@xopcai/xopc 0.0.307 → 0.0.308

package/dist/src/agent/tools/user-context-tool.js

@@ -1,6 +1,6 @@
 import { retrievalLexicalSimilarity } from "../../retrieval/textFeatures.js";
-import { getAssertionSlot, getUserAssertion, listUserAssertions, reconcileAssertion, setAssertionStatus } from "../../user-model/repository.js";
-import { isWorkingAssumption } from "../../user-model/usage-policy.js";
+import { deleteUserAssertion, getAssertionSlot, getUserAssertion, listUserAssertions, reconcileAssertion, setAssertionStatus } from "../../user-model/repository.js";
+import { canUseAssertion } from "../../user-model/usage-policy.js";
 import "../../user-model/index.js";
 import { Type } from "@sinclair/typebox";
 //#region src/agent/tools/user-context-tool.ts
@@ -31,9 +31,6 @@ function visible(options, slotId) {
 	const scope = getAssertionSlot(slotId)?.scope;
 	return scope?.type === "global" || scope?.type === "agent" && scope.id === options.agentId || scope?.type === "workspace" && scope.id === options.workspaceId || scope?.type === "project" && scope.id === options.getProjectId?.() || scope?.type === "session" && scope.id === options.getSessionId();
 }
-function referenceable(assertion) {
-	return (assertion.status === "active" || isWorkingAssumption(assertion)) && assertion.authority !== "external_untrusted" && assertion.sensitivity !== "secret" && assertion.sensitivity !== "regulated" && assertion.disclosurePolicy !== "ask_before_reference";
-}
 function createUserContextSearchTool(options) {
 	return {
 		name: "user_context_search",
@@ -52,7 +49,7 @@ function createUserContextSearchTool(options) {
 			const results = listUserAssertions({
 				statuses: ["active", "candidate"],
 				limit: 1e3
-			}).filter((assertion) => visible(options, assertion.slotId)).filter(referenceable).map((assertion) => ({
+			}).filter((assertion) => visible(options, assertion.slotId)).filter((item) => canUseAssertion(item)).map((assertion) => ({
 				assertion,
 				score: retrievalLexicalSimilarity(input.query, `${assertion.statement} ${assertion.normalizedValue}`)
 			})).filter((item) => item.score > 0).sort((left, right) => right.score - left.score).slice(0, input.maxResults ?? 12).map(({ assertion, score }) => ({
@@ -89,7 +86,7 @@ function createUserContextGetTool(options) {
 			};
 			const id = raw.id;
 			const assertion = getUserAssertion(id);
-			if (!assertion || !visible(options, assertion.slotId) || !referenceable(assertion)) return {
+			if (!assertion || !visible(options, assertion.slotId) || !canUseAssertion(assertion)) return {
 				content: [{
 					type: "text",
 					text: `User assertion not found: ${id}`
@@ -199,6 +196,19 @@ function createUserContextUpdateTool(options) {
 						details: receipt
 					};
 				}
+				if (input.action === "forget") {
+					deleteUserAssertion(current.id);
+					return {
+						content: [{
+							type: "text",
+							text: "Memory deleted."
+						}],
+						details: {
+							action: "forget",
+							id: current.id
+						}
+					};
+				}
 				const status = {
 					confirm: "active",
 					reject: "rejected",

package/dist/src/chat-commands/builtins/understanding.js

@@ -58,7 +58,7 @@ const rememberCommand = {
 			disclosurePolicy: "referenceable",
 			observedAt: Date.now(),
 			createdBy: "user"
-		});
+		}, Date.now(), { restoreDeleted: true });
 		const scopeLabel = sessionOnly ? "this conversation" : "all conversations";
 		return {
 			content: result.action === "created" ? `Remembered for ${scopeLabel}. You can review or remove it in User Model.` : `This is already remembered for ${scopeLabel}.`,

package/dist/src/cli/commands/doctor/checks/database-schema.js

@@ -53,7 +53,7 @@ async function checkDatabaseSchema(ctx) {
 		id: "database-schema",
 		label: "Database schema",
 		status: "pass",
-		message: `SQLite schema v${status.dbVersion} (current release v183).`,
+		message: `SQLite schema v${status.dbVersion} (current release v185).`,
 		hints: []
 	};
 }

