@xopcai/xopc 0.0.341 → 0.0.342

package/dist/src/extensions/agent-plugins/sources.js

@@ -37,15 +37,30 @@ function withAgentPluginArchive(buffer, fn) {
 async function withAgentPluginSource(source, config, fn) {
 	if (!source.startsWith("https://") && !source.startsWith("store:")) return fn(source);
 	let buffer;
+	let provenance;
 	if (source.startsWith("store:")) {
-		const { resolveExtensionZipDownloadUrl, resolveExtensionsStoreBaseUrl, downloadExtensionStoreZipBuffer, verifyStoreArtifactSha256 } = await import("../../agent/skills/marketplace/adapters/store/store-api-client.js");
+		const { fetchMarketplacePackageDetail, resolveExtensionZipDownloadUrl, resolveExtensionsStoreBaseUrl, downloadExtensionStoreZipBuffer, verifyStoreArtifactSha256 } = await import("../../agent/skills/marketplace/adapters/store/store-api-client.js");
 		const spec = source.slice(6);
 		const match = /^([a-z0-9.-]+)(?:@([^/]+))?$/.exec(spec);
 		if (!match) throw new Error("Expected store:<package>[@version]");
 		const base = resolveExtensionsStoreBaseUrl(config);
+		const detail = await fetchMarketplacePackageDetail(base, match[1]);
+		if (detail.type !== "plugin" && detail.type !== "extension") throw new Error(`Store package has unsupported type: ${detail.type}`);
 		const artifact = await resolveExtensionZipDownloadUrl(base, match[1], match[2]);
 		buffer = await downloadExtensionStoreZipBuffer(base, artifact.downloadUrl);
 		verifyStoreArtifactSha256(buffer, artifact.sha256);
+		provenance = {
+			kind: "store",
+			packageName: match[1],
+			packageType: detail.type,
+			version: artifact.version,
+			sha256: artifact.sha256,
+			...detail.publisher?.verification ? { publisherVerification: detail.publisher.verification } : {},
+			...detail.publisher?.sourceRepository ? { sourceRepository: detail.publisher.sourceRepository } : {},
+			...artifact.sourceCommit ? { sourceCommit: artifact.sourceCommit } : {},
+			...artifact.artifactFormat ? { artifactFormat: artifact.artifactFormat } : {},
+			...artifact.riskTier ? { riskTier: artifact.riskTier } : {}
+		};
 	} else {
 		const url = new URL(source);
 		const response = await createPluginHttpFetch(url, {})(url, { signal: AbortSignal.timeout(3e4) });
@@ -66,7 +81,7 @@ async function withAgentPluginSource(source, config, fn) {
 		}
 		buffer = Buffer.concat(chunks);
 	}
-	return withAgentPluginArchive(buffer, fn);
+	return withAgentPluginArchive(buffer, (local) => fn(local, provenance));
 }
 //#endregion
 export { isAgentPluginArchive, withAgentPluginArchive, withAgentPluginSource };

package/dist/src/extensions/agent-plugins/store.d.ts

@@ -1,5 +1,6 @@
 import { z } from 'zod';
 import { type PluginInspection } from './validation.js';
+import type { AgentPluginSourceProvenance } from './sources.js';
 declare const receiptSchema: z.ZodObject<{
     id: z.ZodString;
     revision: z.ZodString;
@@ -8,6 +9,28 @@ declare const receiptSchema: z.ZodObject<{
     enabled: z.ZodBoolean;
     integrity: z.ZodString;
     capabilities: z.ZodArray<z.ZodString>;
+    provenance: z.ZodOptional<z.ZodObject<{
+        kind: z.ZodLiteral<"store">;
+        packageName: z.ZodString;
+        packageType: z.ZodEnum<{
+            extension: "extension";
+            plugin: "plugin";
+        }>;
+        version: z.ZodString;
+        sha256: z.ZodString;
+        publisherVerification: z.ZodOptional<z.ZodEnum<{
+            verified: "verified";
+            community: "community";
+        }>>;
+        sourceRepository: z.ZodOptional<z.ZodString>;
+        sourceCommit: z.ZodOptional<z.ZodString>;
+        artifactFormat: z.ZodOptional<z.ZodString>;
+        riskTier: z.ZodOptional<z.ZodEnum<{
+            content: "content";
+            network: "network";
+            "local-exec": "local-exec";
+        }>>;
+    }, z.core.$strict>>;
     previous: z.ZodOptional<z.ZodObject<{
         id: z.ZodString;
         revision: z.ZodString;
@@ -16,6 +39,28 @@ declare const receiptSchema: z.ZodObject<{
         enabled: z.ZodBoolean;
         integrity: z.ZodString;
         capabilities: z.ZodArray<z.ZodString>;
+        provenance: z.ZodOptional<z.ZodObject<{
+            kind: z.ZodLiteral<"store">;
+            packageName: z.ZodString;
+            packageType: z.ZodEnum<{
+                extension: "extension";
+                plugin: "plugin";
+            }>;
+            version: z.ZodString;
+            sha256: z.ZodString;
+            publisherVerification: z.ZodOptional<z.ZodEnum<{
+                verified: "verified";
+                community: "community";
+            }>>;
+            sourceRepository: z.ZodOptional<z.ZodString>;
+            sourceCommit: z.ZodOptional<z.ZodString>;
+            artifactFormat: z.ZodOptional<z.ZodString>;
+            riskTier: z.ZodOptional<z.ZodEnum<{
+                content: "content";
+                network: "network";
+                "local-exec": "local-exec";
+            }>>;
+        }, z.core.$strict>>;
     }, z.core.$strip>>;
 }, z.core.$strip>;
 export type PluginReceipt = z.infer<typeof receiptSchema>;
@@ -52,6 +97,7 @@ export declare class AgentPluginStore {
         replace?: boolean;
         expectedId?: string;
         sourceLabel?: string;
+        provenance?: AgentPluginSourceProvenance;
     }): InstalledAgentPlugin;
     setEnabled(id: string, enabled: boolean): InstalledAgentPlugin;
     rollback(id: string): InstalledAgentPlugin;

