qlogicagent 2.18.2 → 2.18.4

package/dist/types/orchestration/workflow/workflow-runtime.d.ts

@@ -59,6 +59,9 @@ export interface NodeRunStats {
     cacheHit: boolean;
     /** Final per-node disposition (errorPort/continue keep the run alive but mark failed). */
     status: "completed" | "failed";
+    /** Engine-imposed limit surfaced on this node (e.g. a loop forced out at its iteration cap) —
+     *  rendered into the run history so caps are visible in the run record, never silent. */
+    warning?: string;
 }
 export interface RunResult {
     status: "completed" | "failed" | "paused";
@@ -156,6 +159,11 @@ export declare class WorkflowRuntime {
     /** Loop entry: fire the "loop" port once to kick the first iteration. */
     private enterLoop;
     private decideLoopBack;
+    /** A loop forced out at its maxIterations cap (the scheduler marks error="loop_cap_reached:N",
+     *  which previously had NO consumer — the run just took the "done" port as if the loop finished
+     *  naturally). Surface it as a node-level warning: a warn log line + a trace entry the run history
+     *  renders (run-history-store.buildNodeRecords), so the engine-imposed cap is visible in the record. */
+    private surfaceLoopCap;
     /** Loop again? No condition → loop until the scheduler's maxIterations cap. */
     private evalLoopCondition;
     /** Collect inputs for a node from completed upstream outputs along forward data edges. */

package/dist/types/protocol/methods.d.ts

@@ -342,28 +342,6 @@ export interface ConfigUpdateResult {
         reason: string;
     }>;
 }
-export interface CommunityMatchRegistryParams {
-    intent: string;
-    topK?: 1 | 2 | 3;
-    preferOfficial?: boolean;
-}
-export interface CommunityRegistryMatchResult {
-    id: string;
-    type: string;
-    title: string;
-    summary: string;
-    capabilityTags: string[];
-    sourceTier: CommunityInstallSourceTier;
-    trustStage: CommunityInstallTrustStage;
-    resourceRiskTier: CommunityInstallRiskTier;
-    effectiveRiskTier: CommunityInstallRiskTier;
-    latestVersion: string | null;
-    canonical: true;
-}
-export interface CommunityMatchRegistryResult {
-    ok: boolean;
-    matches: CommunityRegistryMatchResult[];
-}
 export type CommunityInstallRiskTier = "R0" | "R1" | "R2" | "R3";
 export type CommunityInstallSourceTier = "official" | "community";
 export type CommunityInstallTrustStage = "quarantine" | "trial" | "trusted";
@@ -660,10 +638,6 @@ export interface RpcMethodMap {
         params: ConfigUpdateParams;
         result: ConfigUpdateResult;
     };
-    "community.matchRegistry": {
-        params: CommunityMatchRegistryParams;
-        result: CommunityMatchRegistryResult;
-    };
     "community.resolveInstall": {
         params: CommunityResolveInstallParams;
         result: CommunityResolveInstallResult;

package/dist/types/protocol/wire/acp-agent-management.d.ts

@@ -243,6 +243,9 @@ export interface SoloSpecJudgeParams {
 export interface SoloSpecJudgeResult {
     ok: boolean;
     issues: string[];
+    /** True when ok=true came from a SKIPPED judgement (no LLM / judge call failed) — an unjudged
+     *  soft-gate pass, not a real "spec reviewed OK". Fail-open stays, but honestly labeled. */
+    judgeSkipped?: boolean;
 }
 /** x/workflow.chat RPC params(M4 自动化页对话式搭图/改图)。history 含到本轮的完整对话;
  *  currentWorkflow 为已有图的渲染文本(改图上下文,前端从 store 提供)。 */

