fuli-context 0.8.1 → 0.8.3

package/graph-provider/fuli_graph/store_project_agent_task_staffing.py

@@ -8,6 +8,16 @@ from .project_agent_access import authorize_project_agent
 from .project_agent_models import ProjectAgentProfile
 from .project_agent_task_models import ProjectAgentParallelPlan
 from .store_project_agents import SYSTEM_HR_AGENT_ID
+from .system_hr_identity import LEGACY_HR_AGENT_ID
+
+
+IMPLICIT_PEER_AGENT_IDS = frozenset({
+    'employee.jefa',
+    SYSTEM_HR_AGENT_ID.casefold(),
+    LEGACY_HR_AGENT_ID.casefold(),
+})
+IMPLICIT_PEER_CAPABILITIES = frozenset({'fuli.employee:jefa', 'fuli.employee:bole'})
+IMPLICIT_PEER_AGENT_TYPES = frozenset({'hr'})
 
 
 class StoreProjectAgentTaskStaffing:
@@ -79,10 +89,14 @@ class StoreProjectAgentTaskStaffing:
         eligible = [row for row in rows if required.issubset({
             item.casefold() for item in row.get('capabilities', [])
         })]
-        candidates, history = await self._rank_agent_candidates(eligible, request)
+        implicit_eligible = [
+            row for row in eligible
+            if self._implicit_owner_allowed(row, request)
+        ]
+        candidates, history = await self._rank_agent_candidates(implicit_eligible, request)
         # Continuity may break a tie between qualified specialists; it must
         # never override a capability requirement or a stronger work-kind fit.
-        continuity_pool = eligible
+        continuity_pool = implicit_eligible
         if candidates:
             best_work_match = normalized_work_kind in {
                 item.casefold() for item in candidates[0].get('work_kinds', [])
@@ -100,7 +114,10 @@ class StoreProjectAgentTaskStaffing:
         )
         if continuity:
             selected = continuity[0]
-            remaining = [row for row in candidates or eligible if row['agent_id'] != selected['agent_id']]
+            remaining = [
+                row for row in candidates or implicit_eligible
+                if row['agent_id'] != selected['agent_id']
+            ]
             return [selected], [selected, *remaining], 'project_continuity', [
                 self._project_history_match_basis(
                     project_history.get(selected['agent_id']),
@@ -129,20 +146,20 @@ class StoreProjectAgentTaskStaffing:
                     'matching Agent is unavailable to source client: '
                     f'{request.source_application or "other"}',
                 ]
-            if len(eligible) == 1:
-                return [eligible[0]], eligible, 'sole_active_assignment', [
+            if len(eligible) == 1 and len(implicit_eligible) == 1:
+                return [implicit_eligible[0]], implicit_eligible, 'sole_active_assignment', [
                     'the project has one active Agent assignment',
-                    *self._automatic_selection_basis(eligible[0], request),
+                    *self._automatic_selection_basis(implicit_eligible[0], request),
                 ]
-            if eligible and normalized_work_kind == 'project_context' and not required:
-                eligible.sort(key=lambda row: (
+            if implicit_eligible and normalized_work_kind == 'project_context' and not required:
+                implicit_eligible.sort(key=lambda row: (
                     self._metric_int(row.get('active_task_count')),
                     -int(self._metric_int(row.get('memory_revision')) > 0),
                     row['assigned_at'], row['agent_id'],
                 ))
-                return eligible[:1], eligible, 'project_default', [
-                    f'{len(eligible)} eligible project roles; working-memory continuity and stable tie-break',
-                    *self._automatic_selection_basis(eligible[0], request),
+                return implicit_eligible[:1], implicit_eligible, 'project_default', [
+                    f'{len(implicit_eligible)} eligible project roles; working-memory continuity and stable tie-break',
+                    *self._automatic_selection_basis(implicit_eligible[0], request),
                 ]
             return [], rows, 'no_match', ['no active assignment matched exactly']
         selected = candidates[0]
@@ -166,6 +183,64 @@ class StoreProjectAgentTaskStaffing:
                            if item not in match_basis)
         return [selected], candidates, reason, match_basis
 
