n2n-nexus 0.4.2 → 0.7.0

package/build/storage/sqlite.js

@@ -1,5 +1,4 @@
 import Database from "better-sqlite3";
-import { createRequire } from "module";
 import { NexusPaths } from "./paths.js";
 let db = null;
 /**
@@ -50,6 +49,46 @@ CREATE INDEX IF NOT EXISTS idx_messages_timestamp ON messages(timestamp);
 CREATE INDEX IF NOT EXISTS idx_decisions_meeting ON decisions(meeting_id);
 CREATE INDEX IF NOT EXISTS idx_meetings_status ON meetings(status);
 
+-- Global (non-meeting) chat stream
+CREATE TABLE IF NOT EXISTS global_messages (
+    id INTEGER PRIMARY KEY AUTOINCREMENT,
+    sender TEXT NOT NULL,
+    text TEXT NOT NULL,
+    category TEXT CHECK(category IN ('MEETING_START', 'PROPOSAL', 'DECISION', 'UPDATE', 'CHAT')),
+    timestamp TEXT NOT NULL
+);
+
+-- Audit trail of state changes made through the daemon
+CREATE TABLE IF NOT EXISTS events (
+    id INTEGER PRIMARY KEY AUTOINCREMENT,
+    timestamp TEXT NOT NULL,
+    actor TEXT NOT NULL,
+    action TEXT NOT NULL,
+    target TEXT,
+    detail TEXT
+);
+CREATE INDEX IF NOT EXISTS idx_events_action ON events(action);
+
+-- Tasks managed by assistants
+CREATE TABLE IF NOT EXISTS tasks (
+    id TEXT PRIMARY KEY,
+    status TEXT NOT NULL CHECK(status IN ('pending', 'running', 'completed', 'failed', 'cancelled')) DEFAULT 'pending',
+    progress REAL DEFAULT 0.0 CHECK(progress >= 0.0 AND progress <= 1.0),
+    source_meeting_id TEXT,
+    metadata TEXT,
+    result_uri TEXT,
+    error_message TEXT,
+    created_at TEXT NOT NULL DEFAULT (datetime('now')),
+    updated_at TEXT NOT NULL DEFAULT (datetime('now')),
+    ttl INTEGER,
+    FOREIGN KEY (source_meeting_id) REFERENCES meetings(id) ON DELETE SET NULL
+);
+CREATE INDEX IF NOT EXISTS idx_tasks_status ON tasks(status);
+CREATE INDEX IF NOT EXISTS idx_tasks_meeting ON tasks(source_meeting_id);
+-- updateTask sets updated_at itself in ISO 8601; the old trigger overwrote it
+-- with datetime('now') in a different format, breaking timestamp comparisons.
+DROP TRIGGER IF EXISTS tasks_updated_at;
+
 -- Read cursors table (tracks each IDE's last read message per context)
 CREATE TABLE IF NOT EXISTS read_cursors (
     instance_id TEXT NOT NULL,
@@ -59,6 +98,38 @@ CREATE TABLE IF NOT EXISTS read_cursors (
     updated_at TEXT,
     PRIMARY KEY (instance_id, context_type, context_id)
 );
+
+-- Live MCP connections have separate identities even within one IDE/project.
+CREATE TABLE IF NOT EXISTS sessions (
+    session_id TEXT PRIMARY KEY,
+    instance_id TEXT NOT NULL,
+    name TEXT NOT NULL,
+    client_name TEXT NOT NULL,
+    workspace TEXT NOT NULL,
+    project_id TEXT,
+    inbound TEXT NOT NULL CHECK(inbound IN ('accept', 'refuse')) DEFAULT 'accept',
+    connected INTEGER NOT NULL DEFAULT 1,
+    created_at TEXT NOT NULL,
+    last_seen_at TEXT NOT NULL
+);
+CREATE INDEX IF NOT EXISTS idx_sessions_project ON sessions(project_id);
+
+CREATE TABLE IF NOT EXISTS direct_messages (
+    message_id TEXT PRIMARY KEY,
+    from_session_id TEXT NOT NULL REFERENCES sessions(session_id),
+    to_session_id TEXT NOT NULL REFERENCES sessions(session_id),
+    text TEXT NOT NULL,
+    category TEXT CHECK(category IN ('MEETING_START', 'PROPOSAL', 'DECISION', 'UPDATE', 'CHAT')),
+    reply_to TEXT REFERENCES direct_messages(message_id),
+    status TEXT NOT NULL CHECK(status IN ('accepted', 'fetched', 'acknowledged', 'replied', 'refused', 'expired')),
+    created_at TEXT NOT NULL,
+    expires_at TEXT NOT NULL,
+    fetched_at TEXT,
+    acknowledged_at TEXT,
+    replied_at TEXT,
+    reason TEXT
+);
+CREATE INDEX IF NOT EXISTS idx_direct_messages_inbox ON direct_messages(to_session_id, status);
 `;
 /**
  * Get the database file path
@@ -76,6 +147,7 @@ export function initDatabase() {
     db = new Database(dbPath);
     // Enable WAL mode for better concurrent access
     db.pragma("journal_mode = WAL");
+    db.pragma("foreign_keys = ON");
     // Initialize schema
     db.exec(SCHEMA);
     // Migration: Add initiator column if it doesn't exist (Upgrade from v0.1.7)
@@ -116,26 +188,3 @@ export function closeDatabase() {
         console.error("[Nexus] SQLite database closed");
     }
 }
-export function isSqliteAvailable() {
-    const require = createRequire(import.meta.url);
-    try {
-        // Try to load better-sqlite3
-        require("better-sqlite3");
-        return true;
-    }
-    catch {
-        return false;
-    }
-}
-// Cleanup on process exit
-process.on("exit", () => {
-    closeDatabase();
-});
-process.on("SIGINT", () => {
-    closeDatabase();
-    process.exit(0);
-});
-process.on("SIGTERM", () => {
-    closeDatabase();
-    process.exit(0);
-});

