@xopcai/xopc 0.0.373 → 0.0.375

package/dist/src/personal-agent/service.js

@@ -1,15 +1,15 @@
 import { getSessionMetadata } from "../storage/sqlite/session-read-repository.js";
 import { init_session_repository, patchSessionMetadata } from "../storage/sqlite/session-repository.js";
 import { init_config_repository, setSessionConfig } from "../storage/sqlite/config-repository.js";
+import { createConversation, init_conversation_repository } from "../storage/sqlite/conversation-repository.js";
 import { ResponsePreferencesSchema } from "../agent-config/schema.js";
 import { init_agent_config } from "../agent-config/index.js";
 import { AgentCatalogRepository, init_repository } from "../agent-catalog/repository.js";
-import { AgentCatalogService } from "../agent-catalog/service.js";
-import { createConversation, init_conversation_repository } from "../storage/sqlite/conversation-repository.js";
 import { getAvailableModels, init_providers } from "../providers/index.js";
 import { DEFAULT_PERSONAL_PREFERENCES, getPersonalAgent, personalAgentId } from "./repository.js";
 import { PERSONAL_MAIN_TOOL_IDS, PERSONAL_READ_TOOL_ALIASES } from "./policy.js";
 import { getModelThinking } from "../providers/model-thinking.js";
+import { AgentCatalogService } from "../agent-catalog/service.js";
 import { personalInstructions, upgradePersonalInstructions } from "./prompts.js";
 import { completePersonalOnboarding } from "./onboarding.js";
 import { z } from "zod";
@@ -159,14 +159,14 @@ async function provisionPersonalAgent(service, ownerId, requestedModel, availabl
 	completePersonalOnboarding(ownerId);
 	return getPersonalAgent(ownerId) ?? record;
 }
-async function patchPersonalProfile(service, ownerId, revision, displayName, preferences, appearance, voicePreference) {
-	const updated = await updatePersonalProfileRecord(ownerId, revision, displayName, preferences, appearance, voicePreference);
+async function patchPersonalProfile(service, ownerId, revision, displayName, preferences, appearance, voicePreference, voiceCallPreferences) {
+	const updated = await updatePersonalProfileRecord(ownerId, revision, displayName, preferences, appearance, voicePreference, voiceCallPreferences);
 	if (!updated) return null;
 	service.refreshAgentCatalog();
 	service.agentService.evictSessionAgent(updated.conversationId);
 	return updated;
 }
-async function updatePersonalProfileRecord(ownerId, revision, displayName, preferences, appearance, voicePreference) {
+async function updatePersonalProfileRecord(ownerId, revision, displayName, preferences, appearance, voicePreference, voiceCallPreferences) {
 	const current = new AgentCatalogRepository().get(personalAgentId(ownerId));
 	if (!current || current.provisioningState !== "ready" || current.revision !== revision || getPersonalAgent(ownerId)?.state !== "ready") return null;
 	const profile = {
@@ -175,6 +175,7 @@ async function updatePersonalProfileRecord(ownerId, revision, displayName, prefe
 		emoji: appearanceEmoji(appearance),
 		avatar: appearanceAvatar(appearance),
 		...voicePreference !== void 0 ? { voicePreference: voicePreference ?? void 0 } : {},
+		...voiceCallPreferences ? { voiceCallPreferences } : {},
 		responsePreferences: preferences,
 		instructions: personalInstructions(preferences)
 	};

package/dist/src/platform/client.d.ts

@@ -67,9 +67,9 @@ export declare const RuntimeCommandSchema: z.ZodObject<{
                     write: "write";
                     execute: "execute";
                     purchase: "purchase";
-                    admin: "admin";
                     send: "send";
                     publish: "publish";
+                    admin: "admin";
                 }>>;
             }, z.core.$strict>;
             data: z.ZodObject<{

package/dist/src/platform/contracts.d.ts

@@ -153,9 +153,9 @@ export declare const AgentManifestSchema: z.ZodObject<{
             write: "write";
             execute: "execute";
             purchase: "purchase";
-            admin: "admin";
             send: "send";
             publish: "publish";
+            admin: "admin";
         }>>;
     }, z.core.$strict>;
     data: z.ZodObject<{

package/dist/src/providers/local-model.d.ts

@@ -0,0 +1,2 @@
+/** Local-only processing requires a loopback endpoint, regardless of provider name. */
+export declare function isLoopbackModel(baseUrl: string): boolean;

package/dist/src/providers/local-model.js

@@ -0,0 +1,16 @@
+//#region src/providers/local-model.ts
+/** Local-only processing requires a loopback endpoint, regardless of provider name. */
+function isLoopbackModel(baseUrl) {
+	try {
+		return [
+			"localhost",
+			"127.0.0.1",
+			"[::1]",
+			"::1"
+		].includes(new URL(baseUrl).hostname);
+	} catch {
+		return false;
+	}
+}
+//#endregion
+export { isLoopbackModel };

