@xopcai/xopc 0.0.392 → 0.0.394

package/dist/src/agent/coding/run-verification.d.ts

@@ -9,15 +9,25 @@ export interface CodingVerificationEvidence {
     logPath?: string;
 }
 export declare function toolResultFailed(result: AgentToolResult<unknown>, isError?: boolean): boolean;
+type VerificationOptions = {
+    required?: boolean;
+    toolNames?: string[];
+    workspace?: string;
+};
 /** One run owns its evidence; transcript tool results are the durable record. */
 export declare class RunVerification {
     private readonly snapshot;
+    private readonly options;
     private revision?;
     private changed;
+    private proseOnly;
     private readonly before;
     private readonly evidence;
-    constructor(snapshot: () => Promise<string | undefined>);
-    static open(workspace: string): Promise<RunVerification>;
+    private readonly successfulCommands;
+    private readonly editedProse;
+    private readonly inspectedProse;
+    constructor(snapshot: () => Promise<string | undefined>, options?: VerificationOptions);
+    static open(workspace: string, options?: VerificationOptions): Promise<RunVerification>;
     restore(value: unknown, includeEvidence: boolean): void;
     beforeTool(toolCallId: string, toolName?: string): Promise<void>;
     afterTool(context: AfterToolCallContext): Promise<{
@@ -25,10 +35,15 @@ export declare class RunVerification {
         isError: boolean;
     }>;
     private observeRevision;
+    private pendingEvidence;
+    private hasTool;
+    modelGuidance(): string;
     pendingContext(): Promise<string>;
     summary(): Promise<{
         changed: boolean;
+        proseOnly: boolean;
         revision?: string;
         evidence: CodingVerificationEvidence[];
     }>;
 }
+export {};

