@xopcai/xopc 0.0.205 → 0.0.206

package/dist/src/automations/service/action-executor.js

@@ -157,19 +157,28 @@ var AutomationActionExecutor = class {
 			status: "failed",
 			error: "Agent service is not available"
 		};
+		const agentId = normalizeAgentId(action.agentId || this.deps.getDefaultAgentId?.() || "main");
+		const peerId = automation.conversationMode === "continuous" ? automation.id : `${automation.id}-${crypto.randomUUID().slice(0, 8)}`;
 		const sessionKey = buildSessionKey({
-			agentId: normalizeAgentId(action.agentId || this.deps.getDefaultAgentId?.() || "main"),
+			agentId,
 			source: "automation",
 			accountId: "default",
 			peerKind: "dm",
-			peerId: `${automation.id}-${crypto.randomUUID().slice(0, 8)}`
+			peerId
 		});
-		const effectiveWorkingDirectory = action.workingDirectory ?? (automation.projectId ? this.deps.getProjectWorkspaceRoot?.(automation.projectId) : void 0);
 		await hooks.onRunPatch?.({
 			sessionKey,
 			currentPhase: "action"
 		});
-		await agentService.sessionConfig?.applyAutomationWorkingDirectory?.(sessionKey, effectiveWorkingDirectory);
+		await this.deps.prepareAgentSession?.({
+			sessionKey,
+			projectId: automation.projectId,
+			agentId,
+			peerId,
+			automationId: automation.id,
+			runId: run.id
+		});
+		await agentService.sessionConfig?.applyAutomationWorkingDirectory?.(sessionKey, automation.projectId ? void 0 : action.workingDirectory);
 		if (agentService.sessionConfig?.applyAutomationModelOverride) {
 			if (!await agentService.sessionConfig.applyAutomationModelOverride(sessionKey, action.model) && action.model) log.warn({
 				automationId: automation.id,

package/dist/src/automations/service/automation-service.d.ts

@@ -49,6 +49,10 @@ export declare class AutomationService {
     }): Promise<AutomationProductEventRun[]>;
     getRun(runId: string): Promise<AutomationRun | null>;
     listRunEvents(runId: string): Promise<AutomationRunEvent[]>;
+    markRunRead(runId: string): Promise<boolean>;
+    markAllRunsRead(options?: {
+        projectId?: string;
+    }): Promise<number>;
     cancelRun(runId: string): Promise<boolean>;
     getMetrics(): Promise<AutomationMetrics>;
     private recomputeNextRuns;
@@ -60,5 +64,5 @@ export declare class AutomationService {
     private waitForRetry;
     private appendRunEvent;
     private finishAutomationRun;
-    private postAfterRunWebhook;
+    private postCompletionWebhook;
 }

