@xopcai/xopc 0.0.302 → 0.0.306

package/dist/src/process/run-process.js

@@ -0,0 +1,97 @@
+import { createBoundedOutput } from "./bounded-output.js";
+import { terminateProcess } from "./kill-tree.js";
+import { ProcessExitError } from "./process-spec.js";
+import { spawn } from "node:child_process";
+//#region src/process/run-process.ts
+const DEFAULT_MAX_OUTPUT_BYTES = 1024 * 1024;
+function spawnProcess(spec) {
+	spec.signal?.throwIfAborted();
+	const detached = spec.detached ?? (spec.terminationPolicy === "tree" && process.platform !== "win32");
+	const child = spawn(spec.program, [...spec.args ?? []], {
+		cwd: spec.cwd,
+		env: spec.env ?? process.env,
+		stdio: [
+			"pipe",
+			"pipe",
+			"pipe"
+		],
+		detached,
+		windowsHide: spec.windowsHide ?? true,
+		shell: spec.shell ?? false
+	});
+	const stdout = createBoundedOutput(spec.maxOutputBytes ?? DEFAULT_MAX_OUTPUT_BYTES);
+	const stderr = createBoundedOutput(spec.maxOutputBytes ?? DEFAULT_MAX_OUTPUT_BYTES);
+	let timedOut = false;
+	let aborted = false;
+	let terminationRequested = false;
+	let settled = false;
+	let timer;
+	const terminate = (reason = "cancelled") => {
+		if (settled || terminationRequested) return;
+		terminationRequested = true;
+		timedOut = reason === "timed_out";
+		aborted = reason === "cancelled";
+		terminateProcess(child, {
+			tree: spec.terminationPolicy === "tree",
+			detached
+		});
+	};
+	const abort = () => terminate("cancelled");
+	spec.signal?.addEventListener("abort", abort, { once: true });
+	if (spec.signal?.aborted) abort();
+	if (spec.timeoutMs != null && spec.timeoutMs > 0) {
+		timer = setTimeout(() => terminate("timed_out"), spec.timeoutMs);
+		timer.unref();
+	}
+	child.stdout?.on("data", (chunk) => {
+		stdout.append(chunk);
+		spec.onOutput?.("stdout", chunk);
+	});
+	child.stderr?.on("data", (chunk) => {
+		stderr.append(chunk);
+		spec.onOutput?.("stderr", chunk);
+	});
+	child.stdin?.on("error", (error) => stderr.append(error.message));
+	if (spec.input !== void 0) child.stdin?.end(spec.input);
+	else if (!spec.keepStdinOpen) child.stdin?.end();
+	return {
+		child,
+		completion: new Promise((resolve) => {
+			let spawnError;
+			child.once("error", (error) => {
+				spawnError = error;
+			});
+			child.once("close", (exitCode, signal) => {
+				if (settled) return;
+				settled = true;
+				if (timer) clearTimeout(timer);
+				spec.signal?.removeEventListener("abort", abort);
+				if (spawnError && stderr.snapshot().totalBytes === 0) stderr.append(spawnError.message);
+				const out = stdout.snapshot();
+				const err = stderr.snapshot();
+				resolve({
+					exitCode: spawnError ? null : exitCode,
+					...spawnError && spawnError.code ? { spawnErrorCode: spawnError.code } : {},
+					signal,
+					stdout: out.text,
+					stderr: err.text,
+					timedOut,
+					aborted,
+					outputTruncated: out.truncated || err.truncated,
+					terminationVerified: !terminationRequested || child.exitCode !== null || child.signalCode !== null
+				});
+			});
+		}),
+		terminate
+	};
+}
+function runProcess(spec) {
+	return spawnProcess(spec).completion;
+}
+async function runProcessChecked(spec) {
+	const result = await runProcess(spec);
+	if (result.exitCode !== 0) throw new ProcessExitError(spec, result);
+	return result;
+}
+//#endregion
+export { runProcess, runProcessChecked, spawnProcess };

package/dist/src/providers/plugin-registry.d.ts

@@ -9,7 +9,7 @@ export declare class ProviderPluginRegistry implements ProviderRegistry {
     /**
      * Register a new provider
      */
-    register(provider: ProviderPlugin): void;
+    register(provider: ProviderPlugin): () => void;
     /**
      * Get a provider by ID
      */

package/dist/src/providers/plugin-registry.js

@@ -23,8 +23,14 @@ var init_plugin_registry = __esmMin((() => {
 			if (!provider.id) throw new Error("Provider must have an id");
 			if (!provider.name) throw new Error("Provider must have a name");
 			if (!provider.createStream || typeof provider.createStream !== "function") throw new Error("Provider must implement createStream method");
+			const previous = this.providers.get(provider.id);
 			this.providers.set(provider.id, provider);
 			log.info(`Registered provider: ${provider.name} (${provider.id})`);
+			return () => {
+				if (this.providers.get(provider.id) !== provider) return;
+				if (previous) this.providers.set(provider.id, previous);
+				else this.providers.delete(provider.id);
+			};
 		}
 		/**
 		* Get a provider by ID

package/dist/src/realtime/runtime.js

@@ -2,7 +2,7 @@ import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
 import { hasGatewayScope } from "../gateway/security/gateway-scopes.js";
 import { EndpointToolPolicyError } from "../endpoint-tools/policy.js";
-import { REALTIME_HEARTBEAT_INTERVAL_MS, REALTIME_HEARTBEAT_TIMEOUT_MS, REALTIME_HELLO_TIMEOUT_MS, REALTIME_MAX_CLIENT_FRAME_BYTES, parseClientRealtimeJsonFrame, parseClientRealtimeMessage } from "../../packages/realtime-protocol/src/index.js";
+import { REALTIME_CAPABILITIES, REALTIME_HEARTBEAT_INTERVAL_MS, REALTIME_HEARTBEAT_TIMEOUT_MS, REALTIME_HELLO_TIMEOUT_MS, REALTIME_MAX_CLIENT_FRAME_BYTES, parseClientRealtimeJsonFrame, parseClientRealtimeMessage } from "../../packages/realtime-protocol/src/index.js";
 import { createPreauthConnectionBudget } from "../gateway/security/preauth-connection-budget.js";
 import { RealtimeBroker } from "./broker.js";
 import { RealtimeTicketStore } from "./tickets.js";
@@ -265,10 +265,12 @@ var RealtimeRuntime = class {
 				}
 				clearTimeout(helloTimer);
 				releaseBudget();
+				const negotiatedCapabilities = message.payload.capabilities ? [...new Set(message.payload.capabilities.filter((capability) => REALTIME_CAPABILITIES.includes(capability)))] : void 0;
 				writer.enqueue(serverMessage("realtime.ready", {
 					connectionId,
 					heartbeatIntervalMs: REALTIME_HEARTBEAT_INTERVAL_MS,
 					heartbeatTimeoutMs: REALTIME_HEARTBEAT_TIMEOUT_MS,
+					...message.payload.capabilities ? { negotiatedCapabilities } : {},
 					...endpointReady ? { endpoint: endpointReady } : {}
 				}), "critical");
 				subscribe(message.payload.subscriptions);

