@xopcai/xopc 0.0.323 → 0.0.325

package/dist/src/tui/tui-commands.js

@@ -1,10 +1,9 @@
 import { closeXopcDatabase, isXopcDatabaseOpen, openXopcDatabase } from "../storage/sqlite/connection.js";
 import { TaskRepository } from "../tasks/task-repository.js";
 import { getSessionMetadata } from "../storage/sqlite/session-read-repository.js";
-import "../storage/sqlite/index.js";
-import { init_agent_session_key, isValidAgentId, normalizeAgentId } from "../routing/agent-session-key.js";
+import { init_sqlite } from "../storage/sqlite/index.js";
 import { resolveConfigPath } from "../config/paths.js";
-import { loadConfig } from "../config/loader.js";
+import { init_agent_session_key, isValidAgentId, normalizeAgentId } from "../routing/agent-session-key.js";
 import { init_providers, providerSupportsOAuth } from "../providers/index.js";
 import { ProjectService } from "../projects/project-service.js";
 import { isValidProjectAgentId, normalizeProjectAgentId } from "../projects/project-agent.js";
@@ -14,6 +13,7 @@ import "../tasks/index.js";
 import { createWorkflowCatalog } from "../agent/workflow/catalog.js";
 import { normalizeReasoningLevel, normalizeThinkLevel, normalizeVerboseLevel } from "../agent/transcript/thinking-types.js";
 import { provenanceTracker } from "../extensions/security.js";
+import { loadConfig } from "../config/loader.js";
 import "../config/index.js";
 import { theme } from "./theme.js";
 import { getTuiKeybindingsPath } from "./tui-keybindings-file.js";
@@ -21,12 +21,14 @@ import { formatKeyIds, formatXopcTuiHotkeys } from "./format-tui-hotkeys.js";
 import { formatTuiConfigInfo, formatTuiContextInfo, formatTuiLoginInfo, formatTuiModelsInfo, formatTuiSessionInfo, formatTuiSessionListInfo, formatTuiSessionTreeInfo, formatTuiStoredAuthProfilesInfo, formatTuiTranscriptTreeInfo, formatTuiTrustInfo, formatTuiUsageInfo, formatTuiWorkflowDetail, formatTuiWorkflowsInfo, loadTuiChangelogInfo, nextVerboseLevel, parseTuiExportRequest, parseTuiImportRequest, parseTuiShareRequest, writeTuiDebugInfo } from "./tui-command-formatters.js";
 import { buildTuiTimelineTurns, findNearestTimelineTurnByDisplayIndex, findTimelineTurnByNumber } from "./tui-timeline.js";
 import { getAuthStorePath, listAllProfiles, listProfilesForProvider, removeAuthProfile } from "../auth/profiles/profiles.js";
+import "../auth/profiles/index.js";
 import { rewriteUnknownSlashAsWorkflow } from "./tui-workflow-slash.js";
 import { formatTuiStartupText } from "./tui-startup-text.js";
 import { randomUUID } from "node:crypto";
 //#region src/tui/tui-commands.ts
 init_agent_session_key();
 init_providers();
+init_sqlite();
 function keyLabel(keybindings, id, fallback) {
 	return keybindings ? formatKeyIds(keybindings, id, { capitalize: true }) : fallback;
 }

package/dist/src/tui/tui-skills-autocomplete.js

@@ -1,7 +1,7 @@
 import { resolveStateDir } from "../config/paths-state.js";
 import { init_paths, resolveBundledSkillsDir } from "../config/paths.js";
-import { loadConfig } from "../config/loader.js";
 import { loadSkills } from "../agent/skills/index.js";
+import { loadConfig } from "../config/loader.js";
 import { getWorkspacePath } from "../config/workspace-path-helpers.js";
 import "../config/index.js";
 //#region src/tui/tui-skills-autocomplete.ts

package/dist/src/tui/tui-startup-resources.js

@@ -1,6 +1,6 @@
 import { resolveStateDir } from "../config/paths-state.js";
-import { resolveEffectiveAgentProfileForSession } from "../config/agent-profile.js";
 import { init_paths, resolveAgentProfileDir, resolveBundledSkillsDir } from "../config/paths.js";
+import { resolveEffectiveAgentProfileForSession } from "../config/agent-profile.js";
 import { resolveBootstrapFilesSync } from "../agent/bootstrap/bootstrap-files.js";
 import { listConnectorInstances } from "../connectors/instances.js";
 import { createSkillConfigManager, isSkillEnabled } from "../agent/skills/config.js";
@@ -15,8 +15,8 @@ function uniqueSorted(values) {
 	return [...new Set([...values].map((value) => value.trim()).filter(Boolean))].sort((a, b) => a.localeCompare(b));
 }
 function collectTuiStartupResources(config, conversationId, options = {}) {
-	const profile = resolveEffectiveAgentProfileForSession(config, conversationId);
-	const profileDir = resolveAgentProfileDir(config, profile.agentId);
+	const profile = resolveEffectiveAgentProfileForSession(conversationId);
+	const profileDir = resolveAgentProfileDir(profile.agentId);
 	const workspaceDir = profile.resolvedWorkspacePath || getWorkspacePath(config);
 	const context = uniqueSorted(resolveBootstrapFilesSync({
 		profileDir,

