qlogicagent 2.10.22 → 2.10.24

package/dist/types/skills/memory/implicit-extraction.d.ts

@@ -1,58 +1 @@
-/**
- * Implicit Memory Extraction — CC extractMemories lightweight port.
- *
- * Architecture:
- *   Layer 1: Zero-cost signal detection (regex) — decides if turn has extractable content
- *   Layer 2: Lightweight LLM pass (async, non-blocking) — extracts structured facts
- *
- * This runs AFTER turn.end, so the user already has their response.
- * Layer 2 only fires for ~10-20% of turns (those with detectable signals).
- *
- * Reference: claude-code src/services/extractMemories/extractMemories.ts
- */
-import type { LocalMemoryProvider } from "./local-memory-provider.js";
-export interface ExtractedFact {
-    text: string;
-    category: "personal_fact" | "preference" | "event" | "lesson" | "pattern" | "decision";
-    importance: number;
-    eventDate?: string;
-}
-export interface ImplicitExtractionDeps {
-    /** Local memory provider for writing extracted facts. */
-    localProvider: LocalMemoryProvider;
-    /** User ID. */
-    userId: string;
-    /** Logger. */
-    log: {
-        debug(msg: string): void;
-        warn(msg: string): void;
-    };
-    /**
-     * LLM invocation function (uses background/cheap model).
-     * Returns structured JSON string or null if unavailable.
-     */
-    llmExtract?: (prompt: string) => Promise<string | null>;
-}
-export interface TurnPair {
-    userMessage: string;
-    assistantMessage: string;
-}
-/**
- * Layer 1: Detect if a user message contains signals worth extracting.
- * Zero LLM cost — pure regex scanning.
- *
- * @returns true if the message likely contains extractable personal facts/events
- */
-export declare function hasExtractionSignal(userMessage: string): boolean;
-/**
- * Layer 2: Use a lightweight LLM to extract structured facts from a turn pair.
- * Only called when Layer 1 signals are detected.
- */
-export declare function extractFactsViaLlm(turn: TurnPair, llmExtract: (prompt: string) => Promise<string | null>, today: string): Promise<ExtractedFact[]>;
-/**
- * Run the full implicit extraction pipeline for a completed turn.
- * This is async and non-blocking — call it after turn.end.
- *
- * @returns Number of facts extracted and stored
- */
-export declare function runImplicitExtraction(turn: TurnPair, deps: ImplicitExtractionDeps): Promise<number>;
+export * from "../../runtime/memory/implicit-extraction.js";

package/dist/types/skills/memory/local-memory-provider.d.ts

@@ -11,25 +11,21 @@
 import type { MemoryProvider, MemorySearchResult, MemorySearchOptions, MemoryIngestMessage, MemoryIngestOptions } from "../../protocol/wire/index.js";
 import type { MemoryClaimRecord, MemoryConflictRecord, MemoryUpdateInput, SqliteDatabase } from "./local-store.js";
 import { type LocalEmbeddingConfig } from "./local-embedding.js";
-import { type MemoryConsolidationResult } from "./memory-consolidation.js";
-/** A pre-extracted memory item ready to be stored (no LLM needed). */
-export interface ExtractedMemoryItem {
-    text: string;
-    category?: string;
-    importance?: number;
-    speaker?: string;
-    event_date?: string;
-    tags?: string[];
-}
+import { type ExtractedMemoryItem, type MemoryConsolidationResult } from "./memory-consolidation.js";
+export type { ExtractedMemoryItem } from "./memory-consolidation.js";
 export interface LocalMemoryProviderConfig {
     /** Not used for L2 vector memory (always global). Kept for interface compat. */
     projectRoot?: string;
+    /** Active owner profile. Determines the physical SQLite database location. */
+    ownerUserId?: string;
     /** Embedding configuration. If omitted, uses FTS-only search. */
     embedding?: LocalEmbeddingConfig;
     /** User ID prefix for multi-tenant isolation. */
     userIdPrefix?: string;
     /** Factory function to create the SQLite database instance. */
     createDatabase?: (dbPath: string) => SqliteDatabase;
+    /** Import legacy pre-profile memory DB into the owner profile on startup. */
+    migrateLegacyMemory?: boolean;
 }
 export declare class LocalMemoryProvider implements MemoryProvider {
     readonly providerId = "qmemory-local";