package/dist/types/protocol/wire/agent-events.d.ts

@@ -13,7 +13,7 @@
  * Turn-lifecycle events relayed to the Control UI WebSocket.
  * These are the "chat session" events that every UI client needs.
  */
-export declare const AGENT_WS_EVENT_NAMES: readonly ["turn.start", "turn.delta", "turn.end", "turn.error", "turn.recovery", "turn.file_changes", "turn.tool_call", "turn.tool_result", "turn.tool_blocked", "turn.reasoning_delta", "turn.approval_request", "turn.skill_instruction", "turn.ask_user", "turn.media_result", "turn.media_progress", "turn.media_usage", "turn.media_capability_check", "turn.plan_update", "turn.suggestions", "turn.sidechain_started", "turn.subagent_started", "turn.subagent_delta", "turn.subagent_ended", "turn.sidechain_completed", "turn.task_updated", "turn.todos_updated", "turn.exec_progress", "turn.progress", "turn.tool_use_summary", "turn.tool_selection_policy", "turn.lifecycle", "turn.document_maintenance", "turn.artifact_contract", "turn.usage_update", "team.member.notification", "session.info", "session.recovery_pending", "memory.updated", "skills.updated", "pet.soul_ready", "pet.reaction", "pet.growth", "pet.state", "pet.confirm", "pet.asset.updated", "system.activity", "workflow.created", "workflow.updated", "workflow.deleted", "workflow.runStarted", "workflow.runCompleted", "workflow.runFailed", "workflow.nodeStatus", "workflow.triggerDropped", "workflow.alert", "workflow.approvalRequested", "workflow.approvalTimedOut"];
+export declare const AGENT_WS_EVENT_NAMES: readonly ["turn.start", "turn.delta", "turn.end", "turn.error", "turn.recovery", "turn.file_changes", "turn.tool_call", "turn.tool_result", "turn.tool_blocked", "turn.reasoning_delta", "turn.approval_request", "turn.skill_instruction", "turn.ask_user", "turn.media_result", "turn.media_progress", "turn.media_usage", "turn.media_capability_check", "turn.plan_update", "turn.suggestions", "turn.sidechain_started", "turn.subagent_started", "turn.subagent_delta", "turn.subagent_ended", "turn.sidechain_completed", "turn.task_updated", "turn.todos_updated", "turn.exec_progress", "turn.progress", "turn.tool_use_summary", "turn.tool_selection_policy", "turn.lifecycle", "turn.document_maintenance", "turn.artifact_contract", "turn.usage_update", "team.member.notification", "session.info", "session.recovery_pending", "memory.updated", "skills.updated", "turn.memory_recall", "turn.memory_written", "pet.soul_ready", "pet.reaction", "pet.growth", "pet.state", "pet.confirm", "pet.asset.updated", "system.activity", "workflow.created", "workflow.updated", "workflow.deleted", "workflow.runStarted", "workflow.runCompleted", "workflow.runFailed", "workflow.nodeStatus", "workflow.triggerDropped", "workflow.alert", "workflow.approvalRequested", "workflow.approvalTimedOut"];
 /**
  * Agent Team events (Solo Mode, Product Mode, Plan lifecycle).
  * Relayed to the UI's team/orchestration panel.
@@ -23,7 +23,7 @@ export declare const AGENT_TEAM_WS_EVENT_NAMES: readonly ["solo.progress", "solo
  * All agent notifications that Gateway should relay to WS clients.
  * Union of session events + team events.
  */
-export declare const ALL_AGENT_WS_EVENT_NAMES: readonly ["turn.start", "turn.delta", "turn.end", "turn.error", "turn.recovery", "turn.file_changes", "turn.tool_call", "turn.tool_result", "turn.tool_blocked", "turn.reasoning_delta", "turn.approval_request", "turn.skill_instruction", "turn.ask_user", "turn.media_result", "turn.media_progress", "turn.media_usage", "turn.media_capability_check", "turn.plan_update", "turn.suggestions", "turn.sidechain_started", "turn.subagent_started", "turn.subagent_delta", "turn.subagent_ended", "turn.sidechain_completed", "turn.task_updated", "turn.todos_updated", "turn.exec_progress", "turn.progress", "turn.tool_use_summary", "turn.tool_selection_policy", "turn.lifecycle", "turn.document_maintenance", "turn.artifact_contract", "turn.usage_update", "team.member.notification", "session.info", "session.recovery_pending", "memory.updated", "skills.updated", "pet.soul_ready", "pet.reaction", "pet.growth", "pet.state", "pet.confirm", "pet.asset.updated", "system.activity", "workflow.created", "workflow.updated", "workflow.deleted", "workflow.runStarted", "workflow.runCompleted", "workflow.runFailed", "workflow.nodeStatus", "workflow.triggerDropped", "workflow.alert", "workflow.approvalRequested", "workflow.approvalTimedOut", "solo.progress", "solo.specProgress", "solo.agentDelta", "solo.agentActivity", "solo.agentUsage", "solo.evaluation", "product.taskStarted", "product.taskOutput", "product.members", "product.agentActivity", "product.taskCompleted", "product.taskFailed", "product.budgetUpdate", "product.budgetWarning", "product.checkpointed", "product.completed", "product.dagTopology", "plan.interrupted", "goal.run_state_changed", "goal.phase_boundary", "goal.goal_edited", "goal.message_queued", "goal.acceptance_updated"];
+export declare const ALL_AGENT_WS_EVENT_NAMES: readonly ["turn.start", "turn.delta", "turn.end", "turn.error", "turn.recovery", "turn.file_changes", "turn.tool_call", "turn.tool_result", "turn.tool_blocked", "turn.reasoning_delta", "turn.approval_request", "turn.skill_instruction", "turn.ask_user", "turn.media_result", "turn.media_progress", "turn.media_usage", "turn.media_capability_check", "turn.plan_update", "turn.suggestions", "turn.sidechain_started", "turn.subagent_started", "turn.subagent_delta", "turn.subagent_ended", "turn.sidechain_completed", "turn.task_updated", "turn.todos_updated", "turn.exec_progress", "turn.progress", "turn.tool_use_summary", "turn.tool_selection_policy", "turn.lifecycle", "turn.document_maintenance", "turn.artifact_contract", "turn.usage_update", "team.member.notification", "session.info", "session.recovery_pending", "memory.updated", "skills.updated", "turn.memory_recall", "turn.memory_written", "pet.soul_ready", "pet.reaction", "pet.growth", "pet.state", "pet.confirm", "pet.asset.updated", "system.activity", "workflow.created", "workflow.updated", "workflow.deleted", "workflow.runStarted", "workflow.runCompleted", "workflow.runFailed", "workflow.nodeStatus", "workflow.triggerDropped", "workflow.alert", "workflow.approvalRequested", "workflow.approvalTimedOut", "solo.progress", "solo.specProgress", "solo.agentDelta", "solo.agentActivity", "solo.agentUsage", "solo.evaluation", "product.taskStarted", "product.taskOutput", "product.members", "product.agentActivity", "product.taskCompleted", "product.taskFailed", "product.budgetUpdate", "product.budgetWarning", "product.checkpointed", "product.completed", "product.dagTopology", "plan.interrupted", "goal.run_state_changed", "goal.phase_boundary", "goal.goal_edited", "goal.message_queued", "goal.acceptance_updated"];
 /** Type-level event name for session events. */
 export type AgentWsEventName = (typeof AGENT_WS_EVENT_NAMES)[number];
 /** Type-level event name for team events. */