package/dist/src/tui/tui.js

@@ -1,12 +1,12 @@
 import { version } from "../../package.js";
 import { resolveStateDir, resolveXopcDatabasePath } from "../config/paths-state.js";
+import { init_paths } from "../config/paths.js";
 import { init_agent_session_key, normalizeAgentId } from "../routing/agent-session-key.js";
 import { resolveEffectiveAgentProfileForSession } from "../config/agent-profile.js";
-import { init_paths } from "../config/paths.js";
-import { loadConfig } from "../config/loader.js";
 import { getAllModels, getAllProviders, getApiKey, init_providers, isProviderConfiguredSync } from "../providers/index.js";
 import { ProjectTrustStore, hasTrustRequiringProjectResources } from "../project-trust/trust-store.js";
 import { MAX_WEBCHAT_ATTACHMENT_FILE_BYTES } from "../gateway/chat-limits.js";
+import { loadConfig } from "../config/loader.js";
 import { renderWorkflowFinalSummary, renderWorkflowPanel } from "../agent/workflow/snapshot.js";
 import { ensureStarterAgentsInitialized } from "../agent/starter-agents.js";
 import "../config/index.js";
@@ -180,9 +180,9 @@ async function runTui(opts) {
 	const restoreStdio = () => stdioFilter.restore();
 	const isLocalMode = opts.local === true;
 	const loadedConfig = loadConfig();
-	const config = isLocalMode ? ensureStarterAgentsInitialized(loadedConfig).config : loadedConfig;
+	if (isLocalMode) ensureStarterAgentsInitialized();
+	const config = loadedConfig;
 	const startup = resolveTuiStartupConversationId({
-		cfg: config,
 		sessionOption: opts.session,
 		agentOption: opts.agentId,
 		cwd: process.cwd()
@@ -558,7 +558,7 @@ async function runTui(opts) {
 		}
 	};
 	const getAvailableProviderCount = () => getAllProviders().filter((provider) => isProviderConfiguredSync(provider)).length;
-	const getExtensionSystemPrompt = () => resolveEffectiveAgentProfileForSession(config, state.currentConversationId).customInstructions ?? "";
+	const getExtensionSystemPrompt = () => resolveEffectiveAgentProfileForSession(state.currentConversationId).customInstructions ?? "";
 	const waitForTuiIdle = async () => {
 		while (state.activeRunId != null || state.isCompacting || state.activityStatus === "sending" || state.activityStatus === "waiting" || state.activityStatus === "streaming" || state.activityStatus === "running" || state.activityStatus === "compacting") await new Promise((resolveDelay) => setTimeout(resolveDelay, 50));
 	};

package/dist/src/tunnel/registration-proof.js

@@ -1,6 +1,7 @@
-import { getGatewayIdentityPublicKeyRaw, getOrCreateGatewayIdentity, signGatewayPayload } from "../storage/sqlite/gateway-identity-repository.js";
+import { getGatewayIdentityPublicKeyRaw, getOrCreateGatewayIdentity, init_gateway_identity_repository, signGatewayPayload } from "../storage/sqlite/gateway-identity-repository.js";
 import { randomBytes } from "node:crypto";
 //#region src/tunnel/registration-proof.ts
+init_gateway_identity_repository();
 /** Canonical v2 registration proof, shared with the Broker protocol test vectors. */
 function createTunnelRegistrationProof(input) {
 	const identity = getOrCreateGatewayIdentity();

package/dist/src/user-context/access-policy.js

@@ -1,10 +1,11 @@
-import { getSessionConfig } from "../storage/sqlite/config-repository.js";
+import { getSessionConfig, init_config_repository } from "../storage/sqlite/config-repository.js";
 import { init_config, resolveKnowledgeReadPolicy } from "./config.js";
 import { getConversationRouting } from "../storage/sqlite/conversation-repository.js";
 import { init_session_key } from "../routing/session-key.js";
 //#region src/user-context/access-policy.ts
 init_config();
 init_session_key();
+init_config_repository();
 /** One policy boundary for every shared-context read and write path. */
 function resolveUserContextSessionAccess(config, conversationId) {
 	if (!config || !conversationId) return {

package/dist/src/user-context/domain.d.ts

@@ -42,7 +42,7 @@ export type UserUnderstanding = {
 };
 export type CollaborationRule = {
     id: string;
-    category: 'communication' | 'execution' | 'boundary' | 'routine' | 'proactive';
+    category: 'communication' | 'execution' | 'boundary' | 'routine' | 'initiative';
     status: 'active' | 'disabled' | 'archived';
     priority: number;
     scope: UserContextScope;

package/dist/src/user-context/domain.js

@@ -1,15 +1,20 @@
+import { __esmMin } from "../../_virtual/_rolldown/runtime.js";
 //#region src/user-context/domain.ts
-const USER_CONTEXT_PRINCIPAL_ID = "local-owner";
-const UNDERSTANDING_KINDS = [
-	"preference",
-	"boundary",
-	"relationship",
-	"routine",
-	"current_state",
-	"long_term_goal",
-	"project_context",
-	"task_lesson",
-	"derived_insight"
-];
+var USER_CONTEXT_PRINCIPAL_ID, UNDERSTANDING_KINDS;
+var init_domain = __esmMin((() => {
+	USER_CONTEXT_PRINCIPAL_ID = "local-owner";
+	UNDERSTANDING_KINDS = [
+		"preference",
+		"boundary",
+		"relationship",
+		"routine",
+		"current_state",
+		"long_term_goal",
+		"project_context",
+		"task_lesson",
+		"derived_insight"
+	];
+}));
 //#endregion
-export { UNDERSTANDING_KINDS, USER_CONTEXT_PRINCIPAL_ID };
+init_domain();
+export { UNDERSTANDING_KINDS, USER_CONTEXT_PRINCIPAL_ID, init_domain };

