qlogicagent 2.19.7 → 2.19.9

package/dist/types/cli/permission-approval-bridge.d.ts

@@ -9,7 +9,6 @@ export interface PermissionApprovalBridgeDeps {
         }>;
     } | undefined;
     sendNotification<M extends NotificationMethod>(method: M, params: NotificationMethodMap[M]): void;
-    isPetActive(): boolean;
 }
 export declare function requestPermissionApproval(request: ApprovalRequest, deps: PermissionApprovalBridgeDeps): Promise<ApprovalResponse>;
 export declare function createApprovalResponseFromAcpOption(request: ApprovalRequest, optionId: string | undefined): ApprovalResponse;

package/dist/types/cli/permission-bootstrap.d.ts

@@ -30,7 +30,6 @@ export interface PermissionBootstrapDeps {
         }>;
     } | undefined;
     sendNotification<M extends NotificationMethod>(method: M, params: NotificationMethodMap[M]): void;
-    isPetActive(): boolean;
     resolveHostProfileClient?: () => HostProfileClient | undefined;
     currentUnregister?: (() => void) | null;
 }

package/dist/types/cli/resolved-agent-cache.d.ts

@@ -28,6 +28,11 @@ export interface ResolvedAgentSnapshot {
     baseUrl: string;
     configKey: string;
 }
+/**
+ * ToolInvoker captures a session overlay at Agent construction, so equal provider/model settings
+ * are not sufficient for reuse across canonical sessions in one pooled process.
+ */
+export declare function buildSessionAgentConfigKey(sessionId: string, resolvedConfigKey: string, mcpConfigKey?: string): string;
 export declare class ResolvedAgentCache {
     agent: Agent | null;
     transport: LLMTransport | null;
@@ -42,6 +47,8 @@ export declare class ResolvedAgentCache {
     store(snapshot: ResolvedAgentSnapshot): void;
     /** Drop only the Agent + config key — force re-resolve, keep the last snapshot. */
     forgetAgent(): void;
+    /** Drop the derived Agent only when it belongs to the retired canonical session. */
+    forgetSession(sessionId: string): void;
     /** Wipe ALL derived state — the resolved client is stale (registry change). */
     invalidate(): void;
 }

package/dist/types/cli/runtime-dependency-catalog.d.ts

@@ -1,3 +1,4 @@
+import { type VerifyAuthenticodeInput } from "./windows-authenticode.js";
 /**
  * Vetted runtime-dependency catalog for community skills.
  *
@@ -26,13 +27,13 @@ export interface RuntimeDependencySpec {
      */
     quick: boolean;
     /** Honest size estimate surfaced in the consent card. */
-    estSizeMB: number;
-    /** Single-file binary mirrored to our OSS, resolved per-platform via the Hub. */
-    hubBinary: HubBinaryInstall;
+    estSizeMB?: number;
+    install: RuntimeInstallMode;
     installTimeoutMs: number;
     docsUrl?: string;
 }
-export interface HubBinaryInstall {
+export interface UserBinaryInstall {
+    kind: "user-binary";
     /** Resolve id for the Hub (GET /api/v15/runtime/:id/resolve?platform=…). */
     resourceId: string;
     /** Absolute path the per-platform binary is written to (matches upstream layout). */
@@ -41,7 +42,17 @@ export interface HubBinaryInstall {
     pathDir(): string;
     /** chmod 0o755 after writing (POSIX). */
     posixExecutable: boolean;
+    /** Verified release archives expose exactly one executable entry per host family. */
+    archiveEntries?: {
+        win32: string;
+        default: string;
+    };
+}
+export interface AstraClawPrivateZipInstall {
+    kind: "astraclaw-private-zip";
+    runtimeId: string;
 }
+export type RuntimeInstallMode = UserBinaryInstall | AstraClawPrivateZipInstall;
 export declare const RUNTIME_DEPENDENCIES: Record<string, RuntimeDependencySpec>;
 export interface RuntimeDependencyStatus {
     id: string;
@@ -58,20 +69,34 @@ export interface RuntimeDependencyStatus {
 }
 /** Resolved download for a hub-binary runtime (signed URL + integrity metadata). */
 export interface ResolvedRuntimeBinary {
+    id: string;
+    platform: string;
     version: string;
     downloadUrl: string;
     /** sha256 hex digest — the integrity anchor verified before placing the file. */
     checksum: string;
     sizeBytes: number;
+    format: "executable" | "zip" | "tar.gz";
+    entrypoint?: string;
 }
+export type RuntimeExecFile = (file: string, args: string[], options: {
+    timeout: number;
+    windowsHide: boolean;
+    encoding: "utf8";
+}, callback: (error: Error | null, stdout: string, stderr: string) => void) => unknown;
 export interface RuntimeInstallDeps {
     /** Resolve a hub-binary runtime via the Hub (community client). */
     resolveBinary(id: string, platform: string): Promise<ResolvedRuntimeBinary>;
     /** Injectable for tests. */
     fetchFn?: typeof fetch;
+    hostPlatform?: string;
+    hostArch?: string;
+    rootDir?: string;
+    verifyAuthenticodeFiles?: (input: VerifyAuthenticodeInput) => Promise<void>;
+    execFileFn?: RuntimeExecFile;
 }
 /** Map this host to the officecli asset platform key (`<os>-<arch>`). */
-export declare function runtimePlatformKey(): string;
+export declare function runtimePlatformKey(platform?: string, architecture?: string): string;
 export declare function probeRuntimeDependency(id: string): Promise<RuntimeDependencyStatus>;
 export interface RuntimeInstallResult {
     id: string;
@@ -80,3 +105,8 @@ export interface RuntimeInstallResult {
     binPath?: string;
 }
 export declare function installRuntimeDependency(id: string, deps: RuntimeInstallDeps): Promise<RuntimeInstallResult>;
+/**
+ * Read only the allowlisted executable from a checksum-verified release archive. `tar -xOf`
+ * streams the named entry without unpacking sibling files or trusting archive paths.
+ */
+export declare function extractRuntimeArchive(archiveBytes: Buffer, executableEntry: string): Buffer;

