@xopcai/xopc 0.0.359 → 0.0.360

package/dist/src/gateway/hono/routes/personal-agent.js

@@ -1,12 +1,15 @@
 import { getDevice, init_device_access_repository } from "../../../storage/sqlite/device-access-repository.js";
+import { getPersonalRequest, init_request_repository, listPersonalRequests } from "../../../personal-agent/request-repository.js";
 import { TaskOriginRepository } from "../../../tasks/task-origin-repository.js";
 import { getPersonalAgent } from "../../../personal-agent/repository.js";
+import { cancelPersonalRequest, personalRequestSnapshot, publishPersonalRequest } from "../../../personal-agent/request-service.js";
 import { PersonalOnboardingDraftSchema, PersonalOnboardingStepSchema, finishPersonalWelcome, getPersonalOnboarding, savePersonalOnboarding } from "../../../personal-agent/onboarding.js";
 import { PersonalAppearanceSchema, PersonalPreferencesSchema, createOrResumePersonalAgent, ensurePersonalConversationVisibility, listPersonalModels, patchPersonalProfile, refreshPersonalDelegationGuidance } from "../../../personal-agent/service.js";
 import { getGatewayPrincipal } from "../../security/gateway-principal.js";
 import { z } from "zod";
 //#region src/gateway/hono/routes/personal-agent.ts
 init_device_access_repository();
+init_request_repository();
 const CreateSchema = z.object({
 	model: z.string().trim().min(3).optional(),
 	displayName: z.string().trim().min(1).max(60).optional(),
@@ -71,6 +74,71 @@ function registerPersonalAgentRoutes(authenticated, deps) {
 			payload: await listPersonalModels()
 		});
 	});
+	authenticated.get("/api/personal-agent/requests", (c) => {
+		const ownerId = owner(c);
+		if (!ownerId) return c.json({
+			ok: false,
+			error: "Owner access is required"
+		}, 403);
+		const record = getPersonalAgent(ownerId);
+		return c.json({
+			ok: true,
+			payload: record ? listPersonalRequests(record.conversationId).map(personalRequestSnapshot) : []
+		});
+	});
+	authenticated.get("/api/personal-agent/requests/:requestId", (c) => {
+		const ownerId = owner(c);
+		if (!ownerId) return c.json({
+			ok: false,
+			error: "Owner access is required"
+		}, 403);
+		const request = getPersonalRequest(c.req.param("requestId"));
+		if (!request || request.conversationId !== getPersonalAgent(ownerId)?.conversationId) return c.json({
+			ok: false,
+			error: "Request not found"
+		}, 404);
+		return c.json({
+			ok: true,
+			payload: personalRequestSnapshot(request)
+		});
+	});
+	authenticated.post("/api/personal-agent/requests/:requestId/cancel", deps.strictRateLimitMiddleware, async (c) => {
+		const ownerId = owner(c);
+		if (!ownerId) return c.json({
+			ok: false,
+			error: "Owner access is required"
+		}, 403);
+		const request = getPersonalRequest(c.req.param("requestId"));
+		if (!request || request.conversationId !== getPersonalAgent(ownerId)?.conversationId) return c.json({
+			ok: false,
+			error: "Request not found"
+		}, 404);
+		const body = z.object({ expectedVersion: z.number().int().positive() }).strict().safeParse(await c.req.json().catch(() => null));
+		if (!body.success) return c.json({
+			ok: false,
+			error: "expectedVersion is required"
+		}, 400);
+		if (body.data.expectedVersion !== request.version) return c.json({
+			ok: false,
+			error: "Request changed"
+		}, 409);
+		try {
+			const cancelled = cancelPersonalRequest(request);
+			publishPersonalRequest(cancelled);
+			return c.json({
+				ok: true,
+				payload: {
+					...cancelled,
+					executionStopConfirmed: false
+				}
+			});
+		} catch (error) {
+			return c.json({
+				ok: false,
+				error: error instanceof Error ? error.message : String(error)
+			}, 409);
+		}
+	});
 	authenticated.get("/api/personal-agent/onboarding", (c) => {
 		const ownerId = owner(c);
 		if (!ownerId) return c.json({

package/dist/src/gateway/hono/routes/projects.js

@@ -7,12 +7,12 @@ import { loadTranscriptRowsForSession } from "../../../storage/sqlite/transcript
 import { init_sqlite } from "../../../storage/sqlite/index.js";
 import { ActivityService } from "../../../activity/service.js";
 import "../../../activity/index.js";
+import { CapabilityError } from "../../../capabilities/runtime/errors.js";
+import "../../../capabilities/runtime/dispatcher.js";
 import { resolveEffectiveAgentProfile } from "../../../config/agent-profile.js";
 import { TaskReadModelProjector } from "../../../tasks/task-read-model-projector.js";
 import { listKnowledgeItems, writeKnowledgeItem } from "../../../knowledge-memory/repository.js";
 import "../../../knowledge-memory/index.js";
-import { CapabilityError } from "../../../capabilities/runtime/errors.js";
-import "../../../capabilities/runtime/dispatcher.js";
 import { ProjectWorkspaceConflictError, ProjectWorkspaceMissingError } from "../../../projects/workspace-project.js";
 import { inferProjectExecutionMode, inferProjectKind } from "../../../projects/project-kind.js";
 import { ProjectDeletionBlockedError, ProjectWorkspaceInUseError } from "../../../projects/project-service.js";

