@dipoleml/dcode-cli 1.0.0 → 1.2.0

package/node_modules/@dcode/contracts/dist/interfaces/mcp.port.d.ts

@@ -1,6 +1,7 @@
+import type { McpServerFailureKind, OfficialMcpAuthPortFailureReason } from "@dcode/shared";
+import type { McpAppsToolVisibility, McpToolUiDescriptor } from "@dcode/shared/mcp-apps";
 import type { JsonSchema } from "../model/index.js";
 import type { TraceContext } from "../tracing/tracer.js";
-import type { McpServerFailureKind, OfficialMcpAuthPortFailureReason } from "@dcode/shared";
 export type McpServerTransportType = "stdio" | "http" | "sse";
 export type McpProtocolVersion = "legacy" | "auto" | "2026-07-28";
 export type McpServerIsolation = "session" | "workspace";
@@ -156,7 +157,20 @@ export interface McpToolDescriptor {
      * `isOfficialMcpOriginTrusted`。
      */
     official?: boolean;
+    /**
+     * 工具对谁开放（`_meta.ui.visibility`，缺省 `["model", "app"]`），与是否带 UI 资源无关。
+     * 不含 "model" 的工具不进 provider contracts；不含 "app" 的工具拒绝 `mcp/uiCallTool`。
+     * 由 adapter 归一化写入；缺省（旧 descriptor）时以 `ui.visibility` 兜底，再缺省视为两者都可见。
+     */
+    visibility?: McpAppsToolVisibility[];
+    /**
+     * 工具 `_meta` 归一化后的插件 UI 呈现描述。
+     * 只有声明了合法 `ui://` resourceUri 的工具才有；其中的 visibility 与上面的字段同源。
+     */
+    ui?: McpToolUiDescriptor;
 }
+/** 可见性判定的唯一实现：descriptor.visibility → ui.visibility → 两者都可见。 */
+export declare function resolveMcpToolVisibility(descriptor: Pick<McpToolDescriptor, "visibility" | "ui">): McpAppsToolVisibility[];
 export type McpContentBlock = Record<string, unknown>;
 export interface McpToolCallResult {
     content: McpContentBlock[];
@@ -164,6 +178,90 @@ export interface McpToolCallResult {
     isError?: boolean;
     _meta?: Record<string, unknown>;
 }
+export interface McpReadResourceRequest {
+    serverName: string;
+    uri: string;
+    trace?: TraceContext;
+}
+export interface McpResourceContent {
+    uri: string;
+    mimeType?: string;
+    text?: string;
+    blob?: string;
+    _meta?: Record<string, unknown>;
+}
+export interface McpReadResourceResult {
+    contents: McpResourceContent[];
+}
+/** `resources/list` / `resources/templates/list`（分页游标原样透传）。 */
+export interface McpListResourcesRequest {
+    serverName: string;
+    cursor?: string;
+    trace?: TraceContext;
+}
+export interface McpResourceDescriptor {
+    uri: string;
+    name?: string;
+    title?: string;
+    description?: string;
+    mimeType?: string;
+    _meta?: Record<string, unknown>;
+}
+export interface McpListResourcesResult {
+    resources: McpResourceDescriptor[];
+    nextCursor?: string;
+}
+export interface McpResourceTemplateDescriptor {
+    uriTemplate: string;
+    name?: string;
+    title?: string;
+    description?: string;
+    mimeType?: string;
+    _meta?: Record<string, unknown>;
+}
+export interface McpListResourceTemplatesResult {
+    resourceTemplates: McpResourceTemplateDescriptor[];
+    nextCursor?: string;
+}
+/**
+ * 资源订阅。`subscriberKey` 由调用方给出（bootstrap 用 sessionId|scopeId|generation），
+ * 登记表在连接层按 (serverName, uri) 计数：0→1 才真调 SDK subscribe，1→0 才 unsubscribe；断连重连后按登记表重放。
+ */
+export interface McpResourceSubscriptionRequest {
+    serverName: string;
+    uri: string;
+    subscriberKey: string;
+    trace?: TraceContext;
+}
+/** server 没有声明 `capabilities.resources.subscribe` 时抛出（协议层映射为 -32001 not_supported）。 */
+export declare class McpResourceSubscribeUnsupportedError extends Error {
+    readonly serverName: string;
+    readonly code: "not_supported";
+    constructor(serverName: string);
+}
+/** server → client 通知，adapter 转成宿主可消费的形状；订阅类通知带当前登记的 subscriberKey。 */
+export type McpServerNotification = {
+    kind: "resourceUpdated";
+    serverName: string;
+    uri: string;
+    subscribers: string[];
+} | {
+    kind: "resourceListChanged";
+    serverName: string;
+    subscribers: string[];
+} | {
+    kind: "toolListChanged";
+    serverName: string;
+} | {
+    kind: "loggingMessage";
+    serverName: string;
+    level: string;
+    logger?: string;
+    data: unknown;
+};
+export interface McpNotificationPort {
