@nekro-nxt/contracts 0.4.0 → 0.6.0

package/dist/index.mjs

@@ -1,5 +1,34 @@
 import { z } from "zod";
 //#region src/domain.ts
+/** Rendered send-tool result consumed by both the agent and the product detail view. */
+const MessageDeliverySummarySchema = z.object({
+	status: z.enum([
+		"sent",
+		"partially-sent",
+		"failed",
+		"unknown"
+	]),
+	issues: z.array(z.object({
+		status: z.enum(["failed", "unknown"]),
+		message: z.string().max(1e3),
+		kind: z.enum([
+			"transient",
+			"permanent",
+			"rate-limited",
+			"authentication",
+			"invalid"
+		]).optional(),
+		action: z.string().max(120).optional(),
+		retcode: z.number().int().safe().optional()
+	}).strict()).max(20),
+	omittedIssues: z.number().int().nonnegative().optional(),
+	/** Extensions that changed the message before it was sent, the content they produced and what they appended. */
+	processing: z.object({
+		processedBy: z.array(z.string()),
+		parts: z.array(z.unknown()).optional(),
+		followUps: z.array(z.string()).optional()
+	}).strict().optional()
+}).strict();
 const brandedId = (prefix, brand) => z.string().regex(new RegExp(`^${prefix}_[0-9A-Za-z]+$`), `${brand} has an invalid format.`).brand(brand);
 const AgentIdSchema = brandedId("agt", "AgentId");
 const AgentRevisionIdSchema = brandedId("arev", "AgentRevisionId");
@@ -23,6 +52,9 @@ const DshPluginEntryIdSchema = brandedId("dse", "DshPluginEntryId");
 const HostUiPageInstanceIdSchema = brandedId("hup", "HostUiPageInstanceId");
 const AuthoringTaskIdSchema = brandedId("aut", "AuthoringTaskId");
 const AuthoringAttemptIdSchema = brandedId("aua", "AuthoringAttemptId");
+const SubConversationIdSchema = brandedId("cnv", "SubConversationId");
+const CredentialIdSchema = brandedId("crd", "CredentialId");
+const LinkedAccountIdSchema = brandedId("acc", "LinkedAccountId");
 const AdapterActivityKeySchema = z.string().trim().min(1).max(128).regex(/^[a-z][a-z0-9]*(?:[.-][a-z0-9]+)*$/u, "Adapter activity key has an invalid format.");
 const PromptTextSegmentSchema = z.object({
 	type: z.literal("text"),
@@ -119,7 +151,12 @@ const MessagePartSchema = z.discriminatedUnion("type", [
 	z.object({
 		type: z.literal("image"),
 		assetId: AssetIdSchema,
-		alt: z.string().optional()
+		alt: z.string().optional(),
+		/**
+		* The platform reported the picture as a sticker. A hint only: a sticker dragged in from a desktop client and
+		* pictures from platforms without this signal arrive unmarked.
+		*/
+		sticker: z.literal(true).optional()
 	}).strict(),
 	z.object({
 		type: z.literal("file"),
@@ -151,17 +188,17 @@ const NonEmptyMessagePartsSchema = MessagePartsSchema.min(1);
 function parseMessageParts(input) {
 	return MessagePartsSchema.parse(input);
 }
-const collectRichAssetIds = (value, into) => {
+const collectRichAssetIds = (value, into, imagesOnly = false) => {
 	if (value === null || value === void 0 || typeof value === "boolean" || typeof value === "number") return;
 	if (typeof value === "string") return;
 	if (Array.isArray(value)) {
-		for (const item of value) collectRichAssetIds(item, into);
+		for (const item of value) collectRichAssetIds(item, into, imagesOnly);
 		return;
 	}
-	for (const [key, child] of Object.entries(value)) if ((key === "imageAssetId" || key === "previewAssetId") && typeof child === "string") {
+	for (const [key, child] of Object.entries(value)) if ((key === "imageAssetId" || key === "previewAssetId" || !imagesOnly && (key === "audioAssetId" || key === "fileAssetId")) && typeof child === "string") {
 		const parsed = AssetIdSchema.safeParse(child);
 		if (parsed.success) into.push(parsed.data);
-	} else collectRichAssetIds(child, into);
+	} else collectRichAssetIds(child, into, imagesOnly);
 };
 const messagePartAssetIds = (part) => {
 	if (part.type === "image" || part.type === "file" || part.type === "audio") return [part.assetId];
@@ -172,6 +209,14 @@ const messagePartAssetIds = (part) => {
 	return ids;
 };
 const messagePartAssetId = (part) => messagePartAssetIds(part)[0];
+/** Only actual pictures enter visual context; forwarded files and recordings retain their own media kind. */
+const messagePartImageAssetIds = (part) => {
+	if (part.type === "image") return [part.assetId];
+	if (part.type !== "rich") return [];
+	const ids = part.previewAssetId ? [part.previewAssetId] : [];
+	collectRichAssetIds(part.extension, ids, true);
+	return ids;
+};
 const asJsonRecord = (value) => value !== null && typeof value === "object" && !Array.isArray(value) ? value : void 0;
 const richItemLine = (value) => {
 	const item = asJsonRecord(value);
@@ -182,10 +227,14 @@ const richItemLine = (value) => {
 	const cardSummary = typeof card?.["summary"] === "string" ? card["summary"] : typeof card?.["title"] === "string" ? card["title"] : void 0;
 	const imageName = typeof item["imageName"] === "string" ? item["imageName"] : void 0;
 	const imageText = typeof item["imageAssetId"] === "string" ? `[图片${imageName ? ` ${imageName}` : ""}]` : void 0;
+	const audioText = typeof item["audioAssetId"] === "string" ? `[语音 ${item["audioAssetId"]}]` : void 0;
+	const fileText = typeof item["fileAssetId"] === "string" ? `[${typeof item["fileMediaType"] === "string" && item["fileMediaType"].startsWith("video/") ? "视频" : "文件"} ${item["fileAssetId"]}${typeof item["fileName"] === "string" ? `：${item["fileName"]}` : ""}]` : void 0;
 	const body = [
 		text,
 		cardSummary ? `[卡片] ${cardSummary}` : void 0,
-		imageText
+		imageText,
+		audioText,
+		fileText
 	].filter((part) => Boolean(part && part.length > 0)).join(" ");
 	if (!sender && !body) return void 0;
 	return sender ? `${sender}：${body}` : body;
@@ -216,8 +265,9 @@ const messagePartsSearchText = (parts) => parts.flatMap((part) => {
 * product form can render and the Host can validate without executing Schema callbacks.
 *
 * Supported nodes: object (dict), string, number, natural, percent, boolean, const, union of consts (enum) and
-* array of primitives. `meta.role: 'secret'` marks a write-only credential. NekroNXT reads three extra meta keys:
-* `hint` (help text), `advanced` (collapsed by default) and `visibleWhen` (show only when a sibling equals a value).
+* array of primitives. `meta.role: 'secret'` marks a write-only credential. NekroNXT reads four extra meta keys:
+* `hint` (help text), `advanced` (collapsed by default), `visibleWhen` (show only when a sibling equals a value) and
+* `agentWritable: false` (only an administrator may change the field, in the console).
 */
 const CONFIG_SCHEMA_MAX_BYTES = 64 * 1024;
 const DescriptionSchema = z.union([z.string(), z.record(z.string(), z.string())]);
@@ -237,6 +287,8 @@ const ConfigSchemaMetaSchema = z.object({
 	}).optional(),
 	advanced: z.boolean().optional(),
 	group: z.string().max(40).optional(),
+	/** `false` keeps the field out of the agent's reach: only an administrator changes it, in the console. */
+	agentWritable: z.boolean().optional(),
 	visibleWhen: z.object({
 		key: z.string().min(1).max(64),
 		equals: JsonValueSchema
@@ -281,6 +333,11 @@ const EMPTY_CONFIG_SCHEMA = {
 	type: "object",
 	dict: {}
 };
+const configFieldLevel = (field, networkFields) => {
+	if (field.adminOnly) return "admin";
+	if (field.kind === "secret") return "secret";
+	return (networkFields instanceof Set ? networkFields : new Set(networkFields)).has(field.key) ? "network" : "normal";
+};
 const configDescription = (meta) => {
 	const description = meta?.description;
 	if (typeof description === "string") return description;
@@ -319,9 +376,12 @@ const configFields = (document) => Object.entries(document.dict).map(([key, node
 		advanced: node.meta?.advanced === true,
 		...node.meta?.group === void 0 ? {} : { group: node.meta.group },
 		...options === void 0 ? {} : { options },
+		adminOnly: node.meta?.agentWritable === false,
 		node
 	};
 });
+/** Fields declared `meta.agentWritable: false`. */
+const adminOnlyConfigKeys = (document) => configFields(document).filter((field) => field.adminOnly).map((field) => field.key);
 const configSecretKeys = (document) => configFields(document).filter((field) => field.kind === "secret").map((field) => field.key);
 const isRecord = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
 const sameJson = (left, right) => JSON.stringify(left) === JSON.stringify(right);
@@ -475,7 +535,8 @@ const fieldMeta = (title, options = {}) => ({
 	...options.default === void 0 ? {} : { default: options.default },
 	...options.required === void 0 ? {} : { required: options.required },
 	...options.advanced === void 0 ? {} : { advanced: options.advanced },
-	...options.group === void 0 ? {} : { group: options.group }
+	...options.group === void 0 ? {} : { group: options.group },
+	...options.agentWritable === void 0 ? {} : { agentWritable: options.agentWritable }
 });
 /** Builds serialized Schemastery documents without depending on the Schemastery runtime. */
 const configSchema = {
@@ -525,9 +586,16 @@ const configSchema = {
 * Host capability level this build implements. A Revision that declares `requires.sdk` above it is rejected at
 * import with an "upgrade NekroNXT" message instead of an opaque schema error. Bump when a Manifest capability
 * ships; never reuse a level for a different meaning. Level 7 is Manifest V7 (host instance + agent attachments); level 8 adds the asset library, image info, tool result
-* images, the search index and host-layer model calls.
+* images, the search index and host-layer model calls. Level 9 adds the structured logger and explicit chat commands. Level 10 adds version lineage, the data version with its
+* migration hook and administrator-only commands. Level 11 lists the pictures of an inbound message to inbound hooks.
+* Level 12 adds credential placeholders (`secrets.placeholder`) that `http.fetch` fills for the credential's domains.
+* Level 13 adds outbound processing (`harness.onOutbound`, `permissions.agent.outbound`).
 */
-const EXTENSION_SDK_LEVEL = 8;
+const EXTENSION_SDK_LEVEL = 13;
+/** Outbound processing needs this level; packages that declare `permissions.agent.outbound` declare it. */
+const EXTENSION_OUTBOUND_SDK_LEVEL = 13;
+/** Lineage, `dataVersion` and administrator-only commands need this level; packages that carry them declare it. */
+const EXTENSION_GOVERNANCE_SDK_LEVEL = 10;
 /**
 * The first NekroNXT version of each capability level, so users read "needs NekroNXT 0.5.0" rather than a level
 * number. Add the row for a new level in the change that raises EXTENSION_SDK_LEVEL; a test keeps the two in step.
@@ -544,6 +612,26 @@ const EXTENSION_SDK_RELEASES = [
 	{
 		level: 8,
 		version: "0.5.0"
+	},
+	{
+		level: 9,
+		version: "0.6.0"
+	},
+	{
+		level: 10,
+		version: "0.6.0"
+	},
+	{
+		level: 11,
+		version: "0.6.0"
+	},
+	{
+		level: 12,
+		version: "0.7.0"
+	},
+	{
+		level: 13,
+		version: "0.7.0"
 	}
 ];
 /** The oldest NekroNXT version that supports `level`; undefined for a level no release supports yet. */
@@ -603,6 +691,21 @@ const ExtensionInboundHookCapabilitySchema = z.object({
 	mayForceTrigger: z.boolean(),
 	timeoutMs: z.number().int().min(100).max(EXTENSION_INBOUND_HOOK_MAX_TIMEOUT_MS)
 }).strict();
+const EXTENSION_OUTBOUND_MAX_TIMEOUT_MS = 15e3;
+/**
+* Outbound processing of the agent's own messages. `read` sees each message after it was delivered; `transform` may
+* replace its content or append messages before it is sent; `cancel` may stop it. `onTimeout` decides what happens
+* when the handler times out or throws before sending: `send` (default) sends the message as it is.
+*/
+const ExtensionOutboundCapabilitySchema = z.object({
+	read: z.literal(true).optional(),
+	transform: z.literal(true).optional(),
+	cancel: z.literal(true).optional(),
+	timeoutMs: z.number().int().min(100).max(EXTENSION_OUTBOUND_MAX_TIMEOUT_MS),
+	onTimeout: z.enum(["send", "cancel"]).optional()
+}).strict().refine((value) => value.read === true || value.transform === true || value.cancel === true, "outbound 至少声明 read、transform 或 cancel 中的一项。");
+/** Whether the extension takes part before sending (and so in the agent's processing order). */
+const outboundProcessesBeforeSend = (outbound) => outbound?.transform === true || outbound?.cancel === true;
 const EXTENSION_JOB_MAX_RUNTIME = 50;
 const ExtensionDeclaredJobSchema = z.object({
 	id: z.string().trim().regex(/^[a-z0-9][a-z0-9-]{0,39}$/u, "定时任务 id 只能使用小写字母、数字和连字符。"),
@@ -665,8 +768,15 @@ const ExtensionModelsCapabilitySchema = z.object({
 	maxCallsPerMinute: z.number().int().min(1).max(120),
 	maxOutputTokens: z.number().int().min(64).max(EXTENSION_LLM_MAX_OUTPUT_TOKENS)
 }).strict();
-/** A header or environment value: literal text, or the current value of a `meta.role: 'secret'` config field. */
-const ExtensionMcpValueSchema = z.union([z.string().max(4096), z.object({ secret: z.string().trim().min(1).max(64) }).strict()]);
+/**
+* A header or environment value: literal text, the current value of a `meta.role: 'secret'` config field, or a named
+* credential (by id or name) that the agent may use.
+*/
+const ExtensionMcpValueSchema = z.union([
+	z.string().max(4096),
+	z.object({ secret: z.string().trim().min(1).max(64) }).strict(),
+	z.object({ credential: z.string().trim().min(1).max(64) }).strict()
+]);
 /** Becomes the model-facing tool prefix `mcp__<name>__`. */
 const ExtensionMcpServerNameSchema = z.string().regex(/^[A-Za-z0-9_-]{1,32}$/u);
 const McpValueMapSchema = z.record(z.string().regex(/^[A-Za-z_][A-Za-z0-9_-]{0,127}$/u), ExtensionMcpValueSchema).refine((value) => Object.keys(value).length <= 32, "最多 32 项。").default({});
@@ -691,7 +801,9 @@ const ExtensionMcpCapabilitySchema = z.object({ servers: z.array(ExtensionMcpSer
 const McpFormValueSchema = z.object({
 	name: z.string().regex(/^[A-Za-z_][A-Za-z0-9_-]{0,127}$/u, "名称只能包含字母、数字、下划线和连字符。"),
 	value: z.string().max(4096),
-	secret: z.boolean().default(false)
+	secret: z.boolean().default(false),
+	/** Takes the value from this named credential instead; `value` and `secret` are then ignored. */
+	credential: z.string().trim().min(1).max(64).optional()
 }).strict();
 const McpServerFormSchema = z.discriminatedUnion("transport", [z.object({
 	transport: z.literal("streamable-http"),
@@ -706,7 +818,7 @@ const McpServerFormSchema = z.discriminatedUnion("transport", [z.object({
 	env: z.array(McpFormValueSchema).max(32).default([])
 }).strict()]);
 /** Secret config fields an MCP declaration reads. */
-const mcpSecretFields = (mcp) => [...new Set((mcp?.servers ?? []).flatMap((server) => Object.values(server.transport === "stdio" ? server.env : server.headers).flatMap((value) => typeof value === "string" ? [] : [value.secret])))];
+const mcpSecretFields = (mcp) => [...new Set((mcp?.servers ?? []).flatMap((server) => Object.values(server.transport === "stdio" ? server.env : server.headers).flatMap((value) => typeof value === "string" || !("secret" in value) ? [] : [value.secret])))];
 /** What a server connects to; changing it needs a new approval, unlike its credentials. */
 const mcpTarget = (server) => server.transport === "stdio" ? JSON.stringify([
 	"stdio",
@@ -731,6 +843,7 @@ const ExtensionCapabilitiesSchema = z.object({
 	models: ExtensionModelsCapabilitySchema.optional(),
 	history: z.object({ read: z.literal(true) }).strict().optional(),
 	inboundHook: ExtensionInboundHookCapabilitySchema.optional(),
+	outbound: ExtensionOutboundCapabilitySchema.optional(),
 	jobs: ExtensionJobsCapabilitySchema.optional(),
 	platform: ExtensionPlatformCapabilitySchema.optional(),
 	llm: ExtensionLlmCapabilitySchema.optional(),
@@ -794,6 +907,9 @@ const extensionCapabilitiesExpand = (previous, next) => {
 	const hook = next.inboundHook;
 	const previousHook = previous?.inboundHook;
 	if (hook !== void 0 && (previousHook === void 0 || hook.reads === "all" && previousHook.reads === "triggered" || hook.mayHide && !previousHook.mayHide || hook.mayForceTrigger && !previousHook.mayForceTrigger)) return true;
+	const outbound = next.outbound;
+	const previousOutbound = previous?.outbound;
+	if (outbound !== void 0 && (previousOutbound === void 0 || outbound.read === true && previousOutbound.read !== true || outbound.transform === true && previousOutbound.transform !== true || outbound.cancel === true && previousOutbound.cancel !== true || outbound.onTimeout === "cancel" && previousOutbound.onTimeout !== "cancel")) return true;
 	if (next.jobs?.runtime !== void 0 && (previous?.jobs?.runtime === void 0 || next.jobs.runtime.maxActive > previous.jobs.runtime.maxActive)) return true;
 	const previousMcp = new Set((previous?.mcp?.servers ?? []).map(mcpTarget));
 	if ((next.mcp?.servers ?? []).some((server) => !previousMcp.has(mcpTarget(server)))) return true;
@@ -878,6 +994,29 @@ const summarizeExtensionCapabilities = (capabilities, options = {}) => {
 			...effects === "" ? {} : { detail: `可以${effects}` }
 		});
 	}
+	const outbound = capabilities.outbound;
+	if (outbound !== void 0) {
+		if (outbound.transform === true) items.push({
+			key: "outbound.transform",
+			risk: "high",
+			label: "在智能体的消息发出前修改内容或追加消息"
+		});
+		if (outbound.cancel === true) items.push({
+			key: "outbound.cancel",
+			risk: "high",
+			label: "取消智能体要发出的消息"
+		});
+		if (outbound.read === true) items.push({
+			key: "outbound.read",
+			risk: "sensitive",
+			label: "查看智能体发出的每条消息"
+		});
+		if (outbound.onTimeout === "cancel" && (outbound.transform === true || outbound.cancel === true)) items.push({
+			key: "outbound.onTimeout",
+			risk: "high",
+			label: "这个扩展出错时，智能体的消息会发不出去"
+		});
+	}
 	const jobs = capabilities.jobs;
 	if (jobs?.declared !== void 0 && jobs.declared.length > 0) items.push({
 		key: "jobs.declared",
@@ -1326,6 +1465,10 @@ const requiredExtensionSdkLevel = (permissions) => {
 		permissions?.host?.index === void 0 && permissions?.agent?.index === void 0 ? void 0 : "检索索引",
 		permissions?.host?.models === void 0 ? void 0 : "本机层模型调用"
 	].filter((name) => name !== void 0);
+	if (permissions?.agent?.outbound !== void 0) return {
+		level: 13,
+		capabilities: ["出站处理"]
+	};
 	return level8.length > 0 ? {
 		level: 8,
 		capabilities: [...new Set(level8)]
@@ -1335,6 +1478,683 @@ const requiredExtensionSdkLevel = (permissions) => {
 	};
 };
 //#endregion
+//#region src/commands.ts
+const COMMAND_DEFAULT_TIMEOUT_SECONDS = 60;
+const COMMAND_MAX_TIMEOUT_SECONDS = 600;
+/**
+* Who may run a command. `channel-admin` is granted per channel; `admin` is an instance administrator (the signed-in
+* console or a platform account listed in Settings → Administrators) and also holds every channel's `channel-admin`.
+*/
+const CommandPermissionSchema = z.enum([
+	"public",
+	"channel-admin",
+	"admin"
+]);
+const nameSchema = z.string().min(1).max(64).regex(/^[\p{L}\p{N}_-]+$/u);
+const scalarSchema = z.union([
+	z.string(),
+	z.number().finite(),
+	z.boolean()
+]);
+const CommandParameterSchema = z.object({
+	name: nameSchema,
+	description: z.string().max(500).optional(),
+	kind: z.enum(["positional", "option"]),
+	type: z.enum([
+		"string",
+		"number",
+		"integer",
+		"boolean"
+	]),
+	required: z.boolean().optional(),
+	default: scalarSchema.optional(),
+	choices: z.array(scalarSchema).min(1).max(100).optional(),
+	min: z.number().finite().optional(),
+	max: z.number().finite().optional()
+}).strict();
+const CommandDefinitionSchema = z.object({
+	name: nameSchema,
+	aliases: z.array(nameSchema).max(16).default([]),
+	description: z.string().min(1).max(1e3),
+	parameters: z.array(CommandParameterSchema).max(32).default([]),
+	examples: z.array(z.string().max(2e3)).max(16).default([]),
+	minimumPermission: CommandPermissionSchema.default("public"),
+	enabledByDefault: z.boolean().default(true),
+	/**
+	* Where the result goes when an administrator runs the command from the console (Web or Desktop) in an external
+	* channel. `local` (default) shows it in the console only; `channel` also sends it through the bot account, and
+	* the console labels the command accordingly. Platform-originated commands always reply in their conversation.
+	*/
+	consoleReply: z.enum(["local", "channel"]).default("local"),
+	/**
+	* How long an extension handler may run before it is cancelled and recorded as timed out, so a stuck handler
+	* cannot hold the channel's command queue. Built-in commands ignore it.
