@xopcai/xopc 0.0.284 → 0.0.285

package/dist/src/proactive/inbox/digest.js

@@ -1,9 +1,8 @@
 import { getSqliteDatabase, runSqliteWriteTransaction } from "../../storage/sqlite/transaction.js";
-import { insightSourcesAuthorized } from "../execution/authorization.js";
-import { effectiveProactivePolicy, localProactiveDay, nextDigestTime, proactivePreferences, quietHoursEnd } from "../policy/service.js";
+import { insightSourcesAuthorized, insightSourcesChanged, insightSourcesFresh } from "../execution/authorization.js";
+import { effectiveProactivePolicy, localProactiveDay, nextDigestTime, proactiveChecksAllowed, proactivePreferences, quietHoursEnd } from "../policy/service.js";
 import { getInboxItem } from "./repository.js";
 import { getCard } from "./cards.js";
-import { viewingProactiveCards } from "../policy/presence.js";
 import { randomUUID } from "node:crypto";
 //#region src/proactive/inbox/digest.ts
 function queueDigest(item, mode, dueAt) {
@@ -13,26 +12,27 @@ function queueDigest(item, mode, dueAt) {
     mode = excluded.mode, due_at = excluded.due_at, consumed_at = NULL
     WHERE proactive_digest_queue.notification_revision <> excluded.notification_revision`).run(item.id, policy.workspaceId, item.notificationRevision, mode, dueAt.toISOString());
 }
-function digestCards(id, workspaceId) {
+function digestCards(id, workspaceId, forDelivery = false) {
 	const digest = getSqliteDatabase().prepare("SELECT * FROM proactive_digests WHERE digest_id = ? AND workspace_id = ?").get(id, workspaceId);
 	if (!digest) throw new Error("Digest not found");
 	return getSqliteDatabase().prepare("SELECT inbox_item_id, notification_revision FROM proactive_digest_members WHERE digest_id = ?").all(id).flatMap((member) => {
 		const item = getInboxItem(member.inbox_item_id);
-		if (!item || !eligibleDigestItem(item, digest.occurrence_key.startsWith("daily:") ? "daily" : "quiet") || item.notificationRevision !== member.notification_revision) return [];
+		if (!item || item.withdrawnAt || item.expiresAt && Date.parse(item.expiresAt) <= Date.now() || item.actionableUntil && Date.parse(item.actionableUntil) <= Date.now() || item.notificationRevision !== member.notification_revision) return [];
+		if (forDelivery && !eligibleDigestItem(item, digest.occurrence_key.startsWith("daily:") ? "daily" : "quiet", false)) return [];
 		const card = getCard(item.id, workspaceId);
-		return card.status === "withdrawn" ? [] : [card];
+		return ["withdrawn", "expired"].includes(card.status) ? [] : [card];
 	});
 }
-function eligibleDigestItem(item, mode) {
+function eligibleDigestItem(item, mode, requireFresh = true) {
 	const policy = effectiveProactivePolicy(item.subscriptionId);
 	const daily = policy.preferences.digestEnabled || policy.settings.delivery === "digest";
 	if (mode === "daily" ? !daily : policy.level === "quiet" && !daily) return false;
-	return Boolean(policy.enabled && policy.settings.delivery !== "inbox" && !item.withdrawnAt && !["resolved", "snoozed"].includes(item.status) && (!item.expiresAt || Date.parse(item.expiresAt) > Date.now()) && insightSourcesAuthorized(item.insightId));
+	return Boolean(policy.enabled && policy.settings.delivery !== "inbox" && !item.withdrawnAt && !["resolved", "snoozed"].includes(item.status) && (!item.expiresAt || Date.parse(item.expiresAt) > Date.now()) && (!item.actionableUntil || Date.parse(item.actionableUntil) > Date.now()) && insightSourcesAuthorized(item.insightId) && !insightSourcesChanged(item.insightId) && (!requireFresh || insightSourcesFresh(item.insightId)));
 }
 function reserveWorkspaceAttention(workspaceId, key, now = /* @__PURE__ */ new Date()) {
 	const db = getSqliteDatabase();
 	const preferences = proactivePreferences(workspaceId);
-	if (preferences.level === "off" || preferences.pausedUntil && Date.parse(preferences.pausedUntil) > now.getTime()) return false;
+	if (!proactiveChecksAllowed(preferences, now) || preferences.notificationsMuted) return false;
 	if (db.prepare("SELECT 1 FROM proactive_notification_budget WHERE dedupe_key = ?").get(key)) return true;
