qlogicagent 2.18.3 → 2.18.5

package/dist/types/orchestration/solo-spec-builder.d.ts

@@ -32,6 +32,9 @@ export interface SpecChatDeps {
      *  the handler relays these labels (solo.specProgress) to replace the frozen "思考中" with the real
      *  phase (分析 → 确认 → 拟定). Best-effort: never throws into the round. */
     onPhase?: (phase: string) => void;
+    /** (a) Owner global memory cheat-sheet — the spec moderator must honor standing
+     *  preferences/boundaries (language, style, hard limits) when drafting the spec. */
+    globalMemoryIndex?: string | null;
 }
 /** R3 多轮对话式 spec:agent 通过此工具产出/更新结构化规格(类比 plan_mode 的 plan 入参)。 */
 export declare const SET_SPEC_TOOL_NAME = "set_spec";

package/dist/types/protocol/methods.d.ts

@@ -342,28 +342,6 @@ export interface ConfigUpdateResult {
         reason: string;
     }>;
 }
-export interface CommunityMatchRegistryParams {
-    intent: string;
-    topK?: 1 | 2 | 3;
-    preferOfficial?: boolean;
-}
-export interface CommunityRegistryMatchResult {
-    id: string;
-    type: string;
-    title: string;
-    summary: string;
-    capabilityTags: string[];
-    sourceTier: CommunityInstallSourceTier;
-    trustStage: CommunityInstallTrustStage;
-    resourceRiskTier: CommunityInstallRiskTier;
-    effectiveRiskTier: CommunityInstallRiskTier;
-    latestVersion: string | null;
-    canonical: true;
-}
-export interface CommunityMatchRegistryResult {
-    ok: boolean;
-    matches: CommunityRegistryMatchResult[];
-}
 export type CommunityInstallRiskTier = "R0" | "R1" | "R2" | "R3";
 export type CommunityInstallSourceTier = "official" | "community";
 export type CommunityInstallTrustStage = "quarantine" | "trial" | "trusted";
@@ -660,10 +638,6 @@ export interface RpcMethodMap {
         params: ConfigUpdateParams;
         result: ConfigUpdateResult;
     };
-    "community.matchRegistry": {
-        params: CommunityMatchRegistryParams;
-        result: CommunityMatchRegistryResult;
-    };
     "community.resolveInstall": {
         params: CommunityResolveInstallParams;
         result: CommunityResolveInstallResult;

package/dist/types/protocol/wire/agent-methods.d.ts

@@ -623,7 +623,6 @@ export interface AgentRpcMethodMap extends GatewayRpcMethodMap {
     };
     "memory.atlas": GatewayRpcMethodMap["memory.atlas"];
     "memory.activity": GatewayRpcMethodMap["memory.activity"];
-    "memory.observe": GatewayRpcMethodMap["memory.observe"];
     "memory.propose": GatewayRpcMethodMap["memory.propose"];
     "memory.consolidate": GatewayRpcMethodMap["memory.consolidate"];
     "memory.update": GatewayRpcMethodMap["memory.update"];
@@ -835,17 +834,6 @@ export interface AgentRpcMethodMap extends GatewayRpcMethodMap {
             value: unknown;
         };
     };
-    "community.matchRegistry": {
-        params: {
-            intent: string;
-            topK?: 1 | 2 | 3;
-            preferOfficial?: boolean;
-        };
-        result: {
-            ok: boolean;
-            matches: Array<Record<string, unknown>>;
-        };
-    };
     "community.resolveInstall": {
         params: {
             resourceId: string;

package/dist/types/protocol/wire/gateway-rpc.d.ts

@@ -115,6 +115,7 @@ export interface GatewayRpcMethodMap {
             limit?: number;
             projectId?: string;
             archived?: boolean;
+            agentId?: string;
         };
         result: {
             sessions: Array<{
@@ -128,6 +129,16 @@ export interface GatewayRpcMethodMap {
                 pinnedAt?: string | null;
                 archivedAt?: string | null;
                 projectId: string;
+                agentId?: string;
+                source?: "native";
+                nativeRef?: {
+                    agentId: string;
+                    kind: "codex" | "claude";
+                    file: string;
+                };
+                sealedAt?: string | null;
+                previousSessionId?: string | null;
+                carryoverSummary?: string | null;
             }>;
         };
     };
@@ -711,20 +722,6 @@ export interface GatewayRpcMethodMap {
             }>;
         };
     };
-    "memory.observe": {
-        params: {
-            text: string;
-            category?: string;
-            importance?: number;
-            source?: string;
-            tags?: string[];
-        };
-        result: {
-            ok: boolean;
-            observationsAdded: number;
-            observationIds: string[];
-        };
-    };
     "memory.propose": {
         params: MemoryTextMutationParams;
         result: {

