@agent-phonon/protocol 0.9.0 → 0.10.0

package/src/schemas/methods.ts

@@ -1,4 +1,6 @@
 import { z } from "zod";
+import { RunResolveParams, RunResolveResult } from "./schedule.js";
+import { ManagedMcpConfigureParams, ManagedMcpStatusParams, ManagedMcpStatusResult } from "./managed-mcp.js";
 import {
   ConnectHelloParams,
   ConnectWelcomeResult,
@@ -27,18 +29,30 @@ import {
   SessionTerminateResult,
   SessionStatusParams,
   SessionStatusResult,
+  SessionRecoverParams,
+  SessionRecoverResult,
   SessionListParams,
   SessionListResult,
 } from "./session.js";
-import { StreamEvent, StreamAckParams } from "./stream.js";import {
+import { StreamEvent, StreamAckParams, StreamReplayParams, StreamReplayResult } from "./stream.js";import {
   HookFiredParams,
   HookResolveParams,
   HookResolveResult,
 } from "./hook.js";
+import { EmployeeProfileApplyParams,EmployeeProfileStatusParams,EmployeeProfileStatusResult } from "./employee.js";
+import { ConversationBoardParams, ConversationBoardResult } from "./conversation-board.js";
+import { ConversationWorkflowParams, ConversationWorkflowResult } from "./conversation-workflow.js";
+import { ConversationMessageParams, ConversationMessageResult } from "./conversation-message.js";
+import { ProjectCoordinationParams, ProjectCoordinationResult, ProjectCoordinationEvidenceParams, ProjectCoordinationEvidenceResult } from "./project-coordination.js";
+import { ConversationArchiveAppendParams, ConversationArchiveAppendResult, ConversationArchiveReadParams, ConversationArchiveReadResult, ConversationArchiveStatusParams, ConversationArchiveStatusResult, ConversationArchiveEntitiesParams, ConversationArchiveEntitiesResult } from "./conversation-archive.js";
+import { ConversationArchiveBlob, ConversationArchiveBlobWriteParams, ConversationArchiveBlobStatusResult, ConversationArchiveBlobReadParams, ConversationArchiveBlobReadResult } from "./conversation-archive.js";
+import { CompressionStatusParams, CompressionReceipt } from "./compression.js";
 import { DocumentSendParams, DocumentSendResult, DocumentPrepareUploadParams, DocumentPrepareUploadResult } from "./document.js";
 import {
   InteractionRequestParams,
   InteractionRequestResult,
+  InteractionStatusParams,
+  InteractionStatusResult,
   InteractionResponseParams,
   InteractionCancelParams,
   InteractionCancelResult,
@@ -46,6 +60,7 @@ import {
 import {
   ProjectCreateParams,
   ProjectCreateResult,
+  ProjectProvisionParams,ProjectProvisionStatusParams,ProjectProvisionStatusResult,
   ProjectListParams,
   ProjectListResult,
   ProjectGetParams,
@@ -66,11 +81,20 @@ import {
   GitLogParams, GitLogResult,
   GitPushParams, GitPushResult,
   GitStatusParams, GitStatusResult,
+  GitOriginParams,GitOriginResult,
+  WorktreeProvisionParams,WorktreeProvisionStatusParams,WorktreeProvisionStatusResult,
   ProjectExecParams, ProjectExecResult,
 } from "./project.js";
 import {
   SkillInstallParams,
   SkillInstallResult,
+  SkillInstallStatusParams,
+  SkillInstallStatusResult,
+  SkillInstallFenceParams,
+  SkillInstallFenceResult,
+  SkillPublishParams,
+  SkillUnpublishParams,
+  SkillUnpublishResult,
   SkillUninstallParams,
   SkillUninstallResult,
   SkillListParams,
@@ -97,8 +121,15 @@ import {
   WorkflowRunResult,
   WorkflowStatusParams,
   WorkflowStatusResult,
+  WorkflowInputParams,WorkflowInputReceipt,WorkflowInputStatusParams,WorkflowInputStatusResult,
+  WorkflowResultParams,
+  WorkflowResultPage,
   WorkflowCancelParams,
+  WorkflowDispatchCancelParams,
+  WorkflowDispatchCancelResult,
   WorkflowCancelResult,
+  WorkflowPauseParams,
+  WorkflowPauseResult,
   WorkflowListParams,
   WorkflowListResult,
   WorkflowEvent,
@@ -111,6 +142,17 @@ import {
   WorkflowArtifactsListResult,
   WorkflowResumeParams,
 } from "./workflow.js";
+import {
+  MaintenanceTargetsParams, MaintenanceTargetsResult,
+  MaintenanceDiagnoseParams, MaintenanceDiagnoseResult,
+  MaintenanceConfigGetParams, MaintenanceConfigGetResult,
+  MaintenanceConfigPatchParams, MaintenanceConfigPatchResult,
+  MaintenanceConfigEditParams, MaintenanceConfigEditResult,
+  MaintenanceRollbackParams, MaintenanceRollbackResult,
+  MaintenancePackageUpdateParams, MaintenancePackageUpdateResult,
+  MaintenanceServiceStatusParams, MaintenanceServiceStatusResult,
+  MaintenanceServiceRestartParams, MaintenanceServiceRestartResult,
+} from "./maintenance.js";
 import {
   ScheduleCreateParams,
   ScheduleCreateResult,
@@ -159,6 +201,8 @@ import {
 const z_void = z.undefined();
 