package/dist/src/cli/commands/gateway/lifecycle.js

@@ -1,8 +1,8 @@
 import { init_paths, resolveConfigPath } from "../../../config/paths.js";
 import { loadConfig } from "../../../config/loader.js";
 import "../../../config/index.js";
-import { resolveGatewayService } from "../../../daemon/service.js";
 import { isRestartEnabled } from "../../../config/commands.flags.js";
+import { resolveGatewayService } from "../../../daemon/service.js";
 import { authorizeGatewaySigusr1Restart, writeGatewayRestartIntentSync } from "../../../infra/restart.js";
 import { findVerifiedGatewayListenerPidsOnPortSync, formatGatewayPidList, signalVerifiedGatewayPidSync } from "../../../infra/gateway-processes.js";
 import { runServiceRestart, runServiceStop } from "./lifecycle-core.js";

package/dist/src/config/schema.d.ts

@@ -1465,7 +1465,6 @@ export declare const ConfigSchema: z.ZodDefault<z.ZodObject<{
             enabled: z.ZodDefault<z.ZodBoolean>;
             writePolicy: z.ZodDefault<z.ZodEnum<{
                 allow: "allow";
-                confirm: "confirm";
                 deny: "deny";
             }>>;
             sensitiveWritePolicy: z.ZodDefault<z.ZodEnum<{
@@ -1502,11 +1501,10 @@ export declare const ConfigSchema: z.ZodDefault<z.ZodObject<{
                 staleRetentionDays: z.ZodDefault<z.ZodNumber>;
             }, z.core.$strict>>;
         }, z.core.$strict>>;
-        knowledgeMemory: z.ZodDefault<z.ZodPreprocess<z.ZodObject<{
+        knowledgeMemory: z.ZodDefault<z.ZodObject<{
             enabled: z.ZodDefault<z.ZodBoolean>;
             writePolicy: z.ZodDefault<z.ZodEnum<{
                 allow: "allow";
-                confirm: "confirm";
                 deny: "deny";
             }>>;
             readScopes: z.ZodDefault<z.ZodArray<z.ZodEnum<{
@@ -1539,7 +1537,7 @@ export declare const ConfigSchema: z.ZodDefault<z.ZodObject<{
             allowExternalWrites: z.ZodDefault<z.ZodBoolean>;
             allowedProviderIds: z.ZodOptional<z.ZodArray<z.ZodString>>;
             autoWriteKinds: z.ZodOptional<z.ZodArray<z.ZodString>>;
-        }, z.core.$strict>>>;
+        }, z.core.$strict>>;
         contextPlanning: z.ZodDefault<z.ZodObject<{
             enabled: z.ZodDefault<z.ZodBoolean>;
             maxAssertions: z.ZodDefault<z.ZodNumber>;

package/dist/src/config/schema.js

@@ -1054,7 +1054,7 @@ workDiscoveryOnboarding: z.boolean().default(true) }).strict().default({ workDis
 			preferences: { responseLanguage: "auto" },
 			userModel: {
 				enabled: true,
-				writePolicy: "confirm",
+				writePolicy: "allow",
 				sensitiveWritePolicy: "confirm",
 				processingPolicy: "remote_allowed",
 				extraction: {
@@ -1075,7 +1075,7 @@ workDiscoveryOnboarding: z.boolean().default(true) }).strict().default({ workDis
 			},
 			knowledgeMemory: {
 				enabled: true,
-				writePolicy: "confirm",
+				writePolicy: "allow",
 				readScopes: [
 					"global",
 					"agent",

package/dist/src/connectors/connected-source-understanding.d.ts

@@ -10,6 +10,7 @@ export declare function deriveConnectedSourceUnderstanding(input: {
     sourceRunId: string;
     processingPolicy: 'local_only' | 'remote_allowed';
     analyze?: typeof analyzeUnderstandingSources;
+    assertAuthorized?: () => void;
 }): Promise<{
     created: number;
     knowledgeCount: number;

package/dist/src/connectors/connected-source-understanding.js

@@ -95,6 +95,7 @@ async function deriveConnectedSourceUnderstanding(input) {
 			config: input.config,
 			items
 		});
+		input.assertAuthorized?.();
 		const byRef = new Map(items.map((item) => [item.evidenceRef, item]));
 		let created = 0;
 		for (const candidate of analysis.profileCandidates.filter(isPortraitCandidate)) {

