latticesql 2.0.0 → 2.1.1

package/dist/cli.js

@@ -230,7 +230,9 @@ function writeIdentity(identity) {
 var PREFERENCES_FILENAME = "preferences.json";
 var DEFAULT_PREFERENCES = {
   show_system_tables: false,
-  analytics: true
+  analytics: true,
+  voice_provider: "auto",
+  aggressiveness: 0.5
 };
 function readPreferences() {
   const dir = ensureConfigDir();
@@ -238,9 +240,12 @@ function readPreferences() {
   if (!existsSync2(path2)) return { ...DEFAULT_PREFERENCES };
   try {
     const parsed = JSON.parse(readFileSync(path2, "utf8"));
+    const agg = typeof parsed.aggressiveness === "number" ? parsed.aggressiveness : NaN;
     return {
       show_system_tables: typeof parsed.show_system_tables === "boolean" ? parsed.show_system_tables : DEFAULT_PREFERENCES.show_system_tables,
-      analytics: typeof parsed.analytics === "boolean" ? parsed.analytics : DEFAULT_PREFERENCES.analytics
+      analytics: typeof parsed.analytics === "boolean" ? parsed.analytics : DEFAULT_PREFERENCES.analytics,
+      voice_provider: parsed.voice_provider === "openai" || parsed.voice_provider === "elevenlabs" || parsed.voice_provider === "auto" ? parsed.voice_provider : DEFAULT_PREFERENCES.voice_provider,
+      aggressiveness: Number.isFinite(agg) ? Math.min(1, Math.max(0, agg)) : DEFAULT_PREFERENCES.aggressiveness
     };
   } catch {
     return { ...DEFAULT_PREFERENCES };
@@ -250,7 +255,12 @@ function writePreferences(prefs) {
   const dir = ensureConfigDir();
   const path2 = join2(dir, PREFERENCES_FILENAME);
   const body = JSON.stringify(
-    { show_system_tables: prefs.show_system_tables, analytics: prefs.analytics },
+    {
+      show_system_tables: prefs.show_system_tables,
+      analytics: prefs.analytics,
+      voice_provider: prefs.voice_provider,
+      aggressiveness: prefs.aggressiveness
+    },
     null,
     2
   );
@@ -407,12 +417,6 @@ function assertSafeLabel(label) {
     throw new Error(`Invalid label "${label}": must match [A-Za-z0-9._-]+ and not start with .`);
   }
 }
-function readToken(label) {
-  assertSafeLabel(label);
-  const path2 = join2(ensureKeysDir(), label + TOKEN_EXT);
-  if (!existsSync2(path2)) return null;
-  return readFileSync(path2, "utf8").trim();
-}
 function writeToken(label, token) {
   assertSafeLabel(label);
   const path2 = join2(ensureKeysDir(), label + TOKEN_EXT);
@@ -1598,6 +1602,19 @@ var SchemaManager = class {
   redefineEntityContext(table, def) {
     this._entityContexts.set(table, def);
   }
+  /**
+   * Remove a table from the registry — the inverse of {@link define}. Clears the
+   * table def, its primary-key, any multi-render, and its entity context. A no-op
+   * if the table was never defined. Used by the GUI's soft table-delete to drop a
+   * runtime-registered table without a full reopen; the physical SQL table is left
+   * intact by the caller so the delete stays revertible.
+   */
+  undefine(table) {
+    this._tables.delete(table);
+    this._tablePK.delete(table);
+    this._multis.delete(table);
+    this._entityContexts.delete(table);
+  }
   getTables() {
     return this._tables;
   }
@@ -4531,6 +4548,21 @@ var Lattice = class _Lattice {
     }
     return this;
   }
+  /**
+   * Remove a runtime-registered table from the live schema registry — the
+   * inverse of {@link defineLate}. The table stops being listed/queryable
+   * WITHOUT a full reopen (which would dispose this instance and invalidate any
+   * captured `db`/feed references mid-operation — see the GUI's soft table
+   * delete). Does NOT drop the physical SQL table or its rows; the caller keeps
+   * them so the delete remains revertible. A no-op if the table isn't
+   * registered.
+   */
+  unregisterTable(table) {
+    this._schema.undefine(table);
+    this._columnCache.delete(table);
+    this._changelogTables.delete(table);
+    return this;
+  }
   _registerTable(table, def) {
     const columns = def.rewardTracking ? { ...def.columns, _reward_total: "REAL DEFAULT 0", _reward_count: "INTEGER DEFAULT 0" } : def.columns;
     const renderTemplateName = _resolveTemplateName(def.render);
@@ -6107,6 +6139,205 @@ async function tryHandler(res, fn) {
 // src/gui/data.ts
 import { existsSync as existsSync14, readFileSync as readFileSync10, statSync as statSync4 } from "fs";
 import { basename as basename3, join as join13, relative, resolve as resolve5, sep as sep2 } from "path";
+
+// src/framework/native-entities.ts
+var NATIVE_ENTITY_DEFS = {
+  secrets: {
+    columns: {
+      id: "TEXT PRIMARY KEY",
+      // NOT NULL needs a DEFAULT so ALTER TABLE ADD COLUMN succeeds when this
+      // native shape is merged onto a pre-existing table (the adopt + team
+      // shared-schema sync paths use ADD COLUMN; SQLite + Postgres both reject
+      // a NOT NULL add without a default). Every insert sets `name` explicitly,
+      // so the default is never observed in practice.
+      name: "TEXT NOT NULL DEFAULT ''",
+      kind: "TEXT",
+      value: "TEXT",
+      description: "TEXT",
+      created_at: "TEXT NOT NULL DEFAULT (datetime('now'))",
+      updated_at: "TEXT NOT NULL DEFAULT (datetime('now'))",
+      deleted_at: "TEXT"
+    },
+    encrypted: { columns: ["value"] },
+    render: () => "",
+    outputFile: ".lattice-native/secrets.md"
+  },
+  files: {
+    columns: {
+      id: "TEXT PRIMARY KEY",
+      // Legacy columns (DEPRECATED v2.0 — retained for back-compat, NOT dropped).
+      //   path — superseded by the reference model below (`ref_kind`/`ref_uri`).
+      //          New local-file ingestion records a `local_ref` via
+      //          `referenceLocalFile()` rather than writing `path`; readers fall
+      //          back to `ref_uri`. Do not write `path` in new code.
+      //   kind — orphaned: superseded by `mime` (content type) and `ref_kind`
+      //          (the blob/local_ref/cloud_ref discriminator). Not read or
+      //          written by production code; kept only so existing rows retain
+      //          their value.
+      path: "TEXT",
+      kind: "TEXT",
+      // Content-addressed storage. `sha256` is the canonical content
+      // identifier; `blob_path` is the relative path under
+      // `<lattice-root>/data/blobs/` written by attachBlob().
+      original_name: "TEXT",
+      mime: "TEXT",
+      size_bytes: "INTEGER",
+      sha256: "TEXT",
+      blob_path: "TEXT",
+      // Reference mode (v2.0): a row can INDEX data that lives elsewhere
+      // instead of owning a copy. All nullable + additive (back-compat).
+      //   ref_kind     discriminator: 'blob' | 'local_ref' | 'cloud_ref'
+      //                (NULL ⇒ legacy/owned blob)
+      //   ref_uri      durable pointer: absolute local path or remote URL
+      //   ref_provider resolver selector: 'fs' | 'web' | 'gdrive'
+      //   source_json  provider-specific metadata (etag, availability, …)
+      ref_kind: "TEXT",
+      ref_uri: "TEXT",
+      ref_provider: "TEXT",
+      source_json: "TEXT",
+      extraction_status: "TEXT",
+      extracted_text: "TEXT",
+      description: "TEXT",
+      created_at: "TEXT NOT NULL DEFAULT (datetime('now'))",
+      updated_at: "TEXT NOT NULL DEFAULT (datetime('now'))",
+      deleted_at: "TEXT"
+    },
+    render: () => "",
+    outputFile: ".lattice-native/files.md"
+  },
+  notes: {
+    // A generic knowledge object: a free-form note with a title and body.
+    // Ordinary, user-editable rows; `source_file_id` optionally points back at
+    // an originating `files` row. Retained as native (1.16.3) because the
+    // reference/source-organizer store uses it as the fallback organizer target.
+    columns: {
+      id: "TEXT PRIMARY KEY",
+      title: "TEXT",
+      body: "TEXT",
+      source_file_id: "TEXT",
+      created_at: "TEXT NOT NULL DEFAULT (datetime('now'))",
+      updated_at: "TEXT NOT NULL DEFAULT (datetime('now'))",
+      deleted_at: "TEXT"
+    },
+    render: () => "",
+    outputFile: ".lattice-native/notes.md"
+  },
+  chat_threads: {
+    // An assistant conversation. Native so chat history survives across
+    // sessions and is queryable/renderable like any other Lattice entity.
+    columns: {
+      id: "TEXT PRIMARY KEY",
+      title: "TEXT",
+      created_at: "TEXT NOT NULL DEFAULT (datetime('now'))",
+      updated_at: "TEXT NOT NULL DEFAULT (datetime('now'))",
+      deleted_at: "TEXT"
+    },
+    render: () => "",
+    outputFile: ".lattice-native/chat-threads.md"
+  },
+  chat_messages: {
+    // One turn (or feed entry) within a chat_thread.
+    columns: {
+      id: "TEXT PRIMARY KEY",
+      // Soft reference to chat_threads.id. Kept as a plain column (no FK)
+      // to match the generic, dialect-agnostic native-entity style.
+      thread_id: "TEXT",
+      // user | assistant | tool | feed | system
+      role: "TEXT NOT NULL DEFAULT 'user'",
+      // JSON payload: text, tool_use / tool_result blocks, attachments, or
+      // (for role='feed') the feed-event details.
+      content_json: "TEXT",
+      // ai | gui | cli | ingest — meaningful for role='feed'.
+      source: "TEXT",
+      created_at: "TEXT NOT NULL DEFAULT (datetime('now'))",
+      deleted_at: "TEXT"
+    },
+    render: () => "",
+    outputFile: ".lattice-native/chat-messages.md"
+  }
+};
+var NATIVE_ENTITY_NAMES = new Set(Object.keys(NATIVE_ENTITY_DEFS));
+function isNativeEntity(name) {
+  return NATIVE_ENTITY_NAMES.has(name);
+}
+var NATIVE_INTERNAL_NAMES = /* @__PURE__ */ new Set([
+  "chat_threads",
+  "chat_messages"
+]);
+function isInternalNativeEntity(name) {
+  return NATIVE_INTERNAL_NAMES.has(name);
+}
+function registerNativeEntities(db) {
+  const existing = new Set(db.getRegisteredTableNames());
+  for (const [name, def] of Object.entries(NATIVE_ENTITY_DEFS)) {
+    if (existing.has(name)) continue;
+    db.define(name, def);
+  }
+}
+var NATIVE_REGISTRY_TABLE = "__lattice_native_entities";
+var NATIVE_REGISTRY_DEF = {
+  columns: {
+    entity: "TEXT PRIMARY KEY",
+    table_name: "TEXT NOT NULL",
+    adopted_at: "TEXT NOT NULL",
+    origin: "TEXT NOT NULL"
+  },
+  primaryKey: "entity",
+  render: () => "",
+  outputFile: ".lattice-native/native-entities.md"
+};
+async function adoptNativeEntities(db, options = {}) {
+  const onConflict = options.onConflict ?? "adopt";
+  await db.defineLate(NATIVE_REGISTRY_TABLE, NATIVE_REGISTRY_DEF);
+  const results = [];
+  for (const [name, def] of Object.entries(NATIVE_ENTITY_DEFS)) {
+    const physicalCols = await db.introspectColumns(name);
+    const exists = physicalCols.length > 0;
+    const registered = new Set(db.getRegisteredTableNames());
+    if (!exists) {
+      if (!registered.has(name)) await db.defineLate(name, def);
+      results.push({ entity: name, tableName: name, origin: "created" });
+      await recordNativeBinding(db, name, "created");
+      continue;
+    }
+    if (onConflict === "error") {
+      throw new Error(
+        `adoptNativeEntities: physical table "${name}" already exists; refusing to adopt with onConflict:'error'`
+      );
+    }
+    const nativeCols = new Set(Object.keys(def.columns));
+    const hadForeignShape = physicalCols.some((c) => !nativeCols.has(c));
+    const rowCount = await db.count(name);
+    let origin = hadForeignShape || rowCount > 0 ? "adopted" : "created";
+    if (onConflict === "skip") {
+      origin = "skipped";
+    } else if (!registered.has(name)) {
+      await db.defineLate(name, def);
+    }
+    results.push({ entity: name, tableName: name, origin });
+    await recordNativeBinding(db, name, origin);
+  }
+  return results;
+}
+async function listNativeBindings(db) {
+  if (!db.getRegisteredTableNames().includes(NATIVE_REGISTRY_TABLE)) return [];
+  const rows = await db.query(NATIVE_REGISTRY_TABLE);
+  return rows.map((r) => ({
+    entity: String(r.entity),
+    tableName: String(r.table_name),
+    origin: r.origin
+  }));
+}
+async function recordNativeBinding(db, entity, origin) {
+  await db.upsert(NATIVE_REGISTRY_TABLE, {
+    entity,
+    table_name: entity,
+    adopted_at: (/* @__PURE__ */ new Date()).toISOString(),
+    origin
+  });
+}
+
+// src/gui/data.ts
 function tableToSummary(name, definition) {
   return {
     name,
@@ -6264,6 +6495,7 @@ function buildGuiGraph(configPath, outputDir, options = {}) {
     const filter = options.visibleFilter;
     data.tables = data.tables.filter((t) => filter(t.name));
   }
+  data.tables = data.tables.filter((t) => !isInternalNativeEntity(t.name));
   const nodes = /* @__PURE__ */ new Map();
   const edges = /* @__PURE__ */ new Map();
   const fileOwners = /* @__PURE__ */ new Map();
@@ -6742,6 +6974,9 @@ var css = `
       padding: 0 12px; margin: 12px 0 6px;
     }
     .section-label:first-child { margin-top: 0; }
+    /* Extra breathing room above the "SYSTEM" heading so it isn't cramped
+       against the object list above it. */
+    #system-section .section-label { margin-top: 20px; }
     nav ul { list-style: none; padding: 0; margin: 0; }
     nav li a {
       display: flex; align-items: center; gap: 10px;
@@ -6845,6 +7080,8 @@ var css = `
     }
     a.chip-link { cursor: pointer; }
     a.chip-link:hover { background: var(--accent); color: white; }
+    /* Inline object-reference pills the assistant emits \u2014 render flush in prose. */
+    a.lattice-ref { text-decoration: none; vertical-align: baseline; }
     .empty-row td {
       color: var(--text-muted); font-style: italic; text-align: center;
       padding: 24px;
@@ -7571,20 +7808,9 @@ var css = `
       padding: 8px; margin: 0 0 8px; overflow-x: auto;
     }
     .chat-bubble.assistant pre code { background: none; border: none; padding: 0; white-space: pre; }
-    .chat-tools { display: flex; flex-wrap: wrap; gap: 4px; margin-bottom: 4px; }
-    .tool-pill {
-      display: inline-flex; align-items: center; gap: 5px;
-      border-radius: 999px; padding: 2px 9px; font-size: 11px; font-weight: 500;
-      background: var(--accent-soft); color: var(--accent);
-      box-shadow: var(--glow-accent-soft);
-    }
-    .tool-pill.done { background: var(--surface-2); color: var(--text-muted); box-shadow: none; }
-    .tool-pill.error { background: rgba(251,146,60,0.14); color: var(--warn); box-shadow: none; }
-    .tool-pill .spin { display: inline-block; width: 9px; height: 9px;
-      border: 1.5px solid currentColor; border-top-color: transparent; border-radius: 50%;
-      animation: pillspin 0.7s linear infinite; }
-    @keyframes pillspin { to { transform: rotate(360deg); } }
-    /* Typing indicator: three pulsing dots shown in an assistant bubble while
+    /* The assistant's data changes render as activity-feed cards (.feed-item) in
+       the rail \u2014 there is no separate inline pill style. Reads emit no card.
