fuli-context 0.7.9 → 0.7.10-beta.7

package/graph-provider/fuli_graph/system_hr_identity.py

@@ -0,0 +1,218 @@
+"""Lossless, exact-ID upgrade of the original HR into the built-in Bole.
+
+The old node and its original edges remain an audit source, not another active
+Agent. Only this reserved legacy ID is eligible; names never establish identity.
+The caller owns a transaction so any conflicting reference rolls everything back.
+"""
+
+import json
+import re
+
+from fastapi import HTTPException
+
+from .project_agent_models import ProjectAgentProfile
+from .provider_values import now_utc
+
+SYSTEM_HR_AGENT_ID = 'employee.bole'
+LEGACY_HR_AGENT_ID = 'fuli-project-hr'
+REFERENCE_FIELDS = (
+    'agent_id', 'hr_agent_id', 'lead_agent_id', 'coordinator_agent_id',
+    'project_agent_id', 'recruited_agent_id', 'proposed_agent_id',
+)
+
+
+async def resolve_hr_alias(store, space_id, agent_id):
+    if agent_id != LEGACY_HR_AGENT_ID:
+        return agent_id
+    rows, _, _ = await store.runtime.driver.execute_query(
+        '''MATCH (:FuliSpace {id: $space_id, kind: 'personal'})-
+                 [:HAS_PROJECT_AGENT_IDENTITY]->(alias:FuliProjectAgentAlias {
+                   agent_id: $legacy_id, canonical_agent_id: $canonical_id
+                 })-[:MERGED_INTO]->(agent:FuliProjectAgent {agent_id: $canonical_id})
+           RETURN agent.agent_id AS agent_id''',
+        space_id=space_id, legacy_id=LEGACY_HR_AGENT_ID,
+        canonical_id=SYSTEM_HR_AGENT_ID, routing_='r',
+    )
+    return rows[0]['agent_id'] if rows else agent_id
+
+
+def merged_hr_profile(canonical, legacy):
+    """Keep current Bole settings and old role knowledge without widening clients."""
+    profile = {**legacy, **canonical, 'name': 'Bole', 'display_name': 'Bole',
+               'agent_type': 'hr', 'status': 'active'}
+    for field in ('capabilities', 'work_kinds', 'initial_preferences'):
+        profile[field] = list(dict.fromkeys([*canonical.get(field, []), *legacy.get(field, [])]))
+    old_clients = legacy.get('allowed_clients')
+    if old_clients is not None:
+        profile['allowed_clients'] = [c for c in profile.get('allowed_clients', []) if c in old_clients]
+    old_policy = legacy.get('executor_policy') or {}
+    policy = canonical.get('executor_policy') or {}
+    if old_policy.get('mode') == 'locked':
+        if policy.get('mode') == 'locked' and policy != old_policy:
+            raise HTTPException(409, 'Bole identities have conflicting locked executor policies')
+        profile['executor_policy'] = old_policy
+    return ProjectAgentProfile.model_validate(profile)
+
+
+async def merge_legacy_hr(store, space_id):
+    driver = store.runtime.driver
+    # Serialize all upgrades of this space, including two simultaneous setups.
+    rows, _, _ = await driver.execute_query(
+        '''MATCH (space:FuliSpace {id: $space_id, kind: 'personal'})
+           SET space._hr_identity_lock = coalesce(space._hr_identity_lock, 0) + 1
+           WITH space
+           MATCH (space)-[:HAS_PROJECT_AGENT_IDENTITY]->
+                 (legacy:FuliProjectAgent {agent_id: $legacy_id})
+           MATCH (space)-[:HAS_PROJECT_AGENT_IDENTITY]->
+                 (canonical:FuliProjectAgent {agent_id: $canonical_id})
+           SET legacy._task_lifecycle_lock = true, canonical._task_lifecycle_lock = true
+           REMOVE legacy._task_lifecycle_lock, canonical._task_lifecycle_lock
+           RETURN legacy, canonical, elementId(legacy) AS legacy_element,
+                  elementId(canonical) AS canonical_element''',
+        space_id=space_id, legacy_id=LEGACY_HR_AGENT_ID, canonical_id=SYSTEM_HR_AGENT_ID,
+    )
+    if not rows:
+        return
+    row = rows[0]
+    legacy, canonical = dict(row['legacy']), dict(row['canonical'])
+    if legacy.get('agent_type') != 'hr' or canonical.get('agent_type') != 'hr':
+        raise HTTPException(409, 'Reserved Bole identity is occupied by a different role')
+    profile = merged_hr_profile(json.loads(canonical['profile_json']), json.loads(legacy['profile_json']))
+    scope = dict(space_id=space_id, legacy_id=LEGACY_HR_AGENT_ID, canonical_id=SYSTEM_HR_AGENT_ID)
