@xopcai/xopc 0.0.332 → 0.0.334

package/dist/src/automations/storage/automation-run-repository.js

@@ -50,8 +50,15 @@ function trimRuns(db, automationId) {
 	const countRow = db.prepare(`SELECT COUNT(*) AS count FROM automation_runs WHERE automation_id = ?`).get(automationId);
 	if (countRow.count <= MAX_RUNS_PER_AUTOMATION) return;
 	const staleRunIds = db.prepare(`SELECT run_id FROM automation_runs WHERE automation_id = ? AND status NOT IN ('queued', 'running', 'cancelling')
+       AND NOT EXISTS (
+         SELECT 1 FROM automation_result_deliveries d
+         WHERE d.run_id = automation_runs.run_id AND d.status <> 'delivered'
+       )
        ORDER BY created_at_ms ASC LIMIT ?`).all(automationId, countRow.count - TRIM_TO_RUNS);
 	for (const { run_id: runId } of staleRunIds) {
+		db.prepare("DELETE FROM automation_event_deliveries WHERE run_id = ?").run(runId);
+		db.prepare("DELETE FROM automation_result_deliveries WHERE run_id = ?").run(runId);
+		db.prepare("DELETE FROM automation_results WHERE run_id = ?").run(runId);
 		db.prepare("DELETE FROM automation_run_requests WHERE run_id = ?").run(runId);
 		db.prepare(`DELETE FROM automation_run_events WHERE run_id = ?`).run(runId);
 		db.prepare(`DELETE FROM automation_runs WHERE run_id = ?`).run(runId);
@@ -175,11 +182,29 @@ function listAutomationRunsForProductEvent(options) {
 }
 function deleteAutomationRunsForAutomation(automationId) {
 	runSqliteWriteTransaction((db) => {
+		db.prepare(`DELETE FROM automation_event_deliveries
+      WHERE run_id IN (SELECT run_id FROM automation_runs WHERE automation_id = ?)`).run(automationId);
+		db.prepare(`DELETE FROM automation_result_deliveries
+      WHERE run_id IN (SELECT run_id FROM automation_runs WHERE automation_id = ?)`).run(automationId);
+		db.prepare(`DELETE FROM automation_results
+      WHERE run_id IN (SELECT run_id FROM automation_runs WHERE automation_id = ?)`).run(automationId);
 		db.prepare("DELETE FROM automation_run_requests WHERE run_id IN (SELECT run_id FROM automation_runs WHERE automation_id = ?)").run(automationId);
 		db.prepare(`DELETE FROM automation_run_events WHERE automation_id = ?`).run(automationId);
 		db.prepare(`DELETE FROM automation_runs WHERE automation_id = ?`).run(automationId);
 	});
 }
+function pruneAutomationHistory(cutoffMs = Date.now() - 720 * 60 * 6e4) {
+	return runSqliteWriteTransaction((db) => {
+		const result = db.prepare(`DELETE FROM automation_events
+      WHERE projection_status = 'projected' AND projected_at_ms < ?
+        AND NOT EXISTS (
+          SELECT 1 FROM automation_event_deliveries d
+          WHERE d.event_id = automation_events.event_id
+            AND d.status IN ('pending', 'retrying', 'queued', 'dead_letter')
+        )`).run(cutoffMs);
+		return Number(result.changes);
+	});
+}
 function markAutomationRunRead(runId, readAtMs = Date.now()) {
 	return getSqliteDatabase().prepare(`UPDATE automation_runs SET read_at_ms = COALESCE(read_at_ms, ?) WHERE run_id = ? AND ended_at_ms IS NOT NULL`).run(readAtMs, runId).changes > 0;
 }
@@ -196,4 +221,4 @@ function markAllAutomationRunsRead(options) {
 	return Number(result.changes);
 }
 //#endregion
-export { appendAutomationRunEvent, deleteAutomationRunsForAutomation, getAutomationRun, getAutomationRunRequest, listAutomationRunEvents, listAutomationRuns, listAutomationRunsForProductEvent, listUnfinishedAutomationRuns, markAllAutomationRunsRead, markAutomationRunRead, saveAutomationRun, saveAutomationRunRequest, touchAutomationRunLease };
+export { appendAutomationRunEvent, deleteAutomationRunsForAutomation, getAutomationRun, getAutomationRunRequest, listAutomationRunEvents, listAutomationRuns, listAutomationRunsForProductEvent, listUnfinishedAutomationRuns, markAllAutomationRunsRead, markAutomationRunRead, pruneAutomationHistory, saveAutomationRun, saveAutomationRunRequest, touchAutomationRunLease };

