@tencent-ai/agent-harness 0.2.0-beta.10 → 0.2.0-beta.11

package/cli/dist-server/types/vendor/cbc-core/node/session/session-protocol.d.ts

@@ -3,6 +3,7 @@ import { type AgentInputItem, ApprovalOptions, type Checkpoint, FinalStopReason,
 import { Command } from '../../../../workspace/product/lib/common/index.js';
 import { BehaviorSubject, Subject } from 'rxjs';
 import type { CompactionLineage } from '../context/compaction-lineage';
+import type { InternalHookContext } from '../hooks/hook-protocol';
 import { BackgroundTask } from './background-task-protocol';
 import type { SessionRunStateSnapshot } from './session-run-state-machine-protocol';
 import type { Lane, LanePointer, SessionKey, SessionStoreEntry } from './session-store-contract';
@@ -516,6 +517,11 @@ export interface Session {
     telemetryClientInfo?: TelemetryClientInfo;
     /** Root span for current conversation request, used to extract B3 trace headers */
     conversationRequestRootSpan?: import('../../../../workspace/telemetry/lib/common/index.js').Span;
+    /**
+     * 释放 tracing 重初始化闸门（见 trace/trace-reinit-gate.ts）。TraceStartHook 建
+     * root span 时置入，TraceStopHook / 强制收尾旧 root 时调用一次（幂等）。genie#113158。
+     */
+    _traceTurnRelease?: () => void;
     messageId?: string;
     /**
      * @deprecated Hooks 的 `generation_id` 现直接取 `conversationRequestId`（Request ID），
@@ -1239,7 +1245,8 @@ export interface SessionManager {
      * 拦截器/ModelUtils 的权威优先级是 requestOptions.model > options.model > agent 默认；
      * --model 启动参数固化在 options.model，仅写 settings/cli 无法覆盖它。override map
      * 供 applyOverrideModel 每轮重建 requestOptions（Issue #82146）。/model 命令与模型面板
-     * 共用此入口；ACP set_model（applyRuntimeSessionModel）仍为独立实现，待统一收敛。
+     * 共用此入口；ACP set_model 经 applyRuntimeSessionModel 调用。
+     * 切换前模型不在这里记录，压缩路径从会话历史里最近一次用量推导。
      */
     setRuntimeModel(session: Session | undefined, modelId: string, source?: OverrideModelSource): void;
     /**
@@ -1476,7 +1483,7 @@ export interface SessionHookManager {
      * final terminal state and will not continue via the current Stop hook.
      * Does NOT support continueRequest.
      */
-    executeFinalStopHooks(session: Session, reason?: FinalStopReason): Promise<void>;
+    executeFinalStopHooks(session: Session, reason?: FinalStopReason, internalContext?: Pick<InternalHookContext, 'interceptorGate'>): Promise<void>;
     /**
      * UserPromptExpansion — Claude Code 官方事件（非 cbc 专属扩展）：任何用户输入的
      * 命令/skill 在展开成 prompt、送进模型之前统一从这里触发，可阻断展开。适用于

package/cli/dist-server/types/vendor/cbc-core/node/session/session-store.d.ts

@@ -61,12 +61,13 @@ export declare const SESSION_TITLE_META_KEY = "codebuddy.ai/sessionTitle";
  * never lands on disk. Literals kept in sync with MAIN_AGENT_META_KEY /
  * MAIN_AGENT_HOST_KIND_KEY (agent/main-agent-session.ts, #97166) and
  * MULTITASK_MODE_META_KEY (multitask overlay) and A2A_CONTEXTS_META_KEY
- * (a2a/a2a-context-store.ts), plus SESSION_TITLE_META_KEY above (#138181).
+ * (a2a/a2a-context-store.ts), plus SESSION_TITLE_META_KEY above (#138181) and
+ * PRIVATE_DATA_STICKY_META_KEY above (#127752).
  * The spec asserts the sync. Growing this list is a review decision, not a
  * side effect of putting a key on session.meta.
  * Role / locks / parentSessionId stay runtime-only.
  */
-export declare const PERSISTED_SESSION_META_KEYS: readonly ['codebuddy.ai/mainAgent', 'codebuddy.ai/hostKind', 'multitaskMode', 'codebuddy.ai/a2aContexts', "codebuddy.ai/sessionTitle"];
+export declare const PERSISTED_SESSION_META_KEYS: readonly ['codebuddy.ai/mainAgent', 'codebuddy.ai/hostKind', 'multitaskMode', 'codebuddy.ai/a2aContexts', "codebuddy.ai/sessionTitle", "codebuddy.ai/privateDataSticky"];
 /**
  * Meta a fork inherits from its source: the persisted whitelist minus title
  * facts, which describe the source conversation and must not label the child
@@ -481,7 +482,6 @@ export declare class SessionStoreImpl implements SessionStore {
      */
     private deserializeForkSubagentSession;
     private assertForkGraphAcyclic;
-    private assertForkChildSupported;
     private resolveForkChildPrefixEnd;
     private readForkRuntimeSessionId;
     private assertForkChildMetaLineage;