package/dist/src/gateway/hono/routes/session-input-handler.js

@@ -4,9 +4,9 @@ import { browserPageContextsInputSchema } from "../../../../packages/gateway-con
 import { parseUserTurnDocument, userTurnDocumentRefIds } from "../../../../packages/gateway-contract/src/user-turn-document.js";
 import { init_src } from "../../../../packages/gateway-contract/src/index.js";
 import { endpointTurnClaimSchema, init_src as init_src$1 } from "../../../../packages/endpoint-tools-protocol/src/index.js";
-import { init_providers, resolveModel } from "../../../providers/index.js";
 import { CapabilityError } from "../../../capabilities/runtime/errors.js";
 import "../../../capabilities/runtime/dispatcher.js";
+import { init_providers, resolveModel } from "../../../providers/index.js";
 import { getModelThinking } from "../../../providers/model-thinking.js";
 import { validateWebchatAttachments, validateWebchatContent } from "../../chat-limits.js";
 import { isTaskDestructiveCommand } from "../../../session/reset-triggers.js";

package/dist/src/gateway/hono/routes/tasks.js

@@ -6,9 +6,9 @@ import { hasGatewayScope, init_gateway_scopes } from "../../security/gateway-sco
 import { enqueueTaskChangedEvent, init_task_change_events } from "../../../tasks/task-change-events.js";
 import { TaskRepository, init_task_repository } from "../../../tasks/task-repository.js";
 import { TaskRunRepository, init_task_run_repository } from "../../../tasks/task-run-repository.js";
-import { TaskConversationRepository } from "../../../tasks/task-conversation-repository.js";
 import { CapabilityError } from "../../../capabilities/runtime/errors.js";
 import "../../../capabilities/runtime/dispatcher.js";
+import { TaskConversationRepository } from "../../../tasks/task-conversation-repository.js";
 import { TaskCriterionReviewRepository } from "../../../tasks/task-criterion-review-repository.js";
 import { TaskContextMutationOutputSchema } from "../../../tasks/capabilities/relations.js";
 import { TaskDeleteOutputSchema } from "../../../tasks/capabilities/management.js";

package/dist/src/gateway/image-generation-setup.js

@@ -1,11 +1,11 @@
 import { normalizeAgentId } from "../agent-catalog/id.js";
 import { AgentCatalogRepository, init_repository } from "../agent-catalog/repository.js";
-import { ConfigSchema, init_schema } from "../config/schema.js";
 import { init_agent_scope } from "../agent/agent-scope.js";
+import { AgentCatalogService } from "../agent-catalog/service.js";
+import { ConfigSchema, init_schema } from "../config/schema.js";
 import { resolveEffectiveAgentConfigForAgent } from "../config/agent-profile.js";
 import { fetchWithTimeoutGuarded } from "../media-shared/http/provider-http.js";
 import "../media-shared/http/index.js";
-import { AgentCatalogService } from "../agent-catalog/service.js";
 import { getImageGenerationProvider, listImageGenerationProvidersSummary } from "../agent/image/generation/provider-registry.js";
 //#region src/gateway/image-generation-setup.ts
 init_repository();

package/dist/src/gateway/lock.js

@@ -1,8 +1,8 @@
 import path from "node:path";
 import fs from "node:fs";
 import { createHash } from "node:crypto";
-import net from "node:net";
 import fs$1 from "node:fs/promises";
+import net from "node:net";
 import { homedir } from "os";
 //#region src/gateway/lock.ts
 /**

package/dist/src/gateway/media-access.js

@@ -3,7 +3,7 @@ import { FileServiceError } from "../files/file-service.js";
 import { resolveMediaReference } from "../media/media-reference.js";
 import { pendingTranscriptReferencesMediaUri } from "../agent/inbound/attachment-pipeline.js";
 import { TaskContextRepository } from "../tasks/task-context-repository.js";
-import { messagesReferenceMediaUri } from "../media/session-references.js";
+import { messagesReferenceMediaUri, taskResultReferencesMediaUri } from "../media/session-references.js";
 //#region src/gateway/media-access.ts
 init_task_repository();
 /** Resolve media only when the supplied session or task references it. */
@@ -11,7 +11,7 @@ async function resolveScopedMediaReference(service, uri, scope) {
 	const { conversationId, taskId } = scope;
 	if (!conversationId && !taskId) throw new FileServiceError(400, "Missing media scope");
 	const media = await resolveMediaReference(uri);
-	const sessionReferencesUri = conversationId ? messagesReferenceMediaUri(await service.sessionIndexInstance.loadMessages(conversationId), media.uri) || pendingTranscriptReferencesMediaUri(conversationId, media.uri) : false;
+	const sessionReferencesUri = conversationId ? messagesReferenceMediaUri(await service.sessionIndexInstance.loadMessages(conversationId), media.uri) || pendingTranscriptReferencesMediaUri(conversationId, media.uri) || taskResultReferencesMediaUri(conversationId, media.uri) : false;
 	const taskReferencesUri = taskId && new TaskRepository().get(taskId) ? new TaskContextRepository().list(taskId).some((edge) => edge.targetKind === "file" && edge.targetId === media.uri) : false;
 	if (!sessionReferencesUri && !taskReferencesUri) throw new FileServiceError(404, "Not found");
 	return media;

