@zhushanwen/subagent-engine-sdk 0.5.0 → 0.5.1

package/dist/{chunk-7I4XGL5J.js → chunk-BBWUC2EE.js}

@@ -2,8 +2,8 @@
 var NUL = "\0";
 function normalizeChannelName(markerLiteral) {
   let name = markerLiteral;
-  if (name.startsWith("XYZ_")) {
-    name = name.slice("XYZ_".length);
+  if (name.startsWith("TAIJI_")) {
+    name = name.slice("TAIJI_".length);
   }
   if (name.endsWith(":")) {
     name = name.slice(0, -1);

package/dist/{chunk-3K2P2CM2.js → chunk-CNQTJJF5.js}

@@ -33,7 +33,7 @@ function spawnEngineChild(opts) {
   return child;
 }
 var DEFAULT_ENGINE_HOST_REQUEST_TIMEOUT_MS = 3e4;
-var ENGINE_HOST_REQUEST_TIMEOUT_ENV = "XYZ_ENGINE_HOST_REQUEST_TIMEOUT_MS";
+var ENGINE_HOST_REQUEST_TIMEOUT_ENV = "TAIJI_ENGINE_HOST_REQUEST_TIMEOUT_MS";
 var SWEEP_INTERVAL_MS = 1e3;
 function resolveHostRequestTimeoutMs(opts) {
   if (opts.hostRequestTimeoutMs !== void 0) return opts.hostRequestTimeoutMs;

package/dist/{chunk-DSQ7JQKM.js → chunk-GSW3DMN6.js}

@@ -1,9 +1,9 @@
 // src/relay-env.ts
-var RELAY_ENV_SOCKET = "XYZ_SUBAGENT_RELAY_SOCKET";
-var RELAY_ENV_NODE = "XYZ_SUBAGENT_RELAY_NODE";
-var RELAY_ENV_SCRIPT = "XYZ_SUBAGENT_RELAY_SCRIPT";
-var RELAY_ENV_SESSION_ID = "XYZ_SUBAGENT_RELAY_SESSION_ID";
-var RELAY_ENV_RECORD_ID = "XYZ_SUBAGENT_RELAY_RECORD_ID";
+var RELAY_ENV_SOCKET = "TAIJI_SUBAGENT_RELAY_SOCKET";
+var RELAY_ENV_NODE = "TAIJI_SUBAGENT_RELAY_NODE";
+var RELAY_ENV_SCRIPT = "TAIJI_SUBAGENT_RELAY_SCRIPT";
+var RELAY_ENV_SESSION_ID = "TAIJI_SUBAGENT_RELAY_SESSION_ID";
+var RELAY_ENV_RECORD_ID = "TAIJI_SUBAGENT_RELAY_RECORD_ID";
 var RELAY_PROTOCOL_VERSION = 1;
 var RELAY_EXIT_CODES = {
   /** 握手被拒：协议版本不匹配（安装损坏，重装应用）。 */

