qlogicagent 2.10.22 → 2.10.23

package/dist/types/skills/permissions/hook-runner.d.ts

@@ -1,10 +1,11 @@
 import type { HookRegistry } from "../../contracts/hooks.js";
+import type { ChatMessage } from "../../protocol/wire/index.js";
 import type { ToolDefinition } from "../../protocol/wire/index.js";
 import { PermissionRuleEngine } from "./rule-engine.js";
 import type { PermissionUpdate, ApprovalRequest, ApprovalResponse } from "./types.js";
 import { type ClassifierLLMCall } from "./permission-classifier.js";
-import type { PermissionRole } from "../../orchestration/subagent/task-types.js";
 import { DenialAuditLogger } from "./denial-audit-log.js";
+export type PermissionRole = "interactive" | "coordinator" | "worker";
 export interface PermissionCheckerDeps {
     ruleEngine: PermissionRuleEngine;
     hookRegistry: HookRegistry;
@@ -27,7 +28,7 @@ export interface PermissionCheckerDeps {
      * Recent conversation messages for classifier context.
      * Called lazily when the classifier needs to run.
      */
-    getRecentMessages?: () => import("../../agent/types.js").ChatMessage[];
+    getRecentMessages?: () => ChatMessage[];
     /**
      * Permission role context (CC: interactive/coordinator/worker).
      * Determines how the checker behaves:
@@ -42,6 +43,13 @@ export interface PermissionCheckerDeps {
     sessionId?: string;
     /** Getter for current turn ID (changes per turn). */
     getTurnId?: () => string;
+    /** Best-effort community telemetry sink for consent-gated sandbox metrics. */
+    communityTelemetryRecorder?: {
+        recordTelemetry(input: {
+            event: "community.sandbox.violation";
+            metadata?: Record<string, unknown>;
+        }): Promise<unknown>;
+    };
 }
 export declare class PermissionChecker {
     private readonly ruleEngine;
@@ -56,6 +64,9 @@ export declare class PermissionChecker {
     private readonly auditLogger;
     private readonly sessionId;
     private readonly getTurnId;
+    private readonly communityTelemetryRecorder;
+    private readonly communitySandboxTurnIds;
+    private readonly communitySandboxRuleEngine;
     private unregisterHook;
     /** Tool meta cache — populated from ToolDefinition[] at agent creation */
     private toolMetaCache;
@@ -78,9 +89,11 @@ export declare class PermissionChecker {
      */
     setToolMeta(tools: ToolDefinition[]): void;
     get ruleEngineRef(): PermissionRuleEngine;
+    private checkCommunitySandboxThenBase;
     /** Fire permission.denied hook + onDenied callback + audit log */
     private fireDenied;
     private handleResult;
+    private handleInteractiveApproval;
     /**
      * Worker/coordinator "ask" handler: classifier-only, no approval dialog.
      * CC pattern: headless workers never prompt users.

package/dist/types/skills/permissions/settings-watcher.d.ts

@@ -8,6 +8,7 @@
  * Settings file location: `.qlogicagent/settings.json` in the project root
  *
  * Watched fields:
+ *   - permissions: PermissionConfig
  *   - permissionMode: PermissionMode
  *   - permissionRules: PermissionRuleEntry[]
  *   - defaultBehavior: PermissionBehavior
@@ -19,6 +20,7 @@ import type { PermissionRuleEntry, PermissionMode, PermissionBehavior } from "./
 import { PermissionRuleEngine } from "./rule-engine.js";
 /** On-disk settings file schema */
 export interface SettingsFile {
+    permissions?: unknown;
     permissionMode?: PermissionMode;
     permissionRules?: PermissionRuleEntry[];
     defaultBehavior?: PermissionBehavior;

