qlogicagent 2.23.1 → 2.23.3

package/dist/types/host-contract/index.d.ts

@@ -1,15 +1,7 @@
 /**
- * Gateway Host 接口冻结稿(契约包)—— 单一事实源:docs/agent-supervision-interfaces-freeze.md
- *
- * 本文件是 freeze §0-§4/§3.5 的 TypeScript 落型(2026-07-09 冻结,G3′/A1-A3 已闭环;
- * 2026-07-10 Route B 补遗 X1-X7 入约:§13 通知 sink + host-state wire、ProfileConfigService keyId
- * 正名 + revealKey、MemoryProfileService 库面收口——单一事实源 agent-supervision-authority-migration-spec.md)。
- * 消费方:xiaozhiclaw-runtime gateway(实现方)+ qlogicagent agent 侧(GatewayDelegateRelay client)。
- * 冻结纪律:接口不随实现漂移;任何字段/签名改动必须回评审(review-gate-checklist),
- * S2 施工 lane 不得自行修改本文件。
- *
- * 标注 [S1 补定] 的辅助类型是 freeze 引用但未给定义的最小结构,属 S1 评审点,
- * 其字段以 freeze 正文/recon 注释为据;实现 lane 负责与现状 store 形状做映射。
+ * Public Gateway Host contract consumed by xiaozhiclaw-runtime and qlogicagent.
+ * This file is the executable contract authority; current composition roots and tests are the
+ * implementation evidence. Historical migration drafts are not compatibility contracts.
  */
 import { type ModelPurpose } from "@xiaozhiclaw/module-sdk/model-access";
 import type { CapabilityRequirementV1 } from "@xiaozhiclaw/module-sdk";
@@ -23,14 +15,14 @@ export * from "./memory-category.js";
 export type { AcpContentBlock, AcpResourceContents } from "./acp-content.js";
 /** agent 逻辑身份(小智自身也是一个 agentId="qlogicagent")。自身 vs 第三方仅由此值决定(F2)。 */
 export type AgentId = string;
-/** 确定性派生的项目主键(freeze §11.4#2,抄 VSCode getWorkspaceId)。绝不随机、绝不裸路径。 */
+/** 确定性派生的项目主键(current contract,抄 VSCode getWorkspaceId)。绝不随机、绝不裸路径。 */
 export type ProjectId = string;
 /** 会话稳定身份(创建即恒定,session-identity-alignment-spec)。 */
 export type CanonicalSessionId = string;
 /** 能力实例种类。 */
 export type MemberKind = "chat" | "product-leader" | "product-worker" | "goal-leader" | "solo-racer" | "workflow-node";
 /**
- * 能力实例的结构化 handle(freeze §11.4#3,抄 VSCode ExtensionRunningLocation)。可判等、可字符串化。
+ * 能力实例的结构化 handle(current contract,抄 VSCode ExtensionRunningLocation)。可判等、可字符串化。
  * 取代今天各特性自造的 memberId 串(chat-* / product-*:*:* / goal-*:leader / solo-* / workflow-agent-*)。
  */
 export interface MemberHandle {
@@ -54,10 +46,10 @@ export interface SessionContext {
     projectId: ProjectId;
     /** 项目/worktree 工作目录 */
     cwd: string;
-    /** 仅 native-cwd agent(codex/claude)有意义(freeze §11.4#5:传输层重连令牌,不承担状态恢复) */
+    /** 仅 native-cwd agent(codex/claude)有意义(current contract:传输层重连令牌,不承担状态恢复) */
     resumeNativeId?: string;
 }
-/** sendTurn 的统一返回(freeze §11.1:消灭"外部对象 / 内部字符串"双形态)。 */
+/** sendTurn 的统一返回(current contract:消灭"外部对象 / 内部字符串"双形态)。 */
 export interface TurnResult {
     content: string;
     stopReason?: string;
@@ -68,10 +60,10 @@ export interface TurnResult {
     /** 仅诊断,永不进入下游解析输入 */
     diagnostics?: unknown;
 }
-/** agent 实例存活/失败状态(freeze §5.1 判活 + §5.3 fail-loud)。 */
+/** agent 实例存活/失败状态(current contract 判活 + §5.3 fail-loud)。 */
 export type AgentInstanceState = "starting" | "ready" | "busy" | "unresponsive" | "exited";
 /**
- * 结构化失败归类(freeze §4 E3:失败一律结构化明示,不得降级成裸 error 串)。
+ * 结构化失败归类(current contract E3:失败一律结构化明示,不得降级成裸 error 串)。
  * UNKNOWN = 无法归类时的显式兜底:禁止硬塞错误 code,也禁止因归不了类降级成裸串。
  */
 export declare const LIFECYCLE_CODES: readonly ["CANCELLED", "PROCESS_EXIT", "HEARTBEAT_TIMEOUT", "TURN_TIMEOUT", "PROTOCOL_MISMATCH", "UNKNOWN"];
@@ -95,7 +87,7 @@ export interface AgentSpec {
     systemPrompt?: string;
     /** Gateway materialized, session-scoped non-secret model/permission profile. */
     profile?: ResolvedSpawnProfile;
-    /** 三态鉴权由 CredentialResolver 按 agentId 解析后显式传入(freeze §6.2);不糊在 envOverrides,明文不进事件/日志 */
+    /** 三态鉴权由 CredentialResolver 按 agentId 解析后显式传入(current contract);不糊在 envOverrides,明文不进事件/日志 */
     credentials?: ResolvedCredentials;
     /** 仅非密的运行覆盖(如 solo 自身分支 QLOGICAGENT_WORKTREE_WORKDIR/SOLO_LEAN) */
     envOverrides?: Record<string, string>;
@@ -124,7 +116,7 @@ export interface TurnInput {
 }
 /**
  * 中立监督每个 agent 进程(小智自身 + 第三方对等),不嵌套。
- * 判活=ACK 响应性(freeze §5.1,内部实现,不暴露方法名清单)。失败=结构化事件(§5.3),不静默杀。
+ * 判活=ACK 响应性(current contract,内部实现,不暴露方法名清单)。失败=结构化事件(§5.3),不静默杀。
  *
  * 不变式(冻结):
  * - F1 单注册:一个 memberKey(handle) 至多一个实例(池化种类按 key 复用)。
@@ -135,7 +127,7 @@ export interface TurnInput {
  * - F6 判活地板 = "任意协议消息计活"(§6.3);我方 agent 可另加 ping 作补充、不作地板。
  */
 export interface AgentSupervisor {
-    /** 确保 handle 对应实例在跑(不在则 spawn,池化种类复用)。能力 endpoint 由 CapabilityService 统一注入(C2)。 */
+    /** 确保 handle 对应实例在跑(不在则 spawn,池化种类复用)。Host capabilities 由 session-bound projection 注入。 */
     ensure(handle: MemberHandle, spec: AgentSpec): Promise<void>;
     /**
      * 向实例发一个回合,流式事件经 subscribe 回流,最终 resolve 统一 TurnResult。取代 processManager.sendTask。
@@ -224,7 +216,7 @@ export type ProjectAgentSessionEntry = {
 };
 /**
  * 拥有会话存储 + 项目作用域 + agentId 绑定 + canonical↔native 映射 + 生命周期状态。
- * 唯一权威(不与 qlogicagent 并存)。崩溃恢复靠网关持有并重放(freeze §11.4#5)。
+ * 唯一权威(不与 qlogicagent 并存)。崩溃恢复靠网关持有并重放(current contract)。
  *
  * 不变式(冻结):
  * - S1 绑定权威唯一在网关;canonical id 创建即恒定。
@@ -269,75 +261,13 @@ export interface SessionProjectService {
     recordLifecycle(sessionId: CanonicalSessionId, ev: LifecycleEvent): void;
     replayStateTo(handle: MemberHandle, sessionId: CanonicalSessionId): Promise<void>;
 }
-export interface CapabilityEndpoint {
-    /** 唯一规范名(astraclaw;不再双别名,C1) */
-    serverName: string;
-    transport: "stdio" | "ipc";
-    /** 网关稳定 endpoint */
