fuli-context 0.8.2 → 0.9.0-beta.1

package/graph-provider/fuli_graph/task_context_temporary_owner.py

@@ -0,0 +1,25 @@
+"""Recover only the task-only employee already bound to this host lifecycle."""
+
+from .project_agent_context_models import ProjectAgentContextResolution
+
+
+async def temporary_task_owner(store, actor, request):
+    if not request.session_id or not hasattr(store, 'current_task_context'):
+        return None
+    context = await store.current_task_context(actor, request.personal_space_id,
+        request.session_id, request.source_application)
+    if not context or context.get('agent_memory_scope') != 'task_only':
+        return None
+    if (context.get('personal_project_id') != request.personal_project_id
+            or (request.turn_id and context.get('turn_id') != request.turn_id)
+            or (request.agent_id and context.get('project_agent_id') != request.agent_id)):
+        return None
+    agent = await store.get_project_agent(actor, request.personal_space_id,
+        request.personal_project_id, context['project_agent_id'])
+    if (agent.profile.agent_type != 'temporary'
+            or agent.temporary_task_id != context.get('coordination_task_id')
+            or agent.profile.status != 'active'
+            or request.source_application not in agent.profile.allowed_clients):
+        return ProjectAgentContextResolution(status='agent_unavailable', reason='agent_unavailable')
+    return ProjectAgentContextResolution(status='ready', agent=agent, reason='active_task_owner',
+        candidate_count=1, match_basis=['temporary employee bound to this exact host task'], worker_started=False)

package/graph-provider/fuli_graph/temporary_project_scope.py

@@ -0,0 +1,88 @@
+"""Idempotent task scopes; retain audit history without directory registration."""
+
+import hashlib
+import json
+
+from fastapi import HTTPException
+from pydantic import Field
+
+from .models import ProjectProfile, SourceApplication, StrictModel
+from .provider_values import now_utc, stable_uuid
+from .store_transactions import TransactionQueryDriver, query_store_transaction
+
+
+TEMPORARY_SCOPE = {'type': 'temporary', 'lifetime': 'task', 'persisted': True}
+
+
+class TemporaryProjectEnsure(StrictModel):
+    personal_space_id: str = Field(min_length=1, max_length=128)
+    scope_key: str = Field(pattern=r'^[a-f0-9]{64}$')
+    source_application: SourceApplication
+    task_context_token: str | None = Field(default=None, pattern=r'^fuli-task-[a-zA-Z0-9-]{8,128}$')
+
+
+async def ensure_temporary_project(store, actor, request):
+    if not isinstance(store.runtime.driver, TransactionQueryDriver):
+        async with query_store_transaction(store) as scoped:
+            return await ensure_temporary_project(scoped, actor, request)
+    store._require_personal()
+    await store.authorize(actor, request.personal_space_id, 'maintainer')
+    project_id = f'temporary-{request.scope_key}'
+    if request.task_context_token:
+        expected = hashlib.sha256(json.dumps([
+            'fuli-temporary-task-v1', request.personal_space_id,
+            request.source_application, request.task_context_token, None,
+        ], separators=(',', ':'), ensure_ascii=False).encode()).hexdigest()
+        if expected != request.scope_key:
+            raise HTTPException(409, 'Temporary scope does not belong to this task context')
+        await _bind_task_context(store, actor, request, project_id)
+    node_id = stable_uuid(store.settings.provider_id, request.personal_space_id,
+                          'personal-project', project_id)
+    profile = ProjectProfile(name='临时任务 / Temporary task', lifecycle='active',
+        purpose='Isolated task scope created by explicit Agent coordination.',
+        boundaries=['Task-local context only; no implicit project inheritance.',
+                    'Audit history is retained after the task ends.'])
+    records, _, _ = await store.runtime.driver.execute_query(
+        '''
+        MATCH (space:FuliSpace {id: $space_id, kind: 'personal'})
+        MERGE (project:FuliPersonalProject {id: $id})
+        ON CREATE SET project.project_id = $project_id,
+          project.publication_key = $publication_key, project.scope_type = 'temporary',
+          project.scope_key = $scope_key, project.profile_json = $profile_json,
+          project.name = $name, project.created_at = $now, project.updated_at = $now
+        WITH space, project
+        WHERE project.scope_type = 'temporary' AND project.scope_key = $scope_key
+        MERGE (space)-[:CONTAINS_PROJECT]->(project)
+        RETURN project
+        ''', space_id=request.personal_space_id, id=node_id, project_id=project_id,
+        publication_key=stable_uuid(node_id, 'publication'), scope_key=request.scope_key,
+        profile_json=profile.model_dump_json(), name=profile.name, now=now_utc())
+    if not records:
+        raise HTTPException(409, 'Temporary scope conflicts with an existing project')
+    return store._personal_project(records[0]['project'], request.personal_space_id)
+
+
+async def _bind_task_context(store, actor, request, project_id):
+    record = await store.get_task_context(actor, request.personal_space_id,
+        request.task_context_token, request.source_application)
+    if record.get('personal_project_id') == project_id and record.get('project_scope') == TEMPORARY_SCOPE:
+        return
+    if record.get('personal_project_id') or record.get('project_agent_id') or record.get('checkpoint'):
+        raise HTTPException(409, 'Task context cannot change its project scope')
+    before = json.dumps(record, ensure_ascii=False)
+    record.update(personal_project_id=project_id, project_scope=TEMPORARY_SCOPE)
+    rows, _, _ = await store.runtime.driver.execute_query(
+        '''
+        MATCH (:FuliSpace {id: $space_id, kind: 'personal'})-[:HAS_TASK_CONTEXT_SESSION]->
+          (session:FuliTaskContextSession)-[:HAS_CONTEXT]->(context:FuliTaskContext {token: $token})
+        SET session.write_serial = coalesce(session.write_serial, 0) + 1
+        WITH session, context
+        WHERE session.current_token = context.token AND context.personal_project_id IS NULL
+          AND context.project_agent_id IS NULL AND context.fingerprint IS NULL
+          AND NOT context.completed AND context.record_json = $before
+        SET context.personal_project_id = $project_id, context.record_json = $record_json
+        RETURN context.record_json AS record_json
+        ''', space_id=request.personal_space_id, token=request.task_context_token,
+        project_id=project_id, before=before, record_json=json.dumps(record, ensure_ascii=False))
+    if not rows:
+        raise HTTPException(409, 'Task context changed or was superseded during temporary scope binding')

