@xopcai/xopc 0.0.358 → 0.0.360

package/dist/src/infra/path-env.js

@@ -1,7 +1,7 @@
 import { resolveBrewPathDirs } from "./brew.js";
 import os from "node:os";
 import path from "node:path";
-import fsSync from "node:fs";
+import fs from "node:fs";
 //#region src/infra/path-env.ts
 function isTruthyEnvValue(value) {
 	if (!value) return false;
@@ -10,7 +10,7 @@ function isTruthyEnvValue(value) {
 }
 function isExecutable(filePath) {
 	try {
-		fsSync.accessSync(filePath, fsSync.constants.X_OK);
+		fs.accessSync(filePath, fs.constants.X_OK);
 		return true;
 	} catch {
 		return false;
@@ -18,7 +18,7 @@ function isExecutable(filePath) {
 }
 function isDirectory(dirPath) {
 	try {
-		return fsSync.statSync(dirPath).isDirectory();
+		return fs.statSync(dirPath).isDirectory();
 	} catch {
 		return false;
 	}

package/dist/src/infra/update-global.js

@@ -1,10 +1,10 @@
-import { resolveExecPathBinPrepend } from "./path-env.js";
 import { applyPathPrepend } from "./path-prepend.js";
+import { resolveExecPathBinPrepend } from "./path-env.js";
 import { readPackageVersion } from "./package-json.js";
 import { createDefaultCommandRunner } from "./run-command.js";
 import path from "node:path";
-import fsSync from "node:fs";
-import fs from "node:fs/promises";
+import fs from "node:fs";
+import fs$1 from "node:fs/promises";
 //#region src/infra/update-global.ts
 const XOPC_PACKAGE_NAME = "@xopcai/xopc";
 const GLOBAL_RENAME_PREFIX = ".";
@@ -18,7 +18,7 @@ const NPM_GLOBAL_INSTALL_OMIT_OPTIONAL_FLAGS = ["--omit=optional", ...NPM_GLOBAL
 const GLOBAL_DETECT_TIMEOUT_MS = 15e3;
 async function pathExists(targetPath) {
 	try {
-		await fs.access(targetPath);
+		await fs$1.access(targetPath);
 		return true;
 	} catch {
 		return false;
@@ -26,7 +26,7 @@ async function pathExists(targetPath) {
 }
 async function tryRealpath(targetPath) {
 	try {
-		return await fs.realpath(targetPath);
+		return await fs$1.realpath(targetPath);
 	} catch {
 		return path.resolve(targetPath);
 	}
@@ -49,14 +49,14 @@ function resolvePreferredNpmCommand(pkgRoot) {
 	const prefix = inferNpmPrefixFromPackageRoot(pkgRoot);
 	if (!prefix) return null;
 	const candidate = process.platform === "win32" ? path.join(prefix, "npm.cmd") : path.join(prefix, "bin", "npm");
-	return fsSync.existsSync(candidate) ? candidate : null;
+	return fs.existsSync(candidate) ? candidate : null;
 }
 function resolveNpmFromExecPath() {
 	const execPath = process.execPath?.trim();
 	if (!execPath) return null;
 	const binDir = path.dirname(execPath);
 	const candidate = process.platform === "win32" ? path.join(binDir, "npm.cmd") : path.join(binDir, "npm");
-	return fsSync.existsSync(candidate) ? candidate : null;
+	return fs.existsSync(candidate) ? candidate : null;
 }
 function resolvePreferredGlobalManagerCommand(manager, pkgRoot) {
 	if (manager !== "npm") return manager;
@@ -204,7 +204,7 @@ async function cleanupGlobalRenameDirs(params) {
 	const prefix = `${GLOBAL_RENAME_PREFIX}${name}-`;
 	let entries = [];
 	try {
-		entries = await fs.readdir(root);
+		entries = await fs$1.readdir(root);
 	} catch {
 		return { removed };
 	}
@@ -212,8 +212,8 @@ async function cleanupGlobalRenameDirs(params) {
 		if (!entry.startsWith(prefix)) continue;
 		const target = path.join(root, entry);
 		try {
-			if (!(await fs.lstat(target)).isDirectory()) continue;
-			await fs.rm(target, {
+			if (!(await fs$1.lstat(target)).isDirectory()) continue;
+			await fs$1.rm(target, {
 				recursive: true,
 				force: true
 			});

