@xopcai/xopc 0.0.332 → 0.0.333

package/dist/src/storage/sqlite/migrations/215_scene_execution_adapters.sql

@@ -0,0 +1,6 @@
+-- Direct cutover: task-backed scenes are claimed by the task execution adapter.
+-- Existing activations keep their template identity; no compatibility runtime remains.
+UPDATE scene_template_versions
+SET manifest_json = json_set(manifest_json, '$.execution.kind', 'task'),
+    content_hash = '4e0e6b0bfb597c06c81e34898f64af6b45b6d8705b65d1f4665d8027cddf5406'
+WHERE template_key = 'task-follow-up' AND version = '1.0.0';

package/dist/src/storage/sqlite/migrations/216_remove_scene_model_usage.sql

@@ -0,0 +1 @@
+DROP TABLE IF EXISTS scene_model_usage;

package/dist/src/storage/sqlite/migrations/217_remove_legacy_memory_tables.sql

@@ -0,0 +1,4 @@
+DROP TABLE IF EXISTS memory_relations;
+DROP TABLE IF EXISTS memory_fts;
+DROP TABLE IF EXISTS memory_chunks;
+DROP TABLE IF EXISTS memory_files;

package/dist/src/storage/sqlite/migrations/218_core_relation_indexes.sql

@@ -0,0 +1,26 @@
+CREATE INDEX idx_task_runs_contract
+  ON task_runs(task_id, contract_version);
+CREATE INDEX idx_task_runs_conversation
+  ON task_runs(conversation_id);
+CREATE INDEX idx_task_runs_parent
+  ON task_runs(parent_run_id);
+CREATE INDEX idx_task_runs_retry
+  ON task_runs(retry_of_run_id);
+CREATE INDEX idx_task_runs_context_snapshot
+  ON task_runs(context_snapshot_id);
+CREATE INDEX idx_task_run_feedback_run
+  ON task_run_feedback(run_id);
+CREATE INDEX idx_work_discovery_runs_conversation
+  ON work_discovery_runs(conversation_id);
+CREATE INDEX idx_connector_execution_audit_connection
+  ON connector_execution_audit(connection_id);
+CREATE INDEX idx_connector_execution_audit_installation
+  ON connector_execution_audit(installation_id);
+CREATE INDEX idx_connector_learning_jobs_connection
+  ON connector_learning_jobs(connection_id);
+CREATE INDEX idx_connector_approvals_connection
+  ON connector_approvals(connection_id);
+CREATE INDEX idx_knowledge_source_changes_item
+  ON knowledge_source_changes(source_item_id);
+CREATE INDEX idx_notification_deliveries_device
+  ON notification_deliveries(device_id);

