@seawork/server 1.0.22-rc.3 → 2.0.2-rc.6

package/dist/server/shared/messages.js

@@ -1,21 +1,43 @@
 import { z } from "zod";
-import { TOOL_CALL_ICON_NAMES } from "../server/agent/agent-sdk-types.js";
+import { TOOL_CALL_ICON_NAMES, } from "../server/agent/agent-sdk-types.js";
 import { MAX_EXPLICIT_AGENT_TITLE_CHARS } from "../server/agent/agent-title-limits.js";
 import { AgentProviderSchema } from "../server/agent/provider-manifest.js";
 import { ChatCreateRequestSchema, ChatCreateResponseSchema, ChatDeleteRequestSchema, ChatDeleteResponseSchema, ChatInspectRequestSchema, ChatInspectResponseSchema, ChatListRequestSchema, ChatListResponseSchema, ChatPostRequestSchema, ChatPostResponseSchema, ChatReadRequestSchema, ChatReadResponseSchema, ChatWaitRequestSchema, ChatWaitResponseSchema, } from "../server/chat/chat-rpc-schemas.js";
 import { LoopInspectRequestSchema, LoopInspectResponseSchema, LoopListRequestSchema, LoopListResponseSchema, LoopLogsRequestSchema, LoopLogsResponseSchema, LoopRunRequestSchema, LoopRunResponseSchema, LoopStopRequestSchema, LoopStopResponseSchema, } from "../server/loop/rpc-schemas.js";
-import { ScheduleCreateRequestSchema, ScheduleCreateResponseSchema, ScheduleDeleteRequestSchema, ScheduleDeleteResponseSchema, ScheduleInspectRequestSchema, ScheduleInspectResponseSchema, ScheduleListRequestSchema, ScheduleListResponseSchema, ScheduleLogsRequestSchema, ScheduleLogsResponseSchema, SchedulePauseRequestSchema, SchedulePauseResponseSchema, ScheduleResumeRequestSchema, ScheduleResumeResponseSchema, } from "../server/schedule/rpc-schemas.js";
+import { ScheduleCreateRequestSchema, ScheduleCreateResponseSchema, ScheduleDeleteRequestSchema, ScheduleDeleteResponseSchema, ScheduleInspectRequestSchema, ScheduleInspectResponseSchema, ScheduleListRequestSchema, ScheduleListResponseSchema, ScheduleLogsRequestSchema, ScheduleLogsResponseSchema, SchedulePauseRequestSchema, SchedulePauseResponseSchema, ScheduleResumeRequestSchema, ScheduleResumeResponseSchema, ScheduleRunNowRequestSchema, ScheduleRunNowResponseSchema, ScheduleUpdateRequestSchema, ScheduleUpdateResponseSchema, } from "../server/schedule/rpc-schemas.js";
 import { AGENT_LIFECYCLE_STATUSES } from "./agent-lifecycle.js";
+import { AgentProviderRuntimeSettingsMapSchema } from "./provider-runtime-settings.js";
 // ---------------------------------------------------------------------------
 // Mutable daemon config schemas (shared between server store and client)
 // ---------------------------------------------------------------------------
 // Sentinel returned in place of stored tokens when broadcasting config to
 // clients. The daemon never sends raw token strings over the wire.
