@xopcai/xopc 0.0.409 → 0.0.411

package/dist/src/agent/messaging/command-handler.js

@@ -28,7 +28,6 @@ var CommandHandler = class {
 	btwQuery;
 	getSessionContextReport;
 	resetSession;
-	getWorkflowRunService;
 	constructor(handlerConfig) {
 		this.config = handlerConfig.config;
 		this.bus = handlerConfig.bus;
@@ -45,7 +44,6 @@ var CommandHandler = class {
 		this.btwQuery = handlerConfig.btwQuery;
 		this.getSessionContextReport = handlerConfig.getSessionContextReport;
 		this.resetSession = handlerConfig.resetSession;
-		this.getWorkflowRunService = handlerConfig.getWorkflowRunService;
 	}
 	/** Replace config reference after hot reload or gateway PATCH so commands see current defaults. */
 	updateAgentConfig(config) {
@@ -138,8 +136,7 @@ var CommandHandler = class {
 			compactSession: this.compactSession,
 			btwQuery: this.btwQuery,
 			emitEvent,
-			getSessionContextReport: this.getSessionContextReport,
-			workflowRunService: this.getWorkflowRunService?.()
+			getSessionContextReport: this.getSessionContextReport
 		});
 		commandContext.sourceContexts = context.sourceContexts;
 		return commandContext;

package/dist/src/agent/prompt/sections/behavior.js

@@ -59,7 +59,7 @@ function buildHumanCollaborationSection(includeExecutionContract = true) {
 			"",
 			"### Task Contract",
 			"- For non-trivial actionable work, privately establish: desired task, completion criteria, constraints, plan, and verification evidence.",
-			"- Keep implementation concepts such as agents, workflows, tools, and memory providers behind the experience unless naming them helps the user decide or debug.",
+			"- Keep implementation concepts such as agents, tools, and memory providers behind the experience unless naming them helps the user decide or debug.",
 			"- Communicate task state in human terms: working, needs a decision, blocked, or done.",
 			"- Completion requires the requested result and proportionate evidence. State unresolved blockers and skipped verification."
 		] : []
@@ -72,7 +72,7 @@ function buildWorkContinuitySection() {
 		"- Continue in the current project when the conversation is already bound to one. Reuse relevant context before creating anything new.",
 		"- When work clearly spans sessions, files, decisions, or dependencies, first make useful progress, then offer in one plain sentence to keep it moving over time. Create durable project/work state only when the user asks for continuity or accepts the offer.",
 		"- When the user names a future time or cadence, recognize that it may be scheduled. Create an automation only after explicit confirmation of the timing and action; otherwise make a concise offer.",
-		"- When continuity or scheduling is explicit and safe, act with the available product tools instead of explaining agents, Tasks, Projects, workflows, or automations.",
+		"- When continuity or scheduling is explicit and safe, act with the available product tools instead of explaining agents, Tasks, Projects, or automations.",
 		"- Phrase offers around the benefit: “keep this moving”, “pick up where we left off”, or “do this for you regularly”. Avoid internal system terminology unless the user asks or it is needed to resolve a problem.",
 		"- Do not repeatedly upsell continuity. Offer only when it materially reduces future effort."
 	].join("\n");

package/dist/src/agent/prompt/sections/tooling.js

@@ -27,7 +27,6 @@ const CORE_TOOL_ORDER = [
 	"session_status",
 	"tool_manual",
 	"delegate_task",
-	"workflow",
 	"automation",
 	"skills_list",
 	"skill_view",
@@ -69,7 +68,6 @@ const CORE_TOOL_SUMMARIES = {
 	session_status: "Show session usage/time/model state",
 	tool_manual: "Load built-in usage manuals for complex tools",
 	delegate_task: "Spawn an isolated sub-agent for a delegated task",
-	workflow: "Start a persisted multi-phase workflow run",
 	automation: "Manage product automations",
 	skills_list: "List available skills",
 	skill_view: "Load a skill SKILL.md or sub-documents",
@@ -118,7 +116,6 @@ function buildToolingSection(params) {
 	const grepToolName = resolveToolName("grep");
 	const findToolName = resolveToolName("find");
 	const hasDelegate = availableTools.has("delegate_task");
-	const hasWorkflow = availableTools.has("workflow");
 	const hasToolManual = availableTools.has("tool_manual");
 	const hasRead = availableTools.has("read_file");
 	const hasPatch = availableTools.has("apply_patch");
@@ -131,7 +128,6 @@ function buildToolingSection(params) {
 	const hasXopcUse = availableTools.has("xopc_use");
 	const orchestrationLines = [];
 	if (hasDelegate) orchestrationLines.push("- Sub-agent delegation → use `delegate_task(goal, context?, mode?, capabilities?, toolset?, budgetTier?, maxIterations?)`. Choose light for narrow lookups, standard for bounded research, and deep for broader investigations. Supply relevant facts and a clear stopping condition; search before reading targeted chunks. Default research inherits available read capabilities. Use implement for isolated worktree changes. Inspect stopReason, budget usage, handoff and rejectedTools; resume incomplete work from the handoff rather than repeating the investigation.");
-	if (hasWorkflow) orchestrationLines.push("- Multi-phase workflows → use `workflow` to start persisted runs with subagents when a script defines phases.");
 	return [
 		"## Tooling",
 		"Tool availability (filtered by policy):",
@@ -154,7 +150,7 @@ function buildToolingSection(params) {
 		hasPlan ? `Use \`${planToolName}\` for multi-step coding work: keep exactly one active step when work is in progress, and update it after meaningful progress or review.` : "",
 		hasToolManual ? "Some complex tools have built-in manuals. Use `tool_manual(tool)` before non-trivial use." : "",
 		...orchestrationLines,
-		hasDelegate || hasWorkflow ? "Do not poll delegate/workflow status in a tight loop; check on-demand or wait for completion." : ""
+		hasDelegate ? "Do not poll delegate status in a tight loop; check on-demand or wait for completion." : ""
 	].filter(Boolean).join("\n");
 }
 function hasSkillsTools(toolNames) {

package/dist/src/agent/prompt/voice-presentation.d.ts

@@ -1,2 +1,2 @@
 /** Per-turn presentation only; never persisted as a user message or Agent identity. */
-export declare const voicePresentationPrompt = "This turn is a live voice conversation in the same Chat.\nLead with the useful answer. Prefer one to three natural spoken sentences unless the user asks for detail.\nAllow silence. Do not repeatedly greet, recap unrelated old tasks, or end every reply with a question.\nFor work, briefly say what you are doing, use the available tools, then report the actual result.\nKeep code, long URLs, tables and detailed reference material in Chat; introduce them with a short spoken explanation.\nDo not imply a task continues in the background unless an existing task or workflow actually started it.\nAsk ordinary follow-up questions directly in speech, then let the user answer in the next turn; do not use a blocking clarification form. Keep formal action approvals in the existing approval mechanism. A background sound or ambiguous interjection is not permission for an action.\nStopping speech does not undo a completed tool action. State consequential results accurately.";
+export declare const voicePresentationPrompt = "This turn is a live voice conversation in the same Chat.\nLead with the useful answer. Prefer one to three natural spoken sentences unless the user asks for detail.\nAllow silence. Do not repeatedly greet, recap unrelated old tasks, or end every reply with a question.\nFor work, briefly say what you are doing, use the available tools, then report the actual result.\nKeep code, long URLs, tables and detailed reference material in Chat; introduce them with a short spoken explanation.\nDo not imply a task continues in the background unless an existing task actually started it.\nAsk ordinary follow-up questions directly in speech, then let the user answer in the next turn; do not use a blocking clarification form. Keep formal action approvals in the existing approval mechanism. A background sound or ambiguous interjection is not permission for an action.\nStopping speech does not undo a completed tool action. State consequential results accurately.";

package/dist/src/agent/prompt/voice-presentation.js

@@ -5,7 +5,7 @@ Lead with the useful answer. Prefer one to three natural spoken sentences unless
 Allow silence. Do not repeatedly greet, recap unrelated old tasks, or end every reply with a question.
 For work, briefly say what you are doing, use the available tools, then report the actual result.
 Keep code, long URLs, tables and detailed reference material in Chat; introduce them with a short spoken explanation.
-Do not imply a task continues in the background unless an existing task or workflow actually started it.
+Do not imply a task continues in the background unless an existing task actually started it.
 Ask ordinary follow-up questions directly in speech, then let the user answer in the next turn; do not use a blocking clarification form. Keep formal action approvals in the existing approval mechanism. A background sound or ambiguous interjection is not permission for an action.
 Stopping speech does not undo a completed tool action. State consequential results accurately.`;
 //#endregion

package/dist/src/agent/service/direct-turn-helpers.js

@@ -35,7 +35,7 @@ async function hydratePerTurnState(deps, conversationId, thinking) {
 * can persist the receipt or stream it as a token.
 */
 async function tryRunSlashCommand(deps, ctx, content, options) {
-	if (options?.origin?.type === "system" && options.origin.source === "workflow") return {
+	if (options?.origin?.type === "system" && options.origin.source === "task") return {
 		matched: false,
 		aggregatedText: ""
 	};