package/dist/src/user-context/extraction/registry.js

@@ -1,7 +1,8 @@
 import { claimContextExtractionRun, finishContextExtractionRun } from "../../storage/sqlite/context-extraction-repository.js";
-import "../../storage/sqlite/index.js";
+import { init_sqlite } from "../../storage/sqlite/index.js";
 import { createHash } from "node:crypto";
 //#region src/user-context/extraction/registry.ts
+init_sqlite();
 const UNDERSTANDING_KINDS = [
 	"preference",
 	"boundary",

package/dist/src/user-context/interaction-state.js

@@ -1,3 +1,4 @@
+import { __esmMin } from "../../_virtual/_rolldown/runtime.js";
 //#region src/user-context/interaction-state.ts
 function inferInteractionState(message) {
 	const text = message.trim().toLocaleLowerCase();
@@ -69,5 +70,7 @@ function buildInteractionStatePrompt(signal) {
 	if (signal.repairStatus === "needed") lines.push("Relationship repair is needed: briefly acknowledge the specific mismatch, do not defend yourself, adjust immediately, and ask at most one concise question.");
 	return lines.join("\n\n");
 }
+var init_interaction_state = __esmMin((() => {}));
 //#endregion
-export { buildInteractionStatePrompt, inferInteractionState };
+init_interaction_state();
+export { buildInteractionStatePrompt, inferInteractionState, init_interaction_state };

package/dist/src/user-context/relationship-continuity.js

@@ -1,8 +1,9 @@
-import { createContextEvidence } from "../storage/sqlite/context-evidence-repository.js";
+import { createContextEvidence, init_context_evidence_repository } from "../storage/sqlite/context-evidence-repository.js";
 import { reconcileAssertion } from "../user-model/repository.js";
 import "../user-model/index.js";
 import { createHash } from "node:crypto";
 //#region src/user-context/relationship-continuity.ts
+init_context_evidence_repository();
 const CHINESE_FOLLOW_UP_PATTERN = /^(?:请|记得|麻烦|帮我)?\s*(?:明天|下周|之后|到时候)?\s*(?:提醒我|问问我|跟进一下|跟进)(?:关于)?[：:，,\s]*(.+)$/;
 const ENGLISH_FOLLOW_UP_PATTERN = /^(?:please\s+)?(?:remember to\s+)?(?:(?:tomorrow|next week|later)\s+)?(?:follow up with me|check in with me|ask me)(?: about)?[,\s:]+(.+)$/i;
 function normalizeFollowUpSubject(value) {

package/dist/src/user-context/trust-policy.js

@@ -1,11 +1,5 @@
+import { __esmMin } from "../../_virtual/_rolldown/runtime.js";
 //#region src/user-context/trust-policy.ts
-const USER_TRUST_LEVELS = [
-	"observe",
-	"suggest",
-	"confirm",
-	"auto"
-];
-const DEFAULT_USER_TRUST_LEVEL = "confirm";
 function isUserTrustLevel(value) {
 	return typeof value === "string" && USER_TRUST_LEVELS.includes(value);
 }
@@ -25,5 +19,16 @@ function buildActionTrustPrompt(level) {
 	const instruction = level === "observe" ? "- For proactive work, observe and build context only; do not prepare or initiate actions." : level === "suggest" ? "- For proactive work, explain the recommendation and rationale, then let the user decide whether to proceed." : level === "confirm" ? "- For proactive work, prepare the action, but request approval before executing any mutating or external step." : "- For proactive work, you may execute within already-authorized, recoverable boundaries without asking each time.";
 	return [...shared, instruction].join("\n");
 }
+var USER_TRUST_LEVELS, DEFAULT_USER_TRUST_LEVEL;
+var init_trust_policy = __esmMin((() => {
+	USER_TRUST_LEVELS = [
+		"observe",
+		"suggest",
+		"confirm",
+		"auto"
+	];
+	DEFAULT_USER_TRUST_LEVEL = "confirm";
+}));
 //#endregion
-export { DEFAULT_USER_TRUST_LEVEL, USER_TRUST_LEVELS, buildActionTrustPrompt, isUserTrustLevel, resolveAutomationSafetyForTrust };
+init_trust_policy();
+export { DEFAULT_USER_TRUST_LEVEL, USER_TRUST_LEVELS, buildActionTrustPrompt, init_trust_policy, isUserTrustLevel, resolveAutomationSafetyForTrust };

package/dist/src/user-model/bootstrap.js

@@ -1,8 +1,9 @@
-import { createCollaborationRule, listCollaborationRules } from "../storage/sqlite/collaboration-rule-repository.js";
+import { createCollaborationRule, init_collaboration_rule_repository, listCollaborationRules } from "../storage/sqlite/collaboration-rule-repository.js";
 import { createPriorityWindow, createUserGoal, listPriorityWindows, listUserGoals } from "./goals.js";
 import { reconcileAssertion } from "./repository.js";
 import { applyUserProfilePatch } from "./profile.js";
 //#region src/user-model/bootstrap.ts
+init_collaboration_rule_repository();
 function statements(values, limit) {
 	return [...new Set((values ?? []).map((value) => value.trim().slice(0, 500)).filter(Boolean))].slice(0, limit);
 }

