@xopcai/xopc 0.0.410 → 0.0.411

package/dist/src/gateway/service.js

@@ -20,14 +20,13 @@ import { getSessionMetadata } from "../storage/sqlite/session-read-repository.js
 import { init_session_repository, listSessionMetadata, patchSessionMetadata } from "../storage/sqlite/session-repository.js";
 import { getSessionConfig, init_config_repository } from "../storage/sqlite/config-repository.js";
 import { init_sqlite } from "../storage/sqlite/index.js";
-import { normalizeAgentId } from "../agent-catalog/id.js";
 import { init_agent_scope, listAgentEntries, resolveAgentWorkspaceDir, resolveDefaultAgentId } from "../agent/agent-scope.js";
 import { init_paths, resolveConfigPath, resolveExtensionsDir } from "../config/paths.js";
 import { init_config, resolveKnowledgeReadPolicy } from "../user-context/config.js";
 import { getAgentDefaultModelRef, init_schema } from "../config/schema.js";
-import { listKnowledgeItems } from "../knowledge-memory/repository.js";
 import { init_agent_session_key, resolveAgentMainConversationId } from "../routing/agent-session-key.js";
 import { init_session_key, resolveConversationId, sanitizeSegment } from "../routing/session-key.js";
+import { listKnowledgeItems } from "../knowledge-memory/repository.js";
 import "../knowledge-memory/index.js";
 import { getDefaultAgentId, init_resolve_route } from "../routing/resolve-route.js";
 import { resolveEffectiveAgentProfileForSession } from "../config/agent-profile.js";
@@ -103,10 +102,6 @@ import { DiscussionSealer } from "../discussions/sealer.js";
 import "../discussions/index.js";
 import { EndpointToolRuntime } from "../endpoint-tools/runtime.js";
 import "../endpoint-tools/index.js";
-import { HomeCapabilityPreflightService } from "../home-intelligence/capability-preflight.js";
-import { HomeAdviceGenerator } from "../home-intelligence/generator.js";
-import { HomeIntelligenceHost } from "../home-intelligence/host.js";
-import { HomeSnapshotBuilder } from "../home-intelligence/snapshot.js";
 import { assertGatewayAuthConfigured, extractToken, resolveGatewayAuth, validateToken } from "./auth.js";
 import { prepareAutomationAgentSession } from "./automation-agent-session.js";
 import { stopTailscaleExposure } from "./tailscale-lifecycle.js";
@@ -123,9 +118,6 @@ import { buildVoiceMemoryContext } from "../voice/realtime/memory-context.js";
 import { buildVoicePersonaContext } from "../voice/realtime/persona-context.js";
 import { voiceMemoryBudget, voicePersonaBudget } from "../voice/realtime/conversation-context.js";
 import "../notes/index.js";
-import { buildWorkflowChildTools } from "../agent/workflow/workflow-child-tools.js";
-import { WorkflowRunService } from "../workflows/service/workflow-run-service.js";
-import { WorkflowSessionBridge } from "../workflows/service/workflow-session-bridge.js";
 import { EphemeralSideChatManager } from "./side-chat/manager.js";
 import { SideChatRunService } from "./side-chat/run-service.js";
 import { SideChatPromotionService } from "./side-chat/promotion-service.js";
@@ -167,6 +159,10 @@ import { TaskMainUpdateDecisionService } from "../tasks/task-main-update-decisio
 import { selectTaskMainUpdateAttempt, submitAndConfirmTaskMainUpdate } from "../tasks/task-main-update-input.js";
 import { checkAppContextAccess, prepareAppContext } from "./service/app-context-access.js";
 import { applyAutomaticVoiceLanguage, inferProductLanguageFromEnvironment, initializeVoiceDefaults } from "../voice/language-profile.js";
+import { HomeAdviceGenerator } from "../home-intelligence/generator.js";
+import { HomeIntelligenceHost } from "../home-intelligence/host.js";
+import { HomeSnapshotBuilder } from "../home-intelligence/snapshot.js";
+import { HomeCapabilityPreflightService } from "../home-intelligence/capability-preflight.js";
 import crypto from "node:crypto";
 //#region src/gateway/service.ts
 init_session_repository();
@@ -322,8 +318,6 @@ var GatewayService = class {
 	lastChannelConnectDeferSource = "off";
 	readiness = new GatewayReadiness();
 	startupTrace = null;
-	workflowSessionBridge = null;
-	workflowRunServiceInstance = null;
 	taskAllocationDispatcher = null;
 	taskRunDispatcher = null;
 	taskRunDispatchTimer = null;
@@ -380,7 +374,7 @@ var GatewayService = class {
 		this.serviceConfig = serviceConfig;
 		this.bus = new MessageBus();
 		this.configPath = serviceConfig.configPath || resolveConfigPath();
-		bootstrapApplicationStateSync(this.configPath);
+		bootstrapApplicationStateSync();
 		const now = Date.now();
 		markStaleAiUsageEventsUnknown(now - 360 * 60 * 1e3, now);
 		pruneAiUsageEvents(now - AI_USAGE_RETENTION_MS);
@@ -695,7 +689,6 @@ var GatewayService = class {
 			dispatchTaskEvents: () => this.dispatchTaskEvents(),
 			dispatchTaskRuns: () => this.dispatchTaskRuns(),
 			onAgentCatalogMutate: () => this.refreshAgentCatalog(),
-			getWorkflowRunService: () => this.createWorkflowRunService(),
 			sourceContextResolver: async (binding) => {
 				if (binding.kind === "note") {
 					const note = await this.notesService.getNote(binding.sourceId);
@@ -730,7 +723,6 @@ var GatewayService = class {
 			agentService: this._agentService,
 			getDefaultAgentId: () => getDefaultAgentId(),
