@xopcai/xopc 0.0.269 → 0.0.270

package/dist/src/gateway/hono/routes/proactive-control.js

@@ -1,26 +1,51 @@
 import { getSqliteDatabase } from "../../../storage/sqlite/transaction.js";
-import { getDefaultAgentId, init_resolve_route } from "../../../routing/resolve-route.js";
-import { resolveProjectAgentId } from "../../../projects/project-agent.js";
-import "../../../projects/index.js";
 import { ProactiveConflict, proactivePreferences, updateProactivePreferences } from "../../../proactive/policy/service.js";
-import { recordProactivePresence } from "../../../proactive/policy/presence.js";
 import { controlledSubscriptions, createControlledSubscription, requireSubscription, templateCatalog, updateControlledSubscription } from "../../../proactive/scenarios/control.js";
+import { listMailFollowUps, mailFollowUpSources, startMailFollowUp, updateMailFollowUp } from "../../../proactive/follow-ups.js";
 import { cardChanges, getCard, listCards, performCardAction } from "../../../proactive/inbox/cards.js";
+import { checkDelegation, delegationOverview, startDelegation } from "../../../proactive/experience.js";
+import { recordProactivePresence } from "../../../proactive/policy/presence.js";
 import { digestCards } from "../../../proactive/inbox/digest.js";
 import { acknowledgeBrowserProbe, listBrowserProbes, prepareBrowserPush, registerBrowserPush, testBrowserPush, unregisterBrowserPush } from "../../../notifications/web-push.js";
 import { ReadonlyProactiveAgentExecutor } from "../../../proactive/execution/agent-executor.js";
 import { proactiveMetrics } from "../../../proactive/metrics.js";
-import { prepareCardWorkflow, workflowForCard } from "../../../proactive/actions/workflow.js";
 import { previewSubscription } from "../../../proactive/scenarios/preview.js";
 import { ZodError } from "zod";
 //#region src/gateway/hono/routes/proactive-control.ts
-init_resolve_route();
 function registerProactiveControlRoutes(app, deps) {
 	app.onError((error, c) => c.json({
 		ok: false,
 		error: error instanceof ZodError ? "Invalid request" : error.message
 	}, error instanceof ProactiveConflict ? 409 : 400));
 	const workspace = () => deps.service.currentWorkspacePath;
+	app.get("/api/proactive/follow-ups/sources", (c) => c.json({
+		ok: true,
+		sources: mailFollowUpSources(workspace())
+	}));
+	app.get("/api/proactive/follow-ups", (c) => c.json({
+		ok: true,
+		followUps: listMailFollowUps(workspace())
+	}));
+	app.post("/api/proactive/follow-ups", deps.strictRateLimitMiddleware, async (c) => c.json({
+		ok: true,
+		followUp: startMailFollowUp(workspace(), await c.req.json())
+	}, 201));
+	app.patch("/api/proactive/follow-ups/:id", deps.strictRateLimitMiddleware, async (c) => c.json({
+		ok: true,
+		followUp: updateMailFollowUp(workspace(), c.req.param("id"), await c.req.json())
+	}));
+	app.get("/api/proactive/overview", (c) => c.json({
+		ok: true,
+		...delegationOverview(workspace())
+	}));
+	app.post("/api/proactive/delegations", deps.strictRateLimitMiddleware, async (c) => c.json({
+		ok: true,
+		subscription: startDelegation(workspace(), await c.req.json())
+	}, 201));
+	app.post("/api/proactive/subscriptions/:id/check", deps.strictRateLimitMiddleware, (c) => c.json({
+		ok: true,
+		...checkDelegation(workspace(), c.req.param("id"))
+	}, 202));
 	for (const path of ["/api/proactive/*", "/api/inbox/judgments/*"]) app.use(path, async (c, next) => {
 		try {
 			const id = c.req.path.match(/^\/api\/inbox\/judgments\/([^/]+)/)?.[1];
@@ -57,24 +82,6 @@ function registerProactiveControlRoutes(app, deps) {
 		unregisterBrowserPush(workspace(), c.req.param("id"));
 		return c.json({ ok: true });
 	});
-	app.get("/api/inbox/judgments/:itemId/workflow", async (c) => c.json({
-		ok: true,
-		workflow: await workflowForCard(c.req.param("itemId"), workspace(), deps.service.createWorkflowRunService())
-	}));
-	app.post("/api/inbox/judgments/:itemId/prepare", deps.strictRateLimitMiddleware, async (c) => {
-		const card = getCard(c.req.param("itemId"), workspace());
-		const sub = requireSubscription(card.subscriptionId, workspace());
-		const config = deps.service.currentConfig;
-		const agentId = sub.scopeKind === "project" ? resolveProjectAgentId({
-			config,
-			projects: deps.service.projects,
-			projectId: sub.scopeId
-		}) : getDefaultAgentId(config);
-		return c.json({
-			ok: true,
-			workflow: await prepareCardWorkflow(workspace(), card.id, await c.req.json(), agentId, deps.service.createWorkflowRunService())
-		}, 202);
-	});
 	app.post("/api/proactive/presence", deps.strictRateLimitMiddleware, async (c) => {
 		recordProactivePresence(workspace(), await c.req.json());
 		return c.json({ ok: true });

