@cjhyy/code-shell-core 0.8.7 → 0.8.9

package/dist/engine/run-workspace.js

@@ -93,11 +93,17 @@ export async function resolveRunWorkspace(args) {
             configCwd: args.configCwd,
             processCwd: args.processCwd,
         });
-    const profileState = resolveRunProfileState({
-        sessionWorkspaceProfile,
-        cwd,
-        settings: args.settings,
-    });
+    const profileState = profile?.disableWorkspaceProfile
+        ? {
+            workspaceProfile: undefined,
+            sessionProfileOverrides: undefined,
+            profileMemoryDir: undefined,
+        }
+        : resolveRunProfileState({
+            sessionWorkspaceProfile,
+            cwd,
+            settings: args.settings,
+        });
     return {
         ok: true,
         resolution: {

package/dist/engine/turn-loop.d.ts

@@ -202,9 +202,6 @@ export declare class TurnLoop {
      * loop forces a stop so a stuck goal can't loop forever.
      */
     private stopBlockCount;
-    /** Consecutive identical tool-call/result batches, ignoring provider call ids. */
-    private repeatedToolBatchFingerprint;
-    private repeatedToolBatchCount;
     /**
      * Run-scoped goal budget tracker (Goal mode). Hoisted to an instance field
      * (not a run() local) so extend() can bump its budgets mid-run. Null when no

package/dist/engine/turn-loop.js

@@ -4,7 +4,7 @@
  * Following Claude Code's po_() pattern:
  * pre_check → model_call → post_check → tool_exec → context_mgmt → hook_notify → next turn
  */
-import { createHash, randomUUID } from "node:crypto";
+import { randomUUID } from "node:crypto";
 import { buildAgentDirectionMessage } from "../tool-system/builtin/agent-notifications.js";
 import { newTurnId } from "./turn-state.js";
 import { formatFriendlyError } from "./friendly-error.js";
@@ -40,39 +40,6 @@ export function toolResultToBlock(result) {
         block.is_error = true;
     return block;
 }
-const REPEATED_TOOL_BATCH_LIMIT = 3;
-function canonicalToolValue(value) {
-    if (value === null)
-        return "null";
-    if (value === undefined)
-        return "undefined";
-    if (Array.isArray(value))
-        return `[${value.map(canonicalToolValue).join(",")}]`;
-    if (typeof value === "object") {
-        return `{${Object.entries(value)
-            .sort(([left], [right]) => left.localeCompare(right))
-            .map(([key, entry]) => `${JSON.stringify(key)}:${canonicalToolValue(entry)}`)
-            .join(",")}}`;
-    }
-    return JSON.stringify(value);
-}
-function repeatedToolBatchFingerprint(toolCalls, results) {
-    // Hash immediately and never log the canonical source: tool results may
-    // contain credentials or large media payloads. Call ids are deliberately
-    // omitted because providers generate a fresh id for every identical retry.
-    return createHash("sha256")
-        .update(canonicalToolValue({
-        calls: toolCalls.map((call) => ({ toolName: call.toolName, args: call.args })),
-        results: results.map((result) => ({
-            toolName: result.toolName,
-            isError: result.isError === true || Boolean(result.error),
-            error: result.error,
-            result: result.result,
-            contentBlocks: result.contentBlocks,
-        })),
-    }))
-        .digest("hex");
-}
 export class TurnLoop {
     deps;
     config;
@@ -109,9 +76,6 @@ export class TurnLoop {
      * loop forces a stop so a stuck goal can't loop forever.
      */
     stopBlockCount = 0;
-    /** Consecutive identical tool-call/result batches, ignoring provider call ids. */
-    repeatedToolBatchFingerprint;
-    repeatedToolBatchCount = 0;
     /**
      * Run-scoped goal budget tracker (Goal mode). Hoisted to an instance field
      * (not a run() local) so extend() can bump its budgets mid-run. Null when no
@@ -1445,49 +1409,6 @@ export class TurnLoop {
                         tlog.info("guard.stale_task", { cat: "guard", turn: this.turnCount });
                     }
                 }
-                const toolBatchFingerprint = repeatedToolBatchFingerprint(toolCalls, results);
-                if (toolBatchFingerprint === this.repeatedToolBatchFingerprint) {
-                    this.repeatedToolBatchCount++;
-                }
-                else {
-                    this.repeatedToolBatchFingerprint = toolBatchFingerprint;
-                    this.repeatedToolBatchCount = 1;
-                }
-                if (this.repeatedToolBatchCount >= REPEATED_TOOL_BATCH_LIMIT) {
-                    tlog.warn("turn.repeated_tool_batch_stopped", {
-                        cat: "turn",
-                        repeatedCount: this.repeatedToolBatchCount,
-                        tools: toolCalls.map((call) => call.toolName),
-                    });
-                    await this.emitHook("on_turn_end", {
-                        turnNumber: this.turnCount,
-                        hasToolUse: true,
-                        toolCallCount: toolCalls.length,
-                    });
-                    finalText =
-                        `检测到同一组工具调用及其结果连续重复 ${REPEATED_TOOL_BATCH_LIMIT} 次，` +
-                            "已自动停止，避免继续空转。请调整请求或让 Session 获取新的上下文后再试。";
-                    this.deps.transcript.appendMessage("assistant", finalText);
-                    messages.push({ role: "assistant", content: finalText });
-                    this.config.onStream?.({
-                        type: "assistant_message",
-                        messageId: assistantMessageId,
-                        message: { role: "assistant", content: finalText },
-                    });
-                    this.finalizeModelTurn();
-                    if (await this.consumeQueuedSteer(messages, "finalize_backfill")) {
-                        this.repeatedToolBatchFingerprint = undefined;
-                        this.repeatedToolBatchCount = 0;
-                        continue;
-                    }
-                    messages = this.redactConsumedSensitiveToolResults(messages);
-                    return {
-                        text: finalText,
-                        reason: "completed",
-                        messages,
-                        completionKind: "limit_stop",
-                    };
-                }
                 // Hook: turn end
                 await this.emitHook("on_turn_end", {
                     turnNumber: this.turnCount,

