@dipoleml/dcode-cli 1.0.0 → 1.2.0

package/node_modules/@dcode/shared/dist/mcp-apps/sampling.test.js

@@ -0,0 +1,55 @@
+import { describe, expect, it } from "vitest";
+import { mcpAppsSamplingParamsSchema } from "./sampling.js";
+const base = {
+    messages: [{ role: "user", content: { type: "text", text: "Explain fractions" } }],
+    maxTokens: 200,
+};
+describe("MCP App sampling boundary", () => {
+    it("accepts ordered text/image messages and advisory model hints", () => {
+        expect(mcpAppsSamplingParamsSchema.parse({
+            ...base,
+            modelPreferences: { hints: [{ name: "other-model" }] },
+        })).toMatchObject(base);
+        expect(mcpAppsSamplingParamsSchema.safeParse({
+            ...base,
+            messages: [
+                { role: "user", content: [{ type: "image", mimeType: "image/png", data: "AQ==" }] },
+            ],
+        }).success).toBe(true);
+    });
+    for (const extra of [
+        { tools: [] },
+        { includeContext: "allServers" },
+        { temperature: 0 },
+        { stopSequences: [] },
+        { providerId: "injected" },
+        { maxTokens: 0 },
+    ])
+        it(`rejects unsupported input ${JSON.stringify(extra)}`, () => {
+            expect(mcpAppsSamplingParamsSchema.safeParse({ ...base, ...extra }).success).toBe(false);
+        });
+    for (const content of [
+        { type: "audio", data: "AQ==", mimeType: "audio/wav" },
+        { type: "resource_link", uri: "file:///secret" },
+        { type: "image", mimeType: "image/png", data: "invalid!" },
+        { type: "image", mimeType: "image/svg+xml", data: "AQ==" },
+    ])
+        it(`rejects unsupported or malformed block ${content.type}`, () => {
+            expect(mcpAppsSamplingParamsSchema.safeParse({ ...base, messages: [{ role: "user", content }] })
+                .success).toBe(false);
+        });
+});
+it("bounds total blocks, UTF-8 text, metadata and decoded image bytes", () => {
+    const parse = (messages, extra = {}) => mcpAppsSamplingParamsSchema.safeParse({ ...base, messages, ...extra });
+    const blocks = Array.from({ length: 65 }, () => ({ type: "text", text: "x" }));
+    expect(parse([{ role: "user", content: blocks }]).success).toBe(false);
+    expect(parse([{ role: "user", content: { type: "text", text: "数".repeat(3 * 1024 * 1024) } }])
+        .success).toBe(false);
+    expect(parse(base.messages, { metadata: { payload: "x".repeat(8 * 1024 * 1024) } }).success).toBe(false);
+    const data = Buffer.alloc(4 * 1024 * 1024).toString("base64");
+    expect(parse([{ role: "user", content: { type: "image", mimeType: "image/png", data } }]).success).toBe(true);
+    expect(parse([
+        { role: "user", content: { type: "image", mimeType: "image/png", data: data + "AAAA" } },
+    ]).success).toBe(false);
+});
+//# sourceMappingURL=sampling.test.js.map