package/dist/src/automations/service/automation-service.js

@@ -5,7 +5,7 @@ import { computeNextAutomationRunAtMs, timerDelayUntil } from "../domain/schedul
 import { AutomationSchema, CreateAutomationSchema, UpdateAutomationSchema } from "../domain/validation.js";
 import { AutomationActionExecutor } from "./action-executor.js";
 import { deleteAutomation, getAutomation, listAutomations, saveAutomation, saveAutomations } from "../storage/automation-repository.js";
-import { appendAutomationRunEvent, getAutomationRun, listAutomationRunEvents, listAutomationRuns, listAutomationRunsForProductEvent, saveAutomationRun, touchAutomationRunLease } from "../storage/automation-run-repository.js";
+import { appendAutomationRunEvent, getAutomationRun, listAutomationRunEvents, listAutomationRuns, listAutomationRunsForProductEvent, markAllAutomationRunsRead, markAutomationRunRead, saveAutomationRun, touchAutomationRunLease } from "../storage/automation-run-repository.js";
 import "../storage/index.js";
 import { randomUUID } from "node:crypto";
 //#region src/automations/service/automation-service.ts
@@ -71,7 +71,8 @@ var AutomationService = class {
 			id: parsed.id?.trim() || randomUUID().slice(0, 12),
 			enabled: parsed.enabled ?? true,
 			safety: parsed.safety ?? { mode: "auto_apply" },
-			afterRun: parsed.afterRun ?? { kind: "none" },
+			conversationMode: parsed.conversationMode ?? "new_session",
+			notificationPolicy: parsed.notificationPolicy ?? "attention",
 			state: parsed.state ?? {},
 			createdAtMs: now,
 			updatedAtMs: now
@@ -165,6 +166,12 @@ var AutomationService = class {
 	async listRunEvents(runId) {
 		return listAutomationRunEvents(runId);
 	}
+	async markRunRead(runId) {
+		return markAutomationRunRead(runId);
+	}
+	async markAllRunsRead(options) {
+		return markAllAutomationRunsRead(options);
+	}
 	async cancelRun(runId) {
 		const controller = this.activeRuns.get(runId);
 		if (!controller) return false;
@@ -389,30 +396,30 @@ var AutomationService = class {
 				};
 				this.appendRunEvent(run, task.termination.cancellationConfirmed ? "run.cancel_confirmed" : "run.cancellation_unconfirmed", task.termination.cancellationConfirmed ? "Automation cancellation confirmed" : "Automation cancellation was not confirmed within the cleanup grace period", { termination: task.termination });
 			}
-			if (status === "timeout" || status === "cancelled") {} else if ((automation.safety?.mode ?? "auto_apply") !== "auto_apply" && automation.afterRun?.kind === "webhook") this.appendRunEvent(run, "after_run.completed", "After-run webhook skipped by safety mode", { safety: automation.safety ?? { mode: "auto_apply" } });
-			else if (automation.afterRun?.kind === "webhook") {
-				activePhase = "after_run";
+			if (status === "timeout" || status === "cancelled") {} else if ((automation.safety?.mode ?? "auto_apply") !== "auto_apply" && automation.completionWebhookUrl) this.appendRunEvent(run, "completion_hook.completed", "Completion webhook skipped by safety mode", { safety: automation.safety ?? { mode: "auto_apply" } });
+			else if (automation.completionWebhookUrl) {
+				activePhase = "completion_hook";
 				run = {
 					...run,
-					currentPhase: "after_run"
+					currentPhase: "completion_hook"
 				};
 				saveAutomationRun(run);
-				this.appendRunEvent(run, "after_run.started", "Calling after-run webhook", { url: automation.afterRun.url });
-				await this.postAfterRunWebhook(automation.afterRun.url, run, controller.signal);
-				this.appendRunEvent(run, "after_run.completed", "After-run webhook completed");
+				this.appendRunEvent(run, "completion_hook.started", "Calling completion webhook", { url: automation.completionWebhookUrl });
+				await this.postCompletionWebhook(automation.completionWebhookUrl, run, controller.signal);
+				this.appendRunEvent(run, "completion_hook.completed", "Completion webhook completed");
 			}
 		} catch (err) {
 			error = err instanceof Error ? err.message : String(err);
 			const deadlineExceeded = run.deadlineAtMs !== void 0 && Date.now() >= run.deadlineAtMs;
 			status = controller.signal.aborted ? "cancelled" : deadlineExceeded ? "timeout" : "failed";
-			this.appendRunEvent(run, activePhase === "after_run" ? "after_run.failed" : "action.failed", `Automation run ${status}`, { error });
+			this.appendRunEvent(run, activePhase === "completion_hook" ? "completion_hook.failed" : "action.failed", `Automation run ${status}`, { error });
 			run = {
 				...run,
 				status,
 				error,
 				termination: {
 					reason: status === "cancelled" ? "user_cancelled" : status === "timeout" ? "deadline_exceeded" : "failed",
-					component: activePhase === "after_run" ? "automation" : run.termination?.component,
+					component: activePhase === "completion_hook" ? "automation" : run.termination?.component,
 					cancellationConfirmed: status !== "cancelled" || controller.signal.aborted
 				}
 			};
@@ -580,7 +587,7 @@ var AutomationService = class {
 		saveAutomation(next);
 		this.armTimer();
 	}
-	async postAfterRunWebhook(url, run, signal) {
+	async postCompletionWebhook(url, run, signal) {
 		const remainingMs = run.deadlineAtMs === void 0 ? 3e4 : Math.max(1, run.deadlineAtMs - Date.now());
 		const requestSignal = AbortSignal.any([signal, AbortSignal.timeout(remainingMs)]);
 		const response = await fetch(url, {

package/dist/src/automations/storage/automation-repository.js

@@ -18,7 +18,9 @@ function rowToAutomation(row) {
 		trigger: parseJson(row.trigger_json),
 		action: parseJson(row.action_json),
 		safety: parseJson(row.safety_json) ?? { mode: "auto_apply" },
-		afterRun: parseJson(row.after_run_json),
+		conversationMode: row.conversation_mode,
+		notificationPolicy: row.notification_policy,
+		completionWebhookUrl: row.completion_webhook_url ?? void 0,
 		reliability: parseJson(row.reliability_json),
 		state: parseJson(row.state_json) ?? {},
 		createdAtMs: row.created_at_ms,
@@ -28,12 +30,14 @@ function rowToAutomation(row) {
 function upsertAutomation(db, automation) {
 	db.prepare(`INSERT OR REPLACE INTO automations (
       automation_id, name, description, project_id, enabled, trigger_json, action_json,
-      safety_json, after_run_json, reliability_json, state_json, created_at_ms, updated_at_ms
-    ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`).run(automation.id, automation.name, automation.description ?? null, automation.projectId ?? null, automation.enabled ? 1 : 0, JSON.stringify(automation.trigger), JSON.stringify(automation.action), bindJson(automation.safety ?? { mode: "auto_apply" }), bindJson(automation.afterRun), bindJson(automation.reliability), JSON.stringify(automation.state ?? {}), automation.createdAtMs, automation.updatedAtMs);
+      safety_json, conversation_mode, notification_policy, completion_webhook_url,
+      reliability_json, state_json, created_at_ms, updated_at_ms
+    ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`).run(automation.id, automation.name, automation.description ?? null, automation.projectId ?? null, automation.enabled ? 1 : 0, JSON.stringify(automation.trigger), JSON.stringify(automation.action), bindJson(automation.safety ?? { mode: "auto_apply" }), automation.conversationMode, automation.notificationPolicy, automation.completionWebhookUrl ?? null, bindJson(automation.reliability), JSON.stringify(automation.state ?? {}), automation.createdAtMs, automation.updatedAtMs);
 }
 const AUTOMATION_SELECT = `
   SELECT automation_id, name, description, project_id, enabled, trigger_json, action_json,
-         safety_json, after_run_json, reliability_json, state_json, created_at_ms, updated_at_ms
+         safety_json, conversation_mode, notification_policy, completion_webhook_url,
+         reliability_json, state_json, created_at_ms, updated_at_ms
   FROM automations
 `;
 function listAutomations(options) {

