@dipoleml/dcode-cli 1.1.0 → 1.2.1

package/node_modules/@dcode/shared/dist/networkCapture.js

@@ -0,0 +1,41 @@
+import { z } from "zod";
+export const NETWORK_CAPTURE_LIMIT = 1_000;
+export const networkCaptureControlSchema = z
+    .object({
+    captureId: z.string().min(1).max(100).nullable(),
+})
+    .strict();
+export const networkRequestRecordSchema = z
+    .object({
+    timestamp: z.number().int().nonnegative(),
+    processType: z.enum(["main", "host", "renderer", "cli"]),
+    pid: z.number().int().nonnegative(),
+    method: z.string().min(1).max(32),
+    url: z.string().max(2_048),
+})
+    .strict();
+export const networkCaptureBatchSchema = z
+    .object({
+    captureId: z.string().min(1).max(100),
+    records: z.array(networkRequestRecordSchema).max(100),
+    dropped: z.number().int().nonnegative(),
+})
+    .strict();
+/** 不保留凭据、fragment 或查询值；仍保留路径和查询键用于辨认请求。 */
+export function sanitizeNetworkCaptureUrl(value) {
+    try {
+        const url = new URL(value);
+        if (!["http:", "https:", "ws:", "wss:"].includes(url.protocol))
+            return;
+        url.username = "";
+        url.password = "";
+        url.hash = "";
+        for (const key of new Set(url.searchParams.keys()))
+            url.searchParams.set(key, "[redacted]");
+        return url.href.slice(0, 2_048);
+    }
+    catch {
+        return;
+    }
+}
+//# sourceMappingURL=networkCapture.js.map

package/node_modules/@dcode/shared/dist/node/genUiPaths.d.ts

@@ -0,0 +1,6 @@
+import { type GenUiScope } from "../gen-ui/index.js";
+/** Execution Host supplies this process-scoped root; models never choose it. */
+export declare const GEN_UI_OUTPUT_ROOT_ENV = "DCODE_GEN_UI_OUTPUT_ROOT";
+export declare const GEN_UI_OUTPUT_DIRECTORY = "visualizations";
+export declare function getGenUiOutputDirectory(outputRoot: string, scope: GenUiScope): string;
+//# sourceMappingURL=genUiPaths.d.ts.map

package/node_modules/@dcode/shared/dist/node/genUiPaths.js

@@ -0,0 +1,16 @@
+import { createHash } from "node:crypto";
+import { isAbsolute, join, resolve } from "node:path";
+import { buildGenUiScopeKey, genUiScopeSchema } from "../gen-ui/index.js";
+/** Execution Host supplies this process-scoped root; models never choose it. */
+export const GEN_UI_OUTPUT_ROOT_ENV = "DCODE_GEN_UI_OUTPUT_ROOT";
+export const GEN_UI_OUTPUT_DIRECTORY = "visualizations";
+export function getGenUiOutputDirectory(outputRoot, scope) {
+    genUiScopeSchema.parse(scope);
+    if (!isAbsolute(outputRoot) || !isAbsolute(scope.workspacePath))
+        throw new Error("Gen UI output root and workspace must be absolute");
+    const root = resolve(outputRoot);
+    // 根因：固定输出目录被误当成工作区外限制，打开 Home 时会阻断上下文初始化。
+    // 目录由 Host 决定；工作区可以包含它，workspace/session 子目录只负责组织生成文件。
+    return join(root, createHash("sha256").update(buildGenUiScopeKey(scope)).digest("hex"));
+}
+//# sourceMappingURL=genUiPaths.js.map

package/node_modules/@dcode/shared/dist/node/genUiPaths.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=genUiPaths.test.d.ts.map

