@xopcai/xopc 0.0.267 → 0.0.269

package/dist/src/storage/sqlite/migrations/159_proactive_controls.sql

@@ -0,0 +1,68 @@
+CREATE TABLE proactive_preferences (
+  workspace_id TEXT PRIMARY KEY,
+  preferences_json TEXT NOT NULL,
+  revision INTEGER NOT NULL DEFAULT 1
+);
+CREATE TABLE proactive_subscription_settings (
+  subscription_id TEXT PRIMARY KEY REFERENCES proactive_scenario_subscriptions(subscription_id) ON DELETE CASCADE,
+  settings_json TEXT NOT NULL,
+  revision INTEGER NOT NULL DEFAULT 1
+);
+CREATE TABLE proactive_schedule_state (
+  subscription_id TEXT PRIMARY KEY REFERENCES proactive_scenario_subscriptions(subscription_id) ON DELETE CASCADE,
+  next_due_at TEXT NOT NULL,
+  last_checked_at TEXT,
+  last_fingerprint TEXT
+);
+CREATE TABLE proactive_notification_budget (
+  dedupe_key TEXT PRIMARY KEY,
+  workspace_id TEXT NOT NULL,
+  local_day TEXT NOT NULL,
+  created_at TEXT NOT NULL
+);
+CREATE INDEX proactive_budget_day ON proactive_notification_budget(workspace_id, local_day);
+ALTER TABLE proactive_runs ADD COLUMN outcome_reason TEXT;
+ALTER TABLE proactive_runs ADD COLUMN policy_revision INTEGER NOT NULL DEFAULT 0;
+ALTER TABLE proactive_inbox_items ADD COLUMN revision INTEGER NOT NULL DEFAULT 1;
+ALTER TABLE proactive_inbox_items ADD COLUMN notification_revision INTEGER NOT NULL DEFAULT 1;
+ALTER TABLE proactive_inbox_items ADD COLUMN expires_at TEXT;
+CREATE TABLE proactive_card_changes (
+  sequence INTEGER PRIMARY KEY AUTOINCREMENT,
+  workspace_id TEXT NOT NULL,
+  inbox_item_id TEXT NOT NULL,
+  deleted INTEGER NOT NULL DEFAULT 0
+);
+CREATE TRIGGER proactive_card_created AFTER INSERT ON proactive_inbox_items BEGIN
+  INSERT INTO proactive_card_changes(inbox_item_id, workspace_id)
+    SELECT NEW.inbox_item_id, s.workspace_id FROM proactive_insights x JOIN proactive_scenario_subscriptions s USING(subscription_id) WHERE x.insight_id = NEW.insight_id;
+END;
+CREATE TRIGGER proactive_card_updated AFTER UPDATE ON proactive_inbox_items
+WHEN NEW.revision = OLD.revision BEGIN
+  UPDATE proactive_inbox_items SET revision = OLD.revision + 1 WHERE inbox_item_id = NEW.inbox_item_id;
+  INSERT INTO proactive_card_changes(inbox_item_id, workspace_id)
+    SELECT NEW.inbox_item_id, s.workspace_id FROM proactive_insights x JOIN proactive_scenario_subscriptions s USING(subscription_id) WHERE x.insight_id = NEW.insight_id;
+END;
+CREATE TRIGGER proactive_card_deleted AFTER DELETE ON proactive_inbox_items BEGIN
+  INSERT INTO proactive_card_changes(inbox_item_id, workspace_id, deleted)
+    SELECT OLD.inbox_item_id, workspace_id, 1 FROM proactive_card_changes WHERE inbox_item_id = OLD.inbox_item_id ORDER BY sequence DESC LIMIT 1;
+END;
+CREATE TRIGGER proactive_insight_card_updated AFTER UPDATE OF title, summary, decision_json, action_status, action_result_json, action_error ON proactive_insights BEGIN
+  UPDATE proactive_inbox_items SET updated_at = NEW.action_updated_at WHERE insight_id = NEW.insight_id AND NEW.action_updated_at IS NOT NULL;
+END;
+CREATE TABLE proactive_card_actions (
+  idempotency_key TEXT PRIMARY KEY,
+  inbox_item_id TEXT NOT NULL REFERENCES proactive_inbox_items(inbox_item_id) ON DELETE CASCADE,
+  request_json TEXT NOT NULL,
+  response_json TEXT NOT NULL
+);
+
+INSERT INTO proactive_card_changes(inbox_item_id, workspace_id)
+  SELECT i.inbox_item_id, s.workspace_id FROM proactive_inbox_items i JOIN proactive_insights x USING(insight_id) JOIN proactive_scenario_subscriptions s USING(subscription_id);
+
+ALTER TABLE proactive_runs ADD COLUMN subscription_revision INTEGER NOT NULL DEFAULT 0;
+ALTER TABLE proactive_runs ADD COLUMN policy_snapshot_json TEXT;
+
+CREATE TRIGGER proactive_subscription_enabled_changed AFTER UPDATE OF enabled ON proactive_scenario_subscriptions
+WHEN NEW.enabled <> OLD.enabled BEGIN
+  UPDATE proactive_subscription_settings SET revision = revision + 1 WHERE subscription_id = NEW.subscription_id;
+END;

