qlogicagent 2.20.6 → 2.20.8

package/dist/types/runtime/infra/default-path-service.d.ts

@@ -18,9 +18,7 @@ export declare class DefaultPathService implements PathService {
     getOwnerProfileDir(ownerUserId?: string): string;
     getProfileMemoryDir(ownerUserId?: string): string;
     getUserSettingsPath(): string;
-    getUserSkillsDir(): string;
     getUserPluginsDir(): string;
-    getUserMcpConfigPath(): string;
     getUserPluginCacheDir(): string;
     getUserMarketplaceConfigPath(): string;
     getProjectAgentDir(projectRoot?: string): string;

package/dist/types/runtime/infra/llmrouter-managed-inference.d.ts

@@ -1,6 +1,59 @@
 import type { ConfigPort } from "../ports/index.js";
+/**
+ * One registered plan-grant product: a fixed local path and the fixed upstream
+ * path it maps to.
+ */
+export interface PlanGrantDomain {
+    readonly domain: string;
+    readonly proxyPath: string;
+    readonly upstreamPath: string;
+}
+/**
+ * The plan-grant products this runtime proxies, and nothing else.
+ *
+ * A table, not a generic proxy. Each entry is a pair of constants, and there is
+ * deliberately no entry point that accepts a `domain` argument: that would turn
+ * path-level isolation into field-level isolation and let the caller choose the
+ * upstream target through a request field. Adding a product means adding a row
+ * here, and the four places that used to name each product one by one — route
+ * resolution, content-type validation, the request path type and the timeout
+ * rule — all read from this table.
+ *
+ * Mirrors `qllm/plan_grants/registry.py` on the llmrouter side. The two must
+ * agree: a row here with no upstream route proxies to a 404. As of this
+ * change llmrouter registers `easyeda` but has not yet mounted its router
+ * (`qllm/ext/easyeda_router.py` does not exist), so that row forwards to a 404
+ * until the endpoint ships. The row is correct and deliberate -- the proxy is
+ * not the thing gating easyeda -- but nothing here should be read as evidence
+ * that the upstream endpoint works.
+ */
+export declare const PLAN_GRANT_DOMAINS: readonly [{
+    readonly domain: "cad";
+    readonly proxyPath: "/v1/runtime-session/llmrouter/cad/plan-grants";
+    readonly upstreamPath: "/v1/cad/plan-grants";
+}, {
+    readonly domain: "solidworks";
+    readonly proxyPath: "/v1/runtime-session/llmrouter/solidworks/plan-grants";
+    readonly upstreamPath: "/v1/solidworks/plan-grants";
+}, {
+    readonly domain: "easyeda";
+    readonly proxyPath: "/v1/runtime-session/llmrouter/easyeda/plan-grants";
+    readonly upstreamPath: "/v1/easyeda/plan-grants";
+}];
+/** Upstream paths the table registers. A closed union, not a template. */
+export type PlanGrantUpstreamPath = (typeof PLAN_GRANT_DOMAINS)[number]["upstreamPath"];
+/** Whether a path is a registered plan-grant path. */
+export declare function isPlanGrantUpstreamPath(path: string): path is PlanGrantUpstreamPath;
+/**
+ * The registered product a local URL addresses, if any.
+ *
+ * Matches the whole path exactly. No prefix matching and no path segment is
+ * ever taken from the request: an unregistered URL returns undefined and is
+ * refused by the caller rather than forwarded.
+ */
+export declare function planGrantDomainForProxyPath(url: string | undefined): (typeof PLAN_GRANT_DOMAINS)[number] | undefined;
 export interface ManagedInferenceRequest {
-    path: "/v1/models" | "/v1/files" | `/v1/files/${string}` | "/v1/cad/plan-grants" | "/v1/solidworks/plan-grants";
+    path: "/v1/models" | "/v1/files" | `/v1/files/${string}` | PlanGrantUpstreamPath;
     method: "GET" | "POST" | "DELETE";
     contentType?: string;
     body?: AsyncIterable<Uint8Array>;