package/dist/src/session/store.js

@@ -502,7 +502,7 @@ var SessionStore = class {
 					handover: result.handover,
 					audit: result.audit,
 					sourceEntries: expectedSnapshot.entries,
-					writePolicy: access.knowledge && this.options.config.userContext.knowledgeMemory.sources.includes("session") ? this.options.config.userContext.knowledgeMemory.writePolicy : "deny"
+					writePolicy: access.knowledge && access.knowledgePolicy.scopes.includes("session") && access.knowledgePolicy.contentSources.includes("memory") ? this.options.config.userContext.knowledgeMemory.writePolicy : "deny"
 				});
 				log.info({
 					conversationId: key,

package/dist/src/storage/sqlite/device-pairing-approval.js

@@ -1,7 +1,7 @@
 import { getSqliteDatabase, init_transaction, runSqliteWriteTransaction } from "./transaction.js";
 import { buildDevicePairingProof, devicePairingCompleteSchema, devicePairingDeviceSchema } from "../../../packages/gateway-contract/src/device-pairing.js";
+import { DEFAULT_BROWSER_EXTENSION_SCOPES, DEFAULT_MOBILE_SCOPES } from "../../../packages/gateway-contract/src/gateway-scopes.js";
 import { init_src } from "../../../packages/gateway-contract/src/index.js";
-import { DEFAULT_BROWSER_EXTENSION_SCOPES, DEFAULT_MOBILE_SCOPES } from "../../gateway/security/gateway-scopes.js";
 import { createDevice, getDevice, registerInitialDeviceRefreshToken, revokeDevice } from "./device-access-repository.js";
 import { getOrCreateGatewayIdentity } from "./gateway-identity-repository.js";
 import { browserEnrollmentPublicKeyThumbprint } from "../../browser/enrollment.js";

package/dist/src/storage/sqlite/index.d.ts

@@ -29,7 +29,7 @@ export { buildRelationshipPrompt, getRelationshipSettings, isProactiveSupportAll
 export { buildDefaultSessionMetadata, type SessionMetadataSeed, } from './session-metadata.js';
 export { buildGlobalSessionStats, classifyStoredRow, estimateTokensFromMessages, extractFtsContent, metadataToSessionInsert, sessionConfigRowToConfig, sessionRowToMetadata, transcriptEntryRowToStoredRow, type SessionConfigRow, type SessionRow, type TranscriptEntryRow, } from './row-mappers.js';
 export { deleteSessionRecord, ensureSessionRecord, getCurrentTranscriptId, getGlobalSessionStats, findConversationIdByTranscriptId, getSessionPersistedLevels, getSessionMetadata, incrementSessionStatsOnAppend, listSessionMetadata, listSessionsByAgent, patchSessionMetadata, resetSessionRecord, resolveSessionAgentId, updateSessionStats, } from './session-repository.js';
-export { appendCompactionBoundaryIfUnchanged, appendTranscriptEntry, listCompactionBoundaries, loadLlmMessagesForSession, loadTranscriptHistoryRowsForSession, loadTranscriptRows, loadTranscriptRowsForSession, loadCompactionSourceSnapshot, paginateTranscriptMessages, replaceTranscriptRows, restoreBeforeCompactionBoundary, searchSessionTranscript, type CompactionSourceSnapshot, type SessionTranscriptRecallMatch, type TranscriptSourceEntry, } from './transcript-repository.js';
+export { appendCompactionBoundaryIfUnchanged, appendMediaToAssistantTranscriptEntry, appendTranscriptEntry, findLatestAssistantTranscriptEntryId, listCompactionBoundaries, loadLlmMessagesForSession, loadTranscriptHistoryRowsForSession, loadTranscriptRows, loadTranscriptRowsForSession, loadCompactionSourceSnapshot, paginateTranscriptMessages, replaceTranscriptRows, restoreBeforeCompactionBoundary, searchSessionTranscript, type CompactionSourceSnapshot, type SessionTranscriptRecallMatch, type TranscriptSourceEntry, } from './transcript-repository.js';
 export { deleteNoteRecord, getNoteRecord, listNoteRecords, upsertNoteRecord, } from './notes-repository.js';
 export { deleteNoteAgentContextRecord, getNoteAgentContextRecord, upsertNoteAgentContextRecord, type NoteAgentContextRecord, } from './note-agent-context-repository.js';
 export { claimKnowledgeSourceItems, countKnowledgeSourceItems, completeKnowledgeSourceItemSynthesis, deleteKnowledgeSourceItems, finishKnowledgeSyncRun, getKnowledgeConsumerWatermark, getKnowledgeSourceCursor, getKnowledgeSourceItem, listKnowledgeSourceItems, listKnowledgeSourceChanges, listKnowledgeSyncRuns, pruneBoundedKnowledgeSourceItems, setKnowledgeSourceItemSynthesisStatus, setKnowledgeConsumerWatermark, setKnowledgeSourceCursor, startKnowledgeSyncRun, upsertKnowledgeSourceItems, } from './knowledge-repository.js';