package/dist/src/agent/service/process-direct-streaming.js

@@ -291,12 +291,6 @@ async function* runProcessDirectStreamingInner(deps, input) {
 					webchatSlashReceipt = "Command finished with no assistant text. A task continuation may still be scheduled automatically.";
 					pushAssistantReceipt(queue, webchatSlashReceipt, input.runId);
 				}
-				const workflowRun = slash.metadata?.workflowRun;
-				if (workflowRun && typeof workflowRun === "object") queue.push({
-					type: "workflow_run_started",
-					runId: input.runId,
-					payload: { workflowRun }
-				});
 				return;
 			}
 			const skillTurn = deps.agentManager.prepareSkillTurn(conversationId, authoredText);

package/dist/src/agent/service.d.ts

@@ -79,7 +79,6 @@ export declare class AgentService {
     private sessionLifecycleManager;
     private agentOrchestrator;
     private agentEventHandler;
-    private workflowProgressBrokerHandle;
     private agentManager;
     /**
      * Unified per-session state container (replaces six ad-hoc Maps). Owns webchat
@@ -118,7 +117,6 @@ export declare class AgentService {
     setWorkspaceTrust(workspacePath: string, trusted: boolean): WorkspaceTrustState;
     getCapabilityCatalog(conversationId?: string): AgentCapabilityCatalogEntry[];
     getSkillMarkdownSource(skillName: string): SkillMarkdownPreviewPayload | null;
-    getWorkflowSkillInstructions(agentId: string, names: readonly string[]): string | undefined;
     refreshSkillsAfterDiskChange(): void;
     refreshSkillsAfterTrustChange(): void;
     installSkillFromSource(opts: SkillInstallToolOptions): Promise<SkillInstallToolResult>;

package/dist/src/agent/service.js

@@ -68,8 +68,6 @@ import "./session/index.js";
 import { AgentOrchestrator } from "./orchestration/agent-orchestrator.js";
 import { AgentEventHandler } from "./orchestration/agent-event-handler.js";
 import "./orchestration/index.js";
-import { getWorkflowProgressBroker } from "./workflow/progress-broker.js";
-import "./workflow/index.js";
 import { TaskJudgeService } from "./tasks/task-judge-service.js";
 import { analyzeResponseLanguage } from "../i18n/language-consistency.js";
 import { readFile } from "node:fs/promises";
@@ -154,7 +152,6 @@ var AgentService = class {
 	sessionLifecycleManager;
 	agentOrchestrator;
 	agentEventHandler;
-	workflowProgressBrokerHandle = null;
 	agentManager;
 	/**
 	* Unified per-session state container (replaces six ad-hoc Maps). Owns webchat
@@ -246,7 +243,6 @@ var AgentService = class {
 			dispatchTaskEvents: config.dispatchTaskEvents,
 			dispatchTaskRuns: config.dispatchTaskRuns,
 			onAgentCatalogMutate: config.onAgentCatalogMutate,
-			getWorkflowRunService: config.getWorkflowRunService,
 			onSkillsUpdated: config.onSkillsUpdated,
 			installSkillFromSource: (opts) => this.installSkillFromSource(opts),
 			installSkillFromMarketplace: (opts) => this.installSkillFromMarketplace(opts),
@@ -273,7 +269,6 @@ var AgentService = class {
 			if (analysis.compliant) log.debug(fields, "Assistant response language check passed");
 			else log.warn(fields, "Assistant response language did not match the active preference");
 		});
-		this.workflowProgressBrokerHandle = getWorkflowProgressBroker().attachTo(this.agentEventHandler);
 		this.sessionHydrator = new SessionHydrator({
 			sessionConfigStore: this.sessionConfigStore,
 			agentManager: this.agentManager,
@@ -311,7 +306,6 @@ var AgentService = class {
 			bus,
 			sessionStore: this.sessionStore,
 			sessionConfigStore: this.sessionConfigStore,
-			getWorkflowRunService: config.getWorkflowRunService,
 			applySessionThinkingLevel: (conversationId, level) => {
 				this.agentManager.setThinkingLevel(conversationId, level);
 			},
@@ -528,9 +522,6 @@ var AgentService = class {
 	getSkillMarkdownSource(skillName) {
 		return this.agentManager.getSkillMarkdownSource(skillName);
 	}
-	getWorkflowSkillInstructions(agentId, names) {
-		return this.agentManager.getWorkflowSkillInstructions(agentId, names);
-	}
 	refreshSkillsAfterDiskChange() {
 		this.agentManager.refreshSkillsAfterDiskChange();
 	}
@@ -885,8 +876,6 @@ var AgentService = class {
 		this.sessionTracker.dispose();
 		this.sessionState.disposeAll();
 		this.agentManager.dispose();
-		this.workflowProgressBrokerHandle?.dispose();
-		this.workflowProgressBrokerHandle = null;
 	}
 };
 //#endregion

package/dist/src/agent/service.types.d.ts

@@ -60,8 +60,6 @@ export interface AgentServiceConfig {
      * without persisting a trust entry; gateway mode leaves trust fully persistent.
      */
     isWorkspaceTrusted?: (workspaceDir: string) => boolean | null | undefined;
-    /** Gateway: persisted workflow runs. */
-    getWorkflowRunService?: () => import('../workflows/service/workflow-run-service.types.js').WorkflowRunServiceLike;
     /** Gateway: resolves bound source context (e.g. Note-grounded chat) before each turn. */
     sourceContextResolver?: AgentSourceContextResolver;
 }

package/dist/src/agent/session/session-config-service.d.ts

@@ -32,8 +32,6 @@ export interface PatchSessionAgentConfigInput {
     model?: string | null;
     /** Preferred activity-detail field. `null` clears the session override. */
     activityDetailLevel?: string | null;
-    /** @deprecated Use activityDetailLevel. */
-    reasoningLevel?: string | null;
     verboseLevel?: string;
     workingDirectory?: string;
     responseLanguage?: string | null;

package/dist/src/agent/session/session-config-service.js

@@ -76,7 +76,7 @@ var SessionConfigService = class {
 				this.opts.modelManager.restoreSessionModel(conversationId, modelRef, updated.fixedModel === true);
 			}
 		}
-		const activityDetailLevel = partial.activityDetailLevel !== void 0 ? partial.activityDetailLevel : partial.reasoningLevel;
+		const activityDetailLevel = partial.activityDetailLevel;
 		if (activityDetailLevel !== void 0) if (activityDetailLevel === null) await this.opts.sessionConfigStore.update(conversationId, { reasoningLevel: void 0 });
 		else {
 			const normalized = normalizeReasoningLevel(activityDetailLevel);

package/dist/src/agent/session/session-inspector.d.ts

@@ -47,7 +47,6 @@ export interface SessionAgentConfigView {
     model: string;
     configVersion: number;
     fixedModel: boolean;
-    reasoningLevel: ReasoningLevel;
     activityDetail: {
         default: ReasoningLevel;
         override: ReasoningLevel | null;

package/dist/src/agent/session/session-inspector.js

@@ -146,7 +146,6 @@ var SessionInspector = class {
 			model: sc?.modelOverride ?? model,
 			configVersion: sc?.updatedAt ?? 0,
 			fixedModel: sc?.fixedModel === true,
-			reasoningLevel,
 			activityDetail: {
 				default: defReason,
 				override: sc?.reasoningLevel ?? null,

package/dist/src/agent/skills/required-env-vars.d.ts

@@ -1,5 +1,5 @@
 /**
- * Parse Hermes-style `required_environment_variables` and legacy / xopc `requires.env` into a deduped name list.
+ * Parse Hermes-style `required_environment_variables` and xopc `requires.env` into a deduped name list.
  */
 /** POSIX-style env var names we allow for passthrough registration. */
 export declare const SKILL_ENV_VAR_NAME_RE: RegExp;

package/dist/src/agent/skills/required-env-vars.js

@@ -1,7 +1,7 @@
 import { normalizeStringList } from "./skill-tool-gating.js";
 //#region src/agent/skills/required-env-vars.ts
 /**
-* Parse Hermes-style `required_environment_variables` and legacy / xopc `requires.env` into a deduped name list.
+* Parse Hermes-style `required_environment_variables` and xopc `requires.env` into a deduped name list.
 */
 /** POSIX-style env var names we allow for passthrough registration. */
 const SKILL_ENV_VAR_NAME_RE = /^[A-Za-z_][A-Za-z0-9_]*$/;