package/dist/src/storage/sqlite/migrations/160_proactive_web_push.sql

@@ -0,0 +1,27 @@
+CREATE TABLE proactive_web_push_keys (
+  id INTEGER PRIMARY KEY CHECK (id = 1),
+  public_key TEXT NOT NULL,
+  private_key TEXT NOT NULL
+);
+CREATE TABLE proactive_web_push_subscriptions (
+  id TEXT PRIMARY KEY,
+  workspace_id TEXT NOT NULL,
+  endpoint TEXT NOT NULL UNIQUE,
+  subscription_json TEXT NOT NULL,
+  language TEXT NOT NULL,
+  created_at TEXT NOT NULL
+);
+CREATE TABLE proactive_web_push_deliveries (
+  notification_id TEXT NOT NULL REFERENCES notification_events(event_id) ON DELETE CASCADE,
+  subscription_id TEXT NOT NULL REFERENCES proactive_web_push_subscriptions(id) ON DELETE CASCADE,
+  inbox_item_id TEXT NOT NULL,
+  notification_revision INTEGER NOT NULL DEFAULT 1,
+  status TEXT NOT NULL DEFAULT 'pending' CHECK (status IN ('pending', 'sending', 'sent', 'failed')),
+  attempt INTEGER NOT NULL DEFAULT 0,
+  next_attempt_at INTEGER NOT NULL,
+  lease_until INTEGER,
+  last_error TEXT,
+  PRIMARY KEY(notification_id, subscription_id)
+);
+
+CREATE INDEX proactive_web_push_due_idx ON proactive_web_push_deliveries(status, next_attempt_at);

package/dist/src/storage/sqlite/migrations/161_proactive_delivery_and_lifecycle.sql

