@tencent-ai/agent-harness 0.2.0-beta.10 → 0.2.0-beta.11

package/cli/dist-server/types/node/agent/agent-controller.d.ts

@@ -38,6 +38,7 @@ export declare class AgentController {
      *   本 slot 只归本特性所有且 run() 每轮执行一次，故无需 finally 恢复。
      */
     private applyCustomPassthroughHeaders;
+    private applyPrivateDataStickyFromPrompt;
     /**
      * Filter and keep only custom/extension headers
      * Standard HTTP headers are filtered out

package/cli/dist-server/types/node/agent/index.d.ts

@@ -9,6 +9,7 @@ export * from './agent-manager';
 export * from './exit-planmode-visibility';
 export * from './agent-controller';
 export * from './interceptors';
+export * from './steer-model-input-preparer';
 export * from './stream-json-init-interceptor';
 export * from './memory-context-interceptor';
 export * from './team-context-interceptor';

package/cli/dist-server/types/node/agent/interceptors/image-interceptors.d.ts

@@ -1,7 +1,7 @@
+import { AgentRunInterceptor, AgentRunInterceptorPriority, AgentRunRequest } from '../../../vendor/cbc-core/node/index.js';
 import { Logger } from '../../../workspace/telemetry/lib/common/index.js';
 import { ImageBlobService } from '../../blob-store';
 import { SettingsManager } from '../../settings';
-import { AgentRunInterceptor, AgentRunInterceptorPriority, AgentRunRequest } from '../../../vendor/cbc-core/node/index.js';
 /**
  * ImageRehydration 拦截器
  *
@@ -43,5 +43,4 @@ export declare class ImageCompressionAgentRunInterceptor implements AgentRunInte
     protected init(): void;
     intercept(request: AgentRunRequest): Promise<void>;
     private compressImagesInMessage;
-    private compressInputImageBlock;
 }

package/cli/dist-server/types/node/agent/interceptors/sandbox-interceptor.d.ts

@@ -70,6 +70,7 @@ export declare class SandboxAgentRunInterceptor implements AgentRunInterceptor {
      * {@link _startSessionPrepareBarrier} fire-and-forget 调用。
      */
     private _prepareTurn;
+    private enableTrace;
     private syncModifyBackupConfig;
     /** 固化当前轮次的 SandboxTurnConfig 日志快照，避免输出后被下游 interceptor/hook 改写。 */
     private snapshotSandboxTurnConfig;

package/cli/dist-server/types/node/agent/steer-model-input-preparer.d.ts

@@ -0,0 +1,11 @@
+import { type Session, SteerModelInputPreparer } from '../../vendor/cbc-core/node/index.js';
+import type { AgentInputItem } from '../../vendor/cbc-shared/node/index.js';
+import { Logger } from '../../workspace/telemetry/lib/common/index.js';
+/**
+ * steer 插入点的模型输入加工（#140576）：与 ImageFilter / ImageCompression 拦截器同一实现，
+ * 只作用于模型输入副本，历史保留原图。
+ */
+export declare class SteerModelInputPreparerImpl implements SteerModelInputPreparer {
+    protected readonly logger: Logger;
+    prepare(session: Session, items: AgentInputItem[]): Promise<void>;
+}

package/cli/dist-server/types/node/agent-task/agent-task.d.ts

@@ -124,6 +124,18 @@ export declare class AgentTaskImpl implements AgentTask {
      * 也不吃 lastUsed：空白父会话未盖章时 fork 必须跟父身份 / 设为默认，不能变成 chip 记忆。
      */
     private resolveForkParentAgent;
+    /**
+     * 跟随 leader 站立模式时，给模式 agent 视图叠加子代理自身的角色指令。
+     *
+     * 模式 agent（ptc / minimal / create 等）的 instructions 是主会话 system prompt，只负责
+     * 工具面与 Code Mode 契约；子代理预设（`--agents` 自定义、内置 Explore 等）的 instructions
+     * 才定义「你是谁、做什么、返回什么」。两者都要：模式在前，角色在后。
+     *
+     * 子代理就是模式自身（如 subagent_type === 'ptc'）或预设不可解析时，原样返回。
+     * 用 `Object.create(base)` 只覆盖 instructions，tools / model 等沿原型链共享，
+     * 与 sandboxScopedAgentView 的视图语义一致（不登记 managed、不写回 agentMap）。
+     */
+    private withSubagentRoleInstructions;
     /**
      * Phase 1: One-time setup - session, subscriptions, etc.
      * This only runs once, not repeated during retries

package/cli/dist-server/types/node/agent-team/backends/teammate-backend-protocol.d.ts