package/cli/dist-server/types/vendor/cbc-core/node/trace/trace-turn-gate.d.ts

@@ -0,0 +1,13 @@
+import type { Session } from '../session/session-protocol';
+/**
+ * 归还本轮 turn 持有的 tracing 重初始化闸门（genie#113158）。
+ *
+ * 闸门计数只能由持有 release 的那一轮归还，且 session 上只存一个 release 槽位。
+ * 因此**每一个结束本轮 root span 的出口**都必须调用本函数：正常 Stop、PTL 无
+ * 续跑的兜底清理、下一轮开始时对残留 root span 的强制收尾。任一出口漏掉，
+ * 下一轮的 markTraceTurnOpen 就会覆盖掉未归还的 release，计数从此单调递增、
+ * 永不归零——后续 re-init 被无限推迟，auth/product 配置变更再也不生效。
+ *
+ * release 自身幂等，重复调用安全。
+ */
+export declare function releaseTraceTurnGate(session: Session): void;

package/cli/dist-server/types/vendor/cbc-core/node/utils/error-utils.d.ts

@@ -2,6 +2,8 @@ export interface ErrorInfo {
     status?: number;
     code?: number;
     message?: string;
+    /** 会话层是否会自动重试本次错误；未知时按会重试处理，沿用流超时文案的既有口径。 */
+    isRetryable?: boolean;
 }
 /**
  * 后端业务错误码枚举
@@ -157,6 +159,11 @@ export declare namespace ErrorUtils {
      * 避免 acp-agent 分类时静默退化为通用 "Network error" 文案。对齐 isStreamTimeoutError 风格。
      */
     function isEmptyStreamError(error: unknown): boolean;
+    /**
+     * 空流里已经流出过思考、但没有正文或工具调用就 `finish_reason=error`。
+     * 只认 instanceof：与 `isRetryableEmptyStreamError` 同口径，丢了 prototype 的空流本就不会被重试。
+     */
+    function isReasoningOnlyEmptyStreamError(error: unknown): boolean;
     /**
      * 将错误信息序列化为 JSON 字符串，用于 ACP 协议传输
      * ACP SDK 会尝试解析这个 JSON 字符串并将其放到 error.data 中

package/cli/dist-server/types/vendor/cbc-core/node/utils/index.d.ts

@@ -3,6 +3,7 @@ export * from '../session-title/session-title-utils';
 export * from './command-message-utils';
 export * from './content-block-sanitizer';
 export * from './conversation-request-id';
+export * from './markdown-code-utils';
 export * from './error-message-host-protocol';
 export * from './error-utils';
 export * from './failure-classifier';
@@ -20,6 +21,7 @@ export * from './message-utils';
 export * from './model-utils';
 export * from './number-utils';
 export * from './queue-dispatch-utils';
+export * from './responses-api-utils';
 export * from './run-result-utils';
 export * from './session-utils';
 export * from './summary-utils';

package/cli/dist-server/types/vendor/cbc-core/node/utils/markdown-code-utils.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Markdown code-span detection shared by `@path` reference scanners
+ * (agent-cli `ImportUtils` and resource reporting), so both agree on which
+ * mentions are real references.
+ *
+ * Rule: a position is inside code when an odd number of ``` fences, or of lone
+ * ` ticks (not part of a ``` run), precedes it.
+ */
+export declare function isInMarkdownCode(text: string, position: number): boolean;
+/**
+ * Same rule as {@link isInMarkdownCode}, with the counts accumulated in one
+ * forward pass. Query positions in ascending order; a text with many mentions
+ * is then scanned once instead of once per mention.
+ */
+export declare function markdownCodeTester(text: string): (position: number) => boolean;

package/cli/dist-server/types/vendor/cbc-core/node/utils/message-content-utils.d.ts

@@ -1,5 +1,7 @@
 import { type AgentInputItem, type UserMessageItem } from '../../../cbc-shared/node/index.js';
 export declare abstract class MessageContentUtils {
+    /** 用户消息是否携带图片/文件附件块（无文本的纯附件提问也算用户输入）。 */
+    static hasAttachmentContent(item: UserMessageItem): boolean;
     /**
      * 检查用户消息是否有可见的内容
      */
@@ -18,7 +20,7 @@ export declare abstract class MessageContentUtils {
     /** 移除文本中的 system-reminder 标签及其内容 */
     private static stripSystemReminder;
     /** 检测 input_text 块是否为 image_local_path 标记 */
-    private static isImageLocalPathBlock;
+    static isImageLocalPathBlock(text: string | undefined): boolean;
     /**
      * 将 <teammate-message> 标签替换为友好的摘要文本
      * 优先使用 summary 属性，否则提取标签内容