package/node_modules/@dcode/shared/dist/node/genUiPaths.test.js

@@ -0,0 +1,30 @@
+import { describe, expect, it } from "vitest";
+import { dirname, join, parse, resolve } from "node:path";
+import { getGenUiOutputDirectory } from "./genUiPaths.js";
+const scope = { workspacePath: resolve("workspace"), sessionId: "session" };
+const root = resolve("user-data", "visualizations");
+describe("Gen UI output directory", () => {
+    it("isolates sessions and workspace identities with a stable safe path", () => {
+        const directory = getGenUiOutputDirectory(root, scope);
+        expect(directory).toMatch(/[a-f0-9]{64}$/u);
+        expect(getGenUiOutputDirectory(root, { ...scope })).toBe(directory);
+        expect(getGenUiOutputDirectory(root, { ...scope, sessionId: "../other" })).not.toBe(directory);
+        expect(getGenUiOutputDirectory(root, { ...scope, workspaceIdentity: "ssh:first:/workspace" })).not.toBe(directory);
+        const remote = { ...scope, workspaceIdentity: "ssh:first:/workspace" };
+        expect(getGenUiOutputDirectory(root, { ...remote, workspacePath: resolve("other-path") })).toBe(getGenUiOutputDirectory(root, remote));
+        expect(getGenUiOutputDirectory(root, { ...remote, workspaceIdentity: "ssh:second:/workspace" })).not.toBe(getGenUiOutputDirectory(root, remote));
+    });
+    it.each([undefined, "ssh:executor:/home/dev"])("allows the fixed output root within or equal to the workspace (%s)", (workspaceIdentity) => {
+        for (const outputRoot of [scope.workspacePath, join(scope.workspacePath, ".dcode")]) {
+            const directory = getGenUiOutputDirectory(outputRoot, { ...scope, workspaceIdentity });
+            expect(dirname(directory)).toBe(outputRoot);
+            expect(directory).not.toBe(outputRoot);
+        }
+        expect(dirname(getGenUiOutputDirectory(root, { ...scope, workspacePath: parse(root).root }))).toBe(root);
+    });
+    it("rejects relative roots and workspace paths", () => {
+        expect(() => getGenUiOutputDirectory("relative", scope)).toThrow();
+        expect(() => getGenUiOutputDirectory(root, { ...scope, workspacePath: "relative" })).toThrow();
+    });
+});
+//# sourceMappingURL=genUiPaths.test.js.map

package/node_modules/@dcode/shared/dist/node/networkCapture.d.ts

@@ -0,0 +1,8 @@
+import { type NetworkCaptureBatch, type NetworkRequestRecord } from "../networkCapture.js";
+/** MCP 的 HTTP/SSE/OAuth 共用此异步上下文，不影响原 fetch 的代理与证书策略。 */
+export declare function withoutNetworkCapture<T>(operation: () => T): T;
+/** 仅订阅请求创建事件；不开启时不持有监听器或定时器，不读取流。 */
+export declare function createNodeNetworkCapture(processType: NetworkRequestRecord["processType"], onBatch: (batch: NetworkCaptureBatch) => void): {
+    setCaptureId(captureId: string | null): void;
+};
+//# sourceMappingURL=networkCapture.d.ts.map

package/node_modules/@dcode/shared/dist/node/networkCapture.js

@@ -0,0 +1,96 @@
+import { AsyncLocalStorage } from "node:async_hooks";
+import { channel } from "node:diagnostics_channel";
+import { sanitizeNetworkCaptureUrl, } from "../networkCapture.js";
+const excluded = new AsyncLocalStorage();
+/** MCP 的 HTTP/SSE/OAuth 共用此异步上下文，不影响原 fetch 的代理与证书策略。 */
+export function withoutNetworkCapture(operation) {
+    return excluded.run(true, operation);
+}
+/** 仅订阅请求创建事件；不开启时不持有监听器或定时器，不读取流。 */
+export function createNodeNetworkCapture(processType, onBatch) {
+    let captureId = null;
+    let records = [];
+    let dropped = 0;
+    let timer;
+    const flush = () => {
+        timer = undefined;
+        if (!captureId)
+            return;
+        const batch = { captureId, records, dropped };
+        records = [];
+        dropped = 0;
+        // 诊断消费者退出或抛错不能破坏业务请求。
+        try {
+            onBatch(batch);
+        }
+        catch {
+            /* 仅丢弃观测 */
+        }
+    };
+    const record = (method, rawUrl) => {
+        if (!captureId || excluded.getStore() || method === "CONNECT")
+            return;
+        if (records.length >= 100) {
+            dropped++;
+            return;
+        }
+        const url = sanitizeNetworkCaptureUrl(rawUrl);
+        if (!url)
+            return;
+        records.push({
+            timestamp: Date.now(),
+            processType,
+            pid: process.pid,
+            method: method.slice(0, 32),
+            url,
+        });
+        timer ??= setTimeout(flush, 250);
+        timer.unref();
+    };
+    const undici = (message) => {
+        try {
+            const { request } = message;
+            const url = new URL(request.path, request.origin);
+            if (request.upgrade?.toLowerCase() === "websocket")
+                url.protocol = url.protocol === "https:" ? "wss:" : "ws:";
+            record(request.method, url.href);
+        }
+        catch {
+            /* 非标准客户端的诊断事件不影响请求 */
+        }
+    };
+    const http = (message) => {
+        try {
+            const { request } = message;
+            // forward proxy 的 path 已是绝对 URL；不可把代理地址当作目标地址。
+            const url = new URL(request.path, `${request.protocol}//${String(request.getHeader("host") ?? request.host)}`);
+            if (String(request.getHeader("upgrade")).toLowerCase() === "websocket")
+                url.protocol = url.protocol === "https:" ? "wss:" : "ws:";
+            record(request.method, url.href);
+        }
+        catch {
+            /* 仅忽略不可识别的元数据 */
+        }
+    };
+    return {
+        setCaptureId(next) {
+            if (captureId === next)
+                return;
+            if (captureId) {
+                channel("undici:request:create").unsubscribe(undici);
+                channel("http.client.request.start").unsubscribe(http);
+            }
+            if (timer)
+                clearTimeout(timer);
+            timer = undefined;
+            records = [];
+            dropped = 0;
+            captureId = next;
+            if (captureId) {
+                channel("undici:request:create").subscribe(undici);
+                channel("http.client.request.start").subscribe(http);
+            }
+        },
+    };
+}
+//# sourceMappingURL=networkCapture.js.map

