@xopcai/xopc 0.0.374 → 0.0.375

package/dist/src/agent/embedded/run-turn.js

@@ -6,18 +6,18 @@ import { getConnectionResumeInput, init_connection_wait_repository, isConnection
 import { getSessionMetadata } from "../../storage/sqlite/session-read-repository.js";
 import { init_session_repository } from "../../storage/sqlite/session-repository.js";
 import { init_sqlite } from "../../storage/sqlite/index.js";
-import { setTraceIdentity, traceOperation, traceRun, traceTools } from "../../observability/runtime.js";
 import { resolveEffectiveAgentConfigForSession } from "../../config/agent-profile.js";
+import { setTraceIdentity, traceOperation, traceRun, traceTools } from "../../observability/runtime.js";
 import { continuesAfterTool, trackAiUsageStream } from "../../usage/recorder.js";
+import { cloudCreditBudgetStopMessage, isCloudCreditBudgetExhausted, reportCloudCreditError, withCloudCreditBudget } from "../../providers/xopc-cloud-credit-budget.js";
+import { isAgentTurnUnsettledError, resolveAgentTurnTimeoutMs, runAgentTurnWithTimeout } from "../orchestration/run-agent-turn-with-timeout.js";
+import { isContextOverflowError } from "../orchestration/context-overflow.js";
+import { getAssistantTurnErrorMessage, isAssistantTurnAborted, isAssistantTurnFailed, maybeRetryTurnAfterTransientLlmFailure, stripTrailingErrorAssistantMessages } from "../orchestration/llm-turn-retry.js";
 import { runWithEmbeddedExecutionSession } from "./execution-context.js";
 import { externalPolicyContext } from "./tool-metadata.js";
-import { cloudCreditBudgetStopMessage, isCloudCreditBudgetExhausted, reportCloudCreditError, withCloudCreditBudget } from "../../providers/xopc-cloud-credit-budget.js";
 import { isComputerControlActive, isComputerLeaseTool, stopComputerControl } from "../../computer/control-guard.js";
 import { EmbeddedRunConflictError, abortEmbeddedRun, acquireEmbeddedRunLease, queueEmbeddedSteer } from "./runs.js";
 import { lastAssistantPlainText, subscribeEmbeddedSessionEvents } from "./subscribe-session.js";
-import { isContextOverflowError } from "../orchestration/context-overflow.js";
-import { getAssistantTurnErrorMessage, isAssistantTurnAborted, isAssistantTurnFailed, maybeRetryTurnAfterTransientLlmFailure, stripTrailingErrorAssistantMessages } from "../orchestration/llm-turn-retry.js";
-import { isAgentTurnUnsettledError, resolveAgentTurnTimeoutMs, runAgentTurnWithTimeout } from "../orchestration/run-agent-turn-with-timeout.js";
 import { detectToolLoops } from "../orchestration/loop-guard.js";
 import { tryApplySessionTranscriptHygiene } from "../transcript/transcript-hygiene.js";
 import { restoreCurrentTurnImages } from "./current-turn-images.js";

package/dist/src/agent/external-tools/endpoint-provider.js

@@ -1,7 +1,7 @@
-import { ExternalEffectNotAppliedError, executeExternalOperation } from "../../capabilities/runtime/external-operations.js";
-import { canonicalCapabilityJson } from "../../capabilities/runtime/dispatcher.js";
 import { init_src } from "../../../packages/computer-control-contract/src/index.js";
 import "../../../packages/browser-control-contract/src/index.js";
+import { ExternalEffectNotAppliedError, executeExternalOperation } from "../../capabilities/runtime/external-operations.js";
+import { canonicalCapabilityJson } from "../../capabilities/runtime/dispatcher.js";
 import { externalToolRef, parseExternalToolRef } from "./refs.js";
 import { extractDocumentText } from "../../document-understanding/extract.js";
 import { prepareImageForModel } from "../image/prepare-image-for-model.js";

package/dist/src/agent/image/tool-model-config.js

@@ -1,6 +1,6 @@
 import { init_agent_scope, resolveDefaultAgentId } from "../agent-scope.js";
-import { getAgentDefaultImageModelConfig, getAgentDefaultModelRef, init_schema, parseModelRef } from "../../config/schema.js";
 import { resolveEffectiveAgentConfigForAgent } from "../../config/agent-profile.js";
+import { getAgentDefaultImageModelConfig, getAgentDefaultModelRef, init_schema, parseModelRef } from "../../config/schema.js";
 import { getDefaultModelSync, getModelsByProvider, init_providers, isProviderConfiguredSync, resolveModel } from "../../providers/index.js";
 import { resolveAgentModelFallbackValues, resolveAgentModelPrimaryValue } from "../../config/model-input.js";
 import { buildCapabilityPlansForConfig } from "../../capabilities/readiness/from-config.js";