+    onNotification(notification: McpServerNotification): void;
+}
 export interface McpConnectionSnapshot {
     statuses: Record<string, McpServerStatus>;
     tools: McpToolDescriptor[];
@@ -202,10 +300,26 @@ export interface McpCallToolRequest {
     deliveryKind?: string;
     turnId?: string;
 }
+/** MCP `notifications/progress`（A8）：progress 单调递增，total 可缺省；adapter 原样转发，不做节流。 */
+export interface McpToolCallProgress {
+    progress: number;
+    total?: number;
+    message?: string;
+}
 export interface McpCallToolOptions {
+    /** 页面写操作固定此连接；禁止恢复或重新授权后自动重放。 */
+    appConnection?: {
+        identity: string;
+        generation: number;
+    };
     signal?: AbortSignal;
     timeoutMs?: number;
+    /** 收到服务端进度通知时回调；SDK 侧同时以 resetTimeoutOnProgress 让每次进度重置超时。 */
+    onProgress?: (progress: McpToolCallProgress) => void;
 }
+/** 工具级 `_meta.timeoutMs` 的允许区间：低于下限视为非法丢弃，高于上限截到上限。 */
+export declare const MCP_TOOL_META_TIMEOUT_MIN_MS = 1000;
+export declare const MCP_TOOL_META_TIMEOUT_MAX_MS: number;
 /**
  * 端口层失败分类（"不发任何请求"的几类）。
  * `official_mcp_origin_untrusted` 可能来自 adapter 本地校验，也可能来自 host 侧二次校验。
@@ -258,7 +372,36 @@ export interface OfficialMcpTrustedOriginRegistry {
         trusted: boolean;
     }>;
 }
+/** MCP elicitation（server → client `elicitation/create`）交给宿主提问的端口。 */
+export interface McpElicitationTrace {
+    sessionId?: string;
+    turnId?: string;
+    toolCallId?: string;
+    traceId?: string;
+}
+export interface McpElicitationRequest {
+    serverName: string;
+    message: string;
+    requestedSchema: unknown;
+    /** 发起 elicitation 时该 server 正在执行的工具调用；没有则无法归属会话，端口应拒绝。 */
+    trace?: McpElicitationTrace;
+}
+export interface McpElicitationResult {
+    action: "accept" | "decline" | "cancel";
+    content?: Record<string, unknown>;
+}
+export interface McpElicitationPort {
+    requestElicitation(request: McpElicitationRequest, options?: {
+        signal?: AbortSignal;
+    }): Promise<McpElicitationResult>;
+}
 export interface McpPort {
+    /** 可信配置派生的稳定来源与现有连接代际。断线时不签发新页面凭证。 */
+    onAppConnectionInvalidated?(serverName: string, listener: () => void): () => void;
+    appConnectionSnapshot?(serverName: string): {
+        identity: string;
+        generation: number;
+    } | null;
     connectConfiguredServers(servers: Record<string, McpServerConfig>, options?: McpConnectOptions): Promise<McpConnectionSnapshot>;
     connectServer(name: string, config: McpServerConfig, options?: McpConnectOptions): Promise<McpServerStatus>;
     disconnectServer(name: string): Promise<McpServerStatus | undefined>;
@@ -272,7 +415,24 @@ export interface McpPort {
     }): Promise<boolean>;
     status(): Promise<Record<string, McpServerStatus>>;
     listTools(): Promise<McpToolDescriptor[]>;
+    /**
+     * 自端口创建以来收到 `notifications/tools/list_changed` 的累计次数。
+     * runtime 在回合开始前比较该值，变了才重新 listTools 并重注册；未实现表示端口不会主动变化。
+     */
+    toolListRevision?(): number;
     callTool(request: McpCallToolRequest, options?: McpCallToolOptions): Promise<McpToolCallResult>;
+    /**
+     * 读取 MCP 资源（插件 UI 的 `ui://` HTML）。与 pingServer 同样可选：mock port 不必实现，
+     * 调用方缺失时按"不支持资源"处理。实现必须与 callTool 共用同一连接与重连路径。
+     */
+    readResource?(request: McpReadResourceRequest, options?: McpCallToolOptions): Promise<McpReadResourceResult>;
+    /** 资源列表与订阅；缺省表示该端口不支持（协议层回 -32001）。 */
+    listResources?(request: McpListResourcesRequest, options?: McpCallToolOptions): Promise<McpListResourcesResult>;
+    listResourceTemplates?(request: McpListResourcesRequest, options?: McpCallToolOptions): Promise<McpListResourceTemplatesResult>;
+    subscribeResource?(request: McpResourceSubscriptionRequest, options?: McpCallToolOptions): Promise<void>;
+    unsubscribeResource?(request: McpResourceSubscriptionRequest, options?: McpCallToolOptions): Promise<void>;
+    /** 删除 subscriberKey 以 prefix 开头的全部登记（会话关闭）；返回真正向 server 退订的 uri 数。 */
+    unsubscribeResourcesBySubscriber?(subscriberKeyPrefix: string): Promise<number>;
     close(): Promise<void>;
 }
 //# sourceMappingURL=mcp.port.d.ts.map