@@ -38,6 +38,8 @@ export interface TeammateSpawnConfig {
     model?: string;
     /** 权限模式 */
     permissionMode?: string;
+    /** 主 Session 已锁定隐私数据 */
+    privateDataSticky?: true;
     /** 最大轮数 */
     maxTurns?: number;
     /** Leader 的 HTTP endpoint（用于 Permission Bridge） */

package/cli/dist-server/types/node/agent-view/session-handoff.d.ts

@@ -96,6 +96,8 @@ export interface SessionHandoffInput {
      * 该值会覆盖 inheritFlags 里从 argv 回放出来的陈旧 --permission-mode。
      */
     permissionMode?: PermissionMode;
+    /** 源 Session 已锁定隐私数据时，通过 M5 隐藏参数恢复到 worker。 */
+    privateDataSticky?: true;
     /** 用户显式命名 */
     name?: string;
     /**
@@ -148,6 +150,11 @@ export declare function handOffSessionToBackground(deps: SessionHandoffDeps, inp
  * 模式也不会丢。未提供模式时原样返回 inheritFlags。
  */
 export declare function mergePermissionModeFlag(inheritFlags?: readonly string[], permissionMode?: PermissionMode): string[];
+/**
+ * 隐私锁定是无值布尔 flag，不能用会吞掉下一个 token 的键值 flag 替换逻辑。
+ * 无论 inheritFlags 是否含旧值，都先剥离，再只对严格 true 追加一次。
+ */
+export declare function mergePrivateDataStickyFlag(inheritFlags: readonly string[], privateDataSticky?: true): string[];
 /**
  * 后台 worker 的启动参数。
  *

package/cli/dist-server/types/node/channel/channel-protocol.d.ts

@@ -43,29 +43,29 @@ export declare const ChannelPermissionRequestSchema: z.ZodObject<{
         input_preview: z.ZodString;
     }, "strip", z.ZodTypeAny, {
         description: string;
-        tool_name: string;
         request_id: string;
+        tool_name: string;
         input_preview: string;
     }, {
         description: string;
-        tool_name: string;
         request_id: string;
+        tool_name: string;
         input_preview: string;
     }>;
 }, "strip", z.ZodTypeAny, {
     method: "notifications/claude/channel/permission_request";
     params: {
         description: string;
-        tool_name: string;
         request_id: string;
+        tool_name: string;
         input_preview: string;
     };
 }, {
     method: "notifications/claude/channel/permission_request";
     params: {
         description: string;
-        tool_name: string;
         request_id: string;
+        tool_name: string;
         input_preview: string;
     };
 }>;
@@ -75,23 +75,23 @@ export declare const ChannelPermissionResponseSchema: z.ZodObject<{
         request_id: z.ZodString;
         behavior: z.ZodEnum<["allow", "allow_always", "deny", "deny_and_exit_plan"]>;
     }, "strip", z.ZodTypeAny, {
-        behavior: "allow" | "deny" | "allow_always" | "deny_and_exit_plan";
         request_id: string;
-    }, {
         behavior: "allow" | "deny" | "allow_always" | "deny_and_exit_plan";
+    }, {
         request_id: string;
+        behavior: "allow" | "deny" | "allow_always" | "deny_and_exit_plan";
     }>;
 }, "strip", z.ZodTypeAny, {
     method: "notifications/claude/channel/permission";
     params: {
-        behavior: "allow" | "deny" | "allow_always" | "deny_and_exit_plan";
         request_id: string;
+        behavior: "allow" | "deny" | "allow_always" | "deny_and_exit_plan";
     };
 }, {
     method: "notifications/claude/channel/permission";
     params: {
-        behavior: "allow" | "deny" | "allow_always" | "deny_and_exit_plan";
         request_id: string;
+        behavior: "allow" | "deny" | "allow_always" | "deny_and_exit_plan";
     };
 }>;
 export type ChannelNotification = z.infer<typeof ChannelNotificationSchema>;