+    memory_rows, _, _ = await driver.execute_query(
+        '''MATCH (:FuliSpace {id: $space_id})-[:HAS_PROJECT_AGENT_IDENTITY]->
+                 (agent:FuliProjectAgent)-[:HAS_WORKING_MEMORY]->(head:FuliProjectAgentMemory)
+           WHERE agent.agent_id IN [$legacy_id, $canonical_id]
+           WITH head.personal_project_id AS project_id, collect(DISTINCT head.id) AS heads
+           WHERE size(heads) > 1 RETURN project_id''', **scope,
+    )
+    if memory_rows:
+        raise HTTPException(409, 'Bole identities have separate memory histories in one project; no data was changed')
+    # Keep original relationships on the alias. Create equivalent canonical
+    # relationships, refusing to overwrite a different existing relationship.
+    edges, _, _ = await driver.execute_query(
+        '''MATCH (:FuliSpace {id: $space_id})-[:HAS_PROJECT_AGENT_IDENTITY]->
+                 (legacy:FuliProjectAgent {agent_id: $legacy_id})
+           MATCH (legacy)-[edge]-(other)
+           WHERE type(edge) <> 'HAS_PROJECT_AGENT_IDENTITY'
+           RETURN DISTINCT type(edge) AS kind, properties(edge) AS props,
+                  elementId(startNode(edge)) AS start_id,
+                  elementId(endNode(edge)) AS end_id''',
+        space_id=space_id, legacy_id=LEGACY_HR_AGENT_ID,
+    )
+    for edge in edges:
+        kind = edge['kind']
+        if not re.fullmatch(r'[A-Z][A-Z0-9_]*', kind):
+            raise HTTPException(409, 'Unsupported HR relationship; no data was changed')
+        start_id = row['canonical_element'] if edge['start_id'] == row['legacy_element'] else edge['start_id']
+        end_id = row['canonical_element'] if edge['end_id'] == row['legacy_element'] else edge['end_id']
+        copied, _, _ = await driver.execute_query(
+            f'''MATCH (source), (target)
+                WHERE elementId(source) = $start_id AND elementId(target) = $end_id
+                MERGE (source)-[edge:{kind}]->(target)
+                ON CREATE SET edge = $props
+                RETURN properties(edge) AS props''',
+            start_id=start_id, end_id=end_id, props=dict(edge['props']),
+        )
+        if not copied or dict(copied[0]['props']) != dict(edge['props']):
+            raise HTTPException(409, 'Bole identities have conflicting relationship history; no data was changed')
+    # Scalar routing references follow the canonical identity. Immutable JSON
+    # evidence and hashes remain unchanged; original references are retained.
+    references, _, _ = await driver.execute_query(
+        '''MATCH (space:FuliSpace {id: $space_id, kind: 'personal'})
+           CALL {
+             WITH space MATCH (n) WHERE n.personal_space_id = space.id RETURN n
+             UNION
+             WITH space MATCH (space)-[:HAS_PROJECT_AGENT_TASK]->(:FuliProjectAgentTask)-
+                  [:HAS_TASK_EVENT]->(n:FuliProjectAgentTaskEvent) RETURN n
+           }
+           WITH DISTINCT n WHERE NOT n:FuliProjectAgent
+             AND any(key IN $fields WHERE n[key] = $legacy_id)
+           RETURN elementId(n) AS element_id,
+                  [key IN $fields WHERE n[key] = $legacy_id] AS fields''',
+        space_id=space_id, legacy_id=LEGACY_HR_AGENT_ID, fields=list(REFERENCE_FIELDS),
+    )
+    for reference in references:
+        fields = reference['fields']
+        # Keys come from our constant whitelist, never arbitrary query input.
+        assignments = ', '.join(f'n.{key} = $canonical_id' for key in fields)
+        await driver.execute_query(
+            f'''MATCH (n) WHERE elementId(n) = $element_id
+                SET {assignments}, n.hr_identity_original_refs_json = $original''',
+            element_id=reference['element_id'], canonical_id=SYSTEM_HR_AGENT_ID,
+            original=json.dumps({key: LEGACY_HR_AGENT_ID for key in fields}),
+        )
+    await _move_learning_buckets(store, space_id)
+    # Knowledge UUIDs and evidence payloads are immutable. Only their mutable
+    # visibility metadata follows the identity, within this space's graph group.
+    await driver.execute_query(
+        '''MATCH (space:FuliSpace {id: $space_id, kind: 'personal'})
+           MATCH (n) WHERE n.group_id = space.group_id
