@xopcai/xopc 0.0.218 → 0.0.220

package/dist/src/gateway/hono/routes/session-input-handler.js

@@ -1,6 +1,8 @@
 import { endpointTurnClaimSchema } from "../../../../packages/endpoint-tools-protocol/src/index.js";
+import { parseTurnContextRefs } from "../../../agent/source-context/types.js";
 import { validateWebchatAttachments, validateWebchatContent } from "../../chat-limits.js";
 //#region src/gateway/hono/routes/session-input-handler.ts
+const MAX_TURN_CONTEXTS = 5;
 async function submitSessionInput(c, deps, sessionKey) {
 	const body = await c.req.json().catch(() => null);
 	if (!body || !sessionKey) return c.json({
@@ -11,6 +13,14 @@ async function submitSessionInput(c, deps, sessionKey) {
 		}
 	}, 400);
 	const attachments = Array.isArray(body.attachments) ? body.attachments : void 0;
+	const contextRefs = parseTurnContextRefs(body.contextRefs, MAX_TURN_CONTEXTS);
+	if (contextRefs === null) return c.json({
+		ok: false,
+		error: {
+			code: "BAD_REQUEST",
+			message: `contextRefs must contain at most ${MAX_TURN_CONTEXTS} valid notes`
+		}
+	}, 400);
 	const content = typeof body.content === "string" ? body.content : "";
 	const contentError = validateWebchatContent(content);
 	if (contentError) return c.json({
@@ -57,6 +67,7 @@ async function submitSessionInput(c, deps, sessionKey) {
 		delivery,
 		content,
 		attachments,
+		contextRefs,
 		thinking: typeof body.thinking === "string" ? body.thinking : void 0,
 		origin: {
 			type: "endpoint",
@@ -67,9 +78,9 @@ async function submitSessionInput(c, deps, sessionKey) {
 		ok: false,
 		error: {
 			code: result.code,
-			message: "Input was not accepted"
+			message: result.code === "CONTEXT_UNAVAILABLE" ? "A referenced Note changed or is no longer available. Select it again." : "Input was not accepted"
 		}
-	}, result.code === "QUEUE_FULL" ? 409 : 400);
+	}, result.code === "QUEUE_FULL" || result.code === "CONTEXT_UNAVAILABLE" ? 409 : 400);
 	return c.json({
 		ok: true,
 		payload: {
@@ -88,6 +99,14 @@ async function replaceLatestSessionTurn(c, deps, sessionKey, targetTurnId) {
 		}
 	}, 400);
 	const attachments = Array.isArray(body.attachments) ? body.attachments : void 0;
+	const contextRefs = parseTurnContextRefs(body.contextRefs, MAX_TURN_CONTEXTS);
+	if (contextRefs === null) return c.json({
+		ok: false,
+		error: {
+			code: "BAD_REQUEST",
+			message: `contextRefs must contain at most ${MAX_TURN_CONTEXTS} valid notes`
+		}
+	}, 400);
 	const content = typeof body.content === "string" ? body.content : "";
 	const contentError = validateWebchatContent(content);
 	if (contentError) return c.json({
@@ -127,6 +146,7 @@ async function replaceLatestSessionTurn(c, deps, sessionKey, targetTurnId) {
 		delivery: "next",
 		content,
 		attachments,
+		contextRefs,
 		thinking: typeof body.thinking === "string" ? body.thinking : void 0,
 		origin: {
 			type: "endpoint",
@@ -135,7 +155,7 @@ async function replaceLatestSessionTurn(c, deps, sessionKey, targetTurnId) {
 	});
 	if (result.ok === false) {
 		const status = result.code === "TARGET_NOT_FOUND" ? 404 : result.code === "BAD_REQUEST" ? 400 : 409;
-		const message = result.code === "NOT_LATEST" ? "Only the latest user turn can be replaced" : result.code === "SESSION_BUSY" ? "Session has pending input" : result.code === "TARGET_NOT_FOUND" ? "User turn was not found" : "Replacement input was not accepted";
+		const message = result.code === "NOT_LATEST" ? "Only the latest user turn can be replaced" : result.code === "SESSION_BUSY" ? "Session has pending input" : result.code === "TARGET_NOT_FOUND" ? "User turn was not found" : result.code === "CONTEXT_UNAVAILABLE" ? "A referenced Note changed or is no longer available. Select it again." : "Replacement input was not accepted";
 		return c.json({
 			ok: false,
 			error: {