package/dist/src/connectors/learning-coordinator.js

@@ -15,7 +15,7 @@ import "../knowledge/index.js";
 import { ingestComposioConnectedSource } from "./connected-source-ingestion.js";
 import { deriveConnectedSourceUnderstanding } from "./connected-source-understanding.js";
 import { listConnectedContentCandidates, readConnectedContent } from "./content-enrichment.js";
-import { createUnderstandingSourceRun, getUnderstandingSourceGrant, listUnderstandingSourceRuns, updateUnderstandingSourceGrantCheckpoint, updateUnderstandingSourceRun, upsertUnderstandingSourceGrant } from "../user-context/sources/repository.js";
+import { createUnderstandingSourceRun, getUnderstandingSourceGrant, listUnderstandingSourceGrants, listUnderstandingSourceRuns, updateUnderstandingSourceGrantCheckpoint, updateUnderstandingSourceRun, upsertUnderstandingSourceGrant } from "../user-context/sources/repository.js";
 //#region src/connectors/learning-coordinator.ts
 init_logger();
 const log = createLogger("ConnectorLearning");
@@ -33,7 +33,9 @@ function connectorSourceCategory(toolkit) {
 	return "files";
 }
 function ensureUnderstandingSourceRun(job, toolkit, displayName) {
-	const grant = upsertUnderstandingSourceGrant({
+	const existing = listUnderstandingSourceGrants({ includeRevoked: true }).find((grant) => grant.sourceKey === `connector-account:${job.accountId}`);
+	if (existing?.status === "revoked") throw new Error("Source authorization was revoked.");
+	const grant = existing ?? upsertUnderstandingSourceGrant({
 		sourceKey: `connector-account:${job.accountId}`,
 		adapterId: `connector:${job.connectorId}`,
 		category: connectorSourceCategory(toolkit),
@@ -75,6 +77,14 @@ function startConnectorLearningCoordinator(options) {
 		if (!connection) return null;
 		if (!connection.accountId) throw new Error(`Connector account is missing for connection ${connection.id}.`);
 		if (!getConnectorAccount(connection.accountId)?.enabled) return null;
+		if (listUnderstandingSourceGrants({ includeRevoked: true }).some((grant) => grant.sourceKey === `connector-account:${connection.accountId}` && grant.status === "revoked")) return null;
+		if (request.reason === "manual") {
+			const active = listConnectorLearningJobs({
+				accountId: connection.accountId,
+				limit: 100
+			}).find((job) => job.status === "running" || job.status === "queued" && (!job.nextRunAt || Date.parse(job.nextRunAt) <= Date.now()));
+			if (active) return active;
+		}
 		const syncPolicy = getConnectorSyncPolicyForConnection(connection.id);
 		if (request.reason !== "manual" && syncPolicy?.scanEnabled !== true) return null;
 		const definition = getConnectorDefinition(connection.connectorId);
@@ -213,13 +223,21 @@ function startConnectorLearningCoordinator(options) {
 			knowledgeCount: 0,
 			status: "completed"
 		};
+		const sourceGrantPolicy = getUnderstandingSourceGrant(sourceRun.grantId)?.processingPolicy;
 		try {
 			semantic = await deriveConnectedSourceUnderstanding({
 				config: options.getConfig(),
 				agentId: job.agentId,
 				sourceInstanceId: job.sourceInstanceId,
 				sourceRunId: sourceRun.id,
-				processingPolicy: getUnderstandingSourceGrant(sourceRun.grantId)?.processingPolicy ?? "local_only"
+				processingPolicy: getUnderstandingSourceGrant(sourceRun.grantId)?.processingPolicy ?? "local_only",
+				assertAuthorized: () => {
+					const grant = getUnderstandingSourceGrant(sourceRun.grantId);
+					if (grant?.status !== "active" || !getConnectorAccount(job.accountId)?.enabled || grant.processingPolicy !== sourceGrantPolicy || !learningEnabled(options.getConfig()) || listConnectorLearningJobs({
+						accountId: job.accountId,
+						limit: 100
+					}).find((item) => item.id === job.id)?.status !== "running") throw new Error("Source authorization changed during analysis.");
+				}
 			});
 		} catch (error) {
 			const errorMessage = error instanceof Error ? error.message : String(error);
@@ -297,7 +315,7 @@ function startConnectorLearningCoordinator(options) {
 					await execute(job);
 				} catch (err) {
 					const errorMessage = err instanceof Error ? err.message : String(err);
-					const exhausted = job.attemptCount >= 5;
+					const exhausted = job.attemptCount >= 5 || job.idempotencyKey.startsWith("understanding-refresh:");
 					publish(updateConnectorLearningJob(job.id, {
 						status: exhausted ? "paused" : "failed",
 						error: learningFailureCode(err),
@@ -305,11 +323,15 @@ function startConnectorLearningCoordinator(options) {
 						finished: true
 					}));
 					const definition = getConnectorDefinition(job.connectorId);
-					if (definition?.runtime.type === "composio" && definition.runtime.role === "toolkit") updateUnderstandingSourceRun(ensureUnderstandingSourceRun(job, definition.runtime.toolkit, definition.displayName).id, {
-						status: "failed",
-						errorMessage: learningFailureCode(err),
-						completed: true
-					});
+					if (definition?.runtime.type === "composio" && definition.runtime.role === "toolkit") {
+						const grant = listUnderstandingSourceGrants({ includeRevoked: true }).find((item) => item.sourceKey === `connector-account:${job.accountId}`);
+						const sourceRun = grant && listUnderstandingSourceRuns(grant.id, 100).find((item) => item.metadata.connectorLearningJobId === job.id);
+						if (sourceRun) updateUnderstandingSourceRun(sourceRun.id, {
+							status: "failed",
+							errorMessage: learningFailureCode(err),
+							completed: true
+						});
+					}
 					log.warn({
 						err,
 						jobId: job.id,

