npm - @jingyi0605/codingns4dsh - Versions diffs - 0.2.1-rc.6 → 0.2.1-rc.7 - Mend

@jingyi0605/codingns4dsh 0.2.1-rc.6 → 0.2.1-rc.7

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (124) hide show

package/data/build/dist/client/bundle.js CHANGED Viewed

@@ -8392,7 +8392,7 @@ window.__ModuleLoader__.load({
 			return /^0\.1\.5(?:-|$)/u.test(version);
 		}
 		/** Codingns4DSH 插件自身的 npm 版本。 */
-		const CODINGNS_VERSION = "0.2.1-rc.6";
+		const CODINGNS_VERSION = "0.2.1-rc.7";
 		/** Accept any valid host version at or above the supported minimum. */
 		function isDshVersionCompatible(version) {
 			return isDshVersionAtLeast(version, minimumSupportedDshVersion());
@@ -19490,6 +19490,13 @@ window.__ModuleLoader__.load({
 			"usage.magpieTotalTokens": "Input + output",
 			"usage.magpieCost": "Estimated cost",
 			"usage.magpieCacheHitRate": "Cache hit rate",
+			"usage.magpieAccountPolicies": "Codex account controls",
+			"usage.magpieResetCountLabel": "Reset cards",
+			"usage.magpieResetCount": "{count} reset cards",
+			"usage.magpieResetWhenWeek": "Auto-use a reset when the weekly window is exhausted",
+			"usage.magpieResetBeforeExpiry": "Auto-use a reset before it expires",
+			"usage.magpieUseCredits": "Use credits after quota is exhausted",
+			"usage.magpieUseReset": "Use one reset card",
 			"usage.magpieUpdated": "Updated {time}",
 			"usage.magpieAgent": "Agent: {agent}",
 			"usage.magpieSessionNoUsage": "No matching session usage today.",
@@ -19696,6 +19703,13 @@ window.__ModuleLoader__.load({
 			"usage.magpieTotalTokens": "输入 + 输出",
 			"usage.magpieCost": "预估费用",
 			"usage.magpieCacheHitRate": "缓存命中率",
+			"usage.magpieAccountPolicies": "Codex 账号控制",
+			"usage.magpieResetCountLabel": "重置卡",
+			"usage.magpieResetCount": "{count} 张重置卡",
+			"usage.magpieResetWhenWeek": "周额度用尽时自动使用重置卡",
+			"usage.magpieResetBeforeExpiry": "重置卡到期前自动使用",
+			"usage.magpieUseCredits": "额度用尽后使用点数",
+			"usage.magpieUseReset": "使用一张重置卡",
 			"usage.magpieUpdated": "更新于 {time}",
 			"usage.magpieAgent": "Agent：{agent}",
 			"usage.magpieSessionNoUsage": "今天还没有找到此会话的用量。",
@@ -21004,6 +21018,12 @@ window.__ModuleLoader__.load({
 			"magpie.hostRequestFailed": "The Host request failed. Check the Host connection and retry.",
 			"magpie.usageUnavailable": "Usage data could not be read. Other sections may still be available.",
 			"magpie.quotaUnavailable": "Subscription data could not be read.",
+			"magpie.codexControlsUnavailable": "Codex account identity was not reported; account controls are unavailable.",
+			"magpie.codexPolicyFailed": "Could not update the Codex account setting. Refresh and try again.",
+			"magpie.codexPolicyUnavailable": "Codex policy settings are unavailable.",
+			"magpie.codexResetFailed": "Could not use a reset card. Refresh and try again.",
+			"magpie.resetDialogAccount": "Account: {account}",
+			"magpie.resetDialogBody": "This uses one reset card from the {count} available and immediately restores the current quota window. This cannot be undone. Continue?",
 			"magpie.historyUnavailable": "Quota history could not be read.",
 			"magpie.noUsage": "No usage was reported for this period.",
 			"magpie.noSessions": "No sessions were reported for this period.",
@@ -21354,6 +21374,12 @@ window.__ModuleLoader__.load({
 			"magpie.hostRequestFailed": "Host 请求失败。请检查 Host 连接后重试。",
 			"magpie.usageUnavailable": "无法读取用量数据；其他区块仍可能可用。",
 			"magpie.quotaUnavailable": "无法读取订阅数据。",
+			"magpie.codexControlsUnavailable": "未报告 Codex 账号身份，无法显示账号控制项。",
+			"magpie.codexPolicyFailed": "无法更新 Codex 账号设置，请刷新后重试。",
+			"magpie.codexPolicyUnavailable": "暂时无法读取 Codex 使用规则。",
+			"magpie.codexResetFailed": "无法使用重置卡，请刷新后重试。",
+			"magpie.resetDialogAccount": "账号：{account}",
+			"magpie.resetDialogBody": "将使用当前 {count} 张重置卡中的 1 张，并立即恢复当前额度窗口。此操作不可撤销，确定继续吗？",
 			"magpie.historyUnavailable": "无法读取额度历史。",
 			"magpie.noUsage": "此周期没有用量记录。",
 			"magpie.noSessions": "此周期没有会话记录。",
@@ -21755,6 +21781,94 @@ window.__ModuleLoader__.load({
 			"feature.cliAdapters.description": "View installed external Agents, versions, command paths, available models, and enable them independently. External Agent context panels keep only the occupancy percentage and totals.",
 			"feature.workspaceSession.label": "Workspace session enhancement",
 			"feature.workspaceSession.description": "Show Agent logos, archived-session entries, workspace hiding controls, subscription or usage information, local quick sessions, and an optional remembered conversation/right-sidebar width ratio.",
+			"feature.workspaceMcp.label": "Workspace MCP server",
+			"feature.workspaceMcp.description": "Expose managed workspace tools to local MCP clients through an authenticated Host listener.",
+			"workspaceMcp.setupTitle": "MCP access key",
+			"workspaceMcp.setupInstruction": "Generate a key to save it on the Host and enable the local MCP listener.",
+			"workspaceMcp.generateKey": "Generate key and enable",
+			"workspaceMcp.rotateKey": "Rotate key",
+			"workspaceMcp.generating": "Generating…",
+			"workspaceMcp.generatedKey": "Generated Workspace MCP API key",
+			"workspaceMcp.keyGenerated": "Workspace MCP key generated and module enabled.",
+			"workspaceMcp.copyKey": "Copy key",
+			"workspaceMcp.keyCopied": "Workspace MCP key copied.",
+			"workspaceMcp.copyFailed": "Could not copy the key. Select and copy it manually.",
+			"workspaceMcp.keyShownOnce": "This key is shown only now. Copy it into your MCP client before closing or refreshing this panel.",
+			"workspaceMcp.capabilityDescription": "MCP capability description",
+			"workspaceMcp.capabilityTitle": "Supported MCP capabilities",
+			"workspaceMcp.capabilitySubtitle": "The list below describes the fixed Workspace MCP tool catalog and its access boundaries.",
+			"workspaceMcp.capabilityName": "Name",
+			"workspaceMcp.capabilityPermission": "Permission",
+			"workspaceMcp.capabilityDescriptionField": "Description",
+			"workspaceMcp.capabilityParameters": "Invocation parameters",
+			"workspaceMcp.capabilityRemarks": "Remarks",
+			"workspaceMcp.closeCapabilities": "Close",
+			"workspaceMcp.installPromptTitle": "Install the Agent Skill",
+			"workspaceMcp.installPromptHint": "Copy this prompt to your Agent. It will install the root SKILL.md into that Agent’s personal skills directory.",
+			"workspaceMcp.copyInstallPrompt": "Copy install prompt",
+			"workspaceMcp.installPromptCopied": "Agent Skill installation prompt copied.",
+			"workspaceMcp.installPromptText": "Fetch https://github.com/jingyi0605/Codingns4DSH/blob/main/SKILL.md and install it into your personal Agent Skills directory using your documented Skill installation method.",
+			"workspaceMcp.capability.workspaceList.permission": "Read managed workspace metadata",
+			"workspaceMcp.capability.workspaceList.description": "Lists managed workspaces available to the local Host.",
+			"workspaceMcp.capability.workspaceList.parameters": "{}",
+			"workspaceMcp.capability.workspaceList.remarks": "Returns names and active session counts; filesystem roots are never exposed.",
+			"workspaceMcp.capability.sessionList.permission": "Read bounded session metadata",
+			"workspaceMcp.capability.sessionList.description": "Lists sessions belonging to managed workspaces.",
+			"workspaceMcp.capability.sessionList.parameters": "{ workspaceId?, limit?, offset? }",
+			"workspaceMcp.capability.sessionList.remarks": "Results are paginated and contain metadata only, without full conversation history.",
+			"workspaceMcp.capability.sessionCreate.permission": "Create a managed session and optionally queue a prompt",
+			"workspaceMcp.capability.sessionCreate.description": "Creates a native DSH session and can select an installed adapter/model.",
+			"workspaceMcp.capability.sessionCreate.parameters": "{ workspaceId, adapterId?, modelId?, prompt? }",
+			"workspaceMcp.capability.sessionCreate.remarks": "External adapter sessions require an initial prompt; uncertain outcomes include the created session ID.",
+			"workspaceMcp.capability.sessionContinue.permission": "Queue a message in an existing session",
+			"workspaceMcp.capability.sessionContinue.description": "Continues one exact managed session without replacing its identity.",
+			"workspaceMcp.capability.sessionContinue.parameters": "{ sessionId, message }",
+			"workspaceMcp.capability.sessionContinue.remarks": "The session is revalidated immediately before prompt admission.",
+			"workspaceMcp.capability.sessionQuestions.permission": "Read unresolved native questions",
+			"workspaceMcp.capability.sessionQuestions.description": "Lists questions currently awaiting an answer in a managed session.",
+			"workspaceMcp.capability.sessionQuestions.parameters": "{ sessionId }",
+			"workspaceMcp.capability.sessionQuestions.remarks": "Question content and options are bounded; archived or unrelated sessions are rejected.",
+			"workspaceMcp.capability.sessionAnswer.permission": "Answer one unresolved native question",
+			"workspaceMcp.capability.sessionAnswer.description": "Submits validated answers through the native DSH question mechanism.",
+			"workspaceMcp.capability.sessionAnswer.parameters": "{ sessionId, callId, answer }",
+			"workspaceMcp.capability.sessionAnswer.remarks": "The call ID must come from the current question list and answers are checked against its options.",
+			"workspaceMcp.capability.sessionRequestPermission.permission": "Request human approval",
+			"workspaceMcp.capability.sessionRequestPermission.description": "Asks the native DSH approval UI to decide an operation.",
+			"workspaceMcp.capability.sessionRequestPermission.parameters": "{ sessionId, toolName, reason, callId? }",
+			"workspaceMcp.capability.sessionRequestPermission.remarks": "Requires an active DSH turn; the MCP client cannot approve its own request.",
+			"workspaceMcp.capability.sessionPermissionStatus.permission": "Read an owned approval outcome",
+			"workspaceMcp.capability.sessionPermissionStatus.description": "Reads the status of an approval request created by this MCP feature.",
+			"workspaceMcp.capability.sessionPermissionStatus.parameters": "{ sessionId, requestId }",
+			"workspaceMcp.capability.sessionPermissionStatus.remarks": "Only DSH-issued request IDs retained by the live feature are queryable.",
+			"workspaceMcp.capability.terminalList.permission": "Read live terminal metadata",
+			"workspaceMcp.capability.terminalList.description": "Lists terminal instances attached to one managed session.",
+			"workspaceMcp.capability.terminalList.parameters": "{ workspaceId, sessionId }",
+			"workspaceMcp.capability.terminalList.remarks": "Only live terminals in the specified workspace/session scope are returned.",
+			"workspaceMcp.capability.terminalRead.permission": "Read terminal output",
+			"workspaceMcp.capability.terminalRead.description": "Returns a bounded output snapshot from one live terminal.",
+			"workspaceMcp.capability.terminalRead.parameters": "{ workspaceId, sessionId, terminalId, limitBytes? }",
+			"workspaceMcp.capability.terminalRead.remarks": "Output is limited to 64 KiB and is never read from an unrelated terminal.",
+			"workspaceMcp.capability.terminalWrite.permission": "Write terminal input",
+			"workspaceMcp.capability.terminalWrite.description": "Writes bounded text to one existing live terminal process.",
+			"workspaceMcp.capability.terminalWrite.parameters": "{ workspaceId, sessionId, terminalId, data }",
+			"workspaceMcp.capability.terminalWrite.remarks": "Input is limited to 16 KiB, rejects NUL bytes, and cannot create arbitrary processes.",
+			"workspaceMcp.statusTitle": "Host status",
+			"workspaceMcp.loading": "Reading Workspace MCP status…",
+			"workspaceMcp.statusFailed": "Unable to read Workspace MCP status from the Host.",
+			"workspaceMcp.apiKeyStatus": "API key: {status}",
+			"workspaceMcp.enabledStatus": "Module: {status}",
+			"workspaceMcp.listeningStatus": "Listener: {status}",
+			"workspaceMcp.configured": "configured",
+			"workspaceMcp.notConfigured": "not configured",
+			"workspaceMcp.on": "on",
+			"workspaceMcp.off": "off",
+			"workspaceMcp.url": "Endpoint",
+			"workspaceMcp.refresh": "Refresh status",
+			"workspaceMcp.reason.keyMissing": "Generate a Workspace MCP API key to start the listener.",
+			"workspaceMcp.reason.keyStoreFailed": "The Host could not access the Workspace MCP key file.",
+			"workspaceMcp.reason.disabled": "The Workspace MCP module is disabled.",
+			"workspaceMcp.reason.listenFailed": "The local MCP listener could not start.",
+			"workspaceMcp.reason.other": "The Host reported an additional status reason.",
 			"feature.assistant.label": "Global smart assistant (Testing)",
 			"feature.assistant.description": "Summarize progress across selected workspaces and route voice or text instructions to an explicit target session. After enabling this module, fully quit and restart DSH Desktop.",
 			"voice.globalAssistant": "Global voice assistant (Testing)",
@@ -22215,6 +22329,94 @@ window.__ModuleLoader__.load({
 			"feature.cliAdapters.description": "管理外部 Agent",
 			"feature.workspaceSession.label": "工作区会话增强",
 			"feature.workspaceSession.description": "增强工作区会话体验",
+			"feature.workspaceMcp.label": "工作区 MCP 服务",
+			"feature.workspaceMcp.description": "通过 Host 本机认证监听器向 MCP 客户端提供受管理工作区工具。",
+			"workspaceMcp.setupTitle": "MCP 访问密钥",
+			"workspaceMcp.setupInstruction": "生成密钥后会保存在 Host 并自动启用本机 MCP 监听器。",
+			"workspaceMcp.generateKey": "生成密钥并启用",
+			"workspaceMcp.rotateKey": "轮换密钥",
+			"workspaceMcp.generating": "正在生成…",
+			"workspaceMcp.generatedKey": "生成的 Workspace MCP API Key",
+			"workspaceMcp.keyGenerated": "Workspace MCP 密钥已生成，模块已启用。",
+			"workspaceMcp.copyKey": "复制密钥",
+			"workspaceMcp.keyCopied": "Workspace MCP 密钥已复制。",
+			"workspaceMcp.copyFailed": "无法复制密钥，请手动选择并复制。",
+			"workspaceMcp.keyShownOnce": "密钥仅在此时显示。关闭或刷新面板前，请先复制到 MCP 客户端。",
+			"workspaceMcp.capabilityDescription": "MCP 能力说明",
+			"workspaceMcp.capabilityTitle": "支持的 MCP 能力",
+			"workspaceMcp.capabilitySubtitle": "以下列表说明 Workspace MCP 的固定工具目录及其访问边界。",
+			"workspaceMcp.capabilityName": "名称",
+			"workspaceMcp.capabilityPermission": "权限",
+			"workspaceMcp.capabilityDescriptionField": "描述",
+			"workspaceMcp.capabilityParameters": "调用参数",
+			"workspaceMcp.capabilityRemarks": "备注",
+			"workspaceMcp.closeCapabilities": "关闭",
+			"workspaceMcp.installPromptTitle": "安装 Agent Skill",
+			"workspaceMcp.installPromptHint": "复制此提示词并发送给 Agent，它会将仓库根目录的 SKILL.md 安装到该 Agent 的个人 Skills 目录。",
+			"workspaceMcp.copyInstallPrompt": "复制安装提示词",
+			"workspaceMcp.installPromptCopied": "Agent Skill 安装提示词已复制。",
+			"workspaceMcp.installPromptText": "获取 https://github.com/jingyi0605/Codingns4DSH/blob/main/SKILL.md，并使用你已记录的 Skill 安装方式，将其安装到你自己的 Agent 个人 Skills 目录。",
+			"workspaceMcp.capability.workspaceList.permission": "读取受管理工作区元数据",
+			"workspaceMcp.capability.workspaceList.description": "列出当前 Host 可管理的工作区。",
+			"workspaceMcp.capability.workspaceList.parameters": "{}",
+			"workspaceMcp.capability.workspaceList.remarks": "只返回名称和活动会话数，不暴露文件系统根目录。",
+			"workspaceMcp.capability.sessionList.permission": "读取有界会话元数据",
+			"workspaceMcp.capability.sessionList.description": "列出受管理工作区中的会话。",
+			"workspaceMcp.capability.sessionList.parameters": "{ workspaceId?, limit?, offset? }",
+			"workspaceMcp.capability.sessionList.remarks": "结果支持分页，只返回元数据，不返回完整对话历史。",
+			"workspaceMcp.capability.sessionCreate.permission": "创建受管理会话并可排队发送初始提示",
+			"workspaceMcp.capability.sessionCreate.description": "创建原生 DSH 会话，并可选择已安装的适配器和模型。",
+			"workspaceMcp.capability.sessionCreate.parameters": "{ workspaceId, adapterId?, modelId?, prompt? }",
+			"workspaceMcp.capability.sessionCreate.remarks": "外部适配器会话必须提供初始提示；不确定结果会返回已创建的会话 ID。",
+			"workspaceMcp.capability.sessionContinue.permission": "向已有会话排队发送消息",
+			"workspaceMcp.capability.sessionContinue.description": "继续指定的受管理会话，不替换其身份。",
+			"workspaceMcp.capability.sessionContinue.parameters": "{ sessionId, message }",
+			"workspaceMcp.capability.sessionContinue.remarks": "消息接纳前会重新校验会话归属和可用性。",
+			"workspaceMcp.capability.sessionQuestions.permission": "读取未解决的原生问题",
+			"workspaceMcp.capability.sessionQuestions.description": "列出受管理会话中等待回答的问题。",
