dsh-deeppilot 0.9.11 → 0.9.14

package/lib/index.js

@@ -4,9 +4,9 @@ import { access, appendFile, chmod, mkdir, readFile, readdir, rename, rm, stat,
 import { dirname, join, resolve } from "node:path";
 import { WebSocketServer } from "ws";
 import { homedir, networkInterfaces } from "node:os";
+import { closeSync, constants, existsSync, fsyncSync, mkdirSync, openSync, readFileSync, renameSync, statSync, writeFileSync } from "node:fs";
 import z from "@deepseek-ai/schemastery";
 import { spawn } from "node:child_process";
-import { closeSync, constants, existsSync, fsyncSync, mkdirSync, openSync, readFileSync, renameSync, statSync, writeFileSync } from "node:fs";
 import { fileURLToPath } from "node:url";
 import { connect } from "node:http2";
 import { createServer } from "node:http";
@@ -16,7 +16,7 @@ import { Context } from "@deepseek-ai/cordis";
 import { TypertRemoteService } from "@deepseek-ai/dsh-typert-protocol";
 import { isIP } from "node:net";
 import { generate } from "selfsigned";
-//#region src/wire-errors.ts
+// src/wire-errors.ts
 /**
 * 错误词表（error vocabulary）的唯一属主。
 *
@@ -41,7 +41,9 @@ const ERROR_CODES = {
 	E_NOT_FOUND: "session or request not found",
 	E_BUSY: "session is busy",
 	E_UNSUPPORTED: "protocol version or capability unsupported",
-	E_INTERNAL: "internal error"
+	E_INTERNAL: "internal error",
+	E_STEER_UNAVAILABLE: "queued item can no longer steer the current turn",
+	E_TOO_LARGE: "response exceeds the client frame limit"
 };
 /** Bridge 未携带 code 的结果（内部守卫失败等）落到这一档。 */
 const WIRE_ERROR_FALLBACK = "E_INTERNAL";
@@ -89,6 +91,9 @@ const DOMAIN_TABLES = {
 		"schedule_not_found": "E_NOT_FOUND",
 		"delivery_cursor_not_found": "E_NOT_FOUND",
 		"schedule_conflict": "E_BUSY",
+		"schedule_execution_pending": "E_BUSY",
+		"schedule/target-archived": "E_NOT_FOUND",
+		"schedule/input-invalid": "E_PROTOCOL",
 		"invalid_prompt": "E_PROTOCOL",
 		"invalid_selector": "E_PROTOCOL",
 		"invalid_rule": "E_PROTOCOL",
@@ -116,6 +121,13 @@ const DOMAIN_TABLES = {
 		"session-not-found": "E_NOT_FOUND",
 		"agent-busy": "E_BUSY",
 		"session-conflict": "E_BUSY"
+	},
+	queue: {
+		"session/queue-item-not-found": "E_NOT_FOUND",
+		"session/steer-unavailable": "E_STEER_UNAVAILABLE",
+		"session/agent-busy": "E_BUSY",
+		"session/writer-held": "E_BUSY",
+		"gateway/bad-request": "E_PROTOCOL"
 	}
 };
 /**
@@ -201,9 +213,10 @@ function pendingResponseMessage(kind, reason) {
 		case "transport": return "host connection failed while answering " + kind;
 	}
 }
-//#endregion
-//#region src/connection-policy.ts
+// src/connection-policy.ts
 const AUTH_TIMEOUT_MS = 35e3;
+/** 附件 ack 在 `{mediaType,data}` 之外的信封字段（v/type/id/ts）余量。 */
+const ATTACHMENT_ENVELOPE_HEADROOM_BYTES = 1024;
 const IMAGE_MEDIA_TYPES = /* @__PURE__ */ new Set([
 	"image/png",
 	"image/jpeg",
@@ -249,6 +262,10 @@ function isEnvelope(value) {
 */
 const PUSH_SCOPE_BY_TYPE = {
 	"s2c.session.event": "sessions.read",
+	"s2c.session.delta": "sessions.read",
+	"s2c.plugin.update.status": "sessions.read",
+	"s2c.plugin.update.progress": "sessions.manage",
+	"s2c.session.queue": "sessions.read",
 	"s2c.skills.changed": "sessions.read",
 	"s2c.commands.changed": "sessions.read",
 	"s2c.models.changed": "sessions.read",
@@ -275,8 +292,20 @@ function sanitizeImageName(value) {
 function sanitizeDocumentField(value, maxChars) {
 	return value.replace(/[\u0000-\u001F\u007F]/g, " ").trim().slice(0, maxChars);
 }
-//#endregion
-//#region src/auth-rate-limit.ts
+/** 二进制模式下导出与附件的单块字节数。连接在发送缓冲降到 256 KiB 以下才发
+*  下一块，缓冲峰值约 512 KiB，远低于 4 MiB 的慢客户端断开线。 */
+const BINARY_CHUNK_BYTES = 262144;
+/** 把 envelope 头部与原始字节拼成一帧。 */
+function encodeBinaryFrame(header, body) {
+	const headerBytes = Buffer.from(JSON.stringify(header), "utf8");
+	const frame = Buffer.allocUnsafe(5 + headerBytes.length + body.length);
+	frame.writeUInt8(1, 0);
+	frame.writeUInt32BE(headerBytes.length, 1);
+	headerBytes.copy(frame, 5);
+	frame.set(body, 5 + headerBytes.length);
+	return frame;
+}
+// src/auth-rate-limit.ts
 const DEFAULT_AUTH_RATE_POLICY = {
 	windowMs: 6e4,
 	attemptsPerSource: 12,
@@ -393,8 +422,7 @@ var AuthRateLimiter = class {
 		}
 	}
 };
-//#endregion
-//#region src/diagnostics.ts
+// src/diagnostics.ts
 /**
 * 连接诊断事件模型（Diagnostics）——插件唯一的「失败可观测」面。
 *
@@ -720,8 +748,7 @@ function buildHealthPayload(input) {
 		}
 	};
 }
-//#endregion
-//#region src/device-auth.ts
+// src/device-auth.ts
 function getPairingCodeTtlMs() {
 	return Number(process.env.DEEPPILOT_PAIRING_TTL_MS) || 3e5;
 }
@@ -810,6 +837,30 @@ function normalizeDeviceScopes(value) {
 	const allowed = new Set(DEVICE_SCOPES);
 	return [...new Set(value.filter((scope) => typeof scope === "string" && allowed.has(scope)))];
 }
+/**
+* 0.8.3 之前的「全部权限」：当时还没有 `schedule.manage`。App 配对时一直申请
+* DeviceScope 的全部取值，设置页也没有收窄权限的入口，所以存量记录恰好等于这五项，
+* 只说明「配对时这项权限还不存在」，不是有意关闭。
+*/
+const LEGACY_FULL_SCOPES = [
+	"sessions.read",
+	"prompt.send",
+	"sessions.manage",
+	"interactions.respond",
+	"notifications.register"
+];
+/**
+* 存量设备权限升级：恰好等于旧版全部权限时补上之后新增的默认权限，返回新列表；
+* 其余情况（含任何非完整集合）返回 null，原样保留。只放宽「旧版全量」这一种形态，
+* 避免把将来可能出现的、有意收窄过的记录一并放开。
+*/
+function upgradeLegacyFullScopes(value) {
+	if (!Array.isArray(value)) return null;
+	const current = new Set(value);
+	if (current.size !== LEGACY_FULL_SCOPES.length) return null;
+	if (!LEGACY_FULL_SCOPES.every((scope) => current.has(scope))) return null;
+	return [...DEFAULT_DEVICE_SCOPES];
+}
 /** One active, single-use pairing grant per plugin runtime. */
 var PairingCodeManager = class {
 	active = null;
@@ -845,8 +896,7 @@ function createAuthChallenge(audience, now = Date.now()) {
 		expiresAt: now + AUTH_CHALLENGE_TTL_MS
 	};
 }
-//#endregion
-//#region src/wire-interaction.ts
+// src/wire-interaction.ts
 /**
 * 交互特性的 wire 行：回答待决的 approval 与 question。
 *
@@ -906,8 +956,7 @@ const interactionRows = [{
 		ctx.send("s2c.ack", {});
 	}
 }];
-//#endregion
-//#region src/wire-device.ts
+// src/wire-device.ts
 /**
 * 设备生命周期特性的 wire 行：自撤销（解绑）。
 *
@@ -945,8 +994,7 @@ const deviceRows = [{
 		ctx.close(4401, "device revoked");
 	}
 }];
-//#endregion
-//#region src/token.ts
+// src/token.ts
 /** Expand a leading ~ using the process home directory. */
 function expandHome(p) {
 	if (p === "~") return homedir();
@@ -1023,7 +1071,20 @@ var DeviceStore = class DeviceStore {
 		const store = new DeviceStore(filePath);
 		try {
 			const raw = JSON.parse(await readFile(expandHome(filePath), "utf8"));
-			for (const rec of raw.devices ?? []) if (typeof rec.deviceId === "string") store.devices.set(rec.deviceId, rec);
+			let upgraded = 0;
+			for (const rec of raw.devices ?? []) {
+				if (typeof rec.deviceId !== "string") continue;
+				const next = rec.revokedAt === void 0 ? upgradeLegacyFullScopes(rec.scopes) : null;
+				if (next !== null) {
+					rec.scopes = next;
+					upgraded += 1;
+				}
+				store.devices.set(rec.deviceId, rec);
+			}
+			if (upgraded > 0) {
+				console.log(formatLogLine("info", `device scopes upgraded for ${upgraded} legacy device(s): schedule.manage added`));
+				store.flush();
+			}
 		} catch (error) {
 			if (error?.code === "ENOENT") {} else console.log(formatLogLine("warn", "device registry unreadable, starting empty: " + String(error)));
 		}
@@ -1248,8 +1309,7 @@ var DeviceStore = class DeviceStore {
 		console.log(formatLogLine("warn", "device registry write failed" + (typeof code === "string" ? " code=" + code : "") + ": " + message.slice(0, 160)));
 	}
 };
-//#endregion
-//#region src/wire-push.ts
+// src/wire-push.ts
 /** Live Activity 需要的三个 scope：通知注册 + 会话读取 + 交互应答。 */
 const LIVE_ACTIVITY_SCOPES = [
 	"notifications.register",
@@ -1396,21 +1456,83 @@ const pushRows = [
 		}
 	}
 ];
-//#endregion
-//#region src/wire-schedule.ts
+// src/wire-schedule.ts
 /**
-* 定时任务特性的 wire 行：列表、历史、创建、修改、删除。
+* 定时任务特性的 wire 行：会话级（列表、历史、创建、修改、删除）与宿主级
+* （list/view/create/edit/run/limits）两套。
 *
 * scope 取 `schedule.manage` + `sessions.read`：PROTOCOL.md scope 映射表写明
 * 「`schedule.manage` 定时任务/提醒的列表、历史、创建、修改和删除；同时需要
 * `sessions.read` 才能读取任务内容」。迁移前这条组合一半住在 requiredScope、
 * 一半住在 connection.ts 调用点的一行补充规则里（334-336），现在是一行声明。
 *
-* 五个帧共享一个能力位 `schedules`；该位现在只要求 Schedule 服务存在
-* （见 host-capabilities.ts 的 G4 修正）。
+* 五个会话级帧共享能力位 `schedules`；该位现在只要求 Schedule 服务存在
+* （见 host-capabilities.ts 的 G4 修正）。六个宿主级帧共享 `schedulesHost`：
+* 该位由 adapter 判别位推导，false/缺失时新帧一律 E_UNSUPPORTED，客户端只能
+* 走会话级帧（PROTOCOL.md「Schedule 宿主级任务扩展」）。
 */
 /** PROTOCOL.md scope 映射表：schedule.manage 需搭配 sessions.read。 */
 const SCHEDULE_SCOPES = ["schedule.manage", "sessions.read"];
+/** 普通 JSON 对象（宿主级 timing/target/patch 都是嵌套对象）。 */
+function isObjectValue(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+/** `{time, time_zone}` 本地时间输入：取值合法性由 Host 完整校验。 */
+function isLocalTimeInput(value) {
+	return isObjectValue(value) && isText(value.time) && isText(value.time_zone);
+}
+function isWeekdayList(value) {
+	return Array.isArray(value) && value.length > 0 && value.every((day) => isInteger(day, 1, 7));
+}
+/**
+* 宿主级 timing 判别联合的形状检查。
+*
+* 只判结构与数量级（PROTOCOL.md 章节限额）；日期格式、时区与频率是否可达由
+* Host 的 Schedule 服务负责——重复一遍只会制造两套口径。
+*/
+function isHostTiming(value) {
+	if (!isObjectValue(value)) return false;
+	switch (value.kind) {
+		case "after": return isInteger(value.after_seconds, 1, Number.MAX_SAFE_INTEGER);
+		case "at": return isText(value.at) || isObjectValue(value.at) && isText(value.at.date) && isText(value.at.time) && isText(value.at.time_zone);
+		case "every": return isInteger(value.every_seconds, 60, Number.MAX_SAFE_INTEGER);
+		case "daily": return isLocalTimeInput(value.daily);
+		case "weekly": return isObjectValue(value.weekly) && isLocalTimeInput(value.weekly) && isWeekdayList(value.weekly.weekdays);
+		case "cron": return isObjectValue(value.cron) && isText(value.cron.expression) && isText(value.cron.time_zone);
+		case "rrule": return isText(value.rrule);
+		default: return false;
+	}
+}
+/** `{cwd?, agentPreset?}`：省略即 Host 默认。 */
+function isHostCreateSpec(value) {
+	return isObjectValue(value) && isOptionalField(value, "cwd", (v) => isText(v)) && isOptionalField(value, "agentPreset", (v) => isText(v));
+}
+/**
+* 创建/编辑请求里的 target。`session` 必须给 sessionId；`new_once`/`new` 的
+* 会话由 Host 预留或新建，`create` 省略即默认。客户端若把查看结果里的
+* `new_once.sessionId` 原样回传，也接受（未知/冗余字段不该让编辑失败）。
+*/
+function isHostTarget(value) {
+	if (!isObjectValue(value)) return false;
+	switch (value.kind) {
+		case "session": return isText(value.sessionId);
+		case "new_once": return isOptionalField(value, "sessionId", (v) => isText(v)) && isOptionalField(value, "create", isHostCreateSpec);
+		case "new": return isOptionalField(value, "create", isHostCreateSpec);
+		default: return false;
+	}
+}
+/** 编辑补丁：至少一个字段，且各字段形状合法。 */
+function isHostPatch(value) {
+	if (!isObjectValue(value)) return false;
+	if ([
+		"title",
+		"prompt",
+		"timing",
+		"target",
+		"active"
+	].filter((key) => value[key] !== void 0).length === 0) return false;
+	return isOptionalField(value, "title", (v) => isText(v, 120)) && isOptionalField(value, "prompt", (v) => isText(v, 262144)) && isOptionalField(value, "timing", isHostTiming) && isOptionalField(value, "target", isHostTarget) && isOptionalField(value, "active", (v) => typeof v === "boolean");
+}
 const scheduleRows = [
 	{
 		type: "c2s.schedule.list",
@@ -1442,14 +1564,16 @@ const scheduleRows = [
 		validate: (payload) => {
 			const checked = payloadObject(payload);
 			if (!checked.ok) return checked;
-			if (!isText(checked.value.sessionId) || !isText(checked.value.id) || !isInteger(checked.value.limit, 1, 100) || !isOptionalField(checked.value, "before", (v) => isText(v))) return reject$1("E_PROTOCOL", "invalid schedule history");
+			if (!isOptionalField(checked.value, "sessionId", (v) => isText(v)) || !isText(checked.value.id) || !isInteger(checked.value.limit, 1, 100) || !isOptionalField(checked.value, "before", (v) => isText(v))) return reject$1("E_PROTOCOL", "invalid schedule history");
 			return checked;
 		},
 		handle: async (ctx, payload) => {
-			const result = await ctx.bridge.scheduleHistory(payload.sessionId, payload.id, payload.limit, payload.before);
+			const sessionId = payload.sessionId;
+			if (sessionId === void 0 && ctx.bridge.capabilities.schedulesHost !== true) return ctx.fail("E_PROTOCOL", "invalid schedule history");
+			const result = await ctx.bridge.scheduleHistory(sessionId ?? "", payload.id, payload.limit, payload.before);
 			if (!result.ok) return ctx.fail(result.code, result.message);
 			ctx.send("s2c.schedule.history", {
-				sessionId: payload.sessionId,
+				...sessionId !== void 0 ? { sessionId } : {},
 				history: result.value
 			});
 		}
@@ -1541,10 +1665,159 @@ const scheduleRows = [
 				...result.replayed ? { replayed: true } : {}
 			});
 		}
+	},
+	{
+		type: "c2s.schedule.host.list",
+		stage: "authenticated",
+		scopes: SCHEDULE_SCOPES,
+		capability: "schedulesHost",
+		doc: "PROTOCOL.md c2s.schedule.host.list",
+		validate: (payload) => {
+			const checked = payloadObject(payload);
+			if (!checked.ok) return checked;
+			const p = checked.value;
+			if (!isOptionalField(p, "active", (v) => typeof v === "boolean") || !isOptionalField(p, "limit", (v) => isInteger(v, 1, 500)) || !isOptionalField(p, "offset", (v) => isInteger(v, 0, Number.MAX_SAFE_INTEGER))) return reject$1("E_PROTOCOL", "invalid schedule host list");
+			return checked;
+		},
+		handle: async (ctx, payload) => {
+			const result = await ctx.bridge.listHostSchedules({
+				...payload.active !== void 0 ? { active: payload.active } : {},
+				...payload.limit !== void 0 ? { limit: payload.limit } : {},
+				...payload.offset !== void 0 ? { offset: payload.offset } : {}
+			});
+			if (!result.ok) return ctx.fail(result.code, result.message);
+			ctx.send("s2c.schedule.host.snapshot", result.value);
+		}
+	},
+	{
+		type: "c2s.schedule.host.view",
+		stage: "authenticated",
+		scopes: SCHEDULE_SCOPES,
+		capability: "schedulesHost",
+		doc: "PROTOCOL.md c2s.schedule.host.view",
+		validate: (payload) => {
+			const checked = payloadObject(payload);
+			if (!checked.ok) return checked;
+			if (!isText(checked.value.id)) return reject$1("E_PROTOCOL", "invalid schedule id");
+			return checked;
+		},
+		handle: async (ctx, payload) => {
+			const result = await ctx.bridge.viewHostSchedule(payload.id);
+			if (!result.ok) return ctx.fail(result.code, result.message);
+			ctx.send("s2c.schedule.host.task", { task: result.value });
+		}
+	},
+	{
+		type: "c2s.schedule.host.create",
+		stage: "authenticated",
+		scopes: SCHEDULE_SCOPES,
+		capability: "schedulesHost",
+		doc: "PROTOCOL.md c2s.schedule.host.create",
+		validate: (payload) => {
+			const checked = payloadObject(payload);
+			if (!checked.ok) return checked;
+			const p = checked.value;
+			if (!validSendId(p.clientRequestId) || !isText(p.title, 120) || !isText(p.prompt, 262144) || !isHostTiming(p.timing) || !isOptionalField(p, "target", isHostTarget)) return reject$1("E_PROTOCOL", "invalid schedule host create fields");
+			return checked;
+		},
+		handle: async (ctx, payload) => {
+			const result = await ctx.bridge.createHostSchedule(ctx.deviceId, payload);
+			if (!result.ok) return ctx.fail(result.code, result.message);
+			ctx.send("s2c.schedule.updated", {
+				clientRequestId: payload.clientRequestId,
+				task: result.value,
+				...result.replayed ? { replayed: true } : {}
+			});
+		}
+	},
+	{
+		type: "c2s.schedule.host.edit",
+		stage: "authenticated",
+		scopes: SCHEDULE_SCOPES,
+		capability: "schedulesHost",
+		doc: "PROTOCOL.md c2s.schedule.host.edit",
+		validate: (payload) => {
+			const checked = payloadObject(payload);
+			if (!checked.ok) return checked;
+			const p = checked.value;
+			if (!validSendId(p.clientRequestId) || !isText(p.id) || !isOptionalField(p, "expectedUpdatedAt", (v) => v === null || isText(v))) return reject$1("E_PROTOCOL", "invalid schedule host edit fields");
+			if (p.action !== "update" && p.action !== "delete") return reject$1("E_PROTOCOL", "invalid schedule host edit action");
+			if (p.action === "update" && !isHostPatch(p.patch)) return reject$1("E_PROTOCOL", "invalid schedule host edit patch");
+			return checked;
+		},
+		handle: async (ctx, payload) => {
+			const result = await ctx.bridge.editHostSchedule(ctx.deviceId, payload);
+			if (!result.ok) return ctx.fail(result.code, result.message);
+			const value = result.value;
+			ctx.send("s2c.schedule.updated", {
+				clientRequestId: payload.clientRequestId,
+				..."deleted" in value ? { deleted: true } : { task: value.task },
+				...result.replayed ? { replayed: true } : {}
+			});
+		}
+	},
+	{
+		type: "c2s.schedule.host.run",
+		stage: "authenticated",
+		scopes: SCHEDULE_SCOPES,
+		capability: "schedulesHost",
+		doc: "PROTOCOL.md c2s.schedule.host.run",
+		validate: (payload) => {
+			const checked = payloadObject(payload);
+			if (!checked.ok) return checked;
+			if (!validSendId(checked.value.clientRequestId) || !isText(checked.value.id)) return reject$1("E_PROTOCOL", "invalid schedule host run fields");
+			return checked;
+		},
+		handle: async (ctx, payload) => {
+			const result = await ctx.bridge.runHostSchedule(ctx.deviceId, {
+				clientRequestId: payload.clientRequestId,
+				id: payload.id
+			});
+			if (!result.ok) return ctx.fail(result.code, result.message);
+			ctx.send("s2c.schedule.updated", {
+				clientRequestId: payload.clientRequestId,
+				task: result.value,
+				...result.replayed ? { replayed: true } : {}
+			});
+		}
+	},
+	{
+		type: "c2s.schedule.host.deleteEnded",
+		stage: "authenticated",
+		scopes: SCHEDULE_SCOPES,
+		capability: "schedulesHost",
+		doc: "PROTOCOL.md c2s.schedule.host.deleteEnded",
+		validate: (payload) => {
+			const checked = payloadObject(payload);
+			if (!checked.ok) return checked;
+			if (!validSendId(checked.value.clientRequestId)) return reject$1("E_PROTOCOL", "invalid schedule host delete ended fields");
+			return checked;
+		},
+		handle: async (ctx, payload) => {
+			const result = await ctx.bridge.deleteEndedHostSchedules(ctx.deviceId, { clientRequestId: payload.clientRequestId });
+			if (!result.ok) return ctx.fail(result.code, result.message);
+			ctx.send("s2c.schedule.updated", {
+				clientRequestId: payload.clientRequestId,
+				...result.value.deleted !== void 0 ? { deletedEnded: result.value.deleted } : {},
+				...result.replayed ? { replayed: true } : {}
+			});
+		}
+	},
+	{
+		type: "c2s.schedule.host.limits",
+		stage: "authenticated",
+		scopes: SCHEDULE_SCOPES,
+		capability: "schedulesHost",
+		doc: "PROTOCOL.md c2s.schedule.host.limits",
+		validate: (payload) => payloadObject(payload),
+		handle: async (ctx) => {
+			const result = await ctx.bridge.scheduleLimits();
+			if (!result.ok) return ctx.fail(result.code, result.message);
+			ctx.send("s2c.schedule.host.limits", result.value);
+		}
 	}
 ];
-//#endregion
-//#region src/document-payload.ts
+// src/document-payload.ts
 const PREFIX = "[DeepPilot document:";
 const SUFFIX = "]";
 /**
@@ -1581,8 +1854,7 @@ function projectedDocument(text) {
 		return;
 	}
 }
-//#endregion
-//#region src/host-event-projection.ts
+// src/host-event-projection.ts
 const MAX_MESSAGE_PROJECTION_BYTES = 262144;
 /** One durable host event sequence becomes exactly one phone message row.