 export const METHODS = {
+  "mcp.configure": { direction: "s2p", kind: "request", params: ManagedMcpConfigureParams, result: ManagedMcpStatusResult },
+  "mcp.status": { direction: "s2p", kind: "request", params: ManagedMcpStatusParams, result: ManagedMcpStatusResult },
   // --- 握手（phonon 拨出后先发）---
   "connect.hello": {
     direction: "p2s",
@@ -193,6 +237,44 @@ export const METHODS = {
     result: DeviceFsListResult,
   },
 
+  // --- 宿主机确定性维护面（即使外部 Agent 全部不可用仍可调用）---
+  "maintenance.targets": {
+    direction: "s2p", kind: "request",
+    params: MaintenanceTargetsParams, result: MaintenanceTargetsResult,
+  },
+  "maintenance.diagnose": {
+    direction: "s2p", kind: "request",
+    params: MaintenanceDiagnoseParams, result: MaintenanceDiagnoseResult,
+  },
+  "maintenance.config.get": {
+    direction: "s2p", kind: "request",
+    params: MaintenanceConfigGetParams, result: MaintenanceConfigGetResult,
+  },
+  "maintenance.config.patch": {
+    direction: "s2p", kind: "request",
+    params: MaintenanceConfigPatchParams, result: MaintenanceConfigPatchResult,
+  },
+  "maintenance.config.edit": {
+    direction: "s2p", kind: "request",
+    params: MaintenanceConfigEditParams, result: MaintenanceConfigEditResult,
+  },
+  "maintenance.rollback": {
+    direction: "s2p", kind: "request",
+    params: MaintenanceRollbackParams, result: MaintenanceRollbackResult,
+  },
+  "maintenance.package.update": {
+    direction: "s2p", kind: "request",
+    params: MaintenancePackageUpdateParams, result: MaintenancePackageUpdateResult,
+  },
+  "maintenance.service.status": {
+    direction: "s2p", kind: "request",
+    params: MaintenanceServiceStatusParams, result: MaintenanceServiceStatusResult,
+  },
+  "maintenance.service.restart": {
+    direction: "s2p", kind: "request",
+    params: MaintenanceServiceRestartParams, result: MaintenanceServiceRestartResult,
+  },
+
   // --- 发现（server 查询；phonon 主动推变更）---
   "discovery.list": {
     direction: "s2p",
@@ -214,6 +296,30 @@ export const METHODS = {
   },
 
   // --- session 原语（server 下发）---
+  "conversation.archive.append": {
+    direction: "s2p", kind: "request",
+    params: ConversationArchiveAppendParams, result: ConversationArchiveAppendResult,
+  },
+  "conversation.archive.read": {
+    direction: "s2p", kind: "request",
+    params: ConversationArchiveReadParams, result: ConversationArchiveReadResult,
+  },
+  "conversation.archive.status": {
+    direction: "s2p", kind: "request",
+    params: ConversationArchiveStatusParams, result: ConversationArchiveStatusResult,
+  },
+  "conversation.archive.entities": {
+    direction: "s2p", kind: "request", params: ConversationArchiveEntitiesParams, result: ConversationArchiveEntitiesResult,
+  },
+  "conversation.archive.blob.write": {
+    direction: "s2p", kind: "request", params: ConversationArchiveBlobWriteParams, result: ConversationArchiveBlobStatusResult,
+  },
+  "conversation.archive.blob.status": {
+    direction: "s2p", kind: "request", params: ConversationArchiveBlob, result: ConversationArchiveBlobStatusResult,
+  },
+  "conversation.archive.blob.read": {
+    direction: "s2p", kind: "request", params: ConversationArchiveBlobReadParams, result: ConversationArchiveBlobReadResult,
+  },
   "session.create": {
     direction: "s2p",
     kind: "request",
@@ -238,6 +344,9 @@ export const METHODS = {
     params: SessionCompressParams,
     result: SessionCompressResult,
   },
+  "session.compression.status": {
+    direction: "s2p", kind: "request", params: CompressionStatusParams, result: CompressionReceipt,
+  },
   "session.switchModel": {
     direction: "s2p",
     kind: "request",
@@ -262,6 +371,10 @@ export const METHODS = {
     params: SessionStatusParams,
     result: SessionStatusResult,
   },
+  "session.recover": {
+    direction: "s2p", kind: "request",
+    params: SessionRecoverParams, result: SessionRecoverResult,
+  },
   "session.list": {
     direction: "s2p",
     kind: "request",
@@ -283,6 +396,12 @@ export const METHODS = {
     params: StreamAckParams,
     result: z_void,
   },
+  "stream.replay": {
+    direction: "s2p",
+    kind: "request",
+    params: StreamReplayParams,
+    result: StreamReplayResult,
+  },
 
