@xopcai/xopc 0.0.313 → 0.0.315

package/dist/src/gateway/hono/routes/site-shares.js

@@ -1,8 +1,8 @@
 import { resolveGatewayEffectiveHost } from "../../../config/gateway-bind.js";
-import { resolveReverseProxyPublicUrl } from "../../public-url.js";
 import { resolveSiteShareConfig } from "../../../share/site-share-config.js";
 import { getSiteShareStore } from "../../../share/site-share-store.js";
 import { resolveSiteShareUrl } from "../../../share/share-url.js";
+import { resolveReverseProxyPublicUrl } from "../../public-url.js";
 import { getGatewayPrincipal } from "../../security/gateway-principal.js";
 import { createHash } from "node:crypto";
 //#region src/gateway/hono/routes/site-shares.ts

package/dist/src/gateway/hono/routes/tasks.js

@@ -1,68 +1,67 @@
 import { init_transaction, runSqliteWriteTransaction } from "../../../storage/sqlite/transaction.js";
-import { TaskPhaseSchema } from "../../../../packages/gateway-contract/src/task-lifecycle.js";
-import { TaskBoardPositionRequestSchema, TaskCommandRequestSchema, TaskContextInputSchema, TaskCreateRequestSchema, TaskDependencyUpdateRequestSchema, TaskHandoffRequestSchema, TaskPatchRequestSchema } from "../../../../packages/gateway-contract/src/tasks.js";
+import { TaskCommandRequestSchema, TaskCreateRequestSchema, TaskHandoffRequestSchema } from "../../../../packages/gateway-contract/src/tasks.js";
+import { ProductReadContracts, TaskRunCancelOutputSchema, TaskRunFeedbackOutputSchema } from "../../../../packages/gateway-contract/src/capabilities.js";
 import { init_src } from "../../../../packages/gateway-contract/src/index.js";
 import { enqueueTaskChangedEvent, init_task_change_events } from "../../../tasks/task-change-events.js";
+import { TaskRepository, init_task_repository } from "../../../tasks/task-repository.js";
 import { TaskRunRepository, init_task_run_repository } from "../../../tasks/task-run-repository.js";
-import { TaskContextRepository } from "../../../tasks/task-context-repository.js";
-import { TaskRepository } from "../../../tasks/task-repository.js";
-import { TaskReadModelProjector } from "../../../tasks/task-read-model-projector.js";
-import { TaskDependencyError, TaskDependencyService } from "../../../tasks/task-dependency-service.js";
-import { TaskApplicationService } from "../../../tasks/task-application-service.js";
-import { resolveProjectAgentId } from "../../../projects/project-agent.js";
 import { TaskConversationRepository } from "../../../tasks/task-conversation-repository.js";
+import { CapabilityError } from "../../../capabilities/runtime/errors.js";
+import "../../../capabilities/runtime/dispatcher.js";
+import { TaskContextMutationOutputSchema } from "../../../tasks/capabilities/relations.js";
+import { TaskDeleteOutputSchema } from "../../../tasks/capabilities/management.js";
+import { TaskMutationOutputSchema } from "../../../tasks/capabilities/write.js";
+import { createProductDispatcher } from "../../../capabilities/runtime/product.js";
 import { ProjectOperatingViewService } from "../../../tasks/project-operating-view-service.js";
-import { TaskValueMetricsService } from "../../../tasks/task-value-metrics-service.js";
 import { TaskHandoffService } from "../../../tasks/task-handoff-service.js";
-import { TaskDeletionService } from "../../../tasks/task-deletion-service.js";
-import { TaskSignalService } from "../../../tasks/task-signal-service.js";
 import { submitSessionInput } from "./session-input-handler.js";
 import { patchChatModelConfig } from "./chat-model-config.js";
+import { capabilityHttpContext, capabilityHttpError } from "../../../capabilities/adapters/http.js";
 import { TaskConversationQueryService } from "../../service/task-conversation-query-service.js";
+import { randomUUID } from "node:crypto";
 //#region src/gateway/hono/routes/tasks.ts
 init_src();
 init_transaction();
 init_task_change_events();
+init_task_repository();