package/dist/src/agent/coding/run-verification.js

@@ -1,5 +1,6 @@
 import { readWorkspaceRevision } from "./workspace-revision.js";
 import { classifyVerificationCommand } from "./verification-command.js";
+import { extname, resolve } from "node:path";
 //#region src/agent/coding/run-verification.ts
 const READ_ONLY_TOOLS = new Set([
 	"read_file",
@@ -22,23 +23,44 @@ function toolResultFailed(result, isError = false) {
 		"interrupted"
 	].includes(String(details.status)) || details.timedOut === true || typeof details.exitCode === "number" && details.exitCode !== 0;
 }
+function mutationPaths(name, args) {
+	return (name === "write_file" ? [args.path] : name === "apply_patch" ? [...String(args.patch ?? "").matchAll(/^\*\*\* (?:Add File|Update File|Delete File|Move to): (.+)$/gm)].map((match) => match[1].trim()) : []).filter((path) => typeof path === "string");
+}
+function editsOnlyProse(name, args) {
+	const paths = mutationPaths(name, args);
+	return paths.length > 0 && paths.every((path) => typeof path === "string" && [
+		".md",
+		".txt",
+		".rst",
+		".adoc"
+	].includes(extname(path).toLowerCase()));
+}
 /** One run owns its evidence; transcript tool results are the durable record. */
 var RunVerification = class RunVerification {
 	revision;
 	changed = false;
+	proseOnly = true;
 	before = /* @__PURE__ */ new Map();
 	evidence = /* @__PURE__ */ new Map();
-	constructor(snapshot) {
+	successfulCommands = /* @__PURE__ */ new Map();
+	editedProse = /* @__PURE__ */ new Set();
+	inspectedProse = /* @__PURE__ */ new Map();
+	constructor(snapshot, options = {}) {
 		this.snapshot = snapshot;
+		this.options = options;
 	}
-	static async open(workspace) {
-		const run = new RunVerification(() => readWorkspaceRevision(workspace));
+	static async open(workspace, options = {}) {
+		const run = new RunVerification(() => readWorkspaceRevision(workspace), {
+			...options,
+			workspace
+		});
 		run.revision = await run.snapshot();
 		return run;
 	}
 	restore(value, includeEvidence) {
 		const checkpoint = record(value);
 		this.changed ||= checkpoint.changed === true || typeof checkpoint.revision === "string" && checkpoint.revision !== this.revision;
+		if (this.changed) this.proseOnly &&= checkpoint.proseOnly === true && typeof checkpoint.revision === "string" && checkpoint.revision === this.revision;
 		if (!includeEvidence) return;
 		for (const raw of Array.isArray(checkpoint.evidence) ? checkpoint.evidence : []) {
 			const item = record(raw);
@@ -63,10 +85,14 @@ var RunVerification = class RunVerification {
 		const before = this.before.get(toolCall.id);
 		this.before.delete(toolCall.id);
 		const revision = READ_ONLY_TOOLS.has(toolCall.name) ? this.revision : await this.snapshot();
-		this.observeRevision(revision);
 		const details = record(result.details);
 		const isError = toolResultFailed(result, context.isError);
-		if ((toolCall.name === "apply_patch" || toolCall.name === "write_file") && !isError) this.changed = true;
+		const mutation = toolCall.name === "apply_patch" || toolCall.name === "write_file";
+		this.observeRevision(revision, mutation && !isError);
+		if (mutation && !isError) this.proseOnly &&= editsOnlyProse(toolCall.name, record(args));
+		if (mutation && !isError) this.changed = true;
+		if (mutation && !isError && this.proseOnly) for (const path of mutationPaths(toolCall.name, record(args))) this.editedProse.add(resolve(this.options.workspace ?? ".", path));
+		if (toolCall.name === "read_file" && !isError && revision && revision === before && details.truncated === false && details.offset === 1 && typeof record(args).path === "string") this.inspectedProse.set(resolve(this.options.workspace ?? ".", record(args).path), revision);
 		const command = toolCall.name === "exec_command" || toolCall.name === "managed_job" || toolCall.name === "language_diagnostics" || toolCall.name === "review_workspace" ? String(details.command ?? record(args).cmd ?? "") : "";
 		const kind = toolCall.name === "review_workspace" && details.complete === true ? "diff-review" : toolCall.name === "language_diagnostics" && details.diagnosticEngine === "typescript" ? "check" : classifyVerificationCommand(command);
 		let verification;
@@ -85,35 +111,78 @@ var RunVerification = class RunVerification {
 			};
 			this.evidence.set(command, verification);
 		}
+		const pending = this.pendingEvidence();
+		const commandKey = JSON.stringify([record(args).cwd ?? "", command]);
+		const repeatedSuccess = toolCall.name === "exec_command" && !isError && revision && this.successfulCommands.get(commandKey) === revision;
+		if (toolCall.name === "exec_command" && !isError && details.exitCode === 0 && revision === before && revision) this.successfulCommands.set(commandKey, revision);
+		const verificationHint = this.options.required !== false && !kind && toolCall.name === "exec_command" && pending.includes("check") ? "This command did not record a check; repeating it will not supply missing evidence. Use the existing test runner as a standalone command. If the task has no tests and needs executable assertions, write one test file and run node --test path/to/file.test.mjs (never combine --test with --eval/-e); do not create another competing script. Finish requested files first; use cwd instead of cd, chains, or pipes." : "";
+		const receipt = this.options.required !== false && this.changed && (mutation || command) ? [
+			`Verification pending for current files: ${pending.length ? pending.map((item) => item === "diff-review" ? this.hasTool("review_workspace") ? "review_workspace" : "content inspection" : "standalone assertion test").join(", ") : "none"}.`,
+			verificationHint,
+			verification?.kind === "check" && verification.status === "failed" ? "Resolve the failing assertion against current requirements and source facts before rerunning. Fix the discrepancy, not the expected value blindly; inspect the environment only for an actual runtime error." : "",
+			repeatedSuccess ? "This exact command already succeeded on the same workspace revision. Reuse its result; rerun only for a concrete freshness requirement or changed inputs." : ""
+		].filter(Boolean).join(" ") : "";
 		return {
 			isError,
 			result: {
 				...result,
+				content: [...result.content, ...receipt ? [{
+					type: "text",
+					text: receipt
+				}] : []],
 				details: {
 					...details,
 					workspaceRevision: revision ?? null,
 					workspaceChanged: this.changed,
-					...verification ? { verification } : {}
+					...verification ? { verification } : {},