package/dist/src/automations/storage/automation-run-repository.d.ts

@@ -17,3 +17,8 @@ export declare function listAutomationRunsForProductEvent(options: {
     limit?: number;
 }): AutomationProductEventRun[];
 export declare function deleteAutomationRunsForAutomation(automationId: string): void;
+export declare function markAutomationRunRead(runId: string, readAtMs?: number): boolean;
+export declare function markAllAutomationRunsRead(options?: {
+    projectId?: string;
+    readAtMs?: number;
+}): number;

package/dist/src/automations/storage/automation-run-repository.js

@@ -29,7 +29,8 @@ function rowToRun(row) {
 		leaseOwner: row.lease_owner ?? void 0,
 		leaseExpiresAtMs: row.lease_expires_at_ms ?? void 0,
 		attemptNumber: row.attempt_number,
-		rootRunId: row.root_run_id ?? void 0
+		rootRunId: row.root_run_id ?? void 0,
+		readAtMs: row.read_at_ms ?? void 0
 	};
 }
 function rowToEvent(row) {
@@ -68,8 +69,8 @@ function saveAutomationRun(run) {
         duration_ms, summary, error, session_key, workflow_run_id, model,
         deadline_at_ms, current_phase, cancel_requested_at_ms, cancel_confirmed_at_ms,
         termination_json, heartbeat_at_ms, lease_owner, lease_expires_at_ms,
-        attempt_number, root_run_id
-      ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`).run(run.id, run.automationId, run.automationName, run.status, JSON.stringify(run.triggerSnapshot), JSON.stringify(run.actionSnapshot), run.manual ? 1 : 0, run.createdAtMs, run.startedAtMs ?? null, run.endedAtMs ?? null, run.durationMs ?? null, run.summary ?? null, run.error ?? null, run.sessionKey ?? null, run.workflowRunId ?? null, run.model ?? null, run.deadlineAtMs ?? null, run.currentPhase ?? null, run.cancelRequestedAtMs ?? null, run.cancelConfirmedAtMs ?? null, run.termination ? JSON.stringify(run.termination) : null, run.heartbeatAtMs ?? null, run.leaseOwner ?? null, run.leaseExpiresAtMs ?? null, run.attemptNumber ?? 1, run.rootRunId ?? run.id);
+        attempt_number, root_run_id, read_at_ms
+      ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`).run(run.id, run.automationId, run.automationName, run.status, JSON.stringify(run.triggerSnapshot), JSON.stringify(run.actionSnapshot), run.manual ? 1 : 0, run.createdAtMs, run.startedAtMs ?? null, run.endedAtMs ?? null, run.durationMs ?? null, run.summary ?? null, run.error ?? null, run.sessionKey ?? null, run.workflowRunId ?? null, run.model ?? null, run.deadlineAtMs ?? null, run.currentPhase ?? null, run.cancelRequestedAtMs ?? null, run.cancelConfirmedAtMs ?? null, run.termination ? JSON.stringify(run.termination) : null, run.heartbeatAtMs ?? null, run.leaseOwner ?? null, run.leaseExpiresAtMs ?? null, run.attemptNumber ?? 1, run.rootRunId ?? run.id, run.readAtMs ?? null);
 		trimRuns(db, run.automationId);
 	});
 }
@@ -90,7 +91,7 @@ function getAutomationRun(runId) {
               duration_ms, summary, error, session_key, workflow_run_id, model,
               deadline_at_ms, current_phase, cancel_requested_at_ms, cancel_confirmed_at_ms,
               termination_json, heartbeat_at_ms, lease_owner, lease_expires_at_ms,
-              attempt_number, root_run_id
+              attempt_number, root_run_id, read_at_ms
        FROM automation_runs
        WHERE run_id = ?`).get(runId);
 	return row ? rowToRun(row) : null;
@@ -103,7 +104,7 @@ function listAutomationRuns(options) {
                        duration_ms, summary, error, session_key, workflow_run_id, model,
                        deadline_at_ms, current_phase, cancel_requested_at_ms, cancel_confirmed_at_ms,
                        termination_json, heartbeat_at_ms, lease_owner, lease_expires_at_ms,
-                       attempt_number, root_run_id
+                       attempt_number, root_run_id, read_at_ms
                 FROM automation_runs`;
 	let rows;
 	if (options?.automationId) rows = db.prepare(`${base} WHERE automation_id = ? ORDER BY created_at_ms DESC LIMIT ?`).all(options.automationId, limit);
@@ -112,7 +113,7 @@ function listAutomationRuns(options) {
               r.duration_ms, r.summary, r.error, r.session_key, r.workflow_run_id, r.model,