package/node_modules/@dcode/shared/dist/node/officialPluginCache.d.ts

@@ -1,4 +1,4 @@
-interface OfficialPluginCacheRoot {
+export interface OfficialPluginCacheRoot {
     /** 缓存目录名，即官方插件 name。 */
     name: string;
     /** 数字感知降序后的可用版本目录，首项为最新版本。 */
@@ -10,5 +10,4 @@ interface OfficialPluginCacheRoot {
  * 版本目录跳过 CLI 的备份 / seed 锁 / 临时目录，并按数字感知降序排序，与 CLI 回退选取一致。
  */
 export declare function scanOfficialPluginCacheRoots(pluginStorageRoot: string): Promise<OfficialPluginCacheRoot[]>;
-export {};
 //# sourceMappingURL=officialPluginCache.d.ts.map

package/node_modules/@dcode/shared/dist/node/subagentMarkdownMigration.d.ts

@@ -1,4 +1,4 @@
-interface SubagentMarkdownMigrationResult {
+export interface SubagentMarkdownMigrationResult {
     migrated: string[];
     failures: Array<{
         path: string;
@@ -9,5 +9,4 @@ interface SubagentMarkdownMigrationResult {
 export declare function migrateSubagentStateFile(path: string): Promise<void>;
 /** 调用方只传所属环境的用户 agents 根目录；项目/插件不得进入自动写入入口。 */
 export declare function migrateUserSubagentMarkdown(userRoot: string): Promise<SubagentMarkdownMigrationResult>;
-export {};
 //# sourceMappingURL=subagentMarkdownMigration.d.ts.map

package/node_modules/@dcode/shared/dist/node.d.ts

@@ -4,6 +4,8 @@
  * This subpath must not be imported by renderer/browser bundles.
  */
 export { acquireFileLock } from "./node/atomicFileLock.js";
+export { createNodeNetworkCapture, withoutNetworkCapture } from "./node/networkCapture.js";
+export { GEN_UI_OUTPUT_ROOT_ENV, GEN_UI_OUTPUT_DIRECTORY, getGenUiOutputDirectory, } from "./node/genUiPaths.js";
 export { scanOfficialPluginCacheRoots } from "./node/officialPluginCache.js";
 export { migrateUserSubagentMarkdown, migrateSubagentStateFile, } from "./node/subagentMarkdownMigration.js";
 export { atomicWritePrivateTextFile, backupCorruptFile, withFileLock, type SharedFileLockOptions, } from "./node/privateFilePersistence.js";

package/node_modules/@dcode/shared/dist/node.js

@@ -4,6 +4,8 @@
  * This subpath must not be imported by renderer/browser bundles.
  */
 export { acquireFileLock } from "./node/atomicFileLock.js";
+export { createNodeNetworkCapture, withoutNetworkCapture } from "./node/networkCapture.js";
+export { GEN_UI_OUTPUT_ROOT_ENV, GEN_UI_OUTPUT_DIRECTORY, getGenUiOutputDirectory, } from "./node/genUiPaths.js";
 export { scanOfficialPluginCacheRoots } from "./node/officialPluginCache.js";
 export { migrateUserSubagentMarkdown, migrateSubagentStateFile, } from "./node/subagentMarkdownMigration.js";
 export { atomicWritePrivateTextFile, backupCorruptFile, withFileLock, } from "./node/privateFilePersistence.js";

