@xopcai/xopc 0.0.414 → 0.0.416

package/dist/src/storage/sqlite/upgrades/237_personal_strategy_versions.sql

@@ -0,0 +1,18 @@
+CREATE TABLE personal_strategy_versions (
+  id TEXT PRIMARY KEY,
+  owner_id TEXT NOT NULL,
+  thread_id TEXT NOT NULL REFERENCES personal_attention_threads(id) ON DELETE CASCADE,
+  revision INTEGER NOT NULL,
+  kind TEXT NOT NULL CHECK(kind IN ('stop', 'defer', 'adjust', 'rollback')),
+  before_json TEXT NOT NULL CHECK(json_valid(before_json)),
+  after_json TEXT NOT NULL CHECK(json_valid(after_json)),
+  input_json TEXT NOT NULL CHECK(json_valid(input_json)),
+  source_entry_id TEXT REFERENCES transcript_entries(entry_id) ON DELETE SET NULL,
+  feedback_id TEXT REFERENCES personal_feedback(id) ON DELETE SET NULL,
+  restored_version_id TEXT REFERENCES personal_strategy_versions(id),
+  dedupe_key TEXT NOT NULL,
+  created_at INTEGER NOT NULL,
+  UNIQUE(owner_id, dedupe_key),
+  UNIQUE(thread_id, revision)
+);
+CREATE INDEX personal_strategy_versions_thread ON personal_strategy_versions(thread_id, revision DESC);

package/dist/src/storage/sqlite/upgrades/238_browser_record_replay.sql

@@ -0,0 +1,45 @@
+CREATE TABLE browser_automation_versions (
+  automation_id TEXT NOT NULL REFERENCES browser_automations(automation_id) ON DELETE CASCADE,
+  revision INTEGER NOT NULL,
+  definition_json TEXT NOT NULL,
+  created_at_ms INTEGER NOT NULL,
+  PRIMARY KEY (automation_id, revision)
+);
+INSERT INTO browser_automation_versions SELECT automation_id, revision, definition_json, updated_at_ms FROM browser_automations;
+
+CREATE TABLE browser_automation_verifications (
+  automation_id TEXT NOT NULL,
+  revision INTEGER NOT NULL,
+  run_id TEXT NOT NULL REFERENCES browser_automation_runs(run_id) ON DELETE CASCADE,
+  verified_at_ms INTEGER NOT NULL,
+  PRIMARY KEY (automation_id, revision),
+  FOREIGN KEY (automation_id, revision) REFERENCES browser_automation_versions(automation_id, revision) ON DELETE CASCADE
+);
+ALTER TABLE browser_automation_runs ADD COLUMN client_request_id TEXT;
+ALTER TABLE browser_automation_runs ADD COLUMN business_outcome TEXT;
+CREATE UNIQUE INDEX idx_browser_run_request ON browser_automation_runs(client_request_id) WHERE client_request_id IS NOT NULL;
+
+CREATE TABLE browser_recordings (
+  recording_id TEXT PRIMARY KEY,
+  principal_id TEXT NOT NULL,
+  state TEXT NOT NULL,
+  ack_seq INTEGER NOT NULL DEFAULT 0,
+  final_seq INTEGER,
+  automation_id TEXT REFERENCES browser_automations(automation_id) ON DELETE CASCADE,
+  error TEXT,
+  created_at_ms INTEGER NOT NULL,
+  updated_at_ms INTEGER NOT NULL
+);
+CREATE TABLE browser_recording_events (
+  recording_id TEXT NOT NULL REFERENCES browser_recordings(recording_id) ON DELETE CASCADE,
+  seq INTEGER NOT NULL,
+  event_id TEXT NOT NULL UNIQUE,
+  payload_json TEXT NOT NULL,
+  PRIMARY KEY (recording_id, seq)
+);
+
+UPDATE automations SET action_json=json_set(action_json, '$.revision', COALESCE((SELECT revision FROM browser_automations WHERE automation_id=json_extract(automations.action_json, '$.automationId')), 1)), enabled=0
+WHERE json_extract(action_json, '$.kind')='browser_automation';
+
+UPDATE devices SET scopes_json=json_insert(scopes_json, '$[#]', 'automations.read') WHERE platform='chrome' AND NOT EXISTS(SELECT 1 FROM json_each(scopes_json) WHERE value='automations.read');
+UPDATE devices SET scopes_json=json_insert(scopes_json, '$[#]', 'automations.write') WHERE platform='chrome' AND NOT EXISTS(SELECT 1 FROM json_each(scopes_json) WHERE value='automations.write');