 	const day = localProactiveDay(now, preferences.timezone);
 	const { count } = db.prepare("SELECT COUNT(*) AS count FROM proactive_notification_budget WHERE workspace_id = ? AND local_day = ?").get(workspaceId, day);
@@ -46,15 +46,25 @@ function flushDueDigests(persist, now = /* @__PURE__ */ new Date()) {
 		const notifications = [];
 		for (const group of groups) {
 			const preferences = proactivePreferences(group.workspace_id);
+			if (!proactiveChecksAllowed(preferences, now)) {
+				db.prepare("UPDATE proactive_digest_queue SET due_at = ? WHERE workspace_id = ? AND mode = ? AND consumed_at IS NULL").run(new Date(now.getTime() + 6e4).toISOString(), group.workspace_id, group.mode);
+				continue;
+			}
 			const until = quietHoursEnd(preferences, now);
 			if (until) {
 				db.prepare("UPDATE proactive_digest_queue SET due_at = ? WHERE workspace_id = ? AND mode = ? AND consumed_at IS NULL").run(until.toISOString(), group.workspace_id, group.mode);
 				continue;
 			}
 			const queued = db.prepare("SELECT inbox_item_id FROM proactive_digest_queue WHERE workspace_id = ? AND mode = ? AND consumed_at IS NULL AND due_at <= ? ORDER BY due_at LIMIT 500").all(group.workspace_id, group.mode, now.toISOString());
+			const deferred = /* @__PURE__ */ new Set();
 			const seen = /* @__PURE__ */ new Set();
 			const items = queued.flatMap((row) => {
 				const item = getInboxItem(row.inbox_item_id);
+				if (item && !item.withdrawnAt && !["read", "resolved"].includes(item.status) && (!item.actionableUntil || Date.parse(item.actionableUntil) > now.getTime()) && (!item.expiresAt || Date.parse(item.expiresAt) > now.getTime()) && insightSourcesAuthorized(item.insightId) && !insightSourcesChanged(item.insightId) && !insightSourcesFresh(item.insightId)) {
+					deferred.add(item.id);
+					db.prepare("UPDATE proactive_digest_queue SET due_at = ? WHERE inbox_item_id = ?").run(new Date(now.getTime() + 6e4).toISOString(), item.id);
+					return [];
+				}
 				if (!item || !eligibleDigestItem(item, group.mode)) return [];
 				const key = item.correlationKey ?? item.id;
 				if (seen.has(key)) return [];
@@ -67,12 +77,12 @@ function flushDueDigests(persist, now = /* @__PURE__ */ new Date()) {
 				db.prepare("UPDATE proactive_digest_queue SET due_at = ? WHERE workspace_id = ? AND mode = ? AND consumed_at IS NULL").run(tomorrow.toISOString(), group.workspace_id, group.mode);
 				continue;
 			}
-			if (!items.length || preferences.suppressWhileViewing && viewingProactiveCards(group.workspace_id, now.getTime())) {
-				for (const row of queued) db.prepare("UPDATE proactive_digest_queue SET consumed_at = ? WHERE inbox_item_id = ?").run(now.toISOString(), row.inbox_item_id);
+			if (!items.length) {
+				for (const row of queued.filter((row) => !deferred.has(row.inbox_item_id))) db.prepare("UPDATE proactive_digest_queue SET consumed_at = ? WHERE inbox_item_id = ?").run(now.toISOString(), row.inbox_item_id);
 				continue;
 			}
 			const key = `proactive.digest:${group.workspace_id}:${occurrence}`;
-			if (!reserveWorkspaceAttention(group.workspace_id, key, now)) {
+			if (!preferences.notificationsMuted && !reserveWorkspaceAttention(group.workspace_id, key, now)) {
 				db.prepare("UPDATE proactive_digest_queue SET due_at = ? WHERE workspace_id = ? AND mode = ? AND consumed_at IS NULL").run(nextDigestTime(preferences, new Date(now.getTime() + 6e4)).toISOString(), group.workspace_id, group.mode);
 				continue;
 			}
@@ -103,7 +113,7 @@ function flushDueDigests(persist, now = /* @__PURE__ */ new Date()) {
 				db.prepare("UPDATE proactive_digests SET notification_id = ? WHERE digest_id = ?").run(notification.id, id);
 				notifications.push(notification);
 			}
-			for (const row of queued) db.prepare("UPDATE proactive_digest_queue SET consumed_at = ? WHERE inbox_item_id = ?").run(now.toISOString(), row.inbox_item_id);
+			for (const row of queued.filter((row) => !deferred.has(row.inbox_item_id))) db.prepare("UPDATE proactive_digest_queue SET consumed_at = ? WHERE inbox_item_id = ?").run(now.toISOString(), row.inbox_item_id);
 		}
 		return notifications;
 	});

