@xopcai/xopc 0.0.306 → 0.0.308

package/dist/src/work-discovery/service.d.ts

@@ -62,7 +62,14 @@ export declare class WorkDiscoveryService {
         reused?: undefined;
     }>;
     revokeDirectorySource(id: string): import("./types.js").WorkDiscoveryDirectorySource;
-    importUnderstandingSources(rawItems: unknown[], processingPolicy: ModelProcessingPolicy, signal?: AbortSignal, runId?: string, rawCheckpoints?: Record<string, unknown>): Promise<{
+    importUnderstandingSources(rawItems: unknown[], processingPolicy: ModelProcessingPolicy, signal?: AbortSignal, runId?: string, rawCheckpoints?: Record<string, unknown>, refresh?: {
+        grantId: string;
+    }): Promise<{
+        profileCandidates: any[];
+        workThreads: import("./types.js").WorkUnderstandingThread[];
+        knowledgeCandidates: import("../knowledge-memory/domain.js").KnowledgeItem[];
+        sourceStatuses: import("./analyzer.js").UnderstandingSourceAnalysisStatus[];
+    } | {
         profileCandidates: any[];
         workThreads: any[];
         knowledgeCandidates: any[];
@@ -70,21 +77,6 @@ export declare class WorkDiscoveryService {
             sourceId: string;
             status: "completed";
         }[];
-    } | {
-        profileCandidates: {
-            status: "pending" | "rejected";
-            assertionId: string;
-            id: string;
-            category: "role" | "responsibility" | "preference" | "routine" | "communication" | "boundary" | "relationship";
-            factKey: string;
-            statement: string;
-            confidence: "high" | "medium" | "low";
-            evidence: string[];
-            evidenceRefs?: string[];
-        }[];
-        workThreads: import("./types.js").WorkUnderstandingThread[];
-        knowledgeCandidates: import("../knowledge-memory/domain.js").KnowledgeItem[];
-        sourceStatuses: import("./analyzer.js").UnderstandingSourceAnalysisStatus[];
     }>;
     rescanDirectorySource(input: {
         id: string;
@@ -103,14 +95,6 @@ export declare class WorkDiscoveryService {
     private publish;
     private execute;
     private persistProfileCandidates;
-    updateProfileCandidates(input: {
-        runId: string;
-        decisions: Array<{
-            id: string;
-            status: 'accepted' | 'edited' | 'rejected';
-            statement?: string;
-        }>;
-    }): WorkDiscoveryRun | null;
     cancelRun(id: string): WorkDiscoveryRun | null;
     retryRun(id: string): WorkDiscoveryRun | null;
     submitRecognitionFeedback(input: {