+    @classmethod
+    def _implicit_owner_allowed(cls, row, request):
+        """Keep management peers out of unrelated automatic ownership paths."""
+
+        if not cls._is_implicit_peer(row):
+            return True
+        profile = row.get('profile')
+        work_kinds = {
+            str(item).casefold()
+            for item in row.get('work_kinds', [])
+        }
+        work_kinds.update(
+            str(item).casefold()
+            for item in (cls._profile_value(profile, 'work_kinds', []) or [])
+        )
+        capabilities = {
+            str(item).casefold()
+            for item in row.get('capabilities', [])
+        }
+        capabilities.update(
+            str(item).casefold()
+            for item in (cls._profile_value(profile, 'capabilities', []) or [])
+        )
+        required = {
+            str(item).casefold()
+            for item in request.required_capabilities
+        }
+        return request.work_kind.casefold() in work_kinds or (
+            bool(required) and required.issubset(capabilities)
+        )
+
+    @classmethod
+    def _is_implicit_peer(cls, row):
+        agent_id = str(row.get('agent_id') or '').casefold()
+        profile = row.get('profile')
+        agent_type = str(cls._profile_value(profile, 'agent_type', '')).casefold()
+        capabilities = {
+            str(item).casefold()
+            for item in (cls._profile_value(profile, 'capabilities', []) or [])
+        }
+        capabilities.update(
+            str(item).casefold()
+            for item in (row.get('capabilities', []) or [])
+        )
+        return (
+            agent_id in IMPLICIT_PEER_AGENT_IDS
+            or agent_type in IMPLICIT_PEER_AGENT_TYPES
+            or bool(capabilities & IMPLICIT_PEER_CAPABILITIES)
+        )
+
+    @staticmethod
+    def _profile_value(profile, field, default):
+        if profile is None:
+            return default
+        if isinstance(profile, dict):
+            return profile.get(field, default)
+        return getattr(profile, field, default)
+
     def _automatic_selection_basis(self, selected, request):
         work_kind = request.work_kind.casefold()
         if work_kind == 'project_context':

package/graph-provider/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "fuli-graph-provider"
-version = "0.8.1"
+version = "0.8.3"
 description = "Graphiti-backed personal and shared project provider for Fuli."
 requires-python = ">=3.12"
 dependencies = [

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "fuli-context",
-  "version": "0.8.1",
+  "version": "0.8.3",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "fuli-context",
-      "version": "0.8.1",
+      "version": "0.8.3",
       "license": "Apache-2.0",
       "dependencies": {
         "@hono/node-server": "2.0.12",
@@ -22,7 +22,7 @@
         "@types/node": "^24.13.3",
         "@vitejs/plugin-vue": "^6.0.8",
         "@vue/test-utils": "^2.4.11",
-        "brace-expansion": "5.0.9",
+        "brace-expansion": "5.0.12",
         "d3": "^7.9.0",
         "jsdom": "^29.1.1",
         "linkedom": "^0.18.12",
@@ -1867,9 +1867,9 @@
       "license": "ISC"
     },
     "node_modules/brace-expansion": {
-      "version": "5.0.9",
-      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.9.tgz",
-      "integrity": "sha512-ScQ4IuvIEF1TMlP7Zt+vjJ//9zlPb2SDcxWxM3bk8s6t6GGdJ7KO1dCcTidOPJKePW30LE/2cT7wCyPho9/Wxg==",
+      "version": "5.0.12",
+      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.12.tgz",
+      "integrity": "sha512-YovQ3rzhaLMIrDjNDMkNS01tea93qhEhG5xy8f6+R0l+dw3Ki+5sCoIoI942iuLZTHWogWktgwVDhU09iNEimQ==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
@@ -2949,9 +2949,9 @@
       "license": "MIT"
     },
     "node_modules/fast-uri": {
-      "version": "3.1.7",
-      "resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.7.tgz",
-      "integrity": "sha512-dOvZVzjdZdz7phd9v6jCbwxrBW3fK6n8Rc0CtdmM4bumzMnxywBYhuph6J819RRw/ku+rLbelwfMunktuzVVHg==",
+      "version": "3.1.8",
+      "resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.8.tgz",
+      "integrity": "sha512-GZMtZUTNRpOVIECoXwLNZS5xUGE+mVNbTB8h/7Rwh2TFWcBQiPzTgyZi05BF9UMZKkLJv8XBRJTlU7zg8+ZfMg==",
       "funding": [
         {
           "type": "github",
@@ -3285,9 +3285,9 @@
       }
     },
     "node_modules/ip-address": {
-      "version": "10.3.1",
-      "resolved": "https://registry.npmjs.org/ip-address/-/ip-address-10.3.1.tgz",
-      "integrity": "sha512-1e9d3kb97NHJTIJDZW9rKqW2h6+dFa50Dy0fpPSMQp2ADje5gvKsXmdiK6dwY5t76TaTt5+P5N1Y/LoToIxP6g==",
+      "version": "10.7.2",
+      "resolved": "https://registry.npmjs.org/ip-address/-/ip-address-10.7.2.tgz",
+      "integrity": "sha512-7H/2gFSIitxc0hG3nOI1glS8QLo/EHBFFLk8vEUjXY/xu0AdL8jZ9U1IzO2PUm0d2D/ofQcAifb0g6OBkt8U7w==",
       "license": "MIT",
       "engines": {
         "node": ">= 12"
@@ -5077,9 +5077,9 @@
       "license": "ISC"
     },
     "node_modules/undici": {
-      "version": "7.29.0",
-      "resolved": "https://registry.npmjs.org/undici/-/undici-7.29.0.tgz",
-      "integrity": "sha512-IDxfleLmmbSskfWSUATiN1nfn2rDuvnMOqb5CWR92iIfojA0Ud+ulOAAEQ57LPr9rWmsreUyf5lwyao+7GNNVw==",
+      "version": "7.30.0",
+      "resolved": "https://registry.npmjs.org/undici/-/undici-7.30.0.tgz",
+      "integrity": "sha512-dkrQXeHSaoamnItlYbmzG0wFYrM0ZwDxCIg0A7aKjTyyhh9svRzCNFEzV+Vm05/yehjCzjDZ31KXfGEjYSztDQ==",
       "dev": true,
       "license": "MIT",
       "engines": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fuli-context",
-  "version": "0.8.1",
+  "version": "0.8.3",
   "description": "Local-first collaboration relationship graph for AI agents.",
   "type": "module",
   "files": [
@@ -65,7 +65,7 @@
     "type": "git",
     "url": "git+https://github.com/JevonsCode/fuli.git"
   },
-  "homepage": "https://github.com/JevonsCode/fuli#readme",
+  "homepage": "https://jevonscode.github.io/fuli/",
   "bugs": {
     "url": "https://github.com/JevonsCode/fuli/issues"
   },
@@ -83,7 +83,7 @@
     "@types/node": "^24.13.3",
     "@vitejs/plugin-vue": "^6.0.8",
     "@vue/test-utils": "^2.4.11",
-    "brace-expansion": "5.0.9",
+    "brace-expansion": "5.0.12",
     "d3": "^7.9.0",
     "jsdom": "^29.1.1",
     "linkedom": "^0.18.12",
@@ -102,7 +102,7 @@
       "@hono/node-server": "2.0.12"
     },
     "brace-expansion": "$brace-expansion",
-    "fast-uri": "3.1.7",
+    "fast-uri": "3.1.8",
     "qs": "6.16.0"
   }
 }