package/dist/types/runtime/infra/media-persistence.d.ts

@@ -1,9 +1,9 @@
 /**
- * MediaPersistence — Auto-download generated media to local storage.
+ * MediaPersistence — persist generic inline/temporary tool artifacts.
  *
- * When LLM tools generate files (images, videos, audio) and return
- * cloud URLs, this service downloads them to a persistent local directory
- * so the user can access them offline without manual intervention.
+ * This helper is limited to projected-tool inline image blocks and exec-created temporary
+ * artifacts. Runtime Host owns generation providers, generated-media persistence, publication,
+ * explicit output paths, and all `astraclaw_media` MCP results.
  *
  * Storage layout:
  *   <project>/assets/images/image_20260520_143022_abc.png
@@ -12,12 +12,9 @@
  *   <project>/assets/models/  <project>/assets/files/
  *
  * 产出归项目工作区可见的 assets/ 目录(按类型分),项目级、所有会话共享 —— 文件树可见可
- * 管理。文件名带时间戳+随机后缀保证多会话不冲突。(旧版曾存于 .qlogicagent/sessions/<id>/media/)
+ * 管理。文件名带时间戳+随机后缀保证多会话不冲突。
  *
- * Integration:
- *   Called from the tool result pipeline in tool-loop.ts.
- *   When a tool result's `details.mediaUrls` contains URLs,
- *   each URL is downloaded and the local path is added to details.
+ * It does not inspect or materialize `details.mediaUrls`.
  */
 export interface MediaDownloadResult {
     /** Original cloud URL. */
@@ -28,10 +25,6 @@ export interface MediaDownloadResult {
     bytes: number;
     /** MIME type (from Content-Type header). */
     mimeType: string;
-    /** First bytes of the saved file as uppercase hex pairs. */
-    headerHex?: string;
-}
-export interface MediaSaveResult extends MediaDownloadResult {
 }
 export interface MediaPersistenceConfig {
     /**
@@ -73,29 +66,6 @@ export declare class MediaPersistence {
         type?: string;
         sessionId?: string;
     }): Promise<MediaDownloadResult>;
-    /**
-     * Download multiple URLs. Returns results for successful downloads.
-     * Failed downloads are logged but don't throw.
-     */
-    downloadAll(urls: string[], hint?: {
-        type?: string;
-        sessionId?: string;
-    }, log?: {
-        warn: (msg: string) => void;
-    }): Promise<MediaDownloadResult[]>;
-    /**
-     * Persist generated media to caller-requested artifact paths.
-     *
-     * This complements project-level archival downloads: generated assets remain
-     * previewable in assets/images, while explicit user deliverables are also
-     * written to their requested paths.
-     */
-    saveAllToPaths(urls: string[], outputPaths: string[], hint?: {
-        type?: string;
-        sessionId?: string;
-    }, log?: {
-        warn: (msg: string) => void;
-    }): Promise<MediaSaveResult[]>;
     /** Get the project-level assets root (<project>/assets). */
     getMediaDir(): string;
     /** Get the project directory (for testing/inspection). */

package/dist/types/runtime/memory/implicit-extraction.d.ts

@@ -2,13 +2,13 @@
  * Implicit Memory Extraction — CC extractMemories lightweight port.
  *
  * Architecture:
- *   Layer 1: Zero-cost signal detection (regex) — decides if turn has extractable content
- *   Layer 2: Lightweight LLM pass (async, non-blocking) — extracts structured facts
+ *   - Lightweight LLM pass (async, non-blocking) extracts structured facts
+ *   - Host validates and commits atomic claims through the canonical evidence chain
  *
  * This runs AFTER turn.end, so the user already has their response.
- * With a semantic extractor configured, every completed user turn is eligible
- * for the bounded Layer 2 pass. The regex detector is only a conservative
- * no-model fallback and must remain independent of evaluation vocabulary.
+ * Every completed user turn is eligible for the bounded learned pass. If the
+ * model is unavailable or cannot produce a valid structured claim, extraction
+ * fails closed without creating an unstructured memory.
  *
  * Reference: claude-code src/services/extractMemories/extractMemories.ts
  */
@@ -57,17 +57,9 @@ export interface TurnPair {
     assistantMessage: string;
 }
 /**
- * Layer 1: Detect if a user message contains signals worth extracting.
- * Zero LLM cost — pure regex scanning.
- *
- * @returns true if the message likely contains extractable personal facts/events
- */
-export declare function hasExtractionSignal(userMessage: string): boolean;
-/**
- * Layer 2: Use a lightweight LLM to extract structured facts from a turn pair.
- * Only called when Layer 1 signals are detected.
+ * Use a lightweight LLM to extract structured facts from a turn pair.
  */
-export declare function extractFactsViaLlm(turn: TurnPair, llmExtract: (prompt: string) => Promise<string | null>, today: string, onDiagnostic?: (message: string) => void): Promise<ExtractedFact[]>;
+export declare function extractFactsViaLlm(turn: TurnPair, llmExtract: (prompt: string) => Promise<string | null>, today: string, onDiagnostic?: (message: string) => void, existingClaims?: readonly ExtractedFact[]): Promise<ExtractedFact[]>;
 /**
  * Run the full implicit extraction pipeline for a completed turn.
  * This is async and non-blocking — call it after turn.end.

