@siming-org/core 0.4.0 → 0.5.0

package/dist/index.d.ts

@@ -1,3 +1,4 @@
+import * as mongodb from 'mongodb';
 import { Db, MongoClient, MongoClientOptions, ClientSession, Collection, Document, Filter, ObjectId } from 'mongodb';
 export { ClientSession, Db } from 'mongodb';
 import { z } from 'zod';
@@ -220,6 +221,8 @@ type SkillRepo = Repo<Skill> & {
     listSkills(opts?: AssetListOpts): Promise<Skill[]>;
     /** 绑定校验批量预取（消 N+1）：按引用方 scope 可见集过滤（N016 F04——project 引用方 = global + 本项目；global 引用方 = 仅 global） */
     listSkillsByNames(names: string[], scope?: SkillScope, projectId?: string): Promise<Map<string, Skill>>;
+    /** 仅判断目标作用域是否被对方作用域同名资产阻塞，不返回资产内容。 */
+    hasNameScopeConflict(name: string, scope: SkillScope): Promise<boolean>;
     /** by-name 复制（N016 F08/F11）：源 scope 显式消歧 + 目标跨 scope 守卫；version 重置 '1.0.0' */
     copySkill(sourceName: string, source: {
         scope: SkillScope;
@@ -400,6 +403,8 @@ type AgentRepo = Repo<Agent> & {
     listAgentsByScopeFilter(scope: AgentScope, projectId?: string, opts?: AssetListOpts): Promise<Agent[]>;
     /** T202608290001：全量列举（管理视角，路由缺省路径）——opts 语义同上，保持启停过滤单点在仓储层 */
     listAgents(opts?: AssetListOpts): Promise<Agent[]>;
+    /** 仅判断目标作用域是否被对方作用域同名资产阻塞，不返回资产内容。 */
+    hasNameScopeConflict(name: string, scope: AgentScope): Promise<boolean>;
     /** by-name 复制（N016 F08/F11）：源 scope 显式消歧 + 目标跨 scope 守卫 + boundSkills 按目标作用域重校验；version 重置 '1.0.0' */
     copyAgent(sourceName: string, source: {
         scope: AgentScope;
@@ -441,6 +446,19 @@ declare const DagNodeTrackSchema: z.ZodString;
 declare const DAG_PHASES: readonly ["entry", "track", "test", "exit"];
 declare const DAG_TRACKS: readonly ["backend", "ui", "all"];
 declare const NODE_ID_PATTERN: RegExp;
+/**
+ * 来源标记（T202609020001 K2）：组装值拷贝时写入，双信号分工——
+ * code = 升级寻址键 / version = updatable 判定（K13 升版强制保证「版本不变则内容不变」）/
+ * contentHash = local-modified 判定基线（算法单源 computeNodeContentHash）。
+ * 可选字段：存量模板无此键 = 自建节点，零迁移。
+ */
+declare const SourcePresetSchema: z.ZodObject<{
+    code: z.ZodString;
+    version: z.ZodString;
+    contentHash: z.ZodString;
+    agents: z.ZodOptional<z.ZodArray<z.ZodString>>;
+}, z.core.$strip>;
+type SourcePreset = z.infer<typeof SourcePresetSchema>;
 declare const DagNodeSchema: z.ZodObject<{
     id: z.ZodString;
     label: z.ZodString;
@@ -448,6 +466,13 @@ declare const DagNodeSchema: z.ZodObject<{
     track: z.ZodString;
     prompt: z.ZodString;
     skills: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    agents: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    sourcePreset: z.ZodOptional<z.ZodObject<{
+        code: z.ZodString;
+        version: z.ZodString;
+        contentHash: z.ZodString;
+        agents: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    }, z.core.$strip>>;
 }, z.core.$strip>;
 type DagNode = z.infer<typeof DagNodeSchema>;
 /** 暂停点类型——固定枚举，引擎仅处理这两种语义（human_approval 落 paused / checkpoint 仅记录不停留） */
@@ -487,6 +512,22 @@ declare const EdgePausePointSchema: z.ZodObject<{
     autoResume: z.ZodDefault<z.ZodBoolean>;
 }, z.core.$strip>;
 type EdgePausePoint = z.infer<typeof EdgePausePointSchema>;
+/**
+ * 模板业务 code 格式：kebab-case 且至少含一个连字符段（'-' 分隔多段，如 full-workflow）。
+ * 含连字符约束使 code 与 24-hex 数据库 id 形态可区分（纯 hex 串无连字符，天然被排除）——
+ * 支撑寻址二阶段判定（先 id 直查命中、未命中再按 code 项目内检索）与 AI 转录可核对性。
+ */
+declare const TEMPLATE_CODE_REGEX: RegExp;
+declare const TEMPLATE_CODE_MAX_LENGTH = 31;
+/** code 字段校验（创建侧强校验；长度与 project key 同口径 2-31，结构保证下限 3） */
+declare const TemplateCodeFieldSchema: z.ZodString;
+/** not-found 相近候选条目（防转录错误——错误信息携带项目内相近模板清单） */
+declare const TemplateCandidateSchema: z.ZodObject<{
+    id: z.ZodString;
+    code: z.ZodString;
+    name: z.ZodString;
+}, z.core.$strip>;
+type TemplateCandidate = z.infer<typeof TemplateCandidateSchema>;
 declare const DagEdgeSchema: z.ZodObject<{
     from: z.ZodString;
     to: z.ZodString;
@@ -506,6 +547,7 @@ declare const DagTemplateSchema: z.ZodObject<{
     name: z.ZodString;
     projectId: z.ZodString;
     description: z.ZodString;
+    code: z.ZodOptional<z.ZodString>;
     nodes: z.ZodArray<z.ZodObject<{
         id: z.ZodString;
         label: z.ZodString;
@@ -513,6 +555,13 @@ declare const DagTemplateSchema: z.ZodObject<{
         track: z.ZodString;
         prompt: z.ZodString;
         skills: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        agents: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        sourcePreset: z.ZodOptional<z.ZodObject<{
+            code: z.ZodString;
+            version: z.ZodString;
+            contentHash: z.ZodString;
+            agents: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        }, z.core.$strip>>;
     }, z.core.$strip>>;
     edges: z.ZodArray<z.ZodObject<{
         from: z.ZodString;
@@ -541,6 +590,7 @@ type DagTemplate = z.infer<typeof DagTemplateSchema>;
 declare const DagTemplateCreateSchema: z.ZodObject<{
     version: z.ZodDefault<z.ZodString>;
     name: z.ZodString;
+    code: z.ZodOptional<z.ZodString>;
     description: z.ZodString;
     projectId: z.ZodString;
     nodes: z.ZodArray<z.ZodObject<{
@@ -550,6 +600,13 @@ declare const DagTemplateCreateSchema: z.ZodObject<{
         track: z.ZodString;
         prompt: z.ZodString;
         skills: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        agents: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        sourcePreset: z.ZodOptional<z.ZodObject<{
+            code: z.ZodString;
+            version: z.ZodString;
+            contentHash: z.ZodString;
+            agents: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        }, z.core.$strip>>;
     }, z.core.$strip>>;
     edges: z.ZodArray<z.ZodObject<{
         from: z.ZodString;
@@ -574,9 +631,12 @@ type DagTemplateCreate = z.infer<typeof DagTemplateCreateSchema>;
 /**
  * 更新输入（PUT partial）。extend 剥离实体层 .default()——Zod 4 的 .partial() 保留字段
  * default，空 body 会解析出 {isDefault:false, version:'1.0.0'} 并被 $set 写库（字段被静默重置）。
+ * code 无实体层 default，partial 后 optional 进 Update——仅供路由层不可变检测
+ * （body.code ≠ 现值 → 409 TEMPLATE_CODE_IMMUTABLE；= 现值剥离不写），路由层负责剥离。
  */
 declare const DagTemplateUpdateSchema: z.ZodObject<{
     name: z.ZodOptional<z.ZodString>;
+    code: z.ZodOptional<z.ZodOptional<z.ZodString>>;
     description: z.ZodOptional<z.ZodString>;
     projectId: z.ZodOptional<z.ZodString>;
     nodes: z.ZodOptional<z.ZodArray<z.ZodObject<{
@@ -586,6 +646,13 @@ declare const DagTemplateUpdateSchema: z.ZodObject<{
         track: z.ZodString;
         prompt: z.ZodString;
         skills: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        agents: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        sourcePreset: z.ZodOptional<z.ZodObject<{
+            code: z.ZodString;
+            version: z.ZodString;
+            contentHash: z.ZodString;
+            agents: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        }, z.core.$strip>>;
     }, z.core.$strip>>>;
     edges: z.ZodOptional<z.ZodArray<z.ZodObject<{
         from: z.ZodString;
@@ -610,12 +677,25 @@ declare const DagTemplateUpdateSchema: z.ZodObject<{
 type DagTemplateUpdate = z.infer<typeof DagTemplateUpdateSchema>;
 /**
  * 模板复制入参（N012 F5/D5，契约命名对齐方案 §3.2.3）：目标项目 + 新名称；副本落库为可编辑独立实体（version 重置 '1.0.0'，isDefault=false）。
+ * T202609020002：newCode 可选——显式指定副本 code（格式强校验）；缺省按 newName 规范化自动生成。
+ * 副本 code 与源模板 code 相互独立（源 code 不随拷贝，同项目复制必撞唯一索引）。
  */
 declare const DagTemplateCopySchema: z.ZodObject<{
     newName: z.ZodString;
     targetProjectId: z.ZodString;
+    newCode: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
 type DagTemplateCopy = z.infer<typeof DagTemplateCopySchema>;
+/**
+ * K12：模板节点 id 唯一共享校验（core 单点，路由 create/PUT 与 template-transfer applyImport 双挂）。
+ * 函数级校验而非 schema 级——模板级 schema 禁挂 refine（Zod4 派生陷阱，见 DagTemplateSchema 注释）。
+ */
+declare function findDuplicateNodeIds(nodes: ReadonlyArray<{
+    id: string;
+}>): string[];
+declare function assertUniqueNodeIds(nodes: ReadonlyArray<{
+    id: string;
+}>): void;
 
 type DagTemplateRepo = Repo<DagTemplate> & {
     createDagTemplate(data: DagTemplateCreate): Promise<DagTemplate>;
@@ -623,15 +703,41 @@ type DagTemplateRepo = Repo<DagTemplate> & {
      * N015 F17：list 支持 name 过滤（export 查查重按 projectId+name，name 项目内唯一）。
      * T202608290001：includeDisabled 缺省排除停用模板（CLI/MCP 列举 + 建任务选择器视图）；
      * true 时含停用（Web 管理台列表视图）。by-id 寻址不过滤（详情/创建守卫走显式判定）。
+     * T202609020002：code 精确过滤（与 q 正交；code 项目内唯一，命中至多一条）。
      */
     listDagTemplates(filter?: {
         projectId?: string;
         name?: string;
+        code?: string;
         includeDisabled?: boolean;
     }): Promise<DagTemplate[]>;
-    /** 深拷贝复制（N012 F5/D5）：副本落目标项目，version 重置 '1.0.0'、isDefault=false；目标项目内重名 → 409 */
-    copyDagTemplate(sourceId: string, targetProjectId: string, newName: string): Promise<DagTemplate>;
+    /** 深拷贝复制（N012 F5/D5）：副本落目标项目，version 重置 '1.0.0'、isDefault=false；目标项目内重名 → 409。
+     *  T202609020002：副本 code 独立——newCode 显式指定或按 newName 自动生成（源 code 不随拷贝，同项目必撞唯一索引）。 */
+    copyDagTemplate(sourceId: string, targetProjectId: string, newName: string, newCode?: string): Promise<DagTemplate>;
+    /** T202609020002：按 code 项目内寻址（含停用——与 by-id 详情同视图；启用过滤归创建守卫显式判定） */
+    getByCode(projectId: string, code: string): Promise<DagTemplate | null>;
+    /**
+     * T202609020002：二阶段寻址——24-hex 直查 id 命中即返回（兼容层优先探活，防正交误判劫持）；