package/dist/src/providers/model-catalog-persistence.js

@@ -1,7 +1,7 @@
 import { __esmMin } from "../../_virtual/_rolldown/runtime.js";
 import { init_paths_state, resolveXopcCloudCatalogCachePath } from "../config/paths-state.js";
-import { init_write_file_atomic, writeTextAtomic } from "../infra/write-file-atomic.js";
 import { ComputerProfileSchema, init_src } from "../../packages/computer-control-contract/src/index.js";
+import { init_write_file_atomic, writeTextAtomic } from "../infra/write-file-atomic.js";
 import { ImageGenerationCapabilitiesSchema, init_models_json } from "../config/models-json.js";
 import { voiceManifestSchema } from "../../packages/realtime-protocol/src/voice-catalog.js";
 import { init_voice } from "../../packages/realtime-protocol/src/voice.js";

package/dist/src/realtime/runtime.js

@@ -3,6 +3,7 @@ import { init_logger } from "../utils/logger.js";
 import { hasGatewayScope, init_gateway_scopes } from "../gateway/security/gateway-scopes.js";
 import { EndpointToolPolicyError } from "../endpoint-tools/policy.js";
 import { REALTIME_CAPABILITIES, REALTIME_HEARTBEAT_INTERVAL_MS, REALTIME_HEARTBEAT_TIMEOUT_MS, REALTIME_HELLO_TIMEOUT_MS, REALTIME_MAX_CLIENT_FRAME_BYTES, parseClientRealtimeJsonFrame, parseClientRealtimeMessage } from "../../packages/realtime-protocol/src/index.js";
+import { verifyDeviceConnectionProof } from "../gateway/security/device-request-proof.js";
 import { compactRunEvent } from "./compact-run-event.js";
 import { createPreauthConnectionBudget } from "../gateway/security/preauth-connection-budget.js";
 import { RealtimeBroker } from "./broker.js";
@@ -221,6 +222,11 @@ var RealtimeRuntime = class {
 					socket.close(4401, "First realtime message must be hello");
 					return;
 				}
+				const pendingClaim = this.tickets.peek(message.payload.ticket);
+				if (!pendingClaim || pendingClaim.deviceId && !verifyDeviceConnectionProof(pendingClaim.deviceId, message.payload.ticket, new URL(request.url, "http://localhost").pathname + new URL(request.url, "http://localhost").search, typeof request.headers["x-xopc-proof"] === "string" ? request.headers["x-xopc-proof"] : void 0)) {
+					socket.close(4401, "Realtime authentication failed");
+					return;
+				}
 				const claim = this.tickets.consume(message.payload.ticket, message.payload.clientId, message.payload.clientKind);
 				if (!claim || !this.isPrincipalActive(claim.principalId)) {
 					socket.close(4401, "Realtime authentication failed");

package/dist/src/realtime/tickets.d.ts

@@ -15,6 +15,7 @@ export interface IssuedRealtimeTicket extends RealtimeTicketClaim {
 export declare class RealtimeTicketStore {
     private readonly claims;
     issue(clientId: string, clientKind: RealtimeClientKind, principal: Omit<RealtimeTicketClaim, 'clientId' | 'clientKind' | 'expiresAt'>, now?: number): IssuedRealtimeTicket;
+    peek(ticket: string, now?: number): RealtimeTicketClaim | undefined;
     consume(ticket: string, clientId: string, clientKind: RealtimeClientKind, now?: number): RealtimeTicketClaim | undefined;
     revokePrincipal(principalId: string): void;
     private prune;

package/dist/src/realtime/tickets.js

@@ -23,6 +23,10 @@ var RealtimeTicketStore = class {
 			...claim
 		};
 	}
+	peek(ticket, now = Date.now()) {
+		const claim = this.claims.get(ticketKey(ticket));
+		return claim && claim.expiresAt >= now ? claim : void 0;
+	}
 	consume(ticket, clientId, clientKind, now = Date.now()) {
 		const key = ticketKey(ticket);
 		const claim = this.claims.get(key);

package/dist/src/remote-access/exposure-guards.js

@@ -1,7 +1,8 @@
-import { isLoopbackHost } from "../gateway/host.js";
+import { init_host, isLoopbackHost } from "../gateway/host.js";
 import { resolveGatewayBindMode } from "../config/gateway-bind.js";
 import { resolveGatewayListenPlan } from "../gateway/listen.js";
 //#region src/remote-access/exposure-guards.ts
+init_host();
 function collectExposureConflicts(cfg) {
 	const conflicts = [];
 	const tailscaleMode = cfg.gateway?.tailscale?.mode ?? "off";

package/dist/src/routing/resolve-route.js

@@ -1,9 +1,9 @@
 import { __esmMin } from "../../_virtual/_rolldown/runtime.js";
 import { init_account_id, normalizeAccountId } from "./account-id.js";
-import { AgentCatalogRepository, init_repository } from "../agent-catalog/repository.js";
 import { getConversationRouting } from "../storage/sqlite/conversation-repository.js";
 import { init_agent_session_key, resolveAgentPeerConversationId } from "./agent-session-key.js";
 import { init_session_key, resolveConversationId } from "./session-key.js";
+import { AgentCatalogRepository, init_repository } from "../agent-catalog/repository.js";
 import { init_bindings, parseBindingRules, resolveRoute as resolveRoute$1 } from "./bindings.js";
 //#region src/routing/resolve-route.ts
 /**