 			prepareAgentSession: (input) => prepareAutomationAgentSession(this.sessionIndex.getStore(), this.projects, input),
-			workflowRunService: this.createWorkflowRunService(),
 			browserAutomationService: this.browserAutomations,
 			executeTaskCommand: ({ taskId, idempotencyKey, command, triggerEvent }) => {
 				const task = new TaskRepository().get(taskId);
@@ -800,7 +792,7 @@ var GatewayService = class {
 					content: message,
 					origin: {
 						type: "system",
-						source: "workflow"
+						source: "task"
 					},
 					taskRunId: runId
 				});
@@ -832,13 +824,12 @@ var GatewayService = class {
 				content: input.content,
 				origin: {
 					type: "system",
-					source: "workflow"
+					source: "task"
 				}
 			})).ok;
 		});
 		if (this.stopping) return;
 		this.createTaskRunDispatcher().dispatch();
-		await this.createWorkflowRunService().dispatchTaskRuns();
 	}, (err) => {
 		const errorMessage = err instanceof Error ? err.message : String(err);
 		log.error({
@@ -950,7 +941,7 @@ var GatewayService = class {
 		}, "Task result dispatch failed");
 	});
 	dispatchTaskRuns() {
-		if (this.stopping) return;
+		if (this.stopping || this.serviceConfig.taskDispatchEnabled === false) return;
 		this.taskAllocationDispatcher ??= new TaskAllocationDispatcher({
 			context: (conversationId) => ({
 				ownAgentId: getSessionMetadata(conversationId)?.agentId ?? "",
@@ -1286,9 +1277,13 @@ var GatewayService = class {
 		this.createNotificationService().start();
 		this.startTime = Date.now();
 		this.running = true;
-		this.stopTaskResultQueued = onTaskResultQueued(() => this.taskResultDispatch());
-		this.taskRunDispatchTimer = setInterval(() => this.dispatchTaskRuns(), 1e3);
-		this.taskRunDispatchTimer.unref?.();
+		this.stopTaskResultQueued = onTaskResultQueued(() => {
+			if (this.serviceConfig.taskDispatchEnabled !== false) this.taskResultDispatch();
+		});
+		if (this.serviceConfig.taskDispatchEnabled !== false) {
+			this.taskRunDispatchTimer = setInterval(() => this.dispatchTaskRuns(), 1e3);
+			this.taskRunDispatchTimer.unref?.();
+		}
 		this.startupTrace = createGatewayStartupTrace();
 		this.readiness.markStarting(this.startTime);
 		const trace = this.startupTrace;
@@ -1388,7 +1383,6 @@ var GatewayService = class {
 			agentService: this.agentService,
 			getDefaultAgentId: () => getDefaultAgentId(),
 			prepareAgentSession: (input) => prepareAutomationAgentSession(this.sessionIndex.getStore(), this.projects, input),
-			workflowRunService: this.createWorkflowRunService(),
 			browserAutomationService: this.browserAutomations,
 			executeTaskCommand: ({ taskId, idempotencyKey, command, triggerEvent }) => {
 				const task = new TaskRepository().get(taskId);
@@ -1423,7 +1417,6 @@ var GatewayService = class {
 			onReliabilityAttention: (input) => this.emit("automation.attention.required", input)
 		});
 		this.startSessionTranscriptEventIngestion();
-		await trace.measure("workflows.reconcile", () => this.reconcileInterruptedWorkflowRuns());
 		this.sessionIndex.on("sessionUpdated", (data) => {
 			this.emit("session.updated", {
 				key: data.key,
@@ -1816,7 +1809,7 @@ var GatewayService = class {
 	*/
 	getHealth() {
 		const runningChannels = this.channelManager.getRunningChannels();
-		const allChannels = this.channelManager.getAllChannels();
+		const allChannels = this.channelManager.getAllPlugins();
 		const logStats = getRuntimeLogStats();
 		const readiness = this.readiness.getSnapshot();
 		return {
@@ -1920,46 +1913,6 @@ var GatewayService = class {
 	get sessionIndexInstance() {
 		return this.sessionIndex;
 	}
-	/** Shared workflow run orchestrator + session bridge (one instance per gateway). */
-	createWorkflowRunService() {
-		if (!this.workflowRunServiceInstance) {
-			this.workflowSessionBridge = new WorkflowSessionBridge(this);
-			this.workflowRunServiceInstance = new WorkflowRunService({
-				service: this,
-				sessionBridge: this.workflowSessionBridge,
-				buildChildTools: buildWorkflowChildTools
-			});
-		}
-		return this.workflowRunServiceInstance;
-	}
-	async reconcileInterruptedWorkflowRuns() {
-		const workflowService = this.createWorkflowRunService();
-		const agentIds = this.collectWorkflowAgentIds();
-		let total = 0;
-		for (const agentId of agentIds) try {
-			total += await workflowService.reconcileInterruptedRuns(agentId);
-		} catch (err) {
-			const msg = err instanceof Error ? err.message : String(err);
-			log.warn({
-				err,
-				agentId,
-				errorMessage: msg
-			}, `Workflow run reconcile failed for agent ${agentId}: ${msg}`);
-		}
-		if (total > 0) log.info({
-			count: total,
-			agentIds
-		}, "Reconciled interrupted workflow runs");
-	}
-	collectWorkflowAgentIds() {
-		const ids = /* @__PURE__ */ new Set();
-		ids.add(resolveDefaultAgentId());
-		for (const entry of listAgentEntries()) {
-			if (entry.enabled === false) continue;
-			ids.add(normalizeAgentId(entry.id));
-		}
-		return [...ids];
-	}
 	/** Process a message directly through the agent (for CLI mode). */
 	async processDirect(content, conversationId = resolveAgentMainConversationId({ agentId: getDefaultAgentId() })) {
 		return this.agentService.turnDispatcher.processDirect(content, conversationId, {

