@nekro-nxt/contracts 0.0.0-stage → 0.2.0

package/dist/index.mjs

@@ -0,0 +1,4694 @@
+import { z } from "zod";
+//#region src/domain.ts
+const brandedId = (prefix, brand) => z.string().regex(new RegExp(`^${prefix}_[0-9A-Za-z]+$`), `${brand} has an invalid format.`).brand(brand);
+const AgentIdSchema = brandedId("agt", "AgentId");
+const AgentRevisionIdSchema = brandedId("arev", "AgentRevisionId");
+const ConnectionIdSchema = brandedId("con", "ConnectionId");
+const ConnectionEventIdSchema = brandedId("cev", "ConnectionEventId");
+const ChannelIdSchema = brandedId("chn", "ChannelId");
+const ChannelEventIdSchema = brandedId("evt", "ChannelEventId");
+const PlatformIdentityIdSchema = brandedId("pid", "PlatformIdentityId");
+const ChannelMemberIdSchema = brandedId("mbr", "ChannelMemberId");
+const AdmissionIdSchema = brandedId("adm", "AdmissionId");
+const OutboundIntentIdSchema = brandedId("out", "OutboundIntentId");
+const LogicalMessageIdSchema = brandedId("msg", "LogicalMessageId");
+const PhysicalDeliveryIdSchema = brandedId("phy", "PhysicalDeliveryId");
+const AssetIdSchema = brandedId("ast", "AssetId");
+const EpisodeIdSchema = brandedId("eps", "EpisodeId");
+const EpisodeHandoffIdSchema = brandedId("hof", "EpisodeHandoffId");
+const ExtensionIdSchema = brandedId("ext", "ExtensionId");
+const ExtensionRevisionIdSchema = brandedId("xrv", "ExtensionRevisionId");
+const DshPluginPackageIdSchema = brandedId("dsp", "DshPluginPackageId");
+const DshPluginEntryIdSchema = brandedId("dse", "DshPluginEntryId");
+const HostUiPageInstanceIdSchema = brandedId("hup", "HostUiPageInstanceId");
+const AuthoringTaskIdSchema = brandedId("aut", "AuthoringTaskId");
+const AuthoringAttemptIdSchema = brandedId("aua", "AuthoringAttemptId");
+const AdapterActivityKeySchema = z.string().trim().min(1).max(128).regex(/^[a-z][a-z0-9]*(?:[.-][a-z0-9]+)*$/u, "Adapter activity key has an invalid format.");
+const PromptTextSegmentSchema = z.object({
+	type: z.literal("text"),
+	text: z.string()
+}).strict();
+const PromptReferenceLabelSchema = z.string().trim().min(1).max(120);
+const PromptReferenceSegmentSchema = z.discriminatedUnion("kind", [
+	z.object({
+		type: z.literal("reference"),
+		kind: z.literal("platform-user"),
+		targetId: PlatformIdentityIdSchema,
+		labelSnapshot: PromptReferenceLabelSchema
+	}).strict(),
+	z.object({
+		type: z.literal("reference"),
+		kind: z.literal("channel"),
+		targetId: ChannelIdSchema,
+		labelSnapshot: PromptReferenceLabelSchema
+	}).strict(),
+	z.object({
+		type: z.literal("reference"),
+		kind: z.literal("extension"),
+		targetId: ExtensionIdSchema,
+		labelSnapshot: PromptReferenceLabelSchema
+	}).strict()
+]);
+const PromptSegmentSchema = z.union([PromptTextSegmentSchema, PromptReferenceSegmentSchema]);
+const PROMPT_DOCUMENT_MAX_REFERENCES = 128;
+const PROMPT_DOCUMENT_MAX_PLAIN_TEXT_LENGTH = 64 * 1024;
+const PromptDocumentV1Schema = z.object({
+	version: z.literal(1),
+	segments: z.array(PromptSegmentSchema)
+}).strict().superRefine((document, context) => {
+	if (document.segments.filter((segment) => segment.type === "reference").length > 128) context.addIssue({
+		code: "custom",
+		message: `Prompt document must not contain more than 128 references.`,
+		path: ["segments"]
+	});
+	if (document.segments.reduce((length, segment) => length + (segment.type === "text" ? segment.text.length : segment.labelSnapshot.length + 1), 0) > 65536) context.addIssue({
+		code: "custom",
+		message: `Prompt document plain-text projection must not exceed ${PROMPT_DOCUMENT_MAX_PLAIN_TEXT_LENGTH} characters.`,
+		path: ["segments"]
+	});
+});
+const promptDocumentFromText = (text) => normalizePromptDocument({
+	version: 1,
+	segments: text.length === 0 ? [] : [{
+		type: "text",
+		text
+	}]
+});
+const promptDocumentPlainText = (document) => document.segments.map((segment) => segment.type === "text" ? segment.text : `@${segment.labelSnapshot}`).join("");
+const normalizePromptDocument = (input) => {
+	const parsed = PromptDocumentV1Schema.parse(input);
+	const segments = [];
+	for (const segment of parsed.segments) {
+		if (segment.type === "text") {
+			if (segment.text.length === 0) continue;
+			const previous = segments.at(-1);
+			if (previous?.type === "text") segments[segments.length - 1] = {
+				type: "text",
+				text: `${previous.text}${segment.text}`
+			};
+			else segments.push(segment);
+			continue;
+		}
+		segments.push(segment);
+	}
+	return PromptDocumentV1Schema.parse({
+		version: 1,
+		segments
+	});
+};
+const JsonValueSchema = z.json();
+function parseJsonValue(input) {
+	return JsonValueSchema.parse(input);
+}
+const utf8ByteLength = (value) => new TextEncoder().encode(value).byteLength;
+const RICH_EXTENSION_MAX_BYTES = 64 * 1024;
+const RichExtensionSchema = JsonValueSchema.refine((value) => utf8ByteLength(JSON.stringify(value)) <= RICH_EXTENSION_MAX_BYTES, `rich extension must not exceed ${RICH_EXTENSION_MAX_BYTES} bytes.`);
+const RichTargetUrlSchema = z.url().max(2048).refine((value) => {
+	const protocol = new URL(value).protocol;
+	return protocol === "http:" || protocol === "https:";
+}, "rich target URL must use HTTP or HTTPS.");
+const MessagePartSchema = z.discriminatedUnion("type", [
+	z.object({
+		type: z.literal("text"),
+		text: z.string()
+	}).strict(),
+	z.object({
+		type: z.literal("mention"),
+		memberId: ChannelMemberIdSchema
+	}).strict(),
+	z.object({
+		type: z.literal("image"),
+		assetId: AssetIdSchema,
+		alt: z.string().optional()
+	}).strict(),
+	z.object({
+		type: z.literal("file"),
+		assetId: AssetIdSchema,
+		name: z.string().optional()
+	}).strict(),
+	z.object({
+		type: z.literal("audio"),
+		assetId: AssetIdSchema
+	}).strict(),
+	z.object({
+		type: z.literal("quote"),
+		messageId: LogicalMessageIdSchema
+	}).strict(),
+	z.object({
+		type: z.literal("rich"),
+		adapterKey: z.string().trim().min(1).max(64),
+		kind: z.string().trim().min(1).max(64),
+		summary: z.string().trim().min(1).max(500),
+		title: z.string().trim().min(1).max(200).optional(),
+		source: z.string().trim().min(1).max(80).optional(),
+		targetUrl: RichTargetUrlSchema.optional(),
+		previewAssetId: AssetIdSchema.optional(),
+		extension: RichExtensionSchema.optional()
+	}).strict()
+]);
+const MessagePartsSchema = z.array(MessagePartSchema);
+const NonEmptyMessagePartsSchema = MessagePartsSchema.min(1);
+function parseMessageParts(input) {
+	return MessagePartsSchema.parse(input);
+}
+const collectRichAssetIds = (value, into) => {
+	if (value === null || value === void 0 || typeof value === "boolean" || typeof value === "number") return;
+	if (typeof value === "string") return;
+	if (Array.isArray(value)) {
+		for (const item of value) collectRichAssetIds(item, into);
+		return;
+	}
+	for (const [key, child] of Object.entries(value)) if ((key === "imageAssetId" || key === "previewAssetId") && typeof child === "string") {
+		const parsed = AssetIdSchema.safeParse(child);
+		if (parsed.success) into.push(parsed.data);
+	} else collectRichAssetIds(child, into);
+};
+const messagePartAssetIds = (part) => {
+	if (part.type === "image" || part.type === "file" || part.type === "audio") return [part.assetId];
+	if (part.type !== "rich") return [];
+	const ids = [];
+	if (part.previewAssetId) ids.push(part.previewAssetId);
+	collectRichAssetIds(part.extension, ids);
+	return ids;
+};
+const messagePartAssetId = (part) => messagePartAssetIds(part)[0];
+const asJsonRecord = (value) => value !== null && typeof value === "object" && !Array.isArray(value) ? value : void 0;
+const richItemLine = (value) => {
+	const item = asJsonRecord(value);
+	if (!item) return void 0;
+	const sender = typeof item["sender"] === "string" ? item["sender"] : void 0;
+	const text = typeof item["text"] === "string" ? item["text"] : void 0;
+	const card = asJsonRecord(item["card"]);
+	const cardSummary = typeof card?.["summary"] === "string" ? card["summary"] : typeof card?.["title"] === "string" ? card["title"] : void 0;
+	const imageName = typeof item["imageName"] === "string" ? item["imageName"] : void 0;
+	const imageText = typeof item["imageAssetId"] === "string" ? `[图片${imageName ? ` ${imageName}` : ""}]` : void 0;
+	const body = [
+		text,
+		cardSummary ? `[卡片] ${cardSummary}` : void 0,
+		imageText
+	].filter((part) => Boolean(part && part.length > 0)).join(" ");
+	if (!sender && !body) return void 0;
+	return sender ? `${sender}：${body}` : body;
+};
+/** Flatten a rich part for search and model context. */
+const richPartContextText = (part) => {
+	const header = [
+		part.summary,
+		part.title,
+		part.source
+	].filter((value, index, all) => typeof value === "string" && value.length > 0 && all.indexOf(value) === index);
+	const items = asJsonRecord(part.extension)?.["items"];
+	const itemLines = Array.isArray(items) ? items.flatMap((item) => {
+		const line = richItemLine(item);
+		return line === void 0 ? [] : [line];
+	}) : [];
+	return [...header, ...itemLines].join("\n");
+};
+const messagePartsSearchText = (parts) => parts.flatMap((part) => {
+	if (part.type === "text") return [part.text];
+	if (part.type === "rich") return [richPartContextText(part)];
+	return [];
+}).join("\n");
+//#endregion
+//#region src/config-schema.ts
+/**
+* The single configuration format: serialized Schemastery (`Schema.toJSON()`), restricted to the subset the
+* product form can render and the Host can validate without executing Schema callbacks.
+*
+* Supported nodes: object (dict), string, number, natural, percent, boolean, const, union of consts (enum) and
+* array of primitives. `meta.role: 'secret'` marks a write-only credential. NekroNXT reads three extra meta keys:
+* `hint` (help text), `advanced` (collapsed by default) and `visibleWhen` (show only when a sibling equals a value).
+*/
+const CONFIG_SCHEMA_MAX_BYTES = 64 * 1024;
+const DescriptionSchema = z.union([z.string(), z.record(z.string(), z.string())]);
+const ConfigSchemaMetaSchema = z.object({
+	description: DescriptionSchema.optional(),
+	hint: z.string().max(500).optional(),
+	required: z.boolean().optional(),
+	default: JsonValueSchema.optional(),
+	role: z.string().max(32).optional(),
+	hidden: z.boolean().optional(),
+	min: z.number().finite().optional(),
+	max: z.number().finite().optional(),
+	step: z.number().finite().positive().optional(),
+	pattern: z.object({
+		source: z.string().max(500),
+		flags: z.string().max(8).optional()
+	}).optional(),
+	advanced: z.boolean().optional(),
+	group: z.string().max(40).optional(),
+	visibleWhen: z.object({
+		key: z.string().min(1).max(64),
+		equals: JsonValueSchema
+	}).strict().optional()
+}).loose();
+const SAFE_KEY = /^(?!__proto__$|prototype$|constructor$)[A-Za-z_$][\w$-]{0,63}$/u;
+const ConfigSchemaNodeSchema = z.lazy(() => z.union([
+	z.object({
+		type: z.literal("object"),
+		dict: z.record(z.string().regex(SAFE_KEY), ConfigSchemaNodeSchema),
+		meta: ConfigSchemaMetaSchema.optional()
+	}).loose(),
+	z.object({
+		type: z.enum([
+			"string",
+			"number",
+			"natural",
+			"percent",
+			"boolean"
+		]),
+		meta: ConfigSchemaMetaSchema.optional()
+	}).loose(),
+	z.object({
+		type: z.literal("const"),
+		value: JsonValueSchema,
+		meta: ConfigSchemaMetaSchema.optional()
+	}).loose(),
+	z.object({
+		type: z.literal("union"),
+		list: z.array(ConfigSchemaNodeSchema).min(1).max(64),
+		meta: ConfigSchemaMetaSchema.optional()
+	}).loose(),
+	z.object({
+		type: z.literal("array"),
+		inner: ConfigSchemaNodeSchema,
+		meta: ConfigSchemaMetaSchema.optional()
+	}).loose()
+]));
+/** A whole configuration document: always an object at the root. */
+const ConfigSchemaDocumentSchema = ConfigSchemaNodeSchema.refine((node) => node.type === "object", "配置 Schema 的根节点必须是 object。").refine((node) => new TextEncoder().encode(JSON.stringify(node)).length <= CONFIG_SCHEMA_MAX_BYTES, { message: `配置 Schema 不能超过 ${CONFIG_SCHEMA_MAX_BYTES} 字节。` });
+const EMPTY_CONFIG_SCHEMA = {
+	type: "object",
+	dict: {}
+};
+const configDescription = (meta) => {
+	const description = meta?.description;
+	if (typeof description === "string") return description;
+	if (description) return description["zh-CN"] ?? description["zh"] ?? Object.values(description)[0];
+};
+const isEnumUnion = (node) => node.type === "union" && node.list.every((option) => option.type === "const");
+const configFieldKind = (node) => {
+	if (node.meta?.role === "secret") return "secret";
+	if (node.type === "string") return "string";
+	if (node.type === "number" || node.type === "natural" || node.type === "percent") return "number";
+	if (node.type === "boolean") return "boolean";
+	if (node.type === "array") return "array";
+	if (node.type === "object") return "object";
+	if (node.type === "const" || isEnumUnion(node)) return "enum";
+	throw new TypeError("配置 Schema 只支持常量组成的 union。");
+};
+/** Flattens the top level of a document into product form fields (order preserved). */
+const jsonLabel = (value) => typeof value === "string" ? value : JSON.stringify(value);
+const configFields = (document) => Object.entries(document.dict).map(([key, node]) => {
+	const kind = configFieldKind(node);
+	const title = configDescription(node.meta) ?? key;
+	const options = node.type === "union" && isEnumUnion(node) ? node.list.map((option) => ({
+		value: option.type === "const" ? option.value : null,
+		label: configDescription(option.meta) ?? (option.type === "const" ? jsonLabel(option.value) : "")
+	})) : node.type === "const" ? [{
+		value: node.value,
+		label: configDescription(node.meta) ?? jsonLabel(node.value)
+	}] : void 0;
+	return {
+		key,
+		kind,
+		title,
+		...node.meta?.hint === void 0 ? {} : { hint: node.meta.hint },
+		required: node.meta?.required === true,
+		...node.meta?.default === void 0 ? {} : { default: node.meta.default },
+		advanced: node.meta?.advanced === true,
+		...node.meta?.group === void 0 ? {} : { group: node.meta.group },
+		...options === void 0 ? {} : { options },
+		node
+	};
+});
+const configSecretKeys = (document) => configFields(document).filter((field) => field.kind === "secret").map((field) => field.key);
+const isRecord = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+const sameJson = (left, right) => JSON.stringify(left) === JSON.stringify(right);
+const validateNode = (node, value, path, label, issues) => {
+	const resolved = value ?? node.meta?.default;
+	if (resolved === void 0 || resolved === null) {
+		if (node.meta?.required === true) issues.push({
+			path,
+			message: `请填写${label}。`
+		});
+		if (node.type === "object") return validateNode(node, {}, path, label, issues);
+		return;
+	}
+	switch (node.type) {
+		case "object": {
+			if (!isRecord(resolved)) {
+				issues.push({
+					path,
+					message: `${label}必须是对象。`
+				});
+				return;
+			}
+			const output = {};
+			for (const key of Object.keys(resolved)) if (!Object.hasOwn(node.dict, key)) issues.push({
+				path: path ? `${path}.${key}` : key,
+				message: `未知配置项：${key}`
+			});
+			for (const [key, child] of Object.entries(node.dict)) {
+				const childPath = path ? `${path}.${key}` : key;
+				const next = validateNode(child, resolved[key], childPath, configDescription(child.meta) ?? key, issues);
+				if (next !== void 0) output[key] = next;
+			}
+			return output;
+		}
+		case "string": {
+			if (typeof resolved !== "string") {
+				issues.push({
+					path,
+					message: `${label}必须是文本。`
+				});
+				return;
+			}
+			if (node.meta?.required === true && resolved.trim().length === 0) issues.push({
+				path,
+				message: `请填写${label}。`
+			});
+			const pattern = node.meta?.pattern;
+			if (pattern && resolved.length > 0 && !new RegExp(pattern.source, pattern.flags ?? "").test(resolved)) issues.push({
+				path,
+				message: `${label}的格式不正确。`
+			});
+			return resolved;
+		}
+		case "number":
+		case "natural":
+		case "percent":
+			if (typeof resolved !== "number" || !Number.isFinite(resolved)) {
+				issues.push({
+					path,
+					message: `${label}必须是数字。`
+				});
+				return;
+			}
+			if (node.type === "natural" && (!Number.isInteger(resolved) || resolved < 0)) issues.push({
+				path,
+				message: `${label}必须是非负整数。`
+			});
+			if (node.type === "percent" && (resolved < 0 || resolved > 1)) issues.push({
+				path,
+				message: `${label}必须在 0 到 1 之间。`
+			});
+			if (node.meta?.min !== void 0 && resolved < node.meta.min) issues.push({
+				path,
+				message: `${label}不能小于 ${node.meta.min}。`
+			});
+			if (node.meta?.max !== void 0 && resolved > node.meta.max) issues.push({
+				path,
+				message: `${label}不能大于 ${node.meta.max}。`
+			});
+			return resolved;
+		case "boolean":
+			if (typeof resolved !== "boolean") {
+				issues.push({
+					path,
+					message: `${label}必须是开关值。`
+				});
+				return;
+			}
+			return resolved;
+		case "const":
+			if (!sameJson(resolved, node.value)) issues.push({
+				path,
+				message: `${label}的取值无效。`
+			});
+			return resolved;
+		case "union":
+			if (!node.list.some((option) => option.type === "const" && sameJson(option.value, resolved))) issues.push({
+				path,
+				message: `${label}的取值无效。`
+			});
+			return resolved;
+		case "array":
+			if (!Array.isArray(resolved)) {
+				issues.push({
+					path,
+					message: `${label}必须是列表。`
+				});
+				return;
+			}
+			return resolved.flatMap((item, index) => {
+				const next = validateNode(node.inner, item, `${path}[${index}]`, `${label}第 ${index + 1} 项`, issues);
+				return next === void 0 ? [] : [next];
+			});
+	}
+};
+/**
+* Validates a configuration value against a document and fills declared defaults. Secret fields are not part of the
+* stored value; callers pass them through the credential store instead.
+*/
+const validateConfigValue = (document, value, options = {}) => {
+	const skip = new Set(options.skipKeys ?? []);
+	const issues = [];
+	const input = isRecord(value) ? value : value === void 0 || value === null ? {} : void 0;
+	if (input === void 0) return {
+		value: {},
+		issues: [{
+			path: "",
+			message: "配置必须是对象。"
+		}]
+	};
+	const filtered = {
+		...document,
+		dict: Object.fromEntries(Object.entries(document.dict).filter(([key]) => !skip.has(key)))
+	};
+	const output = validateNode(filtered, input, "", "配置", issues);
+	return {
+		value: isRecord(output) ? output : {},
+		issues
+	};
+};
+/** Throws the first validation issue as a user-readable error. */
+const parseConfigValue = (document, value, options = {}) => {
+	const result = validateConfigValue(document, value, options);
+	const first = result.issues[0];
+	if (first) throw new TypeError(first.message);
+	return result.value;
+};
+const fieldMeta = (title, options = {}) => ({
+	description: title,
+	...options.hint === void 0 ? {} : { hint: options.hint },
+	...options.default === void 0 ? {} : { default: options.default },
+	...options.required === void 0 ? {} : { required: options.required },
+	...options.advanced === void 0 ? {} : { advanced: options.advanced },
+	...options.group === void 0 ? {} : { group: options.group }
+});
+/** Builds serialized Schemastery documents without depending on the Schemastery runtime. */
+const configSchema = {
+	object: (dict) => ({
+		type: "object",
+		dict
+	}),
+	string: (title, options = {}) => ({
+		type: "string",
+		meta: {
+			...fieldMeta(title, options),
+			...options.multiline ? { role: "textarea" } : {}
+		}
+	}),
+	secret: (title, options = {}) => ({
+		type: "string",
+		meta: {
+			...fieldMeta(title, options),
+			role: "secret"
+		}
+	}),
+	number: (title, options = {}) => ({
+		type: options.integer ? "natural" : "number",
+		meta: {
+			...fieldMeta(title, options),
+			...options.min === void 0 ? {} : { min: options.min },
+			...options.max === void 0 ? {} : { max: options.max }
+		}
+	}),
+	boolean: (title, options = {}) => ({
+		type: "boolean",
+		meta: fieldMeta(title, options)
+	}),
+	enum: (title, choices, options = {}) => ({
+		type: "union",
+		list: choices.map((choice) => ({
+			type: "const",
+			value: choice.value,
+			meta: { description: choice.label }
+		})),
+		meta: fieldMeta(title, options)
+	})
+};
+//#endregion
+//#region src/extension-capabilities.ts
+/**
+* Host capability level this build implements. A Revision that declares `requires.sdk` above it is rejected at
+* import with an "upgrade NekroNXT" message instead of an opaque schema error. Bump only when a new optional
+* Manifest capability ships; never reuse a level for a different meaning.