package/build/storage/tasks.js

@@ -6,59 +6,13 @@
  */
 import { getDatabase } from "./sqlite.js";
 import { TASK_CLEANUP_MAX_AGE_MS } from "../constants.js";
+export const TASK_STATUSES = ["pending", "running", "completed", "failed", "cancelled"];
 // Generate unique task ID
 function generateTaskId() {
     const timestamp = new Date().toISOString().replace(/[-:T.Z]/g, "").slice(0, 14);
     const random = Math.random().toString(36).substring(2, 6);
     return `task_${timestamp}_${random}`;
 }
-let initialized = false;
-/**
- * Initialize the tasks table (run migrations)
- */
-export function initTasksTable() {
-    if (initialized)
-        return;
-    const db = getDatabase();
-    const TASKS_SCHEMA = `
-    CREATE TABLE IF NOT EXISTS tasks (
-        id TEXT PRIMARY KEY,
-        status TEXT NOT NULL CHECK(status IN ('pending', 'running', 'completed', 'failed', 'cancelled')) DEFAULT 'pending',
-        progress REAL DEFAULT 0.0 CHECK(progress >= 0.0 AND progress <= 1.0),
-        source_meeting_id TEXT,
-        metadata TEXT,
-        result_uri TEXT,
-        error_message TEXT,
-        created_at TEXT NOT NULL DEFAULT (datetime('now')),
-        updated_at TEXT NOT NULL DEFAULT (datetime('now')),
-        ttl INTEGER,
-        FOREIGN KEY (source_meeting_id) REFERENCES meetings(id) ON DELETE SET NULL
-    );
-    
-    CREATE INDEX IF NOT EXISTS idx_tasks_status ON tasks(status);
-    CREATE INDEX IF NOT EXISTS idx_tasks_meeting ON tasks(source_meeting_id);
-    `;
-    db.exec(TASKS_SCHEMA);
-    // Add trigger for auto-updating updated_at (separate exec to handle IF NOT EXISTS)
-    try {
-        db.exec(`
-            CREATE TRIGGER IF NOT EXISTS tasks_updated_at
-            AFTER UPDATE ON tasks
-            FOR EACH ROW
-            BEGIN
-                UPDATE tasks SET updated_at = datetime('now') WHERE id = OLD.id;
-            END;
-        `);
-    }
-    catch {
-        // Trigger may already exist in older SQLite versions without IF NOT EXISTS support
-    }
-    console.error("[Nexus] Tasks table initialized");
-    initialized = true;
-}
-export function resetTasksInit() {
-    initialized = false;
-}
 /**
  * Create a new task
  */
@@ -73,14 +27,7 @@ export function createTask(input = {}) {
     stmt.run(id, input.source_meeting_id || null, input.metadata ? JSON.stringify(input.metadata) : null, now, now, input.ttl || null);
     return getTask(id);
 }
-/**
- * Get a task by ID
- */
-export function getTask(id) {
-    const db = getDatabase();
-    const row = db.prepare("SELECT * FROM tasks WHERE id = ?").get(id);
-    if (!row)
-        return null;
+function rowToTask(row) {
     return {
         id: row.id,
         status: row.status,
@@ -94,6 +41,13 @@ export function getTask(id) {
         ttl: row.ttl || null
     };
 }
+/**
+ * Get a task by ID
+ */
+export function getTask(id) {
+    const row = getDatabase().prepare("SELECT * FROM tasks WHERE id = ?").get(id);
+    return row ? rowToTask(row) : null;
+}
 /**
  * Update task status and progress
  */
@@ -141,39 +95,7 @@ export function listTasks(status, limit = 50) {