-    address: string;
-    /** 演进用 */
-    version?: string;
-    /** token 放 ref、不放明文;由 gateway/CredentialResolver 解析。qlogicagent 只消费、不维护 registry。 */
-    auth?: {
-        kind: "none";
-    } | {
-        kind: "bearerRef";
-        ref: string;
-    };
-}
-/** [S1 补定] 已装技能引用(host 注册表成员)。 */
-export interface SkillRef {
-    name: string;
-    description?: string;
-    version?: string;
-    enabled: boolean;
-    /** provenance(catalog 安装 / 本地创建 / 晋升产物等) */
-    source?: string;
-}
-/** [S1 补定] MCP 连接器引用。 */
-export interface ConnectorRef {
-    serverName: string;
-    tools: string[];
-    transport?: string;
-}
-/** [S1 补定] host 管理的安装请求(装一次,全员共享;VSCode 扩展模型)。 */
-export interface InstallRequest {
-    kind: "skill" | "mcp";
-    id: string;
-    version?: string;
-    source?: string;
-}
-/**
- * 拥有已装技能 + MCP 连接器的注册表 + 内容;对网关监督的每个 agent(含小智)统一注入一个能力 endpoint。
- *
- * 不变式(冻结):
- * - C1 单注册:能力 server 唯一规范名,绝不注册第二别名。
- * - C2 注入点唯一:能力注入只在 Supervisor spawn 处经本服务一处发生。
- * - C3 内容 host 持有、使用 agent 侧:技能内容/连接器 config 归网关注册表;执行仍在 agent、经此 endpoint。
- */
-export interface CapabilityService {
-    /** 供 Supervisor 在 spawn 每个 agent 时统一注入的能力接入点(对小智自己也走同一 endpoint)。 */
-    getEndpoint(forAgent: AgentId, session: SessionContext): CapabilityEndpoint;
-    /** MCP 连接器:发现 + 调用(mcp_connectors_list / mcp_tool_call 的后端)。 */
-    listConnectors(session: SessionContext): ConnectorRef[];
-    callConnector(toolName: string, args: unknown): Promise<{
-        content: unknown;
-        structuredContent?: unknown;
-        _meta?: unknown;
-        isError?: boolean;
-        imageUrls?: string[];
-    }>;
-    /** host 管理的安装(装一次,全员共享)。 */
-    install(ref: InstallRequest): Promise<void>;
-    uninstall(id: string): Promise<void>;
-}
 /** CredentialResolver —— 三态鉴权解析(G1)。token 传 ref,明文不进事件/日志。 */
 export interface CredentialResolver {
     resolve(agentId: AgentId, ownerId: string): ResolvedCredentials;
     /** bearerRef → 实际 token,仅在注入 spawn env 的边界解引用 */
     deref(ref: string): string;
 }
-/** [Route B X5] 单把 key 的 wire 视图(keyId 寻址;key 材料只给掩码,明文走 revealKey)。 */
+/** 单把 key 的 wire 视图(keyId 寻址;key 材料只给掩码,明文走 revealKey)。 */
 export interface ProviderKeyInfo {
     keyId: string;
     /** 掩码展示(maskApiKey 语义);明文绝不进列表面 */
@@ -351,7 +281,7 @@ export interface ProviderInfo {
     name?: string;
     hasKey: boolean;
     enabled: boolean;
-    /** [Route B X5] keyId 级子清单(一 provider 多 key);B2 profile lane 按 wire 真实形状收紧(X3) */
+    /** keyId 级子清单；一个 provider 可以配置多把 key。 */
     keys?: ProviderKeyInfo[];
 }
 /** settings.addKey 的原子提交选项；只承载非密元数据/替换策略。 */
@@ -422,7 +352,7 @@ export interface ProfileConfigService {
     };
     listProviders(ownerId: string): ProviderInfo[];
     /**
-     * [Route B X5 正名] keyId 粒度(wire 真实粒度;一 provider 多 key,原 provider 级签名是 S1 臆造面)。
+     * keyId 粒度；一个 provider 可以配置多把 key。
      * 返回新铸 keyId。prepare 阶段完成目录解析/候选探针，commit 阶段重读最新 settings 后只做一次
      * 原子替换；失败不改变旧文件/旧 key enabled 状态。[X4 过渡] 本刀仍按 legacy 形态把材料直存
      * settings.json，ref 化另批完成。明文绝不进入日志、事件或通知。
@@ -435,7 +365,7 @@ export interface ProfileConfigService {
     /** [X5] 按 keyId 启停单把 key。false=未找到(不写盘)。 */
     toggleKey(ownerId: string, keyId: string, on: boolean): boolean;
     /**
-     * [Route B X4] UI 显式索取明文(wire settings.getKey/copyKey 的唯一后端;剪贴板副作用移前端)。
+     * UI 显式索取明文；剪贴板副作用由前端负责。
      * 红线:返回值绝不经 HostNotificationSink 广播、绝不落日志/事件;ref 期在此边界 deref(VSCode
      * ISecretStorageService 同构:main 持密文,显式 API 解密返回调用方)。未找到 throw(fail-loud)。
      */
@@ -1125,6 +1055,10 @@ export interface HostSkillLifecycleRecord {
     registryRiskTier?: "R0" | "R1" | "R2" | "R3";
     registryEffectiveRiskTier?: "R0" | "R1" | "R2" | "R3";
     registryKeptSignalAt?: string;
+    /** Short, verified model-routing metadata. It describes when the Skill is useful, not how to run it. */
+    routingSummary?: string;
+    /** Optional catalog grouping metadata; it never triggers invocation. */
+    capabilityClass?: string;
     [extra: string]: unknown;
 }
 /** Gateway 对同一技能 store 的只读快照条目。active 只叠加全局/项目禁用，不叠 turn 工具条件。 */
@@ -1705,6 +1639,14 @@ export interface HostApplyCuratorPlanResult {
 }
 export type HostSkillInstallRiskTier = "R0" | "R1" | "R2" | "R3";
 export type HostSkillReplacementPolicy = "managed-unmodified" | "user-confirmed";
+export interface HostSkillCredentialDescriptor {
+    key: string;
+    label: string;
+    envKey: string;
+    placeholder?: string;
+    secret?: boolean;
+    helpUrl?: string;
+}
 export interface HostPrepareSkillInstallParams {
     name: string;
     version: string;
@@ -1721,6 +1663,14 @@ export interface HostPrepareSkillInstallParams {
     manifestSchemaVersion: 18;
     manifestDigest: `sha256:${string}`;
     requiredCapabilities: CapabilityRequirementV1[];
+    /** Optional in the wire contract for compatibility with schema-18 callers predating secure setup. */
+    credentials?: HostSkillCredentialDescriptor[];
+    /** Verified catalog terms used only for installed Skill recall. */
+    searchTerms?: string[];
+    /** Verified, single-line routing summary projected in the complete Skill directory. */
+    routingSummary?: string;
+    /** Optional catalog grouping metadata; it is never an invocation rule. */
+    capabilityClass?: string;
 }
 export interface HostPrepareSkillInstallResult {
     installationId: string;

