supportNeed !== null && !PLAYBOOK_SUPPORT_NEEDS.has(String(input.supportNeed))) return { error: "context.supportNeed is invalid" };
-		context.supportNeed = input.supportNeed === null ? void 0 : input.supportNeed;
+function validTimezone(value) {
+	if (!value) return true;
+	try {
+		new Intl.DateTimeFormat("en", { timeZone: value }).format();
+		return true;
+	} catch {
+		return false;
 	}
-	return { context };
-}
-function buildPersonalPlaybooks(records) {
-	return PLAYBOOK_IDS.map((id) => {
-		const rules = records.filter((record) => record.status === "active" && playbookForRecord(record) === id).sort((left, right) => playbookRuleOrder(left) - playbookRuleOrder(right) || left.updatedAt.localeCompare(right.updatedAt));
-		return {
-			id,
-			enabled: rules.some((record) => !record.tags?.includes(PERSONAL_PLAYBOOK_DISABLED_TAG)),
-			rules: rules.map((record) => ({
-				id: record.id,
-				statement: record.content,
-				origin: record.explicitness,
-				enabled: !record.tags?.includes(PERSONAL_PLAYBOOK_DISABLED_TAG),
-				order: playbookRuleOrder(record),
-				context: personalPlaybookContext(record),
-				versions: playbookVersionChain(records, record.id).map((version) => ({
-					id: version.id,
-					statement: version.content,
-					updatedAt: version.updatedAt,
-					current: version.id === record.id
-				}))
-			})),
-			updatedAt: rules.map((record) => record.updatedAt).sort().at(-1)
-		};
-	});
-}
-function buildRoutineAutomationDraftHref(record) {
-	return `/automations?${new URLSearchParams({
-		draft: record.content,
-		autogenerate: "1",
-		insight: record.id
-	}).toString()}`;
-}
-function selectedAgentId(config) {
-	return resolveDefaultAgentId(config);
-}
-function editableRecord(recordId) {
-	const record = getMemoryRecord(recordId);
-	if (!record || !VISIBLE_STATUSES.has(record.status) || !isUserContextRecord(record)) return null;
-	return record;
 }
-function memoryRecordInput(record) {
-	return {
-		providerId: record.providerId,
-		kind: record.kind,
-		userId: record.scope.userId,
-		sourceAgentId: record.provenance.sourceAgentId,
-		workspaceId: record.scope.workspaceId,
-		sessionKey: record.scope.sessionKey,
-		projectId: record.scope.projectId,
-		content: record.content,
-		source: record.source,
-		confidence: record.confidence,
-		tags: record.tags,
-		status: record.status,
-		sensitivity: record.sensitivity,
-		canonicalKey: record.canonicalKey,
-		explicitness: record.explicitness,
-		durability: record.durability,
-		importance: record.importance,
-		disclosurePolicy: record.disclosurePolicy,
-		evidence: record.evidence,
-		reviewAfter: record.reviewAfter,
-		expiresAt: record.expiresAt,
-		validFrom: record.validFrom,
-		validTo: record.validTo,
-		supersedesRecordId: record.supersedesRecordId,
-		conflictGroupId: record.conflictGroupId
-	};
-}
-function preserveRecord(record, patch) {
-	return upsertMemoryRecord({
-		...memoryRecordInput(record),
-		...patch,
-		id: record.id
-	});
-}
-function playbookVersionChain(records, recordId) {
-	const relatedIds = new Set([recordId]);
-	let previousSize = 0;
-	while (previousSize !== relatedIds.size) {
-		previousSize = relatedIds.size;
-		for (const record of records) {
-			if (!record.supersedesRecordId) continue;
-			if (relatedIds.has(record.id) || relatedIds.has(record.supersedesRecordId)) {
-				relatedIds.add(record.id);
-				relatedIds.add(record.supersedesRecordId);
-			}
-		}
+function machineCallName() {
+	try {
+		const username = userInfo().username.trim();
+		return [
+			"root",
+			"admin",
+			"administrator",
+			"user"
+		].includes(username.toLocaleLowerCase()) ? "" : username.slice(0, 100);
+	} catch {
+		return "";
 	}
-	return records.filter((record) => relatedIds.has(record.id) && playbookForRecord(record) !== void 0).sort((left, right) => Date.parse(right.updatedAt) - Date.parse(left.updatedAt));
-}
-function versionPlaybookRule(record, patch) {
-	return upsertMemoryRecord({
-		...memoryRecordInput(record),
-		...patch,
-		status: "active",
-		supersedesRecordId: record.id,
-		source: {
-			provider: "local",
-			path: "you://playbook/version"
-		}
-	});
 }
 function registerYouRoutes(authenticated, deps) {
-	authenticated.get("/api/you", async (c) => {
-		const config = deps.service.currentConfig;
-		const agentId = selectedAgentId(config);
-		const profileBundle = await readProfileBundle(config);
-		const allUserContextRecords = listAllUserContextRecords(ALL_MEMORY_STATUSES).filter(isUserContextRecord);
-		const records = allUserContextRecords.filter((record) => VISIBLE_STATUSES.has(record.status));
-		const recordById = new Map(allUserContextRecords.map((record) => [record.id, record]));
-		const consents = listMemoryReferenceConsents();
-		const trustPolicy = getUserTrustPolicy();
-		const sourceDefinitions = listConnectorCatalog();
-		const sourceInstances = listConnectorInstances(config);
-		const sources = projectPersonalContextSources(sourceDefinitions, sourceInstances, {
-			sourceItems: listKnowledgeSourceItems({ limit: 500 }),
-			syncRuns: listKnowledgeSyncRuns({ limit: 500 }),
-			connections: listConnectorConnections({ principalId: "local-owner" }),
-			learningJobs: listConnectorLearningJobs({ limit: 500 }),
-			claimStatsBySource: listUserClaimStatsBySource()
-		});
-		const openTasks = new TaskRepository().list({ limit: 500 }).filter((task) => task.delegateAgentId === agentId && task.phase !== "closed");
-		const activeTasks = openTasks.slice(0, 20).map((task) => {
-			return {
-				id: task.id,
-				title: task.title,
-				body: task.body
-			};
-		});
-		return c.json({
-			scope: {
-				profile: "global",
-				memory: "global",
-				trust: "global"
-			},
-			...profileBundle,
-			understanding: records.map(projectUserContextRecord),
-			connectedClaims: listUserClaims({
-				agentId,
-				limit: 100
-			}).map((claim) => ({
-				...claim,
-				evidence: listUserClaimEvidence(claim.id)
-			})),
-			consentRequests: consents.filter((consent) => consent.status === "pending").flatMap((consent) => {
-				const record = recordById.get(consent.recordId);
-				return record ? [projectReferenceConsent(consent, record)] : [];
-			}),
-			referenceGrants: consents.filter((consent) => consent.status === "granted" && (!consent.expiresAt || Date.parse(consent.expiresAt) > Date.now())).flatMap((consent) => {
-				const record = recordById.get(consent.recordId);
-				return record ? [projectReferenceConsent(consent, record)] : [];
-			}),