package/dist/types/cli/stdio-acp-request-host.d.ts

@@ -8,14 +8,13 @@ import type { CliAcpRequestHandlerHost } from "./cli-acp-request-handler.js";
  * (`this: any`), so members it touches must be forwarded here explicitly;
  * see TURN_PIPELINE_HOST_MEMBERS for the regression-tested list.
  */
-export type StdioAcpRequestHostSource = Pick<CliAcpRequestHandlerHost, "activeTurn" | "acpSessionMeta" | "acpSessionMetaBySession" | "currentHooks" | "currentSessionId" | "currentTurnId" | "memoryPrefetchState" | "permissionChecker" | "sessionHistory" | "sessionLlmConfigBySession" | "materializedSessionProfiles" | "sessionState" | "cancelIdleDreamTimer" | "disposeSessionRuntime" | "enableIdleDream" | "ensureDefaultProject" | "initializeHostProjectAuthority" | "ensureModelRegistryHydrated" | "getActiveProjectRoot" | "log" | "sendNotification" | "setActiveWorkdir"> & {
+export type StdioAcpRequestHostSource = Pick<CliAcpRequestHandlerHost, "activeTurn" | "acpSessionMeta" | "acpSessionMetaBySession" | "currentHooks" | "currentSessionId" | "currentTurnId" | "memoryPrefetchState" | "permissionChecker" | "sessionHistory" | "sessionLlmConfigBySession" | "materializedSessionProfiles" | "sessionState" | "cancelIdleDreamTimer" | "disposeSessionRuntime" | "disposeSessionMcp" | "runInSessionScope" | "enableIdleDream" | "ensureDefaultProject" | "initializeHostProjectAuthority" | "ensureModelRegistryHydrated" | "getActiveProjectRoot" | "log" | "sendNotification" | "setActiveWorkdir"> & {
     currentModel: string | undefined;
     lastAssistantMessageForExtract: string | undefined;
     lastUserMessageForAutoExtract: string | undefined;
     mcpReady: Promise<void>;
     memdir: unknown;
     pendingAskUser: unknown;
-    petRuntime: unknown;
     projectMemoryStoreFactory: unknown;
     toolCatalog: unknown;
     taskDistillation: unknown;
@@ -29,11 +28,11 @@ export type StdioAcpRequestHostSource = Pick<CliAcpRequestHandlerHost, "activeTu
     } | undefined;
     getHostRequestClient(): Pick<HostRequestClient, "request"> | undefined;
     drainPendingTaskNotifications(): string[];
-    resolveAgent(config: unknown): unknown;
+    resolveAgent(config: unknown, projectRoot?: string): unknown;
     resolveClientForPurpose(purpose: unknown): unknown;
     sendResponse(id: string | number, result?: unknown, error?: unknown): void;
 };
 /** Host members the shared turn pipeline reads/writes — keep in sync with
  * `grep -oE "this\.[a-zA-Z]+" src/cli/handlers/turn-handler.ts | sort -u`. */
-export declare const TURN_PIPELINE_HOST_MEMBERS: readonly ["activeTurn", "configureTurnMedia", "currentHooks", "currentModel", "currentTurnId", "drainPendingTaskNotifications", "getAcpPermissionSession", "getHostRequestClient", "getActiveProjectRoot", "lastAssistantMessageForExtract", "lastUserMessageForAutoExtract", "log", "mcpReady", "memdir", "pendingAskUser", "permissionChecker", "petRuntime", "projectMemoryStoreFactory", "resolveAgent", "resolveClientForPurpose", "sendNotification", "sendResponse", "sessionHistory", "sessionState", "setActiveWorkdir", "taskDistillation", "toolCatalog"];
+export declare const TURN_PIPELINE_HOST_MEMBERS: readonly ["activeTurn", "configureTurnMedia", "currentHooks", "currentModel", "currentTurnId", "drainPendingTaskNotifications", "getAcpPermissionSession", "getHostRequestClient", "getActiveProjectRoot", "lastAssistantMessageForExtract", "lastUserMessageForAutoExtract", "log", "mcpReady", "memdir", "pendingAskUser", "permissionChecker", "projectMemoryStoreFactory", "resolveAgent", "resolveClientForPurpose", "sendNotification", "sendResponse", "sessionHistory", "sessionState", "setActiveWorkdir", "taskDistillation", "toolCatalog"];
 export declare function createStdioAcpRequestHandlerHost(host: StdioAcpRequestHostSource): CliAcpRequestHandlerHost;

package/dist/types/cli/stdio-agent-session-bootstrap.d.ts

@@ -42,7 +42,6 @@ export interface StdioAgentSessionBootstrapDeps {
     mediaPersistence: MediaPersistence;
     toolCatalog: ToolCatalog;
     runtimeSession: {
-        mcpManager: McpManager | null;
         permissionUnregister: (() => void) | null;
         fileWatcher: FileWatcher | null;
         getPluginSkills(): ReturnType<PluginLoader["getPluginSkills"]>;
@@ -56,8 +55,12 @@ export interface StdioAgentSessionBootstrapDeps {
             ruleEngine: PermissionRuleEnginePort;
         }): void;
     };
+    currentMcpManager: McpManager | null;
+    currentMcpReady: Promise<void>;
+    currentMcpConfigKey: string;
     setMcpManager(manager: McpManager | null): void;
     setMcpReady(ready: Promise<void>): void;
+    setMcpConfigKey(configKey: string): void;
     setPluginLoader(loader: PluginLoader): void;
     setFileWatcher(watcher: FileWatcher | null): void;
     getAcpPermissionSession(): {
@@ -66,7 +69,6 @@ export interface StdioAgentSessionBootstrapDeps {
             optionId?: string;
         }>;
     } | undefined;
-    isPetActive(): boolean;
     coreToolHost: CliCoreToolHostDeps;
     log(message: string): void;
     sendNotification<M extends NotificationMethod>(method: M, params: NotificationMethodMap[M]): void;