package/dist/src/storage/sqlite/upgrades/239_clarification_notifications.sql

@@ -0,0 +1,26 @@
+CREATE TABLE clarification_notification_outbox (
+  wait_id TEXT PRIMARY KEY REFERENCES session_clarification_waits(id) ON DELETE CASCADE,
+  status TEXT NOT NULL DEFAULT 'pending' CHECK(status IN ('pending', 'settled')),
+  created_at INTEGER NOT NULL
+);
+CREATE INDEX idx_clarification_notification_pending ON clarification_notification_outbox(status, created_at);
+INSERT INTO clarification_notification_outbox(wait_id, created_at)
+SELECT id, CAST(json_extract(data_json, '$.createdAt') AS INTEGER)
+FROM session_clarification_waits WHERE status = 'open';
+
+ALTER TABLE notification_deliveries RENAME TO notification_deliveries_old;
+CREATE TABLE notification_deliveries (
+  event_id TEXT NOT NULL REFERENCES notification_events(event_id) ON DELETE CASCADE,
+  device_id TEXT NOT NULL REFERENCES device_push_endpoints(device_id) ON DELETE CASCADE,
+  status TEXT NOT NULL CHECK(status IN ('pending', 'accepted', 'delivered', 'dead', 'cancelled')),
+  attempts INTEGER NOT NULL DEFAULT 0,
+  next_attempt_at INTEGER NOT NULL,
+  provider_ticket_id TEXT,
+  last_error TEXT,
+  updated_at INTEGER NOT NULL,
+  PRIMARY KEY(event_id, device_id)
+);
+INSERT INTO notification_deliveries SELECT * FROM notification_deliveries_old;
+DROP TABLE notification_deliveries_old;
+CREATE INDEX idx_notification_deliveries_due ON notification_deliveries(status, next_attempt_at);
+CREATE INDEX idx_notification_deliveries_device ON notification_deliveries(device_id);

package/dist/src/storage/sqlite/upgrades/240_device_settings.sql

@@ -0,0 +1,5 @@
+CREATE TABLE endpoint_device_settings (
+  principal_id TEXT PRIMARY KEY REFERENCES endpoint_principals(id) ON DELETE CASCADE,
+  nickname TEXT NOT NULL CHECK(length(nickname) BETWEEN 1 AND 80),
+  revision INTEGER NOT NULL DEFAULT 1 CHECK(revision > 0)
+);

package/dist/src/storage/sqlite/upgrades/241_device_grant_audit.sql

@@ -0,0 +1,13 @@
+CREATE TABLE device_grant_events (
+  id TEXT PRIMARY KEY,
+  grant_id TEXT NOT NULL,
+  conversation_id TEXT NOT NULL,
+  requestor_principal_id TEXT NOT NULL,
+  target_principal_id TEXT NOT NULL,
+  target_endpoint_id TEXT NOT NULL,
+  tool_name TEXT NOT NULL,
+  arguments_sha256 TEXT NOT NULL,
+  event TEXT NOT NULL CHECK(event IN ('issued','reserved','consumed','revoked','expired')),
+  created_at_ms INTEGER NOT NULL
+);
+CREATE INDEX device_grant_events_conversation ON device_grant_events(conversation_id, created_at_ms);

package/dist/src/storage/sqlite/upgrades/242_cloud_usage_receipts.sql

@@ -0,0 +1,5 @@
+ALTER TABLE ai_usage_events ADD COLUMN cloud_request_id TEXT;
+ALTER TABLE ai_usage_events ADD COLUMN cloud_billing_json TEXT
+  CHECK(cloud_billing_json IS NULL OR json_valid(cloud_billing_json));
+CREATE UNIQUE INDEX idx_ai_usage_cloud_request
+  ON ai_usage_events(cloud_request_id) WHERE cloud_request_id IS NOT NULL;

package/dist/src/storage/sqlite/upgrades/243_voice_opening_greetings.sql

@@ -0,0 +1,12 @@
+CREATE TABLE voice_opening_greetings (
+  principal_id TEXT NOT NULL,
+  conversation_id TEXT NOT NULL,
+  logical_call_id TEXT NOT NULL,
+  response_id TEXT NOT NULL,
+  state TEXT NOT NULL CHECK(state IN ('claimed', 'completed', 'skipped', 'interrupted', 'failed', 'expired')),
+  reason TEXT,
+  created_at INTEGER NOT NULL,
+  updated_at INTEGER NOT NULL,
+  PRIMARY KEY (principal_id, conversation_id, logical_call_id)
+);
+CREATE INDEX idx_voice_opening_greetings_created ON voice_opening_greetings(created_at);

package/dist/src/storage/sqlite/upgrades/244_device_request_proofs.sql

@@ -0,0 +1,8 @@
+ALTER TABLE devices ADD COLUMN request_proof_version INTEGER NOT NULL DEFAULT 0;
+CREATE TABLE device_request_nonces (
+  device_id TEXT NOT NULL REFERENCES devices(device_id) ON DELETE CASCADE,
+  nonce TEXT NOT NULL,
+  expires_at INTEGER NOT NULL,
+  PRIMARY KEY (device_id, nonce)
+) WITHOUT ROWID;
+CREATE INDEX device_request_nonces_expiry ON device_request_nonces(expires_at);

