@xopcai/xopc 0.0.385 → 0.0.386

package/dist/src/personal-agent/reply-style.d.ts

@@ -1,4 +1,4 @@
 export declare const PREVIOUS_PERSONAL_REPLY_STYLE_RULES: readonly ["Make the first sentence useful on its own. When you can answer, lead with the answer or the most relevant judgment and then explain. When checking or delegating is necessary, give one specific sentence of intent and proceed immediately; never present an unverified finding or an unconfirmed action as fact. In an emotional conversation, respond to the specific feeling naturally instead of adding a task-style acknowledgement.", "Use natural paragraphs, usually one to three sentences about one idea, separated by a blank line. A simple question may need only one sentence. Do not stretch the opening into a heading, checklist, restatement of the request, or generic reassurance. Respect requests for exact text, code, tables, full lists, and a different structure. Do not repeat an earlier acknowledgement in the final result or manufacture progress updates just to keep talking.", "Understand the user’s last words and what the result means for them before replying. Speak as the same familiar personal assistant throughout the conversation, rather than forwarding an execution report. A natural brief opening is welcome when it connects to what they said; do not mechanically add a greeting, name, reassurance, joke, or question.", "Use a conversational rhythm and concrete language. Start with what the user most needs now, then give enough explanation or detail to use the answer. Do not default to “Task completed”, “Here is the summary”, headings, or checklists. Use lists and tables when they genuinely make the requested information easier to use."];
 export declare const PREVIOUS_PERSONAL_REPLY_EXAMPLES = "Examples of presentation, only when the evidence supports the facts:\nReport: \u201CQuery complete. Scanned 28 emails and found 3 important items.\u201D\nConversation: \u201CThree emails are worth looking at first. The contract confirmation is the most urgent: they need your reply today. I\u2019ve included the other two below.\u201D\nReport: \u201CTask failed: connector authorization expired.\u201D\nConversation: \u201CI couldn\u2019t finish checking the remaining emails because the connection expired. The results already retrieved are below; reconnecting will let us check the rest.\u201D\nThese are examples of rhythm, not facts or fixed templates. Match the user\u2019s language and preferences.";
-export declare const PERSONAL_REPLY_STYLE_RULES: readonly ["Respond to what the user is saying now as the same attentive personal assistant. Begin with a natural sentence suited to the exchange: answer a question, share a relevant observation in casual conversation, acknowledge a feeling when it matters, or state a concrete intent before necessary work. Start speaking as soon as you have something useful and grounded to say; never invent a finding or claim an unconfirmed action to produce an early opening.", "Use flowing, short paragraphs for ordinary conversation, usually one to three sentences about one idea. A useful opening does not need a label or bold summary line. Reserve introductory labels such as “结论：”, “总结：”, “Conclusion:” and report-style headings or numbered recaps for a requested summary, report, comparison, or other structure that helps the user. Answer a narrow follow-up at its scope instead of repeating the whole earlier answer.", "Interpret short replies in the previous exchange. “嗯”, “K”, or “好的” can simply acknowledge what was said; do not automatically treat them as a request for more information, a new task, or cancellation. When the user accepts a clear offer to continue, pick up that topic. Ask one concise question only when context cannot resolve ambiguity that matters to the answer or an action; do not guess consequential authorization. Follow an explicit request to stop.", "Keep warmth and conversational rhythm specific to the moment. Vary openings naturally; a greeting, name, reassurance, joke, or follow-up question is optional, never a required wrapper. Do not repeat an acknowledgement in the final result or manufacture routine progress updates. Respect the user’s requested tone, detail, exact text, code, tables, and lists.", "Synthesis means understanding and organizing, not always shortening. Preserve requested lists, exact text, code, translations, limitations, and partial failures. Never make an uncertain result sound confirmed just to keep the reply smooth.", "Answer the question directly by default without appending a source list. Provide sources when the user asks for citations, verification, or original material. Otherwise include only a few links when they are necessary to use or understand the answer, with meaningful titles near the relevant findings. Keep material uncertainty and verification gaps visible even when omitting source links."];
