qlogicagent 2.10.33 → 2.10.34

package/dist/types/skills/memory/local-store-records.d.ts

@@ -0,0 +1,184 @@
+export interface MemoryRecord {
+    id: string;
+    text: string;
+    userId: string;
+    category: string;
+    importance: number;
+    confidence: number;
+    source: string;
+    sessionId: string;
+    eventDate: string;
+    tags: string[];
+    embedding: Float32Array | null;
+    createdAt: number;
+    updatedAt: number;
+    accessCount: number;
+    lastAccessedAt: number;
+    isArchived: boolean;
+}
+export interface MemoryInsertInput {
+    text: string;
+    userId: string;
+    category?: string;
+    importance?: number;
+    confidence?: number;
+    source?: string;
+    sessionId?: string;
+    eventDate?: string;
+    tags?: string[];
+    embedding?: Float32Array;
+}
+export interface MemoryUpdateInput {
+    text?: string;
+    category?: string;
+    importance?: number;
+    source?: string;
+    eventDate?: string;
+    tags?: string[];
+    embedding?: Float32Array | null;
+}
+export interface MemorySearchHit {
+    id: string;
+    text: string;
+    score: number;
+    category: string;
+    importance: number;
+    metadata: Record<string, unknown>;
+}
+export interface MemoryAtlasBucket {
+    id: string;
+    startAt: number;
+    endAt: number;
+    count: number;
+    avgImportance: number;
+    avgConfidence: number;
+    topCategory: string;
+}
+export interface MemoryAtlasCluster {
+    id: string;
+    label: string;
+    kind: "source" | "category" | "tag";
+    count: number;
+    startAt: number;
+    endAt: number;
+    avgImportance: number;
+    avgConfidence: number;
+    topCategory: string;
+}
+export interface MemoryAtlasWindowCursor {
+    startAt: number;
+    endAt: number;
+    centerAt: number;
+    pageSize: number;
+    hasBefore: boolean;
+    hasAfter: boolean;
+}
+export interface MemoryAtlasResult {
+    totalCount: number;
+    records: MemoryRecord[];
+    buckets: MemoryAtlasBucket[];
+    clusters: MemoryAtlasCluster[];
+    windowCursor: MemoryAtlasWindowCursor | null;
+    timeRange: {
+        startAt: number;
+        endAt: number;
+    } | null;
+}
+export type MemorySourceKind = "manual" | "explicit" | "document" | "image" | "video" | "auto" | "turn" | "dream" | "agent";
+export type MemoryClaimStatus = "active" | "superseded" | "conflicted" | "archived" | "pending_confirmation";
+export type MemoryProposalStatus = "pending" | "accepted" | "merged" | "conflicted" | "rejected";
+export interface MemoryObservationInput {
+    userId: string;
+    text: string;
+    source: string;
+    sourcePriority: number;
+    sessionId?: string;
+    evidenceType?: string;
+    payload?: Record<string, unknown>;
+}
+export interface MemoryObservationRecord extends Required<Omit<MemoryObservationInput, "payload" | "sessionId" | "evidenceType">> {
+    id: string;
+    sessionId: string;
+    evidenceType: string;
+    payload: Record<string, unknown>;
+    createdAt: number;
+}
+export interface MemoryProposalInput {
+    userId: string;
+    observationIds: string[];
+    text: string;
+    category: string;
+    importance: number;
+    confidence: number;
+    source: string;
+    sourcePriority: number;
+    entity: string;
+    predicate: string;
+    value: Record<string, unknown>;
+    validTime?: string;
+    tags?: string[];
+    status?: MemoryProposalStatus;
+    relatedClaimIds?: string[];
+}
+export interface MemoryProposalRecord extends Omit<MemoryProposalInput, "value" | "validTime" | "tags" | "status" | "relatedClaimIds"> {
+    id: string;
+    value: Record<string, unknown>;
+    validTime: string;
+    tags: string[];
+    status: MemoryProposalStatus;
+    relatedClaimIds: string[];
+    createdAt: number;
+    updatedAt: number;
+}
+export interface MemoryClaimInput {
+    userId: string;
+    memoryId?: string;
+    entity: string;
+    predicate: string;
+    value: Record<string, unknown>;
+    text: string;
+    category: string;
+    importance: number;
+    confidence: number;
+    source: string;
+    sourcePriority: number;
+    status: MemoryClaimStatus;
+    validTime?: string;
+    evidenceIds: string[];
+    supersedesClaimId?: string;
+    conflictGroupId?: string;
+}
+export interface MemoryClaimRecord extends Omit<MemoryClaimInput, "memoryId" | "value" | "validTime" | "supersedesClaimId" | "conflictGroupId"> {
+    id: string;
+    memoryId: string;
+    value: Record<string, unknown>;
+    validTime: string;
+    supersedesClaimId: string;
+    conflictGroupId: string;
+    createdAt: number;
+    updatedAt: number;
+}
+export interface MemoryConflictRecord {
+    id: string;
+    userId: string;
+    claimAId: string;
+    claimBId: string;
+    reason: string;
+    status: "open" | "resolved" | "dismissed";
+    createdAt: number;
+    updatedAt: number;
+}
+export interface SqliteDatabase {
+    exec(sql: string): void;
+    prepare(sql: string): SqliteStatement;
+    pragma(pragma: string): unknown;
+    close(): void;
+}
+export interface SqliteStatement {
+    run(...params: unknown[]): {
+        changes: number;
+        lastInsertRowid: number | bigint;
+    };
+    get(...params: unknown[]): unknown;
+    all(...params: unknown[]): unknown[];
+}