package/dist/src/automations/storage/index.js

@@ -1,3 +1,3 @@
 import { deleteAutomation, getAutomation, getDeletedAutomationRevision, listAutomations, saveAutomation, saveAutomations } from "./automation-repository.js";
-import { appendAutomationRunEvent, deleteAutomationRunsForAutomation, getAutomationRun, getAutomationRunRequest, listAutomationRunEvents, listAutomationRuns, listAutomationRunsForProductEvent, listUnfinishedAutomationRuns, markAllAutomationRunsRead, markAutomationRunRead, saveAutomationRun, saveAutomationRunRequest, touchAutomationRunLease } from "./automation-run-repository.js";
-export { appendAutomationRunEvent, deleteAutomation, deleteAutomationRunsForAutomation, getAutomation, getAutomationRun, getAutomationRunRequest, getDeletedAutomationRevision, listAutomationRunEvents, listAutomationRuns, listAutomationRunsForProductEvent, listAutomations, listUnfinishedAutomationRuns, markAllAutomationRunsRead, markAutomationRunRead, saveAutomation, saveAutomationRun, saveAutomationRunRequest, saveAutomations, touchAutomationRunLease };
+import { appendAutomationRunEvent, deleteAutomationRunsForAutomation, getAutomationRun, getAutomationRunRequest, listAutomationRunEvents, listAutomationRuns, listAutomationRunsForProductEvent, listUnfinishedAutomationRuns, markAllAutomationRunsRead, markAutomationRunRead, pruneAutomationHistory, saveAutomationRun, saveAutomationRunRequest, touchAutomationRunLease } from "./automation-run-repository.js";
+export { appendAutomationRunEvent, deleteAutomation, deleteAutomationRunsForAutomation, getAutomation, getAutomationRun, getAutomationRunRequest, getDeletedAutomationRevision, listAutomationRunEvents, listAutomationRuns, listAutomationRunsForProductEvent, listAutomations, listUnfinishedAutomationRuns, markAllAutomationRunsRead, markAutomationRunRead, pruneAutomationHistory, saveAutomation, saveAutomationRun, saveAutomationRunRequest, saveAutomations, touchAutomationRunLease };

package/dist/src/automations/webhook-secrets.d.ts

@@ -0,0 +1 @@
+export declare function resolveAutomationWebhookSecret(secretId: string): string | undefined;

package/dist/src/automations/webhook-secrets.js

@@ -0,0 +1,16 @@
+//#region src/automations/webhook-secrets.ts
+function resolveAutomationWebhookSecret(secretId) {
+	const raw = process.env.XOPC_AUTOMATION_WEBHOOK_SECRETS?.trim();
+	if (!raw) return void 0;
+	let parsed;
+	try {
+		parsed = JSON.parse(raw);
+	} catch {
+		throw new Error("XOPC_AUTOMATION_WEBHOOK_SECRETS must be a JSON object");
+	}
+	if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) throw new Error("XOPC_AUTOMATION_WEBHOOK_SECRETS must be a JSON object");
+	const value = parsed[secretId];
+	return typeof value === "string" && value.length >= 16 ? value : void 0;
+}
+//#endregion
+export { resolveAutomationWebhookSecret };

package/dist/src/bootstrap/application-state.js

@@ -1,9 +1,9 @@
 import { requireXopcDatabase } from "../storage/sqlite/connection.js";
 import { init_sqlite } from "../storage/sqlite/index.js";
 import { AgentCatalogService } from "../agent-catalog/service.js";
-import { ensureStarterAgentsInitialized } from "../agent/starter-agents.js";
 import { cutoverLegacyAgentConfig } from "../agent-catalog/migrations/legacy-config-cutover.js";
 import "../agent-catalog/index.js";
+import { ensureStarterAgentsInitialized } from "../agent/starter-agents.js";
 import { runBootstrapMigrationsSync } from "../migrations/runner.js";
 //#region src/bootstrap/application-state.ts
 init_sqlite();

package/dist/src/capabilities/runtime/dispatcher.js

@@ -1,7 +1,7 @@
 import { SqliteCommitEffectError, init_transaction } from "../../storage/sqlite/transaction.js";
+import { OperationConflictError, executeAtomicOperation } from "./atomic-operations.js";
 import { CapabilityError } from "./errors.js";
 import { executeExternalOperation } from "./external-operations.js";
-import { OperationConflictError, executeAtomicOperation } from "./atomic-operations.js";
 import { createHash } from "node:crypto";
 import { z } from "zod";
 //#region src/capabilities/runtime/dispatcher.ts

package/dist/src/capabilities/runtime/product.js

@@ -1,5 +1,6 @@
 import { CapabilityError } from "./errors.js";
 import { CapabilityDispatcher } from "./dispatcher.js";
+import { registerAgentCapabilities } from "../../agent-catalog/capabilities.js";
 import { registerLocalAppReadCapabilities } from "../../local-apps/capabilities/read.js";
 import { registerNoteReadCapabilities } from "../../notes/capabilities/read.js";
 import { registerNoteWriteCapabilities } from "../../notes/capabilities/write.js";
@@ -18,7 +19,6 @@ import { registerSceneReadCapabilities } from "../../scenes/capabilities/read.js
 import { registerSceneWriteCapabilities } from "../../scenes/capabilities/write.js";
 import { registerSettingsCapability } from "./settings.js";
 import { registerAppContextCapability } from "./app-context.js";
-import { registerAgentCapabilities } from "../../agent-catalog/capabilities.js";
 //#region src/capabilities/runtime/product.ts
 function createProductDispatcher(getNotes, taskWrites) {
 	const dispatcher = new CapabilityDispatcher();