package/dist/types/cli/stdio-runtime-bootstrap.d.ts

@@ -4,7 +4,6 @@ import type { LLMTransport } from "./provider-core-facade.js";
 import type { MemoryHostRequestAccess } from "./memory-coordinator.js";
 import { type StdioRuntimeServices } from "./stdio-runtime-services.js";
 import type { HostProfileClient } from "../transport/host-profile-client.js";
-import type { HostPetClient } from "../transport/host-pet-client.js";
 export interface StdioRuntimeBootstrapDeps {
     verbose: boolean;
     getActiveProjectRoot(): string;
@@ -21,6 +20,5 @@ export interface StdioRuntimeBootstrapDeps {
     resolveMemoryHostRequestAccess?(): MemoryHostRequestAccess | null;
     /** Lazy session-bound host profile facade; unavailable/non-ACP must fail loud at first web invoke. */
     resolveHostProfileClient?(): HostProfileClient | undefined;
-    resolveHostPetClient?(): HostPetClient | undefined;
 }
 export declare function bootstrapStdioRuntimeServices(deps: StdioRuntimeBootstrapDeps): StdioRuntimeServices;

package/dist/types/cli/stdio-runtime-services.d.ts

@@ -1,26 +1,15 @@
-import type { NotificationMethod, NotificationMethodMap } from "../protocol/notifications.js";
 import type { MemoryDreamRuntimeProvider, MemoryHandlerProvider, PathService, ToolBootstrap, ToolCatalog } from "../runtime/ports/index.js";
 import { MediaPersistence } from "../runtime/infra/media-persistence.js";
-import { MediaClient, ProviderRegistry, type LLMTransport } from "./provider-core-facade.js";
+import { MediaClient, ProviderRegistry } from "./provider-core-facade.js";
 import { type MemoryHostRequestAccess, type MemoryProviderState } from "./memory-coordinator.js";
-import { type PetRuntime } from "./pet-runtime.js";
-import type { HostPetClient } from "../transport/host-pet-client.js";
 import { type TurnMediaSetupHost } from "./turn-media-setup.js";
 export interface StdioRuntimeServicesDeps {
     getActiveProjectRoot(): string;
-    getCurrentSessionId?(): string | undefined;
-    resolveClientForPurpose(purpose: import("../runtime/infra/model-registry.js").ModelPurpose): {
-        transport: LLMTransport;
-        apiKey: string;
-        model: string;
-    } | null;
-    sendNotification<M extends NotificationMethod>(method: M, params: NotificationMethodMap[M]): void;
     /**
      * B3(X7)host-state 接入面(AcpServer;initialize 前/非 ACP 宿主 = null)。
      * memory provider 工厂据此在创建时刻按 memory service 一次性选型 HostMemoryProvider。
      */
     resolveMemoryHostRequestAccess?(): MemoryHostRequestAccess | null;
-    resolveHostPetClient?(): HostPetClient | undefined;
 }
 export interface StdioRuntimeServices {
     providerRegistry: ProviderRegistry;
@@ -29,7 +18,6 @@ export interface StdioRuntimeServices {
     pathService: PathService;
     toolCatalog: ToolCatalog;
     toolBootstrap: ToolBootstrap;
-    petRuntime: PetRuntime;
     configureTurnMedia(params: {
         host: Omit<TurnMediaSetupHost, "mediaClient">;
         config?: Record<string, unknown>;

package/dist/types/cli/stdio-server.d.ts

@@ -23,10 +23,8 @@ import type { NotificationMethod, NotificationMethodMap } from "../protocol/noti
 import { AgentRuntimeSessionState } from "./agent-runtime-session-state.js";
 import { type MultiAgentHandlerHost } from "./multi-agent-handler-host.js";
 import { SessionHistoryCoordinator } from "./session-history-coordinator.js";
-import { PetConfirmCoordinator } from "./pet-confirm-coordinator.js";
 import type { MemoryDreamRuntimeProvider, MemoryHandlerProvider, PermissionMode, ProjectMemoryStore } from "../runtime/ports/index.js";
 import { HostProfileClient } from "../transport/host-profile-client.js";
-import { HostPetClient } from "../transport/host-pet-client.js";
 import { HostCapabilityClient } from "../transport/host-capability-client.js";
 import { HostSessionClient } from "../transport/host-session-client.js";
 import { HostProjectClient } from "../transport/host-project-client.js";
@@ -50,6 +48,8 @@ export declare class StdioServer {
     private transport;
     private readonly runtimeServices;
     private readonly runtimeSession;
+    /** Canonical ACP session captured for the full async turn; never inferred from a mutable pointer. */
+    private readonly sessionScope;
     /**
      * DERIVED resolved-agent cache (Agent + LLM client snapshot). The invalidation
      * invariant (full wipe on registry change vs forget-agent on session dispose)
@@ -88,7 +88,6 @@ export declare class StdioServer {
     sessionHistory: SessionHistoryCoordinator;
     private idleDreamCoordinator;
     private readonly sessionRuntime;
-    readonly petConfirmCoordinator: PetConfirmCoordinator;
     private modelRegistryHydration;
     private get registry();
     get mediaClient(): import("@xiaozhiclaw/provider-core/media-client").MediaClient;
@@ -97,7 +96,6 @@ export declare class StdioServer {
     get toolCatalog(): import("../runtime/ports/tool-contracts.js").ToolCatalog;
     /** Turn pipeline awaits this before tool dispatch (MCP servers connected). */
     get mcpReady(): Promise<void>;
-    get petRuntime(): import("./pet-runtime.js").PetRuntime;
     private get agent();
     /** Cached LLM transport for sub-agent forks (dream). */
     get currentTransport(): LLMTransport | null;
@@ -107,6 +105,8 @@ export declare class StdioServer {
     private get currentBaseUrl();
     get currentSessionId(): string;
     set currentSessionId(v: string);
+    private activeScopedSessionId;
+    runInSessionScope<T>(sessionId: string, action: () => Promise<T>): Promise<T>;
     get currentTurnId(): string;
     set currentTurnId(v: string);
     /**
@@ -128,7 +128,6 @@ export declare class StdioServer {
     /** D2 telemetry/feedback business facade; durable storage remains gateway-only. */
     getHostFeedbackClient(): HostFeedbackClient | undefined;
     getHostProjectClient(): HostProjectClient | undefined;
-    getHostPetClient(): HostPetClient | undefined;
     initializeHostProjectAuthority(): Promise<void>;
     /**
      * Mid-turn guidance queue (运行中引导). Reset per turn by runTurnPipeline, pushed by
@@ -222,7 +221,7 @@ export declare class StdioServer {
     private _taskDistillation;
     get taskDistillation(): TaskDistillationCoordinator;
     ensureTaskDistillation(): TaskDistillationCoordinator;
-    resolveAgent(config: TurnConfig): Agent | null;
+    resolveAgent(config: TurnConfig, routedProjectRoot?: string): Agent | null;
     private invalidateResolvedLlmCache;
     createDreamHandlerHost(): import("./handlers/dream-handler.js").DreamHandlerHost;
     private createAcpExtendedHandlerHost;
@@ -254,6 +253,7 @@ export declare class StdioServer {
     enableIdleDream(minutes?: number): void;
     cancelIdleDreamTimer(): void;
     disposeSessionRuntime(): void;
+    disposeSessionMcp(sessionId: string): Promise<void>;
     /**
      * Initialize the ACP server alongside the legacy protocol.
      * Called once when the host is an ACP-compliant client.