package/skills/capturing-session-knowledge/SKILL.md

@@ -9,6 +9,13 @@ Accumulate reusable knowledge without interrupting the user's normal work. Keep
 
 ## Establish Task Context
 
+For a coordinated worker sharing its parent's host task, use the isolated context and lifecycle
+policy supplied by the coordinator. An inherited task token belongs to the parent: do not call
+`begin_task_context`, `checkpoint_task_knowledge`, or write the parent's Agent memory. Return
+your result, evidence and proposed work summary to the coordinator for integration. Worker
+activity uses `record_project_agent_task_activity`. A separately created host task/session has
+its own lifecycle and follows the normal entry and checkpoint rules below.
+
 At the start of every user task, first use the lifecycle context supplied by the host when one
 exists. A Claude Code `UserPromptSubmit` hook calls `begin_task_context`, which already loads
 collaboration preferences and resolves the exact local personal project from the current working
@@ -230,9 +237,11 @@ project history. Explicit user-selected Agents and locked policies remain higher
 Treat the returned durable Agent identity and a host worker as different things. A durable Agent
 keeps its project assignment, preferences, task history, and Agent-scoped graph memory while idle;
 the host creates an execution process only when needed. Start only entries in `worker_plan`, give
-each worker only its returned isolated `context`, role, and workstream boundary, and never expose
+each worker only its returned isolated `context` (including `lifecycle`), role, and workstream boundary, and never expose
 another Agent's private context. Fuli is the control plane and does not itself prove that a native
 worker started.
+Do not forward the parent's task token. The coordinator alone checkpoints the shared host task
+after integrating worker results; a worker's completion is not that task's completion.
 
 The host adapter must keep an adaptive-runtime graph lease for the whole worker run, and an
 executor lease when Fuli manages that executor. Call `acquire_runtime_lease` before starting
@@ -243,6 +252,14 @@ including concrete worker identity. Call `record_project_agent_executor_actual`
 executor/model use. If the host cannot start a worker, report the task as blocked or failed and do
 not fabricate an execution-summary row. The Provider's `executionSummary` remains authoritative.
 