package/graph-provider/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "fuli-graph-provider"
-version = "0.8.2"
+version = "0.8.3"
 description = "Graphiti-backed personal and shared project provider for Fuli."
 requires-python = ">=3.12"
 dependencies = [

package/npm-shrinkwrap.json

@@ -1,16 +1,17 @@
 {
   "name": "fuli-context",
-  "version": "0.8.2",
+  "version": "0.9.0-beta.1",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "fuli-context",
-      "version": "0.8.2",
+      "version": "0.9.0-beta.1",
       "license": "Apache-2.0",
       "dependencies": {
+        "@a2a-js/sdk": "1.3.0",
         "@hono/node-server": "2.0.12",
-        "@modelcontextprotocol/sdk": "^1.29.0",
+        "@modelcontextprotocol/sdk": "^1.31.0",
         "zod": "^4.4.3"
       },
       "bin": {
@@ -31,7 +32,7 @@
         "typescript": "~6.0.0",
         "vite": "^8.1.5",
         "vitest": "^4.1.10",
-        "vue": "^3.5.40",
+        "vue": "^3.5.42",
         "vue-i18n": "^11.4.8",
         "vue-router": "^5.2.0",
         "vue-tsc": "^3.3.8"
@@ -40,6 +41,53 @@
         "node": ">=24.12"
       }
     },
+    "node_modules/@a2a-js/sdk": {
+      "version": "1.3.0",
+      "resolved": "https://registry.npmjs.org/@a2a-js/sdk/-/sdk-1.3.0.tgz",
+      "integrity": "sha512-OpK4nygUnLKlpTFZlM2IrYu7f3c/B7c4u4Z14+vgMq24lEINTVCxH/BqZx+GL92rNf7CoBL5oTP5UhNsl75yyg==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "jose": "^6.2.3"
+      },
+      "bin": {
+        "a2a-db": "dist/cli/a2a_db.js"
+      },
+      "engines": {
+        "node": ">=20"
+      },
+      "peerDependencies": {
+        "@bufbuild/protobuf": "^2.10.2",
+        "@grpc/grpc-js": "^1.11.0",
+        "better-sqlite3": "^12.0.0 || ^13.0.0",
+        "express": "^4.21.2 || ^5.1.0",
+        "kysely": "^0.28.17 || ^0.29.0",
+        "mysql2": "^3.0.0",
+        "pg": "^8.0.0"
+      },
+      "peerDependenciesMeta": {
+        "@bufbuild/protobuf": {
+          "optional": true
+        },
+        "@grpc/grpc-js": {
+          "optional": true
+        },
+        "better-sqlite3": {
+          "optional": true
+        },
+        "express": {
+          "optional": true
+        },
+        "kysely": {
+          "optional": true
+        },
+        "mysql2": {
+          "optional": true
+        },
+        "pg": {
+          "optional": true
+        }
+      }
+    },
     "node_modules/@asamuzakjp/css-color": {
       "version": "5.1.11",
       "resolved": "https://registry.npmjs.org/@asamuzakjp/css-color/-/css-color-5.1.11.tgz",
@@ -180,13 +228,13 @@
       }
     },
     "node_modules/@babel/parser": {
-      "version": "7.29.7",
-      "resolved": "https://registry.npmjs.org/@babel/parser/-/parser-7.29.7.tgz",
-      "integrity": "sha512-hnORnjP/1P/zFEndoeX+n+t1RwWRJiJpM/jO7FW32Kn9r5+sJB2JWOdYo4L6k78j15eCwY3Gm/7364B1EMwtNg==",
+      "version": "7.29.9",
+      "resolved": "https://registry.npmjs.org/@babel/parser/-/parser-7.29.9.tgz",
+      "integrity": "sha512-CjXrNHTnvqBVqHgdBysY3vk2T8tpJHb5/RMeHJBTyVa9xgugCB0CJTx/3oO8RV2QRQP391RWpB7D6hLjm8V9uA==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@babel/types": "^7.29.7"
+        "@babel/types": "^7.29.8"
       },
       "bin": {