package/dist/types/protocol/wire/index.d.ts

@@ -12,7 +12,7 @@ export { type ApprovalRequiredToolContract, type ModelSelectionReason, type Pend
 export { type GatewayChannelExecutionEgressContract, type GatewayChannelExecutionEgressKind, type GatewayChannelExecutionIngressBindingContract, type GatewayChannelExecutionIngressSource, } from "./channel-ingress.js";
 export { CAPABILITY_MANIFEST_DIFF_SECTIONS, cloneCapabilityManifestSnapshot, createCapabilityManifestDiffPayload, deriveCapabilityToolNamespaces, deriveCapabilityWorkspaceIds, mergeCapabilityManifestSnapshot, type CapabilityManifestApprovalMode, type CapabilityManifestApprovalPolicyContract, type CapabilityManifestDiffSection, type CapabilityMcpManifestContract, type CapabilityManifestSnapshotContract, type HostCapabilitySnapshotContract, type CapabilityPluginManifestContract, type RuntimeCapabilityViewContract, type RuntimeToolEligibilityContract, type CapabilitySkillManifestContract, type CapabilityToolManifestContract, type CapabilityWorkspaceSummaryContract, type ToolEligibilityResolvedSource, type ToolEligibilityReasonCode, type ToolEligibilityStatus, } from "./capability-manifest.js";
 export { WEB_ACTION_SCOPE_VALUES, WEB_APPROVAL_DEFAULT_VALUES, WEB_CAPABILITY_FAMILY_VALUES, WEB_CAPABILITY_ID_VALUES, WEB_DEGRADATION_TARGET_VALUES, WEB_ESCALATION_REASON_VALUES, WEB_EXECUTION_MODE_VALUES, WEB_POLICY_RISK_CLASS_VALUES, WEB_RETRY_POLICY_VALUES, WEB_STATEFULNESS_VALUES, WEB_TASK_MODE_VALUES, type WebActionScope, type WebApprovalDefault, type WebCapabilityDescriptorContract, type WebCapabilityFamily, type WebCapabilityId, type WebDegradationTarget, type WebEscalationReason, type WebExecutionMode, type WebPolicyRiskClass, type WebRetryPolicy, type WebStatefulness, type WebTaskMode, type ToolRiskLevel, } from "./web-capability.js";
-export { MEMORY_OBSERVATION_HOOK_VALUES, MEMORY_OBSERVATION_SOURCE_VALUES, MEMORY_WRITE_ACCESS_VALUES, type MemoryContextBlock, type MemoryIngestMessage, type MemoryIngestOptions, type MemoryLlmConfig, type MemoryObservedMsg, type MemoryObservedPayload, type MemoryObservationEnvelope, type MemoryObservationHook, type MemoryObservationSource, type MemoryObserveRequestMsg, type MemoryProvider, type MemorySearchOptions, type MemorySearchResult, type MemoryWriteAccess, } from "./memory-provider-lifecycle.js";
+export { MEMORY_OBSERVATION_HOOK_VALUES, MEMORY_OBSERVATION_SOURCE_VALUES, MEMORY_WRITE_ACCESS_VALUES, type MemoryContextBlock, type MemoryIngestOptions, type MemoryLlmConfig, type MemoryObservedPayload, type MemoryObservationEnvelope, type MemoryObservationHook, type MemoryObservationSource, type MemoryProvider, type MemorySearchOptions, type MemorySearchResult, type MemoryWriteAccess, } from "./memory-provider-lifecycle.js";
 export { RESOURCE_MANIFEST_SCHEMA_VERSION, RUNTIME_ASSET_IDS, RUNTIME_PROFILE_IDS, createDefaultRuntimeResourceProfiles, getManifestShortcutEntry, getRuntimeResourceAsset, getRuntimeResourceProfile, getRuntimeResourceProfileAssets, normalizeRuntimeResourceManifest, upsertRuntimeResourceAsset, type RuntimeManifestShortcutEntry, type RuntimeResourceArtifact, type RuntimeResourceAsset, type RuntimeResourceAssetDelivery, type RuntimeResourceAssetKind, type RuntimeResourceAssetMap, type RuntimeResourceManifest, type RuntimeResourcePlatform, type RuntimeResourceProfile, type RuntimeResourceProfileMap, } from "./resource-manifest.js";
 export { MUTATION_CHECKPOINT_ENTRY_KIND_VALUES, MUTATION_CHECKPOINT_BACKEND_VALUES, MUTATION_CHECKPOINT_PHASE_VALUES, type MutationCheckpointBackend, type MutationCheckpointContract, type MutationCheckpointEntryKind, type MutationCheckpointPhase, type MutationCheckpointRestoreAckContract, type MutationCheckpointRollbackResultContract, type MutationCheckpointRestoreContract, type MutationCheckpointSnapshotEntryContract, } from "./checkpoint.js";
 export { type MutationCheckpointRuntimeManager, type MutationCheckpointRuntimeManagerDeps, } from "./checkpoint-runtime.js";

