@xopcai/xopc 0.0.306 → 0.0.308

package/dist/src/gateway/hono/routes/update.js

@@ -1,11 +1,11 @@
 import { PACKAGE_VERSION, init_package_version } from "../../../package-version.js";
 import { loadConfig } from "../../../config/loader.js";
 import "../../../config/index.js";
-import { normalizeUpdateChannel } from "../../../infra/update-channels.js";
 import { acquireUpdateLock } from "../../../infra/update-lock.js";
-import { formatUpdateApiResult, runGatewayUpdateWithPostSteps } from "../../../infra/update-runner.js";
+import { normalizeUpdateChannel } from "../../../infra/update-channels.js";
 import { getUpdateAvailable, runGatewayUpdateCheck } from "../../../infra/update-startup.js";
 import { createGatewayRouteLogger } from "../lib/route-logger.js";
+import { formatUpdateApiResult, runGatewayUpdateWithPostSteps } from "../../../infra/update-runner.js";
 import { streamSSE } from "hono/streaming";
 //#region src/gateway/hono/routes/update.ts
 init_package_version();

package/dist/src/gateway/hono/routes/user-model-refresh.d.ts

@@ -0,0 +1,5 @@
+import type { Hono } from 'hono';
+import { UnderstandingRefreshService } from '../../../user-context/sources/refresh-service.js';
+import type { AuthenticatedRouteDeps } from './deps.js';
+export declare function createUnderstandingRefreshService(deps: AuthenticatedRouteDeps): UnderstandingRefreshService;
+export declare function registerUserModelRefreshRoutes(app: Hono, deps: AuthenticatedRouteDeps, refresh?: UnderstandingRefreshService): void;