package/dist/types/skills/memory/local-store.d.ts

@@ -5,8 +5,7 @@
  * Uses better-sqlite3 for synchronous, fast, single-file persistence.
  *
  * Storage location:
- *   <project>/.qlogicagent/memory/memories.db    (project-level)
- *   ~/.qlogicagent/memory/memories.db             (user-level fallback)
+ *   ~/.qlogicagent/profiles/<owner_user_id>/memory/memories.db
  *
  * Schema:
  *   - memories: core fact storage with optional embedding blob
@@ -420,6 +419,7 @@ export declare class LocalMemoryStore {
 }
 /**
  * Resolve the database file path for L2 vector memory storage.
- * L2 vector memory is GLOBAL (cross-project knowledge), stored at ~/.qlogicagent/memory/.
+ * L2 vector memory is cross-project for one owner, but physically isolated by
+ * profile at ~/.qlogicagent/profiles/<owner_user_id>/memory/.
  */
-export declare function resolveMemoryDbPath(): string;
+export declare function resolveMemoryDbPath(ownerUserId?: string): string;

package/dist/types/skills/memory/memory-consolidation.d.ts

@@ -1,5 +1,13 @@
 import { LocalMemoryStore } from "./local-store.js";
-import type { ExtractedMemoryItem } from "./local-memory-provider.js";
+/** A pre-extracted memory item ready to be stored (no LLM needed). */
+export interface ExtractedMemoryItem {
+    text: string;
+    category?: string;
+    importance?: number;
+    speaker?: string;
+    event_date?: string;
+    tags?: string[];
+}
 export interface MemoryConsolidationOptions {
     source?: string;
     sessionId?: string;

package/dist/types/skills/memory/memory-provider-factory.d.ts

@@ -9,6 +9,8 @@ import type { LocalMemoryProvider } from "./local-memory-provider.js";
 export interface MemoryProviderFactoryConfig {
     /** Not used for L2 vector DB (always global). Kept for config compat. */
     projectRoot?: string;
+    /** Active owner profile. All local memory files are physically scoped here. */
+    ownerUserId: string;
     /** User ID prefix. */
     userIdPrefix?: string;
     /** Embedding config for local provider. */

package/dist/types/skills/memory/memory-tool.d.ts

@@ -1,6 +1,4 @@
-import type { MemoryProvider, MemorySearchResult } from "../../protocol/wire/index.js";
-import type { LocalMemoryProvider } from "./local-memory-provider.js";
-import type { Memdir } from "./memdir.js";
+import type { MemoryProvider, MemorySearchResult, MemoryToolLocalProvider, ProjectMemoryStore } from "../../runtime/ports/index.js";
 export declare const MEMORY_TOOL_NAME: "memory";
 export declare const MEMORY_TOOL_LABEL = "Memory";
 export declare const MEMORY_TOOL_ACTIONS: readonly ["add", "replace", "remove", "create_file", "write_file", "read_file", "delete_file", "list_files", "search", "remember", "temporal", "feedback"];
@@ -78,10 +76,10 @@ export interface MemoryToolResult {
     results?: MemorySearchResult[];
 }
 export interface MemoryToolExecutorDeps {
-    memdir: Memdir;
+    memdir: ProjectMemoryStore;
     provider?: MemoryProvider;
-    /** LocalMemoryProvider for temporal/feedback (typed narrow for advanced ops). */
-    localProvider?: LocalMemoryProvider;
+    /** Runtime memory provider for temporal/feedback (typed narrow for advanced ops). */
+    localProvider?: MemoryToolLocalProvider;
     userId: string;
 }
 export declare function executeMemoryTool(params: MemoryToolParams, deps: MemoryToolExecutorDeps): Promise<MemoryToolResult>;

