@xopcai/xopc 0.0.307 → 0.0.309

package/dist/src/agent/tools/repository-search.js

@@ -1,84 +1,137 @@
 import { prepareSafeToolEnv } from "../sandbox/sanitize-env-vars.js";
 import { evaluateFilePolicy } from "../sandbox/exec-policy.js";
+import { dataScheduler } from "../data-acquisition/scheduler.js";
 import { resolveRipgrepBinary } from "../../infra/ripgrep.js";
 import { lstatSync } from "node:fs";
 import { spawn } from "node:child_process";
+import { StringDecoder } from "node:string_decoder";
 //#region src/agent/tools/repository-search.ts
-/** Bounded native search; unavailable tools and invalid regexes are explicit failures. */
-async function repositorySearch(cwd, args, signal) {
-	signal?.throwIfAborted();
-	const binary = await resolveRipgrepBinary();
-	return new Promise((resolve, reject) => {
-		const separator = args.indexOf("--");
-		const options = separator < 0 ? args : args.slice(0, separator);
-		const targets = separator < 0 ? [] : args.slice(separator);
-		const excluded = [
-			".git",
-			"node_modules",
-			".env",
-			".env.*",
-			".ssh",
-			".aws",
-			".gnupg",
-			".docker",
-			".config",
-			".netrc",
-			".npmrc",
-			".cargo/credentials",
-			".kube",
-			".xopc"
-		];
-		const child = spawn(binary, [
-			"--no-config",
-			"--hidden",
-			...options,
-			...excluded.flatMap((path) => [
-				"--glob",
-				`!**/${path}`,
-				"--glob",
-				`!**/${path}/**`
-			]),
-			"--no-follow",
-			...targets
-		], {
-			cwd,
-			env: prepareSafeToolEnv(process.env)
-		});
-		const chunks = [];
-		let bytes = 0, truncated = false, stderr = "";
-		const timer = setTimeout(() => child.kill("SIGKILL"), 1e4);
-		const abort = () => child.kill("SIGKILL");
-		signal?.addEventListener("abort", abort, { once: true });
-		child.stdout.on("data", (chunk) => {
-			const remaining = Math.max(0, 5e4 - bytes);
-			chunks.push(chunk.subarray(0, remaining));
-			bytes += chunk.length;
-			if (bytes > 5e4) {
-				truncated = true;
-				child.kill("SIGKILL");
-			}
-		});
-		child.stderr.on("data", (chunk) => {
-			stderr = (stderr + String(chunk)).slice(-4e3);
-		});
-		child.on("error", reject);
-		child.on("close", (code) => {
-			clearTimeout(timer);
-			signal?.removeEventListener("abort", abort);
-			if (signal?.aborted) {
-				reject(signal.reason ?? /* @__PURE__ */ new Error("Search aborted"));
-				return;
-			}
-			if (code !== 0 && code !== 1 && !truncated) {
-				reject(new Error(stderr || "Search did not complete; check ripgrep installation or narrow the search."));
-				return;
-			}
-			resolve({
-				output: Buffer.concat(chunks).toString("utf8"),
-				truncated
+function parseRepositoryMatch(workspace, line) {
+	if (!line) return void 0;
+	const event = JSON.parse(line);
+	if (event.type !== "match" && event.type !== "context") return void 0;
+	const data = event.data;
+	if (typeof data?.path?.text !== "string" || typeof data.lines?.text !== "string" || !Number.isInteger(data.line_number) || !isSearchFileAllowed(workspace, data.path.text)) return void 0;
+	return {
+		path: data.path.text,
+		line: data.line_number,
+		text: data.lines.text.replace(/\r?\n$/, ""),
+		match: event.type === "match"
+	};
+}
+/** One bounded process path for raw filename output and streamed JSON events. */
+async function repositorySearch(cwd, args, signal, options = {}) {
+	const deadline = AbortSignal.any([...signal ? [signal] : [], AbortSignal.timeout(1e4)]);
