@nekro-nxt/contracts 0.5.0 → 0.6.0

package/dist/index.mjs

@@ -21,7 +21,13 @@ const MessageDeliverySummarySchema = z.object({
 		action: z.string().max(120).optional(),
 		retcode: z.number().int().safe().optional()
 	}).strict()).max(20),
-	omittedIssues: z.number().int().nonnegative().optional()
+	omittedIssues: z.number().int().nonnegative().optional(),
+	/** Extensions that changed the message before it was sent, the content they produced and what they appended. */
+	processing: z.object({
+		processedBy: z.array(z.string()),
+		parts: z.array(z.unknown()).optional(),
+		followUps: z.array(z.string()).optional()
+	}).strict().optional()
 }).strict();
 const brandedId = (prefix, brand) => z.string().regex(new RegExp(`^${prefix}_[0-9A-Za-z]+$`), `${brand} has an invalid format.`).brand(brand);
 const AgentIdSchema = brandedId("agt", "AgentId");
@@ -47,6 +53,8 @@ const HostUiPageInstanceIdSchema = brandedId("hup", "HostUiPageInstanceId");
 const AuthoringTaskIdSchema = brandedId("aut", "AuthoringTaskId");
 const AuthoringAttemptIdSchema = brandedId("aua", "AuthoringAttemptId");
 const SubConversationIdSchema = brandedId("cnv", "SubConversationId");
+const CredentialIdSchema = brandedId("crd", "CredentialId");
+const LinkedAccountIdSchema = brandedId("acc", "LinkedAccountId");
 const AdapterActivityKeySchema = z.string().trim().min(1).max(128).regex(/^[a-z][a-z0-9]*(?:[.-][a-z0-9]+)*$/u, "Adapter activity key has an invalid format.");
 const PromptTextSegmentSchema = z.object({
 	type: z.literal("text"),
@@ -257,8 +265,9 @@ const messagePartsSearchText = (parts) => parts.flatMap((part) => {
 * product form can render and the Host can validate without executing Schema callbacks.
 *
 * Supported nodes: object (dict), string, number, natural, percent, boolean, const, union of consts (enum) and
-* array of primitives. `meta.role: 'secret'` marks a write-only credential. NekroNXT reads three extra meta keys:
-* `hint` (help text), `advanced` (collapsed by default) and `visibleWhen` (show only when a sibling equals a value).
+* array of primitives. `meta.role: 'secret'` marks a write-only credential. NekroNXT reads four extra meta keys:
+* `hint` (help text), `advanced` (collapsed by default), `visibleWhen` (show only when a sibling equals a value) and
+* `agentWritable: false` (only an administrator may change the field, in the console).
 */
 const CONFIG_SCHEMA_MAX_BYTES = 64 * 1024;
 const DescriptionSchema = z.union([z.string(), z.record(z.string(), z.string())]);
@@ -278,6 +287,8 @@ const ConfigSchemaMetaSchema = z.object({
 	}).optional(),
 	advanced: z.boolean().optional(),
 	group: z.string().max(40).optional(),
+	/** `false` keeps the field out of the agent's reach: only an administrator changes it, in the console. */
+	agentWritable: z.boolean().optional(),
 	visibleWhen: z.object({
 		key: z.string().min(1).max(64),
 		equals: JsonValueSchema
@@ -322,6 +333,11 @@ const EMPTY_CONFIG_SCHEMA = {
 	type: "object",
 	dict: {}
 };
+const configFieldLevel = (field, networkFields) => {
+	if (field.adminOnly) return "admin";
+	if (field.kind === "secret") return "secret";
+	return (networkFields instanceof Set ? networkFields : new Set(networkFields)).has(field.key) ? "network" : "normal";
+};
 const configDescription = (meta) => {
 	const description = meta?.description;
 	if (typeof description === "string") return description;
@@ -360,9 +376,12 @@ const configFields = (document) => Object.entries(document.dict).map(([key, node
 		advanced: node.meta?.advanced === true,
 		...node.meta?.group === void 0 ? {} : { group: node.meta.group },
 		...options === void 0 ? {} : { options },
+		adminOnly: node.meta?.agentWritable === false,
 		node
 	};
 });
+/** Fields declared `meta.agentWritable: false`. */
+const adminOnlyConfigKeys = (document) => configFields(document).filter((field) => field.adminOnly).map((field) => field.key);
 const configSecretKeys = (document) => configFields(document).filter((field) => field.kind === "secret").map((field) => field.key);
 const isRecord = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
 const sameJson = (left, right) => JSON.stringify(left) === JSON.stringify(right);
@@ -516,7 +535,8 @@ const fieldMeta = (title, options = {}) => ({
 	...options.default === void 0 ? {} : { default: options.default },
 	...options.required === void 0 ? {} : { required: options.required },
 	...options.advanced === void 0 ? {} : { advanced: options.advanced },
-	...options.group === void 0 ? {} : { group: options.group }
+	...options.group === void 0 ? {} : { group: options.group },
+	...options.agentWritable === void 0 ? {} : { agentWritable: options.agentWritable }
 });
 /** Builds serialized Schemastery documents without depending on the Schemastery runtime. */
 const configSchema = {
@@ -568,8 +588,12 @@ const configSchema = {
 * ships; never reuse a level for a different meaning. Level 7 is Manifest V7 (host instance + agent attachments); level 8 adds the asset library, image info, tool result
 * images, the search index and host-layer model calls. Level 9 adds the structured logger and explicit chat commands. Level 10 adds version lineage, the data version with its
 * migration hook and administrator-only commands. Level 11 lists the pictures of an inbound message to inbound hooks.
+* Level 12 adds credential placeholders (`secrets.placeholder`) that `http.fetch` fills for the credential's domains.
+* Level 13 adds outbound processing (`harness.onOutbound`, `permissions.agent.outbound`).
 */
-const EXTENSION_SDK_LEVEL = 11;
+const EXTENSION_SDK_LEVEL = 13;
+/** Outbound processing needs this level; packages that declare `permissions.agent.outbound` declare it. */
+const EXTENSION_OUTBOUND_SDK_LEVEL = 13;
 /** Lineage, `dataVersion` and administrator-only commands need this level; packages that carry them declare it. */
 const EXTENSION_GOVERNANCE_SDK_LEVEL = 10;
 /**
@@ -600,6 +624,14 @@ const EXTENSION_SDK_RELEASES = [
 	{
 		level: 11,
 		version: "0.6.0"
+	},
+	{
+		level: 12,
+		version: "0.7.0"
+	},
+	{
+		level: 13,
+		version: "0.7.0"
 	}
 ];
 /** The oldest NekroNXT version that supports `level`; undefined for a level no release supports yet. */
@@ -659,6 +691,21 @@ const ExtensionInboundHookCapabilitySchema = z.object({
 	mayForceTrigger: z.boolean(),
 	timeoutMs: z.number().int().min(100).max(EXTENSION_INBOUND_HOOK_MAX_TIMEOUT_MS)
 }).strict();
+const EXTENSION_OUTBOUND_MAX_TIMEOUT_MS = 15e3;
+/**
+* Outbound processing of the agent's own messages. `read` sees each message after it was delivered; `transform` may
+* replace its content or append messages before it is sent; `cancel` may stop it. `onTimeout` decides what happens
+* when the handler times out or throws before sending: `send` (default) sends the message as it is.
+*/
+const ExtensionOutboundCapabilitySchema = z.object({
+	read: z.literal(true).optional(),
+	transform: z.literal(true).optional(),
+	cancel: z.literal(true).optional(),
+	timeoutMs: z.number().int().min(100).max(EXTENSION_OUTBOUND_MAX_TIMEOUT_MS),
+	onTimeout: z.enum(["send", "cancel"]).optional()
+}).strict().refine((value) => value.read === true || value.transform === true || value.cancel === true, "outbound 至少声明 read、transform 或 cancel 中的一项。");
+/** Whether the extension takes part before sending (and so in the agent's processing order). */
+const outboundProcessesBeforeSend = (outbound) => outbound?.transform === true || outbound?.cancel === true;
 const EXTENSION_JOB_MAX_RUNTIME = 50;
 const ExtensionDeclaredJobSchema = z.object({
 	id: z.string().trim().regex(/^[a-z0-9][a-z0-9-]{0,39}$/u, "定时任务 id 只能使用小写字母、数字和连字符。"),
@@ -721,8 +768,15 @@ const ExtensionModelsCapabilitySchema = z.object({
 	maxCallsPerMinute: z.number().int().min(1).max(120),
 	maxOutputTokens: z.number().int().min(64).max(EXTENSION_LLM_MAX_OUTPUT_TOKENS)
 }).strict();
-/** A header or environment value: literal text, or the current value of a `meta.role: 'secret'` config field. */
-const ExtensionMcpValueSchema = z.union([z.string().max(4096), z.object({ secret: z.string().trim().min(1).max(64) }).strict()]);
+/**
+* A header or environment value: literal text, the current value of a `meta.role: 'secret'` config field, or a named
+* credential (by id or name) that the agent may use.
+*/
+const ExtensionMcpValueSchema = z.union([
+	z.string().max(4096),
+	z.object({ secret: z.string().trim().min(1).max(64) }).strict(),
+	z.object({ credential: z.string().trim().min(1).max(64) }).strict()
+]);
 /** Becomes the model-facing tool prefix `mcp__<name>__`. */
 const ExtensionMcpServerNameSchema = z.string().regex(/^[A-Za-z0-9_-]{1,32}$/u);
 const McpValueMapSchema = z.record(z.string().regex(/^[A-Za-z_][A-Za-z0-9_-]{0,127}$/u), ExtensionMcpValueSchema).refine((value) => Object.keys(value).length <= 32, "最多 32 项。").default({});
@@ -747,7 +801,9 @@ const ExtensionMcpCapabilitySchema = z.object({ servers: z.array(ExtensionMcpSer
 const McpFormValueSchema = z.object({
 	name: z.string().regex(/^[A-Za-z_][A-Za-z0-9_-]{0,127}$/u, "名称只能包含字母、数字、下划线和连字符。"),
 	value: z.string().max(4096),
-	secret: z.boolean().default(false)
+	secret: z.boolean().default(false),
+	/** Takes the value from this named credential instead; `value` and `secret` are then ignored. */
+	credential: z.string().trim().min(1).max(64).optional()
 }).strict();
 const McpServerFormSchema = z.discriminatedUnion("transport", [z.object({
 	transport: z.literal("streamable-http"),
@@ -762,7 +818,7 @@ const McpServerFormSchema = z.discriminatedUnion("transport", [z.object({
 	env: z.array(McpFormValueSchema).max(32).default([])
 }).strict()]);
 /** Secret config fields an MCP declaration reads. */
-const mcpSecretFields = (mcp) => [...new Set((mcp?.servers ?? []).flatMap((server) => Object.values(server.transport === "stdio" ? server.env : server.headers).flatMap((value) => typeof value === "string" ? [] : [value.secret])))];
+const mcpSecretFields = (mcp) => [...new Set((mcp?.servers ?? []).flatMap((server) => Object.values(server.transport === "stdio" ? server.env : server.headers).flatMap((value) => typeof value === "string" || !("secret" in value) ? [] : [value.secret])))];
 /** What a server connects to; changing it needs a new approval, unlike its credentials. */
 const mcpTarget = (server) => server.transport === "stdio" ? JSON.stringify([
 	"stdio",
@@ -787,6 +843,7 @@ const ExtensionCapabilitiesSchema = z.object({
 	models: ExtensionModelsCapabilitySchema.optional(),
 	history: z.object({ read: z.literal(true) }).strict().optional(),
 	inboundHook: ExtensionInboundHookCapabilitySchema.optional(),
+	outbound: ExtensionOutboundCapabilitySchema.optional(),
 	jobs: ExtensionJobsCapabilitySchema.optional(),
 	platform: ExtensionPlatformCapabilitySchema.optional(),
 	llm: ExtensionLlmCapabilitySchema.optional(),
@@ -850,6 +907,9 @@ const extensionCapabilitiesExpand = (previous, next) => {
 	const hook = next.inboundHook;
 	const previousHook = previous?.inboundHook;
 	if (hook !== void 0 && (previousHook === void 0 || hook.reads === "all" && previousHook.reads === "triggered" || hook.mayHide && !previousHook.mayHide || hook.mayForceTrigger && !previousHook.mayForceTrigger)) return true;
+	const outbound = next.outbound;
+	const previousOutbound = previous?.outbound;
+	if (outbound !== void 0 && (previousOutbound === void 0 || outbound.read === true && previousOutbound.read !== true || outbound.transform === true && previousOutbound.transform !== true || outbound.cancel === true && previousOutbound.cancel !== true || outbound.onTimeout === "cancel" && previousOutbound.onTimeout !== "cancel")) return true;
 	if (next.jobs?.runtime !== void 0 && (previous?.jobs?.runtime === void 0 || next.jobs.runtime.maxActive > previous.jobs.runtime.maxActive)) return true;
 	const previousMcp = new Set((previous?.mcp?.servers ?? []).map(mcpTarget));
 	if ((next.mcp?.servers ?? []).some((server) => !previousMcp.has(mcpTarget(server)))) return true;
@@ -934,6 +994,29 @@ const summarizeExtensionCapabilities = (capabilities, options = {}) => {
 			...effects === "" ? {} : { detail: `可以${effects}` }
 		});
 	}
+	const outbound = capabilities.outbound;
+	if (outbound !== void 0) {
+		if (outbound.transform === true) items.push({
+			key: "outbound.transform",
+			risk: "high",
+			label: "在智能体的消息发出前修改内容或追加消息"
+		});
+		if (outbound.cancel === true) items.push({
+			key: "outbound.cancel",
+			risk: "high",
+			label: "取消智能体要发出的消息"
+		});
+		if (outbound.read === true) items.push({
+			key: "outbound.read",
+			risk: "sensitive",
+			label: "查看智能体发出的每条消息"
+		});
+		if (outbound.onTimeout === "cancel" && (outbound.transform === true || outbound.cancel === true)) items.push({
+			key: "outbound.onTimeout",
+			risk: "high",
+			label: "这个扩展出错时，智能体的消息会发不出去"
+		});
+	}
 	const jobs = capabilities.jobs;
 	if (jobs?.declared !== void 0 && jobs.declared.length > 0) items.push({
 		key: "jobs.declared",
@@ -1382,6 +1465,10 @@ const requiredExtensionSdkLevel = (permissions) => {
 		permissions?.host?.index === void 0 && permissions?.agent?.index === void 0 ? void 0 : "检索索引",
 		permissions?.host?.models === void 0 ? void 0 : "本机层模型调用"
 	].filter((name) => name !== void 0);
+	if (permissions?.agent?.outbound !== void 0) return {
+		level: 13,
+		capabilities: ["出站处理"]
+	};
 	return level8.length > 0 ? {
 		level: 8,
 		capabilities: [...new Set(level8)]
@@ -1812,6 +1899,262 @@ const hostLogStreamEventSchema = z.discriminatedUnion("type", [
 	})
 ]);
 //#endregion
+//#region src/credentials.ts
+/**
+* Named credentials (智能体扩展配置与凭据 C1–C5): one entry is added once and reused by extensions, MCP servers and
+* commands. The value is write-only; every view below carries metadata only. Accounts on platforms such as GitHub are
+* linked accounts (`linked-accounts.ts`), granted per agent, not credentials.