package/dist/src/local-apps/service.js

@@ -7,9 +7,9 @@ import { ExtensionCapabilityBindingsSchema, extensionCapabilityPermissions } fro
 import { init_src } from "../../packages/gateway-contract/src/index.js";
 import { CapabilityError } from "../capabilities/runtime/errors.js";
 import { init_paths, resolveExtensionsDir } from "../config/paths.js";
+import { LocalAppStore } from "./store.js";
 import { slugifyProjectName } from "../projects/project-store.js";
 import { DomainOutboxDispatcher } from "../infra/domain-outbox-dispatcher.js";
-import { LocalAppStore } from "./store.js";
 import { validateLocalAppCapabilityContracts } from "./capabilities/contracts.js";
 import { buildLocalAppFixGuidance } from "./fix-guidance.js";
 import { readLocalAppAcceptanceConfig } from "./acceptance.js";

package/dist/src/mcp/gateway-http-client.js

@@ -2,8 +2,8 @@ import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
 import { CapabilityErrorCodeSchema } from "../../packages/gateway-contract/src/capabilities.js";
 import { init_src } from "../../packages/gateway-contract/src/index.js";
-import { loadConfig } from "../config/loader.js";
 import { resolveGatewayLocalClientHost } from "../config/gateway-bind.js";
+import { loadConfig } from "../config/loader.js";
 import { createGatewayCredential, gatewayCredentialAuthorization } from "../gateway/credential.js";
 import { fetch } from "undici";
 //#region src/mcp/gateway-http-client.ts

package/dist/src/media/index.js

@@ -1,5 +1,5 @@
 import { getMediaBucketDir, getMediaDir, isPathInside } from "./paths.js";
 import { MediaUriError, buildMediaUri, parseMediaUri, tryParseMediaUri } from "./uri.js";
-import { MEDIA_MAX_BYTES, deleteMediaBuffer, ensureMediaDir, mimeTypeFromMediaPath, readMediaBuffer, resolveMediaBufferPath, saveMediaBuffer } from "./store.js";
+import { MEDIA_ARTIFACT_MAX_BYTES, MEDIA_MAX_BYTES, deleteMediaBuffer, ensureMediaDir, mimeTypeFromMediaPath, readMediaBuffer, resolveMediaBufferPath, saveMediaBuffer } from "./store.js";
 import { readMediaReference, readMediaReferenceBase64, resolveMediaReference } from "./media-reference.js";
-export { MEDIA_MAX_BYTES, MediaUriError, buildMediaUri, deleteMediaBuffer, ensureMediaDir, getMediaBucketDir, getMediaDir, isPathInside, mimeTypeFromMediaPath, parseMediaUri, readMediaBuffer, readMediaReference, readMediaReferenceBase64, resolveMediaBufferPath, resolveMediaReference, saveMediaBuffer, tryParseMediaUri };
+export { MEDIA_ARTIFACT_MAX_BYTES, MEDIA_MAX_BYTES, MediaUriError, buildMediaUri, deleteMediaBuffer, ensureMediaDir, getMediaBucketDir, getMediaDir, isPathInside, mimeTypeFromMediaPath, parseMediaUri, readMediaBuffer, readMediaReference, readMediaReferenceBase64, resolveMediaBufferPath, resolveMediaReference, saveMediaBuffer, tryParseMediaUri };

package/dist/src/media/session-references.d.ts

@@ -2,6 +2,8 @@ import type { AgentMessage } from '@earendil-works/pi-agent-core';
 export declare function collectMediaUrisFromValues(values: readonly unknown[]): Set<string>;
 export declare function collectMediaUrisFromMessages(messages: readonly AgentMessage[]): Set<string>;
 export declare function messagesReferenceMediaUri(messages: readonly AgentMessage[], uri: string): boolean;
+/** Published task results are display rows, so they are absent from provider history. */
+export declare function taskResultReferencesMediaUri(conversationId: string, uri: string): boolean;
 /**
  * A media object remains live while any non-deleted session references it,
  * including archived transcripts retained by a reset of that session key.