package/dist/src/work-discovery/service.js

@@ -1,5 +1,6 @@
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
+import { init_transaction, runSqliteWriteTransaction } from "../storage/sqlite/transaction.js";
 import { createContextEvidence } from "../storage/sqlite/context-evidence-repository.js";
 import { ensureSessionRecord, patchSessionMetadata } from "../storage/sqlite/session-repository.js";
 import "../storage/sqlite/index.js";
@@ -12,12 +13,12 @@ import { init_providers, resolveModel } from "../providers/index.js";
 import { writeKnowledgeItem } from "../knowledge-memory/repository.js";
 import "../knowledge-memory/index.js";
 import { createPriorityWindow, createUserGoal } from "../user-model/goals.js";
-import { getAssertionSlot, getUserAssertion, linkAssertionEvidence, reconcileAssertion, setAssertionStatus } from "../user-model/repository.js";
+import { linkAssertionEvidence, reconcileAssertion } from "../user-model/repository.js";
 import "../user-model/index.js";
 import { isLocalModelBaseUrl } from "../providers/model-call.js";
 import { allowsRemoteSourceProcessing } from "../user-context/sources/processing-policy.js";
 import { analyzeUnderstandingSources, analyzeWorkContext, workDiscoveryResultMarkdown } from "./analyzer.js";
-import { createUnderstandingSourceRun, getUnderstandingSourceRun, updateUnderstandingSourceGrantCheckpoint, updateUnderstandingSourceGrantPolicies, updateUnderstandingSourceRun, upsertUnderstandingSourceGrant } from "../user-context/sources/repository.js";
+import { createUnderstandingSourceRun, getUnderstandingSourceGrant, getUnderstandingSourceRun, updateUnderstandingSourceGrantCheckpoint, updateUnderstandingSourceGrantPolicies, updateUnderstandingSourceRun, upsertUnderstandingSourceGrant } from "../user-context/sources/repository.js";
 import { clusterActivityTopics } from "../user-context/sources/activity-clustering.js";
 import { isLocalUnderstandingSourceId } from "../user-context/sources/local-source-contract.js";
 import { discoverWorkCandidates } from "./candidate-discovery.js";
@@ -36,6 +37,7 @@ init_schema();
 init_providers();
 init_session_key();
 init_resolve_route();
+init_transaction();
 init_logger();
 const log = createLogger("WorkDiscovery");
 const MAX_UNDERSTANDING_ITEMS = 150;
@@ -199,45 +201,6 @@ function persistUnderstandingCandidate(candidate, scope, sourceRef) {
 		evidenceConfidence: candidate.confidence === "high" ? .9 : .7
 	}).assertion;
 }
-function decideAssertion(input, _expectedSourcePrefix) {
-	const current = getUserAssertion(input.assertionId);
-	if (!current || current.status === "archived") return void 0;
-	if (input.status === "rejected") return setAssertionStatus(current.id, "rejected", {
-		actor: "user",
-		reason: "Rejected in work discovery review."
-	});
-	const statement = input.status === "edited" ? input.statement?.trim().slice(0, 500) : void 0;
-	if (input.status === "edited" && !statement) return void 0;
-	if (!statement) return setAssertionStatus(current.id, "active", {
-		actor: "user",
-		reason: "Accepted in work discovery review."
-	});
-	const slot = getAssertionSlot(current.slotId);
-	if (!slot) return void 0;
-	return reconcileAssertion({
-		subject: slot.subject,
-		predicate: slot.predicate,
-		cardinality: slot.cardinality,
-		scope: slot.scope,
-		kind: current.kind,
-		value: statement,
-		normalizedValue: statement.toLocaleLowerCase(),
-		statement,
-		authority: "user_explicit",
-		confidence: 1,
-		declaredImportance: current.declaredImportance ?? .7,
-		inferredImportance: current.inferredImportance,
-		consequence: current.consequence,
-		actionability: current.actionability,
-		volatility: current.volatility,
-		sensitivity: current.sensitivity,
-		disclosurePolicy: current.disclosurePolicy,
-		applicability: current.applicability,
-		observedAt: Date.now(),
-		createdBy: "user",
-		correctionOfAssertionId: current.id
-	}).assertion;
-}
 function persistWorkKnowledge(input) {
 	const now = Date.now();
 	return writeKnowledgeItem({
@@ -518,8 +481,17 @@ var WorkDiscoveryService = class {
 	revokeDirectorySource(id) {