package/dist/src/agent/inbound/attachment-pipeline.js

@@ -1,10 +1,10 @@
 import { stripRuntimeUserMessageEnvelope } from "../../../packages/gateway-contract/src/user-message-display.js";
 import { init_src } from "../../../packages/gateway-contract/src/index.js";
 import { extractProfileAgentId } from "../../config/agent-profile.js";
+import { readAgentMessageContent } from "../memory/agent-message-access.js";
 import { isPersonalConversation } from "../../personal-agent/repository.js";
 import { MODEL_IMAGE_MAX_BYTES, MODEL_IMAGE_SOURCE_MAX_BYTES, prepareImageForModel } from "../image/prepare-image-for-model.js";
 import { mimeTypeFromMediaPath } from "../../media/store.js";
-import { readAgentMessageContent } from "../memory/agent-message-access.js";
 import { readMediaReference } from "../../media/media-reference.js";
 import { isImageInboundAttachment } from "../../channels/attachments/attachment-classifiers.js";
 import "../../channels/attachments/inbound-persist.js";

package/dist/src/agent/memory/compaction-promotion.d.ts

@@ -1,5 +1,6 @@
 import type { CompactionAudit, CompactionHandover } from '../../session/compaction-types.js';
 import type { TranscriptSourceEntry } from '../../storage/sqlite/transcript-repository.js';
+import { type KnowledgeReadPolicy } from '../../knowledge-memory/index.js';
 export interface PromoteCompactionLedgerInput {
     conversationId: string;
     transcriptId: string;
@@ -10,6 +11,7 @@ export interface PromoteCompactionLedgerInput {
     audit: CompactionAudit;
     sourceEntries: readonly TranscriptSourceEntry[];
     writePolicy: 'deny' | 'allow';
+    readPolicy?: KnowledgeReadPolicy;
 }
 export interface PromoteCompactionLedgerResult {
     episodicRecordIds: string[];

package/dist/src/agent/memory/compaction-promotion.js

@@ -1,8 +1,11 @@
+import { createContextEvidence, init_context_evidence_repository } from "../../storage/sqlite/context-evidence-repository.js";
+import { inferMemorySensitivity } from "./sensitivity.js";
 import { listKnowledgeItems, transitionKnowledgeStatus, writeKnowledgeItem } from "../../knowledge-memory/repository.js";
 import "../../knowledge-memory/index.js";
 import { resolveMemorySessionKind } from "./turn-provenance.js";
 import { createHash } from "node:crypto";
 //#region src/agent/memory/compaction-promotion.ts
+init_context_evidence_repository();
 const DURABLE_KINDS = new Set([
 	"objective",
 	"decision",
@@ -117,9 +120,29 @@ function promoteCompactionLedger(input) {
 	};
 	const sessionKind = resolveMemorySessionKind(input.conversationId);
 	for (const item of input.handover.items) {
+		const sensitivity = inferMemorySensitivity(item.text);
+		if (sensitivity === "secret" || sensitivity === "regulated") continue;
 		const classified = classifyItemProvenance(item, sourceById, entriesByTurn, entriesByRound);
 		const originClass = sessionKind === "automation" || sessionKind === "workflow" || sessionKind === "background" ? "system" : sessionKind === "group" ? "untrusted" : classified.originClass;
 		const active = item.status === "active";
+		const supportingSources = item.sources.flatMap((ref) => sourceById.get(ref.entryId) ?? []);
+		const independentlySupported = supportingSources.some((entry) => rowRole(entry) === "user") || supportingSources.some((entry) => entriesByRound.get(entry.entryId)?.some((peer) => rowRole(peer) === "user"));
+		const supported = originClass === "agent" && independentlySupported && !classified.derivedFromRecalledContext;
+		const evidence = supportingSources.map((entry) => {
+			const hash = createHash("sha256").update(JSON.stringify(entry.row)).digest("hex");
+			return {
+				id: createContextEvidence({
+					sourceType: "conversation",
+					sourceRef: `compaction:${input.transcriptId}:entry:${entry.entryId}`,
+					conversationId: input.conversationId,
+					messageId: entry.entryId,
+					contentHash: hash,
+					trustLevel: "trusted",
+					observedAt: entry.createdAt
+				}).id,
+				contentHash: hash
+			};
+		});
 		const episode = writeKnowledgeItem({
 			kind: KNOWLEDGE_KIND_BY_HANDOVER_KIND[item.kind],
 			scope: {
@@ -129,7 +152,11 @@ function promoteCompactionLedger(input) {
 			content: item.text,
 			canonicalKey: `compaction:${input.transcriptId}:${item.id}`,
 			confidence: input.audit.status === "passed" ? .82 : .65,
-			status: active ? originClass !== "untrusted" && !classified.derivedFromRecalledContext ? "active" : "candidate" : "archived",
+			evidence,
+			sensitivity,
+			claimMode: "observed",
+			verification: supported ? "supported" : "tentative",
+			status: active ? supported ? "active" : "candidate" : "archived",
 			importance: importanceFor(item),
 			originClass,
 			sourceAgentId: input.sourceAgentId,
@@ -145,7 +172,7 @@ function promoteCompactionLedger(input) {
 		});
 		if (!episode.item) continue;
 		result.episodicRecordIds.push(episode.item.id);
-		if (!(active && input.audit.status === "passed" && sessionKind === "interactive" && originClass === "agent" && !classified.derivedFromRecalledContext && DURABLE_KINDS.has(item.kind))) {
+		if (!(active && input.audit.status === "passed" && sessionKind === "interactive" && originClass === "agent" && supported && (!input.readPolicy || input.readPolicy.scopes.includes(input.projectId ? "project" : "workspace")) && !classified.derivedFromRecalledContext && DURABLE_KINDS.has(item.kind))) {
 			const existingDurable = !active ? listKnowledgeItems({ limit: 2e3 }).find((entry) => entry.canonicalKey === `durable:${item.kind}:${stableId("fact", item.text)}`) : void 0;
 			if (existingDurable?.sourceConversationId === input.conversationId) transitionKnowledgeStatus({
 				id: existingDurable.id,
@@ -169,6 +196,10 @@ function promoteCompactionLedger(input) {
 			content: item.text,
 			canonicalKey: `durable:${item.kind}:${stableId("fact", item.text)}`,
 			confidence: .82,
+			evidence,
+			sensitivity,
+			claimMode: "observed",
+			verification: "supported",
 			status: "active",
 			importance: importanceFor(item),
 			originClass: "agent",