package/dist/src/proactive/inbox/notification-policy.d.ts

@@ -1 +1 @@
-export declare function recheckProactiveNotification(itemId: string, now?: Date, notificationRevision?: unknown): 'send' | 'cancel' | Date;
+export declare function recheckProactiveNotification(itemId: string, now?: Date, notificationRevision?: unknown, forDigest?: boolean): 'send' | 'cancel' | Date;

package/dist/src/proactive/inbox/notification-policy.js

@@ -1,18 +1,21 @@
-import { insightSourcesAuthorized, insightSourcesChanged } from "../execution/authorization.js";
+import { insightSourcesAuthorized, insightSourcesChanged, insightSourcesFresh } from "../execution/authorization.js";
 import { effectiveProactivePolicy, quietHoursEnd } from "../policy/service.js";
 import { getInboxItem } from "./repository.js";
 //#region src/proactive/inbox/notification-policy.ts
-function recheckProactiveNotification(itemId, now = /* @__PURE__ */ new Date(), notificationRevision) {
+function recheckProactiveNotification(itemId, now = /* @__PURE__ */ new Date(), notificationRevision, forDigest = false) {
 	const item = getInboxItem(itemId);
-	if (!item || item.withdrawnAt || !insightSourcesAuthorized(item.insightId) || item.status === "resolved" || item.expiresAt && Date.parse(item.expiresAt) <= now.getTime()) return "cancel";
+	if (!item || item.withdrawnAt || !insightSourcesAuthorized(item.insightId) || ["resolved", "read"].includes(item.status) || item.expiresAt && Date.parse(item.expiresAt) <= now.getTime()) return "cancel";
 	if (item.insight.actionStatus !== "completed" && insightSourcesChanged(item.insightId)) return "cancel";
+	if (item.actionableUntil && Date.parse(item.actionableUntil) <= now.getTime()) return "cancel";
+	if (!insightSourcesFresh(item.insightId)) return new Date(now.getTime() + 6e4);
 	if (typeof notificationRevision === "number" && notificationRevision !== item.notificationRevision) return "cancel";
 	const policy = effectiveProactivePolicy(item.subscriptionId, now);
-	if (!policy.enabled || policy.preferences.digestEnabled && item.insight.attentionKind !== "receipt") return "cancel";
-	if (policy.level !== "active" && ["low", "medium"].includes(item.insight.urgency) && !item.insight.decision) return "cancel";
+	if (!policy.enabled || policy.preferences.notificationsMuted || policy.settings.delivery === "inbox") return "cancel";
+	if (!forDigest && policy.preferences.digestEnabled && item.insight.attentionKind !== "receipt") return "cancel";
+	if (!forDigest && policy.level !== "active" && ["low", "medium"].includes(item.insight.urgency) && !item.insight.decision) return "cancel";
 	if (item.status === "snoozed") return new Date(item.snoozedUntil);
 	{
-		if (policy.level === "quiet" || policy.settings.delivery !== "important") return "cancel";
+		if (!forDigest && (policy.level === "quiet" || policy.settings.delivery !== "important")) return "cancel";
 		const until = quietHoursEnd(policy.preferences, now);
 		if (until) return until;
 	}

package/dist/src/proactive/inbox/repository.js

@@ -15,6 +15,7 @@ function itemFromRow(row) {
 		correlationKey: row.correlation_key ? s(row, "correlation_key") : void 0,
 		revision: Number(row.revision),
 		notificationRevision: Number(row.notification_revision),
+		...row.actionable_until ? { actionableUntil: s(row, "actionable_until") } : {},
 		...row.expires_at ? { expiresAt: s(row, "expires_at") } : {},
 		status: s(row, "status"),
 		...row.snoozed_until ? { snoozedUntil: s(row, "snoozed_until") } : {},
@@ -128,7 +129,7 @@ function projectInsightsToInbox(now = /* @__PURE__ */ new Date()) {
 			};
 			const materialChange = previous && ((urgencyRank[String(row.urgency)] ?? 0) > (urgencyRank[previous.urgency] ?? 0) || row.decision_json !== previous.decision_json || previous.expires_at && previous.expires_at <= nowIso);
 			if (previous) db.prepare(`UPDATE proactive_inbox_items SET insight_id = ?, updated_at = ?,
-          notification_revision = notification_revision + ? WHERE inbox_item_id = ?`).run(String(row.insight_id), nowIso, materialChange ? 1 : 0, id);
+          status = CASE WHEN ? THEN 'unread' ELSE status END, notification_revision = notification_revision + ? WHERE inbox_item_id = ?`).run(String(row.insight_id), nowIso, materialChange ? 1 : 0, materialChange ? 1 : 0, id);
 			else db.prepare(`INSERT INTO proactive_inbox_items (inbox_item_id, insight_id, status, created_at, updated_at)
           VALUES (?, ?, 'unread', ?, ?)`).run(id, String(row.insight_id), nowIso, nowIso);
 			{
@@ -138,7 +139,7 @@ function projectInsightsToInbox(now = /* @__PURE__ */ new Date()) {
           WHERE x.insight_id = ? AND e.type = 'connected_source.calendar_window.v1' ORDER BY e.occurred_at DESC LIMIT 1`).get(String(row.insight_id));
 				const meetingStart = meeting ? JSON.parse(meeting.payload_json).meetingStartsAt : void 0;
 				const expiresAt = typeof meetingStart === "string" && Number.isFinite(Date.parse(meetingStart)) ? meetingStart : new Date(now.getTime() + 7 * 864e5).toISOString();
-				db.prepare("UPDATE proactive_inbox_items SET expires_at = ? WHERE inbox_item_id = ?").run(expiresAt, id);
+				db.prepare("UPDATE proactive_inbox_items SET expires_at = ?, actionable_until = ? WHERE inbox_item_id = ?").run(expiresAt, typeof meetingStart === "string" ? meetingStart : null, id);
 			}
 			const quietEnd = nextQuietHoursEnd(policy.quietHours, now)?.getTime() ?? now.getTime();
 			const cooldownEnd = previous?.delivered_at ? Date.parse(previous.delivered_at) + 4 * 36e5 : now.getTime();

package/dist/src/proactive/inbox/service.d.ts

@@ -7,7 +7,13 @@ export declare class ProactiveInboxService {
     feedback: typeof recordFeedback;
     decide(id: string, choice: string, note?: string): import("./types.js").InboxItem;
     instruct(id: string, instruction: string): {
+        followUpId: string;
+        revision: number;
+        revisionId?: undefined;
+    } | {
         revisionId: string;
+        followUpId?: undefined;
+        revision?: undefined;
     };
     transition(id: string, input: {
         status: InboxStatus;

