@xopcai/xopc 0.0.306 → 0.0.308

package/dist/gateway/static/root/index.html

@@ -11,7 +11,7 @@
     <link rel="apple-touch-icon" sizes="180x180" href="/apple-touch-icon.png?v=20260910-1" />
     <link rel="manifest" href="/site.webmanifest?v=20260910-1" />
     <title>XOPC — Keep what matters moving.</title>
-    <script type="module" crossorigin src="/assets/index-Do9MltC4.js"></script>
+    <script type="module" crossorigin src="/assets/index-CDfcPiPb.js"></script>
     <link rel="modulepreload" crossorigin href="/assets/rolldown-runtime-aKtaBQYM.js">
     <link rel="modulepreload" crossorigin href="/assets/preload-helper-zJ_50EbN.js">
     <link rel="modulepreload" crossorigin href="/assets/vendor-react-BOUWij0V.js">
@@ -25,14 +25,14 @@
     <link rel="modulepreload" crossorigin href="/assets/download-Dk-ZjtO6.js">
     <link rel="modulepreload" crossorigin href="/assets/plus-Q2yW6OE7.js">
     <link rel="modulepreload" crossorigin href="/assets/x-B_N4OPjy.js">
-    <link rel="modulepreload" crossorigin href="/assets/messages-C-9oo69N.js">
-    <link rel="modulepreload" crossorigin href="/assets/locale-store-D16nmbaN.js">
+    <link rel="modulepreload" crossorigin href="/assets/messages-F74LVAiU.js">
+    <link rel="modulepreload" crossorigin href="/assets/locale-store-msTfRK8P.js">
     <link rel="modulepreload" crossorigin href="/assets/cn-JdwAhgNB.js">
     <link rel="modulepreload" crossorigin href="/assets/schemas-BaskVM5g.js">
     <link rel="modulepreload" crossorigin href="/assets/product-delivery-CCC4FJ3Y.js">
     <link rel="modulepreload" crossorigin href="/assets/app-link-BiBXVEvp.js">
     <link rel="modulepreload" crossorigin href="/assets/copy-to-clipboard-HOJ79TWv.js">
-    <link rel="modulepreload" crossorigin href="/assets/markdown-view-DCp4BlZP.js">
+    <link rel="modulepreload" crossorigin href="/assets/markdown-view-BInabSKf.js">
     <link rel="modulepreload" crossorigin href="/assets/dist-Che_jiQF.js">
     <link rel="modulepreload" crossorigin href="/assets/vendor-swr-BIWyz7Rc.js">
     <link rel="modulepreload" crossorigin href="/assets/check-DUBLcKHA.js">
@@ -46,19 +46,19 @@
     <link rel="modulepreload" crossorigin href="/assets/globe-DSSGFWFn.js">
     <link rel="modulepreload" crossorigin href="/assets/loader-circle-CifKLtgG.js">
     <link rel="modulepreload" crossorigin href="/assets/middleware-Pd0e8Igk.js">
-    <link rel="modulepreload" crossorigin href="/assets/gateway-realtime-store-BGmP1obI.js">
-    <link rel="modulepreload" crossorigin href="/assets/gateway-realtime-BDCpS7U1.js">
+    <link rel="modulepreload" crossorigin href="/assets/gateway-realtime-store-BLDgrJ30.js">
+    <link rel="modulepreload" crossorigin href="/assets/gateway-realtime-B53R0CA4.js">
     <link rel="modulepreload" crossorigin href="/assets/files-Be5viEFY.js">
     <link rel="modulepreload" crossorigin href="/assets/tool-activity-BtJkgjFf.js">
     <link rel="modulepreload" crossorigin href="/assets/button-CS04eWY9.js">
-    <link rel="modulepreload" crossorigin href="/assets/gateway-startup-retry-Caf8g3sC.js">
-    <link rel="modulepreload" crossorigin href="/assets/registry-api-DcQdwpPu.js">
-    <link rel="modulepreload" crossorigin href="/assets/gateway-config-swr-BSvXXpKM.js">
+    <link rel="modulepreload" crossorigin href="/assets/gateway-startup-retry-DRzGnEV-.js">
+    <link rel="modulepreload" crossorigin href="/assets/registry-api-BSWtko7U.js">
+    <link rel="modulepreload" crossorigin href="/assets/gateway-config-swr-B6wHa6ZI.js">
     <link rel="modulepreload" crossorigin href="/assets/electron-env-Dit0bHgy.js">
-    <link rel="modulepreload" crossorigin href="/assets/activity-store-DLtim-_I.js">
-    <link rel="modulepreload" crossorigin href="/assets/theme-store-RUBQBsFP.js">
+    <link rel="modulepreload" crossorigin href="/assets/activity-store-wgSB2HYK.js">
+    <link rel="modulepreload" crossorigin href="/assets/theme-store-1SZ-HFHX.js">
     <link rel="stylesheet" crossorigin href="/assets/markdown-view-Y68dCxuc.css">
-    <link rel="stylesheet" crossorigin href="/assets/index-CI37dTAn.css">
+    <link rel="stylesheet" crossorigin href="/assets/index-CRu1p38D.css">
   </head>
   <body>
     <div id="root"></div>