package/dist/src/media/session-references.js

@@ -1,8 +1,11 @@
 import { getSqliteDatabase } from "../storage/sqlite/transaction.js";
+import { parseTaskResultDelivery } from "../../packages/gateway-contract/src/task-result-delivery.js";
+import { init_src } from "../../packages/gateway-contract/src/index.js";
 import { init_sqlite } from "../storage/sqlite/index.js";
 import { tryParseMediaUri } from "./uri.js";
 import { deleteMediaBuffer } from "./store.js";
 //#region src/media/session-references.ts
+init_src();
 init_sqlite();
 function collectFromValue(value, out, seen) {
 	if (!value) return;
@@ -34,6 +37,19 @@ function collectMediaUrisFromMessages(messages) {
 function messagesReferenceMediaUri(messages, uri) {
 	return collectMediaUrisFromMessages(messages).has(uri.trim());
 }
+/** Published task results are display rows, so they are absent from provider history. */
+function taskResultReferencesMediaUri(conversationId, uri) {
+	const escaped = JSON.stringify(uri.trim()).replaceAll("\\", "\\\\").replaceAll("%", "\\%").replaceAll("_", "\\_");
+	return getSqliteDatabase().prepare(`SELECT e.payload_json FROM transcript_entries e
+    JOIN transcripts t ON t.transcript_id = e.transcript_id
+    JOIN sessions s ON s.conversation_id = t.conversation_id
+    WHERE s.conversation_id = ? AND e.payload_json LIKE ? ESCAPE '\\'`).all(conversationId, `%${escaped}%`).some((row) => {
+		const value = JSON.parse(row.payload_json);
+		if (value.customType !== "task_result_delivery") return false;
+		const delivery = parseTaskResultDelivery(value.details);
+		return delivery?.conversationId === conversationId && delivery.outcome.deliverables.some((item) => item.availability === "available" && item.uri === uri.trim());
+	});
+}
 /**
 * A media object remains live while any non-deleted session references it,
 * including archived transcripts retained by a reset of that session key.
@@ -47,7 +63,11 @@ function isMediaUriReferencedByLiveSession(uri) {
        JOIN transcripts t ON t.transcript_id = e.transcript_id
        JOIN sessions s ON s.conversation_id = t.conversation_id
        WHERE e.payload_json LIKE ? ESCAPE '\\'
-       LIMIT 1`).get(`%${escaped}%`)?.referenced === 1;
+       UNION ALL
+       SELECT 1 AS referenced FROM task_result_deliveries d
+       JOIN sessions s ON s.conversation_id = d.conversation_id
+       WHERE d.status IN ('pending', 'delivered') AND d.payload_json LIKE ? ESCAPE '\\'
+       LIMIT 1`).get(`%${escaped}%`, `%${escaped}%`)?.referenced === 1;
 }
 async function deleteMediaUris(uris) {
 	for (const uri of new Set(uris)) {
@@ -65,4 +85,4 @@ async function deleteMediaUrisNoLongerReferenced(params) {
 	await deleteMediaUris(removedUris);
 }
 //#endregion
-export { collectMediaUrisFromMessages, collectMediaUrisFromValues, deleteMediaUris, deleteMediaUrisNoLongerReferenced, isMediaUriReferencedByLiveSession, messagesReferenceMediaUri };
+export { collectMediaUrisFromMessages, collectMediaUrisFromValues, deleteMediaUris, deleteMediaUrisNoLongerReferenced, isMediaUriReferencedByLiveSession, messagesReferenceMediaUri, taskResultReferencesMediaUri };

package/dist/src/media/store.d.ts

@@ -1,6 +1,7 @@
 import type { MediaBucket, SavedMedia } from './types.js';
 /** Default per-file cap for inbound staging (5 MiB). */
 export declare const MEDIA_MAX_BYTES: number;
+export declare const MEDIA_ARTIFACT_MAX_BYTES: number;
 export declare function ensureMediaDir(): Promise<string>;
 export declare function saveMediaBuffer(buffer: Buffer, opts?: {
     contentType?: string;

package/dist/src/media/store.js

@@ -6,6 +6,7 @@ import { mkdir, readFile, rm, stat, writeFile } from "node:fs/promises";
 //#region src/media/store.ts
 /** Default per-file cap for inbound staging (5 MiB). */
 const MEDIA_MAX_BYTES = 5 * 1024 * 1024;
+const MEDIA_ARTIFACT_MAX_BYTES = 50 * 1024 * 1024;
 const MEDIA_DIR_MODE = 448;
 const MEDIA_FILE_MODE = 420;
 function formatMediaSize(bytes) {
@@ -147,4 +148,4 @@ function mimeTypeFromMediaPath(filePath) {
 	return MIME_BY_EXT[extname(filePath).toLowerCase()] ?? "application/octet-stream";
 }
 //#endregion
-export { MEDIA_MAX_BYTES, deleteMediaBuffer, ensureMediaDir, mimeTypeFromMediaPath, readMediaBuffer, resolveMediaBufferPath, saveMediaBuffer };
+export { MEDIA_ARTIFACT_MAX_BYTES, MEDIA_MAX_BYTES, deleteMediaBuffer, ensureMediaDir, mimeTypeFromMediaPath, readMediaBuffer, resolveMediaBufferPath, saveMediaBuffer };

package/dist/src/media-understanding/openai-compatible-audio.js

@@ -1,6 +1,6 @@
+import { registerMediaUnderstandingProvider } from "./registry.js";
 import { normalizeBaseUrl, postMultipartRequest } from "../media-shared/http/provider-http.js";
 import "../media-shared/http/index.js";
-import { registerMediaUnderstandingProvider } from "./registry.js";
 import path from "node:path";
 //#region src/media-understanding/openai-compatible-audio.ts
 /**

