@tencent-ai/agent-harness 0.2.0-beta.1 → 0.2.0-beta.2

package/cli/dist-server/types/node/acp/acp-protocol.d.ts

@@ -3,13 +3,12 @@ import type { Agent, AgentSideConnection, AuthenticateRequest, AuthenticateRespo
 import type { Deferred } from '@celljs/core';
 import type { ModelInfo, SetSessionModelRequest, SetSessionModelResponse } from '../../workspace/agent-client-protocol/lib/common/index.js';
 import type { CheckpointBroadcastEvent, CheckpointBroadcastInfo } from '../../workspace/cbc-checkpoint/lib/node/index.js';
+import type { Session } from '../../vendor/cbc-core/node/index.js';
+import type { PermissionMode, RunToolApprovalItem } from '../../vendor/cbc-shared/node/index.js';
 import type { W3CTraceContextMeta } from '../../workspace/telemetry/lib/common/index.js';
 import type { Subject } from 'rxjs';
-import type { RunToolApprovalItem } from '../../vendor/cbc-shared/node/index.js';
 import type { CommonRequest } from '../loopback/server-protocol';
 import type { McpFirstRunStatusEvent } from '../mcp/mcp-first-run-status-protocol';
-import type { Session } from '../../vendor/cbc-core/node/index.js';
-import type { PermissionMode } from '../../vendor/cbc-shared/node/index.js';
 export * from './acp-kernel-protocol';
 /**
  * 上下文消耗 5 类目细拆 schema。
@@ -409,9 +408,26 @@ export interface AcpBroadcastService {
  * scopeId / createdAt 等实现细节给前端。
  */
 export interface GoalRecapPayload {
+    /**
+     * 本次 recap 的生成时间：宿主用它区分「新一次查询」与「同一条重复下发」
+     * （关掉后同一次不再弹；再问一次 /goal 会拿到新的 at，应该重新弹）。
+     */
+    at?: number;
+    /**
+     * 进行中目标的状态：除条件 / 暂停态外，带上无参 /goal 要展示的详细项
+     * （运行时长 / 评估 turn 数 / Token 消耗 / 最近一次评估原因）。
+     */
     active?: {
         condition: string;
         paused?: boolean;
+        /** 已运行时长（暂停态冻在 pausedAt）。 */
+        durationMs?: number;
+        /** 已评估轮次（Stop hook 评估次数）。 */
+        turnCount?: number;
+        /** 目标期间累计消耗的 token（当前会话用量 - 目标起点用量）。 */
+        tokenDelta?: number;
+        /** 最近一次 Stop hook 的评估原因（goal-progress 项的 reason）。 */
+        reason?: string;
     };
     latest?: {
         ok: boolean;
@@ -764,6 +780,17 @@ export declare const ACP_CANCEL_REASON_TOOL_CALL_LOOP_STOPPED: "tool_call_loop_s
 /** `codebuddy.ai/interceptType` 取值：疑似工具调用循环，请用户决定继续还是停止。 */
 export declare const TOOL_CALL_LOOP_INTERCEPT_TYPE: "tool-call-loop";
 export declare const ACP_META_SENSITIVE_INPUT_DECISION: "codebuddy.ai/sensitiveInputDecision";
+/**
+ * `_codebuddy.ai/goalControl` 扩展方法名（宿主目标控制通道）。
+ *
+ * 必须与 workbuddy-core 的 `ConversationAcpMethod.GoalControl` 完全一致。
+ *
+ * 常量放在协议面而不是 acp-goal-control（控制实现）里：acp-stream-manager 只需要这个
+ * 字符串来判定 unary JSON 交付，若从实现文件取，冷启动链就会静态挂上整个控制实现
+ * （GoalService / broadcast / SDK 面），实现里任何新 import 都会静默落到 standby
+ * 冷启动路径上 —— bundle-lite-wb-prewarm-memory 卡点就是这么被顶穿的。
+ */
+export declare const GOAL_CONTROL_METHOD: "_codebuddy.ai/goalControl";
 /**
  * Cancel 事件
  * 用于 AcpAgent 向 AcpView 传递取消指令
@@ -947,22 +974,23 @@ export interface AcpAgentManager {
  *   事件触发，**会被 250ms 节流合并**，避免高频累加 usage 时刷屏。
  * - 其它来源全部**立即推送**（绕过节流）：
  *   - `'new_session'` / `'load_session'` / `'resume_session'`：首发，让客户端在第一帧就拿到 0% / 模型 size
+ *   - `'prompt_start'`：prompt 刚开始、模型思考/写文件尚未返回真实 usage 的窗口，用本地估算
+ *     的输入 token 推一帧占位（used 估算 + byCategory），避免上下文环空白；随后由 stream/prompt_end 校准
  *   - `'prompt_end'`：prompt 出口（无论 stopReason），保证终值正确
+ *   - `'compacted'`：压缩（自动/手动）完成后立即推一帧（used = 压缩后 history 估算），环即刻降到新值
+ *     而非等下一轮 prompt；publisher 同时重置 turn 高水位，使这次真实下降不被单调约束挡住
  *   - `'model_changed'`：分母切换
  *   - `'cancel'`：用户取消快照
  *
- * compact 完成不再触发 `usage_update`；上下文环数值由用户下一次 prompt 走
- * `combineSubject(input)` 节流路径自然回填真实 inputTokens。
- *
  * usageByCategory 触发拍：
- * - `ACP_USAGE_CATEGORY_SNAPSHOT_SOURCES` 中的路径在推送时附带
+ * - `ACP_USAGE_CATEGORY_SNAPSHOT_SOURCES` 中的路径走**全量**计算并附带
  *   `_meta['codebuddy.ai/usageByCategory']`，sum(usageByCategory) 严格 === update.used。
- * - `'stream'` / `'model_changed'` 路径**不写**该字段，客户端复用上一次缓存值；
- *   model_changed 只同步新的 context size，避免派生统计重跑动态 agent instructions
- *   并阻塞 set_model 控制 RPC。下一次 prompt_end 会刷新 category。
+ * - `'stream'` 路径走**turn 级增量**（见 usage-by-category-incremental），同样附带 usageByCategory，
+ *   让「对话进行中」也能实时展示 5 类明细，且不重跑动态 agent instructions（规避控制面阻塞）。
+ * - `'model_changed'` 路径**不写**该字段（只同步 context size），客户端复用上次缓存，下次 prompt_end 全量校准。
  * - calculator 计算异常时 publisher 也不写该字段（降级），不影响 used/size/cost 推送。
  */
-export type AcpUsageUpdateSource = 'new_session' | 'load_session' | 'resume_session' | 'prompt_end' | 'model_changed' | 'cancel' | 'stream';
+export type AcpUsageUpdateSource = 'new_session' | 'load_session' | 'resume_session' | 'prompt_start' | 'prompt_end' | 'compacted' | 'model_changed' | 'cancel' | 'stream';
 /**
  * 附带 `usageByCategory` 语义快照的推送来源（排除语义见上方
  * `AcpUsageUpdateSource` 注释）。publisher 与其 spec 共用此唯一事实源；
@@ -1007,7 +1035,7 @@ export interface AcpUsagePublisher {
      * 方案 Z（终版决议，2026-05-20）：移除 options.hintUsed 参数 —— compact 完成路径不
      * 再主动推送，由下次 prompt 走 combineSubject(input) 自然回填真实 inputTokens。
      */
-    publish(sessionId: string, source: AcpUsageUpdateSource, carrier?: W3CTraceContextMeta): Promise<void>;
+    publish(sessionId: string, source: AcpUsageUpdateSource, carrier?: W3CTraceContextMeta, pendingInputText?: string): Promise<void>;
     /**
      * 推送生成工具实际消耗。调用方只提供工具执行事实，publisher 统一复用
      * ACP usage_update.cost.amount 链路，并在内部做 session / stageId 幂等。