+			"workspaceMcp.capability.sessionQuestions.parameters": "{ sessionId }",
+			"workspaceMcp.capability.sessionQuestions.remarks": "问题内容和选项有大小限制；归档或无关会话会被拒绝。",
+			"workspaceMcp.capability.sessionAnswer.permission": "回答一个未解决的原生问题",
+			"workspaceMcp.capability.sessionAnswer.description": "通过 DSH 原生问题机制提交经过校验的答案。",
+			"workspaceMcp.capability.sessionAnswer.parameters": "{ sessionId, callId, answer }",
+			"workspaceMcp.capability.sessionAnswer.remarks": "callId 必须来自当前问题列表，答案会按原生选项校验。",
+			"workspaceMcp.capability.sessionRequestPermission.permission": "请求人工审批",
+			"workspaceMcp.capability.sessionRequestPermission.description": "通过 DSH 原生审批界面请求对某项操作作出决定。",
+			"workspaceMcp.capability.sessionRequestPermission.parameters": "{ sessionId, toolName, reason, callId? }",
+			"workspaceMcp.capability.sessionRequestPermission.remarks": "必须存在活动 DSH 回合；MCP 客户端不能批准自己的请求。",
+			"workspaceMcp.capability.sessionPermissionStatus.permission": "读取已拥有的审批结果",
+			"workspaceMcp.capability.sessionPermissionStatus.description": "读取当前 MCP 模块创建的审批请求状态。",
+			"workspaceMcp.capability.sessionPermissionStatus.parameters": "{ sessionId, requestId }",
+			"workspaceMcp.capability.sessionPermissionStatus.remarks": "只能查询当前模块保留的 DSH 原生请求 ID。",
+			"workspaceMcp.capability.terminalList.permission": "读取活动终端元数据",
+			"workspaceMcp.capability.terminalList.description": "列出一个受管理会话附属的终端实例。",
+			"workspaceMcp.capability.terminalList.parameters": "{ workspaceId, sessionId }",
+			"workspaceMcp.capability.terminalList.remarks": "只返回指定工作区和会话范围内的活动终端。",
+			"workspaceMcp.capability.terminalRead.permission": "读取终端输出",
+			"workspaceMcp.capability.terminalRead.description": "读取一个活动终端的有界输出快照。",
+			"workspaceMcp.capability.terminalRead.parameters": "{ workspaceId, sessionId, terminalId, limitBytes? }",
+			"workspaceMcp.capability.terminalRead.remarks": "输出上限为 64 KiB，不会读取其他终端。",
+			"workspaceMcp.capability.terminalWrite.permission": "写入终端输入",
+			"workspaceMcp.capability.terminalWrite.description": "向一个已有的活动终端进程写入有界文本。",
+			"workspaceMcp.capability.terminalWrite.parameters": "{ workspaceId, sessionId, terminalId, data }",
+			"workspaceMcp.capability.terminalWrite.remarks": "输入上限为 16 KiB，拒绝 NUL 字节，不能创建任意进程。",
+			"workspaceMcp.statusTitle": "Host 状态",
+			"workspaceMcp.loading": "正在读取工作区 MCP 状态…",
+			"workspaceMcp.statusFailed": "无法从 Host 读取工作区 MCP 状态。",
+			"workspaceMcp.apiKeyStatus": "API Key：{status}",
+			"workspaceMcp.enabledStatus": "模块：{status}",
+			"workspaceMcp.listeningStatus": "监听器：{status}",
+			"workspaceMcp.configured": "已配置",
+			"workspaceMcp.notConfigured": "未配置",
+			"workspaceMcp.on": "已开启",
+			"workspaceMcp.off": "已关闭",
+			"workspaceMcp.url": "端点",
+			"workspaceMcp.refresh": "刷新状态",
+			"workspaceMcp.reason.keyMissing": "请生成 Workspace MCP API Key 以启动监听器。",
+			"workspaceMcp.reason.keyStoreFailed": "Host 无法访问 Workspace MCP 密钥文件。",
+			"workspaceMcp.reason.disabled": "工作区 MCP 模块已关闭。",
+			"workspaceMcp.reason.listenFailed": "本机 MCP 监听器无法启动。",
+			"workspaceMcp.reason.other": "Host 返回了其他状态原因。",
 			"feature.assistant.label": "全局智能助理（测试中）",
 			"feature.assistant.description": "汇总受管工作区进展，并把语音或文字指令派发到明确的目标会话。启用该模块后，请彻底重启 DSH Desktop。",
 			"voice.globalAssistant": "全局语音助理（测试中）",
@@ -25376,12 +25578,12 @@ window.__ModuleLoader__.load({
 			if (typeof fields.status === "number" && fields.status >= 400) return true;
 			if (typeof fields.state === "string" && /^(failed|disconnected|closed|degraded)$/iu.test(fields.state)) return true;
 			if (typeof fields.event === "string" && fields.event !== event) {
-				const nestedFields = isRecord$11(fields.fields) ? fields.fields : {};
+				const nestedFields = isRecord$12(fields.fields) ? fields.fields : {};
 				return isDshTransportWarningEvent(fields.event, nestedFields);
 			}
 			return false;
 		}
-		function isRecord$11(value) {
+		function isRecord$12(value) {
 			return typeof value === "object" && value !== null && !Array.isArray(value);
 		}
 		/**
@@ -27423,7 +27625,7 @@ window.__ModuleLoader__.load({
 			async onMessage(event) {
 				const sourceWindow = event.source;
 				if (this.disposed || sourceWindow === null || !this.iframeWindows.has(sourceWindow)) return;
-				if (!isRecord$10(event.data) || typeof event.data.kind !== "string") return;
+				if (!isRecord$11(event.data) || typeof event.data.kind !== "string") return;
 				const message = event.data;
 				if (message.kind !== "dsh-web-debug" && typeof message.id !== "string") return;
 				if (typeof message.id === "string") this.messageWindows.set(message.id, sourceWindow);
@@ -27434,7 +27636,7 @@ window.__ModuleLoader__.load({
 				try {
 					if (message.kind === "dsh-web-debug") {
 						const eventName = typeof message.event === "string" ? message.event : "unknown";
-						const fields = isRecord$10(message.fields) ? message.fields : {};
+						const fields = isRecord$11(message.fields) ? message.fields : {};
 						this.debug.log(`iframe.${eventName}`, fields);
 						if (/^(bridge\.ws\.|client\.connection\.)/u.test(eventName)) await this.options.transport.webRequest("web.debug", {
 							event: eventName,
@@ -27443,7 +27645,7 @@ window.__ModuleLoader__.load({
 						return;
 					}
 					if (message.kind === "fetch") {
-						const input = isRecord$10(message.input) ? message.input : {};
+						const input = isRecord$11(message.input) ? message.input : {};
 						const path = resolveRemotePath(typeof input.path === "string" ? input.path : "/");
 						const body = typeof message.body === "string" ? message.body : typeof input.body === "string" ? input.body : void 0;
 						const response = path.startsWith("/assets/") || path.startsWith("/plugins/") ? {
@@ -27469,7 +27671,7 @@ window.__ModuleLoader__.load({
 						return;
 					}
 					if (message.kind === "script") {
-						const input = isRecord$10(message.input) ? message.input : {};
+						const input = isRecord$11(message.input) ? message.input : {};
 						const path = resolveRemotePath(typeof input.path === "string" ? input.path : "/");
 						const url = await this.loadScript(path, void 0);
 						this.postResponse(message.id, {
@@ -27479,7 +27681,7 @@ window.__ModuleLoader__.load({
 						return;
 					}
 					if (message.kind === "image") {
-						const input = isRecord$10(message.input) ? message.input : {};
+						const input = isRecord$11(message.input) ? message.input : {};
 						const path = resolveRemotePath(typeof input.path === "string" ? input.path : "/");
 						const url = await this.loadImage(path);
 						this.postResponse(message.id, {
@@ -27489,7 +27691,7 @@ window.__ModuleLoader__.load({
 						return;
 					}
 					if (message.kind === "style") {
-						const input = isRecord$10(message.input) ? message.input : {};
+						const input = isRecord$11(message.input) ? message.input : {};
 						const path = resolveRemotePath(typeof input.path === "string" ? input.path : "/");
 						const url = await this.loadStyle(path, void 0);
 						this.postResponse(message.id, {
@@ -27499,7 +27701,7 @@ window.__ModuleLoader__.load({
 						return;
 					}
 					if (message.kind === "ws.open") {
-						const input = isRecord$10(message.input) ? message.input : {};
+						const input = isRecord$11(message.input) ? message.input : {};
 						const opened = this.options.transport.openWebStreamWithId("web.ws.open", {
 							sessionId: this.sessionIdValue,
 							path: resolveRemotePath(typeof input.path === "string" ? input.path : "/")
@@ -27591,7 +27793,7 @@ window.__ModuleLoader__.load({
 					for await (const value of stream) {
 						if (!opened) {
 							opened = true;
-							if (isRecord$10(value) && value.opened === true) {
+							if (isRecord$11(value) && value.opened === true) {
 								this.socketReady.get(id)?.resolve();
 								this.socketReady.delete(id);
 								continue;
@@ -28245,7 +28447,7 @@ window.__ModuleLoader__.load({
 			const policy = "default-src 'self' blob: data:; script-src 'self' blob: data: 'unsafe-inline' 'unsafe-eval'; style-src 'self' blob: data: 'unsafe-inline'; img-src 'self' blob: data:; font-src 'self' blob: data:; media-src 'self' blob: data:; worker-src 'self' blob:; connect-src 'none'; frame-src 'self' blob: data:";
 			for (const node of documentValue.querySelectorAll("meta[http-equiv]")) if ((node.getAttribute("http-equiv") ?? "").toLowerCase() === "content-security-policy") node.setAttribute("content", policy);
 		}
-		function isRecord$10(value) {
+		function isRecord$11(value) {
 			return typeof value === "object" && value !== null && !Array.isArray(value);
 		}
 		function toBytes(value) {
@@ -29535,11 +29737,11 @@ window.__ModuleLoader__.load({
 			};
 		}
 		function readMarker(event) {
-			if (!isRecord$9(event)) return null;
+			if (!isRecord$10(event)) return null;
 			const data = event.data;
-			if (!isRecord$9(data)) return null;
-			const candidate = event.type === "assistant/live-chunk" ? isRecord$9(data.chunk) ? data.chunk.codingnsExternalTool : void 0 : event.type === "assistant/attempt" ? data.codingnsExternalTool : void 0;
-			if (!isRecord$9(candidate) || candidate.source !== "codingns-external-tool") return null;
+			if (!isRecord$10(data)) return null;
+			const candidate = event.type === "assistant/live-chunk" ? isRecord$10(data.chunk) ? data.chunk.codingnsExternalTool : void 0 : event.type === "assistant/attempt" ? data.codingnsExternalTool : void 0;
+			if (!isRecord$10(candidate) || candidate.source !== "codingns-external-tool") return null;
 			if (typeof candidate.callId !== "string" || candidate.callId === "") return null;
 			if (typeof candidate.name !== "string" || typeof candidate.arguments !== "string") return null;
 			if (candidate.phase !== "start" && candidate.phase !== "update") return null;
@@ -29555,7 +29757,7 @@ window.__ModuleLoader__.load({
 				...typeof candidate.error === "string" ? { error: candidate.error } : {}
 			};
 		}
-		function isRecord$9(value) {
+		function isRecord$10(value) {
 			return typeof value === "object" && value !== null && !Array.isArray(value);
 		}
 		//#endregion
@@ -30033,9 +30235,9 @@ window.__ModuleLoader__.load({
 			return {
 				async targets(signal, query) {
 					const rows = /* @__PURE__ */ new Map();
-					const localRows = record$1(record$1(sessions.list?.getSnapshot())?.byId) ?? {};
+					const localRows = record$2(record$2(sessions.list?.getSnapshot())?.byId) ?? {};
 					for (const [id, value] of Object.entries(localRows)) rows.set(id, {
-						...record$1(value),
+						...record$2(value),
 						sessionId: id
 					});
 					const remote = service(context, "remote.session");
@@ -30047,17 +30249,17 @@ window.__ModuleLoader__.load({
 						return query === void 0 ? targets : selectRecentTerminalShareTargets(targets, snapshot, query.sessionId, query.limit);
 					};
 					signal?.throwIfAborted();
-					const ids = array$1((query === void 0 ? void 0 : array$1(record$1(workspaceSnapshot())?.items).map(record$1).find((item) => array$1(item?.sessionIds).includes(query.sessionId)))?.sessionIds);
+					const ids = array$1((query === void 0 ? void 0 : array$1(record$2(workspaceSnapshot())?.items).map(record$2).find((item) => array$1(item?.sessionIds).includes(query.sessionId)))?.sessionIds);
 					if (query !== void 0 && ids.length > 0 && ids.every((id) => typeof id === "string" && rows.has(id))) return selectTargets();
 					do {
 						signal?.throwIfAborted();
 						if (remote?.list === void 0) break;
-						const page = record$1(unwrap$1(await remote.list(cursor === void 0 ? {} : { cursor }, signal)));
+						const page = record$2(unwrap$1(await remote.list(cursor === void 0 ? {} : { cursor }, signal)));
 						for (const value of array$1(page?.items)) {
-							const id = string$3(record$1(value)?.sessionId);
+							const id = string$3(record$2(value)?.sessionId);
 							if (id !== "") rows.set(id, {
-								...record$1(value),
-								...record$1(localRows[id]),
+								...record$2(value),
+								...record$2(localRows[id]),
 								sessionId: id
 							});
 						}
@@ -30070,7 +30272,7 @@ window.__ModuleLoader__.load({
 					return selectTargets();
 				},
 				source(sessionId) {
-					const workspace = array$1(record$1(workspaceSnapshot())?.items).map(record$1).find((item) => array$1(item?.sessionIds).includes(sessionId));
+					const workspace = array$1(record$2(workspaceSnapshot())?.items).map(record$2).find((item) => array$1(item?.sessionIds).includes(sessionId));
 					return {
 						hostId: require_primitives_adapter.parseVirtualSessionId(sessionId)?.hostId ?? "local",
 						workspaceId: string$3(workspace?.workspaceId)
@@ -30087,7 +30289,7 @@ window.__ModuleLoader__.load({
 					});
 				},
 				async createTarget(sourceSessionId) {
-					const workspaceId = string$3(array$1(record$1(workspaceSnapshot())?.items).map(record$1).find((item) => array$1(item?.sessionIds).includes(sourceSessionId))?.workspaceId);
+					const workspaceId = string$3(array$1(record$2(workspaceSnapshot())?.items).map(record$2).find((item) => array$1(item?.sessionIds).includes(sourceSessionId))?.workspaceId);
 					if (workspaceId === "") throw new Error("当前会话的工作区尚未就绪，请稍后重试");
 					if (typeof sessions.create !== "function") throw new Error("当前 DSH 缺少新建会话能力");
 					const sessionId = await sessions.create({ workspaceId });
@@ -30125,12 +30327,12 @@ window.__ModuleLoader__.load({
 		}
 		/** 原生工作区快照同时包含 PeerHost 投影和归档集合。 */
 		function readTerminalShareTargets(rows, snapshot) {
-			const state = record$1(snapshot);
-			const workspaces = array$1(state?.items).map(record$1);
+			const state = record$2(snapshot);
+			const workspaces = array$1(state?.items).map(record$2);
 			const archived = new Set(array$1(state?.archivedSessionIds));
 			for (const workspace of workspaces) for (const id of array$1(workspace?.archivedSessionIds)) archived.add(id);
 			return rows.flatMap((raw) => {
-				const item = record$1(raw);
+				const item = record$2(raw);
 				const sessionId = string$3(item?.sessionId) || string$3(item?.id);
 				if (sessionId === "" || item?.blank === true || archived.has(sessionId) || Number(item?.archivedAt) > 0) return [];
 				const workspace = workspaces.find((entry) => array$1(entry?.sessionIds).includes(sessionId));
@@ -30138,7 +30340,7 @@ window.__ModuleLoader__.load({
 				const hostId = require_primitives_adapter.parseVirtualSessionId(sessionId)?.hostId ?? require_primitives_adapter.parseVirtualWorkspaceId(workspaceId)?.hostId ?? "local";
 				return [{
 					sessionId,
-					title: string$3(record$1(record$1(item?.projections)?.values)?.title) || string$3(item?.title) || sessionId,
+					title: string$3(record$2(record$2(item?.projections)?.values)?.title) || string$3(item?.title) || sessionId,
 					workspaceId,
 					hostId,
 					workspaceTitle: string$3(workspace?.title) || string$3(workspace?.path) || workspaceId,
@@ -30149,7 +30351,7 @@ window.__ModuleLoader__.load({
 		}
 		/** 新建入口由菜单单独提供；已有会话只按更新时间排序，初始最多五项。 */
 		function selectRecentTerminalShareTargets(targets, snapshot, sessionId, limit = 5) {
-			const workspace = array$1(record$1(snapshot)?.items).map(record$1).find((item) => array$1(item?.sessionIds).includes(sessionId));
+			const workspace = array$1(record$2(snapshot)?.items).map(record$2).find((item) => array$1(item?.sessionIds).includes(sessionId));
 			const workspaceId = string$3(workspace?.workspaceId) || targets.find((item) => item.sessionId === sessionId)?.workspaceId;
 			const workspaceOrder = array$1(workspace?.sessionIds);
 			return targets.filter((item) => workspaceId ? item.workspaceId === workspaceId : item.sessionId === sessionId).sort((left, right) => (right.updatedAt ?? 0) - (left.updatedAt ?? 0) || workspaceOrder.indexOf(left.sessionId) - workspaceOrder.indexOf(right.sessionId)).slice(0, Math.max(1, limit));
@@ -30159,8 +30361,8 @@ window.__ModuleLoader__.load({
 			return Number.isFinite(time) ? time : 0;
 		}
 		function isArchivedSession(sessionId, snapshot) {
-			const state = record$1(snapshot);
-			return array$1(state?.archivedSessionIds).includes(sessionId) || array$1(state?.items).some((workspace) => array$1(record$1(workspace)?.archivedSessionIds).includes(sessionId));
+			const state = record$2(snapshot);
+			return array$1(state?.archivedSessionIds).includes(sessionId) || array$1(state?.items).some((workspace) => array$1(record$2(workspace)?.archivedSessionIds).includes(sessionId));
