@qwen-code/web-shell 0.25.4-preview.1 → 0.26.0

package/dist/types/components/managed/generated/managed-agent-api.d.ts

@@ -31,6 +31,23 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/api/agent/web-shell/v1/sessions/rename": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /** @description Synchronously rename a Session through the same durable, fenced title service as public PATCH. HTTP 200 confirms persistence; an unavailable or unknown Harness outcome remains an error and is never a pending success. Workspace-bound fresh renames require current OPERATOR access and the original binding's execution facts; unbound Sessions use the existing tenant-scoped rename authorization. An active Turn does not itself block rename. Reuse the same idempotency key only for the same Session and title; completed replay returns the Session's current persisted title without another Harness rename, including the existing last-visible result after deletion. Fresh-rename capability changes do not preclude authorized replay. The result title is authoritative and can differ from the requested title when a later rename already completed. */
+        post: operations["webShellRenameSession"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/api/agent/web-shell/v1/transcript/query": {
         parameters: {
             query?: never;
@@ -74,7 +91,7 @@ export interface paths {
         };
         get?: never;
         put?: never;
-        /** @description Maps workspaceId/cwdRelative to public Workspace selection without using environmentId or absolute cwd. Shares G0's opt-in initial file-tool Turn admission with public Session creation: the server-selected profile for the built-in qwen-code agent, and the profile selected by a stored definition's single allowlisted hosted_profile tools entry for a definition-pinned Session. Newly bound qwen-code Sessions, including empty creation, persist hosted-workspace-shell/1 with mandatory default/auto-edit approval when the Shell deployment opt-in is enabled; otherwise they persist hosted-workspace-files/1 with the configured file approval mode. The switch does not override a stored AgentDefinition's compiled profile or approval mode. Public callers cannot select the built-in profile. Any caller holding the OPERATOR role may submit later Turns and rename the Session under the same opt-in, while the Workspace registry row stays ACTIVE and still backs the binding, the actor recorded by the Workspace create command keeps OPERATOR or above, and the Session is active and undeleted and is either a qwen-code Session on the frozen execution profile or pinned to a stored definition; Workspace close follows its separate close capability and lifecycle admission; the same caller may cancel a running Turn (its delivery re-checks no grant it needs survives the cancellation), and the Session's own liveness keeps OPERATOR access even when its Workspace's background-exit observation closes some other bound Session; cancel is always allowed for its own running Turn even outside the Workspace files opt-in. A definition-pinned Session keeps its pinned revision's tool profile, model and instructions for its whole life, and a replay of the create command reuses the original pin; a WebShell Session inherits its Workspace's default Workspace selection when the request omits one. Shell Sessions additionally require the Shell opt-in and valid persisted approval for fresh Turns; disabling only Shell admission preserves original-key replay and accepted approvals and cancellation while Workspace files remain enabled and persisted approval remains valid. The public Shell tool list does not include the child agent tool. Invalid approval or files-off can refuse attachment. Public Shell close, archive, unarchive and delete stay unavailable, including protocol-0. Fresh Shell sending also requires foregroundShell=true; workspaceTurns advertises submit/rename permission and is not sufficient Shell Turn admission. */
+        /** @description Maps workspaceId/cwdRelative to public Workspace selection without using environmentId or absolute cwd. Shares G0's opt-in initial file-tool Turn admission with public Session creation: the server-selected profile for the built-in qwen-code agent, and the profile selected by a stored definition's single allowlisted hosted_profile tools entry for a definition-pinned Session. Newly bound qwen-code Sessions, including empty creation, persist hosted-workspace-shell/1 with mandatory default/auto-edit approval when the Shell deployment opt-in is enabled; otherwise they persist hosted-workspace-files/1 with the configured file approval mode. The switch does not override a stored AgentDefinition's compiled profile or approval mode. Public callers cannot select the built-in profile. Any caller holding the OPERATOR role may submit later Turns and rename the Session under the same opt-in, while the Workspace registry row stays ACTIVE and still backs the binding, the actor recorded by the Workspace create command keeps OPERATOR or above, and the Session is active and undeleted and is either a qwen-code Session on the frozen execution profile or pinned to a stored definition; Workspace close follows its separate close capability and lifecycle admission; the same caller may cancel a running Turn (its delivery re-checks no grant it needs survives the cancellation), and the Session's own liveness keeps OPERATOR access even when its Workspace's background-exit observation closes some other bound Session; cancel is always allowed for its own running Turn even outside the Workspace files opt-in. A definition-pinned Session keeps its pinned revision's tool profile, model and instructions for its whole life, and a replay of the create command reuses the original pin; a WebShell Session inherits its Workspace's default Workspace selection when the request omits one. Shell Sessions additionally require the Shell opt-in and valid persisted approval for fresh Turns; disabling only Shell admission preserves original-key replay and accepted approvals and cancellation while Workspace files remain enabled and persisted approval remains valid. The public Shell tool list does not include the child agent tool. Invalid approval or files-off can refuse attachment. Public Shell close, archive, unarchive and delete stay unavailable, including protocol-0. Fresh Shell sending also requires foregroundShell=true; workspaceTurns alone is not sufficient Shell Turn admission. Manual rename uses the independent rename capability. */
         post: operations["webShellCreateSession"];
         delete?: never;
         options?: never;
@@ -506,7 +523,7 @@ export interface paths {
         };
         get?: never;
         put?: never;
-        /** @description Change the next-user-Turn policy of an idle eligible Workspace Session: built-in qwen-code or a stored AgentDefinition on exactly hosted-workspace-files/1 or hosted-workspace-shell/1,/2. Requires its recorded owner, current OPERATOR or OWNER access and Session-specific Harness feature support. Changes are revision-checked and actor/session-scoped idempotent. Definition creation policy and pins remain immutable. */