+             AND (n:Entity OR n:Episodic)
+           FOREACH (_ IN CASE WHEN n.fuli_project_agent_id = $legacy_id THEN [1] ELSE [] END |
+             SET n.fuli_project_agent_id = $canonical_id, n.hr_identity_original_agent_id = $legacy_id)
+           FOREACH (_ IN CASE WHEN n.fuli_preference_agent_id = $legacy_id THEN [1] ELSE [] END |
+             SET n.fuli_preference_agent_id = $canonical_id, n.hr_identity_original_agent_id = $legacy_id)''',
+        **scope,
+    )
+    await driver.execute_query(
+        '''MATCH (space:FuliSpace {id: $space_id, kind: 'personal'})
+           MATCH ()-[edge:RELATES_TO]->() WHERE edge.group_id = space.group_id
+             AND edge.fuli_preference_agent_id = $legacy_id
+           SET edge.fuli_preference_agent_id = $canonical_id,
+               edge.hr_identity_original_agent_id = $legacy_id''', **scope,
+    )
+    await driver.execute_query(
+        '''MATCH (:FuliSpace {id: $space_id})-[:HAS_PROJECT_AGENT_IDENTITY]->
+                 (legacy:FuliProjectAgent {agent_id: $legacy_id})
+           MATCH (:FuliSpace {id: $space_id})-[:HAS_PROJECT_AGENT_IDENTITY]->
+                 (canonical:FuliProjectAgent {agent_id: $canonical_id})
+           SET canonical.profile_json = $profile_json, canonical.name = 'Bole',
+               canonical.status = 'active',
+               canonical.created_at = CASE WHEN legacy.created_at < canonical.created_at
+                 THEN legacy.created_at ELSE canonical.created_at END,
+               canonical.recruited_at = coalesce(canonical.recruited_at, legacy.recruited_at),
+               canonical.recruitment_reason = coalesce(canonical.recruitment_reason, legacy.recruitment_reason),
+               canonical.recruitment_source_application = coalesce(
+                 canonical.recruitment_source_application, legacy.recruitment_source_application),
+               canonical.capabilities = $capabilities, canonical.work_kinds = $work_kinds,
+               canonical.legacy_agent_ids = [$legacy_id], canonical.updated_at = $timestamp,
+               legacy:FuliProjectAgentAlias, legacy.canonical_agent_id = $canonical_id,
+               legacy.merged_at = $timestamp
+           REMOVE legacy:FuliProjectAgent
+           MERGE (legacy)-[:MERGED_INTO]->(canonical)''',
+        **scope, profile_json=profile.model_dump_json(), capabilities=profile.capabilities,
+        work_kinds=profile.work_kinds, timestamp=now_utc(),
+    )
+
+
+async def _move_learning_buckets(store, space_id):
+    # These are derived cache/reset keys, not evidence or checkpoint IDs. Keep
+    # the original key for audit and refuse ambiguous overlapping buckets.
+    from .store_project_agent_executor_learning import project_agent_executor_outcome_bucket_id
+
+    for kind, label in (
+        ('aggregate', 'FuliProjectAgentExecutorOutcomeAggregate'),
+        ('reset', 'FuliProjectAgentExecutorOutcomeReset'),
+    ):
+        rows, _, _ = await store.runtime.driver.execute_query(
+            f'''MATCH (n:{label} {{personal_space_id: $space_id,
+                  hr_identity_original_refs_json: $original}}) RETURN n''',
+            space_id=space_id, original=json.dumps({'agent_id': LEGACY_HR_AGENT_ID}),
+        )
+        for row in rows:
+            node = dict(row['n'])
+            new_id = project_agent_executor_outcome_bucket_id(
+                store.settings.provider_id, space_id, node['personal_project_id'],
+                node['work_kind'], SYSTEM_HR_AGENT_ID, node['executor_id'],
+                node['model_strategy_key'], bucket_kind=kind,
+            )
+            conflicts, _, _ = await store.runtime.driver.execute_query(
+                f'MATCH (n:{label} {{id: $id}}) RETURN n.id AS id', id=new_id)
+            if conflicts:
+                raise HTTPException(409, 'Bole identities have overlapping executor learning histories; no data was changed')
+            await store.runtime.driver.execute_query(
+                f'''MATCH (n:{label} {{id: $old_id}})
+                    SET n.hr_identity_original_id = n.id,
+                        n.id = $new_id, n.{kind}_id = $new_id''',
+                old_id=node['id'], new_id=new_id)