package/dist/types/orchestration/solo-evaluator.d.ts

@@ -105,11 +105,11 @@ export declare class SoloEvaluator {
      */
     start(params: SoloStartParams): Promise<string>;
     /**
-     * 激活层(S3c §1.5):gateway-routed delegate 路径 —— 竞速者回合经网关代派(x/delegate),不本地
+     * 激活层(active Host path §1.5):gateway-routed delegate 路径 —— 竞速者回合经网关代派(x/delegate),不本地
      * spawn。同 handle(solo-racer/soloId/agentId/seq)⇒ supervisor 按 memberKey 复用同一竞速者进程与
      * ACP 会话:初赛 → follow-up → 评比全程上下文连续(取代旧「watchdog reap + 按需 re-spawn」循环,
      * worktree 文件仍是 durable state)。cwd=worktree;self 竞速者的 QLOGICAGENT_WORKTREE_WORKDIR /
-     * QLOGICAGENT_SOLO_LEAN 由 gateway 按 kind=solo-racer 派生注入(AgentSpec.envOverrides,freeze §1
+     * QLOGICAGENT_SOLO_LEAN 由 gateway 按 kind=solo-racer 派生注入(AgentSpec.envOverrides,current contract
      * —— descriptor/env 注入在 qla 侧退场,env 是监督者按成员种类决定的启动器不变量,非调用方入参)。
      * usage 由 TurnResult.usage 承(不再读共享 PM 的 usage tracker)。
      */

package/dist/types/protocol/wire/acp-protocol.d.ts

@@ -73,7 +73,7 @@ export interface AcpQlogicagentCapability {
     /** Multi-agent orchestration (solo / product / team). */
     orchestration?: boolean;
     /**
-     * T9 capability 握手 gate(S3a 跨进程 delegate 传输;host→agent 声明位)。
+     * T9 capability 握手 gate(delegate transport 跨进程 delegate 传输;host→agent 声明位)。
      * host(gateway)声明「我服务 gateway-routed delegate」——即由 GatewayDelegateServer 认
      * `x/delegate` 请求、下行 `x/delegate.update` 回流帧。qlogicagent(leader)【仅当】收到此位才走
      * DelegateClient sends x/delegate only when this bit is present. If omitted, orchestration is