+*/
+const EXTENSION_SDK_LEVEL = 6;
+const ExtensionRequiresSchema = z.object({ sdk: z.number().int().min(1).max(1e3) }).strict();
+/** `api.example.com` or `*.example.com` (subdomains only); lower-case DNS labels, no scheme, port or path. */
+const ExtensionNetworkDomainSchema = z.string().trim().toLowerCase().max(253).regex(/^(\*\.)?(?=.{1,253}$)([a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?)(\.[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?)+$/u, { message: "网络域名必须是 api.example.com 或 *.example.com 形式，不含协议、端口和路径。" });
+const ExtensionNetworkCapabilitySchema = z.discriminatedUnion("mode", [
+	z.object({
+		mode: z.literal("domains"),
+		domains: z.array(ExtensionNetworkDomainSchema).min(1).max(32)
+	}).strict(),
+	z.object({
+		mode: z.literal("config"),
+		/** Top-level config fields whose current value is a URL or host the user typed. */
+		fields: z.array(z.string().trim().min(1).max(64)).min(1).max(8)
+	}).strict(),
+	z.object({
+		mode: z.literal("unrestricted"),
+		/** Shown to the user next to the risk acknowledgement. */
+		purpose: z.string().trim().min(4).max(200)
+	}).strict()
+]);
+const EXTENSION_STORAGE_SCOPES = [
+	"agent",
+	"channel",
+	"member",
+	"shared"
+];
+const ExtensionStorageScopeSchema = z.enum(EXTENSION_STORAGE_SCOPES);
+const EXTENSION_STORAGE_DEFAULT_QUOTA_BYTES = 8 * 1024 * 1024;
+const EXTENSION_STORAGE_MAX_QUOTA_BYTES = 64 * 1024 * 1024;
+const ExtensionStorageCapabilitySchema = z.object({
+	scopes: z.array(ExtensionStorageScopeSchema).min(1).max(EXTENSION_STORAGE_SCOPES.length),
+	quotaBytes: z.number().int().min(1024).max(EXTENSION_STORAGE_MAX_QUOTA_BYTES).optional()
+}).strict().refine((value) => new Set(value.scopes).size === value.scopes.length, "存储作用域不能重复。");
+const EXTENSION_CONTEXT_STATIC_MAX_CHARS = 4e3;
+const EXTENSION_CONTEXT_DYNAMIC_MAX_CHARS = 2e3;
+const ExtensionContextContributionSchema = z.object({
+	name: z.string().trim().regex(/^[a-z0-9][a-z0-9-]{0,39}$/u, "上下文名称只能使用小写字母、数字和连字符。"),
+	kind: z.enum(["static", "dynamic"]),
+	maxChars: z.number().int().min(1).max(EXTENSION_CONTEXT_STATIC_MAX_CHARS)
+}).strict().refine((value) => value.kind === "static" || value.maxChars <= 2e3, `动态上下文最多 ${EXTENSION_CONTEXT_DYNAMIC_MAX_CHARS} 字。`);
+const EXTENSION_LLM_MAX_CALLS_PER_TURN = 20;
+const EXTENSION_LLM_MAX_OUTPUT_TOKENS = 8192;
+const ExtensionLlmCapabilitySchema = z.object({
+	maxCallsPerTurn: z.number().int().min(1).max(20),
+	maxOutputTokens: z.number().int().min(64).max(EXTENSION_LLM_MAX_OUTPUT_TOKENS)
+}).strict();
+const EXTENSION_INBOUND_HOOK_MAX_TIMEOUT_MS = 15e3;
+const ExtensionInboundHookCapabilitySchema = z.object({
+	/** `triggered`: only messages that would wake the agent anyway; `all`: every message in bound channels. */
+	reads: z.enum(["triggered", "all"]),
+	mayHide: z.boolean(),
+	mayForceTrigger: z.boolean(),
+	timeoutMs: z.number().int().min(100).max(EXTENSION_INBOUND_HOOK_MAX_TIMEOUT_MS)
+}).strict();
+const EXTENSION_JOB_MAX_RUNTIME = 50;
+const ExtensionDeclaredJobSchema = z.object({
+	id: z.string().trim().regex(/^[a-z0-9][a-z0-9-]{0,39}$/u, "定时任务 id 只能使用小写字母、数字和连字符。"),
+	label: z.string().trim().min(1).max(200),
+	cron: z.string().trim().min(9).max(120),
+	timezone: z.string().trim().min(1).max(64).optional()
+}).strict();
+const ExtensionJobsCapabilitySchema = z.object({
+	/** Fixed schedules; each fires in every channel bound to the agent that enables the extension. */
+	declared: z.array(ExtensionDeclaredJobSchema).max(8).refine((jobs) => new Set(jobs.map(({ id }) => id)).size === jobs.length, "定时任务 id 不能重复。").optional(),
+	/** Jobs the extension creates at runtime (`ctx.nxt.jobs.schedule`), at most this many active per agent. */
+	runtime: z.object({ maxActive: z.number().int().min(1).max(50) }).strict().optional()
+}).strict();
+const AdapterKeySchema = z.string().trim().min(1).max(64);
+const ExtensionPlatformCapabilitySchema = z.object({
+	/** Typed actions an Adapter declares, as `{ adapter, action }`. */
+	actions: z.array(z.object({
+		adapter: AdapterKeySchema,
+		action: z.string().regex(/^[a-z0-9_]{1,64}$/u)
+	}).strict()).max(32).default([]),
+	/** Adapters whose raw API passthrough the extension may call. */
+	raw: z.array(AdapterKeySchema).max(8).default([])
+}).strict();
+/** A header or environment value: literal text, or the current value of a `meta.role: 'secret'` config field. */
+const ExtensionMcpValueSchema = z.union([z.string().max(4096), z.object({ secret: z.string().trim().min(1).max(64) }).strict()]);
+/** Becomes the model-facing tool prefix `mcp__<name>__`. */
+const ExtensionMcpServerNameSchema = z.string().regex(/^[A-Za-z0-9_-]{1,32}$/u);
+const McpValueMapSchema = z.record(z.string().regex(/^[A-Za-z_][A-Za-z0-9_-]{0,127}$/u), ExtensionMcpValueSchema).refine((value) => Object.keys(value).length <= 32, "最多 32 项。").default({});
+const ExtensionMcpServerSchema = z.discriminatedUnion("transport", [z.object({
+	transport: z.literal("streamable-http"),
+	name: ExtensionMcpServerNameSchema,
+	url: z.string().url().refine((value) => /^https?:\/\//iu.test(value), "MCP 地址必须是 http 或 https。"),
+	headers: McpValueMapSchema
+}).strict(), z.object({
+	transport: z.literal("stdio"),
+	name: ExtensionMcpServerNameSchema,
+	command: z.string().trim().min(1).max(512),
+	args: z.array(z.string().max(4096)).max(64).default([]),
+	env: McpValueMapSchema
+}).strict()]);
+/**
+* MCP servers the Host connects for the agent while the extension is enabled; their tools appear as
+* `mcp__<name>__<tool>`. `stdio` runs a program on the Host and is only created from the administrator's form.
+*/
+const ExtensionMcpCapabilitySchema = z.object({ servers: z.array(ExtensionMcpServerSchema).min(1).max(8).refine((value) => new Set(value.map(({ name }) => name)).size === value.length, "MCP 服务名称不能重复。") }).strict();
+/** One header or environment row of the administrator's form; secret rows become credential config fields. */
+const McpFormValueSchema = z.object({
+	name: z.string().regex(/^[A-Za-z_][A-Za-z0-9_-]{0,127}$/u, "名称只能包含字母、数字、下划线和连字符。"),
+	value: z.string().max(4096),
+	secret: z.boolean().default(false)
+}).strict();
+const McpServerFormSchema = z.discriminatedUnion("transport", [z.object({
+	transport: z.literal("streamable-http"),
+	name: ExtensionMcpServerNameSchema,
+	url: z.string().url(),
+	headers: z.array(McpFormValueSchema).max(32).default([])
+}).strict(), z.object({
+	transport: z.literal("stdio"),
+	name: ExtensionMcpServerNameSchema,
+	command: z.string().trim().min(1).max(512),
+	args: z.array(z.string().max(4096)).max(64).default([]),
+	env: z.array(McpFormValueSchema).max(32).default([])
+}).strict()]);
+/** Secret config fields an MCP declaration reads. */
+const mcpSecretFields = (mcp) => [...new Set((mcp?.servers ?? []).flatMap((server) => Object.values(server.transport === "stdio" ? server.env : server.headers).flatMap((value) => typeof value === "string" ? [] : [value.secret])))];
+/** What a server connects to; changing it needs a new approval, unlike its credentials. */
+const mcpTarget = (server) => server.transport === "stdio" ? JSON.stringify([
+	"stdio",
+	server.name,
+	server.command,
+	server.args
+]) : JSON.stringify([
+	"streamable-http",
+	server.name,
+	server.url
+]);
+/**
+* Optional Host capabilities of an agent-scope Revision. Every field is additive to Manifest V6: an absent field
+* means the Revision cannot use that capability, exactly as before the field existed.
+*/
+const ExtensionCapabilitiesSchema = z.object({
+	network: ExtensionNetworkCapabilitySchema.optional(),
+	storage: ExtensionStorageCapabilitySchema.optional(),
+	assets: z.object({ write: z.literal(true) }).strict().optional(),
+	history: z.object({ read: z.literal(true) }).strict().optional(),
+	inboundHook: ExtensionInboundHookCapabilitySchema.optional(),
+	jobs: ExtensionJobsCapabilitySchema.optional(),
+	platform: ExtensionPlatformCapabilitySchema.optional(),
+	llm: ExtensionLlmCapabilitySchema.optional(),
+	mcp: ExtensionMcpCapabilitySchema.optional(),
+	context: z.array(ExtensionContextContributionSchema).max(8).refine((value) => new Set(value.map(({ name }) => name)).size === value.length, "上下文名称不能重复。").optional()
+}).strict();
+const NETWORK_MODE_RANK = {
+	domains: 0,
+	config: 1,
+	unrestricted: 2
+};
+const networkExpands = (previous, next) => {
+	if (next === void 0) return false;
+	if (previous === void 0) return true;
+	if (NETWORK_MODE_RANK[next.mode] !== NETWORK_MODE_RANK[previous.mode]) return NETWORK_MODE_RANK[next.mode] > NETWORK_MODE_RANK[previous.mode];
+	if (next.mode === "domains" && previous.mode === "domains") return next.domains.some((domain) => !previous.domains.includes(domain));
+	if (next.mode === "config" && previous.mode === "config") return next.fields.some((field) => !previous.fields.includes(field));
+	return false;
+};
+/**
+* Whether `next` asks for something an approval of `previous` did not cover. Narrowing never needs approval;
+* storage quota is bounded by the Host maximum and is not an expansion. Context contributions are capped text
+* shown in the trace, so adding one is not an expansion either.
+*/
+const extensionCapabilitiesExpand = (previous, next) => {
+	if (next === void 0) return false;
+	if (networkExpands(previous?.network, next.network)) return true;
+	if (next.storage?.scopes.some((scope) => !(previous?.storage?.scopes ?? []).includes(scope))) return true;
+	if (next.assets !== void 0 && previous?.assets === void 0) return true;
+	if (next.history !== void 0 && previous?.history === void 0) return true;
+	const platformKey = ({ adapter, action }) => `${adapter}:${action}`;
+	const previousActions = new Set((previous?.platform?.actions ?? []).map(platformKey));
+	if ((next.platform?.actions ?? []).some((entry) => !previousActions.has(platformKey(entry)))) return true;
+	if ((next.platform?.raw ?? []).some((adapter) => !(previous?.platform?.raw ?? []).includes(adapter))) return true;
+	const hook = next.inboundHook;
+	const previousHook = previous?.inboundHook;
+	if (hook !== void 0 && (previousHook === void 0 || hook.reads === "all" && previousHook.reads === "triggered" || hook.mayHide && !previousHook.mayHide || hook.mayForceTrigger && !previousHook.mayForceTrigger)) return true;
+	if (next.jobs?.runtime !== void 0 && (previous?.jobs?.runtime === void 0 || next.jobs.runtime.maxActive > previous.jobs.runtime.maxActive)) return true;
+	const previousMcp = new Set((previous?.mcp?.servers ?? []).map(mcpTarget));
+	if ((next.mcp?.servers ?? []).some((server) => !previousMcp.has(mcpTarget(server)))) return true;
+	if (next.llm !== void 0 && (previous?.llm === void 0 || next.llm.maxCallsPerTurn > previous.llm.maxCallsPerTurn || next.llm.maxOutputTokens > previous.llm.maxOutputTokens)) return true;
+	return false;
+};
+/** User-facing summary of declared capabilities, in a stable order, for approval and inspection pages. */
+const summarizeExtensionCapabilities = (capabilities) => {
+	if (capabilities === void 0) return [];
+	const items = [];
+	const network = capabilities.network;
+	if (network?.mode === "domains") items.push({
+		key: "network",
+		risk: "normal",
+		label: "访问指定网站",
+		detail: network.domains.join("、")
+	});
+	else if (network?.mode === "config") items.push({
+		key: "network",
+		risk: "normal",
+		label: "访问你在配置中填写的地址",
+		detail: network.fields.join("、")
+	});
+	else if (network?.mode === "unrestricted") items.push({
+		key: "network",
+		risk: "high",
+		label: "访问任意公网地址",
+		detail: network.purpose
+	});
+	if (capabilities.storage !== void 0) {
+		const shared = capabilities.storage.scopes.includes("shared");
+		items.push({
+			key: "storage",
+			risk: shared ? "sensitive" : "normal",
+			label: shared ? "保存数据，并在启用它的智能体之间共享" : "为这个智能体保存数据"
+		});
+	}
+	if (capabilities.assets !== void 0) items.push({
+		key: "assets",
+		risk: "normal",
+		label: "在当前频道生成图片或文件"
+	});
+	if (capabilities.history !== void 0) items.push({
+		key: "history",
+		risk: "normal",
+		label: "读取当前频道的聊天记录"
+	});
+	const hook = capabilities.inboundHook;
+	if (hook !== void 0) {
+		const effects = [hook.mayHide ? "对智能体隐藏消息" : "", hook.mayForceTrigger ? "让智能体回应原本不会回应的消息" : ""].filter((effect) => effect !== "").join("、");
+		items.push({
+			key: "inboundHook",
+			risk: hook.reads === "all" ? "high" : "sensitive",
+			label: hook.reads === "all" ? "查看频道里的全部消息" : "在智能体回应前查看要回应的消息",
+			...effects === "" ? {} : { detail: `可以${effects}` }
+		});
+	}
+	const jobs = capabilities.jobs;
+	if (jobs?.declared !== void 0 && jobs.declared.length > 0) items.push({
+		key: "jobs.declared",
+		risk: "normal",
+		label: "按固定计划唤醒智能体",
+		detail: jobs.declared.map(({ label }) => label).join("、")
+	});
+	if (jobs?.runtime !== void 0) items.push({
+		key: "jobs.runtime",
+		risk: "sensitive",
+		label: "创建定时任务唤醒智能体",
+		detail: `同时最多 ${jobs.runtime.maxActive} 个`
+	});
+	const platform = capabilities.platform;
+	if (platform !== void 0 && platform.actions.length > 0) items.push({
+		key: "platform.actions",
+		risk: "high",
+		label: "在平台上执行操作",
+		detail: platform.actions.map(({ adapter, action }) => `${adapter} · ${action}`).join("、")
+	});
+	if (platform !== void 0 && platform.raw.length > 0) items.push({
+		key: "platform.raw",
+		risk: "high",
+		label: "直接调用平台原始接口",
+		detail: platform.raw.join("、")
+	});
+	if (capabilities.llm !== void 0) items.push({
+		key: "llm",
+		risk: "sensitive",
+		label: "使用这个智能体的模型",
+		detail: `每轮最多 ${capabilities.llm.maxCallsPerTurn} 次，计入智能体用量`
+	});
+	for (const server of capabilities.mcp?.servers ?? []) items.push(server.transport === "stdio" ? {
+		key: `mcp.${server.name}`,
+		risk: "high",
+		label: `在本机运行 MCP 程序 ${server.name}`,
+		detail: [server.command, ...server.args].join(" ")
+	} : {
+		key: `mcp.${server.name}`,
+		risk: "sensitive",
+		label: `连接 MCP 服务 ${server.name}`,
+		detail: new URL(server.url).host
+	});
+	if (capabilities.context !== void 0 && capabilities.context.length > 0) items.push({
+		key: "context",
+		risk: "normal",
+		label: "向智能体提供补充说明",
+		detail: capabilities.context.map(({ name }) => name).join("、")
+	});
+	return items;
+};
+//#endregion
+//#region src/extension-ui.ts
+const HostUiPermissionSchema = z.enum([
+	"agents.read",
+	"channels.read",
+	"connections.read",
+	"extensions.read",
+	"dsh-plugins.read",
+	"runtime.read",
+	"messages.read",
+	"assets.read",
+	"agents.manage",
+	"channels.manage",
+	"connections.manage",
+	"credentials.write",
+	"messages.send",
+	"notifications.publish",
+	"network.request"
+]);
+const HOST_UI_KIT_COMPONENT_NAMES = [
+	"Button",
+	"IconButton",
+	"Input",
+	"Textarea",
+	"Select",
+	"Switch",
+	"Tabs",
+	"Dialog",
+	"Popover",
+	"Tooltip",
+	"Field",
+	"StatusBadge",
+	"InlineFeedback",
+	"EmptyState",
+	"Spinner",
+	"PageHeader",
+	"MetricStrip",
+	"Metric",
+	"Section",
+	"Stack",
+	"Grid",
+	"DataTable",
+	"PropertyList",
+	"PropertyRow"
+];
+const HostUiKitComponentNameSchema = z.enum(HOST_UI_KIT_COMPONENT_NAMES);
+const HostUiPageGeometryEvidenceSchema = z.object({
+	entryId: z.string().trim().regex(/^[a-z](?:[a-z0-9-]{0,62}[a-z0-9])?$/u),
+	objectPane: z.enum(["navigation", "hidden"]),
+	viewport: z.object({
+		width: z.number().finite().positive().max(16384),
+		height: z.number().finite().positive().max(16384)
+	}).strict(),
+	insets: z.object({
+		top: z.number().finite().nonnegative().max(512),
+		right: z.number().finite().nonnegative().max(512),
+		bottom: z.number().finite().nonnegative().max(512),
+		left: z.number().finite().nonnegative().max(512)
+	}).strict(),
+	contentAxesAligned: z.boolean(),
+	horizontalOverflow: z.boolean(),
+	titleDistinct: z.boolean()
+}).strict();
+const HostIconNameSchema = z.enum([
+	"app-window",
+	"bar-chart",
+	"book-open",
+	"boxes",
+	"database",
+	"file-text",
+	"folder",
+	"globe",
+	"layout-dashboard",
+	"puzzle",
+	"terminal",
+	"workflow",
+	"wrench"
+]);
+const HostPageIconSchema = z.discriminatedUnion("kind", [z.object({
+	kind: z.literal("host-icon"),
+	name: HostIconNameSchema
+}).strict(), z.object({
+	kind: z.literal("svg"),
+	path: z.string().trim().regex(/^assets\/[a-z0-9][a-z0-9/_-]*\.svg$/u),
+	sha256: z.string().regex(/^[a-f0-9]{64}$/u)
+}).strict()]);
+const HostPageContributionSchema = z.object({
+	kind: z.literal("host-page"),
+	entryId: z.string().trim().regex(/^[a-z](?:[a-z0-9-]{0,62}[a-z0-9])?$/u),
+	title: z.string().trim().min(1).max(40),
+	description: z.string().trim().max(120).optional(),
+	icon: HostPageIconSchema,
+	objectPane: z.enum(["navigation", "hidden"]),
+	startPath: z.string().trim().regex(/^(?:[a-z0-9][a-z0-9/_-]*)?$/u)
+}).strict();
+const HostUiNavigationItemSchema = z.object({
+	id: z.string().trim().min(1).max(80),
+	label: z.string().trim().min(1).max(80),
+	description: z.string().trim().max(120).optional(),
+	icon: HostPageIconSchema.optional(),
+	badge: z.string().trim().max(24).optional(),
+	status: z.enum([
+		"neutral",
+		"info",
+		"success",
+		"warning",
+		"error"
+	]).optional(),
+	disabledReason: z.string().trim().max(160).optional(),
+	path: z.string().trim().regex(/^(?:[a-z0-9][a-z0-9/_-]*)?$/u)
+}).strict();
+const HostUiNavigationGroupSchema = z.object({
+	id: z.string().trim().min(1).max(80),
+	label: z.string().trim().max(80).optional(),
+	items: z.array(HostUiNavigationItemSchema).max(256)
+}).strict();
+const HostUiNavigationModelSchema = z.object({
+	revision: z.number().int().nonnegative(),
+	groups: z.array(HostUiNavigationGroupSchema).max(16)
+}).strict().refine((model) => model.groups.reduce((total, group) => total + group.items.length, 0) <= 256, { message: "Host UI navigation cannot contain more than 256 items." });
+const HostUiNetworkOriginSchema = z.string().url().transform((value, context) => {
+	const url = new URL(value);
+	if (url.protocol !== "http:" && url.protocol !== "https:") {
+		context.addIssue({
+			code: "custom",
+			message: "Host UI network origins must use HTTP(S)."
+		});
+		return z.NEVER;
+	}
+	if (url.pathname !== "/" || url.search || url.hash || url.username || url.password) {
+		context.addIssue({
+			code: "custom",
+			message: "Host UI network origins cannot contain paths or credentials."
+		});
+		return z.NEVER;
+	}
+	return url.origin;
+});
+const HostUiPermissionDeclarationSchema = z.object({
+	permissions: z.array(HostUiPermissionSchema).max(HostUiPermissionSchema.options.length),
+	networkOrigins: z.array(HostUiNetworkOriginSchema).max(32).default([]),
+	/** Host capabilities of an agent-scope Revision; absent keeps the pre-capability digest unchanged. */
+	capabilities: ExtensionCapabilitiesSchema.optional()
+}).strict().superRefine((value, context) => {
+	if (new Set(value.permissions).size !== value.permissions.length) context.addIssue({
+		code: "custom",
+		path: ["permissions"],
+		message: "Host UI permissions must be unique."
+	});
+	if (new Set(value.networkOrigins).size !== value.networkOrigins.length) context.addIssue({
+		code: "custom",
+		path: ["networkOrigins"],
+		message: "Host UI network origins must be unique."
+	});
+	if (value.networkOrigins.length > 0 && !value.permissions.includes("network.request")) context.addIssue({
+		code: "custom",
+		path: ["networkOrigins"],
+		message: "Host UI network origins require network.request."