     sql += " ORDER BY created_at DESC LIMIT ?";
     params.push(limit);
     const rows = db.prepare(sql).all(...params);
-    return rows.map(row => ({
-        id: row.id,
-        status: row.status,
-        progress: row.progress,
-        source_meeting_id: row.source_meeting_id || null,
-        metadata: row.metadata ? JSON.parse(row.metadata) : {},
-        result_uri: row.result_uri || null,
-        error_message: row.error_message || null,
-        created_at: row.created_at,
-        updated_at: row.updated_at,
-        ttl: row.ttl || null
-    }));
-}
-/**
- * Get tasks by meeting ID
- */
-export function getTasksByMeeting(meetingId) {
-    const db = getDatabase();
-    const rows = db.prepare(`
-        SELECT * FROM tasks WHERE source_meeting_id = ? ORDER BY created_at DESC
-    `).all(meetingId);
-    return rows.map(row => ({
-        id: row.id,
-        status: row.status,
-        progress: row.progress,
-        source_meeting_id: row.source_meeting_id || null,
-        metadata: row.metadata ? JSON.parse(row.metadata) : {},
-        result_uri: row.result_uri || null,
-        error_message: row.error_message || null,
-        created_at: row.created_at,
-        updated_at: row.updated_at,
-        ttl: row.ttl || null
-    }));
+    return rows.map(rowToTask);
 }
 /**
  * Cancel a pending or running task
@@ -187,26 +109,30 @@ export function cancelTask(id) {
     updateTask(id, { status: "cancelled" });
     return true;
 }
+/**
+ * Mark pending/running tasks whose TTL has elapsed as failed.
+ */
+export function expireTasks(now = Date.now()) {
+    return getDatabase().prepare(`
+        UPDATE tasks
+        SET status = 'failed', error_message = 'TTL expired', updated_at = ?
+        WHERE status IN ('pending', 'running')
+          AND ttl IS NOT NULL
+          AND ROUND(unixepoch(created_at, 'subsec') * 1000) + ttl < ?
+    `).run(new Date(now).toISOString(), now).changes;
+}
 /**
  * Delete completed/failed/cancelled tasks older than specified age
  */
-export function cleanupTasks(maxAgeMs = TASK_CLEANUP_MAX_AGE_MS) {
-    const db = getDatabase();
-    const cutoff = new Date(Date.now() - maxAgeMs).toISOString();
-    const result = db.prepare(`
+export function cleanupTasks(maxAgeMs = TASK_CLEANUP_MAX_AGE_MS, now = Date.now()) {
+    const cutoff = new Date(now - maxAgeMs).toISOString();
+    return getDatabase().prepare(`
         DELETE FROM tasks 
         WHERE status IN ('completed', 'failed', 'cancelled') 
         AND updated_at < ?
-    `).run(cutoff);
-    return result.changes;
+    `).run(cutoff).changes;
 }
-/**
- * Get active (pending/running) task count
- */
-export function getActiveTaskCount() {
-    const db = getDatabase();
-    const row = db.prepare(`
-        SELECT COUNT(*) as count FROM tasks WHERE status IN ('pending', 'running')
-    `).get();
-    return row.count;
+/** Expire overdue tasks, then purge finished ones past the retention window. */
+export function runTaskMaintenance(now = Date.now()) {
+    return { expired: expireTasks(now), removed: cleanupTasks(TASK_CLEANUP_MAX_AGE_MS, now) };
 }