   // --- hook / HITL ---
   "hook.fired": {
@@ -319,6 +438,22 @@ export const METHODS = {
     params: InteractionRequestParams,
     result: InteractionRequestResult,
   },
+  "conversation.board": {
+    direction: "p2s", kind: "request", params: ConversationBoardParams, result: ConversationBoardResult,
+  },
+  "conversation.workflow": {
+    direction:"p2s",kind:"request",params:ConversationWorkflowParams,result:ConversationWorkflowResult,
+  },
+  "conversation.message": {
+    // History/read are read-only and retain the same current-turn, controller-owned group scope.
+    direction: "p2s", kind: "request", params: ConversationMessageParams, result: ConversationMessageResult,
+  },
+  "project.coordination": {
+    direction: "p2s", kind: "request", params: ProjectCoordinationParams, result: ProjectCoordinationResult,
+  },
+  "project.coordination.evidence": {
+    direction:"p2s",kind:"request",params:ProjectCoordinationEvidenceParams,result:ProjectCoordinationEvidenceResult,
+  },
   "interaction.response": {
     direction: "s2p",
     kind: "notification", // 异步/非阻塞回填走这条
@@ -331,6 +466,15 @@ export const METHODS = {
     params: InteractionCancelParams,
     result: InteractionCancelResult,
   },
+  "interaction.status": {
+    direction: "s2p", kind: "request", params: InteractionStatusParams, result: InteractionStatusResult,
+  },
+  "employee.profile.apply": {
+    direction:"s2p",kind:"request",params:EmployeeProfileApplyParams,result:EmployeeProfileStatusResult,
+  },
+  "employee.profile.status": {
+    direction:"s2p",kind:"request",params:EmployeeProfileStatusParams,result:EmployeeProfileStatusResult,
+  },
 
   // --- 项目管理（目录 + Git；server 下发，D23）---
   "project.create": {
@@ -345,6 +489,12 @@ export const METHODS = {
     params: ProjectListParams,
     result: ProjectListResult,
   },
+  "project.provision": {
+    direction:"s2p",kind:"request",params:ProjectProvisionParams,result:ProjectProvisionStatusResult,
+  },
+  "project.provision.status": {
+    direction:"s2p",kind:"request",params:ProjectProvisionStatusParams,result:ProjectProvisionStatusResult,
+  },
   "project.get": {
     direction: "s2p",
     kind: "request",
@@ -407,6 +557,13 @@ export const METHODS = {
     direction: "s2p", kind: "request",
     params: GitStatusParams, result: GitStatusResult,
   },
+  "project.git.origin": {direction:"s2p",kind:"request",params:GitOriginParams,result:GitOriginResult},
+  "project.worktree.provision": {
+    direction: "s2p", kind: "request", params: WorktreeProvisionParams, result: WorktreeProvisionStatusResult,
+  },
+  "project.worktree.provision.status": {
+    direction: "s2p", kind: "request", params: WorktreeProvisionStatusParams, result: WorktreeProvisionStatusResult,
+  },
   "project.exec": {
     direction: "s2p", kind: "request",
     params: ProjectExecParams, result: ProjectExecResult,
@@ -471,6 +628,30 @@ export const METHODS = {
     params: SkillInstallParams,
     result: SkillInstallResult,
   },
+  "skill.install.status": {
+    direction: "s2p",
+    kind: "request",
+    params: SkillInstallStatusParams,
+    result: SkillInstallStatusResult,
+  },
+  "skill.install.fence": {
+    direction:"s2p",
+    kind:"request",
+    params:SkillInstallFenceParams,
+    result:SkillInstallFenceResult,
+  },
+  "skill.publish": {
+    direction: "s2p",
+    kind: "request",
+    params: SkillPublishParams,
+    result: SkillInstallResult,
+  },
+  "skill.unpublish": {
+    direction: "s2p",
+    kind: "request",
+    params: SkillUnpublishParams,
+    result: SkillUnpublishResult,
+  },
   "skill.uninstall": {
     direction: "s2p",
     kind: "request",
@@ -503,12 +684,32 @@ export const METHODS = {
     params: WorkflowStatusParams,
     result: WorkflowStatusResult,
   },
+  "workflow.input": {direction:"s2p",kind:"request",params:WorkflowInputParams,result:WorkflowInputReceipt},
+  "workflow.input.status": {direction:"s2p",kind:"request",params:WorkflowInputStatusParams,result:WorkflowInputStatusResult},
+  "workflow.result": {
+    direction: "s2p",
+    kind: "request",
+    params: WorkflowResultParams,
+    result: WorkflowResultPage,
+  },
   "workflow.cancel": {
     direction: "s2p",
     kind: "request",
     params: WorkflowCancelParams,
     result: WorkflowCancelResult,
   },
+  "workflow.dispatch.cancel": {
+    direction:"s2p",
+    kind:"request",
+    params:WorkflowDispatchCancelParams,
+    result:WorkflowDispatchCancelResult,
+  },
+  "workflow.pause": {
+    direction: "s2p",
+    kind: "request",
+    params: WorkflowPauseParams,
+    result: WorkflowPauseResult,
+  },
   "workflow.list": {
     direction: "s2p",
     kind: "request",
@@ -615,6 +816,12 @@ export const METHODS = {
     params: RunGetParams,
     result: RunGetResult,
   },
+  "run.resolve": {
+    direction: "s2p",
+    kind: "request",
+    params: RunResolveParams,
+    result: RunResolveResult,
+  },
   "run.events.subscribe": {
     direction: "s2p",
     kind: "request",