+        /** @description Change the execution approval policy of an eligible Workspace Session: built-in qwen-code or a stored AgentDefinition on exactly hosted-workspace-files/1 or hosted-workspace-shell/1,/2. With liveSupported, execution policy changes affect subsequent current-Turn permission checks and permit eligible pending ordinary tool approvals. Otherwise the Session must be idle. Plan changes remain idle-only. Requires its recorded owner, current OPERATOR or OWNER access and Session-specific Harness feature support. Changes are revision-checked and actor/session-scoped idempotent. Definition creation policy and pins remain immutable. */
         post: operations["changeWebShellSessionApproval"];
         delete?: never;
         options?: never;
@@ -599,6 +616,23 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/api/agent/web-shell/v1/session-mcp/query": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /** @description Read the selected Session's sanitized, committed MCP catalog. Requires a trusted actor and Workspace read access. Discovery states describe the published snapshot, not live Runtime health. Does not configure servers, discover capabilities or execute tools, resources or prompts. */
+        post: operations["queryWebShellSessionMcp"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/api/agent/web-shell/v1/session-skills/query": {
         parameters: {
             query?: never;
@@ -676,6 +710,54 @@ export interface paths {
 export type webhooks = Record<string, never>;
 export interface components {
     schemas: {
+        PublicMcpCatalog: {
+            /** @constant */
+            object: "agent.mcp_catalog";
+            /** Format: uuid */
+            session_id: string;
+            servers: components["schemas"]["PublicMcpServerCatalog"][];
+        };
+        PublicMcpServerCatalog: {
+            server_id: string;
+            server_revision: number;
+            /** @description The pinned catalog revision; null while no catalog has been published. */
+            catalog_revision: number | null;
+            tools: components["schemas"]["PublicMcpTool"][];
+            resources: components["schemas"]["PublicMcpResource"][];
+            prompts: components["schemas"]["PublicMcpPrompt"][];
+            discovery: components["schemas"]["PublicMcpDiscovery"];
+        };
+        PublicMcpTool: {
+            name: string;
+            description?: string;
+            input_schema: {
+                [key: string]: unknown;
+            };
+        };
+        PublicMcpResource: {
+            name: string;
+            uri: string;
+            description?: string;
+            mime_type?: string;
+        };
+        PublicMcpPrompt: {
+            name: string;
+            description?: string;
+            arguments?: components["schemas"]["PublicMcpPromptArgument"][];
+        };
+        PublicMcpPromptArgument: {
+            name: string;
+            description?: string;
+            required?: boolean;
+        };
+        PublicMcpDiscovery: {
+            /** @enum {string} */
+            tools: "complete" | "partial" | "failed" | "stale";
+            /** @enum {string} */
+            resources: "complete" | "partial" | "failed" | "stale";
+            /** @enum {string} */
+            prompts: "complete" | "partial" | "failed" | "stale";
+        };
         InputBlock: components["schemas"]["InputTextBlock"] | components["schemas"]["InputFileBlock"] | components["schemas"]["InputImageBlock"];
         PublicArtifact: {
             /** @constant */
@@ -743,6 +825,8 @@ export interface components {
             approvalMode?: "default" | "auto-edit" | "yolo";
             /** @description Persisted public Plan overlay, independent of execution permission. Omission on a change preserves the selected state. */
             planMode?: boolean;
+            /** @description Optional static Skills imported from the enabled management catalog or added explicitly to the pinned AgentDefinition catalog. The merged catalog has unique names, at most 256 entries, 512 KiB per body and 2 MiB compact JSON. Requires session-skills/2; persisted immutably and included in creation idempotency. */
+            skills?: components["schemas"]["SessionCreationSkill"][];
         };
         WebShellSubmitRequest: {
             /** @description Trace correlation only. */
@@ -853,7 +937,7 @@ export interface components {
             /** @default false */
             actions: boolean;
             /**
-             * @description True when the caller may submit later Turns of this Workspace-bound Session or rename it: the deployment enables Workspace files, the caller holds the OPERATOR role on a Workspace registry row whose state is ACTIVE and still backs the Session's binding, the actor recorded by the Workspace create command keeps OPERATOR or above, and the Session is active and undeleted and is either a qwen-code Session or a Session pinned to a stored definition (both on the Workspace's frozen execution profile). Cancelling only aborts work already running, so an OPERATOR caller may cancel a running Turn even when this is false; the capability does not gate cancellation. False for every other caller and for unbound Sessions, which do not use it. Shell Sessions also require foregroundShell=true for fresh sending; workspaceTurns may remain true with Shell admission disabled and is not sufficient Shell Turn admission.
+             * @description True when the caller may submit later Turns of this Workspace-bound Session: the deployment enables Workspace files, the caller holds the OPERATOR role on a Workspace registry row whose state is ACTIVE and still backs the Session's binding, the actor recorded by the Workspace create command keeps OPERATOR or above, and the Session is active and undeleted and is either a qwen-code Session or a Session pinned to a stored definition (both on the Workspace's frozen execution profile). Cancelling only aborts work already running, so an OPERATOR caller may cancel a running Turn even when this is false; the capability does not gate cancellation. False for every other caller and for unbound Sessions, which do not use it. Shell Sessions also require foregroundShell=true for fresh sending; workspaceTurns may remain true with Shell admission disabled and is not sufficient Shell Turn admission. Manual rename uses the independent rename capability.
              * @default false
              */
             workspaceTurns: boolean;
@@ -887,6 +971,11 @@ export interface components {
             approvalModeChange?: boolean;
             /** @description Optional deployment capability; missing means false. */
             inputAttachments?: boolean;
+            /**
+             * @description True for a visible ACTIVE Session when the Harness supports fenced title persistence and is available. Workspace-bound Sessions additionally require Workspace files admission, current OPERATOR access and the original binding's frozen execution facts, independently of approval or fresh Turn sending support. Unbound Sessions use the existing tenant-scoped rename permission. An active Turn does not itself make this false. Missing means false. This advertises fresh rename only; authorized completed original-key replay remains available under the rename service's replay rules.
+             * @default false
+             */
+            rename?: boolean;
         };
         WebShellSessionPage: {
             data: components["schemas"]["WebShellSession"][];
@@ -1032,8 +1121,10 @@ export interface components {
