@xopcai/xopc 0.0.374 → 0.0.376

package/dist/src/memory-maintenance/service.js

@@ -146,7 +146,7 @@ function reconcileEvidence(db, runId, principalId, now, limit, evidenceThreshold
 function activateKnowledge(db, runId, principalId, now, limit, metrics) {
 	const rows = db.prepare(`SELECT knowledge_id FROM knowledge_items
     WHERE principal_id = ? AND record_class = 'memory' AND status = 'candidate'
-      AND origin_class IN ('owner', 'agent', 'system') AND confidence >= 0.7
+      AND origin_class IN ('owner', 'agent', 'system') AND confidence >= 0.7 AND verification = 'supported'
       AND derived_from_recalled_context = 0
       AND (valid_from IS NULL OR valid_from <= ?) AND (valid_to IS NULL OR valid_to >= ?)
       AND (expires_at IS NULL OR expires_at >= ?) AND (review_at IS NULL OR review_at > ?)
@@ -166,14 +166,14 @@ function repairIndexes(db, runId, now, metrics) {
     LEFT JOIN user_assertions_fts f ON f.assertion_id = a.assertion_id
     WHERE f.assertion_id IS NULL`).get();
 	const knowledgeMissing = db.prepare(`SELECT COUNT(*) AS count FROM knowledge_items k
-    LEFT JOIN knowledge_items_fts f ON f.knowledge_id = k.knowledge_id
+    LEFT JOIN knowledge_search_fts f ON f.knowledge_id = k.knowledge_id
     WHERE f.knowledge_id IS NULL`).get();
 	if (assertionMissing.count) db.prepare(`INSERT INTO user_assertions_fts(statement, assertion_id, slot_id)
       SELECT a.statement, a.assertion_id, a.slot_id FROM user_assertions a
       LEFT JOIN user_assertions_fts f ON f.assertion_id = a.assertion_id WHERE f.assertion_id IS NULL`).run();
-	if (knowledgeMissing.count) db.prepare(`INSERT INTO knowledge_items_fts(content, knowledge_id)
-      SELECT k.content, k.knowledge_id FROM knowledge_items k
-      LEFT JOIN knowledge_items_fts f ON f.knowledge_id = k.knowledge_id WHERE f.knowledge_id IS NULL`).run();
+	if (knowledgeMissing.count) db.prepare(`INSERT INTO knowledge_search_fts(search_text, knowledge_id)
+      SELECT xopc_memory_search_text(k.content), k.knowledge_id FROM knowledge_items k
+      LEFT JOIN knowledge_search_fts f ON f.knowledge_id = k.knowledge_id WHERE f.knowledge_id IS NULL`).run();
 	metrics.repairedIndexes = assertionMissing.count + knowledgeMissing.count;
 	if (metrics.repairedIndexes) addDecision(db, runId, "index", "fts", "repair", "missing_index_rows", { missing: metrics.repairedIndexes }, { missing: 0 }, now);
 }

package/dist/src/notes/service.js

@@ -7,8 +7,8 @@ import { init_note_markdown, parseNoteMarkdown } from "./note-markdown.js";
 import { init_notes_repository, listNoteProjectSummaries } from "../storage/sqlite/notes-repository.js";
 import { changedFieldsFromPatch, emitActivity, previewText, systemActivityActor, systemActivitySource } from "../activity/emitter.js";
 import { getDefaultModelSync, init_providers, resolveModel } from "../providers/index.js";
-import { DomainOutboxDispatcher } from "../infra/domain-outbox-dispatcher.js";
 import { completeWithResolvedCredentials } from "../providers/model-call.js";
+import { DomainOutboxDispatcher } from "../infra/domain-outbox-dispatcher.js";
 import { partitionAttachmentsByReference } from "./note-attachment-sync.js";
 import { buildNoteAgentContextArtifact, getCachedNoteAgentContextArtifact } from "./agent-context.js";
 import { revokeNoteShareRecords } from "../share/note-share-revocation.js";

package/dist/src/observability/runtime.js

@@ -1,8 +1,8 @@
 import { init_context, runWithLogContext } from "../utils/logger/context.js";
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
-import { CredentialResolver, init_credentials } from "../auth/credentials.js";
 import { TracingConfigSchema, defaultTracingConfig, init_config } from "./config.js";
+import { CredentialResolver, init_credentials } from "../auth/credentials.js";
 import { LangfuseTarget } from "./langfuse.js";
 import { boundedJson, redactString } from "./sanitize.js";
 import { LocalTraceStore } from "./store.js";

package/dist/src/personal-agent/proactivity/service.js

@@ -6,13 +6,13 @@ import { init_src } from "../../../packages/gateway-contract/src/index.js";
 import { init_session_instance_repository, readCurrentTranscriptId } from "../../storage/sqlite/session-instance-repository.js";
 import { appendTranscriptEntry, init_transcript_repository } from "../../storage/sqlite/transcript-repository.js";
 import { AgentCatalogRepository, init_repository } from "../../agent-catalog/repository.js";
-import { init_providers, resolveModel } from "../../providers/index.js";
 import { resolveUserContextSessionAccess } from "../../user-context/access-policy.js";
+import { init_providers, resolveModel } from "../../providers/index.js";
+import { completeWithResolvedCredentials } from "../../providers/model-call.js";
+import { extractAssistantText, getAssistantMessageErrorReason, stripCodeFences } from "../../providers/model-response.js";
 import { getPersonalAgent } from "../repository.js";
 import { DurableState } from "../../storage/sqlite/durable-state.js";
 import { enqueueDue, enqueueWakeup, getAttention, getAttentionSources, getProactivitySettings, isQuiet, listAttention, localDay, preparationStrategy, recordFeedback, reserveModelCall, saveAttention, sourceFingerprint, userText } from "./repository.js";
-import { completeWithResolvedCredentials } from "../../providers/model-call.js";
-import { extractAssistantText, getAssistantMessageErrorReason, stripCodeFences } from "../../providers/model-response.js";
 import { emitSessionTranscriptUpdate } from "../../session/transcript-events.js";
 import { PERSONAL_PERSONA_GUIDANCE } from "../persona.js";
 import { personalConversationState } from "../conversation-state.js";

