@xopcai/xopc 0.0.249 → 0.0.250

package/dist/src/agent/context/execution-context.types.d.ts

@@ -0,0 +1,50 @@
+import type { KnowledgeItem, KnowledgeSource, KnowledgeVisibilityContext } from '../../knowledge-memory/index.js';
+import type { UserAssertion } from '../../user-model/domain.js';
+export type RuleEnforcementLevel = 'prompt' | 'planner' | 'tool_gate';
+export interface ExecutionRule {
+    id: string;
+    statement: string;
+    priority: number;
+    enforcementLevel: RuleEnforcementLevel;
+    conditions: Record<string, unknown>;
+}
+export interface RankedExecutionAssertion {
+    assertion: UserAssertion;
+    score: number;
+    reasons: string[];
+}
+export interface ExecutionGoal {
+    id: string;
+    title: string;
+    desiredOutcome: string;
+    status: string;
+    declaredImportance?: number;
+    targetAt?: number;
+}
+export interface ExecutionPriority {
+    id: string;
+    targetType: string;
+    targetId: string;
+    rank: 'primary' | 'secondary' | 'background';
+    urgency: number;
+    validTo: number;
+}
+export interface ExecutionContext {
+    traceId: string;
+    asOf: number;
+    query: string;
+    rules: ExecutionRule[];
+    assertions: RankedExecutionAssertion[];
+    goals: ExecutionGoal[];
+    priorities: ExecutionPriority[];
+    knowledge: KnowledgeItem[];
+}
+export interface ExecutionContextRequest extends KnowledgeVisibilityContext {
+    query: string;
+    asOf?: number;
+    maxAssertions?: number;
+    maxKnowledge?: number;
+    includeUserModel?: boolean;
+    includeKnowledge?: boolean;
+    knowledgeSources?: readonly KnowledgeSource[];
+}

package/dist/src/agent/context/execution-context.types.js

@@ -0,0 +1 @@
+export {};

package/dist/src/agent/context/execution-scope.d.ts

@@ -1,3 +1,4 @@
+import type { KnowledgeSource } from '../../knowledge-memory/index.js';
 export type ExecutionObjective = {
     kind: 'task';
     id: string;
@@ -23,4 +24,7 @@ export interface ExecutionScope {
 }
 export declare function resolveExecutionScope(sessionKey: string): ExecutionScope;
 export declare function formatCurrentWorkForPrompt(scope: ExecutionScope): string | undefined;
-export declare function buildExecutionScopeContextForPrompt(sessionKey: string): string | undefined;
+export declare function buildExecutionScopeContextForPrompt(sessionKey: string, options?: {
+    includeKnowledge?: boolean;
+    knowledgeSources?: readonly KnowledgeSource[];
+}): string | undefined;

package/dist/src/agent/context/execution-scope.js

@@ -77,9 +77,13 @@ function formatCurrentWorkForPrompt(scope) {
 	lines.push("", "Keep work inside this objective and its project scope. Treat the acceptance criteria and completion evidence as the definition of done.");
 	return lines.join("\n");
 }
-function buildExecutionScopeContextForPrompt(sessionKey) {
+function buildExecutionScopeContextForPrompt(sessionKey, options = {}) {
 	const scope = resolveExecutionScope(sessionKey);
-	return [buildActiveProjectContextForPrompt(sessionKey, { knowledgeQuery: scope.objective?.objective }), formatCurrentWorkForPrompt(scope)].filter((section) => Boolean(section?.trim())).join("\n\n") || void 0;
+	return [buildActiveProjectContextForPrompt(sessionKey, {
+		knowledgeQuery: scope.objective?.objective,
+		includeKnowledge: options.includeKnowledge,
+		knowledgeSources: options.knowledgeSources
+	}), formatCurrentWorkForPrompt(scope)].filter((section) => Boolean(section?.trim())).join("\n\n") || void 0;
 }
 //#endregion
 export { buildExecutionScopeContextForPrompt, formatCurrentWorkForPrompt, resolveExecutionScope };