+export declare const PERSONAL_REPLY_STYLE_RULES: readonly ["Be concise by default: usually one short paragraph of one to three sentences, or a few brief items when necessary. Give the useful conclusion, material limitations, and only the context needed to act. Do not repeat the request, acknowledgements, report contents, execution steps, or an unnecessary closing offer. A narrow follow-up needs a narrow answer. Explicit requests for detail, complete reports, exact text, code, or lists take precedence; never omit required facts or uncertainty just to shorten the reply.", "Respond to what the user is saying now as the same attentive personal assistant. Begin with a natural sentence suited to the exchange: answer a question, share a relevant observation in casual conversation, acknowledge a feeling when it matters, or state a concrete intent before necessary work. Start speaking as soon as you have something useful and grounded to say; never invent a finding or claim an unconfirmed action to produce an early opening.", "Use flowing, short paragraphs for ordinary conversation, usually one to three sentences about one idea. A useful opening does not need a label or bold summary line. Reserve introductory labels such as “结论：”, “总结：”, “Conclusion:” and report-style headings or numbered recaps for a requested summary, report, comparison, or other structure that helps the user. Answer a narrow follow-up at its scope instead of repeating the whole earlier answer.", "Interpret short replies in the previous exchange. “嗯”, “K”, or “好的” can simply acknowledge what was said; do not automatically treat them as a request for more information, a new task, or cancellation. When the user accepts a clear offer to continue, pick up that topic. Ask one concise question only when context cannot resolve ambiguity that matters to the answer or an action; do not guess consequential authorization. Follow an explicit request to stop.", "Keep warmth and conversational rhythm specific to the moment. Vary openings naturally; a greeting, name, reassurance, joke, or follow-up question is optional, never a required wrapper. Do not repeat an acknowledgement in the final result or manufacture routine progress updates. Respect the user’s requested tone, detail, exact text, code, tables, and lists.", "Synthesis means understanding and organizing, not always shortening. Preserve requested lists, exact text, code, translations, limitations, and partial failures. Never make an uncertain result sound confirmed just to keep the reply smooth.", "Answer the question directly by default without appending a source list. Provide sources when the user asks for citations, verification, or original material. Otherwise include only a few links when they are necessary to use or understand the answer, with meaningful titles near the relevant findings. Keep material uncertainty and verification gaps visible even when omitting source links."];
 export declare const PERSONAL_REPLY_EXAMPLES = "Conversation examples with hypothetical facts, only to demonstrate rhythm. Use the current language, evidence, and preferences; do not copy their facts or wording into another request.\n<examples>\n<example>\nContext: The user wants to chat about a verified news item concerning AI avatars and a popular human discussion forum.\nUser: \u7EE7\u7EED\u804A\u4E00\u804A AI \u76F8\u5173\u7684\u65B0\u95FB\u3002\nAssistant: AI \u5206\u8EAB\u90A3\u6761\u633A\u6709\u610F\u601D\uFF1A\u5927\u5BB6\u82B1\u94B1\u4F53\u9A8C\u865A\u62DF\u8001\u5E08\uFF0C\u6700\u540E\u6700\u7231\u7528\u7684\u5374\u662F\u540C\u5B66\u8BBA\u575B\u3002\u6280\u672F\u8D8A\u60F3\u590D\u523B\u4EBA\uFF0C\u8FD9\u4EF6\u4E8B\u53CD\u800C\u8D8A\u663E\u51FA\u771F\u4EBA\u4EA4\u6D41\u7684\u4EF7\u503C\u3002\n</example>\n<example>\nContext: The supplied records show publication dates of October 10\u201312 and one reference dated October 7.\nUser: \u8FD9\u4E9B\u65B0\u95FB\u4EC0\u4E48\u65F6\u5019\u7684\uFF1F\nAssistant: \u4E3B\u8981\u662F 10 \u6708 10\u201312 \u65E5\u7684\u62A5\u9053\u3002\u5176\u4E2D\u4E00\u6761\u5F15\u7528\u4E86 10 \u6708 7 \u65E5\u7684\u8D44\u6599\uFF0C\u62A5\u9053\u65E5\u671F\u548C\u539F\u59CB\u8D44\u6599\u7684\u65E5\u671F\u8981\u5206\u5F00\u770B\u3002\n</example>\n<example>\nContext: The assistant has finished answering; there is no pending question or requested continuation.\nUser: K.\nAssistant: \u55EF\u3002\n</example>\n<example>\nContext: The assistant offered to discuss why the human forum in the AI-avatar news item was popular; the user accepts that offer.\nUser: \u7EE7\u7EED\u3002\nAssistant: \u521A\u624D\u8BF4\u7684\u540C\u5B66\u8BBA\u575B\uFF0C\u5438\u5F15\u4EBA\u7684\u53EF\u80FD\u5C31\u662F\u80FD\u78B0\u5230\u6709\u76F8\u4F3C\u56F0\u60D1\u7684\u4EBA\u3002\u9664\u4E86\u62FF\u5230\u7B54\u6848\uFF0C\u5927\u5BB6\u4E5F\u60F3\u542C\u542C\u522B\u4EBA\u662F\u600E\u4E48\u8D70\u8FC7\u6765\u7684\u3002\n</example>\n<example>\nContext: Several recipients were discussed, and the recipient of an external message is unresolved.\nUser: \u53D1\u7ED9\u4ED6\u3002\nAssistant: \u4F60\u6307\u7684\u662F\u521A\u624D\u63D0\u5230\u7684\u54EA\u4E00\u4F4D\uFF1F\n</example>\n<example>\nUser: \u5148\u522B\u8BB2\u4E86\u3002\nAssistant: \u597D\uFF0C\u5148\u505C\u5728\u8FD9\u513F\u3002\n</example>\n<example>\nContext: A hypothetical report establishes reduced waiting, configurable preferences, and an outstanding need for real-conversation evaluation.\nUser: \u5E2E\u6211\u603B\u7ED3\u6210\u4E09\u70B9\u3002\nAssistant: 1. \u9996\u53E5\u7B49\u5F85\u7F29\u77ED\u4E86\u3002\n2. \u7528\u6237\u4ECD\u80FD\u8C03\u6574\u8868\u8FBE\u504F\u597D\u3002\n3. \u81EA\u7136\u5EA6\u8FD8\u9700\u8981\u771F\u5B9E\u5BF9\u8BDD\u9A8C\u8BC1\u3002\n</example>\n<example>\nContext: Some requested email results were retrieved, but authorization expired before the remaining items could be checked.\nAssistant: \u5DF2\u7ECF\u67E5\u5230\u7684\u51E0\u5C01\u90AE\u4EF6\u5728\u4E0B\u9762\u3002\u5269\u4E0B\u7684\u6682\u65F6\u6CA1\u67E5\u5B8C\uFF0C\u56E0\u4E3A\u8FDE\u63A5\u8FC7\u671F\u4E86\uFF1B\u91CD\u65B0\u8FDE\u63A5\u540E\u624D\u80FD\u63A5\u7740\u770B\u3002\n</example>\n</examples>";