               r.deadline_at_ms, r.current_phase, r.cancel_requested_at_ms, r.cancel_confirmed_at_ms,
               r.termination_json, r.heartbeat_at_ms, r.lease_owner, r.lease_expires_at_ms,
-              r.attempt_number, r.root_run_id
+              r.attempt_number, r.root_run_id, r.read_at_ms
        FROM automation_runs r
        JOIN automations a ON a.automation_id = r.automation_id
        WHERE a.project_id = ?
@@ -138,7 +139,7 @@ function listAutomationRunsForProductEvent(options) {
               r.duration_ms, r.summary, r.error, r.session_key, r.workflow_run_id, r.model,
               r.deadline_at_ms, r.current_phase, r.cancel_requested_at_ms, r.cancel_confirmed_at_ms,
               r.termination_json, r.heartbeat_at_ms, r.lease_owner, r.lease_expires_at_ms,
-              r.attempt_number, r.root_run_id,
+              r.attempt_number, r.root_run_id, r.read_at_ms,
               e.event_id, e.run_id AS event_run_id, e.automation_id AS event_automation_id,
               e.type AS event_type, e.message AS event_message, e.data_json AS event_data_json,
               e.created_at_ms AS event_created_at_ms
@@ -165,5 +166,20 @@ function deleteAutomationRunsForAutomation(automationId) {
 		db.prepare(`DELETE FROM automation_runs WHERE automation_id = ?`).run(automationId);
 	});
 }
+function markAutomationRunRead(runId, readAtMs = Date.now()) {
+	return getSqliteDatabase().prepare(`UPDATE automation_runs SET read_at_ms = ? WHERE run_id = ? AND ended_at_ms IS NOT NULL`).run(readAtMs, runId).changes > 0;
+}
+function markAllAutomationRunsRead(options) {
+	const projectId = options?.projectId?.trim();
+	const result = getSqliteDatabase().prepare(projectId ? `UPDATE automation_runs
+         SET read_at_ms = ?
+         WHERE read_at_ms IS NULL
+           AND ended_at_ms IS NOT NULL
+           AND EXISTS (
+             SELECT 1 FROM automations a
+             WHERE a.automation_id = automation_runs.automation_id AND a.project_id = ?
+           )` : `UPDATE automation_runs SET read_at_ms = ? WHERE read_at_ms IS NULL AND ended_at_ms IS NOT NULL`).run(options?.readAtMs ?? Date.now(), ...projectId ? [projectId] : []);
+	return Number(result.changes);
+}
 //#endregion
-export { appendAutomationRunEvent, deleteAutomationRunsForAutomation, getAutomationRun, listAutomationRunEvents, listAutomationRuns, listAutomationRunsForProductEvent, saveAutomationRun, touchAutomationRunLease };
+export { appendAutomationRunEvent, deleteAutomationRunsForAutomation, getAutomationRun, listAutomationRunEvents, listAutomationRuns, listAutomationRunsForProductEvent, markAllAutomationRunsRead, markAutomationRunRead, saveAutomationRun, touchAutomationRunLease };

package/dist/src/automations/storage/index.js

@@ -1,3 +1,3 @@
 import { deleteAutomation, getAutomation, listAutomations, saveAutomation, saveAutomations } from "./automation-repository.js";
-import { appendAutomationRunEvent, deleteAutomationRunsForAutomation, getAutomationRun, listAutomationRunEvents, listAutomationRuns, listAutomationRunsForProductEvent, saveAutomationRun, touchAutomationRunLease } from "./automation-run-repository.js";
-export { appendAutomationRunEvent, deleteAutomation, deleteAutomationRunsForAutomation, getAutomation, getAutomationRun, listAutomationRunEvents, listAutomationRuns, listAutomationRunsForProductEvent, listAutomations, saveAutomation, saveAutomationRun, saveAutomations, touchAutomationRunLease };
+import { appendAutomationRunEvent, deleteAutomationRunsForAutomation, getAutomationRun, listAutomationRunEvents, listAutomationRuns, listAutomationRunsForProductEvent, markAllAutomationRunsRead, markAutomationRunRead, saveAutomationRun, touchAutomationRunLease } from "./automation-run-repository.js";
+export { appendAutomationRunEvent, deleteAutomation, deleteAutomationRunsForAutomation, getAutomation, getAutomationRun, listAutomationRunEvents, listAutomationRuns, listAutomationRunsForProductEvent, listAutomations, markAllAutomationRunsRead, markAutomationRunRead, saveAutomation, saveAutomationRun, saveAutomations, touchAutomationRunLease };