package/dist/types/cli/tool-bootstrap-core-registration.d.ts

@@ -22,6 +22,7 @@ export interface LocalCoreToolRegistrationContext {
     getCwd(): string;
     activeProjectRoot(): string;
     resolveSandboxConfig(): SandboxConfig | undefined;
+    runtimePathEntries(): Promise<string[]>;
     isGroupSecurityMode?(): boolean;
     pathService?: PathService;
     log?: {

package/dist/types/cli/tool-registry-adapter.d.ts

@@ -1,4 +1,12 @@
-import { type ToolRegistry } from "../skills/tools.js";
+import { ToolRegistry } from "../skills/tools.js";
 import type { ToolCatalog } from "../runtime/ports/index.js";
 export type { ToolRegistry };
 export declare function createToolCatalogFromRegistry(registry?: ToolRegistry): ToolCatalog;
+/**
+ * Creates an empty catalog behind the legacy registry adapter boundary.
+ *
+ * Runtime/session owners must not depend on the legacy registry implementation merely to obtain
+ * isolated storage. Keeping construction here makes ToolCatalog the only contract visible above
+ * this adapter and leaves the registry removable in a later cleanup.
+ */
+export declare function createIsolatedToolCatalog(): ToolCatalog;

package/dist/types/cli/turn-media-setup.d.ts

@@ -11,6 +11,21 @@ export interface TurnMediaSetupHost {
     sendNotification(method: string, params: Record<string, unknown>): void;
 }
 export declare function deriveMediaProvidersFromBindings(registry: Pick<ModelRegistry, "getBinding">): TurnConfig["mediaProviders"];
+/**
+ * Derive per-turn media providers from a Host-pushed session profile's bindings. The Host materializes
+ * and pushes a FRESH profile every turn (session/set_config "profile") covering every purpose — media
+ * ones included (imageGeneration/tts/videoGeneration/musicGeneration/threeDGeneration/stt/voiceClone).
+ * Threading these into config.mediaProviders lets the fresh binding WIN over the once-hydrated in-process
+ * ModelRegistry default: configureTurnMedia merges config.mediaProviders OVER deriveMediaProvidersFromBindings,
+ * so a media purpose is no longer pinned to the registry snapshot until a process reload. Uses the same
+ * MEDIA_PURPOSES purpose→capability map as the registry path (single source of truth) and the same
+ * nativeModelId ?? model rule (profile bindings carry no nativeModelId today, so this resolves to model).
+ */
+export declare function deriveMediaProvidersFromProfileBindings(bindings: Record<string, {
+    provider?: string;
+    model?: string;
+    nativeModelId?: string;
+}>): TurnConfig["mediaProviders"];
 export declare function configureTurnMedia(params: {
     host: TurnMediaSetupHost;
     config?: Record<string, unknown>;

package/dist/types/cli/windows-authenticode.d.ts

@@ -0,0 +1,18 @@
+export type AuthenticodeExecFile = (file: string, args: string[], options: {
+    encoding: "utf8";
+    timeout: number;
+    maxBuffer: number;
+    windowsHide: boolean;
+}, callback: (error: Error | null, stdout: string, stderr: string) => void) => unknown;
+export interface AuthenticodeFile {
+    absolutePath: string;
+    relativePath: string;
+}
+export interface VerifyAuthenticodeInput {
+    files: AuthenticodeFile[];
+    execFileFn?: AuthenticodeExecFile;
+    platform?: string;
+    arch?: string;
+}
+export declare function assertIndustrialRuntimePlatform(platform?: string, arch?: string): void;
+export declare function verifyWindowsAuthenticodeFiles(input: VerifyAuthenticodeInput): Promise<void>;