package/dist/types/protocol/wire/agent-methods.d.ts

@@ -835,17 +835,6 @@ export interface AgentRpcMethodMap extends GatewayRpcMethodMap {
             value: unknown;
         };
     };
-    "community.matchRegistry": {
-        params: {
-            intent: string;
-            topK?: 1 | 2 | 3;
-            preferOfficial?: boolean;
-        };
-        result: {
-            ok: boolean;
-            matches: Array<Record<string, unknown>>;
-        };
-    };
     "community.resolveInstall": {
         params: {
             resourceId: string;

package/dist/types/protocol/wire/gateway-rpc.d.ts

@@ -115,6 +115,7 @@ export interface GatewayRpcMethodMap {
             limit?: number;
             projectId?: string;
             archived?: boolean;
+            agentId?: string;
         };
         result: {
             sessions: Array<{

package/dist/types/protocol/wire/memory-provider-lifecycle.d.ts

@@ -58,6 +58,9 @@ export interface MemorySearchOptions {
     llmConfig?: MemoryLlmConfig;
     /** Categories to boost during reranking (e.g. ["lesson", "preference"]). */
     preferredCategories?: string[];
+    /** Drop hits whose tags contain ALL strings of any group (resident-layer exclusion:
+     * entries already injected verbatim via the global INDEX must not be recalled again). */
+    excludeTagGroups?: string[][];
 }
 export interface MemoryIngestOptions {
     llmConfig?: MemoryLlmConfig;

package/dist/types/protocol/wire/notification-payloads.d.ts

@@ -163,6 +163,22 @@ export interface TurnSuggestionsNotification {
         action?: string;
     }>;
 }
+/** Memory recall visibility (Part B): fired when turn-time recall injected memories,
+ * so the UI can render a "based on N memories" disclosure row (recall was invisible before). */
+export interface TurnMemoryRecallNotification {
+    sessionId: string;
+    turnId: string;
+    count: number;
+    /** Truncated texts of the memories actually injected (post-cap), for the expanded list. */
+    titles: string[];
+}
+/** Memory write visibility (Part B): fired on the synchronous agent-remember tool path.
+ * Dream/async consolidation deliberately does NOT emit this (it surfaces via next-turn recall). */
+export interface TurnMemoryWrittenNotification {
+    items: Array<{
+        title: string;
+    }>;
+}
 /** Sidechain started execution. */
 export interface TurnSidechainStartedNotification {
     turnId: string;
@@ -250,6 +266,15 @@ export interface TurnMediaPersistedNotification {
         bytes: number;
         mimeType: string;
     }>;
+    /**
+     * URLs that FAILED to persist locally this turn (result keeps the remote URL / dangling temp
+     * path, which may expire). Present only when at least one file failed — persistence stays
+     * fail-open, but the degradation is surfaced instead of silently swallowed.
+     */
+    failures?: Array<{
+        remoteUrl: string;
+        error?: string;
+    }>;
 }
 /** Task state change. */
 export interface TurnTaskUpdatedNotification {
@@ -1011,6 +1036,8 @@ export interface NotificationMethodMap {
     "turn.reasoning_delta": TurnReasoningDeltaNotification;
     "turn.plan_update": TurnPlanUpdateNotification;
     "turn.suggestions": TurnSuggestionsNotification;
+    "turn.memory_recall": TurnMemoryRecallNotification;
+    "turn.memory_written": TurnMemoryWrittenNotification;
     "turn.sidechain_started": TurnSidechainStartedNotification;
     "turn.subagent_delta": TurnSubagentDeltaNotification;
     "turn.sidechain_completed": TurnSidechainCompletedNotification;

