qlogicagent 2.23.4 → 2.23.6

package/dist/types/agent/tool-loop.d.ts

@@ -72,6 +72,8 @@ export interface ToolLoopParams {
      * or the same array reference if unchanged.
      */
     refreshTools?: () => ToolDefinition[];
+    /** Exact tool names whose full schemas must be activated by tool_schema_load. */
+    deferredToolNames?: readonly string[];
     /**
      * Drain user guidance queued MID-TURN (队列"运行中引导"). Called at the top of
      * every loop round; each returned string is appended as a user message before

package/dist/types/agent/types.d.ts

@@ -97,11 +97,14 @@ export interface TurnRequest {
     memoryRecallPrefetch?: MemoryRecallPrefetch;
     /** Full registered tool surface before per-turn policy filtering. */
     availableTools?: ToolDefinition[];
+    /** Exact tool names whose full parameter schemas are loaded only after Agent selection. */
+    deferredToolNames?: string[];
     tools: ToolDefinition[];
     /**
      * Live tool-manifest rebuild, consulted each loop iteration (turnCount > 1).
-     * Lets a tool registered mid-turn (e.g. an MCP server finishing connection)
-     * become callable in the SAME turn instead of only on the next user message.
+     * It may retract or restore tools from the turn's initial authoritative snapshot.
+     * Newly registered tools become visible on the next user turn so they cannot bypass
+     * the complete directory, schema deferral, or permission snapshot for this turn.
      */
     refreshTools?: () => ToolDefinition[];
     /**

package/dist/types/cli/acp-session-handlers.d.ts

@@ -1,5 +1,5 @@
 import type { AcpSessionHost } from "./acp-session-host.js";
-import { type AcpInitializeParams, type AcpInitializeResult, type AcpSessionCloseParams, type AcpSessionLoadParams, type AcpSessionMeta, type AcpSessionNewParams, type AcpSessionNewResult, type AcpSessionPromptParams, type AcpSessionPromptResult, type AcpSessionSetConfigParams } from "../protocol/wire/index.js";
+import { type AcpInitializeParams, type AcpInitializeResult, type AcpSessionCloseParams, type AcpSessionLoadParams, type AcpSessionMeta, type AcpSessionNewParams, type AcpSessionNewResult, type AcpSessionPromptParams, type AcpSessionPromptResult, type AcpSessionSetConfigParams, type AcpSessionSetConfigResult } from "../protocol/wire/index.js";
 export type { AcpSessionHost };
 /**
  * Resolve the _meta a prompt must inherit: prefer the meta registered for THIS session (session/new)
@@ -36,7 +36,7 @@ export declare function tryDispatchCommand(host: AcpSessionHost, params: AcpSess
 }>;
 export declare function handleAcpSessionPrompt(host: AcpSessionHost, params: AcpSessionPromptParams): Promise<AcpSessionPromptResult>;
 export declare function handleAcpSessionClose(host: AcpSessionHost, params: AcpSessionCloseParams): Promise<void>;
-export declare function handleAcpSessionSetConfig(host: AcpSessionHost, params: AcpSessionSetConfigParams): Promise<void>;
+export declare function handleAcpSessionSetConfig(host: AcpSessionHost, params: AcpSessionSetConfigParams): Promise<AcpSessionSetConfigResult>;
 export declare function handleAcpSessionSetModel(host: AcpSessionHost, _sessionId: string, model: string): Promise<void>;
 /**
  * Standard ACP session/set_mode: validate the requested permission mode and record it on the

package/dist/types/cli/acp-session-host.d.ts

@@ -25,6 +25,7 @@ export interface MaterializedSessionBinding extends SessionLlmConfig {
 }
 /** Gateway-materialized session-private profile. apiKey exists in memory only. */
 export interface MaterializedSessionProfile {
+    bindingRevision: string;
     bindings: Record<string, MaterializedSessionBinding>;
     permissions: Record<string, unknown>;
 }