package/cli/dist-server/types/node/cli/cli-runtime-options.d.ts

@@ -1,5 +1,5 @@
-import { type Observable } from 'rxjs';
 import { SessionOptions } from '../../vendor/cbc-core/node/index.js';
+import { type Observable } from 'rxjs';
 /**
  * Fields of `SessionOptions` that are set on a per-session basis AND
  * are also accepted as process-level CLI flags (e.g. `--permission-mode`,
@@ -53,6 +53,8 @@ export declare function resolveCliProcessDefaults(snapshot: {
 export type CliSessionInitialOptions = Pick<SessionOptions, 'sessionId' | 'permissionMode' | 'permissionModeBeforePlan' | 'subagentPermissionMode' | 'dangerouslySkipPermissions' | 'model' | 'fallbackModel' | 'textToImageModel' | 'imageToImageModel' | 'tools' | 'allowedTools' | 'disallowedTools' | 'addDir' | 'channels' | 'dangerouslyLoadDevelopmentChannels' | 'mcpConfig' | 'strictMcpConfig' | 'sessionPersistence'> & {
     /** `--agent`：进程默认主 agent。不是 SessionOptions 字段，不摊进 session.options。 */
     agent?: string;
+    /** 内部恢复通道；只在显式传入时进入 `/internal/agent` 请求。 */
+    privateDataSticky?: true;
 };
 /**
  * Full argv-derived option bag accepted by {@link CliRuntimeOptions.set}.
@@ -61,6 +63,11 @@ export type CliSessionInitialOptions = Pick<SessionOptions, 'sessionId' | 'permi
  * and `serve` through dedicated helpers on `CliRuntimeOptions`.
  */
 export type CliRuntimeInputOptions = CliSessionInitialOptions & Record<string, unknown>;
+export interface PrivateDataStickyReservation {
+    readonly reserved: boolean;
+    commit(): void;
+    release(): void;
+}
 /**
  * Process-level snapshot of CLI-provided session initialisation options.
  *
@@ -75,6 +82,7 @@ export type CliRuntimeInputOptions = CliSessionInitialOptions & Record<string, u
  */
 export declare class CliRuntimeOptions {
     private snapshot;
+    private privateDataStickyReservation?;
     /**
      * 全量 CLI opts 序列，用于变更去重。
      *
@@ -114,6 +122,21 @@ export declare class CliRuntimeOptions {
      * override this to resolve installation snapshots without starting MCP.
      */
     isPluginSnapshotOnly(): boolean;
+    /**
+     * 为一次 Session admission 预留进程级隐私恢复标记。
+     *
+     * 标记只有在 admission 成功后才由 `commit()` 消费；失败调用 `release()` 后，
+     * 下一次初始化仍可继承。预留未决期间其他调用会等待，避免持有者失败时另一个
+     * Session 无标记穿过。
+     *
+     * 并发语义（MR 评审 B1 的澄清，2026-09-22）：`while` 里的 await 只用来「等待
+     * 已有持有者」；循环一旦退出，「判空 → 占位」是同一段同步代码（两者之间没有
+     * await），因此不存在两个等待者同时占位、或等待者拿到别人 reservation 的窗口：
+     * A 持有 → B/C 一起等 A → A settle 后 B 先同步占位 R_B，C 只能接着等 R_B。
+     * 串行是刻意的——一次性标记必须只交付给一个成功 admission 的 Session；而
+     * 「持有者永不 settle」这条尾部风险由调用方兜底（见 AcpAgent 的 admission 超时）。
+     */
+    reservePrivateDataSticky(): Promise<PrivateDataStickyReservation>;
     /**
      * Whether marketplace and Plugin lifecycle writes are owned by another
      * process. Plugin discovery is cache-first in every runtime; this switch

package/cli/dist-server/types/node/command/clear-command-executor.d.ts

@@ -1,5 +1,6 @@
 import { SessionHookManager, SessionManager } from '../../vendor/cbc-core/node/index.js';
 import { Logger } from '../../workspace/telemetry/lib/common/index.js';
+import { SecurityReviewGate } from '../security-review/protocol';
 import { CommandExecuteContext, CommandExecutor } from './command-protocol';
 export declare class ClearCommandExecutor implements CommandExecutor {
     name: string;
@@ -8,6 +9,7 @@ export declare class ClearCommandExecutor implements CommandExecutor {
     protected readonly sessionManager: SessionManager;
     protected readonly sessionHookManager: SessionHookManager;
     protected readonly logger: Logger;
+    protected readonly securityReviewGate?: SecurityReviewGate;
     execute(ctx: CommandExecuteContext): Promise<void>;
     /**
      * Notify ACP clients that session has been reset via session_info_update.