package/dist/index.d.ts

@@ -3,7 +3,7 @@
  *
  * Public API exports.
  */
-export declare const VERSION = "0.8.7";
+export declare const VERSION = "0.8.9";
 export type { Message, ContentBlock, ToolDefinition, ToolCall, ToolResult, RegisteredTool, TranscriptEvent, TranscriptEventType, SessionState, SessionKind, SessionWorkspace, SessionForkLineage, ContextUsageAnchor, SessionStatus, TokenUsage, CompiledInput, PermissionDecision, PermissionMode, PermissionRule, TurnPhase, TurnResult, TerminalReason, TurnCompletionKind, StreamEvent, StreamCallback, LLMConfig, ClientDefaults, LLMResponse, Settings, MCPServerConfig, } from "./types.js";
 export type { GoalConfig, GoalLifecycleConfig, GoalLifecyclePhase, GoalLifecycleTerminalReason, GoalLifecycleV1, } from "./goal/lifecycle.js";
 export { FrameworkError, LLMError, LLMRateLimitError, ContextLimitError, ToolError, ToolNotFoundError, ToolExecutionError, ToolTimeoutError, PermissionDeniedError, SessionError, TranscriptError, ConfigError, SandboxUnavailableError, } from "./exceptions.js";

package/dist/index.js

@@ -3,7 +3,7 @@
  *
  * Public API exports.
  */
-export const VERSION = "0.8.7";
+export const VERSION = "0.8.9";
 // ─── Exceptions ──────────────────────────────────────────────────
 export { FrameworkError, LLMError, LLMRateLimitError, ContextLimitError, ToolError, ToolNotFoundError, ToolExecutionError, ToolTimeoutError, PermissionDeniedError, SessionError, TranscriptError, ConfigError, SandboxUnavailableError, } from "./exceptions.js";
 // ─── Engine (primary API) ────────────────────────────────────────

