@dipoleml/dcode-cli 1.1.0 → 1.2.1

package/node_modules/@dcode/shared/dist/validation.js

@@ -1,27 +1,30 @@
 import { databaseStartupControlSchema, databaseStartupStateSchema } from "./database-startup.js";
-import { sessionCreateTelemetrySchema, automationSessionCreateTelemetrySchema, } from "./sessionCreateTelemetry.js";
+import { mcpAppInstanceSchema } from "./mcp-apps/instance.js";
+import { automationSessionCreateTelemetrySchema, sessionCreateTelemetrySchema, } from "./sessionCreateTelemetry.js";
 /* eslint-disable max-lines -- 运行时 schema 当前集中在共享包入口，外部 relay payload 校验加入后先保持单一导出面。 */
 import { z } from "zod";
-import { dcodeProcessDiagnosticSchema } from "./process-diagnostic.js";
+import { networkCaptureControlSchema, networkCaptureBatchSchema } from "./networkCapture.js";
 import { browserCommandSchema } from "./browser-use/commands.js";
 import { browserCommandResultSchema } from "./browser-use/result.js";
-import { REMOTE_ASSET_INSTALL_MODES } from "./remoteAssetInstallMode.js";
+import { modelSelectionSchema } from "./model-selection.js";
+import { dcodeProcessDiagnosticSchema } from "./process-diagnostic.js";
 import { PROCESS_RESOURCE_CLI_LANES } from "./processResourceTelemetry.js";
-import { isKnownRemoteResourcePackageId } from "./remoteResourcePackages.js";
+import { providerProvisioningErrorCodeSchema, providerProvisioningTriggerSchema, } from "./provider-provisioning.js";
 import { dcodeProviderSchema } from "./providers.js";
-import { dcodeAgentProviderSchema } from "./dcode-agent-policy.js";
-import { modelSelectionSchema } from "./model-selection.js";
-import { providerProvisioningTriggerSchema } from "./provider-provisioning.js";
-import { dcodeMcpTelemetryEventSchema, dcodeMcpResourceSamplesSchema, dcodeToolExecResourceSchema, dcodeProcessResourceSampleSchema, } from "./dcode-protocol/index.js";
-import { dcodeTaskModeSchema } from "./dcode-task-mode-schema.js";
+import { REMOTE_ASSET_INSTALL_MODES } from "./remoteAssetInstallMode.js";
+import { isKnownRemoteResourcePackageId } from "./remoteResourcePackages.js";
 import { PROTOCOL_V4_LIMITS } from "./dcode-protocol-v4/core.js";
-import { errorAttributionSchema } from "./dcode-protocol-v4/snapshot.js";
 import { sessionWorkflowActivitySchema } from "./dcode-protocol-v4/sessions-index-workflow-activity.js";
+import { webRemoteControlRpcTransportAckSchema, webRemoteControlRpcTransportFrameSchema, } from "./web-remote-control-rpc-transport.js";
 import { taskOwnerCommandDeliverySchema, taskOwnerCommandRequestSchema, taskOwnerCommandResultSchema, taskRealtimeDeliveredEventSchema, taskRealtimeEventSchema, taskRealtimeHostDeliveryKindSchema, taskRunLeaseAcquireRequestSchema, taskRunLeaseResultSchema, taskRunLeaseTargetSchema, taskStreamMirrorPublishOpSchema, taskStreamMirrorTargetSchema, } from "./task-realtime-core.js";
-export { WSL_USER_MAX_LENGTH, isValidWslUser, wslUserSchema } from "./wslUserValidation.js";
-export { dcodeTaskModeSchema } from "./dcode-task-mode-schema.js";
 import { wslUserSchema } from "./wslUserValidation.js";
+import { legacyDCodeProviderSchema } from "./dcode-agent-policy.js";
+import { errorAttributionSchema } from "./dcode-protocol-v4/snapshot.js";
+import { dcodeMcpResourceSamplesSchema, dcodeMcpTelemetryEventSchema, dcodeProcessResourceSampleSchema, dcodeToolExecResourceSchema, } from "./dcode-protocol/index.js";
+import { dcodeTaskModeSchema } from "./dcode-task-mode-schema.js";
 export { appSettingsOccupationEnum, appSettingsPatchSchema, appSettingsSchema, localeSchema, postUpdateReleaseNotesPayloadSchema, } from "./validationAppSettings.js";