-			conflictGroups: buildConflictGroups(allUserContextRecords),
-			insights: buildActionableInsightSuggestions(records, openTasks.map((task) => [task.title, task.body].filter(Boolean).join("\n"))).map((insight) => ({
-				...insight,
-				delegateAgentId: agentId
-			})),
-			playbooks: buildPersonalPlaybooks(allUserContextRecords),
-			sources,
-			sourceRecommendations: buildTaskSourceRecommendations(sourceDefinitions, new Set(sourceInstances.map((instance) => instance.connectorId)), activeTasks),
-			controls: {
-				mode: config.userContext.memory.mode,
-				sensitiveWritePolicy: config.userContext.privacy.sensitiveWritePolicy
-			},
-			relationship: getRelationshipSettings(),
-			trust: {
-				defaultActionLevel: trustPolicy.defaultActionLevel,
-				levels: USER_TRUST_LEVELS,
-				autoRequiresExplicitOptIn: true
-			}
-		});
-	});
-	authenticated.get("/api/you/feedback/:turnId", (c) => {
-		const trace = getMemoryTurnFeedback(c.req.param("turnId"));
-		if (!trace) return c.json({ error: "Turn context not found" }, 404);
-		const personalContext = trace.selectedRecordIds.map((id) => getMemoryRecord(id)).filter((record) => Boolean(record) && isUserContextRecord(record)).map(projectUserContextRecord);
-		return c.json({
-			trace,
-			personalContext
-		});
-	});
-	authenticated.put("/api/you/feedback/:turnId", deps.strictRateLimitMiddleware, async (c) => {
-		const body = await c.req.json().catch(() => null);
-		if (!body || typeof body !== "object" || Array.isArray(body)) return c.json({ error: "Invalid feedback" }, 400);
-		const input = body;
-		if (typeof input.rating !== "string" || !FEEDBACK_RATINGS.has(input.rating)) return c.json({ error: "Invalid rating" }, 400);
-		const records = Array.isArray(input.records) ? input.records.flatMap((value) => {
-			if (!value || typeof value !== "object" || Array.isArray(value)) return [];
-			const item = value;
-			if (typeof item.recordId !== "string" || typeof item.rating !== "string" || !FEEDBACK_RATINGS.has(item.rating)) return [];
-			return [{
-				recordId: item.recordId,
-				rating: item.rating,
-				...typeof item.reasonCode === "string" ? { reasonCode: item.reasonCode } : {},
-				...typeof item.note === "string" ? { note: item.note } : {}
-			}];
-		}) : void 0;
-		const trace = setMemoryTurnFeedback({
-			turnId: c.req.param("turnId"),
-			rating: input.rating,
-			source: "user",
-			...typeof input.score === "number" ? { score: input.score } : {},
-			...typeof input.reasonCode === "string" ? { reasonCode: input.reasonCode } : {},
-			...typeof input.note === "string" ? { note: input.note } : {},
-			...records ? { records } : {}
-		});
-		if (!trace) return c.json({ error: "Turn context not found" }, 404);
-		if (trace.sessionKey && input.rating === "not_helpful" && input.reasonCode === "tone_mismatch") setInteractionState({
-			sessionKey: trace.sessionKey,
-			signal: {
-				supportNeed: "unknown",
-				confidence: 1,
-				source: "explicit",
-				repairStatus: "needed",
-				repairReason: "tone_mismatch"
-			}
-		});
-		const personalContext = trace.selectedRecordIds.map((id) => getMemoryRecord(id)).filter((record) => Boolean(record) && isUserContextRecord(record)).map(projectUserContextRecord);
-		return c.json({
-			trace,
-			personalContext
-		});
-	});
-	authenticated.get("/api/you/dreaming", (c) => {
-		const config = deps.service.currentConfig;
-		const scope = resolveDreamingAgentScope(config);
-		const settings = resolveDreamingSettings(config);
-		const signals = listMemorySignals({
-			workspaceId: scope.workspaceDir,
-			limit: 500
-		});
-		return c.json({
-			agentId: scope.agentId,
-			settings,
-			config: {
-				...scope.config,
-				phases: {
-					light: {
-						...scope.config.phases.light,
-						nextRunsAt: nextDreamingRunTimes(scope.config.phases.light.schedule, scope.config.timezone)
-					},
-					deep: {
-						...scope.config.phases.deep,
-						nextRunsAt: nextDreamingRunTimes(scope.config.phases.deep.schedule, scope.config.timezone)
-					},
-					rem: {
-						...scope.config.phases.rem,
-						nextRunsAt: nextDreamingRunTimes(scope.config.phases.rem.schedule, scope.config.timezone)
-					}
-				}
-			},
-			readiness: scope.readiness,
-			runs: listDreamingRuns({
-				agentId: scope.agentId,
-				limit: 50
-			}),
-			signalCount: signals.filter((signal) => signal.source === "dreaming").length
-		});
-	});
-	authenticated.put("/api/you/dreaming", deps.strictRateLimitMiddleware, async (c) => {
-		const config = deps.service.currentConfig;
-		const body = await c.req.json().catch(() => ({}));
-		const settings = DreamingSettingsSchema.safeParse(body);
-		if (!settings.success) return c.json({ error: settings.error.issues[0]?.message ?? "Invalid Dreaming settings" }, 400);
-		const currentPhases = config.userContext.dreaming.phases ?? {};
-		const parsed = UserContextConfigSchema.safeParse({
-			...config.userContext,
-			dreaming: {
-				...config.userContext.dreaming,
-				mode: settings.data.mode,
-				timezone: settings.data.timezone,
-				phases: {
-					light: {
-						...currentPhases.light,
-						...settings.data.phases.light
-					},
-					deep: {
-						...currentPhases.deep,
-						...settings.data.phases.deep
-					},
-					rem: {
-						...currentPhases.rem,
-						...settings.data.phases.rem
-					}
-				}
-			}
-		});
-		if (!parsed.success) return c.json({ error: parsed.error.issues[0]?.message ?? "Invalid Dreaming settings" }, 400);
-		const saved = await deps.service.saveConfig({
-			...config,
-			userContext: parsed.data
-		});
-		if (!saved.saved) return c.json({ error: saved.error ?? "save failed" }, 500);
-		const savedConfig = deps.service.currentConfig;
-		return c.json({ settings: resolveDreamingSettings(savedConfig) });
-	});
-	authenticated.get("/api/you/readiness", (c) => {
-		return c.json(resolveDreamingAgentScope(deps.service.currentConfig).readiness);
-	});
-	authenticated.post("/api/you/dreaming/runs", deps.strictRateLimitMiddleware, async (c) => {
-		const body = await c.req.json().catch(() => ({}));
-		const phase = body.phase === "light" || body.phase === "deep" || body.phase === "rem" ? body.phase : "deep";
-		try {
-			const result = await runDreamingPhase({
-				config: deps.service.currentConfig,
-				phase,
-				triggerKind: "manual"
-			});
-			return c.json(result);
-		} catch (error) {
-			return c.json({ error: error instanceof Error ? error.message : String(error) }, 400);
-		}
-	});
-	authenticated.get("/api/you/dreaming/runs/:runId", (c) => {