package/dist/types/skills/permissions/types.d.ts

@@ -1,113 +1,2 @@
-/**
- * User-configurable permission modes.
- *
- * cc reference:
- *   'default'           → normal prompting
- *   'bypassPermissions' → auto-accept all
- *   'acceptEdits'       → auto-accept edits only
- *   'dontAsk'           → auto-deny all
- *   'plan'              → planning mode (pause execution)
- *
- * We keep the cc names for compatibility.
- */
-export type PermissionMode = "default" | "bypassPermissions" | "acceptEdits" | "dontAsk" | "plan" | "auto";
-export declare const PERMISSION_MODES: readonly PermissionMode[];
-export type PermissionBehavior = "allow" | "deny" | "ask";
-export type PermissionDecisionReason = {
-    type: "rule";
-    rule: PermissionRuleEntry;
-} | {
-    type: "mode";
-    mode: PermissionMode;
-} | {
-    type: "hook";
-    hookName: string;
-    reason: string;
-} | {
-    type: "classifier";
-    classifier: string;
-    reason: string;
-} | {
-    type: "tool_check";
-    reason: string;
-} | {
-    type: "eligibility";
-    reasonCodes: string[];
-} | {
-    type: "sandbox";
-    reason: string;
-} | {
-    type: "other";
-    reason: string;
-};
-export interface PermissionAllowResult {
-    behavior: "allow";
-    updatedInput?: Record<string, unknown>;
-    decisionReason?: PermissionDecisionReason;
-}
-export interface PermissionAskResult {
-    behavior: "ask";
-    message: string;
-    toolName: string;
-    input?: Record<string, unknown>;
-    suggestions?: PermissionUpdate[];
-    decisionReason?: PermissionDecisionReason;
-}
-export interface PermissionDenyResult {
-    behavior: "deny";
-    message: string;
-    decisionReason: PermissionDecisionReason;
-}
-export type PermissionResult = PermissionAllowResult | PermissionAskResult | PermissionDenyResult;
-export interface PermissionUpdate {
-    /** Tool name or glob pattern */
-    pattern: string;
-    /** New rule to apply */
-    behavior: PermissionBehavior;
-    /** Human-readable description */
-    description?: string;
-}
-export interface PermissionRuleEntry {
-    /** Exact tool name or glob pattern */
-    pattern: string;
-    /** Action for matching tools */
-    behavior: PermissionBehavior;
-    /** Optional reason for logging/display */
-    reason?: string;
-    /** Source of this rule (config/user/plugin) */
-    source?: string;
-}
-export interface PermissionConfig {
-    /** Active permission mode */
-    mode: PermissionMode;
-    /** Rules evaluated in order; first match wins */
-    rules: PermissionRuleEntry[];
-    /** Default behavior when no rule matches */
-    defaultBehavior: PermissionBehavior;
-}
-export interface ToolPermissionCheckInput {
-    toolName: string;
-    arguments?: Record<string, unknown>;
-    /** Tool metadata from ToolDefinition.meta */
-    meta?: {
-        isReadOnly?: boolean;
-        isDangerous?: boolean;
-        requiresApproval?: boolean;
-        parallelSafe?: boolean;
-    };
-}
-export interface ApprovalRequest {
-    approvalId: string;
-    callId: string;
-    toolName: string;
-    arguments?: Record<string, unknown>;
-    message: string;
-    suggestions?: PermissionUpdate[];
-}
-export interface ApprovalResponse {
-    approvalId: string;
-    decision: "approved" | "denied";
-    updatedInput?: Record<string, unknown>;
-    /** Persistent rule to save */
-    permissionUpdate?: PermissionUpdate;
-}
+export { PERMISSION_MODES, } from "../../runtime/ports/permission-contracts.js";
+export type { ApprovalRequest, ApprovalResponse, PermissionAllowResult, PermissionAskResult, PermissionBehavior, PermissionConfig, PermissionDecisionReason, PermissionDenyResult, PermissionMode, PermissionResult, PermissionRuleEntry, PermissionUpdate, ToolPermissionCheckInput, } from "../../runtime/ports/permission-contracts.js";

