qlogicagent 2.19.6 → 2.19.8

package/dist/types/cli/stdio-agent-session-bootstrap.d.ts

@@ -42,7 +42,6 @@ export interface StdioAgentSessionBootstrapDeps {
     mediaPersistence: MediaPersistence;
     toolCatalog: ToolCatalog;
     runtimeSession: {
-        mcpManager: McpManager | null;
         permissionUnregister: (() => void) | null;
         fileWatcher: FileWatcher | null;
         getPluginSkills(): ReturnType<PluginLoader["getPluginSkills"]>;
@@ -56,8 +55,12 @@ export interface StdioAgentSessionBootstrapDeps {
             ruleEngine: PermissionRuleEnginePort;
         }): void;
     };
+    currentMcpManager: McpManager | null;
+    currentMcpReady: Promise<void>;
+    currentMcpConfigKey: string;
     setMcpManager(manager: McpManager | null): void;
     setMcpReady(ready: Promise<void>): void;
+    setMcpConfigKey(configKey: string): void;
     setPluginLoader(loader: PluginLoader): void;
     setFileWatcher(watcher: FileWatcher | null): void;
     getAcpPermissionSession(): {

package/dist/types/cli/stdio-server.d.ts

@@ -50,6 +50,8 @@ export declare class StdioServer {
     private transport;
     private readonly runtimeServices;
     private readonly runtimeSession;
+    /** Canonical ACP session captured for the full async turn; never inferred from a mutable pointer. */
+    private readonly sessionScope;
     /**
      * DERIVED resolved-agent cache (Agent + LLM client snapshot). The invalidation
      * invariant (full wipe on registry change vs forget-agent on session dispose)
@@ -107,6 +109,8 @@ export declare class StdioServer {
     private get currentBaseUrl();
     get currentSessionId(): string;
     set currentSessionId(v: string);
+    private activeScopedSessionId;
+    runInSessionScope<T>(sessionId: string, action: () => Promise<T>): Promise<T>;
     get currentTurnId(): string;
     set currentTurnId(v: string);
     /**
@@ -222,7 +226,7 @@ export declare class StdioServer {
     private _taskDistillation;
     get taskDistillation(): TaskDistillationCoordinator;
     ensureTaskDistillation(): TaskDistillationCoordinator;
-    resolveAgent(config: TurnConfig): Agent | null;
+    resolveAgent(config: TurnConfig, routedProjectRoot?: string): Agent | null;
     private invalidateResolvedLlmCache;
     createDreamHandlerHost(): import("./handlers/dream-handler.js").DreamHandlerHost;
     private createAcpExtendedHandlerHost;
@@ -254,6 +258,7 @@ export declare class StdioServer {
     enableIdleDream(minutes?: number): void;
     cancelIdleDreamTimer(): void;
     disposeSessionRuntime(): void;
+    disposeSessionMcp(sessionId: string): Promise<void>;
     /**
      * Initialize the ACP server alongside the legacy protocol.
      * Called once when the host is an ACP-compliant client.

package/dist/types/cli/tool-bootstrap-core-registration.d.ts

@@ -22,6 +22,7 @@ export interface LocalCoreToolRegistrationContext {
     getCwd(): string;
     activeProjectRoot(): string;
     resolveSandboxConfig(): SandboxConfig | undefined;
+    runtimePathEntries(): Promise<string[]>;
     isGroupSecurityMode?(): boolean;
     pathService?: PathService;
     log?: {

package/dist/types/cli/tool-registry-adapter.d.ts

@@ -1,4 +1,12 @@
-import { type ToolRegistry } from "../skills/tools.js";
+import { ToolRegistry } from "../skills/tools.js";
 import type { ToolCatalog } from "../runtime/ports/index.js";
 export type { ToolRegistry };
 export declare function createToolCatalogFromRegistry(registry?: ToolRegistry): ToolCatalog;
+/**
+ * Creates an empty catalog behind the legacy registry adapter boundary.
+ *
+ * Runtime/session owners must not depend on the legacy registry implementation merely to obtain
+ * isolated storage. Keeping construction here makes ToolCatalog the only contract visible above
+ * this adapter and leaves the registry removable in a later cleanup.
+ */
+export declare function createIsolatedToolCatalog(): ToolCatalog;