+export { isValidWslUser, WSL_USER_MAX_LENGTH, wslUserSchema } from "./wslUserValidation.js";
+export { dcodeTaskModeSchema } from "./dcode-task-mode-schema.js";
 export function formatZodError(error) {
     return error.issues
         .map((issue) => {
@@ -32,6 +35,299 @@ export function formatZodError(error) {
 }
 export const nonEmptyStringSchema = z.string().trim().min(1);
 export const stringArraySchema = z.array(z.string());
+// Task04B：topic physical-frame 计量器按 bridge/recovery id 的协议最大长度计算
+// mobile relay 外壳；不在不可信 payload 入口机械限长，1MiB 上限就只是估算。
+const webRemoteControlTransportIdSchema = nonEmptyStringSchema
+    .max(PROTOCOL_V4_LIMITS.transportEnvelopeIdMaxChars)
+    .regex(/^[A-Za-z0-9._~-]+$/u);
+export const webRemoteControlWorkspaceTargetSchema = z.object({
+    workspacePath: nonEmptyStringSchema,
+    workspaceIdentity: nonEmptyStringSchema.optional(),
+    remoteSessionId: nonEmptyStringSchema.optional(),
+    label: nonEmptyStringSchema,
+    workspacePurpose: z.enum(["project", "conversation"]).optional(),
+    kind: z.enum(["local", "remote"]),
+    connectionState: z.enum(["connected", "disconnected", "reconnecting"]).optional(),
+    lastConnectionError: z.string().optional(),
+});
+export const webRemoteControlWorkspaceTargetsSchema = z.array(webRemoteControlWorkspaceTargetSchema);
+export const webRemoteControlReconnectWorkspaceRequestSchema = z.object({
+    requestId: nonEmptyStringSchema,
+    workspaceKey: nonEmptyStringSchema,
+});
+export const webRemoteControlReconnectWorkspaceResultSchema = z.union([
+    z.object({
+        requestId: nonEmptyStringSchema,
+        workspaceKey: nonEmptyStringSchema,
+        success: z.literal(true),
+    }),
+    z.object({
+        requestId: nonEmptyStringSchema,
+        workspaceKey: nonEmptyStringSchema,
+        success: z.literal(false),
+        error: z.string(),
+    }),
+]);
+export const webRemoteControlTaskTargetSchema = z.object({
+    taskId: nonEmptyStringSchema,
+    title: z.string(),
+    workspacePath: nonEmptyStringSchema,
+    workspaceIdentity: nonEmptyStringSchema.optional(),
+    remoteSessionId: nonEmptyStringSchema.optional(),
+    workspaceLabel: nonEmptyStringSchema,
+    workspaceKind: z.enum(["local", "remote"]),
+    createdAt: z.number().finite(),
+    updatedAt: z.number().finite(),
+    provider: dcodeProviderSchema.optional(),
+    unreadAt: z.number().finite().optional(),
+    displayStatus: z.enum(["idle", "running", "completed", "error"]).optional(),
+    hasBackgroundWork: z.boolean().optional(),
+    workflowActivity: sessionWorkflowActivitySchema.optional(),
+    pinned: z.boolean().optional(),
+    archived: z.boolean().optional(),
+});
+export const webRemoteControlTaskTargetsSchema = z.array(webRemoteControlTaskTargetSchema);
+export const webRemoteControlFailureReasonSchema = z.enum([
+    "session-not-found",
+    "session-expired",
+    "session-conflict",
+    "workspace-closed",
+    "desktop-disconnected",
+    "invalid-mobile-connection",
+    "desktop-bootstrap-timeout",
+    "connection-recovery-timeout",
+    "relay-unavailable",
+    "unsupported-action",
+    "unexpected-error",
+]);
+export const webRemoteControlExternalWorkspaceBridgeSchema = z.discriminatedUnion("kind", [
+    z.object({
+        bridgeSessionId: webRemoteControlTransportIdSchema,
+        bridgeGeneration: z.number().int().nonnegative().optional(),
+        recoveryId: webRemoteControlTransportIdSchema.optional(),
+        kind: z.literal("local"),
+        workspaceKey: nonEmptyStringSchema,
+        workspacePath: nonEmptyStringSchema,
+        initialTaskId: nonEmptyStringSchema.optional(),
+    }),
+    z.object({