package/dist/src/personal-agent/reply-style.js

@@ -12,6 +12,7 @@ Report: “Task failed: connector authorization expired.”
 Conversation: “I couldn’t finish checking the remaining emails because the connection expired. The results already retrieved are below; reconnecting will let us check the rest.”
 These are examples of rhythm, not facts or fixed templates. Match the user’s language and preferences.`;
 const PERSONAL_REPLY_STYLE_RULES = [
+	"Be concise by default: usually one short paragraph of one to three sentences, or a few brief items when necessary. Give the useful conclusion, material limitations, and only the context needed to act. Do not repeat the request, acknowledgements, report contents, execution steps, or an unnecessary closing offer. A narrow follow-up needs a narrow answer. Explicit requests for detail, complete reports, exact text, code, or lists take precedence; never omit required facts or uncertainty just to shorten the reply.",
 	"Respond to what the user is saying now as the same attentive personal assistant. Begin with a natural sentence suited to the exchange: answer a question, share a relevant observation in casual conversation, acknowledge a feeling when it matters, or state a concrete intent before necessary work. Start speaking as soon as you have something useful and grounded to say; never invent a finding or claim an unconfirmed action to produce an early opening.",
 	"Use flowing, short paragraphs for ordinary conversation, usually one to three sentences about one idea. A useful opening does not need a label or bold summary line. Reserve introductory labels such as “结论：”, “总结：”, “Conclusion:” and report-style headings or numbered recaps for a requested summary, report, comparison, or other structure that helps the user. Answer a narrow follow-up at its scope instead of repeating the whole earlier answer.",
 	"Interpret short replies in the previous exchange. “嗯”, “K”, or “好的” can simply acknowledge what was said; do not automatically treat them as a request for more information, a new task, or cancellation. When the user accepts a clear offer to continue, pick up that topic. Ask one concise question only when context cannot resolve ambiguity that matters to the answer or an action; do not guess consequential authorization. Follow an explicit request to stop.",

package/dist/src/personal-agent/repository.d.ts

@@ -24,7 +24,7 @@ export declare const DEFAULT_PERSONAL_PREFERENCES: {
     readonly warmth: "balanced";
     readonly humor: "occasional";
     readonly supportMode: "untangle";
-    readonly detailLevel: "balanced";
+    readonly detailLevel: "brief";
     readonly proactivity: "decisions";
 };
 export declare function personalAgentId(ownerId: string): string;

package/dist/src/personal-agent/repository.js

@@ -13,7 +13,7 @@ const DEFAULT_PERSONAL_PREFERENCES = {
 	warmth: "balanced",
 	humor: "occasional",
 	supportMode: "untangle",
-	detailLevel: "balanced",
+	detailLevel: "brief",
 	proactivity: "decisions"
 };
 function personalAgentId(ownerId) {

package/dist/src/personal-agent/request-repository.d.ts

@@ -12,6 +12,8 @@ export interface PersonalRequest {
     parameters: {
         brief?: string;
         allocate?: boolean;
+        taskRunId?: string;
+        cancellationCleanupCompleted?: boolean;
         timeRange?: {
             from: string;
             to: string;

package/dist/src/personal-agent/request-service.d.ts

@@ -17,5 +17,9 @@ export declare function resolvePersonalRequestConnection(wait: ConnectionWait, r
 /** A worker can request access recovery without requiring a new main-chat turn. */
 export declare function requirePersonalWorkerConnection(conversationId: string): PersonalRequest;
 export declare function personalRequestSnapshot(request: PersonalRequest): PersonalRequest;
+/** Dispatch only the request's bound execution; SDK acknowledgement must not block input. */
+export declare function stopPersonalRequestExecution(request: PersonalRequest): {
+    executionStopConfirmed: boolean;
+};
 export declare function cancelPersonalRequest(request: PersonalRequest): PersonalRequest;
 export declare function publishPersonalRequest(request: PersonalRequest): void;

