fuli-context 0.7.3 → 0.7.4-beta.1

package/graph-provider/fuli_graph/workflow_observation_models.py

@@ -0,0 +1,30 @@
+from datetime import datetime
+from typing import Literal
+
+from pydantic import Field
+
+from .models import StrictModel
+
+
+class WorkflowObservedStep(StrictModel):
+    action_id: str = Field(min_length=1, max_length=256)
+    name: str = Field(min_length=1, max_length=512)
+    summary: str | None = Field(default=None, min_length=1, max_length=4096)
+
+
+class WorkflowTransitionObservation(StrictModel):
+    personal_space_id: str = Field(min_length=1, max_length=128)
+    personal_project_id: str | None = Field(default=None, min_length=1, max_length=128)
+    host_session_id: str = Field(min_length=1, max_length=256)
+    observation_id: str = Field(min_length=8, max_length=256)
+    from_step: WorkflowObservedStep
+    to_step: WorkflowObservedStep
+    workflow_key: str = Field(min_length=1, max_length=256)
+    condition: dict[str, object] = Field(default_factory=dict)
+    observed_at: datetime
+    evidence_summary: str = Field(min_length=1, max_length=2048)
+    source_application: Literal[
+        'codex', 'claude_code', 'cursor', 'kiro', 'other'
+    ] | None = None
+    source_turn_id: str | None = Field(default=None, min_length=1, max_length=256)
+    sensitivity: Literal['normal', 'private', 'restricted'] = 'normal'

package/graph-provider/fuli_graph/workflow_observations.py

@@ -0,0 +1,84 @@
+from .models import KnowledgeCommit
+from .workflow_observation_models import WorkflowTransitionObservation
+
+
+async def record_workflow_transition_observation(
+    store,
+    actor: dict,
+    request: WorkflowTransitionObservation,
+):
+    basis = {
+        'existence_reason': (
+            'An Agent reported one completed-action transition through the MCP seam.'
+        ),
+        'quadrant_reason': (
+            'Behavioral sequence evidence is not user consent or authorization.'
+        ),
+        'proposed_by': {
+            'kind': 'agent',
+            'label': 'mcp-host-workflow-observer',
+        },
+    }
+    commit = KnowledgeCommit.model_validate({
+        'space_id': request.personal_space_id,
+        'personal_project_id': request.personal_project_id,
+        'episode': {
+            'idempotency_key': request.observation_id,
+            'session_id': request.host_session_id,
+            'name': (
+                f'Observed {request.from_step.name} then {request.to_step.name}'
+            )[:512],
+            'source_kind': 'workflow_action_observation',
+            'source_description': (
+                'One Agent-reported action transition submitted through the Fuli MCP host.'
+            ),
+            'source_application': request.source_application or 'other',
+            'source_turn_id': request.source_turn_id,
+            'reference_time': request.observed_at,
+            'summary': request.evidence_summary,
+            'sensitivity': request.sensitivity,
+            'entities': [
+                _workflow_step(request.from_step, basis),
+                _workflow_step(request.to_step, basis),
+            ],
+            'relationships': [{
+                'key': request.workflow_key,
+                'source': request.from_step.action_id,
+                'target': request.to_step.action_id,
+                'type': 'RECOMMENDS_NEXT',
+                'fact': request.evidence_summary,
+                'valid_at': request.observed_at,
+                'origin_quadrant': 'unknown_known',
+                'current_quadrant': 'unknown_known',
+                'epistemic_status': 'observed',
+                'confirmation_status': 'pending',
+                'confirmation_basis': basis,
+                'reasoning_summary': (
+                    'Agent-reported transition; the MCP host attests only '
+                    'session, time, and observation identity; no authority.'
+                ),
+                'attributes': {
+                    'workflowCondition': request.condition,
+                    'observationKind': 'completed_action_transition',
+                },
+            }],
+        },
+    })
+    return await store.commit_workflow_observation(actor, commit)
+
+
+def _workflow_step(step, basis: dict) -> dict:
+    return {
+        'key': step.action_id,
+        'name': step.name,
+        'type': 'WorkflowStep',
+        'summary': step.summary or f'Reported completed action: {step.name}',
+        'origin_quadrant': 'unknown_known',
+        'current_quadrant': 'unknown_known',
+        'epistemic_status': 'observed',
+        'confirmation_status': 'pending',
+        'confirmation_basis': basis,
+        'reasoning_summary': (
+            'The Agent reported the action completion; reuse remains unconfirmed.'
+        ),
+    }

package/graph-provider/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "fuli-graph-provider"
-version = "0.7.3"
+version = "0.7.4b1"
 description = "Graphiti-backed personal and shared project provider for Fuli."
 requires-python = ">=3.12"
 dependencies = [