package/cli/dist-server/types/vendor/cbc-core/node/utils/responses-api-utils.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Chat-completions-style finish reason of a terminal OpenAI Responses API stream event
+ * (`response.completed` / `response.incomplete` / `response.failed` / `error`);
+ * `undefined` for every other event.
+ */
+export declare function responsesFinishReason(event: unknown): string | undefined;
+/**
+ * The terminal Responses event behind an SDK `response_done` event: the SDK keeps the event
+ * type in `providerData` and the rest of the response (status, model, incomplete_details) in
+ * `response.providerData`. `undefined` for chat-completions responses.
+ */
+export declare function responsesTerminalEventOf(done: {
+    providerData?: Record<string, any>;
+    response?: {
+        output?: unknown;
+        providerData?: Record<string, any>;
+    };
+}): {
+    type: string;
+    response: Record<string, any>;
+} | undefined;

package/cli/dist-server/types/vendor/cbc-core/node/utils/session-utils.d.ts

@@ -1,6 +1,11 @@
 import type { AgentInputItem } from '../../../cbc-shared/node/index.js';
 import type { Session } from '../session/session-protocol';
 export declare const ENV_KEY_CODEBUDDY_TASK_LIST_ID = "CODEBUDDY_TASK_LIST_ID";
+/**
+ * Runtime meta on a session that runs on behalf of another one (one-off helper runs, `/btw`,
+ * subagents): the owner's {@link SessionUtils.resolveRootSessionId}.
+ */
+export declare const ROOT_SESSION_META_KEY = "codebuddy.ai/rootSessionId";
 export declare abstract class SessionUtils {
     static is(session?: any): session is Session;
     /**
@@ -60,6 +65,21 @@ export declare abstract class SessionUtils {
         };
         id?: string;
     } | undefined, teamName?: string): string | undefined;
+    /**
+     * Root of a session's lineage: the id behind `${CODEBUDDY_SESSION_ID}` in model credentials,
+     * which aihub uses as `cache_task_id` to pin every call of a task to one upstream account.
+     * A history replaying Responses items keeps the root they were produced under
+     * (`providerData.upstream.rootSessionId`), so forks stay on the account that can decrypt
+     * the replayed reasoning. Unlike {@link resolveTaskSessionId}, which picks task-list storage.
+     */
+    static resolveRootSessionId(session: {
+        id: string;
+        history?: readonly unknown[];
+        meta?: Record<string, unknown>;
+    }): string;
+    /** Marks `session` as running on behalf of `owner`, sharing its lineage root. */
+    static adoptRootSession(session: Session, owner: Session | undefined): void;
+    private static replayedRootSessionId;
     static resolveTaskSessionId(session?: {
         meta?: {
             parentSessionId?: string;

package/cli/dist-server/types/vendor/cbc-core/node/utils/usage-utils.d.ts

@@ -7,6 +7,11 @@ export interface LatestUsageSnapshot {
     rawUsage: unknown;
     /** Completion time of the history item carrying this usage. */
     timestamp?: number;
+    /**
+     * 这条用量对应的执行模型。优先 requestModelId（用户选中的模型），
+     * 没有时回退到响应里的 model。Auto 路由下两者可能不同。
+     */
+    model?: string;
 }
 export declare abstract class UsageUtils {
     /** Normalize persisted records and per-response stream usage for SDK aggregation. */
@@ -22,6 +27,19 @@ export declare abstract class UsageUtils {
      * cache fields and response timestamp.
      */
     static getLatestUsageSnapshot(session: Session): LatestUsageSnapshot | undefined;
+    /**
+     * 最近一个压缩边界之后，最后一条带 usage 的消息上的执行模型。
+     * 和 currentModelId 相同、或边界之后没有用量时返回 undefined。
+     *
+     * 压缩边界之前的用量不算：压缩完成后旧模型自动失效，不必再清一份内存记录。
+     * A→B→C 且 B 没跑过时，最后一条用量仍是 A。
+     */
+    static resolvePreSwitchModelId(session: {
+        history?: AgentInputItem[];
+    }, currentModelId: string | undefined): string | undefined;
+    private static findLatestUsageSnapshot;
+    /** 用户选中的模型优先于响应里的实际路由模型。 */
+    private static readExecutedModelId;
     static getTotalUsage(items: AgentInputItem[]): Usage;
     /**
      * 从单个 item 的 rawUsage/usage 提取 cache_read_input_tokens（命中缓存的输入 token）。

package/cli/dist-server/types/vendor/cbc-shared/node/agent/openai-agents-types.d.ts