package/dist/types/protocol/wire/memory-provider-lifecycle.d.ts

@@ -29,16 +29,6 @@ export interface MemoryObservedPayload extends MemoryObservationEnvelope {
     blocks?: MemoryContextBlock[];
     error?: string;
 }
-export interface MemoryObservedMsg {
-    type: "memory.observed";
-    id: string;
-    payload: MemoryObservedPayload;
-}
-export interface MemoryObserveRequestMsg {
-    type: "memory.observe";
-    id: string;
-    payload: MemoryObservationEnvelope;
-}
 export interface MemoryLlmConfig {
     provider: string;
     baseUrl: string;
@@ -70,7 +60,6 @@ export interface MemoryIngestOptions {
 export interface MemoryProvider {
     readonly providerId: string;
     search(query: string, userId: string, options?: MemorySearchOptions): Promise<MemorySearchResult[]>;
-    ingest(messages: MemoryIngestMessage[], userId: string, options?: MemoryIngestOptions): Promise<void>;
     /** Store a plain text memory entry (no LLM extraction — agent decides content). */
     addText?(text: string, userId: string, options?: MemoryIngestOptions): Promise<{
         memoriesAdded: number;
@@ -78,8 +67,3 @@ export interface MemoryProvider {
     /** Remove a memory entry by ID. */
     remove?(memoryId: string): Promise<boolean>;
 }
-export interface MemoryIngestMessage {
-    role: string;
-    content: string;
-    timestamp?: number;
-}

package/dist/types/runtime/community/community-consent-client.d.ts

@@ -7,26 +7,6 @@ export interface CommunityRuntimeResolution {
     checksum: string;
     sizeBytes: number;
 }
-export interface CommunityRegistryMatchInput {
-    intent: string;
-    topK?: number;
-    preferOfficial?: boolean;
-}
-export interface CommunityRegistryMatchResult {
-    id: string;
-    type: string;
-    title: string;
-    summary: string;
-    /** RESOURCE_CATEGORIES key(search 表演锚点;hub match 返回 ResourceView.category)。 */
-    category: string | null;
-    capabilityTags: string[];
-    sourceTier: CommunityInstallSourceTier;
-    trustStage: CommunityInstallTrustStage;
-    resourceRiskTier: CommunityInstallRiskTier;
-    effectiveRiskTier: CommunityInstallRiskTier;
-    latestVersion: string | null;
-    canonical: true;
-}
 export type CommunityInstallRiskTier = "R0" | "R1" | "R2" | "R3";
 export type CommunityInstallSourceTier = "official" | "community";
 export type CommunityInstallTrustStage = "quarantine" | "trial" | "trusted";
@@ -71,7 +51,6 @@ export interface CommunityConsentClientOptions {
     clientVersion?: string;
 }
 export interface CommunityConsentClient {
-    matchRegistry(input: CommunityRegistryMatchInput): Promise<CommunityRegistryMatchResult[]>;
     resolveInstall(resourceId: string, version?: string): Promise<CommunityInstallResolution>;
     /** List a resource's published versions for the version/rollback menu (WS-B3). The
      *  default client always implements it; optional so lightweight mocks may omit it. */

package/dist/types/runtime/execution/memory-decay.d.ts

@@ -32,7 +32,7 @@ export declare function markDecayComplete(memoryRoot: string): Promise<void>;
 export interface DecayCycleDeps {
     /** Memory provider with triggerDecay method. */
     adapter: {
-        triggerDecay(userId: string, maxAgeDays?: number): Promise<{
+        triggerDecay(userId: string): Promise<{
             decayed: number;
         }>;
     };

package/dist/types/runtime/hooks/memory-hooks.d.ts

@@ -7,6 +7,12 @@ export declare const MEMORY_PREFETCH_CONFIG: {
     readonly LIMIT_PER_RECALL: 10;
     readonly MAX_SURFACED_ENTRIES: 100;
 };
+/**
+ * Fallback for hosts that don't inject deps.procedureTag. MUST stay equal to
+ * skills/memory/task-distillation PROCEDURE_TAG (runtime cannot import skills
+ * per the architecture boundary; task-distillation.test.ts asserts equality).
+ */
+export declare const PROCEDURE_TAG_FALLBACK = "distilled@v1";
 export interface MemoryHooksDeps {
     /** QMemory adapter (MemoryProvider with search/health). */
     memoryProvider?: MemoryProvider;