package/dist/types/runtime/community/community-consent-client.d.ts

@@ -7,26 +7,6 @@ export interface CommunityRuntimeResolution {
     checksum: string;
     sizeBytes: number;
 }
-export interface CommunityRegistryMatchInput {
-    intent: string;
-    topK?: number;
-    preferOfficial?: boolean;
-}
-export interface CommunityRegistryMatchResult {
-    id: string;
-    type: string;
-    title: string;
-    summary: string;
-    /** RESOURCE_CATEGORIES key(search 表演锚点;hub match 返回 ResourceView.category)。 */
-    category: string | null;
-    capabilityTags: string[];
-    sourceTier: CommunityInstallSourceTier;
-    trustStage: CommunityInstallTrustStage;
-    resourceRiskTier: CommunityInstallRiskTier;
-    effectiveRiskTier: CommunityInstallRiskTier;
-    latestVersion: string | null;
-    canonical: true;
-}
 export type CommunityInstallRiskTier = "R0" | "R1" | "R2" | "R3";
 export type CommunityInstallSourceTier = "official" | "community";
 export type CommunityInstallTrustStage = "quarantine" | "trial" | "trusted";
@@ -71,7 +51,6 @@ export interface CommunityConsentClientOptions {
     clientVersion?: string;
 }
 export interface CommunityConsentClient {
-    matchRegistry(input: CommunityRegistryMatchInput): Promise<CommunityRegistryMatchResult[]>;
     resolveInstall(resourceId: string, version?: string): Promise<CommunityInstallResolution>;
     /** List a resource's published versions for the version/rollback menu (WS-B3). The
      *  default client always implements it; optional so lightweight mocks may omit it. */

package/dist/types/runtime/config/tunable-defaults.d.ts

@@ -143,6 +143,12 @@ export declare const TASK_PANEL_GRACE_MS = 30000;
 export declare const MEMORY_PREFETCH_MAX_SESSION_BYTES: number;
 /** Max results per memory recall query. */
 export declare const MEMORY_PREFETCH_LIMIT_PER_RECALL = 10;
+/** Min hybrid score for recall injection. The old 0.1 default was a no-op filter —
+ * top-10 got injected wholesale and weak matches crowded the per-turn byte budget. */
+export declare const MEMORY_RECALL_MIN_SCORE = 0.35;
+/** Adaptive cliff cutoff: stop taking results when the next score drops by more than
+ * this ratio vs the previous one (2 relevant hits -> inject 2, don't pad to 10). */
+export declare const MEMORY_RECALL_CLIFF_RATIO = 0.4;
 /** LRU dedup set size for surfaced memory entries. */
 export declare const MEMORY_MAX_SURFACED_ENTRIES = 100;
 /** Min hours between dream consolidation runs. */

package/dist/types/runtime/execution/memory-decay.d.ts

@@ -49,8 +49,12 @@ export interface DecayCycleDeps {
     };
 }
 export interface DecayCycleResult {
-    /** Whether decay actually ran (false = skipped by gate). */
+    /** Whether decay actually ran (false = skipped by gate OR failed — see `failed`). */
     ran: boolean;
+    /** True when the cycle was ATTEMPTED and errored — distinguishes a failure from a cooldown skip. */
+    failed?: boolean;
+    /** Failure reason, present when failed=true. */
+    error?: string;
     /** Number of memories whose importance was reduced. */
     decayed: number;
     /** Number of memories archived (below threshold). */

package/dist/types/runtime/hooks/context-compression.d.ts

@@ -8,6 +8,11 @@ export declare function estimateTokens(msg: CompressibleMessage): number;
 export declare function estimateTotalTokens(messages: CompressibleMessage[]): number;
 export declare function getCompressionMetrics(): import("../context/context-compression-strategies.js").CompressionMetricsSnapshot;
 export declare function getContextEngineRegistry(): ContextEngineRegistry;
+/**
+ * Prefixed onto the sync fallback when the LLM summarize call failed — the model
+ * (and anyone reading the compressed history) must know this stretch is low-fidelity.
+ */
+export declare const DEGRADED_SUMMARY_MARKER = "[summary degraded: LLM summarization failed]";
 /**
  * Create a summarization callback using an injected LLM transport.
  * For CLI mode: uses the same transport that powers the agent loop.

package/dist/types/runtime/hooks/memory-hooks.d.ts

@@ -7,6 +7,12 @@ export declare const MEMORY_PREFETCH_CONFIG: {
     readonly LIMIT_PER_RECALL: 10;
     readonly MAX_SURFACED_ENTRIES: 100;
 };
+/**
+ * Fallback for hosts that don't inject deps.procedureTag. MUST stay equal to
+ * skills/memory/task-distillation PROCEDURE_TAG (runtime cannot import skills
+ * per the architecture boundary; task-distillation.test.ts asserts equality).
+ */
+export declare const PROCEDURE_TAG_FALLBACK = "distilled@v1";
 export interface MemoryHooksDeps {
     /** QMemory adapter (MemoryProvider with search/health). */
     memoryProvider?: MemoryProvider;
@@ -25,6 +31,16 @@ export interface MemoryHooksDeps {
     getLastAssistantMessage?: () => string | undefined;
     /** Background LLM for implicit extraction. If provided, enables Layer 2. */
     llmExtract?: (prompt: string) => Promise<string | null>;
+    /** Part B write visibility: forwards turn.memory_written on auto-extract commits. */
+    sendNotification?: (method: string, params: Record<string, unknown>) => void;
+    /** V3.2 usage 仪表:procedure 复用的 session 维度与负反馈计数落盘目录。 */
+    profileMemoryDir?: () => string;
+    /** V3.2: tag marking a distilled procedure memory (recall filter). cli injects so runtime never imports skills. */
+    procedureTag?: string;
+    /** V3.2: record distilled procedures recalled this turn (positive reuse signal). cli-injected. */
+    recordProcedureRecalls?: (procedureIds: string[], sessionId: string) => void;
+    /** V3.2: record negative feedback against distilled procedures (failed turn). cli-injected. */
+    recordProcedureNegatives?: (procedureIds: string[]) => void;
 }
 /** Session-scoped state for dedup and byte budget (CC parity). */
 export interface MemoryPrefetchState {