package/node_modules/@dcode/shared/dist/mcp-apps/schemas.d.ts

@@ -0,0 +1,78 @@
+import { z } from "zod";
+/**
+ * 以下 schema 是 mcp-apps-protocol 的运行时校验面：只覆盖 DCode 自己的投影 / 元数据形状。
+ * 页面 ↔ 宿主的 `ui/*` 参数由官方 SDK（`McpUi*Schema`）校验，这里不重复。类型见 contract.ts。
+ */
+export declare const mcpAppsDisplayModeSchema: z.ZodEnum<{
+    inline: "inline";
+    fullscreen: "fullscreen";
+    pip: "pip";
+}>;
+export declare const mcpAppsToolVisibilitySchema: z.ZodEnum<{
+    model: "model";
+    app: "app";
+}>;
+/** 面板 id。 */
+export declare const mcpAppsSurfaceIdSchema: z.ZodString;
+export declare const mcpToolUiCspSchema: z.ZodObject<{
+    connectDomains: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    resourceDomains: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    frameDomains: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    baseUriDomains: z.ZodOptional<z.ZodArray<z.ZodString>>;
+}, z.core.$strict>;
+/** 资源级 `_meta["dcode/csp"]` 归一化后的形状（只有为 true 的键）。 */
+export declare const mcpAppCspRelaxationsSchema: z.ZodObject<{
+    unsafeEval: z.ZodOptional<z.ZodBoolean>;
+    wasmUnsafeEval: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strict>;
+export declare const mcpToolUiDescriptorSchema: z.ZodObject<{
+    resourceUri: z.ZodString;
+    visibility: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+        model: "model";
+        app: "app";
+    }>>>;
+    preferredDisplayMode: z.ZodOptional<z.ZodEnum<{
+        inline: "inline";
+        fullscreen: "fullscreen";
+        pip: "pip";
+    }>>;
+    csp: z.ZodOptional<z.ZodObject<{
+        connectDomains: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        resourceDomains: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        frameDomains: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        baseUriDomains: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    }, z.core.$strict>>;
+    prefersBorder: z.ZodOptional<z.ZodBoolean>;
+    surface: z.ZodOptional<z.ZodString>;
+    showInline: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strict>;
+/**
+ * `display.ui`：agent 投影到 ToolCallRow.display 的插件 UI 元数据。
+ * contracts 与 dcode-protocol-v4 两处 strict schema 都从这里复用，避免三份手写不同步。
+ */
+export declare const mcpToolDisplayUiSchema: z.ZodObject<{
+    pluginId: z.ZodString;
+    resourceUri: z.ZodString;
+    preferredDisplayMode: z.ZodOptional<z.ZodEnum<{
+        inline: "inline";
+        fullscreen: "fullscreen";
+        pip: "pip";
+    }>>;
+    prefersBorder: z.ZodOptional<z.ZodBoolean>;
+    csp: z.ZodOptional<z.ZodObject<{
+        connectDomains: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        resourceDomains: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        frameDomains: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        baseUriDomains: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    }, z.core.$strict>>;
+    structuredContent: z.ZodOptional<z.ZodString>;
+    widgetMeta: z.ZodOptional<z.ZodString>;
+    content: z.ZodOptional<z.ZodString>;
+    truncated: z.ZodOptional<z.ZodBoolean>;
+    truncatedBytes: z.ZodOptional<z.ZodNumber>;
+    isError: z.ZodOptional<z.ZodLiteral<true>>;
+    showInline: z.ZodOptional<z.ZodLiteral<true>>;
+    surface: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export type McpToolDisplayUi = z.infer<typeof mcpToolDisplayUiSchema>;
+//# sourceMappingURL=schemas.d.ts.map