package/dist/package.js

@@ -1,4 +1,4 @@
 //#region package.json
-var version = "0.0.306";
+var version = "0.0.308";
 //#endregion
 export { version };

package/dist/packages/gateway-contract/src/notifications.js

@@ -58,7 +58,7 @@ var init_notifications = __esmMin((() => {
 		"automation.completed",
 		"automation.failed",
 		"proactive.insight",
-		"work_discovery.review_ready",
+		"work_discovery.completed",
 		"work_discovery.failed"
 	]);
 	NotificationLocalizedTextSchema = z.object({

package/dist/src/agent/background-review/prompts.js

@@ -40,7 +40,9 @@ Rules:
 - Set selfContained=false and list unresolvedReferences for unresolved pronouns or references.
 - Omit temporary reactions and one-off task instructions.
 - Never include passwords, credentials, regulated identifiers, or speculative diagnoses.
-- In transcript mode, use system_inferred unless a quoted user message is itself an explicit memory command.
+- Use user_explicit only for a fact or preference the user directly states, user_observed for repeated behavior, and system_inferred for synthesis. No separate remember command is required for an ordinary direct statement.
+- A project-specific choice stays scoped to that project. Do not generalize it into a global preference.
+- Existing memory, assistant output, repeated summaries, and lack of objection are not new supporting evidence.
 - If evidence is insufficient, return candidates=[] and explain abstentionReason.
 ${targets}`;
 }

package/dist/src/agent/context/execution-context.js

@@ -5,7 +5,7 @@ import "../../knowledge-memory/index.js";
 import { retrievalLexicalSimilarity } from "../../retrieval/textFeatures.js";
 import { calculateExecutionValue } from "../../user-model/importance.js";
 import { listUserAssertions } from "../../user-model/repository.js";
-import { isWorkingAssumption } from "../../user-model/usage-policy.js";
+import { canUseAssertion } from "../../user-model/usage-policy.js";
 import { getExecutionContextFeedbackScores } from "./audit.js";
 import { buildUserContextBlock } from "../memory/context-fence.js";
 import { randomUUID } from "node:crypto";
@@ -63,7 +63,7 @@ function rankAssertion(assertion, query, asOf, feedbackScore) {
 	].filter(Boolean);
 	return {
 		assertion,
-		usage: assertion.status === "active" ? "confirmed" : "working_assumption",
+		usage: assertion.authority === "user_explicit" ? "confirmed" : "working_assumption",
 		score: assertion.status === "candidate" ? score - .05 : score,
 		reasons
 	};
@@ -125,7 +125,7 @@ function buildExecutionContext(request) {
 	const rankedAssertions = includeUserModel ? listUserAssertions({
 		statuses: ["active", "candidate"],
 		limit: 1e3
-	}).filter((item) => scopeVisible(getAssertionScope(item.slotId), request)).filter((item) => applicabilityVisible(item.applicability, request)).filter((item) => (item.validFrom === void 0 || item.validFrom <= asOf) && (item.validTo === void 0 || item.validTo >= asOf)).filter((item) => item.authority !== "external_untrusted").filter((item) => item.sensitivity !== "secret" && item.sensitivity !== "regulated" && item.disclosurePolicy !== "ask_before_reference").filter((item) => item.status === "active" || isWorkingAssumption(item)).map((item) => rankAssertion(item, request.query, asOf, feedbackScores.get(`assertion:${item.id}`) ?? 0)).filter((item) => item.score >= .12 || item.reasons.includes("high_consequence")).sort((left, right) => right.score - left.score) : [];
+	}).filter((item) => scopeVisible(getAssertionScope(item.slotId), request)).filter((item) => applicabilityVisible(item.applicability, request)).filter((item) => canUseAssertion(item, asOf)).map((item) => rankAssertion(item, request.query, asOf, feedbackScores.get(`assertion:${item.id}`) ?? 0)).filter((item) => item.score >= .12 || item.reasons.includes("high_consequence")).sort((left, right) => right.score - left.score) : [];
 	const assertions = [...rankedAssertions.filter((item) => item.usage === "confirmed"), ...rankedAssertions.filter((item) => item.usage === "working_assumption")].slice(0, assertionLimit);
 	const maxKnowledge = Math.max(0, Math.min(100, request.maxKnowledge ?? 12));
 	const knowledge = request.includeKnowledge === false || maxKnowledge === 0 ? [] : searchKnowledgeItems({
@@ -165,7 +165,7 @@ function renderExecutionContext(context) {
 	const confirmedAssertions = context.assertions.filter((item) => item.usage === "confirmed");
 	const workingAssumptions = context.assertions.filter((item) => item.usage === "working_assumption");
 	if (confirmedAssertions.length) sections.push(`Confirmed user context:\n${confirmedAssertions.map((item) => `- ${item.assertion.statement}`).join("\n")}`);
-	if (workingAssumptions.length) sections.push(`Working assumptions (may be wrong; adapt quietly, never present them as confirmed facts, and accept corrections immediately):\n${workingAssumptions.map((item) => `- ${item.assertion.statement} (confidence ${item.assertion.confidence.toFixed(2)})`).join("\n")}`);
+	if (workingAssumptions.length) sections.push(`Working assumptions (may be wrong; never authorize actions; current user instructions take precedence; adapt quietly, never present them as confirmed facts, and accept corrections immediately):\n${workingAssumptions.map((item) => `- ${item.assertion.statement} (confidence ${item.assertion.confidence.toFixed(2)})`).join("\n")}`);
 	const confirmedGoals = context.goals.filter((goal) => goal.usage === "confirmed");
 	const assumedGoals = context.goals.filter((goal) => goal.usage === "working_assumption");
 	if (confirmedGoals.length) sections.push(`Confirmed goals:\n${confirmedGoals.map((goal) => `- ${goal.title}: ${goal.desiredOutcome}`).join("\n")}`);