package/dist/src/proactive/inbox/service.js

@@ -1,4 +1,6 @@
+import { getSqliteDatabase } from "../../storage/sqlite/transaction.js";
 import { publishInstructionFeedback } from "../scenarios/repository.js";
+import { requireMailFollowUp, updateMailFollowUp } from "../follow-ups.js";
 import { executePendingProactiveActions } from "../actions/service.js";
 import { getInboxItem, getInboxSubscriptionId, listInbox, projectInsightsToInbox, recordDecision, recordFeedback, transitionInboxItem, wakeSnoozedItems } from "./repository.js";
 //#region src/proactive/inbox/service.ts
@@ -13,6 +15,22 @@ var ProactiveInboxService = class {
 		return getInboxItem(id) ?? item;
 	}
 	instruct(id, instruction) {
+		const row = getSqliteDatabase().prepare(`SELECT s.workspace_id, c.content_json FROM proactive_inbox_items i
+      JOIN proactive_insights x USING(insight_id) JOIN proactive_runs r USING(run_id)
+      JOIN proactive_scenario_subscriptions s ON s.subscription_id = x.subscription_id
+      JOIN proactive_context_snapshots c ON c.snapshot_id = r.context_snapshot_id WHERE i.inbox_item_id = ?`).get(id);
+		const followId = row && JSON.parse(row.content_json).follow_up?.followUpId;
+		if (row && followId) {
+			const follow = requireMailFollowUp(row.workspace_id, followId);
+			const updated = updateMailFollowUp(row.workspace_id, follow.id, {
+				expectedRevision: follow.revision,
+				instructions: `${follow.instructions}\n${instruction}`
+			});
+			return {
+				followUpId: updated.id,
+				revision: updated.revision
+			};
+		}
 		return { revisionId: publishInstructionFeedback({
 			subscriptionId: getInboxSubscriptionId(id),
 			inboxItemId: id,

package/dist/src/proactive/inbox/types.d.ts

@@ -7,6 +7,7 @@ export interface InboxItem {
     revision?: number;
     notificationRevision?: number;
     expiresAt?: string;
+    actionableUntil?: string;
     withdrawnAt?: string;
     correlationKey?: string;
     status: InboxStatus;

package/dist/src/proactive/policy/presence.d.ts

@@ -1,2 +1,2 @@
 export declare function recordProactivePresence(workspaceId: string, value: unknown, now?: number): void;
-export declare function viewingProactiveCards(workspaceId: string, now?: number): boolean;
+export declare function viewingProactiveCard(workspaceId: string, itemId: string, revision: number, now?: number): boolean;

package/dist/src/proactive/policy/presence.js

@@ -8,7 +8,9 @@ const PresenceSchema = z.object({
 		"web",
 		"electron",
 		"mobile"
-	])
+	]),
+	inboxItemId: z.string().min(1).max(128).optional(),
+	notificationRevision: z.number().int().positive().optional()
 }).strict();
 function recordProactivePresence(workspaceId, value, now = Date.now()) {
 	const input = PresenceSchema.parse(value);
@@ -18,10 +20,10 @@ function recordProactivePresence(workspaceId, value, now = Date.now()) {
 		db.prepare("DELETE FROM proactive_presence WHERE workspace_id = ? AND client_id = ?").run(workspaceId, input.clientId);
 		return;
 	}
-	db.prepare(`INSERT INTO proactive_presence VALUES (?, ?, ?, ?) ON CONFLICT(workspace_id, client_id) DO UPDATE SET surface = excluded.surface, expires_at = excluded.expires_at`).run(workspaceId, input.clientId, input.surface, now + 75e3);
+	db.prepare(`INSERT INTO proactive_presence(workspace_id, client_id, surface, expires_at, inbox_item_id, notification_revision) VALUES (?, ?, ?, ?, ?, ?) ON CONFLICT(workspace_id, client_id) DO UPDATE SET surface = excluded.surface, expires_at = excluded.expires_at, inbox_item_id = excluded.inbox_item_id, notification_revision = excluded.notification_revision`).run(workspaceId, input.clientId, input.surface, now + 75e3, input.inboxItemId ?? null, input.notificationRevision ?? null);
 }
-function viewingProactiveCards(workspaceId, now = Date.now()) {
-	return Boolean(getSqliteDatabase().prepare("SELECT 1 FROM proactive_presence WHERE workspace_id = ? AND expires_at > ?").get(workspaceId, now));
+function viewingProactiveCard(workspaceId, itemId, revision, now = Date.now()) {
+	return Boolean(getSqliteDatabase().prepare("SELECT 1 FROM proactive_presence WHERE workspace_id = ? AND inbox_item_id = ? AND notification_revision = ? AND expires_at > ?").get(workspaceId, itemId, revision, now));
 }
 //#endregion
-export { recordProactivePresence, viewingProactiveCards };
+export { recordProactivePresence, viewingProactiveCard };