package/graph-provider/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "fuli-graph-provider"
-version = "0.7.9"
+version = "0.7.10-beta.7"
 description = "Graphiti-backed personal and shared project provider for Fuli."
 requires-python = ">=3.12"
 dependencies = [

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "fuli-context",
-  "version": "0.7.9",
+  "version": "0.7.10-beta.7",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "fuli-context",
-      "version": "0.7.9",
+      "version": "0.7.10-beta.7",
       "license": "Apache-2.0",
       "dependencies": {
         "@hono/node-server": "2.0.12",
@@ -24,7 +24,6 @@
         "@vue/test-utils": "^2.4.11",
         "brace-expansion": "5.0.9",
         "d3": "^7.9.0",
-        "gsap": "^3.15.0",
         "jsdom": "^29.1.1",
         "linkedom": "^0.18.12",
         "npm-run-all2": "^9.0.2",
@@ -1280,16 +1279,16 @@
       }
     },
     "node_modules/@vitest/expect": {
-      "version": "4.1.10",
-      "resolved": "https://registry.npmjs.org/@vitest/expect/-/expect-4.1.10.tgz",
-      "integrity": "sha512-YsCn+qAk1GWjQOWFEsEcL2gNQ0zmVmQu3T03qP6UyjhtmdtwtbuI+DASn/7iQB3HGTXkdBwGddzxPlmiql5vlA==",
+      "version": "4.1.11",
+      "resolved": "https://registry.npmjs.org/@vitest/expect/-/expect-4.1.11.tgz",
+      "integrity": "sha512-VX2x5vNJXET47KAFzwERI+KRMtTTCSWTfSMKsW7JsUsXV4psq++e3DvZpuTDOpHcxytiDs6p2nhVb2tVDiiUYw==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
         "@standard-schema/spec": "^1.1.0",
         "@types/chai": "^5.2.2",
-        "@vitest/spy": "4.1.10",
-        "@vitest/utils": "4.1.10",
+        "@vitest/spy": "4.1.11",
+        "@vitest/utils": "4.1.11",
         "chai": "^6.2.2",
         "tinyrainbow": "^3.1.0"
       },
@@ -1298,13 +1297,13 @@
       }
     },
     "node_modules/@vitest/mocker": {
-      "version": "4.1.10",
-      "resolved": "https://registry.npmjs.org/@vitest/mocker/-/mocker-4.1.10.tgz",
-      "integrity": "sha512-v0xaezt+DKEmKfaxg133ldzADrwLGd7Ze1MfQQTYfvs8OqZIwbxyxaYURivwV7sWy5fqn3rH5uOrSp07bp44Ow==",
+      "version": "4.1.11",
+      "resolved": "https://registry.npmjs.org/@vitest/mocker/-/mocker-4.1.11.tgz",
+      "integrity": "sha512-2XJVD55d1o5AZous5CCGKS74g/riOj9odEt2bQpCVZeblHyHdnMeFl4jl0XjU21stf4mbjUkew2eXQZt65g5CQ==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@vitest/spy": "4.1.10",
+        "@vitest/spy": "4.1.11",
         "estree-walker": "^3.0.3",
         "magic-string": "^0.30.21"
       },
@@ -1335,9 +1334,9 @@
       }
     },
     "node_modules/@vitest/pretty-format": {
-      "version": "4.1.10",
-      "resolved": "https://registry.npmjs.org/@vitest/pretty-format/-/pretty-format-4.1.10.tgz",
-      "integrity": "sha512-W1HsjSH4MXQ9YfmmhLAoIYf1HRfekQCGngeIgcei6MP5QQGWUe0gkopdZQaVCFO+JDJMrAJGwa5pRpNpvy4P8Q==",
+      "version": "4.1.11",
+      "resolved": "https://registry.npmjs.org/@vitest/pretty-format/-/pretty-format-4.1.11.tgz",
+      "integrity": "sha512-yiZzPbGTS9Sr/JpFl8zHrcIkAofNbFV6k21vIgQN/cY/oxZeXhJv5sc/MBJ5jFKWmWs+oJHw0UXLZjmf931+Vw==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
@@ -1348,13 +1347,13 @@
       }
     },
     "node_modules/@vitest/runner": {
-      "version": "4.1.10",
-      "resolved": "https://registry.npmjs.org/@vitest/runner/-/runner-4.1.10.tgz",
-      "integrity": "sha512-IKI6kpIH+LmpROplyLwBBaCfMgOZOMsygVa6BARD6ahA04VRuJSa6OaVG7kRvSEMD870Vd91rSSw0eegtWyLGg==",
+      "version": "4.1.11",
+      "resolved": "https://registry.npmjs.org/@vitest/runner/-/runner-4.1.11.tgz",