package/dist/src/personal-agent/prompt-context.js

@@ -6,10 +6,10 @@ import { resolveEffectiveAgentConfig } from "../agent-config/resolver.js";
 import { init_agent_config } from "../agent-config/index.js";
 import { AgentCatalogRepository, init_repository } from "../agent-catalog/repository.js";
 import { isKnowledgeCurrent, knowledgeItemAllowed, listKnowledgeItems } from "../knowledge-memory/repository.js";
-import "../knowledge-memory/index.js";
-import { getProjectForSession } from "../projects/workspace.js";
 import { resolveUserContextSessionAccess } from "../user-context/access-policy.js";
+import "../knowledge-memory/index.js";
 import { getActiveAssertionForSlot } from "../user-model/repository.js";
+import { getProjectForSession } from "../projects/workspace.js";
 import { canUseAssertion } from "../user-model/usage-policy.js";
 import "../user-model/index.js";
 import { isPersonalConversation } from "./repository.js";

package/dist/src/personal-agent/reply-composer.d.ts

@@ -17,6 +17,6 @@ export declare class PersonalReplyComposer {
     private readonly compose;
     private readonly timeoutMs;
     constructor(compose?: typeof completeReply, timeoutMs?: number);
-    drain(notify: (conversationId: string, deliveryId: string) => void, isAvailable?: (conversationId: string) => boolean): Promise<void>;
+    drain(notify: (conversationId: string, deliveryId: string) => void | Promise<void>, isAvailable?: (conversationId: string) => boolean): Promise<void>;
 }
 export {};

package/dist/src/personal-agent/reply-composer.js

@@ -10,11 +10,11 @@ import { getSessionConfig, init_config_repository } from "../storage/sqlite/conf
 import { AgentCatalogRepository, init_repository } from "../agent-catalog/repository.js";
 import { init_agent_scope, resolveAgentProfileDir } from "../agent/agent-scope.js";
 import { init_providers, resolveModel } from "../providers/index.js";
+import { completeWithResolvedCredentials } from "../providers/model-call.js";
+import { extractAssistantText, getAssistantMessageErrorReason, stripCodeFences } from "../providers/model-response.js";
 import { getPersonalAgentByConversation } from "./repository.js";
 import { TaskConversationRepository } from "../tasks/task-conversation-repository.js";
 import { loadProfileBootstrapFiles } from "../agent/bootstrap/load-bootstrap-files.js";
-import { completeWithResolvedCredentials } from "../providers/model-call.js";
-import { extractAssistantText, getAssistantMessageErrorReason, stripCodeFences } from "../providers/model-response.js";
 import { emitSessionTranscriptUpdate } from "../session/transcript-events.js";
 import { PERSONAL_PERSONA_GUIDANCE } from "./persona.js";
 import { PERSONAL_REPLY_EXAMPLES, PERSONAL_REPLY_STYLE_RULES } from "./reply-style.js";
@@ -286,7 +286,14 @@ var PersonalReplyComposer = class {
 					})) return;
 				}
 				emitSessionTranscriptUpdate({ conversationId: packet.delivery.conversationId });
-				notify(packet.delivery.conversationId, `reply:${packet.delivery.deliveryId}`);
+				const notificationLease = setInterval(() => {
+					db.prepare("UPDATE task_result_deliveries SET reply_lease_until = ? WHERE delivery_id = ? AND reply_lease_token = ?").run(Date.now() + this.timeoutMs + 5e3, row.delivery_id, row.lease_token);
+				}, 5e3);
+				try {
+					await notify(packet.delivery.conversationId, `reply:${packet.delivery.deliveryId}`);
+				} finally {
+					clearInterval(notificationLease);
+				}
 				db.prepare("UPDATE task_result_deliveries SET reply_notified_at = ?, reply_lease_until = 0 WHERE delivery_id = ?").run(Date.now(), row.delivery_id);
 				if (packet.requestId) db.prepare("UPDATE personal_requests SET notified_at = ? WHERE request_id = ?").run(Date.now(), packet.requestId);
 			} catch (err) {

package/dist/src/platform/index.js

@@ -1,5 +1,5 @@
-import { init_resolution, resolveConnectedPlatformDiscovery, resolveConnectedPlatformEndpoint, setActivePlatformDiscovery } from "./resolution.js";
 import { AgentManifestSchema, PlatformCapabilitySchema, PlatformConfigSchema, PlatformDiscoverySchema, PlatformEventSchema, init_contracts } from "./contracts.js";
+import { init_resolution, resolveConnectedPlatformDiscovery, resolveConnectedPlatformEndpoint, setActivePlatformDiscovery } from "./resolution.js";
 import { PLATFORM_RUNTIME_PROFILE, PLATFORM_RUNTIME_PROVIDER, PlatformRuntimeClient, RuntimeCommandSchema, discoverPlatform } from "./client.js";
 import { processRuntimeCommand } from "./worker.js";
 //#region src/platform/index.ts