package/dist/types/skills/memory/recall-category-filter.d.ts

@@ -1,54 +1 @@
-import type { QMemoryCategory } from "./categories.js";
-/** Detected query scenario with preferred categories. */
-export interface RecallCategoryHint {
-    /** Detected scenario label. */
-    scenario: QueryScenario;
-    /** Preferred categories for this scenario (ordered by priority). */
-    preferred: QMemoryCategory[];
-    /** Categories to deprioritize (still recalled but scored lower). */
-    deprioritized: QMemoryCategory[];
-    /** Confidence of scenario detection (0.0-1.0). */
-    confidence: number;
-}
-/** Known query scenarios. */
-export type QueryScenario = "coding" | "config" | "conversation" | "learning" | "decision" | "general";
-/**
- * Detect the query scenario and return category preferences.
- *
- * Uses pattern matching on the user query to infer intent.
- * Returns "general" (no filtering) when confidence is below threshold.
- *
- * @param query - User query text
- * @returns Category hint with preferred/deprioritized categories
- */
-export declare function detectRecallCategories(query: string): RecallCategoryHint;
-/**
- * Apply category boost/penalty to a recall score.
- *
- * Used by recall hooks to adjust memory scores based on category alignment.
- *
- * @param baseScore - Original relevance score (0.0-1.0)
- * @param memoryCategory - Category of the memory entry (if known)
- * @param hint - Category hint from detectRecallCategories()
- * @returns Adjusted score
- */
-export declare function applyCategoryBoost(baseScore: number, memoryCategory: string | undefined | null, hint: RecallCategoryHint): number;
-/**
- * Filter and re-rank a list of recalled memories based on category preferences.
- *
- * @param memories - Raw recalled memories with optional category
- * @param hint - Category hint from detectRecallCategories()
- * @param minScore - Minimum adjusted score to keep (default: 0)
- * @returns Re-ranked memories (highest adjusted score first)
- */
-export declare function filterByCategory<T extends {
-    score?: number;
-    category?: string | null;
-}>(memories: T[], hint: RecallCategoryHint, minScore?: number): T[];
-/**
- * Infer memory category from filename prefix convention.
- * E.g. "lesson-docker.md" → "lesson", "fact-ports.md" → "fact"
- *
- * Exported for use by recall hooks.
- */
-export declare function inferCategoryFromFilename(filename: string): QMemoryCategory | null;
+export * from "../../runtime/memory/recall-category-filter.js";

package/dist/types/skills/permissions/community-sandbox-policy.d.ts

@@ -0,0 +1,3 @@
+import type { PermissionRuleEntry } from "./types.js";
+export type CommunitySandboxRuleId = "community-l1-shell" | "community-l1-file-read" | "community-l1-file-write" | "community-l1-network" | "community-l1-mcp" | "community-l1-host-control" | "community-l2-host-side-effect" | "community-l2-data-egress" | "community-l2-provider-prompt-egress" | "community-l2-provider-media-egress";
+export declare function createCommunityL1SandboxRules(): PermissionRuleEntry[];

package/dist/types/skills/permissions/community-sandbox-red-team-cli.d.ts

@@ -0,0 +1,7 @@
+export interface CommunitySandboxRedTeamCliDeps {
+    log?: {
+        info(message: string): void;
+        error(message: string): void;
+    };
+}
+export declare function runCommunitySandboxRedTeamCli(argv?: string[], deps?: CommunitySandboxRedTeamCliDeps): Promise<number>;

package/dist/types/skills/permissions/community-sandbox-red-team.d.ts

@@ -0,0 +1,30 @@
+export type CommunitySandboxRedTeamFinding = "community-sandbox:shell-exec" | "community-sandbox:file-read" | "community-sandbox:file-write" | "community-sandbox:network-egress" | "community-sandbox:mcp-call" | "community-sandbox:host-side-effect" | "community-sandbox:data-egress" | "community-sandbox:provider-prompt-egress" | "community-sandbox:provider-media-egress";
+export interface CommunitySandboxRedTeamCase {
+    id: string;
+    expectedFinding: CommunitySandboxRedTeamFinding;
+    toolName: string;
+    arguments?: Record<string, unknown>;
+}
+export interface CommunitySandboxRedTeamReport {
+    suite: "sandbox";
+    generatedAt: string;
+    cases: number;
+    passed: boolean;
+    failures: number;
+    telemetryEvents: number;
+    approvalRequests: number;
+    breakdown: Record<CommunitySandboxRedTeamFinding, {
+        cases: number;
+        failures: number;
+    }>;
+    failureDetails: Array<{
+        id: string;
+        expectedFinding: CommunitySandboxRedTeamFinding;
+        action: "continue" | "abort" | "skip" | "prevent";
+        reason?: string;
+        telemetryRecorded: boolean;
+        approvalRecorded: boolean;
+    }>;
+}
+export declare function buildCommunitySandboxRedTeamCases(): CommunitySandboxRedTeamCase[];
+export declare function runCommunitySandboxRedTeam(cases?: CommunitySandboxRedTeamCase[]): Promise<CommunitySandboxRedTeamReport>;

