qlogicagent 2.20.4 → 2.20.6

package/dist/skills/builtin/web-research/SKILL.md

@@ -24,14 +24,14 @@ requires: []
 如果找不到工具或 Prompt：
 
 1. 引导用户在桌面端“插件 → 连接器”安装并启用官方 **Astra Search**。
-2. 优先建议 OAuth：在 Astra Search 设置中选择 OAuth 并点击“授权”。Runtime 会
-   打开 llmrouter 的授权页面；不要索取、显示或保存 OAuth token。
-3. 如果用户选择 API Key：
+2. Xiaozhi Runtime 会在正常 llmrouter 握手后自动注入本机托管 API Key，不应再让
+   用户选择认证模式或重复填写密钥；如果托管 Key 尚不可用，引导用户先完成桌面账号登录。
+3. 第三方 MCP Host 只支持用户自行配置普通 llmrouter API Key：
    - 未注册时打开或给出 <https://www.qlogicagent.com/signup>；
    - 登录后打开或给出 <https://www.qlogicagent.com/keys> 创建或重置密钥；
-   - 让用户返回 Astra Search 设置，选择 API Key 并把密钥填入凭证框。
+   - 让用户返回 Astra Search 设置，把密钥填入 API Key 凭证框。
 4. 当前 Host 能安全打开外部链接时可以导航到上述页面；否则提供可点击链接。
    **不要把 API Key 发到聊天、写入项目文件、日志、记忆或 Skill。**
 
-完成安装、授权、启用和连接测试后，重新发现 MCP 清单并读取 Prompt。不得改用旧
+完成安装、绑定、启用和连接测试后，重新发现 MCP 清单并读取 Prompt。不得改用旧
 REST 搜索、本地 provider 或其它隐藏 fallback。

package/dist/types/cli/handlers/turn-handler.d.ts

@@ -143,6 +143,7 @@ export declare function injectSkillContextBeforeLastUser(messages: ChatMessage[]
  * channel only the tail changes — the cached prefix survives.
  */
 export declare function buildMemoryIndexBlock(globalBlock: string | null, projectBlock: string | null): string | null;
+export declare function buildMemoryIndexAdmissionReceipt(globalBlock: string | null, projectBlock: string | null, sessionId: string, turnId: string): Record<string, unknown> | null;
 export declare function injectDomainGuidanceBeforeLastUser(messages: ChatMessage[], domainGuidance: string): ChatMessage[];
 export declare function refreshPermissionCheckerToolMeta(permissionChecker: PermissionMetadataResolver | null | undefined, tools: ToolDefinition[]): void;
 export declare function handleUserResponse(this: TurnControlHandlerHost, msg: AgentRpcRequest): void;

package/dist/types/protocol/wire/notification-payloads.d.ts

@@ -166,13 +166,19 @@ export interface TurnSuggestionsNotification {
 /** Memory recall visibility (Part B): fired when turn-time recall injected memories,
  * so the UI can render a "based on N memories" disclosure row (recall was invisible before). */
 export interface TurnMemoryRecallNotification {
+    /** Receipt schema for consumers that distinguish final prompt admission. */
+    receiptVersion?: 1;
+    /** Present only when the receipt witnesses admission into the final model prompt. */
+    stage?: "final-prompt";
     sessionId: string;
     turnId: string;
-    /** How the single Host retrieval chain was entered. */
-    source: "automatic" | "tool";
+    /** How memory entered the final prompt; resident INDEX context is not selective retrieval. */
+    source: "automatic" | "tool" | "resident";
     count: number;
     /** Truncated texts of the memories actually injected (post-cap), for the expanded list. */
     titles: string[];
+    /** Content-free identifiers for the injected memory layers. */
+    sources?: string[];
 }
 /** Memory write visibility (Part B): fired on the synchronous agent-remember tool path.
  * Dream/async consolidation deliberately does NOT emit this (it surfaces via next-turn recall). */

package/dist/types/runtime/infra/feedback-upload-client.d.ts

@@ -24,7 +24,6 @@ export interface UploadBatchResult {
     accepted?: number;
     status?: number;
     error?: string;
-    refreshedToken?: boolean;
 }
 /**
  * Resolve the feedback ingest base, derived from the llmrouter base already injected into the agent

package/dist/types/runtime/infra/llmrouter-access-token.d.ts

@@ -4,9 +4,4 @@ export interface LlmrouterFetchOptions {
     init?: RequestInit;
     signal?: AbortSignal;
 }
-export interface LlmrouterFetchResult {
-    response: Response;
-    refreshedToken: boolean;
-}
-export declare function isJwtExpiredOrNearExpiry(token: string | undefined, skewSeconds?: number): boolean;
-export declare function fetchWithLlmrouterAccess(path: string, options?: LlmrouterFetchOptions): Promise<LlmrouterFetchResult>;
+export declare function fetchWithLlmrouterAccess(path: string, options?: LlmrouterFetchOptions): Promise<Response>;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "qlogicagent",
-  "version": "2.20.4",
+  "version": "2.20.6",
   "description": "XiaozhiClaw Agent CLI — subprocess architecture (JSON-RPC over stdio)",
   "type": "module",
   "main": "dist/index.js",
@@ -163,8 +163,8 @@
   "dependencies": {
     "@agentclientprotocol/sdk": "^0.25.0",
     "@napi-rs/canvas": "0.1.100",
-    "@xiaozhiclaw/module-sdk": "0.2.2",
-    "@xiaozhiclaw/provider-core": "^0.1.29",
+    "@xiaozhiclaw/module-sdk": "0.2.4",
+    "@xiaozhiclaw/provider-core": "^0.1.30",
     "better-sqlite3": "^12.10.0",
     "dotenv": "^17.3.1",
     "ioredis": "^5.11.1",