@xopcai/xopc 0.0.225 → 0.0.227

package/dist/src/agent/skills/index.d.ts

@@ -1,11 +1,31 @@
 import { type ResolveSkillSourcesOptions } from './skill-sources.js';
 import type { Skill, SkillConfig, SkillDiagnostic, LoadSkillsResult } from './types.js';
+export type WorkspaceSkillSourceState = 'active' | 'missing' | 'disabled' | 'untrusted' | 'invalid';
+export interface WorkspaceSkillSourceStatus {
+    origin: 'xopc-workspace' | 'agents-workspace';
+    rootDir: string;
+    managed: boolean;
+    writable: boolean;
+    state: WorkspaceSkillSourceState;
+}
+export interface WorkspaceSkillInventoryEntry {
+    skill: Skill;
+    effective: boolean;
+    shadowedBy?: Skill['origin']['id'];
+}
+export interface WorkspaceSkillInventoryResult {
+    entries: WorkspaceSkillInventoryEntry[];
+    sources: WorkspaceSkillSourceStatus[];
+    diagnostics: SkillDiagnostic[];
+}
 export declare function loadSkills(options: ResolveSkillSourcesOptions & {
     /** Dependency-injection override for the ~/.agents/skills compatibility root. */
     agentsDir?: string;
 }): LoadSkillsResult;
-/** Discover only skills owned by a workspace, without global or bundled skills. */
-export declare function loadWorkspaceSkills(workspaceDir: string): LoadSkillsResult;
+/** Discover project-owned XOPC and Agents skills with runtime-equivalent trust and precedence. */
+export declare function loadWorkspaceSkillInventory(workspaceDir: string, options: {
+    workspaceTrust: 'trusted' | 'untrusted';
+}): WorkspaceSkillInventoryResult;
 export interface SkillLoader {
     init: (workspace: string, builtin: string | null) => LoadSkillsResult;
     load: () => LoadSkillsResult;