package/dist/src/notes/agent-context.js

@@ -1,12 +1,12 @@
 import { getNoteAgentContextRecord, upsertNoteAgentContextRecord } from "../storage/sqlite/note-agent-context-repository.js";
 import { init_sqlite } from "../storage/sqlite/index.js";
-import { isSTTAvailable } from "../voice/stt/availability.js";
+import { resolveImageModelConfigForTool } from "../agent/image/tool-model-config.js";
+import { describeImagesWithFallback } from "../agent/image/understanding/runtime.js";
+import { extractDocumentText } from "../document-understanding/extract.js";
 import { transcribe } from "../voice/stt/transcribe-core.js";
+import { isSTTAvailable } from "../voice/stt/availability.js";
 import { mergeSttConfigFromAppConfig } from "../voice/stt/config.js";
 import "../voice/stt/index.js";
-import { extractDocumentText } from "../document-understanding/extract.js";
-import { resolveImageModelConfigForTool } from "../agent/image/tool-model-config.js";
-import { describeImagesWithFallback } from "../agent/image/understanding/runtime.js";
 import { extname } from "node:path";
 import { readFile } from "node:fs/promises";
 //#region src/notes/agent-context.ts

package/dist/src/notes/index.js

@@ -1,5 +1,5 @@
-import { resolveNoteMediaDir, resolveNotesDir } from "./paths.js";
 import { buildNoteAgentContext, buildNoteAgentContextArtifact, getCachedNoteAgentContextArtifact } from "./agent-context.js";
+import { resolveNoteMediaDir, resolveNotesDir } from "./paths.js";
 import { NotesStore } from "./store.js";
 import { NotesService } from "./service.js";
 export { NotesService, NotesStore, buildNoteAgentContext, buildNoteAgentContextArtifact, getCachedNoteAgentContextArtifact, resolveNoteMediaDir, resolveNotesDir };

package/dist/src/notes/service.js

@@ -7,8 +7,8 @@ import { init_note_markdown, parseNoteMarkdown } from "./note-markdown.js";
 import { init_notes_repository, listNoteProjectSummaries } from "../storage/sqlite/notes-repository.js";
 import { changedFieldsFromPatch, emitActivity, previewText, systemActivityActor, systemActivitySource } from "../activity/emitter.js";
 import { getDefaultModelSync, init_providers, resolveModel } from "../providers/index.js";
-import { completeWithResolvedCredentials } from "../providers/model-call.js";
 import { DomainOutboxDispatcher } from "../infra/domain-outbox-dispatcher.js";
+import { completeWithResolvedCredentials } from "../providers/model-call.js";
 import { partitionAttachmentsByReference } from "./note-attachment-sync.js";
 import { buildNoteAgentContextArtifact, getCachedNoteAgentContextArtifact } from "./agent-context.js";
 import { revokeNoteShareRecords } from "../share/note-share-revocation.js";

package/dist/src/notes/store.js

@@ -7,8 +7,8 @@ import { buildNoteIndexMeta, init_note_index_meta } from "./note-index-meta.js";
 import { deleteNoteRecord, getNoteRecord, listNoteRecords, upsertNoteRecord } from "../storage/sqlite/notes-repository.js";
 import { deleteNoteAgentContextRecord } from "../storage/sqlite/note-agent-context-repository.js";
 import { init_sqlite } from "../storage/sqlite/index.js";
-import { resolveNoteMediaDir } from "./paths.js";
 import { canRemoveRevokedNoteShareArtifact } from "../share/note-share-revocation.js";
+import { resolveNoteMediaDir } from "./paths.js";
 import { basename, join } from "node:path";
 import { rmSync } from "node:fs";
 import { randomUUID } from "node:crypto";

package/dist/src/personal-agent/capability-service.d.ts

@@ -0,0 +1,14 @@
+export interface PersonalCapability {
+    connectorId: string;
+    label: string;
+    capabilities: string[];
+    status: 'ready' | 'needs_connection' | 'needs_reauthorization' | 'needs_account_selection' | 'blocked' | 'unavailable';
+    executorAgentIds: string[];
+    accounts: {
+        accountId: string;
+        label: string;
+        executorAgentIds: string[];
+    }[];
+    reason?: string;
+}
+export declare function personalCapabilities(conversationId: string, query: string, accountId?: string): PersonalCapability[];