package/dist/types/protocol/wire/index.d.ts

@@ -5,7 +5,7 @@ export { type ChatMessage, type ChatMessageRole, type ContextAnchor, type Contex
 export { type AgentRpcMethodMap, type ProductInstanceDef, type ProductPhase, type ProductStatus, type ProductSummary, type ProductTaskDef, type ProductTaskStatus, type SoloAgentResult, type SoloAgentState, type SoloState, type SoloStatus, } from "./agent-methods.js";
 export type * from "./acp-agent-management.js";
 export { AGENT_TEAM_WS_EVENT_NAMES, AGENT_WS_EVENT_NAMES, ALL_AGENT_WS_EVENT_NAMES, type AgentTeamWsEventName, type AgentWsEventName, type AllAgentWsEventName, } from "./agent-events.js";
-export { type AgentSource, type ArtifactType, type CapabilityRoutingEvidence, type MediaResultType, type MemoryDecayCompletedNotification, type MemoryUpdatedNotification, type NotificationMethod, type NotificationMethodMap, type NotificationThreadItem, type ThreadItemNotification, type PermissionRuleUpdatedNotification, type PlanInterruptedNotification, type PongNotification, type ProductBudgetUpdateNotification, type ProductBudgetWarningNotification, type ProductCheckpointedNotification, type ProductCompletedNotification, type ProductDagTopologyNotification, type ProductTaskCompletedNotification, type ProductTaskFailedNotification, type ProductTaskOutputDeltaNotification, type ProductMembersNotification, type ProductAgentActivityNotification, type ProductTaskStartedNotification, type ProjectArchivedNotification, type ProjectCreatedNotification, type ProjectDeletedNotification, type ProjectDetachedNotification, type ProjectAttachedNotification, type ProjectRenamedNotification, type ProjectSwitchedNotification, type ProjectUnarchivedNotification, type SessionInfoNotification, type SessionRecoveryPendingNotification, type SoloAgentDeltaNotification, type SoloAgentUsageNotification, type SoloEvaluationNotification, type SoloProgressNotification, type TeamMemberNotification, type ToolApprovalRequestNotification, type TurnAnnotationsNotification, type TurnArtifactContractNotification, type TurnArtifactNotification, type TurnAskUserNotification, type TurnDeltaNotification, type TurnEndNotification, type TurnErrorNotification, type TurnExecProgressNotification, type TurnHeartbeatNotification, type TurnMediaResultNotification, type TurnPlanUpdateNotification, type TurnProgressNotification, type TurnReasoningDeltaNotification, type TurnRecoveryNotification, type TurnSidechainCompletedNotification, type TurnSidechainStartedNotification, type TurnSkillAcquisitionNeededNotification, type TurnStartNotification, type TurnSubagentActivityNotification, type TurnSubagentActivityStatus, type TurnSubagentCompletedNotification, type TurnSubagentDecisionNotification, type TurnSubagentDeltaNotification, type TurnSubagentEndedNotification, type TurnSubagentEvidenceItem, type TurnSubagentStartedNotification, type TurnSubagentTokenUsage, type TurnSuggestionsNotification, type TurnTaskUpdatedNotification, type TurnTodosUpdatedNotification, type TurnToolBlockedNotification, type TurnToolCallNotification, type TurnToolResultNotification, type TurnToolSelectionPolicyNotification, type ToolCallExecutionEvidence, type FinalAnswerEvidence, type TurnToolUseSummaryNotification, type TurnUsageUpdateNotification, type WireTokenUsage, type ProductPlanReadyNotification, type ProductPlanFailedNotification, type ProductPlanningDeltaNotification, type ProductLeaderMessageNotification, type ProductPlanningAskNotification, type MentionDelegateStartedNotification, type MentionDelegateActivityNotification, type MentionDelegateSettledNotification, type WorkflowDeletedNotification, type WorkflowRecordNotification, type WorkflowRunCompletedNotification, type WorkflowRunFailedNotification, type WorkflowRunStartedNotification, } from "./notification-payloads.js";
+export { type AgentSource, type ArtifactType, type MediaResultType, type MemoryDecayCompletedNotification, type MemoryUpdatedNotification, type NotificationMethod, type NotificationMethodMap, type NotificationThreadItem, type ThreadItemNotification, type PermissionRuleUpdatedNotification, type PlanInterruptedNotification, type PongNotification, type ProductBudgetUpdateNotification, type ProductBudgetWarningNotification, type ProductCheckpointedNotification, type ProductCompletedNotification, type ProductDagTopologyNotification, type ProductTaskCompletedNotification, type ProductTaskFailedNotification, type ProductTaskOutputDeltaNotification, type ProductMembersNotification, type ProductAgentActivityNotification, type ProductTaskStartedNotification, type ProjectArchivedNotification, type ProjectCreatedNotification, type ProjectDeletedNotification, type ProjectDetachedNotification, type ProjectAttachedNotification, type ProjectRenamedNotification, type ProjectSwitchedNotification, type ProjectUnarchivedNotification, type SessionInfoNotification, type SessionRecoveryPendingNotification, type SoloAgentDeltaNotification, type SoloAgentUsageNotification, type SoloEvaluationNotification, type SoloProgressNotification, type TeamMemberNotification, type ToolApprovalRequestNotification, type TurnAnnotationsNotification, type TurnArtifactContractNotification, type TurnArtifactNotification, type TurnAskUserNotification, type TurnDeltaNotification, type TurnEndNotification, type TurnErrorNotification, type TurnExecProgressNotification, type TurnHeartbeatNotification, type TurnMediaResultNotification, type TurnPlanUpdateNotification, type TurnProgressNotification, type TurnReasoningDeltaNotification, type TurnRecoveryNotification, type TurnSidechainCompletedNotification, type TurnSidechainStartedNotification, type TurnSkillAcquisitionNeededNotification, type TurnStartNotification, type TurnSubagentActivityNotification, type TurnSubagentActivityStatus, type TurnSubagentCompletedNotification, type TurnSubagentDecisionNotification, type TurnSubagentDeltaNotification, type TurnSubagentEndedNotification, type TurnSubagentEvidenceItem, type TurnSubagentStartedNotification, type TurnSubagentTokenUsage, type TurnSuggestionsNotification, type TurnTaskUpdatedNotification, type TurnTodosUpdatedNotification, type TurnToolBlockedNotification, type TurnToolCallNotification, type TurnToolResultNotification, type TurnToolSelectionPolicyNotification, type ToolCallExecutionEvidence, type FinalAnswerEvidence, type TurnToolUseSummaryNotification, type TurnUsageUpdateNotification, type WireTokenUsage, type ProductPlanReadyNotification, type ProductPlanFailedNotification, type ProductPlanningDeltaNotification, type ProductLeaderMessageNotification, type ProductPlanningAskNotification, type MentionDelegateStartedNotification, type MentionDelegateActivityNotification, type MentionDelegateSettledNotification, type WorkflowDeletedNotification, type WorkflowRecordNotification, type WorkflowRunCompletedNotification, type WorkflowRunFailedNotification, type WorkflowRunStartedNotification, } from "./notification-payloads.js";
 export { ACP_EXTENDED_METHODS, ACP_EXTENDED_SESSION_UPDATE_TYPES, ACP_METHODS, ACP_PROTOCOL_VERSION, ACP_SESSION_UPDATE_TYPES, isAcpJsonRpcNotification, isAcpJsonRpcRequest, isAcpJsonRpcResponse, isExtendedSessionUpdateType, isStandardSessionUpdateType, parseAcpMessage, type AcpAgentCapabilities, type AcpAgentMessageChunkPayload, type AcpAgentThoughtChunkPayload, type AcpConfigOptionDescriptor, type AcpConfigOptionUpdatePayload, type AcpContentBlock, type AcpEndTurnPayload, type AcpExtendedMethod, type AcpExtendedSessionUpdateType, type AcpFsReadTextFileParams, type AcpFsReadTextFileResult, type AcpFsWriteTextFileParams, type AcpFsWriteTextFileResult, type AcpHostCapabilities, type AcpInitializeParams, type AcpInitializeResult, type AcpJsonRpcError, type AcpJsonRpcMessage, type AcpJsonRpcNotification, type AcpJsonRpcRequest, type AcpJsonRpcResponse, type AcpMode, type AcpPermissionOption, type AcpPermissionRequestParams, type AcpPermissionRequestResult, type AcpPlanPayload, type AcpSessionCancelParams, type AcpSessionCloseParams, type AcpSessionMeta, type AcpSessionLoadParams, type AcpSessionModeState, type AcpSessionNewParams, type AcpSessionNewResult, type AcpSessionPromptParams, type AcpSessionPromptResult, type AcpSessionSetConfigParams, type AcpSessionUpdateNotification, type AcpSessionUpdateType, type AcpStandardMethod, type AcpStandardSessionUpdateType, type AcpStopReason, type AcpToolCallPayload, type AcpToolCallUpdatePayload, type AcpUsage, type AcpUsageUpdatePayload, type AcpXSessionInfoPayload, type AcpXSkillInstructionPayload, } from "./acp-protocol.js";
 export { type ApprovalRequiredToolContract, type ModelSelectionReason, type PendingPromptContract, type RuntimeCapabilitySummaryContract, type RuntimeSessionContract, type SessionIdentityContract, } from "./session.js";
 export { CAPABILITY_MANIFEST_DIFF_SECTIONS, cloneCapabilityManifestSnapshot, createCapabilityManifestDiffPayload, deriveCapabilityToolNamespaces, deriveCapabilityWorkspaceIds, mergeCapabilityManifestSnapshot, type CapabilityManifestApprovalMode, type CapabilityManifestApprovalPolicyContract, type CapabilityManifestDiffSection, type CapabilityMcpManifestContract, type CapabilityManifestSnapshotContract, type HostCapabilitySnapshotContract, type CapabilityPluginManifestContract, type RuntimeCapabilityViewContract, type RuntimeToolEligibilityContract, type CapabilitySkillManifestContract, type CapabilityToolManifestContract, type CapabilityWorkspaceSummaryContract, type ToolEligibilityResolvedSource, type ToolEligibilityReasonCode, type ToolEligibilityStatus, } from "./capability-manifest.js";

