@tencent-ai/agent-harness 0.2.0-beta.6 → 0.2.0-beta.8

package/cli/dist-server/types/node/product/product-identity.d.ts

@@ -0,0 +1,57 @@
+/** 官方默认用户级配置目录短名（无外置配置时回落）。 */
+export declare const DEFAULT_USER_DIR_NAME = ".codebuddy";
+/** 官方默认项目级配置目录短名（无外置配置时回落）。 */
+export declare const DEFAULT_PROJECT_DIR_NAME = ".codebuddy";
+/** 官方默认指令文件 baseName（大写，`CODEBUDDY.md` 家族）。 */
+export declare const DEFAULT_INSTRUCTION_BASE_NAME: string;
+export interface ProductIdentity {
+    /** 短产品名，例如 XxxCode；缺省 CodeBuddy。 */
+    productName: string;
+    /** CLI 完整显示名，例如 XxxCode CLI；缺省 `${productName} Code`。 */
+    cliName: string;
+    /** 命令入口名（二进制名），例如 xxxcode；缺省 codebuddy。 */
+    binaryName: string;
+    /**
+     * 命令行 alias 列表；官方版为 `['cbc']`（CodeBuddy Code 缩写），
+     * 定制版默认空数组以避免品牌泄漏。schema 未来可扩展 `branding.aliases`
+     * 允许客户显式声明；当前仅在无外置配置时提供官方 alias。
+     */
+    aliases: string[];
+    /** 用户级目录名，例如 .xxxcode；缺省 .codebuddy。 */
+    userDirName: string;
+    /** 项目级目录名，例如 .xxxcode；缺省 .codebuddy。 */
+    projectDirName: string;
+    /**
+     * 指令文件 baseName（大写），例如 XXXCODE；缺省 CODEBUDDY。
+     * fallback 语义与 memory-protocol.resolveMemoryFileNames() 完全一致，
+     * 由 {@link resolveInstructionBaseName} 单一入口派生，杜绝分裂身份。
+     */
+    instructionBaseName: string;
+}
+/**
+ * 单一入口解析指令文件 baseName。
+ *
+ * 语义：`dataLayout.instructionFiles.baseName` 显式配置 > 官方默认 `CODEBUDDY`。
+ * **不**从 `branding.productName` 派生 —— productName schema 允许非 ASCII
+ * / 空格 / 中文，`toUpperCase()` 后无法通过 `INSTRUCTION_BASE_NAME_RE`
+ * 校验，作为文件名 baseName 直接非法。若客户想要 `XXXCODE.md` 家族，
+ * 必须显式配置 `dataLayout.instructionFiles.baseName`。
+ */
+export declare function resolveInstructionBaseName(): string;
+/** 解析运行时产品身份；无外置配置时返回官方默认。 */
+export declare function resolveProductIdentity(): ProductIdentity;
+/**
+ * 派生登录态文件所用的 authentication.id。
+ *
+ * 定制版（customization.json）与官方版是不同认证体系（不同网关 / 不同品牌），
+ * 登录态必须隔离。否则与官方版共用同一份登录态，后登录覆盖先登录，token 与
+ * 网关错配（SaaS token 打私有化网关 / 反之）导致 401。
+ *
+ * 隔离依据：binaryName 优先、endpoint 兜底，两者都落在 `-custom-` 命名空间内。
+ * - binaryName：客户自声明的产品标识，可读、稳定、文件安全（schema 已校验
+ *   `^[a-zA-Z0-9][a-zA-Z0-9._-]{0,63}$`）；
+ * - endpoint host：未配 binaryName 时兜底，hostname 中 `.` 替换为 `_`；
+ * - 两者皆无（官方版 / 空配置）原样返回，与官方版共用登录态。
+ * 确定性：同一配置每次派生一致，登录态不漂移。
+ */
+export declare function resolveCustomAuthId(baseAuthId: string): string;

package/cli/dist-server/types/node/product/product-protocol.d.ts

@@ -0,0 +1,7 @@
+export { ProductEnvService, ProductEnviroment } from '../../workspace/authentication/lib/common/index.js';
+export declare const ConfigWatchService: unique symbol;
+export declare const McpWatchService: unique symbol;
+export interface ConfigWatchService {
+}
+export interface McpWatchService {
+}