package/node_modules/@dcode/shared/dist/output-style.d.ts

@@ -0,0 +1,17 @@
+export interface OutputStyle {
+    id: string;
+    name: string;
+    description: string;
+    content: string;
+    isBuiltIn: boolean;
+    enabled: boolean;
+    filePath?: string;
+}
+export interface OutputStyleConfig {
+    name: string;
+    description: string;
+    content: string;
+    enabled?: boolean;
+}
+export type OutputStyleGenerationStatus = 'idle' | 'generating' | 'completed' | 'error';
+//# sourceMappingURL=output-style.d.ts.map

package/node_modules/@dcode/shared/dist/output-style.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=output-style.js.map

package/node_modules/@dcode/shared/dist/platform.d.ts

@@ -1,6 +1,8 @@
 import type { DockerConnectOptions, RemoteTarget, SSHConnectOptions, WSLConnectOptions } from "./remoteTarget.js";
+import type { PluginSandboxPlatformPort } from "./mcp-apps/contract.js";
 import type { LoadCliMcpFromUserDirectoryRequest, LoadCliMcpFromUserDirectoryResult, MigrateLegacyCommonMcpRequest, MigrateLegacyCommonMcpResult, SaveCliMcpToUserDirectoryRequest } from "./mcp.js";
 import type { OAuthStateRegistration } from "./oauth.js";
+import type { WebRemoteControlContext, WebRemoteControlReconnectWorkspaceResult, WebRemoteControlStartOperationResult, WebRemoteControlStatus, WebRemoteControlTaskTarget, WebRemoteControlReconnectWorkspaceRequest, WebRemoteControlWorkspaceTarget } from "./web-remote-control.js";
 import type { AppSettings, Locale } from "./protocol.js";
 import type { ArmsCustomEventPayload, RendererTelemetryEventPayload } from "./telemetry.js";
 import type { RendererActionTraceBatchV1, RendererActionTraceConfigV1 } from "./rendererActionTrace.js";
@@ -173,6 +175,25 @@ export interface CreateTempTextAttachmentResult {
     mimeType: "text/plain";
     sizeBytes: number;
 }
+/**
+ * dwf 产物「作为文件打开」：把某一版产物的字节落成宿主本机上的一份副本
+ * （docs/dynamic-workflow/authoring.md「How the user sees them」）。
+ *
+ * ⚠ 术语：artifact = 脚本经 `artifact.*` 发布给用户看的产出，不是引擎的 `RunSettlement.artifact`。
+ */
+export interface MaterializeWorkflowArtifactFileRequest {
+    runId: string;
+    artifactId: string;
+    /** 这份字节属于哪一版；副本按版本分目录，一版一份。 */
+    version: number;
+    /** 期望的文件名（含扩展名，扩展名决定系统用哪个 App 打开）；宿主会再清洗一次。 */
+    fileName: string;
+    bytes: Uint8Array;
+}
+export interface MaterializeWorkflowArtifactFileResult {
+    /** 副本在宿主本机上的绝对路径。 */
+    localPath: string;
+}
 export type SaveFileRequest = {
     data: ArrayBuffer;
     sourceUrl?: never;
@@ -195,7 +216,7 @@ export interface PrintPageToPdfResult {
     /** "print_in_progress" | "print_failed" */
     error?: string;
 }
-export declare function createOpenInEditorRemoteTarget(target: RemoteTarget): OpenInEditorRemoteTarget;
+export declare function createOpenInEditorRemoteTarget(target: RemoteTarget): OpenInEditorRemoteTarget | undefined;
 export interface WSLDistro {
     name: string;
     isDefault: boolean;
@@ -270,6 +291,17 @@ export interface WindowControlsOverlayReadyPayload {
 export interface DesktopZoomState {
     zoomLevel: number;
 }
+/**
+ * 桌面端"关闭驻留托盘"能力（spec：docs/desktop/linux-close-to-tray.md）。
+ * Linux 上取决于 session DBus 是否有 StatusNotifierWatcher（KDE/XFCE 原生有，
+ * GNOME 需 AppIndicator 扩展）；Windows 固定 supported=true；macOS/Web 不查询。
+ */
+export interface DesktopCloseToTrayCapability {
+    /** 关闭驻留托盘是否可用 */
+    supported: boolean;
+    /** 是否为 GNOME 系桌面且无托盘；设置页据此追加"安装 AppIndicator 扩展"提示 */
+    gnomeLikeWithoutTray: boolean;
+}
 export interface DesktopWindowChromeState {
     isMaximized: boolean;
     /** 本机 macOS 主版本；非 macOS 或无法解析时为 null。 */
@@ -305,6 +337,79 @@ export interface EmbeddedBrowserOpenUrlRequest {
     browserGeneration?: number;