 init_task_run_repository();
 function registerTaskRoutes(authenticated, deps) {
+	const capabilities = createProductDispatcher(() => deps.service.notesServiceInstance, {
+		getConfig: () => deps.service.currentConfig,
+		getProjects: () => deps.service.projects,
+		wake: (runId) => runId ? deps.service.dispatchTaskRuns() : deps.service.dispatchTaskEvents(),
+		abortConversation: async (conversationId) => {
+			const liveRunId = deps.service.getActiveWebchatRunId(conversationId);
+			if (liveRunId) await deps.service.abortAgentRun(liveRunId);
+		}
+	});
 	const taskRateLimit = deps.taskRateLimitMiddleware ?? deps.strictRateLimitMiddleware;
-	const application = new TaskApplicationService();
+	const invokeRelation = async (c, operation, input) => {
+		const caller = capabilityHttpContext(c);
+		return capabilities.call(operation, input, caller, {
+			...capabilities.describe(operation, caller),
+			idempotencyKey: c.req.header("idempotency-key") ?? randomUUID()
+		});
+	};
 	const operatingViews = new ProjectOperatingViewService(deps.service.projects);
-	const metrics = new TaskValueMetricsService();
 	const tasks = new TaskRepository();
 	const runs = new TaskRunRepository();
-	const context = new TaskContextRepository();
 	const conversations = new TaskConversationRepository();
 	const conversationQuery = new TaskConversationQueryService(deps.service.sessions);
-	const projector = new TaskReadModelProjector();
-	const signals = new TaskSignalService(() => deps.service.dispatchTaskRuns());
-	const dependencies = new TaskDependencyService();
-	const deletion = new TaskDeletionService(tasks, runs);
 	const handoffs = new TaskHandoffService({
 		getConfig: () => deps.service.currentConfig,
 		sessionIndex: deps.service.sessionIndexInstance,
 		getActiveRunId: (conversationId) => deps.service.getActiveWebchatRunId(conversationId),
 		abortRun: (runId) => deps.service.abortAgentRun(runId)
 	});
-	authenticated.get("/api/tasks", (c) => {
-		const phase = TaskPhaseSchema.safeParse(c.req.query("phase"));
-		const rawLimit = Number(c.req.query("limit") ?? 50);
-		const limit = Number.isFinite(rawLimit) ? rawLimit : 50;
-		return c.json({
-			ok: true,
-			items: tasks.list({
-				search: c.req.query("search"),
-				...phase.success ? { phase: phase.data } : {},
-				limit
-			}).map((task) => {
-				const model = projector.project(task);
-				return {
-					task,
-					operationalState: model.operationalState,
-					attention: model.attention
-				};
-			})
-		});
+	authenticated.get("/api/tasks", async (c) => {
+		try {
+			const input = { ...c.req.query() };
+			for (const key of ["limit", "offset"]) if (input[key] !== void 0) input[key] = Number(input[key]);
+			return c.json(await capabilities.call("xopc.tasks.list", input, capabilityHttpContext(c)));
+		} catch (error) {
+			return capabilityHttpError(c, error);
+		}
 	});
 	authenticated.post("/api/tasks", taskRateLimit, async (c) => {
 		const body = await c.req.json().catch(() => ({}));
@@ -72,32 +71,17 @@ function registerTaskRoutes(authenticated, deps) {
 			error: "Invalid task request"
 		}, 400);
 		try {
-			const requestedAgentId = parsed.data.delegateAgentId ?? (parsed.data.activation.mode === "start" && parsed.data.activation.executor?.kind === "agent" ? parsed.data.activation.executor.agentId : void 0);
-			const agentId = resolveProjectAgentId({
-				config: deps.service.currentConfig,
-				projects: deps.service.projects,
-				explicitAgentId: requestedAgentId,
-				projectId: parsed.data.projectId
-			});
-			const input = {
-				...parsed.data,
-				delegateAgentId: agentId,
-				activation: parsed.data.activation.mode === "start" ? {
-					...parsed.data.activation,
-					executor: parsed.data.activation.executor?.kind === "agent" || !parsed.data.activation.executor ? {
-						kind: "agent",
-						agentId
-					} : parsed.data.activation.executor
-				} : parsed.data.activation