package/dist/src/history/ctx/format.js

@@ -191,7 +191,7 @@ function sessionRecord(session) {
 		cwd: session.cwd,
 		...session.archivedAt === null ? {} : { ended_at: timestamp(session.archivedAt, `session end timestamp for ${session.transcriptId}`) },
 		status: active ? "active" : "completed",
-		agent_scope: session.sessionType === "workflow-subagent" ? "subagent" : "primary"
+		agent_scope: session.sessionType === "subagent" ? "subagent" : "primary"
 	};
 }
 function entryRecords(session, entry) {

package/dist/src/home-intelligence/capability-preflight.js

@@ -1,5 +1,5 @@
 import { listConnectorInstances } from "../connectors/instances.js";
-import { preflightConnectorRequirements } from "../connectors/workflow-preflight.js";
+import { preflightConnectorRequirements } from "../connectors/requirements-preflight.js";
 //#region src/home-intelligence/capability-preflight.ts
 const SKILL_CODE = {
 	"agent-denied": "agent_not_allowed",

package/dist/src/home-intelligence/host.js

@@ -1,10 +1,10 @@
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
+import { HomeAdviceBudgetExceededError, isHomeProseLocalized } from "./generator.js";
 import { homePatternKey } from "./strategy.js";
+import { HomeAdvicePolicy } from "./policy.js";
 import { HomeIntelligenceRepository } from "./repository.js";
 import { HomeOpportunityApplicationService } from "./application-service.js";
-import { HomeAdvicePolicy } from "./policy.js";
-import { HomeAdviceBudgetExceededError, isHomeProseLocalized } from "./generator.js";
 import { buildHomeOpportunityNotification } from "./notification.js";
 import { createHash } from "node:crypto";
 //#region src/home-intelligence/host.ts

package/dist/src/infra/unhandled-rejections.js

@@ -1,8 +1,8 @@
 import { __esmMin } from "../../_virtual/_rolldown/runtime.js";
-import { createLogger } from "../utils/logger/index.js";
-import { init_logger } from "../utils/logger.js";
 import { init_global_singleton, resolveGlobalSingleton } from "../utils/global-singleton.js";
 import { init_process_diagnostics, recordProcessDiagnostic } from "./process-diagnostics.js";
+import { createLogger } from "../utils/logger/index.js";
+import { init_logger } from "../utils/logger.js";
 import { init_sqlite_errors, isTransientSqliteError } from "./sqlite-errors.js";
 //#region src/infra/unhandled-rejections.ts
 function installSqliteTransientRejectionHandler() {

package/dist/src/infra/update-runner.d.ts

@@ -1,4 +1,3 @@
-import { createDefaultCommandRunner } from './run-command.js';
 import { type UpdateChannel } from './update-channels.js';
 import { type ExtensionPostUpdateResult } from '../extensions/update.js';
 import { type GlobalInstallManager } from './update-global.js';
@@ -105,4 +104,4 @@ export declare function runAutoUpdateCommandWithProgress(params: {
     triggerInProcessRestart?: InProcessRestartTrigger;
     onProgress?: (line: string, source: 'stdout' | 'stderr') => void | Promise<void>;
 }): Promise<AutoUpdateResult>;
-export { createDefaultCommandRunner };
+export {};

package/dist/src/infra/update-runner.js

@@ -3,7 +3,7 @@ import { runPostUpdateExtensionSync } from "../extensions/update.js";
 import "./update-channels.js";
 import { compareSemver, resolveNpmChannelTag } from "./update-check.js";
 import { readPackageName, readPackageVersion } from "./package-json.js";
-import { createDefaultCommandRunner, runCommandWithTimeout } from "./run-command.js";
+import { runCommandWithTimeout } from "./run-command.js";
 import { XOPC_PACKAGE_NAME, cleanupGlobalRenameDirs, createGlobalInstallEnv, detectGlobalInstallManagerForRoot, resolveGlobalInstallSpec, resolveGlobalInstallTarget } from "./update-global.js";
 import { runGlobalPackageUpdateSteps } from "./package-update-steps.js";
 import { resolveStableNodePath } from "./stable-node-path.js";
@@ -648,4 +648,4 @@ async function runAutoUpdateCommandWithProgress(params) {
 	};
 }
 //#endregion
-export { createDefaultCommandRunner, formatUpdateApiResult, resolveUpdateInstallSurface, runAutoUpdateCommand, runAutoUpdateCommandWithProgress, runGatewayUpdate, runGatewayUpdateWithPostSteps };
+export { formatUpdateApiResult, resolveUpdateInstallSurface, runAutoUpdateCommand, runAutoUpdateCommandWithProgress, runGatewayUpdate, runGatewayUpdateWithPostSteps };