package/dist/types/protocol/wire/notification-payloads.d.ts

@@ -328,7 +328,6 @@ export interface TurnToolUseSummaryNotification {
     telemetrySource?: "agent";
     ledgerSchemaVersion: 4;
     toolCalls: ToolCallExecutionEvidence[];
-    routingEvidence?: CapabilityRoutingEvidence;
     finalAnswerEvidence: FinalAnswerEvidence;
     availableToolNames: string[];
     enabledToolNames: string[];
@@ -338,27 +337,16 @@ export interface TurnToolUseSummaryNotification {
         reason: string;
     }>;
 }
-/** Typed turn ownership and authorized tool-surface telemetry. */
-export interface CapabilityRoutingEvidence {
-    schemaVersion: 2;
-    owner: "structured-planner" | "direct-response" | "typed-builtin";
-    source: "structured-planner" | "direct-response" | "typed-builtin";
-    routingStatus: "selected";
-    routingReason: string;
-    availableToolCount: number;
-    exposedToolCount: number;
-}
 export interface TurnToolSelectionPolicyNotification {
     turnId: string;
     policyId: string;
-    intent: "capability_routing" | "benchmark_state_maintenance" | "fresh_evidence" | "verification" | "final_answer" | "tool_recovery" | "lifecycle_reconciliation";
+    intent: "benchmark_state_maintenance" | "fresh_evidence" | "verification" | "final_answer" | "tool_recovery" | "lifecycle_reconciliation";
     reason: string;
     availableToolNames: string[];
     enabledToolNamesBefore: string[];
     enabledToolNamesAfter: string[];
     suppressedToolNames: string[];
     nextAction: string;
-    routingEvidence?: CapabilityRoutingEvidence;
 }
 /** Queryable long-horizon turn lifecycle telemetry. */
 export interface TurnLifecycleNotification {