+        bridgeSessionId: webRemoteControlTransportIdSchema,
+        bridgeGeneration: z.number().int().nonnegative().optional(),
+        recoveryId: webRemoteControlTransportIdSchema.optional(),
+        kind: z.literal("remote"),
+        workspaceKey: nonEmptyStringSchema,
+        workspacePath: nonEmptyStringSchema,
+        workspaceIdentity: nonEmptyStringSchema,
+        remoteSessionId: nonEmptyStringSchema,
+        initialTaskId: nonEmptyStringSchema.optional(),
+    }),
+]);
+export const webRemoteControlMobileViewStateSchema = z.object({
+    activeWorkspaceKey: nonEmptyStringSchema.optional(),
+    activeTaskId: nonEmptyStringSchema.optional(),
+    updatedAt: z.number().finite(),
+});
+export const webRemoteControlMobileDeviceInfoSchema = z.object({
+    platform: nonEmptyStringSchema,
+    version: nonEmptyStringSchema,
+    name: nonEmptyStringSchema,
+    userAgent: z.string().optional(),
+    language: z.string().optional(),
+    languages: z.array(z.string()).optional(),
+    browserPlatform: z.string().optional(),
+    viewport: z
+        .object({
+        width: z.number().finite(),
+        height: z.number().finite(),
+        devicePixelRatio: z.number().finite(),
+    })
+        .optional(),
+    screen: z
+        .object({
+        width: z.number().finite(),
+        height: z.number().finite(),
+    })
+        .optional(),
+    timezone: z.string().optional(),
+    online: z.boolean().optional(),
+    updatedAt: z.number().finite(),
+});
+export const webRemoteControlWindowBootstrapResultSchema = z.object({
+    windowControlSessionId: nonEmptyStringSchema,
+    desktopAppVersion: nonEmptyStringSchema.optional(),
+    workspaces: webRemoteControlWorkspaceTargetsSchema,
+    tasks: webRemoteControlTaskTargetsSchema,
+    initialViewState: webRemoteControlMobileViewStateSchema.optional(),
+    mobileViewState: webRemoteControlMobileViewStateSchema.optional(),
+});
+export const webRemoteControlWorkspaceListResultSchema = z.object({
+    workspaces: webRemoteControlWorkspaceTargetsSchema,
+    tasks: webRemoteControlTaskTargetsSchema.optional(),
+    activeWorkspaceKey: nonEmptyStringSchema.optional(),
+    activeTaskId: nonEmptyStringSchema.optional(),
+});
+export const webRemoteControlPlatformMethodSchema = z.enum([
+    "isDockerAvailable",
+    "listWSLDistros",
+    "listDockerContainers",
+    "listSSHConfigAliases",
+    "loadMcpFromUserDirectory",
+    "saveMcpToUserDirectory",
+    "migrateLegacyCommonMcp",
+]);
+const webRemoteControlAppPayloadSchemas = [
+    z
+        .object({ dcode_type: z.literal("telemetry-report"), event: sessionCreateTelemetrySchema })
+        .strict(),
+    z.object({
+        dcode_type: z.literal("bootstrap-request"),
+        requestId: nonEmptyStringSchema,
+    }),
+    z.object({
+        dcode_type: z.literal("bootstrap-response"),
+        requestId: nonEmptyStringSchema,
+        success: z.literal(true),
+        result: webRemoteControlWindowBootstrapResultSchema,
+    }),
+    z.object({
+        dcode_type: z.literal("workspace-list-request"),
+        requestId: nonEmptyStringSchema,
+    }),
+    z.object({
+        dcode_type: z.literal("workspace-list-response"),
+        requestId: nonEmptyStringSchema,
+        success: z.literal(true),
+        result: webRemoteControlWorkspaceListResultSchema,
+    }),
+    z.object({
+        dcode_type: z.literal("workspace-list-updated"),
+        result: webRemoteControlWorkspaceListResultSchema,
+    }),
+    z.object({
+        dcode_type: z.literal("workspace-bridge-open"),
+        requestId: nonEmptyStringSchema,
+        bridgeSessionId: webRemoteControlTransportIdSchema,