+					...this.options.required !== false && this.changed ? {
+						verificationPending: pending,
+						...verificationHint ? { verificationHint } : {}
+					} : {}
 				}
 			}
 		};
 	}
-	observeRevision(revision) {
-		if (this.revision && revision !== this.revision) this.changed = true;
+	observeRevision(revision, knownMutation = false) {
+		if (this.revision && revision !== this.revision) {
+			this.changed = true;
+			if (!knownMutation) this.proseOnly = false;
+		}
 		this.revision = revision;
 	}
+	pendingEvidence() {
+		const current = [...this.evidence.values()].filter((item) => item.revision && item.revision === this.revision);
+		return (this.proseOnly && this.changed && !current.some((item) => item.kind === "check" && item.status === "failed") ? ["diff-review"] : ["check", "diff-review"]).filter((kind) => !current.some((item) => item.kind === kind && item.status === "passed") || current.some((item) => item.kind === kind && item.status === "failed"));
+	}
+	hasTool(name) {
+		return this.options.toolNames === void 0 || this.options.toolNames.includes(name);
+	}
+	modelGuidance() {
+		if (this.options.required === false) {
+			if (!this.changed || !this.proseOnly || this.editedProse.size === 0) return "";
+			return !!this.revision && [...this.editedProse].every((path) => this.inspectedProse.get(path) === this.revision) ? "Document changes have been read back in full at the current revision. If all requested requirements are met, give the final answer now. Do not add Git, byte, checksum, or executable checks for wording alone; honor any explicitly requested validation or delivery. State limitations honestly; inspection is not a behavior-test receipt." : "For this prose-only edit, finish the requested wording, then inspect final content once with an available read tool. No assertion script, byte dump, or extra Git inspection is needed. Deliver the result with any capability limitations.";
+		}
+		const focus = "Read the inputs named by the current request directly before listing. Read another file only for a specific unresolved dependency; no neighboring datasets or Git history. Preserve the latest requested root fields, types and units; replace superseded scope. Reuse known facts and update affected files only.";
+		if (!this.changed) return `Execution phase: focused implementation. ${focus} Choose the existing test runner; run checks standalone without shell chains/pipes. No assertion scripts for prose.`;
+		const pending = this.pendingEvidence();
+		const delivery = this.hasTool("exec_command") ? "Link completed workspace files directly. Publish downloadable copies only when requested: plan outputs on the necessary final check in advance, use reuseVerification:true with outputs to reuse an unchanged successful check; never repeat execution just to attach files. Reuse receipts; source, tests and helpers stay in the workspace unless explicitly requested." : this.hasTool("publish_artifacts") ? "Use publish_artifacts only for completed requested deliverables missing a successful receipt, never for blocked edits or source files." : "";
+		if (pending.length === 0) return `Execution phase: verification complete for the observed workspace revision. If all requested fields and deliverables are complete, give the final answer now, briefly linking them with verification and any limitation. Do not repeat input tables or the work log. ${delivery} Stop calling tools when requirements and valid evidence are complete. Do not rerun passing checks, regenerate outputs, publish extra copies, inspect Git/checksums, or edit for discretionary polish. Further edits invalidate current evidence; passing checks alone do not establish that all user requirements are met.`;
+		const missing = pending.map((kind) => kind === "check" ? "a successful standalone assertion test" : this.hasTool("review_workspace") ? "review_workspace" : "content inspection with available read tools");
+		return `Execution phase: complete outstanding requirements, then verify once with a direct command (no cd, chains, or pipes). ${this.proseOnly ? "Inspect final prose once; no assertion script is required." : "Finish outstanding requested changes, then check the final contract once."} Still missing: ${missing.join(", ")}. Reuse valid evidence; report unavailable verification.`;
+	}
 	async pendingContext() {
 		this.observeRevision(await this.snapshot());
-		if (!this.changed) return "";
+		if (!this.changed || this.options.required === false) return "";
 		const current = [...this.evidence.values()].filter((item) => item.revision && item.revision === this.revision);
-		const checked = current.some((item) => item.kind === "check" && item.status === "passed");
+		const checked = !this.pendingEvidence().includes("check");
 		const reviewed = current.some((item) => item.kind === "diff-review" && item.status === "passed");
 		const failed = current.filter((item) => item.kind === "check" && item.status === "failed");
+		if (!this.pendingEvidence().some((kind) => kind === "check" ? this.hasTool("exec_command") || this.hasTool("language_diagnostics") : this.hasTool("review_workspace"))) return "";
 		if (checked && reviewed && failed.length === 0) return "";
 		return [
 			"Workspace changes still need verification against the current files.",
-			...!reviewed ? ["Inspect tracked and untracked changes using `review_workspace`."] : [],
-			...!checked ? ["Run the smallest meaningful check as a direct command using exec_command."] : [],
+			...!reviewed ? [this.hasTool("review_workspace") ? "Inspect tracked and untracked changes using `review_workspace`." : "Inspect final content with available read tools; report any verification that cannot be completed."] : [],
+			...!checked ? [this.hasTool("exec_command") ? "Run the smallest meaningful check as a direct command using exec_command." : "A behavior check is still missing; use available verification tools or report why it is unavailable."] : [],
 			...failed.map((item) => `Resolve or explicitly report the failed check: ${item.command}`),
 			"If a check is unavailable or unrelated to the requested change, report what remains unverified and why. Do not claim verified completion."
 		].join("\n");
@@ -122,6 +191,7 @@ var RunVerification = class RunVerification {
 		this.observeRevision(await this.snapshot());
 		return {
 			changed: this.changed,
+			proseOnly: this.proseOnly,
 			revision: this.revision,
 			evidence: [...this.evidence.values()].map((item) => ({
 				...item,