 * Keep the last projection when a host history response repeats an event. */
@@ -1670,7 +1942,8 @@ function projectEvent(sessionId, event) {
 						name: String(data?.name ?? "tool"),
 						state: "running",
 						summary: summarizeArgs(data?.arguments),
-						...data?.callId ? { callId: String(data.callId) } : {}
+						...data?.callId ? { callId: String(data.callId) } : {},
+						...editField(data?.name, data?.arguments)
 					},
 					ts: tsOf(event)
 				}
@@ -1870,6 +2143,10 @@ function chunkText(data) {
 	const direct = data;
 	return typeof direct.text === "string" ? direct.text : "";
 }
+function editField(name, raw) {
+	const edit = toolEditOf(name, raw);
+	return edit ? { edit } : {};
+}
 function summarizeArgs(raw) {
 	if (typeof raw !== "string" || raw.length === 0) return "";
 	try {
@@ -1881,6 +2158,68 @@ function summarizeArgs(raw) {
 		return truncate(raw, 90);
 	}
 }
+/** 宿主的文件编辑工具名（DSH `dsh-tool-str-replace-editor`）。 */
+const EDITOR_TOOL_NAME = "str_replace_editor";
+/**
+* 把编辑类工具调用的原始参数归一化成 `ToolEditProjection`。
+*
+* 只认 `str_replace_editor` 的 `str_replace` / `create` / `insert`（`view` 不改文件），
+* 其他工具或无法解析的参数返回 undefined，工具行保持原样。与 iOS `ToolEditDiff.parse`
+* 的解析口径一致：`new_str` 缺失视为删除（空串）。
+*/
+function toolEditOf(name, raw) {
+	if (name !== EDITOR_TOOL_NAME || typeof raw !== "string" || raw.length === 0) return void 0;
+	let args;
+	try {
+		const parsed = JSON.parse(raw);
+		if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) return void 0;
+		args = parsed;
+	} catch {
+		return;
+	}
+	const path = args.path;
+	if (typeof path !== "string" || path.length === 0) return void 0;
+	let edit;
+	switch (args.command) {
+		case "str_replace":
+			if (typeof args.old_str !== "string") return void 0;
+			edit = {
+				path,
+				operation: "replace",
+				oldText: args.old_str,
+				newText: typeof args.new_str === "string" ? args.new_str : ""
+			};
+			break;
+		case "create":
+			if (typeof args.file_text !== "string") return void 0;
+			edit = {
+				path,
+				operation: "create",
+				newText: args.file_text
+			};
+			break;
+		case "insert":
+			if (typeof args.new_str !== "string") return void 0;
+			edit = {
+				path,
+				operation: "insert",
+				newText: args.new_str,
+				...Number.isSafeInteger(args.insert_line) ? { insertLine: args.insert_line } : {}
+			};
+			break;
+		default: return;
+	}
+	return [edit.oldText, edit.newText].some((text) => text !== void 0 && Buffer.byteLength(text, "utf8") > 16384) ? withoutEditBodies(edit) : edit;
+}
+/** 去掉改动正文，只留路径、操作与 truncated 标记（超限或整条消息超限时用）。 */
+function withoutEditBodies(edit) {
+	return {
+		path: edit.path,
+		operation: edit.operation,
+		...edit.insertLine !== void 0 ? { insertLine: edit.insertLine } : {},
+		truncated: true
+	};
+}
 function truncate(text, max) {
 	return text.length <= max ? text : text.slice(0, max - 1) + "…";
 }
@@ -1924,7 +2263,8 @@ function projectHistory(events) {
 					tool: {
 						name: String(data?.name ?? "tool"),
 						state: "running",
-						summary: summarizeArgs(data?.arguments)
+						summary: summarizeArgs(data?.arguments),
+						...editField(data?.name, data?.arguments)
 					}
 				};
 				messages.push(row);
@@ -1973,7 +2313,8 @@ function limitMessageProjection(message) {
 		...message.tool ? { tool: {
 			...message.tool,
 			name: truncateUtf8(message.tool.name, 4096),
-			summary: truncateUtf8(message.tool.summary, 65536)
+			summary: truncateUtf8(message.tool.summary, 65536),
+			...message.tool.edit ? { edit: withoutEditBodies(message.tool.edit) } : {}
 		} } : {},
 		...message.attachments ? { attachments: message.attachments.slice(0, 16).map((attachment) => ({
 			...attachment,
@@ -2117,8 +2458,7 @@ function historyWindow(source, options) {
 		hasMore: older.length > 0
 	};
 }
-//#endregion
-//#region src/wire-session.ts
+// src/wire-session.ts
 /**
 * 会话特性的 wire 行：列表/归档、打开与关闭、创建/分支/重命名/取消、历史与
 * 附件、模型目录与切换、prompt 投递。
@@ -2452,6 +2792,9 @@ const sessionRows = [
 			const invalid = requireSessionId(checked.value);
 			if (invalid) return invalid;
 			if (!isText(checked.value.attachmentId)) return reject$1("E_PROTOCOL", "invalid attachmentId");
+			const maxFrameBytes = checked.value.maxFrameBytes;
+			if (maxFrameBytes !== void 0 && (!Number.isSafeInteger(maxFrameBytes) || maxFrameBytes <= 0)) return reject$1("E_PROTOCOL", "invalid maxFrameBytes");
+			if (checked.value.binary !== void 0 && typeof checked.value.binary !== "boolean") return reject$1("E_PROTOCOL", "invalid binary");
 			return checked;
 		},
 		handle: async (ctx, payload) => {
@@ -2459,6 +2802,34 @@ const sessionRows = [
 			if (attachmentId.length === 0) return ctx.fail("E_PROTOCOL", "sessionId and attachmentId required");
 			const image = await ctx.bridge.attachmentData(payload.sessionId, attachmentId);
 			if (!image) return ctx.fail("E_NOT_FOUND", "attachment unavailable");
+			if (payload.binary === true && ctx.sendBinary) {
+				const bytes = Buffer.from(image.data, "base64");
+				if (bytes.length === 0) return ctx.fail("E_NOT_FOUND", "attachment unavailable");
+				if (bytes.length > 12582912) return ctx.fail("E_TOO_LARGE", `attachment ${bytes.length} bytes exceeds limit`);
+				let index = 0;
+				try {
+					for (let offset = 0; offset < bytes.length; offset += BINARY_CHUNK_BYTES) {
+						await ctx.waitForWritable?.();
+						ctx.sendBinary("s2c.session.attachment.chunk", { index: index++ }, bytes.subarray(offset, offset + BINARY_CHUNK_BYTES));
+					}
+				} catch {
+					return;
+				}
+				const ack = {
+					...image.mediaType !== void 0 ? { mediaType: image.mediaType } : {},
+					chunks: index,
+					bytes: bytes.length
+				};
+				return ctx.send("s2c.ack", ack);
+			}
+			const clientLimit = payload.maxFrameBytes ?? 1048576;
+			const frameBytes = image.data.length + (image.mediaType?.length ?? 0) + ATTACHMENT_ENVELOPE_HEADROOM_BYTES;
+			if (frameBytes > Math.min(clientLimit, 2097152)) return ctx.fail("E_TOO_LARGE", `attachment frame ${frameBytes} bytes exceeds limit`);
+			try {
+				await ctx.waitForWritable?.();
+			} catch {
+				return;
+			}
 			ctx.send("s2c.ack", image);
 		}
 	},
@@ -2560,6 +2931,7 @@ const sessionRows = [
 			if (invalid) return invalid;
 			const p = checked.value;
 			if (p.clientSendId !== void 0 && !validSendId(p.clientSendId)) return reject$1("E_PROTOCOL", "invalid clientSendId");
+			if (p.mode !== void 0 && p.mode !== "queue" && p.mode !== "steer") return reject$1("E_PROTOCOL", "invalid prompt mode");
 			if (!isOptionalField(p, "text", (v) => isText(v, 262144, false)) || !isOptionalField(p, "images", Array.isArray) || !isOptionalField(p, "documents", Array.isArray)) return reject$1("E_PROTOCOL", "invalid prompt fields");
 			for (const key of ["images", "documents"]) {
 				const items = p[key];
@@ -2607,6 +2979,7 @@ const sessionRows = [
 				text,
 				images,
 				documents,
+				...p.mode === "steer" ? { mode: "steer" } : {},
 				...p.clientSendId !== void 0 ? { clientSendId: p.clientSendId } : {}
 			});
 		},
@@ -2616,26 +2989,59 @@ const sessionRows = [
 			const images = payload.images;
 			const documents = payload.documents;
 			const clientSendId = payload.clientSendId;
+			const steer = payload.mode === "steer";
+			if (steer && ctx.bridge.capabilities.promptQueue !== true) return ctx.fail("E_UNSUPPORTED", "prompt queue not supported");
+			const mode = steer ? "steer" : "queue";
 			if (clientSendId !== void 0) {
 				const receipt = await ctx.bridge.promptDeliveries.dispatch(ctx.deviceId, clientSendId, {
 					sessionId,
 					content: {
 						text,
 						images,
-						documents
+						documents,
+						...steer ? { mode } : {}
 					}
-				}, () => ctx.bridge.sendPrompt(sessionId, text, images, documents));
+				}, () => ctx.bridge.sendPrompt(sessionId, text, images, documents, {
+					mode,
+					clientSendId
+				}));
 				ctx.send("s2c.ack", receipt);
 				return;
 			}
-			const userSeq = await ctx.bridge.sendPrompt(sessionId, text, images, documents);
+			const userSeq = await ctx.bridge.sendPrompt(sessionId, text, images, documents, { mode });
 			if (!userSeq.ok) return ctx.fail(userSeq.code, userSeq.message);
 			ctx.send("s2c.ack", { userSeq: userSeq.value });
 		}
+	},
+	{
+		type: "c2s.session.queue.update",
+		stage: "authenticated",
+		scopes: ["prompt.send"],
+		capability: "promptQueue",
+		doc: "PROTOCOL.md c2s.session.queue.update",
+		validate: (payload) => {
+			const checked = payloadObject(payload);
+			if (!checked.ok) return checked;
+			const invalid = requireSessionId(checked.value);
+			if (invalid) return invalid;
+			if (!isText(checked.value.itemId, 256)) return reject$1("E_PROTOCOL", "invalid itemId");
+			const action = checked.value.action;
+			if (action === "edit") return reject$1("E_UNSUPPORTED", "queue edit not supported");
+			if (action !== "remove" && action !== "steer") return reject$1("E_PROTOCOL", "invalid queue action");
+			return accept({
+				sessionId: checked.value.sessionId,
+				itemId: checked.value.itemId,
+				action
+			});
+		},
+		handle: async (ctx, payload) => {
+			const result = await ctx.bridge.updateQueue(payload.sessionId, payload.itemId, payload.action);
+			if (!result.ok) return ctx.fail(result.code, result.message);
+			ctx.send("s2c.ack", result.value);
+		}
 	}
 ];
-//#endregion
-//#region src/wire-command.ts
+// src/wire-command.ts
 function sessionPayload(value) {
 	const result = payloadObject(value);
 	return result.ok && !isText(result.value.sessionId) ? reject$1("E_PROTOCOL", "会话标识无效") : result;
@@ -2701,38 +3107,60 @@ const commandRows = [...[
 	stage: "authenticated",
 	scopes: ["sessions.read"],
 	capability: "commands",
+	conditionalCapabilities: ["sessionMarkdown"],
 	doc: "PROTOCOL.md c2s.session.export",
-	validate: sessionPayload,
+	validate: (value) => {
+		const result = sessionPayload(value);
+		if (!result.ok) return result;
+		if (result.value.format !== void 0 && result.value.format !== "zip" && result.value.format !== "markdown") return reject$1("E_PROTOCOL", "导出格式无效");
+		if (result.value.binary !== void 0 && typeof result.value.binary !== "boolean") return reject$1("E_PROTOCOL", "传输方式无效");
+		return result;
+	},
 	handle: async (ctx, payload) => {
+		const format = payload.format;
+		if (format === "markdown" && ctx.bridge.capabilities.sessionMarkdown !== true) return ctx.fail("E_UNSUPPORTED", "当前主机不支持导出对话正文");
 		const signal = AbortSignal.any([ctx.signal ?? new AbortController().signal, AbortSignal.timeout(6e5)]);
 		let reader;
 		const cancel = () => {
 			reader?.cancel().catch(() => {});
 		};
 		try {
-			reader = (await ctx.bridge.exportSession(payload.sessionId, signal)).body.getReader();
+			reader = (format === void 0 ? await ctx.bridge.exportSession(payload.sessionId, signal) : await ctx.bridge.exportSession(payload.sessionId, signal, format)).body.getReader();
 			signal.addEventListener("abort", cancel, { once: true });
+			const binary = payload.binary === true && ctx.sendBinary !== void 0;
 			let index = 0, bytes = 0;
+			const sendChunk = async (chunk) => {
+				bytes += chunk.length;
+				await ctx.waitForWritable?.();
+				if (binary) ctx.sendBinary("s2c.session.export.chunk", { index: index++ }, chunk);
+				else ctx.send("s2c.session.export.chunk", {
+					index: index++,
+					data: Buffer.from(chunk).toString("base64")
+				});
+			};
+			let carry;
 			while (true) {
 				signal.throwIfAborted();
 				const next = await reader.read();
 				if (next.done) break;
-				for (let offset = 0; offset < next.value.length; offset += 49152) {
-					const chunk = next.value.subarray(offset, offset + 49152);
-					bytes += chunk.length;
-					await ctx.waitForWritable?.();
-					ctx.send("s2c.session.export.chunk", {
-						index: index++,
-						data: Buffer.from(chunk).toString("base64")
-					});
+				if (!binary) {
+					for (let offset = 0; offset < next.value.length; offset += 49152) await sendChunk(next.value.subarray(offset, offset + 49152));
+					continue;
+				}
+				carry = carry ? Buffer.concat([carry, next.value]) : Buffer.from(next.value);
+				while (carry.length >= BINARY_CHUNK_BYTES) {
+					await sendChunk(carry.subarray(0, BINARY_CHUNK_BYTES));
+					carry = carry.subarray(BINARY_CHUNK_BYTES);
 				}
 			}
 			signal.throwIfAborted();
+			if (carry !== void 0 && carry.length > 0) await sendChunk(carry);
 			ctx.send("s2c.ack", {
 				sessionId: payload.sessionId,
-				fileName: "dsh-session-log.zip",
+				fileName: format === "markdown" ? "dsh-session.md" : "dsh-session-log.zip",
 				chunks: index,
-				bytes
+				bytes,
+				...format === void 0 ? {} : { mediaType: format === "markdown" ? "text/markdown; charset=utf-8" : "application/zip" }
 			});
 		} catch (error) {
 			const failure = hostFailureOf(error, "command/export-cancelled");
@@ -2749,64 +3177,626 @@ const commandRows = [...[
 		}
 	}
 }];
-/** 第一个缺失的 scope；消息与迁移前一致（`scope <name> required`）。 */
-function scopeRejection(row, scopes) {
-	for (const scope of row.scopes) if (!scopes.has(scope)) return {
-		code: "E_FORBIDDEN",
-		message: `scope ${scope} required`
-	};
-}
-/** 能力位关闭时拒绝。校验先于本检查，与迁移前的次序一致。 */
-function capabilityRejection(row, capabilities) {
-	if (row.capability === void 0) return void 0;
-	if (capabilities[row.capability] === true) return void 0;
-	return {
-		code: "E_UNSUPPORTED",
-		message: "capability unavailable on this host version"
-	};
-}
-function widgetPolicyOf(row) {
-	return row.widgetPolicy ?? "deny";
-}
-/** 校验一帧载荷；未登记 validate 的行原样通过。 */
-function validatePayload(row, payload) {
-	if (row.validate === void 0) return {
-		ok: true,
-		value: payload ?? {}
-	};
-	return row.validate(payload);
-}
-/** 执行一帧。检查（阶段/scope/能力/校验）由 connection 按序先行完成。 */
-async function dispatchFrame(row, ctx, payload) {
-	await row.handle(ctx, payload);
-}
-/**
-* 载荷必须是普通对象。此前这条判定住在 request-validation 里，对
-* `c2s.sessions.list` 等无参帧豁免、对 `c2s.sessions.archived` 却不通融
-* （同语义两种待遇，见 G2）；现在豁免由各行的 validate 自己声明。
-*/
-function payloadObject(value) {
-	if (value === void 0 || value === null) return {
-		ok: true,
-		value: {}
-	};
-	if (typeof value !== "object" || Array.isArray(value)) return {
-		ok: false,
-		code: "E_PROTOCOL",
-		message: "payload must be an object"
-	};
+// src/plugin-update.ts
+const PACKAGE = "dsh-deeppilot";
+const PHASES = [
+	"preparing",
+	"installing",
+	"verifying",
+	"restart-required",
+	"done",
+	"rolled-back",
+	"failed"
+];
+const CELLS = Symbol.for("deeppilot.plugin-update.cells.v1");
+const globals = globalThis;
+const cells = globals[CELLS] ??= /* @__PURE__ */ new Map();
+const ownerKey = (deviceId) => createHash("sha256").update(deviceId).digest("hex");
+const validVersion = (value) => typeof value === "string" && /^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?(?:\+[0-9A-Za-z.-]+)?$/.test(value) && value.length <= 128;
+const validUpdateRequestId = (value) => typeof value === "string" && /^[A-Za-z0-9._:-]{1,128}$/.test(value);
+const terminal = (phase) => [
+	"done",
+	"failed",
+	"rolled-back",
+	"restart-required"
+].includes(phase);
+const publicRecord = ({ ownerKey: _owner, restartVersion: _restartVersion, restartPhase: _restartPhase, restartBoot: _restartBoot, ...record }) => ({ ...record });
+var PluginUpdateError = class extends Error {
+	code;
+	constructor(code, message) {
+		super(message);
+		this.code = code;
+	}
+};
+/** 精确镜像 alpha2 公开 registryPlan，避免静态依赖让旧宿主无法加载插件；由真实函数对照测试守卫。 */
+function updateRegistryPlan(requested, configured) {
+	const own = configured.resolved === null ? null : normalizeUpdateRegistry(configured.resolved);
+	const fallbacks = configured.fallbackRegistries.map(normalizeUpdateRegistry);
+	const ownIsPublic = own !== null && (own === "https://registry.npmjs.org/" || fallbacks.includes(own));
+	const keyOf = (registry) => registry === null ? own : normalizeUpdateRegistry(registry);
+	const known = [];
+	const keys = [];
+	for (const registry of [configured.registry, ...configured.fallbackRegistries]) {
+		if (registry === null && !ownIsPublic) continue;
+		const key = keyOf(registry);
+		if (keys.includes(key)) continue;
+		known.push(registry === null ? null : normalizeUpdateRegistry(registry));