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "fuli-context",
-  "version": "0.7.3",
+  "version": "0.7.4-beta.1",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "fuli-context",
-      "version": "0.7.3",
+      "version": "0.7.4-beta.1",
       "license": "Apache-2.0",
       "dependencies": {
         "@hono/node-server": "2.0.12",
@@ -22,7 +22,7 @@
         "@types/node": "^24.13.3",
         "@vitejs/plugin-vue": "^6.0.8",
         "@vue/test-utils": "^2.4.11",
-        "brace-expansion": "5.0.8",
+        "brace-expansion": "5.0.9",
         "d3": "^7.9.0",
         "gsap": "^3.15.0",
         "jsdom": "^29.1.1",
@@ -1868,9 +1868,9 @@
       "license": "ISC"
     },
     "node_modules/brace-expansion": {
-      "version": "5.0.8",
-      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.8.tgz",
-      "integrity": "sha512-JZyDyq3D4AUifKTPOB7DELf6XsB3WdPuNxCtob1vFXPsSXhdAiHBWJ/tJ8HAc9aH84BK+5JFZLNkJKx3G9kzQg==",
+      "version": "5.0.9",
+      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.9.tgz",
+      "integrity": "sha512-ScQ4IuvIEF1TMlP7Zt+vjJ//9zlPb2SDcxWxM3bk8s6t6GGdJ7KO1dCcTidOPJKePW30LE/2cT7wCyPho9/Wxg==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
@@ -2950,9 +2950,9 @@
       "license": "MIT"
     },
     "node_modules/fast-uri": {
-      "version": "3.1.4",
-      "resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.4.tgz",
-      "integrity": "sha512-8JnbkQ4juDyvYs4mgFGQqg4yCYtFDtUtmp2QIQq11ZZe5CFQ5wcqm1rqDgAh/QdMySuBnPzMUiJUNZG5N/AiQw==",
+      "version": "3.1.5",
+      "resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.5.tgz",
+      "integrity": "sha512-gHwA1O9LDIcKunMKhObS/HimwtehO1nPUECKAu5TpKgaO19fcWEl4bliWe1jWxVFvIXztJjjQ4L8XQ1EU9f7Jw==",
       "funding": [
         {
           "type": "github",
@@ -3165,9 +3165,9 @@
       }
     },
     "node_modules/hono": {
-      "version": "4.12.32",
-      "resolved": "https://registry.npmjs.org/hono/-/hono-4.12.32.tgz",
-      "integrity": "sha512-XcuyW9qE2kJn07PkecMOBd5Vq/hMy7mmGw+idz1yblbg9N17ijJODrvPkn7/dwL3Kulj8LcRJ69DLOWf91dRUg==",
+      "version": "4.13.0",
+      "resolved": "https://registry.npmjs.org/hono/-/hono-4.13.0.tgz",
+      "integrity": "sha512-jhunvfHWxd7J5EFfSgH4xsYJzSe/lfqbUCxiyyeaQasUsXeEHXtzVid+7EOGByc5JnFa23SSFL3Y2RV/z1T+eQ==",
       "license": "MIT",
       "engines": {
         "node": ">=16.9.0"
@@ -4338,9 +4338,9 @@
       }
     },
     "node_modules/postcss": {
-      "version": "8.5.22",
-      "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.5.22.tgz",
-      "integrity": "sha512-KBDEIpLrvpv16pp3K0Fw+UCoZfopFjjgeB+0tA/aaThfEE74kKDLrgg603YvOWJyg3+WYtyq3xYsQWsIyZlPqQ==",
+      "version": "8.5.25",
+      "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.5.25.tgz",
+      "integrity": "sha512-DTPx3RWSSnWyzLxQnlH0rJP+EW5ekl16ZU4/psbIhA0e53kJfdgaN5vKM+xP7yJtXVu+nfdVFmlgFDEKAe4Pyw==",
       "dev": true,
       "funding": [
         {
@@ -5085,9 +5085,9 @@
       "license": "ISC"
     },
     "node_modules/undici": {
-      "version": "7.28.0",
-      "resolved": "https://registry.npmjs.org/undici/-/undici-7.28.0.tgz",
-      "integrity": "sha512-cRZYrTDwWznlnRiPjggAGxZXanty6M8RV1ff8Wm4LWXBp7/IG8v5DnOm74DtUBp9OONpK75YlPnIjQqX0dBDtA==",
+      "version": "7.29.0",
+      "resolved": "https://registry.npmjs.org/undici/-/undici-7.29.0.tgz",
+      "integrity": "sha512-IDxfleLmmbSskfWSUATiN1nfn2rDuvnMOqb5CWR92iIfojA0Ud+ulOAAEQ57LPr9rWmsreUyf5lwyao+7GNNVw==",
       "dev": true,
       "license": "MIT",
       "engines": {