package/dist/src/agent/context/execution-context.js

@@ -1,11 +1,11 @@
 import { getSqliteDatabase, init_transaction } from "../../storage/sqlite/transaction.js";
 import { init_collaboration_rule_repository, listCollaborationRules } from "../../storage/sqlite/collaboration-rule-repository.js";
-import { canUseKnowledge } from "../../knowledge-memory/usage-policy.js";
-import { listKnowledgeItems, searchKnowledgeItems } from "../../knowledge-memory/repository.js";
-import "../../knowledge-memory/index.js";
 import { listUserAssertions } from "../../user-model/repository.js";
 import { calculateExecutionValue } from "../../user-model/importance.js";
 import { canUseAssertion } from "../../user-model/usage-policy.js";
+import { canUseKnowledge } from "../../knowledge-memory/usage-policy.js";
+import { listKnowledgeItems, searchKnowledgeItems } from "../../knowledge-memory/repository.js";
+import "../../knowledge-memory/index.js";
 import { retrievalLexicalSimilarity } from "../../retrieval/textFeatures.js";
 import { getExecutionContextFeedbackScores } from "./audit.js";
 import { buildUserContextBlock } from "../memory/context-fence.js";

package/dist/src/agent/context/project-context.js

@@ -1,12 +1,12 @@
 import { TaskRepository, init_task_repository } from "../../tasks/task-repository.js";
 import { getSessionMetadata } from "../../storage/sqlite/session-read-repository.js";
 import { init_sqlite } from "../../storage/sqlite/index.js";
+import { TaskReadModelProjector } from "../../tasks/task-read-model-projector.js";
+import { ProjectStore } from "../../projects/project-store.js";
+import { getProjectForSession, getProjectWorkspacePathForSession } from "../../projects/workspace.js";
 import { canUseKnowledge } from "../../knowledge-memory/usage-policy.js";
 import { listKnowledgeItems, searchKnowledgeItems } from "../../knowledge-memory/repository.js";
 import "../../knowledge-memory/index.js";
-import { ProjectStore } from "../../projects/project-store.js";
-import { getProjectForSession, getProjectWorkspacePathForSession } from "../../projects/workspace.js";
-import { TaskReadModelProjector } from "../../tasks/task-read-model-projector.js";
 import { sanitizeForPromptLiteral } from "../prompt/sanitize-for-prompt.js";
 import { LocalAppStore } from "../../local-apps/store.js";
 //#region src/agent/context/project-context.ts

package/dist/src/agent/embedded/agent-profile-context.js

@@ -53,18 +53,25 @@ function createAgentProfileContextExtension(conversationId) {
 				previous: data?.configuration?.[key] ?? null,
 				current: configuration[key] ?? null
 			}]));
+			if (!changed) return;
+			const projected = Object.fromEntries(Object.entries(configuration).filter(([key]) => [
+				"agentId",
+				"name",
+				"role"
+			].includes(key) || changedFields.includes(key)));
 			return {
 				role: "custom",
 				timestamp: Date.now(),
 				customType: AGENT_PROFILE_UPDATE_EVENT,
 				content: JSON.stringify({
-					event: changed ? "agent_configuration_updated" : "agent_configuration_current",
+					event: "agent_configuration_updated",
 					source: "xopc-runtime",
 					...changed ? {
 						changedFields: changedFields.length ? changedFields : ["instructions"],
 						updates
 					} : {},
-					current: configuration
+					scope: "agent_defaults",
+					current: projected
 				}),
 				display: false
 			};
@@ -75,10 +82,9 @@ function createAgentProfileContextExtension(conversationId) {
 		});
 		pi.on("context_with_system", (event, context) => {
 			snapshot ??= snapshotForTurn(context);
-			if (!snapshot) return;
 			const messages = event.messages.filter((message) => message.role !== "system" && !(message.role === "custom" && message.customType === "xopc.agent-profile-update"));
 			const inputIndex = messages.findLastIndex((message) => message.role === "user" || message.role === "custom");
-			messages.splice(inputIndex < 0 ? messages.length : inputIndex, 0, snapshot);
+			if (snapshot) messages.splice(inputIndex < 0 ? messages.length : inputIndex, 0, snapshot);
 			return { messages: [{
 				role: "system",
 				content: context.getSystemPrompt(),

package/dist/src/agent/embedded/codemode-extension.js

@@ -1,5 +1,5 @@
-import { isCodemodeCoreRead } from "../tools/codemode-permissions.js";
 import { getXopcToolMetadata } from "./tool-metadata.js";
+import { isCodemodeCoreRead } from "../tools/codemode-permissions.js";
 import { withDataToolPermissions } from "../tools/dataBatch.js";
 import { retainCodemodeOutput } from "./codemode-output.js";
 import { AsyncLocalStorage } from "node:async_hooks";

package/dist/src/agent/embedded/execution-context.d.ts

@@ -1,3 +1,4 @@
+export declare function withoutEmbeddedExecutionSession<T>(run: () => T): T;
 export declare function runWithEmbeddedExecutionSession<T>(conversationId: string, run: () => T, runId?: string): T;
 export declare function getEmbeddedExecutionSession(): string | undefined;
 export declare function getEmbeddedExecutionRunId(): string | undefined;

package/dist/src/agent/embedded/execution-context.js

@@ -1,6 +1,9 @@
 import { AsyncLocalStorage } from "node:async_hooks";
 //#region src/agent/embedded/execution-context.ts
 const executionSessionStorage = new AsyncLocalStorage();
+function withoutEmbeddedExecutionSession(run) {
+	return executionSessionStorage.exit(run);
+}
 function runWithEmbeddedExecutionSession(conversationId, run, runId) {
 	return executionSessionStorage.run({
 		conversationId,
@@ -14,4 +17,4 @@ function getEmbeddedExecutionRunId() {
 	return executionSessionStorage.getStore()?.runId;
 }
 //#endregion
-export { getEmbeddedExecutionRunId, getEmbeddedExecutionSession, runWithEmbeddedExecutionSession };
+export { getEmbeddedExecutionRunId, getEmbeddedExecutionSession, runWithEmbeddedExecutionSession, withoutEmbeddedExecutionSession };

package/dist/src/agent/embedded/execution-tool-policy.js

@@ -3,8 +3,8 @@ import { init_request_repository, personalRequestForExecution } from "../../pers
 import { getSessionMetadata } from "../../storage/sqlite/session-read-repository.js";
 import { init_session_repository } from "../../storage/sqlite/session-repository.js";
 import { isPersonalConversation } from "../../personal-agent/repository.js";
-import { PERSONAL_MAIN_TOOL_IDS } from "../../personal-agent/policy.js";
 import { TaskConversationRepository } from "../../tasks/task-conversation-repository.js";
+import { PERSONAL_MAIN_TOOL_IDS } from "../../personal-agent/policy.js";
 //#region src/agent/embedded/execution-tool-policy.ts
 init_request_repository();
 init_connection();

