@xopcai/xopc 0.0.306 → 0.0.308

package/dist/src/storage/sqlite/connector-sync-policy-repository.js

@@ -53,7 +53,7 @@ function upsertConnectorSyncPolicy(input) {
         interval_minutes = excluded.interval_minutes,
         allowed_scenario_keys_json = excluded.allowed_scenario_keys_json,
         revision = connector_sync_policies.revision + 1,
-        updated_at = excluded.updated_at`).run(input.accountId, input.scanEnabled ?? current?.scanEnabled ?? true ? 1 : 0, input.proactiveEnabled ?? current?.proactiveEnabled ?? false ? 1 : 0, intervalMinutes, JSON.stringify(allowedScenarioKeys), now);
+        updated_at = excluded.updated_at`).run(input.accountId, input.scanEnabled ?? current?.scanEnabled ?? false ? 1 : 0, input.proactiveEnabled ?? current?.proactiveEnabled ?? false ? 1 : 0, intervalMinutes, JSON.stringify(allowedScenarioKeys), now);
 	});
 	return getConnectorSyncPolicy(input.accountId);
 }

package/dist/src/storage/sqlite/index.js

@@ -28,6 +28,8 @@ import { COMPOSER_INPUT_HISTORY_LIMIT, appendComposerInputHistory, clearComposer
 import { bindEndpointPrincipal, createEndpointPrincipal, getEndpointPrincipal, listEndpointPrincipals, revokeEndpointPrincipal, touchEndpointPrincipal } from "./endpoint-principal-repository.js";
 import { finishEndpointToolInvocationAudit, listEndpointToolInvocationAudits, startEndpointToolInvocationAudit } from "./endpoint-tool-invocation-repository.js";
 import { getInteractionState, setInteractionState, updateInteractionStateFromMessage } from "./interaction-state-repository.js";
+import { getConnectorAccount, init_connector_account_repository, listConnectorAccounts, reconcileConnectorAccount, refreshConnectorAccountCurrent } from "./connector-account-repository.js";
+import { appendConnectorExecutionAudit, claimConnectorWebhookDelivery, completeConnectorWebhookDelivery, consumeConnectorApproval, createConnectorApproval, decideConnectorApproval, deleteConnectorConnection, deleteConnectorInstallation, getCachedConnectorCatalogEntry, getConnectorApproval, getConnectorConnection, getConnectorInstallation, init_connector_repository, listCachedConnectorCatalogEntries, listConnectorActionMetadata, listConnectorApprovals, listConnectorConnections, listConnectorExecutionAudit, listConnectorInstallations, releaseConnectorWebhookDelivery, replaceConnectorCatalogEntries, upsertConnectorActionMetadata, upsertConnectorCatalogEntry, upsertConnectorConnection, upsertConnectorInstallation } from "./connector-repository.js";
 import { deleteSessionRecord, ensureSessionRecord, findConversationIdByTranscriptId, getCurrentTranscriptId, getGlobalSessionStats, getSessionMetadata, getSessionPersistedLevels, incrementSessionStatsOnAppend, init_session_repository, listSessionMetadata, listSessionsByAgent, patchSessionMetadata, resetSessionRecord, resolveSessionAgentId, updateSessionStats } from "./session-repository.js";
 import { getSessionTaskPlan, setSessionTaskPlan } from "./session-task-plan-repository.js";
 import { buildRelationshipPrompt, getRelationshipSettings, isProactiveSupportAllowed, updateRelationshipSettings } from "./relationship-settings-repository.js";
@@ -37,8 +39,6 @@ import { deleteNoteAgentContextRecord, getNoteAgentContextRecord, upsertNoteAgen
 import { claimKnowledgeSourceItems, completeKnowledgeSourceItemSynthesis, countKnowledgeSourceItems, deleteKnowledgeSourceItems, finishKnowledgeSyncRun, getKnowledgeConsumerWatermark, getKnowledgeSourceCursor, getKnowledgeSourceItem, listKnowledgeSourceChanges, listKnowledgeSourceItems, listKnowledgeSyncRuns, pruneBoundedKnowledgeSourceItems, setKnowledgeConsumerWatermark, setKnowledgeSourceCursor, setKnowledgeSourceItemSynthesisStatus, startKnowledgeSyncRun, upsertKnowledgeSourceItems } from "./knowledge-repository.js";
