@xopcai/xopc 0.0.302 → 0.0.306

package/dist/src/agent/memory/manager.js

@@ -11,7 +11,10 @@ var MemoryManager = class {
 	loadProviders;
 	writePolicy;
 	pluginProvidersLoaded = false;
+	pluginProvidersPromise;
+	sessionInitializations = /* @__PURE__ */ new Map();
 	memoryRuntime;
+	searchTimeoutMs;
 	sessionContexts = /* @__PURE__ */ new Map();
 	constructor(options = {}) {
 		this.routing = {
@@ -21,6 +24,7 @@ var MemoryManager = class {
 		};
 		this.loadProviders = options.loadProviders;
 		this.memoryRuntime = options.memoryRuntime;
+		this.searchTimeoutMs = options.searchTimeoutMs ?? 2e3;
 		this.writePolicy = {
 			allowExternalWrites: options.writePolicy?.allowExternalWrites ?? false,
 			allowedProviderIds: options.writePolicy?.allowedProviderIds,
@@ -142,21 +146,29 @@ var MemoryManager = class {
 		return provider.handleToolCall(toolName, args);
 	}
 	async search(request) {
-		const providers = this.providersForSearch();
-		const results = [];
-		for (const p of providers) {
-			if (!p.capabilities.search || !p.search) continue;
+		return this.searchProviders(this.providersForSearch(), request);
+	}
+	async searchExternal(request) {
+		return this.searchProviders(this.providersForSearch().filter((provider) => !provider.capabilities.local), request);
+	}
+	async searchProviders(providers, request) {
+		const searchProvider = async (p) => {
+			if (!p.capabilities.search || !p.search) return [];
 			const started = Date.now();
 			try {
-				const providerResults = await p.search(request);
+				let timeout;
+				const providerResults = await Promise.race([p.search(request), new Promise((_resolve, reject) => {
+					timeout = setTimeout(() => reject(/* @__PURE__ */ new Error(`Memory search timed out after ${this.searchTimeoutMs}ms`)), this.searchTimeoutMs);
+				})]).finally(() => {
+					if (timeout) clearTimeout(timeout);
+				});
 				this.trace("search", p.id, request, {
 					resultCount: providerResults.length,
 					selectedRecordIds: providerResults.map((result) => result.record.id),
 					durationMs: Date.now() - started,
 					conversationId: request.scope?.conversationId
 				});
-				results.push(...providerResults);
-				if (providerResults.length > 0 && this.routing.searchStrategy !== "fanout") break;
+				return providerResults;
 			} catch (err) {
 				this.trace("search", p.id, request, {
 					error: err instanceof Error ? err.message : String(err),
@@ -167,7 +179,16 @@ var MemoryManager = class {
 					err,
 					id: p.id
 				}, "memory search failed");
+				return [];
 			}
+		};
+		const searchable = providers.filter((provider) => provider.capabilities.search && provider.search);
+		const results = [];
+		if (this.routing.searchStrategy === "fanout") results.push(...(await Promise.all(searchable.map(searchProvider))).flat());
+		else for (const provider of searchable) {
+			const providerResults = await searchProvider(provider);
+			results.push(...providerResults);
+			if (providerResults.length > 0) break;
 		}
 		const seen = /* @__PURE__ */ new Set();
 		return results.sort((a, b) => b.score - a.score).filter((result) => this.canReadRecord(result.record, request.scope)).filter((result) => !request.trustedOnly || (result.record.provenance?.originClass === "owner" || result.record.provenance?.originClass === "agent") && result.record.provenance?.derivedFromRecalledContext === false).filter((result) => {
@@ -245,12 +266,14 @@ var MemoryManager = class {
 		return this.writeWithStrategy("delete", request);
 	}
 	canReadRecord(record, scope) {
-		if (record.providerId !== "local") return true;
-		if (this.memoryRuntime && !this.memoryRuntime.canRead(memorySourceForRecord(record))) return false;
+		if (this.memoryRuntime) {
+			const { scope, source } = memoryAccessForRecord(record);
+			if (!this.memoryRuntime.canRead(scope, source)) return false;