package/dist/src/extensions/agent-plugins/store.js

@@ -16,6 +16,22 @@ import lockfile from "proper-lockfile";
 init_paths_state();
 init_write_file_atomic();
 init_logger();
+const provenanceSchema = z.strictObject({
+	kind: z.literal("store"),
+	packageName: pluginName,
+	packageType: z.enum(["plugin", "extension"]),
+	version: z.string().min(1),
+	sha256: z.string().regex(/^[a-f0-9]{64}$/),
+	publisherVerification: z.enum(["community", "verified"]).optional(),
+	sourceRepository: z.string().url().optional(),
+	sourceCommit: z.string().optional(),
+	artifactFormat: z.string().optional(),
+	riskTier: z.enum([
+		"content",
+		"network",
+		"local-exec"
+	]).optional()
+});
 const receiptFields = z.object({
 	id: pluginName,
 	revision: z.string().uuid(),
@@ -23,7 +39,8 @@ const receiptFields = z.object({
 	installedAt: z.string(),
 	enabled: z.boolean(),
 	integrity: z.string(),
-	capabilities: z.array(z.string())
+	capabilities: z.array(z.string()),
+	provenance: provenanceSchema.optional()
 });
 const receiptSchema = receiptFields.extend({ previous: receiptFields.optional() });
 const log = createLogger("AgentPlugins");
@@ -189,6 +206,7 @@ var AgentPluginStore = class {
 					enabled: current?.enabled ?? false,
 					integrity,
 					capabilities: installed.capabilities,
+					...options.provenance ? { provenance: provenanceSchema.parse(options.provenance) } : {},
 					previous: current ? receiptFields.parse(current) : void 0
 				});
 			} catch (error) {

package/dist/src/extensions/agent-plugins/validation.js

@@ -1,8 +1,8 @@
 import { dirname, isAbsolute, join, relative, resolve } from "node:path";
 import { existsSync, lstatSync, readFileSync, readdirSync, realpathSync, statSync } from "node:fs";
 import { z } from "zod";
-import yaml from "js-yaml";
 import { validateHeaderName, validateHeaderValue } from "node:http";
+import yaml from "js-yaml";
 //#region src/extensions/agent-plugins/validation.ts
 const PLUGIN_SCHEMA = "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json";
 const MCP_SCHEMA = "https://agent-plugins.org/schemas/1.0.0/mcp.schema.json";

package/dist/src/extensions/marketplace.d.ts

@@ -1,5 +1,5 @@
 /**
- * Extension marketplace catalog from xopc-store (`GET /api/v1/packages?type=extension`).
+ * Extension marketplace catalog from xopc-store (portable `plugin` and native `extension` packages).
  * Base URL: `XOPC_SKILLS_STORE_URL` → `gateway.skillsStoreBaseUrl` → `https://store.xopc.ai`.
  */
 export interface RegistryEntry {
@@ -17,6 +17,7 @@ export interface RegistryEntry {
         iconUrl: string;
         iconSha256: string;
     };
+    packageType?: 'plugin' | 'extension';
 }
 export interface ExtensionRegistryFile {
     version: number;