package/dist/types/cli/handlers/turn-handler.d.ts

@@ -107,22 +107,10 @@ export declare function hydrateAttachmentReferenceUrlsForTurn(messages: ChatMess
  */
 export declare function augmentLastUserMessageContent(messages: ChatMessage[], modelContext: string): ChatMessage[];
 export declare function getLatestUserTextForTurn(messages: readonly ChatMessage[]): string;
-/**
- * Insert the per-turn DOMAIN guidance block as a SYSTEM-role message immediately BEFORE the
- * last user message (LLM view only) — the prompt-cache alignment path.
- *
- * The domain block carries markdown headers ("# Doing Tasks"), the word "artifact", and example
- * file paths — baking it into the user message
- * would poison the user-intent scans (final-marker extraction, artifact counting, round/tool
- * budgets) that read `role === "user"` content. A system message keeps the model bound to the
- * guidance while staying invisible to those scans. Kept out of the system PROMPT so a domain
- * switch never re-encodes the byte-stable prefix or the conversation history. The original
- * array/objects are never mutated.
- */
 /**
  * Two-layer memory INDEX block for the per-turn conversation channel (global
  * owner cheat-sheet first, then project notes; injected before the last user
- * message next to the domain block). Living here instead of the system prompt
+ * message). Living here instead of the system prompt
  * is deliberate: INDEX content changes whenever Host project memory is updated,
  * and as a volatile system-prompt section every update re-encoded the byte-stable
  * prefix plus the whole conversation history on the next turn. In the per-turn
@@ -130,7 +118,7 @@ export declare function getLatestUserTextForTurn(messages: readonly ChatMessage[
  */
 export declare function buildMemoryIndexBlock(globalBlock: string | null, projectBlock: string | null): string | null;
 export declare function buildMemoryIndexAdmissionReceipt(globalBlock: string | null, projectBlock: string | null, sessionId: string, turnId: string): Record<string, unknown> | null;
-export declare function injectDomainGuidanceBeforeLastUser(messages: ChatMessage[], domainGuidance: string): ChatMessage[];
+export declare function injectContextBeforeLastUser(messages: ChatMessage[], context: string): ChatMessage[];
 export declare function refreshPermissionCheckerToolMeta(permissionChecker: PermissionMetadataResolver | null | undefined, tools: ToolDefinition[]): void;
 export declare function handleUserResponse(this: TurnControlHandlerHost, msg: AgentRpcRequest): void;
 interface ModalityRegistryView {

package/dist/types/cli/stdio-server.d.ts

@@ -59,7 +59,7 @@ export declare class StdioServer {
      * and never touched by it.
      */
     private readonly resolvedAgent;
-    /** Active session/turn identity + lifecycle (id/turn/state/taskDomain/llmConfig/acpMeta). */
+    /** Active session/turn identity + lifecycle (id/turn/state/llmConfig/acpMeta). */
     private readonly session;
     taskStore: TaskStore;
     /** Unified background execution registry (agent forks + backgrounded shell commands). */

package/dist/types/cli/turn-core.d.ts

@@ -13,6 +13,8 @@ export interface TurnCoreRequest {
     messages: ChatMessage[];
     /** Full registered tool surface before per-turn policy filtering. */
     availableTools?: ToolDefinition[];
+    /** Exact capability names whose full schemas are loaded only after Agent selection. */
+    deferredToolNames?: string[];
     tools: ToolDefinition[];
     /** Live tool-manifest rebuild for same-turn activation (forwarded to the loop). */
     refreshTools?: () => ToolDefinition[];

package/dist/types/contracts/tool-schema-load.d.ts

@@ -0,0 +1,6 @@
+export declare const TOOL_SCHEMA_LOAD_TOOL_NAME = "tool_schema_load";
+export interface ToolSchemaLoadDetails extends Record<string, unknown> {
+    type: "tool_schema_load";
+    requestedToolNames: string[];
+}
+export declare function toolSchemaLoadNames(details: Record<string, unknown> | undefined): string[];