package/dist/src/routing/resolve-tui-session-key.js

@@ -1,8 +1,8 @@
 import { validateConversationId } from "../../packages/gateway-contract/src/conversation-identity.js";
 import { init_src } from "../../packages/gateway-contract/src/index.js";
+import { init_agent_session_key, normalizeAgentId } from "./agent-session-key.js";
 import { AgentCatalogRepository, init_repository } from "../agent-catalog/repository.js";
 import { init_agent_scope, listAgentEntries, resolveAgentIdByWorkspacePath, resolveDefaultAgentId } from "../agent/agent-scope.js";
-import { init_agent_session_key, normalizeAgentId } from "./agent-session-key.js";
 import { randomUUID } from "node:crypto";
 //#region src/routing/resolve-tui-session-key.ts
 init_src();

package/dist/src/scenes/taskFollowUp/service.js

@@ -4,6 +4,7 @@ import { TaskRepository, init_task_repository } from "../../tasks/task-repositor
 import { TaskRunRepository, init_task_run_repository } from "../../tasks/task-run-repository.js";
 import { AgentCatalogRepository, init_repository } from "../../agent-catalog/repository.js";
 import { init_agent_scope, resolveDefaultAgentId } from "../../agent/agent-scope.js";
+import { resolveModelSelector } from "../../config/agent-model-intents.js";
 import { init_providers, isProviderConfiguredSync, resolveModel } from "../../providers/index.js";
 import { ExecutionEnvironmentStore } from "../../execution-environments/store.js";
 import { ProjectStore } from "../../projects/project-store.js";
@@ -12,7 +13,6 @@ import { removeCommandContainer } from "../../agent/commands/command-isolation.j
 import { inspectGitRepository } from "../../execution-environments/git.js";
 import { TaskContextRepository } from "../../tasks/task-context-repository.js";
 import { TaskApplicationService } from "../../tasks/task-application-service.js";
-import { resolveModelSelector } from "../../config/agent-model-intents.js";
 import { sceneContentHash } from "../contracts.js";
 import { SceneConflictError, SceneNotFoundError, SceneRepository } from "../repository.js";
 import { SceneSetupError } from "../service.js";

package/dist/src/session/session-title.js

@@ -5,8 +5,8 @@ import { isCronConversationId } from "../routing/agent-session-key.js";
 import { init_session_key } from "../routing/session-key.js";
 import { init_providers, resolveModel } from "../providers/index.js";
 import { completeWithResolvedCredentials } from "../providers/model-call.js";
-import { readAgentMessageContent } from "../agent/memory/agent-message-access.js";
 import { stripRuntimeContextFromUserMessage } from "./user-message-display.js";
+import { readAgentMessageContent } from "../agent/memory/agent-message-access.js";
 //#region src/session/session-title.ts
 init_session_key();
 init_providers();

package/dist/src/session/store.js

@@ -13,8 +13,8 @@ import { appendCompactionBoundaryIfUnchanged, appendTranscriptEntry, listCompact
 import { getSessionConfig, setSessionConfig } from "../storage/sqlite/config-repository.js";
 import { init_sqlite } from "../storage/sqlite/index.js";
 import { init_agent_session_key, resolveAgentIdFromConversationId } from "../routing/agent-session-key.js";
-import { resolveEffectiveAgentProfile } from "../config/agent-profile.js";
 import { resolveUserContextSessionAccess } from "../user-context/access-policy.js";
+import { resolveEffectiveAgentProfile } from "../config/agent-profile.js";
 import { DurableState } from "../storage/sqlite/durable-state.js";
 import { transcriptRowsToClientHistory } from "./client-history.js";
 import { SessionCompactor } from "../agent/memory/compaction.js";
@@ -551,6 +551,7 @@ var SessionStore = class {
 					handover: result.handover,
 					audit: result.audit,
 					sourceEntries: expectedSnapshot.entries,
+					readPolicy: access.knowledgePolicy,
 					writePolicy: access.knowledge && access.knowledgePolicy.scopes.includes("session") && access.knowledgePolicy.contentSources.includes("memory") ? this.options.config.userContext.knowledgeMemory.writePolicy : "deny"
 				});
 				log.info({

package/dist/src/share/share-rate-limit.js

@@ -1,8 +1,9 @@
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
 import { buckets } from "../gateway/rate-limit/buckets.js";
-import "../gateway/rate-limit/index.js";
+import { init_rate_limit } from "../gateway/rate-limit/index.js";
 //#region src/share/share-rate-limit.ts
+init_rate_limit();
 init_logger();
 const log = createLogger("ShareRateLimit");
 /**

package/dist/src/share/share-url.js

@@ -1,6 +1,7 @@
-import { enumerateLanGatewayCandidates } from "../gateway/host.js";
+import { enumerateLanGatewayCandidates, init_host } from "../gateway/host.js";
 import { getTunnelService } from "../tunnel/tunnel-service.js";
 //#region src/share/share-url.ts
+init_host();
 function resolveShareUrl(token, ctx) {
 	const tunnelPublicUrl = activeTunnelPublicUrl();
 	const { gatewayHost, gatewayPort, reverseProxyPublicUrl } = ctx;