package/dist/types/runtime/memory/memory-recall-attribution.d.ts

@@ -0,0 +1,24 @@
+export type MemoryRecallUsage = "used" | "not_used" | "uncertain";
+export type MemoryRecallEffect = "helpful" | "neutral" | "harmful" | "uncertain";
+export interface MemoryRecallAttribution {
+    usage: MemoryRecallUsage;
+    effect: MemoryRecallEffect;
+    usedMemoryIds: string[];
+    rationale: string;
+}
+export interface MemoryRecallAttributionInput {
+    query: string;
+    response: string;
+    memories: Array<{
+        id: string;
+        content: string;
+        recallPacket?: unknown;
+    }>;
+}
+/**
+ * Builds a background semantic-assessment task. This deliberately asks for
+ * causal use of evidence rather than lexical overlap, so paraphrases and
+ * repeated topic words do not become fabricated positive feedback.
+ */
+export declare function buildMemoryRecallAttributionPrompt(input: MemoryRecallAttributionInput): string;
+export declare function parseMemoryRecallAttribution(raw: string | null | undefined): MemoryRecallAttribution | null;

package/dist/types/runtime/ports/agent-runtime-ports.d.ts

@@ -38,6 +38,8 @@ export interface StreamingToolExecutorPortConfig {
     executionTimeoutMsByTool?: ReadonlyMap<string, number>;
     /** Turn workspace/cwd — routes oversized tool-result spillover to the session's reachable data dir. */
     projectRoot?: string;
+    /** Opaque per-turn typed context budget and skill-readiness state. */
+    contextState?: unknown;
 }
 export interface ContextCompressionEnginePort {
     compressAsync(messages: RuntimeCompressibleMessage[], budget: number, context: {
@@ -56,6 +58,18 @@ export interface ToolLoopRuntimePorts {
         newlyReplacedCount: number;
         newlyPersistedBytes?: number;
     }>;
+    restoreRequiredContextMessages?(messagesBefore: Array<{
+        role: string;
+        content?: string | unknown;
+        tool_call_id?: string;
+    }>, messagesAfter: Array<{
+        role: string;
+        content?: string | unknown;
+        tool_call_id?: string;
+    }>, state: unknown): {
+        messages: unknown[];
+        recoveredCount: number;
+    };
     getActiveContextCompressionEngine(): ContextCompressionEnginePort | null;
     compressMessages(messages: RuntimeCompressibleMessage[], options: {
         budget: number;

package/dist/types/runtime/ports/index.d.ts

@@ -1,6 +1,6 @@
 export type { MemoryExtractionQueue, MemoryWriter, MemoryWriteMetadata, } from "./memory-writer.js";
 export type { MemoryRecallSource } from "./memory-recall-source.js";
-export type { MemoryProvider, MemorySearchOptions, MemorySearchResult, MemoryIngestOptions, MemoryExtractionItem, MemoryConsolidationWriteResult, MemoryLearningSink, MemoryToolLocalProvider, MemoryActivitySummary, MemoryAtlasRecord, MemoryAtlasResult, MemoryUpdatePatch, MemoryHandlerProvider, MemoryDreamProvider, MemoryDecayProvider, MemoryRuntimeHookProvider, MemoryToolProvider, MemoryDreamRuntimeProvider, } from "./memory-provider.js";
+export type { MemoryProvider, MemorySearchOptions, MemorySearchResult, MemoryIngestOptions, MemoryExtractionItem, MemoryConsolidationWriteResult, MemoryLearningSink, MemoryActivitySummary, MemoryAtlasRecord, MemoryAtlasResult, MemoryUpdatePatch, MemoryHandlerProvider, MemoryDreamProvider, MemoryDecayProvider, MemoryRuntimeHookProvider, MemoryDreamRuntimeProvider, } from "./memory-provider.js";
 export type { PathService } from "./path-service.js";
 export type { ConfigPort } from "./config-port.js";
 export { createRecordConfigPort } from "./config-port.js";
@@ -9,8 +9,6 @@ export type { ApprovalRequest, ApprovalResponse, PermissionApprovalResolver, Per
 export type { ProjectMemoryFileInfo, ProjectMemoryResult, ProjectMemoryStore, ProjectMemoryStoreFactory, } from "./project-memory-store.js";
 export type { RuntimeToolContract, ToolBootstrap, ToolBootstrapConfig, ToolBootstrapProvider, ToolBootstrapProviderContext, ToolBootstrapProgress, ToolCatalog, ToolRegistrationModule, ToolRegistrationModuleKind, } from "./tool-contracts.js";
 export { defineToolRegistrationModule } from "./tool-contracts.js";
-export type { Checkpoint, CheckpointBackend, CheckpointResult } from "./checkpoint-contracts.js";
-export type { WorktreeBackend, WorktreeInfo, WorktreeResult } from "./worktree-contracts.js";
 export { buildToolResultMessage, type OpenAiToolCall, type ToolResultMessageInput } from "./tool-call-contracts.js";
 export type { AgentLogger, AgentRunRequest, ChatMessage, ForkedAgentRunner, ForkedAgentRunnerFactory, HookRegistry, TokenUsage, ToolDefinition, ToolInvoker, TurnEvent, } from "./agent-execution-contracts.js";
 export type { AccumulatedToolCall, LLMChunk, LLMRequest, LLMTransport, } from "./model-transport-contracts.js";