package/dist/src/extensions/marketplace.js

@@ -4,7 +4,7 @@ import { init_resolution, resolveConnectedPlatformEndpoint } from "../platform/r
 import { loadConfig } from "../config/loader.js";
 //#region src/extensions/marketplace.ts
 /**
-* Extension marketplace catalog from xopc-store (`GET /api/v1/packages?type=extension`).
+* Extension marketplace catalog from xopc-store (portable `plugin` and native `extension` packages).
 * Base URL: `XOPC_SKILLS_STORE_URL` → `gateway.skillsStoreBaseUrl` → `https://store.xopc.ai`.
 */
 init_logger();
@@ -42,8 +42,8 @@ function normalizeStoreBaseUrl() {
 function titleCaseSlug(slug) {
 	return slug.split("-").filter(Boolean).map((s) => s.charAt(0).toUpperCase() + s.slice(1)).join(" ");
 }
-async function fetchExtensionCatalogFromStore() {
-	const listUrl = `${normalizeStoreBaseUrl()}/api/v1/packages?type=extension&pageSize=200`;
+async function fetchPackageCatalogFromStore(packageType) {
+	const listUrl = `${normalizeStoreBaseUrl()}/api/v1/packages?type=${packageType}&pageSize=200`;
 	try {
 		const res = await fetch(listUrl, { signal: AbortSignal.timeout(2e4) });
 		if (!res.ok) {
@@ -71,7 +71,8 @@ async function fetchExtensionCatalogFromStore() {
 					iconUrl: it.branding.iconUrl,
 					iconSha256: it.branding.iconSha256
 				} } : {},
-				verified: author === "xopcai"
+				verified: it.publisher?.verification === "verified" || author === "xopcai",
+				packageType
 			});
 		}
 		return extensions.length > 0 ? extensions : null;
@@ -87,7 +88,7 @@ async function fetchRegistry(forceRefresh = false) {
 	const now = Date.now();
 	if (!forceRefresh && cache && now - cache.at < CACHE_TTL_MS) return cache.data;
 	const storeBase = normalizeStoreBaseUrl();
-	const fromStore = await fetchExtensionCatalogFromStore();
+	const fromStore = (await Promise.all([fetchPackageCatalogFromStore("plugin"), fetchPackageCatalogFromStore("extension")])).flatMap((items) => items ?? []);
 	if (fromStore && fromStore.length > 0) {
 		const data = {
 			version: 1,

package/dist/src/gateway/agents-admin.js

@@ -1,11 +1,11 @@
 import { normalizeAgentId, validateAgentIdForNewAgent } from "../agent-catalog/id.js";
 import { AgentCatalogRepository, init_repository } from "../agent-catalog/repository.js";
 import { init_agent_scope, listAgentEntries, resolveAgentProfileDir, resolveAgentWorkspaceDir, resolveDefaultAgentId, resolveUserPath } from "../agent/agent-scope.js";
+import { resolveEffectiveAgentProfile } from "../config/agent-profile.js";
 import { WORKSPACE_FILES, init_paths } from "../config/paths.js";
 import { AGENT_PROFILE_MARKDOWN_SYSTEM_FILES, REQUIRED_AGENT_PROFILE_MARKDOWN_FILE_SET } from "../agent/context/workspace.js";
-import { AgentCatalogService } from "../agent-catalog/service.js";
-import { resolveEffectiveAgentProfile } from "../config/agent-profile.js";
 import { isPathUnderWorkspace, resolveWorkspaceSafePath } from "./workspace-editor-path.js";
+import { AgentCatalogService } from "../agent-catalog/service.js";
 import { GATEWAY_BUILTIN_TOOL_IDS } from "./agent-builtin-tools.js";
 import { join, resolve } from "node:path";
 import { mkdir, readFile, realpath, stat, unlink, writeFile } from "node:fs/promises";

package/dist/src/gateway/file-path-classifier.js

@@ -1,7 +1,7 @@
 import { init_paths_state, resolveStateDir } from "../config/paths-state.js";
 import { init_agent_scope, resolveAgentProfileDir } from "../agent/agent-scope.js";
-import { init_paths, resolveConfigPath, resolveSkillsDir } from "../config/paths.js";
 import { extractProfileAgentId } from "../config/agent-profile.js";
+import { init_paths, resolveConfigPath, resolveSkillsDir } from "../config/paths.js";
 import { isBareProfileMarkdownFileName, resolveProfileMarkdownPathIfBareName } from "../agent/tools/tool-paths.js";
 import { isPathUnderWorkspace, resolveWorkspaceSafePath } from "./workspace-editor-path.js";
 import { basename, isAbsolute, resolve } from "node:path";

package/dist/src/gateway/hono/lib/config-payload.d.ts

@@ -214,6 +214,7 @@ export declare function buildSafeWebConfigPayload(service: GatewayService, optio
             enabled: boolean;
             writePolicy: "allow" | "deny";
             sensitiveWritePolicy: "allow" | "confirm" | "deny";
+            showMemoryReferences: boolean;
             processingPolicy: "local_only" | "remote_allowed";
             extraction: {
                 reviewIntervalTurns: number;

package/dist/src/gateway/hono/lib/config-payload.js

@@ -1,8 +1,8 @@
 import { normalizeAgentId } from "../../../agent-catalog/id.js";
 import { AgentCatalogRepository, init_repository } from "../../../agent-catalog/repository.js";
+import { ContextPlanningConfigSchema, KnowledgeMemoryConfigSchema, UserModelConfigSchema, init_config } from "../../../user-context/config.js";
 import { init_agent_scope, listAgentEntries, resolveDefaultAgentId } from "../../../agent/agent-scope.js";
 import { resolveModelsJsonPath } from "../../../config/paths.js";
-import { ContextPlanningConfigSchema, KnowledgeMemoryConfigSchema, UserModelConfigSchema, init_config } from "../../../user-context/config.js";
 import { init_models_json, loadModelsJson } from "../../../config/models-json.js";
 import { CredentialResolver, init_credentials } from "../../../auth/credentials.js";
 import { getProviderRegistry, init_plugin_registry } from "../../../providers/plugin-registry.js";