 export const GIT_FORGE_TOKEN_REDACTED = "<configured>";
+export const PROVIDER_ENV_VALUE_REDACTED = "<configured>";
 export const GitForgeTokenEntrySchema = z.object({
     host: z.string().min(1),
     token: z.string(),
 });
+export const WeComOpenClawAgentModeSchema = z.enum(["new", "existing"]);
+export const WeComOpenClawConfigSchema = z
+    .object({
+    enabled: z.boolean().optional(),
+    botId: z.string().optional(),
+    secret: z.string().optional(),
+    websocketUrl: z.string().optional(),
+    cwd: z.string().optional(),
+    provider: AgentProviderSchema.optional(),
+    modeId: z.string().optional(),
+    model: z.string().optional(),
+    thinkingOptionId: z.string().optional(),
+    pluginVersion: z.string().optional(),
+    allowUsers: z.array(z.string()).optional(),
+    allowChats: z.array(z.string()).optional(),
+    pendingAllowFirstUser: z.boolean().optional(),
+    agentMode: WeComOpenClawAgentModeSchema.optional(),
+    agentId: z.string().nullable().optional(),
+})
+    .passthrough();
 export const MutableDaemonConfigSchema = z
     .object({
     mcp: z
@@ -23,6 +45,11 @@ export const MutableDaemonConfigSchema = z
         injectIntoAgents: z.boolean(),
     })
         .passthrough(),
+    agents: z
+        .object({
+        providers: AgentProviderRuntimeSettingsMapSchema.optional(),
+    })
+        .optional(),
     integrations: z
         .object({
         gitForge: z
@@ -30,6 +57,16 @@ export const MutableDaemonConfigSchema = z
             tokens: z.array(GitForgeTokenEntrySchema).default([]),
         })
             .optional(),
+        wecomOpenClaw: WeComOpenClawConfigSchema.optional(),
+    })
+        .optional(),
+    promptInjection: z
+        .object({
+        system: z.string().max(32000).optional(),
+        projects: z
+            .array(z.object({ cwd: z.string().min(1), prompt: z.string().max(32000) }))
+            .max(100)
+            .optional(),
     })
         .optional(),
 })
@@ -37,6 +74,11 @@ export const MutableDaemonConfigSchema = z
 export const MutableDaemonConfigPatchSchema = z
     .object({
     mcp: MutableDaemonConfigSchema.shape.mcp.partial().optional(),
+    agents: z
+        .object({
+        providers: AgentProviderRuntimeSettingsMapSchema.optional(),
+    })
+        .optional(),
     integrations: z
         .object({
         gitForge: z
@@ -44,6 +86,16 @@ export const MutableDaemonConfigPatchSchema = z
             tokens: z.array(GitForgeTokenEntrySchema).optional(),
         })
             .optional(),
+        wecomOpenClaw: WeComOpenClawConfigSchema.partial().optional(),
+    })
+        .optional(),
+    promptInjection: z
+        .object({
+        system: z.string().max(32000).optional(),
+        projects: z
+            .array(z.object({ cwd: z.string().min(1), prompt: z.string().max(32000) }))
+            .max(100)
+            .optional(),
     })
         .optional(),
 })
@@ -141,7 +193,7 @@ const McpSseServerConfigSchema = z.object({
     url: z.string(),
     headers: z.record(z.string()).optional(),
 });
-const McpServerConfigSchema = z.discriminatedUnion("type", [
+export const McpServerConfigSchema = z.discriminatedUnion("type", [
     McpStdioServerConfigSchema,
     McpHttpServerConfigSchema,
     McpSseServerConfigSchema,
@@ -167,6 +219,7 @@ const AgentSessionConfigSchema = z.object({
         .optional(),
     systemPrompt: z.string().optional(),
     mcpServers: z.record(McpServerConfigSchema).optional(),
+    perAgentDisabled: z.array(z.string()).optional(),
 });
 const AgentPermissionUpdateSchema = z.record(z.unknown());
 const AgentPermissionActionSchema = z.object({
@@ -352,6 +405,18 @@ export const AgentTimelineItemPayloadSchema = z.union([
         type: z.literal("user_message"),
         text: z.string(),
         messageId: z.string().optional(),
+        images: z
+            .array(z.object({
+            id: z.string(),
+            mimeType: z.string(),
+            storageType: z.enum(["web-indexeddb", "desktop-file", "native-file"]),
+            storageKey: z.string(),
+            dataUrl: z.string().optional(),
+            fileName: z.string().nullable().optional(),
+            byteSize: z.number().nullable().optional(),
+            createdAt: z.number(),
+        }))
+            .optional(),
     }),
     z.object({
         type: z.literal("assistant_message"),
@@ -379,6 +444,12 @@ export const AgentTimelineItemPayloadSchema = z.union([
         trigger: z.enum(["auto", "manual"]).optional(),
         preTokens: z.number().optional(),
     }),
+    z.object({
+        type: z.literal("reconnecting"),
+        status: z.enum(["loading", "completed"]),
+        attempt: z.number().optional(),
+        maxAttempts: z.number().optional(),
+    }),
 ]);
 /**
  * Per-turn latency breakdown captured when the user has enabled latency debug
@@ -439,6 +510,7 @@ export const AgentStreamEventPayloadSchema = z.discriminatedUnion("type", [
         type: z.literal("turn_canceled"),
         provider: AgentProviderSchema,
         reason: z.string(),
+        turnId: z.string().optional(),
     }),
     z.object({
         type: z.literal("timeline"),
@@ -513,6 +585,8 @@ export const AgentSnapshotPayloadSchema = z.object({
     lastUsage: AgentUsageSchema.optional(),
     lastError: z.string().optional(),
     title: z.string().nullable(),
+    activeForegroundTurnId: z.string().nullable().optional(),
+    activeForegroundTurnStartedAt: z.number().nullable().optional(),
     labels: z.record(z.string()).default({}),
     requiresAttention: z.boolean().optional(),
     attentionReason: z.enum(["finished", "error", "permission"]).nullable().optional(),
@@ -616,6 +690,46 @@ export const SubmitBugReportRequestMessageSchema = z.object({
     }))
         .max(200)
         .optional(),
+    // Independent agent-event channel: 30s ws_runtime_metrics heartbeats
+    // were swallowing real turn errors out of the 32KB daemon.log tail. The
+    // ring buffer in AgentManager captures the last N turn_started/completed/
+    // failed/canceled events directly, free of heartbeat noise.