package/dist/src/storage/sqlite/migrations/219_json_contracts.sql

@@ -0,0 +1,123 @@
+CREATE TABLE automations_next (
+  automation_id TEXT PRIMARY KEY,
+  name TEXT NOT NULL,
+  description TEXT,
+  enabled INTEGER NOT NULL,
+  trigger_json TEXT NOT NULL CHECK(json_valid(trigger_json)),
+  action_json TEXT NOT NULL CHECK(json_valid(action_json)),
+  reliability_json TEXT CHECK(reliability_json IS NULL OR json_valid(reliability_json)),
+  state_json TEXT NOT NULL DEFAULT '{}' CHECK(json_valid(state_json)),
+  created_at_ms INTEGER NOT NULL,
+  updated_at_ms INTEGER NOT NULL,
+  safety_json TEXT CHECK(safety_json IS NULL OR json_valid(safety_json)),
+  project_id TEXT,
+  conversation_mode TEXT NOT NULL DEFAULT 'new_session'
+    CHECK(conversation_mode IN ('new_session', 'continuous')),
+  management_json TEXT CHECK(management_json IS NULL OR json_valid(management_json)),
+  delivery_json TEXT NOT NULL CHECK(json_valid(delivery_json))
+);
+
+INSERT INTO automations_next SELECT * FROM automations;
+DROP TABLE automations;
+ALTER TABLE automations_next RENAME TO automations;
+CREATE INDEX idx_automations_enabled ON automations(enabled, updated_at_ms DESC);
+CREATE INDEX idx_automations_updated ON automations(updated_at_ms DESC);
+CREATE INDEX idx_automations_project ON automations(project_id, updated_at_ms DESC);
+
+CREATE TABLE automation_events_next (
+  event_id TEXT PRIMARY KEY,
+  event_type TEXT NOT NULL,
+  schema_version INTEGER NOT NULL DEFAULT 1,
+  source TEXT NOT NULL,
+  subject_kind TEXT,
+  subject_id TEXT,
+  occurred_at_ms INTEGER NOT NULL,
+  ingested_at_ms INTEGER NOT NULL,
+  correlation_id TEXT NOT NULL,
+  causation_id TEXT,
+  root_event_id TEXT NOT NULL,
+  chain_depth INTEGER NOT NULL DEFAULT 0 CHECK(chain_depth BETWEEN 0 AND 32),
+  dedupe_key TEXT,
+  trust TEXT NOT NULL CHECK(trust IN ('system', 'user', 'connector', 'untrusted_webhook')),
+  payload_json TEXT NOT NULL CHECK(json_valid(payload_json)),
+  projection_status TEXT NOT NULL DEFAULT 'pending'
+    CHECK(projection_status IN ('pending', 'projecting', 'retrying', 'projected', 'dead_letter')),
+  projected_at_ms INTEGER,
+  projection_attempts INTEGER NOT NULL DEFAULT 0,
+  projection_next_attempt_at_ms INTEGER NOT NULL DEFAULT 0,
+  projection_error TEXT,
+  projection_owner TEXT,
+  projection_lease_until_ms INTEGER
+);
+
+INSERT INTO automation_events_next SELECT * FROM automation_events;
+DROP TABLE automation_events;
+ALTER TABLE automation_events_next RENAME TO automation_events;
+CREATE UNIQUE INDEX idx_automation_events_source_dedupe
+  ON automation_events(source, dedupe_key) WHERE dedupe_key IS NOT NULL;
+CREATE INDEX idx_automation_events_projection
+  ON automation_events(projection_status, projection_next_attempt_at_ms, ingested_at_ms);
+
+CREATE TABLE automation_result_deliveries_next (
+  delivery_id TEXT NOT NULL UNIQUE,
+  run_id TEXT NOT NULL,
+  destination_key TEXT NOT NULL,
+  kind TEXT NOT NULL,
+  status TEXT NOT NULL CHECK(status IN ('pending', 'delivering', 'retrying', 'delivered', 'dead_letter')),
+  config_json TEXT NOT NULL CHECK(json_valid(config_json)),
+  attempts INTEGER NOT NULL DEFAULT 0,
+  next_attempt_at_ms INTEGER NOT NULL,
+  last_error TEXT,
+  lease_owner TEXT,
+  lease_until_ms INTEGER,
+  created_at_ms INTEGER NOT NULL,
+  updated_at_ms INTEGER NOT NULL,
+  PRIMARY KEY(run_id, destination_key),
+  FOREIGN KEY(run_id) REFERENCES automation_results(run_id) ON DELETE CASCADE
+);
+
+INSERT INTO automation_result_deliveries_next SELECT * FROM automation_result_deliveries;
+DROP TABLE automation_result_deliveries;
+ALTER TABLE automation_result_deliveries_next RENAME TO automation_result_deliveries;
+CREATE INDEX idx_automation_result_deliveries_pending
+  ON automation_result_deliveries(status, next_attempt_at_ms, created_at_ms);
+
+CREATE TABLE ai_usage_events_next (
+  id TEXT PRIMARY KEY,
+  trace_id TEXT NOT NULL,
+  parent_event_id TEXT,
+  conversation_id TEXT,
+  run_id TEXT,
+  agent_id TEXT,
+  category TEXT NOT NULL,
+  operation TEXT NOT NULL,
+  trigger_kind TEXT NOT NULL,
+  reason_key TEXT NOT NULL,
+  provider TEXT NOT NULL,
+  model TEXT NOT NULL,
+  status TEXT NOT NULL CHECK(status IN ('running', 'succeeded', 'failed', 'aborted', 'unknown')),
+  started_at INTEGER NOT NULL,
+  finished_at INTEGER,
+  duration_ms INTEGER,
+  input_tokens INTEGER,
+  output_tokens INTEGER,
+  cache_read_tokens INTEGER,
+  cache_write_tokens INTEGER,
+  reasoning_tokens INTEGER,
+  total_tokens INTEGER,
+  estimated_cost_microusd INTEGER,
+  cost_source TEXT NOT NULL CHECK(cost_source IN ('model_catalog', 'local', 'unknown')),
+  pricing_snapshot_json TEXT CHECK(pricing_snapshot_json IS NULL OR json_valid(pricing_snapshot_json)),
+  error_summary TEXT,
+  created_at INTEGER NOT NULL,
+  updated_at INTEGER NOT NULL
+);
+
+INSERT INTO ai_usage_events_next SELECT * FROM ai_usage_events;
+DROP TABLE ai_usage_events;
+ALTER TABLE ai_usage_events_next RENAME TO ai_usage_events;
+CREATE INDEX idx_ai_usage_events_started ON ai_usage_events(started_at DESC, id DESC);
+CREATE INDEX idx_ai_usage_events_conversation ON ai_usage_events(conversation_id, started_at DESC);
+CREATE INDEX idx_ai_usage_events_trace ON ai_usage_events(trace_id, started_at ASC);
+CREATE INDEX idx_ai_usage_events_agent ON ai_usage_events(agent_id, started_at DESC);
+CREATE INDEX idx_ai_usage_events_category ON ai_usage_events(category, started_at DESC);