package/dist/src/agent/service/process-direct-streaming.js

@@ -3,8 +3,8 @@ import { init_src } from "../../../packages/gateway-contract/src/index.js";
 import { init_session_input_repository, listTaskUpdateTriggers } from "../../storage/sqlite/session-input-repository.js";
 import { getClarificationResumeInput, init_clarification_wait_repository } from "../../storage/sqlite/clarification-wait-repository.js";
 import { getConnectionResumeInput, init_connection_wait_repository } from "../../storage/sqlite/connection-wait-repository.js";
-import { init_agent_scope, resolveDefaultAgentId } from "../agent-scope.js";
 import { init_agent_session_key, resolveAgentMainConversationId } from "../../routing/agent-session-key.js";
+import { init_agent_scope, resolveDefaultAgentId } from "../agent-scope.js";
 import { readAgentMessageContent } from "../memory/agent-message-access.js";
 import { abortEmbeddedRun } from "../embedded/runs.js";
 import { clearPendingTranscriptUserMessage, setPendingTranscriptUserMessage } from "../inbound/attachment-pipeline.js";

package/dist/src/agent/service.js

@@ -1,24 +1,24 @@
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
 import { init_attachment_ref, parseNoteAttachmentTarget } from "../notes/attachment-ref.js";
-import { init_agent_scope, resolveAgentHomeDir, resolveDefaultAgentId } from "./agent-scope.js";
-import { extractTextContent } from "./context/workspace.js";
-import { configureTracing, flushTracing } from "../observability/runtime.js";
-import { getAgentDefaultModelRef, init_schema } from "../config/schema.js";
-import { applyConfigOverrides } from "../config/runtime-overrides.js";
 import { init_agent_session_key, resolveAgentIdFromConversationId } from "../routing/agent-session-key.js";
+import { init_agent_scope, resolveAgentHomeDir, resolveDefaultAgentId } from "./agent-scope.js";
 import { extractProfileAgentId, resolveEffectiveAgentConfigForSession } from "../config/agent-profile.js";
+import { getAgentDefaultModelRef, init_schema } from "../config/schema.js";
 import { init_providers, resolveModel } from "../providers/index.js";
+import { configureTracing, flushTracing } from "../observability/runtime.js";
+import { getUserTimezone } from "../user-model/repository.js";
+import { extractTextContent } from "./context/workspace.js";
+import { resolveAgentTurnTimeoutMs } from "./orchestration/run-agent-turn-with-timeout.js";
+import { applyConfigOverrides } from "../config/runtime-overrides.js";
 import { effectiveWorkspacePathForSession } from "../session/session-workspace.js";
 import { getProjectForSession } from "../projects/workspace.js";
-import { getUserTimezone } from "../user-model/repository.js";
 import "../user-model/index.js";
 import { runWithEmbeddedExecutionSession } from "./embedded/execution-context.js";
 import { removeSkillsLockEntry } from "./skills/hub-lock.js";
 import { installSkillFromZip } from "./skills/managed-store.js";
 import { resolveWorkspaceSkillsDir, resolveWorkspaceSkillsLockPath } from "./skills/workspace-skills-dir.js";
 import { pullSkillFromSource } from "./skills/hub-pull.js";
-import { resolveAgentTurnTimeoutMs } from "./orchestration/run-agent-turn-with-timeout.js";
 import { onSessionTranscriptUpdate } from "../session/transcript-events.js";
 import { persistInboundAttachments } from "../channels/attachments/inbound-persist.js";
 import { buildTranscriptUserMessage, hydrateUserTurnForLlm } from "./inbound/attachment-pipeline.js";

package/dist/src/agent/skills/index.js

@@ -1,8 +1,8 @@
 import { resolveStateDir } from "../../config/paths-state.js";
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
-import { parseFrontmatter } from "../../markdown/frontmatter.js";
 import { init_paths } from "../../config/paths.js";
+import { parseFrontmatter } from "../../markdown/frontmatter.js";
 import { findInstallSpec, hasBinary, installSkill } from "./installer.js";
 import { applySkillEnvOverrides, createSkillConfigManager, getSkillEnvironment, isSkillEnabled, resolveSkillConfig, validateSkillConfig } from "./config.js";
 import { parseSkillToolConditions } from "./skill-tool-gating.js";