+*/
+const CREDENTIAL_NAME_MAX_CHARS = 64;
+const CREDENTIAL_DESCRIPTION_MAX_CHARS = 500;
+const CREDENTIAL_VALUE_MAX_CHARS = 16384;
+/** Values shorter than this are not hidden from tool results; the form warns when one is saved. */
+const CREDENTIAL_REDACTABLE_MIN_CHARS = 8;
+/** How a credential reaches code: `request` only as a placeholder filled by `nxt.http.fetch`; `program` as the value. */
+const CredentialUsageSchema = z.enum(["request", "program"]);
+/** Agents that may use a credential: every agent, or the listed ones. */
+const CredentialAgentScopeSchema = z.union([z.object({ all: z.literal(true) }).strict(), z.object({ agentIds: z.array(AgentIdSchema).max(256) }).strict()]);
+/** Shown in redaction markers (`[凭据:名称]`), so brackets and control characters are not allowed. */
+const CredentialNameSchema = z.string().trim().min(1, "名称不能为空。").max(64, `名称最多 64 个字符。`).regex(/^[^\u0000-\u001f\u007f[\]]+$/u, "名称不能包含方括号或控制字符。");
+const CredentialDescriptionSchema = z.string().trim().max(500, `说明最多 500 个字符。`);
+const CredentialDomainsSchema = z.array(ExtensionNetworkDomainSchema).max(32);
+/**
+* Names a credential's environment variable cannot take: the shell, the tools' own configuration, and the variables
+* linked accounts give commands (`GH_TOKEN` and the `gh` settings).
+*/
+const RESERVED_COMMAND_ENV = /* @__PURE__ */ new Set([
+	"PATH",
+	"HOME",
+	"USER",
+	"LOGNAME",
+	"SHELL",
+	"PWD",
+	"OLDPWD",
+	"TMPDIR",
+	"TEMP",
+	"TMP",
+	"LANG",
+	"TERM",
+	"NODE_OPTIONS",
+	"NODE_PATH",
+	"GH_TOKEN",
+	"GH_CONFIG_DIR",
+	"GH_PROMPT_DISABLED",
+	"GH_NO_UPDATE_NOTIFIER",
+	"GH_NO_EXTENSION_UPDATE_NOTIFIER",
+	"GIT_TERMINAL_PROMPT",
+	"GIT_CONFIG_COUNT"
+]);
+const RESERVED_COMMAND_ENV_PREFIXES = [
+	"LC_",
+	"LD_",
+	"DYLD_",
+	"GIT_CONFIG_",
+	"NEKRO_",
+	"DSH_"
+];
+/** The environment variable a program credential reaches commands under. */
+const CredentialEnvNameSchema = z.string().trim().max(64).regex(/^[A-Z_][A-Z0-9_]*$/u, "环境变量名只能使用大写字母、数字和下划线，且不能以数字开头。").refine((name) => !RESERVED_COMMAND_ENV.has(name) && !RESERVED_COMMAND_ENV_PREFIXES.some((prefix) => name.startsWith(prefix)), "这个环境变量名由系统使用，请换一个。");
+const CredentialValueSchema = z.string().min(1).max(CREDENTIAL_VALUE_MAX_CHARS);
+/** What uses one credential right now: extension secret fields bound to it and agents whose commands receive it. */
+const CredentialUsersSchema = z.object({
+	extensions: z.array(z.object({
+		extensionId: ExtensionIdSchema,
+		name: z.string(),
+		/** Agents whose own configuration binds it; empty when only the host configuration does. */
+		agentIds: z.array(AgentIdSchema),
+		host: z.boolean()
+	}).strict()),
+	/** Agents with commands enabled whose commands receive it. */
+	commandAgents: z.array(AgentIdSchema)
+}).strict();
+const CredentialViewSchema = z.object({
+	id: CredentialIdSchema,
+	name: CredentialNameSchema,
+	description: z.string(),
+	usage: CredentialUsageSchema,
+	domains: z.array(z.string()),
+	agentScope: CredentialAgentScopeSchema,
+	autoUse: z.boolean(),
+	/** Program credentials: the environment variable agents' commands receive it under, or `null` when they do not. */
+	envName: z.string().nullable(),
+	/** Agents an administrator let use it while automatic use is off. */
+	approvedAgentIds: z.array(AgentIdSchema),
+	/** False when the stored value is too short to hide from tool results, or cannot be read. */
+	redactable: z.boolean(),
+	/** False when the stored value cannot be read any more; the entry stays so it can be replaced. */
+	available: z.boolean(),
+	usedBy: CredentialUsersSchema,
+	createdAt: z.number().int().nonnegative(),
+	updatedAt: z.number().int().nonnegative(),
+	lastUsedAt: z.number().int().nonnegative().nullable()
+}).strict();
+/** A model provider listed with the credentials; `open` lets agents and extensions call it through the host. */
+const ModelProviderAccessSchema = z.object({
+	provider: z.string().min(1),
+	name: z.string(),
+	open: z.boolean()
+}).strict();
+/**
+* An agent asked for a credential that does not exist yet. The settings link pre-fills the add form; saving a
+* credential with this name wakes the agent in the channel it asked from.
+*/
+const CredentialRequestViewSchema = z.object({
+	id: z.string().min(1).max(64),
+	name: CredentialNameSchema,
+	purpose: z.string(),
+	domains: z.array(z.string()),
+	usage: CredentialUsageSchema,
+	agentId: AgentIdSchema,
+	channelId: ChannelIdSchema.nullable(),
+	createdAt: z.number().int().nonnegative(),
+	/** Settings route that opens the add form pre-filled, see {@link credentialRequestRoute}. */
+	route: z.string()
+}).strict();
+const CredentialsViewSchema = z.object({
+	credentials: z.array(CredentialViewSchema),
+	modelProviders: z.array(ModelProviderAccessSchema),
+	requests: z.array(CredentialRequestViewSchema)
+}).strict();
+const CreateCredentialRequestSchema = z.object({
+	name: CredentialNameSchema,
+	description: CredentialDescriptionSchema.default(""),
+	agentScope: CredentialAgentScopeSchema.default({ all: true }),
+	autoUse: z.boolean().default(true),
+	usage: CredentialUsageSchema.default("request"),
+	domains: CredentialDomainsSchema.default([]),
+	/** Program credentials only. */
+	envName: CredentialEnvNameSchema.optional(),
+	value: CredentialValueSchema,
+	/** The agent request this form was opened from, if any. */
+	requestId: z.string().min(1).max(64).optional()
+}).strict();
+/** Metadata changes; omitted fields keep their value. */
+const UpdateCredentialRequestSchema = z.object({
+	name: CredentialNameSchema.optional(),
+	description: CredentialDescriptionSchema.optional(),
+	usage: CredentialUsageSchema.optional(),
+	domains: CredentialDomainsSchema.optional(),
+	agentScope: CredentialAgentScopeSchema.optional(),
+	autoUse: z.boolean().optional(),
+	/** `null` stops giving it to commands; only program credentials take one. */
+	envName: CredentialEnvNameSchema.nullable().optional(),
+	/** Replaces the agents allowed to use it while automatic use is off, for example to withdraw an approval. */
+	approvedAgentIds: z.array(AgentIdSchema).max(256).optional()
+}).strict();
+const ReplaceCredentialValueRequestSchema = z.object({ value: CredentialValueSchema }).strict();
+/** Removing a credential that is in use needs `confirm`; without it the result lists who uses it. */
+const RemoveCredentialRequestSchema = z.object({ confirm: z.boolean().default(false) }).strict();
+const RemoveCredentialResultSchema = z.discriminatedUnion("removed", [z.object({
+	removed: z.literal(true),
+	view: CredentialsViewSchema
+}).strict(), z.object({
+	removed: z.literal(false),
+	usedBy: CredentialUsersSchema
+}).strict()]);
+const CredentialConsumerKindSchema = z.enum([
+	"extension",
+	"command",
+	"mcp",
+	"model"
+]);
+/** One recorded use. The newest 500 per credential are kept, none older than 90 days. */
+const CredentialUseSchema = z.object({
+	at: z.number().int().nonnegative(),
+	agentId: AgentIdSchema.nullable(),
+	channelId: ChannelIdSchema.nullable(),
+	requesterMemberId: z.string().nullable(),
+	consumerKind: CredentialConsumerKindSchema,
+	consumerId: z.string(),
+	/** Extension display name or MCP server name, when it is still known. */
+	consumerName: z.string().nullable(),
+	targetHost: z.string().nullable()
+}).strict();
+const CredentialUsesViewSchema = z.object({ uses: z.array(CredentialUseSchema) }).strict();
+const SetModelProviderAccessRequestSchema = z.object({ open: z.boolean() }).strict();
+/**
+* The settings route that opens the add form pre-filled from an agent's request: the credential section with `add=1`
+* plus `name`, `purpose`, `domains` (comma separated), `usage` and `request` (the request id) as query parameters.
+*/
+const credentialRequestRoute = (request) => {
+	const query = new URLSearchParams({
+		add: "1",
+		name: request.name,
+		request: request.id,
+		usage: request.usage
+	});
+	if (request.purpose !== "") query.set("purpose", request.purpose);
+	if (request.domains.length > 0) query.set("domains", request.domains.join(","));
+	return `/settings/credentials?${query.toString()}`;
+};
+/** Secret fields of an extension configuration layer bound to a named credential, by field. */
+const BoundCredentialsSchema = z.record(z.string(), CredentialIdSchema);
+/** Binds secret fields to named credentials; `null` removes the binding and leaves the field unset. */
+const CredentialBindingsRequestSchema = z.record(z.string(), CredentialIdSchema.nullable());
+//#endregion
+//#region src/linked-accounts.ts
+/**
+* Linked accounts (设置 → 关联账号): third-party accounts that agents' commands act as. The library only keeps them;
+* an agent's commands receive an account only through its `commandAccounts` grant (命令账号授权 A1、A2). Tokens are
+* write-only; every view below carries metadata only.
+*/
+/** Platforms the host can link accounts of; each grant names one account per platform. */
+const LinkedAccountPlatformIdSchema = z.enum(["github"]);
+/** How an account is added: a typed token, or the token of a login the platform's local CLI holds (read once). */
+const LinkedAccountMethodSchema = z.enum(["token", "gh-login"]);
+/** A login the local `gh` holds, offered as a quick way to link a GitHub account. */
+const LocalGithubLoginSchema = z.object({
+	login: z.string().trim().min(1),
+	active: z.boolean()
+}).strict();
+const tokenFields = {
+	method: z.literal("token"),
+	token: z.string().trim().min(1).max(512)
+};
+const ghLoginFields = {
+	method: z.literal("gh-login"),
+	login: z.string().trim().min(1).max(128)
+};
+/** Where a token comes from: typed, or read once from a login of the platform's local CLI. */
+const LinkedAccountTokenSourceSchema = z.discriminatedUnion("method", [z.object(tokenFields).strict(), z.object(ghLoginFields).strict()]);
+const LinkedAccountViewSchema = z.object({
+	id: LinkedAccountIdSchema,
+	platform: LinkedAccountPlatformIdSchema,
+	/** The account name on the platform, as the platform reported it when the token was verified. */
+	login: z.string(),
+	/** Token scopes where the platform reports them (GitHub classic tokens); `null` otherwise. */
+	scopes: z.array(z.string()).nullable(),
+	source: LinkedAccountMethodSchema,
+	/** False when the stored token cannot be read any more; the account stays so it can be replaced or removed. */
+	available: z.boolean(),
+	/** Agents whose capabilities grant this account. */
+	grantedAgentIds: z.array(AgentIdSchema),
+	createdAt: z.number().int().nonnegative(),
+	updatedAt: z.number().int().nonnegative(),
+	lastUsedAt: z.number().int().nonnegative().nullable()
+}).strict();
+/** Links an account: the platform plus how its token is given. */
+const AddLinkedAccountRequestSchema = z.discriminatedUnion("method", [z.object({
+	platform: LinkedAccountPlatformIdSchema,
+	...tokenFields
+}).strict(), z.object({
+	platform: LinkedAccountPlatformIdSchema,
+	...ghLoginFields
+}).strict()]);
+/** A new token for an account; it must belong to the same account on the platform. */
+const ReplaceLinkedAccountTokenRequestSchema = LinkedAccountTokenSourceSchema;
+/** Removing a granted account needs `confirm`; without it the result lists the agents it is granted to. */
+const RemoveLinkedAccountRequestSchema = z.object({ confirm: z.boolean().default(false) }).strict();
+/** One recorded use: an agent's command environment carried the account. Newest 500 per account, none over 90 days. */
+const LinkedAccountUseSchema = z.object({
+	at: z.number().int().nonnegative(),
+	agentId: AgentIdSchema.nullable(),
+	channelId: ChannelIdSchema.nullable(),
+	consumerKind: z.enum(["command"]),
+	consumerId: z.string()
+}).strict();
+const LinkedAccountUsesViewSchema = z.object({ uses: z.array(LinkedAccountUseSchema) }).strict();
+//#endregion
 //#region src/runtime-compatibility.ts
 const RuntimeCompatibilityDiagnosticSchema = z.object({
 	objectKind: z.enum([
@@ -1852,6 +2195,86 @@ const HostUpgradeSummarySchema = z.object({
 	diagnostics: z.array(RuntimeCompatibilityDiagnosticSchema)
 }).strict();
 //#endregion
+//#region src/response-timing.ts
+/** Bounds of the numeric response timing settings; the host rejects values outside them. */
+const RESPONSE_TIMING_LIMITS = {
+	waitMaxQuietSeconds: {
+		min: 5,
+		max: 300
+	},
+	waitMaxTotalSeconds: {
+		min: 10,
+		max: 900
+	},
+	debounceSeconds: {
+		min: 0,
+		max: 30
+	},
+	debounceMaxSeconds: {
+		min: 1,
+		max: 120
+	},
+	debounceMaxMessages: {
+		min: 1,
+		max: 20
+	},
+	attentionSeconds: {
+		min: 5,
+		max: 600
+	},
+	midWakesPerMinute: {
+		min: 1,
+		max: 30
+	}
+};
+const bounded = (key) => z.number().int().min(RESPONSE_TIMING_LIMITS[key].min).max(RESPONSE_TIMING_LIMITS[key].max).optional();
+/**
+* Per-binding timing of when the agent speaks (Decision 2026-10-31 响应时机与智能响应). Every field is optional: an
+* omitted one uses {@link RESPONSE_TIMING_DEFAULTS}. Waiting applies to every policy that answers messages; the rest
+* only to `smart`.