package/node_modules/@dcode/contracts/dist/interfaces/mcp.port.js

@@ -23,3 +23,20 @@ export const DCODE_MCP_NODE_REPL_CUA_APP_META_KEY = "dcode/nodeReplCuaApp";
  * 只在 `isError` 时附加：这是给人看的排障线索（拿它去查服务端日志），成功路径上是纯噪声。
  */
 export const DCODE_MCP_SERVER_REQUEST_ID_META_KEY = "dcode/officialMcpServerRequestId";
+/** 可见性判定的唯一实现：descriptor.visibility → ui.visibility → 两者都可见。 */
+export function resolveMcpToolVisibility(descriptor) {
+    return descriptor.visibility ?? descriptor.ui?.visibility ?? ["model", "app"];
+}
+/** server 没有声明 `capabilities.resources.subscribe` 时抛出（协议层映射为 -32001 not_supported）。 */
+export class McpResourceSubscribeUnsupportedError extends Error {
+    serverName;
+    code = "not_supported";
+    constructor(serverName) {
+        super(`MCP server ${serverName} does not support resource subscriptions`);
+        this.serverName = serverName;
+        this.name = "McpResourceSubscribeUnsupportedError";
+    }
+}
+/** 工具级 `_meta.timeoutMs` 的允许区间：低于下限视为非法丢弃，高于上限截到上限。 */
+export const MCP_TOOL_META_TIMEOUT_MIN_MS = 1_000;
+export const MCP_TOOL_META_TIMEOUT_MAX_MS = 30 * 60 * 1_000;

package/node_modules/@dcode/contracts/dist/interfaces/permission-full-access.d.ts

