@dipoleml/dcode-cli 1.1.0 → 1.2.0

package/node_modules/@dcode/shared/dist/channel-mention.js

@@ -0,0 +1,120 @@
+import { dcodeProtocolTraceSchema } from "./dcode-protocol/trace.js";
+import { z } from "zod";
+export const channelMentionSchema = z
+    .object({
+    type: z.literal("channelMention"),
+    refId: z.string().min(1).max(200),
+    name: z.string().min(1).max(200),
+    channel: z.enum(["feishu", "lark"]),
+    targetId: z
+        .string()
+        .max(128)
+        .regex(/^ou_[a-zA-Z0-9_-]+$/u),
+    idType: z.literal("open_id"),
+    entityType: z.enum(["user", "bot", "unknown"]),
+})
+    .strict();
+export const channelContentPartSchema = z.union([
+    z.object({ type: z.literal("text"), text: z.string().max(100_000) }).strict(),
+    channelMentionSchema,
+]);
+export const channelContentPartsSchema = z.array(channelContentPartSchema).max(200);
+export const channelReplyPartsSchema = z
+    .array(z.union([
+    z.object({ type: z.literal("text"), text: z.string().max(2000) }).strict(),
+    z.object({ type: z.literal("mention"), refId: z.string().min(1).max(200) }).strict(),
+    z
+        .object({
+        type: z.literal("mentionName"),
+        name: z.string().trim().min(1).max(200),
+        candidateRef: z.string().min(1).max(200).optional(),
+    })
+        .strict(),
+]))
+    .min(1)
+    .max(50);
+export const channelReplyRequestSchema = z
+    .object({
+    taskId: z.string().min(1),
+    inputId: z.string().min(1),
+    authorizationId: z.string().min(1).optional(),
+    toolCallId: z.string().min(1),
+    parts: channelReplyPartsSchema,
+})
+    .strict();
+const channelDeliveryResultSchema = z
+    .object({
+    status: z.enum(["sent", "failed", "unknown", "invalidated"]),
+    deliveryId: z.string(),
+    providerMessageId: z.string().optional(),
+    error: z.string().optional(),
+})
+    .strict();
+export const channelMentionClarificationSchema = z
+    .object({
+    status: z.literal("needs_clarification"),
+    unresolved: z
+        .array(z
+        .object({
+        name: z.string().max(200),
+        reason: z.enum(["ambiguous", "not_found", "unavailable", "selection_expired"]),
+        candidates: z
+            .array(z
+            .object({
+            ref: z.string().max(200),
+            name: z.string().max(200),
+            label: z.string().max(250),
+            kind: z.enum(["user", "bot", "unknown"]),
+        })
+            .strict())
+            .max(10),
+        truncated: z.boolean(),
+    })
+        .strict())
+        .min(1)
+        .max(50),
+})
+    .strict();
+export const channelReplyResultSchema = z.union([
+    channelDeliveryResultSchema,
+    channelMentionClarificationSchema,
+]);
+export function channelContentText(parts) {
+    return parts.map((part) => (part.type === "text" ? part.text : `@${part.name}`)).join("");
+}
+/** 只从 Host 已验证的会话输入解析 ref；模型不得直接提供平台 ID。 */
+export function resolveChannelReplyParts(parts, source) {
+    const targets = new Map();
+    for (const part of source) {
+        if (part.type !== "channelMention")
+            continue;
+        const target = channelMentionSchema.parse(part);
+        const previous = targets.get(target.refId);
+        if (previous && JSON.stringify(previous) !== JSON.stringify(target))
+            throw new Error("Conflicting channel mention reference");
+        targets.set(target.refId, target);
+    }
+    channelReplyPartsSchema.parse(parts);
+    const resolved = parts.map((part) => {
+        if (part.type === "text")
+            return part;
+        if (part.type === "mentionName")
+            throw new Error("Channel mention name must be resolved by Host");
+        const target = targets.get(part.refId);
+        if (!target)
+            throw new Error("Unknown channel mention reference");
+        return target;
+    });
+    if (!channelContentText(resolved).trim() || channelContentText(resolved).length > 2000)
+        throw new Error("Channel reply must contain 1–2000 characters");
+    return resolved;
+}
+export const channelReplyHostRequestSchema = channelReplyRequestSchema
+    .extend({
+    trace: dcodeProtocolTraceSchema.optional(),
+    workspacePath: z.string().min(1),
+    workspaceIdentity: z.string().optional(),
+    remoteSessionId: z.string().optional(),
+})