package/dist/types/protocol/wire/acp-protocol.d.ts

@@ -241,6 +241,18 @@ export interface AcpSessionSetConfigParams {
     option: string;
     value: unknown;
 }
+/**
+ * Semantic acknowledgement for a session-private configuration write.
+ * `bindingRevision` is present for the Host-owned profile projection and lets
+ * the Host prove that the exact materialization sent after session/load was
+ * committed before it admits a prompt.
+ */
+export interface AcpSessionSetConfigResult {
+    applied: true;
+    sessionId: string;
+    option: string;
+    bindingRevision?: string;
+}
 /**
  * The `session/update` notification params.
  * Standard format: { sessionId, update: { sessionUpdate: "<type>", ...payload } }

package/dist/types/protocol/wire/index.d.ts

@@ -6,7 +6,7 @@ export { type AgentRpcMethodMap, type ProductInstanceDef, type ProductPhase, typ
 export type * from "./acp-agent-management.js";
 export { AGENT_TEAM_WS_EVENT_NAMES, AGENT_WS_EVENT_NAMES, ALL_AGENT_WS_EVENT_NAMES, type AgentTeamWsEventName, type AgentWsEventName, type AllAgentWsEventName, } from "./agent-events.js";
 export { type AgentSource, type ArtifactType, type MediaResultType, type MemoryDecayCompletedNotification, type MemoryUpdatedNotification, type NotificationMethod, type NotificationMethodMap, type NotificationThreadItem, type ThreadItemNotification, type PermissionRuleUpdatedNotification, type PlanInterruptedNotification, type PongNotification, type ProductBudgetUpdateNotification, type ProductBudgetWarningNotification, type ProductCheckpointedNotification, type ProductCompletedNotification, type ProductDagTopologyNotification, type ProductTaskCompletedNotification, type ProductTaskFailedNotification, type ProductTaskOutputDeltaNotification, type ProductMembersNotification, type ProductAgentActivityNotification, type ProductTaskStartedNotification, type ProjectArchivedNotification, type ProjectCreatedNotification, type ProjectDeletedNotification, type ProjectDetachedNotification, type ProjectAttachedNotification, type ProjectRenamedNotification, type ProjectSwitchedNotification, type ProjectUnarchivedNotification, type SessionInfoNotification, type SessionRecoveryPendingNotification, type SoloAgentDeltaNotification, type SoloAgentUsageNotification, type SoloEvaluationNotification, type SoloProgressNotification, type TeamMemberNotification, type ToolApprovalRequestNotification, type TurnAnnotationsNotification, type TurnArtifactContractNotification, type TurnArtifactNotification, type TurnAskUserNotification, type TurnDeltaNotification, type TurnEndNotification, type TurnErrorNotification, type TurnExecProgressNotification, type TurnHeartbeatNotification, type TurnMediaResultNotification, type TurnPlanUpdateNotification, type TurnProgressNotification, type TurnReasoningDeltaNotification, type TurnRecoveryNotification, type TurnSidechainCompletedNotification, type TurnSidechainStartedNotification, type TurnSkillAcquisitionNeededNotification, type TurnStartNotification, type TurnSubagentActivityNotification, type TurnSubagentActivityStatus, type TurnSubagentCompletedNotification, type TurnSubagentDecisionNotification, type TurnSubagentDeltaNotification, type TurnSubagentEndedNotification, type TurnSubagentEvidenceItem, type TurnSubagentStartedNotification, type TurnSubagentTokenUsage, type TurnSuggestionsNotification, type TurnTaskUpdatedNotification, type TurnTodosUpdatedNotification, type TurnToolBlockedNotification, type TurnToolCallNotification, type TurnToolResultNotification, type TurnToolSelectionPolicyNotification, type ToolCallExecutionEvidence, type FinalAnswerEvidence, type TurnToolUseSummaryNotification, type TurnUsageUpdateNotification, type WireTokenUsage, type ProductPlanReadyNotification, type ProductPlanFailedNotification, type ProductPlanningDeltaNotification, type ProductLeaderMessageNotification, type ProductPlanningAskNotification, type MentionDelegateStartedNotification, type MentionDelegateActivityNotification, type MentionDelegateSettledNotification, type WorkflowDeletedNotification, type WorkflowRecordNotification, type WorkflowRunCompletedNotification, type WorkflowRunFailedNotification, type WorkflowRunStartedNotification, } from "./notification-payloads.js";