                 workspaceCreation?: boolean;
                 /** @description Supports effective Session policy options and explicit Workspace-bound creation policy. Missing or false means unsupported. */
                 approvalModeSelection?: boolean;
-                /** @description Supports browsing and selecting existing directories on authorized Linux storage; absent means unsupported. */
+                /** @description Supports browsing and selecting existing directories on authorized Linux or macOS storage; absent means unsupported. */
                 workspaceDirectorySelection?: boolean;
+                /** @description Trusted single-user local deployment can browse and import existing host directories without a pre-registered Workspace. Missing or false means unsupported. */
+                localDirectoryImport?: boolean;
             };
             /** @description Same authorized explicit default as default_workspace, including when outside this page; null if absent or not creatable. A non-null default is active and has canCreateSession=true. */
             defaultWorkspace: (components["schemas"]["WebShellWorkspace"] & {
@@ -1427,6 +1518,8 @@ export interface components {
             idempotencyKey: string;
             sourceWorkspaceId?: string;
             cwdRelative?: string;
+            /** @description Absolute execution-host directory. Requires localDirectoryImport; exclusive with Workspace-relative fields. An empty path is allowed only for directory browsing and starts at the host home directory. */
+            localPath?: string;
         };
         WebShellSessionOptionsRequest: {
             agentId: string;
@@ -1440,6 +1533,8 @@ export interface components {
             planModeSupported?: boolean;
             /** @description Optional deployment capability; missing means false. */
             inputAttachments?: boolean;
+            /** @description Optional deployment capability; missing means false. Requires a compatible Harness and durable Session Store. */
+            skillsSupported?: boolean;
         };
         /** @description Safe allowlisted observation for a Workspace-bound Session. Unknown counts are omitted, never estimated. */
         WebShellModelContext: {
@@ -1486,6 +1581,8 @@ export interface components {
             sessionId: string;
         };
         WebShellSessionApproval: {
+            /** @description Execution approval can change during a Turn when true. Missing means idle-only; Plan changes remain idle-only. */
+            liveSupported?: boolean;
             /** @enum {string} */
             approvalMode: "default" | "auto-edit" | "yolo";
             /** Format: int64 */
@@ -1575,6 +1672,9 @@ export interface components {
         WebShellWorkspaceDirectoryQueryRequest: {
             workspaceId: string;
             cwdRelative: string;
+        } | {
+            /** @description Absolute execution-host directory. Requires localDirectoryImport; exclusive with Workspace-relative fields. An empty path is allowed only for directory browsing and starts at the host home directory. */
+            localPath: string;
         };
         InputTextBlock: {
             /** @enum {string} */
@@ -1668,6 +1768,33 @@ export interface components {
             truncated: boolean;
             outputFiles: string[];
         };
+        WebShellRenameRequest: {
+            requestId?: string;
+            sessionId: string;
+            idempotencyKey: string;
+            /** @description The server enforces the bound in UTF-16 code units (Java String.length()), so an astral character counts as two: a title this schema's code-point maxLength accepts can still exceed the server's 256-unit bound and answer 400 invalid_title. */
+            title: string;
+        };
+        WebShellRenameResult: {
+            sessionId: string;
+            /** @description Current persisted title from the confirmed mutation or completed replay. Existing legacy titles can exceed the fresh-title input bound. */
+            title: string;
+            replayed: boolean;
+        };
+        SessionCreationSkill: {
+            /** @description Unique Skill name, at most 128 UTF-8 bytes. */
+            name: string;
+            /** @description At most 4096 UTF-8 bytes. */
+            description: string;
+            /** @description Static instructions, at most 524288 UTF-8 bytes. */
+            body: string;
+            /** @description Canonical POSIX path relative to the Session working directory; defaults to dot. */
+            base_directory?: string;
+            /** @description Whether the model may invoke this Skill; defaults to true. */
+            model_invocable?: boolean;
+            /** @description Whether the user may invoke this Skill; defaults to true. */
+            user_invocable?: boolean;
+        };
     };
     responses: {
         /** @description The authenticated actor belongs to another tenant than X-Qwen-Tenant-Id or has an invalid ID (actor_scope_mismatch, which the tenant filter answers on every /v1/agents/ and WebShell route), or the resource is readable but the actor lacks this operation or the original Action responder permission. Artifact content reads may also return artifact_content_forbidden when the actor cannot read the original bytes. */
@@ -1812,6 +1939,39 @@ export interface operations {
             413: components["responses"]["PayloadTooLarge"];
         };
     };
+    webShellRenameSession: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["WebShellRenameRequest"];
+            };
+        };
+        responses: {
+            /** @description Confirmed persisted Session title, or an authorized completed replay. */
+            200: {
+                headers: {
+                    "X-Request-Id": components["headers"]["RequestId"];
+                    "X-Qwen-Idempotent-Replay": components["headers"]["IdempotentReplay"];
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["WebShellRenameResult"];
+                };
+            };
+            400: components["responses"]["BadRequest"];
+            401: components["responses"]["Unauthorized"];
+            403: components["responses"]["Forbidden"];
+            404: components["responses"]["NotFound"];
+            409: components["responses"]["Conflict"];
+            413: components["responses"]["PayloadTooLarge"];
+            503: components["responses"]["Unavailable"];
+        };
+    };
     webShellTranscript: {
         parameters: {
             query?: never;
@@ -2945,6 +3105,35 @@ export interface operations {
             409: components["responses"]["Conflict"];
         };
     };
+    queryWebShellSessionMcp: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["WebShellSessionRequest"];
+            };
+        };
+        responses: {
+            /** @description Session MCP catalog snapshot. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["PublicMcpCatalog"];
+                };
+            };
+            400: components["responses"]["BadRequest"];
+            401: components["responses"]["Unauthorized"];
+            403: components["responses"]["Forbidden"];
+            404: components["responses"]["NotFound"];
+            413: components["responses"]["PayloadTooLarge"];
+        };
+    };
     queryWebShellSessionSkills: {
         parameters: {
             query?: never;