package/dist/panel-apps/manifest.d.ts

@@ -1,6 +1,6 @@
 import { z } from "zod";
 export declare const PANEL_APP_MANIFEST_FILE = ".codeshell-panel/panel.json";
-export declare const PANEL_APP_PERMISSIONS: readonly ["context.session", "context.workspace", "storage", "external.open", "agent.submitPrompt", "workspace.info", "workspace.read", "workspace.write", "notifications.send", "credentials.cookies", "automations.manage"];
+export declare const PANEL_APP_PERMISSIONS: readonly ["context.session", "context.workspace", "storage", "external.open", "agent.submitPrompt", "agent.task", "workspace.info", "workspace.read", "workspace.write", "notifications.send", "audio.transcribe", "credentials.cookies", "automations.manage", "process"];
 export declare const PANEL_APP_ICONS: readonly ["panel", "activity", "bar-chart-3", "chart", "file-text", "globe", "image", "layout-dashboard", "line-chart", "palette", "pie-chart", "table", "terminal"];
 export declare const PanelAppAgentTool: z.ZodEffects<z.ZodObject<{
     name: z.ZodString;
@@ -116,12 +116,12 @@ export declare const PanelAppManifest: z.ZodEffects<z.ZodDiscriminatedUnion<"sch
     icon: z.ZodDefault<z.ZodEnum<["panel", "activity", "bar-chart-3", "chart", "file-text", "globe", "image", "layout-dashboard", "line-chart", "palette", "pie-chart", "table", "terminal"]>>;
     placement: z.ZodDefault<z.ZodLiteral<"right-dock">>;
     singleton: z.ZodDefault<z.ZodBoolean>;
-    permissions: z.ZodDefault<z.ZodArray<z.ZodEnum<["context.session", "context.workspace", "storage", "external.open", "agent.submitPrompt", "workspace.info", "workspace.read", "workspace.write", "notifications.send", "credentials.cookies", "automations.manage"]>, "many">>;
+    permissions: z.ZodDefault<z.ZodArray<z.ZodEnum<["context.session", "context.workspace", "storage", "external.open", "agent.submitPrompt", "agent.task", "workspace.info", "workspace.read", "workspace.write", "notifications.send", "audio.transcribe", "credentials.cookies", "automations.manage", "process"]>, "many">>;
     schemaVersion: z.ZodLiteral<1>;
 }, "strict", z.ZodTypeAny, {
     id: string;
     version: string;
-    permissions: ("context.session" | "context.workspace" | "storage" | "external.open" | "agent.submitPrompt" | "workspace.info" | "workspace.read" | "workspace.write" | "notifications.send" | "credentials.cookies" | "automations.manage")[];
+    permissions: ("context.session" | "context.workspace" | "storage" | "external.open" | "agent.submitPrompt" | "agent.task" | "workspace.info" | "workspace.read" | "workspace.write" | "notifications.send" | "audio.transcribe" | "credentials.cookies" | "automations.manage" | "process")[];
     entry: string;
     title: {
         default: string;
@@ -144,7 +144,7 @@ export declare const PanelAppManifest: z.ZodEffects<z.ZodDiscriminatedUnion<"sch
     };
     schemaVersion: 1;
     description?: string | undefined;
-    permissions?: ("context.session" | "context.workspace" | "storage" | "external.open" | "agent.submitPrompt" | "workspace.info" | "workspace.read" | "workspace.write" | "notifications.send" | "credentials.cookies" | "automations.manage")[] | undefined;
+    permissions?: ("context.session" | "context.workspace" | "storage" | "external.open" | "agent.submitPrompt" | "agent.task" | "workspace.info" | "workspace.read" | "workspace.write" | "notifications.send" | "audio.transcribe" | "credentials.cookies" | "automations.manage" | "process")[] | undefined;
     icon?: "terminal" | "image" | "panel" | "activity" | "bar-chart-3" | "chart" | "file-text" | "globe" | "layout-dashboard" | "line-chart" | "palette" | "pie-chart" | "table" | undefined;
     placement?: "right-dock" | undefined;
     singleton?: boolean | undefined;
@@ -230,12 +230,12 @@ export declare const PanelAppManifest: z.ZodEffects<z.ZodDiscriminatedUnion<"sch
     icon: z.ZodDefault<z.ZodEnum<["panel", "activity", "bar-chart-3", "chart", "file-text", "globe", "image", "layout-dashboard", "line-chart", "palette", "pie-chart", "table", "terminal"]>>;
     placement: z.ZodDefault<z.ZodLiteral<"right-dock">>;
     singleton: z.ZodDefault<z.ZodBoolean>;
-    permissions: z.ZodDefault<z.ZodArray<z.ZodEnum<["context.session", "context.workspace", "storage", "external.open", "agent.submitPrompt", "workspace.info", "workspace.read", "workspace.write", "notifications.send", "credentials.cookies", "automations.manage"]>, "many">>;
+    permissions: z.ZodDefault<z.ZodArray<z.ZodEnum<["context.session", "context.workspace", "storage", "external.open", "agent.submitPrompt", "agent.task", "workspace.info", "workspace.read", "workspace.write", "notifications.send", "audio.transcribe", "credentials.cookies", "automations.manage", "process"]>, "many">>;
     schemaVersion: z.ZodLiteral<2>;
 }, "strict", z.ZodTypeAny, {
     id: string;
     version: string;