+    .strict();
+//# sourceMappingURL=channel-mention.js.map

package/node_modules/@dcode/shared/dist/channels.d.ts

@@ -1,11 +1,12 @@
 import type { ResourceUsageSnapshot, LoadCliMcpFromUserDirectoryRequest, LoadCliMcpFromUserDirectoryResult, MigrateLegacyCommonMcpRequest, MigrateLegacyCommonMcpResult, SaveCliMcpToUserDirectoryRequest } from "./index.js";
 import type { OAuthStateRegistration } from "./oauth.js";
+import type { WebRemoteControlContext, WebRemoteControlReconnectWorkspaceRequest, WebRemoteControlReconnectWorkspaceResult, WebRemoteControlStartOperationResult, WebRemoteControlStatus, WebRemoteControlTaskTarget, WebRemoteControlWorkspaceTarget } from "./web-remote-control.js";
 import type { AppSettings, Locale } from "./protocol.js";
 import type { StorageCleanRequest, StorageCleanResult, StorageUsageSnapshot } from "./storage.js";
 import type { ArmsCustomEventPayload, ConfigureFinalArmsCustomEventE2ERequest, FinalArmsCustomEventE2EEntry, RendererTelemetryEventPayload, TelemetryRendererContext } from "./telemetry.js";
 import type { RendererActionTraceBatchV1, RendererActionTraceConfigV1 } from "./rendererActionTrace.js";
 import type { RendererHeapSample } from "./validation.js";
-import type { CancelPendingRemoteConnectionRequest, BindRemoteWorkspaceSessionContextRequest, BotRemoteWorkspaceReconnectedEvent, BrowserViewScreenshotSurfacePreparePayload, BrowserViewScreenshotSurfaceReadyPayload, BrowserViewScreenshotSurfaceReleasePayload, BrowserViewCloseTabNotification, BrowserViewCloseTabRequest, BrowserViewResidencyReportPayload, BrowserViewResidencyTransitionPayload, BrowserViewRestoredTabShell, BrowserViewRestoreTabsRequest, BrowserViewViewportChangedPayload, ConnectRemoteRequest, DesktopCommandId, DesktopTitleBarTheme, DockerContainerInfo, EmbeddedBrowserOpenUrlRequest, EditorInfo, CreateTempTextAttachmentRequest, CreateTempTextAttachmentResult, SaveFileRequest, SaveFileResult, PrintPageToPdfResult, OpenInEditorOptions, PostUpdateReleaseNotesPayload, RemoteSessionClosedEvent, SSHConfigAliasOption, TaskNotificationPayload, WSLDistro, UpdateCheckResultPayload, UpdateStatePayload, DesktopZoomState, DesktopWindowChromeState, WindowControlsOverlayMetrics, WindowControlsOverlayReadyPayload } from "./platform.js";
+import type { CancelPendingRemoteConnectionRequest, BindRemoteWorkspaceSessionContextRequest, BotRemoteWorkspaceReconnectedEvent, BrowserViewScreenshotSurfacePreparePayload, BrowserViewScreenshotSurfaceReadyPayload, BrowserViewScreenshotSurfaceReleasePayload, BrowserViewCloseTabNotification, BrowserViewCloseTabRequest, BrowserViewResidencyReportPayload, BrowserViewResidencyTransitionPayload, BrowserViewRestoredTabShell, BrowserViewRestoreTabsRequest, BrowserViewViewportChangedPayload, ConnectRemoteRequest, DesktopCommandId, DesktopTitleBarTheme, DockerContainerInfo, EmbeddedBrowserOpenUrlRequest, EmbeddedBrowserPermissionPromptEvent, EmbeddedBrowserPermissionResolveRequest, EmbeddedBrowserSitePermissionUpdateRequest, EmbeddedBrowserSitePermissionResetRequest, EmbeddedBrowserSitePermissionsSnapshot, EditorInfo, CreateTempTextAttachmentRequest, CreateTempTextAttachmentResult, MaterializeWorkflowArtifactFileRequest, MaterializeWorkflowArtifactFileResult, SaveFileRequest, SaveFileResult, PrintPageToPdfResult, OpenInEditorOptions, PostUpdateReleaseNotesPayload, RemoteSessionClosedEvent, SSHConfigAliasOption, TaskNotificationPayload, WSLDistro, UpdateCheckResultPayload, UpdateStatePayload, DesktopZoomState, DesktopWindowChromeState, WindowControlsOverlayMetrics, WindowControlsOverlayReadyPayload } from "./platform.js";
 import type { BrowserViewportSize } from "./browser-use/command-metadata.js";
 import type { CuaAccessibilitySettingsResult, OpenCuaPermissionOnboardingOptions, PrepareCuaHelperPermissionDragResult } from "./cuaAccessibilitySettings.js";
 /** RPC 服务频道名。与 ServiceDescriptor.channelName 对应。 */
@@ -54,6 +55,8 @@ export declare const ServiceChannels: {
     readonly ClientConfig: "client-config";
     /** DCode 客户端场景配置服务 */
     readonly ClientScenes: "client-scenes";
+    readonly CloudContent: "cloud-content";
+    readonly MarketingTouch: "marketing-touch";
     /** Skills 管理服务 */
     readonly Skills: "skills";
     /** SSH 远程 skills 同步服务 */
@@ -66,6 +69,10 @@ export declare const ServiceChannels: {