package/dist/src/agent/context/project-context.d.ts

@@ -1,4 +1,5 @@
 import type { Project } from '../../projects/types.js';
+import { type KnowledgeSource } from '../../knowledge-memory/index.js';
 export interface ProjectTaskContext {
     title: string;
     state: string;
@@ -6,6 +7,8 @@ export interface ProjectTaskContext {
 }
 export declare function buildActiveProjectContextForPrompt(sessionKey: string, options?: {
     knowledgeQuery?: string;
+    includeKnowledge?: boolean;
+    knowledgeSources?: readonly KnowledgeSource[];
 }): string | undefined;
 export declare function formatActiveProjectContextForPrompt(input: {
     project: Project;

package/dist/src/agent/context/project-context.js

@@ -4,7 +4,7 @@ import { TaskReadModelProjector } from "../../tasks/task-read-model-projector.js
 import { LocalAppStore } from "../../local-apps/store.js";
 import { ProjectStore } from "../../projects/project-store.js";
 import { getProjectForSession, getProjectWorkspacePathForSession } from "../../projects/workspace.js";
-import { listKnowledgeItems, searchKnowledgeItems } from "../../knowledge-memory/repository.js";
+import { knowledgeSourceAllowed, listKnowledgeItems, searchKnowledgeItems } from "../../knowledge-memory/repository.js";
 import "../../knowledge-memory/index.js";
 //#region src/agent/context/project-context.ts
 const MAX_TEXT = 1200;
@@ -49,7 +49,7 @@ function buildActiveProjectContextForPrompt(sessionKey, options = {}) {
 			state: `${task.phase}/${new TaskReadModelProjector().project(task).operationalState}`
 		})),
 		recentSessions: new ProjectStore().getRecentSessions(project.id, MAX_SESSIONS),
-		knowledgeItems: selectProjectKnowledge({
+		knowledgeItems: options.includeKnowledge === false ? [] : selectProjectKnowledge({
 			relevant: options.knowledgeQuery?.trim() ? searchKnowledgeItems({
 				query: options.knowledgeQuery,
 				context: {
@@ -58,12 +58,14 @@ function buildActiveProjectContextForPrompt(sessionKey, options = {}) {
 					projectId: project.id,
 					sessionId: sessionKey
 				},
+				trustedOnly: true,
+				sources: options.knowledgeSources,
 				limit: MAX_RELEVANT_KNOWLEDGE
 			}) : [],
 			recent: listKnowledgeItems({
 				statuses: ["active"],
 				limit: 500
-			}).filter((item) => item.scope.type === "project" && item.scope.id === project.id).slice(0, MAX_RECENT_KNOWLEDGE)
+			}).filter((item) => item.scope.type === "project" && item.scope.id === project.id).filter((item) => item.originClass !== "untrusted").filter((item) => !options.knowledgeSources || knowledgeSourceAllowed(item, options.knowledgeSources)).slice(0, MAX_RECENT_KNOWLEDGE)
 		}),
 		localApp: localApp ? {
 			extensionId: localApp.extensionId,

package/dist/src/agent/external-tools/index.d.ts

@@ -16,6 +16,7 @@ export interface DefaultExternalToolGatewayDeps {
     hookRunner?: ExtensionHookRunner;
     toolExecutorConfig?: Partial<ToolExecutorConfig>;
     getMemoryManager?: () => MemoryManager;
+    canAccessMemory: () => boolean;
 }
 export declare function createDefaultExternalToolGatewayTools(deps: DefaultExternalToolGatewayDeps): import("@earendil-works/pi-agent-core").AgentTool<import("typebox").TSchema, any>[];
 export { ExternalToolService } from './service.js';

package/dist/src/agent/external-tools/index.js

@@ -32,6 +32,7 @@ function createDefaultExternalToolGatewayTools(deps) {
 			getMemoryManager: deps.getMemoryManager,
 			disabledTools: deps.disabledTools,
 			getSessionKey: () => deps.getCurrentContext()?.sessionKey,
+			canAccess: deps.canAccessMemory,
 			hookRunner: deps.hookRunner,
 			toolExecutorConfig: deps.toolExecutorConfig
 		})

package/dist/src/agent/external-tools/memory-provider.d.ts

@@ -6,6 +6,7 @@ export interface MemoryToolProviderDeps {
     getMemoryManager?: () => MemoryManager;
     disabledTools?: Set<string>;
     getSessionKey: () => string | undefined;
+    canAccess: () => boolean;
     hookRunner?: ExtensionHookRunner;
     toolExecutorConfig?: Partial<ToolExecutorConfig>;
 }