package/dist/src/proactive/policy/service.d.ts

@@ -3,7 +3,7 @@ export declare class ProactiveConflict extends Error {
 }
 export declare function subscriptionSettings(id: string): {
     revision: number;
-    level: "off" | "active" | "quiet" | "balanced";
+    level: "active" | "quiet" | "balanced";
     delivery: "digest" | "inbox" | "important";
     completedAt: string;
     scanIntervalMinutes: number;
@@ -13,17 +13,17 @@ export declare function proactivePreferences(workspaceId: string): ProactivePref
 export declare function updateProactivePreferences(workspaceId: string, value: unknown): ProactivePreferences;
 export declare function effectiveProactivePolicy(subscriptionId: string, now?: Date): {
     enabled: boolean;
-    level: "off" | "active" | "quiet" | "balanced";
+    level: "active" | "quiet" | "balanced";
     settings: {
         revision: number;
-        level: "off" | "active" | "quiet" | "balanced";
+        level: "active" | "quiet" | "balanced";
         delivery: "digest" | "inbox" | "important";
         completedAt: string;
         scanIntervalMinutes: number;
         userInstructions: string;
     };
     preferences: {
-        level: "off" | "active" | "quiet" | "balanced";
+        level: "active" | "quiet" | "balanced";
         timezone: string;
         quietStartHour: number;
         quietEndHour: number;
@@ -38,7 +38,9 @@ export declare function effectiveProactivePolicy(subscriptionId: string, now?: D
             publicUrl: string;
             accountId?: string;
         };
-        pausedUntil: string;
+        checksPaused: boolean;
+        checksPausedUntil: string;
+        notificationsMuted: boolean;
         revision: number;
     };
     workspaceId: string;
@@ -49,3 +51,4 @@ export declare function quietHoursEnd(preferences: ProactivePreferences, now: Da
 /** Called in the same transaction as notification persistence. Reservations survive retries. */
 export declare function reserveProactiveNotification(subscriptionId: string, dedupeKey: string, now?: Date): 'allowed' | 'suppressed' | Date;
 export declare function nextDigestTime(preferences: ProactivePreferences, after: Date): Date;
+export declare function proactiveChecksAllowed(preferences: ProactivePreferences, now?: Date): boolean;

package/dist/src/proactive/policy/service.js

@@ -29,15 +29,12 @@ function updateProactivePreferences(workspaceId, value) {
 		if (next.preferredChannel === "telegram" && !next.telegram) throw new Error("Telegram destination is required");
 		db.prepare(`INSERT INTO proactive_preferences(workspace_id, preferences_json, revision) VALUES (?, ?, ?)
       ON CONFLICT(workspace_id) DO UPDATE SET preferences_json = excluded.preferences_json, revision = excluded.revision`).run(workspaceId, JSON.stringify(next), next.revision);
-		if (next.timezone !== current.timezone || next.digestHour !== current.digestHour || next.digestMinute !== current.digestMinute) db.prepare("UPDATE proactive_digest_queue SET due_at = ? WHERE workspace_id = ? AND mode = 'daily' AND consumed_at IS NULL").run(nextDigestTime(next, /* @__PURE__ */ new Date()).toISOString(), workspaceId);
-		if (next.level === "off") {
-			db.prepare("DELETE FROM proactive_digest_queue WHERE workspace_id = ?").run(workspaceId);
-			db.prepare(`UPDATE proactive_delivery_outbox SET status = 'delivered', error_message = 'proactive_disabled'
-        WHERE status IN ('pending', 'retryable') AND inbox_item_id IN (
-          SELECT i.inbox_item_id FROM proactive_inbox_items i JOIN proactive_insights x USING(insight_id)
-          JOIN proactive_scenario_subscriptions s USING(subscription_id) WHERE s.workspace_id = ?
-        )`).run(workspaceId);
+		if (proactiveChecksAllowed(current) && !proactiveChecksAllowed(next)) {
+			db.prepare(`UPDATE proactive_schedule_state SET last_fingerprint = NULL WHERE subscription_id IN
+        (SELECT subscription_id FROM proactive_scenario_subscriptions WHERE workspace_id = ?)`).run(workspaceId);
+			db.prepare("UPDATE proactive_follow_ups SET last_fingerprint = NULL WHERE workspace_id = ? AND status = 'watching'").run(workspaceId);
 		}
+		if (next.timezone !== current.timezone || next.digestHour !== current.digestHour || next.digestMinute !== current.digestMinute) db.prepare("UPDATE proactive_digest_queue SET due_at = ? WHERE workspace_id = ? AND mode = 'daily' AND consumed_at IS NULL").run(nextDigestTime(next, /* @__PURE__ */ new Date()).toISOString(), workspaceId);
 		return next;
 	});
 }
@@ -45,9 +42,9 @@ function effectiveProactivePolicy(subscriptionId, now = /* @__PURE__ */ new Date
 	const sub = getSqliteDatabase().prepare("SELECT workspace_id, enabled FROM proactive_scenario_subscriptions WHERE subscription_id = ?").get(subscriptionId);
 	const settings = subscriptionSettings(subscriptionId);
 	const preferences = proactivePreferences(sub?.workspace_id ?? "default");
-	const level = preferences.level === "off" ? "off" : settings.level ?? preferences.level;
+	const level = settings.level ?? preferences.level;
 	return {
-		enabled: Boolean(sub?.enabled) && !settings.completedAt && level !== "off" && !(preferences.pausedUntil && Date.parse(preferences.pausedUntil) > now.getTime()),
+		enabled: Boolean(sub?.enabled) && !settings.completedAt && proactiveChecksAllowed(preferences, now),
 		level,
 		settings,
 		preferences,
@@ -84,7 +81,7 @@ function quietHoursEnd(preferences, now) {
 function reserveProactiveNotification(subscriptionId, dedupeKey, now = /* @__PURE__ */ new Date()) {
 	return runSqliteWriteTransaction((db) => {
 		const policy = effectiveProactivePolicy(subscriptionId, now);
-		if (!policy.enabled) return "suppressed";
+		if (!policy.enabled || policy.preferences.notificationsMuted) return "suppressed";
 		if (policy.level === "quiet" || policy.settings.delivery === "inbox") return "suppressed";
 		const end = quietHoursEnd(policy.preferences, now);
 		if (end) return end;
@@ -116,5 +113,8 @@ function nextDigestTime(preferences, after) {
 	}
 	return new Date(after.getTime() + 864e5);
 }
+function proactiveChecksAllowed(preferences, now = /* @__PURE__ */ new Date()) {
+	return !preferences.checksPaused && !(preferences.checksPausedUntil && Date.parse(preferences.checksPausedUntil) > now.getTime());
+}
 //#endregion
-export { ProactiveConflict, effectiveProactivePolicy, localProactiveDay, nextDigestTime, proactivePreferences, quietHoursEnd, reserveProactiveNotification, subscriptionSettings, updateProactivePreferences };
+export { ProactiveConflict, effectiveProactivePolicy, localProactiveDay, nextDigestTime, proactiveChecksAllowed, proactivePreferences, quietHoursEnd, reserveProactiveNotification, subscriptionSettings, updateProactivePreferences };