     readonly Plugins: "plugins";
     /** 设置页插件管理服务（UI 平台能力面收敛，不再直触 dcodeAgentService） */
     readonly PluginManagement: "plugin-management";
+    /** 插件 UI 沙箱桥：host 读取 ui:// 资源并向 main 登记、代理 UI 发起的工具调用 */
+    readonly PluginUiBridge: "plugin-ui-bridge";
+    readonly PluginUiSampling: "plugin-ui-sampling";
+    readonly PluginUiAppTools: "plugin-ui-app-tools";
     /** Subagents 管理服务 */
     readonly Subagents: "subagents";
     /** Commands 管理服务 */
@@ -74,6 +81,8 @@ export declare const ServiceChannels: {
     readonly Hooks: "hooks";
     /** Memory 管理服务 */
     readonly Memory: "memory";
+    /** OutputStyle 管理服务 */
+    readonly OutputStyle: "output-style";
     /** 首次启动设置同步服务 */
     readonly SettingsSync: "settings-sync";
     /** Bots 远程聊天控制服务 */
@@ -84,12 +93,21 @@ export declare const ServiceChannels: {
     readonly PromptAttachmentTransfer: "prompt-attachment-transfer";
     /** 闲时任务管理服务（与 automation 服务面独立） */
     readonly OffPeakTask: "off-peak-task";
+    /** Highspeed 加速卡抽取与分享服务 */
+    readonly HighspeedCard: "highspeed-card";
     /** Onboarding 完成记录服务（本地持久化，后续上传服务器） */
     readonly OnboardingRecord: "onboarding-record";
 };
 export type ServiceChannelName = (typeof ServiceChannels)[keyof typeof ServiceChannels];
 /** Electron IPC 频道名。仅在 preload ↔ main 之间使用。 */
 export declare const PlatformChannels: {
+    /** renderer → main：释放插件 UI 沙箱（关闭 ports、撤 protocol handler、清 partition） */
+    readonly PluginSandboxDispose: "dcode:plugin-sandbox-dispose";
+    readonly PluginSandboxCopyImage: "dcode:plugin-sandbox-copy-image";
+    /** renderer → main：一次性消费插件 UI 沙箱 guest 的用户手势 token */
+    readonly PluginSandboxConsumeUserGesture: "dcode:plugin-sandbox-consume-user-gesture";
+    /** renderer → main：查询自身 webContents id，作为沙箱登记的 owner */
+    readonly PluginSandboxOwnerWebContentsId: "dcode:plugin-sandbox-owner-web-contents-id";
     /** 打开系统目录选择框 */
     readonly SelectDirectory: "dcode:select-directory";
     /** 打开系统文件选择框 */
@@ -98,6 +116,8 @@ export declare const PlatformChannels: {
     readonly SelectFiles: "dcode:select-files";
     /** Renderer → Main：写入宿主 ~/.dcode 临时文本附件 */
     readonly CreateTempTextAttachment: "dcode:create-temp-text-attachment";
+    /** Renderer → Main：把 dwf 产物某一版的字节落成本机副本（「作为文件打开」） */
+    readonly MaterializeWorkflowArtifactFile: "dcode:materialize-workflow-artifact-file";
     /** Renderer → Main：通过原生另存为对话框保存文件 */
     readonly SaveFile: "dcode:save-file";
     /** Renderer → Main：用 Chromium 打印引擎把当前页面 print 媒体版面导出为 PDF */
@@ -116,6 +136,15 @@ export declare const PlatformChannels: {
     readonly CancelPendingRemoteConnection: "dcode:cancel-pending-remote-connection";
     /** Renderer → Main：绑定远程 logical session 的 canonical workspace context */
     readonly BindRemoteWorkspaceSessionContext: "dcode:bind-remote-workspace-session-context";
+    /** 为当前 workspace 开启 Web 远程控制 */
+    readonly StartWebRemoteControl: "dcode:start-web-remote-control";
+    readonly ResetWebRemoteControlPairing: "dcode:reset-web-remote-control-pairing";
+    /** 关闭当前窗口的 Web 远程控制 */
+    readonly StopWebRemoteControl: "dcode:stop-web-remote-control";
+    /** 查询当前窗口的 Web 远程控制状态 */
+    readonly GetWebRemoteControlStatus: "dcode:get-web-remote-control-status";
+    /** Main → Renderer：当前窗口 Web 远程控制状态变化 */
+    readonly WebRemoteControlStatusChanged: "dcode:web-remote-control-status-changed";
     /** 释放当前窗口里的远程 session */
     readonly DisposeRemoteSession: "dcode:dispose-remote-session";
     /** Renderer → Main：检查本机 Docker daemon 是否可用 */
@@ -130,10 +159,18 @@ export declare const PlatformChannels: {
     readonly LoadMcpFromUserDirectory: "dcode:load-mcp-from-user-directory";
     /** Renderer → Main：保存 CLI MCP 配置到用户目录 */
     readonly SaveMcpToUserDirectory: "dcode:save-mcp-to-user-directory";
+    /** Renderer → Main：查询"关闭驻留托盘"能力（Linux 置灰判断；spec：docs/desktop/linux-close-to-tray.md） */
+    readonly GetCloseToTrayCapability: "dcode:get-close-to-tray-capability";
     /** Renderer 日志转发到 main 进程统一存储 */
     readonly Log: "dcode:log";
     /** Renderer → Main：同步当前窗口所有 tab 的 workspace 路径 */
     readonly SyncWindowTabs: "dcode:sync-window-tabs";
+    /** Renderer → Main：同步当前窗口可供 Web 远程控制切换的 workspace */
+    readonly SyncWebRemoteControlWorkspaces: "dcode:sync-web-remote-control-workspaces";
+    /** Renderer → Main：同步当前窗口可供 Web 远程控制展示的 task 快照 */