package/dist/src/agent/skills/managed-store.js

@@ -1,5 +1,5 @@
-import { parseFrontmatter } from "../../markdown/frontmatter.js";
 import { init_paths, resolveSkillsDir } from "../../config/paths.js";
+import { parseFrontmatter } from "../../markdown/frontmatter.js";
 import { loadSkillsLock } from "./hub-lock.js";
 import { dirname, join, resolve, sep } from "node:path";
 import { existsSync, mkdirSync, readFileSync, readdirSync, renameSync, rmSync, writeFileSync } from "node:fs";

package/dist/src/agent/skills/skill-manage-ops.js

@@ -1,5 +1,5 @@
-import { parseFrontmatter } from "../../markdown/frontmatter.js";
 import { init_paths, resolveSkillsDir } from "../../config/paths.js";
+import { parseFrontmatter } from "../../markdown/frontmatter.js";
 import { resolveWorkspaceSkillsDir } from "./workspace-skills-dir.js";
 import { formatScanSummary, scanSkillDirectory } from "./scanner.js";
 import { fuzzyFindText, normalizeForFuzzyMatch, normalizeToLF, restoreLineEndings } from "../tools/edit-diff.js";

package/dist/src/agent/tasks/task-judge-service.js

@@ -2,13 +2,13 @@ import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
 import { TaskRepository, init_task_repository } from "../../tasks/task-repository.js";
 import { TaskRunRepository, init_task_run_repository } from "../../tasks/task-run-repository.js";
-import { getAgentDefaultModelRef, init_schema } from "../../config/schema.js";
 import { resolveEffectiveAgentProfileForSession } from "../../config/agent-profile.js";
+import { getAgentDefaultModelRef, init_schema } from "../../config/schema.js";
 import { getApiKey, init_providers, resolveModel } from "../../providers/index.js";
-import { TaskConversationRepository } from "../../tasks/task-conversation-repository.js";
-import { readWorkspaceRevision } from "../coding/workspace-revision.js";
 import { completeWithResolvedCredentials } from "../../providers/model-call.js";
 import { extractAssistantText, getAssistantMessageErrorReason, stripCodeFences } from "../../providers/model-response.js";
+import { TaskConversationRepository } from "../../tasks/task-conversation-repository.js";
+import { readWorkspaceRevision } from "../coding/workspace-revision.js";
 import { TaskApplicationService } from "../../tasks/task-application-service.js";
 //#region src/agent/tasks/task-judge-service.ts
 init_schema();

package/dist/src/agent/tools/factory.js

@@ -8,9 +8,9 @@ import { getSessionMetadata } from "../../storage/sqlite/session-read-repository
 import { patchSessionMetadata } from "../../storage/sqlite/session-repository.js";
 import { getSessionTaskPlan, setSessionTaskPlan } from "../../storage/sqlite/session-task-plan-repository.js";
 import { init_sqlite } from "../../storage/sqlite/index.js";
+import { resolveUserContextSessionAccess } from "../../user-context/access-policy.js";
 import { init_agent_scope, resolveDefaultAgentId } from "../agent-scope.js";
 import { resolveEffectiveAgentConfigForAgent, resolveEffectiveAgentConfigForSession } from "../../config/agent-profile.js";
-import { resolveUserContextSessionAccess } from "../../user-context/access-policy.js";
 import { createPersonalAttentionTool } from "./personal-attention-tool.js";
 import { markCodemodeCoreRead } from "./codemode-permissions.js";
 import "../../../packages/browser-control-contract/src/index.js";

package/dist/src/agent/tools/knowledge-memory-tool.js

@@ -1,4 +1,6 @@
-import { getKnowledgeItem, isKnowledgeCurrent, knowledgeItemAllowed, searchKnowledgeItems, writeKnowledgeItem } from "../../knowledge-memory/repository.js";
+import { inferMemorySensitivity } from "../memory/sensitivity.js";
+import { canUseKnowledge } from "../../knowledge-memory/usage-policy.js";
+import { getKnowledgeItem, searchKnowledgeItems, writeKnowledgeItem } from "../../knowledge-memory/repository.js";
 import "../../knowledge-memory/index.js";
 import { Type } from "@sinclair/typebox";
 //#region src/agent/tools/knowledge-memory-tool.ts
@@ -75,9 +77,6 @@ function createKnowledgeSearchTool(options) {
 		}
 	};
 }
-function visibleItem(options, item) {
-	return item.scope.type === "global" || item.scope.type === "agent" && item.scope.id === options.agentId || item.scope.type === "workspace" && item.scope.id === options.workspaceId || item.scope.type === "project" && item.scope.id === options.getProjectId?.() || item.scope.type === "session" && item.scope.id === options.getSessionId();
-}
 function createKnowledgeGetTool(options) {
 	return {
 		name: "knowledge_get",
@@ -95,7 +94,7 @@ function createKnowledgeGetTool(options) {
 			};
 			const id = raw.id;
 			const item = getKnowledgeItem(id);
-			return item && isKnowledgeCurrent(item) && visibleItem(options, item) && knowledgeItemAllowed(item, options.getReadPolicy()) ? {
+			return item && canUseKnowledge(item, visibility(options), options.getReadPolicy()) ? {
 				content: [{
 					type: "text",
 					text: JSON.stringify(item, null, 2)
@@ -140,6 +139,13 @@ function createKnowledgeWriteTool(options) {
 				details: { error: "knowledge_write_denied" }
 			};
 			const input = raw;
+			if (["secret", "regulated"].includes(inferMemorySensitivity(input.content))) return {
+				content: [{
+					type: "text",
+					text: "Sensitive credentials or regulated information cannot be stored as work knowledge."
+				}],
+				details: { error: "sensitive_knowledge_denied" }
+			};
 			if (!options.getReadPolicy().scopes.includes(input.scope) || !options.getReadPolicy().contentSources.includes("memory")) return {
 				content: [{
 					type: "text",
@@ -169,7 +175,9 @@ function createKnowledgeWriteTool(options) {
 					},
 					content: input.content,
 					canonicalKey: input.canonicalKey,
-					status: "active",
+					status: "candidate",
+					verification: "tentative",
+					claimMode: "inferred",
 					confidence: .7,
 					importance: input.importance ?? .5,
 					originClass: "agent",