 import { deleteSessionConfig, getSessionConfig, hasSessionConfig, setSessionConfig, updateSessionConfig } from "./config-repository.js";
 import { createObjectLinkRecord, deleteObjectLinkRecord, getActivityEventRecord, listActivityRecords, listObjectActivityRecords, listObjectLinkRecords, listProjectActivityRecords, recordActivityEvent } from "./activity-repository.js";
-import { appendConnectorExecutionAudit, claimConnectorWebhookDelivery, completeConnectorWebhookDelivery, consumeConnectorApproval, createConnectorApproval, decideConnectorApproval, deleteConnectorConnection, deleteConnectorInstallation, getCachedConnectorCatalogEntry, getConnectorApproval, getConnectorConnection, getConnectorInstallation, listCachedConnectorCatalogEntries, listConnectorActionMetadata, listConnectorApprovals, listConnectorConnections, listConnectorExecutionAudit, listConnectorInstallations, releaseConnectorWebhookDelivery, replaceConnectorCatalogEntries, upsertConnectorActionMetadata, upsertConnectorCatalogEntry, upsertConnectorConnection, upsertConnectorInstallation } from "./connector-repository.js";
-import { getConnectorAccount, listConnectorAccounts, reconcileConnectorAccount, refreshConnectorAccountCurrent } from "./connector-account-repository.js";
 import { getConnectorSyncPolicy, getConnectorSyncPolicyForConnection, listConnectorSyncPolicies, upsertConnectorSyncPolicy } from "./connector-sync-policy-repository.js";
 import { getUserTrustPolicy, setUserTrustPolicy } from "./user-trust-repository.js";
 //#region src/storage/sqlite/index.ts
@@ -53,5 +53,7 @@ init_session_input_repository();
 init_session_metadata();
 init_row_mappers();
 init_session_repository();
+init_connector_repository();
+init_connector_account_repository();
 //#endregion
 export { COMPOSER_INPUT_HISTORY_LIMIT, DatabaseSchemaMigrationGapError, DatabaseSchemaTooNewError, DatabaseSchemaTooOldError, SCHEMA_META_SCHEMA_VERSION_KEY, XOPC_DB_BASELINE_SCHEMA_VERSION, XOPC_DB_FILENAME, XOPC_DB_SCHEMA_VERSION, acknowledgeHomeAttention, appendCompactionBoundaryIfUnchanged, appendComposerInputHistory, appendConnectorExecutionAudit, appendMediaToAssistantTranscriptEntry, appendTranscriptEntry, applyPendingMigrations, authenticateDeviceAccessToken, bindEndpointPrincipal, buildDefaultSessionMetadata, buildGlobalSessionStats, buildRefreshProofMessage, buildRelationshipPrompt, cancelQueuedSessionInput, claimConnectorWebhookDelivery, claimContextExtractionRun, claimKnowledgeSourceItems, claimNextConnectorLearningJob, claimNextSessionInput, classifyStoredRow, clearComposerInputHistory, clearGatewayIdentityForTest, closeTemporalAssertions, closeXopcDatabase, completeConnectorWebhookDelivery, completeKnowledgeSourceItemSynthesis, consumeClarificationApproval, consumeClarificationResume, consumeConnectorApproval, countKnowledgeSourceItems, createClarificationWait, createCollaborationRule, createConnectorApproval, createContextEvidence, createDevice, createDevicePairingSetup, createEndpointPrincipal, createObjectLinkRecord, createTemporalAssertion, decideConnectorApproval, deleteBrowserTabBinding, deleteBrowserTabBindingsByEndpoint, deleteBrowserTabBindingsByPrincipal, deleteConnectorConnection, deleteConnectorInstallation, deleteEndpointSessionBinding, deleteEndpointSessionBindingsByPrincipal, deleteKnowledgeSourceItems, deleteNoteAgentContextRecord, deleteNoteRecord, deleteObjectLinkRecord, deleteSessionConfig, deleteSessionRecord, discoverSqlMigrations, enqueueConnectorLearningJob, ensureSessionRecord, ensureXopcDatabaseSchema, estimateTokensFromMessages, extractFtsContent, findConversationIdByTranscriptId, findLatestAssistantTranscriptEntryId, findSessionInput, finishContextExtractionRun, finishEndpointToolInvocationAudit, finishKnowledgeSyncRun, finishSessionInputRun, getActiveClarification, getActivityEventRecord, getBrowserTabBinding, getBrowserTabBindingById, getCachedConnectorCatalogEntry, getClarification, getClarificationResumeInput, getClarificationSnapshot, getCollaborationRule, getConnectorAccount, getConnectorApproval, getConnectorConnection, getConnectorInstallation, getConnectorSyncPolicy, getConnectorSyncPolicyForConnection, getContextExtractionRun, getCurrentTranscriptId, getDevice, getEndpointPrincipal, getEndpointSessionBinding, getGlobalSessionStats, getInteractionState, getKnowledgeConsumerWatermark, getKnowledgeSourceCursor, getKnowledgeSourceItem, getNoteAgentContextRecord, getNoteRecord, getOrCreateGatewayIdentity, getRelationshipSettings, getSessionConfig, getSessionInputById, getSessionInputState, getSessionMetadata, getSessionPersistedLevels, getSessionTaskPlan, getSqliteDatabase, getUserPeopleIndexState, getUserPerson, getUserTrustPolicy, getXopcDatabase, hasIndependentExtractionOutput, hasSessionConfig, incrementSessionStatsOnAppend, insertSessionInput, inspectSchemaMigrationStatus, isClarificationSuspended, isDevicePairingSetupActive, isHomeAttentionAcknowledged, isProactiveSupportAllowed, isXopcDatabaseOpen, issueDeviceTokenPair, linkContextObjects, listActiveSessionInputRuns, listActivityRecords, listCachedConnectorCatalogEntries, listCollaborationRules, listCompactionBoundaries, listComposerInputHistory, listConnectorAccounts, listConnectorActionMetadata, listConnectorApprovals, listConnectorConnections, listConnectorExecutionAudit, listConnectorInstallations, listConnectorLearningJobs, listConnectorSyncPolicies, listContextExtractionOutputs, listContextExtractionRuns, listContextObjectRelations, listDevices, listEndpointPrincipals, listEndpointToolInvocationAudits, listKnowledgeSourceChanges, listKnowledgeSourceItems, listKnowledgeSyncRuns, listNoteRecords, listObjectActivityRecords, listObjectLinkRecords, listProjectActivityRecords, listRegisteredMigrationTargets, listSessionMetadata, listSessionsByAgent, listTemporalAssertions, listUserPeople, loadCompactionSourceSnapshot, loadLlmMessagesForSession, loadTranscriptHistoryRowsForSession, loadTranscriptRows, loadTranscriptRowsForSession, mergeUserPeople, metadataToSessionInsert, mutateQueuedSessionInput, openXopcDatabase, paginateTranscriptMessages, patchSessionMetadata, pruneBoundedKnowledgeSourceItems, readSchemaVersion, readSchemaVersionForTest, reconcileConnectorAccount, recordActivityEvent, recoverSessionInputState, recoverStaleConnectorLearningJobs, refreshConnectorAccountCurrent, releaseConnectorWebhookDelivery, replaceConnectorCatalogEntries, replaceLatestSessionTurnAndQueueInput, replaceTranscriptRows, replaceUserPeopleIndex, requireXopcDatabase, resetSessionRecord, resetXopcDatabaseSingletonForTest, resolveClarification, resolveMigrationsDir, resolveSessionAgentId, resolveXopcDatabasePath, restoreBeforeCompactionBoundary, revokeDevice, revokeEndpointPrincipal, rotateDeviceRefreshToken, runSqliteWriteTransaction, searchSessionTranscript, sessionConfigRowToConfig, sessionRowToMetadata, setBrowserTabBinding, setCollaborationRuleStatus, setConnectorLearningPaused, setEndpointSessionBinding, setInteractionState, setKnowledgeConsumerWatermark, setKnowledgeSourceCursor, setKnowledgeSourceItemSynthesisStatus, setSessionConfig, setSessionInputStatus, setSessionTaskPlan, setUserTrustPolicy, signGatewayPayload, startEndpointToolInvocationAudit, startKnowledgeSyncRun, summarizeUserPeople, supersedeActiveClarification, touchEndpointPrincipal, transcriptEntryRowToStoredRow, updateConnectorLearningJob, updateInteractionStateFromMessage, updateRelationshipSettings, updateSessionConfig, updateSessionStats, updateUserPerson, upsertConnectorActionMetadata, upsertConnectorCatalogEntry, upsertConnectorConnection, upsertConnectorInstallation, upsertConnectorSyncPolicy, upsertKnowledgeSourceItems, upsertNoteAgentContextRecord, upsertNoteRecord, validateLatestSessionTurnTarget };