@@ -14,7 +14,7 @@ export declare const permissionFullAccessReceiptSchema: z.ZodEffects<z.ZodObject
         payload: z.ZodObject<{
             mode: z.ZodLiteral<"yolo">;
             planEnabled: z.ZodBoolean;
-            previousMode: z.ZodEnum<["build", "edit", "yolo", "auto", "plan"]>;
+            previousMode: z.ZodEnum<["build", "edit", "yolo", "guarded", "auto", "plan"]>;
             previousPlanEnabled: z.ZodBoolean;
             source: z.ZodLiteral<"command">;
             permissionGrant: z.ZodObject<{
@@ -35,7 +35,7 @@ export declare const permissionFullAccessReceiptSchema: z.ZodEffects<z.ZodObject
                 interactionId: string;
                 queueItemIds: string[];
             };
-            previousMode: "plan" | "build" | "edit" | "yolo" | "auto";
+            previousMode: "plan" | "build" | "edit" | "yolo" | "guarded" | "auto";
             previousPlanEnabled: boolean;
         }, {
             source: "command";
@@ -45,12 +45,13 @@ export declare const permissionFullAccessReceiptSchema: z.ZodEffects<z.ZodObject
                 interactionId: string;
                 queueItemIds: string[];
             };
-            previousMode: "plan" | "build" | "edit" | "yolo" | "auto";
+            previousMode: "plan" | "build" | "edit" | "yolo" | "guarded" | "auto";
             previousPlanEnabled: boolean;
         }>;
     }, "strict", z.ZodTypeAny, {
         type: "session_mode_changed";
         id: string;
+        timestamp: Date;
         sessionId: string;
         traceId: string;
         payload: {
@@ -61,15 +62,15 @@ export declare const permissionFullAccessReceiptSchema: z.ZodEffects<z.ZodObject
                 interactionId: string;
                 queueItemIds: string[];
             };
-            previousMode: "plan" | "build" | "edit" | "yolo" | "auto";
+            previousMode: "plan" | "build" | "edit" | "yolo" | "guarded" | "auto";
             previousPlanEnabled: boolean;
         };
-        timestamp: Date;
         sequenceNumber: number;
         turnId?: string | undefined;
     }, {
         type: "session_mode_changed";
         id: string;
+        timestamp: Date;
         sessionId: string;
         traceId: string;
         payload: {
@@ -80,10 +81,9 @@ export declare const permissionFullAccessReceiptSchema: z.ZodEffects<z.ZodObject
                 interactionId: string;
                 queueItemIds: string[];
             };
-            previousMode: "plan" | "build" | "edit" | "yolo" | "auto";
+            previousMode: "plan" | "build" | "edit" | "yolo" | "guarded" | "auto";
             previousPlanEnabled: boolean;
         };
-        timestamp: Date;
         sequenceNumber: number;
         turnId?: string | undefined;
     }>;
@@ -92,6 +92,7 @@ export declare const permissionFullAccessReceiptSchema: z.ZodEffects<z.ZodObject
     event: {
         type: "session_mode_changed";
         id: string;
+        timestamp: Date;
         sessionId: string;
         traceId: string;
         payload: {
@@ -102,10 +103,9 @@ export declare const permissionFullAccessReceiptSchema: z.ZodEffects<z.ZodObject
                 interactionId: string;
                 queueItemIds: string[];
             };
-            previousMode: "plan" | "build" | "edit" | "yolo" | "auto";
+            previousMode: "plan" | "build" | "edit" | "yolo" | "guarded" | "auto";
             previousPlanEnabled: boolean;
         };
-        timestamp: Date;
         sequenceNumber: number;
         turnId?: string | undefined;
     };
@@ -114,6 +114,7 @@ export declare const permissionFullAccessReceiptSchema: z.ZodEffects<z.ZodObject
     event: {
         type: "session_mode_changed";
         id: string;
+        timestamp: Date;
         sessionId: string;
         traceId: string;
         payload: {
@@ -124,10 +125,9 @@ export declare const permissionFullAccessReceiptSchema: z.ZodEffects<z.ZodObject
                 interactionId: string;
                 queueItemIds: string[];
             };
-            previousMode: "plan" | "build" | "edit" | "yolo" | "auto";
+            previousMode: "plan" | "build" | "edit" | "yolo" | "guarded" | "auto";
             previousPlanEnabled: boolean;
         };
-        timestamp: Date;
         sequenceNumber: number;
         turnId?: string | undefined;
     };
@@ -136,6 +136,7 @@ export declare const permissionFullAccessReceiptSchema: z.ZodEffects<z.ZodObject
     event: {
         type: "session_mode_changed";
         id: string;
+        timestamp: Date;
         sessionId: string;
         traceId: string;
         payload: {
@@ -146,10 +147,9 @@ export declare const permissionFullAccessReceiptSchema: z.ZodEffects<z.ZodObject
                 interactionId: string;
                 queueItemIds: string[];
             };
-            previousMode: "plan" | "build" | "edit" | "yolo" | "auto";
+            previousMode: "plan" | "build" | "edit" | "yolo" | "guarded" | "auto";
             previousPlanEnabled: boolean;
         };
-        timestamp: Date;
         sequenceNumber: number;
         turnId?: string | undefined;
     };
@@ -158,6 +158,7 @@ export declare const permissionFullAccessReceiptSchema: z.ZodEffects<z.ZodObject
     event: {
         type: "session_mode_changed";
         id: string;
+        timestamp: Date;
         sessionId: string;
         traceId: string;
         payload: {
@@ -168,10 +169,9 @@ export declare const permissionFullAccessReceiptSchema: z.ZodEffects<z.ZodObject
                 interactionId: string;
                 queueItemIds: string[];
             };
-            previousMode: "plan" | "build" | "edit" | "yolo" | "auto";
+            previousMode: "plan" | "build" | "edit" | "yolo" | "guarded" | "auto";
             previousPlanEnabled: boolean;
         };
-        timestamp: Date;
         sequenceNumber: number;
         turnId?: string | undefined;
     };