package/cli/dist-server/types/node/product/sdk-initialize-product-provider.d.ts

@@ -0,0 +1,17 @@
+import { Logger } from '@celljs/core';
+import { ProductConfiguration, ProductProvider, ProductProviderContext } from '../../workspace/product/lib/common/index.js';
+import { SdkInitializeStateService } from '../control-signal/control-signal-protocol';
+/**
+ * 把 SDK initialize control_request 传入的 system prompt / agents 配置注入到产品配置中。
+ * 行为与 CliOptionsProductProvider 处理 --system-prompt / --agents 一致。
+ *
+ * 与 CliOptionsProductProvider 同优先级（OPTIONS）且 volatile —— 每次调用独立，不缓存。
+ */
+export declare class SdkInitializeProductProvider implements ProductProvider {
+    scope: 'runtime';
+    priority: number;
+    volatile: boolean;
+    protected readonly logger: Logger;
+    protected readonly sdkInitializeState: SdkInitializeStateService;
+    provide(ctx: ProductProviderContext): Promise<ProductConfiguration>;
+}

package/cli/dist-server/types/node/product/settings-endpoint-product-provider.d.ts

@@ -0,0 +1,20 @@
+import { Logger } from '@celljs/core';
+import { ProductConfiguration, ProductProvider, ProductProviderContext } from '../../workspace/product/lib/common/index.js';
+import { CliSettingSourcesProvider, SettingsManager } from '../settings';
+export declare class SettingsEndpointProductProvider implements ProductProvider {
+    priority: number;
+    protected lastConfig: ProductConfiguration;
+    /** TTL cache to avoid redundant file reads during rapid sync cycles */
+    private cachedConfig;
+    private cachedAt;
+    private cachedEnv;
+    private static readonly CACHE_TTL_MS;
+    protected readonly settingsManager: SettingsManager;
+    protected readonly cliSettingSourcesProvider: CliSettingSourcesProvider;
+    protected readonly logger: Logger;
+    init(): void;
+    provide(ctx: ProductProviderContext): Promise<ProductConfiguration>;
+    private generateConfig;
+    /** 当前生效的 setting scopes，仅用于日志；取不到不影响主流程。 */
+    private resolveSettingScopes;
+}

package/cli/dist-server/types/node/product/skill-product-provider.d.ts

@@ -0,0 +1,62 @@
+import { Logger } from '@celljs/core';
+import { ProductConfiguration, ProductProvider, ProductProviderContext, Skill } from '../../workspace/product/lib/common/index.js';
+import { FileSystem } from '../../workspace/runtime/lib/common/index.js';
+export interface SkillScanError {
+    path: string;
+    message: string;
+}
+export interface SkillListDetailedResult {
+    skills: Skill[];
+    errors: SkillScanError[];
+}
+/**
+ * Skill product provider that reads SKILL.md files from .claude/skills directories
+ * and converts them to product skill format.
+ */
+export declare class SkillProductProvider implements ProductProvider {
+    scope: "runtime";
+    priority: number;
+    /** Filesystem and builtin seed skills must be rebuilt by runtime-only refreshes. */
+    volatile: boolean;
+    protected readonly fs?: FileSystem;
+    protected readonly logger: Logger;
+    private skillsCache?;
+    private skillErrorsCache?;
+    private skillsLoading?;
+    private cacheGeneration;
+    clearCache(): void;
+    listSkills(cwd: string, forceReload?: boolean): Promise<Skill[]>;
+    /**
+     * Reads one explicit workspace without changing the process cwd. The
+     * explicit cwd affects only the project root; USER and connector roots
+     * remain the canonical process-level locations.
+     */
+    listSkillsDetailed(cwd: string, forceReload?: boolean): Promise<SkillListDetailedResult>;
+    provide(ctx?: ProductProviderContext): Promise<ProductConfiguration>;
+    /**
+     * 对指定根目录做一次树扫描（会话档技能用）：server 层在会话 rootScope 内
+     * 调用，ambient dataFs 因此解析到会话 fs——进程档缓存不参与也不受污染。
+     */
+    scanTree(baseDir: string, source?: string): Promise<Skill[]>;
+    /** Scan the current filesystem scope without reading or replacing the process cache. */
+    scanWorkspace(cwd: string): Promise<Skill[]>;
+    private loadSkillsCached;
+    private loadSkillsDetailedCached;
+    private loadSkillsDetailed;
+    private loadSkills;
+    private loadBundledSkills;
+    private pathExists;
+    private cloneSkills;
+    private cloneDetailedResult;
+    /**
+     * Maximum recursion depth for scanning nested skill directories.
+     */
+    private static readonly MAX_SCAN_DEPTH;
+    private scanSkillsDirectory;
+    private getSkillLoadConcurrency;
+    private isDirectoryEntry;
+    private isFileEntry;
+    private resolveBundledResourceName;
+    private parseSkillFile;
+    private addScanError;
+}