+`workerStatus` requires `workerId` and the participating `agentId`. Structured actual executor,
+provider and model form one report and must match authorized preflight evidence. When that
+evidence is missing or inconsistent, omit all three; preserve the observed `workerRuntime`,
+terminal status and mismatch in the summary. Do not guess a provider or rewrite preflight to
+make history fit. Valid terminal activity automatically creates its routing outcome. Additional
+user/test outcome evidence needs a matching recorded execution, the task's exact work kind and
+model strategy, and real references; a CLI session ID alone does not establish that execution.
+
 Keep per-worker completion separate from the global task transition. While parallel work is still
 being integrated, report each worker's terminal result in `workerStatus` and keep the task status
 `running`; this preserves one terminal execution-summary row per actual worker. Only after every
@@ -388,7 +405,8 @@ If `capture_session_knowledge` or automatic project creation returns `capture_di
 user has disabled automatic capture. Do not retry, do not create a fallback record elsewhere,
 and do not describe the skipped batch as stored. Existing knowledge may still be queried.
 
-Before sending the final response, perform one checkpoint. For a hook-managed task, call
+Before sending the final response for a task you own, perform one checkpoint. A coordinated
+worker returns its result to the owner instead of checkpointing an inherited token. For a hook-managed task, call
 `checkpoint_task_knowledge` exactly once with either `capture_candidates` and the bounded durable
 batch, or `retain_nothing`. For a prompt-only Agent, either flush the durable batch directly or
 determine that the turn produced no reusable knowledge. Do not finish a reusable project decision

package/skills/operating-fuli/SKILL.md

@@ -39,6 +39,10 @@ For read-only questions, use the narrowest list/get/search tool and return sourc
 
 When the user addresses HR or Bole to ask about organization or find someone, resolve the existing dedicated HR identity and read `list_project_agents` plus `get_project_agent_coordination_policy` for the exact personal space and relevant project. Use recorded roles, assignments and team membership; do not invent an organization or recruit a replacement HR. Match names, responsibilities and capabilities, but never guess between ambiguous or duplicate names. Link each resolved name to its personal page at `/agents/{encodedPersonalSpaceId}/{encodedAgentId}`. Answering in the HR role does not mean a worker has started; report actual execution separately.
 
+## Before starting collaborators
+
+Read each returned worker's `context.agent.profile.allowedClients` and `executorPolicy`, together with the task's effective executor policy. Intersect the restrictions before starting either a native or external worker; the lead's selected executor does not authorize every collaborator. A locked allow-list applies even when the current host has an idle worker. If the intended platform is outside any effective lock, select an eligible Agent/executor or report the constraint before launch. Never relax the lock, relabel the worker, or invent model evidence to satisfy reporting. FULI context recovery and a ready worker plan are not execution authorization by themselves.
+
 ## Handling conflicts and failures
 
 - On revision or timestamp conflict, re-read, explain what changed, and recompute the intended patch. Do not blindly retry stale input.
@@ -49,3 +53,7 @@ When the user addresses HR or Bole to ask about organization or find someone, re
 ## Completion response
 
 State what changed, the exact project or item scope, the verification result, and any remaining human-only action. Do not claim success from a configured capability or submitted request alone.
+
+Include the task's named durable owner and profile link from `agent_receipt` or the successful checkpoint's `conversation.receipt`. Include Jefa or other peers only with an actual `collaboration_receipt`, naming the tool work they performed; board tools do not imply a separate model worker ran. Keep this receipt brief and distinguish work completion, memory checkpoint and visible-transcript coverage. Do not report saved memory when capture failed or is disabled.
+
+For cross-client continuation, copy the supplied continuation prompt into the same project's connected client. A leading `@Name` matches exact directory names; `@{agentId}` is the stable form (the generated prompt percent-encodes unusual IDs). Duplicate names require an exact ID in the current request; an ambiguous explicit mention must not fall back to the prior session owner or memory. This is FULI task-entry matching, not registration in a client's native @ menu. Obtain a fresh task token before `resume_agent_conversation`; never copy an old token between clients. If no qualified owner exists, route staffing through HR before implementation; Jefa remains a management peer. Preserve confirmed taste/personality/preferences and Agent character/expectations in delegated context.