package/dist/src/storage/sqlite/migrations/220_normalize_timestamps.sql

@@ -0,0 +1,339 @@
+CREATE TABLE sessions_next (
+  conversation_id TEXT PRIMARY KEY,
+  agent_id TEXT NOT NULL,
+  active_transcript_id TEXT NOT NULL UNIQUE,
+  status TEXT NOT NULL DEFAULT 'active',
+  name TEXT,
+  tags_json TEXT NOT NULL DEFAULT '[]',
+  created_at INTEGER NOT NULL,
+  updated_at INTEGER NOT NULL,
+  last_accessed_at INTEGER NOT NULL,
+  session_started_at INTEGER,
+  last_interaction_at INTEGER,
+  source_channel TEXT NOT NULL DEFAULT '',
+  source_chat_id TEXT NOT NULL DEFAULT '',
+  session_type TEXT,
+  hidden_from_session_list INTEGER NOT NULL DEFAULT 0,
+  parent_conversation_id TEXT,
+  workflow_run_id TEXT,
+  workflow_definition_id TEXT,
+  workflow_agent_id TEXT,
+  workflow_agent_label TEXT,
+  routing_json TEXT,
+  custom_data_json TEXT,
+  message_count INTEGER NOT NULL DEFAULT 0,
+  estimated_tokens INTEGER NOT NULL DEFAULT 0,
+  compacted_count INTEGER NOT NULL DEFAULT 0,
+  last_flushed_at INTEGER,
+  flush_count INTEGER NOT NULL DEFAULT 0,
+  thinking_level TEXT,
+  verbose_level TEXT,
+  project_id TEXT
+);
+INSERT INTO sessions_next SELECT
+  conversation_id, agent_id, active_transcript_id, status, name, tags_json, created_at,
+  updated_at, last_accessed_at, session_started_at, last_interaction_at, source_channel,
+  source_chat_id, session_type, hidden_from_session_list, parent_conversation_id,
+  workflow_run_id, workflow_definition_id, workflow_agent_id, workflow_agent_label,
+  routing_json, custom_data_json, message_count, estimated_tokens, compacted_count,
+  CASE WHEN last_flushed_at IS NULL THEN NULL
+    WHEN typeof(last_flushed_at) IN ('integer', 'real') THEN CAST(last_flushed_at AS INTEGER)
+    ELSE CAST(ROUND((julianday(last_flushed_at) - 2440587.5) * 86400000) AS INTEGER) END,
+  flush_count, thinking_level, verbose_level, project_id
+FROM sessions;
+DROP TABLE sessions;
+ALTER TABLE sessions_next RENAME TO sessions;
+CREATE INDEX idx_sessions_agent_updated ON sessions(agent_id, updated_at DESC);
+CREATE INDEX idx_sessions_last_interaction ON sessions(last_interaction_at DESC);
+CREATE INDEX idx_sessions_parent ON sessions(parent_conversation_id);
+CREATE INDEX idx_sessions_project ON sessions(project_id, updated_at DESC);
+CREATE INDEX idx_sessions_source_channel ON sessions(source_channel);
+CREATE INDEX idx_sessions_status ON sessions(status);
+CREATE INDEX idx_sessions_type ON sessions(session_type);
+CREATE INDEX idx_sessions_workflow_run ON sessions(workflow_run_id);
+
+CREATE TABLE connector_catalog_entries_next (
+  connector_id TEXT PRIMARY KEY,
+  provider TEXT NOT NULL,
+  definition_json TEXT NOT NULL,
+  fetched_at INTEGER NOT NULL,
+  expires_at INTEGER
+);
+INSERT INTO connector_catalog_entries_next SELECT
+  connector_id, provider, definition_json,
+  CASE WHEN typeof(fetched_at) IN ('integer', 'real') THEN CAST(fetched_at AS INTEGER)
+    ELSE CAST(ROUND((julianday(fetched_at) - 2440587.5) * 86400000) AS INTEGER) END,
+  CASE WHEN expires_at IS NULL THEN NULL
+    WHEN typeof(expires_at) IN ('integer', 'real') THEN CAST(expires_at AS INTEGER)
+    ELSE CAST(ROUND((julianday(expires_at) - 2440587.5) * 86400000) AS INTEGER) END
+FROM connector_catalog_entries;
+DROP TABLE connector_catalog_entries;
+ALTER TABLE connector_catalog_entries_next RENAME TO connector_catalog_entries;
+CREATE INDEX idx_connector_catalog_provider ON connector_catalog_entries(provider, fetched_at DESC);
+
+CREATE TABLE connector_installations_next (
+  id TEXT PRIMARY KEY,
+  connector_id TEXT NOT NULL,
+  principal_id TEXT NOT NULL,
+  enabled INTEGER NOT NULL DEFAULT 1 CHECK(enabled IN (0, 1)),
+  allowed_agent_ids_json TEXT NOT NULL DEFAULT '[]',
+  max_scope TEXT NOT NULL DEFAULT 'read' CHECK(max_scope IN ('read', 'write', 'admin')),
+  confirmation_policy TEXT NOT NULL DEFAULT 'writes'
+    CHECK(confirmation_policy IN ('always', 'writes', 'admin', 'never')),
+  selected_account_ids_json TEXT NOT NULL DEFAULT '[]',
+  created_at INTEGER NOT NULL,
+  updated_at INTEGER NOT NULL,
+  UNIQUE(connector_id, principal_id)
+);
+INSERT INTO connector_installations_next SELECT