+	*/
+	timeoutSeconds: z.number().int().min(1).max(600).default(60)
+}).strict().superRefine((definition, ctx) => {
+	const names = [definition.name, ...definition.aliases];
+	if (new Set(names).size !== names.length) ctx.addIssue({
+		code: "custom",
+		message: "命令名称和别名不能重复。"
+	});
+	if (new Set(definition.parameters.map((p) => p.name)).size !== definition.parameters.length) ctx.addIssue({
+		code: "custom",
+		message: "参数名称不能重复。"
+	});
+	let optional = false;
+	for (const p of definition.parameters) {
+		if (p.min !== void 0 && p.max !== void 0 && p.min > p.max) ctx.addIssue({
+			code: "custom",
+			message: `参数 ${p.name} 的范围无效。`
+		});
+		if (p.kind === "positional") {
+			if (optional && p.required) ctx.addIssue({
+				code: "custom",
+				message: "必填位置参数必须在可选参数之前。"
+			});
+			if (!p.required || p.default !== void 0) optional = true;
+		}
+		if (p.default !== void 0) try {
+			if (validateValue(p, String(p.default)) !== p.default) throw new Error("默认值类型不匹配。");
+		} catch {
+			ctx.addIssue({
+				code: "custom",
+				message: `参数 ${p.name} 的默认值无效。`
+			});
+		}
+	}
+});
+const CommandPolicySchema = z.object({
+	enabled: z.boolean().optional(),
+	permission: CommandPermissionSchema.optional()
+}).strict();
+const CommandExecutionIdentitySchema = z.object({
+	source: z.enum(["web", "platform"]),
+	connectionId: ConnectionIdSchema.optional(),
+	platformUserId: z.string().optional(),
+	displayName: z.string(),
+	viewerId: z.string().optional()
+}).strict();
+const CommandResultSchema = z.object({
+	parts: z.array(MessagePartSchema).min(1).max(32).refine((parts) => parts.every((p) => [
+		"text",
+		"image",
+		"file"
+	].includes(p.type)), "命令结果仅支持文本、图片和文件。"),
+	summary: z.string().max(2e3).optional()
+}).strict();
+/** An execution may send a few progress replies before its final result. */
+const COMMAND_MAX_PROGRESS_REPLIES = 5;
+const CommandReplySchema = z.object({
+	/** Position within the execution; the final result always has the highest ordinal. */
+	ordinal: z.number().int().nonnegative(),
+	kind: z.enum(["progress", "final"]),
+	parts: CommandResultSchema.shape.parts,
+	/** Set once the reply has an Outbound; absent with `error` means planning failed. */
+	intentId: OutboundIntentIdSchema.optional(),
+	error: z.string().optional()
+}).strict();
+const CommandExecutionRecordSchema = z.object({
+	id: z.string().min(1),
+	channelId: ChannelIdSchema,
+	source: z.enum(["web", "platform"]),
+	requestId: z.string().min(1).max(200),
+	eventId: ChannelEventIdSchema.optional(),
+	rawText: z.string(),
+	identity: CommandExecutionIdentitySchema,
+	commandName: z.string().optional(),
+	commandVersion: z.string().optional(),
+	extensionRevisionId: ExtensionRevisionIdSchema.optional(),
+	agentId: AgentIdSchema.optional(),
+	agentRevisionId: AgentRevisionIdSchema.optional(),
+	status: z.enum([
+		"pending",
+		"running",
+		"succeeded",
+		"failed",
+		"uncertain"
+	]),
+	result: CommandResultSchema.optional(),
+	error: z.string().optional(),
+	/** Replies in send order. A platform command's replies go to its conversation; see `replyLocal`. */
+	replies: z.array(CommandReplySchema).max(6).default([]),
+	/** No reply is sent on purpose (unauthorized or unknown platform command, or console-local result). */
+	replySuppressed: z.boolean().optional(),
+	/** The result was kept in the console on purpose and never sent to the platform. */
+	replyLocal: z.boolean().optional(),
+	createdAt: z.number().int().nonnegative(),
+	completedAt: z.number().int().nonnegative().optional()
+}).strict();
+/** Replies that still need an Outbound or a recorded failure. */
+const undeliveredCommandReplies = (record) => record.replySuppressed === true ? [] : record.replies.filter((reply) => reply.intentId === void 0 && reply.error === void 0);
+const CommandCatalogEntrySchema = z.object({
+	definition: CommandDefinitionSchema,
+	fullName: z.string(),
+	source: z.string(),
+	extensionRevisionId: ExtensionRevisionIdSchema.optional(),
+	enabled: z.boolean(),
+	permission: CommandPermissionSchema,
+	usage: z.string(),
+	available: z.boolean(),
+	unavailableReason: z.string().optional(),
+	globalPolicy: CommandPolicySchema.optional(),
+	channelPolicy: CommandPolicySchema.optional()
+}).strict();
+/** Shell-like quoting without evaluation or interpolation. */
+function tokenizeCommand(text) {
+	const tokens = [];
+	let value = "", quote = "", escaped = false, started = false;
+	for (const char of text) {
+		if (escaped) {
+			value += char;
+			escaped = false;
+			started = true;
+			continue;
+		}
+		if (char === "\\") {
+			escaped = true;
+			started = true;
+			continue;
+		}
+		if (quote) {
+			if (char === quote) quote = "";
+			else value += char;
+			continue;
+		}
+		if (char === "\"" || char === "'") {
+			quote = char;
+			started = true;
+			continue;
+		}
+		if (/\s/u.test(char)) {
+			if (started) tokens.push(value);
+			value = "";
+			started = false;
+			continue;
+		}
+		value += char;
+		started = true;
+	}
+	if (escaped || quote) throw new Error("引号或转义未闭合。");
+	if (started) tokens.push(value);
+	return tokens;
+}
+function validateValue(p, raw) {
+	let value = raw;
+	if (p.type === "boolean") {
+		if (!["true", "false"].includes(raw)) throw new Error(`参数 ${p.name} 必须为 true 或 false。`);
+		value = raw === "true";
+	} else if (p.type !== "string") {
+		value = Number(raw);
+		if (raw.trim() === "" || !Number.isFinite(value) || p.type === "integer" && !Number.isSafeInteger(value)) throw new Error(`参数 ${p.name} 必须为${p.type === "integer" ? "整数" : "数字"}。`);
+	}
+	const size = typeof value === "string" ? [...value].length : typeof value === "number" ? value : void 0;
+	if (size !== void 0 && (p.min !== void 0 && size < p.min || p.max !== void 0 && size > p.max)) throw new Error(`参数 ${p.name} 超出允许范围。`);
+	if (p.choices !== void 0 && !p.choices.includes(value)) throw new Error(`参数 ${p.name} 必须为：${p.choices.join("、")}。`);
+	return value;
+}
+function parseCommandArguments(definition, tokens) {
+	const args = /* @__PURE__ */ new Map();
+	const positions = definition.parameters.filter((p) => p.kind === "positional");
+	let index = 0, options = true;
+	for (let i = 0; i < tokens.length; i++) {
+		const token = tokens[i];
+		if (options && token === "--") {
+			options = false;
+			continue;
+		}
+		let p, raw = token;
+		if (options && token.startsWith("--")) {
+			const equal = token.indexOf("=");
+			const key = token.slice(2, equal < 0 ? void 0 : equal);
+			p = definition.parameters.find((p) => p.kind === "option" && p.name === key);
+			if (!p) throw new Error(`未知选项：--${key}`);
+			if (equal >= 0) raw = token.slice(equal + 1);
+			else if (p.type === "boolean" && (tokens[i + 1] === void 0 || !["true", "false"].includes(tokens[i + 1]))) raw = "true";
+			else {
+				const next = tokens[++i];
+				if (next === void 0 || next.startsWith("--")) throw new Error(`选项 --${key} 缺少值。`);
+				raw = next;
+			}
+		} else {
+			p = positions[index++];
+			if (!p) throw new Error(`多余参数：${token}`);
+		}
+		if (args.has(p.name)) throw new Error(`重复参数：${p.name}`);
+		args.set(p.name, validateValue(p, raw));
+	}
+	for (const p of definition.parameters) {
+		if (args.has(p.name)) continue;
+		if (p.default !== void 0) args.set(p.name, p.default);
+		else if (p.required) throw new Error(`缺少参数：${p.kind === "option" ? "--" : ""}${p.name}`);
+	}
+	return Object.fromEntries(args);
+}
+function commandUsage(definition, name = definition.name) {
+	return "/" + name + definition.parameters.map((p) => {
+		const value = p.kind === "option" ? `--${p.name} ${p.type === "boolean" ? "[true|false]" : `<${p.name}>`}` : `<${p.name}>`;
+		return " " + (p.required ? value : `[${value}]`);
+	}).join("");
+}
+function recognizeCommand(parts, botMemberId, options = {}) {
+	let input = parts;
+	while (input.length > 1 && input[0]?.type === "text" && input[0].text.trim() === "") input = input.slice(1);
+	let addressed = options.addressed === true;
+	let mentionPart = false;
+	if (input[0]?.type === "mention") {
+		if (botMemberId === void 0 || input[0].memberId !== botMemberId) return { kind: "chat" };
+		input = input.slice(1);
+		addressed = true;
+		mentionPart = true;
+	}
+	if (options.requireMention === true && !addressed) return { kind: "chat" };
+	if (input.length === 0 || input.some((p) => p.type !== "text")) return { kind: "chat" };
+	let text = input.map((p) => p.type === "text" ? p.text : "").join("").trimStart();
+	if (options.addressed === true && !mentionPart) text = text.replace(/^@\S+\s+/u, "");
+	if (text.startsWith("//")) return {
+		kind: "escaped",
+		parts: [{
+			type: "text",
+			text: text.slice(1)
+		}]
+	};
+	if (!text.startsWith("/")) return { kind: "chat" };
+	return {
+		kind: "command",
+		text
+	};
+}
+/** The command name a recognized text invokes (`/name args` → `name`). */
+const commandNameOf = (text) => /^\/(\S*)/u.exec(text.trimStart())?.[1] ?? "";
+//#endregion
+//#region src/logs.ts
+/** Log summaries are labels; leave structured diagnostics and stacks untouched. */
+function formatLogMessage(message) {
+	return message.trimEnd().replace(/[。.]$/u, "");
+}
+const hostLogLevelSchema = z.enum([
+	"debug",
+	"info",
+	"warn",
+	"error"
+]);
+const hostLogSourceKindSchema = z.enum([
+	"system",
+	"dsh-plugin",
+	"extension",
+	"connection",
+	"unknown"
+]);
+const hostLogSourceSchema = z.object({
+	kind: hostLogSourceKindSchema,
+	id: z.string().min(1).max(512),
+	name: z.string().min(1).max(512),
+	version: z.string().max(512).optional(),
+	component: z.string().max(512).optional()
+}).strict();
+const hostLogScopeSchema = z.object({
+	extensionId: z.string().max(512).optional(),
+	revisionId: z.string().max(512).optional(),
+	connectionId: z.string().max(512).optional(),
+	agentId: z.string().max(512).optional(),
+	channelId: z.string().max(512).optional(),
+	sessionId: z.string().max(512).optional(),
+	episodeId: z.string().max(512).optional(),
+	operationId: z.string().max(512).optional()
+}).strict();
+const hostLogEntrySchema = z.object({
+	id: z.string(),
+	sequence: z.number().int().nonnegative(),
+	timestamp: z.iso.datetime(),
+	runId: z.string(),
+	level: hostLogLevelSchema,
+	message: z.string(),
+	source: hostLogSourceSchema,
+	scope: hostLogScopeSchema.optional(),
+	details: z.json().optional(),
+	code: z.string().optional(),
+	redacted: z.boolean(),
+	truncated: z.boolean()
+}).strict();
+const hostLogQuerySchema = z.object({
+	levels: z.array(hostLogLevelSchema).max(4).optional(),
+	sourceKinds: z.array(hostLogSourceKindSchema).max(5).optional(),
+	sourceIds: z.array(z.string().max(512)).max(100).optional(),
+	sources: z.array(hostLogSourceSchema.pick({
+		kind: true,
+		id: true
+	})).max(100).optional(),
+	scope: hostLogScopeSchema.optional(),
+	keyword: z.string().max(1e3).optional(),
+	from: z.iso.datetime().optional(),
+	to: z.iso.datetime().optional(),
+	olderCursor: z.string().max(128).optional(),
+	afterCursor: z.string().max(128).optional(),
+	headCursor: z.string().max(128).optional(),
+	limit: z.number().int().min(1).max(500).optional()
+}).strict();
+const hostLogPageSchema = z.object({
+	entries: z.array(hostLogEntrySchema),
+	olderCursor: z.string().nullable(),
+	headCursor: z.string(),
+	hasMore: z.boolean(),
+	gap: z.enum(["expired", "reset"]).optional()
+}).strict();
+const hostLogSettingsSchema = z.object({
+	retentionDays: z.number().int().min(1).max(30),
+	maxSizeMiB: z.number().int().min(64).max(2048),
+	revision: z.number().int().nonnegative()
+}).strict();
+const hostLogSettingsUpdateSchema = hostLogSettingsSchema;
+const hostLogDebugRequestSchema = z.object({
+	source: hostLogSourceSchema.pick({
+		kind: true,
+		id: true
+	}).optional(),
+	durationMinutes: z.union([
+		z.literal(5),
+		z.literal(15),
+		z.literal(30)
+	]).default(15)
+}).strict();
+const hostLogDebugLeaseSchema = hostLogDebugRequestSchema.extend({
+	id: z.string(),
+	expiresAt: z.iso.datetime()
+});
+const hostLogStatusSchema = z.object({
+	state: z.enum([
+		"ready",
+		"degraded",
+		"closed"
+	]),
+	runId: z.string(),
+	headCursor: z.string(),
+	bytes: z.number().nonnegative(),
+	count: z.number().int().nonnegative(),
+	oldestTimestamp: z.iso.datetime().nullable(),
+	newestTimestamp: z.iso.datetime().nullable(),
+	queuedBytes: z.number().nonnegative(),
+	droppedCount: z.number().int().nonnegative(),
+	debugLeases: z.array(hostLogDebugLeaseSchema),
+	error: z.string().optional()
+}).strict();
+const hostLogStreamEventSchema = z.discriminatedUnion("type", [
+	z.object({
+		type: z.literal("entries"),
+		entries: z.array(hostLogEntrySchema),
+		cursor: z.string()
+	}),
+	z.object({
+		type: z.literal("gap"),
+		reason: z.enum([
+			"expired",
+			"reset",
+			"overflow"
+		]),
+		cursor: z.string()
+	}),
+	z.object({
+		type: z.literal("status"),
+		status: hostLogStatusSchema
+	})
+]);
+//#endregion
+//#region src/credentials.ts
+/**
+* Named credentials (智能体扩展配置与凭据 C1–C5): one entry is added once and reused by extensions, MCP servers and
+* commands. The value is write-only; every view below carries metadata only. Accounts on platforms such as GitHub are
+* linked accounts (`linked-accounts.ts`), granted per agent, not credentials.
+*/
+const CREDENTIAL_NAME_MAX_CHARS = 64;
+const CREDENTIAL_DESCRIPTION_MAX_CHARS = 500;
+const CREDENTIAL_VALUE_MAX_CHARS = 16384;
+/** Values shorter than this are not hidden from tool results; the form warns when one is saved. */
+const CREDENTIAL_REDACTABLE_MIN_CHARS = 8;
+/** How a credential reaches code: `request` only as a placeholder filled by `nxt.http.fetch`; `program` as the value. */
+const CredentialUsageSchema = z.enum(["request", "program"]);
+/** Agents that may use a credential: every agent, or the listed ones. */
+const CredentialAgentScopeSchema = z.union([z.object({ all: z.literal(true) }).strict(), z.object({ agentIds: z.array(AgentIdSchema).max(256) }).strict()]);
+/** Shown in redaction markers (`[凭据:名称]`), so brackets and control characters are not allowed. */
+const CredentialNameSchema = z.string().trim().min(1, "名称不能为空。").max(64, `名称最多 64 个字符。`).regex(/^[^\u0000-\u001f\u007f[\]]+$/u, "名称不能包含方括号或控制字符。");
+const CredentialDescriptionSchema = z.string().trim().max(500, `说明最多 500 个字符。`);
+const CredentialDomainsSchema = z.array(ExtensionNetworkDomainSchema).max(32);
+/**
+* Names a credential's environment variable cannot take: the shell, the tools' own configuration, and the variables
+* linked accounts give commands (`GH_TOKEN` and the `gh` settings).
+*/
+const RESERVED_COMMAND_ENV = /* @__PURE__ */ new Set([
+	"PATH",
+	"HOME",
+	"USER",
+	"LOGNAME",
+	"SHELL",
+	"PWD",
+	"OLDPWD",
+	"TMPDIR",
+	"TEMP",
+	"TMP",
+	"LANG",
+	"TERM",
+	"NODE_OPTIONS",
+	"NODE_PATH",
+	"GH_TOKEN",
+	"GH_CONFIG_DIR",
+	"GH_PROMPT_DISABLED",
+	"GH_NO_UPDATE_NOTIFIER",
+	"GH_NO_EXTENSION_UPDATE_NOTIFIER",
+	"GIT_TERMINAL_PROMPT",
+	"GIT_CONFIG_COUNT"
+]);
+const RESERVED_COMMAND_ENV_PREFIXES = [
+	"LC_",
+	"LD_",
+	"DYLD_",
+	"GIT_CONFIG_",
+	"NEKRO_",
+	"DSH_"
+];
+/** The environment variable a program credential reaches commands under. */
+const CredentialEnvNameSchema = z.string().trim().max(64).regex(/^[A-Z_][A-Z0-9_]*$/u, "环境变量名只能使用大写字母、数字和下划线，且不能以数字开头。").refine((name) => !RESERVED_COMMAND_ENV.has(name) && !RESERVED_COMMAND_ENV_PREFIXES.some((prefix) => name.startsWith(prefix)), "这个环境变量名由系统使用，请换一个。");
+const CredentialValueSchema = z.string().min(1).max(CREDENTIAL_VALUE_MAX_CHARS);
+/** What uses one credential right now: extension secret fields bound to it and agents whose commands receive it. */
+const CredentialUsersSchema = z.object({
+	extensions: z.array(z.object({
+		extensionId: ExtensionIdSchema,
+		name: z.string(),
+		/** Agents whose own configuration binds it; empty when only the host configuration does. */
+		agentIds: z.array(AgentIdSchema),
+		host: z.boolean()
+	}).strict()),
+	/** Agents with commands enabled whose commands receive it. */
+	commandAgents: z.array(AgentIdSchema)
+}).strict();
+const CredentialViewSchema = z.object({
+	id: CredentialIdSchema,
+	name: CredentialNameSchema,
+	description: z.string(),
+	usage: CredentialUsageSchema,
+	domains: z.array(z.string()),
+	agentScope: CredentialAgentScopeSchema,
+	autoUse: z.boolean(),
+	/** Program credentials: the environment variable agents' commands receive it under, or `null` when they do not. */
+	envName: z.string().nullable(),
+	/** Agents an administrator let use it while automatic use is off. */
+	approvedAgentIds: z.array(AgentIdSchema),
+	/** False when the stored value is too short to hide from tool results, or cannot be read. */
+	redactable: z.boolean(),
+	/** False when the stored value cannot be read any more; the entry stays so it can be replaced. */
+	available: z.boolean(),
+	usedBy: CredentialUsersSchema,
+	createdAt: z.number().int().nonnegative(),
+	updatedAt: z.number().int().nonnegative(),
+	lastUsedAt: z.number().int().nonnegative().nullable()
+}).strict();
+/** A model provider listed with the credentials; `open` lets agents and extensions call it through the host. */
+const ModelProviderAccessSchema = z.object({
+	provider: z.string().min(1),
+	name: z.string(),
+	open: z.boolean()
+}).strict();
+/**
+* An agent asked for a credential that does not exist yet. The settings link pre-fills the add form; saving a
+* credential with this name wakes the agent in the channel it asked from.
+*/
+const CredentialRequestViewSchema = z.object({
+	id: z.string().min(1).max(64),
+	name: CredentialNameSchema,
+	purpose: z.string(),
+	domains: z.array(z.string()),
+	usage: CredentialUsageSchema,
+	agentId: AgentIdSchema,
+	channelId: ChannelIdSchema.nullable(),
+	createdAt: z.number().int().nonnegative(),
+	/** Settings route that opens the add form pre-filled, see {@link credentialRequestRoute}. */
+	route: z.string()
+}).strict();
+const CredentialsViewSchema = z.object({
+	credentials: z.array(CredentialViewSchema),
+	modelProviders: z.array(ModelProviderAccessSchema),
+	requests: z.array(CredentialRequestViewSchema)
+}).strict();
+const CreateCredentialRequestSchema = z.object({
+	name: CredentialNameSchema,
+	description: CredentialDescriptionSchema.default(""),
+	agentScope: CredentialAgentScopeSchema.default({ all: true }),
+	autoUse: z.boolean().default(true),
+	usage: CredentialUsageSchema.default("request"),
+	domains: CredentialDomainsSchema.default([]),
+	/** Program credentials only. */
+	envName: CredentialEnvNameSchema.optional(),
+	value: CredentialValueSchema,
+	/** The agent request this form was opened from, if any. */
+	requestId: z.string().min(1).max(64).optional()
+}).strict();
+/** Metadata changes; omitted fields keep their value. */
+const UpdateCredentialRequestSchema = z.object({
+	name: CredentialNameSchema.optional(),
+	description: CredentialDescriptionSchema.optional(),
+	usage: CredentialUsageSchema.optional(),
+	domains: CredentialDomainsSchema.optional(),
+	agentScope: CredentialAgentScopeSchema.optional(),
+	autoUse: z.boolean().optional(),
+	/** `null` stops giving it to commands; only program credentials take one. */
+	envName: CredentialEnvNameSchema.nullable().optional(),
+	/** Replaces the agents allowed to use it while automatic use is off, for example to withdraw an approval. */
+	approvedAgentIds: z.array(AgentIdSchema).max(256).optional()
+}).strict();
+const ReplaceCredentialValueRequestSchema = z.object({ value: CredentialValueSchema }).strict();
+/** Removing a credential that is in use needs `confirm`; without it the result lists who uses it. */
+const RemoveCredentialRequestSchema = z.object({ confirm: z.boolean().default(false) }).strict();
+const RemoveCredentialResultSchema = z.discriminatedUnion("removed", [z.object({
+	removed: z.literal(true),
+	view: CredentialsViewSchema
+}).strict(), z.object({
+	removed: z.literal(false),
+	usedBy: CredentialUsersSchema
+}).strict()]);
+const CredentialConsumerKindSchema = z.enum([
+	"extension",
+	"command",
+	"mcp",
+	"model"
+]);
+/** One recorded use. The newest 500 per credential are kept, none older than 90 days. */
+const CredentialUseSchema = z.object({
+	at: z.number().int().nonnegative(),
+	agentId: AgentIdSchema.nullable(),
+	channelId: ChannelIdSchema.nullable(),
+	requesterMemberId: z.string().nullable(),
+	consumerKind: CredentialConsumerKindSchema,
+	consumerId: z.string(),
+	/** Extension display name or MCP server name, when it is still known. */
+	consumerName: z.string().nullable(),
+	targetHost: z.string().nullable()
+}).strict();
+const CredentialUsesViewSchema = z.object({ uses: z.array(CredentialUseSchema) }).strict();
+const SetModelProviderAccessRequestSchema = z.object({ open: z.boolean() }).strict();
+/**
+* The settings route that opens the add form pre-filled from an agent's request: the credential section with `add=1`
+* plus `name`, `purpose`, `domains` (comma separated), `usage` and `request` (the request id) as query parameters.
+*/
+const credentialRequestRoute = (request) => {
+	const query = new URLSearchParams({
+		add: "1",
+		name: request.name,
+		request: request.id,
+		usage: request.usage
+	});
+	if (request.purpose !== "") query.set("purpose", request.purpose);
+	if (request.domains.length > 0) query.set("domains", request.domains.join(","));
+	return `/settings/credentials?${query.toString()}`;
+};
+/** Secret fields of an extension configuration layer bound to a named credential, by field. */
+const BoundCredentialsSchema = z.record(z.string(), CredentialIdSchema);
+/** Binds secret fields to named credentials; `null` removes the binding and leaves the field unset. */
+const CredentialBindingsRequestSchema = z.record(z.string(), CredentialIdSchema.nullable());
+//#endregion
+//#region src/linked-accounts.ts
+/**
+* Linked accounts (设置 → 关联账号): third-party accounts that agents' commands act as. The library only keeps them;
+* an agent's commands receive an account only through its `commandAccounts` grant (命令账号授权 A1、A2). Tokens are
+* write-only; every view below carries metadata only.
+*/
+/** Platforms the host can link accounts of; each grant names one account per platform. */
+const LinkedAccountPlatformIdSchema = z.enum(["github"]);
+/** How an account is added: a typed token, or the token of a login the platform's local CLI holds (read once). */
+const LinkedAccountMethodSchema = z.enum(["token", "gh-login"]);
+/** A login the local `gh` holds, offered as a quick way to link a GitHub account. */
+const LocalGithubLoginSchema = z.object({
+	login: z.string().trim().min(1),
+	active: z.boolean()
+}).strict();
+const tokenFields = {
+	method: z.literal("token"),
+	token: z.string().trim().min(1).max(512)
+};
+const ghLoginFields = {
+	method: z.literal("gh-login"),
+	login: z.string().trim().min(1).max(128)
+};
+/** Where a token comes from: typed, or read once from a login of the platform's local CLI. */
+const LinkedAccountTokenSourceSchema = z.discriminatedUnion("method", [z.object(tokenFields).strict(), z.object(ghLoginFields).strict()]);
+const LinkedAccountViewSchema = z.object({
+	id: LinkedAccountIdSchema,
+	platform: LinkedAccountPlatformIdSchema,
+	/** The account name on the platform, as the platform reported it when the token was verified. */
+	login: z.string(),
+	/** Token scopes where the platform reports them (GitHub classic tokens); `null` otherwise. */
+	scopes: z.array(z.string()).nullable(),
+	source: LinkedAccountMethodSchema,
+	/** False when the stored token cannot be read any more; the account stays so it can be replaced or removed. */
+	available: z.boolean(),
+	/** Agents whose capabilities grant this account. */
+	grantedAgentIds: z.array(AgentIdSchema),
+	createdAt: z.number().int().nonnegative(),
+	updatedAt: z.number().int().nonnegative(),
+	lastUsedAt: z.number().int().nonnegative().nullable()
+}).strict();
+/** Links an account: the platform plus how its token is given. */
+const AddLinkedAccountRequestSchema = z.discriminatedUnion("method", [z.object({
+	platform: LinkedAccountPlatformIdSchema,
+	...tokenFields
+}).strict(), z.object({
+	platform: LinkedAccountPlatformIdSchema,
+	...ghLoginFields
+}).strict()]);
+/** A new token for an account; it must belong to the same account on the platform. */
+const ReplaceLinkedAccountTokenRequestSchema = LinkedAccountTokenSourceSchema;
+/** Removing a granted account needs `confirm`; without it the result lists the agents it is granted to. */
+const RemoveLinkedAccountRequestSchema = z.object({ confirm: z.boolean().default(false) }).strict();
+/** One recorded use: an agent's command environment carried the account. Newest 500 per account, none over 90 days. */
+const LinkedAccountUseSchema = z.object({
+	at: z.number().int().nonnegative(),
+	agentId: AgentIdSchema.nullable(),
+	channelId: ChannelIdSchema.nullable(),
+	consumerKind: z.enum(["command"]),
+	consumerId: z.string()
+}).strict();
+const LinkedAccountUsesViewSchema = z.object({ uses: z.array(LinkedAccountUseSchema) }).strict();
+//#endregion
 //#region src/runtime-compatibility.ts
 const RuntimeCompatibilityDiagnosticSchema = z.object({
 	objectKind: z.enum([
@@ -1375,6 +2195,86 @@ const HostUpgradeSummarySchema = z.object({
 	diagnostics: z.array(RuntimeCompatibilityDiagnosticSchema)
 }).strict();
 //#endregion
+//#region src/response-timing.ts
+/** Bounds of the numeric response timing settings; the host rejects values outside them. */
+const RESPONSE_TIMING_LIMITS = {
+	waitMaxQuietSeconds: {
+		min: 5,
+		max: 300
+	},
+	waitMaxTotalSeconds: {
+		min: 10,
+		max: 900
+	},
+	debounceSeconds: {
+		min: 0,
+		max: 30
+	},
+	debounceMaxSeconds: {
+		min: 1,
+		max: 120
+	},
+	debounceMaxMessages: {
+		min: 1,
+		max: 20
+	},
+	attentionSeconds: {
+		min: 5,
+		max: 600
+	},
+	midWakesPerMinute: {
+		min: 1,
+		max: 30
+	}
+};
+const bounded = (key) => z.number().int().min(RESPONSE_TIMING_LIMITS[key].min).max(RESPONSE_TIMING_LIMITS[key].max).optional();
+/**
+* Per-binding timing of when the agent speaks (Decision 2026-10-31 响应时机与智能响应). Every field is optional: an
+* omitted one uses {@link RESPONSE_TIMING_DEFAULTS}. Waiting applies to every policy that answers messages; the rest
+* only to `smart`.