package/dist/src/agent/external-tools/memory-provider.js

@@ -44,6 +44,7 @@ var MemoryToolProvider = class {
 		return executeToolWithProtection(resolved.tool, context.toolCallId, executionArgs, context.signal, context.onUpdate, this.deps.toolExecutorConfig);
 	}
 	entries() {
+		if (!this.deps.canAccess()) return [];
 		return (this.deps.getMemoryManager?.().getExternalToolEntries() ?? []).filter(({ tool }) => !this.deps.disabledTools?.has(tool.name));
 	}
 	resolve(toolRef) {

package/dist/src/agent/inbound/attachment-pipeline.js

@@ -1,3 +1,4 @@
+import { stripRuntimeUserMessageEnvelope } from "../../../packages/gateway-contract/src/user-message-display.js";
 import { extractProfileAgentId } from "../../config/agent-profile.js";
 import { readAgentMessageContent } from "../memory/agent-message-access.js";
 import { readMediaReferenceBase64 } from "../../media/media-reference.js";
@@ -134,7 +135,10 @@ function pendingMatchesMessage(pending, message) {
 	const actualText = messageTextForPendingCompare(message);
 	if (!pendingText) return true;
 	if (!actualText) return false;
-	return actualText.includes(pendingText) || pendingText.includes(actualText);
+	if (actualText.includes(pendingText) || pendingText.includes(actualText)) return true;
+	const pendingUserText = stripRuntimeUserMessageEnvelope(pendingText).trim();
+	const actualUserText = stripRuntimeUserMessageEnvelope(actualText).trim();
+	return Boolean(pendingUserText) && (actualUserText === pendingUserText || actualUserText.includes(pendingUserText) || pendingUserText.includes(actualUserText));
 }
 function setPendingTranscriptUserMessage(sessionKey, message) {
 	assertTranscriptUserMessage(message);

package/dist/src/agent/memory/compaction-promotion.d.ts

@@ -9,6 +9,7 @@ export interface PromoteCompactionLedgerInput {
     handover: CompactionHandover;
     audit: CompactionAudit;
     sourceEntries: readonly TranscriptSourceEntry[];
+    writePolicy: 'deny' | 'confirm' | 'allow';
 }
 export interface PromoteCompactionLedgerResult {
     episodicRecordIds: string[];

package/dist/src/agent/memory/compaction-promotion.js

@@ -84,6 +84,11 @@ function importanceFor(item) {
 	return .5;
 }
 function promoteCompactionLedger(input) {
+	if (input.writePolicy === "deny") return {
+		episodicRecordIds: [],
+		durableRecordIds: [],
+		rejectedRecordIds: []
+	};
 	const sourceById = new Map(input.sourceEntries.map((entry) => [entry.entryId, entry]));
 	const entriesByTurn = /* @__PURE__ */ new Map();
 	const entriesByRound = /* @__PURE__ */ new Map();
@@ -124,7 +129,7 @@ function promoteCompactionLedger(input) {
 			content: item.text,
 			canonicalKey: `compaction:${input.sessionId}:${item.id}`,
 			confidence: input.audit.status === "passed" ? .82 : .65,
-			status: active ? "candidate" : "archived",
+			status: active ? input.writePolicy === "allow" && originClass !== "untrusted" ? "active" : "candidate" : "archived",
 			importance: importanceFor(item),
 			originClass,
 			sourceAgentId: input.sourceAgentId,
@@ -158,7 +163,7 @@ function promoteCompactionLedger(input) {
 			content: item.text,
 			canonicalKey: `durable:${item.kind}:${stableId("fact", item.text)}`,
 			confidence: .82,
-			status: "active",
+			status: input.writePolicy === "allow" ? "active" : "candidate",
 			importance: importanceFor(item),
 			originClass: "agent",
 			sourceSessionId: input.sessionKey,

package/dist/src/agent/memory/index.d.ts

@@ -1,6 +1,6 @@
 export { buildUserContextBlock, sanitizeUserContextFenceEscapes, } from './context-fence.js';
 export { createMemoryManagerFromConfig } from './create-memory-manager.js';
-export { isMemorySubsystemEnabled, shouldPlanUserContextThisTurn, } from './memory-config.js';
+export { isMemorySubsystemEnabled } from './memory-config.js';
 export { MemoryManager } from './manager.js';
 export { discoverMemoryPlugins } from './plugin-discovery.js';
 export type { MemoryPluginMetadata } from './plugin-discovery.js';