package/dist/src/agent/tools/xopc-use-tool.js

@@ -10,10 +10,10 @@ import { TaskRunRepository } from "../../tasks/task-run-repository.js";
 import { getSessionMetadata } from "../../storage/sqlite/session-read-repository.js";
 import { init_sqlite } from "../../storage/sqlite/index.js";
 import "../../activity/index.js";
-import { CapabilityError } from "../../capabilities/runtime/errors.js";
-import "../../capabilities/runtime/dispatcher.js";
 import { getDefaultAgentId, init_resolve_route } from "../../routing/resolve-route.js";
 import { TaskConversationRepository } from "../../tasks/task-conversation-repository.js";
+import { CapabilityError } from "../../capabilities/runtime/errors.js";
+import "../../capabilities/runtime/dispatcher.js";
 import { resolveProjectAgentId } from "../../projects/project-agent.js";
 import "../../projects/index.js";
 import { TaskDeletionService } from "../../tasks/task-deletion-service.js";

package/dist/src/agent/workspace-runtime/registry.js

@@ -1,5 +1,5 @@
-import { init_agent_scope, resolveAgentIdForWorkspacePath } from "../agent-scope.js";
 import { init_agent_session_key, normalizeAgentId } from "../../routing/agent-session-key.js";
+import { init_agent_scope, resolveAgentIdForWorkspacePath } from "../agent-scope.js";
 import { SkillManager } from "../skills/skill-manager.js";
 import { SystemPromptBuilder } from "../prompt/service-prompt-builder.js";
 import { UserContextRuntimeRegistry } from "../../user-context/runtime.js";

package/dist/src/agent-catalog/capabilities.js

@@ -1,10 +1,10 @@
 import { AgentEntrySchema, EffectiveAgentConfigSchema } from "../agent-config/schema.js";
 import { resolveEffectiveAgentConfig } from "../agent-config/resolver.js";
 import { init_agent_config } from "../agent-config/index.js";
-import { CapabilityError } from "../capabilities/runtime/errors.js";
-import { defineAtomicCapability, defineReadCapability } from "../capabilities/runtime/dispatcher.js";
 import { AgentCatalogRepository, init_repository } from "./repository.js";
 import { init_agent_scope, resolveAgentWorkspaceDir } from "../agent/agent-scope.js";
+import { CapabilityError } from "../capabilities/runtime/errors.js";
+import { defineAtomicCapability, defineReadCapability } from "../capabilities/runtime/dispatcher.js";
 import { AgentCatalogService } from "./service.js";
 import { z } from "zod";
 //#region src/agent-catalog/capabilities.ts

package/dist/src/auth/credentials.js

@@ -2,11 +2,11 @@ import { __esmMin } from "../../_virtual/_rolldown/runtime.js";
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
 import { init_write_file_atomic, writeTextAtomic } from "../infra/write-file-atomic.js";
-import { getApiKeyFromEnv, init_env_keys } from "../providers/env-keys.js";
 import { init_paths, resolveAgentAuthProfilesPath, resolveAuthProfilesPath, resolveCredentialsDir, resolveOAuthPath } from "../config/paths.js";
+import { assertCurrentModelProvider, init_provider_policy } from "../providers/provider-policy.js";
+import { getApiKeyFromEnv, init_env_keys } from "../providers/env-keys.js";
 import { init_oauth_provider_lock, withOAuthProviderLock } from "./oauth-provider-lock.js";
 import { getOAuthProviderDefinition, init_registry } from "./oauth/registry.js";
-import { assertCurrentModelProvider, init_provider_policy } from "../providers/provider-policy.js";
 import { dirname, join } from "path";
 import { mkdir, readFile, readdir, rm } from "fs/promises";
 //#region src/auth/credentials.ts

package/dist/src/auth/model-credential-store.js

@@ -1,6 +1,6 @@
 import { __esmMin } from "../../_virtual/_rolldown/runtime.js";
-import { init_oauth_provider_lock, withOAuthProviderLock } from "./oauth-provider-lock.js";
 import { assertCurrentModelProvider, init_provider_policy, isRetiredModelProvider } from "../providers/provider-policy.js";
+import { init_oauth_provider_lock, withOAuthProviderLock } from "./oauth-provider-lock.js";
 import { CredentialResolver, init_credentials } from "./credentials.js";
 //#region src/auth/model-credential-store.ts
 function normalizeProviderId(providerId) {