package/dist/src/storage/sqlite/index.js

@@ -31,7 +31,7 @@ import { getInteractionState, setInteractionState, updateInteractionStateFromMes
 import { deleteSessionRecord, ensureSessionRecord, findConversationIdByTranscriptId, getCurrentTranscriptId, getGlobalSessionStats, getSessionMetadata, getSessionPersistedLevels, incrementSessionStatsOnAppend, init_session_repository, listSessionMetadata, listSessionsByAgent, patchSessionMetadata, resetSessionRecord, resolveSessionAgentId, updateSessionStats } from "./session-repository.js";
 import { getSessionTaskPlan, setSessionTaskPlan } from "./session-task-plan-repository.js";
 import { buildRelationshipPrompt, getRelationshipSettings, isProactiveSupportAllowed, updateRelationshipSettings } from "./relationship-settings-repository.js";
-import { appendCompactionBoundaryIfUnchanged, appendTranscriptEntry, listCompactionBoundaries, loadCompactionSourceSnapshot, loadLlmMessagesForSession, loadTranscriptHistoryRowsForSession, loadTranscriptRows, loadTranscriptRowsForSession, paginateTranscriptMessages, replaceTranscriptRows, restoreBeforeCompactionBoundary, searchSessionTranscript } from "./transcript-repository.js";
+import { appendCompactionBoundaryIfUnchanged, appendMediaToAssistantTranscriptEntry, appendTranscriptEntry, findLatestAssistantTranscriptEntryId, listCompactionBoundaries, loadCompactionSourceSnapshot, loadLlmMessagesForSession, loadTranscriptHistoryRowsForSession, loadTranscriptRows, loadTranscriptRowsForSession, paginateTranscriptMessages, replaceTranscriptRows, restoreBeforeCompactionBoundary, searchSessionTranscript } from "./transcript-repository.js";
 import { deleteNoteRecord, getNoteRecord, listNoteRecords, upsertNoteRecord } from "./notes-repository.js";
 import { deleteNoteAgentContextRecord, getNoteAgentContextRecord, upsertNoteAgentContextRecord } from "./note-agent-context-repository.js";
 import { claimKnowledgeSourceItems, completeKnowledgeSourceItemSynthesis, countKnowledgeSourceItems, deleteKnowledgeSourceItems, finishKnowledgeSyncRun, getKnowledgeConsumerWatermark, getKnowledgeSourceCursor, getKnowledgeSourceItem, listKnowledgeSourceChanges, listKnowledgeSourceItems, listKnowledgeSyncRuns, pruneBoundedKnowledgeSourceItems, setKnowledgeConsumerWatermark, setKnowledgeSourceCursor, setKnowledgeSourceItemSynthesisStatus, startKnowledgeSyncRun, upsertKnowledgeSourceItems } from "./knowledge-repository.js";
@@ -54,4 +54,4 @@ init_session_metadata();
 init_row_mappers();
 init_session_repository();
 //#endregion
-export { COMPOSER_INPUT_HISTORY_LIMIT, DatabaseSchemaMigrationGapError, DatabaseSchemaTooNewError, DatabaseSchemaTooOldError, SCHEMA_META_SCHEMA_VERSION_KEY, XOPC_DB_BASELINE_SCHEMA_VERSION, XOPC_DB_FILENAME, XOPC_DB_SCHEMA_VERSION, acknowledgeHomeAttention, appendCompactionBoundaryIfUnchanged, appendComposerInputHistory, appendConnectorExecutionAudit, appendTranscriptEntry, applyPendingMigrations, authenticateDeviceAccessToken, bindEndpointPrincipal, buildDefaultSessionMetadata, buildGlobalSessionStats, buildRefreshProofMessage, buildRelationshipPrompt, cancelQueuedSessionInput, claimConnectorWebhookDelivery, claimContextExtractionRun, claimKnowledgeSourceItems, claimNextConnectorLearningJob, claimNextSessionInput, classifyStoredRow, clearComposerInputHistory, clearGatewayIdentityForTest, closeTemporalAssertions, closeXopcDatabase, completeConnectorWebhookDelivery, completeKnowledgeSourceItemSynthesis, consumeClarificationApproval, consumeClarificationResume, consumeConnectorApproval, countKnowledgeSourceItems, createClarificationWait, createCollaborationRule, createConnectorApproval, createContextEvidence, createDevice, createDevicePairingSetup, createEndpointPrincipal, createObjectLinkRecord, createTemporalAssertion, decideConnectorApproval, deleteBrowserTabBinding, deleteBrowserTabBindingsByEndpoint, deleteBrowserTabBindingsByPrincipal, deleteConnectorConnection, deleteConnectorInstallation, deleteEndpointSessionBinding, deleteEndpointSessionBindingsByPrincipal, deleteKnowledgeSourceItems, deleteNoteAgentContextRecord, deleteNoteRecord, deleteObjectLinkRecord, deleteSessionConfig, deleteSessionRecord, discoverSqlMigrations, enqueueConnectorLearningJob, ensureSessionRecord, ensureXopcDatabaseSchema, estimateTokensFromMessages, extractFtsContent, findConversationIdByTranscriptId, findSessionInput, finishContextExtractionRun, finishEndpointToolInvocationAudit, finishKnowledgeSyncRun, finishSessionInputRun, getActiveClarification, getActivityEventRecord, getBrowserTabBinding, getBrowserTabBindingById, getCachedConnectorCatalogEntry, getClarification, getClarificationResumeInput, getClarificationSnapshot, getCollaborationRule, getConnectorAccount, getConnectorApproval, getConnectorConnection, getConnectorInstallation, getConnectorSyncPolicy, getConnectorSyncPolicyForConnection, getContextExtractionRun, getCurrentTranscriptId, getDevice, getEndpointPrincipal, getEndpointSessionBinding, getGlobalSessionStats, getInteractionState, getKnowledgeConsumerWatermark, getKnowledgeSourceCursor, getKnowledgeSourceItem, getNoteAgentContextRecord, getNoteRecord, getOrCreateGatewayIdentity, getRelationshipSettings, getSessionConfig, getSessionInputById, getSessionInputState, getSessionMetadata, getSessionPersistedLevels, getSessionTaskPlan, getSqliteDatabase, getUserPeopleIndexState, getUserPerson, getUserTrustPolicy, getXopcDatabase, hasIndependentExtractionOutput, hasSessionConfig, incrementSessionStatsOnAppend, insertSessionInput, inspectSchemaMigrationStatus, isClarificationSuspended, isDevicePairingSetupActive, isHomeAttentionAcknowledged, isProactiveSupportAllowed, isXopcDatabaseOpen, issueDeviceTokenPair, linkContextObjects, listActiveSessionInputRuns, listActivityRecords, listCachedConnectorCatalogEntries, listCollaborationRules, listCompactionBoundaries, listComposerInputHistory, listConnectorAccounts, listConnectorActionMetadata, listConnectorApprovals, listConnectorConnections, listConnectorExecutionAudit, listConnectorInstallations, listConnectorLearningJobs, listConnectorSyncPolicies, listContextExtractionOutputs, listContextExtractionRuns, listContextObjectRelations, listDevices, listEndpointPrincipals, listEndpointToolInvocationAudits, listKnowledgeSourceChanges, listKnowledgeSourceItems, listKnowledgeSyncRuns, listNoteRecords, listObjectActivityRecords, listObjectLinkRecords, listProjectActivityRecords, listRegisteredMigrationTargets, listSessionMetadata, listSessionsByAgent, listTemporalAssertions, listUserPeople, loadCompactionSourceSnapshot, loadLlmMessagesForSession, loadTranscriptHistoryRowsForSession, loadTranscriptRows, loadTranscriptRowsForSession, mergeUserPeople, metadataToSessionInsert, mutateQueuedSessionInput, openXopcDatabase, paginateTranscriptMessages, patchSessionMetadata, pruneBoundedKnowledgeSourceItems, readSchemaVersion, readSchemaVersionForTest, reconcileConnectorAccount, recordActivityEvent, recoverSessionInputState, recoverStaleConnectorLearningJobs, refreshConnectorAccountCurrent, releaseConnectorWebhookDelivery, replaceConnectorCatalogEntries, replaceLatestSessionTurnAndQueueInput, replaceTranscriptRows, replaceUserPeopleIndex, requireXopcDatabase, resetSessionRecord, resetXopcDatabaseSingletonForTest, resolveClarification, resolveMigrationsDir, resolveSessionAgentId, resolveXopcDatabasePath, restoreBeforeCompactionBoundary, revokeDevice, revokeEndpointPrincipal, rotateDeviceRefreshToken, runSqliteWriteTransaction, searchSessionTranscript, sessionConfigRowToConfig, sessionRowToMetadata, setBrowserTabBinding, setCollaborationRuleStatus, setConnectorLearningPaused, setEndpointSessionBinding, setInteractionState, setKnowledgeConsumerWatermark, setKnowledgeSourceCursor, setKnowledgeSourceItemSynthesisStatus, setSessionConfig, setSessionInputStatus, setSessionTaskPlan, setUserTrustPolicy, signGatewayPayload, startEndpointToolInvocationAudit, startKnowledgeSyncRun, summarizeUserPeople, supersedeActiveClarification, touchEndpointPrincipal, transcriptEntryRowToStoredRow, updateConnectorLearningJob, updateInteractionStateFromMessage, updateRelationshipSettings, updateSessionConfig, updateSessionStats, updateUserPerson, upsertConnectorActionMetadata, upsertConnectorCatalogEntry, upsertConnectorConnection, upsertConnectorInstallation, upsertConnectorSyncPolicy, upsertKnowledgeSourceItems, upsertNoteAgentContextRecord, upsertNoteRecord, validateLatestSessionTurnTarget };
+export { COMPOSER_INPUT_HISTORY_LIMIT, DatabaseSchemaMigrationGapError, DatabaseSchemaTooNewError, DatabaseSchemaTooOldError, SCHEMA_META_SCHEMA_VERSION_KEY, XOPC_DB_BASELINE_SCHEMA_VERSION, XOPC_DB_FILENAME, XOPC_DB_SCHEMA_VERSION, acknowledgeHomeAttention, appendCompactionBoundaryIfUnchanged, appendComposerInputHistory, appendConnectorExecutionAudit, appendMediaToAssistantTranscriptEntry, appendTranscriptEntry, applyPendingMigrations, authenticateDeviceAccessToken, bindEndpointPrincipal, buildDefaultSessionMetadata, buildGlobalSessionStats, buildRefreshProofMessage, buildRelationshipPrompt, cancelQueuedSessionInput, claimConnectorWebhookDelivery, claimContextExtractionRun, claimKnowledgeSourceItems, claimNextConnectorLearningJob, claimNextSessionInput, classifyStoredRow, clearComposerInputHistory, clearGatewayIdentityForTest, closeTemporalAssertions, closeXopcDatabase, completeConnectorWebhookDelivery, completeKnowledgeSourceItemSynthesis, consumeClarificationApproval, consumeClarificationResume, consumeConnectorApproval, countKnowledgeSourceItems, createClarificationWait, createCollaborationRule, createConnectorApproval, createContextEvidence, createDevice, createDevicePairingSetup, createEndpointPrincipal, createObjectLinkRecord, createTemporalAssertion, decideConnectorApproval, deleteBrowserTabBinding, deleteBrowserTabBindingsByEndpoint, deleteBrowserTabBindingsByPrincipal, deleteConnectorConnection, deleteConnectorInstallation, deleteEndpointSessionBinding, deleteEndpointSessionBindingsByPrincipal, deleteKnowledgeSourceItems, deleteNoteAgentContextRecord, deleteNoteRecord, deleteObjectLinkRecord, deleteSessionConfig, deleteSessionRecord, discoverSqlMigrations, enqueueConnectorLearningJob, ensureSessionRecord, ensureXopcDatabaseSchema, estimateTokensFromMessages, extractFtsContent, findConversationIdByTranscriptId, findLatestAssistantTranscriptEntryId, findSessionInput, finishContextExtractionRun, finishEndpointToolInvocationAudit, finishKnowledgeSyncRun, finishSessionInputRun, getActiveClarification, getActivityEventRecord, getBrowserTabBinding, getBrowserTabBindingById, getCachedConnectorCatalogEntry, getClarification, getClarificationResumeInput, getClarificationSnapshot, getCollaborationRule, getConnectorAccount, getConnectorApproval, getConnectorConnection, getConnectorInstallation, getConnectorSyncPolicy, getConnectorSyncPolicyForConnection, getContextExtractionRun, getCurrentTranscriptId, getDevice, getEndpointPrincipal, getEndpointSessionBinding, getGlobalSessionStats, getInteractionState, getKnowledgeConsumerWatermark, getKnowledgeSourceCursor, getKnowledgeSourceItem, getNoteAgentContextRecord, getNoteRecord, getOrCreateGatewayIdentity, getRelationshipSettings, getSessionConfig, getSessionInputById, getSessionInputState, getSessionMetadata, getSessionPersistedLevels, getSessionTaskPlan, getSqliteDatabase, getUserPeopleIndexState, getUserPerson, getUserTrustPolicy, getXopcDatabase, hasIndependentExtractionOutput, hasSessionConfig, incrementSessionStatsOnAppend, insertSessionInput, inspectSchemaMigrationStatus, isClarificationSuspended, isDevicePairingSetupActive, isHomeAttentionAcknowledged, isProactiveSupportAllowed, isXopcDatabaseOpen, issueDeviceTokenPair, linkContextObjects, listActiveSessionInputRuns, listActivityRecords, listCachedConnectorCatalogEntries, listCollaborationRules, listCompactionBoundaries, listComposerInputHistory, listConnectorAccounts, listConnectorActionMetadata, listConnectorApprovals, listConnectorConnections, listConnectorExecutionAudit, listConnectorInstallations, listConnectorLearningJobs, listConnectorSyncPolicies, listContextExtractionOutputs, listContextExtractionRuns, listContextObjectRelations, listDevices, listEndpointPrincipals, listEndpointToolInvocationAudits, listKnowledgeSourceChanges, listKnowledgeSourceItems, listKnowledgeSyncRuns, listNoteRecords, listObjectActivityRecords, listObjectLinkRecords, listProjectActivityRecords, listRegisteredMigrationTargets, listSessionMetadata, listSessionsByAgent, listTemporalAssertions, listUserPeople, loadCompactionSourceSnapshot, loadLlmMessagesForSession, loadTranscriptHistoryRowsForSession, loadTranscriptRows, loadTranscriptRowsForSession, mergeUserPeople, metadataToSessionInsert, mutateQueuedSessionInput, openXopcDatabase, paginateTranscriptMessages, patchSessionMetadata, pruneBoundedKnowledgeSourceItems, readSchemaVersion, readSchemaVersionForTest, reconcileConnectorAccount, recordActivityEvent, recoverSessionInputState, recoverStaleConnectorLearningJobs, refreshConnectorAccountCurrent, releaseConnectorWebhookDelivery, replaceConnectorCatalogEntries, replaceLatestSessionTurnAndQueueInput, replaceTranscriptRows, replaceUserPeopleIndex, requireXopcDatabase, resetSessionRecord, resetXopcDatabaseSingletonForTest, resolveClarification, resolveMigrationsDir, resolveSessionAgentId, resolveXopcDatabasePath, restoreBeforeCompactionBoundary, revokeDevice, revokeEndpointPrincipal, rotateDeviceRefreshToken, runSqliteWriteTransaction, searchSessionTranscript, sessionConfigRowToConfig, sessionRowToMetadata, setBrowserTabBinding, setCollaborationRuleStatus, setConnectorLearningPaused, setEndpointSessionBinding, setInteractionState, setKnowledgeConsumerWatermark, setKnowledgeSourceCursor, setKnowledgeSourceItemSynthesisStatus, setSessionConfig, setSessionInputStatus, setSessionTaskPlan, setUserTrustPolicy, signGatewayPayload, startEndpointToolInvocationAudit, startKnowledgeSyncRun, summarizeUserPeople, supersedeActiveClarification, touchEndpointPrincipal, transcriptEntryRowToStoredRow, updateConnectorLearningJob, updateInteractionStateFromMessage, updateRelationshipSettings, updateSessionConfig, updateSessionStats, updateUserPerson, upsertConnectorActionMetadata, upsertConnectorCatalogEntry, upsertConnectorConnection, upsertConnectorInstallation, upsertConnectorSyncPolicy, upsertKnowledgeSourceItems, upsertNoteAgentContextRecord, upsertNoteRecord, validateLatestSessionTurnTarget };