+	return dataScheduler.run(cwd, deadline, async () => {
+		deadline.throwIfAborted();
+		const binary = await resolveRipgrepBinary();
+		deadline.throwIfAborted();
+		return new Promise((resolve, reject) => {
+			const separator = args.indexOf("--");
+			const searchOptions = separator < 0 ? args : args.slice(0, separator);
+			const targets = separator < 0 ? [] : args.slice(separator);
+			const excluded = [
+				".git",
+				"node_modules",
+				".env",
+				".env.*",
+				".ssh",
+				".aws",
+				".gnupg",
+				".docker",
+				".config",
+				".netrc",
+				".npmrc",
+				".cargo/credentials",
+				".kube",
+				".xopc"
+			];
+			const child = spawn(binary, [
+				"--no-config",
+				"--hidden",
+				...searchOptions,
+				...excluded.flatMap((path) => [
+					"--glob",
+					`!**/${path}`,
+					"--glob",
+					`!**/${path}/**`
+				]),
+				"--no-follow",
+				...targets
+			], {
+				cwd,
+				env: prepareSafeToolEnv(process.env)
+			});
+			const chunks = [];
+			const decoder = new StringDecoder("utf8");
+			let bytes = 0, truncated = false, stderr = "", pending = "";
+			let failure;
+			const stop = () => child.kill("SIGKILL");
+			const consume = (text) => {
+				pending += text;
+				let newline;
+				while (!truncated && (newline = pending.indexOf("\n")) !== -1) {
+					const line = pending.slice(0, newline);
+					pending = pending.slice(newline + 1);
+					if (options.onLine?.(line) === false) {
+						truncated = true;
+						stop();
+					}
+				}
+			};
+			deadline.addEventListener("abort", stop, { once: true });
+			child.stdout.on("data", (chunk) => {
+				if (truncated || failure) return;
+				const remaining = Math.max(0, (options.maxBytes ?? 5e4) - bytes);
+				const selected = chunk.subarray(0, remaining);
+				bytes += chunk.length;
+				try {
+					if (options.onLine) consume(decoder.write(selected));
+					else chunks.push(selected);
+				} catch (error) {
+					failure = error instanceof Error ? error : new Error(String(error));
+					stop();
+				}
+				if (bytes > (options.maxBytes ?? 5e4)) {
+					truncated = true;
+					stop();
+				}
+			});
+			child.stderr.on("data", (chunk) => {
+				stderr = (stderr + String(chunk)).slice(-4e3);
+			});
+			child.on("error", (error) => {
+				failure = error;
+			});
+			child.on("close", (code) => {
+				deadline.removeEventListener("abort", stop);
+				if (deadline.aborted) {
+					reject(deadline.reason);
+					return;
+				}
+				if (failure) {
+					reject(failure);
+					return;
+				}
+				if (code !== 0 && code !== 1 && !truncated) {
+					reject(new Error(stderr || "Search did not complete; narrow the search."));
+					return;
+				}
+				try {
+					if (options.onLine && !truncated) {
+						consume(decoder.end());
+						if (pending && options.onLine(pending) === false) truncated = true;
+					}
+					resolve({
+						output: Buffer.concat(chunks).toString("utf8"),
+						truncated
+					});
+				} catch (error) {
+					reject(error);
+				}
 			});
+			if (deadline.aborted) stop();
 		});
-		if (signal?.aborted) abort();
 	});
 }
 /** Search results must satisfy the same policy as direct file reads. */
@@ -97,4 +150,4 @@ function isSearchFileAllowed(workspace, path) {
 	}
 }
 //#endregion
-export { isSearchFileAllowed, repositorySearch };
+export { isSearchFileAllowed, parseRepositoryMatch, repositorySearch };