+*/
+const ResponseTimingSettingsSchema = z.object({
+	/** The agent may end a turn with `waiting-for-more` and be woken when the speaker goes quiet. */
+	waitEnabled: z.boolean().optional(),
+	/** Longest quiet period one wait may ask for. */
+	waitMaxQuietSeconds: bounded("waitMaxQuietSeconds"),
+	/** Longest the agent may keep waiting for one person, counted from the first wait. */
+	waitMaxTotalSeconds: bounded("waitMaxTotalSeconds"),
+	/** Smart: wait for the speaker to stay quiet this long before a turn starts; 0 starts at once. */
+	debounceSeconds: bounded("debounceSeconds"),
+	/** Smart: start anyway once this long has passed since the first message. */
+	debounceMaxSeconds: bounded("debounceMaxSeconds"),
+	/** Smart: start anyway once this many messages from the speaker are collected. */
+	debounceMaxMessages: bounded("debounceMaxMessages"),
+	/** Smart: a message that contains the agent's name or an alias wakes it. */
+	nameWake: z.boolean().optional(),
+	/** Smart: after someone talks with the agent, their next messages wake it for a while. */
+	attentionWake: z.boolean().optional(),
+	attentionSeconds: bounded("attentionSeconds"),
+	/** Smart: name and attention wakes per channel per minute; strong signals are never limited. */
+	midWakesPerMinute: bounded("midWakesPerMinute")
+}).strict();
+const RESPONSE_TIMING_DEFAULTS = {
+	waitEnabled: true,
+	waitMaxQuietSeconds: 60,
+	waitMaxTotalSeconds: 120,
+	debounceSeconds: 3,
+	debounceMaxSeconds: 30,
+	debounceMaxMessages: 5,
+	nameWake: true,
+	attentionWake: true,
+	attentionSeconds: 60,
+	midWakesPerMinute: 3
+};
+/** Shortest quiet period a wait may ask for, whatever the channel allows. */
+const RESPONSE_WAIT_MIN_QUIET_SECONDS = 5;
+const resolveResponseTiming = (settings) => ({
+	...RESPONSE_TIMING_DEFAULTS,
+	...Object.fromEntries(Object.entries(settings ?? {}).filter(([, value]) => value !== void 0))
+});
+/** Extra names that wake the agent in smart mode; the display name always counts too. */
+const AgentAliasesSchema = z.array(z.string().trim().min(1).max(32)).max(16).transform((aliases) => [...new Set(aliases)]);
+//#endregion
 //#region src/management-api.ts
 const NonEmptyStringSchema$1 = z.string().trim().min(1);
 const Base64UrlSchema = z.string().regex(/^[A-Za-z0-9_-]+$/u);
@@ -1935,7 +2358,7 @@ const ClientNotificationSchema = z.object({
 	title: z.string().trim().min(1).max(80),
 	body: z.string().trim().min(1).max(240),
 	occurredAt: z.number().int().nonnegative(),
-	route: z.string().regex(/^\/(?:(?:live|channels|agents|workshop|wiring|settings|community|apps|work|connections|users|extensions)(?:\/[^?#]*)?)?$/u).optional()
+	route: z.string().regex(/^\/(?:(?:live|channels|agents|workshop|wiring|settings|community|apps|work|connections|users|extensions)(?:\/[^?#]*)?)?(?:\?[^#]*)?$/u).optional()
 }).strict();
 const MANAGEMENT_PAIR_PROOF_PREFIX = "nxt-management-pair-v1";
 const managementPairProofMessage = (input) => [
@@ -2182,6 +2605,14 @@ const CommunityExtensionDetailSchema = CommunityExtensionSummarySchema.extend({
 	}).nullable()
 });
 /**
+* 本机缓存的社区目录读取附带的时间：`fetchedAt` 是这份内容从社区取回的时间；`stale` 表示社区这次没能读取，
+* 返回的是较早的一份。
+*/
+const CommunityFreshnessSchema = z.object({
+	fetchedAt: z.number().int().nonnegative(),
+	stale: z.boolean()
+});
+/**
 * 发布时随包提交的条目信息（作者自己写的介绍）。首次发布用于建条目；之后提供了哪项就覆盖哪项，未提供的保持不变。
 */
 const COMMUNITY_LISTING_LIMITS = {
@@ -3016,16 +3447,19 @@ const ImageUnderstandingPolicyApiSchema = z.object({
 		maxTokens: z.number().int().min(256).max(8192)
 	}).strict()])
 }).strict();
-const CommandAccountServiceSchema = z.enum(["github"]);
 const CommandAccountUsageSchema = z.enum([
 	"read",
 	"issues",
 	"pull-requests",
 	"push"
 ]);
+/**
+* One linked account the agent's commands act as, at most one per platform (`service`). Grants saved before linked
+* accounts name the account without its `acc_` prefix; both forms resolve to the same account.
+*/
 const CommandAccountGrantSchema = z.object({
-	service: CommandAccountServiceSchema,
-	accountId: NonEmptyStringSchema.max(64),
+	service: LinkedAccountPlatformIdSchema,
+	accountId: NonEmptyStringSchema.max(72),
 	/** Told to the agent as guidance, not enforced; empty gives no hint. */
 	usage: z.array(CommandAccountUsageSchema).max(4).default([])
 }).strict();
@@ -3043,7 +3477,7 @@ const AgentCapabilitiesSchema = z.object({
 	/** Network for commands; absent in older clients means on. */
 	commandNetwork: z.boolean().default(true),
 	communityFeedbackAuto: z.boolean().default(false),
-	/** Accounts this agent's commands may act as; absent in older clients means none. */
+	/** Linked accounts this agent's commands act as, one per platform; absent in older clients means none. */
 	commandAccounts: z.array(CommandAccountGrantSchema).max(8).default([]),
 	/**
 	* What the agent may do with extensions without the console: `manual` only develops and test-runs, `confirm` asks
@@ -3055,10 +3489,21 @@ const AgentCapabilitiesSchema = z.object({
 		"autonomous"
 	]).default("manual"),
 	/** Whose requests make the agent develop or change extensions: anyone in the channel, or administrators only. */
-	extensionRequesters: z.enum(["everyone", "admins"]).default("everyone")
+	extensionRequesters: z.enum(["everyone", "admins"]).default("everyone"),
+	/**
+	* Whose requests make the agent change extension configuration. With `everyone`, members may only have it change
+	* ordinary fields of its own configuration; network fields, the host layer and credentials still need an
+	* administrator.
+	*/
+	extensionConfigRequesters: z.enum(["everyone", "admins"]).default("admins")
 }).strict();
 const DynamicClientApprovalPolicySchema = z.enum(["manual", "automatic"]);
-const NotificationEventKeySchema = z.enum(["dynamic-client-approval-requested", "community-feedback-update"]);
+const NotificationEventKeySchema = z.enum([
+	"dynamic-client-approval-requested",
+	"community-feedback-update",
+	"credential-requested",
+	"extension-notification"
+]);
 const NotificationSettingsViewSchema = z.object({
 	revision: z.number().int().positive().optional(),
 	system: z.object({ enabled: z.boolean() }).strict(),
@@ -3069,7 +3514,9 @@ const NotificationSettingsViewSchema = z.object({
 	}).strict(),
 	events: z.object({
 		"dynamic-client-approval-requested": z.boolean(),
-		"community-feedback-update": z.boolean().default(true)
+		"community-feedback-update": z.boolean().default(true),
+		"credential-requested": z.boolean().default(true),
+		"extension-notification": z.boolean().default(true)
 	}).strict()
 }).strict();
 const UpdateNotificationSettingsRequestSchema = z.object({
@@ -3083,7 +3530,9 @@ const UpdateNotificationSettingsRequestSchema = z.object({
 	}).strict(),
 	events: z.object({
 		"dynamic-client-approval-requested": z.boolean(),
-		"community-feedback-update": z.boolean().optional()
+		"community-feedback-update": z.boolean().optional(),
+		"credential-requested": z.boolean().optional(),
+		"extension-notification": z.boolean().optional()
 	}).strict()
 }).strict().refine((value) => !(value.bark.deviceKey !== void 0 && value.bark.clearDeviceKey === true), {
 	message: "不能同时更新并清除 Bark Device Key。",
@@ -3097,13 +3546,99 @@ const ClientNotificationFeedResponseSchema = z.object({
 	cursor: z.number().int().nonnegative(),
 	notifications: z.array(ClientNotificationSchema)
 }).strict();
+/** Which model writes one kind of compaction summary: that kind's default, or a model chosen for this agent. */
+const AgentCompactionModelChoiceSchema = z.discriminatedUnion("mode", [z.object({ mode: z.literal("follow") }).strict(), z.object({
+	mode: z.literal("custom"),
+	model: AgentModelSchema
+}).strict()]);
+/**
+* In-session compaction follows the main model by default, so the replayed conversation hits the provider's cache;
+* compaction into a new session follows the host's compaction model.
+*/
+const AgentCompactionPolicySchema = z.object({
+	inSession: AgentCompactionModelChoiceSchema,
+	newSession: AgentCompactionModelChoiceSchema
+}).strict();
+/** The host's idle compaction threshold, summary model and wait limit. */
+const CompactionSettingsSchema = z.object({
+	/** Minimum context occupancy for idle rollover; older settings inherit 50%. */
+	idleThresholdPercent: z.number().int().min(1).max(100).default(50),
+	newSessionModel: z.discriminatedUnion("mode", [z.object({ mode: z.literal("main") }).strict(), z.object({
+		mode: z.literal("custom"),
+		model: AgentModelSchema
+	}).strict()]),
+	/** Past this the new session starts with a fallback note instead of a summary. */
+	timeoutSeconds: z.number().int().min(30).max(900)
+}).strict();
+const DEFAULT_COMPACTION_SETTINGS = {
+	idleThresholdPercent: 50,
+	newSessionModel: { mode: "main" },
+	timeoutSeconds: 180
+};
+const FALLBACK_MODEL_LIMIT = 3;
+/**
+* Models an agent switches to, in order, when its main model has used up its quota or stays unavailable after the
+* usual retries. Empty leaves the main model alone, as before fallback models existed.
+*/
+const AgentFallbackModelsSchema = z.array(AgentModelSchema).max(3).refine((models) => new Set(models.map((model) => `${model.provider}\0${model.model}`)).size === models.length, "备用模型不能重复。");
+/** Why a channel conversation left its main model. */
+const ModelFallbackReasonSchema = z.enum([
+	"quota",
+	"rate-limit",
+	"unavailable"
+]);
+/** How long a model that failed is passed over before conversations try it again. */
+const ModelFallbackSettingsSchema = z.object({
+	/** After rate limits, server errors, timeouts or empty replies that outlasted the usual retries. */
+	unavailableCooldownMinutes: z.number().int().min(1).max(240),
+	/** After the quota or balance ran out. */
+	quotaCooldownMinutes: z.number().int().min(5).max(1440)
+}).strict();
+const DEFAULT_MODEL_FALLBACK_SETTINGS = {
+	unavailableCooldownMinutes: 10,
+	quotaCooldownMinutes: 60
+};
+/** The name an agent passes to open a sub-conversation on its main model; no candidate may take it. */
+const SUB_CONVERSATION_MAIN_MODEL = "主模型";
+const SUB_CONVERSATION_MODEL_LIMITS = {
+	candidates: 8,
+	name: 20,
+	guidance: 200
+};
+/**
+* Models an agent may open sub-conversations with, each named so the agent can pick it and described so it knows
+* when to. Without a `default`, a sub-conversation opened without naming a model follows the main model.
+*/
+const AgentSubConversationModelsSchema = z.object({
+	candidates: z.array(z.object({
+		name: z.string().trim().min(1, "请填写子对话模型的名称。").max(SUB_CONVERSATION_MODEL_LIMITS.name).regex(/^[^\s,，、]+(?: [^\s,，、]+)*$/u, "子对话模型的名称不能含换行、逗号或顿号。").refine((name) => name !== SUB_CONVERSATION_MAIN_MODEL, `「${SUB_CONVERSATION_MAIN_MODEL}」是保留名称。`),
+		model: AgentModelSchema,
+		guidance: z.string().trim().max(SUB_CONVERSATION_MODEL_LIMITS.guidance)
+	}).strict()).max(SUB_CONVERSATION_MODEL_LIMITS.candidates),
+	default: z.string().trim().min(1).optional()
+}).strict().superRefine((policy, context) => {
+	const names = policy.candidates.map((candidate) => candidate.name);
+	if (new Set(names).size !== names.length) context.addIssue({
+		code: "custom",
+		message: "子对话模型的名称不能重复。"
+	});
+	if (policy.default !== void 0 && !names.includes(policy.default)) context.addIssue({
+		code: "custom",
+		message: "默认的子对话模型不在候选里。"
+	});
+});
+const NO_SUB_CONVERSATION_MODELS = { candidates: [] };
 const AgentRevisionRequestContentSchema = z.object({
 	displayName: z.string().trim().min(1).max(80),
 	persona: z.string().max(64 * 1024).default(""),
 	personaDocument: PromptDocumentV1Schema.optional(),
 	model: AgentModelSchema,
 	imagePolicy: ImageUnderstandingPolicyApiSchema.optional(),
-	dynamicClientApprovalPolicy: DynamicClientApprovalPolicySchema.optional()
+	dynamicClientApprovalPolicy: DynamicClientApprovalPolicySchema.optional(),
+	compaction: AgentCompactionPolicySchema.optional(),
+	subConversationModels: AgentSubConversationModelsSchema.optional(),
+	fallbackModels: AgentFallbackModelsSchema.optional(),
+	aliases: AgentAliasesSchema.optional()
 }).strict();
 const validatePersonaDocumentProjection = (value, context) => {
 	if (value.personaDocument !== void 0 && promptDocumentPlainText(value.personaDocument) !== value.persona) context.addIssue({
@@ -3130,11 +3665,13 @@ const UpdateAgentCapabilitiesRequestSchema = AgentCapabilitiesSchema.partial().e
 		"confirm",
 		"autonomous"
 	]).optional(),
-	extensionRequesters: z.enum(["everyone", "admins"]).optional()
+	extensionRequesters: z.enum(["everyone", "admins"]).optional(),
+	extensionConfigRequesters: z.enum(["everyone", "admins"]).optional()
 }).strict().refine((value) => Object.values(value).some((entry) => entry !== void 0), "至少提供一个能力。");
 const TriggerPolicySchema = z.enum([
 	"always",
 	"mentioned-or-replied",
+	"smart",
 	"command",
 	"observe-only"
 ]);
@@ -3143,6 +3680,16 @@ const WorkTreeOrderSchema = z.object({
 	channelIdsByAgent: z.record(AgentIdSchema, z.array(ChannelIdSchema)),
 	unboundChannelIds: z.array(ChannelIdSchema)
 }).strict();
+/** The group key of 「未接线」 in `collapsedGroupIds`; agent groups use the agent id. */
+const UNBOUND_CHANNEL_GROUP_ID = "unbound";
+/**
+* How the console arranges its channel list: pinned channels in their order and the groups it has collapsed. Shared
+* by every device signed in to the console; it never changes bindings.