         "parser": "bin/babel-parser.js"
@@ -196,9 +244,9 @@
       }
     },
     "node_modules/@babel/types": {
-      "version": "7.29.7",
-      "resolved": "https://registry.npmjs.org/@babel/types/-/types-7.29.7.tgz",
-      "integrity": "sha512-4zBIxpPzowiZpusoFkyGVwakdRJUyuH5PxQ/PrqghfdFWWasvnCdPfQXHrenDai+gyLARulZjZowCOj6fjT4pA==",
+      "version": "7.29.8",
+      "resolved": "https://registry.npmjs.org/@babel/types/-/types-7.29.8.tgz",
+      "integrity": "sha512-Vj1jF3cPfxg7OAfoI7QnVKLoILlm2JF9pnVHrX8qx7AHMiYWT+NDAA7jChlNgRS4WTLc/fD1lXLmPixluj+3Gg==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
@@ -560,12 +608,12 @@
       }
     },
     "node_modules/@modelcontextprotocol/sdk": {
-      "version": "1.29.0",
-      "resolved": "https://registry.npmjs.org/@modelcontextprotocol/sdk/-/sdk-1.29.0.tgz",
-      "integrity": "sha512-zo37mZA9hJWpULgkRpowewez1y6ML5GsXJPY8FI0tBBCd77HEvza4jDqRKOXgHNn867PVGCyTdzqpz0izu5ZjQ==",
+      "version": "1.31.0",
+      "resolved": "https://registry.npmjs.org/@modelcontextprotocol/sdk/-/sdk-1.31.0.tgz",
+      "integrity": "sha512-UvTMgnNlnIBO/22ob2RcVGDlcvOslQs8T59+FTGdA0L27a39fdGF/EDETNtDVK4DZGpwomlsYpRdA8UXcVL/pw==",
       "license": "MIT",
       "dependencies": {
-        "@hono/node-server": "^1.19.9",
+        "@hono/node-server": "^1.19.9 || ^2.0.5",
         "ajv": "^8.17.1",
         "ajv-formats": "^3.0.1",
         "content-type": "^1.0.5",
@@ -1459,14 +1507,14 @@
       }
     },
     "node_modules/@vue/compiler-core": {
-      "version": "3.5.40",
-      "resolved": "https://registry.npmjs.org/@vue/compiler-core/-/compiler-core-3.5.40.tgz",
-      "integrity": "sha512-39E8IgOhTbVDnoJFMKc2DvYnypcZwUqgUhQkccva/0m6FUwtIKSGV7n1hpVmYcFaoRAwf9pBcwnKlCEsN63ZEQ==",
+      "version": "3.5.42",
+      "resolved": "https://registry.npmjs.org/@vue/compiler-core/-/compiler-core-3.5.42.tgz",
+      "integrity": "sha512-2Ye1ilMtKXxl8qZUrQ5j0CdgenFp/HFQmta6rfRyfEsTG69L6Wk+tWuNoHYHMx9E8tF2Slvdg1FuwDvAXdy1LQ==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@babel/parser": "^7.29.7",
-        "@vue/shared": "3.5.40",
+        "@babel/parser": "^7.29.8",
+        "@vue/shared": "3.5.42",
         "entities": "^7.0.1",
         "estree-walker": "^2.0.2",
         "source-map-js": "^1.2.1"
@@ -1486,28 +1534,28 @@
       }
     },
     "node_modules/@vue/compiler-dom": {
-      "version": "3.5.40",
-      "resolved": "https://registry.npmjs.org/@vue/compiler-dom/-/compiler-dom-3.5.40.tgz",
-      "integrity": "sha512-pwkx4vqlqOspFstrcmzwkKLePVMD3PT65imRzLhanU2V1Fj4K13g6OXjanOyzw3aTAuRk84BOmY8f3rEHqPaVA==",
+      "version": "3.5.42",
+      "resolved": "https://registry.npmjs.org/@vue/compiler-dom/-/compiler-dom-3.5.42.tgz",
+      "integrity": "sha512-qbhQZEFmycr+ni/qyuccS4sucNN7VAbDfbkvNxWOX2VfgFm90MNs3/UhRNKoPMEIVn0F8gdlYjLPvqxHwHeQOA==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@vue/compiler-core": "3.5.40",
-        "@vue/shared": "3.5.40"
+        "@vue/compiler-core": "3.5.42",
+        "@vue/shared": "3.5.42"
       }
     },
     "node_modules/@vue/compiler-sfc": {
-      "version": "3.5.40",
-      "resolved": "https://registry.npmjs.org/@vue/compiler-sfc/-/compiler-sfc-3.5.40.tgz",