package/dist/src/agent/tool-manuals/xopc-use.d.ts

@@ -1 +1 @@
-export declare const xopcUseManual = "# XOPC Use Tool Manual\n\n## Purpose\n\n`xopc_use` operates first-class XOPC product objects without editing SQLite or product files directly.\nLoad this manual before a non-trivial mutation. For focused configuration workflows use\n`tool_manual({tool:\"xopc_use\",topic:\"agent|settings|automation|connections\"})`.\nFor identity-only changes prefer `agent patch_profile {id,expectedRevision,patch,idempotencyKey?}`,\nwhich preserves omitted profile fields. Existing update keeps replacement semantics for profile.\n\n```json\n{\n  \"mode\": \"agent | project | automation | note | task | task_run | chat_preview | local_app | settings\",\n  \"command\": \"...\",\n  \"args\": {},\n  \"dryRun\": false\n}\n```\n\nSend one object command per call. Inspect the returned JSON `ok` field; a tool call can\ncomplete successfully while the product command returns `ok: false`.\n\n## Object routing\n\n| Object | Tool |\n| --- | --- |\n| Agent definition and default Agent | `xopc_use` mode `agent` |\n| Project, milestone, project update | `xopc_use` mode `project` |\n| Automation | `xopc_use` mode `automation` |\n| Task intent and lifecycle | `xopc_use` mode `task` |\n| Task execution attempt, receipt, events and waits | `xopc_use` mode `task_run` |\n| Note | `xopc_use` mode `note` |\n| Lightweight UI preview | `xopc_use` mode `chat_preview` |\n| Local app | `xopc_use` mode `local_app` |\n| Settings jump target | `xopc_use` mode `settings` |\n| Workflow run | dedicated `workflow` tool; pass `taskId` to link it to a Task |\n| Session, memory, skill, connected app or workspace file | its dedicated tool |\n\nDo not emulate Workflow APIs through `xopc_use`. A Task is durable intent;\na TaskRun is one execution attempt; a WorkflowRun is a procedure execution and may belong\nto a TaskRun. Never treat these three objects as interchangeable.\n\n## Agents\n\nCommands: `list`, `get`, `create`, `update`, `set_default`, `disable`,\n`delete`, and `purge`.\n\nAn Agent profile stores `name` and optional `description`, `creature`, `style`, `language`,\n`emoji`, and `avatar` identity fields. Use `instructions` for short execution rules.\nPut personality in SOUL.md and ongoing work guidance in AGENTS.md.\n\n```json\n{\n  \"mode\": \"agent\",\n  \"command\": \"create\",\n  \"args\": {\n    \"id\": \"xiaomei\",\n    \"profile\": {\n      \"name\": \"\u5C0F\u7F8E\",\n      \"description\": \"\u5E2E\u52A9\u6574\u7406\u65E5\u5E38\u4E8B\u9879\",\n      \"language\": \"zh-CN\",\n      \"style\": \"\u6E29\u67D4\u3001\u4EB2\u5207\",\n      \"instructions\": \"\u7ED9\u51FA\u64CD\u4F5C\u5EFA\u8BAE\u524D\u5148\u6838\u5BF9\u5173\u952E\u4E8B\u5B9E\u3002\"\n    },\n    \"idempotencyKey\": \"create-agent-xiaomei\"\n  }\n}\n```\n\nUse `list` before creating an Agent so an existing id is updated rather than duplicated.\nMutations other than `create` require the current `expectedRevision`; `set_default` uses\nthe catalog revision returned by `list`. `delete` preserves on-disk data, while `purge`\nalso removes it. Use `dryRun: true` to validate the exact same input contract without writing.\n\n## Reliable protocol\n\n1. Use `list` then `get` when an id is unknown.\n2. Read the current `version` before a Task mutation.\n3. Use `dryRun: true` for broad Project changes or uncertain mutations.\n4. Mutate once with the exact id and current concurrency token.\n5. Verify the returned object and preserve any \u201COpen in xopc\u201D delivery link.\n6. On a conflict, read again and reconsider the operation; do not blindly retry.\n\nTimestamps are Unix epoch milliseconds. Array fields are arrays of strings. Omission\npreserves a patchable field; an empty array intentionally clears it. Prefer explicit\n`projectId`, `taskId`, `runId`, `noteId`, and `localAppId` fields over `id`.\n\n## Projects\n\nCommands: `list`, `get`, `create`, `update`, `resolve_workspace`,\n`list_milestones`, `create_milestone`, `update_milestone`, `list_updates`,\nand `create_update`.\n\nProject statuses: `planned`, `active`, `paused`, `completed`, `cancelled`,\n`archived`. Health values: `unknown`, `on_track`, `at_risk`, `off_track`.\n\nA Project defines bounded shared context for related work. Its durable planning fields are `outcome`,\n`successCriteria`, `scope`, `nonGoals`, `ownerId`, `targetAt`, and `health`.\nUse `brief` for a concise description and `instructions` for durable operating guidance.\n\n### Create\n\n```json\n{\n  \"mode\": \"project\",\n  \"command\": \"create\",\n  \"args\": {\n    \"name\": \"AI Product Research\",\n    \"outcome\": \"Choose a validated product direction\",\n    \"successCriteria\": [\"Ten customer interviews\", \"Decision recorded\"],\n    \"scope\": { \"market\": \"developer tools\" },\n    \"nonGoals\": [\"Build the production product\"],\n    \"health\": \"on_track\",\n    \"targetAt\": 1760000000000,\n    \"workspaceRoot\": \"/path/to/repo\"\n  }\n}\n```\n\n### Update\n\n```json\n{\n  \"mode\": \"project\",\n  \"command\": \"update\",\n  \"args\": {\n    \"projectId\": \"project_id\",\n    \"status\": \"active\",\n    \"health\": \"at_risk\",\n    \"successCriteria\": [\"Ten interviews\", \"Evidence-backed decision\"]\n  }\n}\n```\n\n### Resolve a workspace\n\nUse `autoCreate: false` for lookup. Set it to true only when creating a Project is authorized.\n\n```json\n{ \"mode\": \"project\", \"command\": \"resolve_workspace\", \"args\": { \"workspacePath\": \"/path/to/repo\", \"autoCreate\": false } }\n```\n\n### Milestones\n\nMilestone statuses: `planned`, `active`, `completed`, `cancelled`.\n\n```json\n{\n  \"mode\": \"project\",\n  \"command\": \"create_milestone\",\n  \"args\": {\n    \"projectId\": \"project_id\",\n    \"title\": \"Finish discovery\",\n    \"status\": \"active\",\n    \"targetAt\": 1760000000000,\n    \"sortOrder\": 10\n  }\n}\n```\n\nUse `list_milestones` with `projectId`. Use `update_milestone` with both\n`projectId` and `milestoneId`. Milestone deletion is intentionally not exposed.\n\n### Immutable project updates\n\nProject updates are append-only progress snapshots. They also update Project health.\n\n```json\n{\n  \"mode\": \"project\",\n  \"command\": \"create_update\",\n  \"args\": {\n    \"projectId\": \"project_id\",\n    \"health\": \"on_track\",\n    \"summary\": \"Discovery is complete\",\n    \"progress\": [\"Interviewed ten users\"],\n    \"risks\": [\"Pricing remains unvalidated\"],\n    \"nextSteps\": [\"Run pricing tests\"]\n  }\n}\n```\n\nUse `list_updates` with `projectId` and optional `limit`. Updates cannot be edited.\n\n## Automations\n\nCommands: `list`, `get`, `create`, `update`, `delete`, `run`, `pause`,\n`resume`, and `history`.\n\nAutomation `create` automatically uses the current session Project when `projectId` is\nomitted. An explicit `projectId` takes precedence and is validated before mutation. Use an\nexplicit id when creating for a Project other than the current session Project.\n\n### Create in the current Project\n\n`trigger` and `action` use the same shapes as the Automation product API.\n\n```json\n{\n  \"mode\": \"automation\",\n  \"command\": \"create\",\n  \"args\": {\n    \"name\": \"Daily project review\",\n    \"trigger\": { \"kind\": \"schedule\", \"schedule\": { \"kind\": \"cron\", \"expr\": \"0 9 * * 1-5\", \"tz\": \"Asia/Shanghai\" } },\n    \"action\": { \"kind\": \"agent\", \"instruction\": \"Review the current project and summarize risks.\" }\n  }\n}\n```\n\nTo override the inherited Project, add `\"projectId\": \"project_id\"` to `args`.\nThe create payload may also be nested under `args.automation`; top-level `args.projectId`\nhas precedence.\n\n### List and history\n\n`list` and unqualified `history` inherit the current session Project. Pass an explicit\n`projectId` to query another Project. Pass `automationId` to `history` for one Automation.\n\n### Update and operate\n\nUse `automationId` for `get`, `update`, `delete`, `run`, `pause`, and `resume`.\nFor `update`, patch fields may be direct args or nested under `args.patch`. Supplying a new\n`projectId` reassigns the Automation after validating the target Project.\n\n## Tasks\n\nTask locale follows the conversation response language, then the user request and profile.\nKeep every user-facing contract field (criteria, expected outputs, constraints, assumptions and risks)\nin that language, even when attached source material is English. Preserve paths, URLs and proper nouns.\nAn explicit locale must reflect the user\u2019s language choice.\n\nCommands: `list`, `get`, `create`, `delegated_tasks`, `collaboration`,\n`collaboration_post`, `update_dependencies`, `add_context`, `remove_context`,\n`command`, and `delete`.\n\nTask phases are `backlog`, `ready`, `active`, `review`, and `closed`.