package/dist/{chunk-BBVZK5DL.js → chunk-M3SZTDNQ.js}

@@ -5,25 +5,25 @@ import {
 // src/env.ts
 var logger = getLogger("engine-sdk/env");
 var ENGINE_ENV_PREFIXES = [
-  "XYZ_",
-  "XYZ_AGENT_",
-  "XYZ_SUBAGENT_"
+  "TAIJI_",
+  "TAIJI_AGENT_",
+  "TAIJI_SUBAGENT_"
 ];
 var ENGINE_ENV_DENY_LIST = [
-  "XYZ_AGENT_PACKAGED",
-  "XYZ_RUNTIME_TOKEN",
-  "XYZ_AGENT_API_KEY",
-  "XYZ_SUBAGENT_RELAY_SESSION_ID",
-  "XYZ_SUBAGENT_RELAY_RECORD_ID"
+  "TAIJI_AGENT_PACKAGED",
+  "TAIJI_RUNTIME_TOKEN",
+  "TAIJI_AGENT_API_KEY",
+  "TAIJI_SUBAGENT_RELAY_SESSION_ID",
+  "TAIJI_SUBAGENT_RELAY_RECORD_ID"
 ];
 var ENGINE_ENV_L0_INFRA_KEYS = [
-  "XYZ_AGENT_DATA_DIR",
-  "XYZ_AGENT_ENGINE_NODE",
+  "TAIJI_AGENT_DATA_DIR",
+  "TAIJI_AGENT_ENGINE_NODE",
   "ELECTRON_RUN_AS_NODE",
-  "XYZ_AGENT_SUBAGENT",
-  "XYZ_SUBAGENT_RELAY_SOCKET",
-  "XYZ_SUBAGENT_RELAY_NODE",
-  "XYZ_SUBAGENT_RELAY_SCRIPT"
+  "TAIJI_AGENT_SUBAGENT",
+  "TAIJI_SUBAGENT_RELAY_SOCKET",
+  "TAIJI_SUBAGENT_RELAY_NODE",
+  "TAIJI_SUBAGENT_RELAY_SCRIPT"
 ];
 var ENV_PREFIX_SHAPE_RE = /^[A-Za-z0-9_]+$/;
 function deleteEnvKeysCaseInsensitive(env, names) {
@@ -73,14 +73,14 @@ function applyManifestAllowlist(env, opts) {
   }
 }
 function injectL0InfraKeys(env, opts) {
-  env.XYZ_AGENT_DATA_DIR = opts.dataDir;
-  if (opts.engineNode !== void 0) env.XYZ_AGENT_ENGINE_NODE = opts.engineNode;
+  env.TAIJI_AGENT_DATA_DIR = opts.dataDir;
+  if (opts.engineNode !== void 0) env.TAIJI_AGENT_ENGINE_NODE = opts.engineNode;
   if (opts.electronRunAsNode === true) env.ELECTRON_RUN_AS_NODE = "1";
-  env.XYZ_AGENT_SUBAGENT = "1";
+  env.TAIJI_AGENT_SUBAGENT = "1";
   if (opts.relay !== void 0) {
-    env.XYZ_SUBAGENT_RELAY_SOCKET = opts.relay.socket;
-    env.XYZ_SUBAGENT_RELAY_NODE = opts.relay.node;
-    env.XYZ_SUBAGENT_RELAY_SCRIPT = opts.relay.script;
+    env.TAIJI_SUBAGENT_RELAY_SOCKET = opts.relay.socket;
+    env.TAIJI_SUBAGENT_RELAY_NODE = opts.relay.node;
+    env.TAIJI_SUBAGENT_RELAY_SCRIPT = opts.relay.script;
   }
   if (opts.identityEnv !== void 0) {
     for (const [key, value] of Object.entries(opts.identityEnv)) {

package/dist/{chunk-HYES77BR.js → chunk-MSAJXIP4.js}

@@ -18,8 +18,8 @@ function positiveIntEnv(env, key) {
 }
 function stderrRotationParams(env) {
   return {
-    maxBytes: positiveIntEnv(env, "XYZ_LOG_MAX_BYTES") ?? DEFAULT_STDERR_MAX_BYTES,
-    keepDays: positiveIntEnv(env, "XYZ_LOG_KEEP_DAYS") ?? DEFAULT_STDERR_KEEP_DAYS
+    maxBytes: positiveIntEnv(env, "TAIJI_LOG_MAX_BYTES") ?? DEFAULT_STDERR_MAX_BYTES,
+    keepDays: positiveIntEnv(env, "TAIJI_LOG_KEEP_DAYS") ?? DEFAULT_STDERR_KEEP_DAYS
   };
 }
 function stderrLogPathFor(engineDataDir, pid, prefix) {

package/dist/{chunk-WORT4PG7.js → chunk-QOEXD2FT.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-PYO3YR7W.js";
 import {
   engineTimeoutDetail
-} from "./chunk-F5JZMK74.js";
+} from "./chunk-WMDMXP2F.js";
 import {
   getLogger
 } from "./chunk-75QEMUGV.js";

package/dist/{chunk-3IBT7MTB.js → chunk-W3BKI2BP.js}

@@ -1,10 +1,10 @@
 import {
   EngineSdkError
-} from "./chunk-F5JZMK74.js";
+} from "./chunk-WMDMXP2F.js";
 
 // src/node-executor.ts
 import { spawn } from "child_process";
-var ENGINE_NODE_ENV = "XYZ_AGENT_ENGINE_NODE";
+var ENGINE_NODE_ENV = "TAIJI_AGENT_ENGINE_NODE";
 var PROBE_TIMEOUT_MS = 5e3;
 function probeNodeExecutor(execPath, isElectron) {
   return new Promise((resolve) => {
@@ -64,7 +64,7 @@ async function resolvePiExtensionLaunch(entryPath, entryArgs, env) {
   if (engineNode === void 0 || engineNode === "") {
     throw engineNotFound(
       `pi extension host must spawn engines via injected executor ${ENGINE_NODE_ENV}, but it is not set (host process.execPath is the pi binary, not a node executor)`,
-      `The xyz-agent runtime injects ${ENGINE_NODE_ENV} when spawning the pi host. If you are running the extension inside a packaged app, report this as a packaging regression; standalone pi installs do not use the pi-extension host kind.`
+      `The taiji runtime injects ${ENGINE_NODE_ENV} when spawning the pi host. If you are running the extension inside a packaged app, report this as a packaging regression; standalone pi installs do not use the pi-extension host kind.`
     );
   }
   const isElectron = env.ELECTRON_RUN_AS_NODE === "1";