package/dist/src/agent/memory/index.js

@@ -1,8 +1,8 @@
-import { isMemorySubsystemEnabled, shouldPlanUserContextThisTurn } from "./memory-config.js";
+import { isMemorySubsystemEnabled } from "./memory-config.js";
 import { extractAgentUserPlainText } from "./user-message-text.js";
+import { buildUserContextBlock, sanitizeUserContextFenceEscapes } from "./context-fence.js";
 import { MemoryManager } from "./manager.js";
 import { discoverMemoryPlugins } from "./plugin-discovery.js";
 import { createMemoryManagerFromConfig } from "./create-memory-manager.js";
-import { buildUserContextBlock, sanitizeUserContextFenceEscapes } from "./context-fence.js";
 import { StubMemoryProvider } from "./stub-memory-provider.js";
-export { MemoryManager, StubMemoryProvider, buildUserContextBlock, createMemoryManagerFromConfig, discoverMemoryPlugins, extractAgentUserPlainText, isMemorySubsystemEnabled, sanitizeUserContextFenceEscapes, shouldPlanUserContextThisTurn };
+export { MemoryManager, StubMemoryProvider, buildUserContextBlock, createMemoryManagerFromConfig, discoverMemoryPlugins, extractAgentUserPlainText, isMemorySubsystemEnabled, sanitizeUserContextFenceEscapes };

package/dist/src/agent/memory/memory-config.d.ts

@@ -1,8 +1,3 @@
 import type { Config } from '../../config/schema.js';
 /** Whether generic workspace and provider-backed memory is available. */
 export declare function isMemorySubsystemEnabled(config: Config | undefined): boolean;
-/**
- * Whether to prefix the user message with prefetched external memory this turn.
- * `first-turn` only injects on turn 1. `contextCadence` N injects on turns 1, N+1, 2N+1, …
- */
-export declare function shouldPlanUserContextThisTurn(_config: Config | undefined, turnNumber: number): boolean;

package/dist/src/agent/memory/memory-config.js

@@ -4,12 +4,5 @@ function isMemorySubsystemEnabled(config) {
 	if (!config) return true;
 	return config.userContext.enabled && config.userContext.knowledgeMemory.enabled;
 }
-/**
-* Whether to prefix the user message with prefetched external memory this turn.
-* `first-turn` only injects on turn 1. `contextCadence` N injects on turns 1, N+1, 2N+1, …
-*/
-function shouldPlanUserContextThisTurn(_config, turnNumber) {
-	return turnNumber >= 1;
-}
 //#endregion
-export { isMemorySubsystemEnabled, shouldPlanUserContextThisTurn };
+export { isMemorySubsystemEnabled };

package/dist/src/agent/orchestration/context-overflow.js

@@ -1,6 +1,7 @@
 //#region src/agent/orchestration/context-overflow.ts
 const CONTEXT_OVERFLOW_PATTERNS = [
 	/context(?:_|\s|-)*(?:length|window).*(?:exceed|limit|maximum|too (?:large|long))/i,
+	/\bexceed(?:s|ed)?\s+(?:the\s+)?context(?:_|\s|-)*(?:length|window)\b/i,
 	/maximum context length/i,
 	/max(?:imum)? tokens?.*(?:exceed|limit)/i,
 	/too many tokens/i,

package/dist/src/agent/service/direct-turn-helpers.d.ts

@@ -78,7 +78,7 @@ export interface RunDirectAgentTurnResult {
     lastAssistantText?: string;
 }
 /**
- * Convert a user message into an embedded turn, including the standard memory
- * prefetch + background-review nudge wiring used by every direct entry point.
+ * Convert a user message into an embedded turn, including structured context
+ * planning and background-review wiring used by every direct entry point.
  */
 export declare function runDirectAgentTurn(deps: RunDirectAgentTurnDeps, input: RunDirectAgentTurnInput): Promise<RunDirectAgentTurnResult>;