package/dist/src/cli/commands/doctor/checks/database-schema.js

@@ -52,7 +52,7 @@ async function checkDatabaseSchema(ctx) {
 		id: "database-schema",
 		label: "Database schema",
 		status: "pass",
-		message: `SQLite schema v${status.dbVersion} (current release v120).`,
+		message: `SQLite schema v${status.dbVersion} (current release v122).`,
 		hints: []
 	};
 }

package/dist/src/gateway/automation-agent-session.d.ts

@@ -0,0 +1,4 @@
+import type { PrepareAutomationAgentSessionInput } from '../automations/index.js';
+import type { ProjectService } from '../projects/index.js';
+import type { SessionStore } from '../session/index.js';
+export declare function prepareAutomationAgentSession(store: SessionStore, projects: ProjectService, input: PrepareAutomationAgentSessionInput): Promise<void>;

package/dist/src/gateway/automation-agent-session.js

@@ -0,0 +1,40 @@
+//#region src/gateway/automation-agent-session.ts
+async function prepareAutomationAgentSession(store, projects, input) {
+	await store.resolveTranscriptPath(input.sessionKey, { metadata: {
+		projectId: input.projectId,
+		sourceChannel: "automation",
+		sourceChatId: `default:dm:${input.peerId}`,
+		sessionType: "chat",
+		routing: {
+			agentId: input.agentId,
+			source: "automation",
+			accountId: "default",
+			peerKind: "dm",
+			peerId: input.peerId
+		}
+	} });
+	const current = await store.getMetadata(input.sessionKey);
+	await store.updateMetadata(input.sessionKey, {
+		sourceChannel: "automation",
+		sourceChatId: `default:dm:${input.peerId}`,
+		sessionType: "chat",
+		routing: {
+			agentId: input.agentId,
+			source: "automation",
+			accountId: "default",
+			peerKind: "dm",
+			peerId: input.peerId
+		},
+		tags: [...new Set([...current?.tags ?? [], "automation"])],
+		customData: {
+			...current?.customData ?? {},
+			origin: "automation",
+			automationId: input.automationId,
+			latestAutomationRunId: input.runId
+		}
+	});
+	if (input.projectId) projects.attachSession(input.sessionKey, input.projectId);
+	else if (current?.projectId) projects.detachSession(input.sessionKey);
+}
+//#endregion
+export { prepareAutomationAgentSession };

package/dist/src/gateway/dreaming-automation-reconciler.js

@@ -41,7 +41,8 @@ async function reconcileDreamingAutomations(params) {
 		trigger,
 		action,
 		safety: { mode: "auto_apply" },
-		afterRun: { kind: "none" },
+		conversationMode: "continuous",
+		notificationPolicy: "none",
 		reliability: { disableAfterConsecutiveFailures: 3 }
 	};
 	if (!current) {
@@ -52,7 +53,7 @@ async function reconcileDreamingAutomations(params) {
 		result.created = true;
 		return result;
 	}
-	if (current.name !== next.name || current.description !== next.description || !current.enabled || JSON.stringify(current.trigger) !== JSON.stringify(trigger) || JSON.stringify(current.action) !== JSON.stringify(action) || current.safety?.mode !== "auto_apply" || current.afterRun?.kind !== "none" || current.reliability?.disableAfterConsecutiveFailures !== 3) {
+	if (current.name !== next.name || current.description !== next.description || !current.enabled || JSON.stringify(current.trigger) !== JSON.stringify(trigger) || JSON.stringify(current.action) !== JSON.stringify(action) || current.safety?.mode !== "auto_apply" || current.conversationMode !== "continuous" || current.notificationPolicy !== "none" || current.reliability?.disableAfterConsecutiveFailures !== 3) {
 		await params.automationService.update(USER_CONTEXT_CONSOLIDATION_AUTOMATION_ID, next);
 		result.updated = true;
 	}