package/dist/types/skills/permissions/hook-runner.d.ts

@@ -1,10 +1,11 @@
 import type { HookRegistry } from "../../contracts/hooks.js";
+import type { ChatMessage } from "../../protocol/wire/index.js";
 import type { ToolDefinition } from "../../protocol/wire/index.js";
 import { PermissionRuleEngine } from "./rule-engine.js";
 import type { PermissionUpdate, ApprovalRequest, ApprovalResponse } from "./types.js";
 import { type ClassifierLLMCall } from "./permission-classifier.js";
-import type { PermissionRole } from "../../orchestration/subagent/task-types.js";
 import { DenialAuditLogger } from "./denial-audit-log.js";
+export type PermissionRole = "interactive" | "coordinator" | "worker";
 export interface PermissionCheckerDeps {
     ruleEngine: PermissionRuleEngine;
     hookRegistry: HookRegistry;
@@ -27,7 +28,7 @@ export interface PermissionCheckerDeps {
      * Recent conversation messages for classifier context.
      * Called lazily when the classifier needs to run.
      */
-    getRecentMessages?: () => import("../../agent/types.js").ChatMessage[];
+    getRecentMessages?: () => ChatMessage[];
     /**
      * Permission role context (CC: interactive/coordinator/worker).
      * Determines how the checker behaves:
@@ -42,6 +43,13 @@ export interface PermissionCheckerDeps {
     sessionId?: string;
     /** Getter for current turn ID (changes per turn). */
     getTurnId?: () => string;
+    /** Best-effort community telemetry sink for consent-gated sandbox metrics. */
+    communityTelemetryRecorder?: {
+        recordTelemetry(input: {
+            event: "community.sandbox.violation";
+            metadata?: Record<string, unknown>;
+        }): Promise<unknown>;
+    };
 }
 export declare class PermissionChecker {
     private readonly ruleEngine;
@@ -56,6 +64,9 @@ export declare class PermissionChecker {
     private readonly auditLogger;
     private readonly sessionId;
     private readonly getTurnId;
+    private readonly communityTelemetryRecorder;
+    private readonly communitySandboxTurnIds;
+    private readonly communitySandboxRuleEngine;
     private unregisterHook;
     /** Tool meta cache — populated from ToolDefinition[] at agent creation */
     private toolMetaCache;
@@ -78,9 +89,11 @@ export declare class PermissionChecker {
      */
     setToolMeta(tools: ToolDefinition[]): void;
     get ruleEngineRef(): PermissionRuleEngine;
+    private checkCommunitySandboxThenBase;
     /** Fire permission.denied hook + onDenied callback + audit log */
     private fireDenied;
     private handleResult;
+    private handleInteractiveApproval;
     /**
      * Worker/coordinator "ask" handler: classifier-only, no approval dialog.
      * CC pattern: headless workers never prompt users.

package/dist/types/skills/permissions/settings-watcher.d.ts

@@ -8,6 +8,7 @@
  * Settings file location: `.qlogicagent/settings.json` in the project root
  *
  * Watched fields:
+ *   - permissions: PermissionConfig
  *   - permissionMode: PermissionMode
  *   - permissionRules: PermissionRuleEntry[]
  *   - defaultBehavior: PermissionBehavior
@@ -19,6 +20,7 @@ import type { PermissionRuleEntry, PermissionMode, PermissionBehavior } from "./
 import { PermissionRuleEngine } from "./rule-engine.js";
 /** On-disk settings file schema */
 export interface SettingsFile {
+    permissions?: unknown;
     permissionMode?: PermissionMode;
     permissionRules?: PermissionRuleEntry[];
     defaultBehavior?: PermissionBehavior;