package/cli/dist-server/types/node/acp/usage-by-category-calculator.d.ts

@@ -40,6 +40,27 @@ export interface UsageByCategoryInput {
     /** ACP usage_update.used，作为最终归一化的总分母。 */
     totalTokens: number;
 }
+export declare const IMAGE_TOKEN_PER_PIECE = 85;
 export declare class UsageByCategoryCalculator {
     static compute(input: UsageByCategoryInput): UsageByCategory;
 }
+export declare function zeroUsageByCategory(): UsageByCategory;
+/**
+ * 单条 history item 对 systemPrompt / conversation / 图片张数的字符贡献。
+ *
+ * SSOT：全量 `compute` 与增量 publisher 共用本函数，保证「进行中增量」与
+ * 「prompt_end 全量」的类目结果严格一致（`weighted` 逐字符可加，item 边界不切
+ * 代理对，故 `weighted(Σparts) === Σ weighted(part)`）。
+ *
+ * - systemPrompt 贡献：仅 user message 的 hidden context block 第一个子 section
+ *   （UserInfoSection 等价物）；解析失败/无 hidden block 时为空，整条 user 文本
+ *   由 conversation 承接。
+ * - conversation 贡献：user/assistant 文本（user 去掉第一个 hidden section）
+ *   + function_call 的 JSON.stringify + function_call_result 的 output 文本。
+ * - 图片不计字符权重，按张数单独累加（由调用方 ×IMAGE_TOKEN_PER_PIECE）。
+ */
+export declare function collectHistoryItemChars(item: unknown): {
+    systemPromptChars: string;
+    conversationChars: string;
+    imagePieces: number;
+};