-			};
-			const created = application.create(input);
+			const context = capabilityHttpContext(c);
+			const { idempotencyKey, ...input } = parsed.data;
+			const created = TaskMutationOutputSchema.parse(await capabilities.call("xopc.tasks.create", input, context, {
+				...capabilities.describe("xopc.tasks.create", context),
+				idempotencyKey
+			}));
 			if (created.ok === false) return c.json({
 				ok: false,
 				code: created.reason,
 				error: created.reason
 			}, 409);
-			if (created.runId) deps.service.dispatchTaskRuns();
-			else deps.service.dispatchTaskEvents();
 			return c.json({
 				ok: true,
 				task: created.model.task,
@@ -112,33 +96,19 @@ function registerTaskRoutes(authenticated, deps) {
 			}, message === "Project not found" ? 404 : 409);
 		}
 	});
-	authenticated.get("/api/tasks/metrics", (c) => c.json({
-		ok: true,
-		metrics: metrics.get()
-	}));
-	authenticated.get("/api/tasks/:id", (c) => {
-		const task = tasks.get(c.req.param("id"));
-		if (!task) return c.json({
-			ok: false,
-			error: "Task not found"
-		}, 404);
-		const model = projector.project(task);
-		return c.json({
-			ok: true,
-			task,
-			operationalState: model.operationalState,
-			attention: model.attention,
-			waits: runs.listActiveWaits(task.id),
-			runs: runs.listByTask(task.id),
-			receipts: runs.listReceipts(task.id),
-			context: context.list(task.id),
-			conversation: conversations.requireState(task.id),
-			sessions: conversations.listSessions(task.id),
-			authorityGrants: context.listActiveGrants(task.id),
-			dependencies: dependencies.listDependencies(task.id),
-			dependents: dependencies.listDependents(task.id),
-			allowedCommands: model.allowedCommands
-		});
+	authenticated.get("/api/tasks/metrics", async (c) => {
+		try {
+			return c.json(await capabilities.call("xopc.tasks.metrics", {}, capabilityHttpContext(c)));
+		} catch (error) {
+			return capabilityHttpError(c, error);
+		}
+	});
+	authenticated.get("/api/tasks/:id", async (c) => {
+		try {
+			return c.json(await capabilities.call("xopc.tasks.get", { id: c.req.param("id") }, capabilityHttpContext(c)));
+		} catch (error) {
+			return capabilityHttpError(c, error);
+		}
 	});
 	authenticated.post("/api/tasks/:id/conversation", taskRateLimit, async (c) => {
 		try {
@@ -257,46 +227,44 @@ function registerTaskRoutes(authenticated, deps) {
 			error: "Task conversation not found"
 		}, 404);
 	});
-	authenticated.patch("/api/tasks/:id", taskRateLimit, async (c) => {
-		const parsed = TaskPatchRequestSchema.safeParse(await c.req.json().catch(() => ({})));
-		if (!parsed.success) return c.json({
+	authenticated.get("/api/tasks/:id/conversation/find", async (c) => {
+		const query = c.req.query("q")?.trim() ?? "";
+		if (!query || query.length > 256) return c.json({
 			ok: false,
-			error: "Invalid task patch"
+			error: "q must contain 1 to 256 characters"
 		}, 400);
-		const updated = runSqliteWriteTransaction((db) => {
-			const task = tasks.update(c.req.param("id"), parsed.data);
-			if (!task) return void 0;
-			const changedFields = Object.keys(parsed.data).filter((field) => field !== "expectedVersion");
-			enqueueTaskChangedEvent(db, {
-				taskId: task.id,
-				projectId: task.projectId,
-				version: task.version,
-				changedFields,
-				actor: { kind: "user" }
-			});
-			return task;
-		});
-		if (!updated) return c.json({
-			ok: false,
-			error: "Task changed or was not found"
-		}, 409);
-		deps.service.dispatchTaskEvents();
-		return c.json({
+		const result = await conversationQuery.findMessages(c.req.param("id"), query);
+		return result ? c.json({
 			ok: true,
-			task: updated
-		});
+			...result
+		}) : c.json({
+			ok: false,
+			error: "Task conversation not found"
+		}, 404);
+	});
+	authenticated.patch("/api/tasks/:id", taskRateLimit, async (c) => {
+		try {
+			return c.json(await invokeRelation(c, "xopc.tasks.update", {