package/dist/src/personal-agent/request-service.js

@@ -1,3 +1,5 @@
+import { createLogger } from "../utils/logger/index.js";
+import { init_logger } from "../utils/logger.js";
 import { getSqliteDatabase, init_transaction, runSqliteWriteTransaction } from "../storage/sqlite/transaction.js";
 import { TaskCreateRequestSchema } from "../../packages/gateway-contract/src/tasks.js";
 import { init_src } from "../../packages/gateway-contract/src/index.js";
@@ -15,12 +17,13 @@ import { canAccessConnectorAccount } from "../connectors/account-access.js";
 import { connectorPrincipalForSession } from "../connectors/principal.js";
 import { resolveConnectionCandidate } from "../connectors/connection-candidates.js";
 import { TaskCollaborationRepository } from "../tasks/task-collaboration-repository.js";
-import { TaskApplicationService } from "../tasks/task-application-service.js";
 import { defineTaskContract } from "../tasks/task-contract-definition.js";
+import { abortEmbeddedRun } from "../agent/embedded/runs.js";
+import { TaskApplicationService } from "../tasks/task-application-service.js";
+import { PERSONAL_WORKER_RESULT_GUIDANCE } from "./communication.js";
 import { assessSpecialist } from "../agent-matching/service.js";
 import { AgentSelectionRepository, selectionRequestHash } from "../agent-matching/selection-repository.js";
 import { assertSpecialistEligible } from "../agent-matching/delegation-service.js";
-import { PERSONAL_WORKER_RESULT_GUIDANCE } from "./communication.js";
 import { personalCapabilities } from "./capability-service.js";
 import { createHash, randomUUID } from "node:crypto";
 //#region src/personal-agent/request-service.ts
@@ -34,6 +37,9 @@ init_task_repository();
 init_task_run_repository();
 init_connector_account_repository();
 init_connector_repository();
+init_logger();
+const log = createLogger("PersonalRequest");
+const pendingStops = /* @__PURE__ */ new Set();
 function requestAssessment(request, accountId) {
 	const principal = connectorPrincipalForSession(request.conversationId);
 	const capability = personalCapabilities(request.conversationId, request.connectorId, accountId).find((item) => item.connectorId === request.connectorId);
@@ -294,7 +300,11 @@ function startPersonalRequest(request, accountId) {
 	return updatePersonalRequest(request, {
 		state: result.ok ? "queued" : "failed",
 		accountId,
-		taskId
+		taskId,
+		parameters: {
+			...request.parameters,
+			taskRunId: result.ok ? result.runId : void 0
+		}
 	});
 }
 /** Called inside the connection-resolution transaction; ordinary waits return undefined. */
@@ -407,7 +417,11 @@ function requirePersonalWorkerConnection(conversationId) {
 		});
 		return updatePersonalRequest(request, {
 			state: "waiting_connection",
-			connectionWaitId: result.waitId
+			connectionWaitId: result.waitId,
+			parameters: {
+				...request.parameters,
+				taskRunId: run.id
+			}
 		});
 	});
 }
@@ -420,16 +434,58 @@ function personalRequestSnapshot(request) {
 		state
 	};
 }
-function cancelPersonalRequestTask(request) {
+function personalRequestRunId(request) {
+	if (request.parameters.taskRunId) return request.parameters.taskRunId;
+	if (request.connectionWaitId) {
+		const wait = getSqliteDatabase().prepare(`SELECT task_run_id FROM task_waits
+      WHERE task_id = ? AND json_extract(condition_json, '$.connectionWaitId') = ? LIMIT 1`).get(request.taskId ?? null, request.connectionWaitId);
+		if (wait?.task_run_id) return wait.task_run_id;
+	}
+	const selected = new AgentSelectionRepository().find(request.conversationId, `personal-request-start:${request.requestId}`)?.taskRunId;
+	if (selected) return selected;
+	return (request.taskId ? getSqliteDatabase().prepare(`SELECT run_id FROM task_runs
+    WHERE task_id = ? AND parent_run_id IS NULL ORDER BY queued_at, rowid LIMIT 1`).get(request.taskId) : void 0)?.run_id;
+}
+/** Dispatch only the request's bound execution; SDK acknowledgement must not block input. */
+function stopPersonalRequestExecution(request) {
+	if (request.state !== "cancelled") return { executionStopConfirmed: false };
+	const runId = personalRequestRunId(request);
+	const run = runId ? new TaskRunRepository().get(runId) : void 0;
+	if (!run || !run.conversationId && !run.startedAt) return { executionStopConfirmed: true };
+	if (run.conversationId) {
+		const state = getSessionInputState(run.conversationId);
+		const input = state.activeInputId ? getSessionInputById(run.conversationId, state.activeInputId) : void 0;
+		if (state.activeRunId && input?.taskRunId === run.id && !pendingStops.has(state.activeRunId)) {
+			const executionId = state.activeRunId;
+			pendingStops.add(executionId);
+			abortEmbeddedRun(run.conversationId, "user_cancelled", executionId).catch((err) => {
+				log.warn({
+					err,
+					requestId: request.requestId,
+					runId,
+					executionId
+				}, "Request cancelled; execution stop was not confirmed");
+			}).finally(() => {
+				pendingStops.delete(executionId);
+			});
+		}
+	}
+	return { executionStopConfirmed: false };
+}
+function cancelPersonalRequestTask(request, runId = personalRequestRunId(request)) {
 	if (!request.taskId) return;
 	const runs = new TaskRunRepository();
-	const run = runs.getActiveRoot(request.taskId);
+	const run = runId ? runs.get(runId) : void 0;
 	if (!run) return;
-	for (const wait of runs.listActiveWaits(request.taskId)) if (wait.condition.connectionWaitId === request.connectionWaitId) runs.resolveWait({
-		waitId: wait.id,
-		actor: { kind: "user" },
-		resolution: { cancelled: true }
-	});
+	if (![
+		"queued",
+		"running",
+		"waiting",
+		"verifying",
+		"cancelled"
+	].includes(run.status)) return;
+	runs.resolveCancelledRunWaits(run.id, { kind: "user" });
+	if (run.status === "cancelled") return;
 	if (!new TaskApplicationService().completeRun({
 		runId: run.id,
 		expectedRunVersion: run.version,
@@ -452,12 +508,17 @@ function cancelPersonalRequestTask(request) {
 	}).ok) throw new Error("Task changed while cancelling");
 }
 function cancelPersonalRequest(request) {
-	const snapshot = personalRequestSnapshot(request);
-	if (request.state === "cancelled" || ["completed", "failed"].includes(snapshot.state)) return snapshot;
-	return runSqliteWriteTransaction(() => {
-		if (request.connectionWaitId) cancelConnectionObjective(request.conversationId);
-		cancelPersonalRequestTask(request);
-		if (request.taskId) {
+	const cancelled = runSqliteWriteTransaction(() => {
+		request = getPersonalRequest(request.requestId);
+		if (request.parameters.cancellationCleanupCompleted) return request;
+		const snapshot = personalRequestSnapshot(request);
+		if (["completed", "failed"].includes(snapshot.state)) return snapshot;
+		const active = request.taskId ? new TaskRunRepository().getActiveRoot(request.taskId) : void 0;
+		const runId = personalRequestRunId(request);
+		const replacementRun = active && runId && active.id !== runId;
+		if (request.connectionWaitId) cancelConnectionObjective(request.conversationId, request.connectionWaitId);
+		cancelPersonalRequestTask(request, runId);
+		if (request.taskId && !replacementRun) {
 			const task = new TaskRepository().require(request.taskId);
 			if (task.phase !== "closed") new TaskApplicationService().execute({
 				taskId: task.id,
@@ -471,11 +532,21 @@ function cancelPersonalRequest(request) {
 			});
 			getSqliteDatabase().prepare("UPDATE task_allocations SET status = 'cancelled', lease_token = NULL WHERE task_id = ?").run(request.taskId);
 		}
-		return updatePersonalRequest(getPersonalRequest(request.requestId), { state: "cancelled" });
+		const current = getPersonalRequest(request.requestId);
+		return updatePersonalRequest(current, {
+			state: "cancelled",
+			parameters: {
+				...current.parameters,
+				taskRunId: runId,
+				cancellationCleanupCompleted: true
+			}
+		});
 	});
+	stopPersonalRequestExecution(cancelled);
+	return cancelled;
 }
 function publishPersonalRequest(request) {
 	publishConnectionWait(request.conversationId);
 }
 //#endregion
-export { assertPersonalRequestTimeRange, cancelPersonalRequest, personalRequestSnapshot, publishPersonalRequest, requirePersonalWorkerConnection, resolvePersonalRequestConnection, submitPersonalRequest };
+export { assertPersonalRequestTimeRange, cancelPersonalRequest, personalRequestSnapshot, publishPersonalRequest, requirePersonalWorkerConnection, resolvePersonalRequestConnection, stopPersonalRequestExecution, submitPersonalRequest };

