@xopcai/xopc 0.0.313 → 0.0.315

package/dist/src/scenes/taskFollowUp/workspaceFingerprint.d.ts

@@ -0,0 +1,2 @@
+/** Bind verification to tracked and non-ignored files without executing repository code. */
+export declare function workspaceFingerprint(workspace: string): Promise<string>;

package/dist/src/scenes/taskFollowUp/workspaceFingerprint.js

@@ -0,0 +1,46 @@
+import { runGit } from "../../execution-environments/git.js";
+import { resolve } from "node:path";
+import { createHash } from "node:crypto";
+import { lstat, readFile, readlink } from "node:fs/promises";
+//#region src/scenes/taskFollowUp/workspaceFingerprint.ts
+/** Bind verification to tracked and non-ignored files without executing repository code. */
+async function workspaceFingerprint(workspace) {
+	const hash = createHash("sha256");
+	hash.update(await runGit(workspace, ["rev-parse", "HEAD"]));
+	hash.update(await runGit(workspace, [
+		"symbolic-ref",
+		"--quiet",
+		"HEAD"
+	]));
+	const paths = [...new Set((await runGit(workspace, [
+		"ls-files",
+		"-z",
+		"--cached",
+		"--others",
+		"--exclude-standard"
+	])).split("\0").filter(Boolean))].sort();
+	if (paths.length > 2e4) throw new Error("Workspace verification file budget exceeded");
+	let bytes = 0;
+	for (const path of paths) {
+		const file = resolve(workspace, path);
+		hash.update(JSON.stringify(path));
+		const stat = await lstat(file).catch((error) => {
+			if (error.code === "ENOENT") return void 0;
+			throw error;
+		});
+		if (!stat) {
+			hash.update("deleted");
+			continue;
+		}
+		hash.update(String(stat.mode));
+		if (stat.isSymbolicLink()) hash.update(await readlink(file));
+		else if (stat.isFile()) {
+			bytes += stat.size;
+			if (bytes > 256 * 1024 * 1024) throw new Error("Workspace verification size budget exceeded");
+			hash.update(await readFile(file));
+		} else throw new Error("Submodules and special files require a separate verification workspace");
+	}
+	return hash.digest("hex");
+}
+//#endregion
+export { workspaceFingerprint };

package/dist/src/scenes/templates.d.ts

@@ -27,7 +27,7 @@ export declare const mailFollowUpTemplate: {
             maxOutputTokens: number;
         };
     };
-    allowedOutcomeKinds: ("artifact" | "receipt" | "decision" | "observation" | "no_change" | "state_change" | "effect_proposal")[];
+    allowedOutcomeKinds: ("artifact" | "receipt" | "decision" | "no_change" | "observation" | "state_change" | "effect_proposal")[];
     allowedEffectHandlers: string[];
 };
 export declare const familyPlanTemplate: {
@@ -59,6 +59,6 @@ export declare const familyPlanTemplate: {
             maxOutputTokens: number;
         };
     };
-    allowedOutcomeKinds: ("artifact" | "receipt" | "decision" | "observation" | "no_change" | "state_change" | "effect_proposal")[];
+    allowedOutcomeKinds: ("artifact" | "receipt" | "decision" | "no_change" | "observation" | "state_change" | "effect_proposal")[];
     allowedEffectHandlers: string[];
 };

package/dist/src/scenes/templates.js

@@ -1,4 +1,4 @@
-import { sceneTemplateSchema } from "./contracts.js";
+import { sceneTemplateSchema } from "../../packages/gateway-contract/src/scenes.js";
 //#region src/scenes/templates.ts
 const mailFollowUpTemplate = sceneTemplateSchema.parse({
 	schemaVersion: 1,

package/dist/src/session/client-history.d.ts

@@ -15,7 +15,7 @@ export interface ClientHistoryMessage {
     /** Whitelisted display metadata; never includes source snapshot text. */
     metadata?: {
         sourceContexts?: Array<{
-            kind: 'note' | 'task' | 'browser_page';
+            kind: 'note' | 'task' | 'file' | 'session' | 'browser_tab' | 'browser_page' | 'mcp_resource';
             sourceId: string;
             version: string;
             title: string;
@@ -24,6 +24,7 @@ export interface ClientHistoryMessage {
             url?: string;
             capturedAt?: number;
             documentId?: string;
+            fileKind?: 'file' | 'directory';
         }>;
         turnOutcome?: TurnOutcome;
     };

package/dist/src/session/client-history.js

@@ -11,7 +11,7 @@ function sourceContextDisplayMetadata(metadata) {
 	const sourceContexts = rows.flatMap((value) => {
 		if (!value || typeof value !== "object" || Array.isArray(value)) return [];
 		const row = value;
-		if (row.kind !== "note" && row.kind !== "task" && row.kind !== "browser_page" || typeof row.sourceId !== "string" || typeof row.version !== "string" || typeof row.title !== "string") return [];
+		if (row.kind !== "note" && row.kind !== "task" && row.kind !== "file" && row.kind !== "session" && row.kind !== "browser_tab" && row.kind !== "browser_page" && row.kind !== "mcp_resource" || typeof row.sourceId !== "string" || typeof row.version !== "string" || typeof row.title !== "string") return [];
 		return [{
 			kind: row.kind,
 			sourceId: row.sourceId,
@@ -21,7 +21,8 @@ function sourceContextDisplayMetadata(metadata) {
 			...row.truncated === true ? { truncated: true } : {},
 			...typeof row.url === "string" ? { url: row.url } : {},
 			...typeof row.capturedAt === "number" ? { capturedAt: row.capturedAt } : {},
-			...typeof row.documentId === "string" ? { documentId: row.documentId } : {}
+			...typeof row.documentId === "string" ? { documentId: row.documentId } : {},
+			...row.kind === "file" && (row.fileKind === "file" || row.fileKind === "directory") ? { fileKind: row.fileKind } : {}
 		}];
 	});
 	return sourceContexts.length ? { sourceContexts } : void 0;