package/dist/src/gateway/hono/lib/config-payload.d.ts

@@ -222,7 +222,7 @@ export declare function buildSafeWebConfigPayload(service: GatewayService, optio
         };
         userModel: {
             enabled: boolean;
-            writePolicy: "allow" | "confirm" | "deny";
+            writePolicy: "allow" | "deny";
             sensitiveWritePolicy: "allow" | "confirm" | "deny";
             processingPolicy: "local_only" | "remote_allowed";
             extraction: {
@@ -244,7 +244,7 @@ export declare function buildSafeWebConfigPayload(service: GatewayService, optio
         };
         knowledgeMemory: {
             enabled: boolean;
-            writePolicy: "allow" | "confirm" | "deny";
+            writePolicy: "allow" | "deny";
             readScopes: ("project" | "session" | "agent" | "workspace" | "global")[];
             contentSources: ("memory" | "connector" | "local_import")[];
             searchStrategy: "local-first" | "external-first" | "fanout" | "local-only" | "external-only";

package/dist/src/gateway/hono/routes/connectors.js

@@ -19,6 +19,7 @@ import { createConnectorSetupSecretRequest, submitConnectorSetupSecret } from ".
 import { recordConnectorHealthUsage } from "../../../connectors/usage.js";
 import { getConnectorInstance, getInstalledConnectorDefinition, listConnectorInstances } from "../../../connectors/instances.js";
 import { installConnector, installConnectorDefinition, uninstallConnector, updateConnectorConfig } from "../../../connectors/install.js";
+import { ConfigPersistenceError, persistConfigMutation } from "../../../config/config-mutation.js";
 import { resumeApprovedConnectorAction } from "../../../connectors/approval-resume.js";
 import { getMcpOAuthManager } from "../../../agent/mcp/oauth/mcp-oauth-manager.js";
 import { startConnectorAuthorization } from "../../../connectors/auth-provider-registry.js";
@@ -26,7 +27,6 @@ import { composioLogoResponse } from "../../../connectors/composio-logo.js";
 import { inspectManagedComposioStatus } from "../../../connectors/composio-managed-client.js";
 import { appendComposioTriggerEvent, listComposioTriggerEvents } from "../../../connectors/composio-triggers.js";
 import { ingestLocalFolderSource } from "../../../connectors/connected-source-ingestion.js";
-import { ConfigPersistenceError, persistConfigMutation } from "../../../config/config-mutation.js";
 import { previewConnectorDefinition, testConnectorInstance } from "../../../connectors/health.js";
 import { listUnderstandingSourceGrants, revokeUnderstandingSourceGrant } from "../../../user-context/sources/repository.js";
 import { setConnectorEnabled } from "../../../connectors/lifecycle.js";

package/dist/src/gateway/hono/routes/context-sources.js

@@ -8,7 +8,6 @@ import "../../../user-model/index.js";
 import { listConnectedContentCandidates, readConnectedContent } from "../../../connectors/content-enrichment.js";
 import { getUnderstandingSourceGrant, listUnderstandingSourceGrants, listUnderstandingSourceRuns, revokeUnderstandingSourceGrant, updateUnderstandingSourceGrantPolicies } from "../../../user-context/sources/repository.js";
 import { listUnderstandingSourceDefinitions } from "../../../user-context/sources/catalog.js";
-import { randomUUID } from "node:crypto";
 //#region src/gateway/hono/routes/context-sources.ts
 init_agent_scope();
 init_transaction();
@@ -103,28 +102,6 @@ function registerContextSourceRoutes(authenticated, deps) {
 			return c.json({ error: error instanceof Error ? error.message : String(error) }, 400);
 		}
 	});
-	authenticated.post("/api/context-sources/grants/:grantId/refresh", limited, async (c) => {
-		const grant = getUnderstandingSourceGrant(c.req.param("grantId"));
-		if (!grant || grant.status !== "active") return c.json({ error: "Active context source not found" }, 404);
-		try {
-			if (grant.adapterId === "local-work-folders") {
-				const result = await service.refreshDirectorySourceIfChanged({
-					id: grant.id,
-					idempotencyKey: randomUUID()
-				});
-				return c.json({ result }, result.changed ? 202 : 200);
-			}
-			const accountId = typeof grant.config.accountId === "string" ? grant.config.accountId : "";
-			const connectionId = accountId ? getConnectorAccount(accountId)?.currentConnectionId : void 0;
-			const job = connectionId ? deps.service.requestConnectorLearning(connectionId, {
-				mode: "incremental",
-				reason: "manual"
-			}) : null;
-			return job ? c.json({ job }, 202) : c.json({ error: "Context source cannot be refreshed here" }, 409);
-		} catch (error) {
-			return c.json({ error: error instanceof Error ? error.message : String(error) }, 400);
-		}
-	});
 	authenticated.get("/api/context-sources/work-folders", (c) => c.json({ sources: service.listDirectorySources() }));
 	authenticated.post("/api/context-sources/work-folders", limited, async (c) => {
 		const input = await c.req.json().catch(() => null);