package/dist/types/runtime/ports/memory-provider.d.ts

@@ -44,11 +44,12 @@ export interface MemoryExtractionItem {
     };
     /** Ids of already-uploaded attachments to link to this memory on commit. */
     attachmentIds?: string[];
-    /** Evidence trail for distillation-style sources (feedback — §10): audit refs + crash-safe dedup key. */
+    /** Evidence audit trail: source refs, optional verbatim quote, and a crash-safe dedup key. */
     evidence?: {
         kind: string;
         refs: string[];
         idempotencyKey: string;
+        quote?: string;
     };
     /** The source turn explicitly retracts or replaces an earlier decision. */
     correction?: boolean;
@@ -73,28 +74,11 @@ export interface MemoryConsolidationWriteResult {
 export interface MemoryProvider {
     readonly providerId: string;
     search(query: string, userId: string, options?: MemorySearchOptions): Promise<MemorySearchResult[]>;
-    addText?(text: string, userId: string, options?: MemoryIngestOptions): Promise<{
-        memoriesAdded: number;
-    }>;
     remove?(memoryId: string): Promise<boolean>;
 }
 export interface MemoryLearningSink {
     ingestExtracted(items: MemoryExtractionItem[], userId: string, options?: MemoryIngestOptions): Promise<MemoryConsolidationWriteResult>;
 }
-export interface MemoryToolLocalProvider {
-    addText(text: string, userId: string, metadata?: MemoryIngestOptions & {
-        category?: string;
-        importance?: number;
-    }): Promise<unknown>;
-    /** B3(X7)异步化:Host 契约方法(host 模式经 x/host.request 跨进程)。 */
-    synthesizeTimeline(userId: string, startMs: number, endMs: number): Promise<string>;
-    feedback(ids: string[], signal: "useful" | "irrelevant" | "outdated" | "wrong", context?: {
-        sessionId?: string;
-        silent?: boolean;
-    }): Promise<{
-        affected: number;
-    }>;
-}
 export interface MemoryActivitySummary {
     dailyCounts: Array<{
         date: string;
@@ -232,5 +216,4 @@ export interface MemoryDecayProvider {
     }>;
 }
 export type MemoryRuntimeHookProvider = MemoryProvider & MemoryWriter;
-export type MemoryToolProvider = MemoryProvider & MemoryToolLocalProvider;
 export type MemoryDreamRuntimeProvider = MemoryDreamProvider & MemoryDecayProvider;

package/dist/types/runtime/ports/memory-writer.d.ts

@@ -26,12 +26,12 @@ export interface MemoryWriterExtractionItem {
         kind: string;
         refs: string[];
         idempotencyKey: string;
+        quote?: string;
     };
     /** The source turn explicitly retracts or replaces an earlier decision. */
     correction?: boolean;
 }
 export interface MemoryWriter {
-    addText(text: string, userId: string, metadata?: MemoryWriteMetadata): Promise<unknown>;
     ingestExtracted?(items: MemoryWriterExtractionItem[], userId: string, metadata?: MemoryWriteMetadata): Promise<{
         memoriesAdded?: number;
         items?: Array<{

package/dist/types/runtime/ports/path-service.d.ts

@@ -17,9 +17,7 @@ export interface PathService {
     getOwnerProfileDir(ownerUserId?: string): string;
     getProfileMemoryDir(ownerUserId?: string): string;
     getUserSettingsPath(): string;
-    getUserSkillsDir(): string;
     getUserPluginsDir(): string;
-    getUserMcpConfigPath(): string;
     getUserPluginCacheDir(): string;
     getUserMarketplaceConfigPath(): string;
     getProjectAgentDir(projectRoot?: string): string;