package/dist/src/agent/external-tools/composio-provider.js

@@ -1,20 +1,26 @@
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
-import { connectionBinding, connectionBindings, init_connection_wait_repository, publishConnectionWait, requireSessionConnection } from "../../storage/sqlite/connection-wait-repository.js";
-import { consumeConnectorApproval, createConnectorApproval, getConnectorApproval, getConnectorInstallation, listConnectorActionMetadata, listConnectorConnections, listConnectorInstallations, upsertConnectorActionMetadata, upsertConnectorInstallation } from "../../storage/sqlite/connector-repository.js";
+import { getSessionInputState, init_session_input_repository } from "../../storage/sqlite/session-input-repository.js";
+import { getConnectorAccount } from "../../storage/sqlite/connector-account-repository.js";
+import { consumeConnectorApproval, createConnectorApproval, getConnectorApproval, getConnectorConnection, getConnectorInstallation, listConnectorActionMetadata, listConnectorConnections, listConnectorInstallations, upsertConnectorActionMetadata, upsertConnectorInstallation } from "../../storage/sqlite/connector-repository.js";
+import { bindObjectiveAccount, connectionBinding, connectionBindings, connectorObjectiveScope, init_connection_wait_repository, publishConnectionWait, requireSessionConnection } from "../../storage/sqlite/connection-wait-repository.js";
 import "../../storage/sqlite/index.js";
 import { connectorArgumentsHash, connectorArgumentsPreview } from "../../connectors/approval.js";
+import { connectorIdentitySummary } from "../../connectors/connector-identity.js";
+import { canAccessConnectorAccount, currentAccountConnections } from "../../connectors/account-access.js";
 import { ComposioSessionsAdapter } from "../../connectors/composio-sessions.js";
 import { getComposioToolkitScope, getConfiguredComposioAuthConfigs, isComposioActionAllowedByCatalog, scopeForComposioAction } from "../../connectors/composio.js";
 import { getConnectorDefinition } from "../../connectors/catalog.js";
+import { listConnectorInstances } from "../../connectors/instances.js";
 import { isToolInputSchema } from "../../connectors/connection-capabilities.js";
 import { connectorPrincipalForSession } from "../../connectors/principal.js";
 import { ExternalToolSearchError } from "./search-error.js";
 import { externalToolRef, parseExternalToolRef } from "./refs.js";
 //#region src/agent/external-tools/composio-provider.ts
+init_session_input_repository();
 init_connection_wait_repository();
 init_logger();
-const CONNECTION_ARGUMENT = "xopcConnectionId";
+const CONNECTION_ARGUMENT = "xopcAccountId";
 const log = createLogger("ComposioToolProvider");
 function textResult(value) {
 	return {
@@ -62,7 +68,7 @@ function syncLocalOwnerInstallations(config) {
 			allowedAgentIds: existing?.allowedAgentIds ?? [],
 			maxScope: existing?.maxScope ?? getComposioToolkitScope(config, toolkit),
 			confirmationPolicy: existing?.confirmationPolicy ?? "writes",
-			selectedConnectionIds: existing?.selectedConnectionIds ?? [],
+			selectedAccountIds: existing?.selectedAccountIds ?? null,
 			createdAt: existing?.createdAt
 		});
 	}
@@ -98,6 +104,7 @@ function actionInputSchema(action) {
 	if (!isToolInputSchema(action.inputSchema)) throw new Error(`Exact input contract is unavailable for ${action.actionId}`);
 	const schema = action.inputSchema;
 	const properties = schema.properties && typeof schema.properties === "object" && !Array.isArray(schema.properties) ? schema.properties : {};
+	if (Object.hasOwn(properties, CONNECTION_ARGUMENT)) throw new Error("The provider contract conflicts with the reserved account selector.");
 	return {
 		...schema,
 		type: "object",
@@ -105,7 +112,7 @@ function actionInputSchema(action) {
 			...properties,
 			[CONNECTION_ARGUMENT]: {
 				type: "string",
-				description: "Optional local connection id when more than one account is connected."
+				description: "Stable local account ID. Required when this objective uses multiple accounts. Never guess an account."
 			}
 		}
 	};
@@ -190,13 +197,22 @@ var ComposioToolProvider = class {
 		const action = listConnectorActionMetadata(resolved.installation.connectorId).find((candidate) => candidate.actionId === resolved.actionId);
 		if (!action || !isToolInputSchema(action.inputSchema) || !isComposioActionAllowedByCatalog(action.actionId)) return void 0;
 		const summary = `Run ${action.actionId} in ${toolkit}.`;
+		const available = this.availableInstallations();
+		const accounts = currentAccountConnections(listConnectorConnections({
+			principalId: available.principalId,
+			connectorId: resolved.installation.connectorId
+		}).filter((connection) => canAccessConnectorAccount(connection, resolved.installation, available.agentId))).map((connection) => ({
