@nekro-nxt/contracts 0.2.0 → 0.3.0

package/dist/index.mjs

@@ -523,10 +523,10 @@ const configSchema = {
 //#region src/extension-capabilities.ts
 /**
 * Host capability level this build implements. A Revision that declares `requires.sdk` above it is rejected at
-* import with an "upgrade NekroNXT" message instead of an opaque schema error. Bump only when a new optional
-* Manifest capability ships; never reuse a level for a different meaning.
+* import with an "upgrade NekroNXT" message instead of an opaque schema error. Bump when a Manifest capability
+* ships; never reuse a level for a different meaning. Level 7 is Manifest V7 (host instance + agent attachments).
 */
-const EXTENSION_SDK_LEVEL = 6;
+const EXTENSION_SDK_LEVEL = 7;
 const ExtensionRequiresSchema = z.object({ sdk: z.number().int().min(1).max(1e3) }).strict();
 /** `api.example.com` or `*.example.com` (subdomains only); lower-case DNS labels, no scheme, port or path. */
 const ExtensionNetworkDomainSchema = z.string().trim().toLowerCase().max(253).regex(/^(\*\.)?(?=.{1,253}$)([a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?)(\.[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?)+$/u, { message: "网络域名必须是 api.example.com 或 *.example.com 形式，不含协议、端口和路径。" });
@@ -657,8 +657,8 @@ const mcpTarget = (server) => server.transport === "stdio" ? JSON.stringify([
 	server.url
 ]);
 /**
-* Optional Host capabilities of an agent-scope Revision. Every field is additive to Manifest V6: an absent field
-* means the Revision cannot use that capability, exactly as before the field existed.
+* Agent-layer capabilities (`permissions.agent`): what the extension may do inside the agents it is enabled for. An
+* absent field means the extension cannot use that capability.
 */
 const ExtensionCapabilitiesSchema = z.object({
 	network: ExtensionNetworkCapabilitySchema.optional(),
@@ -672,6 +672,22 @@ const ExtensionCapabilitiesSchema = z.object({
 	mcp: ExtensionMcpCapabilitySchema.optional(),
 	context: z.array(ExtensionContextContributionSchema).max(8).refine((value) => new Set(value.map(({ name }) => name)).size === value.length, "上下文名称不能重复。").optional()
 }).strict();
+/**
+* Host-layer capabilities (`permissions.host`): what the extension's single host instance may do through the `nxt`
+* service its factory receives. Host storage is the extension's `shared` partition.
+*/
+const HostLayerCapabilitiesSchema = z.object({
+	network: ExtensionNetworkCapabilitySchema.optional(),
+	storage: z.object({ quotaBytes: z.number().int().min(1024).max(EXTENSION_STORAGE_MAX_QUOTA_BYTES).optional() }).strict().optional()
+}).strict();
+/** Host-layer capabilities in the agent-capability shape, so digests, expansion and summaries share one implementation. */
+const hostLayerAsCapabilities = (host) => host === void 0 || Object.keys(host).length === 0 ? void 0 : {
+	...host.network === void 0 ? {} : { network: host.network },
+	...host.storage === void 0 ? {} : { storage: {
+		scopes: ["shared"],
+		...host.storage.quotaBytes === void 0 ? {} : { quotaBytes: host.storage.quotaBytes }
+	} }
+};
 const NETWORK_MODE_RANK = {
 	domains: 0,
 	config: 1,
@@ -709,8 +725,11 @@ const extensionCapabilitiesExpand = (previous, next) => {
 	if (next.llm !== void 0 && (previous?.llm === void 0 || next.llm.maxCallsPerTurn > previous.llm.maxCallsPerTurn || next.llm.maxOutputTokens > previous.llm.maxOutputTokens)) return true;
 	return false;
 };
-/** User-facing summary of declared capabilities, in a stable order, for approval and inspection pages. */
-const summarizeExtensionCapabilities = (capabilities) => {
+/**
+* User-facing summary of declared capabilities, in a stable order, for approval and inspection pages. `layer: 'host'`
+* phrases host-layer capabilities (passed through {@link hostLayerAsCapabilities}) for the host instance.
+*/
+const summarizeExtensionCapabilities = (capabilities, options = {}) => {
 	if (capabilities === void 0) return [];
 	const items = [];
 	const network = capabilities.network;
@@ -724,7 +743,7 @@ const summarizeExtensionCapabilities = (capabilities) => {
 		key: "network",
 		risk: "normal",
 		label: "访问你在配置中填写的地址",
-		detail: network.fields.join("、")
+		detail: network.fields.map((field) => options.fieldTitle?.(field) ?? field).join("、")
 	});
 	else if (network?.mode === "unrestricted") items.push({
 		key: "network",
@@ -732,7 +751,12 @@ const summarizeExtensionCapabilities = (capabilities) => {
 		label: "访问任意公网地址",
 		detail: network.purpose
 	});
-	if (capabilities.storage !== void 0) {
+	if (capabilities.storage !== void 0 && options.layer === "host") items.push({
+		key: "storage",
+		risk: "normal",
+		label: "在本机保存扩展数据，页面与启用它的智能体共用"
+	});
+	else if (capabilities.storage !== void 0) {
 		const shared = capabilities.storage.scopes.includes("shared");
 		items.push({
 			key: "storage",
@@ -904,8 +928,14 @@ const HostPageContributionSchema = z.object({
 	description: z.string().trim().max(120).optional(),
 	icon: HostPageIconSchema,
 	objectPane: z.enum(["navigation", "hidden"]),
-	startPath: z.string().trim().regex(/^(?:[a-z0-9][a-z0-9/_-]*)?$/u)
+	startPath: z.string().trim().regex(/^(?:[a-z0-9][a-z0-9/_-]*)?$/u),
+	/** Registers a navigation rail entry for this page; at most one page of an extension may declare it. */
+	rail: z.object({ order: z.number().int().min(0).max(999).optional() }).strict().optional()
 }).strict();
+/** Rail position of a page that registers a rail entry without an explicit order. */
+const HOST_PAGE_DEFAULT_RAIL_ORDER = 100;
+/** The stored rail position of a page; `null` when the page has no rail entry. */
+const hostPageRailOrder = (page) => page.rail === void 0 ? null : page.rail.order ?? 100;
 const HostUiNavigationItemSchema = z.object({
 	id: z.string().trim().min(1).max(80),
 	label: z.string().trim().min(1).max(80),
@@ -949,12 +979,7 @@ const HostUiNetworkOriginSchema = z.string().url().transform((value, context) =>
 	}
 	return url.origin;
 });
-const HostUiPermissionDeclarationSchema = z.object({
-	permissions: z.array(HostUiPermissionSchema).max(HostUiPermissionSchema.options.length),
-	networkOrigins: z.array(HostUiNetworkOriginSchema).max(32).default([]),
-	/** Host capabilities of an agent-scope Revision; absent keeps the pre-capability digest unchanged. */
-	capabilities: ExtensionCapabilitiesSchema.optional()
-}).strict().superRefine((value, context) => {
+const checkBrowserPermissions = (value, context) => {
 	if (new Set(value.permissions).size !== value.permissions.length) context.addIssue({
 		code: "custom",
 		path: ["permissions"],
@@ -970,6 +995,44 @@ const HostUiPermissionDeclarationSchema = z.object({
 		path: ["networkOrigins"],
 		message: "Host UI network origins require network.request."
 	});
+};
+/**
+* One approval: browser-side permissions plus the capabilities of one layer. Grants, digests and the approval page
+* use this shape for both the host approval and each agent approval.
+*/
+const HostUiPermissionDeclarationSchema = z.object({
+	permissions: z.array(HostUiPermissionSchema).max(HostUiPermissionSchema.options.length),
+	networkOrigins: z.array(HostUiNetworkOriginSchema).max(32).default([]),
+	capabilities: ExtensionCapabilitiesSchema.optional()
+}).strict().superRefine(checkBrowserPermissions);
+/**
+* Manifest V7 `permissions`: browser-side permissions of pages and panels (`host.call`), host-layer capabilities used
+* by the single host instance, and agent-layer capabilities used inside each enabled agent.
+*/
+const ExtensionPermissionsSchema = z.object({
+	permissions: z.array(HostUiPermissionSchema).max(HostUiPermissionSchema.options.length).default([]),
+	networkOrigins: z.array(HostUiNetworkOriginSchema).max(32).default([]),
+	host: HostLayerCapabilitiesSchema.optional(),
+	agent: ExtensionCapabilitiesSchema.optional()
+}).strict().superRefine(checkBrowserPermissions);
+const EMPTY_EXTENSION_PERMISSIONS = {
+	permissions: [],
+	networkOrigins: []
+};
+/** What installing the extension on this machine asks the user to approve. */
+const hostPermissionDeclaration = (permissions) => {
+	const capabilities = hostLayerAsCapabilities(permissions.host);
+	return {
+		permissions: [...permissions.permissions],
+		networkOrigins: [...permissions.networkOrigins],
+		...capabilities === void 0 ? {} : { capabilities }
+	};
+};
+/** What enabling the extension for one agent asks the user to approve. */
+const agentPermissionDeclaration = (permissions) => ({
+	permissions: [],
+	networkOrigins: [],
+	...permissions.agent === void 0 || Object.keys(permissions.agent).length === 0 ? {} : { capabilities: permissions.agent }
 });
 const HostUiOwnerSchema = z.discriminatedUnion("kind", [z.object({
 	kind: z.literal("extension"),
@@ -991,6 +1054,8 @@ const HostUiPageEntrySchema = z.object({
 	startPath: z.string(),
 	visible: z.boolean(),
 	sortOrder: z.number().int().nonnegative(),
+	/** Present when the page registered a navigation rail entry; lower orders come first. */
+	rail: z.object({ order: z.number().int().min(0).max(999) }).strict().optional(),
 	routeBase: z.string().regex(/^\/apps\/hup_[0-9A-Za-z]+$/u),
 	client: z.object({
 		moduleUrl: z.string().startsWith("/"),
@@ -1035,12 +1100,17 @@ const ExtensionPanelAnchorSchema = z.enum([
 	"extension",
 	"connection"
 ]);
-const AGENT_PANEL_ANCHORS = [
-	"agent",
-	"channel",
-	"extension"
-];
-const ADAPTER_PANEL_ANCHORS = ["connection", "channel"];
+/**
+* Which layer a panel belongs to. Agent and channel panels follow the agents the extension is enabled for (a channel
+* panel also shows on channels of the extension's own adapter); extension and connection panels belong to the host
+* instance.