package/dist/src/gateway/service.d.ts

@@ -48,6 +48,7 @@ export declare class GatewayService {
     private homeIntelligenceHost;
     private sessionIndex;
     private running;
+    private stopping;
     private startTime;
     private workspacePath;
     private readonly configCoordinator;
@@ -79,6 +80,7 @@ export declare class GatewayService {
     private connectorLearningCoordinator;
     private connectedKnowledgeCoordinator;
     private stopSessionTranscriptAutomationEvents;
+    private stopTaskResultQueued;
     private stopRealtimeLogBridge;
     /**
      * Webchat agent invocation surface (`runAgent`, `abortAgentRun`, `steer*`,
@@ -127,6 +129,7 @@ export declare class GatewayService {
     private createNotificationService;
     private readonly taskRunDispatch;
     private readonly taskMainUpdateDispatch;
+    private readonly taskResultDispatch;
     dispatchTaskRuns(): void;
     ensureTaskConversation(taskId: string, options?: {
         runId?: string;

package/dist/src/gateway/service.js

@@ -17,9 +17,9 @@ import { init_session_repository, listSessionMetadata, patchSessionMetadata } fr
 import { getSessionConfig, init_config_repository } from "../storage/sqlite/config-repository.js";
 import { init_sqlite } from "../storage/sqlite/index.js";
 import { normalizeAgentId } from "../agent-catalog/id.js";
+import { init_agent_scope, listAgentEntries, resolveAgentWorkspaceDir, resolveDefaultAgentId } from "../agent/agent-scope.js";
 import { init_config, resolveKnowledgeReadPolicy } from "../user-context/config.js";
 import { getAgentDefaultModelRef, init_schema } from "../config/schema.js";
-import { init_agent_scope, listAgentEntries, resolveAgentWorkspaceDir, resolveDefaultAgentId } from "../agent/agent-scope.js";
 import { init_agent_session_key, resolveAgentMainConversationId } from "../routing/agent-session-key.js";
 import { init_session_key, resolveConversationId, sanitizeSegment } from "../routing/session-key.js";
 import { getDefaultAgentId, init_resolve_route } from "../routing/resolve-route.js";
@@ -46,6 +46,7 @@ import { buildNoteAgentContext } from "../notes/agent-context.js";
 import { NotesStore } from "../notes/store.js";
 import { NotesService } from "../notes/service.js";
 import { LocalAppService } from "../local-apps/service.js";
+import { onTaskResultQueued } from "../tasks/task-result-delivery-repository.js";
 import { TaskApplicationService } from "../tasks/task-application-service.js";
 import { AutomationService } from "../automations/service/automation-service.js";
 import { TaskSignalService } from "../tasks/task-signal-service.js";
@@ -125,6 +126,7 @@ import { getXopcCloudCatalogCoordinator } from "../providers/xopc-cloud-catalog-
 import { ModelCatalogSyncService } from "../providers/model-catalog-sync-service.js";
 import { NotificationService } from "../notifications/service.js";
 import "../local-apps/index.js";
+import { TaskResultDeliveryService } from "../tasks/task-result-delivery-service.js";
 import { createRuntimeBrowserAutomationService } from "../browser/automations/runtime-service.js";
 import "../browser/automations/index.js";
 import { scheduleGatewayUpdateCheck } from "../infra/update-startup.js";
@@ -190,6 +192,7 @@ var GatewayService = class {
 	homeIntelligenceHost = null;
 	sessionIndex;
 	running = false;
+	stopping = false;
 	startTime = Date.now();
 	workspacePath;
 	configCoordinator;
@@ -313,6 +316,7 @@ var GatewayService = class {
 	connectorLearningCoordinator = null;
 	connectedKnowledgeCoordinator = null;
 	stopSessionTranscriptAutomationEvents = null;
+	stopTaskResultQueued = null;
 	stopRealtimeLogBridge = null;
 	/**
 	* Webchat agent invocation surface (`runAgent`, `abortAgentRun`, `steer*`,
@@ -823,6 +827,7 @@ var GatewayService = class {
 				}
 			})).ok;
 		});
+		if (this.stopping) return;
 		this.createTaskRunDispatcher().dispatch();
 		await this.createWorkflowRunService().dispatchTaskRuns();
 	}, (err) => {
@@ -877,7 +882,26 @@ var GatewayService = class {
 			phase: "task_main_update_dispatch"
 		}, `Main Agent update dispatch failed: ${errorMessage}`);
 	});
+	taskResultDispatch = createBackgroundTask(async () => {
+		await new TaskResultDeliveryService().drain((conversationId, deliveryId) => {
+			this.realtime.broker.publish("sessions", "session.task-result", {
+				conversationId,
+				deliveryId
+			});
+			this.emit("session.transcript_updated", {
+				key: conversationId,
+				deliveryId
+			});
+		});
+	}, (err) => {
+		log.error({
+			err,
+			phase: "task_result_dispatch"
+		}, "Task result dispatch failed");
+	});
 	dispatchTaskRuns() {
+		if (this.stopping) return;
+		this.taskResultDispatch();
 		this.taskRunDispatch();
 		this.taskMainUpdateDispatch();
 	}
@@ -957,6 +981,16 @@ var GatewayService = class {
 		saveConfig: (config) => this.saveConfig(config),
 		drain: (conversationId) => {
 			this.agentRunner.inputs.drain(conversationId);
+		},
+		onPersonalRequestDelivered: (conversationId, requestId) => {
+			this.realtime.broker.publish("sessions", "session.task-result", {
+				conversationId,
+				deliveryId: `personal-request:${requestId}`
+			});
+			this.emit("session.transcript_updated", {
+				key: conversationId,
+				requestId
+			});
 		}
 	});
 	submitSessionInput(...args) {
@@ -1140,6 +1174,8 @@ var GatewayService = class {
 	}
 	async startRuntime() {
 		if (this.running) return;
+		this.stopping = false;
+		this.taskRunDispatcher = null;
 		this.stopRealtimeLogBridge = subscribeToLogs((entry) => {
 			this.realtime.broker.publish("logs", "log.entry", entry);
 		});
@@ -1189,6 +1225,7 @@ var GatewayService = class {
 		this.createNotificationService().start();
 		this.startTime = Date.now();
 		this.running = true;
+		this.stopTaskResultQueued = onTaskResultQueued(() => this.taskResultDispatch());
 		this.taskRunDispatchTimer = setInterval(() => this.dispatchTaskRuns(), 1e3);
 		this.taskRunDispatchTimer.unref?.();
 		if (this.config.gateway?.scenes?.enabled === true) this.sceneHost = new GatewaySceneHost(getSqliteDatabase(), {
@@ -1477,6 +1514,12 @@ var GatewayService = class {
 	}
 	async stop() {
 		if (!this.running) return;
+		this.stopping = true;
+		this.taskRunDispatcher?.stop();
+		if (this.taskRunDispatchTimer) {
+			clearInterval(this.taskRunDispatchTimer);
+			this.taskRunDispatchTimer = null;
+		}
 		await this.sessionPreparations.stop();
 		setPairingBroadcastSink(null);
 		this.stopRealtimeLogBridge?.();
@@ -1496,10 +1539,6 @@ var GatewayService = class {
 		await this.discussionSealer.stop();
 		await this.discussionLiveWorker.stop();
 		this.notificationService?.stop();
-		if (this.taskRunDispatchTimer) {
-			clearInterval(this.taskRunDispatchTimer);
-			this.taskRunDispatchTimer = null;
-		}
 		await stopTailscaleExposure().catch((err) => {
 			log.warn({ err }, "Tailscale exposure shutdown failed");
 		});
@@ -1535,6 +1574,8 @@ var GatewayService = class {
 		await this.automationService.stop();
 		this.stopSessionTranscriptAutomationEvents?.();
 		this.stopSessionTranscriptAutomationEvents = null;
+		this.stopTaskResultQueued?.();
+		this.stopTaskResultQueued = null;
 		buckets.destroyAll();
 		closeXopcDatabase();
 		log.debug("Gateway service stopped");