package/dist/src/gateway/hono/routes/user-model-refresh.js

@@ -0,0 +1,128 @@
+import { listConnectorLearningJobs } from "../../../storage/sqlite/connector-learning-repository.js";
+import { getConnectorAccount } from "../../../storage/sqlite/connector-account-repository.js";
+import "../../../storage/sqlite/index.js";
+import { listUnderstandingSourceRuns } from "../../../user-context/sources/repository.js";
+import { isLocalUnderstandingSourceId } from "../../../user-context/sources/local-source-contract.js";
+import { getWorkDiscoveryRun } from "../../../work-discovery/repository.js";
+import { normalizeUnderstandingSourceItems } from "../../../work-discovery/service.js";
+import { UnderstandingRefreshService } from "../../../user-context/sources/refresh-service.js";
+import { randomUUID } from "node:crypto";
+//#region src/gateway/hono/routes/user-model-refresh.ts
+function createUnderstandingRefreshService(deps) {
+	const service = deps.service;
+	return new UnderstandingRefreshService({
+		enabled: () => service.currentConfig.userContext.enabled && service.currentConfig.userContext.userModel.enabled,
+		emit: (type, payload) => service.emit(type, payload),
+		async start(grant, runId) {
+			if (grant.adapterId === "local-work-folders") return {
+				discoveryRunId: (await service.workDiscovery.rescanDirectorySource({
+					id: grant.id,
+					idempotencyKey: runId
+				})).id,
+				phase: "reading"
+			};
+			if (isLocalUnderstandingSourceId(grant.adapterId)) return { phase: "waiting_desktop" };
+			if (grant.adapterId.startsWith("connector:")) {
+				const account = typeof grant.config.accountId === "string" ? getConnectorAccount(grant.config.accountId) : void 0;
+				if (!account?.enabled || !account.currentConnectionId) throw new Error("Reconnect this source before updating.");
+				const job = service.requestConnectorLearning(account.currentConnectionId, {
+					mode: "incremental",
+					reason: "manual",
+					idempotencyKey: `understanding-refresh:${randomUUID()}`
+				});
+				if (!job) throw new Error("This source cannot currently be updated.");
+				return {
+					connectorLearningJobId: job.id,
+					accountId: account.id,
+					phase: "reading"
+				};
+			}
+			throw new Error("This source does not support understanding updates.");
+		},
+		progress(run) {
+			if (typeof run.metadata.discoveryRunId === "string") {
+				const discovery = getWorkDiscoveryRun(run.metadata.discoveryRunId);
+				if (!discovery) return {
+					status: "failed",
+					phase: "completed",
+					error: "Work folder update is no longer available."
+				};
+				return {
+					status: discovery.status === "completed" ? "completed" : discovery.status === "failed" || discovery.status === "canceled" ? "failed" : "running",
+					phase: discovery.status === "analyzing" ? "analyzing" : discovery.status === "queued" || discovery.status === "probing" ? "reading" : "completed",
+					error: discovery.errorMessage
+				};
+			}
+			if (typeof run.metadata.connectorLearningJobId === "string") {
+				const job = listConnectorLearningJobs({
+					accountId: String(run.metadata.accountId),
+					limit: 100
+				}).find((item) => item.id === run.metadata.connectorLearningJobId);
+				if (!job) return {
+					status: "failed",
+					phase: "completed",
+					error: "Connector update is no longer available."
+				};
+				const sourceRun = listUnderstandingSourceRuns(run.grantId, 100).find((item) => item.id !== run.id && item.metadata.connectorLearningJobId === job.id);
+				if (job.status === "completed") return {
+					status: sourceRun?.status === "partial" ? "partial" : "completed",
+					phase: "completed",
+					added: job.candidatesCreated,
+					itemsSeen: job.itemsDiscovered,
+					error: sourceRun?.status === "partial" ? "Some source information could not be analyzed. Retry this source." : void 0
+				};
+				if (job.status === "paused" || job.status === "failed") return {
+					status: "failed",
+					phase: "completed",
+					error: job.error ?? "Connector update failed."
+				};
+				return {
+					status: "running",
+					phase: job.phase === "deriving" ? "analyzing" : "reading",
+					itemsSeen: job.itemsDiscovered
+				};
+			}
+		},
+		async analyzeDesktop(grant, items, signal) {
+			const status = (await service.workDiscovery.importUnderstandingSources(items, grant.processingPolicy, signal, void 0, void 0, { grantId: grant.id })).sourceStatuses.find((item) => item.sourceId === grant.adapterId);
+			if (status?.status !== "completed") throw new Error(status?.error ?? "Source analysis did not complete.");
+			return {};
+		}
+	});
+}
+function registerUserModelRefreshRoutes(app, deps, refresh = createUnderstandingRefreshService(deps)) {
+	app.post("/api/user-model/refresh", deps.strictRateLimitMiddleware, async (c) => {
+		const input = await c.req.json().catch(() => null);
+		if (!input || typeof input !== "object" || Array.isArray(input) || input.sourceIds !== void 0 && (!Array.isArray(input.sourceIds) || !input.sourceIds.length || input.sourceIds.length > 100 || input.sourceIds.some((id) => typeof id !== "string" || !id))) return c.json({ error: "Provide sourceIds or an empty object to update all authorized sources." }, 400);
+		try {
+			return c.json({ batch: refresh.start(input.sourceIds) }, 202);
+		} catch (err) {
+			return c.json({ error: err instanceof Error ? err.message : String(err) }, 400);
+		}
+	});
+	app.get("/api/user-model/refresh", (c) => c.json({
+		batch: refresh.latest(),
+		sources: refresh.sources()
+	}));
+	app.get("/api/user-model/refresh/:id", (c) => {
+		const batch = refresh.get(c.req.param("id"));
+		return batch ? c.json({ batch }) : c.json({ error: "Update not found." }, 404);
+	});
+	app.post("/api/user-model/refresh/sources/:runId/collection", deps.strictRateLimitMiddleware, async (c) => {
+		const raw = await c.req.json().catch(() => null);
+		if (!raw || !Array.isArray(raw.items) || raw.items.length > 1200 || raw.error !== void 0 && typeof raw.error !== "string") return c.json({ error: "Invalid collection." }, 400);
+		const items = normalizeUnderstandingSourceItems(raw.items);
+		if (raw.items.length && !items.length) return c.json({ error: "No valid source items." }, 400);
+		try {
+			refresh.submitDesktop(c.req.param("runId"), {
+				items,
+				error: raw.error
+			});
+			return c.json({ ok: true }, 202);
+		} catch (err) {
+			return c.json({ error: err instanceof Error ? err.message : String(err) }, 409);
+		}
+	});
+}
+//#endregion
+export { createUnderstandingRefreshService, registerUserModelRefreshRoutes };