package/dist/src/providers/index.js

@@ -1,12 +1,12 @@
 import { __esmMin, __exportAll } from "../../_virtual/_rolldown/runtime.js";
+import { getAgentDefaultModelRef, init_schema } from "../config/schema.js";
+import { assertCurrentModelProvider, init_provider_policy, isRetiredModelProvider } from "./provider-policy.js";
 import { PROVIDER_ENV_MAP, getApiKeyFromEnv, init_env_keys } from "./env-keys.js";
+import { init_model_ref, splitProviderModelRef } from "./model-ref.js";
+import { ModelRegistry, getModelRegistry, init_model_registry, prewarmModelRegistry, resetModelRegistry } from "./model-registry.js";
 import { getModelOAuthProviderIds, init_registry } from "../auth/oauth/registry.js";
-import { assertCurrentModelProvider, init_provider_policy, isRetiredModelProvider } from "./provider-policy.js";
 import { CredentialResolver, hasCredentials, init_credentials } from "../auth/credentials.js";
-import { getAgentDefaultModelRef, init_schema } from "../config/schema.js";
 import { hasProviderAuthOnDiskSync, init_sync_provider_auth } from "../auth/sync-provider-auth.js";
-import { init_model_ref, splitProviderModelRef } from "./model-ref.js";
-import { ModelRegistry, getModelRegistry, init_model_registry, prewarmModelRegistry, resetModelRegistry } from "./model-registry.js";
 import { EXTENSION_PROVIDER_BASE_URL, init_constants } from "./constants.js";
 import { applyOfficialModelMetadataCorrections, getSupplementalModels, init_model_supplements } from "./model-supplements.js";
 import { getProviderRegistry, init_plugin_registry } from "./plugin-registry.js";

package/dist/src/providers/local-model.d.ts

@@ -0,0 +1,2 @@
+/** Local-only processing requires a loopback endpoint, regardless of provider name. */
+export declare function isLoopbackModel(baseUrl: string): boolean;

package/dist/src/providers/local-model.js

@@ -0,0 +1,16 @@
+//#region src/providers/local-model.ts
+/** Local-only processing requires a loopback endpoint, regardless of provider name. */
+function isLoopbackModel(baseUrl) {
+	try {
+		return [
+			"localhost",
+			"127.0.0.1",
+			"[::1]",
+			"::1"
+		].includes(new URL(baseUrl).hostname);
+	} catch {
+		return false;
+	}
+}
+//#endregion
+export { isLoopbackModel };

package/dist/src/providers/model-registry.js

@@ -1,11 +1,11 @@
 import { __esmMin } from "../../_virtual/_rolldown/runtime.js";
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
-import { getApiKeyFromEnv, init_env_keys } from "./env-keys.js";
+import { init_resolve_config_value, resolveConfigValue, resolveHeaders } from "../config/resolve-config-value.js";
 import { resolveModelsJsonPath } from "../config/paths.js";
 import { init_provider_policy, isRetiredModelProvider } from "./provider-policy.js";
-import { init_resolve_config_value, resolveConfigValue, resolveHeaders } from "../config/resolve-config-value.js";
 import { getDefaultModelValues, init_models_json, validateModelsConfig } from "../config/models-json.js";
+import { getApiKeyFromEnv, init_env_keys } from "./env-keys.js";
 import { getModelCatalogStore, init_model_catalog_store } from "./model-catalog-store.js";
 import { init_model_ref, splitProviderModelRef } from "./model-ref.js";
 import { existsSync, readFileSync } from "fs";

package/dist/src/providers/provider-auth-service.js

@@ -1,7 +1,7 @@
 import { __esmMin } from "../../_virtual/_rolldown/runtime.js";
 import { init_paths, resolveModelsJsonPath } from "../config/paths.js";
-import { init_register_bundled_oauth_flows, registerBundledOAuthFlows } from "./register-bundled-oauth-flows.js";
 import { assertCurrentModelProvider, init_provider_policy } from "./provider-policy.js";
+import { init_register_bundled_oauth_flows, registerBundledOAuthFlows } from "./register-bundled-oauth-flows.js";
 import { CredentialResolver, init_credentials } from "../auth/credentials.js";
 import { XopcModelCredentialStore, init_model_credential_store } from "../auth/model-credential-store.js";
 import { init_register_runtime_providers, registerRuntimeProviders } from "./register-runtime-providers.js";

package/dist/src/providers/provider-disconnect-core.js

@@ -1,8 +1,8 @@
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
+import { getModelRegistry, init_model_registry } from "./model-registry.js";
 import { init_oauth_provider_lock, withOAuthProviderLock } from "../auth/oauth-provider-lock.js";
 import { CredentialResolver, init_credentials } from "../auth/credentials.js";
-import { getModelRegistry, init_model_registry } from "./model-registry.js";
 import { getProviderAuthService, init_provider_auth_service } from "./provider-auth-service.js";
 import { evictAllEmbeddedSessionRunners } from "../agent/embedded/session-runner.js";
 //#region src/providers/provider-disconnect-core.ts