+				...await c.req.json().catch(() => ({})),
+				taskId: c.req.param("id")
+			}));
+		} catch (error) {
+			return capabilityHttpError(c, error);
+		}
 	});
-	authenticated.delete("/api/tasks/:id", taskRateLimit, (c) => {
+	authenticated.delete("/api/tasks/:id", taskRateLimit, async (c) => {
 		const taskId = c.req.param("id");
-		const result = deletion.delete(taskId);
-		if (result.ok === true) {
-			deps.service.dispatchTaskEvents();
-			return c.json({
-				ok: true,
-				deleted: true,
-				taskId
-			});
+		let result;
+		try {
+			result = TaskDeleteOutputSchema.parse(await invokeRelation(c, "xopc.tasks.delete", { taskId }));
+		} catch (error) {
+			return capabilityHttpError(c, error);
 		}
+		if (result.ok === true) return c.json({
+			ok: true,
+			deleted: true,
+			taskId
+		});
 		if (result.reason === "active_run") return c.json({
 			ok: false,
 			code: "task_active",
@@ -310,79 +278,23 @@ function registerTaskRoutes(authenticated, deps) {
 		}, 404);
 	});
 	authenticated.put("/api/tasks/:id/dependencies", taskRateLimit, async (c) => {
-		const parsed = TaskDependencyUpdateRequestSchema.safeParse(await c.req.json().catch(() => ({})));
-		if (!parsed.success) return c.json({
-			ok: false,
-			error: "Invalid task dependencies"
-		}, 400);
 		try {
-			const task = runSqliteWriteTransaction((db) => {
-				const changed = dependencies.replace({
-					taskId: c.req.param("id"),
-					...parsed.data
-				});
-				enqueueTaskChangedEvent(db, {
-					taskId: changed.id,
-					projectId: changed.projectId,
-					version: changed.version,
-					changedFields: ["dependencies"],
-					actor: { kind: "user" }
-				});
-				return changed;
-			});
-			deps.service.dispatchTaskEvents();
-			return c.json({
-				ok: true,
-				task,
-				dependencies: dependencies.listDependencies(task.id),
-				dependents: dependencies.listDependents(task.id)
-			});
+			return c.json(await invokeRelation(c, "xopc.tasks.update_dependencies", {
+				...await c.req.json().catch(() => ({})),
+				taskId: c.req.param("id")
+			}));
 		} catch (error) {
-			if (!(error instanceof TaskDependencyError)) throw error;
-			const status = error.code === "not_found" ? 404 : error.code === "conflict" ? 409 : 400;
-			return c.json({
-				ok: false,
-				code: error.code,
-				error: error.message
-			}, status);
+			return capabilityHttpError(c, error);
 		}
 	});
 	authenticated.put("/api/tasks/:id/board-position", taskRateLimit, async (c) => {
-		const parsed = TaskBoardPositionRequestSchema.safeParse(await c.req.json().catch(() => ({})));
-		if (!parsed.success) return c.json({
-			ok: false,
-			error: "Invalid task board position"
-		}, 400);
 		try {
-			const task = runSqliteWriteTransaction((db) => {
-				const reordered = tasks.reorder({
-					taskId: c.req.param("id"),
-					...parsed.data
-				});
-				if (!reordered) return void 0;
-				enqueueTaskChangedEvent(db, {
-					taskId: reordered.id,
-					projectId: reordered.projectId,
-					version: reordered.version,
-					changedFields: ["boardRank"],
-					actor: { kind: "user" }
-				});
-				return reordered;
-			});
-			if (!task) return c.json({
-				ok: false,
-				error: "Task changed or was not found"
-			}, 409);
-			deps.service.dispatchTaskEvents();
-			return c.json({
-				ok: true,
-				task
-			});
+			return c.json(await invokeRelation(c, "xopc.tasks.reorder", {
+				...await c.req.json().catch(() => ({})),
+				taskId: c.req.param("id")
+			}));
 		} catch (error) {
-			return c.json({
-				ok: false,
-				error: error instanceof Error ? error.message : String(error)
-			}, 400);
+			return capabilityHttpError(c, error);
 		}
 	});
 	authenticated.post("/api/tasks/:id/commands", taskRateLimit, async (c) => {
@@ -391,12 +303,20 @@ function registerTaskRoutes(authenticated, deps) {
 			ok: false,
 			error: "Invalid task command"
 		}, 400);
-		const result = application.execute({