package/dist/src/capabilities/store-connector.d.ts

@@ -7,10 +7,26 @@ export type StoreConnectorInstallPlan = {
     definition: ConnectorDefinition;
     permissions: ConnectorPermissions;
     requiresRestart: false;
+    reviewHash: string;
 };
+export type StoreConnectorInstallCandidate = {
+    candidateRef: string;
+    source: 'store';
+    packageName: string;
+    version: string;
+    label: string;
+    summary: string;
+    capabilities: string[];
+};
+export declare function storeConnectorCandidateRef(packageName: string, version: string): string;
+export declare function parseStoreConnectorCandidateRef(ref: string): {
+    packageName: string;
+    version: string;
+} | undefined;
+export declare function searchStoreConnectorInstallCandidates(config: Config, query: string, limit?: number): Promise<StoreConnectorInstallCandidate[]>;
 export declare function listStoreConnectors(config: Config, params: SkillsStoreListParams): Promise<import("../agent/skills/skills-marketplace.js").SkillsStoreListResponse>;
 export declare function getStoreConnectorInstallPlan(config: Config, packageName: string, version?: string): Promise<StoreConnectorInstallPlan>;
-export declare function installStoreConnector(config: Config, packageName: string, input: ConnectorInstallInput, version?: string): Promise<{
+export declare function installStoreConnector(config: Config, packageName: string, input: ConnectorInstallInput, version?: string, reviewHash?: string): Promise<{
     instance: import("../connectors/types.js").ConnectorInstance;
     plan: StoreConnectorInstallPlan;
 }>;

package/dist/src/capabilities/store-connector.js

@@ -1,10 +1,65 @@
 import { getCliAdapter } from "../connectors/cli/adapterRegistry.js";
-import { downloadConnectorStoreZipBuffer, fetchStoreConnectorPackageDetail, listConnectorPackages, resolveSkillsStoreBaseUrl } from "../agent/skills/marketplace/adapters/store/store-api-client.js";
+import { listConnectorInstances } from "../connectors/instances.js";
 import { installConnectorDefinition } from "../connectors/install.js";
+import { downloadConnectorStoreZipBuffer, fetchStoreConnectorPackageDetail, listConnectorPackages, resolveSkillsStoreBaseUrl } from "../agent/skills/marketplace/adapters/store/store-api-client.js";
 import { createHash } from "node:crypto";
 import { isIP } from "node:net";
 import AdmZip from "adm-zip";
 //#region src/capabilities/store-connector.ts
+const STORE_CONNECTOR_CANDIDATE_PREFIX = "store-connector:";
+function storeConnectorCandidateRef(packageName, version) {
+	return `${STORE_CONNECTOR_CANDIDATE_PREFIX}${encodeURIComponent(packageName)}:${encodeURIComponent(version)}`;
+}
+function parseStoreConnectorCandidateRef(ref) {
+	if (!ref.startsWith(STORE_CONNECTOR_CANDIDATE_PREFIX)) return void 0;
+	const parts = ref.slice(16).split(":");
+	if (parts.length !== 2) return void 0;
+	try {
+		const packageName = decodeURIComponent(parts[0]);
+		const version = decodeURIComponent(parts[1]);
+		return packageName && version ? {
+			packageName,
+			version
+		} : void 0;
+	} catch {
+		return;
+	}
+}
+function manifestCapabilities(value) {
+	if (!value || typeof value !== "object" || Array.isArray(value)) return ["connector.tools"];
+	const manifest = value;
+	if (!Array.isArray(manifest.provides)) return ["connector.tools"];
+	const values = manifest.provides.flatMap((entry) => {
+		if (typeof entry === "string" && entry.trim()) return [entry.trim()];
+		if (!entry || typeof entry !== "object" || Array.isArray(entry)) return [];
+		const id = entry.id;
+		return typeof id === "string" && id.trim() ? [id.trim()] : [];
+	});
+	return values.length ? [...new Set(values)].slice(0, 20) : ["connector.tools"];
+}
+async function searchStoreConnectorInstallCandidates(config, query, limit = 5) {
+	const result = await listStoreConnectors(config, {
+		q: query,
+		page: 1,
+		pageSize: Math.min(10, Math.max(1, limit)),
+		sort: "downloads"
+	});
+	const installed = new Set(listConnectorInstances(config).map((instance) => instance.connectorId));
+	return result.items.filter((item) => item.type === "connector" && !installed.has(item.name) && typeof item.latestVersion === "string" && item.latestVersion).slice(0, limit).map((item) => ({
+		candidateRef: storeConnectorCandidateRef(item.name, item.latestVersion),
+		source: "store",
+		packageName: item.name,
+		version: item.latestVersion,
+		label: (() => {
+			const manifest = item.connectorManifest;
+			if (!manifest || typeof manifest !== "object" || Array.isArray(manifest)) return item.name;
+			const displayName = manifest.displayName;
+			return typeof displayName === "string" && displayName.trim() ? displayName.trim() : item.name;
+		})(),
+		summary: item.description,
+		capabilities: manifestCapabilities(item.connectorManifest)
+	}));
+}
 function asRecord(value, label) {
 	if (!value || typeof value !== "object" || Array.isArray(value)) throw new Error(`${label} must be an object.`);
 	return value;
@@ -308,15 +363,26 @@ async function getStoreConnectorInstallPlan(config, packageName, version) {
 		version: detail.latestVersion.version,
 		permissions: definition.permissions ?? {},
 		requiresRestart: false,
+		reviewHash: createHash("sha256").update(JSON.stringify({
+			packageName: detail.name,
+			version: detail.latestVersion.version,
+			sha256: actualSha256,
+			permissions: definition.permissions ?? {},
+			capabilities: definition.capabilities,
+			auth: definition.auth,
+			setup: definition.setup,
+			runtime: definition.runtime
+		})).digest("hex"),
 		definition
 	};
 }
-async function installStoreConnector(config, packageName, input, version) {
+async function installStoreConnector(config, packageName, input, version, reviewHash) {
 	const plan = await getStoreConnectorInstallPlan(config, packageName, version);
+	if (!reviewHash || reviewHash !== plan.reviewHash) throw new Error(reviewHash ? "Connector package changed after review; inspect it again." : "Connector capability review is required.");
 	return {
 		instance: await installConnectorDefinition(config, plan.definition, input),
 		plan
 	};
 }
 //#endregion
-export { getStoreConnectorInstallPlan, installStoreConnector, listStoreConnectors };
+export { getStoreConnectorInstallPlan, installStoreConnector, listStoreConnectors, parseStoreConnectorCandidateRef, searchStoreConnectorInstallCandidates, storeConnectorCandidateRef };