package/dist/src/storage/sqlite/upgrades/245_memory_learning.sql

@@ -0,0 +1,125 @@
+ALTER TABLE knowledge_items ADD COLUMN claim_mode TEXT NOT NULL DEFAULT 'observed'
+  CHECK (claim_mode IN ('explicit', 'observed', 'inferred', 'reported'));
+ALTER TABLE knowledge_items ADD COLUMN verification TEXT NOT NULL DEFAULT 'supported'
+  CHECK (verification IN ('supported', 'tentative', 'conflicted'));
+ALTER TABLE knowledge_items ADD COLUMN sensitivity TEXT NOT NULL DEFAULT 'normal'
+  CHECK (sensitivity IN ('normal', 'personal', 'secret', 'regulated'));
+ALTER TABLE user_assertion_evidence ADD COLUMN content_hash TEXT;
+CREATE TRIGGER assertion_evidence_snapshot_insert AFTER INSERT ON user_assertion_evidence BEGIN
+  UPDATE user_assertion_evidence SET content_hash = (SELECT content_hash FROM context_evidence WHERE evidence_id = NEW.evidence_id)
+    WHERE assertion_id = NEW.assertion_id AND evidence_id = NEW.evidence_id AND relation = NEW.relation;
+END;
+CREATE TRIGGER assertion_evidence_snapshot_update AFTER UPDATE OF confidence ON user_assertion_evidence BEGIN
+  UPDATE user_assertion_evidence SET content_hash = (SELECT content_hash FROM context_evidence WHERE evidence_id = NEW.evidence_id)
+    WHERE assertion_id = NEW.assertion_id AND evidence_id = NEW.evidence_id AND relation = NEW.relation;
+END;
+UPDATE knowledge_items SET claim_mode = CASE origin_class
+  WHEN 'owner' THEN 'explicit' WHEN 'untrusted' THEN 'reported' ELSE 'observed' END,
+  verification = CASE WHEN origin_class = 'untrusted' AND record_class = 'memory' THEN 'tentative' ELSE 'supported' END;
+
+CREATE TABLE knowledge_revisions (
+  revision_id TEXT PRIMARY KEY,
+  knowledge_id TEXT NOT NULL REFERENCES knowledge_items(knowledge_id) ON DELETE CASCADE,
+  content TEXT NOT NULL,
+  source_json TEXT NOT NULL,
+  created_at INTEGER NOT NULL
+);
+CREATE INDEX knowledge_revisions_item ON knowledge_revisions(knowledge_id, created_at);
+CREATE TABLE knowledge_evidence_links (
+  knowledge_id TEXT NOT NULL REFERENCES knowledge_items(knowledge_id) ON DELETE CASCADE,
+  evidence_id TEXT NOT NULL REFERENCES context_evidence(evidence_id) ON DELETE CASCADE,
+  content_hash TEXT,
+  consent_receipt_id TEXT REFERENCES understanding_consent_receipts(receipt_id),
+  PRIMARY KEY (knowledge_id, evidence_id)
+);
+CREATE TABLE owner_identity_bindings (
+  principal_id TEXT NOT NULL,
+  channel TEXT NOT NULL,
+  account_id TEXT NOT NULL,
+  peer_id TEXT NOT NULL,
+  verified_at INTEGER NOT NULL,
+  revoked_at INTEGER,
+  PRIMARY KEY (channel, account_id, peer_id)
+);
+CREATE TABLE memory_learning_jobs (
+  job_id TEXT PRIMARY KEY,
+  principal_id TEXT NOT NULL DEFAULT 'local-owner',
+  conversation_id TEXT NOT NULL REFERENCES sessions(conversation_id) ON DELETE CASCADE,
+  transcript_id TEXT NOT NULL,
+  through_seq INTEGER NOT NULL,
+  start_seq INTEGER,
+  extractor_version TEXT NOT NULL,
+  policy_hash TEXT NOT NULL,
+  workspace_id TEXT NOT NULL,
+  state TEXT NOT NULL CHECK (state IN ('queued','running','succeeded','retry_wait','failed','canceled')),
+  lease_token TEXT,
+  lease_until INTEGER,
+  attempts INTEGER NOT NULL DEFAULT 0,
+  next_attempt_at INTEGER NOT NULL,
+  error_code TEXT,
+  created_at INTEGER NOT NULL,
+  updated_at INTEGER NOT NULL,
+  UNIQUE(conversation_id, transcript_id, through_seq, extractor_version, policy_hash)
+);
+CREATE INDEX memory_learning_jobs_due ON memory_learning_jobs(state, next_attempt_at, lease_until);
+CREATE TABLE memory_source_learning_jobs (
+  job_id TEXT PRIMARY KEY,
+  chunk_id TEXT NOT NULL REFERENCES knowledge_source_chunks(chunk_id) ON DELETE CASCADE,
+  agent_id TEXT NOT NULL,
+  workspace_id TEXT NOT NULL,
+  consent_receipt_id TEXT NOT NULL REFERENCES understanding_consent_receipts(receipt_id),
+  policy_hash TEXT NOT NULL,
+  state TEXT NOT NULL CHECK(state IN ('queued','running','succeeded','retry_wait','failed','canceled')),
+  lease_token TEXT,
+  lease_until INTEGER,
+  attempts INTEGER NOT NULL DEFAULT 0,
+  next_attempt_at INTEGER NOT NULL,
+  error_code TEXT,
+  created_at INTEGER NOT NULL,
+  updated_at INTEGER NOT NULL,
+  UNIQUE(chunk_id, agent_id, consent_receipt_id, policy_hash)
+);
+CREATE INDEX memory_source_learning_due ON memory_source_learning_jobs(state, next_attempt_at, lease_until);
+CREATE TABLE memory_learning_receipts (
+  run_id TEXT PRIMARY KEY REFERENCES task_run_receipts(run_id) ON DELETE CASCADE,
+  learned_at INTEGER NOT NULL,
+  knowledge_id TEXT
+);
+CREATE TABLE memory_learning_cursors (
+  conversation_id TEXT NOT NULL REFERENCES sessions(conversation_id) ON DELETE CASCADE,
+  transcript_id TEXT NOT NULL,
+  processed_seq INTEGER NOT NULL DEFAULT 0,
+  observed_seq INTEGER NOT NULL DEFAULT 0,
+  updated_at INTEGER NOT NULL,
+  PRIMARY KEY (conversation_id, transcript_id)
+);
+CREATE TABLE knowledge_source_chunks (
+  chunk_id TEXT PRIMARY KEY,
+  source_item_id TEXT NOT NULL REFERENCES knowledge_source_items(item_id) ON DELETE CASCADE,
+  source_version TEXT NOT NULL,
+  consent_receipt_id TEXT REFERENCES understanding_consent_receipts(receipt_id),
+  ordinal INTEGER NOT NULL,
+  locator TEXT NOT NULL,
+  text TEXT NOT NULL,
+  UNIQUE(source_item_id, ordinal)
+);
+CREATE VIRTUAL TABLE knowledge_chunks_fts USING fts5(search_text, chunk_id UNINDEXED, tokenize='unicode61');
+CREATE TRIGGER knowledge_chunk_insert AFTER INSERT ON knowledge_source_chunks BEGIN
+  INSERT INTO knowledge_chunks_fts(search_text, chunk_id) VALUES (xopc_memory_search_text(NEW.text), NEW.chunk_id);
+END;
+CREATE TRIGGER knowledge_chunk_delete AFTER DELETE ON knowledge_source_chunks BEGIN
+  DELETE FROM knowledge_chunks_fts WHERE chunk_id = OLD.chunk_id;
+END;
+CREATE VIRTUAL TABLE knowledge_search_fts USING fts5(search_text, knowledge_id UNINDEXED, tokenize='unicode61');
+INSERT INTO knowledge_search_fts SELECT xopc_memory_search_text(content), knowledge_id FROM knowledge_items;
+DROP TABLE knowledge_items_fts;
+CREATE TRIGGER knowledge_search_insert AFTER INSERT ON knowledge_items BEGIN
+  INSERT INTO knowledge_search_fts VALUES (xopc_memory_search_text(NEW.content), NEW.knowledge_id);
+END;
+CREATE TRIGGER knowledge_search_update AFTER UPDATE OF content ON knowledge_items BEGIN
+  DELETE FROM knowledge_search_fts WHERE knowledge_id = OLD.knowledge_id;
+  INSERT INTO knowledge_search_fts VALUES (xopc_memory_search_text(NEW.content), NEW.knowledge_id);
+END;
+CREATE TRIGGER knowledge_search_delete AFTER DELETE ON knowledge_items BEGIN
+  DELETE FROM knowledge_search_fts WHERE knowledge_id = OLD.knowledge_id;
+END;