package/dist/src/gateway/hono/routes/commands-skills.js

@@ -74,9 +74,43 @@ function registerCommandsSkillsRoutes(authenticated, deps) {
 			}, 400);
 		}
 	});
-	authenticated.get("/api/chat/skills", (c) => {
+	authenticated.get("/api/chat/skills", async (c) => {
+		const sessionKey = c.req.query("sessionKey")?.trim();
 		const agentId = c.req.query("agentId")?.trim() || service.getConfig().agents?.default || "main";
-		const payload = service.marketplace.getAgentSkillsApi(agentId);
+		const payload = sessionKey ? await service.marketplace.getSessionSkillsApi(sessionKey) : service.marketplace.getAgentSkillsApi(agentId);
+		return c.json({
+			ok: true,
+			payload
+		});
+	});
+	authenticated.get("/api/chat/workspace-trust", async (c) => {
+		const sessionKey = c.req.query("sessionKey")?.trim();
+		if (!sessionKey) return c.json({
+			ok: false,
+			error: "Missing sessionKey"
+		}, 400);
+		const payload = await service.marketplace.getSessionWorkspaceTrustApi(sessionKey);
+		return c.json({
+			ok: true,
+			payload
+		});
+	});
+	authenticated.patch("/api/chat/workspace-trust", async (c) => {
+		let body;
+		try {
+			body = await c.req.json();
+		} catch {
+			return c.json({
+				ok: false,
+				error: "Invalid JSON"
+			}, 400);
+		}
+		const sessionKey = typeof body.sessionKey === "string" ? body.sessionKey.trim() : "";
+		if (!sessionKey || typeof body.trusted !== "boolean") return c.json({
+			ok: false,
+			error: "Expected { sessionKey: string, trusted: boolean }"
+		}, 400);
+		const payload = await service.marketplace.setSessionWorkspaceTrustApi(sessionKey, body.trusted);
 		return c.json({
 			ok: true,
 			payload

package/dist/src/gateway/hono/routes/lazy-bundles.js

@@ -161,6 +161,7 @@ const AUTHENTICATED_LAZY_ROUTE_BUNDLES = [
 			"/api/review",
 			"/api/skills",
 			"/api/chat/skills",
+			"/api/chat/workspace-trust",
 			"/api/chat/capabilities"
 		]),
 		load: async () => {

package/dist/src/gateway/service/marketplace-service.d.ts

@@ -2,7 +2,7 @@ import type { Config } from '../../config/schema.js';
 import type { AgentService } from '../../agent/service.js';
 import type { ChannelManager } from '../../channels/manager.js';
 import type { ExtensionLoader } from '../../extensions/loader.js';
-import type { AgentSkillAvailabilityEntry, AgentSkillAvailabilityPayload, SkillCatalogEntry, SkillCatalogRuntimeMeta } from '../../agent/agent-manager.js';
+import type { AgentSkillAvailabilityEntry, AgentSkillAvailabilityPayload, SkillCatalogEntry, SkillCatalogRuntimeMeta, WorkspaceTrustState } from '../../agent/agent-manager.js';
 import type { ManagedSkillListItem } from '../../agent/skills/managed-store.js';
 import type { SkillMarkdownPreviewPayload } from '../../agent/skills/types.js';
 import type { MarketplaceCategoryOption, SkillsStoreListParams, UnifiedMarketplaceListResponse, UnifiedMarketplacePackageDetail } from '../../agent/skills/skills-marketplace.js';
@@ -73,6 +73,9 @@ export declare class GatewayMarketplaceService {
     } & SkillCatalogRuntimeMeta;
     getSkillsStatusApi(): SkillCatalogRuntimeMeta;
     getAgentSkillsApi(agentId: string): AgentSkillAvailabilityPayload;
+    getSessionSkillsApi(sessionKey: string): Promise<AgentSkillAvailabilityPayload>;
+    getSessionWorkspaceTrustApi(sessionKey: string): Promise<WorkspaceTrustState>;
+    setSessionWorkspaceTrustApi(sessionKey: string, trusted: boolean): Promise<WorkspaceTrustState>;
     getSkillMarkdownSource(skillName: string): SkillMarkdownPreviewPayload | null;
     deleteSkill(skillId: string, target?: SkillInstallTarget): void;
     installSkillZip(buffer: Buffer, opts: {

package/dist/src/gateway/service/marketplace-service.js

@@ -68,6 +68,15 @@ var GatewayMarketplaceService = class {
 	getAgentSkillsApi(agentId) {
 		return this.opts.getAgentService().getAgentSkillAvailability(agentId);
 	}
+	getSessionSkillsApi(sessionKey) {
+		return this.opts.getAgentService().getSessionSkillAvailability(sessionKey);
+	}
+	getSessionWorkspaceTrustApi(sessionKey) {
+		return this.opts.getAgentService().getSessionWorkspaceTrust(sessionKey);
+	}
+	setSessionWorkspaceTrustApi(sessionKey, trusted) {
+		return this.opts.getAgentService().setSessionWorkspaceTrust(sessionKey, trusted);
+	}
 	getSkillMarkdownSource(skillName) {
 		return this.opts.getAgentService().getSkillMarkdownSource(skillName);
 	}