package/src/agent-tools/employee-definitions.js

@@ -3,6 +3,7 @@ import { booleanSchema, objectSchema, stringSchema } from './schema.js';
 const id = { ...stringSchema(), minLength: 1, maxLength: 256 };
 const projectPath = { ...stringSchema(), minLength: 1, maxLength: 4096 };
 const target = { projectPath, templateId: id };
+const workbenchTarget = { ...target, personalProjectId: id };
 
 export const EMPLOYEE_TOOL_DEFINITIONS = [
   {
@@ -29,15 +30,15 @@ export const EMPLOYEE_TOOL_DEFINITIONS = [
   },
   {
     name: 'list_employee_tools', title: 'READ · Employee workbench tools',
-    description: 'Discover the exact input schemas and permissions for a recruited employee in the current project. Read these schemas before calling a tool; a workbench has to be installed first.',
-    inputSchema: objectSchema(target, ['projectPath', 'templateId'])
+    description: 'Discover complete input schemas and permitted tools for a recruited employee. Supply projectPath, or a previously resolved personalProjectId without projectPath when directory resolution is unavailable. If both are supplied they must resolve to the same project. Existing project and employee authorization always apply. Use includeSchemas=false for a compact name list, then toolName to read one exact schema. Oversized contracts fail explicitly, never return partial schemas. Read the schema before calling; a workbench has to be installed first.',
+    inputSchema: objectSchema({ ...workbenchTarget, toolName: id, includeSchemas: booleanSchema() }, ['templateId'])
   },
   {
     name: 'call_employee_tool', title: 'WRITE · Call an employee workbench tool',
-    description: 'Call a discovered employee tool inside the exact assigned project. May read or change data according to the tool schema. Preserve optimistic concurrency and idempotency keys. Does not grant cross-project access, execute an external model, or confirm task completion for the human.',
+    description: 'Call a discovered employee tool inside the exact assigned project. Supply projectPath or a previously resolved personalProjectId; omit projectPath if directory resolution is unavailable. If both are supplied they must resolve to the same project. May read or change data according to the tool schema. Preserve optimistic concurrency and idempotency keys. Does not grant cross-project access, execute an external model, or confirm task completion for the human.',
     inputSchema: objectSchema({
-      ...target, tool: id,
+      ...workbenchTarget, tool: id,
       arguments: { type: 'object', additionalProperties: true }
-    }, ['projectPath', 'templateId', 'tool', 'arguments'])
+    }, ['templateId', 'tool', 'arguments'])
   }
 ];

package/src/agent-tools/graph-definitions.js

@@ -806,7 +806,7 @@ export const GRAPH_TOOL_DEFINITIONS = [
   {
     name: 'record_project_agent_task_activity',
     title: 'WRITE · Record task activity',
-    description: 'Record one explicit task event, including real terminal activity, actual executor/model/client attribution, and an optional source-labelled cumulative token snapshot for the concrete worker. Never estimate missing usage. Terminal activity is the only source for per-Agent activity summaries.',
+    description: 'Record real task/worker activity and optional source-labelled cumulative token usage; never estimate. workerStatus requires workerId and agentId. Report actualExecutorId, actualModelProvider and actualModel together only with matching authorized preflight evidence. Otherwise omit all three, report observed workerRuntime and explain the mismatch in summary. A terminal activity with valid actual execution automatically records its routing outcome.',
     inputSchema: projectAgentTaskActivityInput
   },
   {
@@ -1016,7 +1016,7 @@ export const GRAPH_TOOL_DEFINITIONS = [
   {
     name: 'record_project_agent_task_outcome',
     title: 'WRITE · Record explicit routing outcome evidence',
-    description: 'Record only explicit acceptance/satisfaction evidence such as rework_requested, repeated_negative_feedback, explicit_praise, test/acceptance pass or fail, or an explicit rating. Natural-language text is never used to infer satisfaction.',
+    description: 'Record explicit user/test outcome evidence against a matching recorded execution. Use the task workKind and effective modelStrategy plus real referenceIds; a CLI session ID alone is not a recorded run. Terminal routing outcomes are already derived from valid task activity; do not submit them again. Never infer satisfaction or fabricate execution evidence to clear a validation error.',
     inputSchema: projectAgentTaskOutcomeInput
   },
   {