+    readonly SyncWebRemoteControlTasks: "dcode:sync-web-remote-control-tasks";
+    /** Main → Renderer：手机端请求重连当前窗口里的远程 workspace */
+    readonly WebRemoteControlReconnectWorkspace: "dcode:web-remote-control-reconnect-workspace";
     /** Renderer → Main：同步当前窗口的未读 task 数 */
     readonly SyncWindowUnreadCount: "dcode:sync-window-unread-count";
     /** Renderer → Main：当前窗口 active task，只更新 Main 的临时焦点映射。 */
@@ -150,6 +187,10 @@ export declare const PlatformChannels: {
     readonly CloseActiveContextRequest: "dcode:close-active-context-request";
     /** Main → Renderer：内置 webview 请求打开新的浏览器 tab */
     readonly OpenBrowserUrl: "dcode:open-browser-url";
+    /** Main → Renderer：内置浏览器网页权限/屏幕共享源/设备选择弹窗请求 */
+    readonly EmbeddedBrowserPermissionPrompt: "dcode:embedded-browser-permission-prompt";
+    /** Renderer → Main：用户对内置浏览器权限弹窗的决策回传 */
+    readonly EmbeddedBrowserPermissionResolve: "dcode:embedded-browser-permission-resolve";
     /** Main → Renderer：agent 首次 browser 命令建好受控 view，通知 renderer 自动开 browser-use tab */
     readonly BrowserViewReady: "dcode:browser-view-ready";
     /** Main → Renderer：agent 正在操作某个 browser-use tab，renderer 临时显示状态图标 */
@@ -193,6 +234,8 @@ export declare const PlatformChannels: {
     /** 获取资源管理器快照（CPU / 内存，按基础服务、内置插件、社区插件归类） */
     readonly GetResourceUsageSnapshot: "dcode:get-resource-usage-snapshot";
     readonly SetResourceUsageSamplingActive: "dcode:set-resource-usage-sampling-active";
+    readonly GetNetworkCaptureSnapshot: "dcode:get-network-capture-snapshot";
+    readonly ClearNetworkCapture: "dcode:clear-network-capture";
     /** 打开资源管理器窗口（其他窗口触发） */
     readonly OpenResourceManager: "dcode:open-resource-manager";
     /** 资源管理器「存储」tab：开始扫描本机 .dcode 占用（main 持有 StorageService，Worker 线程遍历） */
@@ -301,6 +344,14 @@ export declare const PlatformChannels: {
     readonly ImportChromeBrowserData: "dcode:import-chrome-browser-data";
     /** Renderer → Main：清理内置浏览器缓存或全部站点数据。 */
     readonly ClearEmbeddedBrowserData: "dcode:clear-embedded-browser-data";
+    /** Renderer → Main：读取内置浏览器站点权限记录（设置页「网站权限」） */
+    readonly GetEmbeddedBrowserSitePermissions: "dcode:get-embedded-browser-site-permissions";
+    /** Renderer → Main：修改/删除单条站点权限（state="ask" 表示删除） */
+    readonly SetEmbeddedBrowserSitePermission: "dcode:set-embedded-browser-site-permission";
+    /** Renderer → Main：清空全部站点权限记录 */
+    readonly ClearEmbeddedBrowserSitePermissions: "dcode:clear-embedded-browser-site-permissions";
+    /** Renderer → Main：重置单个站点的全部权限记录（站点权限设置标签页「重置」） */
+    readonly ResetEmbeddedBrowserSitePermission: "dcode:reset-embedded-browser-site-permission";
     /** Main → Renderer：通知有新版本已下载完毕，可以重启安装 */
     readonly UpdateReady: "dcode:update-ready";
     /** Main → Renderer：用户手动点击"检查更新"后的结果反馈（toast 用） */
@@ -376,6 +427,14 @@ export declare const CodingPlanWebviewChannels: {
     /** 官网页购买成功后通知 App 刷新 entitlements 并关闭 webview。 */
     readonly PurchaseComplete: "dcode:coding-plan-purchase-complete";
 };
+/**
+ * 插件 UI 沙箱 guest（partition=plugin-sandbox:<id>）的 main → guest preload 频道。
+ * preload 只把 MessagePort 组经 window.postMessage 转交给受信 shell，不暴露任何 contextBridge API。
+ */
+export declare const PluginSandboxChannels: {
+    /** main → guest：{ sandboxId, initId, names } + port1[]，shell 据此建立宿主端口 */
+    readonly Init: "dcode:plugin-sandbox-init";
+};
 /** 购买完成回传 payload。provider 与官网 CodingPlanProvider / auth-ready 事件 detail.provider 同构。 */
 export interface CodingPlanPurchaseCompletePayload {
     provider: "dcode" | "bigmodel";
@@ -407,6 +466,8 @@ export declare const InternalChannels: {
     readonly ScopedServicePortReady: "dcode:scoped-service-port-ready";
     /** preload → renderer：主进程已确认系统通知展示，renderer 可播放提示音 */
     readonly TaskNotificationSound: "dcode:task-notification-sound";
+    /** main → 宿主 renderer：插件 UI 沙箱的 MessagePort 组（port2[]），payload { sandboxId, initId, names } */
+    readonly PluginSandboxPorts: "dcode:plugin-sandbox-ports";
 };
 /** @deprecated `/ws` 已忽略该头；保留常量仅供旧客户端兼容。 */
 export declare const DCODE_RPC_CLIENT_MODE_HEADER = "x-dcode-rpc-client-mode";
@@ -463,6 +524,8 @@ export declare const HostMessageTypes: {
     readonly BrowserExecuteResult: "browser-execute-result";
     /** main → host：本地视频 canonical path 授权结果 */
     readonly LocalMediaPreviewPathAuthorizeResult: "local-media-preview-path-authorize-result";