+*/
+const ResponseTimingSettingsSchema = z.object({
+	/** The agent may end a turn with `waiting-for-more` and be woken when the speaker goes quiet. */
+	waitEnabled: z.boolean().optional(),
+	/** Longest quiet period one wait may ask for. */
+	waitMaxQuietSeconds: bounded("waitMaxQuietSeconds"),
+	/** Longest the agent may keep waiting for one person, counted from the first wait. */
+	waitMaxTotalSeconds: bounded("waitMaxTotalSeconds"),
+	/** Smart: wait for the speaker to stay quiet this long before a turn starts; 0 starts at once. */
+	debounceSeconds: bounded("debounceSeconds"),
+	/** Smart: start anyway once this long has passed since the first message. */
+	debounceMaxSeconds: bounded("debounceMaxSeconds"),
+	/** Smart: start anyway once this many messages from the speaker are collected. */
+	debounceMaxMessages: bounded("debounceMaxMessages"),
+	/** Smart: a message that contains the agent's name or an alias wakes it. */
+	nameWake: z.boolean().optional(),
+	/** Smart: after someone talks with the agent, their next messages wake it for a while. */
+	attentionWake: z.boolean().optional(),
+	attentionSeconds: bounded("attentionSeconds"),
+	/** Smart: name and attention wakes per channel per minute; strong signals are never limited. */
+	midWakesPerMinute: bounded("midWakesPerMinute")
+}).strict();
+const RESPONSE_TIMING_DEFAULTS = {
+	waitEnabled: true,
+	waitMaxQuietSeconds: 60,
+	waitMaxTotalSeconds: 120,
+	debounceSeconds: 3,
+	debounceMaxSeconds: 30,
+	debounceMaxMessages: 5,
+	nameWake: true,
+	attentionWake: true,
+	attentionSeconds: 60,
+	midWakesPerMinute: 3
+};
+/** Shortest quiet period a wait may ask for, whatever the channel allows. */
+const RESPONSE_WAIT_MIN_QUIET_SECONDS = 5;
+const resolveResponseTiming = (settings) => ({
+	...RESPONSE_TIMING_DEFAULTS,
+	...Object.fromEntries(Object.entries(settings ?? {}).filter(([, value]) => value !== void 0))
+});
+/** Extra names that wake the agent in smart mode; the display name always counts too. */
+const AgentAliasesSchema = z.array(z.string().trim().min(1).max(32)).max(16).transform((aliases) => [...new Set(aliases)]);
+//#endregion
 //#region src/management-api.ts
 const NonEmptyStringSchema$1 = z.string().trim().min(1);
 const Base64UrlSchema = z.string().regex(/^[A-Za-z0-9_-]+$/u);
@@ -1458,7 +2358,7 @@ const ClientNotificationSchema = z.object({
 	title: z.string().trim().min(1).max(80),
 	body: z.string().trim().min(1).max(240),
 	occurredAt: z.number().int().nonnegative(),
-	route: z.string().regex(/^\/(?:(?:live|channels|agents|workshop|wiring|settings|apps|work|connections|users|extensions)(?:\/[^?#]*)?)?$/u).optional()
+	route: z.string().regex(/^\/(?:(?:live|channels|agents|workshop|wiring|settings|community|apps|work|connections|users|extensions)(?:\/[^?#]*)?)?(?:\?[^#]*)?$/u).optional()
 }).strict();
 const MANAGEMENT_PAIR_PROOF_PREFIX = "nxt-management-pair-v1";
 const managementPairProofMessage = (input) => [
@@ -1598,6 +2498,8 @@ const CommunityExtensionSortSchema = z.enum([
 ]);
 const CommunityReleaseIdSchema = z.string().regex(/^rel_[0-9A-Za-z]+$/u);
 const CommunityAccountSchema = z.object({
+	/** Immutable community identity; absent when connected to a community predating feedback support. */
+	id: z.string().min(1).max(100).optional(),
 	handle: z.string().min(1).max(80),
 	displayName: z.string().max(200),
 	avatarUrl: z.string().url().nullable()
@@ -1608,6 +2510,7 @@ const CommunityEnvironmentSchema = z.enum([
 	"development"
 ]);
 const CommunityStatusSchema = z.object({
+	features: z.array(z.string()).optional(),
 	communityUrl: z.string().url(),
 	/** 社区自我声明的环境；连不上或旧版社区时为 null。 */
 	environment: CommunityEnvironmentSchema.nullable(),
@@ -1637,7 +2540,13 @@ const CommunityReleaseSchema = z.object({
 	packageSize: z.number().int().nonnegative(),
 	requiresSdk: z.number().int().positive().nullable(),
 	notes: z.string().max(2e3),
-	createdAt: z.number().int()
+	createdAt: z.number().int(),
+	/** Release number on the community line; absent from older communities. */
+	number: z.number().int().positive().optional(),
+	/** Revision the release contains and its lineage, so NekroNXT can tell fast-forward from divergence. */
+	revisionId: ExtensionRevisionIdSchema.optional(),
+	parentRevisionId: ExtensionRevisionIdSchema.nullable().optional(),
+	ancestry: z.array(ExtensionRevisionIdSchema).max(256).optional()
 });
 /** 社区为官方扩展保留的发布者标识：官方扩展由多位官方成员维护，对外不显示个人账号。 */
 const COMMUNITY_OFFICIAL_HANDLE = "nekro-nxt";
@@ -1658,7 +2567,18 @@ const CommunityExtensionSummarySchema = z.object({
 	latest: CommunityReleaseSchema.nullable(),
 	downloads: z.number().int().nonnegative(),
 	updatedAt: z.number().int(),
-	pageUrl: z.string().url()
+	pageUrl: z.string().url(),
+	/**
+	* The extension and version this one is a branch of; null for an original line or an older community. Without a
+	* displayName the origin is not public on the community.
+	*/
+	branchOf: z.object({
+		extensionId: ExtensionIdSchema,
+		revisionId: ExtensionRevisionIdSchema.nullable(),
+		displayName: z.string().max(200).nullable()
+	}).nullable().optional(),
+	/** Public branches made from this extension. */
+	branchCount: z.number().int().nonnegative().optional()
 });
 const CommunityExtensionDetailSchema = CommunityExtensionSummarySchema.extend({
 	description: z.string().max(2e4),
@@ -1685,6 +2605,14 @@ const CommunityExtensionDetailSchema = CommunityExtensionSummarySchema.extend({
 	}).nullable()
 });
 /**
+* 本机缓存的社区目录读取附带的时间：`fetchedAt` 是这份内容从社区取回的时间；`stale` 表示社区这次没能读取，
+* 返回的是较早的一份。
+*/
+const CommunityFreshnessSchema = z.object({
+	fetchedAt: z.number().int().nonnegative(),
+	stale: z.boolean()
+});
+/**
 * 发布时随包提交的条目信息（作者自己写的介绍）。首次发布用于建条目；之后提供了哪项就覆盖哪项，未提供的保持不变。
 */
 const COMMUNITY_LISTING_LIMITS = {
@@ -1718,6 +2646,45 @@ const CommunitySourceSchema = z.object({
 	publisherHandle: z.string().min(1).max(80),
 	installedAt: z.number().int().nonnegative()
 });
+/**
+* How this machine's current version of one extension relates to the community's newest public release, with the
+* action that relation calls for. `role` says whether this machine may publish the line or only follows it.
+*/
+const CommunitySyncItemSchema = z.object({
+	extensionId: ExtensionIdSchema,
+	displayName: z.string(),
+	communityUrl: z.string().url(),
+	role: z.enum(["owner", "subscriber"]),
+	currentRevisionId: ExtensionRevisionIdSchema,
+	currentVersionLabel: z.string(),
+	/** Release the current version is, when it is one. */
+	currentRelease: z.object({
+		id: CommunityReleaseIdSchema,
+		number: z.number().int().positive().nullable()
+	}).nullable(),
+	/** `remote-ahead`: update; `local-ahead`: publish (owner) or local changes (subscriber); `diverged`: merge first. */
+	status: z.enum([
+		"same",
+		"remote-ahead",
+		"local-ahead",
+		"diverged",
+		"unrelated",
+		"unknown"
+	]),
+	found: z.boolean(),
+	delisted: z.boolean(),
+	delistedReason: z.string().nullable(),
+	/** The release the current version came from was withdrawn by its author. */
+	releaseWithdrawn: z.boolean(),
+	latest: CommunityReleaseSchema.nullable(),
+	/** The user chose to keep local changes over `latest`; it is not offered again. */
+	dismissed: z.boolean(),
+	addedPermissions: z.array(CommunityPermissionItemSchema)
+});
+const CommunitySyncSchema = z.object({
+	checkedAt: z.number().int().nullable(),
+	items: z.array(CommunitySyncItemSchema)
+});
 const CommunityInstalledItemSchema = z.object({
 	extensionId: ExtensionIdSchema,
 	displayName: z.string(),
@@ -1929,31 +2896,396 @@ const communityPersonaReviewLabel = (status) => {
 	}
 };
 //#endregion
-//#region src/host-api.ts
-const EmptyParamsSchema = z.object({}).strict();
-const NoRequestBodySchema = z.undefined();
-const NonEmptyStringSchema = z.string().trim().min(1);
-const DynamicIdSchema = NonEmptyStringSchema;
-const DynamicAttemptStatusSchema = z.enum([
-	"awaiting-approval",
-	"starting-host",
-	"client-pending",
-	"running",
-	"waiting",
-	"rejected",
-	"failed",
-	"cancelled",
-	"stopped"
+//#region src/community-feedback.ts
+const COMMUNITY_FEEDBACK_STATUSES = [
+	"new",
+	"needs_info",
+	"triaged",
+	"planned",
+	"fixed",
+	"duplicate",
+	"wontfix",
+	"withdrawn"
+];
+const CommunityFeedbackStatusSchema = z.enum(COMMUNITY_FEEDBACK_STATUSES);
+const COMMUNITY_FEEDBACK_STATUS_LABELS = {
+	new: "新反馈",
+	needs_info: "需要补充",
+	triaged: "已确认",
+	planned: "已计划",
+	fixed: "已修复",
+	duplicate: "重复",
+	wontfix: "不处理",
+	withdrawn: "已撤回"
+};
+const CommunityFeedbackKindSchema = z.enum([
+	"bug",
+	"suggestion",
+	"question"
 ]);
-const DynamicHalfStateSchema = z.object({
-	status: z.enum([
-		"absent",
-		"pending",
-		"stopped",
-		"running",
-		"waiting",
-		"failed"
-	]),
+const CommunityFeedbackIdSchema = z.string().regex(/^fbk_[0-9a-z]{26}$/u).brand();
+const CommunityFeedbackRefSchema = z.string().regex(/^FB-[1-9][0-9]*$/u);
+const CommunityFeedbackTargetSchema = z.union([z.literal("nxt"), z.object({
+	extensionId: z.string().regex(/^ext_[0-9A-Za-z]+$/u),
+	version: z.string().max(120).optional()
+}).strict()]);
+const version = z.string().trim().min(1).max(120);
+const timestamp = z.number().int().nonnegative();
+const CommunityFeedbackExtensionDiagnosticSchema = z.object({
+	extensionId: z.string().max(100),
+	version,
+	accessLevel: z.string().max(80).optional(),
+	activation: z.enum(["host", "agent"]).optional()
+}).strict();
+const CommunityFeedbackDiagnosticEntrySchema = z.object({
+	kind: z.enum([
+		"compatibility",
+		"extension",
+		"connection"
+	]),
+	summary: z.string().max(2e3),
+	extensionId: z.string().max(100).optional()
+}).strict();
+/** An explicit allowlist: credentials, account grants and arbitrary host configuration never cross this boundary. */
+const CommunityFeedbackDiagnosticsSchema = z.object({
+	nxtVersion: version.optional(),
+	releaseChannel: z.enum([
+		"stable",
+		"preview",
+		"development"
+	]).optional(),
+	hostKind: z.enum(["desktop", "server"]).optional(),
+	platform: z.string().max(80).optional(),
+	arch: z.string().max(40).optional(),
+	dshVersion: version.optional(),
+	adapters: z.array(z.string().max(100)).max(64).optional(),
+	agent: z.object({
+		accessLevel: z.string().max(80),
+		subagents: z.boolean(),
+		fileTools: z.boolean(),
+		webSearch: z.boolean(),
+		dynamicCreation: z.boolean(),
+		developmentShell: z.boolean(),
+		unrestrictedFileAccess: z.boolean(),
+		scheduledTasks: z.boolean(),
+		codeRun: z.boolean(),
+		commandNetwork: z.boolean(),
+		communityFeedbackAuto: z.boolean()
+	}).strict().optional(),
+	extensions: z.array(CommunityFeedbackExtensionDiagnosticSchema).max(256).optional(),
+	entries: z.array(CommunityFeedbackDiagnosticEntrySchema).max(32).optional(),
+	instanceId: z.string().min(1).max(100).optional()
+}).strict();
+const CommunityFeedbackExcerptSchema = z.array(z.object({
+	speaker: z.string().max(80),
+	text: z.string().max(6e3)
+}).strict()).max(8);
+const CommunityFeedbackCreateSchema = z.object({
+	clientRequestId: z.string().min(1).max(160),
+	kind: CommunityFeedbackKindSchema,
+	target: CommunityFeedbackTargetSchema,
+	title: z.string().trim().min(1).max(120),
+	body: z.string().trim().min(1).max(8e3),
+	diagnostics: CommunityFeedbackDiagnosticsSchema.default({}),
+	excerpt: CommunityFeedbackExcerptSchema.optional(),
+	excerptSharedWithAuthor: z.boolean().default(false),
+	source: z.enum([
+		"assistant",
+		"assistant_auto",
+		"form",
+		"web"
+	]),
+	instanceId: z.string().min(1).max(100).optional()
+}).strict();
+const CommunityFeedbackMessageInputSchema = z.object({
+	body: z.string().trim().min(1).max(4e3),
+	audience: z.enum(["everyone", "staff"]).default("everyone")
+}).strict();
+const CommunityFeedbackSupplementSchema = z.object({
+	diagnostics: CommunityFeedbackDiagnosticsSchema.optional(),
+	excerpt: CommunityFeedbackExcerptSchema.optional(),
+	excerptSharedWithAuthor: z.boolean().optional()
+}).strict();
+const CommunityFeedbackWithdrawSchema = z.object({ deleteText: z.boolean().default(false) }).strict();
+const CommunityFeedbackConfirmSchema = z.object({ clientVersion: version }).strict();
+const CommunityFeedbackReopenSchema = z.object({ note: z.string().trim().min(1).max(2e3) }).strict();
+const CommunityFeedbackAffectedSchema = z.object({
+	diagnostics: CommunityFeedbackDiagnosticsSchema.optional(),
+	nxtVersion: version.optional()
+}).strict();
+const CommunityFeedbackTransitionSchema = z.object({
+	status: CommunityFeedbackStatusSchema,
+	fixedIn: version.optional(),
+	duplicateOf: CommunityFeedbackRefSchema.optional(),
+	note: z.string().trim().max(2e3).optional()
+}).strict();
+const CommunityFeedbackLabelsSchema = z.object({
+	labels: z.array(z.string().trim().min(1).max(40)).max(20),
+	priority: z.enum([
+		"low",
+		"normal",
+		"high"
+	]).nullable()
+}).strict();
+const CommunityFeedbackLinkSchema = z.object({ githubUrl: z.string().url().max(1e3).refine((value) => /^https:\/\/github\.com\/[^/]+\/[^/]+\/issues\/[1-9][0-9]*$/u.test(value)).nullable() }).strict();
+const CommunityFeedbackVisibilitySchema = z.object({ visibility: z.enum(["private", "public"]) }).strict();
+const CommunityFeedbackEventDataSchema = z.object({
+	from: CommunityFeedbackStatusSchema.optional(),
+	to: CommunityFeedbackStatusSchema.optional(),
+	fixedIn: version.nullable().optional(),
+	duplicateOf: CommunityFeedbackRefSchema.nullable().optional(),
+	note: z.string().max(2e3).optional(),
+	labels: z.array(z.string()).optional(),
+	priority: z.enum([
+		"low",
+		"normal",
+		"high"
+	]).nullable().optional(),
+	visibility: z.enum(["private", "public"]).optional(),
+	clientVersion: version.optional(),
+	messageId: z.string().optional(),
+	audience: z.enum(["everyone", "staff"]).optional(),
+	deleteText: z.boolean().optional(),
+	affected: z.boolean().optional()
+}).strict();
+const CommunityFeedbackEventSchema = z.object({
+	seq: z.number().int().positive(),
+	ref: CommunityFeedbackRefSchema,
+	type: z.enum([
+		"created",
+		"message",
+		"status_changed",
+		"labeled",
+		"priority_changed",
+		"linked_issue",
+		"duplicate_marked",
+		"fixed_in_set",
+		"visibility_changed",
+		"affected_added",
+		"withdrawn",
+		"reopened",
+		"supplemented",
+		"fix_confirmed"
+	]),
+	actorKind: z.enum([
+		"user",
+		"admin",
+		"author",
+		"token",
+		"system"
+	]).optional(),
+	actor: z.string().optional(),
+	tokenId: z.string().optional(),
+	data: CommunityFeedbackEventDataSchema,
+	createdAt: timestamp,
+	title: z.string().optional(),
+	status: CommunityFeedbackStatusSchema.optional()
+});
+const CommunityFeedbackMessageSchema = z.object({
+	id: z.string(),
+	authorKind: z.enum([
+		"user",
+		"admin",
+		"author",
+		"system"
+	]),
+	author: z.string().nullable(),
+	audience: z.enum(["everyone", "staff"]),
+	body: z.string(),
+	createdAt: timestamp
+});
+const CommunityFeedbackSummarySchema = z.object({
+	id: CommunityFeedbackIdSchema,
+	ref: CommunityFeedbackRefSchema,
+	title: z.string(),
+	kind: CommunityFeedbackKindSchema.optional(),
+	target: CommunityFeedbackTargetSchema.optional(),
+	status: CommunityFeedbackStatusSchema,
+	fixedIn: version.nullable(),
+	affectedCount: z.number().int().nonnegative(),
+	source: CommunityFeedbackCreateSchema.shape.source.optional(),
+	confirmedCount: z.number().int().nonnegative().optional(),
+	createdAt: timestamp.optional(),
+	updatedAt: timestamp.optional()
+});
+/** Optional private fields are emitted only by the server's role-specific projection. */
+const CommunityFeedbackSchema = CommunityFeedbackSummarySchema.extend({
+	access: z.enum([
+		"owner",
+		"admin",
+		"author",
+		"subscriber",
+		"public"
+	]),
+	body: z.string().optional(),
+	diagnostics: CommunityFeedbackDiagnosticsSchema.optional(),
+	excerpt: CommunityFeedbackExcerptSchema.nullable().optional(),
+	excerptSharedWithAuthor: z.boolean().optional(),
+	messages: z.array(CommunityFeedbackMessageSchema).optional(),
+	events: z.array(CommunityFeedbackEventSchema).optional(),
+	submitter: z.string().optional(),
+	instanceId: z.string().nullable().optional(),
+	priority: z.enum([
+		"low",
+		"normal",
+		"high"
+	]).nullable().optional(),
+	labels: z.array(z.string()).optional(),
+	visibility: z.enum(["private", "public"]).optional(),
+	duplicateOf: CommunityFeedbackRefSchema.nullable().optional(),
+	githubUrl: z.string().nullable().optional(),
+	closedAt: timestamp.nullable().optional(),
+	purgedAt: timestamp.nullable().optional(),
+	confirmed: z.boolean().default(false),
+	affected: z.boolean().default(false),
+	affectedDiagnostics: z.array(z.object({
+		user: z.string(),
+		diagnostics: CommunityFeedbackDiagnosticsSchema.nullable(),
+		nxtVersion: version.nullable(),
+		createdAt: timestamp
+	})).optional()
+});
+const CommunityFeedbackListSchema = z.object({
+	items: z.array(CommunityFeedbackSummarySchema),
+	cursor: z.string().nullable()
+});
+const CommunityFeedbackChangesSchema = z.object({
+	events: z.array(CommunityFeedbackEventSchema),
+	cursor: z.number().int().nonnegative(),
+	hasMore: z.boolean()
+});
+const CommunityFeedbackDigestSchema = z.object({
+	since: timestamp,
+	counts: z.object({
+		status: z.record(CommunityFeedbackStatusSchema, z.number().int().nonnegative()),
+		kind: z.record(CommunityFeedbackKindSchema, z.number().int().nonnegative()),
+		target: z.record(z.enum(["nxt", "extension"]), z.number().int().nonnegative()),
+		extensions: z.record(z.string(), z.number().int().nonnegative())
+	}),
+	newItems: z.array(CommunityFeedbackSummarySchema),
+	awaitingReply: z.array(CommunityFeedbackSummarySchema),
+	mostAffected: z.array(CommunityFeedbackSummarySchema),
+	unconfirmedFixes: z.array(CommunityFeedbackSummarySchema),
+	fixedCount: z.number().int().nonnegative()
+});
+//#endregion
+//#region src/community-feedback-host.ts
+const CommunityFeedbackDraftIdSchema = z.string().regex(/^fbd_[0-9A-Za-z]+$/u).brand();
+const CommunityFeedbackDraftStateSchema = z.enum([
+	"awaiting",
+	"sending",
+	"sent",
+	"failed",
+	"discarded"
+]);
+const CommunityFeedbackDraftSchema = z.object({
+	id: CommunityFeedbackDraftIdSchema,
+	communityUrl: z.string().url(),
+	communityUserId: z.string().min(1).nullable(),
+	agentId: AgentIdSchema.nullable(),
+	channelId: ChannelIdSchema.nullable(),
+	kind: CommunityFeedbackKindSchema,
+	target: CommunityFeedbackTargetSchema,
+	title: z.string().max(120),
+	body: z.string().max(8e3),
+	excerpt: CommunityFeedbackExcerptSchema.nullable(),
+	excerptSharedWithAuthor: z.boolean(),
+	diagnostics: CommunityFeedbackDiagnosticsSchema,
+	state: CommunityFeedbackDraftStateSchema,
+	requestedBy: z.string(),
+	auto: z.boolean(),
+	error: z.string().nullable(),
+	createdAt: z.number().int().nonnegative(),
+	updatedAt: z.number().int().nonnegative()
+}).strict();
+const CommunityFeedbackItemSchema = z.object({
+	ref: CommunityFeedbackRefSchema,
+	communityUrl: z.string().url(),
+	communityUserId: z.string().min(1),
+	channelId: ChannelIdSchema.nullable(),
+	draftId: CommunityFeedbackDraftIdSchema.nullable(),
+	title: z.string(),
+	kind: CommunityFeedbackKindSchema.nullable(),
+	target: CommunityFeedbackTargetSchema.nullable(),
+	status: CommunityFeedbackStatusSchema,
+	fixedIn: z.string().nullable(),
+	unread: z.boolean(),
+	lastEventSeq: z.number().int().nonnegative(),
+	createdAt: z.number().int().nonnegative(),
+	updatedAt: z.number().int().nonnegative()
+}).strict();
+const CommunityFeedbackDraftInputSchema = z.object({
+	kind: CommunityFeedbackKindSchema,
+	target: CommunityFeedbackTargetSchema,
+	title: z.string().trim().min(1).max(120),
+	body: z.string().trim().min(1).max(8e3),
+	conversationRefs: z.array(LogicalMessageIdSchema).max(8).optional()
+}).strict();
+const CommunityFeedbackDraftUpdateSchema = z.object({
+	title: z.string().trim().min(1).max(120),
+	body: z.string().trim().min(1).max(8e3),
+	includeExcerpt: z.boolean(),
+	excerptSharedWithAuthor: z.boolean().default(false),
+	expectedUpdatedAt: z.number().int().nonnegative()
+}).strict();
+const CommunityFeedbackSettingsSchema = z.object({
+	enabled: z.boolean(),
+	supported: z.boolean(),
+	signedIn: z.boolean(),
+	communityUrl: z.string().url(),
+	communityUserId: z.string().nullable(),
+	consentedAt: z.number().int().nonnegative().nullable()
+}).strict();
+const CommunityFeedbackSettingsUpdateSchema = z.object({
+	enabled: z.boolean(),
+	consent: z.boolean().default(false)
+}).strict();
+const CommunityFeedbackSnapshotSchema = z.object({
+	enabled: z.boolean(),
+	signedIn: z.boolean(),
+	pendingDrafts: z.number().int().nonnegative(),
+	unread: z.number().int().nonnegative()
+}).strict();
+const CommunityFeedbackLocalListSchema = z.object({
+	drafts: z.array(CommunityFeedbackDraftSchema),
+	items: z.array(CommunityFeedbackItemSchema),
+	syncError: z.string().optional()
+}).strict();
+const CommunityFeedbackPayloadSchema = z.object({
+	payload: CommunityFeedbackCreateSchema,
+	redactions: z.array(z.string())
+}).strict();
+const CommunityFeedbackLastPayloadSchema = z.object({
+	ref: CommunityFeedbackRefSchema,
+	sentAt: z.number().int().nonnegative(),
+	payload: CommunityFeedbackCreateSchema
+}).strict().nullable();
+//#endregion
+//#region src/host-api.ts
+const EmptyParamsSchema = z.object({}).strict();
+const NoRequestBodySchema = z.undefined();
+const NonEmptyStringSchema = z.string().trim().min(1);
+const DynamicIdSchema = NonEmptyStringSchema;
+const DynamicAttemptStatusSchema = z.enum([
+	"awaiting-approval",
+	"starting-host",
+	"client-pending",
+	"running",
+	"waiting",
+	"rejected",
+	"failed",
+	"cancelled",
+	"stopped"
+]);
+const DynamicHalfStateSchema = z.object({
+	status: z.enum([
+		"absent",
+		"pending",
+		"stopped",
+		"running",
+		"waiting",
+		"failed"
+	]),
 	waitingFor: z.array(z.string()),
 	error: z.string().optional()
 }).strict();
@@ -1968,6 +3300,9 @@ const DynamicAttemptErrorSchema = z.object({
 	]),
 	message: z.string(),
 	stack: z.string().optional(),
+	/** A render failure also names the contribution slot that failed and whether its frame gave up. */
+	slot: NonEmptyStringSchema.optional(),
+	abdicated: z.boolean().optional(),
 	pluginId: DynamicIdSchema,
 	packageId: DynamicIdSchema,
 	pluginRunId: DynamicIdSchema
@@ -1992,7 +3327,8 @@ const AuthoringTaskStatusSchema = z.enum([
 	"failed",
 	"interrupted",
 	"stopped",
-	"completed"
+	"completed",
+	"paused"
 ]);
 const AuthoringAttemptStateSchema = z.enum([
 	"drafting",
@@ -2031,6 +3367,8 @@ const AuthoringAttemptSummarySchema = z.object({
 		message: z.string(),
 		repairable: z.boolean()
 	}).strict().optional(),
+	/** Verified without loading its interface, because no browser was available; the interface itself is unchecked. */
+	uiUnverified: z.boolean().optional(),
 	createdAt: z.number().int().nonnegative(),
 	settledAt: z.number().int().nonnegative().optional()
 }).strict();
@@ -2042,6 +3380,15 @@ const AuthoringTaskSummarySchema = z.object({
 	title: z.string(),
 	requirementSummary: z.string(),
 	status: AuthoringTaskStatusSchema,
+	/** `create` builds a new extension; `revise` changes `targetExtensionId` starting from `baseRevisionId`. */
+	kind: z.enum(["create", "revise"]).default("create"),
+	targetExtensionId: ExtensionIdSchema.optional(),
+	baseRevisionId: ExtensionRevisionIdSchema.optional(),
+	referenceRevisionId: ExtensionRevisionIdSchema.optional(),
+	/** Why the task is paused; it continues when the agent picks it up in a later conversation. */
+	pausedReason: z.string().optional(),
+	/** The conversation the task runs in is live, so its candidate can be previewed directly. */
+	live: z.boolean().default(false),
 	approvalPolicy: z.enum(["risk-stable", "fully-automatic"]),
 	approvedRiskDigest: z.string().regex(/^[a-f0-9]{64}$/u).optional(),
 	revision: z.number().int().positive(),
@@ -2100,6 +3447,22 @@ const ImageUnderstandingPolicyApiSchema = z.object({
 		maxTokens: z.number().int().min(256).max(8192)
 	}).strict()])
 }).strict();
+const CommandAccountUsageSchema = z.enum([
+	"read",
+	"issues",
+	"pull-requests",
+	"push"
+]);
+/**
+* One linked account the agent's commands act as, at most one per platform (`service`). Grants saved before linked
+* accounts name the account without its `acc_` prefix; both forms resolve to the same account.