-		const scope = resolveDreamingAgentScope(deps.service.currentConfig);
-		const run = getDreamingRun(c.req.param("runId"));
-		if (!run || run.agentId !== scope.agentId || run.workspaceId !== scope.workspaceDir) return c.json({ error: "Dreaming run not found" }, 404);
+	const write = deps.strictRateLimitMiddleware;
+	authenticated.get("/api/you", (c) => c.json({
+		profile: getUserProfile(),
+		understandings: listUnderstandings(),
+		rules: listCollaborationRules(),
+		consolidation: { lastRun: listContextConsolidationRuns(1)[0] ?? null }
+	}));
+	authenticated.get("/api/you/profile", (c) => {
+		const profile = getUserProfile();
 		return c.json({
-			run,
-			decisions: listDreamingDecisions(run.runId)
+			profile,
+			suggestedCallName: profile.callName || machineCallName()
 		});
 	});
-	authenticated.patch("/api/you/relationship", deps.strictRateLimitMiddleware, async (c) => {
-		const body = await c.req.json().catch(() => null);
-		if (!body || typeof body !== "object" || Array.isArray(body)) return c.json({ error: "Invalid relationship settings" }, 400);
-		const input = body;
+	authenticated.patch("/api/you/profile", write, async (c) => {
+		const body = await readBody(c);
+		if (!body) return c.json({ error: "Invalid JSON" }, 400);
 		const patch = {};
-		if ("supportMode" in input) {
-			if (![
-				"efficient",
-				"coach",
-				"companion",
-				"auto"
-			].includes(String(input.supportMode))) return c.json({ error: "Invalid supportMode" }, 400);
-			patch.supportMode = input.supportMode;
-		}
-		if ("proactiveEnabled" in input) {
-			if (typeof input.proactiveEnabled !== "boolean") return c.json({ error: "proactiveEnabled must be boolean" }, 400);
-			patch.proactiveEnabled = input.proactiveEnabled;
-		}
-		for (const field of ["quietStart", "quietEnd"]) {
-			if (!(field in input)) continue;
-			const value = input[field];
-			if (value !== null && (typeof value !== "string" || !/^([01]\d|2[0-3]):[0-5]\d$/.test(value))) return c.json({ error: `${field} must use HH:mm` }, 400);
-			patch[field] = value === null ? void 0 : String(value);
+		for (const field of [
+			"callName",
+			"role",
+			"primaryGoal",
+			"pronouns",
+			"timezone",
+			"locale"
+		]) {
+			if (body[field] === void 0) continue;
+			const max = field === "primaryGoal" ? 500 : field === "role" ? 300 : 100;
+			if (typeof body[field] !== "string" || body[field].length > max) return c.json({ error: `${field} must be a string of at most ${max} characters` }, 400);
+			patch[field] = body[field].trim();
 		}
-		for (const field of ["allowedTopics", "blockedTopics"]) {
-			if (!(field in input)) continue;
-			if (!Array.isArray(input[field]) || input[field].length > 20 || input[field].some((value) => typeof value !== "string" || !value.trim() || value.length > 80)) return c.json({ error: `${field} must contain up to 20 short topics` }, 400);
-			patch[field] = [...new Set(input[field].map((value) => value.trim()))];
-		}
-		if (Object.keys(patch).length === 0) return c.json({ error: "No relationship settings provided" }, 400);
-		return c.json({
-			ok: true,
-			relationship: updateRelationshipSettings(patch)
-		});
-	});
-	authenticated.patch("/api/you/claims/:id", deps.strictRateLimitMiddleware, async (c) => {
-		const body = await c.req.json().catch(() => ({}));
-		const action = body.action === "confirm" || body.action === "reject" ? body.action : void 0;
-		if (!action) return c.json({ error: "Action must be confirm or reject" }, 400);
-		const claim = runSqliteWriteTransaction(() => {
-			const updated = setUserClaimDecision(c.req.param("id"), action === "confirm" ? "confirmed" : "rejected");
-			if (!updated) return updated;
-			const existing = updated.memoryRecordId ? getMemoryRecord(updated.memoryRecordId) : void 0;
-			if (existing) preserveRecord(existing, {
-				status: action === "confirm" ? "active" : "rejected",
-				...action === "confirm" ? { reviewAfter: nextMemoryReviewAt(existing) } : {}
-			});
-			else if (action === "confirm") {
-				const candidate = renderUserClaim(updated);
-				const evidence = listUserClaimEvidence(updated.id);
-				const record = upsertMemoryRecord({
-					providerId: "local",
-					kind: candidate.kind,
-					sourceAgentId: updated.agentId,
-					content: candidate.content,
-					canonicalKey: candidate.canonicalKey,
-					source: { provider: "connected-sources" },
-					confidence: 1,
-					status: "active",
-					sensitivity: candidate.sensitivity,
-					explicitness: "explicit",
-					durability: candidate.durability,
-					importance: candidate.importance,
-					disclosurePolicy: candidate.disclosurePolicy,
-					tags: [...new Set([
-						"user-understanding",
-						...candidate.tags ?? [],
-						USER_CONFIRMED_MEMORY_TAG
-					])],
-					evidence: evidence.map((item) => ({
-						sourceItemId: item.sourceItemId,
-						relation: item.relation === "contradicts" ? "contradicts" : "supports",
-						observedAt: item.observedAt,
-						confidence: updated.confidence
-					})),
-					reviewAfter: nextMemoryReviewAt({
-						durability: candidate.durability,
-						explicitness: "explicit"
-					})
-				});
-				linkUserClaimMemoryRecord(updated.id, record.id);
-			}
-			return getUserClaim(updated.id);
-		});
-		if (!claim) return c.json({ error: "Connected claim not found" }, 404);
-		return c.json({
-			ok: true,
-			claim: {
-				...claim,
-				evidence: listUserClaimEvidence(claim.id)
-			}
-		});
-	});
-	authenticated.get("/api/you/profile", async (c) => {
-		return c.json(await readProfileBundle(deps.service.currentConfig));
-	});
-	authenticated.get("/api/you/export", async (c) => {
-		const config = deps.service.currentConfig;
-		const profileBundle = await readProfileBundle(config);
-		const understanding = listAllUserContextRecords(ALL_MEMORY_STATUSES).filter(isUserContextRecord).map((record) => ({
-			statement: record.content,
-			kind: record.kind,
-			status: record.status,
-			sensitivity: record.sensitivity ?? "normal",
-			durability: record.durability,
-			disclosurePolicy: record.disclosurePolicy,
-			sourceName: record.source.provider ?? "local",
-			updatedAt: record.updatedAt
-		}));
-		return c.json({
-			version: 2,
-			exportedAt: (/* @__PURE__ */ new Date()).toISOString(),
-			profile: profileBundle.profile,
-			understanding
-		});
-	});
-	authenticated.post("/api/you/import", deps.strictRateLimitMiddleware, async (c) => {
-		const body = await c.req.json().catch(() => null);