package/dist/src/storage/sqlite/upgrades/246_personal_session_thinking.sql

@@ -0,0 +1,22 @@
+-- Personal thinking preferences belong to the dedicated conversation, not its Agent.
+INSERT INTO session_config (conversation_id, thinking_level, updated_at)
+SELECT s.conversation_id, json_extract(a.overrides_json, '$.runtime.thinkingLevel'),
+       MAX(a.updated_at, s.updated_at)
+FROM sessions s JOIN agents a ON a.id = s.agent_id
+WHERE json_extract(s.custom_data_json, '$.personalAgent') = 1
+  AND json_type(a.overrides_json, '$.runtime.thinkingLevel') = 'text'
+ON CONFLICT(conversation_id) DO UPDATE SET
+  thinking_level = COALESCE(session_config.thinking_level, excluded.thinking_level),
+  updated_at = CASE WHEN session_config.thinking_level IS NULL
+    THEN MAX(session_config.updated_at + 1, excluded.updated_at) ELSE session_config.updated_at END;
+
+UPDATE agents SET
+  overrides_json = json_remove(overrides_json, '$.runtime.thinkingLevel'),
+  revision = revision + 1,
+  updated_at = MAX(updated_at + 1, CAST(unixepoch('subsec') * 1000 AS INTEGER))
+WHERE id IN (SELECT agent_id FROM sessions WHERE json_extract(custom_data_json, '$.personalAgent') = 1)
+  AND json_type(overrides_json, '$.runtime.thinkingLevel') IS NOT NULL;
+
+UPDATE agent_catalog_settings SET revision = revision + 1,
+  updated_at = MAX(updated_at + 1, CAST(unixepoch('subsec') * 1000 AS INTEGER))
+WHERE singleton_id = 1 AND changes() > 0;