package/dist/types/runtime/prompt/capability-routing-policy.d.ts

@@ -0,0 +1,13 @@
+import type { FreshWorkspaceEvidencePolicy } from "./fresh-workspace-evidence.js";
+export type CapabilityRoutingOwner = "structured-planner" | "direct-response" | "mcp-capability" | "typed-builtin" | "pinned-skill" | "host-skill-discovery";
+/**
+ * Resolves exclusive capability ownership before any semantic Skill classification.
+ * A lower-specificity route must never steal a turn already owned by a typed policy.
+ */
+export declare function resolveCapabilityRoutingOwner(input: {
+    structuredPlannerTurn: boolean;
+    directResponse: boolean;
+    mcpCapabilitySelection: boolean;
+    freshEvidencePolicy: FreshWorkspaceEvidencePolicy;
+    pinnedSkillCount: number;
+}): CapabilityRoutingOwner;

package/dist/types/runtime/prompt/environment-context.d.ts

@@ -90,13 +90,10 @@ export declare function createToolGuidanceSection(): SystemPromptSection;
  */
 export declare function createLanguageSection(language?: string): SystemPromptSection;
 /**
- * Available Skills — CC skill-discovery parity. Lists every active (installed, not muted) skill
- * with its description (hermes-style, description-only), and tells the model to load a matching
- * skill via skill_view BEFORE acting — even when the user did not name it. This is the link that
- * makes installed skills actually auto-activate; without it active skills only sit behind the
- * skill_view tool as a passive catalog and never fire on their own.
+ * Available Skills — Host-owned discovery. qlogicagent advertises only the projected MCP workflow;
+ * it does not scan, parse, cache, or read the Host Skill store.
  */
-export declare function createAvailableSkillsSection(cwdOverride?: string, availableToolNames?: string[]): SystemPromptSection;
+export declare function createAvailableSkillsSection(availableToolNames?: string[]): SystemPromptSection;
 /**
  * Detect the response language from the user's current-turn text so the strong
  * explicit-language branch of createLanguageSection actually fires.

package/dist/types/runtime/prompt/fresh-workspace-evidence.d.ts

@@ -14,23 +14,18 @@ export interface FreshWorkspaceEvidencePolicy {
     reason?: "file-read" | "memory-mutation" | "media-generation" | "media-understanding" | "directory-list" | "content-search" | "shell" | "web";
     mediaKind?: "image" | "video" | "tts" | "music";
     allowedToolNames: string[];
+    /** When true, the typed route is an execution boundary rather than prompt guidance. */
+    enforceAllowedToolNames?: boolean;
 }
 export declare function getFreshWorkspaceEvidencePolicy(messages: readonly PromptMessageLike[] | string): FreshWorkspaceEvidencePolicy;
 export declare function isLightweightChatTurn(messages: readonly PromptMessageLike[] | string): boolean;
 export declare function isExplicitNoToolTurn(messages: readonly PromptMessageLike[] | string): boolean;
 /**
- * Orchestration / capability primitives that survive every evidence filter.
- * The policy's job is to FORCE fresh-evidence tools into the turn, not to
- * strip the coordination layer — removing task/agent here silently breaks
- * sub-agent delegation and background-task tracking on any turn whose text
- * happens to match an evidence pattern (e.g. "write reports/x.json").
- * `skill_view` belongs here for the same reason: it is the capability-invocation
- * primitive, and the `# Available Skills` section tells the model to call it.
- * Stripping `skill_view` on a file/mutation/shell turn (i.e. almost every real task)
- * makes that instruction impossible to follow — the model cannot call a tool it
- * was never given — which was the entire "skills never self-activate" bug.
- * (skills_list / skill_manage are not load-bearing for self-activation, so they
- * stay subject to the normal evidence filter.)
+ * Apply a hard allowlist only for deterministic Host-owned operations such as
+ * media generation/understanding. Other evidence policies keep the complete
+ * turn surface so ordinary engineering and orchestration work is not narrowed
+ * merely because its wording resembles an evidence request. Namespaced Host
+ * tools are matched by their local MCP tool name.
  */
 export declare function selectFreshWorkspaceEvidenceTools<TTool extends ToolNameLike>(tools: readonly TTool[], policy: FreshWorkspaceEvidencePolicy): TTool[];
 /**
@@ -40,4 +35,4 @@ export declare function selectFreshWorkspaceEvidenceTools<TTool extends ToolName
  * misfired on quoted/reported speech ("he said don't use tools").
  */
 export declare function createExplicitNoToolNoticeSection(): SystemPromptSection;
-export declare function createFreshWorkspaceEvidenceSection(policy: FreshWorkspaceEvidencePolicy): SystemPromptSection | null;
+export declare function createFreshWorkspaceEvidenceSection(policy: FreshWorkspaceEvidencePolicy, availableToolNames?: readonly string[]): SystemPromptSection | null;