package/dist/types/host-contract/index.d.ts

@@ -11,7 +11,9 @@
  * 标注 [S1 补定] 的辅助类型是 freeze 引用但未给定义的最小结构,属 S1 评审点,
  * 其字段以 freeze 正文/recon 注释为据;实现 lane 负责与现状 store 形状做映射。
  */
+import { type ModelPurpose } from "@xiaozhiclaw/model-access";
 import type { NativeTranscript } from "../host-session-collection-contract.js";
+export { MODEL_PURPOSES, type ModelPurpose } from "@xiaozhiclaw/model-access";
 export type { HostSessionCollectionDelta, HostSessionCollectionScope, HostSessionCollectionSnapshot, HostSessionLifecycle, HostSessionProviderDiagnostic, HostSessionSummary, HostSessionTitleSource, NativeTranscript, NativeTranscriptMessage, } from "../host-session-collection-contract.js";
 export { isHostSessionCollectionDelta, isHostSessionCollectionSnapshot, isNativeTranscript, } from "../host-session-collection-contract.js";
 export * from "./provider-profile.js";
@@ -21,12 +23,6 @@ export type AgentId = string;
 export type ProjectId = string;
 /** 会话稳定身份(创建即恒定,session-identity-alignment-spec)。 */
 export type CanonicalSessionId = string;
-/**
- * Gateway-resolved model purposes. This is the single vocabulary shared by
- * profile materialization and the agent-side model registry.
- */
-export declare const MODEL_PURPOSES: readonly ["textGeneration", "smallModel", "stt", "tts", "imageGeneration", "imageUnderstanding", "videoGeneration", "videoUnderstanding", "threeDGeneration", "embedding", "voiceClone", "musicGeneration", "realtimeAudio", "realtimeVideo"];
-export type ModelPurpose = (typeof MODEL_PURPOSES)[number];
 /** 能力实例种类。 */
 export type MemberKind = "chat" | "product-leader" | "product-worker" | "goal-leader" | "solo-racer" | "workflow-node";
 /**
@@ -1096,7 +1092,7 @@ export interface HostSkillInvocationResult {
 /** 单文件读取上限；host 在解码前按 bytes 检查。 */
 export declare const HOST_SKILL_FILE_MAX_BYTES: number;
 /** [X7-P] 单一 agent→host 一元请求通道的服务域。 */
-export type HostRequestService = "memory" | "projectMemory" | "profile" | "preview" | "capability" | "session" | "feedback" | "project" | "runState" | "pet" | "provider";
+export type HostRequestService = "memory" | "projectMemory" | "profile" | "preview" | "capability" | "session" | "feedback" | "project" | "runState" | "provider";
 /** Read-only Provider projection exposed by the Gateway Host to supervised qlogicagent compute. */
 export declare const HOST_PROVIDER_PROXY_METHODS: readonly ["list", "get", "diagnose"];
 export type HostProviderProxyMethod = typeof HOST_PROVIDER_PROXY_METHODS[number];
@@ -1440,22 +1436,6 @@ export type HostRunStateRequestParams = {
         sessionId: CanonicalSessionId;
     };
 };
-export declare const HOST_PET_PROXY_METHODS: readonly ["isActive", "getSoul", "awardXp", "journeyCatchUp"];
-export type HostPetProxyMethod = typeof HOST_PET_PROXY_METHODS[number];
-export type HostPetRequestParams = {
-    service: "pet";
-    method: "isActive" | "getSoul" | "journeyCatchUp";
-    params: {
-        sessionId: CanonicalSessionId;
-    };
-} | {
-    service: "pet";
-    method: "awardXp";
-    params: {
-        event: string;
-        sessionId: CanonicalSessionId;
-    };
-};
 /** Agent-originated profile store calls. UI/provider surfaces are intentionally excluded. */
 export declare const HOST_PROFILE_PROXY_METHODS: readonly ["getTunables", "updateTunable", "clearTunable", "appendDirectoryAllowRule"];
 export type HostProfileProxyMethod = typeof HOST_PROFILE_PROXY_METHODS[number];
@@ -1672,7 +1652,7 @@ export type HostPreviewRequestParams = {
  * [X7-P] 跨进程 HostRequest 判别联合。memory/profile/preview 共用 `x/host.request`，
  * service + method 二级分派；preview 的 method 与 payload 在类型层保持逐动作关联。
  */
-export type HostRequestParams = HostMemoryRequestParams | HostProjectMemoryRequestParams | HostProfileRequestParams | HostPreviewRequestParams | HostCapabilityRequestParams | HostSessionRequestParams | HostFeedbackRequestParams | HostProjectRequestParams | HostRunStateRequestParams | HostPetRequestParams | HostProviderRequestParams;
+export type HostRequestParams = HostMemoryRequestParams | HostProjectMemoryRequestParams | HostProfileRequestParams | HostPreviewRequestParams | HostCapabilityRequestParams | HostSessionRequestParams | HostFeedbackRequestParams | HostProjectRequestParams | HostRunStateRequestParams | HostProviderRequestParams;
 /** initialize 声明的真实已装配 host-request 服务；version 只接受冻结版本 1。 */
 export type HostRequestCapability = {
     version: 1;