+     * hex 直查未命中不转 code 检索（code 必含连字符与 hex 形态互斥，检索必空）。
+     * 非 hex 形态且提供项目上下文 → 按 code 项目内检索；projectCtx 缺省时不检索
+     * （code 项目内唯一，无项目域无法消歧）。全未命中返回 null（候选清单归路由层）。
+     */
+    resolveTemplateByRef(ref: string, projectCtx?: string): Promise<DagTemplate | null>;
+    /** T202609020002：not-found 相近候选（项目内全量含停用 → 内存评分排序，上限 limit；空数组 = 无相近） */
+    findSimilarTemplates(projectId: string, ref: string, limit?: number): Promise<TemplateCandidate[]>;
 };
+/** 展示名 → kebab 基串（纯函数）：转小写、非字母数字折叠为连字符、合并连字符、裁长度。
+ *  中文名/纯特殊字符规范化后为空串（兜底序列覆盖，见 buildTemplateCode）。 */
+declare function normalizeNameToTemplateCode(name: string): string;
+/** code 合法口径单源（regex + 长度上限；创建生成/迁移判定/寻址校验共用）——server 迁移侧复用导出 */
+declare function isLegalTemplateCode(code: string): boolean;
+/**
+ * 生成项目内唯一合法 code（纯函数，创建缺省路径与存量迁移共用）：
+ * - 多段名（规范化后含连字符）→ 原样采用；单段名 → 补 `tpl-` 前缀段（保证含连字符、与 id 形态可区分）
+ * - 规范化为空（纯中文/特殊字符名）→ `tpl-1` 兜底序列
+ * - 冲突消歧：`{primary}-2`、`{primary}-3` …（后缀追加前裁 base 保总长 ≤31）
+ */
+declare function buildTemplateCode(seedName: string, takenCodes: Iterable<string>): string;
 declare function createDagTemplateRepo(db: Db): DagTemplateRepo;
 
 /**
@@ -780,6 +886,21 @@ declare const NodeStateSchema: z.ZodObject<{
     completedAt: z.ZodDefault<z.ZodNullable<z.ZodDate>>;
 }, z.core.$strip>;
 type NodeState = z.infer<typeof NodeStateSchema>;
+/**
+ * 任务实例节点：任务创建时从模板值拷贝的运行态节点。
+ * `GET /api/tasks/:taskId/node/:nodeId` 在此结构上渲染 prompt 后返回同形 DTO；
+ * 它不同于流转资料包 NodeInfo（后者使用 nodeId 和 upcomingPause）。
+ */
+declare const DagInstanceNodeSchema: z.ZodObject<{
+    id: z.ZodString;
+    label: z.ZodString;
+    phase: z.ZodString;
+    track: z.ZodString;
+    prompt: z.ZodString;
+    skills: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    agents: z.ZodDefault<z.ZodArray<z.ZodString>>;
+}, z.core.$strip>;
+type DagInstanceNode = z.infer<typeof DagInstanceNodeSchema>;
 declare const DagInstanceSchema: z.ZodObject<{
     templateId: z.ZodString;
     templateVersion: z.ZodString;
@@ -790,6 +911,7 @@ declare const DagInstanceSchema: z.ZodObject<{
         track: z.ZodString;
         prompt: z.ZodString;
         skills: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        agents: z.ZodDefault<z.ZodArray<z.ZodString>>;
     }, z.core.$strip>>;
     edges: z.ZodArray<z.ZodObject<{
         from: z.ZodString;
@@ -872,6 +994,7 @@ declare const TaskSchema: z.ZodObject<{
             track: z.ZodString;
             prompt: z.ZodString;
             skills: z.ZodDefault<z.ZodArray<z.ZodString>>;
+            agents: z.ZodDefault<z.ZodArray<z.ZodString>>;
         }, z.core.$strip>>;
         edges: z.ZodArray<z.ZodObject<{
             from: z.ZodString;
@@ -1019,6 +1142,7 @@ declare const TaskContextSchema: z.ZodObject<{
         track: z.ZodString;
         prompt: z.ZodString;
         skills: z.ZodArray<z.ZodString>;
+        agents: z.ZodArray<z.ZodString>;
         upcomingPause: z.ZodNullable<z.ZodString>;
     }, z.core.$strip>>;
     pausedAtEdge: z.ZodNullable<z.ZodObject<{
@@ -1404,6 +1528,598 @@ type EnumRegistryRepo = Repo<EnumRegistry> & {
 };
 declare function createEnumRegistryRepo(db: Db): EnumRegistryRepo;
 
+/**
+ * NodePreset Schema — 通用 DAG 节点资产（T202609020001）
+ *
+ * code = 全局唯一（跨作用域）业务键（npm 分发 / 组合引用 / 升级寻址），kebab-case、创建后不可变；
+ * nodeId = 组装进模板时的默认节点标识（模板内可改名且不影响来源关联——升级按 code 寻址）。
+ * skills 在 Shape 层无 default（F22）：防 Update 派生后 default 注入清空绑定——Create 侧显式 extend 注入。
+ */
+declare const NODE_PRESET_CODE_PATTERN: RegExp;
+/**
+ * Shape 层（纯 object 不挂 refine；default 字段一律不在本层——scope/skills/version 均无 default）。
+ * 实体/派生全从本层 omit/extend，禁止在 refined 全量 schema 上调对象级方法（Zod4 运行时陷阱）。
+ */
+declare const NodePresetShapeSchema: z.ZodObject<{
+    id: z.ZodOptional<z.ZodString>;
+    code: z.ZodString;
+    label: z.ZodString;
+    nodeId: z.ZodString;
+    phase: z.ZodString;
+    track: z.ZodString;
+    prompt: z.ZodString;
+    skills: z.ZodArray<z.ZodString>;
+    agents: z.ZodArray<z.ZodString>;
+    scope: z.ZodEnum<{
+        global: "global";
+        project: "project";
+    }>;
+    projectId: z.ZodOptional<z.ZodString>;
+    description: z.ZodOptional<z.ZodString>;
+    version: z.ZodString;
+    source: z.ZodOptional<z.ZodObject<{
+        package: z.ZodString;
+    }, z.core.$strip>>;
+    enabled: z.ZodOptional<z.ZodBoolean>;
+    createdAt: z.ZodOptional<z.ZodDate>;
+    updatedAt: z.ZodOptional<z.ZodDate>;
+}, z.core.$strip>;
+declare const NodePresetSchema: z.ZodObject<{
+    id: z.ZodOptional<z.ZodString>;
+    code: z.ZodString;
+    label: z.ZodString;
+    nodeId: z.ZodString;
+    phase: z.ZodString;
+    track: z.ZodString;
+    prompt: z.ZodString;
+    skills: z.ZodArray<z.ZodString>;
+    agents: z.ZodArray<z.ZodString>;
+    scope: z.ZodEnum<{
+        global: "global";
+        project: "project";
+    }>;
+    projectId: z.ZodOptional<z.ZodString>;
+    description: z.ZodOptional<z.ZodString>;
+    version: z.ZodString;
+    source: z.ZodOptional<z.ZodObject<{
+        package: z.ZodString;
+    }, z.core.$strip>>;
+    enabled: z.ZodOptional<z.ZodBoolean>;
+    createdAt: z.ZodOptional<z.ZodDate>;
+    updatedAt: z.ZodOptional<z.ZodDate>;
+}, z.core.$strip>;
+type NodePreset = z.infer<typeof NodePresetSchema>;
+/**
+ * 创建输入：default 一律在派生层显式注入（skills/agents/version），Shape 保持无 default——
+ * UpdateSchema 由同一 Shape 派生，Shape 层 default 会被 .partial() 保留注入（F22 反例）。
+ */
+declare const NodePresetCreateSchema: z.ZodObject<{
+    code: z.ZodString;
+    description: z.ZodOptional<z.ZodString>;
+    scope: z.ZodEnum<{
+        global: "global";
+        project: "project";
+    }>;
+    projectId: z.ZodOptional<z.ZodString>;
+    track: z.ZodString;
+    phase: z.ZodString;
+    label: z.ZodString;
+    prompt: z.ZodString;
+    nodeId: z.ZodString;
+    source: z.ZodOptional<z.ZodObject<{
+        package: z.ZodString;
+    }, z.core.$strip>>;
+    skills: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    agents: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    version: z.ZodDefault<z.ZodString>;
+}, z.core.$strip>;
+type NodePresetCreate = z.infer<typeof NodePresetCreateSchema>;
+/**
+ * 更新输入（PUT partial，先 partial 后挂 refine——Zod4 范式）。
+ * code/scope/projectId 保留在 schema（partial 后可选）供不可变守卫判定：路由层「携带且与现值不同 → 409」
+ * （对齐 skill/agent isScopeMutation 语义）；同值携带为幂等 no-op，不触发守卫。
+ */
+declare const NodePresetUpdateSchema: z.ZodObject<{
+    code: z.ZodOptional<z.ZodString>;
+    description: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+    scope: z.ZodOptional<z.ZodEnum<{
+        global: "global";
+        project: "project";
+    }>>;
+    projectId: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+    skills: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    agents: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    track: z.ZodOptional<z.ZodString>;
+    phase: z.ZodOptional<z.ZodString>;
+    label: z.ZodOptional<z.ZodString>;
+    prompt: z.ZodOptional<z.ZodString>;
+    nodeId: z.ZodOptional<z.ZodString>;
+    source: z.ZodOptional<z.ZodOptional<z.ZodObject<{
+        package: z.ZodString;
+    }, z.core.$strip>>>;
+    version: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+}, z.core.$strip>;
+type NodePresetUpdate = z.infer<typeof NodePresetUpdateSchema>;
+/** by-code 复制入参：newCode 全局唯一预校验；副本 version 重置 '1.0.0'、剥除 source（手工副本无包来源） */
+declare const NodePresetCopySchema: z.ZodObject<{
+    newCode: z.ZodString;
+    newScope: z.ZodEnum<{
+        global: "global";
+        project: "project";
+    }>;
+    targetProjectId: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+type NodePresetCopy = z.infer<typeof NodePresetCopySchema>;
+
+interface NodePresetListFilter {
+    scope?: 'global' | 'project' | undefined;
+    /** 叠加可见语义（scope 缺省时）：global + 该项目专用 */
+    projectId?: string | undefined;
+    q?: string | undefined;
+    includeDisabled?: boolean | undefined;
+}
+type NodePresetRepo = Repo<NodePreset> & {
+    /** code 预校验（409 NODE_PRESET_CODE_EXISTS 先于 E11000 兜底）+ 落库 */
+    createNodePreset(data: NodePresetCreate): Promise<NodePreset>;
+    /** by-code 寻址（code 全局唯一无 scope 消歧）；缺省排除停用（读可见性），写通道显式 includeDisabled */
+    getByCode(code: string, opts?: {
+        includeDisabled?: boolean | undefined;
+    }): Promise<NodePreset | null>;
+    /** 写通道更新（显式放行停用资产——启停不冻结管理操作，对齐 skill 惯例） */
+    updateByCode(code: string, patch: EoptPartial<Omit<NodePreset, 'id'>>): Promise<NodePreset | null>;
+    /** 写通道删除（同上放行停用） */
+    deleteByCode(code: string): Promise<boolean>;
+    /** 作用域过滤列表（scope=精确作用域 / projectId=叠加可见 / 缺省全量管理视角；q 搜 code 与 label） */
+    listNodePresets(filter?: NodePresetListFilter): Promise<NodePreset[]>;
+    /** 批量预取（含停用——升级 plan 的 source-disabled 判定依赖；code 全局唯一直查） */
+    listByCodes(codes: string[]): Promise<Map<string, NodePreset>>;
+    /** 仅返回 code 是否已占用；供受限身份做安装预检，不暴露归属或内容。 */
+    isCodeOccupied(code: string): Promise<boolean>;
+    /** by-code 复制：newCode 全局预校验；version 重置 '1.0.0'、剥除 source（手工副本无包来源）、副本默认启用 */
+    copyNodePreset(sourceCode: string, target: {
+        scope: 'global' | 'project';
+        projectId?: string;
+    }, input: NodePresetCopy): Promise<NodePreset>;
+};
+declare function createNodePresetRepo(db: Db): NodePresetRepo;
+
+/**
+ * NodeLibrary Schema — npm 节点库安装登记（T202609020001 K7）
+ *
+ * 运维登记非用户资产：记录已装库的版本 / 节点 code 清单 / 组合定义全文（flow compose 数据通道）