package/dist/types/components/managed/java-managed-agent-client.d.ts

@@ -45,6 +45,7 @@ export declare class JavaManagedAgentClient {
     constructor(options: JavaManagedAgentClientOptions);
     listSessions(request: Schemas['WebShellListRequest'], signal?: AbortSignal): Promise<JavaAgentSessionPage>;
     getSession(sessionId: string, signal?: AbortSignal): Promise<JavaAgentSession>;
+    renameSession(request: Schemas['WebShellRenameRequest'], signal?: AbortSignal): Promise<Schemas['WebShellRenameResult']>;
     listWorkspaces(request: Schemas['WebShellWorkspaceQueryRequest'], signal?: AbortSignal): Promise<JavaAgentWorkspacePage>;
     getWorkspace(workspaceId: string, signal?: AbortSignal): Promise<{
         workspaceId: string;
@@ -141,6 +142,11 @@ export declare class JavaManagedAgentClient {
     getSessionSkills(sessionId: string, signal?: AbortSignal): Promise<{
         skills: components["schemas"]["WebShellSkill"][];
     }>;
+    getSessionMcp(sessionId: string, signal?: AbortSignal): Promise<{
+        object: "agent.mcp_catalog";
+        session_id: string;
+        servers: components["schemas"]["PublicMcpServerCatalog"][];
+    }>;
     changeModel(request: Schemas['WebShellChangeModelRequest'], signal?: AbortSignal): Promise<{
         sessionId: string;
         modelSelection: components["schemas"]["WebShellModelSelection"];