package/dist/src/gateway/hono/routes/user-model.js

@@ -1,10 +1,11 @@
 import { createCollaborationRule, getCollaborationRule, listCollaborationRules, setCollaborationRuleStatus } from "../../../storage/sqlite/collaboration-rule-repository.js";
-import { KnowledgeReviewConflictError, getKnowledgeItem, listKnowledgeItems, reviewKnowledgeItem, searchKnowledgeItems } from "../../../knowledge-memory/repository.js";
+import { KnowledgeReviewConflictError, deleteKnowledgeItem, getKnowledgeItem, listKnowledgeItems, reviewKnowledgeItem, searchKnowledgeItems } from "../../../knowledge-memory/repository.js";
 import "../../../knowledge-memory/index.js";
 import { createPriorityWindow, createUserGoal, listPriorityWindows, listUserGoals, setUserGoalStatus } from "../../../user-model/goals.js";
-import { getAssertionSlot, getUserAssertion, listUserAssertionSources, listUserAssertions, reconcileAssertion, setAssertionStatus } from "../../../user-model/repository.js";
+import { deleteUserAssertion, getAssertionSlot, getUserAssertion, listUserAssertionSources, listUserAssertions, reconcileAssertion, setAssertionStatus } from "../../../user-model/repository.js";
 import { applyUserProfilePatch, getUserProfileSnapshot } from "../../../user-model/profile.js";
 import { bootstrapUserModel } from "../../../user-model/bootstrap.js";
+import { canUseAssertion } from "../../../user-model/usage-policy.js";
 import "../../../user-model/index.js";
 import { listMemoryMaintenanceRuns } from "../../../memory-maintenance/service.js";
 import "../../../memory-maintenance/index.js";
@@ -117,7 +118,8 @@ function assertionView(assertion, sources = listUserAssertionSources([assertion.
 		predicate: slot.predicate,
 		subject: slot.subject,
 		scope: slot.scope,
-		sources
+		sources,
+		usable: canUseAssertion(assertion)
 	};
 }
 function registerUserModelRoutes(authenticated, deps) {
@@ -259,11 +261,14 @@ function registerUserModelRoutes(authenticated, deps) {
 				createdBy: "user",
 				...typeof input.correctionOfAssertionId === "string" ? { correctionOfAssertionId: input.correctionOfAssertionId } : {}
 			};
-			return c.json(reconcileAssertion(candidate), 201);
+			return c.json(reconcileAssertion(candidate, Date.now(), { restoreDeleted: true }), 201);
 		} catch (error) {
 			return c.json({ error: errorMessage(error) }, 400);
 		}
 	});
+	authenticated.delete("/api/user-model/assertions/:id", write, (c) => {
+		return deleteUserAssertion(c.req.param("id")) ? c.json({ ok: true }) : c.json({ error: "Assertion not found" }, 404);
+	});
 	authenticated.patch("/api/user-model/assertions/:id/status", write, async (c) => {
 		const input = await body(c);
 		const status = input?.status;
@@ -307,7 +312,6 @@ function registerUserModelRoutes(authenticated, deps) {
 				...current.validFrom === void 0 ? {} : { validFrom: current.validFrom },
 				...current.validTo === void 0 ? {} : { validTo: current.validTo },
 				observedAt: Date.now(),
-				...current.reviewAt === void 0 ? {} : { reviewAt: current.reviewAt },
 				createdBy: "user",
 				correctionOfAssertionId: current.id
 			}));
@@ -405,6 +409,9 @@ function registerUserModelRoutes(authenticated, deps) {
 		const item = getKnowledgeItem(c.req.param("id"));
 		return item ? c.json({ item }) : c.json({ error: "Knowledge item not found" }, 404);
 	});
+	authenticated.delete("/api/knowledge-memory/:id", write, (c) => {
+		return deleteKnowledgeItem(c.req.param("id")) ? c.json({ ok: true }) : c.json({ error: "Knowledge item not found" }, 404);
+	});
 	authenticated.post("/api/knowledge-memory/:id/review", write, async (c) => {
 		const input = await body(c);
 		const action = String(input?.action ?? "");

package/dist/src/gateway/hono/routes/work-discovery.js

@@ -216,36 +216,6 @@ function registerWorkDiscoveryRoutes(authenticated, deps) {
 			}, 400);
 		}
 	});
-	authenticated.post("/api/work-discovery/runs/:runId/profile", limited, async (c) => {
-		const body = await c.req.json().catch(() => null);
-		const decisions = (body && typeof body === "object" && Array.isArray(body.decisions) ? body.decisions : []).flatMap((value) => {
-			if (!value || typeof value !== "object") return [];
-			const item = value;
-			const id = typeof item.id === "string" ? item.id.trim() : "";
-			const status = item.status === "accepted" || item.status === "edited" || item.status === "rejected" ? item.status : void 0;
-			if (!id || !status) return [];
-			return [{
-				id,
-				status,
-				...typeof item.statement === "string" ? { statement: item.statement } : {}
-			}];
-		}).slice(0, 10);
-		if (!decisions.length) return c.json({
-			ok: false,
-			error: "At least one valid decision is required"
-		}, 400);
-		const run = service.updateProfileCandidates({
-			runId: c.req.param("runId"),
-			decisions
-		});
-		return run ? c.json({
-			ok: true,
-			run
-		}) : c.json({
-			ok: false,
-			error: "Profile candidates not found"
-		}, 404);
-	});
 	authenticated.post("/api/work-discovery/runs/:runId/suggestions/:suggestionId/select", (c) => {
 		return service.selectSuggestion(c.req.param("runId"), c.req.param("suggestionId")) ? c.json({ ok: true }) : c.json({
 			ok: false,