 		return revokeWorkDiscoveryDirectorySource(id);
 	}
-	async importUnderstandingSources(rawItems, processingPolicy, signal, runId, rawCheckpoints) {
+	async importUnderstandingSources(rawItems, processingPolicy, signal, runId, rawCheckpoints, refresh) {
 		const items = normalizeUnderstandingSourceItems(rawItems);
+		const assertRefreshAuthorized = () => {
+			signal?.throwIfAborted();
+			if (!refresh) return;
+			const config = this.options.getConfig();
+			if (!config.userContext.enabled || !config.userContext.userModel.enabled) throw new Error("User understanding is disabled.");
+			const grant = getUnderstandingSourceGrant(refresh.grantId);
+			if (!grant || grant.status !== "active" || grant.processingPolicy !== processingPolicy || items.some((item) => item.sourceId !== grant.adapterId)) throw new Error("Source authorization changed during update.");
+		};
+		assertRefreshAuthorized();
 		if (!items.length) throw new Error("No readable understanding source items were provided");
 		const target = this.getModelProcessingTarget();
 		const agentId = getDefaultAgentId(this.options.getConfig());
@@ -541,7 +513,7 @@ var WorkDiscoveryService = class {
 			const sourceItems = items.filter((item) => item.sourceId === sourceId);
 			const category = sourceItems.some((item) => item.type === "calendar_event") ? "calendar" : sourceItems.some((item) => item.type === "task") ? "tasks" : sourceItems.some((item) => item.type === "note") ? "notes" : sourceItems.some((item) => item.type === "mail") ? "mail" : sourceItems.some((item) => item.type === "message") ? "messages" : sourceItems.some((item) => item.type === "code_activity") ? "code_activity" : "recent_documents";
 			const platform = sourceId.startsWith("apple-") ? "darwin" : sourceId.startsWith("windows-") ? "win32" : sourceId.startsWith("linux-") ? "linux" : "all";
-			let grant = upsertUnderstandingSourceGrant({
+			let grant = refresh ? getUnderstandingSourceGrant(refresh.grantId) : upsertUnderstandingSourceGrant({
 				sourceKey: `understanding-source:${sourceId}`,
 				adapterId: sourceId,
 				category,
@@ -552,11 +524,11 @@ var WorkDiscoveryService = class {
 				processingPolicy: effectiveProcessingPolicy,
 				config: { readOnly: true }
 			});
-			if (grant.processingPolicy !== effectiveProcessingPolicy) grant = updateUnderstandingSourceGrantPolicies(grant.id, { processingPolicy: effectiveProcessingPolicy }) ?? grant;
+			if (!refresh && grant.processingPolicy !== effectiveProcessingPolicy) grant = updateUnderstandingSourceGrantPolicies(grant.id, { processingPolicy: effectiveProcessingPolicy }) ?? grant;
 			sourceGrants.set(sourceId, grant);
 			const checkpoint = checkpoints.get(sourceId);
 			const previousFingerprint = typeof grant.checkpoint.fingerprint === "string" ? grant.checkpoint.fingerprint : void 0;
-			const unchanged = Boolean(checkpoint && previousFingerprint === checkpoint.fingerprint);
+			const unchanged = !refresh && Boolean(checkpoint && previousFingerprint === checkpoint.fingerprint);
 			const kind = !previousFingerprint ? "bootstrap" : unchanged ? "fingerprint" : "incremental";
 			const sourceRun = createUnderstandingSourceRun({
 				grantId: grant.id,
@@ -625,6 +597,8 @@ var WorkDiscoveryService = class {
 					status: "completed"
 				}))
 			};
+			assertRefreshAuthorized();
+			if (refresh && analysis.sourceStatuses.some((source) => source.status !== "completed")) throw new Error("Source analysis did not complete. Please retry.");
 			const statusBySource = new Map(analysis.sourceStatuses.map((item) => [item.sourceId, item]));
 			for (const [sourceId, sourceRunId] of sourceRuns) {
 				if (!changedSourceIds.has(sourceId)) continue;
@@ -665,123 +639,127 @@ var WorkDiscoveryService = class {
 			}
 			throw error;
 		}
-		const rawContents = analysisItems.flatMap((item) => item.text ? [item.text] : []);
-		const activityTopics = clusterActivityTopics(analysisItems);
-		const safeProfileCandidates = analysis.profileCandidates.filter((candidate) => !hasLongVerbatimOverlap(candidate.statement, rawContents));