package/dist/src/gateway/run-loop.js

@@ -1,6 +1,6 @@
 import { loadConfig } from "../config/loader.js";
-import "../config/index.js";
 import { isRestartEnabled } from "../config/commands.flags.js";
+import "../config/index.js";
 import { runBootstrapMigrationsSync } from "../migrations/runner.js";
 import { restartGatewayProcessWithFreshPid } from "./respawn.js";
 import { acquireGatewayLock } from "./lock.js";

package/dist/src/gateway/server.js

@@ -1,6 +1,6 @@
 import { resolveGatewayBindHost, resolveGatewayListenHosts } from "../config/gateway-bind.js";
-import { ensureXopcCliOnPath } from "../infra/path-env.js";
 import { resolveGatewayListenPlan } from "./listen.js";
+import { ensureXopcCliOnPath } from "../infra/path-env.js";
 import { GatewayService } from "./service.js";
 import { handleSiteShareUpgrade } from "../share/site-share-router.js";
 import { createHonoApp } from "./hono/app.js";

package/dist/src/gateway/service.js

@@ -31,11 +31,13 @@ import { resolveProjectAgentId } from "../projects/project-agent.js";
 import "../projects/index.js";
 import { resolveEffectiveGatewayPort } from "./host.js";
 import { onSessionTranscriptUpdate } from "../session/transcript-events.js";
+import { ProactiveScenarioService } from "../proactive/scenarios/service.js";
+import { ProactiveEventService } from "../proactive/service.js";
+import { TaskApplicationService } from "../tasks/task-application-service.js";
+import { ProactiveInboxService } from "../proactive/inbox/service.js";
 import { AutomationService } from "../automations/service/automation-service.js";
 import { onAutomationProductEvent, publishAutomationProductEvent } from "../automations/product-events.js";
 import "../automations/index.js";
-import { TaskApplicationService } from "../tasks/task-application-service.js";
-import { ProactiveScenarioService } from "../proactive/scenarios/service.js";
 import { TaskOutboxDispatcher } from "../tasks/task-outbox-dispatcher.js";
 import { TaskRunDispatcher } from "../tasks/task-run-dispatcher.js";
 import { TaskSignalService } from "../tasks/task-signal-service.js";
@@ -54,12 +56,6 @@ import { registerClarificationChannelRuntime } from "./clarify-runtime.js";
 import { ChannelManager } from "../channels/manager.js";
 import { getWorkspacePath } from "../config/workspace-path-helpers.js";
 import "../config/index.js";
-import { DiscussionService } from "../discussions/service.js";
-import { DiscussionOrganizer } from "../discussions/organizer.js";
-import { DiscussionLiveWorker } from "../discussions/live-worker.js";
-import { DiscussionOrganizerWorker } from "../discussions/organizer-worker.js";
-import { DiscussionSealer } from "../discussions/sealer.js";
-import "../discussions/index.js";
 import { ManagedComposioEventPoller } from "../connectors/composio-managed-events.js";
 import { startConnectedKnowledgeCoordinator } from "../knowledge/coordinator.js";
 import "../knowledge/index.js";
@@ -67,12 +63,17 @@ import { ConnectionRecoveryService } from "../connectors/connection-recovery-ser
 import { startConnectorLearningCoordinator } from "../connectors/learning-coordinator.js";
 import { ConnectedSourceChangePublisher } from "../connectors/source-change-publisher.js";
 import { startConnectorSupervisor } from "../connectors/supervisor.js";
+import { DiscussionService } from "../discussions/service.js";
+import { DiscussionOrganizer } from "../discussions/organizer.js";
+import { DiscussionLiveWorker } from "../discussions/live-worker.js";
+import { DiscussionOrganizerWorker } from "../discussions/organizer-worker.js";
+import { DiscussionSealer } from "../discussions/sealer.js";
+import "../discussions/index.js";
 import { EndpointToolRuntime } from "../endpoint-tools/runtime.js";
 import "../endpoint-tools/index.js";
 import { assertGatewayAuthConfigured, extractToken, resolveGatewayAuth, validateToken } from "./auth.js";
 import { prepareAutomationAgentSession } from "./automation-agent-session.js";
 import { stopTailscaleExposure } from "./tailscale-lifecycle.js";
-import { ProactiveInboxService } from "../proactive/inbox/service.js";
 import { deliverProactiveCard } from "../proactive/inbox/delivery.js";
 import { buildVoiceMemoryContext } from "../voice/realtime/memory-context.js";
 import { buildVoicePersonaContext } from "../voice/realtime/persona-context.js";
@@ -108,7 +109,6 @@ import "../local-apps/index.js";
 import { createRuntimeBrowserAutomationService } from "../browser/automations/runtime-service.js";
 import "../browser/automations/index.js";
 import { mapProductEventToProactive } from "../proactive/events/product-event-bridge.js";
-import { ProactiveEventService } from "../proactive/service.js";
 import { ReadonlyProactiveAgentExecutor } from "../proactive/execution/agent-executor.js";
 import { listInsights } from "../proactive/execution/repository.js";
 import { ProactiveWorker } from "../proactive/execution/worker.js";