package/dist/src/channels/attachments/voice-stt-webchat.js

@@ -72,7 +72,7 @@ async function mergeVoiceTranscriptsIntoUserText(prepared, userText, sttConfig,
 				mime: att.mimeType,
 				fileName: att.name
 			})).text.trim();
-			transcripts.push(transcript || "[Voice: no speech detected]");
+			if (transcript) transcripts.push(transcript);
 			if (transcript && "uri" in att && att.uri?.trim()) transcribedMediaUris.push(att.uri.trim());
 		} catch (error) {
 			const errorMessage = error instanceof Error ? error.message : String(error);

package/dist/src/chat-commands/agent-edit.js

@@ -1,7 +1,7 @@
 import { normalizeAgentId } from "../agent-catalog/id.js";
 import { init_agent_scope, resolveAgentProfileDir } from "../agent/agent-scope.js";
-import { init_agent_session_key, resolveAgentIdFromConversationId } from "../routing/agent-session-key.js";
 import { WORKSPACE_FILES, init_paths } from "../config/paths.js";
+import { init_agent_session_key, resolveAgentIdFromConversationId } from "../routing/agent-session-key.js";
 import { commandRegistry } from "./registry.js";
 import { join } from "node:path";
 import { readFile } from "node:fs/promises";

package/dist/src/chat-commands/builtins/config.js

@@ -1,7 +1,7 @@
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
-import { ConfigSchema, init_schema } from "../../config/schema.js";
 import { init_paths, resolveConfigPath } from "../../config/paths.js";
+import { ConfigSchema, init_schema } from "../../config/schema.js";
 import { commandRegistry } from "../registry.js";
 import { parseConfigValue } from "../config-value.js";
 import { getConfigValueAtPath, parseConfigPath, setConfigValueAtPath, unsetConfigValueAtPath } from "../config-paths.js";

package/dist/src/cli/commands/agent.js

@@ -1,7 +1,7 @@
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
-import { getAgentDefaultModelRef, init_schema } from "../../config/schema.js";
 import { init_agent_scope, resolveDefaultAgentId } from "../../agent/agent-scope.js";
+import { getAgentDefaultModelRef, init_schema } from "../../config/schema.js";
 import { init_agent_session_key, resolveAgentMainConversationId } from "../../routing/agent-session-key.js";
 import { ExtensionLoader } from "../../extensions/loader.js";
 import "../../extensions/index.js";

package/dist/src/cli/commands/agents.js

@@ -1,8 +1,8 @@
 import { normalizeAgentId, validateAgentIdForNewAgent } from "../../agent-catalog/id.js";
 import { AgentCatalogRepository, init_repository } from "../../agent-catalog/repository.js";
 import { init_agent_scope, resolveAgentDir, resolveAgentWorkspaceDir, resolveDefaultAgentId } from "../../agent/agent-scope.js";
-import { resolveEffectiveAgentConfigForAgent } from "../../config/agent-profile.js";
 import { AgentCatalogService } from "../../agent-catalog/service.js";
+import { resolveEffectiveAgentConfigForAgent } from "../../config/agent-profile.js";
 import { colors } from "../utils/colors.js";
 //#region src/cli/commands/agents.ts
 init_repository();