package/dist/src/gateway/hono/routes/agent-plugins.js

@@ -33,9 +33,10 @@ function registerAgentPluginRoutes(app, deps) {
 	app.post("/api/extensions/install", deps.strictRateLimitMiddleware, async (c) => {
 		try {
 			const body = sourceBody.parse(await c.req.json());
-			const plugin = await withAgentPluginSource(body.source, deps.service.currentConfig, (source) => store.install(source, {
+			const plugin = await withAgentPluginSource(body.source, deps.service.currentConfig, (source, provenance) => store.install(source, {
 				reviewHash: body.reviewHash,
-				sourceLabel: body.source
+				sourceLabel: body.source,
+				provenance
 			}));
 			await refresh();
 			return c.json({
@@ -85,11 +86,12 @@ function registerAgentPluginRoutes(app, deps) {
 	app.post("/api/extensions/agent-plugins/:id/update", deps.strictRateLimitMiddleware, async (c) => {
 		try {
 			const body = sourceBody.parse(await c.req.json());
-			const plugin = await withAgentPluginSource(body.source, deps.service.currentConfig, (source) => store.install(source, {
+			const plugin = await withAgentPluginSource(body.source, deps.service.currentConfig, (source, provenance) => store.install(source, {
 				reviewHash: body.reviewHash,
 				replace: true,
 				expectedId: c.req.param("id"),
-				sourceLabel: body.source
+				sourceLabel: body.source,
+				provenance
 			}));
 			await refresh();
 			return c.json({

package/dist/src/gateway/hono/routes/config-patch/misc.js

@@ -1,10 +1,10 @@
-import { BindingsSchema, init_binding_schema } from "../../../../routing/binding-schema.js";
-import { AgentCatalogService } from "../../../../agent-catalog/service.js";
 import { ComputerConfigSchema, init_config } from "../../../../computer/config.js";
+import { BindingsSchema, init_binding_schema } from "../../../../routing/binding-schema.js";
 import { ContextPlanningConfigSchema, HomeIntelligenceConfigSchema, KnowledgeMemoryConfigSchema, UserContextConfigSchema, UserModelConfigSchema, init_config as init_config$1 } from "../../../../user-context/config.js";
 import { BrowserConfigSchema, McpConfigSchema, VoiceConfigSchema, init_schema } from "../../../../config/schema.js";
 import { CredentialResolver, init_credentials } from "../../../../auth/credentials.js";
 import { canonicalizeConfiguredMcpServer } from "../../../../config/mcp-config-normalize.js";
+import { AgentCatalogService } from "../../../../agent-catalog/service.js";
 import { mergeGatewaySkillsMarketplacePatch, mergeSessionConfigPatch, mergeUpdateConfigPatch } from "../../../../config/web-patch.js";
 import { assertGatewayAuthConfigured, resolveGatewayAuth } from "../../../auth.js";
 import { isMaskedSecretPatchValue } from "../../lib/mask-secret-length.js";

package/dist/src/gateway/hono/routes/models.js

@@ -1,3 +1,4 @@
+import { resolveEffectiveAgentConfigForAgent } from "../../../config/agent-profile.js";
 import { resolveModelsJsonPath } from "../../../config/paths.js";
 import { init_resolve_config_value, testApiKeyResolution } from "../../../config/resolve-config-value.js";
 import { computerModelProfile, init_model_policy, isDedicatedComputerModel } from "../../../computer/model-policy.js";
@@ -8,7 +9,6 @@ import { CredentialResolver, init_credentials } from "../../../auth/credentials.
 import "../../../providers/constants.js";
 import { getProviderRegistry, init_plugin_registry } from "../../../providers/plugin-registry.js";
 import { PROVIDER_META, getAllModels, getAllProviders, getAvailableModels, getProviderAuthState, init_providers, isProviderConfigured, isProviderConfiguredSync } from "../../../providers/index.js";
-import { resolveEffectiveAgentConfigForAgent } from "../../../config/agent-profile.js";
 import { buildCapabilityPlansForConfig } from "../../../capabilities/readiness/from-config.js";
 import "../../../capabilities/readiness/index.js";
 import { getImageGenerationProvider, reloadImageGenerationProviders, resolveImageGenerationCredentialMode } from "../../../agent/image/generation/provider-registry.js";