package/dist/src/agent/service/direct-turn-helpers.js

@@ -81,8 +81,8 @@ async function tryRunSlashCommand(deps, ctx, content, options) {
 	}
 }
 /**
-* Convert a user message into an embedded turn, including the standard memory
-* prefetch + background-review nudge wiring used by every direct entry point.
+* Convert a user message into an embedded turn, including structured context
+* planning and background-review wiring used by every direct entry point.
 */
 async function runDirectAgentTurn(deps, input) {
 	const turnId = input.runId ?? crypto.randomUUID();

package/dist/src/agent/service/process-direct-streaming.js

@@ -267,8 +267,7 @@ async function* runProcessDirectStreaming(deps, input) {
 			const skillTurn = deps.agentManager.prepareSkillTurn(sessionKey, mergedUserText);
 			const textForAgent = skillTurn.text;
 			const userMessage = await deps.buildTranscriptUserMessage(textForAgent, prepared, sessionKey);
-			const turnSourceContexts = input.sourceContexts ?? [];
-			const sourceContexts = [...turnSourceContexts];
+			const sourceContexts = [...input.sourceContexts ?? []];
 			if (deps.sourceContextResolver) {
 				const metadata = await deps.sessionStore.getMetadata(sessionKey).catch(() => null);
 				const sourceBinding = metadata?.customData && typeof metadata.customData === "object" ? metadata.customData.sourceBinding : void 0;
@@ -283,11 +282,11 @@ async function* runProcessDirectStreaming(deps, input) {
 					timestamp: userMessage.timestamp ?? Date.now(),
 					content: readAgentMessageContent(userMessage),
 					media: userMessage.media,
-					metadata: turnSourceContexts.length > 0 ? { sourceContexts: turnSourceContexts.map(summarizeSourceContext) } : void 0
+					metadata: sourceContexts.length > 0 ? { sourceContexts: sourceContexts.map(summarizeSourceContext) } : void 0
 				});
 				if (textForAgent.trim()) deps.enqueueProvisionalSessionTitle?.(sessionKey, textForAgent);
 			}
-			const pendingUserMessage = turnSourceContexts.length > 0 ? injectSourceContextsIntoUserMessage(userMessage, turnSourceContexts) : userMessage;
+			const pendingUserMessage = sourceContexts.length > 0 ? injectSourceContextsIntoUserMessage(userMessage, sourceContexts) : userMessage;
 			if (!isConnectionResume) setPendingTranscriptUserMessage(sessionKey, pendingUserMessage);
 			try {
 				const result = await deps.agentManager.withSkillCapabilities(sessionKey, skillTurn.activatedCapabilityNames, () => runDirectAgentTurn({

package/dist/src/agent/tools/factory.d.ts

@@ -92,6 +92,7 @@ export interface CreateCoreToolsOptions {
     getPrimaryModel?: () => Model<Api>;
     getMemoryManager?: () => MemoryManager;
     agentId?: string;
+    sessionKey?: string;
     /** When set, registers local skill tools plus marketplace discovery for this workspace. */
     getSkillManager?: () => SkillManager;
 }