 		}
 		function service(context, name) {
 			try {
@@ -30170,7 +30372,7 @@ window.__ModuleLoader__.load({
 				return;
 			}
 		}
-		function record$1(value) {
+		function record$2(value) {
 			return value !== null && typeof value === "object" && !Array.isArray(value) ? value : void 0;
 		}
 		function string$3(value) {
@@ -30180,8 +30382,8 @@ window.__ModuleLoader__.load({
 			return Array.isArray(value) ? value : [];
 		}
 		function unwrap$1(value) {
-			const item = record$1(value);
-			if (item?.ok === false) throw new Error(string$3(record$1(item.error)?.message) || "读取会话列表失败");
+			const item = record$2(value);
+			if (item?.ok === false) throw new Error(string$3(record$2(item.error)?.message) || "读取会话列表失败");
 			return item?.ok === true ? item.value : value;
 		}
 		//#endregion
@@ -30237,7 +30439,7 @@ window.__ModuleLoader__.load({
 			const call = block?.kind === void 0 ? block : block.call;
 			const args = parseRecord(call?.argsRaw);
 			const questions = args?.questions;
-			if (!Array.isArray(questions) || !questions.every(isQuestion)) return void 0;
+			if (!Array.isArray(questions) || !questions.every(isQuestion$1)) return void 0;
 			const output = parseRecord(Array.isArray(block?.content) && block.content.length === 1 && block.content[0]?.type === "text" ? block.content[0].text : void 0);
 			return {
 				args,
@@ -30306,7 +30508,7 @@ window.__ModuleLoader__.load({
 				return;
 			}
 		}
-		function isQuestion(value) {
+		function isQuestion$1(value) {
 			return value !== null && typeof value === "object" && typeof value.id === "string" && typeof value.question === "string" && (value.header === void 0 || typeof value.header === "string") && (value.detail === void 0 || typeof value.detail === "string") && (value.options === void 0 || Array.isArray(value.options) && value.options.every((o) => o !== null && typeof o?.label === "string" && (o.description === void 0 || typeof o.description === "string")));
 		}
 		function validAnswers(value) {
@@ -30620,6 +30822,311 @@ window.__ModuleLoader__.load({
 			} };
 		}
 		//#endregion
+		//#region src/dsh-capabilities/host/workspace-session-control-adapter.ts
+		/** Narrow typed adapter over DSH's public SessionController surface. */
+		function supportsWorkspaceSessionControl(context) {
+			const controller = asController(readContext(context, "sessionController"));
+			const agents = asRecord$10(readContext(context, "agents"));
+			return controller !== void 0 && typeof controller.create === "function" && typeof controller.list === "function" && typeof controller.prompt === "function" && typeof controller.modelCatalog === "function" && typeof agents?.get === "function";
+		}
+		function createWorkspaceSessionControlAdapter(context) {
+			const controller = asController(readContext(context, "sessionController"));
+			if (!supportsWorkspaceSessionControl(context) || controller === void 0) throw new TypeError("DSH SessionController workspace control is unavailable");
+			const agents = controller.agents;
+			const agentRegistry = asRecord$10(readContext(context, "agents"));
+			const llm = asRecord$10(readContext(context, "llm"));
+			const selectModel = async (sessionId, selection, signal) => {
+				signal.throwIfAborted();
+				if (agents?.selectForNextRequest === void 0 || llm === void 0 || typeof llm.resolveCallConfig !== "function") throw new Error("Session-local DSH model selection is unavailable");
+				if (controller.resolveAgent === void 0) throw new Error("DSH Session Agent resolution is unavailable");
+				const found = asRecord$10(await controller.resolveAgent.call(controller, sessionId));
+				if (found === void 0 || "error" in found || found.agent === void 0) throw new Error("DSH session Agent is unavailable for model selection");
+				const resolved = asRecord$10(await llm.resolveCallConfig.call(llm, selection));
+				if (typeof resolved?.provider !== "string" || typeof resolved.model !== "string") throw new Error("The requested DSH model route is unavailable");
+				const liveAgent = (agentRegistry?.get)?.call(agentRegistry, sessionId);
+				if (liveAgent === void 0 || liveAgent !== found.agent) throw new Error("DSH did not retain the selected Session Agent");
+				agents.selectForNextRequest.call(agents, found.agent, {
+					provider: resolved.provider,
+					model: resolved.model,
+					...typeof resolved.reasoningEffort === "string" ? { reasoningEffort: resolved.reasoningEffort } : {}
+				});
+				return { selected: {
+					provider: resolved.provider,
+					model: resolved.model,
+					...typeof resolved.reasoningEffort === "string" ? { reasoningEffort: resolved.reasoningEffort } : {}
+				} };
+			};
+			return {
+				create: (request, signal) => {
+					signal.throwIfAborted();
+					return controller.create.call(controller, request);
+				},
+				list: (signal) => {
+					signal.throwIfAborted();
+					return controller.list.call(controller, {}, signal);
+				},
+				prompt: (request, signal) => controller.prompt.call(controller, request, signal),
+				modelCatalog: () => controller.modelCatalog.call(controller),
+				...typeof controller.resolveAgent === "function" ? { prepareSession: async (sessionId, signal) => {
+					signal.throwIfAborted();
+					const result = asRecord$10(await controller.resolveAgent.call(controller, sessionId));
+					if (result === void 0 || "error" in result || result.agent === void 0) throw new Error("DSH Session Agent could not be prepared");
+					const liveAgent = (agentRegistry?.get)?.call(agentRegistry, sessionId);
+					if (liveAgent === void 0 || liveAgent !== result.agent) throw new Error("DSH did not retain the prepared Session Agent");
+				} } : {},
+				...typeof controller.agents?.selectForNextRequest === "function" && typeof llm?.resolveCallConfig === "function" ? { selectModel: async (sessionId, selection, signal) => await selectModel(sessionId, selection, signal) } : {}
+			};
+		}
+		function asController(value) {
+			return asRecord$10(value);
+		}
+		function readContext(context, name) {
+			if (typeof context !== "object" || context === null || typeof context.get !== "function") return void 0;
+			try {
+				return context.get(name);
+			} catch {
+				return;
+			}
+		}
+		function asRecord$10(value) {
+			return typeof value === "object" && value !== null && !Array.isArray(value) ? value : void 0;
+		}
+		//#endregion
+		//#region src/dsh-capabilities/host/workspace-pending-questions-adapter.ts
+		function supportsWorkspacePendingQuestions(context) {
+			const get = contextGet(context);
+			return hasMethod$2(get?.("sessions"), "get") && hasMethod$2(get?.("agents"), "get") && hasMethod$2(get?.("agents"), "roots") && hasMethod$2(get?.("sessionProjections"), "stateOf") && hasMethod$2(get?.("userQuestions"), "answer");
+		}
+		function createWorkspacePendingQuestionsAdapter(context) {
+			const get = contextGet(context);
+			const sessions = get?.("sessions");
+			const agents = get?.("agents");
+			const projections = get?.("sessionProjections");
+			const questions = get?.("userQuestions");
+			if (!supportsWorkspacePendingQuestions(context) || !sessions || !agents || !projections || !questions) throw new TypeError("DSH pending questions capability is unavailable");
+			return {
+				list(sessionId) {
+					let session;
+					try {
+						session = sessions.get(sessionId);
+					} catch {
+						return null;
+					}
+					if (session === void 0) return null;
+					let agent;
+					try {
+						agent = agents.get(sessionId);
+					} catch {
+						return null;
+					}
+					if (agent === void 0 || record$1(agent)?.session !== session || !(agents.roots?.() ?? []).includes(agent)) return null;
+					try {
+						const userQuestions = record$1(record$1(projections.stateOf(session, "userQuestions"))?.questions);
+						let active;
+						try {
+							active = userQuestions?.active;
+						} catch {
+							return null;
+						}
+						if (!Array.isArray(active)) return null;
+						return active.flatMap((raw) => {
+							const pending = record$1(raw);
+							if (typeof pending?.callId !== "string" || pending.state !== "open" && pending.state !== "continued" || !Array.isArray(pending.questions)) return [];
+							return [{
+								callId: pending.callId,
+								state: pending.state,
+								questions: pending.questions.filter(isQuestion)
+							}];
+						});
+					} catch {
+						return null;
+					}
+				},
+				answer(sessionId, callId, answer) {
+					let agent;
+					try {
+						agent = agents.get(sessionId);
+					} catch {
+						return false;
+					}
+					let session;
+					try {
+						session = sessions.get(sessionId);
+					} catch {
+						return false;
+					}
+					if (agent === void 0 || session === void 0 || record$1(agent)?.session !== session || !(agents.roots?.() ?? []).includes(agent)) return false;
+					try {
+						return questions.answer(agent, callId, answer) === true;
+					} catch {
+						return false;
+					}
+				}
+			};
+		}
+		function contextGet(context) {
+			if (typeof context !== "object" || context === null || typeof context.get !== "function") return void 0;
+			return context.get.bind(context);
+		}
+		function hasMethod$2(value, name) {
+			return typeof value === "object" && value !== null && typeof value[name] === "function";
+		}
+		function record$1(value) {
+			return typeof value === "object" && value !== null && !Array.isArray(value) ? value : void 0;
+		}
+		function isQuestion(value) {
+			const item = record$1(value);
+			return typeof item?.id === "string" && typeof item.question === "string";
+		}
+		//#endregion
+		//#region src/dsh-capabilities/host/workspace-approval-adapter.ts
+		function supportsWorkspaceApproval(context) {
+			const nativeContext = asContext(context);
+			const get = nativeContext?.get.bind(nativeContext);
+			return nativeContext?.on !== void 0 && hasMethod$1(safeGet(get, "agents"), "get") && hasMethod$1(safeGet(get, "approval"), "request");
+		}
+		function createWorkspaceApprovalAdapter(context) {
+			const nativeContext = asContext(context);
+			const get = nativeContext?.get.bind(nativeContext);
+			if (!supportsWorkspaceApproval(context)) throw new TypeError("DSH approval capability is unavailable");
+			const activeRequests = /* @__PURE__ */ new Set();
+			let disposed = false;
+			return {
+				dispose() {
+					disposed = true;
+					for (const cancel of activeRequests) cancel();
+					activeRequests.clear();
+				},
+				startRequest(input) {
+					if (disposed || input.signal.aborted) return null;
+					const agents = safeGet(get, "agents");
+					const approval = safeGet(get, "approval");
+					if (agents === void 0 || approval === void 0) return null;
+					let agent;
+					try {
+						agent = asAgent(agents.get(input.sessionId));
+					} catch {
+						return null;
+					}
+					if (agent?.status !== "running" || agent.session === void 0 || typeof agent.session.seq !== "number" || nativeContext?.on === void 0) return null;
+					const startingSeq = agent.session.seq;
+					const requestLifetime = new AbortController();
+					let requestDisposed = false;
+					let disposeTurnListener;
+					let disposeApprovalListener;
+					let approvalEvent;
+					const abortRequest = () => requestLifetime.abort(input.signal.reason);
+					const cleanup = () => {
+						if (requestDisposed) return;
+						requestDisposed = true;
+						input.signal.removeEventListener("abort", abortRequest);
+						requestLifetime.signal.removeEventListener("abort", cleanup);
+						if (typeof disposeTurnListener === "function") disposeTurnListener();
+						if (typeof disposeApprovalListener === "function") disposeApprovalListener();
+						activeRequests.delete(abortRequest);
+					};
+					requestLifetime.signal.addEventListener("abort", cleanup, { once: true });
+					if (input.signal.aborted) abortRequest();
+					else input.signal.addEventListener("abort", abortRequest, { once: true });
+					try {
+						disposeTurnListener = nativeContext.on("session/event", (sessionValue, eventValue) => {
+							const session = asRecord$9(sessionValue);
+							const event = asRecord$9(eventValue);
+							if ((typeof session?.id === "string" ? session.id : asRecord$9(session?.header)?.id) === input.sessionId && event?.type === "turn/end") requestLifetime.abort();
+						}, { global: true });
+					} catch {
+						cleanup();
+						return null;
+					}
+					if (typeof disposeTurnListener !== "function") {
+						cleanup();
+						return null;
+					}
+					activeRequests.add(abortRequest);
+					try {
+						disposeApprovalListener = nativeContext.on("session/event", (sessionValue, eventValue) => {
+							const session = asRecord$9(sessionValue);
+							const event = asRecord$9(eventValue);
+							const data = asRecord$9(event?.data);
+							const sessionId = typeof session?.id === "string" ? session.id : asRecord$9(session?.header)?.id;
+							if (sessionId !== input.sessionId || event?.type !== "approval/asked" || event.seq !== startingSeq || typeof data?.id !== "string" || data.toolName !== input.toolName || data.callId !== input.callId || data.reason !== input.reason) return;
+							approvalEvent = {
+								sessionId,
+								seq: startingSeq,
+								id: data.id,
+								toolName: data.toolName,
+								...typeof data.callId === "string" ? { callId: data.callId } : {},
+								...typeof data.reason === "string" ? { reason: data.reason } : {}
+							};
+						}, { global: true });
+					} catch {
+						cleanup();
+						return null;
+					}
+					if (typeof disposeApprovalListener !== "function") {
+						cleanup();
+						return null;
+					}
+					let outcome;
+					try {
+						outcome = Promise.resolve(approval.request({
+							agent,
+							toolName: input.toolName,
+							...input.callId === void 0 ? {} : { callId: input.callId },
+							...input.reason === void 0 ? {} : { reason: input.reason },
+							signal: requestLifetime.signal
+						}));
+					} catch {
+						cleanup();
+						return null;
+					}
+					disposeApprovalListener();
+					disposeApprovalListener = void 0;
+					const event = approvalEvent;
+					if (event === void 0 || event.seq !== startingSeq || event.sessionId !== input.sessionId || event.toolName !== input.toolName || event.callId !== input.callId || event.reason !== input.reason) {
+						cleanup();
+						outcome.catch(() => void 0);
+						return null;
+					}
+					let onCancellation;
+					const cancelled = requestLifetime.signal.aborted ? Promise.resolve("cancelled") : new Promise((resolve) => {
+						onCancellation = () => resolve("cancelled");
+						requestLifetime.signal.addEventListener("abort", onCancellation, { once: true });
+					});
+					return {
+						requestId: event.id,
+						outcome: Promise.race([outcome.then((result) => isOutcome(result) ? result : "unavailable", () => requestLifetime.signal.aborted ? "cancelled" : "unavailable"), cancelled]).finally(() => {
+							if (onCancellation !== void 0) requestLifetime.signal.removeEventListener("abort", onCancellation);
+							cleanup();
+						})
+					};
+				}
+			};
+		}
+		function safeGet(get, name) {
+			try {
+				return get?.(name);
+			} catch {
+				return;
+			}
+		}
+		function asContext(context) {
+			if (typeof context !== "object" || context === null || typeof context.get !== "function") return void 0;
+			return context;
+		}
+		function hasMethod$1(value, name) {
+			return typeof value === "object" && value !== null && typeof value[name] === "function";
+		}
+		function asAgent(value) {
+			return typeof value === "object" && value !== null ? value : void 0;
+		}
+		function asRecord$9(value) {
+			return typeof value === "object" && value !== null && !Array.isArray(value) ? value : void 0;
+		}
+		function isOutcome(value) {
+			return value === "allowed-once" || value === "rejected" || value === "cancelled" || value === "unavailable";
+		}
+		//#endregion
 		//#region src/dsh-capabilities/host/session-prompt-adapter.ts
 		function supportsSessionPromptAssembly(value) {
 			const ctx = value;
@@ -31434,6 +31941,39 @@ window.__ModuleLoader__.load({
 					detect: (ctx) => hasMethods(read(ctx, "sessionController"), ["create", "resolveAgent"]),