@@ -0,0 +1,51 @@
+ALTER TABLE proactive_inbox_items ADD COLUMN withdrawn_at TEXT;
+ALTER TABLE proactive_inbox_items ADD COLUMN correlation_key TEXT;
+CREATE INDEX proactive_card_correlation ON proactive_inbox_items(correlation_key);
+CREATE TABLE proactive_presence (
+  workspace_id TEXT NOT NULL, client_id TEXT NOT NULL, surface TEXT NOT NULL,
+  expires_at INTEGER NOT NULL, PRIMARY KEY(workspace_id, client_id)
+);
+CREATE TABLE proactive_digest_queue (
+  inbox_item_id TEXT PRIMARY KEY REFERENCES proactive_inbox_items(inbox_item_id) ON DELETE CASCADE,
+  workspace_id TEXT NOT NULL, notification_revision INTEGER NOT NULL,
+  mode TEXT NOT NULL, due_at TEXT NOT NULL, consumed_at TEXT
+);
+CREATE INDEX proactive_digest_due ON proactive_digest_queue(consumed_at, due_at);
+CREATE TABLE proactive_digests (
+  digest_id TEXT PRIMARY KEY, workspace_id TEXT NOT NULL, occurrence_key TEXT NOT NULL,
+  created_at TEXT NOT NULL, notification_id TEXT, UNIQUE(workspace_id, occurrence_key)
+);
+CREATE TABLE proactive_digest_members (
+  digest_id TEXT NOT NULL REFERENCES proactive_digests(digest_id) ON DELETE CASCADE,
+  inbox_item_id TEXT NOT NULL REFERENCES proactive_inbox_items(inbox_item_id) ON DELETE CASCADE,
+  notification_revision INTEGER NOT NULL, PRIMARY KEY(digest_id, inbox_item_id)
+);
+CREATE TABLE proactive_channel_deliveries (
+  notification_id TEXT PRIMARY KEY REFERENCES notification_events(event_id) ON DELETE CASCADE,
+  workspace_id TEXT NOT NULL, target_json TEXT NOT NULL,
+  status TEXT NOT NULL DEFAULT 'pending', attempt INTEGER NOT NULL DEFAULT 0,
+  next_attempt_at INTEGER NOT NULL, lease_until INTEGER, provider_message_id TEXT, last_error TEXT
+);
+CREATE TABLE proactive_preview_runs (
+  id TEXT PRIMARY KEY, subscription_id TEXT NOT NULL, created_at TEXT NOT NULL,
+  completed_at TEXT, status TEXT NOT NULL, error TEXT
+);
+CREATE TABLE proactive_delivery_decisions (
+  notification_key TEXT PRIMARY KEY, workspace_id TEXT NOT NULL, outcome TEXT NOT NULL, created_at TEXT NOT NULL
+);
+CREATE TABLE proactive_card_review_state (
+  inbox_item_id TEXT PRIMARY KEY REFERENCES proactive_inbox_items(inbox_item_id) ON DELETE CASCADE,
+  checked_at TEXT NOT NULL
+);
+CREATE TABLE proactive_workflow_links (
+  inbox_item_id TEXT PRIMARY KEY REFERENCES proactive_inbox_items(inbox_item_id) ON DELETE CASCADE,
+  definition_id TEXT NOT NULL, agent_id TEXT NOT NULL, attempt_key TEXT NOT NULL,
+  run_id TEXT, session_key TEXT, status TEXT NOT NULL, lease_until INTEGER, error TEXT
+);
+CREATE TABLE proactive_push_probes (
+  id TEXT PRIMARY KEY, workspace_id TEXT NOT NULL, subscription_id TEXT NOT NULL,
+  status TEXT NOT NULL, created_at INTEGER NOT NULL, opened_at INTEGER, error TEXT
+);
+ALTER TABLE proactive_runs ADD COLUMN input_tokens INTEGER;
+ALTER TABLE proactive_runs ADD COLUMN output_tokens INTEGER;
+ALTER TABLE proactive_runs ADD COLUMN estimated_cost_usd REAL;

package/dist/src/storage/sqlite/migrations/runner.d.ts

@@ -3,7 +3,7 @@ import type { ApplyMigrationsOptions } from './types.js';
 /** Baseline schema version applied from schema.sql on first open. */
 export declare const XOPC_DB_BASELINE_SCHEMA_VERSION = 11;
 /** Latest schema version this release supports (increment when adding migrations). */
-export declare const XOPC_DB_SCHEMA_VERSION = 158;
+export declare const XOPC_DB_SCHEMA_VERSION = 161;
 export declare function resolveMigrationsDir(override?: string): string;
 /**
  * Apply sequential SQL migrations from (currentVersion + 1) through targetVersion.

package/dist/src/storage/sqlite/migrations/runner.js

@@ -12,7 +12,7 @@ const log = createLogger("Sqlite:Migrations");
 /** Baseline schema version applied from schema.sql on first open. */
 const XOPC_DB_BASELINE_SCHEMA_VERSION = 11;
 /** Latest schema version this release supports (increment when adding migrations). */
-const XOPC_DB_SCHEMA_VERSION = 158;
+const XOPC_DB_SCHEMA_VERSION = 161;
 const MODULE_DIR = dirname(fileURLToPath(import.meta.url));
 function backupBeforeTaskCutover(db, databasePath) {
 	db.exec("PRAGMA wal_checkpoint(FULL)");
@@ -57,7 +57,7 @@ function applySingleMigration(db, migration) {
 * Each step runs in its own transaction and updates schema_meta on success.
 */
 function applyPendingMigrations(db, options = {}) {
-	const targetVersion = options.targetVersion ?? 158;
+	const targetVersion = options.targetVersion ?? 161;
 	let currentVersion = readSchemaVersion(db);
 	if (currentVersion > targetVersion) throw new DatabaseSchemaTooNewError(currentVersion, targetVersion);
 	if (currentVersion >= targetVersion) return currentVersion;
@@ -94,7 +94,7 @@ function applyPendingMigrations(db, options = {}) {
 }
 /** Inspect schema version without mutating the database. */
 function inspectSchemaMigrationStatus(db, options = {}) {
-	const appVersion = options.targetVersion ?? 158;
+	const appVersion = options.targetVersion ?? 161;
 	const dbVersion = readSchemaVersion(db);
 	if (dbVersion > appVersion) return {
 		dbVersion,

package/dist/src/storage/sqlite/migrations/runner.ts

@@ -19,7 +19,7 @@ const log = createLogger('Sqlite:Migrations');
 export const XOPC_DB_BASELINE_SCHEMA_VERSION = 11;
 