package/dist/types/components/managed/managed-agent-provider.d.ts

@@ -5,17 +5,21 @@ export type ManagedAgentRuntimeState = 'unknown' | 'starting' | 'ready' | 'faile
 export type ManagedApprovalMode = 'default' | 'auto-edit' | 'yolo';
 export type ManagedInputBlock = components['schemas']['InputBlock'];
 export type ManagedSessionSkills = components['schemas']['WebShellSessionSkills'];
+export type ManagedSessionMcp = components['schemas']['PublicMcpCatalog'];
 export declare function isManagedApprovalMode(value: unknown): value is ManagedApprovalMode;
+export type ManagedSessionSkill = components['schemas']['SessionCreationSkill'];
 export interface ManagedSessionOptions {
     approvalMode: ManagedApprovalMode;
     availableApprovalModes: ManagedApprovalMode[];
     planModeSupported?: boolean;
     inputAttachments?: boolean;
+    skillsSupported?: boolean;
 }
 export interface ManagedSessionApproval extends ManagedSessionOptions {
     approvalRevision: number;
     supported: boolean;
     planMode?: boolean;
+    liveSupported?: boolean;
 }
 export interface ManagedApprovalChangeResult {
     sessionId: string;
@@ -75,6 +79,7 @@ export interface ManagedAgentSessionSummary {
     capabilities: {
         canSend: boolean;
         canCancel: boolean;
+        canRename?: boolean;
         actions?: boolean;
         tasks?: boolean;
         artifacts?: boolean;
@@ -163,6 +168,9 @@ export interface ManagedAgentProvider {
     readonly skills?: {
         list(sessionId: string, options: ManagedAgentRequestOptions): Promise<ManagedSessionSkills>;
     };
+    readonly mcp?: {
+        list(sessionId: string, options: ManagedAgentRequestOptions): Promise<ManagedSessionMcp>;
+    };
     /** Present when the provider can serve Hosted permission Actions. */
     readonly actions?: {
         listPending(sessionId: string, options: ManagedAgentRequestOptions): Promise<ManagedAgentPendingAction[]>;
@@ -233,6 +241,7 @@ export interface ManagedAgentProvider {
             supported: boolean;
             canCreateWorkspace?: boolean;
             canSelectDirectory?: boolean;
+            canImportLocalDirectory?: boolean;
             supportsApprovalModeSelection?: boolean;
         }>;
         get(workspaceId: string, options: ManagedAgentRequestOptions): Promise<ManagedAgentWorkspace>;
@@ -240,10 +249,16 @@ export interface ManagedAgentProvider {
             displayName: string;
             sourceWorkspaceId?: string;
             cwdRelative?: string;
+            localPath?: string;
         }, options: ManagedAgentCommandOptions): Promise<ManagedAgentWorkspace>;
         directories?(request: {
             workspaceId: string;
             cwdRelative: string;
+            localPath?: never;
+        } | {
+            localPath: string;
+            workspaceId?: never;
+            cwdRelative?: never;
         }, options: ManagedAgentRequestOptions): Promise<components['schemas']['WebShellWorkspaceDirectoryPage']>;
         getSessionOptions?(agentId: string, options: ManagedAgentRequestOptions): Promise<ManagedSessionOptions>;
         createEmpty(request: {
@@ -252,6 +267,7 @@ export interface ManagedAgentProvider {
             cwdRelative: string;
             approvalMode?: ManagedApprovalMode;
             planMode?: boolean;
+            skills?: ManagedSessionSkill[];
         }, options: ManagedAgentCommandOptions): Promise<{
             sessionId: string;
         }>;
@@ -263,6 +279,7 @@ export interface ManagedAgentProvider {
             input?: ManagedInputBlock[];
             approvalMode?: ManagedApprovalMode;
             planMode?: boolean;
+            skills?: ManagedSessionSkill[];
         }, options: ManagedAgentCommandOptions): Promise<{
             sessionId: string;
         }>;
@@ -276,6 +293,9 @@ export interface ManagedAgentProvider {
         nextCursor?: string;
     }>;
     getSession(sessionId: string, options: ManagedAgentRequestOptions): Promise<ManagedAgentSessionSummary>;
+    renameSession?(sessionId: string, displayName: string, options: ManagedAgentCommandOptions): Promise<{
+        displayName: string;
+    }>;
     getTranscript(sessionId: string, options: ManagedAgentRequestOptions & {
         before?: string;
         limit?: number;

package/dist/types/components/managed/managed-creation-skills.d.ts

@@ -0,0 +1,7 @@
+import type { ManagedSessionSkill, ManagedSessionSkills } from './managed-agent-provider';
+export interface ManagedCreationSkillsSource {
+    workspaceCwd: string;
+    list(signal: AbortSignal): Promise<ManagedSessionSkills['skills']>;
+    load(signal: AbortSignal): Promise<ManagedSessionSkill[]>;
+}
+export declare function isManagedSessionSkills(value: unknown): value is ManagedSessionSkill[];

package/dist/types/components/managed/use-managed-mcp.d.ts

@@ -0,0 +1,3 @@
+import type { AtMentionWorkspaceActions } from '../../hooks/useAtMentionSources';
+import type { ManagedAgentProvider } from './managed-agent-provider';
+export declare function useManagedMcp(provider: ManagedAgentProvider, clientId: string, sessionId: string | undefined): AtMentionWorkspaceActions | undefined;

package/dist/types/components/managed/use-managed-session-rename.d.ts

@@ -0,0 +1,13 @@
+import type { ManagedAgentProvider, ManagedAgentSessionSummary } from './managed-agent-provider';
+export declare function useManagedSessionRename(provider: ManagedAgentProvider, clientId: string, sessionId: string | undefined, summary: ManagedAgentSessionSummary | undefined, interactive: boolean, onRenamed: (displayName: string) => void): {
+    supported: boolean;
+    editor: {
+        value: string;
+        busy: boolean;
+        error?: string;
+    } | undefined;
+    open(): void;
+    close(): void;
+    setValue(value: string): void;
+    submit(displayName: string): Promise<void>;
+};