package/dist/src/gateway/service.js

@@ -69,6 +69,7 @@ import "../discussions/index.js";
 import { EndpointToolRuntime } from "../endpoint-tools/runtime.js";
 import "../endpoint-tools/index.js";
 import { assertGatewayAuthConfigured, extractToken, resolveGatewayAuth, validateToken } from "./auth.js";
+import { prepareAutomationAgentSession } from "./automation-agent-session.js";
 import { reconcileDreamingAutomations } from "./dreaming-automation-reconciler.js";
 import { NotesStore } from "../notes/store.js";
 import { buildNoteAgentContext } from "../notes/agent-context.js";
@@ -495,7 +496,7 @@ var GatewayService = class {
 		this.automationService.setDeps({
 			agentService: this._agentService,
 			getDefaultAgentId: () => getDefaultAgentId(this.config),
-			getProjectWorkspaceRoot: (projectId) => this.projects.get(projectId)?.workspaceRoot,
+			prepareAgentSession: (input) => prepareAutomationAgentSession(this.sessionIndex.getStore(), this.projects, input),
 			workflowRunService: this.createWorkflowRunService(),
 			browserRecipeService: this.browserRecipes,
 			executeTaskCommand: ({ taskId, idempotencyKey, command }) => {
@@ -865,6 +866,7 @@ var GatewayService = class {
 		this.automationService.setDeps({
 			agentService: this.agentService,
 			getDefaultAgentId: () => getDefaultAgentId(this.config),
+			prepareAgentSession: (input) => prepareAutomationAgentSession(this.sessionIndex.getStore(), this.projects, input),
 			workflowRunService: this.createWorkflowRunService(),
 			browserRecipeService: this.browserRecipes,
 			executeTaskCommand: ({ taskId, idempotencyKey, command }) => {
@@ -1502,7 +1504,22 @@ var GatewayService = class {
 		this.createMobileNotificationService().handleGatewayEvent(type, payload);
 	}
 	handleAutomationRunCompleted(run) {
-		this.emit("automation.run.completed", { run });
+		this.automationService.get(run.automationId).then((automation) => {
+			if (!automation) return;
+			const requiresAttention = run.status !== "succeeded" || (automation.safety?.mode ?? "auto_apply") !== "auto_apply";
+			this.emit("automation.run.completed", {
+				run,
+				notificationPolicy: automation.notificationPolicy,
+				requiresAttention,
+				projectId: automation.projectId
+			});
+		}).catch((err) => {
+			log.warn({
+				err,
+				automationId: run.automationId,
+				runId: run.id
+			}, "Automation completion event failed");
+		});
 	}
 	startAutomationProductEventBridge() {
 		this.stopAutomationProductEventBridge?.();

package/dist/src/mobile/notification-service.js

@@ -40,10 +40,13 @@ function taskEvent(payload) {
 }
 function automationEvent(payload) {
 	if (!payload || typeof payload !== "object") return null;
-	if (payload.silent === true) return null;
-	const run = payload.run;
+	const event = payload;
+	if (event.notificationPolicy === "none") return null;
+	if (event.notificationPolicy === "attention" && event.requiresAttention !== true) return null;
+	const run = event.run;
 	if (!run || run.status !== "failed" && run.status !== "timeout" && run.status !== "succeeded") return null;
 	const type = run.status === "succeeded" ? "automation.completed" : "automation.failed";
+	const route = `/automations?automation=${encodeURIComponent(run.automationId)}&run=${encodeURIComponent(run.id)}`;
 	return {
 		type,
 		entity: {
@@ -53,9 +56,9 @@ function automationEvent(payload) {
 		priority: type === "automation.failed" ? "high" : "normal",
 		title: type === "automation.failed" ? "Automation failed" : "Automation completed",
 		body: run.automationName.slice(0, 120),
-		deepLink: "/automation",
+		deepLink: route,
 		payload: {
-			route: "/automation",
+			route,
 			automationId: run.automationId,
 			runId: run.id,
 			eventType: type

package/dist/src/storage/sqlite/migrations/121_automation_inbox.sql

@@ -0,0 +1,24 @@
+ALTER TABLE automations ADD COLUMN conversation_mode TEXT NOT NULL DEFAULT 'new_session'
+  CHECK (conversation_mode IN ('new_session', 'continuous'));
+ALTER TABLE automations ADD COLUMN notification_policy TEXT NOT NULL DEFAULT 'attention'
+  CHECK (notification_policy IN ('attention', 'all', 'none'));
+ALTER TABLE automations ADD COLUMN completion_webhook_url TEXT;
+
+UPDATE automations
+SET completion_webhook_url = json_extract(after_run_json, '$.url')
+WHERE json_extract(after_run_json, '$.kind') = 'webhook';
+
+ALTER TABLE automations DROP COLUMN after_run_json;
+
+UPDATE automation_runs
+SET current_phase = 'completion_hook'
+WHERE current_phase = 'after_run';
+
+UPDATE automation_run_events
+SET type = replace(type, 'after_run.', 'completion_hook.'),
+    message = replace(message, 'After-run webhook', 'Completion webhook')
+WHERE type LIKE 'after_run.%';
+
+ALTER TABLE automation_runs ADD COLUMN read_at_ms INTEGER;
+CREATE INDEX IF NOT EXISTS idx_automation_runs_unread_created
+  ON automation_runs(read_at_ms, created_at_ms DESC);