package/dist/types/runtime/infra/agent-paths.d.ts

@@ -26,9 +26,9 @@ export declare function getOwnerProfileDir(ownerUserId?: string): string;
 export declare function getProfileMemoryDir(ownerUserId?: string): string;
 /** Dir name for our per-project companion data (sessions/checkpoints/uploads). */
 export declare const PROJECT_DATA_DIRNAME = "projectData";
-/** Root of the projectData tree for the current owner. */
+/** Root of the projectData tree on this device (`~/.qlogicagent/projectData/`). */
 export declare function getProjectDataRoot(): string;
-/** `profiles/<owner>/projectData/<projectId>/` (projectId is the path-derived key). */
+/** `~/.qlogicagent/projectData/<projectId>/` (projectId is the path-derived key). */
 export declare function getProjectDataDirById(projectId: string): string;
 /**
  * Ensure the user agent home directory exists and is writable.
@@ -38,9 +38,9 @@ export declare function getProjectDataDirById(projectId: string): string;
 export declare function ensureUserAgentHome(): string;
 /** `~/.qlogicagent/profiles/<owner>/.credentials.json` */
 export declare function getUserCredentialsPath(): string;
-/** `~/.qlogicagent/profiles/<owner>/plugins/` */
+/** `~/.qlogicagent/plugins/` — device-scoped. */
 export declare function getUserPluginsDir(): string;
-/** `~/.qlogicagent/profiles/<owner>/skills/` */
+/** `~/.qlogicagent/skills/` — device-scoped single global skill store. */
 export declare function getUserSkillsDir(): string;
 /** `~/.qlogicagent/profiles/<owner>/settings.json` */
 export declare function getUserSettingsPath(): string;
@@ -48,11 +48,13 @@ export declare function getUserSettingsPath(): string;
 export declare function getUserCacheDir(): string;
 /** `~/.qlogicagent/debug-logs/` */
 export declare function getUserDebugLogsDir(): string;
-/** `~/.qlogicagent/profiles/<owner>/plugin-cache/` */
+/** `~/.qlogicagent/plugin-cache/` — device-scoped (download cache for installs). */
 export declare function getUserPluginCacheDir(): string;
-/** `~/.qlogicagent/profiles/<owner>/mcp.json` */
+/** `~/.qlogicagent/mcp.json` — device-scoped installed MCP server definitions.
+ *  The gateway's preinstall writes here too (its mcp-config.ts mirrors this path) — keeping both
+ *  sides on the device level is what makes the preinstalled github MCP visible to every login. */
 export declare function getUserMcpConfigPath(): string;
-/** `~/.qlogicagent/profiles/<owner>/marketplace.json` */
+/** `~/.qlogicagent/marketplace.json` — device-scoped marketplace sources. */
 export declare function getUserMarketplaceConfigPath(): string;
 /** `~/.qlogicagent/profiles/<owner>/workflows/` */
 export declare function getUserWorkflowsDir(): string;

package/dist/types/runtime/infra/astraclaw-capabilities.d.ts

@@ -30,10 +30,4 @@ export declare function buildAstraClawCapabilitiesSystemPrompt(input: {
     availableToolNames?: Iterable<string>;
     currentEnvironment?: string;
 }): Promise<string | undefined>;
-export declare function buildAstraClawCapabilitiesPromptPreamble(input: {
-    projectRoot: string;
-    mcpAvailable: boolean;
-    availableToolNames?: Iterable<string>;
-    currentEnvironment?: string;
-}): Promise<string | undefined>;
 export declare function handleAstraClawCapabilityToolCall(input: AstraClawCapabilityToolInput): Promise<AstraClawCapabilityToolResult>;

package/dist/types/runtime/infra/checkpoint-backend.d.ts

@@ -2,7 +2,7 @@
  * Local Checkpoint Backend — git-based shadow repo implementation.
  *
  * Creates and manages checkpoint snapshots in the centralized companion store
- * `~/.qlogicagent/profiles/<owner>/projectData/<projectId>/checkpoints/<sessionId>/`
+ * `~/.qlogicagent/projectData/<projectId>/checkpoints/<sessionId>/`
  * (NOT inside the user's workspace) using a shadow git repository independent of the user's .git.
  */
 import type { CheckpointBackend } from "../ports/checkpoint-contracts.js";