package/dist/src/share/site-share-router.js

@@ -1,13 +1,14 @@
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
+import { getClientIpFromHeaders, init_loopback } from "../gateway/security/loopback.js";
 import { resolveSiteShareConfig } from "./site-share-config.js";
 import "./share-store.js";
 import { getSiteShareStore } from "./site-share-store.js";
-import { getClientIpFromHeaders } from "../gateway/security/loopback.js";
 import { serveStaticSiteRequest } from "./site-static-serve.js";
 import { forwardHttpRequest, handleProxyWebSocketUpgrade } from "./site-proxy.js";
 import { renderShareExpiredPage } from "./share-landing.js";
 //#region src/share/site-share-router.ts
+init_loopback();
 init_logger();
 const log = createLogger("SiteShareRouter");
 const SITE_SUBPATH_PREFIX = "/site/";

package/dist/src/storage/sqlite/device-access-repository.d.ts

@@ -8,6 +8,7 @@ export type DeviceRecord = {
     platform: DevicePlatform;
     extensionId?: string;
     publicKeyJwk: DevicePublicKeyJwk;
+    requestProofVersion: number;
     scopes: GatewayScope[];
     createdAt: number;
     lastSeenAt?: number;
@@ -45,7 +46,12 @@ export declare function buildRefreshProofMessage(input: {
     nonce: string;
     requestId: string;
     nextRefreshToken: string;
+    requestProofVersion?: number;
 }): string;
+export declare class DeviceRefreshRateLimitError extends Error {
+    readonly retryAfterMs: number;
+    constructor(retryAfterMs: number);
+}
 export declare function rotateDeviceRefreshToken(input: {
     refreshToken: string;
     timestamp: number;
@@ -53,6 +59,7 @@ export declare function rotateDeviceRefreshToken(input: {
     requestId: string;
     nextRefreshToken: string;
     signature: string;
+    requestProofVersion?: number;
     now?: number;
 }): DeviceTokenPair;
 export declare function revokeDevice(deviceId: string, now?: number): boolean;

package/dist/src/storage/sqlite/device-access-repository.js

@@ -2,6 +2,8 @@ import { __esmMin } from "../../../_virtual/_rolldown/runtime.js";
 import { getSqliteDatabase, init_transaction, runSqliteWriteTransaction } from "./transaction.js";
 import { initialDeviceRefreshTokenSchema } from "../../../packages/gateway-contract/src/device-pairing.js";
 import { init_src } from "../../../packages/gateway-contract/src/index.js";
+import { buckets } from "../../gateway/rate-limit/buckets.js";
+import { init_rate_limit } from "../../gateway/rate-limit/index.js";
 import { init_gateway_scopes, parseGatewayScopes } from "../../gateway/security/gateway-scopes.js";
 import crypto from "node:crypto";
 //#region src/storage/sqlite/device-access-repository.ts
@@ -23,6 +25,7 @@ function deviceFromRow(row) {
 		displayName: row.display_name,
 		platform: row.platform,
 		publicKeyJwk: JSON.parse(row.public_key_jwk),
+		requestProofVersion: row.request_proof_version,
 		...row.extension_id ? { extensionId: row.extension_id } : {},
 		scopes: parseGatewayScopes(row.scopes_json),
 		createdAt: row.created_at,
@@ -109,7 +112,7 @@ function authenticateDeviceAccessToken(token, now = Date.now()) {
 	};
 }
 function buildRefreshProofMessage(input) {
-	return `xopc-device-refresh-v2\n${input.credentialId}\n${input.timestamp}\n${input.nonce}\n${input.requestId}\n${input.nextRefreshToken}`;
+	return `xopc-device-refresh-v2\n${input.credentialId}\n${input.timestamp}\n${input.nonce}\n${input.requestId}\n${input.nextRefreshToken}${input.requestProofVersion ? `\nrequest-proof:${input.requestProofVersion}` : ""}`;
 }
 function verifyRefreshProof(publicKeyJwk, message, signature) {
 	try {
@@ -146,9 +149,17 @@ function rotateDeviceRefreshToken(input) {
 			timestamp: input.timestamp,
 			nonce: input.nonce,
 			requestId: input.requestId,
-			nextRefreshToken: input.nextRefreshToken
+			nextRefreshToken: input.nextRefreshToken,
+			requestProofVersion: input.requestProofVersion
 		});
 		if (!verifyRefreshProof(JSON.parse(deviceRow.public_key_jwk), message, input.signature)) throw new Error("Invalid refresh proof");
+		const refreshBudget = buckets.deviceRefresh().consume(credential.device_id);
+		if (!refreshBudget.allowed) throw new DeviceRefreshRateLimitError(refreshBudget.retryAfterMs);
+		if (deviceRow.request_proof_version > (input.requestProofVersion ?? 0)) throw new Error("Request proof downgrade denied");
+		if (input.requestProofVersion === 1 && deviceRow.request_proof_version === 0) {
+			db.prepare("UPDATE devices SET request_proof_version = 1 WHERE device_id = ?").run(credential.device_id);
+			db.prepare("UPDATE device_access_sessions SET revoked_at = ? WHERE device_id = ? AND revoked_at IS NULL").run(now, credential.device_id);
+		}
 		if (credential.replaced_by === nextParsed.id && credential.rotation_request_id === input.requestId) {
 			const nextCredential = db.prepare(`
         SELECT credential_id, device_id, token_hash, expires_at, replaced_by,
@@ -198,9 +209,10 @@ function revokeDevice(deviceId, now = Date.now()) {
 		return changed;
 	});
 }
-var ACCESS_TOKEN_TTL_MS, REFRESH_TOKEN_TTL_MS, REFRESH_PROOF_MAX_AGE_MS, ACCESS_TOKEN_PREFIX, REFRESH_TOKEN_PREFIX;
+var ACCESS_TOKEN_TTL_MS, REFRESH_TOKEN_TTL_MS, REFRESH_PROOF_MAX_AGE_MS, ACCESS_TOKEN_PREFIX, REFRESH_TOKEN_PREFIX, DeviceRefreshRateLimitError;
 var init_device_access_repository = __esmMin((() => {
 	init_src();
+	init_rate_limit();
 	init_gateway_scopes();
 	init_transaction();
 	ACCESS_TOKEN_TTL_MS = 900 * 1e3;
@@ -208,7 +220,13 @@ var init_device_access_repository = __esmMin((() => {
 	REFRESH_PROOF_MAX_AGE_MS = 300 * 1e3;
 	ACCESS_TOKEN_PREFIX = "xopc_at_";
 	REFRESH_TOKEN_PREFIX = "xopc_rt_";
+	DeviceRefreshRateLimitError = class extends Error {
+		constructor(retryAfterMs) {
+			super("Too many device refresh requests");
+			this.retryAfterMs = retryAfterMs;
+		}
+	};
 }));
 //#endregion
 init_device_access_repository();
-export { authenticateDeviceAccessToken, buildRefreshProofMessage, createDevice, getDevice, init_device_access_repository, issueDeviceTokenPair, listDevices, registerInitialDeviceRefreshToken, revokeDevice, rotateDeviceRefreshToken };
+export { DeviceRefreshRateLimitError, authenticateDeviceAccessToken, buildRefreshProofMessage, createDevice, getDevice, init_device_access_repository, issueDeviceTokenPair, listDevices, registerInitialDeviceRefreshToken, revokeDevice, rotateDeviceRefreshToken };