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "fuli-context",
-  "version": "0.7.3",
-  "description": "Local-first context graph for AI agents.",
+  "version": "0.7.4-beta.1",
+  "description": "Local-first collaboration relationship graph for AI agents.",
   "type": "module",
   "files": [
     "README.zh-CN.md",
@@ -78,7 +78,7 @@
     "@types/node": "^24.13.3",
     "@vitejs/plugin-vue": "^6.0.8",
     "@vue/test-utils": "^2.4.11",
-    "brace-expansion": "5.0.8",
+    "brace-expansion": "5.0.9",
     "d3": "^7.9.0",
     "gsap": "^3.15.0",
     "jsdom": "^29.1.1",
@@ -98,6 +98,6 @@
       "@hono/node-server": "2.0.12"
     },
     "brace-expansion": "$brace-expansion",
-    "fast-uri": "3.1.4"
+    "fast-uri": "3.1.5"
   }
 }

package/skills/capturing-session-knowledge/SKILL.md

@@ -103,13 +103,23 @@ IDs; never search every personal project, every subscription, or the whole graph
 Use the current repository, the user's wording, and `list_knowledge_spaces` to resolve scope.
 Ask if the active project remains ambiguous.
 
+FULI exposes read-only MCP resources for this selection flow. When the Agent host offers a FULI
+project or the global taste resource in its `@` mention picker and the user selects it, treat the
+resource's exact identifiers as explicit scope for the current task. Use the selected
+`personal_project_id` for project retrieval, or apply the global taste resource as a
+personal-global profile. A selected resource never authorizes searching another project,
+following `RELATED_TO`, or performing a write.
+
 The active child project may also retrieve only knowledge explicitly marked inheritable from
 projects reached through its outgoing `PART_OF` or `USES_KNOWLEDGE_FROM` relations. This means
 project-specific PRDs, configuration IDs, and debugging notes remain in the child, while a parent
 may own shared run, validation, and test runbooks. Search the child first, then authorized parents.
-Never inherit project-scoped personal preferences, never traverse `RELATED_TO`, stop after two
-hops, and retain the returned scope path. Exact active-project knowledge with the same stable key
-overrides an inherited item.
+Project-scoped personal preferences may enter the child context only when the preference is
+explicitly marked `descendants`, or `selected_projects` includes that exact active child, and the
+parent is reached through `PART_OF` or `USES_KNOWLEDGE_FROM`. Never inherit `local_only`, never
+traverse `RELATED_TO`, stop after two hops, and retain the returned scope path. Confirmation
+authority is a hard gate before scope distance; within the same authority layer the nearest scope
+wins, while equal-layer conflicting instructions remain deferred and weight cannot choose a winner.
 
 After a retrieved personal item materially affects the final answer or a completed action, call
 `record_knowledge_usage` once for that task and item with `cited` or `applied`. Do not record
@@ -118,6 +128,20 @@ promote only to `agent_confirmed`; it never substitutes for human confirmation o
 eligible for public publication. Use the current user task's caller-stable identifier as
 `taskId` and reuse it on retries; never generate another ID to recount the same task.
 
+## Use the Generated Taste Skill
+
+When a UI, writing, product, architecture, code, or other judgment call would benefit from the
+person's established taste, call `get_user_taste_skill` with the current working directory and
+current task prompt. It returns a bounded, read-only `user-taste` Skill projection built from
+effective personal preferences and task-matched recommendations. Apply the current request and
+authoritative constraints first; treat `Confirmed` and `Observed` evidence differently; preserve
+project scope; and explain the matching preference and material tradeoff when recommending.
+
+The projection is regenerated from the durable graph as preferences are added or revised, so it
+can grow over time without copying or overwriting a user-authored `user-taste/SKILL.md`. Never
+promote a pending inference in the generated Skill and never treat the projection itself as new
+knowledge to capture.
+
 The current `agent-usage-v1` policy requires at least five idempotent material-use events across
 at least three distinct tasks in the current content generation, with no open knowledge or
 preference conflict. It maintains utility and confidence as separate scores and caps
@@ -248,8 +272,11 @@ the personal-global graph without `personalProjectId`:
 