package/dist/src/agent/tools/user-context-tool.js

@@ -1,6 +1,6 @@
 import { retrievalLexicalSimilarity } from "../../retrieval/textFeatures.js";
-import { getAssertionSlot, getUserAssertion, listUserAssertions, reconcileAssertion, setAssertionStatus } from "../../user-model/repository.js";
-import { isWorkingAssumption } from "../../user-model/usage-policy.js";
+import { deleteUserAssertion, getAssertionSlot, getUserAssertion, listUserAssertions, reconcileAssertion, setAssertionStatus } from "../../user-model/repository.js";
+import { canUseAssertion } from "../../user-model/usage-policy.js";
 import "../../user-model/index.js";
 import { Type } from "@sinclair/typebox";
 //#region src/agent/tools/user-context-tool.ts
@@ -31,9 +31,6 @@ function visible(options, slotId) {
 	const scope = getAssertionSlot(slotId)?.scope;
 	return scope?.type === "global" || scope?.type === "agent" && scope.id === options.agentId || scope?.type === "workspace" && scope.id === options.workspaceId || scope?.type === "project" && scope.id === options.getProjectId?.() || scope?.type === "session" && scope.id === options.getSessionId();
 }
-function referenceable(assertion) {
-	return (assertion.status === "active" || isWorkingAssumption(assertion)) && assertion.authority !== "external_untrusted" && assertion.sensitivity !== "secret" && assertion.sensitivity !== "regulated" && assertion.disclosurePolicy !== "ask_before_reference";
-}
 function createUserContextSearchTool(options) {
 	return {
 		name: "user_context_search",
@@ -52,7 +49,7 @@ function createUserContextSearchTool(options) {
 			const results = listUserAssertions({
 				statuses: ["active", "candidate"],
 				limit: 1e3
-			}).filter((assertion) => visible(options, assertion.slotId)).filter(referenceable).map((assertion) => ({
+			}).filter((assertion) => visible(options, assertion.slotId)).filter((item) => canUseAssertion(item)).map((assertion) => ({
 				assertion,
 				score: retrievalLexicalSimilarity(input.query, `${assertion.statement} ${assertion.normalizedValue}`)
 			})).filter((item) => item.score > 0).sort((left, right) => right.score - left.score).slice(0, input.maxResults ?? 12).map(({ assertion, score }) => ({
@@ -89,7 +86,7 @@ function createUserContextGetTool(options) {
 			};
 			const id = raw.id;
 			const assertion = getUserAssertion(id);
-			if (!assertion || !visible(options, assertion.slotId) || !referenceable(assertion)) return {
+			if (!assertion || !visible(options, assertion.slotId) || !canUseAssertion(assertion)) return {
 				content: [{
 					type: "text",
 					text: `User assertion not found: ${id}`
@@ -199,6 +196,19 @@ function createUserContextUpdateTool(options) {
 						details: receipt
 					};
 				}
+				if (input.action === "forget") {
+					deleteUserAssertion(current.id);
+					return {
+						content: [{
+							type: "text",
+							text: "Memory deleted."
+						}],
+						details: {
+							action: "forget",
+							id: current.id
+						}
+					};
+				}
 				const status = {
 					confirm: "active",
 					reject: "rejected",