+	});
+});
+const HostUiOwnerSchema = z.discriminatedUnion("kind", [z.object({
+	kind: z.literal("extension"),
+	extensionId: ExtensionIdSchema,
+	revisionId: ExtensionRevisionIdSchema
+}).strict(), z.object({
+	kind: z.literal("dsh-plugin"),
+	entryId: z.string().trim().min(1),
+	artifactDigest: z.string().regex(/^[a-f0-9]{64}$/u)
+}).strict()]);
+const HostUiPageEntrySchema = z.object({
+	pageInstanceId: HostUiPageInstanceIdSchema,
+	owner: HostUiOwnerSchema,
+	entryId: z.string().trim().min(1).max(64),
+	title: z.string().trim().min(1).max(40),
+	description: z.string().trim().max(120).optional(),
+	icon: HostPageIconSchema,
+	objectPane: z.enum(["navigation", "hidden"]),
+	startPath: z.string(),
+	visible: z.boolean(),
+	sortOrder: z.number().int().nonnegative(),
+	routeBase: z.string().regex(/^\/apps\/hup_[0-9A-Za-z]+$/u),
+	client: z.object({
+		moduleUrl: z.string().startsWith("/"),
+		buildKey: z.string().regex(/^[a-f0-9]{64}$/u)
+	}).strict(),
+	diagnostic: z.object({
+		status: z.enum([
+			"ready",
+			"load-failed",
+			"navigation-failed",
+			"rpc-failed",
+			"restore-failed"
+		]),
+		message: z.string().optional(),
+		observedAt: z.number().int().safe().nonnegative()
+	}).strict().optional(),
+	createdAt: z.number().int().safe().nonnegative(),
+	updatedAt: z.number().int().safe().nonnegative()
+}).strict();
+const HostUiPagePreferencesSchema = z.object({
+	revision: z.number().int().nonnegative(),
+	entries: z.array(z.object({
+		pageInstanceId: HostUiPageInstanceIdSchema,
+		visible: z.boolean()
+	}).strict())
+}).strict();
+const DshNxtHostUiSchema = z.object({
+	schemaVersion: z.literal(1),
+	entryKey: z.string().trim().min(1).max(120),
+	client: z.string().trim().regex(/^(?!\/)(?!.*(?:^|\/)\.\.(?:\/|$))[a-zA-Z0-9._/-]+\.m?js$/u),
+	css: z.string().trim().regex(/^(?!\/)(?!.*(?:^|\/)\.\.(?:\/|$))[a-zA-Z0-9._/-]+\.css$/u).optional(),
+	pages: z.array(HostPageContributionSchema).min(1).max(8),
+	permissions: HostUiPermissionDeclarationSchema.default({
+		permissions: [],
+		networkOrigins: []
+	})
+}).strict();
+/** Where the product shell may place an extension panel. The Host decides the concrete page and position. */
+const ExtensionPanelAnchorSchema = z.enum([
+	"agent",
+	"channel",
+	"extension",
+	"connection"
+]);
+const AGENT_PANEL_ANCHORS = [
+	"agent",
+	"channel",
+	"extension"
+];
+const ADAPTER_PANEL_ANCHORS = ["connection", "channel"];
+const PanelDensitySchema = z.enum(["compact", "full"]);
+const ConnectionPanelRoleSchema = z.enum([
+	"setup",
+	"status",
+	"diagnostics"
+]);
+const ToolViewDensitySchema = z.enum(["chip", "card"]);
+const panelFields = {
+	id: z.string().trim().regex(/^[a-z](?:[a-z0-9-]{0,62}[a-z0-9])?$/u),
+	anchor: ExtensionPanelAnchorSchema,
+	title: z.string().trim().min(1).max(24),
+	icon: HostIconNameSchema.optional(),
+	densities: z.array(PanelDensitySchema).min(1).max(2),
+	role: ConnectionPanelRoleSchema.optional(),
+	when: z.object({ channelKinds: z.array(z.enum([
+		"internal",
+		"direct",
+		"group"
+	])).min(1).max(3).optional() }).strict().optional()
+};
+const checkPanel = (value, context) => {
+	if (new Set(value.densities).size !== value.densities.length) context.addIssue({
+		code: "custom",
+		path: ["densities"],
+		message: "面板密度不能重复。"
+	});
+	if (value.anchor === "connection" && value.role === void 0) context.addIssue({
+		code: "custom",
+		path: ["role"],
+		message: "连接面板必须声明 setup、status 或 diagnostics 角色。"
+	});
+	if (value.anchor !== "connection" && value.role !== void 0) context.addIssue({
+		code: "custom",
+		path: ["role"],
+		message: "只有连接面板可以声明角色。"
+	});
+	if (value.when?.channelKinds !== void 0 && value.anchor !== "channel") context.addIssue({
+		code: "custom",
+		path: ["when"],
+		message: "只有频道面板可以按频道类型限定。"
+	});
+	if (value.when?.channelKinds !== void 0 && new Set(value.when.channelKinds).size !== value.when.channelKinds.length) context.addIssue({
+		code: "custom",
+		path: ["when", "channelKinds"],
+		message: "频道类型不能重复。"
+	});
+};
+/** Client-side registration options for one panel; identical to the Manifest contribution without `kind`. */
+const ExtensionPanelDeclarationSchema = z.object(panelFields).strict().superRefine(checkPanel);
+const PanelContributionSchema = z.object({
+	kind: z.literal("panel"),
+	...panelFields
+}).strict().superRefine(checkPanel);
+const ToolViewContributionSchema = z.object({
+	kind: z.literal("tool-view"),
+	tool: z.string().trim().min(1).max(64)
+}).strict();
+const RichKindSchema = z.string().trim().regex(/^[a-z0-9][a-z0-9._-]{0,62}$/u);
+const MessageRendererContributionSchema = z.object({
+	kind: z.literal("message-renderer"),
+	richKind: RichKindSchema
+}).strict();
+/** Optional configuration surface shared by every extension scope. */
+const ExtensionConfigDeclarationSchema = z.object({ schema: ConfigSchemaDocumentSchema }).strict();
+/** Product projection of what one Revision contributes to the shell. */
+const ExtensionUiContributionsSchema = z.object({
+	panels: z.array(PanelContributionSchema).max(16),
+	toolViews: z.array(z.string().trim().min(1).max(64)).max(32),
+	messageRenderers: z.array(RichKindSchema).max(32)
+}).strict();
+const EMPTY_EXTENSION_UI_CONTRIBUTIONS = {
+	panels: [],
+	toolViews: [],
+	messageRenderers: []
+};
+/** Read permission each Client data hook requires; the host enforces it in every runtime that renders a Client. */
+const EXTENSION_DATA_HOOK_PERMISSIONS = {
+	useAgent: "agents.read",
+	useChannel: "channels.read",
+	useConnection: "connections.read",
+	useChannelRuntime: "runtime.read"
+};
+//#endregion
+//#region src/runtime-compatibility.ts
+const RuntimeCompatibilityDiagnosticSchema = z.object({
+	objectKind: z.enum([
+		"agent",
+		"model-provider",
+		"extension",
+		"dsh-plugin",
+		"adapter",
+		"client-page"
+	]),
+	objectId: z.string().min(1),
+	objectVersion: z.string().min(1),
+	configurationRevision: z.string(),
+	runtimeFingerprint: z.string().min(1),
+	status: z.enum([
+		"checking",
+		"compatible",
+		"isolated"
+	]),
+	phase: z.enum([
+		"configuration",
+		"dependency",
+		"build",
+		"load",
+		"render",
+		"restore",
+		"dispose"
+	]),
+	reason: z.string().max(2048).optional(),
+	retryable: z.boolean(),
+	checkedAt: z.number().int().nonnegative()
+}).strict();
+const HostUpgradeSummarySchema = z.object({
+	runtimeVersion: z.string().min(1),
+	sessionCompatibilityId: z.string().min(1),
+	backupId: z.string().optional(),
+	resetContexts: z.boolean(),
+	diagnostics: z.array(RuntimeCompatibilityDiagnosticSchema)
+}).strict();
+//#endregion
+//#region src/management-api.ts
+const NonEmptyStringSchema$1 = z.string().trim().min(1);
+const Base64UrlSchema = z.string().regex(/^[A-Za-z0-9_-]+$/u);
+const ServerInstanceIdSchema = z.string().regex(/^nxt_instance_[0-9A-HJKMNP-TV-Z]{26}$/u).brand();
+const ManagementDeviceIdSchema = z.string().regex(/^nxt_device_[0-9A-HJKMNP-TV-Z]{26}$/u).brand();
+const InstanceDescriptorWireSchema = z.object({
+	format: z.literal("nxt.instance-descriptor"),
+	descriptorVersion: z.number().int().positive(),
+	instanceId: ServerInstanceIdSchema,
+	releaseId: NonEmptyStringSchema$1.max(256),
+	productVersion: NonEmptyStringSchema$1.max(64),
+	managementProtocol: z.number().int().positive(),
+	desktopChromeProtocol: z.number().int().positive(),
+	transport: NonEmptyStringSchema$1.max(80)
+}).passthrough();
+const InstanceDescriptorSchema = z.object({
+	format: z.literal("nxt.instance-descriptor"),
+	descriptorVersion: z.literal(1),
+	instanceId: ServerInstanceIdSchema,
+	releaseId: NonEmptyStringSchema$1.max(256),
+	productVersion: NonEmptyStringSchema$1.max(64),
+	managementProtocol: z.union([z.literal(1), z.literal(2)]),
+	desktopChromeProtocol: z.literal(1),
+	transport: z.enum([
+		"loopback-http",
+		"auto-tls-pinned-v1",
+		"explicit-http-v1"
+	])
+}).strict().superRefine((value, context) => {
+	if (!(value.managementProtocol === 1 && (value.transport === "loopback-http" || value.transport === "auto-tls-pinned-v1") || value.managementProtocol === 2 && value.transport === "explicit-http-v1")) context.addIssue({
+		code: "custom",
+		message: "management protocol 与 transport 不匹配。"
+	});
+});
+const ManagementChallengeResponseSchema = z.object({
+	challengeId: Base64UrlSchema,
+	serverNonce: Base64UrlSchema,
+	instanceId: ServerInstanceIdSchema,
+	spkiSha256: Base64UrlSchema,
+	expiresAt: z.number().int().positive()
+}).strict();
+const InsecureHttpManagementChallengeResponseSchema = z.object({
+	challengeId: Base64UrlSchema,
+	serverNonce: Base64UrlSchema,
+	instanceId: ServerInstanceIdSchema,
+	transportBinding: Base64UrlSchema,
+	expiresAt: z.number().int().positive()
+}).strict();
+const ManagementDeviceEnrollmentRequestSchema = z.object({
+	challengeId: Base64UrlSchema,
+	clientNonce: Base64UrlSchema,
+	proof: Base64UrlSchema,
+	label: z.string().trim().min(1).max(80),
+	clientReleaseId: NonEmptyStringSchema$1.max(256)
+}).strict();
+const ManagementDeviceEnrollmentResponseSchema = z.object({
+	deviceId: ManagementDeviceIdSchema,
+	deviceSecret: Base64UrlSchema
+}).strict();
+const ManagementSessionRequestSchema = z.object({
+	deviceId: ManagementDeviceIdSchema,
+	deviceSecret: Base64UrlSchema
+}).strict();
+const ManagementSessionResponseSchema = z.object({
+	authenticated: z.literal(true),
+	deviceId: ManagementDeviceIdSchema,
+	csrfToken: Base64UrlSchema
+}).strict();
+const ManagementDeviceViewSchema = z.object({
+	id: ManagementDeviceIdSchema,
+	label: z.string().trim().min(1).max(80),
+	createdAt: z.number().int().nonnegative(),
+	lastUsedAt: z.number().int().nonnegative().optional(),
+	revokedAt: z.number().int().nonnegative().optional(),
+	/** The device this request is signed in with. */
+	current: z.boolean().optional()
+}).strict();
+const ClientNotificationSchema = z.object({
+	id: z.string().trim().min(1).max(160),
+	kind: z.enum(["action-required"]),
+	title: z.string().trim().min(1).max(80),
+	body: z.string().trim().min(1).max(240),
+	occurredAt: z.number().int().nonnegative(),
+	route: z.string().regex(/^\/(?:(?:live|channels|agents|workshop|wiring|settings|apps|work|connections|users|extensions)(?:\/[^?#]*)?)?$/u).optional()
+}).strict();
+const MANAGEMENT_PAIR_PROOF_PREFIX = "nxt-management-pair-v1";
+const managementPairProofMessage = (input) => [
+	MANAGEMENT_PAIR_PROOF_PREFIX,
+	input.challengeId,
+	input.serverNonce,
+	input.clientNonce,
+	input.instanceId,
+	input.spkiSha256
+].join("\n");
+const INSECURE_HTTP_MANAGEMENT_PAIR_PROOF_PREFIX = "nxt-management-pair-insecure-http-v1";
+const insecureHttpManagementPairProofMessage = (input) => [
+	INSECURE_HTTP_MANAGEMENT_PAIR_PROOF_PREFIX,
+	input.challengeId,
+	input.serverNonce,
+	input.clientNonce,
+	input.instanceId,
+	input.transportBinding
+].join("\n");
+//#endregion
+//#region src/community.ts
+/**
+* NekroNXT 社区在本机的投影。Host 代理社区开放接口并把结果归一到这些结构；社区新增的字段在 Host 处丢弃，
+* 不直接透传给页面。审查状态与社区 `ReviewStatus` 一致。
+*/
+const COMMUNITY_REVIEW_STATUSES = [
+	"pending",
+	"reviewing",
+	"passed",
+	"passed_with_notes",
+	"flagged",
+	"held",
+	"risk_confirmed",
+	"rejected",
+	"incomplete"
+];
+const CommunityReviewStatusSchema = z.enum(COMMUNITY_REVIEW_STATUSES);
+const CommunityGradeSchema = z.enum([
+	"A",
+	"B",
+	"C",
+	"D"
+]);
+const CommunityReleaseIdSchema = z.string().regex(/^rel_[0-9A-Za-z]+$/u);
+const CommunityAccountSchema = z.object({
+	handle: z.string().min(1).max(80),
+	displayName: z.string().max(200),
+	avatarUrl: z.string().url().nullable()
+}).strict();
+const CommunityEnvironmentSchema = z.enum([
+	"production",
+	"staging",
+	"development"
+]);
+const CommunityStatusSchema = z.object({
+	communityUrl: z.string().url(),
+	/** 社区自我声明的环境；连不上或旧版社区时为 null。 */
+	environment: CommunityEnvironmentSchema.nullable(),
+	account: CommunityAccountSchema.nullable(),
+	signedInAt: z.number().int().nullable(),
+	/** 最近一次更新检查发现的可更新扩展数量（只读缓存，不发起网络请求）。 */
+	updatesAvailable: z.number().int().nonnegative()
+}).strict();
+const CommunityPermissionItemSchema = z.object({
+	key: z.string().max(120),
+	level: z.enum([
+		"normal",
+		"elevated",
+		"high"
+	]),
+	label: z.string().max(200),
+	detail: z.string().max(2e3).optional()
+}).strict();
+const CommunityReleaseSchema = z.object({
+	id: CommunityReleaseIdSchema,
+	reviewStatus: CommunityReviewStatusSchema,
+	grade: CommunityGradeSchema.nullable(),
+	permissions: z.array(CommunityPermissionItemSchema).max(64),
+	packageSize: z.number().int().nonnegative(),
+	requiresSdk: z.number().int().positive().nullable(),
+	notes: z.string().max(2e3),
+	createdAt: z.number().int()
+}).strict();
+/** 社区为官方扩展保留的发布者标识：官方扩展由多位官方成员维护，对外不显示个人账号。 */
+const COMMUNITY_OFFICIAL_HANDLE = "nekro-nxt";
+/** 发布者的展示文字：官方扩展显示「NekroNXT 官方」，其余显示 @账号。 */
+const communityPublisherLabel = (handle) => handle === "nekro-nxt" ? "NekroNXT 官方" : `@${handle}`;
+const CommunityExtensionSummarySchema = z.object({
+	id: ExtensionIdSchema,
+	scope: z.enum([
+		"agent",
+		"host-adapter",
+		"host-ui"
+	]),
+	displayName: z.string().max(200),
+	summary: z.string().max(1e3),
+	tags: z.array(z.string().max(40)).max(16),
+	/** 由社区后台认定的官方扩展；此时发布者是社区保留的官方主页（`COMMUNITY_OFFICIAL_HANDLE`）。 */
+	official: z.boolean(),
+	publisher: CommunityAccountSchema,
+	latest: CommunityReleaseSchema.nullable(),
+	downloads: z.number().int().nonnegative(),
+	updatedAt: z.number().int(),
+	pageUrl: z.string().url()
+}).strict();
+const CommunityExtensionDetailSchema = CommunityExtensionSummarySchema.extend({
+	description: z.string().max(2e4),
+	sourceUrl: z.string().url().nullable(),
+	review: z.object({
+		status: CommunityReviewStatusSchema,
+		grade: CommunityGradeSchema.nullable(),
+		summary: z.string().max(2e3).nullable(),
+		highlights: z.array(z.object({
+			severity: z.string().max(20),
+			title: z.string().max(200)
+		}).strict()).max(16)
+	}).strict().nullable()
+}).strict();
+const CommunityEndpointSchema = z.object({
+	url: z.string().url(),
+	source: z.enum([
+		"setting",
+		"environment",
+		"default"
+	]),
+	defaultUrl: z.string().url(),
+	environmentUrl: z.string().url().nullable(),
+	/** 当前地址是未加密的非本机地址。 */
+	insecure: z.boolean()
+}).strict();
+const CommunitySourceSchema = z.object({
+	kind: z.literal("community"),
+	communityUrl: z.string().url(),
+	releaseId: CommunityReleaseIdSchema,
+	publisherHandle: z.string().min(1).max(80),
+	installedAt: z.number().int().nonnegative()
+}).strict();
+const CommunityInstalledItemSchema = z.object({
+	extensionId: ExtensionIdSchema,
+	displayName: z.string(),
+	revisionId: z.string(),
+	source: CommunitySourceSchema,
+	/** 来源与当前社区地址一致时才能检查更新。 */
+	sameCommunity: z.boolean(),
+	/** 社区仍有这个条目。 */
+	found: z.boolean(),
+	delisted: z.boolean(),
+	delistedReason: z.string().nullable(),
+	releaseWithdrawn: z.boolean(),
+	latest: CommunityReleaseSchema.nullable(),
+	updateAvailable: z.boolean(),
+	addedPermissions: z.array(CommunityPermissionItemSchema)
+}).strict();
+const CommunityInstalledSchema = z.object({
+	checkedAt: z.number().int().nullable(),
+	items: z.array(CommunityInstalledItemSchema)
+}).strict();
+const CommunityMyExtensionSchema = CommunityExtensionSummarySchema.extend({
+	releases: z.array(CommunityReleaseSchema.extend({ withdrawn: z.boolean() }).strict()),
+	delisted: z.boolean(),
+	delistedReason: z.string().nullable()
+}).strict();
+const COMMUNITY_REVIEW_DIMENSIONS = [
+	"security",
+	"transparency",
+	"reliability",
+	"context_cost",
+	"usability",
+	"maintainability",
+	"compliance"
+];
+const COMMUNITY_REVIEW_DIMENSION_LABELS = {
+	security: "安全",
+	transparency: "源码透明",
+	reliability: "可靠性",
+	context_cost: "上下文与成本",
+	usability: "可用性",
+	maintainability: "可维护性",
+	compliance: "合规"
+};
+/** 作者看到的完整审查报告。 */
+const CommunityReviewReportSchema = z.object({
+	releaseId: CommunityReleaseIdSchema,
+	status: CommunityReviewStatusSchema,
+	grade: CommunityGradeSchema.nullable(),
+	deterministic: z.array(z.object({
+		severity: z.enum([
+			"info",
+			"warning",
+			"risk",
+			"block"
+		]),
+		title: z.string(),
+		detail: z.string(),
+		file: z.string().optional(),
+		line: z.number().int().optional()
+	}).strict()),
+	ai: z.object({
+		summary: z.string(),
+		verdict: z.string(),
+		grade: CommunityGradeSchema,
+		dimensions: z.array(z.object({
+			key: z.enum(COMMUNITY_REVIEW_DIMENSIONS),
+			grade: CommunityGradeSchema,
+			notes: z.string()
+		}).strict()),
+		findings: z.array(z.object({
+			dimension: z.enum(COMMUNITY_REVIEW_DIMENSIONS),
+			severity: z.enum([
+				"info",
+				"suggestion",
+				"warning",
+				"risk",
+				"critical"
+			]),
+			title: z.string(),
+			detail: z.string(),
+			file: z.string().optional(),
+			line: z.number().int().optional(),
+			suggestion: z.string().optional()
+		}).strict()),
+		exploitability: z.string().optional()
+	}).strict().nullable(),
+	model: z.string().nullable(),
+	error: z.string().nullable(),
+	decisions: z.array(z.object({
+		decision: z.string(),
+		note: z.string(),
+		by: z.string(),
+		createdAt: z.number().int()
+	}).strict()),
+	finishedAt: z.number().int().nullable(),
+	reportUrl: z.string().url()
+}).strict();
+/** 安装者看到的审查标签：只描述审查发现，不做「安全」担保。 */
+const communityReviewLabel = (status) => {
+	switch (status) {
+		case "passed": return {
+			tone: "ok",
+			label: "审查通过"
+		};
+		case "passed_with_notes": return {
+			tone: "accent",
+			label: "审查通过，有建议"
+		};
+		case "flagged": return {
+			tone: "warn",
+			label: "有风险，待复审"
+		};
+		case "risk_confirmed": return {
+			tone: "warn",
+			label: "有风险"
+		};
+		case "held": return {
+			tone: "bad",
+			label: "暂停公开，待复审"
+		};
+		case "rejected": return {
+			tone: "bad",
+			label: "未通过"
+		};
+		case "pending":
+		case "reviewing":
+		case "incomplete": return {
+			tone: "neutral",
+			label: "风险未知"
+		};
+	}
+};
+//#endregion
+//#region src/host-api.ts
+const EmptyParamsSchema = z.object({}).strict();
+const NoRequestBodySchema = z.undefined();
+const NonEmptyStringSchema = z.string().trim().min(1);
+const DynamicIdSchema = NonEmptyStringSchema;
+const DynamicAttemptStatusSchema = z.enum([
+	"awaiting-approval",
+	"starting-host",
+	"client-pending",
+	"running",
+	"waiting",
+	"rejected",
+	"failed",
+	"cancelled",
+	"stopped"
+]);
+const DynamicHalfStateSchema = z.object({
+	status: z.enum([
+		"absent",
+		"pending",
+		"stopped",
+		"running",
+		"waiting",
+		"failed"
+	]),
+	waitingFor: z.array(z.string()),
+	error: z.string().optional()
+}).strict();
+const DynamicAttemptErrorSchema = z.object({
+	phase: z.enum([
+		"approval",
+		"host-load",
+		"host-apply",
+		"client-load",
+		"client-apply",
+		"client-render"
+	]),
+	message: z.string(),
+	stack: z.string().optional(),
+	pluginId: DynamicIdSchema,
+	packageId: DynamicIdSchema,
+	pluginRunId: DynamicIdSchema
+}).strict();
+const DynamicLatestRunSchema = z.object({
+	pluginRunId: DynamicIdSchema,
+	packageId: DynamicIdSchema,
+	mode: z.enum(["run", "update"]),
+	status: DynamicAttemptStatusSchema,
+	approvalRequestId: DynamicIdSchema.optional(),
+	requiresApproval: z.boolean().optional(),
+	host: DynamicHalfStateSchema,
+	client: DynamicHalfStateSchema,
+	error: DynamicAttemptErrorSchema.optional()
+}).strict();
+const AuthoringTaskStatusSchema = z.enum([
+	"working",
+	"awaiting-approval",
+	"running",
+	"ready",
+	"repairing",
+	"failed",
+	"interrupted",
+	"stopped",
+	"completed"
+]);
+const AuthoringAttemptStateSchema = z.enum([
+	"drafting",
+	"preflight-failed",
+	"awaiting-approval",
+	"starting-host",
+	"loading-client",
+	"verifying",
+	"active",
+	"failed",
+	"rejected",
+	"stopped"
+]);
+const AuthoringAttemptSummarySchema = z.object({
+	id: AuthoringAttemptIdSchema,
+	ordinal: z.number().int().positive(),
+	name: z.string(),
+	purpose: z.string(),
+	state: AuthoringAttemptStateSchema,
+	riskDigest: z.string().regex(/^[a-f0-9]{64}$/u),
+	host: DynamicHalfStateSchema,
+	client: DynamicHalfStateSchema,
+	error: z.object({
+		phase: z.enum([
+			"preflight",
+			"approval",
+			"host-load",
+			"host-apply",
+			"client-load",
+			"client-apply",
+			"client-render",
+			"verification",
+			"settlement",
+			"restore"
+		]),
+		message: z.string(),
+		repairable: z.boolean()
+	}).strict().optional(),
+	createdAt: z.number().int().nonnegative(),
+	settledAt: z.number().int().nonnegative().optional()
+}).strict();
+const AuthoringTaskSummarySchema = z.object({
+	id: AuthoringTaskIdSchema,
+	agentId: AgentIdSchema,
+	channelId: ChannelIdSchema,
+	episodeId: EpisodeIdSchema,
+	title: z.string(),
+	requirementSummary: z.string(),
+	status: AuthoringTaskStatusSchema,
+	approvalPolicy: z.enum(["risk-stable", "fully-automatic"]),
+	approvedRiskDigest: z.string().regex(/^[a-f0-9]{64}$/u).optional(),
+	revision: z.number().int().positive(),
+	activeAttempt: AuthoringAttemptSummarySchema.optional(),
+	candidateAttempt: AuthoringAttemptSummarySchema.optional(),
+	/** Latest attempt that still carries product verification evidence; it can be restored as the candidate. */
+	verifiedAttempt: AuthoringAttemptSummarySchema.optional(),
+	createdAt: z.number().int().nonnegative(),
+	updatedAt: z.number().int().nonnegative()
+}).strict();
+const ConnectionAliasInputSchema = z.string().trim().max(80).transform((value) => value || void 0);
+const ConnectionAliasOutputSchema = z.string().trim().min(1).max(80);
+const HostApiErrorSchema = z.object({ error: z.object({
+	code: NonEmptyStringSchema,
+	message: z.string()
+}).strict() }).strict();
+const AgentModelSchema = z.object({
+	provider: NonEmptyStringSchema,
+	model: NonEmptyStringSchema,
+	reasoningEffort: NonEmptyStringSchema.optional()