package/dist/src/auth/sync-provider-auth.js

@@ -1,8 +1,8 @@
 import { __esmMin } from "../../_virtual/_rolldown/runtime.js";
+import { getDefaultAgentId, init_resolve_route } from "../routing/resolve-route.js";
 import { init_paths, resolveAgentAuthProfilesPath, resolveAuthProfilesPath, resolveOAuthPath } from "../config/paths.js";
-import { init_registry, isOAuthOnlyProvider } from "./oauth/registry.js";
 import { assertCurrentModelProvider, init_provider_policy } from "../providers/provider-policy.js";
-import { getDefaultAgentId, init_resolve_route } from "../routing/resolve-route.js";
+import { init_registry, isOAuthOnlyProvider } from "./oauth/registry.js";
 import { existsSync, readFileSync } from "node:fs";
 //#region src/auth/sync-provider-auth.ts
 /**

package/dist/src/automations/capabilities/drafts.js

@@ -3,10 +3,10 @@ import { init_src } from "../../../packages/gateway-contract/src/index.js";
 import { init_trust_policy, resolveAutomationSafetyForTrust } from "../../user-context/trust-policy.js";
 import { getUserTrustPolicy } from "../../storage/sqlite/user-trust-repository.js";
 import { init_sqlite } from "../../storage/sqlite/index.js";
+import { init_agent_scope, resolveDefaultAgentId } from "../../agent/agent-scope.js";
 import { CapabilityError } from "../../capabilities/runtime/errors.js";
 import { ExternalEffectNotAppliedError } from "../../capabilities/runtime/external-operations.js";
 import { defineExternalCapability, defineReadCapability } from "../../capabilities/runtime/dispatcher.js";
-import { init_agent_scope, resolveDefaultAgentId } from "../../agent/agent-scope.js";
 import { AutomationCreateCapabilityInputSchema } from "./write.js";
 import { simulateAutomation } from "../draft/automation-draft-validator.js";
 import { AutomationDraftService } from "../draft/automation-draft-service.js";

package/dist/src/automations/draft/automation-draft-service.js

@@ -1,9 +1,9 @@
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
 import { getAgentDefaultModelRef, init_schema } from "../../config/schema.js";
+import { resolveModelSelector } from "../../config/agent-model-intents.js";
 import { getDefaultModelSync, init_providers, resolveModel } from "../../providers/index.js";
 import { completeWithResolvedCredentials } from "../../providers/model-call.js";
-import { resolveModelSelector } from "../../config/agent-model-intents.js";
 import { buildAutomationDraftPrompt, buildAutomationDraftRepairPrompt, buildAutomationRunRepairPrompt, buildAutomationRunRepairRetryPrompt } from "./automation-draft-prompt.js";
 import { buildAutomationDraftResponse, parseGeneratedAutomationDraft, parseGeneratedAutomationRepairDraft } from "./automation-draft-validator.js";
 //#region src/automations/draft/automation-draft-service.ts

package/dist/src/automations/service/action-executor.js

@@ -1,8 +1,8 @@
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
+import { init_session_key, resolveConversationId } from "../../routing/session-key.js";
 import { normalizeAgentId } from "../../agent-catalog/id.js";
 import { init_agent_scope } from "../../agent/agent-scope.js";
-import { init_session_key, resolveConversationId } from "../../routing/session-key.js";
 import { resolveAutomationTimeoutSeconds } from "../domain/defaults.js";
 //#region src/automations/service/action-executor.ts
 init_agent_scope();

package/dist/src/bootstrap/application-state.js

@@ -1,10 +1,10 @@
 import { requireXopcDatabase } from "../storage/sqlite/connection.js";
 import { init_sqlite } from "../storage/sqlite/index.js";
 import { AgentCatalogService } from "../agent-catalog/service.js";
-import { cutoverLegacyAgentConfig } from "../agent-catalog/migrations/legacy-config-cutover.js";
-import "../agent-catalog/index.js";
 import { ensureStarterAgentsInitialized } from "../agent/starter-agents.js";
 import { migrateIdentityMarkdownToCatalog } from "../agent-catalog/migrations/identity-markdown-cutover.js";
+import { cutoverLegacyAgentConfig } from "../agent-catalog/migrations/legacy-config-cutover.js";
+import "../agent-catalog/index.js";
 import { migrateCloudPublicModelsSync } from "../migrations/cloud-public-models.js";
 import { runBootstrapMigrationsSync } from "../migrations/runner.js";
 //#region src/bootstrap/application-state.ts

package/dist/src/capabilities/runtime/dispatcher.js

@@ -1,7 +1,7 @@
 import { SqliteCommitEffectError, init_transaction } from "../../storage/sqlite/transaction.js";
-import { OperationConflictError, executeAtomicOperation } from "./atomic-operations.js";
 import { CapabilityError } from "./errors.js";
 import { executeExternalOperation } from "./external-operations.js";
+import { OperationConflictError, executeAtomicOperation } from "./atomic-operations.js";
 import { createHash } from "node:crypto";
 import { z } from "zod";
 //#region src/capabilities/runtime/dispatcher.ts