package/dist/src/agent/tools/web.js

@@ -1,6 +1,6 @@
 import { SearchProviderRegistry } from "./search/registry.js";
 import { resolveWebSearchConfig } from "./search/resolve-config.js";
-import { checkUrlSafety, checkWebsiteBlocklist } from "./url-safety.js";
+import { fetchPublicText } from "./fetch-text.js";
 import { Type } from "@sinclair/typebox";
 //#region src/agent/tools/web.ts
 const WebSearchSchema = Type.Object({
@@ -16,6 +16,7 @@ function createWebSearchTool(getConfig) {
 		description: "Search the web. Uses configured search APIs when set; otherwise falls back to a built-in HTML search (region-aware).",
 		parameters: WebSearchSchema,
 		label: "🔍 Web Search",
+		supportsParallel: true,
 		async execute(_toolCallId, params, signal) {
 			const p = params;
 			const cfg = resolveWebSearchConfig(getConfig()?.tools?.web);
@@ -49,13 +50,15 @@ function createWebSearchTool(getConfig) {
 						type: "text",
 						text: `Search error: ${error instanceof Error ? error.message : String(error)}`
 					}],
-					details: { results: [] }
+					details: {
+						results: [],
+						error: error instanceof Error ? error.message : String(error)
+					}
 				};
 			}
 		}
 	};
 }
-const MAX_FETCH_CHARS = 6e6;
 const WebFetchSchema = Type.Object({
 	url: Type.String({ description: "The URL to fetch" }),
 	maxChars: Type.Optional(Type.Number({ description: "Maximum characters to return (default: 10000)" }))
@@ -76,47 +79,35 @@ function createWebFetchTool(getConfig) {
 		description: "Fetch and extract readable content from a URL (HTML via Readability; plain text as-is).",
 		parameters: WebFetchSchema,
 		label: "🌐 Web Fetch",
+		supportsParallel: true,
 		async execute(_toolCallId, params, signal) {
 			try {
 				const p = params;
-				const safety = checkUrlSafety(p.url);
-				if (!safety.safe) return {
-					content: [{
-						type: "text",
-						text: `Blocked: ${safety.reason}`
-					}],
-					details: {}
-				};
-				const blocked = checkWebsiteBlocklist(p.url, getConfig()?.tools?.web?.blocklist);
-				if (blocked) return {
-					content: [{
-						type: "text",
-						text: `Blocked: ${blocked.message}`
-					}],
-					details: {}
-				};
-				const response = await fetch(p.url, { signal });
-				if (!response.ok) throw new Error(`HTTP ${response.status}`);
-				const html = await response.text();
-				if (html.length > MAX_FETCH_CHARS) throw new Error("Response too large");
+				const fetched = await fetchPublicText(p.url, getConfig()?.tools?.web?.blocklist, signal);
+				const html = fetched.text;
 				const maxChars = p.maxChars || 1e4;
-				const contentType = response.headers.get("content-type") ?? "";
+				const contentType = fetched.contentType;
 				const looksHtml = /html|xml/i.test(contentType) || /^[\s\n]*</.test(html.slice(0, Math.min(500, html.length)));
 				let text;
 				if (looksHtml) try {
-					text = await extractReadableText(html, p.url);
+					text = await extractReadableText(html, fetched.url);
 					if (!text || text.length < 40) text = stripHtmlFallback(html);
 				} catch {
 					text = stripHtmlFallback(html);
 				}
 				else text = html.trim();
-				if (text.length > maxChars) text = text.substring(0, maxChars) + "\n\n[truncated...]";
+				const truncated = text.length > maxChars;
+				if (truncated) text = text.substring(0, maxChars) + "\n\n[truncated...]";
 				return {
 					content: [{
 						type: "text",
 						text
 					}],
-					details: {}
+					details: {
+						truncated,
+						complete: !truncated,
+						url: fetched.url
+					}
 				};
 			} catch (error) {
 				return {
@@ -124,7 +115,7 @@ function createWebFetchTool(getConfig) {
 						type: "text",
 						text: `Fetch error: ${error instanceof Error ? error.message : String(error)}`
 					}],
-					details: {}
+					details: { error: error instanceof Error ? error.message : String(error) }
 				};
 			}
 		}