package/dist/src/cli/commands/connectors.js

@@ -1,5 +1,5 @@
-import { loadConfig, saveConfig } from "../../config/loader.js";
 import { getStoreConnectorInstallPlan, installStoreConnector, listStoreConnectors } from "../../capabilities/store-connector.js";
+import { loadConfig, saveConfig } from "../../config/loader.js";
 import { register } from "../registry.js";
 import { confirm } from "@inquirer/prompts";
 import { Command } from "commander";
@@ -52,7 +52,8 @@ function createConnectorsCommand(ctx) {
 	command.command("install <packageName>").description("Verify and install a connector capability from xopc-store").option("--version <version>", "Install an exact version").option("--secret <KEY=VALUE>", "Provide a required secret; repeat for multiple values", (value, previous = []) => [...previous, value], []).option("--config-value <KEY=VALUE>", "Provide a connector config value; repeat for multiple values", (value, previous = []) => [...previous, value], []).option("-y, --yes", "Skip the interactive confirmation", false).action(async (packageName, options) => {
 		try {
 			const config = loadConfig(ctx.configPath);
-			printPlan(await getStoreConnectorInstallPlan(config, packageName, options.version));
+			const plan = await getStoreConnectorInstallPlan(config, packageName, options.version);
+			printPlan(plan);
 			if (!options.yes && process.stdin.isTTY) {
 				if (!await confirm({
 					message: "Install this connector?",
@@ -65,7 +66,7 @@ function createConnectorsCommand(ctx) {
 			const { instance } = await installStoreConnector(config, packageName, {
 				secrets: parsePairs(options.secret, "--secret"),
 				config: parsePairs(options.configValue, "--config-value")
-			}, options.version);
+			}, options.version, plan.reviewHash);
 			await saveConfig(config, ctx.configPath);
 			console.log(`Installed ${instance.displayName} (${instance.instanceId}).`);
 		} catch (error) {

package/dist/src/cli/commands/doctor/checks/automation-integrity.d.ts

@@ -0,0 +1,2 @@
+import type { CheckResult, DoctorContext } from '../types.js';
+export declare function checkAutomationIntegrity(ctx: DoctorContext): Promise<CheckResult>;

package/dist/src/cli/commands/doctor/checks/automation-integrity.js

@@ -0,0 +1,55 @@
+import { requireXopcDatabase } from "../../../../storage/sqlite/connection.js";
+import { getSqliteDatabase } from "../../../../storage/sqlite/transaction.js";
+import { init_sqlite } from "../../../../storage/sqlite/index.js";
+import { existsSync } from "node:fs";
+//#region src/cli/commands/doctor/checks/automation-integrity.ts
+init_sqlite();
+async function checkAutomationIntegrity(ctx) {
+	if (!ctx.options.deep) return {
+		id: "automation-integrity",
+		label: "Automations",
+		status: "skip",
+		message: "Deep mode off; automation scan skipped.",
+		hints: ["Run: xopc doctor --deep"]
+	};
+	if (!existsSync(ctx.configPath)) return {
+		id: "automation-integrity",
+		label: "Automations",
+		status: "skip",
+		message: "No config file; skipped.",
+		hints: []
+	};
+	requireXopcDatabase();
+	const db = getSqliteDatabase();
+	const issues = [];
+	const orphanResults = db.prepare(`SELECT r.run_id FROM automation_results r
+    LEFT JOIN automation_runs ar ON ar.run_id = r.run_id WHERE ar.run_id IS NULL LIMIT 20`).all();
+	for (const row of orphanResults) issues.push(`orphan result ${row.run_id}`);
+	const orphanResultDeliveries = db.prepare(`SELECT d.run_id, d.destination_key FROM automation_result_deliveries d
+    LEFT JOIN automation_results r ON r.run_id = d.run_id WHERE r.run_id IS NULL LIMIT 20`).all();
+	for (const row of orphanResultDeliveries) issues.push(`orphan result delivery ${row.run_id}/${row.destination_key}`);
+	const orphanEventRuns = db.prepare(`SELECT d.event_id, d.automation_id, d.run_id FROM automation_event_deliveries d
+    LEFT JOIN automation_runs r ON r.run_id = d.run_id
+    WHERE d.run_id IS NOT NULL AND r.run_id IS NULL LIMIT 20`).all();
+	for (const row of orphanEventRuns) issues.push(`orphan event delivery run ${row.event_id}/${row.automation_id}/${row.run_id}`);
+	const expiredLeases = db.prepare(`SELECT
+    (SELECT COUNT(*) FROM automation_events WHERE projection_status = 'projecting' AND projection_lease_until_ms <= ?) +
+    (SELECT COUNT(*) FROM automation_event_deliveries WHERE lease_owner IS NOT NULL AND lease_until_ms <= ?) +
+    (SELECT COUNT(*) FROM automation_result_deliveries WHERE status = 'delivering' AND lease_until_ms <= ?) AS count`).get(Date.now(), Date.now(), Date.now());
+	if (expiredLeases.count > 0) issues.push(`${expiredLeases.count} expired automation lease(s) awaiting recovery`);
+	return issues.length === 0 ? {
+		id: "automation-integrity",
+		label: "Automations",
+		status: "pass",
+		message: "Automation state graph OK.",
+		hints: []
+	} : {
+		id: "automation-integrity",
+		label: "Automations",
+		status: "warn",
+		message: `${issues.length} automation integrity issue(s).`,
+		hints: issues
+	};
+}
+//#endregion
+export { checkAutomationIntegrity };