+ * 与漂移检测基线；同库重装按 name upsert 覆盖（{name} unique）。
+ * 写入经 server 端点 /api/node-libraries（CLI 是无状态 HTTP 客户端，不直连库）。
+ */
+/** 组合边（暂停点内联于 edge——与 DagEdge 模型一致，无顶层 pausePoints 字段） */
+declare const CompositionEdgeSchema: z.ZodObject<{
+    from: z.ZodString;
+    to: z.ZodString;
+    condition: z.ZodOptional<z.ZodString>;
+    pausePoint: z.ZodOptional<z.ZodObject<{
+        type: z.ZodEnum<{
+            human_approval: "human_approval";
+            checkpoint: "checkpoint";
+        }>;
+        description: z.ZodString;
+        autoResume: z.ZodDefault<z.ZodBoolean>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+type CompositionEdge = z.infer<typeof CompositionEdgeSchema>;
+/** 组合定义（nodes 为 NodePreset code 引用清单；edges 拓扑照抄组装进模板） */
+declare const CompositionSchema: z.ZodObject<{
+    name: z.ZodString;
+    description: z.ZodOptional<z.ZodString>;
+    nodes: z.ZodArray<z.ZodString>;
+    edges: z.ZodArray<z.ZodObject<{
+        from: z.ZodString;
+        to: z.ZodString;
+        condition: z.ZodOptional<z.ZodString>;
+        pausePoint: z.ZodOptional<z.ZodObject<{
+            type: z.ZodEnum<{
+                human_approval: "human_approval";
+                checkpoint: "checkpoint";
+            }>;
+            description: z.ZodString;
+            autoResume: z.ZodDefault<z.ZodBoolean>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+type Composition = z.infer<typeof CompositionSchema>;
+declare const NodeLibrarySchema: z.ZodObject<{
+    id: z.ZodOptional<z.ZodString>;
+    name: z.ZodString;
+    version: z.ZodString;
+    scope: z.ZodEnum<{
+        global: "global";
+        project: "project";
+    }>;
+    projectId: z.ZodOptional<z.ZodString>;
+    nodes: z.ZodArray<z.ZodString>;
+    compositions: z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        description: z.ZodOptional<z.ZodString>;
+        nodes: z.ZodArray<z.ZodString>;
+        edges: z.ZodArray<z.ZodObject<{
+            from: z.ZodString;
+            to: z.ZodString;
+            condition: z.ZodOptional<z.ZodString>;
+            pausePoint: z.ZodOptional<z.ZodObject<{
+                type: z.ZodEnum<{
+                    human_approval: "human_approval";
+                    checkpoint: "checkpoint";
+                }>;
+                description: z.ZodString;
+                autoResume: z.ZodDefault<z.ZodBoolean>;
+            }, z.core.$strip>>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+    installedAt: z.ZodOptional<z.ZodDate>;
+}, z.core.$strip>;
+type NodeLibrary = z.infer<typeof NodeLibrarySchema>;
+/** 安装登记 upsert 入参（flow install 全部节点落库成功后写入——登记后置，防节点半落库登记先行的部分副作用） */
+declare const NodeLibraryUpsertSchema: z.ZodObject<{
+    name: z.ZodString;
+    version: z.ZodString;
+    scope: z.ZodEnum<{
+        global: "global";
+        project: "project";
+    }>;
+    projectId: z.ZodOptional<z.ZodString>;
+    nodes: z.ZodArray<z.ZodString>;
+    compositions: z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        description: z.ZodOptional<z.ZodString>;
+        nodes: z.ZodArray<z.ZodString>;
+        edges: z.ZodArray<z.ZodObject<{
+            from: z.ZodString;
+            to: z.ZodString;
+            condition: z.ZodOptional<z.ZodString>;
+            pausePoint: z.ZodOptional<z.ZodObject<{
+                type: z.ZodEnum<{
+                    human_approval: "human_approval";
+                    checkpoint: "checkpoint";
+                }>;
+                description: z.ZodString;
+                autoResume: z.ZodDefault<z.ZodBoolean>;
+            }, z.core.$strip>>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+type NodeLibraryUpsert = z.infer<typeof NodeLibraryUpsertSchema>;
+
+type NodeLibraryRepo = Repo<NodeLibrary> & {
+    /**
+     * 同库重装 upsert（{name} unique）：按 name 定位整笔替换 version/nodes/compositions，
+     * installedAt 刷新为本次安装时刻。scope 变更（global ↔ project）随 upsert 一并生效——
+     * 登记是运维态非用户资产，以最后一次安装的事实为准。
+     */
+    upsertNodeLibrary(data: NodeLibraryUpsert): Promise<NodeLibrary>;
+    /** 可见性过滤列表（叠加/精确语义由路由层决定传参：project 上下文恒 overlay 本项目） */
+    listNodeLibraries(filter?: {
+        scope?: 'global' | 'project' | undefined;
+        projectId?: string | undefined;
+    }): Promise<NodeLibrary[]>;
+};
+declare function createNodeLibraryRepo(db: Db): NodeLibraryRepo;
+
+/**
+ * Auth Schema — 云主机部署权限体系（T202608310001）
+ * 三凭证模型：管理员账号密码（Web 登录）/ 管理员 Token（admin- 前缀，全权）/
+ * 项目 Token（project- 前缀，绑定单项目读写、全局资产只读）。
+ * 服务端仅存单向哈希（密码 scrypt / Token sha256），明文零落库。
+ */
+/** Token 类型：前缀自描述（admin- / project-），随机部分 43 字符 base64url */
+declare const AuthTokenTypeSchema: z.ZodEnum<{
+    project: "project";
+    admin: "admin";
+}>;
+type AuthTokenType = z.infer<typeof AuthTokenTypeSchema>;
+declare const AuthAccountSchema: z.ZodObject<{
+    id: z.ZodOptional<z.ZodString>;
+    username: z.ZodString;
+    passwordHash: z.ZodString;
+    createdAt: z.ZodOptional<z.ZodDate>;
+    updatedAt: z.ZodOptional<z.ZodDate>;
+}, z.core.$strip>;
+type AuthAccount = z.infer<typeof AuthAccountSchema>;
+/** 初始化引导创建唯一管理员账号（PRD §3.2：密码最小长度 8） */
+declare const AuthAccountCreateSchema: z.ZodObject<{
+    username: z.ZodString;
+    password: z.ZodString;
+}, z.core.$strip>;
+type AuthAccountCreate = z.infer<typeof AuthAccountCreateSchema>;
+/** 修改密码：需验证当前密码；新密码策略同初始化（PRD §3.2） */
+declare const PasswordChangeSchema: z.ZodObject<{
+    currentPassword: z.ZodString;
+    newPassword: z.ZodString;
+}, z.core.$strip>;
+type PasswordChange = z.infer<typeof PasswordChangeSchema>;
+declare const LoginSchema: z.ZodObject<{
+    username: z.ZodString;
+    password: z.ZodString;
+}, z.core.$strip>;
+type LoginInput = z.infer<typeof LoginSchema>;
+declare const AuthTokenSchema: z.ZodObject<{
+    id: z.ZodOptional<z.ZodString>;
+    tokenHash: z.ZodString;
+    type: z.ZodEnum<{
+        project: "project";
+        admin: "admin";
+    }>;
+    projectId: z.ZodOptional<z.ZodString>;
+    createdAt: z.ZodOptional<z.ZodDate>;
+    updatedAt: z.ZodOptional<z.ZodDate>;
+}, z.core.$strip>;
+type AuthToken = z.infer<typeof AuthTokenSchema>;
+/** Token 生成响应：明文 Token 仅此形态出现一次（PRD §3.5 一次性展示） */
+declare const AuthTokenGenResponseSchema: z.ZodObject<{
+    token: z.ZodString;
+    type: z.ZodEnum<{
+        project: "project";
+        admin: "admin";
+    }>;
+    projectId: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+type AuthTokenGenResponse = z.infer<typeof AuthTokenGenResponseSchema>;
+/** Token 状态视图（无值）：列表/详情展示形态 */
+declare const AuthTokenStatusSchema: z.ZodObject<{
+    type: z.ZodEnum<{
+        project: "project";
+        admin: "admin";
+    }>;
+    projectId: z.ZodOptional<z.ZodString>;
+    hasToken: z.ZodBoolean;
+    createdAt: z.ZodOptional<z.ZodNullable<z.ZodDate>>;
+}, z.core.$strip>;
+type AuthTokenStatus = z.infer<typeof AuthTokenStatusSchema>;
+/** whoami 身份查询响应（身份四元组：身份 + 绑定项目 + server 地址 + 开关状态，PRD §3.6） */
+declare const AuthWhoamiSchema: z.ZodObject<{
+    identity: z.ZodEnum<{
+        none: "none";
+        project: "project";
+        admin: "admin";
+    }>;
+    project: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+        id: z.ZodString;
+        key: z.ZodString;
+        name: z.ZodString;
+    }, z.core.$strip>>>;
+    authEnabled: z.ZodBoolean;
+    server: z.ZodObject<{
+        url: z.ZodString;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+type AuthWhoami = z.infer<typeof AuthWhoamiSchema>;
+/** 鉴权开关状态（预鉴权可达，例外②身份元信息） */
+declare const AuthStatusSchema: z.ZodObject<{
+    authEnabled: z.ZodBoolean;
+    needsSetup: z.ZodBoolean;
+}, z.core.$strip>;
+type AuthStatus = z.infer<typeof AuthStatusSchema>;
+
+/** 凭证哈希单源（T202608310001）：密码 scrypt / Token sha256 / 会话 id 随机——全部 Node 内置 crypto，零新依赖 */
+declare const AUTH_COLLECTIONS: {
+    readonly accounts: "auth_accounts";
+    readonly tokens: "auth_tokens";
+    readonly sessions: "auth_sessions";
+};
+declare function createAuthAccountRepo(db: Db): {
+    getAccount(): Promise<AuthAccount | null>;
+    /** 创建唯一管理员账号：已有账号 → 409（并发初始化仅首个成功，PRD §3.2）。
+     *  单例机制 = 固定 _id 插入（E11000 兜底任意并发形态——异名并发同样仅首个成功） */
+    createAccount(username: string, passwordHash: string): Promise<AuthAccount>;
+    updatePassword(accountId: string, newPasswordHash: string): Promise<AuthAccount | null>;
+    list(filter?: mongodb.Filter<mongodb.Document>): Promise<{
+        username: string;
+        passwordHash: string;
+        id?: string | undefined;
+        createdAt?: Date | undefined;
+        updatedAt?: Date | undefined;
+    }[]>;
+    getById(id: string): Promise<{
+        username: string;
+        passwordHash: string;
+        id?: string | undefined;
+        createdAt?: Date | undefined;
+        updatedAt?: Date | undefined;
+    } | null>;
+    getByName(name: string): Promise<{
+        username: string;
+        passwordHash: string;
+        id?: string | undefined;
+        createdAt?: Date | undefined;
+        updatedAt?: Date | undefined;
+    } | null>;
+    create(data: OmitId<{
+        username: string;
+        passwordHash: string;
+        id?: string | undefined;
+        createdAt?: Date | undefined;
+        updatedAt?: Date | undefined;
+    }>): Promise<{
+        username: string;
+        passwordHash: string;
+        id?: string | undefined;
+        createdAt?: Date | undefined;
+        updatedAt?: Date | undefined;