+		}
 		if (record.scope.userId && scope?.userId && record.scope.userId !== scope.userId) return false;
-		if (record.scope.conversationId && record.scope.conversationId !== scope?.conversationId) return false;
-		if (record.scope.projectId && record.scope.projectId !== scope?.projectId) return false;
-		if (record.scope.workspaceId && record.scope.workspaceId !== scope?.workspaceId) return false;
+		if (record.scope.conversationId && scope?.conversationId && record.scope.conversationId !== scope.conversationId) return false;
+		if (record.scope.projectId && scope?.projectId && record.scope.projectId !== scope.projectId) return false;
+		if (record.scope.workspaceId && scope?.workspaceId && record.scope.workspaceId !== scope.workspaceId) return false;
 		return true;
 	}
 	recordSignal(signal) {
@@ -286,36 +309,48 @@ var MemoryManager = class {
 	}
 	async initializeAll(sessionId, options) {
 		if (options) this.sessionContexts.set(sessionId, { ...options });
-		await this.loadPluginProvidersOnce();
-		for (const p of this.providers) try {
-			await p.initialize(sessionId, options);
-		} catch (err) {
-			log.warn({
-				err,
-				id: p.id
-			}, "initialize failed");
-		}
+		const existing = this.sessionInitializations.get(sessionId);
+		if (existing) return existing;
+		const initialization = (async () => {
+			await this.loadPluginProvidersOnce();
+			for (const p of this.providers) try {
+				await p.initialize(sessionId, options);
+			} catch (err) {
+				log.warn({
+					err,
+					id: p.id,
+					sessionId
+				}, "Memory provider initialization failed");
+			}
+		})();
+		this.sessionInitializations.set(sessionId, initialization);
+		return initialization;
 	}
 	async loadPluginProvidersOnce() {
 		if (this.pluginProvidersLoaded || !this.loadProviders) return;
-		this.pluginProvidersLoaded = true;
-		try {
-			const providers = await this.loadProviders();
-			const existingIds = new Set(this.providers.map((p) => p.id));
-			for (const provider of providers) {
-				if (existingIds.has(provider.id)) {
-					log.warn({ id: provider.id }, "Skipped duplicate memory provider");
-					continue;
+		if (!this.pluginProvidersPromise) this.pluginProvidersPromise = (async () => {
+			try {
+				const providers = await this.loadProviders();
+				const existingIds = new Set(this.providers.map((p) => p.id));
+				for (const provider of providers) {
+					if (existingIds.has(provider.id)) {
+						log.warn({ id: provider.id }, "Skipped duplicate memory provider");
+						continue;
+					}
+					this.addProvider(provider);
+					existingIds.add(provider.id);
 				}
-				this.addProvider(provider);
-				existingIds.add(provider.id);
+			} catch (err) {
+				log.warn({ err }, "Memory provider plugin loading failed");
+			} finally {
+				this.pluginProvidersLoaded = true;
 			}
-		} catch (err) {
-			log.warn({ err }, "Memory provider plugin loading failed");
-		}
+		})();
+		await this.pluginProvidersPromise;
 	}
 	async shutdownAll() {
 		this.sessionContexts.clear();
+		this.sessionInitializations.clear();
 		for (const p of [...this.providers].reverse()) try {
 			await p.shutdown();
 		} catch (err) {
@@ -425,11 +460,11 @@ var MemoryManager = class {
 		}, "External memory provider operation");
 	}
 };
-function memorySourceForRecord(record) {
-	if (record.source.provider !== "builtin") return "connector";
-	if (record.scope.conversationId) return "session";
-	if (record.scope.projectId) return "project";
-	return "workspace";
+function memoryAccessForRecord(record) {
+	return {
+		scope: record.scope.conversationId ? "session" : record.scope.projectId ? "project" : record.scope.workspaceId ? "workspace" : "global",
+		source: record.source.provider === "builtin" ? "memory" : "connector"
+	};
 }
 function writeTargetForRecord(_request) {
 	return "knowledge";