package/dist/src/gateway/index.js

@@ -1,7 +1,6 @@
 import { GatewayLockError, acquireGatewayLock, init_lock } from "./lock.js";
 import { buildDefaultCorsOrigins, isAllInterfacesHost, isLoopbackHost, resolveEffectiveGatewayPort, resolveGatewayServiceListenPort } from "./host.js";
 import { defaultGatewayBindMode, isContainerEnvironment, resolveGatewayBindHost, resolveGatewayBindHostSync, resolveGatewayBindMode, resolveGatewayEffectiveHost } from "../config/gateway-bind.js";
-import { checkPortAvailable, forceFreePortAndWait, listPortListeners, parseLsofOutput } from "./ports.js";
 import { assertGatewayAuthConfigured, extractToken, resolveGatewayAuth, validateToken } from "./auth.js";
 import { resolveGatewayListenHost, resolveGatewayListenPlan } from "./listen.js";
 import { buckets } from "./rate-limit/buckets.js";
@@ -13,6 +12,7 @@ import { GatewayService } from "./service.js";
 import { createHonoApp } from "./hono/app.js";
 import { GatewayServer } from "./server.js";
 import { runGatewayLoop } from "./run-loop.js";
+import { checkPortAvailable, forceFreePortAndWait, listPortListeners, parseLsofOutput } from "./ports.js";
 import { apiError, apiOk } from "./protocol.js";
 import "./hono/index.js";
 import { assertSecureGatewayHttpUrl, assertSecureWebSocketUrl, isInsecurePrivateWsAllowed, isSecureWebSocketUrl } from "./ws-security.js";

package/dist/src/gateway/run-loop.js

@@ -2,9 +2,9 @@ import { acquireGatewayLock, init_lock } from "./lock.js";
 import { loadConfig } from "../config/loader.js";
 import "../config/index.js";
 import { isRestartEnabled } from "../config/commands.flags.js";
-import { consumeGatewayRestartIntentSync, consumeGatewaySigusr1RestartAuthorization, isGatewaySigusr1RestartExternallyAllowed, resetGatewayRestartStateForInProcessRestart, scheduleGatewaySigusr1Restart, setGatewaySigusr1RestartPolicy } from "../infra/restart.js";
 import { runBootstrapMigrationsSync } from "../migrations/runner.js";
 import { restartGatewayProcessWithFreshPid } from "./respawn.js";
+import { consumeGatewayRestartIntentSync, consumeGatewaySigusr1RestartAuthorization, isGatewaySigusr1RestartExternallyAllowed, resetGatewayRestartStateForInProcessRestart, scheduleGatewaySigusr1Restart, setGatewaySigusr1RestartPolicy } from "../infra/restart.js";
 //#region src/gateway/run-loop.ts
 /**
 * Gateway Run Loop - Core run loop for gateway process management