+			accountId: connection.accountId,
+			label: getConnectorAccount(connection.accountId)?.label,
+			identity: connectorIdentitySummary(connection.identity)
+		}));
 		return {
 			toolRef,
 			source: this.source,
 			namespace: toolkit,
 			title: action.actionId,
 			summary,
-			description: summary,
+			description: `${summary} Available accounts: ${JSON.stringify(accounts)}. Use xopcAccountId to select one; never guess when the user's intent is ambiguous.`,
 			inputSchema: actionInputSchema(action)
 		};
 	}
@@ -220,19 +236,20 @@ var ComposioToolProvider = class {
 			const refreshed = await this.adapter.refreshConnection(expired);
 			fresh = fresh.map((item) => item.id === refreshed.id ? refreshed : item);
 		}
-		const connections = listConnectorConnections({
+		const connections = currentAccountConnections(listConnectorConnections({
 			principalId: available.principalId,
 			connectorId: resolved.installation.connectorId
-		}).filter((connection) => connection.status === "active" && fresh.some((item) => item.id === connection.id) && (!resolved.installation.selectedConnectionIds.length || resolved.installation.selectedConnectionIds.includes(connection.id)));
-		const requestedConnection = typeof executionArgs[CONNECTION_ARGUMENT] === "string" ? executionArgs[CONNECTION_ARGUMENT] : available.context ? connectionBinding(available.context.conversationId, resolved.installation.connectorId) : void 0;
+		}).filter((connection) => connection.status === "active" && fresh.some((item) => item.id === connection.id) && canAccessConnectorAccount(connection, resolved.installation, available.agentId)));
+		const boundConnection = available.context ? connectionBinding(available.context.conversationId, resolved.installation.connectorId) : void 0;
+		const requestedAccount = typeof executionArgs[CONNECTION_ARGUMENT] === "string" ? executionArgs[CONNECTION_ARGUMENT] : boundConnection ? getConnectorConnection(boundConnection)?.accountId : void 0;
 		const bindings = available.context ? connectionBindings(available.context.conversationId).filter((need) => need.connectorId === resolved.installation.connectorId) : [];
-		if (bindings.length > 1 && !requestedConnection) return textResult({
+		if (bindings.length > 1 && !requestedAccount) return textResult({
 			status: "account_selection_required",
 			accounts: bindings,
-			instruction: "Choose the account for this operation using xopcConnectionId."
+			instruction: "Choose the account for this operation using xopcAccountId."
 		});
-		if (bindings.length && requestedConnection && !bindings.some((need) => need.connectionId === requestedConnection)) return textResult("This account was not selected for the current objective.");
-		const connection = requestedConnection ? connections.find((candidate) => candidate.id === requestedConnection) : connections.length === 1 ? connections[0] : void 0;
+		if (bindings.length && requestedAccount && !bindings.some((need) => need.accountId === requestedAccount)) return textResult("This account was not selected for the current objective.");
+		const connection = requestedAccount ? connections.find((candidate) => candidate.accountId === requestedAccount) : connections.length === 1 ? connections[0] : void 0;
 		const requestConnection = () => {
 			if (!available.context) return textResult({ status: "connection_required" });
 			const result = requireSessionConnection({
@@ -243,7 +260,7 @@ var ComposioToolProvider = class {
 				needs: [{
 					key: `${resolved.installation.connectorId}:default`,
 					connectorId: resolved.installation.connectorId,
-					connectionId: requestedConnection,
+					accountId: requestedAccount,
 					label: getConnectorDefinition(resolved.installation.connectorId)?.displayName ?? toolkit,
 					capabilities: [action.actionId]
 				}]
@@ -252,13 +269,18 @@ var ComposioToolProvider = class {
 			return textResult(result);
 		};
 		if (!connection) return requestConnection();
+		if (available.context && connection.accountId) bindObjectiveAccount(available.context.conversationId, resolved.installation.connectorId, connection.accountId);
 		const actionArgs = { ...executionArgs };
 		delete actionArgs[CONNECTION_ARGUMENT];
-		const argsHash = connectorArgumentsHash(actionArgs);
+		const argsHash = connectorArgumentsHash({
+			args: actionArgs,
+			accountId: connection.accountId,
+			objective: available.context ? connectorObjectiveScope(available.context.conversationId) : void 0
+		});
 		let confirmed = false;
 		if (approvalId) {
 			const pending = getConnectorApproval(approvalId);
-			if (!pending || pending.principalId !== available.principalId || pending.connectorId !== resolved.installation.connectorId || pending.actionId !== action.actionId || pending.conversationId !== available.context?.conversationId) return textResult("The connector approval is invalid for this session or action.");