package/dist/types/cli/windows-authenticode.d.ts

@@ -0,0 +1,18 @@
+export type AuthenticodeExecFile = (file: string, args: string[], options: {
+    encoding: "utf8";
+    timeout: number;
+    maxBuffer: number;
+    windowsHide: boolean;
+}, callback: (error: Error | null, stdout: string, stderr: string) => void) => unknown;
+export interface AuthenticodeFile {
+    absolutePath: string;
+    relativePath: string;
+}
+export interface VerifyAuthenticodeInput {
+    files: AuthenticodeFile[];
+    execFileFn?: AuthenticodeExecFile;
+    platform?: string;
+    arch?: string;
+}
+export declare function assertIndustrialRuntimePlatform(platform?: string, arch?: string): void;
+export declare function verifyWindowsAuthenticodeFiles(input: VerifyAuthenticodeInput): Promise<void>;

package/dist/types/host-contract/index.d.ts

@@ -11,7 +11,9 @@
  * 标注 [S1 补定] 的辅助类型是 freeze 引用但未给定义的最小结构,属 S1 评审点,
  * 其字段以 freeze 正文/recon 注释为据;实现 lane 负责与现状 store 形状做映射。
  */
+import { type ModelPurpose } from "@xiaozhiclaw/model-access";
 import type { NativeTranscript } from "../host-session-collection-contract.js";
+export { MODEL_PURPOSES, type ModelPurpose } from "@xiaozhiclaw/model-access";
 export type { HostSessionCollectionDelta, HostSessionCollectionScope, HostSessionCollectionSnapshot, HostSessionLifecycle, HostSessionProviderDiagnostic, HostSessionSummary, HostSessionTitleSource, NativeTranscript, NativeTranscriptMessage, } from "../host-session-collection-contract.js";
 export { isHostSessionCollectionDelta, isHostSessionCollectionSnapshot, isNativeTranscript, } from "../host-session-collection-contract.js";
 export * from "./provider-profile.js";
@@ -21,12 +23,6 @@ export type AgentId = string;
 export type ProjectId = string;
 /** 会话稳定身份(创建即恒定,session-identity-alignment-spec)。 */
 export type CanonicalSessionId = string;
-/**
- * Gateway-resolved model purposes. This is the single vocabulary shared by
- * profile materialization and the agent-side model registry.
- */
-export declare const MODEL_PURPOSES: readonly ["textGeneration", "smallModel", "stt", "tts", "imageGeneration", "imageUnderstanding", "videoGeneration", "videoUnderstanding", "threeDGeneration", "embedding", "voiceClone", "musicGeneration", "realtimeAudio", "realtimeVideo"];
-export type ModelPurpose = (typeof MODEL_PURPOSES)[number];
 /** 能力实例种类。 */
 export type MemberKind = "chat" | "product-leader" | "product-worker" | "goal-leader" | "solo-racer" | "workflow-node";
 /**

package/dist/types/host-session-collection-contract.d.ts

@@ -7,6 +7,7 @@
 import type { AgentId, CanonicalSessionId, NativeSessionRef, ProjectId } from "./host-contract/index.js";
 export type HostSessionTitleSource = "prompt" | "generated" | "user" | "native" | "repaired";
 export type HostSessionLifecycle = "active" | "archived" | "source-missing" | "resume-unavailable";
+export type HostSessionCommand = "host.setPinned" | "host.rename" | "host.setArchived" | "host.deleteRecord";
 export type HostSessionCollectionScope = {
     kind: "project";
     projectId: ProjectId;
@@ -23,6 +24,8 @@ export interface HostSessionSummary {
     titleSource?: HostSessionTitleSource;
     lastActiveAt: string;
     lifecycle: HostSessionLifecycle;
+    /** Host-authorized mutation surface. Renderer commands are a projection of this list. */
+    availableCommands: HostSessionCommand[];
     nativeRef?: NativeSessionRef;
 }
 export interface HostSessionProviderDiagnostic {