package/dist/src/notifications/web-push.js

@@ -152,7 +152,7 @@ async function testBrowserPush(workspaceId, subscriptionId, send = webPush.sendN
 			id,
 			title: "xopc 推送测试 / Push test",
 			body: "点击此通知确认打开 / Tap to confirm opening",
-			route: `/proactive?probe=${encodeURIComponent(id)}`
+			route: `/assistant-work?probe=${encodeURIComponent(id)}`
 		}), {
 			vapidDetails: {
 				subject: "https://xopc.ai",

package/dist/src/proactive/actions/service.js

@@ -1,8 +1,8 @@
 import { getSqliteDatabase, runSqliteWriteTransaction } from "../../storage/sqlite/transaction.js";
-import { TaskApplicationService } from "../../tasks/task-application-service.js";
+import { insightSourcesAuthorized, insightSourcesChanged } from "../execution/authorization.js";
 import { effectiveProactivePolicy } from "../policy/service.js";
-import { insightSourcesAuthorized } from "../execution/authorization.js";
 import { insightCorrelation } from "../inbox/lifecycle.js";
+import { TaskApplicationService } from "../../tasks/task-application-service.js";
 //#region src/proactive/actions/service.ts
 function projectIdFromAggregationKey(value) {
 	if (!value.startsWith("project:") || value.length === 8) throw new Error("Proactive action has no project scope");
@@ -13,6 +13,7 @@ function executeClaimedAction(row, now = /* @__PURE__ */ new Date()) {
 	try {
 		if (getSqliteDatabase().prepare("SELECT 1 FROM proactive_inbox_items WHERE insight_id = ? AND withdrawn_at IS NOT NULL").get(row.insight_id)) throw new Error("Card was withdrawn");
 		if (!insightSourcesAuthorized(row.insight_id)) throw new Error("Source permission is no longer available");
+		if (insightSourcesChanged(row.insight_id)) throw new Error("Source changed; review updated work before acting");
 		if (!effectiveProactivePolicy(row.subscription_id).enabled) throw new Error("Proactive subscription paused");
 		const permission = getSqliteDatabase().prepare(`SELECT mode, allowed_actions_json FROM project_monitoring_policies WHERE project_id = ?`).get(projectIdFromAggregationKey(row.aggregation_key));
 		if (!getSqliteDatabase().prepare(`SELECT 1 FROM proactive_decisions d JOIN proactive_inbox_items i USING(inbox_item_id) WHERE i.insight_id = ? AND d.choice = 'approve'`).get(row.insight_id) && !(permission?.mode === "auto_low_risk" && JSON.parse(permission.allowed_actions_json).includes(action.id))) throw new Error("Action permission is no longer available");
@@ -48,6 +49,7 @@ function executeClaimedAction(row, now = /* @__PURE__ */ new Date()) {
 		getSqliteDatabase().prepare(`UPDATE proactive_insights
       SET action_status = 'completed', action_result_json = ?, action_error = NULL, action_updated_at = ?
       WHERE insight_id = ? AND action_status = 'executing'`).run(JSON.stringify({ taskId: result.model.task.id }), now.toISOString(), row.insight_id);
+		getSqliteDatabase().prepare("UPDATE proactive_inbox_items SET status = 'read', resolution = NULL, updated_at = ? WHERE insight_id = ?").run(now.toISOString(), row.insight_id);
 	} catch (error) {
 		getSqliteDatabase().prepare(`UPDATE proactive_insights
       SET action_status = 'failed', action_error = ?, action_updated_at = ?