package/dist/src/capabilities/runtime/product.js

@@ -1,6 +1,5 @@
 import { CapabilityError } from "./errors.js";
 import { CapabilityDispatcher } from "./dispatcher.js";
-import { registerAgentCapabilities } from "../../agent-catalog/capabilities.js";
 import { registerLocalAppReadCapabilities } from "../../local-apps/capabilities/read.js";
 import { registerNoteReadCapabilities } from "../../notes/capabilities/read.js";
 import { registerNoteWriteCapabilities } from "../../notes/capabilities/write.js";
@@ -19,6 +18,7 @@ import { registerSceneReadCapabilities } from "../../scenes/capabilities/read.js
 import { registerSceneWriteCapabilities } from "../../scenes/capabilities/write.js";
 import { registerSettingsCapability } from "./settings.js";
 import { registerAppContextCapability } from "./app-context.js";
+import { registerAgentCapabilities } from "../../agent-catalog/capabilities.js";
 //#region src/capabilities/runtime/product.ts
 function createProductDispatcher(getNotes, taskWrites) {
 	const dispatcher = new CapabilityDispatcher();

package/dist/src/chat-commands/agent-edit.js

@@ -1,7 +1,7 @@
+import { init_agent_session_key, resolveAgentIdFromConversationId } from "../routing/agent-session-key.js";
 import { normalizeAgentId } from "../agent-catalog/id.js";
 import { init_agent_scope, resolveAgentProfileDir } from "../agent/agent-scope.js";
 import { WORKSPACE_FILES, init_paths } from "../config/paths.js";
-import { init_agent_session_key, resolveAgentIdFromConversationId } from "../routing/agent-session-key.js";
 import { commandRegistry } from "./registry.js";
 import { join } from "node:path";
 import { readFile } from "node:fs/promises";

package/dist/src/chat-commands/builtins/config.js

@@ -1,7 +1,7 @@
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
-import { init_paths, resolveConfigPath } from "../../config/paths.js";
 import { ConfigSchema, init_schema } from "../../config/schema.js";
+import { init_paths, resolveConfigPath } from "../../config/paths.js";
 import { commandRegistry } from "../registry.js";
 import { parseConfigValue } from "../config-value.js";
 import { getConfigValueAtPath, parseConfigPath, setConfigValueAtPath, unsetConfigValueAtPath } from "../config-paths.js";

package/dist/src/chat-commands/context.js

@@ -1,7 +1,7 @@
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
-import { getAgentDefaultModelRef, init_schema } from "../config/schema.js";
 import { resolveEffectiveAgentConfigForSession } from "../config/agent-profile.js";
+import { getAgentDefaultModelRef, init_schema } from "../config/schema.js";
 import { effectiveWorkspacePathForSession } from "../session/session-workspace.js";
 import { getProjectForSession } from "../projects/workspace.js";
 import { getSessionDisplayName } from "./session-key.js";

package/dist/src/cli/commands/agent.js

@@ -1,8 +1,9 @@
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
+import { init_agent_session_key, resolveAgentMainConversationId } from "../../routing/agent-session-key.js";
 import { init_agent_scope, resolveDefaultAgentId } from "../../agent/agent-scope.js";
 import { getAgentDefaultModelRef, init_schema } from "../../config/schema.js";
-import { init_agent_session_key, resolveAgentMainConversationId } from "../../routing/agent-session-key.js";
+import { getWorkspacePath } from "../../config/workspace-path-helpers.js";
 import { ExtensionLoader } from "../../extensions/loader.js";
 import "../../extensions/index.js";
 import { loadConfig } from "../../config/loader.js";
@@ -12,7 +13,6 @@ import { AgentService } from "../../agent/service.js";
 import "../../agent/index.js";
 import { formatExamples, register } from "../registry.js";
 import { getContextWithOpts } from "../context.js";
-import { getWorkspacePath } from "../../config/workspace-path-helpers.js";
 import "../../config/index.js";
 import { getXopcCloudCatalogCoordinator } from "../../providers/xopc-cloud-catalog-coordinator.js";
 import { listSessions } from "./agent/sessions.js";

package/dist/src/cli/commands/agents.js

@@ -1,8 +1,8 @@
 import { normalizeAgentId, validateAgentIdForNewAgent } from "../../agent-catalog/id.js";
 import { AgentCatalogRepository, init_repository } from "../../agent-catalog/repository.js";
 import { init_agent_scope, resolveAgentDir, resolveAgentWorkspaceDir, resolveDefaultAgentId } from "../../agent/agent-scope.js";
-import { AgentCatalogService } from "../../agent-catalog/service.js";
 import { resolveEffectiveAgentConfigForAgent } from "../../config/agent-profile.js";
+import { AgentCatalogService } from "../../agent-catalog/service.js";
 import { colors } from "../utils/colors.js";
 //#region src/cli/commands/agents.ts
 init_repository();

package/dist/src/cli/commands/doctor/checks/database-schema.js

@@ -53,7 +53,7 @@ async function checkDatabaseSchema(ctx) {
 		id: "database-schema",
 		label: "Database schema",
 		status: "pass",
-		message: `SQLite schema v${status.dbVersion} (current release v244).`,
+		message: `SQLite schema v${status.dbVersion} (current release v245).`,
 		hints: []
 	};
 }