package/dist/types/runtime/infra/acp-detector.d.ts

@@ -155,6 +155,9 @@ export declare function assembleBackendDescriptor(backend: AcpBackendConfig, cli
 export declare function assembleCustomAgentDescriptor(custom: CustomAgentDef, cliPath: string | null, hasConfig: boolean): AgentDescriptor;
 export declare class AcpDetector {
     private cache;
+    /** Last scan that COMPLETED, surviving clearCache() and failed rescans. list() prefers this
+     *  over an empty [] so a transient probe failure never reads as "no agents installed". */
+    private lastGoodScan;
     private configStore;
     private keySources;
     /** Shared in-flight async scan so concurrent scanAsync() callers (startup warm + a racing RPC)
@@ -188,6 +191,11 @@ export declare class AcpDetector {
      * Return cached results without IO. 冷缓存时后台预热（scanAsync）并返回 []，
      * 绝不在 RPC 路径上同步 scan —— 同步探测（11-18s+）会饿死单线程引擎循环
      * （x/product.confirm 60s 超时的根因）。调用方按"稍后再查"处理空列表。
+     *
+     * A background-scan failure is reported (console.error), never swallowed: a swallowed
+     * failure made list() return [] forever and downstream (product planning) treated
+     * "scan failed" as "no agents installed". When the fresh cache is gone but an older
+     * scan succeeded, that stale-but-real result is returned instead of [].
      */
     list(): AgentDescriptor[];
     /** Clear the detection cache. */

package/dist/types/runtime/infra/acp-protocol-adapter.d.ts

@@ -114,6 +114,8 @@ export declare class AcpProtocolAdapter {
     private child;
     private onNotification;
     private hostHandler;
+    /** Sessions whose session/set_model FAILED — running on the agent's default model, not the managed one. */
+    private modelMismatches;
     /**
      * Attach to a child process's stdio for ACP communication.
      * Constructs the official ClientSideConnection over the child's stdin/stdout. The connection's
@@ -172,6 +174,14 @@ export declare class AcpProtocolAdapter {
      * error is the backstop). Uses the generic sendRequest because the SDK has no typed set_model yet.
      */
     private selectSessionModel;
+    /**
+     * The recorded session/set_model failure for a session, if any — the session is alive but on
+     * the agent's DEFAULT model instead of the managed/platform one (wrong vendor/billing/capability).
+     */
+    getModelMismatch(sessionId: string): {
+        desired: string;
+        error: string;
+    } | undefined;
     /**
      * Send a prompt to a running ACP session (session/prompt). Content streams back via session/update
      * notifications during execution; the response carries only { stopReason, usage? }. On timeout the

package/dist/types/runtime/infra/agent-paths.d.ts

@@ -26,9 +26,9 @@ export declare function getOwnerProfileDir(ownerUserId?: string): string;
 export declare function getProfileMemoryDir(ownerUserId?: string): string;
 /** Dir name for our per-project companion data (sessions/checkpoints/uploads). */
 export declare const PROJECT_DATA_DIRNAME = "projectData";
-/** Root of the projectData tree for the current owner. */
+/** Root of the projectData tree on this device (`~/.qlogicagent/projectData/`). */
 export declare function getProjectDataRoot(): string;
-/** `profiles/<owner>/projectData/<projectId>/` (projectId is the path-derived key). */
+/** `~/.qlogicagent/projectData/<projectId>/` (projectId is the path-derived key). */
 export declare function getProjectDataDirById(projectId: string): string;
 /**
  * Ensure the user agent home directory exists and is writable.
@@ -38,9 +38,9 @@ export declare function getProjectDataDirById(projectId: string): string;
 export declare function ensureUserAgentHome(): string;
 /** `~/.qlogicagent/profiles/<owner>/.credentials.json` */
 export declare function getUserCredentialsPath(): string;
-/** `~/.qlogicagent/profiles/<owner>/plugins/` */
+/** `~/.qlogicagent/plugins/` — device-scoped. */
 export declare function getUserPluginsDir(): string;
-/** `~/.qlogicagent/profiles/<owner>/skills/` */
+/** `~/.qlogicagent/skills/` — device-scoped single global skill store. */
 export declare function getUserSkillsDir(): string;
 /** `~/.qlogicagent/profiles/<owner>/settings.json` */
 export declare function getUserSettingsPath(): string;
@@ -48,11 +48,13 @@ export declare function getUserSettingsPath(): string;
 export declare function getUserCacheDir(): string;
 /** `~/.qlogicagent/debug-logs/` */
 export declare function getUserDebugLogsDir(): string;
-/** `~/.qlogicagent/profiles/<owner>/plugin-cache/` */
+/** `~/.qlogicagent/plugin-cache/` — device-scoped (download cache for installs). */
 export declare function getUserPluginCacheDir(): string;
-/** `~/.qlogicagent/profiles/<owner>/mcp.json` */
+/** `~/.qlogicagent/mcp.json` — device-scoped installed MCP server definitions.
+ *  The gateway's preinstall writes here too (its mcp-config.ts mirrors this path) — keeping both
+ *  sides on the device level is what makes the preinstalled github MCP visible to every login. */
 export declare function getUserMcpConfigPath(): string;
-/** `~/.qlogicagent/profiles/<owner>/marketplace.json` */
+/** `~/.qlogicagent/marketplace.json` — device-scoped marketplace sources. */
 export declare function getUserMarketplaceConfigPath(): string;
 /** `~/.qlogicagent/profiles/<owner>/workflows/` */
 export declare function getUserWorkflowsDir(): string;