 					create: (ctx) => read(ctx, "sessionController")
 				});
+				add({
+					id: "workspace-session-control-020",
+					capability: "workspace.session-control",
+					supportedDsh: range020,
+					runtime,
+					priority: 10,
+					status: "supported",
+					introducedIn: "0.2.0-rc.2",
+					detect: supportsWorkspaceSessionControl,
+					create: createWorkspaceSessionControlAdapter
+				});
+				add({
+					id: "workspace-pending-questions-020",
+					capability: "workspace.pending-questions",
+					supportedDsh: range020,
+					runtime,
+					priority: 10,
+					status: "supported",
+					introducedIn: "0.2.0-rc.2",
+					detect: supportsWorkspacePendingQuestions,
+					create: createWorkspacePendingQuestionsAdapter
+				});
+				add({
+					id: "workspace-approval-020",
+					capability: "workspace.approval",
+					supportedDsh: range020,
+					runtime,
+					priority: 10,
+					status: "supported",
+					introducedIn: "0.2.0-rc.2",
+					detect: supportsWorkspaceApproval,
+					create: createWorkspaceApprovalAdapter
+				});
 				for (const capability of ["connection.peer", "connection.uplink"]) add({
 					id: `${capability}-021`,
 					capability,
@@ -34596,7 +35136,7 @@ window.__ModuleLoader__.load({
 		}
 		/** 只接受形如探测结果的载荷；字段缺失或类型不符时返回 null，而不是猜测“已安装”。 */
 		function normalizeDetection(value) {
-			if (!isRecord$8(value)) return null;
+			if (!isRecord$9(value)) return null;
 			const { installed, source, command, version, reason, checkedAt, platform } = value;
 			if (typeof installed !== "boolean" || typeof checkedAt !== "string") return null;
 			if (platform !== "macos" && platform !== "windows" && platform !== "linux") return null;
@@ -34614,7 +35154,7 @@ window.__ModuleLoader__.load({
 				checkedAt
 			};
 		}
-		function isRecord$8(value) {
+		function isRecord$9(value) {
 			return typeof value === "object" && value !== null && !Array.isArray(value);
 		}
 		//#endregion
@@ -36424,6 +36964,12 @@ window.__ModuleLoader__.load({
 			const [dashboardLoading, setDashboardLoading] = (0, react.useState)(true);
 			const [dashboardError, setDashboardError] = (0, react.useState)(false);
 			const [dashboardIssue, setDashboardIssue] = (0, react.useState)(null);
+			const [quotaPolicyPending, setQuotaPolicyPending] = (0, react.useState)(null);
+			const [quotaPolicyFailed, setQuotaPolicyFailed] = (0, react.useState)(false);
+			const [quotaResetTarget, setQuotaResetTarget] = (0, react.useState)(null);
+			const [quotaResetPending, setQuotaResetPending] = (0, react.useState)(false);
+			const [quotaResetResult, setQuotaResetResult] = (0, react.useState)(null);
+			const [quotaResetFailed, setQuotaResetFailed] = (0, react.useState)(false);
 			const [chartMetric, setChartMetric] = (0, react.useState)("calls");
 			const [sessionSearch, setSessionSearch] = (0, react.useState)("");
 			const [selectedSession, setSelectedSession] = (0, react.useState)(null);
@@ -36446,14 +36992,17 @@ window.__ModuleLoader__.load({
 			const dashboardSequence = (0, react.useRef)(0);
 			const requestSequence = (0, react.useRef)(0);
 			const managementSequence = (0, react.useRef)(0);
-			const loadDashboard = (0, react.useCallback)(async (signal) => {
+			const loadDashboard = (0, react.useCallback)(async (signal, force = false) => {
 				const sequence = dashboardSequence.current + 1;
 				dashboardSequence.current = sequence;
 				setDashboardLoading(true);
 				setDashboardError(false);
 				setDashboardIssue(null);
 				try {
-					const next = await callMagpieRpc(rpc, "usage/dashboard", { period }, signal);
+					const next = await callMagpieRpc(rpc, "usage/dashboard", {
+						period,
+						...force ? { force: true } : {}
+					}, signal);
 					if (signal.aborted || sequence !== dashboardSequence.current) return;
 					setDashboard(next);
 					const issue = next?.availabilityIssue ?? (next === null ? "host-rpc-outdated" : null);
@@ -36468,6 +37017,48 @@ window.__ModuleLoader__.load({
 					if (!signal.aborted && sequence === dashboardSequence.current) setDashboardLoading(false);
 				}
 			}, [period, rpc]);
+			const updateQuotaPolicy = (0, react.useCallback)(async (user, policy, enabled) => {
+				if (quotaPolicyPending !== null) return;
+				setQuotaPolicyPending(`${user}:${policy}`);
+				setQuotaPolicyFailed(false);
+				try {
+					await callMagpieRpc(rpc, "usage/account/update", {
+						user,
+						policy,
+						enabled
+					});
+					await loadDashboard(new AbortController().signal, true);
+				} catch {
+					setQuotaPolicyFailed(true);
+				} finally {
+					setQuotaPolicyPending(null);
+				}
+			}, [
+				loadDashboard,
+				quotaPolicyPending,
+				rpc
+			]);
+			const closeQuotaReset = () => {
+				if (quotaResetPending) return;
+				setQuotaResetTarget(null);
+				setQuotaResetResult(null);
+				setQuotaResetFailed(false);
+			};
+			const confirmQuotaReset = async () => {
+				const target = quotaResetTarget;
+				if (target === null || quotaResetPending) return;
+				setQuotaResetPending(true);
+				setQuotaResetFailed(false);
+				try {
+					const result = await callMagpieRpc(rpc, "usage/reset", { user: target.user });
+					setQuotaResetResult(result.outcome);
+					await loadDashboard(new AbortController().signal, true);
+				} catch {
+					setQuotaResetFailed(true);
+				} finally {
+					setQuotaResetPending(false);
+				}
+			};
 			(0, react.useEffect)(() => {
 				const controller = new AbortController();
 				loadDashboard(controller.signal);
@@ -36800,8 +37391,30 @@ window.__ModuleLoader__.load({
 				dashboard,
 				loading: dashboardLoading,
 				quotaView,
-				t
-			})));
+				t,
+				policyPending: quotaPolicyPending,
+				policyFailed: quotaPolicyFailed,
+				onPolicyChange: updateQuotaPolicy,
+				onResetRequest: (quota) => {
+					if (quota.user === null || quota.resets?.count === null || quota.resets?.count === void 0 || quota.resets.count <= 0) return;
+					setQuotaResetTarget({
+						user: quota.user,
+						account: quota.alias ?? quota.name,
+						count: quota.resets.count
+					});
+					setQuotaResetResult(null);
+					setQuotaResetFailed(false);
+				}
+			})), quotaResetTarget !== null && (0, react.createElement)(MagpieQuotaResetDialog, {
+				target: quotaResetTarget,
+				pending: quotaResetPending,
+				result: quotaResetResult,
+				failed: quotaResetFailed,
+				t,
+				onCancel: closeQuotaReset,
+				onConfirm: confirmQuotaReset,
+				onClose: closeQuotaReset
+			}));
 		}
 		function OverviewPage({ dashboard, loading, error, chartMetric, onChartMetricChange, t, onOpenSession }) {
 			const [modelBreakdownMode, setModelBreakdownMode] = (0, react.useState)("aggregate");
@@ -37312,7 +37925,7 @@ window.__ModuleLoader__.load({
 				fill: "currentColor"
 			}));
 		}
-		function QuotasPage({ dashboard, loading, quotaView = require_native_workspace_store.DEFAULT_SUBSCRIPTION_REPORT_SETTINGS.quotaView, t }) {
+		function QuotasPage({ dashboard, loading, quotaView = require_native_workspace_store.DEFAULT_SUBSCRIPTION_REPORT_SETTINGS.quotaView, t, policyPending = null, policyFailed = false, onPolicyChange = () => void 0, onResetRequest = () => void 0 }) {
 			const quotaUnavailable = dashboard?.quotaStatus !== "available";
 			const quotas = dashboard?.quotas ?? [];
 			const quotaHistory = dashboard?.quotaHistory ?? [];
@@ -37323,7 +37936,11 @@ window.__ModuleLoader__.load({
 				key: group.provider,
 				group,
 				quotaView,
-				t
+				t,
+				policyPending,
+				policyFailed,
+				onPolicyChange,
+				onResetRequest
 			}))), (0, react.createElement)("section", { className: "codingns-magpie-panel codingns-magpie-history-panel" }, (0, react.createElement)("div", { className: "codingns-magpie-panel-head" }, (0, react.createElement)("div", void 0, (0, react.createElement)("h2", void 0, t("magpie.quotaHistory")), (0, react.createElement)("p", void 0, t("magpie.quotaHistoryNote")))), quotaHistory.length === 0 ? (0, react.createElement)("div", { className: "codingns-magpie-inline-empty" }, t(dashboard === null && loading ? "magpie.loading" : dashboard?.quotaHistoryStatus === "available" ? "magpie.noHistory" : "magpie.historyUnavailable")) : (0, react.createElement)("div", { className: "codingns-magpie-history-grid" }, ...quotaHistory.map((history) => (0, react.createElement)(QuotaHistoryCard, {
 				key: `${history.provider}:${history.user ?? ""}`,
 				history
@@ -37403,7 +38020,7 @@ window.__ModuleLoader__.load({
 		* 同一厂商的多个账号（如 WorkBuddy 的 4 个）共用一张卡，避免每个账号各占一张卡导致
 		* 同类账号被拆散在网格各处；单账号厂商的读法与改造前一致。
 		*/
-		function QuotaGroupCard({ group, quotaView = require_native_workspace_store.DEFAULT_SUBSCRIPTION_REPORT_SETTINGS.quotaView, t }) {
+		function QuotaGroupCard({ group, quotaView = require_native_workspace_store.DEFAULT_SUBSCRIPTION_REPORT_SETTINGS.quotaView, t, policyPending, policyFailed, onPolicyChange, onResetRequest }) {
 			const first = group.accounts[0];
 			const [collapsed, setCollapsed] = (0, react.useState)(false);
 			const multi = group.accounts.length > 1;
@@ -37425,6 +38042,10 @@ window.__ModuleLoader__.load({
 				quota,
 				quotaView,
 				t,
+				policyPending,
+				policyFailed,
+				onPolicyChange,
+				onResetRequest,
 				showHeading: multi
 			})));
 		}
@@ -37435,11 +38056,18 @@ window.__ModuleLoader__.load({
 		* Sub2api 的钱包余额、按积分计量的 WorkBuddy）单独显示余额行，与 Magpie 原生卡片
 		* 一致——过去这些账号只剩一条空进度条，余额被完全藏起来。
 		*/
-		function QuotaAccountSection({ quota, quotaView = require_native_workspace_store.DEFAULT_SUBSCRIPTION_REPORT_SETTINGS.quotaView, t, showHeading }) {
+		function QuotaAccountSection({ quota, quotaView = require_native_workspace_store.DEFAULT_SUBSCRIPTION_REPORT_SETTINGS.quotaView, t, showHeading, policyPending, policyFailed, onPolicyChange, onResetRequest }) {
 			const dailyValues = quota.daily.days.map((point) => point.used).filter((value) => value !== null);
 			const balance = resolveQuotaAccountBalance(quota);
 			const percentWindows = quota.windows.filter((window) => window.usedPercent !== null || window.remainingPercent !== null);
-			return (0, react.createElement)("div", { className: "codingns-magpie-quota-account-block" }, showHeading && (0, react.createElement)("div", { className: "codingns-magpie-quota-account-head" }, (0, react.createElement)("strong", void 0, quota.alias ?? quota.name), quota.user !== null && (0, react.createElement)("span", void 0, t("magpie.account", { account: quota.user })), quota.plan !== null && (0, react.createElement)("small", void 0, quota.plan)), !showHeading && quota.user !== null && (0, react.createElement)("div", { className: "codingns-magpie-quota-account" }, t("magpie.account", { account: quota.user })), balance !== null && (0, react.createElement)("div", { className: "codingns-magpie-quota-balance" }, (0, react.createElement)("span", { className: "codingns-magpie-quota-balance-label" }, t("magpie.balance")), (0, react.createElement)("strong", {
+			return (0, react.createElement)("div", { className: "codingns-magpie-quota-account-block" }, showHeading && (0, react.createElement)("div", { className: "codingns-magpie-quota-account-head" }, (0, react.createElement)("strong", void 0, quota.alias ?? quota.name), quota.user !== null && (0, react.createElement)("span", void 0, t("magpie.account", { account: quota.user })), quota.plan !== null && (0, react.createElement)("small", void 0, quota.plan)), !showHeading && quota.user !== null && (0, react.createElement)("div", { className: "codingns-magpie-quota-account" }, t("magpie.account", { account: quota.user })), quota.provider.toLocaleLowerCase() === "codex" && (0, react.createElement)(MagpieQuotaControls, {
+				quota,
+				t,
+				policyPending,
+				policyFailed,
+				onPolicyChange,
+				onResetRequest
+			}), balance !== null && (0, react.createElement)("div", { className: "codingns-magpie-quota-balance" }, (0, react.createElement)("span", { className: "codingns-magpie-quota-balance-label" }, t("magpie.balance")), (0, react.createElement)("strong", {
 				className: balance.money ? "codingns-magpie-quota-balance-value is-money" : "codingns-magpie-quota-balance-value",
 				title: balance.raw
 			}, balance.text)), quota.windows.length === 0 ? balance === null && (0, react.createElement)("div", { className: "codingns-magpie-inline-empty" }, t("magpie.noLimit")) : percentWindows.length > 0 && percentWindows.map((window) => {
@@ -37453,6 +38081,84 @@ window.__ModuleLoader__.load({
 				}, (0, react.createElement)("div", { className: "codingns-magpie-quota-window-head" }, (0, react.createElement)("strong", void 0, window.name), (0, react.createElement)("span", void 0, headline)), (0, react.createElement)("div", { className: "codingns-magpie-track quota-track" }, used === null || remaining === null ? null : (0, react.createElement)("span", { style: { width: `${Math.max(0, Math.min(100, barPercent ?? 0))}%` } })), (0, react.createElement)("div", { className: "codingns-magpie-quota-foot" }, (0, react.createElement)("span", void 0, window.amount !== null && window.limit !== null ? `${formatValue(window.amount)} / ${formatValue(window.limit)} ${window.unit ?? ""}` : window.display ?? ""), window.resetsAt !== null && (0, react.createElement)("span", void 0, t("magpie.resets", { time: formatTimestamp(window.resetsAt) }))));
 			}), balance !== null && percentWindows.length === 0 && quota.windows.some((window) => window.resetsAt !== null) && (0, react.createElement)("div", { className: "codingns-magpie-quota-foot" }, ...quota.windows.filter((window) => window.resetsAt !== null).map((window) => (0, react.createElement)("span", { key: window.name }, t("magpie.resets", { time: formatTimestamp(window.resetsAt) })))), quota.daily.days.length > 1 && (0, react.createElement)("div", { className: "codingns-magpie-daily-chart" }, (0, react.createElement)(Sparkline, { values: dailyValues }), (0, react.createElement)("small", void 0, t("magpie.dailyUsage"))));
 		}
+		function MagpieQuotaControls({ quota, t, policyPending, policyFailed, onPolicyChange, onResetRequest }) {
+			const user = quota.user;
+			const resetCount = quota.resets?.count;
+			const policyUnavailable = user === null || quota.policyStatus === "unavailable" || quota.autoReset === void 0 || quota.useCredits === void 0;
+			return (0, react.createElement)("div", { className: "codingns-magpie-codex-controls" }, (0, react.createElement)("div", { className: "codingns-magpie-codex-reset-count" }, (0, react.createElement)("span", void 0, t("usage.magpieResetCountLabel")), (0, react.createElement)("strong", void 0, resetCount === null || resetCount === void 0 ? "—" : t("usage.magpieResetCount", { count: resetCount }))), policyUnavailable ? (0, react.createElement)("div", {
+				className: "codingns-magpie-codex-unavailable",
+				role: "status"
+			}, t("magpie.codexPolicyUnavailable")) : quota.autoReset !== void 0 && (0, react.createElement)(MagpieQuotaPolicySwitch, {
+				label: t("usage.magpieResetWhenWeek"),
+				checked: quota.autoReset.week,
+				pending: policyPending === `${user}:week`,
+				disabled: policyPending !== null,
+				onChange: (enabled) => onPolicyChange(user, "week", enabled)
+			}), !policyUnavailable && quota.autoReset !== void 0 && (0, react.createElement)(MagpieQuotaPolicySwitch, {
+				label: t("usage.magpieResetBeforeExpiry"),
+				checked: quota.autoReset.expiring,
+				pending: policyPending === `${user}:expiring`,
+				disabled: policyPending !== null,
+				onChange: (enabled) => onPolicyChange(user, "expiring", enabled)
+			}), !policyUnavailable && quota.useCredits !== void 0 && (0, react.createElement)(MagpieQuotaPolicySwitch, {
+				label: t("usage.magpieUseCredits"),
+				checked: quota.useCredits,
+				pending: policyPending === `${user}:credits`,
+				disabled: policyPending !== null,
+				onChange: (enabled) => onPolicyChange(user, "credits", enabled)
+			}), policyFailed && (0, react.createElement)("div", {
+				className: "codingns-magpie-codex-error",
+				role: "alert"
+			}, t("magpie.codexPolicyFailed")), user !== null && resetCount !== null && resetCount !== void 0 && (0, react.createElement)("button", {
+				type: "button",
+				className: "codingns-magpie-codex-reset-button",
+				disabled: resetCount <= 0,
+				onClick: () => onResetRequest(quota)