+		keys.push(key);
+	}
+	const first = requested === void 0 ? configured.registry : requested;
+	const firstKey = keyOf(first);
+	const normalizedFirst = first === null ? null : normalizeUpdateRegistry(first);
+	if ((first === null || firstKey === own) && !ownIsPublic) return [normalizedFirst];
+	if (!keys.includes(firstKey)) return [normalizedFirst];
+	return [normalizedFirst, ...known.filter((_registry, index) => keys[index] !== firstKey)];
+}
+function normalizeUpdateRegistry(registry) {
+	const parsed = new URL(registry);
+	if (parsed.protocol !== "http:" && parsed.protocol !== "https:") throw new Error("registry unavailable");
+	if (!parsed.pathname.endsWith("/")) parsed.pathname += "/";
+	return parsed.href;
+}
+function updateRegistrySources(requested, configured) {
+	return [...new Set(updateRegistryPlan(requested, configured).map((registry) => {
+		const resolved = registry === null ? configured.resolved : registry;
+		if (!resolved) throw new Error("registry unresolved");
+		return normalizeUpdateRegistry(resolved);
+	}))];
+}
+/** 只接受具有完整规范摘要的强 SRI；宽松 base64 解码不能把截断值或弱摘要当作安装凭据。 */
+function strongIntegrity(value) {
+	if (typeof value !== "string") return void 0;
+	const match = /^(sha256|sha384|sha512)-([A-Za-z0-9+/]+={0,2})$/.exec(value);
+	if (!match) return void 0;
+	const digest = Buffer.from(match[2], "base64");
+	const bytes = {
+		sha256: 32,
+		sha384: 48,
+		sha512: 64
+	}[match[1]];
+	return digest.length === bytes && digest.toString("base64") === match[2] ? value : void 0;
+}
+/** 精确版本事实由元数据读取；软件源地址、上游响应体及包管理器诊断不进入对外错误。 */
+async function readTargetManifestFacts(registry, version, fetcher) {
+	const base = new URL(registry);
+	if (!["http:", "https:"].includes(base.protocol) || base.username || base.password || base.search || base.hash || !validVersion(version)) throw new Error("registry unavailable");
+	base.pathname = base.pathname.replace(/\/?$/, "/") + encodeURIComponent(PACKAGE) + "/" + encodeURIComponent(version);
+	const response = await fetcher(base, {
+		signal: AbortSignal.timeout(1e4),
+		redirect: "error",
+		headers: { accept: "application/json" }
+	});
+	if (!response.ok || !response.body) throw new Error("manifest unavailable");
+	const reader = response.body.getReader();
+	const chunks = [];
+	let bytes = 0;
+	try {
+		while (true) {
+			const next = await reader.read();
+			if (next.done) break;
+			bytes += next.value.length;
+			if (bytes > 1048576) throw new Error("manifest too large");
+			chunks.push(next.value);
+		}
+	} finally {
+		await reader.cancel().catch(() => {});
+		reader.releaseLock();
+	}
+	const manifest = JSON.parse(Buffer.concat(chunks).toString("utf8"));
+	if (manifest.name !== PACKAGE || manifest.version !== version || !manifest.dsh?.bundle) throw new Error("manifest mismatch");
+	const protocol = manifest.deepPilot?.protocolVersion;
 	return {
-		ok: true,
-		value
+		protocolVersion: typeof protocol === "number" && Number.isSafeInteger(protocol) && protocol > 0 ? protocol : void 0,
+		integrity: strongIntegrity(manifest.dist?.integrity)
 	};
 }
-/** 字符串字段：类型正确、不超长、非空（可放宽）。 */
-function isText(value, max = 4096, nonempty = true) {
-	return typeof value === "string" && value.length <= max && (!nonempty || value.trim().length > 0);
+/** 检查界面只预览首个软件源的协议；实际安装必须通过全部可回退源的强校验。 */
+async function readTargetProtocol(registry, version, fetcher = fetch) {
+	return (await readTargetManifestFacts(registry, version, fetcher)).protocolVersion;
 }
-/** 可选字段：缺省合法，给出时必须满足 check。 */
-function isOptionalField(payload, key, check) {
-	return payload[key] === void 0 || check(payload[key]);
+var PluginUpdater = class {
+	options;
+	state;
+	path;
+	listVersions;
+	updateBundle;
+	listBundles;
+	registries;
+	constructor(options) {
+		this.options = options;
+		this.path = resolve(options.journalPath);
+		this.listVersions = options.manager.listVersions.bind(options.manager);
+		this.updateBundle = options.manager.updateBundle.bind(options.manager);
+		this.listBundles = options.manager.listBundles.bind(options.manager);
+		this.registries = options.manager.registries.bind(options.manager);
+		let state = cells.get(this.path);
+		if (!state) {
+			state = {
+				bootId: randomUUID(),
+				records: [],
+				listeners: /* @__PURE__ */ new Set(),
+				runningVersion: options.currentVersion,
+				healthy: true
+			};
+			if (existsSync(this.path)) try {
+				if (statSync(this.path).size > 262144) throw new Error("oversized journal");
+				const data = JSON.parse(readFileSync(this.path, "utf8"));
+				if (data.version !== 1 || !Array.isArray(data.records) || data.records.length > 128 || data.records.some((record) => !record || !validUpdateRequestId(record.clientRequestId) || !validVersion(record.fromVersion) || !validVersion(record.toVersion) || !PHASES.includes(record.phase) || !Number.isSafeInteger(record.startedAt) || record.startedAt < 0 || typeof record.message !== "string" || record.message.length > 1024 || !/^[a-f0-9]{64}$/.test(record.ownerKey) || record.restartVersion !== void 0 && !validVersion(record.restartVersion) || record.restartBoot !== void 0 && (typeof record.restartBoot !== "string" || record.restartBoot.length > 128) || record.restartPhase !== void 0 && record.restartPhase !== "done" && record.restartPhase !== "rolled-back") || new Set(data.records.map((record) => record.clientRequestId)).size !== data.records.length) throw new Error("invalid journal");
+				state.records = data.records;
+			} catch {
+				state.healthy = false;
+			}
+			cells.set(this.path, state);
+		}
+		this.state = state;
+		state.runningVersion = options.currentVersion;
+	}
+	save() {
+		mkdirSync(dirname(this.path), {
+			recursive: true,
+			mode: 448
+		});
+		const temp = this.path + "." + randomUUID() + ".tmp";
+		const fd = openSync(temp, "wx", 384);
+		try {
+			writeFileSync(fd, JSON.stringify({
+				version: 1,
+				records: this.state.records
+			}));
+			fsyncSync(fd);
+		} finally {
+			closeSync(fd);
+		}
+		renameSync(temp, this.path);
+		const directory = openSync(dirname(this.path), "r");
+		try {
+			fsyncSync(directory);
+		} catch (error) {
+			if (![
+				"EPERM",
+				"EISDIR",
+				"EINVAL"
+			].includes(String(error.code))) throw error;
+		} finally {
+			closeSync(directory);
+		}
+	}
+	transition(record, phase, message) {
+		const before = { ...record };
+		record.phase = phase;
+		record.message = message;
+		if (phase === "restart-required") record.restartBoot = this.state.bootId;
+		try {
+			this.save();
+		} catch (error) {
+			Object.assign(record, before);
+			record.restartBoot = before.restartBoot;
+			throw error;
+		}
+		for (const listener of this.state.listeners) try {
+			listener({
+				clientRequestId: record.clientRequestId,
+				phase,
+				message
+			}, record.ownerKey);
+		} catch {}
+	}
+	subscribe(deviceId, listener) {
+		const key = ownerKey(deviceId);
+		const wrapped = (event, owner) => {
+			if (owner === key) listener(event);
+		};
+		this.state.listeners.add(wrapped);
+		return () => {
+			this.state.listeners.delete(wrapped);
+		};
+	}
+	recover() {
+		if (this.state.active || !this.state.healthy) return;
+		for (const record of this.state.records) if (record.phase === "restart-required" && record.restartBoot !== this.state.bootId && this.options.currentVersion === (record.restartVersion ?? record.toVersion)) this.transition(record, record.restartPhase ?? "done", record.restartPhase === "rolled-back" ? "重启后已运行旧版本，宿主回滚完成" : "重启后已运行目标版本，更新完成");
+		else if (!terminal(record.phase)) {
+			if (this.options.currentVersion === record.toVersion) this.transition(record, "done", "已重新连接到目标版本，更新完成");
+			else this.transition(record, "failed", "上次更新已中断，结果无法确认；请检查当前版本，原请求不会自动重试");
+		}
+	}
+	async check(deviceId) {
+		let reason;
+		try {
+			this.recover();
+		} catch {
+			reason = "更新日志保存失败，暂时无法确认更新结果";
+		}
+		if (!this.state.healthy) reason = "更新日志无法读取，已停用安装以保护上次更新记录";
+		const finish = (status) => {
+			const journal = [...this.state.records].reverse().find((record) => record.ownerKey === ownerKey(deviceId));
+			return {
+				...status,
+				...journal ? { journal: publicRecord(journal) } : {}
+			};
+		};
+		const base = {
+			currentVersion: this.options.currentVersion,
+			protocolVersion: 2,
+			latestVersion: null,
+			updateAvailable: false,
+			compatible: false,
+			protocolCompatible: false,
+			versions: [],
+			checkedAt: Date.now()
+		};
+		try {
+			const listed = await this.listVersions(PACKAGE);
+			if (listed.status !== "listed") return finish({
+				...base,
+				reason: reason ?? "暂时无法读取可更新版本，请稍后重试"
+			});
+			const registry = listed.registry ?? (await this.registries()).resolved;
+			if (!registry) return finish({
+				...base,
+				reason: reason ?? "无法确定软件源，暂时不能核对目标版本协议"
+			});
+			const versions = await Promise.all(listed.versions.slice(0, 10).map(async (entry) => {
+				let protocolVersion;
+				try {
+					protocolVersion = await readTargetProtocol(registry, entry.version, this.options.fetch);
+				} catch {}
+				return {
+					version: entry.version,
+					compatible: entry.bundle && entry.incompatible === void 0,
+					...protocolVersion === void 0 ? {} : { protocolVersion }
+				};
+			}));
+			const latest = versions[0];
+			return finish({
+				...base,
+				latestVersion: latest?.version ?? null,
+				updateAvailable: versions.length > 0,
+				compatible: latest?.compatible ?? false,
+				protocolCompatible: latest?.protocolVersion === 2,
+				versions,
+				...reason ? { reason } : versions.some((entry) => entry.protocolVersion === void 0) ? { reason: "部分目标版本缺少可核验的协议声明，暂时不可安装" } : {}
+			});
+		} catch {
+			return finish({
+				...base,
+				reason: reason ?? "暂时无法检查更新，请确认网络后重试"
+			});
+		}
+	}
+	/** The apply frame is the phone's explicit confirmation. check() never mutates packages. */
+	async apply(deviceId, version, clientRequestId) {
+		if (!validVersion(version) || !validUpdateRequestId(clientRequestId)) throw new PluginUpdateError("E_PROTOCOL", "更新版本或请求标识无效");
+		if (!this.state.healthy) throw new PluginUpdateError("E_INTERNAL", "更新日志无法读取，暂时不能安装");
+		const previous = this.state.records.find((record) => record.clientRequestId === clientRequestId);
+		if (previous) {
+			if (previous.ownerKey !== ownerKey(deviceId)) throw new PluginUpdateError("E_FORBIDDEN", "更新请求不属于当前设备");
+			if (previous.toVersion !== version) throw new PluginUpdateError("E_PROTOCOL", "同一更新请求不能更换目标版本");
+			this.recover();
+			return publicRecord(previous);
+		}
+		const pending = this.state.pending;
+		if (pending?.record.clientRequestId === clientRequestId) {
+			if (pending.record.ownerKey !== ownerKey(deviceId)) throw new PluginUpdateError("E_FORBIDDEN", "更新请求不属于当前设备");
+			if (pending.record.toVersion !== version) throw new PluginUpdateError("E_PROTOCOL", "同一更新请求不能更换目标版本");
+			return pending.accepted;
+		}
+		if (this.state.active) throw new PluginUpdateError("E_BUSY", "已有插件更新正在进行，请稍后检查结果");
+		if (this.state.records.length >= 128) throw new PluginUpdateError("E_INTERNAL", "更新记录已满，请在电脑端检查后再更新");
+		const record = {
+			clientRequestId,
+			fromVersion: this.options.currentVersion,
+			toVersion: version,
+			phase: "preparing",
+			startedAt: Date.now(),
+			message: "目标校验已通过，准备开始安装",
+			ownerKey: ownerKey(deviceId)
+		};
+		let accept;
+		let refuse;
+		const accepted = new Promise((resolve_, reject_) => {
+			accept = resolve_;
+			refuse = reject_;
+		});
+		this.state.pending = {
+			record,
+			accepted
+		};
+		const operation = Promise.resolve().then(async () => {
+			let registry;
+			try {
+				registry = await this.prepare(record);
+				this.state.records.push(record);
+				try {
+					this.save();
+				} catch {
+					this.state.records.splice(this.state.records.indexOf(record), 1);
+					throw new PluginUpdateError("E_INTERNAL", "更新日志保存失败，尚未开始安装");
+				}
+			} catch (error) {
+				if (this.state.active === operation) this.state.active = void 0;
+				if (this.state.pending?.record === record) this.state.pending = void 0;
+				refuse(error instanceof PluginUpdateError ? error : new PluginUpdateError("E_INTERNAL", "无法核对目标版本，尚未开始安装"));
+				return;
+			}
+			if (this.state.pending?.record === record) this.state.pending = void 0;
+			accept(publicRecord(record));
+			await new Promise((resolve_) => setImmediate(resolve_));
+			try {
+				await this.run(record, registry);
+			} catch {
+				try {
+					this.transition(record, "failed", "更新结果无法确认，请检查当前版本；原请求不会自动重试");
+				} catch {}
+			}
+		}).finally(() => {
+			if (this.state.active === operation) this.state.active = void 0;
+		});
+		this.state.active = operation;
+		return accepted;
+	}
+	/** Useful to isolated tests; production never waits for this from disposal. */
+	async settled() {
+		await this.state.active;
+	}
+	/** 所有可执行目标校验在受理前完成；宿主安装及其回滚处理仍属于独立的后续任务。 */
+	async prepare(record) {
+		let listed;
+		try {
+			listed = await this.listVersions(PACKAGE);
+		} catch {
+			throw new PluginUpdateError("E_INTERNAL", "无法核对可更新版本，尚未开始安装");
+		}
+		if (listed.status !== "listed" || listed.installed !== record.fromVersion) throw new PluginUpdateError("E_PROTOCOL", "安装版本已变化或无法读取，请重新检查更新");
+		const target = listed.versions.find((entry) => entry.version === record.toVersion);
+		if (!target?.bundle || target.incompatible !== void 0) throw new PluginUpdateError("E_UNSUPPORTED", "目标版本不存在或不兼容当前宿主，尚未开始安装");
+		try {
+			const sources = updateRegistrySources(listed.registry, await this.registries());
+			let integrity;
+			for (const source of sources) {
+				const facts = await readTargetManifestFacts(source, record.toVersion, this.options.fetch ?? fetch);
+				if (facts.protocolVersion !== 2) throw new PluginUpdateError("E_UNSUPPORTED", "候选软件源的目标协议不兼容或缺少声明，尚未开始安装");
+				if (!facts.integrity) throw new PluginUpdateError("E_UNSUPPORTED", "候选软件源缺少有效的强完整性摘要，尚未开始安装");
+				if (integrity !== void 0 && facts.integrity !== integrity) throw new PluginUpdateError("E_UNSUPPORTED", "候选软件源的目标包完整性摘要不一致，尚未开始安装");
+				integrity = facts.integrity;
+			}
+			const current = updateRegistrySources(listed.registry, await this.registries());
+			if (JSON.stringify(current) !== JSON.stringify(sources)) throw new PluginUpdateError("E_BUSY", "软件源配置已变化，请重新检查更新");
+		} catch (error) {
+			if (error instanceof PluginUpdateError) throw error;
+			throw new PluginUpdateError("E_INTERNAL", "无法核验全部候选软件源的目标协议与完整性，尚未开始安装");
+		}
+		return listed.registry;
+	}
+	async run(record, registry) {
+		this.transition(record, "installing", "宿主正在安装目标版本，连接可能暂时中断");
+		const outcome = await this.updateBundle(PACKAGE, record.toVersion, {
+			registry,
+			requestId: record.clientRequestId
+		});
+		const result = outcome.result;
+		if (outcome.from !== record.fromVersion || outcome.to !== record.toVersion) return this.transition(record, "failed", "宿主返回的更新版本不一致，请检查当前安装");
+		if (outcome.restore) {
+			const restored = outcome.restore;
+			if (restored.application === "restart-required") {
+				record.restartVersion = record.fromVersion;
+				record.restartPhase = "rolled-back";
+				return this.transition(record, "restart-required", "目标安装失败，旧版已重新安装；请在电脑端重启 DSH 后确认恢复");
+			}
+			if (restored.application === "applied" && (restored.version === void 0 || restored.version === record.fromVersion)) {
+				if ((await this.listBundles()).find((bundle) => bundle.name === PACKAGE)?.version === record.fromVersion) return this.transition(record, "rolled-back", "目标安装失败，宿主已自动恢复旧版本");
+				return this.transition(record, "failed", "宿主已尝试回滚，但无法核对实际旧版本，请在电脑端检查插件");
+			}
+			return this.transition(record, "failed", "目标安装失败，宿主恢复旧版也未完成，请在电脑端检查插件");
+		}
+		if (outcome.step !== "install" || result.application === "failed" || result.application === "cancelled" || result.application === "overridden") return this.transition(record, "failed", installFailureMessage(result));
+		if (result.version !== void 0 && result.version !== record.toVersion) return this.transition(record, "failed", "实际安装版本与目标不一致，请在电脑端检查");
+		if (result.application === "restart-required") return this.transition(record, "restart-required", "目标版本已安装，宿主需要重启；请在电脑端重启 DSH 后重新连接");
+		this.transition(record, "verifying", "正在核对实际安装版本");