     sourceTabId?: string;
 }
+export interface EmbeddedBrowserPermissionDeviceOption {
+    deviceId: string;
+    name?: string;
+    vendorId?: number;
+    productId?: number;
+    serialNumber?: string;
+}
+export interface EmbeddedBrowserPermissionScreenOption {
+    sourceId: string;
+    name: string;
+    /** 源类型：整个屏幕 / 窗口，由 main 按 desktopCapturer source id 前缀判定。 */
+    kind: "screen" | "window";
+    thumbnailDataUrl?: string;
+}
+/** Main → Renderer 的内置浏览器权限弹窗请求；kind 决定 renderer 渲染哪类弹窗。 */
+export type EmbeddedBrowserPermissionPromptEvent = {
+    requestId: string;
+    kind: "permission";
+    origin: string;
+    permission: string;
+    mediaTypes?: string[];
+    /** 发起请求的 guest webContents id；renderer 据此只在归属 tab 渲染，
+     *  避免后台 tab 的请求显示在当前 tab 造成误批准。 */
+    guestWebContentsId?: number;
+} | {
+    requestId: string;
+    kind: "screen-share";
+    origin: string;
+    screens: EmbeddedBrowserPermissionScreenOption[];
+    /** 屏幕共享无 tab 锚定语义，恒缺省（兜底渲染）。 */
+    guestWebContentsId?: number;
+} | {
+    requestId: string;
+    kind: "device";
+    origin: string;
+    /** select-hid-device / select-usb-device / select-serial-port / select-bluetooth-device */
+    permission: string;
+    devices: EmbeddedBrowserPermissionDeviceOption[];
+    /** 发起请求的 guest webContents id（serial/蓝牙可取到；hid/usb 受 frame 限制
+     *  缺省，renderer 兜底渲染）。 */
+    guestWebContentsId?: number;
+};
+export type EmbeddedBrowserPermissionResolution = {
+    action: "allow-always";
+} | {
+    action: "allow-session";
+} | {
+    action: "block-always";
+} | {
+    action: "dismiss";
+} | {
+    action: "share-screen";
+    sourceId: string;
+} | {
+    action: "select-device";
+    deviceId: string;
+} | {
+    action: "cancel";
+};
+export interface EmbeddedBrowserPermissionResolveRequest {
+    requestId: string;
+    resolution: EmbeddedBrowserPermissionResolution;
+}
+export type EmbeddedBrowserSitePermissionsSnapshot = Record<string, Record<string, "allow" | "deny">>;
+export interface EmbeddedBrowserSitePermissionUpdateRequest {
+    origin: string;
+    permission: string;
+    /** "ask" 表示删除该条记录，回到每次询问。 */
+    state: "allow" | "deny" | "ask";
+}
+export interface EmbeddedBrowserSitePermissionResetRequest {
+    origin: string;
+}
 export interface BotRemoteWorkspaceReconnectedEvent {
     sessionId: string;
     workspacePath: string;
@@ -387,6 +492,11 @@ export type CuaOsSupport = {
 export interface IPlatformService {
     /** 当前平台的文件选择框是否能返回 agent 可访问的本地绝对路径 */
     canSelectFilePath?: boolean;
+    /**
+     * 插件 UI 沙箱平台端口。只有桌面端实现；
+     * web / 手机远控为 undefined，plugin-ui 据此回退到普通 MCP 工具卡片。
+     */
+    pluginSandbox?: PluginSandboxPlatformPort;
     /** 打开系统目录选择框，返回选中路径或 null */
     selectDirectory(): Promise<string | null>;
     /** 打开系统文件选择框，返回选中文件路径或 null */
@@ -412,6 +522,11 @@ export interface IPlatformService {
      * 手机远控必须通过 shared-host/platform proxy 写到桌面宿主，避免大文本进入 prompt payload。
      */
     createTempTextAttachment?(payload: CreateTempTextAttachmentRequest): Promise<CreateTempTextAttachmentResult>;
+    /**
+     * 把 dwf 产物某一版的字节写成宿主本机上的一份副本（只在路径为空时写），返回其路径。
+     * 仅 Desktop 实现：手机远控与普通 Web 端没有「用本机 App 打开文件」的能力，缺席即不出入口。
+     */
+    materializeWorkflowArtifactFile?(payload: MaterializeWorkflowArtifactFileRequest): Promise<MaterializeWorkflowArtifactFileResult>;
     /** 订阅当前窗口内远程连接过程日志，返回 disposer */
     onRemoteConnectionLog(handler: (entry: RemoteConnectionRuntimeLog) => void): () => void;
     /** 订阅远程 workspace session 关闭事件，返回 disposer */
@@ -436,6 +551,16 @@ export interface IPlatformService {
     cancelPendingRemoteConnection?(requestId?: string): Promise<void>;
     /** 将 canonical workspace 身份绑定到已创建的远程 logical session。 */