-		if (!body || typeof body !== "object" || Array.isArray(body) || body.version !== 2 || !Array.isArray(body.understanding)) return c.json({ error: "Invalid About You export" }, 400);
-		if (body.understanding.length > 500) return c.json({ error: "Import is limited to 500 understandings" }, 400);
-		const config = deps.service.currentConfig;
-		const agentId = selectedAgentId(config);
-		const existingStatements = listAllUserContextRecords(ALL_MEMORY_STATUSES).filter(isUserContextRecord).map((record) => record.content);
-		const { imports, skippedCount } = prepareUserContextImport(body.understanding, existingStatements);
-		runSqliteWriteTransaction(() => {
-			for (const item of imports) upsertMemoryRecord({
-				providerId: "local",
-				kind: item.kind,
-				sourceAgentId: agentId,
-				content: item.statement,
-				source: {
-					provider: "local",
-					path: "import://about-you"
-				},
-				confidence: 1,
-				tags: ["user-understanding", "user-import"],
-				status: "candidate",
-				sensitivity: item.sensitivity,
-				explicitness: "explicit",
-				durability: item.durability,
-				importance: .7,
-				disclosurePolicy: item.disclosurePolicy
-			});
-		});
-		return c.json({
-			ok: true,
-			importedCount: imports.length,
-			skippedCount
-		});
-	});
-	authenticated.post("/api/you/understanding", deps.strictRateLimitMiddleware, async (c) => {
-		const body = await c.req.json().catch(() => ({}));
-		const content = typeof body.content === "string" ? body.content.trim() : "";
-		const kind = isUserContextMemoryKind(body.kind) ? body.kind : void 0;
-		if (!content || content.length > 5e3) return c.json({ error: "Understanding content must be 1-5000 characters" }, 400);
-		if (!kind) return c.json({ error: "A valid user understanding kind is required" }, 400);
-		const scope = body.scope === "session" ? {
-			type: "session",
-			sessionKey: typeof body.sessionKey === "string" ? body.sessionKey.trim() : ""
-		} : body.scope === void 0 || body.scope === "global" ? { type: "global" } : null;
-		if (!scope || scope.type === "session" && !scope.sessionKey) return c.json({ error: "scope must be global or a session with sessionKey" }, 400);
-		const sensitivity = MEMORY_SENSITIVITIES.has(body.sensitivity) ? body.sensitivity : "normal";
-		const durability = MEMORY_DURABILITIES.has(body.durability) ? body.durability : "durable";
-		const disclosurePolicy = MEMORY_DISCLOSURE_POLICIES.has(body.disclosurePolicy) ? body.disclosurePolicy : "referenceable";
-		const config = deps.service.currentConfig;
-		const result = createManualUnderstanding({
-			agentId: selectedAgentId(config),
-			content,
-			kind,
-			scope,
-			sensitivity,
-			durability,
-			disclosurePolicy
-		});
-		if (!result.created) return c.json({
-			error: "This understanding already exists in the selected scope",
-			understanding: projectUserContextRecord(result.record)
-		}, 409);
-		return c.json({ understanding: projectUserContextRecord(result.record) }, 201);
-	});
-	authenticated.get("/api/you/understanding/:id/history", (c) => {
-		const all = listAllUserContextRecords(ALL_MEMORY_STATUSES).filter(isUserContextRecord);
-		const target = all.find((record) => record.id === c.req.param("id"));
-		if (!target) return c.json({ error: "Understanding not found" }, 404);
-		const relatedIds = new Set([target.id]);
-		let changed = true;
-		while (changed) {
-			changed = false;
-			for (const record of all) if (record.supersedesRecordId && relatedIds.has(record.supersedesRecordId) || record.supersedesRecordId && relatedIds.has(record.id)) {
-				if (!relatedIds.has(record.id)) {
-					relatedIds.add(record.id);
-					changed = true;
-				}
-				if (record.supersedesRecordId && !relatedIds.has(record.supersedesRecordId)) {
-					relatedIds.add(record.supersedesRecordId);
-					changed = true;
-				}
-			}
+		if (body.accessibility !== void 0) {
+			const accessibility = asRecord(body.accessibility);
+			if (!accessibility) return c.json({ error: "accessibility must be an object" }, 400);
+			if (JSON.stringify(accessibility).length > 1e4) return c.json({ error: "accessibility is too large" }, 400);
+			patch.accessibility = accessibility;
 		}
-		const history = all.filter((record) => relatedIds.has(record.id)).sort((left, right) => Date.parse(right.updatedAt) - Date.parse(left.updatedAt)).map((record) => ({
-			...projectUserContextRecord(record),
-			storedStatus: record.status
-		}));
-		return c.json({ history });
-	});
-	authenticated.post("/api/you/understanding/batch", deps.strictRateLimitMiddleware, async (c) => {
-		const body = await c.req.json().catch(() => ({}));
-		const ids = Array.isArray(body.ids) ? [...new Set(body.ids.filter((id) => typeof id === "string" && id.trim().length > 0).slice(0, 100))] : [];
-		const action = body.action === "confirm" || body.action === "reject" || body.action === "forget" ? body.action : void 0;
-		if (!ids.length || !action) return c.json({ error: "ids and a valid action are required" }, 400);
-		let updatedCount = 0;
-		runSqliteWriteTransaction(() => {
-			for (const id of ids) {
-				const record = editableRecord(id);
-				if (!record) continue;
-				if (action === "forget") deleteMemoryRecord(id);
-				else preserveRecord(record, {
-					status: action === "confirm" ? "active" : "rejected",
-					...action === "confirm" ? {
-						reviewAfter: nextMemoryReviewAt(record),
-						tags: [...new Set([...record.tags ?? [], USER_CONFIRMED_MEMORY_TAG])]
-					} : {}
-				});
-				updatedCount += 1;
-			}
-		});
-		return c.json({
-			ok: true,
-			updatedCount
-		});
-	});
-	authenticated.post("/api/you/conflicts/:id/resolve", deps.strictRateLimitMiddleware, async (c) => {
-		const body = await c.req.json().catch(() => ({}));
-		const winnerId = typeof body.winnerId === "string" ? body.winnerId : "";
-		const group = listAllUserContextRecords(ALL_MEMORY_STATUSES).filter(isUserContextRecord).filter((record) => record.conflictGroupId === c.req.param("id"));
-		const winner = group.find((record) => record.id === winnerId && VISIBLE_STATUSES.has(record.status));
-		if (group.length < 2 || !winner) return c.json({ error: "Conflict group or winner not found" }, 404);
-		const now = (/* @__PURE__ */ new Date()).toISOString();
-		runSqliteWriteTransaction(() => {
-			for (const record of group) preserveRecord(record, record.id === winnerId ? {
-				status: "active",
-				reviewAfter: nextMemoryReviewAt(record),
-				tags: [...new Set([...record.tags ?? [], USER_CONFIRMED_MEMORY_TAG])]