package/build/types.js

@@ -1 +1 @@
-export {};
+export const MESSAGE_CATEGORIES = ["MEETING_START", "PROPOSAL", "DECISION", "UPDATE", "CHAT"];

package/docs/ARCHITECTURE.md

@@ -20,36 +20,39 @@
    ▼      ▼      ▼
 MCP-A  MCP-B  MCP-C
 (Win)  (WSL)  (VM)
-Stateless protocol adapter, one per IDE
+Lightweight protocol adapter, one per MCP connection
 ```
 
 ### Core Principles
 
 1. **Daemon is the single source of truth** — all reads/writes, business logic, and tool definitions live in the daemon.
-2. **MCP is a stateless protocol adapter** — no tool definitions, no hardcoded names, no local data.
-3. **Daemon decides tool capability** — MCP fetches `GET /api/tools` at startup; any daemon upgrade is immediately visible to all connected MCPs.
-4. **No local fallback** — if the daemon is unreachable, the MCP reports an error and retries every 3 s. No split-brain degradation.
-5. **Plain HTTP between MCP and daemon** — no SSE; AI is request-driven and doesn't need push.
+2. **MCP holds connection identity only** — no hardcoded tool names or local persistent data; sessions and inboxes live in the daemon.
+3. **Daemon decides tool capability** — MCP fetches `GET /api/tools` at startup and reconnect. Session inboxes require both the session-aware adapter and daemon; legacy clients can continue using the existing shared-message APIs.
+4. **No local fallback** — if the daemon is unreachable, the MCP reports an error and retries every 3 s. No split-brain degradation. A tool call the daemon rejects (validation, not found, permission) is returned to the IDE as an error result (`isError: true`) and does not affect the connection; an unknown tool name is a JSON-RPC `-32602` error.
+5. **Plain HTTP between MCP and daemon** — inboxes are pulled explicitly; heartbeats maintain presence but do not wake the model.
 
 ### MCP Startup Flow
 
 ```
 Read NEXUS_ENDPOINT (default: http://127.0.0.1:5688)
   │
-  ├─ Connect stdio transport → IDE sees MCP as ready
+  ├─ Serve stdio (MCP TypeScript SDK v2, serveStdio) and GET /api/tools once;
+  │  the first tools/list waits up to 1 s for that fetch
+  │     ├─ 2026-07-28 clients: server/discover, per-request _meta envelope,
+  │     │  list_changed delivered on subscriptions/listen
+  │     └─ 2025-era clients: initialize handshake, unsolicited list_changed
   │
-  └─ Background retry loop (every 3 s)
-        │
-        ├─ GET /api/tools fails
-        │     → log "[n2n-nexus] Waiting for daemon..."
-        │     → keep retrying, do not exit
-        │
-        └─ GET /api/tools succeeds
-              → cache tool list
-              → send notifications/tools/list_changed
-              → IDE re-fetches: tools appear
+  ├─ If the daemon was down: retry loop (every 3 s)
+  │     └─ GET /api/tools succeeds → cache tool list
+  │           → notifications/tools/list_changed → IDE re-fetches
+  │
+  └─ stdin closes → stop retrying, close, exit
 ```
 
+The adapter's instance ID (read cursors, meeting permissions) uses the first client name seen on the connection, from the request's `io.modelcontextprotocol/clientInfo` (2026-07-28) or from `initialize` (2025 era), unless `NEXUS_INSTANCE_ID` / `--id` pins it.
+
+Each MCP connection also gets a random session ID, registered on its first tool request and refreshed every 20 seconds with a 60-second presence lease. Disconnect marks it offline; an adapter restart creates a new session, so pending messages for the old session are not transferred. Multiple host chats sharing a connection share its inbox. Project association is directory metadata, not an implicit target for project tools. Registration and disconnect use `POST /api/sessions/register` and `POST /api/sessions/disconnect`; direct tools receive session identity outside their model-supplied arguments. This remains a trusted local daemon, not an authentication boundary. See [tool reference](TOOLS_REFERENCE.md#session-directory-and-direct-inboxes).
+
 ---
 
 ## 💾 Data Persistence
@@ -60,7 +63,6 @@ All data lives under the daemon's storage root (default `~/.n2n-nexus`):
 ~/.n2n-nexus/
 ├── global/
 │   ├── blueprint.md        # Master strategy document
-│   ├── discussion.json     # Global chat (JSON fallback)
 │   ├── docs_index.json     # Global docs index
 │   └── docs/               # Shared markdown documents
 ├── projects/
@@ -68,14 +70,17 @@ All data lives under the daemon's storage root (default `~/.n2n-nexus`):
 │       ├── manifest.json          # Project metadata
 │       ├── internal_blueprint.md  # Internal technical docs
 │       └── assets/                # Binary assets (images, PDFs)
-├── meetings/               # Meeting files (JSON fallback mode)
 ├── registry.json           # Global project index
-└── nexus.db                # SQLite database (meetings, tasks, cursors)
+└── nexus.db                # SQLite database (meetings, global chat, events, tasks, cursors)
 ```
 