package/dist/src/agent/memory/runtime.d.ts

@@ -1,5 +1,5 @@
 import type { UserContextConfig } from '../../user-context/config.js';
-export type MemorySource = 'session' | 'workspace' | 'project' | 'connector';
+import type { KnowledgeContentSource, KnowledgeReadPolicy, KnowledgeVisibilityScope } from '../../knowledge-memory/domain.js';
 export type MemoryWriteTarget = 'knowledge';
 export type MemoryWriteDecision = 'allow' | 'confirm' | 'deny';
 export interface MemoryCandidate {
@@ -14,8 +14,8 @@ export interface MemoryWriteCheckResult {
     reason: string;
 }
 export interface MemoryRuntime {
-    readableSources: MemorySource[];
-    canRead: (source: MemorySource) => boolean;
+    readPolicy: KnowledgeReadPolicy;
+    canRead: (scope: KnowledgeVisibilityScope, source: KnowledgeContentSource) => boolean;
     checkWrite: (candidate: MemoryCandidate) => MemoryWriteCheckResult;
 }
 export declare function buildMemoryRuntime(userContext: UserContextConfig): MemoryRuntime;

package/dist/src/agent/memory/runtime.js

@@ -5,11 +5,18 @@ function normalizeConfidence(value) {
 }
 function buildMemoryRuntime(userContext) {
 	const memory = userContext.knowledgeMemory;
-	const readableSources = !userContext.enabled || !memory.enabled ? [] : [...memory.sources];
-	const sourceSet = new Set(readableSources);
+	const readPolicy = !userContext.enabled || !memory.enabled ? {
+		scopes: [],
+		contentSources: []
+	} : {
+		scopes: memory.readScopes,
+		contentSources: memory.contentSources
+	};
+	const scopes = new Set(readPolicy.scopes);
+	const contentSources = new Set(readPolicy.contentSources);
 	return {
-		readableSources,
-		canRead: (source) => sourceSet.has(source),
+		readPolicy,
+		canRead: (scope, source) => scopes.has(scope) && contentSources.has(source),
 		checkWrite: (candidate) => {
 			if (!userContext.enabled || !memory.enabled) return {
 				decision: "deny",

package/dist/src/agent/orchestration/agent-orchestrator.js

@@ -71,6 +71,7 @@ var AgentOrchestrator = class {
 			await this.sessionHydrator.model(conversationId);
 			const channelSystemPrompt = typeof context.metadata?.channelSystemPrompt === "string" ? context.metadata.channelSystemPrompt.trim() : "";
 			if (channelSystemPrompt) {
+				await this.agentManager.ensureMemoryReadyForSession?.(conversationId);
 				this.agentManager.getOrCreateAgent(conversationId);
 				this.agentManager.applyTurnChannelSystemPrompt(conversationId, channelSystemPrompt);
 			}
@@ -90,7 +91,8 @@ var AgentOrchestrator = class {
 			setPendingTranscriptUserMessage(conversationId, userMessage);
 			const userPlainForMemory = extractAgentUserPlainText(userMessage);
 			const turnId = randomUUID();
-			const userMessageForModel = (await this.agentManager.prepareUserTurnContext(userMessage, conversationId, turnId)).modelMessage;
+			const userContext = await this.agentManager.prepareUserTurnContext(userMessage, conversationId, turnId);
+			const userMessageForModel = userMessage;
 			const llmTurn = await hydrateUserTurnForLlm({
 				message: userMessage,
 				modelRef
@@ -101,6 +103,7 @@ var AgentOrchestrator = class {
 						conversationId,
 						runId: turnId,
 						userMessage: userMessageForModel,
+						dynamicSystemContext: userContext.dynamicSystemContext,
 						llmImages: llmTurn.images,
 						sessionStore: this.sessionStore,
 						agentManager: this.agentManager,

package/dist/src/agent/prompt/cache-boundary.d.ts

@@ -24,3 +24,5 @@ export declare function splitPromptCacheBoundary(text: string): {
 export declare function normalizePromptSection(text: string): string;
 /** Add stable content immediately before the cache boundary. */
 export declare function appendStablePromptSection(systemPrompt: string, section: string): string;
+/** Add per-turn context after the cache boundary so the stable prefix remains reusable. */
+export declare function appendDynamicPromptSection(systemPrompt: string, section: string): string;