package/dist/src/agent/skills/index.js

@@ -9,7 +9,8 @@ import { parseSkillToolConditions } from "./skill-tool-gating.js";
 import { formatSkillsForPrompt } from "./format-skills-prompt.js";
 import { parseRequiredEnvVarNames } from "./required-env-vars.js";
 import { parseSkillMetadata } from "./parse-skill-metadata.js";
-import { resolveSkillSources, resolveWorkspaceSkillSource } from "./skill-sources.js";
+import { resolveWorkspaceSkillsDir } from "./workspace-skills-dir.js";
+import { resolveSkillSources, resolveWorkspaceAgentsSkillsDir } from "./skill-sources.js";
 import { collectSkillInstallWarnings, formatScanSummary, scanSkillDirectory } from "./scanner.js";
 import { SkillTestFramework, SkillTestRunner, formatTestResults, formatTestResultsJson, formatTestResultsTap } from "./test-framework.js";
 import { basename, dirname, join, relative, sep } from "path";
@@ -119,6 +120,45 @@ function discoverSkills(source, maxSkillFileBytes) {
 		diagnostics
 	};
 }
+function discoverAndMergeSkills(sources, maxSkillFileBytes, initialDiagnostics = []) {
+	const skillMap = /* @__PURE__ */ new Map();
+	const discoveredSkills = [];
+	const diagnostics = [...initialDiagnostics];
+	for (const source of sources) {
+		const discovered = discoverSkills(source, maxSkillFileBytes);
+		diagnostics.push(...discovered.diagnostics);
+		for (const skill of discovered.skills) {
+			discoveredSkills.push(skill);
+			const previous = skillMap.get(skill.name);
+			if (previous) {
+				const winner = skill.origin.priority > previous.origin.priority ? skill : previous;
+				const shadowed = winner === skill ? previous : skill;
+				diagnostics.push({
+					type: "collision",
+					skillName: skill.name,
+					path: winner.filePath,
+					message: `Skill "${skill.name}" from ${winner.origin.id} (${winner.filePath}) shadows ${shadowed.origin.id} (${shadowed.filePath})`
+				});
+			}
+			if (!previous || skill.origin.priority > previous.origin.priority) skillMap.set(skill.name, skill);
+		}
+	}
+	return {
+		skills: [...skillMap.values()],
+		entries: discoveredSkills.map((skill) => {
+			const winner = skillMap.get(skill.name);
+			return winner === skill ? {
+				skill,
+				effective: true
+			} : {
+				skill,
+				effective: false,
+				shadowedBy: winner.origin.id
+			};
+		}),
+		diagnostics
+	};
+}
 function deriveDescriptionFromMarkdown(content) {
 	let fallbackHeading = "";
 	for (const rawLine of content.split(/\r?\n/)) {
@@ -197,40 +237,42 @@ function loadSkills(options) {
 	const skillsConfig = createSkillConfigManager(resolveStateDir()).load();
 	const resolvedSources = resolveSkillSources(options, skillsConfig);
 	const maxSkillFileBytes = resolveMaxSkillFileBytes(skillsConfig);
-	const skillMap = /* @__PURE__ */ new Map();
-	const diagnostics = [...resolvedSources.diagnostics];
-	for (const source of resolvedSources.sources) {
-		const discovered = discoverSkills(source, maxSkillFileBytes);
-		diagnostics.push(...discovered.diagnostics);
-		for (const skill of discovered.skills) {
-			const previous = skillMap.get(skill.name);
-			if (previous) {
-				const winner = skill.origin.priority > previous.origin.priority ? skill : previous;
-				const shadowed = winner === skill ? previous : skill;
-				diagnostics.push({
-					type: "collision",
-					skillName: skill.name,
-					path: winner.filePath,
-					message: `Skill "${skill.name}" from ${winner.origin.id} (${winner.filePath}) shadows ${shadowed.origin.id} (${shadowed.filePath})`
-				});
-			}
-			if (!previous || skill.origin.priority > previous.origin.priority) skillMap.set(skill.name, skill);
-		}
-	}
-	const merged = Array.from(skillMap.values());
+	const merged = discoverAndMergeSkills(resolvedSources.sources, maxSkillFileBytes, resolvedSources.diagnostics);
 	return {
-		skills: merged,
-		prompt: formatSkillsForPrompt(merged, skillsConfig),
-		diagnostics
+		skills: merged.skills,
+		prompt: formatSkillsForPrompt(merged.skills, skillsConfig),
+		diagnostics: merged.diagnostics
 	};
 }
-/** Discover only skills owned by a workspace, without global or bundled skills. */
-function loadWorkspaceSkills(workspaceDir) {
-	const maxSkillFileBytes = resolveMaxSkillFileBytes(createSkillConfigManager(resolveStateDir()).load());
-	const discovered = discoverSkills(resolveWorkspaceSkillSource(workspaceDir), maxSkillFileBytes);
+/** Discover project-owned XOPC and Agents skills with runtime-equivalent trust and precedence. */
+function loadWorkspaceSkillInventory(workspaceDir, options) {
+	const skillsConfig = createSkillConfigManager(resolveStateDir()).load();
+	const resolved = resolveSkillSources({
+		workspaceDir,
+		workspaceTrust: options.workspaceTrust
+	}, skillsConfig);
+	const maxSkillFileBytes = resolveMaxSkillFileBytes(skillsConfig);
+	const workspaceSources = resolved.sources.filter((source) => source.id === "xopc-workspace" || source.id === "agents-workspace");
+	const discovered = discoverAndMergeSkills(workspaceSources, maxSkillFileBytes, resolved.diagnostics);
+	const agentsRoot = resolveWorkspaceAgentsSkillsDir(workspaceDir);
+	const agentsDiagnostic = resolved.diagnostics.find((diagnostic) => diagnostic.type === "warning" && diagnostic.message.includes("agents-workspace"));
+	const agentsEnabled = skillsConfig.load?.sources?.agentsWorkspace?.enabled !== false;
+	const agentsSource = workspaceSources.find((source) => source.id === "agents-workspace");
 	return {
-		skills: discovered.skills,
-		prompt: formatSkillsForPrompt(discovered.skills),
+		entries: discovered.entries,
+		sources: [{
+			origin: "xopc-workspace",
+			rootDir: resolveWorkspaceSkillsDir(workspaceDir),
+			managed: true,
+			writable: true,
+			state: "active"
+		}, {
+			origin: "agents-workspace",
+			rootDir: agentsRoot,
+			managed: false,
+			writable: false,
+			state: !agentsEnabled ? "disabled" : !existsSync(agentsRoot) ? "missing" : agentsSource ? "active" : agentsDiagnostic?.type === "warning" ? "invalid" : "untrusted"
+		}],
 		diagnostics: discovered.diagnostics
 	};
 }
@@ -288,4 +330,4 @@ function createSkillLoader(options = {}) {
 	};
 }
 //#endregion
-export { SkillTestFramework, SkillTestRunner, applySkillEnvOverrides, collectSkillInstallWarnings, createSkillConfigManager, createSkillLoader, findInstallSpec, formatScanSummary, formatTestResults, formatTestResultsJson, formatTestResultsTap, getSkillEnvironment, hasBinary, installSkill, isSkillEnabled, loadSkills, loadWorkspaceSkills, resolveSkillConfig, scanSkillDirectory, validateSkillConfig };
+export { SkillTestFramework, SkillTestRunner, applySkillEnvOverrides, collectSkillInstallWarnings, createSkillConfigManager, createSkillLoader, findInstallSpec, formatScanSummary, formatTestResults, formatTestResultsJson, formatTestResultsTap, getSkillEnvironment, hasBinary, installSkill, isSkillEnabled, loadSkills, loadWorkspaceSkillInventory, resolveSkillConfig, scanSkillDirectory, validateSkillConfig };

