@xopcai/xopc 0.0.390 → 0.0.391

package/dist/gateway/static/root/index.html

@@ -11,15 +11,15 @@
     <link rel="apple-touch-icon" sizes="180x180" href="/apple-touch-icon.png?v=20260910-1" />
     <link rel="manifest" href="/site.webmanifest?v=20260910-1" />
     <title>XOPC — Keep what matters moving.</title>
-    <script type="module" crossorigin src="/assets/index-xTL-vb51.js"></script>
+    <script type="module" crossorigin src="/assets/index-DFgXwLsv.js"></script>
     <link rel="modulepreload" crossorigin href="/assets/rolldown-runtime-aKtaBQYM.js">
     <link rel="modulepreload" crossorigin href="/assets/preload-helper-zJ_50EbN.js">
     <link rel="modulepreload" crossorigin href="/assets/vendor-react-BOUWij0V.js">
     <link rel="modulepreload" crossorigin href="/assets/dist-CxGUk8J-.js">
     <link rel="modulepreload" crossorigin href="/assets/es2015-DBLcMg5B.js">
     <link rel="modulepreload" crossorigin href="/assets/middleware-Pd0e8Igk.js">
-    <link rel="modulepreload" crossorigin href="/assets/messages-O0BEUKnx.js">
-    <link rel="modulepreload" crossorigin href="/assets/locale-store-DMy9W6IG.js">
+    <link rel="modulepreload" crossorigin href="/assets/messages-CKTo_sIF.js">
+    <link rel="modulepreload" crossorigin href="/assets/locale-store-BpK9AiDq.js">
     <link rel="modulepreload" crossorigin href="/assets/floating-ui.dom-B7uQOZZW.js">
     <link rel="modulepreload" crossorigin href="/assets/dist-CI_fqRk-.js">
     <link rel="modulepreload" crossorigin href="/assets/dist-BGTk37IG.js">
@@ -37,14 +37,13 @@
     <link rel="modulepreload" crossorigin href="/assets/bundle-mjs-rHxsej31.js">
     <link rel="modulepreload" crossorigin href="/assets/cn-0WouolD0.js">
     <link rel="modulepreload" crossorigin href="/assets/copy-to-clipboard-HOJ79TWv.js">
-    <link rel="modulepreload" crossorigin href="/assets/markdown-view-wyOHdXEg.js">
+    <link rel="modulepreload" crossorigin href="/assets/markdown-view-IsYTotu6.js">
     <link rel="modulepreload" crossorigin href="/assets/check-DUBLcKHA.js">
     <link rel="modulepreload" crossorigin href="/assets/copy-Dv6d4Dvw.js">
     <link rel="modulepreload" crossorigin href="/assets/button-aIC072nz.js">
     <link rel="modulepreload" crossorigin href="/assets/copy-text-row-C7egVuKr.js">
     <link rel="modulepreload" crossorigin href="/assets/vendor-swr-BIWyz7Rc.js">
     <link rel="modulepreload" crossorigin href="/assets/activity-YogQEteU.js">
-    <link rel="modulepreload" crossorigin href="/assets/bot-DjLkhyZL.js">
     <link rel="modulepreload" crossorigin href="/assets/chevron-left-DqFhpbvK.js">
     <link rel="modulepreload" crossorigin href="/assets/chevron-right-BweFrslA.js">
     <link rel="modulepreload" crossorigin href="/assets/dist-C3DSFZCi.js">
@@ -55,8 +54,6 @@
     <link rel="modulepreload" crossorigin href="/assets/circle-check-C23XjkUj.js">
     <link rel="modulepreload" crossorigin href="/assets/circle-dashed-8qMD7gHf.js">
     <link rel="modulepreload" crossorigin href="/assets/circle-dot-BAseJTrF.js">
-    <link rel="modulepreload" crossorigin href="/assets/circle-pause-CN9jYH2s.js">
-    <link rel="modulepreload" crossorigin href="/assets/clock-3-DnrAnuyZ.js">
     <link rel="modulepreload" crossorigin href="/assets/cloud-C4-yfnnk.js">
     <link rel="modulepreload" crossorigin href="/assets/ellipsis-0k4rZLoy.js">
     <link rel="modulepreload" crossorigin href="/assets/external-link-DjqjBmc3.js">
@@ -73,55 +70,50 @@
     <link rel="modulepreload" crossorigin href="/assets/rotate-cw-LIg3Am9S.js">
     <link rel="modulepreload" crossorigin href="/assets/search-DA7gz22f.js">
     <link rel="modulepreload" crossorigin href="/assets/index.module-Cd9ENXfk.js">
-    <link rel="modulepreload" crossorigin href="/assets/gateway-startup-retry-C-BG5M7H.js">
-    <link rel="modulepreload" crossorigin href="/assets/session-api-B9HrwF-c.js">
+    <link rel="modulepreload" crossorigin href="/assets/gateway-startup-retry-CkTVSESs.js">
+    <link rel="modulepreload" crossorigin href="/assets/session-api-ga-SUOq_.js">
     <link rel="modulepreload" crossorigin href="/assets/constants-DeXt1mV-.js">
     <link rel="modulepreload" crossorigin href="/assets/app-chrome-BeB4KgOf.js">
     <link rel="modulepreload" crossorigin href="/assets/attachment-utils-core-BIOUBrpT.js">
     <link rel="modulepreload" crossorigin href="/assets/files-Bw4SBGdM.js">
-    <link rel="modulepreload" crossorigin href="/assets/workspace-api-Bmx1O449.js">
+    <link rel="modulepreload" crossorigin href="/assets/workspace-api-BpfKsrtP.js">
     <link rel="modulepreload" crossorigin href="/assets/electron-env-Dit0bHgy.js">
     <link rel="modulepreload" crossorigin href="/assets/use-async-resource-GrnWNwMZ.js">
-    <link rel="modulepreload" crossorigin href="/assets/activity-store-DGMAYkw8.js">
-    <link rel="modulepreload" crossorigin href="/assets/use-file-preview-expanded-CEsxnDnQ.js">
+    <link rel="modulepreload" crossorigin href="/assets/activity-store-DWQCDi8M.js">