package/dist/src/agent/prompt/cache-boundary.js

@@ -40,5 +40,14 @@ function appendStablePromptSection(systemPrompt, section) {
 	const stablePrefix = [split.stablePrefix, normalizedSection].filter(Boolean).join("\n\n");
 	return split.dynamicSuffix ? `${stablePrefix}${PROMPT_CACHE_BOUNDARY}${split.dynamicSuffix}` : `${stablePrefix}${PROMPT_CACHE_BOUNDARY}`;
 }
+/** Add per-turn context after the cache boundary so the stable prefix remains reusable. */
+function appendDynamicPromptSection(systemPrompt, section) {
+	const normalizedSection = normalizePromptSection(section);
+	if (!normalizedSection) return systemPrompt;
+	const split = splitPromptCacheBoundary(systemPrompt);
+	if (!split) return `${normalizePromptSection(systemPrompt)}${PROMPT_CACHE_BOUNDARY}${normalizedSection}`;
+	const dynamicSuffix = [split.dynamicSuffix, normalizedSection].filter(Boolean).join("\n\n");
+	return `${split.stablePrefix}${PROMPT_CACHE_BOUNDARY}${dynamicSuffix}`;
+}
 //#endregion
-export { PROMPT_CACHE_BOUNDARY, appendStablePromptSection, normalizePromptSection, splitPromptCacheBoundary, stripPromptCacheBoundary };
+export { PROMPT_CACHE_BOUNDARY, appendDynamicPromptSection, appendStablePromptSection, normalizePromptSection, splitPromptCacheBoundary, stripPromptCacheBoundary };

package/dist/src/agent/service/build-direct-message-content.d.ts

@@ -11,4 +11,5 @@ export declare function buildDirectUserMessageContent(opts: {
     config: Config;
     agentManager: AgentInstanceGateway;
     modelManager: ModelManager;
+    suppressMediaPromptUris?: ReadonlySet<string>;
 }): Promise<import("../inbound/attachment-pipeline.js").TranscriptUserMessage>;

package/dist/src/agent/service/build-direct-message-content.js

@@ -13,7 +13,8 @@ async function buildDirectUserMessageContent(opts) {
 		conversationId: sk,
 		modelRef: modelRef || getDefaultModelSync(opts.config),
 		config: opts.config,
-		agentManager: opts.agentManager
+		agentManager: opts.agentManager,
+		suppressMediaPromptUris: opts.suppressMediaPromptUris
 	});
 }
 //#endregion

package/dist/src/agent/service/direct-turn-helpers.js

@@ -3,7 +3,6 @@ import { getConnectionResumeInput, init_connection_wait_repository } from "../..
 import { resolveImageHandlingStrategy } from "../image/vision-detection.js";
 import { hydrateUserTurnForLlm } from "../inbound/attachment-pipeline.js";
 import { buildTaskExecutionDirective } from "../../tasks/task-context-assembler.js";
-import { prependAgentContext } from "../context/prepend.js";
 import { extractAgentUserPlainText } from "../memory/user-message-text.js";
 import { shouldSkipResetOverlapCommand } from "../../session/reset-triggers.js";
 import { parseSlashCommand } from "../../chat-commands/command-parse.js";
@@ -11,6 +10,7 @@ import { commandRegistry } from "../../chat-commands/registry.js";
 import "../../chat-commands/index.js";
 import { runEmbeddedTurnForSession } from "../embedded/run-for-session.js";
 import { injectSourceContextsIntoUserMessage } from "../source-context/injector.js";
+import { prependAgentContext } from "../context/prepend.js";
 import crypto from "node:crypto";
 //#region src/agent/service/direct-turn-helpers.ts
 /**
@@ -101,7 +101,7 @@ async function runDirectAgentTurn(deps, input) {
 	const userPlain = extractAgentUserPlainText(input.userMessage);
 	const userContext = await deps.agentManager.prepareUserTurnContext(input.userMessage, input.conversationId, turnId);
 	const sourceContexts = input.sourceContexts ?? [];
-	const userMessageForModel = prependAgentContext(injectSourceContextsIntoUserMessage(userContext.modelMessage, sourceContexts), buildTaskExecutionDirective(input.conversationId));
+	const userMessageForModel = prependAgentContext(injectSourceContextsIntoUserMessage(input.userMessage, sourceContexts), buildTaskExecutionDirective(input.conversationId));
 	const modelRef = deps.modelManager.getModelForSession(input.conversationId);
 	const llmTurn = await hydrateUserTurnForLlm({
 		message: input.userMessage,
@@ -114,6 +114,7 @@ async function runDirectAgentTurn(deps, input) {
 		conversationId: input.conversationId,
 		runId: turnId,
 		userMessage: userMessageForModel,
+		dynamicSystemContext: userContext.dynamicSystemContext,
 		llmImages,
 		presentation: input.presentation,
 		sessionStore: deps.sessionStore,