-export { ACP_EXTENDED_METHODS, ACP_EXTENDED_SESSION_UPDATE_TYPES, ACP_METHODS, ACP_PROTOCOL_VERSION, ACP_SESSION_UPDATE_TYPES, isAcpJsonRpcNotification, isAcpJsonRpcRequest, isAcpJsonRpcResponse, isExtendedSessionUpdateType, isStandardSessionUpdateType, parseAcpMessage, type AcpAgentCapabilities, type AcpAgentMessageChunkPayload, type AcpAgentThoughtChunkPayload, type AcpConfigOptionDescriptor, type AcpConfigOptionUpdatePayload, type AcpContentBlock, type AcpEndTurnPayload, type AcpExtendedMethod, type AcpExtendedSessionUpdateType, type AcpFsReadTextFileParams, type AcpFsReadTextFileResult, type AcpFsWriteTextFileParams, type AcpFsWriteTextFileResult, type AcpHostCapabilities, type AcpInitializeParams, type AcpInitializeResult, type AcpJsonRpcError, type AcpJsonRpcMessage, type AcpJsonRpcNotification, type AcpJsonRpcRequest, type AcpJsonRpcResponse, type AcpMode, type AcpPermissionOption, type AcpPermissionRequestParams, ACP_PERMISSION_PRESENTATION_META_KEY, type AcpPermissionPresentationMetaV1, type AcpPermissionRequestResult, type AcpPlanPayload, type AcpSessionCancelParams, type AcpSessionCloseParams, type AcpSessionMeta, type AcpSessionLoadParams, type AcpSessionModeState, type AcpSessionNewParams, type AcpSessionNewResult, type AcpSessionPromptParams, type AcpSessionPromptResult, type AcpSessionSetConfigParams, type AcpSessionUpdateNotification, type AcpSessionUpdateType, type AcpStandardMethod, type AcpStandardSessionUpdateType, type AcpStopReason, type AcpToolCallPayload, type AcpToolCallUpdatePayload, type AcpUsage, type AcpUsageUpdatePayload, type AcpXSessionInfoPayload, type AcpXSkillInstructionPayload, } from "./acp-protocol.js";
+export { ACP_EXTENDED_METHODS, ACP_EXTENDED_SESSION_UPDATE_TYPES, ACP_METHODS, ACP_PROTOCOL_VERSION, ACP_SESSION_UPDATE_TYPES, isAcpJsonRpcNotification, isAcpJsonRpcRequest, isAcpJsonRpcResponse, isExtendedSessionUpdateType, isStandardSessionUpdateType, parseAcpMessage, type AcpAgentCapabilities, type AcpAgentMessageChunkPayload, type AcpAgentThoughtChunkPayload, type AcpConfigOptionDescriptor, type AcpConfigOptionUpdatePayload, type AcpContentBlock, type AcpEndTurnPayload, type AcpExtendedMethod, type AcpExtendedSessionUpdateType, type AcpFsReadTextFileParams, type AcpFsReadTextFileResult, type AcpFsWriteTextFileParams, type AcpFsWriteTextFileResult, type AcpHostCapabilities, type AcpInitializeParams, type AcpInitializeResult, type AcpJsonRpcError, type AcpJsonRpcMessage, type AcpJsonRpcNotification, type AcpJsonRpcRequest, type AcpJsonRpcResponse, type AcpMode, type AcpPermissionOption, type AcpPermissionRequestParams, ACP_PERMISSION_PRESENTATION_META_KEY, type AcpPermissionPresentationMetaV1, type AcpPermissionRequestResult, type AcpPlanPayload, type AcpSessionCancelParams, type AcpSessionCloseParams, type AcpSessionMeta, type AcpSessionLoadParams, type AcpSessionModeState, type AcpSessionNewParams, type AcpSessionNewResult, type AcpSessionPromptParams, type AcpSessionPromptResult, type AcpSessionSetConfigParams, type AcpSessionSetConfigResult, type AcpSessionUpdateNotification, type AcpSessionUpdateType, type AcpStandardMethod, type AcpStandardSessionUpdateType, type AcpStopReason, type AcpToolCallPayload, type AcpToolCallUpdatePayload, type AcpUsage, type AcpUsageUpdatePayload, type AcpXSessionInfoPayload, type AcpXSkillInstructionPayload, } from "./acp-protocol.js";
 export { type ApprovalRequiredToolContract, type ModelSelectionReason, type PendingPromptContract, type RuntimeCapabilitySummaryContract, type RuntimeSessionContract, type SessionIdentityContract, } from "./session.js";
 export { CAPABILITY_MANIFEST_DIFF_SECTIONS, cloneCapabilityManifestSnapshot, createCapabilityManifestDiffPayload, deriveCapabilityToolNamespaces, deriveCapabilityWorkspaceIds, mergeCapabilityManifestSnapshot, type CapabilityManifestApprovalMode, type CapabilityManifestApprovalPolicyContract, type CapabilityManifestDiffSection, type CapabilityMcpManifestContract, type CapabilityManifestSnapshotContract, type HostCapabilitySnapshotContract, type CapabilityPluginManifestContract, type RuntimeCapabilityViewContract, type RuntimeToolEligibilityContract, type CapabilitySkillManifestContract, type CapabilityToolManifestContract, type CapabilityWorkspaceSummaryContract, type ToolEligibilityResolvedSource, type ToolEligibilityReasonCode, type ToolEligibilityStatus, } from "./capability-manifest.js";
 export { WEB_ACTION_SCOPE_VALUES, WEB_APPROVAL_DEFAULT_VALUES, WEB_CAPABILITY_FAMILY_VALUES, WEB_CAPABILITY_ID_VALUES, WEB_DEGRADATION_TARGET_VALUES, WEB_ESCALATION_REASON_VALUES, WEB_EXECUTION_MODE_VALUES, WEB_POLICY_RISK_CLASS_VALUES, WEB_RETRY_POLICY_VALUES, WEB_STATEFULNESS_VALUES, WEB_TASK_MODE_VALUES, type WebActionScope, type WebApprovalDefault, type WebCapabilityDescriptorContract, type WebCapabilityFamily, type WebCapabilityId, type WebDegradationTarget, type WebEscalationReason, type WebExecutionMode, type WebPolicyRiskClass, type WebRetryPolicy, type WebStatefulness, type WebTaskMode, type ToolRiskLevel, } from "./web-capability.js";