+    <link rel="modulepreload" crossorigin href="/assets/use-file-preview-expanded-DMHehhwG.js">
     <link rel="modulepreload" crossorigin href="/assets/mic-CuUb7zc-.js">
     <link rel="modulepreload" crossorigin href="/assets/globe-DSSGFWFn.js">
-    <link rel="modulepreload" crossorigin href="/assets/share-link-dialog-B1TDyhPt.js">
-    <link rel="modulepreload" crossorigin href="/assets/local-session-drafts-DAtLkTPg.js">
+    <link rel="modulepreload" crossorigin href="/assets/share-link-dialog-BGicglAS.js">
+    <link rel="modulepreload" crossorigin href="/assets/local-session-drafts-DFnZQu9A.js">
     <link rel="modulepreload" crossorigin href="/assets/specialists-4bkS5rZ4.js">
     <link rel="modulepreload" crossorigin href="/assets/tasks-PuIUgF9L.js">
-    <link rel="modulepreload" crossorigin href="/assets/capabilities-BkCutK0V.js">
+    <link rel="modulepreload" crossorigin href="/assets/capabilities-DGEmBQnF.js">
     <link rel="modulepreload" crossorigin href="/assets/skill-wire-pattern-BPpeIcCi.js">
-    <link rel="modulepreload" crossorigin href="/assets/shares-api-Bl1ZBh5S.js">
-    <link rel="modulepreload" crossorigin href="/assets/capabilities-D61uSJPy.js">
-    <link rel="modulepreload" crossorigin href="/assets/use-composer-attachments-CXsocZjt.js">
-    <link rel="modulepreload" crossorigin href="/assets/git-branch-Dh9uxTot.js">
-    <link rel="modulepreload" crossorigin href="/assets/notes-api-CYt2pGsm.js">
-    <link rel="modulepreload" crossorigin href="/assets/message-square-fVE7Ghj1.js">
-    <link rel="modulepreload" crossorigin href="/assets/pause-DuPxgSxk.js">
-    <link rel="modulepreload" crossorigin href="/assets/play-kxZvpBg8.js">
+    <link rel="modulepreload" crossorigin href="/assets/shares-api-Dbx3z6-1.js">
+    <link rel="modulepreload" crossorigin href="/assets/capabilities-D6RJG4QY.js">
+    <link rel="modulepreload" crossorigin href="/assets/use-composer-attachments-DNl7O3Vb.js">
+    <link rel="modulepreload" crossorigin href="/assets/notes-api-CBb944yw.js">
     <link rel="modulepreload" crossorigin href="/assets/rotate-ccw-JM1TBLpp.js">
     <link rel="modulepreload" crossorigin href="/assets/settings-2-D-csvaET.js">
-    <link rel="modulepreload" crossorigin href="/assets/sparkles-DHlfQFAF.js">
-    <link rel="modulepreload" crossorigin href="/assets/gateway-realtime-store-BMUiUQMk.js">
-    <link rel="modulepreload" crossorigin href="/assets/gateway-realtime-Ci1Jst5g.js">
+    <link rel="modulepreload" crossorigin href="/assets/gateway-realtime-store-CMJVSnvi.js">
+    <link rel="modulepreload" crossorigin href="/assets/gateway-realtime-DghCGfY_.js">
     <link rel="modulepreload" crossorigin href="/assets/tool-activity-BtJkgjFf.js">
-    <link rel="modulepreload" crossorigin href="/assets/registry-api-CgQrCqL6.js">
-    <link rel="modulepreload" crossorigin href="/assets/gateway-config-swr-CmYcOqhb.js">
-    <link rel="modulepreload" crossorigin href="/assets/agents-admin-api-DxdaiFWn.js">
-    <link rel="modulepreload" crossorigin href="/assets/session-manager-aXqXuqDX.js">
-    <link rel="modulepreload" crossorigin href="/assets/voice-transcribe-api-B47j0_xA.js">
-    <link rel="modulepreload" crossorigin href="/assets/send-session-input-nH8Cw0US.js">
-    <link rel="modulepreload" crossorigin href="/assets/theme-store-BBLjE0fi.js">
-    <link rel="modulepreload" crossorigin href="/assets/extension-provider-DWI0KAKT.js">
+    <link rel="modulepreload" crossorigin href="/assets/registry-api-Dsa2LvRt.js">
+    <link rel="modulepreload" crossorigin href="/assets/gateway-config-swr-Dv_A5FMu.js">
+    <link rel="modulepreload" crossorigin href="/assets/agents-admin-api-Bb3Kvz3X.js">
+    <link rel="modulepreload" crossorigin href="/assets/session-manager-C_OiKblh.js">
+    <link rel="modulepreload" crossorigin href="/assets/voice-transcribe-api-CVaU83Jc.js">
+    <link rel="modulepreload" crossorigin href="/assets/send-session-input-DypbVTT7.js">
+    <link rel="modulepreload" crossorigin href="/assets/theme-store-Db7hDESt.js">
+    <link rel="modulepreload" crossorigin href="/assets/extension-provider-B1PQGTtY.js">
     <link rel="modulepreload" crossorigin href="/assets/loopi-Djb8XU3l.js">
-    <link rel="modulepreload" crossorigin href="/assets/models-hub-cache-DdH1MODX.js">
+    <link rel="modulepreload" crossorigin href="/assets/models-hub-cache-TjpL7hZ5.js">
     <link rel="modulepreload" crossorigin href="/assets/skill-api-utils-C7V4JVXM.js">
     <link rel="modulepreload" crossorigin href="/assets/date-formatters-CUZAyDEg.js">
     <link rel="modulepreload" crossorigin href="/assets/settings-form-draft-Dy10ldo8.js">
     <link rel="stylesheet" crossorigin href="/assets/markdown-view-Ct4sKkUf.css">
     <link rel="stylesheet" crossorigin href="/assets/loopi-C09I2mNj.css">
-    <link rel="stylesheet" crossorigin href="/assets/index-W9ls-0Yd.css">
+    <link rel="stylesheet" crossorigin href="/assets/index-a6ZvhclR.css">
   </head>
   <body>
     <div id="root"></div>