package/cli/dist-server/types/node/cli/stream-json-protocol.d.ts

@@ -270,6 +270,20 @@ export interface ResultUsageExtension {
     modelUsage?: Record<string, ModelUsage>;
     _meta?: Record<string, unknown>;
 }
+/**
+ * 这一轮为什么结束，取值对齐 Claude Code 的 `terminal_reason`。
+ *
+ * 目前只在被取消的一轮上给出：
+ * - `aborted_streaming`：中止时没有未完成的工具调用（停在模型输出上）；
+ * - `aborted_tools`：中止时还有工具调用没执行完。
+ *
+ * 取消不是错误，所以取消的终态是 `subtype=success`、`is_error=false`，
+ * 消费方要靠这个字段把它与正常完成区分开，不要去匹配任何文案。
+ */
+export type TerminalReason = 'aborted_streaming' | 'aborted_tools';
+export interface ResultTerminalExtension {
+    terminal_reason?: TerminalReason;
+}
 /** Mirrors the Claude Agent SDK's SDKPermissionDenial (E20 alignment gate). */
 export interface PermissionDenial {
     tool_name: string;
@@ -441,7 +455,7 @@ export type ResultMessage = ({
         category?: string;
         details?: string;
     } | null>;
-}) & ResultUsageExtension;
+}) & ResultUsageExtension & ResultTerminalExtension;
 type ApiKeySource = string;
 export interface SystemMessage {
     type: 'system';

package/cli/dist-server/types/node/data-fs/index.d.ts

@@ -38,6 +38,9 @@ export interface FileSystem {
     writeFile(path: string, content: string | Uint8Array): Promise<void>;
     exists(path: string): Promise<boolean>;
     stat(path: string): Promise<FileSystemStat>;
+    /** Optional metadata for filesystems that can identify linked paths. */
+    lstat?(path: string): Promise<FileSystemStat>;
+    realpath?(path: string): Promise<string>;
     mkdir(path: string, options?: {
         recursive?: boolean;
     }): Promise<void>;
@@ -82,6 +85,8 @@ export interface DataFs {
         withFileTypes: true;
     }): Promise<DataFsDirent[]>;
     stat(path: string): Promise<DataFsStats>;
+    lstat?(path: string): Promise<DataFsStats>;
+    realpath?(path: string): Promise<string>;
     rm(path: string, options?: {
         recursive?: boolean;
         force?: boolean;
@@ -141,7 +146,14 @@ export interface ScannedFile {
     fileName: string;
     relativePath: string;
 }
-export declare function scanFilesByExtension(baseDir: string, extension: string, maxDepth?: number): Promise<ScannedFile[]>;
+export interface ScanFilesOptions {
+    maxEntries?: number;
+    onError?: (error: Error, path: string) => void;
+    signal?: AbortSignal;
+    /** Filesystems with link metadata can supply realpath for cycle and alias detection. */
+    canonicalizeDirectory?: (path: string) => Promise<string>;
+}
+export declare function scanFilesByExtension(baseDir: string, extension: string, maxDepth?: number, options?: ScanFilesOptions): Promise<ScannedFile[]>;
 /**
  * Wrap a config-face filesystem into the node:fs/promises-shaped provider:
  * Stats/Dirent booleans become methods, Uint8Array becomes Buffer, errno

package/cli/dist-server/types/node/hooks/hook-protocol.d.ts

@@ -2,6 +2,7 @@
  * Hook mechanism protocol definitions
  * Compatible with Claude Code hooks specification
  */
+import type { HookInput } from '../../vendor/cbc-core/node/index.js';
 import { HookEvent, type HookExecutionOptions, type HookExecutionResult, type PromptHookResult } from '../../vendor/cbc-shared/node/index.js';
 export { HookBlockedError, HookEvent, NotificationType } from '../../vendor/cbc-shared/node/index.js';
 export type { BackgroundTaskInfo, CronTaskInfo, FinalStopReason, HookBlockingDetail, HookExecutionOptions, HookExecutionResult, HookOutput, HookPermissionMode, PromptHookResult, SessionEndReason, SessionStartSource, } from '../../vendor/cbc-shared/node/index.js';
@@ -240,8 +241,7 @@ export type HookDefinition = CommandHookDefinition | PromptHookDefinition | Agen
  * Input data passed to hook script via stdin
  * Format matches Claude Code hooks specification exactly
  */
-export type { HookInput } from "../../vendor/cbc-core/node/index.js";
-import type { HookInput } from "../../vendor/cbc-core/node/index.js";
+export type { HookInput } from '../../vendor/cbc-core/node/index.js';
 /**
  * Hook Manager interface
  */