+  id, connector_id, principal_id, enabled, allowed_agent_ids_json, max_scope,
+  confirmation_policy, selected_account_ids_json,
+  CASE WHEN typeof(created_at) IN ('integer', 'real') THEN CAST(created_at AS INTEGER)
+    ELSE CAST(ROUND((julianday(created_at) - 2440587.5) * 86400000) AS INTEGER) END,
+  CASE WHEN typeof(updated_at) IN ('integer', 'real') THEN CAST(updated_at AS INTEGER)
+    ELSE CAST(ROUND((julianday(updated_at) - 2440587.5) * 86400000) AS INTEGER) END
+FROM connector_installations;
+DROP TABLE connector_installations;
+ALTER TABLE connector_installations_next RENAME TO connector_installations;
+CREATE INDEX idx_connector_installations_principal
+  ON connector_installations(principal_id, enabled, connector_id);
+
+CREATE TABLE connector_accounts_next (
+  id TEXT PRIMARY KEY,
+  connector_id TEXT NOT NULL,
+  principal_id TEXT NOT NULL,
+  identity_key TEXT,
+  identity_json TEXT NOT NULL DEFAULT '{}',
+  current_connection_id TEXT,
+  created_at INTEGER NOT NULL,
+  updated_at INTEGER NOT NULL,
+  label TEXT,
+  enabled INTEGER NOT NULL DEFAULT 1,
+  allowed_agent_ids_json TEXT,
+  backend_id TEXT,
+  runtime_instance_id TEXT
+);
+INSERT INTO connector_accounts_next SELECT
+  id, connector_id, principal_id, identity_key, identity_json, current_connection_id,
+  CASE WHEN typeof(created_at) IN ('integer', 'real') THEN CAST(created_at AS INTEGER)
+    ELSE CAST(ROUND((julianday(created_at) - 2440587.5) * 86400000) AS INTEGER) END,
+  CASE WHEN typeof(updated_at) IN ('integer', 'real') THEN CAST(updated_at AS INTEGER)
+    ELSE CAST(ROUND((julianday(updated_at) - 2440587.5) * 86400000) AS INTEGER) END,
+  label, enabled, allowed_agent_ids_json, backend_id, runtime_instance_id
+FROM connector_accounts;
+DROP TABLE connector_accounts;
+ALTER TABLE connector_accounts_next RENAME TO connector_accounts;
+CREATE UNIQUE INDEX idx_cli_account_identity
+  ON connector_accounts(principal_id, runtime_instance_id, identity_key)
+  WHERE runtime_instance_id IS NOT NULL AND identity_key IS NOT NULL;
+CREATE UNIQUE INDEX idx_connector_accounts_identity
+  ON connector_accounts(principal_id, backend_id, connector_id, identity_key)
+  WHERE identity_key IS NOT NULL;
+
+CREATE TABLE connector_connections_next (
+  id TEXT PRIMARY KEY,
+  installation_id TEXT REFERENCES connector_installations(id) ON DELETE SET NULL,
+  connector_id TEXT NOT NULL,
+  provider TEXT NOT NULL,
+  principal_id TEXT NOT NULL,
+  provider_connection_id TEXT NOT NULL,
+  alias TEXT,
+  identity_json TEXT NOT NULL DEFAULT '{}',
+  status TEXT NOT NULL DEFAULT 'unknown'
+    CHECK(status IN ('pending', 'active', 'expired', 'failed', 'revoked', 'disabled', 'unknown')),
+  is_default INTEGER NOT NULL DEFAULT 0 CHECK(is_default IN (0, 1)),
+  connected_at INTEGER,
+  expires_at INTEGER,
+  last_error TEXT,
+  metadata_json TEXT NOT NULL DEFAULT '{}',
+  created_at INTEGER NOT NULL,
+  updated_at INTEGER NOT NULL,
+  account_id TEXT REFERENCES connector_accounts(id) ON DELETE CASCADE
+);
+INSERT INTO connector_connections_next SELECT
+  id, installation_id, connector_id, provider, principal_id, provider_connection_id,
+  alias, identity_json, status, is_default,
+  CASE WHEN connected_at IS NULL THEN NULL
+    WHEN typeof(connected_at) IN ('integer', 'real') THEN CAST(connected_at AS INTEGER)
+    ELSE CAST(ROUND((julianday(connected_at) - 2440587.5) * 86400000) AS INTEGER) END,
+  CASE WHEN expires_at IS NULL THEN NULL
+    WHEN typeof(expires_at) IN ('integer', 'real') THEN CAST(expires_at AS INTEGER)
+    ELSE CAST(ROUND((julianday(expires_at) - 2440587.5) * 86400000) AS INTEGER) END,
+  last_error, metadata_json,
+  CASE WHEN typeof(created_at) IN ('integer', 'real') THEN CAST(created_at AS INTEGER)
+    ELSE CAST(ROUND((julianday(created_at) - 2440587.5) * 86400000) AS INTEGER) END,
+  CASE WHEN typeof(updated_at) IN ('integer', 'real') THEN CAST(updated_at AS INTEGER)
+    ELSE CAST(ROUND((julianday(updated_at) - 2440587.5) * 86400000) AS INTEGER) END,
+  account_id
+FROM connector_connections;
+DROP TABLE connector_connections;
+ALTER TABLE connector_connections_next RENAME TO connector_connections;