package/dist/src/agent/workflow/subagent-runner.js

@@ -2,7 +2,9 @@ import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
 import { createSqliteTranscriptRuntime } from "../embedded/transcript-runtime.js";
 import { createDelegateChildHandle } from "../child-agent-factory.js";
-import { DEFAULT_DELEGATE_TOOLS, DELEGATE_BLOCKED_TOOLS } from "../tools/delegate-tool.js";
+import { DELEGATION_TOOL_CAPABILITIES, protectDelegatedTool, resolveDelegationTools } from "../tools/delegation-policy.js";
+import { DELEGATE_BLOCKED_TOOLS } from "../tools/delegate-tool.js";
+import { createDelegationParentPolicy } from "../tools/delegation-parent-policy.js";
 import { STRUCTURED_OUTPUT_TOOL_NAME, createStructuredOutputTool } from "./structured-output-tool.js";
 //#region src/agent/workflow/subagent-runner.ts
 init_logger();
@@ -38,11 +40,27 @@ var DelegateSubagentRunner = class {
 			agentId: this.deps.agentId,
 			getConfig: this.deps.getConfig,
 			toolExecutorConfig: this.deps.toolExecutorConfig,
+			authorizeToolCall: createDelegationParentPolicy({
+				getConfig: this.deps.getConfig,
+				conversationId: opts.sessionMetadata?.parentConversationId,
+				agentId: this.deps.agentId
+			}).beforeToolCall,
 			buildChildTools: (childOpts) => {
-				const base = this.deps.buildChildTools({
+				const candidates = this.deps.buildChildTools({
 					...childOpts,
 					agentId: this.deps.agentId ?? childOpts.agentId
 				});
+				const access = resolveDelegationTools(candidates.map((tool) => tool.name), "custom", opts.allowedToolNames, [
+					"local_read",
+					"web_read",
+					"knowledge_read",
+					"skills_read",
+					"external_read",
+					...opts.allowedToolNames?.includes("browser_use") ? ["browser"] : []
+				]);
+				if (access.rejected.length) throw new Error(`Workflow delegation rejected tools: ${JSON.stringify(access.rejected)}. Use delegate_task implement for isolated writes and commands.`);
+				const granted = new Set(access.granted);
+				const base = candidates.filter((tool) => granted.has(tool.name)).map(protectDelegatedTool);
 				if (!wantStructured || !opts.schema) return base;
 				return [...base.filter((t) => t.name !== STRUCTURED_OUTPUT_TOOL_NAME), createStructuredOutputTool({
 					schema: opts.schema,
@@ -129,7 +147,11 @@ var DelegateSubagentRunner = class {
 	}
 };
 function resolveAllowedToolNames(requested, wantStructured) {
-	const filtered = (requested ?? [...DEFAULT_DELEGATE_TOOLS]).map((s) => String(s).trim()).filter((s) => s.length > 0).filter((s) => !DELEGATE_BLOCKED_TOOLS.has(s));
+	const filtered = (requested ?? Object.keys(DELEGATION_TOOL_CAPABILITIES).filter((name) => ![
+		"local_write",
+		"command",
+		"browser"
+	].includes(DELEGATION_TOOL_CAPABILITIES[name]))).map((s) => String(s).trim()).filter((s) => s.length > 0).filter((s) => !DELEGATE_BLOCKED_TOOLS.has(s));
 	if (wantStructured && !filtered.includes("structured_output")) filtered.push(STRUCTURED_OUTPUT_TOOL_NAME);
 	return [...new Set(filtered)];
 }