package/dist/types/runtime/infra/agent-process.d.ts

@@ -291,6 +291,12 @@ export declare class AgentProcessManager {
      * Uses the ACP protocol adapter for lifecycle management.
      */
     private spawnAcpAgent;
+    /**
+     * Surface a recorded session/set_model failure: the session is alive but runs the agent's
+     * DEFAULT model instead of the managed/platform one (wrong vendor/billing/capability). Same
+     * agents.error channel as the other spawn/restart failures.
+     */
+    private reportModelMismatch;
     private syncNativeMcpConfig;
     /** Kill a specific child agent process. */
     kill(memberId: string): void;

package/dist/types/runtime/infra/astraclaw-capabilities.d.ts

@@ -8,6 +8,15 @@ export interface AstraClawCapabilityToolInput {
     availableToolNames?: Iterable<string>;
     currentEnvironment?: string;
     toolCatalog?: ToolCatalog;
+    /**
+     * Configured MCP servers serving NO tools this session (invalid config / connect failure).
+     * Disclosed in mcp_connectors_list so a failed server is visibly missing, not silently absent.
+     */
+    mcpServerFailures?: Array<{
+        name: string;
+        phase?: string;
+        error: string;
+    }>;
 }
 export type AstraClawCapabilityToolResult = {
     handled: false;
@@ -21,10 +30,4 @@ export declare function buildAstraClawCapabilitiesSystemPrompt(input: {
     availableToolNames?: Iterable<string>;
     currentEnvironment?: string;
 }): Promise<string | undefined>;
-export declare function buildAstraClawCapabilitiesPromptPreamble(input: {
-    projectRoot: string;
-    mcpAvailable: boolean;
-    availableToolNames?: Iterable<string>;
-    currentEnvironment?: string;
-}): Promise<string | undefined>;
 export declare function handleAstraClawCapabilityToolCall(input: AstraClawCapabilityToolInput): Promise<AstraClawCapabilityToolResult>;

package/dist/types/runtime/infra/checkpoint-backend.d.ts

@@ -2,7 +2,7 @@
  * Local Checkpoint Backend — git-based shadow repo implementation.
  *
  * Creates and manages checkpoint snapshots in the centralized companion store
- * `~/.qlogicagent/profiles/<owner>/projectData/<projectId>/checkpoints/<sessionId>/`
+ * `~/.qlogicagent/projectData/<projectId>/checkpoints/<sessionId>/`
  * (NOT inside the user's workspace) using a shadow git repository independent of the user's .git.
  */
 import type { CheckpointBackend } from "../ports/checkpoint-contracts.js";