\nOperational state is projected separately as `idle`, `queued`, `running`, `waiting`,\n`verifying`, `succeeded`, `failed`, or `cancelled`. Never send either value as a\nfree-form status update.\n\n`task.get` returns the Task, its projected `model`, dependencies, dependents, context,\nauthority grants, TaskRuns, receipts, and waits.\nThe projected model is the correct source for current operational state and attention items.\n\n`delete` permanently removes the Task and its contracts, waits, context links, TaskRuns,\nreceipts, and Task-owned execution records. It does not delete linked Sessions, workspace files,\nor external artifacts. Cancel an active TaskRun before deletion, and use `dryRun: true` when\nthe user's intent is ambiguous.\n\n```json\n{ \"mode\": \"task\", \"command\": \"delete\", \"args\": { \"taskId\": \"task_id\" }, \"dryRun\": true }\n```\n\n### Capture or start\n\n`createMode` defaults to `capture`, which creates a backlog Task without executing it.\nUse `start` only when immediate execution is intended.\n\nFor an immediate delegated task, use the minimal call below. The objective can include the\nworker instructions and constraints; optional lists are unnecessary for a simple delegation.\n\n```json\n{ \"mode\": \"task\", \"command\": \"create\", \"args\": { \"objective\": \"Calculate the requested result and report progress\", \"createMode\": \"start\" } }\n```\n\n```json\n{\n  \"mode\": \"task\",\n  \"command\": \"create\",\n  \"args\": {\n    \"objective\": \"Complete the customer research report\",\n    \"projectId\": \"project_id\",\n    \"createMode\": \"capture\",\n    \"priority\": \"high\",\n    \"expectedOutputs\": [\"Research report\"],\n    \"acceptanceCriteria\": [\"Sources are cited\"],\n    \"constraints\": [\"Do not contact customers without approval\"],\n    \"dependsOnTaskIds\": []\n  }\n}\n```\n\n### Main Agent and worker collaboration\n\nThe user-facing Agent can call `delegated_tasks` to list Tasks created from this conversation,\nthen `collaboration` with `{ \"taskId\": \"...\", \"afterSequence\": 0 }` to read the ordered board.\nUse the Task and TaskRun receipt as the final source of execution status.\n\nUse `collaboration_post` with `taskId`, `kind`, `body`, and a stable `idempotencyKey`.\nThe main Agent may write `instruction`, `question`, or `answer`; answers include\n`causationId` of the worker's question. The worker may write `progress`, `question`,\nor `ack`; acknowledgements include `causationId` of the instruction. A worker question\npauses the active TaskRun. After posting it, stop the execution turn and wait for an answer.\nAn instruction is first recorded, then delivered to the worker conversation, and is only\nconfirmed when the worker acknowledges it. Ordinary progress does not interrupt the user.\n\n```json\n{ \"mode\": \"task\", \"command\": \"collaboration_post\", \"args\": { \"taskId\": \"task_id\", \"kind\": \"progress\", \"body\": \"Completed source review\", \"idempotencyKey\": \"stable-key\" } }\n```\n\n### Dependencies\n\n```json\n{\n  \"mode\": \"task\",\n  \"command\": \"update_dependencies\",\n  \"args\": {\n    \"taskId\": \"task_id\",\n    \"expectedVersion\": 3,\n    \"dependsOnTaskIds\": [\"dependency_task_id\"]\n  }\n}\n```\n\n### Context links\n\nUse `add_context` to link a document, file, URL, session, memory, Task, artifact, or source\nas `input`, `reference`, `constraint`, `deliverable`, or `evidence` context.\n\n```json\n{\n  \"mode\": \"task\",\n  \"command\": \"add_context\",\n  \"args\": {\n    \"taskId\": \"task_id\",\n    \"targetKind\": \"file\",\n    \"targetId\": \"/path/to/spec.md\",\n    \"role\": \"input\",\n    \"title\": \"Product specification\",\n    \"pinned\": true,\n    \"retrievalPolicy\": {},\n    \"metadata\": {}\n  }\n}\n```\n\nUse `remove_context` with `taskId` and the exact `edgeId` returned by `task.get`.\nDo not add authority grants through this tool; an Agent must not authorize itself.\n\n### Typed lifecycle commands\n\nEvery command requires `taskId`, the Task's current `expectedVersion`, a `type`, and\ntype-specific fields inside `commandArgs`.\n\nSupported command types:\n\n- `mark_ready`\n- `start`: `{ \"executor\": { \"kind\": \"agent\", \"agentId\": \"main\" } }`\n- `request_review`\n- `close`: `{ \"resolution\": \"done | cancelled | duplicate | wont_do\" }`\n- `reopen`: `{ \"phase\": \"ready | active\" }`\n- `add_wait`: `{ \"wait\": { \"kind\": \"dependency | approval | input | schedule | external | paused\", \"reason\": \"...\", \"condition\": {} } }`\n- `resolve_wait`: `{ \"waitId\": \"wait_id\", \"resolution\": {} }`\n- `delegate`: `{ \"agentId\": \"agent_id\" }`\n- `revise_contract`: `{ \"contract\": { ...complete contract... } }`\n\n```json\n{\n  \"mode\": \"task\",\n  \"command\": \"command\",\n  \"args\": {\n    \"taskId\": \"task_id\",\n    \"expectedVersion\": 3,\n    \"type\": \"start\",\n    \"commandArgs\": {\n      \"executor\": { \"kind\": \"agent\", \"agentId\": \"main\" }\n    }\n  }\n}\n```\n\nContract revision is replacement, not a patch. Read the Task and preserve all contract fields\nthe user did not ask to change. Resolve a wait through `resolve_wait`; do not directly mutate\na TaskRun or manufacture a phase transition.\n\n## TaskRuns\n\nTaskRun inspection is read-only except for explicit cancellation. Other execution state is\ncontrolled by Task commands and the runtime coordinator.\n\n### List attempts for a Task\n\n```json\n{ \"mode\": \"task_run\", \"command\": \"list\", \"args\": { \"taskId\": \"task_id\", \"limit\": 20 } }\n```\n\nThe result contains run attempts, finalized receipts, and active waits.\n\n### Inspect one attempt\n\n```json\n{ \"mode\": \"task_run\", \"command\": \"get\", \"args\": { \"runId\": \"run_id\" } }\n```\n\nThe result contains the TaskRun, its receipt when terminal, ordered events, and active Task waits.\n\n### Cancel an attempt\n\nRead the run first, then pass its current version. Cancellation creates a terminal receipt.\n\n```json\n{\n  \"mode\": \"task_run\",\n  \"command\": \"cancel\",\n  \"args\": { \"runId\": \"run_id\", \"expectedVersion\": 2, \"reason\": \"User cancelled execution\" }\n}\n```\n\nDo not guess commands such as retry, force-complete, heartbeat, or transition; they are not Agent APIs.\n\n## Notes\n\nCommands: `list`, `get`, `create`, `append`, `preview_edit`, `update`, and `delete`.\nUse Notes for durable prose and reference material, not as a Task substitute. Prefer `append`\nwhen preserving user content. Use `preview_edit` before a canonical rewrite.\n\n```json\n{ \"mode\": \"note\", \"command\": \"create\", \"args\": { \"title\": \"Decision\", \"markdown\": \"...\", \"projectId\": \"project_id\" } }\n```\n\n```json\n{ \"mode\": \"note\", \"command\": \"append\", \"args\": { \"noteId\": \"note_id\", \"heading\": \"AI synthesis\", \"content\": \"...\" } }\n```\n\nUse `update` with `status: \"trashed\"` for a recoverable removal. `delete` permanently\nremoves the Note and its stored snapshots and media; use `dryRun: true` first when the\nuser's intent is ambiguous.\n\n```json\n{ \"mode\": \"note\", \"command\": \"delete\", \"args\": { \"noteId\": \"note_id\" }, \"dryRun\": true }\n```\n\n## Chat previews, local apps, and settings\n\nUse `chat_preview` by default when the user asks to design, mock up, or quickly show a UI in\nthe current conversation. It creates no Project and no Local App. Commands are `create`,\n`get`, and `revise`. Source consists of `markup`, `styles`, and optional `script`;\ndo not include a full HTML document or remote dependencies. Revision requires the exact\n`baseRevision` returned by the prior call.\n\nUse `local_app` only when the user explicitly asks for a durable, installable app or chooses\n\u201CSave as app\u201D on a chat preview. Do not create a Local App merely to render a UI draft.\n\nLocal app commands are `list`, `get`, `create`, and `validate`. Installation,\nactivation, rollback, and uninstall remain product runtime operations.\n\nSettings supports only `open` and returns an exact product jump target without changing config.\n\n## Error recovery\n\n| Result | Recovery |\n| --- | --- |\n| service unavailable | Stop retrying and report the unavailable capability. |\n| not found | Re-list in the intended scope; do not invent another id. |\n| conflict | Read the current object and reassess using its latest version. |\n| waiting | Inspect the Task projection and TaskRun waits; resolve only the real blocker. |\n| invalid command or state | Read the object and use only a documented transition. |\n| unsupported operation | Use the dedicated tool or product UI; never write storage directly. |\n\n## Deliberate boundaries\n\n- Project deletion and milestone deletion are not Agent APIs.\n- TaskRun mutation is internal to execution coordination except for optimistic cancellation.\n- Project updates are immutable.\n- Workflow and Automation operations remain in their dedicated tools.\n- Only the documented Task and TaskRun commands are valid; do not infer hidden aliases.\n";