+       Typing indicator: three pulsing dots shown in an assistant bubble while
        the model is generating (before the first text delta of a turn). */
     .chat-typing { display: inline-flex; align-items: center; gap: 4px; padding: 1px 0; }
     .chat-typing i {
@@ -7612,6 +7838,9 @@ var css = `
       overflow-wrap: break-word; word-break: break-word;
     }
     .rail-composer textarea:focus { outline: none; border-color: var(--accent); box-shadow: var(--glow-focus); }
+    /* While a voice note is being recorded/transcribed the textarea is read-only
+       (shows a "Listening\u2026" / "Transcribing\u2026" placeholder, not editable). */
+    .rail-composer textarea.recording { opacity: 0.6; cursor: not-allowed; }
     .rail-composer .composer-row { display: flex; gap: 8px; align-items: flex-end; }
     .rail-composer .composer-send {
       flex: 0 0 auto; height: 38px; padding: 0 14px; border: none; border-radius: 8px;
@@ -7719,6 +7948,13 @@ var appJs = `
       return !!(t && t[colName] && t[colName].secret);
     }
     var SECRET_MASK = '\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022'; // \u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022
+    // An encrypted-at-rest value (native secrets etc.) is stored with an "enc:"
+    // sentinel prefix (see framework/native-entities decrypt). It is never
+    // plaintext, so the GUI must never render the raw ciphertext \u2014 mask it the
+    // same way an operator-flagged secret column is masked.
+    function looksEncrypted(v) {
+      return typeof v === 'string' && v.slice(0, 4) === 'enc:';
+    }
 
     function displayFor(name) {
       var override = state.iconOverrides[name];
@@ -8295,11 +8531,21 @@ var appJs = `
       } catch (_) { return ''; }
     }
 
+    // Elapsed duration since a start timestamp (ms), for in-progress work like a
+    // running upload \u2014 no "ago" suffix. Mirrors relTime's unit thresholds.
+    function formatElapsed(ms) {
+      var s = Math.max(0, Math.floor(ms / 1000));
+      if (s < 60) return s + 's';
+      if (s < 3600) return Math.floor(s / 60) + 'm ' + (s % 60) + 's';
+      return Math.floor(s / 3600) + 'h ' + Math.floor((s % 3600) / 60) + 'm';
+    }
+
     // \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
-    // Full-text search \u2014 GET /api/search, grouped dropdown, click to open.
+    // Search \u2014 the top box hands the query to the AI ASSISTANT (which answers
+    // conversationally using its search/read tools), not a plain full-text
+    // match. hideSearchResults/openSearchHit are retained because the activity
+    // feed still uses openSearchHit to jump to a row.
     // \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
-    var searchTimer = null;
-    var searchSeq = 0;
     function hideSearchResults() {
       var box = document.getElementById('search-results');
       if (box) { box.hidden = true; box.innerHTML = ''; }
@@ -8313,66 +8559,30 @@ var appJs = `
       var prefix = advancedMode() ? '#/objects/' : '#/fs/';
       location.hash = prefix + encodeURIComponent(table) + '/' + encodeURIComponent(id);
     }
-    function renderSearchResults(result) {
-      var box = document.getElementById('search-results');
-      if (!box) return;
-      var groups = (result && result.groups) || [];
-      if (!groups.length) {
-        box.innerHTML = '<div class="search-empty">No matches</div>';
-        box.hidden = false;
-        return;
-      }
-      var html = '';
-      groups.forEach(function (g) {
-        var disp = displayFor(g.table);
-        html += '<div class="search-group">' +
-          '<div class="search-group-head"><span class="search-group-icon">' + disp.icon +
-          '</span>' + escapeHtml(disp.label) +
-          (g.more ? ' <span class="search-more">' + g.count + '+</span>' : '') + '</div>';
-        g.hits.forEach(function (h) {
-          html += '<button type="button" class="search-hit" data-table="' + escapeHtml(g.table) +
-            '" data-id="' + escapeHtml(h.id) + '">' +
-            '<span class="search-snippet">' + escapeHtml(h.snippet || h.id) + '</span></button>';
-        });
-        html += '</div>';
-      });
-      box.innerHTML = html;
-      box.hidden = false;
-      box.querySelectorAll('.search-hit').forEach(function (btn) {
-        btn.addEventListener('click', function () {
-          openSearchHit(btn.getAttribute('data-table'), btn.getAttribute('data-id'));
-        });
-      });
-    }
-    function runSearch(q) {
-      var seq = ++searchSeq;
-      fetchJson('/api/search?q=' + encodeURIComponent(q) + '&limit=6').then(function (result) {
-        if (seq !== searchSeq) return; // a newer query superseded this one
-        renderSearchResults(result);
-      }).catch(function () { /* transient \u2014 ignore */ });
+    // Route the typed query into the assistant rail as a chat turn. Opens the
+    // rail (a no-op on desktop; opens the mobile drawer) and submits via the
+    // same path as the composer, so the assistant searches + answers.
+    function askAssistant(q) {
+      hideSearchResults();
+      var input = document.getElementById('search-input');
+      if (input) input.value = '';
+      var rail = document.getElementById('assistant-rail');
+      if (rail) rail.classList.add('expanded');
+      var chatInput = document.getElementById('chat-input');
+      if (chatInput) chatInput.focus();
+      sendChat(q);
     }
     function initSearch() {
       var input = document.getElementById('search-input');
-      var box = document.getElementById('search-results');
-      if (!input || !box) return;
-      input.addEventListener('input', function () {
-        var q = input.value.trim();
-        if (searchTimer) clearTimeout(searchTimer);
-        if (q.length < 2) { hideSearchResults(); return; }
-        searchTimer = setTimeout(function () { runSearch(q); }, 180);
-      });
+      if (!input) return;
       input.addEventListener('keydown', function (e) {
-        if (e.key === 'Escape') { hideSearchResults(); input.blur(); }
+        if (e.key === 'Escape') { input.value = ''; input.blur(); }
         else if (e.key === 'Enter') {
-          var first = box.querySelector('.search-hit');
-          if (first) { e.preventDefault(); first.click(); }
+          e.preventDefault();
+          var q = input.value.trim();
+          if (q) askAssistant(q);
         }
       });
-      // Dismiss when a click lands outside the search box.
-      document.addEventListener('click', function (e) {
-        var host = document.getElementById('topsearch');
-        if (host && !host.contains(e.target)) hideSearchResults();
-      });
     }
 
     /** Reload column meta after a secret-flag change. */
@@ -8576,9 +8786,16 @@ var appJs = `
                 headers: { 'content-type': 'application/json' },
                 body: JSON.stringify({ id: id }),
               }).then(function () {
-                menu.hidden = true;
+                // Keep the menu OPEN with the item's spinner through the reload \u2014
+                // for a CLOUD workspace the slow part (connecting + fetching
+                // against the remote DB) happens here in reloadEverything, AFTER
+                // the switch POST. Hiding the menu now (the old behavior) hid the
+                // only progress signal, so a cloud switch looked unresponsive.
+                // renderWsSwitcher (inside reloadEverything) only re-binds the
+                // toggle + updates the label, so the spinning item survives.
                 return reloadEverything();
               }).then(function () {
+                menu.hidden = true;
                 // Conversations + activity both live in the workspace DB. Drop
                 // the old workspace's thread + activity cards, reconnect the feed
                 // to THIS workspace, and reload its thread list (+ latest convo).
@@ -8587,7 +8804,7 @@ var appJs = `
                 startFeed();
                 refreshThreadList(true);
                 showToast('Switched workspace', {});
-              }).catch(function (err) { showToast('Switch failed: ' + err.message, {}); });
+              }).catch(function (err) { menu.hidden = true; showToast('Switch failed: ' + err.message, {}); });
             });
           });
         });
@@ -8953,6 +9170,14 @@ var appJs = `
       clearUnseen(tableName);
       var t = tableByName(tableName);
       if (!t) {
+        // Conversation-storage tables (chat_messages/chat_threads) and other
+        // Lattice internals aren't in the Objects list, but are browsable
+        // read-only under "System". If something routed here for one of them,
+        // fall back to the system-table view instead of "Unknown entity".
+        if ((state.systemTables || []).some(function (s) { return s.name === tableName; })) {
+          renderSystemTable(content, tableName);
+          return;
+        }
         content.innerHTML = '<div class="placeholder">Unknown entity: ' + escapeHtml(tableName) + '</div>';
         return;
       }
@@ -8984,7 +9209,7 @@ var appJs = `
         } else {
           bodyRows = rows.map(function (r) {
             var tds = intrinsic.map(function (c) {
-              if (isSecretColumn(tableName, c) && r[c] != null && r[c] !== '') {
+              if ((isSecretColumn(tableName, c) || looksEncrypted(r[c])) && r[c] != null && r[c] !== '') {
                 return '<td class="muted">' + SECRET_MASK + '</td>';
               }
               return '<td><div class="cell-clip">' + escapeHtml(truncate(r[c], 120)) + '</div></td>';
@@ -9269,7 +9494,7 @@ var appJs = `
         function paint(editing) {
           var rows = [];
           intrinsic.forEach(function (c) {
-            var secret = isSecretColumn(tableName, c);
+            var secret = isSecretColumn(tableName, c) || looksEncrypted(row[c]);
             var dd;
             if (editing) {
               dd = fieldFor(c, row[c], t);
@@ -9637,7 +9862,7 @@ var appJs = `
     function fsValInner(table, row, col) {
       var raw = row[col];
       if (raw == null || raw === '') return '<span class="fs-empty-val">\u2014</span>';
-      if (isSecretColumn(table, col)) return '<span class="muted">' + SECRET_MASK + '</span>';
+      if (isSecretColumn(table, col) || looksEncrypted(raw)) return '<span class="muted">' + SECRET_MASK + '</span>';
       var s = String(raw);
       if (FS_LONGFORM.indexOf(col) >= 0 || s.indexOf('\\n') >= 0) {
         return '<div class="md-body">' + mdToHtml(s.slice(0, 40000)) + '</div>';
@@ -11639,20 +11864,29 @@ var appJs = `
             '</div>' +
           '</div>';
         }
+        // Only the selected provider's key input is shown (declutter). 'auto'
+        // ("Select provider\u2026") shows no key row until a provider is chosen.
+        function voiceRowHtml(provider) {
+          if (provider === 'openai') {
+            return rowHtml('asst-openai', 'OpenAI Whisper key', !!cfg.hasOpenaiKey, 'sk-\u2026');
+          }
+          if (provider === 'elevenlabs') {
+            return rowHtml('asst-elevenlabs', 'ElevenLabs key', !!cfg.hasElevenlabsKey, 'xi-\u2026');
+          }
+          return '';
+        }
         host.innerHTML =
           '<div class="dbconfig-panel" style="margin-bottom:18px;padding:14px;border:1px solid var(--border);border-radius:8px;background:var(--surface)">' +
             '<h3 style="margin:0 0 10px">Assistant</h3>' +
             '<p class="lead" style="margin:0 0 12px;font-size:12px;color:var(--text-muted)">' +
-              'Keys are stored encrypted in the <code>secrets</code> table \u2014 never shown again once ' +
-              'saved. Environment variables (<code>ANTHROPIC_API_KEY</code>, <code>OPENAI_API_KEY</code>, ' +
-              '<code>ELEVENLABS_API_KEY</code>) also work.' +
+              'Keys are stored encrypted in the <code>secrets</code> table.' +
             '</p>' +
             rowHtml('asst-anthropic', 'Claude API token (chat)', !!cfg.hasAnthropicKey, 'sk-ant-\u2026') +
-            '<div style="margin:0 0 12px;font-size:12px;color:var(--text-muted)">' +
-              (cfg.oauthEnabled
-                ? 'Or <a href="/api/assistant/oauth/start" style="color:var(--accent)">connect your Claude subscription</a>.'
-                : 'Subscription login: set the <code>ANTHROPIC_OAUTH_*</code> env vars to enable.') +
-            '</div>' +
+            (cfg.oauthEnabled
+              ? '<div style="margin:0 0 12px;font-size:12px;color:var(--text-muted)">' +
+                  'Or <a href="/api/assistant/oauth/start" style="color:var(--accent)">connect your Claude subscription</a>.' +
+                '</div>'
+              : '') +
             '<div style="margin:6px 0 12px">' +
               '<div style="display:flex;align-items:center;justify-content:space-between;margin-bottom:4px">' +
                 '<strong style="font-size:13px">Inference aggressiveness</strong>' +
@@ -11669,17 +11903,16 @@ var appJs = `
                 'auto-creates link tables) when you drop in files. Higher extrapolates more.' +
               '</p>' +
             '</div>' +
-            '<div style="font-size:11px;color:var(--text-muted);margin:10px 0 8px;text-transform:uppercase;letter-spacing:0.05em">Voice \u2014 speech to text (set either)</div>' +
-            rowHtml('asst-openai', 'OpenAI Whisper key', !!cfg.hasOpenaiKey, 'sk-\u2026') +
-            rowHtml('asst-elevenlabs', 'ElevenLabs key', !!cfg.hasElevenlabsKey, 'xi-\u2026') +
-            '<div style="margin:6px 0 2px;display:flex;align-items:center;gap:8px">' +
+            '<div style="font-size:11px;color:var(--text-muted);margin:10px 0 8px;text-transform:uppercase;letter-spacing:0.05em">Voice \u2014 speech to text</div>' +
+            '<div style="margin:6px 0 8px;display:flex;align-items:center;gap:8px">' +
               '<span style="font-size:12px;color:var(--text-muted)">Use for voice:</span>' +
               '<select id="asst-stt" style="background:var(--surface-2);color:var(--text);border:1px solid var(--border);border-radius:6px;font-size:12px;padding:3px 6px">' +
-                '<option value="auto">Auto</option>' +
-                '<option value="openai">OpenAI Whisper</option>' +
+                '<option value="auto">Select provider\u2026</option>' +
+                '<option value="openai">OpenAI</option>' +
                 '<option value="elevenlabs">ElevenLabs</option>' +
               '</select>' +
             '</div>' +
+            '<div id="asst-voice-key">' + voiceRowHtml(cfg.sttPreference || 'auto') + '</div>' +
             '<div id="assistant-msg" style="margin-top:4px;font-size:12px;color:var(--text-muted)"></div>' +
           '</div>';
         var msg = host.querySelector('#assistant-msg');
@@ -11709,12 +11942,18 @@ var appJs = `
           });
         }
         wire('asst-anthropic', 'anthropic');
-        wire('asst-openai', 'openai');
-        wire('asst-elevenlabs', 'elevenlabs');
         var sttSel = host.querySelector('#asst-stt');
+        var voiceKeyHost = host.querySelector('#asst-voice-key');
+        function wireVoiceKey(provider) {
+          if (provider === 'openai') wire('asst-openai', 'openai');
+          else if (provider === 'elevenlabs') wire('asst-elevenlabs', 'elevenlabs');
+        }
         if (sttSel) {
           sttSel.value = cfg.sttPreference || 'auto';
+          wireVoiceKey(sttSel.value);
           sttSel.addEventListener('change', function () {
+            if (voiceKeyHost) voiceKeyHost.innerHTML = voiceRowHtml(sttSel.value);
+            wireVoiceKey(sttSel.value);
             msg.textContent = 'Saving\u2026';
             fetch('/api/assistant/stt-provider', {
               method: 'PUT',
@@ -12105,9 +12344,10 @@ var appJs = `
 
     // State-machine Database panel (v1.13+). Renders a different body
     // per info.state: local -> Migrate / Connect-existing wizards;
-    // cloud-connected -> Upgrade-to-team; team-cloud-creator/member ->
-    // team management UI; team-cloud-needs-invite -> join form.
-    // Progression is one-way: local -> cloud -> team-cloud.