package/dist/types/skills/memory/local-store.d.ts

@@ -1,5 +1,5 @@
 /**
- * Local Memory Store — SQLite-backed persistence for qmemory.
+ * Local Memory Store - SQLite-backed persistence for qmemory.
  *
  * Ported from Python qmemory's memory_store.py + db.py.
  * Uses better-sqlite3 for synchronous, fast, single-file persistence.
@@ -12,6 +12,7 @@
  *   - memories_fts: FTS5 full-text index for keyword search
  *   - profiles: user profile KV (future)
  */
+export { resolveMemoryDbPath } from "./memory-db-path.js";
 export interface MemoryRecord {
     id: string;
     text: string;
@@ -294,10 +295,10 @@ export declare class LocalMemoryStore {
      * Apply feedback signal to a memory, adjusting importance accordingly.
      *
      * Signals:
-     *   - "useful"     → boost importance by +0.15 (capped at 1.0)
-     *   - "irrelevant" → reduce importance by -0.2
-     *   - "outdated"   → archive immediately
-     *   - "wrong"      → delete immediately
+     *   - "useful" boosts importance by +0.15 (capped at 1.0)
+     *   - "irrelevant" reduces importance by -0.2
+     *   - "outdated" archives immediately
+     *   - "wrong" deletes immediately
      */
     applyFeedback(memoryId: string, signal: "useful" | "irrelevant" | "outdated" | "wrong"): boolean;
     /**
@@ -336,7 +337,7 @@ export declare class LocalMemoryStore {
     }>;
     /**
      * Get memory activity summary over recent N days.
-     * Returns daily counts and high-importance entries — used by temporal synthesis.
+     * Returns daily counts and high-importance entries used by temporal synthesis.
      */
     getActivitySummary(userId: string, days?: number): {
         dailyCounts: Array<{
@@ -352,8 +353,8 @@ export declare class LocalMemoryStore {
         }>;
     };
     /**
-     * Find memories related to a specific event date (±tolerance).
-     * Used for temporal context retrieval: "关于上周二的会议" → find memories around that date.
+     * Find memories related to a specific event date (卤tolerance).
+     * Used for temporal context retrieval, such as finding memories around a requested date.
      */
     findByEventDate(userId: string, targetDate: string, toleranceDays?: number): MemorySearchHit[];
     /**
@@ -417,9 +418,3 @@ export declare class LocalMemoryStore {
     listConflicts(userId: string): MemoryConflictRecord[];
     close(): void;
 }
-/**
- * Resolve the database file path for L2 vector memory storage.
- * L2 vector memory is cross-project for one owner, but physically isolated by
- * profile at ~/.qlogicagent/profiles/<owner_user_id>/memory/.
- */
-export declare function resolveMemoryDbPath(ownerUserId?: string): string;