package/dist/types/protocol/agent-contract.d.ts

@@ -1,12 +1,12 @@
 import type { NotificationMethodMap } from "./wire/notification-payloads.js";
-export declare const AGENT_CONTRACT_VERSION: 4;
+export declare const AGENT_CONTRACT_VERSION: 5;
 export declare const AGENT_EVENT_SCHEMA_VERSION: 1;
 export declare const AGENT_TERMINAL_STATES: readonly ["completed", "failed", "cancelled"];
 export type TerminalState = (typeof AGENT_TERMINAL_STATES)[number];
-export declare const AGENT_WS_EVENT_NAMES: readonly ["turn.start", "turn.delta", "turn.end", "turn.error", "turn.recovery", "turn.file_changes", "turn.tool_call", "turn.tool_result", "turn.tool_blocked", "turn.reasoning_delta", "turn.approval_request", "turn.skill_instruction", "turn.ask_user", "turn.media_result", "turn.media_progress", "turn.media_usage", "turn.media_capability_check", "turn.plan_update", "turn.suggestions", "turn.sidechain_started", "turn.subagent_started", "turn.subagent_delta", "turn.subagent_ended", "turn.sidechain_completed", "turn.task_updated", "turn.todos_updated", "turn.exec_progress", "turn.progress", "turn.tool_use_summary", "turn.tool_selection_policy", "turn.lifecycle", "turn.document_maintenance", "turn.artifact_contract", "turn.usage_update", "team.member.notification", "session.info", "session.recovery_pending", "memory.updated", "skills.updated", "turn.memory_recall", "turn.memory_written", "pet.soul_ready", "pet.reaction", "pet.growth", "pet.state", "pet.confirm", "pet.asset.updated", "system.activity", "workflow.created", "workflow.updated", "workflow.deleted", "workflow.runStarted", "workflow.runCompleted", "workflow.runFailed", "workflow.nodeStatus", "workflow.triggerDropped", "workflow.alert", "workflow.approvalRequested", "workflow.approvalTimedOut"];
+export declare const AGENT_WS_EVENT_NAMES: readonly ["turn.start", "turn.delta", "turn.end", "turn.error", "turn.recovery", "turn.file_changes", "turn.tool_call", "turn.tool_result", "turn.tool_blocked", "turn.reasoning_delta", "turn.approval_request", "turn.skill_instruction", "turn.ask_user", "turn.media_result", "turn.media_progress", "turn.media_usage", "turn.media_capability_check", "turn.plan_update", "turn.suggestions", "turn.sidechain_started", "turn.subagent_started", "turn.subagent_delta", "turn.subagent_ended", "turn.sidechain_completed", "turn.task_updated", "turn.todos_updated", "turn.exec_progress", "turn.progress", "turn.tool_use_summary", "turn.tool_selection_policy", "turn.lifecycle", "turn.document_maintenance", "turn.artifact_contract", "turn.usage_update", "team.member.notification", "session.info", "session.recovery_pending", "memory.updated", "skills.updated", "turn.memory_recall", "turn.memory_written", "system.activity", "workflow.created", "workflow.updated", "workflow.deleted", "workflow.runStarted", "workflow.runCompleted", "workflow.runFailed", "workflow.nodeStatus", "workflow.triggerDropped", "workflow.alert", "workflow.approvalRequested", "workflow.approvalTimedOut"];
 export declare const AGENT_TEAM_WS_EVENT_NAMES: readonly ["solo.progress", "solo.specProgress", "solo.agentDelta", "solo.agentActivity", "solo.agentUsage", "solo.evaluation", "product.taskStarted", "product.taskOutput", "product.members", "product.agentActivity", "product.taskCompleted", "product.taskFailed", "product.budgetUpdate", "product.budgetWarning", "product.checkpointed", "product.completed", "product.dagTopology", "plan.interrupted", "product.planReady", "product.planningDelta", "product.leaderMessage", "product.planFailed", "product.planningAsk", "goal.run_state_changed", "goal.phase_boundary", "goal.goal_edited", "goal.message_queued", "goal.acceptance_updated", "goal.round_message", "mention.delegate_started", "mention.delegate_activity", "mention.delegate_settled"];
-export declare const AGENT_EVENT_NAMES: readonly ["turn.start", "turn.delta", "turn.end", "turn.error", "turn.recovery", "turn.file_changes", "turn.tool_call", "turn.tool_result", "turn.tool_blocked", "turn.reasoning_delta", "turn.approval_request", "turn.skill_instruction", "turn.ask_user", "turn.media_result", "turn.media_progress", "turn.media_usage", "turn.media_capability_check", "turn.plan_update", "turn.suggestions", "turn.sidechain_started", "turn.subagent_started", "turn.subagent_delta", "turn.subagent_ended", "turn.sidechain_completed", "turn.task_updated", "turn.todos_updated", "turn.exec_progress", "turn.progress", "turn.tool_use_summary", "turn.tool_selection_policy", "turn.lifecycle", "turn.document_maintenance", "turn.artifact_contract", "turn.usage_update", "team.member.notification", "session.info", "session.recovery_pending", "memory.updated", "skills.updated", "turn.memory_recall", "turn.memory_written", "pet.soul_ready", "pet.reaction", "pet.growth", "pet.state", "pet.confirm", "pet.asset.updated", "system.activity", "workflow.created", "workflow.updated", "workflow.deleted", "workflow.runStarted", "workflow.runCompleted", "workflow.runFailed", "workflow.nodeStatus", "workflow.triggerDropped", "workflow.alert", "workflow.approvalRequested", "workflow.approvalTimedOut", "solo.progress", "solo.specProgress", "solo.agentDelta", "solo.agentActivity", "solo.agentUsage", "solo.evaluation", "product.taskStarted", "product.taskOutput", "product.members", "product.agentActivity", "product.taskCompleted", "product.taskFailed", "product.budgetUpdate", "product.budgetWarning", "product.checkpointed", "product.completed", "product.dagTopology", "plan.interrupted", "product.planReady", "product.planningDelta", "product.leaderMessage", "product.planFailed", "product.planningAsk", "goal.run_state_changed", "goal.phase_boundary", "goal.goal_edited", "goal.message_queued", "goal.acceptance_updated", "goal.round_message", "mention.delegate_started", "mention.delegate_activity", "mention.delegate_settled"];
-export declare const ALL_AGENT_WS_EVENT_NAMES: readonly ["turn.start", "turn.delta", "turn.end", "turn.error", "turn.recovery", "turn.file_changes", "turn.tool_call", "turn.tool_result", "turn.tool_blocked", "turn.reasoning_delta", "turn.approval_request", "turn.skill_instruction", "turn.ask_user", "turn.media_result", "turn.media_progress", "turn.media_usage", "turn.media_capability_check", "turn.plan_update", "turn.suggestions", "turn.sidechain_started", "turn.subagent_started", "turn.subagent_delta", "turn.subagent_ended", "turn.sidechain_completed", "turn.task_updated", "turn.todos_updated", "turn.exec_progress", "turn.progress", "turn.tool_use_summary", "turn.tool_selection_policy", "turn.lifecycle", "turn.document_maintenance", "turn.artifact_contract", "turn.usage_update", "team.member.notification", "session.info", "session.recovery_pending", "memory.updated", "skills.updated", "turn.memory_recall", "turn.memory_written", "pet.soul_ready", "pet.reaction", "pet.growth", "pet.state", "pet.confirm", "pet.asset.updated", "system.activity", "workflow.created", "workflow.updated", "workflow.deleted", "workflow.runStarted", "workflow.runCompleted", "workflow.runFailed", "workflow.nodeStatus", "workflow.triggerDropped", "workflow.alert", "workflow.approvalRequested", "workflow.approvalTimedOut", "solo.progress", "solo.specProgress", "solo.agentDelta", "solo.agentActivity", "solo.agentUsage", "solo.evaluation", "product.taskStarted", "product.taskOutput", "product.members", "product.agentActivity", "product.taskCompleted", "product.taskFailed", "product.budgetUpdate", "product.budgetWarning", "product.checkpointed", "product.completed", "product.dagTopology", "plan.interrupted", "product.planReady", "product.planningDelta", "product.leaderMessage", "product.planFailed", "product.planningAsk", "goal.run_state_changed", "goal.phase_boundary", "goal.goal_edited", "goal.message_queued", "goal.acceptance_updated", "goal.round_message", "mention.delegate_started", "mention.delegate_activity", "mention.delegate_settled"];