package/dist/src/proactive/scenarios/control.d.ts

@@ -1,7 +1,7 @@
 export declare function requireSubscription(id: string, workspaceId: string): import("./types.js").ScenarioSubscription;
 export declare function controlledSubscriptions(workspaceId: string): {
     revision: number;
-    level: "off" | "active" | "quiet" | "balanced";
+    level: "active" | "quiet" | "balanced";
     delivery: "digest" | "inbox" | "important";
     completedAt: string;
     scanIntervalMinutes: number;
@@ -18,7 +18,7 @@ export declare function controlledSubscriptions(workspaceId: string): {
 }[];
 export declare function createControlledSubscription(workspaceId: string, value: unknown): {
     revision: number;
-    level: "off" | "active" | "quiet" | "balanced";
+    level: "active" | "quiet" | "balanced";
     delivery: "digest" | "inbox" | "important";
     completedAt: string;
     scanIntervalMinutes: number;
@@ -35,7 +35,7 @@ export declare function createControlledSubscription(workspaceId: string, value:
 };
 export declare function updateControlledSubscription(workspaceId: string, id: string, value: unknown): {
     revision: number;
-    level: "off" | "active" | "quiet" | "balanced";
+    level: "active" | "quiet" | "balanced";
     delivery: "digest" | "inbox" | "important";
     completedAt: string;
     scanIntervalMinutes: number;

package/dist/src/proactive/scenarios/control.js

@@ -18,8 +18,6 @@ function saveSettings(id, value, revision) {
 	const settings = ProactiveSubscriptionSettingsSchema.parse(value);
 	getSqliteDatabase().prepare(`INSERT INTO proactive_subscription_settings(subscription_id, settings_json, revision) VALUES (?, ?, ?)
     ON CONFLICT(subscription_id) DO UPDATE SET settings_json = excluded.settings_json, revision = excluded.revision`).run(id, JSON.stringify(settings), revision);
-	getSqliteDatabase().prepare(`INSERT INTO proactive_schedule_state(subscription_id, next_due_at) VALUES (?, ?)
-    ON CONFLICT(subscription_id) DO UPDATE SET next_due_at = excluded.next_due_at`).run(id, (/* @__PURE__ */ new Date()).toISOString());
 }
 function createControlledSubscription(workspaceId, value) {
 	const input = ProactiveSubscriptionCreateSchema.parse(value);
@@ -37,6 +35,7 @@ function createControlledSubscription(workspaceId, value) {
 		});
 		if (input.userInstructions || sub.activePromptRevisionId) publishPromptRevision(createPromptDraft(sub.id, input.userInstructions).id);
 		saveSettings(sub.id, input, 1);
+		if (scopeKind === "project") getSqliteDatabase().prepare("INSERT INTO proactive_schedule_state(subscription_id, next_due_at) VALUES (?, ?)").run(sub.id, (/* @__PURE__ */ new Date()).toISOString());
 		return controlledSubscriptions(workspaceId).find((item) => item.id === sub.id);
 	});
 }
@@ -55,6 +54,17 @@ function updateControlledSubscription(workspaceId, id, value) {
 			...current,
 			...patch
 		}, current.revision + 1);
+		if (sub.scopeKind === "project") {
+			const db = getSqliteDatabase();
+			const changedInstructions = patch.userInstructions !== void 0 && patch.userInstructions !== current.userInstructions;
+			const resumed = patch.enabled === true && !sub.enabled;
+			if (changedInstructions || resumed) db.prepare("UPDATE proactive_schedule_state SET next_due_at = ?, last_fingerprint = NULL WHERE subscription_id = ?").run((/* @__PURE__ */ new Date()).toISOString(), id);
+			else if (patch.scanIntervalMinutes !== void 0 && patch.scanIntervalMinutes !== current.scanIntervalMinutes) {
+				const schedule = db.prepare("SELECT last_checked_at FROM proactive_schedule_state WHERE subscription_id = ?").get(id);
+				const next = Math.max(Date.now(), schedule?.last_checked_at ? Date.parse(schedule.last_checked_at) + (patch.scanIntervalMinutes ?? 120) * 6e4 : Date.now());
+				db.prepare("UPDATE proactive_schedule_state SET next_due_at = ? WHERE subscription_id = ?").run(new Date(next).toISOString(), id);
+			}
+		}
 		return controlledSubscriptions(workspaceId).find((item) => item.id === id);
 	});
 }