package/dist/src/agent/tools/factory.js

@@ -2,6 +2,7 @@ import { init_paths_state, resolveStateDir } from "../../config/paths-state.js";
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
 import { isXopcDatabaseOpen } from "../../storage/sqlite/connection.js";
+import { getSessionMetadata } from "../../storage/sqlite/session-repository.js";
 import { getSessionTaskPlan, setSessionTaskPlan } from "../../storage/sqlite/session-task-plan-repository.js";
 import "../../storage/sqlite/index.js";
 import { init_agent_scope, resolveDefaultAgentId } from "../agent-scope.js";
@@ -55,6 +56,7 @@ import { createManagedJobTool } from "./managed-job-tool.js";
 import { createImageTool } from "./image-tool.js";
 import { createImageGenerateTool } from "./image-generate-tool.js";
 import "./index.js";
+import { resolveUserContextSessionAccess } from "../../user-context/access-policy.js";
 import { createBrowserUseTool } from "./browser/tool/browser-use-tool.js";
 import { createReviewWorkspaceTool } from "./review-workspace.js";
 import { createLanguageDiagnosticsTool } from "./language-diagnostics.js";
@@ -199,6 +201,13 @@ var AgentToolsFactory = class AgentToolsFactory {
 		});
 		const agentId = options?.agentId;
 		const resolvedAgentId = agentId ?? (cfg ? resolveDefaultAgentId(cfg) : "main");
+		const currentSessionKey = () => options?.sessionKey ?? this.deps.getCurrentContext?.()?.sessionKey;
+		const currentAccess = () => resolveUserContextSessionAccess(this.deps.getConfig?.(), currentSessionKey());
+		const knowledgeWritePolicy = () => this.deps.getConfig?.()?.userContext.knowledgeMemory.writePolicy ?? "deny";
+		const currentProjectId = () => {
+			const key = currentSessionKey();
+			return key ? getSessionMetadata(key)?.projectId : void 0;
+		};
 		const getCommandIsolation = () => {
 			const config = this.deps.getConfig?.();
 			return config ? resolveEffectiveAgentConfigForSession(config, this.deps.getCurrentContext()?.sessionKey ?? `agent:${agentId ?? "main"}:internal`).config.runtime.commandIsolation : void 0;
@@ -213,7 +222,8 @@ var AgentToolsFactory = class AgentToolsFactory {
 			disabledTools: disabled,
 			hookRunner: this.deps.hookRunner,
 			toolExecutorConfig: this.deps.toolExecutorConfig,
-			getMemoryManager: getMemMgr
+			getMemoryManager: getMemMgr,
+			canAccessMemory: () => currentAccess().knowledge
 		});
 		const optionalTools = [imageTool, imageGenerateTool].filter((t) => t != null);
 		const readTool = createReadFileTool(workspace, { profileMarkdownRoot: options?.profileMarkdownRoot });
@@ -314,27 +324,46 @@ var AgentToolsFactory = class AgentToolsFactory {
 			createUserContextSearchTool({
 				agentId: resolvedAgentId,
 				workspaceId: workspace,
-				getSessionId: () => this.deps.getCurrentContext?.()?.sessionKey
+				getSessionId: currentSessionKey,
+				getProjectId: currentProjectId,
+				canRead: () => currentAccess().userModel
 			}),
 			createUserContextGetTool({
 				agentId: resolvedAgentId,
 				workspaceId: workspace,
-				getSessionId: () => this.deps.getCurrentContext?.()?.sessionKey
+				getSessionId: currentSessionKey,
+				getProjectId: currentProjectId,
+				canRead: () => currentAccess().userModel
 			}),
 			createKnowledgeSearchTool({
 				agentId: resolvedAgentId,
 				workspaceId: workspace,
-				getSessionId: () => this.deps.getCurrentContext?.()?.sessionKey
+				getSessionId: currentSessionKey,
+				getProjectId: currentProjectId,
+				canRead: () => currentAccess().knowledge,
+				canWrite: () => currentAccess().knowledge,
+				getWritePolicy: knowledgeWritePolicy,
+				getSources: () => currentAccess().knowledgeSources
 			}),
 			createKnowledgeGetTool({
 				agentId: resolvedAgentId,
 				workspaceId: workspace,
-				getSessionId: () => this.deps.getCurrentContext?.()?.sessionKey
+				getSessionId: currentSessionKey,
+				getProjectId: currentProjectId,
+				canRead: () => currentAccess().knowledge,
+				canWrite: () => currentAccess().knowledge,
+				getWritePolicy: knowledgeWritePolicy,
+				getSources: () => currentAccess().knowledgeSources
 			}),
 			createKnowledgeWriteTool({
 				agentId: resolvedAgentId,
 				workspaceId: workspace,
-				getSessionId: () => this.deps.getCurrentContext?.()?.sessionKey
+				getSessionId: currentSessionKey,
+				getProjectId: currentProjectId,
+				canRead: () => currentAccess().knowledge,
+				canWrite: () => currentAccess().knowledge,
+				getWritePolicy: knowledgeWritePolicy,
+				getSources: () => currentAccess().knowledgeSources
 			}),
 			...this.deps.getSessionStore ? [createSessionRecallTool({
 				getSessionStore: this.deps.getSessionStore,
@@ -343,7 +372,8 @@ var AgentToolsFactory = class AgentToolsFactory {
 			...this.deps.getSessionStore && getPrimary ? [createSessionSearchTool({
 				getSessionStore: this.deps.getSessionStore,
 				getPrimaryModel: getPrimary,
-				getCurrentSessionKey: () => this.deps.getCurrentContext()?.sessionKey
+				getCurrentSessionKey: () => this.deps.getCurrentContext()?.sessionKey,
+				canAccess: () => currentAccess().crossSessionHistory
 			})] : [],
 			...this.deps.getAutomationService ? [createAutomationTool({ getAutomationService: this.deps.getAutomationService })] : [],
 			...browserEnabled && this.deps.getBrowserRecipeService ? [createBrowserRecipeTool({ getBrowserRecipeService: this.deps.getBrowserRecipeService })] : [],