package/dist/types/skills/memory/memory-db-path.d.ts

@@ -0,0 +1,7 @@
+import type { PathService } from "../../runtime/ports/index.js";
+/**
+ * Resolve the database file path for L2 vector memory storage.
+ * L2 vector memory is cross-project for one owner, but physically isolated by
+ * profile at ~/.qlogicagent/profiles/<owner_user_id>/memory/.
+ */
+export declare function resolveMemoryDbPath(ownerUserId?: string, pathService?: PathService): string;

package/dist/types/skills/memory/memory-embedding-config.d.ts

@@ -0,0 +1,31 @@
+import type { ConfigPort, PathService } from "../../runtime/ports/index.js";
+import type { LocalEmbeddingConfig } from "./local-embedding.js";
+export interface MemoryProviderFactoryConfig {
+    /** Active owner profile. All local memory files are physically scoped here. */
+    ownerUserId: string;
+    /** User ID prefix. */
+    userIdPrefix?: string;
+    /** Embedding config for local provider. */
+    embedding?: LocalEmbeddingConfig;
+}
+export interface MemoryEmbeddingModelBinding {
+    provider: string;
+    apiKey: string;
+    model: string;
+    baseUrl?: string;
+    keyHandle: {
+        release(result: {
+            success: boolean;
+        }): void;
+    };
+}
+export interface MemoryEmbeddingModelRegistry {
+    getActiveModel(purpose: "embedding"): MemoryEmbeddingModelBinding | null;
+}
+export interface MemoryConfigResolutionDeps {
+    config: ConfigPort;
+    pathService: PathService;
+    modelRegistry: MemoryEmbeddingModelRegistry;
+}
+export declare function resolveMemoryProviderConfig(deps: MemoryConfigResolutionDeps): MemoryProviderFactoryConfig;
+export type { LocalEmbeddingConfig };

package/dist/types/skills/memory/memory-provider-factory.d.ts

@@ -4,18 +4,9 @@
  * No remote/cloud memory service exists. Memory is always local.
  * This factory is the single integration point for stdio-server.ts.
  */
-import type { LocalEmbeddingConfig } from "./local-embedding.js";
 import type { LocalMemoryProvider } from "./local-memory-provider.js";
-export interface MemoryProviderFactoryConfig {
-    /** Not used for L2 vector DB (always global). Kept for config compat. */
-    projectRoot?: string;
-    /** Active owner profile. All local memory files are physically scoped here. */
-    ownerUserId: string;
-    /** User ID prefix. */
-    userIdPrefix?: string;
-    /** Embedding config for local provider. */
-    embedding?: LocalEmbeddingConfig;
-}
+import { type MemoryProviderFactoryConfig } from "./memory-embedding-config.js";
+export type { MemoryProviderFactoryConfig } from "./memory-embedding-config.js";
 export interface MemoryProviderFactoryResult {
     provider: LocalMemoryProvider | null;
     mode: "local" | "none";
@@ -38,7 +29,5 @@ export declare function createMemoryProvider(config: MemoryProviderFactoryConfig
  *   Layer 0: Explicit ModelRegistry "embedding" binding
  *   Layer 1: LLM Router default embedding endpoint (BAAI/bge-m3)
  *   Layer 2: FTS5 pure text (NullEmbeddingProvider)
- *
- * @param projectRoot — Project root for local storage path
  */
-export declare function resolveMemoryConfigFromEnv(projectRoot?: string): MemoryProviderFactoryConfig;
+export declare function resolveMemoryConfigFromEnv(): MemoryProviderFactoryConfig;

package/dist/types/skills/memory/memory-vector-utils.d.ts

@@ -0,0 +1,2 @@
+export declare function normalizeVector(vec: Float32Array): Float32Array;
+export declare function dotProduct(a: Float32Array, b: Float32Array): number;

package/dist/types/skills/memory/sqlite-memory-mappers.d.ts

@@ -0,0 +1,6 @@
+import type { MemoryClaimRecord, MemoryConflictRecord, MemoryRecord } from "./local-store-records.js";
+export declare function rowToRecord(row: unknown): MemoryRecord;
+export declare function rowToClaimRecord(row: unknown): MemoryClaimRecord;
+export declare function rowToConflictRecord(row: unknown): MemoryConflictRecord;
+export declare function parseJsonObject(raw: unknown): Record<string, unknown>;
+export declare function parseJsonArray(raw: unknown): string[];