package/dist/src/gateway/hono/routes/sessions.js

@@ -121,7 +121,7 @@ function registerSessionsRoutes(authenticated, deps) {
 	});
 	authenticated.post("/api/sessions", async (c) => {
 		const body = await c.req.json().catch(() => ({}));
-		const channel = body.channel || "webchat";
+		const channel = typeof body.channel === "string" && body.channel.trim() ? body.channel.trim() : "webchat";
 		const projectId = typeof body.projectId === "string" && body.projectId.trim() ? body.projectId.trim() : void 0;
 		const routingCfg = service.currentConfig;
 		if (projectId && !service.projects.get(projectId)) return c.json({
@@ -134,25 +134,7 @@ function registerSessionsRoutes(authenticated, deps) {
 			explicitAgentId: typeof body.agentId === "string" ? body.agentId : void 0,
 			projectId
 		});
-		if (body.chat_id) {
-			const sessionKey = buildSessionKey({
-				agentId,
-				source: channel,
-				accountId: "default",
-				peerKind: "direct",
-				peerId: body.chat_id
-			});
-			await service.sessionIndexInstance.saveMessages(sessionKey, [], { metadata: buildDirectSessionMetadata({
-				agentId,
-				source: channel,
-				accountId: "default",
-				peerId: body.chat_id
-			}) });
-			if (projectId) service.projects.attachSession(sessionKey, projectId);
-			const session = await service.sessions.getSession(sessionKey);
-			return c.json({ session }, 201);
-		}
-		const chatId = `chat_${randomUUID()}`;
+		const chatId = (typeof body.chat_id === "string" && body.chat_id.trim() ? body.chat_id.trim() : void 0) ?? `chat_${randomUUID()}`;
 		const sessionKey = buildSessionKey({
 			agentId,
 			source: channel,
@@ -167,6 +149,21 @@ function registerSessionsRoutes(authenticated, deps) {
 			peerId: chatId
 		}) });
 		if (projectId) service.projects.attachSession(sessionKey, projectId);
+		const rawInitialConfig = body.initialAgentConfig && typeof body.initialAgentConfig === "object" ? body.initialAgentConfig : {};
+		const model = typeof rawInitialConfig.model === "string" && rawInitialConfig.model.trim() ? rawInitialConfig.model.trim() : void 0;
+		const thinkingLevel = typeof rawInitialConfig.thinkingLevel === "string" && rawInitialConfig.thinkingLevel.trim() ? rawInitialConfig.thinkingLevel.trim() : void 0;
+		const initialAgentConfig = {
+			...model ? { model } : {},
+			...thinkingLevel ? { thinkingLevel } : {},
+			...body.temporary === true ? { userContextMode: "temporary" } : {}
+		};
+		if (Object.keys(initialAgentConfig).length > 0) {
+			const result = await service.sessions.patchAgentConfig(sessionKey, initialAgentConfig);
+			if (!result.ok) return c.json({
+				ok: false,
+				error: result.error
+			}, 400);
+		}
 		const session = await service.sessions.getSession(sessionKey);
 		return c.json({ session }, 201);
 	});

package/dist/src/gateway/hono/routes/tasks.js

@@ -15,6 +15,7 @@ import { ProjectMonitoringService } from "../../../tasks/project-monitoring-serv
 import { ProjectOperatingViewService } from "../../../tasks/project-operating-view-service.js";
 import { TaskValueMetricsService } from "../../../tasks/task-value-metrics-service.js";
 import { TaskHandoffService } from "../../../tasks/task-handoff-service.js";
+import { TaskDeletionService } from "../../../tasks/task-deletion-service.js";
 import { TaskSignalService } from "../../../tasks/task-signal-service.js";
 import { submitSessionInput } from "./session-input-handler.js";
 import { TaskConversationQueryService } from "../../service/task-conversation-query-service.js";
@@ -33,6 +34,7 @@ function registerTaskRoutes(authenticated, deps) {
 	const projector = new TaskReadModelProjector();
 	const signals = new TaskSignalService(() => deps.service.dispatchTaskRuns());
 	const dependencies = new TaskDependencyService();
+	const deletion = new TaskDeletionService(tasks, runs);
 	const handoffs = new TaskHandoffService({
 		getConfig: () => deps.service.currentConfig,
 		sessionIndex: deps.service.sessionIndexInstance,
@@ -289,6 +291,29 @@ function registerTaskRoutes(authenticated, deps) {
 			task: updated
 		});
 	});
+	authenticated.delete("/api/tasks/:id", taskRateLimit, (c) => {
+		const taskId = c.req.param("id");
+		const result = deletion.delete(taskId);
+		if (result.ok === true) {
+			deps.service.dispatchTaskEvents();
+			return c.json({
+				ok: true,
+				deleted: true,
+				taskId
+			});
+		}
+		if (result.reason === "active_run") return c.json({
+			ok: false,
+			code: "task_active",
+			error: "Cancel the active TaskRun before deleting the Task",
+			runId: result.run.id
+		}, 409);
+		return c.json({
+			ok: false,
+			code: "task_not_found",
+			error: "Task not found"
+		}, 404);
+	});
 	authenticated.put("/api/tasks/:id/dependencies", taskRateLimit, async (c) => {
 		const parsed = TaskDependencyUpdateRequestSchema.safeParse(await c.req.json().catch(() => ({})));
 		if (!parsed.success) return c.json({