+*/
+const ChannelListViewSchema = z.object({
+	pinnedChannelIds: z.array(ChannelIdSchema).max(200),
+	collapsedGroupIds: z.array(z.union([AgentIdSchema, z.literal(UNBOUND_CHANNEL_GROUP_ID)])).max(500)
+}).strict();
 const SnapshotMessagePartSchema = z.discriminatedUnion("type", [
 	z.object({
 		type: z.literal("text"),
@@ -3236,11 +3783,23 @@ const HostSnapshotMessageSchema = z.object({
 		extensions: z.array(z.string()),
 		problems: z.array(z.string()).optional()
 	}).strict().optional(),
+	/** Extensions that processed the agent's message before it was sent; `followUp` marks a message one appended. */
+	outboundProcessing: z.object({
+		extensions: z.array(z.string()),
+		rewritten: z.boolean(),
+		followUp: z.literal(true).optional()
+	}).strict().optional(),
 	/** A scheduled task came due: a Host fact shown as a notice, not a member message. */
 	scheduledTask: z.object({
 		label: z.string(),
 		extensionName: z.string().optional(),
 		note: z.string().optional()
+	}).strict().optional(),
+	/** The agent finished waiting for someone to finish speaking: a Host fact shown as a notice. */
+	responseWait: z.object({
+		displayName: z.string().optional(),
+		cause: z.enum(["quiet", "limit"]),
+		waitedSeconds: z.number().int().nonnegative()
 	}).strict().optional()
 }).strict();
 const HostConnectionEventSchema = z.object({
@@ -3317,6 +3876,7 @@ const ChannelRuntimePhaseSchema = z.enum([
 	"idle",
 	"thinking",
 	"using-tool",
+	"compacting",
 	"waiting-input",
 	"unavailable"
 ]);
@@ -3340,11 +3900,13 @@ const channelRuntimeToolFields = {
 	inputPreview: z.string().optional(),
 	resultPreview: z.string().optional(),
 	wroteToChannel: z.boolean().optional(),
+	/** `cancelled`: an extension stopped the message before it was sent. */
 	deliveryState: z.enum([
 		"sent",
 		"partially-sent",
 		"failed",
-		"unknown"
+		"unknown",
+		"cancelled"
 	]).optional(),
 	durationMs: z.number().int().nonnegative().optional()
 };
@@ -3516,6 +4078,18 @@ const ChannelRuntimeProjectionSchema = z.object({
 	episodeId: EpisodeIdSchema.optional(),
 	phase: ChannelRuntimePhaseSchema,
 	summary: z.string(),
+	/** A compaction under way: inside the current session, or before a new session opens. */
+	compaction: z.object({
+		kind: z.enum(["in-session", "new-session"]),
+		startedAt: z.number().int().nonnegative()
+	}).strict().optional(),
+	/** The conversation runs on a fallback model; it tries the main model again at a new message after `retryMainAt`. */
+	modelFallback: z.object({
+		model: AgentModelSchema,
+		reason: ModelFallbackReasonSchema,
+		since: z.number().int().nonnegative(),
+		retryMainAt: z.number().int().nonnegative()
+	}).strict().optional(),
 	pendingInjectCount: z.number().int().nonnegative(),
 	occupancy: ChannelRuntimeOccupancySchema.optional(),
 	cache: ChannelRuntimeCacheSchema.optional(),
@@ -3667,6 +4241,8 @@ const SubConversationSchema = z.object({
 	/** What it handed back to the channel's conversation when it ended. */
 	summary: z.string().max(4e3).optional(),
 	authoringTaskId: AuthoringTaskIdSchema.optional(),
+	/** The model a model-driven sub-conversation talks in; absent for scripts and ones opened before it was kept. */
+	model: AgentModelSchema.optional(),
 	createdAt: z.number().int().nonnegative(),
 	closedAt: z.number().int().nonnegative().optional()
 }).strict();
@@ -3848,7 +4424,8 @@ const AttentionItemSchema = z.object({
 		"agent-model-unavailable",
 		"agent-vision-unavailable",
 		"logs-unavailable",
-		"community-feedback"
+		"community-feedback",
+		"extension-update"
 	]),
 	severity: z.enum([
 		"critical",
@@ -3863,7 +4440,8 @@ const AttentionItemSchema = z.object({
 			"connection",
 			"agent",
 			"logs",
-			"community-feedback"
+			"community-feedback",
+			"extension-update"
 		]),
 		id: NonEmptyStringSchema
 	}).strict(),
@@ -3884,7 +4462,8 @@ const AttentionItemSchema = z.object({
 			"open-connection",
 			"open-agent",
 			"open-logs",
-			"open-community-feedback"
+			"open-community-feedback",
+			"open-extension-updates"
 		]),
 		label: z.string().min(1).max(40)
 	}).strict(),
@@ -4016,39 +4595,31 @@ const CodeRunAvailabilitySchema = z.object({
 const GithubCliAvailabilitySchema = CodeRunAvailabilitySchema;
 /** The optional headless Chromium that loads and checks creation candidates when no page is open. */
 const VerificationBrowserAvailabilitySchema = CodeRunAvailabilitySchema;
-/**
-* One account in the host's library. The library only keeps accounts; an account takes effect only for the agents
-* whose capabilities grant it, which `usedBy` lists.
-*/
-const CommandAccountSchema = z.object({
-	id: NonEmptyStringSchema.max(64),
-	service: CommandAccountServiceSchema,
-	/** The account name on the service. */
-	login: NonEmptyStringSchema,
-	source: z.enum(["token", "gh-login"]),
-	/** Token scopes where the service reports them (classic tokens); absent for fine-grained tokens. */
-	scopes: z.array(z.string()).optional(),
-	createdAt: z.number().int().nonnegative(),
-	usedBy: z.array(AgentIdSchema)
-}).strict();
-/** A login the local `gh` holds, offered as a quick way to add an account. */
-const LocalGithubLoginSchema = z.object({
-	login: NonEmptyStringSchema,
-	active: z.boolean()
+/** A platform's own program that linked accounts work through, such as the GitHub CLI. */
+const LinkedAccountPlatformToolSchema = z.object({
+	/** The runtime download routes it is managed by (`downloadGithubCli`, `removeGithubCli`). */
+	id: z.enum(["github-cli"]),
+	name: z.string(),
+	availability: GithubCliAvailabilitySchema
 }).strict();
-const CommandAccountsViewSchema = z.object({
-	accounts: z.array(CommandAccountSchema),
+/** 设置 → 关联账号: every platform the host supports, with its accounts and tools. */
+const LinkedAccountsViewSchema = z.object({
+	platforms: z.array(z.object({
+		id: LinkedAccountPlatformIdSchema,
+		name: z.string(),
+		addMethods: z.array(LinkedAccountMethodSchema),
+		tool: LinkedAccountPlatformToolSchema.optional(),
+		accounts: z.array(LinkedAccountViewSchema)
+	}).strict()),
 	/** Logins found in the local GitHub CLI; empty when it is missing or not logged in. */
-	localLogins: z.array(LocalGithubLoginSchema)
+	localGithubLogins: z.array(LocalGithubLoginSchema)
 }).strict();
-const AddCommandAccountRequestSchema = z.discriminatedUnion("source", [z.object({
-	source: z.literal("token"),
-	service: CommandAccountServiceSchema,
-	token: NonEmptyStringSchema.max(512)
+const RemoveLinkedAccountResultSchema = z.discriminatedUnion("removed", [z.object({
+	removed: z.literal(true),
+	view: LinkedAccountsViewSchema
 }).strict(), z.object({
-	source: z.literal("gh-login"),
-	service: CommandAccountServiceSchema,
-	login: NonEmptyStringSchema.max(128)
+	removed: z.literal(false),
+	grantedAgentIds: z.array(AgentIdSchema)
 }).strict()]);
 /** An extension action an agent asked an administrator to confirm, or one it took on its own. */
 const ExtensionRequestSchema = z.object({
@@ -4093,7 +4664,15 @@ const HostSnapshotSchema = z.object({
 		id: NonEmptyStringSchema,
 		name: z.string(),
 		description: z.string().optional(),
-		inputModalities: z.array(z.string()).optional()
+		inputModalities: z.array(z.string()).optional(),
+		/** Selectable thinking levels, least to most; absent when the model offers no choice. */
+		reasoning: z.object({
+			efforts: z.array(z.object({
+				id: NonEmptyStringSchema,
+				name: z.string()
+			}).strict()).min(1),
+			defaultEffort: NonEmptyStringSchema.optional()
+		}).strict().optional()
 	}).strict()),
 	capabilityAvailability: z.object({
 		subagents: z.object({ available: z.boolean() }).strict(),
@@ -4121,8 +4700,6 @@ const HostSnapshotSchema = z.object({
 	}).strict(),
 	connectionAdapters: z.array(AdapterConnectionDescriptorSchema),
 	notificationSettings: NotificationSettingsViewSchema,
-	/** Optional in older hosts, which have no account library. */
-	commandAccounts: z.array(CommandAccountSchema).optional(),
 	agents: z.array(z.object({
 		id: AgentIdSchema,
 		displayName: z.string(),
@@ -4132,6 +4709,19 @@ const HostSnapshotSchema = z.object({
 		capabilities: AgentCapabilitiesSchema,
 		imagePolicy: ImageUnderstandingPolicyApiSchema,
 		dynamicClientApprovalPolicy: DynamicClientApprovalPolicySchema,
+		/** Optional for older hosts, whose agents always follow both defaults. */
+		compaction: AgentCompactionPolicySchema.optional(),
+		/** Optional for older hosts, whose agents offer no candidates. */
+		subConversationModels: AgentSubConversationModelsSchema.optional(),
+		/** Optional for older hosts, whose agents have no fallback models. */
+		fallbackModels: AgentFallbackModelsSchema.optional(),
+		/** Optional for older hosts, whose agents have no aliases. */
+		aliases: AgentAliasesSchema.optional(),
+		/**
+		* Enabled extensions that process the agent's messages before they are sent, in the order they run. Absent
+		* when none does.