package/dist/src/proactive/execution/authorization.d.ts

@@ -1,3 +1,5 @@
 /** Recheck connector consent for stored cards and actions, not just model input. */
 export declare function insightSourcesAuthorized(insightId: string): boolean;
+/** Compare versions, not generated prose, before showing or executing prepared work. */
+export declare function insightSourcesChanged(insightId: string): boolean;
 export declare function authorizedConnectedSource(itemId: string, workspaceId: string, scenarioKey: string, agentId?: string | null): import("../../knowledge/types.js").KnowledgeSourceItem;

package/dist/src/proactive/execution/authorization.js

@@ -1,14 +1,52 @@
 import { getSqliteDatabase } from "../../storage/sqlite/transaction.js";
 import { getKnowledgeSourceItem } from "../../storage/sqlite/knowledge-repository.js";
 import { getConnectorSyncPolicyForConnection } from "../../storage/sqlite/connector-sync-policy-repository.js";
+import { readMailThread } from "../mail-thread.js";
 //#region src/proactive/execution/authorization.ts
 /** Recheck connector consent for stored cards and actions, not just model input. */
 function insightSourcesAuthorized(insightId) {
+	const snapshot = getSqliteDatabase().prepare(`SELECT s.workspace_id, x.scenario_key, c.evidence_ids_json
+    FROM proactive_insights x JOIN proactive_scenario_subscriptions s USING(subscription_id)
+    JOIN proactive_runs r USING(run_id) LEFT JOIN proactive_context_snapshots c ON c.snapshot_id = r.context_snapshot_id
+    WHERE x.insight_id = ?`).get(insightId);
+	if (snapshot?.evidence_ids_json) {
+		if (JSON.parse(snapshot.evidence_ids_json).some((id) => id.startsWith("source-item:") && !authorizedConnectedSource(id.slice(12), snapshot.workspace_id, snapshot.scenario_key))) return false;
+	}
 	return getSqliteDatabase().prepare(`SELECT e.subject_id, e.workspace_id, x.scenario_key
     FROM proactive_insights x JOIN proactive_runs r USING(run_id)
     JOIN proactive_batch_events be ON be.batch_id = r.batch_id JOIN proactive_events e USING(event_id)
     WHERE x.insight_id = ? AND e.type LIKE 'connected_source.%'`).all(insightId).every((row) => Boolean(authorizedConnectedSource(row.subject_id, row.workspace_id, row.scenario_key)));
 }
+/** Compare versions, not generated prose, before showing or executing prepared work. */
+function insightSourcesChanged(insightId) {
+	const db = getSqliteDatabase();
+	const row = db.prepare(`SELECT c.content_json FROM proactive_insights x JOIN proactive_runs r USING(run_id)
+    JOIN proactive_context_snapshots c ON c.snapshot_id = r.context_snapshot_id WHERE x.insight_id = ?`).get(insightId);
+	if (!row) return false;
+	const snapshot = JSON.parse(row.content_json);
+	if (snapshot.follow_up?.followUpId) {
+		const follow = db.prepare("SELECT source_item_id, revision, status, due_at FROM proactive_follow_ups WHERE id = ?").get(snapshot.follow_up.followUpId);
+		if (!follow || follow.status !== "watching" || follow.revision !== snapshot.follow_up.revision || Date.parse(follow.due_at) <= Date.now() !== snapshot.follow_up.deadlinePassed || readMailThread(follow.source_item_id)?.fingerprint !== snapshot.follow_up.fingerprint) return true;
+	}
+	for (const source of [...snapshot.connected_source?.items ?? [], ...snapshot.follow_up?.items ?? []]) {
+		const current = getKnowledgeSourceItem(source.sourceItemId);
+		if (!current || current.deletedAt || current.contentHash !== source.contentHash || current.occurredAt !== source.occurredAt) return true;
+	}
+	const project = snapshot.project_state?.project;
+	if (project) {
+		const current = db.prepare("SELECT updated_at FROM projects WHERE project_id = ?").get(project.project_id);
+		if (!current || current.updated_at !== project.updated_at) return true;
+	}
+	for (const task of [...snapshot.project_state?.activeTasks ?? [], ...snapshot.meeting_workspace?.activeTasks ?? []]) {
+		const current = db.prepare("SELECT updated_at FROM tasks WHERE task_id = ?").get(task.task_id);
+		if (!current || current.updated_at !== task.updated_at) return true;
+	}
+	for (const note of snapshot.meeting_workspace?.recentNotes ?? []) {
+		const current = db.prepare("SELECT updated_at FROM notes WHERE note_id = ?").get(note.note_id);
+		if (!current || current.updated_at !== note.updated_at) return true;
+	}
+	return false;
+}
 function authorizedConnectedSource(itemId, workspaceId, scenarioKey, agentId) {
 	const item = getKnowledgeSourceItem(itemId);
 	if (!item || item.deletedAt || item.metadata.workspaceId !== workspaceId || item.sensitivity === "secret" || item.sensitivity === "regulated") return null;
@@ -20,4 +58,4 @@ function authorizedConnectedSource(itemId, workspaceId, scenarioKey, agentId) {
 	return policy?.scanEnabled && policy.proactiveEnabled && (!policy.allowedScenarioKeys.length || policy.allowedScenarioKeys.includes(scenarioKey)) ? item : null;
 }
 //#endregion
-export { authorizedConnectedSource, insightSourcesAuthorized };
+export { authorizedConnectedSource, insightSourcesAuthorized, insightSourcesChanged };