package/dist/types/skills/portable-tool.d.ts

@@ -14,6 +14,19 @@ export interface ToolContentBlock {
     data?: string;
     mimeType?: string;
 }
+export type LocaleCode = "zh-CN" | "en-US" | (string & {});
+export interface LocalizedText {
+    /**
+     * Stable translation key. UI clients decide the final language.
+     * Backends must not localize this string.
+     */
+    key: string;
+    /** Safe fallback for clients that do not have the key yet. */
+    fallback: string;
+    /** Optional bundled values for offline clients. */
+    values?: Partial<Record<LocaleCode, string>>;
+}
+export type CapabilityCategory = "orchestration" | "filesystem" | "web" | "search" | "memory" | "media" | "developer" | "mcp" | "automation" | "system" | "other";
 /**
  * Result of executing a portable tool.
  */
@@ -38,6 +51,15 @@ export interface PortableTool<TParams = Record<string, unknown>> {
     name: string;
     /** Human-readable label. */
     label: string;
+    /**
+     * UI category declared by the tool registration.
+     * Clients must not infer this from name/description.
+     */
+    category?: CapabilityCategory;
+    /** UI-facing localized name. */
+    displayName?: LocalizedText;
+    /** UI-facing localized summary. The LLM-only description stays separate. */
+    displayDescription?: LocalizedText;
     /** Tool description shown to the LLM. */
     description: string;
     /** JSON Schema object describing the tool's parameters. */

package/dist/types/skills/skill-system/skill-lifecycle.d.ts

@@ -11,6 +11,11 @@ export interface SkillLifecycleRecord {
     pinned: boolean;
     useCount: number;
     source: "learned" | "created" | "installed" | "promoted";
+    registryResourceId?: string;
+    registryVersion?: string;
+    registrySourceTier?: "official" | "community";
+    registryRiskTier?: "R0" | "R1" | "R2" | "R3";
+    registryEffectiveRiskTier?: "R0" | "R1" | "R2" | "R3";
 }
 export interface SkillLifecycleStore {
     version: 1;