+        bridgeGeneration: z.number().int().nonnegative().optional(),
+        recoveryId: webRemoteControlTransportIdSchema.optional(),
+        workspaceKey: nonEmptyStringSchema,
+        taskId: nonEmptyStringSchema.optional(),
+    }),
+    z.object({
+        dcode_type: z.literal("workspace-bridge-ready"),
+        requestId: nonEmptyStringSchema,
+        bridgeSessionId: webRemoteControlTransportIdSchema,
+        bridgeGeneration: z.number().int().nonnegative().optional(),
+        recoveryId: webRemoteControlTransportIdSchema.optional(),
+        bridge: webRemoteControlExternalWorkspaceBridgeSchema,
+    }),
+    z.object({
+        dcode_type: z.literal("workspace-bridge-error"),
+        requestId: nonEmptyStringSchema,
+        bridgeSessionId: webRemoteControlTransportIdSchema.optional(),
+        bridgeGeneration: z.number().int().nonnegative().optional(),
+        recoveryId: webRemoteControlTransportIdSchema.optional(),
+        reason: webRemoteControlFailureReasonSchema,
+        error: z.string(),
+    }),
+    z.object({
+        dcode_type: z.literal("workspace-reconnect-request"),
+        requestId: nonEmptyStringSchema,
+        workspaceKey: nonEmptyStringSchema,
+    }),
+    z.object({
+        dcode_type: z.literal("workspace-reconnect-response"),
+        requestId: nonEmptyStringSchema,
+        workspaceKey: nonEmptyStringSchema,
+        success: z.literal(true),
+    }),
+    z.object({
+        dcode_type: z.literal("workspace-reconnect-response"),
+        requestId: nonEmptyStringSchema,
+        workspaceKey: nonEmptyStringSchema,
+        success: z.literal(false),
+        error: z.string(),
+    }),
+    z.object({
+        dcode_type: z.literal("mobile-view-state-update"),
+        viewState: webRemoteControlMobileViewStateSchema,
+        deviceInfo: webRemoteControlMobileDeviceInfoSchema.optional(),
+    }),
+    z.object({
+        dcode_type: z.literal("platform-request"),
+        requestId: nonEmptyStringSchema,
+        method: webRemoteControlPlatformMethodSchema,
+        args: z.unknown().optional(),
+    }),
+    z.object({
+        dcode_type: z.literal("platform-response"),
+        requestId: nonEmptyStringSchema,
+        method: webRemoteControlPlatformMethodSchema,
+        success: z.literal(true),
+        result: z.unknown(),
+    }),
+    z.object({
+        dcode_type: z.literal("platform-response"),
+        requestId: nonEmptyStringSchema,
+        method: webRemoteControlPlatformMethodSchema,
+        success: z.literal(false),
+        error: z.string(),
+    }),
+    // Bugfix：04D-3 必须让 fragment/ACK 与 acknowledged adapter 原子切换。
+    // 继续接受 legacy 单片会让 raw bytes 绕过 ACK/replay owner 和 1MiB 外壳硬边界。
+    webRemoteControlRpcTransportFrameSchema,
+    webRemoteControlRpcTransportAckSchema,
+    z.object({
+        dcode_type: z.literal("bridge-degraded"),
+        bridgeSessionId: webRemoteControlTransportIdSchema,
+        bridgeGeneration: z.number().int().nonnegative().optional(),
+        recoveryId: webRemoteControlTransportIdSchema.optional(),
+        reason: z.enum(["rpc-transport-fault", "rpc-frame-gap", "buffer-overflow", "buffer-timeout"]),
+        seq: z.number().int().nonnegative().optional(),
+        expectedSeq: z.number().int().nonnegative().optional(),
+        droppedCount: z.number().int().nonnegative().optional(),
+    }),
+    z.object({
+        dcode_type: z.literal("app-error"),
+        requestId: nonEmptyStringSchema.optional(),
+        bridgeSessionId: webRemoteControlTransportIdSchema.optional(),
+        reason: webRemoteControlFailureReasonSchema,