+			if (!pending || pending.principalId !== available.principalId || pending.connectorId !== resolved.installation.connectorId || pending.actionId !== action.actionId || pending.conversationId !== available.context?.conversationId || pending.agentId !== available.agentId || !pending.connectionId || getConnectorConnection(pending.connectionId)?.accountId !== connection.accountId) return textResult("The connector approval is invalid for this session or action.");
 			confirmed = Boolean(consumeConnectorApproval(approvalId, argsHash));
 			if (!confirmed) return textResult("The connector approval is not approved, has expired, or was already used.");
 		}
@@ -286,7 +308,22 @@ var ComposioToolProvider = class {
 			throw error;
 		}
 		if (result.decision === "confirmation_required") {
+			const wait = available.context && getSessionInputState(available.context.conversationId).activeInputId ? requireSessionConnection({
+				conversationId: available.context.conversationId,
+				principalId: available.principalId,
+				agentId: available.agentId ?? "main",
+				summary: `Confirm ${action.actionId}`,
+				needs: [{
+					key: `${resolved.installation.connectorId}:${connection.accountId}`,
+					connectorId: resolved.installation.connectorId,
+					accountId: connection.accountId,
+					connectionId: connection.id,
+					label: toolkit,
+					capabilities: [action.actionId]
+				}]
+			}) : void 0;
 			const approval = createConnectorApproval({
+				waitId: wait?.waitId,
 				principalId: available.principalId,
 				connectorId: resolved.installation.connectorId,
 				connectionId: connection?.id,
@@ -294,10 +331,22 @@ var ComposioToolProvider = class {
 				conversationId: available.context?.conversationId,
 				actionId: action.actionId,
 				scope: action.scope,
-				argumentsHash: argsHash,
-				argumentsPreview: connectorArgumentsPreview(actionArgs),
+				argumentsHash: connectorArgumentsHash({
+					args: actionArgs,
+					accountId: connection.accountId,
+					objective: available.context ? connectorObjectiveScope(available.context.conversationId) : void 0
+				}),
+				argumentsPreview: {
+					account: {
+						id: connection.accountId,
+						label: getConnectorAccount(connection.accountId)?.label,
+						identity: connectorIdentitySummary(connection.identity)
+					},
+					arguments: connectorArgumentsPreview(actionArgs)
+				},
 				expiresAt: new Date(Date.now() + 10 * 6e4).toISOString()
 			});
+			if (available.context && wait?.waitId) publishConnectionWait(available.context.conversationId);
 			return textResult({
 				status: "confirmation_required",
 				approvalId: approval.id,
@@ -305,17 +354,31 @@ var ComposioToolProvider = class {
 				scope: approval.scope,
 				argumentsPreview: approval.argumentsPreview,
 				expiresAt: approval.expiresAt,
+				account: {
+					id: connection.accountId,
+					label: getConnectorAccount(connection.accountId)?.label,
+					identity: connectorIdentitySummary(connection.identity)
+				},
 				instruction: "Ask the user to approve this exact action in xopc, then retry with the approvalId and unchanged arguments."
 			});
 		}
-		return textResult(result.decision === "allowed" ? result.result : result.reason);
+		return textResult(result.decision === "allowed" ? {
+			account: {
+				id: connection.accountId,
+				label: getConnectorAccount(connection.accountId)?.label,
+				identity: connectorIdentitySummary(connection.identity)
+			},
+			result: result.result
+		} : result.reason);
 	}
 	availableInstallations() {
 		const context = this.deps.getCurrentContext();
 		const principal = connectorPrincipalForSession(context?.conversationId);
 		if (principal.isLocalOwner) syncLocalOwnerInstallations(this.deps.getConfig());
 		const agentId = this.deps.agentId ?? principal.agentId;
-		const installations = listConnectorInstallations(principal.principalId).filter((installation) => installation.enabled && composioToolkitFromConnectorId(installation.connectorId) !== void 0 && (installation.allowedAgentIds.length === 0 || Boolean(agentId && installation.allowedAgentIds.includes(agentId))));
+		const config = this.deps.getConfig();
+		const disabled = new Set(config ? listConnectorInstances(config).filter((instance) => !instance.enabled).map((instance) => instance.connectorId) : []);
+		const installations = listConnectorInstallations(principal.principalId).filter((installation) => installation.enabled && !disabled.has(installation.connectorId) && composioToolkitFromConnectorId(installation.connectorId) !== void 0 && (installation.allowedAgentIds.length === 0 || Boolean(agentId && installation.allowedAgentIds.includes(agentId))));
 		return {
 			principalId: principal.principalId,
 			agentId,