+    recentTurnTraces: z
+        .array(z.object({
+        ts: z.number(),
+        agentId: z.string(),
+        provider: z.string(),
+        agentRole: z.enum(["user-foreground", "internal"]),
+        model: z.string().optional(),
+        turnId: z.string().optional(),
+        eventType: z.enum(["turn_started", "turn_completed", "turn_failed", "turn_canceled"]),
+        durationMs: z.number().optional(),
+        error: z.string().optional(),
+        code: z.string().optional(),
+        diagnostic: z.string().optional(),
+    }))
+        .max(50)
+        .optional(),
+    // Doctor session log freshness — clients fetch this from the desktop
+    // IPC and forward it so reviewers can spot stale logs at a glance
+    // (root cause of #484: bug-report attached a 3-week-old v0.1.0 log).
+    doctorMeta: z
+        .object({
+        version: z.string().optional(),
+        ranAt: z.number().optional(),
+        ageMs: z.number().optional(),
+        autoReran: z.boolean().optional(),
+        path: z.string().optional(),
+    })
+        .optional(),
+    // Structured user-context fields prompted in the report form. All
+    // optional for back-compat with old clients; we collect what users give
+    // us and avoid the friction of hard-required fields until the data
+    // proves it's worth enforcing (#483 #484 verdict).
+    userReproSteps: z.string().max(2000).optional(),
+    userPreviouslyWorked: z.enum(["never-worked", "worked-recently-broke", "unknown"]).optional(),
+    userFrequency: z.enum(["every-time", "sometimes", "once"]).optional(),
+    userWaitSeconds: z.number().int().min(0).max(3600).optional(),
 });
 export const SubmitBugReportResponseMessageSchema = z.object({
     type: z.literal("submit_bug_report_response"),
@@ -858,6 +972,19 @@ const DocumentAttachmentSchema = z.object({
     mimeType: z.string(),
     fileName: z.string().nullable().optional(),
 });
+const UserMessageImageAttachmentSchema = z.object({
+    id: z.string(),
+    mimeType: z.string(),
+    storageType: z.enum(["web-indexeddb", "desktop-file", "native-file"]),
+    storageKey: z.string(),
+    dataUrl: z
+        .string()
+        .regex(/^data:[^;,]+;base64,[A-Za-z0-9+/]+=*$/)
+        .optional(),
+    fileName: z.string().nullable().optional(),
+    byteSize: z.number().nullable().optional(),
+    createdAt: z.number(),
+});
 export const SendAgentMessageRequestSchema = z.object({
     type: z.literal("send_agent_message_request"),
     requestId: z.string(),
@@ -871,6 +998,12 @@ export const SendAgentMessageRequestSchema = z.object({
         mimeType: z.string(), // e.g., "image/jpeg", "image/png"
     }))
         .optional(),
+    /**
+     * Attachment metadata for rendering/persisting user-message images in the
+     * timeline. Separate from `images`, which carries base64 bytes for the model
+     * input. Optional for backward compatibility with older clients.
+     */
+    imageAttachments: z.array(UserMessageImageAttachmentSchema).optional(),
     /**
      * Document attachments carried as native file paths (desktop/mobile only).