+export declare const AGENT_EVENT_NAMES: readonly ["turn.start", "turn.delta", "turn.end", "turn.error", "turn.recovery", "turn.file_changes", "turn.tool_call", "turn.tool_result", "turn.tool_blocked", "turn.reasoning_delta", "turn.approval_request", "turn.skill_instruction", "turn.ask_user", "turn.media_result", "turn.media_progress", "turn.media_usage", "turn.media_capability_check", "turn.plan_update", "turn.suggestions", "turn.sidechain_started", "turn.subagent_started", "turn.subagent_delta", "turn.subagent_ended", "turn.sidechain_completed", "turn.task_updated", "turn.todos_updated", "turn.exec_progress", "turn.progress", "turn.tool_use_summary", "turn.tool_selection_policy", "turn.lifecycle", "turn.document_maintenance", "turn.artifact_contract", "turn.usage_update", "team.member.notification", "session.info", "session.recovery_pending", "memory.updated", "skills.updated", "turn.memory_recall", "turn.memory_written", "system.activity", "workflow.created", "workflow.updated", "workflow.deleted", "workflow.runStarted", "workflow.runCompleted", "workflow.runFailed", "workflow.nodeStatus", "workflow.triggerDropped", "workflow.alert", "workflow.approvalRequested", "workflow.approvalTimedOut", "solo.progress", "solo.specProgress", "solo.agentDelta", "solo.agentActivity", "solo.agentUsage", "solo.evaluation", "product.taskStarted", "product.taskOutput", "product.members", "product.agentActivity", "product.taskCompleted", "product.taskFailed", "product.budgetUpdate", "product.budgetWarning", "product.checkpointed", "product.completed", "product.dagTopology", "plan.interrupted", "product.planReady", "product.planningDelta", "product.leaderMessage", "product.planFailed", "product.planningAsk", "goal.run_state_changed", "goal.phase_boundary", "goal.goal_edited", "goal.message_queued", "goal.acceptance_updated", "goal.round_message", "mention.delegate_started", "mention.delegate_activity", "mention.delegate_settled"];
+export declare const ALL_AGENT_WS_EVENT_NAMES: readonly ["turn.start", "turn.delta", "turn.end", "turn.error", "turn.recovery", "turn.file_changes", "turn.tool_call", "turn.tool_result", "turn.tool_blocked", "turn.reasoning_delta", "turn.approval_request", "turn.skill_instruction", "turn.ask_user", "turn.media_result", "turn.media_progress", "turn.media_usage", "turn.media_capability_check", "turn.plan_update", "turn.suggestions", "turn.sidechain_started", "turn.subagent_started", "turn.subagent_delta", "turn.subagent_ended", "turn.sidechain_completed", "turn.task_updated", "turn.todos_updated", "turn.exec_progress", "turn.progress", "turn.tool_use_summary", "turn.tool_selection_policy", "turn.lifecycle", "turn.document_maintenance", "turn.artifact_contract", "turn.usage_update", "team.member.notification", "session.info", "session.recovery_pending", "memory.updated", "skills.updated", "turn.memory_recall", "turn.memory_written", "system.activity", "workflow.created", "workflow.updated", "workflow.deleted", "workflow.runStarted", "workflow.runCompleted", "workflow.runFailed", "workflow.nodeStatus", "workflow.triggerDropped", "workflow.alert", "workflow.approvalRequested", "workflow.approvalTimedOut", "solo.progress", "solo.specProgress", "solo.agentDelta", "solo.agentActivity", "solo.agentUsage", "solo.evaluation", "product.taskStarted", "product.taskOutput", "product.members", "product.agentActivity", "product.taskCompleted", "product.taskFailed", "product.budgetUpdate", "product.budgetWarning", "product.checkpointed", "product.completed", "product.dagTopology", "plan.interrupted", "product.planReady", "product.planningDelta", "product.leaderMessage", "product.planFailed", "product.planningAsk", "goal.run_state_changed", "goal.phase_boundary", "goal.goal_edited", "goal.message_queued", "goal.acceptance_updated", "goal.round_message", "mention.delegate_started", "mention.delegate_activity", "mention.delegate_settled"];
 /** Runtime-required keys whose shape is not encoded by TypeScript after serialization. */
 export declare const AGENT_EVENT_REQUIRED_KEYS: {
     readonly "product.taskStarted": readonly ["productId", "taskId", "assignee", "attempt"];
@@ -29,9 +29,9 @@ export interface AgentEventEnvelope<K extends AgentEventName = AgentEventName> {
     payload: AgentEventPayloadMap[K];
 }
 export declare const AGENT_CONTRACT_DESCRIPTOR: {
-    readonly version: 4;
+    readonly version: 5;
     readonly eventSchemaVersion: 1;
-    readonly eventNames: readonly ["turn.start", "turn.delta", "turn.end", "turn.error", "turn.recovery", "turn.file_changes", "turn.tool_call", "turn.tool_result", "turn.tool_blocked", "turn.reasoning_delta", "turn.approval_request", "turn.skill_instruction", "turn.ask_user", "turn.media_result", "turn.media_progress", "turn.media_usage", "turn.media_capability_check", "turn.plan_update", "turn.suggestions", "turn.sidechain_started", "turn.subagent_started", "turn.subagent_delta", "turn.subagent_ended", "turn.sidechain_completed", "turn.task_updated", "turn.todos_updated", "turn.exec_progress", "turn.progress", "turn.tool_use_summary", "turn.tool_selection_policy", "turn.lifecycle", "turn.document_maintenance", "turn.artifact_contract", "turn.usage_update", "team.member.notification", "session.info", "session.recovery_pending", "memory.updated", "skills.updated", "turn.memory_recall", "turn.memory_written", "pet.soul_ready", "pet.reaction", "pet.growth", "pet.state", "pet.confirm", "pet.asset.updated", "system.activity", "workflow.created", "workflow.updated", "workflow.deleted", "workflow.runStarted", "workflow.runCompleted", "workflow.runFailed", "workflow.nodeStatus", "workflow.triggerDropped", "workflow.alert", "workflow.approvalRequested", "workflow.approvalTimedOut", "solo.progress", "solo.specProgress", "solo.agentDelta", "solo.agentActivity", "solo.agentUsage", "solo.evaluation", "product.taskStarted", "product.taskOutput", "product.members", "product.agentActivity", "product.taskCompleted", "product.taskFailed", "product.budgetUpdate", "product.budgetWarning", "product.checkpointed", "product.completed", "product.dagTopology", "plan.interrupted", "product.planReady", "product.planningDelta", "product.leaderMessage", "product.planFailed", "product.planningAsk", "goal.run_state_changed", "goal.phase_boundary", "goal.goal_edited", "goal.message_queued", "goal.acceptance_updated", "goal.round_message", "mention.delegate_started", "mention.delegate_activity", "mention.delegate_settled"];
+    readonly eventNames: readonly ["turn.start", "turn.delta", "turn.end", "turn.error", "turn.recovery", "turn.file_changes", "turn.tool_call", "turn.tool_result", "turn.tool_blocked", "turn.reasoning_delta", "turn.approval_request", "turn.skill_instruction", "turn.ask_user", "turn.media_result", "turn.media_progress", "turn.media_usage", "turn.media_capability_check", "turn.plan_update", "turn.suggestions", "turn.sidechain_started", "turn.subagent_started", "turn.subagent_delta", "turn.subagent_ended", "turn.sidechain_completed", "turn.task_updated", "turn.todos_updated", "turn.exec_progress", "turn.progress", "turn.tool_use_summary", "turn.tool_selection_policy", "turn.lifecycle", "turn.document_maintenance", "turn.artifact_contract", "turn.usage_update", "team.member.notification", "session.info", "session.recovery_pending", "memory.updated", "skills.updated", "turn.memory_recall", "turn.memory_written", "system.activity", "workflow.created", "workflow.updated", "workflow.deleted", "workflow.runStarted", "workflow.runCompleted", "workflow.runFailed", "workflow.nodeStatus", "workflow.triggerDropped", "workflow.alert", "workflow.approvalRequested", "workflow.approvalTimedOut", "solo.progress", "solo.specProgress", "solo.agentDelta", "solo.agentActivity", "solo.agentUsage", "solo.evaluation", "product.taskStarted", "product.taskOutput", "product.members", "product.agentActivity", "product.taskCompleted", "product.taskFailed", "product.budgetUpdate", "product.budgetWarning", "product.checkpointed", "product.completed", "product.dagTopology", "plan.interrupted", "product.planReady", "product.planningDelta", "product.leaderMessage", "product.planFailed", "product.planningAsk", "goal.run_state_changed", "goal.phase_boundary", "goal.goal_edited", "goal.message_queued", "goal.acceptance_updated", "goal.round_message", "mention.delegate_started", "mention.delegate_activity", "mention.delegate_settled"];
     readonly eventRequiredKeys: {
         readonly "product.taskStarted": readonly ["productId", "taskId", "assignee", "attempt"];
         readonly "product.taskCompleted": readonly ["productId", "taskId", "result", "attempt"];
@@ -42,7 +42,7 @@ export declare const AGENT_CONTRACT_DESCRIPTOR: {
     };
     readonly terminalStates: readonly ["completed", "failed", "cancelled"];
 };
-export declare const AGENT_CONTRACT_HASH: "23e967b8afdc32d4f8663cf50a1e86e07e658b4d63a6c657f043b62be0c81ec3";
+export declare const AGENT_CONTRACT_HASH: "4c36fbb48115e487dfb0c5e49a21c07797986a62058c32d99531a6bf41184298";
 export interface AgentContractIdentity {
     version: typeof AGENT_CONTRACT_VERSION;
     hash: typeof AGENT_CONTRACT_HASH;