+		if ((await this.listBundles()).find((bundle) => bundle.name === PACKAGE)?.version !== record.toVersion) return this.transition(record, "failed", "无法确认实际安装版本，请在电脑端检查");
+		if (this.state.runningVersion !== record.toVersion) return this.transition(record, "restart-required", "目标版本已安装，当前插件尚未重新加载；请在电脑端重启 DSH 后重新连接");
+		this.transition(record, "done", "目标版本已加载，更新完成");
+	}
+};
+function installFailureMessage(result) {
+	if (result.error?.code === "incompatible-version" || result.error?.incompatible?.length || result.packageResult?.incompatible?.length) return "目标版本不兼容当前宿主，安装已拒绝（incompatible-version）";
+	if (result.pendingBuilds?.length || result.packageResult?.kind === "build-blocked") return "安装需要在电脑端明确批准构建脚本，更新未完成（build-blocked）";
+	const kind = result.packageResult?.kind;
+	const reasons = {
+		"pnpm-missing": "电脑端缺少包管理器，更新未完成",
+		timeout: "安装等待超时，请检查电脑端后重试",
+		"not-found": "软件源尚未提供目标包，更新未完成",
+		"no-matching-version": "软件源尚未提供目标版本，更新未完成",
+		network: "安装无法连接软件源，请恢复网络后重新检查",
+		"disk-full": "电脑端磁盘空间不足，更新未完成",
+		permission: "电脑端没有写入插件的权限，更新未完成",
+		integrity: "目标包完整性校验失败，更新未完成"
+	};
+	if (kind && reasons[kind]) return `${reasons[kind]}（${kind}）`;
+	if (result.application === "cancelled") return "宿主已取消目标版本安装，请检查当前版本";
+	return "宿主未完成目标版本安装，请检查当前版本";
+}
+function supportsPluginUpdate(value) {
+	if (!value || typeof value !== "object") return false;
+	return [
+		"listVersions",
+		"updateBundle",
+		"listBundles",
+		"registries"
+	].every((key) => typeof value[key] === "function");
+}
+// src/wire-plugin-update.ts
+function payloadObject$1(value) {
+	if (value === void 0 || value === null) return {
+		ok: true,
+		value: {}
+	};
+	if (typeof value !== "object" || Array.isArray(value)) return {
+		ok: false,
+		code: "E_PROTOCOL",
+		message: "更新请求必须是对象"
+	};
+	return {
+		ok: true,
+		value
+	};
+}
+const updaters = /* @__PURE__ */ new WeakMap();
+/** Bridge replacement and optional host service discovery can arrive in either order. */
+function setPluginUpdater(bridge, updater) {
+	if (updater) updaters.set(bridge, updater);
+	else updaters.delete(bridge);
+}
+const observers = /* @__PURE__ */ new WeakMap();
+function observe(ctx, updater, deviceId) {
+	if (!ctx.canReceive("sessions.manage")) return;
+	const signal = ctx.signal;
+	if (signal?.aborted || signal && observers.get(signal)?.has(updater)) return;
+	let stop = () => {};
+	const unsubscribe = updater.subscribe(deviceId, (event) => {
+		if (!ctx.canReceive("sessions.manage")) {
+			stop();
+			return;
+		}
+		ctx.send("s2c.plugin.update.progress", event);
+		if (!signal && finished(event.phase)) stop();
+	});
+	stop = () => {
+		unsubscribe();
+		signal?.removeEventListener("abort", stop);
+		if (signal) observers.get(signal)?.delete(updater);
+	};
+	if (signal) {
+		let connections = observers.get(signal);
+		if (!connections) {
+			connections = /* @__PURE__ */ new Set();
+			observers.set(signal, connections);
+		}
+		connections.add(updater);
+		signal.addEventListener("abort", stop, { once: true });
+	}
+}
+const finished = (phase) => phase === void 0 || [
+	"done",
+	"failed",
+	"rolled-back",
+	"restart-required"
+].includes(phase);
+const pluginUpdateRows = [{
+	type: "c2s.plugin.update.check",
+	stage: "authenticated",
+	scopes: ["sessions.read"],
+	widgetPolicy: "deny",
+	capability: "pluginUpdate",
+	doc: "PROTOCOL.md c2s.plugin.update.check",
+	validate: payloadObject$1,
+	handle: async (ctx) => {
+		const updater = updaters.get(ctx.bridge);
+		if (!updater) return ctx.fail("E_UNSUPPORTED", "当前宿主不支持插件自更新");
+		if (!ctx.deviceId) return ctx.fail("E_FORBIDDEN", "请先完成设备认证");
+		observe(ctx, updater, ctx.deviceId);
+		const status = await updater.check(ctx.deviceId);
+		ctx.send("s2c.plugin.update.status", status);
+	}
+}, {
+	type: "c2s.plugin.update.apply",
+	stage: "authenticated",
+	scopes: ["sessions.manage"],
+	widgetPolicy: "deny",
+	capability: "pluginUpdate",
+	doc: "PROTOCOL.md c2s.plugin.update.apply",
+	validate: (value) => {
+		const result = payloadObject$1(value);
+		if (!result.ok) return result;
+		const version = result.value.version;
+		if (typeof version !== "string" || version.length > 128 || version.trim().length === 0 || !validUpdateRequestId(result.value.clientRequestId)) return {
+			ok: false,
+			code: "E_PROTOCOL",
+			message: "更新版本或请求标识无效"
+		};
+		return result;
+	},
+	handle: async (ctx, payload) => {
+		const updater = updaters.get(ctx.bridge);
+		if (!updater) return ctx.fail("E_UNSUPPORTED", "当前宿主不支持插件自更新");
+		if (!ctx.deviceId) return ctx.fail("E_FORBIDDEN", "请先完成设备认证");
+		try {
+			const record = await updater.apply(ctx.deviceId, payload.version, payload.clientRequestId);
+			ctx.send("s2c.ack", {
+				clientRequestId: record.clientRequestId,
+				accepted: true
+			});
+			if (ctx.canReceive("sessions.manage")) {
+				ctx.send("s2c.plugin.update.progress", {
+					clientRequestId: record.clientRequestId,
+					phase: record.phase,
+					message: record.message
+				});
+				if (!finished(record.phase)) observe(ctx, updater, ctx.deviceId);
+			}
+		} catch (error) {
+			if (error instanceof PluginUpdateError) return ctx.fail(error.code, error.message);
+			ctx.fail("E_INTERNAL", "暂时无法启动插件更新，请检查当前版本");
+		}
+	}
+}];
+/** 第一个缺失的 scope；消息与迁移前一致（`scope <name> required`）。 */
+function scopeRejection(row, scopes) {
+	for (const scope of row.scopes) if (!scopes.has(scope)) return {
+		code: "E_FORBIDDEN",
+		message: `scope ${scope} required`
+	};
+}
+/** 能力位关闭时拒绝。校验先于本检查，与迁移前的次序一致。 */
+function capabilityRejection(row, capabilities) {
+	if (row.capability === void 0) return void 0;
+	if (capabilities[row.capability] === true) return void 0;
+	return {
+		code: "E_UNSUPPORTED",
+		message: "capability unavailable on this host version"
+	};
+}
+function widgetPolicyOf(row) {
+	return row.widgetPolicy ?? "deny";
+}
+/** 校验一帧载荷；未登记 validate 的行原样通过。 */
+function validatePayload(row, payload) {
+	if (row.validate === void 0) return {
+		ok: true,
+		value: payload ?? {}
+	};
+	return row.validate(payload);
+}
+/** 执行一帧。检查（阶段/scope/能力/校验）由 connection 按序先行完成。 */
+async function dispatchFrame(row, ctx, payload) {
+	await row.handle(ctx, payload);
+}
+/**
+* 载荷必须是普通对象。此前这条判定住在 request-validation 里，对
+* `c2s.sessions.list` 等无参帧豁免、对 `c2s.sessions.archived` 却不通融
+* （同语义两种待遇，见 G2）；现在豁免由各行的 validate 自己声明。
+*/
+function payloadObject(value) {
+	if (value === void 0 || value === null) return {
+		ok: true,
+		value: {}
+	};
+	if (typeof value !== "object" || Array.isArray(value)) return {
+		ok: false,
+		code: "E_PROTOCOL",
+		message: "payload must be an object"
+	};
+	return {
+		ok: true,
+		value
+	};
+}
+/** 字符串字段：类型正确、不超长、非空（可放宽）。 */
+function isText(value, max = 4096, nonempty = true) {
+	return typeof value === "string" && value.length <= max && (!nonempty || value.trim().length > 0);
+}
+/** 可选字段：缺省合法，给出时必须满足 check。 */
+function isOptionalField(payload, key, check) {
+	return payload[key] === void 0 || check(payload[key]);
 }
 function isInteger(value, min, max) {
 	return typeof value === "number" && Number.isSafeInteger(value) && value >= min && value <= max;
@@ -2828,6 +3818,7 @@ function accept(value) {
 const WIRE_FRAME_ROWS = [
 	...sessionRows,
 	...commandRows,
+	...pluginUpdateRows,
 	...scheduleRows,
 	...interactionRows,
 	...pushRows,
@@ -2837,8 +3828,7 @@ const ROWS_BY_TYPE = new Map(WIRE_FRAME_ROWS.map((row) => [row.type, row]));
 function registryRowFor(type) {
 	return ROWS_BY_TYPE.get(type);
 }
-//#endregion
-//#region src/connection-gate.ts
+// src/connection-gate.ts
 /**
 * 连接门（ConnectionGate）——「一个匿名 socket 被允许做什么」的唯一属主。
 *
@@ -3130,6 +4120,7 @@ var ConnectionGate = class {
 			debug: host.debug,
 			log: (message) => host.log(message),
 			send: (type, payload) => host.send(type, payload, env.id),
+			...host.sendBinary ? { sendBinary: (type, payload, body) => host.sendBinary(type, payload, body, env.id) } : {},
 			fail: (code, message) => host.fail(env.id, code, message),
 			close: (code, reason) => host.close(code, reason),
 			canReceive: (scope) => host.canReceive(scope),
@@ -3157,8 +4148,7 @@ var ConnectionGate = class {
 		};
 	}
 };
-//#endregion
-//#region src/connection.ts
+// src/connection.ts
 /**
 * One connected phone. Implements BridgeSink so the HostBridge can push
 * projected frames and replays.
@@ -3230,6 +4220,7 @@ var BridgeConnection = class {
 			},
 			log: (message) => deps.log(message),
 			send: (type, payload, id) => connection.send(type, payload, id),
+			sendBinary: (type, payload, body, id) => connection.send(type, payload, id, void 0, body),
 			fail: (id, code, message) => connection.fail(id, code, message),
 			close: (code, reason) => connection.close(code, reason),
 			canReceive: (scope) => connection.canReceive(scope),
@@ -3323,7 +4314,7 @@ var BridgeConnection = class {
 			...payload,
 			hostAudience: this.deps.audience
 		};
-		if (type === "s2c.session.event") {
+		if (type === "s2c.session.event" || type === "s2c.session.queue") {
 			const sessionId = payload?.sessionId;
 			if (typeof sessionId === "string") {
 				const buffered = this.openingSessionEvents.get(sessionId);
@@ -3399,7 +4390,8 @@ var BridgeConnection = class {
 			this.ws.terminate();
 		}
 	}
-	send(type, payload, id, seq) {
+	/** `body` 存在时按二进制帧发送（见 binary-frame.ts），头部仍是同一个 envelope。 */
+	send(type, payload, id, seq, body) {
 		const envelope = {
 			v: 2,
 			type,
@@ -3413,7 +4405,7 @@ var BridgeConnection = class {
 			this.close(1013, "client too slow");
 			return;
 		}
-		this.ws.send(JSON.stringify(envelope));
+		this.ws.send(body === void 0 ? JSON.stringify(envelope) : encodeBinaryFrame(envelope, body));
 	}
 	fail(id, code, message) {
 		this.send("s2c.error", {
@@ -3447,8 +4439,30 @@ var BridgeConnection = class {
 function normalizeFunnelConnectionLimit(value) {
 	return typeof value === "number" && Number.isInteger(value) && value >= 1 && value <= 16 ? value : 8;
 }
-//#endregion
-//#region src/remote-supervisor.ts
+// src/tailscale-version.ts
+/**
+* 内嵌 helper 上报的 tailscale.com 模块版本。
+*
+* 版本的唯一来源是 helper 启动事件（`helper/main.go` 读 Go 构建信息里的
+* `tailscale.com` 依赖版本），不是 go.mod、也不是插件常量：用户可能通过
+* `remote.helperPath` 换成自己编译的 helper，界面必须显示实际在跑的那一个。
+*
+* 两条边界都要守卫：
+* - 宿主侧 `parseHelperEvent` 把 helper 的 stdout 当成不可信输入，格式不对
+*   就丢弃，避免把任意文本渲染进设置页；
+* - 设置页侧 `reportSchema` 同样校验 Host RPC 返回值，旧 Host 不带该字段
+*   时保持 undefined（页面显示「未获取」），不当作错误。
+*
+* 接受 Go 模块版本形态：`v1.104.2`、`v1.104.2-pre.1`、
+* `v0.0.0-20260101000000-abcdef123456`。长度上限防止异常输入撑爆界面。
+*/
+const TAILSCALE_VERSION_PATTERN = /^v?\d+\.\d+\.\d+(?:[-+][0-9A-Za-z.-]{1,64})?$/;
+const MAX_TAILSCALE_VERSION_LENGTH = 80;
+/** 判断外部输入是否是合法的 Tailscale 模块版本字符串。 */
+function isTailscaleVersion(value) {
+	return typeof value === "string" && value.length <= MAX_TAILSCALE_VERSION_LENGTH && TAILSCALE_VERSION_PATTERN.test(value);
+}
+// src/remote-supervisor.ts
 const RESTART_DELAYS_MS = [
 	1e3,
 	2e3,
@@ -3636,7 +4650,8 @@ function parseHelperEvent(line) {
 			phase: value.phase,
 			...typeof value.publicURL === "string" ? { publicURL: value.publicURL } : {},
 			...typeof value.authURL === "string" ? { authURL: value.authURL } : {},
-			...typeof value.message === "string" ? { message: value.message.slice(0, 500) } : {}
+			...typeof value.message === "string" ? { message: value.message.slice(0, 500) } : {},
+			...isTailscaleVersion(value.tailscaleVersion) ? { tailscaleVersion: value.tailscaleVersion } : {}
 		};
 	} catch {
 		return null;
@@ -3876,8 +4891,7 @@ var RemoteSupervisor = class {
 		else if (next.phase === "error" || next.phase === "unavailable") this.options.log(`remote Funnel ${next.phase}: ${next.message ?? "unknown error"}`);
 	}
 };
-//#endregion
-//#region src/local-policy.ts
+// src/local-policy.ts
 const DEFAULT_LOCAL_PORT = 3098;
 const MIN_LOCAL_PORT = 1024;
 const MAX_LOCAL_PORT = 65535;
@@ -3895,8 +4909,7 @@ function localListenError(error, port) {
 	if (code === "EACCES") return `permission denied while opening local port ${port}`;
 	return error instanceof Error ? error.message : String(error);
 }
-//#endregion
-//#region src/config.ts
+// src/config.ts
 /** Operator-run relay used by distributed builds; overridable via config. */
 const DEFAULT_RELAY_URL = "https://pilot.hailab.dev";
 const Config = z.object({
@@ -3985,8 +4998,7 @@ function normalizeOptions(options) {
 	if (options && typeof options === "object") return plainConfig(options);
 	return plainConfig(Config(void 0) ?? {});
 }
-//#endregion
-//#region src/apns.ts
+// src/apns.ts
 /**
 * Minimal APNs provider client (HTTP/2) with zero npm dependencies.
 *
@@ -4223,8 +5235,7 @@ var ApnsClient = class {
 		return token.length <= 10 ? "…" : token.slice(0, 6) + "…" + token.slice(-4);
 	}
 };
-//#endregion
-//#region src/relay-url.ts
+// src/relay-url.ts
 /**
 * Normalize an operator-configured relay URL without a backtracking regular
 * expression. Scanning from the end keeps even pathological inputs linear.
@@ -4235,8 +5246,7 @@ function normalizeRelayBaseUrl(value) {
 	while (end > 0 && trimmed.charCodeAt(end - 1) === 47) end -= 1;
 	return end === trimmed.length ? trimmed : trimmed.slice(0, end);
 }
-//#endregion
-//#region src/relay-client.ts
+// src/relay-client.ts
 var RelayClient = class {
 	base;
 	token;
@@ -4329,8 +5339,7 @@ var RelayClient = class {
 		}
 	}
 };
-//#endregion
-//#region src/widget-push.ts
+// src/widget-push.ts
 /** Coalesce bursts and bound continuous updates, without starving the trailing
 * state. One scheduler per host, not per token or per streaming text frame. */
 var WidgetPushScheduler = class {
@@ -4367,8 +5376,7 @@ var WidgetPushScheduler = class {
 		this.timer = void 0;
 	}
 };
-//#endregion
-//#region src/live-activity.ts
+// src/live-activity.ts
 function liveActivityState(session) {
 	const total = Math.max(0, session?.todos?.total ?? session?.todoItems?.length ?? 0);
 	const done = Math.min(total, Math.max(0, session?.todos?.done ?? 0));
@@ -4440,8 +5448,7 @@ var LiveActivityPushManager = class {
 		this.scheduler.dispose();
 	}
 };
-//#endregion
-//#region src/push-policy.ts
+// src/push-policy.ts
 /** Prune only when the provider supplies an authoritative token-lifecycle verdict. */
 function shouldPrunePushToken(outcome, reason) {
 	return outcome === "invalid-token" && (reason === "Unregistered" || reason === "ExpiredToken");
@@ -4477,8 +5484,7 @@ function pushContent(notification, mode) {
 		body: bodies[notification.category] ?? "Open DeepPilot for an update."
 	};
 }
-//#endregion
-//#region src/relay-test.ts
+// src/relay-test.ts
 /**
 * Relay connectivity self-test used by the settings page "测试中继" button.
 *
@@ -4604,8 +5610,7 @@ async function runRelayProbe(options) {
 		steps
 	};
 }
-//#endregion
-//#region src/push-gateway.ts
+// src/push-gateway.ts
 /**
 * 推送网关（PushGateway）——离线推送的单一属主。
 *
@@ -5095,8 +6100,7 @@ var PushGateway = class {
 		await this.ensureRelayEnrolled(url);
 	}
 };
-//#endregion
-//#region src/phone-server.ts
+// src/phone-server.ts
 /**
 * A deliberately narrow transport listener. Both the LAN endpoint and the
 * loopback-only Funnel origin use this factory, so neither can accidentally
@@ -5175,8 +6179,7 @@ function closeServer(server) {
 	if (server === void 0 || !server.listening) return Promise.resolve();
 	return new Promise((resolve) => server.close(() => resolve()));
 }
-//#endregion
-//#region src/transport-reconciler.ts
+// src/transport-reconciler.ts
 var TransportReconciler = class {
 	spec;
 	config;
@@ -5404,8 +6407,7 @@ function createRemoteTransport(deps) {
 		statusOf: (supervisor) => supervisor?.status() ?? fallbackStatus()
 	}, deps.config, deps.log, fallbackStatus());
 }
-//#endregion
-//#region src/dispatch-journal.ts
+// src/dispatch-journal.ts
 /**
 * at-most-once dispatch journal：prompt 投递与非 prompt 变更的**同一个** module。
 *
@@ -5837,8 +6839,7 @@ function scheduleMutationCodec(persistValues) {
 		}))
 	};
 }
-//#endregion
-//#region src/notification-text.ts
+// src/notification-text.ts
 /**
 * 通知正文的纯文本投影。
 *
@@ -5881,8 +6882,7 @@ function decodePercentRuns(text) {
 		}
 	});
 }
-//#endregion
-//#region src/host-api.ts
+// src/host-api.ts
 /**
 * Subagent sessions are host-internal workers of a parent conversation.
