qlogicagent 2.16.8 → 2.16.10

package/dist/runtime/infra/mcp-bridge-server.js

@@ -0,0 +1,338 @@
+#!/usr/bin/env node
+/**
+ * MCP Bridge Server — stdio MCP server for external ACP agents.
+ *
+ * Spawned by qlogicagent as a child of the external agent process.
+ * Receives MCP requests (tools/list, tools/call) from the external agent
+ * and proxies tool calls back to qlogicagent's parent RPC.
+ *
+ * Environment:
+ *   QLOGICAGENT_PARENT_RPC — IPC/pipe path to parent qlogicagent
+ *   QLOGICAGENT_SESSION_ID — session scope for tool calls
+ *
+ * Protocol: JSON-RPC 2.0 over stdio (newline-delimited)
+ */
+
+import readline from "node:readline";
+import net from "node:net";
+
+// ── Tool Manifest (must match MCP_BRIDGE_TOOLS in mcp-bridge.ts) ────
+
+const TOOLS = [
+	{
+		name: "skills_list",
+		description: "List AstraClaw skills currently active for this workspace and session.",
+		inputSchema: {
+			type: "object",
+			properties: {},
+		},
+	},
+	{
+		name: "skill_view",
+		description: "Read the SKILL.md workflow for an installed AstraClaw skill by name.",
+		inputSchema: {
+			type: "object",
+			properties: {
+				name: { type: "string", description: "Installed skill name" },
+			},
+			required: ["name"],
+		},
+	},
+	{
+		name: "mcp_connectors_list",
+		description: "List MCP connector tools installed in AstraClaw's Plugins page and shared with this external agent.",
+		inputSchema: {
+			type: "object",
+			properties: {},
+		},
+	},
+	{
+		name: "mcp_tool_call",
+		description: "Call one AstraClaw shared MCP connector tool by toolName from mcp_connectors_list.",
+		inputSchema: {
+			type: "object",
+			properties: {
+				toolName: { type: "string", description: "Connector tool name, for example mcp__filesystem__read_text_file" },
+				args: { type: "object", description: "Arguments for the connector tool" },
+			},
+			required: ["toolName"],
+		},
+	},
+	{
+		name: "media_generate",
+		description: "Generate images or videos using AI models.",
+		inputSchema: {
+			type: "object",
+			properties: {
+				prompt: { type: "string", description: "Generation prompt" },
+				type: { type: "string", enum: ["image", "video"], description: "Media type" },
+			},
+			required: ["prompt"],
+		},
+	},
+	{
+		name: "media_status",
+		description: "Check status of an async media generation job.",
+		inputSchema: {
+			type: "object",
+			properties: {
+				jobId: { type: "string", description: "Job ID to check" },
+			},
+			required: ["jobId"],
+		},
+	},
+	{
+		name: "memory_read",
+		description: "Read from persistent memory.",
+		inputSchema: {
+			type: "object",
+			properties: {
+				key: { type: "string", description: "Memory key to read" },
+			},
+			required: ["key"],
+		},
+	},
+	{
+		name: "memory_write",
+		description: "Write to persistent memory.",
+		inputSchema: {
+			type: "object",
+			properties: {
+				key: { type: "string", description: "Memory key" },
+				value: { type: "string", description: "Value to store" },
+			},
+			required: ["key", "value"],
+		},
+	},
+	{
+		name: "memory_search",
+		description: "Search persistent memory by query.",
+		inputSchema: {
+			type: "object",
+			properties: {
+				query: { type: "string", description: "Search query" },
+			},
+			required: ["query"],
+		},
+	},
+	{
+		name: "web_search",
+		description: "Search the web for information.",
+		inputSchema: {
+			type: "object",
+			properties: {
+				query: { type: "string", description: "Search query" },
+			},
+			required: ["query"],
+		},
+	},
+	{
+		name: "web_fetch",
+		description: "Fetch content from a URL.",
+		inputSchema: {
+			type: "object",
+			properties: {
+				url: { type: "string", description: "URL to fetch" },
+			},
+			required: ["url"],
+		},
+	},
+	{
+		name: "team_status",
+		description: "Get status of all agent team members.",
+		inputSchema: {
+			type: "object",
+			properties: {},
+		},
+	},
+	{
+		name: "team_message",
+		description: "Send a message to another team member agent.",
+		inputSchema: {
+			type: "object",
+			properties: {
+				targetAgentId: { type: "string", description: "Target agent ID" },
+				message: { type: "string", description: "Message to send" },
+			},
+			required: ["targetAgentId", "message"],
+		},
+	},
+];
+
+// ── Parent RPC Connection ───────────────────────────────────
+
+const PARENT_RPC = process.env.QLOGICAGENT_PARENT_RPC;
+const SESSION_ID = process.env.QLOGICAGENT_SESSION_ID || "unknown";
+
+let parentSocket = null;
+let rpcId = 1;
+const pendingRpc = new Map();
+
+function connectParent() {
+	if (!PARENT_RPC) return;
+
+	parentSocket = net.createConnection(PARENT_RPC, () => {
+		process.stderr.write(`[mcp-bridge] connected to parent: ${PARENT_RPC}\n`);
+	});
+
+	let buffer = "";
+	parentSocket.on("data", (chunk) => {
+		buffer += chunk.toString();
+		let nl;
+		while ((nl = buffer.indexOf("\n")) !== -1) {
+			const line = buffer.slice(0, nl).trim();
+			buffer = buffer.slice(nl + 1);
+			if (!line) continue;
+			try {
+				const msg = JSON.parse(line);
+				if (msg.id !== undefined && pendingRpc.has(msg.id)) {
+					const resolve = pendingRpc.get(msg.id);
+					pendingRpc.delete(msg.id);
+					resolve(msg);
+				}
+			} catch {
+				// ignore parse errors
+			}
+		}
+	});
+
+	parentSocket.on("error", (err) => {
+		process.stderr.write(`[mcp-bridge] parent connection error: ${err.message}\n`);
+	});
+
+	parentSocket.on("close", () => {
+		parentSocket = null;
+	});
+}
+
+function callParent(method, params) {
+	return new Promise((resolve, reject) => {
+		if (!parentSocket) {
+			reject(new Error("Not connected to parent"));
+			return;
+		}
+		const id = rpcId++;
+		const msg = JSON.stringify({ jsonrpc: "2.0", id, method, params }) + "\n";
+		pendingRpc.set(id, resolve);
+		parentSocket.write(msg);
+
+		// Connector calls can legitimately run longer than a simple capability lookup.
+		setTimeout(() => {
+			if (pendingRpc.has(id)) {
+				pendingRpc.delete(id);
+				reject(new Error(`Parent RPC timeout for ${method}`));
+			}
+		}, 120_000);
+	});
+}
+
+// ── MCP Stdio Protocol ──────────────────────────────────────
+
+function sendResponse(id, result, error) {
+	const msg = { jsonrpc: "2.0", id };
+	if (error) msg.error = error;
+	else msg.result = result;
+	process.stdout.write(JSON.stringify(msg) + "\n");
+}
+
+async function handleRequest(msg) {
+	const { id, method, params } = msg;
+
+	if (method === "initialize") {
+		sendResponse(id, {
+			protocolVersion: "2024-11-05",
+			capabilities: { tools: {} },
+			serverInfo: { name: "astraclaw_capabilities", version: "1.0.0" },
+		});
+		return;
+	}
+
+	if (method === "tools/list") {
+		sendResponse(id, { tools: TOOLS });
+		return;
+	}
+
+	if (method === "tools/call") {
+		const toolName = params?.name;
+		const toolArgs = params?.arguments || {};
+
+		if (!toolName) {
+			sendResponse(id, null, { code: -32602, message: "Missing tool name" });
+			return;
+		}
+
+		const knownTool = TOOLS.find((t) => t.name === toolName);
+		if (!knownTool) {
+			sendResponse(id, null, { code: -32602, message: `Unknown tool: ${toolName}` });
+			return;
+		}
+
+		// Proxy to parent qlogicagent
+		if (!parentSocket) {
+			sendResponse(id, {
+				content: [{ type: "text", text: `Error: MCP bridge not connected to parent` }],
+				isError: true,
+			});
+			return;
+		}
+
+		try {
+			const result = await callParent("mcp.toolCall", {
+				sessionId: SESSION_ID,
+				tool: toolName,
+				arguments: toolArgs,
+			});
+
+			if (result.error) {
+				sendResponse(id, {
+					content: [{ type: "text", text: `Error: ${result.error.message}` }],
+					isError: true,
+				});
+			} else {
+				const text = typeof result.result === "string"
+					? result.result
+					: JSON.stringify(result.result);
+				sendResponse(id, {
+					content: [{ type: "text", text }],
+				});
+			}
+		} catch (err) {
+			sendResponse(id, {
+				content: [{ type: "text", text: `Error: ${err.message}` }],
+				isError: true,
+			});
+		}
+		return;
+	}
+
+	// Notification — no response needed
+	if (id === undefined) return;
+
+	sendResponse(id, null, { code: -32601, message: `Unknown method: ${method}` });
+}
+
+// ── Main ────────────────────────────────────────────────────
+
+connectParent();
+
+const rl = readline.createInterface({ input: process.stdin, terminal: false });
+
+rl.on("line", (line) => {
+	const trimmed = line.trim();
+	if (!trimmed) return;
+	try {
+		const msg = JSON.parse(trimmed);
+		handleRequest(msg).catch((err) => {
+			if (msg.id !== undefined) {
+				sendResponse(msg.id, null, { code: -32603, message: err.message });
+			}
+		});
+	} catch {
+		// Malformed JSON — ignore
+	}
+});
+
+rl.on("close", () => {
+	if (parentSocket) parentSocket.destroy();
+	process.exit(0);
+});