package/dist/src/agent/tools/knowledge-memory-tool.d.ts

@@ -1,8 +1,14 @@
 import type { AgentTool } from '@earendil-works/pi-agent-core';
+import { type KnowledgeSource } from '../../knowledge-memory/index.js';
 export interface KnowledgeToolOptions {
     agentId: string;
     workspaceId: string;
     getSessionId: () => string | undefined;
+    getProjectId?: () => string | undefined;
+    canRead: () => boolean;
+    canWrite: () => boolean;
+    getWritePolicy: () => 'deny' | 'confirm' | 'allow';
+    getSources: () => readonly KnowledgeSource[];
 }
 export declare function createKnowledgeSearchTool(options: KnowledgeToolOptions): AgentTool;
 export declare function createKnowledgeGetTool(options: KnowledgeToolOptions): AgentTool;

package/dist/src/agent/tools/knowledge-memory-tool.js

@@ -1,4 +1,4 @@
-import { getKnowledgeItem, searchKnowledgeItems, writeKnowledgeItem } from "../../knowledge-memory/repository.js";
+import { getKnowledgeItem, knowledgeSourceAllowed, searchKnowledgeItems, writeKnowledgeItem } from "../../knowledge-memory/repository.js";
 import "../../knowledge-memory/index.js";
 import { Type } from "@sinclair/typebox";
 //#region src/agent/tools/knowledge-memory-tool.ts
@@ -23,17 +23,23 @@ const WriteSchema = Type.Object({
 	]),
 	content: Type.String(),
 	canonicalKey: Type.String(),
-	scope: Type.Union([Type.Literal("workspace"), Type.Literal("session")]),
+	scope: Type.Union([
+		Type.Literal("workspace"),
+		Type.Literal("project"),
+		Type.Literal("session")
+	]),
 	importance: Type.Optional(Type.Number({
 		minimum: 0,
 		maximum: 1
 	}))
 });
 function visibility(options) {
+	const projectId = options.getProjectId?.();
 	return {
 		agentId: options.agentId,
 		workspaceId: options.workspaceId,
-		sessionId: options.getSessionId() ?? ""
+		sessionId: options.getSessionId() ?? "",
+		...projectId ? { projectId } : {}
 	};
 }
 function createKnowledgeSearchTool(options) {
@@ -43,10 +49,18 @@ function createKnowledgeSearchTool(options) {
 		description: "Search project, workspace, and session knowledge for prior decisions, facts, lessons, and commitments.",
 		parameters: SearchSchema,
 		async execute(_toolCallId, raw) {
+			if (!options.canRead()) return {
+				content: [{
+					type: "text",
+					text: "Knowledge memory is disabled for this session."
+				}],
+				details: { error: "knowledge_memory_disabled" }
+			};
 			const input = raw;
 			const results = searchKnowledgeItems({
 				query: input.query,
 				context: visibility(options),
+				sources: options.getSources(),
 				limit: input.maxResults ?? 12
 			});
 			return {
@@ -60,7 +74,7 @@ function createKnowledgeSearchTool(options) {
 	};
 }
 function visibleItem(options, item) {
-	return item.scope.type === "global" || item.scope.type === "agent" && item.scope.id === options.agentId || item.scope.type === "workspace" && item.scope.id === options.workspaceId || item.scope.type === "session" && item.scope.id === options.getSessionId();
+	return item.scope.type === "global" || item.scope.type === "agent" && item.scope.id === options.agentId || item.scope.type === "workspace" && item.scope.id === options.workspaceId || item.scope.type === "project" && item.scope.id === options.getProjectId?.() || item.scope.type === "session" && item.scope.id === options.getSessionId();
 }
 function createKnowledgeGetTool(options) {
 	return {
@@ -69,9 +83,16 @@ function createKnowledgeGetTool(options) {
 		description: "Read one knowledge item returned by knowledge_search.",
 		parameters: GetSchema,
 		async execute(_toolCallId, raw) {
+			if (!options.canRead()) return {
+				content: [{
+					type: "text",
+					text: "Knowledge memory is disabled for this session."