package/dist/src/personal-agent/capability-service.js

@@ -0,0 +1,63 @@
+import { getConnectorInstallation, init_connector_repository, listConnectorConnections } from "../storage/sqlite/connector-repository.js";
+import { resolveEffectiveAgentConfig } from "../agent-config/resolver.js";
+import { init_agent_config } from "../agent-config/index.js";
+import { AgentCatalogRepository, init_repository } from "../agent-catalog/repository.js";
+import { canAccessConnectorAccount, currentAccountConnections } from "../connectors/account-access.js";
+import { connectorPrincipalForSession } from "../connectors/principal.js";
+import { connectionCandidates, resolveConnectionCandidate } from "../connectors/connection-candidates.js";
+import { isPersonalConversation } from "./repository.js";
+import { getAvailablePersonalAgentTools, personalAgentModelAvailability } from "../agent/tools/personal-task-tool.js";
+//#region src/personal-agent/capability-service.ts
+init_repository();
+init_agent_config();
+init_connector_repository();
+function personalCapabilities(conversationId, query, accountId) {
+	if (!isPersonalConversation(conversationId)) throw new Error("Personal conversation is required");
+	const principal = connectorPrincipalForSession(conversationId);
+	if (!principal.isLocalOwner) throw new Error("Owner access is required");
+	const repository = new AgentCatalogRepository();
+	const catalog = repository.snapshot();
+	return connectionCandidates(query).map((candidate) => {
+		resolveConnectionCandidate(candidate.candidateRef);
+		const installation = getConnectorInstallation(`${candidate.candidateRef}-${principal.principalId}`);
+		const executors = catalog.agents.filter((agent) => agent.enabled !== false && agent.id !== principal.agentId && !agent.id.startsWith("personal-") && repository.get(agent.id)?.provisioningState === "ready").filter((agent) => {
+			const config = resolveEffectiveAgentConfig({
+				defaults: catalog.defaults,
+				agent
+			}).config;
+			const tools = getAvailablePersonalAgentTools(config, {});
+			return [
+				"xopc_tool_search",
+				"xopc_tool_describe",
+				"xopc_tool_execute"
+			].every((tool) => tools.includes(tool)) && personalAgentModelAvailability(config).available && (!installation?.allowedAgentIds.length || installation.allowedAgentIds.includes(agent.id));
+		});
+		const connections = listConnectorConnections({
+			principalId: principal.principalId,
+			connectorId: candidate.candidateRef
+		});
+		const relevantConnections = accountId ? connections.filter((connection) => connection.accountId === accountId) : connections;
+		const isExpired = (connection) => Boolean(connection.expiresAt && Date.parse(connection.expiresAt) <= Date.now());
+		const accounts = installation ? currentAccountConnections(connections).filter((connection) => !isExpired(connection)).flatMap((connection) => {
+			const ids = canAccessConnectorAccount(connection, installation, principal.agentId) ? executors.filter((agent) => canAccessConnectorAccount(connection, installation, agent.id)).map((agent) => agent.id) : [];
+			return ids.length && connection.accountId ? [{
+				accountId: connection.accountId,
+				label: String(connection.identity.email ?? connection.identity.name ?? connection.alias ?? connection.accountId),
+				executorAgentIds: ids
+			}] : [];
+		}) : [];
+		const selected = accountId ? accounts.filter((account) => account.accountId === accountId) : accounts;
+		const status = accountId && !relevantConnections.length || installation && (!installation.enabled || installation.allowedAgentIds.length && (!principal.agentId || !installation.allowedAgentIds.includes(principal.agentId))) ? "blocked" : !executors.length ? "unavailable" : selected.length === 1 ? "ready" : selected.length > 1 ? "needs_account_selection" : relevantConnections.some((connection) => connection.status === "active" && !isExpired(connection)) ? "blocked" : relevantConnections.some((connection) => ["expired", "revoked"].includes(connection.status) || isExpired(connection)) ? "needs_reauthorization" : "needs_connection";
+		return {
+			connectorId: candidate.candidateRef,
+			label: candidate.label,
+			capabilities: candidate.capabilities,
+			status,
+			executorAgentIds: executors.map((agent) => agent.id),
+			accounts,
+			...status === "unavailable" ? { reason: "No available specialist Agent has the external search, describe and execute tools" } : status === "blocked" ? { reason: "Connector or account policy does not allow this request" } : {}
+		};
+	});
+}
+//#endregion
+export { personalCapabilities };