package/dist/skills/mcp/astraclaw-native-mcp-server.js

@@ -0,0 +1,9 @@
+#!/usr/bin/env node
+import{createInterface as Qe}from"node:readline";import{existsSync as Ye,readFileSync as Ze}from"node:fs";import{readFileSync as be}from"node:fs";import{randomUUID as Te}from"node:crypto";import{readdirSync as le,readFileSync as ce,statSync as b,writeFileSync as ue}from"node:fs";import{join as d}from"node:path";import{homedir as ee}from"node:os";import{join as u,resolve as lt}from"node:path";import{existsSync as ut}from"node:fs";import{createHash as pt}from"node:crypto";var x=".qlogicagent";function te(){return process.env.QLOGICAGENT_HOME||u(ee(),x)}function oe(){let o=process.env.QLOGIC_LLMROUTER_USER_ID?.trim();if(o)return o;let e=process.env.QLOGIC_IMPLICIT_OWNER_ID?.trim();if(e)return e;let t=process.env.QLOGIC_DEVICE_ID?.trim();return t?`oc_${t}`:"oc_local"}function re(o){let e=o.trim();if(!e)throw new Error("ownerUserId is required for profile-scoped storage");return encodeURIComponent(e).replace(/\./g,"%2E")}function f(o=oe()){return u(te(),"profiles",re(o))}function y(){return u(f(),"skills")}function A(){return u(f(),"mcp.json")}function ne(o){if(!o)throw new Error("getProjectAgentDir: cwd is required (must not fall back to process.cwd())");return u(o,x)}function R(o){return u(ne(o),"skills-disabled.json")}import{readFileSync as se,writeFileSync as gt,mkdirSync as ht,renameSync as yt}from"node:fs";import{dirname as Tt,join as ie}from"node:path";function E(){return{version:1,disabled:[]}}function M(o){try{let e=JSON.parse(se(o,"utf8"));return!e||typeof e!="object"||!Array.isArray(e.disabled)?E():{version:1,disabled:[...new Set(e.disabled.filter(r=>typeof r=="string"&&r.trim().length>0))]}}catch{return E()}}function ae(){return ie(f(),"skills-disabled.json")}function D(){return new Set(M(ae()).disabled)}function I(o){return new Set(M(R(o)).disabled)}var de=["auto-skill-","test-skill-"],pe=".skills_prompt_snapshot.json";function me(o){return de.some(e=>o.startsWith(e))}function fe(o){let e=o.replace(/\r\n/g,`
+`),t=e.match(/^---\n[\s\S]*?^version:\s*(\S+)/m),r=e.match(/^---\n[\s\S]*?^description:\s*(.+)/m),n=e.match(/^---\n[\s\S]*?^category:\s*(.+)/m),s=e.match(/^---\n[\s\S]*?^author:\s*(.+)/m),i=e.match(/^---\n[\s\S]*?^requires:\s*(.+)/m),a=e.match(/^---\n[\s\S]*?^environments:\s*(.+)/m);return{version:t?.[1],description:r?.[1]?.trim(),category:n?.[1]?.trim()||void 0,author:s?.[1]?.trim()||void 0,requiredTools:j(i?.[1]),environments:j(a?.[1])}}function ge(o,e){let t=y(),r=D(),n=o?I(o):new Set,s=[],i;try{i=le(t,{withFileTypes:!0})}catch{i=[]}for(let a of i){if(!a.isDirectory()||a.name.startsWith("."))continue;let l=d(t,a.name),h=d(l,"SKILL.md"),k;try{if(!b(h).isFile())continue;k=ce(h,"utf8")}catch{continue}let P=r.has(a.name),C=n.has(a.name),c=fe(k),X=!he(c,e);s.push({name:a.name,filePath:h,baseDir:l,globallyDisabled:P,projectDisabled:C,active:!P&&!C&&!X,systemGenerated:me(a.name),description:c.description,version:c.version,category:c.category,author:c.author,requiredTools:c.requiredTools,environments:c.environments})}return ye(t,s),s}function L(o,e){return ge(o,e).filter(t=>t.active)}function O(o){let e=y(),t=d(e,o),r=d(t,"SKILL.md");try{if(b(r).isFile())return{baseDir:t,filePath:r}}catch{}return null}function j(o){if(!o)return;let e=o.replace(/^\[|\]$/g,"").split(/[,\s]+/).map(t=>t.replace(/^["']|["']$/g,"").trim()).filter(Boolean);return e.length>0?e:void 0}function he(o,e){if(o.environments&&e?.currentEnvironment&&!o.environments.includes(e.currentEnvironment))return!1;if(o.requiredTools){if(!e?.availableToolNames)return!1;let t=new Set(e.availableToolNames);return o.requiredTools.every(r=>t.has(r))}return!0}function ye(o,e){try{let r={version:1,entries:e.map(n=>{let s=b(n.filePath);return{name:n.name,size:s.size,mtimeMs:s.mtimeMs,description:n.description,version:n.version,requiredTools:n.requiredTools,environments:n.environments}})};ue(d(o,pe),JSON.stringify(r,null,2),"utf8")}catch{}}var N="astraclaw_capabilities";async function $(o){if(o.tool==="skills_list")return{handled:!0,result:{skills:L(o.projectRoot,{availableToolNames:o.availableToolNames,currentEnvironment:o.currentEnvironment??process.platform}).map(we)}};if(o.tool==="skill_view"){let e=typeof o.args.name=="string"?o.args.name.trim():"";if(!e)throw new Error("skill_view requires a skill name");let t=O(e);if(!t)throw new Error(`Skill not found: ${e}`);return{handled:!0,result:{name:e,content:be(t.filePath,"utf8")}}}if(o.tool==="mcp_connectors_list"){if(!o.toolCatalog)return{handled:!0,result:{tools:[],note:"AstraClaw MCP connector catalog is not attached to this capability server instance."