+*/
+const CommandAccountGrantSchema = z.object({
+	service: LinkedAccountPlatformIdSchema,
+	accountId: NonEmptyStringSchema.max(72),
+	/** Told to the agent as guidance, not enforced; empty gives no hint. */
+	usage: z.array(CommandAccountUsageSchema).max(4).default([])
+}).strict();
 const AgentCapabilitiesSchema = z.object({
 	subagents: z.boolean(),
 	fileTools: z.boolean(),
@@ -2112,10 +3475,35 @@ const AgentCapabilitiesSchema = z.object({
 	/** Tools are called from one TypeScript program (`run_code`); takes effect only with `developmentShell`. */
 	codeRun: z.boolean().default(false),
 	/** Network for commands; absent in older clients means on. */
-	commandNetwork: z.boolean().default(true)
+	commandNetwork: z.boolean().default(true),
+	communityFeedbackAuto: z.boolean().default(false),
+	/** Linked accounts this agent's commands act as, one per platform; absent in older clients means none. */
+	commandAccounts: z.array(CommandAccountGrantSchema).max(8).default([]),
+	/**
+	* What the agent may do with extensions without the console: `manual` only develops and test-runs, `confirm` asks
+	* an administrator in the channel for every step, `autonomous` takes ordinary steps that only affect itself.
+	*/
+	extensionAutonomy: z.enum([
+		"manual",
+		"confirm",
+		"autonomous"
+	]).default("manual"),
+	/** Whose requests make the agent develop or change extensions: anyone in the channel, or administrators only. */
+	extensionRequesters: z.enum(["everyone", "admins"]).default("everyone"),
+	/**
+	* Whose requests make the agent change extension configuration. With `everyone`, members may only have it change
+	* ordinary fields of its own configuration; network fields, the host layer and credentials still need an
+	* administrator.
+	*/
+	extensionConfigRequesters: z.enum(["everyone", "admins"]).default("admins")
 }).strict();
 const DynamicClientApprovalPolicySchema = z.enum(["manual", "automatic"]);
-const NotificationEventKeySchema = z.enum(["dynamic-client-approval-requested"]);
+const NotificationEventKeySchema = z.enum([
+	"dynamic-client-approval-requested",
+	"community-feedback-update",
+	"credential-requested",
+	"extension-notification"
+]);
 const NotificationSettingsViewSchema = z.object({
 	revision: z.number().int().positive().optional(),
 	system: z.object({ enabled: z.boolean() }).strict(),
@@ -2124,7 +3512,12 @@ const NotificationSettingsViewSchema = z.object({
 		serverUrl: z.url(),
 		deviceKeyConfigured: z.boolean()
 	}).strict(),
-	events: z.record(NotificationEventKeySchema, z.boolean())
+	events: z.object({
+		"dynamic-client-approval-requested": z.boolean(),
+		"community-feedback-update": z.boolean().default(true),
+		"credential-requested": z.boolean().default(true),
+		"extension-notification": z.boolean().default(true)
+	}).strict()
 }).strict();
 const UpdateNotificationSettingsRequestSchema = z.object({
 	expectedRevision: z.number().int().positive().optional(),
@@ -2135,7 +3528,12 @@ const UpdateNotificationSettingsRequestSchema = z.object({
 		deviceKey: z.string().trim().min(1).max(2048).optional(),
 		clearDeviceKey: z.boolean().optional()
 	}).strict(),
-	events: z.record(NotificationEventKeySchema, z.boolean())
+	events: z.object({
+		"dynamic-client-approval-requested": z.boolean(),
+		"community-feedback-update": z.boolean().optional(),
+		"credential-requested": z.boolean().optional(),
+		"extension-notification": z.boolean().optional()
+	}).strict()
 }).strict().refine((value) => !(value.bark.deviceKey !== void 0 && value.bark.clearDeviceKey === true), {
 	message: "不能同时更新并清除 Bark Device Key。",
 	path: ["bark"]
@@ -2148,13 +3546,99 @@ const ClientNotificationFeedResponseSchema = z.object({
 	cursor: z.number().int().nonnegative(),
 	notifications: z.array(ClientNotificationSchema)
 }).strict();
+/** Which model writes one kind of compaction summary: that kind's default, or a model chosen for this agent. */
+const AgentCompactionModelChoiceSchema = z.discriminatedUnion("mode", [z.object({ mode: z.literal("follow") }).strict(), z.object({
+	mode: z.literal("custom"),
+	model: AgentModelSchema
+}).strict()]);
+/**
+* In-session compaction follows the main model by default, so the replayed conversation hits the provider's cache;
+* compaction into a new session follows the host's compaction model.
+*/
+const AgentCompactionPolicySchema = z.object({
+	inSession: AgentCompactionModelChoiceSchema,
+	newSession: AgentCompactionModelChoiceSchema
+}).strict();
+/** The host's idle compaction threshold, summary model and wait limit. */
+const CompactionSettingsSchema = z.object({
+	/** Minimum context occupancy for idle rollover; older settings inherit 50%. */
+	idleThresholdPercent: z.number().int().min(1).max(100).default(50),
+	newSessionModel: z.discriminatedUnion("mode", [z.object({ mode: z.literal("main") }).strict(), z.object({
+		mode: z.literal("custom"),
+		model: AgentModelSchema
+	}).strict()]),
+	/** Past this the new session starts with a fallback note instead of a summary. */
+	timeoutSeconds: z.number().int().min(30).max(900)
+}).strict();
+const DEFAULT_COMPACTION_SETTINGS = {
+	idleThresholdPercent: 50,
+	newSessionModel: { mode: "main" },
+	timeoutSeconds: 180
+};
+const FALLBACK_MODEL_LIMIT = 3;
+/**
+* Models an agent switches to, in order, when its main model has used up its quota or stays unavailable after the
+* usual retries. Empty leaves the main model alone, as before fallback models existed.
+*/
+const AgentFallbackModelsSchema = z.array(AgentModelSchema).max(3).refine((models) => new Set(models.map((model) => `${model.provider}\0${model.model}`)).size === models.length, "备用模型不能重复。");
+/** Why a channel conversation left its main model. */
+const ModelFallbackReasonSchema = z.enum([
+	"quota",
+	"rate-limit",
+	"unavailable"
+]);
+/** How long a model that failed is passed over before conversations try it again. */
+const ModelFallbackSettingsSchema = z.object({
+	/** After rate limits, server errors, timeouts or empty replies that outlasted the usual retries. */
+	unavailableCooldownMinutes: z.number().int().min(1).max(240),
+	/** After the quota or balance ran out. */
+	quotaCooldownMinutes: z.number().int().min(5).max(1440)
+}).strict();
+const DEFAULT_MODEL_FALLBACK_SETTINGS = {
+	unavailableCooldownMinutes: 10,
+	quotaCooldownMinutes: 60
+};
+/** The name an agent passes to open a sub-conversation on its main model; no candidate may take it. */
+const SUB_CONVERSATION_MAIN_MODEL = "主模型";
+const SUB_CONVERSATION_MODEL_LIMITS = {
+	candidates: 8,
+	name: 20,
+	guidance: 200
+};
+/**
+* Models an agent may open sub-conversations with, each named so the agent can pick it and described so it knows
+* when to. Without a `default`, a sub-conversation opened without naming a model follows the main model.
+*/
+const AgentSubConversationModelsSchema = z.object({
+	candidates: z.array(z.object({
+		name: z.string().trim().min(1, "请填写子对话模型的名称。").max(SUB_CONVERSATION_MODEL_LIMITS.name).regex(/^[^\s,，、]+(?: [^\s,，、]+)*$/u, "子对话模型的名称不能含换行、逗号或顿号。").refine((name) => name !== SUB_CONVERSATION_MAIN_MODEL, `「${SUB_CONVERSATION_MAIN_MODEL}」是保留名称。`),
+		model: AgentModelSchema,
+		guidance: z.string().trim().max(SUB_CONVERSATION_MODEL_LIMITS.guidance)
+	}).strict()).max(SUB_CONVERSATION_MODEL_LIMITS.candidates),
+	default: z.string().trim().min(1).optional()
+}).strict().superRefine((policy, context) => {
+	const names = policy.candidates.map((candidate) => candidate.name);
+	if (new Set(names).size !== names.length) context.addIssue({
+		code: "custom",
+		message: "子对话模型的名称不能重复。"
+	});
+	if (policy.default !== void 0 && !names.includes(policy.default)) context.addIssue({
+		code: "custom",
+		message: "默认的子对话模型不在候选里。"
+	});
+});
+const NO_SUB_CONVERSATION_MODELS = { candidates: [] };
 const AgentRevisionRequestContentSchema = z.object({
 	displayName: z.string().trim().min(1).max(80),
 	persona: z.string().max(64 * 1024).default(""),
 	personaDocument: PromptDocumentV1Schema.optional(),
 	model: AgentModelSchema,
 	imagePolicy: ImageUnderstandingPolicyApiSchema.optional(),
-	dynamicClientApprovalPolicy: DynamicClientApprovalPolicySchema.optional()
+	dynamicClientApprovalPolicy: DynamicClientApprovalPolicySchema.optional(),
+	compaction: AgentCompactionPolicySchema.optional(),
+	subConversationModels: AgentSubConversationModelsSchema.optional(),
+	fallbackModels: AgentFallbackModelsSchema.optional(),
+	aliases: AgentAliasesSchema.optional()
 }).strict();
 const validatePersonaDocumentProjection = (value, context) => {
 	if (value.personaDocument !== void 0 && promptDocumentPlainText(value.personaDocument) !== value.persona) context.addIssue({
@@ -2173,11 +3657,21 @@ const ReviseAgentRequestSchema = AgentRevisionRequestContentSchema.extend({ expe
 const UpdateAgentCapabilitiesRequestSchema = AgentCapabilitiesSchema.partial().extend({
 	scheduledTasks: z.boolean().optional(),
 	codeRun: z.boolean().optional(),
-	commandNetwork: z.boolean().optional()
+	commandNetwork: z.boolean().optional(),
+	communityFeedbackAuto: z.boolean().optional(),
+	commandAccounts: z.array(CommandAccountGrantSchema).max(8).optional(),
+	extensionAutonomy: z.enum([
+		"manual",
+		"confirm",
+		"autonomous"
+	]).optional(),
+	extensionRequesters: z.enum(["everyone", "admins"]).optional(),
+	extensionConfigRequesters: z.enum(["everyone", "admins"]).optional()
 }).strict().refine((value) => Object.values(value).some((entry) => entry !== void 0), "至少提供一个能力。");
 const TriggerPolicySchema = z.enum([
 	"always",
 	"mentioned-or-replied",
+	"smart",
 	"command",
 	"observe-only"
 ]);
@@ -2186,6 +3680,16 @@ const WorkTreeOrderSchema = z.object({
 	channelIdsByAgent: z.record(AgentIdSchema, z.array(ChannelIdSchema)),
 	unboundChannelIds: z.array(ChannelIdSchema)
 }).strict();
+/** The group key of 「未接线」 in `collapsedGroupIds`; agent groups use the agent id. */
+const UNBOUND_CHANNEL_GROUP_ID = "unbound";
+/**
+* How the console arranges its channel list: pinned channels in their order and the groups it has collapsed. Shared
+* by every device signed in to the console; it never changes bindings.
+*/
+const ChannelListViewSchema = z.object({
+	pinnedChannelIds: z.array(ChannelIdSchema).max(200),
+	collapsedGroupIds: z.array(z.union([AgentIdSchema, z.literal(UNBOUND_CHANNEL_GROUP_ID)])).max(500)
+}).strict();
 const SnapshotMessagePartSchema = z.discriminatedUnion("type", [
 	z.object({
 		type: z.literal("text"),
@@ -2199,7 +3703,8 @@ const SnapshotMessagePartSchema = z.discriminatedUnion("type", [
 	z.object({
 		type: z.literal("image"),
 		assetId: AssetIdSchema,
-		alt: z.string().optional()
+		alt: z.string().optional(),
+		sticker: z.literal(true).optional()
 	}).strict(),
 	z.object({
 		type: z.literal("file"),
@@ -2258,7 +3763,14 @@ const HostSnapshotMessageSchema = z.object({
 		action: z.enum(["retry", "confirm-delivered"]),
 		resolvedAt: z.number().int().safe().nonnegative()
 	}).strict().optional(),
-	origin: z.enum(["admin-console"]).optional(),
+	origin: z.enum([
+		"admin-console",
+		"command",
+		"extension-notice"
+	]).optional(),
+	command: CommandExecutionRecordSchema.optional(),
+	/** A host notice about extension work: a request an administrator must confirm, or what an action did. */
+	extensionNotice: z.object({ requestNumber: z.number().int().positive().optional() }).strict().optional(),
 	/** What the agent's inbound hooks decided for this message, when anything differs from the default. */
 	inboundHook: z.object({
 		trigger: z.enum([
@@ -2271,11 +3783,23 @@ const HostSnapshotMessageSchema = z.object({
 		extensions: z.array(z.string()),
 		problems: z.array(z.string()).optional()
 	}).strict().optional(),
+	/** Extensions that processed the agent's message before it was sent; `followUp` marks a message one appended. */
+	outboundProcessing: z.object({
+		extensions: z.array(z.string()),
+		rewritten: z.boolean(),
+		followUp: z.literal(true).optional()
+	}).strict().optional(),
 	/** A scheduled task came due: a Host fact shown as a notice, not a member message. */
 	scheduledTask: z.object({
 		label: z.string(),
 		extensionName: z.string().optional(),
 		note: z.string().optional()
+	}).strict().optional(),
+	/** The agent finished waiting for someone to finish speaking: a Host fact shown as a notice. */
+	responseWait: z.object({
+		displayName: z.string().optional(),
+		cause: z.enum(["quiet", "limit"]),
+		waitedSeconds: z.number().int().nonnegative()
 	}).strict().optional()
 }).strict();
 const HostConnectionEventSchema = z.object({
@@ -2328,7 +3852,9 @@ const PlatformUserListResponseSchema = z.object({
 		}).strict(),
 		activeChannelCount: z.number().int().nonnegative(),
 		channelPreview: z.array(PlatformUserChannelPreviewSchema).max(3),
-		historicalOnly: z.boolean()
+		historicalOnly: z.boolean(),
+		/** Listed in Settings → Administrators. */
+		administrator: z.boolean().default(false)
 	}).strict()),
 	facets: z.object({
 		adapters: z.array(PlatformUserFacetAdapterSchema),
@@ -2350,6 +3876,7 @@ const ChannelRuntimePhaseSchema = z.enum([
 	"idle",
 	"thinking",
 	"using-tool",
+	"compacting",
 	"waiting-input",
 	"unavailable"
 ]);
@@ -2373,11 +3900,13 @@ const channelRuntimeToolFields = {
 	inputPreview: z.string().optional(),
 	resultPreview: z.string().optional(),
 	wroteToChannel: z.boolean().optional(),
+	/** `cancelled`: an extension stopped the message before it was sent. */
 	deliveryState: z.enum([
 		"sent",
 		"partially-sent",
 		"failed",
-		"unknown"
+		"unknown",
+		"cancelled"
 	]).optional(),
 	durationMs: z.number().int().nonnegative().optional()
 };
@@ -2549,6 +4078,18 @@ const ChannelRuntimeProjectionSchema = z.object({
 	episodeId: EpisodeIdSchema.optional(),
 	phase: ChannelRuntimePhaseSchema,
 	summary: z.string(),
+	/** A compaction under way: inside the current session, or before a new session opens. */
+	compaction: z.object({
+		kind: z.enum(["in-session", "new-session"]),
+		startedAt: z.number().int().nonnegative()
+	}).strict().optional(),
+	/** The conversation runs on a fallback model; it tries the main model again at a new message after `retryMainAt`. */
+	modelFallback: z.object({
+		model: AgentModelSchema,
+		reason: ModelFallbackReasonSchema,
+		since: z.number().int().nonnegative(),
+		retryMainAt: z.number().int().nonnegative()
+	}).strict().optional(),
 	pendingInjectCount: z.number().int().nonnegative(),
 	occupancy: ChannelRuntimeOccupancySchema.optional(),
 	cache: ChannelRuntimeCacheSchema.optional(),
@@ -2674,6 +4215,47 @@ const MessagePacingSchema = z.enum([
 ]);
 const DEFAULT_MESSAGE_PACING = "normal";
 const MessagePacingSettingsSchema = z.object({ pacing: MessagePacingSchema }).strict();
+/**
+* A conversation of its own under a channel's conversation (docs/NekroNxt界面交互模型.md §5.6): the agent opens one
+* for a separate piece of work, and the host opens scripted ones to check creation candidates. It has its own log
+* and context, and is shown under its channel.
+*/
+const SubConversationSchema = z.object({
+	id: SubConversationIdSchema,
+	channelId: ChannelIdSchema,
+	episodeId: EpisodeIdSchema,
+	agentId: AgentIdSchema,
+	title: z.string().min(1).max(200),
+	/** `agent`: the agent opened it with a tool; `host`: NekroNXT opened it, such as to check a candidate. */
+	openedBy: z.enum(["agent", "host"]),
+	/** `model`: the agent's model talks in it; `script`: the host plays fixed tool calls. */
+	driver: z.enum(["model", "script"]),
+	status: z.enum(["open", "closed"]),
+	closeReason: z.enum([
+		"completed",
+		"closed-by-agent",
+		"closed-by-admin",
+		"failed",
+		"conversation-ended"
+	]).optional(),
+	/** What it handed back to the channel's conversation when it ended. */
+	summary: z.string().max(4e3).optional(),
+	authoringTaskId: AuthoringTaskIdSchema.optional(),
+	/** The model a model-driven sub-conversation talks in; absent for scripts and ones opened before it was kept. */
+	model: AgentModelSchema.optional(),
+	createdAt: z.number().int().nonnegative(),
+	closedAt: z.number().int().nonnegative().optional()
+}).strict();
+/** How long ended sub-conversations are kept before they are cleaned up. */
+const SubConversationRetentionSchema = z.enum([
+	"1d",
+	"3d",
+	"7d",
+	"30d",
+	"never"
+]);
+const DEFAULT_SUB_CONVERSATION_RETENTION = "7d";
+const SubConversationSettingsSchema = z.object({ retention: SubConversationRetentionSchema }).strict();
 /** `keyword`: SQLite keyword search only; `builtin`: keywords fused with the built-in semantic model. */
 const RetrievalModeSchema = z.enum(["keyword", "builtin"]);
 /** Search used by extension indexes (表情包与扩展素材能力 §6.4). */
@@ -2709,6 +4291,26 @@ const RetrievalStatusSchema = z.object({
 		error: z.string().optional()
 	}).strict()
 }).strict();
+/** Where the Host keeps restore points it takes before an upgrade, or none. */
+const UpgradeBackupModeSchema = z.enum([
+	"data",
+	"directory",
+	"off"
+]);
+const UpgradeBackupSettingsSchema = z.object({
+	mode: UpgradeBackupModeSchema,
+	/** The chosen directory when `mode` is `directory`. */
+	directory: z.string().nullable(),
+	/** Set through the server's environment; the settings page cannot change it. */
+	locked: z.boolean(),
+	/** Restore points kept; older ones are removed after an upgrade succeeds. */
+	keep: z.number().int().positive(),
+	/** Restore points currently in the chosen place. */
+	usage: z.object({
+		count: z.number().int().nonnegative(),
+		bytes: z.number().int().nonnegative()
+	}).strict()
+}).strict();
 /** What the agent keeps about individual members of one channel; each note comes with that member's messages. */
 const ChannelMemberNotesViewSchema = z.object({
 	notes: z.array(z.object({
@@ -2820,7 +4422,10 @@ const AttentionItemSchema = z.object({
 		"authoring-approval",
 		"connection-unhealthy",
 		"agent-model-unavailable",
-		"agent-vision-unavailable"
+		"agent-vision-unavailable",
+		"logs-unavailable",
+		"community-feedback",
+		"extension-update"
 	]),
 	severity: z.enum([
 		"critical",
@@ -2833,7 +4438,10 @@ const AttentionItemSchema = z.object({
 			"channel",
 			"authoring-task",
 			"connection",
-			"agent"
+			"agent",
+			"logs",
+			"community-feedback",
+			"extension-update"
 		]),
 		id: NonEmptyStringSchema
 	}).strict(),
@@ -2852,7 +4460,10 @@ const AttentionItemSchema = z.object({
 			"resolve-delivery",
 			"open-authoring-task",
 			"open-connection",
-			"open-agent"
+			"open-agent",
+			"open-logs",
+			"open-community-feedback",
+			"open-extension-updates"
 		]),
 		label: z.string().min(1).max(40)
 	}).strict(),
@@ -2980,7 +4591,61 @@ const CodeRunAvailabilitySchema = z.object({
 		error: z.string().optional()
 	}).strict().optional()
 }).strict();
+/** The GitHub CLI commands call: found on this machine, or downloaded by NekroNXT where it can. */
+const GithubCliAvailabilitySchema = CodeRunAvailabilitySchema;
+/** The optional headless Chromium that loads and checks creation candidates when no page is open. */
+const VerificationBrowserAvailabilitySchema = CodeRunAvailabilitySchema;
+/** A platform's own program that linked accounts work through, such as the GitHub CLI. */
+const LinkedAccountPlatformToolSchema = z.object({
+	/** The runtime download routes it is managed by (`downloadGithubCli`, `removeGithubCli`). */
+	id: z.enum(["github-cli"]),
+	name: z.string(),
+	availability: GithubCliAvailabilitySchema
+}).strict();
+/** 设置 → 关联账号: every platform the host supports, with its accounts and tools. */
+const LinkedAccountsViewSchema = z.object({
+	platforms: z.array(z.object({
+		id: LinkedAccountPlatformIdSchema,
+		name: z.string(),
+		addMethods: z.array(LinkedAccountMethodSchema),
+		tool: LinkedAccountPlatformToolSchema.optional(),
+		accounts: z.array(LinkedAccountViewSchema)
+	}).strict()),
+	/** Logins found in the local GitHub CLI; empty when it is missing or not logged in. */
+	localGithubLogins: z.array(LocalGithubLoginSchema)
+}).strict();
+const RemoveLinkedAccountResultSchema = z.discriminatedUnion("removed", [z.object({
+	removed: z.literal(true),
+	view: LinkedAccountsViewSchema
+}).strict(), z.object({
+	removed: z.literal(false),
+	grantedAgentIds: z.array(AgentIdSchema)
+}).strict()]);
+/** An extension action an agent asked an administrator to confirm, or one it took on its own. */
+const ExtensionRequestSchema = z.object({
+	number: z.number().int().positive(),
+	kind: z.string(),
+	agentId: AgentIdSchema,
+	channelId: ChannelIdSchema.nullable(),
+	extensionId: ExtensionIdSchema.nullable(),
+	summary: z.string(),
+	status: z.enum([
+		"pending",
+		"approved",
+		"rejected",
+		"expired",
+		"completed",
+		"failed"
+	]),
+	autonomous: z.boolean(),
+	resultMessage: z.string().nullable(),
+	decidedBy: z.string().nullable(),
+	createdAt: z.number().int().nonnegative(),
+	expiresAt: z.number().int().nonnegative(),
+	decidedAt: z.number().int().nonnegative().nullable()
+}).strict();
 const HostSnapshotSchema = z.object({
+	communityFeedback: CommunityFeedbackSnapshotSchema.optional(),
 	upgrade: HostUpgradeSummarySchema.optional(),
 	cursor: HostSyncCursorSchema,
 	diagnosticsSampledAt: z.number().int().nonnegative(),
@@ -2999,18 +4664,31 @@ const HostSnapshotSchema = z.object({
 		id: NonEmptyStringSchema,
 		name: z.string(),
 		description: z.string().optional(),
-		inputModalities: z.array(z.string()).optional()
+		inputModalities: z.array(z.string()).optional(),
+		/** Selectable thinking levels, least to most; absent when the model offers no choice. */
+		reasoning: z.object({
+			efforts: z.array(z.object({
+				id: NonEmptyStringSchema,
+				name: z.string()
+			}).strict()).min(1),
+			defaultEffort: NonEmptyStringSchema.optional()
+		}).strict().optional()
 	}).strict()),
 	capabilityAvailability: z.object({
 		subagents: z.object({ available: z.boolean() }).strict(),
 		/** Optional in older hosts, which never offer `run_code`. */
 		codeRun: CodeRunAvailabilitySchema.optional(),
+		/** Optional in older hosts, which never offer command accounts. */
+		githubCli: GithubCliAvailabilitySchema.optional(),
+		/** Optional in older hosts, which check candidates only in an open page. */
+		verificationBrowser: VerificationBrowserAvailabilitySchema.optional(),
 		/** What this host can confine for commands beyond file writes; optional in older hosts. */
 		commandConfinement: z.object({
 			readScope: z.boolean(),
 			networkControl: z.boolean()
 		}).strict().optional(),
 		webSearch: z.object({
+			unavailableReason: z.string().optional(),
 			provider: z.literal("deepseek-official"),
 			available: z.boolean(),
 			credentialConfigured: z.boolean(),
@@ -3031,6 +4709,19 @@ const HostSnapshotSchema = z.object({
 		capabilities: AgentCapabilitiesSchema,
 		imagePolicy: ImageUnderstandingPolicyApiSchema,
 		dynamicClientApprovalPolicy: DynamicClientApprovalPolicySchema,
+		/** Optional for older hosts, whose agents always follow both defaults. */
+		compaction: AgentCompactionPolicySchema.optional(),
+		/** Optional for older hosts, whose agents offer no candidates. */
+		subConversationModels: AgentSubConversationModelsSchema.optional(),
+		/** Optional for older hosts, whose agents have no fallback models. */
+		fallbackModels: AgentFallbackModelsSchema.optional(),
+		/** Optional for older hosts, whose agents have no aliases. */
+		aliases: AgentAliasesSchema.optional(),
+		/**
+		* Enabled extensions that process the agent's messages before they are sent, in the order they run. Absent
+		* when none does.