package/dist/types/runtime/infra/context-ledger.d.ts

@@ -0,0 +1,27 @@
+import type { ChatMessage, ToolDefinition } from "../../agent/types.js";
+export declare function toolDefinitionChars(tools: readonly ToolDefinition[]): number;
+export declare function messageHistoryChars(messages: readonly ChatMessage[]): number;
+export declare function nativePromptCacheKey(input: {
+    systemPrompt: string;
+    capabilityRevision: string;
+    provider?: string;
+    model?: string;
+}): string;
+export interface ContextLedgerSnapshot {
+    systemChars: number;
+    capabilityDirectoryChars: number;
+    residentToolDefinitionChars: number;
+    deferredToolDefinitionChars: number;
+    historyChars: number;
+    memoryChars: number;
+    cacheKeyId: string;
+}
+export declare function buildContextLedgerSnapshot(input: {
+    systemPrompt: string;
+    capabilityDirectory: string;
+    residentTools: readonly ToolDefinition[];
+    deferredToolDefinitionChars: number;
+    messages: readonly ChatMessage[];
+    memoryChars: number;
+    promptCacheKey: string;
+}): ContextLedgerSnapshot;

package/dist/types/runtime/prompt/capability-schema-directory.d.ts

@@ -0,0 +1,17 @@
+import type { ToolDefinition } from "../../agent/types.js";
+export declare const MAX_RESIDENT_PARAMETER_SCHEMA_CHARS = 1024;
+export interface CapabilitySchemaDirectoryProjection {
+    allTools: ToolDefinition[];
+    residentTools: ToolDefinition[];
+    deferredToolNames: string[];
+    prompt: string;
+    revision: `sha256:${string}`;
+    stats: {
+        allDefinitionChars: number;
+        residentDefinitionChars: number;
+        deferredDefinitionChars: number;
+        directoryChars: number;
+    };
+}
+export declare function shouldDeferToolSchema(tool: ToolDefinition): boolean;
+export declare function projectCapabilitySchemaDirectory(tools: readonly ToolDefinition[]): CapabilitySchemaDirectoryProjection;

package/dist/types/runtime/prompt/environment-context.d.ts

@@ -1,102 +1,18 @@
 /**
- * Environment Context — CC environment-aware system prompt parity.
+ * Compact, cache-stable facts and authority boundaries for each Agent turn.
  *
- * Injects OS, shell, CWD, and platform info into the system prompt
- * so the agent can generate platform-appropriate commands.
- *
- * CC reference: ShellSnapshot.ts (shell type detection),
- *               shellCompletion.ts (platform-aware command generation)
- *
- * This is a system prompt section that provides:
- *   - OS name + version
- *   - Shell type (bash/powershell/zsh)
- *   - Current working directory
- *   - Node.js version
- *   - Available package managers
+ * Capability meaning belongs to tool-owned metadata. Workflow knowledge belongs
+ * to selected Skills. This module must not become a second routing or playbook layer.
  */
 import { type SystemPromptSection } from "./system-prompt-sections.js";
-import type { TaskDomain } from "./task-domain.js";
 export type ShellType = "bash" | "powershell" | "zsh" | "cmd" | "fish" | "unknown";
-/**
- * Structural snapshot of the shell provider that `exec()` actually drives.
- *
- * Defined LOCALLY (not imported from src/skills/tools/shell) on purpose: the
- * runtime/prompt layer must not depend on the skills layer (architecture
- * boundary). The CLI layer, which may import both, reads the real snapshot via
- * `getActiveShellInfo()` and passes it in here; TS structural typing makes the
- * shapes compatible without a cross-layer import.
- */
 export interface ShellInfo {
     type: "bash" | "powershell";
     shellPath?: string;
     psEdition?: "5.1" | "7+";
     isGitBashOnWindows?: boolean;
 }
-/**
- * Dynamic, platform-specific shell guidance lines appended to `# Environment`.
- *