package/node_modules/@dcode/contracts/dist/interfaces/permission-full-access.js

@@ -17,7 +17,7 @@ export const permissionFullAccessReceiptSchema = z
             .object({
             mode: z.literal("yolo"),
             planEnabled: z.boolean(),
-            previousMode: z.enum(["build", "edit", "yolo", "auto", "plan"]),
+            previousMode: z.enum(["build", "edit", "yolo", "guarded", "auto", "plan"]),
             previousPlanEnabled: z.boolean(),
             source: z.literal("command"),
             permissionGrant: z

package/node_modules/@dcode/contracts/dist/interfaces/permission.port.d.ts

@@ -12,6 +12,8 @@ export interface PermissionRuleValue {
     ruleContent?: string;
 }
 export interface PermissionRuleset {
+    /** 群协作任务的记忆授权仅在当前 session 内生效。 */
+    scope?: "session";
     version?: 1;
     allow?: PermissionRuleValue[];
     deny?: PermissionRuleValue[];
@@ -34,6 +36,7 @@ export type PermissionBrokerReasonSource = "plan_approval_feedback" | "workflow_
  */
 export type PermissionOptionsPolicy = "no-always-allow" | "session-always-allow";
 export interface PermissionBrokerRequest {
+    approvalMode?: "user-once";
     requestId: string;
     sessionId: SessionId;
     turnId?: TurnId;
@@ -65,6 +68,14 @@ export interface PermissionBrokerResult {
      * by the broker on the answer side because the wire option schema is strict.
      */
     sessionPermissionUpdates?: PermissionUpdate[];
+    /**
+     * Fields the user changed in the confirmation window before approving, keyed by the tool's own
+     * input field names; `null` means "back to the field's default". Carried only on an allow and
+     * applied only by a tool that declares `applyInputAdjustments` (CreateWorkflow and
+     * AmendWorkflow: docs/dynamic-workflow/launch.md「Adjusting the settings in the window」).
+     * Synthesized by the broker from the v4 answer's `content`.
+     */
+    inputAdjustments?: Readonly<Record<string, unknown>>;
     resolvedAt?: Date;
 }
 export interface PermissionBrokerRequestOptions {
@@ -74,6 +85,9 @@ export interface PermissionBrokerRequestOptions {
     timeoutMs?: number;
 }
 export interface PermissionBrokerPort {
-    requestPermission(request: PermissionBrokerRequest, options?: PermissionBrokerRequestOptions): Promise<PermissionBrokerResult>;
+    requestPermission(request: PermissionBrokerRequest, options?: PermissionBrokerRequestOptions): Promise<PermissionBrokerResult> & {
+        /** 异步登记时必须提供；缺省表示调用内同步登记。仅表示可响应，不持有授权状态。 */
+        readonly registered?: Promise<void>;
+    };
 }
 //# sourceMappingURL=permission.port.d.ts.map

package/node_modules/@dcode/contracts/dist/interfaces/provider-endpoint-routing.port.d.ts