package/src/schemas/native-stop.ts

@@ -0,0 +1,16 @@
+import { z } from "zod";
+import { SessionId,Timestamp } from "./common.js";
+
+export const NativeStopTarget = z.object({
+  version:z.literal(1),sessionId:SessionId,turnId:z.string().optional(),nodeId:z.string().optional(),
+  state:z.enum(["pending","confirmed","unknown"]),observedAt:Timestamp,
+  confirmation:z.enum(["not_started","process_tree_exit","native_terminal"]).optional(),
+  reasonCode:z.string().max(128).optional(),
+}).strict().refine(value=>value.state!=="confirmed"||value.confirmation!==undefined);
+export type NativeStopTarget=z.infer<typeof NativeStopTarget>;
+export const NativeStopProof=z.object({
+  version:z.literal(1),state:z.enum(["pending","confirmed","unknown"]),
+  targets:z.array(NativeStopTarget).max(256),observedAt:Timestamp,
+  reasonCode:z.string().max(128).optional(),
+}).strict().refine(value=>value.state!=="confirmed"||value.targets.every(target=>target.state==="confirmed"));
+export type NativeStopProof=z.infer<typeof NativeStopProof>;

package/src/schemas/policy.ts

@@ -23,12 +23,45 @@ export const TenantPolicy = z.object({
   allowGlobalSkillInstall: z.boolean().default(false),
   /** 是否允许从 url 安装 skill（供应链入口，危险）。默认 false。 */
   allowUrlSkillInstall: z.boolean().default(false),
+  /** 是否允许从本地任意路径安装 skill（localPath 源，可复制任意目录 → 任意读）。默认 false。 */
+  allowLocalPathSkillInstall: z.boolean().default(false),
+  /** Explicit human-owned recovery permission; never implied by trustLocal. */
+  allowSkillRecovery:z.boolean().default(false),
   /** 是否允许物理删盘（project.remove deleteFiles / worktree force 等）。默认 false。 */
   allowDeleteFiles: z.boolean().default(false),
   /** document.send 是否允许发送项目/worktree 目录之外的文件。默认 false（project-scoped）。 */
   allowExternalDocuments: z.boolean().default(false),
   /** env.list reveal=true 是否允许返回环境变量明文。默认 false（只能脱敏查看）。 */
   allowEnvReveal: z.boolean().default(false),
+  /** 是否允许 env.set/env.delete 修改设备本地环境变量。默认 false。 */
+  allowEnvWrite: z.boolean().default(false),
+  /**
+   * 是否允许 project.exec 跨设备执行任意命令（A2/A3）。默认 false（严格）。
+   * exec 能指定任意 binary 且继承环境，等同设备远程代码执行——必须独立 gate，
+   * 不能只靠 allowedMethods。trustLocal（单机自用）下默认开。
+   */
+  allowExec: z.boolean().default(false),
+  /** Host-level creation/editing of isolated employee profiles. Never implied by trustLocal. */
+  allowEmployeeProfiles:z.boolean().default(false),
+  /** Explicit host consent for new controlled-root workspaces, never arbitrary path adoption. */
+  allowProjectProvision:z.boolean().default(false),
+  /** Separate durable Phonon history; never implied by project or filesystem access. */
+  allowConversationArchives: z.boolean().default(false),
+  /** Per configured server authority and tenant; no automatic history eviction. */
+  maxConversationArchiveBytes: z.number().int().positive().safe().default(10 * 1024 * 1024 * 1024),
+  /**
+   * 是否允许 device.fs.* 浏览整个文件系统（A4）。默认 true（保留能力）。
+   * 设为 false 可把 device.fs.list/roots 锁到 allowedProjectRoots；需要锁定的部署可关。
+   */
+  allowDeviceFsBrowse: z.boolean().default(true),
+  /** 是否允许只读宿主机维护诊断/读取脱敏配置。默认 false。 */
+  allowMaintenanceRead: z.boolean().default(false),
+  /** 是否允许修改本地预注册的 JSON 配置（自动备份 + 乐观锁）。默认 false。 */
+  allowMaintenanceConfigWrite: z.boolean().default(false),
+  /** 是否允许更新本地预注册的用户态 npm/pnpm 包。默认 false。 */
+  allowMaintenancePackageUpdate: z.boolean().default(false),
+  /** 是否允许重启本地预注册的服务。默认 false。 */
+  allowMaintenanceServiceRestart: z.boolean().default(false),
   /** 单文件上传上限（字节）；超出走 prepare_upload 或拒绝。 */
   maxUploadBytes: z.number().int().positive().optional(),
   /** 敏感路径黑名单（即使在 allowedProjectRoots 内也拒绝，如 .ssh/.aws/.env）。 */