package/dist/src/storage/sqlite/upgrades/247_agent_selection_records.sql

@@ -0,0 +1,32 @@
+CREATE TABLE agent_selection_records (
+  id TEXT PRIMARY KEY,
+  conversation_id TEXT NOT NULL REFERENCES sessions(conversation_id) ON DELETE CASCADE,
+  transcript_id TEXT,
+  input_id TEXT,
+  personal_request_id TEXT REFERENCES personal_requests(request_id) ON DELETE CASCADE,
+  task_id TEXT REFERENCES tasks(task_id) ON DELETE CASCADE,
+  task_run_id TEXT REFERENCES task_runs(run_id) ON DELETE SET NULL,
+  decision_group_id TEXT NOT NULL,
+  previous_selection_id TEXT REFERENCES agent_selection_records(id) ON DELETE SET NULL,
+  idempotency_key TEXT NOT NULL,
+  request_hash TEXT NOT NULL,
+  selected_agent_id TEXT NOT NULL,
+  selected_agent_revision INTEGER,
+  matcher_version INTEGER NOT NULL,
+  catalog_revision INTEGER NOT NULL,
+  requirements_json TEXT NOT NULL,
+  selected_profile_json TEXT,
+  assessment_json TEXT NOT NULL,
+  candidates_json TEXT,
+  selection_source TEXT NOT NULL CHECK(selection_source IN ('snapshot','match','explicit','legacy')),
+  reason_source TEXT NOT NULL CHECK(reason_source IN ('model','system')),
+  selection_reason TEXT NOT NULL,
+  status TEXT NOT NULL CHECK(status IN ('pending_connection','rejected','task_linked','start_blocked','start_failed')),
+  reason_code TEXT,
+  created_at INTEGER NOT NULL,
+  updated_at INTEGER NOT NULL,
+  UNIQUE(conversation_id, idempotency_key)
+);
+CREATE INDEX agent_selection_task ON agent_selection_records(task_id, created_at);
+CREATE INDEX agent_selection_request ON agent_selection_records(personal_request_id);
+CREATE INDEX agent_selection_origin ON agent_selection_records(conversation_id, created_at);

package/dist/src/storage/sqlite/upgrades/248_next_turn_suggestions.sql

@@ -0,0 +1,20 @@
+CREATE TABLE next_turn_suggestions (
+  conversation_id TEXT NOT NULL REFERENCES sessions(conversation_id) ON DELETE CASCADE,
+  locale TEXT NOT NULL CHECK (locale IN ('zh', 'en')),
+  suggestion_id TEXT NOT NULL UNIQUE,
+  snapshot_key TEXT NOT NULL,
+  state TEXT NOT NULL CHECK (state IN ('ready', 'none')),
+  payload_json TEXT,
+  expires_at INTEGER NOT NULL,
+  PRIMARY KEY (conversation_id, locale)
+);
+CREATE TABLE next_turn_suggestion_feedback (
+  conversation_id TEXT NOT NULL REFERENCES sessions(conversation_id) ON DELETE CASCADE,
+  suggestion_id TEXT NOT NULL,
+  impression_id TEXT NOT NULL,
+  event TEXT NOT NULL CHECK (event IN ('shown', 'accepted', 'dismissed', 'submitted')),
+  edited INTEGER NOT NULL DEFAULT 0,
+  created_at INTEGER NOT NULL,
+  PRIMARY KEY (suggestion_id, impression_id, event)
+);
+CREATE INDEX idx_next_turn_feedback_created ON next_turn_suggestion_feedback(created_at);

package/dist/src/storage/sqlite/upgrades/249_task_allocations.sql

@@ -0,0 +1,17 @@
+CREATE TABLE task_allocations (
+  id TEXT PRIMARY KEY,
+  task_id TEXT NOT NULL UNIQUE REFERENCES tasks(task_id) ON DELETE CASCADE,
+  origin_conversation_id TEXT NOT NULL REFERENCES sessions(conversation_id) ON DELETE CASCADE,
+  requirements_json TEXT NOT NULL,
+  task_version INTEGER NOT NULL,
+  status TEXT NOT NULL CHECK(status IN ('pending','selecting','assigned','blocked','failed','cancelled')),
+  selected_agent_id TEXT,
+  selection_reason TEXT,
+  reason_code TEXT,
+  attempts INTEGER NOT NULL DEFAULT 0,
+  lease_token TEXT,
+  lease_expires_at INTEGER,
+  next_attempt_at INTEGER NOT NULL,
+  updated_at INTEGER NOT NULL
+);
+CREATE INDEX task_allocations_pending ON task_allocations(status, next_attempt_at, lease_expires_at);