package/dist/types/skills/skill-system/skill-source.d.ts

@@ -1,77 +1,6 @@
-import type { SkillScanSummary } from "./skill-types.js";
 /**
- * Trust level for a skill based on its origin.
- * Higher trust = fewer restrictions.
- */
-export type TrustLevel = "builtin" | "verified" | "community" | "unknown";
-/**
- * Result of a skill security scan decision.
- */
-export type ScanVerdict = "pass" | "quarantine" | "reject";
-/**
- * A resolved skill source descriptor.
- */
-export interface SkillSourceDescriptor {
-    /** Source type. */
-    kind: "bundled" | "github" | "npm" | "local" | "tap";
-    /** Human-readable identifier, e.g. "github:user/repo" or "npm:@scope/pkg". */
-    identifier: string;
-    /** Trust level derived from source type + verification status. */
-    trust: TrustLevel;
-    /** Version constraint (semver or tag). */
-    version?: string;
-}
-/**
- * Result of fetching a skill from a remote source.
- */
-export interface SkillFetchResult {
-    /** Local directory where fetched content was placed. */
-    quarantineDir: string;
-    /** Manifest metadata if found. */
-    name?: string;
-    version?: string;
-}
-/**
- * Dependencies for the skill fetch step.
- * Consumers inject actual HTTP/git/npm implementations.
- */
-export interface SkillFetchDeps {
-    /**
-     * Download / clone / extract a skill from its source into a quarantine dir.
-     * Must NOT place content in the final install location.
-     */
-    fetch(source: SkillSourceDescriptor, quarantineDir: string): Promise<SkillFetchResult>;
-}
-/**
- * Dependencies for the skill storage step.
- * Manages the local skill directory and registry.
- */
-export interface SkillStorageDeps {
-    /** Root directory for installed skills (e.g. ~/.xiaozhiclaw/skills/). */
-    skillsDir: string;
-    /** Registry subdirectory (e.g. ~/.xiaozhiclaw/skills/.registry/). */
-    registryDir: string;
-    /** Move content from quarantine to final location. */
-    moveToInstallDir(quarantineDir: string, skillName: string): Promise<string>;
-    /** Remove an installed skill directory. */
-    removeSkill(skillName: string): Promise<void>;
-    /** Read the registry lock file. */
-    readLockfile(): Promise<SkillLockfile>;
-    /** Write the registry lock file. */
-    writeLockfile(lockfile: SkillLockfile): Promise<void>;
-}
-/**
- * A single version history entry for a skill.
- */
-export interface SkillVersionEntry {
-    version: string;
-    updatedAt: string;
-    changelog?: string;
-    /** Integrity hash of the SKILL.md content at this version (sha256). */
-    integrity?: string;
-}
-/**
- * Usage statistics for a skill.
+ * Lightweight per-skill stats stored in `~/.qlogicagent/skill-stats.json`.
+ * Covers learned, promoted, and registry-installed skills.
  */
 export interface SkillUsageStats {
     /** Total number of times this skill has been invoked/applied. */
@@ -87,43 +16,6 @@ export interface SkillUsageStats {
     /** Derived success rate = (invokeCount - negativeCount) / invokeCount */
     successRate?: number;
 }
-/**
- * Single entry in the skill lockfile.
- */
-export interface SkillLockEntry {
-    name: string;
-    source: SkillSourceDescriptor;
-    installedAt: string;
-    scanVerdict: ScanVerdict;
-    scanSummary?: SkillScanSummary;
-    /** Integrity hash of the SKILL.md content (sha256). */
-    integrity?: string;
-    /** Current version (from frontmatter or auto-incremented). */
-    currentVersion?: string;
-    /** Version history — newest first. */
-    versionHistory?: SkillVersionEntry[];
-    /** Usage statistics. */
-    usage?: SkillUsageStats;
-}
-/**
- * Complete lockfile for all installed skills.
- */
-export interface SkillLockfile {
-    version: 1;
-    entries: Record<string, SkillLockEntry>;
-}
-/**
- * Record a skill usage event. Mutates the lockfile entry in-place.
- */
-export declare function recordSkillUsage(lockfile: SkillLockfile, skillName: string, feedback?: "positive" | "negative" | null): void;
-/**
- * Record a skill version update. Pushes current version to history.
- */
-export declare function recordSkillVersionUpdate(lockfile: SkillLockfile, skillName: string, newVersion: string, changelog?: string, integrity?: string): void;
-/**
- * Lightweight per-skill stats stored in `~/.qlogicagent/skill-stats.json`.
- * This is independent of the lockfile — covers learned, promoted, and installed skills.
- */
 export interface SkillStatsFile {
     [skillName: string]: SkillUsageStats;
 }
@@ -144,41 +36,3 @@ export declare function getSkillStats(agentHome: string, skillName: string): Ski
 export declare function getAllSkillStats(agentHome: string): SkillStatsFile;
 /** Reset cache (for testing). */
 export declare function resetStatsCache(): void;
-/**
- * Result of a skill install operation.
- */
-export interface SkillInstallResult {
-    success: boolean;
-    name: string;
-    installDir?: string;
-    verdict: ScanVerdict;
-    scanSummary?: SkillScanSummary;
-    error?: string;
-}
-/**
- * Orchestrate the full install pipeline:
- * Fetch → Quarantine → Scan → Validate → Move → Lock
- *
- * This function is pure orchestration — actual I/O is delegated to deps.
- */
-export declare function installSkill(params: {
-    source: SkillSourceDescriptor;
-    fetchDeps: SkillFetchDeps;
-    storageDeps: SkillStorageDeps;
-    scanSkillDir: (dir: string) => Promise<SkillScanSummary>;
-    quarantineDir: string;
-}): Promise<SkillInstallResult>;
-/**
- * Uninstall a skill: remove from disk + update lockfile.
- */
-export declare function uninstallSkill(params: {
-    skillName: string;
-    storageDeps: SkillStorageDeps;
-}): Promise<{
-    success: boolean;
-    error?: string;
-}>;
-/**
- * Create an empty lockfile.
- */
-export declare function createEmptyLockfile(): SkillLockfile;