+}).strict();
+const ImageUnderstandingPolicyApiSchema = z.object({
+	history: z.object({
+		mode: z.literal("persistent-distinct"),
+		detail: z.enum([
+			"low",
+			"auto",
+			"high"
+		]),
+		restoreAfterCompaction: z.object({
+			recentMessages: z.number().int().min(1).max(100),
+			maxImages: z.number().int().min(1).max(50)
+		}).strict()
+	}).strict(),
+	textModel: z.discriminatedUnion("mode", [z.object({ mode: z.literal("disabled") }).strict(), z.object({
+		mode: z.literal("auxiliary"),
+		model: AgentModelSchema,
+		maxTokens: z.number().int().min(256).max(8192)
+	}).strict()])
+}).strict();
+const AgentCapabilitiesSchema = z.object({
+	subagents: z.boolean(),
+	fileTools: z.boolean(),
+	webSearch: z.boolean(),
+	dynamicCreation: z.boolean(),
+	developmentShell: z.boolean(),
+	unrestrictedFileAccess: z.boolean(),
+	/** Absent in older clients means on. */
+	scheduledTasks: z.boolean().default(true)
+}).strict();
+const DynamicClientApprovalPolicySchema = z.enum(["manual", "automatic"]);
+const NotificationEventKeySchema = z.enum(["dynamic-client-approval-requested"]);
+const NotificationSettingsViewSchema = z.object({
+	revision: z.number().int().positive().optional(),
+	system: z.object({ enabled: z.boolean() }).strict(),
+	bark: z.object({
+		enabled: z.boolean(),
+		serverUrl: z.url(),
+		deviceKeyConfigured: z.boolean()
+	}).strict(),
+	events: z.record(NotificationEventKeySchema, z.boolean())
+}).strict();
+const UpdateNotificationSettingsRequestSchema = z.object({
+	expectedRevision: z.number().int().positive().optional(),
+	system: z.object({ enabled: z.boolean() }).strict(),
+	bark: z.object({
+		enabled: z.boolean(),
+		serverUrl: z.url(),
+		deviceKey: z.string().trim().min(1).max(2048).optional(),
+		clearDeviceKey: z.boolean().optional()
+	}).strict(),
+	events: z.record(NotificationEventKeySchema, z.boolean())
+}).strict().refine((value) => !(value.bark.deviceKey !== void 0 && value.bark.clearDeviceKey === true), {
+	message: "不能同时更新并清除 Bark Device Key。",
+	path: ["bark"]
+});
+const TestBarkNotificationRequestSchema = z.object({
+	serverUrl: z.url(),
+	deviceKey: z.string().trim().min(1).max(2048).optional()
+}).strict();
+const ClientNotificationFeedResponseSchema = z.object({
+	cursor: z.number().int().nonnegative(),
+	notifications: z.array(ClientNotificationSchema)
+}).strict();
+const AgentRevisionRequestContentSchema = z.object({
+	displayName: z.string().trim().min(1).max(80),
+	persona: z.string().max(64 * 1024).default(""),
+	personaDocument: PromptDocumentV1Schema.optional(),
+	model: AgentModelSchema,
+	imagePolicy: ImageUnderstandingPolicyApiSchema.optional(),
+	dynamicClientApprovalPolicy: DynamicClientApprovalPolicySchema.optional()
+}).strict();
+const validatePersonaDocumentProjection = (value, context) => {
+	if (value.personaDocument !== void 0 && promptDocumentPlainText(value.personaDocument) !== value.persona) context.addIssue({
+		code: "custom",
+		message: "人设文本必须与结构化人设文档一致。",
+		path: ["personaDocument"],
+		input: value
+	});
+};
+const CreateAgentRequestSchema = AgentRevisionRequestContentSchema.extend({ capabilities: AgentCapabilitiesSchema.optional() }).superRefine((value, context) => {
+	validatePersonaDocumentProjection(value, context);
+});
+const ReviseAgentRequestSchema = AgentRevisionRequestContentSchema.extend({ expectedCurrentRevisionId: AgentRevisionIdSchema }).superRefine((value, context) => {
+	validatePersonaDocumentProjection(value, context);
+});
+const UpdateAgentCapabilitiesRequestSchema = AgentCapabilitiesSchema.partial().extend({ scheduledTasks: z.boolean().optional() }).strict().refine((value) => Object.values(value).some((entry) => entry !== void 0), "至少提供一个能力。");
+const TriggerPolicySchema = z.enum([
+	"always",
+	"mentioned-or-replied",
+	"command",
+	"observe-only"
+]);
+const WorkTreeOrderSchema = z.object({
+	agentIds: z.array(AgentIdSchema),
+	channelIdsByAgent: z.record(AgentIdSchema, z.array(ChannelIdSchema)),
+	unboundChannelIds: z.array(ChannelIdSchema)
+}).strict();
+const SnapshotMessagePartSchema = z.discriminatedUnion("type", [
+	z.object({
+		type: z.literal("text"),
+		text: z.string()
+	}).strict(),
+	z.object({
+		type: z.literal("mention"),
+		memberId: ChannelMemberIdSchema,
+		displayName: z.string().optional()
+	}).strict(),
+	z.object({
+		type: z.literal("image"),
+		assetId: AssetIdSchema,
+		alt: z.string().optional()
+	}).strict(),
+	z.object({
+		type: z.literal("file"),
+		assetId: AssetIdSchema,
+		name: z.string().optional()
+	}).strict(),
+	z.object({
+		type: z.literal("audio"),
+		assetId: AssetIdSchema
+	}).strict(),
+	z.object({
+		type: z.literal("quote"),
+		messageId: LogicalMessageIdSchema
+	}).strict(),
+	z.object({
+		type: z.literal("rich"),
+		adapterKey: z.string().trim().min(1).max(64),
+		kind: z.string().trim().min(1).max(64),
+		summary: z.string().trim().min(1).max(500),
+		title: z.string().trim().min(1).max(200).optional(),
+		source: z.string().trim().min(1).max(80).optional(),
+		targetUrl: RichTargetUrlSchema.optional(),
+		previewAssetId: AssetIdSchema.optional(),
+		extension: RichExtensionSchema.optional()
+	}).strict()
+]);
+const HostSnapshotMessageSchema = z.object({
+	id: z.union([ChannelEventIdSchema, OutboundIntentIdSchema]),
+	channelId: ChannelIdSchema,
+	role: z.enum([
+		"member",
+		"agent",
+		"system"
+	]),
+	parts: z.array(SnapshotMessagePartSchema),
+	sender: z.object({
+		memberId: ChannelMemberIdSchema,
+		displayName: z.string().optional()
+	}).strict().optional(),
+	mentionedConnectionAccount: z.boolean().optional(),
+	activityKey: AdapterActivityKeySchema.optional(),
+	targetLogicalMessageId: LogicalMessageIdSchema.optional(),
+	occurredAt: z.number().finite(),
+	deliveryState: z.enum([
+		"planned",
+		"sending",
+		"sent",
+		"partially-sent",
+		"failed",
+		"unknown"
+	]).optional(),
+	/** Latest administrator resolution of an unsettled delivery; history keeps the original receipt state. */
+	deliveryResolution: z.object({
+		action: z.enum(["retry", "confirm-delivered"]),
+		resolvedAt: z.number().int().safe().nonnegative()
+	}).strict().optional(),
+	origin: z.enum(["admin-console"]).optional(),
+	/** What the agent's inbound hooks decided for this message, when anything differs from the default. */
+	inboundHook: z.object({
+		trigger: z.enum([
+			"default",
+			"suppress",
+			"force"
+		]),
+		hidden: z.boolean(),
+		annotation: z.string().optional(),
+		extensions: z.array(z.string()),
+		problems: z.array(z.string()).optional()
+	}).strict().optional(),
+	/** A scheduled task came due: a Host fact shown as a notice, not a member message. */
+	scheduledTask: z.object({
+		label: z.string(),
+		extensionName: z.string().optional(),
+		note: z.string().optional()
+	}).strict().optional()
+}).strict();
+const HostConnectionEventSchema = z.object({
+	id: ConnectionEventIdSchema,
+	connectionId: ConnectionIdSchema,
+	activityKey: AdapterActivityKeySchema,
+	summary: z.string(),
+	actor: z.object({
+		identityId: PlatformIdentityIdSchema,
+		displayName: z.string().optional()
+	}).strict().optional(),
+	subject: z.object({
+		identityId: PlatformIdentityIdSchema,
+		displayName: z.string().optional()
+	}).strict().optional(),
+	occurredAt: z.number().int().safe().nonnegative()
+}).strict();
+const PlatformUserChannelPreviewSchema = z.object({
+	id: ChannelIdSchema,
+	displayName: z.string().trim().min(1).max(120).optional(),
+	kind: z.enum([
+		"internal",
+		"direct",
+		"group"
+	])
+}).strict();
+const PlatformUserFacetAdapterSchema = z.object({
+	key: NonEmptyStringSchema,
+	displayName: NonEmptyStringSchema,
+	userCount: z.number().int().nonnegative()
+}).strict();
+const PlatformUserFacetConnectionSchema = z.object({
+	id: ConnectionIdSchema,
+	adapterKey: NonEmptyStringSchema,
+	displayName: NonEmptyStringSchema,
+	userCount: z.number().int().nonnegative()
+}).strict();
+const PlatformUserListResponseSchema = z.object({
+	total: z.number().int().nonnegative(),
+	items: z.array(z.object({
+		identityId: PlatformIdentityIdSchema,
+		displayName: z.string().trim().min(1).max(120).optional(),
+		adapter: z.object({
+			key: NonEmptyStringSchema,
+			displayName: NonEmptyStringSchema
+		}).strict(),
+		connection: z.object({
+			id: ConnectionIdSchema,
+			displayName: NonEmptyStringSchema
+		}).strict(),
+		activeChannelCount: z.number().int().nonnegative(),
+		channelPreview: z.array(PlatformUserChannelPreviewSchema).max(3),
+		historicalOnly: z.boolean()
+	}).strict()),
+	facets: z.object({
+		adapters: z.array(PlatformUserFacetAdapterSchema),
+		connections: z.array(PlatformUserFacetConnectionSchema)
+	}).strict(),
+	nextCursor: PlatformIdentityIdSchema.optional()
+}).strict();
+const ChannelFactSseItemSchema = z.object({
+	kind: z.enum(["inbound", "outbound"]),
+	sourceId: z.union([ChannelEventIdSchema, OutboundIntentIdSchema]),
+	message: HostSnapshotMessageSchema
+}).strict();
+const ChannelFactSseDataSchema = z.object({
+	channelId: ChannelIdSchema,
+	revision: z.number().int().positive(),
+	items: z.array(ChannelFactSseItemSchema).min(1)
+}).strict();
+const ChannelRuntimePhaseSchema = z.enum([
+	"idle",
+	"thinking",
+	"using-tool",
+	"waiting-input",
+	"unavailable"
+]);
+const ChannelRuntimeUsageSchema = z.object({
+	inputTokens: z.number().int().nonnegative(),
+	outputTokens: z.number().int().nonnegative(),
+	totalTokens: z.number().int().nonnegative().optional(),
+	cacheReadTokens: z.number().int().nonnegative().optional(),
+	cacheWriteTokens: z.number().int().nonnegative().optional(),
+	reasoningTokens: z.number().int().nonnegative().optional()
+}).strict();
+const ChannelRuntimeToolSchema = z.object({
+	callId: NonEmptyStringSchema,
+	name: NonEmptyStringSchema,
+	displayName: NonEmptyStringSchema,
+	state: z.enum([
+		"running",
+		"succeeded",
+		"failed"
+	]),
+	inputPreview: z.string().optional(),
+	resultPreview: z.string().optional(),
+	wroteToChannel: z.boolean().optional(),
+	deliveryState: z.enum([
+		"sent",
+		"partially-sent",
+		"failed",
+		"unknown"
+	]).optional(),
+	durationMs: z.number().int().nonnegative().optional()
+}).strict();
+const ChannelRuntimeStepSchema = z.object({
+	step: z.number().int().nonnegative(),
+	tools: z.array(ChannelRuntimeToolSchema),
+	internalOutput: z.object({
+		kind: z.literal("internal-output"),
+		text: z.string().optional(),
+		reasoning: z.string().optional()
+	}).strict().optional(),
+	durationMs: z.number().int().nonnegative().optional(),
+	firstTokenMs: z.number().int().nonnegative().optional(),
+	usage: ChannelRuntimeUsageSchema.optional()
+}).strict();
+const ChannelRuntimeTurnSchema = z.object({
+	turn: z.number().int().nonnegative(),
+	state: z.enum([
+		"in-progress",
+		"completed",
+		"unreplied",
+		"aborted",
+		"error",
+		"max-tokens",
+		"interrupted"
+	]),
+	producedReply: z.boolean(),
+	responseState: z.enum([
+		"not-required",
+		"pending",
+		"sent",
+		"finished",
+		"protocol-failed",
+		"interrupted"
+	]),
+	error: z.object({
+		code: NonEmptyStringSchema,
+		message: z.string()
+	}).strict().optional(),
+	steps: z.array(ChannelRuntimeStepSchema),
+	durationMs: z.number().int().nonnegative().optional(),
+	/** Session log time the turn opened. */
+	startedAt: z.number().int().safe().nonnegative().optional(),
+	/** Session log time the turn closed; absent while it is still running. */
+	endedAt: z.number().int().safe().nonnegative().optional(),
+	/** Newest Channel Event of the admission that opened this turn; absent for non-channel turns. */
+	triggerEventId: ChannelEventIdSchema.optional()
+}).strict();
+const ChannelRuntimeOccupancySchema = z.object({
+	projectedTokens: z.number().int().nonnegative(),
+	contextWindow: z.number().int().positive(),
+	breakdown: z.object({
+		systemTokens: z.number().int().nonnegative(),
+		toolsTokens: z.number().int().nonnegative(),
+		messageTokens: z.number().int().nonnegative()
+	}).strict().optional()
+}).strict();
+const ChannelRuntimeCacheSampleSchema = z.object({
+	turn: z.number().int().nonnegative(),
+	step: z.number().int().nonnegative(),
+	at: z.number().nonnegative().optional(),
+	uncachedInputTokens: z.number().int().nonnegative(),
+	cacheReadTokens: z.number().int().nonnegative().optional(),
+	cacheWriteTokens: z.number().int().nonnegative().optional()
+}).strict();
+const ChannelRuntimeCacheSchema = z.object({
+	scope: z.literal("episode"),
+	aggregate: z.object({
+		usageRequestCount: z.number().int().nonnegative(),
+		observedRequestCount: z.number().int().nonnegative(),
+		shareRequestCount: z.number().int().nonnegative(),
+		hitRequestCount: z.number().int().nonnegative(),
+		uncachedInputTokens: z.number().int().nonnegative(),
+		cacheReadTokens: z.number().int().nonnegative(),
+		cacheWriteTokens: z.number().int().nonnegative(),
+		averageRequestReadShare: z.number().min(0).max(1).optional()
+	}).strict(),
+	recent: z.object({
+		windowSize: z.number().int().positive(),
+		samples: z.array(ChannelRuntimeCacheSampleSchema)
+	}).strict()
+}).strict();
+const ChannelRuntimePerformanceSampleSchema = z.object({
+	turn: z.number().int().nonnegative(),
+	step: z.number().int().nonnegative(),
+	at: z.number().nonnegative().optional(),
+	firstTokenMs: z.number().int().nonnegative().optional(),
+	decodeMs: z.number().int().nonnegative().optional(),
+	outputTokens: z.number().int().nonnegative().optional()
+}).strict();
+const ChannelRuntimePerformanceSchema = z.object({
+	scope: z.literal("episode"),
+	aggregate: z.object({
+		steps: z.number().int().nonnegative(),
+		llmMs: z.number().nonnegative(),
+		toolMs: z.number().nonnegative(),
+		ttftMs: z.number().nonnegative(),
+		ttftSteps: z.number().int().nonnegative(),
+		decodeMs: z.number().nonnegative(),
+		decodeTokens: z.number().int().nonnegative(),
+		decodeSteps: z.number().int().nonnegative(),
+		retryCount: z.number().int().nonnegative(),
+		retryDelayMs: z.number().nonnegative()
+	}).strict(),
+	recent: z.object({
+		windowSize: z.number().int().positive(),
+		samples: z.array(ChannelRuntimePerformanceSampleSchema)
+	}).strict()
+}).strict();
+const ChannelRuntimeProjectionSchema = z.object({
+	channelId: ChannelIdSchema,
+	agentId: AgentIdSchema.optional(),
+	episodeId: EpisodeIdSchema.optional(),
+	phase: ChannelRuntimePhaseSchema,
+	summary: z.string(),
+	pendingInjectCount: z.number().int().nonnegative(),
+	occupancy: ChannelRuntimeOccupancySchema.optional(),
+	cache: ChannelRuntimeCacheSchema.optional(),
+	performance: ChannelRuntimePerformanceSchema.optional(),
+	turns: z.array(ChannelRuntimeTurnSchema)
+}).strict();
+const ChannelRuntimeSseDataSchema = ChannelRuntimeProjectionSchema.extend({
+	revision: z.number().int().positive(),
+	truncated: z.boolean().optional()
+}).strict();
+const AdapterConnectionCreationSchema = z.object({
+	mode: z.enum(["schema-form", "qr-login"]),
+	actionLabel: z.string().trim().min(1).optional(),
+	pendingLabel: z.string().trim().min(1).optional()
+}).strict();
+const AdapterConnectionDescriptorSchema = z.object({
+	key: NonEmptyStringSchema,
+	displayName: z.string(),
+	description: z.string(),
+	provisioning: z.enum(["user-created", "system-singleton"]),
+	aliasEditable: z.boolean(),
+	channelDiscovery: z.enum(["host-created", "adapter-observed"]),
+	channelKinds: z.array(z.enum([
+		"internal",
+		"direct",
+		"group"
+	])).min(1),
+	activities: z.array(z.object({
+		key: AdapterActivityKeySchema,
+		scope: z.enum(["channel", "connection"]),
+		displayName: z.string().trim().min(1),
+		description: z.string().trim().min(1),
+		icon: HostIconNameSchema.optional(),
+		triggerable: z.boolean(),
+		channelKinds: z.array(z.enum([
+			"internal",
+			"direct",
+			"group"
+		])).optional()
+	}).strict()),
+	features: z.object({ processingFeedback: z.object({ channelKinds: z.array(z.enum(["direct", "group"])).min(1) }).strict().optional() }).strict(),
+	diagnostics: z.object({
+		receive: z.boolean(),
+		send: z.boolean()
+	}).strict(),
+	creation: AdapterConnectionCreationSchema.optional(),
+	/** Typed platform actions the Adapter offers to agent extensions (`ctx.nxt.platform`). */
+	platformActions: z.array(z.object({
+		name: z.string().regex(/^[a-z0-9_]{1,64}$/u),
+		title: z.string(),
+		description: z.string(),
+		risk: z.enum(["low", "admin"]),
+		channelKinds: z.array(z.enum(["direct", "group"])).min(1),
+		parameters: z.object({
+			type: z.literal("object"),
+			properties: z.record(z.string(), JsonValueSchema),
+			required: z.array(z.string()).optional()
+		}).strict()
+	}).strict()).optional(),
+	rawApi: z.object({ description: z.string() }).strict().optional(),
+	configSchema: ConfigSchemaDocumentSchema
+}).strict();
+const AdapterCapabilityStateSchema = z.object({
+	state: z.enum([
+		"available",
+		"disabled",
+		"unsupported",
+		"degraded",
+		"unknown"
+	]),
+	reason: z.string().optional()
+}).strict();
+const ActivityTriggerOverridesSchema = z.record(AdapterActivityKeySchema, z.boolean());
+const HostSyncCursorSchema = z.object({
+	epoch: z.string().regex(/^[a-zA-Z0-9_-]{1,100}$/u),
+	sequence: z.number().int().nonnegative().max(Number.MAX_SAFE_INTEGER)
+}).strict();
+const AgentAppearanceSchema = z.object({
+	hue: z.number().int().min(0).max(359).optional(),
+	avatarAssetId: AssetIdSchema.optional()
+}).strict();
+/** Upper bound of a reported unread count; `unreadCapped` marks that more exist. */
+const CHANNEL_UNREAD_COUNT_CAP = 99;
+const ChannelActivitySummarySchema = z.object({
+	lastActivityAt: z.number().int().safe().nonnegative().optional(),
+	lastMessage: z.object({
+		role: z.enum([
+			"member",
+			"agent",
+			"admin",
+			"system"
+		]),
+		author: z.string().max(120),
+		preview: z.string().max(160),
+		occurredAt: z.number().int().safe().nonnegative()
+	}).strict().optional(),
+	unreadCount: z.number().int().nonnegative().max(99),
+	unreadCapped: z.boolean()
+}).strict();
+const AttentionItemSchema = z.object({
+	/** Stable fingerprint; a recurrence of the same condition gets a new fingerprint. */
+	id: z.string().min(1).max(200),
+	kind: z.enum([
+		"delivery-unconfirmed",
+		"delivery-failed",
+		"turn-failed",
+		"authoring-approval",
+		"connection-unhealthy",
+		"agent-model-unavailable",
+		"agent-vision-unavailable"
+	]),
+	severity: z.enum([
+		"critical",
+		"warning",
+		"info"
+	]),
+	subject: z.object({
+		kind: z.enum([
+			"outbound",
+			"channel",
+			"authoring-task",
+			"connection",
+			"agent"
+		]),
+		id: NonEmptyStringSchema
+	}).strict(),
+	related: z.object({
+		channelId: ChannelIdSchema.optional(),
+		agentId: AgentIdSchema.optional(),
+		connectionId: ConnectionIdSchema.optional(),
+		taskId: AuthoringTaskIdSchema.optional(),
+		outboundId: OutboundIntentIdSchema.optional()
+	}).strict(),
+	title: z.string().min(1).max(120),
+	detail: z.string().max(400),
+	action: z.object({
+		kind: z.enum([
+			"open-channel",
+			"resolve-delivery",
+			"open-authoring-task",
+			"open-connection",
+			"open-agent"
+		]),
+		label: z.string().min(1).max(40)
+	}).strict(),
+	occurredAt: z.number().int().safe().nonnegative()
+}).strict();
+const AttentionListSchema = z.object({
+	revision: z.string().min(1),
+	items: z.array(AttentionItemSchema).max(200)
+}).strict();
+const ChannelPendingContextSchema = z.object({
+	channelId: ChannelIdSchema,
+	episodeId: EpisodeIdSchema.optional(),
+	items: z.array(z.object({
+		admissionId: NonEmptyStringSchema,
+		/** `next-step`: injected at the next safe step boundary; `next-turn`: waits for a later turn. */
+		target: z.enum(["next-step", "next-turn"]),
+		events: z.array(z.object({
+			eventId: ChannelEventIdSchema,
+			author: z.string().max(120),
+			preview: z.string().max(160),
+			receivedAt: z.number().int().safe().nonnegative()
+		}).strict())
+	}).strict())
+}).strict();
+const ACTIVITY_MAX_WINDOW_MS = 1440 * 60 * 1e3;
+const ACTIVITY_MIN_BUCKET_MS = 60 * 1e3;
+const ACTIVITY_MAX_BUCKETS = 288;
+const ActivityDurationSchema = z.string().regex(/^[1-9][0-9]{0,4}[mh]$/u);
+const activityDurationMs = (value) => {
+	const amount = Number(value.slice(0, -1));
+	return value.endsWith("h") ? amount * 60 * 60 * 1e3 : amount * 60 * 1e3;
+};
+const ActivityQuerySchema = z.object({
+	window: ActivityDurationSchema.default("2h"),
+	bucket: ActivityDurationSchema.default("5m")
+}).strict().superRefine((value, context) => {
+	const window = activityDurationMs(value.window);
+	const bucket = activityDurationMs(value.bucket);
+	if (window > 864e5) context.addIssue({
+		code: "custom",
+		path: ["window"],
+		message: "统计窗口不能超过 24 小时。"
+	});
+	if (bucket < 6e4) context.addIssue({
+		code: "custom",
+		path: ["bucket"],
+		message: "统计间隔不能小于 1 分钟。"
+	});
+	if (bucket > window) context.addIssue({
+		code: "custom",
+		path: ["bucket"],
+		message: "统计间隔不能大于统计窗口。"
+	});
+	if (window / bucket > 288) context.addIssue({
+		code: "custom",
+		path: ["bucket"],
+		message: `统计桶不能超过 288 个。`
+	});
+});
+const ChannelActivitySeriesSchema = z.object({
+	from: z.number().int().safe().nonnegative(),
+	to: z.number().int().safe().nonnegative(),
+	bucketMs: z.number().int().positive(),
+	channels: z.array(z.object({
+		channelId: ChannelIdSchema,
+		counts: z.array(z.number().int().nonnegative()).max(288),
+		total: z.number().int().nonnegative()
+	}).strict())
+}).strict();
+const ScheduledTaskIdSchema = z.string().regex(/^job_[0-9A-Za-z]+$/u);
+/**
+* One scheduled task of an agent in one channel. `chat` tasks come from the agent's scheduling tools; `declared` and
+* `runtime` tasks belong to an extension (Manifest plan or `ctx.nxt.jobs`).