-    permissions: ("context.session" | "context.workspace" | "storage" | "external.open" | "agent.submitPrompt" | "workspace.info" | "workspace.read" | "workspace.write" | "notifications.send" | "credentials.cookies" | "automations.manage")[];
+    permissions: ("context.session" | "context.workspace" | "storage" | "external.open" | "agent.submitPrompt" | "agent.task" | "workspace.info" | "workspace.read" | "workspace.write" | "notifications.send" | "audio.transcribe" | "credentials.cookies" | "automations.manage" | "process")[];
     entry: string;
     title: {
         default: string;
@@ -276,14 +276,14 @@ export declare const PanelAppManifest: z.ZodEffects<z.ZodDiscriminatedUnion<"sch
         }[] | undefined;
     } | undefined;
     description?: string | undefined;
-    permissions?: ("context.session" | "context.workspace" | "storage" | "external.open" | "agent.submitPrompt" | "workspace.info" | "workspace.read" | "workspace.write" | "notifications.send" | "credentials.cookies" | "automations.manage")[] | undefined;
+    permissions?: ("context.session" | "context.workspace" | "storage" | "external.open" | "agent.submitPrompt" | "agent.task" | "workspace.info" | "workspace.read" | "workspace.write" | "notifications.send" | "audio.transcribe" | "credentials.cookies" | "automations.manage" | "process")[] | undefined;
     icon?: "terminal" | "image" | "panel" | "activity" | "bar-chart-3" | "chart" | "file-text" | "globe" | "layout-dashboard" | "line-chart" | "palette" | "pie-chart" | "table" | undefined;
     placement?: "right-dock" | undefined;
     singleton?: boolean | undefined;
 }>]>, {
     id: string;
     version: string;
-    permissions: ("context.session" | "context.workspace" | "storage" | "external.open" | "agent.submitPrompt" | "workspace.info" | "workspace.read" | "workspace.write" | "notifications.send" | "credentials.cookies" | "automations.manage")[];
+    permissions: ("context.session" | "context.workspace" | "storage" | "external.open" | "agent.submitPrompt" | "agent.task" | "workspace.info" | "workspace.read" | "workspace.write" | "notifications.send" | "audio.transcribe" | "credentials.cookies" | "automations.manage" | "process")[];
     entry: string;
     title: {
         default: string;
@@ -298,7 +298,7 @@ export declare const PanelAppManifest: z.ZodEffects<z.ZodDiscriminatedUnion<"sch
 } | {
     id: string;
     version: string;
-    permissions: ("context.session" | "context.workspace" | "storage" | "external.open" | "agent.submitPrompt" | "workspace.info" | "workspace.read" | "workspace.write" | "notifications.send" | "credentials.cookies" | "automations.manage")[];
+    permissions: ("context.session" | "context.workspace" | "storage" | "external.open" | "agent.submitPrompt" | "agent.task" | "workspace.info" | "workspace.read" | "workspace.write" | "notifications.send" | "audio.transcribe" | "credentials.cookies" | "automations.manage" | "process")[];
     entry: string;
     title: {
         default: string;
@@ -330,7 +330,7 @@ export declare const PanelAppManifest: z.ZodEffects<z.ZodDiscriminatedUnion<"sch
     };
     schemaVersion: 1;
     description?: string | undefined;
-    permissions?: ("context.session" | "context.workspace" | "storage" | "external.open" | "agent.submitPrompt" | "workspace.info" | "workspace.read" | "workspace.write" | "notifications.send" | "credentials.cookies" | "automations.manage")[] | undefined;
+    permissions?: ("context.session" | "context.workspace" | "storage" | "external.open" | "agent.submitPrompt" | "agent.task" | "workspace.info" | "workspace.read" | "workspace.write" | "notifications.send" | "audio.transcribe" | "credentials.cookies" | "automations.manage" | "process")[] | undefined;
     icon?: "terminal" | "image" | "panel" | "activity" | "bar-chart-3" | "chart" | "file-text" | "globe" | "layout-dashboard" | "line-chart" | "palette" | "pie-chart" | "table" | undefined;
     placement?: "right-dock" | undefined;
     singleton?: boolean | undefined;
@@ -354,7 +354,7 @@ export declare const PanelAppManifest: z.ZodEffects<z.ZodDiscriminatedUnion<"sch
         }[] | undefined;
     } | undefined;
     description?: string | undefined;
-    permissions?: ("context.session" | "context.workspace" | "storage" | "external.open" | "agent.submitPrompt" | "workspace.info" | "workspace.read" | "workspace.write" | "notifications.send" | "credentials.cookies" | "automations.manage")[] | undefined;
+    permissions?: ("context.session" | "context.workspace" | "storage" | "external.open" | "agent.submitPrompt" | "agent.task" | "workspace.info" | "workspace.read" | "workspace.write" | "notifications.send" | "audio.transcribe" | "credentials.cookies" | "automations.manage" | "process")[] | undefined;
     icon?: "terminal" | "image" | "panel" | "activity" | "bar-chart-3" | "chart" | "file-text" | "globe" | "layout-dashboard" | "line-chart" | "palette" | "pie-chart" | "table" | undefined;
     placement?: "right-dock" | undefined;
     singleton?: boolean | undefined;