package/dist/src/gateway/hono/routes/notes.js

@@ -1,9 +1,9 @@
 import { NoteDeleteOutputSchema, NoteGetOutputSchema, ProductReadContracts } from "../../../../packages/gateway-contract/src/capabilities.js";
 import { init_src } from "../../../../packages/gateway-contract/src/index.js";
-import { CapabilityError } from "../../../capabilities/runtime/errors.js";
-import "../../../capabilities/runtime/dispatcher.js";
 import { init_session_key, resolveConversationId } from "../../../routing/session-key.js";
 import { agentExists, getDefaultAgentId, init_resolve_route } from "../../../routing/resolve-route.js";
+import { CapabilityError } from "../../../capabilities/runtime/errors.js";
+import "../../../capabilities/runtime/dispatcher.js";
 import { resolveGatewayEffectiveHost } from "../../../config/gateway-bind.js";
 import { getShareStore } from "../../../share/share-store.js";
 import { resolveShareUrl } from "../../../share/share-url.js";

package/dist/src/gateway/hono/routes/projects.js

@@ -7,12 +7,12 @@ import { loadTranscriptRowsForSession } from "../../../storage/sqlite/transcript
 import { init_sqlite } from "../../../storage/sqlite/index.js";
 import { ActivityService } from "../../../activity/service.js";
 import "../../../activity/index.js";
-import { CapabilityError } from "../../../capabilities/runtime/errors.js";
-import "../../../capabilities/runtime/dispatcher.js";
 import { resolveEffectiveAgentProfile } from "../../../config/agent-profile.js";
 import { TaskReadModelProjector } from "../../../tasks/task-read-model-projector.js";
 import { listKnowledgeItems, writeKnowledgeItem } from "../../../knowledge-memory/repository.js";
 import "../../../knowledge-memory/index.js";
+import { CapabilityError } from "../../../capabilities/runtime/errors.js";
+import "../../../capabilities/runtime/dispatcher.js";
 import { ProjectWorkspaceConflictError, ProjectWorkspaceMissingError } from "../../../projects/workspace-project.js";
 import { inferProjectExecutionMode, inferProjectKind } from "../../../projects/project-kind.js";
 import { ProjectDeletionBlockedError, ProjectWorkspaceInUseError } from "../../../projects/project-service.js";

package/dist/src/gateway/hono/routes/session-input-handler.js

@@ -4,9 +4,9 @@ import { browserPageContextsInputSchema } from "../../../../packages/gateway-con
 import { parseUserTurnDocument, userTurnDocumentRefIds } from "../../../../packages/gateway-contract/src/user-turn-document.js";
 import { init_src } from "../../../../packages/gateway-contract/src/index.js";
 import { endpointTurnClaimSchema, init_src as init_src$1 } from "../../../../packages/endpoint-tools-protocol/src/index.js";
+import { init_providers, resolveModel } from "../../../providers/index.js";
 import { CapabilityError } from "../../../capabilities/runtime/errors.js";
 import "../../../capabilities/runtime/dispatcher.js";
-import { init_providers, resolveModel } from "../../../providers/index.js";
 import { validateWebchatAttachments, validateWebchatContent } from "../../chat-limits.js";
 import { isTaskDestructiveCommand } from "../../../session/reset-triggers.js";
 import { parseSlashCommand } from "../../../chat-commands/command-parse.js";

package/dist/src/gateway/hono/routes/tasks.js

@@ -5,9 +5,9 @@ import { init_src } from "../../../../packages/gateway-contract/src/index.js";
 import { enqueueTaskChangedEvent, init_task_change_events } from "../../../tasks/task-change-events.js";
 import { TaskRepository, init_task_repository } from "../../../tasks/task-repository.js";
 import { TaskRunRepository, init_task_run_repository } from "../../../tasks/task-run-repository.js";
+import { TaskConversationRepository } from "../../../tasks/task-conversation-repository.js";
 import { CapabilityError } from "../../../capabilities/runtime/errors.js";
 import "../../../capabilities/runtime/dispatcher.js";
-import { TaskConversationRepository } from "../../../tasks/task-conversation-repository.js";
 import { TaskContextMutationOutputSchema } from "../../../tasks/capabilities/relations.js";
 import { TaskDeleteOutputSchema } from "../../../tasks/capabilities/management.js";
 import { TaskMutationOutputSchema } from "../../../tasks/capabilities/write.js";