package/cli/dist-server/types/node/hooks/hook-protocol.d.ts

@@ -2,7 +2,7 @@
  * Hook mechanism protocol definitions
  * Compatible with Claude Code hooks specification
  */
-import type { HookInput } from '../../vendor/cbc-core/node/index.js';
+import type { HookInput, InternalHookContext } from '../../vendor/cbc-core/node/index.js';
 import { HookEvent, type HookExecutionOptions, type HookExecutionResult, type PromptHookResult } from '../../vendor/cbc-shared/node/index.js';
 export { HookBlockedError, HookEvent, NotificationType } from '../../vendor/cbc-shared/node/index.js';
 export type { BackgroundTaskInfo, CronTaskInfo, FinalStopReason, HookBlockingDetail, HookExecutionOptions, HookExecutionResult, HookOutput, HookPermissionMode, PromptHookResult, SessionEndReason, SessionStartSource, } from '../../vendor/cbc-shared/node/index.js';
@@ -241,7 +241,7 @@ export type HookDefinition = CommandHookDefinition | PromptHookDefinition | Agen
  * Input data passed to hook script via stdin
  * Format matches Claude Code hooks specification exactly
  */
-export type { HookInput } from '../../vendor/cbc-core/node/index.js';
+export { Hook, type HookInput, HookPriority } from '../../vendor/cbc-core/node/index.js';
 /**
  * Hook Manager interface
  */
@@ -255,7 +255,7 @@ export interface HookManager {
      * @param options - Execution options (timeout, env, hookEvent for UI, etc)
      * @returns Execution result indicating whether to proceed
      */
-    executeHooks(event: HookEvent, input: HookInput, options?: HookExecutionOptions): Promise<HookExecutionResult>;
+    executeHooks(event: HookEvent, input: HookInput, options?: HookExecutionOptions, internalContext?: InternalHookContext): Promise<HookExecutionResult>;
     /**
      * Check if any hooks are configured for an event
      *
@@ -316,70 +316,6 @@ export interface PromptHookExecuteOptions {
      */
     includeHistory?: boolean;
 }
-/**
- * Internal Hook Provider interface
- *
- * Use @Component(Hook) to register internal hooks that execute
- * alongside external shell hooks in HookManager.executeHooks()
- *
- * @example
- * ```typescript
- * @Component(Hook)
- * export class MyStopHook implements Hook {
- *     readonly event = HookEvent.STOP;
- *     readonly priority = HookPriority.Normal;
- *
- *     async execute(input: HookInput): Promise<HookExecutionResult | undefined> {
- *         // Return undefined to skip, or HookExecutionResult to participate
- *         return undefined;
- *     }
- * }
- * ```
- */
-export declare const Hook: unique symbol;
-export interface Hook {
-    /**
-     * Hook event type this hook responds to
-     */
-    readonly event: HookEvent;
-    /**
-     * Priority for execution order (lower = earlier)
-     */
-    readonly priority: number;
-    /**
-     * Optional matcher pattern (regex) for filtering
-     * - PreToolUse/PostToolUse: matches tool_name
-     * - SessionStart: matches source
-     * - SessionEnd: matches reason
-     * - Other events: not used
-     */
-    readonly matcher?: string;
-    /**
-     * Execute the hook logic
-     *
-     * @param input - Hook input data
-     * @returns HookExecutionResult or undefined to skip
-     */
-    execute(input: HookInput): Promise<HookExecutionResult | undefined>;
-}
-/**
- * Priority levels for internal hooks
- * Lower values execute first
- */
-export declare enum HookPriority {
-    /** Highest priority - runs first */
-    Highest = 0,
-    /** High priority */
-    High = 100,
-    /** Structured output processing */
-    StructuredOutput = 200,
-    /** Normal priority - default */
-    Normal = 500,
-    /** Low priority */
-    Low = 800,
-    /** Lowest priority - runs last */
-    Lowest = 1000
-}
 /**
  * HookInputProcessor enriches HookInput before hooks are dispatched.
  *