}};let e=o.toolCatalog.getToolManifest().filter(t=>t.function.name.startsWith("mcp__")).map(t=>({toolName:t.function.name,server:Se(t.function.name),name:_e(t.function.name),description:t.function.description,inputSchema:t.function.parameters}));return{handled:!0,result:{tools:e,count:e.length}}}if(o.tool==="mcp_tool_call"){if(!o.toolCatalog)throw new Error("AstraClaw MCP connector catalog is not attached");let e=typeof o.args.toolName=="string"?o.args.toolName.trim():"";if(!e.startsWith("mcp__"))throw new Error("mcp_tool_call requires a connector toolName returned by mcp_connectors_list");let t=o.toolCatalog.findTool(e);if(!t?.execute)throw new Error(`MCP connector tool not found or not executable: ${e}`);let r=ve(o.args.args),n=`astraclaw_mcp_${Te().slice(0,8)}`,s=await t.execute(n,r);return{handled:!0,result:{toolName:e,content:s.content,details:s.details,imageUrls:s.imageUrls}}}return{handled:!1}}function we(o){return{name:o.name,description:o.description,version:o.version,category:o.category,requiredTools:o.requiredTools,environments:o.environments}}function ve(o){return typeof o=="object"&&o!==null&&!Array.isArray(o)?o:{}}function Se(o){let e=o.split("__");return e.length>=3?e[1]??"":""}function _e(o){let e=o.split("__");return e.length>=3?e.slice(2).join("__"):o}import p from"node:path";import{fileURLToPath as Ae}from"node:url";import{createRuntime as Re}from"mcporter";var U=new Set(["gateway","agents_list","session_status","sessions_send","sessions_list","sessions_history","sessions_spawn","cron","config","workflow"]),ke=new Set([...U,"agent"]);function q(o){return o?.riskLevel?o.riskLevel:o?.isDangerous?"system":o?.isReadOnly?"read":o?.isEgress?"external_egress":"write"}var T=class{toolPool=new Map;setTools(e){this.toolPool.clear();for(let t of e)this.toolPool.set(t.name,t)}addTool(e){this.toolPool.set(e.name,e)}addTools(e){for(let t of e)this.addTool(t)}removeTool(e){return this.toolPool.delete(e)}findTool(e){return this.toolPool.get(e)}hasTool(e){return this.toolPool.has(e)}getToolNames(){return Array.from(this.toolPool.keys())}getToolCount(){return this.toolPool.size}async executeTool(e,t,r,n){let s=this.toolPool.get(e);if(!s)throw new Error(`Tool not found: ${e}`);return s.execute(t,r,n)}getTools(){return Array.from(this.toolPool.values()).filter(e=>e.isEnabled?.()!==!1)}getToolManifest(){let e=[];for(let t of this.toolPool.values()){if(t.isEnabled?.()===!1)continue;let r=q(t);r==="write"&&(t.category==="media"||t.category==="web"||t.category==="mcp"?r="external_egress":(t.category==="system"||t.name==="exec"||t.name==="computer")&&(r="system")),e.push({type:"function",function:{name:t.name,description:t.description,parameters:t.parameters},meta:{category:t.category??"other",displayName:t.displayName??{key:`capability.tool.${t.name}.name`,fallback:t.label},displayDescription:t.displayDescription??{key:`capability.tool.${t.name}.description`,fallback:""},parallelSafe:t.isConcurrencySafe??!1,riskLevel:r,isReadOnly:r==="read",isDangerous:r==="system",isDelete:t.isDelete??!1,isEgress:t.isEgress??r==="external_egress",egressCarriesData:t.egressCarriesData??!1}})}return e}},W=new T;function F(o){W.addTools(o)}function G(o){return W.removeTool(o)}var Pe=new Set(["describe","fetch","find","get","inspect","list","query","read","search","stat"]),Ce=new Set(["append","copy","create","delete","edit","move","patch","remove","rename","set","update","upload","write"]);function B(o){let e=o.annotations,t=xe(o.name),r=t.some(l=>Ce.has(l)),n=t.some(l=>Pe.has(l)),s=e?.destructiveHint===!0||r,i=e?.readOnlyHint===!0||!s&&n,a=i||e?.idempotentHint===!0&&!s;return{isReadOnly:i,isConcurrencySafe:a,isDestructive:s}}function xe(o){return o.replace(/([a-z0-9])([A-Z])/g,"$1_$2").toLowerCase().split(/[^a-z0-9]+/).filter(Boolean)}var Ee=12e4,w=3,Me=1e3;async function De(o,e){let t=e.sleep??(s=>new Promise(i=>setTimeout(i,s))),r=Math.max(1,e.attempts),n;for(let s=1;s<=r;s++)try{return await o()}catch(i){n=i,s<r&&(e.onRetry?.(s,i),await t(e.baseDelayMs*s))}throw n}var g=class{runtime=null;definitions=[];toolsByServer=new Map;injectedNames=new Set;log;workspaceRoot;toolCatalog;serverToolFilters=new Map;serverOAuth=new Map;constructor(e){this.log=e.log??{info:()=>{},warn:()=>{}},this.workspaceRoot=e.workspaceRoot?p.resolve(e.workspaceRoot):void 0,this.toolCatalog=e.toolCatalog,this.definitions=e.servers.filter(t=>!t.disabled).filter(t=>{let r=ze(t);for(let n of r)this.log.warn(`[mcp] rejected server "${t.name}": ${n.message}`);return t.tools&&this.serverToolFilters.set(t.name,t.tools),t.oauth===!0&&this.serverOAuth.set(t.name,!0),r.length===0}).map(t=>this.toServerDefinition(t)).filter(t=>t!==null)}toServerDefinition(e){if((e.type??(e.url?"http":"stdio"))==="http"){if(!e.url)return this.log.warn(`[mcp] server "${e.name}" is type "http" but has no url, skipping`),null;let r;try{r=new URL(e.url)}catch{return this.log.warn(`[mcp] server "${e.name}" has an invalid url "${e.url}", skipping`),null}return{name:e.name,command:{kind:"http",url:r,headers:e.headers}}}return e.command?{name:e.name,command:{kind:"stdio",command:e.command,args:e.args??[],cwd:e.cwd??this.workspaceRoot??process.cwd()},env:e.env}:(this.log.warn(`[mcp] server "${e.name}" is type "stdio" but has no command, skipping`),null)}async connectAll(){this.definitions.length!==0&&(this.runtime=await Re({servers:this.definitions,clientInfo:{name:"qlogicagent",version:"1.0.0"},logger:{info:e=>this.log.info(`[mcp] ${e}`),warn:e=>this.log.warn(`[mcp] ${e}`),error:(e,t)=>this.log.warn(`[mcp] ${e}${t?` (${t instanceof Error?t.message:String(t)})`:""}`),debug:()=>{}}}),await Promise.allSettled(this.definitions.map(async e=>{try{let t=await De(()=>this.runtime.listTools(e.name,{includeSchema:!0,disableOAuth:this.serverOAuth.get(e.name)!