package/dist/src/agent/embedded/external-tool-discovery.js

@@ -1,7 +1,7 @@
+import { setXopcToolMetadata } from "./tool-metadata.js";
 import { getEmbeddedExecutionRunId, runWithEmbeddedExecutionSession } from "./execution-context.js";
 import { parseExternalToolRef } from "../external-tools/refs.js";
 import { wrapToolsWithProtection } from "../tools/executor.js";
-import { setXopcToolMetadata } from "./tool-metadata.js";
 import { getExternalToolRegistry } from "../external-tools/tool-registry.js";
 import { createHash } from "node:crypto";
 //#region src/agent/embedded/external-tool-discovery.ts

package/dist/src/agent/embedded/run-for-session.js

@@ -2,13 +2,13 @@ import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
 import { parseTurnOutcome } from "../../../packages/gateway-contract/src/turn-outcome.js";
 import { init_src } from "../../../packages/gateway-contract/src/index.js";
-import { assertProviderUsage, getModelUsageOrigin, init_model_usage, isProviderUsageScopeError } from "../../providers/model-usage.js";
+import { isPersonalConversation } from "../../personal-agent/repository.js";
 import { resolveEffectiveAgentProfileForSession } from "../../config/agent-profile.js";
+import { assertProviderUsage, getModelUsageOrigin, init_model_usage, isProviderUsageScopeError } from "../../providers/model-usage.js";
 import { init_providers, resolveModel } from "../../providers/index.js";
 import { appendDynamicPromptSection } from "../prompt/cache-boundary.js";
 import { setTraceIdentity, startObservation, traceOperation, traceRun } from "../../observability/runtime.js";
 import { resolveAgentTurnTimeoutMs } from "../orchestration/run-agent-turn-with-timeout.js";
-import { isPersonalConversation } from "../../personal-agent/repository.js";
 import { filterExecutionTools, resolveExecutionToolPolicy } from "./execution-tool-policy.js";
 import { runWithEmbeddedExecutionSession } from "./execution-context.js";
 import { resolvePromptCachePolicy } from "../../providers/prompt-cache-plan.js";
@@ -301,6 +301,7 @@ async function runEmbeddedTurnForSessionInner(params) {
 					promptCachePolicy,
 					compactionPolicy: resolveCompactionPolicy(config),
 					workspaceDir,
+					isWorkspaceTrusted: agentManager.isProjectWorkspaceTrusted?.bind(agentManager),
 					sessionStore,
 					timeoutMs: attemptPlan.timeoutMs,
 					turnPolicy,