@@ -26,7 +26,7 @@
  * 未 preload 直接用 `new Agent(...)` 会 fail-loud（TypeError: undefined is not
  * a constructor）——刻意设计，静默 sync require 回退会让整个 lazy 化归零。
  */
-import type { addTraceProcessor as addTraceProcessorFn, Agent as AgentTypeCtor, AgentConfiguration, AgentInputItem as OriginalAgentInputItem, AgentOptions, AssistantMessageItem as OriginalAssistantMessageItem, ComputerCallResultItem as OriginalComputerCallResultItem, ComputerUseCallItem as OriginalComputerUseCallItem, FunctionCallItem as OriginalFunctionCallItem, FunctionCallResultItem as OriginalFunctionCallResultItem, FunctionTool as FunctionToolTypeCtor, Handoff as HandoffTypeCtor, handoff as handoffFn, HostedToolCallItem as OriginalHostedToolCallItem, Model as ModelType, ModelProvider as ModelProviderType, NonStreamRunOptions, OpenAIChatCompletionsModel as OpenAIChatCompletionsModelTypeCtor, ReasoningItem as OriginalReasoningItem, ResponseStreamEvent, RunConfig, RunContext as RunContextTypeCtor, RunItem, Runner as RunnerTypeCtor, RunResult as RunResultTypeCtor, RunState as RunStateTypeCtor, RunToolApprovalItem as RunToolApprovalItemTypeCtor, setTraceProcessors as setTraceProcessorsFn, StreamedRunResult as RawStreamedRunResultTypeCtor, StreamRunOptions, SystemMessageItem as OriginalSystemMessageItem, Tool as OpenAIToolType, tool as toolTypeCtor, ToolExecuteArgument, UnknownItem as OriginalUnknownItem, Usage as UsageTypeCtor, UserMessageItem as OriginalUserMessageItem } from '@openai/agents';
+import type { addTraceProcessor as addTraceProcessorFn, Agent as AgentTypeCtor, AgentConfiguration, AgentInputItem as OriginalAgentInputItem, AgentOptions, AssistantMessageItem as OriginalAssistantMessageItem, ComputerCallResultItem as OriginalComputerCallResultItem, ComputerUseCallItem as OriginalComputerUseCallItem, FunctionCallItem as OriginalFunctionCallItem, FunctionCallResultItem as OriginalFunctionCallResultItem, FunctionTool as FunctionToolTypeCtor, Handoff as HandoffTypeCtor, handoff as handoffFn, HostedToolCallItem as OriginalHostedToolCallItem, Model as ModelType, ModelProvider as ModelProviderType, NonStreamRunOptions, OpenAIChatCompletionsModel as OpenAIChatCompletionsModelTypeCtor, OpenAIResponsesModel as OpenAIResponsesModelTypeCtor, ReasoningItem as OriginalReasoningItem, ResponseStreamEvent, RunConfig, RunContext as RunContextTypeCtor, RunItem, Runner as RunnerTypeCtor, RunResult as RunResultTypeCtor, RunState as RunStateTypeCtor, RunToolApprovalItem as RunToolApprovalItemTypeCtor, setTraceProcessors as setTraceProcessorsFn, StreamedRunResult as RawStreamedRunResultTypeCtor, StreamRunOptions, SystemMessageItem as OriginalSystemMessageItem, Tool as OpenAIToolType, tool as toolTypeCtor, ToolExecuteArgument, UnknownItem as OriginalUnknownItem, Usage as UsageTypeCtor, UserMessageItem as OriginalUserMessageItem } from '@openai/agents';
 import type { AgentOutputType, getAllMcpTools as getAllMcpToolsFn, MaxTurnsExceededError as MaxTurnsExceededErrorTypeCtor, ModelBehaviorError as ModelBehaviorErrorTypeCtor } from '@openai/agents-core';
 import type { TextOutput, UnknownContext, UserContent } from '@openai/agents-core/types';
 import type { AcpTerminalStateItem, CreditUsageItem, FileHistorySnapshotItem, ModelUsageItem, ResendForkNoticeItem } from './custom-input-item-types';
@@ -43,6 +43,7 @@ export type FunctionTool = FunctionToolTypeCtor;
 export type Handoff<TContext = UnknownContext, TOutput extends AgentOutputType = TextOutput> = HandoffTypeCtor<TContext, TOutput>;
 export type OpenAITool = OpenAIToolType;
 export type OpenAIChatCompletionsModel = OpenAIChatCompletionsModelTypeCtor;
+export type OpenAIResponsesModel = OpenAIResponsesModelTypeCtor;
 export type Model = ModelType;
 export type RawModelProvider = ModelProviderType;
 export type MaxTurnsExceededError = MaxTurnsExceededErrorTypeCtor;
@@ -59,6 +60,7 @@ export declare let tool: typeof toolTypeCtor;
 export declare let Handoff: typeof HandoffTypeCtor;
 export declare let handoff: typeof handoffFn;
 export declare let OpenAIChatCompletionsModel: typeof OpenAIChatCompletionsModelTypeCtor;
+export declare let OpenAIResponsesModel: typeof OpenAIResponsesModelTypeCtor;
 export declare let getAllMcpTools: typeof getAllMcpToolsFn;
 export declare let MaxTurnsExceededError: typeof MaxTurnsExceededErrorTypeCtor;
 export declare let ModelBehaviorError: typeof ModelBehaviorErrorTypeCtor;

package/cli/dist-server/types/vendor/cbc-shared/node/index.d.ts

@@ -15,3 +15,4 @@ export * from './tools/tool-names';
 export * from './command/command-types';
 export * from './acp/terminal-types';
 export * from './model/model-errors';
+export * from './logging/structured-event-log';

package/cli/dist-server/types/vendor/cbc-shared/node/logging/structured-event-log.d.ts