package/dist/src/cli/commands/doctor/checks/image-providers.js

@@ -1,6 +1,6 @@
 import { resolveModelsJsonPath } from "../../../../config/paths.js";
-import { CredentialResolver, init_credentials } from "../../../../auth/credentials.js";
 import { init_models_json, loadModelsJson } from "../../../../config/models-json.js";
+import { CredentialResolver, init_credentials } from "../../../../auth/credentials.js";
 import { classifyHost } from "../../../../media-shared/http/private-network.js";
 import "../../../../media-shared/http/index.js";
 import { existsSync } from "node:fs";

package/dist/src/cli/commands/doctor/checks/provider-auth.js

@@ -1,9 +1,9 @@
 import { AgentCatalogRepository, init_repository } from "../../../../agent-catalog/repository.js";
+import { getDefaultAgentId, init_resolve_route } from "../../../../routing/resolve-route.js";
+import { getAgentDefaultModelRef, init_schema, parseModelRef } from "../../../../config/schema.js";
 import { PROVIDER_ENV_MAP, init_env_keys } from "../../../../providers/env-keys.js";
 import { getModelOAuthProviderIds, init_registry } from "../../../../auth/oauth/registry.js";
 import { CredentialResolver, init_credentials } from "../../../../auth/credentials.js";
-import { getAgentDefaultModelRef, init_schema, parseModelRef } from "../../../../config/schema.js";
-import { getDefaultAgentId, init_resolve_route } from "../../../../routing/resolve-route.js";
 import { loadConfig } from "../../../../config/loader.js";
 import { existsSync } from "node:fs";
 //#region src/cli/commands/doctor/checks/provider-auth.ts

package/dist/src/cli/commands/models.js

@@ -1,11 +1,11 @@
 import { creditDecimal } from "../../../packages/gateway-contract/src/cloud-credits.js";
 import { init_src } from "../../../packages/gateway-contract/src/index.js";
 import { AgentCatalogRepository, init_repository } from "../../agent-catalog/repository.js";
-import { AgentCatalogService } from "../../agent-catalog/service.js";
-import { CredentialResolver, init_credentials } from "../../auth/credentials.js";
 import { getAgentDefaultModelRef, init_schema } from "../../config/schema.js";
+import { CredentialResolver, init_credentials } from "../../auth/credentials.js";
 import { getAllModels, getAvailableModels, getConfiguredProviders, getProviderAuthState, getProviderDisplayName, init_providers, isProviderConfigured, providerSupportsApiKey, providerSupportsOAuth, resolveModel } from "../../providers/index.js";
 import { XopcCloudAccountService } from "../../providers/xopc-cloud-account-service.js";
+import { AgentCatalogService } from "../../agent-catalog/service.js";
 import { listImageProviderSpecs } from "../../../packages/image-providers/src/catalog.js";
 import "../../../packages/image-providers/src/index.js";
 import { loadConfig } from "../../config/loader.js";

package/dist/src/cli/commands/onboard/model.js

@@ -1,12 +1,12 @@
 import { AgentCatalogRepository, init_repository } from "../../../agent-catalog/repository.js";
-import { AgentCatalogService } from "../../../agent-catalog/service.js";
-import { getApiKeyFromEnv } from "../../../providers/env-keys.js";
-import { resolveModelsJsonPath } from "../../../config/paths.js";
-import { CredentialResolver, init_credentials } from "../../../auth/credentials.js";
 import { getAgentDefaultModelRef, init_schema } from "../../../config/schema.js";
+import { resolveModelsJsonPath } from "../../../config/paths.js";
 import { init_models_json, loadModelsJson, saveModelsJson } from "../../../config/models-json.js";
+import { getApiKeyFromEnv } from "../../../providers/env-keys.js";
 import { getModelRegistry } from "../../../providers/model-registry.js";
+import { CredentialResolver, init_credentials } from "../../../auth/credentials.js";
 import { getAllProviders, getModelsByProvider, getProviderDisplayName, init_providers, providerSupportsApiKey, providerSupportsOAuth } from "../../../providers/index.js";
+import { AgentCatalogService } from "../../../agent-catalog/service.js";
 import { prepareUpdateGlobalDefaults } from "../../../gateway/global-defaults-admin.js";
 import { discoverProviderModels, isProviderApiDiscoverable } from "../../../providers/model-discovery.js";
 import { getXopcCloudCatalogCoordinator } from "../../../providers/xopc-cloud-catalog-coordinator.js";

package/dist/src/cli/extension-cli-register.js

@@ -1,3 +1,4 @@
+import { getWorkspacePath } from "../config/workspace-path-helpers.js";
 import { collectConfiguredChannelIds } from "../extensions/activation-context.js";
 import { ExtensionLoader } from "../extensions/loader.js";
 import "../extensions/index.js";
@@ -6,7 +7,6 @@ import { MessageBus } from "../infra/bus/queue.js";
 import "../infra/bus/index.js";
 import { bootstrapApplicationStateSync } from "../bootstrap/application-state.js";
 import { createDefaultContext } from "./registry.js";
-import { getWorkspacePath } from "../config/workspace-path-helpers.js";
 import "../config/index.js";
 import { registerExtensionCliProgram } from "../extensions/sdk/channel-helpers.js";
 import { join } from "path";