package/dist/types/runtime/infra/migrate-device-scope.d.ts

@@ -0,0 +1,49 @@
+/**
+ * One-shot migration: fold legacy PER-PROFILE install assets into the device-level store.
+ *
+ * 设计裁定:安装的插件/技能/MCP 是【设备资产】,跟随机器;只有会话/记忆/设置/偏好随登录身份
+ * (owner profile)。历史版本把 skills/plugins/mcp.json/skill-lifecycle.json 挂在
+ * profiles/<owner>/ 下,登录切身份 → 引擎换 profile → 已装插件"消失"、预装跨身份失效。
+ *
+ * 折并规则(活跃 owner 的 profile 先处理,它的副本优先):
+ *   - skills/<name>:  设备层缺 → 整目录 rename 进设备 store;同名且 SKILL.md 内容一致 → 丢弃
+ *     profile 副本;同名不同内容 → 原地保留 + 大声告警(绝不静默覆盖)。
+ *   - plugins/<name>: 设备层缺 → rename;同名 → 原地保留 + 告警(插件目录内容不可比对)。
+ *   - skill-lifecycle.json: 按技能名合并进设备层 store(先到优先),消费掉的文件改名
+ *     `*.migrated-to-device` 留痕。
+ *   - mcp.json: 服务器按名合并(先到优先、绝不覆盖已有键),消费掉的文件同样改名留痕。
+ *   - marketplace.json: 设备层缺 → rename 采用;已有 → 原地保留 + 告警。
+ *   - skills-disabled.json(全局静音表): 与技能 store 同为设备资产 —— 各 profile 取【并集】合入
+ *     设备层(保守方向:任何身份下停放/静音过的技能绝不因迁移静默点亮;agent 自建技能的
+ *     "默认停放"正是靠这张表,漏并会让它们在别的身份下全部亮起)。消费掉的文件改名留痕。
+ *   - plugin-cache/、cache/community-installs/: 纯下载缓存,直接删除。
+ *
+ * 会话伴生数据(第二批裁定,对齐 codex/VS Code —— 会话也随设备):
+ *   - projectData/<pid>/: 设备层缺该 pid → 整目录 rename;同 pid 跨 profile(同一 workspace 在
+ *     多身份下用过,path-derived id 相同)→ 结构化合并:sessions/、checkpoints/、uploads/ 的
+ *     子项按【uuid 名】跳已存在(同名=同一会话的陈旧副本,活跃身份先到先得);sessions/.deleted
+ *     墓碑按文件名并集;project.json back-ref 先到先得(输家副本可安全删除,注册表每次写都会重生成)。
+ *     未能并尽的残留原地保留 + 计入 conflicts(绝不静默销毁)。
+ *   - projects.json(注册表): 按项目 id 合并(先到先得);activeProjectId 继承第一个有效值
+ *     (活跃身份优先)。折并须在 rebuildIndexFromBackrefs 之前跑 —— 否则自愈会先用空注册表
+ *     重建、丢掉 active 指针等索引态。
+ *
+ * 幂等:按目录状态驱动(profile 里没有遗留 → 全程 no-op),每次启动同步段调用都安全。
+ */
+export interface DeviceScopeMigrationResult {
+    movedSkills: string[];
+    movedPlugins: string[];
+    /** projectData/<pid> trees moved or merged into the device store. */
+    movedProjects: string[];
+    /** Same-name different-content entries left in place (loud warning emitted). */
+    conflicts: string[];
+    /** Profile files (lifecycle/mcp/marketplace/registry/mute) whose content was folded into the device store. */
+    mergedFiles: string[];
+}
+/**
+ * Fold every profile's legacy install assets into the device-level store. Bounded (rename-based),
+ * idempotent, best-effort with loud per-item diagnostics. Call from the SYNCHRONOUS bootstrap
+ * section BEFORE anything reads the skill store — on an upgraded machine every installed skill
+ * still lives under profiles/ until this runs.
+ */
+export declare function migrateDeviceScopeInstalls(): DeviceScopeMigrationResult;

package/dist/types/runtime/infra/project-data-paths.d.ts

@@ -2,17 +2,18 @@
  * Project Data Paths — centralized location for our per-project COMPANION data (the "account
  * book"): session transcripts/metadata, checkpoint shadow repos, uploaded attachments, deletion
  * tombstones. Mirrors VS Code's workspaceStorage: this data is OURS and lives in a centralized,
- * per-project-id, physically-isolated dir under the owner profile — NEVER inside the user's
+ * per-project-id, physically-isolated dir at the DEVICE level — NEVER inside the user's
  * workspace folder. The workspace folder holds only user work product (code/docs/generated media).
+ * 设备级(用户裁定,对齐 codex/VS Code):会话数据跟随机器;登录身份只属于云同步/计费层。
  *
- *   ~/.qlogicagent/profiles/<owner>/projectData/<projectId>/{sessions,checkpoints,uploads}/
+ *   ~/.qlogicagent/projectData/<projectId>/{sessions,checkpoints,uploads}/
  *
  * projectId is the PATH-DERIVED key (deriveProjectId(workspaceDir), see agent-paths) — the
  * mainstream model (VS Code / cc-haha): same folder → same id, deterministic, recomputable, no
  * central-registry dependency for the storage key. Deleting a project = `rm` projectData/<id>/.
  */
 export { getProjectDataDirById, getProjectDataRoot } from "./agent-paths.js";
-/** `~/.qlogicagent/profiles/<owner>/projectData/<projectId>/` for a projectId or workspaceDir. */
+/** `~/.qlogicagent/projectData/<projectId>/` for a projectId or workspaceDir. */
 export declare function getProjectDataDir(projectIdOrWorkspaceDir: string): string;
 /** `projectData/<id>/sessions/` */
 export declare function getProjectDataSessionsRoot(projectIdOrWorkspaceDir: string): string;

package/dist/types/runtime/infra/project-skill-manifest.d.ts

@@ -2,9 +2,10 @@
  * Skill mute registries — under the single-store model, EVERY skill is global. There is no
  * project-scoped / opt-in concept; instead there are two opt-OUT mute lists:
  *
- *   - owner-level  (~/.qlogicagent/profiles/<owner>/skills-disabled.json) — off in EVERY project
+ *   - device-level (~/.qlogicagent/skills-disabled.json) — off in EVERY project
  *     (the plugin card's on/off switch; also where agent-learned skills land, disabled, until the
- *     user reviews and enables them).
+ *     user reviews and enables them). 与技能 store 同域:插件及其开关都是设备资产,登录身份切换
+ *     不得改变哪些技能是开着的(此前 per-owner 键控会让 A 身份停放的技能在 B 身份下点亮)。
  *   - per-project  (<cwd>/.qlogicagent/skills-disabled.json)              — off in THIS project only
  *     (the "project skills" opt-out, to cut down which skills an agent sees in a given project).
  *