package/dist/types/runtime/config/tunable-defaults.d.ts

@@ -13,9 +13,15 @@
  *
  * Grouping follows subsystem boundaries.
  */
-/** Absolute max rounds any agent can run (hard cap). */
+/**
+ * @deprecated Compatibility value exposed through the legacy tunables profile.
+ * Turn execution is unbounded unless the caller explicitly supplies maxRounds.
+ */
 export declare const MAX_ROUNDS_LIMIT = 100;
-/** Default rounds for a top-level agent turn. */
+/**
+ * @deprecated Compatibility value exposed through the legacy tunables profile.
+ * It is not applied as an implicit top-level turn limit.
+ */
 export declare const DEFAULT_MAX_ROUNDS = 25;
 /** Default temperature for LLM calls (0 = deterministic). */
 export declare const DEFAULT_TEMPERATURE = 0;
@@ -29,10 +35,10 @@ export declare const DEFAULT_TOOL_EXECUTION_TIMEOUT_MS: number;
 export declare const MAX_CONSECUTIVE_FAILURES = 3;
 /** Max times the exact same (tool_name, arguments) pair can repeat. */
 export declare const MAX_IDENTICAL_CALL_REPEATS = 2;
-/** Max times the same tool can fail with different args before blocking (variant-loop detection).
- *  Includes both hard failures (ok=false) and soft empty results (e.g. "No matches found").
- *  Note: blocked calls still emit tool_call events, so effective max attempts visible to
- *  client = MAX + 1 (the blocked attempt) + possible 1 alternative tool = MAX + 2. */
+/** Max hard failures for the same normalized target before blocking.
+ *  Generic typed tools use their full canonical arguments, so a corrected schema or payload is a
+ *  different invocation. Search and exec retain their domain-specific normalized target keys.
+ *  Soft-empty results and rejected proposals are not executions and do not consume this budget. */
 export declare const MAX_TOOL_VARIANT_FAILURES = 2;
 /** Default context window size (tokens). */
 export declare const DEFAULT_CONTEXT_WINDOW_TOKENS = 128000;
@@ -160,7 +166,9 @@ export declare const DREAM_MAX_DURATION_MS = 300000;
  * Used by private X7 host profile tooling and local runtime consumers.
  */
 export interface TunableDefaults {
+    /** @deprecated Compatibility-only; not an implicit execution limit. */
     maxRoundsLimit: number;
+    /** @deprecated Compatibility-only; callers must explicitly set maxRounds. */
     defaultMaxRounds: number;
     defaultTemperature: number;
     maxToolBudgetCap: number;

package/dist/types/runtime/infra/turn-telemetry-store.d.ts

@@ -1,5 +1,5 @@
 import type { HostDelegationTelemetrySummary } from "../../host-contract/index.js";
-import type { CapabilityRoutingEvidence, FinalAnswerEvidence, ToolCallExecutionEvidence } from "../../protocol/wire/notification-payloads.js";
+import type { FinalAnswerEvidence, ToolCallExecutionEvidence } from "../../protocol/wire/notification-payloads.js";
 export type AgentMode = "chat" | "solo" | "product" | "workflow" | "unknown";
 export interface TurnTelemetryUsage {
     inputTokens?: number;
@@ -18,7 +18,6 @@ export interface TurnTelemetryFileContext {
 }
 export interface TurnTelemetryExecutionEvidence {
     ledgerSchemaVersion: 4;
-    routingEvidence?: CapabilityRoutingEvidence;
     toolCalls: ToolCallExecutionEvidence[];
     finalAnswerEvidence: FinalAnswerEvidence;
     availableToolNames: string[];

package/dist/types/runtime/prompt/host-skill-directory.d.ts

@@ -0,0 +1,16 @@
+import type { ToolDefinition } from "../../agent/types.js";
+export type HostSkillDirectoryProjection = {
+    tools: ToolDefinition[];
+    prompt?: undefined;
+    revision?: undefined;
+} | {
+    tools: ToolDefinition[];
+    prompt: string;
+    revision: string;
+};
+/**
+ * Promote the Host's standard MCP Skill directory metadata into first-class model context.
+ * The Host remains the catalog authority and the model remains the selector; this adapter
+ * only prevents a large directory from being buried inside one generic tool description.
+ */
+export declare function projectHostSkillDirectory(tools: readonly ToolDefinition[]): HostSkillDirectoryProjection;

package/dist/types/skills/mcp/mcp-manager.d.ts

@@ -42,7 +42,7 @@ export interface McpServerEntry {
         include?: string[];
         exclude?: string[];
     };
-    /** Per-tool invocation budget for this server (1s..10min). */
+    /** Per-tool invocation budget for this server (1s..30min). */
     callTimeoutMs?: number;
 }
 export interface McpSecurityIssue {
@@ -51,8 +51,8 @@ export interface McpSecurityIssue {
 }
 /**
  * A configured server that is not currently serving tools. Surfaced (not just logged)
- * so capability queries (e.g. mcp_connectors_list) can disclose "configured but unavailable"
- * instead of the server silently vanishing from the tool pool.
+ * so inventory diagnostics can disclose "configured but unavailable" instead of the
+ * server silently vanishing from the projected tool pool.
  */
 export interface McpServerFailure {
     name: string;
@@ -73,6 +73,14 @@ export interface McpManagerConfig {
 }
 export declare function resolveMcpCallTimeoutMs(value: number | undefined): number;
 export declare function withMcpDeadline<T>(operation: Promise<T>, timeoutMs: number, label: string): Promise<T>;
+/**
+ * Propagate the agent turn's cancellation into mcporter. Runtime.callTool does
+ * not accept an AbortSignal, so closing the affected server is the public
+ * transport boundary that terminates the in-flight request and its stdio
+ * process tree. The next invocation reconnects through the normal mcporter
+ * runtime path.
+ */
+export declare function callMcpToolWithAbort(runtime: Runtime, serverName: string, toolName: string, options: Parameters<Runtime["callTool"]>[2], signal?: AbortSignal): Promise<Awaited<ReturnType<Runtime["callTool"]>>>;
 /**
  * Read the authoritative MCP tools/list payload from mcporter's public
  * connection boundary. mcporter's convenience listTools() intentionally
@@ -173,7 +181,7 @@ export declare function toPortableResult(result: unknown, _source?: {
     args?: Record<string, unknown>;
 }): PortableToolResult;
 export declare function validateMcpToolWorkspaceBoundary(toolName: string, args: unknown, workspaceRoot: string | undefined): string | null;
-export declare function parseMcpConfig(json: unknown): McpServerEntry[];
+export declare function parseMcpServerMap(json: unknown): McpServerEntry[];
 export declare function filterMcpTools<T extends {
     name: string;
 }>(tools: readonly T[], filter?: McpServerEntry["tools"]): T[];