 * They must never surface on the phone: not in the project/session list,
@@ -5905,8 +6905,12 @@ function unwrapStreamItem(item) {
 	} : nested;
 	return item;
 }
-//#endregion
-//#region src/host-capabilities.ts
+// src/host-capabilities.ts
+const pluginUpdateProbes = /* @__PURE__ */ new WeakMap();
+function setPluginUpdateProbe(proxy, probe) {
+	if (probe) pluginUpdateProbes.set(proxy, probe);
+	else pluginUpdateProbes.delete(proxy);
+}
 /** 每位一行：Host 上必须存在的依赖。缺失即该位为 false，相关帧回 E_UNSUPPORTED。 */
 const HOST_CAPABILITY_PROBES = {
 	models: (proxy) => typeof proxy.sessions.models === "function",
@@ -5916,7 +6920,12 @@ const HOST_CAPABILITY_PROBES = {
 	sessionFork: (proxy) => typeof proxy.sessions.fork === "function",
 	sessionRestore: (proxy) => typeof proxy.workspace?.unarchiveSession === "function",
 	projectSelection: (proxy) => typeof proxy.workspace?.list === "function" && typeof proxy.workspace?.create === "function",
-	schedules: (proxy) => proxy.schedule !== void 0
+	schedules: (proxy) => proxy.schedule !== void 0,
+	schedulesHost: (proxy) => proxy.schedule?.mode === "host",
+	promptQueue: (proxy) => typeof proxy.sessions.updateQueue === "function",
+	sessionMarkdown: (proxy) => proxy.commands?.markdownAvailable === true && typeof proxy.commands?.export === "function",
+	assistantStream: (proxy) => proxy.assistantStreamAvailable === true,
+	pluginUpdate: (proxy) => pluginUpdateProbes.get(proxy)?.() === true
 };
 /**
 * 按当前 apiProxy 与推送出口算出 welcome 能力位。`push` 位描述「当前离线推送
@@ -5926,6 +6935,7 @@ function capabilityBits(proxy, pushOutlet) {
 	return {
 		historyPaging: true,
 		replay: true,
+		binaryFrames: true,
 		approvals: true,
 		questions: true,
 		pendingSnapshot: true,
@@ -5939,66 +6949,327 @@ function capabilityBits(proxy, pushOutlet) {
 		sessionRestore: HOST_CAPABILITY_PROBES.sessionRestore(proxy),
 		projectSelection: HOST_CAPABILITY_PROBES.projectSelection(proxy),
 		schedules: HOST_CAPABILITY_PROBES.schedules(proxy),
+		schedulesHost: HOST_CAPABILITY_PROBES.schedulesHost(proxy),
+		promptQueue: HOST_CAPABILITY_PROBES.promptQueue(proxy),
+		sessionMarkdown: HOST_CAPABILITY_PROBES.sessionMarkdown(proxy),
+		assistantStream: HOST_CAPABILITY_PROBES.assistantStream(proxy),
+		pluginUpdate: HOST_CAPABILITY_PROBES.pluginUpdate(proxy),
 		push: pushOutlet?.isAvailable() === true,
 		widgetPush: true,
 		liveActivityPush: true,
 		deviceRevoke: true
 	};
 }
-//#endregion
-//#region src/host-bridge.ts
-const MAX_RING_DEFAULT = 2e3;
+// src/prompt-queue.ts
 /**
-* Process-wide bridge state: session mirror, pending approvals/questions,
-* and the per-device replay ring. Consumes the in-process mux/host streams
-* and fans projected pushes out to every registered sink.
+* 运行中排队与转向（PROTOCOL.md「运行中排队与转向扩展」）的纯函数部分。
+*
+* 职责：
+* - Host `requestId` 与 wire `clientSendId` 的互转：Bridge 发送带 clientSendId 的
+*   prompt 时以 `dp:` 前缀拼出确定的 requestId，Host 把它记为用户来源的 `rpcId`；
+*   快照时反向剥掉前缀，发起设备即可把待发送项与队列项对上。
+* - 把 DSH `inbox` 投影（`{ "next-turn": Message[], "next-step": Message[] }`，
+*   来源是持久化的 `agent/inbox/spliced` 事件）折叠成 `s2c.session.queue` 的条目。
+*
+* 不持有状态：缓存、去重与推送时机在 host-bridge。
 */
-let BRIDGE_SEQ = 0;
-var HostBridge = class {
-	apiProxy;
-	historyBufferMax;
-	log;
-	id = ++BRIDGE_SEQ;
-	summaries = /* @__PURE__ */ new Map();
-	activeTools = /* @__PURE__ */ new Map();
-	approvals = /* @__PURE__ */ new Map();
-	questions = /* @__PURE__ */ new Map();
-	archivedSessionIds = /* @__PURE__ */ new Set();
-	/** Mirrors archived rows from the last sessions.list so the phone can browse
-	* and restore them. Excluded from `summaries` and from the live broadcast. */
-	archivedSummaries = /* @__PURE__ */ new Map();
-	subagentSessionIds = /* @__PURE__ */ new Set();
-	sinks = /* @__PURE__ */ new Set();
-	ring = [];
-	cursor = 0;
-	userReceiptSeq = 0;
-	abort = new AbortController();
-	started = false;
-	disposed = false;
-	promptDeliveries;
-	scheduleMutations;
-	forkMutations;
-	constructor(apiProxy, historyBufferMax = MAX_RING_DEFAULT, deliveryJournalPath, scheduleJournalPath, forkJournalPath, log) {
-		this.apiProxy = apiProxy;
-		this.historyBufferMax = historyBufferMax;
-		this.log = log;
-		this.promptDeliveries = openDispatchJournal({
-			path: deliveryJournalPath,
-			codec: promptDeliveryCodec,
-			joinInFlight: true,
-			maxFileBytes: 8388608,
-			log: this.log
-		});
-		this.scheduleMutations = openDispatchJournal({
-			path: scheduleJournalPath,
-			codec: scheduleMutationCodec(false),
-			joinInFlight: false,
-			maxFileBytes: 4194304,
-			log: this.log
-		});
-		this.forkMutations = openDispatchJournal({
-			path: forkJournalPath,
-			codec: scheduleMutationCodec(true),
+const REQUEST_ID_PREFIX = "dp:";
+/** 快照正文上限（Unicode 码点）。只用于列表展示，完整正文仍在 Host 日志里。 */
+const MAX_QUEUE_TEXT_CODE_POINTS = 4096;
+/** clientSendId -> Host requestId。 */
+function promptRequestId(clientSendId) {
+	return REQUEST_ID_PREFIX + clientSendId;
+}
+/** Host 来源 rpcId -> clientSendId；不是本 Bridge 用 clientSendId 发出的返回 undefined。 */
+function clientSendIdOf(rpcId) {
+	if (typeof rpcId !== "string" || !rpcId.startsWith(REQUEST_ID_PREFIX)) return void 0;
+	const id = rpcId.slice(3);
+	return validSendId(id) ? id : void 0;
+}
+/**
+* inbox 投影 -> 队列条目，保持 Host 的先进先出顺序：先 `next-turn`（排队），
+* 再 `next-step`（转向）。值形状不对时返回 undefined，调用方据此不推送，
+* 而不是把「读不懂」当成「队列为空」——客户端会把消失的项当作已发出。
+*/
+function projectQueue(value) {
+	if (value === null || typeof value !== "object" || Array.isArray(value)) return void 0;
+	const inbox = value;
+	const nextTurn = inbox["next-turn"];
+	const nextStep = inbox["next-step"];
+	if (!Array.isArray(nextTurn) || !Array.isArray(nextStep)) return void 0;
+	const items = [];
+	for (const [list, placement] of [[nextTurn, "queued"], [nextStep, "steering"]]) for (const message of list) {
+		const item = queueItemOf(message, placement);
+		if (item) items.push(item);
+	}
+	return items;
+}
+function queueItemOf(message, placement) {
+	if (message === null || typeof message !== "object" || typeof message.id !== "string" || message.id.length === 0) return;
+	const texts = [];
+	let imageCount = 0;
+	let documentCount = 0;
+	for (const block of Array.isArray(message.content) ? message.content : []) {
+		if (block === null || typeof block !== "object") continue;
+		if (block.type === "image") imageCount += 1;
+		else if (block.type === "text" && typeof block.text === "string") {
+			if (projectedDocument(block.text) !== void 0) documentCount += 1;
+			else texts.push(block.text);
+		}
+	}
+	const codePoints = Array.from(texts.join("\n"));
+	const truncated = codePoints.length > MAX_QUEUE_TEXT_CODE_POINTS;
+	const source = message.source;
+	const clientSendId = source?.kind === "user" ? clientSendIdOf(source.rpcId) : void 0;
+	return {
+		itemId: message.id,
+		placement,
+		text: truncated ? codePoints.slice(0, MAX_QUEUE_TEXT_CODE_POINTS).join("") : codePoints.join(""),
+		...truncated ? { truncated: true } : {},
+		imageCount,
+		documentCount,
+		...clientSendId !== void 0 ? { clientSendId } : {}
+	};
+}
+/** Bound by serialized UTF-8 size, including escaping, without splitting a Unicode code point. */
+function bounded(payload) {
+	if (Buffer.byteLength(JSON.stringify(payload)) <= 262144) return payload;
+	const points = Array.from(payload.text);
+	let low = 0;
+	let high = points.length;
+	while (low < high) {
+		const mid = Math.ceil((low + high) / 2);
+		const candidate = {
+			...payload,
+			text: points.slice(0, mid).join(""),
+			truncated: true
+		};
+		if (Buffer.byteLength(JSON.stringify(candidate)) <= 262144) low = mid;
+		else high = mid - 1;
+	}
+	return {
+		...payload,
+		text: points.slice(0, low).join(""),
+		truncated: true
+	};
+}
+function isFrame(value) {
+	if (!value || typeof value !== "object") return false;
+	const frame = value;
+	if (typeof frame.attemptId !== "string" || !frame.attemptId || !Number.isSafeInteger(frame.revision)) return false;
+	if (frame.type === "start") return Number.isSafeInteger(frame.turn) && Number.isSafeInteger(frame.step);
+	if (frame.type !== "chunk" && frame.type !== "end") return false;
+	if (!Number.isSafeInteger(frame.index) || frame.index < 0) return false;
+	if (frame.type === "chunk") return Number.isSafeInteger(frame.time) && !!frame.chunk && typeof frame.chunk.type === "string";
+	return frame.outcome?.kind === "abandoned" || frame.outcome?.kind === "committed" && ["assistant/message", "assistant/attempt"].includes(frame.outcome.eventType) && Number.isSafeInteger(frame.outcome.seq);
+}
+/**
+* One process-local attempt per session. Only the small pending window retains text;
+* the durable session event remains the source of truth for the completed reply.
+*/
+var AssistantStream = class {
+	emit;
+	isViewed;
+	attempts = /* @__PURE__ */ new Map();
+	constructor(emit, isViewed) {
+		this.emit = emit;
+		this.isViewed = isViewed;
+	}
+	accept(sessionId, value) {
+		if (!sessionId || !isFrame(value)) return;
+		const frame = value;
+		let state = this.attempts.get(sessionId);
+		if (frame.type === "start") {
+			if (state?.attemptId === frame.attemptId && frame.revision <= state.revision) return;
+			this.abandon(sessionId);
+			state = {
+				attemptId: frame.attemptId,
+				streamId: randomUUID(),
+				revision: frame.revision,
+				nextIndex: 0,
+				turn: frame.turn,
+				step: frame.step,
+				pending: [],
+				pendingBytes: 0
+			};
+			this.attempts.set(sessionId, state);
+			this.emit({
+				sessionId,
+				streamId: state.streamId,
+				kind: "stream.start",
+				text: "",
+				ts: Date.now()
+			});
+			return;
+		}
+		if (!state || state.attemptId !== frame.attemptId || frame.revision <= state.revision || frame.index < state.nextIndex) return;
+		state.revision = frame.revision;
+		if (frame.type === "end") {
+			if (frame.outcome.kind === "committed") this.flush(sessionId);
+			this.clearPending(sessionId);
+			this.attempts.delete(sessionId);
+			this.emit({
+				sessionId,
+				streamId: state.streamId,
+				kind: "stream.end",
+				text: "",
+				ts: Date.now(),
+				outcome: frame.outcome
+			});
+			return;
+		}
+		state.nextIndex = frame.index + 1;
+		if (state.finalSeq !== void 0 || !this.isViewed(sessionId)) return;
+		const kind = frame.chunk.type === "text-delta" ? "message.delta" : frame.chunk.type === "reasoning-delta" ? "thinking.delta" : void 0;
+		if (!kind || typeof frame.chunk.text !== "string" || frame.chunk.text.length === 0) return;
+		const previous = state.pending.at(-1)?.kind === kind ? state.pending.at(-1) : void 0;
+		if (previous?.truncated) return;
+		const payload = bounded({
+			sessionId,
+			streamId: state.streamId,
+			kind,
+			text: (previous?.text ?? "") + frame.chunk.text,
+			ts: frame.time
+		});
+		const next = {
+			kind,
+			text: payload.text,
+			ts: payload.ts,
+			...payload.truncated ? { truncated: true } : {}
+		};
+		const oldBytes = previous ? Buffer.byteLength(JSON.stringify(previous)) : 0;
+		const newBytes = Buffer.byteLength(JSON.stringify(next));
+		if (state.pendingBytes - oldBytes + newBytes > 524288) this.flush(sessionId);
+		if (previous && state.pending.at(-1) === previous) {
+			state.pending[state.pending.length - 1] = next;
+			state.pendingBytes -= oldBytes;
+		} else if (previous) {
+			const tail = bounded({
+				sessionId,
+				streamId: state.streamId,
+				kind,
+				text: frame.chunk.text,
+				ts: frame.time
+			});
+			next.text = tail.text;
+			next.truncated = tail.truncated ? true : void 0;
+			state.pending.push(next);
+		} else state.pending.push(next);
+		state.pendingBytes += Buffer.byteLength(JSON.stringify(next));
+		state.timer ??= setTimeout(() => this.flush(sessionId), 50);
+		state.timer.unref?.();
+	}
+	/** The Host appends the durable event BEFORE publishing committed end. */
+	beforeEvent(sessionId, event) {
+		const state = this.attempts.get(sessionId);
+		if (!state || event.type !== "assistant/message" && event.type !== "assistant/attempt") return void 0;
+		const data = event.data;
+		if (data?.turn !== state.turn || data?.step !== state.step) return void 0;
+		this.flush(sessionId);
+		state.finalSeq = event.seq;
+		return state.streamId;
+	}
+	flush(sessionId) {
+		const state = this.attempts.get(sessionId);
+		if (!state) return;
+		if (state.timer) clearTimeout(state.timer);
+		state.timer = void 0;
+		const pending = state.pending;
+		state.pending = [];
+		state.pendingBytes = 0;
+		for (const text of pending) this.emit({
+			sessionId,
+			streamId: state.streamId,
+			...text
+		});
+	}
+	/** Closing the last viewer must not deliver its buffered text on a later open. */
+	clearPending(sessionId) {
+		const state = this.attempts.get(sessionId);
+		if (!state) return;
+		if (state.timer) clearTimeout(state.timer);
+		state.timer = void 0;
+		state.pending = [];
+		state.pendingBytes = 0;
+	}
+	abandon(sessionId) {
+		const state = this.attempts.get(sessionId);
+		if (!state) return;
+		this.clearPending(sessionId);
+		this.attempts.delete(sessionId);
+		this.emit({
+			sessionId,
+			streamId: state.streamId,
+			kind: "stream.end",
+			text: "",
+			ts: Date.now(),
+			outcome: { kind: "abandoned" }
+		});
+	}
+	dispose() {
+		for (const sessionId of this.attempts.keys()) this.clearPending(sessionId);
+		this.attempts.clear();
+	}
+};
+// src/host-bridge.ts
+const MAX_RING_DEFAULT = 2e3;
+/**
+* Process-wide bridge state: session mirror, pending approvals/questions,
+* and the per-device replay ring. Consumes the in-process mux/host streams
+* and fans projected pushes out to every registered sink.