package/dist/src/knowledge/connected-knowledge-pipeline.js

@@ -5,8 +5,8 @@ import { createContextEvidence, init_context_evidence_repository } from "../stor
 import { init_chunks, replaceKnowledgeChunks } from "./chunks.js";
 import { claimKnowledgeSourceItems, completeKnowledgeSourceItemSynthesis, pruneBoundedKnowledgeSourceItems } from "../storage/sqlite/knowledge-repository.js";
 import { init_sqlite } from "../storage/sqlite/index.js";
-import { getActiveUnderstandingConsent } from "../user-context/sources/consent-repository.js";
 import { clearMemoryAudit } from "../user-context/memory-suppression.js";
+import { getActiveUnderstandingConsent } from "../user-context/sources/consent-repository.js";
 import { listKnowledgeItems, transitionKnowledgeStatus, writeKnowledgeItem } from "../knowledge-memory/repository.js";
 import "../knowledge-memory/index.js";
 import { consentFilteredText } from "../user-context/sources/consent-fields.js";

package/dist/src/knowledge/local-folder-adapter.js

@@ -46,10 +46,7 @@ var LocalFolderKnowledgeSourceAdapter = class {
 		};
 		await walk(root);
 		paths.sort((left, right) => left.localeCompare(right));
-		let after;
-		try {
-			after = JSON.parse(input.cursor ?? "{}").after;
-		} catch {}
+		const after = JSON.parse(input.cursor ?? "{}").after;
 		const remaining = after ? paths.filter((path) => relative(root, path).localeCompare(after) > 0) : paths;
 		const page = remaining.slice(0, this.pageSize);
 		const hasMore = remaining.length > page.length;
@@ -85,7 +82,7 @@ var LocalFolderKnowledgeSourceAdapter = class {
 		}
 		return {
 			items,
-			nextCursor: hasMore ? JSON.stringify({ after: relative(root, page.at(-1)).split(sep).join("/") }) : scanStartedAt,
+			nextCursor: hasMore ? JSON.stringify({ after: relative(root, page.at(-1)).split(sep).join("/") }) : JSON.stringify({ capturedAt: scanStartedAt }),
 			hasMore,
 			warnings,
 			snapshotExternalIds: warnings.length ? void 0 : paths.map((path) => relative(root, path).split(sep).join("/"))

package/dist/src/knowledge-memory/usage-policy.js

@@ -1,8 +1,8 @@
 import { getSqliteDatabase, init_transaction } from "../storage/sqlite/transaction.js";
 import { getSessionMetadata } from "../storage/sqlite/session-read-repository.js";
 import { init_session_repository } from "../storage/sqlite/session-repository.js";
-import { getUnderstandingConsent } from "../user-context/sources/consent-repository.js";
 import { isOwnerIdentity } from "../user-context/identity-bindings.js";
+import { getUnderstandingConsent } from "../user-context/sources/consent-repository.js";
 //#region src/knowledge-memory/usage-policy.ts
 init_transaction();
 init_session_repository();

package/dist/src/local-apps/service.js

@@ -1,7 +1,7 @@
 import { resolveStateDir } from "../config/paths-state.js";
+import { currentOperationId, init_operation_context } from "../infra/operation-context.js";
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
-import { currentOperationId, init_operation_context } from "../infra/operation-context.js";
 import { afterSqliteCommit, init_transaction, runSqliteWriteTransaction } from "../storage/sqlite/transaction.js";
 import { ExtensionCapabilityBindingsSchema, extensionCapabilityPermissions } from "../../packages/gateway-contract/src/extension-capabilities.js";
 import { init_src } from "../../packages/gateway-contract/src/index.js";