package/dist/src/gateway/hono/routes/understanding-sources.d.ts

@@ -1,3 +1,21 @@
 import type { Hono } from 'hono';
 import type { AuthenticatedRouteDeps } from './deps.js';
+export declare function sourceRevocationImpact(grantId: string): {
+    grant: import("../../../user-context/sources/types.js").UnderstandingSourceGrant;
+    sourceInstanceId: string;
+    understandingIds: string[];
+    focusIds: string[];
+    derivedCount: number;
+    understandingCount: number;
+    focusCount: number;
+    memoryRecordCount: number;
+    boundedRawCount: number;
+};
+export declare function applySourceRevocationChoices(impact: NonNullable<ReturnType<typeof sourceRevocationImpact>>, options: {
+    derived: 'delete' | 'retain';
+    raw: 'delete' | 'retain';
+}): {
+    derivedDeleted: number;
+    rawDeleted: number;
+};
 export declare function registerUnderstandingSourceRoutes(authenticated: Hono, deps: AuthenticatedRouteDeps): void;

package/dist/src/gateway/hono/routes/understanding-sources.js

@@ -1,8 +1,10 @@
-import { deleteUnderstanding, listUnderstandingEvidence, listUnderstandings } from "../../../storage/sqlite/user-context-repository.js";
+import { deleteUnderstanding, listUnderstandingEvidence, listUnderstandings, setUnderstandingStatus } from "../../../storage/sqlite/user-context-repository.js";
+import { countKnowledgeSourceItems, deleteKnowledgeSourceItems } from "../../../storage/sqlite/knowledge-repository.js";
+import { countMemoryRecordsBySourceInstanceId, deleteMemoryRecordsBySourceInstanceId } from "../../../storage/sqlite/memory-records-repository.js";
 import { getConnectorAccount } from "../../../storage/sqlite/connector-account-repository.js";
 import "../../../storage/sqlite/index.js";
 import { init_agent_scope, resolveDefaultAgentId } from "../../../agent/agent-scope.js";
-import { deleteUserFocus, getUnderstandingSourceGrant, listUnderstandingSourceGrants, listUnderstandingSourceRuns, listUserFocuses, revokeUnderstandingSourceGrant, setUserFocusStatus } from "../../../user-context/sources/repository.js";
+import { deleteUserFocus, getUnderstandingSourceGrant, getUnderstandingSourceRun, listUnderstandingSourceGrants, listUnderstandingSourceRuns, listUserFocusEvidence, listUserFocuses, revokeUnderstandingSourceGrant, updateUnderstandingSourceGrantPolicies, updateUserFocus } from "../../../user-context/sources/repository.js";
 import { listConnectedContentCandidates, readConnectedContent } from "../../../connectors/content-enrichment.js";
 import { getWorkDiscoveryService } from "./work-discovery.js";
 import { listUnderstandingSourceDefinitions } from "../../../user-context/sources/catalog.js";
@@ -27,6 +29,52 @@ function decisionsFrom(body) {
 		}];
 	}).slice(0, 20);
 }
+function sourceRevocationImpact(grantId) {
+	const grant = getUnderstandingSourceGrant(grantId);
+	if (!grant) return null;
+	const accountId = typeof grant.config.accountId === "string" ? grant.config.accountId : void 0;
+	const connectorId = typeof grant.config.connectorId === "string" ? grant.config.connectorId : void 0;
+	const sourceInstanceId = accountId && connectorId ? `composio:${connectorId}:${accountId}` : void 0;
+	const belongs = (evidence) => evidence.sourceRef.startsWith(`understanding-source-grant:${grantId}:`) || Boolean(sourceInstanceId && evidence.sourceInstanceId === sourceInstanceId);
+	const understandings = listUnderstandings().flatMap((item) => {
+		if (item.explicitness === "explicit") return [];
+		const evidence = listUnderstandingEvidence(item.id);
+		return evidence.some(belongs) && !evidence.some((entry) => !belongs(entry)) ? [item] : [];
+	});
+	const focuses = listUserFocuses().flatMap((focus) => {
+		if (focus.explicitness === "explicit") return [];