package/dist/package.js

@@ -1,4 +1,4 @@
 //#region package.json
-var version = "0.0.390";
+var version = "0.0.391";
 //#endregion
 export { version };

package/dist/src/agent/agent-manager.d.ts

@@ -131,6 +131,7 @@ export interface AgentInstance {
     activeProjectContext?: string;
     interactionStateVersion?: number;
     userContextAccessVersion: string;
+    executionToolPolicyVersion: string;
     /** Declared env var names from skill_view; exec_command reads values from process.env at spawn time. */
     skillEnvPassthroughKeys: Set<string>;
 }

package/dist/src/agent/agent-manager.js

@@ -26,6 +26,7 @@ import { runPersistentLearningJob } from "./background-review/run-background-rev
 import { applyConfigOverrides } from "../config/runtime-overrides.js";
 import { isPersonalConversation } from "../personal-agent/repository.js";
 import { PersonalPromptContext } from "../personal-agent/prompt-context.js";
+import { resolveExecutionToolPolicy } from "./embedded/execution-tool-policy.js";
 import { buildExecutionScopeContextForPrompt } from "./context/execution-scope.js";
 import { clearBootstrapSnapshot } from "./bootstrap/bootstrap-cache.js";
 import { resolveBootstrapContextSync } from "./bootstrap/bootstrap-files.js";
@@ -769,9 +770,10 @@ var AgentManager = class {
 	getOrCreateAgent(conversationId) {
 		const targetPath = this.getResolvedWorkspaceForSession(conversationId);
 		const existing = this.agents.get(conversationId);
+		const executionToolPolicyVersion = JSON.stringify(resolveExecutionToolPolicy(conversationId));
 		if (existing) {
 			const currentConfig = resolveEffectiveAgentProfileForSession(conversationId).config;
-			if (!existing.agent.state.isStreaming && (existing.resolvedWorkspacePath !== targetPath || JSON.stringify(existing.effectiveProfile.config) !== JSON.stringify(currentConfig))) this.removeAgent(conversationId);
+			if (!existing.agent.state.isStreaming && (existing.executionToolPolicyVersion !== executionToolPolicyVersion || existing.resolvedWorkspacePath !== targetPath || JSON.stringify(existing.effectiveProfile.config) !== JSON.stringify(currentConfig))) this.removeAgent(conversationId);
 			else {
 				this.refreshDynamicContextIfChanged(existing);
 				existing.lastUsedAt = Date.now();
@@ -807,6 +809,7 @@ var AgentManager = class {
 			activeProjectContext,
 			interactionStateVersion: this.getInteractionStateVersion(conversationId),
 			userContextAccessVersion: this.getUserContextAccessVersion(conversationId),
+			executionToolPolicyVersion,
 			skillEnvPassthroughKeys: /* @__PURE__ */ new Set()
 		});
 		log.debug({

package/dist/src/agent/context/execution-scope.js

@@ -3,8 +3,8 @@ import { TaskRepository, init_task_repository } from "../../tasks/task-repositor
 import { getSessionMetadata } from "../../storage/sqlite/session-read-repository.js";
 import { init_sqlite } from "../../storage/sqlite/index.js";
 import { TaskReadModelProjector } from "../../tasks/task-read-model-projector.js";
-import { sanitizeForPromptLiteral } from "../prompt/sanitize-for-prompt.js";
 import { TaskConversationRepository } from "../../tasks/task-conversation-repository.js";
+import { sanitizeForPromptLiteral } from "../prompt/sanitize-for-prompt.js";
 import { buildActiveProjectContextForPrompt } from "./project-context.js";
 //#region src/agent/context/execution-scope.ts
 init_sqlite();

package/dist/src/agent/embedded/execution-tool-policy.d.ts

@@ -1,7 +1,9 @@
 import type { AgentTool } from '@earendil-works/pi-agent-core';
+export declare const TASK_EXECUTION_TOOL_IDS: readonly string[];
 export declare const PERSONAL_REQUEST_TOOL_IDS: readonly ["xopc_tool_search", "xopc_tool_describe", "xopc_tool_execute", "personal_request_result", "personal_request_connection", "task_collaboration"];
 export type ExecutionToolPolicy = Readonly<{
     surface: 'agent' | 'personal_main' | 'personal_request_worker';
+    taskExecution: boolean;
     nativeMcp: boolean;
     externalMaterialization: boolean;
     discovery: boolean;