+    }>;
+    update(id: string, patch: EoptPartial<OmitId<{
+        username: string;
+        passwordHash: string;
+        id?: string | undefined;
+        createdAt?: Date | undefined;
+        updatedAt?: Date | undefined;
+    }>>): Promise<{
+        username: string;
+        passwordHash: string;
+        id?: string | undefined;
+        createdAt?: Date | undefined;
+        updatedAt?: Date | undefined;
+    } | null>;
+    delete(id: string): Promise<boolean>;
+    _collection: mongodb.Collection<mongodb.Document>;
+};
+declare function createAuthTokenRepo(db: Db): {
+    /** sha256(token 全串含前缀) 等值查询（唯一索引命中） */
+    findByHash(tokenHash: string): Promise<AuthToken | null>;
+    getTokenStatus(type: AuthTokenType, projectId?: string): Promise<{
+        hasToken: boolean;
+        createdAt: Date | null;
+    }>;
+    /** 重置语义：旧 Token 删除 + 新 Token 落库（重置后旧值立即失效，PRD §3.4）。
+     *  事务包删+插（rs0 支持——失败窗口不留零 Token 状态，失败不变性）；admin 单例 /
+     *  project 每项目一枚由 partial unique 索引兜底并发交错 */
+    upsertToken(type: AuthTokenType, tokenHash: string, projectId?: string): Promise<AuthToken>;
+    listProjectTokenStatuses(projectIds: string[]): Promise<Map<string, {
+        hasToken: boolean;
+        createdAt: Date | null;
+    }>>;
+    list(filter?: mongodb.Filter<mongodb.Document>): Promise<{
+        tokenHash: string;
+        type: "project" | "admin";
+        id?: string | undefined;
+        projectId?: string | undefined;
+        createdAt?: Date | undefined;
+        updatedAt?: Date | undefined;
+    }[]>;
+    getById(id: string): Promise<{
+        tokenHash: string;
+        type: "project" | "admin";
+        id?: string | undefined;
+        projectId?: string | undefined;
+        createdAt?: Date | undefined;
+        updatedAt?: Date | undefined;
+    } | null>;
+    getByName(name: string): Promise<{
+        tokenHash: string;
+        type: "project" | "admin";
+        id?: string | undefined;
+        projectId?: string | undefined;
+        createdAt?: Date | undefined;
+        updatedAt?: Date | undefined;
+    } | null>;
+    create(data: OmitId<{
+        tokenHash: string;
+        type: "project" | "admin";
+        id?: string | undefined;
+        projectId?: string | undefined;
+        createdAt?: Date | undefined;
+        updatedAt?: Date | undefined;
+    }>): Promise<{
+        tokenHash: string;
+        type: "project" | "admin";
+        id?: string | undefined;
+        projectId?: string | undefined;
+        createdAt?: Date | undefined;
+        updatedAt?: Date | undefined;
+    }>;
+    update(id: string, patch: EoptPartial<OmitId<{
+        tokenHash: string;
+        type: "project" | "admin";
+        id?: string | undefined;
+        projectId?: string | undefined;
+        createdAt?: Date | undefined;
+        updatedAt?: Date | undefined;
+    }>>): Promise<{
+        tokenHash: string;
+        type: "project" | "admin";
+        id?: string | undefined;
+        projectId?: string | undefined;
+        createdAt?: Date | undefined;
+        updatedAt?: Date | undefined;
+    } | null>;
+    delete(id: string): Promise<boolean>;
+    _collection: mongodb.Collection<mongodb.Document>;
+};
+/** 会话实体（Zod 单源——core DTO 约定；TTL 清理 + 查询二次有效期判定） */
+declare const AuthSessionSchema: z.ZodObject<{
+    id: z.ZodOptional<z.ZodString>;
+    sessionId: z.ZodString;
+    accountId: z.ZodString;
+    expiresAt: z.ZodDate;
+    createdAt: z.ZodOptional<z.ZodDate>;
+    updatedAt: z.ZodOptional<z.ZodDate>;
+}, z.core.$strip>;
+type AuthSession = z.infer<typeof AuthSessionSchema>;
+declare function createAuthSessionRepo(db: Db): {
+    createSession(sessionId: string, accountId: string, expiresAt: Date): Promise<AuthSession>;
+    /** 有效期判定内联：过期即删返回 null（不等 TTL 清理） */
+    findValidSession(sessionId: string): Promise<AuthSession | null>;
+    deleteBySessionId(sessionId: string): Promise<boolean>;
+    /** 启动时清扫过期会话（幂等，配合 TTL 索引） */
+    deleteExpiredSessions(): Promise<number>;
+    list(filter?: mongodb.Filter<mongodb.Document>): Promise<{
+        sessionId: string;
+        accountId: string;
+        expiresAt: Date;
+        id?: string | undefined;
+        createdAt?: Date | undefined;
+        updatedAt?: Date | undefined;
+    }[]>;
+    getById(id: string): Promise<{
+        sessionId: string;
+        accountId: string;
+        expiresAt: Date;
+        id?: string | undefined;
+        createdAt?: Date | undefined;
+        updatedAt?: Date | undefined;
+    } | null>;
+    getByName(name: string): Promise<{
+        sessionId: string;
+        accountId: string;
+        expiresAt: Date;
+        id?: string | undefined;
+        createdAt?: Date | undefined;
+        updatedAt?: Date | undefined;
+    } | null>;
+    create(data: OmitId<{
+        sessionId: string;
+        accountId: string;
+        expiresAt: Date;
+        id?: string | undefined;
+        createdAt?: Date | undefined;
+        updatedAt?: Date | undefined;
+    }>): Promise<{
+        sessionId: string;
+        accountId: string;
+        expiresAt: Date;
+        id?: string | undefined;
+        createdAt?: Date | undefined;
+        updatedAt?: Date | undefined;
+    }>;
+    update(id: string, patch: EoptPartial<OmitId<{
+        sessionId: string;
+        accountId: string;
+        expiresAt: Date;
+        id?: string | undefined;
+        createdAt?: Date | undefined;
+        updatedAt?: Date | undefined;
+    }>>): Promise<{
+        sessionId: string;
+        accountId: string;
+        expiresAt: Date;
+        id?: string | undefined;
+        createdAt?: Date | undefined;
+        updatedAt?: Date | undefined;
+    } | null>;
+    delete(id: string): Promise<boolean>;
+    _collection: mongodb.Collection<mongodb.Document>;
+};
+
+/** 密码哈希存储形态：scrypt$N$r$p$salt$hash（参数内联，升参时存量哈希可校验迁移） */
+declare function hashPassword(password: string): Promise<string>;
+/** 密码校验（timingSafeEqual 防时序攻击；格式不符返回 false 不抛错） */
+declare function verifyPassword(password: string, stored: string): Promise<boolean>;
+/** Token 明文生成：前缀 + base64url(randomBytes(32))（43 字符 URL-safe，D3） */
+declare function generateToken(type: 'admin' | 'project'): string;
+/** Token 前缀合法性与类型提取（非前缀形态 = 格式非法） */
+declare function tokenTypeFromValue(token: string): AuthTokenKind | null;
+type AuthTokenKind = 'admin' | 'project';
+/** Token sha256 hex（哈希对象含前缀全串，D2） */
+declare function hashToken(token: string): string;
+/** 会话 id：256bit 随机 hex（D4） */
+declare function generateSessionId(): string;
+
 /**
  * 引用文档 Schema（T202608270002：skill/agent 资产多文件支持）
  * 引用文档 = 资产主文档之外的附加文档集合，以相对路径标识、内嵌实体存储；
@@ -1509,7 +2225,9 @@ declare function assertReferenceAggregateLimit(params: {
  */
 /** 当前导出格式版本（前向兼容锚点：升级格式时递增并处理旧版兼容） */
 declare const EXPORT_FORMAT_VERSION = "1.0";
-/** 模板内容投影：剥 id/projectId/enabled/时间戳；version/isDefault 剥 default 强制显式携带 */
+/** 模板内容投影：剥 id/projectId/enabled/时间戳/code；version/isDefault 剥 default 强制显式携带。
+ *  T202609020002：code 不入 bundle——code 项目内唯一且不可变，跨环境携带会在同名覆盖时违反不可变
+ *  （导入新建按目标项目自动生成，覆盖保留现值；跨环境稳定引用键是后续节点资产 code 的语义）。 */
 declare const TemplatePayloadSchema: z.ZodObject<{
     name: z.ZodString;
     description: z.ZodString;
@@ -1520,6 +2238,13 @@ declare const TemplatePayloadSchema: z.ZodObject<{
         track: z.ZodString;
         prompt: z.ZodString;
         skills: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        agents: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        sourcePreset: z.ZodOptional<z.ZodObject<{
+            code: z.ZodString;
+            version: z.ZodString;
+            contentHash: z.ZodString;
+            agents: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        }, z.core.$strip>>;
     }, z.core.$strip>>;
     edges: z.ZodArray<z.ZodObject<{
         from: z.ZodString;
@@ -1613,6 +2338,13 @@ declare const ExportBundleSchema: z.ZodObject<{
             track: z.ZodString;
             prompt: z.ZodString;
             skills: z.ZodDefault<z.ZodArray<z.ZodString>>;
+            agents: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            sourcePreset: z.ZodOptional<z.ZodObject<{
+                code: z.ZodString;
+                version: z.ZodString;
+                contentHash: z.ZodString;
+                agents: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            }, z.core.$strip>>;
         }, z.core.$strip>>;
         edges: z.ZodArray<z.ZodObject<{
             from: z.ZodString;
@@ -1696,6 +2428,13 @@ declare const ImportPlanRequestSchema: z.ZodObject<{
                 track: z.ZodString;
                 prompt: z.ZodString;
                 skills: z.ZodDefault<z.ZodArray<z.ZodString>>;
+                agents: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                sourcePreset: z.ZodOptional<z.ZodObject<{
+                    code: z.ZodString;
+                    version: z.ZodString;
+                    contentHash: z.ZodString;
+                    agents: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                }, z.core.$strip>>;
             }, z.core.$strip>>;
             edges: z.ZodArray<z.ZodObject<{
                 from: z.ZodString;
@@ -1812,6 +2551,13 @@ declare const ImportApplyRequestSchema: z.ZodObject<{
                 track: z.ZodString;
                 prompt: z.ZodString;