package/src/schemas/project-coordination.ts

@@ -0,0 +1,90 @@
+import { z } from "zod";
+
+const id = z.string().uuid().transform(value => value.toLowerCase());
+const position = z.string().regex(/^(0|[1-9][0-9]{0,17})$/);
+export const CoordinationActivity = z.object({
+  summary: z.string().trim().max(500), phase: z.enum(["planning", "working", "validating", "blocked", "idle", "completed"]),
+  impact: z.array(z.string().trim().min(1).max(240)).max(16), dependencies: z.string().max(1000).default(""),
+}).strict().refine(value=>new TextEncoder().encode(JSON.stringify(value)).length<=16000,"Activity exceeds the encoded byte limit");
+export const AgentCoordinationInput = z.discriminatedUnion("operation", [
+  z.object({ operation: z.literal("presence") }).strict(),
+  z.object({ operation: z.literal("peers"), after: position.default("0") }).strict(),
+  z.object({ operation: z.literal("activity"), requestId: id, baseRevision: z.number().int().nonnegative(), activity: CoordinationActivity }).strict(),
+  z.object({ operation: z.literal("send"), requestId: id, recipientId: id, kind: z.enum(["intent", "question", "notice", "request", "result"]),
+    text: z.string().trim().min(1).max(4000), references: z.array(z.string().trim().min(1).max(512)).max(8).default([]), inReplyTo: id.optional() }).strict(),
+  z.object({ operation: z.literal("inbox"), after: position.default("0") }).strict(),
+  z.object({ operation: z.literal("acknowledge"), messageIds: z.array(id).min(1).max(32).refine(values => new Set(values).size === values.length) }).strict(),
+  z.object({ operation: z.literal("receipt"), requestId: id }).strict(),
+  z.object({ operation: z.literal("leave") }).strict(),
+]).refine(value=>new TextEncoder().encode(JSON.stringify(value)).length<=24000,"Coordination action exceeds the encoded byte limit");
+export type AgentCoordinationInput = z.infer<typeof AgentCoordinationInput>;
+// Device-owned metadata, deliberately outside the model-facing action union.
+const receiveBoundary = z.enum(["before_model", "after_tools"]);
+const receiveEvidence = z.enum(["context_hook", "provider_payload"]);
+export const CoordinationReceiveReport = z.discriminatedUnion("mode", [
+  z.object({ version: z.literal(1), mode: z.literal("tool_polling") }).strict(),
+  z.object({ version: z.literal(1), mode: z.literal("runtime_pending"), boundary: receiveBoundary,
+    evidence: receiveEvidence, visibility: z.enum(["hidden", "collapsed"]) }).strict(),
+  z.object({ version: z.literal(1), mode: z.literal("runtime_checkpoint"), boundary: receiveBoundary,
+    evidence: receiveEvidence, visibility: z.enum(["hidden", "collapsed"]) }).strict(),
+]);
+export type CoordinationReceiveReport = z.infer<typeof CoordinationReceiveReport>;
+export const CoordinationReceiveState = z.object({ report: CoordinationReceiveReport,
+  reportedAt: z.string().datetime(), current: z.boolean(),
+}).strict();
+export const ProjectCoordinationParams = z.object({ sourceKind: z.enum(["native", "dev"]), runId: id,
+  workflowId: z.string().min(1).max(512), sessionId: z.string().min(1).max(512), turnId: z.string().min(1).max(512), action: AgentCoordinationInput,
+  receive: CoordinationReceiveReport.optional(),
+  evidenceVersion: z.literal(1).optional(),
+  workspaceVersion: z.literal(1).optional(),
+}).strict();
+export type ProjectCoordinationParams = z.infer<typeof ProjectCoordinationParams>;
+const workspaceText = (limit: number) => z.string().min(1).max(limit).refine(value =>
+  new TextEncoder().encode(value).length <= limit && !/[\x00-\x1f\x7f-\x9f]/.test(value));
+export const CoordinationWorkspace = z.discriminatedUnion("state", [