package/dist/src/storage/sqlite/migrations/122_automation_session_projects.sql

@@ -0,0 +1,18 @@
+UPDATE sessions
+SET project_id = (
+  SELECT a.project_id
+  FROM automation_runs r
+  JOIN automations a ON a.automation_id = r.automation_id
+  WHERE r.session_key = sessions.session_key
+    AND a.project_id IS NOT NULL
+  ORDER BY r.created_at_ms DESC
+  LIMIT 1
+)
+WHERE project_id IS NULL
+  AND EXISTS (
+    SELECT 1
+    FROM automation_runs r
+    JOIN automations a ON a.automation_id = r.automation_id
+    WHERE r.session_key = sessions.session_key
+      AND a.project_id IS NOT NULL
+  );

package/dist/src/storage/sqlite/migrations/runner.d.ts

@@ -3,7 +3,7 @@ import type { ApplyMigrationsOptions } from './types.js';
 /** Baseline schema version applied from schema.sql on first open. */
 export declare const XOPC_DB_BASELINE_SCHEMA_VERSION = 11;
 /** Latest schema version this release supports (increment when adding migrations). */
-export declare const XOPC_DB_SCHEMA_VERSION = 120;
+export declare const XOPC_DB_SCHEMA_VERSION = 122;
 export declare function resolveMigrationsDir(override?: string): string;
 /**
  * Apply sequential SQL migrations from (currentVersion + 1) through targetVersion.

package/dist/src/storage/sqlite/migrations/runner.js

@@ -12,7 +12,7 @@ const log = createLogger("Sqlite:Migrations");
 /** Baseline schema version applied from schema.sql on first open. */
 const XOPC_DB_BASELINE_SCHEMA_VERSION = 11;
 /** Latest schema version this release supports (increment when adding migrations). */
-const XOPC_DB_SCHEMA_VERSION = 120;
+const XOPC_DB_SCHEMA_VERSION = 122;
 const MODULE_DIR = dirname(fileURLToPath(import.meta.url));
 function backupBeforeTaskCutover(db, databasePath) {
 	db.exec("PRAGMA wal_checkpoint(FULL)");
@@ -57,7 +57,7 @@ function applySingleMigration(db, migration) {
 * Each step runs in its own transaction and updates schema_meta on success.
 */
 function applyPendingMigrations(db, options = {}) {
-	const targetVersion = options.targetVersion ?? 120;
+	const targetVersion = options.targetVersion ?? 122;
 	let currentVersion = readSchemaVersion(db);
 	if (currentVersion > targetVersion) throw new DatabaseSchemaTooNewError(currentVersion, targetVersion);
 	if (currentVersion >= targetVersion) return currentVersion;
@@ -94,7 +94,7 @@ function applyPendingMigrations(db, options = {}) {
 }
 /** Inspect schema version without mutating the database. */
 function inspectSchemaMigrationStatus(db, options = {}) {
-	const appVersion = options.targetVersion ?? 120;
+	const appVersion = options.targetVersion ?? 122;
 	const dbVersion = readSchemaVersion(db);
 	if (dbVersion > appVersion) return {
 		dbVersion,

package/dist/src/storage/sqlite/migrations/runner.ts

@@ -19,7 +19,7 @@ const log = createLogger('Sqlite:Migrations');
 export const XOPC_DB_BASELINE_SCHEMA_VERSION = 11;
 
 /** Latest schema version this release supports (increment when adding migrations). */
-export const XOPC_DB_SCHEMA_VERSION = 120;
+export const XOPC_DB_SCHEMA_VERSION = 122;
 
 const MODULE_DIR = dirname(fileURLToPath(import.meta.url));
 

package/dist/src/storage/sqlite/schema.js

@@ -32,7 +32,7 @@ function ensureXopcDatabaseSchema(db, options = {}) {
 		currentVersion = 11;
 	}
 	applyPendingMigrations(db, {
-		targetVersion: 120,
+		targetVersion: 122,
 		databasePath: options.databasePath
 	});
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xopcai/xopc",
-  "version": "0.0.205",
+  "version": "0.0.206",
   "description": "Local-first AI system that remembers context, coordinates AI, and sustains long-term progress.",
   "type": "module",
   "main": "dist/src/index.js",
@@ -150,6 +150,7 @@
     "eslint": "^10.4.0",
     "jsdom": "^29.1.1",
     "onnxruntime-common": "1.21.0",
+    "node-pty": "1.1.0",
     "playwright-core": "^1.60.0",
     "sherpa-onnx-node": "1.13.4",
     "svgo": "4.0.2",
@@ -162,9 +163,9 @@
     "vitepress": "^1.6.4",
     "vitest": "4.1.5",
     "vue": "^3.5.35",
-    "@xopcai/gateway-contract": "0.0.0",
     "@xopcai/endpoint-tools-protocol": "0.0.0",
     "@xopcai/realtime-protocol": "0.0.0",
+    "@xopcai/gateway-contract": "0.0.0",
     "@xopcai/realtime-client": "0.0.0"
   },
   "scripts": {