package/dist/types/skills/memory/sqlite-memory-schema.d.ts

@@ -0,0 +1,3 @@
+import type { SqliteDatabase } from "./local-store-records.js";
+export declare const MEMORY_SCHEMA_SQL = "\nCREATE TABLE IF NOT EXISTS memories (\n  id TEXT PRIMARY KEY,\n  text TEXT NOT NULL,\n  user_id TEXT NOT NULL,\n  category TEXT NOT NULL DEFAULT 'general',\n  importance REAL NOT NULL DEFAULT 0.5,\n  confidence REAL NOT NULL DEFAULT 1.0,\n  source TEXT NOT NULL DEFAULT 'agent',\n  session_id TEXT NOT NULL DEFAULT '',\n  event_date TEXT NOT NULL DEFAULT '',\n  tags TEXT NOT NULL DEFAULT '[]',\n  embedding BLOB,\n  created_at INTEGER NOT NULL,\n  updated_at INTEGER NOT NULL,\n  access_count INTEGER NOT NULL DEFAULT 0,\n  last_accessed_at INTEGER NOT NULL DEFAULT 0,\n  is_archived INTEGER NOT NULL DEFAULT 0\n);\n\nCREATE INDEX IF NOT EXISTS idx_memories_user ON memories(user_id);\nCREATE INDEX IF NOT EXISTS idx_memories_user_category ON memories(user_id, category);\nCREATE INDEX IF NOT EXISTS idx_memories_user_importance ON memories(user_id, importance DESC);\nCREATE INDEX IF NOT EXISTS idx_memories_created ON memories(created_at DESC);\n\nCREATE TABLE IF NOT EXISTS memory_observations (\n  id TEXT PRIMARY KEY,\n  user_id TEXT NOT NULL,\n  text TEXT NOT NULL,\n  source TEXT NOT NULL,\n  source_priority INTEGER NOT NULL DEFAULT 0,\n  session_id TEXT NOT NULL DEFAULT '',\n  evidence_type TEXT NOT NULL DEFAULT 'text',\n  payload TEXT NOT NULL DEFAULT '{}',\n  created_at INTEGER NOT NULL\n);\n\nCREATE INDEX IF NOT EXISTS idx_memory_observations_user_created ON memory_observations(user_id, created_at DESC);\nCREATE INDEX IF NOT EXISTS idx_memory_observations_source ON memory_observations(user_id, source);\n\nCREATE TABLE IF NOT EXISTS memory_proposals (\n  id TEXT PRIMARY KEY,\n  user_id TEXT NOT NULL,\n  observation_ids TEXT NOT NULL DEFAULT '[]',\n  text TEXT NOT NULL,\n  category TEXT NOT NULL DEFAULT 'general',\n  importance REAL NOT NULL DEFAULT 0.5,\n  confidence REAL NOT NULL DEFAULT 0.5,\n  source TEXT NOT NULL DEFAULT 'agent',\n  source_priority INTEGER NOT NULL DEFAULT 0,\n  entity TEXT NOT NULL DEFAULT '',\n  predicate TEXT NOT NULL DEFAULT '',\n  value_json TEXT NOT NULL DEFAULT '{}',\n  valid_time TEXT NOT NULL DEFAULT '',\n  tags TEXT NOT NULL DEFAULT '[]',\n  status TEXT NOT NULL DEFAULT 'pending',\n  related_claim_ids TEXT NOT NULL DEFAULT '[]',\n  created_at INTEGER NOT NULL,\n  updated_at INTEGER NOT NULL\n);\n\nCREATE INDEX IF NOT EXISTS idx_memory_proposals_user_status ON memory_proposals(user_id, status);\nCREATE INDEX IF NOT EXISTS idx_memory_proposals_fact ON memory_proposals(user_id, entity, predicate, valid_time);\n\nCREATE