package/dist/src/providers/register-runtime-providers.js

@@ -1,7 +1,7 @@
 import { __esmMin } from "../../_virtual/_rolldown/runtime.js";
-import { getOAuthProviderDefinition, init_registry } from "../auth/oauth/registry.js";
 import { init_provider_policy, isRetiredModelProvider } from "./provider-policy.js";
 import { getModelCatalogStore, init_model_catalog_store } from "./model-catalog-store.js";
+import { getOAuthProviderDefinition, init_registry } from "../auth/oauth/registry.js";
 import { XOPC_CLOUD_PROVIDER_ID, init_xopc_cloud_config, resolveXopcModelRouterUrl } from "./xopc-cloud-config.js";
 //#region src/providers/register-runtime-providers.ts
 function registerRuntimeProvider(modelRuntime, source) {

package/dist/src/providers/xopc-cloud-catalog-coordinator.js

@@ -1,9 +1,9 @@
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
-import { init_oauth_provider_lock, withOAuthProviderLock } from "../auth/oauth-provider-lock.js";
 import { ModelCatalogPersistence, init_model_catalog_persistence } from "./model-catalog-persistence.js";
 import { getModelCatalogStore, init_model_catalog_store } from "./model-catalog-store.js";
 import { getModelRegistry, init_model_registry } from "./model-registry.js";
+import { init_oauth_provider_lock, withOAuthProviderLock } from "../auth/oauth-provider-lock.js";
 import { reloadImageGenerationProviders } from "../agent/image/generation/provider-registry.js";
 import { disconnectProviderCore } from "./provider-disconnect-core.js";
 import { XopcCloudModelSource } from "./xopc-cloud-model-source.js";

package/dist/src/scenes/taskFollowUp/service.js

@@ -4,6 +4,7 @@ import { TaskRepository, init_task_repository } from "../../tasks/task-repositor
 import { TaskRunRepository, init_task_run_repository } from "../../tasks/task-run-repository.js";
 import { AgentCatalogRepository, init_repository } from "../../agent-catalog/repository.js";
 import { init_agent_scope, resolveDefaultAgentId } from "../../agent/agent-scope.js";
+import { resolveModelSelector } from "../../config/agent-model-intents.js";
 import { init_providers, isProviderConfiguredSync, resolveModel } from "../../providers/index.js";
 import { ExecutionEnvironmentStore } from "../../execution-environments/store.js";
 import { ProjectStore } from "../../projects/project-store.js";
@@ -12,7 +13,6 @@ import { removeCommandContainer } from "../../agent/commands/command-isolation.j
 import { inspectGitRepository } from "../../execution-environments/git.js";
 import { TaskContextRepository } from "../../tasks/task-context-repository.js";
 import { TaskApplicationService } from "../../tasks/task-application-service.js";
-import { resolveModelSelector } from "../../config/agent-model-intents.js";
 import { sceneContentHash } from "../contracts.js";
 import { SceneConflictError, SceneNotFoundError, SceneRepository } from "../repository.js";
 import { SceneSetupError } from "../service.js";

package/dist/src/session/session-title.js

@@ -5,8 +5,8 @@ import { isCronConversationId } from "../routing/agent-session-key.js";
 import { init_session_key } from "../routing/session-key.js";
 import { init_providers, resolveModel } from "../providers/index.js";
 import { completeWithResolvedCredentials } from "../providers/model-call.js";
-import { readAgentMessageContent } from "../agent/memory/agent-message-access.js";
 import { stripRuntimeContextFromUserMessage } from "./user-message-display.js";
+import { readAgentMessageContent } from "../agent/memory/agent-message-access.js";
 //#region src/session/session-title.ts
 init_session_key();
 init_providers();

package/dist/src/session/store.js

@@ -13,8 +13,8 @@ import { appendCompactionBoundaryIfUnchanged, appendTranscriptEntry, listCompact
 import { getSessionConfig, setSessionConfig } from "../storage/sqlite/config-repository.js";
 import { init_sqlite } from "../storage/sqlite/index.js";
 import { init_agent_session_key, resolveAgentIdFromConversationId } from "../routing/agent-session-key.js";
-import { resolveEffectiveAgentProfile } from "../config/agent-profile.js";
 import { resolveUserContextSessionAccess } from "../user-context/access-policy.js";
+import { resolveEffectiveAgentProfile } from "../config/agent-profile.js";
 import { DurableState } from "../storage/sqlite/durable-state.js";
 import { transcriptRowsToClientHistory } from "./client-history.js";
 import { SessionCompactor } from "../agent/memory/compaction.js";
@@ -551,6 +551,7 @@ var SessionStore = class {
 					handover: result.handover,
 					audit: result.audit,
 					sourceEntries: expectedSnapshot.entries,
+					readPolicy: access.knowledgePolicy,
 					writePolicy: access.knowledge && access.knowledgePolicy.scopes.includes("session") && access.knowledgePolicy.contentSources.includes("memory") ? this.options.config.userContext.knowledgeMemory.writePolicy : "deny"
 				});
 				log.info({