package/dist/src/gateway/xopc-cloud-capability-setup.js

@@ -1,8 +1,8 @@
 import { AgentCatalogRepository, init_repository } from "../agent-catalog/repository.js";
+import { AgentCatalogService } from "../agent-catalog/service.js";
 import { getModelCatalogStore, init_model_catalog_store } from "../providers/model-catalog-store.js";
 import { getAvailableModels, init_providers } from "../providers/index.js";
 import { compareCatalogModels } from "../providers/model-catalog-ranking.js";
-import { AgentCatalogService } from "../agent-catalog/service.js";
 import { prepareUpdateGlobalDefaults } from "./global-defaults-admin.js";
 //#region src/gateway/xopc-cloud-capability-setup.ts
 init_repository();

package/dist/src/local-apps/service.js

@@ -5,10 +5,10 @@ import { currentOperationId, init_operation_context } from "../infra/operation-c
 import { afterSqliteCommit, init_transaction, runSqliteWriteTransaction } from "../storage/sqlite/transaction.js";
 import { ExtensionCapabilityBindingsSchema, extensionCapabilityPermissions } from "../../packages/gateway-contract/src/extension-capabilities.js";
 import { init_src } from "../../packages/gateway-contract/src/index.js";
+import { CapabilityError } from "../capabilities/runtime/errors.js";
 import { init_paths, resolveExtensionsDir } from "../config/paths.js";
 import { LocalAppStore } from "./store.js";
 import { slugifyProjectName } from "../projects/project-store.js";
-import { CapabilityError } from "../capabilities/runtime/errors.js";
 import { DomainOutboxDispatcher } from "../infra/domain-outbox-dispatcher.js";
 import { validateLocalAppCapabilityContracts } from "./capabilities/contracts.js";
 import { buildLocalAppFixGuidance } from "./fix-guidance.js";