+*/
+let BRIDGE_SEQ = 0;
+var HostBridge = class {
+	apiProxy;
+	historyBufferMax;
+	log;
+	id = ++BRIDGE_SEQ;
+	summaries = /* @__PURE__ */ new Map();
+	activeTools = /* @__PURE__ */ new Map();
+	approvals = /* @__PURE__ */ new Map();
+	questions = /* @__PURE__ */ new Map();
+	archivedSessionIds = /* @__PURE__ */ new Set();
+	/** Mirrors archived rows from the last sessions.list so the phone can browse
+	* and restore them. Excluded from `summaries` and from the live broadcast. */
+	archivedSummaries = /* @__PURE__ */ new Map();
+	subagentSessionIds = /* @__PURE__ */ new Set();
+	/**
+	* 每个会话最近一次已知的队列（inbox 投影的折叠结果）及其指纹。来源是实时
+	* 投影通知或打开会话时读到的基线；指纹用来丢掉内容没变的重复通知。
+	*/
+	queues = /* @__PURE__ */ new Map();
+	sinks = /* @__PURE__ */ new Set();
+	assistantStream = new AssistantStream((payload) => this.pushAssistantDelta(payload), (sessionId) => this.hasStreamViewer(sessionId));
+	ring = [];
+	cursor = 0;
+	userReceiptSeq = 0;
+	abort = new AbortController();
+	started = false;
+	disposed = false;
+	promptDeliveries;
+	scheduleMutations;
+	forkMutations;
+	constructor(apiProxy, historyBufferMax = MAX_RING_DEFAULT, deliveryJournalPath, scheduleJournalPath, forkJournalPath, log) {
+		this.apiProxy = apiProxy;
+		this.historyBufferMax = historyBufferMax;
+		this.log = log;
+		this.promptDeliveries = openDispatchJournal({
+			path: deliveryJournalPath,
+			codec: promptDeliveryCodec,
+			joinInFlight: true,
+			maxFileBytes: 8388608,
+			log: this.log
+		});
+		this.scheduleMutations = openDispatchJournal({
+			path: scheduleJournalPath,
+			codec: scheduleMutationCodec(false),
+			joinInFlight: false,
+			maxFileBytes: 4194304,
+			log: this.log
+		});
+		this.forkMutations = openDispatchJournal({
+			path: forkJournalPath,
+			codec: scheduleMutationCodec(true),
 			joinInFlight: false,
 			maxFileBytes: 4194304,
 			log: this.log
@@ -6032,6 +7303,7 @@ var HostBridge = class {
 	}
 	removeSink(sink) {
 		this.sinks.delete(sink);
+		this.dropSinkSessions(sink);
 	}
 	/** Whether the ring still holds everything after the cursor. */
 	canResumeFrom(cursor) {
@@ -6051,9 +7323,21 @@ var HostBridge = class {
 	}
 	markSinkClosed(sink, sessionId) {
 		this.sinkSessions.get(sink)?.delete(sessionId);
+		if (!this.hasStreamViewer(sessionId)) this.assistantStream.clearPending(sessionId);
 	}
 	dropSinkSessions(sink) {
+		const sessions = this.sinkSessions.get(sink);
 		this.sinkSessions.delete(sink);
+		for (const sessionId of sessions ?? []) if (!this.hasStreamViewer(sessionId)) this.assistantStream.clearPending(sessionId);
+	}
+	hasStreamViewer(sessionId) {
+		if (this.disposed || this.subagentSessionIds.has(sessionId)) return false;
+		return [...this.sinks].some((sink) => this.isViewedBy(sink, sessionId) && sink.canReceive("sessions.read"));
+	}
+	/** Instant publications bypass record(): no cursor, ring, notification or push side effect. */
+	pushAssistantDelta(payload) {
+		if (this.disposed || this.subagentSessionIds.has(payload.sessionId)) return;
+		for (const sink of this.sinks) if (this.isViewedBy(sink, payload.sessionId) && sink.canReceive("sessions.read")) sink.push("s2c.session.delta", payload);
 	}
 	isViewedBy(sink, sessionId) {
 		return this.sinkSessions.get(sink)?.has(sessionId) ?? false;
@@ -6200,6 +7484,7 @@ var HostBridge = class {
 		if (this.disposed) return;
 		this.disposed = true;
 		this.abort.abort();
+		this.assistantStream.dispose();
 		this.sinks.clear();
 		this.sinkSessions.clear();
 		this.pushOutlet = void 0;
@@ -6218,7 +7503,9 @@ var HostBridge = class {
 				const frame = unwrapStreamItem(item);
 				this.onMuxFrame(frame);
 			}
-		} catch {}
+		} catch {} finally {
+			this.assistantStream.dispose();
+		}
 	}
 	onHostFrame(frame) {
 		switch (frame.type) {
@@ -6257,12 +7544,30 @@ var HostBridge = class {
 			case "commands/changed":
 				this.record("s2c.commands.changed", {});
 				break;
+			case "session/assistant-stream": {
+				const sessionId = String(frame.sessionId ?? "");
+				if (frame.isSubagent === true) this.subagentSessionIds.add(sessionId);
+				if (this.subagentSessionIds.has(sessionId)) {
+					this.assistantStream.abandon(sessionId);
+					break;
+				}
+				this.assistantStream.accept(sessionId, frame.value);
+				break;
+			}
+			case "session/assistant-stream-disposed":
+				this.assistantStream.abandon(String(frame.sessionId ?? ""));
+				break;
 			case "session/event": {
 				const event = frame.event;
 				const sessionId = String(frame.sessionId ?? "");
 				if (!event || !sessionId) break;
 				if (frame.isSubagent === true) this.subagentSessionIds.add(sessionId);
-				if (this.subagentSessionIds.has(sessionId)) break;
+				if (this.subagentSessionIds.has(sessionId)) {
+					this.assistantStream.abandon(sessionId);
+					break;
+				}
+				const streamId = this.assistantStream.beforeEvent(sessionId, event);
+				if (event.type === "turn/end") this.assistantStream.abandon(sessionId);
 				if (event.type === "agent-preset/selected") this.record("s2c.skills.changed", { sessionId });
 				this.noteActivity(sessionId, event);
 				this.captureAssistantText(sessionId, event);
@@ -6272,7 +7577,10 @@ var HostBridge = class {
 					sessionId,
 					kind: projection.kind,
 					seq: event.seq,
-					data: projection.data
+					data: {
+						...projection.data,
+						...streamId && projection.kind === "message.final" ? { streamId } : {}
+					}
 				});
 				if (projection?.kind === "turn.end") this.emitTurnCompletedNotify(sessionId, projection.data.ok === true);
 				break;
@@ -6293,6 +7601,7 @@ var HostBridge = class {
 						...current ? { current } : {}
 					});
 				}
+				if (p.key === "inbox") this.applyInbox(p.sessionId, p.value, "live");
 				this.applyProjection(p.sessionId, String(p.key ?? ""), p.value);
 				break;
 			}
@@ -6468,6 +7777,43 @@ var HostBridge = class {
 		row.lastActivityTs = Date.now();
 		this.pushSummary(row);
 	}
+	/**
+	* 折叠一次 inbox 投影。只有实时变化才广播 s2c.session.queue；基线只补缓存，
+	* 打开会话的那台设备另由 pushQueueSnapshot 点对点拿到快照。
+	*
+	* 基线只补缺不覆盖：实时通知带的是完整投影值，收到过就以它为准；基线读取与
+	* 实时变化并发时，较早算出的基线不得盖掉较新的实时值。
+	*/
+	applyInbox(sessionId, value, origin) {
+		if (this.capabilities.promptQueue !== true) return;
+		if (this.subagentSessionIds.has(sessionId)) return;
+		if (origin === "baseline" && this.queues.has(sessionId)) return;
+		const items = projectQueue(value);
+		if (items === void 0) return;
+		const fingerprint = JSON.stringify(items);
+		const previous = this.queues.get(sessionId);
+		this.queues.set(sessionId, {
+			items,
+			fingerprint
+		});
+		if (origin === "live" && previous?.fingerprint !== fingerprint) this.record("s2c.session.queue", {
+			sessionId,
+			items
+		});
+	}
+	/**
+	* 打开会话时补发的快照：不占 seq，与 tail 同属打开响应。还没读到过该会话的
+	* 投影（基线失败、Host 不提供或子代理会话）时不发，因为未知不等于空队列。
+	*/
+	pushQueueSnapshot(sink, sessionId) {
+		if (this.disposed) return;
+		const queue = this.queues.get(sessionId);
+		if (queue === void 0) return;
+		sink.push("s2c.session.queue", {
+			sessionId,
+			items: queue.items
+		});
+	}
 	applyProjection(sessionId, key, value) {
 		const row = this.summaries.get(sessionId);
 		if (!row) return;
@@ -6594,7 +7940,7 @@ var HostBridge = class {
 				hasMore: Boolean(result.hasMore) || page.dropped > 0
 			});
 			this.deriveTitleFallback(sessionId, messages);
-			this.refreshProjections(sessionId);
+			this.refreshProjections(sessionId).then(() => this.pushQueueSnapshot(sink, sessionId));
 			return true;
 		} catch {
 			return false;
@@ -6620,8 +7966,14 @@ var HostBridge = class {
 				return;
 			}
 			const baseline = result.value;
-			if (baseline === null || baseline === void 0) return;
-			for (const [key, value] of Object.entries(baseline.values ?? {})) this.applyProjection(sessionId, key, value);
+			if (baseline === null || baseline === void 0) {
+				this.queues.delete(sessionId);
+				return;
+			}
+			for (const [key, value] of Object.entries(baseline.values ?? {})) {
+				if (key === "inbox") this.applyInbox(sessionId, value, "baseline");
+				this.applyProjection(sessionId, key, value);
+			}
 		} catch (error) {
 			this.diagnostic("sessions.projections threw: " + String(error?.message ?? error));
 		}
@@ -6692,12 +8044,15 @@ var HostBridge = class {
 			return wireErrorOf("command", hostFailureOf(error, "command/invalid-response"));
 		}
 	}
-	async exportSession(sessionId, signal) {
+	async exportSession(sessionId, signal, format) {
 		const api = this.apiProxy.commands;
 		if (!api) throw Object.assign(/* @__PURE__ */ new Error("当前主机不支持日志导出"), { code: "command/export-unsupported" });
 		return api.export({
 			rpcId: randomUUID(),
-			payload: { sessionId }
+			payload: {
+				sessionId,
+				...format === void 0 ? {} : { format }
+			}
 		}, signal);
 	}
 	/** 由会话目录决定技能可见性；不读取正文，也不把本机路径发给移动端。 */
@@ -6913,6 +8268,47 @@ var HostBridge = class {
 			};
 		}
 	}
+	/**
+	* 删除或转向一条排队项。ack 只表示 Host 已提交变更，真实状态以随后的
+	* s2c.session.queue 为准；不做幂等，项已消失时 Host 回 queue-item-not-found。
+	*/
+	async updateQueue(sessionId, itemId, action) {
+		const update = this.apiProxy.sessions.updateQueue;
+		if (typeof update !== "function") return {
+			ok: false,
+			code: "E_UNSUPPORTED",
+			message: "prompt queue unavailable on this host version"
+		};
+		try {
+			const response = await update.call(this.apiProxy.sessions, {
+				rpcId: randomUUID(),
+				payload: {
+					sessionId,
+					itemId,
+					action: { kind: action }
+				}
+			});
+			if (!response.result) return {
+				ok: false,
+				code: "E_INTERNAL",
+				message: "queue update returned no result"
+			};
+			if (!response.result.ok) return wireErrorOf("queue", response.result.error);
+			return {
+				ok: true,
+				value: {
+					sessionId,
+					itemId
+				}
+			};
+		} catch (error) {
+			return {
+				ok: false,
+				code: "E_INTERNAL",
+				message: String(error)
+			};
+		}
+	}
 	async cancelSession(sessionId) {
 		const cancel = this.apiProxy.sessions.cancel;
 		if (typeof cancel !== "function") return {
@@ -7139,6 +8535,17 @@ var HostBridge = class {
 			replayed: result.replayed
 		};
 	}
+	/**
+	* 当前 adapter 是否宿主级计划任务模型。
+	*
+	* 能力位 `schedulesHost`（host-capabilities.ts）与新帧、旧帧映射全部读这一个
+	* 判别位：探测只发生一次（DshApiProxy.resolveSchedule），这里不再看控制器
+	* 方法，也不看版本号字符串。
+	*/
+	get hostSchedule() {
+		const schedule = this.apiProxy.schedule;
+		return schedule?.mode === "host" ? schedule : void 0;
+	}
 	async listSchedules(sessionId) {
 		const schedule = this.apiProxy.schedule;
 		if (schedule === void 0) return {
@@ -7146,6 +8553,7 @@ var HostBridge = class {
 			code: "E_UNSUPPORTED",
 			message: "schedules unavailable on this host version"
 		};
+		if (schedule.mode === "host") return this.listHostSchedulesAsLegacy(schedule, sessionId);
 		try {
 			const response = await schedule.list({
 				rpcId: randomUUID(),
@@ -7169,6 +8577,345 @@ var HostBridge = class {
 			};
 		}
 	}
+	/** 宿主级列表 -> 旧会话级视图：过滤 session 目标、丢弃 ended、按 scheduledAt 升序。 */
+	async listHostSchedulesAsLegacy(schedule, sessionId) {
+		try {
+			const tasks = [];
+			let offset = 0;
+			for (;;) {
+				const response = await schedule.list({
+					rpcId: randomUUID(),
+					payload: {
+						limit: HOST_SCHEDULE_PAGE_SIZE,
+						offset
+					}
+				});
+				if (!response.result) return {
+					ok: false,
+					code: "E_INTERNAL",
+					message: "schedule list returned no result"
+				};
+				if (!response.result.ok) return wireErrorOf("schedule", response.result.error);
+				const page = response.result.value;
+				tasks.push(...page.tasks);
+				offset += page.tasks.length;
+				if (page.tasks.length === 0 || offset >= page.total) break;
+			}
+			const views = [];
+			for (const task of tasks) {
+				if (task.target.kind !== "session" || task.target.sessionId !== sessionId) continue;
+				if (task.status === "ended") continue;
+				const view = toLegacyScheduleView(task);
+				if (view !== void 0) views.push(view);
+			}
+			views.sort((left, right) => left.scheduledAt < right.scheduledAt ? -1 : left.scheduledAt > right.scheduledAt ? 1 : 0);
+			return {
+				ok: true,
+				value: views
+			};
+		} catch (error) {
+			return wireErrorOf("schedule", hostFailureOf(error, "internal"));
+		}
+	}
+	async listHostSchedules(request = {}) {
+		const schedule = this.hostSchedule;
+		if (schedule === void 0) return {
+			ok: false,
+			code: "E_UNSUPPORTED",
+			message: "host-level schedules unavailable on this host version"
+		};
+		try {
+			const response = await schedule.list({
+				rpcId: randomUUID(),
+				payload: request
+			});
+			if (!response.result) return {
+				ok: false,
+				code: "E_INTERNAL",
+				message: "schedule host list returned no result"
+			};
+			if (!response.result.ok) return wireErrorOf("schedule", response.result.error);
+			return {
+				ok: true,
+				value: response.result.value
+			};
+		} catch (error) {
+			return wireErrorOf("schedule", hostFailureOf(error, "internal"));
+		}
+	}
+	async viewHostSchedule(id) {
+		const schedule = this.hostSchedule;
+		if (schedule === void 0) return {
+			ok: false,
+			code: "E_UNSUPPORTED",
+			message: "host-level schedules unavailable on this host version"
+		};
+		try {
+			const response = await schedule.view({
+				rpcId: randomUUID(),
+				payload: { id }
+			});
+			if (!response.result) return {
+				ok: false,
+				code: "E_INTERNAL",
+				message: "schedule host view returned no result"
+			};
+			if (!response.result.ok) return wireErrorOf("schedule", response.result.error);
+			const value = response.result.value;
+			if (value.kind === "not-found") return {
+				ok: false,
+				code: "E_NOT_FOUND",
+				message: "schedule not found"
+			};
+			return {
+				ok: true,
+				value: value.task
+			};
+		} catch (error) {
+			return wireErrorOf("schedule", hostFailureOf(error, "internal"));
+		}
+	}
+	async createHostSchedule(deviceId, payload) {
+		const schedule = this.hostSchedule;
+		if (schedule === void 0) return {
+			ok: false,
+			code: "E_UNSUPPORTED",
+			message: "host-level schedules unavailable on this host version"
+		};
+		const { clientRequestId, ...request } = payload;
+		const result = await this.scheduleMutations.dispatch(deviceId, clientRequestId, request, async () => {
+			const response = await schedule.create({
+				rpcId: randomUUID(),
+				payload: {
+					title: request.title,
+					prompt: request.prompt,
+					timing: request.timing,
+					...request.target !== void 0 ? { target: request.target } : {}
+				}
+			});
+			if (!response.result) return {
+				ok: false,
+				code: "E_INTERNAL",
+				message: "schedule host create returned no result"
+			};
+			if (!response.result.ok) return wireErrorOf("schedule", response.result.error);
+			return {
+				ok: true,
+				value: response.result.value
+			};
+		});
+		if (result.ok) {
+			this.record("s2c.schedule.changed", {});
+			return {
+				ok: true,
+				value: result.value,
+				replayed: result.replayed
+			};
+		}
+		return {
+			ok: false,
+			code: result.code,
+			message: result.message ?? result.code,
+			replayed: result.replayed
+		};
+	}
+	async editHostSchedule(deviceId, payload) {
+		const schedule = this.hostSchedule;
+		if (schedule === void 0) return {
+			ok: false,
+			code: "E_UNSUPPORTED",
+			message: "host-level schedules unavailable on this host version"
+		};
+		const { clientRequestId, ...request } = payload;
+		const result = await this.scheduleMutations.dispatch(deviceId, clientRequestId, request, async () => {
+			const expected = request.expectedUpdatedAt !== void 0 ? { expectedUpdatedAt: request.expectedUpdatedAt } : {};
+			const response = await schedule.edit({
+				rpcId: randomUUID(),
+				payload: request.action === "update" ? {
+					id: request.id,
+					action: "update",
+					patch: request.patch,
+					...expected
+				} : {
+					id: request.id,
+					action: "delete",
+					...expected
+				}
+			});
+			if (!response.result) return {
+				ok: false,
+				code: "E_INTERNAL",
+				message: "schedule host edit returned no result"
+			};
+			if (!response.result.ok) return wireErrorOf("schedule", response.result.error);
+			const value = response.result.value;
+			if (value.kind === "conflict") return {
+				ok: false,
+				code: "E_BUSY",
+				message: "schedule changed since it was read"
+			};
+			if (value.kind === "not-found") return {
+				ok: false,
+				code: "E_NOT_FOUND",
+				message: "schedule not found"
+			};
+			if (request.action === "delete") {
+				if (value.kind !== "deleted") return {
+					ok: false,
+					code: "E_INTERNAL",
+					message: "schedule delete returned an updated task"
+				};
+				return {
+					ok: true,
+					value: {
+						deleted: true,
+						id: value.id
+					}
+				};
+			}
+			if (value.kind !== "task") return {
+				ok: false,
+				code: "E_INTERNAL",
+				message: "schedule update returned a deletion"
+			};
+			return {
+				ok: true,
+				value: { task: value.task }
+			};
+		});
+		if (result.ok) {
+			this.record("s2c.schedule.changed", {});
+			return {
+				ok: true,
+				value: result.value,
+				replayed: result.replayed
+			};
+		}
+		return {
+			ok: false,
+			code: result.code,
+			message: result.message ?? result.code,
+			replayed: result.replayed
+		};
+	}
+	async runHostSchedule(deviceId, payload) {
+		const schedule = this.hostSchedule;
+		if (schedule === void 0) return {
+			ok: false,
+			code: "E_UNSUPPORTED",
+			message: "host-level schedules unavailable on this host version"
+		};
+		const result = await this.scheduleMutations.dispatch(deviceId, payload.clientRequestId, { id: payload.id }, async () => {
+			const response = await schedule.run({
+				rpcId: randomUUID(),
+				payload: { id: payload.id }
+			});
+			if (!response.result) return {
+				ok: false,
+				code: "E_INTERNAL",
+				message: "schedule host run returned no result"
+			};
+			if (!response.result.ok) return wireErrorOf("schedule", response.result.error);
+			const value = response.result.value;
+			if (value.kind === "pending") return {
+				ok: false,
+				code: "E_BUSY",
+				message: "schedule execution already pending"
+			};
+			if (value.kind === "not-found") return {
+				ok: false,
+				code: "E_NOT_FOUND",
+				message: "schedule not found"
+			};
+			return {
+				ok: true,
+				value: value.task
+			};
+		});
+		if (result.ok) {
+			this.record("s2c.schedule.changed", {});
+			return {
+				ok: true,
+				value: result.value,
+				replayed: result.replayed
+			};
+		}
+		return {
+			ok: false,
+			code: result.code,
+			message: result.message ?? result.code,
+			replayed: result.replayed
+		};
+	}
+	/**
+	* 删除宿主上全部已结束（`status="ended"`）的任务，返回删除条数。
+	*
+	* 与其他变更帧共用 scheduleMutations journal：同一 clientRequestId 重放时直接回放
+	* 首次结果，不会再删一次。成功后广播 `s2c.schedule.changed`；失败时同样广播——上游
+	* 文档说明失败的批次无法确定哪些行已删除，客户端应重新读取列表。
+	*/
+	async deleteEndedHostSchedules(deviceId, payload) {
+		const schedule = this.hostSchedule;
+		if (schedule === void 0) return {
+			ok: false,
+			code: "E_UNSUPPORTED",
+			message: "host-level schedules unavailable on this host version"
+		};
+		const result = await this.scheduleMutations.dispatch(deviceId, payload.clientRequestId, { operation: "deleteEnded" }, async () => {
+			const response = await schedule.deleteEnded({
+				rpcId: randomUUID(),
+				payload: {}
+			});
+			if (!response.result) return {
+				ok: false,
+				code: "E_INTERNAL",
+				message: "schedule delete ended returned no result"
+			};
+			if (!response.result.ok) return wireErrorOf("schedule", response.result.error);
+			return {
+				ok: true,
+				value: response.result.value
+			};
+		});
+		this.record("s2c.schedule.changed", {});
+		if (result.ok) return {