package/cli/dist-server/types/node/server/sessions.d.ts

@@ -1,4 +1,9 @@
+import { Session } from '../../vendor/cbc-core/node/index.js';
 import type { QueryInput, QueryOptions, QueryTicket, ReloadOptions, RewindOptions, RewindResult, SessionEventListener, SessionSubscription, SteerOptions, SteerResult } from './types';
+interface SettleOutcome {
+    assistantText: string;
+    completedError?: unknown;
+}
 /**
  * Submit input or a maintenance operation: creates the session on first touch, resumes it
  * otherwise. The ticket carries the run id synchronously — it is the kernel
@@ -9,6 +14,24 @@ export declare function query(sessionId: string, input: QueryInput, options?: Qu
 export declare function reload(sessionId: string, options?: ReloadOptions): void;
 /** Add input to an existing query. Rejection never creates or activates a session. */
 export declare function steer(sessionId: string, input: string | unknown[], options: SteerOptions): Promise<SteerResult>;
+/**
+ * Settlement discipline (ordered signal): the primary lane subscribes to the
+ * kernel's combine result/interrupt_result events, emitted only AFTER the
+ * run's bookkeeping (error item into history, Stop hooks); retried failures
+ * are suppressed and the recovery run emits its own (#64101, same gate
+ * discipline as stream-json-view). Each result is judged by its stamped
+ * interceptorGate — willRetry (and not __cancelNudge) means not terminal.
+ * interrupt_result settles immediately without awaiting `completed` (it may
+ * never resolve on that path). The completed-promise loop remains as a raced,
+ * stale-aware fallback with a grace window for terminal or pre-dispatch
+ * failures. A gate that promises continuation must instead await an actual
+ * result or ordered interrupt; a pending permission is not a timeout failure.
+ * Never pump the item stream here; the kernel's per-session subscription is
+ * its consumer.
+ */
+export declare function beginSettle(session: Session, isInterrupted: () => boolean): {
+    wait(): Promise<SettleOutcome>;
+};
 /**
  * Turn-level cancellation: the in-flight ticket resolves normally with
  * stopReason 'aborted', never rejects. Resolves after the run state settles.
@@ -35,3 +58,4 @@ export declare function close(sessionId: string): Promise<void>;
  * Does not emit a query lifecycle or discard existing subscriptions.
  */
 export declare function rewind(sessionId: string, options: RewindOptions): Promise<RewindResult>;
+export {};

package/cli/dist-server/types/node/server/types.d.ts

@@ -159,6 +159,12 @@ export interface QueryOptions {
     multitask?: boolean;
     /** Enable the host's local sandbox. Changes apply when the session has no background work. */
     sandboxEnabled?: boolean;
+    /**
+     * Request a PTY for Bash executions, or false for separate stdout/stderr pipes.
+     * Omitted preserves the session's current selection and existing CLI defaults.
+     * Execution drivers may require pipes; this does not change sandbox permissions.
+     */
+    usePty?: boolean;
     /**
      * 会话级自定义 agent 定义（#108461 D6，形态对齐 stream-json `initialize.agents`
      * / SDK `--agents`）：名字 → 定义（`prompt`/`description`/`tools`/`model`/