                 skills: z.ZodDefault<z.ZodArray<z.ZodString>>;
+                agents: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                sourcePreset: z.ZodOptional<z.ZodObject<{
+                    code: z.ZodString;
+                    version: z.ZodString;
+                    contentHash: z.ZodString;
+                    agents: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                }, z.core.$strip>>;
             }, z.core.$strip>>;
             edges: z.ZodArray<z.ZodObject<{
                 from: z.ZodString;
@@ -1975,6 +2721,14 @@ declare const ImportPlanResponseSchema: z.ZodObject<{
             project: "project";
         }>;
     }, z.core.$strip>>;
+    directSkillChecks: z.ZodArray<z.ZodObject<{
+        node: z.ZodString;
+        skill: z.ZodString;
+        status: z.ZodEnum<{
+            ok: "ok";
+            missing: "missing";
+        }>;
+    }, z.core.$strip>>;
     warnings: z.ZodArray<z.ZodString>;
 }, z.core.$strip>;
 type ImportPlanResponse = z.infer<typeof ImportPlanResponseSchema>;
@@ -2016,6 +2770,7 @@ declare const ImportApplyResponseSchema: z.ZodObject<{
         }>;
         message: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>>;
+    sourceStripped: z.ZodArray<z.ZodString>;
 }, z.core.$strip>;
 type ImportApplyResponse = z.infer<typeof ImportApplyResponseSchema>;
 /** 决策向量寻址键（skill/agent 含 scope 段，modelAlias 空段） */
@@ -2070,6 +2825,7 @@ declare const NodeInfoSchema: z.ZodObject<{
     track: z.ZodString;
     prompt: z.ZodString;
     skills: z.ZodArray<z.ZodString>;
+    agents: z.ZodArray<z.ZodString>;
     upcomingPause: z.ZodNullable<z.ZodString>;
 }, z.core.$strip>;
 type NodeInfo = z.infer<typeof NodeInfoSchema>;
@@ -2097,6 +2853,7 @@ declare const AdvanceResponseSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
         track: z.ZodString;
         prompt: z.ZodString;
         skills: z.ZodArray<z.ZodString>;
+        agents: z.ZodArray<z.ZodString>;
         upcomingPause: z.ZodNullable<z.ZodString>;
     }, z.core.$strip>;
 }, z.core.$strip>, z.ZodObject<{
@@ -2167,6 +2924,7 @@ declare const ApproveResponseSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
         track: z.ZodString;
         prompt: z.ZodString;
         skills: z.ZodArray<z.ZodString>;
+        agents: z.ZodArray<z.ZodString>;
         upcomingPause: z.ZodNullable<z.ZodString>;
     }, z.core.$strip>;
 }, z.core.$strip>, z.ZodObject<{
@@ -2314,6 +3072,72 @@ declare const WriteAckSchema: z.ZodObject<{
     }, z.core.$strip>;
 }, z.core.$strip>;
 type WriteAck = z.infer<typeof WriteAckSchema>;
+/** T202609010002 D6：批量写回执（WriteAck-B）——批量端点聚合形态：逐条新条目标识 +
+ * 逐条失败定位 + 一份任务进度摘要；无逐条 echo（50 条 echo 反向制造膨胀）。
+ * index 一律以调用方原始提交序为基准（artifact 本地 file 读取失败由 CLI 压缩提交，
+ * CLI 负责把服务端序映射回原始序）；applied=0 且有 failures 时由 CLI/MCP 层映射为
+ * 失败三要素呈现。acceptance/non-goal 为纯字符串条目无 id/kind，entries 项仅 {index}。 */
+declare const TaskBatchEntrySchema: z.ZodObject<{
+    index: z.ZodNumber;
+    id: z.ZodOptional<z.ZodString>;
+    kind: z.ZodOptional<z.ZodEnum<{
+        check: "check";
+        decision: "decision";
+        artifact: "artifact";
+        confirmation: "confirmation";
+        archnote: "archnote";
+    }>>;
+}, z.core.$strip>;
+declare const TaskBatchFailureSchema: z.ZodObject<{
+    index: z.ZodNumber;
+    message: z.ZodString;
+    hint: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+declare const TaskBatchAckSchema: z.ZodObject<{
+    taskId: z.ZodString;
+    applied: z.ZodNumber;
+    updated: z.ZodArray<z.ZodString>;
+    entries: z.ZodArray<z.ZodObject<{
+        index: z.ZodNumber;
+        id: z.ZodOptional<z.ZodString>;
+        kind: z.ZodOptional<z.ZodEnum<{
+            check: "check";
+            decision: "decision";
+            artifact: "artifact";
+            confirmation: "confirmation";
+            archnote: "archnote";
+        }>>;
+    }, z.core.$strip>>;
+    failures: z.ZodArray<z.ZodObject<{
+        index: z.ZodNumber;
+        message: z.ZodString;
+        hint: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    updatedAt: z.ZodDate;
+    task: z.ZodObject<{
+        taskId: z.ZodString;
+        title: z.ZodString;
+        type: z.ZodOptional<z.ZodEnum<{
+            feature: "feature";
+            bugfix: "bugfix";
+            "ui-tweak": "ui-tweak";
+            research: "research";
+        }>>;
+        currentNode: z.ZodString;
+        currentPhase: z.ZodString;
+        status: z.ZodString;
+        pausedAt: z.ZodNullable<z.ZodString>;
+        track: z.ZodString;
+        projectId: z.ZodString;
+        progress: z.ZodObject<{
+            completed: z.ZodNumber;
+            total: z.ZodNumber;
+        }, z.core.$strip>;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+type TaskBatchEntry = z.infer<typeof TaskBatchEntrySchema>;
+type TaskBatchFailure = z.infer<typeof TaskBatchFailureSchema>;
+type TaskBatchAck = z.infer<typeof TaskBatchAckSchema>;
 /** T202608280007 F1：任务创建响应（原全量 Task 实体）——任务摘要 + 首节点开工资料，与 advance 轻量形态同构 */
 declare const CreateTaskResponseSchema: z.ZodObject<{
     task: z.ZodObject<{
@@ -2342,6 +3166,7 @@ declare const CreateTaskResponseSchema: z.ZodObject<{
         track: z.ZodString;
         prompt: z.ZodString;
         skills: z.ZodArray<z.ZodString>;
+        agents: z.ZodArray<z.ZodString>;
         upcomingPause: z.ZodNullable<z.ZodString>;
     }, z.core.$strip>;
 }, z.core.$strip>;
@@ -2383,6 +3208,69 @@ declare const AssetSetEnabledSchema: z.ZodObject<{
 }, z.core.$strip>;
 type AssetSetEnabled = z.infer<typeof AssetSetEnabledSchema>;
 
+/**
+ * 模板升级 HTTP 契约（T202609020001 K5）——plan/apply 两阶段协议的请求形状。
+ * plan 响应与 apply 回执形状由 core 顶层模块 template-upgrade.ts 的纯函数类型承载（UpgradePlanResult / UpgradeApplyOutcome）。
+ */
+/** 升级节点五态（F23 组合态优先级：hash 差 ⇒ 一律 local-modified——本地修改保护优先于升级提示） */
+declare const UpgradeNodeStatusSchema: z.ZodEnum<{
+    updatable: "updatable";
+    "local-modified": "local-modified";
+    "up-to-date": "up-to-date";
+    "source-missing": "source-missing";
+    "source-disabled": "source-disabled";
+}>;
+type UpgradeNodeStatus = z.infer<typeof UpgradeNodeStatusSchema>;
+declare const UpgradeActionSchema: z.ZodEnum<{
+    skip: "skip";
+    upgrade: "upgrade";
+    keep: "keep";
+}>;
+type UpgradeAction = z.infer<typeof UpgradeActionSchema>;
+/**
+ * 单节点升级决策。expected（可选）= 决策所依据的 plan 时刻状态——apply 重算当前状态与 expected
+ * 不符 → 422 UPGRADE_STALE（防 plan→apply 时间窗内模板被编辑后决策静默覆盖本地修改）；
+ * 省略时仅做不变式校验（source-missing/source-disabled 一律按 skip、local-modified 必须显式决策）。
+ */
+declare const UpgradeDecisionSchema: z.ZodObject<{
+    nodeId: z.ZodString;
+    action: z.ZodEnum<{
+        skip: "skip";
+        upgrade: "upgrade";
+        keep: "keep";
+    }>;
+    expected: z.ZodOptional<z.ZodObject<{
+        status: z.ZodEnum<{
+            updatable: "updatable";
+            "local-modified": "local-modified";
+            "up-to-date": "up-to-date";
+            "source-missing": "source-missing";
+            "source-disabled": "source-disabled";
+        }>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+type UpgradeDecision = z.infer<typeof UpgradeDecisionSchema>;
+declare const UpgradeApplyRequestSchema: z.ZodObject<{
+    decisions: z.ZodArray<z.ZodObject<{
+        nodeId: z.ZodString;
+        action: z.ZodEnum<{
+            skip: "skip";
+            upgrade: "upgrade";
+            keep: "keep";
+        }>;
+        expected: z.ZodOptional<z.ZodObject<{
+            status: z.ZodEnum<{
+                updatable: "updatable";
+                "local-modified": "local-modified";
+                "up-to-date": "up-to-date";
+                "source-missing": "source-missing";
+                "source-disabled": "source-disabled";
+            }>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+type UpgradeApplyRequest = z.infer<typeof UpgradeApplyRequestSchema>;
+
 /**
  * 服务配置 schema（N018 D5）：Zod 单一真相源，core 只承载纯 schema + env 键映射，
  * 零 fs/process I/O（保持 core 领域纯净）。JSONC 文件加载/分层合并/来源追踪的 loader 在
@@ -2406,12 +3294,14 @@ declare const SimingConfigSchema: z.ZodObject<{
         info: "info";
         warn: "warn";
     }>>;
-    auth: z.ZodOptional<z.ZodUnknown>;
+    auth: z.ZodPrefault<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+    }, z.core.$strip>>;
     cors: z.ZodOptional<z.ZodUnknown>;
 }, z.core.$strip>;
 type SimingConfig = z.infer<typeof SimingConfigSchema>;
-/** 可经环境变量/CLI 参数/配置文件配置的 key（预留字段 auth/cors 除外） */
-declare const SIMING_CONFIG_KEYS: readonly ["mongoUri", "port", "host", "logLevel"];
+/** 可经环境变量/CLI 参数/配置文件配置的 key（cors 仍为预留字段） */
+declare const SIMING_CONFIG_KEYS: readonly ["mongoUri", "port", "host", "logLevel", "auth"];
 type SimingConfigKey = (typeof SIMING_CONFIG_KEYS)[number];
 /**
  * env 键映射单源（N018 D5）：server env resolver 与 cli loader 共用，
@@ -2419,12 +3309,17 @@ type SimingConfigKey = (typeof SIMING_CONFIG_KEYS)[number];
  * 沿用既有 server EnvSchema 约定（见 ENVIRONMENT.md）。
  */
 declare const SIMING_CONFIG_ENV_KEYS: Record<SimingConfigKey, string>;
+/**
+ * auth 键的 env 值解析（布尔字符串形态）：SIMING_AUTH_ENABLED=true/false，
+ * 其余值 fail-fast 由调用方处理（返回 undefined 表示 env 未提供）。
+ */
+declare function parseAuthEnabledEnvValue(raw: string): boolean | undefined;
 
 /**
  * Domain error types — thrown by core business logic, caught by server's app.onError().