-			} : {
-				status: "archived",
-				validTo: record.validTo ?? now
-			});
-		});
-		return c.json({
-			ok: true,
-			understanding: projectUserContextRecord(getMemoryRecord(winnerId))
-		});
-	});
-	authenticated.patch("/api/you/profile", deps.strictRateLimitMiddleware, async (c) => {
-		const config = deps.service.currentConfig;
-		const parsed = parseProfilePatch(await c.req.json().catch(() => null));
-		if ("error" in parsed) return c.json({ error: parsed.error }, 400);
-		const current = await readUserProfileFile();
-		const saved = await writeUserProfileFile(patchUserProfileMarkdown(current.ok ? current.data.content : "", parsed.patch));
-		if (saved.ok === false) return c.json({ error: saved.error }, saved.status ?? 500);
-		if (parsed.patch.callName !== void 0) setUserProfilePromptState({ state: "active" });
-		deps.service.refreshUserProfileContext();
-		return c.json(await readProfileBundle(config));
-	});
-	authenticated.post("/api/you/profile-prompt", deps.strictRateLimitMiddleware, async (c) => {
-		const body = await c.req.json().catch(() => ({}));
-		const action = typeof body.action === "string" ? body.action : "";
-		if (action !== "snooze" && action !== "reset") return c.json({ error: "Action must be snooze or reset" }, 400);
-		const config = deps.service.currentConfig;
-		const current = await readProfileBundle(config);
-		const suggestionHash = current.profileSetup.callNameSuggestion?.id;
-		const promptState = action === "snooze" ? setUserProfilePromptState({
-			state: "snoozed",
-			suggestionHash,
-			snoozedUntil: new Date(Date.now() + PROFILE_PROMPT_SNOOZE_MS).toISOString()
-		}) : setUserProfilePromptState({
-			state: "active",
-			suggestionHash
-		});
-		return c.json({ profileSetup: buildUserProfileSetup({
-			profile: current.profile,
-			promptState,
-			config
-		}) });
-	});
-	authenticated.patch("/api/you/trust", deps.strictRateLimitMiddleware, async (c) => {
-		const body = await c.req.json().catch(() => ({}));
-		if (!isUserTrustLevel(body.defaultActionLevel)) return c.json({ error: "Invalid default action level" }, 400);
-		const policy = setUserTrustPolicy(body.defaultActionLevel);
-		deps.service.refreshActionTrustPolicy();
-		return c.json({ trust: {
-			defaultActionLevel: policy.defaultActionLevel,
-			levels: USER_TRUST_LEVELS,
-			autoRequiresExplicitOptIn: true
-		} });
-	});
-	authenticated.patch("/api/you/playbooks/:id", deps.strictRateLimitMiddleware, async (c) => {
-		const id = c.req.param("id");
-		if (!PLAYBOOK_IDS.includes(id)) return c.json({ error: "Playbook not found" }, 404);
-		const enabled = (await c.req.json().catch(() => ({}))).enabled;
-		if (typeof enabled !== "boolean") return c.json({ error: "enabled must be a boolean" }, 400);
-		const active = listMemoryRecords({
-			status: "active",
-			limit: 500
-		}).filter(isUserContextRecord).filter((record) => playbookForRecord(record) === id);
-		runSqliteWriteTransaction(() => {
-			for (const record of active) versionPlaybookRule(record, { tags: patchPlaybookRuleTags(record, { enabled }) });
-		});
-		const current = active.map((record) => ({
-			...record,
-			tags: patchPlaybookRuleTags(record, { enabled })
-		}));
-		return c.json({
-			ok: true,
-			playbook: buildPersonalPlaybooks(current).find((playbook) => playbook.id === id)
-		});
-	});
-	authenticated.post("/api/you/playbooks/:id/rules", deps.strictRateLimitMiddleware, async (c) => {
-		const id = c.req.param("id");
-		if (!PLAYBOOK_IDS.includes(id)) return c.json({ error: "Playbook not found" }, 404);
-		const body = await c.req.json().catch(() => ({}));
-		const statement = typeof body.statement === "string" ? body.statement.trim() : "";
-		if (!statement || statement.length > 5e3) return c.json({ error: "Rule statement is required" }, 400);
-		const parsedContext = parsePlaybookContext(body.context);
-		if ("error" in parsedContext) return c.json({ error: parsedContext.error }, 400);
-		const record = upsertMemoryRecord({
-			providerId: "local",
-			kind: id === "communication" ? "preference" : id === "execution" ? "task_lesson" : "routine",
-			sourceAgentId: selectedAgentId(deps.service.currentConfig),
-			content: statement,
-			source: {
-				provider: "local",
-				path: "you://playbook"
-			},
-			confidence: 1,
-			tags: patchPersonalPlaybookContextTags([
-				"user-understanding",
-				PERSONAL_PLAYBOOK_RULE_TAG,
-				`${PERSONAL_PLAYBOOK_ORDER_PREFIX}${Number.isInteger(body.order) ? body.order : 1e3}`
-			], parsedContext.context),
+		if (patch.timezone !== void 0 && !validTimezone(patch.timezone)) return c.json({ error: "timezone must be a valid IANA time zone" }, 400);
+		return c.json({ profile: updateUserProfile(patch) });
+	});
+	authenticated.post("/api/you/understandings", write, async (c) => {
+		const body = await readBody(c);
+		const statement = nonEmptyString(body?.statement);
+		const kind = body?.kind;
+		const scope = scopeFrom(body?.scope ?? { type: "global" });
+		if (!statement || !UNDERSTANDING_KINDS.has(kind) || !scope) return c.json({ error: "Valid statement, kind, and scope are required" }, 400);
+		const typedKind = kind;
+		const key = canonicalKey(typedKind, statement);
+		if (listUnderstandings().some((item) => item.canonicalKey === key && sameScope(item.scope, scope) && item.status !== "archived" && item.status !== "rejected")) return c.json({ error: "This understanding already exists" }, 409);
+		const understanding = createUnderstanding({
+			kind: typedKind,
+			canonicalKey: key,
 			status: "active",
-			sensitivity: "normal",
+			scope,
 			explicitness: "explicit",
-			durability: id === "routines" ? "recurring" : "durable",
-			importance: .85,
-			disclosurePolicy: "referenceable"
-		});
-		return c.json({
-			ok: true,
-			rule: buildPersonalPlaybooks([record]).find((playbook) => playbook.id === id)?.rules[0]
-		}, 201);
-	});
-	authenticated.patch("/api/you/playbooks/:id/rules/:recordId", deps.strictRateLimitMiddleware, async (c) => {
-		const id = c.req.param("id");
-		const record = editableRecord(c.req.param("recordId"));
-		if (!PLAYBOOK_IDS.includes(id) || !record || playbookForRecord(record) !== id) return c.json({ error: "Playbook rule not found" }, 404);
-		const body = await c.req.json().catch(() => ({}));
-		const content = body.statement === void 0 ? record.content : typeof body.statement === "string" ? body.statement.trim() : "";
-		if (!content || content.length > 5e3) return c.json({ error: "Rule statement is required" }, 400);
