qlogicagent 2.24.1 → 2.24.2

package/dist/types/protocol/wire/memory-provider-lifecycle.d.ts

@@ -1,31 +0,0 @@
-import type { AgentExecutionRefs } from "./transport.js";
-export declare const MEMORY_OBSERVATION_HOOK_VALUES: readonly ["prefetch", "sync_turn", "on_pre_compress", "on_session_end", "on_delegation", "on_memory_write"];
-export type MemoryObservationHook = (typeof MEMORY_OBSERVATION_HOOK_VALUES)[number];
-export declare const MEMORY_OBSERVATION_SOURCE_VALUES: readonly ["turn", "sidechain", "compress", "session-end", "agent-remember", "auto-extract", "implicit-extract", "profile-extraction", "dream"];
-export type MemoryObservationSource = (typeof MEMORY_OBSERVATION_SOURCE_VALUES)[number];
-export declare const MEMORY_WRITE_ACCESS_VALUES: readonly ["observe-only", "parent-write", "deny"];
-export type MemoryWriteAccess = (typeof MEMORY_WRITE_ACCESS_VALUES)[number];
-export interface MemoryContextBlock {
-    id?: string;
-    providerId: string;
-    kind: "informational-background";
-    title?: string;
-    text: string;
-    citations?: string[];
-}
-export interface MemoryObservationEnvelope extends AgentExecutionRefs {
-    sessionId: string;
-    turnId?: string;
-    hook: MemoryObservationHook;
-    source: MemoryObservationSource;
-    writeAccess: MemoryWriteAccess;
-    summary?: string;
-    metadata?: Record<string, unknown>;
-}
-export interface MemoryObservedPayload extends MemoryObservationEnvelope {
-    providerId: string;
-    observedAtMs: number;
-    status: "observed" | "failed";
-    blocks?: MemoryContextBlock[];
-    error?: string;
-}