+export declare const xopcUseManual = "# XOPC Use Tool Manual\n\n## Purpose\n\n`xopc_use` operates first-class XOPC product objects without editing SQLite or product files directly.\nLoad this manual before a non-trivial mutation. For focused configuration workflows use\n`tool_manual({tool:\"xopc_use\",topic:\"agent|settings|automation|connections\"})`.\nFor identity-only changes prefer `agent patch_profile {id,expectedRevision,patch,idempotencyKey?}`,\nwhich preserves omitted profile fields. Existing update keeps replacement semantics for profile.\n\n```json\n{\n  \"mode\": \"agent | project | automation | note | task | task_run | chat_preview | local_app | settings\",\n  \"command\": \"...\",\n  \"args\": {},\n  \"dryRun\": false\n}\n```\n\nSend one object command per call. Inspect the returned JSON `ok` field; a tool call can\ncomplete successfully while the product command returns `ok: false`.\n\n## Object routing\n\n| Object | Tool |\n| --- | --- |\n| Agent definition and default Agent | `xopc_use` mode `agent` |\n| Project, milestone, project update | `xopc_use` mode `project` |\n| Automation | `xopc_use` mode `automation` |\n| Task intent and lifecycle | `xopc_use` mode `task` |\n| Task execution attempt, receipt, events and waits | `xopc_use` mode `task_run` |\n| Note | `xopc_use` mode `note` |\n| Lightweight UI preview | `xopc_use` mode `chat_preview` |\n| Local app | `xopc_use` mode `local_app` |\n| Settings jump target | `xopc_use` mode `settings` |\n| Session, memory, skill, connected app or workspace file | its dedicated tool |\n\nA Task is durable intent; a TaskRun is one execution attempt.\n\n## Agents\n\nCommands: `list`, `get`, `create`, `update`, `set_default`, `disable`,\n`delete`, and `purge`.\n\nAn Agent profile stores `name` and optional `description`, `creature`, `style`, `language`,\n`emoji`, and `avatar` identity fields. Use `instructions` for short execution rules.\nPut personality in SOUL.md and ongoing work guidance in AGENTS.md.\n\n```json\n{\n  \"mode\": \"agent\",\n  \"command\": \"create\",\n  \"args\": {\n    \"id\": \"xiaomei\",\n    \"profile\": {\n      \"name\": \"\u5C0F\u7F8E\",\n      \"description\": \"\u5E2E\u52A9\u6574\u7406\u65E5\u5E38\u4E8B\u9879\",\n      \"language\": \"zh-CN\",\n      \"style\": \"\u6E29\u67D4\u3001\u4EB2\u5207\",\n      \"instructions\": \"\u7ED9\u51FA\u64CD\u4F5C\u5EFA\u8BAE\u524D\u5148\u6838\u5BF9\u5173\u952E\u4E8B\u5B9E\u3002\"\n    },\n    \"idempotencyKey\": \"create-agent-xiaomei\"\n  }\n}\n```\n\nUse `list` before creating an Agent so an existing id is updated rather than duplicated.\nMutations other than `create` require the current `expectedRevision`; `set_default` uses\nthe catalog revision returned by `list`. `delete` preserves on-disk data, while `purge`\nalso removes it. Use `dryRun: true` to validate the exact same input contract without writing.\n\n## Reliable protocol\n\n1. Use `list` then `get` when an id is unknown.\n2. Read the current `version` before a Task mutation.\n3. Use `dryRun: true` for broad Project changes or uncertain mutations.\n4. Mutate once with the exact id and current concurrency token.\n5. Verify the returned object and preserve any \u201COpen in xopc\u201D delivery link.\n6. On a conflict, read again and reconsider the operation; do not blindly retry.\n\nTimestamps are Unix epoch milliseconds. Array fields are arrays of strings. Omission\npreserves a patchable field; an empty array intentionally clears it. Prefer explicit\n`projectId`, `taskId`, `runId`, `noteId`, and `localAppId` fields over `id`.\n\n## Projects\n\nCommands: `list`, `get`, `create`, `update`, `resolve_workspace`,\n`list_milestones`, `create_milestone`, `update_milestone`, `list_updates`,\nand `create_update`.\n\nProject statuses: `planned`, `active`, `paused`, `completed`, `cancelled`,\n`archived`. Health values: `unknown`, `on_track`, `at_risk`, `off_track`.\n\nA Project defines bounded shared context for related work. Its durable planning fields are `outcome`,\n`successCriteria`, `scope`, `nonGoals`, `ownerId`, `targetAt`, and `health`.\nUse `brief` for a concise description and `instructions` for durable operating guidance.\n\n### Create\n\n```json\n{\n  \"mode\": \"project\",\n  \"command\": \"create\",\n  \"args\": {\n    \"name\": \"AI Product Research\",\n    \"outcome\": \"Choose a validated product direction\",\n    \"successCriteria\": [\"Ten customer interviews\", \"Decision recorded\"],\n    \"scope\": { \"market\": \"developer tools\" },\n    \"nonGoals\": [\"Build the production product\"],\n    \"health\": \"on_track\",\n    \"targetAt\": 1760000000000,\n    \"workspaceRoot\": \"/path/to/repo\"\n  }\n}\n```\n\n### Update\n\n```json\n{\n  \"mode\": \"project\",\n  \"command\": \"update\",\n  \"args\": {\n    \"projectId\": \"project_id\",\n    \"status\": \"active\",\n    \"health\": \"at_risk\",\n    \"successCriteria\": [\"Ten interviews\", \"Evidence-backed decision\"]\n  }\n}\n```\n\n### Resolve a workspace\n\nUse `autoCreate: false` for lookup. Set it to true only when creating a Project is authorized.\n\n```json\n{ \"mode\": \"project\", \"command\": \"resolve_workspace\", \"args\": { \"workspacePath\": \"/path/to/repo\", \"autoCreate\": false } }\n```\n\n### Milestones\n\nMilestone statuses: `planned`, `active`, `completed`, `cancelled`.\n\n```json\n{\n  \"mode\": \"project\",\n  \"command\": \"create_milestone\",\n  \"args\": {\n    \"projectId\": \"project_id\",\n    \"title\": \"Finish discovery\",\n    \"status\": \"active\",\n    \"targetAt\": 1760000000000,\n    \"sortOrder\": 10\n  }\n}\n```\n\nUse `list_milestones` with `projectId`. Use `update_milestone` with both\n`projectId` and `milestoneId`. Milestone deletion is intentionally not exposed.\n\n### Immutable project updates\n\nProject updates are append-only progress snapshots. They also update Project health.\n\n```json\n{\n  \"mode\": \"project\",\n  \"command\": \"create_update\",\n  \"args\": {\n    \"projectId\": \"project_id\",\n    \"health\": \"on_track\",\n    \"summary\": \"Discovery is complete\",\n    \"progress\": [\"Interviewed ten users\"],\n    \"risks\": [\"Pricing remains unvalidated\"],\n    \"nextSteps\": [\"Run pricing tests\"]\n  }\n}\n```\n\nUse `list_updates` with `projectId` and optional `limit`. Updates cannot be edited.\n\n## Automations\n\nCommands: `list`, `get`, `create`, `update`, `delete`, `run`, `pause`,\n`resume`, and `history`.\n\nAutomation `create` automatically uses the current session Project when `projectId` is\nomitted. An explicit `projectId` takes precedence and is validated before mutation. Use an\nexplicit id when creating for a Project other than the current session Project.\n\n### Create in the current Project\n\n`trigger` and `action` use the same shapes as the Automation product API.\n\n```json\n{\n  \"mode\": \"automation\",\n  \"command\": \"create\",\n  \"args\": {\n    \"name\": \"Daily project review\",\n    \"trigger\": { \"kind\": \"schedule\", \"schedule\": { \"kind\": \"cron\", \"expr\": \"0 9 * * 1-5\", \"tz\": \"Asia/Shanghai\" } },\n    \"action\": { \"kind\": \"agent\", \"instruction\": \"Review the current project and summarize risks.\" }\n  }\n}\n```\n\nTo override the inherited Project, add `\"projectId\": \"project_id\"` to `args`.\nThe create payload may also be nested under `args.automation`; top-level `args.projectId`\nhas precedence.\n\n### List and history\n\n`list` and unqualified `history` inherit the current session Project. Pass an explicit\n`projectId` to query another Project. Pass `automationId` to `history` for one Automation.\n\n### Update and operate\n\nUse `automationId` for `get`, `update`, `delete`, `run`, `pause`, and `resume`.\nFor `update`, patch fields may be direct args or nested under `args.patch`. Supplying a new\n`projectId` reassigns the Automation after validating the target Project.\n\n## Tasks\n\nTask locale follows the conversation response language, then the user request and profile.\nKeep every user-facing contract field (criteria, expected outputs, constraints, assumptions and risks)\nin that language, even when attached source material is English. Preserve paths, URLs and proper nouns.\nAn explicit locale must reflect the user\u2019s language choice.\n\nCommands: `list`, `get`, `create`, `delegated_tasks`, `collaboration`,\n`collaboration_post`, `update_dependencies`, `add_context`, `remove_context`,\n`command`, and `delete`.\n\nTask phases are `backlog`, `ready`, `active`, `review`, and `closed`.\nOperational state is projected separately as `idle`, `queued`, `running`, `waiting`,\n`verifying`, `succeeded`, `failed`, or `cancelled`. Never send either value as a\nfree-form status update.