+*/
+const PANEL_ANCHOR_LAYER = {
+	agent: "agent",
+	channel: "agent",
+	extension: "host",
+	connection: "host"
+};
 const PanelDensitySchema = z.enum(["compact", "full"]);
 const ConnectionPanelRoleSchema = z.enum([
 	"setup",
@@ -1103,8 +1173,21 @@ const MessageRendererContributionSchema = z.object({
 	kind: z.literal("message-renderer"),
 	richKind: RichKindSchema
 }).strict();
-/** Optional configuration surface shared by every extension scope. */
+/** What an extension provides, derived from its Manifest; for listing and filtering, never a lifecycle switch. */
+const EXTENSION_PROVIDES = [
+	"agent",
+	"page",
+	"adapter",
+	"mcp"
+];
+const ExtensionProvideSchema = z.enum(EXTENSION_PROVIDES);
+/** One configuration form: a serialized Schemastery document. */
 const ExtensionConfigDeclarationSchema = z.object({ schema: ConfigSchemaDocumentSchema }).strict();
+/** Manifest V7 `config`: the host instance's configuration and each enabled agent's configuration. */
+const ExtensionLayeredConfigSchema = z.object({
+	host: ExtensionConfigDeclarationSchema.optional(),
+	agent: ExtensionConfigDeclarationSchema.optional()
+}).strict();
 /** Product projection of what one Revision contributes to the shell. */
 const ExtensionUiContributionsSchema = z.object({
 	panels: z.array(PanelContributionSchema).max(16),
@@ -1285,18 +1368,112 @@ const COMMUNITY_REVIEW_STATUSES = [
 	"incomplete"
 ];
 const CommunityReviewStatusSchema = z.enum(COMMUNITY_REVIEW_STATUSES);
-const CommunityGradeSchema = z.enum([
-	"A",
-	"B",
-	"C",
-	"D"
+/** 社区评级的六个维度（审查标准 v1），从正上方顺时针排列成六边形。 */
+const COMMUNITY_RATING_DIMENSIONS = [
+	"security",
+	"openness",
+	"reliability",
+	"lightweight",
+	"usability",
+	"craft"
+];
+const COMMUNITY_RATING_DIMENSION_LABELS = {
+	security: "安全",
+	openness: "开放",
+	reliability: "稳定",
+	lightweight: "轻量",
+	usability: "易用",
+	craft: "工艺"
+};
+/** 社区的审查员，评级与审查记录以她署名。 */
+const COMMUNITY_REVIEWER_NAME = "小澄";
+/** 社区判定的达成标签；不认识的标签不显示。扩展页面最多显示 {@link COMMUNITY_RATING_BADGE_LIMIT} 个。 */
+const COMMUNITY_RATING_BADGES = {
+	"zero-permission": {
+		label: "零权限",
+		description: "没有申请任何权限。"
+	},
+	"least-privilege": {
+		label: "最小权限",
+		description: "声明的每项能力都用得上，安全满星。"
+	},
+	"no-network": {
+		label: "不联网",
+		description: "不访问任何网络。"
+	},
+	"scoped-network": {
+		label: "限定地址联网",
+		description: "只访问指定域名或用户在配置中填写的地址。"
+	},
+	"managed-secrets": {
+		label: "凭据托管",
+		description: "凭据都是配置中的凭据字段，经宿主读取，没有写进源码。"
+	},
+	"readable-source": {
+		label: "源码可读",
+		description: "没有混淆、压缩或内嵌大段编码内容。"
+	},
+	"open-source": {
+		label: "开源",
+		description: "填写了公开的源码仓库。"
+	},
+	"readable-errors": {
+		label: "错误可读",
+		description: "失败时都返回给用户看的说明，稳定满星。"
+	},
+	"stable-context": {
+		label: "上下文稳定",
+		description: "不占上下文，或注入的上下文稳定、不破坏提示缓存。"
+	},
+	"complete-docs": {
+		label: "说明完整",
+		description: "有图标和介绍，易用至少四星。"
+	}
+};
+const COMMUNITY_RATING_BADGE_LIMIT = 4;
+/** 一次发布的评级：六维星级、综合评分（各维度平均，保留一位小数）与达成标签。 */
+const CommunityRatingSchema = z.object({
+	standard: z.string().max(20),
+	score: z.number().min(1).max(5),
+	dimensions: z.array(z.object({
+		key: z.string().max(40),
+		stars: z.number().int().min(1).max(5),
+		headline: z.string().max(200),
+		cap: z.string().max(200).optional()
+	})).max(16),
+	badges: z.array(z.string().max(40)).max(32)
+});
+/** 市场的排序方式。 */
+const COMMUNITY_EXTENSION_SORTS = [
+	{
+		key: "updated",
+		label: "最近更新"
+	},
+	{
+		key: "score",
+		label: "综合评分"
+	},
+	{
+		key: "downloads",
+		label: "下载最多"
+	},
+	{
+		key: "newest",
+		label: "最新上架"
+	}
+];
+const CommunityExtensionSortSchema = z.enum([
+	"updated",
+	"score",
+	"downloads",
+	"newest"
 ]);
 const CommunityReleaseIdSchema = z.string().regex(/^rel_[0-9A-Za-z]+$/u);
 const CommunityAccountSchema = z.object({
 	handle: z.string().min(1).max(80),
 	displayName: z.string().max(200),
 	avatarUrl: z.string().url().nullable()
-}).strict();
+});
 const CommunityEnvironmentSchema = z.enum([
 	"production",
 	"staging",
@@ -1310,7 +1487,7 @@ const CommunityStatusSchema = z.object({
 	signedInAt: z.number().int().nullable(),
 	/** 最近一次更新检查发现的可更新扩展数量（只读缓存，不发起网络请求）。 */
 	updatesAvailable: z.number().int().nonnegative()
-}).strict();
+});
 const CommunityPermissionItemSchema = z.object({
 	key: z.string().max(120),
 	level: z.enum([
@@ -1319,32 +1496,34 @@ const CommunityPermissionItemSchema = z.object({
 		"high"
 	]),
 	label: z.string().max(200),
-	detail: z.string().max(2e3).optional()
-}).strict();
+	detail: z.string().max(2e3).optional(),
+	/** `host`: approved when installed on this machine; `agent`: approved when enabled for an agent. */
+	layer: z.enum(["host", "agent"]).optional()
+});
 const CommunityReleaseSchema = z.object({
 	id: CommunityReleaseIdSchema,
 	reviewStatus: CommunityReviewStatusSchema,
-	grade: CommunityGradeSchema.nullable(),
+	/** 审查完成后的评级；尚未审查、审查未完成或旧版社区时为 null。 */
+	rating: CommunityRatingSchema.nullable(),
 	permissions: z.array(CommunityPermissionItemSchema).max(64),
 	packageSize: z.number().int().nonnegative(),
 	requiresSdk: z.number().int().positive().nullable(),
 	notes: z.string().max(2e3),
 	createdAt: z.number().int()
-}).strict();
+});
 /** 社区为官方扩展保留的发布者标识：官方扩展由多位官方成员维护，对外不显示个人账号。 */
 const COMMUNITY_OFFICIAL_HANDLE = "nekro-nxt";
 /** 发布者的展示文字：官方扩展显示「NekroNXT 官方」，其余显示 @账号。 */
 const communityPublisherLabel = (handle) => handle === "nekro-nxt" ? "NekroNXT 官方" : `@${handle}`;
 const CommunityExtensionSummarySchema = z.object({
 	id: ExtensionIdSchema,
-	scope: z.enum([
-		"agent",
-		"host-adapter",
-		"host-ui"
-	]),
+	/** What the extension provides, derived from its Manifest; unknown future labels are dropped. */
+	provides: z.array(z.string().max(32)).max(8),
 	displayName: z.string().max(200),
 	summary: z.string().max(1e3),
 	tags: z.array(z.string().max(40)).max(16),
+	/** 最新公开发布包内的扩展图标（社区的绝对地址）；没有图标或旧版社区时为 null。 */
+	iconUrl: z.string().url().nullable(),
 	/** 由社区后台认定的官方扩展；此时发布者是社区保留的官方主页（`COMMUNITY_OFFICIAL_HANDLE`）。 */
 	official: z.boolean(),
 	publisher: CommunityAccountSchema,
@@ -1352,20 +1531,46 @@ const CommunityExtensionSummarySchema = z.object({
 	downloads: z.number().int().nonnegative(),
 	updatedAt: z.number().int(),
 	pageUrl: z.string().url()
-}).strict();
+});
 const CommunityExtensionDetailSchema = CommunityExtensionSummarySchema.extend({
 	description: z.string().max(2e4),
 	sourceUrl: z.string().url().nullable(),
+	/** 公开的审查记录：评级、总评、各维度说明，以及发现与自动检查的标题。 */
 	review: z.object({
 		status: CommunityReviewStatusSchema,
-		grade: CommunityGradeSchema.nullable(),
+		rating: CommunityRatingSchema.nullable(),
 		summary: z.string().max(2e3).nullable(),
-		highlights: z.array(z.object({
+		dimensions: z.array(z.object({
+			key: z.string().max(40),
+			notes: z.string().max(2e3)
+		})).max(16),
+		findings: z.array(z.object({
+			dimension: z.string().max(40),
 			severity: z.string().max(20),
 			title: z.string().max(200)
-		}).strict()).max(16)
-	}).strict().nullable()
-}).strict();
+		})).max(64),
+		checks: z.array(z.object({
+			severity: z.string().max(20),
+			title: z.string().max(200)
+		})).max(64),
+		reviewedAt: z.number().int().nullable()
+	}).nullable()
+});
+/**
+* 发布时随包提交的条目信息（作者自己写的介绍）。首次发布用于建条目；之后提供了哪项就覆盖哪项，未提供的保持不变。
+*/
+const COMMUNITY_LISTING_LIMITS = {
+	summary: 160,
+	description: 2e4,
+	tags: 8,
+	tag: 40
+};
+const CommunityListingInputSchema = z.object({