+  z.object({ state: z.literal("current"), deviceId: id, runtimeWorkspaceId: workspaceText(4096),
+    path: workspaceText(4096), repositoryRoot: workspaceText(4096), branch: workspaceText(1024),
+    isWorktree: z.boolean(), worktreeId: workspaceText(512).optional(), detached: z.boolean(),
+    head: z.string().regex(/^[a-f0-9]{40,64}$/).optional(), observedAt: z.string().datetime(), checkedAt: z.string().datetime(),
+  }).strict(),
+  z.object({ state: z.enum(["unavailable", "unsupported", "notGit"]), deviceId: id.nullable(), checkedAt: z.string().datetime(),
+    reasonCode: z.string().regex(/^[a-z0-9_]{1,64}$/).optional(),
+  }).strict(),
+]);
+export type CoordinationWorkspace = z.infer<typeof CoordinationWorkspace>;
+const Participant = z.object({ id, position, projectId: id, ownerId: z.string(), deviceId: id.nullable(), agentId: z.string(),
+  agentKind: z.enum(["agent", "de"]), sourceKind: z.enum(["native", "dev", "mcp"]), sessionId: z.string(), label: z.string(),
+  activity: CoordinationActivity, activityRevision: z.number().int().nonnegative(), lastSeenAt: z.string().nullable(),
+  deviceName: z.string().nullable().optional(), runtimeState: z.string().nullable().optional(),
+  receive: CoordinationReceiveState.optional(),
+  workspace: CoordinationWorkspace.optional(),
+  presence: z.enum(["active", "stale", "offline", "ended"]),
+}).strict();
+const Message = z.object({ id, position, senderId: id, recipientId: id, kind: z.enum(["intent", "question", "notice", "request", "result"]),
+  text: z.string().max(4000), references: z.array(z.string()).max(8), inReplyTo: id.nullable(), depth: z.number().int().min(0).max(6),
+  createdAt: z.string().nullable(), expiresAt: z.string().nullable(), state: z.enum(["stored", "received", "withdrawn", "expired"]), receivedAt: z.string().nullable(),
+  contentAvailable: z.boolean().optional(),
+}).strict();
+export const ProjectCoordinationResult = z.object({ self: Participant.optional(), participants: z.array(Participant).max(32).optional(),
+  receiveReporting: z.literal(1).optional(),
+  evidenceVersion: z.literal(1).optional(),
+  workspaceVersion: z.literal(1).optional(),
+  deliveryOffers: z.array(z.object({messageId:id,deliveryId:id}).strict()).max(32).optional(),
+  messages: z.array(Message).max(32).optional(), message: Message.optional(), next: position.nullable().optional(),
+  status: z.enum(["recorded", "not_found", "left"]).optional(), requestId: id.optional(), participantId: id.optional(), replayed: z.boolean().optional(),
+}).strict();
+export type ProjectCoordinationResult = z.infer<typeof ProjectCoordinationResult>;
+
+export const CoordinationRuntimeEvidence = z.object({deliveryId:id,boundaryId:id,
+  contentHash:z.string().regex(/^[0-9a-f]{64}$/),state:z.enum(["offered","context_hook","provider_payload"])}).strict();
+export const ProjectCoordinationEvidenceParams = z.object({version:z.literal(1),
+  reports:z.array(CoordinationRuntimeEvidence).min(1).max(8).refine(rows=>new Set(rows.map(row=>row.deliveryId)).size===rows.length),
+}).strict();
+export type ProjectCoordinationEvidenceParams = z.infer<typeof ProjectCoordinationEvidenceParams>;
+export const ProjectCoordinationEvidenceResult = z.object({version:z.literal(1),
+  receipts:z.array(z.discriminatedUnion("status",[
+    z.object({deliveryId:id,status:z.literal("recorded"),state:z.enum(["offered","context_hook","provider_payload"])}).strict(),
+    z.object({deliveryId:id,status:z.literal("rejected"),reason:z.enum(["unavailable","mismatch"])}).strict(),
+  ])).max(8),
+}).strict();
+export type ProjectCoordinationEvidenceResult = z.infer<typeof ProjectCoordinationEvidenceResult>;