package/dist/src/agent/embedded/run-turn.js

@@ -6,8 +6,8 @@ import { getConnectionResumeInput, init_connection_wait_repository, isConnection
 import { getSessionMetadata } from "../../storage/sqlite/session-read-repository.js";
 import { init_session_repository } from "../../storage/sqlite/session-repository.js";
 import { init_sqlite } from "../../storage/sqlite/index.js";
-import { ProviderUsageScopeError, init_model_usage } from "../../providers/model-usage.js";
 import { resolveEffectiveAgentConfigForSession } from "../../config/agent-profile.js";
+import { ProviderUsageScopeError, init_model_usage } from "../../providers/model-usage.js";
 import { setTraceIdentity, traceOperation, traceRun, traceTools } from "../../observability/runtime.js";
 import { continuesAfterTool, trackAiUsageStream } from "../../usage/recorder.js";
 import { cloudCreditBudgetStopMessage, isCloudCreditBudgetExhausted, reportCloudCreditError, withCloudCreditBudget } from "../../providers/xopc-cloud-credit-budget.js";
@@ -17,8 +17,8 @@ import { isContextOverflowError } from "../orchestration/context-overflow.js";
 import { ACCEPTANCE_REPAIR_READ_TOOLS, canResumeAfterModelFailure, completedRecoveryToolResult } from "../orchestration/turn-recovery.js";
 import { getAssistantTurnErrorMessage, isAssistantTurnAborted, isAssistantTurnFailed, maybeRetryTurnAfterTransientLlmFailure, stripTrailingErrorAssistantMessages } from "../orchestration/llm-turn-retry.js";
 import { allowsExecutionTool, filterExecutionTools, resolveExecutionToolPolicy } from "./execution-tool-policy.js";
-import { runWithEmbeddedExecutionSession } from "./execution-context.js";
 import { externalPolicyContext, getXopcToolMetadata } from "./tool-metadata.js";
+import { runWithEmbeddedExecutionSession } from "./execution-context.js";
 import { isComputerControlActive, isComputerLeaseTool, stopComputerControl } from "../../computer/control-guard.js";
 import { EmbeddedRunConflictError, abortEmbeddedRun, acquireEmbeddedRunLease, queueEmbeddedSteer } from "./runs.js";
 import { lastAssistantPlainText, subscribeEmbeddedSessionEvents } from "./subscribe-session.js";
@@ -37,6 +37,7 @@ import { isPromptCacheExpired, recordPromptCacheTouch } from "../../providers/pr
 import { markTurnToolResult } from "../memory/turn-provenance.js";
 import { RepositoryInstructions } from "../coding/repository-instructions.js";
 import { RunVerification } from "../coding/run-verification.js";
+import { projectWorkEvidence } from "../coding/projectEvidence.js";
 import { withDelegationScope } from "../orchestration/delegation-scope.js";
 import { getModelThinking } from "../../providers/model-thinking.js";
 import "../messaging/no-reply.js";
@@ -344,13 +345,14 @@ async function runXopcEmbeddedTurnInner(params) {
 	let runLease;
 	let restorePrepareNextTurn;
 	let restorePrepareRequest;
+	let restoreTransformContext;
 	try {
 		runLease = acquireEmbeddedRunLease({
 			conversationId,
 			transcriptId: transcriptRuntime.transcriptId,
 			runId
 		});
-		const instructions = await RepositoryInstructions.open(workspaceDir);
+		const instructions = await RepositoryInstructions.open(workspaceDir, { isWorkspaceTrusted: params.isWorkspaceTrusted });
 		const rootInstructions = await instructions.load(".", true);
 		runner = await acquireEmbeddedSessionRunner({
 			runtimeId: transcriptRuntime.runtimeId,
@@ -469,11 +471,22 @@ async function runXopcEmbeddedTurnInner(params) {
 			if (session.agent.prepareRequest === authoritativePrepareRequest) session.agent.prepareRequest = basePrepareRequest;
 		};
 		const streamFnWithXopcExtensions = wrapStreamFnForXopcExtensions(session.agent.streamFunction, params.promptCachePolicy);
+		let evidenceProjection;
+		const baseTransformContext = session.agent.transformContext;
+		const transformWorkEvidence = async (messages, signal) => {
+			const transformed = await baseTransformContext?.(messages, signal) ?? messages;
+			evidenceProjection = params.verifyChanges ? projectWorkEvidence(transformed) : void 0;
+			return evidenceProjection?.messages ?? transformed;
+		};
+		session.agent.transformContext = transformWorkEvidence;
+		restoreTransformContext = () => {
+			if (session.agent.transformContext === transformWorkEvidence) session.agent.transformContext = baseTransformContext;
+		};
 		const loggingStreamFn = (streamModel, context, options) => {
 			instructions.acknowledge();
 			const sourceMessages = [...context.messages];
 			const hygienicMessages = tryApplySessionTranscriptHygiene(sourceMessages, streamModel);
-			const loopGuard = detectToolLoops(extractRecentToolCalls(hygienicMessages));
+			const loopGuard = detectToolLoops(extractRecentToolCalls(session.agent.state.messages));
 			let effectiveContext = {
 				...context,
 				messages: hygienicMessages
@@ -486,6 +499,16 @@ async function runXopcEmbeddedTurnInner(params) {
 					timestamp: Date.now()
 				}]
 			};
+			const executionGuidance = verification.modelGuidance();
+			if (executionGuidance) effectiveContext = {
+				...effectiveContext,
+				messages: [...effectiveContext.messages, {
+					role: "system",
+					content: "",
+					sections: { "xopc.execution-focus": executionGuidance },
+					timestamp: 0
+				}]
+			};
 			let effectiveSystemPrompt = getCurrentSystemPrompt(effectiveContext.messages);
 			let effectiveTools = getCurrentTools(effectiveContext.messages);
 			const projection = projectContextForModel({
@@ -556,7 +579,12 @@ async function runXopcEmbeddedTurnInner(params) {
 				systemPromptLength: effectiveSystemPrompt.length,
 				messageCount: effectiveContext.messages.filter((message) => message.role !== "system").length,
 				transcriptRepaired: hygienicMessages !== sourceMessages,
+				sharedEvidenceChars: evidenceProjection?.savedChars ?? 0,
+				sharedReviews: evidenceProjection?.sharedReviews ?? 0,
+				sharedReads: evidenceProjection?.sharedReads ?? 0,
 				toolCount: effectiveTools.length,
+				toolSchemaChars: JSON.stringify(effectiveTools).length,
+				estimatedContextTokens: assessed.evaluation.estimatedTokens,
 				lastUserMessagePreview: getLastUserMessagePreview(effectiveContext.messages),
 				loopWarningInjected: !!loopGuard.injection,
 				promptCache: promptCacheSnapshot,
@@ -582,7 +610,9 @@ async function runXopcEmbeddedTurnInner(params) {
 					preparationMs: firstModelRequestAt - preparationStartedAt,
 					messageCount: effectiveContext.messages.length,
 					systemPromptLength: effectiveSystemPrompt.length,
-					toolCount: effectiveTools.length
+					toolCount: effectiveTools.length,
+					toolSchemaChars: JSON.stringify(effectiveTools).length,
+					estimatedContextTokens: assessed.evaluation.estimatedTokens
 				}, "Embedded first model request ready");
 			}
 			return trackAiUsageStream(streamModel, {
@@ -596,7 +626,10 @@ async function runXopcEmbeddedTurnInner(params) {
 			});
 		};
 		session.agent.streamFunction = loggingStreamFn;
-		const verification = await RunVerification.open(workspaceDir);
+		const verification = await RunVerification.open(workspaceDir, {
+			required: params.verifyChanges === true,
+			toolNames: tools.map((tool) => tool.name)
+		});
 		const checkpoints = runner.piSm.getBranch?.() ?? [];
 		const recoveryTurn = params.resumeLastUserMessage === true || Boolean(params.recoveryMessage);
 		const lastStart = checkpoints.findLastIndex((entry) => entry.type === "custom" && entry.customType === "coding_run_started");
@@ -925,6 +958,8 @@ async function runXopcEmbeddedTurnInner(params) {
 			restorePrepareNextTurn = void 0;
 			restorePrepareRequest();
 			restorePrepareRequest = void 0;
+			restoreTransformContext();
+			restoreTransformContext = void 0;
 			runAbortSignal.removeEventListener("abort", abortListener);
 		}
 	} catch (err) {
@@ -966,6 +1001,7 @@ async function runXopcEmbeddedTurnInner(params) {
 	} finally {
 		restorePrepareNextTurn?.();
 		restorePrepareRequest?.();
+		restoreTransformContext?.();
 		runLease?.release();
 		unsubscribe?.();
 		try {