package/dist/src/storage/sqlite/knowledge-repository.js

@@ -1,5 +1,6 @@
 import { __esmMin } from "../../../_virtual/_rolldown/runtime.js";
 import { getSqliteDatabase, init_transaction, runSqliteWriteTransaction } from "./transaction.js";
+import { init_chunks, replaceKnowledgeChunks } from "../../knowledge/chunks.js";
 import { randomUUID } from "node:crypto";
 //#region src/storage/sqlite/knowledge-repository.ts
 function parseTimestamp(value) {
@@ -185,6 +186,10 @@ function upsertKnowledgeSourceItems(inputs, nowMs = Date.now()) {
           updated_at = excluded.updated_at`).run(id, input.sourceInstanceId, input.collectionScope, input.externalId, input.itemType, input.authorRole ?? null, parseTimestamp(input.occurredAt), parseTimestamp(input.sourceUpdatedAt), input.contentHash, input.normalizedText ?? null, input.payloadRef ?? null, JSON.stringify(input.metadata ?? {}), input.sensitivity ?? "normal", input.retentionClass ?? "bounded", input.synthesisPipeline ?? "user_understanding", input.synthesisStatus ?? "pending", parseTimestamp(input.deletedAt), existing?.created_at ?? nowMs, nowMs);
 			const row = db.prepare(`SELECT * FROM knowledge_source_items WHERE item_id = ?`).get(id);
 			items.push(sourceItemFromRow(row));
+			replaceKnowledgeChunks(db, {
+				...sourceItemFromRow(row),
+				normalizedText: void 0
+			});
 			changedItemIds.push(id);
 			const changeKind = input.deletedAt ? "deleted" : existing ? "modified" : "added";
 			db.prepare(`INSERT INTO knowledge_source_changes (
@@ -351,6 +356,7 @@ function completeKnowledgeSourceItemSynthesis(input) {
 	});
 }
 var init_knowledge_repository = __esmMin((() => {
+	init_chunks();
 	init_transaction();
 }));
 //#endregion

package/dist/src/storage/sqlite/migrations/243_voice_opening_greetings.sql

@@ -0,0 +1,12 @@
+CREATE TABLE voice_opening_greetings (
+  principal_id TEXT NOT NULL,
+  conversation_id TEXT NOT NULL,
+  logical_call_id TEXT NOT NULL,
+  response_id TEXT NOT NULL,
+  state TEXT NOT NULL CHECK(state IN ('claimed', 'completed', 'skipped', 'interrupted', 'failed', 'expired')),
+  reason TEXT,
+  created_at INTEGER NOT NULL,
+  updated_at INTEGER NOT NULL,
+  PRIMARY KEY (principal_id, conversation_id, logical_call_id)
+);
+CREATE INDEX idx_voice_opening_greetings_created ON voice_opening_greetings(created_at);