\n\n`task.get` returns the Task, its projected `model`, dependencies, dependents, context,\nauthority grants, TaskRuns, receipts, and waits.\nThe projected model is the correct source for current operational state and attention items.\n\n`delete` permanently removes the Task and its contracts, waits, context links, TaskRuns,\nreceipts, and Task-owned execution records. It does not delete linked Sessions, workspace files,\nor external artifacts. Cancel an active TaskRun before deletion, and use `dryRun: true` when\nthe user's intent is ambiguous.\n\n```json\n{ \"mode\": \"task\", \"command\": \"delete\", \"args\": { \"taskId\": \"task_id\" }, \"dryRun\": true }\n```\n\n### Capture or start\n\n`createMode` defaults to `capture`, which creates a backlog Task without executing it.\nUse `start` only when immediate execution is intended.\n\nFor an immediate delegated task, use the minimal call below. The objective can include the\nworker instructions and constraints; optional lists are unnecessary for a simple delegation.\n\n```json\n{ \"mode\": \"task\", \"command\": \"create\", \"args\": { \"objective\": \"Calculate the requested result and report progress\", \"createMode\": \"start\" } }\n```\n\n```json\n{\n  \"mode\": \"task\",\n  \"command\": \"create\",\n  \"args\": {\n    \"objective\": \"Complete the customer research report\",\n    \"projectId\": \"project_id\",\n    \"createMode\": \"capture\",\n    \"priority\": \"high\",\n    \"expectedOutputs\": [\"Research report\"],\n    \"acceptanceCriteria\": [\"Sources are cited\"],\n    \"constraints\": [\"Do not contact customers without approval\"],\n    \"dependsOnTaskIds\": []\n  }\n}\n```\n\n### Main Agent and worker collaboration\n\nThe user-facing Agent can call `delegated_tasks` to list Tasks created from this conversation,\nthen `collaboration` with `{ \"taskId\": \"...\", \"afterSequence\": 0 }` to read the ordered board.\nUse the Task and TaskRun receipt as the final source of execution status.\n\nUse `collaboration_post` with `taskId`, `kind`, `body`, and a stable `idempotencyKey`.\nThe main Agent may write `instruction`, `question`, or `answer`; answers include\n`causationId` of the worker's question. The worker may write `progress`, `question`,\nor `ack`; acknowledgements include `causationId` of the instruction. A worker question\npauses the active TaskRun. After posting it, stop the execution turn and wait for an answer.\nAn instruction is first recorded, then delivered to the worker conversation, and is only\nconfirmed when the worker acknowledges it. Ordinary progress does not interrupt the user.\n\n```json\n{ \"mode\": \"task\", \"command\": \"collaboration_post\", \"args\": { \"taskId\": \"task_id\", \"kind\": \"progress\", \"body\": \"Completed source review\", \"idempotencyKey\": \"stable-key\" } }\n```\n\n### Dependencies\n\n```json\n{\n  \"mode\": \"task\",\n  \"command\": \"update_dependencies\",\n  \"args\": {\n    \"taskId\": \"task_id\",\n    \"expectedVersion\": 3,\n    \"dependsOnTaskIds\": [\"dependency_task_id\"]\n  }\n}\n```\n\n### Context links\n\nUse `add_context` to link a document, file, URL, session, memory, Task, artifact, or source\nas `input`, `reference`, `constraint`, `deliverable`, or `evidence` context.\n\n```json\n{\n  \"mode\": \"task\",\n  \"command\": \"add_context\",\n  \"args\": {\n    \"taskId\": \"task_id\",\n    \"targetKind\": \"file\",\n    \"targetId\": \"/path/to/spec.md\",\n    \"role\": \"input\",\n    \"title\": \"Product specification\",\n    \"pinned\": true,\n    \"retrievalPolicy\": {},\n    \"metadata\": {}\n  }\n}\n```\n\nUse `remove_context` with `taskId` and the exact `edgeId` returned by `task.get`.\nDo not add authority grants through this tool; an Agent must not authorize itself.\n\n### Typed lifecycle commands\n\nEvery command requires `taskId`, the Task's current `expectedVersion`, a `type`, and\ntype-specific fields inside `commandArgs`.\n\nSupported command types:\n\n- `mark_ready`\n- `start`: `{ \"executor\": { \"kind\": \"agent\", \"agentId\": \"main\" } }`\n- `request_review`\n- `close`: `{ \"resolution\": \"done | cancelled | duplicate | wont_do\" }`\n- `reopen`: `{ \"phase\": \"ready | active\" }`\n- `add_wait`: `{ \"wait\": { \"kind\": \"dependency | approval | input | schedule | external | paused\", \"reason\": \"...\", \"condition\": {} } }`\n- `resolve_wait`: `{ \"waitId\": \"wait_id\", \"resolution\": {} }`\n- `delegate`: `{ \"agentId\": \"agent_id\" }`\n- `revise_contract`: `{ \"contract\": { ...complete contract... } }`\n\n```json\n{\n  \"mode\": \"task\",\n  \"command\": \"command\",\n  \"args\": {\n    \"taskId\": \"task_id\",\n    \"expectedVersion\": 3,\n    \"type\": \"start\",\n    \"commandArgs\": {\n      \"executor\": { \"kind\": \"agent\", \"agentId\": \"main\" }\n    }\n  }\n}\n```\n\nContract revision is replacement, not a patch. Read the Task and preserve all contract fields\nthe user did not ask to change. Resolve a wait through `resolve_wait`; do not directly mutate\na TaskRun or manufacture a phase transition.\n\n## TaskRuns\n\nTaskRun inspection is read-only except for explicit cancellation. Other execution state is\ncontrolled by Task commands and the runtime coordinator.\n\n### List attempts for a Task\n\n```json\n{ \"mode\": \"task_run\", \"command\": \"list\", \"args\": { \"taskId\": \"task_id\", \"limit\": 20 } }\n```\n\nThe result contains run attempts, finalized receipts, and active waits.\n\n### Inspect one attempt\n\n```json\n{ \"mode\": \"task_run\", \"command\": \"get\", \"args\": { \"runId\": \"run_id\" } }\n```\n\nThe result contains the TaskRun, its receipt when terminal, ordered events, and active Task waits.\n\n### Cancel an attempt\n\nRead the run first, then pass its current version. Cancellation creates a terminal receipt.\n\n```json\n{\n  \"mode\": \"task_run\",\n  \"command\": \"cancel\",\n  \"args\": { \"runId\": \"run_id\", \"expectedVersion\": 2, \"reason\": \"User cancelled execution\" }\n}\n```\n\nDo not guess commands such as retry, force-complete, heartbeat, or transition; they are not Agent APIs.\n\n## Notes\n\nCommands: `list`, `get`, `create`, `append`, `preview_edit`, `update`, and `delete`.\nUse Notes for durable prose and reference material, not as a Task substitute. Prefer `append`\nwhen preserving user content. Use `preview_edit` before a canonical rewrite.\n\n```json\n{ \"mode\": \"note\", \"command\": \"create\", \"args\": { \"title\": \"Decision\", \"markdown\": \"...\", \"projectId\": \"project_id\" } }\n```\n\n```json\n{ \"mode\": \"note\", \"command\": \"append\", \"args\": { \"noteId\": \"note_id\", \"heading\": \"AI synthesis\", \"content\": \"...\" } }\n```\n\nUse `update` with `status: \"trashed\"` for a recoverable removal. `delete` permanently\nremoves the Note and its stored snapshots and media; use `dryRun: true` first when the\nuser's intent is ambiguous.\n\n```json\n{ \"mode\": \"note\", \"command\": \"delete\", \"args\": { \"noteId\": \"note_id\" }, \"dryRun\": true }\n```\n\n## Chat previews, local apps, and settings\n\nUse `chat_preview` by default when the user asks to design, mock up, or quickly show a UI in\nthe current conversation. It creates no Project and no Local App. Commands are `create`,\n`get`, and `revise`. Source consists of `markup`, `styles`, and optional `script`;\ndo not include a full HTML document or remote dependencies. Revision requires the exact\n`baseRevision` returned by the prior call.\n\nUse `local_app` only when the user explicitly asks for a durable, installable app or chooses\n\u201CSave as app\u201D on a chat preview. Do not create a Local App merely to render a UI draft.\n\nLocal app commands are `list`, `get`, `create`, and `validate`. Installation,\nactivation, rollback, and uninstall remain product runtime operations.\n\nSettings supports only `open` and returns an exact product jump target without changing config.\n\n## Error recovery\n\n| Result | Recovery |\n| --- | --- |\n| service unavailable | Stop retrying and report the unavailable capability. |\n| not found | Re-list in the intended scope; do not invent another id. |\n| conflict | Read the current object and reassess using its latest version. |\n| waiting | Inspect the Task projection and TaskRun waits; resolve only the real blocker. |\n| invalid command or state | Read the object and use only a documented transition. |\n| unsupported operation | Use the dedicated tool or product UI; never write storage directly. |\n\n## Deliberate boundaries\n\n- Project deletion and milestone deletion are not Agent APIs.\n- TaskRun mutation is internal to execution coordination except for optimistic cancellation.\n- Project updates are immutable.\n- Automation operations remain in their dedicated tools.\n- Only the documented Task and TaskRun commands are valid; do not infer hidden aliases.\n";