-		const safeWorkThreadCandidates = analysis.workThreadCandidates.filter((candidate) => !hasLongVerbatimOverlap(candidate.title, rawContents) && !hasLongVerbatimOverlap(candidate.summary, rawContents));
-		const profileCandidates = safeProfileCandidates.map((candidate) => {
-			const assertion = persistUnderstandingCandidate(candidate, { type: "global" }, "understanding-source:onboarding");
-			const evidenceSourceIds = new Set((candidate.evidenceRefs ?? []).map((ref) => ref.split("://", 1)[0]).filter(Boolean));
-			for (const sourceId of evidenceSourceIds) {
-				const sourceRunId = sourceRuns.get(sourceId);
-				if (!sourceRunId) continue;
-				const sourceRun = getUnderstandingSourceRun(sourceRunId);
-				if (!sourceRun) continue;
-				const evidence = createContextEvidence({
-					sourceType: "runtime",
-					sourceRef: `understanding-source-grant:${sourceRun.grantId}:${candidate.id}`,
-					redactedExcerpt: candidate.evidence.join(" · ").slice(0, 600),
-					trustLevel: "trusted",
-					observedAt: Date.now()
+		return runSqliteWriteTransaction(() => {
+			const rawContents = analysisItems.flatMap((item) => item.text ? [item.text] : []);
+			const activityTopics = clusterActivityTopics(analysisItems);
+			const safeProfileCandidates = analysis.profileCandidates.filter((candidate) => !hasLongVerbatimOverlap(candidate.statement, rawContents));
+			const safeWorkThreadCandidates = analysis.workThreadCandidates.filter((candidate) => !hasLongVerbatimOverlap(candidate.title, rawContents) && !hasLongVerbatimOverlap(candidate.summary, rawContents));
+			const profileCandidates = safeProfileCandidates.flatMap((candidate) => {
+				const assertion = persistUnderstandingCandidate(candidate, { type: "global" }, "understanding-source:onboarding");
+				if (!assertion) return [];
+				const evidenceSourceIds = new Set((candidate.evidenceRefs ?? []).map((ref) => ref.split("://", 1)[0]).filter(Boolean));
+				for (const sourceId of evidenceSourceIds) {
+					const sourceRunId = sourceRuns.get(sourceId);
+					if (!sourceRunId) continue;
+					const sourceRun = getUnderstandingSourceRun(sourceRunId);
+					if (!sourceRun) continue;
+					const evidence = createContextEvidence({
+						sourceType: "runtime",
+						sourceRef: `understanding-source-grant:${sourceRun.grantId}:${candidate.id}`,
+						redactedExcerpt: candidate.evidence.join(" · ").slice(0, 600),
+						trustLevel: "trusted",
+						observedAt: Date.now()
+					});
+					linkAssertionEvidence(assertion.id, evidence.id, "supports", assertion.confidence);
+				}
+				return {
+					...candidate,
+					status: assertion.status === "rejected" ? "rejected" : "pending",
+					assertionId: assertion.id
+				};
+			});
+			const investigation = linkedRun ? getWorkUnderstandingInvestigationForRun(linkedRun.id) : null;
+			const contextEvidence = investigation ? safeWorkThreadCandidates.map((candidate) => {
+				const topicHash = createHash("sha256").update(candidate.topicKey).digest("hex").slice(0, 16);
+				return appendWorkUnderstandingEvidence({
+					investigationId: investigation.id,
+					projectId: linkedRun.projectId,
+					sourceType: "understanding_source",
+					sourceRef: `understanding-source://thread/${topicHash}`,
+					observation: candidate.summary,
+					contentHash: createHash("sha256").update(JSON.stringify(candidate.evidenceRefs)).digest("hex"),
+					sensitivity: "normal"
 				});
-				linkAssertionEvidence(assertion.id, evidence.id, "supports", assertion.confidence);
-			}
-			return {
-				...candidate,
-				status: assertion.status === "rejected" ? "rejected" : "pending",
-				assertionId: assertion.id
-			};
-		});
-		const investigation = linkedRun ? getWorkUnderstandingInvestigationForRun(linkedRun.id) : null;
-		const contextEvidence = investigation ? safeWorkThreadCandidates.map((candidate) => {
-			const topicHash = createHash("sha256").update(candidate.topicKey).digest("hex").slice(0, 16);
-			return appendWorkUnderstandingEvidence({
-				investigationId: investigation.id,
+			}) : [];
+			const workThreads = linkedRun && contextEvidence.length ? persistWorkThreadsFromDiscovery({
 				projectId: linkedRun.projectId,
-				sourceType: "understanding_source",