-      "integrity": "sha512-gIf497P4kpuALcvs5n3AEg1Vdn0pSY4XbjASIfHNYF1/MP3T2Mf2STERTubysBxCRxzJGJYtF/O7vwJrxFB3Vw==",
+      "version": "3.5.42",
+      "resolved": "https://registry.npmjs.org/@vue/compiler-sfc/-/compiler-sfc-3.5.42.tgz",
+      "integrity": "sha512-fkCAFB4okcAANGMThboWnScp/gzWjU0ZSkVnjTIiplmMDq2uq0tIB3j+xVu4rhv5rvOgBySCysudmbMd6xRRqw==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@babel/parser": "^7.29.7",
-        "@vue/compiler-core": "3.5.40",
-        "@vue/compiler-dom": "3.5.40",
-        "@vue/compiler-ssr": "3.5.40",
-        "@vue/shared": "3.5.40",
+        "@babel/parser": "^7.29.8",
+        "@vue/compiler-core": "3.5.42",
+        "@vue/compiler-dom": "3.5.42",
+        "@vue/compiler-ssr": "3.5.42",
+        "@vue/shared": "3.5.42",
         "estree-walker": "^2.0.2",
         "magic-string": "^0.30.21",
         "postcss": "^8.5.19",
@@ -1515,14 +1563,14 @@
       }
     },
     "node_modules/@vue/compiler-ssr": {
-      "version": "3.5.40",
-      "resolved": "https://registry.npmjs.org/@vue/compiler-ssr/-/compiler-ssr-3.5.40.tgz",
-      "integrity": "sha512-rrE5xiXG663+vHCHa3J9p2z5OcBRjXmoqenprJxAFQxg5pSshzeBiCE6pu46axapRJ2Adk0YDA2BRZVjiHXnhg==",
+      "version": "3.5.42",
+      "resolved": "https://registry.npmjs.org/@vue/compiler-ssr/-/compiler-ssr-3.5.42.tgz",
+      "integrity": "sha512-xmLk3wLkbizPAiLyomjgFFosf2ys9b5Ghb+oh/k2tnvipNz8OFrQOiTcWCzyK7MpBp9KkyGtfvgfLUivbmuGYA==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@vue/compiler-dom": "3.5.40",
-        "@vue/shared": "3.5.40"
+        "@vue/compiler-dom": "3.5.42",
+        "@vue/shared": "3.5.42"
       }
     },
     "node_modules/@vue/devtools-api": {
@@ -1572,55 +1620,55 @@
       }
     },
     "node_modules/@vue/reactivity": {
-      "version": "3.5.40",
-      "resolved": "https://registry.npmjs.org/@vue/reactivity/-/reactivity-3.5.40.tgz",
-      "integrity": "sha512-B7ot9UlUZOi1zbq61/LvE88ZLTV8IlajTdiZTAEiDQgrnIMIZoPr9kGw0Zw46ObW62O9+H/Be3kMbfb7kYPQZA==",
+      "version": "3.5.42",
+      "resolved": "https://registry.npmjs.org/@vue/reactivity/-/reactivity-3.5.42.tgz",
+      "integrity": "sha512-TzNNfKpb7hDxbQltwAut8VDQA5YP+BuRlxntHUuRjyKwlMvmAPbs3unhCvieijifY6vFfVBwsS7wG/C7uq+bEQ==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@vue/shared": "3.5.40"
+        "@vue/shared": "3.5.42"
       }
     },
     "node_modules/@vue/runtime-core": {
-      "version": "3.5.40",
-      "resolved": "https://registry.npmjs.org/@vue/runtime-core/-/runtime-core-3.5.40.tgz",
-      "integrity": "sha512-KAZLweuZ6uUJPK1PMSQPgBU5gCjgrrfjUhSglmU9NhH+Zjepa8cnwSydPWDWHDwOgY4g3VcZ+PljbiHlURNCbw==",
+      "version": "3.5.42",
+      "resolved": "https://registry.npmjs.org/@vue/runtime-core/-/runtime-core-3.5.42.tgz",
+      "integrity": "sha512-9uACtuHs7vJGkm5Bp3xu4xRDLFTIYy5DgxpToVjqGIAhAEKwQfsaLvKINhM6nFVp6bZPRFGdDqd1g52MqKsotA==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@vue/reactivity": "3.5.40",
-        "@vue/shared": "3.5.40"
+        "@vue/reactivity": "3.5.42",
+        "@vue/shared": "3.5.42"
       }
     },
     "node_modules/@vue/runtime-dom": {
-      "version": "3.5.40",
-      "resolved": "https://registry.npmjs.org/@vue/runtime-dom/-/runtime-dom-3.5.40.tgz",