package/dist/src/storage/sqlite/migrations/182_connector_account_policies.sql

@@ -0,0 +1,92 @@
+ALTER TABLE connector_installations RENAME COLUMN selected_connection_ids_json TO selected_account_ids_json;
+UPDATE connector_installations
+SET selected_account_ids_json = CASE
+  WHEN json_array_length(selected_account_ids_json) = 0 THEN 'null'
+  ELSE (
+    SELECT json_group_array(DISTINCT c.account_id)
+    FROM json_each(connector_installations.selected_account_ids_json) selected
+    JOIN connector_connections c ON c.id = selected.value
+    WHERE c.principal_id = connector_installations.principal_id
+      AND c.connector_id = connector_installations.connector_id
+      AND c.account_id IS NOT NULL
+  )
+END;
+
+ALTER TABLE connector_accounts ADD COLUMN label TEXT;
+ALTER TABLE connector_accounts ADD COLUMN enabled INTEGER NOT NULL DEFAULT 1;
+ALTER TABLE connector_accounts ADD COLUMN allowed_agent_ids_json TEXT;
+UPDATE connector_accounts SET label = (
+  SELECT alias FROM connector_connections WHERE account_id = connector_accounts.id
+  AND alias IS NOT NULL ORDER BY is_default DESC, updated_at DESC LIMIT 1
+);
+
+CREATE TABLE connector_backends (
+  id TEXT PRIMARY KEY,
+  mode TEXT NOT NULL CHECK(mode IN ('managed', 'byok')),
+  label TEXT NOT NULL,
+  credential_ref TEXT,
+  credential_source TEXT NOT NULL DEFAULT 'stored' CHECK(credential_source IN ('stored','environment')),
+  verified_at TEXT,
+  active INTEGER NOT NULL DEFAULT 0,
+  created_at TEXT NOT NULL
+);
+CREATE UNIQUE INDEX idx_connector_backend_active ON connector_backends(active) WHERE active = 1;
+ALTER TABLE connector_accounts ADD COLUMN backend_id TEXT;
+DROP INDEX idx_connector_accounts_identity;
+CREATE UNIQUE INDEX idx_connector_accounts_identity
+  ON connector_accounts(principal_id, backend_id, connector_id, identity_key)
+  WHERE identity_key IS NOT NULL;
+
+CREATE TABLE connector_objective_accounts (
+  conversation_id TEXT NOT NULL,
+  transcript_id TEXT NOT NULL,
+  objective_id TEXT NOT NULL,
+  connector_id TEXT NOT NULL,
+  account_id TEXT NOT NULL REFERENCES connector_accounts(id) ON DELETE CASCADE,
+  PRIMARY KEY(conversation_id, transcript_id, objective_id, connector_id, account_id)
+);
+
+-- Provider IDs are scoped to a backend, not the whole installation.
+CREATE TABLE connector_connections_next (
+  id TEXT PRIMARY KEY,
+  installation_id TEXT REFERENCES connector_installations(id) ON DELETE SET NULL,
+  connector_id TEXT NOT NULL,
+  provider TEXT NOT NULL,
+  principal_id TEXT NOT NULL,
+  provider_connection_id TEXT NOT NULL,
+  alias TEXT,
+  identity_json TEXT NOT NULL DEFAULT '{}',
+  status TEXT NOT NULL DEFAULT 'unknown' CHECK(status IN ('pending','active','expired','failed','revoked','disabled','unknown')),
+  is_default INTEGER NOT NULL DEFAULT 0 CHECK(is_default IN (0,1)),
+  connected_at TEXT,
+  expires_at TEXT,
+  last_error TEXT,
+  metadata_json TEXT NOT NULL DEFAULT '{}',
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL,
+  account_id TEXT REFERENCES connector_accounts(id) ON DELETE CASCADE
+);
+INSERT INTO connector_connections_next SELECT * FROM connector_connections;
+DROP TABLE connector_connections;
+ALTER TABLE connector_connections_next RENAME TO connector_connections;
+CREATE INDEX idx_connector_connections_principal ON connector_connections(principal_id, connector_id, status);
+CREATE INDEX idx_connector_connections_account ON connector_connections(account_id);
+CREATE UNIQUE INDEX idx_connector_connections_provider_backend
+  ON connector_connections(provider, COALESCE(json_extract(metadata_json, '$.backendId'), ''), provider_connection_id);
+
+CREATE TABLE connector_authorization_attempts (
+  id TEXT PRIMARY KEY,
+  principal_id TEXT NOT NULL,
+  connector_id TEXT NOT NULL,
+  backend_id TEXT,
+  connection_id TEXT NOT NULL REFERENCES connector_connections(id) ON DELETE CASCADE,
+  expected_account_id TEXT,
+  authorization_url TEXT,
+  status TEXT NOT NULL CHECK(status IN ('awaiting_user','succeeded','failed','expired')),
+  expires_at INTEGER NOT NULL,
+  created_at INTEGER NOT NULL
+);
+CREATE INDEX idx_connector_authorization_attempt_scope ON connector_authorization_attempts(principal_id,connector_id,created_at);
+CREATE TABLE connector_runtime_identity (id INTEGER PRIMARY KEY CHECK(id = 1), installation_id TEXT NOT NULL);
+INSERT INTO connector_runtime_identity VALUES(1, lower(hex(randomblob(16))));
+ALTER TABLE connector_approvals ADD COLUMN wait_id TEXT;

package/dist/src/storage/sqlite/migrations/183_connector_backend_consistency.sql

@@ -0,0 +1,20 @@
+-- Repair only accounts whose authorizations agree on one known backend.
+-- Identity collisions are reconciled transactionally by the next provider sync.
+WITH candidates AS (
+  SELECT c.account_id, MIN(json_extract(c.metadata_json, '$.backendId')) AS backend_id
+  FROM connector_connections c
+  GROUP BY c.account_id
+  HAVING COUNT(DISTINCT json_extract(c.metadata_json, '$.backendId')) = 1
+    AND COUNT(json_extract(c.metadata_json, '$.backendId')) = COUNT(*)
+)
+UPDATE connector_accounts AS account
+SET backend_id = (SELECT backend_id FROM candidates WHERE account_id = account.id)
+WHERE account.backend_id IS NULL
+  AND EXISTS (SELECT 1 FROM candidates JOIN connector_backends backend ON backend.id = candidates.backend_id WHERE candidates.account_id = account.id)
+  AND NOT EXISTS (
+    SELECT 1 FROM connector_accounts other JOIN candidates ON candidates.account_id = account.id
+    WHERE other.id <> account.id
+      AND COALESCE(other.backend_id, (SELECT backend_id FROM candidates WHERE account_id = other.id)) = candidates.backend_id
+      AND other.principal_id = account.principal_id AND other.connector_id = account.connector_id
+      AND other.identity_key = account.identity_key
+  );

package/dist/src/storage/sqlite/migrations/184_memory_suppressions.sql

@@ -0,0 +1,12 @@
+CREATE TABLE memory_suppressions (
+  fingerprint TEXT PRIMARY KEY,
+  created_at INTEGER NOT NULL
+);
+
+UPDATE notification_events SET
+  event_type = 'work_discovery.completed',
+  dedupe_key = replace(dedupe_key, 'work_discovery.review_ready:', 'work_discovery.completed:'),
+  title_en = 'Understanding updated', title_zh = '用户理解已更新',
+  body_en = 'See what xopc learned. You can edit or delete it anytime.',
+  body_zh = '理解已自动整理，可随时查看、修改或删除。'
+WHERE event_type = 'work_discovery.review_ready';