      * Server reads these locally when composing the prompt. Always optional for
@@ -901,12 +1034,32 @@ export const SetDaemonConfigRequestMessageSchema = z.object({
     requestId: z.string(),
     config: MutableDaemonConfigPatchSchema,
 });
+export const WeComOpenClawQrRequestMessageSchema = z.object({
+    type: z.literal("wecom_openclaw_qr_request"),
+    requestId: z.string(),
+    poll: z.boolean().optional(),
+});
 export const FetchGitForgeIssuesRequestMessageSchema = z.object({
     type: z.literal("fetch_git_forge_issues_request"),
     requestId: z.string(),
     workspaceId: z.string().optional(),
     cwd: z.string().optional(),
 });
+export const DiscoverGitForgeIssueWorkRequestMessageSchema = z.object({
+    type: z.literal("discover_git_forge_issue_work_request"),
+    requestId: z.string(),
+    number: z.number().int().positive(),
+    workspaceId: z.string().optional(),
+    cwd: z.string().optional(),
+});
+export const TransitionGitForgeIssueWorkRequestMessageSchema = z.object({
+    type: z.literal("transition_git_forge_issue_work_request"),
+    requestId: z.string(),
+    number: z.number().int().positive(),
+    workspaceId: z.string().optional(),
+    cwd: z.string().optional(),
+    source: z.enum(["manual", "symphony-web"]).optional(),
+});
 // ============================================================================
 // Dictation Streaming (lossless, resumable)
 // ============================================================================
@@ -951,6 +1104,12 @@ export const CreateAgentRequestMessageSchema = z.object({
         mimeType: z.string(), // e.g., "image/jpeg", "image/png"
     }))
         .optional(),
+    /**
+     * Attachment metadata for rendering/persisting initial user-message images in
+     * the timeline. Separate from `images`, which carries base64 bytes for model
+     * input. Optional for backward compatibility with older clients.
+     */
+    imageAttachments: z.array(UserMessageImageAttachmentSchema).optional(),
     /** Document attachments as native file paths. See SendAgentMessageRequestSchema. */
     documents: z.array(DocumentAttachmentSchema).optional(),
     git: GitSetupOptionsSchema.optional(),
@@ -1456,6 +1615,7 @@ export const ClientHeartbeatMessageSchema = z.object({
     lastActivityAt: z.string(),
     appVisible: z.boolean(),
     appVisibilityChangedAt: z.string().optional(),
+    desktopRuntime: z.boolean().optional(),
 });
 export const PingMessageSchema = z.object({
     type: z.literal("ping"),
@@ -1545,6 +1705,228 @@ export const CaptureTerminalRequestSchema = z.object({
     stripAnsi: z.boolean().default(true),
     requestId: z.string(),
 });
+// ============================================================================
+// Library RPCs (centrally-managed MCP + skills shared by Claude/Codex agents)
+// ============================================================================
+// Wire-level `source` is an OPEN string, not a narrowed enum. Pre-hub clients
+// (and the production daemon) shipped a 4-value enum without "hub"; adding a new
+// enum value to the wire would make their `.parse()` reject the whole
+// library_updated/library_list_response. Per CLAUDE.md's compat rule
+// ("never narrow string→enum on the wire"), keep this permissive so future
+// source values never break an old client. The daemon also downcasts unknown
+// new values (e.g. "hub") to undefined when serializing for old clients —
+// see buildSnapshot in library-rpc.ts. Hub-ness travels via the `hub` field.