package/dist/{chunk-F5JZMK74.js → chunk-WMDMXP2F.js}

@@ -17,7 +17,7 @@ var CRASH_REBUILD_BACKOFF_MS = [
   CRASH_REBUILD_BACKOFF_STEP_3_MS
 ];
 var STDERR_TAIL_CHARS = 400;
-var ENGINE_EVENT_COALESCE_ENV = "XYZ_ENGINE_EVENT_COALESCE";
+var ENGINE_EVENT_COALESCE_ENV = "TAIJI_ENGINE_EVENT_COALESCE";
 var ENGINE_EVENT_COALESCE_DEFAULT = "0";
 
 // src/protocol/error-codes.ts
@@ -71,7 +71,7 @@ function engineConversationUnsupportedError(engineId) {
   return new EngineSdkError(
     "engine_capability_unsupported",
     `engine '${engineId}' \u4E0D\u652F\u6301 resume \u7EED\u804A\uFF08capabilities.conversation = 'unsupported'\uFF0Cmanifest \u65E0 conversation gate \u4F4D\uFF09`,
-    `\u53BB\u6389 conversation \u53C2\u6570\uFF08modeless \u4E0B\u65E0\u884C\u4E3A\u6548\u679C\uFF09\uFF0C\u6216\u4FEE manifest capabilities / \u5347\u7EA7\u5F15\u64CE\u5305\uFF08\u82E5\u5F15\u64CE\u5B9E\u9645\u652F\u6301\u8BE5\u80FD\u529B\uFF09`,
+    `\u6539\u7528\u58F0\u660E conversation \u80FD\u529B\u7684\u5F15\u64CE\u7EED\u804A\uFF08\u6216\u4EE5\u65B0\u4EFB\u52A1\u91CD\u6D3E\uFF09\uFF0C\u6216\u4FEE manifest capabilities / \u5347\u7EA7\u5F15\u64CE\u5305\uFF08\u82E5\u5F15\u64CE\u5B9E\u9645\u652F\u6301\u8BE5\u80FD\u529B\uFF09`,
     { engineId, capability: "conversation", declared: "unsupported" }
   );
 }

package/dist/{chunk-GT6YLLN4.js → chunk-X24IVQKJ.js}

@@ -4,7 +4,7 @@ import {
 
 // src/data-dir.ts
 var logger = getLogger("subagents");
-var XYZ_DATA_DIR_ENV = "XYZ_AGENT_DATA_DIR";
+var TAIJI_DATA_DIR_ENV = "TAIJI_AGENT_DATA_DIR";
 var WARNED_SLOT_KEY = /* @__PURE__ */ Symbol.for("@zhushanwen/subagent-engine-sdk.data-dir-warned");
 function getWarnedSlot() {
   let slot = Reflect.get(globalThis, WARNED_SLOT_KEY);
@@ -18,19 +18,19 @@ function resetDataDirWarnForTests() {
   getWarnedSlot().current = false;
 }
 function resolveEngineDataDir(env, opts = {}) {
-  const fromEnv = env[XYZ_DATA_DIR_ENV]?.trim();
+  const fromEnv = env[TAIJI_DATA_DIR_ENV]?.trim();
   if (fromEnv !== void 0 && fromEnv !== "") return fromEnv;
   const fallback = opts.fallbackDataRoot?.trim();
   if (fallback === void 0 || fallback === "") {
     throw new Error(
-      `[subagent-engine-sdk] engine_not_found: ${XYZ_DATA_DIR_ENV} is not set and no fallback data root was injected. Recovery: the host must inject ${XYZ_DATA_DIR_ENV} into the engine process env (xyz-agent runtime / pi extension host do this at spawn), or pass { fallbackDataRoot } when calling resolveEngineDataDir from a host that resolves the data root itself.`
+      `[subagent-engine-sdk] engine_not_found: ${TAIJI_DATA_DIR_ENV} is not set and no fallback data root was injected. Recovery: the host must inject ${TAIJI_DATA_DIR_ENV} into the engine process env (taiji runtime / pi extension host do this at spawn), or pass { fallbackDataRoot } when calling resolveEngineDataDir from a host that resolves the data root itself.`
     );
   }
   if (!getWarnedSlot().current) {
     getWarnedSlot().current = true;
     const warn = opts.warn ?? defaultWarn;
     warn(
-      `[engine-data-dir] ${XYZ_DATA_DIR_ENV} is not set; engine journal/pool fall back to the injected data root (${fallback}). The xyz-agent host normally injects this env \u2014 if you are running inside xyz-agent, check the runtime spawn env; standalone installs intentionally use the injected root.`
+      `[engine-data-dir] ${TAIJI_DATA_DIR_ENV} is not set; engine journal/pool fall back to the injected data root (${fallback}). The taiji host normally injects this env \u2014 if you are running inside taiji, check the runtime spawn env; standalone installs intentionally use the injected root.`
     );
   }
   return fallback;
@@ -40,7 +40,7 @@ function defaultWarn(msg) {
 }
 