package/dist/src/agent/skills/skill-sources.d.ts

@@ -15,4 +15,3 @@ export interface ResolveSkillSourcesResult {
 export declare function resolveSkillSources(options: ResolveSkillSourcesOptions, skillsConfig: SkillsConfig): ResolveSkillSourcesResult;
 export declare function resolveAgentsSkillsDir(env?: NodeJS.ProcessEnv): string;
 export declare function resolveWorkspaceAgentsSkillsDir(workspaceDir: string): string;
-export declare function resolveWorkspaceSkillSource(workspaceDir: string): SkillSourceDescriptor;

package/dist/src/agent/skills/skill-sources.js

@@ -129,15 +129,5 @@ function resolveAgentsSkillsDir(env = process.env) {
 function resolveWorkspaceAgentsSkillsDir(workspaceDir) {
 	return join(workspaceDir, ".agents", "skills");
 }
-function resolveWorkspaceSkillSource(workspaceDir) {
-	return descriptor({
-		id: "xopc-workspace",
-		rootDir: resolveWorkspaceSkillsDir(workspaceDir),
-		priority: PRIORITY.xopcWorkspace,
-		scope: "workspace",
-		managed: true,
-		writable: true
-	});
-}
 //#endregion
-export { resolveAgentsSkillsDir, resolveSkillSources, resolveWorkspaceAgentsSkillsDir, resolveWorkspaceSkillSource };
+export { resolveAgentsSkillsDir, resolveSkillSources, resolveWorkspaceAgentsSkillsDir };

package/dist/src/cli/commands/doctor/checks/database-schema.js

@@ -52,7 +52,7 @@ async function checkDatabaseSchema(ctx) {
 		id: "database-schema",
 		label: "Database schema",
 		status: "pass",
-		message: `SQLite schema v${status.dbVersion} (current release v134).`,
+		message: `SQLite schema v${status.dbVersion} (current release v135).`,
 		hints: []
 	};
 }

package/dist/src/cli/commands/gateway/lifecycle.js

@@ -1,8 +1,8 @@
 import { init_paths, resolveConfigPath } from "../../../config/paths.js";
 import { loadConfig } from "../../../config/loader.js";
 import "../../../config/index.js";
-import { resolveGatewayService } from "../../../daemon/service.js";
 import { isRestartEnabled } from "../../../config/commands.flags.js";
+import { resolveGatewayService } from "../../../daemon/service.js";
 import { authorizeGatewaySigusr1Restart, writeGatewayRestartIntentSync } from "../../../infra/restart.js";
 import { findVerifiedGatewayListenerPidsOnPortSync, formatGatewayPidList, signalVerifiedGatewayPidSync } from "../../../infra/gateway-processes.js";
 import { runServiceRestart, runServiceStop } from "./lifecycle-core.js";

package/dist/src/connectors/connected-source-understanding.js

@@ -1,9 +1,9 @@
 import { finishContextExtractionRun } from "../storage/sqlite/context-extraction-repository.js";
 import { listKnowledgeSourceItems } from "../storage/sqlite/knowledge-repository.js";
 import "../storage/sqlite/index.js";
+import { focusLifecycle } from "../user-context/focus-lifecycle.js";
 import { upsertUserFocus } from "../user-context/sources/repository.js";
 import { claimRegisteredExtraction } from "../user-context/extraction/registry.js";
-import { focusLifecycle } from "../user-context/focus-lifecycle.js";
 import { allowsRemoteSourceProcessing } from "../user-context/sources/processing-policy.js";
 import { analyzeUnderstandingSources } from "../work-discovery/analyzer.js";
 import { createHash } from "node:crypto";