package/dist/src/storage/sqlite/knowledge-repository.js

@@ -1,5 +1,6 @@
 import { __esmMin } from "../../../_virtual/_rolldown/runtime.js";
 import { getSqliteDatabase, init_transaction, runSqliteWriteTransaction } from "./transaction.js";
+import { init_chunks, replaceKnowledgeChunks } from "../../knowledge/chunks.js";
 import { randomUUID } from "node:crypto";
 //#region src/storage/sqlite/knowledge-repository.ts
 function parseTimestamp(value) {
@@ -185,6 +186,10 @@ function upsertKnowledgeSourceItems(inputs, nowMs = Date.now()) {
           updated_at = excluded.updated_at`).run(id, input.sourceInstanceId, input.collectionScope, input.externalId, input.itemType, input.authorRole ?? null, parseTimestamp(input.occurredAt), parseTimestamp(input.sourceUpdatedAt), input.contentHash, input.normalizedText ?? null, input.payloadRef ?? null, JSON.stringify(input.metadata ?? {}), input.sensitivity ?? "normal", input.retentionClass ?? "bounded", input.synthesisPipeline ?? "user_understanding", input.synthesisStatus ?? "pending", parseTimestamp(input.deletedAt), existing?.created_at ?? nowMs, nowMs);
 			const row = db.prepare(`SELECT * FROM knowledge_source_items WHERE item_id = ?`).get(id);
 			items.push(sourceItemFromRow(row));
+			replaceKnowledgeChunks(db, {
+				...sourceItemFromRow(row),
+				normalizedText: void 0
+			});
 			changedItemIds.push(id);
 			const changeKind = input.deletedAt ? "deleted" : existing ? "modified" : "added";
 			db.prepare(`INSERT INTO knowledge_source_changes (
@@ -351,6 +356,7 @@ function completeKnowledgeSourceItemSynthesis(input) {
 	});
 }
 var init_knowledge_repository = __esmMin((() => {
+	init_chunks();
 	init_transaction();
 }));
 //#endregion