-			taskId: c.req.param("id"),
-			idempotencyKey: parsed.data.idempotencyKey,
-			expectedVersion: parsed.data.expectedVersion,
-			command: parsed.data.command
-		});
+		const capabilityContext = capabilityHttpContext(c);
+		const { idempotencyKey, ...input } = parsed.data;
+		let result;
+		try {
+			result = TaskMutationOutputSchema.parse(await capabilities.call("xopc.tasks.command", {
+				...input,
+				taskId: c.req.param("id")
+			}, capabilityContext, {
+				...capabilities.describe("xopc.tasks.command", capabilityContext),
+				idempotencyKey
+			}));
+		} catch (error) {
+			return capabilityHttpError(c, error);
+		}
 		if (result.ok === false) {
 			if (result.reason === "not_found") return c.json({
 				ok: false,
@@ -409,16 +329,6 @@ function registerTaskRoutes(authenticated, deps) {
 				latest: result.model
 			}, 409);
 		}
-		if (parsed.data.command?.type === "add_wait" && parsed.data.command.wait.kind === "paused" || parsed.data.command?.type === "close" || parsed.data.command?.type === "resolve_wait" && parsed.data.command.resolution?.kind === "task_approval" && parsed.data.command.resolution.decision === "deny") {
-			const activeRun = runs.getActiveRoot(c.req.param("id"));
-			if (activeRun?.conversationId) {
-				const liveRunId = deps.service.getActiveWebchatRunId(activeRun.conversationId);
-				if (liveRunId) await deps.service.abortAgentRun(liveRunId);
-			}
-		}
-		if (result.runId || parsed.data.command?.type === "resolve_wait") deps.service.dispatchTaskRuns();
-		else deps.service.dispatchTaskEvents();
-		if (parsed.data.command?.type === "close" && parsed.data.command.resolution === "done") signals.dependencyClosed(c.req.param("id"));
 		return c.json({
 			ok: true,
 			...result.model,
@@ -426,142 +336,88 @@ function registerTaskRoutes(authenticated, deps) {
 		});
 	});
 	authenticated.post("/api/tasks/:id/context", taskRateLimit, async (c) => {
-		const task = tasks.get(c.req.param("id"));
-		if (!task) return c.json({
-			ok: false,
-			error: "Task not found"
-		}, 404);
-		const parsed = TaskContextInputSchema.safeParse(await c.req.json().catch(() => ({})));
-		if (!parsed.success) return c.json({
-			ok: false,
-			error: "Invalid task context edge"
-		}, 400);
-		const edge = runSqliteWriteTransaction((db) => {
-			const created = context.add({
-				taskId: task.id,
-				...parsed.data,
-				createdBy: { kind: "user" }
-			});
-			enqueueTaskChangedEvent(db, {
-				taskId: task.id,
-				projectId: task.projectId,
-				version: task.version,
-				changedFields: ["context"],
-				actor: { kind: "user" }
-			});
-			return created;
-		});
-		deps.service.dispatchTaskEvents();
-		return c.json({
-			ok: true,
-			edge
-		}, 201);
+		try {
+			const { expectedVersion, ...edge } = await c.req.json().catch(() => ({})) ?? {};
+			const result = TaskContextMutationOutputSchema.parse(await invokeRelation(c, "xopc.tasks.add_context", {
+				taskId: c.req.param("id"),
+				edge,
+				expectedVersion
+			}));
+			return c.json({
+				ok: true,
+				edge: result.edge
+			}, 201);
+		} catch (error) {
+			return capabilityHttpError(c, error);
+		}
 	});
-	authenticated.delete("/api/tasks/:id/context/:edgeId", taskRateLimit, (c) => {
-		const task = tasks.get(c.req.param("id"));
-		const removed = task ? runSqliteWriteTransaction((db) => {
-			const didRemove = context.remove(task.id, c.req.param("edgeId"));
-			if (didRemove) enqueueTaskChangedEvent(db, {
-				taskId: task.id,
-				projectId: task.projectId,
-				version: task.version,
-				changedFields: ["context"],
-				actor: { kind: "user" }
+	authenticated.delete("/api/tasks/:id/context/:edgeId", taskRateLimit, async (c) => {
+		try {
+			await invokeRelation(c, "xopc.tasks.remove_context", {
+				taskId: c.req.param("id"),
+				edgeId: c.req.param("edgeId")
 			});
-			return didRemove;
-		}) : false;
-		if (removed) deps.service.dispatchTaskEvents();