package/dist/types/runtime/prompt/tool-necessity-policy.d.ts

@@ -0,0 +1,12 @@
+import type { FreshWorkspaceEvidencePolicy } from "./fresh-workspace-evidence.js";
+/**
+ * Typed, conservative pre-tool routing for requests whose complete input is already
+ * present in the latest user message. This is intentionally an operation taxonomy,
+ * not a benchmark phrase list: every admitted class is closed over supplied text or
+ * scalar values and therefore cannot gain correctness from filesystem, shell or MCP.
+ */
+export interface ToolNecessityPolicy {
+    mode: "model-tools" | "direct-response";
+    reason?: "scalar-computation" | "text-transformation" | "structured-data-inspection" | "inline-classification" | "url-component-extraction";
+}
+export declare function resolveToolNecessityPolicy(text: string, evidencePolicy: FreshWorkspaceEvidencePolicy): ToolNecessityPolicy;

package/dist/types/skills/mcp/mcp-manager.d.ts

@@ -1,3 +1,4 @@
+import { type ServerToolInfo } from "mcporter";
 import type { PortableTool, PortableToolResult } from "../portable-tool.js";
 interface ToolRegistryLike {
     addTools(tools: PortableTool[]): void;
@@ -38,7 +39,7 @@ export interface McpSecurityIssue {
     message: string;
 }
 /**
- * A configured server that is NOT serving tools this session. Surfaced (not just logged)
+ * A configured server that is not currently serving tools. Surfaced (not just logged)
  * so capability queries (e.g. mcp_connectors_list) can disclose "configured but unavailable"
  * instead of the server silently vanishing from the tool pool.
  */
@@ -75,7 +76,9 @@ export declare class McpManager {
     private runtime;
     private definitions;
     private toolsByServer;
+    private refreshAllPromise;
     private injectedNames;
+    private injectedNamesByServer;
     private log;
     private workspaceRoot?;
     private toolCatalog?;
@@ -84,7 +87,7 @@ export declare class McpManager {
     private serverCallTimeouts;
     private failedServers;
     constructor(config: McpManagerConfig);
-    /** Record (and loudly report) a server that will serve NO tools this session. */
+    /** Record (and loudly report) a server that is not currently serving tools. */
     private markServerFailed;
     private toServerDefinition;
     /**
@@ -97,9 +100,18 @@ export declare class McpManager {
      */
     injectTools(): void;
     refreshServerTools(serverName: string): Promise<number>;
+    /**
+     * Refresh every configured server's live tool inventory at a turn boundary.
+     *
+     * Some MCP servers expose a dynamic tools/list result: their backing
+     * capabilities can become ready after the initial transport connection.
+     * Retain each server's last-good snapshot on a transient refresh failure,
+     * while applying successful additions/removals to the session catalog.
+     */
+    refreshAllServerTools(): Promise<number>;
     /** Get names of all connected servers. */
     getConnectedServers(): string[];
-    /** Configured servers serving NO tools this session (invalid config or terminal connect failure). */
+    /** Configured servers not currently serving tools. */
     getFailedServers(): McpServerFailure[];
     /** Get total number of MCP tools across all servers. */
     getToolCount(): number;
@@ -115,6 +127,15 @@ export declare class McpManager {
     private registerTools;
     private removeRegisteredTool;
 }
+export declare function mcpFallbackToolTitle(serverName: string, toolName: string): string;
+export declare function mcpPortableToolMetadata(serverName: string, mcpTool: ServerToolInfo): Pick<PortableTool, "name" | "label" | "description" | "semanticCapability" | "searchHint" | "isConcurrencySafe" | "isReadOnly" | "isDestructive" | "riskLevel" | "isEgress" | "egressCarriesData">;
+/**
+ * MCP bridges may already expose a globally-scoped `{server}__{tool}` name.
+ * Prefixing that name again makes the model-facing function opaque and can push
+ * it past provider limits. Preserve that namespace, normalize it to the portable
+ * function-name alphabet, and bound it with a collision-resistant suffix.
+ */
+export declare function mcpPortableFunctionName(serverName: string, toolName: string): string;
 /**
  * Flatten an MCP CallToolResult into a text-bearing PortableToolResult.
  * Non-text blocks (image/audio/resource…) cannot be dropped silently: content is
@@ -122,7 +143,11 @@ export declare class McpManager {
  * "(no text output)" for a result that DID produce blocks is a lie.
  * Exported for unit tests only.
  */
-export declare function toPortableResult(result: unknown): PortableToolResult;
+export declare function toPortableResult(result: unknown, source?: {
+    serverName: string;
+    toolName: string;
+    args?: Record<string, unknown>;
+}): PortableToolResult;
 export declare function validateMcpToolWorkspaceBoundary(toolName: string, args: unknown, workspaceRoot: string | undefined): string | null;
 export declare function parseMcpConfig(json: unknown): McpServerEntry[];
 export declare function filterMcpTools<T extends {