package/dist/types/protocol/wire/turn.d.ts

@@ -1,208 +0,0 @@
-import type { AgentExecutionRefs, TransportResponsePayload, TransportUsageInfo, TransportBillingInfo } from "./transport.js";
-import type { ModelSelectionReason } from "./session.js";
-import type { TransportCapabilitySummaryContract, TransportApprovalRequiredToolHintEntry, TransportToolEligibilitySummaryEntry, ToolExecutionStepContext, ToolInvokeApprovalDescriptor, AgentTurnConversation, AgentTurnExperience, AgentTurnRequestSpec, AgentTurnLocalContext, AgentTurnClientHints } from "./capability-transport.js";
-export interface AgentTurnStartPayload extends AgentExecutionRefs {
-    sessionId: string;
-    turnId: string;
-    deviceId?: string;
-    principalId?: string;
-    entitlementId?: string;
-    subscriptionKey?: string;
-    conversation: AgentTurnConversation;
-    experience?: AgentTurnExperience;
-    request?: AgentTurnRequestSpec;
-    localContext?: AgentTurnLocalContext;
-    clientHints?: AgentTurnClientHints;
-}
-export interface AgentTurnStartMsg extends AgentTurnStartPayload {
-    type: "agent.turn.start";
-    id: string;
-}
-export interface AgentTurnThinkingPayload extends AgentExecutionRefs {
-    sessionId: string;
-    turnId: string;
-    stage?: "routing" | "execution" | "tool-wait";
-    message?: string;
-}
-export interface AgentTurnThinkingMsg {
-    type: "agent.turn.thinking";
-    id: string;
-    payload: AgentTurnThinkingPayload;
-}
-export interface AgentTurnDeltaPayload extends AgentExecutionRefs {
-    sessionId: string;
-    turnId: string;
-    chunk: string;
-}
-export interface AgentTurnDeltaMsg {
-    type: "agent.turn.delta";
-    id: string;
-    payload: AgentTurnDeltaPayload;
-}
-export interface AgentTurnToolPlannedPayload extends AgentExecutionRefs {
-    sessionId: string;
-    turnId: string;
-    callId: string;
-    toolName: string;
-    arguments?: Record<string, unknown>;
-    approvalMode?: "user-confirm" | "pre-authorized";
-}
-export interface AgentTurnToolPlannedMsg {
-    type: "agent.turn.tool-planned";
-    id: string;
-    payload: AgentTurnToolPlannedPayload;
-}
-export interface AgentTurnToolRunningPayload extends AgentExecutionRefs {
-    sessionId: string;
-    turnId: string;
-    callId: string;
-    toolName: string;
-}
-export interface AgentTurnToolRunningMsg {
-    type: "agent.turn.tool-running";
-    id: string;
-    payload: AgentTurnToolRunningPayload;
-}
-export interface AgentTurnCompletedPayload extends AgentExecutionRefs {
-    sessionId: string;
-    turnId: string;
-    outcomeId: string;
-    resolvedModel?: string;
-    modelSelectionReason?: ModelSelectionReason;
-    capabilitySummary?: TransportCapabilitySummaryContract;
-    approvalRequiredToolHint?: TransportApprovalRequiredToolHintEntry[];
-    eligibleToolSummary?: TransportToolEligibilitySummaryEntry[];
-    ineligibleToolSummary?: TransportToolEligibilitySummaryEntry[];
-    response?: TransportResponsePayload;
-    usage?: TransportUsageInfo;
-    billed?: TransportBillingInfo | null;
-}
-export interface AgentTurnCompletedMsg {
-    type: "agent.turn.completed";
-    id: string;
-    payload: AgentTurnCompletedPayload;
-}
-export interface BillingRecordedPayload extends AgentExecutionRefs {
-    sessionId: string;
-    turnId: string;
-    outcomeId: string;
-    billed: TransportBillingInfo;
-}
-export interface BillingRecordedMsg {
-    type: "billing.recorded";
-    id: string;
-    payload: BillingRecordedPayload;
-}
-export interface AgentTurnFailedPayload extends AgentExecutionRefs {
-    sessionId: string;
-    turnId: string;
-    outcomeId: string;
-    code: string;
-    error: string;
-    retryable: boolean;
-}
-export interface AgentTurnFailedMsg {
-    type: "agent.turn.failed";
-    id: string;
-    payload: AgentTurnFailedPayload;
-}
-export interface ToolInvokePlannedPayload extends AgentExecutionRefs, ToolExecutionStepContext {
-    sessionId: string;
-    turnId: string;
-    callId: string;
-    toolName: string;
-    arguments?: Record<string, unknown>;
-    approvalMode?: "user-confirm" | "pre-authorized";
-}
-export interface ToolInvokePlannedMsg {
-    type: "tool.invoke.planned";
-    id: string;
-    payload: ToolInvokePlannedPayload;
-}
-export interface ToolInvokeStartedPayload extends AgentExecutionRefs, ToolExecutionStepContext {
-    sessionId: string;
-    turnId: string;
-    callId: string;
-    toolName: string;
-}
-export interface ToolInvokeStartedMsg {
-    type: "tool.invoke.started";
-    id: string;
-    payload: ToolInvokeStartedPayload;
-}
-export interface ToolInvokeRequestPayload extends AgentExecutionRefs, ToolExecutionStepContext {
-    sessionId: string;
-    turnId: string;
-    callId: string;
-    tool: {
-        name: string;
-        arguments: Record<string, unknown>;
-    };
-    approval?: ToolInvokeApprovalDescriptor;
-}
-export interface ToolInvokeRequestMsg {
-    type: "tool.invoke.request";
-    id: string;
-    payload: ToolInvokeRequestPayload;
-}
-export interface ToolInvokeResultPayload extends AgentExecutionRefs, ToolExecutionStepContext {
-    sessionId: string;
-    turnId: string;
-    callId: string;
-    outcomeId: string;
-    ok: boolean;
-    payload?: unknown;
-    error?: string;
-}
-export interface ToolInvokeResultMsg {
-    type: "tool.invoke.result";
-    id: string;
-    payload: ToolInvokeResultPayload;
-}
-export type LocalExecutionEnvelopeKind = "started" | "partial" | "checkpoint" | "artifact" | "final" | "error";
-export type LocalExecutionEnvelopeStage = "turn" | "tool" | "checkpoint" | "artifact" | "control" | "memory";
-export interface LocalExecutionEnvelopePayload extends AgentExecutionRefs, ToolExecutionStepContext {
-    sessionId: string;
-    turnId?: string;
-    kind: LocalExecutionEnvelopeKind;
-    stage: LocalExecutionEnvelopeStage;
-    eventType: string;
-    emittedAtMs: number;
-    callId?: string;
-    approvalId?: string;
-    checkpointId?: string;
-    restoreId?: string;
-    summary?: string;
-    data?: Record<string, unknown>;
-}
-export interface LocalExecutionEnvelopeMsg {
-    type: "local.execution.envelope";
-    id: string;
-    payload: LocalExecutionEnvelopePayload;
-}
-export interface AgentSkillCreatePayload {
-    sessionId: string;
-    turnId: string;
-    executionId?: string;
-    suggestedName: string;
-    description: string;
-    tools: string[];
-    stepCount: number;
-}
-export interface AgentSkillCreateMsg {
-    type: "agent.skill.create";
-    id: string;
-    payload: AgentSkillCreatePayload;
-}
-export interface AgentSkillImprovePayload {
-    sessionId: string;
-    turnId: string;
-    executionId?: string;
-    skillName: string;
-    reason: string;
-}
-export interface AgentSkillImproveMsg {
-    type: "agent.skill.improve";
-    id: string;
-    payload: AgentSkillImprovePayload;
-}