@@ -0,0 +1,64 @@
+export type StructuredEventResult = 'success' | 'failed' | 'rejected' | 'cancelled';
+export type StructuredEventErrorType = 'cancelled' | 'timeout' | 'decode' | 'unknown';
+export type StructuredEventValue = string | number | boolean;
+export type StructuredEventFields = object;
+export interface StructuredEventLogger {
+    info(message: string): void;
+    warn?(message: string): void;
+    error(message: string): void;
+}
+export interface StructuredEventCorrelation {
+    request_id?: string;
+    trace_id?: string;
+    user_id?: string;
+    enterprise_id?: string;
+    conversation_id?: string;
+    conversation_request_id?: string;
+    conversation_message_id?: string;
+    task_id?: string;
+    runtime_id?: string;
+    session_id?: string;
+    call_id?: string;
+}
+export interface StructuredEventBaseRecord extends StructuredEventCorrelation {
+    event_id: string;
+    event_name: string;
+    service: string;
+    msg: string;
+    result: StructuredEventResult;
+    duration_ms: number;
+    stage?: string;
+    stop_reason?: 'cancelled';
+    error_code?: string;
+    error_type?: StructuredEventErrorType;
+    error_summary_omitted?: true;
+    raw?: string;
+}
+type ReservedEventField = keyof StructuredEventBaseRecord;
+type BusinessEventFields<T extends StructuredEventFields> = {
+    [K in keyof T]: T[K] extends StructuredEventValue | undefined ? T[K] : never;
+} & Partial<Record<ReservedEventField, never>>;
+export type StructuredEventRecord<T extends StructuredEventFields = Record<string, StructuredEventValue | undefined>> = StructuredEventBaseRecord & T;
+export interface StructuredEventInput<T extends StructuredEventFields> {
+    logger: StructuredEventLogger;
+    eventName: string;
+    service: string;
+    message: string;
+    result: StructuredEventResult;
+    startedAt: number;
+    stage?: string;
+    correlation?: StructuredEventCorrelation;
+    fields: BusinessEventFields<T>;
+    raw?: string | ((durationMs: number) => string);
+    rejectedLevel?: 'info' | 'warn';
+    error?: unknown;
+    errorCode?: string;
+    errorType?: StructuredEventErrorType;
+}
+/**
+ * Emits one JSON terminal event through the caller's existing logger.
+ * Business domains own typed adapters and fixed field names; this shared layer
+ * only owns the common event contract and safe error diagnosis.
+ */
+export declare function logStructuredEvent<T extends StructuredEventFields>(input: StructuredEventInput<T>): StructuredEventRecord<T> | undefined;
+export {};

package/cli/dist-server/types/vendor/cbc-shared/node/model/model-errors.d.ts

@@ -67,8 +67,18 @@ export declare class EmptyStreamError extends StreamTimeoutError {
     readonly data: Readonly<{
         category: "empty_model_response";
     }>;
+    /** reasoning-only 时已流出的思考，由 {@link withStreamedReasoning} 挂上；`declare` 保证未挂时不产生自有属性。 */
+    readonly streamedReasoning?: string;
     constructor(chunkCount: number, totalBytes: number, kind?: EmptyStreamKind, elapsedMs?: number, finishReason?: EmptyStreamFinishReason);
 }
+/**
+ * 把 reasoning-only 空流里已流出的思考挂到错误上，供会话层带着它续写。
+ *
+ * 模型层拦下 error 帧时不把这次响应交给 SDK（#63761）：与 error 帧同一分片的思考从未转发，
+ * 先转发的分片也会随流报错被清出队列，所以思考只能由模型层随错误交出。
+ * 不可枚举：错误会被打进日志、序列化后经 ACP / stream-json 上报，思考正文不能随之外泄。
+ */
+export declare function withStreamedReasoning(error: EmptyStreamError, reasoning: string): EmptyStreamError;
 /**
  * 认证缺失错误
  * 缺少有效的 API Key 时抛出

package/cli/dist-server/types/workspace/authentication/lib/common/authentication-http-interceptor.d.ts