+    /** main → host：插件 UI 沙箱登记结果（PluginSandboxRegisterResultPayload） */
+    readonly PluginSandboxRegisterResult: "plugin-sandbox-register-result";
     /** Main → Host：全局前台 DCode 窗口派生的 producer focus fact。 */
     readonly CuaPipFocusChanged: "cua-pip-focus-changed";
     /** main → host：要求 Host 现读本地 Source，并同步指定 Remote Environment。 */
@@ -470,6 +533,7 @@ export declare const HostMessageTypes: {
     /** main → host：资源管理器请求 Host 采样其后代进程（Agent / MCP / 终端）的 CPU 与内存 */
     readonly ResourceUsageSnapshotRequest: "resource-usage-snapshot-request";
     readonly ResourceUsageSnapshotCancel: "resource-usage-snapshot-cancel";
+    readonly NetworkCapture: "network-capture";
 };
 /** host process → main process 的反馈消息类型 */
 export declare const HostResponseTypes: {
@@ -505,6 +569,7 @@ export declare const HostResponseTypes: {
     readonly SessionCreateTelemetry: "session-create-telemetry";
     /** host → main：资源管理器采样结果（按 requestId 关联） */
     readonly ResourceUsageSnapshotResult: "resource-usage-snapshot-result";
+    readonly NetworkCaptureBatch: "network-capture-batch";
     /** host 内当前正在执行 prompt 的 agent session 数量变化 */
     readonly AgentRunningTaskCountChanged: "agent-running-task-count-changed";
     /** host 内指定 workspace 当前仍未 terminal 的 task 数量变化 */
@@ -559,6 +624,8 @@ export declare const HostResponseTypes: {
     readonly BrowserExecuteRequest: "browser-execute-request";
     /** host → main：请求授权 Agent 已精确校验的本地视频路径 */
     readonly LocalMediaPreviewPathAuthorizeRequest: "local-media-preview-path-authorize-request";
+    /** host → main：登记已校验的插件 UI HTML 与 CSP，换取 sandbox 句柄（PluginSandboxRegisterRequestPayload） */
+    readonly PluginSandboxRegisterRequest: "plugin-sandbox-register-request";
     /** host → main：RPC 网络遥测批次（channel.command 成功率/耗时） */
     readonly NetworkTelemetryBatch: "network-telemetry-batch";
     /** host → main：本地 Provisioning Source 成功持久化。 */
@@ -584,6 +651,10 @@ export interface PlatformChannelMap {
         request: CreateTempTextAttachmentRequest;
         response: CreateTempTextAttachmentResult;
     };
+    [PlatformChannels.MaterializeWorkflowArtifactFile]: {
+        request: MaterializeWorkflowArtifactFileRequest;
+        response: MaterializeWorkflowArtifactFileResult;
+    };
     [PlatformChannels.SaveFile]: {
         request: SaveFileRequest;
         response: SaveFileResult;
@@ -638,6 +709,26 @@ export interface PlatformChannelMap {
         request: BindRemoteWorkspaceSessionContextRequest;
         response: void;
     };
+    [PlatformChannels.StartWebRemoteControl]: {
+        request: WebRemoteControlContext;
+        response: WebRemoteControlStartOperationResult;
+    };
+    [PlatformChannels.ResetWebRemoteControlPairing]: {
+        request: WebRemoteControlContext;
+        response: WebRemoteControlStartOperationResult;
+    };
+    [PlatformChannels.StopWebRemoteControl]: {
+        request: void;
+        response: void;
+    };
+    [PlatformChannels.GetWebRemoteControlStatus]: {
+        request: void;
+        response: WebRemoteControlStatus;
+    };
+    [PlatformChannels.WebRemoteControlStatusChanged]: {
+        request: WebRemoteControlStatus;
+        response: void;
+    };
     [PlatformChannels.DisposeRemoteSession]: {
         request: string;
         response: void;
@@ -680,6 +771,18 @@ export interface PlatformChannelMap {
         };
         response: void;
     };
+    [PlatformChannels.SyncWebRemoteControlWorkspaces]: {
+        request: WebRemoteControlWorkspaceTarget[];
+        response: void;
+    };
+    [PlatformChannels.SyncWebRemoteControlTasks]: {
+        request: WebRemoteControlTaskTarget[];
+        response: void;
+    };
+    [PlatformChannels.WebRemoteControlReconnectWorkspace]: {
+        request: WebRemoteControlReconnectWorkspaceRequest;
+        response: WebRemoteControlReconnectWorkspaceResult;
+    };
     [PlatformChannels.SyncWindowUnreadCount]: {
         request: number;
         response: void;
@@ -726,6 +829,30 @@ export interface PlatformChannelMap {
         request: EmbeddedBrowserOpenUrlRequest;
         response: void;
     };
+    [PlatformChannels.EmbeddedBrowserPermissionPrompt]: {
+        request: EmbeddedBrowserPermissionPromptEvent;
+        response: void;
+    };
+    [PlatformChannels.EmbeddedBrowserPermissionResolve]: {