     bindRemoteWorkspaceSessionContext?(context: BindRemoteWorkspaceSessionContextRequest): Promise<void>;
+    /** 为当前 workspace 开启 Web 远程控制能力 */
+    startWebRemoteControl(context: WebRemoteControlContext): Promise<WebRemoteControlStartOperationResult>;
+    /** 清除旧配对材料并重新生成 Web 远程控制二维码 */
+    refreshWebRemoteControlPairing(context: WebRemoteControlContext): Promise<WebRemoteControlStartOperationResult>;
+    /** 关闭当前窗口已开启的 Web 远程控制能力 */
+    stopWebRemoteControl(): Promise<void>;
+    /** 查询当前窗口 Web 远程控制状态 */
+    getWebRemoteControlStatus(): Promise<WebRemoteControlStatus>;
+    /** 订阅当前窗口 Web 远程控制状态变化；旧平台可不实现，UI 会保留轮询兜底 */
+    onWebRemoteControlStatusChanged?(handler: (status: WebRemoteControlStatus) => void): () => void;
     /** 释放当前窗口里已创建的远程 session */
     disposeRemoteSession(sessionId: string): Promise<void>;
     /** 检查本机 Docker daemon 是否可用 */
@@ -529,12 +654,23 @@ export interface IPlatformService {
     reportRendererHeapSample?(sample: RendererHeapSample): void;
     /** 同步当前窗口所有 tab 的 workspace 路径到 main 进程（用于跨窗口去重） */
     syncWindowTabs(paths: string[]): void;
+    /** 同步当前窗口里 Web 远程控制允许切换的 workspace；Web fallback 可忽略 */
+    syncWebRemoteControlWorkspaces?(workspaces: WebRemoteControlWorkspaceTarget[]): void;
+    /** 同步当前窗口里 Web 远程控制可展示的 task 快照；Web fallback 可忽略 */
+    syncWebRemoteControlTasks?(tasks: WebRemoteControlTaskTarget[]): void;
+    /** 注册 Web 远程控制手机端请求重连 workspace 的回调，返回 disposer */
+    onWebRemoteControlReconnectWorkspace?(handler: (request: WebRemoteControlReconnectWorkspaceRequest) => Promise<WebRemoteControlReconnectWorkspaceResult>): () => void;
     /** 同步当前窗口的未读 task 数给宿主环境，用于 Dock / 任务栏徽标聚合 */
     syncWindowUnreadCount(count: number): void;
     /** 当前窗口 active task 变化；Main 只在该窗口前台时发布全局 PiP focus。 */
     syncActiveTaskSession(sessionId: string | null): void;
     /** 同步需要 main 进程即时感知的应用设置；Web fallback 可忽略 */
     syncAppSettings?(patch: Partial<AppSettings>): void;
+    /**
+     * 查询"关闭驻留托盘"能力；桌面端 main 进程探测后返回，Web/手机远控无桥不实现。
+     * 设置页据此决定 Linux 上的开关是否置灰。
+     */
+    getCloseToTrayCapability?(): Promise<DesktopCloseToTrayCapability>;
     /** 快捷键设置页录制态开关；桌面端 main 据此暂时摘除可配置菜单 accelerator，Web 可忽略 */
     setShortcutRecordingActive?(active: boolean): void;
     /** 注册 main 进程要求聚焦某个 workspace tab 的回调，返回 disposer */
@@ -545,6 +681,18 @@ export interface IPlatformService {
     onCloseActiveContextRequest?(handler: () => void): () => void;
     /** 注册内置浏览器 webview 请求打开新页面的回调，返回 disposer */
     onOpenBrowserUrl?(handler: (request: EmbeddedBrowserOpenUrlRequest) => void): () => void;
+    /** 注册内置浏览器网页权限弹窗请求（main → renderer），返回 disposer */
+    onEmbeddedBrowserPermissionPrompt?(handler: (event: EmbeddedBrowserPermissionPromptEvent) => void): () => void;
+    /** 回传用户对内置浏览器权限弹窗的决策（renderer → main） */
+    resolveEmbeddedBrowserPermissionPrompt?(request: EmbeddedBrowserPermissionResolveRequest): void;
+    /** 读取内置浏览器站点权限记录（设置页「网站权限」） */
+    getEmbeddedBrowserSitePermissions?(): Promise<EmbeddedBrowserSitePermissionsSnapshot>;
+    /** 修改/删除单条站点权限；返回更新后的快照 */
+    setEmbeddedBrowserSitePermission?(request: EmbeddedBrowserSitePermissionUpdateRequest): Promise<EmbeddedBrowserSitePermissionsSnapshot>;
+    /** 清空全部站点权限记录 */
+    clearEmbeddedBrowserSitePermissions?(): Promise<EmbeddedBrowserSitePermissionsSnapshot>;
+    /** 重置单个站点的全部权限记录（删除该 origin 下所有持久决定）；返回更新后的快照 */
+    resetEmbeddedBrowserSitePermission?(request: EmbeddedBrowserSitePermissionResetRequest): Promise<EmbeddedBrowserSitePermissionsSnapshot>;
     /** 注册 agent 首次 browser 命令建好受控 view 的回调（自动开 browser-use tab），返回 disposer */
     onBrowserViewReady?(handler: (payload: {
         workspaceKey: string;