package/dist/src/storage/sqlite/upgrades/250_research_checkpoints.sql

@@ -0,0 +1,15 @@
+CREATE TABLE research_checkpoints (
+  id TEXT PRIMARY KEY,
+  conversation_id TEXT NOT NULL REFERENCES sessions(conversation_id) ON DELETE CASCADE,
+  workspace TEXT NOT NULL,
+  goal TEXT NOT NULL,
+  checkpoint_json TEXT NOT NULL CHECK(json_valid(checkpoint_json)),
+  status TEXT NOT NULL CHECK(status IN ('running','partial','completed','failed','cancelled')),
+  attempts INTEGER NOT NULL DEFAULT 0,
+  stop_reason TEXT,
+  summary TEXT NOT NULL DEFAULT '',
+  lease_token TEXT,
+  lease_expires_at INTEGER,
+  updated_at INTEGER NOT NULL
+);
+CREATE INDEX research_checkpoints_conversation ON research_checkpoints(conversation_id, updated_at);

package/dist/src/storage/sqlite/upgrades/251_personal_result_reads.sql

@@ -0,0 +1,40 @@
+CREATE TABLE personal_result_documents (
+  document_id TEXT PRIMARY KEY,
+  delivery_id TEXT NOT NULL REFERENCES task_result_deliveries(delivery_id) ON DELETE CASCADE,
+  source_id TEXT NOT NULL,
+  status TEXT NOT NULL CHECK(status IN ('pending', 'ready', 'unsupported', 'failed')),
+  lease_token TEXT,
+  lease_until INTEGER NOT NULL DEFAULT 0,
+  parser_version INTEGER NOT NULL,
+  content_revision TEXT,
+  content TEXT,
+  sections_json TEXT NOT NULL DEFAULT '[]',
+  limitations_json TEXT NOT NULL DEFAULT '[]',
+  fingerprint TEXT,
+  error TEXT,
+  UNIQUE(delivery_id, source_id)
+);
+CREATE VIRTUAL TABLE personal_result_search USING fts5(
+  document_id UNINDEXED, start_offset UNINDEXED, text, tokenize='trigram'
+);
+CREATE TABLE personal_result_sections (
+  document_id TEXT NOT NULL REFERENCES personal_result_documents(document_id) ON DELETE CASCADE,
+  section_id TEXT NOT NULL,
+  ordinal INTEGER NOT NULL,
+  title TEXT NOT NULL,
+  start_offset INTEGER NOT NULL,
+  char_length INTEGER NOT NULL,
+  locator_json TEXT NOT NULL,
+  PRIMARY KEY(document_id, section_id)
+);
+CREATE INDEX idx_personal_result_sections_order ON personal_result_sections(document_id, ordinal);
+CREATE TABLE personal_result_read_waits (
+  input_id TEXT PRIMARY KEY REFERENCES session_inputs(id) ON DELETE CASCADE,
+  conversation_id TEXT NOT NULL REFERENCES sessions(conversation_id) ON DELETE CASCADE,
+  transcript_id TEXT NOT NULL,
+  requests_json TEXT NOT NULL,
+  status TEXT NOT NULL DEFAULT 'pending' CHECK(status IN ('pending','queued','done','stale'))
+);
+CREATE TRIGGER personal_result_documents_delete AFTER DELETE ON personal_result_documents BEGIN
+  DELETE FROM personal_result_search WHERE document_id = old.document_id;
+END;

package/dist/src/storage/sqlite/upgrades/252_task_work_revisions.sql

@@ -0,0 +1,15 @@
+CREATE TABLE task_work_revisions (
+  revision_id TEXT PRIMARY KEY,
+  task_id TEXT NOT NULL REFERENCES tasks(task_id) ON DELETE CASCADE,
+  contract_version INTEGER NOT NULL,
+  baseline_delivery_id TEXT NOT NULL,
+  baseline_version TEXT NOT NULL,
+  instruction_entry_id TEXT NOT NULL,
+  input_id TEXT,
+  idempotency_key TEXT NOT NULL UNIQUE,
+  request_hash TEXT NOT NULL,
+  supersedes_json TEXT NOT NULL DEFAULT '[]',
+  original_body TEXT,
+  created_at INTEGER NOT NULL,
+  UNIQUE(task_id, contract_version)
+);