package/dist/types/skills/memory/host-memory-provider.d.ts

@@ -9,7 +9,7 @@
  * (HostRequestParams;wire 形态 = { service:"memory", method, params:<位置参数数组> })。
  *
  * 【PROXY 共享面(以 host-contract 常量为准;两仓照此表,一字不差)】
- *   search / addText / embedText / ingestExtracted / proposeExtracted / consumePendingProposals /
+ *   search / embedText / ingestExtracted / proposeExtracted / consumePendingProposals /
  *   feedback / findRelatedEvents / synthesizeTimeline / getActivitySummary / getAllProfiles /
  *   setProfile / getAtlas / setMemoryArchived / triggerDecay / resolveConflicts
  *   [A9] 追加 listActiveMemoriesByTag(晋升扫描全量列举;无窗/无 clamp/无上限)。
@@ -28,7 +28,7 @@
  */
 import type { HostMemoryExtractionTurnInput, HostPendingMemoryExtractionTurn, HostRequestParams } from "../../host-contract/index.js";
 import type { CandidateStoreFile, ProcedureUsageStoreFile, PromotionStoreFile } from "./task-distillation.js";
-import type { MemoryActivitySummary, MemoryAtlasResult, MemoryConsolidationWriteResult, MemoryDreamRuntimeProvider, MemoryExtractionItem, MemoryHandlerProvider, MemoryIngestOptions, MemoryLearningSink, MemoryExtractionQueue, MemoryRuntimeHookProvider, MemorySearchOptions, MemorySearchResult, MemoryToolProvider } from "../../runtime/ports/index.js";
+import type { MemoryActivitySummary, MemoryAtlasResult, MemoryConsolidationWriteResult, MemoryDreamRuntimeProvider, MemoryExtractionItem, MemoryHandlerProvider, MemoryIngestOptions, MemoryLearningSink, MemoryExtractionQueue, MemoryRuntimeHookProvider, MemorySearchOptions, MemorySearchResult } from "../../runtime/ports/index.js";
 /**
  * 最小转发口(结构化契约,由 coordinator-owned HostRequestClient 满足)。
  * 只取 request 一个方法:provider 不持有判活/连接生命周期(那归协议 coordinator/client)。
@@ -43,7 +43,7 @@ export interface HostMemoryProviderConfig {
     /** x/host.request client; its service gate runs before send. */
     client: HostRequestRequester;
 }
-export declare class HostMemoryProvider implements MemoryRuntimeHookProvider, MemoryExtractionQueue, MemoryLearningSink, MemoryToolProvider, MemoryHandlerProvider, MemoryDreamRuntimeProvider {
+export declare class HostMemoryProvider implements MemoryRuntimeHookProvider, MemoryExtractionQueue, MemoryLearningSink, MemoryHandlerProvider, MemoryDreamRuntimeProvider {
     private readonly config;
     readonly providerId = "qmemory-host";
     constructor(config: HostMemoryProviderConfig);
@@ -56,12 +56,6 @@ export declare class HostMemoryProvider implements MemoryRuntimeHookProvider, Me
     /** 面外方法护栏:fail-loud,绝不静默回落本地(见文件头)。 */
     private unproxied;
     search(query: string, userId: string, options?: MemorySearchOptions): Promise<MemorySearchResult[]>;
-    addText(text: string, userId: string, options?: MemoryIngestOptions & {
-        category?: string;
-        importance?: number;
-    }): Promise<{
-        memoriesAdded: number;
-    }>;
     /** R3 蒸馏签名 embedding(gateway 调 llmrouter 现算);null = 不可用,调用方降级不炸。 */
     embedText(text: string, signal?: AbortSignal): Promise<number[] | null>;
     ingestExtracted(items: MemoryExtractionItem[], userId: string, options?: MemoryIngestOptions): Promise<MemoryConsolidationWriteResult>;