+			}, t("usage.magpieUseReset")));
+		}
+		function MagpieQuotaPolicySwitch({ label, checked, pending, disabled, onChange }) {
+			return (0, react.createElement)("button", {
+				type: "button",
+				role: "switch",
+				"aria-checked": checked,
+				disabled,
+				"aria-busy": pending,
+				className: "codingns-magpie-codex-policy",
+				onClick: () => onChange(!checked)
+			}, (0, react.createElement)("span", void 0, label), (0, react.createElement)("span", { className: `codingns-magpie-codex-switch${checked ? " is-on" : ""}` }, (0, react.createElement)("span")));
+		}
+		function MagpieQuotaResetDialog({ target, pending, result, failed, t, onCancel, onConfirm, onClose }) {
+			const finished = result !== null || failed;
+			const outcomeMessage = result === null ? null : t({
+				reset: "usage.resetOutcomeReset",
+				alreadyRedeemed: "usage.resetOutcomeAlreadyRedeemed",
+				nothingToReset: "usage.resetOutcomeNothingToReset",
+				noCredit: "usage.resetOutcomeNoCredit"
+			}[result]);
+			return (0, react.createElement)("div", {
+				className: "codingns-magpie-codex-reset-overlay",
+				role: "presentation",
+				onMouseDown: (event) => {
+					if (event.target === event.currentTarget && !pending) onCancel();
+				}
+			}, (0, react.createElement)("div", {
+				className: "codingns-magpie-codex-reset-dialog",
+				role: "dialog",
+				"aria-modal": true,
+				"aria-label": t("usage.resetDialogTitle")
+			}, (0, react.createElement)("strong", void 0, t("usage.resetDialogTitle")), (0, react.createElement)("span", void 0, t("magpie.resetDialogAccount", { account: target.account })), (0, react.createElement)("span", { className: failed ? "is-error" : result === "reset" || result === "alreadyRedeemed" ? "is-success" : "" }, pending ? t("usage.resetDialogPending") : failed ? t("magpie.codexResetFailed") : outcomeMessage ?? t("magpie.resetDialogBody", { count: target.count })), (0, react.createElement)("div", { className: "codingns-magpie-codex-reset-actions" }, finished ? (0, react.createElement)("button", {
+				type: "button",
+				onClick: onClose
+			}, t("usage.resetDialogClose")) : (0, react.createElement)("button", {
+				type: "button",
+				disabled: pending,
+				onClick: onCancel
+			}, t("usage.resetDialogCancel")), !finished && (0, react.createElement)("button", {
+				type: "button",
+				disabled: pending,
+				onClick: onConfirm
+			}, t("usage.resetDialogConfirm")))));
+		}
 		function QuotaHistoryCard({ history }) {
 			return (0, react.createElement)("div", { className: "codingns-magpie-history-card" }, (0, react.createElement)("div", { className: "codingns-magpie-provider-inline" }, (0, react.createElement)(MagpieProviderLogo, {
 				identities: [history.provider],
@@ -37763,6 +38469,13 @@ window.__ModuleLoader__.load({
 .codingns-magpie-quota-balance-label{flex:0 0 auto;color:var(--mp-muted);font-size:${require_theme.uiFontSize(13)}}
 .codingns-magpie-quota-balance-value{min-width:0;overflow:hidden;color:var(--mp-ink);font-size:${require_theme.uiFontSize(15)};font-weight:600;font-variant-numeric:tabular-nums;text-overflow:ellipsis;white-space:nowrap}
 .codingns-magpie-quota-balance-value.is-money{font-size:${require_theme.uiFontSize(17)};letter-spacing:-.01em}
+.codingns-magpie-codex-controls{display:grid;gap:2px;margin:9px 0 10px;padding:8px 10px;border-top:.5px solid var(--mp-line);border-bottom:.5px solid var(--mp-line);background:color-mix(in srgb,var(--mp-layer) 45%,transparent)}
+.codingns-magpie-codex-reset-count{display:flex;align-items:center;justify-content:space-between;gap:8px;min-width:0;padding:2px 0 5px;color:var(--mp-muted);font-size:${require_theme.uiFontSize(12)}}.codingns-magpie-codex-reset-count strong{color:var(--mp-ink);font-size:${require_theme.uiFontSize(13)};font-variant-numeric:tabular-nums}
+.codingns-magpie-codex-policy{display:flex;align-items:center;justify-content:space-between;gap:12px;width:100%;min-width:0;min-height:32px;padding:4px 0;border:0;background:transparent;color:var(--mp-muted);font:inherit;font-size:${require_theme.uiFontSize(12)};text-align:left;cursor:pointer}.codingns-magpie-codex-policy>span:first-child{min-width:0;line-height:1.4;overflow-wrap:anywhere}.codingns-magpie-codex-policy:disabled{opacity:.58;cursor:wait}.codingns-magpie-codex-policy:focus-visible,.codingns-magpie-codex-reset-button:focus-visible{outline:2px solid color-mix(in srgb,var(--mp-accent) 60%,transparent);outline-offset:2px}
+.codingns-magpie-codex-switch{display:grid;place-items:center;flex:0 0 34px;width:34px;height:20px;padding:2px;border-radius:999px;background:var(--mp-line-strong);transition:background .15s}.codingns-magpie-codex-switch>span{justify-self:start;width:16px;height:16px;border-radius:50%;background:var(--mp-surface);box-shadow:0 1px 2px rgba(0,0,0,.18);transition:transform .15s}.codingns-magpie-codex-switch.is-on{background:var(--mp-accent)}.codingns-magpie-codex-switch.is-on>span{transform:translateX(14px)}
+.codingns-magpie-codex-unavailable,.codingns-magpie-codex-error{padding:5px 0;color:var(--mp-caption);font-size:${require_theme.uiFontSize(12)}}.codingns-magpie-codex-error{color:var(--dsw-alias-state-error-primary,#c54b4b)}
+.codingns-magpie-codex-reset-button{justify-self:start;min-height:27px;margin-top:4px;padding:0 9px;border:.5px solid var(--mp-line-strong);border-radius:var(--dsw-radius-sm,6px);background:transparent;color:var(--mp-ink);font:inherit;font-size:${require_theme.uiFontSize(12)};cursor:pointer}.codingns-magpie-codex-reset-button:hover:not(:disabled){border-color:var(--mp-accent);color:var(--mp-accent)}.codingns-magpie-codex-reset-button:disabled{opacity:.45;cursor:not-allowed}
+.codingns-magpie-codex-reset-overlay{position:absolute;inset:0;z-index:30;display:flex;align-items:center;justify-content:center;overflow:auto;padding:20px;background:color-mix(in srgb,var(--mp-surface) 70%,rgba(0,0,0,.3));backdrop-filter:blur(2px)}.codingns-magpie-codex-reset-dialog{display:grid;gap:10px;width:min(420px,100%);padding:16px;border:.5px solid var(--mp-line-strong);border-radius:var(--mp-radius);background:var(--mp-surface);box-shadow:var(--dsw-elevation-prominent,0 16px 44px rgba(0,0,0,.2));font-size:${require_theme.uiFontSize(13)};line-height:1.5}.codingns-magpie-codex-reset-dialog>strong{font-size:${require_theme.uiFontSize(14)}}.codingns-magpie-codex-reset-dialog>span{color:var(--mp-muted);overflow-wrap:anywhere}.codingns-magpie-codex-reset-dialog>span.is-error{color:var(--dsw-alias-state-error-primary,#c54b4b)}.codingns-magpie-codex-reset-dialog>span.is-success{color:var(--dsw-alias-state-success-primary,#3f9d6b)}.codingns-magpie-codex-reset-actions{display:flex;justify-content:flex-end;gap:8px;padding-top:3px}.codingns-magpie-codex-reset-actions button{min-height:30px;padding:0 11px;border:.5px solid var(--mp-line-strong);border-radius:var(--dsw-radius-sm,6px);background:transparent;color:var(--mp-ink);font:inherit;font-size:${require_theme.uiFontSize(12)};cursor:pointer}.codingns-magpie-codex-reset-actions button:last-child{border-color:var(--mp-accent);background:var(--mp-accent);color:var(--dsw-alias-label-primary-foreground,#fff)}.codingns-magpie-codex-reset-actions button:disabled{opacity:.5;cursor:wait}
 .codingns-magpie-quota-window{padding:11px 0;border-top:.5px solid var(--mp-line)}.codingns-magpie-quota-window-head,.codingns-magpie-quota-foot,.codingns-magpie-history-line-head{display:flex;align-items:center;justify-content:space-between;gap:9px}.codingns-magpie-quota-window-head{font-size:${require_theme.uiFontSize(13)};font-weight:500}.codingns-magpie-quota-window-head span{color:var(--mp-muted);font-variant-numeric:tabular-nums}.quota-track{height:6px}.quota-track span{background:linear-gradient(90deg,var(--mp-accent),color-mix(in srgb,var(--mp-accent) 55%,transparent))}.codingns-magpie-quota-foot{color:var(--mp-caption);font-size:${require_theme.uiFontSize(12)}}
 .codingns-magpie-daily-chart{display:grid;grid-template-columns:1fr auto;align-items:center;gap:9px;margin-top:4px;padding-top:10px;border-top:.5px solid var(--mp-line);color:var(--mp-muted);font-size:${require_theme.uiFontSize(12)}}.codingns-magpie-sparkline{width:100%;height:30px;overflow:visible}.codingns-magpie-sparkline polyline{stroke:var(--mp-accent);stroke-width:2;vector-effect:non-scaling-stroke}
 .codingns-magpie-history-panel{padding:17px;margin-top:14px}.codingns-magpie-history-grid{display:grid;grid-template-columns:repeat(2,minmax(0,1fr));gap:9px}.codingns-magpie-history-card{padding:12px;border:1px solid var(--mp-line);border-radius:9px;background:var(--mp-card)}.codingns-magpie-history-card>strong,.codingns-magpie-history-card>small{display:block}.codingns-magpie-history-card>strong{font-size:${require_theme.uiFontSize(13)};font-weight:600}.codingns-magpie-history-card>small{margin-top:3px;color:var(--mp-caption);font-size:${require_theme.uiFontSize(12)}}.codingns-magpie-history-line{margin-top:10px}.codingns-magpie-history-line-head{font-size:${require_theme.uiFontSize(12)}}.codingns-magpie-history-line-head span:last-child{font-variant-numeric:tabular-nums;font-weight:650}
@@ -38528,7 +39241,7 @@ html[data-codingns-mobile-sidebar="on"] .codingns-magpie-page{padding-left:0;--m
 			const fiberKey = Object.getOwnPropertyNames(row).find((key) => key.startsWith("__reactFiber$"));
 			if (fiberKey === void 0) return void 0;
 			let current = carrier[fiberKey];
-			for (let depth = 0; depth < 32 && isRecord$7(current); depth += 1) {
+			for (let depth = 0; depth < 32 && isRecord$8(current); depth += 1) {
 				const fiber = current;
 				const sessionId = sessionIdFromProps(fiber.memoizedProps) ?? sessionIdFromProps(fiber.pendingProps);
 				if (sessionId !== void 0) return sessionId;
@@ -38536,15 +39249,15 @@ html[data-codingns-mobile-sidebar="on"] .codingns-magpie-page{padding-left:0;--m
 			}
 		}
 		function sessionIdFromProps(value) {
-			if (!isRecord$7(value)) return void 0;
+			if (!isRecord$8(value)) return void 0;
 			for (const key of ["node", "result"]) {
 				const candidate = value[key];
-				if (!isRecord$7(candidate) || typeof candidate.id !== "string") continue;
+				if (!isRecord$8(candidate) || typeof candidate.id !== "string") continue;
 				const sessionId = candidate.id.trim();
 				if (sessionId !== "") return sessionId;
 			}
 		}
-		function isRecord$7(value) {
+		function isRecord$8(value) {
 			return typeof value === "object" && value !== null && !Array.isArray(value);
 		}
 		//#endregion
@@ -38907,7 +39620,7 @@ html[data-codingns-mobile-sidebar="on"] .codingns-magpie-page{padding-left:0;--m
 		}
 		function findWorkspaceIdInFiber(value) {
 			let current = value;
-			for (let depth = 0; depth < 24 && isRecord$6(current); depth += 1) {
+			for (let depth = 0; depth < 24 && isRecord$7(current); depth += 1) {
 				for (const props of [current.memoizedProps, current.pendingProps]) {
 					const id = findWorkspaceIdInProps(props);
 					if (id !== void 0) return id;
@@ -38916,7 +39629,7 @@ html[data-codingns-mobile-sidebar="on"] .codingns-magpie-page{padding-left:0;--m
 			}
 		}
 		function findWorkspaceIdInProps(value) {
-			if (!isRecord$6(value)) return void 0;
+			if (!isRecord$7(value)) return void 0;
 			for (const key of ["workspaceId", "workspaceID"]) {
 				const id = readString$1(value[key]);
 				if (id !== void 0) return id;
@@ -39368,7 +40081,7 @@ html[data-codingns-mobile-sidebar="on"] .codingns-magpie-page{padding-left:0;--m
 			dom.querySelector(`[${WORKSPACE_SESSION_ARCHIVE_MODAL_ATTRIBUTE}]`)?.remove();
 		}
 		function normalizeRemote(value) {
-			if (!isRecord$6(value)) return {};
+			if (!isRecord$7(value)) return {};
 			const workspace = asRecord$7(readRemoteProperty(value, "workspace")) ?? asRecord$7(readRemoteProperty(value, "workspaceController"));
 			const session = asRecord$7(readRemoteProperty(value, "session")) ?? asRecord$7(readRemoteProperty(value, "sessionController"));
 			return {
@@ -39394,7 +40107,7 @@ html[data-codingns-mobile-sidebar="on"] .codingns-magpie-page{padding-left:0;--m
 			}) : [];
 		}
 		function asRecord$7(value) {
-			return isRecord$6(value) ? value : void 0;
+			return isRecord$7(value) ? value : void 0;
 		}
 		/** DSH Remote 的直接调用返回 RemoteResult；测试桩和旧宿主可能直接返回 value。 */
 		function unwrapRemoteValue$1(value) {
@@ -39402,7 +40115,7 @@ html[data-codingns-mobile-sidebar="on"] .codingns-magpie-page{padding-left:0;--m
 			if (record === void 0 || typeof record.ok !== "boolean") return value;
 			return record.ok ? record.value : void 0;
 		}
-		function isRecord$6(value) {
+		function isRecord$7(value) {
 			return typeof value === "object" && value !== null && !Array.isArray(value);
 		}
 		//#endregion
@@ -40510,6 +41223,8 @@ html[data-codingns-mobile-sidebar="on"] .codingns-magpie-page{padding-left:0;--m
 			const [resetPending, setResetPending] = (0, react.useState)(false);
 			const [resetResult, setResetResult] = (0, react.useState)(null);
 			const [resetError, setResetError] = (0, react.useState)(null);
+			const [resetTargetUser, setResetTargetUser] = (0, react.useState)(null);
+			const [magpiePolicyPending, setMagpiePolicyPending] = (0, react.useState)(null);
 			const sessionRef = (0, react.useRef)(void 0);
 			const routeKeyRef = (0, react.useRef)(null);
 			const modelSelectionRevision = props.useSession?.((value) => JSON.stringify([value.modelSelection, value.running]));
@@ -40724,20 +41439,22 @@ html[data-codingns-mobile-sidebar="on"] .codingns-magpie-page{padding-left:0;--m
 				setResetOpen(false);
 				setResetResult(null);
 				setResetError(null);
+				setResetTargetUser(null);
 			};
 			const confirmReset = () => {
-				if (resetPending || adapterId === null) return;
+				if (resetPending) return;
 				setResetPending(true);
 				setResetError(null);
 				(async () => {
 					try {
-						const result = await require_magpie_model_tag.callCliRpc(props.rpc, "subscription/reset", {
+						const result = resetTargetUser === null ? adapterId === null ? null : await require_magpie_model_tag.callCliRpc(props.rpc, "subscription/reset", {
 							sessionId: props.sessionId?.trim() ?? "",
 							adapterId,
 							...providerId === null ? {} : { providerId }
-						});
+						}) : await require_magpie_model_tag.callCliRpc(props.rpc, "magpie/usage/reset", { user: resetTargetUser });
+						if (result === null) throw new Error(t("usage.resetFailed"));
 						setResetResult(result.outcome);
-						invalidateSubscriptionUsageCache(subscriptionUsageCache, adapterId, providerId);
+						if (adapterId !== null) invalidateSubscriptionUsageCache(subscriptionUsageCache, adapterId, providerId);
 						await refreshRef.current?.();
 					} catch (error) {
 						setResetError(error instanceof Error ? error.message : "");
@@ -40746,6 +41463,23 @@ html[data-codingns-mobile-sidebar="on"] .codingns-magpie-page{padding-left:0;--m
 					}
 				})();
 			};
+			const requestMagpieReset = (user) => {
+				setOpen(false);
+				setResetResult(null);
+				setResetError(null);
+				setResetTargetUser(user);
+				setResetOpen(true);
+			};
+			const updateMagpiePolicy = (user, policy, enabled) => {
+				const key = `${user}:${policy}`;
+				if (magpiePolicyPending !== null) return;
+				setMagpiePolicyPending(key);
+				require_magpie_model_tag.callCliRpc(props.rpc, "magpie/usage/account/update", {
+					user,
+					policy,
+					enabled
+				}).then(() => refreshRef.current?.()).catch(() => void 0).finally(() => setMagpiePolicyPending(null));
+			};
 			useDismissOnOutsidePointer(rootRef, open, () => setOpen(false), { portal: magpieRequestsDialogRef });
 			useDismissOnOutsidePointer(resetDialogRef, resetOpen && !resetPending, closeResetDialog);
 			if (!eligible || snapshot === null) return null;
@@ -40753,6 +41487,7 @@ html[data-codingns-mobile-sidebar="on"] .codingns-magpie-page{padding-left:0;--m
 				const magpie = snapshot.magpie;
 				const readout = resolveMagpieTriggerReadout(magpie);
 				const label = t("usage.magpieUsageLabel");
+				const resetCount = resetTargetUser === null ? 0 : magpie.quotas.find((quota) => quota.provider === "codex" && quota.user?.toLocaleLowerCase() === resetTargetUser.toLocaleLowerCase())?.resets?.count ?? 0;
 				return (0, react.createElement)("div", {
 					ref: rootRef,