package/dist/types/skills/tool-access.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Tool access constants for sub-agent tool filtering.
+ *
+ * CC-aligned: constants/tools.ts pattern.
+ * Tool filtering happens at agent SPAWN time (not per-iteration in tool loop).
+ *
+ * CC reference: claude-code-haha/src/constants/tools.ts
+ * CC reference: claude-code-haha/src/tools/AgentTool/agentToolUtils.ts
+ */
+import type { ToolDefinition } from "../protocol/wire/index.js";
+/**
+ * Tools that ALL sub-agents are forbidden from using.
+ * CC: ALL_AGENT_DISALLOWED_TOOLS
+ */
+export declare const AGENT_DISALLOWED_TOOLS: Set<string>;
+/**
+ * Additional tools denied for custom (user-defined) agents.
+ * CC: CUSTOM_AGENT_DISALLOWED_TOOLS
+ */
+export declare const CUSTOM_AGENT_DISALLOWED_TOOLS: Set<string>;
+/**
+ * Filter tools available to a sub-agent.
+ *
+ * CC pattern: tool filtering happens at agent SPAWN time,
+ * not per-iteration inside the tool loop.
+ *
+ * @param tools - Parent's full tool pool
+ * @param isBuiltIn - Whether the agent is a built-in agent type (vs custom)
+ */
+export declare function filterToolsForAgent(tools: ToolDefinition[], isBuiltIn: boolean): ToolDefinition[];

package/dist/types/skills/tools/skill-tool.d.ts

@@ -1,7 +1,7 @@
 import type { PortableTool } from "../portable-tool.js";
 import type { WorkspaceSkill } from "../skill-system/skill-types.js";
 export declare const SKILL_TOOL_NAME: "skill";
-export type SkillAction = "invoke" | "list" | "view" | "create" | "edit" | "patch" | "delete" | "promote" | "install";
+export type SkillAction = "invoke" | "list" | "view" | "create" | "edit" | "patch" | "delete" | "promote";
 export interface SkillToolParams {
     action: SkillAction;
     name?: string;
@@ -12,15 +12,13 @@ export interface SkillToolParams {
     fileContent?: string;
     oldString?: string;
     newString?: string;
-    /** URL to download skill from (for 'install' action). */
-    url?: string;
 }
 export declare const SKILL_TOOL_SCHEMA: {
     readonly type: "object";
     readonly properties: {
         readonly action: {
             readonly type: "string";
-            readonly enum: readonly ["invoke", "list", "view", "create", "edit", "patch", "delete", "promote", "install"];
+            readonly enum: readonly ["invoke", "list", "view", "create", "edit", "patch", "delete", "promote"];
             readonly description: string;
         };
         readonly name: {
@@ -55,10 +53,6 @@ export declare const SKILL_TOOL_SCHEMA: {
             readonly type: "string";
             readonly description: "Replacement text for patch action.";
         };
-        readonly url: {
-            readonly type: "string";
-            readonly description: "URL to download a skill from (for 'install' action). Supports skill stores (skillhub.cn, skill.io, GitHub raw links, etc.) and any direct .md URL.";
-        };
     };
     readonly required: readonly ["action"];
 };
@@ -108,7 +102,5 @@ export interface SkillToolDeps {
     }): Promise<SkillManageResult>;
     /** Promote a project-level skill to user/global level. Returns success message. */
     promoteSkill?(name: string): Promise<SkillManageResult>;
-    /** Install a skill from a URL. Downloads .md content and saves it. */
-    installSkill?(url: string, name?: string): Promise<SkillManageResult>;
 }
 export declare function createSkillMetaTool(deps: SkillToolDeps): PortableTool<SkillToolParams>;