+        error: z.string(),
+    }),
+    z.object({
+        dcode_type: z.literal("mobile-diagnostic"),
+        event: z.enum([
+            "state-transition",
+            "socket-close",
+            "socket-error",
+            "recover-start",
+            "recover-scheduled",
+            "pair-status",
+            "failure",
+        ]),
+        timestamp: z.number().int().nonnegative(),
+        state: z.string().optional(),
+        previousState: z.string().optional(),
+        pairStatus: z.enum(["waiting", "matched"]).optional(),
+        closeCode: z.number().int().optional(),
+        closeReason: z.string().optional(),
+        wasClean: z.boolean().optional(),
+        wasPaired: z.boolean().optional(),
+        failureReason: webRemoteControlFailureReasonSchema.optional(),
+        failureMessage: z.string().optional(),
+        visibilityState: z.string().optional(),
+        online: z.boolean().optional(),
+        hiddenDurationMs: z.number().int().nonnegative().optional(),
+    }),
+];
+// Bugfix: app payload 里多个消息共享 dcode_type（例如 platform-response），
+// 不能直接用 z.discriminatedUnion("dcode_type")，否则 schema 初始化会因重复值失败。
+// 这里保留同一批运行时约束，改用普通 union，让外部 relay 的不可信 payload
+// 在进入 desktop/web 路由前仍然先被机械校验。
+export const webRemoteControlAppPayloadSchema = z.union(webRemoteControlAppPayloadSchemas);
+export function parseWebRemoteControlAppPayload(payload) {
+    const result = webRemoteControlAppPayloadSchema.safeParse(payload);
+    return result.success ? result.data : null;
+}
 export const credentialRecordSchema = z.record(z.string(), z.string());
 export const credentialKeySchema = nonEmptyStringSchema;
 export const credentialValueSchema = z.string();
@@ -60,10 +356,19 @@ export const dockerConnectOptionsSchema = z.object({
     kind: z.literal("docker"),
     container: nonEmptyStringSchema,
 });
+export const serverConnectOptionsSchema = z.object({
+    kind: z.literal("server"),
+    url: z.string().url(),
+    name: nonEmptyStringSchema.optional(),
+    token: z.string().optional(),
+    workspacePath: z.string().optional(),
+    serverId: nonEmptyStringSchema.optional(),
+});
 export const remoteTargetSchema = z.discriminatedUnion("kind", [
     sshConnectOptionsSchema,
     wslConnectOptionsSchema,
     dockerConnectOptionsSchema,
+    serverConnectOptionsSchema,
 ]);
 export const helloMessageSchema = z.object({
     type: z.literal("dcode-hello"),
@@ -142,7 +447,8 @@ export const hostInitLocalMessageSchema = z.object({
     feedbackApiBase: z.string().url().optional(),
     workspacePath: nonEmptyStringSchema.optional(),
     workspaceIdentity: nonEmptyStringSchema.optional(),
-    agentWarmupTargets: z.array(hostAgentWarmupTargetSchema).max(3).optional(),
+    // 启动只预热 active workspace（desktop STARTUP_AGENT_WARMUP_LIMIT = 1），协议层同步收紧上限。
+    agentWarmupTargets: z.array(hostAgentWarmupTargetSchema).max(1).optional(),
     agentSpawnFallbackCwd: nonEmptyStringSchema.optional(),
     dcodeBuiltinProviderConfigFilePath: nonEmptyStringSchema,
     runtimeProcessEnvPatch: z
@@ -356,6 +662,36 @@ export const hostLocalMediaPreviewPathAuthorizeResultMessageSchema = z
     error: z.string().optional(),
 })
     .strict();
+/** main → host：插件 UI 沙箱登记结果（PluginSandboxRegisterResultPayload）。 */
+export const hostPluginSandboxRegisterResultMessageSchema = z
+    .object({
+    type: z.literal("plugin-sandbox-register-result"),
+    requestId: nonEmptyStringSchema,
+    ok: z.boolean(),
+    instance: mcpAppInstanceSchema.optional(),
+    sandboxId: nonEmptyStringSchema.optional(),
+    initId: z.number().int().nonnegative().optional(),
+    shellUrl: nonEmptyStringSchema.optional(),