package/dist/src/storage/sqlite/upgrades/253_discussion_processing_recovery.sql

@@ -0,0 +1,20 @@
+CREATE TABLE discussion_processing (
+  discussion_id TEXT PRIMARY KEY REFERENCES discussion_captures(id) ON DELETE CASCADE,
+  run_id TEXT NOT NULL UNIQUE,
+  audio_sha256 TEXT,
+  base_transcript_revision INTEGER NOT NULL,
+  force_audio INTEGER NOT NULL DEFAULT 0 CHECK(force_audio IN (0,1)),
+  retry_stage TEXT,
+  attempt_count INTEGER NOT NULL DEFAULT 0,
+  next_attempt_at INTEGER,
+  lease_owner TEXT,
+  lease_until INTEGER
+);
+CREATE TABLE discussion_transcription_checkpoints (
+  run_id TEXT NOT NULL REFERENCES discussion_processing(run_id) ON DELETE CASCADE,
+  started_at_ms REAL NOT NULL,
+  ended_at_ms REAL NOT NULL,
+  result_json TEXT NOT NULL,
+  created_at INTEGER NOT NULL,
+  PRIMARY KEY(run_id, started_at_ms, ended_at_ms)
+);

package/dist/src/storage/sqlite/upgrades/254_discussion_annotations.sql

@@ -0,0 +1,17 @@
+CREATE TABLE discussion_annotations (
+  discussion_id TEXT NOT NULL REFERENCES discussion_captures(id) ON DELETE CASCADE,
+  id TEXT NOT NULL,
+  kind TEXT NOT NULL CHECK(kind IN ('highlight','question','note')),
+  text TEXT NOT NULL,
+  anchor_json TEXT NOT NULL,
+  revision INTEGER NOT NULL,
+  deleted INTEGER NOT NULL DEFAULT 0,
+  created_at INTEGER NOT NULL,
+  updated_at INTEGER NOT NULL,
+  PRIMARY KEY(discussion_id,id)
+);
+CREATE TABLE discussion_media_timeline (
+  discussion_id TEXT PRIMARY KEY REFERENCES discussion_captures(id) ON DELETE CASCADE,
+  audio_sha256 TEXT NOT NULL,
+  timeline_json TEXT NOT NULL
+);

package/dist/src/storage/sqlite/upgrades/255_discussion_chapter_progress.sql

@@ -0,0 +1,10 @@
+CREATE TABLE discussion_chapter_progress (
+  discussion_id TEXT NOT NULL REFERENCES discussion_captures(id) ON DELETE CASCADE,
+  source_sha256 TEXT NOT NULL,
+  transcript_revision INTEGER NOT NULL,
+  transcript_sha256 TEXT NOT NULL,
+  input_hash TEXT NOT NULL,
+  position INTEGER NOT NULL,
+  chapter_json TEXT NOT NULL,
+  PRIMARY KEY(discussion_id, source_sha256, transcript_revision, transcript_sha256, input_hash)
+);

package/dist/src/storage/sqlite/upgrades/256_task_main_update_retries.sql

@@ -0,0 +1,21 @@
+CREATE TABLE task_main_update_deliveries_new (
+  entry_id TEXT PRIMARY KEY REFERENCES task_collaboration_entries(entry_id) ON DELETE CASCADE,
+  conversation_id TEXT NOT NULL REFERENCES sessions(conversation_id) ON DELETE CASCADE,
+  status TEXT NOT NULL CHECK (status IN ('pending', 'delivered', 'failed')),
+  updated_at INTEGER NOT NULL,
+  decision TEXT CHECK (decision IN ('notify', 'silent')),
+  decision_reason TEXT,
+  decided_at INTEGER,
+  failure_count INTEGER NOT NULL DEFAULT 0,
+  last_error TEXT
+);
+
+INSERT INTO task_main_update_deliveries_new
+  (entry_id, conversation_id, status, updated_at, decision, decision_reason, decided_at)
+SELECT entry_id, conversation_id, status, updated_at, decision, decision_reason, decided_at
+FROM task_main_update_deliveries;
+
+DROP TABLE task_main_update_deliveries;
+ALTER TABLE task_main_update_deliveries_new RENAME TO task_main_update_deliveries;
+CREATE INDEX idx_task_main_update_deliveries_pending
+  ON task_main_update_deliveries(status, updated_at);

package/dist/src/storage/sqlite/upgrades/257_session_composer_history.sql

@@ -0,0 +1,11 @@
+-- Keep unscoped legacy entries out of session recall.
+ALTER TABLE composer_input_history RENAME TO composer_input_history_legacy;
+DROP INDEX idx_composer_input_history_recent;
+CREATE TABLE composer_input_history (
+  id INTEGER PRIMARY KEY AUTOINCREMENT,
+  conversation_id TEXT NOT NULL REFERENCES sessions(conversation_id) ON DELETE CASCADE,
+  text TEXT NOT NULL,
+  created_at INTEGER NOT NULL
+);
+CREATE INDEX idx_composer_input_history_recent
+  ON composer_input_history(conversation_id, id DESC);