 /** Latest schema version this release supports (increment when adding migrations). */
-export const XOPC_DB_SCHEMA_VERSION = 158;
+export const XOPC_DB_SCHEMA_VERSION = 161;
 
 const MODULE_DIR = dirname(fileURLToPath(import.meta.url));
 

package/dist/src/storage/sqlite/schema.js

@@ -32,7 +32,7 @@ function ensureXopcDatabaseSchema(db, options = {}) {
 		currentVersion = 11;
 	}
 	applyPendingMigrations(db, {
-		targetVersion: 158,
+		targetVersion: 161,
 		databasePath: options.databasePath
 	});
 }

package/dist/src/tui/tui-startup-resources.js

@@ -1,13 +1,13 @@
 import { resolveStateDir } from "../config/paths-state.js";
-import { init_paths, resolveAgentProfileDir, resolveBundledSkillsDir } from "../config/paths.js";
 import { resolveEffectiveAgentProfileForSession } from "../config/agent-profile.js";
+import { init_paths, resolveAgentProfileDir, resolveBundledSkillsDir } from "../config/paths.js";
 import { resolveBootstrapFilesSync } from "../agent/bootstrap/bootstrap-files.js";
 import { createSkillConfigManager, isSkillEnabled } from "../agent/skills/config.js";
 import { loadSkills } from "../agent/skills/index.js";
 import { createWorkflowCatalog } from "../agent/workflow/catalog.js";
-import { listConnectorInstances } from "../connectors/instances.js";
 import { getWorkspacePath } from "../config/workspace-path-helpers.js";
 import "../config/index.js";
+import { listConnectorInstances } from "../connectors/instances.js";
 import { basename } from "node:path";
 //#region src/tui/tui-startup-resources.ts
 init_paths();

package/dist/src/tui/tui.js

@@ -2,10 +2,10 @@ import { version } from "../../package.js";
 import { resolveStateDir, resolveXopcDatabasePath } from "../config/paths-state.js";
 import { parseAgentSessionKey } from "../routing/session-key-utils.js";
 import { init_agent_session_key, normalizeAgentId } from "../routing/agent-session-key.js";
+import { resolveEffectiveAgentProfileForSession } from "../config/agent-profile.js";
 import { init_paths } from "../config/paths.js";
 import { loadConfig } from "../config/loader.js";
 import { getAllModels, getAllProviders, getApiKey, init_providers, isProviderConfiguredSync } from "../providers/index.js";
-import { resolveEffectiveAgentProfileForSession } from "../config/agent-profile.js";
 import { ProjectTrustStore, hasTrustRequiringProjectResources } from "../project-trust/trust-store.js";
 import { renderWorkflowFinalSummary, renderWorkflowPanel } from "../agent/workflow/snapshot.js";
 import { ensureStarterAgentsInitialized } from "../agent/starter-agents.js";

package/dist/src/voice/realtime/runtime.d.ts

@@ -19,6 +19,7 @@ export declare class VoiceRealtimeRuntime {
     private readonly preauthBudget;
     private readonly socketsByPrincipal;
     private readonly conversationReservations;
+    private readonly activeSessions;
     private closed;
     constructor(options: VoiceRealtimeRuntimeOptions);
     private prepareSession;
@@ -26,7 +27,7 @@ export declare class VoiceRealtimeRuntime {
     createSession(request: CreateVoiceSessionRequest, principalId: string, now?: number): Promise<CreateVoiceSessionResponse>;
     handleUpgrade(req: IncomingMessage, socket: Socket, head: Buffer): boolean;
     hasConversation(sessionKey: string): boolean;
-    cancelSession(sessionId: string, ticket: string, principalId: string): boolean;
+    cancelSession(sessionId: string, ticket: string, principalId: string): Promise<boolean>;
     close(): void;
     private releaseConversationReservation;
     private consumeTicket;