+			ok: true,
+			value: result.value ?? {},
+			replayed: result.replayed
+		};
+		return {
+			ok: false,
+			code: result.code,
+			message: result.message ?? result.code,
+			replayed: result.replayed
+		};
+	}
+	async scheduleLimits() {
+		const schedule = this.hostSchedule;
+		if (schedule === void 0) return {
+			ok: false,
+			code: "E_UNSUPPORTED",
+			message: "host-level schedules unavailable on this host version"
+		};
+		try {
+			const response = await schedule.limits({
+				rpcId: randomUUID(),
+				payload: {}
+			});
+			if (!response.result) return {
+				ok: false,
+				code: "E_INTERNAL",
+				message: "schedule limits returned no result"
+			};
+			if (!response.result.ok) return wireErrorOf("schedule", response.result.error);
+			return {
+				ok: true,
+				value: response.result.value
+			};
+		} catch (error) {
+			return wireErrorOf("schedule", hostFailureOf(error, "internal"));
+		}
+	}
 	async scheduleHistory(sessionId, id, limit, before) {
 		const schedule = this.apiProxy.schedule;
 		if (schedule === void 0) return {
@@ -7176,6 +8923,28 @@ var HostBridge = class {
 			code: "E_UNSUPPORTED",
 			message: "schedules unavailable on this host version"
 		};
+		if (schedule.mode === "host") try {
+			const response = await schedule.history({
+				rpcId: randomUUID(),
+				payload: {
+					id,
+					limit,
+					...before !== void 0 ? { before } : {}
+				}
+			});
+			if (!response.result) return {
+				ok: false,
+				code: "E_INTERNAL",
+				message: "schedule history returned no result"
+			};
+			if (!response.result.ok) return wireErrorOf("schedule", response.result.error);
+			return {
+				ok: true,
+				value: response.result.value
+			};
+		} catch (error) {
+			return wireErrorOf("schedule", hostFailureOf(error, "internal"));
+		}
 		try {
 			const response = await schedule.history({
 				rpcId: randomUUID(),
@@ -7203,14 +8972,76 @@ var HostBridge = class {
 				message: String(error)
 			};
 		}
-	}
-	async createSchedule(deviceId, payload) {
-		const schedule = this.apiProxy.schedule;
-		if (schedule === void 0) return {
-			ok: false,
-			code: "E_UNSUPPORTED",
-			message: "schedules unavailable on this host version"
-		};
+	}
+	async createSchedule(deviceId, payload) {
+		const schedule = this.apiProxy.schedule;
+		if (schedule === void 0) return {
+			ok: false,
+			code: "E_UNSUPPORTED",
+			message: "schedules unavailable on this host version"
+		};
+		if (schedule.mode === "host") {
+			const { clientRequestId, sessionId, title, prompt, ...selectors } = payload;
+			const timing = hostTimingFromLegacySelector(selectors);
+			if (timing === void 0) return {
+				ok: false,
+				code: "E_PROTOCOL",
+				message: "unsupported schedule selector"
+			};
+			const request = {
+				title,
+				prompt,
+				timing,
+				target: {
+					kind: "session",
+					sessionId
+				}
+			};
+			const result = await this.scheduleMutations.dispatch(deviceId, clientRequestId, request, async () => {
+				const response = await schedule.create({
+					rpcId: randomUUID(),
+					payload: {
+						title,
+						prompt,
+						timing,
+						target: {
+							kind: "session",
+							sessionId
+						}
+					}
+				});
+				if (!response.result) return {
+					ok: false,
+					code: "E_INTERNAL",
+					message: "schedule create returned no result"
+				};
+				if (!response.result.ok) return wireErrorOf("schedule", response.result.error);
+				const legacy = toLegacyScheduleView(response.result.value);
+				if (legacy === void 0) return {
+					ok: false,
+					code: "E_PROTOCOL",
+					message: "schedule cannot be represented in the session-scoped view"
+				};
+				return {
+					ok: true,
+					value: legacy
+				};
+			});
+			if (result.ok) {
+				this.record("s2c.schedule.changed", {});
+				return {
+					ok: true,
+					value: result.value,
+					replayed: result.replayed
+				};
+			}
+			return {
+				ok: false,
+				code: result.code,
+				message: result.message ?? result.code,
+				replayed: result.replayed
+			};
+		}
 		const { clientRequestId, sessionId, ...request } = payload;
 		const result = await this.scheduleMutations.dispatch(deviceId, clientRequestId, {
 			sessionId,
@@ -7256,6 +9087,106 @@ var HostBridge = class {
 			code: "E_UNSUPPORTED",
 			message: "schedules unavailable on this host version"
 		};
+		if (schedule.mode === "host") {
+			const request = {
+				sessionId: payload.sessionId,
+				id: payload.id,
+				expected: payload.expected,
+				title: payload.title,
+				prompt: payload.prompt,
+				change: payload.change
+			};
+			const result = await this.scheduleMutations.dispatch(deviceId, payload.clientRequestId, request, async () => {
+				const current = await schedule.view({
+					rpcId: randomUUID(),
+					payload: { id: payload.id }
+				});
+				if (!current.result) return {
+					ok: false,
+					code: "E_INTERNAL",
+					message: "schedule view returned no result"
+				};
+				if (!current.result.ok) return wireErrorOf("schedule", current.result.error);
+				if (current.result.value.kind === "not-found") return {
+					ok: false,
+					code: "E_NOT_FOUND",
+					message: "schedule not found"
+				};
+				const currentTask = current.result.value.task;
+				if (!legacyScheduleMatchesExpected(currentTask, payload.expected)) return {
+					ok: false,
+					code: "E_BUSY",
+					message: "schedule changed since it was read"
+				};
+				const patch = hostPatchFromLegacyUpdate(payload);
+				if (Object.keys(patch).length === 0) {
+					const legacy = toLegacyScheduleView(currentTask);
+					if (legacy === void 0) return {
+						ok: false,
+						code: "E_PROTOCOL",
+						message: "schedule cannot be represented in the session-scoped view"
+					};
+					return {
+						ok: true,
+						value: legacy
+					};
+				}
+				const response = await schedule.edit({
+					rpcId: randomUUID(),
+					payload: {
+						id: payload.id,
+						action: "update",
+						patch
+					}
+				});
+				if (!response.result) return {
+					ok: false,
+					code: "E_INTERNAL",
+					message: "schedule edit returned no result"
+				};
+				if (!response.result.ok) return wireErrorOf("schedule", response.result.error);
+				const value = response.result.value;
+				if (value.kind === "conflict") return {
+					ok: false,
+					code: "E_BUSY",
+					message: "schedule changed since it was read"
+				};
+				if (value.kind === "not-found") return {
+					ok: false,
+					code: "E_NOT_FOUND",
+					message: "schedule not found"
+				};
+				if (value.kind !== "task") return {
+					ok: false,
+					code: "E_INTERNAL",
+					message: "schedule edit returned an unexpected deletion"
+				};
+				const legacy = toLegacyScheduleView(value.task);
+				if (legacy === void 0) return {
+					ok: false,
+					code: "E_PROTOCOL",
+					message: "schedule cannot be represented in the session-scoped view"
+				};
+				return {
+					ok: true,
+					value: legacy
+				};
+			});
+			if (result.ok) {
+				this.record("s2c.schedule.changed", {});
+				return {
+					ok: true,
+					value: result.value,
+					replayed: result.replayed
+				};
+			}
+			return {
+				ok: false,
+				code: result.code,
+				message: result.message ?? result.code,
+				replayed: result.replayed
+			};
+		}
 		const { clientRequestId, ...request } = payload;
 		const result = await this.scheduleMutations.dispatch(deviceId, clientRequestId, request, async () => {
 			const response = await schedule.update({
@@ -7301,6 +9232,63 @@ var HostBridge = class {
 			code: "E_UNSUPPORTED",
 			message: "schedules unavailable on this host version"
 		};
+		if (schedule.mode === "host") {
+			const result = await this.scheduleMutations.dispatch(deviceId, payload.clientRequestId, {
+				sessionId: payload.sessionId,
+				id: payload.id
+			}, async () => {
+				const response = await schedule.edit({
+					rpcId: randomUUID(),
+					payload: {
+						id: payload.id,
+						action: "delete"
+					}
+				});
+				if (!response.result) return {
+					ok: false,
+					code: "E_INTERNAL",
+					message: "schedule delete returned no result"
+				};
+				if (!response.result.ok) return wireErrorOf("schedule", response.result.error);
+				const value = response.result.value;
+				if (value.kind === "deleted") return {
+					ok: true,
+					value: {
+						id: value.id,
+						deleted: true
+					}
+				};
+				if (value.kind === "not-found") return {
+					ok: false,
+					code: "E_NOT_FOUND",
+					message: "schedule not found"
+				};
+				if (value.kind === "conflict") return {
+					ok: false,
+					code: "E_BUSY",
+					message: "schedule changed since it was read"
+				};
+				return {
+					ok: false,
+					code: "E_INTERNAL",
+					message: "schedule delete returned an updated task"
+				};
+			});
+			if (result.ok) {
+				this.record("s2c.schedule.changed", {});
+				return {
+					ok: true,
+					value: result.value,
+					replayed: result.replayed
+				};
+			}
+			return {
+				ok: false,
+				code: result.code,
+				message: result.message ?? result.code,
+				replayed: result.replayed
+			};
+		}
 		const result = await this.scheduleMutations.dispatch(deviceId, payload.clientRequestId, {
 			sessionId: payload.sessionId,
 			id: payload.id
@@ -7346,7 +9334,7 @@ var HostBridge = class {
 			replayed: result.replayed
 		};
 	}
-	async sendPrompt(sessionId, text, images = [], documents = []) {
+	async sendPrompt(sessionId, text, images = [], documents = [], options = {}) {
 		try {
 			const content = [];
 			if (text.trim().length > 0) content.push({
@@ -7362,10 +9350,10 @@ var HostBridge = class {
 				text: documentPromptBlock(document)
 			});
 			const response = await this.apiProxy.sessions.prompt({
-				rpcId: randomUUID(),
+				rpcId: options.clientSendId !== void 0 ? promptRequestId(options.clientSendId) : randomUUID(),
 				payload: {
 					sessionId,
-					mode: "queue",
+					mode: options.mode ?? "queue",
 					content,
 					clientTimeZone: localTimeZone()
 				}
@@ -7685,8 +9673,236 @@ function projectSessionModels(value) {
 	};
 }
 /** Project a history page (raw events) into MessageProjection rows. */
-//#endregion
-//#region src/dsh-remote-interactions.ts
+/** 宿主级列表全量拉取时的页大小（Host 允许的最大值）。 */
+const HOST_SCHEDULE_PAGE_SIZE = 500;
+/** 参与旧帧冲突比较的字段：`state`/`deliveryMode` 是派生字段，不参与。 */
+const LEGACY_PROJECTION_FIELDS = [
+	"id",
+	"kind",
+	"title",
+	"prompt",
+	"scheduledAt",
+	"afterSeconds",
+	"everySeconds",
+	"time",
+	"timeZone",
+	"weekdays",
+	"expression"
+];
+function isPlainObject$1(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function legacyNumber(...values) {
+	for (const value of values) if (typeof value === "number" && Number.isFinite(value)) return value;
+}
+function legacyString(...values) {
+	for (const value of values) if (typeof value === "string" && value.length > 0) return value;
+}
+function normalizeAtInput(value) {
+	if (typeof value === "string" && value.length > 0) return value;
+	if (!isPlainObject$1(value)) return void 0;
+	const date = legacyString(value.date);
+	const time = legacyString(value.time);
+	const zone = legacyString(value.time_zone, value.timeZone);
+	return date !== void 0 && time !== void 0 && zone !== void 0 ? {
+		date,
+		time,
+		time_zone: zone
+	} : void 0;
+}
+function normalizeLocalTime(value) {
+	if (!isPlainObject$1(value)) return void 0;
+	const time = legacyString(value.time);
+	const zone = legacyString(value.time_zone, value.timeZone);
+	return time !== void 0 && zone !== void 0 ? {
+		time,
+		time_zone: zone
+	} : void 0;
+}
+function normalizeWeekdays(value) {
+	if (!Array.isArray(value) || value.length === 0) return void 0;
+	const days = value.filter((day) => typeof day === "number" && Number.isSafeInteger(day) && day >= 1 && day <= 7);
+	return days.length === value.length ? days : void 0;
+}
+/** 旧创建帧的选择器 -> 宿主级 timing。旧 wire 校验保证恰好一个选择器。 */
+function hostTimingFromLegacySelector(selectors) {
+	const after = legacyNumber(selectors.after_seconds);
+	if (after !== void 0) return {
+		kind: "after",
+		after_seconds: after
+	};
+	if (selectors.at !== void 0) {
+		const at = normalizeAtInput(selectors.at);
+		return at === void 0 ? void 0 : {
+			kind: "at",
+			at
+		};
+	}
+	const every = legacyNumber(selectors.every_seconds);
+	if (every !== void 0) return {
+		kind: "every",
+		every_seconds: every
+	};
+	if (selectors.daily !== void 0) {
+		const daily = normalizeLocalTime(selectors.daily);
+		return daily === void 0 ? void 0 : {
+			kind: "daily",
+			daily
+		};
+	}
+	if (selectors.weekly !== void 0) {
+		if (!isPlainObject$1(selectors.weekly)) return void 0;
+		const time = normalizeLocalTime(selectors.weekly);
+		const weekdays = normalizeWeekdays(selectors.weekly.weekdays);
+		return time === void 0 || weekdays === void 0 ? void 0 : {
+			kind: "weekly",
+			weekly: {
+				...time,
+				weekdays
+			}
+		};
+	}
+	if (selectors.cron !== void 0) {
+		if (!isPlainObject$1(selectors.cron)) return void 0;
+		const expression = legacyString(selectors.cron.expression);
+		const zone = legacyString(selectors.cron.time_zone, selectors.cron.timeZone);
+		return expression === void 0 || zone === void 0 ? void 0 : {
+			kind: "cron",
+			cron: {
+				expression,
+				time_zone: zone
+			}
+		};
+	}
+}
+/**
+* 旧更新帧的 `change` -> 宿主级 timing。
+*
+* 两种历史写法都认：选择器式（`{kind:'daily', daily:{...}}`，与创建帧同形）与
+* 扁平式（`{kind:'daily', time, timeZone}` / `{kind:'cron', expression}`）。
+*/
+function hostTimingFromLegacyChange(change) {
+	if (!isPlainObject$1(change)) return void 0;
+	const selector = hostTimingFromLegacySelector(change);
+	if (selector !== void 0) return selector;
+	switch (change.kind) {
+		case "daily": {
+			const time = legacyString(change.time);
+			const zone = legacyString(change.time_zone, change.timeZone);
+			return time === void 0 || zone === void 0 ? void 0 : {
+				kind: "daily",
+				daily: {
+					time,
+					time_zone: zone
+				}
+			};
+		}
+		case "weekly": {
+			const time = legacyString(change.time);
+			const zone = legacyString(change.time_zone, change.timeZone);
+			const weekdays = normalizeWeekdays(change.weekdays);
+			return time === void 0 || zone === void 0 || weekdays === void 0 ? void 0 : {
+				kind: "weekly",
+				weekly: {
+					time,
+					time_zone: zone,
+					weekdays
+				}
+			};
+		}
+		case "cron": {
+			const expression = legacyString(change.expression);
+			const zone = legacyString(change.time_zone, change.timeZone);
+			return expression === void 0 || zone === void 0 ? void 0 : {
+				kind: "cron",
+				cron: {
+					expression,
+					time_zone: zone
+				}
+			};
+		}
+		case "rrule": {
+			const rrule = legacyString(change.rrule);
+			return rrule === void 0 ? void 0 : {
+				kind: "rrule",
+				rrule
+			};
+		}
+		default: return;
+	}
+}
+/** 旧更新帧的 title/prompt/change -> 宿主级 patch。 */
+function hostPatchFromLegacyUpdate(payload) {
+	const patch = {};
+	if (typeof payload.title === "string") patch.title = payload.title;
+	if (typeof payload.prompt === "string") patch.prompt = payload.prompt;
+	const timing = hostTimingFromLegacyChange(payload.change);
+	if (timing !== void 0) patch.timing = timing;
+	return patch;
+}
+/**
+* 宿主级任务视图 -> 旧会话级视图。
+*
+* `state` 只由 `scheduledAt` 是否已过推导（PROTOCOL.md 映射表）；`rrule` 在旧枚举
+* 里没有对应 kind，返回 undefined 让调用方跳过——旧客户端按枚举解码列表，塞进
+* 未知 kind 会让整页解码失败，静默隐藏比让旧 App 打不开列表更安全。
+*/
+function toLegacyScheduleView(task) {
+	const instant = Date.parse(task.scheduledAt);
+	const base = {
+		id: task.id,
+		title: task.title,
+		prompt: task.prompt,
+		scheduledAt: task.scheduledAt,
+		state: Number.isFinite(instant) && instant < Date.now() ? "overdue" : "scheduled",
+		deliveryMode: "host"
+	};
+	switch (task.timing.kind) {
+		case "after": return {
+			...base,
+			kind: "after",
+			afterSeconds: task.timing.after_seconds
+		};
+		case "at": return {
+			...base,
+			kind: "at"
+		};
+		case "every": return {
+			...base,
+			kind: "every",
+			everySeconds: task.timing.every_seconds
+		};
+		case "daily": return {
+			...base,
+			kind: "daily",
+			time: task.timing.daily.time,
+			timeZone: task.timing.daily.time_zone
+		};
+		case "weekly": return {
+			...base,
+			kind: "weekly",
+			time: task.timing.weekly.time,
+			timeZone: task.timing.weekly.time_zone,
+			weekdays: [...task.timing.weekly.weekdays]
+		};
+		case "cron": return {
+			...base,
+			kind: "cron",
+			expression: task.timing.cron.expression,
+			timeZone: task.timing.cron.time_zone
+		};
+		default: return;
+	}
+}
+/** 旧帧的冲突保护：当前任务的旧投影与客户端回传的 `expected` 逐字段相等。 */
+function legacyScheduleMatchesExpected(task, expected) {
+	const view = toLegacyScheduleView(task);
+	if (view === void 0) return false;
+	if (!isPlainObject$1(expected)) return false;
+	const actual = view;
+	return LEGACY_PROJECTION_FIELDS.every((key) => JSON.stringify(actual[key]) === JSON.stringify(expected[key]));
+}
+// src/dsh-remote-interactions.ts
 /**
 * Resident DSH Remote Events client for phone interactions.
 *
@@ -7874,8 +10090,7 @@ async function startDshRemoteInteractions(hostCtx, handlers) {
 		throw error;
 	}
 }
-//#endregion
-//#region src/command-api.ts
+// src/command-api.ts
 /**
 * 给本域自造的失败带上 Host 风格的码。
 *
@@ -7897,6 +10112,11 @@ var DshCommandApi = class {
 	get available() {
 		return this.ctx.get("commands") !== void 0 && typeof this.ctx.get("typertGateway")?.invoke === "function";
 	}
+	get markdownAvailable() {
+		const connection = this.connection();
+		const route = connection?.fetchRoutes instanceof Map ? connection.fetchRoutes.get("/api/session.markdown") : void 0;
+		return typeof connection?.createSharedFetchHandler === "function" && route?.methods instanceof Set && route.methods.has("GET") && typeof route.fetch === "function" && typeof this.ctx.get("sessionQuery")?.readSession === "function";
+	}
 	connection() {
 		return this.ctx.get("connection");
 	}
@@ -8007,14 +10227,17 @@ var DshCommandApi = class {
 		} });
 		if (result?.ok !== true) throw fail(typeof result?.error?.code === "string" ? result.error.code : "command/invalid-response", typeof result?.error?.message === "string" ? result.error.message : "反馈未能保存");
 	}
-	async export(sessionId, signal) {
-		const response = await this.connection().createSharedFetchHandler("/api").fetch(new Request("http://localhost/api/session.export?includeDescendants=true&sessionId=" + encodeURIComponent(sessionId), { signal }), this.owner());
-		if (!response.ok || !response.body || !response.headers.get("content-type")?.includes("application/zip")) throw fail("command/export-unavailable", "主机未能生成会话日志归档");
+	async export(sessionId, signal, format) {
+		const markdown = format === "markdown";
+		const path = markdown ? "/api/session.markdown?sessionId=" : "/api/session.export?includeDescendants=true&sessionId=";
+		const response = await this.connection().createSharedFetchHandler("/api").fetch(new Request("http://localhost" + path + encodeURIComponent(sessionId), { signal }), this.owner());
+		const contentType = response.headers.get("content-type");
+		const matches = markdown ? contentType?.split(";")[0]?.trim().toLowerCase() === "text/markdown" : contentType?.includes("application/zip");
+		if (!response.ok || !response.body || !matches) throw fail("command/export-unavailable", markdown ? "主机未能生成会话对话正文" : "主机未能生成会话日志归档");
 		return response;
 	}
 };
-//#endregion
-//#region src/dsh-api-proxy.ts
+// src/dsh-api-proxy.ts
 /**
 * Adapter for the DSH rc.2 controller API.
 *
@@ -8023,9 +10246,26 @@ var DshCommandApi = class {
 * Session/Workspace controllers and Gateway-backed Remote Events, keeping
 * the phone protocol isolated from the Host API.