==!0}),{attempts:w,baseDelayMs:Me,onRetry:(n,s)=>this.log.warn(`[mcp] connect attempt ${n}/${w} for ${e.name} failed, retrying: ${s instanceof Error?s.message:s}`)}),r=J(t,this.serverToolFilters.get(e.name));this.toolsByServer.set(e.name,r),this.log.info(`[mcp] connected to ${e.name} (${r.length}/${t.length} tools)`)}catch(t){this.log.warn(`[mcp] failed to connect to ${e.name} after ${w} attempts: ${t instanceof Error?t.message:t}`)}})))}injectTools(){for(let[e,t]of this.toolsByServer){let r=this.injectPortableTools(e,t);this.log.info(`[mcp] injected ${r.length} tools from ${e}`)}}async refreshServerTools(e){if(!this.runtime)throw new Error("MCP runtime is not connected");let t=await this.runtime.listTools(e,{includeSchema:!0,disableOAuth:this.serverOAuth.get(e)!==!0}),r=J(t,this.serverToolFilters.get(e));return this.toolsByServer.set(e,r),this.retractServerTools(e),this.injectPortableTools(e,r),r.length}getConnectedServers(){return Array.from(this.toolsByServer.keys())}getToolCount(){let e=0;for(let t of this.toolsByServer.values())e+=t.length;return e}async disconnectAll(){for(let t of this.injectedNames)this.removeRegisteredTool(t);this.injectedNames.clear(),this.toolsByServer.clear();let e=this.runtime;if(this.runtime=null,e)try{await e.close()}catch{}}toPortableTool(e,t){let r=B({name:t.name,description:t.description});return{name:`mcp__${H(e)}__${t.name}`,label:`[${e}] ${t.name}`,category:"mcp",description:t.description??`MCP tool from ${e}`,parameters:t.inputSchema??{type:"object",properties:{}},isConcurrencySafe:r.isConcurrencySafe,isReadOnly:r.isReadOnly,isDestructive:r.isDestructive,searchHint:`mcp ${e} ${t.name.replace(/[_-]+/g," ")}`,execute:async(n,s)=>{let i=this.runtime;if(!i)return{content:[{type:"text",text:`MCP server "${e}" is not connected.`}],details:{error:"mcp_not_connected"}};try{let a=await i.callTool(e,t.name,{args:s,timeoutMs:Ee});return Ie(a)}catch(a){let l=a instanceof Error?a.message:String(a);return{content:[{type:"text",text:`MCP tool error: ${l}`}],details:{error:l}}}}}}wrapToolsForWorkspaceBoundary(e){return this.workspaceRoot?e.map(t=>{if(!t.execute)return t;let r=t.execute;return{...t,execute:async(n,s,i)=>{let a=Le(t.name,s,this.workspaceRoot);return a?{content:[{type:"text",text:a}],details:{type:"mcp",error:"workspace_boundary"}}:r(n,s,i)}}}):e}injectPortableTools(e,t){let r=this.wrapToolsForWorkspaceBoundary(t.map(n=>this.toPortableTool(e,n)));this.registerTools(r);for(let n of r)this.injectedNames.add(n.name);return r}retractServerTools(e){let t=`mcp__${H(e)}__`;for(let r of[...this.injectedNames])r.startsWith(t)&&(this.removeRegisteredTool(r),this.injectedNames.delete(r))}registerTools(e){this.toolCatalog?this.toolCatalog.addTools(e):F(e)}removeRegisteredTool(e){return this.toolCatalog?.removeTool(e)??G(e)}};function Ie(o){let e=o&&typeof o=="object"?o:{};return{content:[{type:"text",text:(Array.isArray(e.content)?e.content:[]).filter(s=>!!s&&typeof s=="object").filter(s=>s.type==="text"&&typeof s.text=="string").map(s=>s.text).join(`
+`)||"(no text output)"}],...e.isError?{details:{error:"mcp_tool_error"}}:{}}}function H(o){return o.replace(/[^a-zA-Z0-9_]/g,"_").toLowerCase()}var je=/(?:^|_)(path|paths|file|files|filename|filenames|dir|dirs|directory|directories|folder|folders|cwd|root|uri)(?:$|_)/i;function Le(o,e,t){if(!t)return null;for(let r of S(e)){let n=$e(r.value,t);if(n&&!Ue(n.candidate,n.root,n.pathApi))return`Blocked: MCP tool "${o}" path "${r.value}" is outside the workspace boundary "${n.root}"`}return null}function S(o,e="",t=0){if(t>8)return[];if(typeof o=="string")return Oe(e,o)?[{key:e,value:o}]:[];if(Array.isArray(o))return o.flatMap(n=>S(n,e,t+1));if(!o||typeof o!="object")return[];let r=[];for(let[n,s]of Object.entries(o))r.push(...S(s,n,t+1));return r}function Oe(o,e){if(!je.test(o))return!1;let t=e.trim();return!t||/^https?:\/\//i.test(t)?!1:Ne(t)}function Ne(o){return p.isAbsolute(o)||/^[A-Za-z]:[\\/]/.test(o)||/^\\\\/.test(o)||/^file:\/\//i.test(o)||o.includes("../")||o.includes("..\\")||o.startsWith(".\\")||o.startsWith("./")||o.includes("/")||o.includes("\\")}function $e(o,e){let t=o.trim();if(/^file:\/\//i.test(t))try{t=Ae(t)}catch{return null}let r=z(t)||z(e)?p.win32:p,n=r.resolve(e);return{candidate:r.isAbsolute(t)?r.resolve(t):r.resolve(n,t),root:n,pathApi:r}}function Ue(o,e,t){let r=t.relative(e,o);return r===""||!r.startsWith("..")&&!t.isAbsolute(r)}function z(o){return/^[A-Za-z]:[\\/]/.test(o)||/^\\\\/.test(o)}function Q(o){if(!o||typeof o!="object")return[];let e=o,t=[],r=e.mcpServers??e.servers??e;for(let[n,s]of Object.entries(r)){if(!s||typeof s!="object")continue;let i=s;if(typeof i.url=="string"){t.push({name:n,type:"http",url:i.url,headers:i.headers&&typeof i.headers=="object"?i.headers:void 0,disabled:i.disabled===!0,oauth:i.oauth===!0,tools:V(i.tools)});continue}typeof i.command=="string"&&t.push({name:n,type:"stdio",command:i.command,args:Array.isArray(i.args)?i.args:void 0,env:i.env&&typeof i.env=="object"?i.env:void 0,cwd:typeof i.cwd=="string"?i.cwd:void 0,disabled:i.disabled===!0,oauth:i.oauth===!0,tools:V(i.tools)})}return t}function J(o,e){let t=new Set(e?.include??