package/dist/src/cli/commands/doctor/checks/database-relations.d.ts

@@ -0,0 +1,2 @@
+import type { CheckResult, DoctorContext } from '../types.js';
+export declare function checkDatabaseRelations(ctx: DoctorContext): Promise<CheckResult>;

package/dist/src/cli/commands/doctor/checks/database-relations.js

@@ -0,0 +1,81 @@
+import { requireXopcDatabase } from "../../../../storage/sqlite/connection.js";
+import { getSqliteDatabase } from "../../../../storage/sqlite/transaction.js";
+import { init_sqlite } from "../../../../storage/sqlite/index.js";
+import { existsSync } from "node:fs";
+//#region src/cli/commands/doctor/checks/database-relations.ts
+init_sqlite();
+const IMPLICIT_RELATION_CHECKS = [
+	["session active transcript", `SELECT COUNT(*) AS count FROM sessions s
+    LEFT JOIN transcripts t ON t.transcript_id = s.active_transcript_id
+    WHERE t.transcript_id IS NULL`],
+	["session project", `SELECT COUNT(*) AS count FROM sessions s
+    LEFT JOIN projects p ON p.project_id = s.project_id
+    WHERE s.project_id IS NOT NULL AND p.project_id IS NULL`],
+	["queued session input", `SELECT COUNT(*) AS count FROM session_inputs i
+    LEFT JOIN sessions s ON s.conversation_id = i.conversation_id
+    WHERE s.conversation_id IS NULL`],
+	["discussion action task", `SELECT COUNT(*) AS count FROM discussion_action_tasks a
+    LEFT JOIN tasks t ON t.task_id = a.task_id
+    WHERE t.task_id IS NULL`],
+	["workflow event run", `SELECT COUNT(*) AS count FROM workflow_events e
+    LEFT JOIN workflow_runs r ON r.run_id = e.run_id
+    WHERE r.run_id IS NULL`],
+	["local app active release", `SELECT COUNT(*) AS count FROM local_apps a
+    LEFT JOIN local_app_releases r ON r.release_id = a.active_release_id
+    WHERE a.active_release_id IS NOT NULL AND r.release_id IS NULL`],
+	["automation run owner", `SELECT COUNT(*) AS count FROM automation_runs r
+    LEFT JOIN automations a ON a.automation_id = r.automation_id
+    WHERE a.automation_id IS NULL`],
+	["automation run event", `SELECT COUNT(*) AS count FROM automation_run_events e
+    LEFT JOIN automation_runs r ON r.run_id = e.run_id
+    WHERE r.run_id IS NULL`],
+	["automation event delivery owner", `SELECT COUNT(*) AS count FROM automation_event_deliveries d
+    LEFT JOIN automations a ON a.automation_id = d.automation_id
+    WHERE a.automation_id IS NULL`]
+];
+async function checkDatabaseRelations(ctx) {
+	if (!ctx.options.deep) return {
+		id: "database-relations",
+		label: "Database relations",
+		status: "skip",
+		message: "Deep mode off; relation scan skipped.",
+		hints: ["Run: xopc doctor --deep"]
+	};
+	if (!existsSync(ctx.configPath)) return {
+		id: "database-relations",
+		label: "Database relations",
+		status: "skip",
+		message: "No config file; skipped.",
+		hints: []
+	};
+	requireXopcDatabase();
+	const db = getSqliteDatabase();
+	const issues = [];
+	const tables = new Set(db.prepare(`SELECT name FROM sqlite_master WHERE type = 'table'`).all().map((row) => row.name));
+	for (const table of tables) {
+		const escaped = table.replaceAll("\"", "\"\"");
+		const foreignKeys = db.prepare(`PRAGMA foreign_key_list("${escaped}")`).all();
+		for (const foreignKey of foreignKeys) if (!tables.has(foreignKey.table)) issues.push(`missing foreign-key target ${table} -> ${foreignKey.table}`);
+	}
+	const violations = db.prepare("PRAGMA foreign_key_check").all();
+	for (const violation of violations.slice(0, 20)) issues.push(`foreign-key violation ${violation.table} row ${violation.rowid ?? "?"} -> ${violation.parent}`);
+	for (const [label, sql] of IMPLICIT_RELATION_CHECKS) {
+		const row = db.prepare(sql).get();
+		if (row.count > 0) issues.push(`${row.count} orphan ${label} record(s)`);
+	}
+	return issues.length === 0 ? {
+		id: "database-relations",
+		label: "Database relations",
+		status: "pass",
+		message: "Foreign-key and core implicit relations OK.",
+		hints: []
+	} : {
+		id: "database-relations",
+		label: "Database relations",
+		status: "warn",
+		message: `${issues.length} database relation issue(s).`,
+		hints: issues.slice(0, 20)
+	};
+}
+//#endregion
+export { checkDatabaseRelations };