 When the user explicitly limits one preference to a project, keep `profileAspect` and capture
 it with that exact `personalProjectId`; this makes the preference project-scoped without
-turning it into public project knowledge. Use `set_personal_preference_scope` when the user
-later changes the scope. Never put any personal-profile item into a public proposal.
+turning it into public project knowledge. The Agent has no direct scope-write tool. Safe
+narrowing from global to one exact project belongs to a trusted local UI; any broader parent or
+personal global scope must use preference convergence, with an explicit target and a Provider
+`HumanReviewer` channel behind trusted local user-presence. Never put any personal-profile item
+into a public proposal.
 For a preference that may have both global and project-specific forms, store a stable
 `attributes.preferenceKey` on each form so the project value can explicitly override the same
 global decision without hiding unrelated preferences.

package/skills/flreview/SKILL.md

@@ -61,11 +61,12 @@ Collect the exact replacement content and a reason in the card. Call `revise_per
 
 ### 调整范围
 
-- For a global preference with exactly one source project, offer a one-click move to that source project. With multiple source projects, require a project selection. Call `set_personal_preference_scope` with `scope: project` and the selected source project.
-- For a project-scoped preference, offer promotion to global and call `set_personal_preference_scope` with `scope: global`.
+- The Agent must not perform a direct scope write. Scope mutation is not an Agent or MCP capability.
+- For a global preference, the only direct operation is safe narrowing to one exact project. With one source project, offer that exact project; with multiple source projects, require an explicit selection. Hand the exact item and project to a trusted local FULI human-review UI with a real user-presence gate.
+- For a project-scoped preference, never offer direct promotion. A broader parent-project or personal global scope must use the independently reviewed preference-convergence flow: discover the candidate, preserve every source and qualifier, require an explicit `target_scope` and `target_project_id`, and let only the Provider `HumanReviewer` channel apply the decision through the trusted local human-review UI.
 - Ordinary project knowledge is not a personal preference. Never offer to turn ordinary project knowledge into a global preference.
 
-After a successful scope write, record `updated`. Never change scope automatically.
+If the trusted local human-review UI is unavailable, report that exact missing capability and leave the candidate unchanged. After that trusted flow reports a successful scope write, record `updated`. Never change scope automatically.
 
 ### 失效
 

package/src/agent-tools/graph-definitions.js

@@ -82,7 +82,10 @@ const epistemicFields = {
   epistemicStatus,
   confirmationStatus,
   confirmationBasis,
-  reasoningSummary: nullableStringSchema(),
+  reasoningSummary: {
+    ...nullableStringSchema(),
+    description: 'Required and nonempty whenever originQuadrant is not known_known. Explain how the item became known; omitting it rejects the whole batch.'
+  },
   profileAspect,
   inheritanceMode,
   inheritedProjectIds: arraySchema(id, { maxItems: 32 })
@@ -188,6 +191,40 @@ const commonKnowledgePromotionRequired = [
   'personalSpaceId', 'parentProjectId', 'itemKind', 'canonicalItemId',
   'duplicateItemIds', 'reason', 'humanConfirmationReason'
 ];
+const personalGlobalPreferenceDecisionIntent = {
+  personalSpaceId: id,
+  candidateId: {
+    ...boundedString(64),
+    pattern: '^personal-global-[a-f0-9]{20}$'
+  },
+  candidateVersion: {
+    ...boundedString(32),
+    pattern: '^v1:[a-f0-9]{24}$'
+  },
+  decisionRevision: integerSchema({ minimum: 0 }),
+  decision: enumSchema(['approve', 'reject']),
+  sourceItems: arraySchema(objectSchema({
+    itemId: id,
+    itemKind: knowledgeItemKind,
+    projectId: id
+  }, ['itemId', 'itemKind', 'projectId']), { minItems: 2, maxItems: 32 }),
+  preferenceKey: boundedString(512),
+  targetScope: enumSchema(['parent_project', 'personal_global']),
+  targetProjectId: nullableStringSchema(),
+  profileAspect,
+  globalTitle: { type: ['string', 'null'], minLength: 1, maxLength: 512 },
+  globalInstruction: { type: ['string', 'null'], minLength: 1, maxLength: 8192 },
+  humanConfirmationReason: boundedString(4096),
+  confirmedAt: dateTime,
+  sessionId: id,
+  idempotencyKey: id
+};
+const personalGlobalPreferenceDecisionRequired = [
+  'personalSpaceId', 'candidateId', 'candidateVersion', 'decisionRevision',
+  'decision', 'sourceItems', 'preferenceKey', 'targetScope',
+  'targetProjectId', 'humanConfirmationReason',
+  'confirmedAt', 'sessionId', 'idempotencyKey'
+];
 const captureEpisodeFields = {
   idempotencyKey: id,
   name: label,
@@ -207,6 +244,11 @@ const captureEpisodeRequired = [
   'idempotencyKey', 'name', 'sourceKind', 'sourceDescription',
   'referenceTime', 'entities', 'relationships'
 ];
+const workflowObservedStep = objectSchema({
+  actionId: id,
+  name: label,
+  summary: nullableStringSchema()
+}, ['actionId', 'name']);
 