package/dist/src/storage/sqlite/migrations/245_memory_learning.sql

@@ -0,0 +1,125 @@
+ALTER TABLE knowledge_items ADD COLUMN claim_mode TEXT NOT NULL DEFAULT 'observed'
+  CHECK (claim_mode IN ('explicit', 'observed', 'inferred', 'reported'));
+ALTER TABLE knowledge_items ADD COLUMN verification TEXT NOT NULL DEFAULT 'supported'
+  CHECK (verification IN ('supported', 'tentative', 'conflicted'));
+ALTER TABLE knowledge_items ADD COLUMN sensitivity TEXT NOT NULL DEFAULT 'normal'
+  CHECK (sensitivity IN ('normal', 'personal', 'secret', 'regulated'));
+ALTER TABLE user_assertion_evidence ADD COLUMN content_hash TEXT;
+CREATE TRIGGER assertion_evidence_snapshot_insert AFTER INSERT ON user_assertion_evidence BEGIN
+  UPDATE user_assertion_evidence SET content_hash = (SELECT content_hash FROM context_evidence WHERE evidence_id = NEW.evidence_id)
+    WHERE assertion_id = NEW.assertion_id AND evidence_id = NEW.evidence_id AND relation = NEW.relation;
+END;
+CREATE TRIGGER assertion_evidence_snapshot_update AFTER UPDATE OF confidence ON user_assertion_evidence BEGIN
+  UPDATE user_assertion_evidence SET content_hash = (SELECT content_hash FROM context_evidence WHERE evidence_id = NEW.evidence_id)
+    WHERE assertion_id = NEW.assertion_id AND evidence_id = NEW.evidence_id AND relation = NEW.relation;
+END;
+UPDATE knowledge_items SET claim_mode = CASE origin_class
+  WHEN 'owner' THEN 'explicit' WHEN 'untrusted' THEN 'reported' ELSE 'observed' END,
+  verification = CASE WHEN origin_class = 'untrusted' AND record_class = 'memory' THEN 'tentative' ELSE 'supported' END;
+
+CREATE TABLE knowledge_revisions (
+  revision_id TEXT PRIMARY KEY,
+  knowledge_id TEXT NOT NULL REFERENCES knowledge_items(knowledge_id) ON DELETE CASCADE,
+  content TEXT NOT NULL,
+  source_json TEXT NOT NULL,
+  created_at INTEGER NOT NULL
+);
+CREATE INDEX knowledge_revisions_item ON knowledge_revisions(knowledge_id, created_at);
+CREATE TABLE knowledge_evidence_links (
+  knowledge_id TEXT NOT NULL REFERENCES knowledge_items(knowledge_id) ON DELETE CASCADE,
+  evidence_id TEXT NOT NULL REFERENCES context_evidence(evidence_id) ON DELETE CASCADE,
+  content_hash TEXT,
+  consent_receipt_id TEXT REFERENCES understanding_consent_receipts(receipt_id),
+  PRIMARY KEY (knowledge_id, evidence_id)
+);
+CREATE TABLE owner_identity_bindings (
+  principal_id TEXT NOT NULL,
+  channel TEXT NOT NULL,
+  account_id TEXT NOT NULL,
+  peer_id TEXT NOT NULL,
+  verified_at INTEGER NOT NULL,
+  revoked_at INTEGER,
+  PRIMARY KEY (channel, account_id, peer_id)
+);
+CREATE TABLE memory_learning_jobs (
+  job_id TEXT PRIMARY KEY,
+  principal_id TEXT NOT NULL DEFAULT 'local-owner',
+  conversation_id TEXT NOT NULL REFERENCES sessions(conversation_id) ON DELETE CASCADE,
+  transcript_id TEXT NOT NULL,
+  through_seq INTEGER NOT NULL,
+  start_seq INTEGER,
+  extractor_version TEXT NOT NULL,
+  policy_hash TEXT NOT NULL,
+  workspace_id TEXT NOT NULL,
+  state TEXT NOT NULL CHECK (state IN ('queued','running','succeeded','retry_wait','failed','canceled')),
+  lease_token TEXT,
+  lease_until INTEGER,
+  attempts INTEGER NOT NULL DEFAULT 0,
+  next_attempt_at INTEGER NOT NULL,
+  error_code TEXT,
+  created_at INTEGER NOT NULL,
+  updated_at INTEGER NOT NULL,
+  UNIQUE(conversation_id, transcript_id, through_seq, extractor_version, policy_hash)
+);
+CREATE INDEX memory_learning_jobs_due ON memory_learning_jobs(state, next_attempt_at, lease_until);
+CREATE TABLE memory_source_learning_jobs (
+  job_id TEXT PRIMARY KEY,
+  chunk_id TEXT NOT NULL REFERENCES knowledge_source_chunks(chunk_id) ON DELETE CASCADE,
+  agent_id TEXT NOT NULL,
+  workspace_id TEXT NOT NULL,
+  consent_receipt_id TEXT NOT NULL REFERENCES understanding_consent_receipts(receipt_id),
+  policy_hash TEXT NOT NULL,
+  state TEXT NOT NULL CHECK(state IN ('queued','running','succeeded','retry_wait','failed','canceled')),
+  lease_token TEXT,
+  lease_until INTEGER,
+  attempts INTEGER NOT NULL DEFAULT 0,
+  next_attempt_at INTEGER NOT NULL,
+  error_code TEXT,
+  created_at INTEGER NOT NULL,
+  updated_at INTEGER NOT NULL,
+  UNIQUE(chunk_id, agent_id, consent_receipt_id, policy_hash)
+);
+CREATE INDEX memory_source_learning_due ON memory_source_learning_jobs(state, next_attempt_at, lease_until);
+CREATE TABLE memory_learning_receipts (
+  run_id TEXT PRIMARY KEY REFERENCES task_run_receipts(run_id) ON DELETE CASCADE,
+  learned_at INTEGER NOT NULL,
+  knowledge_id TEXT
+);
+CREATE TABLE memory_learning_cursors (
+  conversation_id TEXT NOT NULL REFERENCES sessions(conversation_id) ON DELETE CASCADE,
+  transcript_id TEXT NOT NULL,
+  processed_seq INTEGER NOT NULL DEFAULT 0,
+  observed_seq INTEGER NOT NULL DEFAULT 0,
+  updated_at INTEGER NOT NULL,
+  PRIMARY KEY (conversation_id, transcript_id)
+);
+CREATE TABLE knowledge_source_chunks (
+  chunk_id TEXT PRIMARY KEY,
+  source_item_id TEXT NOT NULL REFERENCES knowledge_source_items(item_id) ON DELETE CASCADE,
+  source_version TEXT NOT NULL,
+  consent_receipt_id TEXT REFERENCES understanding_consent_receipts(receipt_id),
+  ordinal INTEGER NOT NULL,
+  locator TEXT NOT NULL,
+  text TEXT NOT NULL,
+  UNIQUE(source_item_id, ordinal)
+);
+CREATE VIRTUAL TABLE knowledge_chunks_fts USING fts5(search_text, chunk_id UNINDEXED, tokenize='unicode61');
+CREATE TRIGGER knowledge_chunk_insert AFTER INSERT ON knowledge_source_chunks BEGIN
+  INSERT INTO knowledge_chunks_fts(search_text, chunk_id) VALUES (xopc_memory_search_text(NEW.text), NEW.chunk_id);
+END;
+CREATE TRIGGER knowledge_chunk_delete AFTER DELETE ON knowledge_source_chunks BEGIN
+  DELETE FROM knowledge_chunks_fts WHERE chunk_id = OLD.chunk_id;
+END;
+CREATE VIRTUAL TABLE knowledge_search_fts USING fts5(search_text, knowledge_id UNINDEXED, tokenize='unicode61');
+INSERT INTO knowledge_search_fts SELECT xopc_memory_search_text(content), knowledge_id FROM knowledge_items;
+DROP TABLE knowledge_items_fts;
+CREATE TRIGGER knowledge_search_insert AFTER INSERT ON knowledge_items BEGIN
+  INSERT INTO knowledge_search_fts VALUES (xopc_memory_search_text(NEW.content), NEW.knowledge_id);
+END;
+CREATE TRIGGER knowledge_search_update AFTER UPDATE OF content ON knowledge_items BEGIN
+  DELETE FROM knowledge_search_fts WHERE knowledge_id = OLD.knowledge_id;
+  INSERT INTO knowledge_search_fts VALUES (xopc_memory_search_text(NEW.content), NEW.knowledge_id);
+END;
+CREATE TRIGGER knowledge_search_delete AFTER DELETE ON knowledge_items BEGIN
+  DELETE FROM knowledge_search_fts WHERE knowledge_id = OLD.knowledge_id;
+END;

package/dist/src/storage/sqlite/migrations/runner.d.ts

@@ -3,7 +3,7 @@ import type { ApplyMigrationsOptions } from './types.js';
 /** Baseline schema version applied from schema.sql on first open. */
 export declare const XOPC_DB_BASELINE_SCHEMA_VERSION = 165;
 /** Latest schema version this release supports (increment when adding migrations). */
-export declare const XOPC_DB_SCHEMA_VERSION = 244;
+export declare const XOPC_DB_SCHEMA_VERSION = 245;
 export declare function resolveMigrationsDir(override?: string): string;
 /**
  * Apply sequential SQL migrations from (currentVersion + 1) through targetVersion.