package/dist/src/agent/tool-manuals/xopc-use.js

@@ -34,12 +34,9 @@ complete successfully while the product command returns \`ok: false\`.
 | Lightweight UI preview | \`xopc_use\` mode \`chat_preview\` |
 | Local app | \`xopc_use\` mode \`local_app\` |
 | Settings jump target | \`xopc_use\` mode \`settings\` |
-| Workflow run | dedicated \`workflow\` tool; pass \`taskId\` to link it to a Task |
 | Session, memory, skill, connected app or workspace file | its dedicated tool |
 
-Do not emulate Workflow APIs through \`xopc_use\`. A Task is durable intent;
-a TaskRun is one execution attempt; a WorkflowRun is a procedure execution and may belong
-to a TaskRun. Never treat these three objects as interchangeable.
+A Task is durable intent; a TaskRun is one execution attempt.
 
 ## Agents
 
@@ -463,7 +460,7 @@ Settings supports only \`open\` and returns an exact product jump target without
 - Project deletion and milestone deletion are not Agent APIs.
 - TaskRun mutation is internal to execution coordination except for optimistic cancellation.
 - Project updates are immutable.
-- Workflow and Automation operations remain in their dedicated tools.
+- Automation operations remain in their dedicated tools.
 - Only the documented Task and TaskRun commands are valid; do not infer hidden aliases.
 `;
 //#endregion

package/dist/src/agent/tools/automation-tool.js

@@ -90,7 +90,7 @@ function createAutomationTool(deps) {
 	return {
 		name: "automation",
 		label: "Automation",
-		description: "Manage product automations. Automations can be manual, scheduled, webhook-triggered, or product-event-triggered and can run an agent instruction or workflow.",
+		description: "Manage product automations. Automations can be manual, scheduled, webhook-triggered, or product-event-triggered and can run an agent instruction.",
 		parameters: AutomationToolSchema,
 		async execute(_toolCallId, params, signal) {
 			const service = deps.getAutomationService();

package/dist/src/agent/tools/factory.d.ts

@@ -23,7 +23,6 @@ import type { BrowserAutomationService } from '../../browser/automations/index.j
 import type { NotesService } from '../../notes/index.js';
 import type { ProjectService } from '../../projects/index.js';
 import type { LocalAppService } from '../../local-apps/index.js';
-import type { WorkflowRunServiceLike } from '../../workflows/service/workflow-run-service.types.js';
 import type { SkillManager } from '../skills/skill-manager.js';
 import { type ToolExecutorConfig } from './executor.js';
 export interface ToolFactoryDeps {
@@ -72,8 +71,6 @@ export interface ToolFactoryDeps {
     dispatchTaskRuns?: () => void;
     /** Gateway: refreshes Agent runtime state after xopc_use mutates the catalog. */
     onAgentCatalogMutate?: () => void;
-    /** Gateway: starts persisted workflow runs (dedicated chat session per run). */
-    getWorkflowRunService?: () => WorkflowRunServiceLike | undefined;
     /** Current session skill indexing (tool gating + allowlist); used by skills_list / skill_view. */
     getSkillIndexingContext?: () => {
         registeredToolNames: string[];

package/dist/src/agent/tools/factory.js

@@ -53,11 +53,8 @@ import { BrowserRuntime } from "../../browser/runtime/browser-runtime.js";
 import { createBrowserDriver } from "../../browser/drivers/create-driver.js";
 import { checkBrowserReadiness } from "../../browser/readiness.js";
 import "../../browser/index.js";
-import { getPendingTranscriptUserText } from "../inbound/attachment-pipeline.js";
+import { getActiveTranscriptUserText, getPendingTranscriptUserText } from "../inbound/attachment-pipeline.js";
 import { createDelegateTool } from "./delegate-tool.js";
-import { createWorkflowTool } from "./workflow-tool.js";
-import { createWorkflowCatalog } from "../workflow/catalog.js";
-import { createWorkflowManageTool } from "./workflow-manage-tool.js";
 import { createAutomationTool } from "./automation-tool.js";
 import { createBrowserAutomationTool } from "./browser-automation-tool.js";
 import { createXopcUseTool } from "./xopc-use-tool.js";
@@ -446,6 +443,7 @@ var AgentToolsFactory = class AgentToolsFactory {
 				getConfig: () => this.deps.getConfig?.()
 			})] : [],
 			...personalToolsConfigured || allowed?.has("user_context_read") ? [createUserContextReadTool({
+				getCurrentUserText: () => currentConversationId() ? getActiveTranscriptUserText(currentConversationId()) : void 0,
 				agentId: resolvedAgentId,
 				workspaceId: workspace,
 				getSessionId: currentConversationId,
@@ -453,6 +451,7 @@ var AgentToolsFactory = class AgentToolsFactory {
 				canRead: () => currentAccess().userModel
 			}, (command) => !disabled?.has(`user_context_${command}`) && (!isXopcDatabaseOpen() || resolveEffectiveAgentConfigForAgent(resolvedAgentId).config.tools[`user_context_${command}`]?.mode !== "deny"))] : [],
 			createUserContextSearchTool({
+				getCurrentUserText: () => currentConversationId() ? getActiveTranscriptUserText(currentConversationId()) : void 0,
 				agentId: resolvedAgentId,
 				workspaceId: workspace,
 				getSessionId: currentConversationId,
@@ -460,6 +459,7 @@ var AgentToolsFactory = class AgentToolsFactory {
 				canRead: () => currentAccess().userModel
 			}),
 			createUserContextGetTool({
+				getCurrentUserText: () => currentConversationId() ? getActiveTranscriptUserText(currentConversationId()) : void 0,
 				agentId: resolvedAgentId,
 				workspaceId: workspace,
 				getSessionId: currentConversationId,
@@ -479,6 +479,7 @@ var AgentToolsFactory = class AgentToolsFactory {
 				}
 			}),
 			...personalToolsConfigured || allowed?.has("knowledge_read") ? [createKnowledgeReadTool({
+				getCurrentUserText: () => currentConversationId() ? getActiveTranscriptUserText(currentConversationId()) : void 0,
 				agentId: resolvedAgentId,
 				workspaceId: workspace,
 				getSessionId: currentConversationId,
@@ -489,6 +490,7 @@ var AgentToolsFactory = class AgentToolsFactory {
 				getReadPolicy: () => currentAccess().knowledgePolicy
 			}, (command) => !disabled?.has(`knowledge_${command}`) && (!isXopcDatabaseOpen() || resolveEffectiveAgentConfigForAgent(resolvedAgentId).config.tools[`knowledge_${command}`]?.mode !== "deny"))] : [],
 			createKnowledgeSearchTool({
+				getCurrentUserText: () => currentConversationId() ? getActiveTranscriptUserText(currentConversationId()) : void 0,
 				agentId: resolvedAgentId,
 				workspaceId: workspace,
 				getSessionId: currentConversationId,
@@ -499,6 +501,7 @@ var AgentToolsFactory = class AgentToolsFactory {
 				getReadPolicy: () => currentAccess().knowledgePolicy
 			}),
 			createKnowledgeGetTool({
+				getCurrentUserText: () => currentConversationId() ? getActiveTranscriptUserText(currentConversationId()) : void 0,
 				agentId: resolvedAgentId,
 				workspaceId: workspace,
 				getSessionId: currentConversationId,
@@ -521,10 +524,24 @@ var AgentToolsFactory = class AgentToolsFactory {
 			...this.deps.getSessionStore ? [createSessionRecallTool({
 				getSessionStore: this.deps.getSessionStore,
 				getCurrentConversationId: currentConversationId,
+				getHistoryContext: () => ({
+					agentId: resolvedAgentId,
+					workspaceId: workspace,
+					conversationId: currentConversationId() ?? "",
+					projectId: currentProjectId()
+				}),
+				getCurrentUserText: () => currentConversationId() ? getActiveTranscriptUserText(currentConversationId()) : void 0,
 				...personalToolsConfigured ? { maxOutputChars: LOCAL_READ_MAX_CHARS } : {}
 			})] : [],
 			...this.deps.getSessionStore && getPrimary ? [createSessionSearchTool({
 				localOnly: personalToolsConfigured,
+				getHistoryContext: () => ({
+					agentId: resolvedAgentId,
+					workspaceId: workspace,
+					conversationId: currentConversationId() ?? "",
+					projectId: currentProjectId()
+				}),
+				getCurrentUserText: () => currentConversationId() ? getActiveTranscriptUserText(currentConversationId()) : void 0,
 				getSessionStore: this.deps.getSessionStore,
 				getPrimaryModel: getPrimary,
 				getCurrentConversationId: () => this.deps.getCurrentContext()?.conversationId,
@@ -566,12 +583,6 @@ var AgentToolsFactory = class AgentToolsFactory {
 				getTaskId: () => options?.conversationId ?? this.deps.getCurrentContext()?.conversationId ?? "default",
 				getReadiness: () => this.checkBrowserReadinessCached()
 			})] : [],
-			...primary ? [createWorkflowManageTool(), createWorkflowTool({
-				catalog: createWorkflowCatalog(),
-				getCurrentConversationId: () => this.deps.getCurrentContext()?.conversationId,
-				getConfig: () => this.deps.getConfig?.(),
-				startWorkflowRun: this.deps.getWorkflowRunService ? (params) => this.deps.getWorkflowRunService().startWorkflowRun(params) : void 0
-			})] : [],
 			...primary ? [createDelegateTool({
 				isWorkspaceTrusted: this.deps.isWorkspaceTrusted,
 				workspace,