package/dist/src/personal-agent/result-file-links.d.ts

@@ -0,0 +1,3 @@
+/** Preserve literal code; remove actionable local file references from prose. */
+export declare function sanitizePersonalResultFileLinks(text: string): string;
+export declare function hasPersonalResultFileLinks(text: string): boolean;

package/dist/src/personal-agent/result-file-links.js

@@ -0,0 +1,21 @@
+//#region src/personal-agent/result-file-links.ts
+/** File delivery belongs to structured artifacts, not model-authored host links. */
+function localTarget(value) {
+	let target = value.trim().replace(/^<|>$/g, "").replace(/\\([\\/])/g, "$1");
+	try {
+		target = decodeURIComponent(target);
+	} catch {}
+	return /^(?:\/|\\\\|~\/|\.\.?\/|[a-z]:[\\/]|file:|media:|xopc:\/\/workspace\/file)/i.test(target) || /^[^\s:?#]+\.(?:md|pdf|docx?|xlsx?|csv|pptx?|zip|png|jpe?g|webp|mp[34]|wav)(?:[?#].*)?$/i.test(target);
+}
+function cleanSegment(text) {
+	return text.replace(/^\s*MEDIA\s*:\s*.*$/gim, "").replace(/!?\[([^\]\n]*)\]\(\s*(<[^>]+>|[^\s)]+)(?:\s+["'][^\n]*?["'])?\s*\)/g, (match, label, target) => localTarget(target) ? label : match).replace(/^\s*\[[^\]\n]+\]:\s*(<[^>]+>|\S+).*$/gm, (match, target) => localTarget(target) ? "" : match).replace(/<([^<>\n]+)>/g, (match, target) => localTarget(target) ? "" : match).replace(/\b(?:file:\/\/|media:\/\/|xopc:\/\/workspace\/file)[^\s<>"'`]+/gi, "").replace(/(?<![\w:/])(?:\/(?:Users|home|tmp|private|workspace|var)\/|[a-z]:[\\/])[^\s<>"'`]+/gi, "");
+}
+/** Preserve literal code; remove actionable local file references from prose. */
+function sanitizePersonalResultFileLinks(text) {
+	return text.split(/(```[\s\S]*?```|~~~[\s\S]*?~~~|`[^`\n]+`)/g).map((part, index) => index % 2 ? part : cleanSegment(part)).join("").trim();
+}
+function hasPersonalResultFileLinks(text) {
+	return sanitizePersonalResultFileLinks(text) !== text.trim();
+}
+//#endregion
+export { hasPersonalResultFileLinks, sanitizePersonalResultFileLinks };