+		*/
+		outboundOrder: z.array(ExtensionIdSchema).optional(),
 		imageDiagnostics: z.object({
 			route: z.object({
 				mode: z.enum([
@@ -3079,6 +4770,8 @@ const HostSnapshotSchema = z.object({
 			"direct"
 		]),
 		displayName: z.string().optional(),
+		localDisplayName: z.string().optional(),
+		platformDisplayName: z.string().optional(),
 		boundAgentId: AgentIdSchema.optional(),
 		runtimePhase: ChannelRuntimePhaseSchema.default("idle"),
 		activity: ChannelActivitySummarySchema.default({
@@ -3091,10 +4784,14 @@ const HostSnapshotSchema = z.object({
 			channelId: ChannelIdSchema,
 			agentId: AgentIdSchema,
 			triggerPolicy: TriggerPolicySchema,
+			/** Channel pause, independent of the response rule. */
+			paused: z.boolean().default(false),
 			processingFeedback: z.enum(["auto", "off"]).default("auto"),
 			/** Absent means `observe`. */
 			localAgentMessages: z.enum(["observe", "trigger"]).optional(),
 			activityTriggerOverrides: ActivityTriggerOverridesSchema.default({}),
+			/** Absent on older hosts; missing keys use the defaults. */
+			responseTiming: ResponseTimingSettingsSchema.optional(),
 			boundAt: z.number().int().safe().nonnegative()
 		}).strict())
 	}).strict()),
@@ -3103,12 +4800,18 @@ const HostSnapshotSchema = z.object({
 		channelIdsByAgent: {},
 		unboundChannelIds: []
 	}),
+	channelListView: ChannelListViewSchema.default({
+		pinnedChannelIds: [],
+		collapsedGroupIds: []
+	}),
 	messages: z.array(HostSnapshotMessageSchema),
 	connections: z.array(z.object({
 		id: ConnectionIdSchema,
 		adapterKey: NonEmptyStringSchema,
 		alias: ConnectionAliasOutputSchema.optional(),
 		activityTriggerDefaults: z.array(AdapterActivityKeySchema).default([]),
+		configuredSecrets: z.array(z.string()).optional(),
+		boundCredentials: BoundCredentialsSchema.optional(),
 		status: z.object({
 			state: z.enum([
 				"stopped",
@@ -3178,9 +4881,45 @@ const HostSnapshotSchema = z.object({
 		displayName: z.string(),
 		description: z.string(),
 		createdByAgentId: AgentIdSchema.optional(),
+		/** The Revision of another extension this one was branched from. */
+		branchOf: z.object({
+			extensionId: ExtensionIdSchema,
+			revisionId: ExtensionRevisionIdSchema,
+			/** Present while the original is on this machine. */
+			displayName: z.string().optional()
+		}).strict().optional(),
+		/** Shape version of the data stored on this machine. */
+		dataVersion: z.number().int().positive().default(1),
+		/** The unfinished revise task of this extension, if any. */
+		openRevisionTaskId: AuthoringTaskIdSchema.optional(),
+		/** Whether this machine publishes (`owner`) or follows the line on each community. */
+		communityLinks: z.array(z.object({
+			communityUrl: z.string(),
+			role: z.enum(["owner", "subscriber"])
+		}).strict()).default([]),
 		revisions: z.array(z.object({
 			id: ExtensionRevisionIdSchema,
 			revisionNumber: z.number().int().positive(),
+			/** Version number from the lineage, `v3` (or `v3·2` for a second Revision of the same generation). */
+			versionLabel: z.string(),
+			parentRevisionId: ExtensionRevisionIdSchema.optional(),
+			origin: z.enum([
+				"authored",
+				"file",
+				"community",
+				"branch"
+			]),
+			authoringTaskId: AuthoringTaskIdSchema.optional(),
+			dataVersion: z.number().int().positive(),
+			/** Community releases this Revision is; installs and publishes from here both record one. */
+			releases: z.array(z.object({
+				communityUrl: z.string(),
+				releaseId: CommunityReleaseIdSchema,
+				number: z.number().int().positive().nullable(),
+				publisherHandle: z.string(),
+				via: z.enum(["install", "publish"]),
+				recordedAt: z.number().int().nonnegative()
+			}).strict()).default([]),
 			format: z.enum(["current", "unavailable"]).optional(),
 			ui: ExtensionUiContributionsSchema.default(EMPTY_EXTENSION_UI_CONTRIBUTIONS),
 			/** The host instance's configuration form (`config.host`). */
@@ -3190,8 +4929,6 @@ const HostSnapshotSchema = z.object({
 			/** 扩展包自带图标的读取路径（同源、按摘要寻址、可长期缓存）；没有图标时缺省。 */
 			iconUrl: z.string().regex(/^\/api\/extensions\/[^/]+\/revisions\/[^/]+\/icon\/[a-f0-9]{64}\.(?:svg|png|webp)$/u).optional(),
 			createdAt: z.number().int().safe().nonnegative(),
-			/** 从社区安装的版本的来源；本机保存与文件导入没有来源。 */
-			source: CommunitySourceSchema.optional(),
 			provides: z.array(ExtensionProvideSchema),
 			/** Whether this Revision can be enabled for agents (agent-layer contributions or capabilities). */
 			agentLayer: z.boolean(),
@@ -3238,6 +4975,7 @@ const HostSnapshotSchema = z.object({
 			/** Secret fields are removed; `configuredSecrets` lists those the Host stores. */
 			config: JsonValueSchema,
 			configuredSecrets: z.array(z.string()).optional(),
+			boundCredentials: BoundCredentialsSchema.optional(),
 			activatedAt: z.number().int().safe().nonnegative(),
 			runtime: z.object({
 				status: z.enum([
@@ -3271,6 +5009,7 @@ const HostSnapshotSchema = z.object({
 			/** Secret fields are removed; `configuredSecrets` lists those the Host stores. */
 			config: JsonValueSchema.default({}),
 			configuredSecrets: z.array(z.string()).optional(),
+			boundCredentials: BoundCredentialsSchema.optional(),
 			runtime: z.object({
 				status: z.enum([
 					"active",
@@ -3335,17 +5074,36 @@ const HostSnapshotSchema = z.object({
 		}).strict()
 	}).strict()),
 	authoringTasks: z.array(AuthoringTaskSummarySchema).default([]),
-	scheduledTasks: z.array(ScheduledTaskSchema).default([])
+	/** Open sub-conversations, and the most recently ended ones of each channel. */
+	subConversations: z.array(SubConversationSchema).default([]),
+	scheduledTasks: z.array(ScheduledTaskSchema).default([]),
+	/** Extension requests waiting for an administrator. */
+	extensionRequests: z.array(ExtensionRequestSchema).default([])
 }).strict();
-const MessageInputPartSchema = z.discriminatedUnion("type", [z.object({
-	type: z.literal("text"),
-	text: z.string().trim().min(1)
-}).strict(), z.object({
-	type: z.literal("mention"),
-	memberId: ChannelMemberIdSchema
-}).strict()]);
+const CHANNEL_COMPOSER_MAX_ATTACHMENTS = 20;
+const CHANNEL_COMPOSER_MAX_BYTES = 64 * 1024 * 1024;
+const MessageInputPartSchema = z.discriminatedUnion("type", [
+	z.object({
+		type: z.literal("text"),
+		text: z.string().trim().min(1)
+	}).strict(),
+	z.object({
+		type: z.literal("mention"),
+		memberId: ChannelMemberIdSchema
+	}).strict(),
+	z.object({
+		type: z.literal("image"),
+		assetId: AssetIdSchema,
+		alt: z.string().trim().max(500).optional()
+	}).strict(),
+	z.object({
+		type: z.literal("file"),
+		assetId: AssetIdSchema,
+		name: z.string().trim().max(255).optional()
+	}).strict()
+]);
 const SendChannelMessageRequestSchema = z.object({
-	parts: z.array(MessageInputPartSchema).min(1),
+	parts: z.array(MessageInputPartSchema).min(1).max(256).refine((parts) => parts.filter((part) => part.type === "image" || part.type === "file").length <= 20, "每条消息最多添加 20 个附件。"),
 	clientEventId: NonEmptyStringSchema.optional(),
 	senderMemberId: ChannelMemberIdSchema.optional()
 }).strict().refine((body) => body.parts.every((part) => part.type !== "text" || [...part.text].length <= 64 * 1024), "Message text must not exceed 64 KiB.");
@@ -3444,6 +5202,8 @@ const DshPluginCatalogEntrySchema = z.object({
 		"tarball",
 		"imported"
 	]).optional(),
+	/** Published by the DSH maintainers on npm for the DSH release this build runs. */
+	official: z.boolean().optional(),
 	installedAt: z.number().int().safe().nonnegative().optional(),
 	clientUiDetected: z.boolean().optional(),
 	hostUi: DshNxtHostUiSchema.optional(),
@@ -3455,6 +5215,8 @@ const DshPluginCatalogEntrySchema = z.object({
 		suggestedScope: z.enum(["host", "agent"]),
 		selectedScope: z.enum(["host", "agent"]).optional(),
 		config: JsonValueSchema,
+		/** Host services this official entry declared and received; known once it has loaded. */
+		grantedServices: z.array(NonEmptyStringSchema).optional(),
 		activations: z.array(z.object({
 			targetKey: NonEmptyStringSchema,
 			target: z.enum(["host", "agent"]),
@@ -3463,18 +5225,24 @@ const DshPluginCatalogEntrySchema = z.object({
 			diagnostic: z.object({
 				status: z.enum([
 					"active",
+					"pending",
 					"load-failed",
 					"restore-failed",
 					"dispose-failed"
 				]),
 				phase: z.enum([
 					"import",
+					"dependency",
 					"apply",
 					"update",
 					"dispose",
 					"restore"
 				]),
 				message: z.string().optional(),
+				/** Services a pending entry still waits for. */
+				waitingFor: z.array(NonEmptyStringSchema).optional(),
+				/** The waited-for services this entry can never receive, since only official plugins get them. */
+				restrictedServices: z.array(NonEmptyStringSchema).optional(),
 				observedAt: z.number().int().safe().nonnegative()
 			}).optional()
 		}).strict())
@@ -3621,19 +5389,23 @@ const HostSseEventSchema = z.discriminatedUnion("event", [
 ]);
 /** Request content a model accepts; `image` enables native vision for agents using the model. */
 const LlmModelInputModalitiesSchema = z.array(z.enum(["text", "image"])).min(1);
+/** Thinking levels a model offers, least to most; the ids are the adapter's own. */
+const LlmModelReasoningEffortsSchema = z.array(NonEmptyStringSchema).min(1);
 const LlmProviderModelSchema = z.object({
 	id: NonEmptyStringSchema,
 	name: NonEmptyStringSchema,
 	contextWindow: z.number().int().positive().optional(),
 	maxTokens: z.number().int().positive().optional(),
-	inputModalities: LlmModelInputModalitiesSchema.optional()
+	inputModalities: LlmModelInputModalitiesSchema.optional(),
+	reasoningEfforts: LlmModelReasoningEffortsSchema.optional()
 }).strict();
 const LlmDiscoveredModelSchema = z.object({
 	id: NonEmptyStringSchema,
 	name: NonEmptyStringSchema.optional(),
 	contextWindow: z.number().int().positive().optional(),
 	maxTokens: z.number().int().positive().optional(),
-	inputModalities: LlmModelInputModalitiesSchema.optional()
+	inputModalities: LlmModelInputModalitiesSchema.optional(),
+	reasoningEfforts: LlmModelReasoningEffortsSchema.optional()
 }).strict();
 const LlmProviderCredentialSchema = z.object({
 	configured: z.boolean(),
@@ -3671,7 +5443,62 @@ const LlmProviderViewSchema = z.object({
 	/** The provider's adapter can list the models its endpoint offers. */
 	discoverable: z.boolean(),
 	/** `null` when the current configuration was never tested; absent from hosts that do not record tests. */
-	lastTest: LlmProviderTestResultSchema.nullable().optional()
+	lastTest: LlmProviderTestResultSchema.nullable().optional(),
+	/** Present when the provider can sign in with a subscription account instead of an API key. */
+	subscription: z.object({
+		label: NonEmptyStringSchema,
+		/** The route uses the signed-in account rather than an API key. */
+		active: z.boolean(),
+		accountLabel: z.string().nullable()
+	}).strict().optional()
+}).strict();
+const SubscriptionStatusSchema = z.object({
+	provider: NonEmptyStringSchema,
+	label: NonEmptyStringSchema,
+	usageUrl: z.url(),
+	available: z.boolean(),
+	mode: z.enum([
+		"unconfigured",
+		"api-key",
+		"subscription"
+	]),
+	activeAccountId: z.string().nullable(),
+	accounts: z.array(z.object({
+		id: NonEmptyStringSchema,
+		label: NonEmptyStringSchema,
+		email: z.string().nullable(),
+		createdAt: z.number().int().nonnegative()
+	}).strict()),
+	login: z.object({
+		id: NonEmptyStringSchema,
+		status: z.enum([
+			"running",
+			"authorized",
+			"cancelled",
+			"failed"
+		]),
+		notices: z.array(z.object({
+			message: z.string(),
+			url: z.string().optional(),
+			code: z.string().optional()
+		}).strict()),
+		prompt: z.object({
+			id: NonEmptyStringSchema,
+			kind: z.enum([
+				"text",
+				"secret",
+				"select"
+			]),
+			message: z.string(),
+			placeholder: z.string().optional(),
+			options: z.array(z.object({
+				id: z.string(),
+				label: z.string(),
+				description: z.string().optional()
+			}).strict()).optional()
+		}).strict().nullable(),
+		error: z.string().nullable()
+	}).strict().nullable()
 }).strict();
 const LlmProviderSettingsSchema = z.object({
 	writable: z.boolean(),
@@ -3724,6 +5551,8 @@ const defineContract = (contract) => ({
 	parseError: (input) => contract.error.parse(input)
 });
 const agentParam = z.object({ agentId: AgentIdSchema }).strict();
+const credentialParam = z.object({ credentialId: CredentialIdSchema }).strict();
+const linkedAccountParam = z.object({ accountId: LinkedAccountIdSchema }).strict();
 const agentRevisionParam = z.object({
 	agentId: AgentIdSchema,
 	revisionId: AgentRevisionIdSchema
@@ -3734,7 +5563,11 @@ const AgentRevisionChangedFieldSchema = z.enum([
 	"model",
 	"capabilities",
 	"imagePolicy",
-	"approvalPolicy"
+	"approvalPolicy",
+	"compaction",
+	"subConversationModels",
+	"fallbackModels",
+	"aliases"
 ]);
 const AgentRevisionHistorySchema = z.object({
 	agentId: AgentIdSchema,
@@ -3760,40 +5593,192 @@ const agentExtensionParam = z.object({
 	extensionId: ExtensionIdSchema
 }).strict();
 const PermissionApprovalSchema = z.object({ permissionDigest: z.string().regex(/^[a-f0-9]{64}$/u) }).strict();
-const extensionParam = z.object({ extensionId: ExtensionIdSchema }).strict();
-const dshPluginPackageParam = z.object({ packageId: DshPluginPackageIdSchema }).strict();
-const dshPluginEntryParam = z.object({ entryId: DshPluginEntryIdSchema }).strict();
-const extensionRevisionParam = z.object({
+/** One version of one line in the lineage view of an extension family. */
+const ExtensionLineageNodeSchema = z.object({
+	revisionId: ExtensionRevisionIdSchema,
 	extensionId: ExtensionIdSchema,
-	revisionId: ExtensionRevisionIdSchema
-}).strict();
-const dshSettingsParam = z.object({ namespace: NonEmptyStringSchema }).strict();
-const dshCredentialParam = z.object({ ref: DshCredentialRefSchema }).strict();
-const llmProviderParam = z.object({ provider: NonEmptyStringSchema }).strict();
-const authoringTaskParam = z.object({ taskId: AuthoringTaskIdSchema }).strict();
-const scheduledTaskParam = z.object({ taskId: ScheduledTaskIdSchema }).strict();
-const authoringAttemptParam = z.object({
-	taskId: AuthoringTaskIdSchema,
-	attemptId: AuthoringAttemptIdSchema
+	label: z.string(),
+	parentRevisionId: ExtensionRevisionIdSchema.optional(),
+	origin: z.enum([
+		"authored",
+		"file",
+		"community",
+		"branch"
+	]),
+	createdAt: z.number().int().nonnegative(),
+	current: z.boolean(),
+	releaseNumbers: z.array(z.number().int().positive())
 }).strict();
-const DshPluginInstallInspectionSchema = z.object({
-	token: NonEmptyStringSchema,
-	operationId: z.string().uuid().optional(),
-	packageName: NonEmptyStringSchema,
-	packageVersion: NonEmptyStringSchema,
-	packageDigest: z.string().regex(/^[a-f0-9]{64}$/u),
-	lockfileDigest: z.string().regex(/^[a-f0-9]{64}$/u),
-	blockedBuilds: z.array(NonEmptyStringSchema),
-	clientUiDetected: z.boolean(),
-	hostUi: DshNxtHostUiSchema.optional(),
-	entries: z.array(z.object({
-		entryKey: NonEmptyStringSchema,
-		moduleName: NonEmptyStringSchema,
-		suggestedScope: z.enum(["host", "agent"])
-	}).strict())
+/** Every line of the family an extension belongs to: the original and every branch of a branch on this machine. */
+const ExtensionLineageSchema = z.object({ lines: z.array(z.object({
+	extensionId: ExtensionIdSchema,
+	displayName: z.string(),
+	branchOf: z.object({
+		extensionId: ExtensionIdSchema,
+		revisionId: ExtensionRevisionIdSchema
+	}).strict().optional(),
+	nodes: z.array(ExtensionLineageNodeSchema)
+}).strict()) }).strict();
+const DataChangeCountSchema = z.object({
+	added: z.number().int().nonnegative(),
+	overwritten: z.number().int().nonnegative(),
+	removed: z.number().int().nonnegative(),
+	unchanged: z.number().int().nonnegative()
 }).strict();
-const BinaryUploadRequestSchema = z.object({
-	bytes: z.instanceof(Uint8Array),
+/** Where a data migration takes data from. */
+const ExtensionDataSourceSchema = z.discriminatedUnion("kind", [
+	z.object({
+		kind: z.literal("extension"),
+		extensionId: ExtensionIdSchema
+	}).strict(),
+	z.object({
+		kind: z.literal("snapshot"),
+		snapshotId: z.string().min(1).max(80)
+	}).strict(),
+	z.object({
+		kind: z.literal("package"),
+		token: z.string().min(1).max(80)
+	}).strict()
+]);
+const ExtensionDataMigrationInputSchema = z.object({
+	source: ExtensionDataSourceSchema,
+	mode: z.enum(["overwrite", "replace"]),
+	/** Storage of a source agent goes to the mapped agent here; unmapped agents are skipped. */
+	agentMap: z.record(z.string(), AgentIdSchema).optional(),
+	/** Also move the host and agent configuration (never credentials) the same way. */
+	includeConfig: z.boolean().optional()
+}).strict();
+const ExtensionDataPreviewSchema = z.object({
+	diff: z.object({
+		storage: DataChangeCountSchema,
+		index: DataChangeCountSchema,
+		library: DataChangeCountSchema
+	}).strict(),
+	destructive: z.boolean(),
+	sourceDataVersion: z.number().int().positive(),
+	targetDataVersion: z.number().int().positive(),
+	needsMigration: z.boolean(),
+	/** Configuration fields that would change, when configuration moves too. */
+	config: z.object({
+		hostFields: z.array(z.string()),
+		agents: z.array(z.object({
+			agentId: AgentIdSchema,
+			fields: z.array(z.string())
+		}).strict())
+	}).strict().optional()
+}).strict();
+const ExtensionDataStateSchema = z.object({
+	dataVersion: z.number().int().positive(),
+	counts: z.object({
+		storage: z.number().int().nonnegative(),
+		index: z.number().int().nonnegative(),
+		library: z.number().int().nonnegative()
+	}).strict(),
+	snapshots: z.array(z.object({
+		id: z.string(),
+		reason: z.enum([
+			"switch",
+			"migration",
+			"manual"
+		]),
+		label: z.string(),
+		dataVersion: z.number().int().positive(),
+		byteSize: z.number().int().nonnegative(),
+		createdAt: z.number().int().nonnegative()
+	}).strict())
+}).strict();
+const ExtensionDataPackageInspectionSchema = z.object({
+	token: z.string(),
+	extensionId: z.string(),
+	displayName: z.string(),
+	dataVersion: z.number().int().positive(),
+	exportedAt: z.number().int().nonnegative(),
+	agents: z.array(z.object({
+		id: z.string(),
+		name: z.string()
+	}).strict()),
+	counts: z.object({
+		storage: z.number().int().nonnegative(),
+		index: z.number().int().nonnegative(),
+		library: z.number().int().nonnegative()
+	}).strict()
+}).strict();
+const AdministratorSchema = z.object({
+	connectionId: ConnectionIdSchema,
+	connectionName: z.string(),
+	platformUserId: z.string(),
+	identityId: PlatformIdentityIdSchema.optional(),
+	displayName: z.string(),
+	addedVia: z.enum(["console", "claim"]),
+	addedAt: z.number().int().nonnegative()
+}).strict();
+const extensionParam = z.object({ extensionId: ExtensionIdSchema }).strict();
+const ExtensionConfigVersionSourceSchema = z.enum([
+	"console",
+	"agent",
+	"chat-admin",
+	"revert",
+	"auto-revert"
+]);
+/**
+* One saved state of an extension's host configuration or of one agent's configuration. Versions are numbered per
+* extension, layer and agent; reverting writes an old one again as a new version. Secret fields only show whether
+* they were set and which named credential they were bound to.