+*/
+const ScheduledTaskSchema = z.object({
+	id: ScheduledTaskIdSchema,
+	agentId: AgentIdSchema,
+	channelId: ChannelIdSchema,
+	source: z.enum([
+		"chat",
+		"declared",
+		"runtime"
+	]),
+	extensionId: ExtensionIdSchema.optional(),
+	extensionName: z.string().optional(),
+	label: z.string(),
+	note: z.string().optional(),
+	schedule: z.discriminatedUnion("kind", [z.object({
+		kind: z.literal("once"),
+		at: z.number().int().safe()
+	}).strict(), z.object({
+		kind: z.literal("cron"),
+		cron: z.string(),
+		timezone: z.string()
+	}).strict()]),
+	/** `inactive`: the owning extension is disabled for this agent, so the task stays silent. */
+	state: z.enum([
+		"scheduled",
+		"paused",
+		"finished",
+		"inactive"
+	]),
+	nextRunAt: z.number().int().safe().optional(),
+	lastFiredAt: z.number().int().safe().optional(),
+	createdAt: z.number().int().safe()
+}).strict();
+const HostSnapshotSchema = z.object({
+	upgrade: HostUpgradeSummarySchema.optional(),
+	cursor: HostSyncCursorSchema,
+	diagnosticsSampledAt: z.number().int().nonnegative(),
+	productMetadata: z.object({
+		displayName: NonEmptyStringSchema,
+		organizationName: NonEmptyStringSchema,
+		version: NonEmptyStringSchema,
+		releaseId: NonEmptyStringSchema,
+		repositoryUrl: z.url(),
+		licenseSpdx: NonEmptyStringSchema.nullable(),
+		dshVersion: NonEmptyStringSchema.optional()
+	}).strict().optional(),
+	models: z.array(z.object({
+		provider: NonEmptyStringSchema,
+		providerName: NonEmptyStringSchema,
+		id: NonEmptyStringSchema,
+		name: z.string(),
+		description: z.string().optional(),
+		inputModalities: z.array(z.string()).optional()
+	}).strict()),
+	capabilityAvailability: z.object({
+		subagents: z.object({ available: z.boolean() }).strict(),
+		webSearch: z.object({
+			provider: z.literal("deepseek-official"),
+			available: z.boolean(),
+			credentialConfigured: z.boolean(),
+			credentialReference: NonEmptyStringSchema,
+			maxUsesPerCall: z.number().int().nonnegative(),
+			maxResultsPerCall: z.number().int().nonnegative(),
+			timeoutMs: z.number().int().nonnegative()
+		}).strict()
+	}).strict(),
+	connectionAdapters: z.array(AdapterConnectionDescriptorSchema),
+	notificationSettings: NotificationSettingsViewSchema,
+	agents: z.array(z.object({
+		id: AgentIdSchema,
+		displayName: z.string(),
+		persona: z.string(),
+		personaDocument: PromptDocumentV1Schema,
+		model: AgentModelSchema,
+		capabilities: AgentCapabilitiesSchema,
+		imagePolicy: ImageUnderstandingPolicyApiSchema,
+		dynamicClientApprovalPolicy: DynamicClientApprovalPolicySchema,
+		imageDiagnostics: z.object({
+			route: z.object({
+				mode: z.enum([
+					"direct",
+					"delegated",
+					"unavailable"
+				]),
+				provider: z.string().optional(),
+				model: z.string().optional()
+			}).strict(),
+			activeSessions: z.number().int().nonnegative(),
+			residentImages: z.number().int().nonnegative(),
+			duplicateImagesSkipped: z.number().int().nonnegative(),
+			lastInspection: z.object({
+				mode: z.enum(["direct", "delegated"]),
+				imageCount: z.number().int().nonnegative(),
+				provider: z.string().optional(),
+				model: z.string().optional(),
+				cacheHit: z.boolean(),
+				usage: ChannelRuntimeUsageSchema.optional(),
+				errorCode: z.string().optional()
+			}).strict().optional(),
+			lastRestoration: z.object({
+				compactionId: z.string(),
+				candidateCount: z.number().int().nonnegative(),
+				restoredCount: z.number().int().nonnegative(),
+				skippedCount: z.number().int().nonnegative(),
+				error: z.string().optional()
+			}).strict().optional(),
+			blockers: z.array(z.string())
+		}).strict(),
+		currentRevisionId: AgentRevisionIdSchema,
+		runtimeStatus: z.enum(["idle", "running"]),
+		runtimePhase: ChannelRuntimePhaseSchema.default("idle"),
+		createdAt: z.number().finite(),
+		channels: z.array(ChannelIdSchema),
+		appearance: AgentAppearanceSchema.default({})
+	}).strict()),
+	channels: z.array(z.object({
+		id: ChannelIdSchema,
+		connectionId: ConnectionIdSchema,
+		platformChannelId: NonEmptyStringSchema,
+		kind: z.enum([
+			"internal",
+			"group",
+			"direct"
+		]),
+		displayName: z.string().optional(),
+		boundAgentId: AgentIdSchema.optional(),
+		runtimePhase: ChannelRuntimePhaseSchema.default("idle"),
+		activity: ChannelActivitySummarySchema.default({
+			unreadCount: 0,
+			unreadCapped: false
+		}),
+		bindings: z.array(z.object({
+			channelId: ChannelIdSchema,
+			agentId: AgentIdSchema,
+			triggerPolicy: TriggerPolicySchema,
+			processingFeedback: z.enum(["auto", "off"]).default("auto"),
+			activityTriggerOverrides: ActivityTriggerOverridesSchema.default({}),
+			boundAt: z.number().int().safe().nonnegative()
+		}).strict())
+	}).strict()),
+	workTreeOrder: WorkTreeOrderSchema.default({
+		agentIds: [],
+		channelIdsByAgent: {},
+		unboundChannelIds: []
+	}),
+	messages: z.array(HostSnapshotMessageSchema),
+	connections: z.array(z.object({
+		id: ConnectionIdSchema,
+		adapterKey: NonEmptyStringSchema,
+		alias: ConnectionAliasOutputSchema.optional(),
+		activityTriggerDefaults: z.array(AdapterActivityKeySchema).default([]),
+		status: z.object({
+			state: z.enum([
+				"stopped",
+				"connecting",
+				"connected",
+				"reconnecting",
+				"failed"
+			]),
+			message: z.string().optional(),
+			credentialConfigured: z.boolean(),
+			proactiveSend: z.boolean(),
+			accountReference: z.string().optional(),
+			implementation: z.object({
+				name: z.string().optional(),
+				version: z.string().optional(),
+				protocolVersion: z.string().optional()
+			}).strict().optional(),
+			optionalCapabilities: z.record(z.string(), z.enum([
+				"unknown",
+				"available",
+				"unsupported",
+				"degraded"
+			])).optional(),
+			activities: z.record(z.string(), AdapterCapabilityStateSchema).default({}),
+			processingFeedback: AdapterCapabilityStateSchema.optional()
+		}).strict().default({
+			state: "stopped",
+			credentialConfigured: false,
+			proactiveSend: false,
+			activities: {}
+		}),
+		channelCount: z.number().int().nonnegative(),
+		knownChannels: z.array(z.object({
+			id: ChannelIdSchema,
+			name: z.string(),
+			kind: z.enum([
+				"internal",
+				"group",
+				"direct"
+			])
+		}).strict()),
+		lastInbound: z.object({
+			channelId: ChannelIdSchema,
+			platformMessageId: NonEmptyStringSchema,
+			receivedAt: z.number().int().safe().nonnegative()
+		}).strict().optional(),
+		receiveTest: z.lazy(() => ConnectionTestResultSchema).optional(),
+		sendTest: z.lazy(() => ConnectionTestResultSchema).optional(),
+		configuration: z.record(z.string(), z.union([
+			z.string(),
+			z.number(),
+			z.boolean()
+		])).default({})
+	}).strict()),
+	archivedConnections: z.array(z.object({
+		id: ConnectionIdSchema,
+		adapterKey: NonEmptyStringSchema,
+		alias: ConnectionAliasOutputSchema.optional(),
+		channelCount: z.number().int().nonnegative(),
+		archivedAt: z.number().int().safe().nonnegative()
+	}).strict()).default([]),
+	extensions: z.array(z.object({
+		id: ExtensionIdSchema,
+		scope: z.enum([
+			"agent",
+			"host-adapter",
+			"host-ui"
+		]),
+		slug: NonEmptyStringSchema,
+		displayName: z.string(),
+		description: z.string(),
+		createdByAgentId: AgentIdSchema.optional(),
+		revisions: z.array(z.object({
+			id: ExtensionRevisionIdSchema,
+			revisionNumber: z.number().int().positive(),
+			format: z.enum(["current", "unavailable"]).optional(),
+			ui: ExtensionUiContributionsSchema.default(EMPTY_EXTENSION_UI_CONTRIBUTIONS),
+			configSchema: ConfigSchemaDocumentSchema.optional(),
+			createdAt: z.number().int().safe().nonnegative(),
+			/** 从社区安装的保存记录的来源；本机保存与文件导入没有来源。 */
+			source: CommunitySourceSchema.optional(),
+			scope: z.enum([
+				"agent",
+				"host-adapter",
+				"host-ui"
+			]),
+			contributions: z.array(z.string()),
+			verification: z.object({
+				verifiedAt: z.number().int().nonnegative(),
+				dshVersion: z.string(),
+				contractVersion: z.string(),
+				hostBuilt: z.boolean(),
+				clientBuilt: z.boolean(),
+				buildKey: z.string(),
+				toolInvocationCount: z.number().int().nonnegative(),
+				rpcMethods: z.array(z.string()),
+				renderedPanels: z.array(z.string()).default([]),
+				renderedToolViews: z.array(z.string()).default([]),
+				renderedMessageRenderers: z.array(z.string()).default([]),
+				renderedPages: z.array(HostPageContributionSchema).max(8).optional(),
+				usedUiComponents: z.array(HostUiKitComponentNameSchema).optional(),
+				pageGeometry: z.array(HostUiPageGeometryEvidenceSchema).max(8).optional(),
+				permissions: HostUiPermissionDeclarationSchema.optional(),
+				permissionDigest: z.string().regex(/^[a-f0-9]{64}$/u).optional(),
+				permissionApprovalRequired: z.boolean().optional(),
+				adapter: z.object({
+					apiVersion: z.literal(2),
+					key: NonEmptyStringSchema,
+					descriptorDigest: z.string().regex(/^[a-f0-9]{64}$/u),
+					registered: z.boolean(),
+					started: z.boolean(),
+					stopped: z.boolean(),
+					inboundCommitted: z.boolean(),
+					outboundReceipt: z.enum([
+						"sent",
+						"failed",
+						"unknown"
+					])
+				}).strict().optional()
+			}).strict().optional()
+		}).strict()),
+		activations: z.array(z.object({
+			agentId: AgentIdSchema,
+			extensionRevisionId: ExtensionRevisionIdSchema,
+			/** Secret fields are removed; `configuredSecrets` lists those the Host stores. */
+			config: JsonValueSchema,
+			configuredSecrets: z.array(z.string()).optional(),
+			activatedAt: z.number().int().safe().nonnegative(),
+			runtime: z.object({
+				status: z.enum([
+					"active",
+					"restore-failed",
+					"dispose-failed"
+				]),
+				message: z.string().optional(),
+				observedAt: z.number().int().safe().nonnegative()
+			}).optional(),
+			/** Latest connection attempt of each MCP server this Activation declares. */
+			mcpServers: z.array(z.object({
+				name: z.string(),
+				state: z.enum([
+					"connecting",
+					"connected",
+					"unavailable",
+					"missing-credentials"
+				]),
+				toolCount: z.number().int().nonnegative().optional(),
+				missing: z.array(z.string()).optional(),
+				message: z.string().optional(),
+				observedAt: z.number().int().safe().nonnegative()
+			}).strict()).optional()
+		}).strict()),
+		installation: z.object({
+			extensionRevisionId: ExtensionRevisionIdSchema,
+			installedAt: z.number().int().safe().nonnegative(),
+			config: JsonValueSchema.default({}),
+			runtime: z.object({
+				status: z.enum([
+					"active",
+					"restore-failed",
+					"dispose-failed"
+				]),
+				message: z.string().optional(),
+				observedAt: z.number().int().safe().nonnegative()
+			}).optional()
+		}).strict().optional(),
+		hostUiPermission: z.object({
+			declaration: HostUiPermissionDeclarationSchema,
+			permissionDigest: z.string().regex(/^[a-f0-9]{64}$/u),
+			approvalRequired: z.boolean()
+		}).strict().optional(),
+		hostClientDiagnostic: z.object({
+			revisionId: ExtensionRevisionIdSchema,
+			status: z.enum(["loaded", "failed"]),
+			message: z.string().optional(),
+			observedAt: z.number().int().safe().nonnegative()
+		}).strict().optional(),
+		clientDiagnostics: z.array(z.object({
+			agentId: AgentIdSchema,
+			revisionId: ExtensionRevisionIdSchema,
+			status: z.enum(["loaded", "failed"]),
+			message: z.string().optional(),
+			observedAt: z.number().int().nonnegative()
+		}).strict())
+	}).strict()),
+	hostUi: z.object({
+		preferencesRevision: z.number().int().nonnegative(),
+		pages: z.array(HostUiPageEntrySchema)
+	}).strict().default({
+		preferencesRevision: 0,
+		pages: []
+	}),
+	dynamic: z.array(z.object({
+		agentId: AgentIdSchema,
+		episodeId: EpisodeIdSchema,
+		pluginId: DynamicIdSchema,
+		packageId: DynamicIdSchema.optional(),
+		currentPackageId: DynamicIdSchema.optional(),
+		nextPackageId: DynamicIdSchema.optional(),
+		approvalRequestId: DynamicIdSchema.optional(),
+		status: DynamicAttemptStatusSchema,
+		activeRun: z.object({
+			pluginRunId: DynamicIdSchema,
+			packageId: DynamicIdSchema
+		}).strict().optional(),
+		latestRun: DynamicLatestRunSchema.optional(),
+		packages: z.array(z.object({
+			packageId: DynamicIdSchema,
+			name: z.string(),
+			purpose: z.string(),
+			hasHostHalf: z.boolean(),
+			hasClientHalf: z.boolean()
+		}).strict()),
+		policy: z.object({
+			turn: z.number().int().nonnegative(),
+			primaryPluginId: DynamicIdSchema.optional(),
+			consecutiveFailures: z.number().int().nonnegative(),
+			repeatedFingerprintCount: z.number().int().nonnegative(),
+			lastErrorFingerprint: z.string().optional(),
+			blockedReason: z.string().optional()
+		}).strict()
+	}).strict()),
+	authoringTasks: z.array(AuthoringTaskSummarySchema).default([]),
+	scheduledTasks: z.array(ScheduledTaskSchema).default([])
+}).strict();
+const MessageInputPartSchema = z.discriminatedUnion("type", [z.object({
+	type: z.literal("text"),
+	text: z.string().trim().min(1)
+}).strict(), z.object({
+	type: z.literal("mention"),
+	memberId: ChannelMemberIdSchema
+}).strict()]);
+const SendChannelMessageRequestSchema = z.object({
+	parts: z.array(MessageInputPartSchema).min(1),
+	clientEventId: NonEmptyStringSchema.optional(),
+	senderMemberId: ChannelMemberIdSchema.optional()
+}).strict().refine((body) => body.parts.every((part) => part.type !== "text" || [...part.text].length <= 64 * 1024), "Message text must not exceed 64 KiB.");
+const DynamicErrorDetailsSchema = z.object({
+	message: z.string(),
+	stack: z.string().optional()
+}).strict();
+const DynamicRenderFailureSchema = z.object({
+	slot: NonEmptyStringSchema,
+	message: z.string(),
+	stack: z.string().optional(),
+	abdicated: z.boolean()
+}).strict();
+const DynamicRunResolutionSchema = z.discriminatedUnion("ok", [z.object({
+	ok: z.literal(true),
+	pluginRunId: DynamicIdSchema,
+	waitingFor: z.array(z.string()).optional()
+}).strict(), z.object({
+	ok: z.literal(false),
+	reason: z.enum([
+		"rejected",
+		"host-half-failed",
+		"client-half-failed"
+	]),
+	pluginRunId: DynamicIdSchema.optional(),
+	startedHere: z.boolean().optional(),
+	message: z.string().optional(),
+	stack: z.string().optional()
+}).strict()]);
+const DynamicRunResponseSchema = z.discriminatedUnion("ok", [z.object({
+	ok: z.literal(true),
+	status: z.enum([
+		"awaiting-approval",
+		"starting",
+		"running"
+	]),
+	pluginId: DynamicIdSchema,
+	packageId: DynamicIdSchema,
+	pluginRunId: DynamicIdSchema,
+	waitingFor: z.array(z.string()),
+	clientWaitingFor: z.array(z.string()).optional(),
+	currentPackageId: DynamicIdSchema.optional(),
+	nextPackageId: DynamicIdSchema.optional(),
+	mode: z.enum(["run", "update"])
+}).strict(), z.object({
+	ok: z.literal(false),
+	reason: z.enum([
+		"plugin-missing",
+		"package-missing",
+		"invalid-mode",
+		"transition-in-flight",
+		"host-half-failed",
+		"client-half-failed",
+		"rejected",
+		"cancelled",
+		"not-running"
+	]),
+	message: z.string(),
+	stack: z.string().optional()
+}).strict()]);
+const DynamicInventoryRowSchema = z.object({
+	pluginId: DynamicIdSchema,
+	agentId: NonEmptyStringSchema,
+	packages: z.array(z.object({
+		packageId: DynamicIdSchema,
+		name: z.string(),
+		purpose: z.string(),
+		hasHostHalf: z.boolean(),
+		hasClientHalf: z.boolean()
+	}).strict()),
+	currentPackageId: DynamicIdSchema.optional(),
+	nextPackageId: DynamicIdSchema.optional(),
+	activeRun: z.object({
+		pluginRunId: DynamicIdSchema,
+		packageId: DynamicIdSchema
+	}).strict().optional(),
+	latestRun: DynamicLatestRunSchema.optional()
+}).strict();
+const DshPluginCatalogEntrySchema = z.object({
+	packageName: NonEmptyStringSchema,
+	packageVersion: NonEmptyStringSchema,
+	origin: z.enum([
+		"builtin",
+		"profile",
+		"dynamic",
+		"installed"
+	]),
+	settingsNamespaces: z.array(NonEmptyStringSchema),
+	loadError: z.object({
+		code: NonEmptyStringSchema,
+		message: NonEmptyStringSchema
+	}).strict().optional(),
+	packageId: DshPluginPackageIdSchema.optional(),
+	installSource: z.enum([
+		"registry",
+		"tarball",
+		"imported"
+	]).optional(),
+	installedAt: z.number().int().safe().nonnegative().optional(),
+	clientUiDetected: z.boolean().optional(),
+	hostUi: DshNxtHostUiSchema.optional(),
+	approvedBuilds: z.array(NonEmptyStringSchema).optional(),
+	entries: z.array(z.object({
+		id: DshPluginEntryIdSchema,
+		entryKey: NonEmptyStringSchema,
+		moduleName: NonEmptyStringSchema,
+		suggestedScope: z.enum(["host", "agent"]),
+		selectedScope: z.enum(["host", "agent"]).optional(),
+		config: JsonValueSchema,
+		activations: z.array(z.object({
+			targetKey: NonEmptyStringSchema,
+			target: z.enum(["host", "agent"]),
+			agentId: AgentIdSchema.optional(),
+			activatedAt: z.number().int().safe().nonnegative(),
+			diagnostic: z.object({
+				status: z.enum([
+					"active",
+					"load-failed",
+					"restore-failed",
+					"dispose-failed"
+				]),
+				phase: z.enum([
+					"import",
+					"apply",
+					"update",
+					"dispose",
+					"restore"
+				]),
+				message: z.string().optional(),
+				observedAt: z.number().int().safe().nonnegative()
+			}).optional()
+		}).strict())
+	}).strict()).optional()
+}).strict();
+const DshSettingsNamespaceSchema = z.object({
+	ns: NonEmptyStringSchema,
+	schema: JsonValueSchema,
+	resolved: JsonValueSchema,
+	base: JsonValueSchema.optional(),
+	user: JsonValueSchema.optional(),
+	applies: z.enum(["live", "restart"]),
+	secrets: z.array(z.object({
+		path: z.array(z.string()),
+		set: z.boolean()
+	}).strict()),
+	revision: z.number().int().nonnegative(),
+	writable: z.boolean(),
+	owner: z.object({
+		packageName: NonEmptyStringSchema,
+		packageVersion: NonEmptyStringSchema
+	}).strict().optional()
+}).strict();
+const DshSettingsPathSchema = z.array(z.string().min(1).max(200)).min(1).max(32);
+const DshSettingsPathOperationSchema = z.discriminatedUnion("op", [z.object({
+	op: z.literal("set"),
+	path: DshSettingsPathSchema,
+	value: JsonValueSchema
+}).strict(), z.object({
+	op: z.literal("unset"),
+	path: DshSettingsPathSchema
+}).strict()]);
+const DshSettingsMutationRequestSchema = z.object({
+	expectedRevision: z.number().int().nonnegative(),
+	ops: z.array(DshSettingsPathOperationSchema).min(1).max(128)
+}).strict();
+const DshCredentialRefSchema = z.string().regex(/^[A-Za-z_][A-Za-z0-9_]*$/u).max(200);
+const DshCredentialViewSchema = z.object({
+	configured: z.boolean(),
+	source: z.string().optional(),
+	writable: z.boolean()
+}).strict();
+const DshSettingsChangedSseDataSchema = z.object({
+	namespace: NonEmptyStringSchema,
+	revision: z.number().int().nonnegative()
+}).strict();
+const DshCredentialsChangedSseDataSchema = z.object({ ref: DshCredentialRefSchema }).strict();
+const DynamicChangedSseDataSchema = z.object({ agentId: AgentIdSchema }).strict();
+const HostSseStatusDataSchema = z.object({
+	ok: z.boolean(),
+	message: z.string(),
+	replay: z.enum([
+		"none",
+		"complete",
+		"expired"
+	]).optional()
+}).strict();
+const DshPluginOperationSseDataSchema = z.object({
+	operationId: z.string().uuid(),
+	kind: z.enum(["inspect", "install"]),
+	phase: z.enum([
+		"download",
+		"dependencies",
+		"build-scripts",
+		"validation",
+		"publish"
+	]),
+	status: z.enum([
+		"running",
+		"done",
+		"failed"
+	]),
+	message: z.string()
+}).strict();
+const HostSseEventSchema = z.discriminatedUnion("event", [
+	z.object({
+		event: z.literal("snapshot-changed"),
+		data: z.object({ changed: z.literal(true) }).strict()
+	}).strict(),
+	z.object({
+		event: z.literal("channel-fact"),
+		data: ChannelFactSseDataSchema
+	}).strict(),
+	z.object({
+		event: z.literal("connection-fact"),
+		data: HostConnectionEventSchema
+	}).strict(),
+	z.object({
+		event: z.literal("runtime"),
+		data: ChannelRuntimeSseDataSchema
+	}).strict(),
+	z.object({
+		event: z.literal("extensions-changed"),
+		data: z.object({ changed: z.literal(true) }).strict()
+	}).strict(),
+	z.object({
+		event: z.literal("dsh-plugins-changed"),
+		data: z.object({ changed: z.literal(true) }).strict()
+	}).strict(),
+	z.object({
+		event: z.literal("dsh-plugin-operation"),
+		data: DshPluginOperationSseDataSchema
+	}).strict(),
+	z.object({
+		event: z.literal("dynamic-changed"),
+		data: DynamicChangedSseDataSchema
+	}).strict(),
+	z.object({
+		event: z.literal("dsh-settings-changed"),
+		data: DshSettingsChangedSseDataSchema
+	}).strict(),
+	z.object({
+		event: z.literal("dsh-credentials-changed"),
+		data: DshCredentialsChangedSseDataSchema
+	}).strict(),
+	z.object({
+		event: z.literal("status"),
+		data: HostSseStatusDataSchema
+	}).strict(),
+	z.object({
+		event: z.literal("attention-changed"),
+		data: z.object({ revision: z.string().min(1) }).strict()
+	}).strict(),
+	z.object({
+		event: z.literal("binding-change"),
+		data: z.object({
+			operationId: NonEmptyStringSchema,
+			channelId: ChannelIdSchema,
+			kind: z.enum([
+				"bind",
+				"replace",
+				"clear"
+			]),
+			step: NonEmptyStringSchema,
+			status: z.enum([
+				"running",
+				"skipped",
+				"done",
+				"failed"
+			]),
+			message: z.string()
+		}).strict()
+	}).strict()
+]);
+/** Request content a model accepts; `image` enables native vision for agents using the model. */
+const LlmModelInputModalitiesSchema = z.array(z.enum(["text", "image"])).min(1);
+const LlmProviderModelSchema = z.object({
+	id: NonEmptyStringSchema,
+	name: NonEmptyStringSchema,
+	contextWindow: z.number().int().positive().optional(),
+	maxTokens: z.number().int().positive().optional(),
+	inputModalities: LlmModelInputModalitiesSchema.optional()
+}).strict();
+const LlmDiscoveredModelSchema = z.object({
+	id: NonEmptyStringSchema,
+	name: NonEmptyStringSchema.optional(),
+	contextWindow: z.number().int().positive().optional(),
+	maxTokens: z.number().int().positive().optional(),
+	inputModalities: LlmModelInputModalitiesSchema.optional()
+}).strict();
+const LlmProviderCredentialSchema = z.object({
+	configured: z.boolean(),
+	source: z.string().optional(),
+	writable: z.boolean()
+}).strict();
+const LlmProviderViewSchema = z.object({
+	provider: NonEmptyStringSchema,
+	displayName: z.string(),
+	settingsNs: NonEmptyStringSchema,
+	settingsPath: z.array(NonEmptyStringSchema),
+	settingsRevision: z.number().int().nonnegative(),
+	declared: z.boolean(),
+	active: z.boolean(),
+	configured: z.boolean(),
+	baseURL: z.string().optional(),
+	api: NonEmptyStringSchema.optional(),
+	credential: LlmProviderCredentialSchema.optional(),
+	models: z.array(LlmProviderModelSchema),
+	/** The model list was edited on this host; built-in providers can restore their own catalog. */
+	modelsCustomized: z.boolean(),
+	/** The provider's adapter can list the models its endpoint offers. */
+	discoverable: z.boolean()
+}).strict();
+const LlmProviderSettingsSchema = z.object({
+	writable: z.boolean(),
+	protocols: z.array(NonEmptyStringSchema),
+	providers: z.array(LlmProviderViewSchema)
+}).strict();
+const ConnectionTestResultSchema = z.discriminatedUnion("status", [
+	z.object({
+		status: z.literal("received"),
+		channelId: ChannelIdSchema,
+		platformMessageId: NonEmptyStringSchema
+	}).strict(),
+	z.object({
+		status: z.literal("sent"),
+		channelId: ChannelIdSchema,
+		platformMessageId: NonEmptyStringSchema.optional()
+	}).strict(),
+	z.object({
+		status: z.enum([
+			"waiting-for-message",
+			"needs-channel",
+			"needs-target",
+			"not-connected"
+		]),
+		message: z.string()
+	}).strict(),
+	z.object({
+		status: z.literal("failed"),
+		kind: NonEmptyStringSchema,
+		message: z.string(),
+		retryAfterMs: z.number().int().nonnegative().optional()
+	}).strict()
+]);
+/** 扩展包导入检查的结果：本地文件与社区下载共用同一确认步骤。 */
+const ExtensionImportInspectionSchema = z.object({
+	token: NonEmptyStringSchema,
+	extensionId: ExtensionIdSchema,
+	revisionId: ExtensionRevisionIdSchema,
+	slug: NonEmptyStringSchema,
+	displayName: NonEmptyStringSchema,
+	scope: z.enum([
+		"agent",
+		"host-adapter",
+		"host-ui"
+	]),
+	idempotent: z.boolean(),
+	slugConflict: z.boolean()
+}).strict();
+const defineContract = (contract) => ({
+	...contract,
+	parseParams: (input) => contract.params.parse(input),
+	parseRequest: (input) => contract.request.parse(input),
+	parseResponse: (input) => contract.response.parse(input),
+	parseError: (input) => contract.error.parse(input)
+});
+const agentParam = z.object({ agentId: AgentIdSchema }).strict();
+const agentRevisionParam = z.object({
+	agentId: AgentIdSchema,
+	revisionId: AgentRevisionIdSchema
+}).strict();
+const AgentRevisionChangedFieldSchema = z.enum([
+	"name",
+	"persona",
+	"model",
+	"capabilities",
+	"imagePolicy",
+	"approvalPolicy"
+]);