package/cli/dist-server/types/node/references/index.d.ts

@@ -0,0 +1,2 @@
+export * from './reference-protocol';
+export * from './reference-service';

package/cli/dist-server/types/node/references/reference-protocol.d.ts

@@ -0,0 +1,20 @@
+export declare const ReferenceService: unique symbol;
+export interface ReferenceService {
+    process(content: string, currentFilePath?: string): Promise<string>;
+    /**
+     * 配置 path-only 模式。
+     *
+     * 启用后 {@link ReferenceService.process} 不会读取 `@path` 文件内容
+     * 注入上下文，保留原文路径，由模型按需通过 Read 工具读取。
+     *
+     * 该开关由最外层 transport（如 ACP initialize 握手）在拿到 client
+     * capability 后主动调用本方法写入；ReferenceService 自身不感知
+     * transport 类型，非 ACP 路径（TUI 等）不调用即默认关闭，自然
+     * 降级到旧的 `@path` 自动展开行为。
+     */
+    setFileReferencesPathOnly(enabled: boolean): void;
+    /**
+     * 当前是否处于 path-only 模式。
+     */
+    isFileReferencesPathOnly(): boolean;
+}

package/cli/dist-server/types/node/references/reference-service.d.ts

@@ -0,0 +1,42 @@
+import { Logger } from '@celljs/core';
+import { ReferenceService } from './reference-protocol';
+/**
+ * Service for processing file references in content
+ * Handles @[path] imports and replaces them with file contents
+ */
+export declare class ReferenceServiceImpl implements ReferenceService {
+    protected readonly logger: Logger;
+    private fileReferencesPathOnly;
+    setFileReferencesPathOnly(enabled: boolean): void;
+    isFileReferencesPathOnly(): boolean;
+    /**
+     * Processes file references in content and replaces them with file contents
+     * @param content The content containing file references
+     * @param currentFilePath Optional current file path for resolving relative references
+     * @returns Content with file references replaced
+     */
+    process(content: string, currentFilePath?: string): Promise<string>;
+    /**
+     * Gets directory file list as formatted content
+     */
+    private getDirectoryListing;
+    /**
+     * 对齐 Claude 的 file-read token cap：内联内容超过 MAX_IMPORT_FILE_TOKENS 时截断为前一段，
+     * 并追加一句提示，引导模型用 Read offset/limit 分页或 Grep 检索文件其余部分。未超上限时原样返回。
+     *
+     * 截断算法与提示语对齐 Claude Code 的 Read 工具实现，分两种模式：
+     * - 按行截断（正常多行文件）：估算可容纳的行数并逐步收缩，保留前 N 行。
+     * - 按字符截断（超长单行文件）：无法按行分页时（如 minified JS / 压缩 JSON），退化为按字符截断。
+     *
+     * 说明：CodeBuddy 无精确 tokenizer，token 数为 estimateTokensRough 粗估，故提示中标注 `~`；
+     * 且因内容是内联进 prompt（非 Read 工具返回），提示中补充文件绝对路径以便模型定位并分页读取。
+     * 这里必须用 resolvedPath（绝对路径）而非原始 importPath：嵌套引用时 importPath 是相对父文件
+     * 目录的路径，而模型执行 Read/Grep 的 cwd 是命令启动目录，用相对路径会定位到错误文件。
+     */
+    private truncateByTokenCap;
+    /**
+     * Recursively processes file imports with circular reference detection
+     * Uses ImportUtils for import extraction and path resolution
+     */
+    private processImports;
+}