@@ -0,0 +1,19 @@
+import type { TraceContext } from "../tracing/tracer.js";
+export interface ProviderEndpointRoutingDecision {
+    routed: boolean;
+    url: string;
+}
+export interface ProviderEndpointRoutingResolveOptions {
+    apiKeyId?: string;
+    signal?: AbortSignal;
+    trace?: TraceContext;
+}
+/**
+ * 模型 provider transport 的动态 endpoint 决策边界。
+ *
+ * 实现可以按需刷新远端配置，但不得修改或持久化 provider baseURL。
+ */
+export interface ProviderEndpointRoutingPort {
+    resolve(requestUrl: string, options?: ProviderEndpointRoutingResolveOptions): Promise<ProviderEndpointRoutingDecision>;
+}
+//# sourceMappingURL=provider-endpoint-routing.port.d.ts.map

package/node_modules/@dcode/contracts/dist/interfaces/provider-endpoint-routing.port.js

@@ -0,0 +1 @@
+export {};

package/node_modules/@dcode/contracts/dist/interfaces/session-store.port.d.ts

@@ -12,7 +12,7 @@ export declare const SESSION_TITLE_SOURCES: readonly ["default", "first_input",
 export type SessionTitleSource = (typeof SESSION_TITLE_SOURCES)[number];
 export declare const MESSAGE_VISIBILITIES: readonly ["user-visible", "model-only"];
 export type MessageVisibility = (typeof MESSAGE_VISIBILITIES)[number];
-export declare const SYNTHETIC_USER_MESSAGE_SOURCES: readonly ["background_task", "fork", "goal_state_change", "goal-continuation", "plugin_reference", "rewind", "selection_side_chat", "subagent", "subagent_message", "todo_reminder", "workflow_launch", "shared_context"];
+export declare const SYNTHETIC_USER_MESSAGE_SOURCES: readonly ["agent_listing_delta", "background_task", "fork", "goal_state_change", "goal-continuation", "plugin_reference", "bot_topic_context", "rewind", "selection_side_chat", "subagent", "subagent_message", "todo_reminder", "workflow_launch", "shared_context"];
 export type SyntheticUserMessageSource = (typeof SYNTHETIC_USER_MESSAGE_SOURCES)[number];
 export type MessageSemanticsOrigin = "real_user" | "agent_runtime" | "system" | "migration" | "import";
 export type MessageSemanticsKind = "user_prompt" | "slash_command" | "system_reminder" | "background_notification" | "subagent_notification" | "todo_reminder" | "rewind_notice" | "fork_notice" | "timeline_event" | "compact_summary" | "shared_context" | "assistant_response";
@@ -670,7 +670,9 @@ export declare const SESSION_ENTRY_EXECUTION_STATE: "runtime/execution_state";
 export declare const SESSION_ENTRY_USER_INPUT_AUTO_RESOLUTION: "runtime/user_input_auto_resolution";
 export declare const SESSION_ENTRY_WORKSPACE_CHECKPOINT: "runtime/workspace_checkpoint";
 export declare const SESSION_ENTRY_WORKSPACE_FILE_REWIND: "runtime/workspace_file_rewind";
-export declare const SESSION_ENTRY_TYPES: readonly ["target_completion_verification", "runtime/bash_shell_selection", "runtime/model_selection", "runtime/execution_state", "runtime/user_input_auto_resolution", "runtime/workspace_checkpoint", "runtime/workspace_file_rewind"];
+/** 动态工作流工具面已在本会话激活（docs/dynamic-workflow/launch.md「On demand: activation」）。 */
+export declare const SESSION_ENTRY_DYNAMIC_WORKFLOW_ACTIVATION: "runtime/dynamic_workflow_activation";
+export declare const SESSION_ENTRY_TYPES: readonly ["target_completion_verification", "runtime/bash_shell_selection", "runtime/model_selection", "runtime/execution_state", "runtime/user_input_auto_resolution", "runtime/workspace_checkpoint", "runtime/workspace_file_rewind", "runtime/dynamic_workflow_activation"];
 export type SessionEntryType = (typeof SESSION_ENTRY_TYPES)[number];
 export interface SessionEntryInfo {
     id: string;