+	summary: z.string().trim().max(COMMUNITY_LISTING_LIMITS.summary).optional(),
+	description: z.string().max(COMMUNITY_LISTING_LIMITS.description).optional(),
+	tags: z.array(z.string().trim().min(1).max(COMMUNITY_LISTING_LIMITS.tag)).max(COMMUNITY_LISTING_LIMITS.tags).optional(),
+	sourceUrl: z.string().trim().url().refine((value) => /^https?:\/\//iu.test(value), "源码地址必须是 http(s) 链接。").optional()
+});
 const CommunityEndpointSchema = z.object({
 	url: z.string().url(),
 	source: z.enum([
@@ -1377,14 +1582,14 @@ const CommunityEndpointSchema = z.object({
 	environmentUrl: z.string().url().nullable(),
 	/** 当前地址是未加密的非本机地址。 */
 	insecure: z.boolean()
-}).strict();
+});
 const CommunitySourceSchema = z.object({
 	kind: z.literal("community"),
 	communityUrl: z.string().url(),
 	releaseId: CommunityReleaseIdSchema,
 	publisherHandle: z.string().min(1).max(80),
 	installedAt: z.number().int().nonnegative()
-}).strict();
+});
 const CommunityInstalledItemSchema = z.object({
 	extensionId: ExtensionIdSchema,
 	displayName: z.string(),
@@ -1400,39 +1605,26 @@ const CommunityInstalledItemSchema = z.object({
 	latest: CommunityReleaseSchema.nullable(),
 	updateAvailable: z.boolean(),
 	addedPermissions: z.array(CommunityPermissionItemSchema)
-}).strict();
+});
 const CommunityInstalledSchema = z.object({
 	checkedAt: z.number().int().nullable(),
 	items: z.array(CommunityInstalledItemSchema)
-}).strict();
+});
 const CommunityMyExtensionSchema = CommunityExtensionSummarySchema.extend({
-	releases: z.array(CommunityReleaseSchema.extend({ withdrawn: z.boolean() }).strict()),
+	releases: z.array(CommunityReleaseSchema.extend({ withdrawn: z.boolean() })),
 	delisted: z.boolean(),
 	delistedReason: z.string().nullable()
-}).strict();
-const COMMUNITY_REVIEW_DIMENSIONS = [
-	"security",
-	"transparency",
-	"reliability",
-	"context_cost",
-	"usability",
-	"maintainability",
-	"compliance"
-];
+});
+/** 审查发现可归属的维度：六个评级维度加合规。 */
 const COMMUNITY_REVIEW_DIMENSION_LABELS = {
-	security: "安全",
-	transparency: "源码透明",
-	reliability: "可靠性",
-	context_cost: "上下文与成本",
-	usability: "可用性",
-	maintainability: "可维护性",
+	...COMMUNITY_RATING_DIMENSION_LABELS,
 	compliance: "合规"
 };
 /** 作者看到的完整审查报告。 */
 const CommunityReviewReportSchema = z.object({
 	releaseId: CommunityReleaseIdSchema,
 	status: CommunityReviewStatusSchema,
-	grade: CommunityGradeSchema.nullable(),
+	rating: CommunityRatingSchema.nullable(),
 	deterministic: z.array(z.object({
 		severity: z.enum([
 			"info",
@@ -1444,18 +1636,24 @@ const CommunityReviewReportSchema = z.object({
 		detail: z.string(),
 		file: z.string().optional(),
 		line: z.number().int().optional()
-	}).strict()),
+	})),
 	ai: z.object({
 		summary: z.string(),
 		verdict: z.string(),
-		grade: CommunityGradeSchema,
-		dimensions: z.array(z.object({
-			key: z.enum(COMMUNITY_REVIEW_DIMENSIONS),
-			grade: CommunityGradeSchema,
+		compliance: z.object({
+			ok: z.boolean(),
 			notes: z.string()
-		}).strict()),
+		}).nullable(),
+		dimensions: z.array(z.object({
+			key: z.string(),
+			stars: z.number().int().min(1).max(5),
+			headline: z.string(),
+			notes: z.string(),
+			/** 不满五星时拿下一颗星的修改建议。 */
+			nextStar: z.string().optional()
+		})),
 		findings: z.array(z.object({
-			dimension: z.enum(COMMUNITY_REVIEW_DIMENSIONS),
+			dimension: z.string(),
 			severity: z.enum([
 				"info",
 				"suggestion",
@@ -1468,9 +1666,9 @@ const CommunityReviewReportSchema = z.object({
 			file: z.string().optional(),
 			line: z.number().int().optional(),
 			suggestion: z.string().optional()
-		}).strict()),
+		})),
 		exploitability: z.string().optional()
-	}).strict().nullable(),
+	}).nullable(),
 	model: z.string().nullable(),
 	error: z.string().nullable(),
 	decisions: z.array(z.object({
@@ -1478,10 +1676,10 @@ const CommunityReviewReportSchema = z.object({
 		note: z.string(),
 		by: z.string(),
 		createdAt: z.number().int()
-	}).strict()),
+	})),
 	finishedAt: z.number().int().nullable(),
 	reportUrl: z.string().url()
-}).strict();
+});
 /** 安装者看到的审查标签：只描述审查发现，不做「安全」担保。 */
 const communityReviewLabel = (status) => {
 	switch (status) {
@@ -1518,6 +1716,91 @@ const communityReviewLabel = (status) => {
 	}
 };
 //#endregion
+//#region src/community-personas.ts
+/**
+* 社区人设在本机的投影：名称、头像、简介、作者介绍、标签与人设正文（对应智能体的 `persona`）。不含模型与扩展。
+* Host 宽松读取社区响应并归一到这些结构；头像改写为本机代理地址，页面不直接跨域读取社区图片。
+*/
+const CommunityPersonaIdSchema = z.string().regex(/^psn_[0-9A-Za-z]+$/u);
+const CommunityPersonaRevisionIdSchema = z.string().regex(/^prv_[0-9A-Za-z]+$/u);
+/** 人设正文上限，与智能体设定一致。 */
+const COMMUNITY_PERSONA_MAX_LENGTH = 64 * 1024;
+/** 发布头像上限（社区约定 ≤512 KiB 的 PNG、JPEG 或 WebP）。 */
+const COMMUNITY_PERSONA_AVATAR_MAX_BYTES = 512 * 1024;
+const COMMUNITY_PERSONA_AVATAR_TYPES = [
+	"image/png",
+	"image/jpeg",
+	"image/webp"
+];
+const TagsSchema = z.array(z.string().min(1).max(40)).max(16);
+const CommunityPersonaSummarySchema = z.object({
+	id: CommunityPersonaIdSchema,
+	name: z.string().min(1).max(200),
+	summary: z.string().max(1e3),
+	tags: TagsSchema,
+	/** 本机代理地址 `/api/community/personas/<id>/avatar?v=…`；没有头像时为 null。 */
+	avatarUrl: z.string().startsWith("/api/community/personas/").nullable(),
+	official: z.boolean(),
+	publisher: CommunityAccountSchema,
+	installs: z.number().int().nonnegative(),
+	updatedAt: z.number().int(),
+	pageUrl: z.string().url()
+});
+const CommunityPersonaDetailSchema = CommunityPersonaSummarySchema.extend({
+	description: z.string().max(2e4),
+	persona: z.string().max(COMMUNITY_PERSONA_MAX_LENGTH),
+	revision: z.object({
+		id: CommunityPersonaRevisionIdSchema,
+		notes: z.string().max(2e3),
+		createdAt: z.number().int()
+	}),
+	review: z.object({
+		status: z.enum(["approved", "flagged"]),
+		summary: z.string().max(2e3).nullable()
+	}).nullable()
+});
+const CommunityPersonaReviewStatusSchema = z.enum([
+	"pending",
+	"approved",
+	"flagged",
+	"rejected"
+]);
+const CommunityMyPersonaSchema = CommunityPersonaSummarySchema.extend({
+	status: z.enum(["listed", "delisted"]),
+	latestRevision: z.object({
+		id: CommunityPersonaRevisionIdSchema,
+		createdAt: z.number().int(),
+		reviewStatus: CommunityPersonaReviewStatusSchema,
+		reviewSummary: z.string().max(2e3).nullable()
+	})
+});
+const CommunityMyPersonasSchema = z.object({
+	items: z.array(CommunityMyPersonaSchema),
+	/** 本机智能体最近一次发布到当前社区的人设，用于「更新已发布的人设」。 */
+	agentLinks: z.record(AgentIdSchema, CommunityPersonaIdSchema)
+});
+/** 作者看到的审查状态文字。 */
+const communityPersonaReviewLabel = (status) => {
+	switch (status) {
+		case "approved": return {
+			tone: "ok",
+			label: "已公开"
+		};
+		case "pending": return {
+			tone: "neutral",
+			label: "审查中"
+		};
+		case "flagged": return {
+			tone: "warn",
+			label: "待人工复核"
+		};
+		case "rejected": return {
+			tone: "bad",
+			label: "未通过"
+		};
+	}
+};
+//#endregion
 //#region src/host-api.ts
 const EmptyParamsSchema = z.object({}).strict();
 const NoRequestBodySchema = z.undefined();
@@ -1652,6 +1935,24 @@ const AgentModelSchema = z.object({
 	model: NonEmptyStringSchema,
 	reasoningEffort: NonEmptyStringSchema.optional()
 }).strict();
+/**
+* An enable or disable request of one agent extension that has not settled: `waiting` until the agent reaches a safe
+* gap (its current reply ends), or `failed` with the reason until the next request replaces it.