+const LibrarySourceShape = z.string().optional();
+export const LibraryMcpEntryPayloadSchema = z.object({
+    config: McpServerConfigSchema,
+    enabledFor: z
+        .object({
+        claude: z.boolean().optional(),
+        codex: z.boolean().optional(),
+    })
+        .optional(),
+    autoAttach: z.boolean().optional(),
+    source: LibrarySourceShape,
+    updatedAt: z.string().optional(),
+});
+export const LibrarySkillEntryPayloadSchema = z.object({
+    content: z.string(),
+    providers: z.array(z.enum(["claude", "codex"])).optional(),
+    autoAttach: z.boolean().optional(),
+    source: LibrarySourceShape,
+    updatedAt: z.string().optional(),
+    contentCodex: z.string().optional(),
+    hub: z
+        .object({
+        hubId: z.string(),
+        version: z.string(),
+        tarballSha256: z.string(),
+        installedAt: z.string(),
+    })
+        .optional(),
+});
+export const LibrarySnapshotPayloadSchema = z.object({
+    library: z.object({
+        version: z.number().optional(),
+        mcpServers: z.record(LibraryMcpEntryPayloadSchema).optional(),
+        skills: z.record(LibrarySkillEntryPayloadSchema).optional(),
+    }),
+    conflicts: z
+        .array(z.object({
+        name: z.string(),
+        ownerSeaworkHome: z.string(),
+    }))
+        .optional(),
+    isWorktreeDev: z.boolean().optional(),
+    neverImported: z.boolean().optional(),
+});
+export const LibraryListRequestMessageSchema = z.object({
+    type: z.literal("library_list_request"),
+    requestId: z.string(),
+});
+export const LibraryListResponseMessageSchema = z.object({
+    type: z.literal("library_list_response"),
+    requestId: z.string(),
+    snapshot: LibrarySnapshotPayloadSchema.optional(),
+    error: z.string().optional(),
+});
+export const LibraryUpsertMcpRequestMessageSchema = z.object({
+    type: z.literal("library_upsert_mcp_request"),
+    requestId: z.string(),
+    name: z.string().min(1),
+    entry: LibraryMcpEntryPayloadSchema,
+});
+export const LibraryUpsertMcpResponseMessageSchema = z.object({
+    type: z.literal("library_upsert_mcp_response"),
+    requestId: z.string(),
+    ok: z.boolean(),
+    error: z.string().optional(),
+});
+export const LibraryUpsertSkillRequestMessageSchema = z.object({
+    type: z.literal("library_upsert_skill_request"),
+    requestId: z.string(),
+    name: z.string().min(1),
+    entry: LibrarySkillEntryPayloadSchema,
+});
+export const LibraryUpsertSkillResponseMessageSchema = z.object({
+    type: z.literal("library_upsert_skill_response"),
+    requestId: z.string(),
+    ok: z.boolean(),
+    error: z.string().optional(),
+});
+export const LibraryDeleteRequestMessageSchema = z.object({
+    type: z.literal("library_delete_request"),
+    requestId: z.string(),
+    kind: z.enum(["mcp", "skill"]),
+    name: z.string().min(1),
+});
+export const LibraryDeleteResponseMessageSchema = z.object({
+    type: z.literal("library_delete_response"),
+    requestId: z.string(),
+    ok: z.boolean(),
+    error: z.string().optional(),
+});
+export const LibrarySetAutoAttachRequestMessageSchema = z.object({
+    type: z.literal("library_set_autoattach_request"),
+    requestId: z.string(),
+    kind: z.enum(["mcp", "skill"]),
+    name: z.string().min(1),
+    value: z.boolean(),
+});
+export const LibrarySetAutoAttachResponseMessageSchema = z.object({
+    type: z.literal("library_set_autoattach_response"),
+    requestId: z.string(),
+    ok: z.boolean(),
+    error: z.string().optional(),
+});
+export const LibraryImportExistingRequestMessageSchema = z.object({
+    type: z.literal("library_import_existing_request"),
+    requestId: z.string(),
+});
+export const LibraryImportExistingResponseMessageSchema = z.object({
+    type: z.literal("library_import_existing_response"),
+    requestId: z.string(),
+    importedMcp: z.number().int().nonnegative().optional(),
+    importedSkills: z.number().int().nonnegative().optional(),
+    skipped: z.array(z.string()).optional(),
+    error: z.string().optional(),
+});
+/** Hub install: download a skill tarball from R2 and hand it to Library to write to disk. */