package/dist/src/storage/sqlite/migrations/185_understanding_refresh_batches.sql

@@ -0,0 +1,6 @@
+CREATE TABLE understanding_refresh_batches (
+  batch_id TEXT PRIMARY KEY,
+  source_run_ids_json TEXT NOT NULL,
+  created_at INTEGER NOT NULL
+);
+CREATE INDEX idx_understanding_refresh_batches_created ON understanding_refresh_batches(created_at DESC);

package/dist/src/storage/sqlite/migrations/runner.d.ts

@@ -3,7 +3,7 @@ import type { ApplyMigrationsOptions } from './types.js';
 /** Baseline schema version applied from schema.sql on first open. */
 export declare const XOPC_DB_BASELINE_SCHEMA_VERSION = 165;
 /** Latest schema version this release supports (increment when adding migrations). */
-export declare const XOPC_DB_SCHEMA_VERSION = 181;
+export declare const XOPC_DB_SCHEMA_VERSION = 185;
 export declare function resolveMigrationsDir(override?: string): string;
 /**
  * Apply sequential SQL migrations from (currentVersion + 1) through targetVersion.

package/dist/src/storage/sqlite/migrations/runner.js

@@ -35,16 +35,16 @@ function applySingleMigration(db, migration) {
 		targetVersion: migration.targetVersion,
 		file: migration.filename
 	}, "Applying SQLite migration");
-	const rebuildDevices = migration.targetVersion === 179;
+	const rebuildParentTable = migration.targetVersion === 179 || migration.targetVersion === 182;
 	const foreignKeysEnabled = Number(db.prepare("PRAGMA foreign_keys").get()?.foreign_keys) === 1;
-	if (rebuildDevices) db.exec("PRAGMA foreign_keys = OFF");
+	if (rebuildParentTable) db.exec("PRAGMA foreign_keys = OFF");
 	let transactionStarted = false;
 	try {
 		db.exec("BEGIN IMMEDIATE");
 		transactionStarted = true;
 		db.exec(migration.sql);
 		const summary = migration.targetVersion === 178 ? migrateConversationUuids(db) : void 0;
-		if (rebuildDevices && db.prepare("PRAGMA foreign_key_check").all().length > 0) throw new Error("Device platform migration would violate foreign key integrity");
+		if (rebuildParentTable && db.prepare("PRAGMA foreign_key_check").all().length > 0) throw new Error("Parent table migration would violate foreign key integrity");
 		setSchemaVersion(db, migration.targetVersion);
 		db.exec("COMMIT");
 		return summary;
@@ -55,7 +55,7 @@ function applySingleMigration(db, migration) {
 		const em = error instanceof Error ? error.message : String(error);
 		throw new Error(`SQLite migration to v${migration.targetVersion} (${migration.filename}) failed: ${em}`, { cause: error });
 	} finally {
-		if (rebuildDevices && foreignKeysEnabled) db.exec("PRAGMA foreign_keys = ON");
+		if (rebuildParentTable && foreignKeysEnabled) db.exec("PRAGMA foreign_keys = ON");
 	}
 }
 /**
@@ -63,7 +63,7 @@ function applySingleMigration(db, migration) {
 * Each step runs in its own transaction and updates schema_meta on success.
 */
 function applyPendingMigrations(db, options = {}) {
-	const targetVersion = options.targetVersion ?? 181;
+	const targetVersion = options.targetVersion ?? 185;
 	let currentVersion = readSchemaVersion(db);
 	if (currentVersion > targetVersion) throw new DatabaseSchemaTooNewError(currentVersion, targetVersion);
 	if (!options.migrationsDir && currentVersion < 165) throw new DatabaseSchemaTooOldError(currentVersion, 165);
@@ -118,7 +118,7 @@ function applyPendingMigrations(db, options = {}) {
 }
 /** Inspect schema version without mutating the database. */
 function inspectSchemaMigrationStatus(db, options = {}) {
-	const appVersion = options.targetVersion ?? 181;
+	const appVersion = options.targetVersion ?? 185;
 	const dbVersion = readSchemaVersion(db);
 	if (dbVersion > appVersion) return {
 		dbVersion,
@@ -157,7 +157,7 @@ var init_runner = __esmMin((() => {
 	init_errors();
 	log = createLogger("Sqlite:Migrations");
 	XOPC_DB_BASELINE_SCHEMA_VERSION = 165;
-	XOPC_DB_SCHEMA_VERSION = 181;
+	XOPC_DB_SCHEMA_VERSION = 185;
 	MODULE_DIR = dirname(fileURLToPath(import.meta.url));
 }));
 //#endregion

package/dist/src/storage/sqlite/schema.js

@@ -33,7 +33,7 @@ function ensureXopcDatabaseSchema(db, options = {}) {
 		currentVersion = 165;
 	}
 	applyPendingMigrations(db, {
-		targetVersion: 181,
+		targetVersion: 185,
 		databasePath: fresh ? void 0 : options.databasePath
 	});
 }