package/dist/src/storage/sqlite/migrations/180_execution_environment_ownership.sql

@@ -0,0 +1,7 @@
+ALTER TABLE execution_environments
+  ADD COLUMN ownership TEXT NOT NULL DEFAULT 'registered'
+  CHECK (ownership IN ('registered', 'xopc_created'));
+
+UPDATE execution_environments
+SET ownership = 'xopc_created'
+WHERE kind = 'managed_worktree';

package/dist/src/storage/sqlite/migrations/181_knowledge_item_status_events.sql

@@ -0,0 +1,12 @@
+CREATE TABLE IF NOT EXISTS knowledge_item_status_events (
+  event_id TEXT PRIMARY KEY,
+  knowledge_id TEXT NOT NULL REFERENCES knowledge_items(knowledge_id) ON DELETE CASCADE,
+  from_status TEXT,
+  to_status TEXT NOT NULL,
+  actor_type TEXT NOT NULL CHECK(actor_type IN ('user', 'agent', 'runtime', 'maintenance', 'migration')),
+  reason TEXT NOT NULL,
+  created_at INTEGER NOT NULL
+);
+
+CREATE INDEX IF NOT EXISTS idx_knowledge_item_status_events_item
+  ON knowledge_item_status_events(knowledge_id, created_at DESC);

package/dist/src/storage/sqlite/migrations/runner.d.ts

@@ -3,7 +3,7 @@ import type { ApplyMigrationsOptions } from './types.js';
 /** Baseline schema version applied from schema.sql on first open. */
 export declare const XOPC_DB_BASELINE_SCHEMA_VERSION = 165;
 /** Latest schema version this release supports (increment when adding migrations). */
-export declare const XOPC_DB_SCHEMA_VERSION = 179;
+export declare const XOPC_DB_SCHEMA_VERSION = 181;
 export declare function resolveMigrationsDir(override?: string): string;
 /**
  * Apply sequential SQL migrations from (currentVersion + 1) through targetVersion.