+    // team-cloud-creator/member -> connection details + members. A connected
+    // cloud workspace is always a member workspace (created or invited), so
+    // there is no in-settings "join via invite" \u2014 that lives in the Join
+    // Workspace flow only.
     function renderDatabasePanel(host) {
       fetchJson('/api/dbconfig').then(function (info) {
         var badge = renderStateBadge(info);
@@ -12143,10 +12383,6 @@ var appJs = `
           label = 'CLOUD \xB7 MEMBER';
           color = 'var(--accent)';
           break;
-        case 'team-cloud-needs-invite':
-          label = 'CLOUD \xB7 NEEDS INVITE';
-          color = 'var(--warn)';
-          break;
         default:
           label = String(info.state || 'UNKNOWN').toUpperCase();
       }
@@ -12182,21 +12418,6 @@ var appJs = `
           '<div id="db-members-host" style="margin-top:12px"><div style="font-size:12px;color:var(--text-muted)">Loading members\u2026</div></div>'
         );
       }
-      if (info.state === 'team-cloud-needs-invite') {
-        return (
-          renderConnectionSummary(info) +
-          '<p style="margin-top:10px;color:var(--warn);font-size:13px">' +
-            'Not a member of this cloud workspace yet \u2014 paste your invite token to join.' +
-          '</p>' +
-          '<div style="display:grid;grid-template-columns:1fr;gap:8px;margin-top:6px">' +
-            '<div><label class="field-label">Invite token</label>' +
-            '<textarea id="db-rejoin-token" placeholder="latinv_..." style="width:100%;height:54px;font-family:JetBrains Mono,monospace"></textarea></div>' +
-          '</div>' +
-          '<div class="team-actions" style="margin-top:10px">' +
-            '<button class="btn primary" data-act="rejoin-with-token">Join workspace \u2192</button>' +
-          '</div>'
-        );
-      }
       return '<p style="color:var(--text-muted)">Unknown database state.</p>';
     }
 
@@ -12268,32 +12489,6 @@ var appJs = `
         }).catch(function () { membersHost.innerHTML = '<div style="font-size:12px;color:var(--text-muted)">Members unavailable.</div>'; });
       }
 
-      var rejoinBtn = host.querySelector('[data-act="rejoin-with-token"]');
-      if (rejoinBtn) rejoinBtn.addEventListener('click', function () {
-        var token = (document.getElementById('db-rejoin-token').value || '').trim();
-        if (!token) { setMsg('Invite token required.', false); return; }
-        // Without form re-entry the credentials are already saved; we
-        // call the connect-existing endpoint with just the invite
-        // token. The handler reads credentials from db-credentials.enc
-        // via the active configPath's label.
-        setMsg('Joining workspace\u2026');
-        fetch('/api/dbconfig/connect-existing', {
-          method: 'POST', headers: { 'content-type': 'application/json' },
-          body: JSON.stringify({
-            type: 'postgres',
-            label: info.label,
-            host: info.host, port: info.port, dbname: info.dbname,
-            user: info.user, password: '', // password lives in db-credentials.enc; backend will pull
-            invite_token: token,
-          }),
-        })
-          .then(function (r) { return r.json(); })
-          .then(function (d) {
-            if (d.error) { setMsg('Failed: ' + d.error, false); return; }
-            setMsg('Joined.', true); rerender();
-          })
-          .catch(function (e) { setMsg('Failed: ' + e.message, false); });
-      });
     }
 
     // \u2500\u2500 v1.13 wizards \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
@@ -12669,51 +12864,103 @@ var appJs = `
       insert: '\u2795', update: '\u270F\uFE0F', delete: '\u{1F5D1}',
       link: '\u{1F517}', unlink: '\u26D3', undo: '\u21B6', redo: '\u21B7', schema: '\u{1F6E0}',
     };
-    // Ops whose consecutive runs collapse into one counted bubble (bulk row work
-    // spams N near-identical rows otherwise). Schema/undo/redo stay distinct.
+    // Schema mutations reach the client in two shapes: the LIVE feed publishes the
+    // coarse op:'schema', while the persisted audit log / per-thread replay carry
+    // the fine-grained op:'schema.delete_entity' (etc.). Treat both as schema so
+    // they collapse + pick the \u{1F6E0} icon identically (regression: backfilled schema
+    // ops showed '\u2022' and never grouped).
+    function isSchemaOp(op) { var o = String(op || ''); return o === 'schema' || o.indexOf('schema.') === 0; }
+    function feedIcon(op) { return isSchemaOp(op) ? FEED_ICONS.schema : (FEED_ICONS[op] || '\u2022'); }
+    // Ops whose runs collapse into one counted bubble (bulk row work spams N
+    // near-identical rows otherwise). Undo/redo stay distinct.
     var GROUPABLE_OPS = { insert: 1, update: 1, delete: 1, link: 1, unlink: 1 };
-    var lastFeedGroup = null; // { key, count, item, summaryEl, timeEl }
-    function groupedSummary(op, table, count) {
-      var t = String(table || '');
-      switch (op) {
-        case 'insert': return 'Added ' + count + ' rows to ' + t;
-        case 'update': return 'Updated ' + count + ' rows in ' + t;
-        case 'delete': return 'Removed ' + count + ' rows from ' + t;
-        case 'link': return 'Linked ' + count + ' rows in ' + t;
-        case 'unlink': return 'Unlinked ' + count + ' rows in ' + t;
-        default: return String(op || '') + ' ' + t;
-      }
-    }
-    function renderFeedItem(ev) {
-      var feedEl = document.getElementById('rail-feed');
-      if (!feedEl) return;
-      var empty = document.getElementById('rail-empty');
-      if (empty) empty.remove();
-      // Coalesce a run of identical events (same op + table + source) into the
-      // previous bubble with a count \u2014 but only while that bubble is still the
-      // last thing in the feed (a chat bubble or a different event breaks the run).
-      var groupKey = GROUPABLE_OPS[ev.op] && ev.table
-        ? String(ev.op) + '|' + String(ev.table) + '|' + String(ev.source || '')
-        : null;
-      if (groupKey && lastFeedGroup && lastFeedGroup.key === groupKey &&
-          feedEl.lastElementChild === lastFeedGroup.item) {
-        lastFeedGroup.count += 1;
-        lastFeedGroup.summaryEl.textContent = groupedSummary(ev.op, ev.table, lastFeedGroup.count);
-        lastFeedGroup.timeEl.textContent = relTime(ev.ts);
-        // A grouped bubble stands for many rows \u2014 disable the single-row click.
-        lastFeedGroup.item._rowClickOff = true;
-        lastFeedGroup.item.classList.remove('feed-clickable');
-        lastFeedGroup.item.removeAttribute('role');
-        lastFeedGroup.item.removeAttribute('tabindex');
-        lastFeedGroup.item.removeAttribute('title');
-        feedEl.scrollTop = feedEl.scrollHeight;
-        return;
-      }
+    var ROW_VERB = { insert: 'Added', update: 'Updated', delete: 'Removed', link: 'Linked', unlink: 'Unlinked' };
+    var ROW_PREP = { insert: 'to', update: 'in', delete: 'from', link: 'in', unlink: 'in' };
+    // Schema events all arrive as op:'schema'; the specific action lives only in
+    // the summary text. Map that text to a stable sub-action so a bulk run of
+    // "Deleted table X" collapses into one "Deleted 19 tables" pill. Each entry
+    // is [verb, singular, plural].
+    var SCHEMA_GROUP = {
+      'created-table':  ['Created', 'table', 'tables'],
+      'deleted-table':  ['Deleted', 'table', 'tables'],
+      'renamed-table':  ['Renamed', 'table', 'tables'],
+      'added-column':   ['Added', 'column', 'columns'],
+      'renamed-column': ['Renamed', 'column', 'columns'],
+      'added-link':     ['Added', 'link', 'links'],
+      'deleted-link':   ['Deleted', 'link', 'links'],
+      'created-link':   ['Created', 'link table', 'link tables'],
+    };
+    function schemaAction(summary) {
+      var s = String(summary || '');
+      if (/^Created link table/.test(s)) return 'created-link';
+      if (/^Created table/.test(s)) return 'created-table';
+      if (/^Deleted table/.test(s)) return 'deleted-table';
+      if (/^Renamed table/.test(s)) return 'renamed-table';
+      if (/^Added a column/.test(s)) return 'added-column';
+      if (/^Renamed a column/.test(s)) return 'renamed-column';
+      if (/^Added a link/.test(s)) return 'added-link';
+      if (/^Deleted a link/.test(s)) return 'deleted-link';
+      return null; // unknown schema op: keep it ungrouped (stay honest)
+    }
+    // Group identical-TYPE events into one counted pill regardless of which
+    // object they touched, so a bulk run (delete N tables, remove rows across M
+    // tables) shows a single bubble instead of overflowing the rail. Keyed by
+    // op+source (+schema sub-action); the table is intentionally NOT in the key.
+    // A group stays "open" for FEED_GROUP_WINDOW_MS after its last hit; later
+    // activity starts a fresh bubble so unrelated edits aren't merged in.
+    function feedGroupKey(ev) {
+      var src = String(ev.source || '');
+      if (isSchemaOp(ev.op)) {
+        var a = schemaAction(ev.summary);
+        return a ? 'schema|' + a + '|' + src : null;
+      }
+      return GROUPABLE_OPS[ev.op] ? String(ev.op) + '|' + src : null;
+    }
+    var feedGroups = {}; // key -> { op, count, tables, tableCount, schemaKey, firstSummary, item, summaryEl, timeEl, last, startMs, endMs, turnId }
+    var FEED_GROUP_WINDOW_MS = 15000;
+    // Assistant-turn scope for live activity-card grouping + duration. While a
+    // turn is active, its same-type events all collapse into one card (no window
+    // expiry); the card's timer measures from feedTurnStartMs to the last event.
+    var feedTurnId = 0;
+    var feedTurnActive = false;
+    var feedTurnStartMs = 0;
+    function onlyKey(obj) { for (var k in obj) { if (obj.hasOwnProperty(k)) return k; } return ''; }
+    function groupedRowSummary(op, count, tables, tableCount) {
+      var verb = ROW_VERB[op] || String(op || '');
+      var noun = count === 1 ? 'row' : 'rows';
+      var where = '';
+      if (tableCount > 1) { where = ' across ' + tableCount + ' tables'; }
+      else { var only = onlyKey(tables); if (only) where = ' ' + (ROW_PREP[op] || 'in') + ' ' + only; }
+      return verb + ' ' + count + ' ' + noun + where;
+    }
+    function schemaGroupSummary(schemaKey, count, firstSummary) {
+      var g = SCHEMA_GROUP[schemaKey];
+      if (count <= 1 || !g) return firstSummary || '';
+      return g[0] + ' ' + count + ' ' + g[2];
+    }
+    function groupedSummary(g) {
+      return isSchemaOp(g.op)
+        ? schemaGroupSummary(g.schemaKey, g.count, g.firstSummary)
+        : groupedRowSummary(g.op, g.count, g.tables, g.tableCount);
+    }
+    // While a chat turn is streaming, its typing bubble (the not-yet-arrived next
+    // assistant message) must stay last; tool-driven activity cards belong ABOVE
+    // it, not below \u2014 otherwise the "typing\u2026" dots land mid-conversation. Returns
+    // the .chat-msg to insert before, or null when nothing is streaming.
+    function feedTypingAnchor(feedEl) {
+      var typing = feedEl.querySelector('.chat-bubble[data-typing="1"]');
+      var msg = typing && typing.closest ? typing.closest('.chat-msg') : null;
+      return (msg && msg.parentNode === feedEl) ? msg : null;
+    }
+    // Build one activity card (the shared full-width pill shape). Used by BOTH
+    // the live feed and the per-thread replay so they look identical. Returns the
+    // element plus the summary/time nodes a group mutates in place.
+    function makeFeedCard(ev) {
       var item = document.createElement('div');
       item.className = 'feed-item';
       var icon = document.createElement('div');
       icon.className = 'feed-icon';
-      icon.textContent = FEED_ICONS[ev.op] || '\u2022';
+      icon.textContent = feedIcon(ev.op);
       var body = document.createElement('div');
       body.className = 'feed-body';
       var summary = document.createElement('div');
@@ -12729,11 +12976,13 @@ var appJs = `
       body.appendChild(meta);
       var time = document.createElement('div');
       time.className = 'feed-time';
-      time.textContent = relTime(ev.ts);
+      // Duration ("4s" / "4m 2s") is filled in by the caller once the group's
+      // start/end span is known \u2014 not a relative "ago".
+      time.textContent = '';
       item.appendChild(icon);
       item.appendChild(body);
       item.appendChild(time);
-      // Row events (insert/update/delete) carry a rowId \u2014 make the bubble a
+      // Row events (insert/update/delete) carry a rowId \u2014 make the card a
       // shortcut to that object. Link/unlink and schema events have no single
       // row (rowId is null), so they stay non-clickable.
       if (ev.rowId && ev.table) {
@@ -12741,19 +12990,118 @@ var appJs = `
         item.setAttribute('role', 'button');
         item.setAttribute('tabindex', '0');
         item.title = 'Open this ' + String(ev.table);
-        // _rowClickOff is set when the bubble becomes a group \u2014 clicks no-op then.
+        // _rowClickOff is set when the card becomes a group \u2014 clicks no-op then.
         var openRow = function () { if (item._rowClickOff) return; openSearchHit(String(ev.table), String(ev.rowId)); };
         item.addEventListener('click', openRow);
         item.addEventListener('keydown', function (e) {
           if (e.key === 'Enter' || e.key === ' ') { e.preventDefault(); openRow(); }
         });
       }
-      feedEl.appendChild(item);
+      return { item: item, summaryEl: summary, timeEl: time };
+    }
+    // Fold another event into an existing group card: bump the count, track the
+    // table, refresh the summary, and drop the single-row affordances (a grouped
+    // card stands for many rows, so it's a status, not a clickable button).
+    // The card timer shows the TASK DURATION (start \u2192 finish), not a relative
+    // "ago": for a single op it's the time that op took; for a grouped run it's
+    // from the first task's start to the last task's finish. startMs is anchored
+    // to the assistant turn's start (so a one-event card still shows real time);
+    // endMs tracks the latest event in the group.
+    function setGroupTime(g) {
+      if (g.timeEl) g.timeEl.textContent = formatElapsed(Math.max(0, g.endMs - g.startMs));
+    }
+    function applyGroupHit(g, ev, endMs) {
+      g.count += 1;
+      if (ev.table && !g.tables[ev.table]) { g.tables[ev.table] = 1; g.tableCount += 1; }
+      if (typeof endMs === 'number' && endMs > g.endMs) g.endMs = endMs;
+      g.summaryEl.textContent = groupedSummary(g);
+      setGroupTime(g);
+      g.item._rowClickOff = true;
+      g.item.classList.remove('feed-clickable');
+      g.item.removeAttribute('tabindex');
+      g.item.removeAttribute('title');
+      g.item.setAttribute('role', 'status');
+    }
+    function newGroup(ev, card, startMs, endMs) {
+      var tbls = {}; var tc = 0;
+      if (ev.table) { tbls[ev.table] = 1; tc = 1; }
+      return {
+        op: ev.op, count: 1, tables: tbls, tableCount: tc,
+        schemaKey: isSchemaOp(ev.op) ? schemaAction(ev.summary) : null,
+        firstSummary: ev.summary || '',
+        item: card.item, summaryEl: card.summaryEl, timeEl: card.timeEl,
+        startMs: startMs, endMs: endMs,
+      };
+    }
+    function renderFeedItem(ev) {
+      var feedEl = document.getElementById('rail-feed');
+      if (!feedEl) return;
+      var empty = document.getElementById('rail-empty');
+      if (empty) empty.remove();
+      // Coalesce same-TYPE events into one counted card within a recency window \u2014
+      // even across different objects (op+source key, table excluded), so a bulk
+      // run collapses to one card ("Removed 49 rows across 9 tables") instead of
+      // spamming the rail. Distinct tables touched are tracked so a single-table
+      // run still reads "\u2026 from <table>".
+      var groupKey = feedGroupKey(ev);
+      var nowMs = Date.now();
+      if (groupKey) {
+        var g = feedGroups[groupKey];
+        // A group stays open to merge while: (a) we're inside the SAME assistant
+        // turn that opened it \u2014 no time limit, so a slow bulk run (deleting many
+        // tables against a remote DB) stays one card instead of splitting when a
+        // 15s window lapses mid-run; or (b) outside a turn (manual edits / another
+        // client), within the rolling window. Cross-turn events never merge.
+        var open = g && g.item.parentNode === feedEl && (
+          feedTurnActive ? (g.turnId === feedTurnId) : ((nowMs - g.last) < FEED_GROUP_WINDOW_MS)
+        );
+        if (open) {
+          applyGroupHit(g, ev, nowMs);
+          g.last = nowMs;
+          feedEl.scrollTop = feedEl.scrollHeight;
+          return;
+        }
+      }
+      var card = makeFeedCard(ev);
+      // Keep a streaming chat turn's typing bubble pinned to the bottom: insert
+      // this card above it rather than appending below (the dots are the next
+      // message, not done yet). No active turn \u2192 append as usual.