package/dist/src/storage/sqlite/migrations/244_device_request_proofs.sql

@@ -0,0 +1,8 @@
+ALTER TABLE devices ADD COLUMN request_proof_version INTEGER NOT NULL DEFAULT 0;
+CREATE TABLE device_request_nonces (
+  device_id TEXT NOT NULL REFERENCES devices(device_id) ON DELETE CASCADE,
+  nonce TEXT NOT NULL,
+  expires_at INTEGER NOT NULL,
+  PRIMARY KEY (device_id, nonce)
+) WITHOUT ROWID;
+CREATE INDEX device_request_nonces_expiry ON device_request_nonces(expires_at);

package/dist/src/storage/sqlite/migrations/245_memory_learning.sql

@@ -0,0 +1,125 @@
+ALTER TABLE knowledge_items ADD COLUMN claim_mode TEXT NOT NULL DEFAULT 'observed'
+  CHECK (claim_mode IN ('explicit', 'observed', 'inferred', 'reported'));
+ALTER TABLE knowledge_items ADD COLUMN verification TEXT NOT NULL DEFAULT 'supported'
+  CHECK (verification IN ('supported', 'tentative', 'conflicted'));
+ALTER TABLE knowledge_items ADD COLUMN sensitivity TEXT NOT NULL DEFAULT 'normal'
+  CHECK (sensitivity IN ('normal', 'personal', 'secret', 'regulated'));
+ALTER TABLE user_assertion_evidence ADD COLUMN content_hash TEXT;
+CREATE TRIGGER assertion_evidence_snapshot_insert AFTER INSERT ON user_assertion_evidence BEGIN
+  UPDATE user_assertion_evidence SET content_hash = (SELECT content_hash FROM context_evidence WHERE evidence_id = NEW.evidence_id)
+    WHERE assertion_id = NEW.assertion_id AND evidence_id = NEW.evidence_id AND relation = NEW.relation;
+END;
+CREATE TRIGGER assertion_evidence_snapshot_update AFTER UPDATE OF confidence ON user_assertion_evidence BEGIN
+  UPDATE user_assertion_evidence SET content_hash = (SELECT content_hash FROM context_evidence WHERE evidence_id = NEW.evidence_id)
+    WHERE assertion_id = NEW.assertion_id AND evidence_id = NEW.evidence_id AND relation = NEW.relation;
+END;
+UPDATE knowledge_items SET claim_mode = CASE origin_class
+  WHEN 'owner' THEN 'explicit' WHEN 'untrusted' THEN 'reported' ELSE 'observed' END,
+  verification = CASE WHEN origin_class = 'untrusted' AND record_class = 'memory' THEN 'tentative' ELSE 'supported' END;
+
+CREATE TABLE knowledge_revisions (
+  revision_id TEXT PRIMARY KEY,
+  knowledge_id TEXT NOT NULL REFERENCES knowledge_items(knowledge_id) ON DELETE CASCADE,
+  content TEXT NOT NULL,
+  source_json TEXT NOT NULL,
+  created_at INTEGER NOT NULL
+);
+CREATE INDEX knowledge_revisions_item ON knowledge_revisions(knowledge_id, created_at);
+CREATE TABLE knowledge_evidence_links (
+  knowledge_id TEXT NOT NULL REFERENCES knowledge_items(knowledge_id) ON DELETE CASCADE,
+  evidence_id TEXT NOT NULL REFERENCES context_evidence(evidence_id) ON DELETE CASCADE,
+  content_hash TEXT,
+  consent_receipt_id TEXT REFERENCES understanding_consent_receipts(receipt_id),
+  PRIMARY KEY (knowledge_id, evidence_id)
+);
+CREATE TABLE owner_identity_bindings (
+  principal_id TEXT NOT NULL,
+  channel TEXT NOT NULL,
+  account_id TEXT NOT NULL,
+  peer_id TEXT NOT NULL,
+  verified_at INTEGER NOT NULL,
+  revoked_at INTEGER,
+  PRIMARY KEY (channel, account_id, peer_id)
+);
+CREATE TABLE memory_learning_jobs (
+  job_id TEXT PRIMARY KEY,
+  principal_id TEXT NOT NULL DEFAULT 'local-owner',
+  conversation_id TEXT NOT NULL REFERENCES sessions(conversation_id) ON DELETE CASCADE,
+  transcript_id TEXT NOT NULL,
+  through_seq INTEGER NOT NULL,
+  start_seq INTEGER,
+  extractor_version TEXT NOT NULL,
+  policy_hash TEXT NOT NULL,
+  workspace_id TEXT NOT NULL,
+  state TEXT NOT NULL CHECK (state IN ('queued','running','succeeded','retry_wait','failed','canceled')),
+  lease_token TEXT,
+  lease_until INTEGER,
+  attempts INTEGER NOT NULL DEFAULT 0,
+  next_attempt_at INTEGER NOT NULL,
+  error_code TEXT,
+  created_at INTEGER NOT NULL,
+  updated_at INTEGER NOT NULL,
+  UNIQUE(conversation_id, transcript_id, through_seq, extractor_version, policy_hash)