+      "integrity": "sha512-LztvUgdwMNJMIkj3hQnnxiC2Xy1zNxq928W/xhjCLaNCzqTZOudjwbQf6v9IntZGPw132i2Lq2rgTRZHD3JHNw==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@vitest/utils": "4.1.10",
+        "@vitest/utils": "4.1.11",
         "pathe": "^2.0.3"
       },
       "funding": {
@@ -1362,14 +1361,14 @@
       }
     },
     "node_modules/@vitest/snapshot": {
-      "version": "4.1.10",
-      "resolved": "https://registry.npmjs.org/@vitest/snapshot/-/snapshot-4.1.10.tgz",
-      "integrity": "sha512-xRkfOT1qpTAi/Ti4Y1LtfRc3kEuqxGw59eN2jN9pRWMtS/XDevekhcFSqvQqjUNGksfjMJu3Y+oJ+4Ypn2OaJw==",
+      "version": "4.1.11",
+      "resolved": "https://registry.npmjs.org/@vitest/snapshot/-/snapshot-4.1.11.tgz",
+      "integrity": "sha512-pN7ikn1ON7h8ee4gIAp4AzyK+zBtJPzVbqOgu5LCEh4VaJVbPQcgYQYJIMGQPXVeJJq1fnfazis7a5pFNPahog==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@vitest/pretty-format": "4.1.10",
-        "@vitest/utils": "4.1.10",
+        "@vitest/pretty-format": "4.1.11",
+        "@vitest/utils": "4.1.11",
         "magic-string": "^0.30.21",
         "pathe": "^2.0.3"
       },
@@ -1378,9 +1377,9 @@
       }
     },
     "node_modules/@vitest/spy": {
-      "version": "4.1.10",
-      "resolved": "https://registry.npmjs.org/@vitest/spy/-/spy-4.1.10.tgz",
-      "integrity": "sha512-PLf/Ugvoq5wO/b4rwYCR1h2PSIdXz7wnkQFMiUpLdtM7l6pqVFcQIBEHyT1+l+cj7mNwAfZHzqXqDyjvOuwbDw==",
+      "version": "4.1.11",
+      "resolved": "https://registry.npmjs.org/@vitest/spy/-/spy-4.1.11.tgz",
+      "integrity": "sha512-apNa/prQy2qCeywhnixOHPRCgGNhvg7T4Dapfl1GahLp/R+uhBm5cPyFoNVyqsNd2h1nJxL6BqqdIjiABL60YA==",
       "dev": true,
       "license": "MIT",
       "funding": {
@@ -1388,13 +1387,13 @@
       }
     },
     "node_modules/@vitest/utils": {
-      "version": "4.1.10",
-      "resolved": "https://registry.npmjs.org/@vitest/utils/-/utils-4.1.10.tgz",
-      "integrity": "sha512-fy9am/HWxbaGt/Sawrp90vt6Y6jQwf1RX77cz3uwoJwJVMli/e1IEwRPnMNJ7vKfPTwo0diXifkpPvwH9v7nGA==",
+      "version": "4.1.11",
+      "resolved": "https://registry.npmjs.org/@vitest/utils/-/utils-4.1.11.tgz",
+      "integrity": "sha512-zTCVGpyFsGWBhllOyKlTw/vnr6D9qxsfSDyfbyZmTyjHw5N/VuvzHpHoQjm2ZJzn4RJgx5w4r7V0er69CmLgPQ==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@vitest/pretty-format": "4.1.10",
+        "@vitest/pretty-format": "4.1.11",
         "convert-source-map": "^2.0.0",
         "tinyrainbow": "^3.1.0"
       },
@@ -3133,13 +3132,6 @@
         "url": "https://github.com/sponsors/ljharb"
       }
     },
-    "node_modules/gsap": {
-      "version": "3.15.0",
-      "resolved": "https://registry.npmjs.org/gsap/-/gsap-3.15.0.tgz",
-      "integrity": "sha512-dMW4CWBTUK1AEEDeZc1g4xpPGIrSf9fJF960qbTZmN/QwZIWY5wgliS6JWl9/25fpTGJrMRtSjGtOmPnfjZB+A==",
-      "dev": true,
-      "license": "Standard 'no charge' license: https://gsap.com/standard-license."
-    },
     "node_modules/has-symbols": {
       "version": "1.1.0",
       "resolved": "https://registry.npmjs.org/has-symbols/-/has-symbols-1.1.0.tgz",
@@ -3165,9 +3157,9 @@
       }
     },
     "node_modules/hono": {
-      "version": "4.13.0",
-      "resolved": "https://registry.npmjs.org/hono/-/hono-4.13.0.tgz",
-      "integrity": "sha512-jhunvfHWxd7J5EFfSgH4xsYJzSe/lfqbUCxiyyeaQasUsXeEHXtzVid+7EOGByc5JnFa23SSFL3Y2RV/z1T+eQ==",
+      "version": "4.13.7",
+      "resolved": "https://registry.npmjs.org/hono/-/hono-4.13.7.tgz",