package/cli/dist-server/types/node/remote-control/remote-control-protocol.d.ts

@@ -0,0 +1,288 @@
+/**
+ * Remote Control Module Protocol
+ *
+ * 定义远程控制模块的所有类型、接口和 DI Symbols
+ * 参考 genie-ide/src/vs/platform/wecom/common/wecom.ts
+ */
+import { Subject } from 'rxjs';
+export declare const RemoteControlService: unique symbol;
+export declare const RemoteControlApiClient: unique symbol;
+export declare const RemoteControlCentrifugoClient: unique symbol;
+export declare const RemoteControlMessageHandler: unique symbol;
+export declare const LongConnectionClientRegistry: unique symbol;
+export declare const ENV_KEY_REMOTE_CONTROL_API_KEY = "CODEBUDDY_REMOTE_CONTROL_API_KEY";
+export declare const ENV_KEY_REMOTE_CONTROL_BASE_URL = "CODEBUDDY_REMOTE_CONTROL_BASE_URL";
+/** Set to '1' or 'true' to auto-connect ALL channel types (wecom + wechat) on startup */
+export declare const ENV_KEY_CHANNEL_AUTO_CONNECT = "CODEBUDDY_CHANNEL_AUTO_CONNECT";
+/** Set to '1' or 'true' to auto-connect WeCom instances on startup */
+export declare const ENV_KEY_WECOM_AUTO_CONNECT = "CODEBUDDY_WECOM_AUTO_CONNECT";
+/** Set to '1' or 'true' to auto-connect WeChat instances on startup */
+export declare const ENV_KEY_WECHAT_AUTO_CONNECT = "CODEBUDDY_WECHAT_AUTO_CONNECT";
+export interface RemoteControlConfig {
+    /** 是否启用远程控制 */
+    enabled: boolean;
+    /** AgentOS 服务基础 URL */
+    baseUrl: string;
+    /** API Key（可选，不提供则使用 Bearer token） */
+    apiKey?: string;
+    /** LocalAgent 类型标识：cli, ide, workbuddy */
+    localAgentType: string;
+    /** 主机唯一标识 */
+    hostId: string;
+    /** 是否使用摘要模式 */
+    useSummary: boolean;
+    /** 是否复用 UI 当前 session（默认 true） */
+    reuseUISession?: boolean;
+}
+export type RemoteControlConnectionStatus = 'disconnected' | 'connecting' | 'connected' | 'error';
+export interface RemoteControlConnectionState {
+    status: RemoteControlConnectionStatus;
+    serverUrl?: string;
+    connectedAt?: number;
+    error?: string;
+}
+export interface RegisterWorkspaceRequest {
+    /** 用户 ID(可选,使用 Bearer token 时由服务端解析) */
+    userId?: string;
+    /** LocalAgent 类型:cli, ide, workbuddy */
+    localAgentType: string;
+    /** 主机 ID */
+    hostId: string;
+    /** 工作区 ID */
+    workspaceId: string;
+    /** 工作区名称(可选,用于增加可读性) */
+    workspaceName?: string;
+    /** IM 账号标识，如企微客服号 accountId（可选，用于多客服号场景下过滤 workspace 列表） */
+    accountId?: string;
+}
+export interface RegisterWorkspaceResponse {
+    /** Centrifugo WebSocket URL */
+    url: string;
+    /** 连接令牌 */
+    connectionToken: string;
+    /** 订阅令牌 */
+    subscriptionToken: string;
+    /** 订阅频道 */
+    channel: string;
+}
+export interface WorkspaceSubscription {
+    workspaceId: string;
+    workspaceName: string;
+    channel: string;
+    subscriptionToken: string;
+}
+export interface RemoteControlTaskMessage {
+    /** 请求唯一标识 */
+    requestId: string;
+    /** 任务提示词 */
+    prompt: string | Array<{
+        type: string;
+        text?: string;
+    }>;
+    /** 附加元数据 */
+    metadata?: Record<string, unknown>;
+}
+export interface RemoteControlResponse {
+    /** 响应类型 */
+    type: 'COPILOT_RESPONSE';
+    /** 消息 ID（对应 requestId） */
+    msgId: string;
+    /** 会话 ID */
+    chatId: string;
+    /** 是否成功 */
+    success: boolean;
+    /** 响应消息 */
+    message: string;
+    /** 元数据 */
+    metadata?: {
+        sessionId?: string;
+        state?: 'completed' | 'error';
+        error?: string;
+        fullOutputLength?: number;
+        /** 标记 session 是否被复用 */
+        uiSessionReused?: boolean;
+    };
+}
+export interface IRemoteControlService {
+    /** 状态变更事件 */
+    readonly onStatusChange: Subject<RemoteControlConnectionStatus>;
+    /** 消息接收事件 */
+    readonly onMessage: Subject<{
+        channel: string;
+        data: RemoteControlTaskMessage;
+    }>;