package/dist/types/components/managed/use-managed-session.d.ts

@@ -16,6 +16,7 @@ export declare function useManagedSession(provider: ManagedAgentProvider, client
     loadOlder: () => Promise<void>;
     reload: () => void;
     refreshSummary: (signal?: AbortSignal) => Promise<ManagedAgentSessionSummary | undefined>;
+    applyTitle: (id: string, title: string) => void;
     sessionId?: string;
     summary?: ManagedAgentSessionSummary;
     events: ManagedAgentSessionEvent[];

package/dist/types/components/managed/use-managed-skills.d.ts

@@ -1,12 +1,19 @@
+import type { ManagedCreationSkillsSource } from './managed-creation-skills';
 import type { ManagedAgentProvider } from './managed-agent-provider';
-export declare function useManagedSkills(provider: ManagedAgentProvider, clientId: string, sessionId: string | undefined): {
+export declare function useManagedSkills(provider: ManagedAgentProvider, clientId: string, sessionId: string | undefined, creationSkills?: ManagedCreationSkillsSource): {
     supported: boolean;
     skills: {
         name: string;
         description: string;
     }[];
+    commands: {
+        name: string;
+        description: string;
+        source: string;
+        displayCategory: "skill";
+    }[];
     loading: boolean;
     loaded: boolean;
     error: boolean;
-    onOpenChange: import("react").Dispatch<import("react").SetStateAction<boolean>>;
+    onOpenChange: (next: boolean) => void;
 };

package/dist/types/components/messages/McpApp.d.ts

@@ -3,6 +3,7 @@ type SandboxResource = Parameters<AppBridge['sendSandboxResourceReady']>[0];
 type AppToolResult = Parameters<AppBridge['sendToolResult']>[0];
 export interface McpAppDisplay {
     type: 'mcp_app';
+    requiredFeature?: 'generated-ui';
     serverName: string;
     resourceUri: string;
     html: string;
@@ -15,6 +16,9 @@ export interface McpAppDisplay {
 export declare function getMcpAppDisplay(value: unknown): McpAppDisplay | undefined;
 export declare function resolveMcpAppSandboxUrl(daemonBaseUrl: string, hostUrl: string, dataMode?: boolean): string | undefined;
 export declare function applySandboxCspQuery(sandboxUrl: string, cspJson: string): string;
+export declare function GeneratedUiFallback({ display }: {
+    display: McpAppDisplay;
+}): import("react/jsx-runtime").JSX.Element;
 export declare function McpApp({ display }: {
     display: McpAppDisplay;
 }): import("react/jsx-runtime").JSX.Element;

package/dist/types/components/plugins/PluginManagerPage.d.ts

@@ -1,8 +1,13 @@
 import { type Ref } from 'react';
+type PluginTab = 'extensions' | 'mcp' | 'skills' | 'agents';
 interface PluginManagerPageProps {
     onClose: () => void;
     onUseSkill: (name: string) => void;
     initialFocusRef?: Ref<HTMLButtonElement>;
+    initialTab?: PluginTab;
+    skillsWorkspaceCwd?: string;
+    onSkillsWorkspaceChange?: (cwd: string) => void;
+    managedSkills?: boolean;
 }
-export declare function PluginManagerPage({ onClose, onUseSkill, initialFocusRef, }: PluginManagerPageProps): import("react/jsx-runtime").JSX.Element;
+export declare function PluginManagerPage({ onClose, onUseSkill, initialFocusRef, initialTab, skillsWorkspaceCwd, onSkillsWorkspaceChange, managedSkills, }: PluginManagerPageProps): import("react/jsx-runtime").JSX.Element;
 export {};