+      "integrity": "sha512-c8/gF9ac8Y78/agExVocyLevgR+JlpNB444Py0FSX8pJoPdYUfUzRcXtYEYGwt6l19qIlVZPN5Mfsw9jFShmQQ==",
       "license": "MIT",
       "engines": {
         "node": ">=16.9.0"
@@ -4953,9 +4945,9 @@
       }
     },
     "node_modules/tinyrainbow": {
-      "version": "3.1.0",
-      "resolved": "https://registry.npmjs.org/tinyrainbow/-/tinyrainbow-3.1.0.tgz",
-      "integrity": "sha512-Bf+ILmBgretUrdJxzXM0SgXLZ3XfiaUuOj/IKQHuTXip+05Xn+uyEYdVg0kYDipTBcLrCVyUzAPz7QmArb0mmw==",
+      "version": "3.1.1",
+      "resolved": "https://registry.npmjs.org/tinyrainbow/-/tinyrainbow-3.1.1.tgz",
+      "integrity": "sha512-yau8yJdTt989Mm0Bd/236QnzEiPf2xLLTqUZRUJOo/3CB078LSwzei343DgtJVmfJKJE3TMINY1u42SQsP6mXw==",
       "dev": true,
       "license": "MIT",
       "engines": {
@@ -5270,19 +5262,19 @@
       }
     },
     "node_modules/vitest": {
-      "version": "4.1.10",
-      "resolved": "https://registry.npmjs.org/vitest/-/vitest-4.1.10.tgz",
-      "integrity": "sha512-R9jUTe5S4Qb0HCd4TNqpC7oGcrMssMRGXLW80ubjWsW9VH5GF8y1Y0SFLY9AbqSk6nt0PnOx4H4WNJYZ13GUPw==",
+      "version": "4.1.11",
+      "resolved": "https://registry.npmjs.org/vitest/-/vitest-4.1.11.tgz",
+      "integrity": "sha512-fhACrNXUidIbGSBr5FlbuBkO7VWC1ZyLl0DO4CU2DrQoAPxX84Ysxs+HeGQpii5lZWV1Q4gBZTTu49mF+A6Edw==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@vitest/expect": "4.1.10",
-        "@vitest/mocker": "4.1.10",
-        "@vitest/pretty-format": "4.1.10",
-        "@vitest/runner": "4.1.10",
-        "@vitest/snapshot": "4.1.10",
-        "@vitest/spy": "4.1.10",
-        "@vitest/utils": "4.1.10",
+        "@vitest/expect": "4.1.11",
+        "@vitest/mocker": "4.1.11",
+        "@vitest/pretty-format": "4.1.11",
+        "@vitest/runner": "4.1.11",
+        "@vitest/snapshot": "4.1.11",
+        "@vitest/spy": "4.1.11",
+        "@vitest/utils": "4.1.11",
         "es-module-lexer": "^2.0.0",
         "expect-type": "^1.3.0",
         "magic-string": "^0.30.21",
@@ -5310,12 +5302,12 @@
         "@edge-runtime/vm": "*",
         "@opentelemetry/api": "^1.9.0",
         "@types/node": "^20.0.0 || ^22.0.0 || >=24.0.0",
-        "@vitest/browser-playwright": "4.1.10",
-        "@vitest/browser-preview": "4.1.10",
-        "@vitest/browser-webdriverio": "4.1.10",
-        "@vitest/coverage-istanbul": "4.1.10",
-        "@vitest/coverage-v8": "4.1.10",
-        "@vitest/ui": "4.1.10",
+        "@vitest/browser-playwright": "4.1.11",
+        "@vitest/browser-preview": "4.1.11",
+        "@vitest/browser-webdriverio": "4.1.11",
+        "@vitest/coverage-istanbul": "4.1.11",
+        "@vitest/coverage-v8": "4.1.11",
+        "@vitest/ui": "4.1.11",
         "happy-dom": "*",
         "jsdom": "*",
         "vite": "^6.0.0 || ^7.0.0 || ^8.0.0"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fuli-context",
-  "version": "0.7.9",
+  "version": "0.7.10-beta.7",
   "description": "Local-first collaboration relationship graph for AI agents.",
   "type": "module",
   "files": [
@@ -12,6 +12,7 @@
     "docs/public-personal-architecture.md",
     "docs/project-agent-memory.md",
     "docs/employee-agents.md",
+    "docs/agent-interface-architecture.md",
     "examples/external-knowledge/markdown-folder.mjs",
     "graph-provider/Dockerfile",
     "graph-provider/pyproject.toml",
@@ -83,7 +84,6 @@
     "@vue/test-utils": "^2.4.11",
     "brace-expansion": "5.0.9",
     "d3": "^7.9.0",
-    "gsap": "^3.15.0",
     "jsdom": "^29.1.1",
     "linkedom": "^0.18.12",
     "npm-run-all2": "^9.0.2",