package/cli/dist-server/types/node/loopback/endpoint-provider.d.ts

@@ -4,6 +4,9 @@ import { Server } from 'http';
 import { EndpointProvider } from './server-protocol';
 export declare class EndpointProviderImpl implements EndpointProvider, ServerAware {
     protected endpointDeferred: Deferred<string>;
+    protected listenFailedDeferred: Deferred<Error>;
     get(): Promise<string>;
+    whenListenFailed(): Promise<Error>;
     setServer(server: Server): Promise<void>;
+    protected resolveEndpoint(server: Server): Promise<void>;
 }

package/cli/dist-server/types/node/loopback/server-protocol.d.ts

@@ -2,6 +2,11 @@ import { SessionOptions } from '../../vendor/cbc-core/node/index.js';
 export declare const EndpointProvider: unique symbol;
 export interface EndpointProvider {
     get(): Promise<string>;
+    /**
+     * HTTP server 绑定失败（如 EADDRINUSE）时 resolve 为该错误；成功时永不 settle。
+     * get() 在绑定失败时仍保持 pending（既有语义），需要快速失败的调用方自行 race。
+     */
+    whenListenFailed?(): Promise<Error>;
 }
 export interface CommonRequest extends SessionOptions {
     /**
@@ -14,6 +19,8 @@ export interface CommonRequest extends SessionOptions {
     debugToStderr?: boolean;
     /** Automatically connect to a single available IDE on startup. */
     ide?: boolean;
+    /** 内部恢复通道；只接受 true，SessionMiddleware 会在合并 options 前剥离。 */
+    privateDataSticky?: true;
 }
 export interface ResumeRequest {
     resume: boolean | string;

package/cli/dist-server/types/node/memory/memory-relevance-protocol.d.ts

@@ -1,3 +1,4 @@
+import type { Session } from '../../vendor/cbc-core/node/index.js';
 export declare const MemoryRelevanceService: unique symbol;
 /**
  * 相关记忆信息
@@ -23,9 +24,13 @@ export interface MemoryRelevanceService {
      * @param recentTools 最近使用的工具名称列表
      * @param alreadySurfaced 已经展示过的记忆路径集合
      * @param signal 中断信号
+     * @param parentSession 触发本次选择的会话。实现会新建一个临时 session 作为
+     *                      runOneTime 的 context，该临时 session 不走 AgentService
+     *                      「从当前会话继承」分支，必须由调用方显式传入父会话才能
+     *                      继承会话级隐私锁定位（X-Private-Data）。
      * @returns 相关记忆列表（最多 5 个）
      */
-    selectRelevantMemories(query: string, memoryDir: string, recentTools?: readonly string[], alreadySurfaced?: ReadonlySet<string>, signal?: AbortSignal): Promise<RelevantMemory[]>;
+    selectRelevantMemories(query: string, memoryDir: string, recentTools?: readonly string[], alreadySurfaced?: ReadonlySet<string>, signal?: AbortSignal, parentSession?: Session): Promise<RelevantMemory[]>;
     /**
      * 检查功能是否启用
      */

package/cli/dist-server/types/node/memory/memory-relevance-service.d.ts

@@ -5,8 +5,9 @@
  * - 轻量单次调用，不需要对话历史
  * - 返回最多 5 个相关记忆
  */
-import { Logger } from '../../workspace/telemetry/lib/common/index.js';
+import type { Session } from '../../vendor/cbc-core/node/index.js';
 import { SessionManager } from '../../vendor/cbc-core/node/index.js';
+import { Logger } from '../../workspace/telemetry/lib/common/index.js';
 import { SettingsManager } from '../settings';
 import { MemoryRelevanceService, RelevantMemory } from './memory-relevance-protocol';
 export declare class MemoryRelevanceServiceImpl implements MemoryRelevanceService {
@@ -15,7 +16,7 @@ export declare class MemoryRelevanceServiceImpl implements MemoryRelevanceServic
     protected readonly logger: Logger;
     protected init(): void;
     isEnabled(): Promise<boolean>;
-    selectRelevantMemories(query: string, memoryDir: string, recentTools?: readonly string[], alreadySurfaced?: ReadonlySet<string>, signal?: AbortSignal): Promise<RelevantMemory[]>;
+    selectRelevantMemories(query: string, memoryDir: string, recentTools?: readonly string[], alreadySurfaced?: ReadonlySet<string>, signal?: AbortSignal, parentSession?: Session): Promise<RelevantMemory[]>;
     /**
      * 使用 memorySelector agent 进行 AI 语义匹配
      *