+		if ((focus.sourceRunId ? getUnderstandingSourceRun(focus.sourceRunId) : null)?.grantId !== grantId) return [];
+		return listUserFocusEvidence(focus.id).some((entry) => !belongs(entry)) ? [] : [focus];
+	});
+	const memoryRecordCount = sourceInstanceId ? countMemoryRecordsBySourceInstanceId(sourceInstanceId) : 0;
+	const boundedRawCount = sourceInstanceId ? countKnowledgeSourceItems(sourceInstanceId) : 0;
+	return {
+		grant,
+		sourceInstanceId,
+		understandingIds: understandings.map((item) => item.id),
+		focusIds: focuses.map((item) => item.id),
+		derivedCount: understandings.length + focuses.length + memoryRecordCount,
+		understandingCount: understandings.length,
+		focusCount: focuses.length,
+		memoryRecordCount,
+		boundedRawCount
+	};
+}
+function applySourceRevocationChoices(impact, options) {
+	let derivedDeleted = 0;
+	for (const id of impact.focusIds) if (options.derived === "delete") {
+		if (deleteUserFocus(id)) derivedDeleted += 1;
+	} else updateUserFocus(id, { status: "paused" });
+	for (const id of impact.understandingIds) if (options.derived === "delete") {
+		if (deleteUnderstanding(id)) derivedDeleted += 1;
+	} else setUnderstandingStatus(id, "needs_review");
+	if (options.derived === "delete" && impact.sourceInstanceId) derivedDeleted += deleteMemoryRecordsBySourceInstanceId(impact.sourceInstanceId);
+	const rawDeleted = options.raw === "delete" && impact.sourceInstanceId ? deleteKnowledgeSourceItems(impact.sourceInstanceId) : 0;
+	return {
+		derivedDeleted,
+		rawDeleted
+	};
+}
 function registerUnderstandingSourceRoutes(authenticated, deps) {
 	const service = getWorkDiscoveryService(deps);
 	const limited = deps.strictRateLimitMiddleware;
@@ -49,6 +97,54 @@ function registerUnderstandingSourceRoutes(authenticated, deps) {
 			}))
 		});
 	});
+	authenticated.patch("/api/understanding/sources/grants/:grantId", limited, async (c) => {
+		const body = await c.req.json().catch(() => null);
+		if (!body) return c.json({
+			ok: false,
+			error: "Invalid JSON"
+		}, 400);
+		const accessMode = body.accessMode;
+		const retentionPolicy = body.retentionPolicy;
+		const processingPolicy = body.processingPolicy;
+		if (accessMode !== void 0 && accessMode !== "once" && accessMode !== "continuous") return c.json({
+			ok: false,
+			error: "Invalid access mode"
+		}, 400);
+		if (retentionPolicy !== void 0 && retentionPolicy !== "metadata_only" && retentionPolicy !== "derived_only" && retentionPolicy !== "bounded_raw") return c.json({
+			ok: false,
+			error: "Invalid retention policy"
+		}, 400);
+		if (processingPolicy !== void 0 && processingPolicy !== "local_only" && processingPolicy !== "remote_allowed") return c.json({
+			ok: false,
+			error: "Invalid processing policy"
+		}, 400);
+		if (accessMode === void 0 && retentionPolicy === void 0 && processingPolicy === void 0) return c.json({
+			ok: false,
+			error: "At least one policy change is required"
+		}, 400);
+		const grant = updateUnderstandingSourceGrantPolicies(c.req.param("grantId"), {
+			...accessMode ? { accessMode } : {},
+			...retentionPolicy ? { retentionPolicy } : {},
+			...processingPolicy ? { processingPolicy } : {}
+		});
+		return grant ? c.json({
+			ok: true,
+			grant
+		}) : c.json({
+			ok: false,
+			error: "Source grant not found"
+		}, 404);
+	});
+	authenticated.get("/api/understanding/sources/grants/:grantId/impact", (c) => {
+		const impact = sourceRevocationImpact(c.req.param("grantId"));
+		return impact ? c.json({
+			ok: true,
+			impact
+		}) : c.json({
+			ok: false,
+			error: "Source grant not found"
+		}, 404);
+	});
 	authenticated.get("/api/understanding/sources/content-candidates", (c) => {
 		const agentId = resolveDefaultAgentId(deps.service.currentConfig);
 		return c.json({