+CREATE INDEX idx_connector_connections_account ON connector_connections(account_id);
+CREATE INDEX idx_connector_connections_principal
+  ON connector_connections(principal_id, connector_id, status);
+CREATE UNIQUE INDEX idx_connector_connections_provider_backend
+  ON connector_connections(provider, COALESCE(json_extract(metadata_json, '$.backendId'), ''), provider_connection_id);
+
+CREATE TABLE connector_action_metadata_next (
+  connector_id TEXT NOT NULL,
+  action_id TEXT NOT NULL,
+  toolkit TEXT,
+  scope TEXT NOT NULL DEFAULT 'write' CHECK(scope IN ('read', 'write', 'admin')),
+  curated INTEGER NOT NULL DEFAULT 0 CHECK(curated IN (0, 1)),
+  input_schema_json TEXT,
+  schema_version TEXT,
+  cached_at INTEGER NOT NULL,
+  PRIMARY KEY(connector_id, action_id)
+);
+INSERT INTO connector_action_metadata_next SELECT
+  connector_id, action_id, toolkit, scope, curated, input_schema_json, schema_version,
+  CASE WHEN typeof(cached_at) IN ('integer', 'real') THEN CAST(cached_at AS INTEGER)
+    ELSE CAST(ROUND((julianday(cached_at) - 2440587.5) * 86400000) AS INTEGER) END
+FROM connector_action_metadata;
+DROP TABLE connector_action_metadata;
+ALTER TABLE connector_action_metadata_next RENAME TO connector_action_metadata;
+CREATE INDEX idx_connector_action_scope
+  ON connector_action_metadata(connector_id, scope, curated);
+
+CREATE TABLE connector_execution_audit_next (
+  id TEXT PRIMARY KEY,
+  installation_id TEXT REFERENCES connector_installations(id) ON DELETE SET NULL,
+  connection_id TEXT REFERENCES connector_connections(id) ON DELETE SET NULL,
+  connector_id TEXT NOT NULL,
+  principal_id TEXT NOT NULL,
+  agent_id TEXT,
+  conversation_id TEXT,
+  action_id TEXT NOT NULL,
+  scope TEXT NOT NULL CHECK(scope IN ('read', 'write', 'admin')),
+  decision TEXT NOT NULL CHECK(decision IN ('allowed', 'denied', 'confirmation_required')),
+  result_status TEXT NOT NULL CHECK(result_status IN ('success', 'error', 'not_executed')),
+  duration_ms INTEGER,
+  error_code TEXT,
+  created_at INTEGER NOT NULL
+);
+INSERT INTO connector_execution_audit_next SELECT
+  id, installation_id, connection_id, connector_id, principal_id, agent_id,
+  conversation_id, action_id, scope, decision, result_status, duration_ms, error_code,
+  CASE WHEN typeof(created_at) IN ('integer', 'real') THEN CAST(created_at AS INTEGER)
+    ELSE CAST(ROUND((julianday(created_at) - 2440587.5) * 86400000) AS INTEGER) END
+FROM connector_execution_audit;
+DROP TABLE connector_execution_audit;
+ALTER TABLE connector_execution_audit_next RENAME TO connector_execution_audit;
+CREATE INDEX idx_connector_audit_connector_time
+  ON connector_execution_audit(connector_id, created_at DESC);
+CREATE INDEX idx_connector_audit_principal_time
+  ON connector_execution_audit(principal_id, created_at DESC);
+CREATE INDEX idx_connector_execution_audit_connection
+  ON connector_execution_audit(connection_id);
+CREATE INDEX idx_connector_execution_audit_installation
+  ON connector_execution_audit(installation_id);
+
+CREATE TABLE connector_approvals_next (
+  id TEXT PRIMARY KEY,
+  principal_id TEXT NOT NULL,
+  connector_id TEXT NOT NULL,
+  connection_id TEXT REFERENCES connector_connections(id) ON DELETE SET NULL,
+  agent_id TEXT,
+  conversation_id TEXT,
+  action_id TEXT NOT NULL,
+  scope TEXT NOT NULL CHECK(scope IN ('read', 'write', 'admin')),
+  arguments_hash TEXT NOT NULL,
+  arguments_preview_json TEXT NOT NULL DEFAULT '{}',
+  status TEXT NOT NULL DEFAULT 'pending'
+    CHECK(status IN ('pending', 'approved', 'denied', 'expired', 'consumed')),
+  expires_at INTEGER NOT NULL,
+  created_at INTEGER NOT NULL,
+  decided_at INTEGER,
+  consumed_at INTEGER,
+  wait_id TEXT
+);
+INSERT INTO connector_approvals_next SELECT
+  id, principal_id, connector_id, connection_id, agent_id, conversation_id, action_id,
+  scope, arguments_hash, arguments_preview_json, status,
+  CASE WHEN typeof(expires_at) IN ('integer', 'real') THEN CAST(expires_at AS INTEGER)
+    ELSE CAST(ROUND((julianday(expires_at) - 2440587.5) * 86400000) AS INTEGER) END,
+  CASE WHEN typeof(created_at) IN ('integer', 'real') THEN CAST(created_at AS INTEGER)