package/dist/src/gateway/heartbeat/service.js

@@ -1,9 +1,9 @@
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
 import { shouldSilence, stripHeartbeatToken } from "../../heartbeat/tokens.js";
-import { appendCronEventLines } from "../../heartbeat/event-prompt.js";
 import { isWithinActiveHours } from "../../heartbeat/active-hours.js";
 import { isHeartbeatContentEmpty } from "../../heartbeat/content-check.js";
+import { appendCronEventLines } from "../../heartbeat/event-prompt.js";
 import { createHeartbeatWake } from "../../heartbeat/wake.js";
 import { resolveHeartbeatMdPath } from "../workspace-heartbeat-path.js";
 import { readFile } from "fs/promises";

package/dist/src/gateway/hono/routes/connectors.js

@@ -15,18 +15,17 @@ import { listUnderstandingSourceGrants, revokeUnderstandingSourceGrant } from ".
 import { recordConnectorHealthUsage } from "../../../connectors/usage.js";
 import { getConnectorInstance, getInstalledConnectorDefinition, listConnectorInstances } from "../../../connectors/instances.js";
 import { installConnector, installConnectorDefinition, uninstallConnector, updateConnectorConfig } from "../../../connectors/install.js";
+import { ConfigPersistenceError, persistConfigMutation } from "../../../config/config-mutation.js";
 import { getMcpOAuthManager } from "../../../agent/mcp/oauth/mcp-oauth-manager.js";
 import { startConnectorAuthorization } from "../../../connectors/auth-provider-registry.js";
 import { composioLogoResponse } from "../../../connectors/composio-logo.js";
 import { inspectManagedComposioStatus } from "../../../connectors/composio-managed-client.js";
 import { appendComposioTriggerEvent, listComposioTriggerEvents } from "../../../connectors/composio-triggers.js";
-import { buildConnectedPeopleGraph } from "../../../knowledge/people-graph.js";
-import "../../../knowledge/index.js";
 import { ingestLocalFolderSource } from "../../../connectors/connected-source-ingestion.js";
 import { previewConnectorDefinition, testConnectorInstance } from "../../../connectors/health.js";
 import { setConnectorEnabled } from "../../../connectors/lifecycle.js";
 import { projectComposioConnectionStatus } from "../../../connectors/runtime-status.js";
-import { ConfigPersistenceError, persistConfigMutation } from "../../../config/config-mutation.js";
+import { applySourceRevocationChoices, sourceRevocationImpact } from "./understanding-sources.js";
 //#region src/gateway/hono/routes/connectors.ts
 init_agent_scope();
 function errorMessage(error) {
@@ -196,7 +195,14 @@ function registerConnectorRoutes(authenticated, deps) {
 		if (connectionId && !policy.scanEnabled) {
 			service.setConnectorLearningPaused(connectionId, true);
 			const grant = listUnderstandingSourceGrants().find((item) => item.sourceKey === `connector-account:${account.id}`);
-			if (grant) revokeUnderstandingSourceGrant(grant.id);
+			if (grant) {
+				const impact = sourceRevocationImpact(grant.id);
+				revokeUnderstandingSourceGrant(grant.id);
+				if (impact) applySourceRevocationChoices(impact, {
+					derived: "retain",
+					raw: "retain"
+				});
+			}
 		} else if (connectionId && previous?.scanEnabled === false) {
 			if (service.setConnectorLearningPaused(connectionId, false) === 0) service.requestConnectorLearning(connectionId, {
 				mode: "incremental",
@@ -288,7 +294,14 @@ function registerConnectorRoutes(authenticated, deps) {
 			await revokeComposioConnection(connectionId);
 			if (connection?.accountId) {
 				const grant = listUnderstandingSourceGrants().find((item) => item.sourceKey === `connector-account:${connection.accountId}`);
-				if (grant) revokeUnderstandingSourceGrant(grant.id);
+				if (grant) {
+					const impact = sourceRevocationImpact(grant.id);
+					revokeUnderstandingSourceGrant(grant.id);
+					if (impact) applySourceRevocationChoices(impact, {
+						derived: "retain",
+						raw: "retain"
+					});
+				}
 			}
 			return c.json({
 				ok: true,
@@ -450,17 +463,6 @@ function registerConnectorRoutes(authenticated, deps) {
 			}, 400);
 		}
 	});
-	authenticated.get("/api/connectors/people", (c) => {
-		const query = c.req.query("q") ?? "";
-		const limit = Number(c.req.query("limit") ?? "100");
-		return c.json({
-			ok: true,
-			payload: buildConnectedPeopleGraph({
-				query,
-				limit
-			})
-		});
-	});
 	authenticated.get("/api/connectors/:id", (c) => {
 		const connectorId = c.req.param("id");
 		const connector = getConnectorDefinition(connectorId);