package/dist/src/user-model/capture/executor.js

@@ -1,9 +1,11 @@
-import { createCollaborationRule, listCollaborationRules } from "../../storage/sqlite/collaboration-rule-repository.js";
-import { createContextEvidence } from "../../storage/sqlite/context-evidence-repository.js";
+import { createCollaborationRule, init_collaboration_rule_repository, listCollaborationRules } from "../../storage/sqlite/collaboration-rule-repository.js";
+import { createContextEvidence, init_context_evidence_repository } from "../../storage/sqlite/context-evidence-repository.js";
 import { createUserGoal, listUserGoals } from "../goals.js";
 import { deleteUserAssertion, getUserAssertion, linkAssertionEvidence, reconcileAssertion, setAssertionStatus } from "../repository.js";
 import { createHash } from "node:crypto";
 //#region src/user-model/capture/executor.ts
+init_context_evidence_repository();
+init_collaboration_rule_repository();
 function emptyUserModelCaptureResult() {
 	return {
 		proposed: 0,

package/dist/src/user-model/capture/semantic.d.ts

@@ -21,7 +21,7 @@ export interface ParsedGoalCandidate {
     evidenceRefs: string[];
 }
 export interface ParsedCollaborationRuleCandidate {
-    category: 'communication' | 'execution' | 'boundary' | 'routine' | 'proactive';
+    category: 'communication' | 'execution' | 'boundary' | 'routine' | 'initiative';
     priority: number;
     scope: AssertionCandidate['scope'];
     conditions: Record<string, unknown>;

package/dist/src/user-model/capture/semantic.js

@@ -128,7 +128,7 @@ const CollaborationRuleSchema = z.object({
 		"execution",
 		"boundary",
 		"routine",
-		"proactive"
+		"initiative"
 	]),
 	priority: z.number().int().min(0).max(100),
 	scope: ScopeSchema,

package/dist/src/user-model/domain.js

@@ -1,5 +1,5 @@
+import { __esmMin } from "../../_virtual/_rolldown/runtime.js";
 //#region src/user-model/domain.ts
-const USER_MODEL_PRINCIPAL_ID = "local-owner";
 function validateScope(scope) {
 	const id = scope.id?.trim();
 	if (scope.type === "global") {
@@ -29,5 +29,10 @@ function validateCandidate(candidate) {
 	]) if (value !== void 0 && (!Number.isFinite(value) || value < 0 || value > 1)) throw new Error(`${field} must be between 0 and 1.`);
 	if (candidate.validFrom !== void 0 && candidate.validTo !== void 0 && candidate.validTo < candidate.validFrom) throw new Error("Assertion validTo must be greater than or equal to validFrom.");
 }
+var USER_MODEL_PRINCIPAL_ID;
+var init_domain = __esmMin((() => {
+	USER_MODEL_PRINCIPAL_ID = "local-owner";
+}));
 //#endregion
-export { USER_MODEL_PRINCIPAL_ID, validateCandidate, validateScope };
+init_domain();
+export { USER_MODEL_PRINCIPAL_ID, init_domain, validateCandidate, validateScope };

package/dist/src/user-model/goals.js

@@ -1,8 +1,9 @@
 import { getSqliteDatabase, init_transaction, runSqliteWriteTransaction } from "../storage/sqlite/transaction.js";
-import { USER_MODEL_PRINCIPAL_ID, validateScope } from "./domain.js";
+import { USER_MODEL_PRINCIPAL_ID, init_domain, validateScope } from "./domain.js";
 import { randomUUID } from "node:crypto";
 //#region src/user-model/goals.ts
 init_transaction();
+init_domain();
 function optionalNumber(value) {
 	return value === null ? void 0 : value;
 }

package/dist/src/user-model/index.js

@@ -1,4 +1,4 @@
-import { USER_MODEL_PRINCIPAL_ID, validateCandidate, validateScope } from "./domain.js";
+import { USER_MODEL_PRINCIPAL_ID, init_domain, validateCandidate, validateScope } from "./domain.js";
 import { calculateExecutionValue } from "./importance.js";
 import { createPriorityWindow, createUserGoal, listPriorityWindows, listUserGoals, setUserGoalStatus, updatePriorityWindow, updateUserGoal } from "./goals.js";
 import { defaultReviewAt, isAssertionValidAt, requiresBoundedValidity, resolveCurrentAssertion } from "./temporal.js";
@@ -6,4 +6,7 @@ import { deleteUserAssertion, getActiveAssertionByPredicate, getActiveAssertionF
 import { applyUserProfilePatch, getUserProfileSnapshot } from "./profile.js";
 import { bootstrapUserModel } from "./bootstrap.js";
 import { canUseAssertion, isWorkingAssumption } from "./usage-policy.js";
+//#region src/user-model/index.ts
+init_domain();
+//#endregion
 export { USER_MODEL_PRINCIPAL_ID, applyUserProfilePatch, bootstrapUserModel, calculateExecutionValue, canUseAssertion, createPriorityWindow, createUserGoal, defaultReviewAt, deleteUserAssertion, getActiveAssertionByPredicate, getActiveAssertionForSlot, getAssertionSlot, getUserAssertion, getUserProfileSnapshot, getUserTimezone, isAssertionValidAt, isWorkingAssumption, linkAssertionEvidence, listPriorityWindows, listSlotAssertions, listUserAssertionSources, listUserAssertions, listUserGoals, reconcileAssertion, requiresBoundedValidity, resolveCurrentAssertion, setAssertionStatus, setUserGoalStatus, updatePriorityWindow, updateUserGoal, validateCandidate, validateScope };