package/dist/src/agent/service/process-direct-streaming.d.ts

@@ -36,7 +36,9 @@ export interface ProcessDirectStreamingDeps {
     sessionConfigStore: SessionConfigStore;
     commandHandler: Pick<CommandHandler, 'executeCommandAndAggregateReply'>;
     prepareInboundAttachments: (conversationId: string, attachments?: DirectStreamInboundAttachment[]) => Promise<MediaRef[] | undefined>;
-    buildTranscriptUserMessage: (content: string, prepared: MediaRef[] | undefined, conversationId: string) => Promise<TranscriptUserMessage>;
+    buildTranscriptUserMessage: (content: string, prepared: MediaRef[] | undefined, conversationId: string, options?: {
+        suppressMediaPromptUris?: ReadonlySet<string>;
+    }) => Promise<TranscriptUserMessage>;
     recordTaskReviewStreamHint?: (conversationId: string, task: {
         skipTaskReview: boolean;
     }) => void;

package/dist/src/agent/service/process-direct-streaming.js

@@ -11,7 +11,7 @@ import { initSessionTurn } from "../../session/init-session-turn.js";
 import "../../session/index.js";
 import { mergeSttConfigFromAppConfig } from "../../voice/stt/config.js";
 import "../../voice/stt/index.js";
-import { isVoiceLikeAttachment, mergeVoiceTranscriptsIntoUserText } from "../../channels/attachments/voice-stt-webchat.js";
+import { isVoiceLikeAttachment, mergeVoiceTranscriptsIntoUserText, requestsOriginalVoiceInspection } from "../../channels/attachments/voice-stt-webchat.js";
 import { applyReasoningVisibility } from "../streaming/reasoning-visibility.js";
 import { isSessionSourceBinding, summarizeSourceContext } from "../source-context/types.js";
 import { injectSourceContextsIntoUserMessage } from "../source-context/injector.js";
@@ -207,6 +207,7 @@ async function* runProcessDirectStreaming(deps, input) {
 			const voiceMerge = await mergeVoiceTranscriptsIntoUserText(prepared, turnBody, sttCfg);
 			mergedUserText = voiceMerge.text;
 			inboundVoice = voiceMerge.inboundVoice;
+			const suppressMediaPromptUris = requestsOriginalVoiceInspection(mergedUserText) ? void 0 : new Set(voiceMerge.transcribedMediaUris ?? []);
 			if (inboundVoice) {
 				const transcriptParts = [voiceMerge.voiceTranscripts.filter(Boolean).join("\n"), turnBody.trim()].filter(Boolean);
 				const voiceMedia = (prepared ?? []).filter(isVoiceLikeAttachment).map((att) => ({
@@ -275,7 +276,7 @@ async function* runProcessDirectStreaming(deps, input) {
 			}
 			const skillTurn = deps.agentManager.prepareSkillTurn(conversationId, mergedUserText);
 			const textForAgent = skillTurn.text;
-			const userMessage = await deps.buildTranscriptUserMessage(textForAgent, prepared, conversationId);
+			const userMessage = await deps.buildTranscriptUserMessage(textForAgent, prepared, conversationId, { suppressMediaPromptUris });
 			const sourceContexts = [...input.sourceContexts ?? []];
 			if (deps.sourceContextResolver) {
 				const metadata = await deps.sessionStore.getMetadata(conversationId).catch(() => null);