 export {
-  XYZ_DATA_DIR_ENV,
+  TAIJI_DATA_DIR_ENV,
   resetDataDirWarnForTests,
   resolveEngineDataDir
 };

package/dist/{chunk-365AUV6N.js → chunk-YE472JOO.js}

@@ -1,6 +1,6 @@
 // src/nesting-guard.ts
 import { AsyncLocalStorage } from "async_hooks";
-var NESTED_SPAWN_ENV = "XYZ_AGENT_SUBAGENT";
+var NESTED_SPAWN_ENV = "TAIJI_AGENT_SUBAGENT";
 var NATIVE_NESTED_KEYS = ["CLAUDECODE", "ZSW_NESTED"];
 var NATIVE_NESTED_PREFIXES = ["PI_SUBAGENT_"];
 var NestedSpawnRejectedError = class extends Error {
@@ -9,7 +9,7 @@ var NestedSpawnRejectedError = class extends Error {
   recovery;
   constructor() {
     super(
-      "nested_spawn_rejected: this process is already a subagent (XYZ_AGENT_SUBAGENT=1)"
+      "nested_spawn_rejected: this process is already a subagent (TAIJI_AGENT_SUBAGENT=1)"
     );
     this.name = "NestedSpawnRejectedError";
     this.recovery = "Subagents must not spawn further subagents (unbounded recursion guard). Do the work directly inside the current task instead of delegating.";

package/dist/data-dir.cjs

@@ -20,7 +20,7 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 // src/data-dir.ts
 var data_dir_exports = {};
 __export(data_dir_exports, {
-  XYZ_DATA_DIR_ENV: () => XYZ_DATA_DIR_ENV,
+  TAIJI_DATA_DIR_ENV: () => TAIJI_DATA_DIR_ENV,
   resetDataDirWarnForTests: () => resetDataDirWarnForTests,
   resolveEngineDataDir: () => resolveEngineDataDir
 });
@@ -75,7 +75,7 @@ function getLogger(component) {
 
 // src/data-dir.ts
 var logger = getLogger("subagents");
-var XYZ_DATA_DIR_ENV = "XYZ_AGENT_DATA_DIR";
+var TAIJI_DATA_DIR_ENV = "TAIJI_AGENT_DATA_DIR";
 var WARNED_SLOT_KEY = /* @__PURE__ */ Symbol.for("@zhushanwen/subagent-engine-sdk.data-dir-warned");
 function getWarnedSlot() {
   let slot = Reflect.get(globalThis, WARNED_SLOT_KEY);
@@ -89,19 +89,19 @@ function resetDataDirWarnForTests() {
   getWarnedSlot().current = false;
 }
 function resolveEngineDataDir(env, opts = {}) {
-  const fromEnv = env[XYZ_DATA_DIR_ENV]?.trim();
+  const fromEnv = env[TAIJI_DATA_DIR_ENV]?.trim();
   if (fromEnv !== void 0 && fromEnv !== "") return fromEnv;
   const fallback = opts.fallbackDataRoot?.trim();
   if (fallback === void 0 || fallback === "") {
     throw new Error(
-      `[subagent-engine-sdk] engine_not_found: ${XYZ_DATA_DIR_ENV} is not set and no fallback data root was injected. Recovery: the host must inject ${XYZ_DATA_DIR_ENV} into the engine process env (xyz-agent runtime / pi extension host do this at spawn), or pass { fallbackDataRoot } when calling resolveEngineDataDir from a host that resolves the data root itself.`
+      `[subagent-engine-sdk] engine_not_found: ${TAIJI_DATA_DIR_ENV} is not set and no fallback data root was injected. Recovery: the host must inject ${TAIJI_DATA_DIR_ENV} into the engine process env (taiji runtime / pi extension host do this at spawn), or pass { fallbackDataRoot } when calling resolveEngineDataDir from a host that resolves the data root itself.`
     );
   }
   if (!getWarnedSlot().current) {
     getWarnedSlot().current = true;
     const warn = opts.warn ?? defaultWarn;
     warn(
-      `[engine-data-dir] ${XYZ_DATA_DIR_ENV} is not set; engine journal/pool fall back to the injected data root (${fallback}). The xyz-agent host normally injects this env \u2014 if you are running inside xyz-agent, check the runtime spawn env; standalone installs intentionally use the injected root.`
+      `[engine-data-dir] ${TAIJI_DATA_DIR_ENV} is not set; engine journal/pool fall back to the injected data root (${fallback}). The taiji host normally injects this env \u2014 if you are running inside taiji, check the runtime spawn env; standalone installs intentionally use the injected root.`
     );
   }
   return fallback;
@@ -111,7 +111,7 @@ function defaultWarn(msg) {
 }
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
-  XYZ_DATA_DIR_ENV,
+  TAIJI_DATA_DIR_ENV,
   resetDataDirWarnForTests,
   resolveEngineDataDir
 });