package/dist/panel-apps/manifest.js

@@ -7,12 +7,15 @@ export const PANEL_APP_PERMISSIONS = [
     "storage",
     "external.open",
     "agent.submitPrompt",
+    "agent.task",
     "workspace.info",
     "workspace.read",
     "workspace.write",
     "notifications.send",
+    "audio.transcribe",
     "credentials.cookies",
     "automations.manage",
+    "process",
 ];
 export const PANEL_APP_ICONS = [
     "panel",
@@ -138,7 +141,7 @@ const PanelAppManifestFields = {
     icon: z.enum(PANEL_APP_ICONS).default("panel"),
     placement: z.literal("right-dock").default("right-dock"),
     singleton: z.boolean().default(true),
-    permissions: z.array(z.enum(PANEL_APP_PERMISSIONS)).max(12).default([]),
+    permissions: z.array(z.enum(PANEL_APP_PERMISSIONS)).max(16).default([]),
 };
 /**
  * Schema v2 keeps one installable Panel App identity while allowing it to
@@ -180,12 +183,13 @@ export const PanelAppManifest = z
         });
     }
     if ((value.permissions.includes("workspace.read") ||
-        value.permissions.includes("workspace.write")) &&
+        value.permissions.includes("workspace.write") ||
+        value.permissions.includes("audio.transcribe")) &&
         !value.permissions.includes("context.workspace")) {
         ctx.addIssue({
             code: z.ZodIssueCode.custom,
             path: ["permissions"],
-            message: "workspace.read and workspace.write require context.workspace",
+            message: "workspace.read, workspace.write, and audio.transcribe require context.workspace",
         });
     }
     if (value.permissions.includes("automations.manage") &&

package/dist/prompt/composer.d.ts

@@ -89,6 +89,21 @@ export interface ComposerOptions {
      * Undefined/0 → inject all.
      */
     memoriesMaxAgeDays?: number;
+    /**
+     * When true (set from the active behavior profile, e.g. the Pet manager),
+     * the injected memory index keeps only memories relevant to this cwd —
+     * global-layer project/dream records tied to other projects are dropped.
+     * See MemoryManager.buildInjectionIndex(currentProjectOnly).
+     */
+    memoryCurrentProjectOnly?: boolean;
+    /** Isolated runs can omit repository/user instruction discovery entirely. */
+    disableInstructions?: boolean;
+    /** Isolated runs can omit persistent-memory context entirely. */
+    disableMemoryContext?: boolean;
+    /** Isolated runs can omit capability-owned volatile context providers. */
+    disableCapabilityContext?: boolean;
+    /** Isolated runs can omit bound-source metadata. */
+    disableSourcesContext?: boolean;
 }
 export declare class PromptComposer {
     private readonly options;

package/dist/prompt/composer.js

@@ -30,6 +30,8 @@ export class PromptComposer {
      * Build the userContext prefix message (CLAUDE.md content as <system-reminder>).
      */
     buildUserContextMessage() {
+        if (this.options.disableInstructions === true)
+            return null;
         const instructions = this.getInstructions();
         // NOTE: memory is intentionally NOT here. It used to be, but memory mutates
         // constantly (extraction, recall usage++/lastUsed, approve/demote), and this
@@ -51,6 +53,8 @@ export class PromptComposer {
     }
     /** Build volatile context contributed by installed capability modules. */
     async buildSystemContext() {
+        if (this.options.disableCapabilityContext === true)
+            return "";
         const preset = this.options.preset ?? resolveAgentPreset();
         const parts = await Promise.all((this.options.dynamicContextProviders ?? []).map(async (provider) => {
             try {
@@ -102,18 +106,26 @@ export class PromptComposer {
         });
         const skillsListing = buildSkillListing(skills);
         const declaredSkillGap = this.buildDeclaredSkillGap(skills);
-        const capabilityContext = await this.buildSystemContext();
+        // Capability and sources context are independent I/O — resolve them
+        // concurrently instead of serially.
+        const [capabilityContext, sourcesContext] = await Promise.all([
+            this.buildSystemContext(),
+            (async () => {
+                if (this.options.disableSourcesContext === true)
+                    return "";
+                try {
+                    return (await this.options.sourcesContextProvider?.()) ?? "";
+                }
+                catch {
+                    // Optional metadata context must not make a turn fail.
+                    return "";
+                }
+            })(),
+        ]);
         // Memory rides here (tail, past the cache breakpoint) — not the system
         // prefix — so a memory change (extraction / recall usage++ / approve) never
         // re-bills the cached prefix. See buildUserContextMessage for the rationale.
         const memoryContext = this.getMemoryContext();
-        let sourcesContext = "";
-        try {
-            sourcesContext = (await this.options.sourcesContextProvider?.()) ?? "";
-        }
-        catch {
-            // Optional metadata context must not make a turn fail.
-        }
         const goalToolContext = this.buildGoalToolContext();
         const parts = [
             skillsListing,
@@ -259,6 +271,8 @@ export class PromptComposer {
         return this.cachedInstructions;
     }
     getMemoryContext() {
+        if (this.options.disableMemoryContext === true)
+            return "";
         try {
             // Three-layer injection (用户拍板): a compact index merging GLOBAL +
             // DIGITAL-HUMAN + PROJECT memories. Global memories are surfaced every
@@ -268,6 +282,7 @@ export class PromptComposer {
                 projectDir: this.options.cwd,
                 profileDir: this.options.profileMemoryDir,
                 maxAgeDays: this.options.memoriesMaxAgeDays,
+                currentProjectOnly: this.options.memoryCurrentProjectOnly,
             });
         }
         catch {