package/dist/src/gateway/hono/routes/lazy-bundles.js

@@ -329,6 +329,14 @@ const AUTHENTICATED_LAZY_ROUTE_BUNDLES = [
 			return { register: registerVoiceRoutes };
 		}
 	},
+	{
+		id: "user-model-refresh",
+		match: (pathname) => pathname === "/api/user-model/refresh" || pathname.startsWith("/api/user-model/refresh/"),
+		load: async () => {
+			const { registerUserModelRefreshRoutes } = await import("./user-model-refresh.js");
+			return { register: registerUserModelRefreshRoutes };
+		}
+	},
 	{
 		id: "user-model",
 		match: (path) => startsWithAny(path, [

package/dist/src/gateway/hono/routes/projects.js

@@ -405,6 +405,10 @@ function registerProjectsRoutes(authenticated, deps) {
 			originClass: "system",
 			replaceExisting: true
 		});
+		if (!record.item) return c.json({
+			ok: false,
+			error: "This memory was deleted and automatic recreation is disabled."
+		}, 409);
 		return c.json({
 			ok: true,
 			knowledge: record.item
@@ -804,6 +808,10 @@ function registerProjectsRoutes(authenticated, deps) {
 			originClass: "agent",
 			replaceExisting: true
 		});
+		if (!record.item) return c.json({
+			ok: false,
+			error: "This memory was deleted and automatic recreation is disabled."
+		}, 409);
 		return c.json({
 			ok: true,
 			knowledge: record.item

package/dist/src/gateway/hono/routes/user-model-refresh.d.ts

@@ -0,0 +1,5 @@
+import type { Hono } from 'hono';
+import { UnderstandingRefreshService } from '../../../user-context/sources/refresh-service.js';
+import type { AuthenticatedRouteDeps } from './deps.js';
+export declare function createUnderstandingRefreshService(deps: AuthenticatedRouteDeps): UnderstandingRefreshService;
+export declare function registerUserModelRefreshRoutes(app: Hono, deps: AuthenticatedRouteDeps, refresh?: UnderstandingRefreshService): void;