package/dist/types/skills/permissions/types.d.ts

@@ -1,113 +1,2 @@
-/**
- * User-configurable permission modes.
- *
- * cc reference:
- *   'default'           → normal prompting
- *   'bypassPermissions' → auto-accept all
- *   'acceptEdits'       → auto-accept edits only
- *   'dontAsk'           → auto-deny all
- *   'plan'              → planning mode (pause execution)
- *
- * We keep the cc names for compatibility.
- */
-export type PermissionMode = "default" | "bypassPermissions" | "acceptEdits" | "dontAsk" | "plan" | "auto";
-export declare const PERMISSION_MODES: readonly PermissionMode[];
-export type PermissionBehavior = "allow" | "deny" | "ask";
-export type PermissionDecisionReason = {
-    type: "rule";
-    rule: PermissionRuleEntry;
-} | {
-    type: "mode";
-    mode: PermissionMode;
-} | {
-    type: "hook";
-    hookName: string;
-    reason: string;
-} | {
-    type: "classifier";
-    classifier: string;
-    reason: string;
-} | {
-    type: "tool_check";
-    reason: string;
-} | {
-    type: "eligibility";
-    reasonCodes: string[];
-} | {
-    type: "sandbox";
-    reason: string;
-} | {
-    type: "other";
-    reason: string;
-};
-export interface PermissionAllowResult {
-    behavior: "allow";
-    updatedInput?: Record<string, unknown>;
-    decisionReason?: PermissionDecisionReason;
-}
-export interface PermissionAskResult {
-    behavior: "ask";
-    message: string;
-    toolName: string;
-    input?: Record<string, unknown>;
-    suggestions?: PermissionUpdate[];
-    decisionReason?: PermissionDecisionReason;
-}
-export interface PermissionDenyResult {
-    behavior: "deny";
-    message: string;
-    decisionReason: PermissionDecisionReason;
-}
-export type PermissionResult = PermissionAllowResult | PermissionAskResult | PermissionDenyResult;
-export interface PermissionUpdate {
-    /** Tool name or glob pattern */
-    pattern: string;
-    /** New rule to apply */
-    behavior: PermissionBehavior;
-    /** Human-readable description */
-    description?: string;
-}
-export interface PermissionRuleEntry {
-    /** Exact tool name or glob pattern */
-    pattern: string;
-    /** Action for matching tools */
-    behavior: PermissionBehavior;
-    /** Optional reason for logging/display */
-    reason?: string;
-    /** Source of this rule (config/user/plugin) */
-    source?: string;
-}
-export interface PermissionConfig {
-    /** Active permission mode */
-    mode: PermissionMode;
-    /** Rules evaluated in order; first match wins */
-    rules: PermissionRuleEntry[];
-    /** Default behavior when no rule matches */
-    defaultBehavior: PermissionBehavior;
-}
-export interface ToolPermissionCheckInput {
-    toolName: string;
-    arguments?: Record<string, unknown>;
-    /** Tool metadata from ToolDefinition.meta */
-    meta?: {
-        isReadOnly?: boolean;
-        isDangerous?: boolean;
-        requiresApproval?: boolean;
-        parallelSafe?: boolean;
-    };
-}
-export interface ApprovalRequest {
-    approvalId: string;
-    callId: string;
-    toolName: string;
-    arguments?: Record<string, unknown>;
-    message: string;
-    suggestions?: PermissionUpdate[];
-}
-export interface ApprovalResponse {
-    approvalId: string;
-    decision: "approved" | "denied";
-    updatedInput?: Record<string, unknown>;
-    /** Persistent rule to save */
-    permissionUpdate?: PermissionUpdate;
-}
+export { PERMISSION_MODES, } from "../../runtime/ports/permission-contracts.js";
+export type { ApprovalRequest, ApprovalResponse, PermissionAllowResult, PermissionAskResult, PermissionBehavior, PermissionConfig, PermissionDecisionReason, PermissionDenyResult, PermissionMode, PermissionResult, PermissionRuleEntry, PermissionUpdate, ToolPermissionCheckInput, } from "../../runtime/ports/permission-contracts.js";