package/src/schemas/project.ts

@@ -5,17 +5,22 @@ import { ProjectId, Timestamp } from "./common.js";
  * 项目管理协议（design D23）。
  *
  * 一个项目 = 一个目录 + Git。所有 session 必须绑定一个项目（projectId）。
- * 项目是磁盘上的客观目录，**设备级共享、不受 tenant 隔离**——不同 tenant 都能看到/用
- * 同一项目，在其下各干各的；冲突风险用户自担。（隔离发生在会话/任务层，不在文件层。）
+ * 项目对应本机目录，但注册的 projectId 归属连接 namespace；其他 tenant 的标识及
+ * 未映射的旧记录不能自动借用。本机用户显式共享目录不等于 API 授予跨 namespace 权限。
  */
 
 /** 项目描述。 */
 export const ProjectDescriptor = z.object({
   projectId: ProjectId,
+  /** Creator connection namespace. Missing means an unmapped legacy record, not implicit ownership. */
+  namespace: z.string().optional(),
+  /** Internal employee home, not a Registry project binding. */
+  employeeId:z.string().uuid().optional(),
   /** 展示名。 */
   name: z.string().min(1),
   /** 项目目录的绝对路径（设备本地）。 */
   path: z.string().min(1),
+  directoryIdentity:z.string().regex(/^dir:[a-f0-9]+:[a-f0-9]+$/).max(96).optional(),
   /** 是否已 git init。 */
   git: z.boolean().default(true),
   /** 当前分支（若有）。 */
@@ -40,7 +45,8 @@ export const ProjectCreateParams = z.object({
   git: z.boolean().default(true),
   /** 可选：初始化时设置的远端。 */
   remote: z.string().optional(),
-});
+  existingDirectoryIdentity:z.string().regex(/^dir:[a-f0-9]+:[a-f0-9]+$/).max(96).optional(),
+}).refine(value=>value.existingDirectoryIdentity===undefined||!!value.path&&value.git===false&&value.remote===undefined&&value.name.length<=120,"Existing directory registration needs a path, no Git initialization and a bounded name");
 export type ProjectCreateParams = z.infer<typeof ProjectCreateParams>;
 
 export const ProjectCreateResult = z.object({
@@ -48,6 +54,40 @@ export const ProjectCreateResult = z.object({
 });
 export type ProjectCreateResult = z.infer<typeof ProjectCreateResult>;
 
+const provisionIdentity=z.string().regex(/^[pw]:[a-f0-9]+:[a-f0-9]+$/).max(80);
+export const ProjectProvisionParams=z.object({clientRequestId:z.string().uuid(),name:z.string().min(1).max(120),expectedReceiverID:z.string().uuid()}).strict();
+export type ProjectProvisionParams=z.infer<typeof ProjectProvisionParams>;
+export const ProjectProvisionStatusParams=ProjectProvisionParams.pick({clientRequestId:true,expectedReceiverID:true}).strict();
+export type ProjectProvisionStatusParams=z.infer<typeof ProjectProvisionStatusParams>;
+const provisionStatus={clientRequestId:z.string().uuid(),receiverID:z.string().uuid()};
+export const ProjectProvisionStatusResult=z.discriminatedUnion("state",[
+  z.object({...provisionStatus,state:z.literal("not_found"),found:z.literal(false),outcomeKnown:z.literal(false)}).strict(),
+  z.object({...provisionStatus,state:z.literal("prepared"),found:z.literal(true),outcomeKnown:z.literal(false),dispatchClaimed:z.literal(false)}).strict(),
+  z.object({...provisionStatus,state:z.enum(["dispatched","unknown"]),found:z.literal(true),outcomeKnown:z.literal(false),dispatchClaimed:z.literal(true)}).strict(),
+  z.object({...provisionStatus,state:z.literal("failed"),found:z.literal(true),outcomeKnown:z.literal(true),dispatchClaimed:z.literal(true),reasonCode:z.literal("creation_refused")}).strict(),
+  z.object({...provisionStatus,state:z.literal("confirmed"),found:z.literal(true),outcomeKnown:z.literal(true),dispatchClaimed:z.literal(true),
+    project:ProjectDescriptor,rootIdentity:provisionIdentity,workspaceIdentity:provisionIdentity}).strict(),
+]);
+export type ProjectProvisionStatusResult=z.infer<typeof ProjectProvisionStatusResult>;
+
+// A durable, controller-owned linked checkout registered as an independent workspace.
+const worktreeProvisionScope={clientRequestId:z.string().uuid(),expectedReceiverID:z.string().uuid(),projectId:ProjectId};
+export const WorktreeProvisionParams=z.object({...worktreeProvisionScope,name:z.string().min(1).max(120),
+  baseBranch:z.string().min(1).max(255),newBranch:z.string().min(1).max(255)}).strict();
+export type WorktreeProvisionParams=z.infer<typeof WorktreeProvisionParams>;
+export const WorktreeProvisionStatusParams=z.object(worktreeProvisionScope).strict();
+export type WorktreeProvisionStatusParams=z.infer<typeof WorktreeProvisionStatusParams>;
+const worktreeProvisionReply={clientRequestId:z.string().uuid(),receiverID:z.string().uuid(),projectId:ProjectId};
+export const WorktreeProvisionStatusResult=z.discriminatedUnion('state',[
+  z.object({...worktreeProvisionReply,state:z.literal('not_found'),found:z.literal(false),outcomeKnown:z.literal(false)}).strict(),
+  z.object({...worktreeProvisionReply,state:z.literal('prepared'),found:z.literal(true),outcomeKnown:z.literal(false),dispatchClaimed:z.literal(false)}).strict(),
+  z.object({...worktreeProvisionReply,state:z.enum(['dispatched','unknown']),found:z.literal(true),outcomeKnown:z.literal(false),dispatchClaimed:z.literal(true)}).strict(),
+  z.object({...worktreeProvisionReply,state:z.literal('failed'),found:z.literal(true),outcomeKnown:z.literal(true),dispatchClaimed:z.literal(true),reasonCode:z.literal('creation_refused')}).strict(),
+  z.object({...worktreeProvisionReply,state:z.literal('confirmed'),found:z.literal(true),outcomeKnown:z.literal(true),dispatchClaimed:z.literal(true),
+    workspace:ProjectDescriptor,directoryIdentity:z.string().regex(/^dir:[a-f0-9]+:[a-f0-9]+$/),baseCommit:z.string().regex(/^[a-f0-9]{40,64}$/),branch:z.string().min(1).max(255)}).strict(),
+]);
+export type WorktreeProvisionStatusResult=z.infer<typeof WorktreeProvisionStatusResult>;
+
 // --- project.list ---
 export const ProjectListParams = z.object({}).default({});
 export type ProjectListParams = z.infer<typeof ProjectListParams>;
@@ -328,6 +368,16 @@ export const GitPushResult = z.object({
 });
 export type GitPushResult = z.infer<typeof GitPushResult>;
 