package/dist/src/voice/realtime/runtime.js

@@ -147,6 +147,7 @@ var VoiceRealtimeRuntime = class {
 	preauthBudget = createPreauthConnectionBudget();
 	socketsByPrincipal = /* @__PURE__ */ new Map();
 	conversationReservations = /* @__PURE__ */ new Map();
+	activeSessions = /* @__PURE__ */ new Map();
 	closed = false;
 	constructor(options) {
 		this.options = options;
@@ -263,7 +264,9 @@ var VoiceRealtimeRuntime = class {
 		};
 	}
 	handleUpgrade(req, socket, head) {
-		if (new URL(req.url ?? "/", "http://gateway.local").pathname !== "/api/voice/realtime/v3/ws") return false;
+		const url = new URL(req.url ?? "/", "http://gateway.local");
+		const pathAndQuery = `${url.pathname}${url.search}`;
+		if (url.pathname !== "/api/voice/realtime/v3/ws" && pathAndQuery !== "/api/realtime/v1/ws?transport=voice-v3") return false;
 		if (this.closed || this.wss.clients.size >= MAX_CONNECTIONS) {
 			socket.destroy();
 			return true;
@@ -285,12 +288,17 @@ var VoiceRealtimeRuntime = class {
 		this.pruneTickets(Date.now());
 		return this.conversationReservations.has(sessionKey);
 	}
-	cancelSession(sessionId, ticket, principalId) {
+	async cancelSession(sessionId, ticket, principalId) {
 		const key = ticketKey(ticket);
 		const claim = this.tickets.get(key);
-		if (!claim || claim.sessionId !== sessionId || claim.principalId !== principalId) return false;
-		this.tickets.delete(key);
-		this.releaseConversationReservation(claim);
+		if (claim && claim.sessionId === sessionId && claim.principalId === principalId) {
+			this.tickets.delete(key);
+			this.releaseConversationReservation(claim);
+			return true;
+		}
+		const active = this.activeSessions.get(sessionId);
+		if (!active || active.principalId !== principalId || active.ticketKey !== key) return false;
+		await active.shutdown();
 		return true;
 	}
 	close() {
@@ -298,6 +306,7 @@ var VoiceRealtimeRuntime = class {
 		this.closed = true;
 		for (const client of this.wss.clients) client.close(1001, "Gateway stopping");
 		this.tickets.clear();
+		this.activeSessions.clear();
 		this.wss.close();
 		this.socketsByPrincipal.clear();
 		this.conversationReservations.clear();
@@ -362,6 +371,7 @@ var VoiceRealtimeRuntime = class {
 		const shutdown = async (reason, notify) => {
 			if (closed) return;
 			closed = true;
+			if (claim && this.activeSessions.get(claim.sessionId)?.socket === socket) this.activeSessions.delete(claim.sessionId);
 			unsubscribeMemory?.();
 			unsubscribeSession?.();
 			clearTimeout(startTimer);
@@ -418,6 +428,12 @@ var VoiceRealtimeRuntime = class {
 				return;
 			}
 			claim = consumed;
+			this.activeSessions.set(consumed.sessionId, {
+				principalId: consumed.principalId,
+				socket,
+				ticketKey: ticketKey(message.payload.ticket),
+				shutdown: () => shutdown("cancelled", false)
+			});
 			principalSockets.add(socket);
 			this.socketsByPrincipal.set(consumed.principalId, principalSockets);
 			clearTimeout(startTimer);

package/dist/src/work-discovery/service.js

@@ -6,12 +6,12 @@ import { getAgentDefaultModelRef, init_schema } from "../config/schema.js";
 import { buildSessionKey, init_session_key } from "../routing/session-key.js";
 import { getDefaultAgentId, init_resolve_route } from "../routing/resolve-route.js";
 import { init_providers, resolveModel } from "../providers/index.js";
-import { isLocalModelBaseUrl } from "../providers/model-call.js";
 import { writeKnowledgeItem } from "../knowledge-memory/repository.js";
 import "../knowledge-memory/index.js";
 import { createPriorityWindow, createUserGoal } from "../user-model/goals.js";
 import { getAssertionSlot, getUserAssertion, linkAssertionEvidence, reconcileAssertion, setAssertionStatus } from "../user-model/repository.js";
 import "../user-model/index.js";
+import { isLocalModelBaseUrl } from "../providers/model-call.js";
 import { allowsRemoteSourceProcessing } from "../user-context/sources/processing-policy.js";
 import { analyzeUnderstandingSources, analyzeWorkContext, workDiscoveryResultMarkdown } from "./analyzer.js";
 import { createUnderstandingSourceRun, getUnderstandingSourceRun, updateUnderstandingSourceGrantCheckpoint, updateUnderstandingSourceGrantPolicies, updateUnderstandingSourceRun, upsertUnderstandingSourceGrant } from "../user-context/sources/repository.js";