package/dist/src/agent/embedded/session-runner.js

@@ -1,8 +1,8 @@
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
 import { filterExecutionTools, resolveExecutionToolPolicy } from "./execution-tool-policy.js";
-import { isCodemodeCoreRead } from "../tools/codemode-permissions.js";
 import { deferredToolContract, getXopcToolMetadata } from "./tool-metadata.js";
+import { isCodemodeCoreRead } from "../tools/codemode-permissions.js";
 import { abortEmbeddedRun } from "./runs.js";
 import { guardSessionManager } from "./session-tool-result-guard.js";
 import { transformUserMessageForPersistence } from "../inbound/attachment-pipeline.js";

package/dist/src/agent/embedded/session-tool-result-guard.js

@@ -1,5 +1,6 @@
 import { init_string_coerce, normalizeOptionalString } from "../../utils/string-coerce.js";
 import { emitSessionTranscriptUpdate } from "../../session/transcript-events.js";
+import { sanitizeSearchInfo } from "../tools/search/search-info.js";
 import { extractToolCallsFromAssistant, extractToolResultId } from "../transcript/tool-call-id.js";
 import { makeMissingToolResult, sanitizeToolCallInputs } from "../transcript/session-transcript-repair.js";
 import { boundedJsonUtf8Bytes, firstEnumerableOwnKeys, jsonUtf8BytesOrInfinity } from "../../infra/json-utf8-bytes.js";
@@ -109,6 +110,8 @@ function buildPersistedDetailsFallback(src, originalSize, sanitizedBytes) {
 	if (sanitizedBytes !== void 0) fallback.sanitizedDetailsBytes = sanitizedBytes;
 	if (src) {
 		fallback.originalDetailKeys = firstEnumerableOwnKeys(src, 40);
+		const searchInfo = sanitizeSearchInfo(src.searchInfo);
+		if (searchInfo) fallback.searchInfo = searchInfo;
 		for (const key of [
 			"status",
 			"transcriptId",
@@ -150,6 +153,8 @@ function sanitizeToolResultDetailsForPersistence(details) {
 		...originalDetailsSizeFields(originalSize),
 		originalDetailKeys: firstEnumerableOwnKeys(src, 40)
 	};
+	const searchInfo = sanitizeSearchInfo(src.searchInfo);
+	if (searchInfo) out.searchInfo = searchInfo;
 	for (const key of [
 		"status",
 		"transcriptId",

package/dist/src/agent/embedded/types.d.ts

@@ -85,6 +85,8 @@ export type RunXopcEmbeddedTurnParams = {
     codemode?: import('./codemode-extension.js').CodemodePolicy;
     mcp?: import('@earendil-works/pi-coding-agent').LoadedMcpConfig;
     workspaceDir: string;
+    /** Host-owned temporary trust; persisted project decisions always take precedence. */
+    isWorkspaceTrusted?: (workspaceDir: string) => boolean | null | undefined;
     sessionStore?: SessionStore;
     transcriptRuntime?: EmbeddedTranscriptRuntime;
     timeoutMs: number;

package/dist/src/agent/embedded/xopc-tools-bridge.js

@@ -124,7 +124,8 @@ function xopcToolsToDefinitions(tools) {
 						return invalidApplyPatchEnvelopeResult(envelopeError);
 					}
 				}
-				return withDataToolPermissions(new Set(tools.map((item) => item.name)), () => tool.execute(toolCallId, params, signal, onUpdate));
+				const execute = () => tool.execute(toolCallId, params, signal, onUpdate);
+				return tool.name === "data_batch" ? withDataToolPermissions(new Set(tools.map((item) => item.name)), execute) : execute();
 			}
 		};
 	});