package/node_modules/@dcode/shared/dist/mcp-apps/schemas.js

@@ -0,0 +1,65 @@
+import { z } from "zod";
+import { MCP_APPS_RESOURCE_URI_MAX_CHARS, MCP_APPS_CONTENT_MAX_BYTES, MCP_APPS_STRUCTURED_CONTENT_MAX_BYTES, MCP_APPS_SURFACE_ID_MAX_CHARS, MCP_APPS_SURFACE_ID_PATTERN, MCP_APPS_WIDGET_META_MAX_BYTES, } from "./contract.js";
+/**
+ * 以下 schema 是 mcp-apps-protocol 的运行时校验面：只覆盖 DCode 自己的投影 / 元数据形状。
+ * 页面 ↔ 宿主的 `ui/*` 参数由官方 SDK（`McpUi*Schema`）校验，这里不重复。类型见 contract.ts。
+ */
+export const mcpAppsDisplayModeSchema = z.enum(["inline", "fullscreen", "pip"]);
+export const mcpAppsToolVisibilitySchema = z.enum(["model", "app"]);
+/** 面板 id。 */
+export const mcpAppsSurfaceIdSchema = z
+    .string()
+    .min(1)
+    .max(MCP_APPS_SURFACE_ID_MAX_CHARS)
+    .regex(MCP_APPS_SURFACE_ID_PATTERN);
+export const mcpToolUiCspSchema = z
+    .object({
+    connectDomains: z.array(z.string().min(1).max(512)).optional(),
+    resourceDomains: z.array(z.string().min(1).max(512)).optional(),
+    frameDomains: z.array(z.string().min(1).max(512)).optional(),
+    baseUriDomains: z.array(z.string().min(1).max(512)).optional(),
+})
+    .strict();
+/** 资源级 `_meta["dcode/csp"]` 归一化后的形状（只有为 true 的键）。 */
+export const mcpAppCspRelaxationsSchema = z
+    .object({ unsafeEval: z.boolean().optional(), wasmUnsafeEval: z.boolean().optional() })
+    .strict();
+export const mcpToolUiDescriptorSchema = z
+    .object({
+    resourceUri: z.string().min(1).max(MCP_APPS_RESOURCE_URI_MAX_CHARS),
+    visibility: z.array(mcpAppsToolVisibilitySchema).optional(),
+    preferredDisplayMode: mcpAppsDisplayModeSchema.optional(),
+    csp: mcpToolUiCspSchema.optional(),
+    prefersBorder: z.boolean().optional(),
+    surface: mcpAppsSurfaceIdSchema.optional(),
+    showInline: z.boolean().optional(),
+})
+    .strict();
+/**
+ * `display.ui`：agent 投影到 ToolCallRow.display 的插件 UI 元数据。
+ * contracts 与 dcode-protocol-v4 两处 strict schema 都从这里复用，避免三份手写不同步。
+ */
+export const mcpToolDisplayUiSchema = z
+    .object({
+    pluginId: z.string().min(1).max(256),
+    resourceUri: z.string().min(1).max(MCP_APPS_RESOURCE_URI_MAX_CHARS),
+    preferredDisplayMode: mcpAppsDisplayModeSchema.optional(),
+    prefersBorder: z.boolean().optional(),
+    csp: mcpToolUiCspSchema.optional(),
+    // 上限按 UTF-8 字节由 agent 侧保证；这里的 max 按字符数只是兜底（字符数 ≤ 字节数）。
+    structuredContent: z.string().max(MCP_APPS_STRUCTURED_CONTENT_MAX_BYTES).optional(),
+    widgetMeta: z.string().max(MCP_APPS_WIDGET_META_MAX_BYTES).optional(),
+    /** 原始 `content` 数组的 JSON 文本（≤ 32 KiB），页面 tool-result 用它而不是拼接的纯文本。 */
+    content: z.string().max(MCP_APPS_CONTENT_MAX_BYTES).optional(),
+    truncated: z.boolean().optional(),
+    /** 被省略字段的 UTF-8 字节数之和。 */
+    truncatedBytes: z.number().int().nonnegative().optional(),
+    /** MCP 结果 `isError: true`（调用本身完成、工具报错）；页面 tool-result 带 isError，面板不用它覆盖上一份成功快照。 */
+    isError: z.literal(true).optional(),
+    /** 工具级强制常驻（`openai/widgetShowCodexWidgetInline`），卡片不进折叠区。 */
+    showInline: z.literal(true).optional(),
+    // 所属面板；contracts 侧 mcpToolDisplayUiPayloadSchema 同步。
+    surface: mcpAppsSurfaceIdSchema.optional(),
+})
+    .strict();
+//# sourceMappingURL=schemas.js.map