package/dist/data-dir.d.cts

@@ -1,10 +1,10 @@
-/** xyz-agent 数据目录 env 名（与 packages/shared/src/paths.ts 的 SSOT 变量同名）。 */
-declare const XYZ_DATA_DIR_ENV = "XYZ_AGENT_DATA_DIR";
+/** taiji 数据目录 env 名（与 packages/shared/src/paths.ts 的 SSOT 变量同名）。 */
+declare const TAIJI_DATA_DIR_ENV = "TAIJI_AGENT_DATA_DIR";
 /** 测试隔离专用：重置 warn-once 标记（生产禁用）。 */
 declare function resetDataDirWarnForTests(): void;
 /**
  * 解析引擎数据目录（journal 落盘 / 隔离池的根）：
- *   1. env[XYZ_AGENT_DATA_DIR]（宿主注入，权威通道）；
+ *   1. env[TAIJI_AGENT_DATA_DIR]（宿主注入，权威通道）；
  *   2. 缺失 + opts.fallbackDataRoot 显式传入（宿主解析过的数据根）→ 用之 + warn 一次
  *      （非权威通道回退必须可观测——journal 落点变化不留静默漂移）；
  *   3. 两者皆缺 → 抛错（engine_not_found 语义：错误含 env 名、期望值示例与恢复动作；
@@ -17,4 +17,4 @@ declare function resolveEngineDataDir(env: NodeJS.ProcessEnv, opts?: {
     warn?: (msg: string) => void;
 }): string;
 
-export { XYZ_DATA_DIR_ENV, resetDataDirWarnForTests, resolveEngineDataDir };
+export { TAIJI_DATA_DIR_ENV, resetDataDirWarnForTests, resolveEngineDataDir };

package/dist/data-dir.d.ts

@@ -1,10 +1,10 @@
-/** xyz-agent 数据目录 env 名（与 packages/shared/src/paths.ts 的 SSOT 变量同名）。 */
-declare const XYZ_DATA_DIR_ENV = "XYZ_AGENT_DATA_DIR";
+/** taiji 数据目录 env 名（与 packages/shared/src/paths.ts 的 SSOT 变量同名）。 */
+declare const TAIJI_DATA_DIR_ENV = "TAIJI_AGENT_DATA_DIR";
 /** 测试隔离专用：重置 warn-once 标记（生产禁用）。 */
 declare function resetDataDirWarnForTests(): void;
 /**
  * 解析引擎数据目录（journal 落盘 / 隔离池的根）：
- *   1. env[XYZ_AGENT_DATA_DIR]（宿主注入，权威通道）；
+ *   1. env[TAIJI_AGENT_DATA_DIR]（宿主注入，权威通道）；
  *   2. 缺失 + opts.fallbackDataRoot 显式传入（宿主解析过的数据根）→ 用之 + warn 一次
  *      （非权威通道回退必须可观测——journal 落点变化不留静默漂移）；
  *   3. 两者皆缺 → 抛错（engine_not_found 语义：错误含 env 名、期望值示例与恢复动作；
@@ -17,4 +17,4 @@ declare function resolveEngineDataDir(env: NodeJS.ProcessEnv, opts?: {
     warn?: (msg: string) => void;
 }): string;
 
-export { XYZ_DATA_DIR_ENV, resetDataDirWarnForTests, resolveEngineDataDir };
+export { TAIJI_DATA_DIR_ENV, resetDataDirWarnForTests, resolveEngineDataDir };

package/dist/data-dir.js

@@ -1,12 +1,12 @@
 import {
-  XYZ_DATA_DIR_ENV,
+  TAIJI_DATA_DIR_ENV,
   resetDataDirWarnForTests,
   resolveEngineDataDir
-} from "./chunk-GT6YLLN4.js";
+} from "./chunk-X24IVQKJ.js";
 import "./chunk-75QEMUGV.js";
 import "./chunk-JSBRDJBE.js";
 export {
-  XYZ_DATA_DIR_ENV,
+  TAIJI_DATA_DIR_ENV,
   resetDataDirWarnForTests,
   resolveEngineDataDir
 };