package/src/agents/identity-receipt.js

@@ -0,0 +1,29 @@
+import { sourceConsoleUrl } from '../graphiti/source-marker.js';
+
+export function agentProfileUrl(application, agentId) {
+  return `${application.consoleUrl ?? sourceConsoleUrl(null)}/agents/${encodeURIComponent(application.config.personal.spaceId)}/${encodeURIComponent(agentId)}`;
+}
+
+export function agentContinuation(projectId, agentId, conversationId = null) {
+  return { personal_project_id: projectId, agent_id: agentId,
+    ...(conversationId ? { conversation_id: conversationId } : {}),
+    prompt: `@{${encodeURIComponent(agentId)}} 请在 FULI 项目 ${JSON.stringify(projectId)} 对应的工作目录继续工作。`
+      + (conversationId ? `先用当前任务的 taskContextToken 调用 resume_agent_conversation，conversationId=${JSON.stringify(conversationId)}，再按需读取上下文。` : '先恢复这个 Agent 的项目记忆和最近会话。'),
+    guidance: 'Use a connected client and the same authorized project/Agent. Obtain a fresh task context; never reuse the previous client’s token. This is a FULI prompt, not a native client @ picker registration.' };
+}
+
+export function taskAgentReceipt(application, { projectId, agentId, name = null,
+  sourceApplication = null, workStatus = null, conversationId = null, persistence = null }) {
+  return { owner: { agent_id: agentId, name,
+    profile_url: agentProfileUrl(application, agentId), source_application: sourceApplication },
+    personal_project_id: projectId, work_status: workStatus, persistence,
+    continuation: agentContinuation(projectId, agentId, conversationId),
+    guidance: 'Finish with the named owner and profile link, truthful work/memory status and continuation. Add only actually used collaboration_receipt participants (for example Jefa); tools and configured peers are not independent model workers.' };
+}
+
+export function employeeCollaborationReceipt(application, context, { tool, permission, sourceApplication }) {
+  return { agent_id: context.agentId, name: context.name, role: context.role,
+    profile_url: agentProfileUrl(application, context.agentId),
+    personal_project_id: context.project.id, tool, permission,
+    status: 'tool_completed', source_application: sourceApplication ?? 'other', worker_started: false };
+}

package/src/conversations/task-context-view.js

@@ -5,7 +5,9 @@ export function compactTaskContext(value) {
   const result = { ...value };
   if (Array.isArray(value.effective_preferences)) result.effective_preferences = value.effective_preferences.map(item => ({
     instruction: item.instruction, preference_key: item.preference_key,
-    preference_scope: item.preference_scope, confirmation_status: item.confirmation_status
+    preference_scope: item.preference_scope, confirmation_status: item.confirmation_status,
+    profile_aspect: item.profile_aspect,
+    ...(item.attributes?.tasteDomain ? { attributes: { tasteDomain: item.attributes.tasteDomain } } : {})
   }));
   const continuity = value.project_agent_context;
   if (continuity?.memory) {

package/src/employees/service.js

@@ -4,6 +4,7 @@ import { createEmployeeRecruitment } from './recruitment.js';
 import { join } from 'node:path';
 import { EmployeeManagementStore } from './management-policy.js';
 import { employeeTaskEntry } from './task-entry.js';
+import { employeeCollaborationReceipt } from '../agents/identity-receipt.js';
 
 export function createEmployeeService({ app, runtimeConfigPath, registry: configuredRegistry, managementStore: configuredManagementStore }) {
   const registry = configuredRegistry ?? createEmployeePackageRegistry(employeeDirectories(runtimeConfigPath));
@@ -39,7 +40,14 @@ export function createEmployeeService({ app, runtimeConfigPath, registry: config
   async function describeTools(input) {
     const context = await workspace(input);
     const runtime = await registry.runtime(context.templateId);
-    return { ...context, tools: await runtime.describeTools() };
+    const { manifest } = registry.get(context.templateId);
+    let tools = (await runtime.describeTools()).filter(tool => manifest.permissions.includes(tool.permission));
+    if (input.toolName) {
+      tools = tools.filter(tool => tool.name === input.toolName);
+      if (!tools.length) throw new EmployeeError('Employee tool is not available or permitted', 403, 'tool_not_permitted');
+    }
+    if (input.includeSchemas === false) tools = tools.map(({ inputSchema, ...tool }) => tool);
+    return { ...context, tools };
   }
 
   async function callTool(input) {
@@ -58,7 +66,13 @@ export function createEmployeeService({ app, runtimeConfigPath, registry: config
       sourceApplication: input.sourceApplication ?? 'other', id: input.sourceSessionId,
       verified: input.sourceSessionVerified === true,
     } : null;
-    try { return await runtime.callTool(input.tool, input.arguments ?? {}, { ...context, session }); }
+    try {
+      const result = await runtime.callTool(input.tool, input.arguments ?? {}, { ...context, session });
+      if (!result || typeof result !== 'object' || Array.isArray(result)) return result;
+      return { ...result, collaboration_receipt: employeeCollaborationReceipt(app, context, {
+        tool: input.tool, permission: tool.permission, sourceApplication: input.sourceApplication
+      }) };
+    }
     catch (error) {
       if (Number.isInteger(error?.status) && error.status >= 400 && error.status < 500) {
         throw new EmployeeError(error.message, error.status, error.code ?? 'tool_error');
@@ -72,7 +86,7 @@ export function createEmployeeService({ app, runtimeConfigPath, registry: config
     recruit: async (input) => recruitment.recruit(await resolveInput(input)),
     workspace, describeTools, callTool,
     authorize: recruitment.authorize,
-    taskEntry: (input) => employeeTaskEntry({ registry, recruitment, workspace }, input)
+    taskEntry: (input) => employeeTaskEntry({ app, registry, recruitment, workspace }, input)
       .catch(() => ({ status: 'unavailable', managers: [], worker_started: false })),
     async handleHttp(request, response, input) {
       const context = await workspace(input);