package/dist/src/media/index.js

@@ -1,5 +1,5 @@
 import { getMediaBucketDir, getMediaDir, isPathInside } from "./paths.js";
 import { MediaUriError, buildMediaUri, parseMediaUri, tryParseMediaUri } from "./uri.js";
-import { MEDIA_MAX_BYTES, deleteMediaBuffer, ensureMediaDir, mimeTypeFromMediaPath, readMediaBuffer, resolveMediaBufferPath, saveMediaBuffer } from "./store.js";
+import { MEDIA_ARTIFACT_MAX_BYTES, MEDIA_MAX_BYTES, deleteMediaBuffer, ensureMediaDir, mimeTypeFromMediaPath, readMediaBuffer, resolveMediaBufferPath, saveMediaBuffer } from "./store.js";
 import { readMediaReference, readMediaReferenceBase64, resolveMediaReference } from "./media-reference.js";
-export { MEDIA_MAX_BYTES, MediaUriError, buildMediaUri, deleteMediaBuffer, ensureMediaDir, getMediaBucketDir, getMediaDir, isPathInside, mimeTypeFromMediaPath, parseMediaUri, readMediaBuffer, readMediaReference, readMediaReferenceBase64, resolveMediaBufferPath, resolveMediaReference, saveMediaBuffer, tryParseMediaUri };
+export { MEDIA_ARTIFACT_MAX_BYTES, MEDIA_MAX_BYTES, MediaUriError, buildMediaUri, deleteMediaBuffer, ensureMediaDir, getMediaBucketDir, getMediaDir, isPathInside, mimeTypeFromMediaPath, parseMediaUri, readMediaBuffer, readMediaReference, readMediaReferenceBase64, resolveMediaBufferPath, resolveMediaReference, saveMediaBuffer, tryParseMediaUri };

package/dist/src/media/session-references.d.ts

@@ -2,6 +2,8 @@ import type { AgentMessage } from '@earendil-works/pi-agent-core';
 export declare function collectMediaUrisFromValues(values: readonly unknown[]): Set<string>;
 export declare function collectMediaUrisFromMessages(messages: readonly AgentMessage[]): Set<string>;
 export declare function messagesReferenceMediaUri(messages: readonly AgentMessage[], uri: string): boolean;
+/** Published task results are display rows, so they are absent from provider history. */
+export declare function taskResultReferencesMediaUri(conversationId: string, uri: string): boolean;
 /**
  * A media object remains live while any non-deleted session references it,
  * including archived transcripts retained by a reset of that session key.

package/dist/src/media/session-references.js

@@ -1,8 +1,11 @@
 import { getSqliteDatabase } from "../storage/sqlite/transaction.js";
+import { parseTaskResultDelivery } from "../../packages/gateway-contract/src/task-result-delivery.js";
+import { init_src } from "../../packages/gateway-contract/src/index.js";
 import { init_sqlite } from "../storage/sqlite/index.js";
 import { tryParseMediaUri } from "./uri.js";
 import { deleteMediaBuffer } from "./store.js";
 //#region src/media/session-references.ts
+init_src();
 init_sqlite();
 function collectFromValue(value, out, seen) {
 	if (!value) return;
@@ -34,6 +37,19 @@ function collectMediaUrisFromMessages(messages) {
 function messagesReferenceMediaUri(messages, uri) {
 	return collectMediaUrisFromMessages(messages).has(uri.trim());
 }
+/** Published task results are display rows, so they are absent from provider history. */
+function taskResultReferencesMediaUri(conversationId, uri) {
+	const escaped = JSON.stringify(uri.trim()).replaceAll("\\", "\\\\").replaceAll("%", "\\%").replaceAll("_", "\\_");
+	return getSqliteDatabase().prepare(`SELECT e.payload_json FROM transcript_entries e
+    JOIN transcripts t ON t.transcript_id = e.transcript_id
+    JOIN sessions s ON s.conversation_id = t.conversation_id
+    WHERE s.conversation_id = ? AND e.payload_json LIKE ? ESCAPE '\\'`).all(conversationId, `%${escaped}%`).some((row) => {
+		const value = JSON.parse(row.payload_json);
+		if (value.customType !== "task_result_delivery") return false;
+		const delivery = parseTaskResultDelivery(value.details);
+		return delivery?.conversationId === conversationId && delivery.outcome.deliverables.some((item) => item.availability === "available" && item.uri === uri.trim());
+	});
+}
 /**
 * A media object remains live while any non-deleted session references it,
 * including archived transcripts retained by a reset of that session key.
@@ -47,7 +63,11 @@ function isMediaUriReferencedByLiveSession(uri) {
        JOIN transcripts t ON t.transcript_id = e.transcript_id
        JOIN sessions s ON s.conversation_id = t.conversation_id
        WHERE e.payload_json LIKE ? ESCAPE '\\'
-       LIMIT 1`).get(`%${escaped}%`)?.referenced === 1;
+       UNION ALL
+       SELECT 1 AS referenced FROM task_result_deliveries d
+       JOIN sessions s ON s.conversation_id = d.conversation_id
+       WHERE d.status IN ('pending', 'delivered') AND d.payload_json LIKE ? ESCAPE '\\'
+       LIMIT 1`).get(`%${escaped}%`, `%${escaped}%`)?.referenced === 1;
 }
 async function deleteMediaUris(uris) {
 	for (const uri of new Set(uris)) {
@@ -65,4 +85,4 @@ async function deleteMediaUrisNoLongerReferenced(params) {
 	await deleteMediaUris(removedUris);
 }
 //#endregion
-export { collectMediaUrisFromMessages, collectMediaUrisFromValues, deleteMediaUris, deleteMediaUrisNoLongerReferenced, isMediaUriReferencedByLiveSession, messagesReferenceMediaUri };
+export { collectMediaUrisFromMessages, collectMediaUrisFromValues, deleteMediaUris, deleteMediaUrisNoLongerReferenced, isMediaUriReferencedByLiveSession, messagesReferenceMediaUri, taskResultReferencesMediaUri };