package/dist/src/gateway/hono/routes/user-model-refresh.js

@@ -0,0 +1,128 @@
+import { listConnectorLearningJobs } from "../../../storage/sqlite/connector-learning-repository.js";
+import { getConnectorAccount } from "../../../storage/sqlite/connector-account-repository.js";
+import "../../../storage/sqlite/index.js";
+import { listUnderstandingSourceRuns } from "../../../user-context/sources/repository.js";
+import { isLocalUnderstandingSourceId } from "../../../user-context/sources/local-source-contract.js";
+import { getWorkDiscoveryRun } from "../../../work-discovery/repository.js";
+import { normalizeUnderstandingSourceItems } from "../../../work-discovery/service.js";
+import { UnderstandingRefreshService } from "../../../user-context/sources/refresh-service.js";
+import { randomUUID } from "node:crypto";
+//#region src/gateway/hono/routes/user-model-refresh.ts
+function createUnderstandingRefreshService(deps) {
+	const service = deps.service;
+	return new UnderstandingRefreshService({
+		enabled: () => service.currentConfig.userContext.enabled && service.currentConfig.userContext.userModel.enabled,
+		emit: (type, payload) => service.emit(type, payload),
+		async start(grant, runId) {
+			if (grant.adapterId === "local-work-folders") return {
+				discoveryRunId: (await service.workDiscovery.rescanDirectorySource({
+					id: grant.id,
+					idempotencyKey: runId
+				})).id,
+				phase: "reading"
+			};
+			if (isLocalUnderstandingSourceId(grant.adapterId)) return { phase: "waiting_desktop" };
+			if (grant.adapterId.startsWith("connector:")) {
+				const account = typeof grant.config.accountId === "string" ? getConnectorAccount(grant.config.accountId) : void 0;
+				if (!account?.enabled || !account.currentConnectionId) throw new Error("Reconnect this source before updating.");
+				const job = service.requestConnectorLearning(account.currentConnectionId, {
+					mode: "incremental",
+					reason: "manual",
+					idempotencyKey: `understanding-refresh:${randomUUID()}`
+				});
+				if (!job) throw new Error("This source cannot currently be updated.");
+				return {
+					connectorLearningJobId: job.id,
+					accountId: account.id,
+					phase: "reading"
+				};
+			}
+			throw new Error("This source does not support understanding updates.");
+		},
+		progress(run) {
+			if (typeof run.metadata.discoveryRunId === "string") {
+				const discovery = getWorkDiscoveryRun(run.metadata.discoveryRunId);
+				if (!discovery) return {
+					status: "failed",
+					phase: "completed",
+					error: "Work folder update is no longer available."
+				};
+				return {
+					status: discovery.status === "completed" ? "completed" : discovery.status === "failed" || discovery.status === "canceled" ? "failed" : "running",
+					phase: discovery.status === "analyzing" ? "analyzing" : discovery.status === "queued" || discovery.status === "probing" ? "reading" : "completed",
+					error: discovery.errorMessage
+				};
+			}
+			if (typeof run.metadata.connectorLearningJobId === "string") {
+				const job = listConnectorLearningJobs({
+					accountId: String(run.metadata.accountId),
+					limit: 100
+				}).find((item) => item.id === run.metadata.connectorLearningJobId);
+				if (!job) return {
+					status: "failed",
+					phase: "completed",
+					error: "Connector update is no longer available."
+				};
+				const sourceRun = listUnderstandingSourceRuns(run.grantId, 100).find((item) => item.id !== run.id && item.metadata.connectorLearningJobId === job.id);
+				if (job.status === "completed") return {
+					status: sourceRun?.status === "partial" ? "partial" : "completed",
+					phase: "completed",
+					added: job.candidatesCreated,
+					itemsSeen: job.itemsDiscovered,
+					error: sourceRun?.status === "partial" ? "Some source information could not be analyzed. Retry this source." : void 0
+				};
+				if (job.status === "paused" || job.status === "failed") return {
+					status: "failed",
+					phase: "completed",
+					error: job.error ?? "Connector update failed."
+				};
+				return {
+					status: "running",
+					phase: job.phase === "deriving" ? "analyzing" : "reading",
+					itemsSeen: job.itemsDiscovered
+				};
+			}
+		},
+		async analyzeDesktop(grant, items, signal) {
+			const status = (await service.workDiscovery.importUnderstandingSources(items, grant.processingPolicy, signal, void 0, void 0, { grantId: grant.id })).sourceStatuses.find((item) => item.sourceId === grant.adapterId);
+			if (status?.status !== "completed") throw new Error(status?.error ?? "Source analysis did not complete.");
+			return {};
+		}
+	});
+}
+function registerUserModelRefreshRoutes(app, deps, refresh = createUnderstandingRefreshService(deps)) {
+	app.post("/api/user-model/refresh", deps.strictRateLimitMiddleware, async (c) => {
+		const input = await c.req.json().catch(() => null);
+		if (!input || typeof input !== "object" || Array.isArray(input) || input.sourceIds !== void 0 && (!Array.isArray(input.sourceIds) || !input.sourceIds.length || input.sourceIds.length > 100 || input.sourceIds.some((id) => typeof id !== "string" || !id))) return c.json({ error: "Provide sourceIds or an empty object to update all authorized sources." }, 400);
+		try {
+			return c.json({ batch: refresh.start(input.sourceIds) }, 202);
+		} catch (err) {
+			return c.json({ error: err instanceof Error ? err.message : String(err) }, 400);
+		}
+	});
+	app.get("/api/user-model/refresh", (c) => c.json({
+		batch: refresh.latest(),
+		sources: refresh.sources()
+	}));
+	app.get("/api/user-model/refresh/:id", (c) => {
+		const batch = refresh.get(c.req.param("id"));
+		return batch ? c.json({ batch }) : c.json({ error: "Update not found." }, 404);
+	});
+	app.post("/api/user-model/refresh/sources/:runId/collection", deps.strictRateLimitMiddleware, async (c) => {
+		const raw = await c.req.json().catch(() => null);
+		if (!raw || !Array.isArray(raw.items) || raw.items.length > 1200 || raw.error !== void 0 && typeof raw.error !== "string") return c.json({ error: "Invalid collection." }, 400);
+		const items = normalizeUnderstandingSourceItems(raw.items);
+		if (raw.items.length && !items.length) return c.json({ error: "No valid source items." }, 400);
+		try {
+			refresh.submitDesktop(c.req.param("runId"), {
+				items,
+				error: raw.error
+			});
+			return c.json({ ok: true }, 202);
+		} catch (err) {
+			return c.json({ error: err instanceof Error ? err.message : String(err) }, 409);
+		}
+	});
+}
+//#endregion
+export { createUnderstandingRefreshService, registerUserModelRefreshRoutes };