package/cli/dist-server/types/node/settings/settings-protocol.d.ts

@@ -92,6 +92,7 @@ export declare const ENV_KEY_CODEBUDDY_IMAGE_TO_VIDEO_MODEL = "CODEBUDDY_IMAGE_T
 export declare const ENV_KEY_CODEBUDDY_IMAGE_GEN_ENABLED = "CODEBUDDY_IMAGE_GEN_ENABLED";
 export declare const ENV_KEY_CODEBUDDY_IMAGE_EDIT_ENABLED = "CODEBUDDY_IMAGE_EDIT_ENABLED";
 export declare const ENV_KEY_CODEBUDDY_VIDEO_GEN_ENABLED = "CODEBUDDY_VIDEO_GEN_ENABLED";
+export declare const ENV_KEY_CODEBUDDY_AUDIO_TRANSCRIBE_ENABLED = "CODEBUDDY_AUDIO_TRANSCRIBE_ENABLED";
 export declare const ENV_KEY_CODEBUDDY_HIGH_CREDIT_APPROVAL_ENABLED = "CODEBUDDY_HIGH_CREDIT_APPROVAL_ENABLED";
 export declare const ENV_KEY_CODEBUDDY_ARTIFACT_ENABLED = "CODEBUDDY_ARTIFACT_ENABLED";
 /** @deprecated 兼容保留，请改用 CODEBUDDY_ARTIFACT_ENABLED（新名优先，旧名兜底）。 */
@@ -413,6 +414,8 @@ export interface CodebuddySettings {
     agentHome?: {
         enabled?: boolean;
         orchestration?: boolean;
+        /** 自动投递到主 Agent 的任务完成回执。默认 all。 */
+        taskReceipts?: 'all' | 'batch' | 'off';
     };
     /**
      * Web 输入框在 agent 忙碌时的发送方式（仅 agent-cli Web；不进 WorkBuddy overlay）。
@@ -643,6 +646,8 @@ export interface Hooks {
     CwdChanged?: HookConfig[];
     /** Internal-only hooks triggered when agent truly stops */
     FinalStop?: HookConfig[];
+    /** Hooks triggered when a user-typed command/skill expands into a prompt (matcher on command_name) */
+    UserPromptExpansion?: HookConfig[];
 }
 export interface StatusLine {
     /** 类型 */

package/cli/dist-server/types/node/tools/tool-protocol.d.ts

@@ -32,7 +32,7 @@ export declare const MIN_SKILL_DESC_LENGTH = 20;
  * by skill name — without changing the global default, by exporting this env.
  *
  * Format: a JSON object mapping skill name → maxChars, e.g.
- *   `{"tencent-docs-routing":300,"tencent-pptx":300}`
+ *   `{"workbuddy-office-routing":300,"tencent-pptx":300}`
  * The value is the per-entry cap that fully replaces the default for the named skill.
  * Explicitly overridden skills are also excluded from the later total-budget redistribution,
  * so an updated bundled skill keeps the same host-selected limit when its source becomes plugin.
@@ -47,7 +47,7 @@ export declare const SKILL_DESC_MAX_OVERRIDES_ENV = "CODEBUDDY_SKILL_DESC_MAX_OV
 /**
  * Parse the {@link SKILL_DESC_MAX_OVERRIDES_ENV} raw value into a `skillName → maxChars` map.
  *
- * - Expects a JSON object literal, e.g. `{"tencent-docs-routing":300}`.
+ * - Expects a JSON object literal, e.g. `{"workbuddy-office-routing":300}`.
  * - Returns an empty map for empty/undefined input, malformed JSON, or a non-object
  *   (array / string / number / null) top-level value — the caller decides whether to warn.
  * - Skips any entry with an empty (post-trim) key, a value that is not a positive integer,
@@ -494,6 +494,7 @@ export interface ToolHookManager {
         modifiedInput?: Record<string, any>;
         message?: string;
         permissionDecision?: 'allow' | 'deny' | 'ask';
+        preventContinuation?: boolean;
     }>;
     /**
      * Execute PostToolUse hooks after a tool completes successfully
@@ -801,6 +802,8 @@ export interface ImageGenerationResult extends GenerationCreditResult {
 }
 export interface VideoGenerationResult extends GenerationCreditResult {
     localPaths: string[];