package/dist/src/agent/workflow/workflow-child-tools.js

@@ -1,13 +1,22 @@
-import { EXTERNAL_TOOL_NAMES } from "../external-tools/gateway-tools.js";
-import "../external-tools/index.js";
+import { resolveEffectiveAgentProfile, resolveEffectiveAgentProfileForSession } from "../../config/agent-profile.js";
 import { AgentToolsFactory } from "../tools/factory.js";
 //#region src/agent/workflow/workflow-child-tools.ts
 /** Builds the tool set for workflow child agents (wired from gateway to avoid cycles). */
 function buildWorkflowChildTools(childOptions) {
+	const config = childOptions.getConfig();
+	const profile = config ? childOptions.browserConversationId ? resolveEffectiveAgentProfileForSession(config, childOptions.browserConversationId) : childOptions.agentId ? resolveEffectiveAgentProfile(config, childOptions.agentId) : resolveEffectiveAgentProfileForSession(config, void 0) : void 0;
 	return new AgentToolsFactory({
 		workspace: childOptions.workspace,
 		bus: childOptions.bus,
-		getCurrentContext: () => null,
+		getCurrentContext: () => childOptions.browserConversationId ? {
+			conversationId: childOptions.browserConversationId,
+			channel: "workflow",
+			chatId: childOptions.browserConversationId,
+			origin: {
+				type: "system",
+				source: "workflow"
+			}
+		} : null,
 		getConfig: childOptions.getConfig,
 		getPrimaryModel: () => childOptions.model,
 		endpointTools: childOptions.endpointTools,
@@ -17,11 +26,7 @@ function buildWorkflowChildTools(childOptions) {
 		getPrimaryModel: () => childOptions.model,
 		agentId: childOptions.agentId,
 		conversationId: childOptions.browserConversationId,
-		disabledTools: new Set([
-			EXTERNAL_TOOL_NAMES.search,
-			EXTERNAL_TOOL_NAMES.describe,
-			EXTERNAL_TOOL_NAMES.execute
-		])
+		disabledTools: profile?.tools.denied
 	});
 }
 //#endregion

package/dist/src/agent-config/schema.d.ts

@@ -96,6 +96,7 @@ export declare const ToolPolicySchema: z.ZodObject<{
         deny: "deny";
         ask: "ask";
     }>;
+    readOnly: z.ZodOptional<z.ZodBoolean>;
     maxCallsPerTurn: z.ZodOptional<z.ZodNumber>;
     timeoutMs: z.ZodOptional<z.ZodNumber>;
 }, z.core.$strict>;
@@ -105,6 +106,7 @@ export declare const ToolPoliciesSchema: z.ZodRecord<z.ZodString, z.ZodObject<{
         deny: "deny";
         ask: "ask";
     }>;
+    readOnly: z.ZodOptional<z.ZodBoolean>;
     maxCallsPerTurn: z.ZodOptional<z.ZodNumber>;
     timeoutMs: z.ZodOptional<z.ZodNumber>;
 }, z.core.$strict>>;
@@ -198,6 +200,7 @@ export declare const AgentDefaultsSchema: z.ZodObject<{
             deny: "deny";
             ask: "ask";
         }>;
+        readOnly: z.ZodOptional<z.ZodBoolean>;
         maxCallsPerTurn: z.ZodOptional<z.ZodNumber>;
         timeoutMs: z.ZodOptional<z.ZodNumber>;
     }, z.core.$strict>>>;
@@ -289,6 +292,7 @@ export declare const AgentEntrySchema: z.ZodObject<{
             deny: "deny";
             ask: "ask";
         }>;
+        readOnly: z.ZodOptional<z.ZodBoolean>;
         maxCallsPerTurn: z.ZodOptional<z.ZodNumber>;
         timeoutMs: z.ZodOptional<z.ZodNumber>;
     }, z.core.$strict>>>;
@@ -370,6 +374,7 @@ export declare const AgentsConfigSchema: z.ZodObject<{
                 deny: "deny";
                 ask: "ask";
             }>;
+            readOnly: z.ZodOptional<z.ZodBoolean>;
             maxCallsPerTurn: z.ZodOptional<z.ZodNumber>;
             timeoutMs: z.ZodOptional<z.ZodNumber>;
         }, z.core.$strict>>>;
@@ -457,6 +462,7 @@ export declare const AgentsConfigSchema: z.ZodObject<{
                 deny: "deny";
                 ask: "ask";
             }>;
+            readOnly: z.ZodOptional<z.ZodBoolean>;
             maxCallsPerTurn: z.ZodOptional<z.ZodNumber>;
             timeoutMs: z.ZodOptional<z.ZodNumber>;
         }, z.core.$strict>>>;
@@ -544,6 +550,7 @@ export declare const EffectiveAgentConfigSchema: z.ZodObject<{
             deny: "deny";
             ask: "ask";
         }>;
+        readOnly: z.ZodOptional<z.ZodBoolean>;
         maxCallsPerTurn: z.ZodOptional<z.ZodNumber>;
         timeoutMs: z.ZodOptional<z.ZodNumber>;
     }, z.core.$strict>>;