TABLE IF NOT EXISTS memory_claims (\n  id TEXT PRIMARY KEY,\n  memory_id TEXT NOT NULL DEFAULT '',\n  user_id TEXT NOT NULL,\n  entity TEXT NOT NULL DEFAULT '',\n  predicate TEXT NOT NULL DEFAULT '',\n  value_json TEXT NOT NULL DEFAULT '{}',\n  text TEXT NOT NULL,\n  category TEXT NOT NULL DEFAULT 'general',\n  importance REAL NOT NULL DEFAULT 0.5,\n  confidence REAL NOT NULL DEFAULT 0.5,\n  source TEXT NOT NULL DEFAULT 'agent',\n  source_priority INTEGER NOT NULL DEFAULT 0,\n  status TEXT NOT NULL DEFAULT 'active',\n  valid_time TEXT NOT NULL DEFAULT '',\n  evidence_ids TEXT NOT NULL DEFAULT '[]',\n  supersedes_claim_id TEXT NOT NULL DEFAULT '',\n  conflict_group_id TEXT NOT NULL DEFAULT '',\n  created_at INTEGER NOT NULL,\n  updated_at INTEGER NOT NULL\n);\n\nCREATE INDEX IF NOT EXISTS idx_memory_claims_user_status ON memory_claims(user_id, status);\nCREATE INDEX IF NOT EXISTS idx_memory_claims_memory ON memory_claims(memory_id);\nCREATE INDEX IF NOT EXISTS idx_memory_claims_fact ON memory_claims(user_id, entity, predicate, valid_time);\n\nCREATE TABLE IF NOT EXISTS memory_conflicts (\n  id TEXT PRIMARY KEY,\n  user_id TEXT NOT NULL,\n  claim_a_id TEXT NOT NULL,\n  claim_b_id TEXT NOT NULL,\n  reason TEXT NOT NULL,\n  status TEXT NOT NULL DEFAULT 'open',\n  created_at INTEGER NOT NULL,\n  updated_at INTEGER NOT NULL\n);\n\nCREATE INDEX IF NOT EXISTS idx_memory_conflicts_user_status ON memory_conflicts(user_id, status);\n\nCREATE VIRTUAL TABLE IF NOT EXISTS memories_fts USING fts5(\n  id UNINDEXED,\n  user_id UNINDEXED,\n  text,\n  category,\n  tags,\n  content=memories,\n  content_rowid=rowid,\n  tokenize='unicode61 remove_diacritics 2'\n);\n\nCREATE TRIGGER IF NOT EXISTS memories_ai AFTER INSERT ON memories BEGIN\n  INSERT INTO memories_fts(rowid, id, user_id, text, category, tags)\n  VALUES (new.rowid, new.id, new.user_id, new.text, new.category, new.tags);\nEND;\n\nCREATE TRIGGER IF NOT EXISTS memories_ad AFTER DELETE ON memories BEGIN\n  INSERT INTO memories_fts(memories_fts, rowid, id, user_id, text, category, tags)\n  VALUES ('delete', old.rowid, old.id, old.user_id, old.text, old.category, old.tags);\nEND;\n\nCREATE TRIGGER IF NOT EXISTS memories_au AFTER UPDATE ON memories BEGIN\n  INSERT INTO memories_fts(memories_fts, rowid, id, user_id, text, category, tags)\n  VALUES ('delete', old.rowid, old.id, old.user_id, old.text, old.category, old.tags);\n  INSERT INTO memories_fts(rowid, id, user_id, text, category, tags)\n  VALUES (new.rowid, new.id, new.user_id, new.text, new.category, new.tags);\nEND;\n";
+export declare function initializeMemorySchema(db: SqliteDatabase): void;