package/dist/src/workflows/domain/run.d.ts

@@ -20,6 +20,7 @@ export interface WorkflowRun {
     completedAtMs?: number;
 }
 export interface WorkflowRunMetadata {
+    preparationOnly?: boolean;
     sessionKey: string;
     triggerSource: WorkflowRunSource['kind'];
     agentId?: string;

package/dist/src/workflows/index.js

@@ -10,10 +10,10 @@ import { WorkflowEngine } from "./engine/workflow-engine.js";
 import "./engine/index.js";
 import { WorkflowEventStore, createWorkflowEventStore } from "./store/event-store.js";
 import { WorkflowRunStore, createWorkflowRunStore } from "./store/run-store.js";
-import { WorkflowRunService, buildWorkflowRunDefinitionSnapshot, buildWorkflowRunInputEnvelope, buildWorkflowRunMetadata, extractWorkflowRunSessionKey, resolveWorkflowReplayTargets } from "./service/workflow-run-service.js";
+import { WorkflowRunService, buildWorkflowRunDefinitionSnapshot, buildWorkflowRunInputEnvelope, buildWorkflowRunMetadata, extractWorkflowRunSessionKey, preparationDefinition, resolveWorkflowReplayTargets } from "./service/workflow-run-service.js";
 import { runViewToSnapshot } from "./service/run-view-to-snapshot.js";
 import { buildWorkflowRunSessionKey, readWorkflowRunIdFromSessionCustomData } from "./service/workflow-session-key.js";
 import { WORKFLOW_RUN_LINK_CONTEXT_KIND, WORKFLOW_SESSION_TYPE, WorkflowSessionBridge, formatParentRunLinkText } from "./service/workflow-session-bridge.js";
 import "./registry/index.js";
 import { resolveWorkflowRootDir, resolveWorkflowRunArtifactsDir, resolveWorkflowRunDir, resolveWorkflowRunsDir } from "./store/paths.js";
-export { CatalogWorkflowDefinitionRegistry, DEFAULT_WORKFLOW_CONCURRENCY, DEFAULT_WORKFLOW_MAX_SUBAGENTS, DEFAULT_WORKFLOW_TIMEOUT_SEC, GraphWorkflowRuntime, WORKFLOW_RUN_LINK_CONTEXT_KIND, WORKFLOW_SESSION_TYPE, WorkflowEngine, WorkflowEventStore, WorkflowRunService, WorkflowRunStore, WorkflowSessionBridge, buildWorkflowDefinition, buildWorkflowRunDefinitionSnapshot, buildWorkflowRunInputEnvelope, buildWorkflowRunMetadata, buildWorkflowRunSessionKey, createGraphWorkflowRuntime, createWorkflowEventStore, createWorkflowRunStore, deriveWorkflowPhases, extractWorkflowRunSessionKey, formatParentRunLinkText, hashWorkflowStableValue, isTerminalWorkflowRunStatus, normalizeWorkflowDefinitionId, projectWorkflowRunView, readWorkflowRunIdFromSessionCustomData, renderWorkflowTemplate, resolveWorkflowReplayTargets, resolveWorkflowRootDir, resolveWorkflowRunArtifactsDir, resolveWorkflowRunDir, resolveWorkflowRunsDir, runViewToSnapshot, toWorkflowDefinitionTitle, validateWorkflowDefinitionInput, validateWorkflowGraph, validateWorkflowJsonSchema };
+export { CatalogWorkflowDefinitionRegistry, DEFAULT_WORKFLOW_CONCURRENCY, DEFAULT_WORKFLOW_MAX_SUBAGENTS, DEFAULT_WORKFLOW_TIMEOUT_SEC, GraphWorkflowRuntime, WORKFLOW_RUN_LINK_CONTEXT_KIND, WORKFLOW_SESSION_TYPE, WorkflowEngine, WorkflowEventStore, WorkflowRunService, WorkflowRunStore, WorkflowSessionBridge, buildWorkflowDefinition, buildWorkflowRunDefinitionSnapshot, buildWorkflowRunInputEnvelope, buildWorkflowRunMetadata, buildWorkflowRunSessionKey, createGraphWorkflowRuntime, createWorkflowEventStore, createWorkflowRunStore, deriveWorkflowPhases, extractWorkflowRunSessionKey, formatParentRunLinkText, hashWorkflowStableValue, isTerminalWorkflowRunStatus, normalizeWorkflowDefinitionId, preparationDefinition, projectWorkflowRunView, readWorkflowRunIdFromSessionCustomData, renderWorkflowTemplate, resolveWorkflowReplayTargets, resolveWorkflowRootDir, resolveWorkflowRunArtifactsDir, resolveWorkflowRunDir, resolveWorkflowRunsDir, runViewToSnapshot, toWorkflowDefinitionTitle, validateWorkflowDefinitionInput, validateWorkflowGraph, validateWorkflowJsonSchema };