+    /** 端上为适配模型能力做出的调整说明（如分辨率回落），供模型与用户知情 */
+    warnings?: string[];
 }
 /**
  * 图片生成结果
@@ -871,6 +874,7 @@ export interface VideoGenParams {
     image?: string;
     last_image?: string;
     resolution?: '480P' | '720P' | '1080P';
+    seconds?: number;
     aspect_ratio?: '16:9' | '9:16' | '1:1';
     negative_prompt?: string;
     enable_audio?: boolean;
@@ -920,3 +924,109 @@ export interface VideoService {
     /** 解析视频模型：session > env > settings > tag > fallback */
     resolveModel(session: Session | undefined, tag: string): Promise<string>;
 }
+export declare const AudioTranscribeService: unique symbol;
+/**
+ * 录音文件识别（长音频转文本）请求参数。
+ * `channel_num:1` 由 service 固定注入，不暴露给调用方。
+ */
+export interface AudioTranscribeOptions {
+    /** 说话人分离：0 关闭（默认）/ 1 开启（需 channel_num=1） */
+    speaker_diarization?: 0 | 1;
+    /** 临时热词表 "词|权重,..."（最多 128） */
+    hotword_list?: string;
+    /** 阿拉伯数字智能转换：0 / 1 / 3 */
+    convert_num_mode?: 0 | 1 | 3;
+    /** 脏词过滤：0 / 1 / 2 */
+    filter_dirty?: 0 | 1 | 2;
+    /** 标点过滤：0 / 1 / 2 */
+    filter_punc?: 0 | 1 | 2;
+    /** 语气词过滤：0 / 1 / 2 */
+    filter_modal?: 0 | 1 | 2;
+    /** 上游附加参数（合法 JSON 字符串），如 '{"Domain":3}' */
+    extra?: string;
+}
+/** service 内部解析出的音频来源（COS-only：始终为 audio_url）。 */
+export interface AudioSource {
+    audio_url: string;
+}
+/** 后端预签名返回项（`support:getPresignedUrls` 契约）。 */
+export interface AsrPresignItem {
+    object_key: string;
+    upload_url: string;
+    download_url: string;
+}
+/** 预签名接口响应信封。 */
+export interface AsrPresignApiResponse {
+    code: number;
+    msg?: string;
+    message?: string;
+    requestId?: string;
+    data?: {
+        expire?: number;
+        items?: AsrPresignItem[];
+    };
+}
+/** 提交任务响应信封（/v2/async/tasks/create）。 */
+export interface AsrCreateApiResponse {
+    code: number;
+    msg: string;
+    requestId: string;
+    data?: {
+        task_id?: string;
+        scene?: string;
+        status?: string;
+        created_at?: string;
+    };
+}
+/** 查询任务响应信封（/v2/async/tasks/query）。 */
+export interface AsrQueryApiResponse {
+    code: number;
+    msg: string;
+    requestId: string;
+    data?: {
+        task_id?: string;
+        scene?: string;
+        status?: 'queued' | 'in_progress' | 'completed' | 'failed';
+        created_at?: string;
+        completed_at?: string;
+        usage?: {
+            credit?: number;
+            coefficient?: number;
+            meters?: {
+                audio_second?: number;
+            };
+        };
+        attributes?: {
+            engine?: string;
+            vendor_status?: string;
+        };
+        error?: {
+            code?: string;
+            message?: string;
+        };
+        audio_transcription?: {
+            text?: string;
+        };
+    };
+}
+/** 录音文件识别结果。 */
+export interface AudioTranscribeResult {
+    /** 完整转写文本（上游 Result 原样透传） */
+    text: string;
+    /** 任务 ID */
+    taskId: string;
+    /** 实际音频时长（秒），计费依据 */
+    audioSecond?: number;
+    /** 最终积分消耗 */
+    credit?: number;
+}
+/**
+ * 录音文件识别服务接口。
+ * COS-only：本地文件先经后端预签名上传 COS，再以 audio_url 提交异步转写并轮询。
+ */
+export interface AudioTranscribeService {
+    /**
+     * 转写本地音频文件：预签名上传 → 提交任务 → 轮询直至终态。
+     */
+    transcribe(filePath: string, options: AudioTranscribeOptions, context: RunContext<Session>): Promise<AudioTranscribeResult>;
+}