+*/
+const ExtensionConfigVersionSchema = z.object({
+	id: z.number().int().positive(),
+	extensionId: ExtensionIdSchema,
+	layer: z.enum(["host", "agent"]),
+	agentId: AgentIdSchema.nullable(),
+	version: z.number().int().positive(),
+	config: JsonValueSchema,
+	configuredSecrets: z.array(z.string()).optional(),
+	boundCredentials: z.record(z.string(), CredentialIdSchema).optional(),
+	source: ExtensionConfigVersionSourceSchema,
+	actorAgentId: AgentIdSchema.nullable(),
+	requesterMemberId: z.string().nullable(),
+	reason: z.string().nullable(),
+	createdAt: z.number().int().nonnegative()
+}).strict();
+const extensionConfigVersionParam = z.object({
+	extensionId: ExtensionIdSchema,
+	/** Decimal text of the version id; the path builder only takes strings. */
+	versionId: z.string().regex(/^[1-9]\d{0,15}$/u)
+}).strict();
+const dshPluginPackageParam = z.object({ packageId: DshPluginPackageIdSchema }).strict();
+const dshPluginEntryParam = z.object({ entryId: DshPluginEntryIdSchema }).strict();
+const extensionRevisionParam = z.object({
+	extensionId: ExtensionIdSchema,
+	revisionId: ExtensionRevisionIdSchema
+}).strict();
+const dshSettingsParam = z.object({ namespace: NonEmptyStringSchema }).strict();
+const dshCredentialParam = z.object({ ref: DshCredentialRefSchema }).strict();
+const llmProviderParam = z.object({ provider: NonEmptyStringSchema }).strict();
+const authoringTaskParam = z.object({ taskId: AuthoringTaskIdSchema }).strict();
+const subConversationParam = z.object({ conversationId: SubConversationIdSchema }).strict();
+const scheduledTaskParam = z.object({ taskId: ScheduledTaskIdSchema }).strict();
+const authoringAttemptParam = z.object({
+	taskId: AuthoringTaskIdSchema,
+	attemptId: AuthoringAttemptIdSchema
+}).strict();
+const DshPluginInstallInspectionSchema = z.object({
+	token: NonEmptyStringSchema,
+	operationId: z.string().uuid().optional(),
+	packageName: NonEmptyStringSchema,
+	packageVersion: NonEmptyStringSchema,
+	packageDigest: z.string().regex(/^[a-f0-9]{64}$/u),
+	lockfileDigest: z.string().regex(/^[a-f0-9]{64}$/u),
+	blockedBuilds: z.array(NonEmptyStringSchema),
+	clientUiDetected: z.boolean(),
+	hostUi: DshNxtHostUiSchema.optional(),
+	entries: z.array(z.object({
+		entryKey: NonEmptyStringSchema,
+		moduleName: NonEmptyStringSchema,
+		suggestedScope: z.enum(["host", "agent"])
+	}).strict())
+}).strict();
+const BinaryUploadRequestSchema = z.object({
+	bytes: z.instanceof(Uint8Array),
 	fileName: z.string().max(255).optional(),
 	operationId: z.string().uuid().optional()
 }).strict();
@@ -3806,6 +5791,174 @@ const encodeBinaryUpload = (input) => ({
 	}
 });
 const HostApiContracts = {
+	listCommands: defineContract({
+		method: "GET",
+		path: "/api/commands",
+		params: z.object({ channelId: ChannelIdSchema.optional() }).strict(),
+		request: NoRequestBodySchema,
+		response: z.object({
+			commands: z.array(CommandCatalogEntrySchema),
+			problems: z.array(z.string()),
+			/** Host-wide behavior: whether platform members without a grant are told so. */
+			settings: z.object({ unauthorizedFeedback: z.boolean() }).strict(),
+			/** Present when a channel was requested. */
+			channel: z.object({
+				kind: z.enum([
+					"internal",
+					"direct",
+					"group"
+				]),
+				/** The channel is an external group where commands must address the account. */
+				requiresMention: z.boolean(),
+				bareCommands: z.boolean()
+			}).strict().optional()
+		}).strict(),
+		error: HostApiErrorSchema
+	}),
+	executeCommand: defineContract({
+		method: "POST",
+		path: "/api/commands/execute",
+		params: EmptyParamsSchema,
+		request: z.object({
+			channelId: ChannelIdSchema,
+			text: z.string().min(1).max(16e3),
+			requestId: z.string().min(1).max(200)
+		}).strict(),
+		response: CommandExecutionRecordSchema,
+		error: HostApiErrorSchema,
+		invalidatesSnapshot: true
+	}),
+	getCommandExecution: defineContract({
+		method: "GET",
+		path: "/api/commands/executions/:executionId",
+		params: z.object({ executionId: z.string().min(1) }).strict(),
+		request: NoRequestBodySchema,
+		response: CommandExecutionRecordSchema,
+		error: HostApiErrorSchema
+	}),
+	setCommandPolicy: defineContract({
+		method: "PUT",
+		path: "/api/commands/policy",
+		params: EmptyParamsSchema,
+		request: z.object({
+			scope: z.union([z.literal("global"), ChannelIdSchema]),
+			name: z.string().min(1),
+			policy: CommandPolicySchema
+		}).strict(),
+		response: z.object({ saved: z.literal(true) }).strict(),
+		error: HostApiErrorSchema,
+		invalidatesSnapshot: true
+	}),
+	listCommandMembers: defineContract({
+		method: "GET",
+		path: "/api/commands/members/:channelId",
+		params: z.object({ channelId: ChannelIdSchema }).strict(),
+		request: NoRequestBodySchema,
+		response: z.object({ members: z.array(z.object({
+			identityId: PlatformIdentityIdSchema,
+			displayName: z.string(),
+			platformUserId: z.string(),
+			authorized: z.boolean()
+		}).strict()) }).strict(),
+		error: HostApiErrorSchema
+	}),
+	setCommandSettings: defineContract({
+		method: "PUT",
+		path: "/api/commands/settings",
+		params: EmptyParamsSchema,
+		request: z.object({ unauthorizedFeedback: z.boolean() }).strict(),
+		response: z.object({ saved: z.literal(true) }).strict(),
+		error: HostApiErrorSchema
+	}),
+	setCommandChannelSettings: defineContract({
+		method: "PUT",
+		path: "/api/commands/channel-settings",
+		params: EmptyParamsSchema,
+		request: z.object({
+			channelId: ChannelIdSchema,
+			bareCommands: z.boolean()
+		}).strict(),
+		response: z.object({ saved: z.literal(true) }).strict(),
+		error: HostApiErrorSchema,
+		invalidatesSnapshot: true
+	}),
+	setCommandGrant: defineContract({
+		method: "PUT",
+		path: "/api/commands/grants",
+		params: EmptyParamsSchema,
+		request: z.object({
+			channelId: ChannelIdSchema,
+			identityId: PlatformIdentityIdSchema,
+			enabled: z.boolean()
+		}).strict(),
+		response: z.object({ saved: z.literal(true) }).strict(),
+		error: HostApiErrorSchema,
+		invalidatesSnapshot: true
+	}),
+	queryLogs: defineContract({
+		method: "GET",
+		path: "/api/logs",
+		params: z.object({ query: z.string().max(32768).optional() }).strict(),
+		request: NoRequestBodySchema,
+		response: hostLogPageSchema,
+		error: HostApiErrorSchema
+	}),
+	getLog: defineContract({
+		method: "GET",
+		path: "/api/logs/:id",
+		params: z.object({ id: z.string().min(1).max(256) }).strict(),
+		request: NoRequestBodySchema,
+		response: z.object({ entry: hostLogEntrySchema }).strict(),
+		error: HostApiErrorSchema
+	}),
+	logSources: defineContract({
+		method: "GET",
+		path: "/api/logs/sources",
+		params: EmptyParamsSchema,
+		request: NoRequestBodySchema,
+		response: z.object({ sources: z.array(hostLogSourceSchema) }).strict(),
+		error: HostApiErrorSchema
+	}),
+	logStatus: defineContract({
+		method: "GET",
+		path: "/api/logs/status",
+		params: EmptyParamsSchema,
+		request: NoRequestBodySchema,
+		response: hostLogStatusSchema,
+		error: HostApiErrorSchema
+	}),
+	logSettings: defineContract({
+		method: "GET",
+		path: "/api/logs/settings",
+		params: EmptyParamsSchema,
+		request: NoRequestBodySchema,
+		response: hostLogSettingsSchema,
+		error: HostApiErrorSchema
+	}),
+	updateLogSettings: defineContract({
+		method: "PUT",
+		path: "/api/logs/settings",
+		params: EmptyParamsSchema,
+		request: hostLogSettingsSchema,
+		response: hostLogSettingsSchema,
+		error: HostApiErrorSchema
+	}),
+	startLogDebug: defineContract({
+		method: "POST",
+		path: "/api/logs/debug",
+		params: EmptyParamsSchema,
+		request: hostLogDebugRequestSchema,
+		response: z.object({ lease: hostLogDebugLeaseSchema }).strict(),
+		error: HostApiErrorSchema
+	}),
+	stopLogDebug: defineContract({
+		method: "DELETE",
+		path: "/api/logs/debug/:id",
+		params: z.object({ id: z.string().min(1).max(256) }).strict(),
+		request: NoRequestBodySchema,
+		response: z.object({ stopped: z.literal(true) }).strict(),
+		error: HostApiErrorSchema
+	}),
 	retryRuntimeCompatibility: defineContract({
 		method: "POST",
 		path: "/api/runtime/compatibility/retry",
@@ -3834,13 +5987,25 @@ const HostApiContracts = {
 		response: z.object({
 			task: AuthoringTaskSummarySchema,
 			attempts: z.array(AuthoringAttemptSummarySchema),
-			/** Secret fields of the latest candidate and which have a test value for this task's dynamic runs. */
-			testSecrets: z.object({
+			/**
+			* Test configuration of this task's dynamic runs: fields of the latest candidate the user can type, which
+			* credentials are set, the user's values and the values the agent provided.
+			*/
+			testConfig: z.object({
 				fields: z.array(z.object({
 					key: z.string(),
-					title: z.string()
+					title: z.string(),
+					kind: z.enum([
+						"secret",
+						"string",
+						"number"
+					])
 				}).strict()),
-				configured: z.array(z.string())
+				configured: z.array(z.string()),
+				values: z.record(z.string(), z.union([z.string(), z.number()])),
+				agentValues: z.record(z.string(), JsonValueSchema),
+				/** Secret fields bound to a named credential, by the user or else by the agent. */
+				boundCredentials: BoundCredentialsSchema.optional()
 			}).strict().optional(),
 			events: z.array(z.object({
 				sequence: z.number().int().positive(),
@@ -3887,12 +6052,22 @@ const HostApiContracts = {
 		response: AuthoringTaskSummarySchema,
 		error: HostApiErrorSchema
 	}),
-	setAuthoringTestSecrets: defineContract({
+	setAuthoringTestConfig: defineContract({
 		method: "PUT",
 		path: "/api/authoring/tasks/:taskId/test-secrets",
 		params: authoringTaskParam,
-		request: z.object({ secrets: z.record(z.string(), z.string().max(8192)) }).strict(),
-		response: z.object({ configured: z.array(z.string()) }).strict(),
+		request: z.object({
+			secrets: z.record(z.string(), z.string().max(8192)),
+			/** Text and number values; an empty string goes back to the agent's value or the default. */
+			values: z.record(z.string(), z.union([z.string().max(8192), z.number()])).optional(),
+			/** Secret fields to bind to named credentials instead of a typed value; `null` leaves the field unset. */
+			credentialBindings: CredentialBindingsRequestSchema.optional()
+		}).strict(),
+		response: z.object({
+			configured: z.array(z.string()),
+			values: z.record(z.string(), z.union([z.string(), z.number()])),
+			boundCredentials: BoundCredentialsSchema.optional()
+		}).strict(),
 		error: HostApiErrorSchema
 	}),
 	deleteAuthoringTask: defineContract({
@@ -4097,15 +6272,19 @@ const HostApiContracts = {
 			processingFeedback: z.enum(["auto", "off"]).optional(),
 			/** Messages from another local agent's account: `observe` keeps them as context unless they @ this agent. */
 			localAgentMessages: z.enum(["observe", "trigger"]).optional(),
-			activityTriggerOverrides: ActivityTriggerOverridesSchema.optional()
+			activityTriggerOverrides: ActivityTriggerOverridesSchema.optional(),
+			/** Omitted keeps the binding's current timing; `{}` resets every field to its default. */
+			responseTiming: ResponseTimingSettingsSchema.optional()
 		}).strict(),
 		response: z.object({
 			channelId: ChannelIdSchema,
 			agentId: AgentIdSchema,
 			triggerPolicy: TriggerPolicySchema,
+			paused: z.boolean().default(false),
 			processingFeedback: z.enum(["auto", "off"]).default("auto"),
 			localAgentMessages: z.enum(["observe", "trigger"]).optional(),
 			activityTriggerOverrides: ActivityTriggerOverridesSchema.default({}),
+			responseTiming: ResponseTimingSettingsSchema.optional(),
 			boundAt: z.number().int().safe().nonnegative()
 		}).strict(),
 		error: HostApiErrorSchema
@@ -4131,6 +6310,23 @@ const HostApiContracts = {
 		response: WorkTreeOrderSchema,
 		error: HostApiErrorSchema
 	}),
+	getChannelListView: defineContract({
+		method: "GET",
+		path: "/api/channel-list-view",
+		params: EmptyParamsSchema,
+		request: NoRequestBodySchema,
+		response: ChannelListViewSchema,
+		error: HostApiErrorSchema
+	}),
+	updateChannelListView: defineContract({
+		invalidatesSnapshot: true,
+		method: "PUT",
+		path: "/api/channel-list-view",
+		params: EmptyParamsSchema,
+		request: ChannelListViewSchema,
+		response: ChannelListViewSchema,
+		error: HostApiErrorSchema
+	}),
 	listChannelMessages: defineContract({
 		method: "GET",
 		path: "/api/channels/:channelId/messages",
@@ -4160,12 +6356,48 @@ const HostApiContracts = {
 		}).strict(),
 		error: HostApiErrorSchema
 	}),
+	uploadChannelAsset: defineContract({
+		method: "POST",
+		path: "/api/channels/:channelId/assets",
+		params: channelParam,
+		request: BinaryUploadRequestSchema,
+		encodeRequest: (input) => ({
+			body: input.bytes,
+			headers: {
+				"content-type": "application/octet-stream",
+				"x-file-name": encodeURIComponent(input.fileName ?? "附件")
+			}
+		}),
+		response: z.object({
+			assetId: AssetIdSchema,
+			mediaType: z.string().min(1),
+			byteSize: z.number().int().nonnegative(),
+			fileName: z.string().min(1).max(255),
+			partType: z.enum(["image", "file"])
+		}).strict(),
+		error: HostApiErrorSchema
+	}),
+	deleteChannelAsset: defineContract({
+		method: "DELETE",
+		path: "/api/channels/:channelId/assets/:assetId",
+		params: z.object({
+			channelId: ChannelIdSchema,
+			assetId: AssetIdSchema
+		}).strict(),
+		request: NoRequestBodySchema,
+		response: z.object({
+			assetId: AssetIdSchema,
+			revoked: z.literal(true)
+		}).strict(),
+		error: HostApiErrorSchema
+	}),
 	renameChannel: defineContract({
 		invalidatesSnapshot: true,
 		method: "POST",
 		path: "/api/channels/:channelId/display-name",
 		params: channelParam,
-		request: z.object({ displayName: z.string().trim().min(1).max(120) }).strict(),
+		/** Empty selects the known platform name for an external channel. */
+		request: z.object({ displayName: z.string().trim().max(120) }).strict(),
 		response: z.object({
 			channelId: ChannelIdSchema,
 			displayName: z.string().trim().min(1).max(120)
@@ -4207,6 +6439,59 @@ const HostApiContracts = {
 		response: ChannelRuntimeContextSchema,
 		error: HostApiErrorSchema
 	}),
+	listSubConversations: defineContract({
+		method: "GET",
+		path: "/api/sub-conversations/channels/:channelId",
+		params: channelParam,
+		request: NoRequestBodySchema,
+		response: z.object({ items: z.array(SubConversationSchema) }).strict(),
+		error: HostApiErrorSchema
+	}),
+	getSubConversationRuntime: defineContract({
+		method: "GET",
+		path: "/api/sub-conversations/:conversationId/runtime",
+		params: subConversationParam,
+		request: NoRequestBodySchema,
+		response: z.object({
+			conversation: SubConversationSchema,
+			runtime: ChannelRuntimeProjectionSchema
+		}).strict(),
+		error: HostApiErrorSchema
+	}),
+	closeSubConversation: defineContract({
+		invalidatesSnapshot: true,
+		method: "POST",
+		path: "/api/sub-conversations/:conversationId/close",
+		params: subConversationParam,
+		request: z.object({}).strict(),
+		response: SubConversationSchema,
+		error: HostApiErrorSchema
+	}),
+	deleteSubConversation: defineContract({
+		invalidatesSnapshot: true,
+		method: "DELETE",
+		path: "/api/sub-conversations/:conversationId",
+		params: subConversationParam,
+		request: NoRequestBodySchema,
+		response: z.object({ deleted: z.literal(true) }).strict(),
+		error: HostApiErrorSchema
+	}),
+	getSubConversationSettings: defineContract({
+		method: "GET",
+		path: "/api/settings/sub-conversations",
+		params: EmptyParamsSchema,
+		request: NoRequestBodySchema,
+		response: SubConversationSettingsSchema,
+		error: HostApiErrorSchema
+	}),
+	updateSubConversationSettings: defineContract({
+		method: "PUT",
+		path: "/api/settings/sub-conversations",
+		params: EmptyParamsSchema,
+		request: SubConversationSettingsSchema,
+		response: SubConversationSettingsSchema,
+		error: HostApiErrorSchema
+	}),
 	getChannelRuntimeInput: defineContract({
 		method: "GET",
 		path: "/api/channels/:channelId/runtime/inputs/:messageId",
@@ -4287,6 +6572,58 @@ const HostApiContracts = {
 		response: MessagePacingSettingsSchema,
 		error: HostApiErrorSchema
 	}),
+	getCompactionSettings: defineContract({
+		method: "GET",
+		path: "/api/settings/compaction",
+		params: EmptyParamsSchema,
+		request: NoRequestBodySchema,
+		response: CompactionSettingsSchema,
+		error: HostApiErrorSchema
+	}),
+	updateCompactionSettings: defineContract({
+		invalidatesSnapshot: true,
+		method: "PUT",
+		path: "/api/settings/compaction",
+		params: EmptyParamsSchema,
+		request: CompactionSettingsSchema,
+		response: CompactionSettingsSchema,
+		error: HostApiErrorSchema
+	}),
+	getModelFallbackSettings: defineContract({
+		method: "GET",
+		path: "/api/settings/model-fallback",
+		params: EmptyParamsSchema,
+		request: NoRequestBodySchema,
+		response: ModelFallbackSettingsSchema,
+		error: HostApiErrorSchema
+	}),
+	updateModelFallbackSettings: defineContract({
+		method: "PUT",
+		path: "/api/settings/model-fallback",
+		params: EmptyParamsSchema,
+		request: ModelFallbackSettingsSchema,
+		response: ModelFallbackSettingsSchema,
+		error: HostApiErrorSchema
+	}),
+	getUpgradeBackupSettings: defineContract({
+		method: "GET",
+		path: "/api/settings/upgrade-backup",
+		params: EmptyParamsSchema,
+		request: NoRequestBodySchema,
+		response: UpgradeBackupSettingsSchema,
+		error: HostApiErrorSchema
+	}),
+	updateUpgradeBackupSettings: defineContract({
+		method: "PUT",
+		path: "/api/settings/upgrade-backup",
+		params: EmptyParamsSchema,
+		request: z.object({
+			mode: UpgradeBackupModeSchema,
+			directory: z.string().trim().min(1).max(1024).optional()
+		}).strict(),
+		response: UpgradeBackupSettingsSchema,
+		error: HostApiErrorSchema
+	}),
 	getRetrievalStatus: defineContract({
 		method: "GET",
 		path: "/api/settings/retrieval",
@@ -4337,6 +6674,154 @@ const HostApiContracts = {
 		response: CodeRunAvailabilitySchema,
 		error: HostApiErrorSchema
 	}),
+	downloadGithubCli: defineContract({
+		invalidatesSnapshot: true,
+		method: "POST",
+		path: "/api/runtimes/github-cli/download",
+		params: EmptyParamsSchema,
+		request: NoRequestBodySchema,
+		response: GithubCliAvailabilitySchema,
+		error: HostApiErrorSchema
+	}),
+	removeGithubCli: defineContract({
+		invalidatesSnapshot: true,
+		method: "DELETE",
+		path: "/api/runtimes/github-cli",
+		params: EmptyParamsSchema,
+		request: NoRequestBodySchema,
+		response: GithubCliAvailabilitySchema,
+		error: HostApiErrorSchema
+	}),
+	downloadVerificationBrowser: defineContract({
+		invalidatesSnapshot: true,
+		method: "POST",
+		path: "/api/runtimes/verification-browser/download",
+		params: EmptyParamsSchema,
+		request: NoRequestBodySchema,
+		response: VerificationBrowserAvailabilitySchema,
+		error: HostApiErrorSchema
+	}),
+	removeVerificationBrowser: defineContract({
+		invalidatesSnapshot: true,
+		method: "DELETE",
+		path: "/api/runtimes/verification-browser",
+		params: EmptyParamsSchema,
+		request: NoRequestBodySchema,
+		response: VerificationBrowserAvailabilitySchema,
+		error: HostApiErrorSchema
+	}),
+	getLinkedAccounts: defineContract({
+		method: "GET",
+		path: "/api/settings/linked-accounts",
+		params: EmptyParamsSchema,
+		request: NoRequestBodySchema,
+		response: LinkedAccountsViewSchema,
+		error: HostApiErrorSchema
+	}),
+	addLinkedAccount: defineContract({
+		invalidatesSnapshot: true,
+		method: "POST",
+		path: "/api/settings/linked-accounts",
+		params: EmptyParamsSchema,
+		request: AddLinkedAccountRequestSchema,
+		response: LinkedAccountsViewSchema,
+		error: HostApiErrorSchema
+	}),
+	replaceLinkedAccountToken: defineContract({
+		invalidatesSnapshot: true,
+		method: "PUT",
+		path: "/api/settings/linked-accounts/:accountId/token",
+		params: linkedAccountParam,
+		request: ReplaceLinkedAccountTokenRequestSchema,
+		response: LinkedAccountsViewSchema,
+		error: HostApiErrorSchema
+	}),
+	removeLinkedAccount: defineContract({
+		invalidatesSnapshot: true,
+		method: "POST",
+		path: "/api/settings/linked-accounts/:accountId/remove",
+		params: linkedAccountParam,
+		request: RemoveLinkedAccountRequestSchema,
+		response: RemoveLinkedAccountResultSchema,
+		error: HostApiErrorSchema
+	}),
+	getLinkedAccountUses: defineContract({
+		method: "GET",
+		path: "/api/settings/linked-accounts/:accountId/uses",
+		params: linkedAccountParam,
+		request: NoRequestBodySchema,
+		response: LinkedAccountUsesViewSchema,
+		error: HostApiErrorSchema
+	}),
+	getCredentials: defineContract({
+		method: "GET",
+		path: "/api/settings/credentials",
+		params: EmptyParamsSchema,
+		request: NoRequestBodySchema,
+		response: CredentialsViewSchema,
+		error: HostApiErrorSchema
+	}),
+	createCredential: defineContract({
+		invalidatesSnapshot: true,
+		method: "POST",
+		path: "/api/settings/credentials",
+		params: EmptyParamsSchema,
+		request: CreateCredentialRequestSchema,
+		response: CredentialsViewSchema,
+		error: HostApiErrorSchema
+	}),
+	updateCredential: defineContract({
+		invalidatesSnapshot: true,
+		method: "PATCH",
+		path: "/api/settings/credentials/:credentialId",
+		params: credentialParam,
+		request: UpdateCredentialRequestSchema,
+		response: CredentialsViewSchema,
+		error: HostApiErrorSchema
+	}),
+	replaceCredentialValue: defineContract({
+		invalidatesSnapshot: true,
+		method: "PUT",
+		path: "/api/settings/credentials/:credentialId/value",
+		params: credentialParam,
+		request: ReplaceCredentialValueRequestSchema,
+		response: CredentialsViewSchema,
+		error: HostApiErrorSchema
+	}),
+	removeCredential: defineContract({
+		invalidatesSnapshot: true,
+		method: "POST",
+		path: "/api/settings/credentials/:credentialId/remove",
+		params: credentialParam,
+		request: RemoveCredentialRequestSchema,
+		response: RemoveCredentialResultSchema,
+		error: HostApiErrorSchema
+	}),
+	getCredentialUses: defineContract({
+		method: "GET",
+		path: "/api/settings/credentials/:credentialId/uses",
+		params: credentialParam,
+		request: NoRequestBodySchema,
+		response: CredentialUsesViewSchema,
+		error: HostApiErrorSchema
+	}),
+	dismissCredentialRequest: defineContract({
+		method: "DELETE",
+		path: "/api/settings/credentials/requests/:requestId",
+		params: z.object({ requestId: NonEmptyStringSchema.max(64) }).strict(),
+		request: NoRequestBodySchema,
+		response: CredentialsViewSchema,
+		error: HostApiErrorSchema
+	}),
+	setModelProviderAccess: defineContract({
+		invalidatesSnapshot: true,
+		method: "PUT",
+		path: "/api/settings/credentials/model-providers/:provider",
+		params: z.object({ provider: NonEmptyStringSchema.max(128) }).strict(),
+		request: SetModelProviderAccessRequestSchema,
+		response: CredentialsViewSchema,
+		error: HostApiErrorSchema
+	}),
 	getChannelMemberNotes: defineContract({
 		method: "GET",
 		path: "/api/channels/:channelId/member-notes",
@@ -4494,11 +6979,15 @@ const HostApiContracts = {
 		method: "POST",
 		path: "/api/connections/:connectionId/configuration",
 		params: connectionParam,
-		request: z.object({ configuration: z.record(z.string(), z.union([
-			z.string(),
-			z.number(),
-			z.boolean()
-		])) }).strict(),
+		request: z.object({
+			configuration: z.record(z.string(), z.union([
+				z.string(),
+				z.number(),
+				z.boolean()
+			])),
+			/** Omitted keys keep their value; null explicitly clears an optional credential. */
+			credentials: z.record(z.string().min(1), z.string().min(1).max(16384).nullable()).optional()