package/node_modules/@dcode/contracts/dist/interfaces/session-store.port.js

@@ -12,11 +12,13 @@ export const SESSION_TASK_TYPES = [
 export const SESSION_TITLE_SOURCES = ["default", "first_input", "generated", "custom"];
 export const MESSAGE_VISIBILITIES = ["user-visible", "model-only"];
 export const SYNTHETIC_USER_MESSAGE_SOURCES = [
+    "agent_listing_delta",
     "background_task",
     "fork",
     "goal_state_change",
     "goal-continuation",
     "plugin_reference",
+    "bot_topic_context",
     "rewind",
     "selection_side_chat",
     "subagent",
@@ -45,6 +47,8 @@ export const SESSION_ENTRY_EXECUTION_STATE = "runtime/execution_state";
 export const SESSION_ENTRY_USER_INPUT_AUTO_RESOLUTION = "runtime/user_input_auto_resolution";
 export const SESSION_ENTRY_WORKSPACE_CHECKPOINT = "runtime/workspace_checkpoint";
 export const SESSION_ENTRY_WORKSPACE_FILE_REWIND = "runtime/workspace_file_rewind";
+/** 动态工作流工具面已在本会话激活（docs/dynamic-workflow/launch.md「On demand: activation」）。 */
+export const SESSION_ENTRY_DYNAMIC_WORKFLOW_ACTIVATION = "runtime/dynamic_workflow_activation";
 export const SESSION_ENTRY_TYPES = [
     SESSION_ENTRY_TARGET_COMPLETION_VERIFICATION,
     SESSION_ENTRY_BASH_SHELL_SELECTION,
@@ -53,4 +57,5 @@ export const SESSION_ENTRY_TYPES = [
     SESSION_ENTRY_USER_INPUT_AUTO_RESOLUTION,
     SESSION_ENTRY_WORKSPACE_CHECKPOINT,
     SESSION_ENTRY_WORKSPACE_FILE_REWIND,
+    SESSION_ENTRY_DYNAMIC_WORKFLOW_ACTIVATION,
 ];