package/node_modules/@dcode/shared/dist/mcp-apps/toolMeta.d.ts

@@ -0,0 +1,39 @@
+import type { McpAppCspRelaxations, McpAppResourceMeta, McpAppsResourcePermission, McpAppsToolVisibility, McpToolUiDescriptor } from "./contract.js";
+/**
+ * 工具可见性与 UI 呈现解耦。只读 `_meta.ui.visibility`，缺省 `["model", "app"]`；
+ * 没有 `ui://` 资源的纯数据工具同样按它决定进不进模型工具表，不再因为缺 resourceUri 而整体丢失。
+ */
+export declare function readMcpToolVisibility(meta: unknown): McpAppsToolVisibility[];
+/**
+ * 工具 `_meta` → UI 描述的归一化。纯函数。resourceUri 来源按优先级：`_meta.ui.resourceUri` →
+ * 弃用扁平键 `_meta["ui/resourceUri"]`（规范 MUST 兼容）→ 兼容接口的 `openai/outputTemplate`。
+ * 兼容 `openai/*` 别名；任何一项非法只丢弃该项，唯独 resourceUri 非法则整体为 null
+ * （此时可见性由 readMcpToolVisibility 单独给出）。
+ */
+export declare function normalizeMcpToolUiMeta(meta: unknown): McpToolUiDescriptor | null;
+/**
+ * `ui://` HTML 资源项自己的 `_meta`（以被选中内容项的 `_meta.ui` 为准）。
+ * csp 与 prefersBorder 兼容 `openai/widgetCSP` / `openai/widgetPrefersBorder` 别名；
+ * 尺寸提示只有 `openai/widgetHeightHint` / `openai/widgetMinFrameHeight`；`openai/widgetShowCodexWidgetInline` → showInline；
+ * 什么都没声明返回 null。
+ */
+export declare function normalizeMcpAppResourceMeta(meta: unknown): McpAppResourceMeta | null;
+/** `_meta.ui.permissions`：只认规范四键且值为对象（`{}`），未知键丢弃；按固定顺序返回。 */
+export declare function normalizeMcpAppResourcePermissions(value: unknown): McpAppsResourcePermission[];
+/**
+ * 资源级 `_meta["dcode/csp"]`：只认 `MCP_APPS_CSP_RELAXATION_FLAGS` 里的布尔键，未知键与非布尔值丢弃；
+ * 没有任何为 true 的键返回 null（false 等于不声明）。
+ */
+export declare function normalizeMcpAppCspRelaxations(meta: unknown): McpAppCspRelaxations | null;
+/** 面板 id：长度与字符集受限，非法即丢弃（工具结果退回内联卡片，不报错）。 */
+export declare function readSurfaceId(value: unknown): string | undefined;
+/**
+ * 校验 CSP 允许列表中的单个 origin，返回归一化 origin（保留端口），非法返回 null。
+ * - `https:` / `wss:`：任意 host。
+ * - `http:` / `ws:`：仅当 hostname 恰为 `127.0.0.1`（openpencil H-B 回环放行），为的是插件自带的本机服务
+ *   （例如插件 MCP server 进程里的 WebSocket 桥）能被沙箱页面连接。不放 `localhost`（可被 hosts 文件改写）、
+ *   不放 `[::1]`（与我们 MCP 桥绑定的 127.0.0.1 不一致）、不放其他 IP。
+ * - 一律不接受凭据、query、hash 与路径。
+ */
+export declare function normalizeCspOrigin(value: unknown): string | null;
+//# sourceMappingURL=toolMeta.d.ts.map