package/dist/env.cjs

@@ -78,25 +78,25 @@ function getLogger(component) {
 // src/env.ts
 var logger = getLogger("engine-sdk/env");
 var ENGINE_ENV_PREFIXES = [
-  "XYZ_",
-  "XYZ_AGENT_",
-  "XYZ_SUBAGENT_"
+  "TAIJI_",
+  "TAIJI_AGENT_",
+  "TAIJI_SUBAGENT_"
 ];
 var ENGINE_ENV_DENY_LIST = [
-  "XYZ_AGENT_PACKAGED",
-  "XYZ_RUNTIME_TOKEN",
-  "XYZ_AGENT_API_KEY",
-  "XYZ_SUBAGENT_RELAY_SESSION_ID",
-  "XYZ_SUBAGENT_RELAY_RECORD_ID"
+  "TAIJI_AGENT_PACKAGED",
+  "TAIJI_RUNTIME_TOKEN",
+  "TAIJI_AGENT_API_KEY",
+  "TAIJI_SUBAGENT_RELAY_SESSION_ID",
+  "TAIJI_SUBAGENT_RELAY_RECORD_ID"
 ];
 var ENGINE_ENV_L0_INFRA_KEYS = [
-  "XYZ_AGENT_DATA_DIR",
-  "XYZ_AGENT_ENGINE_NODE",
+  "TAIJI_AGENT_DATA_DIR",
+  "TAIJI_AGENT_ENGINE_NODE",
   "ELECTRON_RUN_AS_NODE",
-  "XYZ_AGENT_SUBAGENT",
-  "XYZ_SUBAGENT_RELAY_SOCKET",
-  "XYZ_SUBAGENT_RELAY_NODE",
-  "XYZ_SUBAGENT_RELAY_SCRIPT"
+  "TAIJI_AGENT_SUBAGENT",
+  "TAIJI_SUBAGENT_RELAY_SOCKET",
+  "TAIJI_SUBAGENT_RELAY_NODE",
+  "TAIJI_SUBAGENT_RELAY_SCRIPT"
 ];
 var ENV_PREFIX_SHAPE_RE = /^[A-Za-z0-9_]+$/;
 function deleteEnvKeysCaseInsensitive(env, names) {
@@ -146,14 +146,14 @@ function applyManifestAllowlist(env, opts) {
   }
 }
 function injectL0InfraKeys(env, opts) {
-  env.XYZ_AGENT_DATA_DIR = opts.dataDir;
-  if (opts.engineNode !== void 0) env.XYZ_AGENT_ENGINE_NODE = opts.engineNode;
+  env.TAIJI_AGENT_DATA_DIR = opts.dataDir;
+  if (opts.engineNode !== void 0) env.TAIJI_AGENT_ENGINE_NODE = opts.engineNode;
   if (opts.electronRunAsNode === true) env.ELECTRON_RUN_AS_NODE = "1";
-  env.XYZ_AGENT_SUBAGENT = "1";
+  env.TAIJI_AGENT_SUBAGENT = "1";
   if (opts.relay !== void 0) {
-    env.XYZ_SUBAGENT_RELAY_SOCKET = opts.relay.socket;
-    env.XYZ_SUBAGENT_RELAY_NODE = opts.relay.node;
-    env.XYZ_SUBAGENT_RELAY_SCRIPT = opts.relay.script;
+    env.TAIJI_SUBAGENT_RELAY_SOCKET = opts.relay.socket;
+    env.TAIJI_SUBAGENT_RELAY_NODE = opts.relay.node;
+    env.TAIJI_SUBAGENT_RELAY_SCRIPT = opts.relay.script;
   }
   if (opts.identityEnv !== void 0) {
     for (const [key, value] of Object.entries(opts.identityEnv)) {