+		}).strict(),
 		response: z.object({
 			connectionId: ConnectionIdSchema,
 			configuration: z.record(z.string(), z.union([
@@ -4654,36 +7143,172 @@ const HostApiContracts = {
 	*/
 	listManagementDevices: defineContract({
 		method: "GET",
-		path: "/api/management/devices",
-		params: EmptyParamsSchema,
+		path: "/api/management/devices",
+		params: EmptyParamsSchema,
+		request: NoRequestBodySchema,
+		response: z.object({ devices: z.array(ManagementDeviceViewSchema) }).strict(),
+		error: HostApiErrorSchema
+	}),
+	revokeManagementDevice: defineContract({
+		method: "DELETE",
+		path: "/api/management/devices/:deviceId",
+		params: z.object({ deviceId: ManagementDeviceIdSchema }).strict(),
+		request: NoRequestBodySchema,
+		response: z.object({ revoked: z.boolean() }).strict(),
+		error: HostApiErrorSchema
+	}),
+	managementLogout: defineContract({
+		method: "DELETE",
+		path: "/api/management/session",
+		params: EmptyParamsSchema,
+		request: NoRequestBodySchema,
+		response: z.object({ authenticated: z.literal(false) }).strict(),
+		error: HostApiErrorSchema
+	}),
+	getCommunityStatus: defineContract({
+		method: "GET",
+		path: "/api/community/status",
+		params: EmptyParamsSchema,
+		request: NoRequestBodySchema,
+		response: CommunityStatusSchema,
+		error: HostApiErrorSchema
+	}),
+	getCommunityFeedbackSettings: defineContract({
+		method: "GET",
+		path: "/api/community/feedback/settings",
+		params: EmptyParamsSchema,
+		request: NoRequestBodySchema,
+		response: CommunityFeedbackSettingsSchema,
+		error: HostApiErrorSchema
+	}),
+	updateCommunityFeedbackSettings: defineContract({
+		method: "PUT",
+		path: "/api/community/feedback/settings",
+		params: EmptyParamsSchema,
+		request: CommunityFeedbackSettingsUpdateSchema,
+		response: CommunityFeedbackSettingsSchema,
+		error: HostApiErrorSchema,
+		invalidatesSnapshot: true
+	}),
+	listCommunityFeedback: defineContract({
+		timeoutMs: 6e4,
+		method: "GET",
+		path: "/api/community/feedback",
+		params: z.object({ refresh: z.literal("1").optional() }).strict(),
 		request: NoRequestBodySchema,
-		response: z.object({ devices: z.array(ManagementDeviceViewSchema) }).strict(),
+		response: CommunityFeedbackLocalListSchema,
 		error: HostApiErrorSchema
 	}),
-	revokeManagementDevice: defineContract({
-		method: "DELETE",
-		path: "/api/management/devices/:deviceId",
-		params: z.object({ deviceId: ManagementDeviceIdSchema }).strict(),
+	getCommunityFeedback: defineContract({
+		timeoutMs: 6e4,
+		method: "GET",
+		path: "/api/community/feedback/items/:ref",
+		params: z.object({ ref: CommunityFeedbackRefSchema }).strict(),
 		request: NoRequestBodySchema,
-		response: z.object({ revoked: z.boolean() }).strict(),
+		response: CommunityFeedbackSchema,
 		error: HostApiErrorSchema
 	}),
-	managementLogout: defineContract({
-		method: "DELETE",
-		path: "/api/management/session",
+	createCommunityFeedbackDraft: defineContract({
+		method: "POST",
+		path: "/api/community/feedback/drafts",
 		params: EmptyParamsSchema,
+		request: CommunityFeedbackDraftInputSchema,
+		response: CommunityFeedbackDraftSchema,
+		error: HostApiErrorSchema,
+		invalidatesSnapshot: true
+	}),
+	updateCommunityFeedbackDraft: defineContract({
+		method: "PUT",
+		path: "/api/community/feedback/drafts/:draftId",
+		params: z.object({ draftId: CommunityFeedbackDraftIdSchema }).strict(),
+		request: CommunityFeedbackDraftUpdateSchema,
+		response: CommunityFeedbackDraftSchema,
+		error: HostApiErrorSchema,
+		invalidatesSnapshot: true
+	}),
+	sendCommunityFeedbackDraft: defineContract({
+		timeoutMs: 6e4,
+		method: "POST",
+		path: "/api/community/feedback/drafts/:draftId/send",
+		params: z.object({ draftId: CommunityFeedbackDraftIdSchema }).strict(),
+		request: z.object({ consent: z.boolean().default(false) }).strict(),
+		response: CommunityFeedbackDraftSchema,
+		error: HostApiErrorSchema,
+		invalidatesSnapshot: true
+	}),
+	discardCommunityFeedbackDraft: defineContract({
+		method: "DELETE",
+		path: "/api/community/feedback/drafts/:draftId",
+		params: z.object({ draftId: CommunityFeedbackDraftIdSchema }).strict(),
 		request: NoRequestBodySchema,
-		response: z.object({ authenticated: z.literal(false) }).strict(),
+		response: CommunityFeedbackDraftSchema,
+		error: HostApiErrorSchema,
+		invalidatesSnapshot: true
+	}),
+	previewCommunityFeedbackPayload: defineContract({
+		method: "GET",
+		path: "/api/community/feedback/drafts/:draftId/preview",
+		params: z.object({ draftId: CommunityFeedbackDraftIdSchema }).strict(),
+		request: NoRequestBodySchema,
+		response: CommunityFeedbackPayloadSchema,
 		error: HostApiErrorSchema
 	}),
-	getCommunityStatus: defineContract({
+	getLastSentCommunityFeedbackPayload: defineContract({
 		method: "GET",
-		path: "/api/community/status",
+		path: "/api/community/feedback/last-sent",
 		params: EmptyParamsSchema,
 		request: NoRequestBodySchema,
-		response: CommunityStatusSchema,
+		response: CommunityFeedbackLastPayloadSchema,
 		error: HostApiErrorSchema
 	}),
+	replyCommunityFeedback: defineContract({
+		method: "POST",
+		path: "/api/community/feedback/items/:ref/messages",
+		params: z.object({ ref: CommunityFeedbackRefSchema }).strict(),
+		request: z.object({ body: z.string().trim().min(1).max(4e3) }).strict(),
+		response: CommunityFeedbackSchema,
+		error: HostApiErrorSchema,
+		invalidatesSnapshot: true
+	}),
+	withdrawCommunityFeedback: defineContract({
+		method: "POST",
+		path: "/api/community/feedback/items/:ref/withdraw",
+		params: z.object({ ref: CommunityFeedbackRefSchema }).strict(),
+		request: CommunityFeedbackWithdrawSchema,
+		response: CommunityFeedbackSchema,
+		error: HostApiErrorSchema,
+		invalidatesSnapshot: true
+	}),
+	reopenCommunityFeedback: defineContract({
+		method: "POST",
+		path: "/api/community/feedback/items/:ref/reopen",
+		params: z.object({ ref: CommunityFeedbackRefSchema }).strict(),
+		request: CommunityFeedbackReopenSchema,
+		response: CommunityFeedbackSchema,
+		error: HostApiErrorSchema,
+		invalidatesSnapshot: true
+	}),
+	markCommunityFeedbackAffected: defineContract({
+		method: "POST",
+		path: "/api/community/feedback/items/:ref/affected",
+		params: z.object({ ref: CommunityFeedbackRefSchema }).strict(),
+		request: z.object({
+			affected: z.boolean().default(true),
+			consent: z.boolean().default(false)
+		}).strict(),
+		response: CommunityFeedbackSchema,
+		error: HostApiErrorSchema,
+		invalidatesSnapshot: true
+	}),
+	confirmCommunityFeedbackFixed: defineContract({
+		method: "POST",
+		path: "/api/community/feedback/items/:ref/confirm-fixed",
+		params: z.object({ ref: CommunityFeedbackRefSchema }).strict(),
+		request: z.object({}).strict(),
+		response: CommunityFeedbackSchema,
+		error: HostApiErrorSchema,
+		invalidatesSnapshot: true
+	}),
 	startCommunityLogin: defineContract({
 		method: "POST",
 		path: "/api/community/login",
@@ -4712,22 +7337,27 @@ const HostApiContracts = {
 			official: z.enum(["1"]).optional(),
 			/** 排序方式，默认最近更新；游标只在同一种排序下有效。 */
 			sort: CommunityExtensionSortSchema.optional(),
-			cursor: z.string().max(200).optional()
+			cursor: z.string().max(200).optional(),
+			/** 跳过本机缓存，重新向社区读取。 */
+			refresh: z.enum(["1"]).optional()
 		}).strict(),
 		request: NoRequestBodySchema,
 		response: z.object({
 			items: z.array(CommunityExtensionSummarySchema),
 			nextCursor: z.string().nullable()
-		}).strict(),
+		}).extend(CommunityFreshnessSchema.shape).strict(),
 		error: HostApiErrorSchema
 	}),
 	getCommunityExtension: defineContract({
 		timeoutMs: 3e4,
 		method: "GET",
 		path: "/api/community/extensions/:extensionId",
-		params: z.object({ extensionId: ExtensionIdSchema }).strict(),
+		params: z.object({
+			extensionId: ExtensionIdSchema,
+			refresh: z.enum(["1"]).optional()
+		}).strict(),
 		request: NoRequestBodySchema,
-		response: CommunityExtensionDetailSchema,
+		response: CommunityExtensionDetailSchema.extend(CommunityFreshnessSchema.shape),
 		error: HostApiErrorSchema
 	}),
 	/** 下载社区发布并按包摘要校验，结果与本地文件导入的检查相同，再经 `commitExtensionImport` 确认。 */
@@ -4772,13 +7402,13 @@ const HostApiContracts = {
 		}).strict(),
 		error: HostApiErrorSchema
 	}),
-	listCommunityInstalled: defineContract({
-		timeoutMs: 3e4,
+	listCommunitySync: defineContract({
+		timeoutMs: 6e4,
 		method: "GET",
-		path: "/api/community/installed",
+		path: "/api/community/sync",
 		params: z.object({ refresh: z.enum(["1"]).optional() }).strict(),
 		request: NoRequestBodySchema,
-		response: CommunityInstalledSchema,
+		response: CommunitySyncSchema,
 		error: HostApiErrorSchema
 	}),
 	listCommunityMine: defineContract({
@@ -4840,6 +7470,7 @@ const HostApiContracts = {
 		}).strict(),
 		response: z.object({
 			releaseId: CommunityReleaseIdSchema,
+			releaseNumber: z.number().int().positive(),
 			reviewStatus: CommunityReviewStatusSchema,
 			pageUrl: z.string().url(),
 			reportUrl: z.string().url(),
@@ -4858,22 +7489,27 @@ const HostApiContracts = {
 			query: z.string().trim().min(1).max(200).optional(),
 			tag: z.string().trim().min(1).max(40).optional(),
 			official: z.literal("1").optional(),
-			cursor: z.string().min(1).max(500).optional()
+			cursor: z.string().min(1).max(500).optional(),
+			/** 跳过本机缓存，重新向社区读取。 */
+			refresh: z.enum(["1"]).optional()
 		}).strict(),
 		request: NoRequestBodySchema,
 		response: z.object({
 			items: z.array(CommunityPersonaSummarySchema),
 			nextCursor: z.string().nullable()
-		}).strict(),
+		}).extend(CommunityFreshnessSchema.shape).strict(),
 		error: HostApiErrorSchema
 	}),
 	getCommunityPersona: defineContract({
 		timeoutMs: 3e4,
 		method: "GET",
 		path: "/api/community/personas/:personaId",
-		params: z.object({ personaId: CommunityPersonaIdSchema }).strict(),
+		params: z.object({
+			personaId: CommunityPersonaIdSchema,
+			refresh: z.enum(["1"]).optional()
+		}).strict(),
 		request: NoRequestBodySchema,
-		response: CommunityPersonaDetailSchema,
+		response: CommunityPersonaDetailSchema.extend(CommunityFreshnessSchema.shape),
 		error: HostApiErrorSchema
 	}),
 	/**
@@ -5050,6 +7686,46 @@ const HostApiContracts = {
 		response: LlmProviderSettingsSchema,
 		error: HostApiErrorSchema
 	}),
+	llmSubscriptionStatus: defineContract({
+		method: "GET",
+		path: "/api/llm/subscriptions/:provider",
+		params: llmProviderParam,
+		request: NoRequestBodySchema,
+		response: SubscriptionStatusSchema,
+		error: HostApiErrorSchema
+	}),
+	llmSubscriptionAction: defineContract({
+		invalidatesSnapshot: true,
+		method: "POST",
+		path: "/api/llm/subscriptions/:provider",
+		params: llmProviderParam,
+		request: z.discriminatedUnion("action", [
+			z.object({
+				action: z.literal("use-subscription"),
+				expectedRevision: z.number().int().nonnegative()
+			}).strict(),
+			z.object({ action: z.enum(["login", "cancel"]) }).strict(),
+			z.object({
+				action: z.literal("answer"),
+				promptId: NonEmptyStringSchema,
+				value: z.string().max(4096)
+			}).strict(),
+			z.object({
+				action: z.enum(["activate", "remove"]),
+				accountId: NonEmptyStringSchema
+			}).strict(),
+			z.object({
+				action: z.literal("rename"),
+				accountId: NonEmptyStringSchema,
+				label: z.string().min(1).max(80)
+			}).strict()
+		]),
+		response: z.object({
+			status: SubscriptionStatusSchema,
+			revocationConfirmed: z.boolean().optional()
+		}).strict(),
+		error: HostApiErrorSchema
+	}),
 	llmDiscoverModels: defineContract({
 		method: "POST",
 		path: "/api/llm/discover-models",
@@ -5183,7 +7859,19 @@ const HostApiContracts = {
 		request: z.object({
 			episodeId: EpisodeIdSchema,
 			requestId: DynamicIdSchema,
-			pluginRunId: DynamicIdSchema.optional()
+			pluginRunId: DynamicIdSchema.optional(),
+			/**
+			* Why the run did not go ahead: the user declined it, or the page could not start one of its halves. A failed
+			* half is settled as a failed attempt (its Host is retracted and the agent hears about it), not as a decline.
+			*/
+			reason: z.enum([
+				"rejected",
+				"host-half-failed",
+				"client-half-failed"
+			]).optional(),
+			startedHere: z.boolean().optional(),
+			message: z.string().max(4e3).optional(),
+			stack: z.string().max(16e3).optional()
 		}).strict(),
 		response: z.object({ accepted: z.boolean() }).strict(),
 		error: HostApiErrorSchema
@@ -5318,23 +8006,15 @@ const HostApiContracts = {
 		method: "POST",
 		path: "/api/extensions/save-from-dynamic",
 		params: EmptyParamsSchema,
-		request: z.union([z.object({
+		request: z.object({
 			taskId: AuthoringTaskIdSchema,
+			/** The candidate the user saw; saving refuses when a newer one appeared since. */
 			attemptId: AuthoringAttemptIdSchema,
 			displayName: z.string().trim().min(1).max(80),
 			slug: z.string().trim().regex(/^[a-z0-9][a-z0-9-]{1,62}[a-z0-9]$/u),
 			description: z.string().max(500).default(""),
 			targetExtensionId: ExtensionIdSchema.optional()
-		}).strict(), z.object({
-			agentId: AgentIdSchema,
-			episodeId: EpisodeIdSchema,
-			pluginId: DynamicIdSchema,
-			packageId: DynamicIdSchema,
-			displayName: z.string().trim().min(1).max(80),
-			slug: z.string().trim().regex(/^[a-z0-9][a-z0-9-]{1,62}[a-z0-9]$/u),
-			description: z.string().max(500).default(""),
-			targetExtensionId: ExtensionIdSchema.optional()
-		}).strict()]),
+		}).strict(),
 		response: z.object({
 			extensionId: ExtensionIdSchema,
 			revisionId: ExtensionRevisionIdSchema,
@@ -5411,6 +8091,7 @@ const HostApiContracts = {
 				extensionRevisionId: ExtensionRevisionIdSchema,
 				config: JsonValueSchema,
 				configuredSecrets: z.array(z.string()).optional(),
+				boundCredentials: BoundCredentialsSchema.optional(),
 				activatedAt: z.number().int().safe().nonnegative()
 			}).strict().optional(),
 			pending: ExtensionActivationTransitionSchema.optional()
@@ -5430,6 +8111,16 @@ const HostApiContracts = {
 		}).strict(),
 		error: HostApiErrorSchema
 	}),
+	putAgentOutboundOrder: defineContract({
+		invalidatesSnapshot: true,
+		method: "PUT",
+		path: "/api/agents/:agentId/outbound-order",
+		params: agentParam,
+		/** Every enabled extension that processes the agent's messages before sending, in the new order. */
+		request: z.object({ extensionIds: z.array(ExtensionIdSchema).max(64) }).strict(),
+		response: z.object({ extensionIds: z.array(ExtensionIdSchema) }).strict(),
+		error: HostApiErrorSchema
+	}),
 	updateExtensionActivationConfig: defineContract({
 		invalidatesSnapshot: true,
 		method: "PUT",
@@ -5438,11 +8129,14 @@ const HostApiContracts = {
 		request: z.object({
 			config: JsonValueSchema,
 			/** Write-only credential drafts keyed by secret field; an absent or empty draft keeps the stored one. */
-			secrets: z.record(z.string(), z.string().max(8192)).optional()
+			secrets: z.record(z.string(), z.string().max(8192)).optional(),
+			/** Secret fields to bind to named credentials instead of a typed value; a field takes one or the other. */
+			credentialBindings: CredentialBindingsRequestSchema.optional()
 		}).strict(),
 		response: z.object({
 			config: JsonValueSchema,
-			configuredSecrets: z.array(z.string()).optional()
+			configuredSecrets: z.array(z.string()).optional(),
+			boundCredentials: BoundCredentialsSchema.optional()
 		}).strict(),
 		error: HostApiErrorSchema
 	}),
@@ -5455,14 +8149,37 @@ const HostApiContracts = {
 		request: z.object({
 			config: JsonValueSchema,
 			/** Write-only credential drafts keyed by secret field; an absent or empty draft keeps the stored one. */
-			secrets: z.record(z.string(), z.string().max(8192)).optional()
+			secrets: z.record(z.string(), z.string().max(8192)).optional(),
+			/** Secret fields to bind to named credentials instead of a typed value; a field takes one or the other. */
+			credentialBindings: CredentialBindingsRequestSchema.optional()
 		}).strict(),
 		response: z.object({
 			config: JsonValueSchema,
-			configuredSecrets: z.array(z.string()).optional()
+			configuredSecrets: z.array(z.string()).optional(),
+			boundCredentials: BoundCredentialsSchema.optional()
 		}).strict(),
 		error: HostApiErrorSchema
 	}),
+	/** Configuration history of one extension, newest first: the host layer and every agent's configuration. */
+	getExtensionConfigVersions: defineContract({
+		method: "GET",
+		path: "/api/extensions/:extensionId/config-versions",
+		params: extensionParam,
+		request: NoRequestBodySchema,
+		response: z.object({ versions: z.array(ExtensionConfigVersionSchema) }).strict(),
+		error: HostApiErrorSchema
+	}),
+	/** Writes an earlier configuration again as a new version of the same layer (and agent). */
+	revertExtensionConfig: defineContract({
+		invalidatesSnapshot: true,
+		timeoutMs: 3e5,
+		method: "POST",
+		path: "/api/extensions/:extensionId/config-versions/:versionId/revert",
+		params: extensionConfigVersionParam,
+		request: z.object({ reason: z.string().trim().max(500).optional() }).strict(),
+		response: z.object({ version: ExtensionConfigVersionSchema }).strict(),
+		error: HostApiErrorSchema
+	}),
 	installHostExtension: defineContract({
 		invalidatesSnapshot: true,
 		timeoutMs: 3e5,
@@ -5474,7 +8191,9 @@ const HostApiContracts = {
 			/** Approval of the host layer (browser permissions and `permissions.host`). */
 			permissionApproval: PermissionApprovalSchema.optional(),
 			/** Approval of expanded agent-layer capabilities for the agents that move to this Revision. */
-			agentPermissionApproval: PermissionApprovalSchema.optional()
+			agentPermissionApproval: PermissionApprovalSchema.optional(),
+			/** Data copy to put back first, when the target Revision only reads an older data version. */
+			restoreDataSnapshotId: z.string().min(1).max(80).optional()
 		}).strict(),
 		response: z.object({ installation: z.object({
 			extensionId: ExtensionIdSchema,
@@ -5592,6 +8311,19 @@ upTo: z.object({
 		}).strict(),
 		error: HostApiErrorSchema
 	}),
+	setChannelPaused: defineContract({
+		method: "POST",
+		path: "/api/channels/:channelId/pause",
+		params: channelParam,
+		request: z.object({ paused: z.boolean() }).strict(),
+		response: z.object({
+			paused: z.boolean(),
+			changed: z.boolean(),
+			stopped: z.boolean()
+		}).strict(),
+		error: HostApiErrorSchema,
+		invalidatesSnapshot: true
+	}),
 	resolveOutbound: defineContract({
 		method: "POST",
 		path: "/api/outbound/:outboundId/resolve",
@@ -5674,6 +8406,202 @@ upTo: z.object({
 		request: NoRequestBodySchema,
 		response: z.object({ deleted: z.literal(true) }).strict(),
 		error: HostApiErrorSchema
+	}),
+	getExtensionLineage: defineContract({
+		method: "GET",
+		path: "/api/extensions/:extensionId/lineage",
+		params: extensionParam,
+		request: NoRequestBodySchema,
+		response: ExtensionLineageSchema,
+		error: HostApiErrorSchema
+	}),
+	branchExtension: defineContract({
+		invalidatesSnapshot: true,
+		timeoutMs: 3e5,
+		method: "POST",
+		path: "/api/extensions/:extensionId/branch",
+		params: extensionParam,
+		request: z.object({
+			revisionId: ExtensionRevisionIdSchema,
+			name: z.string().trim().min(1).max(80),
+			slug: z.string().trim().regex(/^[a-z0-9][a-z0-9-]{1,62}[a-z0-9]$/u).optional(),
+			copyData: z.boolean()
+		}).strict(),
+		response: z.object({
+			extensionId: ExtensionIdSchema,
+			revisionId: ExtensionRevisionIdSchema
+		}).strict(),
+		error: HostApiErrorSchema
+	}),
+	rollbackExtension: defineContract({
+		invalidatesSnapshot: true,
+		timeoutMs: 3e5,
+		method: "POST",
+		path: "/api/extensions/:extensionId/revert",
+		params: extensionParam,
+		request: NoRequestBodySchema,
+		response: z.object({ message: z.string() }).strict(),
+		error: HostApiErrorSchema
+	}),
+	getExtensionData: defineContract({
+		method: "GET",
+		path: "/api/extensions/:extensionId/data",
+		params: extensionParam,
+		request: NoRequestBodySchema,
+		response: ExtensionDataStateSchema,
+		error: HostApiErrorSchema
+	}),
+	previewExtensionDataMigration: defineContract({
+		timeoutMs: 6e4,
+		method: "POST",
+		path: "/api/extensions/:extensionId/data/preview",
+		params: extensionParam,
+		request: ExtensionDataMigrationInputSchema,
+		response: ExtensionDataPreviewSchema,
+		error: HostApiErrorSchema
+	}),
+	migrateExtensionData: defineContract({
+		invalidatesSnapshot: true,
+		timeoutMs: 3e5,
+		method: "POST",
+		path: "/api/extensions/:extensionId/data/migrate",
+		params: extensionParam,
+		request: ExtensionDataMigrationInputSchema,
+		response: z.object({
+			snapshotId: z.string(),
+			preview: ExtensionDataPreviewSchema
+		}).strict(),
+		error: HostApiErrorSchema
+	}),
+	exportExtensionData: defineContract({
+		method: "GET",
+		timeoutMs: 3e5,
+		path: "/api/extensions/:extensionId/data/export",
+		params: extensionParam,
+		request: NoRequestBodySchema,
+		responseFormat: "bytes",
+		response: z.instanceof(Uint8Array),
+		error: HostApiErrorSchema
+	}),
+	/** The same package with the host and agent configuration; secrets are left out. */
+	exportExtensionDataWithConfig: defineContract({
+		method: "GET",
+		timeoutMs: 3e5,
+		path: "/api/extensions/:extensionId/data/export-config",
+		params: extensionParam,
+		request: NoRequestBodySchema,
+		responseFormat: "bytes",
+		response: z.instanceof(Uint8Array),
+		error: HostApiErrorSchema
+	}),
+	createExtensionDataSnapshot: defineContract({
+		method: "POST",
+		path: "/api/extensions/:extensionId/data/snapshots",
+		params: extensionParam,
+		request: z.object({ label: z.string().trim().min(1).max(80) }).strict(),
+		response: z.object({ snapshotId: z.string() }).strict(),
+		error: HostApiErrorSchema
+	}),
+	inspectExtensionDataPackage: defineContract({
+		timeoutMs: 3e5,
+		method: "POST",
+		path: "/api/extensions/data/inspect",
+		params: EmptyParamsSchema,
+		request: BinaryUploadRequestSchema,
+		encodeRequest: encodeBinaryUpload,
+		response: ExtensionDataPackageInspectionSchema,
+		error: HostApiErrorSchema
+	}),
+	listExtensionRequests: defineContract({
+		method: "GET",
+		path: "/api/extension-requests",
+		params: EmptyParamsSchema,
+		request: NoRequestBodySchema,
+		response: z.object({ requests: z.array(ExtensionRequestSchema) }).strict(),
+		error: HostApiErrorSchema
+	}),
+	approveExtensionRequest: defineContract({
+		invalidatesSnapshot: true,
+		timeoutMs: 3e5,
+		method: "POST",
+		path: "/api/extension-requests/:number/approve",
+		params: z.object({ number: z.coerce.number().int().positive() }).strict(),
+		request: NoRequestBodySchema,
+		response: z.object({ message: z.string() }).strict(),
+		error: HostApiErrorSchema
+	}),
+	rejectExtensionRequest: defineContract({
+		method: "POST",
+		path: "/api/extension-requests/:number/reject",
+		params: z.object({ number: z.coerce.number().int().positive() }).strict(),
+		request: z.object({ reason: z.string().trim().max(500).optional() }).strict(),
+		response: z.object({ ok: z.literal(true) }).strict(),
+		error: HostApiErrorSchema
+	}),
+	listAdministrators: defineContract({
+		method: "GET",
+		path: "/api/administrators",
+		params: EmptyParamsSchema,
+		request: NoRequestBodySchema,
+		response: z.object({ administrators: z.array(AdministratorSchema) }).strict(),
+		error: HostApiErrorSchema
+	}),
+	addAdministrator: defineContract({
+		method: "POST",
+		path: "/api/administrators",
+		params: EmptyParamsSchema,