+    partition: nonEmptyStringSchema.optional(),
+    // 登记时生效的呈现字段（资源级优先合并后的值），回 renderer 定初始高度 / 边框。
+    // Bugfix：这条 schema 是 strict 的——句柄多带一个未声明字段，整条回包会被 host 拒收，桥永远等不到句柄，
+    // 卡片卡在 preparing（2026-09-12 inline e2e 复现）。改 PluginSandboxHandle 必须同步这里。
+    resourceMeta: z
+        .object({
+        prefersBorder: z.boolean().optional(),
+        heightHint: z.number().int().positive().optional(),
+        minFrameHeight: z.number().int().positive().optional(),
+        showInline: z.boolean().optional(),
+        // 资源声明的浏览器权限随句柄回 renderer（进 hostContext.permissions）；与登记请求的 permissions 同一枚举。
+        permissions: z
+            .array(z.enum(["camera", "microphone", "geolocation", "clipboardWrite"]))
+            .optional(),
+    })
+        .strict()
+        .optional(),
+    error: z.string().optional(),
+})
+    .strict();
 export const hostCuaPipFocusChangedMessageSchema = z
     .object({
     type: z.literal("cua-pip-focus-changed"),
@@ -385,6 +721,7 @@ export const hostResourceUsageSnapshotRequestMessageSchema = z
 })
     .strict();
 export const hostIncomingMessageSchema = z.discriminatedUnion("type", [
+    z.object({ type: z.literal("network-capture"), control: networkCaptureControlSchema }).strict(),
     z
         .object({ type: z.literal("database-startup-control"), control: databaseStartupControlSchema })
         .strict(),
@@ -416,6 +753,7 @@ export const hostIncomingMessageSchema = z.discriminatedUnion("type", [
     hostOffPeakRunMessageSchema,
     hostBrowserExecuteResultMessageSchema,
     hostLocalMediaPreviewPathAuthorizeResultMessageSchema,
+    hostPluginSandboxRegisterResultMessageSchema,
     hostCuaPipFocusChangedMessageSchema,
     hostProviderProvisioningExecuteMessageSchema,
 ]);
@@ -768,6 +1106,52 @@ export const hostLocalMediaPreviewPathAuthorizeRequestResponseSchema = z
     path: nonEmptyStringSchema,
 })
     .strict();
+/** host → main：登记已校验的插件 UI HTML。 */
+export const hostPluginSandboxRegisterRequestResponseSchema = z
+    .object({
+    type: z.literal("plugin-sandbox-register-request"),
+    instance: mcpAppInstanceSchema,
+    requestId: nonEmptyStringSchema,
+    workspacePath: z.string().optional(),
+    workspaceIdentity: z.string().optional(),
+    ownerWebContentsId: z.number().int().nonnegative(),
+    sessionId: nonEmptyStringSchema,
+    contentKind: z.literal("gen-ui").optional(),
+    pluginId: nonEmptyStringSchema.optional(),
+    // 资源所属 MCP server 运行时名：沙箱 partition 按它派生。
+    serverName: nonEmptyStringSchema.optional(),
+    // 沙箱作用域 id（`tool:<toolCallId>` / `surface:<surfaceId>`），main 只当不透明字符串。
+    scopeId: nonEmptyStringSchema,
+    html: z.string(),
+    // MCP Apps 资源级 CSP 的四类域；与 mcp-apps 的 mcpToolUiCspSchema 同步。
+    csp: z
+        .object({
+        connectDomains: z.array(z.string()).optional(),
+        resourceDomains: z.array(z.string()).optional(),
+        frameDomains: z.array(z.string()).optional(),
+        baseUriDomains: z.array(z.string()).optional(),
+    })
+        .strict()
+        .optional(),
+    // 资源级 `_meta["dcode/csp"]` 放宽项；与 mcp-apps 的 mcpAppCspRelaxationsSchema 同步。
+    cspRelaxations: z
+        .object({ unsafeEval: z.boolean().optional(), wasmUnsafeEval: z.boolean().optional() })
+        .strict()
+        .optional(),
+    // 资源级 `_meta.ui.permissions`（规范四键）；与 mcp-apps 的 MCP_APPS_RESOURCE_PERMISSIONS 同步。
+    permissions: z
+        .array(z.enum(["camera", "microphone", "geolocation", "clipboardWrite"]))
+        .optional(),
+    prefersBorder: z.boolean().optional(),
+    // 资源级尺寸提示，main 原样放进句柄的 resourceMeta。strict schema：改 PluginSandboxRegisterRequestPayload 必须同步这里。