package/src/employees/task-entry.js

@@ -1,6 +1,7 @@
 // Management is a task-entry capability, not a replacement for the specialist
 // role/executor chosen by FULI. Never persist the user's prompt or start a model.
-export async function employeeTaskEntry({ registry, recruitment, workspace }, input) {
+import { employeeCollaborationReceipt } from '../agents/identity-receipt.js';
+export async function employeeTaskEntry({ app, registry, recruitment, workspace }, input) {
   if (!input.personalProjectId) return { status: 'project_unresolved', managers: [], worker_started: false };
   const managers = [];
   let unavailable = false;
@@ -18,6 +19,9 @@ export async function employeeTaskEntry({ registry, recruitment, workspace }, in
       const board = await runtime.callTool(manifest.taskEntry.boardTool, { limit: 8 }, resolved);
       managers.push({
         template_id: manifest.id, agent_id: context.agentId, name: manifest.name,
+        collaboration_receipt: employeeCollaborationReceipt(app, resolved, {
+          tool: manifest.taskEntry.boardTool, permission: 'board.read', sourceApplication: input.sourceApplication
+        }),
         personal_project_id: context.project.id, scope_mode: context.management.mode,
         title_mode: context.management.titleMode, title_style: context.management.titleStyle,
         board: { version: board.version, total: board.total, truncated: board.truncated,

package/src/graphiti/agent-conversations.js

@@ -1,4 +1,5 @@
 import { detectSensitiveContent } from '../security/sensitive-content.js';
+import { agentContinuation, taskAgentReceipt } from '../agents/identity-receipt.js';
 
 export function conversationScope(application, input) {
   return { personal_space_id: application.config.personal.spaceId,
@@ -46,16 +47,29 @@ export async function checkpointConversation(application, task, workLog) {
       ...conversationTask(application, task), summary: safeConversationContent(workLog.summary), status: workLog.status,
       events: [{ event_id: `${task.token}:summary`, role: 'summary', kind: 'checkpoint', content: safeConversationContent(workLog.summary) }]
     });
+    if (result.status !== 'saved') return result;
+    let name = null;
+    try {
+      const agent = await application.personal.getProjectAgent(application.config.personal.spaceId, task.personalProjectId, task.projectAgentId);
+      name = agent?.profile?.display_name || agent?.profile?.name || null;
+    } catch { /* Metadata availability does not undo a successful save. */ }
     return { ...result, agent_id: task.projectAgentId, work_status: workLog.status,
+      receipt: taskAgentReceipt(application, { projectId: task.personalProjectId,
+        agentId: task.projectAgentId, name, sourceApplication: task.sourceApplication,
+        workStatus: workLog.status, conversationId: result.conversation_id,
+        persistence: result.status }),
       coverage: 'task_summary; visible transcript capture is confirmed separately by the host hook',
       guidance: 'Include the Agent name, truthful work status and conversation ID in the final receipt. In another client select this Agent, then call resume_agent_conversation with its current taskContextToken and this conversation ID.' };
   } catch { return unavailable(); }
 }
 
 export async function queryConversations(application, input) {
-  return application.personal.conversation('query', { ...conversationScope(application, input),
+  const result = await application.personal.conversation('query', { ...conversationScope(application, input),
     mode: input.mode ?? 'list', ...(input.conversationId ? { conversation_id: input.conversationId } : {}),
     after: input.after ?? 0, limit: input.limit ?? (input.mode === 'events' ? 3 : 10) });
+  if (!Array.isArray(result.conversations)) return result;
+  return { ...result, conversations: result.conversations.map(conversation => ({ ...conversation,
+    continuation_prompt: agentContinuation(input.personalProjectId, input.agentId, conversation.id).prompt })) };
 }
 export async function resumeConversation(application, input) {
   const task = await application.taskContextRegistry.context(input.taskContextToken, input.sourceApplication);