  */
 /** N012 语义化业务错误码（可选挂载到 AppError 子类；HTTP 形状向后兼容：error 字段缺省仍为 http 级 code） */
-type BizCode = 'PROJECT_ARCHIVED' | 'TEMPLATE_PROJECT_MISMATCH' | 'TEMPLATE_PROJECT_IMMUTABLE' | 'SCOPE_IMMUTABLE' | 'TASK_PROJECT_IMMUTABLE' | 'DEFAULT_PROJECT_IMMUTABLE' | 'TEMPLATE_NAME_CONFLICT' | 'PROJECT_NOT_FOUND' | 'AGENT_SKILL_SCOPE_CONFLICT' | 'MODEL_CODE_EXISTS' | 'MODEL_CODE_IMMUTABLE' | 'MODEL_ALIAS_IN_USE' | 'ENUM_ENTRY_BUILTIN' | 'ENUM_ENTRY_IN_USE' | 'ENUM_VALUE_CONFLICT' | 'NAME_SCOPE_CONFLICT' | 'REFERENCE_IN_USE' | 'TASK_DOC_NOT_SET' | 'TASK_DOC_NOT_FOUND' | 'TASK_DOC_SECTION_NOT_FOUND' | 'TASK_AT_PAUSE_POINT' | 'TASK_NOT_AT_PAUSE_POINT' | 'NODE_NOT_IN_INSTANCE' | 'CHECK_NOT_FOUND' | 'NODE_RECORD_NOT_WRITABLE' | 'TASK_TERMINATED' | 'TASK_PRUNE_GRAPH_INVALID' | 'TASK_SKIP_NODE_NOT_FOUND' | 'TASK_TYPE_TRACK_MISMATCH' | 'TEMPLATE_DISABLED';
+type BizCode = 'PROJECT_ARCHIVED' | 'TEMPLATE_PROJECT_MISMATCH' | 'TEMPLATE_PROJECT_IMMUTABLE' | 'SCOPE_IMMUTABLE' | 'TASK_PROJECT_IMMUTABLE' | 'DEFAULT_PROJECT_IMMUTABLE' | 'TEMPLATE_NAME_CONFLICT' | 'TEMPLATE_CODE_CONFLICT' | 'TEMPLATE_CODE_IMMUTABLE' | 'PROJECT_NOT_FOUND' | 'AGENT_SKILL_SCOPE_CONFLICT' | 'MODEL_CODE_EXISTS' | 'MODEL_CODE_IMMUTABLE' | 'MODEL_ALIAS_IN_USE' | 'ENUM_ENTRY_BUILTIN' | 'ENUM_ENTRY_IN_USE' | 'ENUM_VALUE_CONFLICT' | 'NAME_SCOPE_CONFLICT' | 'REFERENCE_IN_USE' | 'TASK_DOC_NOT_SET' | 'TASK_DOC_NOT_FOUND' | 'TASK_DOC_SECTION_NOT_FOUND' | 'TASK_AT_PAUSE_POINT' | 'TASK_NOT_AT_PAUSE_POINT' | 'NODE_NOT_IN_INSTANCE' | 'CHECK_NOT_FOUND' | 'NODE_RECORD_NOT_WRITABLE' | 'TASK_TERMINATED' | 'TASK_PRUNE_GRAPH_INVALID' | 'TASK_SKIP_NODE_NOT_FOUND' | 'TASK_TYPE_TRACK_MISMATCH' | 'TEMPLATE_DISABLED' | 'AUTH_REQUIRED' | 'AUTH_TOKEN_INVALID' | 'AUTH_INVALID_CREDENTIALS' | 'AUTH_FORBIDDEN' | 'AUTH_ACCOUNT_EXISTS' | 'BATCH_EMPTY' | 'BATCH_LIMIT_EXCEEDED' | 'BATCH_PAYLOAD_TOO_LARGE' | 'NODE_PRESET_CODE_EXISTS' | 'NODE_PRESET_CODE_IMMUTABLE' | 'NODE_PRESET_VERSION_REQUIRED' | 'TEMPLATE_NODE_ID_DUPLICATE' | 'NODE_LIBRARY_COMPOSITION_NOT_FOUND' | 'UPGRADE_DECISION_REQUIRED' | 'UPGRADE_STALE' | 'FLOW_MANIFEST_INVALID';
 /** bizCode → 用户可读中文 message（单一真相源，路由层抛错时引用） */
 declare const BIZ_CODE_MESSAGES: Record<BizCode, string>;
 interface AppErrorOptions {
@@ -2445,7 +3340,28 @@ declare class NotFoundError extends AppError {
     readonly code = "not_found";
     constructor(resource: string, id: string, options?: AppErrorOptions);
     readonly bizCode?: BizCode;
+    /**
+     * T202609020002：not-found 相近候选清单（模板寻址防转录错误——格式合法但不存在的
+     * code/数据库 id，错误信息携带项目内相近模板，转录错误可当场发现）。附加到响应体
+     * 的 candidates 字段；仅模板寻址路由经 withTemplateCandidates 注入（构造后写入故非
+     * readonly——外部读、内部一次写），其余资源 not-found 形态不变。
+     */
+    templateCandidates?: {
+        id: string;
+        code: string;
+        name: string;
+    }[];
+    withTemplateCandidates(candidates: {
+        id: string;
+        code: string;
+        name: string;
+    }[]): this;
     toResponse(): {
+        candidates?: {
+            id: string;
+            code: string;
+            name: string;
+        }[];
         error: string;
         message: string;
         resource: string;
@@ -2490,6 +3406,28 @@ declare class ValidationError extends AppError {
         issues: unknown[];
     };
 }
+/** 401 未授权（T202608310001：鉴权域——无凭证/凭证无效；message 取 BIZ_CODE_MESSAGES 单源） */
+declare class UnauthorizedError extends AppError {
+    readonly bizCode: Extract<BizCode, 'AUTH_REQUIRED' | 'AUTH_TOKEN_INVALID' | 'AUTH_INVALID_CREDENTIALS'>;
+    readonly statusCode = 401;
+    readonly code = "unauthorized";
+    constructor(bizCode: Extract<BizCode, 'AUTH_REQUIRED' | 'AUTH_TOKEN_INVALID' | 'AUTH_INVALID_CREDENTIALS'>);
+    toResponse(): {
+        error: "AUTH_REQUIRED" | "AUTH_TOKEN_INVALID" | "AUTH_INVALID_CREDENTIALS";
+        message: string;
+    };
+}
+/** 403 禁止（T202608310001：project 上下文越权 admin-only 端点） */
+declare class ForbiddenError extends AppError {
+    readonly statusCode = 403;
+    readonly code = "forbidden";
+    readonly bizCode: "AUTH_FORBIDDEN";
+    constructor();
+    toResponse(): {
+        error: "AUTH_FORBIDDEN";
+        message: string;
+    };
+}
 
 /**
  * 资产版本（skill/agent 的 version 字段）递增单源（T202608260002 D1 自 cli export 上移）。
@@ -2506,6 +3444,144 @@ declare function bumpPatch(version: string): string;
 /** export 宽松语义：解析失败原样返回（不误伤自由文本版本） */
 declare function bumpPatchOrPassthrough(version: string): string;
 
+/**
+ * 模板内容比较（T202609030001 F1）：导入内容 vs 服务器现值（同名同版本场景的门控 +
+ * 两条 updated 分支的变更范围）。纯函数，无 I/O。
+ *
+ * 比较域 = name / description / nodes / edges / layout；不参与比较 =
+ * id / createdAt / updatedAt / enabled / code / projectId / isDefault / version
+ *（isDefault 跟随 export 先例，不由导入通道管理）。
+ */
+interface TemplateContentSource {
+    name: string;
+    description: string;
+    nodes: DagNode[];
+    edges: DagEdge[];
+    layout?: Record<string, {
+        x: number;
+        y: number;
+    }> | undefined;
+}
+/** 变更范围（预览 changes / 回执同构） */
+interface TemplateContentChanges {
+    nodesAdded: string[];
+    nodesRemoved: string[];
+    nodesChanged: string[];
+    edgesChanged: boolean;
+    descriptionChanged: boolean;
+    layoutChanged: boolean;
+}
+interface TemplateContentDiff {
+    identical: boolean;
+    changes: TemplateContentChanges;
+}
+/**
+ * 导入内容 vs 服务器现值的内容比较。
+ * canonical 归一：nodes 按 id 对齐（顺序差异不视为变更，skills 顺序不敏感由
+ * computeNodeContentHash 保证）；edges 排序后比较；layout 缺省归一为空对象；
+ * description 原样比较（不 trim）。
+ */
+declare function diffTemplateContent(imported: TemplateContentSource, existing: TemplateContentSource): TemplateContentDiff;
+
+/** 参与 hash 的内容字段（nodeId 不参与——模板内可改名，属模板图结构域非内容域） */
+type NodeContentFields = Pick<DagNode, 'label' | 'phase' | 'track' | 'prompt' | 'skills'>;
+/**
+ * 节点内容规范化摘要（T202609020001 K2）：sha256 → hex 前 16 位。
+ * core 单源导出——server（节点详情响应 contentHash / 升级基线）与模板组装方共用同一算法，杜绝两端漂移。
+ * 规范化规则：skills 排序后参与（数组顺序不敏感）；对象字面量序固定（JSON.stringify 按 key 声明序）。
+ */
+declare function computeNodeContentHash(node: NodeContentFields): string;
+
+/**
+ * 模板升级状态机与决策执行（T202609020001 K5/K2/F23 纯函数层）。
+ * server 路由层负责寻址/鉴权/落库，本模块只做「模板 + 节点库快照 → plan/apply 结果」的纯计算——
+ * 单测直接覆盖五态与竞态路径，不依赖 HTTP。
+ *
+ * 双信号分工（K2）：version 判 updatable（K13 升版强制保证版本信号可靠）、
+ * contentHash 判 local-modified（模板节点当前内容 hash ≠ sourcePreset 基线）。
+ * 组合态优先级（F23）：hash 差存在 ⇒ status 一律 local-modified（本地修改保护优先于升级提示）。
+ */
+/** 单节点升级计划条目（plan 响应形状） */
+interface UpgradePlanItem {
+    nodeId: string;
+    source: {
+        code: string;
+        version: string;
+        contentHash: string;
+    };
+    latest: {
+        version: string;
+        contentHash: string;
+        enabled: boolean;
+    } | null;
+    status: UpgradeNodeStatus;
+    localModified: boolean;
+    diff: {
+        prompt: 'changed' | null;
+        label: 'changed' | null;
+        phase: 'changed' | null;
+        track: 'changed' | null;
+        skills: {
+            added: string[];
+            removed: string[];
+        } | null;
+        agents: {
+            added: string[];
+            removed: string[];
+        } | null;
+    };
+}
+interface UpgradePlanResult {
+    templateVersion: string;
+    items: UpgradePlanItem[];
+    upgradableCount: number;
+}
+/** apply 结果条目 */
+interface UpgradeApplyResultItem {
+    nodeId: string;
+    action: 'upgrade' | 'keep' | 'skip';