package/dist/types/skills/memory/memdir.d.ts

@@ -31,7 +31,7 @@ export interface MemdirResult {
     /** Current INDEX.md char usage */
     indexUsage?: string;
 }
-export { isMemoryContentSafe } from "./memory-tool.js";
+export { isMemoryContentSafe } from "./memory-content-safety.js";
 export declare class Memdir {
     private readonly root;
     constructor(projectRoot: string);

package/dist/types/skills/memory/memory-content-safety.d.ts

@@ -0,0 +1 @@
+export declare function isMemoryContentSafe(text: string): boolean;

package/dist/types/skills/permissions/hook-runner.d.ts

@@ -44,9 +44,9 @@ export interface PermissionCheckerDeps {
     /** Getter for current turn ID (changes per turn). */
     getTurnId?: () => string;
     /**
-     * Persist a directory allow-rule across restarts (user picked "始终允许此文件夹").
-     * Wired by the CLI layer to append into the user-level settings.json; optional so
-     * headless/test checkers degrade to session-only memory.
+     * Ask the composition root to persist a directory allow-rule across restarts
+     * (user picked "始终允许此文件夹"). Storage ownership stays outside the
+     * permission checker; headless/test checkers degrade to session-only memory.
      */
     persistPermissionRule?: (rule: {
         pathPrefix: string;

package/dist/types/skills/portable-tool.d.ts

@@ -3,6 +3,7 @@
  * Compatible with OpenAI / Anthropic content array format.
  */
 import type { PermissionRiskLevel } from "../runtime/ports/index.js";
+import type { SemanticToolCapability, ToolIdentity } from "../protocol/wire/index.js";
 export interface ToolContentBlock {
     type: "text" | "image";
     text?: string;
@@ -51,6 +52,8 @@ export interface PortableToolResult {
 export interface PortableTool<TParams = Record<string, unknown>> {
     /** Unique tool name (e.g. "task", "memory"). */
     name: string;
+    /** Canonical internal identity derived at the projection boundary. */
+    identity?: ToolIdentity;
     /** Human-readable label. */
     label: string;
     /**
@@ -64,6 +67,8 @@ export interface PortableTool<TParams = Record<string, unknown>> {
     displayDescription?: LocalizedText;
     /** Tool description shown to the LLM. */
     description: string;
+    /** Structured semantics used by model-based capability discovery and routing. */
+    semanticCapability?: SemanticToolCapability;
     /** JSON Schema object describing the tool's parameters. */
     parameters: Record<string, unknown>;
     /**

package/dist/types/skills/skill-system/skill-lifecycle.d.ts

@@ -19,6 +19,7 @@ export interface SkillLifecycleRecord {
     sourceTier?: "official" | "community";
     riskTier?: "R0" | "R1" | "R2" | "R3";
     artifactDigest?: string;
+    contentTreeDigest?: string;
     registryResourceId?: string;
     registryVersion?: string;
     registrySourceTier?: "official" | "community";

package/dist/types/skills/tools/exec-tool.d.ts

@@ -16,7 +16,7 @@ export declare const EXEC_TOOL_SCHEMA: {
     readonly properties: {
         readonly command: {
             readonly type: "string";
-            readonly description: "Shell command to execute in PowerShell. See the # Environment section for the active edition and path/syntax rules." | "Shell command to execute in bash. Use Unix-style commands (ls, cat, mkdir -p, etc.).";
+            readonly description: "Shell command to execute with the active shell provider. See the # Environment section for its path, version, and syntax rules.";
         };
         readonly description: {
             readonly type: "string";
@@ -80,10 +80,6 @@ export interface ExecToolHost {
      * Returns undefined to disable the OS sandbox (degrade to prompt-only).
      */
     resolveSandbox?(): SandboxConfig | undefined;
-    /** Resolve active private runtime PATH entries at command execution time. */
-    resolveRuntimePathEntries?(): Promise<string[]>;
-    /** Return the current opaque qlogicagent session ID for this exec call. */
-    getSessionId?(): string | undefined;
     /**
      * Interpret a non-zero exit code.
      * E.g. 127 → "command not found", 137 → "killed by SIGKILL".

package/dist/types/skills/tools/shell/command-compatibility.d.ts

@@ -0,0 +1,3 @@
+import type { PowerShellEdition, ShellCommandCompatibilityIssue } from "./shell-provider.js";
+export declare function validatePowerShellCommandCompatibility(command: string, edition?: PowerShellEdition): ShellCommandCompatibilityIssue | null;
+export declare function validateBashCommandCompatibility(command: string): ShellCommandCompatibilityIssue | null;