 					style: subscriptionRootStyle
@@ -40776,6 +41511,9 @@ html[data-codingns-mobile-sidebar="on"] .codingns-magpie-page{padding-left:0;--m
 					rpc: props.rpc,
 					usage: magpie,
 					t,
+					onPolicyChange: updateMagpiePolicy,
+					policyPending: magpiePolicyPending,
+					onResetRequest: requestMagpieReset,
 					tab: magpieTab,
 					onTabChange: setMagpieTab,
 					expandedGroups: expandedQuotaGroups,
@@ -40783,6 +41521,16 @@ html[data-codingns-mobile-sidebar="on"] .codingns-magpie-page{padding-left:0;--m
 					placement: magpiePlacement,
 					popoverRef: magpiePopoverRef,
 					requestsDialogRef: magpieRequestsDialogRef
+				}), resetOpen && resetTargetUser !== null && (0, react.createElement)(ResetConfirmDialog, {
+					count: resetCount,
+					pending: resetPending,
+					result: resetResult,
+					error: resetError,
+					t,
+					onCancel: closeResetDialog,
+					onConfirm: confirmReset,
+					onClose: closeResetDialog,
+					dialogRef: resetDialogRef
 				}));
 			}
 			const usage = snapshot.providerUsage;
@@ -40827,6 +41575,7 @@ html[data-codingns-mobile-sidebar="on"] .codingns-magpie-page{padding-left:0;--m
 					setOpen(false);
 					setResetResult(null);
 					setResetError(null);
+					setResetTargetUser(null);
 					setResetOpen(true);
 				}
 			} : null;
@@ -40914,7 +41663,7 @@ html[data-codingns-mobile-sidebar="on"] .codingns-magpie-page{padding-left:0;--m
 				dialogRef: resetDialogRef
 			}));
 		}
-		function MagpieUsagePopover({ rpc, usage, t, tab = "usage", onTabChange = () => {}, expandedGroups = [], onToggleGroup = () => {}, placement = {
+		function MagpieUsagePopover({ rpc, usage, t, onPolicyChange = () => {}, policyPending = null, onResetRequest = () => {}, tab = "usage", onTabChange = () => {}, expandedGroups = [], onToggleGroup = () => {}, placement = {
 			left: 0,
 			width: 400
 		}, popoverRef, requestsDialogRef }) {
@@ -40985,7 +41734,10 @@ html[data-codingns-mobile-sidebar="on"] .codingns-magpie-page{padding-left:0;--m
 				usage,
 				aggregateRows,
 				sessionRows,
-				t
+				t,
+				onPolicyChange,
+				policyPending,
+				onResetRequest
 			}) : MagpieRoutePanel({
 				rpc,
 				usage,
@@ -40996,11 +41748,56 @@ html[data-codingns-mobile-sidebar="on"] .codingns-magpie-page{padding-left:0;--m
 				...requestsDialogRef === void 0 ? {} : { requestsDialogRef }
 			})));
 		}
-		function MagpieUsagePanel({ usage, aggregateRows, sessionRows, t }) {
+		function MagpieUsagePanel({ usage, aggregateRows, sessionRows, t, onPolicyChange = () => {}, policyPending = null, onResetRequest = () => {} }) {
+			const policyQuotas = [...usage.quotas ?? [], ...usage.providerAccounts ?? []].filter((quota) => quota.provider === "codex" && quota.user !== null && (quota.autoReset !== void 0 || quota.useCredits !== void 0 || quota.resets !== void 0)).filter((quota, index, rows) => rows.findIndex((item) => item.user?.toLocaleLowerCase() === quota.user?.toLocaleLowerCase()) === index);
 			return (0, react.createElement)("div", void 0, (0, react.createElement)("section", { style: magpieUsageSectionStyle }, (0, react.createElement)("strong", { style: magpieSectionTitleStyle }, t("usage.magpieAggregateTitle")), usage.usageStatus === "available" ? createMagpieRows(aggregateRows) : (0, react.createElement)("div", { style: magpieMutedTextStyle }, t("usage.magpieUsageUnavailable"))), (0, react.createElement)("section", { style: magpieUsageSectionStyle }, (0, react.createElement)("strong", { style: magpieSectionTitleStyle }, t(usage.sessionPeriod === "today" ? "usage.magpieSessionTodayTitle" : "usage.magpieSessionTitle")), usage.sessionId !== null && (0, react.createElement)("div", { style: magpieSessionIdentityStyle }, (0, react.createElement)("div", { style: magpieSessionNameRowStyle }, (0, react.createElement)("span", { style: { flex: "none" } }, t("usage.magpieAgent", { agent: usage.agent })), usage.sessionName !== void 0 && (0, react.createElement)("strong", {
 				style: magpieSessionNameStyle,
 				title: usage.sessionName
-			}, usage.sessionName)), (0, react.createElement)("code", { style: magpieSessionIdStyle }, usage.sessionId)), usage.session === null ? (0, react.createElement)("div", { style: magpieMutedTextStyle }, usage.sessionId === null ? t("usage.magpieSessionIdUnavailable") : t("usage.magpieSessionNoUsage")) : createMagpieRows(sessionRows)));
+			}, usage.sessionName)), (0, react.createElement)("code", { style: magpieSessionIdStyle }, usage.sessionId)), usage.session === null ? (0, react.createElement)("div", { style: magpieMutedTextStyle }, usage.sessionId === null ? t("usage.magpieSessionIdUnavailable") : t("usage.magpieSessionNoUsage")) : createMagpieRows(sessionRows)), policyQuotas.length > 0 && (0, react.createElement)("section", { style: magpieUsageSectionStyle }, (0, react.createElement)("strong", { style: magpieSectionTitleStyle }, t("usage.magpieAccountPolicies")), ...policyQuotas.map((quota, index) => createMagpieAccountPolicyCard(quota, t, index, onPolicyChange, policyPending, onResetRequest))));
+		}
+		function createMagpieAccountPolicyCard(quota, t, index, onPolicyChange, policyPending, onResetRequest) {
+			const user = quota.user ?? "";
+			const resetCount = quota.resets?.count;
+			return (0, react.createElement)("div", {
+				key: `codex-policy:${user}:${index}`,
+				style: magpieAccountPolicyCardStyle
+			}, (0, react.createElement)("div", { style: magpieAccountPolicyHeadingStyle }, (0, react.createElement)("strong", { title: user }, user), resetCount !== null && resetCount !== void 0 && (0, react.createElement)("span", { style: magpieHeaderMutedStyle }, t("usage.magpieResetCount", { count: resetCount }))), quota.autoReset !== void 0 && (0, react.createElement)(MagpiePolicySwitch, {
+				label: t("usage.magpieResetWhenWeek"),
+				checked: quota.autoReset.week,
+				pending: policyPending === `${user}:week`,
+				onChange: (enabled) => onPolicyChange(user, "week", enabled)
+			}), quota.autoReset !== void 0 && (0, react.createElement)(MagpiePolicySwitch, {
+				label: t("usage.magpieResetBeforeExpiry"),
+				checked: quota.autoReset.expiring,
+				pending: policyPending === `${user}:expiring`,
+				onChange: (enabled) => onPolicyChange(user, "expiring", enabled)
+			}), quota.useCredits !== void 0 && (0, react.createElement)(MagpiePolicySwitch, {
+				label: t("usage.magpieUseCredits"),
+				checked: quota.useCredits,
+				pending: policyPending === `${user}:credits`,
+				onChange: (enabled) => onPolicyChange(user, "credits", enabled)
+			}), resetCount !== null && resetCount !== void 0 && (0, react.createElement)("button", {
+				type: "button",
+				disabled: resetCount <= 0,
+				onClick: () => onResetRequest(user),
+				style: require_theme.dshSettingsButtonStyle
+			}, t("usage.magpieUseReset")));
+		}
+		function MagpiePolicySwitch({ label, checked, pending, onChange }) {
+			return (0, react.createElement)("button", {
+				type: "button",
+				role: "switch",
+				"aria-checked": checked,
+				disabled: pending,
+				onClick: () => onChange(!checked),
+				style: magpiePolicySwitchStyle
+			}, (0, react.createElement)("span", void 0, label), (0, react.createElement)("span", { style: {
+				...magpiePolicySwitchTrackStyle,
+				...checked ? magpiePolicySwitchOnStyle : {}
+			} }, (0, react.createElement)("span", { style: {
+				...magpiePolicySwitchThumbStyle,
+				...checked ? magpiePolicySwitchThumbOnStyle : {}
+			} })));
 		}
 		function magpieQuotaUnavailableMessage(usage, quotas, t) {
 			return usage.quotaStatus === "unavailable" ? t("usage.magpieQuotaUnavailable") : usage.quotaStatus === "provider-unavailable" ? t("usage.magpieQuotaProviderUnavailable") : quotas.length === 0 ? t("usage.magpieQuotaNoData") : null;
@@ -41235,7 +42032,7 @@ html[data-codingns-mobile-sidebar="on"] .codingns-magpie-page{padding-left:0;--m
 			}, signal);
 			if (!result.ok) throw new Error(result.error.message);
 			const value = result.value;
-			return isRecord$5(value) && Array.isArray(value.items) ? value : null;
+			return isRecord$6(value) && Array.isArray(value.items) ? value : null;
 		}
 		/**
 		* 请求模态框：外壳（遮罩、标题、关闭）由弹层提供，明细直接复用管理页的请求用量视图。
@@ -41324,17 +42121,17 @@ html[data-codingns-mobile-sidebar="on"] .codingns-magpie-page{padding-left:0;--m
 		}
 		function normalizeSubscriptionSnapshot(value) {
 			if (value === null || value === void 0) return null;
-			if (!isRecord$5(value)) return null;
+			if (!isRecord$6(value)) return null;
 			if ("providerUsage" in value || "magpie" in value) return {
-				providerUsage: isRecord$5(value.providerUsage) ? value.providerUsage : null,
-				magpie: isRecord$5(value.magpie) ? value.magpie : null
+				providerUsage: isRecord$6(value.providerUsage) ? value.providerUsage : null,
+				magpie: isRecord$6(value.magpie) ? value.magpie : null
 			};
 			return {
 				providerUsage: value,
 				magpie: null
 			};
 		}
-		function isRecord$5(value) {
+		function isRecord$6(value) {
 			return typeof value === "object" && value !== null && !Array.isArray(value);
 		}
 		function SubscriptionPopover({ usage, providerName, t, nowMs, reset }) {
@@ -42162,6 +42959,60 @@ html[data-codingns-mobile-sidebar="on"] .codingns-magpie-page{padding-left:0;--m
 			marginTop: 7,
 			borderTop: `1px solid ${require_theme.dshThemeColor.border}`
 		};
+		const magpieAccountPolicyCardStyle = {
+			display: "grid",
+			gap: 5,
+			marginTop: 7,
+			padding: "8px 9px",
+			border: `1px solid ${require_theme.dshThemeColor.border}`,
+			borderRadius: 9,
+			background: require_theme.dshThemeColor.surfaceSubtle
+		};
+		const magpieAccountPolicyHeadingStyle = {
+			display: "flex",
+			justifyContent: "space-between",
+			alignItems: "baseline",
+			gap: 8,
+			minWidth: 0,
+			fontSize: require_theme.uiFontSize(12)
+		};
+		const magpiePolicySwitchStyle = {
+			display: "flex",
+			alignItems: "center",
+			justifyContent: "space-between",
+			gap: 8,
+			width: "100%",
+			padding: "2px 0",
+			border: 0,
+			background: "transparent",
+			color: require_theme.dshThemeColor.labelSecondary,
+			fontFamily: "inherit",
+			fontSize: require_theme.uiFontSize(11),
+			lineHeight: "15px",
+			textAlign: "left",
+			cursor: "pointer"
+		};
+		const magpiePolicySwitchTrackStyle = {
+			display: "inline-flex",
+			alignItems: "center",
+			flex: "none",
+			width: 28,
+			height: 16,
+			padding: 2,
+			boxSizing: "border-box",
+			borderRadius: 999,
+			background: require_theme.dshThemeColor.border,
+			transition: "background .15s ease"
+		};
+		const magpiePolicySwitchOnStyle = { background: require_theme.dshThemeColor.accent };
+		const magpiePolicySwitchThumbStyle = {
+			width: 12,
+			height: 12,
+			borderRadius: "50%",
+			background: require_theme.dshThemeColor.menuBackground,
+			transition: "transform .15s ease"
+		};
+		const magpiePolicySwitchThumbOnStyle = { transform: "translateX(12px)" };
 		const magpieStatsGridStyle = {
 			display: "grid",
 			gridTemplateColumns: "repeat(3, minmax(0, 1fr))",
@@ -45779,7 +46630,7 @@ html[data-codingns-mobile-sidebar="on"] .codingns-magpie-page{padding-left:0;--m
 		//#endregion
 		//#region src/client/features/workspace-session-enhancement.ts
 		/** descriptor 的 label/description 只是词典缺失时的兜底，取内置中文词典。 */
-		const fallbackT$2 = require_transport.resolveCodingNsTranslator();
+		const fallbackT$3 = require_transport.resolveCodingNsTranslator();
 		/** DSH 0.1.6 原生会话行增强：Logo 与归档会话入口共用同一生命周期。 */
 		const workspaceSessionEnhancementFeature = {
 			descriptor: {
@@ -45789,8 +46640,8 @@ html[data-codingns-mobile-sidebar="on"] .codingns-magpie-page{padding-left:0;--m
 				dependencies: ["cliAdapters"],
 				runtime: "client",
 				ui: {
-					label: fallbackT$2("feature.workspaceSession.label"),
-					description: fallbackT$2("feature.workspaceSession.description"),
+					label: fallbackT$3("feature.workspaceSession.label"),
+					description: fallbackT$3("feature.workspaceSession.description"),
 					labelKey: "feature.workspaceSession.label",
 					descriptionKey: "feature.workspaceSession.description",
 					order: 35,
@@ -47673,7 +48524,7 @@ ${SCOPE} article>div:last-child>button { float:none!important; order:1; min-heig
 		//#endregion
 		//#region src/client/features/mobile-access.ts
 		/** descriptor 的 label/description 只是词典缺失时的兜底，取内置中文词典。 */
-		const fallbackT$1 = require_transport.resolveCodingNsTranslator();
+		const fallbackT$2 = require_transport.resolveCodingNsTranslator();
 		/**
 		* 移动端访问增强。
 		*
@@ -47697,8 +48548,8 @@ ${SCOPE} article>div:last-child>button { float:none!important; order:1; min-heig
 					fallback: "disable"
 				}],
 				ui: {
-					label: fallbackT$1("feature.mobileAccess.label"),
-					description: fallbackT$1("feature.mobileAccess.description"),
+					label: fallbackT$2("feature.mobileAccess.label"),
+					description: fallbackT$2("feature.mobileAccess.description"),
 					labelKey: "feature.mobileAccess.label",
 					descriptionKey: "feature.mobileAccess.description",
 					order: 36,
@@ -53955,7 +54806,7 @@ ${SCOPE} article>div:last-child>button { float:none!important; order:1; min-heig
 		//#endregion
 		//#region src/client/features/file-management.ts
 		/** descriptor 的 label/description 只是词典缺失时的兜底，取内置中文词典。 */
-		const fallbackT = require_transport.resolveCodingNsTranslator();
+		const fallbackT$1 = require_transport.resolveCodingNsTranslator();
 		/** 文件管理增强：只在模块启用期间挂载右键菜单和文本编辑器。 */
 		const fileManagementFeature = {
 			descriptor: {
@@ -53965,8 +54816,8 @@ ${SCOPE} article>div:last-child>button { float:none!important; order:1; min-heig
 				dependencies: [],
 				runtime: "client",
 				ui: {
-					label: fallbackT("feature.fileManagement.label"),
-					description: fallbackT("feature.fileManagement.description"),
+					label: fallbackT$1("feature.fileManagement.label"),
+					description: fallbackT$1("feature.fileManagement.description"),
 					labelKey: "feature.fileManagement.label",
 					descriptionKey: "feature.fileManagement.description",
 					order: 40,
@@ -68927,7 +69778,7 @@ button[${ACCOUNT_ATTRIBUTE}]:focus-visible{outline:2px solid ${require_theme.dsh
 			const store = require_native_workspace_store.readNativeWorkspaceListStore(input.uiContext);
 			if (store === void 0) return () => void 0;
 			const service = require_native_workspace_store.readNativeService(input.uiContext, "workspaces");
-			const serviceRecord = isRecord$4(service) ? service : void 0;
+			const serviceRecord = isRecord$5(service) ? service : void 0;
 			const sessionStoreValue = require_native_workspace_store.readNativeService(input.uiContext, "sessions", "list");
 			const sessionStore = isSnapshotStore(sessionStoreValue) ? sessionStoreValue : void 0;
 			const ownsGetSnapshot = Object.hasOwn(store, "getSnapshot");
@@ -68990,7 +69841,7 @@ button[${ACCOUNT_ATTRIBUTE}]:focus-visible{outline:2px solid ${require_theme.dsh
 		async function refreshPeerHostNativeSessions(uiContext) {
 			if (uiContext === void 0) return;
 			const sessions = require_native_workspace_store.readNativeService(uiContext, "sessions");
-			const refresh = isRecord$4(sessions) ? sessions.refresh : void 0;
+			const refresh = isRecord$5(sessions) ? sessions.refresh : void 0;
 			if (typeof refresh !== "function") return;
 			const owner = uiContext;
 			const state = refreshStates.get(owner);
@@ -69110,7 +69961,7 @@ button[${ACCOUNT_ATTRIBUTE}]:focus-visible{outline:2px solid ${require_theme.dsh
 			const byId = state?.byId;
 			const workspaceState = asRecord$4(workspaceSnapshot);
 			const items = Array.isArray(workspaceState?.items) ? workspaceState.items : [];
-			if (state === null || !isRecord$4(byId) || items.length === 0) return snapshot;
+			if (state === null || !isRecord$5(byId) || items.length === 0) return snapshot;
 			let changed = false;
 			const nextById = { ...byId };
 			for (const [id, value] of Object.entries(byId)) {
@@ -69260,13 +70111,13 @@ button[${ACCOUNT_ATTRIBUTE}]:focus-visible{outline:2px solid ${require_theme.dsh
 			return merged.length === original.length && merged.every((id, index) => id === original[index]) ? void 0 : merged;
 		}
 		function asRecord$4(value) {
-			return isRecord$4(value) ? value : null;
+			return isRecord$5(value) ? value : null;
 		}
-		function isRecord$4(value) {
+		function isRecord$5(value) {