package/dist/src/tasks/home-query-service.js

@@ -1,6 +1,6 @@
 import { isHomeAttentionAcknowledged } from "../storage/sqlite/home-attention-repository.js";
-import { getRelationshipSettings } from "../storage/sqlite/relationship-settings-repository.js";
 import { listConnectorApprovals } from "../storage/sqlite/connector-repository.js";
+import { getRelationshipSettings } from "../storage/sqlite/relationship-settings-repository.js";
 import "../storage/sqlite/index.js";
 import { TaskRepository } from "./task-repository.js";
 import { TaskReadModelProjector } from "./task-read-model-projector.js";
@@ -362,10 +362,10 @@ var HomeQueryService = class {
 				id: `connector-approval:${approval.id}`,
 				kind: "connector_approval",
 				title: approval.actionId,
-				detail: `${approval.connectorId} · ${approval.scope}`,
+				detail: `${approval.connectorId} · ${approval.scope}\n${JSON.stringify(approval.argumentsPreview).slice(0, 1600)}`,
 				reason: "approval_required",
 				urgency: "now",
-				href: "/connectors",
+				href: approval.conversationId ? `/chat/${encodeURIComponent(approval.conversationId)}` : "/connectors",
 				updatedAt: Date.parse(approval.createdAt),
 				response: {
 					kind: "connector_approval",

package/dist/src/tui/backends/gateway-realtime-backend.js

@@ -3,8 +3,8 @@ import { init_logger } from "../../utils/logger.js";
 import { transcriptRowsToClientHistory } from "../../session/client-history.js";
 import { parseModelRef } from "../../agent/models/selection.js";
 import { prependEnvelopeTimestamp } from "../../channels/envelope-timestamp.js";
-import { RealtimeClient } from "../../../packages/realtime-client/src/index.js";
 import { gatewayCredentialAuthorization } from "../../gateway/credential.js";
+import { RealtimeClient } from "../../../packages/realtime-client/src/index.js";
 import { buildTuiTranscriptTree, transcriptTreeEntryIdToRowNumber } from "../tui-transcript-tree.js";
 import { computeTuiSessionStats } from "../tui-session-stats.js";
 import { createRequire } from "node:module";

package/dist/src/tui/tui-startup-resources.js

@@ -2,10 +2,10 @@ import { resolveStateDir } from "../config/paths-state.js";
 import { resolveEffectiveAgentProfileForSession } from "../config/agent-profile.js";
 import { init_paths, resolveAgentProfileDir, resolveBundledSkillsDir } from "../config/paths.js";
 import { resolveBootstrapFilesSync } from "../agent/bootstrap/bootstrap-files.js";
+import { listConnectorInstances } from "../connectors/instances.js";
 import { createSkillConfigManager, isSkillEnabled } from "../agent/skills/config.js";
 import { loadSkills } from "../agent/skills/index.js";
 import { createWorkflowCatalog } from "../agent/workflow/catalog.js";
-import { listConnectorInstances } from "../connectors/instances.js";
 import { getWorkspacePath } from "../config/workspace-path-helpers.js";
 import "../config/index.js";
 import { basename } from "node:path";

package/dist/src/user-context/config.d.ts

@@ -39,7 +39,6 @@ export declare const UserModelConfigSchema: z.ZodDefault<z.ZodObject<{
     enabled: z.ZodDefault<z.ZodBoolean>;
     writePolicy: z.ZodDefault<z.ZodEnum<{
         allow: "allow";
-        confirm: "confirm";
         deny: "deny";
     }>>;
     sensitiveWritePolicy: z.ZodDefault<z.ZodEnum<{
@@ -76,12 +75,10 @@ export declare const UserModelConfigSchema: z.ZodDefault<z.ZodObject<{
         staleRetentionDays: z.ZodDefault<z.ZodNumber>;
     }, z.core.$strict>>;
 }, z.core.$strict>>;
-export declare function normalizeKnowledgeMemoryConfigInput(input: unknown): unknown;
-export declare const KnowledgeMemoryConfigSchema: z.ZodDefault<z.ZodPreprocess<z.ZodObject<{
+export declare const KnowledgeMemoryConfigSchema: z.ZodDefault<z.ZodObject<{
     enabled: z.ZodDefault<z.ZodBoolean>;
     writePolicy: z.ZodDefault<z.ZodEnum<{
         allow: "allow";
-        confirm: "confirm";
         deny: "deny";
     }>>;
     readScopes: z.ZodDefault<z.ZodArray<z.ZodEnum<{
@@ -114,7 +111,7 @@ export declare const KnowledgeMemoryConfigSchema: z.ZodDefault<z.ZodPreprocess<z
     allowExternalWrites: z.ZodDefault<z.ZodBoolean>;
     allowedProviderIds: z.ZodOptional<z.ZodArray<z.ZodString>>;
     autoWriteKinds: z.ZodOptional<z.ZodArray<z.ZodString>>;
-}, z.core.$strict>>>;
+}, z.core.$strict>>;
 export declare const ContextPlanningConfigSchema: z.ZodDefault<z.ZodObject<{
     enabled: z.ZodDefault<z.ZodBoolean>;
     maxAssertions: z.ZodDefault<z.ZodNumber>;
@@ -152,7 +149,6 @@ export declare const UserContextConfigSchema: z.ZodDefault<z.ZodObject<{
         enabled: z.ZodDefault<z.ZodBoolean>;
         writePolicy: z.ZodDefault<z.ZodEnum<{
             allow: "allow";
-            confirm: "confirm";
             deny: "deny";
         }>>;
         sensitiveWritePolicy: z.ZodDefault<z.ZodEnum<{
@@ -189,11 +185,10 @@ export declare const UserContextConfigSchema: z.ZodDefault<z.ZodObject<{
             staleRetentionDays: z.ZodDefault<z.ZodNumber>;
         }, z.core.$strict>>;
     }, z.core.$strict>>;
-    knowledgeMemory: z.ZodDefault<z.ZodPreprocess<z.ZodObject<{
+    knowledgeMemory: z.ZodDefault<z.ZodObject<{
         enabled: z.ZodDefault<z.ZodBoolean>;
         writePolicy: z.ZodDefault<z.ZodEnum<{
             allow: "allow";
-            confirm: "confirm";
             deny: "deny";
         }>>;
         readScopes: z.ZodDefault<z.ZodArray<z.ZodEnum<{
@@ -226,7 +221,7 @@ export declare const UserContextConfigSchema: z.ZodDefault<z.ZodObject<{
         allowExternalWrites: z.ZodDefault<z.ZodBoolean>;
         allowedProviderIds: z.ZodOptional<z.ZodArray<z.ZodString>>;
         autoWriteKinds: z.ZodOptional<z.ZodArray<z.ZodString>>;
-    }, z.core.$strict>>>;
+    }, z.core.$strict>>;
     contextPlanning: z.ZodDefault<z.ZodObject<{
         enabled: z.ZodDefault<z.ZodBoolean>;
         maxAssertions: z.ZodDefault<z.ZodNumber>;