-      "integrity": "sha512-ZfrX8ssZQds900L9pr8AuK05ddnMsR4MPMZr8cPN9GoqoPWcXLhjvvbIA2SMv+7a97sJ1vv9pj/zxK0Cq/eEFQ==",
+      "version": "3.5.42",
+      "resolved": "https://registry.npmjs.org/@vue/runtime-dom/-/runtime-dom-3.5.42.tgz",
+      "integrity": "sha512-rsCmhiWLaRxGltLwhlCWyYkFn7WAbKRh0q17eZ1A6Dq6eqc2ACQ61IIryxz0LrsvCzHSilLA9JHovVwM8CNE2g==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@vue/reactivity": "3.5.40",
-        "@vue/runtime-core": "3.5.40",
-        "@vue/shared": "3.5.40",
+        "@vue/reactivity": "3.5.42",
+        "@vue/runtime-core": "3.5.42",
+        "@vue/shared": "3.5.42",
         "csstype": "^3.2.3"
       }
     },
     "node_modules/@vue/server-renderer": {
-      "version": "3.5.40",
-      "resolved": "https://registry.npmjs.org/@vue/server-renderer/-/server-renderer-3.5.40.tgz",
-      "integrity": "sha512-XNJym9WpevhTVt1HuwOrCRJ5Q+9z4BjTMrDtjTrvx74SmUll8spNTw6whWJa9mEkO4PKn5TihI/bm/8ds2QVJw==",
+      "version": "3.5.42",
+      "resolved": "https://registry.npmjs.org/@vue/server-renderer/-/server-renderer-3.5.42.tgz",
+      "integrity": "sha512-2++5dUyYS4gvo7xQXSECUDhB7TS0aOl5SeVfC5qSq1Jgfhjvegw1zqhwTIR3imZ+QYPJQw9gfcFvXGAjGZ7ajQ==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@vue/compiler-ssr": "3.5.40",
-        "@vue/runtime-dom": "3.5.40",
-        "@vue/shared": "3.5.40"
+        "@vue/compiler-ssr": "3.5.42",
+        "@vue/runtime-dom": "3.5.42",
+        "@vue/shared": "3.5.42"
       }
     },
     "node_modules/@vue/shared": {
-      "version": "3.5.40",
-      "resolved": "https://registry.npmjs.org/@vue/shared/-/shared-3.5.40.tgz",
-      "integrity": "sha512-WxnBtruIqOoV3rA4jeKDWzrYI5h7Cp4+pjwDi8kWGHz+IslhiN+wguLVVhtv2l8VoU02rzDCVfDjgCl1lNpZVg==",
+      "version": "3.5.42",
+      "resolved": "https://registry.npmjs.org/@vue/shared/-/shared-3.5.42.tgz",
+      "integrity": "sha512-2rPxex1jQf4jvl9MOHl6YaXCPcrNqz/FstMOEh3QWY+/OME9nQTvl9WYeCwhW7AFjaR0SnngZGlp/wkR6rkI6g==",
       "dev": true,
       "license": "MIT"
     },
@@ -4366,9 +4414,9 @@
       "license": "ISC"
     },
     "node_modules/proxy-addr": {
-      "version": "2.0.7",
-      "resolved": "https://registry.npmjs.org/proxy-addr/-/proxy-addr-2.0.7.tgz",
-      "integrity": "sha512-llQsMLSUDUPT44jdrU/O37qlnifitDP+ZwrmmZcoSKyLKvtZxpyV0n2/bD/N4tBAAZ/gJEdZU7KMraoK1+XYAg==",
+      "version": "2.0.8",
+      "resolved": "https://registry.npmjs.org/proxy-addr/-/proxy-addr-2.0.8.tgz",
+      "integrity": "sha512-5nnx0yGyVUcY6t9RnWcARWtwT9F1D8O9rt08htPvnd49W1IgZtmLkhu9WfMzQj1cFxjHIO6connUNVW5k7AVyQ==",
       "license": "MIT",
       "dependencies": {
         "forwarded": "0.2.0",
@@ -4376,6 +4424,10 @@
       },
       "engines": {
         "node": ">= 0.10"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/express"
       }
     },
     "node_modules/punycode": {
@@ -4662,9 +4714,9 @@
       }
     },
     "node_modules/shell-quote": {
-      "version": "1.10.0",
-      "resolved": "https://registry.npmjs.org/shell-quote/-/shell-quote-1.10.0.tgz",
-      "integrity": "sha512-w1aiOKwKuRgtwAReIIj89puqg+I7GvX4IbLrvmhXbzQsj1+Zwi4VO3+fa6ZF91TWSjIxoEkKnMeHcLEODK5ZXA==",
+      "version": "1.11.0",
+      "resolved": "https://registry.npmjs.org/shell-quote/-/shell-quote-1.11.0.tgz",