package/dist/src/agent-config/schema.js

@@ -49,6 +49,8 @@ var init_schema = __esmMin((() => {
 	]);
 	ToolPolicySchema = z.object({
 		mode: ToolModeSchema,
+		/** Host assertion for external tools; remote annotations alone cannot grant read access. */
+		readOnly: z.boolean().optional(),
 		maxCallsPerTurn: z.number().int().positive().optional(),
 		timeoutMs: z.number().int().positive().optional()
 	}).strict();

package/dist/src/chat-commands/builtins/understanding.js

@@ -58,7 +58,7 @@ const rememberCommand = {
 			disclosurePolicy: "referenceable",
 			observedAt: Date.now(),
 			createdBy: "user"
-		});
+		}, Date.now(), { restoreDeleted: true });
 		const scopeLabel = sessionOnly ? "this conversation" : "all conversations";
 		return {
 			content: result.action === "created" ? `Remembered for ${scopeLabel}. You can review or remove it in User Model.` : `This is already remembered for ${scopeLabel}.`,

package/dist/src/cli/commands/doctor/checks/database-schema.js

@@ -53,7 +53,7 @@ async function checkDatabaseSchema(ctx) {
 		id: "database-schema",
 		label: "Database schema",
 		status: "pass",
-		message: `SQLite schema v${status.dbVersion} (current release v183).`,
+		message: `SQLite schema v${status.dbVersion} (current release v186).`,
 		hints: []
 	};
 }

package/dist/src/cli/commands/gateway/lifecycle.js

@@ -1,8 +1,8 @@
 import { init_paths, resolveConfigPath } from "../../../config/paths.js";
 import { loadConfig } from "../../../config/loader.js";
 import "../../../config/index.js";
-import { resolveGatewayService } from "../../../daemon/service.js";
 import { isRestartEnabled } from "../../../config/commands.flags.js";
+import { resolveGatewayService } from "../../../daemon/service.js";
 import { authorizeGatewaySigusr1Restart, writeGatewayRestartIntentSync } from "../../../infra/restart.js";
 import { findVerifiedGatewayListenerPidsOnPortSync, formatGatewayPidList, signalVerifiedGatewayPidSync } from "../../../infra/gateway-processes.js";
 import { runServiceRestart, runServiceStop } from "./lifecycle-core.js";

package/dist/src/config/schema.d.ts

@@ -100,6 +100,7 @@ export declare const AgentsConfigSchema: z.ZodDefault<z.ZodObject<{
                 deny: "deny";
                 ask: "ask";
             }>;
+            readOnly: z.ZodOptional<z.ZodBoolean>;
             maxCallsPerTurn: z.ZodOptional<z.ZodNumber>;
             timeoutMs: z.ZodOptional<z.ZodNumber>;
         }, z.core.$strict>>>;
@@ -187,6 +188,7 @@ export declare const AgentsConfigSchema: z.ZodDefault<z.ZodObject<{
                 deny: "deny";
                 ask: "ask";
             }>;
+            readOnly: z.ZodOptional<z.ZodBoolean>;
             maxCallsPerTurn: z.ZodOptional<z.ZodNumber>;
             timeoutMs: z.ZodOptional<z.ZodNumber>;
         }, z.core.$strict>>>;
@@ -1465,7 +1467,6 @@ export declare const ConfigSchema: z.ZodDefault<z.ZodObject<{
             enabled: z.ZodDefault<z.ZodBoolean>;
             writePolicy: z.ZodDefault<z.ZodEnum<{
                 allow: "allow";
-                confirm: "confirm";
                 deny: "deny";
             }>>;
             sensitiveWritePolicy: z.ZodDefault<z.ZodEnum<{
@@ -1502,11 +1503,10 @@ export declare const ConfigSchema: z.ZodDefault<z.ZodObject<{
                 staleRetentionDays: z.ZodDefault<z.ZodNumber>;
             }, z.core.$strict>>;
         }, z.core.$strict>>;
-        knowledgeMemory: z.ZodDefault<z.ZodPreprocess<z.ZodObject<{
+        knowledgeMemory: z.ZodDefault<z.ZodObject<{
             enabled: z.ZodDefault<z.ZodBoolean>;
             writePolicy: z.ZodDefault<z.ZodEnum<{
                 allow: "allow";
-                confirm: "confirm";
                 deny: "deny";
             }>>;
             readScopes: z.ZodDefault<z.ZodArray<z.ZodEnum<{
@@ -1539,7 +1539,7 @@ export declare const ConfigSchema: z.ZodDefault<z.ZodObject<{
             allowExternalWrites: z.ZodDefault<z.ZodBoolean>;
             allowedProviderIds: z.ZodOptional<z.ZodArray<z.ZodString>>;
             autoWriteKinds: z.ZodOptional<z.ZodArray<z.ZodString>>;
-        }, z.core.$strict>>>;
+        }, z.core.$strict>>;
         contextPlanning: z.ZodDefault<z.ZodObject<{
             enabled: z.ZodDefault<z.ZodBoolean>;
             maxAssertions: z.ZodDefault<z.ZodNumber>;
@@ -1612,6 +1612,7 @@ export declare const ConfigSchema: z.ZodDefault<z.ZodObject<{
                     deny: "deny";
                     ask: "ask";
                 }>;
+                readOnly: z.ZodOptional<z.ZodBoolean>;
                 maxCallsPerTurn: z.ZodOptional<z.ZodNumber>;
                 timeoutMs: z.ZodOptional<z.ZodNumber>;
             }, z.core.$strict>>>;
@@ -1699,6 +1700,7 @@ export declare const ConfigSchema: z.ZodDefault<z.ZodObject<{
                     deny: "deny";
                     ask: "ask";
                 }>;
+                readOnly: z.ZodOptional<z.ZodBoolean>;
                 maxCallsPerTurn: z.ZodOptional<z.ZodNumber>;
                 timeoutMs: z.ZodOptional<z.ZodNumber>;
             }, z.core.$strict>>>;

package/dist/src/config/schema.js

@@ -1054,7 +1054,7 @@ workDiscoveryOnboarding: z.boolean().default(true) }).strict().default({ workDis
 			preferences: { responseLanguage: "auto" },
 			userModel: {
 				enabled: true,
-				writePolicy: "confirm",
+				writePolicy: "allow",
 				sensitiveWritePolicy: "confirm",
 				processingPolicy: "remote_allowed",
 				extraction: {
@@ -1075,7 +1075,7 @@ workDiscoveryOnboarding: z.boolean().default(true) }).strict().default({ workDis
 			},
 			knowledgeMemory: {
 				enabled: true,
-				writePolicy: "confirm",
+				writePolicy: "allow",
 				readScopes: [
 					"global",
 					"agent",

package/dist/src/connectors/connected-source-understanding.d.ts

@@ -10,6 +10,7 @@ export declare function deriveConnectedSourceUnderstanding(input: {
     sourceRunId: string;
     processingPolicy: 'local_only' | 'remote_allowed';
     analyze?: typeof analyzeUnderstandingSources;
+    assertAuthorized?: () => void;
 }): Promise<{
     created: number;
     knowledgeCount: number;