+export const LibraryInstallFromHubRequestMessageSchema = z.object({
+    type: z.literal("library_install_from_hub_request"),
+    requestId: z.string(),
+    hubId: z.string().regex(/^[a-z0-9-]+\/[a-z0-9-]+$/),
+    version: z.string().min(1),
+    tarballUrl: z.string().url(),
+    tarballSha256: z.string().regex(/^[a-f0-9]{64}$/i),
+    claudeSkillPath: z.string().min(1),
+    codexSkillPath: z.string().min(1),
+});
+export const LibraryInstallFromHubResponseMessageSchema = z.object({
+    type: z.literal("library_install_from_hub_response"),
+    requestId: z.string(),
+    status: z.enum(["installed", "conflict", "error", "not-implemented"]),
+    installedPaths: z
+        .object({
+        claude: z.string(),
+        codex: z.string(),
+    })
+        .optional(),
+    conflictingPath: z.string().optional(),
+    reason: z.enum(["foreign-skill"]).optional(),
+    code: z
+        .enum([
+        "download-failed",
+        "checksum-failed",
+        "extract-failed",
+        "write-failed",
+        "not-implemented",
+    ])
+        .optional(),
+    message: z.string().optional(),
+});
+export const LibraryUninstallFromHubRequestMessageSchema = z.object({
+    type: z.literal("library_uninstall_from_hub_request"),
+    requestId: z.string(),
+    hubId: z.string().regex(/^[a-z0-9-]+\/[a-z0-9-]+$/),
+});
+export const LibraryUninstallFromHubResponseMessageSchema = z.object({
+    type: z.literal("library_uninstall_from_hub_response"),
+    requestId: z.string(),
+    status: z.enum(["uninstalled", "not-installed", "error", "not-implemented"]),
+    code: z.enum(["remove-failed", "not-implemented"]).optional(),
+    message: z.string().optional(),
+});
+// ---- Hub "test run": spin up a throwaway sandboxed agent with the skill ----
+// loaded into a temp cwd, run one prompt, stream output back, then delete the
+// sandbox. Never touches ~/.codex or the user's installed skills.
+/** Start a test run. The client decides the prompt (examplePrompt or user input). */
+export const HubTestRunStartRequestMessageSchema = z.object({
+    type: z.literal("hub_test_run_start_request"),
+    requestId: z.string(),
+    hubId: z.string().regex(/^[a-z0-9-]+\/[a-z0-9-]+$/),
+    tarballUrl: z.string().url(),
+    tarballSha256: z.string().regex(/^[a-f0-9]{64}$/i),
+    prompt: z.string().min(1).max(4000),
+});
+/** Cancel an in-flight test run (matched by requestId). */
+export const HubTestRunCancelRequestMessageSchema = z.object({
+    type: z.literal("hub_test_run_cancel_request"),
+    requestId: z.string(),
+});
+/** Streamed output chunk during a test run (outbound push, keyed by requestId). */
+export const HubTestRunChunkMessageSchema = z.object({
+    type: z.literal("hub_test_run_chunk"),
+    requestId: z.string(),
+    kind: z.enum(["assistant", "reasoning", "tool"]),
+    text: z.string().optional(),
+    toolName: z.string().optional(),
+    toolSummary: z.string().optional(),
+});
+/** Terminal reply for a test run (resolves the start request). */
+export const HubTestRunDoneResponseMessageSchema = z.object({
+    type: z.literal("hub_test_run_done_response"),
+    requestId: z.string(),
+    status: z.enum(["completed", "canceled", "error", "not-implemented"]),
+    finalText: z.string().optional(),
+    code: z
+        .enum([
+        "download-failed",
+        "checksum-failed",
+        "extract-failed",
+        "spawn-failed",
+        "timeout",
+        "run-failed",
+        "not-implemented",
+    ])
+        .optional(),
+    message: z.string().optional(),
+});
+/** Server-push when library mutates so other clients can refresh. */
+export const LibraryUpdatedMessageSchema = z.object({
+    type: z.literal("library_updated"),
+    snapshot: LibrarySnapshotPayloadSchema.optional(),
+});
 export const SessionInboundMessageSchema = z.discriminatedUnion("type", [
     VoiceAudioChunkMessageSchema,
     AbortRequestMessageSchema,
@@ -1561,7 +1943,10 @@ export const SessionInboundMessageSchema = z.discriminatedUnion("type", [
     WaitForFinishRequestSchema,
     GetDaemonConfigRequestMessageSchema,
     SetDaemonConfigRequestMessageSchema,
+    WeComOpenClawQrRequestMessageSchema,