package/dist/src/user-model/repository.js

@@ -1,11 +1,12 @@
 import { getSqliteDatabase, init_transaction, runSqliteWriteTransaction } from "../storage/sqlite/transaction.js";
-import { USER_MODEL_PRINCIPAL_ID, validateCandidate, validateScope } from "./domain.js";
+import { USER_MODEL_PRINCIPAL_ID, init_domain, validateCandidate, validateScope } from "./domain.js";
 import { clearMemoryAudit, isMemorySuppressed, memoryFingerprint, restoreMemory, suppressMemory } from "../user-context/memory-suppression.js";
 import { defaultReviewAt, requiresBoundedValidity } from "./temporal.js";
 import { basename } from "node:path";
 import { randomUUID } from "node:crypto";
 //#region src/user-model/repository.ts
 init_transaction();
+init_domain();
 function slotFromRow(row) {
 	return {
 		id: row.slot_id,

package/dist/src/utils/helpers.js

@@ -1,16 +1,13 @@
 import { init_agent_scope, resolveAgentWorkspaceDir, resolveDefaultAgentId } from "../agent/agent-scope.js";
 import { init_paths } from "../config/paths.js";
-import { init_loader, loadConfig } from "../config/loader.js";
 import { isAbsolute, resolve } from "path";
 import { homedir } from "os";
 //#region src/utils/helpers.ts
-init_loader();
 init_agent_scope();
 init_paths();
 function getWorkspacePath(customPath) {
 	if (customPath) return customPath.replace(/^~/, homedir());
-	const cfg = loadConfig();
-	return resolveAgentWorkspaceDir(cfg, resolveDefaultAgentId(cfg));
+	return resolveAgentWorkspaceDir(resolveDefaultAgentId());
 }
 function createPathResolver(extensionDir, workspaceDir) {
 	return (input) => {

package/dist/src/utils/index.js

@@ -3,7 +3,7 @@ import { getLogDir, getLoggerConfig } from "./logger/config.js";
 import { getRuntimeLogStats } from "./logger/stats.js";
 import { flushAndClose, isLoggerShuttingDown, setShuttingDown } from "./logger/shutdown.js";
 import { cleanOldLogs, rotateLogs } from "./logger/rotation.js";
-import { isLogRedactionEnabled, redactObject, redactPemBlock, redactSecret, redactSensitiveInfo } from "./logger/redact.js";
+import { isLogRedactionEnabled, redactObject, redactPemBlock, redactSecret, redactSensitiveInfo, redactSensitiveOutput } from "./logger/redact.js";
 import { exportLog, flushExporters, getExporters, initializeExporters } from "./logger/exporters.js";
 import { configureAuditLog, getAuditConfig, logAuditEvent, logAuthEvent, logConfigChange, logDataAccess, logPermissionChange } from "./logger/audit.js";
 import { Pino as pino, baseLogger as logger, createExtensionLogger, createLogger, createModuleLogger, createServiceLogger, getLogLevel, isLevelEnabled, setLogLevel, withLogLevel } from "./logger/index.js";
@@ -12,4 +12,4 @@ import { createPathResolver, getWorkspacePath, resolveToCwd } from "./helpers.js
 //#region src/utils/index.ts
 init_logger();
 //#endregion
-export { pino as Pino, logger as baseLogger, logger, cleanOldLogs, configureAuditLog, createExtensionLogger, createLogger, createModuleLogger, createPathResolver, createServiceLogger, exportLog, flushAndClose, flushExporters, getAsyncLogContext, getAuditConfig, getExporters, getLogDir, getLogLevel, getLoggerConfig, getRuntimeLogStats, getWorkspacePath, inboundCorrelationMetadataFromAsyncLogContext, initializeExporters, isLevelEnabled, isLogRedactionEnabled, isLoggerShuttingDown, logAuditEvent, logAuthEvent, logConfigChange, logDataAccess, logPermissionChange, redactObject, redactPemBlock, redactSecret, redactSensitiveInfo, resolveToCwd, rotateLogs, runWithLogContext, setLogLevel, setShuttingDown, updateAsyncLogContext, withLogLevel };
+export { pino as Pino, logger as baseLogger, logger, cleanOldLogs, configureAuditLog, createExtensionLogger, createLogger, createModuleLogger, createPathResolver, createServiceLogger, exportLog, flushAndClose, flushExporters, getAsyncLogContext, getAuditConfig, getExporters, getLogDir, getLogLevel, getLoggerConfig, getRuntimeLogStats, getWorkspacePath, inboundCorrelationMetadataFromAsyncLogContext, initializeExporters, isLevelEnabled, isLogRedactionEnabled, isLoggerShuttingDown, logAuditEvent, logAuthEvent, logConfigChange, logDataAccess, logPermissionChange, redactObject, redactPemBlock, redactSecret, redactSensitiveInfo, redactSensitiveOutput, resolveToCwd, rotateLogs, runWithLogContext, setLogLevel, setShuttingDown, updateAsyncLogContext, withLogLevel };