@@ -76,32 +172,35 @@ function registerUnderstandingSourceRoutes(authenticated, deps) {
 		}
 	});
 	authenticated.delete("/api/understanding/sources/grants/:grantId", limited, (c) => {
-		const current = getUnderstandingSourceGrant(c.req.param("grantId"));
+		const grantId = c.req.param("grantId");
+		const impact = sourceRevocationImpact(grantId);
+		const derived = c.req.query("derived");
+		const raw = c.req.query("raw");
+		if (derived !== "delete" && derived !== "retain") return c.json({
+			ok: false,
+			error: "derived must be delete or retain"
+		}, 400);
+		if (raw !== "delete" && raw !== "retain") return c.json({
+			ok: false,
+			error: "raw must be delete or retain"
+		}, 400);
+		const current = impact?.grant;
 		const accountId = typeof current?.config.accountId === "string" ? current.config.accountId : void 0;
-		const connectorId = typeof current?.config.connectorId === "string" ? current.config.connectorId : void 0;
-		const sourceInstanceId = accountId && connectorId ? `composio:${connectorId}:${accountId}` : void 0;
 		const connectionId = accountId ? getConnectorAccount(accountId)?.currentConnectionId : void 0;
 		if (connectionId) deps.service.setConnectorLearningPaused(connectionId, true);
-		const grant = revokeUnderstandingSourceGrant(c.req.param("grantId"));
-		if (grant && c.req.query("deleteDerived") === "true") {
-			const activeGrantIds = new Set(listUnderstandingSourceGrants().map((item) => item.id));
-			const activeSourceInstanceIds = new Set(listUnderstandingSourceGrants().flatMap((item) => {
-				const activeAccountId = typeof item.config.accountId === "string" ? item.config.accountId : void 0;
-				const activeConnectorId = typeof item.config.connectorId === "string" ? item.config.connectorId : void 0;
-				return activeAccountId && activeConnectorId ? [`composio:${activeConnectorId}:${activeAccountId}`] : [];
-			}));
-			for (const understanding of listUnderstandings()) {
-				const evidence = listUnderstandingEvidence(understanding.id);
-				const grantEvidence = evidence.map((evidence) => /^understanding-source-grant:([^:]+):/.exec(evidence.sourceRef)?.[1]).filter((id) => Boolean(id));
-				const connectorEvidence = evidence.map((item) => item.sourceInstanceId).filter((id) => Boolean(id));
-				const belongsToRevokedSource = grantEvidence.includes(grant.id) || Boolean(sourceInstanceId && connectorEvidence.includes(sourceInstanceId));
-				const hasActiveAlternative = grantEvidence.some((id) => id !== grant.id && activeGrantIds.has(id)) || connectorEvidence.some((id) => id !== sourceInstanceId && activeSourceInstanceIds.has(id));
-				if (belongsToRevokedSource && !hasActiveAlternative) deleteUnderstanding(understanding.id);
-			}
-		}
+		const grant = revokeUnderstandingSourceGrant(grantId);
+		const deleted = grant && impact ? applySourceRevocationChoices(impact, {
+			derived,
+			raw
+		}) : {
+			derivedDeleted: 0,
+			rawDeleted: 0
+		};
 		return grant ? c.json({
 			ok: true,
-			grant
+			grant,
+			impact,
+			...deleted
 		}) : c.json({
 			ok: false,
 			error: "Source grant not found"
@@ -155,15 +254,21 @@ function registerUnderstandingSourceRoutes(authenticated, deps) {
 		sources: service.listDirectorySources()
 	}));
 	authenticated.post("/api/understanding/sources/work-folders", limited, async (c) => {
-		const rootPath = stringField(await c.req.json().catch(() => null), "rootPath");
+		const body = await c.req.json().catch(() => null);
+		const rootPath = stringField(body, "rootPath");
+		const processingPolicy = stringField(body, "processingPolicy");
 		if (!rootPath) return c.json({
 			ok: false,
 			error: "Missing rootPath"
 		}, 400);
+		if (processingPolicy !== "local_only" && processingPolicy !== "remote_allowed") return c.json({
+			ok: false,