package/dist/src/agent/service/webchat-tts.d.ts

@@ -1,6 +1,4 @@
 import type { Config } from '../../config/schema.js';
-import type { MediaRef } from '../../media/types.js';
-import type { SessionStore } from '../../session/index.js';
 export type WebchatTtsResult = {
     type: 'tts_audio';
     uri: string;
@@ -9,7 +7,6 @@ export type WebchatTtsResult = {
 };
 export type WebchatTtsDeps = {
     config: Config | undefined;
-    sessionStore: SessionStore;
     getLastAssistantPlainText: (conversationId: string) => string;
     log: {
         warn: (obj: Record<string, unknown>, msg: string) => void;
@@ -21,4 +18,3 @@ export declare function isSuccessfulWebchatTtsToolEvent(event: unknown): boolean
  * Generate TTS for webchat when config allows; persist under `{stateDir}/media/tts/`.
  */
 export declare function maybeEmitWebchatTts(deps: WebchatTtsDeps, conversationId: string, hadInboundVoice: boolean): Promise<WebchatTtsResult | null>;
-export declare function appendMediaToLastAssistant(sessionStore: SessionStore, conversationId: string, ref: MediaRef): Promise<void>;

package/dist/src/agent/service/webchat-tts.js

@@ -1,3 +1,5 @@
+import { appendMediaToAssistantTranscriptEntry, findLatestAssistantTranscriptEntryId } from "../../storage/sqlite/transcript-repository.js";
+import "../../storage/sqlite/index.js";
 import { isTTSAvailable } from "../../voice/tts/factory.js";
 import { speak } from "../../voice/tts/speak-core.js";
 import { mergeTtsConfigFromAppConfig } from "../../voice/tts/merge-config.js";
@@ -5,6 +7,7 @@ import { getChannelOutputFormat, shouldUseTTS } from "../../voice/tts/service.js
 import { compressAudio } from "../../voice/tts/audio.js";
 import { persistOutboundTtsAudio } from "../../channels/attachments/outbound-tts-persist.js";
 import "../../voice/tts/index.js";
+import { deleteMediaUris } from "../../media/session-references.js";
 //#region src/agent/service/webchat-tts.ts
 /** True when the explicit TTS tool already produced durable Webchat audio. */
 function isSuccessfulWebchatTtsToolEvent(event) {
@@ -28,6 +31,12 @@ async function maybeEmitWebchatTts(deps, conversationId, hadInboundVoice) {
 	if (!shouldUseTTS(ttsConfig, hadInboundVoice).useTTS) return null;
 	const text = deps.getLastAssistantPlainText(conversationId).trim();
 	if (!text) return null;
+	const assistantEntryId = findLatestAssistantTranscriptEntryId(conversationId);
+	if (!assistantEntryId) {
+		deps.log.warn({ conversationId }, "Webchat TTS skipped because the assistant transcript is unavailable");
+		return null;
+	}
+	let persisted;
 	try {
 		const webOut = getChannelOutputFormat("webchat");
 		const fmt = webOut.format;
@@ -37,8 +46,15 @@ async function maybeEmitWebchatTts(deps, conversationId, hadInboundVoice) {
 		});
 		const { buffer, format } = await compressAudio(Buffer.from(ttsResult.audio), ttsResult.format, webOut.format === "mp3" ? "mp3" : "opus");
 		const normalizedMime = format === "opus" || format === "ogg" ? "audio/ogg" : format === "mp3" || format === "mpeg" ? "audio/mpeg" : format === "wav" ? "audio/wav" : `audio/${format}`;
-		const persisted = await persistOutboundTtsAudio(buffer, format);
-		await appendMediaToLastAssistant(deps.sessionStore, conversationId, persisted);
+		persisted = await persistOutboundTtsAudio(buffer, format);
+		if (!appendMediaToAssistantTranscriptEntry(conversationId, assistantEntryId, persisted)) {
+			await deleteMediaUris([persisted.uri]);
+			deps.log.warn({
+				conversationId,
+				assistantEntryId
+			}, "Webchat TTS discarded because its assistant transcript changed");
+			return null;
+		}
 		return {
 			type: "tts_audio",
 			uri: persisted.uri,
@@ -46,6 +62,7 @@ async function maybeEmitWebchatTts(deps, conversationId, hadInboundVoice) {
 			name: persisted.name
 		};
 	} catch (err) {
+		if (persisted) await deleteMediaUris([persisted.uri]);
 		deps.log.warn({
 			err,
 			conversationId
@@ -53,21 +70,5 @@ async function maybeEmitWebchatTts(deps, conversationId, hadInboundVoice) {
 		return null;
 	}
 }
-async function appendMediaToLastAssistant(sessionStore, conversationId, ref) {
-	const loaded = await sessionStore.load(conversationId);
-	for (let i = loaded.length - 1; i >= 0; i--) {
-		const m = loaded[i];
-		if (m.role === "assistant") {
-			const prev = m.media ?? [];
-			if (prev.some((x) => x.uri === ref.uri)) return;
-			loaded[i] = {
-				...m,
-				media: [...prev, ref]
-			};
-			await sessionStore.saveMessages(conversationId, loaded);
-			return;
-		}
-	}
-}
 //#endregion
-export { appendMediaToLastAssistant, isSuccessfulWebchatTtsToolEvent, maybeEmitWebchatTts };
+export { isSuccessfulWebchatTtsToolEvent, maybeEmitWebchatTts };