+				}],
+				details: { error: "knowledge_memory_disabled" }
+			};
 			const id = raw.id;
 			const item = getKnowledgeItem(id);
-			return item && visibleItem(options, item) ? {
+			return item && visibleItem(options, item) && knowledgeSourceAllowed(item, options.getSources()) ? {
 				content: [{
 					type: "text",
 					text: JSON.stringify(item, null, 2)
@@ -91,36 +112,70 @@ function createKnowledgeWriteTool(options) {
 	return {
 		name: "knowledge_write",
 		label: "Knowledge Write",
-		description: "Store a scoped knowledge candidate with provenance for later review and retrieval.",
+		description: "Store scoped knowledge with provenance, subject to the configured write policy.",
 		parameters: WriteSchema,
 		async execute(_toolCallId, raw) {
+			if (!options.canWrite()) return {
+				content: [{
+					type: "text",
+					text: "Knowledge memory writes are disabled for this session."
+				}],
+				details: { error: "knowledge_memory_disabled" }
+			};
+			const writePolicy = options.getWritePolicy();
+			if (writePolicy === "deny") return {
+				content: [{
+					type: "text",
+					text: "Knowledge memory writes are denied by policy."
+				}],
+				details: { error: "knowledge_write_denied" }
+			};
 			const input = raw;
+			if (!options.getSources().includes(input.scope)) return {
+				content: [{
+					type: "text",
+					text: `Knowledge source is disabled: ${input.scope}`
+				}],
+				details: {
+					error: "knowledge_source_disabled",
+					source: input.scope
+				}
+			};
 			const sessionId = options.getSessionId();
 			if (input.scope === "session" && !sessionId) throw new Error("A current session is required for session knowledge.");
-			const result = writeKnowledgeItem({
-				kind: input.kind,
-				scope: input.scope === "workspace" ? {
-					type: "workspace",
-					id: options.workspaceId
-				} : {
-					type: "session",
-					id: sessionId
-				},
-				content: input.content,
-				canonicalKey: input.canonicalKey,
-				confidence: .7,
-				importance: input.importance ?? .5,
-				originClass: "agent",
-				sourceAgentId: options.agentId,
-				...sessionId ? { sourceSessionId: sessionId } : {},
-				source: { tool: "knowledge_write" }
-			});
+			const projectId = options.getProjectId?.();
+			if (input.scope === "project" && !projectId) throw new Error("A current project is required for project knowledge.");
+			const details = {
+				...writeKnowledgeItem({
+					kind: input.kind,
+					scope: input.scope === "workspace" ? {
+						type: "workspace",
+						id: options.workspaceId
+					} : input.scope === "project" ? {
+						type: "project",
+						id: projectId
+					} : {
+						type: "session",
+						id: sessionId
+					},
+					content: input.content,
+					canonicalKey: input.canonicalKey,
+					status: writePolicy === "allow" ? "active" : "candidate",
+					confidence: .7,
+					importance: input.importance ?? .5,
+					originClass: "agent",
+					sourceAgentId: options.agentId,
+					...sessionId ? { sourceSessionId: sessionId } : {},
+					source: { tool: "knowledge_write" }
+				}),
+				writePolicy
+			};
 			return {
 				content: [{
 					type: "text",
-					text: JSON.stringify(result, null, 2)
+					text: JSON.stringify(details, null, 2)
 				}],
-				details: result
+				details
 			};
 		}
 	};

package/dist/src/agent/tools/session-search-tool.d.ts

@@ -5,5 +5,6 @@ export interface SessionSearchToolDeps {
     getSessionStore: () => SessionStore;
     getPrimaryModel: () => Model<Api>;
     getCurrentSessionKey?: () => string | undefined;
+    canAccess?: () => boolean;
 }
 export declare function createSessionSearchTool(deps: SessionSearchToolDeps): AgentTool;