package/node_modules/@dcode/shared/dist/mcp-apps/toolMeta.js

@@ -0,0 +1,199 @@
+import { MCP_APPS_CSP_RELAXATION_FLAGS, MCP_APPS_CSP_RELAXATION_META_KEY, MCP_APPS_DEFAULT_TOOL_VISIBILITY, MCP_APPS_RESOURCE_PERMISSIONS, MCP_APPS_LEGACY_RESOURCE_URI_META_KEY, MCP_APPS_RESOURCE_URI_MAX_CHARS, MCP_APPS_SURFACE_ID_MAX_CHARS, MCP_APPS_SURFACE_ID_PATTERN, MCP_APPS_UI_RESOURCE_SCHEME, } from "./contract.js";
+/**
+ * 工具可见性与 UI 呈现解耦。只读 `_meta.ui.visibility`，缺省 `["model", "app"]`；
+ * 没有 `ui://` 资源的纯数据工具同样按它决定进不进模型工具表，不再因为缺 resourceUri 而整体丢失。
+ */
+export function readMcpToolVisibility(meta) {
+    return readVisibility(asRecord(asRecord(meta)?.ui)?.visibility);
+}
+/**
+ * 工具 `_meta` → UI 描述的归一化。纯函数。resourceUri 来源按优先级：`_meta.ui.resourceUri` →
+ * 弃用扁平键 `_meta["ui/resourceUri"]`（规范 MUST 兼容）→ 兼容接口的 `openai/outputTemplate`。
+ * 兼容 `openai/*` 别名；任何一项非法只丢弃该项，唯独 resourceUri 非法则整体为 null
+ * （此时可见性由 readMcpToolVisibility 单独给出）。
+ */
+export function normalizeMcpToolUiMeta(meta) {
+    const root = asRecord(meta);
+    if (!root)
+        return null;
+    const ui = asRecord(root.ui);
+    const resourceUri = readResourceUri(ui?.resourceUri) ??
+        readResourceUri(root[MCP_APPS_LEGACY_RESOURCE_URI_META_KEY]) ??
+        readResourceUri(root["openai/outputTemplate"]);
+    if (!resourceUri)
+        return null;
+    const descriptor = {
+        resourceUri,
+        visibility: readVisibility(ui?.visibility),
+    };
+    const preferredDisplayMode = readDisplayMode(asRecord(root["openai/ui"])?.preferredModelDisplayMode);
+    if (preferredDisplayMode)
+        descriptor.preferredDisplayMode = preferredDisplayMode;
+    const csp = readCsp(asRecord(ui?.csp), asRecord(root["openai/widgetCSP"]));
+    if (csp)
+        descriptor.csp = csp;
+    const prefersBorder = readBoolean(ui?.prefersBorder) ?? readBoolean(root["openai/widgetPrefersBorder"]);
+    if (prefersBorder !== undefined)
+        descriptor.prefersBorder = prefersBorder;
+    const surface = readSurfaceId(ui?.surface);
+    if (surface)
+        descriptor.surface = surface;
+    const showInline = readBoolean(ui?.showInline) ?? readBoolean(root["openai/widgetShowCodexWidgetInline"]);
+    if (showInline !== undefined)
+        descriptor.showInline = showInline;
+    return descriptor;
+}
+/**
+ * `ui://` HTML 资源项自己的 `_meta`（以被选中内容项的 `_meta.ui` 为准）。
+ * csp 与 prefersBorder 兼容 `openai/widgetCSP` / `openai/widgetPrefersBorder` 别名；
+ * 尺寸提示只有 `openai/widgetHeightHint` / `openai/widgetMinFrameHeight`；`openai/widgetShowCodexWidgetInline` → showInline；
+ * 什么都没声明返回 null。
+ */
+export function normalizeMcpAppResourceMeta(meta) {
+    const root = asRecord(meta);
+    if (!root)
+        return null;
+    const ui = asRecord(root.ui);
+    const result = {};
+    const csp = readCsp(asRecord(ui?.csp), asRecord(root["openai/widgetCSP"]));
+    if (csp)
+        result.csp = csp;
+    const prefersBorder = readBoolean(ui?.prefersBorder) ?? readBoolean(root["openai/widgetPrefersBorder"]);
+    if (prefersBorder !== undefined)
+        result.prefersBorder = prefersBorder;
+    const heightHint = readPositiveInt(root["openai/widgetHeightHint"]);
+    if (heightHint !== undefined)
+        result.heightHint = heightHint;
+    const minFrameHeight = readPositiveInt(root["openai/widgetMinFrameHeight"]);
+    if (minFrameHeight !== undefined)
+        result.minFrameHeight = minFrameHeight;
+    const showInline = readBoolean(ui?.showInline) ?? readBoolean(root["openai/widgetShowCodexWidgetInline"]);
+    if (showInline !== undefined)
+        result.showInline = showInline;
+    const cspRelaxations = normalizeMcpAppCspRelaxations(meta);
+    if (cspRelaxations)
+        result.cspRelaxations = cspRelaxations;
+    const permissions = normalizeMcpAppResourcePermissions(ui?.permissions);
+    if (permissions.length > 0)
+        result.permissions = permissions;
+    return Object.keys(result).length > 0 ? result : null;
+}
+/** `_meta.ui.permissions`：只认规范四键且值为对象（`{}`），未知键丢弃；按固定顺序返回。 */
+export function normalizeMcpAppResourcePermissions(value) {
+    const root = asRecord(value);
+    if (!root)
+        return [];