package/dist/types/runtime/community/autonomy-budget.d.ts

@@ -1,26 +0,0 @@
-export type AcquisitionRiskTier = "R0" | "R1" | "R2" | "R3";
-export type AcquisitionSourceTier = "official" | "community";
-export type AcquisitionMode = "silent" | "ask" | "high-risk-ask";
-export interface AutonomyBudgetConfig {
-    /** 自治预算总开关。默认 ON(DR6);OFF → 一律问人。 */
-    enabled: boolean;
-}
-/** 默认配置:开箱即默认开(DR6 安装自治默认 ON;仅管本地取 R0/低风险 inert)。 */
-export declare const DEFAULT_AUTONOMY_BUDGET: AutonomyBudgetConfig;
-export interface AcquisitionContext {
-    effectiveRiskTier: AcquisitionRiskTier;
-    sourceTier: AcquisitionSourceTier;
-}
-export interface AcquisitionDecision {
-    mode: AcquisitionMode;
-    /** 是否需要 explicitInstallConsent(R>0 的普通问人)。 */
-    requiresInstallConsent: boolean;
-    /** 是否需要 explicitHighRiskConsent(R2/R3)。 */
-    requiresHighRiskConsent: boolean;
-    reason: string;
-}
-/**
- * 决定一次资源获取走静默 / 问人 / 高危问人。纯函数,无副作用。
- * 高危(R2/R3)优先级最高:无论预算开关,都必须高危问人(可执行高危永不自动)。
- */
-export declare function decideAcquisition(ctx: AcquisitionContext, config?: AutonomyBudgetConfig): AcquisitionDecision;