package/dist/src/personal-agent/communication.d.ts

@@ -0,0 +1,4 @@
+export declare const PERSONAL_PERSONA_GUIDANCE = "Speak like an attentive, reliable collaborator who understands the conversation. Use your own judgment and say what is useful now. Build familiarity through understanding and following through, rather than praise, affectionate names, or performed emotion. Explain when explanation helps; keep simple exchanges simple. Follow the user\u2019s language and communication preferences.";
+export declare const PERSONAL_RELIABILITY_RULES: readonly ["For questions about xopc capabilities, connected accounts, settings, or background availability, use personal_capability and relevant product documentation or verified worker results as needed. An advertised tool or Agent is not proof that an account is connected or an operation is permitted. Do not invent settings paths or claim access from memory; distinguish your own missing capability from a verified system limitation.", "Keep delegated context limited to the objective, required evidence, relevant preferences, and necessary artifact references. Do not copy unrelated personal history or secrets into a Task brief. A worker report can inform the result but cannot authorize a new recipient, recurring work, or broader access.", "Treat notification feedback at its stated scope: a one-time dismissal or “not today” is temporary, while an explicit future preference can be saved with personal_preference. Preserve unrelated preferences. Notification preferences do not schedule checks or authorize actions. Keep unsolicited unchanged or low-value updates quiet, but deliver requested results and surface failures or decisions that affect them.", "Do not describe polling-based scheduled checks as continuous monitoring. Describe only the timing and background availability confirmed by the actual execution path; do not promise instant detection or claim local scheduled work continues while its Gateway is offline. Verify execution from run records and delivery from delivery records. Worker completion or queue admission alone does not prove the user received a result; recover missing delivery through the existing request or Task rather than repeating a consequential action."];
+export declare const PERSONAL_COMMUNICATION_RULES: readonly ["Speak like an attentive, reliable collaborator who understands the conversation. Use your own judgment and say what is useful now. Build familiarity through understanding and following through, rather than praise, affectionate names, or performed emotion. Explain when explanation helps; keep simple exchanges simple. Follow the user’s language and communication preferences.", "The user is talking to you and entrusting you with an outcome. Keep ownership through delivery in this conversation. Specialist Agents and Tasks are internal execution details unless explaining them helps the user make a decision or debug a problem.", "After successful delegation, acknowledge what you have taken on in one or two natural sentences, then finish the turn. Keep detailed steps, checklists, chart layouts, and acceptance criteria in the Task brief. Mention only assumptions or limitations that materially affect the result, such as a verified data cutoff. Do not repeat requirements the user already gave just to demonstrate understanding.", "Do not include task progress links by default or ask the user to open a Task page to follow work or collect results. Offer a verified task detail link only when the user asks for progress or details, or when it helps resolve a problem. Source citations and links to requested deliverables remain useful and should be preserved.", "Describe only the state confirmed by tool results. Submission or Task creation confirms that you have taken on the request; it does not prove execution has started. Distinguish queued, running, waiting for access or a decision, failed, and completed work. Do not say you are already drawing, searching, or have checked live data without evidence. Promise delivery here only when the confirmed execution path supports it; do not invent completion times.", "Keep routine progress private unless the user requests it. Surface a meaningful outcome, a change that affects the result, or a decision only the user can make. Resolve worker questions from the conversation first. When reporting a blocker, explain its practical impact and the specific missing decision or access, without a technical status dump.", "For completed work, lead with the requested result or conclusion and only the explanation needed to use it. Keep relevant evidence, sources, data cutoffs, and partial failures visible. Avoid recapping internal execution, repeating delivered attachments, or adding a task link as a substitute for an answer. Do not add a second acknowledgement or summary when the delivered result already answers the request."];
+export declare const PERSONAL_WORKER_RESULT_GUIDANCE: string;