package/node_modules/@dcode/shared/dist/platform.js

@@ -34,6 +34,8 @@ export function createOpenInEditorRemoteTarget(target) {
                 kind: "docker",
                 container: target.container,
             };
+        case "server":
+            return undefined;
     }
 }
 export const DesktopCommandIds = {

package/node_modules/@dcode/shared/dist/platformUpdate.d.ts

@@ -0,0 +1,61 @@
+import type { Locale } from "./protocol.js";
+export interface PostUpdateReleaseNotesPayload {
+    version: string;
+    title: string;
+    markdown: string;
+    releaseDate?: string;
+    releaseNotesByLocale?: Partial<Record<Locale, {
+        title: string;
+        markdown: string;
+    }>>;
+}
+/**
+ * 用户从菜单手动点击"检查更新"后，main 进程回传给 renderer 的结果。
+ * Renderer 根据 kind 展示对应的 toast；不要与启动时的自动 check 混用。
+ */
+export type UpdateCheckResultPayload = {
+    kind: "up-to-date";
+    currentVersion: string;
+} | {
+    kind: "downloading";
+    version: string;
+} | {
+    kind: "already-downloading";
+    version: string;
+    progress: string;
+} | {
+    kind: "ready";
+    version: string;
+} | {
+    kind: "dev-skipped";
+} | {
+    kind: "error";
+    message: string;
+};
+/**
+ * 桌面自动更新器的持续状态，用于同步原生菜单和 Windows 自绘标题栏菜单。
+ */
+export type UpdateStatePayload = {
+    kind: "idle";
+    enabled: boolean;
+} | {
+    kind: "checking";
+    enabled: boolean;
+} | {
+    kind: "update-available";
+    enabled: boolean;
+    version: string;
+    releaseNotes?: PostUpdateReleaseNotesPayload;
+} | {
+    kind: "download-progress";
+    enabled: boolean;
+    progress: string;
+    version?: string;
+    releaseNotes?: PostUpdateReleaseNotesPayload;
+} | {
+    kind: "update-downloaded";
+    enabled: boolean;
+    version: string;
+    releaseNotes?: PostUpdateReleaseNotesPayload;
+};
+//# sourceMappingURL=platformUpdate.d.ts.map

package/node_modules/@dcode/shared/dist/platformUpdate.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=platformUpdate.js.map

package/node_modules/@dcode/shared/dist/plugin-marketplaces.d.ts

@@ -7,6 +7,11 @@ export interface DefaultPluginMarketplace {
     lastUpdated?: string;
 }
 export declare const DCODE_OFFICIAL_PLUGIN_MARKETPLACE_ID = "dcode-plugins-official";
+/**
+ * Claude Code 官方市场（GitHub git 源）。它不是 DCode 的强依赖：GitHub 不可达时刷新必然失败，
+ * 该失败不应作为错误提示打扰用户，UI 侧按此 id 静默处理其刷新失败（任何原因）。
+ */
+export declare const CLAUDE_OFFICIAL_PLUGIN_MARKETPLACE_ID = "claude-plugins-official";
 /** Settings 三类资源发现共用；Bootstrap 单测与官方 definition 的 defaultEnabled 机械对照。 */
 export declare const DEFAULT_ENABLED_OFFICIAL_PLUGIN_IDS: ReadonlySet<string>;
 export declare const DEFAULT_PLUGIN_MARKETPLACES: DefaultPluginMarketplace[];