+);
+CREATE INDEX memory_learning_jobs_due ON memory_learning_jobs(state, next_attempt_at, lease_until);
+CREATE TABLE memory_source_learning_jobs (
+  job_id TEXT PRIMARY KEY,
+  chunk_id TEXT NOT NULL REFERENCES knowledge_source_chunks(chunk_id) ON DELETE CASCADE,
+  agent_id TEXT NOT NULL,
+  workspace_id TEXT NOT NULL,
+  consent_receipt_id TEXT NOT NULL REFERENCES understanding_consent_receipts(receipt_id),
+  policy_hash TEXT NOT NULL,
+  state TEXT NOT NULL CHECK(state IN ('queued','running','succeeded','retry_wait','failed','canceled')),
+  lease_token TEXT,
+  lease_until INTEGER,
+  attempts INTEGER NOT NULL DEFAULT 0,
+  next_attempt_at INTEGER NOT NULL,
+  error_code TEXT,
+  created_at INTEGER NOT NULL,
+  updated_at INTEGER NOT NULL,
+  UNIQUE(chunk_id, agent_id, consent_receipt_id, policy_hash)
+);
+CREATE INDEX memory_source_learning_due ON memory_source_learning_jobs(state, next_attempt_at, lease_until);
+CREATE TABLE memory_learning_receipts (
+  run_id TEXT PRIMARY KEY REFERENCES task_run_receipts(run_id) ON DELETE CASCADE,
+  learned_at INTEGER NOT NULL,
+  knowledge_id TEXT
+);
+CREATE TABLE memory_learning_cursors (
+  conversation_id TEXT NOT NULL REFERENCES sessions(conversation_id) ON DELETE CASCADE,
+  transcript_id TEXT NOT NULL,
+  processed_seq INTEGER NOT NULL DEFAULT 0,
+  observed_seq INTEGER NOT NULL DEFAULT 0,
+  updated_at INTEGER NOT NULL,
+  PRIMARY KEY (conversation_id, transcript_id)
+);
+CREATE TABLE knowledge_source_chunks (
+  chunk_id TEXT PRIMARY KEY,
+  source_item_id TEXT NOT NULL REFERENCES knowledge_source_items(item_id) ON DELETE CASCADE,
+  source_version TEXT NOT NULL,
+  consent_receipt_id TEXT REFERENCES understanding_consent_receipts(receipt_id),
+  ordinal INTEGER NOT NULL,
+  locator TEXT NOT NULL,
+  text TEXT NOT NULL,
+  UNIQUE(source_item_id, ordinal)
+);
+CREATE VIRTUAL TABLE knowledge_chunks_fts USING fts5(search_text, chunk_id UNINDEXED, tokenize='unicode61');
+CREATE TRIGGER knowledge_chunk_insert AFTER INSERT ON knowledge_source_chunks BEGIN
+  INSERT INTO knowledge_chunks_fts(search_text, chunk_id) VALUES (xopc_memory_search_text(NEW.text), NEW.chunk_id);
+END;
+CREATE TRIGGER knowledge_chunk_delete AFTER DELETE ON knowledge_source_chunks BEGIN
+  DELETE FROM knowledge_chunks_fts WHERE chunk_id = OLD.chunk_id;
+END;
+CREATE VIRTUAL TABLE knowledge_search_fts USING fts5(search_text, knowledge_id UNINDEXED, tokenize='unicode61');
+INSERT INTO knowledge_search_fts SELECT xopc_memory_search_text(content), knowledge_id FROM knowledge_items;
+DROP TABLE knowledge_items_fts;
+CREATE TRIGGER knowledge_search_insert AFTER INSERT ON knowledge_items BEGIN
+  INSERT INTO knowledge_search_fts VALUES (xopc_memory_search_text(NEW.content), NEW.knowledge_id);
+END;
+CREATE TRIGGER knowledge_search_update AFTER UPDATE OF content ON knowledge_items BEGIN
+  DELETE FROM knowledge_search_fts WHERE knowledge_id = OLD.knowledge_id;
+  INSERT INTO knowledge_search_fts VALUES (xopc_memory_search_text(NEW.content), NEW.knowledge_id);
+END;
+CREATE TRIGGER knowledge_search_delete AFTER DELETE ON knowledge_items BEGIN
+  DELETE FROM knowledge_search_fts WHERE knowledge_id = OLD.knowledge_id;
+END;

package/dist/src/storage/sqlite/migrations/runner.d.ts

@@ -3,7 +3,7 @@ import type { ApplyMigrationsOptions } from './types.js';
 /** Baseline schema version applied from schema.sql on first open. */
 export declare const XOPC_DB_BASELINE_SCHEMA_VERSION = 165;
 /** Latest schema version this release supports (increment when adding migrations). */
-export declare const XOPC_DB_SCHEMA_VERSION = 242;
+export declare const XOPC_DB_SCHEMA_VERSION = 245;
 export declare function resolveMigrationsDir(override?: string): string;
 /**
  * Apply sequential SQL migrations from (currentVersion + 1) through targetVersion.