+		*/
+		outboundOrder: z.array(ExtensionIdSchema).optional(),
 		imageDiagnostics: z.object({
 			route: z.object({
 				mode: z.enum([
@@ -4200,6 +4790,8 @@ const HostSnapshotSchema = z.object({
 			/** Absent means `observe`. */
 			localAgentMessages: z.enum(["observe", "trigger"]).optional(),
 			activityTriggerOverrides: ActivityTriggerOverridesSchema.default({}),
+			/** Absent on older hosts; missing keys use the defaults. */
+			responseTiming: ResponseTimingSettingsSchema.optional(),
 			boundAt: z.number().int().safe().nonnegative()
 		}).strict())
 	}).strict()),
@@ -4208,6 +4800,10 @@ const HostSnapshotSchema = z.object({
 		channelIdsByAgent: {},
 		unboundChannelIds: []
 	}),
+	channelListView: ChannelListViewSchema.default({
+		pinnedChannelIds: [],
+		collapsedGroupIds: []
+	}),
 	messages: z.array(HostSnapshotMessageSchema),
 	connections: z.array(z.object({
 		id: ConnectionIdSchema,
@@ -4215,6 +4811,7 @@ const HostSnapshotSchema = z.object({
 		alias: ConnectionAliasOutputSchema.optional(),
 		activityTriggerDefaults: z.array(AdapterActivityKeySchema).default([]),
 		configuredSecrets: z.array(z.string()).optional(),
+		boundCredentials: BoundCredentialsSchema.optional(),
 		status: z.object({
 			state: z.enum([
 				"stopped",
@@ -4378,6 +4975,7 @@ const HostSnapshotSchema = z.object({
 			/** Secret fields are removed; `configuredSecrets` lists those the Host stores. */
 			config: JsonValueSchema,
 			configuredSecrets: z.array(z.string()).optional(),
+			boundCredentials: BoundCredentialsSchema.optional(),
 			activatedAt: z.number().int().safe().nonnegative(),
 			runtime: z.object({
 				status: z.enum([
@@ -4411,6 +5009,7 @@ const HostSnapshotSchema = z.object({
 			/** Secret fields are removed; `configuredSecrets` lists those the Host stores. */
 			config: JsonValueSchema.default({}),
 			configuredSecrets: z.array(z.string()).optional(),
+			boundCredentials: BoundCredentialsSchema.optional(),
 			runtime: z.object({
 				status: z.enum([
 					"active",
@@ -4603,6 +5202,8 @@ const DshPluginCatalogEntrySchema = z.object({
 		"tarball",
 		"imported"
 	]).optional(),
+	/** Published by the DSH maintainers on npm for the DSH release this build runs. */
+	official: z.boolean().optional(),
 	installedAt: z.number().int().safe().nonnegative().optional(),
 	clientUiDetected: z.boolean().optional(),
 	hostUi: DshNxtHostUiSchema.optional(),
@@ -4614,6 +5215,8 @@ const DshPluginCatalogEntrySchema = z.object({
 		suggestedScope: z.enum(["host", "agent"]),
 		selectedScope: z.enum(["host", "agent"]).optional(),
 		config: JsonValueSchema,
+		/** Host services this official entry declared and received; known once it has loaded. */
+		grantedServices: z.array(NonEmptyStringSchema).optional(),
 		activations: z.array(z.object({
 			targetKey: NonEmptyStringSchema,
 			target: z.enum(["host", "agent"]),
@@ -4622,18 +5225,24 @@ const DshPluginCatalogEntrySchema = z.object({
 			diagnostic: z.object({
 				status: z.enum([
 					"active",
+					"pending",
 					"load-failed",
 					"restore-failed",
 					"dispose-failed"
 				]),
 				phase: z.enum([
 					"import",
+					"dependency",
 					"apply",
 					"update",
 					"dispose",
 					"restore"
 				]),
 				message: z.string().optional(),
+				/** Services a pending entry still waits for. */
+				waitingFor: z.array(NonEmptyStringSchema).optional(),
+				/** The waited-for services this entry can never receive, since only official plugins get them. */
+				restrictedServices: z.array(NonEmptyStringSchema).optional(),
 				observedAt: z.number().int().safe().nonnegative()
 			}).optional()
 		}).strict())
@@ -4780,19 +5389,23 @@ const HostSseEventSchema = z.discriminatedUnion("event", [
 ]);
 /** Request content a model accepts; `image` enables native vision for agents using the model. */
 const LlmModelInputModalitiesSchema = z.array(z.enum(["text", "image"])).min(1);
+/** Thinking levels a model offers, least to most; the ids are the adapter's own. */
+const LlmModelReasoningEffortsSchema = z.array(NonEmptyStringSchema).min(1);
 const LlmProviderModelSchema = z.object({
 	id: NonEmptyStringSchema,
 	name: NonEmptyStringSchema,
 	contextWindow: z.number().int().positive().optional(),
 	maxTokens: z.number().int().positive().optional(),
-	inputModalities: LlmModelInputModalitiesSchema.optional()
+	inputModalities: LlmModelInputModalitiesSchema.optional(),
+	reasoningEfforts: LlmModelReasoningEffortsSchema.optional()
 }).strict();
 const LlmDiscoveredModelSchema = z.object({
 	id: NonEmptyStringSchema,
 	name: NonEmptyStringSchema.optional(),
 	contextWindow: z.number().int().positive().optional(),
 	maxTokens: z.number().int().positive().optional(),
-	inputModalities: LlmModelInputModalitiesSchema.optional()
+	inputModalities: LlmModelInputModalitiesSchema.optional(),
+	reasoningEfforts: LlmModelReasoningEffortsSchema.optional()
 }).strict();
 const LlmProviderCredentialSchema = z.object({
 	configured: z.boolean(),
@@ -4830,7 +5443,62 @@ const LlmProviderViewSchema = z.object({
 	/** The provider's adapter can list the models its endpoint offers. */
 	discoverable: z.boolean(),
 	/** `null` when the current configuration was never tested; absent from hosts that do not record tests. */
-	lastTest: LlmProviderTestResultSchema.nullable().optional()
+	lastTest: LlmProviderTestResultSchema.nullable().optional(),
+	/** Present when the provider can sign in with a subscription account instead of an API key. */
+	subscription: z.object({
+		label: NonEmptyStringSchema,
+		/** The route uses the signed-in account rather than an API key. */
+		active: z.boolean(),
+		accountLabel: z.string().nullable()
+	}).strict().optional()
+}).strict();
+const SubscriptionStatusSchema = z.object({
+	provider: NonEmptyStringSchema,
+	label: NonEmptyStringSchema,
+	usageUrl: z.url(),
+	available: z.boolean(),
+	mode: z.enum([
+		"unconfigured",
+		"api-key",
+		"subscription"
+	]),
+	activeAccountId: z.string().nullable(),
+	accounts: z.array(z.object({
+		id: NonEmptyStringSchema,
+		label: NonEmptyStringSchema,
+		email: z.string().nullable(),
+		createdAt: z.number().int().nonnegative()
+	}).strict()),
+	login: z.object({
+		id: NonEmptyStringSchema,
+		status: z.enum([
+			"running",
+			"authorized",
+			"cancelled",
+			"failed"
+		]),
+		notices: z.array(z.object({
+			message: z.string(),
+			url: z.string().optional(),
+			code: z.string().optional()
+		}).strict()),
+		prompt: z.object({
+			id: NonEmptyStringSchema,
+			kind: z.enum([
+				"text",
+				"secret",
+				"select"
+			]),
+			message: z.string(),
+			placeholder: z.string().optional(),
+			options: z.array(z.object({
+				id: z.string(),
+				label: z.string(),
+				description: z.string().optional()
+			}).strict()).optional()
+		}).strict().nullable(),
+		error: z.string().nullable()
+	}).strict().nullable()
 }).strict();
 const LlmProviderSettingsSchema = z.object({
 	writable: z.boolean(),
@@ -4883,6 +5551,8 @@ const defineContract = (contract) => ({
 	parseError: (input) => contract.error.parse(input)
 });
 const agentParam = z.object({ agentId: AgentIdSchema }).strict();
+const credentialParam = z.object({ credentialId: CredentialIdSchema }).strict();
+const linkedAccountParam = z.object({ accountId: LinkedAccountIdSchema }).strict();
 const agentRevisionParam = z.object({
 	agentId: AgentIdSchema,
 	revisionId: AgentRevisionIdSchema
@@ -4893,7 +5563,11 @@ const AgentRevisionChangedFieldSchema = z.enum([
 	"model",
 	"capabilities",
 	"imagePolicy",
-	"approvalPolicy"
+	"approvalPolicy",
+	"compaction",
+	"subConversationModels",
+	"fallbackModels",
+	"aliases"
 ]);
 const AgentRevisionHistorySchema = z.object({
 	agentId: AgentIdSchema,
@@ -5039,6 +5713,38 @@ const AdministratorSchema = z.object({
 	addedAt: z.number().int().nonnegative()
 }).strict();
 const extensionParam = z.object({ extensionId: ExtensionIdSchema }).strict();
+const ExtensionConfigVersionSourceSchema = z.enum([
+	"console",
+	"agent",
+	"chat-admin",
+	"revert",
+	"auto-revert"
+]);
+/**
+* One saved state of an extension's host configuration or of one agent's configuration. Versions are numbered per
+* extension, layer and agent; reverting writes an old one again as a new version. Secret fields only show whether
+* they were set and which named credential they were bound to.
+*/
+const ExtensionConfigVersionSchema = z.object({
+	id: z.number().int().positive(),
+	extensionId: ExtensionIdSchema,
+	layer: z.enum(["host", "agent"]),
+	agentId: AgentIdSchema.nullable(),
+	version: z.number().int().positive(),
+	config: JsonValueSchema,
+	configuredSecrets: z.array(z.string()).optional(),
+	boundCredentials: z.record(z.string(), CredentialIdSchema).optional(),
+	source: ExtensionConfigVersionSourceSchema,
+	actorAgentId: AgentIdSchema.nullable(),
+	requesterMemberId: z.string().nullable(),
+	reason: z.string().nullable(),
+	createdAt: z.number().int().nonnegative()
+}).strict();
+const extensionConfigVersionParam = z.object({
+	extensionId: ExtensionIdSchema,
+	/** Decimal text of the version id; the path builder only takes strings. */
+	versionId: z.string().regex(/^[1-9]\d{0,15}$/u)
+}).strict();
 const dshPluginPackageParam = z.object({ packageId: DshPluginPackageIdSchema }).strict();
 const dshPluginEntryParam = z.object({ entryId: DshPluginEntryIdSchema }).strict();
 const extensionRevisionParam = z.object({
@@ -5281,13 +5987,25 @@ const HostApiContracts = {
 		response: z.object({
 			task: AuthoringTaskSummarySchema,
 			attempts: z.array(AuthoringAttemptSummarySchema),
-			/** Secret fields of the latest candidate and which have a test value for this task's dynamic runs. */
-			testSecrets: z.object({
+			/**
+			* Test configuration of this task's dynamic runs: fields of the latest candidate the user can type, which
+			* credentials are set, the user's values and the values the agent provided.
+			*/
+			testConfig: z.object({
 				fields: z.array(z.object({
 					key: z.string(),
-					title: z.string()
+					title: z.string(),
+					kind: z.enum([
+						"secret",
+						"string",
+						"number"
+					])
 				}).strict()),
-				configured: z.array(z.string())
+				configured: z.array(z.string()),
+				values: z.record(z.string(), z.union([z.string(), z.number()])),
+				agentValues: z.record(z.string(), JsonValueSchema),
+				/** Secret fields bound to a named credential, by the user or else by the agent. */
+				boundCredentials: BoundCredentialsSchema.optional()
 			}).strict().optional(),
 			events: z.array(z.object({
 				sequence: z.number().int().positive(),
@@ -5334,12 +6052,22 @@ const HostApiContracts = {
 		response: AuthoringTaskSummarySchema,
 		error: HostApiErrorSchema
 	}),
-	setAuthoringTestSecrets: defineContract({
+	setAuthoringTestConfig: defineContract({
 		method: "PUT",
 		path: "/api/authoring/tasks/:taskId/test-secrets",
 		params: authoringTaskParam,
-		request: z.object({ secrets: z.record(z.string(), z.string().max(8192)) }).strict(),
-		response: z.object({ configured: z.array(z.string()) }).strict(),
+		request: z.object({
+			secrets: z.record(z.string(), z.string().max(8192)),
+			/** Text and number values; an empty string goes back to the agent's value or the default. */
+			values: z.record(z.string(), z.union([z.string().max(8192), z.number()])).optional(),
+			/** Secret fields to bind to named credentials instead of a typed value; `null` leaves the field unset. */
+			credentialBindings: CredentialBindingsRequestSchema.optional()
+		}).strict(),
+		response: z.object({
+			configured: z.array(z.string()),
+			values: z.record(z.string(), z.union([z.string(), z.number()])),
+			boundCredentials: BoundCredentialsSchema.optional()
+		}).strict(),
 		error: HostApiErrorSchema
 	}),
 	deleteAuthoringTask: defineContract({
@@ -5544,7 +6272,9 @@ const HostApiContracts = {
 			processingFeedback: z.enum(["auto", "off"]).optional(),
 			/** Messages from another local agent's account: `observe` keeps them as context unless they @ this agent. */
 			localAgentMessages: z.enum(["observe", "trigger"]).optional(),
-			activityTriggerOverrides: ActivityTriggerOverridesSchema.optional()
+			activityTriggerOverrides: ActivityTriggerOverridesSchema.optional(),
+			/** Omitted keeps the binding's current timing; `{}` resets every field to its default. */
+			responseTiming: ResponseTimingSettingsSchema.optional()
 		}).strict(),
 		response: z.object({
 			channelId: ChannelIdSchema,
@@ -5554,6 +6284,7 @@ const HostApiContracts = {
 			processingFeedback: z.enum(["auto", "off"]).default("auto"),
 			localAgentMessages: z.enum(["observe", "trigger"]).optional(),
 			activityTriggerOverrides: ActivityTriggerOverridesSchema.default({}),
+			responseTiming: ResponseTimingSettingsSchema.optional(),
 			boundAt: z.number().int().safe().nonnegative()
 		}).strict(),