+        request: EmbeddedBrowserPermissionResolveRequest;
+        response: void;
+    };
+    [PlatformChannels.GetEmbeddedBrowserSitePermissions]: {
+        request: void;
+        response: EmbeddedBrowserSitePermissionsSnapshot;
+    };
+    [PlatformChannels.SetEmbeddedBrowserSitePermission]: {
+        request: EmbeddedBrowserSitePermissionUpdateRequest;
+        response: EmbeddedBrowserSitePermissionsSnapshot;
+    };
+    [PlatformChannels.ClearEmbeddedBrowserSitePermissions]: {
+        request: void;
+        response: EmbeddedBrowserSitePermissionsSnapshot;
+    };
+    [PlatformChannels.ResetEmbeddedBrowserSitePermission]: {
+        request: EmbeddedBrowserSitePermissionResetRequest;
+        response: EmbeddedBrowserSitePermissionsSnapshot;
+    };
     [PlatformChannels.BrowserViewReady]: {
         request: {
             workspaceKey: string;

package/node_modules/@dcode/shared/dist/channels.js

@@ -47,6 +47,8 @@ export const ServiceChannels = {
     ClientConfig: "client-config",
     /** DCode 客户端场景配置服务 */
     ClientScenes: "client-scenes",
+    CloudContent: "cloud-content",
+    MarketingTouch: "marketing-touch",
     /** Skills 管理服务 */
     Skills: "skills",
     /** SSH 远程 skills 同步服务 */
@@ -59,6 +61,10 @@ export const ServiceChannels = {
     Plugins: "plugins",
     /** 设置页插件管理服务（UI 平台能力面收敛，不再直触 dcodeAgentService） */
     PluginManagement: "plugin-management",
+    /** 插件 UI 沙箱桥：host 读取 ui:// 资源并向 main 登记、代理 UI 发起的工具调用 */
+    PluginUiBridge: "plugin-ui-bridge",
+    PluginUiSampling: "plugin-ui-sampling",
+    PluginUiAppTools: "plugin-ui-app-tools",
     /** Subagents 管理服务 */
     Subagents: "subagents",
     /** Commands 管理服务 */
@@ -67,6 +73,8 @@ export const ServiceChannels = {
     Hooks: "hooks",
     /** Memory 管理服务 */
     Memory: "memory",
+    /** OutputStyle 管理服务 */
+    OutputStyle: "output-style",
     /** 首次启动设置同步服务 */
     SettingsSync: "settings-sync",
     /** Bots 远程聊天控制服务 */
@@ -77,6 +85,8 @@ export const ServiceChannels = {
     PromptAttachmentTransfer: "prompt-attachment-transfer",
     /** 闲时任务管理服务（与 automation 服务面独立） */
     OffPeakTask: "off-peak-task",
+    /** Highspeed 加速卡抽取与分享服务 */
+    HighspeedCard: "highspeed-card",
     /** Onboarding 完成记录服务（本地持久化，后续上传服务器） */
     OnboardingRecord: "onboarding-record",
 };
@@ -85,6 +95,13 @@ export const ServiceChannels = {
 // ============================================================================
 /** Electron IPC 频道名。仅在 preload ↔ main 之间使用。 */
 export const PlatformChannels = {
+    /** renderer → main：释放插件 UI 沙箱（关闭 ports、撤 protocol handler、清 partition） */
+    PluginSandboxDispose: "dcode:plugin-sandbox-dispose",
+    PluginSandboxCopyImage: "dcode:plugin-sandbox-copy-image",
+    /** renderer → main：一次性消费插件 UI 沙箱 guest 的用户手势 token */
+    PluginSandboxConsumeUserGesture: "dcode:plugin-sandbox-consume-user-gesture",
+    /** renderer → main：查询自身 webContents id，作为沙箱登记的 owner */
+    PluginSandboxOwnerWebContentsId: "dcode:plugin-sandbox-owner-web-contents-id",
     /** 打开系统目录选择框 */
     SelectDirectory: "dcode:select-directory",
     /** 打开系统文件选择框 */
@@ -93,6 +110,8 @@ export const PlatformChannels = {
     SelectFiles: "dcode:select-files",
     /** Renderer → Main：写入宿主 ~/.dcode 临时文本附件 */
     CreateTempTextAttachment: "dcode:create-temp-text-attachment",
+    /** Renderer → Main：把 dwf 产物某一版的字节落成本机副本（「作为文件打开」） */
+    MaterializeWorkflowArtifactFile: "dcode:materialize-workflow-artifact-file",
     /** Renderer → Main：通过原生另存为对话框保存文件 */
     SaveFile: "dcode:save-file",
     /** Renderer → Main：用 Chromium 打印引擎把当前页面 print 媒体版面导出为 PDF */
@@ -111,6 +130,15 @@ export const PlatformChannels = {
     CancelPendingRemoteConnection: "dcode:cancel-pending-remote-connection",
     /** Renderer → Main：绑定远程 logical session 的 canonical workspace context */
     BindRemoteWorkspaceSessionContext: "dcode:bind-remote-workspace-session-context",
+    /** 为当前 workspace 开启 Web 远程控制 */
+    StartWebRemoteControl: "dcode:start-web-remote-control",
+    ResetWebRemoteControlPairing: "dcode:reset-web-remote-control-pairing",
+    /** 关闭当前窗口的 Web 远程控制 */
+    StopWebRemoteControl: "dcode:stop-web-remote-control",
+    /** 查询当前窗口的 Web 远程控制状态 */
+    GetWebRemoteControlStatus: "dcode:get-web-remote-control-status",