package/dist/src/agent/external-tools/gateway-tools.js

@@ -1,11 +1,12 @@
+import { init_connector_repository, listConnectorConnections } from "../../storage/sqlite/connector-repository.js";
 import { connectionBindings, getActiveConnectionWait, init_connection_wait_repository, publishConnectionWait, requireSessionConnection, reviseCurrentConnectionObjective } from "../../storage/sqlite/connection-wait-repository.js";
-import { listConnectorConnections } from "../../storage/sqlite/connector-repository.js";
 import { connectorPrincipalForSession } from "../../connectors/principal.js";
 import { connectionCandidates, resolveConnectionCandidate } from "../../connectors/connection-candidates.js";
 import { ExternalToolService } from "./service.js";
 import { EXTERNAL_TOOL_SOURCES } from "./types.js";
 import { Type } from "@sinclair/typebox";
 //#region src/agent/external-tools/gateway-tools.ts
+init_connector_repository();
 init_connection_wait_repository();
 const EXTERNAL_TOOL_NAMES = {
 	search: "xopc_tool_search",

package/dist/src/agent/mcp/bundle-mcp-runtime.js

@@ -2,9 +2,9 @@ import { init_global_singleton, resolveGlobalSingleton } from "../../utils/globa
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
 import { init_string_coerce, normalizeOptionalString } from "../../utils/string-coerce.js";
+import { resolveConnectorSecretReferences } from "../../connectors/secret-store.js";
 import { redactSensitiveUrlLikeString } from "../../utils/redact-sensitive-url.js";
 import { loadEmbeddedMcpConfig } from "./embedded-mcp.js";
-import { resolveConnectorSecretReferences } from "../../connectors/secret-store.js";
 import { isMcpConfigRecord } from "./mcp-config-shared.js";
 import { resolveMcpTransport } from "./mcp-transport.js";
 import { sanitizeServerName } from "./bundle-mcp-names.js";

package/dist/src/agent/mcp/oauth/mcp-oauth-manager.js

@@ -1,8 +1,8 @@
 import { init_global_singleton, resolveGlobalSingleton } from "../../../utils/global-singleton.js";
 import { createLogger } from "../../../utils/logger/index.js";
 import { init_logger } from "../../../utils/logger.js";
-import { redactSensitiveUrlLikeString } from "../../../utils/redact-sensitive-url.js";
 import { resolveConnectorSecretReferences } from "../../../connectors/secret-store.js";
+import { redactSensitiveUrlLikeString } from "../../../utils/redact-sensitive-url.js";
 import { resolveMcpTransportConfig } from "../mcp-transport-config.js";
 import { isMcpAuthorizationError } from "./mcp-oauth-errors.js";
 import { McpOAuthStore, canonicalMcpServerUrl } from "./mcp-oauth-store.js";

package/dist/src/agent/memory/compaction-promotion.d.ts

@@ -9,7 +9,7 @@ export interface PromoteCompactionLedgerInput {
     handover: CompactionHandover;
     audit: CompactionAudit;
     sourceEntries: readonly TranscriptSourceEntry[];
-    writePolicy: 'deny' | 'confirm' | 'allow';
+    writePolicy: 'deny' | 'allow';
 }
 export interface PromoteCompactionLedgerResult {
     episodicRecordIds: string[];

