Personal session library — v0.3 (save, resume, acquire, publish; scoped library tokens)

Status: descriptive. It describes release/0.545.0. The code is in collector/routes/memory.py (the /library/* content routes) and collector/routes/tenants.py (/library/sessions, /library/ensure, publish targets, profiles). Gaps are listed under §7 *Open*.

Every signed-in person has a private library for their agent sessions: raw transcripts, scrubbed of secrets, that can be resumed later. The library belongs to your account, not to a web address. It is a free, private personal tenant created on first use (tenants.py:resolve_or_create_personal_tenant: plan=personal, no hostname, never sold, never expires). Everything in it is staged and private. Nothing in the library is ever published unless you publish it explicitly (§5).

All /library/* content routes require a signed-in human (401 otherwise). They are scoped to the caller's own library, so you can only ever read or write your own entries.

New in v0.3 (additive): a tool can hold a scoped library token instead of the person's full account session. It reaches only the routes its scopes name, always on its own user's library (§7). Every v0.2 request and response keeps its meaning.

Re-staging carries the entry's parent, acquired_from, compact_version, tokens and summary forward (_LIB_CARRY), so an edit never cuts the entry out of its lineage.

1. What it is

2. Saving and reading

3. Acquiring a marketplace item — POST /library/acquire/{cid} (library_acquire)

4. Refunds end the licence (WP-13a) — _refuse_revoked_copy

5. Publishing to the marketplace — POST /library/session/{cid}/publish-to/{tenant} (library_publish_to)

6. Retention

7. Scoped library tokens (v0.3)

8. Open