package/dist/src/gateway/service.js

@@ -66,21 +66,18 @@ import { ConnectionRecoveryService } from "../connectors/connection-recovery-ser
 import { startConnectorLearningCoordinator } from "../connectors/learning-coordinator.js";
 import { ConnectedSourceChangePublisher } from "../connectors/source-change-publisher.js";
 import { startConnectorSupervisor } from "../connectors/supervisor.js";
-import { EndpointToolRuntime } from "../endpoint-tools/runtime.js";
-import "../endpoint-tools/index.js";
 import { DiscussionService } from "../discussions/service.js";
 import { DiscussionOrganizer } from "../discussions/organizer.js";
 import { DiscussionLiveWorker } from "../discussions/live-worker.js";
 import { DiscussionOrganizerWorker } from "../discussions/organizer-worker.js";
 import { DiscussionSealer } from "../discussions/sealer.js";
 import "../discussions/index.js";
-import { createBackgroundTask } from "../infra/background-task.js";
-import { scheduleGatewayUpdateCheck } from "../infra/update-startup.js";
-import { LocalAppService } from "../local-apps/service.js";
-import "../local-apps/index.js";
+import { EndpointToolRuntime } from "../endpoint-tools/runtime.js";
+import "../endpoint-tools/index.js";
 import { assertGatewayAuthConfigured, extractToken, resolveGatewayAuth, validateToken } from "./auth.js";
 import { prepareAutomationAgentSession } from "./automation-agent-session.js";
 import { stopTailscaleExposure } from "./tailscale-lifecycle.js";
+import { createBackgroundTask } from "../infra/background-task.js";
 import { buildTaskAgentContext } from "../agent/source-context/task-context.js";
 import { deliverProactiveCard } from "../proactive/inbox/delivery.js";
 import { WorkDiscoveryService } from "../work-discovery/service.js";
@@ -112,6 +109,8 @@ import { getXopcCloudCatalogCoordinator } from "../providers/xopc-cloud-catalog-
 import { ModelCatalogSyncService } from "../providers/model-catalog-sync-service.js";
 import { runBootstrapMigrationsSync } from "../migrations/runner.js";
 import { NotificationService } from "../notifications/service.js";
+import { LocalAppService } from "../local-apps/service.js";
+import "../local-apps/index.js";
 import { createRuntimeBrowserAutomationService } from "../browser/automations/runtime-service.js";
 import "../browser/automations/index.js";
 import { mapProductEventToProactive } from "../proactive/events/product-event-bridge.js";
@@ -121,6 +120,7 @@ import { ProactiveWorker } from "../proactive/execution/worker.js";
 import { ProactiveTemporalWorker } from "../proactive/temporal/worker.js";
 import { ProactiveInboxWorker } from "../proactive/inbox/worker.js";
 import "../proactive/index.js";
+import { scheduleGatewayUpdateCheck } from "../infra/update-startup.js";
 import { resolveChannelConnectDeferSet } from "./resolve-channel-connect-defer.js";
 import { restartGatewayProcessWithFreshPid } from "./respawn.js";
 import { GatewaySessionsApi } from "./service/sessions-api.js";

package/dist/src/infra/gateway-processes.js

@@ -1,5 +1,5 @@
-import { isGatewayArgv, parseProcCmdline } from "./gateway-process-argv.js";
 import { listPortListeners } from "../gateway/ports.js";
+import { isGatewayArgv, parseProcCmdline } from "./gateway-process-argv.js";
 import fs from "node:fs";
 import { spawnSync } from "node:child_process";
 //#region src/infra/gateway-processes.ts

package/dist/src/infra/update-restart.js

@@ -4,8 +4,8 @@ import { init_paths, resolveConfigPath } from "../config/paths.js";
 import { init_loader, loadConfig } from "../config/loader.js";
 import { isRestartEnabled } from "../config/commands.flags.js";
 import { resolveGatewayService } from "../daemon/service.js";
-import { findVerifiedGatewayListenerPidsOnPortSync, signalVerifiedGatewayPidSync } from "./gateway-processes.js";
 import { authorizeGatewaySigusr1Restart, writeGatewayRestartIntentSync } from "./restart.js";
+import { findVerifiedGatewayListenerPidsOnPortSync, signalVerifiedGatewayPidSync } from "./gateway-processes.js";
 import { refreshGatewayServiceAfterUpdate } from "./update-service-refresh.js";
 //#region src/infra/update-restart.ts
 init_loader();

package/dist/src/infra/update-runner.js

@@ -1,11 +1,11 @@
 import { runPostUpdateExtensionSync } from "../extensions/update.js";
+import "./update-channels.js";
+import { compareSemver, resolveNpmChannelTag } from "./update-check.js";
 import { readPackageName, readPackageVersion } from "./package-json.js";
 import { createDefaultCommandRunner, runCommandWithTimeout } from "./run-command.js";
 import { XOPC_PACKAGE_NAME, cleanupGlobalRenameDirs, createGlobalInstallEnv, detectGlobalInstallManagerForRoot, resolveGlobalInstallSpec, resolveGlobalInstallTarget } from "./update-global.js";
 import { runGlobalPackageUpdateSteps } from "./package-update-steps.js";
 import { resolveStableNodePath } from "./stable-node-path.js";
-import "./update-channels.js";
-import { compareSemver, resolveNpmChannelTag } from "./update-check.js";
 import { trimLogTail } from "./update-log.js";
 import { maybeRestartGatewayAfterUpdate } from "./update-restart.js";
 import path from "node:path";