package/dist/protocol/chat-session-manager.js

@@ -168,6 +168,9 @@ export class ChatSessionManager {
     getLiveSessionSnapshot() {
         const sessions = [];
         this.forEachSession((session) => {
+            const sessionManager = this.engineSessionManager(session.engine);
+            if (sessionManager?.isEphemeralSession?.(session.id))
+                return;
             sessions.push({
                 sessionId: session.id,
                 busy: session.isBusy(),
@@ -280,6 +283,12 @@ export class ChatSessionManager {
     sweepIdle() {
         const cutoff = Date.now() - this.idleTtlMs;
         for (const [id, s] of [...this.sessions]) {
+            // Quick Chat transcripts are process-local by design. Closing one from
+            // the generic idle sweeper destroys its inherited context while the
+            // renderer still owns (and displays) the panel. Its explicit claim/
+            // panel lifecycle is the sole authority that may close it.
+            if (id.startsWith("qchat-"))
+                continue;
             if (s.lastActivityAt >= cutoff)
                 continue;
             if (s.isBusy())

package/dist/protocol/server.js

@@ -58,10 +58,39 @@ function runInputError(params) {
     if (params.injected !== undefined && typeof params.injected !== "boolean") {
         return "injected must be a boolean";
     }
+    if (params.quickChatClaimId !== undefined &&
+        (typeof params.quickChatClaimId !== "string" || params.quickChatClaimId.length === 0)) {
+        return "quickChatClaimId must be a non-empty string";
+    }
     if (params.behaviorMode !== undefined &&
         (typeof params.behaviorMode !== "string" || params.behaviorMode.length === 0)) {
         return `invalid behavior mode: ${String(params.behaviorMode)}`;
     }
+    for (const [field, value, maxItems] of [
+        ["toolAllowlist", params.toolAllowlist, 32],
+        ["skillAllowlist", params.skillAllowlist, 8],
+    ]) {
+        if (value === undefined)
+            continue;
+        if (!Array.isArray(value) ||
+            value.length > maxItems ||
+            value.some((name) => typeof name !== "string" || name.length === 0 || name.length > 128 || /[\r\n]/.test(name))) {
+            return `${field} must be an array of at most ${maxItems} bounded names`;
+        }
+    }
+    if (params.ephemeral !== undefined && typeof params.ephemeral !== "boolean") {
+        return "ephemeral must be a boolean";
+    }
+    if (params.maxTurns !== undefined &&
+        (!Number.isInteger(params.maxTurns) || params.maxTurns < 1 || params.maxTurns > 30)) {
+        return "maxTurns must be an integer from 1 to 30";
+    }
+    if (params.maxContextTokens !== undefined &&
+        (!Number.isInteger(params.maxContextTokens) ||
+            params.maxContextTokens < 4_096 ||
+            params.maxContextTokens > 131_072)) {
+        return "maxContextTokens must be an integer from 4096 to 131072";
+    }
     if (params.kind !== undefined && (typeof params.kind !== "string" || params.kind.length === 0)) {
         return `invalid session kind: ${String(params.kind)}`;
     }
@@ -1080,6 +1109,8 @@ export class AgentServer {
         const sessionConfig = {
             cwd: params.cwd,
             projectTrusted: params.projectTrusted,
+            maxTurns: params.maxTurns,
+            maxContextTokens: params.maxContextTokens,
             goal: typeof params.goal === "string" || (params.goal != null && typeof params.goal === "object")
                 ? params.goal
                 : undefined,
@@ -1163,6 +1194,9 @@ export class AgentServer {
                 permissionMode: params.permissionMode,
                 planMode: params.planMode,
                 behaviorMode: params.behaviorMode,
+                toolAllowlist: params.toolAllowlist,
+                skillAllowlist: params.skillAllowlist,
+                ephemeral: params.ephemeral,