package/dist/src/storage/sqlite/migrations/runner.js

@@ -1,5 +1,6 @@
 import { __esmMin } from "../../../../_virtual/_rolldown/runtime.js";
 import { init_sql_assets, resolveSqliteAssetPath } from "../sql-assets.js";
+import { init_search_text, memorySearchText } from "../../../knowledge-memory/search-text.js";
 import { createLogger } from "../../../utils/logger/index.js";
 import { init_logger } from "../../../utils/logger.js";
 import { currentOperationId, init_operation_context } from "../../../infra/operation-context.js";
@@ -56,8 +57,9 @@ function applySingleMigration(db, migration, discardOldScenes = false) {
 * Each step runs in its own transaction and updates schema_meta on success.
 */
 function applyPendingMigrations(db, options = {}) {
+	db.function("xopc_memory_search_text", { deterministic: true }, (value) => memorySearchText(String(value ?? "")));
 	db.function("xopc_operation_id", () => currentOperationId() ?? null);
-	const targetVersion = options.targetVersion ?? 244;
+	const targetVersion = options.targetVersion ?? 245;
 	let currentVersion = readSchemaVersion(db);
 	if (currentVersion > targetVersion) throw new DatabaseSchemaTooNewError(currentVersion, targetVersion);
 	if (!options.migrationsDir && currentVersion < 165) throw new DatabaseSchemaTooOldError(currentVersion, 165);
@@ -95,7 +97,7 @@ function applyPendingMigrations(db, options = {}) {
 }
 /** Inspect schema version without mutating the database. */
 function inspectSchemaMigrationStatus(db, options = {}) {
-	const appVersion = options.targetVersion ?? 244;
+	const appVersion = options.targetVersion ?? 245;
 	const dbVersion = readSchemaVersion(db);
 	if (dbVersion > appVersion) return {
 		dbVersion,
@@ -126,6 +128,7 @@ function inspectSchemaMigrationStatus(db, options = {}) {
 }
 var log, XOPC_DB_BASELINE_SCHEMA_VERSION, XOPC_DB_SCHEMA_VERSION;
 var init_runner = __esmMin((() => {
+	init_search_text();
 	init_logger();
 	init_operation_context();
 	init_schema_version();
@@ -137,7 +140,7 @@ var init_runner = __esmMin((() => {
 	init_errors();
 	log = createLogger("Sqlite:Migrations");
 	XOPC_DB_BASELINE_SCHEMA_VERSION = 165;
-	XOPC_DB_SCHEMA_VERSION = 244;
+	XOPC_DB_SCHEMA_VERSION = 245;
 }));
 //#endregion
 init_runner();

package/dist/src/storage/sqlite/schema.js

@@ -28,7 +28,7 @@ function ensureXopcDatabaseSchema(db, options = {}) {
 		currentVersion = 165;
 	}
 	applyPendingMigrations(db, {
-		targetVersion: 244,
+		targetVersion: 245,
 		databasePath: fresh ? void 0 : options.databasePath
 	});
 }

package/dist/src/tasks/task-main-update-decision-service.js

@@ -1,9 +1,9 @@
 import { TaskRepository, init_task_repository } from "./task-repository.js";
 import { TaskRunRepository, init_task_run_repository } from "./task-run-repository.js";
 import { init_providers, resolveModel } from "../providers/index.js";
-import { getPersonalAgentByConversation } from "../personal-agent/repository.js";
 import { completeWithResolvedCredentials } from "../providers/model-call.js";
 import { extractAssistantText, getAssistantMessageErrorReason, stripCodeFences } from "../providers/model-response.js";
+import { getPersonalAgentByConversation } from "../personal-agent/repository.js";
 import { TaskCollaborationRepository } from "./task-collaboration-repository.js";
 //#region src/tasks/task-main-update-decision-service.ts
 init_providers();

package/dist/src/tui/backends/embedded-backend.js

@@ -11,10 +11,11 @@ import { init_sqlite } from "../../storage/sqlite/index.js";
 import { normalizeAgentId } from "../../agent-catalog/id.js";
 import { init_agent_scope, listAgentEntries } from "../../agent/agent-scope.js";
 import { AgentCatalogService } from "../../agent-catalog/service.js";
-import { init_paths } from "../../config/paths.js";
-import { getAgentDefaultModelRef, init_schema } from "../../config/schema.js";
 import { init_agent_session_key, resolveAgentIdFromConversationId } from "../../routing/agent-session-key.js";
 import { resolveEffectiveAgentProfile } from "../../config/agent-profile.js";
+import { getAgentDefaultModelRef, init_schema } from "../../config/schema.js";
+import { init_paths } from "../../config/paths.js";
+import { getWorkspacePath } from "../../config/workspace-path-helpers.js";
 import { effectiveWorkspacePathForSession } from "../../session/session-workspace.js";
 import { ProjectService } from "../../projects/project-service.js";
 import { inferSuggestedProjectDefaultAgentId } from "../../projects/project-agent-suggestion.js";
@@ -31,7 +32,6 @@ import { buildReviewContext, resolveGitRoot } from "../../review/review-git.js";
 import { MessageBus, MessageBusShutdownError } from "../../infra/bus/queue.js";
 import "../../infra/bus/index.js";
 import { prependEnvelopeTimestamp } from "../../channels/envelope-timestamp.js";
-import { getWorkspacePath } from "../../config/workspace-path-helpers.js";
 import "../../config/index.js";
 import { buildWorkflowChildTools } from "../../agent/workflow/workflow-child-tools.js";
 import { WorkflowRunService } from "../../workflows/service/workflow-run-service.js";