package/dist/types/runtime/ports/index.d.ts

@@ -1,6 +1,6 @@
 export type { MemoryWriter, MemoryWriteMetadata } from "./memory-writer.js";
 export type { MemoryRecallSource } from "./memory-recall-source.js";
-export type { MemoryProvider, MemorySearchOptions, MemorySearchResult, MemoryIngestMessage, MemoryIngestOptions, MemoryExtractionItem, MemoryConsolidationWriteResult, MemoryLearningSink, MemoryToolLocalProvider, MemoryActivitySummary, MemoryAtlasRecord, MemoryAtlasResult, MemoryUpdatePatch, MemoryHandlerProvider, MemoryDreamProvider, MemoryDecayProvider, MemoryRuntimeHookProvider, MemoryToolProvider, MemoryDreamRuntimeProvider, } from "./memory-provider.js";
+export type { MemoryProvider, MemorySearchOptions, MemorySearchResult, MemoryIngestOptions, MemoryExtractionItem, MemoryConsolidationWriteResult, MemoryLearningSink, MemoryToolLocalProvider, MemoryActivitySummary, MemoryAtlasRecord, MemoryAtlasResult, MemoryUpdatePatch, MemoryHandlerProvider, MemoryDreamProvider, MemoryDecayProvider, MemoryRuntimeHookProvider, MemoryToolProvider, MemoryDreamRuntimeProvider, } from "./memory-provider.js";
 export type { PathService } from "./path-service.js";
 export type { ConfigPort } from "./config-port.js";
 export { createRecordConfigPort } from "./config-port.js";

package/dist/types/runtime/ports/memory-provider.d.ts

@@ -17,11 +17,6 @@ export interface MemorySearchResult {
     source?: string;
     metadata?: Record<string, unknown>;
 }
-export interface MemoryIngestMessage {
-    role: string;
-    content: string;
-    timestamp?: number;
-}
 export interface MemoryIngestOptions {
     llmConfig?: unknown;
     source?: string;
@@ -56,7 +51,6 @@ export interface MemoryConsolidationWriteResult {
 export interface MemoryProvider {
     readonly providerId: string;
     search(query: string, userId: string, options?: MemorySearchOptions): Promise<MemorySearchResult[]>;
-    ingest?(messages: MemoryIngestMessage[], userId: string, options?: MemoryIngestOptions): Promise<void>;
     addText?(text: string, userId: string, options?: MemoryIngestOptions): Promise<{
         memoriesAdded: number;
     }>;
@@ -159,6 +153,27 @@ export interface MemoryHandlerProvider extends MemoryProvider {
     } | null>;
     /** Persist understood/extracted text on an attachment row. */
     setAttachmentText?(id: string, text: string): void;
+    /** Factual proposals for the candidate surface: pending (default) awaiting
+     * corroboration, or expired (read-only history of what timed out). */
+    listPendingProposals?(userId: string, limit?: number, status?: "pending" | "expired"): Array<{
+        id: string;
+        text: string;
+        category: string;
+        importance: number;
+        confidence: number;
+        source: string;
+        tags: string[];
+        createdAt: number;
+    }>;
+    /** UI resolution of one pending proposal: confirm commits it with manual authority; dismiss rejects it. */
+    resolveProposal?(userId: string, proposalId: string, action: "confirm" | "dismiss"): Promise<boolean>;
+    /** Evidence-laddered backlog consumption (corroborated commit / feedback solo / TTL expiry). */
+    consumePendingProposals?(userId: string): Promise<{
+        committed: number;
+        merged: number;
+        expiredIds: string[];
+        pendingLeft: number;
+    }>;
 }
 export interface MemoryDreamProvider {
     search(query: string, userId: string, options?: {
@@ -180,7 +195,7 @@ export interface MemoryDreamProvider {
     getAllProfiles?(userId: string): Record<string, string>;
 }
 export interface MemoryDecayProvider {
-    triggerDecay(userId: string, maxAgeDays?: number): Promise<{
+    triggerDecay(userId: string): Promise<{
         decayed: number;
     }>;
 }