package/dist/src/storage/sqlite/migrations/runner.js

@@ -63,7 +63,7 @@ function applySingleMigration(db, migration) {
 * Each step runs in its own transaction and updates schema_meta on success.
 */
 function applyPendingMigrations(db, options = {}) {
-	const targetVersion = options.targetVersion ?? 179;
+	const targetVersion = options.targetVersion ?? 181;
 	let currentVersion = readSchemaVersion(db);
 	if (currentVersion > targetVersion) throw new DatabaseSchemaTooNewError(currentVersion, targetVersion);
 	if (!options.migrationsDir && currentVersion < 165) throw new DatabaseSchemaTooOldError(currentVersion, 165);
@@ -118,7 +118,7 @@ function applyPendingMigrations(db, options = {}) {
 }
 /** Inspect schema version without mutating the database. */
 function inspectSchemaMigrationStatus(db, options = {}) {
-	const appVersion = options.targetVersion ?? 179;
+	const appVersion = options.targetVersion ?? 181;
 	const dbVersion = readSchemaVersion(db);
 	if (dbVersion > appVersion) return {
 		dbVersion,
@@ -157,7 +157,7 @@ var init_runner = __esmMin((() => {
 	init_errors();
 	log = createLogger("Sqlite:Migrations");
 	XOPC_DB_BASELINE_SCHEMA_VERSION = 165;
-	XOPC_DB_SCHEMA_VERSION = 179;
+	XOPC_DB_SCHEMA_VERSION = 181;
 	MODULE_DIR = dirname(fileURLToPath(import.meta.url));
 }));
 //#endregion

package/dist/src/storage/sqlite/schema.js

@@ -33,7 +33,7 @@ function ensureXopcDatabaseSchema(db, options = {}) {
 		currentVersion = 165;
 	}
 	applyPendingMigrations(db, {
-		targetVersion: 179,
+		targetVersion: 181,
 		databasePath: fresh ? void 0 : options.databasePath
 	});
 }

package/dist/src/storage/sqlite/schema.sql

@@ -2320,6 +2320,19 @@ CREATE VIRTUAL TABLE knowledge_items_fts USING fts5(
   tokenize='unicode61'
 );
 
+CREATE TABLE knowledge_item_status_events (
+  event_id TEXT PRIMARY KEY,
+  knowledge_id TEXT NOT NULL REFERENCES knowledge_items(knowledge_id) ON DELETE CASCADE,
+  from_status TEXT,
+  to_status TEXT NOT NULL,
+  actor_type TEXT NOT NULL CHECK(actor_type IN ('user', 'agent', 'runtime', 'maintenance', 'migration')),
+  reason TEXT NOT NULL,
+  created_at INTEGER NOT NULL
+);
+
+CREATE INDEX idx_knowledge_item_status_events_item
+  ON knowledge_item_status_events(knowledge_id, created_at DESC);
+
 CREATE TABLE memory_maintenance_runs (
   run_id TEXT PRIMARY KEY,
   principal_id TEXT NOT NULL,

package/dist/src/storage/sqlite/transcript-repository.d.ts

@@ -1,4 +1,5 @@
 import type { AgentMessage } from '@earendil-works/pi-agent-core';
+import type { MediaRef } from '../../media/types.js';
 import type { CompactionBoundarySummary } from '../../session/types.js';
 import { type TranscriptStoredRow, type XopcTranscriptCompactionEntry } from '../../session/session-context-for-llm.js';
 import { type TranscriptEntryRow } from './row-mappers.js';
@@ -34,6 +35,9 @@ export declare function loadTranscriptRowsForSession(conversationId: string): Tr
 export declare function loadTranscriptHistoryRowsForSession(conversationId: string): TranscriptStoredRow[];
 export declare function loadTranscriptRows(transcriptId: string): TranscriptStoredRow[];
 export declare function loadLlmMessagesForSession(conversationId: string): AgentMessage[];
+export declare function findLatestAssistantTranscriptEntryId(conversationId: string): string | null;
+/** Attach generated media to one exact assistant row without rewriting the transcript. */
+export declare function appendMediaToAssistantTranscriptEntry(conversationId: string, entryId: string, media: MediaRef): boolean;
 export declare function replaceTranscriptRows(conversationId: string, rows: TranscriptStoredRow[]): void;
 export declare function paginateTranscriptMessages(conversationId: string, options?: {
     offset?: number;

package/dist/src/storage/sqlite/transcript-repository.js

@@ -218,6 +218,41 @@ function loadLlmMessagesForSession(conversationId) {
          )
        ORDER BY seq ASC`).all(transcriptId, transcriptId).map(transcriptEntryRowToStoredRow));
 }
+function findLatestAssistantTranscriptEntryId(conversationId) {
+	const transcriptId = getCurrentTranscriptId(conversationId);
+	if (!transcriptId) return null;
+	return getSqliteDatabase().prepare(`SELECT entry_id
+       FROM transcript_entries
+       WHERE transcript_id = ? AND entry_kind = 'message' AND role = 'assistant'
+       ORDER BY seq DESC
+       LIMIT 1`).get(transcriptId)?.entry_id ?? null;
+}
+/** Attach generated media to one exact assistant row without rewriting the transcript. */
+function appendMediaToAssistantTranscriptEntry(conversationId, entryId, media) {
+	if (!entryId.trim() || !media.uri?.trim()) return false;
+	return runSqliteWriteTransaction((db) => {
+		const transcriptId = readCurrentTranscriptId(db, conversationId);
+		if (!transcriptId) return false;
+		const row = db.prepare(`SELECT payload_json
+         FROM transcript_entries
+         WHERE transcript_id = ? AND entry_id = ? AND entry_kind = 'message' AND role = 'assistant'`).get(transcriptId, entryId);
+		if (!row) return false;
+		let message;
+		try {
+			message = JSON.parse(row.payload_json);
+		} catch {
+			return false;
+		}
+		const existing = Array.isArray(message.media) ? message.media : [];
+		if (existing.some((item) => item?.uri === media.uri)) return true;
+		const next = {
+			...message,
+			media: [...existing, media]
+		};
+		return db.prepare(`UPDATE transcript_entries SET payload_json = ?
+       WHERE transcript_id = ? AND entry_id = ?`).run(JSON.stringify(next), transcriptId, entryId).changes === 1;
+	});
+}
 function replaceTranscriptRows(conversationId, rows) {
 	if (rows.some(isRuntimeOnlyTranscriptMessage)) throw new Error("Runtime-only messages cannot be persisted in a session transcript");
 	runSqliteWriteTransaction((db) => {
@@ -349,4 +384,4 @@ function restoreBeforeCompactionBoundary(conversationId, compactionId) {
 	});
 }
 //#endregion
-export { appendCompactionBoundaryIfUnchanged, appendTranscriptEntry, listCompactionBoundaries, loadCompactionSourceSnapshot, loadLlmMessagesForSession, loadTranscriptHistoryRowsForSession, loadTranscriptRows, loadTranscriptRowsForSession, paginateTranscriptMessages, replaceTranscriptRows, restoreBeforeCompactionBoundary, searchSessionTranscript };
+export { appendCompactionBoundaryIfUnchanged, appendMediaToAssistantTranscriptEntry, appendTranscriptEntry, findLatestAssistantTranscriptEntryId, listCompactionBoundaries, loadCompactionSourceSnapshot, loadLlmMessagesForSession, loadTranscriptHistoryRowsForSession, loadTranscriptRows, loadTranscriptRowsForSession, paginateTranscriptMessages, replaceTranscriptRows, restoreBeforeCompactionBoundary, searchSessionTranscript };