+		request: z.object({ identityId: PlatformIdentityIdSchema }).strict(),
+		response: AdministratorSchema,
+		error: HostApiErrorSchema
+	}),
+	removeAdministrator: defineContract({
+		method: "POST",
+		path: "/api/administrators/remove",
+		params: EmptyParamsSchema,
+		request: z.object({
+			connectionId: ConnectionIdSchema,
+			platformUserId: z.string().min(1)
+		}).strict(),
+		response: z.object({ ok: z.literal(true) }).strict(),
+		error: HostApiErrorSchema
+	}),
+	createAdministratorClaimCode: defineContract({
+		method: "POST",
+		path: "/api/administrators/claim-code",
+		params: EmptyParamsSchema,
+		request: NoRequestBodySchema,
+		response: z.object({
+			code: z.string(),
+			expiresAt: z.number().int().nonnegative()
+		}).strict(),
+		error: HostApiErrorSchema
+	}),
+	dismissCommunityRelease: defineContract({
+		method: "POST",
+		path: "/api/community/sync/:extensionId/dismiss",
+		params: extensionParam,
+		request: z.object({ releaseId: CommunityReleaseIdSchema.nullable() }).strict(),
+		response: z.object({ ok: z.literal(true) }).strict(),
+		error: HostApiErrorSchema
+	}),
+	updateFromCommunity: defineContract({
+		invalidatesSnapshot: true,
+		timeoutMs: 3e5,
+		method: "POST",
+		path: "/api/community/sync/:extensionId/update",
+		params: extensionParam,
+		request: NoRequestBodySchema,
+		response: z.object({ message: z.string() }).strict(),
+		error: HostApiErrorSchema
+	}),
+	archiveAuthoringTask: defineContract({
+		invalidatesSnapshot: true,
+		method: "POST",
+		path: "/api/authoring/tasks/:taskId/archive",
+		params: z.object({ taskId: AuthoringTaskIdSchema }).strict(),
+		request: NoRequestBodySchema,
+		response: z.object({ ok: z.literal(true) }).strict(),
+		error: HostApiErrorSchema
 	})
 };
 const pathParameterPattern = /:([A-Za-z][A-Za-z0-9]*)/gu;
@@ -5683,9 +8611,9 @@ const buildValidatedHostApiPath = (contract, input) => {
 	const consumed = /* @__PURE__ */ new Set();
 	const pathname = contract.path.replace(pathParameterPattern, (_placeholder, key) => {
 		const value = params[key];
-		if (typeof value !== "string") throw new TypeError(`Host API path parameter ${key} must be a string.`);
+		if (typeof value !== "string" && typeof value !== "number") throw new TypeError(`Host API path parameter ${key} must be a string or number.`);
 		consumed.add(key);
-		return encodeURIComponent(value);
+		return encodeURIComponent(String(value));
 	});
 	const query = new URLSearchParams();
 	for (const [key, value] of Object.entries(params)) {
@@ -5703,6 +8631,6 @@ function buildHostApiPath(name, input) {
 	return buildValidatedHostApiPath(HostApiContracts[name], input);
 }
 //#endregion
-export { ACTIVITY_MAX_BUCKETS, ACTIVITY_MAX_WINDOW_MS, ACTIVITY_MIN_BUCKET_MS, ActivityQuerySchema, AdapterActivityKeySchema, AdmissionIdSchema, AgentAppearanceSchema, AgentIdSchema, AgentRevisionChangedFieldSchema, AgentRevisionHistorySchema, AgentRevisionIdSchema, AssetIdSchema, AttentionItemSchema, AttentionListSchema, AuthoringAttemptIdSchema, AuthoringTaskIdSchema, CHANNEL_UNREAD_COUNT_CAP, COMMUNITY_EXTENSION_SORTS, COMMUNITY_LISTING_LIMITS, COMMUNITY_OFFICIAL_HANDLE, COMMUNITY_PERSONA_AVATAR_MAX_BYTES, COMMUNITY_PERSONA_AVATAR_TYPES, COMMUNITY_PERSONA_MAX_LENGTH, COMMUNITY_RATING_BADGES, COMMUNITY_RATING_BADGE_LIMIT, COMMUNITY_RATING_DIMENSIONS, COMMUNITY_RATING_DIMENSION_LABELS, COMMUNITY_REVIEWER_NAME, COMMUNITY_REVIEW_DIMENSION_LABELS, COMMUNITY_REVIEW_STATUSES, CONFIG_SCHEMA_MAX_BYTES, ChannelActivitySeriesSchema, ChannelActivitySummarySchema, ChannelContextPolicySchema, ChannelContextPolicyViewSchema, ChannelEventIdSchema, ChannelFactSseDataSchema, ChannelFactSseItemSchema, ChannelIdSchema, ChannelMemberIdSchema, ChannelMemberNotesViewSchema, ChannelMemoryActivitySchema, ChannelPendingContextSchema, ChannelPromptViewSchema, ChannelRuntimeCacheSampleSchema, ChannelRuntimeCacheSchema, ChannelRuntimeContextSchema, ChannelRuntimeInputSchema, ChannelRuntimeOccupancySchema, ChannelRuntimePerformanceSampleSchema, ChannelRuntimePerformanceSchema, ChannelRuntimePhaseSchema, ChannelRuntimeProjectionSchema, ChannelRuntimeSseDataSchema, ChannelRuntimeStepSchema, ChannelRuntimeToolSchema, ChannelRuntimeTurnSchema, ChannelRuntimeUsageSchema, ClientNotificationFeedResponseSchema, ClientNotificationSchema, CodeRunAvailabilitySchema, CommunityAccountSchema, CommunityEndpointSchema, CommunityEnvironmentSchema, CommunityExtensionDetailSchema, CommunityExtensionSortSchema, CommunityExtensionSummarySchema, CommunityInstalledItemSchema, CommunityInstalledSchema, CommunityListingInputSchema, CommunityMyExtensionSchema, CommunityMyPersonaSchema, CommunityMyPersonasSchema, CommunityPermissionItemSchema, CommunityPersonaDetailSchema, CommunityPersonaIdSchema, CommunityPersonaReviewStatusSchema, CommunityPersonaRevisionIdSchema, CommunityPersonaSummarySchema, CommunityRatingSchema, CommunityReleaseIdSchema, CommunityReleaseSchema, CommunityReviewReportSchema, CommunityReviewStatusSchema, CommunitySourceSchema, CommunityStatusSchema, ConfigSchemaDocumentSchema, ConfigSchemaMetaSchema, ConfigSchemaNodeSchema, ConnectionEventIdSchema, ConnectionIdSchema, ConnectionPanelRoleSchema, ConnectionTestResultSchema, DEFAULT_CHANNEL_CONTEXT_POLICY, DEFAULT_MESSAGE_PACING, DshCredentialRefSchema, DshCredentialViewSchema, DshCredentialsChangedSseDataSchema, DshNxtHostUiSchema, DshPluginCatalogEntrySchema, DshPluginEntryIdSchema, DshPluginOperationSseDataSchema, DshPluginPackageIdSchema, DshSettingsChangedSseDataSchema, DshSettingsMutationRequestSchema, DshSettingsNamespaceSchema, DshSettingsPathOperationSchema, DshSettingsPathSchema, DynamicChangedSseDataSchema, DynamicClientApprovalPolicySchema, EMPTY_CONFIG_SCHEMA, EMPTY_EXTENSION_PERMISSIONS, EMPTY_EXTENSION_UI_CONTRIBUTIONS, EXTENSION_ASSET_LIBRARY_DEFAULT_QUOTA_BYTES, EXTENSION_ASSET_LIBRARY_MAX_QUOTA_BYTES, EXTENSION_CONTEXT_DYNAMIC_MAX_CHARS, EXTENSION_CONTEXT_STATIC_MAX_CHARS, EXTENSION_DATA_HOOK_PERMISSIONS, EXTENSION_INBOUND_HOOK_MAX_TIMEOUT_MS, EXTENSION_INDEX_MAX_FILTERS, EXTENSION_INDEX_MAX_TEXT_FIELDS, EXTENSION_JOB_MAX_RUNTIME, EXTENSION_LLM_MAX_CALLS_PER_TURN, EXTENSION_LLM_MAX_OUTPUT_TOKENS, EXTENSION_MODEL_MAX_CALLS_PER_MINUTE, EXTENSION_PROVIDES, EXTENSION_SDK_BASE_LEVEL, EXTENSION_SDK_LEVEL, EXTENSION_SDK_RELEASES, EXTENSION_STORAGE_DEFAULT_QUOTA_BYTES, EXTENSION_STORAGE_MAX_QUOTA_BYTES, EXTENSION_STORAGE_SCOPES, EpisodeHandoffIdSchema, EpisodeIdSchema, ExtensionActivationTransitionSchema, ExtensionAssetLibraryCapabilitySchema, ExtensionAssetsCapabilitySchema, ExtensionCapabilitiesSchema, ExtensionConfigDeclarationSchema, ExtensionContextContributionSchema, ExtensionDeclaredJobSchema, ExtensionIdSchema, ExtensionImportInspectionSchema, ExtensionInboundHookCapabilitySchema, ExtensionIndexCapabilitySchema, ExtensionIndexCollectionSchema, ExtensionJobsCapabilitySchema, ExtensionLayeredConfigSchema, ExtensionLlmCapabilitySchema, ExtensionMcpCapabilitySchema, ExtensionMcpServerNameSchema, ExtensionMcpServerSchema, ExtensionMcpValueSchema, ExtensionModelsCapabilitySchema, ExtensionNetworkCapabilitySchema, ExtensionNetworkDomainSchema, ExtensionPanelAnchorSchema, ExtensionPanelDeclarationSchema, ExtensionPermissionRequirementSchema, ExtensionPermissionsSchema, ExtensionPlatformCapabilitySchema, ExtensionProvideSchema, ExtensionRequiresSchema, ExtensionRevisionIdSchema, ExtensionStorageCapabilitySchema, ExtensionStorageScopeSchema, ExtensionUiContributionsSchema, HOST_PAGE_DEFAULT_RAIL_ORDER, HOST_UI_KIT_COMPONENT_NAMES, HostApiContracts, HostApiErrorSchema, HostConnectionEventSchema, HostIconNameSchema, HostLayerCapabilitiesSchema, HostPageContributionSchema, HostPageIconSchema, HostSnapshotMessageSchema, HostSnapshotSchema, HostSseEventSchema, HostSseStatusDataSchema, HostSyncCursorSchema, HostUiKitComponentNameSchema, HostUiNavigationGroupSchema, HostUiNavigationItemSchema, HostUiNavigationModelSchema, HostUiNetworkOriginSchema, HostUiOwnerSchema, HostUiPageEntrySchema, HostUiPageGeometryEvidenceSchema, HostUiPageInstanceIdSchema, HostUiPagePreferencesSchema, HostUiPermissionDeclarationSchema, HostUiPermissionSchema, HostUpgradeSummarySchema, INSECURE_HTTP_MANAGEMENT_PAIR_PROOF_PREFIX, ImageUnderstandingPolicyApiSchema, InsecureHttpManagementChallengeResponseSchema, InstanceDescriptorSchema, InstanceDescriptorWireSchema, JsonValueSchema, LlmDiscoveredModelSchema, LlmModelInputModalitiesSchema, LlmProviderCredentialSchema, LlmProviderModelSchema, LlmProviderSettingsSchema, LlmProviderTestResultSchema, LlmProviderViewSchema, LogicalMessageIdSchema, MANAGEMENT_PAIR_PROOF_PREFIX, ManagementChallengeResponseSchema, ManagementDeviceEnrollmentRequestSchema, ManagementDeviceEnrollmentResponseSchema, ManagementDeviceIdSchema, ManagementDeviceViewSchema, ManagementSessionRequestSchema, ManagementSessionResponseSchema, McpServerFormSchema, MessagePacingSchema, MessagePacingSettingsSchema, MessagePartSchema, MessagePartsSchema, MessageRendererContributionSchema, NonEmptyMessagePartsSchema, NotificationEventKeySchema, NotificationSettingsViewSchema, OutboundIntentIdSchema, PANEL_ANCHOR_LAYER, PROMPT_DOCUMENT_MAX_PLAIN_TEXT_LENGTH, PROMPT_DOCUMENT_MAX_REFERENCES, PanelContributionSchema, PanelDensitySchema, PhysicalDeliveryIdSchema, PlatformIdentityIdSchema, PlatformUserListResponseSchema, ProductUpdateStatusSchema, PromptDocumentV1Schema, PromptSegmentSchema, RICH_EXTENSION_MAX_BYTES, RetrievalModeSchema, RetrievalStatusSchema, RichExtensionSchema, RichKindSchema, RichTargetUrlSchema, RuntimeCompatibilityDiagnosticSchema, ScheduledTaskIdSchema, ScheduledTaskSchema, ServerInstanceIdSchema, TestBarkNotificationRequestSchema, ToolViewContributionSchema, ToolViewDensitySchema, UpdateNotificationSettingsRequestSchema, WorkTreeOrderSchema, activityDurationMs, agentPermissionDeclaration, buildHostApiContractPath, buildHostApiPath, communityPersonaReviewLabel, communityPublisherLabel, communityReviewLabel, configDescription, configFieldKind, configFields, configSchema, configSecretKeys, extensionCapabilitiesExpand, extensionSdkVersion, hostLayerAsCapabilities, hostPageRailOrder, hostPermissionDeclaration, insecureHttpManagementPairProofMessage, managementPairProofMessage, mcpSecretFields, messagePartAssetId, messagePartAssetIds, messagePartsSearchText, normalizePromptDocument, parseConfigValue, parseJsonValue, parseMessageParts, promptDocumentFromText, promptDocumentPlainText, requiredExtensionSdkLevel, richPartContextText, summarizeExtensionCapabilities, validateConfigValue };
+export { ACTIVITY_MAX_BUCKETS, ACTIVITY_MAX_WINDOW_MS, ACTIVITY_MIN_BUCKET_MS, ActivityQuerySchema, AdapterActivityKeySchema, AddLinkedAccountRequestSchema, AdministratorSchema, AdmissionIdSchema, AgentAliasesSchema, AgentAppearanceSchema, AgentCompactionModelChoiceSchema, AgentCompactionPolicySchema, AgentFallbackModelsSchema, AgentIdSchema, AgentRevisionChangedFieldSchema, AgentRevisionHistorySchema, AgentRevisionIdSchema, AgentSubConversationModelsSchema, AssetIdSchema, AttentionItemSchema, AttentionListSchema, AuthoringAttemptIdSchema, AuthoringTaskIdSchema, BoundCredentialsSchema, CHANNEL_COMPOSER_MAX_ATTACHMENTS, CHANNEL_COMPOSER_MAX_BYTES, CHANNEL_UNREAD_COUNT_CAP, COMMAND_DEFAULT_TIMEOUT_SECONDS, COMMAND_MAX_PROGRESS_REPLIES, COMMAND_MAX_TIMEOUT_SECONDS, COMMUNITY_EXTENSION_SORTS, COMMUNITY_FEEDBACK_STATUSES, COMMUNITY_FEEDBACK_STATUS_LABELS, COMMUNITY_LISTING_LIMITS, COMMUNITY_OFFICIAL_HANDLE, COMMUNITY_PERSONA_AVATAR_MAX_BYTES, COMMUNITY_PERSONA_AVATAR_TYPES, COMMUNITY_PERSONA_MAX_LENGTH, COMMUNITY_RATING_BADGES, COMMUNITY_RATING_BADGE_LIMIT, COMMUNITY_RATING_DIMENSIONS, COMMUNITY_RATING_DIMENSION_LABELS, COMMUNITY_REVIEWER_NAME, COMMUNITY_REVIEW_DIMENSION_LABELS, COMMUNITY_REVIEW_STATUSES, CONFIG_SCHEMA_MAX_BYTES, CREDENTIAL_DESCRIPTION_MAX_CHARS, CREDENTIAL_NAME_MAX_CHARS, CREDENTIAL_REDACTABLE_MIN_CHARS, CREDENTIAL_VALUE_MAX_CHARS, ChannelActivitySeriesSchema, ChannelActivitySummarySchema, ChannelContextPolicySchema, ChannelContextPolicyViewSchema, ChannelEventIdSchema, ChannelFactSseDataSchema, ChannelFactSseItemSchema, ChannelIdSchema, ChannelListViewSchema, ChannelMemberIdSchema, ChannelMemberNotesViewSchema, ChannelMemoryActivitySchema, ChannelPendingContextSchema, ChannelPromptViewSchema, ChannelRuntimeCacheSampleSchema, ChannelRuntimeCacheSchema, ChannelRuntimeContextSchema, ChannelRuntimeInputSchema, ChannelRuntimeOccupancySchema, ChannelRuntimePerformanceSampleSchema, ChannelRuntimePerformanceSchema, ChannelRuntimePhaseSchema, ChannelRuntimeProjectionSchema, ChannelRuntimeSseDataSchema, ChannelRuntimeStepSchema, ChannelRuntimeToolSchema, ChannelRuntimeTurnSchema, ChannelRuntimeUsageSchema, ClientNotificationFeedResponseSchema, ClientNotificationSchema, CodeRunAvailabilitySchema, CommandAccountUsageSchema, CommandCatalogEntrySchema, CommandDefinitionSchema, CommandExecutionIdentitySchema, CommandExecutionRecordSchema, CommandParameterSchema, CommandPermissionSchema, CommandPolicySchema, CommandReplySchema, CommandResultSchema, CommunityAccountSchema, CommunityEndpointSchema, CommunityEnvironmentSchema, CommunityExtensionDetailSchema, CommunityExtensionSortSchema, CommunityExtensionSummarySchema, CommunityFeedbackAffectedSchema, CommunityFeedbackChangesSchema, CommunityFeedbackConfirmSchema, CommunityFeedbackCreateSchema, CommunityFeedbackDiagnosticEntrySchema, CommunityFeedbackDiagnosticsSchema, CommunityFeedbackDigestSchema, CommunityFeedbackDraftIdSchema, CommunityFeedbackDraftInputSchema, CommunityFeedbackDraftSchema, CommunityFeedbackDraftStateSchema, CommunityFeedbackDraftUpdateSchema, CommunityFeedbackEventDataSchema, CommunityFeedbackEventSchema, CommunityFeedbackExcerptSchema, CommunityFeedbackExtensionDiagnosticSchema, CommunityFeedbackIdSchema, CommunityFeedbackItemSchema, CommunityFeedbackKindSchema, CommunityFeedbackLabelsSchema, CommunityFeedbackLastPayloadSchema, CommunityFeedbackLinkSchema, CommunityFeedbackListSchema, CommunityFeedbackLocalListSchema, CommunityFeedbackMessageInputSchema, CommunityFeedbackMessageSchema, CommunityFeedbackPayloadSchema, CommunityFeedbackRefSchema, CommunityFeedbackReopenSchema, CommunityFeedbackSchema, CommunityFeedbackSettingsSchema, CommunityFeedbackSettingsUpdateSchema, CommunityFeedbackSnapshotSchema, CommunityFeedbackStatusSchema, CommunityFeedbackSummarySchema, CommunityFeedbackSupplementSchema, CommunityFeedbackTargetSchema, CommunityFeedbackTransitionSchema, CommunityFeedbackVisibilitySchema, CommunityFeedbackWithdrawSchema, CommunityFreshnessSchema, CommunityInstalledItemSchema, CommunityInstalledSchema, CommunityListingInputSchema, CommunityMyExtensionSchema, CommunityMyPersonaSchema, CommunityMyPersonasSchema, CommunityPermissionItemSchema, CommunityPersonaDetailSchema, CommunityPersonaIdSchema, CommunityPersonaReviewStatusSchema, CommunityPersonaRevisionIdSchema, CommunityPersonaSummarySchema, CommunityRatingSchema, CommunityReleaseIdSchema, CommunityReleaseSchema, CommunityReviewReportSchema, CommunityReviewStatusSchema, CommunitySourceSchema, CommunityStatusSchema, CommunitySyncItemSchema, CommunitySyncSchema, CompactionSettingsSchema, ConfigSchemaDocumentSchema, ConfigSchemaMetaSchema, ConfigSchemaNodeSchema, ConnectionEventIdSchema, ConnectionIdSchema, ConnectionPanelRoleSchema, ConnectionTestResultSchema, CreateCredentialRequestSchema, CredentialAgentScopeSchema, CredentialBindingsRequestSchema, CredentialConsumerKindSchema, CredentialDescriptionSchema, CredentialDomainsSchema, CredentialEnvNameSchema, CredentialIdSchema, CredentialNameSchema, CredentialRequestViewSchema, CredentialUsageSchema, CredentialUseSchema, CredentialUsersSchema, CredentialUsesViewSchema, CredentialValueSchema, CredentialViewSchema, CredentialsViewSchema, DEFAULT_CHANNEL_CONTEXT_POLICY, DEFAULT_COMPACTION_SETTINGS, DEFAULT_MESSAGE_PACING, DEFAULT_MODEL_FALLBACK_SETTINGS, DEFAULT_SUB_CONVERSATION_RETENTION, DshCredentialRefSchema, DshCredentialViewSchema, DshCredentialsChangedSseDataSchema, DshNxtHostUiSchema, DshPluginCatalogEntrySchema, DshPluginEntryIdSchema, DshPluginOperationSseDataSchema, DshPluginPackageIdSchema, DshSettingsChangedSseDataSchema, DshSettingsMutationRequestSchema, DshSettingsNamespaceSchema, DshSettingsPathOperationSchema, DshSettingsPathSchema, DynamicChangedSseDataSchema, DynamicClientApprovalPolicySchema, EMPTY_CONFIG_SCHEMA, EMPTY_EXTENSION_PERMISSIONS, EMPTY_EXTENSION_UI_CONTRIBUTIONS, EXTENSION_ASSET_LIBRARY_DEFAULT_QUOTA_BYTES, EXTENSION_ASSET_LIBRARY_MAX_QUOTA_BYTES, EXTENSION_CONTEXT_DYNAMIC_MAX_CHARS, EXTENSION_CONTEXT_STATIC_MAX_CHARS, EXTENSION_DATA_HOOK_PERMISSIONS, EXTENSION_GOVERNANCE_SDK_LEVEL, EXTENSION_INBOUND_HOOK_MAX_TIMEOUT_MS, EXTENSION_INDEX_MAX_FILTERS, EXTENSION_INDEX_MAX_TEXT_FIELDS, EXTENSION_JOB_MAX_RUNTIME, EXTENSION_LLM_MAX_CALLS_PER_TURN, EXTENSION_LLM_MAX_OUTPUT_TOKENS, EXTENSION_MODEL_MAX_CALLS_PER_MINUTE, EXTENSION_OUTBOUND_MAX_TIMEOUT_MS, EXTENSION_OUTBOUND_SDK_LEVEL, EXTENSION_PROVIDES, EXTENSION_SDK_BASE_LEVEL, EXTENSION_SDK_LEVEL, EXTENSION_SDK_RELEASES, EXTENSION_STORAGE_DEFAULT_QUOTA_BYTES, EXTENSION_STORAGE_MAX_QUOTA_BYTES, EXTENSION_STORAGE_SCOPES, EpisodeHandoffIdSchema, EpisodeIdSchema, ExtensionActivationTransitionSchema, ExtensionAssetLibraryCapabilitySchema, ExtensionAssetsCapabilitySchema, ExtensionCapabilitiesSchema, ExtensionConfigDeclarationSchema, ExtensionConfigVersionSchema, ExtensionConfigVersionSourceSchema, ExtensionContextContributionSchema, ExtensionDataMigrationInputSchema, ExtensionDataPackageInspectionSchema, ExtensionDataPreviewSchema, ExtensionDataSourceSchema, ExtensionDataStateSchema, ExtensionDeclaredJobSchema, ExtensionIdSchema, ExtensionImportInspectionSchema, ExtensionInboundHookCapabilitySchema, ExtensionIndexCapabilitySchema, ExtensionIndexCollectionSchema, ExtensionJobsCapabilitySchema, ExtensionLayeredConfigSchema, ExtensionLineageNodeSchema, ExtensionLineageSchema, ExtensionLlmCapabilitySchema, ExtensionMcpCapabilitySchema, ExtensionMcpServerNameSchema, ExtensionMcpServerSchema, ExtensionMcpValueSchema, ExtensionModelsCapabilitySchema, ExtensionNetworkCapabilitySchema, ExtensionNetworkDomainSchema, ExtensionOutboundCapabilitySchema, ExtensionPanelAnchorSchema, ExtensionPanelDeclarationSchema, ExtensionPermissionRequirementSchema, ExtensionPermissionsSchema, ExtensionPlatformCapabilitySchema, ExtensionProvideSchema, ExtensionRequestSchema, ExtensionRequiresSchema, ExtensionRevisionIdSchema, ExtensionStorageCapabilitySchema, ExtensionStorageScopeSchema, ExtensionUiContributionsSchema, FALLBACK_MODEL_LIMIT, GithubCliAvailabilitySchema, HOST_PAGE_DEFAULT_RAIL_ORDER, HOST_UI_KIT_COMPONENT_NAMES, HostApiContracts, HostApiErrorSchema, HostConnectionEventSchema, HostIconNameSchema, HostLayerCapabilitiesSchema, HostPageContributionSchema, HostPageIconSchema, HostSnapshotMessageSchema, HostSnapshotSchema, HostSseEventSchema, HostSseStatusDataSchema, HostSyncCursorSchema, HostUiKitComponentNameSchema, HostUiNavigationGroupSchema, HostUiNavigationItemSchema, HostUiNavigationModelSchema, HostUiNetworkOriginSchema, HostUiOwnerSchema, HostUiPageEntrySchema, HostUiPageGeometryEvidenceSchema, HostUiPageInstanceIdSchema, HostUiPagePreferencesSchema, HostUiPermissionDeclarationSchema, HostUiPermissionSchema, HostUpgradeSummarySchema, INSECURE_HTTP_MANAGEMENT_PAIR_PROOF_PREFIX, ImageUnderstandingPolicyApiSchema, InsecureHttpManagementChallengeResponseSchema, InstanceDescriptorSchema, InstanceDescriptorWireSchema, JsonValueSchema, LinkedAccountIdSchema, LinkedAccountMethodSchema, LinkedAccountPlatformIdSchema, LinkedAccountPlatformToolSchema, LinkedAccountTokenSourceSchema, LinkedAccountUseSchema, LinkedAccountUsesViewSchema, LinkedAccountViewSchema, LinkedAccountsViewSchema, LlmDiscoveredModelSchema, LlmModelInputModalitiesSchema, LlmModelReasoningEffortsSchema, LlmProviderCredentialSchema, LlmProviderModelSchema, LlmProviderSettingsSchema, LlmProviderTestResultSchema, LlmProviderViewSchema, LocalGithubLoginSchema, LogicalMessageIdSchema, MANAGEMENT_PAIR_PROOF_PREFIX, ManagementChallengeResponseSchema, ManagementDeviceEnrollmentRequestSchema, ManagementDeviceEnrollmentResponseSchema, ManagementDeviceIdSchema, ManagementDeviceViewSchema, ManagementSessionRequestSchema, ManagementSessionResponseSchema, McpServerFormSchema, MessageDeliverySummarySchema, MessagePacingSchema, MessagePacingSettingsSchema, MessagePartSchema, MessagePartsSchema, MessageRendererContributionSchema, ModelFallbackReasonSchema, ModelFallbackSettingsSchema, ModelProviderAccessSchema, NO_SUB_CONVERSATION_MODELS, NonEmptyMessagePartsSchema, NotificationEventKeySchema, NotificationSettingsViewSchema, OutboundIntentIdSchema, PANEL_ANCHOR_LAYER, PROMPT_DOCUMENT_MAX_PLAIN_TEXT_LENGTH, PROMPT_DOCUMENT_MAX_REFERENCES, PanelContributionSchema, PanelDensitySchema, PhysicalDeliveryIdSchema, PlatformIdentityIdSchema, PlatformUserListResponseSchema, ProductUpdateStatusSchema, PromptDocumentV1Schema, PromptSegmentSchema, RESPONSE_TIMING_DEFAULTS, RESPONSE_TIMING_LIMITS, RESPONSE_WAIT_MIN_QUIET_SECONDS, RICH_EXTENSION_MAX_BYTES, RemoveCredentialRequestSchema, RemoveCredentialResultSchema, RemoveLinkedAccountRequestSchema, RemoveLinkedAccountResultSchema, ReplaceCredentialValueRequestSchema, ReplaceLinkedAccountTokenRequestSchema, ResponseTimingSettingsSchema, RetrievalModeSchema, RetrievalStatusSchema, RichExtensionSchema, RichKindSchema, RichTargetUrlSchema, RuntimeCompatibilityDiagnosticSchema, SUB_CONVERSATION_MAIN_MODEL, SUB_CONVERSATION_MODEL_LIMITS, ScheduledTaskIdSchema, ScheduledTaskSchema, ServerInstanceIdSchema, SetModelProviderAccessRequestSchema, SubConversationIdSchema, SubConversationRetentionSchema, SubConversationSchema, SubConversationSettingsSchema, SubscriptionStatusSchema, TestBarkNotificationRequestSchema, ToolViewContributionSchema, ToolViewDensitySchema, UNBOUND_CHANNEL_GROUP_ID, UpdateCredentialRequestSchema, UpdateNotificationSettingsRequestSchema, UpgradeBackupModeSchema, UpgradeBackupSettingsSchema, VerificationBrowserAvailabilitySchema, WorkTreeOrderSchema, activityDurationMs, adminOnlyConfigKeys, agentPermissionDeclaration, buildHostApiContractPath, buildHostApiPath, commandNameOf, commandUsage, communityPersonaReviewLabel, communityPublisherLabel, communityReviewLabel, configDescription, configFieldKind, configFieldLevel, configFields, configSchema, configSecretKeys, credentialRequestRoute, extensionCapabilitiesExpand, extensionSdkVersion, formatLogMessage, hostLayerAsCapabilities, hostLogDebugLeaseSchema, hostLogDebugRequestSchema, hostLogEntrySchema, hostLogLevelSchema, hostLogPageSchema, hostLogQuerySchema, hostLogScopeSchema, hostLogSettingsSchema, hostLogSettingsUpdateSchema, hostLogSourceKindSchema, hostLogSourceSchema, hostLogStatusSchema, hostLogStreamEventSchema, hostPageRailOrder, hostPermissionDeclaration, insecureHttpManagementPairProofMessage, managementPairProofMessage, mcpSecretFields, messagePartAssetId, messagePartAssetIds, messagePartImageAssetIds, messagePartsSearchText, normalizePromptDocument, outboundProcessesBeforeSend, parseCommandArguments, parseConfigValue, parseJsonValue, parseMessageParts, promptDocumentFromText, promptDocumentPlainText, recognizeCommand, requiredExtensionSdkLevel, resolveResponseTiming, richPartContextText, summarizeExtensionCapabilities, tokenizeCommand, undeliveredCommandReplies, validateConfigValue };
 
 //# sourceMappingURL=index.mjs.map