+    ELSE CAST(ROUND((julianday(created_at) - 2440587.5) * 86400000) AS INTEGER) END,
+  CASE WHEN decided_at IS NULL THEN NULL
+    WHEN typeof(decided_at) IN ('integer', 'real') THEN CAST(decided_at AS INTEGER)
+    ELSE CAST(ROUND((julianday(decided_at) - 2440587.5) * 86400000) AS INTEGER) END,
+  CASE WHEN consumed_at IS NULL THEN NULL
+    WHEN typeof(consumed_at) IN ('integer', 'real') THEN CAST(consumed_at AS INTEGER)
+    ELSE CAST(ROUND((julianday(consumed_at) - 2440587.5) * 86400000) AS INTEGER) END,
+  wait_id
+FROM connector_approvals;
+DROP TABLE connector_approvals;
+ALTER TABLE connector_approvals_next RENAME TO connector_approvals;
+CREATE INDEX idx_connector_approvals_connection ON connector_approvals(connection_id);
+CREATE INDEX idx_connector_approvals_pending
+  ON connector_approvals(principal_id, status, expires_at, created_at DESC);
+CREATE INDEX idx_connector_approvals_session
+  ON connector_approvals(conversation_id, status, created_at DESC);
+
+CREATE TABLE connector_webhook_deliveries_next (
+  id TEXT PRIMARY KEY,
+  provider TEXT NOT NULL,
+  payload_hash TEXT NOT NULL,
+  status TEXT NOT NULL DEFAULT 'processing'
+    CHECK(status IN ('pending', 'processing', 'processed')),
+  attempts INTEGER NOT NULL DEFAULT 1,
+  received_at INTEGER NOT NULL,
+  processing_at INTEGER,
+  processed_at INTEGER,
+  last_error TEXT
+);
+INSERT INTO connector_webhook_deliveries_next SELECT
+  id, provider, payload_hash, status, attempts,
+  CASE WHEN typeof(received_at) IN ('integer', 'real') THEN CAST(received_at AS INTEGER)
+    ELSE CAST(ROUND((julianday(received_at) - 2440587.5) * 86400000) AS INTEGER) END,
+  CASE WHEN processing_at IS NULL THEN NULL
+    WHEN typeof(processing_at) IN ('integer', 'real') THEN CAST(processing_at AS INTEGER)
+    ELSE CAST(ROUND((julianday(processing_at) - 2440587.5) * 86400000) AS INTEGER) END,
+  CASE WHEN processed_at IS NULL THEN NULL
+    WHEN typeof(processed_at) IN ('integer', 'real') THEN CAST(processed_at AS INTEGER)
+    ELSE CAST(ROUND((julianday(processed_at) - 2440587.5) * 86400000) AS INTEGER) END,
+  last_error
+FROM connector_webhook_deliveries;
+DROP TABLE connector_webhook_deliveries;
+ALTER TABLE connector_webhook_deliveries_next RENAME TO connector_webhook_deliveries;
+CREATE INDEX idx_connector_webhook_deliveries_status
+  ON connector_webhook_deliveries(provider, status, received_at DESC);
+
+CREATE TABLE user_trust_policies_next (
+  principal_id TEXT PRIMARY KEY,
+  default_action_level TEXT NOT NULL DEFAULT 'confirm'
+    CHECK(default_action_level IN ('observe', 'suggest', 'confirm', 'auto')),
+  updated_at INTEGER NOT NULL
+);
+INSERT INTO user_trust_policies_next SELECT
+  principal_id, default_action_level,
+  CASE WHEN typeof(updated_at) IN ('integer', 'real') THEN CAST(updated_at AS INTEGER)
+    ELSE CAST(ROUND((julianday(updated_at) - 2440587.5) * 86400000) AS INTEGER) END
+FROM user_trust_policies;
+DROP TABLE user_trust_policies;
+ALTER TABLE user_trust_policies_next RENAME TO user_trust_policies;
+
+CREATE TABLE connector_backends_next (
+  id TEXT PRIMARY KEY,
+  mode TEXT NOT NULL CHECK(mode IN ('managed', 'byok')),
+  label TEXT NOT NULL,
+  credential_ref TEXT,
+  credential_source TEXT NOT NULL DEFAULT 'stored'
+    CHECK(credential_source IN ('stored', 'environment')),
+  verified_at INTEGER,
+  active INTEGER NOT NULL DEFAULT 0,
+  created_at INTEGER NOT NULL
+);
+INSERT INTO connector_backends_next SELECT
+  id, mode, label, credential_ref, credential_source,
+  CASE WHEN verified_at IS NULL THEN NULL
+    WHEN typeof(verified_at) IN ('integer', 'real') THEN CAST(verified_at AS INTEGER)
+    ELSE CAST(ROUND((julianday(verified_at) - 2440587.5) * 86400000) AS INTEGER) END,
+  active,
+  CASE WHEN typeof(created_at) IN ('integer', 'real') THEN CAST(created_at AS INTEGER)
+    ELSE CAST(ROUND((julianday(created_at) - 2440587.5) * 86400000) AS INTEGER) END
+FROM connector_backends;
+DROP TABLE connector_backends;
+ALTER TABLE connector_backends_next RENAME TO connector_backends;
+CREATE UNIQUE INDEX idx_connector_backend_active
+  ON connector_backends(active) WHERE active = 1;