+			error: "Explicit processingPolicy is required"
+		}, 400);
 		try {
 			return c.json({
 				ok: true,
-				source: await service.grantDirectorySource(rootPath)
+				source: await service.grantDirectorySource(rootPath, processingPolicy)
 			}, 201);
 		} catch (error) {
 			return c.json({
@@ -191,14 +296,19 @@ function registerUnderstandingSourceRoutes(authenticated, deps) {
 	});
 	authenticated.post("/api/understanding/bootstrap", limited, async (c) => {
 		const body = await c.req.json().catch(() => null);
-		const items = body && typeof body === "object" && Array.isArray(body.items) ? body.items.slice(0, 150) : [];
+		const items = body && typeof body === "object" && Array.isArray(body.items) ? body.items.slice(0, 1200) : [];
+		const processingPolicy = stringField(body, "processingPolicy");
 		if (!items.length) return c.json({
 			ok: false,
 			error: "No understanding source items were provided"
 		}, 400);
+		if (processingPolicy !== "local_only" && processingPolicy !== "remote_allowed") return c.json({
+			ok: false,
+			error: "Explicit processingPolicy is required"
+		}, 400);
 		try {
 			const checkpoints = body && typeof body === "object" && body.sourceCheckpoints && typeof body.sourceCheckpoints === "object" ? body.sourceCheckpoints : void 0;
-			const result = await service.importUnderstandingSources(items, c.req.raw.signal, stringField(body, "workDiscoveryRunId") || void 0, checkpoints);
+			const result = await service.importUnderstandingSources(items, processingPolicy, c.req.raw.signal, stringField(body, "workDiscoveryRunId") || void 0, checkpoints);
 			return c.json({
 				ok: true,
 				...result
@@ -226,18 +336,41 @@ function registerUnderstandingSourceRoutes(authenticated, deps) {
 		focuses: listUserFocuses()
 	}));
 	authenticated.patch("/api/understanding/focuses/:focusId", limited, async (c) => {
-		const requested = stringField(await c.req.json().catch(() => null), "status");
-		if (!new Set([
+		const body = await c.req.json().catch(() => null);
+		const requestedStatus = stringField(body, "status");
+		const title = stringField(body, "title");
+		const summary = stringField(body, "summary");
+		if (requestedStatus && !new Set([
 			"candidate",
 			"active",
 			"paused",
 			"completed",
 			"rejected"
-		]).has(requested)) return c.json({
+		]).has(requestedStatus)) return c.json({
 			ok: false,
 			error: "Invalid focus status"
 		}, 400);
-		const focus = setUserFocusStatus(c.req.param("focusId"), requested);
+		if (body?.title !== void 0 && !title) return c.json({
+			ok: false,
+			error: "Focus title cannot be empty"
+		}, 400);
+		if (body?.summary !== void 0 && !summary) return c.json({
+			ok: false,
+			error: "Focus summary cannot be empty"
+		}, 400);
+		if (title.length > 300 || summary.length > 2e3) return c.json({
+			ok: false,
+			error: "Focus title or summary is too long"
+		}, 400);
+		if (!requestedStatus && !title && !summary) return c.json({
+			ok: false,
+			error: "At least one focus change is required"
+		}, 400);
+		const focus = updateUserFocus(c.req.param("focusId"), {
+			...requestedStatus ? { status: requestedStatus } : {},
+			...title ? { title } : {},
+			...summary ? { summary } : {}
+		});
 		return focus ? c.json({
 			ok: true,
 			focus
@@ -246,10 +379,6 @@ function registerUnderstandingSourceRoutes(authenticated, deps) {
 			error: "Focus not found"
 		}, 404);
 	});
-	authenticated.delete("/api/understanding/focuses/:focusId", limited, (c) => deleteUserFocus(c.req.param("focusId")) ? c.json({ ok: true }) : c.json({
-		ok: false,
-		error: "Focus not found"
-	}, 404));
 }
 //#endregion
-export { registerUnderstandingSourceRoutes };
+export { applySourceRevocationChoices, registerUnderstandingSourceRoutes, sourceRevocationImpact };