package/dist/src/user-context/config.js

@@ -10,26 +10,6 @@ function isValidTimeZone(value) {
 		return false;
 	}
 }
-function normalizeKnowledgeMemoryConfigInput(input) {
-	if (!input || typeof input !== "object" || Array.isArray(input)) return input;
-	const memory = input;
-	if (!Array.isArray(memory.sources)) return input;
-	const oldSources = memory.sources.filter((source) => typeof source === "string");
-	const visibilityScopes = new Set([
-		"session",
-		"workspace",
-		"project"
-	]);
-	const normalized = { ...memory };
-	if (!Array.isArray(normalized.readScopes)) normalized.readScopes = oldSources.filter((source) => visibilityScopes.has(source));
-	if (!Array.isArray(normalized.contentSources)) normalized.contentSources = [
-		...oldSources.some((source) => visibilityScopes.has(source)) ? ["memory"] : [],
-		...oldSources.includes("workspace") ? ["local_import"] : [],
-		...oldSources.includes("connector") ? ["connector"] : []
-	];
-	delete normalized.sources;
-	return normalized;
-}
 function resolveKnowledgeReadPolicy(config) {
 	return {
 		scopes: config.readScopes,
@@ -82,7 +62,7 @@ var init_config = __esmMin((() => {
 	MaintenanceTimeSchema = z.string().regex(/^([01]\d|2[0-3]):[0-5]\d$/, "Expected time in HH:mm format");
 	UserModelConfigSchema = z.object({
 		enabled: z.boolean().default(true),
-		writePolicy: WritePolicySchema.default("confirm"),
+		writePolicy: z.enum(["deny", "allow"]).default("allow"),
 		sensitiveWritePolicy: WritePolicySchema.default("confirm"),
 		processingPolicy: z.enum(["local_only", "remote_allowed"]).default("remote_allowed"),
 		extraction: z.object({
@@ -124,7 +104,7 @@ var init_config = __esmMin((() => {
 		})
 	}).strict().default({
 		enabled: true,
-		writePolicy: "confirm",
+		writePolicy: "allow",
 		sensitiveWritePolicy: "confirm",
 		processingPolicy: "remote_allowed",
 		extraction: {
@@ -143,9 +123,9 @@ var init_config = __esmMin((() => {
 			staleRetentionDays: 30
 		}
 	});
-	KnowledgeMemoryConfigSchema = z.preprocess(normalizeKnowledgeMemoryConfigInput, z.object({
+	KnowledgeMemoryConfigSchema = z.object({
 		enabled: z.boolean().default(true),
-		writePolicy: WritePolicySchema.default("confirm"),
+		writePolicy: z.enum(["deny", "allow"]).default("allow"),
 		readScopes: z.array(z.enum([
 			"global",
 			"agent",
@@ -182,9 +162,9 @@ var init_config = __esmMin((() => {
 		allowExternalWrites: z.boolean().default(false),
 		allowedProviderIds: z.array(z.string().min(1)).optional(),
 		autoWriteKinds: z.array(z.string().min(1)).optional()
-	}).strict()).default({
+	}).strict().default({
 		enabled: true,
-		writePolicy: "confirm",
+		writePolicy: "allow",
 		readScopes: [
 			"global",
 			"agent",
@@ -227,4 +207,4 @@ var init_config = __esmMin((() => {
 }));
 //#endregion
 init_config();
-export { ContextCompactionPolicySchema, ContextPlanningConfigSchema, DEFAULT_CONTEXT_COMPACTION_POLICY, KnowledgeMemoryConfigSchema, UserContextConfigSchema, UserModelConfigSchema, init_config, normalizeKnowledgeMemoryConfigInput, resolveKnowledgeReadPolicy };
+export { ContextCompactionPolicySchema, ContextPlanningConfigSchema, DEFAULT_CONTEXT_COMPACTION_POLICY, KnowledgeMemoryConfigSchema, UserContextConfigSchema, UserModelConfigSchema, init_config, resolveKnowledgeReadPolicy };