 		error: HostApiErrorSchema
@@ -5579,6 +6310,23 @@ const HostApiContracts = {
 		response: WorkTreeOrderSchema,
 		error: HostApiErrorSchema
 	}),
+	getChannelListView: defineContract({
+		method: "GET",
+		path: "/api/channel-list-view",
+		params: EmptyParamsSchema,
+		request: NoRequestBodySchema,
+		response: ChannelListViewSchema,
+		error: HostApiErrorSchema
+	}),
+	updateChannelListView: defineContract({
+		invalidatesSnapshot: true,
+		method: "PUT",
+		path: "/api/channel-list-view",
+		params: EmptyParamsSchema,
+		request: ChannelListViewSchema,
+		response: ChannelListViewSchema,
+		error: HostApiErrorSchema
+	}),
 	listChannelMessages: defineContract({
 		method: "GET",
 		path: "/api/channels/:channelId/messages",
@@ -5824,6 +6572,39 @@ const HostApiContracts = {
 		response: MessagePacingSettingsSchema,
 		error: HostApiErrorSchema
 	}),
+	getCompactionSettings: defineContract({
+		method: "GET",
+		path: "/api/settings/compaction",
+		params: EmptyParamsSchema,
+		request: NoRequestBodySchema,
+		response: CompactionSettingsSchema,
+		error: HostApiErrorSchema
+	}),
+	updateCompactionSettings: defineContract({
+		invalidatesSnapshot: true,
+		method: "PUT",
+		path: "/api/settings/compaction",
+		params: EmptyParamsSchema,
+		request: CompactionSettingsSchema,
+		response: CompactionSettingsSchema,
+		error: HostApiErrorSchema
+	}),
+	getModelFallbackSettings: defineContract({
+		method: "GET",
+		path: "/api/settings/model-fallback",
+		params: EmptyParamsSchema,
+		request: NoRequestBodySchema,
+		response: ModelFallbackSettingsSchema,
+		error: HostApiErrorSchema
+	}),
+	updateModelFallbackSettings: defineContract({
+		method: "PUT",
+		path: "/api/settings/model-fallback",
+		params: EmptyParamsSchema,
+		request: ModelFallbackSettingsSchema,
+		response: ModelFallbackSettingsSchema,
+		error: HostApiErrorSchema
+	}),
 	getUpgradeBackupSettings: defineContract({
 		method: "GET",
 		path: "/api/settings/upgrade-backup",
@@ -5929,39 +6710,116 @@ const HostApiContracts = {
 		response: VerificationBrowserAvailabilitySchema,
 		error: HostApiErrorSchema
 	}),
-	getCommandAccounts: defineContract({
+	getLinkedAccounts: defineContract({
+		method: "GET",
+		path: "/api/settings/linked-accounts",
+		params: EmptyParamsSchema,
+		request: NoRequestBodySchema,
+		response: LinkedAccountsViewSchema,
+		error: HostApiErrorSchema
+	}),
+	addLinkedAccount: defineContract({
+		invalidatesSnapshot: true,
+		method: "POST",
+		path: "/api/settings/linked-accounts",
+		params: EmptyParamsSchema,
+		request: AddLinkedAccountRequestSchema,
+		response: LinkedAccountsViewSchema,
+		error: HostApiErrorSchema
+	}),
+	replaceLinkedAccountToken: defineContract({
+		invalidatesSnapshot: true,
+		method: "PUT",
+		path: "/api/settings/linked-accounts/:accountId/token",
+		params: linkedAccountParam,
+		request: ReplaceLinkedAccountTokenRequestSchema,
+		response: LinkedAccountsViewSchema,
+		error: HostApiErrorSchema
+	}),
+	removeLinkedAccount: defineContract({
+		invalidatesSnapshot: true,
+		method: "POST",
+		path: "/api/settings/linked-accounts/:accountId/remove",
+		params: linkedAccountParam,
+		request: RemoveLinkedAccountRequestSchema,
+		response: RemoveLinkedAccountResultSchema,
+		error: HostApiErrorSchema
+	}),
+	getLinkedAccountUses: defineContract({
+		method: "GET",
+		path: "/api/settings/linked-accounts/:accountId/uses",
+		params: linkedAccountParam,
+		request: NoRequestBodySchema,
+		response: LinkedAccountUsesViewSchema,
+		error: HostApiErrorSchema
+	}),
+	getCredentials: defineContract({
 		method: "GET",
-		path: "/api/settings/command-accounts",
+		path: "/api/settings/credentials",
 		params: EmptyParamsSchema,
 		request: NoRequestBodySchema,
-		response: CommandAccountsViewSchema,
+		response: CredentialsViewSchema,
 		error: HostApiErrorSchema
 	}),
-	addCommandAccount: defineContract({
+	createCredential: defineContract({
 		invalidatesSnapshot: true,
 		method: "POST",
-		path: "/api/settings/command-accounts",
+		path: "/api/settings/credentials",
 		params: EmptyParamsSchema,
-		request: AddCommandAccountRequestSchema,
-		response: CommandAccountsViewSchema,
+		request: CreateCredentialRequestSchema,
+		response: CredentialsViewSchema,
 		error: HostApiErrorSchema
 	}),
-	replaceCommandAccountToken: defineContract({
+	updateCredential: defineContract({
+		invalidatesSnapshot: true,
+		method: "PATCH",
+		path: "/api/settings/credentials/:credentialId",
+		params: credentialParam,
+		request: UpdateCredentialRequestSchema,
+		response: CredentialsViewSchema,
+		error: HostApiErrorSchema
+	}),
+	replaceCredentialValue: defineContract({
 		invalidatesSnapshot: true,
 		method: "PUT",
-		path: "/api/settings/command-accounts/:accountId",
-		params: z.object({ accountId: NonEmptyStringSchema.max(64) }).strict(),
-		request: AddCommandAccountRequestSchema,
-		response: CommandAccountsViewSchema,
+		path: "/api/settings/credentials/:credentialId/value",
+		params: credentialParam,
+		request: ReplaceCredentialValueRequestSchema,
+		response: CredentialsViewSchema,
 		error: HostApiErrorSchema
 	}),
-	removeCommandAccount: defineContract({
+	removeCredential: defineContract({
 		invalidatesSnapshot: true,
+		method: "POST",
+		path: "/api/settings/credentials/:credentialId/remove",
+		params: credentialParam,
+		request: RemoveCredentialRequestSchema,
+		response: RemoveCredentialResultSchema,
+		error: HostApiErrorSchema
+	}),
+	getCredentialUses: defineContract({
+		method: "GET",
+		path: "/api/settings/credentials/:credentialId/uses",
+		params: credentialParam,
+		request: NoRequestBodySchema,
+		response: CredentialUsesViewSchema,
+		error: HostApiErrorSchema
+	}),
+	dismissCredentialRequest: defineContract({
 		method: "DELETE",
-		path: "/api/settings/command-accounts/:accountId",
-		params: z.object({ accountId: NonEmptyStringSchema.max(64) }).strict(),
+		path: "/api/settings/credentials/requests/:requestId",
+		params: z.object({ requestId: NonEmptyStringSchema.max(64) }).strict(),
 		request: NoRequestBodySchema,
-		response: CommandAccountsViewSchema,
+		response: CredentialsViewSchema,
+		error: HostApiErrorSchema
+	}),
+	setModelProviderAccess: defineContract({
+		invalidatesSnapshot: true,
+		method: "PUT",
+		path: "/api/settings/credentials/model-providers/:provider",
+		params: z.object({ provider: NonEmptyStringSchema.max(128) }).strict(),
+		request: SetModelProviderAccessRequestSchema,
+		response: CredentialsViewSchema,
 		error: HostApiErrorSchema
 	}),
 	getChannelMemberNotes: defineContract({
@@ -6479,22 +7337,27 @@ const HostApiContracts = {
 			official: z.enum(["1"]).optional(),
 			/** 排序方式，默认最近更新；游标只在同一种排序下有效。 */
 			sort: CommunityExtensionSortSchema.optional(),
-			cursor: z.string().max(200).optional()
+			cursor: z.string().max(200).optional(),
+			/** 跳过本机缓存，重新向社区读取。 */
+			refresh: z.enum(["1"]).optional()
 		}).strict(),
 		request: NoRequestBodySchema,
 		response: z.object({
 			items: z.array(CommunityExtensionSummarySchema),
 			nextCursor: z.string().nullable()
-		}).strict(),
+		}).extend(CommunityFreshnessSchema.shape).strict(),
 		error: HostApiErrorSchema
 	}),
 	getCommunityExtension: defineContract({
 		timeoutMs: 3e4,
 		method: "GET",
 		path: "/api/community/extensions/:extensionId",
-		params: z.object({ extensionId: ExtensionIdSchema }).strict(),
+		params: z.object({
+			extensionId: ExtensionIdSchema,
+			refresh: z.enum(["1"]).optional()
+		}).strict(),
 		request: NoRequestBodySchema,
-		response: CommunityExtensionDetailSchema,
+		response: CommunityExtensionDetailSchema.extend(CommunityFreshnessSchema.shape),
 		error: HostApiErrorSchema
 	}),
 	/** 下载社区发布并按包摘要校验，结果与本地文件导入的检查相同，再经 `commitExtensionImport` 确认。 */
@@ -6626,22 +7489,27 @@ const HostApiContracts = {
 			query: z.string().trim().min(1).max(200).optional(),
 			tag: z.string().trim().min(1).max(40).optional(),
 			official: z.literal("1").optional(),
-			cursor: z.string().min(1).max(500).optional()
+			cursor: z.string().min(1).max(500).optional(),
+			/** 跳过本机缓存，重新向社区读取。 */
+			refresh: z.enum(["1"]).optional()
 		}).strict(),
 		request: NoRequestBodySchema,
 		response: z.object({
 			items: z.array(CommunityPersonaSummarySchema),
 			nextCursor: z.string().nullable()
-		}).strict(),
+		}).extend(CommunityFreshnessSchema.shape).strict(),
 		error: HostApiErrorSchema
 	}),
 	getCommunityPersona: defineContract({
 		timeoutMs: 3e4,
 		method: "GET",
 		path: "/api/community/personas/:personaId",
-		params: z.object({ personaId: CommunityPersonaIdSchema }).strict(),
+		params: z.object({
+			personaId: CommunityPersonaIdSchema,
+			refresh: z.enum(["1"]).optional()
+		}).strict(),
 		request: NoRequestBodySchema,
-		response: CommunityPersonaDetailSchema,
+		response: CommunityPersonaDetailSchema.extend(CommunityFreshnessSchema.shape),
 		error: HostApiErrorSchema
 	}),
 	/**
@@ -6818,6 +7686,46 @@ const HostApiContracts = {
 		response: LlmProviderSettingsSchema,
 		error: HostApiErrorSchema
 	}),
+	llmSubscriptionStatus: defineContract({
+		method: "GET",
+		path: "/api/llm/subscriptions/:provider",
+		params: llmProviderParam,
+		request: NoRequestBodySchema,
+		response: SubscriptionStatusSchema,
+		error: HostApiErrorSchema
+	}),
+	llmSubscriptionAction: defineContract({
+		invalidatesSnapshot: true,
+		method: "POST",
+		path: "/api/llm/subscriptions/:provider",
+		params: llmProviderParam,
+		request: z.discriminatedUnion("action", [
+			z.object({
+				action: z.literal("use-subscription"),
+				expectedRevision: z.number().int().nonnegative()
+			}).strict(),
+			z.object({ action: z.enum(["login", "cancel"]) }).strict(),
+			z.object({
+				action: z.literal("answer"),
+				promptId: NonEmptyStringSchema,
+				value: z.string().max(4096)
+			}).strict(),
+			z.object({
+				action: z.enum(["activate", "remove"]),
+				accountId: NonEmptyStringSchema
+			}).strict(),
+			z.object({
+				action: z.literal("rename"),
+				accountId: NonEmptyStringSchema,
+				label: z.string().min(1).max(80)
+			}).strict()
+		]),
+		response: z.object({
+			status: SubscriptionStatusSchema,
+			revocationConfirmed: z.boolean().optional()
+		}).strict(),
+		error: HostApiErrorSchema
+	}),
 	llmDiscoverModels: defineContract({
 		method: "POST",
 		path: "/api/llm/discover-models",
@@ -7183,6 +8091,7 @@ const HostApiContracts = {
 				extensionRevisionId: ExtensionRevisionIdSchema,
 				config: JsonValueSchema,
 				configuredSecrets: z.array(z.string()).optional(),
+				boundCredentials: BoundCredentialsSchema.optional(),
 				activatedAt: z.number().int().safe().nonnegative()
 			}).strict().optional(),
 			pending: ExtensionActivationTransitionSchema.optional()
@@ -7202,6 +8111,16 @@ const HostApiContracts = {
 		}).strict(),
 		error: HostApiErrorSchema
 	}),
+	putAgentOutboundOrder: defineContract({
+		invalidatesSnapshot: true,
+		method: "PUT",
+		path: "/api/agents/:agentId/outbound-order",
+		params: agentParam,
+		/** Every enabled extension that processes the agent's messages before sending, in the new order. */
+		request: z.object({ extensionIds: z.array(ExtensionIdSchema).max(64) }).strict(),
+		response: z.object({ extensionIds: z.array(ExtensionIdSchema) }).strict(),
+		error: HostApiErrorSchema
+	}),
 	updateExtensionActivationConfig: defineContract({
 		invalidatesSnapshot: true,
 		method: "PUT",
@@ -7210,11 +8129,14 @@ const HostApiContracts = {
 		request: z.object({
 			config: JsonValueSchema,
 			/** Write-only credential drafts keyed by secret field; an absent or empty draft keeps the stored one. */
-			secrets: z.record(z.string(), z.string().max(8192)).optional()
+			secrets: z.record(z.string(), z.string().max(8192)).optional(),
+			/** Secret fields to bind to named credentials instead of a typed value; a field takes one or the other. */
+			credentialBindings: CredentialBindingsRequestSchema.optional()
 		}).strict(),
 		response: z.object({
 			config: JsonValueSchema,
-			configuredSecrets: z.array(z.string()).optional()
+			configuredSecrets: z.array(z.string()).optional(),
+			boundCredentials: BoundCredentialsSchema.optional()
 		}).strict(),
 		error: HostApiErrorSchema
 	}),
@@ -7227,14 +8149,37 @@ const HostApiContracts = {
 		request: z.object({
 			config: JsonValueSchema,
 			/** Write-only credential drafts keyed by secret field; an absent or empty draft keeps the stored one. */
-			secrets: z.record(z.string(), z.string().max(8192)).optional()
+			secrets: z.record(z.string(), z.string().max(8192)).optional(),
+			/** Secret fields to bind to named credentials instead of a typed value; a field takes one or the other. */
+			credentialBindings: CredentialBindingsRequestSchema.optional()
 		}).strict(),
 		response: z.object({
 			config: JsonValueSchema,
-			configuredSecrets: z.array(z.string()).optional()