package/skills/operating-fuli/SKILL.md

@@ -0,0 +1,47 @@
+---
+name: operating-fuli
+description: Use when an AI Agent needs to inspect or change FULI knowledge, personal projects, Project Agents, specialist Agents, public-project subscriptions, reviews, capture policy, or external-knowledge connections through structured tools instead of browser automation. Also use to check whether a FULI UI action has an Agent interface and to explain a deliberate local-user-only boundary.
+---
+
+# Operating FULI
+
+Operate FULI through its structured Agent interfaces. Treat the UI and Agent tools as two clients of the same application services; never use browser clicks as a data mutation fallback.
+
+## Required workflow
+
+1. Establish the exact scope from the current task. Resolve real `personalSpaceId`, `personalProjectId`, item IDs, and versions through read tools. Never guess an identifier or infer one from a display name.
+2. Call `list_agent_interfaces` before the first mutation. Use its catalog to determine whether the UI capability is `agent` accessible or intentionally `local_user_only`.
+3. Inspect the exact input schema for the selected tool. Prefer one domain-specific tool over generic HTTP, shell, database, or browser access.
+4. Read the current record immediately before changing it. Preserve fields the user did not ask to change.
+5. Check the safety boundary below. Stop if the action needs missing user authority or is marked `local_user_only`.
+6. Execute the smallest scoped mutation. Supply `expectedRevision`, `expectedUpdatedAt`, `idempotencyKey`, or request IDs whenever the tool supports them.
+7. Re-read through the corresponding structured read tool. Report the actual resulting scope, version, status, and any partial failure.
+
+If an expected capability is absent from `list_agent_interfaces`, report an Agent-interface parity gap. Do not hide the gap by opening Chrome, clicking the UI, writing storage directly, or searching outside the current repository.
+
+## Safety boundary
+
+- Never enable or weaken Agent access through an Agent tool. The Agent-access kill switch remains a local-user control.
+- Never change device/runtime settings or complete human confirmation queues on the user's behalf when the catalog marks them `local_user_only`.
+- Never mark a Jefa work item complete through its human-acceptance workbench route; use an Agent task-update tool only for non-acceptance workflow changes.
+- Require explicit user authorization for deletes, publication, subscription changes, destructive conflict decisions, or changes that affect another project. An unambiguous request already authorizes that exact action; do not ask again unless the target or consequences remain unclear.
+- Use environment-variable references for connector secrets. Never request, print, store, or copy secret values into knowledge records, logs, Skill files, or tool arguments that expect only a reference.
+- Stay inside the exact FULI workspace and registered project scopes. Do not use home-directory-wide discovery as a fallback.
+- Browser automation may be used only for optional visual verification after a structured operation. It must not be the mechanism that changes FULI data.
+
+## Selecting tools
+
+Start from `list_agent_interfaces`; names and schemas can evolve. Common workflows and verification pairs are summarized in [workflow-recipes.md](references/workflow-recipes.md). Load that reference only when choosing or sequencing tools is not obvious from the catalog.
+
+For read-only questions, use the narrowest list/get/search tool and return source and scope information. For writes, keep the user-requested scope explicit and verify after mutation. For multi-step operations, stop on the first failed invariant rather than continuing with a partially stale plan.
+
+## Handling conflicts and failures
+
+- On revision or timestamp conflict, re-read, explain what changed, and recompute the intended patch. Do not blindly retry stale input.
+- On permission or `local_user_only` errors, identify the exact local UI action required. Do not bypass the boundary.
+- On partial external sync, preserve the binding, report per-target/source failures, and let the user choose whether to retry.
+- On an unknown tool or missing parity mapping, record the missing capability as a product defect instead of substituting browser automation.
+
+## Completion response
+
+State what changed, the exact project or item scope, the verification result, and any remaining human-only action. Do not claim success from a configured capability or submitted request alone.

package/skills/operating-fuli/agents/openai.yaml

@@ -0,0 +1,4 @@
+interface:
+  display_name: "Operate FULI"
+  short_description: "Control FULI data through structured Agent tools"
+  default_prompt: "Use $operating-fuli to inspect FULI's Agent interface catalog and safely complete this FULI data operation without browser automation."

package/skills/operating-fuli/references/workflow-recipes.md

@@ -0,0 +1,33 @@
+# FULI Agent workflow recipes
+
+Use these as sequencing hints only. Always call `list_agent_interfaces` and inspect the current tool schema first.
+
+| Intent | Read before | Mutation | Verify after |
+| --- | --- | --- | --- |
+| Move an external-knowledge connection between projects | `list_external_knowledge_bindings` | `update_external_knowledge_binding_targets` | `check_external_knowledge_binding`, then `retrieve_external_knowledge_binding` or `sync_external_knowledge_binding` when requested |
+| Create an external-knowledge connection | `list_external_knowledge_connectors`, `discover_external_knowledge_sources` | `create_external_knowledge_binding` | `check_external_knowledge_binding` |
+| Change capture behavior | `get_capture_policy` | `update_capture_policy` | `get_capture_policy` |
+| Add or change durable knowledge | the narrowest knowledge search/read tool | the matching knowledge submission or decision tool | read the exact item and confirm scope/version |
+| Manage Project Agents | `list_project_agents`, `list_project_agent_tasks`, assignments or recruitment state | the matching Agent/assignment/task/recruitment tool | re-list the same Agent/task and inspect status/events |
+| Defer or resolve a preference conflict | `list_preference_conflicts` and both exact knowledge items | `defer_preference_conflict` or `resolve_deferred_preference_conflict` | re-read the conflict and affected items; never claim human confirmation |
+| Manage a specialist Agent | `list_employee_templates` and the current responsibility scope | recruit or update the specialist scope with its dedicated tool | re-list the template and effective managed projects |
+| Publish or remove a public project | read the personal project and current publication | publish/update/delete tool | re-read publication status and release metadata |
+
+For the external-knowledge move example, prefer updating the existing binding targets. Do not delete and recreate the binding merely to change project membership: recreation can lose revision history, connector state, and audit continuity.
+
+Always inspect the complete `targets` array, not the legacy first-target aliases (`target`, `mode`, `sync`). When a user excludes project B, preserve other authorized targets, remove B explicitly, verify the saved array, and synchronize only the requested target/project. An unscoped sync covers every syncable target.
+
+Pass the last-read `targetsVersion` as `expectedTargetsVersion` when changing targets. On `external_knowledge_conflict` or `external_knowledge_busy`, re-read after the other operation completes; do not replay a stale target array. The registry serializes mutations across console/MCP processes; an interrupted process releases its reservation automatically.
+
+Bole is provisioned by the Provider as a fixed native role, not recruited through `recruit_employee`. Inspect staffing through the Project Agent read tools.
+
+The following controls are deliberately local-user-only unless the current interface catalog says otherwise:
+
+- Agent-access policy
+- device/runtime settings
+- human preference-conflict completion
+- preference-scope confirmation
+- batch knowledge confirmation
+- Jefa work-item completion that records explicit human acceptance
+
+Explain the precise UI action when one of these boundaries blocks the request. Never work around it through direct HTTP, storage, browser scripting, or a shell command.