package/dist/src/agent/embedded/execution-tool-policy.js

@@ -4,10 +4,12 @@ import { getSessionMetadata } from "../../storage/sqlite/session-read-repository
 import { init_session_repository } from "../../storage/sqlite/session-repository.js";
 import { isPersonalConversation } from "../../personal-agent/repository.js";
 import { PERSONAL_MAIN_TOOL_IDS } from "../../personal-agent/policy.js";
+import { TaskConversationRepository } from "../../tasks/task-conversation-repository.js";
 //#region src/agent/embedded/execution-tool-policy.ts
 init_request_repository();
 init_connection();
 init_session_repository();
+const TASK_EXECUTION_TOOL_IDS = ["task_collaboration", "publish_task_result"];
 const PERSONAL_REQUEST_TOOL_IDS = [
 	"xopc_tool_search",
 	"xopc_tool_describe",
@@ -22,21 +24,24 @@ function resolveExecutionToolPolicy(conversationId) {
 	if (isPersonalConversation(conversationId)) surface = "personal_main";
 	else if (personalRequestForExecution(conversationId) || isXopcDatabaseOpen() && getSessionMetadata(conversationId)?.customData?.personalReadRequestId) surface = "personal_request_worker";
 	const configured = surface === "agent";
+	const taskExecution = Boolean(isXopcDatabaseOpen() && new TaskConversationRepository().resolveActiveExecutionSession(conversationId));
 	return {
 		surface,
+		taskExecution,
 		nativeMcp: configured,
 		externalMaterialization: configured,
 		discovery: configured,
 		codemode: configured,
-		revision: "personal-tool-boundaries-v2"
+		revision: "personal-tool-boundaries-v3"
 	};
 }
 function allowsExecutionTool(policy, name) {
-	if (policy.surface === "agent") return true;
+	if (TASK_EXECUTION_TOOL_IDS.includes(name) && !policy.taskExecution) return false;
+	if (policy.surface === "agent") return !name.startsWith("personal_");
 	return (policy.surface === "personal_main" ? PERSONAL_MAIN_TOOL_IDS : PERSONAL_REQUEST_TOOL_IDS).includes(name);
 }
 function filterExecutionTools(policy, tools) {
 	return tools.filter((tool) => allowsExecutionTool(policy, tool.name));
 }
 //#endregion
-export { PERSONAL_REQUEST_TOOL_IDS, allowsExecutionTool, filterExecutionTools, resolveExecutionToolPolicy };
+export { PERSONAL_REQUEST_TOOL_IDS, TASK_EXECUTION_TOOL_IDS, allowsExecutionTool, filterExecutionTools, resolveExecutionToolPolicy };

package/dist/src/agent/embedded/run-turn.js

@@ -624,7 +624,8 @@ async function runXopcEmbeddedTurnInner(params) {
 				block: true,
 				reason: "Tool is outside this execution scope."
 			};
-			if (executionToolPolicy.surface !== "agent" && resolveExecutionToolPolicy(toolPolicyConversationId).surface !== executionToolPolicy.surface) {
+			const currentToolPolicy = resolveExecutionToolPolicy(toolPolicyConversationId);
+			if (currentToolPolicy.surface !== executionToolPolicy.surface || currentToolPolicy.taskExecution !== executionToolPolicy.taskExecution) {
 				policyStopped = true;
 				policyStopReason = "Execution identity changed during the run";
 				quarantineRunner = true;

package/dist/src/agent/embedded/session-runner.js

@@ -1,7 +1,7 @@
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
-import { isCodemodeCoreRead } from "../tools/codemode-permissions.js";
 import { filterExecutionTools, resolveExecutionToolPolicy } from "./execution-tool-policy.js";
+import { isCodemodeCoreRead } from "../tools/codemode-permissions.js";
 import { deferredToolContract, getXopcToolMetadata } from "./tool-metadata.js";
 import { abortEmbeddedRun } from "./runs.js";
 import { guardSessionManager } from "./session-tool-result-guard.js";