+      var anchor = feedTypingAnchor(feedEl);
+      if (anchor) feedEl.insertBefore(card.item, anchor); else feedEl.appendChild(card.item);
       feedEl.scrollTop = feedEl.scrollHeight;
-      // Start a new group anchored on this bubble (groupable ops only).
-      lastFeedGroup = groupKey
-        ? { key: groupKey, count: 1, item: item, summaryEl: summary, timeEl: time }
-        : null;
+      // Anchor the card's duration to the turn start (so even a single-op card
+      // shows how long the task took); fall back to now for non-turn activity.
+      var startMs = (feedTurnActive && feedTurnStartMs) ? feedTurnStartMs : nowMs;
+      if (groupKey) {
+        var grp = newGroup(ev, card, startMs, nowMs);
+        grp.turnId = feedTurnId;
+        grp.last = nowMs;
+        feedGroups[groupKey] = grp;
+        setGroupTime(grp);
+      } else {
+        card.timeEl.textContent = formatElapsed(Math.max(0, nowMs - startMs));
+      }
+    }
+    // Replay a persisted assistant turn's data-change events as collapsed activity
+    // cards. Grouping is PER-TURN (self-contained, independent of the live feed's
+    // rolling window) so each turn's bulk run shows one card and stays tied to the
+    // turn that produced it. Reads aren't persisted as events, so only mutations
+    // appear. Appends in order; the caller positions them after the turn's text.
+    function renderTurnEventCards(feedEl, events, startedMs) {
+      if (!feedEl || !events || !events.length) return;
+      var groups = {};
+      for (var i = 0; i < events.length; i++) {
+        var ev = events[i];
+        var evMs = ev.ts ? new Date(ev.ts).getTime() : startedMs;
+        if (typeof evMs !== 'number' || isNaN(evMs)) evMs = startedMs;
+        var startMs = (typeof startedMs === 'number' && !isNaN(startedMs)) ? startedMs : evMs;
+        var key = feedGroupKey(ev);
+        if (key && groups[key]) { applyGroupHit(groups[key], ev, evMs); continue; }
+        var card = makeFeedCard(ev);
+        feedEl.appendChild(card.item);
+        if (key) { var g = newGroup(ev, card, startMs, evMs); groups[key] = g; setGroupTime(g); }
+        else { card.timeEl.textContent = formatElapsed(Math.max(0, evMs - startMs)); }
+      }
     }
     function startFeed() {
       if (feedSource) {
@@ -12766,14 +13114,16 @@ var appJs = `
         var data;
         try { data = JSON.parse(ev.data); } catch (_) { return; /* ignore malformed */ }
         try { renderFeedItem(data); } catch (_) { /* render best-effort */ }
-        // A server-side mutation (e.g. the Context Constructor ingesting a file)
-        // can create a brand-new entity or junction the client hasn't loaded.
-        // The local feed bus delivers these even when there's no realtime
-        // broker (SQLite), so refresh the entity list + sidebar live \u2014 otherwise
-        // the new object is missing from the nav and routing to it shows
-        // "Unknown entity" until a manual page reload. Debounced so a burst of
-        // schema events from one ingest coalesces into a single refetch.
-        if (data && (data.op === 'schema' || (data.table && !tableByName(data.table)))) {
+        // Refresh on ANY data mutation, not just schema/new-table events. The
+        // local feed bus delivers every insert/update/delete/link even when
+        // there's no realtime broker (SQLite/local), so this is what makes the
+        // home dashboard counts AND the open entity view live-update without a
+        // manual reload (previously only schema ops or brand-new tables did).
+        // scheduleRealtimeRefresh is debounced (200ms) so a burst from one
+        // ingest still coalesces into a single refetch \u2014 and on Postgres/cloud
+        // it shares that debounce with the realtime 'change' handler (no double
+        // fetch). See Rule 28: /api/entities uses batched counts, not N queries.
+        if (data && (data.table || data.op === 'schema')) {
           scheduleRealtimeRefresh();
         }
       });
@@ -12835,12 +13185,13 @@ var appJs = `
       chatHistory = [];
       var feedEl = railFeedEl();
       if (!feedEl) return;
-      // Remove only the chat bubbles. The activity cards (.feed-item) are
-      // workspace-global, not part of any one conversation \u2014 loading, switching,
-      // or starting a conversation must NOT wipe them (they're backfilled once
-      // on connect). Otherwise auto-loading a thread on refresh erases the feed.
-      var msgs = feedEl.querySelectorAll('.chat-msg');
-      for (var i = 0; i < msgs.length; i++) msgs[i].remove();
+      // The rail is conversation-scoped: clearing or switching a conversation
+      // drops both its chat bubbles AND its activity cards (each conversation
+      // replays its own data-change cards from the persisted per-turn events).
+      // Reset the grouping anchors so a freshly loaded thread starts clean.
+      var nodes = feedEl.querySelectorAll('.chat-msg, .feed-item');
+      for (var i = 0; i < nodes.length; i++) nodes[i].remove();
+      feedGroups = {};
       // Restore the empty hint only when the rail is now completely empty.
       if (!feedEl.firstElementChild) {
         feedEl.innerHTML = '<div class="rail-empty" id="rail-empty">No activity yet. Changes you make will appear here.</div>';
@@ -12853,7 +13204,7 @@ var appJs = `
       if (!feedEl) return;
       var items = feedEl.querySelectorAll('.feed-item');
       for (var i = 0; i < items.length; i++) items[i].remove();
-      lastFeedGroup = null;
+      feedGroups = {};
     }
     function newChat() {
       currentThreadId = null;
@@ -12893,11 +13244,12 @@ var appJs = `
         msgs.forEach(function (m) {
           if (m.role === 'user') { appendUserBubble(m.text); chatHistory.push({ role: 'user', text: m.text }); }
           else if (m.role === 'assistant') {
-            // Rich replay: the saved per-turn structure (text + tool pills),
-            // matching the live stream. Falls back to a plain text bubble for
-            // messages saved before turns were persisted.
-            if (Array.isArray(m.turns) && m.turns.length > 0) { m.turns.forEach(appendAssistantTurn); }
-            else { var c = newAssistantBubble(); setBubbleText(c, m.text); }
+            // Rich replay: the saved per-turn structure (text + the data-change
+            // activity cards it produced), matching the live stream. Falls back to
+            // a plain text bubble for messages saved before turns were persisted.
+            if (Array.isArray(m.turns) && m.turns.length > 0) {
+              m.turns.forEach(function (t) { appendAssistantTurn(t, m.created_at, m.startedAt); });
+            } else { var c = newAssistantBubble(); setBubbleText(c, m.text); }
             chatHistory.push({ role: 'assistant', text: m.text });
           }
         });
@@ -12921,126 +13273,88 @@ var appJs = `
       railEmptyGone();
       var feedEl = railFeedEl();
       var msg = document.createElement('div'); msg.className = 'chat-msg assistant';
-      var wrap = document.createElement('div');
-      var tools = document.createElement('div'); tools.className = 'chat-tools';
       var b = document.createElement('div'); b.className = 'chat-bubble assistant';
       // Show an animated typing indicator until the first text delta arrives.
       b.innerHTML = '<span class="chat-typing"><i></i><i></i><i></i></span>';
       b.setAttribute('data-typing', '1');
-      wrap.appendChild(tools); wrap.appendChild(b);
-      msg.appendChild(wrap); feedEl.appendChild(msg); feedEl.scrollTop = feedEl.scrollHeight;
-      // lastTool anchors the current run of identical tool calls so consecutive
-      // same-name calls coalesce into one counted pill (see addToolPill).
-      return { bubble: b, tools: tools, pills: {}, lastTool: null, msg: msg };
+      msg.appendChild(b); feedEl.appendChild(msg); feedEl.scrollTop = feedEl.scrollHeight;
+      return { bubble: b, msg: msg };
     }
     /** Set an assistant bubble's text, clearing the typing indicator. */
+    // Turn [label](lattice://table/id) object references the assistant emits into
+    // clickable pills that open the row (mode-aware, via openSearchHit). The
+    // links are pulled out into placeholders BEFORE markdown rendering and the
+    // pill HTML is swapped back in AFTER \u2014 so it's independent of mdToHtml's own
+    // link handling and survives HTML-escaping. Labels/ids are re-escaped.
+    function renderAssistantHtml(text) {
+      var pills = [];
+      // U+0002 sentinel survives mdToHtml's escape + inline passes untouched.
+      // Use a unicode-escape string literal for insertion and a REGEX LITERAL for
+      // the swap (one escaping level each) \u2014 a new RegExp('(\\d+)') here would be
+      // double-collapsed by the template literal into a literal "d", silently
+      // breaking the swap (the pill rendered as a bare index).
+      var pre = String(text == null ? '' : text).replace(
+        /\\[([^\\]]+)\\]\\(lattice:\\/\\/([a-zA-Z0-9_]+)\\/([^)\\s]+)\\)/g,
+        function (_, label, table, id) {
+          pills.push({ label: label, table: table, id: id });
+          return '\\u0002' + (pills.length - 1) + '\\u0002';
+        }
+      );
+      var html = mdToHtml(pre);
+      return html.replace(/\\u0002([0-9]+)\\u0002/g, function (_, n) {
+        var p = pills[Number(n)];
+        return '<a class="chip chip-link lattice-ref" data-table="' + escapeHtml(p.table) +
+          '" data-id="' + escapeHtml(p.id) + '" title="Open this ' + escapeHtml(p.table) + '">\u{1F517} ' +
+          escapeHtml(p.label) + '</a>';
+      });
+    }
+    // One delegated click handler on the rail feed: a lattice-ref pill opens its
+    // object through the same mode-aware navigator the activity feed uses.
+    var _latticeRefWired = false;
+    function ensureLatticeRefHandler() {
+      if (_latticeRefWired) return;
+      var feedEl = document.getElementById('rail-feed');
+      if (!feedEl) return;
+      feedEl.addEventListener('click', function (e) {
+        var a = e.target && e.target.closest ? e.target.closest('.lattice-ref') : null;
+        if (!a) return;
+        e.preventDefault();
+        openSearchHit(a.getAttribute('data-table'), a.getAttribute('data-id'));
+      });
+      _latticeRefWired = true;
+    }
     function setBubbleText(ctx, text) {
       if (!ctx || !ctx.bubble) return; // bubble may have been finalized/removed
       ctx.bubble.removeAttribute('data-typing');
       // Assistant turns are Markdown; render (input is HTML-escaped inside
-      // mdToHtml first, so this is injection-safe).
-      ctx.bubble.innerHTML = mdToHtml(text);
+      // mdToHtml first, so this is injection-safe) + linkify object references.
+      ctx.bubble.innerHTML = renderAssistantHtml(text);
+      ensureLatticeRefHandler();
     }
     /**
-     * A turn ended. If its bubble never got text (still showing the typing
-     * indicator), drop the empty bubble \u2014 keeping any tool pills it fired, or
-     * removing the whole message when there were none. Stops a dangling
-     * "typing\u2026" bubble after the stream completes.
+     * A turn ended still showing the typing indicator (no text streamed) \u2014 drop
+     * the empty bubble. The turn's data-change activity cards live in the rail
+     * feed independently (not inside the message), so they remain.
      */
     function finalizeBubble(ctx) {
       if (!ctx || !ctx.bubble || !ctx.bubble.getAttribute('data-typing')) return;
-      if (ctx.tools && ctx.tools.children.length > 0) ctx.bubble.remove();
-      else if (ctx.msg) ctx.msg.remove();
-    }
-    var TOOL_VERBS = {
-      create_row: ['Creating row', 'Row created', 'Could not create row'],
-      update_row: ['Updating row', 'Row updated', 'Could not update row'],
-      delete_row: ['Deleting row', 'Row deleted', 'Could not delete row'],
-      list_rows: ['Listing rows', 'Listed rows', 'Could not list rows'],
-      get_row: ['Fetching row', 'Fetched row', 'Could not fetch row'],
-      list_entities: ['Listing tables', 'Listed tables', 'Could not list tables']
-    };
-    // Grouped (count > 1) [gerund, past, noun] so a run of identical tool calls
-    // collapses into ONE counted pill \u2014 "Listed 5 rows" \u2014 instead of N identical
-    // "Listed rows" pills. Mirrors the activity feed's groupedSummary() coalescing.
-    var TOOL_GROUP = {
-      create_row:    ['Creating', 'Created', 'rows'],
-      update_row:    ['Updating', 'Updated', 'rows'],
-      delete_row:    ['Deleting', 'Deleted', 'rows'],
-      list_rows:     ['Listing',  'Listed',  'rows'],
-      get_row:       ['Fetching', 'Fetched', 'rows'],
-      list_entities: ['Listing',  'Listed',  'tables']
-    };
-    function toolLabel(name, state) {
-      var v = TOOL_VERBS[name] || [name, name, name];
-      return state === 'pending' ? v[0] + '\u2026' : (state === 'error' ? v[2] : v[1]);
-    }
-    // Label for a run of "count" identical calls. count <= 1 falls back to the
-    // single-call label so a lone pill reads exactly as before.
-    function toolGroupLabel(name, count, state) {
-      if (count <= 1) return toolLabel(name, state);
-      var g = TOOL_GROUP[name];
-      if (!g) return toolLabel(name, state) + ' \xD7' + count; // unknown tool: stay honest
-      var verb = state === 'pending' ? g[0] : g[1];
-      return verb + ' ' + count + ' ' + g[2] + (state === 'pending' ? '\u2026' : '');
-    }
-    // Paint a (possibly grouped) pill from its live counts: spinner while any call
-    // is still running, then \u2713 (or \u26A0 if any errored) once every call resolves.
-    function paintToolPill(g) {
-      var pending = g.pending > 0;
-      var err = !pending && g.error > 0;
-      if (pending) {
-        g.el.className = 'tool-pill';
-        g.el.innerHTML = '<span class="spin"></span>' + escapeHtml(toolGroupLabel(g.name, g.total, 'pending'));
-      } else {
-        g.el.className = 'tool-pill ' + (err ? 'error' : 'done');
-        g.el.textContent = (err ? '\u26A0 ' : '\u2713 ') + toolGroupLabel(g.name, g.total, err ? 'error' : 'done');
-      }
-    }
-    function addToolPill(ctx, id, name) {
-      // Coalesce a run of the same tool within this turn's pill row into one
-      // counted pill (the model emits several list_rows in a single turn).
-      var g = ctx.lastTool;
-      if (g && g.name === name) {
-        g.total += 1; g.pending += 1;
-      } else {
-        var pill = document.createElement('span'); pill.className = 'tool-pill';
-        ctx.tools.appendChild(pill);
-        g = { name: name, el: pill, total: 1, pending: 1, error: 0 };
-        ctx.lastTool = g;
-      }
-      ctx.pills[id] = g; // resolveToolPill maps the tool-use id back to its group
-      paintToolPill(g);
+      if (ctx.msg) ctx.msg.remove();
     }
-    function resolveToolPill(ctx, id, isError) {
-      var g = ctx.pills[id]; if (!g) return;
-      if (g.pending > 0) g.pending -= 1;
-      if (isError) g.error += 1;
-      paintToolPill(g);
-    }
-    /**
-     * Append already-resolved pills for a replayed turn, collapsing consecutive
-     * identical tools into one counted pill (matching the live grouping above).
-     */
-    function renderResolvedPills(ctx, tools) {
-      var i = 0;
-      while (i < tools.length) {
-        var name = tools[i].name, j = i, errors = 0;
-        while (j < tools.length && tools[j].name === name) { if (tools[j].isError) errors += 1; j++; }
-        var count = j - i, err = errors > 0;
-        var pill = document.createElement('span');
-        pill.className = 'tool-pill ' + (err ? 'error' : 'done');
-        pill.textContent = (err ? '\u26A0 ' : '\u2713 ') + toolGroupLabel(name, count, err ? 'error' : 'done');
-        ctx.tools.appendChild(pill);
-        i = j;
-      }
-    }
-    /** Replay one persisted assistant turn: its tool pills + text bubble. */
-    function appendAssistantTurn(turn) {
+    /** Replay one persisted assistant turn: its text bubble + the data-change
+     *  activity cards it produced (collapsed, per-turn). Reads aren't persisted
+     *  as events, so a read-only turn with no text renders nothing. createdAt
+     *  stamps the cards' relative time (events carry no ts of their own). */
+    function appendAssistantTurn(turn, createdAt, startedAt) {
       var ctx = newAssistantBubble();
-      renderResolvedPills(ctx, turn.tools || []);
       if (turn.text) setBubbleText(ctx, turn.text);
-      else finalizeBubble(ctx); // tool-only turn: drop the empty bubble, keep pills
+      else finalizeBubble(ctx); // no text \u2192 drop the empty typing bubble
+      var events = (turn.events || []).map(function (e) {
+        return e.ts ? e : { op: e.op, table: e.table, rowId: e.rowId, summary: e.summary, source: e.source || 'ai', ts: createdAt };
+      });
+      // Task start for the duration timer: the persisted turn-start, else the
+      // message time. Per-event ts (above) gives the run's finish.