package/cli/dist-server/types/vendor/cbc-core/node/agent/agent-protocol.d.ts

@@ -179,6 +179,12 @@ export declare function isBuiltinDisableableAgent(agentName: string): boolean;
  * waste prompt tokens on a tool they can never legitimately call (the SendMessage
  * tool itself returns an error when invoked outside a team context), and for
  * structured-output agents like `compact` it can pollute the model's output.
+ *
+ * **这些名字是保留字，不得被用作子代理 / teammate 预设名**（评审 #128343）：
+ * `resolveMessageSpeakerLabel` 把本名单的判定放在「子会话报自身身份」**之前**，因为历史与
+ * 用量多处按 `providerData.agent === 'compact'` 这类字符串比较判定，子会话里跑 compact 时
+ * 不能被身份名覆盖。反过来说，一旦有真实子代理取了这里的名字，它的消息会被标成生成器名
+ * 而不是自己的身份 —— 属于要靠人眼才能发现的错标。新增名字前先确认它不会与任何预设名撞。
  */
 export declare const INTERNAL_GENERATOR_AGENTS: Set<string>;
 /**
@@ -289,6 +295,13 @@ export interface AgentManager {
      * 同输入逐轮返回同一对象（prompt cache 稳定）；视图字节永不写回全局物化面。
      */
     sessionScopedAgentView(session: Session, base: Agent): Promise<Agent>;
+    /**
+     * sandbox-agent-view：把 REPL 的动态 schema 按子代理身份重新物化一遍。Code Mode 的
+     * agent 实例进程级共享（`get('ptc')` 命中同一对象），schema 在构建期用合成会话采集 ——
+     * 继承模式的子代理（Explore 等）会看到模式的全量目录。派发侧知道身份，经此覆盖。
+     * 只克隆 REPL 一个工具，视图不进 agentMap；空身份 / 同名 / 无 REPL 时原样返回基座。
+     */
+    sandboxScopedAgentView(base: Agent, sandboxAgentName: string): Promise<Agent>;
     /** served 激活链的视图预热（默认 agent），派发路径是失效兜底。 */
     prepareSessionAgentView(session: Session): Promise<void>;
     get(agentName: string): Promise<Agent | undefined>;
@@ -543,6 +556,16 @@ export type AgentStandardRunOptions<TContext = Session> = AgentSdkRunOptions<TCo
     /** Process-local provenance for fresh user turns; stripped before SDK dispatch. */
     inputOrigin?: AgentRunOrigin;
     continuation?: never;
+    /**
+     * Per-arrival out-signal: invoked when this run was routed to the message
+     * queue (skipRun, session busy) instead of executing now. Callers that owe
+     * their caller *this* prompt's own result (print / stream-json) use it to
+     * keep waiting until the queue drains and their turn actually runs.
+     *
+     * A run-scoped callback (not a shared session flag) so concurrent arrivals
+     * cannot clobber each other's outcome.
+     */
+    onEnqueued?: () => void;
 };
 /**
  * Explicitly claim the current process-local logical turn.
@@ -558,6 +581,10 @@ export type AgentCurrentContinuationOptions = AgentSdkRunOptions<Session> & Agen
 };
 export type AgentServiceRunOptions<TContext = Session> = AgentStandardRunOptions<TContext> | AgentCurrentContinuationOptions;
 export interface AgentService {
+    /** Atomically close a task's runtime only after its last result and queued work settle. */
+    tryCloseTaskSession?(session: Session, result: NonNullable<Session['resultSubject']['value']>): Promise<boolean>;
+    /** Stop accepting task work and join its physical runs before releasing dependencies. */
+    retireTaskSession?(session: Session): Promise<void>;
     run<TAgent extends Agent<any, any>>(agent: TAgent, input: string | AgentInputItem[], options: AgentCurrentContinuationOptions): Promise<void>;
     run<TAgent extends Agent<any, any>, TContext = Session>(agent: TAgent, input: string | AgentInputItem[] | RunState<TContext, TAgent>, options?: AgentStandardRunOptions<TContext>): Promise<void>;
     runDefault<TAgent extends Agent<any, any>>(input: string | AgentInputItem[], options: AgentCurrentContinuationOptions): Promise<void>;
@@ -779,6 +806,8 @@ export declare enum CustomAgentSavePath {
 }
 export declare enum OutputStyleType {
     DEFAULT = "default",
+    PROACTIVE = "proactive",
+    CONCISE = "concise",
     EXPLANATORY = "explanatory",
     LEARNING = "learning"
 }

package/cli/dist-server/types/vendor/cbc-core/node/agent/agent-service.d.ts

@@ -38,6 +38,8 @@ export declare class AgentServiceImpl implements AgentService {
      */
     private lifecycleOwners;
     protected getLifecycleOwners(): WeakMap<Session, AbortController>;
+    tryCloseTaskSession(session: Session, result: NonNullable<Session['resultSubject']['value']>): Promise<boolean>;
+    retireTaskSession(session: Session): Promise<void>;
     /** compare-and-delete：仅当 token 仍指向本轮 controller 时清除。 */
     private clearLifecycleOwner;
     /** 本轮是否是当前 lifecycle owner。 */

package/cli/dist-server/types/vendor/cbc-core/node/agent/index.d.ts

@@ -6,6 +6,7 @@ export * from './agent-service';
 export * from './agent-factory';
 export * from './runner-factory';
 export * from './runner-provider';
+export * from './speaker-label';
 export * from './ordered-tools-agent';
 export * from './tool-call-loop-detector-protocol';
 export * from './tool-call-loop-detector-service';

package/cli/dist-server/types/vendor/cbc-core/node/agent/interceptors/input-interceptors.d.ts

@@ -17,12 +17,7 @@ export declare class MessageQueueAgentRunInterceptor implements AgentRunIntercep
     protected readonly logger: Logger;
     protected readonly stateMachine: SessionRunStateMachine;
     intercept(request: AgentRunRequest): Promise<void>;
-    /**
-     * 触发后不再重复打 error（防日志风暴）；下次"有实际工作"分支复位 counter/flag，
-     * session 自动恢复处理能力。
-     */
-    private trackEmptyDrainAndMaybeTripGuard;
-    private resetEmptyDrainLoopGuard;
+    private consumeQueueItems;
 }
 /**
  * 用户查询包裹拦截器