package/cli/dist-server/types/node/model/model-protocol.d.ts

@@ -11,6 +11,8 @@ export interface ModelErrorAnalyzer {
     analyze(error: unknown, axiosConfig: any): Promise<Response>;
     createErrorResponse(body: string, status: number, statusText: string, headers?: Record<string, string>): Response;
 }
+/** Request body shape: chat completions `messages`, or Responses API `input` (pi `api`). */
+export type ModelRequestWire = 'chat-completions' | 'responses';
 export interface ModelRequestProcessor {
     /**
      * Priority of the processor. Lower values execute first.
@@ -18,5 +20,7 @@ export interface ModelRequestProcessor {
      * to ensure it runs after all other processors that need to access the raw body.
      */
     priority?: number;
+    /** Wires whose bodies the processor understands; every wire when omitted. */
+    readonly wires?: readonly ModelRequestWire[];
     process(axiosConfig: any): Promise<void>;
 }

package/cli/dist-server/types/node/security-review/gate.d.ts

@@ -5,6 +5,7 @@ export declare class SecurityReviewGateImpl implements SecurityReviewGateContrac
     private readonly pendingPolicies;
     private readonly policies;
     setSessionConfig(session: Session, rawConfig: unknown): TurnSecurityReviewPolicy;
+    inheritSessionConfig(source: Session, target: Session): void;
     beginTurn(session: Session): TurnSecurityReviewPolicy;
     getTurnPolicy(session: Session): TurnSecurityReviewPolicy;
     isModelBehaviorReviewEnabled(session: Session): boolean;

package/cli/dist-server/types/node/security-review/protocol.d.ts

@@ -6,6 +6,8 @@ export declare function isToolRiskApprovalEnabled(policy: TurnSecurityReviewPoli
 export declare const SecurityReviewGate: unique symbol;
 export interface SecurityReviewGate {
     setSessionConfig(session: Session, rawConfig: unknown): TurnSecurityReviewPolicy;
+    /** Carry standing host configuration across /clear, never the old turn policy. */
+    inheritSessionConfig(source: Session, target: Session): void;
     beginTurn(session: Session): TurnSecurityReviewPolicy;
     getTurnPolicy(session: Session): TurnSecurityReviewPolicy;
     isModelBehaviorReviewEnabled(session: Session): boolean;

package/cli/dist-server/types/node/session/session-hook-host-adapter.d.ts

@@ -1,11 +1,11 @@
-import { CoreHookExecutor, type HookInput, type Session, SessionHookHost } from '../../vendor/cbc-core/node/index.js';
+import { CoreHookExecutor, type HookInput, type InternalHookContext, type Session, SessionHookHost } from '../../vendor/cbc-core/node/index.js';
 import type { HookEvent, HookExecutionOptions, HookExecutionResult, NotificationType } from '../../vendor/cbc-shared/node/index.js';
 import { Logger } from '../../workspace/telemetry/lib/common/index.js';
 import { HookManager } from '../hooks/hook-protocol';
 import { TerminalNotificationService } from '../notification/notification-protocol';
 export declare class CoreHookExecutorAdapter implements CoreHookExecutor {
     protected readonly hooks: HookManager;
-    executeHooks(event: HookEvent, input: HookInput, options?: HookExecutionOptions): Promise<HookExecutionResult>;
+    executeHooks(event: HookEvent, input: HookInput, options?: HookExecutionOptions, internalContext?: InternalHookContext): Promise<HookExecutionResult>;
     hasHooks(event: HookEvent, toolName?: string): Promise<boolean>;
 }
 export declare class SessionHookHostAdapter implements SessionHookHost {

package/cli/dist-server/types/node/settings/current-session-model-transition.d.ts