-				sourceRef: `understanding-source://thread/${topicHash}`,
-				observation: candidate.summary,
-				contentHash: createHash("sha256").update(JSON.stringify(candidate.evidenceRefs)).digest("hex"),
-				sensitivity: "normal"
-			});
-		}) : [];
-		const workThreads = linkedRun && contextEvidence.length ? persistWorkThreadsFromDiscovery({
-			projectId: linkedRun.projectId,
-			result: {
-				projectSummary: "Connected source context",
-				currentState: "Work streams inferred from sources the user explicitly connected.",
-				uncertainties: [],
-				suggestions: [],
-				workThreadCandidates: safeWorkThreadCandidates.map((candidate, index) => ({
-					...candidate,
-					evidenceRefs: contextEvidence[index] ? [contextEvidence[index].sourceRef] : []
-				}))
-			},
-			snapshot: {
-				root: {
-					displayName: "Connected Sources",
-					projectKind: "general",
-					markerReasons: ["explicitly_connected_understanding_sources"]
+				result: {
+					projectSummary: "Connected source context",
+					currentState: "Work streams inferred from sources the user explicitly connected.",
+					uncertainties: [],
+					suggestions: [],
+					workThreadCandidates: safeWorkThreadCandidates.map((candidate, index) => ({
+						...candidate,
+						evidenceRefs: contextEvidence[index] ? [contextEvidence[index].sourceRef] : []
+					}))
 				},
-				structure: {
-					sampledPaths: [],
-					metadataOnlyFiles: [],
-					omittedPathCount: 0
+				snapshot: {
+					root: {
+						displayName: "Connected Sources",
+						projectKind: "general",
+						markerReasons: ["explicitly_connected_understanding_sources"]
+					},
+					structure: {
+						sampledPaths: [],
+						metadataOnlyFiles: [],
+						omittedPathCount: 0
+					},
+					documents: [],
+					limits: {
+						policyVersion: 1,
+						fileCount: 0,
+						contentBytes: 0,
+						truncated: false
+					}
 				},
-				documents: [],
-				limits: {
-					policyVersion: 1,
-					fileCount: 0,
-					contentBytes: 0,
-					truncated: false
-				}
-			},
-			evidence: contextEvidence
-		}) : [];
-		const activityEvidence = new Set(activityTopics.flatMap((topic) => topic.evidenceRefs));
-		const activityKnowledge = activityTopics.map((topic) => persistWorkKnowledge({
-			canonicalKey: topic.canonicalKey,
-			title: topic.title,
-			summary: topic.summary,
-			horizon: topic.horizon,
-			confidence: topic.confidence,
-			scope: {
-				type: "agent",
-				id: agentId
-			},
-			evidenceRefs: topic.evidenceRefs
-		}));
-		const modelKnowledge = safeWorkThreadCandidates.filter((candidate) => !candidate.evidenceRefs.some((ref) => activityEvidence.has(ref))).map((candidate) => persistWorkKnowledge({
-			canonicalKey: `source-knowledge:${candidate.topicKey}`,
-			title: candidate.title,
-			summary: candidate.summary,
-			horizon: candidate.horizon,
-			confidence: candidate.confidence === "high" ? .9 : candidate.confidence === "medium" ? .72 : .55,
-			scope: {
-				type: "agent",
-				id: agentId
-			},
-			evidenceRefs: candidate.evidenceRefs
-		}));
-		const knowledgeCandidates = [...activityKnowledge, ...modelKnowledge];
-		log.info({
-			runId,
-			itemCount: items.length,
-			candidateCount: profileCandidates.length,
-			knowledgeCount: knowledgeCandidates.length,
-			incompleteSourceCount: analysis.sourceStatuses.filter((item) => item.status !== "completed").length
-		}, "Understanding sources analyzed");
-		return {
-			profileCandidates,
-			workThreads,
-			knowledgeCandidates,
-			sourceStatuses: analysis.sourceStatuses
-		};
+				evidence: contextEvidence
+			}) : [];
+			const activityEvidence = new Set(activityTopics.flatMap((topic) => topic.evidenceRefs));
+			const activityKnowledge = activityTopics.map((topic) => persistWorkKnowledge({
+				canonicalKey: topic.canonicalKey,
+				title: topic.title,
+				summary: topic.summary,
+				horizon: topic.horizon,
+				confidence: topic.confidence,
+				scope: {
+					type: "agent",
+					id: agentId
+				},
+				evidenceRefs: topic.evidenceRefs
+			}));
+			const modelKnowledge = safeWorkThreadCandidates.filter((candidate) => !candidate.evidenceRefs.some((ref) => activityEvidence.has(ref))).map((candidate) => persistWorkKnowledge({