+      var startedMs = new Date(startedAt || createdAt || 0).getTime();
+      renderTurnEventCards(railFeedEl(), events, startedMs);
     }
     function parseSse(buffer, onEvent) {
       var sep;
@@ -13056,6 +13370,11 @@ var appJs = `
     function sendChat(text) {
       if (chatBusy || !text) return;
       chatBusy = true;
+      // Open a fresh turn scope: this turn's activity cards group together (no
+      // window expiry) and their timers measure from now.
+      feedTurnId += 1;
+      feedTurnStartMs = Date.now();
+      feedTurnActive = true;
       appendUserBubble(text);
       var historyToSend = chatHistory.slice();
       chatHistory.push({ role: 'user', text: text });
@@ -13082,8 +13401,10 @@ var appJs = `
             buf = parseSse(buf, function (ev) {
               if (ev.type === 'assistant_message_start') { finalizeBubble(actx); actx = newAssistantBubble(); assembled = ''; }
               else if (ev.type === 'text_delta' && actx) { assembled += ev.delta; setBubbleText(actx, assembled); railFeedEl().scrollTop = railFeedEl().scrollHeight; }
-              else if (ev.type === 'tool_use' && actx) { addToolPill(actx, ev.id, ev.name); }
-              else if (ev.type === 'tool_result' && actx) { resolveToolPill(actx, ev.toolUseId, ev.isError); }
+              // tool_use / tool_result are no longer painted as inline pills \u2014 the
+              // assistant's data changes stream in as activity cards over the feed
+              // SSE (renderFeedItem), which sit above the typing bubble. Reads emit
+              // no card by design (only data changes show).
               else if (ev.type === 'warn') { finalizeBubble(actx); var wb = newAssistantBubble(); setBubbleText(wb, '\u26A0 ' + ev.message); actx = null; }
               else if (ev.type === 'error') { if (!actx) actx = newAssistantBubble(); setBubbleText(actx, (assembled ? assembled + '\\n' : '') + '\u26A0 ' + ev.message); }
             });
@@ -13100,6 +13421,9 @@ var appJs = `
         var c = newAssistantBubble(); setBubbleText(c, '\u26A0 ' + e.message);
       }).finally(function () {
         chatBusy = false;
+        // Close the turn scope: later activity starts fresh cards (the next turn,
+        // or manual edits via the rolling window).
+        feedTurnActive = false;
         var sb = document.getElementById('chat-send'); if (sb) sb.disabled = false;
         var inp = document.getElementById('chat-input'); if (inp) inp.focus();
       });
@@ -13109,6 +13433,32 @@ var appJs = `
     var audioChunks = [];
     function setMicState(btn, state) {
       recState = state;
+      // Mirror the recording lifecycle onto the composer. While recording or
+      // transcribing, the textarea is read-only (it shows a status placeholder,
+      // not editable text) and the Send button is disabled \u2014 you can't send a
+      // half-captured voice note. Returning to idle restores both, then the
+      // transcript is dropped in (see rec.onstop).
+      var inp = document.getElementById('chat-input');
+      var snd = document.getElementById('chat-send');
+      var busy = state === 'recording' || state === 'transcribing';
+      if (inp) {
+        if (busy) {
+          if (inp._restorePlaceholder == null) {
+            inp._restorePlaceholder = inp.getAttribute('placeholder') || '';
+          }
+          inp.setAttribute('readonly', 'readonly');
+          inp.classList.add('recording');
+          inp.setAttribute('placeholder', state === 'recording' ? 'Listening\u2026' : 'Transcribing\u2026');
+        } else {
+          inp.removeAttribute('readonly');
+          inp.classList.remove('recording');
+          if (inp._restorePlaceholder != null) {
+            inp.setAttribute('placeholder', inp._restorePlaceholder);
+            inp._restorePlaceholder = null;
+          }
+        }
+      }
+      if (snd) snd.disabled = busy;
       if (!btn) return;
       btn.classList.remove('recording', 'transcribing');
       if (state === 'recording') { btn.classList.add('recording'); btn.textContent = '\u23F9'; btn.title = 'Stop recording'; btn.disabled = false; }
@@ -13208,10 +13558,26 @@ var appJs = `
       item.innerHTML =
         '<div class="feed-icon"><span class="feed-spinner"></span></div>' +
         '<div class="feed-body"><div class="feed-summary">Analyzing ' + escapeHtml(label) + '\u2026</div></div>' +
-        '<div class="feed-time"></div>';
-      feedEl.appendChild(item);
+        '<div class="feed-time">0s</div>';
+      // Same bottom-pin rule as renderFeedItem: don't bury a streaming chat
+      // turn's typing bubble beneath this card.
+      var anchor = feedTypingAnchor(feedEl);
+      if (anchor) feedEl.insertBefore(item, anchor); else feedEl.appendChild(item);
       feedEl.scrollTop = feedEl.scrollHeight;
-      return function () { if (item.parentNode) item.parentNode.removeChild(item); };
+      // Live elapsed-time counter while the upload + server-side extraction run.
+      // Previously the time element was left empty (rendered as a stuck "0s")
+      // because nothing tracked or updated it. Tick once a second; the cleanup
+      // returned below clears the interval (and self-clears if the node is gone).
+      var started = Date.now();
+      var timeEl = item.querySelector('.feed-time');
+      var tick = setInterval(function () {
+        if (!item.parentNode || !timeEl) { clearInterval(tick); return; }
+        timeEl.textContent = formatElapsed(Date.now() - started);
+      }, 1000);
+      return function () {
+        clearInterval(tick);
+        if (item.parentNode) item.parentNode.removeChild(item);
+      };
     }
     function uploadFile(file) {
       var done = pendingIngestItem(file.name || 'file');
@@ -13386,7 +13752,7 @@ var guiAppHtml = `<!doctype html>
     </div>
     <div class="topsearch" id="topsearch">
       <span class="topsearch-icon" aria-hidden="true">\u{1F50D}</span>
-      <input type="search" id="search-input" placeholder="Search all tables\u2026" autocomplete="off" spellcheck="false" aria-label="Full-text search" />
+      <input type="search" id="search-input" placeholder="Ask the assistant\u2026" autocomplete="off" spellcheck="false" aria-label="Ask the assistant" />
       <div class="search-results" id="search-results" hidden></div>
     </div>
     <div class="history-controls">
@@ -15190,203 +15556,6 @@ function saveConfigDoc(configPath, doc) {
   writeFileSync6(configPath, doc.toString(), "utf8");
 }
 
-// src/framework/native-entities.ts
-var NATIVE_ENTITY_DEFS = {
-  secrets: {
-    columns: {
-      id: "TEXT PRIMARY KEY",
-      // NOT NULL needs a DEFAULT so ALTER TABLE ADD COLUMN succeeds when this
-      // native shape is merged onto a pre-existing table (the adopt + team
-      // shared-schema sync paths use ADD COLUMN; SQLite + Postgres both reject
-      // a NOT NULL add without a default). Every insert sets `name` explicitly,
-      // so the default is never observed in practice.
-      name: "TEXT NOT NULL DEFAULT ''",
-      kind: "TEXT",
-      value: "TEXT",
-      description: "TEXT",
-      created_at: "TEXT NOT NULL DEFAULT (datetime('now'))",
-      updated_at: "TEXT NOT NULL DEFAULT (datetime('now'))",
-      deleted_at: "TEXT"
-    },
-    encrypted: { columns: ["value"] },
-    render: () => "",
-    outputFile: ".lattice-native/secrets.md"
-  },
-  files: {
-    columns: {
-      id: "TEXT PRIMARY KEY",
-      // Legacy columns (DEPRECATED v2.0 — retained for back-compat, NOT dropped).
-      //   path — superseded by the reference model below (`ref_kind`/`ref_uri`).
-      //          New local-file ingestion records a `local_ref` via
-      //          `referenceLocalFile()` rather than writing `path`; readers fall
-      //          back to `ref_uri`. Do not write `path` in new code.
-      //   kind — orphaned: superseded by `mime` (content type) and `ref_kind`
-      //          (the blob/local_ref/cloud_ref discriminator). Not read or
-      //          written by production code; kept only so existing rows retain
-      //          their value.
-      path: "TEXT",
-      kind: "TEXT",
-      // Content-addressed storage. `sha256` is the canonical content
-      // identifier; `blob_path` is the relative path under
-      // `<lattice-root>/data/blobs/` written by attachBlob().
-      original_name: "TEXT",
-      mime: "TEXT",
-      size_bytes: "INTEGER",
-      sha256: "TEXT",
-      blob_path: "TEXT",
-      // Reference mode (v2.0): a row can INDEX data that lives elsewhere
-      // instead of owning a copy. All nullable + additive (back-compat).
-      //   ref_kind     discriminator: 'blob' | 'local_ref' | 'cloud_ref'
-      //                (NULL ⇒ legacy/owned blob)
-      //   ref_uri      durable pointer: absolute local path or remote URL
-      //   ref_provider resolver selector: 'fs' | 'web' | 'gdrive'
-      //   source_json  provider-specific metadata (etag, availability, …)
-      ref_kind: "TEXT",
-      ref_uri: "TEXT",
-      ref_provider: "TEXT",
-      source_json: "TEXT",
-      extraction_status: "TEXT",
-      extracted_text: "TEXT",
-      description: "TEXT",
-      created_at: "TEXT NOT NULL DEFAULT (datetime('now'))",
-      updated_at: "TEXT NOT NULL DEFAULT (datetime('now'))",
-      deleted_at: "TEXT"
-    },
-    render: () => "",
-    outputFile: ".lattice-native/files.md"
-  },
-  notes: {
-    // A generic knowledge object: a free-form note with a title and body.
-    // Ordinary, user-editable rows; `source_file_id` optionally points back at
-    // an originating `files` row. Retained as native (1.16.3) because the
-    // reference/source-organizer store uses it as the fallback organizer target.
-    columns: {
-      id: "TEXT PRIMARY KEY",
-      title: "TEXT",
-      body: "TEXT",
-      source_file_id: "TEXT",
-      created_at: "TEXT NOT NULL DEFAULT (datetime('now'))",
-      updated_at: "TEXT NOT NULL DEFAULT (datetime('now'))",
-      deleted_at: "TEXT"
-    },
-    render: () => "",
-    outputFile: ".lattice-native/notes.md"
-  },
-  chat_threads: {
-    // An assistant conversation. Native so chat history survives across
-    // sessions and is queryable/renderable like any other Lattice entity.
-    columns: {
-      id: "TEXT PRIMARY KEY",
-      title: "TEXT",
-      created_at: "TEXT NOT NULL DEFAULT (datetime('now'))",
-      updated_at: "TEXT NOT NULL DEFAULT (datetime('now'))",
-      deleted_at: "TEXT"
-    },
-    render: () => "",
-    outputFile: ".lattice-native/chat-threads.md"
-  },
-  chat_messages: {
-    // One turn (or feed entry) within a chat_thread.
-    columns: {
-      id: "TEXT PRIMARY KEY",
-      // Soft reference to chat_threads.id. Kept as a plain column (no FK)
-      // to match the generic, dialect-agnostic native-entity style.
-      thread_id: "TEXT",
-      // user | assistant | tool | feed | system
-      role: "TEXT NOT NULL DEFAULT 'user'",
-      // JSON payload: text, tool_use / tool_result blocks, attachments, or
-      // (for role='feed') the feed-event details.
-      content_json: "TEXT",
-      // ai | gui | cli | ingest — meaningful for role='feed'.