+    return MCP_APPS_RESOURCE_PERMISSIONS.filter((key) => asRecord(root[key]) !== null);
+}
+/**
+ * 资源级 `_meta["dcode/csp"]`：只认 `MCP_APPS_CSP_RELAXATION_FLAGS` 里的布尔键，未知键与非布尔值丢弃；
+ * 没有任何为 true 的键返回 null（false 等于不声明）。
+ */
+export function normalizeMcpAppCspRelaxations(meta) {
+    const root = asRecord(asRecord(meta)?.[MCP_APPS_CSP_RELAXATION_META_KEY]);
+    if (!root)
+        return null;
+    const result = {};
+    for (const flag of MCP_APPS_CSP_RELAXATION_FLAGS) {
+        if (root[flag] === true)
+            result[flag] = true;
+    }
+    return Object.keys(result).length > 0 ? result : null;
+}
+/** 面板 id：长度与字符集受限，非法即丢弃（工具结果退回内联卡片，不报错）。 */
+export function readSurfaceId(value) {
+    if (typeof value !== "string")
+        return undefined;
+    const trimmed = value.trim();
+    if (trimmed.length === 0 || trimmed.length > MCP_APPS_SURFACE_ID_MAX_CHARS)
+        return undefined;
+    return MCP_APPS_SURFACE_ID_PATTERN.test(trimmed) ? trimmed : undefined;
+}
+/**
+ * 校验 CSP 允许列表中的单个 origin，返回归一化 origin（保留端口），非法返回 null。
+ * - `https:` / `wss:`：任意 host。
+ * - `http:` / `ws:`：仅当 hostname 恰为 `127.0.0.1`（openpencil H-B 回环放行），为的是插件自带的本机服务
+ *   （例如插件 MCP server 进程里的 WebSocket 桥）能被沙箱页面连接。不放 `localhost`（可被 hosts 文件改写）、
+ *   不放 `[::1]`（与我们 MCP 桥绑定的 127.0.0.1 不一致）、不放其他 IP。
+ * - 一律不接受凭据、query、hash 与路径。
+ */
+export function normalizeCspOrigin(value) {
+    if (typeof value !== "string")
+        return null;
+    let url;
+    try {
+        url = new URL(value.trim());
+    }
+    catch {
+        return null;
+    }
+    const loopback = url.hostname === "127.0.0.1" && (url.protocol === "http:" || url.protocol === "ws:");
+    if (url.protocol !== "https:" && url.protocol !== "wss:" && !loopback)
+        return null;
+    if (url.username || url.password || url.search || url.hash)
+        return null;
+    if (url.pathname !== "/" && url.pathname !== "")
+        return null;
+    return url.origin;
+}
+function readResourceUri(value) {
+    if (typeof value !== "string")
+        return null;
+    const trimmed = value.trim();
+    if (!trimmed.startsWith(MCP_APPS_UI_RESOURCE_SCHEME))
+        return null;
+    if (trimmed.length > MCP_APPS_RESOURCE_URI_MAX_CHARS)
+        return null;
+    return trimmed;
+}
+function readVisibility(value) {
+    if (!Array.isArray(value))
+        return [...MCP_APPS_DEFAULT_TOOL_VISIBILITY];
+    const filtered = value.filter((item) => item === "model" || item === "app");
+    return filtered.length > 0 ? [...new Set(filtered)] : [...MCP_APPS_DEFAULT_TOOL_VISIBILITY];
+}
+function readDisplayMode(value) {
+    return value === "inline" || value === "fullscreen" || value === "pip" ? value : undefined;
+}
+/** 四类域各自独立读取；`openai/widgetCSP` 同时接受 camelCase 与 snake_case。 */
+function readCsp(modern, legacy) {
+    const pick = (camel, snake) => readOriginList(modern?.[camel]) ??
+        readOriginList(legacy?.[camel]) ??
+        readOriginList(legacy?.[snake]);
+    const connect = pick("connectDomains", "connect_domains");
+    const resource = pick("resourceDomains", "resource_domains");
+    const frame = pick("frameDomains", "frame_domains");
+    const baseUri = pick("baseUriDomains", "base_uri_domains");
+    if (!connect && !resource && !frame && !baseUri)
+        return undefined;
+    const csp = {};
+    if (connect)
+        csp.connectDomains = connect;
+    if (resource)
+        csp.resourceDomains = resource;
+    if (frame)
+        csp.frameDomains = frame;
+    if (baseUri)
+        csp.baseUriDomains = baseUri;
+    return csp;
+}
+function readPositiveInt(value) {
+    return typeof value === "number" && Number.isFinite(value) && value > 0
+        ? Math.round(value)
+        : undefined;
+}
+function readOriginList(value) {
+    if (!Array.isArray(value))
+        return undefined;
+    const origins = value.map(normalizeCspOrigin).filter((item) => item !== null);
+    return [...new Set(origins)];
+}
+function readBoolean(value) {
+    return typeof value === "boolean" ? value : undefined;
+}
+function asRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value)
+        ? value
+        : null;
+}
+//# sourceMappingURL=toolMeta.js.map