package/dist/types/skills/portable-tool.d.ts

@@ -14,6 +14,19 @@ export interface ToolContentBlock {
     data?: string;
     mimeType?: string;
 }
+export type LocaleCode = "zh-CN" | "en-US" | (string & {});
+export interface LocalizedText {
+    /**
+     * Stable translation key. UI clients decide the final language.
+     * Backends must not localize this string.
+     */
+    key: string;
+    /** Safe fallback for clients that do not have the key yet. */
+    fallback: string;
+    /** Optional bundled values for offline clients. */
+    values?: Partial<Record<LocaleCode, string>>;
+}
+export type CapabilityCategory = "orchestration" | "filesystem" | "web" | "search" | "memory" | "media" | "developer" | "mcp" | "automation" | "system" | "other";
 /**
  * Result of executing a portable tool.
  */
@@ -38,6 +51,15 @@ export interface PortableTool<TParams = Record<string, unknown>> {
     name: string;
     /** Human-readable label. */
     label: string;
+    /**
+     * UI category declared by the tool registration.
+     * Clients must not infer this from name/description.
+     */
+    category?: CapabilityCategory;
+    /** UI-facing localized name. */
+    displayName?: LocalizedText;
+    /** UI-facing localized summary. The LLM-only description stays separate. */
+    displayDescription?: LocalizedText;
     /** Tool description shown to the LLM. */
     description: string;
     /** JSON Schema object describing the tool's parameters. */

package/dist/types/skills/skill-system/skill-lifecycle.d.ts

@@ -11,6 +11,11 @@ export interface SkillLifecycleRecord {
     pinned: boolean;
     useCount: number;
     source: "learned" | "created" | "installed" | "promoted";
+    registryResourceId?: string;
+    registryVersion?: string;
+    registrySourceTier?: "official" | "community";
+    registryRiskTier?: "R0" | "R1" | "R2" | "R3";
+    registryEffectiveRiskTier?: "R0" | "R1" | "R2" | "R3";
 }
 export interface SkillLifecycleStore {
     version: 1;