 export const GRAPH_TOOL_DEFINITIONS = [
   {
@@ -247,6 +289,17 @@ export const GRAPH_TOOL_DEFINITIONS = [
       limit: integerSchema({ minimum: 1, maximum: 200 })
     }, ['projectPath'])
   },
+  {
+    name: 'get_user_taste_skill',
+    title: 'READ · Generate the current user-taste Skill',
+    description: 'Generate a bounded, read-only user-taste Skill projection from the effective personal preferences for the exact active project. It uses prior confirmed and explicitly agent-confirmed preference data to provide task-specific recommendations, labels evidence status and scope, preserves the current-request and authoritative-constraint precedence, and never overwrites a user-authored taste Skill or promotes a pending inference. Call it when a UI, writing, product, architecture, code, or other judgment call would benefit from the user\'s established taste.',
+    inputSchema: objectSchema({
+      projectPath: boundedString(4096),
+      taskPrompt: boundedString(8192),
+      personalProjectId: nullableStringSchema(),
+      limit: integerSchema({ minimum: 1, maximum: 200 })
+    }, ['projectPath'])
+  },
   {
     name: 'resolve_deferred_preference_conflict',
     description: 'Resolve one AI-deferred collaboration-preference conflict returned by get_collaboration_preferences when, and only when, the current task needs that preference. Compare both confirmed sides against their evidence and the current context before choosing. The operation updates the effective knowledge, preserves revision history, and permanently marks the conflict as previously conflicted and resolved by AI. Use merge with a canonical item and merged instruction, keep_left or keep_right to retain one side, or split_scope to move one side to an exact personal project.',
@@ -265,18 +318,49 @@ export const GRAPH_TOOL_DEFINITIONS = [
   },
   {
     name: 'capture_session_knowledge',
-    description: 'Silently batch durable session knowledge when the user-enabled capture policy allows it. When knowledge was read from an online source, sourceUri preserves the exact original HTTP(S) link so a capable Agent can re-read it later and refresh Fuli knowledge; it does not authorize source-document writeback. Every item records its discovery quadrant, structured confirmation basis, and pending or confirmed state. A disabled policy returns capture_disabled without writing. Personal profile knowledge stays personal; only project knowledge with an auditable confirmation can enter public review.',
+    description: 'Silently batch durable session knowledge when the user-enabled capture policy allows it. When knowledge was read from an online source, sourceUri preserves the exact original HTTP(S) link so a capable Agent can re-read it later and refresh Fuli knowledge; it does not authorize source-document writeback. Every item records its discovery quadrant, structured confirmation basis, and pending or confirmed state. reasoningSummary is required for every entity or relationship whose originQuadrant is not known_known. A disabled policy returns capture_disabled without writing. Personal profile knowledge stays personal; only project knowledge with an auditable confirmation can enter public review.',
     inputSchema: objectSchema({
-      targetKind: enumSchema(['personal', 'project']),
-      spaceId: id,
-      personalProjectId: nullableStringSchema(),
-      providerUrl: nullableStringSchema(),
+      targetKind: {
+        ...enumSchema(['personal', 'project']),
+        description: 'Use "personal" for the personal graph, including knowledge scoped to a local personal project via personalProjectId. Use "project" only for a team-shared project queued for public review.'
+      },
+      spaceId: {
+        ...id,
+        description: 'With targetKind "personal", the active personal space id. With targetKind "project", the team-shared project id.'
+      },
+      personalProjectId: {
+        ...nullableStringSchema(),
+        description: 'Local personal project scope. Only meaningful with targetKind "personal".'
+      },
+      providerUrl: {
+        ...nullableStringSchema(),
+        description: 'Required with targetKind "project" and ignored for "personal".'
+      },
       sessionId: id,
       ...captureEpisodeFields
     }, [
       'targetKind', 'spaceId', 'sessionId', ...captureEpisodeRequired
     ])
   },
+  {
+    name: 'record_workflow_transition_observation',
+    title: 'WRITE · Observe one completed workflow transition',
+    description: 'Record one Agent-reported completed X-to-Y action transition in the personal Provider. One call submits one observation; calls for the same project, X/Y, workflow key, condition, and MCP-host session deduplicate to one Episodic node. The Provider derives occurrence and distinct-session counts from persisted episodes. The MCP host attests session, time, and observation identity, not the truth of the reported actions. The tool does not accept aggregate counts, confirmation authority, approval, or durable-consent claims. Every observation remains pending behavioral evidence and is not user consent or execution authorization. Call it only after both actions completed successfully. This is an Agent/adapter observation seam, not automatic telemetry for arbitrary host tools.',