package/dist/src/session/index.js

@@ -1,12 +1,12 @@
 import { buildSessionContextForLlm, init_session_context_for_llm, isTranscriptContextEntry, mergeLlmMessagesPreservingContextRows, transcriptRowsFromJsonArray } from "./session-context-for-llm.js";
 import { SessionStatus, init_types } from "./types.js";
 import { effectiveWorkspacePathForSession, normalizeWorkingDirectoryInput, projectWorkspacePath } from "./session-workspace.js";
-import { fallbackTitleFromMessages, generateSessionTitleFromMessages, getSessionTitleSource, isWebchatConversationId, maybeRefineSessionTitleWithLlm, maybeSetProvisionalSessionTitle, provisionalTitleFromUserText, sanitizeGeneratedSessionTitle, sanitizeSessionTitle, shouldAutoTitleConversationId, shouldRefineSessionTitleWithLlm } from "./session-title.js";
 import { flattenMessageContent, messagesToClientHistory } from "./client-history.js";
+import { emitSessionTranscriptUpdate, onSessionTranscriptUpdate } from "./transcript-events.js";
+import { fallbackTitleFromMessages, generateSessionTitleFromMessages, getSessionTitleSource, isWebchatConversationId, maybeRefineSessionTitleWithLlm, maybeSetProvisionalSessionTitle, provisionalTitleFromUserText, sanitizeGeneratedSessionTitle, sanitizeSessionTitle, shouldAutoTitleConversationId, shouldRefineSessionTitleWithLlm } from "./session-title.js";
 import { SessionStore } from "./store.js";
 import { applySessionPatchToMetadata } from "./patch-metadata.js";
 import { SessionIndex } from "./manager.js";
-import { emitSessionTranscriptUpdate, onSessionTranscriptUpdate } from "./transcript-events.js";
 import { SessionConfigStore, resolveReasoningLevel, resolveThinkingLevel, resolveVerboseLevel } from "./config-store.js";
 import { DEFAULT_ACTIVITY_DETAIL_LEVEL, resolveConfiguredActivityDetailDefault, resolveEffectiveReasoningLevel, resolveEffectiveThinkingLevel } from "./thinking-resolve.js";
 import { DEFAULT_IDLE_MINUTES, DEFAULT_RESET_AT_HOUR, DEFAULT_RESET_MODE, evaluateSessionFreshness, resolveDailyResetAtMs, resolveSessionResetPolicy } from "./reset-policy.js";

package/dist/src/session/session-find.d.ts

@@ -0,0 +1,17 @@
+type FindableMessage = {
+    role: string;
+    content: string | unknown[];
+    displayIndex?: number;
+};
+export type SessionFindMatch = {
+    displayIndex: number;
+    occurrence: number;
+};
+export type SessionFindResult = {
+    query: string;
+    total: number;
+    truncated: boolean;
+    matches: SessionFindMatch[];
+};
+export declare function findSessionMessages(messages: readonly FindableMessage[], rawQuery: string, limit?: number): SessionFindResult;
+export {};

package/dist/src/session/session-find.js

@@ -0,0 +1,56 @@
+import { markdownToIR } from "../markdown/ir.js";
+//#region src/session/session-find.ts
+function searchableMessageText(message) {
+	if (message.role !== "user" && message.role !== "assistant") return "";
+	if (typeof message.content === "string") return markdownToIR(message.content, { tableMode: "bullets" }).text;
+	return message.content.flatMap((block) => {
+		if (!block || typeof block !== "object") return [];
+		const value = block;
+		return value.type === "text" && value.presentation !== "pending" && value.presentation !== "narration" && typeof value.text === "string" ? [markdownToIR(value.text, { tableMode: "bullets" }).text] : [];
+	}).join("\n");
+}
+function countLiteralMatches(text, query) {
+	const haystack = text.toLowerCase();
+	const needle = query.toLowerCase();
+	let count = 0;
+	let from = 0;
+	while (from <= haystack.length - needle.length) {
+		const index = haystack.indexOf(needle, from);
+		if (index < 0) break;
+		count += 1;
+		from = index + needle.length;
+	}
+	return count;
+}
+function findSessionMessages(messages, rawQuery, limit = 1e3) {
+	const query = rawQuery.trim();
+	const cappedLimit = Math.min(1e3, Math.max(1, Math.trunc(limit)));
+	if (!query) return {
+		query,
+		total: 0,
+		truncated: false,
+		matches: []
+	};
+	const matches = [];
+	const occurrencesByDisplayIndex = /* @__PURE__ */ new Map();
+	let total = 0;
+	messages.forEach((message, messageIndex) => {
+		const displayIndex = Number.isInteger(message.displayIndex) && message.displayIndex >= 0 ? message.displayIndex : messageIndex;
+		const count = countLiteralMatches(searchableMessageText(message), query);
+		const occurrenceOffset = occurrencesByDisplayIndex.get(displayIndex) ?? 0;
+		total += count;
+		for (let occurrence = 0; occurrence < count && matches.length < cappedLimit; occurrence += 1) matches.push({
+			displayIndex,
+			occurrence: occurrenceOffset + occurrence
+		});
+		occurrencesByDisplayIndex.set(displayIndex, occurrenceOffset + count);
+	});
+	return {
+		query,
+		total,
+		truncated: total > matches.length,
+		matches
+	};
+}
+//#endregion
+export { findSessionMessages };

package/dist/src/session/session-title.js

@@ -5,8 +5,8 @@ import { isCronConversationId } from "../routing/agent-session-key.js";
 import { init_session_key } from "../routing/session-key.js";
 import { init_providers, resolveModel } from "../providers/index.js";
 import { completeWithResolvedCredentials } from "../providers/model-call.js";
-import { stripRuntimeContextFromUserMessage } from "./user-message-display.js";
 import { readAgentMessageContent } from "../agent/memory/agent-message-access.js";
+import { stripRuntimeContextFromUserMessage } from "./user-message-display.js";
 //#region src/session/session-title.ts
 init_session_key();
 init_providers();