-		if (body.enabled !== void 0 && typeof body.enabled !== "boolean") return c.json({ error: "enabled must be boolean" }, 400);
-		if (body.order !== void 0 && (!Number.isInteger(body.order) || body.order < 0 || body.order > 1e4)) return c.json({ error: "order must be an integer between 0 and 10000" }, 400);
-		const parsedContext = parsePlaybookContext(body.context);
-		if ("error" in parsedContext) return c.json({ error: parsedContext.error }, 400);
-		const updated = versionPlaybookRule(record, {
-			content,
-			tags: patchPersonalPlaybookContextTags(patchPlaybookRuleTags(record, {
-				enabled: body.enabled,
-				order: body.order
-			}), parsedContext.context),
-			explicitness: body.statement === void 0 ? record.explicitness : "explicit"
-		});
-		return c.json({
-			ok: true,
-			rule: buildPersonalPlaybooks([updated]).find((playbook) => playbook.id === id)?.rules[0]
+			durability: "durable",
+			sensitivity: "normal",
+			disclosurePolicy: typedKind === "boundary" ? "silent" : "referenceable",
+			confidence: 1,
+			statement,
+			createdBy: "user",
+			changeReason: "Created by user"
 		});
+		return c.json({ understanding }, 201);
 	});
-	authenticated.delete("/api/you/playbooks/:id/rules/:recordId", deps.strictRateLimitMiddleware, (c) => {
-		const id = c.req.param("id");
-		const record = editableRecord(c.req.param("recordId"));
-		if (!PLAYBOOK_IDS.includes(id) || !record || playbookForRecord(record) !== id) return c.json({ error: "Playbook rule not found" }, 404);
-		preserveRecord(record, {
-			status: "archived",
-			validTo: (/* @__PURE__ */ new Date()).toISOString()
-		});
-		return c.json({ ok: true });
+	authenticated.get("/api/you/understandings/:id/evidence", (c) => {
+		const understanding = getUnderstanding(c.req.param("id"));
+		if (!understanding) return c.json({ error: "Understanding not found" }, 404);
+		return c.json({ evidence: listUnderstandingEvidence(understanding.id) });
 	});
-	authenticated.post("/api/you/playbooks/:id/rules/:recordId/rollback", deps.strictRateLimitMiddleware, async (c) => {
+	authenticated.patch("/api/you/understandings/:id", write, async (c) => {
 		const id = c.req.param("id");
-		const current = editableRecord(c.req.param("recordId"));
-		if (!PLAYBOOK_IDS.includes(id) || !current || playbookForRecord(current) !== id) return c.json({ error: "Playbook rule not found" }, 404);
-		const body = await c.req.json().catch(() => ({}));
-		const versionId = typeof body.versionId === "string" ? body.versionId : "";
-		const all = listAllUserContextRecords(ALL_MEMORY_STATUSES);
-		const target = playbookVersionChain(all, current.id).find((record) => record.id === versionId);
-		if (!target || target.id === current.id) return c.json({ error: "Previous version not found" }, 404);
-		const rolledBack = versionPlaybookRule(current, {
-			content: target.content,
-			tags: target.tags,
-			evidence: target.evidence,
-			explicitness: "explicit"
-		});
-		return c.json({
-			ok: true,
-			rule: buildPersonalPlaybooks([...all, rolledBack]).find((playbook) => playbook.id === id)?.rules.find((rule) => rule.id === rolledBack.id)
-		});
-	});
-	authenticated.post("/api/you/insights/:id/apply", deps.strictRateLimitMiddleware, async (c) => {
-		const config = deps.service.currentConfig;
-		const existing = editableRecord(c.req.param("id"));
-		const suggestion = existing ? buildActionableInsightSuggestions([existing], [])[0] : void 0;
-		if (!existing || !suggestion) return c.json({ error: "Insight not found" }, 404);
-		if (suggestion.action === "start_progress") return c.json({ error: "Progress insights must be reviewed as task drafts" }, 400);
-		if (existing.kind === "routine") {
-			preserveRecord(existing, { tags: [...new Set([...existing.tags ?? [], INSIGHT_ACCEPTED_TAG])] });
-			return c.json({
-				ok: true,
-				status: "drafting",
-				href: buildRoutineAutomationDraftHref(existing)
+		let understanding = getUnderstanding(id);
+		if (!understanding) return c.json({ error: "Understanding not found" }, 404);
+		const body = await readBody(c);
+		if (!body) return c.json({ error: "Invalid JSON" }, 400);
+		if (body.statement !== void 0) {
+			const statement = nonEmptyString(body.statement);
+			if (!statement) return c.json({ error: "statement must be 1-2000 characters" }, 400);
+			const key = canonicalKey(understanding.kind, statement);
+			if (listUnderstandings().some((item) => item.id !== id && item.canonicalKey === key && sameScope(item.scope, understanding.scope) && item.status !== "archived" && item.status !== "rejected")) return c.json({ error: "This understanding already exists" }, 409);
+			understanding = reviseUnderstanding(id, statement, {
+				canonicalKey: key,
+				explicitness: "explicit",
+				confidence: 1,
+				changeReason: "Edited by user"
 			});
 		}
-		upsertMemoryRecord({
-			providerId: "local",
-			kind: "task_lesson",
-			sourceAgentId: selectedAgentId(config),
-			content: existing.content,
-			source: {
-				provider: "local",
-				path: "you://insight-proposal"
-			},
-			confidence: 1,
-			tags: [
-				"user-understanding",
-				USER_CONFIRMED_MEMORY_TAG,
-				PERSONAL_PLAYBOOK_RULE_TAG,
-				`${PERSONAL_PLAYBOOK_ORDER_PREFIX}1000`
-			],
-			status: "active",
-			sensitivity: existing.sensitivity,
-			explicitness: "explicit",
-			durability: "durable",
-			importance: existing.importance,
-			disclosurePolicy: existing.disclosurePolicy,
-			evidence: existing.evidence
-		});
-		preserveRecord(existing, { tags: [...new Set([...existing.tags ?? [], INSIGHT_ACCEPTED_TAG])] });
-		return c.json({
-			ok: true,
-			status: "saved"
-		});
-	});
-	authenticated.delete("/api/you/insights/:id", deps.strictRateLimitMiddleware, (c) => {
-		const existing = editableRecord(c.req.param("id"));
-		const suggestion = existing ? buildActionableInsightSuggestions([existing], [])[0] : void 0;
-		if (!existing || !suggestion) return c.json({ error: "Insight not found" }, 404);
-		preserveRecord(existing, { tags: [...new Set([...existing.tags ?? [], INSIGHT_DISMISSED_TAG])] });
-		return c.json({
-			ok: true,
-			status: "dismissed"
-		});
-	});
-	authenticated.post("/api/you/insights/:id/complete", deps.strictRateLimitMiddleware, async (c) => {
-		const existing = editableRecord(c.req.param("id"));
-		const suggestion = existing ? buildActionableInsightSuggestions([existing], [])[0] : void 0;
-		if (!existing || suggestion?.action !== "start_progress") return c.json({ error: "Insight not found" }, 404);