package/dist/src/gateway/hono/routes/project-skills.js

@@ -5,6 +5,8 @@ function projectSkills(deps) {
 	return new ProjectSkillService({
 		projects: deps.service.projects,
 		getConfig: () => deps.service.currentConfig,
+		getWorkspaceTrust: (workspaceRoot) => deps.service.agentService.getWorkspaceTrust(workspaceRoot),
+		setWorkspaceTrust: (workspaceRoot, trusted) => deps.service.agentService.setWorkspaceTrust(workspaceRoot, trusted),
 		refreshSkills: () => deps.service.agentService.refreshSkillsAfterDiskChange()
 	});
 }
@@ -31,11 +33,37 @@ function registerProjectSkillRoutes(authenticated, deps) {
 			return errorResponse(c, error);
 		}
 	});
-	authenticated.get("/api/projects/:projectId/skills/:skillId", (c) => {
+	authenticated.get("/api/projects/:projectId/workspace-trust", (c) => {
 		try {
 			return c.json({
 				ok: true,
-				skill: projectSkills(deps).getContent(c.req.param("projectId"), c.req.param("skillId"))
+				trust: projectSkills(deps).getWorkspaceTrust(c.req.param("projectId"))
+			});
+		} catch (error) {
+			return errorResponse(c, error);
+		}
+	});
+	authenticated.patch("/api/projects/:projectId/workspace-trust", async (c) => {
+		try {
+			const body = await c.req.json();
+			if (typeof body.trusted !== "boolean") return c.json({
+				ok: false,
+				error: "Expected { trusted: boolean }"
+			}, 400);
+			const trust = projectSkills(deps).setWorkspaceTrust(c.req.param("projectId"), body.trusted);
+			return c.json({
+				ok: true,
+				trust
+			});
+		} catch (error) {
+			return errorResponse(c, error);
+		}
+	});
+	authenticated.get("/api/projects/:projectId/skills/:skillKey", (c) => {
+		try {
+			return c.json({
+				ok: true,
+				skill: projectSkills(deps).getContent(c.req.param("projectId"), c.req.param("skillKey"))
 			});
 		} catch (error) {
 			return errorResponse(c, error);

package/dist/src/gateway/hono/routes/voice.js

@@ -14,8 +14,8 @@ import "../../../voice/stt/index.js";
 import { listSttProvidersForApi } from "../../../voice/stt/list-providers.js";
 import "../../../voice/tts/index.js";
 import { createGatewayRouteLogger } from "../lib/route-logger.js";
-import { listTtsProvidersForApi } from "../../../voice/tts/list-providers.js";
 import { listLocalVoiceModelStatuses, removeLocalVoiceModel, startLocalVoiceModelInstall } from "../../../voice/local/model-manager.js";
+import { listTtsProvidersForApi } from "../../../voice/tts/list-providers.js";
 //#region src/gateway/hono/routes/voice.ts
 init_providers();
 const log = createGatewayRouteLogger("Voice");