+				canonicalKey: `source-knowledge:${candidate.topicKey}`,
+				title: candidate.title,
+				summary: candidate.summary,
+				horizon: candidate.horizon,
+				confidence: candidate.confidence === "high" ? .9 : candidate.confidence === "medium" ? .72 : .55,
+				scope: {
+					type: "agent",
+					id: agentId
+				},
+				evidenceRefs: candidate.evidenceRefs
+			}));
+			const knowledgeCandidates = [...activityKnowledge, ...modelKnowledge].filter((item) => item !== void 0);
+			log.info({
+				runId,
+				itemCount: items.length,
+				candidateCount: profileCandidates.length,
+				knowledgeCount: knowledgeCandidates.length,
+				incompleteSourceCount: analysis.sourceStatuses.filter((item) => item.status !== "completed").length
+			}, "Understanding sources analyzed");
+			return {
+				profileCandidates,
+				workThreads,
+				knowledgeCandidates,
+				sourceStatuses: analysis.sourceStatuses
+			};
+		});
 	}
 	async rescanDirectorySource(input) {
 		const source = getWorkDiscoveryDirectorySource(input.id);
 		if (!source || source.status !== "active") throw new Error("Approved work folder not found");
 		const preview = await previewWorkDiscoveryRoot(source.rootPath);
+		if (getUnderstandingSourceGrant(source.id)?.status !== "active" || getUnderstandingSourceGrant(source.id)?.processingPolicy !== source.processingPolicy) throw new Error("Work folder authorization was revoked.");
 		upsertWorkDiscoveryDirectorySource({
 			rootPath: preview.canonicalRootPath,
 			displayName: preview.displayName,
@@ -1010,6 +988,8 @@ var WorkDiscoveryService = class {
 				},
 				...discoveredProjects?.length ? { discoveredProjects } : {}
 			};
+			signal.throwIfAborted();
+			if (approvedSource && (getUnderstandingSourceGrant(approvedSource.id)?.status !== "active" || getUnderstandingSourceGrant(approvedSource.id)?.processingPolicy !== approvedSource.processingPolicy)) throw new Error("Work folder authorization was revoked during analysis.");
 			const workThreads = persistWorkThreadsFromDiscovery({
 				projectId: run.projectId,
 				result: baseResult,
@@ -1070,6 +1050,8 @@ var WorkDiscoveryService = class {
 			});
 			if (approvedSource) try {
 				const preview = await previewWorkDiscoveryRoot(run.rootPath);
+				signal.throwIfAborted();
+				if (getUnderstandingSourceGrant(approvedSource.id)?.status !== "active") throw new Error("Work folder authorization was revoked.");
 				upsertWorkDiscoveryDirectorySource({
 					rootPath: preview.canonicalRootPath,
 					displayName: preview.displayName,
@@ -1195,42 +1177,18 @@ var WorkDiscoveryService = class {
 	}
 	persistProfileCandidates(run, result) {
 		if (!result.profileCandidates?.length) return result;
-		const profileCandidates = result.profileCandidates.map((candidate) => {
+		const profileCandidates = result.profileCandidates.flatMap((candidate) => {
 			const assertion = persistUnderstandingCandidate(candidate, { type: "global" }, `work-discovery:${run.id}`);
-			return {
+			return assertion ? [{
 				...candidate,
 				assertionId: assertion.id
-			};
+			}] : [];
 		});
 		return {
 			...result,
 			profileCandidates
 		};
 	}
-	updateProfileCandidates(input) {
-		const run = getWorkDiscoveryRun(input.runId);
-		if (!run?.result?.profileCandidates?.length) return null;
-		const decisions = new Map(input.decisions.map((decision) => [decision.id, decision]));
-		const profileCandidates = run.result.profileCandidates.map((candidate) => {
-			const decision = decisions.get(candidate.id);
-			if (!decision || !candidate.assertionId) return candidate;
-			const updated = decideAssertion({
-				assertionId: candidate.assertionId,
-				...decision
-			}, `work-discovery:${run.id}:`);
-			if (!updated) return candidate;
-			return {
-				...candidate,
-				assertionId: updated.id,
-				statement: updated.statement,
-				status: decision.status
-			};
-		});
-		return updateWorkDiscoveryRun(run.id, { result: {
-			...run.result,
-			profileCandidates
-		} });
-	}
 	cancelRun(id) {
 		const run = getWorkDiscoveryRun(id);
 		if (!run) return null;