+    inputSchema: objectSchema({
+      personalSpaceId: id,
+      personalProjectId: nullableStringSchema(),
+      fromStep: workflowObservedStep,
+      toStep: workflowObservedStep,
+      workflowKey: id,
+      condition: attributes,
+      evidenceSummary: shortText,
+      sourceApplication,
+      sourceTurnId: { type: ['string', 'null'], minLength: 1, maxLength: 256 },
+      sensitivity: enumSchema(['normal', 'private', 'restricted'])
+    }, [
+      'personalSpaceId', 'fromStep', 'toStep', 'workflowKey', 'evidenceSummary'
+    ])
+  },
   {
     name: 'record_decision_trace',
     title: 'WRITE · Store a decision with its rationale',
@@ -322,7 +406,7 @@ export const GRAPH_TOOL_DEFINITIONS = [
   {
     name: 'search_knowledge_graph',
     title: 'READ · Search the scoped knowledge graph',
-    description: 'Search durable context before saying you do not know when a task may depend on remembered URLs, routes, requirements, architecture, prior decisions, runbooks, rationale, or personal preferences. Supporting facts and entities expose bounded source_uris when their evidence came from online sources, allowing a capable Agent to re-read the original source before refreshing Fuli knowledge. Pending knowledge is searchable and explicitly marked; agent-confirmed knowledge ranks below human-confirmed knowledge. The bounded scope includes the personal-global profile, exact active local project, selectively inheritable knowledge reached through PART_OF or USES_KNOWLEDGE_FROM, explicitly selected additional personal projects, and selected subscribed team projects. Generic RELATED_TO links never expand scope. Use all_local_confirmed only after explicit user confirmation; it searches registered local personal projects for this query and never expands public projects. If that still has no support, use read-only local file search in the current repository or workspace files within a safe root. The response includes sourceMarker for supporting results, noMatchSourceMarker when returned items do not support the answer, and retrievalGuidance with the required next action.',
+    description: 'Search durable context before saying you do not know when a task may depend on remembered URLs, routes, requirements, architecture, prior decisions, runbooks, rationale, or personal preferences. Supporting facts and entities expose bounded source_uris when their evidence came from online sources, allowing a capable Agent to re-read the original source before refreshing Fuli knowledge. Pending knowledge is searchable and explicitly marked; agent-confirmed knowledge ranks below human-confirmed knowledge. The bounded scope includes the personal-global profile, exact active local project, selectively inheritable knowledge reached through PART_OF or USES_KNOWLEDGE_FROM, explicitly selected additional personal projects, and selected subscribed team projects. Generic RELATED_TO links never expand scope. A result may instead include one-time read-only relatedProjectSuggestions only for active human-authorized RELATED_TO edges; ask the user before running the supplied exact-project follow-up query, and never silently add that project to future scope. Use all_local_confirmed only after explicit user confirmation; it searches registered local personal projects for this query and never expands public projects. If that still has no support, use read-only local file search in the current repository or workspace files within a safe root. The response includes sourceMarker for supporting results, noMatchSourceMarker when returned items do not support the answer, and retrievalGuidance with the required next action.',
     inputSchema: objectSchema({
       personalSpaceId: id,
       query: shortText,
@@ -396,7 +480,7 @@ export const GRAPH_TOOL_DEFINITIONS = [
   {
     name: 'search_current_project_knowledge',
     title: 'READ · Search current project and its knowledge sources',
-    description: 'High-level project search for normal Agent work. Pass projectPath plus one or more focused queries; Fuli resolves the exact local project, searches its local knowledge first, then follows outgoing PART_OF or USES_KNOWLEDGE_FROM relations to authorized parent/source knowledge. An exact current-project item with the same stable key overrides an inherited item. The tool never guesses an ambiguous project and never traverses RELATED_TO.',
+    description: 'High-level project search for normal Agent work. Pass projectPath plus one or more focused queries; Fuli resolves the exact local project, searches its local knowledge first, then follows outgoing PART_OF or USES_KNOWLEDGE_FROM relations to authorized parent/source knowledge. An exact current-project item with the same stable key overrides an inherited item. The tool never guesses an ambiguous project and never traverses RELATED_TO. Instead it returns structured related_project_suggestions so the Agent can ask whether to add exactly one related project to this read-only search; explicit human confirmation is required before any expansion.',
     inputSchema: objectSchema({
       projectPath: boundedString(4096),