package/dist/src/agent/tools/index.d.ts

@@ -27,8 +27,6 @@ export { createMemoryMaintenanceTool, type MemoryMaintenanceToolDeps } from './m
 export { createClarifyTool, type ClarifyRequestPayload, type GatewayClarifyRequestFn, } from './clarify-tool.js';
 export { BrowserRuntime, assertBrowserUrlAllowed } from '../../browser/index.js';
 export { createDelegateTool, DEFAULT_DELEGATE_TOOLS, DELEGATE_BLOCKED_TOOLS, } from './delegate-tool.js';
-export { createWorkflowTool, type WorkflowToolDeps, type WorkflowToolInput } from './workflow-tool.js';
-export { createWorkflowManageTool } from './workflow-manage-tool.js';
 export { createAutomationTool, type AutomationToolDeps } from './automation-tool.js';
 export { createBrowserAutomationTool } from './browser-automation-tool.js';
 export { createXopcUseTool, type XopcUseToolDeps, type XopcUseToolInput } from './xopc-use-tool.js';

package/dist/src/agent/tools/index.js

@@ -32,8 +32,6 @@ import { BrowserRuntime } from "../../browser/runtime/browser-runtime.js";
 import "../../browser/index.js";
 import { resolveImageModelConfigForTool } from "../image/tool-model-config.js";
 import { DEFAULT_DELEGATE_TOOLS, DELEGATE_BLOCKED_TOOLS, createDelegateTool } from "./delegate-tool.js";
-import { createWorkflowTool } from "./workflow-tool.js";
-import { createWorkflowManageTool } from "./workflow-manage-tool.js";
 import { createAutomationTool } from "./automation-tool.js";
 import { createBrowserAutomationTool } from "./browser-automation-tool.js";
 import { createXopcUseTool } from "./xopc-use-tool.js";
@@ -48,4 +46,4 @@ import { createImageTool } from "./image-tool.js";
 import { createImageGenerateTool, resolveImageGenerationModelConfigForTool } from "./image-generate-tool.js";
 import { createPersonalReadTool } from "./personal-read-tool.js";
 import { createTaskCollaborationTool } from "./task-collaboration-tool.js";
-export { BrowserRuntime, DEFAULT_DELEGATE_TOOLS, DEFAULT_MAX_BYTES, DEFAULT_MAX_LINES, DEFAULT_TOOL_METADATA, DEFAULT_WEB_EXTRACT_MAX_LENGTH, DELEGATE_BLOCKED_TOOLS, GREP_MAX_LINE_LENGTH, MAX_RAW_HTML_CHARS_FOR_WEB_EXTRACT, TodoStore, ToolConcurrencyController, assertBrowserUrlAllowed, createApplyPatchTool, createAutomationTool, createBrowserAutomationTool, createClarifyTool, createCreateShareTool, createDataBatchTool, createDelegateTool, createDesktopPetTool, createExecCommandTool, createFindTool, createGrepTool, createImageGenerateTool, createImageTool, createKnowledgeGetTool, createKnowledgeReadTool, createKnowledgeSearchTool, createKnowledgeWriteTool, createListDirTool, createManagedJobTool, createMemoryMaintenanceTool, createMessageTool, createPersonalReadTool, createPublishArtifactsTool, createReadFileTool, createReadMediaTool, createSendMediaTool, createSessionRecallTool, createSessionSearchTool, createSessionStatusTool, createSkillInstallTool, createSkillManageTool, createSkillViewTool, createSkillsListTool, createSkillsMarketplaceSearchTool, createTaskCollaborationTool, createTaskResultTool, createTodoTool, createToolManualTool, createUpdatePlanTool, createUserContextGetTool, createUserContextReadTool, createUserContextSearchTool, createUserContextUpdateTool, createWebExtractTool, createWebFetchTool, createWebSearchTool, createWorkflowManageTool, createWorkflowTool, createWriteFileTool, createXopcUseTool, findTool, formatSize, fuzzyFindText, generateDiffString, getToolMetadata, grepTool, isShareToolAvailable, listDirTool, normalizeForFuzzyMatch, normalizeToLF, resolveImageGenerationModelConfigForTool, resolveImageModelConfigForTool, resolveToolLockMode, restoreLineEndings, stripBom, stripHtmlBoilerplate, truncateHead, truncateLine, truncateTail, writeFileTool };
+export { BrowserRuntime, DEFAULT_DELEGATE_TOOLS, DEFAULT_MAX_BYTES, DEFAULT_MAX_LINES, DEFAULT_TOOL_METADATA, DEFAULT_WEB_EXTRACT_MAX_LENGTH, DELEGATE_BLOCKED_TOOLS, GREP_MAX_LINE_LENGTH, MAX_RAW_HTML_CHARS_FOR_WEB_EXTRACT, TodoStore, ToolConcurrencyController, assertBrowserUrlAllowed, createApplyPatchTool, createAutomationTool, createBrowserAutomationTool, createClarifyTool, createCreateShareTool, createDataBatchTool, createDelegateTool, createDesktopPetTool, createExecCommandTool, createFindTool, createGrepTool, createImageGenerateTool, createImageTool, createKnowledgeGetTool, createKnowledgeReadTool, createKnowledgeSearchTool, createKnowledgeWriteTool, createListDirTool, createManagedJobTool, createMemoryMaintenanceTool, createMessageTool, createPersonalReadTool, createPublishArtifactsTool, createReadFileTool, createReadMediaTool, createSendMediaTool, createSessionRecallTool, createSessionSearchTool, createSessionStatusTool, createSkillInstallTool, createSkillManageTool, createSkillViewTool, createSkillsListTool, createSkillsMarketplaceSearchTool, createTaskCollaborationTool, createTaskResultTool, createTodoTool, createToolManualTool, createUpdatePlanTool, createUserContextGetTool, createUserContextReadTool, createUserContextSearchTool, createUserContextUpdateTool, createWebExtractTool, createWebFetchTool, createWebSearchTool, createWriteFileTool, createXopcUseTool, findTool, formatSize, fuzzyFindText, generateDiffString, getToolMetadata, grepTool, isShareToolAvailable, listDirTool, normalizeForFuzzyMatch, normalizeToLF, resolveImageGenerationModelConfigForTool, resolveImageModelConfigForTool, resolveToolLockMode, restoreLineEndings, stripBom, stripHtmlBoilerplate, truncateHead, truncateLine, truncateTail, writeFileTool };

package/dist/src/agent/tools/knowledge-memory-tool.d.ts

@@ -9,6 +9,7 @@ export interface KnowledgeToolOptions {
     canWrite: () => boolean;
     getWritePolicy: () => 'deny' | 'allow';
     getReadPolicy: () => KnowledgeReadPolicy;
+    getCurrentUserText?: () => string | undefined;
 }
 export declare function createKnowledgeSearchTool(options: KnowledgeToolOptions): AgentTool;
 export declare function createKnowledgeGetTool(options: KnowledgeToolOptions): AgentTool;

package/dist/src/agent/tools/knowledge-memory-tool.js

@@ -3,6 +3,7 @@ import { canUseKnowledge } from "../../knowledge-memory/usage-policy.js";
 import { getKnowledgeItem, searchKnowledgeItems, writeKnowledgeItem } from "../../knowledge-memory/repository.js";
 import "../../knowledge-memory/index.js";
 import "./local-read-budget.js";
+import { projectForgottenEvidence } from "../../memory-learning/forgotten-history.js";
 import { Type } from "@sinclair/typebox";
 //#region src/agent/tools/knowledge-memory-tool.ts
 const SearchSchema = Type.Object({
@@ -67,7 +68,10 @@ function createKnowledgeSearchTool(options) {
 				context: visibility(options),
 				policy: options.getReadPolicy(),
 				limit: input.maxResults ?? 12
-			});
+			}).map((item) => ({
+				...item,
+				source: projectForgottenEvidence(item.source, visibility(options), options.getCurrentUserText?.(), [item.sourceConversationId, item.sourceTurnId].filter((ref) => !!ref))
+			}));
 			return {
 				content: [{
 					type: "text",
@@ -95,13 +99,18 @@ function createKnowledgeGetTool(options) {
 			};
 			const id = raw.id;
 			const item = getKnowledgeItem(id);
-			return item && canUseKnowledge(item, visibility(options), options.getReadPolicy()) ? {
+			const visible = item && canUseKnowledge(item, visibility(options), options.getReadPolicy());
+			const projected = visible && {
+				...item,
+				source: projectForgottenEvidence(item.source, visibility(options), options.getCurrentUserText?.(), [item.sourceConversationId, item.sourceTurnId].filter((ref) => !!ref))
+			};
+			return visible ? {
 				content: [{
 					type: "text",
-					text: JSON.stringify(item, null, 2)
+					text: JSON.stringify(projected, null, 2)
 				}],
 				details: {
-					item,
+					item: projected,
 					complete: true
 				}
 			} : {