package/dist/types/skills/permissions/hook-runner.d.ts

@@ -12,7 +12,7 @@ export interface PermissionCheckerDeps {
     /**
      * Callback to send an approval request to the host (Gateway/Electron).
      * Must return a promise that resolves when the user responds.
-     * If the host does not support approval, this should reject or return denied.
+     * If the host does not support approval, this should reject or return deny.
      */
     onRequestApproval: (request: ApprovalRequest) => Promise<ApprovalResponse>;
     /** Called when a persistent permission update is returned from the approval dialog */

package/dist/types/skills/permissions/rule-engine.d.ts

@@ -23,7 +23,7 @@ export declare class PermissionRuleEngine {
      *
      * Layer 0: Mode override
      * Layer 1: Explicit rules (first match wins)
-     * Layer 2: Tool metadata (isReadOnly/isDangerous/requiresApproval)
+     * Layer 2: Unified tool risk metadata
      * Layer 3: Default behavior
      */
     check(input: ToolPermissionCheckInput): PermissionResult;
@@ -32,10 +32,7 @@ export declare class PermissionRuleEngine {
 /**
  * Parse permission config from Gateway-injected or local settings.
  *
- * Accepts cc-compatible format:
- *   { mode?: "default", allow: [...], deny: [...], ask: [...], default?: "allow" }
- *
- * And extended rule format:
+ * Accepts only the canonical qlogicagent permission format:
  *   { rules: [{ pattern, behavior, reason, source }] }
  */
 export declare function parsePermissionConfig(raw: unknown): PermissionConfig;

package/dist/types/skills/permissions/settings-watcher.d.ts

@@ -1,48 +1,19 @@
 /**
- * Settings Watcher — CC settings.json hot-reload parity.
+ * Settings watcher for canonical qlogicagent permission settings.
  *
- * Watches the project-local settings file and reloads permission rules
- * when it changes on disk. This allows users to adjust permission rules
- * without restarting the agent session.
- *
- * Settings file location: `.qlogicagent/settings.json` in the project root
- *
- * Watched fields:
- *   - permissions: PermissionConfig
- *   - permissionMode: PermissionMode
- *   - permissionRules: PermissionRuleEntry[]
- *   - defaultBehavior: PermissionBehavior
- *
- * CC reference: src/utils/settings/settings.ts (watchSettings, applySettings)
+ * Only the `permissions` object is accepted. Removed top-level aliases such as
+ * `permissionMode`, `permissionRules`, and `defaultBehavior` must fail loudly.
  */
 import type { HookRegistry } from "../../contracts/hooks.js";
-import type { PermissionRuleEntry, PermissionMode, PermissionBehavior } from "./types.js";
-import { PermissionRuleEngine } from "./rule-engine.js";
-/** On-disk settings file schema */
+import type { PermissionRuleEnginePort } from "../../runtime/ports/index.js";
 export interface SettingsFile {
     permissions?: unknown;
-    permissionMode?: PermissionMode;
-    permissionRules?: PermissionRuleEntry[];
-    defaultBehavior?: PermissionBehavior;
 }
 export interface SettingsWatcherDeps {
-    /** Project root directory (where .qlogicagent/ lives) */
     projectRoot: string;
-    /** Permission rule engine to update on changes */
-    ruleEngine: PermissionRuleEngine;
-    /** Hook registry for config.changed events */
+    ruleEngine: PermissionRuleEnginePort;
     hooks?: HookRegistry;
-    /** Logger */
     log?: (msg: string) => void;
 }
-/**
- * Watch the settings file for changes and hot-reload permission rules.
- *
- * Returns an unsubscribe function.
- */
 export declare function watchSettings(deps: SettingsWatcherDeps): () => void;
-/**
- * Load initial settings (non-watching).
- * Call at session start to apply project settings before the watcher starts.
- */
-export declare function loadInitialSettings(projectRoot: string, ruleEngine: PermissionRuleEngine): Promise<SettingsFile | null>;
+export declare function loadInitialSettings(projectRoot: string, ruleEngine: PermissionRuleEnginePort): Promise<SettingsFile | null>;

package/dist/types/skills/permissions/types.d.ts

@@ -1,2 +1,2 @@
 export { PERMISSION_MODES, } from "../../runtime/ports/permission-contracts.js";
-export type { ApprovalRequest, ApprovalResponse, PermissionAllowResult, PermissionAskResult, PermissionBehavior, PermissionConfig, PermissionDecisionReason, PermissionDenyResult, PermissionMode, PermissionResult, PermissionRuleEntry, PermissionUpdate, ToolPermissionCheckInput, } from "../../runtime/ports/permission-contracts.js";
+export type { ApprovalRequest, ApprovalResponse, PermissionAllowResult, PermissionAskResult, PermissionBehavior, PermissionConfig, PermissionDecisionReason, PermissionDenyResult, PermissionMode, PermissionRiskLevel, PermissionResult, PermissionRuleEntry, PermissionUpdate, ToolPermissionCheckInput, } from "../../runtime/ports/permission-contracts.js";