                 profileParams: params.profileParams,
                 workspaceProfile: params.workspaceProfile,
                 sessionBrief: params.sessionBrief,
@@ -1290,6 +1324,9 @@ export class AgentServer {
                 permissionMode: params.permissionMode,
                 planMode: params.planMode,
                 behaviorMode: params.behaviorMode,
+                toolAllowlist: params.toolAllowlist,
+                skillAllowlist: params.skillAllowlist,
+                ephemeral: params.ephemeral,
                 profileParams: params.profileParams,
                 workspaceProfile: params.workspaceProfile,
                 sessionBrief: params.sessionBrief,
@@ -2240,7 +2277,17 @@ export class AgentServer {
                 if (!archiveEngine)
                     return;
                 try {
-                    const result = await archiveEngine.archiveTurnRange(archiveSessionId, { start, end });
+                    const toClientMessageId = typeof params.toClientMessageId === "string" ? params.toClientMessageId : undefined;
+                    const anchors = toClientMessageId
+                        ? {
+                            toClientMessageId,
+                            ...(typeof params.fromClientMessageId === "string"
+                                ? { fromClientMessageId: params.fromClientMessageId }
+                                : {}),
+                            ...(typeof params.segmentId === "string" ? { segmentId: params.segmentId } : {}),
+                        }
+                        : undefined;
+                    const result = await archiveEngine.archiveTurnRange(archiveSessionId, { start, end }, anchors);
                     if (result.before > result.after) {
                         const event = {
                             type: "context_compact",
@@ -2265,6 +2312,35 @@ export class AgentServer {
                 }
                 break;
             }
+            case "archive_marker": {
+                const markerSessionId = typeof params.sessionId === "string" && params.sessionId.length > 0
+                    ? params.sessionId
+                    : undefined;
+                const summary = typeof params.summary === "string" ? params.summary : undefined;
+                const toClientMessageId = typeof params.toClientMessageId === "string" ? params.toClientMessageId : undefined;
+                if (!markerSessionId || !summary || !toClientMessageId) {
+                    this.transport.send(createErrorResponse(req.id, ErrorCodes.InvalidParams, "archive_marker requires sessionId, summary and toClientMessageId"));
+                    return;
+                }
+                const markerEngine = await this.resolveEngineForSessionQuery(req, markerSessionId, engine, "archive_marker");
+                if (!markerEngine)
+                    return;
+                try {
+                    const appended = await markerEngine.appendArchiveMarker(markerSessionId, {
+                        summary,
+                        toClientMessageId,
+                        ...(typeof params.fromClientMessageId === "string"
+                            ? { fromClientMessageId: params.fromClientMessageId }
+                            : {}),
+                        ...(typeof params.segmentId === "string" ? { segmentId: params.segmentId } : {}),
+                    });
+                    this.transport.send(createResponse(req.id, { type: "archive_marker", data: { appended } }));
+                }
+                catch (err) {
+                    this.transport.send(createErrorResponse(req.id, ErrorCodes.InternalError, err.message));
+                }
+                break;
+            }
             case "models": {
                 if (!engine) {
                     this.transport.send(createErrorResponse(req.id, ErrorCodes.InternalError, "No engine available for models query"));