package/node_modules/@dcode/shared/dist/mcp.d.ts

@@ -7,10 +7,10 @@ import type { McpServerFailureKind } from "./dcode-protocol/index.js";
 export declare const DCODE_CUA_OFFICIAL_PLUGIN_ID = "computer-use@dcode-plugins-official";
 export declare const DCODE_CUA_OFFICIAL_MCP_NAMESPACE_NAME = "plugin:computer-use:computer-use";
 export declare const DCODE_PLUGIN_ID_ENV_KEY = "DCODE_PLUGIN_ID";
-export type McpSource = "mcp" | "dcodeagentmcp";
+export type McpSource = "mcp" | "dcodeagentmcp" | "claudeclimcp" | "geminiclimcp" | "codexclimcp" | "opencodemcp";
 export type CliMcpSource = Exclude<McpSource, "mcp">;
 export type McpScope = "common" | "user" | "workspace";
-export type McpFileFormat = "json";
+export type McpFileFormat = "json" | "toml";
 export interface McpServerConfig {
     type?: string;
     url?: string;
@@ -84,6 +84,10 @@ export interface McpConfig {
         mcpServers: Record<string, McpServerConfig>;
     };
     dcodeagentmcp: CliMcpConfig;
+    claudeclimcp: CliMcpConfig;
+    geminiclimcp: CliMcpConfig;
+    codexclimcp: CliMcpConfig;
+    opencodemcp: CliMcpConfig;
 }
 export interface DCodeMcpServer {
     id: string;

package/node_modules/@dcode/shared/dist/memory.d.ts

@@ -0,0 +1,9 @@
+export interface Memory {
+    content: string;
+    enabled: boolean;
+}
+export interface MemoryConfig {
+    content: string;
+    enabled?: boolean;
+}
+//# sourceMappingURL=memory.d.ts.map

package/node_modules/@dcode/shared/dist/memory.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=memory.js.map

package/node_modules/@dcode/shared/dist/model-execution.d.ts

@@ -1,15 +1,46 @@
 import { z } from "zod";
+/**
+ * 执行 Selection 退回 Session Selection 的原因。由发起方在 selectionFallback 规则里声明，
+ * CLI 只透传命中规则的原因，不自行解释 provider 错误码。
+ */
+export declare const modelExecutionSelectionFallbackReasonSchema: z.ZodEnum<{
+    highspeed_card_expired: "highspeed_card_expired";
+    highspeed_request_failed: "highspeed_request_failed";
+}>;
 /** 文本与附件发送共用执行约束，凭据只属于单次执行，不进入 Session 配置。 */
 export declare const modelExecutionSchema: z.ZodObject<{
     memoryExtraction: z.ZodOptional<z.ZodLiteral<"skip">>;
     selectionScope: z.ZodLiteral<"execution">;
     requestAuth: z.ZodOptional<z.ZodObject<{
         apiKey: z.ZodOptional<z.ZodString>;
+        apiKeyId: z.ZodOptional<z.ZodString>;
+        accountScope: z.ZodOptional<z.ZodString>;
         headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
     }, z.core.$strict>>;
     subagents: z.ZodOptional<z.ZodObject<{
         foregroundModel: z.ZodLiteral<"submission">;
         background: z.ZodLiteral<"deny">;
     }, z.core.$strict>>;
+    selectionFallback: z.ZodOptional<z.ZodObject<{
+        providerId: z.ZodString;
+        rules: z.ZodArray<z.ZodObject<{
+            reason: z.ZodEnum<{
+                highspeed_card_expired: "highspeed_card_expired";
+                highspeed_request_failed: "highspeed_request_failed";
+            }>;
+            providerErrorCode: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>>;
+        target: z.ZodOptional<z.ZodObject<{
+            providerId: z.ZodString;
+            modelId: z.ZodString;
+            options: z.ZodOptional<z.ZodObject<{
+                reasoningLevel: z.ZodOptional<z.ZodString>;
+            }, z.core.$strict>>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>>;
 }, z.core.$strict>;
+export type ModelExecution = z.infer<typeof modelExecutionSchema>;
+export type ModelExecutionSelectionFallback = NonNullable<ModelExecution["selectionFallback"]>;
+export type ModelExecutionSelectionFallbackRule = ModelExecutionSelectionFallback["rules"][number];
+export type ModelExecutionSelectionFallbackReason = z.infer<typeof modelExecutionSelectionFallbackReasonSchema>;
 //# sourceMappingURL=model-execution.d.ts.map