package/dist/src/personal-agent/task-cancel.js

@@ -1,49 +1,36 @@
+import { createLogger } from "../utils/logger/index.js";
+import { init_logger } from "../utils/logger.js";
 import { getSqliteDatabase, init_transaction, runSqliteWriteTransaction } from "../storage/sqlite/transaction.js";
+import { getSessionInputById, getSessionInputState, init_session_input_repository } from "../storage/sqlite/session-input-repository.js";
 import { TaskRepository, init_task_repository } from "../tasks/task-repository.js";
 import { TaskRunRepository, init_task_run_repository } from "../tasks/task-run-repository.js";
 import { TaskAllocationRepository } from "../tasks/task-allocation-repository.js";
 import { TaskOriginRepository } from "../tasks/task-origin-repository.js";
-import { abortEmbeddedRun } from "../agent/embedded/runs.js";
+import { abortEmbeddedRun, getEmbeddedRunByConversationId } from "../agent/embedded/runs.js";
 import { TaskApplicationService } from "../tasks/task-application-service.js";
 //#region src/personal-agent/task-cancel.ts
 init_transaction();
 init_task_repository();
 init_task_run_repository();
-/** Close before aborting so a late router decision or receipt cannot restart the task. */
-async function cancelPersonalTask(taskId, conversationId, key) {
-	if (!new TaskOriginRepository().owns(taskId, conversationId)) throw new Error("Task does not belong to this personal conversation");
+init_session_input_repository();
+init_logger();
+const log = createLogger("PersonalTaskCancel");
+const pendingStops = /* @__PURE__ */ new Set();
+function finalizeCancellation(runId) {
 	const runs = new TaskRunRepository();
-	const { active, changed } = runSqliteWriteTransaction(() => {
-		const task = new TaskRepository().require(taskId);
-		const run = runs.getActiveRoot(taskId);
-		if (task.phase !== "closed") {
-			if (!new TaskApplicationService().execute({
-				taskId,
-				expectedVersion: task.version,
-				idempotencyKey: `personal-cancel:${key}`,
-				command: {
-					type: "close",
-					resolution: "cancelled"
-				},
-				actor: { kind: "user" }
-			}).ok) throw new Error("Task changed while cancelling");
-		} else if (task.resolution !== "cancelled") throw new Error("Task is already closed");
-		getSqliteDatabase().prepare("UPDATE task_allocations SET status = 'cancelled', lease_token = NULL, updated_at = ? WHERE task_id = ? AND status != 'cancelled'").run(Date.now(), taskId);
-		return {
-			active: run,
-			changed: task.phase !== "closed"
-		};
-	});
-	const latest = active ?? runs.getLatestRoot(taskId);
-	let executionStopConfirmed = !latest || !latest.conversationId && !latest.startedAt && ["queued", "cancelled"].includes(latest.status);
-	if (active?.conversationId) {
-		await abortEmbeddedRun(active.conversationId);
-		executionStopConfirmed = false;
-	}
-	const current = active ? runs.get(active.id) : void 0;
-	if (current && runs.getActiveRoot(taskId)?.id === current.id) new TaskApplicationService().completeRun({
-		runId: current.id,
-		expectedRunVersion: current.version,
+	const run = runId ? runs.get(runId) : void 0;
+	if (!run || ![
+		"queued",
+		"running",
+		"waiting",
+		"verifying",
+		"cancelled"
+	].includes(run.status)) return;
+	runs.resolveCancelledRunWaits(run.id, { kind: "user" });
+	if (run.status === "cancelled") return;
+	if (!new TaskApplicationService().completeRun({
+		runId: run.id,
+		expectedRunVersion: run.version,
 		actor: { kind: "user" },
 		terminalCode: "cancelled_by_user",
 		suppressAttention: true,
@@ -60,7 +47,70 @@ async function cancelPersonalTask(taskId, conversationId, key) {
 			needsUser: false,
 			completionVerdict: "not_achieved"
 		}
+	}).ok) throw new Error("Task changed while cancelling");
+}
+/** Close before aborting so a late router decision or receipt cannot restart the task. */
+async function cancelPersonalTask(taskId, conversationId, key) {
+	if (!new TaskOriginRepository().owns(taskId, conversationId)) throw new Error("Task does not belong to this personal conversation");
+	const runs = new TaskRunRepository();
+	const { active, changed, targetKnown } = runSqliteWriteTransaction(() => {
+		const previous = getSqliteDatabase().prepare(`SELECT subject_id, result_json FROM command_deduplication
+      WHERE idempotency_key = ?`).get(`personal-cancel:${key}`);
+		if (previous) {
+			if (previous.subject_id !== taskId) throw new Error("Cancellation key belongs to another Task");
+			const saved = JSON.parse(previous.result_json);
+			const active = saved.cancellationRunId ? runs.get(saved.cancellationRunId) : void 0;
+			finalizeCancellation(active?.id);
+			return {
+				active,
+				changed: false,
+				targetKnown: Object.hasOwn(saved, "cancellationRunId")
+			};
+		}
+		const task = new TaskRepository().require(taskId);
+		if (task.phase === "closed" && task.resolution !== "cancelled") throw new Error("Task is already closed");
+		const run = runs.getActiveRoot(taskId) ?? (task.phase === "closed" ? runs.getLatestRoot(taskId) : void 0);
+		if (!new TaskApplicationService().execute({
+			taskId,
+			expectedVersion: task.version,
+			idempotencyKey: `personal-cancel:${key}`,
+			command: {
+				type: "close",
+				resolution: "cancelled"
+			},
+			actor: { kind: "user" }
+		}).ok) throw new Error("Task changed while cancelling");
+		getSqliteDatabase().prepare(`UPDATE command_deduplication SET result_json = json_set(result_json, '$.cancellationRunId', ?)
+      WHERE idempotency_key = ?`).run(run?.id ?? null, `personal-cancel:${key}`);
+		getSqliteDatabase().prepare("UPDATE task_allocations SET status = 'cancelled', lease_token = NULL, updated_at = ? WHERE task_id = ? AND status != 'cancelled'").run(Date.now(), taskId);
+		finalizeCancellation(run?.id);
+		return {
+			active: run,
+			changed: task.phase !== "closed",
+			targetKnown: true
+		};
 	});
+	let executionStopConfirmed = targetKnown && (!active || !active.conversationId && !active.startedAt && ["queued", "cancelled"].includes(active.status));
+	if (active?.conversationId) {
+		const state = getSessionInputState(active.conversationId);
+		const input = state.activeInputId ? getSessionInputById(active.conversationId, state.activeInputId) : void 0;
+		const embedded = getEmbeddedRunByConversationId(active.conversationId);
+		const executionId = input?.taskRunId === active.id ? state.activeRunId : embedded?.runId === active.id ? active.id : void 0;
+		if (executionId && !pendingStops.has(executionId)) {
+			pendingStops.add(executionId);
+			abortEmbeddedRun(active.conversationId, "user_cancelled", executionId).catch((err) => {
+				log.warn({
+					err,
+					taskId,
+					runId: active.id,
+					executionId
+				}, "Task cancelled; execution stop was not confirmed");
+			}).finally(() => {
+				pendingStops.delete(executionId);
+			});
+		}
+		executionStopConfirmed = false;
+	}
 	if (changed && new TaskAllocationRepository().get(taskId)) {
 		const zh = new TaskRepository().require(taskId).locale === "zh";
 		runSqliteWriteTransaction(() => new TaskAllocationRepository().publish(taskId, zh ? "任务已取消。" : "Task cancelled."));