+    /** 启动服务（启动所有 shouldAutoConnect 的客户端） */
+    start(): Promise<void>;
+    /** 停止服务（停止所有客户端） */
+    stop(): Promise<void>;
+    /** 获取当前状态 */
+    getStatus(): RemoteControlConnectionStatus;
+    /** 按类型启动单个长连接客户端 */
+    startClient(clientType: string): Promise<void>;
+    /** 按类型停止单个长连接客户端 */
+    stopClient(clientType: string): Promise<void>;
+    /** 发送响应 */
+    sendResponse(response: RemoteControlResponse): Promise<void>;
+    /** 释放资源 */
+    dispose(): void;
+}
+export interface IRemoteControlApiClient {
+    /** 设置配置 */
+    setConfig(config: RemoteControlConfig): void;
+    /** 注册工作区 */
+    registerWorkspace(request: RegisterWorkspaceRequest): Promise<RegisterWorkspaceResponse>;
+    /** 发送响应 */
+    sendResponse(response: RemoteControlResponse): Promise<void>;
+}
+export interface IRemoteControlCentrifugoClient {
+    /** 当前状态 */
+    readonly status: RemoteControlConnectionStatus;
+    /** 消息事件 */
+    readonly onMessage: Subject<{
+        channel: string;
+        data: RemoteControlTaskMessage;
+    }>;
+    /** 状态变更事件 */
+    readonly onStatusChange: Subject<RemoteControlConnectionState>;
+    /** 连接到服务器 */
+    connect(url: string, connectionToken: string, getToken?: () => Promise<string>): Promise<void>;
+    /** 订阅频道 */
+    subscribeChannel(subscription: WorkspaceSubscription, getSubToken?: () => Promise<string>): Promise<void>;
+    /** 取消订阅频道 */
+    unsubscribeChannel(channel: string): void;
+    /** 断开连接 */
+    disconnect(): void;
+    /** 销毁 */
+    dispose(): void;
+}
+export interface IRemoteControlMessageHandler {
+    /** 处理消息（Centrifugo 原有流程，保留兼容） */
+    handleMessage(message: RemoteControlTaskMessage, workspaceId: string, config: RemoteControlConfig, hostId: string): Promise<RemoteControlResponse>;
+    /**
+     * 快速检测并执行本地命令（不涉及 session 复用，用于 Service 层快速判断）。
+     * 如果是本地命令，直接执行并返回结果；
+     * 如果不是本地命令，返回 undefined（继续走 agent 管道）。
+     */
+    tryExecuteLocalCommandQuickly(promptText: string): Promise<string | undefined>;
+    /**
+     * 公共执行方法：接收消息文本 → 获取/创建 session → 执行 agent → 等待回复。
+     * 供所有长连接客户端统一调用。
+     */
+    executeAndWaitForReply(promptText: string, conversationId: string, requestId: string): Promise<string>;
+    /** 取消任务 */
+    cancelTask(requestId: string): boolean;
+}
+/** QR code authentication status (for clients that use QR scan-to-login) */
+export interface QRAuthStatus {
+    type: 'fetching' | 'qr_ready' | 'scanned' | 'expired' | 'confirmed' | 'error';
+    message: string;
+    /** UTF-8 rendered QR code text for terminal display */
+    qrText?: string;
+    /** Original QR code URL (fallback for manual open) */
+    qrUrl?: string;
+}
+/**
+ * Long connection client interface.
+ * Different message channels (Centrifugo, wecom, etc.) implement this interface.
+ */
+export interface ILongConnectionClient {
+    /** Client type identifier (e.g. 'centrifugo', 'wecom') */
+    readonly clientType: string;
+    /** Instance identifier for multi-instance support (e.g. 'default', 'mybot') */
+    readonly instanceId: string;
+    /** Display name for UI (e.g. 'wecom:bot1'). Defaults to clientType:instanceId */
+    readonly displayName?: string;
+    /** Current connection status */
+    readonly status: RemoteControlConnectionStatus;
+    /** Message event (emitted when a user message is received, in unified LongConnectionMessage format) */
+    readonly onMessage: Subject<LongConnectionMessage>;
+    /** Status change event */
+    readonly onStatusChange: Subject<RemoteControlConnectionState>;
+    /** Whether this client should auto-connect when Service.start() is called */
+    readonly shouldAutoConnect: boolean;
+    /** Whether this client should be hidden from the /remote-control UI panel */
+    readonly hidden?: boolean;
+    /**
+     * WeCom: whether assistant text is streamed into the IM bubble.
+     * Omitted / true → stream; false → WeComReply-only (2.140.0).
+     */
+    readonly streaming?: boolean;
+    /** Persist the WeCom streaming preference for this instance. Returns false if persist failed. */
+    setStreaming?(enabled: boolean): boolean | void;
+    /**
+     * WeCom: whether Ask / permission / suggestion use template cards.
+     * Omitted / true → cards; false → text replies (2.140.0).
+     */
+    readonly cards?: boolean;
+    /** Persist the WeCom card-interaction preference. Returns false if persist failed. */
+    setCards?(enabled: boolean): boolean | void;
+    /**
+     * When true, messages are handled via the channel system (WechatChannelBridge etc.)
+     * and RemoteControlService skips its executeAndWaitForReply pipeline for this client.
+     */
+    readonly usesChannelBridge?: boolean;
+    /** QR auth state change event (for clients that use QR scan-to-login) */
+    readonly onQRAuthStateChange?: Subject<QRAuthStatus>;
+    /** Start connection */
+    connect(config: RemoteControlConfig): Promise<void>;
+    /** Disconnect */
+    disconnect(): void;
+    /** Dispose resources */
+    dispose(): void;
+    /**
+     * Send reply to message source.
+     * Each long connection type has a different reply mechanism:
+     *   - Centrifugo: delegates to RemoteControlApiClient HTTP callback
+     *   - wecom: sends aibot_respond_msg via WebSocket
+     */
+    sendReply(context: LongConnectionReplyContext, content: string): Promise<void>;
+    /**
+     * Send streaming response chunk (optional).
+     * Long connections that support streaming (e.g. wecom stream message type) can implement this.
+     */
+    sendStreamChunk?(context: LongConnectionReplyContext, chunk: string, streamId: string, finished: boolean): Promise<void>;
+    /**
+     * Send proactive/async reply (optional).
+     * Unlike sendReply (which uses the callback req_id and is subject to stream timeout),
+     * this uses a proactive push mechanism (e.g. wecom aibot_send_msg) that is not
+     * bound by stream timeout. Suitable for long-running Agent tasks.
+     */
+    sendAsyncReply?(context: LongConnectionReplyContext, content: string): Promise<void>;
+}
+/** Unified message format (from all long connections → Service) */
+export interface LongConnectionMessage {
+    /** Unique message ID */
+    requestId: string;
+    /** User message text */
+    prompt: string;
+    /** Reply context metadata (passed back to client when replying) */
+    replyContext: LongConnectionReplyContext;
+    /** Whether this is an event (not a user message) */
+    isEvent?: boolean;
+    /** Event type (if isEvent is true) */
+    eventType?: string;
+}
+/** Reply context (travels with message, returned to client for reply routing) */
+export interface LongConnectionReplyContext {
+    /** Client type */
+    clientType: string;
+    /** User/session identifier (for building chatId) */
+    userId: string;
+    /** Conversation ID */
+    conversationId: string;
+    /** Platform-specific data (e.g. wecom's req_id, chatid, chattype) */
+    platformData?: Record<string, unknown>;
+}
+/** Long connection client registry interface */
+export interface ILongConnectionClientRegistry {
+    /** Register a client (key = clientType:instanceId) */
+    register(client: ILongConnectionClient): void;
+    /** Unregister a client */
+    unregister(clientType: string, instanceId: string): void;
+    /** Get all registered clients */
+    getAll(): ILongConnectionClient[];
+    /** Get all clients of a given type */
+    getByType(clientType: string): ILongConnectionClient[];
+    /** Get a specific client by type and instanceId */
+    get(clientType: string, instanceId?: string): ILongConnectionClient | undefined;
+}