 			return typeof value === "object" && value !== null && !Array.isArray(value);
 		}
 		function isSnapshotStore(value) {
-			return isRecord$4(value) && typeof value.getSnapshot === "function" && typeof value.subscribe === "function";
+			return isRecord$5(value) && typeof value.getSnapshot === "function" && typeof value.subscribe === "function";
 		}
 		//#endregion
 		//#region src/client/peer-host-workspace-tag.ts
@@ -69437,7 +70288,7 @@ button[${ACCOUNT_ATTRIBUTE}]:focus-visible{outline:2px solid ${require_theme.dsh
 			const fiberKey = Object.getOwnPropertyNames(row).find((key) => key.startsWith("__reactFiber$"));
 			if (fiberKey === void 0) return void 0;
 			let current = row[fiberKey];
-			for (let depth = 0; depth < 24 && isRecord$3(current); depth += 1) {
+			for (let depth = 0; depth < 24 && isRecord$4(current); depth += 1) {
 				for (const props of [current.memoizedProps, current.pendingProps]) {
 					const found = readWorkspaceIdFromProps(props);
 					if (found !== void 0) return found;
@@ -69446,7 +70297,7 @@ button[${ACCOUNT_ATTRIBUTE}]:focus-visible{outline:2px solid ${require_theme.dsh
 			}
 		}
 		function readWorkspaceIdFromProps(value) {
-			if (!isRecord$3(value)) return void 0;
+			if (!isRecord$4(value)) return void 0;
 			for (const key of ["workspaceId", "workspaceID"]) {
 				const candidate = value[key];
 				if (typeof candidate === "string" && candidate.trim() !== "") return candidate.trim();
@@ -69460,7 +70311,7 @@ button[${ACCOUNT_ATTRIBUTE}]:focus-visible{outline:2px solid ${require_theme.dsh
 				"data"
 			]) {
 				const nested = value[key];
-				if (!isRecord$3(nested)) continue;
+				if (!isRecord$4(nested)) continue;
 				const candidate = nested.workspaceId ?? nested.id;
 				if (typeof candidate === "string" && candidate.trim() !== "") return candidate.trim();
 			}
@@ -69496,7 +70347,7 @@ button[${ACCOUNT_ATTRIBUTE}]:focus-visible{outline:2px solid ${require_theme.dsh
 			});
 			host.append(element);
 		}
-		function isRecord$3(value) {
+		function isRecord$4(value) {
 			return typeof value === "object" && value !== null && !Array.isArray(value);
 		}
 		//#endregion
@@ -72943,11 +73794,11 @@ button[${ACCOUNT_ATTRIBUTE}]:focus-visible{outline:2px solid ${require_theme.dsh
 						if (this.leaseRequest === leaseRequest) this.leaseRequest = void 0;
 					});
 					if (!lease.ok) throw new Error(lease.error.message);
-					if (isRecord$2(lease.value) && lease.value.unavailable === true) throw new Error(typeof lease.value.message === "string" ? lease.value.message : "本地 Sherpa 语音运行时不可用");
+					if (isRecord$3(lease.value) && lease.value.unavailable === true) throw new Error(typeof lease.value.message === "string" ? lease.value.message : "本地 Sherpa 语音运行时不可用");
 					if (abort.signal.aborted) throw new Error("语音启动已取消");
 					this.hostLeaseActive = true;
-					this.epoch = readEpoch(isRecord$2(lease.value) ? lease.value : {}, this.epoch + 1);
-					if (isRecord$2(lease.value) && lease.value.diagnosticsEnabled === true) {
+					this.epoch = readEpoch(isRecord$3(lease.value) ? lease.value : {}, this.epoch + 1);
+					if (isRecord$3(lease.value) && lease.value.diagnosticsEnabled === true) {
 						this.diagnostics = new ClientVoiceDiagnostics(this.services, {
 							ownerId: this.configuredOwner,
 							callId
@@ -73056,7 +73907,7 @@ button[${ACCOUNT_ATTRIBUTE}]:focus-visible{outline:2px solid ${require_theme.dsh
 				}
 				this.capture = void 0;
 				const pendingLease = await leaseRequest?.catch(() => void 0);
-				if (pendingLease?.ok && !(isRecord$2(pendingLease.value) && pendingLease.value.unavailable === true)) this.hostLeaseActive = true;
+				if (pendingLease?.ok && !(isRecord$3(pendingLease.value) && pendingLease.value.unavailable === true)) this.hostLeaseActive = true;
 				if (this.hostLeaseActive) {
 					this.hostLeaseActive = false;
 					await callCodingNsRpcResult(this.services.rpc, "assistant/voice/stop", { ownerId: this.configuredOwner }).catch(() => void 0);
@@ -73082,7 +73933,7 @@ button[${ACCOUNT_ATTRIBUTE}]:focus-visible{outline:2px solid ${require_theme.dsh
 				const result = await callCodingNsRpcResult(this.services.rpc, "assistant/voice/interrupt", { ownerId: this.configuredOwner });
 				if (!result.ok) throw new Error(result.error.message);
 				if (!this.active) return;
-				this.epoch = readEpoch(isRecord$2(result.value) ? result.value : {}, this.epoch + 1);
+				this.epoch = readEpoch(isRecord$3(result.value) ? result.value : {}, this.epoch + 1);
 				this.emit({
 					type: "barge-in",
 					epoch: this.epoch
@@ -73319,12 +74170,12 @@ button[${ACCOUNT_ATTRIBUTE}]:focus-visible{outline:2px solid ${require_theme.dsh
 					while (isCurrent()) {
 						if (!result.ok) throw new Error(result.error.message);
 						const pushed = reply.updates.take();
-						if (pushed !== void 0 && (!isRecord$2(result.value) || result.value.state === "running" || pushed.state !== "running")) result = {
+						if (pushed !== void 0 && (!isRecord$3(result.value) || result.value.state === "running" || pushed.state !== "running")) result = {
 							ok: true,
 							value: pushed
 						};
 						const run = result.value;
-						if (!isRecord$2(run) || typeof run.text !== "string" || ![
+						if (!isRecord$3(run) || typeof run.text !== "string" || ![
 							"running",
 							"completed",
 							"failed",
@@ -73462,11 +74313,11 @@ button[${ACCOUNT_ATTRIBUTE}]:focus-visible{outline:2px solid ${require_theme.dsh
 		function readEpoch(value, fallback) {
 			return typeof value.epoch === "number" && Number.isInteger(value.epoch) ? value.epoch : fallback;
 		}
-		function isRecord$2(value) {
+		function isRecord$3(value) {
 			return typeof value === "object" && value !== null && !Array.isArray(value);
 		}
 		function isVoiceChatRun(value) {
-			return isRecord$2(value) && typeof value.requestId === "string" && typeof value.text === "string" && value.text.length <= 16e3 && [
+			return isRecord$3(value) && typeof value.requestId === "string" && typeof value.text === "string" && value.text.length <= 16e3 && [
 				"running",
 				"completed",
 				"failed",
@@ -79122,6 +79973,463 @@ button[${ACCOUNT_ATTRIBUTE}]:focus-visible{outline:2px solid ${require_theme.dsh
 			start: () => void 0
 		};
 		//#endregion
+		//#region src/client/features/workspace-mcp.ts
+		const fallbackT = require_transport.resolveCodingNsTranslator();
+		const workspaceMcpFeature = {
+			descriptor: {
+				name: "workspaceMcp",
+				version: "0.1.0",
+				enabledByDefault: false,
+				dependencies: [],
+				runtime: "client",
+				ui: {
+					label: fallbackT("feature.workspaceMcp.label"),
+					description: fallbackT("feature.workspaceMcp.description"),
+					labelKey: "feature.workspaceMcp.label",
+					descriptionKey: "feature.workspaceMcp.description",
+					order: 60,
+					defaultOpen: false
+				}
+			},
+			start() {},
+			settingsPanel: WorkspaceMcpPanel
+		};
+		const WORKSPACE_MCP_CAPABILITIES = [
+			{
+				name: "workspace_list",
+				permissionKey: "workspaceMcp.capability.workspaceList.permission",
+				descriptionKey: "workspaceMcp.capability.workspaceList.description",
+				parametersKey: "workspaceMcp.capability.workspaceList.parameters",
+				remarksKey: "workspaceMcp.capability.workspaceList.remarks"
+			},
+			{
+				name: "session_list",
+				permissionKey: "workspaceMcp.capability.sessionList.permission",
+				descriptionKey: "workspaceMcp.capability.sessionList.description",
+				parametersKey: "workspaceMcp.capability.sessionList.parameters",
+				remarksKey: "workspaceMcp.capability.sessionList.remarks"
+			},
+			{
+				name: "session_create",
+				permissionKey: "workspaceMcp.capability.sessionCreate.permission",
+				descriptionKey: "workspaceMcp.capability.sessionCreate.description",
+				parametersKey: "workspaceMcp.capability.sessionCreate.parameters",
+				remarksKey: "workspaceMcp.capability.sessionCreate.remarks"
+			},
+			{
+				name: "session_continue",
+				permissionKey: "workspaceMcp.capability.sessionContinue.permission",
+				descriptionKey: "workspaceMcp.capability.sessionContinue.description",
+				parametersKey: "workspaceMcp.capability.sessionContinue.parameters",
+				remarksKey: "workspaceMcp.capability.sessionContinue.remarks"
+			},
+			{
+				name: "session_questions",
+				permissionKey: "workspaceMcp.capability.sessionQuestions.permission",
+				descriptionKey: "workspaceMcp.capability.sessionQuestions.description",
+				parametersKey: "workspaceMcp.capability.sessionQuestions.parameters",
+				remarksKey: "workspaceMcp.capability.sessionQuestions.remarks"
+			},
+			{
+				name: "session_answer",
+				permissionKey: "workspaceMcp.capability.sessionAnswer.permission",
+				descriptionKey: "workspaceMcp.capability.sessionAnswer.description",
+				parametersKey: "workspaceMcp.capability.sessionAnswer.parameters",
+				remarksKey: "workspaceMcp.capability.sessionAnswer.remarks"
+			},
+			{
+				name: "session_request_permission",
+				permissionKey: "workspaceMcp.capability.sessionRequestPermission.permission",
+				descriptionKey: "workspaceMcp.capability.sessionRequestPermission.description",
+				parametersKey: "workspaceMcp.capability.sessionRequestPermission.parameters",
+				remarksKey: "workspaceMcp.capability.sessionRequestPermission.remarks"
+			},
+			{
+				name: "session_permission_status",
+				permissionKey: "workspaceMcp.capability.sessionPermissionStatus.permission",
+				descriptionKey: "workspaceMcp.capability.sessionPermissionStatus.description",
+				parametersKey: "workspaceMcp.capability.sessionPermissionStatus.parameters",
+				remarksKey: "workspaceMcp.capability.sessionPermissionStatus.remarks"
+			},
+			{
+				name: "terminal_list",
+				permissionKey: "workspaceMcp.capability.terminalList.permission",
+				descriptionKey: "workspaceMcp.capability.terminalList.description",
+				parametersKey: "workspaceMcp.capability.terminalList.parameters",
+				remarksKey: "workspaceMcp.capability.terminalList.remarks"
+			},
+			{
+				name: "terminal_read",
+				permissionKey: "workspaceMcp.capability.terminalRead.permission",
+				descriptionKey: "workspaceMcp.capability.terminalRead.description",
+				parametersKey: "workspaceMcp.capability.terminalRead.parameters",
+				remarksKey: "workspaceMcp.capability.terminalRead.remarks"
+			},
+			{
+				name: "terminal_write",
+				permissionKey: "workspaceMcp.capability.terminalWrite.permission",
+				descriptionKey: "workspaceMcp.capability.terminalWrite.description",
+				parametersKey: "workspaceMcp.capability.terminalWrite.parameters",
+				remarksKey: "workspaceMcp.capability.terminalWrite.remarks"
+			}
+		];
+		const REASON_KEYS = {
+			"api-key-missing": "workspaceMcp.reason.keyMissing",
+			"api-key-not-configured": "workspaceMcp.reason.keyMissing",
+			"key-store-failed": "workspaceMcp.reason.keyStoreFailed",
+			disabled: "workspaceMcp.reason.disabled",
+			"listen-failed": "workspaceMcp.reason.listenFailed",
+			"listener-error": "workspaceMcp.reason.listenFailed",
+			"startup-failed": "workspaceMcp.reason.listenFailed"
+		};
+		function WorkspaceMcpPanel({ services, enabled, notify }) {
+			const t = require_transport.useCodingNsTranslator(services.locale);
+			const [status, setStatus] = (0, react.useState)(null);
+			const [loading, setLoading] = (0, react.useState)(true);
+			const [failed, setFailed] = (0, react.useState)(false);
+			const [refreshCount, setRefreshCount] = (0, react.useState)(0);
+			const [busy, setBusy] = (0, react.useState)(false);
+			const [generatedKey, setGeneratedKey] = (0, react.useState)(null);
+			const [capabilitiesOpen, setCapabilitiesOpen] = (0, react.useState)(false);
+			(0, react.useEffect)(() => {
+				let active = true;
+				setLoading(true);
+				setFailed(false);
+				services.rpc.call(require_transport.CODINGNS_RPC_CHANNEL, "workspaceMcp/status", {}).then((result) => {
+					if (!result.ok) throw new Error("Workspace MCP status request failed");
+					const next = normalizeStatus(result.value);
+					if (next === null) throw new Error("Invalid Workspace MCP status");
+					if (active) setStatus(next);
+				}).catch(() => {
+					if (active) {
+						setStatus(null);
+						setFailed(true);
+					}
+				}).finally(() => {
+					if (active) setLoading(false);
+				});
+				return () => {
+					active = false;
+				};
+			}, [
+				services.rpc,
+				enabled,
+				refreshCount
+			]);
+			(0, react.useEffect)(() => {
+				if (!capabilitiesOpen) return;
+				const closeOnEscape = (event) => {
+					if (event.key === "Escape") setCapabilitiesOpen(false);
+				};
+				globalThis.addEventListener("keydown", closeOnEscape);
+				return () => globalThis.removeEventListener("keydown", closeOnEscape);
+			}, [capabilitiesOpen]);
+			const reasonKey = status?.reason === null || status?.reason === void 0 ? null : Object.prototype.hasOwnProperty.call(REASON_KEYS, status.reason) ? REASON_KEYS[status.reason] ?? "workspaceMcp.reason.other" : "workspaceMcp.reason.other";
+			const url = safeWorkspaceMcpUrl(status?.url);
+			const generateKey = async () => {
+				setBusy(true);
+				setGeneratedKey(null);
+				try {
+					const result = await services.rpc.call(require_transport.CODINGNS_RPC_CHANNEL, "workspaceMcp/generate-key", {});
+					if (!result.ok || !isRecord$2(result.value) || typeof result.value.apiKey !== "string") throw new Error(result.ok ? "Invalid Workspace MCP key response" : result.error.message);
+					setGeneratedKey(result.value.apiKey);
+					setRefreshCount((count) => count + 1);
+					notify({
+						kind: "success",
+						message: t("workspaceMcp.keyGenerated")
+					});
+				} catch (error) {
+					notify({
+						kind: "error",
+						message: error instanceof Error ? error.message : String(error)
+					});
+				} finally {
+					setBusy(false);
+				}
+			};
+			const copyKey = async () => {
+				if (generatedKey === null) return;
+				try {
+					await navigator.clipboard.writeText(generatedKey);
+					notify({
+						kind: "success",
+						message: t("workspaceMcp.keyCopied")
+					});
+				} catch {
+					notify({
+						kind: "error",
+						message: t("workspaceMcp.copyFailed")
+					});
+				}
+			};
+			const installPrompt = t("workspaceMcp.installPromptText");
+			const copyInstallPrompt = async () => {
+				try {
+					await navigator.clipboard.writeText(installPrompt);
+					notify({
+						kind: "success",
+						message: t("workspaceMcp.installPromptCopied")
+					});
+				} catch {
+					notify({
+						kind: "error",
+						message: t("workspaceMcp.copyFailed")
+					});
+				}
+			};
+			const compactButtonStyle = {
+				...require_theme.dshSettingsButtonStyle,
+				flex: "1 1 0",
+				minWidth: 0,
+				minHeight: 32,
+				padding: "6px 9px",
+				fontSize: require_theme.uiFontSize(12),
+				lineHeight: 1.25,
+				whiteSpace: "normal"
+			};
+			return (0, react.createElement)("div", { style: {
+				display: "flex",
+				flexDirection: "column",
+				gap: 12
+			} }, (0, react.createElement)("div", { style: require_theme.dshSettingsNoteStyle }, (0, react.createElement)("strong", { style: {
+				display: "block",
+				marginBottom: 4
+			} }, t("workspaceMcp.setupTitle")), (0, react.createElement)("span", void 0, t("workspaceMcp.setupInstruction"))), (0, react.createElement)("div", { style: {
+				display: "flex",
+				flexWrap: "nowrap",
+				gap: 8,
+				minWidth: 0
+			} }, (0, react.createElement)("button", {
+				type: "button",
+				style: compactButtonStyle,
+				onClick: () => setCapabilitiesOpen(true)
+			}, t("workspaceMcp.capabilityDescription")), (0, react.createElement)("button", {
+				type: "button",
+				disabled: busy || loading,
+				onClick: () => void generateKey(),
+				style: compactButtonStyle
+			}, busy ? t("workspaceMcp.generating") : t(status?.apiKeyConfigured ? "workspaceMcp.rotateKey" : "workspaceMcp.generateKey")), (0, react.createElement)("button", {
+				type: "button",
+				disabled: loading || busy,
+				onClick: () => setRefreshCount((count) => count + 1),
+				style: compactButtonStyle
+			}, t("workspaceMcp.refresh"))), generatedKey === null ? null : (0, react.createElement)("div", { style: {
+				display: "flex",
+				flexWrap: "wrap",
+				gap: 8,
+				alignItems: "center"