 */
+/**
+* 形状探测：宿主级模型只有 `edit`（没有 `update`）。不按版本号字符串判断——
+* 版本号无法说明 Schedule bundle 是否挂载、也无法覆盖回退组合。
+*/
+function isHostScheduleController(controller) {
+	const value = controller;
+	return typeof value.edit === "function" && typeof value.update !== "function";
+}
 /** Direct-controller adapter with the shape HostBridge consumes. */
 var DshApiProxy = class {
 	ctx;
+	/** Probe the Host's generated reflection, not this adapter's listener registration. */
+	get assistantStreamAvailable() {
+		const typert = this.ctx.get("typert");
+		try {
+			return typert?.getPackage?.("@deepseek-ai/dsh-api-session-controller", "host")?.model?.services?.some((service) => service.key === "sessionController" && service.types?.some((type) => type.name === "SessionAssistantStreamFrame")) === true;
+		} catch {
+			return false;
+		}
+	}
 	commandApi;
 	get commands() {
 		if (!this.commandApi.available) return void 0;
@@ -8034,7 +10274,8 @@ var DshApiProxy = class {
 			execute: (request) => this.call(() => this.commandApi.execute(request.payload.sessionId, request.payload.line, request.payload.attachments, request.payload.expectedDefinitionId)),
 			permissions: (request) => this.call(() => this.commandApi.permissions(request.payload.sessionId)),
 			feedback: (request) => this.call(() => this.commandApi.feedback(request.payload.sessionId, request.payload.text, request.payload.category)),
-			export: (request, signal) => this.commandApi.export(request.payload.sessionId, signal)
+			markdownAvailable: this.commandApi.markdownAvailable,
+			export: (request, signal) => this.commandApi.export(request.payload.sessionId, signal, request.payload.format)
 		};
 	}
 	session;
@@ -8052,6 +10293,7 @@ var DshApiProxy = class {
 		this.session = session;
 		this.workspaceController = ctx.get("workspaceController");
 		if (this.workspaceController === void 0) delete this.workspace?.unarchiveSession;
+		if (typeof this.session.updateQueue !== "function") delete this.sessions.updateQueue;
 		this.directoryPicker = ctx.get("directoryPickerController");
 		this.shouldSurfaceInteraction = options.shouldSurfaceInteraction ?? (() => true);
 		this.resolveSchedule();
@@ -8082,14 +10324,16 @@ var DshApiProxy = class {
 		const controller = this.ctx.get("schedule");
 		if (controller === void 0) return;
 		this.scheduleController = controller;
-		this.scheduleApi = this.createScheduleApi(controller);
+		this.scheduleApi = isHostScheduleController(controller) ? this.createHostScheduleApi(controller) : this.createLegacyScheduleApi(controller);
 	}
 	get schedule() {
 		this.resolveSchedule();
 		return this.scheduleApi;
 	}
-	createScheduleApi(controller) {
+	/** 会话级适配器：行为与宿主级扩展加入前逐字节一致，只多一个判别位。 */
+	createLegacyScheduleApi(controller) {
 		return {
+			mode: "legacy",
 			list: async (request) => this.call(async () => ({
 				sessionId: request.payload.sessionId,
 				tasks: (await controller.list({ sessionId: request.payload.sessionId })).map(toScheduleTask)
@@ -8138,6 +10382,83 @@ var DshApiProxy = class {
 		};
 	}
 	/**
+	* 宿主级适配器：把 DSH `ScheduleService` 的分页列表/结果对象归一化成 Bridge
+	* 消费的稳定视图。
+	*
+	* 失败分两类：`view/edit/run/history` 的「找不到」是**结果对象**里的 code
+	* （非变更 miss，不抛错），这里翻译成 outcome 或带 code 的 Error；
+	* `create/edit/run` 的输入非法与目标已归档是 RemoteError 抛出，由
+	* `this.call` 收成 `{code}`，再由 Bridge 按错误词表映射。
+	*/
+	createHostScheduleApi(controller) {
+		return {
+			mode: "host",
+			list: async (request) => this.call(async () => {
+				const payload = request.payload ?? {};
+				const value = await controller.list({
+					...payload.active !== void 0 ? { active: payload.active } : {},
+					...payload.limit !== void 0 ? { limit: payload.limit } : {},
+					...payload.offset !== void 0 ? { offset: payload.offset } : {}
+				});
+				const items = Array.isArray(value.items) ? value.items : [];
+				return {
+					tasks: items.map(toHostScheduleTask),
+					shown: finiteCount(value.shown, items.length),
+					total: finiteCount(value.total, items.length),
+					limit: finiteCount(value.limit, payload.limit ?? 100),
+					offset: finiteCount(value.offset, payload.offset ?? 0)
+				};
+			}),
+			view: async (request) => this.call(async () => {
+				return toHostScheduleViewOutcome(await controller.view({ id: request.payload.id }), request.payload.id);
+			}),
+			create: async (request) => this.call(async () => {
+				const payload = request.payload;
+				return toHostScheduleTask(await controller.create({
+					title: payload.title,
+					prompt: payload.prompt,
+					timing: payload.timing,
+					...payload.target !== void 0 ? { target: normalizeTargetRequest(payload.target) } : {}
+				}));
+			}),
+			edit: async (request) => this.call(async () => {
+				const payload = request.payload;
+				const expected = payload.expectedUpdatedAt !== void 0 ? { expectedUpdatedAt: payload.expectedUpdatedAt } : {};
+				const edit = payload.action === "update" ? {
+					id: payload.id,
+					action: "update",
+					patch: normalizeHostPatch(payload.patch),
+					...expected
+				} : {
+					id: payload.id,
+					action: "delete",
+					...expected
+				};
+				return toHostScheduleEditOutcome(await controller.edit(edit), payload.id);
+			}),
+			run: async (request) => this.call(async () => {
+				return toHostScheduleRunOutcome(await controller.run({ id: request.payload.id }), request.payload.id);
+			}),
+			history: async (request) => this.call(async () => {
+				const value = await controller.history({
+					id: request.payload.id,
+					limit: request.payload.limit,
+					...request.payload.before !== void 0 ? { before: request.payload.before } : {}
+				});
+				if (typeof value.code === "string") throw Object.assign(new Error(String(value.code)), { code: value.code });
+				return toScheduleHistory(value);
+			}),
+			limits: async () => this.call(async () => {
+				const value = controller.deliveryLimits();
+				return { newSessionIntervalSeconds: Math.max(0, Math.trunc(Number(value?.newSessionIntervalSeconds) || 0)) };
+			}),
+			deleteEnded: async () => this.call(async () => {
+				const value = await controller.deleteInactive();
+				return { deleted: Math.max(0, Math.trunc(Number(value?.deleted) || 0)) };
+			})
+		};
+	}
+	/**
 	* Decide whether this Gateway Client can surface a phone card. The decision
 	* fails open to false so a broken device registry delegates this delivery
 	* while the official Web Client remains able to answer.
@@ -8155,16 +10476,33 @@ var DshApiProxy = class {
 		}),
 		history: async (request) => this.call(async () => {
 			const sessionId = request.payload.sessionId;
+			const beforeSeq = request.payload?.beforeSeq;
+			const limit = normalizePageLimit(request.payload?.maxMessages);
+			const inspect = this.session.inspect;
+			if (inspect === void 0) {
+				const page = await this.session.page({
+					address: {
+						kind: "session",
+						sessionId
+					},
+					...beforeSeq === void 0 ? {} : { throughSeq: beforeSeq - 1 },
+					maxMessages: limit
+				}, new AbortController().signal);
+				return {
+					events: page.records.map((record) => ({ event: record.event })),
+					hasMore: page.hasMore
+				};
+			}
 			let inspected;
 			try {
-				inspected = await this.session.inspect(sessionId);
+				inspected = await inspect.call(this.session, sessionId);
 			} catch (error) {
 				console.warn(`[deeppilot] session history unavailable for ${JSON.stringify(sessionId)}: ${toError(error).code}: ${toError(error).message}`);
 				throw error;
 			}
 			const window = historyWindow(inspected.events, {
-				beforeSeq: request.payload?.beforeSeq,
-				limit: normalizePageLimit(request.payload?.maxMessages)
+				beforeSeq,
+				limit
 			});
 			return {
 				events: window.events,
@@ -8181,6 +10519,7 @@ var DshApiProxy = class {
 		selectModel: async (request) => this.call(() => this.session.selectModel(request.payload ?? {})),
 		rename: async (request) => this.call(() => this.session.rename(request.payload)),
 		cancel: async (request) => this.call(() => this.session.cancel(request.payload)),
+		updateQueue: async (request) => this.call(() => this.session.updateQueue(request.payload)),
 		attachment: async (request) => this.call(() => this.session.attachment(request.payload)),
 		projections: async (request) => this.call(() => this.session.projections(request.payload, new AbortController().signal))
 	};
@@ -8248,6 +10587,18 @@ var DshApiProxy = class {
 				event
 			});
 		}), { global: true });
+		const offAssistantStream = this.ctx.on("agent/assistant-stream", (({ agent, frame }) => {
+			queue.push({
+				type: "session/assistant-stream",
+				sessionId: String(agent.session.id),
+				isSubagent: agent.session.header?.origin === "subagent",
+				value: frame
+			});
+		}), { global: true });
+		const offAgentDisposed = this.ctx.on("agent/disposed", (({ agent }) => queue.push({
+			type: "session/assistant-stream-disposed",
+			sessionId: String(agent.session.id)
+		})), { global: true });
 		const offProjection = this.ctx.get("sessionProjections")?.onChanged?.((session, key, value) => {
 			queue.push({
 				type: "session/projection",
@@ -8273,6 +10624,8 @@ var DshApiProxy = class {
 			yield* queue.iterate();
 		} finally {
 			offEvent();
+			offAssistantStream();
+			offAgentDisposed();
 			offProjection?.();
 			offSkills();
 			offCommands.forEach((dispose) => dispose());
@@ -8518,6 +10871,206 @@ function toScheduleHistory(value) {
 		...typeof row.nextBefore === "string" ? { nextBefore: row.nextBefore } : {}
 	};
 }
+/**
+* 请求侧 target：`new_once`/`new` 的会话由 Host 预留或新建，客户端若把查看结果
+* 里的 `sessionId` 原样回传，不向上游透传（Host 的创建/编辑请求没有这个字段）。
+*/
+function normalizeTargetRequest(value) {
+	if (value.kind === "session") return {
+		kind: "session",
+		sessionId: String(value.sessionId ?? "")
+	};
+	const create = toHostScheduleCreateSpec(value.create);
+	return {
+		kind: value.kind,
+		...create !== void 0 ? { create } : {}
+	};
+}
+/** 编辑补丁归一化：字段按契约逐个透传，target 走请求侧投影。 */
+function normalizeHostPatch(value) {
+	return {
+		...value.title !== void 0 ? { title: value.title } : {},
+		...value.prompt !== void 0 ? { prompt: value.prompt } : {},
+		...value.timing !== void 0 ? { timing: value.timing } : {},
+		...value.target !== void 0 ? { target: normalizeTargetRequest(value.target) } : {},
+		...value.active !== void 0 ? { active: value.active } : {}
+	};
+}
+function isRecord(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function toRecord(value) {
+	return isRecord(value) ? value : {};
+}
+/** 非负安全整数；形状不符时退回 fallback（分页字段只用于展示）。 */
+function finiteCount(value, fallback) {
+	return typeof value === "number" && Number.isSafeInteger(value) && value >= 0 ? value : fallback;
+}
+function positiveSeconds(value) {
+	return typeof value === "number" && Number.isFinite(value) && value > 0 ? value : 0;
+}
+function hostResultCode(value) {
+	return typeof value.code === "string" ? value.code : void 0;
+}
+/** 结果对象里的「非变更 miss」不是抛错，这里翻译成 outcome 或带 code 的 Error。 */
+function throwHostResultCode(code) {
+	throw Object.assign(new Error(code), { code });
+}
+function toHostScheduleCreateSpec(value) {
+	const row = toRecord(value);
+	const spec = {
+		...typeof row.cwd === "string" ? { cwd: row.cwd } : {},
+		...typeof row.agentPreset === "string" ? { agentPreset: row.agentPreset } : {}
+	};
+	return Object.keys(spec).length > 0 ? spec : void 0;
+}
+/**
+* 交付目标投影。`session` 与 `new_once` 带 sessionId（后者是创建时 Host 预留
+* 的会话）；`new` 每次投递新建会话。`create` 省略时按 Host 默认。
+*/
+function toHostScheduleTarget(value) {
+	const target = toRecord(value);
+	const create = toHostScheduleCreateSpec(target.create);
+	if (target.kind === "session") return {
+		kind: "session",
+		sessionId: String(target.sessionId ?? "")
+	};
+	if (target.kind === "new_once") return {
+		kind: "new_once",
+		sessionId: String(target.sessionId ?? ""),
+		...create !== void 0 ? { create } : {}
+	};
+	return {
+		kind: "new",
+		...create !== void 0 ? { create } : {}
+	};
+}
+function toHostScheduleReceipt(value) {
+	const row = toRecord(value);
+	return {
+		scheduledAt: String(row.scheduledAt ?? ""),
+		deliveredAt: String(row.deliveredAt ?? ""),
+		messageId: String(row.messageId ?? ""),
+		targetSessionId: String(row.targetSessionId ?? "")
+	};
+}
+/**
+* timing 反向投影：DSH 存储记录用 camelCase（`afterSeconds`/`timeZone`），wire
+* 用 PROTOCOL.md 的 snake_case 嵌套结构。
+*
+* `at` 存储后只剩 `scheduledAt`（原始绝对时刻不是独立字段），因此用排定时刻
+* 回填——对 active 的一次性任务它就是目标时刻。
+*/
+function toHostScheduleTiming(row) {
+	switch (row.kind) {
+		case "after": return {
+			kind: "after",
+			after_seconds: positiveSeconds(row.afterSeconds)
+		};
+		case "every": return {
+			kind: "every",
+			every_seconds: positiveSeconds(row.everySeconds)
+		};
+		case "daily": return {
+			kind: "daily",
+			daily: localTimeInput(row)
+		};
+		case "weekly": return {
+			kind: "weekly",
+			weekly: {
+				...localTimeInput(row),
+				weekdays: Array.isArray(row.weekdays) ? row.weekdays.filter((day) => typeof day === "number") : []
+			}
+		};
+		case "cron": return {
+			kind: "cron",
+			cron: {
+				expression: String(row.expression ?? ""),
+				time_zone: String(row.timeZone ?? "")
+			}
+		};
+		case "rrule": return {
+			kind: "rrule",
+			rrule: String(row.rrule ?? "")
+		};
+		default: return {
+			kind: "at",
+			at: String(row.scheduledAt ?? "")
+		};
+	}
+}
+function localTimeInput(row) {
+	return {
+		time: String(row.time ?? ""),
+		time_zone: String(row.timeZone ?? "")
+	};
+}
+/** Host `ScheduleCatalogEntry` -> wire `schedule.host.task`（丢弃 involvedSessionIds）。 */
+function toHostScheduleTask(value) {
+	const row = toRecord(value);
+	return {
+		id: String(row.id ?? ""),
+		title: String(row.title ?? ""),
+		prompt: String(row.prompt ?? ""),
+		timing: toHostScheduleTiming(row),
+		target: toHostScheduleTarget(row.target),
+		status: row.status === "paused" || row.status === "ended" ? row.status : "active",
+		scheduledAt: String(row.scheduledAt ?? ""),
+		...typeof row.createdAt === "string" ? { createdAt: row.createdAt } : {},
+		...typeof row.updatedAt === "string" ? { updatedAt: row.updatedAt } : {},
+		...typeof row.executionActive === "boolean" ? { executionActive: row.executionActive } : {},
+		...typeof row.deliveryFloorEndsAt === "string" ? { deliveryFloorEndsAt: row.deliveryFloorEndsAt } : {},
+		...isRecord(row.lastDelivery) ? { lastDelivery: toHostScheduleReceipt(row.lastDelivery) } : {}
+	};
+}
+function toHostScheduleViewOutcome(value, id) {
+	const code = hostResultCode(value);
+	if (code === "schedule_not_found") return {
+		kind: "not-found",
+		id
+	};
+	if (code !== void 0) throwHostResultCode(code);
+	return {
+		kind: "task",
+		task: toHostScheduleTask(value)
+	};
+}
+function toHostScheduleEditOutcome(value, id) {
+	const code = hostResultCode(value);
+	if (code === "schedule_conflict") return {
+		kind: "conflict",
+		id
+	};
+	if (code === "schedule_not_found") return {
+		kind: "not-found",
+		id
+	};
+	if (code !== void 0) throwHostResultCode(code);
+	if (value.deleted === true) return {
+		kind: "deleted",
+		id: String(value.id ?? id)
+	};
+	return {
+		kind: "task",
+		task: toHostScheduleTask(value)
+	};
+}
+function toHostScheduleRunOutcome(value, id) {
+	const code = hostResultCode(value);
+	if (code === "schedule_execution_pending") return {
+		kind: "pending",
+		id
+	};
+	if (code === "schedule_not_found") return {
+		kind: "not-found",
+		id
+	};
+	if (code !== void 0) throwHostResultCode(code);
+	return {
+		kind: "task",
+		task: toHostScheduleTask(value)
+	};
+}
 async function readWorkspaceBaseline(controller) {
 	const abort = new AbortController();
 	const iterator = controller.follow(abort.signal)[Symbol.asyncIterator]();
@@ -8547,8 +11100,7 @@ async function projectModels(catalog, sessionId, list) {
 		failures: Array.isArray(value.failures) ? value.failures : []
 	};
 }
-//#endregion
-//#region src/report-service.ts
+// src/report-service.ts
 /**
 * The Typert receiver the Gateway resolves for the DeepPilot Bridge report.
 * Snapshot data stays non-secret; the token crosses the boundary only through
@@ -8594,8 +11146,7 @@ var DeepPilotReportService = class extends TypertRemoteService {
 		return this.pushTester();
 	}
 };
-//#endregion
-//#region src/report-wire.ts
+// src/report-wire.ts
 /** The npm package identity both contribution registrations claim. */
 const REPORT_REMOTE_PACKAGE = "dsh-deeppilot";
 /** Canonical `<namespace>/<method>` endpoint of the report Remote. */
@@ -8677,15 +11228,18 @@ function parseRemote(value) {
 	const publicURL = s.publicURL;
 	const authURL = s.authURL;
 	const message = s.message;
+	const tailscaleVersion = s.tailscaleVersion;
 	if (publicURL !== void 0 && typeof publicURL !== "string") reject("remote.publicURL");
 	if (authURL !== void 0 && typeof authURL !== "string") reject("remote.authURL");
 	if (message !== void 0 && typeof message !== "string") reject("remote.message");
+	if (tailscaleVersion !== void 0 && !isTailscaleVersion(tailscaleVersion)) reject("remote.tailscaleVersion");
 	return {
 		provider,
 		phase,
 		...typeof publicURL === "string" ? { publicURL } : {},
 		...typeof authURL === "string" ? { authURL } : {},
 		...typeof message === "string" ? { message } : {},
+		...typeof tailscaleVersion === "string" ? { tailscaleVersion } : {},
 		updatedAt: int(s, "updatedAt", "remote.updatedAt")
 	};
 }
@@ -8977,8 +11531,7 @@ const REPORT_HOST_CONTRIBUTION = {
 		}
 	]
 };
-//#endregion
-//#region src/report-remote.ts
+// src/report-remote.ts
 /**
 * Provide the report service and register its Remote descriptor. Rides an
 * optional `typert` inject: profiles without the web stack never activate it.
@@ -8990,8 +11543,7 @@ function applyReportRemote(ctx, snapshot, pairingStarter, deviceRevoker, deviceR
 		remoteCtx.effect(() => () => void unregister(), "dsh-deeppilot: report remote");
 	});
 }
-//#endregion
-//#region src/local-address.ts
+// src/local-address.ts
 function octetsOf(address) {
 	const octets = address.split(".").map(Number);
 	if (octets.length !== 4 || octets.some((value) => !Number.isInteger(value) || value < 0 || value > 255)) return null;
@@ -9042,8 +11594,7 @@ function localLANIPv4Addresses() {
 	candidates.sort((left, right) => priority(left.name) - priority(right.name) || left.name.localeCompare(right.name));
 	return [...new Set(candidates.map(({ address }) => address))];
 }
-//#endregion
-//#region src/update-check.ts
+// src/update-check.ts
 /**
 * Lightweight self-update check for dsh-deeppilot.
 *
@@ -9239,8 +11790,7 @@ var UpdateChecker = class {
 	/** No-op kept for API symmetry with the host lifecycle wiring. */
 	dispose() {}
 };
-//#endregion
-//#region src/phone-http.ts
+// src/phone-http.ts
 const CLIENT_IP_HEADER = "x-deeppilot-client-ip";
 function rejectUpgrade(socket, status, reason, retryAfterSeconds) {
 	const body = JSON.stringify({ error: reason });
@@ -9274,8 +11824,7 @@ function requestClientIdentity(req) {
 	}
 	return normalizedAddress(req.socket.remoteAddress) ?? "unknown";
 }
-//#endregion
-//#region src/lan-tls.ts
+// src/lan-tls.ts
 const LAN_TLS_COMMON_NAME = "dsh-deeppilot";
 const LAN_TLS_KEY_FILE = "key.pem";
 const LAN_TLS_CERT_FILE = "cert.pem";
@@ -9448,8 +11997,7 @@ async function writePrivate(path, contents) {
 		throw error;
 	}
 }
-//#endregion
-//#region src/index.ts
+// src/index.ts
 /**
 * dsh-deeppilot — data bridge between the DSH host and DeepPilot
 * clients. Owns independent, narrowly routed LAN (TLS-only, pinned by paired
@@ -9726,6 +12274,23 @@ function apply(ctx, options) {
 		return updated;
 	}, () => pushGateway.relayTest(), () => pushGateway.selfTest());
 	const state = {};
+	let pluginUpdater;
+	ctx.inject(["pluginManager"], (sub) => {
+		const manager = sub.pluginManager;
+		if (!supportsPluginUpdate(manager)) return;
+		const updater = new PluginUpdater({
+			manager,
+			currentVersion: SERVER_VERSION,
+			journalPath: join(dataDir, "update-journal.json")
+		});
+		pluginUpdater = updater;
+		if (state.bridge) setPluginUpdater(state.bridge, updater);
+		sub.effect(() => () => {
+			if (pluginUpdater !== updater) return;
+			pluginUpdater = void 0;
+			if (state.bridge) setPluginUpdater(state.bridge, void 0);
+		}, "deeppilot: optional plugin updater");
+	});
 	let pendingUpgrades = 0;
 	const authRateLimiter = new AuthRateLimiter();
 	const readJSONBody = async (req, maxBytes = 16384) => {
@@ -10057,8 +12622,10 @@ function apply(ctx, options) {
 			log("DSH session bridge unavailable: " + String(error), "warn");
 			return;
 		}
+		setPluginUpdateProbe(proxy, () => pluginUpdater !== void 0);
 		const bridge = new HostBridge(proxy, cfg.historyBufferMax, join(dataDir, "prompt-deliveries-v1.json"), join(dataDir, "schedule-mutations-v1.json"), join(dataDir, "fork-mutations-v1.json"), log);
 		bridge.setPushOutlet(pushGateway);
+		setPluginUpdater(bridge, pluginUpdater);
 		state.bridge = bridge;
 		bridge.start();
 		log("data plane active (mux + host streams)");
@@ -10080,7 +12647,6 @@ function apply(ctx, options) {
 		await diagnostics.dispose();
 	}, "deeppilot: process resources");
 }
-//#endregion
 export { Config, HostBridge, apply, inject, mayReceivePush, name, shouldPrunePushToken, shouldReEnrollRelayToken };
 
 //# sourceMappingURL=index.js.map