-**SQLite WAL mode**: Only the daemon process writes to SQLite directly. MCP processes never touch the DB — they go through HTTP, which serializes all writes naturally.
+**SQLite WAL mode**: Only the daemon process opens the database. MCP adapters never touch it — they go through HTTP.
+
+**File-store writes**: HTTP requests are handled concurrently, so every mutation of `registry.json`, manifests and the docs index is queued behind one daemon-wide lock and written atomically (temp file + rename).
 
-**Self-healing**: Core JSON files (`registry.json`, `discussion.json`) are auto-repaired if corrupted or missing.
+**Activity log**: state changes made through the daemon (project sync/rename/delete, meeting start/end, doc sync, ...) are recorded as structured events in SQLite and read with `list_events` / `GET /api/events`; they are not mixed into chat streams.
+
+**Self-healing**: `registry.json` is auto-repaired if corrupted or missing.
 
 ---
 
@@ -142,38 +147,40 @@ npx n2n-nexus daemon --root ~/.n2n-nexus --port 5688
 ### Tool capability (MCP-facing)
 ```
 GET  /api/tools              Return full tool definition list (JSON Schema)
-POST /api/tools/call         Execute tool call { tool, args, instanceId }
+POST /api/tools/call         Execute tool call { tool, args, instanceId, sessionId? }
 ```
 
 ### System
 ```
 GET  /health                 Health status + version
-GET  /api/storage/info       Storage mode and stats
 ```
 
-### Session & Projects
+### Projects
 ```
-POST /api/session/register
 POST /api/projects/sync
 POST /api/projects/update
 POST /api/projects/rename
 POST /api/projects/delete
 GET  /api/projects/search
 GET  /api/projects/topology
+GET  /api/projects/:projectId
 ```
 
 ### Messages & Global
 ```
 POST /api/messages/send
 GET  /api/messages/unread
+GET  /api/events
 GET  /api/global/docs
 GET  /api/global/docs/:docId
 POST /api/global/docs/:docId
+GET  /api/global/strategy
 POST /api/global/strategy
 ```
 
 ### Meetings
 ```
+GET  /api/meetings
 POST /api/meetings/start
 POST /api/meetings/end
 POST /api/meetings/archive
@@ -197,6 +204,10 @@ POST /api/maintenance/logs
 
 ---
 
+### Request guards
+
+The daemon rejects browser-originated requests (`Origin` header or cross-site `Sec-Fetch-Site`: 403), `Host` names that are neither IP literals nor local/allow-listed names (403, prevents DNS rebinding), non-JSON POST bodies (415) and bodies above 16 MB (413). Tool calls are rate limited per instance and per client address (429 with `Retry-After`). See `SECURITY.md`.
+
 ## Scope Boundaries
 
 - No cloud bridge by default.

package/docs/ARCHITECTURE_zh.md

@@ -20,36 +20,39 @@
    ▼      ▼      ▼
 MCP-A  MCP-B  MCP-C
 (Win)  (WSL)  (VM)
-无状态协议适配器，每个 IDE 一个
+轻量协议适配器，每条 MCP 连接一个
 ```
 