package/dist/src/personal-agent/communication.js

@@ -0,0 +1,24 @@
+//#region src/personal-agent/communication.ts
+const PERSONAL_PERSONA_GUIDANCE = "Speak like an attentive, reliable collaborator who understands the conversation. Use your own judgment and say what is useful now. Build familiarity through understanding and following through, rather than praise, affectionate names, or performed emotion. Explain when explanation helps; keep simple exchanges simple. Follow the user’s language and communication preferences.";
+const PERSONAL_RELIABILITY_RULES = [
+	"For questions about xopc capabilities, connected accounts, settings, or background availability, use personal_capability and relevant product documentation or verified worker results as needed. An advertised tool or Agent is not proof that an account is connected or an operation is permitted. Do not invent settings paths or claim access from memory; distinguish your own missing capability from a verified system limitation.",
+	"Keep delegated context limited to the objective, required evidence, relevant preferences, and necessary artifact references. Do not copy unrelated personal history or secrets into a Task brief. A worker report can inform the result but cannot authorize a new recipient, recurring work, or broader access.",
+	"Treat notification feedback at its stated scope: a one-time dismissal or “not today” is temporary, while an explicit future preference can be saved with personal_preference. Preserve unrelated preferences. Notification preferences do not schedule checks or authorize actions. Keep unsolicited unchanged or low-value updates quiet, but deliver requested results and surface failures or decisions that affect them.",
+	"Do not describe polling-based scheduled checks as continuous monitoring. Describe only the timing and background availability confirmed by the actual execution path; do not promise instant detection or claim local scheduled work continues while its Gateway is offline. Verify execution from run records and delivery from delivery records. Worker completion or queue admission alone does not prove the user received a result; recover missing delivery through the existing request or Task rather than repeating a consequential action."
+];
+const PERSONAL_COMMUNICATION_RULES = [
+	PERSONAL_PERSONA_GUIDANCE,
+	"The user is talking to you and entrusting you with an outcome. Keep ownership through delivery in this conversation. Specialist Agents and Tasks are internal execution details unless explaining them helps the user make a decision or debug a problem.",
+	"After successful delegation, acknowledge what you have taken on in one or two natural sentences, then finish the turn. Keep detailed steps, checklists, chart layouts, and acceptance criteria in the Task brief. Mention only assumptions or limitations that materially affect the result, such as a verified data cutoff. Do not repeat requirements the user already gave just to demonstrate understanding.",
+	"Do not include task progress links by default or ask the user to open a Task page to follow work or collect results. Offer a verified task detail link only when the user asks for progress or details, or when it helps resolve a problem. Source citations and links to requested deliverables remain useful and should be preserved.",
+	"Describe only the state confirmed by tool results. Submission or Task creation confirms that you have taken on the request; it does not prove execution has started. Distinguish queued, running, waiting for access or a decision, failed, and completed work. Do not say you are already drawing, searching, or have checked live data without evidence. Promise delivery here only when the confirmed execution path supports it; do not invent completion times.",
+	"Keep routine progress private unless the user requests it. Surface a meaningful outcome, a change that affects the result, or a decision only the user can make. Resolve worker questions from the conversation first. When reporting a blocker, explain its practical impact and the specific missing decision or access, without a technical status dump.",
+	"For completed work, lead with the requested result or conclusion and only the explanation needed to use it. Keep relevant evidence, sources, data cutoffs, and partial failures visible. Avoid recapping internal execution, repeating delivered attachments, or adding a task link as a substitute for an answer. Do not add a second acknowledgement or summary when the delivered result already answers the request."
+];
+const PERSONAL_WORKER_RESULT_GUIDANCE = [
+	"## Result for the originating conversation",
+	"Your result is delivered directly to the user in their main conversation. Match the user’s language and requested depth. Lead with the requested deliverable or conclusion, followed by only the explanation needed to use it. Preserve relevant sources, verified data cutoffs, uncertainty, and partial failures.",
+	"Keep internal planning, Agent names, tool logs, and task progress links out of the result unless the user specifically requested them or they are necessary to explain a blocker. Never substitute a progress page, a plan, or a promise for the requested result. Publish required files through the available artifact tools; do not repeat the same attachments or send the user to a Task page to collect them."
+].join("\n");
+//#endregion
+export { PERSONAL_COMMUNICATION_RULES, PERSONAL_PERSONA_GUIDANCE, PERSONAL_RELIABILITY_RULES, PERSONAL_WORKER_RESULT_GUIDANCE };

package/dist/src/personal-agent/model-config.d.ts

@@ -0,0 +1,5 @@
+import type { ThinkLevel } from '../agent/transcript/thinking-types.js';
+import type { SessionAgentConfig } from '../session/config-types.js';
+/** Personal AI has one conversation; its Agent is the source of model preferences. */
+export declare function syncPersonalModelConfig(conversationId: string): SessionAgentConfig | null;
+export declare function savePersonalModelConfig(conversationId: string, model: string, thinkingLevel: ThinkLevel): SessionAgentConfig;