+*/
+/** What one approval asks the user to grant and whether the current grant already covers it. */
+const ExtensionPermissionRequirementSchema = z.object({
+	declaration: HostUiPermissionDeclarationSchema,
+	permissionDigest: z.string().regex(/^[a-f0-9]{64}$/u),
+	approvalRequired: z.boolean()
+}).strict();
+const ExtensionActivationTransitionSchema = z.object({
+	agentId: AgentIdSchema,
+	target: z.enum(["enabled", "disabled"]),
+	extensionRevisionId: ExtensionRevisionIdSchema.optional(),
+	state: z.enum(["waiting", "failed"]),
+	message: z.string().optional(),
+	since: z.number().int().safe().nonnegative()
+}).strict();
 const ImageUnderstandingPolicyApiSchema = z.object({
 	history: z.object({
 		mode: z.literal("persistent-distinct"),
@@ -1800,7 +2101,9 @@ const HostSnapshotMessageSchema = z.object({
 	parts: z.array(SnapshotMessagePartSchema),
 	sender: z.object({
 		memberId: ChannelMemberIdSchema,
-		displayName: z.string().optional()
+		displayName: z.string().optional(),
+		/** The sender is the account of this agent on this host, answering the channel through another connection. */
+		localAgentId: AgentIdSchema.optional()
 	}).strict().optional(),
 	mentionedConnectionAccount: z.boolean().optional(),
 	activityKey: AdapterActivityKeySchema.optional(),
@@ -1954,6 +2257,16 @@ const ChannelRuntimeStepSchema = z.object({
 	firstTokenMs: z.number().int().nonnegative().optional(),
 	usage: ChannelRuntimeUsageSchema.optional()
 }).strict();
+/** One message that entered the model's input during a turn: channel admissions and host or DSH injections. */
+const ChannelRuntimeInputSchema = z.object({
+	messageId: z.string().min(1),
+	/** DSH `user/message` source kind, e.g. `nekro-nxt-channel` or `nekro-nxt-handoff`. */
+	source: z.string().min(1),
+	/** Channel Events carried by a channel admission. */
+	eventCount: z.number().int().positive().optional(),
+	preview: z.string().optional(),
+	at: z.number().int().safe().nonnegative().optional()
+}).strict();
 const ChannelRuntimeTurnSchema = z.object({
 	turn: z.number().int().nonnegative(),
 	state: z.enum([
@@ -1985,7 +2298,9 @@ const ChannelRuntimeTurnSchema = z.object({
 	/** Session log time the turn closed; absent while it is still running. */
 	endedAt: z.number().int().safe().nonnegative().optional(),
 	/** Newest Channel Event of the admission that opened this turn; absent for non-channel turns. */
-	triggerEventId: ChannelEventIdSchema.optional()
+	triggerEventId: ChannelEventIdSchema.optional(),
+	/** Messages that entered the model's input during the turn, in log order; absent when there were none. */
+	inputs: z.array(ChannelRuntimeInputSchema).optional()
 }).strict();
 const ChannelRuntimeOccupancySchema = z.object({
 	projectedTokens: z.number().int().nonnegative(),
@@ -2064,6 +2379,54 @@ const ChannelRuntimeSseDataSchema = ChannelRuntimeProjectionSchema.extend({
 	revision: z.number().int().positive(),
 	truncated: z.boolean().optional()
 }).strict();
+const ChannelRuntimeContextSchema = z.object({
+	available: z.boolean(),
+	route: z.object({
+		provider: z.string(),
+		model: z.string(),
+		contextWindow: z.number().int().positive().optional(),
+		reasoningEffort: z.string().optional(),
+		temperature: z.number().optional(),
+		maxTokens: z.number().int().positive().optional()
+	}).strict().optional(),
+	instructions: z.array(z.object({
+		role: z.enum(["system", "developer"]),
+		text: z.string(),
+		truncated: z.boolean()
+	}).strict()),
+	tools: z.array(z.object({
+		name: z.string(),
+		description: z.string().optional(),
+		parameters: z.string().optional()
+	}).strict()),
+	changes: z.array(z.object({
+		at: z.number().nonnegative().optional(),
+		reason: z.enum([
+			"initial",
+			"resume",
+			"change",
+			"series"
+		]),
+		toolCount: z.number().int().nonnegative()
+	}).strict())
+}).strict();
+/** A channel's own instructions for whoever answers it, with recent earlier versions to restore. */
+const ChannelPromptViewSchema = z.object({
+	document: PromptDocumentV1Schema,
+	/** The agent may not rewrite a locked prompt. */
+	locked: z.boolean(),
+	/** 0 before the first save; send it back as `expectedRevision`. */
+	revision: z.number().int().nonnegative(),
+	maxChars: z.number().int().positive(),
+	updatedBy: z.enum(["admin", "agent"]).optional(),
+	updatedAt: z.number().int().nonnegative().optional(),
+	revisions: z.array(z.object({
+		revision: z.number().int().positive(),
+		document: PromptDocumentV1Schema,
+		updatedBy: z.enum(["admin", "agent"]),
+		updatedAt: z.number().int().nonnegative()
+	}).strict())
+}).strict();
 const AdapterConnectionCreationSchema = z.object({
 	mode: z.enum(["schema-form", "qr-login"]),
 	actionLabel: z.string().trim().min(1).optional(),
@@ -2400,11 +2763,15 @@ const HostSnapshotSchema = z.object({
 			unreadCount: 0,
 			unreadCapped: false
 		}),
+		/** Other agents on this host that answer the same platform channel through another connection; absent when none. */
+		localAgentIds: z.array(AgentIdSchema).min(1).optional(),
 		bindings: z.array(z.object({
 			channelId: ChannelIdSchema,
 			agentId: AgentIdSchema,
 			triggerPolicy: TriggerPolicySchema,
 			processingFeedback: z.enum(["auto", "off"]).default("auto"),
+			/** Absent means `observe`. */
+			localAgentMessages: z.enum(["observe", "trigger"]).optional(),
 			activityTriggerOverrides: ActivityTriggerOverridesSchema.default({}),
 			boundAt: z.number().int().safe().nonnegative()
 		}).strict())
@@ -2483,11 +2850,8 @@ const HostSnapshotSchema = z.object({
 	}).strict()).default([]),
 	extensions: z.array(z.object({
 		id: ExtensionIdSchema,
-		scope: z.enum([
-			"agent",
-			"host-adapter",
-			"host-ui"
-		]),
+		/** What the latest Revision provides; listing and filtering only. */
+		provides: z.array(ExtensionProvideSchema),
 		slug: NonEmptyStringSchema,
 		displayName: z.string(),
 		description: z.string(),
@@ -2497,15 +2861,18 @@ const HostSnapshotSchema = z.object({
 			revisionNumber: z.number().int().positive(),
 			format: z.enum(["current", "unavailable"]).optional(),
 			ui: ExtensionUiContributionsSchema.default(EMPTY_EXTENSION_UI_CONTRIBUTIONS),
-			configSchema: ConfigSchemaDocumentSchema.optional(),
+			/** The host instance's configuration form (`config.host`). */
+			hostConfigSchema: ConfigSchemaDocumentSchema.optional(),
+			/** Each enabled agent's configuration form (`config.agent`). */
+			agentConfigSchema: ConfigSchemaDocumentSchema.optional(),
+			/** 扩展包自带图标的读取路径（同源、按摘要寻址、可长期缓存）；没有图标时缺省。 */
+			iconUrl: z.string().regex(/^\/api\/extensions\/[^/]+\/revisions\/[^/]+\/icon\/[a-f0-9]{64}\.(?:svg|png|webp)$/u).optional(),
 			createdAt: z.number().int().safe().nonnegative(),
 			/** 从社区安装的保存记录的来源；本机保存与文件导入没有来源。 */
 			source: CommunitySourceSchema.optional(),
-			scope: z.enum([
-				"agent",
-				"host-adapter",
-				"host-ui"
-			]),
