qlogicagent 2.12.13 → 2.12.14

package/dist/types/cli/credential-vault.d.ts

@@ -55,7 +55,7 @@ export declare class CredentialVault {
     };
     delete(id: string): boolean;
     /** Update the secret payload in place (e.g. oauth2 token refresh / exchange completion). */
-    updateData(id: string, data: CredentialData): CredentialSummary;
+    updateData(id: string, data: CredentialData, metaPatch?: Record<string, unknown>): CredentialSummary;
 }
 export declare function validateCredentialData(type: CredentialType, data: CredentialData): void;
 /** Materialize a credential into HTTP request headers (the engine-side injection point). */

package/dist/types/orchestration/workflow/node-schema.d.ts

@@ -39,6 +39,15 @@ export interface WorkflowNodeDef {
      *   error routes out the "error" port (wire an error-handler/notify subgraph to it).
      */
     onError?: "stop" | "continue" | "errorPort";
+    /**
+     * Canvas position pinned by a manual drag (set_node_ui patch op). Layout-only — the
+     * engine never reads it; absent ⇒ the canvas auto-layouts the node. Travels with the
+     * def (Bundle/export/Hub/n8n-import) so a hand-arranged graph stays arranged.
+     */
+    ui?: {
+        x: number;
+        y: number;
+    };
 }
 /** A data edge (carries DataItem[]). fromPort/toPort default "default". */
 export interface DataEdge {
@@ -55,11 +64,20 @@ export interface WorkflowDef {
     /** Workflow-level variables exposed to expressions as $vars. */
     vars?: Record<string, unknown>;
 }
+/**
+ * SINGLE source of the attended/unattended split. Attended = a person is present right now:
+ * manual (pressed 运行), intent (just SAID it, confirmed by default D22), form (just SUBMITTED
+ * it, D34). Everything else (schedule / im-message / webhook) fires with nobody watching.
+ * Lives here (leaf module) so both the gate and host-executors can import it cycle-free.
+ */
+export declare function isUnattendedTrigger(kind: string): boolean;
 export interface ExecutorContext {
     nodeId: string;
     kind: string;
     /** Owning workflow id (def.id) — lets host-backed nodes (approval) tag outbound notifications. */
     workflowId?: string;
+    /** This run's trigger kind (manual/schedule/…) — drives fine-grained unattended audits (IT-7b). */
+    triggerKind?: string;
     /** 0-based; increments per loop iteration (drives the cache key, spec §A5). */
     runIndex: number;
     vars: Record<string, unknown>;
@@ -106,6 +124,12 @@ export interface ExecutorHost {
         decidedAt: string;
         note?: string;
     }>;
+    /**
+     * D34 wait-until-webhook: suspend the branch until the given webhook path is called
+     * (await-in-memory, same posture as approval — the run stays "running"; a restart loses the
+     * wait and the run fails loud; checkpoint replay recovers prior steps on re-run).
+     */
+    waitWebhook?(req: WebhookWaitHostRequest): Promise<Record<string, unknown>>;
 }
 export interface AgentHostRequest {
     agentId?: string;
@@ -116,6 +140,8 @@ export interface AgentHostRequest {
 export interface ToolHostRequest {
     tool: string;
     args: Record<string, unknown>;
+    /** True when this run's trigger is unattended — the host applies fine-grained audits (IT-7b). */
+    unattended?: boolean;
     input: DataItem[];
     signal?: AbortSignal;
 }
@@ -163,6 +189,15 @@ export interface ApprovalHostRequest {
     input: DataItem[];
     signal?: AbortSignal;
 }
+export interface WebhookWaitHostRequest {
+    /** Webhook path to wait for (normalized with a leading "/"). */
+    path: string;
+    nodeId: string;
+    workflowId?: string;
+    /** Auto-fail deadline; default 24h (a forever-pending branch is a leak, not patience). */
+    timeoutMs?: number;
+    signal?: AbortSignal;
+}
 export interface MemoryHostRequest {
     op: "read" | "write" | "search";
     /** Topic-file name; absent → operate on the always-visible index. */