package/dist/src/media/store.d.ts

@@ -1,6 +1,7 @@
 import type { MediaBucket, SavedMedia } from './types.js';
 /** Default per-file cap for inbound staging (5 MiB). */
 export declare const MEDIA_MAX_BYTES: number;
+export declare const MEDIA_ARTIFACT_MAX_BYTES: number;
 export declare function ensureMediaDir(): Promise<string>;
 export declare function saveMediaBuffer(buffer: Buffer, opts?: {
     contentType?: string;

package/dist/src/media/store.js

@@ -6,6 +6,7 @@ import { mkdir, readFile, rm, stat, writeFile } from "node:fs/promises";
 //#region src/media/store.ts
 /** Default per-file cap for inbound staging (5 MiB). */
 const MEDIA_MAX_BYTES = 5 * 1024 * 1024;
+const MEDIA_ARTIFACT_MAX_BYTES = 50 * 1024 * 1024;
 const MEDIA_DIR_MODE = 448;
 const MEDIA_FILE_MODE = 420;
 function formatMediaSize(bytes) {
@@ -147,4 +148,4 @@ function mimeTypeFromMediaPath(filePath) {
 	return MIME_BY_EXT[extname(filePath).toLowerCase()] ?? "application/octet-stream";
 }
 //#endregion
-export { MEDIA_MAX_BYTES, deleteMediaBuffer, ensureMediaDir, mimeTypeFromMediaPath, readMediaBuffer, resolveMediaBufferPath, saveMediaBuffer };
+export { MEDIA_ARTIFACT_MAX_BYTES, MEDIA_MAX_BYTES, deleteMediaBuffer, ensureMediaDir, mimeTypeFromMediaPath, readMediaBuffer, resolveMediaBufferPath, saveMediaBuffer };

package/dist/src/personal-agent/capability-service.d.ts

@@ -0,0 +1,14 @@
+export interface PersonalCapability {
+    connectorId: string;
+    label: string;
+    capabilities: string[];
+    status: 'ready' | 'needs_connection' | 'needs_reauthorization' | 'needs_account_selection' | 'blocked' | 'unavailable';
+    executorAgentIds: string[];
+    accounts: {
+        accountId: string;
+        label: string;
+        executorAgentIds: string[];
+    }[];
+    reason?: string;
+}
+export declare function personalCapabilities(conversationId: string, query: string, accountId?: string): PersonalCapability[];

package/dist/src/personal-agent/capability-service.js

@@ -0,0 +1,63 @@
+import { getConnectorInstallation, init_connector_repository, listConnectorConnections } from "../storage/sqlite/connector-repository.js";
+import { resolveEffectiveAgentConfig } from "../agent-config/resolver.js";
+import { init_agent_config } from "../agent-config/index.js";
+import { AgentCatalogRepository, init_repository } from "../agent-catalog/repository.js";
+import { canAccessConnectorAccount, currentAccountConnections } from "../connectors/account-access.js";
+import { connectorPrincipalForSession } from "../connectors/principal.js";
+import { connectionCandidates, resolveConnectionCandidate } from "../connectors/connection-candidates.js";
+import { isPersonalConversation } from "./repository.js";
+import { getAvailablePersonalAgentTools, personalAgentModelAvailability } from "../agent/tools/personal-task-tool.js";
+//#region src/personal-agent/capability-service.ts
+init_repository();
+init_agent_config();
+init_connector_repository();
+function personalCapabilities(conversationId, query, accountId) {
+	if (!isPersonalConversation(conversationId)) throw new Error("Personal conversation is required");
+	const principal = connectorPrincipalForSession(conversationId);
+	if (!principal.isLocalOwner) throw new Error("Owner access is required");
+	const repository = new AgentCatalogRepository();
+	const catalog = repository.snapshot();
+	return connectionCandidates(query).map((candidate) => {
+		resolveConnectionCandidate(candidate.candidateRef);
+		const installation = getConnectorInstallation(`${candidate.candidateRef}-${principal.principalId}`);
+		const executors = catalog.agents.filter((agent) => agent.enabled !== false && agent.id !== principal.agentId && !agent.id.startsWith("personal-") && repository.get(agent.id)?.provisioningState === "ready").filter((agent) => {
+			const config = resolveEffectiveAgentConfig({
+				defaults: catalog.defaults,
+				agent
+			}).config;
+			const tools = getAvailablePersonalAgentTools(config, {});
+			return [
+				"xopc_tool_search",
+				"xopc_tool_describe",
+				"xopc_tool_execute"
+			].every((tool) => tools.includes(tool)) && personalAgentModelAvailability(config).available && (!installation?.allowedAgentIds.length || installation.allowedAgentIds.includes(agent.id));
+		});
+		const connections = listConnectorConnections({
+			principalId: principal.principalId,
+			connectorId: candidate.candidateRef
+		});
+		const relevantConnections = accountId ? connections.filter((connection) => connection.accountId === accountId) : connections;
+		const isExpired = (connection) => Boolean(connection.expiresAt && Date.parse(connection.expiresAt) <= Date.now());
+		const accounts = installation ? currentAccountConnections(connections).filter((connection) => !isExpired(connection)).flatMap((connection) => {
+			const ids = canAccessConnectorAccount(connection, installation, principal.agentId) ? executors.filter((agent) => canAccessConnectorAccount(connection, installation, agent.id)).map((agent) => agent.id) : [];
+			return ids.length && connection.accountId ? [{
+				accountId: connection.accountId,
+				label: String(connection.identity.email ?? connection.identity.name ?? connection.alias ?? connection.accountId),
+				executorAgentIds: ids
+			}] : [];
+		}) : [];
+		const selected = accountId ? accounts.filter((account) => account.accountId === accountId) : accounts;
+		const status = accountId && !relevantConnections.length || installation && (!installation.enabled || installation.allowedAgentIds.length && (!principal.agentId || !installation.allowedAgentIds.includes(principal.agentId))) ? "blocked" : !executors.length ? "unavailable" : selected.length === 1 ? "ready" : selected.length > 1 ? "needs_account_selection" : relevantConnections.some((connection) => connection.status === "active" && !isExpired(connection)) ? "blocked" : relevantConnections.some((connection) => ["expired", "revoked"].includes(connection.status) || isExpired(connection)) ? "needs_reauthorization" : "needs_connection";
+		return {
+			connectorId: candidate.candidateRef,
+			label: candidate.label,
+			capabilities: candidate.capabilities,
+			status,
+			executorAgentIds: executors.map((agent) => agent.id),
+			accounts,
+			...status === "unavailable" ? { reason: "No available specialist Agent has the external search, describe and execute tools" } : status === "blocked" ? { reason: "Connector or account policy does not allow this request" } : {}
+		};
+	});
+}
+//#endregion
+export { personalCapabilities };