package/dist/src/memory-learning/forget-capture.js

@@ -5,6 +5,7 @@ import { createCollaborationRule, init_collaboration_rule_repository, listCollab
 import { canUseKnowledge } from "../knowledge-memory/usage-policy.js";
 import { deleteKnowledgeItem, getKnowledgeItem, writeKnowledgeItem } from "../knowledge-memory/repository.js";
 import "../knowledge-memory/index.js";
+import { isUnquotedOwnerEvidence } from "./owner-directive.js";
 import { createHash } from "node:crypto";
 //#region src/memory-learning/forget-capture.ts
 init_logger();
@@ -17,7 +18,7 @@ function applyKnowledgeDeletions(input) {
 		const outputs = [];
 		for (const operation of input.interpretation.knowledgeDeletions ?? []) {
 			if (!operation.evidenceRefs.length || operation.evidenceRefs.some((ref) => !input.evidence.some((entry) => entry.ref === ref && entry.role === "user"))) continue;
-			if (!operation.evidence?.length || operation.evidence.some((claim) => !input.evidence.some((entry) => entry.ref === claim.ref && entry.role === "user" && entry.text.normalize("NFKC").toLowerCase().includes(claim.quote.normalize("NFKC").toLowerCase())))) continue;
+			if (!operation.evidence?.length || operation.evidence.some((claim) => !input.evidence.some((entry) => entry.ref === claim.ref && entry.role === "user" && isUnquotedOwnerEvidence(entry.text, claim.quote)))) continue;
 			let targets = operation.targetKnowledgeIds.flatMap((id) => {
 				const item = input.allowedTargetIds.includes(id) ? getKnowledgeItem(id) : void 0;
 				return item && item.recordClass === "memory" && canUseKnowledge(item, input.context) ? [item] : [];
@@ -67,7 +68,7 @@ function applyKnowledgeDeletions(input) {
         FROM context_evidence e WHERE e.conversation_id IS NOT NULL AND e.message_id IS NOT NULL
           AND (e.evidence_id IN (SELECT evidence_id FROM knowledge_evidence_links WHERE knowledge_id=?)
             OR e.message_id IN (SELECT value FROM knowledge_revisions r, json_each(r.source_json, '$.evidenceRefs')
-              WHERE r.knowledge_id=?))`).all(item.id, item.id).flatMap((entry) => [`${entry.conversation_id}:${entry.message_id}`, `${entry.conversation_id}:*`]));
+              WHERE r.knowledge_id=?))`).all(item.id, item.id).flatMap((entry) => [`${entry.conversation_id}:${entry.message_id}`, `${entry.conversation_id}:*`])).concat(targets.length && input.context.conversationId ? [`${input.context.conversationId}:*`] : []);
 			for (const item of targets) {
 				deleteKnowledgeItem(item.id, Date.now(), { includeRelated: false });
 				outputs.push({

package/dist/src/memory-learning/forgotten-history.d.ts

@@ -1,5 +1,15 @@
 import type { CaptureScopeContext } from '../user-model/capture/executor.js';
 /** A later source-specific read request does not authorize saving forgotten facts again. */
 export declare function explicitlyReadsOriginalHistory(text: string): boolean;
+/** A value-free, per-request notice makes legitimate original reads distinguishable from automatic recall. */
+export declare function originalReadAuthorizationNotice(context: CaptureScopeContext, userText?: string): string;
 export declare function forgottenHistoryEntries(context: CaptureScopeContext, userText?: string): Set<string>;
+/** Project provenance for model consumption without changing the retained audit source. */
+export declare function projectForgottenEvidence<T>(source: T, context: CaptureScopeContext, userText?: string, provenanceRefs?: string[]): T;
+/** Remove earlier materialized reads from active history, retaining this turn and system context. */
+export declare function projectForgottenHistoryMessages<T extends {
+    role: string;
+}>(messages: T[], context: CaptureScopeContext, userText?: string): T[];
 export declare const FORGOTTEN_HISTORY_EXCERPT = "[This entry supported information the user asked to forget. Automatic recall is withheld. A later explicit request to re-read original records is required; do not infer the hidden values.]";
+/** Recheck rendered memory snapshots at dispatch; deleted facts cannot survive in a cached prompt. */
+export declare function projectSuppressedMemoryBlocks(text: string, context: CaptureScopeContext): string;