+    applied: boolean;
+    reason?: string | undefined;
+}
+interface UpgradeApplyOutcome {
+    /** apply 后的完整节点数组（路由层一次 repo.update 原子落库——单文档更新无中间态） */
+    nodes: DagNode[];
+    /** apply 后模板版本（patch+1）；null = 无实际变更不升版 */
+    nextVersion: string | null;
+    results: UpgradeApplyResultItem[];
+}
+/** apply 决策入参（HTTP UpgradeDecision 的子集形状——expected 可选，见 schema 注释） */
+interface UpgradeDecisionInput {
+    nodeId: string;
+    action: 'upgrade' | 'keep' | 'skip';
+    expected?: {
+        status: UpgradeNodeStatus;
+    } | undefined;
+}
+/** 单节点状态机（F23 组合态优先级）。无 sourcePreset 的节点不参与升级（plan 已过滤，此处为防御分支） */
+declare function computeUpgradeStatus(node: DagNode, latest: NodePreset | null): {
+    status: UpgradeNodeStatus;
+    localModified: boolean;
+};
+/** 组装升级计划（纯函数）。presetsByCode 须含停用资产（source-disabled 判定依赖） */
+declare function buildUpgradePlan(template: DagTemplate, presetsByCode: ReadonlyMap<string, NodePreset>): UpgradePlanResult;
+/**
+ * apply 决策执行（纯函数；写库由路由层一次原子更新完成）。
+ *
+ * 决策表（K5）：
+ * - upgrade：节点内容 ← 库最新值拷贝（nodeId 保持模板内现值——图结构域不迁移），基线回到库内容
+ * - keep：内容保持本地，基线重置为本地内容 hash + 版本对齐已读库版本（下轮 plan 以版本判定不再提示，
+ *   库再演进才重新提示——「不重复骚扰」语义）
+ * - skip：不动，下轮 plan 仍列出
+ *
+ * 守卫（按序）：
+ * 1. 决策 nodeId 必须命中带 sourcePreset 的模板节点（未知/重复 → 422）
+ * 2. local-modified（含组合态）节点缺决策 → 422 UPGRADE_DECISION_REQUIRED（强制显式决策）
+ * 3. source-missing / source-disabled 一律按缺省 skip（无 upgrade/keep 语义可执行）
+ * 4. STALE 重验：决策携带 expected 且与 apply 时刻重算状态不符 → 422 UPGRADE_STALE（附变化清单）
+ */
+declare function applyUpgradeDecisions(template: DagTemplate, presetsByCode: ReadonlyMap<string, NodePreset>, decisions: ReadonlyArray<UpgradeDecisionInput>): UpgradeApplyOutcome;
+
 /**
  * N017 F8 流转引擎（新语义状态机，见技术方案 §2.2）：
  *
@@ -2640,12 +3716,13 @@ declare function generateEntryId(existing: readonly string[]): string;
  */
 declare function renderPrompt(template: string, task: Task): string;
 
-/** 模板导入/导出编排依赖（repo 显式注入，无 DI 框架） */
+/** 模板导入/导出编排依赖（repo 显式注入，无 DI 框架）；nodePresetRepo 供 K10 sourcePreset 存在性检查 */
 interface TemplateTransferDeps {
     templateRepo: DagTemplateRepo;
     skillRepo: SkillRepo;
     agentRepo: AgentRepo;
     modelAliasRepo: ModelAliasRepo;
+    nodePresetRepo: NodePresetRepo;
 }
 /**
  * 导出依赖闭包推导（T202608300002 §2.2，PRD 3.1 规则 1-4，一跳封闭）：
@@ -2688,4 +3765,4 @@ declare function applyImport(deps: TemplateTransferDeps, targetProjectId: string
 declare const VERSION: string;
 declare function ping(): string;
 
-export { AGENT_MAIN_DOC, ARTIFACT_TYPES, type AdvanceDeps, type AdvanceInput, type AdvanceRequest, AdvanceRequestSchema, type AdvanceResponse, AdvanceResponseSchema, type Agent, type AgentCopy, AgentCopySchema, type AgentCreate, AgentCreateSchema, type AgentFunction, AgentFunctionSchema, type AgentPayload, AgentPayloadSchema, type AgentRepo, AgentSchema, type AgentScope, AgentScopeSchema, AgentShapeSchema, type AgentUpdate, AgentUpdateSchema, AppError, type AppErrorOptions, type ApproveRequest, ApproveRequestSchema, type ApproveResponse, ApproveResponseSchema, type ArchNote, ArchNoteSchema, type Artifact, ArtifactSchema, type ArtifactType, type AssetListOpts, type AssetSetEnabled, AssetSetEnabledSchema, BIZ_CODE_MESSAGES, BadRequestError, type BizCode, CONTEXT_VIEWS, type CancelRequest, CancelRequestSchema, type CheckItem, CheckItemSchema, type Confirmation, ConfirmationSchema, ConflictError, type ContextView, ContextViewSchema, type CreateTaskResponse, CreateTaskResponseSchema, DAG_PHASES, DAG_TRACKS, DEFAULT_PROJECT_KEY, type DagEdge, DagEdgeSchema, type DagInstance, DagInstanceSchema, type DagNode, DagNodePhaseSchema, DagNodeSchema, DagNodeTrackSchema, type DagTemplate, type DagTemplateCopy, DagTemplateCopySchema, type DagTemplateCreate, DagTemplateCreateSchema, type DagTemplateRepo, DagTemplateSchema, type DagTemplateUpdate, DagTemplateUpdateSchema, type Decision, DecisionSchema, type DependencyAction, DependencyActionSchema, type DependencyCheck, DependencyCheckSchema, type DependencyStatus, DependencyStatusSchema, ENTRY_ID_REGEX, EXPORT_FORMAT_VERSION, type EchoItem, EchoItemSchema, type EdgePausePoint, EdgePausePointBaseSchema, EdgePausePointSchema, type EnumEntry, EnumEntrySchema, type EnumRegistry, type EnumRegistryCategory, EnumRegistryCategorySchema, type EnumRegistryRepo, EnumRegistrySchema, type EnumRegistryUpdate, EnumRegistryUpdateSchema, type ExportBundle, ExportBundleSchema, HistoryActionSchema, type HistoryEntry, HistoryEntrySchema, type ImportApplyRequest, ImportApplyRequestSchema, type ImportApplyResponse, ImportApplyResponseSchema, type ImportDecision, ImportDecisionSchema, type ImportPlanRequest, ImportPlanRequestSchema, type ImportPlanResponse, ImportPlanResponseSchema, type ModelAlias, type ModelAliasCreate, ModelAliasCreateSchema, type ModelAliasPayload, ModelAliasPayloadSchema, type ModelAliasRepo, ModelAliasSchema, ModelAliasShapeSchema, type ModelAliasUpdate, ModelAliasUpdateSchema, type ModelAliasWithRefCount, ModelAliasWithRefCountSchema, NODE_ID_PATTERN, NODE_STATUSES, type NodeInfo, NodeInfoSchema, type NodeRecord, NodeRecordSchema, type NodeState, NodeStateSchema, NodeStatusSchema, NotFoundError, OBJECT_ID_HEX, type OmitId, PAUSE_POINT_TYPES, PausePointTypeSchema, type PauseRequest, PauseRequestSchema, type Project, type ProjectCreate, ProjectCreateSchema, type ProjectRepo, ProjectSchema, type ProjectStatus, ProjectStatusSchema, type ProjectUpdate, ProjectUpdateSchema, type PruneResult, REFERENCE_LIMITS, type ReferenceDoc, type Repo, type ResumeRequest, ResumeRequestSchema, type ReviewSummary, ReviewSummarySchema, SIMING_CODE_REGEX, SIMING_CONFIG_ENV_KEYS, SIMING_CONFIG_KEYS, SKILL_MAIN_DOC, type SimingClient, type SimingConfig, type SimingConfigKey, SimingConfigSchema, SimingLogLevelSchema, type Skill, type SkillCopy, SkillCopySchema, type SkillCreate, SkillCreateSchema, type SkillPayload, SkillPayloadSchema, type SkillRepo, SkillSchema, type SkillScope, SkillScopeSchema, SkillShapeSchema, type SkillUpdate, SkillUpdateSchema, TASK_PHASES, TASK_STATUSES, TASK_TYPES, type Task, type TaskContext, TaskContextSchema, type TaskCreateInput, TaskCreateInputSchema, type TaskDocContent, TaskDocContentSchema, type TaskPatch, TaskPhaseSchema, type TaskProgress, type TaskProgressPublic, TaskProgressPublicSchema, TaskProgressSchema, type TaskPublic, TaskPublicSchema, type TaskRepo, TaskSchema, TaskStatusSchema, type TaskSummary, TaskSummarySchema, type TaskType, type TemplatePayload, TemplatePayloadSchema, type TemplateTransferDeps, VERSION, ValidationError, WRITE_ACK_ENTRY_KINDS, type WithId, type WriteAck, type WriteAckEntryKind, WriteAckEntryKindSchema, WriteAckSchema, advanceTask, applyImport, approveTask, assertBoundSkillsCompatible, assertModelAliasExists, assertReferenceAggregateLimit, assertReferencesDeletable, buildImportPlan, bumpPatch, bumpPatchOrPassthrough, cancelTask, canonicalizeReferencePath, checkTermination, composeExportBundle, createAgentRepo, createDagTemplateRepo, createEnumRegistryRepo, createModelAliasRepo, createMongoClient, createProjectRepo, createReferencesSchema, createRepo, createSkillRepo, createTaskRepo, decisionKey, enabledNeFalse, escapeRegExpLiteral, excerpt, findNextEdge, findTemplateByName, generateEntryId, generateProjectKey, hasProjectDefault, mkHistory, pauseTask, ping, pruneInstance, renderPrompt, resumeTask, sumReferenceContentChars, taskProgress, toNodeInfo, toTaskPublic, trackMatchSet, withTransaction };