       queries: arraySchema(shortText, { minItems: 1, maxItems: 10 }),
@@ -418,6 +502,28 @@ export const GRAPH_TOOL_DEFINITIONS = [
       limitPerProject: integerSchema({ minimum: 1, maximum: 50 })
     }, ['personalSpaceId', 'parentProjectId', 'query'])
   },
+  {
+    name: 'discover_personal_global_preference_candidates',
+    title: 'READ · Find possible personal-global preferences',
+    description: 'Read-only scope-governance aid across two or more explicitly selected personal projects. It searches each exact project independently, excludes inherited and existing personal-global results, preserves every original preference text, qualifier, project source, and source URI, and exposes any shared lexical core only as a non-authoritative derived candidate. Similarity and weight never apply or promote a preference. Every candidate requires explicit human scope judgment through the candidate-bound review workflow.',
+    inputSchema: objectSchema({
+      personalSpaceId: id,
+      personalProjectIds: arraySchema(id, { minItems: 2, maxItems: 32 }),
+      query: shortText,
+      minProjects: integerSchema({ minimum: 2, maximum: 32 }),
+      similarityThreshold: numberSchema({ minimum: 0, maximum: 1 }),
+      limitPerProject: integerSchema({ minimum: 1, maximum: 50 })
+    }, ['personalSpaceId', 'personalProjectIds', 'query'])
+  },
+  {
+    name: 'preview_personal_global_preference_decision',
+    title: 'READ · Inspect a version-bound scope decision',
+    description: 'Read-only inspection for one exact personal-global preference candidate and decision revision. It revalidates every selected local source in the Provider and returns the preserved snapshots plus an exact payload fingerprint. It deliberately does not mint an approval token: an independent human-review client must confirm that fingerprint and mint the short-lived, one-time capability. The Agent cannot claim human authority through this tool.',
+    inputSchema: objectSchema(
+      personalGlobalPreferenceDecisionIntent,
+      personalGlobalPreferenceDecisionRequired
+    )
+  },
   {
     name: 'preview_common_knowledge_promotion',
     title: 'CONFIRM · Preview parent-project promotion',
@@ -538,6 +644,28 @@ export const GRAPH_TOOL_DEFINITIONS = [
       disposition: enumSchema(['paused', 'completed'])
     }, ['personalSpaceId', 'reviewId', 'disposition'])
   },
+  {
+    name: 'list_workflow_candidates',
+    title: 'READ · List learned workflow candidates',
+    description: 'Read persisted X-to-Y workflow candidates and their condition, explainable occurrence count, distinct-session count, recency, confirmation authority, negative evidence, declines, review status, and durable authorization. candidateVersion changes only when the rule definition changes; evidenceRevision tracks added or changed evidence; decisionRevision tracks review/authorization state transitions, including reset after a rule change. Rejected candidates and evidence remain in history. This read never executes a step or grants authority.',
+    inputSchema: objectSchema({
+      personalSpaceId: id,
+      personalProjectId: nullableStringSchema(),
+      afterStepKey: nullableStringSchema(),
+      limit: integerSchema({ minimum: 1, maximum: 100 })
+    }, ['personalSpaceId'])
+  },
+  {
+    name: 'recommend_next_workflow_steps',
+    title: 'READ · Recommend what to ask after a workflow step',
+    description: 'Read persisted candidates matching the completed source step. Provider weights only decide whether a candidate crosses the recommendation threshold; they never grant execution authority. A recommended but unapproved candidate returns ask_user and must not execute Y. Even a durable authorization never replaces per-call approval for high-risk send, delete, publish, payment, or external-write tools.',
+    inputSchema: objectSchema({
+      personalSpaceId: id,
+      personalProjectId: nullableStringSchema(),
+      afterStepKey: id,
+      limit: integerSchema({ minimum: 1, maximum: 100 })
+    }, ['personalSpaceId', 'afterStepKey'])
+  },
   {
     name: 'revise_personal_knowledge',
     description: 'Confirm, correct, invalidate, or restore one personal entity or relationship while preserving revision history and original evidence. This is the same personal-only operation used by the management UI.',
@@ -573,18 +701,6 @@ export const GRAPH_TOOL_DEFINITIONS = [
       reason: shortText
     }, ['personalSpaceId', 'itemKind', 'itemId', 'targetProjectId', 'reason'])
   },
-  {
-    name: 'set_personal_preference_scope',
-    description: 'Change one taste, personality, or judgment preference between the default personal-global scope and one exact personal project. The source evidence remains unchanged and the scope change is recorded in revision history.',
-    inputSchema: objectSchema({
-      personalSpaceId: id,
-      itemKind: knowledgeItemKind,
-      itemId: id,
-      scope: enumSchema(['global', 'project']),
-      projectId: nullableStringSchema(),
-      reason: shortText
-    }, ['personalSpaceId', 'itemKind', 'itemId', 'scope', 'reason'])
-  },
   {
     name: 'preview_personal_project_action',
     title: 'PREVIEW · Authorize a personal project write',