package/dist/src/workflows/service/workflow-run-service.d.ts

@@ -37,6 +37,7 @@ export declare class WorkflowRunService {
 }
 export declare function buildWorkflowRunInputEnvelope(input: unknown, goal?: string): WorkflowRunInputEnvelope;
 export declare function buildWorkflowRunMetadata(params: {
+    preparationOnly?: boolean;
     definition: WorkflowDefinition;
     agentId: string;
     taskRunId?: string;
@@ -57,3 +58,5 @@ export declare function resolveWorkflowReplayTargets(view: WorkflowRunView, scop
 };
 export declare function buildWorkflowRunDefinitionSnapshot(definition: WorkflowDefinition): WorkflowRunDefinitionSnapshot;
 export declare function extractWorkflowRunSessionKey(source: WorkflowRunSource): string | null;
+/** Preparation runs can only transform supplied context into a reviewable result. */
+export declare function preparationDefinition(original: WorkflowDefinition): WorkflowDefinition;

package/dist/src/workflows/service/workflow-run-service.js

@@ -1,7 +1,7 @@
 import { TaskRunRepository } from "../../tasks/task-run-repository.js";
 import { getDefaultAgentId, init_resolve_route } from "../../routing/resolve-route.js";
-import { init_providers, resolveModel } from "../../providers/index.js";
 import { extractProfileAgentId, resolveEffectiveAgentProfileForSession } from "../../config/agent-profile.js";
+import { init_providers, resolveModel } from "../../providers/index.js";
 import { TaskRepository } from "../../tasks/task-repository.js";
 import { TaskConversationRepository } from "../../tasks/task-conversation-repository.js";
 import { getProjectWorkspacePathForSession } from "../../projects/workspace.js";
@@ -97,13 +97,14 @@ var WorkflowRunService = class {
 			message: `Workflow "${params.definitionId}" is not allowed for this agent`,
 			httpStatus: 409
 		};
-		const definition = await this.loadDefinition(params.definitionId);
+		let definition = await this.loadDefinition(params.definitionId);
 		if (!definition) return {
 			ok: false,
 			code: "definition_not_found",
 			message: "Workflow definition not found",
 			httpStatus: 404
 		};
+		if (params.preparationOnly) definition = preparationDefinition(definition);
 		const connectorPreflight = preflightWorkflowConnectors({
 			definition,
 			config: this.options.service.currentConfig,
@@ -174,7 +175,7 @@ var WorkflowRunService = class {
 		const contextRefs = resolvedContext ? [...resolvedContext.refs, ...passiveContextRefs] : requestedContextRefs;
 		let writebackPolicy;
 		try {
-			writebackPolicy = resolveWorkflowWritebackPolicy(params.writebackPolicy, {
+			writebackPolicy = resolveWorkflowWritebackPolicy(params.preparationOnly ? { targets: [] } : params.writebackPolicy, {
 				projectId,
 				taskId
 			});
@@ -252,6 +253,7 @@ var WorkflowRunService = class {
 			source,
 			metadata: buildWorkflowRunMetadata({
 				definition,
+				preparationOnly: params.preparationOnly,
 				agentId: params.agentId,
 				taskRunId: params.taskRunId,
 				projectId,
@@ -299,6 +301,7 @@ var WorkflowRunService = class {
 		return this.startWorkflowRun({
 			agentId: params.agentId,
 			definitionId: existing.run.definitionId,
+			preparationOnly: existing.run.metadata?.preparationOnly,
 			taskRunId: existing.run.metadata?.taskRunId,
 			projectId,
 			contextRefs: existing.run.metadata?.contextRefs,
@@ -320,14 +323,18 @@ var WorkflowRunService = class {
 			message: "Workflow run not found",
 			httpStatus: 404
 		};
-		const definition = await this.loadDefinition(existing.run.definitionId);
+		let definition = await this.loadDefinition(existing.run.definitionId);