+    /** Main → Renderer：当前窗口 Web 远程控制状态变化 */
+    WebRemoteControlStatusChanged: "dcode:web-remote-control-status-changed",
     /** 释放当前窗口里的远程 session */
     DisposeRemoteSession: "dcode:dispose-remote-session",
     /** Renderer → Main：检查本机 Docker daemon 是否可用 */
@@ -125,10 +153,18 @@ export const PlatformChannels = {
     LoadMcpFromUserDirectory: "dcode:load-mcp-from-user-directory",
     /** Renderer → Main：保存 CLI MCP 配置到用户目录 */
     SaveMcpToUserDirectory: "dcode:save-mcp-to-user-directory",
+    /** Renderer → Main：查询"关闭驻留托盘"能力（Linux 置灰判断；spec：docs/desktop/linux-close-to-tray.md） */
+    GetCloseToTrayCapability: "dcode:get-close-to-tray-capability",
     /** Renderer 日志转发到 main 进程统一存储 */
     Log: "dcode:log",
     /** Renderer → Main：同步当前窗口所有 tab 的 workspace 路径 */
     SyncWindowTabs: "dcode:sync-window-tabs",
+    /** Renderer → Main：同步当前窗口可供 Web 远程控制切换的 workspace */
+    SyncWebRemoteControlWorkspaces: "dcode:sync-web-remote-control-workspaces",
+    /** Renderer → Main：同步当前窗口可供 Web 远程控制展示的 task 快照 */
+    SyncWebRemoteControlTasks: "dcode:sync-web-remote-control-tasks",
+    /** Main → Renderer：手机端请求重连当前窗口里的远程 workspace */
+    WebRemoteControlReconnectWorkspace: "dcode:web-remote-control-reconnect-workspace",
     /** Renderer → Main：同步当前窗口的未读 task 数 */
     SyncWindowUnreadCount: "dcode:sync-window-unread-count",
     /** Renderer → Main：当前窗口 active task，只更新 Main 的临时焦点映射。 */
@@ -145,6 +181,10 @@ export const PlatformChannels = {
     CloseActiveContextRequest: "dcode:close-active-context-request",
     /** Main → Renderer：内置 webview 请求打开新的浏览器 tab */
     OpenBrowserUrl: "dcode:open-browser-url",
+    /** Main → Renderer：内置浏览器网页权限/屏幕共享源/设备选择弹窗请求 */
+    EmbeddedBrowserPermissionPrompt: "dcode:embedded-browser-permission-prompt",
+    /** Renderer → Main：用户对内置浏览器权限弹窗的决策回传 */
+    EmbeddedBrowserPermissionResolve: "dcode:embedded-browser-permission-resolve",
     /** Main → Renderer：agent 首次 browser 命令建好受控 view，通知 renderer 自动开 browser-use tab */
     BrowserViewReady: "dcode:browser-view-ready",
     /** Main → Renderer：agent 正在操作某个 browser-use tab，renderer 临时显示状态图标 */
@@ -188,6 +228,8 @@ export const PlatformChannels = {
     /** 获取资源管理器快照（CPU / 内存，按基础服务、内置插件、社区插件归类） */
     GetResourceUsageSnapshot: "dcode:get-resource-usage-snapshot",
     SetResourceUsageSamplingActive: "dcode:set-resource-usage-sampling-active",
+    GetNetworkCaptureSnapshot: "dcode:get-network-capture-snapshot",
+    ClearNetworkCapture: "dcode:clear-network-capture",
     /** 打开资源管理器窗口（其他窗口触发） */
     OpenResourceManager: "dcode:open-resource-manager",
     /** 资源管理器「存储」tab：开始扫描本机 .dcode 占用（main 持有 StorageService，Worker 线程遍历） */
@@ -296,6 +338,14 @@ export const PlatformChannels = {
     ImportChromeBrowserData: "dcode:import-chrome-browser-data",
     /** Renderer → Main：清理内置浏览器缓存或全部站点数据。 */
     ClearEmbeddedBrowserData: "dcode:clear-embedded-browser-data",
+    /** Renderer → Main：读取内置浏览器站点权限记录（设置页「网站权限」） */
+    GetEmbeddedBrowserSitePermissions: "dcode:get-embedded-browser-site-permissions",
+    /** Renderer → Main：修改/删除单条站点权限（state="ask" 表示删除） */
+    SetEmbeddedBrowserSitePermission: "dcode:set-embedded-browser-site-permission",
+    /** Renderer → Main：清空全部站点权限记录 */
+    ClearEmbeddedBrowserSitePermissions: "dcode:clear-embedded-browser-site-permissions",
+    /** Renderer → Main：重置单个站点的全部权限记录（站点权限设置标签页「重置」） */
+    ResetEmbeddedBrowserSitePermission: "dcode:reset-embedded-browser-site-permission",
     /** Main → Renderer：通知有新版本已下载完毕，可以重启安装 */
     UpdateReady: "dcode:update-ready",
     /** Main → Renderer：用户手动点击"检查更新"后的结果反馈（toast 用） */
@@ -372,6 +422,14 @@ export const CodingPlanWebviewChannels = {
     /** 官网页购买成功后通知 App 刷新 entitlements 并关闭 webview。 */
     PurchaseComplete: "dcode:coding-plan-purchase-complete",
 };
+/**
+ * 插件 UI 沙箱 guest（partition=plugin-sandbox:<id>）的 main → guest preload 频道。
+ * preload 只把 MessagePort 组经 window.postMessage 转交给受信 shell，不暴露任何 contextBridge API。
+ */
+export const PluginSandboxChannels = {
+    /** main → guest：{ sandboxId, initId, names } + port1[]，shell 据此建立宿主端口 */
+    Init: "dcode:plugin-sandbox-init",
+};
 // ============================================================================
 // 内部传输频道 —— 框架级别的通信
 // ============================================================================
@@ -387,6 +445,8 @@ export const InternalChannels = {