package/dist/src/agent/tools/factory.js

@@ -11,12 +11,12 @@ import { init_sqlite } from "../../storage/sqlite/index.js";
 import { init_agent_scope, resolveDefaultAgentId } from "../agent-scope.js";
 import { resolveUserContextSessionAccess } from "../../user-context/access-policy.js";
 import { resolveEffectiveAgentConfigForAgent, resolveEffectiveAgentConfigForSession } from "../../config/agent-profile.js";
+import { PERSONAL_TOOL_DESCRIPTIONS } from "../../personal-agent/policy.js";
 import { TaskConversationRepository } from "../../tasks/task-conversation-repository.js";
+import { PERSONAL_REQUEST_TOOL_IDS, TASK_EXECUTION_TOOL_IDS, filterExecutionTools, resolveExecutionToolPolicy } from "../embedded/execution-tool-policy.js";
 import { LOCAL_READ_MAX_CHARS } from "./local-read-budget.js";
 import { createPersonalAttentionTool } from "./personal-attention-tool.js";
 import { markCodemodeCoreRead } from "./codemode-permissions.js";
-import { PERSONAL_TOOL_DESCRIPTIONS } from "../../personal-agent/policy.js";
-import { PERSONAL_REQUEST_TOOL_IDS, filterExecutionTools, resolveExecutionToolPolicy } from "../embedded/execution-tool-policy.js";
 import "../../../packages/browser-control-contract/src/index.js";
 import { getEmbeddedExecutionRunId, getEmbeddedExecutionSession } from "../embedded/execution-context.js";
 import { wrapToolsWithProtection } from "./executor.js";
@@ -116,7 +116,8 @@ var AgentToolsFactory = class AgentToolsFactory {
 			disabledTools: denied,
 			toolAllowlist: candidate.toolAllowlist
 		}).some((tool) => tool.name === name);
-		const activatable = this.getLazyCapabilityToolNames().includes(name);
+		const taskActivatable = TASK_EXECUTION_TOOL_IDS.includes(name) && !denied.has(name) && (!candidate.toolAllowlist || candidate.toolAllowlist.includes(name));
+		const activatable = this.getLazyCapabilityToolNames().includes(name) || taskActivatable;
 		return {
 			condition: `tool:${name}`,
 			state: registered || activatable ? "verified" : "blocked",
@@ -249,8 +250,8 @@ var AgentToolsFactory = class AgentToolsFactory {
 		let allowed = options?.toolAllowlist ? new Set(options.toolAllowlist) : void 0;
 		const currentConversationId = () => options?.conversationId ?? this.deps.getCurrentContext?.()?.conversationId;
 		const executionConversationId = currentConversationId();
-		const executionToolPolicy = executionConversationId ? resolveExecutionToolPolicy(executionConversationId) : void 0;
-		const personalToolsConfigured = executionToolPolicy?.surface === "personal_main" || Boolean(allowed?.has("personal_task") || allowed?.has("personal_preference"));
+		const executionToolPolicy = resolveExecutionToolPolicy(executionConversationId ?? "");
+		const personalToolsConfigured = executionToolPolicy.surface === "personal_main";
 		const primary = getPrimary?.();
 		const modelHasVision = primary?.input?.includes("image") ?? false;
 		const cfg = this.deps.getConfig?.();
@@ -432,12 +433,11 @@ var AgentToolsFactory = class AgentToolsFactory {
 			})] : [],
 			createSendMediaTool(workspace, bus, deliveryContext),
 			createPublishArtifactsTool(workspace),
-			createTaskResultTool(currentConversationId),
-			createTaskCollaborationTool({
+			...executionToolPolicy.taskExecution ? [createTaskResultTool(currentConversationId), createTaskCollaborationTool({
 				...productToolDeps,
 				getWorkspace: () => workspace,
 				getCurrentConversationId: currentConversationId
-			}),
+			})] : [],
 			createReadMediaTool(personalToolsConfigured ? {
 				textOnly: true,
 				maxChars: LOCAL_READ_MAX_CHARS,
@@ -540,7 +540,10 @@ var AgentToolsFactory = class AgentToolsFactory {
 			...browserEnabled && this.deps.getBrowserAutomationService ? [createBrowserAutomationTool({ getBrowserAutomationService: this.deps.getBrowserAutomationService })] : [],
 			...this.deps.getAutomationService || this.deps.getSceneAccess || this.deps.getProjectService || this.deps.getNotesService || this.deps.getLocalAppService || this.deps.getChatPreviewService || this.deps.dispatchTaskEvents || this.deps.dispatchTaskRuns ? [createXopcUseTool(productToolDeps), ...personalToolsConfigured ? [
 				createPersonalTaskTool(productToolDeps),
-				createPersonalReadTool(productToolDeps),
+				createPersonalReadTool({
+					...productToolDeps,
+					getCurrentConversationId: currentConversationId
+				}),
 				createPersonalResultTool(currentConversationId),
 				...createPersonalRequestTools(productToolDeps),
 				createPersonalAttentionTool({
@@ -649,11 +652,10 @@ var AgentToolsFactory = class AgentToolsFactory {
 				allowHostGit: () => getCommandIsolation()?.mode !== "docker"
 			}));
 		}
-		const selected = filterToolsByDisabledSet(core.map(markCodemodeCoreRead), disabled).filter((tool) => (!allowed || allowed.has(tool.name)) && !(personalToolsConfigured && tool.name === "clarify")).map((tool) => personalToolsConfigured && !tool.name.startsWith("personal_") && PERSONAL_TOOL_DESCRIPTIONS[tool.name] ? {
+		return filterExecutionTools(executionToolPolicy, filterToolsByDisabledSet(core.map(markCodemodeCoreRead), disabled).filter((tool) => (!allowed || allowed.has(tool.name)) && !(personalToolsConfigured && tool.name === "clarify")).map((tool) => personalToolsConfigured && !tool.name.startsWith("personal_") && PERSONAL_TOOL_DESCRIPTIONS[tool.name] ? {
 			...tool,
 			description: PERSONAL_TOOL_DESCRIPTIONS[tool.name]
-		} : tool);
-		return executionToolPolicy ? filterExecutionTools(executionToolPolicy, selected) : selected;
+		} : tool));
 	}
 	createCapabilityTools(capabilityNames, options) {
 		const disabled = options?.disabledTools;

package/dist/src/agent/tools/personal-read-tool.js

@@ -1,5 +1,7 @@
 import { CapabilityDispatcher } from "../../capabilities/runtime/dispatcher.js";
+import { isPersonalConversation } from "../../personal-agent/repository.js";
 import { LOCAL_READ_MAX_CHARS } from "./local-read-budget.js";
+import { getEmbeddedExecutionSession } from "../embedded/execution-context.js";
 import { registerNoteReadCapabilities } from "../../notes/capabilities/read.js";
 import { registerProjectReadCapabilities } from "../../projects/capabilities/read.js";
 import { registerAutomationReadCapabilities } from "../../automations/capabilities/read.js";
@@ -90,6 +92,8 @@ function createPersonalReadTool(deps) {
 		supportsParallel: true,
 		idempotent: true,
 		async execute(_id, raw, signal) {
+			const conversationId = getEmbeddedExecutionSession() ?? deps.getCurrentConversationId?.();
+			if (!conversationId || !isPersonalConversation(conversationId)) throw new Error("Personal conversation is unavailable");
 			const input = raw;
 			if (![
 				"note",