package/dist/src/agent/memory/compaction-promotion.js

@@ -129,7 +129,7 @@ function promoteCompactionLedger(input) {
 			content: item.text,
 			canonicalKey: `compaction:${input.transcriptId}:${item.id}`,
 			confidence: input.audit.status === "passed" ? .82 : .65,
-			status: active ? input.writePolicy === "allow" && originClass !== "untrusted" ? "active" : "candidate" : "archived",
+			status: active ? originClass !== "untrusted" && !classified.derivedFromRecalledContext ? "active" : "candidate" : "archived",
 			importance: importanceFor(item),
 			originClass,
 			sourceAgentId: input.sourceAgentId,
@@ -143,6 +143,7 @@ function promoteCompactionLedger(input) {
 				handoverKind: item.kind
 			}
 		});
+		if (!episode.item) continue;
 		result.episodicRecordIds.push(episode.item.id);
 		if (!(active && input.audit.status === "passed" && sessionKind === "interactive" && originClass === "agent" && !classified.derivedFromRecalledContext && DURABLE_KINDS.has(item.kind))) {
 			const existingDurable = !active ? listKnowledgeItems({ limit: 2e3 }).find((entry) => entry.canonicalKey === `durable:${item.kind}:${stableId("fact", item.text)}`) : void 0;
@@ -168,7 +169,7 @@ function promoteCompactionLedger(input) {
 			content: item.text,
 			canonicalKey: `durable:${item.kind}:${stableId("fact", item.text)}`,
 			confidence: .82,
-			status: input.writePolicy === "allow" ? "active" : "candidate",
+			status: "active",
 			importance: importanceFor(item),
 			originClass: "agent",
 			sourceConversationId: input.conversationId,
@@ -181,7 +182,7 @@ function promoteCompactionLedger(input) {
 				observedAt: classified.observedAt
 			}
 		});
-		result.durableRecordIds.push(durable.item.id);
+		if (durable.item) result.durableRecordIds.push(durable.item.id);
 	}
 	return result;
 }

package/dist/src/agent/tools/knowledge-memory-tool.d.ts

@@ -7,7 +7,7 @@ export interface KnowledgeToolOptions {
     getProjectId?: () => string | undefined;
     canRead: () => boolean;
     canWrite: () => boolean;
-    getWritePolicy: () => 'deny' | 'confirm' | 'allow';
+    getWritePolicy: () => 'deny' | 'allow';
     getReadPolicy: () => KnowledgeReadPolicy;
 }
 export declare function createKnowledgeSearchTool(options: KnowledgeToolOptions): AgentTool;

package/dist/src/agent/tools/knowledge-memory-tool.js

@@ -1,4 +1,4 @@
-import { getKnowledgeItem, knowledgeItemAllowed, searchKnowledgeItems, writeKnowledgeItem } from "../../knowledge-memory/repository.js";
+import { getKnowledgeItem, isKnowledgeCurrent, knowledgeItemAllowed, searchKnowledgeItems, writeKnowledgeItem } from "../../knowledge-memory/repository.js";
 import "../../knowledge-memory/index.js";
 import { Type } from "@sinclair/typebox";
 //#region src/agent/tools/knowledge-memory-tool.ts
@@ -92,7 +92,7 @@ function createKnowledgeGetTool(options) {
 			};
 			const id = raw.id;
 			const item = getKnowledgeItem(id);
-			return item && visibleItem(options, item) && knowledgeItemAllowed(item, options.getReadPolicy()) ? {
+			return item && isKnowledgeCurrent(item) && visibleItem(options, item) && knowledgeItemAllowed(item, options.getReadPolicy()) ? {
 				content: [{
 					type: "text",
 					text: JSON.stringify(item, null, 2)
@@ -160,7 +160,7 @@ function createKnowledgeWriteTool(options) {
 					},
 					content: input.content,
 					canonicalKey: input.canonicalKey,
-					status: writePolicy === "allow" ? "active" : "candidate",
+					status: "active",
 					confidence: .7,
 					importance: input.importance ?? .5,
 					originClass: "agent",