-		const body = await c.req.json().catch(() => ({}));
-		const taskId = typeof body.taskId === "string" ? body.taskId.trim() : "";
-		const task = taskId ? new TaskRepository().get(taskId) : null;
-		const linked = task && new TaskContextRepository().list(task.id).some((edge) => edge.targetKind === "memory" && edge.targetId === existing.id);
-		if (!task || !linked) return c.json({ error: "A linked task draft is required" }, 400);
-		preserveRecord(existing, { tags: [...new Set([...existing.tags ?? [], INSIGHT_ACCEPTED_TAG])] });
-		return c.json({
-			ok: true,
-			status: "saved",
-			taskId: task.id
+		if (body.status !== void 0) {
+			if (!UNDERSTANDING_STATUSES.has(body.status)) return c.json({ error: "Invalid status" }, 400);
+			understanding = body.status === "rejected" ? rejectUnderstanding(id, nonEmptyString(body.reason, 500) ?? "Rejected by user") : setUnderstandingStatus(id, body.status, body.status === "active" ? {
+				explicitness: "explicit",
+				confidence: 1
+			} : void 0);
+		}
+		return c.json({ understanding });
+	});
+	authenticated.delete("/api/you/understandings/:id", write, (c) => deleteUnderstanding(c.req.param("id")) ? c.json({ ok: true }) : c.json({ error: "Understanding not found" }, 404));
+	authenticated.post("/api/you/rules", write, async (c) => {
+		const body = await readBody(c);
+		const statement = nonEmptyString(body?.statement);
+		const category = body?.category;
+		const scope = scopeFrom(body?.scope ?? { type: "global" });
+		if (!statement || !RULE_CATEGORIES.has(category) || !scope) return c.json({ error: "Valid statement, category, and scope are required" }, 400);
+		const priority = typeof body?.priority === "number" && Number.isInteger(body.priority) ? Math.max(0, Math.min(100, body.priority)) : 50;
+		const conditions = body?.conditions === void 0 ? {} : asRecord(body.conditions);
+		if (!conditions) return c.json({ error: "conditions must be an object" }, 400);
+		const rule = createCollaborationRule({
+			category,
+			priority,
+			scope,
+			conditions,
+			statement
 		});
+		return c.json({ rule }, 201);
 	});
-	authenticated.patch("/api/you/controls", deps.strictRateLimitMiddleware, async (c) => {
-		const config = deps.service.currentConfig;
-		const body = await c.req.json().catch(() => ({}));
-		const parsed = UserContextConfigSchema.safeParse({
-			...config.userContext,
-			memory: {
-				...config.userContext.memory,
-				mode: body.mode
-			},
-			privacy: {
-				...config.userContext.privacy,
-				sensitiveWritePolicy: body.sensitiveWritePolicy
-			}
-		});
-		if (!parsed.success) return c.json({ error: parsed.error.issues[0]?.message ?? "Invalid personal context controls" }, 400);
-		const saved = await deps.service.saveConfig({
-			...config,
-			userContext: parsed.data
-		});
-		if (!saved.saved) return c.json({ error: saved.error ?? "save failed" }, 500);
-		const updated = deps.service.currentConfig.userContext;
-		return c.json({ controls: {
-			mode: updated.memory.mode,
-			sensitiveWritePolicy: updated.privacy.sensitiveWritePolicy
-		} });
+	authenticated.patch("/api/you/rules/:id", write, async (c) => {
+		const id = c.req.param("id");
+		let rule = getCollaborationRule(id);
+		if (!rule) return c.json({ error: "Collaboration rule not found" }, 404);
+		const body = await readBody(c);
+		if (!body) return c.json({ error: "Invalid JSON" }, 400);
+		if (body.statement !== void 0) {
+			const statement = nonEmptyString(body.statement);
+			if (!statement) return c.json({ error: "statement must be 1-2000 characters" }, 400);
+			rule = reviseCollaborationRule(id, statement);
+		}
+		if (body.status !== void 0) {
+			if (!RULE_STATUSES.has(body.status)) return c.json({ error: "Invalid status" }, 400);
+			rule = setCollaborationRuleStatus(id, body.status);
+		}
+		return c.json({ rule });
+	});
+	authenticated.delete("/api/you/rules/:id", write, (c) => deleteCollaborationRule(c.req.param("id")) ? c.json({ ok: true }) : c.json({ error: "Collaboration rule not found" }, 404));
+	authenticated.get("/api/you/turns/:turnId/personalization", (c) => {
+		const personalization = getTurnPersonalization(c.req.param("turnId"));
+		return personalization ? c.json({ personalization }) : c.json({ error: "Personalization run not found" }, 404);
+	});
+	authenticated.post("/api/you/turns/:turnId/feedback", write, async (c) => {
+		const turnId = c.req.param("turnId");
+		const run = getTurnPersonalization(turnId);
+		if (!run) return c.json({ error: "Personalization run not found" }, 404);
+		const body = await readBody(c);
+		if (!body || !FEEDBACK_RATINGS.has(String(body.rating))) return c.json({ error: "Invalid feedback rating" }, 400);
+		const objectType = body.objectType;
+		const objectId = body.objectId;
+		if (objectType === void 0 !== (objectId === void 0) || objectType !== void 0 && ![
+			"profile",
+			"rule",
+			"understanding"
+		].includes(String(objectType)) || objectId !== void 0 && typeof objectId !== "string") return c.json({ error: "objectType and objectId must be valid and provided together" }, 400);
+		if (objectType !== void 0 && !run.items.some((item) => item.objectType === objectType && item.objectId === objectId)) return c.json({ error: "The context object was not part of this turn" }, 400);
+		const rating = body.rating;
+		recordContextFeedback({
+			turnId,
+			runId: run.runId,
+			rating,
+			...objectType ? {
+				objectType,
+				objectId
+			} : {},
+			...typeof body.reason === "string" ? { reason: body.reason.slice(0, 500) } : {}
+		});
+		if (objectType === "understanding" && typeof objectId === "string") {
+			if (rating === "wrong") rejectUnderstanding(objectId, "Marked wrong from turn feedback");
+			if (rating === "stale") setUnderstandingStatus(objectId, "stale");
+			if (rating === "sensitive") setUnderstandingStatus(objectId, "needs_review");
+		}
+		return c.json({ ok: true });
 	});
-	authenticated.patch("/api/you/consents/:id", deps.strictRateLimitMiddleware, async (c) => {
-		const body = await c.req.json().catch(() => ({}));
-		const decision = typeof body.decision === "string" ? body.decision : "";
+	authenticated.patch("/api/you/consents/:id", write, async (c) => {
+		const decision = (await readBody(c))?.decision;
 		if (![
 			"once",
 			"session",
 			"always",
 			"deny"
-		].includes(decision)) return c.json({ error: "Decision must be once, session, always, or deny" }, 400);
-		const consent = decideMemoryReferenceConsent(c.req.param("id"), decision);