package/dist/src/agent/external-tools/cliProvider.js

@@ -5,11 +5,11 @@ import { getConnectorAccount, init_connector_account_repository } from "../../st
 import { appendConnectorExecutionAudit, consumeConnectorApproval, createConnectorApproval, getConnectorApproval, getConnectorConnection, getConnectorInstallation, init_connector_repository } from "../../storage/sqlite/connector-repository.js";
 import { connectorObjectiveScope, init_connection_wait_repository, publishConnectionWait, requireSessionConnection } from "../../storage/sqlite/connection-wait-repository.js";
 import { init_sqlite } from "../../storage/sqlite/index.js";
-import { connectorArgumentsHash, connectorArgumentsPreview } from "../../connectors/approval.js";
-import { connectorPrincipalForSession } from "../../connectors/principal.js";
 import { CapabilityError } from "../../capabilities/runtime/errors.js";
 import { ExternalEffectNotAppliedError, executeExternalOperation } from "../../capabilities/runtime/external-operations.js";
 import "../../capabilities/runtime/dispatcher.js";
+import { connectorPrincipalForSession } from "../../connectors/principal.js";
+import { connectorArgumentsHash, connectorArgumentsPreview } from "../../connectors/approval.js";
 import { selectConnectorAccount } from "../../connectors/account-selection.js";
 import { cliContextPath } from "../../connectors/cli/process.js";
 import { validateActionInput } from "../../connectors/cli/protocol.js";

package/dist/src/agent/external-tools/composio-provider.js

@@ -5,11 +5,11 @@ import { getConnectorAccount } from "../../storage/sqlite/connector-account-repo
 import { consumeConnectorApproval, createConnectorApproval, getConnectorApproval, getConnectorConnection, getConnectorInstallation, listConnectorActionMetadata, listConnectorConnections, listConnectorInstallations, upsertConnectorActionMetadata, upsertConnectorInstallation } from "../../storage/sqlite/connector-repository.js";
 import { bindObjectiveAccount, connectionBinding, connectionBindings, connectorObjectiveScope, init_connection_wait_repository, publishConnectionWait, requireSessionConnection } from "../../storage/sqlite/connection-wait-repository.js";
 import { init_sqlite } from "../../storage/sqlite/index.js";
-import { connectorArgumentsHash, connectorArgumentsPreview } from "../../connectors/approval.js";
-import { canAccessConnectorAccount, currentAccountConnections } from "../../connectors/account-access.js";
-import { connectorPrincipalForSession } from "../../connectors/principal.js";
 import { CapabilityError } from "../../capabilities/runtime/errors.js";
 import { ExternalEffectNotAppliedError, executeExternalOperation } from "../../capabilities/runtime/external-operations.js";
+import { canAccessConnectorAccount, currentAccountConnections } from "../../connectors/account-access.js";
+import { connectorPrincipalForSession } from "../../connectors/principal.js";
+import { connectorArgumentsHash, connectorArgumentsPreview } from "../../connectors/approval.js";
 import { connectorIdentitySummary } from "../../connectors/connector-identity.js";
 import { evaluateConnectorExecutionPolicy } from "../../connectors/policy.js";
 import { ComposioSessionsAdapter } from "../../connectors/composio-sessions.js";

package/dist/src/agent/external-tools/endpoint-provider.js

@@ -1,7 +1,7 @@
-import { init_src } from "../../../packages/computer-control-contract/src/index.js";
-import "../../../packages/browser-control-contract/src/index.js";
 import { ExternalEffectNotAppliedError, executeExternalOperation } from "../../capabilities/runtime/external-operations.js";
 import { canonicalCapabilityJson } from "../../capabilities/runtime/dispatcher.js";
+import { init_src } from "../../../packages/computer-control-contract/src/index.js";
+import "../../../packages/browser-control-contract/src/index.js";
 import { externalToolRef, parseExternalToolRef } from "./refs.js";
 import { extractDocumentText } from "../../document-understanding/extract.js";
 import { prepareImageForModel } from "../image/prepare-image-for-model.js";

package/dist/src/agent/external-tools/extension-provider.js

@@ -1,6 +1,6 @@
+import { getXopcToolMetadata } from "../embedded/tool-metadata.js";
 import { externalToolRef, parseExternalToolRef } from "./refs.js";
 import { executeToolWithProtection } from "../tools/executor.js";
-import { getXopcToolMetadata } from "../embedded/tool-metadata.js";
 //#region src/agent/external-tools/extension-provider.ts
 function toolSummary(tool) {
 	return tool.description || tool.label || tool.name;

package/dist/src/agent/external-tools/gateway-tools.js

@@ -6,9 +6,9 @@ import { connectionBindings, getActiveConnectionWait, init_connection_wait_repos
 import { getSessionMetadata } from "../../storage/sqlite/session-read-repository.js";
 import { init_session_repository } from "../../storage/sqlite/session-repository.js";
 import { connectorPrincipalForSession } from "../../connectors/principal.js";
+import { setXopcToolMetadata } from "../embedded/tool-metadata.js";
 import { listConnectorInstances } from "../../connectors/instances.js";
 import { parseExternalToolRef } from "./refs.js";
-import { setXopcToolMetadata } from "../embedded/tool-metadata.js";
 import { getStoreConnectorInstallPlan, parseStoreConnectorCandidateRef, searchStoreConnectorInstallCandidates } from "../../capabilities/store-connector.js";
 import { assertPersonalRequestAccountAccess } from "../../personal-agent/request-access.js";
 import { connectionCandidates, resolveConnectionCandidate } from "../../connectors/connection-candidates.js";