package/dist/types/protocol/wire/acp-protocol.d.ts

@@ -144,7 +144,8 @@ export interface AcpSessionMeta {
     /** Skills the user explicitly pinned for this turn (scope:name or name). The turn pipeline
      *  force-loads each one's SKILL.md, identically to the `skill_view` tool (cc-parity). */
     activeSkills?: string[];
-    /** Session-scoped MCP servers normalized for the turn bootstrap. */
+    /** Internal materialization of the standard session/new|load `mcpServers` field.
+     *  Hosts MUST NOT send this through `_meta`. */
     mcpServers?: Record<string, unknown>;
 }
 export interface AcpSessionNewParams {
@@ -168,7 +169,7 @@ export interface AcpSessionNewParams {
     resumeSessionId?: string;
     forkSession?: boolean;
     /** Per-session context supplement (no standard ACP home). Inherited by every session/prompt. */
-    _meta?: AcpSessionMeta;
+    _meta?: Omit<AcpSessionMeta, "mcpServers">;
 }
 export interface AcpSessionLoadParams {
     sessionId: string;
@@ -177,7 +178,7 @@ export interface AcpSessionLoadParams {
     /** MCP servers re-injected by the host when resuming the session. */
     mcpServers?: AcpSessionNewParams["mcpServers"];
     /** Per-session context supplement restored by the host. */
-    _meta?: AcpSessionMeta;
+    _meta?: Omit<AcpSessionMeta, "mcpServers">;
 }
 /** A selectable permission mode advertised to the host (standard ACP). */
 export interface AcpMode {
@@ -199,8 +200,8 @@ export interface AcpSessionPromptParams {
     sessionId: string;
     /** User prompt content blocks (standard ACP field). */
     prompt: AcpContentBlock[];
-    /** Per-turn context overrides (permissions/reasoning/mcpServers/...), merged over session _meta. */
-    _meta?: AcpSessionMeta;
+    /** Per-turn context overrides (permissions/reasoning/...), merged over session _meta. */
+    _meta?: Omit<AcpSessionMeta, "mcpServers">;
 }
 export interface AcpSessionPromptResult {
     /** Stop reason (required by ACP standard). */