package/dist/src/gateway/hono/routes/user-model.js

@@ -1,10 +1,11 @@
 import { createCollaborationRule, getCollaborationRule, listCollaborationRules, setCollaborationRuleStatus } from "../../../storage/sqlite/collaboration-rule-repository.js";
-import { KnowledgeReviewConflictError, getKnowledgeItem, listKnowledgeItems, reviewKnowledgeItem, searchKnowledgeItems } from "../../../knowledge-memory/repository.js";
+import { KnowledgeReviewConflictError, deleteKnowledgeItem, getKnowledgeItem, listKnowledgeItems, reviewKnowledgeItem, searchKnowledgeItems } from "../../../knowledge-memory/repository.js";
 import "../../../knowledge-memory/index.js";
 import { createPriorityWindow, createUserGoal, listPriorityWindows, listUserGoals, setUserGoalStatus } from "../../../user-model/goals.js";
-import { getAssertionSlot, getUserAssertion, listUserAssertionSources, listUserAssertions, reconcileAssertion, setAssertionStatus } from "../../../user-model/repository.js";
+import { deleteUserAssertion, getAssertionSlot, getUserAssertion, listUserAssertionSources, listUserAssertions, reconcileAssertion, setAssertionStatus } from "../../../user-model/repository.js";
 import { applyUserProfilePatch, getUserProfileSnapshot } from "../../../user-model/profile.js";
 import { bootstrapUserModel } from "../../../user-model/bootstrap.js";
+import { canUseAssertion } from "../../../user-model/usage-policy.js";
 import "../../../user-model/index.js";
 import { listMemoryMaintenanceRuns } from "../../../memory-maintenance/service.js";
 import "../../../memory-maintenance/index.js";
@@ -117,7 +118,8 @@ function assertionView(assertion, sources = listUserAssertionSources([assertion.
 		predicate: slot.predicate,
 		subject: slot.subject,
 		scope: slot.scope,
-		sources
+		sources,
+		usable: canUseAssertion(assertion)
 	};
 }
 function registerUserModelRoutes(authenticated, deps) {
@@ -259,11 +261,14 @@ function registerUserModelRoutes(authenticated, deps) {
 				createdBy: "user",
 				...typeof input.correctionOfAssertionId === "string" ? { correctionOfAssertionId: input.correctionOfAssertionId } : {}
 			};
-			return c.json(reconcileAssertion(candidate), 201);
+			return c.json(reconcileAssertion(candidate, Date.now(), { restoreDeleted: true }), 201);
 		} catch (error) {
 			return c.json({ error: errorMessage(error) }, 400);
 		}
 	});
+	authenticated.delete("/api/user-model/assertions/:id", write, (c) => {
+		return deleteUserAssertion(c.req.param("id")) ? c.json({ ok: true }) : c.json({ error: "Assertion not found" }, 404);
+	});
 	authenticated.patch("/api/user-model/assertions/:id/status", write, async (c) => {
 		const input = await body(c);
 		const status = input?.status;
@@ -307,7 +312,6 @@ function registerUserModelRoutes(authenticated, deps) {
 				...current.validFrom === void 0 ? {} : { validFrom: current.validFrom },
 				...current.validTo === void 0 ? {} : { validTo: current.validTo },
 				observedAt: Date.now(),
-				...current.reviewAt === void 0 ? {} : { reviewAt: current.reviewAt },
 				createdBy: "user",
 				correctionOfAssertionId: current.id
 			}));
@@ -405,6 +409,9 @@ function registerUserModelRoutes(authenticated, deps) {
 		const item = getKnowledgeItem(c.req.param("id"));
 		return item ? c.json({ item }) : c.json({ error: "Knowledge item not found" }, 404);
 	});
+	authenticated.delete("/api/knowledge-memory/:id", write, (c) => {
+		return deleteKnowledgeItem(c.req.param("id")) ? c.json({ ok: true }) : c.json({ error: "Knowledge item not found" }, 404);
+	});
 	authenticated.post("/api/knowledge-memory/:id/review", write, async (c) => {
 		const input = await body(c);
 		const action = String(input?.action ?? "");