package/dist/src/agent/tools/factory.js

@@ -389,7 +389,7 @@ var AgentToolsFactory = class AgentToolsFactory {
 				canRead: () => currentAccess().knowledge,
 				canWrite: () => currentAccess().knowledge,
 				getWritePolicy: knowledgeWritePolicy,
-				getSources: () => currentAccess().knowledgeSources
+				getReadPolicy: () => currentAccess().knowledgePolicy
 			}),
 			createKnowledgeGetTool({
 				agentId: resolvedAgentId,
@@ -399,7 +399,7 @@ var AgentToolsFactory = class AgentToolsFactory {
 				canRead: () => currentAccess().knowledge,
 				canWrite: () => currentAccess().knowledge,
 				getWritePolicy: knowledgeWritePolicy,
-				getSources: () => currentAccess().knowledgeSources
+				getReadPolicy: () => currentAccess().knowledgePolicy
 			}),
 			createKnowledgeWriteTool({
 				agentId: resolvedAgentId,
@@ -409,7 +409,7 @@ var AgentToolsFactory = class AgentToolsFactory {
 				canRead: () => currentAccess().knowledge,
 				canWrite: () => currentAccess().knowledge,
 				getWritePolicy: knowledgeWritePolicy,
-				getSources: () => currentAccess().knowledgeSources
+				getReadPolicy: () => currentAccess().knowledgePolicy
 			}),
 			...this.deps.getSessionStore ? [createSessionRecallTool({
 				getSessionStore: this.deps.getSessionStore,

package/dist/src/agent/tools/knowledge-memory-tool.d.ts

@@ -1,5 +1,5 @@
 import type { AgentTool } from '@earendil-works/pi-agent-core';
-import { type KnowledgeSource } from '../../knowledge-memory/index.js';
+import { type KnowledgeReadPolicy } from '../../knowledge-memory/index.js';
 export interface KnowledgeToolOptions {
     agentId: string;
     workspaceId: string;
@@ -8,7 +8,7 @@ export interface KnowledgeToolOptions {
     canRead: () => boolean;
     canWrite: () => boolean;
     getWritePolicy: () => 'deny' | 'confirm' | 'allow';
-    getSources: () => readonly KnowledgeSource[];
+    getReadPolicy: () => KnowledgeReadPolicy;
 }
 export declare function createKnowledgeSearchTool(options: KnowledgeToolOptions): AgentTool;
 export declare function createKnowledgeGetTool(options: KnowledgeToolOptions): AgentTool;