[]),r=new Set(e?.exclude??[]);return o.filter(n=>t.size>0&&!t.has(n.name)?!1:!r.has(n.name))}function V(o){if(!o||typeof o!="object")return;let e=o,t=K(e.include),r=K(e.exclude);if(!(!t&&!r))return{...t?{include:t}:{},...r?{exclude:r}:{}}}function K(o){if(!Array.isArray(o))return;let e=o.filter(t=>typeof t=="string"&&t.trim().length>0);return e.length>0?e:void 0}var qe=new Set(["bash","sh","zsh","fish","cmd","cmd.exe","powershell","powershell.exe","pwsh","pwsh.exe"]),We=new Set(["-c","/c","-command","-encodedcommand","-e"]),Fe=["curl","wget","invokewebrequest","invoke-restmethod","iwr","irm","nc","netcat"],Ge=["env","processenv","apikey","api_key","token","secret","credential","credentials","awsaccesskey","awssecret"],Be=["authorizedkeys","sshknownhosts","crontab","launchctl","schtasks","startup","runkey","runonce","bashrc","profile"],He=/\bssh-(?:rsa|ed25519|ecdsa-[^\s]+)\s+[A-Za-z0-9+/=]{40,}/i;function ze(o){let e=[],t=[o.command??"",...o.args??[],...Object.keys(o.env??{}),...Object.values(o.env??{})].join(`
+`);if(He.test(t)&&e.push({code:"ioc_public_key",message:"configuration contains an inline SSH public key IOC"}),(o.type??(o.url?"http":"stdio"))!=="stdio"||!Je(o.command))return e;let r=Ve(o.args??[]);if(!r)return e;let n=Ke(r);return v(n,Be)&&e.push({code:"persistence",message:"stdio shell command attempts a persistence write"}),v(n,Fe)&&v(n,Ge)&&e.push({code:"dangerous_egress",message:"stdio shell command combines network egress with likely secret access"}),e}function Je(o){if(!o)return!1;let e=p.basename(o).toLowerCase();return qe.has(e)}function Ve(o){for(let e=0;e<o.length;e++){let t=o[e]?.toLowerCase();if(t&&We.has(t))return o.slice(e+1).join(" ")}return""}function Ke(o){return o.toLowerCase().replace(/[^a-z0-9]+/g,"")}function v(o,e){return e.some(t=>o.includes(t))}var Xe=[{name:"skills_list",description:"List AstraClaw skills active for the current workspace.",inputSchema:{type:"object",properties:{},additionalProperties:!1}},{name:"skill_view",description:"Read the full SKILL.md instructions for one AstraClaw skill.",inputSchema:{type:"object",properties:{name:{type:"string",description:"Skill name from skills_list."}},required:["name"],additionalProperties:!1}},{name:"mcp_connectors_list",description:"List MCP connector tools installed in AstraClaw's Plugins page and shared with this external agent.",inputSchema:{type:"object",properties:{},additionalProperties:!1}},{name:"mcp_tool_call",description:"Call one AstraClaw shared MCP connector tool by toolName from mcp_connectors_list.",inputSchema:{type:"object",properties:{toolName:{type:"string",description:"Connector tool name, for example mcp__filesystem__read_text_file."},args:{type:"object",description:"Arguments for the connector tool."}},required:["toolName"],additionalProperties:!1}}],_=class{tools=new Map;findTool(e){return this.tools.get(e)}getToolManifest(){return Array.from(this.tools.values()).map(e=>({type:"function",function:{name:e.name,description:e.description,parameters:e.parameters}}))}getToolNames(){return Array.from(this.tools.keys())}setTools(e){this.tools.clear(),this.addTools(e)}addTool(e){this.tools.set(e.name,e)}addTools(e){for(let t of e)this.addTool(t)}removeTool(e){return this.tools.delete(e)}},m=null,et=Qe({input:process.stdin,crlfDelay:Number.POSITIVE_INFINITY});et.on("line",o=>{tt(o)});async function tt(o){let e=o.trim();if(!e)return;let t;try{t=JSON.parse(e)}catch{return}if(t.id===void 0||t.id===null)return t.method==="notifications/initialized",void 0;try{let r=await ot(t);Z({jsonrpc:"2.0",id:t.id,result:r})}catch(r){Z({jsonrpc:"2.0",id:t.id,error:{code:-32603,message:r instanceof Error?r.message:String(r)}})}}async function ot(o){switch(o.method){case"initialize":return{protocolVersion:"2024-11-05",capabilities:{tools:{}},serverInfo:{name:N,version:"1.0.0"}};case"tools/list":return{tools:Xe};case"tools/call":{let e=Y(o.params),t=typeof e.name=="string"?e.name:"",r=Y(e.arguments),n=rt(),s=t==="mcp_connectors_list"||t==="mcp_tool_call"?await nt(n):void 0,i=await $({tool:t,args:r,projectRoot:n,toolCatalog:s});if(!i.handled)throw new Error(`Unknown tool: ${t}`);return{content:[{type:"text",text:JSON.stringify(i.result)}]}}default:throw new Error(`Unknown method: ${o.method}`)}}function rt(){return process.env.ASTRACLAW_PROJECT_ROOT||process.env.QLOGICAGENT_PROJECT_ROOT||process.cwd()}async function nt(o){if(m?.projectRoot===o)return await m.ready,m.catalog;m?.manager?.disconnectAll().catch(()=>{});let e=new _,t=new g({servers:st(),workspaceRoot:o,toolCatalog:e,log:{info:n=>process.stderr.write(`${n}
+`),warn:n=>process.stderr.write(`${n}
+`)}}),r=t.connectAll().then(()=>t.injectTools());return m={projectRoot:o,catalog:e,manager:t,ready:r},await r,e}function st(){let o=process.env.ASTRACLAW_MCP_CONFIG_PATH||A();if(!Ye(o))return[];try{let e=Ze(o,"utf8").replace(/^\uFEFF/,"");return Q(JSON.parse(e))}catch(e){return process.stderr.write(`[astraclaw-native-mcp] failed to read MCP config: ${e instanceof Error?e.message:String(e)}
+`),[]}}function Y(o){return typeof o=="object"&&o!==null&&!Array.isArray(o)?o:{}}function Z(o){process.stdout.write(`${JSON.stringify(o)}
+`)}