package/dist/src/infra/update-startup.js

@@ -3,9 +3,9 @@ import { init_paths_state, resolveUpdateCheckStatePath } from "../config/paths-s
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
 import { init_write_file_atomic, writeTextAtomic } from "./write-file-atomic.js";
+import { acquireUpdateLock } from "./update-lock.js";
 import { normalizeUpdateChannel } from "./update-channels.js";
 import { compareSemver, detectInstallKind, resolveNpmChannelTag, resolvePackageRoot } from "./update-check.js";
-import { acquireUpdateLock } from "./update-lock.js";
 import { createHash, randomUUID } from "node:crypto";
 import { readFile } from "node:fs/promises";
 //#region src/infra/update-startup.ts

package/dist/src/knowledge/connected-knowledge-pipeline.js

@@ -106,7 +106,7 @@ var ConnectedKnowledgePipeline = class {
 				status: "completed"
 			});
 			result.completed += 1;
-			result.recordIds.push(written.item.id);
+			if (written.item) result.recordIds.push(written.item.id);
 		} catch (error) {
 			const message = error instanceof Error ? error.message : String(error);
 			completeKnowledgeSourceItemSynthesis({

package/dist/src/knowledge-memory/index.js

@@ -1,2 +1,2 @@
-import { KnowledgeReviewConflictError, classifyKnowledgeContentSource, getKnowledgeItem, knowledgeItemAllowed, listKnowledgeItems, listKnowledgeStatusEvents, reviewKnowledgeItem, searchKnowledgeItems, transitionKnowledgeStatus, writeKnowledgeItem } from "./repository.js";
-export { KnowledgeReviewConflictError, classifyKnowledgeContentSource, getKnowledgeItem, knowledgeItemAllowed, listKnowledgeItems, listKnowledgeStatusEvents, reviewKnowledgeItem, searchKnowledgeItems, transitionKnowledgeStatus, writeKnowledgeItem };
+import { KnowledgeReviewConflictError, classifyKnowledgeContentSource, deleteKnowledgeItem, getKnowledgeItem, isKnowledgeCurrent, knowledgeItemAllowed, listKnowledgeItems, listKnowledgeStatusEvents, reviewKnowledgeItem, searchKnowledgeItems, transitionKnowledgeStatus, writeKnowledgeItem } from "./repository.js";
+export { KnowledgeReviewConflictError, classifyKnowledgeContentSource, deleteKnowledgeItem, getKnowledgeItem, isKnowledgeCurrent, knowledgeItemAllowed, listKnowledgeItems, listKnowledgeStatusEvents, reviewKnowledgeItem, searchKnowledgeItems, transitionKnowledgeStatus, writeKnowledgeItem };

package/dist/src/knowledge-memory/repository.d.ts

@@ -21,6 +21,7 @@ export interface WriteKnowledgeInput {
     derivedFromRecalledContext?: boolean;
     source?: Record<string, unknown>;
     replaceExisting?: boolean;
+    restoreDeleted?: boolean;
     now?: number;
 }
 export declare class KnowledgeReviewConflictError extends Error {
@@ -29,6 +30,10 @@ export declare class KnowledgeReviewConflictError extends Error {
 export declare function writeKnowledgeItem(input: WriteKnowledgeInput): {
     item: KnowledgeItem;
     created: boolean;
+} | {
+    item?: undefined;
+    created: false;
+    suppressed: true;
 };
 export declare function getKnowledgeItem(id: string): KnowledgeItem | undefined;
 export declare function listKnowledgeItems(input?: {
@@ -70,3 +75,5 @@ export declare function searchKnowledgeItems(input: {
 }): KnowledgeItem[];
 export declare function classifyKnowledgeContentSource(item: KnowledgeItem): KnowledgeContentSource;
 export declare function knowledgeItemAllowed(item: KnowledgeItem, policy: KnowledgeReadPolicy): boolean;
+export declare function deleteKnowledgeItem(id: string, now?: number): boolean;
+export declare function isKnowledgeCurrent(item: KnowledgeItem, asOf?: number): boolean;