package/dist/env.d.cts

@@ -21,12 +21,12 @@ interface EngineChildEnvOptions {
     engineNode?: string;
     /** L0：执行器为 Electron 二进制 → 注入 ELECTRON_RUN_AS_NODE=1 */
     electronRunAsNode?: boolean;
-    /** L0：relay 三键（宿主 relay 激活时传；三键必经 L0——L1 拒绝 XYZ_SUBAGENT_ 前缀、L2 是 manifest 面，两层都到不了） */
+    /** L0：relay 三键（宿主 relay 激活时传；三键必经 L0——L1 拒绝 TAIJI_SUBAGENT_ 前缀、L2 是 manifest 面，两层都到不了） */
     relay?: EngineRelayEnv;
     /**
      * L0：引擎侧身份 env 透传通道（identityEnv）。现行事实（ext-simplify-17 D4，
      * 20260914 真机探针证实）：PI_SUBAGENT_ROOT_SESSION_ID / PI_SUBAGENT_SELF_RECORD_ID
-     * 两键已无写入方（本通道现无人传值），引擎链统一 subagent 标记 = XYZ_AGENT_SUBAGENT=1
+     * 两键已无写入方（本通道现无人传值），引擎链统一 subagent 标记 = TAIJI_AGENT_SUBAGENT=1
      * （见 injectL0InfraKeys 恒注入），base-tool-enhance 判据已重锚新标记。通道保留待
      * 另行裁决，读者见 docs/architecture/ext-simplify-17-shared-extraction.md §3.1 D4
      * 与探针报告 .tmp/dev-flow/ext-simplify-17-d4-probe.md。
@@ -45,8 +45,8 @@ interface EngineChildEnvOptions {
  * L0 键在最后写入故不受 L1 剥除影响（交集为 ∅ 由测试断言兜底）。
  *
  * 层规格（impl-plan §2.12 三层表）：
- * - L0 基础设施键：XYZ_AGENT_DATA_DIR / XYZ_AGENT_ENGINE_NODE / ELECTRON_RUN_AS_NODE
- *   （条件）/ XYZ_AGENT_SUBAGENT=1 / relay 三键 / identityEnv（injectL0InfraKeys）；
+ * - L0 基础设施键：TAIJI_AGENT_DATA_DIR / TAIJI_AGENT_ENGINE_NODE / ELECTRON_RUN_AS_NODE
+ *   （条件）/ TAIJI_AGENT_SUBAGENT=1 / relay 三键 / identityEnv（injectL0InfraKeys）；
  * - L1 deny + 显式剥除（恒高于 manifest 放行）：ENGINE_ENV_DENY_LIST
  *   （deny 两键 + 凭证键 + 父身份键 + 防御性剥除三死名）；
  * - L2 manifest 放行：envPrefixes 声明前缀的 processEnv 键（保留前缀拒绝、
@@ -69,7 +69,7 @@ interface BuildOutboundChildEnvOptions {
  * execFile 等）复用——R3 MF-C：deny 键不进 git 子进程，git hooks 等后代不再可能
  * 消费生命周期标志 / WS 令牌。
  *
- * 与 @xyz-agent/shared 版 buildOutboundChildEnv 的刻意差异：**缺省不做白名单过滤**
+ * 与 @taiji/shared 版 buildOutboundChildEnv 的刻意差异：**缺省不做白名单过滤**
  * （prefixes 省略 = 全量继承父 env + deny 剥除）。理由：SDK 消费面（zsw 宿主 /
  * 引擎 CLI）不可 import shared 的 ENV_WHITELIST_PREFIXES；引擎 spawn 的基座由
  * 调用方先经 buildEngineChildEnv 组装（其 baseEnv 已是 core 过滤后的），而

package/dist/env.d.ts

@@ -21,12 +21,12 @@ interface EngineChildEnvOptions {
     engineNode?: string;
     /** L0：执行器为 Electron 二进制 → 注入 ELECTRON_RUN_AS_NODE=1 */
     electronRunAsNode?: boolean;
-    /** L0：relay 三键（宿主 relay 激活时传；三键必经 L0——L1 拒绝 XYZ_SUBAGENT_ 前缀、L2 是 manifest 面，两层都到不了） */
+    /** L0：relay 三键（宿主 relay 激活时传；三键必经 L0——L1 拒绝 TAIJI_SUBAGENT_ 前缀、L2 是 manifest 面，两层都到不了） */
     relay?: EngineRelayEnv;
     /**
      * L0：引擎侧身份 env 透传通道（identityEnv）。现行事实（ext-simplify-17 D4，
      * 20260914 真机探针证实）：PI_SUBAGENT_ROOT_SESSION_ID / PI_SUBAGENT_SELF_RECORD_ID
-     * 两键已无写入方（本通道现无人传值），引擎链统一 subagent 标记 = XYZ_AGENT_SUBAGENT=1
+     * 两键已无写入方（本通道现无人传值），引擎链统一 subagent 标记 = TAIJI_AGENT_SUBAGENT=1
      * （见 injectL0InfraKeys 恒注入），base-tool-enhance 判据已重锚新标记。通道保留待
      * 另行裁决，读者见 docs/architecture/ext-simplify-17-shared-extraction.md §3.1 D4
      * 与探针报告 .tmp/dev-flow/ext-simplify-17-d4-probe.md。
@@ -45,8 +45,8 @@ interface EngineChildEnvOptions {
  * L0 键在最后写入故不受 L1 剥除影响（交集为 ∅ 由测试断言兜底）。
  *
  * 层规格（impl-plan §2.12 三层表）：
- * - L0 基础设施键：XYZ_AGENT_DATA_DIR / XYZ_AGENT_ENGINE_NODE / ELECTRON_RUN_AS_NODE
- *   （条件）/ XYZ_AGENT_SUBAGENT=1 / relay 三键 / identityEnv（injectL0InfraKeys）；
+ * - L0 基础设施键：TAIJI_AGENT_DATA_DIR / TAIJI_AGENT_ENGINE_NODE / ELECTRON_RUN_AS_NODE
+ *   （条件）/ TAIJI_AGENT_SUBAGENT=1 / relay 三键 / identityEnv（injectL0InfraKeys）；
  * - L1 deny + 显式剥除（恒高于 manifest 放行）：ENGINE_ENV_DENY_LIST
  *   （deny 两键 + 凭证键 + 父身份键 + 防御性剥除三死名）；
  * - L2 manifest 放行：envPrefixes 声明前缀的 processEnv 键（保留前缀拒绝、
@@ -69,7 +69,7 @@ interface BuildOutboundChildEnvOptions {
  * execFile 等）复用——R3 MF-C：deny 键不进 git 子进程，git hooks 等后代不再可能
  * 消费生命周期标志 / WS 令牌。
  *
- * 与 @xyz-agent/shared 版 buildOutboundChildEnv 的刻意差异：**缺省不做白名单过滤**
+ * 与 @taiji/shared 版 buildOutboundChildEnv 的刻意差异：**缺省不做白名单过滤**
  * （prefixes 省略 = 全量继承父 env + deny 剥除）。理由：SDK 消费面（zsw 宿主 /
  * 引擎 CLI）不可 import shared 的 ENV_WHITELIST_PREFIXES；引擎 spawn 的基座由
  * 调用方先经 buildEngineChildEnv 组装（其 baseEnv 已是 core 过滤后的），而