+			configuredSecrets: z.array(z.string()).optional(),
+			boundCredentials: BoundCredentialsSchema.optional()
 		}).strict(),
 		error: HostApiErrorSchema
 	}),
+	/** Configuration history of one extension, newest first: the host layer and every agent's configuration. */
+	getExtensionConfigVersions: defineContract({
+		method: "GET",
+		path: "/api/extensions/:extensionId/config-versions",
+		params: extensionParam,
+		request: NoRequestBodySchema,
+		response: z.object({ versions: z.array(ExtensionConfigVersionSchema) }).strict(),
+		error: HostApiErrorSchema
+	}),
+	/** Writes an earlier configuration again as a new version of the same layer (and agent). */
+	revertExtensionConfig: defineContract({
+		invalidatesSnapshot: true,
+		timeoutMs: 3e5,
+		method: "POST",
+		path: "/api/extensions/:extensionId/config-versions/:versionId/revert",
+		params: extensionConfigVersionParam,
+		request: z.object({ reason: z.string().trim().max(500).optional() }).strict(),
+		response: z.object({ version: ExtensionConfigVersionSchema }).strict(),
+		error: HostApiErrorSchema
+	}),
 	installHostExtension: defineContract({
 		invalidatesSnapshot: true,
 		timeoutMs: 3e5,
@@ -7666,9 +8611,9 @@ const buildValidatedHostApiPath = (contract, input) => {
 	const consumed = /* @__PURE__ */ new Set();
 	const pathname = contract.path.replace(pathParameterPattern, (_placeholder, key) => {
 		const value = params[key];
-		if (typeof value !== "string") throw new TypeError(`Host API path parameter ${key} must be a string.`);
+		if (typeof value !== "string" && typeof value !== "number") throw new TypeError(`Host API path parameter ${key} must be a string or number.`);
 		consumed.add(key);
-		return encodeURIComponent(value);
+		return encodeURIComponent(String(value));
 	});
 	const query = new URLSearchParams();
 	for (const [key, value] of Object.entries(params)) {
@@ -7686,6 +8631,6 @@ function buildHostApiPath(name, input) {
 	return buildValidatedHostApiPath(HostApiContracts[name], input);
 }
 //#endregion
-export { ACTIVITY_MAX_BUCKETS, ACTIVITY_MAX_WINDOW_MS, ACTIVITY_MIN_BUCKET_MS, ActivityQuerySchema, AdapterActivityKeySchema, AddCommandAccountRequestSchema, AdministratorSchema, AdmissionIdSchema, AgentAppearanceSchema, AgentIdSchema, AgentRevisionChangedFieldSchema, AgentRevisionHistorySchema, AgentRevisionIdSchema, AssetIdSchema, AttentionItemSchema, AttentionListSchema, AuthoringAttemptIdSchema, AuthoringTaskIdSchema, CHANNEL_COMPOSER_MAX_ATTACHMENTS, CHANNEL_COMPOSER_MAX_BYTES, CHANNEL_UNREAD_COUNT_CAP, COMMAND_DEFAULT_TIMEOUT_SECONDS, COMMAND_MAX_PROGRESS_REPLIES, COMMAND_MAX_TIMEOUT_SECONDS, COMMUNITY_EXTENSION_SORTS, COMMUNITY_FEEDBACK_STATUSES, COMMUNITY_FEEDBACK_STATUS_LABELS, COMMUNITY_LISTING_LIMITS, COMMUNITY_OFFICIAL_HANDLE, COMMUNITY_PERSONA_AVATAR_MAX_BYTES, COMMUNITY_PERSONA_AVATAR_TYPES, COMMUNITY_PERSONA_MAX_LENGTH, COMMUNITY_RATING_BADGES, COMMUNITY_RATING_BADGE_LIMIT, COMMUNITY_RATING_DIMENSIONS, COMMUNITY_RATING_DIMENSION_LABELS, COMMUNITY_REVIEWER_NAME, COMMUNITY_REVIEW_DIMENSION_LABELS, COMMUNITY_REVIEW_STATUSES, CONFIG_SCHEMA_MAX_BYTES, ChannelActivitySeriesSchema, ChannelActivitySummarySchema, ChannelContextPolicySchema, ChannelContextPolicyViewSchema, ChannelEventIdSchema, ChannelFactSseDataSchema, ChannelFactSseItemSchema, ChannelIdSchema, ChannelMemberIdSchema, ChannelMemberNotesViewSchema, ChannelMemoryActivitySchema, ChannelPendingContextSchema, ChannelPromptViewSchema, ChannelRuntimeCacheSampleSchema, ChannelRuntimeCacheSchema, ChannelRuntimeContextSchema, ChannelRuntimeInputSchema, ChannelRuntimeOccupancySchema, ChannelRuntimePerformanceSampleSchema, ChannelRuntimePerformanceSchema, ChannelRuntimePhaseSchema, ChannelRuntimeProjectionSchema, ChannelRuntimeSseDataSchema, ChannelRuntimeStepSchema, ChannelRuntimeToolSchema, ChannelRuntimeTurnSchema, ChannelRuntimeUsageSchema, ClientNotificationFeedResponseSchema, ClientNotificationSchema, CodeRunAvailabilitySchema, CommandAccountSchema, CommandAccountServiceSchema, CommandAccountUsageSchema, CommandAccountsViewSchema, CommandCatalogEntrySchema, CommandDefinitionSchema, CommandExecutionIdentitySchema, CommandExecutionRecordSchema, CommandParameterSchema, CommandPermissionSchema, CommandPolicySchema, CommandReplySchema, CommandResultSchema, CommunityAccountSchema, CommunityEndpointSchema, CommunityEnvironmentSchema, CommunityExtensionDetailSchema, CommunityExtensionSortSchema, CommunityExtensionSummarySchema, CommunityFeedbackAffectedSchema, CommunityFeedbackChangesSchema, CommunityFeedbackConfirmSchema, CommunityFeedbackCreateSchema, CommunityFeedbackDiagnosticEntrySchema, CommunityFeedbackDiagnosticsSchema, CommunityFeedbackDigestSchema, CommunityFeedbackDraftIdSchema, CommunityFeedbackDraftInputSchema, CommunityFeedbackDraftSchema, CommunityFeedbackDraftStateSchema, CommunityFeedbackDraftUpdateSchema, CommunityFeedbackEventDataSchema, CommunityFeedbackEventSchema, CommunityFeedbackExcerptSchema, CommunityFeedbackExtensionDiagnosticSchema, CommunityFeedbackIdSchema, CommunityFeedbackItemSchema, CommunityFeedbackKindSchema, CommunityFeedbackLabelsSchema, CommunityFeedbackLastPayloadSchema, CommunityFeedbackLinkSchema, CommunityFeedbackListSchema, CommunityFeedbackLocalListSchema, CommunityFeedbackMessageInputSchema, CommunityFeedbackMessageSchema, CommunityFeedbackPayloadSchema, CommunityFeedbackRefSchema, CommunityFeedbackReopenSchema, CommunityFeedbackSchema, CommunityFeedbackSettingsSchema, CommunityFeedbackSettingsUpdateSchema, CommunityFeedbackSnapshotSchema, CommunityFeedbackStatusSchema, CommunityFeedbackSummarySchema, CommunityFeedbackSupplementSchema, CommunityFeedbackTargetSchema, CommunityFeedbackTransitionSchema, CommunityFeedbackVisibilitySchema, CommunityFeedbackWithdrawSchema, CommunityInstalledItemSchema, CommunityInstalledSchema, CommunityListingInputSchema, CommunityMyExtensionSchema, CommunityMyPersonaSchema, CommunityMyPersonasSchema, CommunityPermissionItemSchema, CommunityPersonaDetailSchema, CommunityPersonaIdSchema, CommunityPersonaReviewStatusSchema, CommunityPersonaRevisionIdSchema, CommunityPersonaSummarySchema, CommunityRatingSchema, CommunityReleaseIdSchema, CommunityReleaseSchema, CommunityReviewReportSchema, CommunityReviewStatusSchema, CommunitySourceSchema, CommunityStatusSchema, CommunitySyncItemSchema, CommunitySyncSchema, ConfigSchemaDocumentSchema, ConfigSchemaMetaSchema, ConfigSchemaNodeSchema, ConnectionEventIdSchema, ConnectionIdSchema, ConnectionPanelRoleSchema, ConnectionTestResultSchema, DEFAULT_CHANNEL_CONTEXT_POLICY, DEFAULT_MESSAGE_PACING, DEFAULT_SUB_CONVERSATION_RETENTION, DshCredentialRefSchema, DshCredentialViewSchema, DshCredentialsChangedSseDataSchema, DshNxtHostUiSchema, DshPluginCatalogEntrySchema, DshPluginEntryIdSchema, DshPluginOperationSseDataSchema, DshPluginPackageIdSchema, DshSettingsChangedSseDataSchema, DshSettingsMutationRequestSchema, DshSettingsNamespaceSchema, DshSettingsPathOperationSchema, DshSettingsPathSchema, DynamicChangedSseDataSchema, DynamicClientApprovalPolicySchema, EMPTY_CONFIG_SCHEMA, EMPTY_EXTENSION_PERMISSIONS, EMPTY_EXTENSION_UI_CONTRIBUTIONS, EXTENSION_ASSET_LIBRARY_DEFAULT_QUOTA_BYTES, EXTENSION_ASSET_LIBRARY_MAX_QUOTA_BYTES, EXTENSION_CONTEXT_DYNAMIC_MAX_CHARS, EXTENSION_CONTEXT_STATIC_MAX_CHARS, EXTENSION_DATA_HOOK_PERMISSIONS, EXTENSION_GOVERNANCE_SDK_LEVEL, EXTENSION_INBOUND_HOOK_MAX_TIMEOUT_MS, EXTENSION_INDEX_MAX_FILTERS, EXTENSION_INDEX_MAX_TEXT_FIELDS, EXTENSION_JOB_MAX_RUNTIME, EXTENSION_LLM_MAX_CALLS_PER_TURN, EXTENSION_LLM_MAX_OUTPUT_TOKENS, EXTENSION_MODEL_MAX_CALLS_PER_MINUTE, EXTENSION_PROVIDES, EXTENSION_SDK_BASE_LEVEL, EXTENSION_SDK_LEVEL, EXTENSION_SDK_RELEASES, EXTENSION_STORAGE_DEFAULT_QUOTA_BYTES, EXTENSION_STORAGE_MAX_QUOTA_BYTES, EXTENSION_STORAGE_SCOPES, EpisodeHandoffIdSchema, EpisodeIdSchema, ExtensionActivationTransitionSchema, ExtensionAssetLibraryCapabilitySchema, ExtensionAssetsCapabilitySchema, ExtensionCapabilitiesSchema, ExtensionConfigDeclarationSchema, ExtensionContextContributionSchema, ExtensionDataMigrationInputSchema, ExtensionDataPackageInspectionSchema, ExtensionDataPreviewSchema, ExtensionDataSourceSchema, ExtensionDataStateSchema, ExtensionDeclaredJobSchema, ExtensionIdSchema, ExtensionImportInspectionSchema, ExtensionInboundHookCapabilitySchema, ExtensionIndexCapabilitySchema, ExtensionIndexCollectionSchema, ExtensionJobsCapabilitySchema, ExtensionLayeredConfigSchema, ExtensionLineageNodeSchema, ExtensionLineageSchema, ExtensionLlmCapabilitySchema, ExtensionMcpCapabilitySchema, ExtensionMcpServerNameSchema, ExtensionMcpServerSchema, ExtensionMcpValueSchema, ExtensionModelsCapabilitySchema, ExtensionNetworkCapabilitySchema, ExtensionNetworkDomainSchema, ExtensionPanelAnchorSchema, ExtensionPanelDeclarationSchema, ExtensionPermissionRequirementSchema, ExtensionPermissionsSchema, ExtensionPlatformCapabilitySchema, ExtensionProvideSchema, ExtensionRequestSchema, ExtensionRequiresSchema, ExtensionRevisionIdSchema, ExtensionStorageCapabilitySchema, ExtensionStorageScopeSchema, ExtensionUiContributionsSchema, GithubCliAvailabilitySchema, HOST_PAGE_DEFAULT_RAIL_ORDER, HOST_UI_KIT_COMPONENT_NAMES, HostApiContracts, HostApiErrorSchema, HostConnectionEventSchema, HostIconNameSchema, HostLayerCapabilitiesSchema, HostPageContributionSchema, HostPageIconSchema, HostSnapshotMessageSchema, HostSnapshotSchema, HostSseEventSchema, HostSseStatusDataSchema, HostSyncCursorSchema, HostUiKitComponentNameSchema, HostUiNavigationGroupSchema, HostUiNavigationItemSchema, HostUiNavigationModelSchema, HostUiNetworkOriginSchema, HostUiOwnerSchema, HostUiPageEntrySchema, HostUiPageGeometryEvidenceSchema, HostUiPageInstanceIdSchema, HostUiPagePreferencesSchema, HostUiPermissionDeclarationSchema, HostUiPermissionSchema, HostUpgradeSummarySchema, INSECURE_HTTP_MANAGEMENT_PAIR_PROOF_PREFIX, ImageUnderstandingPolicyApiSchema, InsecureHttpManagementChallengeResponseSchema, InstanceDescriptorSchema, InstanceDescriptorWireSchema, JsonValueSchema, LlmDiscoveredModelSchema, LlmModelInputModalitiesSchema, LlmProviderCredentialSchema, LlmProviderModelSchema, LlmProviderSettingsSchema, LlmProviderTestResultSchema, LlmProviderViewSchema, LocalGithubLoginSchema, LogicalMessageIdSchema, MANAGEMENT_PAIR_PROOF_PREFIX, ManagementChallengeResponseSchema, ManagementDeviceEnrollmentRequestSchema, ManagementDeviceEnrollmentResponseSchema, ManagementDeviceIdSchema, ManagementDeviceViewSchema, ManagementSessionRequestSchema, ManagementSessionResponseSchema, McpServerFormSchema, MessageDeliverySummarySchema, MessagePacingSchema, MessagePacingSettingsSchema, MessagePartSchema, MessagePartsSchema, MessageRendererContributionSchema, NonEmptyMessagePartsSchema, NotificationEventKeySchema, NotificationSettingsViewSchema, OutboundIntentIdSchema, PANEL_ANCHOR_LAYER, PROMPT_DOCUMENT_MAX_PLAIN_TEXT_LENGTH, PROMPT_DOCUMENT_MAX_REFERENCES, PanelContributionSchema, PanelDensitySchema, PhysicalDeliveryIdSchema, PlatformIdentityIdSchema, PlatformUserListResponseSchema, ProductUpdateStatusSchema, PromptDocumentV1Schema, PromptSegmentSchema, RICH_EXTENSION_MAX_BYTES, RetrievalModeSchema, RetrievalStatusSchema, RichExtensionSchema, RichKindSchema, RichTargetUrlSchema, RuntimeCompatibilityDiagnosticSchema, ScheduledTaskIdSchema, ScheduledTaskSchema, ServerInstanceIdSchema, SubConversationIdSchema, SubConversationRetentionSchema, SubConversationSchema, SubConversationSettingsSchema, TestBarkNotificationRequestSchema, ToolViewContributionSchema, ToolViewDensitySchema, UpdateNotificationSettingsRequestSchema, UpgradeBackupModeSchema, UpgradeBackupSettingsSchema, VerificationBrowserAvailabilitySchema, WorkTreeOrderSchema, activityDurationMs, agentPermissionDeclaration, buildHostApiContractPath, buildHostApiPath, commandNameOf, commandUsage, communityPersonaReviewLabel, communityPublisherLabel, communityReviewLabel, configDescription, configFieldKind, configFields, configSchema, configSecretKeys, extensionCapabilitiesExpand, extensionSdkVersion, formatLogMessage, hostLayerAsCapabilities, hostLogDebugLeaseSchema, hostLogDebugRequestSchema, hostLogEntrySchema, hostLogLevelSchema, hostLogPageSchema, hostLogQuerySchema, hostLogScopeSchema, hostLogSettingsSchema, hostLogSettingsUpdateSchema, hostLogSourceKindSchema, hostLogSourceSchema, hostLogStatusSchema, hostLogStreamEventSchema, hostPageRailOrder, hostPermissionDeclaration, insecureHttpManagementPairProofMessage, managementPairProofMessage, mcpSecretFields, messagePartAssetId, messagePartAssetIds, messagePartImageAssetIds, messagePartsSearchText, normalizePromptDocument, parseCommandArguments, parseConfigValue, parseJsonValue, parseMessageParts, promptDocumentFromText, promptDocumentPlainText, recognizeCommand, requiredExtensionSdkLevel, richPartContextText, summarizeExtensionCapabilities, tokenizeCommand, undeliveredCommandReplies, validateConfigValue };