package/dist/src/workflows/domain/definition.d.ts

@@ -110,6 +110,7 @@ export interface WorkflowDefinitionManifest {
 }
 export interface WorkflowConnectorRequirement {
     connectorId: string;
+    accountIds?: string[];
     scope?: 'read' | 'write' | 'admin';
     connectionRequired?: boolean;
     optional?: boolean;

package/dist/src/workflows/domain/validation.js

@@ -121,7 +121,7 @@ function validateManifest(value, errors) {
 			field: "manifest.resources"
 		});
 	}
-	if (value.connectors !== void 0 && (!Array.isArray(value.connectors) || value.connectors.some((connector) => !isRecord(connector) || typeof connector.connectorId !== "string" || connector.scope !== void 0 && ![
+	if (value.connectors !== void 0 && (!Array.isArray(value.connectors) || value.connectors.some((connector) => !isRecord(connector) || typeof connector.connectorId !== "string" || connector.accountIds !== void 0 && (!Array.isArray(connector.accountIds) || connector.accountIds.length === 0 || connector.accountIds.some((id) => typeof id !== "string" || !id.trim()) || new Set(connector.accountIds).size !== connector.accountIds.length) || connector.scope !== void 0 && ![
 		"read",
 		"write",
 		"admin"

package/dist/src/workflows/service/workflow-run-service.js

@@ -195,6 +195,7 @@ var WorkflowRunService = class {
 			agentId: params.agentId,
 			definitionId: params.definitionId,
 			definitionTitle: definition.title,
+			connectorAccounts: connectorPreflight.accounts,
 			triggerSource: params.source.kind,
 			goal,
 			parentConversationId: params.parentConversationId,
@@ -386,8 +387,21 @@ var WorkflowRunService = class {
 				httpStatus: 400
 			};
 		}
+		const replayConnectors = preflightWorkflowConnectors({
+			definition,
+			config: this.options.service.currentConfig,
+			agentId: params.agentId
+		});
+		if (!replayConnectors.ok) return {
+			ok: false,
+			code: "connector_preflight_failed",
+			message: replayConnectors.issues.map((issue) => issue.message).join(" "),
+			httpStatus: 409,
+			details: replayConnectors
+		};
 		const { conversationId } = await this.options.sessionBridge.prepareRunSession({
 			runId: replayRunId,
+			connectorAccounts: replayConnectors.accounts,
 			agentId: params.agentId,
 			definitionId: existing.run.definitionId,
 			definitionTitle: `${definition.title} replay`,

package/dist/src/workflows/service/workflow-session-bridge.d.ts

@@ -11,6 +11,7 @@ export interface PrepareWorkflowRunSessionParams {
     parentConversationId?: string;
     projectId?: string;
     triggerSource?: string;
+    connectorAccounts?: Record<string, string[]>;
 }
 export interface PrepareWorkflowRunSessionResult {
     conversationId: string;

package/dist/src/workflows/service/workflow-session-bridge.js

@@ -48,6 +48,7 @@ var WorkflowSessionBridge = class {
 				workflowRunId: params.runId,
 				workflowDefinitionId: params.definitionId,
 				workflowGoal: params.goal,
+				connectorAccounts: params.connectorAccounts ?? {},
 				deferVisibilityUntilOutput: true,
 				...params.triggerSource ? { triggerSource: params.triggerSource } : {},
 				...params.parentConversationId ? { parentConversationId: params.parentConversationId } : {}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xopcai/xopc",
-  "version": "0.0.306",
+  "version": "0.0.308",
   "description": "Local-first personal AI assistant with reviewable user understanding, durable tasks, workflows, automations, and local or cloud models.",
   "type": "module",
   "main": "dist/src/index.js",
@@ -167,12 +167,12 @@
     "vitest": "4.1.5",
     "vue": "^3.5.35",
     "@xopcai/browser-control-contract": "0.1.0",
-    "@xopcai/gateway-contract": "0.0.0",
-    "@xopcai/endpoint-tools-protocol": "0.0.0",
     "@xopcai/computer-control-contract": "0.1.0",
     "@xopcai/endpoint-tools-client": "0.0.0",
-    "@xopcai/realtime-client": "0.0.0",
-    "@xopcai/realtime-protocol": "0.0.0"
+    "@xopcai/endpoint-tools-protocol": "0.0.0",
+    "@xopcai/gateway-contract": "0.0.0",
+    "@xopcai/realtime-protocol": "0.0.0",
+    "@xopcai/realtime-client": "0.0.0"
   },
   "scripts": {
     "assets:brand": "node scripts/generate-brand-assets.mjs",