package/dist/src/knowledge-memory/repository.js

@@ -1,6 +1,7 @@
 import { getSqliteDatabase, init_transaction, runSqliteWriteTransaction } from "../storage/sqlite/transaction.js";
 import { validateScope } from "../user-model/domain.js";
 import { buildFts5SearchQuery, init_fts } from "../storage/sqlite/fts.js";
+import { clearMemoryAudit, isMemorySuppressed, memoryFingerprint, restoreMemory, suppressMemory } from "../user-context/memory-suppression.js";
 import { randomUUID } from "node:crypto";
 //#region src/knowledge-memory/repository.ts
 init_fts();
@@ -60,7 +61,14 @@ function writeKnowledgeItem(input) {
 	if (input.validFrom !== void 0 && input.validTo !== void 0 && input.validTo < input.validFrom) throw new Error("Knowledge validTo must be greater than or equal to validFrom.");
 	const principalId = input.principalId ?? "local-owner";
 	const now = input.now ?? Date.now();
+	const admittedStatus = input.status ?? (input.originClass === "owner" || input.originClass !== "untrusted" && input.confidence >= .7 && !input.derivedFromRecalledContext ? "active" : "candidate");
 	return runSqliteWriteTransaction((db) => {
+		const keys = knowledgeFingerprints(input);
+		if (input.restoreDeleted && input.originClass === "owner") restoreMemory(db, keys);
+		if (isMemorySuppressed(db, keys)) return {
+			created: false,
+			suppressed: true
+		};
 		const existingStatuses = input.replaceExisting ? [
 			"candidate",
 			"active",
@@ -76,12 +84,12 @@ function writeKnowledgeItem(input) {
 		const existing = db.prepare(`SELECT * FROM knowledge_items WHERE principal_id = ?
       AND canonical_key = ? AND scope_type = ? AND COALESCE(scope_id, '') = COALESCE(?, '')
       AND status IN (${existingStatuses.map(() => "?").join(", ")})`).get(principalId, input.canonicalKey.trim(), input.scope.type, input.scope.id ?? null, ...existingStatuses);
-		if (existing && !input.replaceExisting) return {
+		if (existing && (!input.replaceExisting || existing.origin_class === "owner" && input.originClass !== "owner")) return {
 			item: fromRow(existing),
 			created: false
 		};
 		if (existing) {
-			const nextStatus = input.status ?? (input.originClass === "owner" ? "active" : "candidate");
+			const nextStatus = admittedStatus;
 			db.prepare(`UPDATE knowledge_items SET kind = ?, content = ?, record_class = ?, status = ?, confidence = ?,
         importance = ?, valid_from = ?, valid_to = ?, expires_at = ?, review_at = ?,
         origin_class = ?, source_agent_id = ?, source_conversation_id = ?, source_turn_id = ?,
@@ -102,7 +110,7 @@ function writeKnowledgeItem(input) {
 			};
 		}
 		const id = randomUUID();
-		const status = input.status ?? (input.originClass === "owner" ? "active" : "candidate");
+		const status = admittedStatus;
 		db.prepare(`INSERT INTO knowledge_items (
       knowledge_id, principal_id, kind, scope_type, scope_id, content, canonical_key, record_class,
       status, confidence, importance, valid_from, valid_to, expires_at, review_at,
@@ -154,12 +162,14 @@ function transitionKnowledgeStatus(input) {
 		const current = db.prepare("SELECT * FROM knowledge_items WHERE knowledge_id = ?").get(input.id);
 		if (!current) return void 0;
 		if (input.expectedStatus && current.status !== input.expectedStatus) throw new KnowledgeReviewConflictError(`Knowledge status changed from ${input.expectedStatus} to ${current.status}.`);
-		db.prepare(`UPDATE knowledge_items SET status = ?, content = COALESCE(?, content), updated_at = ?
-      WHERE knowledge_id = ?`).run(input.status, content ?? null, now, input.id);
+		db.prepare(`UPDATE knowledge_items SET status = ?, content = COALESCE(?, content),
+      origin_class = CASE WHEN ? THEN 'owner' ELSE origin_class END, updated_at = ?
+      WHERE knowledge_id = ?`).run(input.status, content ?? null, input.actor === "user" && input.status === "active" ? 1 : 0, now, input.id);
 		if (content !== void 0) {
 			db.prepare("DELETE FROM knowledge_items_fts WHERE knowledge_id = ?").run(input.id);