package/dist/src/session/store.d.ts

@@ -10,6 +10,7 @@ import type { SessionMetadata, SessionDetail, SessionListQuery, PaginatedResult,
 import { SessionStatus } from './types.js';
 import type { Message } from './types.js';
 import type { SessionTranscriptUpdate } from './transcript-events.js';
+import { type SessionFindResult } from './session-find.js';
 export interface SessionStoreOptions {
     config: Config;
 }
@@ -43,6 +44,8 @@ export declare class SessionStore {
     private compactor;
     private compactionHooks;
     private readonly compactionTails;
+    private compactionCheckpoint;
+    private clearCompactionCheckpoint;
     constructor(options: SessionStoreOptions, windowConfig?: Partial<WindowConfig>, compactionConfig?: Partial<CompactionConfig>);
     /** Refresh policy for subsequent compactions without changing an in-flight request. */
     updateConfig(config: Config): void;
@@ -176,6 +179,7 @@ export declare class SessionStore {
     }): Promise<AgentMessage[]>;
     estimateTokenUsage(_key: string, messages: AgentMessage[]): Promise<number>;
     searchInSession(key: string, keyword: string): Promise<Message[]>;
+    findInSession(key: string, query: string, limit?: number): Promise<SessionFindResult | null>;
     recallSession(key: string, query: string, options?: {
         limit?: number;
         beforeSeq?: number;

package/dist/src/session/store.js

@@ -13,16 +13,18 @@ import { getSessionConfig, setSessionConfig } from "../storage/sqlite/config-rep
 import "../storage/sqlite/index.js";
 import { init_agent_session_key, resolveAgentIdFromConversationId } from "../routing/agent-session-key.js";
 import { resolveEffectiveAgentProfile } from "../config/agent-profile.js";
-import { readPostCompactionContext } from "../agent/reply/post-compaction-context.js";
+import { DurableState } from "../storage/sqlite/durable-state.js";
+import { transcriptRowsToClientHistory } from "./client-history.js";
 import { SessionCompactor } from "../agent/memory/compaction.js";
 import { resolveCompactionPolicy } from "../agent/memory/compaction-policy.js";
-import { promoteCompactionLedger } from "../agent/memory/compaction-promotion.js";
 import { resolveUserContextSessionAccess } from "../user-context/access-policy.js";
+import { readPostCompactionContext } from "../agent/reply/post-compaction-context.js";
+import { promoteCompactionLedger } from "../agent/memory/compaction-promotion.js";
 import { SlidingWindow } from "../agent/memory/window.js";
 import { isAppendOnlyLlmTranscriptMessage } from "./transcript-stats.js";
-import { transcriptRowsToClientHistory } from "./client-history.js";
 import { backfillStructuredTurnOutcomes } from "./turn-outcome-projector.js";
 import { computeTranscriptUserRoundDeleteRange } from "./user-round-delete.js";
+import { findSessionMessages } from "./session-find.js";
 //#region src/session/store.ts
 init_paths_state();
 init_agent_session_key();
@@ -45,6 +47,27 @@ var SessionStore = class {
 	compactor;
 	compactionHooks = {};
 	compactionTails = /* @__PURE__ */ new Map();
+	compactionCheckpoint(key) {
+		const state = new DurableState("session-compaction-progress", key);
+		return {
+			load: () => state.get("active"),
+			save: (checkpoint) => state.set("active", checkpoint),
+			clear: () => {
+				state.delete("active");
+			}
+		};
+	}
+	clearCompactionCheckpoint(key, checkpoint = this.compactionCheckpoint(key)) {
+		try {
+			checkpoint.clear();
+		} catch (err) {
+			log.warn({
+				err,
+				conversationId: key,
+				phase: "checkpoint_clear"
+			}, "Compaction checkpoint cleanup failed");
+		}
+	}
 	constructor(options, windowConfig, compactionConfig) {
 		this.options = options;
 		this.window = new SlidingWindow(windowConfig);
@@ -276,10 +299,13 @@ var SessionStore = class {
 		return this.runStoreMutation(async () => {
 			requireXopcDatabase();
 			const task = resetSessionRecord(key, this.resolveWorkspaceCwd(key));
-			if (task) log.info({
-				key,
-				...task
-			}, "Session reset");
+			if (task) {
+				this.clearCompactionCheckpoint(key);
+				log.info({
+					key,
+					...task
+				}, "Session reset");
+			}
 			return task;
 		});
 	}
@@ -287,7 +313,10 @@ var SessionStore = class {
 		return this.runStoreMutation(async () => {
 			requireXopcDatabase();
 			const ok = deleteSessionRecord(key);
-			if (ok) log.info({ key }, "Session deleted");
+			if (ok) {
+				this.clearCompactionCheckpoint(key);
+				log.info({ key }, "Session deleted");
+			}
 			return ok;
 		});
 	}
@@ -538,20 +567,23 @@ var SessionStore = class {
 				messageCount: messages.length,
 				tokenCount
 			});
+			const checkpoint = executionOptions?.checkpoint ?? this.compactionCheckpoint(key);
 			const result = await this.compactor.compact(snapshot.entries, model, instructions, force, {
 				...executionOptions,
-				conversationId: key
+				conversationId: key,
+				checkpoint
 			});
 			executionOptions?.signal?.throwIfAborted();
 			if (result.compacted) {
 				const compacted = await this.applyCompaction(key, result, snapshot);
+				this.clearCompactionCheckpoint(key, checkpoint);
 				await this.runCompactionHook("after", {
 					conversationId: key,
 					messageCount: compacted.length,
 					tokenCount: result.tokensAfter,
 					compactedCount: Math.max(0, Math.min(messages.length, result.firstKeptIndex))
 				});
-			}
+			} else this.clearCompactionCheckpoint(key, checkpoint);
 			return result;
 		});
 	}
@@ -593,6 +625,10 @@ var SessionStore = class {
 		const q = keyword.toLowerCase();
 		return this.convertMessages(messages.filter((m) => this.extractTextContent(this.messageContent(m)).toLowerCase().includes(q)));
 	}
+	async findInSession(key, query, limit) {
+		if (!await this.getMetadata(key)) return null;
+		return findSessionMessages(transcriptRowsToClientHistory(await this.loadTranscriptRows(key)), query, limit);
+	}
 	recallSession(key, query, options) {
 		requireXopcDatabase();
 		return searchSessionTranscript(key, query, options);