- * When `shellInfo` is present it reflects the REAL active shell (edition +
- * Git-Bash-on-Windows), so the advice matches what commands will actually run
- * against. When absent, we fall back to the env-guessed `shellType` and keep the
- * old one-line PowerShell/CMD note (never crashes, never over-claims an edition
- * we don't know).
- */
-export declare function shellGuidanceLines(shellInfo: ShellInfo | undefined, shellType: ShellType): string[];
-/**
- * Create a system prompt section that provides environment context.
- * Memoized — computed once per session (environment doesn't change mid-session).
- *
- * @param cwdOverride  Working directory to report (defaults to process.cwd()).
- * @param shellInfo    Real active-shell facts from the provider (via the CLI).
- *                     When omitted, the `- Shell:` line and guidance fall back to
- *                     `detectShellType()` (env-based guess). The shell identity is
- *                     folded into the memoize key so a different shell doesn't
- *                     serve a stale cached section for the same cwd.
- */
 export declare function createEnvironmentContextSection(cwdOverride?: string, shellInfo?: ShellInfo): SystemPromptSection;
-/**
- * Domain-specific guidance ONLY — the small, genuinely per-turn-variable block.
- * Excludes universalGuidance() (which is domain-INVARIANT and lives in its own
- * stable section, see createUniversalGuidanceSection). This is the single source
- * of truth for domain content, so the combined section and the split sections
- * never drift.
- *
- * @param domain - Task domain from auto-detection or host override.
- */
-export declare function renderDomainGuidanceBlock(domain?: TaskDomain): string[];
-/**
- * Universal (domain-INVARIANT) working-approach guidance as a STABLE (memoized)
- * system section. Byte-identical every turn regardless of the detected domain, so
- * it belongs in the cacheable system-prompt prefix. The per-turn domain block
- * (renderDomainGuidanceBlock) is deliberately NOT part of this section — it is
- * injected as a system message right before the last user message so the system
- * prompt stays byte-stable when the detected domain switches.
- */
 export declare function createUniversalGuidanceSection(): SystemPromptSection;
-/**
- * Create a system prompt section that provides tool usage guidance.
- * CC parity: matches claude-code's getUsingYourToolsSection().
- * Tells the LLM when to use specialized tools vs. primitives.
- */
-export declare function createToolGuidanceSection(): SystemPromptSection;
-/**
- * Create a system prompt section that instructs the model on response language.
- * CC parity: only injected when language is explicitly set; when absent,
- * the model follows the user's message language naturally.
- *
- * Key rule: always respond in the SAME language as the user's current message.
- * This prevents confusion when system prompt contains mixed-language content
- * (e.g., Chinese INDEX.md + English tool guidance).
- */
 export declare function createLanguageSection(language?: string): SystemPromptSection;
-/**
- * Detect the response language from the user's current-turn text so the strong
- * explicit-language branch of createLanguageSection actually fires.
- *
- * The soft "mirror the user" fallback is not enough for weaker models: buried
- * under a wall of English guidance, they drift to English even for a Chinese
- * prompt. Naming the language ("Always respond in 简体中文") is the load-bearing
- * signal. Han characters present -> Chinese; otherwise undefined (let the soft
- * fallback handle English/other, which weak models already mirror fine).
- */
 export declare function detectResponseLanguage(userText: string): string | undefined;