+			provides: z.array(ExtensionProvideSchema),
+			/** Whether this Revision can be enabled for agents (agent-layer contributions or capabilities). */
+			agentLayer: z.boolean(),
 			contributions: z.array(z.string()),
 			verification: z.object({
 				verifiedAt: z.number().int().nonnegative(),
@@ -2522,9 +2889,11 @@ const HostSnapshotSchema = z.object({
 				renderedPages: z.array(HostPageContributionSchema).max(8).optional(),
 				usedUiComponents: z.array(HostUiKitComponentNameSchema).optional(),
 				pageGeometry: z.array(HostUiPageGeometryEvidenceSchema).max(8).optional(),
-				permissions: HostUiPermissionDeclarationSchema.optional(),
-				permissionDigest: z.string().regex(/^[a-f0-9]{64}$/u).optional(),
-				permissionApprovalRequired: z.boolean().optional(),
+				permissions: ExtensionPermissionsSchema.optional(),
+				/** Installing this Revision on the machine, against the current host grant. */
+				hostPermission: ExtensionPermissionRequirementSchema.optional(),
+				/** Enabling this Revision for an agent that has no grant yet. */
+				agentPermission: ExtensionPermissionRequirementSchema.optional(),
 				adapter: z.object({
 					apiVersion: z.literal(2),
 					key: NonEmptyStringSchema,
@@ -2572,10 +2941,14 @@ const HostSnapshotSchema = z.object({
 				observedAt: z.number().int().safe().nonnegative()
 			}).strict()).optional()
 		}).strict()),
+		/** Present only while some agent's enable or disable request is waiting or has failed. */
+		activationTransitions: z.array(ExtensionActivationTransitionSchema).optional(),
 		installation: z.object({
 			extensionRevisionId: ExtensionRevisionIdSchema,
 			installedAt: z.number().int().safe().nonnegative(),
+			/** Secret fields are removed; `configuredSecrets` lists those the Host stores. */
 			config: JsonValueSchema.default({}),
+			configuredSecrets: z.array(z.string()).optional(),
 			runtime: z.object({
 				status: z.enum([
 					"active",
@@ -2586,11 +2959,8 @@ const HostSnapshotSchema = z.object({
 				observedAt: z.number().int().safe().nonnegative()
 			}).optional()
 		}).strict().optional(),
-		hostUiPermission: z.object({
-			declaration: HostUiPermissionDeclarationSchema,
-			permissionDigest: z.string().regex(/^[a-f0-9]{64}$/u),
-			approvalRequired: z.boolean()
-		}).strict().optional(),
+		/** Installing the latest Revision on this machine, against the current host grant. */
+		hostPermission: ExtensionPermissionRequirementSchema.optional(),
 		hostClientDiagnostic: z.object({
 			revisionId: ExtensionRevisionIdSchema,
 			status: z.enum(["loaded", "failed"]),
@@ -2948,6 +3318,19 @@ const LlmProviderCredentialSchema = z.object({
 	source: z.string().optional(),
 	writable: z.boolean()
 }).strict();
+/**
+* The latest connection test that still describes the provider's saved address, protocol and API key. Tests made
+* before one of those changed are dropped. Never carries a key, request or response body.
+*/
+const LlmProviderTestResultSchema = z.object({
+	/** Epoch milliseconds when the test finished. */
+	at: z.number().int().nonnegative(),
+	ok: z.boolean(),
+	/** Short failure reason shown to the user; absent when the test passed. */
+	message: z.string().max(240).optional(),
+	/** The model the test asked. */
+	model: NonEmptyStringSchema.optional()
+}).strict();
 const LlmProviderViewSchema = z.object({
 	provider: NonEmptyStringSchema,
 	displayName: z.string(),
@@ -2964,7 +3347,9 @@ const LlmProviderViewSchema = z.object({
 	/** The model list was edited on this host; built-in providers can restore their own catalog. */
 	modelsCustomized: z.boolean(),
 	/** The provider's adapter can list the models its endpoint offers. */
-	discoverable: z.boolean()
+	discoverable: z.boolean(),
+	/** `null` when the current configuration was never tested; absent from hosts that do not record tests. */
+	lastTest: LlmProviderTestResultSchema.nullable().optional()
 }).strict();
 const LlmProviderSettingsSchema = z.object({
 	writable: z.boolean(),
@@ -3005,11 +3390,7 @@ const ExtensionImportInspectionSchema = z.object({
 	revisionId: ExtensionRevisionIdSchema,
 	slug: NonEmptyStringSchema,
 	displayName: NonEmptyStringSchema,
-	scope: z.enum([
-		"agent",
-		"host-adapter",
-		"host-ui"
-	]),
+	provides: z.array(ExtensionProvideSchema),
 	idempotent: z.boolean(),
 	slugConflict: z.boolean()
 }).strict();
@@ -3056,6 +3437,7 @@ const agentExtensionParam = z.object({
 	agentId: AgentIdSchema,
 	extensionId: ExtensionIdSchema
 }).strict();
+const PermissionApprovalSchema = z.object({ permissionDigest: z.string().regex(/^[a-f0-9]{64}$/u) }).strict();
 const extensionParam = z.object({ extensionId: ExtensionIdSchema }).strict();
 const dshPluginPackageParam = z.object({ packageId: DshPluginPackageIdSchema }).strict();
 const dshPluginEntryParam = z.object({ entryId: DshPluginEntryIdSchema }).strict();
@@ -3391,6 +3773,8 @@ const HostApiContracts = {
 			channelId: ChannelIdSchema,
 			triggerPolicy: TriggerPolicySchema,
 			processingFeedback: z.enum(["auto", "off"]).optional(),
+			/** Messages from another local agent's account: `observe` keeps them as context unless they @ this agent. */
+			localAgentMessages: z.enum(["observe", "trigger"]).optional(),
 			activityTriggerOverrides: ActivityTriggerOverridesSchema.optional()
 		}).strict(),
 		response: z.object({
@@ -3398,6 +3782,7 @@ const HostApiContracts = {
 			agentId: AgentIdSchema,
 			triggerPolicy: TriggerPolicySchema,
 			processingFeedback: z.enum(["auto", "off"]).default("auto"),
+			localAgentMessages: z.enum(["observe", "trigger"]).optional(),
 			activityTriggerOverrides: ActivityTriggerOverridesSchema.default({}),
 			boundAt: z.number().int().safe().nonnegative()
 		}).strict(),
@@ -3492,6 +3877,52 @@ const HostApiContracts = {
 		}).strict(),
 		error: HostApiErrorSchema
 	}),
+	getChannelRuntimeContext: defineContract({
+		method: "GET",
+		path: "/api/channels/:channelId/runtime/context",
+		params: channelParam,
+		request: NoRequestBodySchema,
+		response: ChannelRuntimeContextSchema,
+		error: HostApiErrorSchema
+	}),
+	getChannelRuntimeInput: defineContract({
+		method: "GET",
+		path: "/api/channels/:channelId/runtime/inputs/:messageId",
+		params: z.object({
+			channelId: ChannelIdSchema,
+			messageId: z.string().trim().min(1).max(200)
+		}).strict(),
+		request: NoRequestBodySchema,
+		response: z.object({
+			messageId: z.string(),
+			available: z.boolean(),
+			source: z.string().optional(),
+			text: z.string().optional(),
+			truncated: z.boolean()
+		}).strict(),
+		error: HostApiErrorSchema
+	}),
+	getChannelPrompt: defineContract({
+		method: "GET",
+		path: "/api/channels/:channelId/prompt",
+		params: channelParam,
+		request: NoRequestBodySchema,
+		response: ChannelPromptViewSchema,
+		error: HostApiErrorSchema
+	}),
+	updateChannelPrompt: defineContract({
+		method: "PUT",