package/dist/types/agent/tool-loop/artifact-final-contract.d.ts

@@ -40,6 +40,7 @@ export declare function createArtifactContractState(inputMessages: readonly Chat
 export declare function requiresBrowserAcceptance(inputMessages: readonly ChatMessage[]): boolean;
 export declare function requiresBuildVerification(inputMessages: readonly ChatMessage[]): boolean;
 export declare function requiresResearchQualityGate(inputMessages: readonly ChatMessage[]): boolean;
+export declare function requiresFinalStatusAudit(inputMessages: readonly ChatMessage[]): boolean;
 export declare function hasFinalStatusContract(content: string): boolean;
 export declare function hasResearchQualityGate(content: string): boolean;
 export declare function toolCallWritePath(toolName: string, rawArguments: string): string | null;
@@ -82,6 +83,8 @@ export declare function applyFinalStatusContract(params: {
     messages: readonly ChatMessage[];
     totalToolCallCount: number;
     distinctToolNames: Iterable<string>;
+    visibleToolCallCount?: number;
+    visibleToolNames?: Iterable<string>;
     artifactContract: ArtifactContractState;
     blockedToolCalls?: ReadonlyArray<{
         name: string;

package/dist/types/cli/handlers/turn-handler.d.ts

@@ -22,6 +22,7 @@ export declare function resolveAutoToolChoice(params: {
     currentToolChoice?: TurnConfig["toolChoice"];
     explicitNoToolTurn: boolean;
     looksLikeBuildIntent: boolean;
+    requiresPreToolPreamble?: boolean;
 }): TurnConfig["toolChoice"] | undefined;
 export declare function hydrateAttachmentReferenceUrlsForTurn(messages: ChatMessage[]): ChatMessage[];
 export declare function getFocusedAttachmentToolNamesForTurn(messages: ChatMessage[]): Set<string> | null;
@@ -49,6 +50,7 @@ export declare function augmentLastUserMessageContent(messages: ChatMessage[], m
  */
 export declare function injectSkillContextBeforeLastUser(messages: ChatMessage[], skillContext: string): ChatMessage[];
 export declare function getFocusedAttachmentModelPurposeForTurn(messages: ChatMessage[]): FocusedAttachmentModelPurpose | null;
+export declare function requiresPreToolPreambleForTurn(messages: readonly ChatMessage[]): boolean;
 export declare function refreshPermissionCheckerToolMeta(permissionChecker: PermissionMetadataResolver | null | undefined, tools: ToolDefinition[]): void;
 export declare function handleUserResponse(this: TurnControlHandlerHost, msg: AgentRpcRequest): void;
 export interface TurnPipelineInput {