+export { ACTIVITY_MAX_BUCKETS, ACTIVITY_MAX_WINDOW_MS, ACTIVITY_MIN_BUCKET_MS, ActivityQuerySchema, AdapterActivityKeySchema, AddLinkedAccountRequestSchema, AdministratorSchema, AdmissionIdSchema, AgentAliasesSchema, AgentAppearanceSchema, AgentCompactionModelChoiceSchema, AgentCompactionPolicySchema, AgentFallbackModelsSchema, AgentIdSchema, AgentRevisionChangedFieldSchema, AgentRevisionHistorySchema, AgentRevisionIdSchema, AgentSubConversationModelsSchema, AssetIdSchema, AttentionItemSchema, AttentionListSchema, AuthoringAttemptIdSchema, AuthoringTaskIdSchema, BoundCredentialsSchema, CHANNEL_COMPOSER_MAX_ATTACHMENTS, CHANNEL_COMPOSER_MAX_BYTES, CHANNEL_UNREAD_COUNT_CAP, COMMAND_DEFAULT_TIMEOUT_SECONDS, COMMAND_MAX_PROGRESS_REPLIES, COMMAND_MAX_TIMEOUT_SECONDS, COMMUNITY_EXTENSION_SORTS, COMMUNITY_FEEDBACK_STATUSES, COMMUNITY_FEEDBACK_STATUS_LABELS, COMMUNITY_LISTING_LIMITS, COMMUNITY_OFFICIAL_HANDLE, COMMUNITY_PERSONA_AVATAR_MAX_BYTES, COMMUNITY_PERSONA_AVATAR_TYPES, COMMUNITY_PERSONA_MAX_LENGTH, COMMUNITY_RATING_BADGES, COMMUNITY_RATING_BADGE_LIMIT, COMMUNITY_RATING_DIMENSIONS, COMMUNITY_RATING_DIMENSION_LABELS, COMMUNITY_REVIEWER_NAME, COMMUNITY_REVIEW_DIMENSION_LABELS, COMMUNITY_REVIEW_STATUSES, CONFIG_SCHEMA_MAX_BYTES, CREDENTIAL_DESCRIPTION_MAX_CHARS, CREDENTIAL_NAME_MAX_CHARS, CREDENTIAL_REDACTABLE_MIN_CHARS, CREDENTIAL_VALUE_MAX_CHARS, ChannelActivitySeriesSchema, ChannelActivitySummarySchema, ChannelContextPolicySchema, ChannelContextPolicyViewSchema, ChannelEventIdSchema, ChannelFactSseDataSchema, ChannelFactSseItemSchema, ChannelIdSchema, ChannelListViewSchema, ChannelMemberIdSchema, ChannelMemberNotesViewSchema, ChannelMemoryActivitySchema, ChannelPendingContextSchema, ChannelPromptViewSchema, ChannelRuntimeCacheSampleSchema, ChannelRuntimeCacheSchema, ChannelRuntimeContextSchema, ChannelRuntimeInputSchema, ChannelRuntimeOccupancySchema, ChannelRuntimePerformanceSampleSchema, ChannelRuntimePerformanceSchema, ChannelRuntimePhaseSchema, ChannelRuntimeProjectionSchema, ChannelRuntimeSseDataSchema, ChannelRuntimeStepSchema, ChannelRuntimeToolSchema, ChannelRuntimeTurnSchema, ChannelRuntimeUsageSchema, ClientNotificationFeedResponseSchema, ClientNotificationSchema, CodeRunAvailabilitySchema, CommandAccountUsageSchema, CommandCatalogEntrySchema, CommandDefinitionSchema, CommandExecutionIdentitySchema, CommandExecutionRecordSchema, CommandParameterSchema, CommandPermissionSchema, CommandPolicySchema, CommandReplySchema, CommandResultSchema, CommunityAccountSchema, CommunityEndpointSchema, CommunityEnvironmentSchema, CommunityExtensionDetailSchema, CommunityExtensionSortSchema, CommunityExtensionSummarySchema, CommunityFeedbackAffectedSchema, CommunityFeedbackChangesSchema, CommunityFeedbackConfirmSchema, CommunityFeedbackCreateSchema, CommunityFeedbackDiagnosticEntrySchema, CommunityFeedbackDiagnosticsSchema, CommunityFeedbackDigestSchema, CommunityFeedbackDraftIdSchema, CommunityFeedbackDraftInputSchema, CommunityFeedbackDraftSchema, CommunityFeedbackDraftStateSchema, CommunityFeedbackDraftUpdateSchema, CommunityFeedbackEventDataSchema, CommunityFeedbackEventSchema, CommunityFeedbackExcerptSchema, CommunityFeedbackExtensionDiagnosticSchema, CommunityFeedbackIdSchema, CommunityFeedbackItemSchema, CommunityFeedbackKindSchema, CommunityFeedbackLabelsSchema, CommunityFeedbackLastPayloadSchema, CommunityFeedbackLinkSchema, CommunityFeedbackListSchema, CommunityFeedbackLocalListSchema, CommunityFeedbackMessageInputSchema, CommunityFeedbackMessageSchema, CommunityFeedbackPayloadSchema, CommunityFeedbackRefSchema, CommunityFeedbackReopenSchema, CommunityFeedbackSchema, CommunityFeedbackSettingsSchema, CommunityFeedbackSettingsUpdateSchema, CommunityFeedbackSnapshotSchema, CommunityFeedbackStatusSchema, CommunityFeedbackSummarySchema, CommunityFeedbackSupplementSchema, CommunityFeedbackTargetSchema, CommunityFeedbackTransitionSchema, CommunityFeedbackVisibilitySchema, CommunityFeedbackWithdrawSchema, CommunityFreshnessSchema, CommunityInstalledItemSchema, CommunityInstalledSchema, CommunityListingInputSchema, CommunityMyExtensionSchema, CommunityMyPersonaSchema, CommunityMyPersonasSchema, CommunityPermissionItemSchema, CommunityPersonaDetailSchema, CommunityPersonaIdSchema, CommunityPersonaReviewStatusSchema, CommunityPersonaRevisionIdSchema, CommunityPersonaSummarySchema, CommunityRatingSchema, CommunityReleaseIdSchema, CommunityReleaseSchema, CommunityReviewReportSchema, CommunityReviewStatusSchema, CommunitySourceSchema, CommunityStatusSchema, CommunitySyncItemSchema, CommunitySyncSchema, CompactionSettingsSchema, ConfigSchemaDocumentSchema, ConfigSchemaMetaSchema, ConfigSchemaNodeSchema, ConnectionEventIdSchema, ConnectionIdSchema, ConnectionPanelRoleSchema, ConnectionTestResultSchema, CreateCredentialRequestSchema, CredentialAgentScopeSchema, CredentialBindingsRequestSchema, CredentialConsumerKindSchema, CredentialDescriptionSchema, CredentialDomainsSchema, CredentialEnvNameSchema, CredentialIdSchema, CredentialNameSchema, CredentialRequestViewSchema, CredentialUsageSchema, CredentialUseSchema, CredentialUsersSchema, CredentialUsesViewSchema, CredentialValueSchema, CredentialViewSchema, CredentialsViewSchema, DEFAULT_CHANNEL_CONTEXT_POLICY, DEFAULT_COMPACTION_SETTINGS, DEFAULT_MESSAGE_PACING, DEFAULT_MODEL_FALLBACK_SETTINGS, DEFAULT_SUB_CONVERSATION_RETENTION, DshCredentialRefSchema, DshCredentialViewSchema, DshCredentialsChangedSseDataSchema, DshNxtHostUiSchema, DshPluginCatalogEntrySchema, DshPluginEntryIdSchema, DshPluginOperationSseDataSchema, DshPluginPackageIdSchema, DshSettingsChangedSseDataSchema, DshSettingsMutationRequestSchema, DshSettingsNamespaceSchema, DshSettingsPathOperationSchema, DshSettingsPathSchema, DynamicChangedSseDataSchema, DynamicClientApprovalPolicySchema, EMPTY_CONFIG_SCHEMA, EMPTY_EXTENSION_PERMISSIONS, EMPTY_EXTENSION_UI_CONTRIBUTIONS, EXTENSION_ASSET_LIBRARY_DEFAULT_QUOTA_BYTES, EXTENSION_ASSET_LIBRARY_MAX_QUOTA_BYTES, EXTENSION_CONTEXT_DYNAMIC_MAX_CHARS, EXTENSION_CONTEXT_STATIC_MAX_CHARS, EXTENSION_DATA_HOOK_PERMISSIONS, EXTENSION_GOVERNANCE_SDK_LEVEL, EXTENSION_INBOUND_HOOK_MAX_TIMEOUT_MS, EXTENSION_INDEX_MAX_FILTERS, EXTENSION_INDEX_MAX_TEXT_FIELDS, EXTENSION_JOB_MAX_RUNTIME, EXTENSION_LLM_MAX_CALLS_PER_TURN, EXTENSION_LLM_MAX_OUTPUT_TOKENS, EXTENSION_MODEL_MAX_CALLS_PER_MINUTE, EXTENSION_OUTBOUND_MAX_TIMEOUT_MS, EXTENSION_OUTBOUND_SDK_LEVEL, EXTENSION_PROVIDES, EXTENSION_SDK_BASE_LEVEL, EXTENSION_SDK_LEVEL, EXTENSION_SDK_RELEASES, EXTENSION_STORAGE_DEFAULT_QUOTA_BYTES, EXTENSION_STORAGE_MAX_QUOTA_BYTES, EXTENSION_STORAGE_SCOPES, EpisodeHandoffIdSchema, EpisodeIdSchema, ExtensionActivationTransitionSchema, ExtensionAssetLibraryCapabilitySchema, ExtensionAssetsCapabilitySchema, ExtensionCapabilitiesSchema, ExtensionConfigDeclarationSchema, ExtensionConfigVersionSchema, ExtensionConfigVersionSourceSchema, ExtensionContextContributionSchema, ExtensionDataMigrationInputSchema, ExtensionDataPackageInspectionSchema, ExtensionDataPreviewSchema, ExtensionDataSourceSchema, ExtensionDataStateSchema, ExtensionDeclaredJobSchema, ExtensionIdSchema, ExtensionImportInspectionSchema, ExtensionInboundHookCapabilitySchema, ExtensionIndexCapabilitySchema, ExtensionIndexCollectionSchema, ExtensionJobsCapabilitySchema, ExtensionLayeredConfigSchema, ExtensionLineageNodeSchema, ExtensionLineageSchema, ExtensionLlmCapabilitySchema, ExtensionMcpCapabilitySchema, ExtensionMcpServerNameSchema, ExtensionMcpServerSchema, ExtensionMcpValueSchema, ExtensionModelsCapabilitySchema, ExtensionNetworkCapabilitySchema, ExtensionNetworkDomainSchema, ExtensionOutboundCapabilitySchema, ExtensionPanelAnchorSchema, ExtensionPanelDeclarationSchema, ExtensionPermissionRequirementSchema, ExtensionPermissionsSchema, ExtensionPlatformCapabilitySchema, ExtensionProvideSchema, ExtensionRequestSchema, ExtensionRequiresSchema, ExtensionRevisionIdSchema, ExtensionStorageCapabilitySchema, ExtensionStorageScopeSchema, ExtensionUiContributionsSchema, FALLBACK_MODEL_LIMIT, GithubCliAvailabilitySchema, HOST_PAGE_DEFAULT_RAIL_ORDER, HOST_UI_KIT_COMPONENT_NAMES, HostApiContracts, HostApiErrorSchema, HostConnectionEventSchema, HostIconNameSchema, HostLayerCapabilitiesSchema, HostPageContributionSchema, HostPageIconSchema, HostSnapshotMessageSchema, HostSnapshotSchema, HostSseEventSchema, HostSseStatusDataSchema, HostSyncCursorSchema, HostUiKitComponentNameSchema, HostUiNavigationGroupSchema, HostUiNavigationItemSchema, HostUiNavigationModelSchema, HostUiNetworkOriginSchema, HostUiOwnerSchema, HostUiPageEntrySchema, HostUiPageGeometryEvidenceSchema, HostUiPageInstanceIdSchema, HostUiPagePreferencesSchema, HostUiPermissionDeclarationSchema, HostUiPermissionSchema, HostUpgradeSummarySchema, INSECURE_HTTP_MANAGEMENT_PAIR_PROOF_PREFIX, ImageUnderstandingPolicyApiSchema, InsecureHttpManagementChallengeResponseSchema, InstanceDescriptorSchema, InstanceDescriptorWireSchema, JsonValueSchema, LinkedAccountIdSchema, LinkedAccountMethodSchema, LinkedAccountPlatformIdSchema, LinkedAccountPlatformToolSchema, LinkedAccountTokenSourceSchema, LinkedAccountUseSchema, LinkedAccountUsesViewSchema, LinkedAccountViewSchema, LinkedAccountsViewSchema, LlmDiscoveredModelSchema, LlmModelInputModalitiesSchema, LlmModelReasoningEffortsSchema, LlmProviderCredentialSchema, LlmProviderModelSchema, LlmProviderSettingsSchema, LlmProviderTestResultSchema, LlmProviderViewSchema, LocalGithubLoginSchema, LogicalMessageIdSchema, MANAGEMENT_PAIR_PROOF_PREFIX, ManagementChallengeResponseSchema, ManagementDeviceEnrollmentRequestSchema, ManagementDeviceEnrollmentResponseSchema, ManagementDeviceIdSchema, ManagementDeviceViewSchema, ManagementSessionRequestSchema, ManagementSessionResponseSchema, McpServerFormSchema, MessageDeliverySummarySchema, MessagePacingSchema, MessagePacingSettingsSchema, MessagePartSchema, MessagePartsSchema, MessageRendererContributionSchema, ModelFallbackReasonSchema, ModelFallbackSettingsSchema, ModelProviderAccessSchema, NO_SUB_CONVERSATION_MODELS, NonEmptyMessagePartsSchema, NotificationEventKeySchema, NotificationSettingsViewSchema, OutboundIntentIdSchema, PANEL_ANCHOR_LAYER, PROMPT_DOCUMENT_MAX_PLAIN_TEXT_LENGTH, PROMPT_DOCUMENT_MAX_REFERENCES, PanelContributionSchema, PanelDensitySchema, PhysicalDeliveryIdSchema, PlatformIdentityIdSchema, PlatformUserListResponseSchema, ProductUpdateStatusSchema, PromptDocumentV1Schema, PromptSegmentSchema, RESPONSE_TIMING_DEFAULTS, RESPONSE_TIMING_LIMITS, RESPONSE_WAIT_MIN_QUIET_SECONDS, RICH_EXTENSION_MAX_BYTES, RemoveCredentialRequestSchema, RemoveCredentialResultSchema, RemoveLinkedAccountRequestSchema, RemoveLinkedAccountResultSchema, ReplaceCredentialValueRequestSchema, ReplaceLinkedAccountTokenRequestSchema, ResponseTimingSettingsSchema, RetrievalModeSchema, RetrievalStatusSchema, RichExtensionSchema, RichKindSchema, RichTargetUrlSchema, RuntimeCompatibilityDiagnosticSchema, SUB_CONVERSATION_MAIN_MODEL, SUB_CONVERSATION_MODEL_LIMITS, ScheduledTaskIdSchema, ScheduledTaskSchema, ServerInstanceIdSchema, SetModelProviderAccessRequestSchema, SubConversationIdSchema, SubConversationRetentionSchema, SubConversationSchema, SubConversationSettingsSchema, SubscriptionStatusSchema, TestBarkNotificationRequestSchema, ToolViewContributionSchema, ToolViewDensitySchema, UNBOUND_CHANNEL_GROUP_ID, UpdateCredentialRequestSchema, UpdateNotificationSettingsRequestSchema, UpgradeBackupModeSchema, UpgradeBackupSettingsSchema, VerificationBrowserAvailabilitySchema, WorkTreeOrderSchema, activityDurationMs, adminOnlyConfigKeys, agentPermissionDeclaration, buildHostApiContractPath, buildHostApiPath, commandNameOf, commandUsage, communityPersonaReviewLabel, communityPublisherLabel, communityReviewLabel, configDescription, configFieldKind, configFieldLevel, configFields, configSchema, configSecretKeys, credentialRequestRoute, extensionCapabilitiesExpand, extensionSdkVersion, formatLogMessage, hostLayerAsCapabilities, hostLogDebugLeaseSchema, hostLogDebugRequestSchema, hostLogEntrySchema, hostLogLevelSchema, hostLogPageSchema, hostLogQuerySchema, hostLogScopeSchema, hostLogSettingsSchema, hostLogSettingsUpdateSchema, hostLogSourceKindSchema, hostLogSourceSchema, hostLogStatusSchema, hostLogStreamEventSchema, hostPageRailOrder, hostPermissionDeclaration, insecureHttpManagementPairProofMessage, managementPairProofMessage, mcpSecretFields, messagePartAssetId, messagePartAssetIds, messagePartImageAssetIds, messagePartsSearchText, normalizePromptDocument, outboundProcessesBeforeSend, parseCommandArguments, parseConfigValue, parseJsonValue, parseMessageParts, promptDocumentFromText, promptDocumentPlainText, recognizeCommand, requiredExtensionSdkLevel, resolveResponseTiming, richPartContextText, summarizeExtensionCapabilities, tokenizeCommand, undeliveredCommandReplies, validateConfigValue };
 
 //# sourceMappingURL=index.mjs.map