     FetchGitForgeIssuesRequestMessageSchema,
+    DiscoverGitForgeIssueWorkRequestMessageSchema,
+    TransitionGitForgeIssueWorkRequestMessageSchema,
     DictationStreamStartMessageSchema,
     DictationStreamChunkMessageSchema,
     DictationStreamFinishMessageSchema,
@@ -1648,6 +2033,8 @@ export const SessionInboundMessageSchema = z.discriminatedUnion("type", [
     SchedulePauseRequestSchema,
     ScheduleResumeRequestSchema,
     ScheduleDeleteRequestSchema,
+    ScheduleUpdateRequestSchema,
+    ScheduleRunNowRequestSchema,
     LoopRunRequestSchema,
     LoopListRequestSchema,
     LoopInspectRequestSchema,
@@ -1660,6 +2047,16 @@ export const SessionInboundMessageSchema = z.discriminatedUnion("type", [
     ListIssueCommentsRequestMessageSchema,
     PostIssueCommentRequestMessageSchema,
     ToggleIssueReactionRequestMessageSchema,
+    LibraryListRequestMessageSchema,
+    LibraryUpsertMcpRequestMessageSchema,
+    LibraryUpsertSkillRequestMessageSchema,
+    LibraryDeleteRequestMessageSchema,
+    LibrarySetAutoAttachRequestMessageSchema,
+    LibraryImportExistingRequestMessageSchema,
+    LibraryInstallFromHubRequestMessageSchema,
+    LibraryUninstallFromHubRequestMessageSchema,
+    HubTestRunStartRequestMessageSchema,
+    HubTestRunCancelRequestMessageSchema,
 ]);
 // ============================================================================
 // Session Outbound Messages (Session emits these)
@@ -2243,6 +2640,20 @@ export const SetDaemonConfigResponseMessageSchema = z.object({
     })
         .passthrough(),
 });
+export const WeComOpenClawQrResponseMessageSchema = z.object({
+    type: z.literal("wecom_openclaw_qr_response"),
+    payload: z
+        .object({
+        requestId: z.string(),
+        status: z.enum(["pending", "success", "error"]),
+        scode: z.string().nullable(),
+        authUrl: z.string().nullable(),
+        qrPageUrl: z.string().nullable(),
+        config: MutableDaemonConfigSchema.nullable(),
+        error: z.string().nullable(),
+    })
+        .passthrough(),
+});
 export const GitForgeItemSchema = z.object({
     id: z.string(),
     kind: z.enum(["issue", "pull_request"]),
@@ -2281,6 +2692,101 @@ export const FetchGitForgeIssuesResponseMessageSchema = z.object({
         ]),
     }),
 });
+const GitForgeCheckoutSummarySchema = z.object({
+    isGit: z.boolean(),
+    repoRoot: z.string().nullable(),
+    mainRepoRoot: z.string().nullable(),
+    currentBranch: z.string().nullable(),
+    isDirty: z.boolean().nullable(),
+    baseRef: z.string().nullable(),
+    aheadBehind: z
+        .object({
+        ahead: z.number(),
+        behind: z.number(),
+    })
+        .nullable(),
+    aheadOfOrigin: z.number().nullable(),
+    behindOfOrigin: z.number().nullable(),
+    hasRemote: z.boolean().nullable(),
+    remoteUrl: z.string().nullable(),
+    isSeaworkOwnedWorktree: z.boolean(),
+});
+const GitForgeDiscoveredWorktreeSchema = z.object({
+    path: z.string(),
+    createdAt: z.string(),
+    branchName: z.string().optional(),
+    head: z.string().optional(),
+    checkout: GitForgeCheckoutSummarySchema.nullable(),
+    error: z.string().optional(),
+});
+const GitForgeDiscoveredAgentSchema = z.object({
+    id: z.string(),
+    cwd: z.string(),
+    lifecycle: z.string(),
+    title: z.string().nullable(),
+    labels: z.record(z.string()).default({}),
+    worktreePath: z.string().nullable(),
+});
+const GitForgeGithubDiscoverySchema = z.discriminatedUnion("available", [
+    z.object({
+        available: z.literal(true),
+        pullRequests: z.array(GitForgeItemSchema),
+        fetchedAt: z.string(),
+    }),
+    z.object({
+        available: z.literal(false),
+        reason: z.enum(["no-token", "unsupported-host", "api-error"]),
+        message: z.string().optional(),
+    }),
+]);
+export const DiscoverGitForgeIssueWorkResponseMessageSchema = z.object({
+    type: z.literal("discover_git_forge_issue_work_response"),
+    payload: z.object({
+        requestId: z.string(),
+        result: z.discriminatedUnion("ok", [
+            z.object({
+                ok: z.literal(true),