@@ -1,15 +1,16 @@
-import { AgentManager, type ManualCompactRequestHandler as ManualCompactRequestHandlerContract, SessionManager, SessionRunStateMachine } from '../../vendor/cbc-core/node/index.js';
+import { AgentManager, SessionManager, SessionRunStateMachine } from '../../vendor/cbc-core/node/index.js';
 import { CliSettingsProvider } from './cli-settings-provider';
 import { type CurrentSessionModelTransition as CurrentSessionModelTransitionContract, type CurrentSessionModelTransitionResult } from './current-session-model-transition-protocol';
 import { SettingsManager } from './settings-protocol';
-/** TUI-only safe current-session model switch. ACP and daemon have separate owners. */
+/**
+ * CLI `/model` 的当前会话切换。切换立即生效，不在这里压缩。
+ * 若新模型窗口放不下，下一次预压缩按新模型的阈值触发，并用切换前的模型做摘要。
+ */
 export declare class CurrentSessionModelTransitionImpl implements CurrentSessionModelTransitionContract {
     protected readonly agentManager: AgentManager;
     protected readonly sessionManager: SessionManager;
     protected readonly stateMachine: SessionRunStateMachine;
     protected readonly settingsManager: SettingsManager;
     protected readonly cliSettingsProvider: CliSettingsProvider;
-    protected readonly manualCompactRequestHandler: ManualCompactRequestHandlerContract;
     transition(input: Parameters<CurrentSessionModelTransitionContract['transition']>[0]): Promise<CurrentSessionModelTransitionResult>;
-    private getModelInputHistory;
 }

package/cli/dist-server/types/node/settings/settings-protocol.d.ts

@@ -105,6 +105,8 @@ export declare const ENV_KEY_CODEBUDDY_WAIT_FOR_MCP_SERVERS_ENABLED = "CODEBUDDY
 export declare const ENV_KEY_CODEBUDDY_REPORT_FINDINGS_ENABLED = "CODEBUDDY_REPORT_FINDINGS_ENABLED";
 export declare const ENV_KEY_CODEBUDDY_MONITOR_ENABLED = "CODEBUDDY_MONITOR_ENABLED";
 export declare const ENV_KEY_CODEBUDDY_DISABLE_HOT_RELOAD = "CODEBUDDY_DISABLE_HOT_RELOAD";
+/** Turns sensitive data protection off for the process without touching the shared settings.json (wb rollout). */
+export declare const ENV_KEY_CODEBUDDY_DISABLE_SENSITIVE_PROTECTION = "CODEBUDDY_DISABLE_SENSITIVE_PROTECTION";
 /**
  * `--setting-sources` 的进程级注册通道（同一套语法：'user,project,local' /
  * 'none'）。供无 argv 形态（@tencent-ai/agent-cli/server 库模式）使用：served

package/cli/dist-server/types/node/tools/a2a-cancel-task-tool.d.ts

@@ -11,11 +11,11 @@ declare const A2ACancelTaskParameters: z.ZodObject<{
     agent_id: z.ZodString;
     task_id: z.ZodString;
 }, "strip", z.ZodTypeAny, {
-    agent_id: string;
     task_id: string;
-}, {
     agent_id: string;
+}, {
     task_id: string;
+    agent_id: string;
 }>;
 /**
  * A2ACancelTask — request cancellation of a previously created A2A task
@@ -40,11 +40,11 @@ export declare class A2ACancelTaskTool extends BaseTool implements Tool {
         agent_id: z.ZodString;
         task_id: z.ZodString;
     }, "strip", z.ZodTypeAny, {
-        agent_id: string;
         task_id: string;
-    }, {
         agent_id: string;
+    }, {
         task_id: string;
+        agent_id: string;
     }>;
     argumentRenderer: ToolCallArgumentRenderer;
     isEnabled: (args: {

package/cli/dist-server/types/node/tools/a2a-get-task-tool.d.ts

@@ -12,11 +12,11 @@ declare const A2AGetTaskParameters: z.ZodObject<{
     agent_id: z.ZodString;
     task_id: z.ZodString;
 }, "strip", z.ZodTypeAny, {
-    agent_id: string;
     task_id: string;
-}, {
     agent_id: string;
+}, {
     task_id: string;
+    agent_id: string;
 }>;
 export declare const ENV_POLL_INTERVAL_MS = "CODEBUDDY_A2A_POLL_INTERVAL_MS";
 export declare const ENV_POLL_MAX_DURATION_MS = "CODEBUDDY_A2A_POLL_MAX_DURATION_MS";
@@ -128,11 +128,11 @@ export declare class A2AGetTaskTool extends BaseTool implements Tool {
         agent_id: z.ZodString;
         task_id: z.ZodString;
     }, "strip", z.ZodTypeAny, {
-        agent_id: string;
         task_id: string;
-    }, {
         agent_id: string;
+    }, {
         task_id: string;
+        agent_id: string;
     }>;
     argumentRenderer: ToolCallArgumentRenderer;
     isEnabled: (args: {