 ### 核心原则
 
 1. **Daemon 是唯一的真相来源** — 所有读写、业务逻辑和工具定义都在 daemon 侧。
-2. **MCP 是无状态协议适配器** — 不含工具定义、不含 hardcode 工具名、不存本地数据。
-3. **Daemon 决定工具能力** — MCP 启动时拉取 `GET /api/tools`；daemon 升级新工具后，所有已连接 MCP 立即获得新能力，无需更新。
-4. **无本地降级** — daemon 不可达时，MCP 每 3 秒重试并报告错误，不做本地 fallback（避免数据分裂）。
-5. **MCP ↔ Daemon 全部走普通 HTTP** — 不使用 SSE；AI 是请求驱动模型，不需要推送。
+2. **MCP 只维护连接身份** — 不含 hardcode 工具名、不存本地持久化数据；会话目录和收件箱在 daemon。
+3. **Daemon 决定工具能力** — MCP 启动和重连时拉取 `GET /api/tools`。个人收件箱需要适配器和 daemon 都支持会话身份；旧客户端仍可使用原有共享消息接口。
+4. **无本地降级** — daemon 不可达时，MCP 每 3 秒重试并报告错误，不做本地 fallback（避免数据分裂）。daemon 拒绝的工具调用（校验失败、不存在、无权限）作为错误结果（`isError: true`）返回给 IDE，不影响连接；未知工具名返回 JSON-RPC `-32602` 错误。
+5. **MCP ↔ Daemon 全部走普通 HTTP** — 收件箱由助手主动拉取；心跳只维护在线状态，不唤醒模型。
 
 ### MCP 启动流程
 
 ```
 读取 NEXUS_ENDPOINT（默认 http://127.0.0.1:5688）
   │
-  ├─ 连接 stdio transport → IDE 认为 MCP 已就绪
+  ├─ 开始 stdio 服务（MCP TypeScript SDK v2，serveStdio），同时拉一次 GET /api/tools；
+  │  第一次 tools/list 最多等这次拉取 1 秒
+  │     ├─ 2026-07-28 客户端：server/discover、每请求 _meta 信封，
+  │     │  list_changed 经 subscriptions/listen 下发
+  │     └─ 2025 代客户端：initialize 握手，主动下发 list_changed
   │
-  └─ 后台重试循环（每 3 秒）
-        │
-        ├─ GET /api/tools 失败
-        │     → 打印 "[n2n-nexus] Waiting for daemon..."
-        │     → 继续等待，不退出
-        │
-        └─ GET /api/tools 成功
-              → 缓存工具列表
-              → 发送 notifications/tools/list_changed
-              → IDE 重新拉取，工具出现
+  ├─ 若 daemon 不在线：重试循环（每 3 秒）
+  │     └─ GET /api/tools 成功 → 缓存工具列表
+  │           → notifications/tools/list_changed → IDE 重新拉取
+  │
+  └─ stdin 关闭 → 停止重试、关闭、退出
 ```
 
+适配器的实例 ID（未读游标、会议权限以它为键）取自该连接上第一次见到的客户端名，来源是请求 `_meta` 中的 `io.modelcontextprotocol/clientInfo`（2026-07-28）或 `initialize`（2025 代），`NEXUS_INSTANCE_ID` / `--id` 可固定。
+
+每条 MCP 连接还会生成随机会话 ID，在首次工具请求时注册，每 20 秒刷新一次心跳，在线租约为 60 秒。断连后标记离线；适配器重启会创建新会话，旧会话的待收消息不会转移。宿主多个聊天共用连接时也共用收件箱。项目关联仅用于目录筛选，不作为项目工具的隐式操作目标。注册和断连分别使用 `POST /api/sessions/register` 与 `POST /api/sessions/disconnect`，工具请求的会话身份放在模型参数之外。系统仍采用可信本地 daemon 边界，这不是身份认证机制。精确契约见[工具参考](TOOLS_REFERENCE.md#session-directory-and-direct-inboxes)。
+
 ---
 