package/dist/src/session/thinking-resolve.js

@@ -1,5 +1,5 @@
-import { normalizeThinkLevel } from "../agent/transcript/thinking-types.js";
 import { resolveReasoningLevel, resolveThinkingLevel } from "./config-store.js";
+import { normalizeThinkLevel } from "../agent/transcript/thinking-types.js";
 //#region src/session/thinking-resolve.ts
 const FALLBACK = "medium";
 /**

package/dist/src/share/note-share-revocation.d.ts

@@ -0,0 +1,3 @@
+/** SQLite-only revocation for compound note deletion transactions. */
+export declare function revokeNoteShareRecords(noteId: string): string[];
+export declare function canRemoveRevokedNoteShareArtifact(id: string): boolean;

package/dist/src/share/note-share-revocation.js

@@ -0,0 +1,26 @@
+import { init_transaction, runSqliteWriteTransaction } from "../storage/sqlite/transaction.js";
+import { DurableState } from "../storage/sqlite/durable-state.js";
+//#region src/share/note-share-revocation.ts
+init_transaction();
+/** SQLite-only revocation for compound note deletion transactions. */
+function revokeNoteShareRecords(noteId) {
+	return runSqliteWriteTransaction(() => {
+		const shares = new DurableState("shares");
+		const revoked = [];
+		for (const record of shares.values()) {
+			if (record.kind !== "note" || record.sourceNoteId !== noteId || record.revoked) continue;
+			shares.set(record.id, {
+				...record,
+				revoked: true
+			});
+			revoked.push(record.id);
+		}
+		return revoked;
+	});
+}
+function canRemoveRevokedNoteShareArtifact(id) {
+	const record = new DurableState("shares").get(id);
+	return !record || record.kind === "note" && record.revoked;
+}
+//#endregion
+export { canRemoveRevokedNoteShareArtifact, revokeNoteShareRecords };

package/dist/src/share/share-store.js

@@ -5,8 +5,8 @@ import { init_connection, requireXopcDatabase } from "../storage/sqlite/connecti
 import { init_transaction, runSqliteWriteTransaction } from "../storage/sqlite/transaction.js";
 import { init_paths } from "../config/paths.js";
 import { DurableState } from "../storage/sqlite/durable-state.js";
-import { isPathUnderWorkspace } from "../gateway/workspace-editor-path.js";
 import { SHARE_CONFIG_DEFAULTS } from "./share-types.js";
+import { isPathUnderWorkspace } from "../gateway/workspace-editor-path.js";
 import { logShareAudit } from "./share-audit.js";
 import { join, relative, resolve } from "node:path";
 import { randomBytes, randomUUID } from "node:crypto";

package/dist/src/share/share-thumbnail.js

@@ -2,9 +2,9 @@ import { resolveStateDir } from "../config/paths-state.js";
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
 import { init_paths } from "../config/paths.js";
-import { loadPlaywrightCoreModule } from "../browser/providers/playwright-doctor.js";
 import { getShareStore } from "./share-store.js";
 import { getSiteShareStore } from "./site-share-store.js";
+import { loadPlaywrightCoreModule } from "../browser/providers/playwright-doctor.js";
 import { join } from "node:path";
 import { mkdir, readFile, stat, unlink, writeFile } from "node:fs/promises";
 //#region src/share/share-thumbnail.ts

package/dist/src/share/site-proxy.js

@@ -1,8 +1,8 @@
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
-import * as ws from "ws";
 import { request } from "undici";
 import { Readable } from "node:stream";
+import * as ws from "ws";
 //#region src/share/site-proxy.ts
 init_logger();
 const wsAny = ws;

package/dist/src/share/site-share-store.js

@@ -3,8 +3,8 @@ import { init_logger } from "../utils/logger.js";
 import { init_connection, requireXopcDatabase } from "../storage/sqlite/connection.js";
 import { init_transaction, runSqliteWriteTransaction } from "../storage/sqlite/transaction.js";
 import { DurableState } from "../storage/sqlite/durable-state.js";
-import { isPathUnderWorkspace } from "../gateway/workspace-editor-path.js";
 import { SITE_SHARE_CONFIG_DEFAULTS } from "./site-share-types.js";
+import { isPathUnderWorkspace } from "../gateway/workspace-editor-path.js";
 import { relative, resolve } from "node:path";
 import { randomBytes, randomUUID } from "node:crypto";
 import { lstat, readdir, realpath, stat } from "node:fs/promises";