package/dist/types/skills/memory/fts-segment.d.ts

@@ -0,0 +1,20 @@
+/**
+ * FTS pre-segmentation for CJK-aware keyword search.
+ *
+ * SQLite FTS5's unicode61 tokenizer does not segment CJK: a run of Chinese
+ * characters indexes as ONE token, so a query like 咖啡 can never match a
+ * memory containing 用户喜欢喝美式咖啡. Instead of switching tokenizers
+ * (trigram misses 2-char Chinese words, ICU is not bundled), we index a
+ * pre-segmented shadow column (`memories.text_seg`) and segment queries with
+ * the SAME function:
+ *   - Latin/digit runs stay whole words ("docker", "v2")
+ *   - CJK runs become character bigrams (咖啡, 啡因) + the single char for
+ *     1-char runs — the same scheme the near-duplicate gate already uses.
+ *
+ * Index side and query side MUST share this function; drift between them
+ * silently zeroes recall.
+ */
+/** Segment text into FTS-friendly tokens (lowercased). */
+export declare function segmentForFts(text: string): string[];
+/** Render the segmented shadow text stored in memories.text_seg. */
+export declare function segmentTextForFts(text: string): string;

package/dist/types/skills/memory/local-memory-provider.d.ts

@@ -8,8 +8,8 @@
  *   - With embedding API configured: hybrid search (FTS + vector)
  *   - Without embedding: FTS-only search (still useful for exact/keyword matches)
  */
-import type { MemoryProvider, MemorySearchResult, MemorySearchOptions, MemoryIngestMessage, MemoryIngestOptions } from "../../protocol/wire/index.js";
-import type { MemoryClaimRecord, MemoryConflictRecord, MemoryUpdateInput, SqliteDatabase } from "./local-store.js";
+import type { MemoryProvider, MemorySearchResult, MemorySearchOptions, MemoryIngestOptions } from "../../protocol/wire/index.js";
+import type { MemoryClaimRecord, MemoryConflictRecord, MemoryProposalRecord, MemoryUpdateInput, SqliteDatabase } from "./local-store.js";
 import { type AdoptedAttachment } from "./memory-attachment-store.js";
 import { type LocalEmbeddingConfig } from "./local-embedding.js";
 import { type ExtractedMemoryItem, type MemoryConsolidationResult } from "./memory-consolidation.js";
@@ -32,6 +32,10 @@ export declare class LocalMemoryProvider implements MemoryProvider {
     private attachmentStore;
     private userIdPrefix;
     private dbPath;
+    private attachmentsDir;
+    /** Active embedding model id — stamped onto stored vectors and used to skip
+     * incomparable vectors at search time (model switch = silent noise otherwise). */
+    private embeddingModelId;
     /** One-shot flag: the embedding-degradation trace is logged once per provider instance. */
     private embeddingFailureLogged;
     constructor(config: LocalMemoryProviderConfig);
@@ -67,7 +71,6 @@ export declare class LocalMemoryProvider implements MemoryProvider {
     private noteEmbeddingFailure;
     private buildEmbedding;
     search(query: string, userId: string, options?: MemorySearchOptions): Promise<MemorySearchResult[]>;
-    ingest(messages: MemoryIngestMessage[], userId: string, options?: MemoryIngestOptions): Promise<void>;
     /** Public embedding access for task-distillation signatures (R3). Null when
      * the embedding provider is unavailable — callers must degrade, not throw. */
     embedText(text: string): Promise<Float32Array | null>;
@@ -79,12 +82,47 @@ export declare class LocalMemoryProvider implements MemoryProvider {
     }>;
     remove(memoryId: string): Promise<boolean>;
     update(memoryId: string, input: MemoryUpdateInput): Promise<boolean>;
+    /**
+     * Prompt-injection screen for L2 writes. The memory-tool path already checks
+     * this, but implicit extraction / distillation / RPC ingestion used to write
+     * UNSCREENED — recalled memories land in a system message, so this is the
+     * last write-side gate. Rejections are traced, never silent.
+     */
+    private screenUnsafeItems;
     /**
      * Commit extracted memory items through the single consolidation pipeline.
      */
     ingestExtracted(items: ExtractedMemoryItem[], userId: string, options?: MemoryIngestOptions): Promise<MemoryConsolidationResult>;
     observeExtracted(items: ExtractedMemoryItem[], userId: string, options?: MemoryIngestOptions): Promise<MemoryConsolidationResult>;
     proposeExtracted(items: ExtractedMemoryItem[], userId: string, options?: MemoryIngestOptions): Promise<MemoryConsolidationResult>;
+    /**
+     * Consume the pending-proposal backlog (the "proposals black hole" fix).
+     *
+     * Trust ladder, mirroring V3's graduated autonomy:
+     *   - CORROBORATED facts — the same fact proposed again from an independent
+     *     context (different session or different source) — commit automatically,
+     *     with a trace. Evidence, not a confidence score, is the auto gate.
+     *   - Feedback-distillation proposals commit alone: their >=2-evidence bar
+     *     was already enforced upstream (idempotency-keyed sweep, §10).
+     *   - dream-source proposals never commit alone; they only corroborate.
+     *   - Everything else waits for corroboration and EXPIRES after the TTL —
+     *     visibly (status=expired), not by silent deletion.
+     */
+    consumePendingProposals(userId: string, opts?: {
+        now?: number;
+        ttlMs?: number;
+        maxCommitsPerPass?: number;
+    }): Promise<{
+        committed: number;
+        merged: number;
+        expiredIds: string[];
+        pendingLeft: number;
+    }>;
+    /** Proposals for the memory candidate surface: pending (default) or the
+     * read-only expired history. Other statuses stay internal. */
+    listPendingProposals(userId: string, limit?: number, status?: "pending" | "expired"): MemoryProposalRecord[];
+    /** Resolve one pending proposal from the UI: confirm -> commit now; dismiss -> rejected. */
+    resolveProposal(userId: string, proposalId: string, action: "confirm" | "dismiss"): Promise<boolean>;
     listClaims(userId: string): MemoryClaimRecord[];
     listConflicts(userId: string): MemoryConflictRecord[];
     /**
@@ -106,7 +144,7 @@ export declare class LocalMemoryProvider implements MemoryProvider {
      * Trigger memory decay - multi-strategy (temporal + staleness + noise).
      * Also enforces capacity limit and runs vacuum for space reclamation.
      */
-    triggerDecay(userId: string, _maxAgeDays?: number): Promise<{
+    triggerDecay(userId: string): Promise<{
         decayed: number;
     }>;
     /**
@@ -177,9 +215,6 @@ export declare class LocalMemoryProvider implements MemoryProvider {
         pageSize?: number;
         activeOnly?: boolean;
     }): import("./local-store-records.js").MemoryRecord[];
-    /**
-     * Find memories by event date (+/- tolerance). For temporal context retrieval.
-     */
     /**
      * Return the final atlas payload: a bounded interactive record window plus
      * whole-history buckets/clusters for large timelines.
@@ -193,7 +228,8 @@ export declare class LocalMemoryProvider implements MemoryProvider {
         clusterLimit?: number;
         activeOnly?: boolean;
     }): import("./local-store-records.js").MemoryAtlasResult;
-    findByEventDate(userId: string, targetDate: string, toleranceDays?: number): import("./local-store-records.js").MemorySearchHit[];
+    /** Complete tag-scoped listing (resident refresh / onboarding purge) — see store.listByTag. */
+    listMemoriesByTag(userId: string, tag: string, limit?: number): import("./local-store-records.js").MemoryRecord[];
     /**
      * Find related memories (event continuity detection).
      * Given a new memory, finds existing memories that are semantically related
@@ -244,7 +280,8 @@ export declare class LocalMemoryProvider implements MemoryProvider {
         metadata?: Record<string, unknown>;
     }>;
     /**
-     * Health check - always healthy for local store.
+     * Health check — a real probe, not a constant: reports the actual active row
+     * count and turns DB access errors into status "error" instead of "healthy".
      */
     health(): Promise<{
         status: string;
@@ -256,7 +293,15 @@ export declare class LocalMemoryProvider implements MemoryProvider {
      */
     count(userId: string): number;
     /**
-     * Reset all memories for a user.
+     * Reset ALL long-term memory state for a user: every SQLite table (memories,
+     * observations, proposals, claims, conflicts, attachments index, profile KV),
+     * the attachment files on disk, and the task-distillation working stores
+     * (candidate prompts are stored in clear text — they are memory-domain data
+     * and must not survive a "clear my memory"). promotion-proposals.json is
+     * deliberately KEPT: it is the audit trail of the user's own promote/demote
+     * decisions and the demote map for already-created skills.
+     *
+     * Returns the number of memory rows removed (wire-compat with the old shape).
      */
     resetUser(userId: string): Promise<number>;
     /**