package/dist/types/orchestration/workflow/qla-executor-host.d.ts

@@ -9,7 +9,7 @@
  */
 import type { RuntimeToolContract } from "../../runtime/ports/index.js";
 import { type DataItem } from "./data-item.js";
-import type { ExecutorHost, MemoryHostRequest, SubworkflowHostRequest, ApprovalHostRequest } from "./node-schema.js";
+import type { ExecutorHost, ToolHostRequest, MemoryHostRequest, SubworkflowHostRequest, ApprovalHostRequest, WebhookWaitHostRequest } from "./node-schema.js";
 /** Injected boundary capabilities — supplied by the handler host that owns the real runners. */
 export interface QlaExecutorHostDeps {
     /** Run one agent turn (spawn external ACP agent + sendTask). Returns the agent's text output. */
@@ -50,6 +50,13 @@ export interface QlaExecutorHostDeps {
         decidedAt: string;
         note?: string;
     }>;
+    /** D34 wait-until-webhook: suspend until the path is hit (handler owns the wake registry). */
+    waitWebhook?: (req: WebhookWaitHostRequest) => Promise<Record<string, unknown>>;
+    /**
+     * IT-7b fine-grained unattended audit (unified permission engine's operation classifier).
+     * Called for every tool invocation in an UNATTENDED run; throw to refuse (fail-loud).
+     */
+    auditUnattendedTool?: (req: ToolHostRequest) => void;
     /**
      * Vault credential → auth headers, resolved at EXECUTION time only (D29). Absent ⇒ http
      * nodes carrying credentialId fail-loud (never silently unauthenticated).

package/dist/types/orchestration/workflow/workflow-patch.d.ts

@@ -73,6 +73,12 @@ export type WorkflowPatch = {
     } | null;
     timeoutMs?: number | null;
     onError?: "stop" | "continue" | "errorPort" | null;
+} | {
+    op: "set_node_ui";
+    positions: Record<string, {
+        x: number;
+        y: number;
+    } | null>;
 };
 /** A patch + concurrency/scope envelope (spec §C). `scope` present ⇒ scoped (框选) edit. */
 export interface PatchEnvelope {

package/dist/types/orchestration/workflow/workflow-runtime.d.ts

@@ -77,6 +77,8 @@ export interface WorkflowRuntimeOptions {
     gate?: ExecutionGate;
     now?: () => Date;
     trigger?: Record<string, unknown>;
+    /** This run's trigger KIND (manual/schedule/…) — exposed on ExecutorContext for IT-7b audits. */
+    triggerKind?: string;
     log?: {
         info(m: string): void;
         warn(m: string): void;
@@ -96,6 +98,7 @@ export declare class WorkflowRuntime {
     private readonly gate?;
     private readonly now;
     private readonly trigger?;
+    private readonly triggerKind?;
     private readonly log?;
     private readonly host?;
     private readonly abortController?;

package/dist/types/orchestration/workflow-chat-builder.d.ts

@@ -41,6 +41,15 @@ export interface WorkflowChatResult {
     def?: Record<string, unknown>;
     patch?: unknown[];
     trigger?: Record<string, unknown>;
+    /**
+     * Fail-loud(§3/EX-A):本轮 agent 调过 propose_workflow 但**没有任何一次通过校验**时带上
+     * (attempts=被拒次数,errors=最后一次的校验错误)。reply 此时只是 agent 的口头方案,
+     * **不是**已落图的提案 —— 前端必须把失败 + 重试出路显式给用户,不许当正常回复展示。
+     */
+    rejected?: {
+        attempts: number;
+        errors: string[];
+    };
 }
 /** agent 按需检索能力长尾(系统提示只放每类前 N 条)。 */
 export declare const LIST_CAPABILITIES_TOOL_NAME = "list_capabilities";

package/dist/types/protocol/wire/acp-agent-management.d.ts

@@ -236,6 +236,11 @@ export interface WorkflowChatResult {
     patch?: unknown[];
     trigger?: Record<string, unknown>;
     error?: string;
+    /** propose 全被校验拒(无任何提案落地)时的显式失败:前端展示真实错误 + 重试出路,不许当正常回复。 */
+    rejected?: {
+        attempts: number;
+        errors: string[];
+    };
 }
 /** solo.start RPC params. */
 export interface SoloStartParams {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "qlogicagent",
-  "version": "2.12.13",
+  "version": "2.12.14",
   "description": "XiaozhiClaw Agent CLI — subprocess architecture (JSON-RPC over stdio)",
   "type": "module",
   "main": "dist/index.js",