-		return removed ? c.json({ ok: true }) : c.json({
-			ok: false,
-			error: "Task context edge not found"
-		}, 404);
+			return c.json({ ok: true });
+		} catch (error) {
+			return capabilityHttpError(c, error);
+		}
 	});
-	authenticated.get("/api/task-runs/:runId", (c) => {
-		const run = runs.get(c.req.param("runId"));
-		return run ? c.json({
-			ok: true,
-			run,
-			receipt: runs.getReceipt(run.id)
-		}) : c.json({
-			ok: false,
-			error: "TaskRun not found"
-		}, 404);
+	authenticated.get("/api/task-runs/:runId", async (c) => {
+		try {
+			const { run, receipt } = ProductReadContracts["xopc.task_runs.get"].output.parse(await capabilities.call("xopc.task_runs.get", { id: c.req.param("runId") }, capabilityHttpContext(c)));
+			return c.json({
+				ok: true,
+				run,
+				receipt
+			});
+		} catch (error) {
+			return capabilityHttpError(c, error);
+		}
 	});
-	authenticated.get("/api/task-runs/:runId/events", (c) => {
-		const run = runs.get(c.req.param("runId"));
-		return run ? c.json({
-			ok: true,
-			items: runs.listEvents(run.id)
-		}) : c.json({
-			ok: false,
-			error: "TaskRun not found"
-		}, 404);
+	authenticated.get("/api/task-runs/:runId/events", async (c) => {
+		try {
+			const { events } = ProductReadContracts["xopc.task_runs.get"].output.parse(await capabilities.call("xopc.task_runs.get", { id: c.req.param("runId") }, capabilityHttpContext(c)));
+			return c.json({
+				ok: true,
+				items: events
+			});
+		} catch (error) {
+			return capabilityHttpError(c, error);
+		}
 	});
 	authenticated.post("/api/task-runs/:runId/cancel", taskRateLimit, async (c) => {
-		const body = await c.req.json().catch(() => ({}));
-		const run = runs.get(c.req.param("runId"));
-		if (!run) return c.json({
-			ok: false,
-			error: "TaskRun not found"
-		}, 404);
-		if (!Number.isInteger(body.expectedVersion) || body.expectedVersion !== run.version) return c.json({
-			ok: false,
-			error: "TaskRun changed",
-			run
-		}, 409);
-		const task = tasks.require(run.taskId);
-		const result = application.completeRun({
-			runId: run.id,
-			expectedRunVersion: run.version,
-			actor: { kind: "user" },
-			terminalCode: "cancelled_by_user",
-			terminalMessage: typeof body.reason === "string" ? body.reason : "Cancelled by user",
-			receipt: {
-				status: "cancelled",
-				summary: typeof body.reason === "string" ? body.reason : "TaskRun cancelled by user",
-				changes: [],
-				evidence: [],
-				verification: {
-					status: "unverified",
-					checks: []
-				},
-				remainingWork: [task.contract?.objective ?? task.title],
-				needsUser: false,
-				completionVerdict: "not_achieved"
-			}
-		});
-		if (result.ok === false) return c.json({
-			ok: false,
-			error: result.reason
-		}, 409);
-		deps.service.dispatchTaskEvents();
-		return c.json({
-			ok: true,
-			run: runs.get(run.id),
-			receipt: runs.getReceipt(run.id)
-		});
-	});
-	authenticated.post("/api/task-runs/:runId/feedback", taskRateLimit, async (c) => {
-		const body = await c.req.json().catch(() => ({}));
-		if (body.rating !== "helpful" && body.rating !== "not_helpful") return c.json({
-			ok: false,
-			error: "Invalid feedback rating"
-		}, 400);
 		try {
-			const feedback = runs.recordFeedback({
-				runId: c.req.param("runId"),
-				rating: body.rating,
-				reason: typeof body.reason === "string" ? body.reason : void 0
+			const body = await c.req.json().catch(() => {
+				throw new CapabilityError("INVALID_INPUT", "Invalid JSON body");
 			});
+			if (!body || typeof body !== "object" || Array.isArray(body)) throw new CapabilityError("INVALID_INPUT", "Expected an object");
+			const { run, receipt, executionStopConfirmed } = TaskRunCancelOutputSchema.parse(await invokeRelation(c, "xopc.task_runs.cancel", {
+				id: c.req.param("runId"),
+				expectedVersion: body.expectedVersion,
+				reason: body.reason
+			}));
 			return c.json({
 				ok: true,
-				feedback