package/dist/types/components/sidebar/WebShellSidebar.d.ts

@@ -138,6 +138,10 @@ interface WebShellSidebarProps {
     /** Replace daemon history with navigation owned by an external session provider. */
     sessionContent?: ReactNode;
     sessionHeader?: ReactNode;
+    managedWorkspaces?: ReactNode;
+    onSearchQueryChange?: (query: string) => void;
+    /** Selection styling only; the attached session still owns its actions. */
+    currentSessionActive?: boolean;
     /** Whether to show the Tasks/Channels session-source switch. Defaults to true. */
     showSessionSourceSwitch?: boolean;
     /** Show Live conversations and, in rail layout, the Live entry. Defaults to false. */
@@ -165,4 +169,4 @@ interface WebShellSidebarProps {
     onLoadStandaloneSession?: (sessionId: string) => Promise<void> | void;
     onStandaloneNotice?: (message: string) => void;
 }
-export declare function WebShellSidebar({ collapsed, layout, activePage, containerWidth, onOpenHome, onCollapsedChange, onOpenSettings, onOpenAgents, onOpenPlugins, onOpenChannels, onOpenLive, onLiveVoiceSlotChange, onOpenManagedSessions, onOpenDaemonStatus, onOpenScheduledTasks, onOpenWorkflows, onOpenGoals, onOpenSessions, canOpenSessionsOverview, onOpenWorkspacesOverview, onOpenSplitView, canOpenSplitView, onNewSession, onNewStandaloneSession, onLoadSession, onOpenHostSession, onSelectCurrentSession, onSessionRenameConfirmed, onSessionsDeleted, onError, theme, onThemeChange, mobileOpen, onMobileClose, selectedWorkspaceCwd, onSelectWorkspace, onOpenGitDiff, onOpenCommit, onOpenAddWorkspace, workspaces: providedWorkspaces, lockedWorkspaceCwd, lockedWorkspace: lockedWorkspaceOptions, branding, primaryNav: primaryNavOptions, sessionContent, sessionHeader, showSessionSourceSwitch, showLive, hideProjectHeader, sessionActions: sessionActionsOptions, footer, workspaceOverview, onOpenWorkspaceManagement, onNewWorktreeSession, projectFeaturesEnabled, onLoadStandaloneSession, onStandaloneNotice, }: WebShellSidebarProps): import("react/jsx-runtime").JSX.Element;
+export declare function WebShellSidebar({ collapsed, layout, activePage, containerWidth, onOpenHome, onCollapsedChange, onOpenSettings, onOpenAgents, onOpenPlugins, onOpenChannels, onOpenLive, onLiveVoiceSlotChange, onOpenManagedSessions, onOpenDaemonStatus, onOpenScheduledTasks, onOpenWorkflows, onOpenGoals, onOpenSessions, canOpenSessionsOverview, onOpenWorkspacesOverview, onOpenSplitView, canOpenSplitView, onNewSession, onNewStandaloneSession, onLoadSession, onOpenHostSession, onSelectCurrentSession, onSessionRenameConfirmed, onSessionsDeleted, onError, theme, onThemeChange, mobileOpen, onMobileClose, selectedWorkspaceCwd, onSelectWorkspace, onOpenGitDiff, onOpenCommit, onOpenAddWorkspace, workspaces: providedWorkspaces, lockedWorkspaceCwd, lockedWorkspace: lockedWorkspaceOptions, branding, primaryNav: primaryNavOptions, sessionContent, sessionHeader, managedWorkspaces, onSearchQueryChange, currentSessionActive, showSessionSourceSwitch, showLive, hideProjectHeader, sessionActions: sessionActionsOptions, footer, workspaceOverview, onOpenWorkspaceManagement, onNewWorktreeSession, projectFeaturesEnabled, onLoadStandaloneSession, onStandaloneNotice, }: WebShellSidebarProps): import("react/jsx-runtime").JSX.Element;

package/dist/types/components/sidebar/WorkspaceSection.d.ts

@@ -10,6 +10,7 @@ export interface WorkspaceHeaderActionsContext {
 }
 interface WorkspaceSectionProps {
     workspace: DaemonWorkspaceCapability;
+    executionLabel?: string;
     /**
      * localStorage seed for the expansion/collapsed-group preferences,
      * defaulting to the workspace id. Multi-host renderers pass an
@@ -125,5 +126,5 @@ interface WorkspaceSectionProps {
     /** Commit entry for the same picker; the row still opens without it. */
     onOpenCommit?: (workspaceCwd: string) => void;
 }
-export declare function WorkspaceSection({ workspace, storageKey, remote, renderHeader, hideHeader, client, reloadToken, untrustedLabel, readOnlyLabel, trustToOpenLabel, noSessionsLabel, loadErrorLabel, organizationEnabled, sessionCatalogRequestsEnabled, sessionGroupCatalog, sessionLiveStateEnabled, sourceType, channelGroupingEnabled, ungroupedLabel, searchQuery, expanded: controlledExpanded, autoExpandKey, forceAutoExpand, onExpandedChange, renderSessions, renderSession, pendingSession, mapSession, showSessionDetails, headerActions, overviewEnabled, overviewMenuOpen, overviewItems, gitBranchWanted, sessionStats, onRenameGroup, onDeleteGroup, renameGroupLabel, deleteGroupLabel, groupActionsDisabled, excludePinned, limitSessions, isPinnedSectionMember, onOpenPathLocally, onOpenTerminalLocally, onOpenGitDiff, onOpenCommit, }: WorkspaceSectionProps): import("react/jsx-runtime").JSX.Element;
+export declare function WorkspaceSection({ workspace, executionLabel, storageKey, remote, renderHeader, hideHeader, client, reloadToken, untrustedLabel, readOnlyLabel, trustToOpenLabel, noSessionsLabel, loadErrorLabel, organizationEnabled, sessionCatalogRequestsEnabled, sessionGroupCatalog, sessionLiveStateEnabled, sourceType, channelGroupingEnabled, ungroupedLabel, searchQuery, expanded: controlledExpanded, autoExpandKey, forceAutoExpand, onExpandedChange, renderSessions, renderSession, pendingSession, mapSession, showSessionDetails, headerActions, overviewEnabled, overviewMenuOpen, overviewItems, gitBranchWanted, sessionStats, onRenameGroup, onDeleteGroup, renameGroupLabel, deleteGroupLabel, groupActionsDisabled, excludePinned, limitSessions, isPinnedSectionMember, onOpenPathLocally, onOpenTerminalLocally, onOpenGitDiff, onOpenCommit, }: WorkspaceSectionProps): import("react/jsx-runtime").JSX.Element;
 export {};