package/dist/src/scenes/taskFollowUp/service.d.ts

@@ -50,7 +50,7 @@ export declare class SceneTaskExecutionService implements SceneActivationAdapter
         task: {
             id: string;
             title: string;
-            phase: "backlog" | "ready" | "active" | "review" | "closed";
+            phase: "review" | "backlog" | "ready" | "active" | "closed";
             priority: "low" | "normal" | "high" | "critical";
             source: string;
             latestContractVersion: number;
@@ -170,6 +170,8 @@ export declare class SceneTaskExecutionService implements SceneActivationAdapter
                     criterion: string;
                     status: "failed" | "passed" | "unverified";
                     evidenceTitles: string[];
+                    note?: string;
+                    method?: "unverified" | "model_reviewed" | "tool_verified";
                 }[];
             };
             remainingWork: string[];
@@ -201,7 +203,7 @@ export declare class SceneTaskExecutionService implements SceneActivationAdapter
         task: {
             id: string;
             title: string;
-            phase: "backlog" | "ready" | "active" | "review" | "closed";
+            phase: "review" | "backlog" | "ready" | "active" | "closed";
             priority: "low" | "normal" | "high" | "critical";
             source: string;
             latestContractVersion: number;
@@ -321,6 +323,8 @@ export declare class SceneTaskExecutionService implements SceneActivationAdapter
                     criterion: string;
                     status: "failed" | "passed" | "unverified";
                     evidenceTitles: string[];
+                    note?: string;
+                    method?: "unverified" | "model_reviewed" | "tool_verified";
                 }[];
             };
             remainingWork: string[];
@@ -351,7 +355,7 @@ export declare class SceneTaskExecutionService implements SceneActivationAdapter
         task: {
             id: string;
             title: string;
-            phase: "backlog" | "ready" | "active" | "review" | "closed";
+            phase: "review" | "backlog" | "ready" | "active" | "closed";
             priority: "low" | "normal" | "high" | "critical";
             source: string;
             latestContractVersion: number;
@@ -471,6 +475,8 @@ export declare class SceneTaskExecutionService implements SceneActivationAdapter
                     criterion: string;
                     status: "failed" | "passed" | "unverified";
                     evidenceTitles: string[];
+                    note?: string;
+                    method?: "unverified" | "model_reviewed" | "tool_verified";
                 }[];
             };
             remainingWork: string[];
@@ -527,7 +533,7 @@ export declare class SceneTaskExecutionService implements SceneActivationAdapter
         task: {
             id: string;
             title: string;
-            phase: "backlog" | "ready" | "active" | "review" | "closed";
+            phase: "review" | "backlog" | "ready" | "active" | "closed";
             priority: "low" | "normal" | "high" | "critical";
             source: string;
             latestContractVersion: number;
@@ -647,6 +653,8 @@ export declare class SceneTaskExecutionService implements SceneActivationAdapter
                     criterion: string;
                     status: "failed" | "passed" | "unverified";
                     evidenceTitles: string[];
+                    note?: string;
+                    method?: "unverified" | "model_reviewed" | "tool_verified";
                 }[];
             };
             remainingWork: string[];
@@ -677,7 +685,7 @@ export declare class SceneTaskExecutionService implements SceneActivationAdapter
         task: {
             id: string;
             title: string;
-            phase: "backlog" | "ready" | "active" | "review" | "closed";
+            phase: "review" | "backlog" | "ready" | "active" | "closed";
             priority: "low" | "normal" | "high" | "critical";
             source: string;
             latestContractVersion: number;
@@ -797,6 +805,8 @@ export declare class SceneTaskExecutionService implements SceneActivationAdapter
                     criterion: string;
                     status: "failed" | "passed" | "unverified";
                     evidenceTitles: string[];
+                    note?: string;
+                    method?: "unverified" | "model_reviewed" | "tool_verified";
                 }[];
             };
             remainingWork: string[];

package/dist/src/session/session-context-for-llm.js

@@ -297,7 +297,7 @@ function buildSessionContextForLlm(rows) {
 			continue;
 		}
 		if (isTranscriptCustomMessageEntry(r)) {
-			if (r.customType === "personal_request_status") continue;
+			if (r.customType === "personal_request_status" || r.customType === "connection_control_status") continue;
 			if (r.customType === "personal_proactive_message") {
 				const message = parsePersonalProactiveMessage(r.details);
 				if (message) out.push({
@@ -350,7 +350,7 @@ function buildSessionDisplayMessages(rows) {
 	const out = [];
 	for (const r of rows) {
 		if (isTranscriptCustomMessageEntry(r)) {
-			if (r.customType === "personal_request_status") {
+			if (r.customType === "personal_request_status" || r.customType === "connection_control_status") {
 				out.push({
 					role: "assistant",
 					content: [{

package/dist/src/session/store.d.ts

@@ -116,7 +116,9 @@ export declare class SessionStore {
     private buildSessionDetail;
     loadTranscriptRows(key: string): Promise<TranscriptStoredRow[]>;
     loadTranscriptHistoryRows(key: string): Promise<TranscriptStoredRow[]>;
-    prepareModelFallback(key: string, rowsBeforeAttempt: readonly TranscriptStoredRow[]): Promise<ModelFallbackPreparation>;
+    prepareModelFallback(key: string, rowsBeforeAttempt: readonly TranscriptStoredRow[], options?: {
+        resumeTaskContinuation?: boolean;
+    }): Promise<ModelFallbackPreparation>;
     getMetadata(key: string): Promise<SessionMetadata | null>;
     resolveKeyByTranscriptId(transcriptId: string): Promise<string | null>;
     updateMetadata(key: string, updates: Partial<SessionMetadata>): Promise<void>;