package/dist/src/storage/sqlite/connection.js

@@ -7,7 +7,7 @@ import { init_node_sqlite, requireNodeSqlite } from "../../infra/node-sqlite.js"
 import { ensureXopcDatabaseSchema, init_schema } from "./schema.js";
 import { init_unhandled_rejections, installSqliteTransientRejectionHandler } from "../../infra/unhandled-rejections.js";
 import path from "node:path";
-import fsSync from "node:fs";
+import fs from "node:fs";
 import childProcess from "node:child_process";
 //#region src/storage/sqlite/connection.ts
 function normalizeNonNegativeInteger(value, label) {
@@ -17,7 +17,7 @@ function normalizeNonNegativeInteger(value, label) {
 function findExistingVolumePath(targetPath) {
 	let current = path.resolve(targetPath);
 	while (true) try {
-		return fsSync.statSync(current).isDirectory() ? current : path.dirname(current);
+		return fs.statSync(current).isDirectory() ? current : path.dirname(current);
 	} catch {
 		const parent = path.dirname(current);
 		if (parent === current) return null;
@@ -64,7 +64,7 @@ function parseMountCommandEntries(contents) {
 }
 function readMountEntries() {
 	try {
-		return parseProcMountInfoEntries(fsSync.readFileSync(PROC_MOUNTINFO_PATH, "utf8"));
+		return parseProcMountInfoEntries(fs.readFileSync(PROC_MOUNTINFO_PATH, "utf8"));
 	} catch {}
 	try {
 		return parseMountCommandEntries(String(childProcess.execFileSync("mount", [])));
@@ -91,7 +91,7 @@ function isNetworkMountEntryPath(targetPath) {
 	return mountEntry ? isNetworkMountType(mountEntry.fsType) : false;
 }
 function isNetworkBackedPath(targetPath) {
-	if (typeof fsSync.statfsSync !== "function") return isNetworkMountEntryPath(targetPath);
+	if (typeof fs.statfsSync !== "function") return isNetworkMountEntryPath(targetPath);
 	const checkedPath = findExistingVolumePath(targetPath);
 	if (!checkedPath) return false;
 	try {
@@ -100,7 +100,7 @@ function isNetworkBackedPath(targetPath) {
 			4283649346,
 			4266872130,
 			20859
-		].includes(fsSync.statfsSync(checkedPath).type >>> 0)) return true;
+		].includes(fs.statfsSync(checkedPath).type >>> 0)) return true;
 	} catch {
 		return isNetworkMountEntryPath(checkedPath);
 	}
@@ -144,13 +144,13 @@ function configureSqliteConnectionPragmas(db, options = {}) {
 function ensureDatabasePermissions(pathname) {
 	const dir = pathname.slice(0, Math.max(pathname.lastIndexOf("/"), pathname.lastIndexOf("\\")));
 	if (dir) {
-		fsSync.mkdirSync(dir, { recursive: true });
-		fsSync.chmodSync(dir, DB_DIR_MODE);
+		fs.mkdirSync(dir, { recursive: true });
+		fs.chmodSync(dir, DB_DIR_MODE);
 	}
 	for (const suffix of DB_SIDECAR_SUFFIXES) {
 		const candidate = `${pathname}${suffix}`;
-		if (!fsSync.existsSync(candidate)) continue;
-		fsSync.chmodSync(candidate, DB_FILE_MODE);
+		if (!fs.existsSync(candidate)) continue;
+		fs.chmodSync(candidate, DB_FILE_MODE);
 	}
 }
 function openDatabaseAtPath(pathname) {

package/dist/src/storage/sqlite/endpoint-tool-invocation-repository.d.ts

@@ -22,4 +22,18 @@ export declare function finishEndpointToolInvocationAudit(params: {
     errorMessage?: string;
     completedAt?: number;
 }): void;
-export declare function listEndpointToolInvocationAudits(limit?: number): EndpointToolInvocationAudit[];
+export interface EndpointToolInvocationAuditPage {
+    items: EndpointToolInvocationAudit[];
+    page: number;
+    pageSize: number;
+    total: number;
+    totalPages: number;
+}
+export declare function listEndpointToolInvocationAuditPage(options?: {
+    page?: number;
+    pageSize?: number;
+    query?: string;
+    principalId?: string;
+    status?: EndpointToolInvocationAudit['status'];
+    effect?: EndpointEffect;
+}): EndpointToolInvocationAuditPage;

package/dist/src/storage/sqlite/endpoint-tool-invocation-repository.js

@@ -33,11 +33,44 @@ function finishEndpointToolInvocationAudit(params) {
     WHERE id = ? AND status = 'running'
   `).run(params.status, params.errorCode ?? null, params.errorMessage?.slice(0, 2e3) ?? null, params.completedAt ?? Date.now(), params.id);
 }
-function listEndpointToolInvocationAudits(limit = 100) {
-	const boundedLimit = Math.max(1, Math.min(500, Math.trunc(limit)));
-	return getSqliteDatabase().prepare(`
-    SELECT * FROM endpoint_tool_invocations ORDER BY started_at DESC LIMIT ?
-  `).all(boundedLimit).map(fromRow);
+function listEndpointToolInvocationAuditPage(options = {}) {
+	const page = Math.max(1, Math.trunc(options.page ?? 1));
+	const pageSize = Math.max(1, Math.min(100, Math.trunc(options.pageSize ?? 20)));
+	const clauses = [];
+	const values = [];
+	const query = options.query?.trim();
+	if (query) {
+		const pattern = `%${query.replace(/[\\%_]/g, "\\$&")}%`;
+		clauses.push("(tool_name LIKE ? ESCAPE '\\' OR endpoint_id LIKE ? ESCAPE '\\' OR error_message LIKE ? ESCAPE '\\')");
+		values.push(pattern, pattern, pattern);
+	}
+	if (options.principalId) {
+		clauses.push("principal_id = ?");
+		values.push(options.principalId);
+	}
+	if (options.status) {
+		clauses.push("status = ?");
+		values.push(options.status);
+	}
+	if (options.effect) {
+		clauses.push("effect = ?");
+		values.push(options.effect);
+	}
+	const where = clauses.length > 0 ? `WHERE ${clauses.join(" AND ")}` : "";
+	const db = getSqliteDatabase();
+	const total = db.prepare(`SELECT COUNT(*) AS count FROM endpoint_tool_invocations ${where}`).get(...values).count;
+	return {
+		items: db.prepare(`
+    SELECT * FROM endpoint_tool_invocations
+    ${where}
+    ORDER BY started_at DESC, id DESC
+    LIMIT ? OFFSET ?
+  `).all(...values, pageSize, (page - 1) * pageSize).map(fromRow),
+		page,
+		pageSize,
+		total,
+		totalPages: Math.max(1, Math.ceil(total / pageSize))
+	};
 }
 //#endregion
-export { finishEndpointToolInvocationAudit, listEndpointToolInvocationAudits, startEndpointToolInvocationAudit };
+export { finishEndpointToolInvocationAudit, listEndpointToolInvocationAuditPage, startEndpointToolInvocationAudit };