package/dist/src/memory-learning/forgotten-history.js

@@ -1,33 +1,137 @@
 import { isXopcDatabaseOpen } from "../storage/sqlite/connection.js";
+import { getSqliteDatabase, init_transaction } from "../storage/sqlite/transaction.js";
+import { init_domain } from "../user-model/domain.js";
 import { init_collaboration_rule_repository, listCollaborationRules } from "../storage/sqlite/collaboration-rule-repository.js";
 import { init_sqlite } from "../storage/sqlite/index.js";
+import { isMemorySuppressed, memoryFingerprint } from "../user-context/memory-suppression.js";
 //#region src/memory-learning/forgotten-history.ts
 init_sqlite();
 init_collaboration_rule_repository();
+init_domain();
+init_transaction();
 /** A later source-specific read request does not authorize saving forgotten facts again. */
 function explicitlyReadsOriginalHistory(text) {
 	if (/(?:引文|引用|改写|措辞|不是要|quoted|rephrase)/iu.test(text)) return false;
-	if (/(?:不要|别|不必|禁止)\s*(?:再|去)?(?:恢复|查阅|查出|读取|找回|查)|(?:do not|don't)\s+(?:read|look|recover|retrieve|restore)/iu.test(text)) return false;
+	if (/(?:不要|别|不必|禁止)\s*(?:再|去|从[^。；;，,！？\n]{0,40})?(?:恢复|查阅|查出|读取|找回|查)|(?:do not|don't)\s+(?:read|look|recover|retrieve|restore)/iu.test(text)) return false;
 	return /(?:原始|旧|先前|过去).{0,8}(?:记录|对话|原文)|(?:original|old|previous|past).{0,20}(?:record|conversation|transcript|history)/iu.test(text) && /(?:^|\n)\s*(?:(?:请|麻烦|本次|这次|现在|please|this time)[，,\s]*){0,3}[^。\n！？]{0,150}(?:恢复|查阅|查出|读取|找回|read|look up|retrieve|recover|restore)/iu.test(text);
 }
+function matchesOriginalRead(rule, userText) {
+	const binding = rule.conditions.reread;
+	const property = binding?.property === "date_time" ? /日期|时间|哪天|哪日|几点|日程|\b(?:date|time|when|schedule)\b/iu : binding?.property === "price" ? /票价|报价|价格|总价|金额|费用|花费|价钱|\b(?:price|cost|amount)\b/iu : void 0;
+	return Boolean(typeof binding?.subject === "string" && binding.subject.length > 0 && property && explicitlyReadsOriginalHistory(userText) && userText.split(/[。；;，,!?！？\n]/u).some((clause) => explicitlyReadsOriginalHistory(clause) && clause.normalize("NFKC").toLowerCase().includes(binding.subject.normalize("NFKC").toLowerCase()) && property.test(clause)));
+}
+function ruleVisible(rule, context) {
+	return rule.status === "active" && rule.category === "boundary" && Array.isArray(rule.conditions.forgottenHistoryEntries) && (rule.scope.type === "global" || rule.scope.id === {
+		agent: context.agentId,
+		workspace: context.workspaceId,
+		project: context.projectId,
+		session: context.conversationId
+	}[rule.scope.type]);
+}
+/** A value-free, per-request notice makes legitimate original reads distinguishable from automatic recall. */
+function originalReadAuthorizationNotice(context, userText = "") {
+	if (!isXopcDatabaseOpen()) return "";
+	const grants = listCollaborationRules().filter((rule) => ruleVisible(rule, context) && matchesOriginalRead(rule, userText)).map((rule) => {
+		const { subject, property } = rule.conditions.reread;
+		return {
+			subject,
+			property
+		};
+	});
+	return grants.length ? "The current author request matches a scoped original-record re-read exception for ONLY the following subject and field: " + JSON.stringify(grants) + ". The derived fact remains forgotten. Use session_search for original records in other conversations, or session_recall for this conversation. Missing active memory does not establish that authorized originals are unavailable. All source access checks still apply. Read only for this turn; do not infer missing values or save the recalled fact again." : "";
+}
 function forgottenHistoryEntries(context, userText = "") {
 	if (!isXopcDatabaseOpen()) return /* @__PURE__ */ new Set();
 	const entries = /* @__PURE__ */ new Set();
 	for (const rule of listCollaborationRules()) {
-		if (rule.status !== "active" || rule.category !== "boundary") continue;
-		if (!(rule.scope.type === "global" || rule.scope.id === {
-			agent: context.agentId,
-			workspace: context.workspaceId,
-			project: context.projectId,
-			session: context.conversationId
-		}[rule.scope.type]) || !Array.isArray(rule.conditions.forgottenHistoryEntries)) continue;
-		const binding = rule.conditions.reread;
-		const property = binding?.property === "date_time" ? /日期|时间|哪天|哪日|几点|日程|\b(?:date|time|when|schedule)\b/iu : binding?.property === "price" ? /票价|报价|价格|总价|金额|费用|花费|价钱|\b(?:price|cost|amount)\b/iu : void 0;
-		if (typeof binding?.subject === "string" && binding.subject.length > 0 && property && userText.split(/[。；;，,!?！？\n]/u).some((clause) => explicitlyReadsOriginalHistory(clause) && clause.normalize("NFKC").toLowerCase().includes(binding.subject.normalize("NFKC").toLowerCase()) && property.test(clause))) continue;
-		for (const entry of rule.conditions.forgottenHistoryEntries) if (typeof entry === "string") entries.add(entry);
+		const originalEntries = rule.conditions.forgottenHistoryEntries;
+		if (!ruleVisible(rule, context) || !Array.isArray(originalEntries)) continue;
+		const authorized = matchesOriginalRead(rule, userText);
+		const db = getSqliteDatabase();
+		if (authorized) {
+			if (context.conversationId) db.prepare(`UPDATE sessions SET custom_data_json = json_set(
+        CASE WHEN json_valid(custom_data_json) THEN custom_data_json ELSE '{}' END,
+        '$._forgottenReadRules', json_insert(COALESCE(json_extract(custom_data_json, '$._forgottenReadRules'), '[]'), '$[#]', ?))
+        WHERE conversation_id = ? AND NOT EXISTS (
+          SELECT 1 FROM json_each(COALESCE(json_extract(custom_data_json, '$._forgottenReadRules'), '[]')) WHERE value = ?)`).run(rule.id, context.conversationId, rule.id);
+			continue;
+		}
+		for (const entry of originalEntries) if (typeof entry === "string") entries.add(entry);
+		const copies = db.prepare(`SELECT conversation_id FROM sessions, json_each(
+      CASE WHEN json_valid(custom_data_json) THEN COALESCE(json_extract(custom_data_json, '$._forgottenReadRules'), '[]') ELSE '[]' END)
+      WHERE value = ?`).all(rule.id);
+		for (const copy of copies) entries.add(`${copy.conversation_id}:*`);
 	}
 	return entries;
 }
+/** Project provenance for model consumption without changing the retained audit source. */
+function projectForgottenEvidence(source, context, userText = "", provenanceRefs = []) {
+	const protectedEntries = forgottenHistoryEntries(context, userText);
+	if (!protectedEntries.size || source === void 0 || source === null) return source;
+	const blocked = /* @__PURE__ */ new Set();
+	const db = getSqliteDatabase();
+	for (const key of protectedEntries) {
+		const split = key.indexOf(":");
+		const conversation = key.slice(0, split), entry = key.slice(split + 1);
+		blocked.add(conversation);
+		if (entry !== "*") blocked.add(entry);
+		const rows = db.prepare(`SELECT evidence_id, message_id FROM context_evidence WHERE conversation_id = ?
+      AND (? = '*' OR message_id = ?)`).all(conversation, entry, entry);
+		for (const row of rows) {
+			blocked.add(row.evidence_id);
+			if (row.message_id) blocked.add(row.message_id);
+		}
+	}
+	const encoded = JSON.stringify([source, provenanceRefs]);
+	return encoded && [...blocked].some((ref) => encoded.includes(ref)) ? {
+		withheld: true,
+		scope: "source_excerpt_only",
+		reason: "The original evidence excerpt is withheld because it also contains a forgotten field. This redacts provenance text only; it does not retract the separately returned active fact or change its status or scope. Do not reconstruct the hidden values."
+	} : source;
+}
+/** Remove earlier materialized reads from active history, retaining this turn and system context. */
+function projectForgottenHistoryMessages(messages, context, userText = "") {
+	if (!forgottenHistoryEntries(context, userText).has(`${context.conversationId}:*`)) return messages;
+	const latestUser = messages.findLastIndex((message) => message.role === "user");
+	return latestUser < 0 ? messages.filter((message) => message.role === "system") : messages.filter((message, index) => message.role === "system" || index >= latestUser);
+}
 const FORGOTTEN_HISTORY_EXCERPT = "[This entry supported information the user asked to forget. Automatic recall is withheld. A later explicit request to re-read original records is required; do not infer the hidden values.]";
+/** Recheck rendered memory snapshots at dispatch; deleted facts cannot survive in a cached prompt. */
+function projectSuppressedMemoryBlocks(text, context) {
+	if (!isXopcDatabaseOpen() || !text.includes("<user-context>")) return text;
+	const db = getSqliteDatabase();
+	const scopes = [
+		{
+			type: "global",
+			id: ""
+		},
+		{
+			type: "agent",
+			id: context.agentId
+		},
+		{
+			type: "workspace",
+			id: context.workspaceId
+		},
+		{
+			type: "project",
+			id: context.projectId
+		},
+		{
+			type: "session",
+			id: context.conversationId
+		}
+	].filter((scope) => scope.id !== void 0);
+	return text.replace(/<user-context>[\s\S]*?<\/user-context>/gu, (block) => block.replace(/^- (.+(?:\n(?!- |\s*$).+)*)/gmu, (item, content) => {
+		const claim = content.replace(/ \[source report [^\]]+\]$/u, "").replace(/ \(confidence [\d.]+\)$/u, "");
+		return isMemorySuppressed(db, scopes.flatMap((scope) => ["knowledge-content", "assertion-content"].map((kind) => memoryFingerprint([
+			kind,
+			"local-owner",
+			scope.type,
+			scope.id,
+			claim
+		])))) ? "" : item;
+	}));
+}
 //#endregion
-export { FORGOTTEN_HISTORY_EXCERPT, explicitlyReadsOriginalHistory, forgottenHistoryEntries };
+export { FORGOTTEN_HISTORY_EXCERPT, explicitlyReadsOriginalHistory, forgottenHistoryEntries, originalReadAuthorizationNotice, projectForgottenEvidence, projectForgottenHistoryMessages, projectSuppressedMemoryBlocks };