package/dist/src/proactive/execution/context.d.ts

@@ -33,6 +33,10 @@ export declare class DiscussionContextProvider implements ContextProvider {
     readonly id = "discussion";
     collect(input: ContextInput): Promise<ResolvedContext>;
 }
+export declare class MailFollowUpContextProvider implements ContextProvider {
+    readonly id = "follow_up";
+    collect(input: ContextInput): Promise<ResolvedContext>;
+}
 export declare class ContextProviderRegistry {
     private readonly providers;
     constructor(providers?: ContextProvider[]);

package/dist/src/proactive/execution/context.js

@@ -1,8 +1,9 @@
 import { getSqliteDatabase } from "../../storage/sqlite/transaction.js";
 import { getAssertionSlot, listUserAssertions } from "../../user-model/repository.js";
 import "../../user-model/index.js";
-import { getDiscussionCapture, getLatestDiscussionOrganization } from "../../discussions/repository.js";
 import { authorizedConnectedSource } from "./authorization.js";
+import { authorizedMailThread, requireMailFollowUp } from "../follow-ups.js";
+import { getDiscussionCapture, getLatestDiscussionOrganization } from "../../discussions/repository.js";
 import { wrapExternalContent } from "../../gateway/security/external-content.js";
 //#region src/proactive/execution/context.ts
 const MAX_EVENT_COUNT = 50;
@@ -27,7 +28,12 @@ function emptyContext() {
 	};
 }
 function authorizedConnectedSourceItem(event, scenarioKey) {
-	return authorizedConnectedSource(event.subject_id, event.workspace_id, scenarioKey, event.agent_id);
+	const item = authorizedConnectedSource(event.subject_id, event.workspace_id, scenarioKey, event.agent_id);
+	if (item && event.type === "connected_source.calendar_window.v1") {
+		const payload = JSON.parse(event.payload_json);
+		if (payload.meetingStartsAt !== item.occurredAt || payload.contentHash && payload.contentHash !== item.contentHash) return null;
+	}
+	return item;
 }
 var EventBatchContextProvider = class {
 	id = "event_batch";
@@ -53,11 +59,13 @@ var ConnectedSourceContextProvider = class {
 	async collect(input) {
 		const items = [];
 		const snapshotItems = [];
+		const seen = /* @__PURE__ */ new Set();
 		const evidenceIds = [];
 		for (const event of eventRows(input.eventIds)) {
 			if (!event.type.startsWith("connected_source.") || event.type.includes("_deleted.")) continue;
 			const item = authorizedConnectedSourceItem(event, input.scenarioKey);
-			if (!item) continue;
+			if (!item || seen.has(item.id)) continue;
+			seen.add(item.id);
 			const evidenceId = `source-item:${item.id}`;
 			const common = {
 				evidenceId,
@@ -325,6 +333,43 @@ var DiscussionContextProvider = class {
 		};
 	}
 };
+var MailFollowUpContextProvider = class {
+	id = "follow_up";
+	async collect(input) {
+		const event = eventRows(input.eventIds).findLast((row) => row.subject_kind === "mail_follow_up");
+		if (!event) return emptyContext();
+		const follow = requireMailFollowUp(event.workspace_id, event.subject_id);
+		const thread = authorizedMailThread(follow);
+		if (!thread || follow.status !== "watching") return emptyContext();
+		const common = {
+			followUpId: follow.id,
+			revision: follow.revision,
+			fingerprint: thread.fingerprint,