-		if (!consent) return c.json({ error: "Pending consent not found" }, 404);
-		return c.json({
-			ok: true,
-			consent
-		});
-	});
-	authenticated.delete("/api/you/consents/:id", deps.strictRateLimitMiddleware, (c) => {
-		const consent = revokeMemoryReferenceConsent(c.req.param("id"));
-		if (!consent) return c.json({ error: "Active reference grant not found" }, 404);
-		return c.json({
-			ok: true,
-			consent
-		});
-	});
-	authenticated.delete("/api/you/sources/:instanceId", deps.strictRateLimitMiddleware, async (c) => {
-		const config = deps.service.currentConfig;
-		const instanceId = c.req.param("instanceId");
-		const installedInstances = listConnectorInstances(config);
-		const account = getConnectorAccount(instanceId);
-		const accountConnections = account ? listConnectorConnections({
-			principalId: account.principalId,
-			connectorId: account.connectorId
-		}).filter((connection) => connection.accountId === account.id) : [];
-		const instance = installedInstances.find((item) => item.instanceId === instanceId);
-		const connectorId = account?.connectorId ?? instance?.connectorId;
-		const definition = connectorId ? listConnectorCatalog().find((item) => item.id === connectorId) : void 0;
-		if (!instance && !account || !definition || !definition.capabilities.some((capability) => capability === "context" || capability === "memory_source")) return c.json({ error: "Personal context source not found" }, 404);
-		const body = await c.req.json().catch(() => ({}));
-		const understandingPolicy = body.understandingPolicy === "keep" || body.understandingPolicy === "delete" ? body.understandingPolicy : void 0;
-		if (!understandingPolicy) return c.json({ error: "understandingPolicy must be keep or delete" }, 400);
-		try {
-			if (account) for (const connection of accountConnections.filter((candidate) => candidate.status !== "revoked")) await revokeComposioConnection(connection.id);
-			else if (instance) {
-				uninstallConnector(config, instance.instanceId);
-				const saved = await deps.service.saveConfig(config);
-				if (!saved.saved) return c.json({ error: saved.error ?? "save failed" }, 500);
-			}
-		} catch (error) {
-			return c.json({ error: error instanceof Error ? error.message : String(error) }, 400);
-		}
-		let deletedUnderstandingCount = 0;
-		let deletedClaimCount = 0;
-		if (understandingPolicy === "delete") {
-			const sourceInstanceId = account ? `composio:${account.connectorId}:${account.id}` : instanceId;
-			const targets = recordsDerivedFromPersonalContextSource(listAllUserContextRecords(ALL_MEMORY_STATUSES), sourceInstanceId);
-			runSqliteWriteTransaction(() => {
-				const claimRemoval = removeUserClaimEvidenceForSource(sourceInstanceId);
-				deletedClaimCount = claimRemoval.deletedClaimCount;
-				const retainedMemoryIds = new Set(claimRemoval.retainedClaims.map((claim) => claim.memoryRecordId));
-				const deleteIds = new Set([...claimRemoval.deletedMemoryRecordIds, ...targets.filter((record) => !retainedMemoryIds.has(record.id)).map((record) => record.id)]);
-				for (const recordId of deleteIds) deleteMemoryRecord(recordId);
-				for (const retained of claimRemoval.retainedClaims) {
-					if (retained.state === "active") continue;
-					const record = getMemoryRecord(retained.memoryRecordId);
-					if (record) preserveRecord(record, { status: retained.state === "rejected" ? "rejected" : "stale" });
-				}
-				deletedUnderstandingCount = deleteIds.size;
-			});
-		}
-		return c.json({
-			ok: true,
-			deletedUnderstandingCount,
-			deletedClaimCount
-		});
-	});
-	authenticated.patch("/api/you/understanding/:id", deps.strictRateLimitMiddleware, async (c) => {
-		const existing = editableRecord(c.req.param("id"));
-		if (!existing) return c.json({ error: "Understanding not found" }, 404);
-		const body = await c.req.json().catch(() => ({}));
-		const action = typeof body.action === "string" ? body.action : "";
-		if (action === "confirm") return c.json({ understanding: projectUserContextRecord(preserveRecord(existing, {
-			status: "active",
-			reviewAfter: nextMemoryReviewAt(existing),
-			tags: [...new Set([...existing.tags ?? [], USER_CONFIRMED_MEMORY_TAG])]
-		})) });
-		if (action === "reject") return c.json({ understanding: projectUserContextRecord(preserveRecord(existing, { status: "rejected" })) });
-		if (action === "update") {
-			const content = typeof body.content === "string" ? body.content.trim() : "";
-			if (!content) return c.json({ error: "Updated understanding cannot be empty" }, 400);
-			const replacement = upsertMemoryRecord({
-				providerId: "local",
-				kind: existing.kind,
-				sourceAgentId: existing.provenance.sourceAgentId,
-				workspaceId: existing.scope.workspaceId,
-				sessionKey: existing.scope.sessionKey,
-				projectId: existing.scope.projectId,
-				content,
-				source: { provider: "local" },
-				confidence: 1,
-				tags: [...new Set([
-					...existing.tags ?? [],
-					"user-understanding",
-					"explicit-user-correction",
-					USER_CONFIRMED_MEMORY_TAG
-				])],
-				status: "active",
-				sensitivity: existing.sensitivity,
-				explicitness: "explicit",
-				durability: existing.durability,
-				importance: Math.max(existing.importance, .8),
-				disclosurePolicy: existing.disclosurePolicy,
-				evidence: existing.evidence,
-				reviewAfter: nextMemoryReviewAt({
-					durability: existing.durability,
-					explicitness: "explicit"
-				}),
-				supersedesRecordId: existing.id,
-				conflictGroupId: existing.conflictGroupId
-			});
-			preserveRecord(existing, {
-				status: "archived",
-				validTo: (/* @__PURE__ */ new Date()).toISOString()
-			});
-			return c.json({ understanding: projectUserContextRecord(replacement) });
-		}
-		return c.json({ error: "Action must be confirm, reject, or update" }, 400);
-	});
-	authenticated.delete("/api/you/understanding/:id", deps.strictRateLimitMiddleware, (c) => {
-		const existing = editableRecord(c.req.param("id"));
-		if (!existing) return c.json({ error: "Understanding not found" }, 404);
-		deleteMemoryRecord(existing.id);
-		return c.json({ ok: true });
+		].includes(String(decision))) return c.json({ error: "Invalid consent decision" }, 400);
+		return decideContextConsent(c.req.param("id"), decision) ? c.json({ ok: true }) : c.json({ error: "Consent request not found" }, 404);
 	});
 }
 //#endregion
-export { buildPersonalPlaybooks, buildRoutineAutomationDraftHref, registerYouRoutes };
+export { registerYouRoutes };