package/dist/src/user-context/memory-suppression.d.ts

@@ -0,0 +1,7 @@
+import type { DatabaseSync } from 'node:sqlite';
+export declare function memoryFingerprint(parts: unknown[]): string;
+export declare function isMemorySuppressed(db: DatabaseSync, fingerprints: string[]): boolean;
+export declare function suppressMemory(db: DatabaseSync, fingerprints: string[], now: number): void;
+export declare function restoreMemory(db: DatabaseSync, fingerprints: string[]): void;
+/** Remove cached decisions containing deleted content; retain only unrelated audit rows. */
+export declare function clearMemoryAudit(db: DatabaseSync, type: 'assertion' | 'knowledge', id: string): void;

package/dist/src/user-context/memory-suppression.js

@@ -0,0 +1,23 @@
+import { createHash } from "node:crypto";
+//#region src/user-context/memory-suppression.ts
+function memoryFingerprint(parts) {
+	const normalized = parts.map((part) => typeof part === "string" ? part.normalize("NFKC").toLowerCase().replace(/\s+/g, " ").trim() : part);
+	return createHash("sha256").update(JSON.stringify(normalized)).digest("hex");
+}
+function isMemorySuppressed(db, fingerprints) {
+	return fingerprints.some((key) => db.prepare("SELECT 1 FROM memory_suppressions WHERE fingerprint = ?").get(key));
+}
+function suppressMemory(db, fingerprints, now) {
+	const insert = db.prepare("INSERT OR IGNORE INTO memory_suppressions (fingerprint, created_at) VALUES (?, ?)");
+	for (const key of fingerprints) insert.run(key, now);
+}
+function restoreMemory(db, fingerprints) {
+	for (const key of fingerprints) db.prepare("DELETE FROM memory_suppressions WHERE fingerprint = ?").run(key);
+}
+/** Remove cached decisions containing deleted content; retain only unrelated audit rows. */
+function clearMemoryAudit(db, type, id) {
+	db.prepare("DELETE FROM memory_maintenance_decisions WHERE object_type = ? AND object_id = ?").run(type, id);
+	db.prepare("DELETE FROM execution_context_items WHERE object_type = ? AND object_id = ?").run(type, id);
+}
+//#endregion
+export { clearMemoryAudit, isMemorySuppressed, memoryFingerprint, restoreMemory, suppressMemory };

package/dist/src/user-context/relationship-continuity.js

@@ -62,7 +62,7 @@ function recordExplicitRelationshipFollowUp(input) {
 		createdBy: "user",
 		evidenceId: evidence.id,
 		evidenceConfidence: 1
-	}, now).assertion;
+	}, now, { restoreDeleted: true }).assertion ?? null;
 }
 //#endregion
 export { extractExplicitRelationshipFollowUp, recordExplicitRelationshipFollowUp };

package/dist/src/user-context/sources/refresh-service.d.ts

@@ -0,0 +1,48 @@
+import type { UnderstandingSourceGrant, UnderstandingSourceItem, UnderstandingSourceRun } from './types.js';
+export type RefreshProgress = {
+    status: UnderstandingSourceRun['status'];
+    phase: 'queued' | 'waiting_desktop' | 'reading' | 'analyzing' | 'completed';
+    added?: number;
+    updated?: number;
+    itemsSeen?: number;
+    error?: string;
+};
+export type RefreshSourceRun = UnderstandingSourceRun & {
+    adapterId: string;
+    displayName: string;
+};
+export type RefreshBatch = {
+    id: string;
+    status: 'running' | 'completed' | 'partial' | 'failed';
+    sources: RefreshSourceRun[];
+    createdAt: number;
+};
+export interface UnderstandingRefreshDeps {
+    enabled(): boolean;
+    start(grant: UnderstandingSourceGrant, runId: string): Promise<Record<string, unknown>>;
+    progress(run: UnderstandingSourceRun): RefreshProgress | undefined;
+    analyzeDesktop(grant: UnderstandingSourceGrant, items: UnderstandingSourceItem[], signal: AbortSignal): Promise<{
+        added?: number;
+        updated?: number;
+    }>;
+    emit?(type: string, payload: unknown): void;
+}
+/** Coordinates existing source executors; the source run remains the authority for progress. */
+export declare class UnderstandingRefreshService {
+    private readonly deps;
+    private readonly owner;
+    private readonly starting;
+    private readonly analyzing;
+    constructor(deps: UnderstandingRefreshDeps);
+    start(sourceIds?: string[]): RefreshBatch;
+    sources(): RefreshSourceRun[];
+    latest(): RefreshBatch | null;
+    get(id: string): RefreshBatch | null;
+    private update;
+    private reconcile;
+    private dispatch;
+    submitDesktop(runId: string, input: {
+        items: UnderstandingSourceItem[];
+        error?: string;
+    }): void;
+}