+			dueAt: follow.due_at,
+			deadlinePassed: Date.parse(follow.due_at) <= Date.now()
+		};
+		return {
+			content: {
+				...common,
+				instructions: follow.instructions,
+				items: thread.items.map((item) => ({
+					evidenceId: `source-item:${item.id}`,
+					occurredAt: item.occurredAt,
+					content: wrapExternalContent(item.normalizedText?.slice(0, 4e3) ?? "", { source: "email" })
+				}))
+			},
+			snapshotContent: {
+				...common,
+				items: thread.items.map((item) => ({
+					sourceItemId: item.id,
+					contentHash: item.contentHash,
+					occurredAt: item.occurredAt
+				}))
+			},
+			evidenceIds: thread.items.map((item) => `source-item:${item.id}`)
+		};
+	}
+};
 var ContextProviderRegistry = class {
 	constructor(providers = [
 		new EventBatchContextProvider(),
@@ -334,7 +379,8 @@ var ContextProviderRegistry = class {
 		new MeetingWorkspaceContextProvider(),
 		new ProjectStateContextProvider(),
 		new AutomationStateContextProvider(),
-		new DiscussionContextProvider()
+		new DiscussionContextProvider(),
+		new MailFollowUpContextProvider()
 	]) {
 		this.providers = providers;
 	}
@@ -357,4 +403,4 @@ var ContextProviderRegistry = class {
 	}
 };
 //#endregion
-export { AutomationStateContextProvider, ConnectedSourceContextProvider, ContextProviderRegistry, DiscussionContextProvider, EventBatchContextProvider, InternalObjectContextProvider, MeetingWorkspaceContextProvider, ProjectStateContextProvider, UserModelContextProvider };
+export { AutomationStateContextProvider, ConnectedSourceContextProvider, ContextProviderRegistry, DiscussionContextProvider, EventBatchContextProvider, InternalObjectContextProvider, MailFollowUpContextProvider, MeetingWorkspaceContextProvider, ProjectStateContextProvider, UserModelContextProvider };

package/dist/src/proactive/execution/insight.js

@@ -1,3 +1,4 @@
+import { ProactiveArtifactSchema } from "../../../packages/gateway-contract/src/proactive.js";
 import { stripCodeFences } from "../../providers/model-response.js";
 //#region src/proactive/execution/insight.ts
 const URGENCY = new Set([
@@ -65,6 +66,7 @@ function parseInsightCandidate(raw, allowedEvidenceIds) {
 	const proposedAction = parseProposedAction(row.proposedAction);
 	if (proposedAction && (!decision || decision.options.length !== 2 || decision.options[0]?.id !== "approve" || decision.options[1]?.id !== "reject")) throw new Error("Insight proposedAction requires approve and reject decision options");
 	return {
+		...row.artifact != null ? { artifact: ProactiveArtifactSchema.parse(row.artifact) } : {},
 		title: boundedText(row.title, "title", 160),
 		summary: boundedText(row.summary, "summary", 1200),
 		whyNow: boundedText(row.whyNow, "whyNow", 800),
@@ -91,7 +93,7 @@ function isValuableInsight(candidate, policy = {
 	minConfidence: .65,
 	minScore: .6
 }) {
-	return candidate.confidence >= policy.minConfidence && candidate.urgency !== "low" && scoreInsight(candidate) >= policy.minScore;
+	return candidate.confidence >= policy.minConfidence && (candidate.urgency !== "low" || Boolean(candidate.artifact)) && scoreInsight(candidate) >= policy.minScore;
 }
 function parseAnalysisResult(raw, allowedEvidenceIds) {
 	let value;