package/dist/src/tui/backends/embedded-backend.d.ts

@@ -1,8 +1,8 @@
-import type { ExtensionRegistryImpl } from '../../extensions/loader.js';
+import type { ExtensionRegistryImpl } from '../../extensions/extension-registry-impl.js';
 import { type SessionTimelineItem } from '../../session/transcript-outline.js';
 import { type Config } from '../../config/schema.js';
 import type { ExportFormat } from '../../session/types.js';
-import type { ChatSendOptions, HistoryMessage, TuiBackend, TuiCompactionResult, TuiComposerHistoryItem, TuiEvent, TuiModelChoice, TuiShareRequest, TuiShareResult, TuiSessionStats, TuiSessionItem, TuiTranscriptTreeEntry, TuiAgentInfo, TuiWorkspaceFileSearchEntry, TuiWorkflowRunStartRequest, TuiWorkflowRunStartResult, TuiStartupProjectResult } from '../tui-backend.js';
+import type { ChatSendOptions, HistoryMessage, TuiBackend, TuiCompactionResult, TuiComposerHistoryItem, TuiEvent, TuiModelChoice, TuiShareRequest, TuiShareResult, TuiSessionStats, TuiSessionItem, TuiTranscriptTreeEntry, TuiAgentInfo, TuiWorkspaceFileSearchEntry, TuiWorkflowRunStartRequest, TuiWorkflowRunStartResult, TuiStartupProjectResult, TuiChatInputState } from '../tui-backend.js';
 import type { SessionInfo } from '../tui-types.js';
 interface EmbeddedBackendOptions {
     config?: Config;
@@ -28,6 +28,7 @@ export declare class EmbeddedBackend implements TuiBackend {
     private workflowRunService;
     private running;
     private chatAbort;
+    private readonly chatInputStates;
     onEvent?: (evt: TuiEvent) => void;
     onConnected?: () => void;
     onDisconnected?: (reason: string) => void;
@@ -73,15 +74,30 @@ export declare class EmbeddedBackend implements TuiBackend {
     }): Promise<{
         ok: boolean;
         effectiveDelivery?: 'next' | 'steer';
+        state?: TuiChatInputState;
     }>;
-    getChatInputState(conversationId: string): Promise<{
+    getChatInputState(conversationId: string): Promise<TuiChatInputState>;
+    updateChatInput(opts: {
         conversationId: string;
-        revision: number;
-        inputs: {
-            id: string;
-            status: string;
-        }[];
+        inputId: string;
+        version: number;
+        content: string;
+    }): Promise<{
+        ok: boolean;
+        state?: TuiChatInputState;
+    }>;
+    removeChatInput(opts: {
+        conversationId: string;
+        inputId: string;
+        version: number;
+    }): Promise<{
+        ok: boolean;
+        state?: TuiChatInputState;
     }>;
+    private appendPendingChatInput;
+    private consumePendingChatInput;
+    private publishChatInputState;
+    private replaceEmbeddedQueue;
     loadHistory(opts: {
         conversationId: string;
         limit?: number;