package/dist/types/runtime/infra/migrate-device-scope.d.ts

@@ -0,0 +1,49 @@
+/**
+ * One-shot migration: fold legacy PER-PROFILE install assets into the device-level store.
+ *
+ * 设计裁定:安装的插件/技能/MCP 是【设备资产】,跟随机器;只有会话/记忆/设置/偏好随登录身份
+ * (owner profile)。历史版本把 skills/plugins/mcp.json/skill-lifecycle.json 挂在
+ * profiles/<owner>/ 下,登录切身份 → 引擎换 profile → 已装插件"消失"、预装跨身份失效。
+ *
+ * 折并规则(活跃 owner 的 profile 先处理,它的副本优先):
+ *   - skills/<name>:  设备层缺 → 整目录 rename 进设备 store;同名且 SKILL.md 内容一致 → 丢弃
+ *     profile 副本;同名不同内容 → 原地保留 + 大声告警(绝不静默覆盖)。
+ *   - plugins/<name>: 设备层缺 → rename;同名 → 原地保留 + 告警(插件目录内容不可比对)。
+ *   - skill-lifecycle.json: 按技能名合并进设备层 store(先到优先),消费掉的文件改名
+ *     `*.migrated-to-device` 留痕。
+ *   - mcp.json: 服务器按名合并(先到优先、绝不覆盖已有键),消费掉的文件同样改名留痕。
+ *   - marketplace.json: 设备层缺 → rename 采用;已有 → 原地保留 + 告警。
+ *   - skills-disabled.json(全局静音表): 与技能 store 同为设备资产 —— 各 profile 取【并集】合入
+ *     设备层(保守方向:任何身份下停放/静音过的技能绝不因迁移静默点亮;agent 自建技能的
+ *     "默认停放"正是靠这张表,漏并会让它们在别的身份下全部亮起)。消费掉的文件改名留痕。
+ *   - plugin-cache/、cache/community-installs/: 纯下载缓存,直接删除。
+ *
+ * 会话伴生数据(第二批裁定,对齐 codex/VS Code —— 会话也随设备):
+ *   - projectData/<pid>/: 设备层缺该 pid → 整目录 rename;同 pid 跨 profile(同一 workspace 在
+ *     多身份下用过,path-derived id 相同)→ 结构化合并:sessions/、checkpoints/、uploads/ 的
+ *     子项按【uuid 名】跳已存在(同名=同一会话的陈旧副本,活跃身份先到先得);sessions/.deleted
+ *     墓碑按文件名并集;project.json back-ref 先到先得(输家副本可安全删除,注册表每次写都会重生成)。
+ *     未能并尽的残留原地保留 + 计入 conflicts(绝不静默销毁)。
+ *   - projects.json(注册表): 按项目 id 合并(先到先得);activeProjectId 继承第一个有效值
+ *     (活跃身份优先)。折并须在 rebuildIndexFromBackrefs 之前跑 —— 否则自愈会先用空注册表
+ *     重建、丢掉 active 指针等索引态。
+ *
+ * 幂等:按目录状态驱动(profile 里没有遗留 → 全程 no-op),每次启动同步段调用都安全。
+ */
+export interface DeviceScopeMigrationResult {
+    movedSkills: string[];
+    movedPlugins: string[];
+    /** projectData/<pid> trees moved or merged into the device store. */
+    movedProjects: string[];
+    /** Same-name different-content entries left in place (loud warning emitted). */
+    conflicts: string[];
+    /** Profile files (lifecycle/mcp/marketplace/registry/mute) whose content was folded into the device store. */
+    mergedFiles: string[];
+}
+/**
+ * Fold every profile's legacy install assets into the device-level store. Bounded (rename-based),
+ * idempotent, best-effort with loud per-item diagnostics. Call from the SYNCHRONOUS bootstrap
+ * section BEFORE anything reads the skill store — on an upgraded machine every installed skill
+ * still lives under profiles/ until this runs.
+ */
+export declare function migrateDeviceScopeInstalls(): DeviceScopeMigrationResult;

package/dist/types/runtime/infra/project-data-paths.d.ts

@@ -2,17 +2,18 @@
  * Project Data Paths — centralized location for our per-project COMPANION data (the "account
  * book"): session transcripts/metadata, checkpoint shadow repos, uploaded attachments, deletion
  * tombstones. Mirrors VS Code's workspaceStorage: this data is OURS and lives in a centralized,
- * per-project-id, physically-isolated dir under the owner profile — NEVER inside the user's
+ * per-project-id, physically-isolated dir at the DEVICE level — NEVER inside the user's
  * workspace folder. The workspace folder holds only user work product (code/docs/generated media).
+ * 设备级(用户裁定,对齐 codex/VS Code):会话数据跟随机器;登录身份只属于云同步/计费层。
  *
- *   ~/.qlogicagent/profiles/<owner>/projectData/<projectId>/{sessions,checkpoints,uploads}/
+ *   ~/.qlogicagent/projectData/<projectId>/{sessions,checkpoints,uploads}/
  *
  * projectId is the PATH-DERIVED key (deriveProjectId(workspaceDir), see agent-paths) — the
  * mainstream model (VS Code / cc-haha): same folder → same id, deterministic, recomputable, no
  * central-registry dependency for the storage key. Deleting a project = `rm` projectData/<id>/.
  */
 export { getProjectDataDirById, getProjectDataRoot } from "./agent-paths.js";
-/** `~/.qlogicagent/profiles/<owner>/projectData/<projectId>/` for a projectId or workspaceDir. */
+/** `~/.qlogicagent/projectData/<projectId>/` for a projectId or workspaceDir. */
 export declare function getProjectDataDir(projectIdOrWorkspaceDir: string): string;
 /** `projectData/<id>/sessions/` */
 export declare function getProjectDataSessionsRoot(projectIdOrWorkspaceDir: string): string;

package/dist/types/runtime/infra/project-skill-manifest.d.ts

@@ -2,9 +2,10 @@
  * Skill mute registries — under the single-store model, EVERY skill is global. There is no
  * project-scoped / opt-in concept; instead there are two opt-OUT mute lists:
  *
- *   - owner-level  (~/.qlogicagent/profiles/<owner>/skills-disabled.json) — off in EVERY project
+ *   - device-level (~/.qlogicagent/skills-disabled.json) — off in EVERY project
  *     (the plugin card's on/off switch; also where agent-learned skills land, disabled, until the
- *     user reviews and enables them).
+ *     user reviews and enables them). 与技能 store 同域:插件及其开关都是设备资产,登录身份切换
+ *     不得改变哪些技能是开着的(此前 per-owner 键控会让 A 身份停放的技能在 B 身份下点亮)。
  *   - per-project  (<cwd>/.qlogicagent/skills-disabled.json)              — off in THIS project only
  *     (the "project skills" opt-out, to cut down which skills an agent sees in a given project).
  *