package/cli/dist-server/types/node/runtime/add-dir-middleware.d.ts

@@ -0,0 +1,13 @@
+import { Context, Middleware } from '@celljs/web/lib/node';
+import { ConsoleManager } from '../console';
+import { NavigationManager } from '../navigation';
+import { WorkspaceFolderManager } from '../runtime';
+import { SessionManager } from '../../vendor/cbc-core/node/index.js';
+export declare class AddDirMiddleWare implements Middleware {
+    protected readonly sessionManager: SessionManager;
+    protected readonly workspaceFolderManager: WorkspaceFolderManager;
+    protected readonly navigationManager: NavigationManager;
+    protected readonly consoleManager: ConsoleManager;
+    handle(ctx: Context, next: () => Promise<void>): Promise<void>;
+    readonly priority: number;
+}

package/cli/dist-server/types/node/runtime/cli-capabilities.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Host-advertised CLI capabilities.
+ *
+ * Hosts spawn agent-cli with CODEBUDDY_CLI_CAPABILITIES (comma-separated,
+ * dot-hierarchical bits). CLI reads the bits live; unknown future bits are
+ * ignored. This is a separate channel from CODEBUDDY_HOST_CAPABILITIES, which
+ * advertises host UI capabilities to builtin-plugin MCP children.
+ *
+ * WorkBuddy Desktop keeps its existing host gates. Other hosts opt in by
+ * declaring the bits they want — CLI does not branch on product names.
+ */
+export declare const CLI_CAPABILITIES_ENV = "CODEBUDDY_CLI_CAPABILITIES";
+export declare const CLI_CAPABILITY: {
+    /**
+     * FileSafety package: fileBackup + safe-delete, plus the macOS brokered
+     * runtime coverage those two features need for sandbox shell writes/deletes.
+     */
+    readonly FILE_SAFETY: "file.safety";
+};
+/**
+ * Live-read a capability bit from CODEBUDDY_CLI_CAPABILITIES.
+ */
+export declare function hasCliCapability(capability: string): boolean;
+/**
+ * FileSafety is on for WorkBuddy Desktop (unchanged host gate) or any host
+ * that declared the file.safety bit.
+ */
+export declare function isFileSafetyEnabled(): boolean;

package/cli/dist-server/types/node/runtime/external-uri-opener.d.ts

@@ -0,0 +1,8 @@
+import { Logger } from '@celljs/core';
+import { ExternalUriOpener } from '../../workspace/runtime/lib/common/index.js';
+import { Subject } from 'rxjs';
+export declare class CliExternalUriOpener implements ExternalUriOpener {
+    urlSubject: Subject<string>;
+    protected readonly logger: Logger;
+    open(uri: string): Promise<boolean>;
+}

package/cli/dist-server/types/node/runtime/file-local-storage.d.ts

@@ -0,0 +1,17 @@
+import { FileSystem, LocalStorage, LocalStorageChangeEvent } from '../../workspace/runtime/lib/common/index.js';
+export declare class MemoryLocalStorage implements LocalStorage {
+    protected readonly fileSystem: FileSystem;
+    private emitter;
+    changeEvent: import("@celljs/core").Event<LocalStorageChangeEvent>;
+    /**
+     * server 面缺省 no-op（CODEBUDDY_DISABLE_LOCAL_STORAGE=1）：消费者全是
+     * 交互产品面（问卷冷却、输入历史等），pod 上无消费者；写盘还会把多租户
+     * 状态混进进程全局文件。no-op 而非内存 Map——假共享不如无共享。
+     */
+    private get disabled();
+    set<T>(key: string, value: T): Promise<void>;
+    getSync<T>(key: string, defaultValue?: T): T | undefined;
+    get<T>(key: string, defaultValue?: T): Promise<T | undefined>;
+    remove(key: string): Promise<void>;
+    private resolveEntryPath;
+}