package/dist/src/storage/sqlite/index.d.ts

@@ -22,7 +22,7 @@ export { acknowledgeHomeAttention, isHomeAttentionAcknowledged, type HomeAttenti
 export { claimNextConnectorLearningJob, enqueueConnectorLearningJob, listConnectorLearningJobs, recoverStaleConnectorLearningJobs, setConnectorLearningPaused, updateConnectorLearningJob, type ConnectorLearningJob, type ConnectorLearningMode, type ConnectorLearningPhase, type ConnectorLearningStatus, } from './connector-learning-repository.js';
 export { appendComposerInputHistory, clearComposerInputHistory, listComposerInputHistory, COMPOSER_INPUT_HISTORY_LIMIT, type ComposerInputHistoryItem, } from './composer-input-history-repository.js';
 export { bindEndpointPrincipal, createEndpointPrincipal, getEndpointPrincipal, listEndpointPrincipals, revokeEndpointPrincipal, touchEndpointPrincipal, type EndpointPrincipal, } from './endpoint-principal-repository.js';
-export { finishEndpointToolInvocationAudit, listEndpointToolInvocationAudits, startEndpointToolInvocationAudit, type EndpointToolInvocationAudit, } from './endpoint-tool-invocation-repository.js';
+export { finishEndpointToolInvocationAudit, listEndpointToolInvocationAuditPage, startEndpointToolInvocationAudit, type EndpointToolInvocationAudit, type EndpointToolInvocationAuditPage, } from './endpoint-tool-invocation-repository.js';
 export { getInteractionState, setInteractionState, updateInteractionStateFromMessage, type InteractionState, } from './interaction-state-repository.js';
 export { getSessionTaskPlan, setSessionTaskPlan, type SessionTaskPlan, type SessionTaskPlanItem, type SessionTaskPlanItemStatus, } from './session-task-plan-repository.js';
 export { buildRelationshipPrompt, getRelationshipSettings, isProactiveSupportAllowed, updateRelationshipSettings, type RelationshipSettings, type SupportMode, } from './relationship-settings-repository.js';