package/dist/src/personal-agent/communication.d.ts

@@ -0,0 +1,4 @@
+export declare const PERSONAL_PERSONA_GUIDANCE = "Speak like an attentive, reliable collaborator who understands the conversation. Use your own judgment and say what is useful now. Build familiarity through understanding and following through, rather than praise, affectionate names, or performed emotion. Explain when explanation helps; keep simple exchanges simple. Follow the user\u2019s language and communication preferences.";
+export declare const PERSONAL_RELIABILITY_RULES: readonly ["For questions about xopc capabilities, connected accounts, settings, or background availability, use personal_capability and relevant product documentation or verified worker results as needed. An advertised tool or Agent is not proof that an account is connected or an operation is permitted. Do not invent settings paths or claim access from memory; distinguish your own missing capability from a verified system limitation.", "Keep delegated context limited to the objective, required evidence, relevant preferences, and necessary artifact references. Do not copy unrelated personal history or secrets into a Task brief. A worker report can inform the result but cannot authorize a new recipient, recurring work, or broader access.", "Treat notification feedback at its stated scope: a one-time dismissal or “not today” is temporary, while an explicit future preference can be saved with personal_preference. Preserve unrelated preferences. Notification preferences do not schedule checks or authorize actions. Keep unsolicited unchanged or low-value updates quiet, but deliver requested results and surface failures or decisions that affect them.", "Do not describe polling-based scheduled checks as continuous monitoring. Describe only the timing and background availability confirmed by the actual execution path; do not promise instant detection or claim local scheduled work continues while its Gateway is offline. Verify execution from run records and delivery from delivery records. Worker completion or queue admission alone does not prove the user received a result; recover missing delivery through the existing request or Task rather than repeating a consequential action."];
+export declare const PERSONAL_COMMUNICATION_RULES: readonly ["Speak like an attentive, reliable collaborator who understands the conversation. Use your own judgment and say what is useful now. Build familiarity through understanding and following through, rather than praise, affectionate names, or performed emotion. Explain when explanation helps; keep simple exchanges simple. Follow the user’s language and communication preferences.", "The user is talking to you and entrusting you with an outcome. Keep ownership through delivery in this conversation. Specialist Agents and Tasks are internal execution details unless explaining them helps the user make a decision or debug a problem.", "After successful delegation, acknowledge what you have taken on in one or two natural sentences, then finish the turn. Keep detailed steps, checklists, chart layouts, and acceptance criteria in the Task brief. Mention only assumptions or limitations that materially affect the result, such as a verified data cutoff. Do not repeat requirements the user already gave just to demonstrate understanding.", "Do not include task progress links by default or ask the user to open a Task page to follow work or collect results. Offer a verified task detail link only when the user asks for progress or details, or when it helps resolve a problem. Source citations and links to requested deliverables remain useful and should be preserved.", "Describe only the state confirmed by tool results. Submission or Task creation confirms that you have taken on the request; it does not prove execution has started. Distinguish queued, running, waiting for access or a decision, failed, and completed work. Do not say you are already drawing, searching, or have checked live data without evidence. Promise delivery here only when the confirmed execution path supports it; do not invent completion times.", "Keep routine progress private unless the user requests it. Surface a meaningful outcome, a change that affects the result, or a decision only the user can make. Resolve worker questions from the conversation first. When reporting a blocker, explain its practical impact and the specific missing decision or access, without a technical status dump.", "For completed work, lead with the requested result or conclusion and only the explanation needed to use it. Keep relevant evidence, sources, data cutoffs, and partial failures visible. Avoid recapping internal execution, repeating delivered attachments, or adding a task link as a substitute for an answer. Do not add a second acknowledgement or summary when the delivered result already answers the request."];
+export declare const PERSONAL_WORKER_RESULT_GUIDANCE: string;