+				run,
+				receipt,
+				executionStopConfirmed
 			});
-		} catch {
-			return c.json({
-				ok: false,
-				error: "TaskRun not found"
-			}, 404);
+		} catch (error) {
+			return capabilityHttpError(c, error);
+		}
+	});
+	authenticated.post("/api/task-runs/:runId/feedback", taskRateLimit, async (c) => {
+		try {
+			const body = await c.req.json().catch(() => {
+				throw new CapabilityError("INVALID_INPUT", "Invalid JSON body");
+			});
+			if (!body || typeof body !== "object" || Array.isArray(body)) throw new CapabilityError("INVALID_INPUT", "Expected an object");
+			return c.json(TaskRunFeedbackOutputSchema.parse(await invokeRelation(c, "xopc.task_runs.feedback", {
+				...body,
+				id: c.req.param("runId")
+			})));
+		} catch (error) {
+			return capabilityHttpError(c, error);
 		}
 	});
 	authenticated.get("/api/projects/:projectId/operating-view", (c) => {

package/dist/src/gateway/hono/routes/user-model-refresh.js

@@ -1,9 +1,9 @@
 import { listConnectorLearningJobs } from "../../../storage/sqlite/connector-learning-repository.js";
 import { getConnectorAccount } from "../../../storage/sqlite/connector-account-repository.js";
 import "../../../storage/sqlite/index.js";
+import { getWorkDiscoveryRun } from "../../../work-discovery/repository.js";
 import { listUnderstandingSourceRuns } from "../../../user-context/sources/repository.js";
 import { isLocalUnderstandingSourceId } from "../../../user-context/sources/local-source-contract.js";
-import { getWorkDiscoveryRun } from "../../../work-discovery/repository.js";
 import { normalizeUnderstandingSourceItems } from "../../../work-discovery/service.js";
 import { UnderstandingRefreshService } from "../../../user-context/sources/refresh-service.js";
 import { randomUUID } from "node:crypto";

package/dist/src/gateway/hono/routes/user-model.js

@@ -1,17 +1,17 @@
 import { init_transaction, runSqliteWriteTransaction } from "../../../storage/sqlite/transaction.js";
 import { createCollaborationRule, getCollaborationRule, listCollaborationRules, setCollaborationRuleStatus } from "../../../storage/sqlite/collaboration-rule-repository.js";
+import { KnowledgeReviewConflictError, deleteKnowledgeItem, getKnowledgeItem, listKnowledgeItems, reviewKnowledgeItem, searchKnowledgeItems } from "../../../knowledge-memory/repository.js";
+import "../../../knowledge-memory/index.js";
 import { createPriorityWindow, createUserGoal, listPriorityWindows, listUserGoals, setUserGoalStatus, updatePriorityWindow, updateUserGoal } from "../../../user-model/goals.js";
 import { deleteUserAssertion, getAssertionSlot, getUserAssertion, listUserAssertionSources, listUserAssertions, reconcileAssertion, setAssertionStatus } from "../../../user-model/repository.js";
 import { applyUserProfilePatch, getUserProfileSnapshot } from "../../../user-model/profile.js";
 import { bootstrapUserModel } from "../../../user-model/bootstrap.js";
 import { canUseAssertion } from "../../../user-model/usage-policy.js";
 import "../../../user-model/index.js";
-import { KnowledgeReviewConflictError, deleteKnowledgeItem, getKnowledgeItem, listKnowledgeItems, reviewKnowledgeItem, searchKnowledgeItems } from "../../../knowledge-memory/repository.js";
-import "../../../knowledge-memory/index.js";
-import { listUnderstandingSourceGrants } from "../../../user-context/sources/repository.js";
-import { getExecutionContextAudit, recordExecutionContextFeedback } from "../../../agent/context/audit.js";
 import { listMemoryMaintenanceRuns } from "../../../memory-maintenance/service.js";
 import "../../../memory-maintenance/index.js";
+import { getExecutionContextAudit, recordExecutionContextFeedback } from "../../../agent/context/audit.js";
+import { listUnderstandingSourceGrants } from "../../../user-context/sources/repository.js";
 import { userInfo } from "node:os";
 //#region src/gateway/hono/routes/user-model.ts
 init_transaction();