@@ -11,11 +11,6 @@ export declare class AuthenticationHttpInterceptor implements ApplicationLifecyc
     protected readonly productManager: ProductManager;
     initialize(): void;
     private checkToLogout;
-    /**
-     * 从 request url 抽出 path 部分。绝对 URL 用 `new URL().pathname`，相对路径直接
-     * 以 `?` 之前的部分作为 path；解析失败返回 undefined。逻辑与 isLogoutWhitelistedPath
-     * 保持一致。
-     */
     private extractPath;
     /**
      * 【issue-91861】业务 API 401 refresh 兜底。
@@ -29,16 +24,7 @@ export declare class AuthenticationHttpInterceptor implements ApplicationLifecyc
      *   - refresh 失败 → 同样进入 30s 冷却，避免业务 API 401 把 refresh 打成连发
      */
     private tryRefreshOnBusinessApi401;
-    /**
-     * 判断当前请求 url 的 path 是否落在登出白名单内。
-     *
-     * 仅按 url path 维度匹配，不做子串匹配，避免 `/api/memory/profile-extra`
-     * 这类前缀近似的路径被错误命中。绝对 URL 用 `new URL().pathname`，相对路径
-     * 直接以 `?` 之前的部分作为 path；解析失败一律保守返回 false（仍走原 logout 流程）。
-     *
-     * 匹配两类白名单：`LOGOUT_BYPASS_PATHS`（字面量精确匹配）与
-     * `LOGOUT_BYPASS_PATH_PATTERNS`（含动态段的正则匹配）。源自 ADR-005 / issue-65830。
-     */
+    /** 登出 / 续期白名单，见 authentication-refresh-bypass（ADR-005 / issue-65830）。 */
     private isLogoutWhitelistedPath;
     /**
      * 判断请求目标是否匹配产品 endpoint。

package/cli/dist-server/types/workspace/authentication/lib/common/authentication-manager.d.ts

@@ -57,6 +57,9 @@ export declare class AuthenticationManagerImpl implements AuthenticationManager
     private lastRefreshAttemptAt;
     /** 用户主动切换账号优先于后台 refresh，避免 refresh 反向中断切换操作。 */
     private accountSwitchInFlight;
+    private readonly refreshRejectedListeners;
+    /** 续期被服务端拒绝时的 accessToken；用于冷却期内重放失效结论。 */
+    private rejectedAccessToken?;
     /** Prevent concurrent login requests — avoids opening multiple browser tabs */
     private loginInFlight;
     private static readonly MIN_REFRESH_DELAY_MS;
@@ -106,6 +109,16 @@ export declare class AuthenticationManagerImpl implements AuthenticationManager
     logout(options?: LogoutOptions): Promise<void>;
     refreshSession(): Promise<void>;
     waitForSessionRefresh(): Promise<void>;
+    refreshSessionOnUnauthorized(url: string): void;
+    onRefreshRejected(listener: () => void): () => void;
+    /**
+     * 只认 provider 抛出的 `UnauthorizedError`（refresh 接口 401/403）；manager 自己因身份/authority
+     * 校验抛的同类错误不算「凭据被拒」。被刷新的 session 已不是当前 session（登出/切号）时不通知。
+     */
+    private refreshWithProvider;
+    /** 当前 session 是否就是续期已被服务端拒绝的那份（重登/切号换了 token 即自然失配）。 */
+    private isCurrentSessionRejected;
+    private notifyRefreshRejected;
     refreshSessionForAuthenticationFailure(): Promise<AuthSession>;
     private forceRefreshManagedSession;
     switchAccount(account: Account): Promise<void>;

package/cli/dist-server/types/workspace/authentication/lib/common/authentication-protocol.d.ts

@@ -260,6 +260,13 @@ export interface AuthenticationManager {
     waitForSessionRefresh(): Promise<void>;
     /** Force one authoritative, singleflight refresh after an auth failure. */
     refreshSessionForAuthenticationFailure(): Promise<AuthSession>;
+    /**
+     * 订阅「续期凭据被服务端拒绝」：provider 刷新时 401/403（`UnauthorizedError`），
+     * 即当前 session 已不可恢复。session 本身不清理，是否登出由订阅方决定（issue #140485）。
+     */
+    onRefreshRejected?(listener: () => void): () => void;
+    /** 当前 token 的业务 API 401：白名单路径忽略，其余触发后台续期（不等待、不抛错）。 */
+    refreshSessionOnUnauthorized?(url: string): void;
     switchAccount(account: Account): Promise<void>;
     waitAuthSession(): Promise<AuthSession>;
     setAuthenticationProvider(authenticationType: AuthenticationType): Promise<void>;

package/cli/dist-server/types/workspace/authentication/lib/common/authentication-refresh-bypass.d.ts

@@ -0,0 +1,9 @@
+/**
+ * 业务 API 401 不应触发登出 / 续期的路径白名单。零依赖，供 RestOperations 拦截器与
+ * daemon runtime-http 共用，保证两条 HTTP 出口对「哪些 401 不代表会话失效」口径一致（issue #140485）。
+ */
+export declare const TOKEN_REFRESH_PATH_PATTERN: RegExp;
+/** 从 request url 抽出 path：绝对 URL 取 pathname，相对路径取 `?` 之前部分；解析失败返回 undefined。 */
+export declare function extractAuthRequestPath(url?: string): string | undefined;
+/** url path 是否命中白名单（精确匹配，不做子串匹配）；解析失败保守返回 false。 */
+export declare function isLogoutBypassPath(url?: string): boolean;

package/cli/dist-server/types/workspace/authentication/lib/common/index.d.ts

@@ -11,3 +11,4 @@ export * from './wx-authentication-provider.js';
 export * from './product-env-service.js';
 export * from './account-utils.js';
 export * from './authentication-observation.js';
+export * from './authentication-refresh-bypass.js';

package/cli/dist-server/types/workspace/cbc-core/lib/node/agent/agent-protocol.d.ts