package/dist/src/storage/sqlite/migrations/221_ai_usage_retention_index.sql

@@ -0,0 +1,2 @@
+CREATE INDEX idx_ai_usage_events_provider_model
+  ON ai_usage_events(provider, model, started_at DESC);

package/dist/src/storage/sqlite/migrations/222_session_config_authority.sql

@@ -0,0 +1,13 @@
+INSERT INTO session_config (
+  conversation_id, thinking_level, verbose_level, updated_at
+)
+SELECT conversation_id, thinking_level, verbose_level, updated_at
+FROM sessions
+WHERE thinking_level IS NOT NULL OR verbose_level IS NOT NULL
+ON CONFLICT(conversation_id) DO UPDATE SET
+  thinking_level = COALESCE(session_config.thinking_level, excluded.thinking_level),
+  verbose_level = COALESCE(session_config.verbose_level, excluded.verbose_level),
+  updated_at = MAX(session_config.updated_at, excluded.updated_at);
+
+ALTER TABLE sessions DROP COLUMN thinking_level;
+ALTER TABLE sessions DROP COLUMN verbose_level;

package/dist/src/storage/sqlite/migrations/runner.d.ts

@@ -3,7 +3,7 @@ import type { ApplyMigrationsOptions } from './types.js';
 /** Baseline schema version applied from schema.sql on first open. */
 export declare const XOPC_DB_BASELINE_SCHEMA_VERSION = 165;
 /** Latest schema version this release supports (increment when adding migrations). */
-export declare const XOPC_DB_SCHEMA_VERSION = 208;
+export declare const XOPC_DB_SCHEMA_VERSION = 222;
 export declare function resolveMigrationsDir(override?: string): string;
 /**
  * Apply sequential SQL migrations from (currentVersion + 1) through targetVersion.

package/dist/src/storage/sqlite/migrations/runner.js

@@ -26,7 +26,7 @@ function applySingleMigration(db, migration, discardOldScenes = false) {
 		targetVersion: migration.targetVersion,
 		file: migration.filename
 	}, "Applying SQLite migration");
-	const requiresForeignKeyPause = discardOldScenes || migration.targetVersion === 179 || migration.targetVersion === 182 || migration.targetVersion === 188 || migration.targetVersion === 200 || migration.targetVersion === 201 || migration.targetVersion === 203;
+	const requiresForeignKeyPause = discardOldScenes || migration.targetVersion === 179 || migration.targetVersion === 182 || migration.targetVersion === 188 || migration.targetVersion === 200 || migration.targetVersion === 201 || migration.targetVersion === 203 || migration.targetVersion === 219 || migration.targetVersion === 220;
 	const foreignKeysEnabled = Number(db.prepare("PRAGMA foreign_keys").get()?.foreign_keys) === 1;
 	if (requiresForeignKeyPause) db.exec("PRAGMA foreign_keys = OFF");
 	let transactionStarted = false;
@@ -57,7 +57,7 @@ function applySingleMigration(db, migration, discardOldScenes = false) {
 */
 function applyPendingMigrations(db, options = {}) {
 	db.function("xopc_operation_id", () => currentOperationId() ?? null);
-	const targetVersion = options.targetVersion ?? 208;
+	const targetVersion = options.targetVersion ?? 222;
 	let currentVersion = readSchemaVersion(db);
 	if (currentVersion > targetVersion) throw new DatabaseSchemaTooNewError(currentVersion, targetVersion);
 	if (!options.migrationsDir && currentVersion < 165) throw new DatabaseSchemaTooOldError(currentVersion, 165);
@@ -95,7 +95,7 @@ function applyPendingMigrations(db, options = {}) {
 }
 /** Inspect schema version without mutating the database. */
 function inspectSchemaMigrationStatus(db, options = {}) {
-	const appVersion = options.targetVersion ?? 208;
+	const appVersion = options.targetVersion ?? 222;
 	const dbVersion = readSchemaVersion(db);
 	if (dbVersion > appVersion) return {
 		dbVersion,
@@ -137,7 +137,7 @@ var init_runner = __esmMin((() => {
 	init_errors();
 	log = createLogger("Sqlite:Migrations");
 	XOPC_DB_BASELINE_SCHEMA_VERSION = 165;
-	XOPC_DB_SCHEMA_VERSION = 208;
+	XOPC_DB_SCHEMA_VERSION = 222;
 }));
 //#endregion
 init_runner();

package/dist/src/storage/sqlite/row-mappers.d.ts

@@ -29,10 +29,8 @@ export type SessionRow = {
     message_count: number;
     estimated_tokens: number;
     compacted_count: number;
-    last_flushed_at: string | null;
+    last_flushed_at: number | null;
     flush_count: number;
-    thinking_level: string | null;
-    verbose_level: string | null;
     cwd?: string | null;
 };
 export type TranscriptEntryRow = {
@@ -59,7 +57,7 @@ export type SessionConfigRow = {
     updated_at: number;
 };
 export declare function sessionRowToMetadata(conversationId: string, row: SessionRow): SessionMetadata;
-export declare function metadataToSessionInsert(conversationId: string, transcriptId: string, metadata: SessionMetadata, thinkingLevel?: string | null, verboseLevel?: string | null): {
+export declare function metadataToSessionInsert(conversationId: string, transcriptId: string, metadata: SessionMetadata): {
     conversationId: string;
     agentId: string;
     transcriptId: string;
@@ -86,10 +84,8 @@ export declare function metadataToSessionInsert(conversationId: string, transcri
     messageCount: number;
     estimatedTokens: number;
     compactedCount: number;
-    lastFlushedAt: string | null;
+    lastFlushedAt: number | null;
     flushCount: number;
-    thinkingLevel: string | null;
-    verboseLevel: string | null;
 };
 export declare function sessionConfigRowToConfig(row: SessionConfigRow): SessionAgentConfig;
 export declare function transcriptEntryRowToStoredRow(row: TranscriptEntryRow): TranscriptStoredRow;