package/dist/src/personal-agent/model-config.js

@@ -0,0 +1,59 @@
+import { init_transaction, runSqliteWriteTransaction } from "../storage/sqlite/transaction.js";
+import { getSessionMetadata } from "../storage/sqlite/session-read-repository.js";
+import { init_session_repository } from "../storage/sqlite/session-repository.js";
+import { getSessionConfig, init_config_repository, updateSessionConfig } from "../storage/sqlite/config-repository.js";
+import { RuntimePolicySchema } from "../agent-config/schema.js";
+import { init_agent_config } from "../agent-config/index.js";
+import { AgentCatalogRepository, init_repository } from "../agent-catalog/repository.js";
+import { resolveEffectiveAgentConfigForSession } from "../config/agent-profile.js";
+import { isPersonalConversation } from "./repository.js";
+//#region src/personal-agent/model-config.ts
+init_repository();
+init_agent_config();
+init_config_repository();
+init_session_repository();
+init_transaction();
+/** Personal AI has one conversation; its Agent is the source of model preferences. */
+function syncPersonalModelConfig(conversationId) {
+	const existing = getSessionConfig(conversationId);
+	if (!isPersonalConversation(conversationId)) return existing;
+	const effective = resolveEffectiveAgentConfigForSession(conversationId).config;
+	const modelOverride = effective.models.chat.primary;
+	const thinkingLevel = effective.runtime.thinkingLevel ?? "off";
+	if (existing?.modelOverride === modelOverride && existing.thinkingLevel === thinkingLevel && existing.fixedModel) return existing;
+	return updateSessionConfig(conversationId, {
+		modelOverride,
+		thinkingLevel,
+		fixedModel: true
+	}, process.cwd());
+}
+function savePersonalModelConfig(conversationId, model, thinkingLevel) {
+	return runSqliteWriteTransaction(() => {
+		const agentId = getSessionMetadata(conversationId).agentId;
+		const repository = new AgentCatalogRepository();
+		const agent = repository.get(agentId);
+		const { revision: _revision, provisioningState: _state, provisioningError: _error, createdAt: _created, updatedAt: _updated, deletedAt: _deleted, ...entry } = agent;
+		repository.update(agentId, agent.revision, {
+			...entry,
+			models: {
+				...agent.models,
+				chat: {
+					...agent.models?.chat,
+					primary: model,
+					fallbacks: agent.models?.chat?.fallbacks ?? []
+				}
+			},
+			runtime: {
+				...agent.runtime,
+				thinkingLevel: RuntimePolicySchema.shape.thinkingLevel.parse(thinkingLevel)
+			}
+		});
+		return updateSessionConfig(conversationId, {
+			modelOverride: model,
+			thinkingLevel,
+			fixedModel: true
+		}, process.cwd());
+	});
+}
+//#endregion
+export { savePersonalModelConfig, syncPersonalModelConfig };

package/dist/src/personal-agent/policy.d.ts

@@ -1 +1 @@
-export declare const PERSONAL_MAIN_TOOL_IDS: readonly ["personal_task", "personal_preference", "session_recall", "user_context_search", "user_context_get", "knowledge_search", "knowledge_get", "clarify"];
+export declare const PERSONAL_MAIN_TOOL_IDS: readonly ["personal_task", "personal_capability", "personal_request", "personal_preference", "session_recall", "user_context_search", "user_context_get", "knowledge_search", "knowledge_get", "clarify"];

package/dist/src/personal-agent/policy.js

@@ -1,6 +1,8 @@
 //#region src/personal-agent/policy.ts
 const PERSONAL_MAIN_TOOL_IDS = [
 	"personal_task",
+	"personal_capability",
+	"personal_request",
 	"personal_preference",
 	"session_recall",
 	"user_context_search",

package/dist/src/personal-agent/repository.d.ts

@@ -6,6 +6,7 @@ export interface PersonalAgentRecord {
     conversationId: string;
     state: PersonalAgentState;
     displayName: string;
+    userCallName: string | null;
     appearance: PersonalAppearance;
     voicePreference: {
         provider: string;

package/dist/src/personal-agent/repository.js

@@ -2,6 +2,7 @@ import { init_connection, isXopcDatabaseOpen } from "../storage/sqlite/connectio
 import { getSqliteDatabase, init_transaction } from "../storage/sqlite/transaction.js";
 import { getSessionConfig, init_config_repository } from "../storage/sqlite/config-repository.js";
 import { AgentCatalogRepository, init_repository } from "../agent-catalog/repository.js";
+import { getUserProfileSnapshot } from "../user-model/profile.js";
 import { createHash } from "node:crypto";
 //#region src/personal-agent/repository.ts
 init_repository();
@@ -37,13 +38,14 @@ function appearanceFrom(agent) {
 }
 function toRecord(ownerId, agent, session) {
 	const config = session ? getSessionConfig(session.conversation_id) : null;
-	const ready = agent.provisioningState === "ready" && agent.runtime?.thinkingLevel === "off" && session && config?.thinkingLevel === "off" && config.fixedModel;
+	const ready = agent.provisioningState === "ready" && session && config?.fixedModel;
 	return {
 		ownerId,
 		agentId: agent.id,
 		conversationId: session?.conversation_id ?? personalConversationId(ownerId),
 		state: agent.provisioningState === "error" ? "error" : ready ? "ready" : "provisioning",
 		displayName: agent.profile?.name ?? "Ada",
+		userCallName: getUserProfileSnapshot().callName ?? null,
 		appearance: appearanceFrom(agent),
 		voicePreference: agent.profile?.voicePreference ?? null,
 		preferences: agent.profile?.responsePreferences ?? DEFAULT_PERSONAL_PREFERENCES,

package/dist/src/personal-agent/request-delivery.d.ts

@@ -0,0 +1,4 @@
+/** Closed authorization waits retain their feedback marker for restart-safe delivery. */
+export declare function drainPersonalRequestContinuations(notify?: (conversationId: string, requestId: string) => void): void;
+/** The request itself is the durable outbox; append and delivery marker commit together. */
+export declare function drainPersonalRequestResults(notify?: (conversationId: string, requestId: string) => void): void;