package/dist/src/proactive/source-freshness.d.ts

@@ -0,0 +1,8 @@
+/** Only a successful pull of this collection proves its observed coverage. */
+export declare function sourceFreshness(itemId: string, notBefore?: string, now?: number): {
+    fresh: boolean;
+    lastSyncedAt: string;
+    syncFailed: boolean;
+    version: string;
+};
+export declare function evidenceSourcesFresh(ids: string[], context?: Record<string, unknown>): boolean;

package/dist/src/proactive/source-freshness.js

@@ -0,0 +1,27 @@
+import { getSqliteDatabase } from "../storage/sqlite/transaction.js";
+import { getKnowledgeSourceItem } from "../storage/sqlite/knowledge-repository.js";
+//#region src/proactive/source-freshness.ts
+const MAX_SOURCE_AGE_MS = 30 * 6e4;
+/** Only a successful pull of this collection proves its observed coverage. */
+function sourceFreshness(itemId, notBefore, now = Date.now()) {
+	const item = getKnowledgeSourceItem(itemId);
+	const row = item ? getSqliteDatabase().prepare(`SELECT run_id, status, started_at, finished_at FROM knowledge_sync_runs
+    WHERE source_instance_id = ? AND collection_scope = ? ORDER BY started_at DESC, rowid DESC LIMIT 1`).get(item.sourceInstanceId, item.collectionScope) : void 0;
+	const lastSuccess = item ? getSqliteDatabase().prepare("SELECT MAX(finished_at) AS at FROM knowledge_sync_runs WHERE source_instance_id = ? AND collection_scope = ? AND status = 'succeeded'").get(item.sourceInstanceId, item.collectionScope) : void 0;
+	return {
+		fresh: Boolean(row?.status === "succeeded" && row.finished_at && row.started_at <= now && now - row.started_at <= MAX_SOURCE_AGE_MS && (!notBefore || row.started_at >= Date.parse(notBefore))),
+		lastSyncedAt: lastSuccess?.at ? new Date(lastSuccess.at).toISOString() : null,
+		syncFailed: Boolean(row && [
+			"failed",
+			"partial",
+			"cancelled"
+		].includes(row.status)),
+		version: row?.run_id ?? "unknown"
+	};
+}
+function evidenceSourcesFresh(ids, context) {
+	const follow = context?.follow_up;
+	return ids.every((id) => !id.startsWith("source-item:") || sourceFreshness(id.slice(12), follow?.deadlinePassed ? follow.dueAt : void 0).fresh);
+}
+//#endregion
+export { evidenceSourcesFresh, sourceFreshness };

package/dist/src/proactive/status.d.ts

@@ -0,0 +1,2 @@
+import type { ProactiveCheckStatus } from '@xopcai/gateway-contract';
+export declare function followUpCheckStatus(subscriptionId: string, project: boolean): ProactiveCheckStatus;

package/dist/src/proactive/status.js

@@ -0,0 +1,21 @@
+import { getSqliteDatabase } from "../storage/sqlite/transaction.js";
+import { effectiveProactivePolicy } from "./policy/service.js";
+//#region src/proactive/status.ts
+function followUpCheckStatus(subscriptionId, project) {
+	const db = getSqliteDatabase();
+	const recent = db.prepare(`SELECT run_id AS id, status, outcome_reason AS outcome, started_at AS startedAt,
+    completed_at AS completedAt, next_attempt_at AS retryAt, attempt FROM proactive_runs
+    WHERE subscription_id = ? ORDER BY started_at DESC LIMIT 5`).all(subscriptionId);
+	const schedule = project ? db.prepare("SELECT last_checked_at, next_due_at FROM proactive_schedule_state WHERE subscription_id = ?").get(subscriptionId) : void 0;
+	const pending = db.prepare("SELECT status FROM proactive_signal_batches WHERE subscription_id = ? AND status IN ('collecting', 'ready', 'processing') ORDER BY created_at DESC LIMIT 1").get(subscriptionId);
+	const latest = recent[0];
+	const enabled = effectiveProactivePolicy(subscriptionId).enabled;
+	return {
+		health: !enabled ? "waiting" : pending?.status === "processing" ? "running" : pending ? "queued" : latest?.status === "retryable" ? "retrying" : latest?.status === "failed" || latest?.outcome === "source_unavailable" || latest?.outcome === "source_stale" ? "blocked" : "waiting",
+		recent,
+		lastCheckedAt: schedule?.last_checked_at ?? recent.find((run) => run.status === "completed")?.completedAt ?? null,
+		nextCheckAt: !enabled ? null : latest?.status === "retryable" ? latest.retryAt : schedule?.next_due_at ?? null
+	};
+}
+//#endregion
+export { followUpCheckStatus };

package/dist/src/proactive/temporal/worker.js

@@ -1,6 +1,7 @@
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
 import { listKnowledgeSourceItems } from "../../storage/sqlite/knowledge-repository.js";
+import { sourceFreshness } from "../source-freshness.js";
 import { authorizedConnectedSource } from "../execution/authorization.js";
 import { effectiveProactivePolicy } from "../policy/service.js";
 import { listSubscriptions } from "../scenarios/repository.js";
@@ -84,7 +85,7 @@ var ProactiveTemporalWorker = class {
 					const connectorId = metadataString(item.metadata, "connectorId");
 					const agentId = metadataString(item.metadata, "agentId");
 					const window = meetingWindow(item.occurredAt ? Date.parse(item.occurredAt) : NaN, nowMs);
-					if (!connectionId || !workspaceId || !activeWorkspaces.has(workspaceId) || !connectorId || !window || !isMeetingWorthPreparing(item.normalizedText) || !authorizedConnectedSource(item.id, workspaceId, MEETING_SCENARIO, agentId) || item.sensitivity === "secret" || item.sensitivity === "regulated") {
+					if (!connectionId || !workspaceId || !activeWorkspaces.has(workspaceId) || !connectorId || !window || !sourceFreshness(item.id, void 0, now.getTime()).fresh || !isMeetingWorthPreparing(item.normalizedText) || !authorizedConnectedSource(item.id, workspaceId, MEETING_SCENARIO, agentId) || item.sensitivity === "secret" || item.sensitivity === "regulated") {
 						result.skipped += 1;
 						continue;
 					}