+    heightHint: z.number().int().positive().optional(),
+    minFrameHeight: z.number().int().positive().optional(),
+    showInline: z.boolean().optional(),
+})
+    .strict()
+    .refine((value) => value.contentKind === "gen-ui"
+    ? !value.pluginId && !value.serverName && !value.permissions?.length
+    : Boolean(value.pluginId && value.serverName), "Invalid sandbox provenance");
 export const networkObservationSchema = z.object({
     transport: z.enum(["http", "websocket", "rpc"]),
     interface: z.string(),
@@ -799,6 +1183,7 @@ export const hostProviderProvisioningExecutionResultResponseSchema = z
     environmentKey: nonEmptyStringSchema,
     status: z.enum(["applied", "already-applied", "unsupported", "failed", "rollback_failed"]),
     error: z.string().optional(),
+    errorCode: providerProvisioningErrorCodeSchema.optional(),
 })
     .strict();
 export const hostResourceUsageProcessSchema = z
@@ -821,6 +1206,7 @@ export const hostResourceUsageSnapshotResultResponseSchema = z
 })
     .strict();
 export const hostResponseMessageSchema = z.discriminatedUnion("type", [
+    z.object({ type: z.literal("network-capture-batch"), batch: networkCaptureBatchSchema }).strict(),
     z
         .object({ type: z.literal("database-startup-state"), state: databaseStartupStateSchema })
         .strict(),
@@ -863,6 +1249,7 @@ export const hostResponseMessageSchema = z.discriminatedUnion("type", [
     hostFeedbackLogArchiveRequestResponseSchema,
     hostBrowserExecuteRequestResponseSchema,
     hostLocalMediaPreviewPathAuthorizeRequestResponseSchema,
+    hostPluginSandboxRegisterRequestResponseSchema,
     hostNetworkTelemetryBatchResponseSchema,
     hostProviderProvisioningSourceChangedResponseSchema,
     hostProviderProvisioningExecutionResultResponseSchema,
@@ -1034,7 +1421,8 @@ export const dcodeTaskMetaSchema = z.object({
     model: z.string().optional(),
     thoughtLevel: nonEmptyStringSchema.optional(),
     runtimeEpoch: z.number().int().nonnegative().optional(),
-    provider: dcodeAgentProviderSchema.optional(),
+    // meta 直接解析自 tasks-index/旧 session 文件；历史 provider 值在此归一为 glm。
+    provider: legacyDCodeProviderSchema.optional(),
     migrationSource: dcodeTaskMigrationSourceSchema.optional(),
     forkedFromTaskId: nonEmptyStringSchema.optional(),
     // cron automation 身份：随 meta_json 一起持久化（单一来源），同时在写入时投影到 tasks 表
@@ -1056,6 +1444,12 @@ export const dcodeTaskMetaSchema = z.object({
         attribution: errorAttributionSchema.optional(),
     })
         .optional(),
+    repairState: z
+        .object({
+        claudeNativeSnapshotAssistantContentVersion: z.number().int().nonnegative().optional(),
+        codexNativeSnapshotSubagentToolsVersion: z.number().int().nonnegative().optional(),
+    })
+        .optional(),
     changeSummary: z
         .object({
         fileCount: z.number().int().nonnegative(),
@@ -1072,6 +1466,21 @@ export const dcodeTaskMetaSchema = z.object({
         .optional(),
     target: dcodeTaskGoalSchema.nullable().optional(),
 });
+export const dcodeTaskSessionBindingStateSchema = z.enum([
+    "idle",
+    "syncing",
+    "ready",
+    "stale",
+    "failed",
+]);
+export const dcodeTaskSessionBindingSchema = z.object({
+    // 绑定状态由 services 从持久化数据投影；旧绑定残留的历史 provider 值在此归一为 glm。
+    provider: legacyDCodeProviderSchema,
+    sessionId: nonEmptyStringSchema,
+    // 绑定锚点需要支持空 task 的 -1，所以这里不能套 nonnegative。
+    lastSyncedTurnIndex: z.number().int(),
+    state: dcodeTaskSessionBindingStateSchema,
+});
 export const dcodeTaskIndexEntrySchema = z.object({
     workspaceHash: nonEmptyStringSchema,
     taskId: nonEmptyStringSchema,