package/dist/types/runtime/infra/working-materials-store.d.ts

@@ -17,19 +17,13 @@ export declare function getWorkingMaterials(projectId: string, sessionId: string
     items: WorkingMaterialItem[];
     missing: WorkingMaterialItem[];
 }>;
-export declare function replaceWorkingMaterials(projectId: string, sessionId: string, items: unknown[]): Promise<{
+export interface WorkingMaterialsWriteResult {
     ok: true;
     items: WorkingMaterialItem[];
-}>;
-export declare function upsertWorkingMaterial(projectId: string, sessionId: string, item: unknown): Promise<{
-    ok: true;
-    items: WorkingMaterialItem[];
-}>;
-export declare function removeWorkingMaterial(projectId: string, sessionId: string, id: string): Promise<{
-    ok: true;
-    items: WorkingMaterialItem[];
-}>;
-export declare function reorderWorkingMaterials(projectId: string, sessionId: string, ids: string[]): Promise<{
-    ok: true;
-    items: WorkingMaterialItem[];
-}>;
+    /** 超过上限被淘汰的项;非空时调用方/UI 必须告知用户(绝不静默丢用户 pin 的数据)。 */
+    dropped?: WorkingMaterialItem[];
+}
+export declare function replaceWorkingMaterials(projectId: string, sessionId: string, items: unknown[]): Promise<WorkingMaterialsWriteResult>;
+export declare function upsertWorkingMaterial(projectId: string, sessionId: string, item: unknown): Promise<WorkingMaterialsWriteResult>;
+export declare function removeWorkingMaterial(projectId: string, sessionId: string, id: string): Promise<WorkingMaterialsWriteResult>;
+export declare function reorderWorkingMaterials(projectId: string, sessionId: string, ids: string[]): Promise<WorkingMaterialsWriteResult>;

package/dist/types/runtime/pet/pet-profile-service.d.ts

@@ -81,6 +81,13 @@ export declare class PetProfileService {
     private readonly profilePath;
     constructor(ownerUserId: string);
     loadProfile(): PetProfile;
+    /**
+     * Load the profile for a read-modify-write cycle. A corrupt profile file must
+     * never be replaced by a rebuilt default — throw so the caller fails loudly
+     * instead of silently destroying the user's pet data.
+     */
+    private loadProfileForWrite;
+    private readProfileState;
     updateSoul(soul: PetSoul | null): PetProfile;
     updatePreferences(update: Partial<PetPreferences>): PetProfile;
     saveJourneySnapshot(snapshot: JourneySnapshot): PetProfile;

package/dist/types/runtime/pet/petdex-forge-service.d.ts

@@ -9,7 +9,9 @@ export interface PetdexForgePackageOutput extends PetdexForgeOutput {
     validationPath: string;
     productionRunPath: string;
 }
-export declare function forgePetdexAsset(input: PetdexForgeRequest, generateImage: GeneratePetdexImage, options?: PetdexProductionOptions): Promise<PetdexForgeOutput>;
+export declare function forgePetdexAsset(input: PetdexForgeRequest, generateImage: GeneratePetdexImage, options?: PetdexProductionOptions): Promise<PetdexForgeOutput & {
+    qaSkippedJobs?: string[];
+}>;
 export declare function forgePetdexAssetPackage(params: {
     input: PetdexForgeRequest;
     outputDir: string;

package/dist/types/runtime/ports/memory-provider.d.ts

@@ -4,6 +4,8 @@ export interface MemorySearchOptions {
     minScore?: number;
     preferredCategories?: string[];
     llmConfig?: unknown;
+    /** Drop hits whose tags contain ALL strings of any group (resident-layer exclusion). */
+    excludeTagGroups?: string[][];
 }
 export interface MemorySearchResult {
     blockId: string;
@@ -157,6 +159,27 @@ export interface MemoryHandlerProvider extends MemoryProvider {
     } | null>;
     /** Persist understood/extracted text on an attachment row. */
     setAttachmentText?(id: string, text: string): void;
+    /** Factual proposals for the candidate surface: pending (default) awaiting
+     * corroboration, or expired (read-only history of what timed out). */
+    listPendingProposals?(userId: string, limit?: number, status?: "pending" | "expired"): Array<{
+        id: string;
+        text: string;
+        category: string;
+        importance: number;
+        confidence: number;
+        source: string;
+        tags: string[];
+        createdAt: number;
+    }>;
+    /** UI resolution of one pending proposal: confirm commits it with manual authority; dismiss rejects it. */
+    resolveProposal?(userId: string, proposalId: string, action: "confirm" | "dismiss"): Promise<boolean>;
+    /** Evidence-laddered backlog consumption (corroborated commit / feedback solo / TTL expiry). */
+    consumePendingProposals?(userId: string): Promise<{
+        committed: number;
+        merged: number;
+        expiredIds: string[];
+        pendingLeft: number;
+    }>;
 }
 export interface MemoryDreamProvider {
     search(query: string, userId: string, options?: {

package/dist/types/runtime/ports/project-memory-store.d.ts

@@ -41,4 +41,6 @@ export interface ProjectMemoryStore {
 export interface ProjectMemoryStoreFactory {
     getRootPath(projectRoot: string): string;
     create(projectRoot: string): ProjectMemoryStore;
+    /** Read the user-level global memory INDEX for prompt injection (null when absent/empty). */
+    readUserIndexForPrompt(): string | null;
 }