package/dist/src/cli/commands/doctor/checks/database-schema.js

@@ -53,7 +53,7 @@ async function checkDatabaseSchema(ctx) {
 		id: "database-schema",
 		label: "Database schema",
 		status: "pass",
-		message: `SQLite schema v${status.dbVersion} (current release v208).`,
+		message: `SQLite schema v${status.dbVersion} (current release v223).`,
 		hints: []
 	};
 }

package/dist/src/cli/commands/doctor/checks/provider-auth.js

@@ -1,9 +1,9 @@
 import { AgentCatalogRepository, init_repository } from "../../../../agent-catalog/repository.js";
 import { getAgentDefaultModelRef, init_schema, parseModelRef } from "../../../../config/schema.js";
-import { getDefaultAgentId, init_resolve_route } from "../../../../routing/resolve-route.js";
-import { getModelOAuthProviderIds, init_registry } from "../../../../auth/oauth/registry.js";
 import { PROVIDER_ENV_MAP, init_env_keys } from "../../../../providers/env-keys.js";
+import { getModelOAuthProviderIds, init_registry } from "../../../../auth/oauth/registry.js";
 import { CredentialResolver, init_credentials } from "../../../../auth/credentials.js";
+import { getDefaultAgentId, init_resolve_route } from "../../../../routing/resolve-route.js";
 import { loadConfig } from "../../../../config/loader.js";
 import { existsSync } from "node:fs";
 //#region src/cli/commands/doctor/checks/provider-auth.ts

package/dist/src/cli/commands/doctor/flow.js

@@ -3,6 +3,7 @@ import { checkNodeVersion } from "./checks/node-version.js";
 import { checkConfigHealth } from "./checks/config-health.js";
 import { checkStateIntegrity } from "./checks/state-integrity.js";
 import { checkDatabaseSchema } from "./checks/database-schema.js";
+import { checkDatabaseRelations } from "./checks/database-relations.js";
 import { checkProviderAuth } from "./checks/provider-auth.js";
 import { checkChannelConfig } from "./checks/channel-config.js";
 import { checkChannelPairingPending } from "./checks/channel-pairing-pending.js";
@@ -16,6 +17,7 @@ import { checkChannelPlugins } from "./checks/channel-plugins.js";
 import { checkMigrations } from "./checks/migrations.js";
 import { checkImageProviders } from "./checks/image-providers.js";
 import { checkToolRuntimes } from "./checks/tool-runtimes.js";
+import { checkAutomationIntegrity } from "./checks/automation-integrity.js";
 //#region src/cli/commands/doctor/flow.ts
 const DOCTOR_CHECKS = [
 	checkVersionUpdate,
@@ -25,6 +27,7 @@ const DOCTOR_CHECKS = [
 	checkConfigHealth,
 	checkStateIntegrity,
 	checkDatabaseSchema,
+	checkDatabaseRelations,
 	checkProviderAuth,
 	checkImageProviders,
 	checkChannelConfig,
@@ -33,7 +36,8 @@ const DOCTOR_CHECKS = [
 	checkWorkspaceStatus,
 	checkGatewayService,
 	checkGatewayHealth,
-	checkSessionIntegrity
+	checkSessionIntegrity,
+	checkAutomationIntegrity
 ];
 /**
 * Headless data collection — used by both CLI and gateway API.

package/dist/src/cli/commands/extension-marketplace.js

@@ -1,7 +1,7 @@
 import { init_paths, resolveExtensionsDir } from "../../config/paths.js";
+import { downloadExtensionStoreZipBuffer, resolveExtensionZipDownloadUrl, resolveExtensionsStoreBaseUrl, verifyStoreArtifactSha256 } from "../../agent/skills/marketplace/adapters/store/store-api-client.js";
 import { computeExtensionDirectoryIntegrity, getExtensionLockfileManager } from "../../extensions/lockfile.js";
 import { AgentPluginStore } from "../../extensions/agent-plugins/store.js";
-import { downloadExtensionStoreZipBuffer, resolveExtensionZipDownloadUrl, resolveExtensionsStoreBaseUrl, verifyStoreArtifactSha256 } from "../../agent/skills/marketplace/adapters/store/store-api-client.js";
 import { loadConfig } from "../../config/loader.js";
 import { getContextWithOpts } from "../context.js";
 import { peekExtensionManifestFromStoreZip } from "../../extensions/install.js";