@@ -727,6 +727,18 @@ export interface ForkedAgentOptions {
 export interface OneTimeRunOptions {
     /** X-Agent-Purpose of the call; defaults to the agent's `AGENT_PURPOSE_MAP` entry, else its name. */
     purpose?: string;
+    /**
+     * 本次一次性调用使用的模型 id / name / alias。
+     * 解析成功时优先于会话当前模型和 agent 默认模型；解析不到时回落到原有解析。
+     * 用于切换模型后的压缩摘要：阈值按新模型，摘要请求仍走切换前的模型。
+     */
+    model?: string;
+    /**
+     * 本次调用的 modelSettings，整体替换 run-scoped agent 的 modelSettings，不写回共享 agent。
+     * 按会话变化的参数（如 maxTokens）必须走这里：共享 agent 实例进程内各会话共用，
+     * 先写共享实例再调用会被并发会话覆盖。
+     */
+    modelSettings?: Agent['modelSettings'];
 }
 export interface RunRequest {
     prompt?: string;

package/cli/dist-server/types/workspace/cbc-core/lib/node/agent/agent-service.d.ts

@@ -213,6 +213,17 @@ export declare class AgentServiceImpl implements AgentService {
      * scope instead of on the Session.
      */
     private streamOneTimeText;
+    /**
+     * 辅助一次性 run（调用方没传 context、由本方法新建 session）复用「当前会话」的信任锚点：
+     * 敏感审批锚 `sensitiveGrantSessionId` 与会话级隐私锁定位。
+     *
+     * Auxiliary one-time runs inherit the main session's sensitive approval anchor so a
+     * previously admitted input remains admitted throughout the trusted call chain.
+     *
+     * 前提：调用发生在该会话的 async 链内（`getCurrent()` 读 ALS，由 SessionMiddleware
+     * 每轮 setCurrent）。纯定时器驱动的调用取不到，此时与既有行为一致地不做任何事。
+     */
+    private inheritGrantsFromCurrentSession;
     runOneTime<TContext = Session>(agentName: string, input: string | AgentInputItem[], options?: NonStreamRunOptions<TContext> & OneTimeRunOptions): Promise<string>;
     runOneTime<TContext = Session>(agentName: string, input: string | AgentInputItem[], options?: StreamRunOptions<TContext> & OneTimeRunOptions): Promise<string>;
     runReviewerOneTime(request: ReviewerOneTimeRequest): Promise<ReviewerOneTimeResult>;

package/cli/dist-server/types/workspace/cbc-core/lib/node/agent/index.d.ts

@@ -24,6 +24,7 @@ export * from './interceptors/pre-message-compact-interceptor.js';
 export * from '../tools/prompt-cache-tool-metadata.js';
 export * from '../trace/turn-context.js';
 export * from '../trace/trace-id-utils.js';
+export * from '../trace/trace-turn-gate.js';
 export * from '../file-rollback/file-rollback-service-protocol.js';
 export * from '../file-rollback/file-rollback-operation-lock.js';
 export * from './reviewer-recovery.js';

package/cli/dist-server/types/workspace/cbc-core/lib/node/agent/runner-factory.d.ts

@@ -140,6 +140,12 @@ export declare class RunnerFactoryImpl implements RunnerFactory {
      * of an ephemeral `callModelInputFilter` addition. The visible history stays the bare user
      * message; it is admitted exactly once, by the stream consumer, in RunState order.
      */
+    /**
+     * 与普通 prompt 的图片拦截器同一实现（#140576）：只加工模型输入副本（压缩 / 按模型能力过滤图片），
+     * 历史项保留原图。宿主未提供实现（精简变体）时跳过；加工失败按原内容插入，不丢消息。
+     */
+    private prepareSteerModelInput;
+    private resolveSteerModelInputPreparer;
     private takeSteerContinuationInput;
     /**
      * Visible-history + ACP admission of one drained steer group.

package/cli/dist-server/types/workspace/cbc-core/lib/node/context/compact-strategy-base.d.ts