package/dist/types/runtime/community/community-consent-client.d.ts

@@ -1,55 +0,0 @@
-import type { ConfigPort } from "../ports/index.js";
-import type { HostCommunityClient } from "../../transport/host-community-client.js";
-export type CommunityInstallRiskTier = "R0" | "R1" | "R2" | "R3";
-export type CommunityInstallSourceTier = "official" | "community";
-export type CommunityInstallTrustStage = "quarantine" | "trial" | "trusted";
-export type CommunityInstallReviewStatus = "pending" | "approved" | "rejected";
-export interface CommunityInstallResolution {
-    id: string;
-    type: string;
-    kind: string;
-    sourceTier: CommunityInstallSourceTier;
-    trustStage: CommunityInstallTrustStage;
-    reviewStatus: CommunityInstallReviewStatus;
-    resourceRiskTier: CommunityInstallRiskTier;
-    effectiveRiskTier: CommunityInstallRiskTier;
-    requires: string[];
-    dependencies: CommunityInstallResolution[];
-    version: string;
-    checksum: string;
-    sizeBytes: number;
-    downloadUrl: string;
-    manifest: unknown;
-    /** Minimum client version the resource declares, when present (cross-cutting ①). */
-    minClientVersion?: string;
-    /** EdDSA signature (base64) + signing key id over the integrity metadata (WS-B1). */
-    signature?: string | null;
-    signingKeyId?: string | null;
-}
-export interface CommunityResourceVersion {
-    version: string;
-    createdAt: string;
-    sizeBytes: number;
-    yanked: boolean;
-}
-export interface CommunityConsentClientOptions {
-    baseUrl: string;
-    token: string;
-    fetchFn?: typeof fetch;
-    /**
-     * Client version reported to the Hub via the `x-client-version` header on
-     * every registry request (version negotiation skeleton, cross-cutting ①).
-     * Omitted when unknown — the Hub records it but never rejects in Phase 1.
-     */
-    clientVersion?: string;
-}
-export interface CommunityConsentClient {
-    resolveInstall(resourceId: string, version?: string): Promise<CommunityInstallResolution>;
-    /** List a resource's published versions for the version/rollback menu (WS-B3). The
-     *  default client always implements it; optional so lightweight mocks may omit it. */
-    listResourceVersions?(resourceId: string): Promise<CommunityResourceVersion[]>;
-}
-export declare function createCommunityConsentClient(options: CommunityConsentClientOptions): CommunityConsentClient;
-/** Supervised desktop path: the Runtime Host owns refresh and performs authenticated Hub reads. */
-export declare function createHostCommunityConsentClient(host: HostCommunityClient): CommunityConsentClient;
-export declare function createDefaultCommunityConsentClient(configPort?: ConfigPort): CommunityConsentClient | null;

package/dist/types/runtime/community/package-materialize.d.ts

@@ -1,19 +0,0 @@
-/**
- * Shared community-package materialization (download → verify → extract).
- *
- * Single source of truth for turning a registry install resolution into bytes on
- * disk: whole-package sha256 + size check, then a minimal tar.gz extractor with a
- * path-traversal guard. Used by the skill installer and the pet asset installer so
- * the security-sensitive verify/extract logic lives in exactly one place.
- */
-import type { CommunityInstallResolution } from "./community-consent-client.js";
-/**
- * Fetch the package, verifying it matches the registry's size + sha256. Delegates
- * to the ranged downloader (WS-C4): 4MB Range chunks + .part resume for large
- * assets, with a transparent whole-body fallback for small/non-Range packages.
- */
-export declare function downloadAndVerifyPackage(fetchFn: typeof fetch, install: Pick<CommunityInstallResolution, "downloadUrl" | "sizeBytes" | "checksum">, label: string): Promise<Buffer>;
-/** Extract a gzip-compressed tar into targetDir; only regular files + dirs, no traversal. */
-export declare function extractTarGz(pkg: Buffer, targetDir: string, label: string): Promise<void>;
-/** Resolve a tar entry under rootDir, rejecting absolute paths and `..` traversal. */
-export declare function safeTarTarget(rootDir: string, entryName: string, label: string): string;