package/node_modules/@dcode/shared/dist/model-execution.js

@@ -1,4 +1,13 @@
 import { z } from "zod";
+import { modelSelectionSchema } from "./model-selection.js";
+/**
+ * 执行 Selection 退回 Session Selection 的原因。由发起方在 selectionFallback 规则里声明，
+ * CLI 只透传命中规则的原因，不自行解释 provider 错误码。
+ */
+export const modelExecutionSelectionFallbackReasonSchema = z.enum([
+    "highspeed_card_expired",
+    "highspeed_request_failed",
+]);
 /** 文本与附件发送共用执行约束，凭据只属于单次执行，不进入 Session 配置。 */
 export const modelExecutionSchema = z
     .object({
@@ -7,6 +16,11 @@ export const modelExecutionSchema = z
     requestAuth: z
         .object({
         apiKey: z.string().min(1).optional(),
+        apiKeyId: z.string().trim().min(1).optional(),
+        accountScope: z
+            .string()
+            .regex(/^[a-f0-9]{64}$/)
+            .optional(),
         headers: z.record(z.string().min(1), z.string().min(1)).optional(),
     })
         .strict()
@@ -18,6 +32,30 @@ export const modelExecutionSchema = z
     })
         .strict()
         .optional(),
+    /**
+     * 本次执行的 Selection 失败时，同一 Turn 内退回原模型继续跑完，而不是让整轮失败。
+     * 触发条件由发起方声明：`providerId` 限定只匹配本轮 execution Selection 指向的 provider；
+     * `rules` 按声明顺序匹配，首个命中的规则决定退回原因，`providerErrorCode` 缺省表示该 provider
+     * 的任何失败（用户取消与上下文超窗除外）。CLI 不按 provider id 前缀、模型名或错误文案硬编码。
+     * 退回目标先取 `target`（发起方抽卡时的提交选择，即会话原模型），再取 runtime 会话常驻 Selection：
+     * execution 作用域从不改写会话选择，但常驻选择只在 runtime 内存里，冷恢复竞态下可能未绑定，
+     * 所以发起方必须声明 `target`（docs/highspeed/highspeed-card-spec.md §2.2）。
+     */
+    selectionFallback: z
+        .object({
+        providerId: z.string().min(1),
+        rules: z
+            .array(z
+            .object({
+            reason: modelExecutionSelectionFallbackReasonSchema,
+            providerErrorCode: z.string().min(1).optional(),
+        })
+            .strict())
+            .min(1),
+        target: modelSelectionSchema.optional(),
+    })
+        .strict()
+        .optional(),
 })
     .strict();
 //# sourceMappingURL=model-execution.js.map

package/node_modules/@dcode/shared/dist/networkCapture.d.ts

@@ -0,0 +1,49 @@
+import { z } from "zod";
+export declare const NETWORK_CAPTURE_LIMIT = 1000;
+export declare const networkCaptureControlSchema: z.ZodObject<{
+    captureId: z.ZodNullable<z.ZodString>;
+}, z.core.$strict>;
+export declare const networkRequestRecordSchema: z.ZodObject<{
+    timestamp: z.ZodNumber;
+    processType: z.ZodEnum<{
+        host: "host";
+        main: "main";
+        renderer: "renderer";
+        cli: "cli";
+    }>;
+    pid: z.ZodNumber;
+    method: z.ZodString;
+    url: z.ZodString;
+}, z.core.$strict>;
+export declare const networkCaptureBatchSchema: z.ZodObject<{
+    captureId: z.ZodString;
+    records: z.ZodArray<z.ZodObject<{
+        timestamp: z.ZodNumber;
+        processType: z.ZodEnum<{
+            host: "host";
+            main: "main";
+            renderer: "renderer";
+            cli: "cli";
+        }>;
+        pid: z.ZodNumber;
+        method: z.ZodString;
+        url: z.ZodString;
+    }, z.core.$strict>>;
+    dropped: z.ZodNumber;
+}, z.core.$strict>;
+export type NetworkRequestRecord = z.infer<typeof networkRequestRecordSchema>;
+export type NetworkCaptureBatch = z.infer<typeof networkCaptureBatchSchema>;
+export interface NetworkCaptureSnapshot {
+    captureId: string;
+    records: Array<NetworkRequestRecord & {
+        id: number;
+    }>;
+    dropped: number;
+}
+export interface NetworkCaptureBridge {
+    getSnapshot(): Promise<NetworkCaptureSnapshot>;
+    clear(): Promise<void>;
+}
+/** 不保留凭据、fragment 或查询值；仍保留路径和查询键用于辨认请求。 */
+export declare function sanitizeNetworkCaptureUrl(value: string): string | undefined;
+//# sourceMappingURL=networkCapture.d.ts.map