@@ -1,4 +1,4 @@
-import { AgentInputItem } from '../../../../cbc-shared/lib/node/index.js';
+import { type Agent, AgentInputItem } from '../../../../cbc-shared/lib/node/index.js';
 import { ProductManager } from '../../../../product/lib/common/index.js';
 import { Logger } from '../../../../telemetry/lib/common/index.js';
 import { AgentManager, AgentService } from '../agent/agent-protocol.js';
@@ -6,6 +6,7 @@ import { HistoryReloadReason, Session, SessionHookManager, SessionManager } from
 import { SessionRunStateMachine } from '../session/session-run-state-machine-protocol.js';
 import { CompactBroadcast } from './context-host-protocol.js';
 import { CompactStrategy, CompactStrategyContext, ContextCompactSummarizeOptions, PromptRenderer, SummaryScenario } from './context-protocol.js';
+import { type CompactSummaryModel } from './pre-switch-model.js';
 /**
  * 压缩策略共享基类，封装 session 状态管理、广播、continue 消息、abort 等基础设施方法。
  * 各具体策略通过继承获得这些能力，只需关注自己的压缩逻辑。
@@ -94,20 +95,31 @@ export declare abstract class CompactStrategyBase implements CompactStrategy {
      */
     protected sendContinueMessage(session: Session, preCompactAgentName?: string, overrideInput?: AgentInputItem[]): Promise<boolean>;
     /**
-     * 为 contextSummary agent 准备 modelSettings。
+     * 计算 contextSummary 本次调用的 modelSettings，由调用方经 `runOneTime({ modelSettings })` 传入。
+     * 不写共享的 contextSummary agent：serve/daemon 多会话并发压缩时，maxTokens 随会话的
+     * 切换前模型变化，写共享实例会被其他会话覆盖。
      *
      * contextSummary 经 `runOneTime` 调用，绕过 ModelConfigAgentRunInterceptor，
      * 因此不会自动获得主 agent 那套采样参数（temperature / maxTokens / reasoning / text 等）。
      *
      * 这里做两件事：
      *   1) 继承主 agent 当前的 modelSettings（temperature、maxTokens、reasoning、text、providerData 等），
-     *      使摘要请求与主对话使用一致的模型配置。contextSummary 始终继承主 agent 的模型，
+     *      使摘要请求与主对话使用一致的模型配置。contextSummary 默认继承主 agent 的模型，
      *      故继承到的 maxTokens 已是该模型经 ModelUtils.getMaxOutputTokens 处理后的值，无需重算。
-     *   2) 仅当继承后仍缺 maxTokens（模型未配 maxOutputTokens 且未设 CODEBUDDY_CODE_MAX_OUTPUT_TOKENS，
+     *      有切换前模型时，maxTokens 按那个模型重算（继承到的是新模型的输出上限）。
+     *   2) 仍缺 maxTokens（模型未配 maxOutputTokens 且未设 CODEBUDDY_CODE_MAX_OUTPUT_TOKENS，
      *      此时主 agent 自身也不写 maxTokens）时，补摘要兜底 24k，避免请求不带 `max_tokens`
      *      让上游网关回退到模型原生输出上限。
+     *
+     * 失败时返回 undefined，runOneTime 沿用 contextSummary agent 自身的 modelSettings。
+     */
+    protected buildSummaryModelSettings(summaryModel?: CompactSummaryModel): Promise<Agent['modelSettings'] | undefined>;
+    /**
+     * 切换后第一次压缩的摘要模型。从历史用量推导；没有、解析不到、或窗口不比当前大时
+     * 返回 undefined，调用方保持「用当前会话模型做摘要」。预算按该模型的物理窗口，
+     * 不用新模型的档位 override。
      */
-    protected applySummaryAgentModelSettings(): Promise<void>;
+    protected resolveSummaryModel(session: Session): Promise<CompactSummaryModel | undefined>;
     /**
      * Render summary prompt template based on scenario.
      */

package/cli/dist-server/types/workspace/cbc-core/lib/node/context/pre-switch-model.d.ts

@@ -0,0 +1,34 @@
+import type { AgentInputItem } from '../../../../cbc-shared/lib/node/index.js';
+import { type ModelContextWindowLike } from './context-protocol.js';
+/** 摘要请求用切换前模型执行，inputTokens 是它预留输出后的可用输入。 */
+export interface CompactSummaryModel {
+    id: string;
+    maxOutputTokens?: number;
+    inputTokens?: number;
+}
+/** 比较上下文窗口时需要的模型字段。不含会话档位 override。 */
+export interface PreSwitchModelLike {
+    id: string;
+    maxInputTokens?: number;
+    maxOutputTokens?: number;
+    contextWindow?: ModelContextWindowLike;
+}
+/**
+ * 从会话历史推导切换前真正执行过的模型。
+ *
+ * 只有它能解析出来，且有效窗口大于当前模型时才返回。窗口不更大时不当作切换：
+ * Auto 路由可能让 requestModelId 和会话模型不一致，换到更大窗口也不需要强制压缩。
+ * 预算用模型自己的窗口，不用会话上的档位 override。
+ */
+export declare function resolveEligiblePreSwitchModel(input: {
+    session: {
+        history?: AgentInputItem[];
+    };
+    currentModel: PreSwitchModelLike;
+    resolveModel: (modelId: string) => Promise<PreSwitchModelLike | undefined>;
+    logger?: {
+        warn: (message: string) => void;
+    };
+}): Promise<PreSwitchModelLike | undefined>;
+/** 按切换前模型的物理窗口计算摘要预算，不用当前模型的档位 override。 */
+export declare function buildPreSwitchSummaryModel(model: PreSwitchModelLike): CompactSummaryModel;