 		if (!definition) return {
 			ok: false,
 			code: "definition_not_found",
 			message: "Workflow definition not found",
 			httpStatus: 404
 		};
+		if (existing.run.metadata?.preparationOnly) definition = preparationDefinition(definition);
 		const targets = resolveWorkflowReplayTargets(existing, params.scope);
+		if (existing.run.metadata?.preparationOnly) {
+			for (const target of targets.targets) if (target.invocation) target.invocation.toolset = [];
+		}
 		if (targets.targets.length === 0) return {
 			ok: false,
 			code: "invalid_state",
@@ -412,6 +419,7 @@ var WorkflowRunService = class {
 			source,
 			metadata: buildWorkflowRunMetadata({
 				definition,
+				preparationOnly: existing.run.metadata?.preparationOnly,
 				agentId: params.agentId,
 				taskRunId,
 				projectId,
@@ -637,12 +645,13 @@ function buildWorkflowRunMetadata(params) {
 		taskId,
 		source: params.source
 	});
-	const writebackPolicy = resolveWorkflowWritebackPolicy(params.writebackPolicy, {
+	const writebackPolicy = resolveWorkflowWritebackPolicy(params.preparationOnly ? { targets: [] } : params.writebackPolicy, {
 		projectId,
 		taskId
 	});
 	return {
 		sessionKey: params.sessionKey,
+		...params.preparationOnly ? { preparationOnly: true } : {},
 		triggerSource: params.source.kind,
 		agentId: params.agentId,
 		projectId,
@@ -791,5 +800,17 @@ function isWorkflowRunInputEnvelope(input) {
 	if (!input || typeof input !== "object" || Array.isArray(input)) return false;
 	return "payload" in input || "variables" in input || "context" in input;
 }
+/** Preparation runs can only transform supplied context into a reviewable result. */
+function preparationDefinition(original) {
+	const definition = structuredClone(original);
+	for (const node of definition.graph.nodes) if (node.kind === "agent") node.config.toolset = [];
+	definition.permissions = {
+		tools: [],
+		network: false,
+		fileSystem: "none"
+	};
+	definition.connectors = [];
+	return definition;
+}
 //#endregion
-export { WorkflowRunService, buildWorkflowRunDefinitionSnapshot, buildWorkflowRunInputEnvelope, buildWorkflowRunMetadata, extractWorkflowRunSessionKey, resolveWorkflowReplayTargets };
+export { WorkflowRunService, buildWorkflowRunDefinitionSnapshot, buildWorkflowRunInputEnvelope, buildWorkflowRunMetadata, extractWorkflowRunSessionKey, preparationDefinition, resolveWorkflowReplayTargets };

package/dist/src/workflows/service/workflow-run-service.types.d.ts

@@ -1,5 +1,6 @@
 import type { WorkflowRunInputEnvelope, WorkflowRunContextRef, WorkflowRunReplayScope, WorkflowRunSource, WorkflowRunWritebackPolicy, WorkflowRunView } from '../domain/index.js';
 export interface StartWorkflowRunServiceParams {
+    preparationOnly?: boolean;
     agentId: string;
     definitionId: string;
     taskRunId?: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xopcai/xopc",
-  "version": "0.0.267",
+  "version": "0.0.269",
   "description": "Local-first personal AI assistant with reviewable user understanding, durable tasks, workflows, automations, and local or cloud models.",
   "type": "module",
   "main": "dist/src/index.js",
@@ -104,6 +104,7 @@
     "thread-stream": "^4.2.0",
     "undici": "^8.9.0",
     "uuid": "^14.0.0",
+    "web-push": "^3.6.7",
     "ws": "^8.21.0",
     "zod": "^4.4.3"
   },
@@ -138,6 +139,7 @@
     "@types/markdown-it": "^14.1.2",
     "@types/node": "^25.9.1",
     "@types/qrcode-terminal": "^0.12.2",
+    "@types/web-push": "^3.6.4",
     "@types/ws": "^8.18.1",
     "@vitejs/plugin-react-swc": "^4.3.1",
     "cross-env": "^10.1.0",