package/dist/src/utils/logger/index.d.ts

@@ -25,7 +25,7 @@ export declare function isLevelEnabled(level: LogLevel): boolean;
 export type { LogLevel, LogContext, LogEntry, LoggerConfig, LogFileMeta, LogQuery, LogStats, RotationResult, ContextualLogger, } from './types.js';
 export { getLogDir, getLoggerConfig, getRuntimeLogStats, isLoggerShuttingDown, flushAndClose, setShuttingDown, rotateLogs, cleanOldLogs, };
 export { type LogExporter, type ExporterConfig, type LokiConfig, type ElkConfig, type DatadogConfig, type WebhookConfig, initializeExporters, exportLog, flushExporters, getExporters, } from './exporters.js';
-export { redactSensitiveInfo, redactObject, redactPemBlock, redactSecret, isLogRedactionEnabled, } from './redact.js';
+export { redactSensitiveInfo, redactSensitiveOutput, redactObject, redactPemBlock, redactSecret, isLogRedactionEnabled, } from './redact.js';
 export { type AuditEvent, type AuditEventType, type AuditLogConfig, logAuditEvent, logAuthEvent, logConfigChange, logPermissionChange, logDataAccess, configureAuditLog, getAuditConfig, } from './audit.js';
 export { logger as baseLogger };
 export { pino as Pino };

package/dist/src/utils/logger/index.js

@@ -6,7 +6,7 @@ import { init_streams, initializeStreams } from "./streams.js";
 import { getRuntimeLogStats, incrementStats, init_stats } from "./stats.js";
 import { flushAndClose, init_shutdown, isLoggerShuttingDown, setShuttingDown } from "./shutdown.js";
 import { cleanOldLogs, init_rotation, rotateLogs } from "./rotation.js";
-import { init_redact, isLogRedactionEnabled, redactLogRecord, redactObject, redactPemBlock, redactSecret, redactSensitiveInfo } from "./redact.js";
+import { init_redact, isLogRedactionEnabled, redactLogRecord, redactObject, redactPemBlock, redactSecret, redactSensitiveInfo, redactSensitiveOutput } from "./redact.js";
 import { exportLog, flushExporters, getExporters, init_exporters, initializeExporters } from "./exporters.js";
 import { configureAuditLog, getAuditConfig, init_audit, logAuditEvent, logAuthEvent, logConfigChange, logDataAccess, logPermissionChange } from "./audit.js";
 import pino from "pino";
@@ -180,4 +180,4 @@ var init_logger = __esmMin((() => {
 }));
 //#endregion
 init_logger();
-export { pino as Pino, logger as baseLogger, logger, cleanOldLogs, configureAuditLog, createExtensionLogger, createLogger, createModuleLogger, createServiceLogger, exportLog, flushAndClose, flushExporters, getAsyncLogContext, getAuditConfig, getExporters, getLogDir, getLogLevel, getLoggerConfig, getRuntimeLogStats, inboundCorrelationMetadataFromAsyncLogContext, init_logger, initializeExporters, isLevelEnabled, isLogRedactionEnabled, isLoggerShuttingDown, logAuditEvent, logAuthEvent, logConfigChange, logDataAccess, logPermissionChange, redactObject, redactPemBlock, redactSecret, redactSensitiveInfo, rotateLogs, runWithLogContext, setLogLevel, setShuttingDown, updateAsyncLogContext, withLogLevel };
+export { pino as Pino, logger as baseLogger, logger, cleanOldLogs, configureAuditLog, createExtensionLogger, createLogger, createModuleLogger, createServiceLogger, exportLog, flushAndClose, flushExporters, getAsyncLogContext, getAuditConfig, getExporters, getLogDir, getLogLevel, getLoggerConfig, getRuntimeLogStats, inboundCorrelationMetadataFromAsyncLogContext, init_logger, initializeExporters, isLevelEnabled, isLogRedactionEnabled, isLoggerShuttingDown, logAuditEvent, logAuthEvent, logConfigChange, logDataAccess, logPermissionChange, redactObject, redactPemBlock, redactSecret, redactSensitiveInfo, redactSensitiveOutput, rotateLogs, runWithLogContext, setLogLevel, setShuttingDown, updateAsyncLogContext, withLogLevel };

package/dist/src/utils/logger/redact.d.ts

@@ -5,6 +5,8 @@ export declare function isLogRedactionEnabled(): boolean;
 export declare function redactSecret(secret: string): string;
 export declare function redactPemBlock(text: string): string;
 export declare function redactSensitiveInfo(text: string): string;
+/** Redact model-visible and persisted tool output without retaining secret fragments. */
+export declare function redactSensitiveOutput(text: string): string;
 export declare function redactObject(obj: unknown, depth?: number): unknown;
 /**
  * Apply redaction to a pino log object (mutates a shallow clone safe for return).