+// --- project.git.origin ---
+export const GitOriginParams=z.object({projectId:ProjectId}).strict();
+export const GitOriginResult=z.object({projectId:ProjectId,path:z.string().min(1).max(4096),repositoryRoot:z.string().min(1).max(4096),observedAt:Timestamp,
+  origin:z.discriminatedUnion('state',[
+    z.object({state:z.literal('configured'),url:z.string().min(1).max(2048)}).strict(),
+    z.object({state:z.enum(['missing','unsupported'])}).strict(),
+  ]),
+}).strict();
+export type GitOriginResult=z.infer<typeof GitOriginResult>;
+
 // --- project.git.status ---
 export const GitStatusParams = z.object({
   projectId: ProjectId,
@@ -339,12 +389,27 @@ export const GitFileStatus = z.object({
   /** 文件路径（相对 cwd） */
   path: z.string(),
   /** 索引区状态（git status --porcelain 第 1 位） */
-  index: z.enum(["unmodified", "modified", "added", "deleted", "renamed", "copied", "untracked"]),
+  index: z.enum(["unmodified", "modified", "added", "deleted", "renamed", "copied", "untracked", "unmerged", "typeChanged"]),
   /** 工作区状态（第 2 位） */
-  worktree: z.enum(["unmodified", "modified", "added", "deleted", "renamed", "copied", "untracked"]),
+  worktree: z.enum(["unmodified", "modified", "added", "deleted", "renamed", "copied", "untracked", "unmerged", "typeChanged"]),
 });
 export type GitFileStatus = z.infer<typeof GitFileStatus>;
 
+export const GitWorkspaceObservation = z.object({
+  projectId: ProjectId,
+  worktreeId: z.string().min(1).optional(),
+  path: z.string().min(1).max(4096),
+  repositoryRoot: z.string().min(1).max(4096),
+  isWorktree: z.boolean(),
+  detached: z.boolean(),
+  head: z.string().regex(/^[a-f0-9]{40,64}$/).optional(),
+  observedAt: Timestamp,
+  changedFileCount: z.number().int().nonnegative(),
+  trackedChangedFileCount: z.number().int().nonnegative(),
+  untrackedFileCount: z.number().int().nonnegative(),
+}).strict().refine(value => value.changedFileCount === value.trackedChangedFileCount + value.untrackedFileCount);
+export type GitWorkspaceObservation = z.infer<typeof GitWorkspaceObservation>;
+
 export const GitStatusResult = z.object({
   branch: z.string(),
   /** 是否 dirty（有任何未提交改动） */
@@ -354,6 +419,8 @@ export const GitStatusResult = z.object({
   behind: z.number().int().nonnegative().optional(),
   upstream: z.string().optional(),
   files: z.array(GitFileStatus),
+  /** Live, bounded device observation. Older peers may omit it. */
+  workspace: GitWorkspaceObservation.optional(),
 });
 export type GitStatusResult = z.infer<typeof GitStatusResult>;
 

package/src/schemas/reasoning.ts

@@ -0,0 +1,13 @@
+import { z } from "zod";
+
+export const ReasoningLevel = z.enum(["low", "standard", "high", "xhigh", "max"]);
+export type ReasoningLevel = z.infer<typeof ReasoningLevel>;
+// null explicitly removes Phonon's override; omission preserves legacy behavior.
+export const TurnReasoning = z.object({ level: ReasoningLevel.nullable() }).strict();
+export type TurnReasoning = z.infer<typeof TurnReasoning>;
+export const ReasoningConfirmation = z.object({
+  requestedLevel: ReasoningLevel.nullable(),
+  nativeValue: z.enum(["off","none","minimal","low","medium","high","xhigh","max","ultra","auto","adaptive"]).nullable(),
+  effectiveLevel: ReasoningLevel.optional(),
+}).strict();
+export type ReasoningConfirmation = z.infer<typeof ReasoningConfirmation>;