package/dist/types/skills/skill-system/skill-source.d.ts

@@ -1,77 +1,6 @@
-import type { SkillScanSummary } from "./skill-types.js";
 /**
- * Trust level for a skill based on its origin.
- * Higher trust = fewer restrictions.
- */
-export type TrustLevel = "builtin" | "verified" | "community" | "unknown";
-/**
- * Result of a skill security scan decision.
- */
-export type ScanVerdict = "pass" | "quarantine" | "reject";
-/**
- * A resolved skill source descriptor.
- */
-export interface SkillSourceDescriptor {
-    /** Source type. */
-    kind: "bundled" | "github" | "npm" | "local" | "tap";
-    /** Human-readable identifier, e.g. "github:user/repo" or "npm:@scope/pkg". */
-    identifier: string;
-    /** Trust level derived from source type + verification status. */
-    trust: TrustLevel;
-    /** Version constraint (semver or tag). */
-    version?: string;
-}
-/**
- * Result of fetching a skill from a remote source.
- */
-export interface SkillFetchResult {
-    /** Local directory where fetched content was placed. */
-    quarantineDir: string;
-    /** Manifest metadata if found. */
-    name?: string;
-    version?: string;
-}
-/**
- * Dependencies for the skill fetch step.
- * Consumers inject actual HTTP/git/npm implementations.
- */
-export interface SkillFetchDeps {
-    /**
-     * Download / clone / extract a skill from its source into a quarantine dir.
-     * Must NOT place content in the final install location.
-     */
-    fetch(source: SkillSourceDescriptor, quarantineDir: string): Promise<SkillFetchResult>;
-}
-/**
- * Dependencies for the skill storage step.
- * Manages the local skill directory and registry.
- */
-export interface SkillStorageDeps {
-    /** Root directory for installed skills (e.g. ~/.xiaozhiclaw/skills/). */
-    skillsDir: string;
-    /** Registry subdirectory (e.g. ~/.xiaozhiclaw/skills/.registry/). */
-    registryDir: string;
-    /** Move content from quarantine to final location. */
-    moveToInstallDir(quarantineDir: string, skillName: string): Promise<string>;
-    /** Remove an installed skill directory. */
-    removeSkill(skillName: string): Promise<void>;
-    /** Read the registry lock file. */
-    readLockfile(): Promise<SkillLockfile>;
-    /** Write the registry lock file. */
-    writeLockfile(lockfile: SkillLockfile): Promise<void>;
-}
-/**
- * A single version history entry for a skill.
- */
-export interface SkillVersionEntry {
-    version: string;
-    updatedAt: string;
-    changelog?: string;
-    /** Integrity hash of the SKILL.md content at this version (sha256). */
-    integrity?: string;
-}
-/**
- * Usage statistics for a skill.
+ * Lightweight per-skill stats stored in `~/.qlogicagent/skill-stats.json`.
+ * Covers learned, promoted, and registry-installed skills.
  */
 export interface SkillUsageStats {
     /** Total number of times this skill has been invoked/applied. */
@@ -87,43 +16,6 @@ export interface SkillUsageStats {
     /** Derived success rate = (invokeCount - negativeCount) / invokeCount */
     successRate?: number;
 }
-/**
- * Single entry in the skill lockfile.
- */
-export interface SkillLockEntry {
-    name: string;
-    source: SkillSourceDescriptor;
-    installedAt: string;
-    scanVerdict: ScanVerdict;
-    scanSummary?: SkillScanSummary;
-    /** Integrity hash of the SKILL.md content (sha256). */
-    integrity?: string;
-    /** Current version (from frontmatter or auto-incremented). */
-    currentVersion?: string;
-    /** Version history — newest first. */
-    versionHistory?: SkillVersionEntry[];
-    /** Usage statistics. */
-    usage?: SkillUsageStats;
-}
-/**
- * Complete lockfile for all installed skills.
- */
-export interface SkillLockfile {
-    version: 1;
-    entries: Record<string, SkillLockEntry>;
-}
-/**
- * Record a skill usage event. Mutates the lockfile entry in-place.
- */
-export declare function recordSkillUsage(lockfile: SkillLockfile, skillName: string, feedback?: "positive" | "negative" | null): void;
-/**
- * Record a skill version update. Pushes current version to history.
- */
-export declare function recordSkillVersionUpdate(lockfile: SkillLockfile, skillName: string, newVersion: string, changelog?: string, integrity?: string): void;
-/**
- * Lightweight per-skill stats stored in `~/.qlogicagent/skill-stats.json`.
- * This is independent of the lockfile — covers learned, promoted, and installed skills.
- */
 export interface SkillStatsFile {
     [skillName: string]: SkillUsageStats;
 }
@@ -144,41 +36,3 @@ export declare function getSkillStats(agentHome: string, skillName: string): Ski
 export declare function getAllSkillStats(agentHome: string): SkillStatsFile;
 /** Reset cache (for testing). */
 export declare function resetStatsCache(): void;
-/**
- * Result of a skill install operation.
- */
-export interface SkillInstallResult {
-    success: boolean;
-    name: string;
-    installDir?: string;
-    verdict: ScanVerdict;
-    scanSummary?: SkillScanSummary;
-    error?: string;
-}
-/**
- * Orchestrate the full install pipeline:
- * Fetch → Quarantine → Scan → Validate → Move → Lock
- *
- * This function is pure orchestration — actual I/O is delegated to deps.
- */
-export declare function installSkill(params: {
-    source: SkillSourceDescriptor;
-    fetchDeps: SkillFetchDeps;
-    storageDeps: SkillStorageDeps;
-    scanSkillDir: (dir: string) => Promise<SkillScanSummary>;
-    quarantineDir: string;
-}): Promise<SkillInstallResult>;
-/**
- * Uninstall a skill: remove from disk + update lockfile.
- */
-export declare function uninstallSkill(params: {
-    skillName: string;
-    storageDeps: SkillStorageDeps;
-}): Promise<{
-    success: boolean;
-    error?: string;
-}>;
-/**
- * Create an empty lockfile.
- */
-export declare function createEmptyLockfile(): SkillLockfile;