package/dist/src/storage/sqlite/migrations/runner.js

@@ -1,5 +1,6 @@
 import { __esmMin } from "../../../../_virtual/_rolldown/runtime.js";
 import { init_sql_assets, resolveSqliteAssetPath } from "../sql-assets.js";
+import { init_search_text, memorySearchText } from "../../../knowledge-memory/search-text.js";
 import { createLogger } from "../../../utils/logger/index.js";
 import { init_logger } from "../../../utils/logger.js";
 import { currentOperationId, init_operation_context } from "../../../infra/operation-context.js";
@@ -56,8 +57,9 @@ function applySingleMigration(db, migration, discardOldScenes = false) {
 * Each step runs in its own transaction and updates schema_meta on success.
 */
 function applyPendingMigrations(db, options = {}) {
+	db.function("xopc_memory_search_text", { deterministic: true }, (value) => memorySearchText(String(value ?? "")));
 	db.function("xopc_operation_id", () => currentOperationId() ?? null);
-	const targetVersion = options.targetVersion ?? 242;
+	const targetVersion = options.targetVersion ?? 245;
 	let currentVersion = readSchemaVersion(db);
 	if (currentVersion > targetVersion) throw new DatabaseSchemaTooNewError(currentVersion, targetVersion);
 	if (!options.migrationsDir && currentVersion < 165) throw new DatabaseSchemaTooOldError(currentVersion, 165);
@@ -95,7 +97,7 @@ function applyPendingMigrations(db, options = {}) {
 }
 /** Inspect schema version without mutating the database. */
 function inspectSchemaMigrationStatus(db, options = {}) {
-	const appVersion = options.targetVersion ?? 242;
+	const appVersion = options.targetVersion ?? 245;
 	const dbVersion = readSchemaVersion(db);
 	if (dbVersion > appVersion) return {
 		dbVersion,
@@ -126,6 +128,7 @@ function inspectSchemaMigrationStatus(db, options = {}) {
 }
 var log, XOPC_DB_BASELINE_SCHEMA_VERSION, XOPC_DB_SCHEMA_VERSION;
 var init_runner = __esmMin((() => {
+	init_search_text();
 	init_logger();
 	init_operation_context();
 	init_schema_version();
@@ -137,7 +140,7 @@ var init_runner = __esmMin((() => {
 	init_errors();
 	log = createLogger("Sqlite:Migrations");
 	XOPC_DB_BASELINE_SCHEMA_VERSION = 165;
-	XOPC_DB_SCHEMA_VERSION = 242;
+	XOPC_DB_SCHEMA_VERSION = 245;
 }));
 //#endregion
 init_runner();

package/dist/src/storage/sqlite/schema.js

@@ -28,7 +28,7 @@ function ensureXopcDatabaseSchema(db, options = {}) {
 		currentVersion = 165;
 	}
 	applyPendingMigrations(db, {
-		targetVersion: 242,
+		targetVersion: 245,
 		databasePath: fresh ? void 0 : options.databasePath
 	});
 }

package/dist/src/tasks/capabilities/read.js

@@ -2,10 +2,10 @@ import { ProductReadContracts } from "../../../packages/gateway-contract/src/cap
 import { init_src } from "../../../packages/gateway-contract/src/index.js";
 import { TaskRepository, init_task_repository } from "../task-repository.js";
 import { TaskRunRepository, init_task_run_repository } from "../task-run-repository.js";
-import { CapabilityError } from "../../capabilities/runtime/errors.js";
-import { defineReadCapability } from "../../capabilities/runtime/dispatcher.js";
 import { TaskConversationRepository } from "../task-conversation-repository.js";
 import { TaskReadModelProjector } from "../task-read-model-projector.js";
+import { CapabilityError } from "../../capabilities/runtime/errors.js";
+import { defineReadCapability } from "../../capabilities/runtime/dispatcher.js";
 import { TaskContextRepository } from "../task-context-repository.js";
 import { TaskDependencyService } from "../task-dependency-service.js";
 import { TaskCriterionReviewRepository } from "../task-criterion-review-repository.js";

package/dist/src/tasks/task-handoff-service.js

@@ -2,9 +2,9 @@ import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
 import { TaskRepository, init_task_repository } from "./task-repository.js";
 import { TaskRunRepository, init_task_run_repository } from "./task-run-repository.js";
+import { init_session_key, resolveConversationId, sanitizeSegment } from "../routing/session-key.js";
 import { normalizeAgentId } from "../agent-catalog/id.js";
 import { init_agent_scope, listAgentEntries } from "../agent/agent-scope.js";
-import { init_session_key, resolveConversationId, sanitizeSegment } from "../routing/session-key.js";
 import { TaskConversationRepository } from "./task-conversation-repository.js";
 import { TaskContextRepository } from "./task-context-repository.js";
 //#region src/tasks/task-handoff-service.ts