 ## 💾 数据持久化
@@ -60,7 +63,6 @@ MCP-A  MCP-B  MCP-C
 ~/.n2n-nexus/
 ├── global/
 │   ├── blueprint.md        # 主战略文档
-│   ├── discussion.json     # 全局聊天（JSON 回退）
 │   ├── docs_index.json     # 全局文档索引
 │   └── docs/               # 共享 Markdown 文档
 ├── projects/
@@ -68,14 +70,17 @@ MCP-A  MCP-B  MCP-C
 │       ├── manifest.json          # 项目元数据
 │       ├── internal_blueprint.md  # 内部技术文档
 │       └── assets/                # 二进制资产（图片、PDF）
-├── meetings/               # 会议文件（JSON 回退模式）
 ├── registry.json           # 全局项目索引
-└── nexus.db                # SQLite 数据库（会议、任务、游标）
+└── nexus.db                # SQLite 数据库（会议、全局聊天、事件、任务、游标）
 ```
 
-**SQLite WAL 模式**：只有 daemon 进程直接写入 SQLite。MCP 进程通过 HTTP 间接访问，天然串行，无并发冲突。
+**SQLite WAL 模式**：只有 daemon 进程打开数据库。MCP 适配器不直接访问，全部经由 HTTP。
+
+**文件存储写入**：HTTP 请求是并发处理的，因此对 `registry.json`、manifest 和文档索引的每次修改都排在一把 daemon 级写锁后面，并以原子方式写入（临时文件 + rename）。
 
-**自我修复**：核心 JSON 文件（`registry.json`、`discussion.json`）在损坏或丢失时自动重建初始状态。
+**活动日志**：经由 daemon 发生的状态变更（项目同步/重命名/删除、会议开始/结束、文档同步等）以结构化事件记录在 SQLite 中，通过 `list_events` / `GET /api/events` 读取，不混入聊天流。
+
+**自我修复**：`registry.json` 在损坏或丢失时自动重建初始状态。
 
 ---
 
@@ -110,7 +115,7 @@ n2n-nexus
   │
   ├─ n2n-nexus daemon    用户手动启动一次，持续运行，持有所有数据。
   │
-  └─ n2n-nexus mcp       IDE 通过 npx 自动启动，无状态代理。
+  └─ n2n-nexus mcp       IDE 通过 npx 自动启动，维护连接身份。
 ```
 
 **Daemon**（用户手动启动）：
@@ -142,38 +147,40 @@ npx n2n-nexus daemon --root ~/.n2n-nexus --port 5688
 ### 工具能力（MCP 对接）
 ```
 GET  /api/tools              返回完整工具定义列表（JSON Schema）
-POST /api/tools/call         执行工具调用 { tool, args, instanceId }
+POST /api/tools/call         执行工具调用 { tool, args, instanceId, sessionId? }
 ```
 
 ### 系统
 ```
 GET  /health                 健康状态 + 版本信息
-GET  /api/storage/info       存储模式和统计
 ```
 
-### 会话与项目
+### 项目
 ```
-POST /api/session/register
 POST /api/projects/sync
 POST /api/projects/update
 POST /api/projects/rename
 POST /api/projects/delete
 GET  /api/projects/search
 GET  /api/projects/topology
+GET  /api/projects/:projectId
 ```
 
 ### 消息与全局协作
 ```
 POST /api/messages/send
 GET  /api/messages/unread
+GET  /api/events
 GET  /api/global/docs
 GET  /api/global/docs/:docId
 POST /api/global/docs/:docId
+GET  /api/global/strategy
 POST /api/global/strategy
 ```
 
 ### 会议
 ```
+GET  /api/meetings
 POST /api/meetings/start
 POST /api/meetings/end
 POST /api/meetings/archive
@@ -197,6 +204,10 @@ POST /api/maintenance/logs
 
 ---
 
+### 请求防护
+
+daemon 拒绝来自浏览器的请求（带 `Origin` 头或跨站 `Sec-Fetch-Site`：403）、既非 IP 也不在本地/允许列表中的 `Host`（403，防 DNS rebinding）、非 JSON 的 POST 请求体（415）以及超过 16 MB 的请求体（413）。工具调用按实例和客户端地址限流（429，带 `Retry-After`）。详见 `SECURITY.md`。
+
 ## 边界说明
 
 - 不默认提供云端桥接。