package/src/graphiti/agent-knowledge-workflows.js

@@ -69,7 +69,7 @@ export async function beginTaskContext(application, {
       profile_capture: 'Evaluate durable artifact taste (including writing voice, wording, structure and formatting), stable collaboration personality, and decision preferences separately. Do not default every preference to judgment_preference. Use tasteDomain: writing for writing evidence; retain exact session/turn/time provenance. Agent-inferred personality remains pending. Report actual missing evidence rather than promising automatic progress from use alone.',
       human_attention: 'When the selected Project Agent needs a human answer, decision, review or permission, use request_agent_attention with the exact current space/project/Agent IDs, a stable idempotency key and a specific requestedAction. Never raise a hand for ordinary running, queueing or automatic retries. Read list_agent_attention with status=resolved for replies; cancel obsolete requests with cancel_agent_attention. A response does not grant permission or accept task completion.',
       retrieval: 'Inspect task_knowledge_recall before asking for a stable project fact or method again. On a miss, use search_current_project_knowledge with focused action, artifact, target-system, or identifier queries; never use the full conversational request as the only query.',
-      checkpoint: 'Before finishing, call checkpoint_task_knowledge with capture_candidates or retain_nothing. For an assigned employee include workLog with a concise result summary and truthful status (completed, incomplete, failed, no_change, or reported), even when there is no knowledge to capture. When durable role context changed, also include agentMemory with the loaded revision and bounded merged notes. Do not overwrite from truncated context or store raw transcripts.'
+      checkpoint: 'The task owner checkpoints once after integration. Coordinated workers return results and evidence to the coordinator; they must not begin or checkpoint an inherited parent context. Before finishing the owned task, call checkpoint_task_knowledge with capture_candidates or retain_nothing. For an assigned employee include workLog with a concise result summary and truthful status (completed, incomplete, failed, no_change, or reported), even when there is no knowledge to capture. When durable role context changed, also include agentMemory with the loaded revision and bounded merged notes. Do not overwrite from truncated context or store raw transcripts.'
     }
   };
 }

package/src/graphiti/federated-application.js

@@ -76,11 +76,8 @@ import {
 import {
   relatedProjectGuidance
 } from './related-project-suggestions.js';
-import {
-  getCollaborationPreferences as getCollaborationPreferencesWorkflow
-} from './collaboration-preference-workflow.js';
 import { buildUserTasteSkill } from './user-taste-skill.js';
-import { resolveTaskEntryAgent, loadProjectAgentContinuity } from './project-agent-task-entry.js';
+import { taskEntryPreferences } from './task-entry-preferences.js';
 import { getWritingTasteProfile as getWritingTasteProfileWorkflow } from './writing-taste-profile-workflow.js';
 import {
   groupSubscriptions,
@@ -256,42 +253,11 @@ export class FederatedGraphApplication extends ProjectAgentControlPlaneApplicati
     agentToolName = 'get_collaboration_preferences'
   } = {}) {
     const projectResolution = await this.#resolvePreferenceProject({ personalProjectId, projectPath });
-    const selection = projectPath === null && !personalProjectId && !projectAgentId
-      ? null
-      : await resolveTaskEntryAgent(
-      this, projectResolution, { projectAgentId, taskPrompt, sourceApplication,
-        sessionId: agentToolName === 'get_collaboration_preferences'
-          ? sessionId ?? sourceSessionId : turnId ? sessionId : null,
-        turnId: agentToolName === 'begin_task_context' ? turnId : null,
-        workKind, requiredCapabilities, agentInvocation, agentToolName }
-    );
-    // A rejected explicit role must not leak its private preferences via fallback.
-    const selectedAgentId = selection ? selection.agent?.agentId ?? null : projectAgentId;
-    const preferences = await getCollaborationPreferencesWorkflow(
-      this,
-      projectResolution,
-      {
-        projectAgentId: selectedAgentId,
-        taskPrompt,
-        limit,
-        agentInvocation,
-        agentToolName
-      },
-      (items, toolName) => this.#recordAgentViews(items, toolName)
-    );
-    const management = this.employees && agentInvocation &&
-      ['begin_task_context', 'get_collaboration_preferences'].includes(agentToolName)
-      ? await this.employees.taskEntry({ personalProjectId: projectResolution.personalProjectId,
-        sourceApplication, sourceSessionId, sessionId })
-      : null;
-    const managedPreferences = management ? { ...preferences, project_management_context: management } : preferences;
-    if (!selection) return managedPreferences;
-    const context = selection.agent ? await loadProjectAgentContinuity(this, {
-      projectId: projectResolution.personalProjectId, agent: selection.agent,
-      sourceApplication, taskPrompt, selectionReason: selection.reason,
-      matchBasis: selection.match_basis
-    }) : selection;
-    return { ...managedPreferences, project_agent_context: context };
+    return taskEntryPreferences(this, projectResolution, {
+      personalProjectId, projectAgentId, projectPath, taskPrompt, sourceApplication,
+      sourceSessionId, sessionId, turnId, workKind, requiredCapabilities,
+      limit, agentInvocation, agentToolName
+    }, (items, toolName) => this.#recordAgentViews(items, toolName));
   }
 
   async getUserTasteSkill({