package/dist/src/agent/tools/task-collaboration-tool.js

@@ -90,7 +90,7 @@ function createTaskCollaborationTool(deps) {
 		name: "task_collaboration",
 		label: "Task collaboration",
 		parameters: Schema,
-		description: "Coordinate the current Task with its Personal owner. get section brief reads the full task body in 4000-character pages (offset/nextOffset); section handoff lists the host-captured original request and selected versioned sources, Read the CURRENT handoff first; source indices can change across work revisions. Only entries marked materializable support materialize=true, with an explicit sourceIndex. section source with materialize=true copies a selected pinned workspace file OR published result artifact into your Task input directory; use the returned executionInputRoot as cwd and readOnlyPath as input, never the owner workspace path. Result body text uses read; materialize requires an exact artifact source. The returned copies are read-only: write revised outputs elsewhere and publish those new files. It grants no wider root access. Otherwise section source reads one sourceIndex (query for result search, revision for pinned extracted text). section evidence lists real successful tool reads, or reads a toolCallId in 4000-character pages. Evidence excerpts must cite that original toolCallId. get with section task reads constraints and waits; default get reads complete ordered messages (afterSequence/limit) or one entryId. post progress for meaningful changes; post question then stop this turn until answered. Initial handoff and source/tool IDs require no ack. Before continuing, post ack only for a user/main_agent collaboration entry of kind answer or instruction, with causationId equal to that entry ID and explain how the result will incorporate it. Confirmation is receipt and intent, not completed verification. Reuse the same Task and executor. Account authorization stays in the main connection UI; answers and instructions cannot change the selected connector/account or permit writes. Preserve idempotencyKey on retries.",
+		description: "Coordinate the current Task with its originating conversation. get section brief reads the full task body in 4000-character pages (offset/nextOffset); section handoff lists the host-captured original request and selected versioned sources, Read the CURRENT handoff first; source indices can change across work revisions. Only entries marked materializable support materialize=true, with an explicit sourceIndex. section source with materialize=true copies a selected pinned workspace file OR published result artifact into your Task input directory; use the returned executionInputRoot as cwd and readOnlyPath as input, never the owner workspace path. Result body text uses read; materialize requires an exact artifact source. The returned copies are read-only: write revised outputs elsewhere and publish those new files. It grants no wider root access. Otherwise section source reads one sourceIndex (query for result search, revision for pinned extracted text). section evidence lists real successful tool reads, or reads a toolCallId in 4000-character pages. Evidence excerpts must cite that original toolCallId. get with section task reads constraints and waits; default get reads complete ordered messages (afterSequence/limit) or one entryId. post progress for meaningful changes; post question then stop this turn until answered. Initial handoff and source/tool IDs require no ack. Before continuing, post ack only for a user/main_agent collaboration entry of kind answer or instruction, with causationId equal to that entry ID and explain how the result will incorporate it. Confirmation is receipt and intent, not completed verification. Reuse the same Task and executor. Account authorization stays in the main connection UI; answers and instructions cannot change the selected connector/account or permit writes. Preserve idempotencyKey on retries.",
 		mutatesWorkspace: true,
 		mutationScope: "external",
 		requiresExclusiveWorkspaceLock: false,

package/dist/src/channels/index.js

@@ -7,8 +7,8 @@ import { compileAllowlist, evaluateAccess, hasBotMention, removeBotMention, reso
 import { renderMarkdownWithMarkers } from "../markdown/render.js";
 import { convertMarkdownTables } from "../markdown/tables.js";
 import { buildCodeSpanIndex, createInlineCodeState } from "../markdown/code-spans.js";
-import { ChannelManager, createChannelManager } from "./manager.js";
 import "./format.js";
 import { MessagePipeline, createEnvelopeTimestampHandler, createFilterCommandsHandler, createFilterEmptyHandler, createFilterSelfHandler, createPipeline, standardPreflightHandlers, standardProcessHandlers } from "./pipeline.js";
+import { ChannelManager, createChannelManager } from "./manager.js";
 import { collectSetupWizardChannels } from "./setup-wizard-discovery.js";
 export { ChannelManager, MessagePipeline, buildCodeSpanIndex, chunkMarkdownIR, chunkText, collectSetupWizardChannels, compileAllowlist, convertMarkdownTables, createChannelManager, createEnvelopeTimestampHandler, createFilterCommandsHandler, createFilterEmptyHandler, createFilterSelfHandler, createInlineCodeState, createPipeline, evaluateAccess, findFenceSpanAt, getChannelPlugin, getChannelRegistryVersion, hasBotMention, isSafeFenceBreak, listChannelPlugins, markdownToIR, markdownToIRWithMeta, parseFenceSpans, parseFrontmatterBlock, removeBotMention, renderMarkdownWithMarkers, resolveAllowlistMatch, resolveAllowlistMatchSimple, resolveDmPolicy, resolveGroupPolicy, standardPreflightHandlers, standardProcessHandlers, syncChannelPluginsFromManager };

package/dist/src/channels/manager.js

@@ -1,8 +1,8 @@
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
 import { ChannelHealthMonitor } from "./health-monitor.js";
-import { ChannelPluginRegistry } from "./plugin-registry.js";
 import { ChannelHeartbeatScheduler } from "./heartbeat-scheduler.js";
+import { ChannelPluginRegistry } from "./plugin-registry.js";
 import { ChannelOutboundSender } from "./outbound-sender.js";
 import { ChannelLifecycleSupervisor } from "./lifecycle-supervisor.js";
 //#region src/channels/manager.ts

package/dist/src/cli/commands/channels.js

@@ -1,8 +1,8 @@
 import { buildChannelCatalogForConfig } from "../../channels/catalog/channel-catalog-service.js";
 import { loadConfig, saveConfig } from "../../config/loader.js";
-import { formatExamples, register } from "../registry.js";
 import { listChannelPairingState } from "../../channels/pairing/pairing-service.js";
 import { approveChannelPairingFromCli } from "../../channels/pairing/approve-cli.js";
+import { formatExamples, register } from "../registry.js";
 import { colors } from "../utils/colors.js";
 import { Command } from "commander";
 //#region src/cli/commands/channels.ts

package/dist/src/cli/commands/connectors.js

@@ -1,8 +1,8 @@
 import { getStoreConnectorInstallPlan, installStoreConnector, listStoreConnectors } from "../../capabilities/store-connector.js";
 import { loadConfig, saveConfig } from "../../config/loader.js";
 import { register } from "../registry.js";
-import { Command } from "commander";
 import { confirm } from "@inquirer/prompts";
+import { Command } from "commander";
 //#region src/cli/commands/connectors.ts
 function parsePairs(values, option) {
 	const output = {};

package/dist/src/cli/commands/doctor/checks/database-schema.js

@@ -53,7 +53,7 @@ async function checkDatabaseSchema(ctx) {
 		id: "database-schema",
 		label: "Database schema",
 		status: "pass",
-		message: `SQLite schema v${status.dbVersion} (current release v255).`,
+		message: `SQLite schema v${status.dbVersion} (current release v256).`,
 		hints: []
 	};
 }