package/dist/src/utils/logger/redact.js

@@ -14,10 +14,18 @@ function redactPemBlock(text) {
 }
 function redactSensitiveInfo(text) {
 	if (!text || !isLogRedactionEnabled()) return text;
+	return redactSensitiveText(text, redactSecret);
+}
+/** Redact model-visible and persisted tool output without retaining secret fragments. */
+function redactSensitiveOutput(text) {
+	if (!text) return text;
+	return redactSensitiveText(text, () => "[REDACTED]");
+}
+function redactSensitiveText(text, replacement) {
 	let redacted = redactPemBlock(text);
 	for (const pattern of DEFAULT_REDACT_PATTERNS) redacted = redacted.replace(pattern, (match, ...groups) => {
 		const secret = groups.find((g) => typeof g === "string" && g.length >= MIN_REDACT_LENGTH);
-		if (secret) return match.replace(secret, redactSecret(secret));
+		if (secret) return match.replace(secret, replacement(secret));
 		return match;
 	});
 	return redacted;
@@ -54,7 +62,7 @@ var init_redact = __esmMin((() => {
 	KEEP_PREFIX_LENGTH = 6;
 	KEEP_SUFFIX_LENGTH = 4;
 	DEFAULT_REDACT_PATTERNS = [
-		/\b[A-Z0-9_]*(?:KEY|TOKEN|SECRET|PASSWORD|PASSWD)\b\s*[=:]\s*(["']?)([^\s"'\\]+)\1/gi,
+		/\b[A-Z0-9_]*(?:KEY|TOKEN|SECRET|PASSWORD|PASSWD)\b\s*[=:]\s*((?:\\?["'])?)([^\s"'\\]+)\1/gi,
 		/"(?:apiKey|token|secret|password|passwd|accessToken|refreshToken|privateKey)"\s*:\s*"([^"]+)"/gi,
 		/(?:__Host-xopc-session|xopc-local-session)=([A-Za-z0-9_-]{43})/g,
 		/Authorization\s*[:=]\s*Bearer\s+([A-Za-z0-9._\-+=]+)/gi,
@@ -86,4 +94,4 @@ var init_redact = __esmMin((() => {
 }));
 //#endregion
 init_redact();
-export { init_redact, isLogRedactionEnabled, redactLogRecord, redactObject, redactPemBlock, redactSecret, redactSensitiveInfo };
+export { init_redact, isLogRedactionEnabled, redactLogRecord, redactObject, redactPemBlock, redactSecret, redactSensitiveInfo, redactSensitiveOutput };

package/dist/src/utils/logger.js

@@ -4,7 +4,7 @@ import { getLogDir, getLoggerConfig } from "./logger/config.js";
 import { getRuntimeLogStats } from "./logger/stats.js";
 import { flushAndClose, isLoggerShuttingDown, setShuttingDown } from "./logger/shutdown.js";
 import { cleanOldLogs, rotateLogs } from "./logger/rotation.js";
-import { isLogRedactionEnabled, redactObject, redactPemBlock, redactSecret, redactSensitiveInfo } from "./logger/redact.js";
+import { isLogRedactionEnabled, redactObject, redactPemBlock, redactSecret, redactSensitiveInfo, redactSensitiveOutput } from "./logger/redact.js";
 import { exportLog, flushExporters, getExporters, initializeExporters } from "./logger/exporters.js";
 import { configureAuditLog, getAuditConfig, logAuditEvent, logAuthEvent, logConfigChange, logDataAccess, logPermissionChange } from "./logger/audit.js";
 import { Pino as pino, baseLogger as logger, createExtensionLogger, createLogger, createModuleLogger, createServiceLogger, getLogLevel, init_logger as init_logger$1, isLevelEnabled, setLogLevel, withLogLevel } from "./logger/index.js";
@@ -14,4 +14,4 @@ var init_logger = __esmMin((() => {
 }));
 //#endregion
 init_logger();
-export { pino as Pino, logger as baseLogger, logger, cleanOldLogs, configureAuditLog, createExtensionLogger, createLogger, createModuleLogger, createServiceLogger, exportLog, flushAndClose, flushExporters, getAsyncLogContext, getAuditConfig, getExporters, getLogDir, getLogLevel, getLoggerConfig, getRuntimeLogStats, inboundCorrelationMetadataFromAsyncLogContext, init_logger, initializeExporters, isLevelEnabled, isLogRedactionEnabled, isLoggerShuttingDown, logAuditEvent, logAuthEvent, logConfigChange, logDataAccess, logPermissionChange, redactObject, redactPemBlock, redactSecret, redactSensitiveInfo, rotateLogs, runWithLogContext, setLogLevel, setShuttingDown, updateAsyncLogContext, withLogLevel };
+export { pino as Pino, logger as baseLogger, logger, cleanOldLogs, configureAuditLog, createExtensionLogger, createLogger, createModuleLogger, createServiceLogger, exportLog, flushAndClose, flushExporters, getAsyncLogContext, getAuditConfig, getExporters, getLogDir, getLogLevel, getLoggerConfig, getRuntimeLogStats, inboundCorrelationMetadataFromAsyncLogContext, init_logger, initializeExporters, isLevelEnabled, isLogRedactionEnabled, isLoggerShuttingDown, logAuditEvent, logAuthEvent, logConfigChange, logDataAccess, logPermissionChange, redactObject, redactPemBlock, redactSecret, redactSensitiveInfo, redactSensitiveOutput, rotateLogs, runWithLogContext, setLogLevel, setShuttingDown, updateAsyncLogContext, withLogLevel };

package/dist/src/voice/realtime/memory-context.js

@@ -2,7 +2,7 @@ import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
 import { getSessionMetadata } from "../../storage/sqlite/session-read-repository.js";
 import { init_session_repository } from "../../storage/sqlite/session-repository.js";
-import { getSessionConfig } from "../../storage/sqlite/config-repository.js";
+import { getSessionConfig, init_config_repository } from "../../storage/sqlite/config-repository.js";
 import { getConversationRouting } from "../../storage/sqlite/conversation-repository.js";
 import { getConversation } from "../../routing/agent-session-key.js";
 import { init_session_key } from "../../routing/session-key.js";
@@ -14,6 +14,7 @@ import { stripRuntimeContextFromUserMessage } from "../../session/user-message-d
 import { buildExecutionContext } from "../../agent/context/execution-context.js";
 //#region src/voice/realtime/memory-context.ts
 init_session_key();
+init_config_repository();
 init_session_repository();
 init_logger();
 const log = createLogger("Voice:Memory");