package/dist/src/agent/tools/knowledge-memory-tool.js

@@ -1,4 +1,4 @@
-import { getKnowledgeItem, knowledgeSourceAllowed, searchKnowledgeItems, writeKnowledgeItem } from "../../knowledge-memory/repository.js";
+import { getKnowledgeItem, knowledgeItemAllowed, searchKnowledgeItems, writeKnowledgeItem } from "../../knowledge-memory/repository.js";
 import "../../knowledge-memory/index.js";
 import { Type } from "@sinclair/typebox";
 //#region src/agent/tools/knowledge-memory-tool.ts
@@ -60,7 +60,7 @@ function createKnowledgeSearchTool(options) {
 			const results = searchKnowledgeItems({
 				query: input.query,
 				context: visibility(options),
-				sources: options.getSources(),
+				policy: options.getReadPolicy(),
 				limit: input.maxResults ?? 12
 			});
 			return {
@@ -92,7 +92,7 @@ function createKnowledgeGetTool(options) {
 			};
 			const id = raw.id;
 			const item = getKnowledgeItem(id);
-			return item && visibleItem(options, item) && knowledgeSourceAllowed(item, options.getSources()) ? {
+			return item && visibleItem(options, item) && knowledgeItemAllowed(item, options.getReadPolicy()) ? {
 				content: [{
 					type: "text",
 					text: JSON.stringify(item, null, 2)
@@ -131,14 +131,14 @@ function createKnowledgeWriteTool(options) {
 				details: { error: "knowledge_write_denied" }
 			};
 			const input = raw;
-			if (!options.getSources().includes(input.scope)) return {
+			if (!options.getReadPolicy().scopes.includes(input.scope) || !options.getReadPolicy().contentSources.includes("memory")) return {
 				content: [{
 					type: "text",
-					text: `Knowledge source is disabled: ${input.scope}`
+					text: `Knowledge memory writes are disabled for scope: ${input.scope}`
 				}],
 				details: {
-					error: "knowledge_source_disabled",
-					source: input.scope
+					error: "knowledge_scope_disabled",
+					scope: input.scope
 				}
 			};
 			const sessionId = options.getSessionId();

package/dist/src/browser/native-messaging-host.js

@@ -1,5 +1,5 @@
 import { closeXopcDatabase, init_connection, openXopcDatabase } from "../storage/sqlite/connection.js";
-import { devicePairingInvitationPayloadSchema, formatBrowserPairingInvitation } from "../../packages/gateway-contract/src/device-pairing.js";
+import { browserPairingInvitationPayloadSchema, formatBrowserPairingInvitation } from "../../packages/gateway-contract/src/device-pairing.js";
 import { init_src } from "../../packages/gateway-contract/src/index.js";
 import { getGatewayIdentityPublicKeyRaw, getOrCreateGatewayIdentity } from "../storage/sqlite/gateway-identity-repository.js";
 import { createDevicePairingSetup } from "../storage/sqlite/device-pairing-repository.js";
@@ -53,7 +53,7 @@ function createBrowserNativeBootstrap(configPath, request) {
 		return {
 			ok: true,
 			gatewayUrl,
-			invitation: formatBrowserPairingInvitation(Buffer.from(JSON.stringify(devicePairingInvitationPayloadSchema.parse({
+			invitation: formatBrowserPairingInvitation(Buffer.from(JSON.stringify(browserPairingInvitationPayloadSchema.parse({
 				version: 3,
 				pairingToken: setup.token,
 				gatewayId: identity.id,

package/dist/src/channels/attachments/voice-stt-webchat.d.ts

@@ -4,10 +4,13 @@
 import type { STTConfig } from '../../voice/stt/types.js';
 import { type InboundAttachmentInput, type MediaRef } from './inbound-persist.js';
 export declare function isVoiceLikeAttachment(att: InboundAttachmentInput | MediaRef): boolean;
+/** True when the user explicitly asks the agent to inspect the original recording. */
+export declare function requestsOriginalVoiceInspection(text: string): boolean;
 export declare function mergeVoiceTranscriptsIntoUserText(prepared: (InboundAttachmentInput | MediaRef)[] | undefined, userText: string, sttConfig: STTConfig, opts?: {
     skipVoiceTranscription?: boolean;
 }): Promise<{
     text: string;
     inboundVoice: boolean;
     voiceTranscripts: string[];
+    transcribedMediaUris: string[];
 }>;