package/dist/types/protocol/wire/acp-protocol.d.ts

@@ -144,7 +144,8 @@ export interface AcpSessionMeta {
     /** Skills the user explicitly pinned for this turn (scope:name or name). The turn pipeline
      *  force-loads each one's SKILL.md, identically to the `skill_view` tool (cc-parity). */
     activeSkills?: string[];
-    /** Session-scoped MCP servers normalized for the turn bootstrap. */
+    /** Internal materialization of the standard session/new|load `mcpServers` field.
+     *  Hosts MUST NOT send this through `_meta`. */
     mcpServers?: Record<string, unknown>;
 }
 export interface AcpSessionNewParams {
@@ -168,7 +169,7 @@ export interface AcpSessionNewParams {
     resumeSessionId?: string;
     forkSession?: boolean;
     /** Per-session context supplement (no standard ACP home). Inherited by every session/prompt. */
-    _meta?: AcpSessionMeta;
+    _meta?: Omit<AcpSessionMeta, "mcpServers">;
 }
 export interface AcpSessionLoadParams {
     sessionId: string;
@@ -177,7 +178,7 @@ export interface AcpSessionLoadParams {
     /** MCP servers re-injected by the host when resuming the session. */
     mcpServers?: AcpSessionNewParams["mcpServers"];
     /** Per-session context supplement restored by the host. */
-    _meta?: AcpSessionMeta;
+    _meta?: Omit<AcpSessionMeta, "mcpServers">;
 }
 /** A selectable permission mode advertised to the host (standard ACP). */
 export interface AcpMode {
@@ -199,8 +200,8 @@ export interface AcpSessionPromptParams {
     sessionId: string;
     /** User prompt content blocks (standard ACP field). */
     prompt: AcpContentBlock[];
-    /** Per-turn context overrides (permissions/reasoning/mcpServers/...), merged over session _meta. */
-    _meta?: AcpSessionMeta;
+    /** Per-turn context overrides (permissions/reasoning/...), merged over session _meta. */
+    _meta?: Omit<AcpSessionMeta, "mcpServers">;
 }
 export interface AcpSessionPromptResult {
     /** Stop reason (required by ACP standard). */

package/dist/types/runtime/community/community-consent-client.d.ts

@@ -1,11 +1,14 @@
 import type { ConfigPort } from "../ports/index.js";
 export interface CommunityRuntimeResolution {
     id: string;
+    platform: string;
     version: string;
     downloadUrl: string;
     /** sha256 hex digest — verified client-side before placing the binary. */
     checksum: string;
     sizeBytes: number;
+    format: "executable" | "zip" | "tar.gz";
+    entrypoint?: string;
 }
 export type CommunityInstallRiskTier = "R0" | "R1" | "R2" | "R3";
 export type CommunityInstallSourceTier = "official" | "community";

package/dist/types/runtime/community/ranged-download.d.ts

@@ -12,4 +12,10 @@ export interface RangedDownloadTarget {
     sizeBytes: number;
     checksum: string;
 }
+/**
+ * Stream a checksum-verified package directly into a caller-owned exclusive
+ * staging path. Industrial ZIPs use this path so neither the response nor the
+ * completed archive is materialized as a second full-size Buffer.
+ */
+export declare function downloadVerifiedToFile(fetchFn: typeof fetch, target: RangedDownloadTarget, label: string, destination: string, timeoutMs?: number): Promise<string>;
 export declare function rangedDownloadVerified(fetchFn: typeof fetch, target: RangedDownloadTarget, label: string): Promise<Buffer>;

package/dist/types/runtime/infra/industrial-runtime-session-server.d.ts

@@ -0,0 +1,15 @@
+export interface IndustrialRuntimeChildEnv {
+    XIAOZHICLAW_RUNTIME_SESSION_URL: string;
+    XIAOZHICLAW_RUNTIME_SESSION_BEARER: string;
+}
+type ProbeSession = (signal: AbortSignal) => Promise<Response>;
+export interface IndustrialRuntimeSessionServerForTest {
+    childEnv: IndustrialRuntimeChildEnv;
+    stop(): Promise<void>;
+}
+export declare function industrialRuntimeSessionChildEnv(): Promise<IndustrialRuntimeChildEnv | undefined>;
+export declare function stopIndustrialRuntimeSessionServer(): Promise<void>;
+export declare function __createIndustrialRuntimeSessionServerForTest(options: {
+    probeSession: ProbeSession;
+}): Promise<IndustrialRuntimeSessionServerForTest>;
+export {};

package/dist/types/runtime/infra/llmrouter-access-token.d.ts

@@ -0,0 +1,13 @@
+export type LlmrouterFetch = (input: string | URL | Request, init?: RequestInit) => Promise<Response>;
+export interface LlmrouterFetchOptions {
+    fetchFn?: LlmrouterFetch;
+    init?: RequestInit;
+    signal?: AbortSignal;
+}
+export interface LlmrouterFetchResult {
+    response: Response;
+    refreshedToken: boolean;
+}
+export declare function isJwtExpiredOrNearExpiry(token: string | undefined, skewSeconds?: number): boolean;
+export declare function refreshLlmrouterAccessToken(baseUrl: string, options?: Pick<LlmrouterFetchOptions, "fetchFn" | "signal">): Promise<boolean>;
+export declare function fetchWithLlmrouterAccess(path: string, options?: LlmrouterFetchOptions): Promise<LlmrouterFetchResult>;