package/dist/src/cli/commands/extension-marketplace.js

@@ -16,8 +16,8 @@ import { existsSync, readFileSync, statSync } from "node:fs";
 import { execSync } from "node:child_process";
 import { createHash } from "node:crypto";
 import semver from "semver";
-import { Command } from "commander";
 import { confirm } from "@inquirer/prompts";
+import { Command } from "commander";
 //#region src/cli/commands/extension-marketplace.ts
 init_paths();
 const MANIFEST = "xopc.extension.json";

package/dist/src/cli/commands/models.js

@@ -16,8 +16,8 @@ import { prepareUpdateGlobalDefaults } from "../../gateway/global-defaults-admin
 import { disconnectProvider } from "../../providers/provider-disconnect.js";
 import { colors } from "../utils/colors.js";
 import { runCliOAuthLogin } from "../utils/oauth-login.js";
-import { Command } from "commander";
 import { input } from "@inquirer/prompts";
+import { Command } from "commander";
 //#region src/cli/commands/models.ts
 init_credentials();
 init_schema();

package/dist/src/cli/commands/onboard.js

@@ -11,8 +11,8 @@ import { initWorkspace } from "../utils/init-workspace.js";
 import { setupModel } from "./onboard/model.js";
 import { getChannelConfigurators } from "./onboard/channels/registry.js";
 import { setupChannels } from "./onboard/channels/index.js";
-import { Command } from "commander";
 import { select } from "@inquirer/prompts";
+import { Command } from "commander";
 //#region src/cli/commands/onboard.ts
 init_repository();
 init_schema();

package/dist/src/extensions/sdk/index.js

@@ -7,8 +7,8 @@ import { DEFAULT_SECURITY_CONFIG, checkExtensionDirSafety, checkExtensionPathSaf
 import { SlotRegistry, getSlotRegistry, registerSlotType } from "../slots.js";
 import { ExtensionDiagnostics, ExtensionLoaderCacheImpl, getExtensionCache, getExtensionDiagnostics } from "../diagnostics.js";
 import { ExtensionHookRunner, createHookContext, isHookEvent } from "../hooks.js";
-import { registerExtensionCliProgram } from "./channel-helpers.js";
 import { defineChannelPluginEntry } from "./channel-entry.js";
+import { registerExtensionCliProgram } from "./channel-helpers.js";
 import { lazyFunction, lazyModule } from "./lazy.js";
 import { createMockExtensionApi, createTestGateway } from "./testing.js";
 //#region src/extensions/sdk/index.ts

package/dist/src/gateway/hono/lib/voice-settings-revisions.js

@@ -12,7 +12,8 @@ function voiceSettingsRevisions(config) {
 		transcription: {
 			stt: config.tools?.media?.audio,
 			language: config.voice?.language,
-			languageMode: config.voice?.languageMode
+			languageMode: config.voice?.languageMode,
+			input: config.voice?.input
 		},
 		speech: config.messages?.tts,
 		conversation: config.voice?.realtime

package/dist/src/gateway/hono/routes/commands-skills.js

@@ -1,3 +1,5 @@
+import { getSessionMetadata } from "../../../storage/sqlite/session-read-repository.js";
+import { init_session_repository } from "../../../storage/sqlite/session-repository.js";
 import { init_agent_scope, resolveDefaultAgentId } from "../../../agent/agent-scope.js";
 import { resolveEffectiveAgentProfile } from "../../../config/agent-profile.js";
 import { effectiveWorkspacePathForSession, projectWorkspacePath } from "../../../session/session-workspace.js";
@@ -12,6 +14,7 @@ import { buildReviewContext, resolveGitRoot } from "../../../review/review-git.j
 import "../../../chat-commands/index.js";
 //#region src/gateway/hono/routes/commands-skills.ts
 init_agent_scope();
+init_session_repository();
 function parseMarketplaceProviderQuery(raw) {
 	const v = raw?.trim().toLowerCase();
 	if (v && isRegisteredProvider(v)) return v;
@@ -86,6 +89,10 @@ function registerCommandsSkillsRoutes(authenticated, deps) {
 	});
 	authenticated.get("/api/chat/skills", async (c) => {
 		const conversationId = c.req.query("conversationId")?.trim();
+		if (conversationId && !getSessionMetadata(conversationId)) return c.json({
+			ok: false,
+			error: "Conversation not found"
+		}, 404);
 		const agentId = c.req.query("agentId")?.trim() || resolveDefaultAgentId();
 		const payload = conversationId ? await service.marketplace.getSessionSkillsApi(conversationId) : service.marketplace.getAgentSkillsApi(agentId);
 		return c.json({
@@ -99,6 +106,10 @@ function registerCommandsSkillsRoutes(authenticated, deps) {
 			ok: false,
 			error: "Missing conversationId"
 		}, 400);
+		if (!getSessionMetadata(conversationId)) return c.json({
+			ok: false,
+			error: "Conversation not found"
+		}, 404);
 		const payload = await service.marketplace.getSessionWorkspaceTrustApi(conversationId);
 		return c.json({
 			ok: true,
@@ -120,6 +131,10 @@ function registerCommandsSkillsRoutes(authenticated, deps) {
 			ok: false,
 			error: "Expected { conversationId: string, trusted: boolean }"
 		}, 400);
+		if (!getSessionMetadata(conversationId)) return c.json({
+			ok: false,
+			error: "Conversation not found"
+		}, 404);
 		const payload = await service.marketplace.setSessionWorkspaceTrustApi(conversationId, body.trusted);
 		return c.json({
 			ok: true,