+		path: "/api/channels/:channelId/prompt",
+		params: channelParam,
+		request: z.object({
+			document: PromptDocumentV1Schema,
+			locked: z.boolean(),
+			/** The revision the edit started from; a newer stored revision rejects the save. */
+			expectedRevision: z.number().int().nonnegative()
+		}).strict(),
+		response: ChannelPromptViewSchema,
+		error: HostApiErrorSchema
+	}),
 	resetChannelContext: defineContract({
 		invalidatesSnapshot: true,
 		method: "POST",
@@ -3825,11 +4256,11 @@ const HostApiContracts = {
 		path: "/api/community/extensions",
 		params: z.object({
 			query: z.string().trim().max(80).optional(),
-			scope: z.enum([
-				"agent",
-				"host-adapter",
-				"host-ui"
-			]).optional(),
+			provides: ExtensionProvideSchema.optional(),
+			/** 只列社区后台认定的官方扩展。 */
+			official: z.enum(["1"]).optional(),
+			/** 排序方式，默认最近更新；游标只在同一种排序下有效。 */
+			sort: CommunityExtensionSortSchema.optional(),
 			cursor: z.string().max(200).optional()
 		}).strict(),
 		request: NoRequestBodySchema,
@@ -3952,7 +4383,9 @@ const HostApiContracts = {
 		request: z.object({
 			extensionId: ExtensionIdSchema,
 			revisionId: ExtensionRevisionIdSchema,
-			notes: z.string().max(2e3)
+			notes: z.string().max(2e3),
+			/** 作者填写的条目信息；省略的字段不改动社区上已有的内容。 */
+			listing: CommunityListingInputSchema.optional()
 		}).strict(),
 		response: z.object({
 			releaseId: CommunityReleaseIdSchema,
@@ -3966,6 +4399,102 @@ const HostApiContracts = {
 		}).strict(),
 		error: HostApiErrorSchema
 	}),
+	listCommunityPersonas: defineContract({
+		timeoutMs: 3e4,
+		method: "GET",
+		path: "/api/community/personas",
+		params: z.object({
+			query: z.string().trim().min(1).max(200).optional(),
+			tag: z.string().trim().min(1).max(40).optional(),
+			official: z.literal("1").optional(),
+			cursor: z.string().min(1).max(500).optional()
+		}).strict(),
+		request: NoRequestBodySchema,
+		response: z.object({
+			items: z.array(CommunityPersonaSummarySchema),
+			nextCursor: z.string().nullable()
+		}).strict(),
+		error: HostApiErrorSchema
+	}),
+	getCommunityPersona: defineContract({
+		timeoutMs: 3e4,
+		method: "GET",
+		path: "/api/community/personas/:personaId",
+		params: z.object({ personaId: CommunityPersonaIdSchema }).strict(),
+		request: NoRequestBodySchema,
+		response: CommunityPersonaDetailSchema,
+		error: HostApiErrorSchema
+	}),
+	/**
+	* 把社区人设装进本机：新建一个智能体，或为现有智能体保存一次只换设定（及可选名称）的新配置。头像下载后作为
+	* 智能体头像；下载失败不影响安装。`expectedRevisionId` 是用户看过的修订，社区已更新时拒绝，避免装入未看过的内容。
+	*/
+	installCommunityPersona: defineContract({
+		invalidatesSnapshot: true,
+		timeoutMs: 6e4,
+		method: "POST",
+		path: "/api/community/personas/:personaId/install",
+		params: z.object({ personaId: CommunityPersonaIdSchema }).strict(),
+		request: z.discriminatedUnion("target", [z.object({
+			target: z.literal("new"),
+			expectedRevisionId: CommunityPersonaRevisionIdSchema,
+			displayName: z.string().trim().min(1).max(80),
+			model: AgentModelSchema,
+			useAvatar: z.boolean()
+		}).strict(), z.object({
+			target: z.literal("replace"),
+			expectedRevisionId: CommunityPersonaRevisionIdSchema,
+			agentId: AgentIdSchema,
+			expectedCurrentRevisionId: AgentRevisionIdSchema,
+			/** 同时改名；省略时保留原名称。 */
+			displayName: z.string().trim().min(1).max(80).optional(),
+			useAvatar: z.boolean()
+		}).strict()]),
+		response: z.object({
+			agentId: AgentIdSchema,
+			channelId: ChannelIdSchema.nullable(),
+			currentRevisionId: AgentRevisionIdSchema,
+			avatar: z.enum([
+				"applied",
+				"none",
+				"failed"
+			])
+		}).strict(),
+		error: HostApiErrorSchema
+	}),
+	listCommunityMyPersonas: defineContract({
+		timeoutMs: 3e4,
+		method: "GET",
+		path: "/api/community/mine/personas",
+		params: EmptyParamsSchema,
+		request: NoRequestBodySchema,
+		response: CommunityMyPersonasSchema,
+		error: HostApiErrorSchema
+	}),
+	/** 把智能体的设定分享到社区；带 `personaId` 时更新自己已发布的人设（生成新修订并重新审查）。 */
+	publishCommunityPersona: defineContract({
+		timeoutMs: 6e4,
+		method: "POST",
+		path: "/api/community/personas/publish",
+		params: EmptyParamsSchema,
+		request: z.object({
+			agentId: AgentIdSchema,
+			personaId: CommunityPersonaIdSchema.optional(),
+			name: z.string().trim().min(1).max(80),
+			summary: z.string().trim().min(1).max(200),
+			description: z.string().max(2e4),
+			tags: z.array(z.string().trim().min(1).max(40)).max(16),
+			persona: z.string().trim().min(1).max(COMMUNITY_PERSONA_MAX_LENGTH),
+			notes: z.string().max(2e3).optional(),
+			/** 页面缩放后的头像（Base64）；省略时不上传头像，更新时保留社区上的原头像。 */
+			avatar: z.object({
+				mediaType: z.enum(COMMUNITY_PERSONA_AVATAR_TYPES),
+				base64: z.string().min(1).max(Math.ceil(512 * 1024 * 4 / 3) + 4)
+			}).strict().optional()
+		}).strict(),
+		response: CommunityMyPersonaSchema,
+		error: HostApiErrorSchema
+	}),
 	testMcpServer: defineContract({
 		timeoutMs: 3e4,
 		method: "POST",
@@ -4367,8 +4896,18 @@ const HostApiContracts = {
 		method: "POST",
 		path: "/api/extensions/:extensionId/revisions/:revisionId/call",
 		params: extensionRevisionParam,
+		/**
+		* A panel's call to its extension's host instance. The Host checks the anchor (the agent has the extension
+		* enabled; the channel or connection exists) and hands the extension the resolved caller.
+		*/
 		request: z.object({
-			agentId: AgentIdSchema,
+			/** Absent: the call comes from the extension itself, like a page call. */
+			anchor: z.object({
+				kind: ExtensionPanelAnchorSchema,
+				id: NonEmptyStringSchema
+			}).strict().optional(),
+			/** The agent the panel is shown for; must be the responding agent of an anchored channel. */
+			agentId: AgentIdSchema.optional(),
 			method: NonEmptyStringSchema,
 			input: JsonValueSchema.optional()
 		}).strict(),
@@ -4405,16 +4944,26 @@ const HostApiContracts = {
 		params: agentExtensionParam,
 		request: z.object({
 			revisionId: ExtensionRevisionIdSchema,
-			permissionApproval: z.object({ permissionDigest: z.string().regex(/^[a-f0-9]{64}$/u) }).strict().optional()
+			/** Approval of the agent-layer capabilities. */
+			permissionApproval: PermissionApprovalSchema.optional(),
+			/** Approval of the host layer when enabling also installs or switches the extension on this machine. */
+			hostPermissionApproval: PermissionApprovalSchema.optional()
 		}).strict(),
-		response: z.object({ activation: z.object({
-			agentId: AgentIdSchema,
-			extensionId: ExtensionIdSchema,
-			extensionRevisionId: ExtensionRevisionIdSchema,
-			config: JsonValueSchema,
-			configuredSecrets: z.array(z.string()).optional(),
-			activatedAt: z.number().int().safe().nonnegative()
-		}).strict() }).strict(),
+		/**
+		* The committed Activation, or — while the agent is still replying — `pending` with the accepted request; it then
+		* takes effect at the agent's next safe gap and its progress appears in the snapshot's `activationTransitions`.