package/node_modules/@dcode/shared/dist/plugin-marketplaces.js

@@ -1,4 +1,9 @@
 export const DCODE_OFFICIAL_PLUGIN_MARKETPLACE_ID = "dcode-plugins-official";
+/**
+ * Claude Code 官方市场（GitHub git 源）。它不是 DCode 的强依赖：GitHub 不可达时刷新必然失败，
+ * 该失败不应作为错误提示打扰用户，UI 侧按此 id 静默处理其刷新失败（任何原因）。
+ */
+export const CLAUDE_OFFICIAL_PLUGIN_MARKETPLACE_ID = "claude-plugins-official";
 /** Settings 三类资源发现共用；Bootstrap 单测与官方 definition 的 defaultEnabled 机械对照。 */
 export const DEFAULT_ENABLED_OFFICIAL_PLUGIN_IDS = new Set([
     "browser-use@dcode-plugins-official",
@@ -14,30 +19,31 @@ export const DEFAULT_ENABLED_OFFICIAL_PLUGIN_IDS = new Set([
     "skill-creator@dcode-plugins-official",
     "plugin-creator@dcode-plugins-official",
     "dcode-guide@dcode-plugins-official",
-    // DCode v1.0-beta：Windows 后端已实现，Computer Use 恢复默认开启（与 official-plugin-definitions
-    // 的 defaultEnabled 机械对照；bootstrap 单测校验两者一致）。
-    "computer-use@dcode-plugins-official",
+    // visualize（交互视图）随 UI 插件合入时 CLI 定义已标 defaultEnabled，但这里漏加，
+    // Settings 会把它当成默认关闭，与 CLI 实际启用状态不一致。
+    "visualize@dcode-plugins-official",
+    // 电脑控制回退为默认关闭，故 computer-use 不在此名单内。
+    // 该集合必须与 official-plugin-definitions.ts 里标了 defaultEnabled 的插件逐一对应，
+    // bootstrap 的「Settings 默认启用集合与 CLI 的官方插件声明一致」单测机械对照两者。
 ]);
-// 官方市场 source 解析：beta 期间 CDN（cdn-dcode.dipoleml.com）尚未上线，
-// 可用 DCODE_OFFICIAL_MARKETPLACE_URL 指向本地 marketplace.json 或任意 http(s)/git 源；
-// 未设置时回落到占位 CDN（上线后无需改代码，删除该 env 即可）。
-function resolveOfficialMarketplaceSource() {
-    const override = typeof process !== "undefined" ? process.env.DCODE_OFFICIAL_MARKETPLACE_URL?.trim() : "";
-    return override || "https://cdn-dcode.dipoleml.com/dcode/official-plugin/marketplace.json";
-}
 export const DEFAULT_PLUGIN_MARKETPLACES = [
     {
         // DCode 官方唯一市场：本地 seed 分片与 CDN 分片在 Agent storage 内合并。
         // CDN manifest 的 name 必须与该 canonical id 一致。
         id: DCODE_OFFICIAL_PLUGIN_MARKETPLACE_ID,
-        // getter 而非字面量：env 覆盖在进程启动后才设置时也能生效。
-        get source() {
-            return resolveOfficialMarketplaceSource();
-        },
+        source: "https://cdn-dcode.dipoleml.com/dcode/official-plugin/marketplace.json",
         name: DCODE_OFFICIAL_PLUGIN_MARKETPLACE_ID,
         description: "Official DCode plugins marketplace: built-in and community plugins for DCode.",
         pluginCount: 0,
     },
+    {
+        id: CLAUDE_OFFICIAL_PLUGIN_MARKETPLACE_ID,
+        source: "anthropics/claude-plugins-official",
+        name: CLAUDE_OFFICIAL_PLUGIN_MARKETPLACE_ID,
+        description: "Directory of popular Claude Code extensions including development tools, productivity plugins, and MCP integrations",
+        // 只内置官方 catalog 来源，不把远端 manifest 快照打包进仓库；首次刷新前数量未知。
+        pluginCount: 0,
+    },
 ];
 // 商店「公开」分段只有一个 DCode 官方市场 id，内置与 CDN 不再拆分身份。
 export const PUBLIC_STORE_MARKETPLACE_IDS = [DCODE_OFFICIAL_PLUGIN_MARKETPLACE_ID];