package/dist/src/tui/extension-host/load-extensions.js

@@ -1,9 +1,9 @@
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
 import { init_paths, resolveExtensionsDir } from "../../config/paths.js";
+import { getWorkspacePath } from "../../config/workspace-path-helpers.js";
 import { ExtensionLoader } from "../../extensions/loader.js";
 import { loadConfig } from "../../config/loader.js";
-import { getWorkspacePath } from "../../config/workspace-path-helpers.js";
 import "../../config/index.js";
 //#region src/tui/extension-host/load-extensions.ts
 init_paths();

package/dist/src/tui/tui-commands.js

@@ -2,8 +2,8 @@ import { closeXopcDatabase, isXopcDatabaseOpen, openXopcDatabase } from "../stor
 import { TaskRepository } from "../tasks/task-repository.js";
 import { getSessionMetadata } from "../storage/sqlite/session-read-repository.js";
 import { init_sqlite } from "../storage/sqlite/index.js";
-import { resolveConfigPath } from "../config/paths.js";
 import { init_agent_session_key, isValidAgentId, normalizeAgentId } from "../routing/agent-session-key.js";
+import { resolveConfigPath } from "../config/paths.js";
 import { init_providers, providerSupportsOAuth } from "../providers/index.js";
 import { ProjectService } from "../projects/project-service.js";
 import { isValidProjectAgentId, normalizeProjectAgentId } from "../projects/project-agent.js";

package/dist/src/tui/tui-skills-autocomplete.js

@@ -1,8 +1,8 @@
 import { resolveStateDir } from "../config/paths-state.js";
 import { init_paths, resolveBundledSkillsDir } from "../config/paths.js";
+import { getWorkspacePath } from "../config/workspace-path-helpers.js";
 import { loadSkills } from "../agent/skills/index.js";
 import { loadConfig } from "../config/loader.js";
-import { getWorkspacePath } from "../config/workspace-path-helpers.js";
 import "../config/index.js";
 //#region src/tui/tui-skills-autocomplete.ts
 init_paths();

package/dist/src/tui/tui-startup-resources.js

@@ -1,12 +1,12 @@
 import { resolveStateDir } from "../config/paths-state.js";
-import { init_paths, resolveAgentProfileDir, resolveBundledSkillsDir } from "../config/paths.js";
 import { resolveEffectiveAgentProfile, resolveEffectiveAgentProfileForSession } from "../config/agent-profile.js";
+import { init_paths, resolveAgentProfileDir, resolveBundledSkillsDir } from "../config/paths.js";
+import { getWorkspacePath } from "../config/workspace-path-helpers.js";
 import { resolveBootstrapFilesSync } from "../agent/bootstrap/bootstrap-files.js";
 import { listConnectorInstances } from "../connectors/instances.js";
 import { createSkillConfigManager, isSkillEnabled } from "../agent/skills/config.js";
 import { loadSkills } from "../agent/skills/index.js";
 import { createWorkflowCatalog } from "../agent/workflow/catalog.js";
-import { getWorkspacePath } from "../config/workspace-path-helpers.js";
 import "../config/index.js";
 import { basename } from "node:path";
 //#region src/tui/tui-startup-resources.ts

package/dist/src/tui/tui.js

@@ -1,8 +1,8 @@
 import { version } from "../../package.js";
 import { resolveStateDir, resolveXopcDatabasePath } from "../config/paths-state.js";
-import { init_paths } from "../config/paths.js";
 import { init_agent_session_key, normalizeAgentId } from "../routing/agent-session-key.js";
 import { resolveEffectiveAgentProfile } from "../config/agent-profile.js";
+import { init_paths } from "../config/paths.js";
 import { getAllModels, getAllProviders, getApiKey, init_providers, isProviderConfiguredSync } from "../providers/index.js";
 import { isTerminalWorkflowRunStatus } from "../workflows/domain/run.js";
 import "../workflows/domain/index.js";

package/dist/src/user-context/access-policy.js

@@ -1,4 +1,5 @@
 import { getSessionConfig, init_config_repository } from "../storage/sqlite/config-repository.js";
+import { isOwnerIdentity } from "./identity-bindings.js";
 import { init_config, resolveKnowledgeReadPolicy } from "./config.js";
 import { getConversationRouting } from "../storage/sqlite/conversation-repository.js";
 import { init_session_key } from "../routing/session-key.js";
@@ -20,7 +21,7 @@ function resolveUserContextSessionAccess(config, conversationId) {
 	};
 	const session = getConversationRouting(conversationId);
 	const mode = getSessionConfig(conversationId)?.userContextMode ?? "enabled";
-	const enabled = Boolean(config.userContext.enabled && session?.peerKind === "direct" && mode === "enabled");
+	const enabled = Boolean(config.userContext.enabled && session?.peerKind === "direct" && isOwnerIdentity(session) && mode === "enabled");
 	return {
 		enabled,
 		userModel: enabled && config.userContext.userModel.enabled,