package/dist/src/proactive/execution/repository.js

@@ -107,11 +107,19 @@ function finishRun(input, now = /* @__PURE__ */ new Date()) {
       JOIN proactive_events e ON e.event_id = be.event_id
       WHERE be.batch_id = ?
       ORDER BY e.subject_kind, e.subject_id`).all(input.run.batchId).map((row) => `${str(row, "subject_kind")}:${str(row, "subject_id")}`);
-		const fingerprint = input.candidate ? createHash("sha256").update([...subjectScope, ...[
-			input.candidate.title,
-			input.candidate.summary,
-			input.candidate.recommendation
-		].map((value) => value.trim().toLowerCase().replace(/\s+/g, " "))].join("\n")).digest("hex") : void 0;
+		const snapshot = db.prepare(`SELECT c.content_json FROM proactive_runs r JOIN proactive_context_snapshots c
+      ON c.snapshot_id = r.context_snapshot_id WHERE r.run_id = ?`).get(input.run.id);
+		const sourceVersions = snapshot ? JSON.parse(snapshot.content_json) : {};
+		const fingerprint = input.candidate ? createHash("sha256").update([
+			...subjectScope,
+			JSON.stringify(input.candidate.artifact ?? null),
+			JSON.stringify(sourceVersions.connected_source ?? sourceVersions.project_state ?? sourceVersions.follow_up ?? null),
+			...[
+				input.candidate.title,
+				input.candidate.summary,
+				input.candidate.recommendation
+			].map((value) => value.trim().toLowerCase().replace(/\s+/g, " "))
+		].join("\n")).digest("hex") : void 0;
 		const duplicate = fingerprint ? db.prepare(`SELECT 1 FROM proactive_insights
       WHERE subscription_id = ? AND scenario_key = ? AND content_fingerprint = ? AND created_at >= ? LIMIT 1`).get(input.run.subscriptionId, input.run.scenarioKey, fingerprint, (/* @__PURE__ */ new Date(now.getTime() - (input.cooldownSeconds ?? 10080 * 60) * 1e3)).toISOString()) : void 0;
 		const valuable = Boolean(input.candidate) && !duplicate;
@@ -141,6 +149,7 @@ function finishRun(input, now = /* @__PURE__ */ new Date()) {
       why_now, impact, recommendation, work_done, decision_json, proposed_action_json, urgency, confidence, value_score,
       evidence_ids_json, content_fingerprint, created_at)
       VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`).run(insight.id, insight.runId, insight.subscriptionId, insight.scenarioKey, insight.title, insight.summary, insight.whyNow, insight.impact, insight.recommendation, insight.workDone, insight.decision ? JSON.stringify(insight.decision) : null, insight.proposedAction ? JSON.stringify(insight.proposedAction) : null, insight.urgency, insight.confidence, insight.valueScore, JSON.stringify(insight.evidenceIds), fingerprint, insight.createdAt);
+		if (insight.artifact) db.prepare("UPDATE proactive_insights SET artifact_json = ? WHERE insight_id = ?").run(JSON.stringify(insight.artifact), insight.id);
 		return insight;
 	});
 }
@@ -165,6 +174,7 @@ function listInsights(limit = 50) {
 		impact: str(row, "impact"),
 		recommendation: str(row, "recommendation"),
 		workDone: str(row, "work_done"),
+		...row.artifact_json ? { artifact: JSON.parse(str(row, "artifact_json")) } : {},
 		...row.decision_json ? { decision: JSON.parse(str(row, "decision_json")) } : {},
 		...row.proposed_action_json ? { proposedAction: JSON.parse(str(row, "proposed_action_json")) } : {},
 		urgency: str(row, "urgency"),

package/dist/src/proactive/execution/types.d.ts

@@ -1,3 +1,4 @@
+import type { ProactiveArtifact } from '@xopcai/gateway-contract';
 export interface ContextSnapshot {
     id: string;
     batchId: string;
@@ -6,6 +7,7 @@ export interface ContextSnapshot {
     createdAt: string;
 }
 export interface InsightCandidate {
+    artifact?: ProactiveArtifact;
     title: string;
     summary: string;
     whyNow: string;