package/dist/src/storage/sqlite/upgrades/258_task_phase_changes.sql

@@ -0,0 +1,20 @@
+ALTER TABLE tasks ADD COLUMN manual_phase_revision INTEGER NOT NULL DEFAULT 0;
+ALTER TABLE tasks ADD COLUMN automatic_phase_revision INTEGER NOT NULL DEFAULT 0;
+ALTER TABLE task_runs ADD COLUMN manual_phase_revision INTEGER NOT NULL DEFAULT 0;
+
+CREATE TABLE task_phase_changes (
+  id TEXT PRIMARY KEY,
+  task_id TEXT NOT NULL REFERENCES tasks(task_id) ON DELETE CASCADE,
+  from_phase TEXT NOT NULL,
+  to_phase TEXT NOT NULL,
+  from_resolution TEXT,
+  to_resolution TEXT,
+  actor_json TEXT NOT NULL,
+  source TEXT NOT NULL,
+  operation_id TEXT,
+  run_id TEXT,
+  task_version INTEGER NOT NULL,
+  created_at INTEGER NOT NULL,
+  UNIQUE(task_id, task_version)
+);
+CREATE INDEX idx_task_phase_changes_task ON task_phase_changes(task_id, task_version);

package/dist/src/storage/sqlite/upgrades/259_personal_default_style.sql

@@ -0,0 +1,10 @@
+-- Remove obsolete response controls before strict Agent profile validation.
+UPDATE agents
+SET profile_json = json_remove(profile_json, '$.responsePreferences'), revision = revision + 1
+WHERE profile_json IS NOT NULL AND json_type(profile_json, '$.responsePreferences') IS NOT NULL;
+
+-- Rebuild Personal instructions from the product defaults on the next load.
+UPDATE agents
+SET profile_json = json_remove(profile_json, '$.instructions'), revision = revision + 1
+WHERE id IN (SELECT agent_id FROM sessions WHERE json_extract(custom_data_json, '$.personalAgent') = 1)
+  AND profile_json IS NOT NULL;

package/dist/src/storage/sqlite/upgrades/260_browser_setup.sql

@@ -0,0 +1,9 @@
+CREATE TABLE browser_setup_runs (
+  id TEXT PRIMARY KEY,
+  conversation_id TEXT NOT NULL,
+  agent_id TEXT NOT NULL,
+  revision INTEGER NOT NULL,
+  updated_at INTEGER NOT NULL,
+  payload_json TEXT NOT NULL
+);
+CREATE INDEX browser_setup_conversation ON browser_setup_runs(conversation_id, agent_id, updated_at);

package/dist/src/storage/sqlite/windows-database-owners.js

@@ -1,8 +1,37 @@
+import { __esmMin } from "../../../_virtual/_rolldown/runtime.js";
 import { resolve } from "node:path";
 import { existsSync } from "node:fs";
 import { execFileSync } from "node:child_process";
 //#region src/storage/sqlite/windows-database-owners.ts
-const script = String.raw`
+function windowsDatabaseOwners(databasePath, execute = execFileSync) {
+	const paths = [
+		databasePath,
+		`${databasePath}-wal`,
+		`${databasePath}-shm`
+	].filter(existsSync).map((path) => resolve(path));
+	return execute("powershell.exe", [
+		"-NoProfile",
+		"-NonInteractive",
+		"-Command",
+		script
+	], {
+		encoding: "utf8",
+		timeout: 3e4,
+		windowsHide: true,
+		env: {
+			...process.env,
+			XOPC_DATABASE_FILES: JSON.stringify(paths)
+		},
+		stdio: [
+			"ignore",
+			"pipe",
+			"pipe"
+		]
+	}).trim().split(/\s+/).filter((pid) => pid && pid !== String(process.pid));
+}
+var script;
+var init_windows_database_owners = __esmMin((() => {
+	script = String.raw`
 $ErrorActionPreference = 'Stop'
 Add-Type -TypeDefinition @'
 using System;
@@ -60,31 +89,7 @@ public static class XopcDatabaseOwners {
 '@
 [XopcDatabaseOwners]::Read([string[]](ConvertFrom-Json $env:XOPC_DATABASE_FILES)) | ForEach-Object { $_ }
 `;
-function windowsDatabaseOwners(databasePath, execute = execFileSync) {
-	const paths = [
-		databasePath,
-		`${databasePath}-wal`,
-		`${databasePath}-shm`
-	].filter(existsSync).map((path) => resolve(path));
-	return execute("powershell.exe", [
-		"-NoProfile",
-		"-NonInteractive",
-		"-Command",
-		script
-	], {
-		encoding: "utf8",
-		timeout: 3e4,
-		windowsHide: true,
-		env: {
-			...process.env,
-			XOPC_DATABASE_FILES: JSON.stringify(paths)
-		},
-		stdio: [
-			"ignore",
-			"pipe",
-			"pipe"
-		]
-	}).trim().split(/\s+/).filter((pid) => pid && pid !== String(process.pid));
-}
+}));
 //#endregion
-export { windowsDatabaseOwners };
+init_windows_database_owners();
+export { init_windows_database_owners, windowsDatabaseOwners };