+			} }, (0, react.createElement)("input", {
+				type: "text",
+				readOnly: true,
+				value: generatedKey,
+				autoComplete: "off",
+				spellCheck: false,
+				"aria-label": t("workspaceMcp.generatedKey"),
+				style: {
+					...require_theme.dshSettingsFieldStyle,
+					flex: "1 1 260px",
+					minWidth: 0
+				},
+				onFocus: (event) => event.currentTarget.select()
+			}), (0, react.createElement)("button", {
+				type: "button",
+				onClick: () => void copyKey(),
+				style: require_theme.dshSettingsButtonStyle
+			}, t("workspaceMcp.copyKey")), (0, react.createElement)("span", { style: {
+				flexBasis: "100%",
+				color: require_theme.dshThemeColor.warning,
+				fontSize: require_theme.uiFontSize(12),
+				lineHeight: 1.5
+			} }, t("workspaceMcp.keyShownOnce"))), (0, react.createElement)("div", {
+				"aria-live": "polite",
+				style: {
+					display: "flex",
+					flexDirection: "column",
+					gap: 6,
+					fontSize: require_theme.uiFontSize(12),
+					lineHeight: 1.5,
+					overflowWrap: "anywhere"
+				}
+			}, (0, react.createElement)("strong", void 0, t("workspaceMcp.statusTitle")), loading ? (0, react.createElement)("span", void 0, t("workspaceMcp.loading")) : null, failed ? (0, react.createElement)("span", {
+				role: "alert",
+				style: { color: require_theme.dshThemeColor.error }
+			}, t("workspaceMcp.statusFailed")) : null, status !== null && !loading ? (0, react.createElement)("span", void 0, t("workspaceMcp.apiKeyStatus", { status: t(status.apiKeyConfigured ? "workspaceMcp.configured" : "workspaceMcp.notConfigured") })) : null, status !== null && !loading ? (0, react.createElement)("span", void 0, t("workspaceMcp.enabledStatus", { status: t(status.enabled ? "workspaceMcp.on" : "workspaceMcp.off") })) : null, status !== null && !loading ? (0, react.createElement)("span", void 0, t("workspaceMcp.listeningStatus", { status: t(status.listening ? "workspaceMcp.on" : "workspaceMcp.off") })) : null, status !== null && !loading && url !== null ? (0, react.createElement)("span", void 0, (0, react.createElement)("span", { style: { color: require_theme.dshThemeColor.labelSecondary } }, `${t("workspaceMcp.url")}: `), (0, react.createElement)("code", void 0, url)) : null, reasonKey !== null && status !== null && !loading ? (0, react.createElement)("span", { style: { color: require_theme.dshThemeColor.labelSecondary } }, t(reasonKey)) : null), (0, react.createElement)("div", { style: {
+				display: "flex",
+				flexDirection: "column",
+				gap: 8,
+				paddingTop: 12,
+				borderTop: `1px solid ${require_theme.dshThemeColor.border}`
+			} }, (0, react.createElement)("strong", { style: { fontSize: require_theme.uiFontSize(13) } }, t("workspaceMcp.installPromptTitle")), (0, react.createElement)("span", { style: {
+				color: require_theme.dshThemeColor.labelSecondary,
+				fontSize: require_theme.uiFontSize(12),
+				lineHeight: 1.5
+			} }, t("workspaceMcp.installPromptHint")), (0, react.createElement)("pre", { style: {
+				margin: 0,
+				padding: 10,
+				maxHeight: 112,
+				overflow: "auto",
+				whiteSpace: "pre-wrap",
+				overflowWrap: "anywhere",
+				border: `1px solid ${require_theme.dshThemeColor.border}`,
+				borderRadius: 6,
+				color: require_theme.dshThemeColor.labelSecondary,
+				background: require_theme.dshThemeColor.pageBackground,
+				fontSize: require_theme.uiFontSize(11),
+				lineHeight: 1.45
+			} }, installPrompt), (0, react.createElement)("button", {
+				type: "button",
+				onClick: () => void copyInstallPrompt(),
+				style: {
+					...require_theme.dshSettingsButtonStyle,
+					alignSelf: "flex-end",
+					minHeight: 32,
+					padding: "6px 10px",
+					fontSize: require_theme.uiFontSize(12)
+				}
+			}, t("workspaceMcp.copyInstallPrompt"))), capabilitiesOpen ? createWorkspaceMcpCapabilitiesModal(t, () => setCapabilitiesOpen(false)) : null);
+		}
+		function createWorkspaceMcpCapabilitiesModal(t, onClose) {
+			return (0, react.createElement)("div", {
+				role: "presentation",
+				onClick: onClose,
+				style: {
+					position: "fixed",
+					inset: 0,
+					zIndex: 2e3,
+					display: "flex",
+					alignItems: "center",
+					justifyContent: "center",
+					padding: 16,
+					background: "rgba(0, 0, 0, 0.62)",
+					boxSizing: "border-box"
+				},
+				"data-workspace-mcp-capabilities": true
+			}, (0, react.createElement)("div", {
+				role: "dialog",
+				"aria-modal": true,
+				"aria-labelledby": "codingns-workspace-mcp-capability-title",
+				onClick: (event) => event.stopPropagation(),
+				style: {
+					display: "flex",
+					flexDirection: "column",
+					width: "min(960px, 100%)",
+					maxHeight: "min(820px, calc(100dvh - 32px))",
+					overflow: "hidden",
+					border: `1px solid ${require_theme.dshThemeColor.border}`,
+					borderRadius: 12,
+					background: require_theme.dshThemeColor.menuBackground,
+					color: require_theme.dshThemeColor.labelPrimary,
+					boxShadow: "0 20px 70px rgba(0, 0, 0, 0.45)"
+				}
+			}, (0, react.createElement)("div", { style: {
+				display: "flex",
+				alignItems: "flex-start",
+				justifyContent: "space-between",
+				gap: 16,
+				padding: "18px 20px 14px",
+				borderBottom: `1px solid ${require_theme.dshThemeColor.border}`
+			} }, (0, react.createElement)("div", { style: { minWidth: 0 } }, (0, react.createElement)("h2", {
+				id: "codingns-workspace-mcp-capability-title",
+				style: {
+					margin: 0,
+					fontSize: require_theme.uiFontSize(18),
+					lineHeight: 1.3
+				}
+			}, t("workspaceMcp.capabilityTitle")), (0, react.createElement)("p", { style: {
+				margin: "6px 0 0",
+				color: require_theme.dshThemeColor.labelSecondary,
+				fontSize: require_theme.uiFontSize(12),
+				lineHeight: 1.5
+			} }, t("workspaceMcp.capabilitySubtitle"))), (0, react.createElement)("button", {
+				type: "button",
+				"aria-label": t("workspaceMcp.closeCapabilities"),
+				onClick: onClose,
+				style: {
+					...require_theme.dshSettingsButtonStyle,
+					minWidth: 36,
+					padding: "8px 10px",
+					fontSize: require_theme.uiFontSize(18),
+					lineHeight: 1
+				}
+			}, "×")), (0, react.createElement)("div", { style: {
+				padding: 14,
+				overflowY: "auto",
+				overflowX: "auto",
+				overscrollBehavior: "contain"
+			} }, (0, react.createElement)("table", { style: {
+				width: "100%",
+				minWidth: 900,
+				borderCollapse: "collapse",
+				tableLayout: "fixed",
+				fontSize: require_theme.uiFontSize(13),
+				lineHeight: 1.5
+			} }, (0, react.createElement)("colgroup", void 0, (0, react.createElement)("col", { style: { width: 170 } }), (0, react.createElement)("col", { style: { width: 190 } }), (0, react.createElement)("col", { style: { width: 230 } }), (0, react.createElement)("col", { style: { width: 185 } }), (0, react.createElement)("col", { style: { width: 235 } })), (0, react.createElement)("thead", void 0, (0, react.createElement)("tr", void 0, ...[
+				"workspaceMcp.capabilityName",
+				"workspaceMcp.capabilityPermission",
+				"workspaceMcp.capabilityDescriptionField",
+				"workspaceMcp.capabilityParameters",
+				"workspaceMcp.capabilityRemarks"
+			].map((key) => (0, react.createElement)("th", {
+				key,
+				scope: "col",
+				style: {
+					padding: "10px 12px",
+					textAlign: "left",
+					verticalAlign: "top",
+					color: require_theme.dshThemeColor.labelSecondary,
+					fontSize: require_theme.uiFontSize(12),
+					fontWeight: 650,
+					borderBottom: `1px solid ${require_theme.dshThemeColor.border}`,
+					background: require_theme.dshThemeColor.pageBackground
+				}
+			}, t(key))))), (0, react.createElement)("tbody", void 0, ...WORKSPACE_MCP_CAPABILITIES.map((capability, index) => (0, react.createElement)("tr", {
+				key: capability.name,
+				style: { background: index % 2 === 0 ? "rgba(255, 255, 255, 0.025)" : "transparent" }
+			}, (0, react.createElement)("td", { style: capabilityCellStyle }, (0, react.createElement)("code", { style: { overflowWrap: "anywhere" } }, capability.name)), (0, react.createElement)("td", { style: capabilityCellStyle }, t(capability.permissionKey)), (0, react.createElement)("td", { style: capabilityCellStyle }, t(capability.descriptionKey)), (0, react.createElement)("td", { style: capabilityCellStyle }, (0, react.createElement)("code", { style: {
+				whiteSpace: "pre-wrap",
+				overflowWrap: "anywhere"
+			} }, t(capability.parametersKey))), (0, react.createElement)("td", { style: capabilityCellStyle }, t(capability.remarksKey))))))), (0, react.createElement)("div", { style: {
+				display: "flex",
+				justifyContent: "flex-end",
+				padding: "12px 20px 16px",
+				borderTop: `1px solid ${require_theme.dshThemeColor.border}`
+			} }, (0, react.createElement)("button", {
+				type: "button",
+				onClick: onClose,
+				style: require_theme.dshSettingsPrimaryButtonStyle
+			}, t("workspaceMcp.closeCapabilities")))));
+		}
+		const capabilityCellStyle = {
+			padding: "11px 12px",
+			textAlign: "left",
+			verticalAlign: "top",
+			overflowWrap: "anywhere",
+			borderBottom: `1px solid ${require_theme.dshThemeColor.border}`
+		};
+		function normalizeStatus(value) {
+			if (!isRecord$2(value) || typeof value.apiKeyConfigured !== "boolean" || typeof value.enabled !== "boolean" || typeof value.listening !== "boolean" || value.url !== null && typeof value.url !== "string" || value.reason !== null && typeof value.reason !== "string") return null;
+			return {
+				apiKeyConfigured: value.apiKeyConfigured,
+				enabled: value.enabled,
+				listening: value.listening,
+				url: value.url,
+				reason: value.reason
+			};
+		}
+		function safeWorkspaceMcpUrl(value) {
+			if (value === null || value === void 0) return null;
+			try {
+				const url = new URL(value);
+				if (url.protocol !== "http:" || url.hostname !== "127.0.0.1" || url.search !== "" || url.hash !== "" || url.pathname !== "/mcp" || value !== `${url.origin}/mcp`) return null;
+				return url.toString();
+			} catch {
+				return null;
+			}
+		}
+		function isRecord$2(value) {
+			return typeof value === "object" && value !== null && !Array.isArray(value);
+		}
+		//#endregion
 		//#region src/features/host-router.ts
 		/** 统一管理当前 Host/PeerHost 的完整作用域和 generation。 */
 		var HostRouter = class {
@@ -79340,6 +80648,7 @@ button[${ACCOUNT_ATTRIBUTE}]:focus-visible{outline:2px solid ${require_theme.dsh
 		/** Client 侧功能模块清单：新增模块在这里登记一行，不需要改动设置页和入口。 */
 		const CLIENT_FEATURES = [
 			pluginUpdateFeature,
+			workspaceMcpFeature,
 			lanAccessFeature,
 			loginProtectionFeature,
 			reverseProxyFeature,
@@ -79470,7 +80779,7 @@ button.${settingsPromoClass.version}:focus-visible{${focusRing}}
 			return (0, react.createElement)("aside", {
 				className: settingsPromoClass.root,
 				"aria-label": t("settings.promo.sectionLabel")
-			}, (0, react.createElement)("div", { className: settingsPromoClass.row }, (0, react.createElement)("div", { className: settingsPromoClass.brand }, (0, react.createElement)("div", { className: settingsPromoClass.headline }, (0, react.createElement)(StarBurstIcon, { className: settingsPromoClass.logo }), (0, react.createElement)("h3", { className: settingsPromoClass.title }, t("common.brand"))), versionControl ?? (0, react.createElement)("span", { className: settingsPromoClass.version }, t("settings.promo.version", { version: "0.2.1-rc.6" }))), (0, react.createElement)("p", { className: settingsPromoClass.text }, t("settings.promo.starHint"), (0, react.createElement)("span", {
+			}, (0, react.createElement)("div", { className: settingsPromoClass.row }, (0, react.createElement)("div", { className: settingsPromoClass.brand }, (0, react.createElement)("div", { className: settingsPromoClass.headline }, (0, react.createElement)(StarBurstIcon, { className: settingsPromoClass.logo }), (0, react.createElement)("h3", { className: settingsPromoClass.title }, t("common.brand"))), versionControl ?? (0, react.createElement)("span", { className: settingsPromoClass.version }, t("settings.promo.version", { version: "0.2.1-rc.7" }))), (0, react.createElement)("p", { className: settingsPromoClass.text }, t("settings.promo.starHint"), (0, react.createElement)("span", {
 				className: settingsPromoClass.hand,
 				"aria-hidden": true
 			}, "👉")), (0, react.createElement)("a", {
@@ -79529,7 +80838,7 @@ button.${settingsPromoClass.version}:focus-visible{${focusRing}}
 		}
 		//#endregion
 		//#region src/client/update-store.ts
-		const DEFAULT_PLUGIN_UPDATE_CHANNEL = "0.2.1-rc.6".includes("-") ? "next" : "latest";
+		const DEFAULT_PLUGIN_UPDATE_CHANNEL = "0.2.1-rc.7".includes("-") ? "next" : "latest";
 		var PluginUpdateStore = class {
 			rpc;
 			snapshot = {
@@ -85968,7 +87277,7 @@ button.${settingsPromoClass.version}:focus-visible{${focusRing}}
 			"dsh-capabilities/host/session-prompt-adapter.ts",
 			"host/features/session-prompt-translation.ts",
 			"host/cli-adapters/feature.ts"
-		]), route("session.external-model-selection", "session-external-model-selection-021", "host", ">=0.2.1-alpha.3", "supported", ["dsh-capabilities/host/session-model-selection-adapter.ts", "host/cli-adapters/feature.ts"]), route("session.activation", "session-activation-020", "host", ">=0.2.0-rc.2 <=0.2.1-alpha.2", "supported", ["dsh-capabilities/host/session-activation-adapter.ts", "host/native-session-bridge.ts"]), route("session.activation", "session-activation-021", "host", ">=0.2.1-alpha.3", "supported", ["dsh-capabilities/host/session-activation-adapter.ts", "host/native-session-bridge.ts"]), route("conversation.message-presentation", "message-presentation-020", "client", ">=0.2.0-rc.2 <=0.2.1-alpha.2", "supported", ["dsh-capabilities/client/message-presentation-adapter.ts", "client/session-translation-chat.ts"]), route("conversation.message-presentation", "message-presentation-021", "client", ">=0.2.1-alpha.3", "supported", ["dsh-capabilities/client/message-presentation-adapter.ts", "client/session-translation-chat.ts"]), route("connection.peer", "connection.peer-021", "host", ">=0.2.1-alpha.3", "supported", [
+		]), route("session.external-model-selection", "session-external-model-selection-021", "host", ">=0.2.1-alpha.3", "supported", ["dsh-capabilities/host/session-model-selection-adapter.ts", "host/cli-adapters/feature.ts"]), route("session.activation", "session-activation-020", "host", ">=0.2.0-rc.2 <=0.2.1-alpha.2", "supported", ["dsh-capabilities/host/session-activation-adapter.ts", "host/native-session-bridge.ts"]), route("session.activation", "session-activation-021", "host", ">=0.2.1-alpha.3", "supported", ["dsh-capabilities/host/session-activation-adapter.ts", "host/native-session-bridge.ts"]), route("workspace.session-control", "workspace-session-control-020", "host", require_native_workspace_store.DSH_COMPATIBILITY, "supported", ["dsh-capabilities/host/workspace-session-control-adapter.ts", "host/workspace-mcp/tools.ts"]), route("workspace.pending-questions", "workspace-pending-questions-020", "host", require_native_workspace_store.DSH_COMPATIBILITY, "supported", ["dsh-capabilities/host/workspace-pending-questions-adapter.ts", "host/workspace-mcp/tools.ts"]), route("workspace.approval", "workspace-approval-020", "host", require_native_workspace_store.DSH_COMPATIBILITY, "supported", ["dsh-capabilities/host/workspace-approval-adapter.ts", "host/workspace-mcp/tools.ts"]), route("conversation.message-presentation", "message-presentation-020", "client", ">=0.2.0-rc.2 <=0.2.1-alpha.2", "supported", ["dsh-capabilities/client/message-presentation-adapter.ts", "client/session-translation-chat.ts"]), route("conversation.message-presentation", "message-presentation-021", "client", ">=0.2.1-alpha.3", "supported", ["dsh-capabilities/client/message-presentation-adapter.ts", "client/session-translation-chat.ts"]), route("connection.peer", "connection.peer-021", "host", ">=0.2.1-alpha.3", "supported", [
 			"dsh-capabilities/host/connection-peer-adapter.ts",
 			"host/rpc.ts",
 			"host/features/global-voice-rpc.ts",
@@ -92000,5 +93309,5 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 });
 })();
-// codingns-client-revision: cd7d0051b78ba2ffbee4f037966c1f1af54ec8f25faa8891c2d414d9cbe7e77a
+// codingns-client-revision: b72c0083de197d850d138dad49153dd85be9eb7fa81595c4642289baac3e4baf
 //# sourceMappingURL=bundle.js.map