package/dist/types/runtime/prompt/prompt-policy.d.ts

@@ -1,4 +1,4 @@
-export declare const PROMPT_POLICY_VERSION = 1;
+export declare const PROMPT_POLICY_VERSION = 2;
 export interface PromptPolicyRegistryEntry {
     id: string;
     version: number;

package/dist/types/runtime/prompt/system-prompt-sections.d.ts

@@ -39,7 +39,7 @@ export declare function resolveSystemPromptSections(sections: SystemPromptSectio
  */
 export declare function clearSystemPromptSections(): void;
 export interface SystemPromptAssemblyOptions {
-    /** Include the current prompt policy version header. Defaults to true. */
+    /** Include internal prompt-policy metadata for diagnostics. Defaults to false. */
     includePromptPolicy?: boolean;
     /** Base system prompt (from Gateway config) */
     basePrompt?: string;

package/dist/types/skills/permissions/hook-runner.d.ts

@@ -11,6 +11,8 @@ export interface PermissionCheckerDeps {
     hookRegistry: HookRegistry;
     /** Returns the current workspace root for operation classification. */
     getWorkspaceRoot(): string;
+    /** Host-owned, session-scoped roots that read-only tools may consume directly. */
+    getTrustedReadRoots?: () => readonly string[];
     /**
      * Callback to send an approval request to the host (Gateway/Electron).
      * Must return a promise that resolves when the user responds.
@@ -63,6 +65,7 @@ export declare class PermissionChecker {
     private readonly ruleEngine;
     private readonly hookRegistry;
     private readonly getWorkspaceRoot;
+    private readonly getTrustedReadRoots;
     private readonly onRequestApproval;
     private readonly onDenied;
     private readonly classifierLLMCall;

package/dist/types/skills/permissions/operation-classifier.d.ts

@@ -24,6 +24,8 @@ export interface OperationClassification {
 }
 export interface ClassifyContext {
     workspaceRoot: string;
+    /** Host-owned, session-scoped roots that read-only tools may consume without a user prompt. */
+    trustedReadRoots?: readonly string[];
 }
 /**
  * Canonical set of shell-command tool names. This is the single source of truth,

package/dist/types/skills/tools/tool-schema-load-tool.d.ts

@@ -0,0 +1,6 @@
+import { type PortableTool } from "../portable-tool.js";
+interface ToolSchemaLoadParams {
+    toolNames: string[];
+}
+export declare function createToolSchemaLoadTool(): PortableTool<ToolSchemaLoadParams>;
+export {};