     ScopedServicePortReady: "dcode:scoped-service-port-ready",
     /** preload → renderer：主进程已确认系统通知展示，renderer 可播放提示音 */
     TaskNotificationSound: "dcode:task-notification-sound",
+    /** main → 宿主 renderer：插件 UI 沙箱的 MessagePort 组（port2[]），payload { sandboxId, initId, names } */
+    PluginSandboxPorts: "dcode:plugin-sandbox-ports",
 };
 /** @deprecated `/ws` 已忽略该头；保留常量仅供旧客户端兼容。 */
 export const DCODE_RPC_CLIENT_MODE_HEADER = "x-dcode-rpc-client-mode";
@@ -446,6 +506,8 @@ export const HostMessageTypes = {
     BrowserExecuteResult: "browser-execute-result",
     /** main → host：本地视频 canonical path 授权结果 */
     LocalMediaPreviewPathAuthorizeResult: "local-media-preview-path-authorize-result",
+    /** main → host：插件 UI 沙箱登记结果（PluginSandboxRegisterResultPayload） */
+    PluginSandboxRegisterResult: "plugin-sandbox-register-result",
     /** Main → Host：全局前台 DCode 窗口派生的 producer focus fact。 */
     CuaPipFocusChanged: "cua-pip-focus-changed",
     /** main → host：要求 Host 现读本地 Source，并同步指定 Remote Environment。 */
@@ -453,6 +515,7 @@ export const HostMessageTypes = {
     /** main → host：资源管理器请求 Host 采样其后代进程（Agent / MCP / 终端）的 CPU 与内存 */
     ResourceUsageSnapshotRequest: "resource-usage-snapshot-request",
     ResourceUsageSnapshotCancel: "resource-usage-snapshot-cancel",
+    NetworkCapture: "network-capture",
 };
 /** host process → main process 的反馈消息类型 */
 export const HostResponseTypes = {
@@ -488,6 +551,7 @@ export const HostResponseTypes = {
     SessionCreateTelemetry: "session-create-telemetry",
     /** host → main：资源管理器采样结果（按 requestId 关联） */
     ResourceUsageSnapshotResult: "resource-usage-snapshot-result",
+    NetworkCaptureBatch: "network-capture-batch",
     /** host 内当前正在执行 prompt 的 agent session 数量变化 */
     AgentRunningTaskCountChanged: "agent-running-task-count-changed",
     /** host 内指定 workspace 当前仍未 terminal 的 task 数量变化 */
@@ -542,6 +606,8 @@ export const HostResponseTypes = {
     BrowserExecuteRequest: "browser-execute-request",
     /** host → main：请求授权 Agent 已精确校验的本地视频路径 */
     LocalMediaPreviewPathAuthorizeRequest: "local-media-preview-path-authorize-request",
+    /** host → main：登记已校验的插件 UI HTML 与 CSP，换取 sandbox 句柄（PluginSandboxRegisterRequestPayload） */
+    PluginSandboxRegisterRequest: "plugin-sandbox-register-request",
     /** host → main：RPC 网络遥测批次（channel.command 成功率/耗时） */
     NetworkTelemetryBatch: "network-telemetry-batch",
     /** host → main：本地 Provisioning Source 成功持久化。 */

package/node_modules/@dcode/shared/dist/clientConfig.d.ts

@@ -3,6 +3,7 @@ import { type PluginStoreOrder } from "./pluginStoreOrder.js";
 /** 只允许显式接入的公开字段进入服务快照，不透传账户或 Provider 配置。 */
 export interface ClientConfigSnapshot {
     pluginStoreOrder: PluginStoreOrder | null;
+    zsrcUrl: string | null;
 }
 export declare const clientConfigReadOptionsSchema: z.ZodObject<{
     forceRefresh: z.ZodOptional<z.ZodBoolean>;

package/node_modules/@dcode/shared/dist/clientConfig.js

@@ -1,5 +1,12 @@
 import { z } from "zod";
 import { parsePluginStoreOrder } from "./pluginStoreOrder.js";
+const zsrcSchema = z.object({
+    url: z
+        .string()
+        .trim()
+        .url()
+        .refine((value) => /^https?:\/\//i.test(value)),
+});
 export const clientConfigReadOptionsSchema = z.object({
     forceRefresh: z.boolean().optional(),
 });
@@ -7,7 +14,12 @@ const envelopeSchema = z.object({
     code: z.literal(0),
     data: z
         .object({
-        configs: z.object({ pluginStoreOrder: z.unknown().optional() }).nullish(),
+        configs: z
+            .object({
+            pluginStoreOrder: z.unknown().optional(),
+            zsrc: z.unknown().optional(),
+        })
+            .nullish(),
     })
         .nullish(),
 });
@@ -15,6 +27,10 @@ export function parseClientConfigSnapshot(payload) {
     const parsed = envelopeSchema.safeParse(payload);
     if (!parsed.success)
         throw new Error("Invalid public client config response");
-    return { pluginStoreOrder: parsePluginStoreOrder(parsed.data.data?.configs?.pluginStoreOrder) };
+    const configs = parsed.data.data?.configs;
+    return {
+        pluginStoreOrder: parsePluginStoreOrder(configs?.pluginStoreOrder),
+        zsrcUrl: zsrcSchema.safeParse(configs?.zsrc).data?.url ?? null,
+    };
 }
 //# sourceMappingURL=clientConfig.js.map