package/dist/protocol/types.d.ts

@@ -80,6 +80,8 @@ export interface RunParams {
     attachments?: InputAttachmentMeta[];
     /** Stable id for the user's submit intent; duplicate ids are idempotent. */
     clientMessageId?: string;
+    /** Desktop host ownership generation for process-local Quick Chat runs. */
+    quickChatClaimId?: string;
     /**
      * Host-generated system reminder. Persisted with an injected marker so disk
      * transcript readers hide it as a user bubble while retaining the assistant reply.
@@ -116,6 +118,16 @@ export interface RunParams {
     planMode?: boolean;
     /** Named behavior profile for a product-specific per-run interaction mode. */
     behaviorMode?: RunBehaviorMode;
+    /** Host-authorized per-run hard tool allowlist. Empty means no tools. */
+    toolAllowlist?: string[];
+    /** Host-authorized per-run hard Skill allowlist. Empty means no Skills. */
+    skillAllowlist?: string[];
+    /** Keep a fresh run Session process-local and out of normal Session pickers. */
+    ephemeral?: boolean;
+    /** Optional fresh-session turn ceiling used by bounded host Tasks. */
+    maxTurns?: number;
+    /** Optional fresh-session context ceiling used by bounded host Tasks. */
+    maxContextTokens?: number;
     /**
      * Generic per-run parameters consumed by the active behavior profile
      * (delivered as non-durable run context; never appended to the task or
@@ -342,6 +354,20 @@ export interface QueryParams {
     start?: unknown;
     /** Used by archive_range: half-open message-index window end (exclusive). */
     end?: unknown;
+    /**
+     * Used by archive_range (optional) and archive_marker (required): the
+     * clientMessageId the archived/marked span ends at. archive_range only
+     * persists a boundary when this anchor is supplied and resolves to a live
+     * message; without it, archive_range behaves exactly as before (in-memory
+     * compaction only, no persisted range_archive event).
+     */
+    toClientMessageId?: string;
+    /** Used by archive_range / archive_marker: optional start-of-span anchor. */
+    fromClientMessageId?: string;
+    /** Used by archive_range / archive_marker: optional idempotency key. */
+    segmentId?: string;
+    /** Used by archive_marker: the summary text to persist without a model call. */
+    summary?: string;
 }
 export interface QueryResult {
     type: string;

package/dist/session/memory.d.ts

@@ -233,6 +233,16 @@ export declare class MemoryManager {
         baseDir?: string;
         maxAgeDays?: number;
         now?: number;
+        /**
+         * Trim the global layer to what is relevant to this run's project:
+         * project-type and dream-scope records are per-project experience, so
+         * they are kept only when their origin metadata ties them to
+         * `projectDir`. General knowledge (user/feedback/reference in user
+         * scope) always stays; the project layer is untouched because it is
+         * already this project's own store. Set by behavior profiles whose runs
+         * never work inside other repos (e.g. a manager/dispatcher session).
+         */
+        currentProjectOnly?: boolean;
     }): string;
     /**
      * Load every entry belonging to the given scope, without changing the

package/dist/session/memory.js

@@ -651,7 +651,13 @@ export class MemoryManager {
         const profile = opts.profileDir ? new MemoryManager({ baseDir: opts.profileDir }) : null;
         const pinnedFirst = (a, b) => Number(b.pinned ?? false) - Number(a.pinned ?? false);
         const collect = (mm) => filterByAge([...mm.loadScope("user"), ...mm.loadScope("dream")], opts.maxAgeDays, opts.now).sort(pinnedFirst);
-        const globalEntries = collect(global);
+        let globalEntries = collect(global);
+        if (opts.currentProjectOnly) {
+            const tiedToProject = (e) => opts.projectDir !== undefined &&
+                (e.originProject === opts.projectDir ||
+                    (e.originProjects?.includes(opts.projectDir) ?? false));
+            globalEntries = globalEntries.filter((e) => (e.type !== "project" && e.scope !== "dream") || tiedToProject(e));
+        }
         const profileEntries = profile ? collect(profile) : [];
         const projectEntries = project ? collect(project) : [];
         if (globalEntries.length === 0 && profileEntries.length === 0 && projectEntries.length === 0) {

package/dist/session/session-manager.d.ts

@@ -108,7 +108,7 @@ export declare class SessionManager {
      * Create a session. `qchat-` sessions stay process-local; ordinary sessions
      * materialize state.json + transcript.jsonl before return.
      */
-    create(cwd: string, model: string, provider: string, explicitSessionId?: string, parentSessionId?: string | null, origin?: import("../types.js").SessionOrigin, kind?: SessionKind): SessionBundle;
+    create(cwd: string, model: string, provider: string, explicitSessionId?: string, parentSessionId?: string | null, origin?: import("../types.js").SessionOrigin, kind?: SessionKind, ephemeral?: boolean): SessionBundle;
     /** Whether a persisted or process-local session exists. */
     exists(sessionId: string): boolean;
     /**
@@ -236,6 +236,8 @@ export declare class SessionManager {
      * workspace/profile metadata.
      */
     readSessionState(sessionId: string): SessionState | undefined;
+    /** Whether a live or persisted Session is explicitly process-local. */
+    isEphemeralSession(sessionId: string): boolean;
     /**
      * Merge a field-level state update into the latest persisted snapshot.
      *