package/dist/src/gateway/hono/routes/work-discovery.js

@@ -86,7 +86,8 @@ function registerWorkDiscoveryRoutes(authenticated, deps) {
 			const candidates = await service.discoverCandidates(c.req.raw.signal);
 			return c.json({
 				ok: true,
-				candidates
+				candidates,
+				processingTarget: service.getModelProcessingTarget()
 			});
 		} catch (error) {
 			return c.json({
@@ -100,13 +101,22 @@ function registerWorkDiscoveryRoutes(authenticated, deps) {
 			ok: false,
 			error: "Work discovery is disabled"
 		}, 404);
-		const idempotencyKey = stringField(await c.req.json().catch(() => null), "idempotencyKey");
+		const body = await c.req.json().catch(() => null);
+		const idempotencyKey = stringField(body, "idempotencyKey");
+		const processingPolicy = stringField(body, "processingPolicy");
 		if (!idempotencyKey) return c.json({
 			ok: false,
 			error: "Missing idempotencyKey"
 		}, 400);
+		if (processingPolicy !== "local_only" && processingPolicy !== "remote_allowed") return c.json({
+			ok: false,
+			error: "Explicit processingPolicy is required"
+		}, 400);
 		try {
-			const run = await service.startQuickRun({ idempotencyKey });
+			const run = await service.startQuickRun({
+				idempotencyKey,
+				processingPolicy
+			});
 			return c.json({
 				ok: true,
 				run

package/dist/src/gateway/hono/routes/workflows.js

@@ -7,10 +7,10 @@ import { messagesToClientHistory } from "../../../session/client-history.js";
 import "../../../workflows/domain/index.js";
 import { resolveWorkflowRunArtifactsDir } from "../../../workflows/store/paths.js";
 import { WorkflowDraftService } from "../../../workflows/draft/workflow-draft-service.js";
-import "../../../workflows/draft/index.js";
-import { ProjectWorkflowPresetRepository } from "../../../workflows/project-presets/project-workflow-preset-repository.js";
 import { WorkflowDraftConflictError, WorkflowDraftStore } from "../../../workflows/authoring/workflow-draft-store.js";
 import "../../../workflows/authoring/index.js";
+import "../../../workflows/draft/index.js";
+import { ProjectWorkflowPresetRepository } from "../../../workflows/project-presets/project-workflow-preset-repository.js";
 import { basename, join } from "node:path";
 import { readFile, stat } from "node:fs/promises";
 //#region src/gateway/hono/routes/workflows.ts