package/dist/src/proactive/execution/worker.js

@@ -1,6 +1,7 @@
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
 import { getSqliteDatabase } from "../../storage/sqlite/transaction.js";
+import { authorizedConnectedSource } from "./authorization.js";
 import { effectiveProactivePolicy } from "../policy/service.js";
 import { getPromptRevision, getScenario } from "../scenarios/repository.js";
 import { composeScenarioPrompt } from "../scenarios/prompt-composer.js";
@@ -9,6 +10,7 @@ import { ContextProviderRegistry } from "./context.js";
 import { attachSnapshot, claimNextRun, eventIdsForBatch, failRun, finishRun, saveSnapshot } from "./repository.js";
 import { isValuableInsight, parseAnalysisResult, scoreInsight } from "./insight.js";
 import { randomUUID } from "node:crypto";
+import { isDeepStrictEqual } from "node:util";
 //#region src/proactive/execution/worker.ts
 init_logger();
 const log = createLogger("ProactiveWorker");
@@ -86,11 +88,14 @@ var ProactiveWorker = class {
 					subscriptionId: run.subscriptionId
 				});
 				const revoked = context.evidenceIds.some((id) => !latestContext.evidenceIds.includes(id));
-				const result = revoked ? {
+				const changed = !isDeepStrictEqual(context.snapshotContent ?? context.content, latestContext.snapshotContent ?? latestContext.content);
+				const unavailable = context.evidenceIds.some((id) => id.startsWith("source-item:") && !authorizedConnectedSource(id.slice(12), effectiveProactivePolicy(run.subscriptionId).workspaceId, run.scenarioKey));
+				const result = revoked || changed ? {
 					result: "no_insight",
-					reason: "source_unavailable"
+					reason: unavailable ? "source_unavailable" : "source_changed"
 				} : parseAnalysisResult(output.text, new Set(latestContext.evidenceIds));
 				const candidate = result.result === "insight" ? result.candidate : void 0;
+				if (run.scenarioKey === "communication_follow_up" && (candidate?.decision || candidate?.proposedAction)) throw new Error("Communication preparation must return a draft or update; actions require the conversation confirmation flow");
 				const valueScore = candidate ? scoreInsight(candidate) : 0;
 				const enabled = effectiveProactivePolicy(run.subscriptionId).enabled;
 				const valuable = enabled && candidate && isValuableInsight(candidate, scenario.valuePolicy);

package/dist/src/proactive/experience.d.ts

@@ -0,0 +1,69 @@
+export declare function startDelegation(workspace: string, value: unknown): {
+    effectiveLevel: "off" | "active" | "quiet" | "balanced";
+    schedule: Record<string, import("node:sqlite").SQLOutputValue>;
+    revision: number;
+    level: "off" | "active" | "quiet" | "balanced";
+    delivery: "digest" | "inbox" | "important";
+    completedAt: string;
+    scanIntervalMinutes: number;
+    userInstructions: string;
+    id: string;
+    scenarioKey: string;
+    workspaceId: string;
+    scopeKind: "workspace" | "project";
+    scopeId: string;
+    enabled: boolean;
+    activePromptRevisionId?: string;
+    createdAt: string;
+    updatedAt: string;
+};
+/** Queue work in the existing worker; HTTP and conversation requests do not own model runs. */
+export declare function checkDelegation(workspace: string, id: string): {
+    status: "queued";
+};
+export declare function delegationOverview(workspace: string): {
+    followUps: {
+        id: string;
+        subscriptionId: string;
+        instructions: string;
+        dueAt: string;
+        status: "completed" | "paused" | "watching";
+        revision: number;
+        lastCheckedAt: string;
+        sessionKey: string;
+        sourceAvailable: boolean;
+        enabled: boolean;
+        subject: string;
+        latestMessageAt: string;
+        latestDirection: string;
+        lastSyncedAt: string;
+        syncFailed: boolean;
+    }[];
+    needsDecision: import("@xopcai/gateway-contract/src/proactive.js").ProactiveCard[];
+    prepared: import("@xopcai/gateway-contract/src/proactive.js").ProactiveCard[];
+    updates: import("@xopcai/gateway-contract/src/proactive.js").ProactiveCard[];
+    delegations: {
+        effectiveEnabled: boolean;
+        project: Record<string, import("node:sqlite").SQLOutputValue>;
+        latestRun: Record<string, import("node:sqlite").SQLOutputValue>;
+        pending: boolean;
+        effectiveLevel: "off" | "active" | "quiet" | "balanced";
+        schedule: Record<string, import("node:sqlite").SQLOutputValue>;
+        revision: number;
+        level: "off" | "active" | "quiet" | "balanced";
+        delivery: "digest" | "inbox" | "important";
+        completedAt: string;
+        scanIntervalMinutes: number;
+        userInstructions: string;
+        id: string;
+        scenarioKey: string;
+        workspaceId: string;
+        scopeKind: "workspace" | "project";
+        scopeId: string;
+        enabled: boolean;
+        activePromptRevisionId?: string;
+        createdAt: string;
+        updatedAt: string;
+    }[];
+};
+export declare function completeDeliveredProjects(now?: Date): void;