 			db.prepare("INSERT INTO knowledge_items_fts(content, knowledge_id) VALUES (?, ?)").run(content, input.id);
 		}
+		if (input.actor === "user" && (input.status === "rejected" || input.status === "archived")) suppressMemory(db, knowledgeFingerprints(fromRow(current)), now);
 		insertStatusEvent(db, {
 			knowledgeId: input.id,
 			fromStatus: current.status,
@@ -184,7 +194,8 @@ const REVIEW_TRANSITIONS = {
 		from: [
 			"candidate",
 			"needs_review",
-			"stale"
+			"stale",
+			"active"
 		],
 		to: "active",
 		requiresContent: true
@@ -292,11 +303,12 @@ function searchKnowledgeItems(input) {
       AND (k.valid_from IS NULL OR k.valid_from <= ?)
       AND (k.valid_to IS NULL OR k.valid_to >= ?)
       AND (k.expires_at IS NULL OR k.expires_at >= ?)
+      AND (k.review_at IS NULL OR k.review_at > ?)
       ${input.recordClass ? "AND k.record_class = ?" : ""}
       ${input.trustedOnly ? "AND k.origin_class != 'untrusted'" : ""}
       AND ${contentSource}
       AND ${visible.sql}
-    ORDER BY rank ASC, k.importance DESC, k.updated_at DESC LIMIT ?`).all(fts, principalId, asOf, asOf, asOf, ...input.recordClass ? [input.recordClass] : [], ...visible.values, limit).map(fromRow);
+    ORDER BY rank ASC, k.importance DESC, k.updated_at DESC LIMIT ?`).all(fts, principalId, asOf, asOf, asOf, asOf, ...input.recordClass ? [input.recordClass] : [], ...visible.values, limit).map(fromRow);
 }
 function classifyKnowledgeContentSource(item) {
 	if (item.recordClass === "memory") return "memory";
@@ -305,5 +317,43 @@ function classifyKnowledgeContentSource(item) {
 function knowledgeItemAllowed(item, policy) {
 	return policy.scopes.includes(item.scope.type) && policy.contentSources.includes(classifyKnowledgeContentSource(item));
 }
+function knowledgeFingerprints(input) {
+	const principal = input.principalId ?? "local-owner";
+	return [memoryFingerprint([
+		"knowledge-key",
+		principal,
+		input.scope.type,
+		input.scope.id ?? "",
+		input.canonicalKey
+	]), memoryFingerprint([
+		"knowledge-content",
+		principal,
+		input.scope.type,
+		input.scope.id ?? "",
+		input.content
+	])];
+}
+function deleteKnowledgeItem(id, now = Date.now()) {
+	return runSqliteWriteTransaction((db) => {
+		const rows = db.prepare(`WITH RECURSIVE deleted(id) AS (
+      SELECT knowledge_id FROM knowledge_items WHERE knowledge_id = ?
+      UNION SELECT k.knowledge_id FROM knowledge_items k JOIN deleted d
+        ON json_extract(k.source_json, '$.episodeKnowledgeId') = d.id
+        OR k.knowledge_id = (SELECT json_extract(source_json, '$.episodeKnowledgeId')
+          FROM knowledge_items WHERE knowledge_id = d.id)
+    ) SELECT * FROM knowledge_items WHERE knowledge_id IN (SELECT id FROM deleted)`).all(id);
+		for (const row of rows) {
+			const item = fromRow(row);
+			suppressMemory(db, knowledgeFingerprints(item), now);
+			clearMemoryAudit(db, "knowledge", item.id);
+			db.prepare("DELETE FROM knowledge_items_fts WHERE knowledge_id = ?").run(item.id);
+			db.prepare("DELETE FROM knowledge_items WHERE knowledge_id = ?").run(item.id);
+		}
+		return rows.length > 0;
+	});
+}
+function isKnowledgeCurrent(item, asOf = Date.now()) {
+	return item.status === "active" && (item.validFrom === void 0 || item.validFrom <= asOf) && (item.validTo === void 0 || item.validTo >= asOf) && (item.expiresAt === void 0 || item.expiresAt >= asOf) && (item.reviewAt === void 0 || item.reviewAt > asOf);
+}
 //#endregion
-export { KnowledgeReviewConflictError, classifyKnowledgeContentSource, getKnowledgeItem, knowledgeItemAllowed, listKnowledgeItems, listKnowledgeStatusEvents, reviewKnowledgeItem, searchKnowledgeItems, transitionKnowledgeStatus, writeKnowledgeItem };
+export { KnowledgeReviewConflictError, classifyKnowledgeContentSource, deleteKnowledgeItem, getKnowledgeItem, isKnowledgeCurrent, knowledgeItemAllowed, listKnowledgeItems, listKnowledgeStatusEvents, reviewKnowledgeItem, searchKnowledgeItems, transitionKnowledgeStatus, writeKnowledgeItem };