package/cli/dist-server/types/node/runtime/host-capability-provider.d.ts

@@ -0,0 +1,57 @@
+/**
+ * Env var the host uses to advertise its capabilities to builtin-plugin MCP
+ * stdio children (injected by McpServerManager alongside
+ * CODEBUDDY_SERVICE_PROXY_URL / CODEBUDDY_PLUGIN_ROOT). Comma-separated,
+ * dot-hierarchical capability bits — see HOST_CAPABILITY.
+ */
+export declare const HOST_CAPABILITIES_ENV = "CODEBUDDY_HOST_CAPABILITIES";
+/**
+ * Capability bits, dot-hierarchical (aligned with ACP/MCP
+ * `capabilities.elicitation.form`). Plugins read the var, split on `,`, and
+ * `includes()` the bit they care about; unknown future bits are ignored.
+ */
+export declare const HOST_CAPABILITY: {
+    /** Host can present an elicitation form — the channel weixinpay confirmation cards use. */
+    readonly ELICITATION_FORM: "elicitation.form";
+    /** Host intercepts `WeixinPay-Required:` and renders it as a confirmation card (vs. the plugin's own LLM flow). */
+    readonly WEIXINPAY_INTERCEPTION: "weixinpay.interception";
+};
+/**
+ * Process-level snapshot of host capabilities advertised to builtin-plugin MCP
+ * children via `CODEBUDDY_HOST_CAPABILITIES`.
+ *
+ * Populated from the NEGOTIATED client capabilities — not the process mode — at
+ * initialize, before the (lazily-spawned) plugin MCP reads its env. Each bit is
+ * declared independently by the client (no deriving one from another):
+ *   - ACP: `clientCapabilities.elicitation.form` (standard) → markElicitationForm;
+ *     `clientCapabilities._meta['codebuddy.ai'].weixinpay.interception` (custom,
+ *     nested 父.子 to mirror the dotted env bit / `elicitation.form`) →
+ *     markWeixinpayInterception. The desktop declares both only for non-Claw
+ *     sessions (`supportsElicitation = !isClawWorkspaceCwd`).
+ *   - stream-json SDK: `capabilities.elicitation.form` at `InitializeHandler`
+ *     (the SDK has no separate weixinpay bit yet, so it unlocks both).
+ * Initialize lands before first tool use, hence before the process-cached
+ * weixinpay MCP spawns.
+ *
+ * IMPORTANT — not a per-payment verdict, and does NOT reflect the remotely-toggled
+ * `WeixinPayInterception` kill-switch (that stays host-side in `PaymentInterceptor`).
+ * When no elicitation capability is negotiated (TUI / `--print` / Claw / any client
+ * that didn't declare `elicitation.form`), nothing is advertised → the weixinpay
+ * plugin reads no `weixinpay.interception` and self-disables (its own fail-safe:
+ * surface a "请到电脑端使用" redirect, never hard-fail).
+ */
+export declare class HostCapabilityProvider {
+    private readonly capabilities;
+    /** Advertise `elicitation.form` (peer declared it can render an elicitation form). Idempotent. */
+    markElicitationForm(): void;
+    /** Advertise `weixinpay.interception` (peer declared it supports the weixinpay confirm card). Idempotent. */
+    markWeixinpayInterception(): void;
+    /** Whether a capability bit has been advertised (exported for tests / internal checks). */
+    has(capability: string): boolean;
+    /**
+     * Comma-separated capability bits for `CODEBUDDY_HOST_CAPABILITIES`, or
+     * `undefined` when none have been advertised — callers then OMIT the env
+     * var entirely so the plugin reads "not present" and fail-opens.
+     */
+    toEnvValue(): string | undefined;
+}