package/dist/types/runtime/community/ranged-download.d.ts

@@ -1,21 +0,0 @@
-/**
- * Ranged package download with resume (WS-C4). Fetches a package in 4MB Range
- * chunks into a `.part` file (resumable across retries/process restarts), with
- * per-chunk retry, then verifies the assembled file's size + sha256 and returns
- * the bytes. When the server ignores Range (responds 200 instead of 206) it
- * falls back to verifying the whole body in memory — so small packages and
- * non-Range servers cost no disk. Verify semantics are identical to the plain
- * downloader, so callers are unchanged.
- */
-export interface RangedDownloadTarget {
-    downloadUrl: string;
-    sizeBytes: number;
-    checksum: string;
-}
-/**
- * Stream a checksum-verified package directly into a caller-owned exclusive
- * staging path. Industrial ZIPs use this path so neither the response nor the
- * completed archive is materialized as a second full-size Buffer.
- */
-export declare function downloadVerifiedToFile(fetchFn: typeof fetch, target: RangedDownloadTarget, label: string, destination: string, timeoutMs?: number): Promise<string>;
-export declare function rangedDownloadVerified(fetchFn: typeof fetch, target: RangedDownloadTarget, label: string): Promise<Buffer>;

package/dist/types/runtime/community/registry-signature.d.ts

@@ -1,48 +0,0 @@
-/**
- * Client-side registry signature verification (WS-B1, cross-cutting ⑤).
- *
- * `canonicalSigningPayload` MUST be byte-identical to the Hub's
- * `core/registry/registry-signing.ts` — a hand-written fixed field order joined by
- * newlines, never JSON. The shared golden vector in both repos' tests pins this so
- * the two implementations can never silently diverge (a drift would make every
- * signature fail to verify). Verification is a second anchor beside the sha256
- * checksum in the download path; the trusted public key is built into the client.
- */
-export interface SignablePackage {
-    id: string;
-    version: string;
-    checksum: string;
-    sizeBytes: number;
-}
-/** Byte-exact canonical payload — keep identical to the Hub. Fixed order; never reorder. */
-export declare function canonicalSigningPayload(p: SignablePackage): string;
-/**
- * Normalize a PEM that may arrive with escaped newlines. The trusted public key is
- * sourced from env (QLOGIC_REGISTRY_SIGNING_PUBLIC_KEY_PEM); env_file / single-line
- * secret stores deliver `\n` as literal backslash-n, which createPublicKey rejects.
- * No-op when the PEM already has real newlines, so it never affects valid keys.
- */
-export declare function normalizePem(pem: string): string;
-/** Verify an Ed25519 signature (base64) over the canonical payload. False on any error. */
-export declare function verifyPackageSignature(p: SignablePackage, signatureBase64: string, publicKeyPem: string): boolean;
-/**
- * Signature gate mode (WS-B1 gradual rollout): "warn" logs but installs; "strict"
- * refuses an install whose signature is missing or invalid. Sourced from
- * QLOGIC_REGISTRY_SIGNATURE_MODE; defaults to "warn" so backfill can precede strict.
- */
-export type SignatureMode = "warn" | "strict";
-export declare function resolveSignatureMode(value: string | undefined): SignatureMode;
-export interface SignedResolution extends SignablePackage {
-    signature?: string | null;
-    signingKeyId?: string | null;
-}
-/**
- * Dual-anchor signature gate (WS-B1) applied beside the sha256 check on install.
- * strict: throw on a missing or invalid signature. warn (default): never throw —
- * return the outcome so the caller can log it. A missing trusted public key (key
- * ceremony not yet done) behaves like "unsigned" so warn-mode installs proceed.
- */
-export declare function checkResolutionSignature(resolution: SignedResolution, mode: SignatureMode, trustedPublicKeyPem: string | undefined): {
-    verified: boolean;
-    reason?: "unsigned" | "no-trusted-key" | "invalid-signature";
-};