package/dist/types/components/ui/tabs.d.ts

@@ -8,6 +8,6 @@ declare const tabsListVariants: (props?: ({
 declare const TabsList: import("react").ForwardRefExoticComponent<Omit<Omit<TabsPrimitive.TabsListProps & import("react").RefAttributes<HTMLDivElement>, "ref">, "asChild"> & VariantProps<(props?: ({
     variant?: "default" | "line" | null | undefined;
 } & import("class-variance-authority/types").ClassProp) | undefined) => string> & import("react").RefAttributes<HTMLDivElement>>;
-declare function TabsTrigger({ className, ...props }: ComponentProps<typeof TabsPrimitive.Trigger>): import("react/jsx-runtime").JSX.Element;
+declare const TabsTrigger: import("react").ForwardRefExoticComponent<Omit<TabsPrimitive.TabsTriggerProps & import("react").RefAttributes<HTMLButtonElement>, "ref"> & import("react").RefAttributes<HTMLButtonElement>>;
 declare function TabsContent({ className, ...props }: ComponentProps<typeof TabsPrimitive.Content>): import("react/jsx-runtime").JSX.Element;
 export { Tabs, TabsList, TabsTrigger, TabsContent, tabsListVariants };

package/dist/types/components/workspaces/WorkspaceExecutionSelect.d.ts

@@ -0,0 +1,6 @@
+export type WorkspaceExecutionMode = 'daemon' | 'managed';
+export declare function WorkspaceExecutionSelect({ value, onValueChange, disabled, }: {
+    value: WorkspaceExecutionMode;
+    onValueChange: (value: WorkspaceExecutionMode) => void;
+    disabled?: boolean;
+}): import("react/jsx-runtime").JSX.Element;

package/dist/types/desktop-relay/desktop-relay-client.d.ts

@@ -18,7 +18,7 @@ export declare const DESKTOP_RELAY_URL = "http://127.0.0.1:47821";
  * `packages/node-repl/package.json`, and `.github/workflows/cd-cua-driver.yml`
  * must publish that version before the setup command can be used.
  */
-export declare const DESKTOP_RELAY_INSTALL_COMMAND = "npx -y @qwen-code/node-repl-mcp@0.1.7 desktop-relay install";
+export declare const DESKTOP_RELAY_INSTALL_COMMAND = "npx -y @qwen-code/node-repl-mcp@0.26.0 desktop-relay install";
 export type DesktopRelayRemotePhase = 'connecting' | 'registering' | 'connected' | 'stopped' | 'failed';
 export interface DesktopRelayActive {
     sessionId: string;

package/dist/types/mcpAppHostContext.d.ts

@@ -1,4 +1,4 @@
-import type { DaemonMcpAppToolCall, DaemonMcpAppToolResult } from '@qwen-code/sdk/daemon';
+import type { DaemonSession, DaemonMcpAppToolCall, DaemonMcpAppToolResult } from '@qwen-code/sdk/daemon';
 export declare const McpAppHostContext: import("react").Context<string | undefined>;
 export type McpAppToolCallRequest = DaemonMcpAppToolCall;
 export declare const McpAppSessionContext: import("react").Context<string | undefined>;
@@ -19,3 +19,12 @@ export declare const McpAppToolsContext: import("react").Context<{
     sessionId: string;
     callTool: (request: McpAppToolCallRequest, signal: AbortSignal) => Promise<DaemonMcpAppToolResult>;
 } | undefined>;
+export interface McpAppGeneratedUi {
+    sessionId: string;
+    status: NonNullable<DaemonSession['generatedUi']>;
+}
+export declare const McpAppGeneratedUiContext: import("react").Context<McpAppGeneratedUi | undefined>;
+export declare function useMcpAppAdmission(display?: {
+    resourceUri: string;
+    requiredFeature?: 'generated-ui';
+}): boolean;

package/dist/types/settings.d.ts

@@ -50,6 +50,7 @@ declare const SETTING_KEYS: {
     readonly 'setting:model-proposed-goals': "goals.modelProposed";
     readonly 'setting:arena-artifacts': "agents.arena.preserveArtifacts";
     readonly 'setting:session-workflow': "experimental.sessionWorkflow";
+    readonly 'setting:generated-ui': "experimental.generatedUi";
     readonly 'setting:scheduled-tasks': "experimental.cron";
     readonly 'setting:session-writer-lease': "experimental.sessionWriterLease";
     readonly 'setting:agent-team': "experimental.agentTeam";

package/dist/types/trajectory/summarizeTrajectory.d.ts

@@ -16,5 +16,10 @@ export interface TrajectorySummary {
     plottedCount: number;
     missingStartCount: number;
     missingTimingCount: number;
+    /** Main-session requests that reported usage; absent when none did. */
+    tokens?: {
+        input: number;
+        output: number;
+    };
 }
 export declare function summarizeTrajectory(trajectory: Trajectory): TrajectorySummary;