package/dist/src/gateway/hono/routes/user-model.js

@@ -2,7 +2,7 @@ import { init_transaction, runSqliteWriteTransaction } from "../../../storage/sq
 import { createCollaborationRule, getCollaborationRule, init_collaboration_rule_repository, listCollaborationRules, setCollaborationRuleStatus } from "../../../storage/sqlite/collaboration-rule-repository.js";
 import { KnowledgeReviewConflictError, deleteKnowledgeItem, getKnowledgeItem, listKnowledgeItems, reviewKnowledgeItem, searchKnowledgeItems } from "../../../knowledge-memory/repository.js";
 import "../../../knowledge-memory/index.js";
-import { deleteUserAssertion, getAssertionSlot, getUserAssertion, listUserAssertionSources, listUserAssertions, reconcileAssertion, setAssertionStatus } from "../../../user-model/repository.js";
+import { deleteUserAssertion, getAssertionSlot, getUserAssertion, listUserAssertionSources, listUserAssertions, reconcileAssertion, setAssertionStatus, setUserAssertionScope } from "../../../user-model/repository.js";
 import { listActionRuleSuggestions } from "../../../user-model/action-rule-suggestions.js";
 import { createPriorityWindow, createUserGoal, listPriorityWindows, listUserGoals, setUserGoalStatus, updatePriorityWindow, updateUserGoal } from "../../../user-model/goals.js";
 import { listUserAssertionEdges, listUserModelObservations } from "../../../user-model/observation-repository.js";
@@ -210,7 +210,16 @@ function decodeMobileCursor(value) {
 }
 function registerUserModelRoutes(authenticated, deps) {
 	const write = deps.strictRateLimitMiddleware;
-	authenticated.get("/api/user-model", (c) => {
+	const userContextConfig = () => deps.service.currentConfig.userContext;
+	const memorySettings = () => {
+		const userContext = userContextConfig();
+		return {
+			memoryEnabled: userContext.enabled && userContext.userModel.enabled && userContext.knowledgeMemory.enabled,
+			showMemoryReferences: userContext.userModel.showMemoryReferences,
+			sensitiveWritePolicy: userContext.userModel.sensitiveWritePolicy
+		};
+	};
+	const snapshot = () => {
 		const rawAssertions = listUserAssertions({
 			statuses: [
 				"active",
@@ -239,7 +248,7 @@ function registerUserModelRoutes(authenticated, deps) {
 			...source.lastCollectedAt ? { lastCollectedAt: source.lastCollectedAt } : {},
 			consent: getActiveUnderstandingConsent(source.id)
 		}));
-		return c.json({
+		return {
 			assertions,
 			assertionEdges: listUserAssertionEdges(assertions.map((item) => item.id)),
 			observations: listUserModelObservations({ limit: 500 }),
@@ -252,6 +261,7 @@ function registerUserModelRoutes(authenticated, deps) {
 			profile,
 			sources,
 			suggestedCallName: profile.callName || machineCallName(),
+			settings: memorySettings(),
 			counts: {
 				activeAssertions: assertions.filter((item) => item.status === "active").length,
 				reviewAssertions: assertions.filter((item) => item.status === "needs_review" || item.status === "conflicted").length,
@@ -259,7 +269,40 @@ function registerUserModelRoutes(authenticated, deps) {
 				activePriorities: priorities.filter((item) => item.status === "active").length,
 				activeKnowledge: knowledge.filter((item) => item.status === "active").length
 			}
-		});
+		};
+	};
+	authenticated.get("/api/user-model", (c) => c.json(snapshot()));
+	authenticated.patch("/api/user-model/settings", write, async (c) => {
+		const input = await body(c);
+		const memoryEnabled = input?.memoryEnabled;
+		const showMemoryReferences = input?.showMemoryReferences;
+		const sensitiveWritePolicy = input?.sensitiveWritePolicy;
+		if (!input || memoryEnabled !== void 0 && typeof memoryEnabled !== "boolean" || showMemoryReferences !== void 0 && typeof showMemoryReferences !== "boolean" || sensitiveWritePolicy !== void 0 && ![
+			"deny",
+			"confirm",
+			"allow"
+		].includes(String(sensitiveWritePolicy)) || memoryEnabled === void 0 && showMemoryReferences === void 0 && sensitiveWritePolicy === void 0) return c.json({ error: "At least one valid memory setting is required" }, 400);
+		const nextConfig = structuredClone(deps.service.currentConfig);
+		if (typeof memoryEnabled === "boolean") {
+			nextConfig.userContext.userModel.enabled = memoryEnabled;
+			nextConfig.userContext.knowledgeMemory.enabled = memoryEnabled;
+		}
+		if (typeof showMemoryReferences === "boolean") nextConfig.userContext.userModel.showMemoryReferences = showMemoryReferences;
+		if (sensitiveWritePolicy === "deny" || sensitiveWritePolicy === "confirm" || sensitiveWritePolicy === "allow") nextConfig.userContext.userModel.sensitiveWritePolicy = sensitiveWritePolicy;
+		const result = await deps.service.saveConfig(nextConfig);
+		return result.saved ? c.json({ settings: memorySettings() }) : c.json({ error: result.error ?? "Failed to save memory settings" }, 500);
+	});
+	authenticated.get("/api/user-model/export", (c) => {
+		const exportedAt = (/* @__PURE__ */ new Date()).toISOString();
+		const payload = {
+			format: "xopc-user-memory",
+			version: 1,
+			exportedAt,
+			data: snapshot()
+		};
+		c.header("Content-Disposition", `attachment; filename="xopc-memory-${exportedAt.slice(0, 10)}.json"`);
+		c.header("Content-Type", "application/json; charset=utf-8");
+		return c.body(`${JSON.stringify(payload, null, 2)}\n`);
 	});
 	authenticated.get("/api/user-model/mobile-summary", (c) => {
 		const rawAssertions = listUserAssertions({
@@ -306,6 +349,7 @@ function registerUserModelRoutes(authenticated, deps) {
 				locale: profile.locale ?? ""
 			},
 			suggestedCallName: profile.callName || machineCallName(),
+			settings: memorySettings(),
 			counts: {
 				total: visible.length,
 				explicit: visible.filter((item) => item.authority === "user_explicit").length,
@@ -472,6 +516,16 @@ function registerUserModelRoutes(authenticated, deps) {
 			return c.json({ error: errorMessage(error) }, 404);
 		}
 	});
+	authenticated.patch("/api/user-model/assertions/:id/scope", write, async (c) => {
+		const nextScope = scope((await body(c))?.scope);
+		if (!nextScope) return c.json({ error: "A valid scope is required" }, 400);
+		try {
+			const assertion = setUserAssertionScope(c.req.param("id"), nextScope);
+			return c.json({ assertion: assertionView(assertion) });
+		} catch (error) {
+			return c.json({ error: errorMessage(error) }, 400);
+		}
+	});
 	authenticated.patch("/api/user-model/assertions/:id", write, async (c) => {
 		const current = getUserAssertion(c.req.param("id"));
 		const input = await body(c);
@@ -710,6 +764,10 @@ function registerUserModelRoutes(authenticated, deps) {
 	authenticated.get("/api/turns/:turnId/execution-context", (c) => {
 		const audit = getExecutionContextAudit(c.req.param("turnId"));
 		if (!audit) return c.json({ error: "Execution context not found" }, 404);
+		if (!userContextConfig().userModel.showMemoryReferences) return c.json({
+			audit,
+			resolvedItems: []
+		});
 		const goals = new Map(listUserGoals().map((item) => [item.id, item]));
 		const priorities = new Map(listPriorityWindows().map((item) => [item.id, item]));
 		const resolvedItems = audit.items.flatMap((item) => {