+		*/
+		response: z.object({
+			activation: z.object({
+				agentId: AgentIdSchema,
+				extensionId: ExtensionIdSchema,
+				extensionRevisionId: ExtensionRevisionIdSchema,
+				config: JsonValueSchema,
+				configuredSecrets: z.array(z.string()).optional(),
+				activatedAt: z.number().int().safe().nonnegative()
+			}).strict().optional(),
+			pending: ExtensionActivationTransitionSchema.optional()
+		}).strict().refine((value) => value.activation === void 0 !== (value.pending === void 0), "启用结果必须二选一。"),
 		error: HostApiErrorSchema
 	}),
 	deactivateExtension: defineContract({
@@ -4423,7 +4972,11 @@ const HostApiContracts = {
 		path: "/api/agents/:agentId/extensions/:extensionId/activation",
 		params: agentExtensionParam,
 		request: NoRequestBodySchema,
-		response: z.object({ disabled: z.literal(true) }).strict(),
+		/** `pending` is present when the agent is still replying; the Activation is removed at its next safe gap. */
+		response: z.object({
+			disabled: z.literal(true),
+			pending: ExtensionActivationTransitionSchema.optional()
+		}).strict(),
 		error: HostApiErrorSchema
 	}),
 	updateExtensionActivationConfig: defineContract({
@@ -4448,8 +5001,15 @@ const HostApiContracts = {
 		method: "PUT",
 		path: "/api/extensions/:extensionId/installation/config",
 		params: extensionParam,
-		request: z.object({ config: JsonValueSchema }).strict(),
-		response: z.object({ config: JsonValueSchema }).strict(),
+		request: z.object({
+			config: JsonValueSchema,
+			/** Write-only credential drafts keyed by secret field; an absent or empty draft keeps the stored one. */
+			secrets: z.record(z.string(), z.string().max(8192)).optional()
+		}).strict(),
+		response: z.object({
+			config: JsonValueSchema,
+			configuredSecrets: z.array(z.string()).optional()
+		}).strict(),
 		error: HostApiErrorSchema
 	}),
 	installHostExtension: defineContract({
@@ -4460,7 +5020,10 @@ const HostApiContracts = {
 		params: extensionParam,
 		request: z.object({
 			revisionId: ExtensionRevisionIdSchema,
-			permissionApproval: z.object({ permissionDigest: z.string().regex(/^[a-f0-9]{64}$/u) }).strict().optional()
+			/** Approval of the host layer (browser permissions and `permissions.host`). */
+			permissionApproval: PermissionApprovalSchema.optional(),
+			/** Approval of expanded agent-layer capabilities for the agents that move to this Revision. */
+			agentPermissionApproval: PermissionApprovalSchema.optional()
 		}).strict(),
 		response: z.object({ installation: z.object({
 			extensionId: ExtensionIdSchema,
@@ -4689,6 +5252,6 @@ function buildHostApiPath(name, input) {
 	return buildValidatedHostApiPath(HostApiContracts[name], input);
 }
 //#endregion
-export { ACTIVITY_MAX_BUCKETS, ACTIVITY_MAX_WINDOW_MS, ACTIVITY_MIN_BUCKET_MS, ADAPTER_PANEL_ANCHORS, AGENT_PANEL_ANCHORS, ActivityQuerySchema, AdapterActivityKeySchema, AdmissionIdSchema, AgentAppearanceSchema, AgentIdSchema, AgentRevisionChangedFieldSchema, AgentRevisionHistorySchema, AgentRevisionIdSchema, AssetIdSchema, AttentionItemSchema, AttentionListSchema, AuthoringAttemptIdSchema, AuthoringTaskIdSchema, CHANNEL_UNREAD_COUNT_CAP, COMMUNITY_OFFICIAL_HANDLE, COMMUNITY_REVIEW_DIMENSIONS, COMMUNITY_REVIEW_DIMENSION_LABELS, COMMUNITY_REVIEW_STATUSES, CONFIG_SCHEMA_MAX_BYTES, ChannelActivitySeriesSchema, ChannelActivitySummarySchema, ChannelEventIdSchema, ChannelFactSseDataSchema, ChannelFactSseItemSchema, ChannelIdSchema, ChannelMemberIdSchema, ChannelPendingContextSchema, ChannelRuntimeCacheSampleSchema, ChannelRuntimeCacheSchema, ChannelRuntimeOccupancySchema, ChannelRuntimePerformanceSampleSchema, ChannelRuntimePerformanceSchema, ChannelRuntimePhaseSchema, ChannelRuntimeProjectionSchema, ChannelRuntimeSseDataSchema, ChannelRuntimeStepSchema, ChannelRuntimeToolSchema, ChannelRuntimeTurnSchema, ChannelRuntimeUsageSchema, ClientNotificationFeedResponseSchema, ClientNotificationSchema, CommunityAccountSchema, CommunityEndpointSchema, CommunityEnvironmentSchema, CommunityExtensionDetailSchema, CommunityExtensionSummarySchema, CommunityGradeSchema, CommunityInstalledItemSchema, CommunityInstalledSchema, CommunityMyExtensionSchema, CommunityPermissionItemSchema, CommunityReleaseIdSchema, CommunityReleaseSchema, CommunityReviewReportSchema, CommunityReviewStatusSchema, CommunitySourceSchema, CommunityStatusSchema, ConfigSchemaDocumentSchema, ConfigSchemaMetaSchema, ConfigSchemaNodeSchema, ConnectionEventIdSchema, ConnectionIdSchema, ConnectionPanelRoleSchema, ConnectionTestResultSchema, DshCredentialRefSchema, DshCredentialViewSchema, DshCredentialsChangedSseDataSchema, DshNxtHostUiSchema, DshPluginCatalogEntrySchema, DshPluginEntryIdSchema, DshPluginOperationSseDataSchema, DshPluginPackageIdSchema, DshSettingsChangedSseDataSchema, DshSettingsMutationRequestSchema, DshSettingsNamespaceSchema, DshSettingsPathOperationSchema, DshSettingsPathSchema, DynamicChangedSseDataSchema, DynamicClientApprovalPolicySchema, EMPTY_CONFIG_SCHEMA, EMPTY_EXTENSION_UI_CONTRIBUTIONS, EXTENSION_CONTEXT_DYNAMIC_MAX_CHARS, EXTENSION_CONTEXT_STATIC_MAX_CHARS, EXTENSION_DATA_HOOK_PERMISSIONS, EXTENSION_INBOUND_HOOK_MAX_TIMEOUT_MS, EXTENSION_JOB_MAX_RUNTIME, EXTENSION_LLM_MAX_CALLS_PER_TURN, EXTENSION_LLM_MAX_OUTPUT_TOKENS, EXTENSION_SDK_LEVEL, EXTENSION_STORAGE_DEFAULT_QUOTA_BYTES, EXTENSION_STORAGE_MAX_QUOTA_BYTES, EXTENSION_STORAGE_SCOPES, EpisodeHandoffIdSchema, EpisodeIdSchema, ExtensionCapabilitiesSchema, ExtensionConfigDeclarationSchema, ExtensionContextContributionSchema, ExtensionDeclaredJobSchema, ExtensionIdSchema, ExtensionImportInspectionSchema, ExtensionInboundHookCapabilitySchema, ExtensionJobsCapabilitySchema, ExtensionLlmCapabilitySchema, ExtensionMcpCapabilitySchema, ExtensionMcpServerNameSchema, ExtensionMcpServerSchema, ExtensionMcpValueSchema, ExtensionNetworkCapabilitySchema, ExtensionNetworkDomainSchema, ExtensionPanelAnchorSchema, ExtensionPanelDeclarationSchema, ExtensionPlatformCapabilitySchema, ExtensionRequiresSchema, ExtensionRevisionIdSchema, ExtensionStorageCapabilitySchema, ExtensionStorageScopeSchema, ExtensionUiContributionsSchema, HOST_UI_KIT_COMPONENT_NAMES, HostApiContracts, HostApiErrorSchema, HostConnectionEventSchema, HostIconNameSchema, HostPageContributionSchema, HostPageIconSchema, HostSnapshotMessageSchema, HostSnapshotSchema, HostSseEventSchema, HostSseStatusDataSchema, HostSyncCursorSchema, HostUiKitComponentNameSchema, HostUiNavigationGroupSchema, HostUiNavigationItemSchema, HostUiNavigationModelSchema, HostUiNetworkOriginSchema, HostUiOwnerSchema, HostUiPageEntrySchema, HostUiPageGeometryEvidenceSchema, HostUiPageInstanceIdSchema, HostUiPagePreferencesSchema, HostUiPermissionDeclarationSchema, HostUiPermissionSchema, HostUpgradeSummarySchema, INSECURE_HTTP_MANAGEMENT_PAIR_PROOF_PREFIX, ImageUnderstandingPolicyApiSchema, InsecureHttpManagementChallengeResponseSchema, InstanceDescriptorSchema, InstanceDescriptorWireSchema, JsonValueSchema, LlmDiscoveredModelSchema, LlmModelInputModalitiesSchema, LlmProviderCredentialSchema, LlmProviderModelSchema, LlmProviderSettingsSchema, LlmProviderViewSchema, LogicalMessageIdSchema, MANAGEMENT_PAIR_PROOF_PREFIX, ManagementChallengeResponseSchema, ManagementDeviceEnrollmentRequestSchema, ManagementDeviceEnrollmentResponseSchema, ManagementDeviceIdSchema, ManagementDeviceViewSchema, ManagementSessionRequestSchema, ManagementSessionResponseSchema, McpServerFormSchema, MessagePartSchema, MessagePartsSchema, MessageRendererContributionSchema, NonEmptyMessagePartsSchema, NotificationEventKeySchema, NotificationSettingsViewSchema, OutboundIntentIdSchema, PROMPT_DOCUMENT_MAX_PLAIN_TEXT_LENGTH, PROMPT_DOCUMENT_MAX_REFERENCES, PanelContributionSchema, PanelDensitySchema, PhysicalDeliveryIdSchema, PlatformIdentityIdSchema, PlatformUserListResponseSchema, PromptDocumentV1Schema, PromptSegmentSchema, RICH_EXTENSION_MAX_BYTES, RichExtensionSchema, RichKindSchema, RichTargetUrlSchema, RuntimeCompatibilityDiagnosticSchema, ScheduledTaskIdSchema, ScheduledTaskSchema, ServerInstanceIdSchema, TestBarkNotificationRequestSchema, ToolViewContributionSchema, ToolViewDensitySchema, UpdateNotificationSettingsRequestSchema, WorkTreeOrderSchema, activityDurationMs, buildHostApiContractPath, buildHostApiPath, communityPublisherLabel, communityReviewLabel, configDescription, configFieldKind, configFields, configSchema, configSecretKeys, extensionCapabilitiesExpand, insecureHttpManagementPairProofMessage, managementPairProofMessage, mcpSecretFields, messagePartAssetId, messagePartAssetIds, messagePartsSearchText, normalizePromptDocument, parseConfigValue, parseJsonValue, parseMessageParts, promptDocumentFromText, promptDocumentPlainText, richPartContextText, summarizeExtensionCapabilities, validateConfigValue };