package/dist/src/cli/commands/models.js

@@ -1,8 +1,8 @@
 import { AgentCatalogRepository, init_repository } from "../../agent-catalog/repository.js";
+import { AgentCatalogService } from "../../agent-catalog/service.js";
 import { getAgentDefaultModelRef, init_schema } from "../../config/schema.js";
 import { CredentialResolver, init_credentials } from "../../auth/credentials.js";
 import { getAllModels, getAvailableModels, getConfiguredProviders, getProviderAuthState, getProviderDisplayName, init_providers, isProviderConfigured, providerSupportsApiKey, providerSupportsOAuth, resolveModel } from "../../providers/index.js";
-import { AgentCatalogService } from "../../agent-catalog/service.js";
 import { loadConfig } from "../../config/loader.js";
 import { formatExamples, register } from "../registry.js";
 import { getContextWithOpts } from "../context.js";

package/dist/src/cli/commands/onboard/model.js

@@ -1,12 +1,12 @@
 import { AgentCatalogRepository, init_repository } from "../../../agent-catalog/repository.js";
-import { getAgentDefaultModelRef, init_schema } from "../../../config/schema.js";
 import { resolveModelsJsonPath } from "../../../config/paths.js";
+import { AgentCatalogService } from "../../../agent-catalog/service.js";
+import { getAgentDefaultModelRef, init_schema } from "../../../config/schema.js";
 import { init_models_json, loadModelsJson, saveModelsJson } from "../../../config/models-json.js";
 import { getApiKeyFromEnv } from "../../../providers/env-keys.js";
 import { getModelRegistry } from "../../../providers/model-registry.js";
 import { CredentialResolver, init_credentials } from "../../../auth/credentials.js";
 import { getAllProviders, getModelsByProvider, getProviderDisplayName, init_providers, providerSupportsApiKey, providerSupportsOAuth } from "../../../providers/index.js";
-import { AgentCatalogService } from "../../../agent-catalog/service.js";
 import { prepareUpdateGlobalDefaults } from "../../../gateway/global-defaults-admin.js";
 import { discoverProviderModels, isProviderApiDiscoverable } from "../../../providers/model-discovery.js";
 import { getXopcCloudCatalogCoordinator } from "../../../providers/xopc-cloud-catalog-coordinator.js";

package/dist/src/cli/commands/skills.js

@@ -1,10 +1,10 @@
 import { resolveStateDir } from "../../config/paths-state.js";
 import { init_paths, resolveBundledSkillsDir, resolveSkillsLockPath } from "../../config/paths.js";
+import { loadSkillsLock } from "../../agent/skills/hub-lock.js";
 import { findInstallSpec, hasBinary, installSkill } from "../../agent/skills/installer.js";
 import { createSkillConfigManager, isSkillEnabled } from "../../agent/skills/config.js";
 import { formatScanSummary, scanSkillDirectory } from "../../agent/skills/scanner.js";
 import { createSkillLoader } from "../../agent/skills/index.js";
-import { loadSkillsLock } from "../../agent/skills/hub-lock.js";
 import { pullSkillFromSource, updateSkillFromLock } from "../../agent/skills/hub-pull.js";
 import { ProjectTrustStore } from "../../project-trust/trust-store.js";
 import { loadConfig } from "../../config/loader.js";

package/dist/src/cli/utils/init-workspace-core.js

@@ -1,6 +1,6 @@
 import { AgentCatalogRepository, init_repository } from "../../agent-catalog/repository.js";
-import { ConfigSchema, init_schema } from "../../config/schema.js";
 import { AgentCatalogService } from "../../agent-catalog/service.js";
+import { ConfigSchema, init_schema } from "../../config/schema.js";
 import { assertConfigRewriteSafeForRunningGateway, saveConfig } from "../../config/loader.js";
 import { ensureStarterAgentsInitialized } from "../../agent/starter-agents.js";
 import { bootstrapApplicationStateSync } from "../../bootstrap/application-state.js";

package/dist/src/computer/runtime.js

@@ -1,9 +1,9 @@
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
-import { resolveEffectiveAgentConfigForSession } from "../config/agent-profile.js";
 import { COMPUTER_CONTROL_TOOL, ComputerAppSchema, ComputerObservationSchema, ComputerWindowSchema, init_src } from "../../packages/computer-control-contract/src/index.js";
 import { ComputerServiceLimitsSchema, computerModelProfile, init_model_policy } from "./model-policy.js";
 import { getApiKey, init_providers, resolveModel } from "../providers/index.js";
+import { resolveEffectiveAgentConfigForSession } from "../config/agent-profile.js";
 import { enterComputerControl, leaveComputerControl } from "./control-guard.js";
 import { ComputerDiagnosticSchema, ComputerOperationError, computerDiagnostic, computerRecovery } from "./errors.js";
 import { createComputerModelAdapter, predictComputerStep, readComputerJson } from "./model-adapter.js";