package/dist/src/gateway/image-generation-setup.js

@@ -1,11 +1,11 @@
 import { normalizeAgentId } from "../agent-catalog/id.js";
 import { AgentCatalogRepository, init_repository } from "../agent-catalog/repository.js";
-import { init_agent_scope } from "../agent/agent-scope.js";
-import { AgentCatalogService } from "../agent-catalog/service.js";
 import { ConfigSchema, init_schema } from "../config/schema.js";
+import { init_agent_scope } from "../agent/agent-scope.js";
 import { resolveEffectiveAgentConfigForAgent } from "../config/agent-profile.js";
 import { fetchWithTimeoutGuarded } from "../media-shared/http/provider-http.js";
 import "../media-shared/http/index.js";
+import { AgentCatalogService } from "../agent-catalog/service.js";
 import { getImageGenerationProvider, listImageGenerationProvidersSummary } from "../agent/image/generation/provider-registry.js";
 //#region src/gateway/image-generation-setup.ts
 init_repository();

package/dist/src/gateway/lock.js

@@ -1,8 +1,8 @@
 import path from "node:path";
 import fs from "node:fs";
 import { createHash } from "node:crypto";
-import fs$1 from "node:fs/promises";
 import net from "node:net";
+import fs$1 from "node:fs/promises";
 import { homedir } from "os";
 //#region src/gateway/lock.ts
 /**

package/dist/src/gateway/service/marketplace-service.d.ts

@@ -110,7 +110,7 @@ export declare class GatewayMarketplaceService {
     }>>;
     private getDefaultAgentId;
     private getInstallAvailability;
-    /** xopc-store extension package preview (type must be `extension`). */
+    /** xopc-store portable Agent Plugin or native extension package preview. */
     fetchExtensionPackageDetail(packageName: string): Promise<ExtensionMarketplacePackageDetailPayload>;
     /**
      * Install an extension from xopc-store into `~/.xopc/extensions`, append id

package/dist/src/gateway/service/marketplace-service.js

@@ -200,12 +200,12 @@ var GatewayMarketplaceService = class {
 			diagnostics: relevantDiagnostics
 		};
 	}
-	/** xopc-store extension package preview (type must be `extension`). */
+	/** xopc-store portable Agent Plugin or native extension package preview. */
 	async fetchExtensionPackageDetail(packageName) {
 		const { downloadExtensionStoreZipBuffer, fetchMarketplacePackageDetail, resolveExtensionZipDownloadUrl, resolveExtensionsStoreBaseUrl, verifyStoreArtifactSha256 } = await import("../../agent/skills/marketplace/adapters/store/store-api-client.js");
 		const base = resolveExtensionsStoreBaseUrl(this.opts.getConfig());
 		const detail = await fetchMarketplacePackageDetail(base, packageName.trim());
-		if (detail.type !== "extension") throw new Error(`Package "${packageName}" is not an extension (store type: ${detail.type}).`);
+		if (detail.type !== "extension" && detail.type !== "plugin") throw new Error(`Package "${packageName}" is not a plugin or extension (store type: ${detail.type}).`);
 		try {
 			const resolved = await resolveExtensionZipDownloadUrl(base, packageName.trim());
 			const buffer = await downloadExtensionStoreZipBuffer(base, resolved.downloadUrl);
@@ -222,6 +222,7 @@ var GatewayMarketplaceService = class {
 					}
 				};
 			}
+			if (detail.type === "plugin") throw new Error("Store plugin artifact is not an Agent Plugins package");
 			const { peekExtensionManifestFromStoreZip, peekExtensionPackageJsonFromStoreZip } = await import("../../extensions/install.js");
 			const manifest = peekExtensionManifestFromStoreZip(buffer);
 			const packageJson = peekExtensionPackageJsonFromStoreZip(buffer);