+export { AGENT_MAIN_DOC, ARTIFACT_TYPES, AUTH_COLLECTIONS, type AdvanceDeps, type AdvanceInput, type AdvanceRequest, AdvanceRequestSchema, type AdvanceResponse, AdvanceResponseSchema, type Agent, type AgentCopy, AgentCopySchema, type AgentCreate, AgentCreateSchema, type AgentFunction, AgentFunctionSchema, type AgentPayload, AgentPayloadSchema, type AgentRepo, AgentSchema, type AgentScope, AgentScopeSchema, AgentShapeSchema, type AgentUpdate, AgentUpdateSchema, AppError, type AppErrorOptions, type ApproveRequest, ApproveRequestSchema, type ApproveResponse, ApproveResponseSchema, type ArchNote, ArchNoteSchema, type Artifact, ArtifactSchema, type ArtifactType, type AssetListOpts, type AssetSetEnabled, AssetSetEnabledSchema, type AuthAccount, type AuthAccountCreate, AuthAccountCreateSchema, AuthAccountSchema, type AuthSession, type AuthStatus, AuthStatusSchema, type AuthToken, type AuthTokenGenResponse, AuthTokenGenResponseSchema, type AuthTokenKind, AuthTokenSchema, type AuthTokenStatus, AuthTokenStatusSchema, type AuthTokenType, AuthTokenTypeSchema, type AuthWhoami, AuthWhoamiSchema, BIZ_CODE_MESSAGES, BadRequestError, type BizCode, CONTEXT_VIEWS, type CancelRequest, CancelRequestSchema, type CheckItem, CheckItemSchema, type Composition, type CompositionEdge, CompositionEdgeSchema, CompositionSchema, type Confirmation, ConfirmationSchema, ConflictError, type ContextView, ContextViewSchema, type CreateTaskResponse, CreateTaskResponseSchema, DAG_PHASES, DAG_TRACKS, DEFAULT_PROJECT_KEY, type DagEdge, DagEdgeSchema, type DagInstance, type DagInstanceNode, DagInstanceNodeSchema, DagInstanceSchema, type DagNode, DagNodePhaseSchema, DagNodeSchema, DagNodeTrackSchema, type DagTemplate, type DagTemplateCopy, DagTemplateCopySchema, type DagTemplateCreate, DagTemplateCreateSchema, type DagTemplateRepo, DagTemplateSchema, type DagTemplateUpdate, DagTemplateUpdateSchema, type Decision, DecisionSchema, type DependencyAction, DependencyActionSchema, type DependencyCheck, DependencyCheckSchema, type DependencyStatus, DependencyStatusSchema, ENTRY_ID_REGEX, EXPORT_FORMAT_VERSION, type EchoItem, EchoItemSchema, type EdgePausePoint, EdgePausePointBaseSchema, EdgePausePointSchema, type EnumEntry, EnumEntrySchema, type EnumRegistry, type EnumRegistryCategory, EnumRegistryCategorySchema, type EnumRegistryRepo, EnumRegistrySchema, type EnumRegistryUpdate, EnumRegistryUpdateSchema, type ExportBundle, ExportBundleSchema, ForbiddenError, HistoryActionSchema, type HistoryEntry, HistoryEntrySchema, type ImportApplyRequest, ImportApplyRequestSchema, type ImportApplyResponse, ImportApplyResponseSchema, type ImportDecision, ImportDecisionSchema, type ImportPlanRequest, ImportPlanRequestSchema, type ImportPlanResponse, ImportPlanResponseSchema, type LoginInput, LoginSchema, type ModelAlias, type ModelAliasCreate, ModelAliasCreateSchema, type ModelAliasPayload, ModelAliasPayloadSchema, type ModelAliasRepo, ModelAliasSchema, ModelAliasShapeSchema, type ModelAliasUpdate, ModelAliasUpdateSchema, type ModelAliasWithRefCount, ModelAliasWithRefCountSchema, NODE_ID_PATTERN, NODE_PRESET_CODE_PATTERN, NODE_STATUSES, type NodeContentFields, type NodeInfo, NodeInfoSchema, type NodeLibrary, type NodeLibraryRepo, NodeLibrarySchema, type NodeLibraryUpsert, NodeLibraryUpsertSchema, type NodePreset, type NodePresetCopy, NodePresetCopySchema, type NodePresetCreate, NodePresetCreateSchema, type NodePresetListFilter, type NodePresetRepo, NodePresetSchema, NodePresetShapeSchema, type NodePresetUpdate, NodePresetUpdateSchema, type NodeRecord, NodeRecordSchema, type NodeState, NodeStateSchema, NodeStatusSchema, NotFoundError, OBJECT_ID_HEX, type OmitId, PAUSE_POINT_TYPES, type PasswordChange, PasswordChangeSchema, PausePointTypeSchema, type PauseRequest, PauseRequestSchema, type Project, type ProjectCreate, ProjectCreateSchema, type ProjectRepo, ProjectSchema, type ProjectStatus, ProjectStatusSchema, type ProjectUpdate, ProjectUpdateSchema, type PruneResult, REFERENCE_LIMITS, type ReferenceDoc, type Repo, type ResumeRequest, ResumeRequestSchema, type ReviewSummary, ReviewSummarySchema, SIMING_CODE_REGEX, SIMING_CONFIG_ENV_KEYS, SIMING_CONFIG_KEYS, SKILL_MAIN_DOC, type SimingClient, type SimingConfig, type SimingConfigKey, SimingConfigSchema, SimingLogLevelSchema, type Skill, type SkillCopy, SkillCopySchema, type SkillCreate, SkillCreateSchema, type SkillPayload, SkillPayloadSchema, type SkillRepo, SkillSchema, type SkillScope, SkillScopeSchema, SkillShapeSchema, type SkillUpdate, SkillUpdateSchema, type SourcePreset, SourcePresetSchema, TASK_PHASES, TASK_STATUSES, TASK_TYPES, TEMPLATE_CODE_MAX_LENGTH, TEMPLATE_CODE_REGEX, type Task, type TaskBatchAck, TaskBatchAckSchema, type TaskBatchEntry, TaskBatchEntrySchema, type TaskBatchFailure, TaskBatchFailureSchema, type TaskContext, TaskContextSchema, type TaskCreateInput, TaskCreateInputSchema, type TaskDocContent, TaskDocContentSchema, type TaskPatch, TaskPhaseSchema, type TaskProgress, type TaskProgressPublic, TaskProgressPublicSchema, TaskProgressSchema, type TaskPublic, TaskPublicSchema, type TaskRepo, TaskSchema, TaskStatusSchema, type TaskSummary, TaskSummarySchema, type TaskType, type TemplateCandidate, TemplateCandidateSchema, TemplateCodeFieldSchema, type TemplateContentChanges, type TemplateContentDiff, type TemplateContentSource, type TemplatePayload, TemplatePayloadSchema, type TemplateTransferDeps, UnauthorizedError, type UpgradeAction, UpgradeActionSchema, type UpgradeApplyOutcome, type UpgradeApplyRequest, UpgradeApplyRequestSchema, type UpgradeApplyResultItem, type UpgradeDecision, type UpgradeDecisionInput, UpgradeDecisionSchema, type UpgradeNodeStatus, UpgradeNodeStatusSchema, type UpgradePlanItem, type UpgradePlanResult, VERSION, ValidationError, WRITE_ACK_ENTRY_KINDS, type WithId, type WriteAck, type WriteAckEntryKind, WriteAckEntryKindSchema, WriteAckSchema, advanceTask, applyImport, applyUpgradeDecisions, approveTask, assertBoundSkillsCompatible, assertModelAliasExists, assertReferenceAggregateLimit, assertReferencesDeletable, assertUniqueNodeIds, buildImportPlan, buildTemplateCode, buildUpgradePlan, bumpPatch, bumpPatchOrPassthrough, cancelTask, canonicalizeReferencePath, checkTermination, composeExportBundle, computeNodeContentHash, computeUpgradeStatus, createAgentRepo, createAuthAccountRepo, createAuthSessionRepo, createAuthTokenRepo, createDagTemplateRepo, createEnumRegistryRepo, createModelAliasRepo, createMongoClient, createNodeLibraryRepo, createNodePresetRepo, createProjectRepo, createReferencesSchema, createRepo, createSkillRepo, createTaskRepo, decisionKey, diffTemplateContent, enabledNeFalse, escapeRegExpLiteral, excerpt, findDuplicateNodeIds, findNextEdge, findTemplateByName, generateEntryId, generateProjectKey, generateSessionId, generateToken, hasProjectDefault, hashPassword, hashToken, isLegalTemplateCode, mkHistory, normalizeNameToTemplateCode, parseAuthEnabledEnvValue, pauseTask, ping, pruneInstance, renderPrompt, resumeTask, sumReferenceContentChars, taskProgress, toNodeInfo, toTaskPublic, tokenTypeFromValue, trackMatchSet, verifyPassword, withTransaction };