+const AgentRevisionHistorySchema = z.object({
+	agentId: AgentIdSchema,
+	currentRevisionId: AgentRevisionIdSchema,
+	/** Newest first. `changedFields` compares each Revision with the one numbered just before it. */
+	revisions: z.array(z.object({
+		id: AgentRevisionIdSchema,
+		revision: z.number().int().positive(),
+		createdAt: z.number().int().nonnegative(),
+		displayName: z.string(),
+		model: z.object({
+			provider: z.string(),
+			model: z.string()
+		}).strict(),
+		changedFields: z.array(AgentRevisionChangedFieldSchema),
+		current: z.boolean()
+	}).strict())
+}).strict();
+const channelParam = z.object({ channelId: ChannelIdSchema }).strict();
+const connectionParam = z.object({ connectionId: ConnectionIdSchema }).strict();
+const agentExtensionParam = z.object({
+	agentId: AgentIdSchema,
+	extensionId: ExtensionIdSchema
+}).strict();
+const extensionParam = z.object({ extensionId: ExtensionIdSchema }).strict();
+const dshPluginPackageParam = z.object({ packageId: DshPluginPackageIdSchema }).strict();
+const dshPluginEntryParam = z.object({ entryId: DshPluginEntryIdSchema }).strict();
+const extensionRevisionParam = z.object({
+	extensionId: ExtensionIdSchema,
+	revisionId: ExtensionRevisionIdSchema
+}).strict();
+const dshSettingsParam = z.object({ namespace: NonEmptyStringSchema }).strict();
+const dshCredentialParam = z.object({ ref: DshCredentialRefSchema }).strict();
+const llmProviderParam = z.object({ provider: NonEmptyStringSchema }).strict();
+const authoringTaskParam = z.object({ taskId: AuthoringTaskIdSchema }).strict();
+const scheduledTaskParam = z.object({ taskId: ScheduledTaskIdSchema }).strict();
+const authoringAttemptParam = z.object({
+	taskId: AuthoringTaskIdSchema,
+	attemptId: AuthoringAttemptIdSchema
+}).strict();
+const DshPluginInstallInspectionSchema = z.object({
+	token: NonEmptyStringSchema,
+	operationId: z.string().uuid().optional(),
+	packageName: NonEmptyStringSchema,
+	packageVersion: NonEmptyStringSchema,
+	packageDigest: z.string().regex(/^[a-f0-9]{64}$/u),
+	lockfileDigest: z.string().regex(/^[a-f0-9]{64}$/u),
+	blockedBuilds: z.array(NonEmptyStringSchema),
+	clientUiDetected: z.boolean(),
+	hostUi: DshNxtHostUiSchema.optional(),
+	entries: z.array(z.object({
+		entryKey: NonEmptyStringSchema,
+		moduleName: NonEmptyStringSchema,
+		suggestedScope: z.enum(["host", "agent"])
+	}).strict())
+}).strict();
+const BinaryUploadRequestSchema = z.object({
+	bytes: z.instanceof(Uint8Array),
+	fileName: z.string().max(255).optional(),
+	operationId: z.string().uuid().optional()
+}).strict();
+const encodeBinaryUpload = (input) => ({
+	body: input.bytes,
+	headers: {
+		"content-type": "application/octet-stream",
+		...input.fileName === void 0 ? {} : { "x-file-name": input.fileName },
+		...input.operationId === void 0 ? {} : { "x-operation-id": input.operationId }
+	}
+});
+const HostApiContracts = {
+	retryRuntimeCompatibility: defineContract({
+		method: "POST",
+		path: "/api/runtime/compatibility/retry",
+		params: EmptyParamsSchema,
+		request: z.object({
+			objectKind: RuntimeCompatibilityDiagnosticSchema.shape.objectKind,
+			objectId: z.string().min(1)
+		}).strict(),
+		response: z.object({ diagnostics: z.array(RuntimeCompatibilityDiagnosticSchema) }).strict(),
+		error: HostApiErrorSchema,
+		invalidatesSnapshot: true
+	}),
+	snapshot: defineContract({
+		method: "GET",
+		path: "/api/snapshot",
+		params: EmptyParamsSchema,
+		request: NoRequestBodySchema,
+		response: HostSnapshotSchema,
+		error: HostApiErrorSchema
+	}),
+	getAuthoringTask: defineContract({
+		method: "GET",
+		path: "/api/authoring/tasks/:taskId",
+		params: authoringTaskParam,
+		request: NoRequestBodySchema,
+		response: z.object({
+			task: AuthoringTaskSummarySchema,
+			attempts: z.array(AuthoringAttemptSummarySchema),
+			/** Secret fields of the latest candidate and which have a test value for this task's dynamic runs. */
+			testSecrets: z.object({
+				fields: z.array(z.object({
+					key: z.string(),
+					title: z.string()
+				}).strict()),
+				configured: z.array(z.string())
+			}).strict().optional(),
+			events: z.array(z.object({
+				sequence: z.number().int().positive(),
+				kind: z.string(),
+				attemptId: AuthoringAttemptIdSchema.optional(),
+				payload: JsonValueSchema,
+				createdAt: z.number().int().nonnegative()
+			}).strict())
+		}).strict(),
+		error: HostApiErrorSchema
+	}),
+	decideAuthoringAttempt: defineContract({
+		invalidatesSnapshot: true,
+		method: "POST",
+		path: "/api/authoring/tasks/:taskId/attempts/:attemptId/decision",
+		params: authoringAttemptParam,
+		request: z.object({
+			expectedRevision: z.number().int().positive(),
+			approved: z.boolean(),
+			approveRiskStable: z.boolean()
+		}).strict(),
+		response: z.object({
+			accepted: z.boolean(),
+			taskRevision: z.number().int().positive(),
+			executionRequired: z.boolean()
+		}).strict(),
+		error: HostApiErrorSchema
+	}),
+	restoreAuthoringAttempt: defineContract({
+		invalidatesSnapshot: true,
+		method: "POST",
+		path: "/api/authoring/tasks/:taskId/attempts/:attemptId/restore",
+		params: authoringAttemptParam,
+		request: z.object({ expectedRevision: z.number().int().positive() }).strict(),
+		response: AuthoringTaskSummarySchema,
+		error: HostApiErrorSchema
+	}),
+	stopAuthoringTask: defineContract({
+		invalidatesSnapshot: true,
+		method: "POST",
+		path: "/api/authoring/tasks/:taskId/stop",
+		params: authoringTaskParam,
+		request: z.object({ expectedRevision: z.number().int().positive() }).strict(),
+		response: AuthoringTaskSummarySchema,
+		error: HostApiErrorSchema
+	}),
+	setAuthoringTestSecrets: defineContract({
+		method: "PUT",
+		path: "/api/authoring/tasks/:taskId/test-secrets",
+		params: authoringTaskParam,
+		request: z.object({ secrets: z.record(z.string(), z.string().max(8192)) }).strict(),
+		response: z.object({ configured: z.array(z.string()) }).strict(),
+		error: HostApiErrorSchema
+	}),
+	deleteAuthoringTask: defineContract({
+		invalidatesSnapshot: true,
+		method: "DELETE",
+		path: "/api/authoring/tasks/:taskId",
+		params: authoringTaskParam,
+		request: NoRequestBodySchema,
+		response: z.object({ deleted: z.literal(true) }).strict(),
+		error: HostApiErrorSchema
+	}),
+	pauseScheduledTask: defineContract({
+		invalidatesSnapshot: true,
+		method: "POST",
+		path: "/api/scheduled-tasks/:taskId/pause",
+		params: scheduledTaskParam,
+		request: NoRequestBodySchema,
+		response: ScheduledTaskSchema,
+		error: HostApiErrorSchema
+	}),
+	resumeScheduledTask: defineContract({
+		invalidatesSnapshot: true,
+		method: "POST",
+		path: "/api/scheduled-tasks/:taskId/resume",
+		params: scheduledTaskParam,
+		request: NoRequestBodySchema,
+		response: ScheduledTaskSchema,
+		error: HostApiErrorSchema
+	}),
+	runScheduledTask: defineContract({
+		invalidatesSnapshot: true,
+		method: "POST",
+		path: "/api/scheduled-tasks/:taskId/run",
+		params: scheduledTaskParam,
+		request: NoRequestBodySchema,
+		/** `woke: false` when the owning extension's due-job handler let this run pass without waking the agent. */
+		response: z.object({
+			task: ScheduledTaskSchema,
+			woke: z.boolean()
+		}).strict(),
+		error: HostApiErrorSchema
+	}),
+	deleteScheduledTask: defineContract({
+		invalidatesSnapshot: true,
+		method: "DELETE",
+		path: "/api/scheduled-tasks/:taskId",
+		params: scheduledTaskParam,
+		request: NoRequestBodySchema,
+		response: z.object({ deleted: z.literal(true) }).strict(),
+		error: HostApiErrorSchema
+	}),
+	listClientNotifications: defineContract({
+		method: "GET",
+		path: "/api/client-notifications",
+		params: z.object({ cursor: z.number().int().nonnegative().optional() }).strict(),
+		request: NoRequestBodySchema,
+		response: ClientNotificationFeedResponseSchema,
+		error: HostApiErrorSchema
+	}),
+	updateNotificationSettings: defineContract({
+		invalidatesSnapshot: true,
+		method: "PUT",
+		path: "/api/settings/notifications",
+		params: EmptyParamsSchema,
+		request: UpdateNotificationSettingsRequestSchema,
+		response: NotificationSettingsViewSchema,
+		error: HostApiErrorSchema
+	}),
+	testBarkNotification: defineContract({
+		method: "POST",
+		path: "/api/settings/notifications/test",
+		params: EmptyParamsSchema,
+		request: TestBarkNotificationRequestSchema,
+		response: z.object({ sent: z.literal(true) }).strict(),
+		error: HostApiErrorSchema
+	}),
+	testSystemNotification: defineContract({
+		method: "POST",
+		path: "/api/settings/notifications/test-system",
+		params: EmptyParamsSchema,
+		request: NoRequestBodySchema,
+		response: z.object({ published: z.literal(true) }).strict(),
+		error: HostApiErrorSchema
+	}),
+	listPlatformUsers: defineContract({
+		method: "GET",
+		path: "/api/platform-users",
+		params: z.object({
+			query: z.string().trim().max(80).optional(),
+			adapterKey: z.string().trim().min(1).max(120).optional(),
+			connectionId: ConnectionIdSchema.optional(),
+			cursor: PlatformIdentityIdSchema.optional(),
+			limit: z.number().int().min(1).max(100).default(50)
+		}).strict(),
+		request: NoRequestBodySchema,
+		response: PlatformUserListResponseSchema,
+		error: HostApiErrorSchema
+	}),
+	listConnectionEvents: defineContract({
+		method: "GET",
+		path: "/api/connections/:connectionId/events",
+		params: z.object({
+			connectionId: ConnectionIdSchema,
+			beforeReceivedAt: z.number().int().safe().nonnegative().optional(),
+			beforeId: ConnectionEventIdSchema.optional(),
+			limit: z.number().int().min(1).max(100).default(50)
+		}).strict(),
+		request: NoRequestBodySchema,
+		response: z.object({
+			events: z.array(HostConnectionEventSchema),
+			hasMore: z.boolean()
+		}).strict(),
+		error: HostApiErrorSchema
+	}),
+	createAgent: defineContract({
+		invalidatesSnapshot: true,
+		method: "POST",
+		path: "/api/agents",
+		params: EmptyParamsSchema,
+		request: CreateAgentRequestSchema,
+		response: z.object({
+			agentId: AgentIdSchema,
+			channelId: ChannelIdSchema,
+			connectionId: ConnectionIdSchema
+		}).strict(),
+		error: HostApiErrorSchema
+	}),
+	reviseAgent: defineContract({
+		invalidatesSnapshot: true,
+		method: "POST",
+		path: "/api/agents/:agentId/revision",
+		params: agentParam,
+		request: ReviseAgentRequestSchema,
+		response: z.object({ currentRevisionId: AgentRevisionIdSchema }).strict(),
+		error: HostApiErrorSchema
+	}),
+	updateAgentCapabilities: defineContract({
+		invalidatesSnapshot: true,
+		method: "POST",
+		path: "/api/agents/:agentId/capabilities",
+		params: agentParam,
+		request: UpdateAgentCapabilitiesRequestSchema,
+		response: z.object({
+			currentRevisionId: AgentRevisionIdSchema,
+			capabilities: AgentCapabilitiesSchema
+		}).strict(),
+		error: HostApiErrorSchema
+	}),
+	deleteAgent: defineContract({
+		invalidatesSnapshot: true,
+		method: "DELETE",
+		path: "/api/agents/:agentId",
+		params: agentParam,
+		request: z.object({
+			expectedCurrentRevisionId: AgentRevisionIdSchema,
+			confirmationName: z.string().min(1).max(80),
+			deleteAutoCreatedBuiltInChannels: z.boolean().default(true),
+			/** Also remove `workspaces/<agentId>/` (files, development shell output, creation candidates). */
+			deleteWorkspace: z.boolean().default(false)
+		}).strict(),
+		response: z.object({
+			agentId: AgentIdSchema,
+			deleted: z.literal(true),
+			unboundChannelIds: z.array(ChannelIdSchema),
+			deletedChannelIds: z.array(ChannelIdSchema)
+		}).strict(),
+		error: HostApiErrorSchema
+	}),
+	createInternalChannel: defineContract({
+		invalidatesSnapshot: true,
+		method: "POST",
+		path: "/api/channels",
+		params: EmptyParamsSchema,
+		request: z.object({ displayName: z.string().trim().min(1).max(120) }).strict(),
+		response: z.object({
+			channelId: ChannelIdSchema,
+			connectionId: ConnectionIdSchema
+		}).strict(),
+		error: HostApiErrorSchema
+	}),
+	deleteChannel: defineContract({
+		invalidatesSnapshot: true,
+		method: "DELETE",
+		path: "/api/channels/:channelId",
+		params: channelParam,
+		request: z.object({ expectedBoundAgentId: AgentIdSchema.nullable() }).strict(),
+		response: z.object({
+			channelId: ChannelIdSchema,
+			deleted: z.literal(true)
+		}).strict(),
+		error: HostApiErrorSchema
+	}),
+	createBinding: defineContract({
+		invalidatesSnapshot: true,
+		method: "POST",
+		path: "/api/bindings",
+		params: EmptyParamsSchema,
+		request: z.object({
+			agentId: AgentIdSchema,
+			channelId: ChannelIdSchema,
+			triggerPolicy: TriggerPolicySchema,
+			processingFeedback: z.enum(["auto", "off"]).optional(),
+			activityTriggerOverrides: ActivityTriggerOverridesSchema.optional()
+		}).strict(),
+		response: z.object({
+			channelId: ChannelIdSchema,
+			agentId: AgentIdSchema,
+			triggerPolicy: TriggerPolicySchema,
+			processingFeedback: z.enum(["auto", "off"]).default("auto"),
+			activityTriggerOverrides: ActivityTriggerOverridesSchema.default({}),
+			boundAt: z.number().int().safe().nonnegative()
+		}).strict(),
+		error: HostApiErrorSchema
+	}),
+	clearBinding: defineContract({
+		invalidatesSnapshot: true,
+		method: "DELETE",
+		path: "/api/bindings/:channelId",
+		params: channelParam,
+		request: NoRequestBodySchema,
+		response: z.object({
+			channelId: ChannelIdSchema,
+			cleared: z.literal(true)
+		}).strict(),
+		error: HostApiErrorSchema
+	}),
+	putWorkTreeOrder: defineContract({
+		invalidatesSnapshot: true,
+		method: "PUT",
+		path: "/api/work-tree-order",
+		params: EmptyParamsSchema,
+		request: WorkTreeOrderSchema,
+		response: WorkTreeOrderSchema,
+		error: HostApiErrorSchema
+	}),
+	listChannelMessages: defineContract({
+		method: "GET",
+		path: "/api/channels/:channelId/messages",
+		params: z.object({
+			channelId: ChannelIdSchema,
+			limit: z.number().int().min(1).max(100),
+			beforeOccurredAt: z.number().int().safe().nonnegative().optional(),
+			beforeSourceId: NonEmptyStringSchema.optional()
+		}).strict().refine((value) => value.beforeOccurredAt === void 0 === (value.beforeSourceId === void 0), "频道历史游标必须完整提供。"),
+		request: NoRequestBodySchema,
+		response: z.object({
+			messages: z.array(HostSnapshotMessageSchema),
+			hasMore: z.boolean(),
+			cursor: HostSyncCursorSchema
+		}).strict(),
+		error: HostApiErrorSchema
+	}),
+	sendChannelMessage: defineContract({
+		method: "POST",
+		path: "/api/channels/:channelId/messages",
+		params: channelParam,
+		request: SendChannelMessageRequestSchema,
+		response: z.object({
+			inserted: z.boolean(),
+			channelEventId: ChannelEventIdSchema.optional(),
+			outboundIntentId: OutboundIntentIdSchema.optional()
+		}).strict(),
+		error: HostApiErrorSchema
+	}),
+	renameChannel: defineContract({
+		invalidatesSnapshot: true,
+		method: "POST",
+		path: "/api/channels/:channelId/display-name",
+		params: channelParam,
+		request: z.object({ displayName: z.string().trim().min(1).max(120) }).strict(),
+		response: z.object({
+			channelId: ChannelIdSchema,
+			displayName: z.string().trim().min(1).max(120)
+		}).strict(),
+		error: HostApiErrorSchema
+	}),
+	getChannelRuntime: defineContract({
+		method: "GET",
+		path: "/api/channels/:channelId/runtime",
+		params: channelParam,
+		request: NoRequestBodySchema,
+		response: ChannelRuntimeProjectionSchema.extend({ cursor: HostSyncCursorSchema }),
+		error: HostApiErrorSchema
+	}),
+	getChannelToolCall: defineContract({
+		method: "GET",
+		path: "/api/channels/:channelId/runtime/tools/:callId",
+		params: z.object({
+			channelId: ChannelIdSchema,
+			callId: z.string().trim().min(1).max(200)
+		}).strict(),
+		request: NoRequestBodySchema,
+		response: z.object({
+			callId: z.string(),
+			available: z.boolean(),
+			name: z.string().optional(),
+			input: z.string().optional(),
+			result: z.string().optional(),
+			inputTruncated: z.boolean(),
+			resultTruncated: z.boolean()
+		}).strict(),
+		error: HostApiErrorSchema
+	}),
+	resetChannelContext: defineContract({
+		invalidatesSnapshot: true,
+		method: "POST",
+		path: "/api/channels/:channelId/context-reset",
+		params: channelParam,
+		request: z.object({
+			mode: z.enum(["clear", "compact"]),
+			expectedEpisodeId: EpisodeIdSchema
+		}).strict(),
+		response: z.object({
+			mode: z.enum(["clear", "compact"]),
+			closedEpisodeId: EpisodeIdSchema,
+			nextEpisodeId: EpisodeIdSchema.optional()
+		}).strict(),
+		error: HostApiErrorSchema
+	}),
+	createConnection: defineContract({
+		invalidatesSnapshot: true,
+		method: "POST",
+		path: "/api/connections",
+		params: EmptyParamsSchema,
+		request: z.object({
+			adapterKey: NonEmptyStringSchema,
+			alias: ConnectionAliasInputSchema.optional(),
+			configuration: z.record(z.string(), JsonValueSchema).default({}),
+			credentials: z.record(z.string(), z.string().max(16 * 1024)).default({})
+		}).strict(),
+		response: z.object({
+			connectionId: ConnectionIdSchema,
+			adapterKey: NonEmptyStringSchema
+		}).strict(),
+		error: HostApiErrorSchema
+	}),
+	startConnectionLogin: defineContract({
+		method: "POST",
+		path: "/api/connection-logins",
+		params: EmptyParamsSchema,
+		request: z.object({
+			adapterKey: NonEmptyStringSchema,
+			alias: ConnectionAliasInputSchema.optional(),
+			connectionId: ConnectionIdSchema.optional()
+		}).strict(),
+		response: z.object({
+			loginId: NonEmptyStringSchema,
+			adapterKey: NonEmptyStringSchema,
+			status: z.enum([
+				"pending",
+				"scanned",
+				"confirmed",
+				"expired",
+				"failed",
+				"cancelled"
+			]),
+			qrCodeUrl: NonEmptyStringSchema,
+			message: z.string().optional()
+		}).strict(),
+		error: HostApiErrorSchema
+	}),
+	getConnectionLogin: defineContract({
+		method: "GET",
+		path: "/api/connection-logins/:loginId",
+		params: z.object({ loginId: NonEmptyStringSchema }).strict(),
+		request: NoRequestBodySchema,
+		response: z.object({
+			loginId: NonEmptyStringSchema,
+			status: z.enum([
+				"pending",
+				"scanned",
+				"confirmed",
+				"expired",
+				"failed",
+				"cancelled"
+			]),
+			qrCodeUrl: NonEmptyStringSchema.optional(),
+			connectionId: ConnectionIdSchema.optional(),
+			adapterKey: NonEmptyStringSchema,
+			message: z.string().optional()
+		}).strict(),
+		error: HostApiErrorSchema
+	}),
+	cancelConnectionLogin: defineContract({
+		method: "DELETE",
+		path: "/api/connection-logins/:loginId",
+		params: z.object({ loginId: NonEmptyStringSchema }).strict(),
+		request: NoRequestBodySchema,
+		response: z.object({
+			loginId: NonEmptyStringSchema,
+			status: z.literal("cancelled")
+		}).strict(),
+		error: HostApiErrorSchema
+	}),
+	updateConnectionAlias: defineContract({
+		invalidatesSnapshot: true,
+		method: "POST",
+		path: "/api/connections/:connectionId/alias",
+		params: connectionParam,
+		request: z.object({ alias: z.string().trim().max(80) }).strict(),
+		response: z.object({
+			connectionId: ConnectionIdSchema,
+			alias: ConnectionAliasOutputSchema.optional()
+		}).strict(),
+		error: HostApiErrorSchema
+	}),
+	updateConnectionActivityTriggerDefaults: defineContract({
+		invalidatesSnapshot: true,
+		method: "POST",
+		path: "/api/connections/:connectionId/activity-trigger-defaults",
+		params: connectionParam,
+		request: z.object({ activityKeys: z.array(AdapterActivityKeySchema) }).strict(),
+		response: z.object({
+			connectionId: ConnectionIdSchema,
+			activityKeys: z.array(AdapterActivityKeySchema)
+		}).strict(),
+		error: HostApiErrorSchema
+	}),
+	updateConnectionConfiguration: defineContract({
+		invalidatesSnapshot: true,
+		method: "POST",
+		path: "/api/connections/:connectionId/configuration",
+		params: connectionParam,
+		request: z.object({ configuration: z.record(z.string(), z.union([
+			z.string(),
+			z.number(),
+			z.boolean()
+		])) }).strict(),
+		response: z.object({
+			connectionId: ConnectionIdSchema,
+			configuration: z.record(z.string(), z.union([
+				z.string(),
+				z.number(),
+				z.boolean()
+			]))
+		}).strict(),
+		error: HostApiErrorSchema
+	}),
+	deleteConnection: defineContract({
+		invalidatesSnapshot: true,
+		method: "DELETE",
+		path: "/api/connections/:connectionId",
+		params: connectionParam,
+		request: z.object({ deleteChannelData: z.boolean() }).strict(),
+		response: z.object({
+			connectionId: ConnectionIdSchema,
+			archived: z.boolean()
+		}).strict(),
+		error: HostApiErrorSchema
+	}),
+	restoreConnection: defineContract({
+		invalidatesSnapshot: true,
+		method: "POST",
+		path: "/api/connections/:connectionId/restore",
+		params: connectionParam,
+		request: NoRequestBodySchema,
+		response: z.object({
+			connectionId: ConnectionIdSchema,
+			restored: z.literal(true)
+		}).strict(),
+		error: HostApiErrorSchema
+	}),
+	dshPlugins: defineContract({
+		method: "GET",
+		path: "/api/dsh/plugins",
+		params: EmptyParamsSchema,
+		request: NoRequestBodySchema,
+		response: z.object({ plugins: z.array(DshPluginCatalogEntrySchema) }).strict(),
+		error: HostApiErrorSchema
+	}),
+	inspectDshPluginTarball: defineContract({
+		method: "POST",
+		timeoutMs: 3e5,
+		path: "/api/dsh/plugin-installs/inspect-tarball",
+		params: EmptyParamsSchema,
+		request: BinaryUploadRequestSchema,
+		encodeRequest: encodeBinaryUpload,
+		response: DshPluginInstallInspectionSchema,
+		error: HostApiErrorSchema
+	}),
+	exportExtensionRevision: defineContract({
+		method: "GET",
+		timeoutMs: 3e5,
+		path: "/api/extensions/:extensionId/revisions/:revisionId/export",
+		params: extensionRevisionParam,
+		request: NoRequestBodySchema,
+		responseFormat: "bytes",
+		response: z.instanceof(Uint8Array),
+		error: HostApiErrorSchema
+	}),
+	inspectDshPluginInstall: defineContract({
+		timeoutMs: 3e5,
+		method: "POST",
+		path: "/api/dsh/plugin-installs/inspect",
+		params: EmptyParamsSchema,
+		request: z.object({
+			spec: NonEmptyStringSchema.max(500),
+			operationId: z.string().uuid().optional()
+		}).strict(),
+		response: DshPluginInstallInspectionSchema,
+		error: HostApiErrorSchema
+	}),
+	commitDshPluginInstall: defineContract({
+		invalidatesSnapshot: true,
+		timeoutMs: 3e5,
+		method: "POST",
+		path: "/api/dsh/plugin-installs",
+		params: EmptyParamsSchema,
+		request: z.object({
+			token: NonEmptyStringSchema,
+			approvedBuilds: z.array(NonEmptyStringSchema).default([]),
+			operationId: z.string().uuid().optional()
+		}).strict(),
+		response: z.object({
+			packageId: DshPluginPackageIdSchema,
+			operationId: z.string().uuid().optional()
+		}).strict(),
+		error: HostApiErrorSchema
+	}),
+	inspectDshPluginEntryConfig: defineContract({
+		method: "POST",
+		path: "/api/dsh/plugin-entries/:entryId/config/inspect",
+		params: dshPluginEntryParam,
+		request: NoRequestBodySchema,
+		response: z.discriminatedUnion("mode", [
+			z.object({
+				mode: z.literal("schema"),
+				schema: JsonValueSchema
+			}).strict(),
+			z.object({ mode: z.literal("json") }).strict(),
+			z.object({
+				mode: z.literal("incompatible"),
+				reason: NonEmptyStringSchema
+			}).strict()
+		]),
+		error: HostApiErrorSchema
+	}),
+	activateDshPluginEntry: defineContract({
+		method: "PUT",
+		path: "/api/dsh/plugin-entries/:entryId/activation",
+		params: dshPluginEntryParam,
+		request: z.object({
+			target: z.enum(["host", "agent"]),
+			agentId: AgentIdSchema.optional(),
+			config: JsonValueSchema,
+			permissionApproval: z.object({ permissionDigest: z.string().regex(/^[a-f0-9]{64}$/u) }).strict().optional()
+		}).strict(),
+		response: z.object({ targetKey: NonEmptyStringSchema }).strict(),
+		error: HostApiErrorSchema
+	}),
+	deactivateDshPluginEntry: defineContract({
+		method: "DELETE",
+		path: "/api/dsh/plugin-entries/:entryId/activation",
+		params: dshPluginEntryParam,
+		request: z.object({ targetKey: NonEmptyStringSchema }).strict(),
+		response: z.object({ disabled: z.literal(true) }).strict(),
+		error: HostApiErrorSchema
+	}),
+	removeDshPluginPackage: defineContract({
+		invalidatesSnapshot: true,
+		method: "DELETE",
+		path: "/api/dsh/plugin-installs/:packageId",
+		params: dshPluginPackageParam,
+		request: NoRequestBodySchema,
+		response: z.object({ removed: z.literal(true) }).strict(),
+		error: HostApiErrorSchema
+	}),
+	inspectExtensionImport: defineContract({
+		timeoutMs: 3e5,
+		method: "POST",
+		path: "/api/extensions/imports/inspect",
+		params: EmptyParamsSchema,
+		request: BinaryUploadRequestSchema,
+		encodeRequest: encodeBinaryUpload,
+		response: ExtensionImportInspectionSchema,
+		error: HostApiErrorSchema
+	}),
+	/**
+	* Management-edge endpoints: they exist only when the Server is reached through its management edge (a management
+	* key is set); clients tell that from the edge's CSRF cookie.