package/dist/types/skills/plugins/plugin-loader.d.ts

@@ -1,6 +1,11 @@
+import type { PortableTool } from "../portable-tool.js";
 import type { HookRegistry } from "../../contracts/hooks.js";
 import type { WorkspaceSkill } from "../skill-system/skill-types.js";
 import { type LoadedPlugin } from "./plugin-api.js";
+interface PluginToolRegistry {
+    addTool(tool: PortableTool): void;
+    removeTool(name: string): boolean;
+}
 export interface PluginLoaderConfig {
     /** Directories to scan for plugins (order = priority) */
     pluginDirs: string[];
@@ -11,6 +16,8 @@ export interface PluginLoaderConfig {
         info(msg: string): void;
         warn(msg: string): void;
     };
+    /** Runtime-owned tool catalog used for plugin tool registration. */
+    toolCatalog?: PluginToolRegistry;
 }
 export declare class PluginLoader {
     private config;
@@ -44,4 +51,7 @@ export declare class PluginLoader {
      */
     refreshActivations(): Promise<void>;
     private loadPlugin;
+    private addRegisteredTool;
+    private removeRegisteredTool;
 }
+export {};

package/dist/types/skills/portable-tool.d.ts

@@ -2,6 +2,7 @@
  * Content block returned by tool execution.
  * Compatible with OpenAI / Anthropic content array format.
  */
+import type { PermissionRiskLevel } from "../runtime/ports/index.js";
 export interface ToolContentBlock {
     type: "text" | "image";
     text?: string;
@@ -27,6 +28,7 @@ export interface LocalizedText {
     values?: Partial<Record<LocaleCode, string>>;
 }
 export type CapabilityCategory = "orchestration" | "filesystem" | "web" | "search" | "memory" | "media" | "developer" | "mcp" | "automation" | "system" | "other";
+export type ToolRiskLevel = PermissionRiskLevel;
 /**
  * Result of executing a portable tool.
  */
@@ -82,6 +84,14 @@ export interface PortableTool<TParams = Record<string, unknown>> {
      * Read-only tools can skip confirmation prompts in strict permission modes.
      */
     isReadOnly?: boolean;
+    /**
+     * Unified permission risk class.
+     * - read: no mutation, local or remote read-only operation
+     * - write: workspace-local mutation
+     * - system: shell/process/computer control or host-level mutation
+     * - external_egress: sends prompts/files/data to an external service
+     */
+    riskLevel?: ToolRiskLevel;
     /**
      * Whether the tool is currently available.
      * CC parity: tools that return false are excluded from getTools().

package/dist/types/skills/tools/cron-tool.d.ts

@@ -11,10 +11,6 @@ export interface CronToolParams {
     schedule?: string;
     /** Human-readable job name */
     name?: string;
-    /** Legacy field rejected by the workflow-backed scheduler. */
-    repeat?: number | null;
-    /** Legacy field rejected by the workflow-backed scheduler. */
-    allowedTools?: string[];
     /** Whether the job is enabled */
     enabled?: boolean;
 }
@@ -42,17 +38,6 @@ export declare const CRON_TOOL_SCHEMA: {
             readonly type: "string";
             readonly description: "Human-readable job name.";
         };
-        readonly repeat: {
-            readonly type: "number";
-            readonly description: "Deprecated. Finite repeats must be modeled inside the workflow graph.";
-        };
-        readonly allowedTools: {
-            readonly type: "array";
-            readonly items: {
-                readonly type: "string";
-            };
-            readonly description: "Deprecated. Tool access must be enforced by permission rules or workflow nodes.";
-        };
         readonly enabled: {
             readonly type: "boolean";
             readonly description: "Whether the job is enabled (for update).";
@@ -68,14 +53,9 @@ export interface CronJob {
     scheduleDisplay: string;
     state: "scheduled" | "paused";
     enabled: boolean;
-    repeat: {
-        times: number | null;
-        completed: number;
-    };
     nextRunAt?: string;
     lastRunAt?: string;
     lastStatus?: "success" | "error" | null;
-    allowedTools?: string[];
 }
 export interface CronResult {
     success: boolean;