package/dist/src/gateway/hono/routes/you.js

@@ -7,6 +7,8 @@ import { listUserFocuses, updateUserFocus } from "../../../user-context/sources/
 import { canonicalUnderstandingKey, findDuplicateUnderstanding } from "../../../user-context/understanding.js";
 import { listContextObjects } from "../../../user-context/context-objects.js";
 import { repairExtractedContext } from "../../../user-context/extraction/repair.js";
+import { getUserRelationship, listUserRelationships, mergeUserRelationships, patchUserRelationship } from "../../../user-context/relationships/service.js";
+import { USER_PERSON_KINDS } from "../../../user-context/relationships/types.js";
 import { userInfo } from "node:os";
 //#region src/gateway/hono/routes/you.ts
 const UNDERSTANDING_KIND_SET = new Set(UNDERSTANDING_KINDS);
@@ -42,6 +44,7 @@ const CONTEXT_OBJECT_VIEWS = new Set([
 	"review",
 	"history"
 ]);
+const USER_PERSON_KIND_SET = new Set(USER_PERSON_KINDS);
 function asRecord(value) {
 	return value && typeof value === "object" && !Array.isArray(value) ? value : void 0;
 }
@@ -99,6 +102,55 @@ function registerYouRoutes(authenticated, deps) {
 		rules: listCollaborationRules(),
 		consolidation: { lastRun: listContextConsolidationRuns(1)[0] ?? null }
 	}));
+	authenticated.get("/api/you/relationships", (c) => {
+		const kind = c.req.query("kind");
+		if (kind && !USER_PERSON_KIND_SET.has(kind)) return c.json({ error: "Invalid relationship kind" }, 400);
+		const requestedLimit = Number(c.req.query("limit") ?? "30");
+		if (!Number.isInteger(requestedLimit) || requestedLimit < 1 || requestedLimit > 100) return c.json({ error: "limit must be an integer from 1 to 100" }, 400);
+		const cursor = c.req.query("cursor");
+		if (cursor && !/^\d+$/.test(cursor)) return c.json({ error: "Invalid cursor" }, 400);
+		return c.json(listUserRelationships({
+			query: c.req.query("q") ?? "",
+			...kind ? { kind } : {},
+			...c.req.query("source") ? { sourceInstanceId: c.req.query("source") } : {},
+			includeHidden: c.req.query("includeHidden") === "true",
+			hiddenOnly: c.req.query("hidden") === "true",
+			...cursor ? { cursor } : {},
+			limit: requestedLimit
+		}));
+	});
+	authenticated.get("/api/you/relationships/:id", (c) => {
+		const person = getUserRelationship(c.req.param("id"));
+		return person ? c.json({ person }) : c.json({ error: "Relationship not found" }, 404);
+	});
+	authenticated.patch("/api/you/relationships/:id", write, async (c) => {
+		const body = await readBody(c);
+		if (!body) return c.json({ error: "Invalid JSON" }, 400);
+		const patch = {};
+		if (body.displayName !== void 0) {
+			if (body.displayName !== null && (typeof body.displayName !== "string" || body.displayName.trim().length > 160)) return c.json({ error: "displayName must be null or a string of at most 160 characters" }, 400);
+			patch.displayName = typeof body.displayName === "string" && body.displayName.trim() ? body.displayName.trim() : null;
+		}
+		if (body.kind !== void 0) {
+			if (body.kind !== null && !USER_PERSON_KIND_SET.has(body.kind)) return c.json({ error: "Invalid relationship kind" }, 400);
+			patch.kind = body.kind;
+		}
+		if (body.hidden !== void 0) {
+			if (typeof body.hidden !== "boolean") return c.json({ error: "hidden must be a boolean" }, 400);
+			patch.hidden = body.hidden;
+		}
+		if (!Object.keys(patch).length) return c.json({ error: "No relationship fields provided" }, 400);
+		const person = patchUserRelationship(c.req.param("id"), patch);
+		return person ? c.json({ person }) : c.json({ error: "Relationship not found" }, 404);
+	});
+	authenticated.post("/api/you/relationships/merge", write, async (c) => {
+		const body = await readBody(c);
+		const sourcePersonId = nonEmptyString(body?.sourcePersonId, 200);
+		const targetPersonId = nonEmptyString(body?.targetPersonId, 200);
+		if (!sourcePersonId || !targetPersonId || sourcePersonId === targetPersonId) return c.json({ error: "Distinct sourcePersonId and targetPersonId are required" }, 400);
+		const person = mergeUserRelationships(sourcePersonId, targetPersonId);
+		return person ? c.json({ person }) : c.json({ error: "Relationship not found" }, 404);
+	});
 	authenticated.get("/api/you/context-objects", (c) => {
 		const view = c.req.query("view") ?? "current";
 		if (!CONTEXT_OBJECT_VIEWS.has(view)) return c.json({ error: "Invalid context object view" }, 400);

package/dist/src/heartbeat/index.js

@@ -1,6 +1,6 @@
 import { DEFAULT_ACK_MAX_CHARS, HEARTBEAT_OK, NO_REPLY, shouldSilence, stripHeartbeatToken } from "./tokens.js";
-import { appendCronEventLines } from "./event-prompt.js";
 import { isWithinActiveHours } from "./active-hours.js";
 import { isHeartbeatContentEmpty } from "./content-check.js";
+import { appendCronEventLines } from "./event-prompt.js";
 import { createHeartbeatWake } from "./wake.js";
 export { DEFAULT_ACK_MAX_CHARS, HEARTBEAT_OK, NO_REPLY, appendCronEventLines, createHeartbeatWake, isHeartbeatContentEmpty, isWithinActiveHours, shouldSilence, stripHeartbeatToken };