+	*/
+	listManagementDevices: defineContract({
+		method: "GET",
+		path: "/api/management/devices",
+		params: EmptyParamsSchema,
+		request: NoRequestBodySchema,
+		response: z.object({ devices: z.array(ManagementDeviceViewSchema) }).strict(),
+		error: HostApiErrorSchema
+	}),
+	revokeManagementDevice: defineContract({
+		method: "DELETE",
+		path: "/api/management/devices/:deviceId",
+		params: z.object({ deviceId: ManagementDeviceIdSchema }).strict(),
+		request: NoRequestBodySchema,
+		response: z.object({ revoked: z.boolean() }).strict(),
+		error: HostApiErrorSchema
+	}),
+	managementLogout: defineContract({
+		method: "DELETE",
+		path: "/api/management/session",
+		params: EmptyParamsSchema,
+		request: NoRequestBodySchema,
+		response: z.object({ authenticated: z.literal(false) }).strict(),
+		error: HostApiErrorSchema
+	}),
+	getCommunityStatus: defineContract({
+		method: "GET",
+		path: "/api/community/status",
+		params: EmptyParamsSchema,
+		request: NoRequestBodySchema,
+		response: CommunityStatusSchema,
+		error: HostApiErrorSchema
+	}),
+	startCommunityLogin: defineContract({
+		method: "POST",
+		path: "/api/community/login",
+		params: EmptyParamsSchema,
+		/** 浏览器当前访问本实例使用的来源；社区授权完成后回到 `<returnOrigin>/community/callback`。 */
+		request: z.object({ returnOrigin: z.string().url().max(300) }).strict(),
+		response: z.object({ authorizeUrl: z.string().url() }).strict(),
+		error: HostApiErrorSchema
+	}),
+	communityLogout: defineContract({
+		method: "DELETE",
+		path: "/api/community/login",
+		params: EmptyParamsSchema,
+		request: NoRequestBodySchema,
+		response: CommunityStatusSchema,
+		error: HostApiErrorSchema
+	}),
+	listCommunityExtensions: defineContract({
+		timeoutMs: 3e4,
+		method: "GET",
+		path: "/api/community/extensions",
+		params: z.object({
+			query: z.string().trim().max(80).optional(),
+			scope: z.enum([
+				"agent",
+				"host-adapter",
+				"host-ui"
+			]).optional(),
+			cursor: z.string().max(200).optional()
+		}).strict(),
+		request: NoRequestBodySchema,
+		response: z.object({
+			items: z.array(CommunityExtensionSummarySchema),
+			nextCursor: z.string().nullable()
+		}).strict(),
+		error: HostApiErrorSchema
+	}),
+	getCommunityExtension: defineContract({
+		timeoutMs: 3e4,
+		method: "GET",
+		path: "/api/community/extensions/:extensionId",
+		params: z.object({ extensionId: ExtensionIdSchema }).strict(),
+		request: NoRequestBodySchema,
+		response: CommunityExtensionDetailSchema,
+		error: HostApiErrorSchema
+	}),
+	/** 下载社区发布并按包摘要校验，结果与本地文件导入的检查相同，再经 `commitExtensionImport` 确认。 */
+	getCommunityEndpoint: defineContract({
+		method: "GET",
+		path: "/api/community/endpoint",
+		params: EmptyParamsSchema,
+		request: NoRequestBodySchema,
+		response: CommunityEndpointSchema,
+		error: HostApiErrorSchema
+	}),
+	/** 修改社区地址；`url: null` 恢复为环境变量或默认地址。非加密的局域网地址需要确认风险。 */
+	updateCommunityEndpoint: defineContract({
+		method: "PUT",
+		path: "/api/community/endpoint",
+		params: EmptyParamsSchema,
+		request: z.object({
+			url: z.string().max(300).nullable(),
+			acknowledgeInsecure: z.boolean()
+		}).strict(),
+		response: CommunityEndpointSchema,
+		error: HostApiErrorSchema
+	}),
+	testCommunityEndpoint: defineContract({
+		timeoutMs: 3e4,
+		method: "POST",
+		path: "/api/community/endpoint/test",
+		params: EmptyParamsSchema,
+		request: z.object({
+			url: z.string().max(300),
+			acknowledgeInsecure: z.boolean()
+		}).strict(),
+		response: z.object({
+			ok: z.boolean(),
+			message: z.string(),
+			name: z.string().optional(),
+			environment: z.enum([
+				"production",
+				"staging",
+				"development"
+			]).optional()
+		}).strict(),
+		error: HostApiErrorSchema
+	}),
+	listCommunityInstalled: defineContract({
+		timeoutMs: 3e4,
+		method: "GET",
+		path: "/api/community/installed",
+		params: z.object({ refresh: z.enum(["1"]).optional() }).strict(),
+		request: NoRequestBodySchema,
+		response: CommunityInstalledSchema,
+		error: HostApiErrorSchema
+	}),
+	listCommunityMine: defineContract({
+		timeoutMs: 3e4,
+		method: "GET",
+		path: "/api/community/mine",
+		params: EmptyParamsSchema,
+		request: NoRequestBodySchema,
+		response: z.object({ items: z.array(CommunityMyExtensionSchema) }).strict(),
+		error: HostApiErrorSchema
+	}),
+	getCommunityReleaseReview: defineContract({
+		timeoutMs: 3e4,
+		method: "GET",
+		path: "/api/community/releases/:releaseId/review",
+		params: z.object({ releaseId: CommunityReleaseIdSchema }).strict(),
+		request: NoRequestBodySchema,
+		response: CommunityReviewReportSchema,
+		error: HostApiErrorSchema
+	}),
+	requestCommunityReview: defineContract({
+		timeoutMs: 3e4,
+		method: "POST",
+		path: "/api/community/releases/:releaseId/review",
+		params: z.object({ releaseId: CommunityReleaseIdSchema }).strict(),
+		request: NoRequestBodySchema,
+		response: z.object({ ok: z.literal(true) }).strict(),
+		error: HostApiErrorSchema
+	}),
+	withdrawCommunityRelease: defineContract({
+		timeoutMs: 3e4,
+		method: "POST",
+		path: "/api/community/releases/:releaseId/withdraw",
+		params: z.object({ releaseId: CommunityReleaseIdSchema }).strict(),
+		request: NoRequestBodySchema,
+		response: z.object({ ok: z.literal(true) }).strict(),
+		error: HostApiErrorSchema
+	}),
+	importCommunityRelease: defineContract({
+		timeoutMs: 12e4,
+		method: "POST",
+		path: "/api/community/releases/:releaseId/import",
+		params: z.object({ releaseId: CommunityReleaseIdSchema }).strict(),
+		request: NoRequestBodySchema,
+		response: ExtensionImportInspectionSchema,
+		error: HostApiErrorSchema
+	}),
+	publishToCommunity: defineContract({
+		timeoutMs: 12e4,
+		method: "POST",
+		path: "/api/community/publish",
+		params: EmptyParamsSchema,
+		request: z.object({
+			extensionId: ExtensionIdSchema,
+			revisionId: ExtensionRevisionIdSchema,
+			notes: z.string().max(2e3)
+		}).strict(),
+		response: z.object({
+			releaseId: CommunityReleaseIdSchema,
+			reviewStatus: CommunityReviewStatusSchema,
+			pageUrl: z.string().url(),
+			reportUrl: z.string().url(),
+			findings: z.array(z.object({
+				severity: z.string(),
+				title: z.string()
+			}).strict())
+		}).strict(),
+		error: HostApiErrorSchema
+	}),
+	testMcpServer: defineContract({
+		timeoutMs: 3e4,
+		method: "POST",
+		path: "/api/mcp-servers/test",
+		params: EmptyParamsSchema,
+		request: z.object({ server: McpServerFormSchema }).strict(),
+		response: z.object({
+			ok: z.boolean(),
+			message: z.string(),
+			serverName: z.string().optional(),
+			tools: z.array(z.object({
+				name: z.string(),
+				description: z.string().optional()
+			}).strict())
+		}).strict(),
+		error: HostApiErrorSchema
+	}),
+	createMcpExtension: defineContract({
+		invalidatesSnapshot: true,
+		timeoutMs: 12e4,
+		method: "POST",
+		path: "/api/mcp-servers",
+		params: EmptyParamsSchema,
+		request: z.object({
+			displayName: z.string().trim().min(1).max(80),
+			description: z.string().trim().max(500).default(""),
+			server: McpServerFormSchema
+		}).strict(),
+		response: z.object({
+			extensionId: ExtensionIdSchema,
+			revisionId: ExtensionRevisionIdSchema,
+			/** Credential config fields created for the form's secret rows, by row name. */
+			secretFields: z.array(z.object({
+				key: z.string(),
+				name: z.string()
+			}).strict())
+		}).strict(),
+		error: HostApiErrorSchema
+	}),
+	commitExtensionImport: defineContract({
+		invalidatesSnapshot: true,
+		timeoutMs: 3e5,
+		method: "POST",
+		path: "/api/extensions/imports/:token/commit",
+		params: z.object({ token: NonEmptyStringSchema }).strict(),
+		request: z.object({ localSlug: z.string().trim().min(3).max(64).optional() }).strict(),
+		response: z.object({
+			extensionId: ExtensionIdSchema,
+			revisionId: ExtensionRevisionIdSchema,
+			idempotent: z.boolean()
+		}).strict(),
+		error: HostApiErrorSchema
+	}),
+	dshSettings: defineContract({
+		method: "GET",
+		path: "/api/dsh/settings",
+		params: EmptyParamsSchema,
+		request: NoRequestBodySchema,
+		response: z.object({ namespaces: z.array(DshSettingsNamespaceSchema) }).strict(),
+		error: HostApiErrorSchema
+	}),
+	dshSettingsMutate: defineContract({
+		invalidatesSnapshot: true,
+		method: "POST",
+		path: "/api/dsh/settings/:namespace/mutate",
+		params: dshSettingsParam,
+		request: DshSettingsMutationRequestSchema,
+		response: DshSettingsNamespaceSchema,
+		error: HostApiErrorSchema
+	}),
+	dshCredentialsDescribe: defineContract({
+		method: "POST",
+		path: "/api/dsh/credentials/describe",
+		params: EmptyParamsSchema,
+		request: z.object({ refs: z.array(DshCredentialRefSchema).max(64) }).strict(),
+		response: z.object({ credentials: z.record(z.string(), DshCredentialViewSchema) }).strict(),
+		error: HostApiErrorSchema
+	}),
+	dshCredentialSet: defineContract({
+		invalidatesSnapshot: true,
+		method: "PUT",
+		path: "/api/dsh/credentials/:ref",
+		params: dshCredentialParam,
+		request: z.object({ value: z.string().min(1).max(64 * 1024) }).strict(),
+		response: DshCredentialViewSchema,
+		error: HostApiErrorSchema
+	}),
+	dshCredentialUnset: defineContract({
+		invalidatesSnapshot: true,
+		method: "DELETE",
+		path: "/api/dsh/credentials/:ref",
+		params: dshCredentialParam,
+		request: NoRequestBodySchema,
+		response: DshCredentialViewSchema,
+		error: HostApiErrorSchema
+	}),
+	llmProviders: defineContract({
+		method: "GET",
+		path: "/api/llm/providers",
+		params: EmptyParamsSchema,
+		request: NoRequestBodySchema,
+		response: LlmProviderSettingsSchema,
+		error: HostApiErrorSchema
+	}),
+	llmDiscoverModels: defineContract({
+		method: "POST",
+		path: "/api/llm/discover-models",
+		params: EmptyParamsSchema,
+		request: z.object({
+			provider: NonEmptyStringSchema.optional(),
+			settingsNs: NonEmptyStringSchema.optional(),
+			baseURL: z.url().optional(),
+			api: NonEmptyStringSchema.optional(),
+			apiKey: z.string().min(1).max(64 * 1024).optional()
+		}).strict(),
+		response: z.object({ models: z.array(LlmDiscoveredModelSchema) }).strict(),
+		error: HostApiErrorSchema
+	}),
+	llmTestProvider: defineContract({
+		method: "POST",
+		path: "/api/llm/test-provider",
+		params: EmptyParamsSchema,
+		request: z.object({
+			provider: NonEmptyStringSchema,
+			model: NonEmptyStringSchema,
+			settingsNs: NonEmptyStringSchema.optional(),
+			apiKey: z.string().min(1).max(64 * 1024).optional(),
+			baseURL: z.url().optional(),
+			api: NonEmptyStringSchema.optional(),
+			models: z.array(LlmDiscoveredModelSchema).optional()
+		}).strict(),
+		response: z.object({
+			provider: NonEmptyStringSchema,
+			model: NonEmptyStringSchema
+		}).strict(),
+		error: HostApiErrorSchema
+	}),
+	llmProviderRemovalImpact: defineContract({
+		method: "GET",
+		path: "/api/llm/providers/:provider/removal-impact",
+		params: llmProviderParam,
+		request: NoRequestBodySchema,
+		response: z.object({
+			provider: NonEmptyStringSchema,
+			displayName: NonEmptyStringSchema,
+			declared: z.boolean(),
+			expectedRevision: z.number().int().nonnegative(),
+			models: z.array(NonEmptyStringSchema),
+			blockedReason: z.string(),
+			references: z.array(z.object({
+				agentId: AgentIdSchema,
+				displayName: NonEmptyStringSchema,
+				model: NonEmptyStringSchema,
+				role: z.enum(["primary", "vision"]),
+				scope: z.enum(["configuration", "context"]),
+				channelId: ChannelIdSchema.optional(),
+				channelName: z.string().optional(),
+				episodeStatus: z.enum(["opening", "active"]).optional()
+			}).strict())
+		}).strict(),
+		error: HostApiErrorSchema
+	}),
+	llmRemoveProvider: defineContract({
+		invalidatesSnapshot: true,
+		method: "DELETE",
+		path: "/api/llm/providers/:provider",
+		params: llmProviderParam,
+		request: z.object({ expectedRevision: z.number().int().nonnegative() }).strict(),
+		response: LlmProviderSettingsSchema,
+		error: HostApiErrorSchema
+	}),
+	llmRestoreProviderModels: defineContract({
+		invalidatesSnapshot: true,
+		method: "POST",
+		path: "/api/llm/providers/:provider/restore-models",
+		params: llmProviderParam,
+		request: z.object({ expectedRevision: z.number().int().nonnegative() }).strict(),
+		response: LlmProviderSettingsSchema,
+		error: HostApiErrorSchema
+	}),
+	llmSaveProvider: defineContract({
+		invalidatesSnapshot: true,
+		method: "POST",
+		path: "/api/llm/providers/:provider",
+		params: llmProviderParam,
+		request: z.object({
+			expectedRevision: z.number().int().nonnegative(),
+			apiKey: z.string().min(1).max(64 * 1024).optional(),
+			displayName: z.string().trim().min(1).max(120).optional(),
+			baseURL: z.url().optional(),
+			api: NonEmptyStringSchema.optional(),
+			models: z.array(LlmDiscoveredModelSchema).optional()
+		}).strict(),
+		response: LlmProviderSettingsSchema,
+		error: HostApiErrorSchema
+	}),
+	testConnection: defineContract({
+		invalidatesSnapshot: true,
+		method: "POST",
+		path: "/api/connections/:connectionId/test",
+		params: connectionParam,
+		request: z.object({
+			direction: z.enum(["send", "receive"]),
+			channelId: ChannelIdSchema.optional()
+		}).strict(),
+		response: ConnectionTestResultSchema,
+		error: HostApiErrorSchema
+	}),
+	dynamicInventory: defineContract({
+		method: "POST",
+		path: "/api/dynamic/:agentId/inventory",
+		params: agentParam,
+		request: z.object({ episodeId: EpisodeIdSchema }).strict(),
+		response: z.object({ rows: z.array(DynamicInventoryRowSchema) }).strict(),
+		error: HostApiErrorSchema
+	}),
+	dynamicApprove: defineContract({
+		invalidatesSnapshot: true,
+		method: "POST",
+		path: "/api/dynamic/:agentId/approve",
+		params: agentParam,
+		request: z.object({
+			episodeId: EpisodeIdSchema,
+			requestId: DynamicIdSchema,
+			pluginRunId: DynamicIdSchema.optional()
+		}).strict(),
+		response: z.object({ accepted: z.boolean() }).strict(),
+		error: HostApiErrorSchema
+	}),
+	dynamicDecline: defineContract({
+		invalidatesSnapshot: true,
+		method: "POST",
+		path: "/api/dynamic/:agentId/decline",
+		params: agentParam,
+		request: z.object({
+			episodeId: EpisodeIdSchema,
+			requestId: DynamicIdSchema,
+			pluginRunId: DynamicIdSchema.optional()
+		}).strict(),
+		response: z.object({ accepted: z.boolean() }).strict(),
+		error: HostApiErrorSchema
+	}),
+	dynamicInvoke: defineContract({
+		method: "POST",
+		path: "/api/dynamic/:agentId/invoke",
+		params: agentParam,
+		request: z.object({
+			episodeId: EpisodeIdSchema,
+			pluginId: DynamicIdSchema,
+			pluginRunId: DynamicIdSchema,
+			method: NonEmptyStringSchema,
+			args: JsonValueSchema.optional()
+		}).strict(),
+		response: z.discriminatedUnion("ok", [z.object({
+			ok: z.literal(true),
+			value: JsonValueSchema
+		}).strict(), z.object({
+			ok: z.literal(false),
+			message: z.string()
+		}).strict()]),
+		error: HostApiErrorSchema
+	}),
+	dynamicRunHostHalf: defineContract({
+		method: "POST",
+		path: "/api/dynamic/:agentId/run-host-half",
+		params: agentParam,
+		request: z.object({
+			episodeId: EpisodeIdSchema,
+			pluginId: DynamicIdSchema,
+			packageId: DynamicIdSchema,
+			mode: z.enum(["run", "update"]),
+			requestId: DynamicIdSchema.nullable().optional(),
+			approveFutureVersions: z.boolean().default(false)
+		}).strict(),
+		response: z.discriminatedUnion("ok", [z.object({
+			ok: z.literal(true),
+			pluginId: DynamicIdSchema,
+			packageId: DynamicIdSchema,
+			pluginRunId: DynamicIdSchema,
+			waitingFor: z.array(z.string()),
+			startedHere: z.boolean()
+		}).strict(), DynamicErrorDetailsSchema.extend({ ok: z.literal(false) })]),
+		error: HostApiErrorSchema
+	}),
+	dynamicSettleUserRun: defineContract({
+		method: "POST",
+		path: "/api/dynamic/:agentId/settle-user-run",
+		params: agentParam,
+		request: z.object({
+			episodeId: EpisodeIdSchema,
+			pluginId: DynamicIdSchema,
+			resolution: DynamicRunResolutionSchema
+		}).strict(),
+		response: DynamicRunResponseSchema,
+		error: HostApiErrorSchema
+	}),
+	dynamicGetClientCode: defineContract({
+		method: "POST",
+		path: "/api/dynamic/:agentId/get-client-code",
+		params: agentParam,
+		request: z.object({
+			episodeId: EpisodeIdSchema,
+			pluginId: DynamicIdSchema,
+			pluginRunId: DynamicIdSchema
+		}).strict(),
+		response: z.object({
+			code: z.string(),
+			name: z.string(),
+			pluginId: DynamicIdSchema,
+			packageId: DynamicIdSchema,
+			pluginRunId: DynamicIdSchema,
+			/** What the candidate declared; preview data hooks enforce exactly what the saved Revision will. */
+			permissions: HostUiPermissionDeclarationSchema.default({
+				permissions: [],
+				networkOrigins: []
+			})
+		}).strict(),
+		error: HostApiErrorSchema
+	}),
+	dynamicReportRenderFailure: defineContract({
+		method: "POST",
+		path: "/api/dynamic/:agentId/report-render-failure",
+		params: agentParam,
+		request: z.object({
+			episodeId: EpisodeIdSchema,
+			pluginId: DynamicIdSchema,
+			pluginRunId: DynamicIdSchema,
+			failure: DynamicRenderFailureSchema
+		}).strict(),
+		response: z.object({ ok: z.literal(true) }).strict(),
+		error: HostApiErrorSchema
+	}),
+	dynamicReportGuardFailure: defineContract({
+		method: "POST",
+		path: "/api/dynamic/:agentId/report-guard-failure",
+		params: agentParam,
+		request: z.object({
+			episodeId: EpisodeIdSchema,
+			pluginId: DynamicIdSchema,
+			pluginRunId: DynamicIdSchema,
+			message: z.string().min(1).max(4096),
+			stack: z.string().max(16 * 1024).optional()
+		}).strict(),
+		response: z.object({ ok: z.literal(true) }).strict(),
+		error: HostApiErrorSchema
+	}),
+	dynamicReportClientVerification: defineContract({
+		method: "POST",
+		path: "/api/dynamic/:agentId/report-client-verification",
+		params: agentParam,
+		request: z.object({
+			episodeId: EpisodeIdSchema,
+			pluginId: DynamicIdSchema,
+			packageId: DynamicIdSchema,
+			pluginRunId: DynamicIdSchema,
+			renderedPanels: z.array(PanelContributionSchema).max(16).default([]),
+			renderedToolViews: z.array(z.string().trim().min(1).max(64)).max(32).default([]),
+			renderedMessageRenderers: z.array(RichKindSchema).max(32).default([]),
+			renderedPages: z.array(HostPageContributionSchema).max(8).default([]),
+			usedUiComponents: z.array(HostUiKitComponentNameSchema).max(HostUiKitComponentNameSchema.options.length).default([]),
+			pageGeometry: z.array(HostUiPageGeometryEvidenceSchema).max(8).default([]),
+			navigationEntries: z.array(z.string().trim().min(1).max(64)).max(8).default([])
+		}).strict().refine((value) => value.renderedPanels.length > 0 || value.renderedToolViews.length > 0 || value.renderedMessageRenderers.length > 0 || value.renderedPages.length > 0, { message: "动态 Client 必须真实渲染至少一个面板、工具视图、富消息渲染器或页面。" }),
+		response: z.object({ ok: z.literal(true) }).strict(),
+		error: HostApiErrorSchema