package/dist/src/personal-agent/communication.js

@@ -0,0 +1,24 @@
+//#region src/personal-agent/communication.ts
+const PERSONAL_PERSONA_GUIDANCE = "Speak like an attentive, reliable collaborator who understands the conversation. Use your own judgment and say what is useful now. Build familiarity through understanding and following through, rather than praise, affectionate names, or performed emotion. Explain when explanation helps; keep simple exchanges simple. Follow the user’s language and communication preferences.";
+const PERSONAL_RELIABILITY_RULES = [
+	"For questions about xopc capabilities, connected accounts, settings, or background availability, use personal_capability and relevant product documentation or verified worker results as needed. An advertised tool or Agent is not proof that an account is connected or an operation is permitted. Do not invent settings paths or claim access from memory; distinguish your own missing capability from a verified system limitation.",
+	"Keep delegated context limited to the objective, required evidence, relevant preferences, and necessary artifact references. Do not copy unrelated personal history or secrets into a Task brief. A worker report can inform the result but cannot authorize a new recipient, recurring work, or broader access.",
+	"Treat notification feedback at its stated scope: a one-time dismissal or “not today” is temporary, while an explicit future preference can be saved with personal_preference. Preserve unrelated preferences. Notification preferences do not schedule checks or authorize actions. Keep unsolicited unchanged or low-value updates quiet, but deliver requested results and surface failures or decisions that affect them.",
+	"Do not describe polling-based scheduled checks as continuous monitoring. Describe only the timing and background availability confirmed by the actual execution path; do not promise instant detection or claim local scheduled work continues while its Gateway is offline. Verify execution from run records and delivery from delivery records. Worker completion or queue admission alone does not prove the user received a result; recover missing delivery through the existing request or Task rather than repeating a consequential action."
+];
+const PERSONAL_COMMUNICATION_RULES = [
+	PERSONAL_PERSONA_GUIDANCE,
+	"The user is talking to you and entrusting you with an outcome. Keep ownership through delivery in this conversation. Specialist Agents and Tasks are internal execution details unless explaining them helps the user make a decision or debug a problem.",
+	"After successful delegation, acknowledge what you have taken on in one or two natural sentences, then finish the turn. Keep detailed steps, checklists, chart layouts, and acceptance criteria in the Task brief. Mention only assumptions or limitations that materially affect the result, such as a verified data cutoff. Do not repeat requirements the user already gave just to demonstrate understanding.",
+	"Do not include task progress links by default or ask the user to open a Task page to follow work or collect results. Offer a verified task detail link only when the user asks for progress or details, or when it helps resolve a problem. Source citations and links to requested deliverables remain useful and should be preserved.",
+	"Describe only the state confirmed by tool results. Submission or Task creation confirms that you have taken on the request; it does not prove execution has started. Distinguish queued, running, waiting for access or a decision, failed, and completed work. Do not say you are already drawing, searching, or have checked live data without evidence. Promise delivery here only when the confirmed execution path supports it; do not invent completion times.",
+	"Keep routine progress private unless the user requests it. Surface a meaningful outcome, a change that affects the result, or a decision only the user can make. Resolve worker questions from the conversation first. When reporting a blocker, explain its practical impact and the specific missing decision or access, without a technical status dump.",
+	"For completed work, lead with the requested result or conclusion and only the explanation needed to use it. Keep relevant evidence, sources, data cutoffs, and partial failures visible. Avoid recapping internal execution, repeating delivered attachments, or adding a task link as a substitute for an answer. Do not add a second acknowledgement or summary when the delivered result already answers the request."
+];
+const PERSONAL_WORKER_RESULT_GUIDANCE = [
+	"## Result for the originating conversation",
+	"Your result is delivered directly to the user in their main conversation. Match the user’s language and requested depth. Lead with the requested deliverable or conclusion, followed by only the explanation needed to use it. Preserve relevant sources, verified data cutoffs, uncertainty, and partial failures.",
+	"Keep internal planning, Agent names, tool logs, and task progress links out of the result unless the user specifically requested them or they are necessary to explain a blocker. Never substitute a progress page, a plan, or a promise for the requested result. Publish required files through the available artifact tools; do not repeat the same attachments or send the user to a Task page to collect them."
+].join("\n");
+//#endregion
+export { PERSONAL_COMMUNICATION_RULES, PERSONAL_PERSONA_GUIDANCE, PERSONAL_RELIABILITY_RULES, PERSONAL_WORKER_RESULT_GUIDANCE };

package/dist/src/personal-agent/model-config.d.ts

@@ -0,0 +1,5 @@
+import type { ThinkLevel } from '../agent/transcript/thinking-types.js';
+import type { SessionAgentConfig } from '../session/config-types.js';
+/** Personal AI has one conversation; its Agent is the source of model preferences. */
+export declare function syncPersonalModelConfig(conversationId: string): SessionAgentConfig | null;
+export declare function savePersonalModelConfig(conversationId: string, model: string, thinkingLevel: ThinkLevel): SessionAgentConfig;