package/dist/src/realtime/runtime.js

@@ -119,14 +119,38 @@ var RealtimeRuntime = class {
 			budgetHeld = false;
 			this.preauthBudget.release(clientIp);
 		};
+		const guardConnection = (phase, action) => {
+			try {
+				action();
+			} catch (err) {
+				const errorMessage = err instanceof Error ? err.message : String(err);
+				log.error({
+					err,
+					errorMessage,
+					phase,
+					connectionId,
+					endpointId,
+					principalId
+				}, `Realtime connection failed: ${errorMessage}`);
+				socket.terminate();
+			}
+		};
+		socket.on("error", (err) => {
+			log.warn({
+				err,
+				connectionId,
+				endpointId
+			}, `Realtime socket failed: ${err.message}`);
+			socket.terminate();
+		});
 		const helloTimer = setTimeout(() => socket.close(4401, "Realtime hello timeout"), REALTIME_HELLO_TIMEOUT_MS);
-		const heartbeatTimer = setInterval(() => {
+		const heartbeatTimer = setInterval(() => guardConnection("heartbeat", () => {
 			if (principalId && !this.isPrincipalActive(principalId)) {
 				socket.terminate();
 				return;
 			}
 			if (Date.now() - lastSeenAt > 45e3) socket.close(4408, "Realtime heartbeat timeout");
-		}, REALTIME_HEARTBEAT_INTERVAL_MS);
+		}), REALTIME_HEARTBEAT_INTERVAL_MS);
 		const sendError = (code, message) => {
 			writer.enqueue(serverMessage("realtime.error", {
 				code,
@@ -166,7 +190,7 @@ var RealtimeRuntime = class {
 			}
 			return true;
 		};
-		socket.on("message", (data, isBinary) => {
+		socket.on("message", (data, isBinary) => guardConnection("message", () => {
 			if (isBinary) {
 				socket.close(4400, "Binary realtime frames are not supported");
 				return;
@@ -267,7 +291,7 @@ var RealtimeRuntime = class {
 				}, "Realtime endpoint message failed");
 				socket.close(4400, "Invalid endpoint message");
 			}
-		});
+		}));
 		socket.on("close", (code, reasonBuffer) => {
 			clearTimeout(helloTimer);
 			clearInterval(heartbeatTimer);
@@ -275,7 +299,9 @@ var RealtimeRuntime = class {
 			writer.close();
 			for (const handle of subscriptions.values()) handle.unsubscribe();
 			subscriptions.clear();
-			if (endpointId && connectionId) this.endpointTools?.remove(endpointId, connectionId);
+			guardConnection("endpoint_remove", () => {
+				if (endpointId && connectionId) this.endpointTools?.remove(endpointId, connectionId);
+			});
 			if (principalId) {
 				const principalSockets = this.socketsByPrincipal.get(principalId);
 				principalSockets?.delete(socket);

package/dist/src/realtime/writer.js

@@ -67,16 +67,23 @@ var RealtimeSocketWriter = class {
 		const item = this.critical.shift() ?? this.normal.shift();
 		if (!item) return;
 		this.sending = true;
-		this.socket.send(item.data, (error) => {
+		try {
+			this.socket.send(item.data, (error) => {
+				if (this.closed) return;
+				this.sending = false;
+				this.queuedBytes -= item.bytes;
+				if (error) {
+					this.socket.close(1011, "Realtime delivery failed");
+					this.close();
+					return;
+				}
+				this.flush();
+			});
+		} catch {
 			this.sending = false;
-			this.queuedBytes -= item.bytes;
-			if (error) {
-				this.socket.close(1011, "Realtime delivery failed");
-				this.close();
-				return;
-			}
-			this.flush();
-		});
+			this.close();
+			this.socket.close(1011, "Realtime delivery failed");
+		}
 	}
 };
 //#endregion

package/dist/src/storage/sqlite/import-repository.d.ts

@@ -1,9 +1,8 @@
-import type { ImportJob, ImportPlan, ImportScan, ProductImportResult } from '../../imports/types.js';
+import type { ImportJob, ImportPlan, ImportScan } from '../../imports/types.js';
 type Records = {
     scan: ImportScan;
     plan: ImportPlan;
     job: ImportJob;
-    run: ProductImportResult;
 };
 export declare class ImportRepository {
     readonly owner: string;
@@ -11,9 +10,9 @@ export declare class ImportRepository {
     get<K extends keyof Records>(kind: K, id: string): Records[K];
     save<K extends keyof Records>(kind: K, value: Records[K], key?: string): void;
     byKey(key: string): ImportJob | undefined;
-    latestRuns(): ProductImportResult[];
     static owners(): string[];
     scansBefore(time: number): ImportScan[];
+    deleteScan(id: string): void;
     jobs(limit?: number): ImportJob[];
 }
 export {};