package/dist/src/infra/update-restart.js

@@ -2,8 +2,8 @@ import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
 import { init_paths, resolveConfigPath } from "../config/paths.js";
 import { init_loader, loadConfig } from "../config/loader.js";
-import { resolveGatewayService } from "../daemon/service.js";
 import { isRestartEnabled } from "../config/commands.flags.js";
+import { resolveGatewayService } from "../daemon/service.js";
 import { authorizeGatewaySigusr1Restart, writeGatewayRestartIntentSync } from "./restart.js";
 import { findVerifiedGatewayListenerPidsOnPortSync, signalVerifiedGatewayPidSync } from "./gateway-processes.js";
 import { refreshGatewayServiceAfterUpdate } from "./update-service-refresh.js";

package/dist/src/knowledge/connected-understanding-pipeline.js

@@ -1,6 +1,7 @@
 import { listKnowledgeSourceItems } from "../storage/sqlite/knowledge-repository.js";
 import "../storage/sqlite/index.js";
 import { clusterUnderstandingSignals } from "../user-context/sources/signal-clustering.js";
+import { personIdForIdentity, personIdentityKey, rebuildUserPeopleIndex } from "../user-context/relationships/indexer.js";
 //#region src/knowledge/connected-understanding-pipeline.ts
 function logicalEventKey(item) {
 	const value = item.metadata.logicalEventKey;
@@ -96,9 +97,12 @@ function relationshipObservations(items) {
 			const strongIdentity = (signal.email ?? signal.username)?.toLowerCase();
 			if (strongIdentity && owners.has(strongIdentity)) continue;
 			const label = signal.name ?? signal.email ?? signal.username;
-			const identityKey = signal.email?.toLowerCase() ?? `${String(item.metadata.toolkit ?? item.sourceInstanceId)}:${signal.username?.toLowerCase() ?? signal.name?.toLowerCase()}`;
+			const identityKey = personIdentityKey(signal, item.sourceInstanceId);
+			const personId = personIdForIdentity(signal, item.sourceInstanceId);
+			if (!identityKey || !personId) continue;
 			const entry = grouped.get(identityKey) ?? {
 				label,
+				personId,
 				events: /* @__PURE__ */ new Map()
 			};
 			const eventKey = logicalEventKey(item);
@@ -108,8 +112,11 @@ function relationshipObservations(items) {
 	}
 	return [...grouped.values()].sort((left, right) => right.events.size - left.events.size).slice(0, 8).map((entry) => ({
 		class: "relationship",
-		key: `person:${entry.label.toLocaleLowerCase()}`,
-		value: { label: entry.label },
+		key: `person:${entry.personId}`,
+		value: {
+			label: entry.label,
+			personId: entry.personId
+		},
 		items: [...entry.events.values()],
 		windowDays: 90
 	}));
@@ -182,6 +189,7 @@ function renderConnectedObservation(observation) {
 		kind: "relationship",
 		content: `Frequently collaborates with ${label}.`,
 		canonicalKey: `connected:${observation.key}`,
+		payload: typeof observation.value.personId === "string" ? { personId: observation.value.personId } : void 0,
 		confidence,
 		importance: .65,
 		explicitness: "inferred",
@@ -227,6 +235,7 @@ var ConnectedUnderstandingPipeline = class {
 		this.memoryManager = memoryManager;
 	}
 	async process(agentId, extractionRunId) {
+		rebuildUserPeopleIndex();
 		const observations = deriveConnectedClaimObservations(listKnowledgeSourceItems({
 			agentId,
 			includeDeleted: false,

package/dist/src/knowledge/index.d.ts

@@ -4,4 +4,3 @@ export * from './connected-knowledge-pipeline.js';
 export * from './connected-understanding-pipeline.js';
 export * from './coordinator.js';
 export * from './local-folder-adapter.js';
-export * from './people-graph.js';