package/dist/src/gateway/service.js

@@ -81,6 +81,9 @@ import "../infra/bus/index.js";
 import { collectMediaUrisFromMessages, deleteMediaUris } from "../media/session-references.js";
 import { AgentService } from "../agent/service.js";
 import { bootstrapApplicationStateSync } from "../bootstrap/application-state.js";
+import { setPairingBroadcastSink } from "../channels/pairing/pairing-events.js";
+import { registerClarificationChannelRuntime } from "./clarify-runtime.js";
+import { ChannelManager } from "../channels/manager.js";
 import { ChatPreviewService } from "../chat-previews/service.js";
 import "../chat-previews/index.js";
 import "../config/index.js";
@@ -99,13 +102,8 @@ import { DiscussionSealer } from "../discussions/sealer.js";
 import "../discussions/index.js";
 import { EndpointToolRuntime } from "../endpoint-tools/runtime.js";
 import "../endpoint-tools/index.js";
-import { HomeCapabilityPreflightService } from "../home-intelligence/capability-preflight.js";
-import { HomeAdviceGenerator } from "../home-intelligence/generator.js";
-import { HomeIntelligenceHost } from "../home-intelligence/host.js";
-import { HomeSnapshotBuilder } from "../home-intelligence/snapshot.js";
 import { assertGatewayAuthConfigured, extractToken, resolveGatewayAuth, validateToken } from "./auth.js";
 import { prepareAutomationAgentSession } from "./automation-agent-session.js";
-import { registerClarificationChannelRuntime } from "./clarify-runtime.js";
 import { stopTailscaleExposure } from "./tailscale-lifecycle.js";
 import { getGatewayFileSpaceService } from "./file-space-service.js";
 import { reconcileHomeIntelligenceAutomation } from "./home-intelligence-automation-reconciler.js";
@@ -119,8 +117,6 @@ import { WorkDiscoveryService } from "../work-discovery/service.js";
 import { buildVoiceMemoryContext } from "../voice/realtime/memory-context.js";
 import { buildVoicePersonaContext } from "../voice/realtime/persona-context.js";
 import { voiceMemoryBudget, voicePersonaBudget } from "../voice/realtime/conversation-context.js";
-import { setPairingBroadcastSink } from "../channels/pairing/pairing-events.js";
-import { ChannelManager } from "../channels/manager.js";
 import "../notes/index.js";
 import { buildWorkflowChildTools } from "../agent/workflow/workflow-child-tools.js";
 import { WorkflowRunService } from "../workflows/service/workflow-run-service.js";
@@ -160,12 +156,17 @@ import { GatewayReadiness } from "./startup-readiness.js";
 import { createGatewayStartupTrace } from "./startup-trace.js";
 import { GatewaySceneHost } from "./scenes/host.js";
 import { TaskCollaborationDelivery } from "../tasks/task-collaboration-delivery.js";
+import { TaskMainUpdateExhaustedError } from "../tasks/task-main-update-retry.js";
 import { TaskMainUpdateDelivery } from "../tasks/task-main-update-delivery.js";
 import { allowsPersonalTaskNotification, personalReplyNotification, personalRunDelegated } from "../personal-agent/notifications.js";
 import { TaskMainUpdateDecisionService } from "../tasks/task-main-update-decision-service.js";
 import { selectTaskMainUpdateAttempt, submitAndConfirmTaskMainUpdate } from "../tasks/task-main-update-input.js";
 import { checkAppContextAccess, prepareAppContext } from "./service/app-context-access.js";
 import { applyAutomaticVoiceLanguage, inferProductLanguageFromEnvironment, initializeVoiceDefaults } from "../voice/language-profile.js";
+import { HomeAdviceGenerator } from "../home-intelligence/generator.js";
+import { HomeIntelligenceHost } from "../home-intelligence/host.js";
+import { HomeSnapshotBuilder } from "../home-intelligence/snapshot.js";
+import { HomeCapabilityPreflightService } from "../home-intelligence/capability-preflight.js";
 import crypto from "node:crypto";
 //#region src/gateway/service.ts
 init_session_repository();
@@ -879,6 +880,7 @@ var GatewayService = class {
 				if (this.voiceRealtime.hasConversation(input.conversationId)) {
 					const attempt = selectTaskMainUpdateAttempt(input.conversationId, input.clientMessageId, findSessionInput);
 					if (attempt.kind === "completed") return Promise.resolve(true);
+					if (attempt.kind === "exhausted") throw new TaskMainUpdateExhaustedError();
 					if (attempt.kind !== "new" || !attempt.clientMessageId) return Promise.resolve(false);
 					return this.voiceRealtime.offerTaskUpdate({
 						...input,

package/dist/src/home-intelligence/host.js

@@ -1,10 +1,10 @@
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
+import { HomeAdviceBudgetExceededError, isHomeProseLocalized } from "./generator.js";
 import { homePatternKey } from "./strategy.js";
+import { HomeAdvicePolicy } from "./policy.js";
 import { HomeIntelligenceRepository } from "./repository.js";
 import { HomeOpportunityApplicationService } from "./application-service.js";
-import { HomeAdvicePolicy } from "./policy.js";
-import { HomeAdviceBudgetExceededError, isHomeProseLocalized } from "./generator.js";
 import { buildHomeOpportunityNotification } from "./notification.js";
 import { createHash } from "node:crypto";
 //#region src/home-intelligence/host.ts

package/dist/src/providers/setup/profiles.d.ts

@@ -1,4 +1,4 @@
 import type { ProviderSetupProfile } from '@xopcai/gateway-contract';
-/** Plan usage is conservative until a vendor explicitly permits unattended execution. */
-export declare function isInteractiveOnlyProvider(provider: string, baseUrl?: string): boolean;
+/** Provider identity and endpoint do not restrict background or unknown calls. */
+export declare function isInteractiveOnlyProvider(_provider: string, _baseUrl?: string): boolean;
 export declare function getProviderSetupProfile(provider: string, name?: string, oauth?: boolean, baseUrl?: string): ProviderSetupProfile;