package/src/agent-tools/graph-handlers.js

@@ -10,12 +10,15 @@ const HANDLERS = Object.freeze({
     agentInvocation: true,
     agentToolName: 'get_collaboration_preferences'
   }),
+  get_user_taste_skill: (app, input) => app.getUserTasteSkill(input),
   resolve_deferred_preference_conflict: (app, input) =>
     app.resolveDeferredPreferenceConflict({
       ...input,
       operationActor: 'agent'
     }),
   capture_session_knowledge: (app, input) => app.captureSessionKnowledge(input),
+  record_workflow_transition_observation: (app, input) =>
+    app.recordWorkflowTransitionObservation(input),
   record_decision_trace: (app, input) => app.recordDecisionTrace(input),
   search_knowledge_graph: (app, input) => app.searchKnowledge({
     ...input,
@@ -34,6 +37,10 @@ const HANDLERS = Object.freeze({
     app.searchCurrentProjectKnowledge(input),
   discover_common_knowledge_candidates: (app, input) =>
     app.discoverCommonKnowledgeCandidates(input),
+  discover_personal_global_preference_candidates: (app, input) =>
+    app.discoverPersonalGlobalPreferenceCandidates(input),
+  preview_personal_global_preference_decision: (app, input) =>
+    app.previewPersonalGlobalPreferenceDecision(input),
   preview_common_knowledge_promotion: (app, input) =>
     app.previewCommonKnowledgePromotion(input),
   apply_common_knowledge_promotion: (app, input) => {
@@ -65,6 +72,9 @@ const HANDLERS = Object.freeze({
   record_knowledge_review_progress: (app, input) =>
     app.recordKnowledgeReviewProgress(input),
   finish_knowledge_review: (app, input) => app.finishKnowledgeReview(input),
+  list_workflow_candidates: (app, input) => app.listWorkflowCandidates(input),
+  recommend_next_workflow_steps: (app, input) =>
+    app.recommendNextWorkflowSteps(input),
   revise_personal_knowledge: (app, input) => app.reviseKnowledgeItem({
     ...input,
     operationActor: 'agent'
@@ -73,10 +83,6 @@ const HANDLERS = Object.freeze({
     ...input,
     operationActor: 'agent'
   }),
-  set_personal_preference_scope: (app, input) => app.setPersonalPreferenceScope({
-    ...input,
-    operationActor: 'agent'
-  }),
   preview_personal_project_action: (app, input) =>
     app.previewKnowledgeProjectAction(input),
   apply_personal_project_action: (app, input) => {

package/src/cli/command-registry.js

@@ -12,7 +12,7 @@ General:
   --version, -v
 
 Local service:
-  start [--port PORT] [--open] [--lan|--no-lan] [--rebuild] [--data-dir DIR] [--personal-space NAME]
+  start [--port PORT] [--open] [--lan|--no-lan] [--rebuild] [--data-dir DIR] [--personal-space NAME]  (checks Agent setup)
   stop [--data-dir DIR]
   restart [--port PORT] [--open] [--lan|--no-lan] [--rebuild] [--data-dir DIR] [--personal-space NAME]
   status [--json] [--data-dir DIR] [--port PORT]