package/dist/types/skills/tools.d.ts

@@ -1,80 +1,45 @@
 /**
- * Tool RegistryCC-aligned getAllBaseTools() pattern.
+ * Tool registry and compatibility facade.
  *
- * CC reference: claude-code-haha/src/tools.ts
- *
- * This is the SINGLE SOURCE OF TRUTH for all available tools.
- * Tools are returned as a flat array from getAllBaseTools().
- * Filtering/gating happens via getTools() using deny rules.
- *
- * Factory functions (createXxxTool) are kept because qlogicagent
- * tools receive deps at creation time (vs CC context at call time).
- * The registration pattern is aligned: pure function returns array.
+ * The registry is the single source of truth for locally executable tools.
+ * New runtime code should depend on a ToolCatalog/ToolRegistry instance; the
+ * module-level functions below remain as a compatibility facade for older
+ * bootstrap paths while those call sites are migrated.
  */
 import type { PortableTool } from "./portable-tool.js";
 import type { ToolDefinition } from "../protocol/wire/index.js";
 import { AGENT_DISALLOWED_TOOLS, CUSTOM_AGENT_DISALLOWED_TOOLS, filterToolsForAgent } from "./tool-access.js";
 export { AGENT_DISALLOWED_TOOLS, CUSTOM_AGENT_DISALLOWED_TOOLS, filterToolsForAgent };
-/**
- * Register tools into the internal pool. Called by initToolDeps().
- */
+export declare class ToolRegistry {
+    private readonly toolPool;
+    private readonly activatedTools;
+    setTools(tools: PortableTool[]): void;
+    addTool(tool: PortableTool<any>): void;
+    addTools(tools: PortableTool<any>[]): void;
+    removeTool(name: string): boolean;
+    findTool(name: string): PortableTool | undefined;
+    hasTool(name: string): boolean;
+    getToolNames(): string[];
+    getToolCount(): number;
+    executeTool(name: string, toolCallId: string, args: Record<string, unknown>, signal?: AbortSignal): Promise<import("./portable-tool.js").PortableToolResult>;
+    getTools(): PortableTool[];
+    activateTool(name: string): boolean;
+    isToolActivated(name: string): boolean;
+    clearActivatedTools(): void;
+    getToolManifest(includeDeferred?: boolean): ToolDefinition[];
+}
+export declare function getDefaultToolRegistry(): ToolRegistry;
 export declare function setToolPool(tools: PortableTool[]): void;
-/**
- * Add a single tool to the pool (for dynamic tools like MCP, plugins).
- */
 export declare function addTool(tool: PortableTool<any>): void;
-/**
- * Add multiple tools to the pool at once.
- */
 export declare function addTools(tools: PortableTool<any>[]): void;
-/**
- * Remove a tool by name. Returns true if it existed.
- */
 export declare function removeTool(name: string): boolean;
-/**
- * Find a tool by name.
- */
 export declare function findTool(name: string): PortableTool | undefined;
-/**
- * Check if a tool exists.
- */
 export declare function hasTool(name: string): boolean;
-/**
- * Get all tool names.
- */
 export declare function getToolNames(): string[];
-/**
- * Get the number of registered tools.
- */
 export declare function getToolCount(): number;
-/**
- * Execute a tool by name.
- */
 export declare function executeTool(name: string, toolCallId: string, args: Record<string, unknown>, signal?: AbortSignal): Promise<import("./portable-tool.js").PortableToolResult>;
-/**
- * CC: getTools()return all enabled tools.
- * Filters the pool by isEnabled() gate; disabled tools are invisible to callers.
- * CC reference: claude-code-haha/src/tools.ts getTools()
- */
 export declare function getTools(): PortableTool[];
-/**
- * Activate a deferred tool so it appears in subsequent LLM manifests.
- * CC parity: tool_search select: 鈫?activateTool 鈫?tool included in manifest.
- * Returns true if the tool exists, is enabled, and was activated.
- */
 export declare function activateTool(name: string): boolean;
-/**
- * Check if a tool has been activated via tool_search.
- */
 export declare function isToolActivated(name: string): boolean;
-/**
- * Clear all tool activations (call at session/turn boundary if needed).
- */
 export declare function clearActivatedTools(): void;
-/**
- * Generate ToolDefinition[] manifest for LLM tool_use.
- * Filters by isEnabled()disabled tools never reach the model.
- * Deferred tools are excluded UNLESS they have been activated via tool_search.
- * CC: getTools() + manifest generation combined.
- */
 export declare function getToolManifest(includeDeferred?: boolean): ToolDefinition[];