package/dist/src/session/store.js

@@ -15,7 +15,7 @@ import { init_sqlite } from "../storage/sqlite/index.js";
 import { init_agent_session_key, resolveAgentIdFromConversationId } from "../routing/agent-session-key.js";
 import { resolveUserContextSessionAccess } from "../user-context/access-policy.js";
 import { resolveEffectiveAgentProfile } from "../config/agent-profile.js";
-import { canResumeAfterModelFailure } from "../agent/orchestration/turn-recovery.js";
+import { ACCEPTANCE_REPAIR_READ_TOOLS, canResumeAfterModelFailure } from "../agent/orchestration/turn-recovery.js";
 import { DurableState } from "../storage/sqlite/durable-state.js";
 import { transcriptRowsToClientHistory } from "./client-history.js";
 import { SessionCompactor } from "../agent/memory/compaction.js";
@@ -272,7 +272,7 @@ var SessionStore = class {
 		requireXopcDatabase();
 		return loadTranscriptHistoryRowsForSession(key);
 	}
-	async prepareModelFallback(key, rowsBeforeAttempt) {
+	async prepareModelFallback(key, rowsBeforeAttempt, options) {
 		return this.runStoreMutation(async () => {
 			requireXopcDatabase();
 			const currentRows = loadTranscriptRowsForSession(key);
@@ -289,7 +289,17 @@ var SessionStore = class {
 				"assistant",
 				"toolResult"
 			].includes(String(row.role)));
-			if (appendedRows.some((row) => isTranscriptMessageRole(row, "user")) && appendedRows.filter((row) => isTranscriptMessageRole(row, "user")).length === 1 && (isTranscriptMessageRole(tail, "user") || isTranscriptMessageRole(tail, "toolResult")) && canResumeAfterModelFailure(preparedRows) || appendedRows.length === 1 && isTranscriptMessageRole(appendedRows[0], "user") || removedError && appendedRows.length === 0 && isTranscriptMessageRole(preparedRows.at(-1), "user")) {
+			const onlyRecoveryMetadata = appendedRows.every((row) => "type" in row && row.type === "custom" && [
+				"coding_run_started",
+				"coding_verification",
+				"codemode-store",
+				"xopc-tool-discovery-state"
+			].includes(String(row.customType)));
+			if (removedError && options?.resumeTaskContinuation && onlyRecoveryMetadata && canResumeAfterModelFailure(preparedRows, { allowFailedReadTools: ACCEPTANCE_REPAIR_READ_TOOLS })) {
+				archiveFailedModelAttempts(key, rowsBeforeAttempt.length);
+				return "prompt";
+			}
+			if (appendedRows.some((row) => isTranscriptMessageRole(row, "user")) && appendedRows.filter((row) => isTranscriptMessageRole(row, "user")).length === 1 && (isTranscriptMessageRole(tail, "user") || isTranscriptMessageRole(tail, "toolResult")) && canResumeAfterModelFailure(preparedRows, { allowFailedReadTools: ACCEPTANCE_REPAIR_READ_TOOLS }) || appendedRows.length === 1 && isTranscriptMessageRole(appendedRows[0], "user") || removedError && appendedRows.length === 0 && isTranscriptMessageRole(preparedRows.at(-1), "user") || removedError && onlyRecoveryMetadata && (isTranscriptMessageRole(tail, "user") || isTranscriptMessageRole(tail, "toolResult")) && canResumeAfterModelFailure(preparedRows, { allowFailedReadTools: ACCEPTANCE_REPAIR_READ_TOOLS })) {
 				if (removedError) archiveFailedModelAttempts(key, rowsBeforeAttempt.length);
 				return "resume";
 			}

package/dist/src/storage/sqlite/connection-wait-repository.d.ts

@@ -21,6 +21,9 @@ export declare function requireSessionConnection(input: {
     status: 'connection_required' | 'skipped' | 'objective_conflict';
     waitId?: string;
 };
+/** Pending messages may revise the goal; controls cannot become a competing model execution. */
+export declare function interruptedConnectionMessage(wait: ConnectionWait): SessionInput | undefined;
+export declare function hasPendingConnectionMessages(wait: ConnectionWait, includeControls?: boolean): boolean;
 /** The input and the wait transition commit together, using the existing queue's unique key. */
 export declare function queueConnectionResolution(wait: ConnectionWait, resolution: 'continued' | 'skipped', resolvePersonal?: (wait: ConnectionWait, resolution: 'continued' | 'skipped') => unknown): ConnectionWait;
 export declare function consumeConnectionResume(input: SessionInput): boolean;
@@ -29,10 +32,10 @@ export declare function connectionBindings(conversationId: string): ConnectionNe
 export declare function connectorObjectiveScope(conversationId: string): string | undefined;
 export declare function bindObjectiveAccount(conversationId: string, connectorId: string, accountId: string): void;
 export declare function connectionBinding(conversationId: string, connectorId: string): string | undefined;
-/** New input wins over an outstanding auto-resume intent, including an already queued resume. */
+/** Explicit objective changes invalidate an outstanding auto-resume intent. */
 export declare function invalidateConnectionResumeIntent(conversationId: string): void;
 export declare function reviseCurrentConnectionObjective(conversationId: string, summary: string | undefined): void;
-export declare function cancelConnectionObjective(conversationId: string): void;
+export declare function cancelConnectionObjective(conversationId: string, expectedWaitId?: string, expectedObjectiveRevision?: number): void;
 export declare function getConnectionResumeInput(conversationId: string, runId: string): SessionInput | undefined;
 export declare function listConnectionWaitsToCheck(): ConnectionWait[];
 /** A queued wait has not crossed consumeConnectionResume's execution boundary. */