package/dist/env.js

@@ -4,7 +4,7 @@ import {
   ENGINE_ENV_PREFIXES,
   buildEngineChildEnv,
   buildOutboundChildEnv
-} from "./chunk-BBVZK5DL.js";
+} from "./chunk-M3SZTDNQ.js";
 import "./chunk-75QEMUGV.js";
 import "./chunk-JSBRDJBE.js";
 export {

package/dist/{error-codes-OvQlqiQw.d.ts → error-codes-DMGeUUUm.d.ts}

@@ -88,9 +88,10 @@ declare class EngineSdkError extends Error {
 declare function engineProtocolMismatchError(engineVersion: number): EngineSdkError;
 /**
  * 引擎 conversation 位拒绝的具名错误（[modeless 波2] 语义：无 resume 续聊通道的
- * 引擎，message 续聊资格被拒——manifest conversation 能力轴消费，core
- * capability-gate 的 conversation 分支与 message 资格门双写点共用本构造器）。
- * 文案契约：错误码 engine_capability_unsupported + 「去掉参数 / 修 manifest /
+ * 引擎，message 续聊资格被拒——manifest conversation 能力轴消费；[modeless 波5
+ * 收尾] core capability-gate 的显式参数分支随派发参数删除退役，本构造器消费方 =
+ * 引擎侧 resume gate（assertChatConversationSupported）与 message 资格门）。
+ * 文案契约：错误码 engine_capability_unsupported + 「换引擎续聊 / 修 manifest /
  * 升级引擎包」恢复指引，两侧一致防漂移。
  */
 declare function engineConversationUnsupportedError(engineId: string): EngineSdkError;

package/dist/{error-codes-SA5fGtx_.d.cts → error-codes-pT7RYTqQ.d.cts}

@@ -88,9 +88,10 @@ declare class EngineSdkError extends Error {
 declare function engineProtocolMismatchError(engineVersion: number): EngineSdkError;
 /**
  * 引擎 conversation 位拒绝的具名错误（[modeless 波2] 语义：无 resume 续聊通道的
- * 引擎，message 续聊资格被拒——manifest conversation 能力轴消费，core
- * capability-gate 的 conversation 分支与 message 资格门双写点共用本构造器）。
- * 文案契约：错误码 engine_capability_unsupported + 「去掉参数 / 修 manifest /
+ * 引擎，message 续聊资格被拒——manifest conversation 能力轴消费；[modeless 波5
+ * 收尾] core capability-gate 的显式参数分支随派发参数删除退役，本构造器消费方 =
+ * 引擎侧 resume gate（assertChatConversationSupported）与 message 资格门）。
+ * 文案契约：错误码 engine_capability_unsupported + 「换引擎续聊 / 修 manifest /
  * 升级引擎包」恢复指引，两侧一致防漂移。
  */
 declare function engineConversationUnsupportedError(engineId: string): EngineSdkError;