package/node_modules/@dcode/contracts/dist/interfaces/session.port.d.ts

@@ -10,7 +10,9 @@ import type { GoalCompletionVerificationOutput } from "../tools/target.js";
 import type { PermissionOptionsPolicy, PermissionUpdate } from "./permission.port.js";
 import type { ToolResultDisplayPayload } from "../tools/tool-result-metadata.js";
 import type { ModelSelection } from "../model/model.js";
-export type CollaborationMode = "plan" | "build" | "edit" | "yolo" | "auto";
+export type CollaborationMode = "plan" | "build" | "edit" | "yolo" | "guarded" | "auto";
+/** 父 guarded 只收紧内部 YOLO 派生；显式的其它子模式保留各自策略。 */
+export declare function inheritPermissionMode<T extends CollaborationMode | undefined>(parent: CollaborationMode | undefined, resolved: T): T | "guarded";
 export type SessionStatus = "idle" | "running" | "waiting" | "paused" | "completed" | "error";
 export type RiskLevel = "low" | "medium" | "high" | "critical";
 export type InputDelivery = "auto" | "start_turn" | "steer_active_turn";
@@ -79,6 +81,7 @@ export interface TargetCompletionVerificationProjectionInfo {
     updatedAt: Date;
 }
 export interface PendingPermission {
+    approvalMode?: "user-once";
     requestId?: string;
     toolCallId: string;
     toolName: string;
@@ -205,9 +208,89 @@ export type TurnSteerSource = "plan_approval_feedback" | "workflow_refine_feedba
  * runtime 注入机制两者相同（boundary 注入），差异只在产品呈现与账本语义。
  */
 export type TurnSteerDeliveryMode = "guide" | "queue";
+/** message.data metadata.highspeed 的持久化契约；不包含运行时凭据。 */
+export interface HighspeedMessageMetadata {
+    schemaVersion: 1;
+    cardId: string;
+    taskId: string;
+    provider: string;
+    model: string;
+    issuedAt: number;
+    expiresAt: number;
+    regularTps?: number;
+    outputTokens?: number;
+    durationMs?: number;
+    savedDurationMs?: number;
+    modelDurationMs?: number;
+    toolDurationMs?: number;
+    otherDurationMs?: number;
+    fallbackAt?: number;
+    fallbackReason?: "highspeed_card_expired" | "highspeed_request_failed";
+}
 /** 协议无关的输入 intent metadata；bootstrap v4 在事件边界组装为 ConversationInputIntent。 */
+export type TurnInputSourceMetadata = {
+    kind: "pluginUi";
+    pluginId: string;
+    toolCallId: string;
+} | {
+    kind: "genUi";
+    path: string;
+    title?: string;
+};
 export interface TurnInputIntentMetadata {
     planEnabled?: boolean;
+    conversationQuotes?: Array<{
+        text: string;
+        path?: string;
+        senderName?: string;
+        senderId?: string;
+        messageId?: string;
+        sentAt?: string;
+    }>;
+    inputOrigin?: "desktop" | "mobile";
+    botGroupSource?: {
+        botIdentity?: {
+            name: string;
+            openId?: string;
+        };
+        mentionedBot?: boolean;
+        appId?: string;
+        contentParts?: import("@dcode/shared").ChannelContentPart[];
+        messages?: Array<{
+            mentionedBot?: boolean;
+            messageId: string;
+            senderId: string;
+            senderName: string;
+            text: string;
+            attachmentIndexes: number[];
+            contentParts?: import("@dcode/shared").ChannelContentPart[];
+        }>;
+        /** 入队时由 Host 注入，历史资源请求不能借用后续重新授权的版本。 */
+        authorizationId?: string;
+        botId: string;
+        provider: "feishu" | "lark";
+        chatId: string;
+        threadId?: string;
+        rootMessageId?: string;
+        topicContext?: {
+            checkpoint: string;
+            hasGap: boolean;
+            messages: Array<{
+                id: string;
+                chatId: string;
+                threadId: string;
+                senderId: string;
+                senderType: "user" | "app";
+                text: string;
+                createdAt: number;
+                kind: string;
+                deleted?: boolean;
+            }>;
+        };
+        senderId: string;
+        senderName: string;
+        messageId: string;
+    };
     sourceCommandId: string;
     queueItemId: string;
     clientId: string;
@@ -217,7 +300,7 @@ export interface TurnInputIntentMetadata {
     /** Admission 时固定；Queue/Guide 后续不得重新读取 Composer 或 Session 最新选择。 */
     modelSelection?: ModelSelection;
     /** 与本次用户 Submission 一起固定的协作模式。 */
-    mode?: "build" | "edit" | "plan" | "yolo";
+    mode?: "build" | "edit" | "plan" | "yolo" | "guarded";
     admissionSeq: number;
     admittedAt: number;
     requestedDelivery: "auto" | "startNow" | "queue" | "guide";
@@ -230,7 +313,10 @@ export interface TurnInputIntentMetadata {
         mime: string;
         bytes: number;
         previewRef?: string;
+        sourceKind?: "clipboard-text" | "topic-history";
+        messageCount?: number;
     }>;
+    highspeed?: HighspeedMessageMetadata;
     sharedContextRefs?: Array<{
         kind: "shared_context_import";
         context_id: string;
@@ -241,13 +327,16 @@ export interface TurnInputIntentMetadata {
         queueItemId?: string;
         clientId?: string;
     };
+    /** 插件 UI 代发（MCP Apps ui/message）的来源；用户亲自输入时缺省。 */
+    source?: TurnInputSourceMetadata;
 }
 /** queue 内保留尚未 resolve 的附件描述；消费时与普通 turn 使用同一 resolver。 */
 export interface PendingTurnAttachment {
     type: "file" | "image" | "video" | "pdf" | "url";
     path?: string;
     content?: string;
-    sourceKind?: "clipboard-text";
+    sourceKind?: "clipboard-text" | "topic-history";
+    messageCount?: number;
     filename?: string;
     mimeType?: string;
     sizeBytes?: number;

package/node_modules/@dcode/contracts/dist/interfaces/session.port.js

@@ -1 +1,4 @@
-export {};
+/** 父 guarded 只收紧内部 YOLO 派生；显式的其它子模式保留各自策略。 */
+export function inheritPermissionMode(parent, resolved) {
+    return parent === "guarded" && resolved === "yolo" ? "guarded" : resolved;
+}