package/dist/src/gateway/hono/routes/you.js

@@ -1,9 +1,12 @@
-import { listContextConsolidationRuns } from "../../../storage/sqlite/context-consolidation-repository.js";
 import { UNDERSTANDING_KINDS } from "../../../user-context/domain.js";
-import { summarizeUserUnderstandingQuality } from "../../../storage/sqlite/user-context-quality-repository.js";
+import { listContextExtractionRuns } from "../../../storage/sqlite/context-extraction-repository.js";
+import { listContextConsolidationRuns } from "../../../storage/sqlite/context-consolidation-repository.js";
 import { createCollaborationRule, createUnderstanding, decideContextConsent, deleteCollaborationRule, deleteUnderstanding, getCollaborationRule, getTurnPersonalization, getUnderstanding, getUserProfile, listCollaborationRules, listUnderstandingEvidence, listUnderstandings, recordContextFeedback, rejectUnderstanding, reviseCollaborationRule, reviseUnderstanding, setCollaborationRuleStatus, setUnderstandingStatus, updateUserProfile } from "../../../storage/sqlite/user-context-repository.js";
 import "../../../storage/sqlite/index.js";
+import { listUserFocuses, updateUserFocus } from "../../../user-context/sources/repository.js";
 import { canonicalUnderstandingKey, findDuplicateUnderstanding } from "../../../user-context/understanding.js";
+import { listContextObjects } from "../../../user-context/context-objects.js";
+import { repairExtractedContext } from "../../../user-context/extraction/repair.js";
 import { userInfo } from "node:os";
 //#region src/gateway/hono/routes/you.ts
 const UNDERSTANDING_KIND_SET = new Set(UNDERSTANDING_KINDS);
@@ -34,6 +37,11 @@ const FEEDBACK_RATINGS = new Set([
 	"stale",
 	"sensitive"
 ]);
+const CONTEXT_OBJECT_VIEWS = new Set([
+	"current",
+	"review",
+	"history"
+]);
 function asRecord(value) {
 	return value && typeof value === "object" && !Array.isArray(value) ? value : void 0;
 }
@@ -87,10 +95,64 @@ function registerYouRoutes(authenticated, deps) {
 	authenticated.get("/api/you", (c) => c.json({
 		profile: getUserProfile(),
 		understandings: listUnderstandings(),
+		focuses: listUserFocuses(),
 		rules: listCollaborationRules(),
-		consolidation: { lastRun: listContextConsolidationRuns(1)[0] ?? null },
-		quality: summarizeUserUnderstandingQuality()
+		consolidation: { lastRun: listContextConsolidationRuns(1)[0] ?? null }
 	}));
+	authenticated.get("/api/you/context-objects", (c) => {
+		const view = c.req.query("view") ?? "current";
+		if (!CONTEXT_OBJECT_VIEWS.has(view)) return c.json({ error: "Invalid context object view" }, 400);
+		return c.json({ objects: listContextObjects(view) });
+	});
+	authenticated.get("/api/you/extraction-runs", (c) => c.json({ runs: listContextExtractionRuns({
+		...c.req.query("sourceRef") ? { sourceRef: c.req.query("sourceRef") } : {},
+		...c.req.query("extractorId") ? { extractorId: c.req.query("extractorId") } : {},
+		...c.req.query("extractorVersion") ? { extractorVersion: c.req.query("extractorVersion") } : {},
+		limit: 100
+	}) }));
+	authenticated.post("/api/you/context-repair", write, async (c) => {
+		const body = await readBody(c);
+		if (!body) return c.json({ error: "Invalid JSON" }, 400);
+		const filter = Object.fromEntries([
+			"runId",
+			"sourceRef",
+			"extractorId",
+			"extractorVersion",
+			"objectVersionId"
+		].flatMap((field) => typeof body[field] === "string" && body[field].trim() ? [[field, body[field].trim()]] : []));
+		if (!Object.keys(filter).length) return c.json({ error: "At least one repair filter is required" }, 400);
+		return c.json({ result: repairExtractedContext(filter) });
+	});
+	authenticated.post("/api/you/context-objects/batch-review", write, async (c) => {
+		const decisions = (await readBody(c))?.decisions;
+		if (!Array.isArray(decisions) || decisions.length < 1 || decisions.length > 50) return c.json({ error: "decisions must contain 1-50 items" }, 400);
+		const normalized = [];
+		const targets = /* @__PURE__ */ new Set();
+		for (const value of decisions) {
+			const item = asRecord(value);
+			const objectType = item?.objectType;
+			const objectId = nonEmptyString(item?.objectId, 200);
+			const action = item?.action;
+			if (objectType !== "focus" && objectType !== "understanding" || !objectId || action !== "accept" && action !== "reject" && action !== "pause") return c.json({ error: "Each decision must contain a valid objectType, objectId, and action" }, 400);
+			if (!(objectType === "understanding" ? Boolean(getUnderstanding(objectId)) : listUserFocuses().some((focus) => focus.id === objectId))) return c.json({ error: `Context object not found: ${objectId}` }, 404);
+			const target = `${objectType}:${objectId}`;
+			if (targets.has(target)) return c.json({ error: `Duplicate context object decision: ${objectId}` }, 400);
+			targets.add(target);
+			normalized.push({
+				objectType,
+				objectId,
+				action
+			});
+		}
+		const objects = normalized.map(({ objectType, objectId, action }) => {
+			if (objectType === "understanding") return action === "accept" ? setUnderstandingStatus(objectId, "active", {
+				explicitness: "explicit",
+				confidence: 1
+			}) : action === "reject" ? rejectUnderstanding(objectId, "Rejected during context review") : setUnderstandingStatus(objectId, "needs_review");
+			return updateUserFocus(objectId, { status: action === "accept" ? "active" : action === "reject" ? "rejected" : "paused" });
+		});
+		return c.json({ objects });
+	});
 	authenticated.get("/api/you/profile", (c) => {
 		const profile = getUserProfile();
 		return c.json({
@@ -244,6 +306,7 @@ function registerYouRoutes(authenticated, deps) {
 		if (objectType === void 0 !== (objectId === void 0) || objectType !== void 0 && ![
 			"profile",
 			"rule",
+			"focus",
 			"understanding"
 		].includes(String(objectType)) || objectId !== void 0 && typeof objectId !== "string") return c.json({ error: "objectType and objectId must be valid and provided together" }, 400);
 		if (objectType !== void 0 && !run.items.some((item) => item.objectType === objectType && item.objectId === objectId)) return c.json({ error: "The context object was not part of this turn" }, 400);
@@ -263,6 +326,10 @@ function registerYouRoutes(authenticated, deps) {
 			if (rating === "stale") setUnderstandingStatus(objectId, "stale");
 			if (rating === "sensitive") setUnderstandingStatus(objectId, "needs_review");
 		}
+		if (objectType === "focus" && typeof objectId === "string") {
+			if (rating === "wrong") updateUserFocus(objectId, { status: "rejected" });
+			if (rating === "stale" || rating === "sensitive") updateUserFocus(objectId, { status: "paused" });
+		}
 		return c.json({ ok: true });
 	});
 	authenticated.patch("/api/you/consents/:id", write, async (c) => {