+      "integrity": "sha512-JdxDPD0DBTyu08pq0kPC0xSNet/qsU07qT6IsX1AS8oO2ICNRY4ldNa8OAI6PuwAH8tG3lxEhbqmyp4Dw4036g==",
       "dev": true,
       "license": "MIT",
       "engines": {
@@ -4767,9 +4819,9 @@
       }
     },
     "node_modules/source-map-js": {
-      "version": "1.2.1",
-      "resolved": "https://registry.npmjs.org/source-map-js/-/source-map-js-1.2.1.tgz",
-      "integrity": "sha512-UXWMKhLOwVKb728IUtQPXxfYU+usdybtUrK/8uGE8CQMvrhOpwvzDBwj0QhSL7MQc7vIsISBG8VQ8+IDQxpfQA==",
+      "version": "1.2.2",
+      "resolved": "https://registry.npmjs.org/source-map-js/-/source-map-js-1.2.2.tgz",
+      "integrity": "sha512-KGj/8Y43x35aZVDtt+J4mK1hoLGHULMYfSkODJNQjNDC3oW1PqPoxMwo0pLUsWM/UEGzON/NxeHywEfNXNP3Vw==",
       "dev": true,
       "license": "BSD-3-Clause",
       "engines": {
@@ -5359,17 +5411,17 @@
       "license": "MIT"
     },
     "node_modules/vue": {
-      "version": "3.5.40",
-      "resolved": "https://registry.npmjs.org/vue/-/vue-3.5.40.tgz",
-      "integrity": "sha512-+8PJ4SJXdn/cHGImF4CKdxlWHIN5Dkt7DoufRREM6h6uVCx2m7QxgcEQmmzyOK8A9mcafg7sFbJFYsdFVubTig==",
+      "version": "3.5.42",
+      "resolved": "https://registry.npmjs.org/vue/-/vue-3.5.42.tgz",
+      "integrity": "sha512-4RyHQTbQvOPs3MfvUO1Sg0YRrKNnA0mAVtvpd12Tg1fKDN7OHBUl1IqSn8zGJjK9nI3NkNp8cgTpVrSZC5TTcA==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@vue/compiler-dom": "3.5.40",
-        "@vue/compiler-sfc": "3.5.40",
-        "@vue/runtime-dom": "3.5.40",
-        "@vue/server-renderer": "3.5.40",
-        "@vue/shared": "3.5.40"
+        "@vue/compiler-dom": "3.5.42",
+        "@vue/compiler-sfc": "3.5.42",
+        "@vue/runtime-dom": "3.5.42",
+        "@vue/server-renderer": "3.5.42",
+        "@vue/shared": "3.5.42"
       },
       "peerDependencies": {
         "typescript": "*"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fuli-context",
-  "version": "0.8.2",
+  "version": "0.9.0-beta.1",
   "description": "Local-first collaboration relationship graph for AI agents.",
   "type": "module",
   "files": [
@@ -14,6 +14,9 @@
     "docs/agent-conversations-and-collaboration.md",
     "docs/employee-agents.md",
     "docs/agent-interface-architecture.md",
+    "docs/roundtable-beta-testing.md",
+    "docs/roundtable-beta-validation.md",
+    "docs/roundtable-research.md",
     "examples/external-knowledge/markdown-folder.mjs",
     "graph-provider/Dockerfile",
     "graph-provider/pyproject.toml",
@@ -65,7 +68,7 @@
     "type": "git",
     "url": "git+https://github.com/JevonsCode/fuli.git"
   },
-  "homepage": "https://github.com/JevonsCode/fuli#readme",
+  "homepage": "https://jevonscode.github.io/fuli/",
   "bugs": {
     "url": "https://github.com/JevonsCode/fuli/issues"
   },
@@ -74,8 +77,9 @@
   },
   "license": "Apache-2.0",
   "dependencies": {
+    "@a2a-js/sdk": "1.3.0",
     "@hono/node-server": "2.0.12",
-    "@modelcontextprotocol/sdk": "^1.29.0",
+    "@modelcontextprotocol/sdk": "^1.31.0",
     "zod": "^4.4.3"
   },
   "devDependencies": {
@@ -92,7 +96,7 @@
     "typescript": "~6.0.0",
     "vite": "^8.1.5",
     "vitest": "^4.1.10",
-    "vue": "^3.5.40",
+    "vue": "^3.5.42",
     "vue-i18n": "^11.4.8",
     "vue-router": "^5.2.0",
     "vue-tsc": "^3.3.8"