package/dist/src/storage/sqlite/index.js

@@ -26,7 +26,7 @@ import { acknowledgeHomeAttention, isHomeAttentionAcknowledged } from "./home-at
 import { claimNextConnectorLearningJob, enqueueConnectorLearningJob, listConnectorLearningJobs, recoverStaleConnectorLearningJobs, setConnectorLearningPaused, updateConnectorLearningJob } from "./connector-learning-repository.js";
 import { COMPOSER_INPUT_HISTORY_LIMIT, appendComposerInputHistory, clearComposerInputHistory, listComposerInputHistory } from "./composer-input-history-repository.js";
 import { bindEndpointPrincipal, createEndpointPrincipal, getEndpointPrincipal, listEndpointPrincipals, revokeEndpointPrincipal, touchEndpointPrincipal } from "./endpoint-principal-repository.js";
-import { finishEndpointToolInvocationAudit, listEndpointToolInvocationAudits, startEndpointToolInvocationAudit } from "./endpoint-tool-invocation-repository.js";
+import { finishEndpointToolInvocationAudit, listEndpointToolInvocationAuditPage, startEndpointToolInvocationAudit } from "./endpoint-tool-invocation-repository.js";
 import { getInteractionState, setInteractionState, updateInteractionStateFromMessage } from "./interaction-state-repository.js";
 import { getConnectorAccount, init_connector_account_repository, listConnectorAccounts, reconcileConnectorAccount, refreshConnectorAccountCurrent } from "./connector-account-repository.js";
 import { appendConnectorExecutionAudit, claimConnectorWebhookDelivery, completeConnectorWebhookDelivery, consumeConnectorApproval, createConnectorApproval, decideConnectorApproval, deleteConnectorConnection, deleteConnectorInstallation, getCachedConnectorCatalogEntry, getConnectorApproval, getConnectorConnection, getConnectorInstallation, init_connector_repository, listCachedConnectorCatalogEntries, listConnectorActionMetadata, listConnectorApprovals, listConnectorConnections, listConnectorExecutionAudit, listConnectorInstallations, releaseConnectorWebhookDelivery, replaceConnectorCatalogEntries, upsertConnectorActionMetadata, upsertConnectorCatalogEntry, upsertConnectorConnection, upsertConnectorInstallation } from "./connector-repository.js";
@@ -58,4 +58,4 @@ init_session_repository();
 init_connector_repository();
 init_connector_account_repository();
 //#endregion
-export { COMPOSER_INPUT_HISTORY_LIMIT, DatabaseSchemaMigrationGapError, DatabaseSchemaTooNewError, DatabaseSchemaTooOldError, SCHEMA_META_SCHEMA_VERSION_KEY, SidebarLayoutConflictError, XOPC_DB_BASELINE_SCHEMA_VERSION, XOPC_DB_FILENAME, XOPC_DB_SCHEMA_VERSION, acknowledgeHomeAttention, appendCompactionBoundaryIfUnchanged, appendComposerInputHistory, appendConnectorExecutionAudit, appendMediaToAssistantTranscriptEntry, appendTranscriptEntry, applyPendingMigrations, authenticateDeviceAccessToken, bindEndpointPrincipal, buildDefaultSessionMetadata, buildGlobalSessionStats, buildRefreshProofMessage, buildRelationshipPrompt, cancelQueuedSessionInput, claimConnectorWebhookDelivery, claimContextExtractionRun, claimKnowledgeSourceItems, claimNextConnectorLearningJob, claimNextSessionInput, classifyStoredRow, clearComposerInputHistory, clearGatewayIdentityForTest, closeTemporalAssertions, closeXopcDatabase, completeConnectorWebhookDelivery, completeKnowledgeSourceItemSynthesis, consumeClarificationApproval, consumeClarificationResume, consumeConnectorApproval, countKnowledgeSourceItems, createClarificationWait, createCollaborationRule, createConnectorApproval, createContextEvidence, createDevice, createDevicePairingSetup, createEndpointPrincipal, createObjectLinkRecord, createTemporalAssertion, decideConnectorApproval, deleteBrowserTabBinding, deleteBrowserTabBindingsByEndpoint, deleteBrowserTabBindingsByPrincipal, deleteConnectorConnection, deleteConnectorInstallation, deleteEndpointSessionBinding, deleteEndpointSessionBindingsByPrincipal, deleteKnowledgeSourceItems, deleteNoteAgentContextRecord, deleteNoteRecord, deleteObjectLinkRecord, deleteSessionConfig, deleteSessionRecord, discoverSqlMigrations, enqueueConnectorLearningJob, ensureSessionRecord, ensureXopcDatabaseSchema, estimateTokensFromMessages, extractFtsContent, findConversationIdByTranscriptId, findLatestAssistantTranscriptEntryId, findSessionInput, finishContextExtractionRun, finishEndpointToolInvocationAudit, finishKnowledgeSyncRun, finishSessionInputRun, getActiveClarification, getActivityEventRecord, getBrowserTabBinding, getBrowserTabBindingById, getCachedConnectorCatalogEntry, getClarification, getClarificationResumeInput, getClarificationSnapshot, getCollaborationRule, getConnectorAccount, getConnectorApproval, getConnectorConnection, getConnectorInstallation, getConnectorSyncPolicy, getConnectorSyncPolicyForConnection, getContextExtractionRun, getCurrentTranscriptId, getDevice, getEndpointPrincipal, getEndpointSessionBinding, getGlobalSessionStats, getInteractionState, getKnowledgeConsumerWatermark, getKnowledgeSourceCursor, getKnowledgeSourceItem, getNoteAgentContextRecord, getNoteRecord, getOrCreateGatewayIdentity, getRelationshipSettings, getSessionConfig, getSessionInputById, getSessionInputState, getSessionMetadata, getSessionPersistedLevels, getSessionTaskPlan, getSidebarLayout, getSqliteDatabase, getUserPeopleIndexState, getUserPerson, getUserTrustPolicy, getXopcDatabase, hasIndependentExtractionOutput, hasSessionConfig, incrementSessionStatsOnAppend, insertSessionInput, inspectSchemaMigrationStatus, isClarificationSuspended, isDevicePairingSetupActive, isHomeAttentionAcknowledged, isProactiveSupportAllowed, isXopcDatabaseOpen, issueDeviceTokenPair, linkContextObjects, listActiveSessionInputRuns, listActivityRecords, listCachedConnectorCatalogEntries, listCollaborationRules, listCompactionBoundaries, listComposerInputHistory, listConnectorAccounts, listConnectorActionMetadata, listConnectorApprovals, listConnectorConnections, listConnectorExecutionAudit, listConnectorInstallations, listConnectorLearningJobs, listConnectorSyncPolicies, listContextExtractionOutputs, listContextExtractionRuns, listContextObjectRelations, listDevices, listEndpointPrincipals, listEndpointToolInvocationAudits, listKnowledgeSourceChanges, listKnowledgeSourceItems, listKnowledgeSyncRuns, listNoteRecords, listObjectActivityRecords, listObjectLinkRecords, listProjectActivityRecords, listRegisteredMigrationTargets, listSessionMetadata, listSessionsByAgent, listTemporalAssertions, listUserPeople, loadCompactionSourceSnapshot, loadLlmMessagesForSession, loadTranscriptHistoryRowsForSession, loadTranscriptRows, loadTranscriptRowsForSession, mergeUserPeople, metadataToSessionInsert, mutateQueuedSessionInput, openXopcDatabase, paginateTranscriptMessages, patchSessionMetadata, pruneBoundedKnowledgeSourceItems, readSchemaVersion, readSchemaVersionForTest, reconcileConnectorAccount, recordActivityEvent, recoverSessionInputState, recoverStaleConnectorLearningJobs, refreshConnectorAccountCurrent, releaseConnectorWebhookDelivery, replaceConnectorCatalogEntries, replaceLatestSessionTurnAndQueueInput, replaceSidebarLayout, replaceTranscriptRows, replaceUserPeopleIndex, requireXopcDatabase, resetSessionRecord, resetXopcDatabaseSingletonForTest, resolveClarification, resolveMigrationsDir, resolveSessionAgentId, resolveXopcDatabasePath, restoreBeforeCompactionBoundary, revokeDevice, revokeEndpointPrincipal, rotateDeviceRefreshToken, runSqliteWriteTransaction, searchSessionTranscript, sessionConfigRowToConfig, sessionRowToMetadata, setBrowserTabBinding, setCollaborationRuleStatus, setConnectorLearningPaused, setEndpointSessionBinding, setInteractionState, setKnowledgeConsumerWatermark, setKnowledgeSourceCursor, setKnowledgeSourceItemSynthesisStatus, setSessionConfig, setSessionInputStatus, setSessionTaskPlan, setUserTrustPolicy, signGatewayPayload, sortBySidebarLayout, startEndpointToolInvocationAudit, startKnowledgeSyncRun, summarizeUserPeople, supersedeActiveClarification, touchEndpointPrincipal, transcriptEntryRowToStoredRow, updateConnectorLearningJob, updateInteractionStateFromMessage, updateRelationshipSettings, updateSessionConfig, updateSessionStats, updateUserPerson, upsertConnectorActionMetadata, upsertConnectorCatalogEntry, upsertConnectorConnection, upsertConnectorInstallation, upsertConnectorSyncPolicy, upsertKnowledgeSourceItems, upsertNoteAgentContextRecord, upsertNoteRecord, validateLatestSessionTurnTarget };
+export { COMPOSER_INPUT_HISTORY_LIMIT, DatabaseSchemaMigrationGapError, DatabaseSchemaTooNewError, DatabaseSchemaTooOldError, SCHEMA_META_SCHEMA_VERSION_KEY, SidebarLayoutConflictError, XOPC_DB_BASELINE_SCHEMA_VERSION, XOPC_DB_FILENAME, XOPC_DB_SCHEMA_VERSION, acknowledgeHomeAttention, appendCompactionBoundaryIfUnchanged, appendComposerInputHistory, appendConnectorExecutionAudit, appendMediaToAssistantTranscriptEntry, appendTranscriptEntry, applyPendingMigrations, authenticateDeviceAccessToken, bindEndpointPrincipal, buildDefaultSessionMetadata, buildGlobalSessionStats, buildRefreshProofMessage, buildRelationshipPrompt, cancelQueuedSessionInput, claimConnectorWebhookDelivery, claimContextExtractionRun, claimKnowledgeSourceItems, claimNextConnectorLearningJob, claimNextSessionInput, classifyStoredRow, clearComposerInputHistory, clearGatewayIdentityForTest, closeTemporalAssertions, closeXopcDatabase, completeConnectorWebhookDelivery, completeKnowledgeSourceItemSynthesis, consumeClarificationApproval, consumeClarificationResume, consumeConnectorApproval, countKnowledgeSourceItems, createClarificationWait, createCollaborationRule, createConnectorApproval, createContextEvidence, createDevice, createDevicePairingSetup, createEndpointPrincipal, createObjectLinkRecord, createTemporalAssertion, decideConnectorApproval, deleteBrowserTabBinding, deleteBrowserTabBindingsByEndpoint, deleteBrowserTabBindingsByPrincipal, deleteConnectorConnection, deleteConnectorInstallation, deleteEndpointSessionBinding, deleteEndpointSessionBindingsByPrincipal, deleteKnowledgeSourceItems, deleteNoteAgentContextRecord, deleteNoteRecord, deleteObjectLinkRecord, deleteSessionConfig, deleteSessionRecord, discoverSqlMigrations, enqueueConnectorLearningJob, ensureSessionRecord, ensureXopcDatabaseSchema, estimateTokensFromMessages, extractFtsContent, findConversationIdByTranscriptId, findLatestAssistantTranscriptEntryId, findSessionInput, finishContextExtractionRun, finishEndpointToolInvocationAudit, finishKnowledgeSyncRun, finishSessionInputRun, getActiveClarification, getActivityEventRecord, getBrowserTabBinding, getBrowserTabBindingById, getCachedConnectorCatalogEntry, getClarification, getClarificationResumeInput, getClarificationSnapshot, getCollaborationRule, getConnectorAccount, getConnectorApproval, getConnectorConnection, getConnectorInstallation, getConnectorSyncPolicy, getConnectorSyncPolicyForConnection, getContextExtractionRun, getCurrentTranscriptId, getDevice, getEndpointPrincipal, getEndpointSessionBinding, getGlobalSessionStats, getInteractionState, getKnowledgeConsumerWatermark, getKnowledgeSourceCursor, getKnowledgeSourceItem, getNoteAgentContextRecord, getNoteRecord, getOrCreateGatewayIdentity, getRelationshipSettings, getSessionConfig, getSessionInputById, getSessionInputState, getSessionMetadata, getSessionPersistedLevels, getSessionTaskPlan, getSidebarLayout, getSqliteDatabase, getUserPeopleIndexState, getUserPerson, getUserTrustPolicy, getXopcDatabase, hasIndependentExtractionOutput, hasSessionConfig, incrementSessionStatsOnAppend, insertSessionInput, inspectSchemaMigrationStatus, isClarificationSuspended, isDevicePairingSetupActive, isHomeAttentionAcknowledged, isProactiveSupportAllowed, isXopcDatabaseOpen, issueDeviceTokenPair, linkContextObjects, listActiveSessionInputRuns, listActivityRecords, listCachedConnectorCatalogEntries, listCollaborationRules, listCompactionBoundaries, listComposerInputHistory, listConnectorAccounts, listConnectorActionMetadata, listConnectorApprovals, listConnectorConnections, listConnectorExecutionAudit, listConnectorInstallations, listConnectorLearningJobs, listConnectorSyncPolicies, listContextExtractionOutputs, listContextExtractionRuns, listContextObjectRelations, listDevices, listEndpointPrincipals, listEndpointToolInvocationAuditPage, listKnowledgeSourceChanges, listKnowledgeSourceItems, listKnowledgeSyncRuns, listNoteRecords, listObjectActivityRecords, listObjectLinkRecords, listProjectActivityRecords, listRegisteredMigrationTargets, listSessionMetadata, listSessionsByAgent, listTemporalAssertions, listUserPeople, loadCompactionSourceSnapshot, loadLlmMessagesForSession, loadTranscriptHistoryRowsForSession, loadTranscriptRows, loadTranscriptRowsForSession, mergeUserPeople, metadataToSessionInsert, mutateQueuedSessionInput, openXopcDatabase, paginateTranscriptMessages, patchSessionMetadata, pruneBoundedKnowledgeSourceItems, readSchemaVersion, readSchemaVersionForTest, reconcileConnectorAccount, recordActivityEvent, recoverSessionInputState, recoverStaleConnectorLearningJobs, refreshConnectorAccountCurrent, releaseConnectorWebhookDelivery, replaceConnectorCatalogEntries, replaceLatestSessionTurnAndQueueInput, replaceSidebarLayout, replaceTranscriptRows, replaceUserPeopleIndex, requireXopcDatabase, resetSessionRecord, resetXopcDatabaseSingletonForTest, resolveClarification, resolveMigrationsDir, resolveSessionAgentId, resolveXopcDatabasePath, restoreBeforeCompactionBoundary, revokeDevice, revokeEndpointPrincipal, rotateDeviceRefreshToken, runSqliteWriteTransaction, searchSessionTranscript, sessionConfigRowToConfig, sessionRowToMetadata, setBrowserTabBinding, setCollaborationRuleStatus, setConnectorLearningPaused, setEndpointSessionBinding, setInteractionState, setKnowledgeConsumerWatermark, setKnowledgeSourceCursor, setKnowledgeSourceItemSynthesisStatus, setSessionConfig, setSessionInputStatus, setSessionTaskPlan, setUserTrustPolicy, signGatewayPayload, sortBySidebarLayout, startEndpointToolInvocationAudit, startKnowledgeSyncRun, summarizeUserPeople, supersedeActiveClarification, touchEndpointPrincipal, transcriptEntryRowToStoredRow, updateConnectorLearningJob, updateInteractionStateFromMessage, updateRelationshipSettings, updateSessionConfig, updateSessionStats, updateUserPerson, upsertConnectorActionMetadata, upsertConnectorCatalogEntry, upsertConnectorConnection, upsertConnectorInstallation, upsertConnectorSyncPolicy, upsertKnowledgeSourceItems, upsertNoteAgentContextRecord, upsertNoteRecord, validateLatestSessionTurnTarget };