package/dist/types/cli/pet-runtime.d.ts

@@ -44,6 +44,9 @@ export interface PetRuntime {
     forgeGeneratePetdexAtlas(input: PetdexForgeInput): Promise<PetdexForgeOutput>;
     awardXp(event: string): Promise<void>;
     reactAfterTurn(messages: ChatMessage[]): Promise<void>;
+    /** Backfill missing daily journey summaries (per-owner, cross-project, idempotent, best-effort).
+     *  Owns the LLM + project-listing side effects so stdio-server doesn't reach into runtime/infra. */
+    catchUpJourney(memoryUserId: string): Promise<string[]>;
     isActive(): boolean;
 }
 export interface PetRuntimeDeps {
@@ -51,5 +54,7 @@ export interface PetRuntimeDeps {
     resolveOwnerUserId?: () => string;
     resolveClientForPurpose(purpose: ModelPurpose): PetLlmClient | null;
     sendNotification(method: string, params: Record<string, unknown>): void;
+    /** Project ids for the cross-project journey backfill — injected so pet-runtime never imports the project store. */
+    listProjectIds?: () => string[];
 }
 export declare function createPetRuntime(deps: PetRuntimeDeps): PetRuntime;

package/dist/types/cli/skills-query-service.d.ts

@@ -8,7 +8,12 @@ export interface SkillListEntry {
     globallyDisabled: boolean;
     /** Muted in THIS project only (the project opt-out). */
     projectDisabled: boolean;
-    category: "automation";
+    /** Frontmatter classification (Hub category vocabulary) — drives the card palette/tag. Undefined for unclassified legacy skills. */
+    category?: string;
+    /** Frontmatter author — agent-authored skills carry "用户". */
+    author?: string;
+    /** Provenance (lifecycle store): learned/created/promoted/copied = local origin; "installed" = from the Hub. */
+    source?: "learned" | "created" | "installed" | "promoted";
     displayName: {
         key: string;
         fallback: string;

package/dist/types/orchestration/delegation-coordinator.d.ts

@@ -34,6 +34,7 @@ export declare class DelegationCoordinator {
      */
     delegate(agentId: string, brief: string, opts?: {
         acceptanceCriteria?: string;
+        sessionId?: string;
     }): {
         delegationId: string;
     };

package/dist/types/runtime/infra/agent-process.d.ts

@@ -99,6 +99,8 @@ export interface AgentProcessHandle {
     lastActivityAt?: number;
     /** Whether the ACP agent supports session/resume (D-1). */
     supportsResume?: boolean;
+    /** Whether the ACP agent advertised stdio MCP support during initialize. */
+    supportsStdioMcp?: boolean;
     /** ACP session/update types observed during the current external-agent prompt. */
     acpUpdateTypes?: string[];
     /** Stderr log path for this agent process, when diagnostics logging is enabled. */
@@ -139,6 +141,8 @@ export interface AgentProcessCallbacks {
     };
     /** Session directory for stderr logs. If set, ACP agent stderr is written to {sessionDir}/{agentId}.stderr.log. */
     sessionDir?: string;
+    /** Test hook: redirect native third-party MCP config writes away from the real user home. */
+    nativeMcpHomeDir?: string;
 }
 export declare function ensureLoopbackNoProxy(env: Record<string, string>): Record<string, string>;
 /**
@@ -184,6 +188,7 @@ export declare class AgentProcessManager {
     private callbacks;
     private cliBinaryPath;
     private mcpBridgeScriptPath;
+    private nativeMcpServerScriptPath;
     constructor(callbacks?: AgentProcessCallbacks);
     /** Format: [ISO] [level] [agent:id] [phase] message */
     private slog;
@@ -273,6 +278,7 @@ export declare class AgentProcessManager {
      * Uses the ACP protocol adapter for lifecycle management.
      */
     private spawnAcpAgent;
+    private syncNativeMcpConfig;
     /** Kill a specific child agent process. */
     kill(memberId: string): void;
     /** Kill all child processes and clean up. */

package/dist/types/runtime/infra/astraclaw-capabilities.d.ts

@@ -0,0 +1,30 @@
+import type { ToolCatalog } from "../ports/index.js";
+export declare const ASTRACLAW_CAPABILITIES_SERVER_NAME = "astraclaw_capabilities";
+export declare const ASTRACLAW_CAPABILITIES_SERVER_ALIASES: readonly ["astraclaw_capabilities", "astraclaw"];
+export interface AstraClawCapabilityToolInput {
+    tool: string;
+    args: Record<string, unknown>;
+    projectRoot: string;
+    availableToolNames?: Iterable<string>;
+    currentEnvironment?: string;
+    toolCatalog?: ToolCatalog;
+}
+export type AstraClawCapabilityToolResult = {
+    handled: false;
+} | {
+    handled: true;
+    result: unknown;
+};
+export declare function buildAstraClawCapabilitiesSystemPrompt(input: {
+    projectRoot: string;
+    mcpAvailable: boolean;
+    availableToolNames?: Iterable<string>;
+    currentEnvironment?: string;
+}): string | undefined;
+export declare function buildAstraClawCapabilitiesPromptPreamble(input: {
+    projectRoot: string;
+    mcpAvailable: boolean;
+    availableToolNames?: Iterable<string>;
+    currentEnvironment?: string;
+}): string | undefined;
+export declare function handleAstraClawCapabilityToolCall(input: AstraClawCapabilityToolInput): Promise<AstraClawCapabilityToolResult>;