package/dist/types/skills/memory/host-memory-provider.d.ts

@@ -1,11 +1,11 @@
 /**
- * HostMemoryProvider —— qlogicagent 大脑对 memories.db 的存取反转(Route B B3;X7 brain proxy)。
+ * HostMemoryProvider —— qlogicagent 通过 Host request 访问 Host-owned memories.db。
  *
  * Gateway Memory 权威公开面的 **proxy 实现**:大脑逻辑(dream/distill/晋升/consolidation/召回 hook)
  * 零改动,底下的存取经 `x/host.request`(HostRequestClient)打到 gateway 四权威 host 服务(memory 域),
  * store(memories.db)只有 gateway 进程打开。
  *
- * 单一事实源:docs/agent-supervision-authority-migration-spec.md §3.1;契约 host-contract §13
+ * 契约权威:host-contract §13
  * (HostRequestParams;wire 形态 = { service:"memory", method, params:<位置参数数组> })。
  *
  * 【PROXY 共享面(以 host-contract 常量为准;两仓照此表,一字不差)】

package/dist/types/skills/memory/task-distillation.d.ts

@@ -12,7 +12,7 @@
  * (task-distill-candidates / promotion-proposals / procedure-usage,均 A 域)的读写权威
  * 已全部归 gateway MemoryProfileService(唯一写者);qlogicagent 大脑经 HostMemoryProvider
  * proxy 的 read/write{DistillCandidates,PromotionProposals,ProcedureUsage} 存取,本文件只提供
- * 采集/聚类/晋升的确定性算法。单一事实源 docs/agent-supervision-authority-migration-spec.md。
+ * 采集/聚类/晋升的确定性算法由本模块及其测试锁定。
  */
 import { type HubSkillCategory } from "../skill-system/skill-category.js";
 import type { ProcedureVerificationEvidence } from "../../host-contract/index.js";

package/dist/types/skills/tools/shell/command-classification.d.ts

@@ -1,53 +1,17 @@
-/** Commands that search/find content (collapsible in UI). */
 export declare const SEARCH_COMMANDS: Set<string>;
-/** Commands that read/display file content (collapsible in UI). */
 export declare const READ_COMMANDS: Set<string>;
-/** Commands that list directory contents. */
 export declare const LIST_COMMANDS: Set<string>;
-/**
- * Commands that are semantically neutral — they don't interact
- * with the file system in a meaningful way. Skipped when
- * classifying piped commands.
- */
 export declare const SEMANTIC_NEUTRAL_COMMANDS: Set<string>;
-/**
- * Commands that produce no stdout on success.
- * For these, the tool shows "Done" instead of "(No output)".
- */
 export declare const SILENT_COMMANDS: Set<string>;
 export interface CommandClassification {
-    /** First "real" command word (after env vars / wrappers). */
     firstCommand: string | null;
-    /** Whether the command is search-like (find, grep, etc.). */
     isSearch: boolean;
-    /** Whether the command only reads (cat, head, stat, etc.). */
     isRead: boolean;
-    /** Whether the command lists files (ls, tree, du). */
     isList: boolean;
-    /** Whether the command is expected to produce no stdout. */
     isSilent: boolean;
-    /** Whether the command is safe to run in parallel with others. */
     isConcurrencySafe: boolean;
-    /** Whether the command only reads state (never mutates). */
     isReadOnly: boolean;
 }
-/**
- * Check whether a command has any `cd` or pushd/popd that changes CWD.
- * Ported from cc's `commandHasAnyCd()`.
- */
 export declare function commandHasAnyCd(command: string): boolean;
-/**
- * Classify a shell command.
- *
- * Mirrors cc's `isSearchOrReadBashCommand()` + `isSilentBashCommand()`.
- */
 export declare function classifyCommand(command: string): CommandClassification;
-export declare function requiresDedicatedReadSearchTool(classification: CommandClassification): boolean;
-/**
- * Actionable, command-type-specific redirect for a blocked exec command. Spelling out the
- * exact dedicated tool (read for file contents, search for content lookup) lets the model
- * self-correct instead of retrying the same blocked command into a recovery stop. Only
- * called for reads/searches now (directory listing is allowed via exec — see above).
- */
-export declare function dedicatedToolRedirectMessage(classification: CommandClassification): string;
 export declare function commandTargetsBinaryFile(command: string | null): boolean;