package/skills/capturing-session-knowledge/SKILL.md

@@ -52,6 +52,10 @@ current working directory. It resolves the exact active project without requirin
 copy an ID, searches that child project first, and then includes only inheritable knowledge from
 authorized parents or shared-source projects. Use `search_knowledge_graph` for personal-global
 context, explicitly named extra projects, subscribed public projects, or advanced scoped queries.
+An already resolved temporary project is an active private scope for this task. Pass its exact
+returned `personalProjectId` alongside the directory; without a directory, use
+`search_knowledge_graph` with that exact project and personal space. Do not re-resolve it from
+a repository name, and never omit its `personalProjectId` or move its facts to personal-global.
 Use `search_connected_knowledge` for a project-bound third-party source or explicitly selected
 public project. Keep its source sets separate and obey the project's conflict policy;
 `agent_decide` affects only the current response and never mutates or confirms a source.
@@ -104,7 +108,7 @@ URL, route, deployment, document, file, or where a durable artifact is located.
 Personal retrieval always includes the bounded personal-global profile. For a local personal
 project, pass its exact `personalProjectId`; if the user explicitly names another personal
 project, resolve it with `list_personal_projects` and add only that exact ID through
-`contextPersonalProjectIds`. Without an active local project, search only the personal-global
+`contextPersonalProjectIds`. Without an active local or resolved temporary project, search only the personal-global
 profile. For public context, pass only the active or explicitly named subscribed public project
 IDs; never search every personal project, every subscription, or the whole graph by default.
 Use the current repository, the user's wording, and `list_knowledge_spaces` to resolve scope.
@@ -228,11 +232,15 @@ responsible for decisions, integration, and final verification. Do not split a s
 coupled task merely to create more workers.
 
 For an eligible task, call `coordinate_project_agent_task` once with the exact current
-`projectPath`, one stable idempotency key, an explicit complexity hint when known, and focused
+`projectPath` when available, one stable idempotency key, an explicit complexity hint when known, and focused
 context queries. Enable its parallel plan only when there are at least two conflict-free
 workstreams with independent verification; state each workstream boundary. The Provider chooses
 the lead and collaborators from active project assignments, preferring Agents with relevant
 project history. Explicit user-selected Agents and locked policies remain higher priority.
+When no registered project matches, coordination may return an isolated temporary project;
+keep its exact returned ID for this task. Ambiguous candidates still require a choice. Temporary
+scope creation is not Agent recruitment approval or proof of execution; follow the returned
+recruitment/authorization state and worker plan.
 
 Treat the returned durable Agent identity and a host worker as different things. A durable Agent
 keeps its project assignment, preferences, task history, and Agent-scoped graph memory while idle;
@@ -271,11 +279,13 @@ before the remaining workers have reported their tools, session evidence, and ex
 
 When a FULI task or task view returns a non-empty Provider `executionSummary`, append a compact
 Markdown table with one row per actual worker. Include the worker label and occupation emoji,
-actual executor/tool plus `sourceApplication`, work summary, terminal `workerStatus`/status,
-session (`sourceSessionId`, or a session link only when the Provider supplies one), and Token usage.
+actual executor/tool and `workerRuntime.application`, work summary, terminal `workerStatus`/status,
+worker session (`workerRuntime.sessionId`, or a worker session link only when supplied), and Token usage.
+Label `sourceApplication` and `sourceSessionId` separately as the reporting host. They do not
+identify an external worker; do not substitute them for missing worker evidence.
 Use only the source-labelled cumulative `tokenUsage` reported for that worker. If it is absent,
 show `not reported`; never estimate it or copy a conversation-wide total into a worker row. If no
-session link exists, show `sourceSessionId` or `not reported`; never invent a link. This applies only
+worker session link exists, show `workerRuntime.sessionId` or `not reported`; never invent a link. This applies only
 to Provider-reported actual workers. When empty `executionSummary` is returned, omit rows; an absent
 `executionSummary` also omits rows. Configured, allowed, or available clients/executors are not evidence
 of actual use. Keep this Agent-agnostic; client-specific details and work-kind routing remain at
@@ -380,6 +390,11 @@ their child projects.
 
