@qilin-agent/tool-schedule 3.1.4 → 3.1.6

package/README.i18n.yaml

@@ -63,8 +63,8 @@
   en: 2fbf2175168e8244
   zh: 9c4c1964ae59e661
 /qilin-agent-tool-schedule/known-limitations-and-deferred-work:
-  en: 502ddc2c0c8f0a24
-  zh: d1354984a6c036d9
+  en: 8227ac9f1baa7c33
+  zh: 8246a9386a0c3fff
 /qilin-agent-tool-schedule/known-limitations-and-deferred-work/dev-note:
   en: e67f633dc6fe7773
   zh: b2ee0fbaa165910d

package/README.md

@@ -117,7 +117,6 @@ Append-only; newly visible content follows the reusable request prefix and does
 - **Deletion does not retract a queued message** — a reminder the Host already delivered stays in the Session inbox after `schedule_delete`.
 - **Reminder timing belongs to the Host** — the tools expose no target-time correction, clock source, or delivery retry; those limits are the service's.
 - **Every tool refuses a delegated caller** — each of `schedule_create`, `schedule_list`, `schedule_update`, and `schedule_delete` reads the calling Agent's delegation depth before dispatch and returns `{ code: 'subagent_session', message: 'A delegated subagent cannot use reminders.' }` when that depth is above zero. The guard lives in this package and reads `delegationDepthOf` from `@qilin-agent/subagent`, the same accounting the delegation cap enforces, so it holds under any preset that mounts the tools.
-- **A preset's delegation rows remove the four tools from a child's prompt** — the `standard`, `cordis`, and `ptc` presets declare `toolFilter.deny` for `schedule_create`, `schedule_delete`, `schedule_list`, and `schedule_update` on both the `tool-subagent` and `tool-subagent-fork` rows. The provider applies that filter through `ctx.tools.restrict()` in the child scope, so the four tools leave a delegated child's prompt; delegating further on that chain intersects the same restriction.
 - **A Session a delegated child owns cannot arm a reminder** — `ScheduleService.create` throws `ScheduleInputError` with code `subagent_session`, and `ScheduleService.update` returns the non-mutating `subagent_session` result, when the Session's Agent has a delegation depth above zero. The delegation depth is the accounting the delegation cap itself reads, and the persisted session header carries it across a cold resume. The rule sits in the service, not in these tools, so other in-process consumers reach it too: the Automation surface included. `schedule_list` and `schedule_delete` still serve that Session, so a reminder stored before this rule stays removable.
 
 <a id="dev-note"></a>

package/README.zh.md

@@ -117,7 +117,6 @@ kind: "package-reference"
 - **删除不会撤回已排队的消息** —— 宿主已经投递的提醒在 `schedule_delete` 之后仍留在 Session 收件箱中。
 - **提醒时间由宿主负责** —— 这些工具不提供目标时间校正、时钟来源或投递重试；这些限制属于该服务。
 - **每个工具都拒绝被委派的调用方** —— `schedule_create`、`schedule_list`、`schedule_update` 与 `schedule_delete` 都会在派发前读取调用方 Agent 的委派深度，当该深度大于零时返回 `{ code: 'subagent_session', message: 'A delegated subagent cannot use reminders.' }`。该守卫位于本包内，读取来自 `@qilin-agent/subagent` 的 `delegationDepthOf`，即委派封顶本身执行的同一份记账，因此在任何挂载这些工具的 preset 下都成立。
-- **preset 的委派行让这四个工具从子 agent 的 prompt 中消失** —— `standard`、`cordis` 与 `ptc` preset 在 `tool-subagent` 与 `tool-subagent-fork` 两行上都声明 `toolFilter.deny`，拒绝 `schedule_create`、`schedule_delete`、`schedule_list` 和 `schedule_update`。provider 会在子作用域内通过 `ctx.tools.restrict()` 应用该过滤，因此这四个工具会从被委派子 agent 的 prompt 中消失；在子链上继续委派会沿链求交同一限制。
 - **被委派子 agent 拥有的 Session 不能设置提醒** —— 当 Session 的 Agent 委派深度大于零时，`ScheduleService.create` 会抛出 `ScheduleInputError`（code 为 `subagent_session`），`ScheduleService.update` 则返回非变更的 `subagent_session` 结果。委派深度正是委派封顶本身读取的同一份记账，持久化 session header 让它在冷恢复后仍然成立。这条规则在服务层而非这些工具里，因此其它进程内消费方（包括自动化任务页面）也会命中。`schedule_list` 与 `schedule_delete` 仍可服务该 Session，所以在这条规则之前存储的提醒仍可删除。
 
 <a id="dev-note"></a>

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@qilin-agent/tool-schedule",
   "description": "Model-facing reminder management tools (schedule_create, schedule_list, schedule_update, schedule_delete) over the Host ctx.schedule service",
-  "version": "3.1.4",
+  "version": "3.1.6",
   "publishConfig": {
     "access": "public"
   },
@@ -30,20 +30,20 @@
   ],
   "license": "MIT",
   "peerDependencies": {
-    "@qilin-agent/kylin": "~4.0.3",
-    "@qilin-agent/schedule": "3.1.4",
-    "@qilin-agent/llm": "3.1.4",
-    "@qilin-agent/subagent": "3.1.4",
-    "@qilin-agent/tools": "3.1.4"
+    "@qilin-agent/kylin": "~4.0.5",
+    "@qilin-agent/schedule": "3.1.6",
+    "@qilin-agent/llm": "3.1.6",
+    "@qilin-agent/subagent": "3.1.6",
+    "@qilin-agent/tools": "3.1.6"
   },
   "devDependencies": {
-    "@qilin-agent/llm": "3.1.4",
-    "@qilin-agent/schedule": "3.1.4",
-    "@qilin-agent/agent": "3.1.4",
-    "@qilin-agent/kylin": "~4.0.3",
-    "@qilin-agent/scope": "3.1.4",
-    "@qilin-agent/session": "3.1.4",
-    "@qilin-agent/subagent": "3.1.4",
-    "@qilin-agent/tools": "3.1.4"
+    "@qilin-agent/kylin": "~4.0.5",
+    "@qilin-agent/agent": "3.1.6",
+    "@qilin-agent/scope": "3.1.6",
+    "@qilin-agent/session": "3.1.6",
+    "@qilin-agent/schedule": "3.1.6",
+    "@qilin-agent/llm": "3.1.6",
+    "@qilin-agent/subagent": "3.1.6",
+    "@qilin-agent/tools": "3.1.6"
   }
 }