package/src/agent-tools/agent-attention-definitions.js

@@ -0,0 +1,33 @@
+import { objectSchema, stringSchema, enumSchema, integerSchema } from './schema.js';
+
+const text = (maxLength) => ({ ...stringSchema(), minLength: 1, maxLength });
+const scope = { personalSpaceId: text(128), personalProjectId: text(128) };
+const decision = objectSchema({
+  ...scope, requestId: text(128), expectedRevision: integerSchema({ minimum: 0 }), response: text(4096)
+}, ['personalSpaceId', 'personalProjectId', 'requestId', 'expectedRevision', 'response']);
+
+export const AGENT_ATTENTION_DEFINITIONS = [
+  {
+    name: 'request_agent_attention',
+    description: 'Raise a hand only when a person must answer, review, decide or supply permission. Explain the requested action explicitly; do not use for routine running, queueing or retrying. Idempotent, project-scoped; does not execute approvals.',
+    inputSchema: objectSchema({
+      ...scope, agentId: text(128), taskId: text(128),
+      idempotencyKey: { ...text(256), minLength: 8 },
+      kind: enumSchema(['question', 'approval', 'review', 'permission', 'blocked']),
+      title: text(160), detail: text(4096), requestedAction: text(2048)
+    }, ['personalSpaceId', 'personalProjectId', 'agentId', 'idempotencyKey', 'kind', 'title', 'detail', 'requestedAction'])
+  },
+  {
+    name: 'list_agent_attention',
+    description: 'Read human-action requests or responses in one personal space, optionally filtered by project and Agent. Open counts cover the complete filtered set, not only this page. Use resolved status to read human replies.',
+    inputSchema: objectSchema({
+      ...scope, agentId: text(128), status: enumSchema(['open', 'resolved', 'cancelled']),
+      limit: integerSchema({ minimum: 1, maximum: 200 }), offset: integerSchema({ minimum: 0 })
+    }, ['personalSpaceId'])
+  },
+  {
+    name: 'cancel_agent_attention',
+    description: 'Withdraw an obsolete request with a reason and its latest revision. Records Agent cancellation, never impersonates a human response or acceptance.',
+    inputSchema: decision
+  }
+];

package/src/agent-tools/graph-definitions.js

@@ -33,6 +33,8 @@ import {
 } from './project-agent-definitions.js';
 import { PROJECT_AGENT_MEMORY_DEFINITIONS, workingMemorySchema } from './project-agent-memory-definitions.js';
 import { EMPLOYEE_TOOL_DEFINITIONS } from './employee-definitions.js';
+import { AGENT_INTERFACE_DEFINITIONS } from './interface-definitions.js';
+import { AGENT_ATTENTION_DEFINITIONS } from './agent-attention-definitions.js';
 
 const id = boundedString(256);
 const label = boundedString(512);
@@ -278,6 +280,8 @@ const workflowObservedStep = objectSchema({
 }, ['actionId', 'name']);
 
 export const GRAPH_TOOL_DEFINITIONS = [
+  ...AGENT_ATTENTION_DEFINITIONS,
+  ...AGENT_INTERFACE_DEFINITIONS,
   ...EMPLOYEE_TOOL_DEFINITIONS,
   {
     name: 'begin_task_context',
@@ -1106,13 +1110,15 @@ export const GRAPH_TOOL_DEFINITIONS = [
   },
   {
     name: 'revise_personal_knowledge',
-    description: 'Confirm, correct, invalidate, or restore one personal entity or relationship while preserving revision history and original evidence. This is the same personal-only operation used by the management UI.',
+    description: 'Confirm, correct, invalidate, restore, or link a replacement for one personal entity or relationship while preserving revision history and original evidence. A replacement link requires an invalidated item and an exact replacement item ID and kind. This is the same personal-only operation used by the management UI; Agent attribution is always retained.',
     inputSchema: objectSchema({
       personalSpaceId: id,
       personalProjectId: nullableStringSchema(),
       itemKind: knowledgeItemKind,
       itemId: id,
-      action: enumSchema(['confirm', 'update', 'invalidate', 'restore']),
+      action: enumSchema(['confirm', 'update', 'invalidate', 'restore', 'link_replacement']),
+      replacementItemId: nullableStringSchema(),
+      replacementItemKind: knowledgeItemKind,
       reason: shortText,
       name: nullableStringSchema(),
       summary: nullableStringSchema(),