-      source: "TEXT",
-      created_at: "TEXT NOT NULL DEFAULT (datetime('now'))",
-      deleted_at: "TEXT"
-    },
-    render: () => "",
-    outputFile: ".lattice-native/chat-messages.md"
-  }
-};
-var NATIVE_ENTITY_NAMES = new Set(Object.keys(NATIVE_ENTITY_DEFS));
-function isNativeEntity(name) {
-  return NATIVE_ENTITY_NAMES.has(name);
-}
-var NATIVE_INTERNAL_NAMES = /* @__PURE__ */ new Set([
-  "chat_threads",
-  "chat_messages"
-]);
-function isInternalNativeEntity(name) {
-  return NATIVE_INTERNAL_NAMES.has(name);
-}
-function registerNativeEntities(db) {
-  const existing = new Set(db.getRegisteredTableNames());
-  for (const [name, def] of Object.entries(NATIVE_ENTITY_DEFS)) {
-    if (existing.has(name)) continue;
-    db.define(name, def);
-  }
-}
-var NATIVE_REGISTRY_TABLE = "__lattice_native_entities";
-var NATIVE_REGISTRY_DEF = {
-  columns: {
-    entity: "TEXT PRIMARY KEY",
-    table_name: "TEXT NOT NULL",
-    adopted_at: "TEXT NOT NULL",
-    origin: "TEXT NOT NULL"
-  },
-  primaryKey: "entity",
-  render: () => "",
-  outputFile: ".lattice-native/native-entities.md"
-};
-async function adoptNativeEntities(db, options = {}) {
-  const onConflict = options.onConflict ?? "adopt";
-  await db.defineLate(NATIVE_REGISTRY_TABLE, NATIVE_REGISTRY_DEF);
-  const results = [];
-  for (const [name, def] of Object.entries(NATIVE_ENTITY_DEFS)) {
-    const physicalCols = await db.introspectColumns(name);
-    const exists = physicalCols.length > 0;
-    const registered = new Set(db.getRegisteredTableNames());
-    if (!exists) {
-      if (!registered.has(name)) await db.defineLate(name, def);
-      results.push({ entity: name, tableName: name, origin: "created" });
-      await recordNativeBinding(db, name, "created");
-      continue;
-    }
-    if (onConflict === "error") {
-      throw new Error(
-        `adoptNativeEntities: physical table "${name}" already exists; refusing to adopt with onConflict:'error'`
-      );
-    }
-    const nativeCols = new Set(Object.keys(def.columns));
-    const hadForeignShape = physicalCols.some((c) => !nativeCols.has(c));
-    const rowCount = await db.count(name);
-    let origin = hadForeignShape || rowCount > 0 ? "adopted" : "created";
-    if (onConflict === "skip") {
-      origin = "skipped";
-    } else if (!registered.has(name)) {
-      await db.defineLate(name, def);
-    }
-    results.push({ entity: name, tableName: name, origin });
-    await recordNativeBinding(db, name, origin);
-  }
-  return results;
-}
-async function listNativeBindings(db) {
-  if (!db.getRegisteredTableNames().includes(NATIVE_REGISTRY_TABLE)) return [];
-  const rows = await db.query(NATIVE_REGISTRY_TABLE);
-  return rows.map((r) => ({
-    entity: String(r.entity),
-    tableName: String(r.table_name),
-    origin: r.origin
-  }));
-}
-async function recordNativeBinding(db, entity, origin) {
-  await db.upsert(NATIVE_REGISTRY_TABLE, {
-    entity,
-    table_name: entity,
-    adopted_at: (/* @__PURE__ */ new Date()).toISOString(),
-    origin
-  });
-}
-
 // src/gui/schema-ops.ts
 async function listPhysicalUserTables(active) {
   const adapter = active.db._adapter;
@@ -15569,6 +15738,130 @@ async function createUserEntity(active, name, columns, sessionId, opts) {
   );
   return entity;
 }
+async function softDeleteUserEntity(active, name, sessionId, summary) {
+  const doc = loadConfigDoc(active.configPath);
+  const entityDef = doc.toJS().entities?.[name];
+  doc.deleteIn(["entities", name]);
+  saveConfigDoc(active.configPath, doc);
+  active.db.unregisterTable(name);
+  active.validTables.delete(name);
+  active.junctionTables.delete(name);
+  active.softDeletable.delete(name);
+  active.entityContextByTable.delete(name);
+  syncCanonicalContexts(active);
+  await recordSchemaOp(
+    active,
+    "schema.delete_entity",
+    name,
+    { entity: name, entityDef },
+    null,
+    summary ?? `Deleted table ${name}`,
+    sessionId
+  );
+}
+var AI_DELETE_ROW_CAP = 1e3;
+async function aiDeleteEntity(active, name, resolution, sessionId) {
+  if (!active.validTables.has(name)) return { ok: false, error: `Unknown table: ${name}` };
+  if (isNativeEntity(name)) {
+    return { ok: false, error: `"${name}" is a built-in table and cannot be deleted.` };
+  }
+  const tc = active.teamContext;
+  if (tc && tc.owners.get(name) !== tc.myUserId) {
+    return { ok: false, error: `Only the table's owner can delete "${name}".` };
+  }
+  const inbound = [];
+  for (const t of getGuiEntities(active.configPath, active.outputDir).tables) {
+    if (t.name === name) continue;
+    for (const rel of Object.values(t.relations)) {
+      if (rel.type === "belongsTo" && rel.table === name) {
+        inbound.push(`${t.name}.${rel.foreignKey}`);
+      }
+    }
+  }
+  if (inbound.length > 0) {
+    return {
+      ok: false,
+      error: `Cannot delete "${name}" \u2014 these links point at it: ${inbound.join(", ")}. Remove those links first.`
+    };
+  }
+  const mctx = {
+    db: active.db,
+    feed: active.feed,
+    softDeletable: active.softDeletable,
+    source: "ai"
+  };
+  const softDeletable = active.softDeletable.has(name);
+  const rowCount = softDeletable ? await active.db.count(name, { filters: [{ col: "deleted_at", op: "isNull" }] }) : await active.db.count(name);
+  if (rowCount === 0) {
+    await softDeleteUserEntity(active, name, sessionId);
+    return { ok: true, deleted: name };
+  }
+  if (resolution === void 0) {
+    return {
+      needsResolution: true,
+      rowCount,
+      message: `"${name}" still has ${String(rowCount)} row${rowCount === 1 ? "" : "s"}. Deleting a table with data needs a decision first \u2014 ask the user whether to delete the rows too (reversible), move them into another table, or cancel. Then call delete_entity again with resolution="delete_data" or resolution={"move_to":"<table>"}.`
+    };
+  }
+  if (resolution === "delete_data") {
+    if (!softDeletable) {
+      return {
+        ok: false,
+        error: `"${name}" rows can't be soft-deleted (no deleted_at column) \u2014 clear them manually first.`
+      };
+    }
+    if (rowCount > AI_DELETE_ROW_CAP) {
+      return {
+        ok: false,
+        error: `"${name}" has ${String(rowCount)} rows \u2014 too many to auto-delete safely (cap ${String(AI_DELETE_ROW_CAP)}). Trim it first.`
+      };
+    }
+    const rows2 = await active.db.query(name, {
+      filters: [{ col: "deleted_at", op: "isNull" }],
+      limit: AI_DELETE_ROW_CAP
+    });
+    let deletedRows = 0;
+    for (const r of rows2) {
+      await deleteRow(mctx, name, String(r.id), false);
+      deletedRows++;
+    }
+    await softDeleteUserEntity(active, name, sessionId);
+    return { ok: true, deleted: name, deletedRows };
+  }
+  const target = resolution.move_to;
+  if (!active.validTables.has(target)) {
+    return { ok: false, error: `move_to target "${target}" is not a known table.` };
+  }
+  if (target === name) return { ok: false, error: "move_to target must be a different table." };
+  if (active.junctionTables.has(target) || isNativeEntity(target)) {
+    return { ok: false, error: `Cannot move rows into "${target}".` };
+  }
+  if (rowCount > AI_DELETE_ROW_CAP) {
+    return {
+      ok: false,
+      error: `"${name}" has ${String(rowCount)} rows \u2014 too many to auto-move (cap ${String(AI_DELETE_ROW_CAP)}).`
+    };
+  }
+  const targetCols = active.db.getRegisteredColumns(target);
+  if (!targetCols) return { ok: false, error: `Could not read the columns of "${target}".` };
+  const rows = await active.db.query(
+    name,
+    softDeletable ? { filters: [{ col: "deleted_at", op: "isNull" }], limit: AI_DELETE_ROW_CAP } : { limit: AI_DELETE_ROW_CAP }
+  );
+  const SKIP = /* @__PURE__ */ new Set(["id", "deleted_at", "created_at", "updated_at"]);
+  let movedRows = 0;
+  for (const r of rows) {
+    const mapped = {};
+    for (const [k, v] of Object.entries(r)) {
+      if (!SKIP.has(k) && k in targetCols) mapped[k] = v;
+    }
+    await createRow(mctx, target, mapped);
+    if (softDeletable) await deleteRow(mctx, name, String(r.id), false);
+    movedRows++;
+  }
+  await softDeleteUserEntity(active, name, sessionId);
+  return { ok: true, deleted: name, movedRows };
+}
 
 // src/teams/server/routes.ts
 var UNAUTHENTICATED_TEAM_PATHS = /* @__PURE__ */ new Set([
@@ -18078,6 +18371,9 @@ async function dispatchUserConfigRoute(req, res, ctx) {
       const body = await readJson(req);
       const current = readPreferences();
       const next = {
+        // Preserve keys this endpoint doesn't manage (voice_provider,
+        // aggressiveness — set via the assistant config routes).
+        ...current,
         show_system_tables: typeof body.show_system_tables === "boolean" ? body.show_system_tables : current.show_system_tables,
         analytics: typeof body.analytics === "boolean" ? body.analytics : current.analytics
       };
@@ -18239,19 +18535,8 @@ async function getCreatorEmail(db) {
     return null;
   }
 }
-function computeState(type, teamEnabled, label, creatorEmail) {
+function computeState(type, creatorEmail) {
   if (type === "sqlite") return "local";
-  if (!teamEnabled) return "team-cloud-needs-invite";
-  if (!label) {
-    return "team-cloud-needs-invite";
-  }
-  let token = null;
-  try {
-    token = readToken(label);
-  } catch {
-    token = null;
-  }
-  if (!token) return "team-cloud-needs-invite";
   const identity = readIdentity();
   if (creatorEmail !== null && identity.email.length > 0 && creatorEmail.toLowerCase() === identity.email.toLowerCase()) {
     return "team-cloud-creator";
@@ -18259,8 +18544,9 @@ function computeState(type, teamEnabled, label, creatorEmail) {
   return "team-cloud-member";
 }
 function applyTeamMembershipState(info, membership) {
-  if (!membership || info.type !== "postgres" || !info.teamEnabled) return info.state;
-  return membership.joined ? membership.isCreator ? "team-cloud-creator" : "team-cloud-member" : "team-cloud-needs-invite";
+  if (info.type !== "postgres") return info.state;
+  if (membership) return membership.isCreator ? "team-cloud-creator" : "team-cloud-member";
+  return info.state;
 }
 async function describeCurrent(configPath, db) {
   const rawYaml = readFileSync14(configPath, "utf8");
@@ -18282,7 +18568,7 @@ async function describeCurrent(configPath, db) {
   if (labelMatch) {
     const label = labelMatch[1] ?? "";
     const url = getDbCredential(label);
-    const state = computeState("postgres", teamEnabled, label, creatorEmail);
+    const state = computeState("postgres", creatorEmail);
     if (url) {
       const parsed = parsePostgresUrl(url);
       if (parsed) {
@@ -18309,7 +18595,7 @@ async function describeCurrent(configPath, db) {
   }
   if (/^postgres(ql)?:\/\//i.test(dbLine)) {
     const parsed = parsePostgresUrl(dbLine);
-    const state = computeState("postgres", teamEnabled, void 0, creatorEmail);
+    const state = computeState("postgres", creatorEmail);
     return parsed ? {
       type: "postgres",
       state,
@@ -18932,22 +19218,6 @@ function parseCookies(req) {
   }
   return out;
 }
-async function storeSecret(db, kind, name, value) {
-  const [first, ...extras] = await liveSecretsOfKind(db, kind);
-  if (first) {
-    await db.update("secrets", first.id, { value, name });
-    for (const extra of extras)
-      await db.update("secrets", extra.id, { deleted_at: (/* @__PURE__ */ new Date()).toISOString() });
-  } else {
-    await db.insert("secrets", {
-      id: crypto.randomUUID(),
-      name,
-      kind,
-      value,
-      description: `${name} (assistant).`
-    });
-  }
-}
 async function liveSecretsOfKind(db, kind) {
   const rows = await db.query("secrets", {
     filters: [{ col: "kind", op: "eq", val: kind }]
@@ -18975,19 +19245,29 @@ async function readMachineCredential(db, kind) {
 var STT_PROVIDER_KIND = "stt_provider";
 var AGGRESSIVENESS_KIND = "assistant_aggressiveness";
 var DEFAULT_AGGRESSIVENESS = 0.5;
-async function getAggressiveness(db) {
-  const raw = await secretValue(db, AGGRESSIVENESS_KIND);
-  const n = raw === null ? NaN : Number(raw);
+function getAggressiveness() {
+  const n = readPreferences().aggressiveness;
   if (!Number.isFinite(n)) return DEFAULT_AGGRESSIVENESS;
   return Math.min(1, Math.max(0, n));
 }
+async function retireLegacyPreferenceSecrets(db) {
+  for (const kind of [STT_PROVIDER_KIND, AGGRESSIVENESS_KIND]) {
+    try {
+      for (const row of await liveSecretsOfKind(db, kind)) {
+        await db.update("secrets", row.id, { deleted_at: (/* @__PURE__ */ new Date()).toISOString() });
+      }
+    } catch (e) {
+      console.warn(`[assistant] could not retire legacy ${kind} secret:`, e.message);
+    }
+  }
+}
 function aggressivenessToTemperature(aggressiveness) {
   return Math.min(1, Math.max(0, aggressiveness));
 }
 async function getVoiceCredential(db) {
   const openai = await readMachineCredential(db, CREDENTIALS.openai.kind) ?? process.env.OPENAI_API_KEY ?? null;
   const eleven = await readMachineCredential(db, CREDENTIALS.elevenlabs.kind) ?? process.env.ELEVENLABS_API_KEY ?? null;
-  const pref = await secretValue(db, STT_PROVIDER_KIND);
+  const pref = readPreferences().voice_provider;
   if (pref === "elevenlabs" && eleven) return { provider: "elevenlabs", apiKey: eleven };
   if (pref === "openai" && openai) return { provider: "openai", apiKey: openai };
   if (openai) return { provider: "openai", apiKey: openai };
@@ -19039,8 +19319,8 @@ async function dispatchAssistantRoute(req, res, ctx) {
       hasClaudeAuth: await hasClaudeAuth(db),
       hasVoiceKey: voice !== null,
       sttProvider: voice?.provider ?? null,
-      sttPreference: await secretValue(db, STT_PROVIDER_KIND) ?? "auto",
-      aggressiveness: await getAggressiveness(db),
+      sttPreference: readPreferences().voice_provider,
+      aggressiveness: getAggressiveness(),
       oauthEnabled: oauthConfigured()
     });
     return true;
@@ -19058,7 +19338,7 @@ async function dispatchAssistantRoute(req, res, ctx) {
       sendJson3(res, { error: "value must be a number in [0, 1]" }, 400);
       return true;
     }
-    await storeSecret(db, AGGRESSIVENESS_KIND, "Inference aggressiveness", String(value));
+    writePreferences({ ...readPreferences(), aggressiveness: value });
     sendJson3(res, { ok: true, value });
     return true;
   }
@@ -19071,17 +19351,11 @@ async function dispatchAssistantRoute(req, res, ctx) {
       return true;
     }
     const provider = typeof body.provider === "string" ? body.provider : "auto";
-    if (!["auto", "openai", "elevenlabs"].includes(provider)) {
+    if (provider !== "auto" && provider !== "openai" && provider !== "elevenlabs") {
       sendJson3(res, { error: `unknown provider: ${provider}` }, 400);
       return true;
     }
-    if (provider === "auto") {
-      for (const row of await liveSecretsOfKind(db, STT_PROVIDER_KIND)) {
-        await db.update("secrets", row.id, { deleted_at: (/* @__PURE__ */ new Date()).toISOString() });
-      }
-    } else {
-      await storeSecret(db, STT_PROVIDER_KIND, "Voice provider preference", provider);
-    }
+    writePreferences({ ...readPreferences(), voice_provider: provider });
     sendJson3(res, { ok: true });
     return true;
   }
@@ -19264,6 +19538,24 @@ var REGISTRY = [
     category: "read",
     args: obj({ table: str("Table name."), id: str("Primary key of the row.") }, ["table", "id"])
   },
+  {
+    name: "search",
+    description: "Full-text search across the user tables for a query string. Returns matching rows grouped by table (id + snippet). Use this to find records by their content when you do not know the table or id up front.",
+    mutates: false,
+    category: "read",
+    args: obj(
+      {
+        query: str("Text to search for."),
+        tables: {
+          type: "array",
+          description: "Restrict to these tables (optional; defaults to all searchable tables).",
+          items: { type: "string" }
+        },
+        limit: { type: "integer", description: "Max hits per table (optional, default 8)." }
+      },
+      ["query"]
+    )
+  },
   {
     name: "get_history",
     description: "Fetch recent audit-log entries, optionally filtered to one table.",
@@ -19385,6 +19677,26 @@ var REGISTRY = [
       ["table_a", "table_b"]
     )
   },
+  {
+    name: "delete_entity",
+    description: "Soft-delete a user table (reversible \u2014 the rows are kept and it can be restored from history). Guarded: an EMPTY table is removed immediately; a NON-EMPTY table is NOT deleted until you say what to do with its data \u2014 the tool returns the row count and you must ask the user, then call again with resolution='delete_data' (soft-delete the rows too) or move_to=<table> (move the rows into another table first). Never deletes built-in tables.",
+    mutates: true,
+    category: "schema",
+    args: obj(
+      {
+        name: str("Table to delete."),
+        resolution: {
+          type: "string",
+          enum: ["delete_data"],
+          description: 'For a NON-empty table: "delete_data" soft-deletes its rows too (reversible). Omit to be told the row count and asked first.'
+        },
+        move_to: str(
+          "For a NON-empty table: move its rows into this existing table, then delete the emptied table."