package/dist/src/memory-learning/owner-directive.d.ts

@@ -0,0 +1,2 @@
+/** User-role evidence may contain quoted instructions that carry no mutation authority. */
+export declare function isUnquotedOwnerEvidence(text: string, quote: string): boolean;

package/dist/src/memory-learning/owner-directive.js

@@ -0,0 +1,10 @@
+//#region src/memory-learning/owner-directive.ts
+/** User-role evidence may contain quoted instructions that carry no mutation authority. */
+function isUnquotedOwnerEvidence(text, quote) {
+	const author = text.replace(/```[\s\S]*?```|~~~[\s\S]*?~~~/gu, "").replace(/“[^”]*”|「[^」]*」|『[^』]*』|"[^"\n]*"/gu, (span) => /忘记|忘掉|删除|清除|删掉|\b(?:forget|delete|erase|remove)\b/iu.test(span) ? "" : span).replace(/^\s*>.*$/gmu, "");
+	if (/(?:不要|别|不必|无需|禁止)(?:再)?(?:忘记|忘掉|删除|清除|删掉)|(?:do not|don't|never)\s+(?:forget|delete|erase|remove)/iu.test(author)) return false;
+	if (!/忘记|忘掉|删除|删掉|清除|移除|(?:不再|不要再|别再)保存|\b(?:forget|delete|erase|remove)\b|(?:stop|don't|do not)\s+(?:remembering|retaining|storing|remember|retain|store)/iu.test(author)) return false;
+	return !!quote.trim() && author.normalize("NFKC").toLowerCase().includes(quote.normalize("NFKC").toLowerCase());
+}
+//#endregion
+export { isUnquotedOwnerEvidence };