package/dist/types/skills/tools.d.ts

@@ -6,8 +6,9 @@
  * module-level functions below remain as a compatibility facade for older
  * bootstrap paths while those call sites are migrated.
  *
- * All registered tools are resident: every enabled tool is offered to the model
- * each turn (hermes-aligned). There is no deferral / on-demand discovery.
+ * The registry owns complete executable definitions. Prompt projection may keep
+ * large parameter schemas non-resident until the Agent explicitly expands an
+ * exact capability name; execution still resolves here through the original tool.
  */
 import type { PortableTool } from "./portable-tool.js";
 import type { ToolDefinition } from "../protocol/wire/index.js";

package/dist/types/transport/acp-server.d.ts

@@ -17,7 +17,7 @@
  * existing internal handlers.
  */
 import type { Transport } from "./io-transport.js";
-import { type AcpInitializeParams, type AcpInitializeResult, type AcpSessionNewParams, type AcpSessionLoadParams, type AcpSessionNewResult, type AcpSessionPromptParams, type AcpSessionPromptResult, type AcpSessionCloseParams, type AcpSessionSetConfigParams, type AcpSessionUpdateType, type AcpPermissionRequestParams, type AcpPermissionRequestResult } from "../protocol/wire/index.js";
+import { type AcpInitializeParams, type AcpInitializeResult, type AcpSessionNewParams, type AcpSessionLoadParams, type AcpSessionNewResult, type AcpSessionPromptParams, type AcpSessionPromptResult, type AcpSessionCloseParams, type AcpSessionSetConfigParams, type AcpSessionSetConfigResult, type AcpSessionUpdateType, type AcpPermissionRequestParams, type AcpPermissionRequestResult } from "../protocol/wire/index.js";
 import { DelegateClient } from "./delegate-client.js";
 import type { HostRequestClient } from "./host-request-client.js";
 import { type HostRequestService } from "../host-contract/index.js";
@@ -43,7 +43,7 @@ export interface AcpRequestHandler {
     handleAcpSessionNew(params: AcpSessionNewParams): Promise<AcpSessionNewResult>;
     handleAcpSessionPrompt(params: AcpSessionPromptParams): Promise<AcpSessionPromptResult>;
     handleAcpSessionClose(params: AcpSessionCloseParams): Promise<void>;
-    handleAcpSessionSetConfig(params: AcpSessionSetConfigParams): Promise<void>;
+    handleAcpSessionSetConfig(params: AcpSessionSetConfigParams): Promise<AcpSessionSetConfigResult>;
     handleAcpSessionSetModel(sessionId: string, model: string): Promise<void>;
     handleAcpSessionSetMode(sessionId: string, modeId: string): Promise<string>;
     handleAcpSessionLoad(params: AcpSessionLoadParams): Promise<{

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "qlogicagent",
-  "version": "2.23.4",
+  "version": "2.23.6",
   "packageManager": "pnpm@10.23.0",
   "description": "XiaozhiClaw Agent CLI — subprocess architecture (JSON-RPC over stdio)",
   "type": "module",

package/dist/types/runtime/prompt/task-domain.d.ts

@@ -1,20 +0,0 @@
-/**
- * Task-domain guidance is a Host-owned typed choice, not a language classifier.
- * User text is intentionally not inspected for keywords or regular expressions.
- */
-export type TaskDomain = "coding" | "office" | "creative" | "general";
-/**
- * Kept as a compatibility-neutral pure function for callers that only have text.
- * Without a typed Host decision the safe domain is always general.
- */
-export declare function detectTaskDomain(_userText: string): TaskDomain;
-export interface DomainResolutionContext {
-    /** Host-provided typed override from thread.turn params. */
-    hostOverride?: TaskDomain;
-    /** Current user text is accepted for API stability but never classified. */
-    userText: string;
-}
-export declare function resolveTaskDomain(ctx: DomainResolutionContext): {
-    domain: TaskDomain;
-    source: "host-override" | "default";
-};