package/dist/src/knowledge/index.js

@@ -3,5 +3,4 @@ import { ConnectedKnowledgePipeline } from "./connected-knowledge-pipeline.js";
 import { ConnectedUnderstandingPipeline, deriveConnectedClaimObservations, renderConnectedObservation } from "./connected-understanding-pipeline.js";
 import { startConnectedKnowledgeCoordinator } from "./coordinator.js";
 import { LocalFolderKnowledgeSourceAdapter } from "./local-folder-adapter.js";
-import { buildConnectedPeopleGraph } from "./people-graph.js";
-export { ConnectedKnowledgePipeline, ConnectedUnderstandingPipeline, KnowledgeIngestionService, LocalFolderKnowledgeSourceAdapter, SqliteKnowledgeSourceStateStore, buildConnectedPeopleGraph, deriveConnectedClaimObservations, renderConnectedObservation, startConnectedKnowledgeCoordinator };
+export { ConnectedKnowledgePipeline, ConnectedUnderstandingPipeline, KnowledgeIngestionService, LocalFolderKnowledgeSourceAdapter, SqliteKnowledgeSourceStateStore, deriveConnectedClaimObservations, renderConnectedObservation, startConnectedKnowledgeCoordinator };

package/dist/src/projects/project-skill-service.d.ts

@@ -1,5 +1,6 @@
 import type { Config } from '../config/schema.js';
-import type { SkillDiagnostic, SkillMetadata, SkillToolConditions } from '../agent/skills/types.js';
+import { type WorkspaceSkillSourceStatus } from '../agent/skills/index.js';
+import type { Skill, SkillDiagnostic, SkillMetadata, SkillToolConditions } from '../agent/skills/types.js';
 import type { ProjectService } from './project-service.js';
 export type ProjectSkillErrorCode = 'project_not_found' | 'project_workspace_required' | 'project_workspace_missing' | 'project_workspace_not_writable' | 'skill_not_found' | 'invalid_skill_id';
 export declare class ProjectSkillError extends Error {
@@ -8,33 +9,53 @@ export declare class ProjectSkillError extends Error {
     constructor(code: ProjectSkillErrorCode, status: 400 | 403 | 404 | 409, message: string);
 }
 export interface ProjectSkillSummary {
-    id: string;
+    key: string;
+    directoryId: string;
     name: string;
     description: string;
     category?: string;
+    origin: Skill['origin']['id'];
+    path: string;
+    managed: boolean;
+    writable: boolean;
+    removable: boolean;
+    effective: boolean;
+    shadowedBy?: Skill['origin']['id'];
     disableModelInvocation: boolean;
     metadata: SkillMetadata;
     toolConditions?: SkillToolConditions;
     requiredEnvVarNames?: string[];
 }
+export interface ProjectWorkspaceTrustState {
+    workspacePath: string;
+    required: boolean;
+    decision: boolean | null;
+    trusted: boolean;
+}
 export interface ProjectSkillListResult {
     workspaceRoot: string;
-    skillsRoot: string;
+    sources: WorkspaceSkillSourceStatus[];
+    trust: ProjectWorkspaceTrustState;
     items: ProjectSkillSummary[];
+    inheritedItems: ProjectSkillSummary[];
     diagnostics: SkillDiagnostic[];
 }
 interface ProjectSkillServiceOptions {
     projects: ProjectService;
     getConfig: () => Config;
+    getWorkspaceTrust: (workspaceRoot: string) => ProjectWorkspaceTrustState;
+    setWorkspaceTrust: (workspaceRoot: string, trusted: boolean) => ProjectWorkspaceTrustState;
     refreshSkills: () => void | Promise<void>;
 }
 export declare class ProjectSkillService {
     private readonly options;
     constructor(options: ProjectSkillServiceOptions);
     list(projectId: string): ProjectSkillListResult;
-    getContent(projectId: string, skillId: string): ProjectSkillSummary & {
+    getContent(projectId: string, skillKey: string): ProjectSkillSummary & {
         bodyMarkdown: string;
     };
+    getWorkspaceTrust(projectId: string): ProjectWorkspaceTrustState;
+    setWorkspaceTrust(projectId: string, trusted: boolean): ProjectWorkspaceTrustState;
     installZip(projectId: string, buffer: Buffer, input?: {
         skillId?: string;
         overwrite?: boolean;
@@ -59,9 +80,10 @@ export declare class ProjectSkillService {
         bodyMarkdown: string;
     }>;
     remove(projectId: string, skillId: string): Promise<void>;
-    private findSkill;
     private resolveLocation;
-    private isDirectSkill;
+    private loadCatalog;
+    private skillKey;
+    private encodeSkillKey;
     private toSummary;
 }
 export {};