package/cli/dist-server/types/node/tools/audio-transcribe-tool.d.ts

@@ -1,6 +1,6 @@
 import { Session } from '../../vendor/cbc-core/node/index.js';
 import { Agent, ToolNames } from '../../vendor/cbc-shared/node/index.js';
-import { AbTestService, ProductManager } from '../../workspace/product/lib/common/index.js';
+import { ProductManager } from '../../workspace/product/lib/common/index.js';
 import { Logger } from '../../workspace/telemetry/lib/common/index.js';
 import type { RunContext } from '@openai/agents';
 import { z } from 'zod';
@@ -27,7 +27,6 @@ declare const AudioTranscribeParameters: z.ZodObject<{
 export declare class AudioTranscribeTool extends BaseTool implements Tool {
     protected readonly audioTranscribeService: AudioTranscribeService;
     protected readonly productManager: ProductManager;
-    protected readonly abTestService?: AbTestService;
     protected readonly logger: Logger;
     name: ToolNames;
     description: string;

package/cli/dist-server/types/node/tools/grep-tool.d.ts

@@ -123,6 +123,8 @@ export declare class GrepTool extends BaseTool implements Tool {
      * 根据有效的上下文或行号选项推断 content 模式。
      */
     private normalizeGrepParams;
+    /** 仅对正则语法错误尝试转义失衡括号，其余错误（路径、权限、超时、中断）保持原样。 */
+    private repairRejectedPattern;
     /**
      * 将底层异常映射到 search_content 细分错误码：
      * 权限(EACCES/EPERM) → 7104；路径(ENOENT/ENOTDIR) → 7101；

package/cli/dist-server/types/node/tools/image-service.d.ts

@@ -1,10 +1,11 @@
 import { RestOperations } from '@celljs/http';
 import { AuthenticationManager } from '../../workspace/authentication/lib/common/index.js';
+import { Session } from '../../vendor/cbc-core/node/index.js';
 import { LanguageModel, ProductConfiguration, ProductManager } from '../../workspace/product/lib/common/index.js';
 import { Logger } from '../../workspace/telemetry/lib/common/index.js';
 import type { RunContext } from '@openai/agents';
-import { Session } from '../../vendor/cbc-core/node/index.js';
 import { SettingsManager } from '../settings';
+import { MediaFileWriter } from './media-file-writer';
 import { EditImageParams, GenerateImageParams, ImageGenData, type ImageGenerationResult, ImageService } from './tool-protocol';
 /**
  * 图片服务实现
@@ -16,6 +17,7 @@ export declare class ImageServiceImpl implements ImageService {
     protected readonly productManager: ProductManager;
     protected readonly logger: Logger;
     protected readonly settingsManager: SettingsManager;
+    protected readonly mediaFileWriter: MediaFileWriter;
     private outputDir;
     /**
      * 初始化输出目录

package/cli/dist-server/types/node/tools/index.d.ts

@@ -47,6 +47,7 @@ export * from './tool-always-approval-service';
 export * from './tool-hook-manager';
 export * from './tool-permission-service';
 export * from './sandbox-write-rule-guard';
+export * from './media-file-writer';
 export * from './ask-user-question-tool';
 export * from './ask-user-for-structured-input-tool';
 export * from './lsp-tool';

package/cli/dist-server/types/node/tools/media-file-writer.d.ts

@@ -0,0 +1,12 @@
+import { Logger } from '@celljs/core';
+import { type ISandboxCLILifecycle } from '../sandbox-cli/sandbox-cli-lifecycle-protocol';
+import { SandboxTurnConfig } from '../sandbox-cli/sandbox-turn-config';
+import { SandboxCenterIpcClient } from '../sensitive-content/sandbox-center-ipc-client-protocol';
+/** 媒体产物只接文件备份，不参与路径和网络权限裁决。 */
+export declare class MediaFileWriter {
+    protected readonly turnConfig?: SandboxTurnConfig;
+    protected readonly lifecycle?: ISandboxCLILifecycle;
+    protected readonly centerClient?: SandboxCenterIpcClient;
+    protected readonly logger: Logger;
+    writeFile(filePath: string, data: Buffer): Promise<void>;
+}