package/dist/src/voice/realtime/persona-context.js

@@ -1,6 +1,6 @@
 import { init_agent_scope, resolveAgentProfileDir } from "../../agent/agent-scope.js";
-import { resolveEffectiveAgentProfileForSession } from "../../config/agent-profile.js";
 import { DEFAULT_IDENTITY_FILENAME, DEFAULT_SOUL_FILENAME } from "../../agent/context/workspace.js";
+import { resolveEffectiveAgentProfileForSession } from "../../config/agent-profile.js";
 import { loadProfileBootstrapFiles } from "../../agent/bootstrap/load-bootstrap-files.js";
 import { join } from "node:path";
 import { statSync } from "node:fs";
@@ -85,18 +85,18 @@ function fileSignature(profileDir) {
 	}).join("|");
 }
 function profileVersion(config, conversationId) {
-	const profile = resolveEffectiveAgentProfileForSession(config, conversationId);
+	const profile = resolveEffectiveAgentProfileForSession(conversationId);
 	return JSON.stringify({
 		agentId: profile.agentId,
 		name: profile.config.profile?.name,
 		customInstructions: profile.customInstructions,
-		profileDir: resolveAgentProfileDir(config, profile.agentId)
+		profileDir: resolveAgentProfileDir(profile.agentId)
 	});
 }
 function buildVoicePersonaContext(input) {
 	const config = input.getConfig();
-	const profile = resolveEffectiveAgentProfileForSession(config, input.conversationId);
-	const profileDir = resolveAgentProfileDir(config, profile.agentId);
+	const profile = resolveEffectiveAgentProfileForSession(input.conversationId);
+	const profileDir = resolveAgentProfileDir(profile.agentId);
 	const files = loadProfileBootstrapFiles(profileDir);
 	const identity = files.find((file) => file.name === "IDENTITY.md" && !file.missing)?.content;
 	const soul = files.find((file) => file.name === "SOUL.md" && !file.missing)?.content;
@@ -114,7 +114,7 @@ function buildVoicePersonaContext(input) {
 		isCurrent: () => {
 			try {
 				const currentConfig = input.getConfig();
-				const currentDir = resolveAgentProfileDir(currentConfig, resolveEffectiveAgentProfileForSession(currentConfig, input.conversationId).agentId);
+				const currentDir = resolveAgentProfileDir(resolveEffectiveAgentProfileForSession(input.conversationId).agentId);
 				return profileVersion(currentConfig, input.conversationId) === version && currentDir === profileDir && fileSignature(currentDir) === signature;
 			} catch {
 				return false;

package/dist/src/voice/tts/audio.js

@@ -2,8 +2,8 @@ import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
 import { join } from "path";
 import { unlink, writeFile } from "fs/promises";
-import { tmpdir } from "os";
 import { spawn } from "child_process";
+import { tmpdir } from "os";
 //#region src/voice/tts/audio.ts
 /**
 * Audio Compression Utilities

package/dist/src/work-discovery/analyzer.js

@@ -170,7 +170,7 @@ function lowConfidenceResult(snapshot, question, conversationStarter) {
 	};
 }
 async function analyzeWorkContext(input) {
-	const modelRef = getAgentDefaultModelRef(input.config);
+	const modelRef = getAgentDefaultModelRef();
 	if (!modelRef) throw new Error("No default model configured");
 	if (input.snapshot.documents.length === 0 && !input.snapshot.git?.changedPaths.length) return {
 		modelRef,
@@ -292,7 +292,7 @@ function understandingBatches(items) {
 	return batches;
 }
 async function analyzeUnderstandingBatch(input) {
-	const modelRef = getAgentDefaultModelRef(input.config);
+	const modelRef = getAgentDefaultModelRef();
 	if (!modelRef) throw new Error("No default model configured");
 	const prompt = [
 		"Analyze one bounded batch from a source the user explicitly chose to connect.",
@@ -399,7 +399,7 @@ function mergeWorkThreadCandidates(candidates) {
 	return [...merged.values()];
 }
 async function analyzeUnderstandingSources(input) {
-	const modelRef = getAgentDefaultModelRef(input.config);
+	const modelRef = getAgentDefaultModelRef();
 	if (!modelRef) throw new Error("No default model configured");
 	const remainingBySource = /* @__PURE__ */ new Map();
 	const items = input.items.filter((item) => item.sensitivity !== "secret" && item.sensitivity !== "regulated").slice(0, 150).map((item) => {

package/dist/src/work-discovery/investigator.js

@@ -99,7 +99,7 @@ function metadataForModel(snapshot) {
 	};
 }
 async function chooseAction(input) {
-	const modelRef = getAgentDefaultModelRef(input.config);
+	const modelRef = getAgentDefaultModelRef();
 	if (!modelRef) throw new Error("No default model configured");
 	const evidence = input.runtimeEvidence.slice(-16).map((item) => ({
 		evidenceId: item.record.id,