package/dist/types/transport/acp-server.d.ts

@@ -131,7 +131,7 @@ export declare class AcpServer {
     private hostSupportsExtendedEvents;
     /** Whether the host supports x/ extended RPC methods */
     private hostSupportsExtendedMethods;
-    /** T9(S3a):host 是否在 initialize 声明服务 gateway-routed delegate(x/delegate 族;设计 §2.4)。 */
+    /** T9(delegate transport):host 是否在 initialize 声明服务 gateway-routed delegate(x/delegate 族;设计 §2.4)。 */
     private hostSupportsDelegate;
     /** Exact host-request capability negotiated during initialize. */
     private negotiatedHostRequestCapability;
@@ -142,7 +142,7 @@ export declare class AcpServer {
     /** Map from outbound JSON-RPC request id -> permissionId for response matching */
     private outboundRequestMap;
     /**
-     * S3a 跨进程 delegate 客户端(泛化本类的 outbound-request 底座;设计 §5.1)。与审批 outboundRequestMap
+     * delegate transport 跨进程 delegate 客户端(泛化本类的 outbound-request 底座;设计 §5.1)。与审批 outboundRequestMap
      * 并存:x/delegate 用 `del-*` rpc id,审批用 `perm-*`,handleResponse 先问 delegate 再落审批,互不干扰。
      * All orchestration stations call this client through the authority-neutral DelegateBridge.
      */
@@ -177,7 +177,7 @@ export declare class AcpServer {
     get supportsExtendedEvents(): boolean;
     /** Whether the host supports extended methods */
     get supportsExtendedMethods(): boolean;
-    /** T9(S3a):host 是否声明服务 gateway-routed delegate(gate;设计 §2.4)。 */
+    /** T9(delegate transport):host 是否声明服务 gateway-routed delegate(gate;设计 §2.4)。 */
     get supportsDelegate(): boolean;
     /** Exact service check over the initialize capability; no boolean/prefix fallback. */
     supportsHostRequestService(service: HostRequestService): boolean;

package/dist/types/transport/delegate-client.d.ts

@@ -1,8 +1,8 @@
 /**
- * DelegateClient —— qlogicagent(leader)侧的跨进程 delegate 传输客户端(S3a lane impl-transport-qla)。
+ * DelegateClient —— qlogicagent(leader)侧的跨进程 delegate 传输客户端(delegate transport lane impl-transport-qla)。
  *
  * 契约单一事实源:host-contract §12 DelegateWire(冻结,严禁本文件自改契约)。
- * 设计单一事实源:docs/agent-supervision-s3a-transport-design.md(§3 帧 / §4 保序背压取消失败 / §5.1 两端职责)。
+ * Wire authority:host-contract §12 DelegateWire；行为由本文件及其 contract tests 锁定。
  *
  * 方向倒置(设计 §1):今天 qlogicagent→gateway 唯一 outbound 请求 = session/request_permission
  * (acp-server.ts:247 requestPermission)。本客户端泛化该 outbound-request 底座,新增:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "qlogicagent",
-  "version": "2.23.1",
+  "version": "2.23.3",
   "packageManager": "pnpm@10.23.0",
   "description": "XiaozhiClaw Agent CLI — subprocess architecture (JSON-RPC over stdio)",
   "type": "module",
@@ -170,8 +170,8 @@
   "dependencies": {
     "@agentclientprotocol/sdk": "^0.25.0",
     "@napi-rs/canvas": "0.1.100",
-    "@xiaozhiclaw/module-sdk": "0.3.1",
-    "@xiaozhiclaw/provider-core": "0.1.33",
+    "@xiaozhiclaw/module-sdk": "0.4.0",
+    "@xiaozhiclaw/provider-core": "0.1.34",
     "ajv": "8.20.0",
     "better-sqlite3": "^12.10.0",
     "dotenv": "^17.3.1",

package/dist/types/agent/tool-loop/tool-budget-continuation-policy.d.ts

@@ -1,45 +0,0 @@
-/**
- * 工具/轮数预算的「进度门控续跑」策略（A）。
- *
- * 默认工具预算(DEFAULT_TOOL_BUDGET)和轮数预算(DEFAULT_MAX_ROUNDS)对「建一个完整 app/游戏」这类
- * 任务偏低,撞上就被迫收尾、任务半成品。本策略把预算从「写死的硬停」改成「软检查点 + 可续跑」:
- * 预算耗尽时,若本轮窗口**确有进度**(产出了新的成功工具结果)且**没卡在循环里**(AP5 同款:同一文件
- * 反复读),就再续一个窗口;否则停。续跑次数和绝对硬顶(MAX_*_CAP)双重封顶,杜绝失控。
- *
- * 与既有 token 预算续跑(budget-continuation-policy.ts)同构,只是进度信号换成「成功工具调用增量」、
- * 失控信号换成「读循环」。纯函数,便于单测。
- */
-/** 一轮 turn 内最多续跑次数 —— 与 token 续跑的 MAX_BUDGET_CONTINUATIONS 对齐。 */
-export declare const MAX_TOOL_BUDGET_CONTINUATIONS = 5;
-export interface ToolBudgetContinuationInput {
-    /** 当前工具调用预算(可能已被前几次续跑抬高过)。 */
-    currentToolBudget: number;
-    /** 当前轮数预算。 */
-    currentRoundBudget: number;
-    /** 工具调用绝对硬顶(失控兜底)。 */
-    toolHardCap: number;
-    /** 轮数绝对硬顶。 */
-    roundHardCap: number;
-    /** 已续跑次数。 */
-    continuationCount: number;
-    /** 上个检查点以来新增的「成功且非空」工具结果数 —— 进度信号。 */
-    successfulSinceLastCheck: number;
-    /** 文件读取计数(AP5 读循环检测,失控信号)。 */
-    fileReadCounts: ReadonlyMap<string, number>;
-    /** 每次续跑给工具预算加的窗口(= DEFAULT_TOOL_BUDGET)。 */
-    windowTools: number;
-    /** 每次续跑给轮数预算加的窗口(= DEFAULT_MAX_ROUNDS)。 */
-    windowRounds: number;
-}
-export interface ToolBudgetContinuationDecision {
-    nextToolBudget: number;
-    nextRoundBudget: number;
-    continuationCount: number;
-}
-/**
- * 决定是否续跑。返回 null = 不续(应停下并诚实收尾);返回 decision = 续跑(把预算抬到 next*)。
- *
- * 停的条件(任一):①续跑次数用满;②两个预算都已到硬顶;③本窗口零进度(没新增成功结果);
- * ④卡在读循环。其余情况续跑,但每个预算都不超过各自硬顶。
- */
-export declare function resolveToolBudgetContinuation(input: ToolBudgetContinuationInput): ToolBudgetContinuationDecision | null;