package/dist/src/gateway/service.js

@@ -16,17 +16,17 @@ import { init_session_repository, listSessionMetadata, patchSessionMetadata } fr
 import { getSessionConfig, init_config_repository } from "../storage/sqlite/config-repository.js";
 import { init_sqlite } from "../storage/sqlite/index.js";
 import { normalizeAgentId } from "../agent-catalog/id.js";
-import { init_agent_scope, listAgentEntries, resolveAgentWorkspaceDir, resolveDefaultAgentId } from "../agent/agent-scope.js";
-import { init_paths, resolveConfigPath, resolveExtensionsDir } from "../config/paths.js";
 import { init_config, resolveKnowledgeReadPolicy } from "../user-context/config.js";
 import { getAgentDefaultModelRef, init_schema } from "../config/schema.js";
-import { prewarmModelRegistry } from "../providers/model-registry.js";
+import { init_agent_scope, listAgentEntries, resolveAgentWorkspaceDir, resolveDefaultAgentId } from "../agent/agent-scope.js";
 import { init_agent_session_key, resolveAgentMainConversationId } from "../routing/agent-session-key.js";
 import { init_session_key, resolveConversationId, sanitizeSegment } from "../routing/session-key.js";
 import { getDefaultAgentId, init_resolve_route } from "../routing/resolve-route.js";
+import { resolveEffectiveAgentProfileForSession } from "../config/agent-profile.js";
+import { init_paths, resolveConfigPath, resolveExtensionsDir } from "../config/paths.js";
+import { prewarmModelRegistry } from "../providers/model-registry.js";
 import { init_providers, providers_exports } from "../providers/index.js";
 import { AI_USAGE_RETENTION_MS, markStaleAiUsageEventsUnknown, pruneAiUsageEvents } from "../storage/sqlite/ai-usage-repository.js";
-import { resolveEffectiveAgentProfileForSession } from "../config/agent-profile.js";
 import { TaskConversationRepository } from "../tasks/task-conversation-repository.js";
 import { listKnowledgeItems } from "../knowledge-memory/repository.js";
 import "../knowledge-memory/index.js";

package/dist/src/gateway/xopc-cloud-capability-setup.js

@@ -1,7 +1,7 @@
 import { AgentCatalogRepository, init_repository } from "../agent-catalog/repository.js";
-import { AgentCatalogService } from "../agent-catalog/service.js";
 import { getModelCatalogStore, init_model_catalog_store } from "../providers/model-catalog-store.js";
 import { compareCatalogModels } from "../providers/model-catalog-ranking.js";
+import { AgentCatalogService } from "../agent-catalog/service.js";
 import { prepareUpdateGlobalDefaults } from "./global-defaults-admin.js";
 //#region src/gateway/xopc-cloud-capability-setup.ts
 init_repository();

package/dist/src/home-intelligence/generator.js

@@ -1,7 +1,7 @@
 import { init_agent_scope, resolveDefaultAgentId } from "../agent/agent-scope.js";
-import { extractAssistantText, getAssistantMessageErrorReason } from "../providers/model-response.js";
 import { init_providers, resolveModel } from "../providers/index.js";
 import { completeWithResolvedCredentials, isLocalModelBaseUrl } from "../providers/model-call.js";
+import { extractAssistantText, getAssistantMessageErrorReason } from "../providers/model-response.js";
 import { resolveModelSelector } from "../config/agent-model-intents.js";
 import { z } from "zod";
 //#region src/home-intelligence/generator.ts

package/dist/src/local-apps/service.js

@@ -5,10 +5,10 @@ import { currentOperationId, init_operation_context } from "../infra/operation-c
 import { afterSqliteCommit, init_transaction, runSqliteWriteTransaction } from "../storage/sqlite/transaction.js";
 import { ExtensionCapabilityBindingsSchema, extensionCapabilityPermissions } from "../../packages/gateway-contract/src/extension-capabilities.js";
 import { init_src } from "../../packages/gateway-contract/src/index.js";
-import { CapabilityError } from "../capabilities/runtime/errors.js";
 import { init_paths, resolveExtensionsDir } from "../config/paths.js";
 import { LocalAppStore } from "./store.js";
 import { slugifyProjectName } from "../projects/project-store.js";
+import { CapabilityError } from "../capabilities/runtime/errors.js";
 import { DomainOutboxDispatcher } from "../infra/domain-outbox-dispatcher.js";
 import { validateLocalAppCapabilityContracts } from "./capabilities/contracts.js";
 import { buildLocalAppFixGuidance } from "./fix-guidance.js";