package/dist/src/storage/sqlite/row-mappers.js

@@ -2,6 +2,7 @@ import { __esmMin } from "../../../_virtual/_rolldown/runtime.js";
 import { init_session_context_for_llm, isTranscriptContextEntry, isTranscriptSideChatOriginEntry } from "../../session/session-context-for-llm.js";
 import "../../session/types.js";
 import { buildDefaultSessionMetadata, init_session_metadata } from "./session-metadata.js";
+import { init_timestamps, optionalTimestampToIso, optionalTimestampToMs } from "./timestamps.js";
 //#region src/storage/sqlite/row-mappers.ts
 function parseJson(raw) {
 	if (!raw?.trim()) return;
@@ -50,7 +51,7 @@ function sessionRowToMetadata(conversationId, row) {
 		messageCount: row.message_count,
 		estimatedTokens: row.estimated_tokens,
 		compactedCount: row.compacted_count,
-		lastFlushedAt: row.last_flushed_at ?? void 0,
+		lastFlushedAt: optionalTimestampToIso(row.last_flushed_at),
 		flushCount: row.flush_count,
 		transcriptId: row.active_transcript_id,
 		cwd: row.cwd ?? void 0,
@@ -61,7 +62,7 @@ function sessionRowToMetadata(conversationId, row) {
 		}
 	};
 }
-function metadataToSessionInsert(conversationId, transcriptId, metadata, thinkingLevel, verboseLevel) {
+function metadataToSessionInsert(conversationId, transcriptId, metadata) {
 	const now = Date.now();
 	const agentId = (metadata.agentId || metadata.routing?.agentId)?.trim().toLowerCase();
 	if (!agentId) throw new Error("Creating a conversation requires an explicit agent ID");
@@ -92,10 +93,8 @@ function metadataToSessionInsert(conversationId, transcriptId, metadata, thinkin
 		messageCount: metadata.messageCount,
 		estimatedTokens: metadata.estimatedTokens,
 		compactedCount: metadata.compactedCount,
-		lastFlushedAt: metadata.lastFlushedAt ?? null,
-		flushCount: metadata.flushCount ?? 0,
-		thinkingLevel: thinkingLevel ?? null,
-		verboseLevel: verboseLevel ?? null
+		lastFlushedAt: optionalTimestampToMs(metadata.lastFlushedAt),
+		flushCount: metadata.flushCount ?? 0
 	};
 }
 function sessionConfigRowToConfig(row) {
@@ -187,6 +186,7 @@ function buildGlobalSessionStats(sessions) {
 var init_row_mappers = __esmMin((() => {
 	init_session_context_for_llm();
 	init_session_metadata();
+	init_timestamps();
 }));
 //#endregion
 init_row_mappers();

package/dist/src/storage/sqlite/scenes-schema.d.ts

@@ -1,6 +1,6 @@
 import type { DatabaseSync } from 'node:sqlite';
 export declare const NOTIFICATION_LEDGER_TABLES: readonly ["notification_browser_keys", "notification_browser_subscriptions", "notification_dispatches", "notification_result_outbox", "notification_attention_budget", "notification_digest_queue", "notification_digests", "notification_digest_members", "notification_dispatch_decisions", "notification_browser_probes", "notification_presence"];
-export declare const SCENE_TABLES: readonly ["scene_source_health", "scene_activation_requests", "scene_activations", "scene_context_snapshots", "scene_events", "scene_feedback", "scene_feedback_history", "scene_intent_events", "scene_model_reservations", "scene_notes", "scene_outcomes", "scene_preferences", "scene_presentations", "scene_runs", "scene_schedule_cursors", "scene_template_versions", "scene_trigger_intents", "scene_work_items", "scene_mail_sources", "scene_model_usage", "scene_connector_usage"];
+export declare const SCENE_TABLES: readonly ["scene_source_health", "scene_activation_requests", "scene_activations", "scene_context_snapshots", "scene_events", "scene_feedback", "scene_feedback_history", "scene_intent_events", "scene_model_reservations", "scene_notes", "scene_outcomes", "scene_preferences", "scene_presentations", "scene_runs", "scene_schedule_cursors", "scene_template_versions", "scene_trigger_intents", "scene_work_items", "scene_mail_sources", "scene_connector_usage"];
 /** Installs fresh tables; the normal versioned upgrade owns existing databases. */
 export declare function installSceneSchema(db: DatabaseSync): void;
 export declare function installNotificationLedgerSchema(db: DatabaseSync): void;