package/dist/src/memory-learning/service.js

@@ -3,7 +3,6 @@ import { init_logger } from "../utils/logger.js";
 import { isXopcDatabaseOpen } from "../storage/sqlite/connection.js";
 import { getSqliteDatabase, init_transaction } from "../storage/sqlite/transaction.js";
 import { init_sqlite } from "../storage/sqlite/index.js";
-import { repairLegacyKnowledgeEvidence } from "../knowledge-memory/repair-evidence.js";
 import { claimLearningJob, enqueueConversationLearning, failLearningJob, renewLearningLease } from "./repository.js";
 import { learnTaskReceipts } from "./task-receipts.js";
 import { pruneSourceRetention, recoverKnowledgeIndexes, recoverSourceLearning, runSourceLearning } from "./source-learning.js";
@@ -35,7 +34,6 @@ var MemoryLearningService = class {
 		if (this.stopped || this.running || !config || !isXopcDatabaseOpen()) return;
 		this.running = true;
 		try {
-			repairLegacyKnowledgeEvidence();
 			if (Date.now() - this.lastRetentionSweep >= 36e5) {
 				pruneSourceRetention(config);
 				this.lastRetentionSweep = Date.now();

package/dist/src/memory-learning/source-learning.js

@@ -3,8 +3,8 @@ import { init_logger } from "../utils/logger.js";
 import { getSqliteDatabase, init_transaction, runSqliteWriteTransaction } from "../storage/sqlite/transaction.js";
 import { claimContextExtractionRun, finishContextExtractionRun, init_context_extraction_repository } from "../storage/sqlite/context-extraction-repository.js";
 import { init_config, resolveKnowledgeReadPolicy } from "../user-context/config.js";
-import { getActiveUnderstandingConsent, getUnderstandingConsent } from "../user-context/sources/consent-repository.js";
 import { learningPolicyHash } from "./repository.js";
+import { getActiveUnderstandingConsent, getUnderstandingConsent } from "../user-context/sources/consent-repository.js";
 import { resolveModelSelector } from "../config/agent-model-intents.js";
 import { init_providers, resolveModel } from "../providers/index.js";
 import { completeWithResolvedCredentials } from "../providers/model-call.js";

package/dist/src/memory-learning/task-receipts.js

@@ -2,9 +2,9 @@ import { getSqliteDatabase, init_transaction, runSqliteWriteTransaction } from "
 import { createContextEvidence, init_context_evidence_repository } from "../storage/sqlite/context-evidence-repository.js";
 import { getSessionMetadata } from "../storage/sqlite/session-read-repository.js";
 import { init_session_repository } from "../storage/sqlite/session-repository.js";
+import { resolveUserContextSessionAccess } from "../user-context/access-policy.js";
 import { inferMemorySensitivity } from "../agent/memory/sensitivity.js";
 import { writeKnowledgeItem } from "../knowledge-memory/repository.js";
-import { resolveUserContextSessionAccess } from "../user-context/access-policy.js";
 import "../knowledge-memory/index.js";
 import { createHash } from "node:crypto";
 //#region src/memory-learning/task-receipts.ts

package/dist/src/migrations/index.js

@@ -1,3 +1,3 @@
 import { listRegisteredMigrations, registerMigration, unregisterMigrationsForSource } from "./registry.js";
-import { CORE_MIGRATIONS, applyMigrations, detectMigrations, runBootstrapMigrationsSync } from "./runner.js";
-export { CORE_MIGRATIONS, applyMigrations, detectMigrations, listRegisteredMigrations, registerMigration, runBootstrapMigrationsSync, unregisterMigrationsForSource };
+import { applyMigrations, detectMigrations, runBootstrapMigrationsSync } from "./runner.js";
+export { applyMigrations, detectMigrations, listRegisteredMigrations, registerMigration, runBootstrapMigrationsSync, unregisterMigrationsForSource };

package/dist/src/migrations/runner.d.ts

@@ -1,5 +1,4 @@
-import type { Migration, MigrationPlanItem } from './types.js';
-export declare const CORE_MIGRATIONS: readonly Migration[];
+import type { MigrationPlanItem } from './types.js';
 export type MigrationApplyMode = 'auto-safe' | 'doctor-fix' | 'manual';
 export interface MigrationApplyResult {
     items: MigrationPlanItem[];

package/dist/src/migrations/runner.js

@@ -2,8 +2,6 @@ import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
 import { ConfigSchema, init_schema } from "../config/schema.js";
 import { listRegisteredMigrations } from "./registry.js";
-import { memoryConfigMigration } from "./memory-config.js";
-import { retiredLocalSttMigration } from "./retired-local-stt.js";
 import { dirname, join } from "node:path";
 import { existsSync, mkdirSync, readFileSync, renameSync, writeFileSync } from "node:fs";
 //#region src/migrations/runner.ts
@@ -12,9 +10,8 @@ init_logger();
 const log = createLogger("Migrations");
 const MIGRATION_LEDGER_FILENAME = "migrations.json";
 const CONFIG_BACKUP_COUNT = 10;
-const CORE_MIGRATIONS = [memoryConfigMigration, retiredLocalSttMigration];
 function listAllMigrations() {
-	return [...CORE_MIGRATIONS, ...listRegisteredMigrations().map((entry) => entry.migration)];
+	return listRegisteredMigrations().map((entry) => entry.migration);
 }
 function publicItem(item) {
 	if (!item.details || !Object.hasOwn(item.details, "config")) return item;
@@ -185,4 +182,4 @@ function runBootstrapMigrationsSync(configPath, options = {}) {
 	return result;
 }
 //#endregion
-export { CORE_MIGRATIONS, applyMigrations, detectMigrations, runBootstrapMigrationsSync };
+export { applyMigrations, detectMigrations, runBootstrapMigrationsSync };