 ## Resolve Or Create The Local Project
 
+Do not run this registration flow for an already resolved temporary project. Keep its isolated
+scope and retained audit history; creating or migrating to a registered project requires a
+separate explicit request. Disposable output uses `retain_nothing` with a truthful work log;
+any reusable project candidates remain in the returned temporary scope, subject to capture policy.
+
 Before the first project-scoped capture in a repository:
 
 1. Call `list_knowledge_spaces`, then `list_personal_projects` for the active personal space.

package/skills/operating-fuli/SKILL.md

@@ -39,6 +39,10 @@ For read-only questions, use the narrowest list/get/search tool and return sourc
 
 When the user addresses HR or Bole to ask about organization or find someone, resolve the existing dedicated HR identity and read `list_project_agents` plus `get_project_agent_coordination_policy` for the exact personal space and relevant project. Use recorded roles, assignments and team membership; do not invent an organization or recruit a replacement HR. Match names, responsibilities and capabilities, but never guess between ambiguous or duplicate names. Link each resolved name to its personal page at `/agents/{encodedPersonalSpaceId}/{encodedAgentId}`. Answering in the HR role does not mean a worker has started; report actual execution separately.
 
+## Before starting collaborators
+
+Read each returned worker's `context.agent.profile.allowedClients` and `executorPolicy`, together with the task's effective executor policy. Intersect the restrictions before starting either a native or external worker; the lead's selected executor does not authorize every collaborator. A locked allow-list applies even when the current host has an idle worker. If the intended platform is outside any effective lock, select an eligible Agent/executor or report the constraint before launch. Never relax the lock, relabel the worker, or invent model evidence to satisfy reporting. FULI context recovery and a ready worker plan are not execution authorization by themselves.
+
 ## Handling conflicts and failures
 
 - On revision or timestamp conflict, re-read, explain what changed, and recompute the intended patch. Do not blindly retry stale input.
@@ -49,3 +53,7 @@ When the user addresses HR or Bole to ask about organization or find someone, re
 ## Completion response
 
 State what changed, the exact project or item scope, the verification result, and any remaining human-only action. Do not claim success from a configured capability or submitted request alone.
+
+Include the task's named durable owner and profile link from `agent_receipt` or the successful checkpoint's `conversation.receipt`. Include Jefa or other peers only with an actual `collaboration_receipt`, naming the tool work they performed; board tools do not imply a separate model worker ran. Keep this receipt brief and distinguish work completion, memory checkpoint and visible-transcript coverage. Do not report saved memory when capture failed or is disabled.
+
+For cross-client continuation, copy the supplied continuation prompt into the same project's connected client. A leading `@Name` matches exact directory names; `@{agentId}` is the stable form (the generated prompt percent-encodes unusual IDs). Duplicate names require an exact ID in the current request; an ambiguous explicit mention must not fall back to the prior session owner or memory. This is FULI task-entry matching, not registration in a client's native @ menu. Obtain a fresh task token before `resume_agent_conversation`; never copy an old token between clients. If no qualified owner exists, route staffing through HR before implementation; Jefa remains a management peer. Preserve confirmed taste/personality/preferences and Agent character/expectations in delegated context.

package/src/agent-tools/graph-definitions.js

@@ -761,7 +761,7 @@ export const GRAPH_TOOL_DEFINITIONS = [
   {
     name: 'coordinate_project_agent_task',
     title: 'WRITE · Prepare a host-executed Agent team',
-    description: 'Resolve the exact local project, let the Provider coordinator route one durable task, and assemble an isolated context bundle for every selected lead/collaborator. Pass the current taskContextToken so a newly recruited lead can claim an initially unassigned task, including its blocked work. When recruiting, HR should set recruitmentProfile.character from the role responsibilities and preserve user expectations; configured traits must never be presented as proven growth. The result is a truthful host execution plan: Fuli persists identity, staffing, and memory scope, while the calling host must start real workers, report their concrete worker/executor evidence, and finish their lifecycle. This tool never claims that a selected Agent is online or that a worker was started.',
+    description: 'Resolve the exact local project, or create an isolated temporary task scope when no project matches, then let the Provider coordinator route one durable task and assemble an isolated context bundle for every selected lead/collaborator. Ambiguous matches require exact selection. Pass the current taskContextToken so temporary scope and a newly recruited lead bind to the owned lifecycle; otherwise provide a stable sourceSessionId and idempotencyKey for retries. Temporary projects retain audit history, never become implicit directory bindings, and default to audited task-only recruitment under the existing HR policy; explicit durable recruitment requests remain explicit. When recruiting, HR should set recruitmentProfile.character from the role responsibilities and preserve user expectations; configured traits must never be presented as proven growth. Fuli persists identity, staffing, and memory scope; the host must start real workers, report their concrete evidence, and finish their lifecycle. A routing recommendation never proves that a worker started.',
     inputSchema: projectAgentTaskCoordinateInput
   },
   {