package/dist/src/tui/backends/embedded-backend.js

@@ -33,6 +33,7 @@ import { WorkflowSessionBridge } from "../../workflows/service/workflow-session-
 import { ChatStreamMapper } from "../../gateway/chat-stream/mapper.js";
 import { getXopcCloudCatalogCoordinator } from "../../providers/xopc-cloud-catalog-coordinator.js";
 import { fuzzySearchWorkspaceFiles } from "../../gateway/workspace-file-search.js";
+import { commitDeliveredChatInput } from "../tui-chat-input-state.js";
 import { sessionMetadataToTuiItem } from "../tui-session-format.js";
 import { buildTuiTranscriptTree, transcriptTreeEntryIdToRowNumber } from "../tui-transcript-tree.js";
 import { computeTuiSessionStats } from "../tui-session-stats.js";
@@ -54,6 +55,14 @@ function isPathSameOrInside(parentDir, childDir) {
 	const rel = relative(resolve(parentDir), resolve(childDir));
 	return rel === "" || !!rel && !rel.startsWith("..") && !isAbsolute(rel);
 }
+function deliveredUserMessageText(event) {
+	if (event.type !== "message_start" || !event.message || typeof event.message !== "object") return void 0;
+	const message = event.message;
+	if (message.role !== "user") return void 0;
+	if (typeof message.content === "string") return message.content;
+	if (!Array.isArray(message.content)) return void 0;
+	return message.content.map((block) => block && typeof block === "object" && block.type === "text" ? String(block.text ?? "") : "").join("");
+}
 /**
 * TUI backend that runs the agent in-process (no gateway required).
 *
@@ -71,6 +80,7 @@ var EmbeddedBackend = class {
 	workflowRunService = null;
 	running = false;
 	chatAbort = null;
+	chatInputStates = /* @__PURE__ */ new Map();
 	onEvent;
 	onConnected;
 	onDisconnected;
@@ -319,6 +329,7 @@ var EmbeddedBackend = class {
 			source: "embedded"
 		});
 		(async () => {
+			let initialUserMessageObserved = false;
 			try {
 				const messageForAgent = opts.message.trimStart().startsWith("/") ? opts.message : prependEnvelopeTimestamp(opts.message);
 				const stream = agent.turnDispatcher.processDirectStreaming(messageForAgent, opts.conversationId, {
@@ -330,6 +341,9 @@ var EmbeddedBackend = class {
 				});
 				for await (const event of stream) {
 					if (signal.aborted) break;
+					const deliveredInput = deliveredUserMessageText(event);
+					if (deliveredInput !== void 0) if (initialUserMessageObserved) this.consumePendingChatInput(opts.conversationId, deliveredInput);
+					else initialUserMessageObserved = true;
 					for (const mapped of mapper.map(event)) this.onEvent?.({
 						event: mapped.type,
 						data: mapped,
@@ -369,10 +383,11 @@ var EmbeddedBackend = class {
 	async submitChatInput(opts) {
 		if (!this.agent) return { ok: false };
 		if (opts.delivery === "steer") {
-			const ok = await this.agent.turnDispatcher.steerWebchatSession(opts.conversationId, opts.message);
+			if (!await this.agent.turnDispatcher.steerWebchatSession(opts.conversationId, opts.message)) return { ok: false };
 			return {
-				ok,
-				effectiveDelivery: ok ? "steer" : void 0
+				ok: true,
+				effectiveDelivery: "steer",
+				state: this.appendPendingChatInput(opts.conversationId, opts.message, "steer")
 			};
 		}
 		const { getEmbeddedRunByConversationId } = await import("../../agent/embedded/runs.js");
@@ -381,20 +396,109 @@ var EmbeddedBackend = class {
 		await handle.session.followUp(opts.message);
 		return {
 			ok: true,
-			effectiveDelivery: "next"
+			effectiveDelivery: "next",
+			state: this.appendPendingChatInput(opts.conversationId, opts.message, "next")
 		};
 	}
 	async getChatInputState(conversationId) {
-		const { getEmbeddedRunByConversationId } = await import("../../agent/embedded/runs.js");
-		const handle = getEmbeddedRunByConversationId(conversationId);
+		return this.chatInputStates.get(conversationId) ?? {
+			conversationId,
+			revision: 0,
+			inputs: []
+		};
+	}
+	async updateChatInput(opts) {
+		const current = await this.getChatInputState(opts.conversationId);
+		const target = current.inputs.find((input) => input.id === opts.inputId);
+		if (!target || target.version !== opts.version || target.status !== "queued") return {
+			ok: false,
+			state: current
+		};
+		const state = {
+			...current,
+			revision: current.revision + 1,
+			inputs: current.inputs.map((input) => input.id === target.id ? {
+				...input,
+				content: opts.content,
+				version: input.version + 1
+			} : input)
+		};
+		if (!await this.replaceEmbeddedQueue(opts.conversationId, state)) return {
+			ok: false,
+			state: current
+		};
+		this.publishChatInputState(state);
+		return {
+			ok: true,
+			state
+		};
+	}
+	async removeChatInput(opts) {
+		const current = await this.getChatInputState(opts.conversationId);
+		const target = current.inputs.find((input) => input.id === opts.inputId);
+		if (!target || target.version !== opts.version || target.status !== "queued" && target.status !== "interrupted") return {
+			ok: false,
+			state: current
+		};
+		const state = {
+			...current,
+			revision: current.revision + 1,
+			inputs: current.inputs.filter((input) => input.id !== target.id)
+		};
+		if (!await this.replaceEmbeddedQueue(opts.conversationId, state)) return {
+			ok: false,
+			state: current
+		};
+		this.publishChatInputState(state);
 		return {
+			ok: true,
+			state
+		};
+	}
+	appendPendingChatInput(conversationId, content, delivery) {
+		const current = this.chatInputStates.get(conversationId) ?? {
 			conversationId,
 			revision: 0,
-			inputs: Array.from({ length: handle?.session.pendingMessageCount ?? 0 }, (_, index) => ({
-				id: String(index),
-				status: "queued"
-			}))
+			inputs: []
 		};
+		const state = {
+			...current,
+			revision: current.revision + 1,
+			inputs: [...current.inputs, {
+				id: crypto.randomUUID(),
+				content,
+				requestedDelivery: delivery,
+				effectiveDelivery: delivery,
+				status: delivery === "steer" ? "injecting" : "queued",
+				version: 1,
+				position: current.inputs.length
+			}]
+		};
+		this.publishChatInputState(state);
+		return state;
+	}
+	consumePendingChatInput(conversationId, content) {
+		const current = this.chatInputStates.get(conversationId);
+		if (!current?.inputs.length) return;
+		const next = commitDeliveredChatInput(current, content);
+		if (next !== current) this.publishChatInputState(next);
+	}
+	publishChatInputState(state) {
+		this.chatInputStates.set(state.conversationId, state);
+		this.onEvent?.({
+			event: "session.input-state",
+			data: state,
+			source: "embedded"
+		});
+	}
+	async replaceEmbeddedQueue(conversationId, state) {
+		const { getEmbeddedRunByConversationId } = await import("../../agent/embedded/runs.js");
+		const handle = getEmbeddedRunByConversationId(conversationId);
+		if (!handle) return false;
+		handle.session.clearQueue();
+		for (const input of state.inputs) if (input.status === "injecting") await handle.session.steer(input.content);
+		else await handle.session.followUp(input.content);
+		return true;
 	}
 	async loadHistory(opts) {
 		if (!this.agent) return { messages: [] };

package/dist/src/tui/backends/gateway-realtime-backend.d.ts

@@ -71,8 +71,26 @@ export declare class GatewayRealtimeBackend implements TuiBackend {
     }): Promise<{
         ok: boolean;
         effectiveDelivery?: 'next' | 'steer';
+        state?: TuiChatInputState;
     }>;
     getChatInputState(conversationId: string): Promise<TuiChatInputState>;
+    updateChatInput(opts: {
+        conversationId: string;
+        inputId: string;
+        version: number;
+        content: string;
+    }): Promise<{
+        ok: boolean;
+        state?: TuiChatInputState;
+    }>;
+    removeChatInput(opts: {
+        conversationId: string;
+        inputId: string;
+        version: number;
+    }): Promise<{
+        ok: boolean;
+        state?: TuiChatInputState;
+    }>;
     getStartupResources(conversationId: string): Promise<TuiStartupResources>;
     loadHistory(opts: {
         conversationId: string;