package/dist/src/gateway/hono/routes/work-discovery.js

@@ -216,36 +216,6 @@ function registerWorkDiscoveryRoutes(authenticated, deps) {
 			}, 400);
 		}
 	});
-	authenticated.post("/api/work-discovery/runs/:runId/profile", limited, async (c) => {
-		const body = await c.req.json().catch(() => null);
-		const decisions = (body && typeof body === "object" && Array.isArray(body.decisions) ? body.decisions : []).flatMap((value) => {
-			if (!value || typeof value !== "object") return [];
-			const item = value;
-			const id = typeof item.id === "string" ? item.id.trim() : "";
-			const status = item.status === "accepted" || item.status === "edited" || item.status === "rejected" ? item.status : void 0;
-			if (!id || !status) return [];
-			return [{
-				id,
-				status,
-				...typeof item.statement === "string" ? { statement: item.statement } : {}
-			}];
-		}).slice(0, 10);
-		if (!decisions.length) return c.json({
-			ok: false,
-			error: "At least one valid decision is required"
-		}, 400);
-		const run = service.updateProfileCandidates({
-			runId: c.req.param("runId"),
-			decisions
-		});
-		return run ? c.json({
-			ok: true,
-			run
-		}) : c.json({
-			ok: false,
-			error: "Profile candidates not found"
-		}, 404);
-	});
 	authenticated.post("/api/work-discovery/runs/:runId/suggestions/:suggestionId/select", (c) => {
 		return service.selectSuggestion(c.req.param("runId"), c.req.param("suggestionId")) ? c.json({ ok: true }) : c.json({
 			ok: false,

package/dist/src/gateway/service.js

@@ -59,12 +59,6 @@ import { registerClarificationChannelRuntime } from "./clarify-runtime.js";
 import { ChannelManager } from "../channels/manager.js";
 import { getWorkspacePath } from "../config/workspace-path-helpers.js";
 import "../config/index.js";
-import { DiscussionService } from "../discussions/service.js";
-import { DiscussionOrganizer } from "../discussions/organizer.js";
-import { DiscussionLiveWorker } from "../discussions/live-worker.js";
-import { DiscussionOrganizerWorker } from "../discussions/organizer-worker.js";
-import { DiscussionSealer } from "../discussions/sealer.js";
-import "../discussions/index.js";
 import { ManagedComposioEventPoller } from "../connectors/composio-managed-events.js";
 import { startConnectedKnowledgeCoordinator } from "../knowledge/coordinator.js";
 import "../knowledge/index.js";
@@ -72,6 +66,12 @@ import { ConnectionRecoveryService } from "../connectors/connection-recovery-ser
 import { startConnectorLearningCoordinator } from "../connectors/learning-coordinator.js";
 import { ConnectedSourceChangePublisher } from "../connectors/source-change-publisher.js";
 import { startConnectorSupervisor } from "../connectors/supervisor.js";
+import { DiscussionService } from "../discussions/service.js";
+import { DiscussionOrganizer } from "../discussions/organizer.js";
+import { DiscussionLiveWorker } from "../discussions/live-worker.js";
+import { DiscussionOrganizerWorker } from "../discussions/organizer-worker.js";
+import { DiscussionSealer } from "../discussions/sealer.js";
+import "../discussions/index.js";
 import { EndpointToolRuntime } from "../endpoint-tools/runtime.js";
 import "../endpoint-tools/index.js";
 import { assertGatewayAuthConfigured, extractToken, resolveGatewayAuth, validateToken } from "./auth.js";

package/dist/src/infra/update-restart.js

@@ -2,8 +2,8 @@ import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
 import { init_paths, resolveConfigPath } from "../config/paths.js";
 import { init_loader, loadConfig } from "../config/loader.js";
-import { resolveGatewayService } from "../daemon/service.js";
 import { isRestartEnabled } from "../config/commands.flags.js";
+import { resolveGatewayService } from "../daemon/service.js";
 import { authorizeGatewaySigusr1Restart, writeGatewayRestartIntentSync } from "./restart.js";
 import { findVerifiedGatewayListenerPidsOnPortSync, signalVerifiedGatewayPidSync } from "./gateway-processes.js";
 import { refreshGatewayServiceAfterUpdate } from "./update-service-refresh.js";

package/dist/src/knowledge/connected-knowledge-pipeline.js

@@ -106,7 +106,7 @@ var ConnectedKnowledgePipeline = class {
 				status: "completed"
 			});
 			result.completed += 1;
-			result.recordIds.push(written.item.id);
+			if (written.item) result.recordIds.push(written.item.id);
 		} catch (error) {
 			const message = error instanceof Error ? error.message : String(error);
 			completeKnowledgeSourceItemSynthesis({