+        )
+      },
+      ["name"]
+    )
+  },
   {
     name: "rename_entity",
     description: "Rename an existing entity (table).",
@@ -19501,6 +19813,7 @@ var DISPATCHABLE = /* @__PURE__ */ new Set([
   "list_entities",
   "list_rows",
   "get_row",
+  "search",
   "get_history",
   "create_row",
   "update_row",
@@ -19509,6 +19822,7 @@ var DISPATCHABLE = /* @__PURE__ */ new Set([
   "unlink",
   "create_entity",
   "create_relationship",
+  "delete_entity",
   "undo",
   "redo",
   "revert"
@@ -19590,6 +19904,20 @@ async function executeFunction(ctx, name, args) {
         if (row === null) return { ok: false, error: "Row not found" };
         return { ok: true, result: redactRow(row, await secretColumnsFor(ctx.db, table)) };
       }
+      case "search": {
+        const query = requireString3(args.query, "query");
+        let tables = [...ctx.validTables];
+        if (Array.isArray(args.tables)) {
+          const want = new Set(args.tables.filter((t) => typeof t === "string"));
+          tables = tables.filter((t) => want.has(t));
+        }
+        const limit = typeof args.limit === "number" ? args.limit : 8;
+        const result = await fullTextSearch(ctx.db.adapter, tables, {
+          query,
+          limitPerTable: limit
+        });
+        return { ok: true, result };
+      }
       case "create_row": {
         const table = requireTable(args.table, ctx.validTables);
         if (!args.values || typeof args.values !== "object") {
@@ -19663,6 +19991,23 @@ async function executeFunction(ctx, name, args) {
           }
         };
       }
+      case "delete_entity": {
+        if (!ctx.deleteEntity) {
+          return { ok: false, error: "Deleting tables is not available in this context" };
+        }
+        const target = requireString3(args.name, "name");
+        let resolution;
+        if (args.resolution === "delete_data") resolution = "delete_data";
+        else if (typeof args.move_to === "string" && args.move_to) {
+          resolution = { move_to: args.move_to };
+        }
+        const outcome = await ctx.deleteEntity(target, resolution);
+        if ("needsResolution" in outcome) return { ok: true, result: outcome };
+        if (!outcome.ok) return { ok: false, error: outcome.error };
+        ctx.validTables.delete(target);
+        ctx.junctionTables.delete(target);
+        return { ok: true, result: outcome };
+      }
       case "get_history": {
         const limit = typeof args.limit === "number" ? args.limit : 50;
         const rows = await ctx.db.query("_lattice_gui_audit", { limit });
@@ -19732,6 +20077,7 @@ var BASE_SYSTEM_PROMPT = [
   "- To relate two tables (link their rows), call create_relationship(table_a, table_b) to get a junction + its two foreign-key columns, then `link` each pair using those columns. If the junction already exists, just `link`.",
   "- Use the exact table names from the schema (or one you just created) \u2014 never guess a name for a table that should already exist.",
   "- Prefer reading (list_rows, get_row) before writing.",
+  '- When you point the user at a specific row/object \u2014 especially if they ask you to "link", "open", or "show" it \u2014 make it clickable with an INLINE link in this exact form: [short label](lattice://<table>/<id>), using the real table name and the row id from your tool results (e.g. [the offer contract](lattice://contracts/9b7c60f0-fbc2-4f87-a550-c59e3c5d761f)). It renders as a pill that opens that object in the GUI. Only link ids you actually retrieved \u2014 never invent one \u2014 and prefer the user-facing record (the contract/person/etc. row) over an internal `files` id.',
   "- Attached files are rows in the `files` table; a file's full text content (CSV, document, etc.) is in its `extracted_text` column. To work from an attached file, read the relevant `files` row(s) and parse `extracted_text` \u2014 never guess a file's contents.",
   '- A tool result that contains "error" means the call FAILED. Do NOT claim success or proceed as if it returned data \u2014 read the error, correct your arguments, and retry.',
   "- For bulk work, emit several tool calls in one turn instead of one at a time. Every change is recorded in version history and can be undone.",
@@ -19878,9 +20224,193 @@ function createAnthropicClient(auth) {
           toolUses.push({ id: tu.id, name: tu.name, input: tu.input });
         }
       }
-      return { stopReason: final.stop_reason ?? "end_turn", text, toolUses };
-    }
-  };
+      return { stopReason: final.stop_reason ?? "end_turn", text, toolUses };
+    }
+  };
+}
+
+// src/ai/llm-client.ts
+import { createRequire as createRequire4 } from "module";
+var DEFAULT_MODEL2 = "claude-haiku-4-5";
+
+// src/ai/summarize.ts
+function parseMatches(raw, catalog) {
+  const fence = /```json\s*([\s\S]*?)```/i.exec(raw);
+  const body = fence ? fence[1] : raw;
+  let parsed;
+  try {
+    parsed = JSON.parse((body ?? "").trim());
+  } catch {
+    return [];
+  }
+  if (!Array.isArray(parsed)) return [];
+  const valid = new Map(catalog.map((e) => [e.table, new Set(e.records.map((r) => r.id))]));
+  const out = [];
+  for (const item of parsed) {
+    if (!item || typeof item !== "object") continue;
+    const table = item.table;
+    const id = item.id;
+    if (typeof table === "string" && typeof id === "string" && valid.get(table)?.has(id)) {
+      out.push({ table, id });
+    }
+  }
+  return out;
+}
+var ID_RE = /^[a-z][a-z0-9_]*$/;
+var RESERVED_COLS = /* @__PURE__ */ new Set(["id", "deleted_at", "created_at", "updated_at"]);
+function parseObjects(raw) {
+  const fence = /```json\s*([\s\S]*?)```/i.exec(raw);
+  let parsed;
+  try {
+    parsed = JSON.parse((fence ? fence[1] : raw)?.trim() ?? "");
+  } catch {
+    return [];
+  }
+  if (!Array.isArray(parsed)) return [];
+  const out = [];
+  for (const item of parsed) {
+    if (!item || typeof item !== "object") continue;
+    const o = item;
+    const entity = typeof o.entity === "string" ? o.entity.trim().toLowerCase() : "";
+    const label = typeof o.label === "string" ? o.label.trim() : "";
+    if (!ID_RE.test(entity) || !label) continue;
+    let valuesRaw = {};
+    if (Array.isArray(o.values) && Array.isArray(o.columns)) {
+      o.columns.forEach((c, i) => {
+        valuesRaw[String(c)] = o.values[i];
+      });
+    } else if (o.values && typeof o.values === "object") {
+      valuesRaw = o.values;
+    }
+    const values = {};
+    for (const [k, v] of Object.entries(valuesRaw)) {
+      const col = k.trim().toLowerCase();
+      if (ID_RE.test(col) && !RESERVED_COLS.has(col) && (typeof v === "string" || typeof v === "number")) {
+        values[col] = String(v).slice(0, 2e3);
+      }
+    }
+    if (Object.keys(values).length === 0) continue;
+    const cols = Array.isArray(o.columns) ? o.columns.map((c) => String(c).trim().toLowerCase()).filter((c) => ID_RE.test(c) && !RESERVED_COLS.has(c)) : [];
+    const columns = Array.from(/* @__PURE__ */ new Set([...cols, ...Object.keys(values)])).slice(0, 8);
+    out.push({ entity, isNew: o.isNew === true, columns, values, label });
+    if (out.length >= 3) break;
+  }
+  return out;
+}
+
+// src/gui/ai/summarize.ts
+var SUMMARY_SYSTEM = 'You write a one or two sentence factual description of a document for a knowledge base, focused on what it is and what it contains. No preamble, no "This document". Plain text only.';
+async function summarizeText(client, text, name, temperature) {
+  const turn = await client.runTurn({
+    model: DEFAULT_MODEL,
+    system: SUMMARY_SYSTEM,
+    messages: [
+      {
+        role: "user",
+        content: `File name: ${name}
+
+Content:
+${text.slice(0, 12e3)}
+
+Describe it in 1-2 sentences.`
+      }
+    ],
+    tools: [],
+    ...temperature !== void 0 ? { temperature } : {},
+    onText: () => void 0
+  });
+  return turn.text.trim();
+}
+var TITLE_SYSTEM = 'You write a short, specific title (3-5 words, Title Case) for a chat conversation based on its opening exchange \u2014 capture the concrete topic, e.g. "Adding New Notes About Cheese" or "Q3 Invoice Cleanup". No quotes, no trailing punctuation, no preamble. Plain text only.';
+async function generateThreadTitle(client, userMessage, assistantReply) {
+  const turn = await client.runTurn({
+    model: DEFAULT_MODEL,
+    system: TITLE_SYSTEM,
+    messages: [
+      {
+        role: "user",
+        content: `First user message:
+${userMessage.slice(0, 2e3)}
+
+Assistant reply:
+${assistantReply.slice(0, 2e3)}
+
+Title (3-5 words):`
+      }
+    ],
+    tools: [],
+    onText: () => void 0
+  });
+  return turn.text.trim().replace(/^["'`]+|["'`]+$/g, "").replace(/[.\s]+$/, "").slice(0, 60);
+}
+var CLASSIFY_SYSTEM = 'You decide which existing records a newly added document relates to. You are given a catalog of record types (with descriptions) and their records. Return ONLY a JSON array of {"table","id"} objects for records the document clearly relates to \u2014 an empty array if none. Output the JSON in a ```json fenced block and nothing else.';
+function buildCatalogBlock(catalog) {
+  return catalog.map((e) => {
+    const head = `## ${e.table}${e.description ? ` \u2014 ${e.description}` : ""}`;
+    const rows = e.records.map((r) => `- id=${r.id} | ${r.label}`).join("\n");
+    return `${head}
+${rows || "- (no records)"}`;
+  }).join("\n\n");
+}
+async function classifyLinks(client, text, name, catalog, temperature) {
+  if (catalog.length === 0 || text.trim().length === 0) return [];
+  let captured = "";
+  const liberal = temperature !== void 0 && temperature >= 0.66 ? " Include records that are strongly implied even without an exact name match." : temperature !== void 0 && temperature <= 0.33 ? " Only include records that are explicitly and unambiguously named." : "";
+  const turn = await client.runTurn({
+    model: DEFAULT_MODEL,
+    system: CLASSIFY_SYSTEM,
+    messages: [
+      {
+        role: "user",
+        content: `# Catalog
+${buildCatalogBlock(catalog)}
+
+# Document: ${name}
+
+${text.slice(0, 12e3)}
+
+# Task
+Return the JSON array of matching {table,id}.${liberal}`
+      }
+    ],
+    tools: [],
+    ...temperature !== void 0 ? { temperature } : {},
+    onText: (d) => {
+      captured += d;
+    }
+  });
+  return parseMatches(turn.text || captured, catalog);
+}
+var EXTRACT_SYSTEM = 'You build a knowledge base by extracting the key structured objects a document is ABOUT \u2014 e.g. an invoice, a person, a project, a contract, a meeting. You are given the existing entity types (tables) and their columns. For each salient object: reuse an existing entity when one clearly fits; otherwise propose a NEW entity with a short snake_case PLURAL name and 2-6 simple snake_case columns. Extract only objects the document is genuinely about \u2014 prefer 1-3, never more than 3, and never invent data not in the document. Return ONLY a JSON array of objects {"entity","isNew","columns","values","label"}, where "values" is an OBJECT mapping each column name to its value \u2014 e.g. {"invoice_number":"INV-114","total":"6400"} \u2014 in a ```json fenced block.';
+function buildSchemaBlock(existing) {
+  if (existing.length === 0) return "(no entities yet \u2014 propose new ones)";
+  return existing.map((e) => `## ${e.table}
+columns: ${e.columns.join(", ")}`).join("\n\n");
+}
+async function extractObjects(client, text, name, existing, temperature) {
+  if (text.trim().length === 0) return [];
+  const turn = await client.runTurn({
+    model: DEFAULT_MODEL,
+    system: EXTRACT_SYSTEM,
+    messages: [
+      {
+        role: "user",
+        content: `# Existing entities
+${buildSchemaBlock(existing)}
+
+# Document: ${name}
+
+${text.slice(0, 12e3)}
+
+# Task
+Return the JSON array of objects to create.`
+      }
+    ],
+    tools: [],
+    ...temperature !== void 0 ? { temperature } : {},
+    onText: () => void 0
+  });
+  return parseObjects(turn.text);
 }
 
 // src/gui/ai/sse.ts
@@ -20043,15 +20573,14 @@ var REHYDRATE_MAX_BYTES = 24e3;
 function rehydrateEnabled() {
   return process.env.LATTICE_CHAT_REHYDRATE !== "false";
 }
-async function persistMessage(db, threadId, role, text, turns) {
+async function persistMessage(db, threadId, role, text, turns, startedAt) {
+  const payload = turns && turns.length > 0 ? { text, turns } : { text };
+  if (startedAt) payload.startedAt = startedAt;
   await db.insert("chat_messages", {
     id: crypto.randomUUID(),
     thread_id: threadId,
     role,
-    // `text` stays for backward-compat (old clients + the model-history replay);
-    // `turns` carries the rich structure so a reloaded conversation shows the
-    // same text bubbles + tool pills as the live stream, not one text wall.
-    content_json: JSON.stringify(turns && turns.length > 0 ? { text, turns } : { text }),
+    content_json: JSON.stringify(payload),
     source: role === "user" ? "gui" : "ai"
   });
 }
@@ -20073,11 +20602,17 @@ async function dispatchChatRoute(req, res, ctx) {
     const messages = rows.filter((r) => r.thread_id === threadId2 && !r.deleted_at).map((r) => {
       let text = "";
       let turns2;
+      let startedAt;
       try {
         const parsed = JSON.parse(asStr(r.content_json, "{}"));
         text = parsed.text ?? "";
+        if (typeof parsed.startedAt === "string") startedAt = parsed.startedAt;
         if (Array.isArray(parsed.turns)) {
-          turns2 = parsed.turns.map((t) => ({ text: t.text, tools: t.tools }));
+          turns2 = parsed.turns.map((t) => ({
+            text: t.text,
+            tools: t.tools,
+            ...t.events ? { events: t.events } : {}
+          }));
         }
       } catch {
       }
@@ -20085,6 +20620,7 @@ async function dispatchChatRoute(req, res, ctx) {
         role: asStr(r.role),
         text,
         ...turns2 ? { turns: turns2 } : {},
+        ...startedAt ? { startedAt } : {},
         created_at: asStr(r.created_at)
       };
     }).sort((a, b) => a.created_at.localeCompare(b.created_at));
@@ -20138,13 +20674,27 @@ async function dispatchChatRoute(req, res, ctx) {
     junctionTables: new Set([...ctx.junctionTables].filter((t) => !ASSISTANT_HIDDEN_TABLES.has(t))),
     softDeletable: ctx.softDeletable,
     ...ctx.createEntity ? { createEntity: ctx.createEntity } : {},
-    ...ctx.createJunction ? { createJunction: ctx.createJunction } : {}
+    ...ctx.createJunction ? { createJunction: ctx.createJunction } : {},
+    ...ctx.deleteEntity ? { deleteEntity: ctx.deleteEntity } : {}
   };
+  const turnStartedAt = (/* @__PURE__ */ new Date()).toISOString();
   let assistantText = "";
   const turns = [];
+  const unsubscribeFeed = ctx.feed.subscribe((fe) => {
+    if (fe.source !== "ai") return;
+    const cur = turns[turns.length - 1];
+    if (cur)
+      cur.events.push({
+        op: fe.op,
+        table: fe.table,
+        rowId: fe.rowId,
+        summary: fe.summary ?? "",
+        ts: fe.ts
+      });
+  });
   try {
     const client = createAnthropicClient(auth);
-    const temperature = aggressivenessToTemperature(await getAggressiveness(ctx.db));
+    const temperature = aggressivenessToTemperature(getAggressiveness());
     for await (const ev of runChat({
       client,
       dispatch,
@@ -20157,7 +20707,7 @@ async function dispatchChatRoute(req, res, ctx) {
       }
     })) {
       if (ev.type === "assistant_message_start") {
-        turns.push({ text: "", tools: [], toolCalls: [] });
+        turns.push({ text: "", tools: [], events: [], toolCalls: [] });
       } else if (ev.type === "text_delta") {
         assistantText += ev.delta;
         const cur = turns[turns.length - 1];
@@ -20180,19 +20730,39 @@ async function dispatchChatRoute(req, res, ctx) {
       res.write(formatSseFrame({ type: "done" }));
     } catch {
     }
+  } finally {
+    unsubscribeFeed();
   }
   res.end();
   if (threadId) {
     const cleanTurns = turns.map((t) => ({
       text: t.text,
       tools: t.tools.map((x) => ({ name: x.name, isError: x.isError })),
+      ...t.events.length > 0 ? { events: t.events } : {},
       ...t.toolCalls.length > 0 ? { toolCalls: t.toolCalls } : {}
-    })).filter((t) => t.text.length > 0 || t.tools.length > 0);
+    })).filter((t) => t.text.length > 0 || t.tools.length > 0 || (t.events?.length ?? 0) > 0);
     try {
-      await persistMessage(ctx.db, threadId, "assistant", assistantText, cleanTurns);
+      await persistMessage(ctx.db, threadId, "assistant", assistantText, cleanTurns, turnStartedAt);
     } catch (e) {
       console.warn("[chat] persist assistant message failed:", e.message);
     }
+    const createdNew = threadId !== requestedThread;