package/dist/types/runtime/infra/electron-node.d.ts

@@ -0,0 +1,36 @@
+/**
+ * Desktop (Electron-as-Node) npm bridge.
+ *
+ * The packaged desktop app is the ONLY Node/npm on a terminal user's machine: most machines have no
+ * system Node, so `npm i -g <agent>` through a plain shell fails with "'npm' is not recognized". The
+ * desktop ships npm INSIDE the runtime and exposes, via env, how to run it — `AstraClaw.exe npm-cli.js …`
+ * with ELECTRON_RUN_AS_NODE=1 (process.execPath runs as pure Node). These helpers let the install runner
+ * and the CLI detector drive THAT npm instead of a missing system npm.
+ *
+ * The env vars are set by the Electron shell (embedded-gateway) before it spawns the gateway that hosts
+ * qlogicagent. In every other environment (dev with a real Node, CI, tests, the cloud server) they are
+ * absent and {@link resolveElectronNpm} returns null, so callers fall back to the system `npm` unchanged.
+ */
+/** Resolved desktop npm bridge (all paths absolute). */
+export interface ElectronNpm {
+    /** The app binary (process.execPath), run as Node via ELECTRON_RUN_AS_NODE=1. */
+    nodeExe: string;
+    /** Bundled npm's CLI entry (…/node_modules/npm/bin/npm-cli.js). */
+    npmCli: string;
+    /** Writable global-install prefix (~/.xiaozhiclaw/npm-global), or undefined if the shell set none. */
+    prefix?: string;
+}
+/** Resolve the desktop npm bridge from env, or null when not running under the packaged desktop app. */
+export declare function resolveElectronNpm(): ElectronNpm | null;
+/**
+ * Build the env for a desktop npm invocation. CRITICAL: it KEEPS ELECTRON_RUN_AS_NODE=1 — npm shells out
+ * to `node` for lifecycle scripts / node-gyp, and those grandchildren must run as Node too, not pop the
+ * Electron GUI. Pins npm_config_prefix to the writable global prefix so `npm i -g` installs there (never
+ * read-only Program Files → EACCES) and `npm root -g` reports that same location for version detection.
+ */
+export declare function electronNpmEnv(bridge: ElectronNpm): NodeJS.ProcessEnv;
+/** True when `command` is an npm invocation the bridge should handle (checked after any mirror rewrite). */
+export declare function isNpmCommand(command: string): boolean;
+export declare function isForeignInstaller(command: string): boolean;
+/** A copy of process.env with ELECTRON_RUN_AS_NODE stripped, for spawning non-Node foreign installers. */
+export declare function envWithoutElectronRunAsNode(): NodeJS.ProcessEnv;

package/dist/types/runtime/infra/native-mcp-config-sync.d.ts

@@ -0,0 +1,16 @@
+export type NativeMcpSyncStatus = "updated" | "unchanged" | "unsupported" | "skipped";
+export interface NativeMcpSyncInput {
+    agentId: string;
+    projectRoot: string;
+    serverScriptPath: string;
+    nodePath?: string;
+    homeDir?: string;
+    codexHome?: string;
+}
+export interface NativeMcpSyncResult {
+    agentId: string;
+    status: NativeMcpSyncStatus;
+    configPath?: string;
+    reason?: string;
+}
+export declare function syncAstraClawNativeMcpConfig(input: NativeMcpSyncInput): NativeMcpSyncResult;

package/dist/types/runtime/infra/skill-resolver.d.ts

@@ -26,6 +26,10 @@ export interface ResolvedSkill {
     systemGenerated: boolean;
     description?: string;
     version?: string;
+    /** Frontmatter classification (Hub category vocabulary: efficiency/dev/writing/…) — drives the card palette. */
+    category?: string;
+    /** Frontmatter author — agent-authored skills carry "用户". */
+    author?: string;
     requiredTools?: string[];
     environments?: string[];
 }

package/dist/types/skills/mcp/astraclaw-native-mcp-server.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/types/skills/plugins/plugin-marketplace.d.ts

@@ -1,3 +1,4 @@
+import { type ElectronNpm } from "../../runtime/infra/electron-node.js";
 export interface MarketplaceSource {
     /** Source type */
     type: "npm" | "git" | "url";
@@ -39,6 +40,21 @@ export interface MarketplaceLogger {
     info(msg: string): void;
     warn(msg: string): void;
 }
+/**
+ * Resolve the executable + argv for an npm invocation. The packaged desktop app is usually the ONLY
+ * Node/npm on a terminal user's machine, so `execFileAsync("npm", …)` fails there with "'npm' is not
+ * recognized". When the desktop bridge is present we run the bundled npm as `AstraClaw.exe npm-cli.js …`
+ * with ELECTRON_RUN_AS_NODE=1 (via electronNpmEnv); in dev / CI / server / tests the bridge is null and
+ * we fall back to the system `npm` unchanged. Same routing as the agent-install runner.
+ *
+ * Note: electronNpmEnv pins npm_config_prefix to the GLOBAL prefix only — it does not affect the local
+ * `npm install --production` this module runs inside each extracted plugin dir.
+ */
+export declare function resolveNpmExec(bridge: ElectronNpm | null, args: string[]): {
+    file: string;
+    argv: string[];
+    env?: NodeJS.ProcessEnv;
+};
 /**
  * Load plugins from cache only (no network). Fast startup path.
  * CC parity: loadAllPluginsCacheOnly()

package/dist/types/skills/skill-system/skill-validation.d.ts

@@ -22,6 +22,16 @@ export declare function generateSkillContent(params: {
     body: string;
     version?: string;
     category?: string;
+    author?: string;
+}): string;
+/**
+ * Inject frontmatter fields (author / category) into already-valid SKILL.md content when they're
+ * absent — used so agent-authored skills always carry an author ("用户") and a classification, even
+ * when the model's `content` didn't include them. Never overwrites a field the model did provide.
+ */
+export declare function ensureFrontmatterFields(content: string, fields: {
+    author?: string;
+    category?: string;
 }): string;
 /**
  * Auto-fix common frontmatter issues in LLM-generated skill content.

package/dist/types/skills/tools/skill-tool.d.ts

@@ -64,7 +64,7 @@ export declare const SKILL_MANAGE_TOOL_SCHEMA: {
         };
         readonly category: {
             readonly type: "string";
-            readonly description: "Optional category label for create/edit.";
+            readonly description: "Classification for create/edit — pick the ONE best-fitting label from: efficiency, dev, writing, data, search, automation, knowledge, lifestyle. Drives the skill card's color/tag on the plugins page.";
         };
         readonly content: {
             readonly type: "string";