package/cli/dist-server/types/vendor/cbc-core/node/agent/runner-factory.d.ts

@@ -1,4 +1,4 @@
-import { type RunConfig, Runner } from '../../../cbc-shared/node/index.js';
+import { type AgentInputItem, type RunConfig, Runner } from '../../../cbc-shared/node/index.js';
 import { ProductManager } from '../../../../workspace/product/lib/common/index.js';
 import { Logger } from '../../../../workspace/telemetry/lib/common/index.js';
 import { type NotificationInjectionBuffer as INotificationInjectionBuffer } from '../message-queue/notification-injection-buffer-protocol';
@@ -15,6 +15,15 @@ import { ToolCallLoopDetector } from './tool-call-loop-detector-protocol';
  * Used by finishReasonErrorInterceptor to detect prior retries across both mechanisms.
  */
 export declare const TRUNCATION_RETRY_MARKER = "Do NOT repeat the same oversized tool call. Break it into smaller operations.";
+export interface ModelInputMemoryPressure {
+    heapUsed: number;
+    heapLimit: number;
+    headroom: number;
+    inputItems: number;
+    estimatedInputBytes?: number;
+    reject: boolean;
+}
+export declare function assessModelInputMemoryPressure(input: AgentInputItem[], heapUsed?: number, heapLimit?: number): ModelInputMemoryPressure;
 /**
  * Tool-specific hints for how to decompose a truncated tool call into smaller operations.
  */
@@ -72,6 +81,7 @@ export declare class RunnerFactoryImpl implements RunnerFactory {
      */
     protected readonly acpBroadcastService?: AgentQueueOutput;
     create(config?: Partial<RunConfig>): Promise<Runner>;
+    private assertModelInputCloneHeadroom;
     /**
      * 在每次模型请求前检查是否需要自动压缩。
      * 此时所有工具都已执行完毕，可以安全地触发压缩。
@@ -211,10 +221,10 @@ export declare class RunnerFactoryImpl implements RunnerFactory {
      * model / agent / argumentsDisplayText 等键同样会跟着走，它们是惰性字段、上游不解读，
      * 这里不做处理；真正需要清掉的只有语义已经反转的 discard。
      *
-     * 改写与删标记都只作用于当轮副本（见 filterTruncatedToolCalls 的
-     * "Scope of the rewrite"），session.history 里的原值保持不变。
+     * 返回一个浅复制的新 item；providerData 仅在需要删除 discard 时 copy-on-write。
+     * session.history 与 SDK 传入的原 item 始终保持不变。
      */
-    private rewriteCallArguments;
+    private withRewrittenCallArguments;
     /**
      * SDK callModelInputFilter: called before every model API request within the SDK run loop.
      *
@@ -240,13 +250,23 @@ export declare class RunnerFactoryImpl implements RunnerFactory {
      *   message instructing the model to break the call into smaller operations. This
      *   turns the SDK's automatic retry into a valid, useful request.
      *
-     * Scope of the rewrite: `agents-core`'s `applyCallModelInputFilter` hands us a
-     * `structuredClone` of the turn input and clones our return value again, explicitly so
-     * that filter-side mutations cannot touch cached turn state. So every rewrite here
-     * lands on a per-turn copy only — `session.history` keeps the malformed arguments and
-     * we redo the same rewrite on every subsequent turn. That is correct but not free:
-     * anything reported from this path must be aggregated per turn rather than logged per
-     * call, or a long session with N bad calls emits N log lines every turn.
+     * Scope of the rewrite: this filter opts into the SDK's `preserveInputIdentity` mode,
+     * so existing history items arrive by identity and MUST remain immutable. Repairs use
+     * item-level copy-on-write and array-level shallow copies; the SDK still creates isolated
+     * model/session copies after the filter returns. `session.history` therefore keeps the
+     * malformed arguments and we redo the same rewrite on every subsequent turn. Anything
+     * reported from this path must be aggregated per turn rather than logged per call.
+     */
+    /**
+     * 模型输入的两步修复，**顺序不能反**：
+     *
+     * 1. `filterTruncatedToolCalls` 先跑。截断（finish_reason=length）与坏 JSON 的
+     *    call 正是「参数半截 + 没有任何 result」那一类；它删掉这些 call 的同时会注入
+     *    拆解引导与防循环停止标记。若先按配对摘掉它们，该分支因 `invalidCallIds` 为空
+     *    直接早退，模型拿不到任何引导，退回 #75892 那条老路，而且请求本身合法、无错可见。
+     * 2. `filterUnpairedToolCalls` 后跑，收掉剩下的孤儿（参数合法但结果丢失、重复 callId、
+     *    头部被截断留下的孤儿结果）。本地正文里的孤儿是持久化的，留着每次恢复都被上游 400。
      */
+    private repairModelInput;
     private filterTruncatedToolCalls;
 }