package/dist/types/skills/tools/exec-tool.d.ts

@@ -61,7 +61,7 @@ export interface ExecProgress {
     taskId?: string;
 }
 /**
- * Minimal host dependency — ONLY for permission checking.
+ * Minimal host dependencies for permission checks and late-bound authority reads.
  * The tool owns everything else (spawn, lifecycle, output).
  *
  * This replaces the old ExecToolDeps which required the host to
@@ -80,6 +80,8 @@ export interface ExecToolHost {
      * Returns undefined to disable the OS sandbox (degrade to prompt-only).
      */
     resolveSandbox?(): SandboxConfig | undefined;
+    /** Resolve active private runtime PATH entries at command execution time. */
+    resolveRuntimePathEntries?(): Promise<string[]>;
     /**
      * Interpret a non-zero exit code.
      * E.g. 127 → "command not found", 137 → "killed by SIGKILL".
@@ -111,7 +113,7 @@ export declare const ASSISTANT_BLOCKING_BUDGET_MS = 15000;
 /**
  * Create the exec tool with direct process ownership (cc architecture).
  *
- * @param host Minimal host interface — only permission checking.
+ * @param host Minimal host interface for permission checks and authority reads.
  *             Pass `{}` for unrestricted mode (tests only).
  */
 export declare function createExecTool(host?: ExecToolHost): PortableTool<ExecToolParams>;

package/dist/types/skills/tools/shell/shell-exec.d.ts

@@ -21,6 +21,8 @@ export interface ExecOptions {
     cwd?: string;
     /** Sandbox context injected by the host; absent = no OS sandbox (degrade). */
     sandbox?: SandboxConfig;
+    /** Late-bound CLI authority for active private runtime PATH entries. */
+    resolveRuntimePathEntries?: () => Promise<string[]>;
 }
 /**
  * Set the shell provider for this session.
@@ -49,6 +51,7 @@ export declare function getActiveShellInfo(): {
     psEdition?: "5.1" | "7+";
     isGitBashOnWindows?: boolean;
 } | undefined;
+export declare function buildShellExecEnvironment(envOverrides: NodeJS.ProcessEnv, resolveRuntimePathEntries?: () => Promise<string[]>): Promise<NodeJS.ProcessEnv>;
 /**
  * Execute a shell command using the configured provider.
  * Creates a new child process for each invocation.

package/dist/types/skills/tools/shell/subprocess-env.d.ts

@@ -3,4 +3,4 @@
  * The allowlist includes vars known to be safe for child shells
  * (PATH, HOME, LANG, TERM, etc.).
  */
-export declare function subprocessEnv(): NodeJS.ProcessEnv;
+export declare function subprocessEnv(source?: NodeJS.ProcessEnv): NodeJS.ProcessEnv;

package/dist/types/test-support/project-store-fixture.d.ts

@@ -0,0 +1,11 @@
+import type { HostProjectInfo, HostProjectType } from "../host-contract/index.js";
+export * from "../runtime/infra/project-store.js";
+export declare function resetProjectStore(): void;
+export declare function createProject(params: {
+    name: string;
+    workspaceDir: string;
+    type?: HostProjectType;
+    groupId?: string;
+    skipAutoSwitch?: boolean;
+}): HostProjectInfo;
+export declare function switchProject(projectId: string): HostProjectInfo | null;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "qlogicagent",
-  "version": "2.19.6",
+  "version": "2.19.8",
   "description": "XiaozhiClaw Agent CLI — subprocess architecture (JSON-RPC over stdio)",
   "type": "module",
   "main": "dist/index.js",
@@ -72,6 +72,9 @@
   "files": [
     "dist/"
   ],
+  "publishConfig": {
+    "access": "public"
+  },
   "typesVersions": {
     "*": {
       "protocol": [
@@ -157,6 +160,7 @@
   "dependencies": {
     "@agentclientprotocol/sdk": "^0.25.0",
     "@napi-rs/canvas": "0.1.100",
+    "@xiaozhiclaw/model-access": "file:vendor\\xiaozhiclaw-model-access-0.1.0.tgz",
     "@xiaozhiclaw/pet-core": "0.1.3",
     "@xiaozhiclaw/provider-core": "^0.1.26",
     "better-sqlite3": "^12.10.0",
@@ -166,11 +170,13 @@
     "mcporter": "^0.12.0",
     "nanoid": "^5.1.5",
     "pino": "^9.6.0",
-    "pino-pretty": "^13.0.0"
+    "pino-pretty": "^13.0.0",
+    "yauzl": "3.4.0"
   },
   "devDependencies": {
     "@types/better-sqlite3": "^7.6.13",
     "@types/node": "^22.15.0",
+    "@types/yauzl": "3.4.0",
     "esbuild": "^0.28.0",
     "javascript-obfuscator": "^5.4.3",
     "oxlint": "1.67.0",