+export { ACTIVITY_MAX_BUCKETS, ACTIVITY_MAX_WINDOW_MS, ACTIVITY_MIN_BUCKET_MS, ActivityQuerySchema, AdapterActivityKeySchema, AdmissionIdSchema, AgentAppearanceSchema, AgentIdSchema, AgentRevisionChangedFieldSchema, AgentRevisionHistorySchema, AgentRevisionIdSchema, AssetIdSchema, AttentionItemSchema, AttentionListSchema, AuthoringAttemptIdSchema, AuthoringTaskIdSchema, CHANNEL_UNREAD_COUNT_CAP, COMMUNITY_EXTENSION_SORTS, COMMUNITY_LISTING_LIMITS, COMMUNITY_OFFICIAL_HANDLE, COMMUNITY_PERSONA_AVATAR_MAX_BYTES, COMMUNITY_PERSONA_AVATAR_TYPES, COMMUNITY_PERSONA_MAX_LENGTH, COMMUNITY_RATING_BADGES, COMMUNITY_RATING_BADGE_LIMIT, COMMUNITY_RATING_DIMENSIONS, COMMUNITY_RATING_DIMENSION_LABELS, COMMUNITY_REVIEWER_NAME, COMMUNITY_REVIEW_DIMENSION_LABELS, COMMUNITY_REVIEW_STATUSES, CONFIG_SCHEMA_MAX_BYTES, ChannelActivitySeriesSchema, ChannelActivitySummarySchema, ChannelEventIdSchema, ChannelFactSseDataSchema, ChannelFactSseItemSchema, ChannelIdSchema, ChannelMemberIdSchema, ChannelPendingContextSchema, ChannelPromptViewSchema, ChannelRuntimeCacheSampleSchema, ChannelRuntimeCacheSchema, ChannelRuntimeContextSchema, ChannelRuntimeInputSchema, ChannelRuntimeOccupancySchema, ChannelRuntimePerformanceSampleSchema, ChannelRuntimePerformanceSchema, ChannelRuntimePhaseSchema, ChannelRuntimeProjectionSchema, ChannelRuntimeSseDataSchema, ChannelRuntimeStepSchema, ChannelRuntimeToolSchema, ChannelRuntimeTurnSchema, ChannelRuntimeUsageSchema, ClientNotificationFeedResponseSchema, ClientNotificationSchema, CommunityAccountSchema, CommunityEndpointSchema, CommunityEnvironmentSchema, CommunityExtensionDetailSchema, CommunityExtensionSortSchema, CommunityExtensionSummarySchema, CommunityInstalledItemSchema, CommunityInstalledSchema, CommunityListingInputSchema, CommunityMyExtensionSchema, CommunityMyPersonaSchema, CommunityMyPersonasSchema, CommunityPermissionItemSchema, CommunityPersonaDetailSchema, CommunityPersonaIdSchema, CommunityPersonaReviewStatusSchema, CommunityPersonaRevisionIdSchema, CommunityPersonaSummarySchema, CommunityRatingSchema, CommunityReleaseIdSchema, CommunityReleaseSchema, CommunityReviewReportSchema, CommunityReviewStatusSchema, CommunitySourceSchema, CommunityStatusSchema, ConfigSchemaDocumentSchema, ConfigSchemaMetaSchema, ConfigSchemaNodeSchema, ConnectionEventIdSchema, ConnectionIdSchema, ConnectionPanelRoleSchema, ConnectionTestResultSchema, DshCredentialRefSchema, DshCredentialViewSchema, DshCredentialsChangedSseDataSchema, DshNxtHostUiSchema, DshPluginCatalogEntrySchema, DshPluginEntryIdSchema, DshPluginOperationSseDataSchema, DshPluginPackageIdSchema, DshSettingsChangedSseDataSchema, DshSettingsMutationRequestSchema, DshSettingsNamespaceSchema, DshSettingsPathOperationSchema, DshSettingsPathSchema, DynamicChangedSseDataSchema, DynamicClientApprovalPolicySchema, EMPTY_CONFIG_SCHEMA, EMPTY_EXTENSION_PERMISSIONS, EMPTY_EXTENSION_UI_CONTRIBUTIONS, EXTENSION_CONTEXT_DYNAMIC_MAX_CHARS, EXTENSION_CONTEXT_STATIC_MAX_CHARS, EXTENSION_DATA_HOOK_PERMISSIONS, EXTENSION_INBOUND_HOOK_MAX_TIMEOUT_MS, EXTENSION_JOB_MAX_RUNTIME, EXTENSION_LLM_MAX_CALLS_PER_TURN, EXTENSION_LLM_MAX_OUTPUT_TOKENS, EXTENSION_PROVIDES, EXTENSION_SDK_LEVEL, EXTENSION_STORAGE_DEFAULT_QUOTA_BYTES, EXTENSION_STORAGE_MAX_QUOTA_BYTES, EXTENSION_STORAGE_SCOPES, EpisodeHandoffIdSchema, EpisodeIdSchema, ExtensionActivationTransitionSchema, ExtensionCapabilitiesSchema, ExtensionConfigDeclarationSchema, ExtensionContextContributionSchema, ExtensionDeclaredJobSchema, ExtensionIdSchema, ExtensionImportInspectionSchema, ExtensionInboundHookCapabilitySchema, ExtensionJobsCapabilitySchema, ExtensionLayeredConfigSchema, ExtensionLlmCapabilitySchema, ExtensionMcpCapabilitySchema, ExtensionMcpServerNameSchema, ExtensionMcpServerSchema, ExtensionMcpValueSchema, ExtensionNetworkCapabilitySchema, ExtensionNetworkDomainSchema, ExtensionPanelAnchorSchema, ExtensionPanelDeclarationSchema, ExtensionPermissionRequirementSchema, ExtensionPermissionsSchema, ExtensionPlatformCapabilitySchema, ExtensionProvideSchema, ExtensionRequiresSchema, ExtensionRevisionIdSchema, ExtensionStorageCapabilitySchema, ExtensionStorageScopeSchema, ExtensionUiContributionsSchema, HOST_PAGE_DEFAULT_RAIL_ORDER, HOST_UI_KIT_COMPONENT_NAMES, HostApiContracts, HostApiErrorSchema, HostConnectionEventSchema, HostIconNameSchema, HostLayerCapabilitiesSchema, HostPageContributionSchema, HostPageIconSchema, HostSnapshotMessageSchema, HostSnapshotSchema, HostSseEventSchema, HostSseStatusDataSchema, HostSyncCursorSchema, HostUiKitComponentNameSchema, HostUiNavigationGroupSchema, HostUiNavigationItemSchema, HostUiNavigationModelSchema, HostUiNetworkOriginSchema, HostUiOwnerSchema, HostUiPageEntrySchema, HostUiPageGeometryEvidenceSchema, HostUiPageInstanceIdSchema, HostUiPagePreferencesSchema, HostUiPermissionDeclarationSchema, HostUiPermissionSchema, HostUpgradeSummarySchema, INSECURE_HTTP_MANAGEMENT_PAIR_PROOF_PREFIX, ImageUnderstandingPolicyApiSchema, InsecureHttpManagementChallengeResponseSchema, InstanceDescriptorSchema, InstanceDescriptorWireSchema, JsonValueSchema, LlmDiscoveredModelSchema, LlmModelInputModalitiesSchema, LlmProviderCredentialSchema, LlmProviderModelSchema, LlmProviderSettingsSchema, LlmProviderTestResultSchema, LlmProviderViewSchema, LogicalMessageIdSchema, MANAGEMENT_PAIR_PROOF_PREFIX, ManagementChallengeResponseSchema, ManagementDeviceEnrollmentRequestSchema, ManagementDeviceEnrollmentResponseSchema, ManagementDeviceIdSchema, ManagementDeviceViewSchema, ManagementSessionRequestSchema, ManagementSessionResponseSchema, McpServerFormSchema, MessagePartSchema, MessagePartsSchema, MessageRendererContributionSchema, NonEmptyMessagePartsSchema, NotificationEventKeySchema, NotificationSettingsViewSchema, OutboundIntentIdSchema, PANEL_ANCHOR_LAYER, PROMPT_DOCUMENT_MAX_PLAIN_TEXT_LENGTH, PROMPT_DOCUMENT_MAX_REFERENCES, PanelContributionSchema, PanelDensitySchema, PhysicalDeliveryIdSchema, PlatformIdentityIdSchema, PlatformUserListResponseSchema, PromptDocumentV1Schema, PromptSegmentSchema, RICH_EXTENSION_MAX_BYTES, RichExtensionSchema, RichKindSchema, RichTargetUrlSchema, RuntimeCompatibilityDiagnosticSchema, ScheduledTaskIdSchema, ScheduledTaskSchema, ServerInstanceIdSchema, TestBarkNotificationRequestSchema, ToolViewContributionSchema, ToolViewDensitySchema, UpdateNotificationSettingsRequestSchema, WorkTreeOrderSchema, activityDurationMs, agentPermissionDeclaration, buildHostApiContractPath, buildHostApiPath, communityPersonaReviewLabel, communityPublisherLabel, communityReviewLabel, configDescription, configFieldKind, configFields, configSchema, configSecretKeys, extensionCapabilitiesExpand, hostLayerAsCapabilities, hostPageRailOrder, hostPermissionDeclaration, insecureHttpManagementPairProofMessage, managementPairProofMessage, mcpSecretFields, messagePartAssetId, messagePartAssetIds, messagePartsSearchText, normalizePromptDocument, parseConfigValue, parseJsonValue, parseMessageParts, promptDocumentFromText, promptDocumentPlainText, richPartContextText, summarizeExtensionCapabilities, validateConfigValue };
 
 //# sourceMappingURL=index.mjs.map