package/dist/types/skills/tools/web-search-tool.d.ts

@@ -1,4 +1,5 @@
 import type { PortableTool } from "../portable-tool.js";
+import type { WebSearchBackend, WebSearchOutput, WebSearchResult } from "../../runtime/ports/web-search-contracts.js";
 export declare const WEB_SEARCH_TOOL_NAME: "web_search";
 export interface WebSearchToolParams {
     query: string;
@@ -29,29 +30,11 @@ export declare const WEB_SEARCH_TOOL_SCHEMA: {
     };
     readonly required: readonly ["query"];
 };
-export interface WebSearchResult {
-    title: string;
-    url: string;
-    snippet: string;
-}
-export interface WebSearchOutput {
-    query: string;
-    results: WebSearchResult[];
-    totalResults?: number;
-}
+export type { WebSearchOutput, WebSearchResult };
 /**
  * Host-provided web search backend.
  * The host may use any search engine (SearXNG, Brave, Tavily, etc.).
  */
-export interface WebSearchToolDeps {
-    /**
-     * Execute a web search and return results.
-     * The host is responsible for API key management and rate limiting.
-     */
-    search(query: string, options?: {
-        allowedDomains?: string[];
-        blockedDomains?: string[];
-        maxResults?: number;
-    }): Promise<WebSearchOutput>;
+export interface WebSearchToolDeps extends WebSearchBackend {
 }
 export declare function createWebSearchTool(deps: WebSearchToolDeps): PortableTool<WebSearchToolParams>;

package/dist/types/skills/tools.d.ts

@@ -13,7 +13,7 @@
  */
 import type { PortableTool } from "./portable-tool.js";
 import type { ToolDefinition } from "../protocol/wire/index.js";
-import { AGENT_DISALLOWED_TOOLS, CUSTOM_AGENT_DISALLOWED_TOOLS, filterToolsForAgent } from "../agent/tool-access.js";
+import { AGENT_DISALLOWED_TOOLS, CUSTOM_AGENT_DISALLOWED_TOOLS, filterToolsForAgent } from "./tool-access.js";
 export { AGENT_DISALLOWED_TOOLS, CUSTOM_AGENT_DISALLOWED_TOOLS, filterToolsForAgent };
 /**
  * Register tools into the internal pool. Called by initToolDeps().

package/dist/types/transport/acp-server.d.ts

@@ -16,7 +16,7 @@
  * interface. The StdioServer implements this interface by routing ACP methods to
  * existing internal handlers.
  */
-import type { Transport } from "../cli/transport.js";
+import type { Transport } from "./io-transport.js";
 import { type AcpInitializeParams, type AcpInitializeResult, type AcpSessionNewParams, type AcpSessionNewResult, type AcpSessionPromptParams, type AcpSessionPromptResult, type AcpSessionEndParams, type AcpSessionSetConfigParams, type AcpSessionUpdateType, type AcpPermissionRequestParams, type AcpPermissionRequestResult } from "../protocol/wire/index.js";
 export declare const ACP_ERROR_CODES: {
     readonly PARSE_ERROR: -32700;

package/dist/types/transport/index.d.ts

@@ -3,4 +3,5 @@
  */
 export { AcpServer, ACP_ERROR_CODES } from "./acp-server.js";
 export type { AcpRequestHandler, AcpServerConfig } from "./acp-server.js";
+export type { Transport } from "./io-transport.js";
 export { emitAcpUpdate } from "./acp-event-emitter.js";

package/dist/types/transport/io-transport.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Abstract I/O layer for JSON-RPC message exchange.
+ *
+ * Physical transports such as stdio, WebSocket, or domain sockets implement
+ * this interface so protocol handlers do not depend on a concrete process
+ * entry point.
+ */
+export interface Transport {
+    /** Register the message handler, called for each parsed incoming message. */
+    onMessage(handler: (msg: unknown) => void): void;
+    /** Register the close handler, called when the transport closes. */
+    onClose(handler: () => void): void;
+    /** Send a JSON-RPC message. Implementations serialize as needed. */
+    send(msg: unknown): void;
+    /** Start listening for incoming messages. */
+    start(): void;
+    /** Close the transport gracefully. */
+    close(): void;
+}