package/dist/types/skills/memory/local-store-records.d.ts

@@ -38,6 +38,9 @@ export interface MemoryInsertInput {
     eventDate?: string;
     tags?: string[];
     embedding?: Float32Array;
+    /** Provenance of `embedding` (model id). Vectors from different models are not
+     * comparable; search skips rows whose model/dims mismatch the query's. */
+    embeddingModel?: string;
 }
 export interface MemoryUpdateInput {
     text?: string;
@@ -47,6 +50,8 @@ export interface MemoryUpdateInput {
     eventDate?: string;
     tags?: string[];
     embedding?: Float32Array | null;
+    /** Provenance of the replacement embedding (see MemoryInsertInput). */
+    embeddingModel?: string;
 }
 export interface MemorySearchHit {
     id: string;
@@ -97,7 +102,7 @@ export interface MemoryAtlasResult {
 }
 export type MemorySourceKind = "manual" | "explicit" | "document" | "image" | "video" | "auto" | "turn" | "dream" | "agent" | "feedback";
 export type MemoryClaimStatus = "active" | "superseded" | "conflicted" | "archived" | "pending_confirmation";
-export type MemoryProposalStatus = "pending" | "accepted" | "merged" | "conflicted" | "rejected";
+export type MemoryProposalStatus = "pending" | "accepted" | "merged" | "conflicted" | "rejected" | "expired";
 export interface MemoryObservationInput {
     userId: string;
     text: string;