+                repo: GitForgeRepoInfoSchema,
+                cwd: z.string(),
+                checkout: GitForgeCheckoutSummarySchema,
+                worktrees: z.array(GitForgeDiscoveredWorktreeSchema),
+                branchSuggestions: z.array(z.string()),
+                activeAgents: z.array(GitForgeDiscoveredAgentSchema),
+                github: GitForgeGithubDiscoverySchema,
+                discoveredAt: z.string(),
+            }),
+            z.object({
+                ok: z.literal(false),
+                reason: z.enum(["no-workspace", "no-remote", "unsupported-host"]),
+                host: z.string().optional(),
+                message: z.string().optional(),
+            }),
+        ]),
+    }),
+});
+export const TransitionGitForgeIssueWorkResponseMessageSchema = z.object({
+    type: z.literal("transition_git_forge_issue_work_response"),
+    payload: z.object({
+        requestId: z.string(),
+        result: z.discriminatedUnion("ok", [
+            z.object({
+                ok: z.literal(true),
+                repo: GitForgeRepoInfoSchema,
+                number: z.number().int().positive(),
+                labels: z.array(z.string()),
+                previousLabels: z.array(z.string()),
+                transitionedAt: z.string(),
+                source: z.enum(["manual", "symphony-web"]),
+            }),
+            z.object({
+                ok: z.literal(false),
+                reason: z.enum(["no-workspace", "no-remote", "no-token", "unsupported-host", "api-error"]),
+                host: z.string().optional(),
+                message: z.string().optional(),
+            }),
+        ]),
+    }),
+});
 export const AgentPermissionRequestMessageSchema = z.object({
     type: z.literal("agent_permission_request"),
     payload: z.object({
@@ -2944,7 +3450,10 @@ export const SessionOutboundMessageSchema = z.discriminatedUnion("type", [
     SetVoiceModeResponseMessageSchema,
     GetDaemonConfigResponseMessageSchema,
     SetDaemonConfigResponseMessageSchema,
+    WeComOpenClawQrResponseMessageSchema,
     FetchGitForgeIssuesResponseMessageSchema,
+    DiscoverGitForgeIssueWorkResponseMessageSchema,
+    TransitionGitForgeIssueWorkResponseMessageSchema,
     SetAgentModeResponseMessageSchema,
     SetAgentModelResponseMessageSchema,
     SetAgentThinkingResponseMessageSchema,
@@ -3016,6 +3525,8 @@ export const SessionOutboundMessageSchema = z.discriminatedUnion("type", [
     SchedulePauseResponseSchema,
     ScheduleResumeResponseSchema,
     ScheduleDeleteResponseSchema,
+    ScheduleUpdateResponseSchema,
+    ScheduleRunNowResponseSchema,
     LoopRunResponseSchema,
     LoopListResponseSchema,
     LoopInspectResponseSchema,
@@ -3028,6 +3539,17 @@ export const SessionOutboundMessageSchema = z.discriminatedUnion("type", [
     ListIssueCommentsResponseMessageSchema,
     PostIssueCommentResponseMessageSchema,
     ToggleIssueReactionResponseMessageSchema,
+    LibraryListResponseMessageSchema,
+    LibraryUpsertMcpResponseMessageSchema,
+    LibraryUpsertSkillResponseMessageSchema,
+    LibraryDeleteResponseMessageSchema,
+    LibrarySetAutoAttachResponseMessageSchema,
+    LibraryImportExistingResponseMessageSchema,
+    LibraryInstallFromHubResponseMessageSchema,
+    LibraryUninstallFromHubResponseMessageSchema,
+    HubTestRunChunkMessageSchema,
+    HubTestRunDoneResponseMessageSchema,
+    LibraryUpdatedMessageSchema,
 ]);
 // ============================================================================
 // WebSocket Level Messages (wraps session messages)
@@ -3045,6 +3567,12 @@ export const WSHelloMessageSchema = z.object({
     clientType: z.enum(["mobile", "browser", "cli", "mcp"]),
     protocolVersion: z.number().int(),
     appVersion: z.string().optional(),
+    /**
+     * Pairing token for the browser extension. Only checked for connections whose
+     * Origin is the fixed chrome-extension:// origin; ignored for every other
+     * client. Optional for backward compatibility with older clients.
+     */
+    clientAuthToken: z.string().optional(),
     capabilities: z
         .object({
         voice: z.boolean().optional(),