+	}),
+	saveExtensionFromDynamic: defineContract({
+		invalidatesSnapshot: true,
+		timeoutMs: 3e5,
+		method: "POST",
+		path: "/api/extensions/save-from-dynamic",
+		params: EmptyParamsSchema,
+		request: z.union([z.object({
+			taskId: AuthoringTaskIdSchema,
+			attemptId: AuthoringAttemptIdSchema,
+			displayName: z.string().trim().min(1).max(80),
+			slug: z.string().trim().regex(/^[a-z0-9][a-z0-9-]{1,62}[a-z0-9]$/u),
+			description: z.string().max(500).default(""),
+			targetExtensionId: ExtensionIdSchema.optional()
+		}).strict(), z.object({
+			agentId: AgentIdSchema,
+			episodeId: EpisodeIdSchema,
+			pluginId: DynamicIdSchema,
+			packageId: DynamicIdSchema,
+			displayName: z.string().trim().min(1).max(80),
+			slug: z.string().trim().regex(/^[a-z0-9][a-z0-9-]{1,62}[a-z0-9]$/u),
+			description: z.string().max(500).default(""),
+			targetExtensionId: ExtensionIdSchema.optional()
+		}).strict()]),
+		response: z.object({
+			extensionId: ExtensionIdSchema,
+			revisionId: ExtensionRevisionIdSchema,
+			activation: z.literal("inactive"),
+			installation: z.literal("uninstalled").optional()
+		}).strict(),
+		error: HostApiErrorSchema
+	}),
+	extensionClientCall: defineContract({
+		method: "POST",
+		path: "/api/extensions/:extensionId/revisions/:revisionId/call",
+		params: extensionRevisionParam,
+		request: z.object({
+			agentId: AgentIdSchema,
+			method: NonEmptyStringSchema,
+			input: JsonValueSchema.optional()
+		}).strict(),
+		response: z.object({ value: JsonValueSchema }).strict(),
+		error: HostApiErrorSchema
+	}),
+	extensionClientDiagnostic: defineContract({
+		method: "POST",
+		path: "/api/extensions/:extensionId/revisions/:revisionId/client-diagnostic",
+		params: extensionRevisionParam,
+		request: z.object({
+			agentId: AgentIdSchema,
+			status: z.enum(["loaded", "failed"]),
+			message: z.string().max(4096).optional()
+		}).strict(),
+		response: z.object({ accepted: z.literal(true) }).strict(),
+		error: HostApiErrorSchema
+	}),
+	hostExtensionClientDiagnostic: defineContract({
+		method: "POST",
+		path: "/api/extensions/:extensionId/revisions/:revisionId/host-client-diagnostic",
+		params: extensionRevisionParam,
+		request: z.object({
+			status: z.enum(["loaded", "failed"]),
+			message: z.string().max(4096).optional()
+		}).strict(),
+		response: z.object({ accepted: z.literal(true) }).strict(),
+		error: HostApiErrorSchema
+	}),
+	activateExtension: defineContract({
+		invalidatesSnapshot: true,
+		method: "POST",
+		path: "/api/agents/:agentId/extensions/:extensionId/activation",
+		params: agentExtensionParam,
+		request: z.object({
+			revisionId: ExtensionRevisionIdSchema,
+			permissionApproval: z.object({ permissionDigest: z.string().regex(/^[a-f0-9]{64}$/u) }).strict().optional()
+		}).strict(),
+		response: z.object({ activation: z.object({
+			agentId: AgentIdSchema,
+			extensionId: ExtensionIdSchema,
+			extensionRevisionId: ExtensionRevisionIdSchema,
+			config: JsonValueSchema,
+			configuredSecrets: z.array(z.string()).optional(),
+			activatedAt: z.number().int().safe().nonnegative()
+		}).strict() }).strict(),
+		error: HostApiErrorSchema
+	}),
+	deactivateExtension: defineContract({
+		invalidatesSnapshot: true,
+		method: "DELETE",
+		path: "/api/agents/:agentId/extensions/:extensionId/activation",
+		params: agentExtensionParam,
+		request: NoRequestBodySchema,
+		response: z.object({ disabled: z.literal(true) }).strict(),
+		error: HostApiErrorSchema
+	}),
+	updateExtensionActivationConfig: defineContract({
+		invalidatesSnapshot: true,
+		method: "PUT",
+		path: "/api/agents/:agentId/extensions/:extensionId/activation/config",
+		params: agentExtensionParam,
+		request: z.object({
+			config: JsonValueSchema,
+			/** Write-only credential drafts keyed by secret field; an absent or empty draft keeps the stored one. */
+			secrets: z.record(z.string(), z.string().max(8192)).optional()
+		}).strict(),
+		response: z.object({
+			config: JsonValueSchema,
+			configuredSecrets: z.array(z.string()).optional()
+		}).strict(),
+		error: HostApiErrorSchema
+	}),
+	updateHostExtensionConfig: defineContract({
+		invalidatesSnapshot: true,
+		timeoutMs: 3e5,
+		method: "PUT",
+		path: "/api/extensions/:extensionId/installation/config",
+		params: extensionParam,
+		request: z.object({ config: JsonValueSchema }).strict(),
+		response: z.object({ config: JsonValueSchema }).strict(),
+		error: HostApiErrorSchema
+	}),
+	installHostExtension: defineContract({
+		invalidatesSnapshot: true,
+		timeoutMs: 3e5,
+		method: "PUT",
+		path: "/api/extensions/:extensionId/installation",
+		params: extensionParam,
+		request: z.object({
+			revisionId: ExtensionRevisionIdSchema,
+			permissionApproval: z.object({ permissionDigest: z.string().regex(/^[a-f0-9]{64}$/u) }).strict().optional()
+		}).strict(),
+		response: z.object({ installation: z.object({
+			extensionId: ExtensionIdSchema,
+			extensionRevisionId: ExtensionRevisionIdSchema,
+			installedAt: z.number().int().safe().nonnegative(),
+			config: JsonValueSchema
+		}).strict() }).strict(),
+		error: HostApiErrorSchema
+	}),
+	uninstallHostExtension: defineContract({
+		invalidatesSnapshot: true,
+		timeoutMs: 3e5,
+		method: "DELETE",
+		path: "/api/extensions/:extensionId/installation",
+		params: extensionParam,
+		request: NoRequestBodySchema,
+		response: z.object({ uninstalled: z.literal(true) }).strict(),
+		error: HostApiErrorSchema
+	}),
+	updateHostUiPagePreferences: defineContract({
+		invalidatesSnapshot: true,
+		method: "PUT",
+		path: "/api/host-ui/page-preferences",
+		params: EmptyParamsSchema,
+		request: z.object({
+			expectedRevision: z.number().int().nonnegative(),
+			entries: z.array(z.object({
+				pageInstanceId: HostUiPageInstanceIdSchema,
+				visible: z.boolean()
+			}).strict())
+		}).strict(),
+		response: z.object({ revision: z.number().int().positive() }).strict(),
+		error: HostApiErrorSchema
+	}),
+	callHostUiPage: defineContract({
+		method: "POST",
+		path: "/api/host-ui/pages/:pageInstanceId/call",
+		params: z.object({ pageInstanceId: HostUiPageInstanceIdSchema }).strict(),
+		request: z.object({
+			method: NonEmptyStringSchema,
+			input: JsonValueSchema.default({})
+		}).strict(),
+		response: z.object({ value: JsonValueSchema }).strict(),
+		error: HostApiErrorSchema
+	}),
+	reportHostUiPageDiagnostic: defineContract({
+		method: "POST",
+		path: "/api/host-ui/pages/:pageInstanceId/diagnostic",
+		params: z.object({ pageInstanceId: HostUiPageInstanceIdSchema }).strict(),
+		request: z.object({
+			status: z.enum([
+				"ready",
+				"load-failed",
+				"navigation-failed",
+				"rpc-failed"
+			]),
+			message: z.string().max(2e3).optional()
+		}).strict(),
+		response: z.object({ recorded: z.literal(true) }).strict(),
+		error: HostApiErrorSchema
+	}),
+	markChannelRead: defineContract({
+		method: "POST",
+		path: "/api/channels/:channelId/read",
+		params: channelParam,
+		request: z.object({ 
+		/** Defaults to the newest inbound fact visible now. */
+upTo: z.object({
+			occurredAt: z.number().int().safe().nonnegative(),
+			sourceId: ChannelEventIdSchema
+		}).strict().optional() }).strict(),
+		response: z.object({
+			channelId: ChannelIdSchema,
+			activity: ChannelActivitySummarySchema
+		}).strict(),
+		error: HostApiErrorSchema
+	}),
+	listAttention: defineContract({
+		method: "GET",
+		path: "/api/attention",
+		params: EmptyParamsSchema,
+		request: NoRequestBodySchema,
+		response: AttentionListSchema,
+		error: HostApiErrorSchema
+	}),
+	dismissAttention: defineContract({
+		method: "POST",
+		path: "/api/attention/:attentionId/dismiss",
+		params: z.object({ attentionId: z.string().min(1).max(200) }).strict(),
+		request: NoRequestBodySchema,
+		response: z.object({
+			dismissed: z.literal(true),
+			revision: z.string().min(1)
+		}).strict(),
+		error: HostApiErrorSchema
+	}),
+	getChannelPending: defineContract({
+		method: "GET",
+		path: "/api/channels/:channelId/pending",
+		params: channelParam,
+		request: NoRequestBodySchema,
+		response: ChannelPendingContextSchema,
+		error: HostApiErrorSchema
+	}),
+	stopChannelTask: defineContract({
+		method: "POST",
+		path: "/api/channels/:channelId/stop",
+		params: channelParam,
+		request: z.object({ expectedEpisodeId: EpisodeIdSchema.optional() }).strict(),
+		response: z.object({
+			result: z.enum(["stopped", "idle"]),
+			episodeId: EpisodeIdSchema.optional(),
+			/** Admitted messages that were not yet consumed and remain queued for the next turn. */
+			retainedPending: z.number().int().nonnegative()
+		}).strict(),
+		error: HostApiErrorSchema
+	}),
+	resolveOutbound: defineContract({
+		method: "POST",
+		path: "/api/outbound/:outboundId/resolve",
+		params: z.object({ outboundId: OutboundIntentIdSchema }).strict(),
+		request: z.object({ action: z.enum(["retry", "confirm-delivered"]) }).strict(),
+		response: z.object({
+			outboundId: OutboundIntentIdSchema,
+			action: z.enum(["retry", "confirm-delivered"]),
+			deliveryState: z.enum([
+				"planned",
+				"sending",
+				"sent",
+				"partially-sent",
+				"failed",
+				"unknown"
+			]),
+			resolvedAt: z.number().int().safe().nonnegative()
+		}).strict(),
+		error: HostApiErrorSchema
+	}),
+	getChannelActivity: defineContract({
+		method: "GET",
+		path: "/api/activity",
+		params: ActivityQuerySchema,
+		request: NoRequestBodySchema,
+		response: ChannelActivitySeriesSchema,
+		error: HostApiErrorSchema
+	}),
+	listAgentRevisions: defineContract({
+		method: "GET",
+		path: "/api/agents/:agentId/revisions",
+		params: agentParam,
+		request: NoRequestBodySchema,
+		response: AgentRevisionHistorySchema,
+		error: HostApiErrorSchema
+	}),
+	restoreAgentRevision: defineContract({
+		invalidatesSnapshot: true,
+		method: "POST",
+		path: "/api/agents/:agentId/revisions/:revisionId/restore",
+		params: agentRevisionParam,
+		request: z.object({ expectedCurrentRevisionId: AgentRevisionIdSchema }).strict(),
+		response: z.object({ currentRevisionId: AgentRevisionIdSchema }).strict(),
+		error: HostApiErrorSchema
+	}),
+	updateAgentAppearance: defineContract({
+		invalidatesSnapshot: true,
+		method: "PATCH",
+		path: "/api/agents/:agentId/appearance",
+		params: agentParam,
+		request: z.object({
+			hue: z.number().int().min(0).max(359).nullable().optional(),
+			/** `null` removes the avatar; uploading uses `uploadAgentAvatar`. */
+			avatarAssetId: z.null().optional()
+		}).strict(),
+		response: z.object({
+			agentId: AgentIdSchema,
+			appearance: AgentAppearanceSchema
+		}).strict(),
+		error: HostApiErrorSchema
+	}),
+	uploadAgentAvatar: defineContract({
+		invalidatesSnapshot: true,
+		method: "POST",
+		path: "/api/agents/:agentId/avatar",
+		params: agentParam,
+		request: BinaryUploadRequestSchema,
+		encodeRequest: encodeBinaryUpload,
+		response: z.object({
+			agentId: AgentIdSchema,
+			appearance: AgentAppearanceSchema
+		}).strict(),
+		error: HostApiErrorSchema
+	}),
+	deleteLocalExtension: defineContract({
+		invalidatesSnapshot: true,
+		method: "DELETE",
+		path: "/api/extensions/:extensionId",
+		params: extensionParam,
+		request: NoRequestBodySchema,
+		response: z.object({ deleted: z.literal(true) }).strict(),
+		error: HostApiErrorSchema
+	})
+};
+const pathParameterPattern = /:([A-Za-z][A-Za-z0-9]*)/gu;
+/** Build the transport URL only after all path/query parameters pass the shared schema. */
+const buildValidatedHostApiPath = (contract, input) => {
+	const params = z.record(z.string(), z.unknown()).parse(contract.params.parse(input));
+	const consumed = /* @__PURE__ */ new Set();
+	const pathname = contract.path.replace(pathParameterPattern, (_placeholder, key) => {
+		const value = params[key];
+		if (typeof value !== "string") throw new TypeError(`Host API path parameter ${key} must be a string.`);
+		consumed.add(key);
+		return encodeURIComponent(value);
+	});
+	const query = new URLSearchParams();
+	for (const [key, value] of Object.entries(params)) {
+		if (consumed.has(key) || value === void 0) continue;
+		if (typeof value !== "string" && typeof value !== "number" && typeof value !== "boolean") throw new TypeError(`Host API query parameter ${key} must be a string, number, or boolean.`);
+		query.set(key, String(value));
+	}
+	const suffix = query.toString();
+	return suffix ? `${pathname}?${suffix}` : pathname;
+};
+function buildHostApiContractPath(contract, input) {
+	return buildValidatedHostApiPath(contract, input);
+}
+function buildHostApiPath(name, input) {
+	return buildValidatedHostApiPath(HostApiContracts[name], input);
+}
+//#endregion
+export { ACTIVITY_MAX_BUCKETS, ACTIVITY_MAX_WINDOW_MS, ACTIVITY_MIN_BUCKET_MS, ADAPTER_PANEL_ANCHORS, AGENT_PANEL_ANCHORS, ActivityQuerySchema, AdapterActivityKeySchema, AdmissionIdSchema, AgentAppearanceSchema, AgentIdSchema, AgentRevisionChangedFieldSchema, AgentRevisionHistorySchema, AgentRevisionIdSchema, AssetIdSchema, AttentionItemSchema, AttentionListSchema, AuthoringAttemptIdSchema, AuthoringTaskIdSchema, CHANNEL_UNREAD_COUNT_CAP, COMMUNITY_OFFICIAL_HANDLE, COMMUNITY_REVIEW_DIMENSIONS, COMMUNITY_REVIEW_DIMENSION_LABELS, COMMUNITY_REVIEW_STATUSES, CONFIG_SCHEMA_MAX_BYTES, ChannelActivitySeriesSchema, ChannelActivitySummarySchema, ChannelEventIdSchema, ChannelFactSseDataSchema, ChannelFactSseItemSchema, ChannelIdSchema, ChannelMemberIdSchema, ChannelPendingContextSchema, ChannelRuntimeCacheSampleSchema, ChannelRuntimeCacheSchema, ChannelRuntimeOccupancySchema, ChannelRuntimePerformanceSampleSchema, ChannelRuntimePerformanceSchema, ChannelRuntimePhaseSchema, ChannelRuntimeProjectionSchema, ChannelRuntimeSseDataSchema, ChannelRuntimeStepSchema, ChannelRuntimeToolSchema, ChannelRuntimeTurnSchema, ChannelRuntimeUsageSchema, ClientNotificationFeedResponseSchema, ClientNotificationSchema, CommunityAccountSchema, CommunityEndpointSchema, CommunityEnvironmentSchema, CommunityExtensionDetailSchema, CommunityExtensionSummarySchema, CommunityGradeSchema, CommunityInstalledItemSchema, CommunityInstalledSchema, CommunityMyExtensionSchema, CommunityPermissionItemSchema, CommunityReleaseIdSchema, CommunityReleaseSchema, CommunityReviewReportSchema, CommunityReviewStatusSchema, CommunitySourceSchema, CommunityStatusSchema, ConfigSchemaDocumentSchema, ConfigSchemaMetaSchema, ConfigSchemaNodeSchema, ConnectionEventIdSchema, ConnectionIdSchema, ConnectionPanelRoleSchema, ConnectionTestResultSchema, DshCredentialRefSchema, DshCredentialViewSchema, DshCredentialsChangedSseDataSchema, DshNxtHostUiSchema, DshPluginCatalogEntrySchema, DshPluginEntryIdSchema, DshPluginOperationSseDataSchema, DshPluginPackageIdSchema, DshSettingsChangedSseDataSchema, DshSettingsMutationRequestSchema, DshSettingsNamespaceSchema, DshSettingsPathOperationSchema, DshSettingsPathSchema, DynamicChangedSseDataSchema, DynamicClientApprovalPolicySchema, EMPTY_CONFIG_SCHEMA, EMPTY_EXTENSION_UI_CONTRIBUTIONS, EXTENSION_CONTEXT_DYNAMIC_MAX_CHARS, EXTENSION_CONTEXT_STATIC_MAX_CHARS, EXTENSION_DATA_HOOK_PERMISSIONS, EXTENSION_INBOUND_HOOK_MAX_TIMEOUT_MS, EXTENSION_JOB_MAX_RUNTIME, EXTENSION_LLM_MAX_CALLS_PER_TURN, EXTENSION_LLM_MAX_OUTPUT_TOKENS, EXTENSION_SDK_LEVEL, EXTENSION_STORAGE_DEFAULT_QUOTA_BYTES, EXTENSION_STORAGE_MAX_QUOTA_BYTES, EXTENSION_STORAGE_SCOPES, EpisodeHandoffIdSchema, EpisodeIdSchema, ExtensionCapabilitiesSchema, ExtensionConfigDeclarationSchema, ExtensionContextContributionSchema, ExtensionDeclaredJobSchema, ExtensionIdSchema, ExtensionImportInspectionSchema, ExtensionInboundHookCapabilitySchema, ExtensionJobsCapabilitySchema, ExtensionLlmCapabilitySchema, ExtensionMcpCapabilitySchema, ExtensionMcpServerNameSchema, ExtensionMcpServerSchema, ExtensionMcpValueSchema, ExtensionNetworkCapabilitySchema, ExtensionNetworkDomainSchema, ExtensionPanelAnchorSchema, ExtensionPanelDeclarationSchema, ExtensionPlatformCapabilitySchema, ExtensionRequiresSchema, ExtensionRevisionIdSchema, ExtensionStorageCapabilitySchema, ExtensionStorageScopeSchema, ExtensionUiContributionsSchema, HOST_UI_KIT_COMPONENT_NAMES, HostApiContracts, HostApiErrorSchema, HostConnectionEventSchema, HostIconNameSchema, HostPageContributionSchema, HostPageIconSchema, HostSnapshotMessageSchema, HostSnapshotSchema, HostSseEventSchema, HostSseStatusDataSchema, HostSyncCursorSchema, HostUiKitComponentNameSchema, HostUiNavigationGroupSchema, HostUiNavigationItemSchema, HostUiNavigationModelSchema, HostUiNetworkOriginSchema, HostUiOwnerSchema, HostUiPageEntrySchema, HostUiPageGeometryEvidenceSchema, HostUiPageInstanceIdSchema, HostUiPagePreferencesSchema, HostUiPermissionDeclarationSchema, HostUiPermissionSchema, HostUpgradeSummarySchema, INSECURE_HTTP_MANAGEMENT_PAIR_PROOF_PREFIX, ImageUnderstandingPolicyApiSchema, InsecureHttpManagementChallengeResponseSchema, InstanceDescriptorSchema, InstanceDescriptorWireSchema, JsonValueSchema, LlmDiscoveredModelSchema, LlmModelInputModalitiesSchema, LlmProviderCredentialSchema, LlmProviderModelSchema, LlmProviderSettingsSchema, LlmProviderViewSchema, LogicalMessageIdSchema, MANAGEMENT_PAIR_PROOF_PREFIX, ManagementChallengeResponseSchema, ManagementDeviceEnrollmentRequestSchema, ManagementDeviceEnrollmentResponseSchema, ManagementDeviceIdSchema, ManagementDeviceViewSchema, ManagementSessionRequestSchema, ManagementSessionResponseSchema, McpServerFormSchema, MessagePartSchema, MessagePartsSchema, MessageRendererContributionSchema, NonEmptyMessagePartsSchema, NotificationEventKeySchema, NotificationSettingsViewSchema, OutboundIntentIdSchema, PROMPT_DOCUMENT_MAX_PLAIN_TEXT_LENGTH, PROMPT_DOCUMENT_MAX_REFERENCES, PanelContributionSchema, PanelDensitySchema, PhysicalDeliveryIdSchema, PlatformIdentityIdSchema, PlatformUserListResponseSchema, PromptDocumentV1Schema, PromptSegmentSchema, RICH_EXTENSION_MAX_BYTES, RichExtensionSchema, RichKindSchema, RichTargetUrlSchema, RuntimeCompatibilityDiagnosticSchema, ScheduledTaskIdSchema, ScheduledTaskSchema, ServerInstanceIdSchema, TestBarkNotificationRequestSchema, ToolViewContributionSchema, ToolViewDensitySchema, UpdateNotificationSettingsRequestSchema, WorkTreeOrderSchema, activityDurationMs, buildHostApiContractPath, buildHostApiPath, communityPublisherLabel, communityReviewLabel, configDescription, configFieldKind, configFields, configSchema, configSecretKeys, extensionCapabilitiesExpand, insecureHttpManagementPairProofMessage, managementPairProofMessage, mcpSecretFields, messagePartAssetId, messagePartAssetIds, messagePartsSearchText, normalizePromptDocument, parseConfigValue, parseJsonValue, parseMessageParts, promptDocumentFromText, promptDocumentPlainText, richPartContextText, summarizeExtensionCapabilities, validateConfigValue };
+
+//# sourceMappingURL=index.mjs.map