+    if (createdNew && assistantText.trim()) {
+      try {
+        const placeholder = message.slice(0, 60) || "Chat";
+        const cur = await ctx.db.get("chat_threads", threadId);
+        if (cur && (cur.title ?? "") === placeholder) {
+          const title = await generateThreadTitle(
+            createAnthropicClient(auth),
+            message,
+            assistantText
+          );
+          if (title) await ctx.db.update("chat_threads", threadId, { title });
+        }
+      } catch (e) {
+        console.warn("[chat] thread title generation failed:", e.message);
+      }
+    }
   }
   return true;
 }
@@ -20344,12 +20914,6 @@ function describe(text, mime, name) {
 // src/ai/vision.ts
 import { createRequire as createRequire5 } from "module";
 import { readFile as readFile2 } from "fs/promises";
-
-// src/ai/llm-client.ts
-import { createRequire as createRequire4 } from "module";
-var DEFAULT_MODEL2 = "claude-haiku-4-5";
-
-// src/ai/vision.ts
 var DEFAULT_PROMPT = "Describe this image for a knowledge base in 2-4 factual sentences: what it shows, any visible text, and notable details. No preamble.";
 var MAX_DIM = 1568;
 async function describeImage(auth, path2, opts = {}) {
@@ -20709,164 +21273,6 @@ async function attachBlob(srcPath, latticeRoot) {
   };
 }
 
-// src/ai/summarize.ts
-function parseMatches(raw, catalog) {
-  const fence = /```json\s*([\s\S]*?)```/i.exec(raw);
-  const body = fence ? fence[1] : raw;
-  let parsed;
-  try {
-    parsed = JSON.parse((body ?? "").trim());
-  } catch {
-    return [];
-  }
-  if (!Array.isArray(parsed)) return [];
-  const valid = new Map(catalog.map((e) => [e.table, new Set(e.records.map((r) => r.id))]));
-  const out = [];
-  for (const item of parsed) {
-    if (!item || typeof item !== "object") continue;
-    const table = item.table;
-    const id = item.id;
-    if (typeof table === "string" && typeof id === "string" && valid.get(table)?.has(id)) {
-      out.push({ table, id });
-    }
-  }
-  return out;
-}
-var ID_RE = /^[a-z][a-z0-9_]*$/;
-var RESERVED_COLS = /* @__PURE__ */ new Set(["id", "deleted_at", "created_at", "updated_at"]);
-function parseObjects(raw) {
-  const fence = /```json\s*([\s\S]*?)```/i.exec(raw);
-  let parsed;
-  try {
-    parsed = JSON.parse((fence ? fence[1] : raw)?.trim() ?? "");
-  } catch {
-    return [];
-  }
-  if (!Array.isArray(parsed)) return [];
-  const out = [];
-  for (const item of parsed) {
-    if (!item || typeof item !== "object") continue;
-    const o = item;
-    const entity = typeof o.entity === "string" ? o.entity.trim().toLowerCase() : "";
-    const label = typeof o.label === "string" ? o.label.trim() : "";
-    if (!ID_RE.test(entity) || !label) continue;
-    let valuesRaw = {};
-    if (Array.isArray(o.values) && Array.isArray(o.columns)) {
-      o.columns.forEach((c, i) => {
-        valuesRaw[String(c)] = o.values[i];
-      });
-    } else if (o.values && typeof o.values === "object") {
-      valuesRaw = o.values;
-    }
-    const values = {};
-    for (const [k, v] of Object.entries(valuesRaw)) {
-      const col = k.trim().toLowerCase();
-      if (ID_RE.test(col) && !RESERVED_COLS.has(col) && (typeof v === "string" || typeof v === "number")) {
-        values[col] = String(v).slice(0, 2e3);
-      }
-    }
-    if (Object.keys(values).length === 0) continue;
-    const cols = Array.isArray(o.columns) ? o.columns.map((c) => String(c).trim().toLowerCase()).filter((c) => ID_RE.test(c) && !RESERVED_COLS.has(c)) : [];
-    const columns = Array.from(/* @__PURE__ */ new Set([...cols, ...Object.keys(values)])).slice(0, 8);
-    out.push({ entity, isNew: o.isNew === true, columns, values, label });
-    if (out.length >= 3) break;
-  }
-  return out;
-}
-
-// src/gui/ai/summarize.ts
-var SUMMARY_SYSTEM = 'You write a one or two sentence factual description of a document for a knowledge base, focused on what it is and what it contains. No preamble, no "This document". Plain text only.';
-async function summarizeText(client, text, name, temperature) {
-  const turn = await client.runTurn({
-    model: DEFAULT_MODEL,
-    system: SUMMARY_SYSTEM,
-    messages: [
-      {
-        role: "user",
-        content: `File name: ${name}
-
-Content:
-${text.slice(0, 12e3)}
-
-Describe it in 1-2 sentences.`
-      }
-    ],
-    tools: [],
-    ...temperature !== void 0 ? { temperature } : {},
-    onText: () => void 0
-  });
-  return turn.text.trim();
-}
-var CLASSIFY_SYSTEM = 'You decide which existing records a newly added document relates to. You are given a catalog of record types (with descriptions) and their records. Return ONLY a JSON array of {"table","id"} objects for records the document clearly relates to \u2014 an empty array if none. Output the JSON in a ```json fenced block and nothing else.';
-function buildCatalogBlock(catalog) {
-  return catalog.map((e) => {
-    const head = `## ${e.table}${e.description ? ` \u2014 ${e.description}` : ""}`;
-    const rows = e.records.map((r) => `- id=${r.id} | ${r.label}`).join("\n");
-    return `${head}
-${rows || "- (no records)"}`;
-  }).join("\n\n");
-}
-async function classifyLinks(client, text, name, catalog, temperature) {
-  if (catalog.length === 0 || text.trim().length === 0) return [];
-  let captured = "";
-  const liberal = temperature !== void 0 && temperature >= 0.66 ? " Include records that are strongly implied even without an exact name match." : temperature !== void 0 && temperature <= 0.33 ? " Only include records that are explicitly and unambiguously named." : "";
-  const turn = await client.runTurn({
-    model: DEFAULT_MODEL,
-    system: CLASSIFY_SYSTEM,
-    messages: [
-      {
-        role: "user",
-        content: `# Catalog
-${buildCatalogBlock(catalog)}
-
-# Document: ${name}
-
-${text.slice(0, 12e3)}
-
-# Task
-Return the JSON array of matching {table,id}.${liberal}`
-      }
-    ],
-    tools: [],
-    ...temperature !== void 0 ? { temperature } : {},
-    onText: (d) => {
-      captured += d;
-    }
-  });
-  return parseMatches(turn.text || captured, catalog);
-}
-var EXTRACT_SYSTEM = 'You build a knowledge base by extracting the key structured objects a document is ABOUT \u2014 e.g. an invoice, a person, a project, a contract, a meeting. You are given the existing entity types (tables) and their columns. For each salient object: reuse an existing entity when one clearly fits; otherwise propose a NEW entity with a short snake_case PLURAL name and 2-6 simple snake_case columns. Extract only objects the document is genuinely about \u2014 prefer 1-3, never more than 3, and never invent data not in the document. Return ONLY a JSON array of objects {"entity","isNew","columns","values","label"}, where "values" is an OBJECT mapping each column name to its value \u2014 e.g. {"invoice_number":"INV-114","total":"6400"} \u2014 in a ```json fenced block.';
-function buildSchemaBlock(existing) {
-  if (existing.length === 0) return "(no entities yet \u2014 propose new ones)";
-  return existing.map((e) => `## ${e.table}
-columns: ${e.columns.join(", ")}`).join("\n\n");
-}
-async function extractObjects(client, text, name, existing, temperature) {
-  if (text.trim().length === 0) return [];
-  const turn = await client.runTurn({
-    model: DEFAULT_MODEL,
-    system: EXTRACT_SYSTEM,
-    messages: [
-      {
-        role: "user",
-        content: `# Existing entities
-${buildSchemaBlock(existing)}
-
-# Document: ${name}
-
-${text.slice(0, 12e3)}
-
-# Task
-Return the JSON array of objects to create.`
-      }
-    ],
-    tools: [],
-    ...temperature !== void 0 ? { temperature } : {},
-    onText: () => void 0
-  });
-  return parseObjects(turn.text);
-}
-
 // src/gui/ingest-routes.ts
 var MIME_BY_EXT = {
   ".pdf": "application/pdf",
@@ -21107,6 +21513,37 @@ async function enrichWithLlm(mctx, db, fileId, text, name, junctions, descriptio
     return [];
   }
 }
+async function enrichOrFail(mctx, db, fileId, text, name, ctx, res) {
+  try {
+    return await enrichWithLlm(
+      mctx,
+      db,
+      fileId,
+      text,
+      name,
+      ctx.fileJunctions,
+      ctx.entityDescriptions,
+      ctx.createJunction,
+      ctx.aggressiveness,
+      ctx.createEntity
+    );
+  } catch (e) {
+    const err = e;
+    console.error(
+      `[ingest] enrichment failed for file ${fileId}: ${err.message}
+${err.stack ?? ""}`
+    );
+    await updateRow(mctx, "files", fileId, { extraction_status: "enrichment_failed" }).catch(
+      (e2) => {
+        console.error(
+          `[ingest] could not mark enrichment_failed on ${fileId}: ${e2.message}`
+        );
+      }
+    );
+    sendJson5(res, { id: fileId, extraction_status: "enrichment_failed", error: err.message }, 201);
+    return null;
+  }
+}
 async function extractImage(db, path2, mime) {
   if (!mime.startsWith("image/")) return null;
   const auth = await resolveClaudeAuth(db);
@@ -21214,18 +21651,12 @@ async function dispatchIngestRoute(req, res, ctx) {
       extraction_status: result.skip ? "skipped" : "extracted",
       ...blob ? { ref_kind: "blob", blob_path: blob.blob_path, sha256: blob.sha256 } : {}
     });
-    const suggestedLinks = result.skip ? [] : await enrichWithLlm(
-      mctx,
-      ctx.db,
-      id2,
-      result.text,
-      name2,
-      ctx.fileJunctions,
-      ctx.entityDescriptions,
-      ctx.createJunction,
-      ctx.aggressiveness,
-      ctx.createEntity
-    );
+    let suggestedLinks = [];
+    if (!result.skip) {
+      const links = await enrichOrFail(mctx, ctx.db, id2, result.text, name2, ctx, res);
+      if (links === null) return true;
+      suggestedLinks = links;
+    }
     sendJson5(
       res,
       { id: id2, extraction_status: result.skip ? "skipped" : "extracted", suggestedLinks },
@@ -21272,18 +21703,8 @@ async function dispatchIngestRoute(req, res, ctx) {
       extraction_status: "extracted",
       ...sourceUrl ? { ref_kind: "cloud_ref", ref_uri: sourceUrl, ref_provider: "web" } : {}
     });
-    const suggestedLinks = await enrichWithLlm(
-      mctx,
-      ctx.db,
-      id2,
-      content,
-      title,
-      ctx.fileJunctions,
-      ctx.entityDescriptions,
-      ctx.createJunction,
-      ctx.aggressiveness,
-      ctx.createEntity
-    );
+    const suggestedLinks = await enrichOrFail(mctx, ctx.db, id2, content, title, ctx, res);
+    if (suggestedLinks === null) return true;
     sendJson5(res, { id: id2, extraction_status: "extracted", suggestedLinks }, 201);
     return true;
   }
@@ -21340,11 +21761,16 @@ async function dispatchIngestRoute(req, res, ctx) {
       201
     );
   } catch (e) {
+    const err = e;
+    console.error(
+      `[ingest] extraction/enrichment failed for file ${id}: ${err.message}
+${err.stack ?? ""}`
+    );
     await updateRow(mctx, "files", id, {
       extraction_status: "failed",
-      description: `Extraction failed: ${e.message}`
+      description: `Extraction failed: ${err.message}`
     });
-    sendJson5(res, { id, extraction_status: "failed", error: e.message }, 201);
+    sendJson5(res, { id, extraction_status: "failed", error: err.message }, 201);
   }
   return true;
 }
@@ -21649,6 +22075,7 @@ async function openConfig(configPath, outputDir, autoRender = false) {
   await db.init();
   await syncUserIdentityRow(db);
   await adoptNativeEntities(db);
+  await retireLegacyPreferenceSecrets(db);
   const validTables = new Set(parsed.tables.map((t) => t.name));
   for (const name of db.getRegisteredTableNames()) {
     if (name.startsWith("__lattice_") || name.startsWith("_lattice_")) continue;
@@ -22134,34 +22561,6 @@ data: ${JSON.stringify(data)}
             } catch {
             }
           };
-          try {
-            const auditBackfill = await active.db.query("_lattice_gui_audit", {
-              orderBy: "ts",
-              orderDir: "desc",
-              limit: 20
-            });
-            for (const a of auditBackfill.reverse()) {
-              const json = a.operation === "delete" ? a.before_json : a.after_json;
-              let labelRow;
-              if (json) {
-                try {
-                  labelRow = JSON.parse(json);
-                } catch {
-                  labelRow = void 0;
-                }
-              }
-              writeFeed({
-                seq: 0,
-                table: a.table_name,
-                op: a.operation,
-                rowId: a.row_id,
-                source: "gui",
-                ts: a.ts,
-                summary: feedSummary(a.operation, a.table_name, labelRow)
-              });
-            }
-          } catch {
-          }
           const keepalive = setInterval(() => {
             try {
               res.write(`: keepalive
@@ -22236,7 +22635,7 @@ data: ${JSON.stringify(data)}
           }
           const limit = Math.min(50, Math.max(1, Number(url2.searchParams.get("limit") ?? "8")));
           const requested = url2.searchParams.get("tables");
-          let tables = [...active.validTables];
+          let tables = [...active.validTables].filter((t) => !ASSISTANT_HIDDEN_TABLES.has(t));
           if (requested) {
             const want = new Set(
               requested.split(",").map((t) => t.trim()).filter(Boolean)
@@ -22420,20 +22819,7 @@ data: ${JSON.stringify(data)}
             );
             return;
           }
-          const doc = loadConfigDoc(active.configPath);
-          const deletedEntityDef = doc.toJS().entities?.[name];
-          doc.deleteIn(["entities", name]);
-          saveConfigDoc(active.configPath, doc);
-          active = await reopenSameConfig(active, autoRender);
-          await recordSchemaOp(
-            active,
-            "schema.delete_entity",
-            name,
-            { entity: name, entityDef: deletedEntityDef },
-            null,
-            `Deleted table ${name}`,
-            sessionId
-          );
+          await softDeleteUserEntity(active, name, sessionId);
           sendJson(res, { ok: true });
           return;
         }
@@ -23097,6 +23483,11 @@ data: ${JSON.stringify(data)}
             ) : `SELECT name FROM sqlite_master WHERE type='table' AND name LIKE '\\_%' ESCAPE '\\' ORDER BY name`;
             rows = await adapter.allAsync(listSql);
           }
+          for (const n of NATIVE_INTERNAL_NAMES) {
+            if (active.validTables.has(n) && !rows.some((r) => r.name === n)) {
+              rows.push({ name: n });
+            }
+          }
           const tables = [];
           for (const r of rows) {
             const cols = await active.db.introspectColumns(r.name);
@@ -23109,7 +23500,7 @@ data: ${JSON.stringify(data)}
         if (method === "GET" && /^\/api\/system-tables\/[^/]+\/rows$/.test(pathname)) {
           const parts = pathname.split("/");
           const sysTable = decodeURIComponent(parts[3] ?? "");
-          if (!/^_+[a-zA-Z0-9_]+$/.test(sysTable)) {
+          if (!/^_+[a-zA-Z0-9_]+$/.test(sysTable) && !isInternalNativeEntity(sysTable)) {
             sendJson(res, { error: "Not a system table" }, 400);
             return;
           }
@@ -23757,6 +24148,9 @@ data: ${JSON.stringify(data)}
             // audited, no-reopen primitives the Context Constructor uses.
             createEntity: (name, columns) => createUserEntity(active, name, columns, sessionId),
             createJunction: (a, b) => createUserJunction(active, a, b, sessionId),
+            // Guarded, reversible table delete — empty tables go immediately;
+            // non-empty ones come back as `needsResolution` so the assistant asks.
+            deleteEntity: (name, resolution) => aiDeleteEntity(active, name, resolution, sessionId),
             pathname,
             method
           });
@@ -23771,7 +24165,7 @@ data: ${JSON.stringify(data)}
             entityDescriptions: entityDescriptions(active.configPath, active.outputDir),
             createJunction: (otherTable) => createFileJunction(active, otherTable, sessionId),
             createEntity: (entity, columns) => createUserEntity(active, entity, columns, sessionId),
-            aggressiveness: await getAggressiveness(active.db),
+            aggressiveness: getAggressiveness(),
             latticeRoot: dirname11(active.configPath),
             pathname,
             method
@@ -23809,7 +24203,12 @@ data: ${JSON.stringify(data)}
         }
         sendJson(res, { error: "Not found" }, 404);
       } catch (err) {
-        sendJson(res, { error: err.message }, 500);
+        const e = err;
+        console.error(
+          `[gui] ${req.method ?? "?"} ${req.url ?? "?"} failed: ${e.message}
+${e.stack ?? ""}`
+        );
+        sendJson(res, { error: e.message }, 500);
       }
     })();
   });