package/dist/src/agent/tools/user-context-tool.js

@@ -1,6 +1,6 @@
 import { retrievalLexicalSimilarity } from "../../retrieval/textFeatures.js";
-import { getAssertionSlot, getUserAssertion, listUserAssertions, reconcileAssertion, setAssertionStatus } from "../../user-model/repository.js";
-import { isWorkingAssumption } from "../../user-model/usage-policy.js";
+import { deleteUserAssertion, getAssertionSlot, getUserAssertion, listUserAssertions, reconcileAssertion, setAssertionStatus } from "../../user-model/repository.js";
+import { canUseAssertion } from "../../user-model/usage-policy.js";
 import "../../user-model/index.js";
 import { Type } from "@sinclair/typebox";
 //#region src/agent/tools/user-context-tool.ts
@@ -31,9 +31,6 @@ function visible(options, slotId) {
 	const scope = getAssertionSlot(slotId)?.scope;
 	return scope?.type === "global" || scope?.type === "agent" && scope.id === options.agentId || scope?.type === "workspace" && scope.id === options.workspaceId || scope?.type === "project" && scope.id === options.getProjectId?.() || scope?.type === "session" && scope.id === options.getSessionId();
 }
-function referenceable(assertion) {
-	return (assertion.status === "active" || isWorkingAssumption(assertion)) && assertion.authority !== "external_untrusted" && assertion.sensitivity !== "secret" && assertion.sensitivity !== "regulated" && assertion.disclosurePolicy !== "ask_before_reference";
-}
 function createUserContextSearchTool(options) {
 	return {
 		name: "user_context_search",
@@ -52,7 +49,7 @@ function createUserContextSearchTool(options) {
 			const results = listUserAssertions({
 				statuses: ["active", "candidate"],
 				limit: 1e3
-			}).filter((assertion) => visible(options, assertion.slotId)).filter(referenceable).map((assertion) => ({
+			}).filter((assertion) => visible(options, assertion.slotId)).filter((item) => canUseAssertion(item)).map((assertion) => ({
 				assertion,
 				score: retrievalLexicalSimilarity(input.query, `${assertion.statement} ${assertion.normalizedValue}`)
 			})).filter((item) => item.score > 0).sort((left, right) => right.score - left.score).slice(0, input.maxResults ?? 12).map(({ assertion, score }) => ({
@@ -89,7 +86,7 @@ function createUserContextGetTool(options) {
 			};
 			const id = raw.id;
 			const assertion = getUserAssertion(id);
-			if (!assertion || !visible(options, assertion.slotId) || !referenceable(assertion)) return {
+			if (!assertion || !visible(options, assertion.slotId) || !canUseAssertion(assertion)) return {
 				content: [{
 					type: "text",
 					text: `User assertion not found: ${id}`
@@ -199,6 +196,19 @@ function createUserContextUpdateTool(options) {
 						details: receipt
 					};
 				}
+				if (input.action === "forget") {
+					deleteUserAssertion(current.id);
+					return {
+						content: [{
+							type: "text",
+							text: "Memory deleted."
+						}],
+						details: {
+							action: "forget",
+							id: current.id
+						}
+					};
+				}
 				const status = {
 					confirm: "active",
 					reject: "rejected",

package/dist/src/chat-commands/builtins/understanding.js

@@ -58,7 +58,7 @@ const rememberCommand = {
 			disclosurePolicy: "referenceable",
 			observedAt: Date.now(),
 			createdBy: "user"
-		});
+		}, Date.now(), { restoreDeleted: true });
 		const scopeLabel = sessionOnly ? "this conversation" : "all conversations";
 		return {
 			content: result.action === "created" ? `Remembered for ${scopeLabel}. You can review or remove it in User Model.` : `This is already remembered for ${scopeLabel}.`,

package/dist/src/cli/commands/doctor/checks/database-schema.js

@@ -53,7 +53,7 @@ async function checkDatabaseSchema(ctx) {
 		id: "database-schema",
 		label: "Database schema",
 		status: "pass",
-		message: `SQLite schema v${status.dbVersion} (current release v181).`,
+		message: `SQLite schema v${status.dbVersion} (current release v185).`,
 		hints: []
 	};
 }

package/dist/src/cli/commands/gateway/lifecycle.js

@@ -3,8 +3,8 @@ import { loadConfig } from "../../../config/loader.js";
 import "../../../config/index.js";
 import { isRestartEnabled } from "../../../config/commands.flags.js";
 import { resolveGatewayService } from "../../../daemon/service.js";
-import { findVerifiedGatewayListenerPidsOnPortSync, formatGatewayPidList, signalVerifiedGatewayPidSync } from "../../../infra/gateway-processes.js";
 import { authorizeGatewaySigusr1Restart, writeGatewayRestartIntentSync } from "../../../infra/restart.js";
+import { findVerifiedGatewayListenerPidsOnPortSync, formatGatewayPidList, signalVerifiedGatewayPidSync } from "../../../infra/gateway-processes.js";
 import { runServiceRestart, runServiceStop } from "./lifecycle-core.js";
 import { DEFAULT_RESTART_HEALTH_ATTEMPTS, renderGatewayPortHealthDiagnostics, waitForGatewayHealthyListener } from "./restart-health.js";
 import { parsePortFromArgs, renderGatewayServiceStartHints, resolveGatewayPortFromConfig } from "./shared.js";

package/dist/src/cli/commands/update.js

@@ -2,9 +2,9 @@ import { PACKAGE_VERSION, init_package_version } from "../../package-version.js"
 import { loadConfig } from "../../config/loader.js";
 import { formatExamples, register } from "../registry.js";
 import "../../config/index.js";
+import { acquireUpdateLock } from "../../infra/update-lock.js";
 import { normalizeUpdateChannel } from "../../infra/update-channels.js";
 import { compareSemver, resolveNpmChannelTag } from "../../infra/update-check.js";
-import { acquireUpdateLock } from "../../infra/update-lock.js";
 import { formatUpdateApiResult, resolveUpdateInstallSurface, runGatewayUpdateWithPostSteps } from "../../infra/update-runner.js";
 import { Command } from "commander";
 //#region src/cli/commands/update.ts