dsh-kingdom 1.0.0 → 2.0.0

package/lib/types/gui/console-app.d.ts

@@ -36,6 +36,7 @@ export declare const CONSOLE_APP_DEFAULT_COMMANDS: {
     readonly taskCreate: "plan";
     readonly assign: "assign";
     readonly start: "start";
+    readonly reconcile: "reconcile";
     readonly review: "review";
     readonly executionPause: "execution.pause";
     readonly executionResume: "execution.resume";
@@ -85,7 +86,7 @@ export interface ConsoleCommandEnvelope {
     name: string;
     payload: Record<string, unknown>;
 }
-export type ConsoleSection = 'overview' | 'organization' | 'tasks' | 'executions' | 'activity' | 'management' | 'ledger';
+export type ConsoleSection = 'today' | 'inbox' | 'map' | 'usage' | 'settings' | 'overview' | 'organization' | 'tasks' | 'executions' | 'activity' | 'management' | 'ledger';
 export declare const CONSOLE_APP_THEMES: readonly [{
     readonly id: "parchment";
     readonly label: "羊皮纸王国志";

package/lib/types/gui/contract.d.ts

@@ -45,7 +45,7 @@ export type ActorState = (typeof ACTOR_STATES)[number];
  */
 export type ActorActivity = 'plan' | 'read' | 'assign' | 'review' | 'rework' | 'accept' | 'execute' | null;
 /** 命令返回的稳定错误码。GUI 据此决定提示与可用按钮，不解析中文文案。 */
-export type KingdomErrorCode = 'KINGDOM_NOT_INITIALIZED' | 'ROLE_BINDING_MISSING' | 'UNAUTHORIZED_PRINCIPAL' | 'SESSION_AUTH_REQUIRED' | 'TERRITORY_MISSING' | 'TERRITORY_AMBIGUOUS' | 'TERRITORY_NOT_IN_KINGDOM' | 'TASK_NOT_FOUND' | 'TASK_NOT_IN_KINGDOM' | 'ILLEGAL_TASK_STATE' | 'INVALID_INPUT' | 'INVALID_DECISION' | 'REASON_REQUIRED' | 'WORKER_BINDING_INVALID' | 'WORKER_AMBIGUOUS' | 'TERRITORY_SUPERVISOR_MISSING' | 'TASK_OUT_OF_SCOPE' | 'EXECUTOR_UNAVAILABLE' | 'WORKER_EXECUTION_FAILED' | 'CLAIM_INTEGRITY_BLOCKED' | 'EXECUTION_NOT_FOUND' | 'ILLEGAL_EXECUTION_STATE';
+export type KingdomErrorCode = 'KINGDOM_NOT_INITIALIZED' | 'ROLE_BINDING_MISSING' | 'UNAUTHORIZED_PRINCIPAL' | 'SESSION_AUTH_REQUIRED' | 'TERRITORY_MISSING' | 'TERRITORY_AMBIGUOUS' | 'TERRITORY_NOT_IN_KINGDOM' | 'TASK_NOT_FOUND' | 'TASK_NOT_IN_KINGDOM' | 'ILLEGAL_TASK_STATE' | 'INVALID_INPUT' | 'INVALID_DECISION' | 'REASON_REQUIRED' | 'WORKER_BINDING_INVALID' | 'WORKER_AMBIGUOUS' | 'TERRITORY_SUPERVISOR_MISSING' | 'TASK_OUT_OF_SCOPE' | 'EXECUTOR_UNAVAILABLE' | 'WORKER_EXECUTION_FAILED' | 'CLAIM_INTEGRITY_BLOCKED' | 'EXECUTION_NOT_FOUND' | 'ILLEGAL_EXECUTION_STATE' | 'RECOVERY_REQUIRED';
 /**
  * v0.5.2（M1-B/P0-B）：GUI 写命令守卫。
  *
@@ -61,7 +61,7 @@ export declare function guiWriteGuard(authMode: string): {
     code: 'SESSION_AUTH_REQUIRED';
 };
 /** GUI 可以呈现为按钮的下一步动作。 */
-export type AllowedAction = 'assign' | 'start' | 'review:accept' | 'review:rework' | 'review:fail' | 'review:handoff' | 'execution:pause' | 'execution:resume' | 'execution:abort';
+export type AllowedAction = 'assign' | 'start' | 'reconcile' | 'review:accept' | 'review:rework' | 'review:fail' | 'review:handoff' | 'execution:pause' | 'execution:resume' | 'execution:abort';
 /** v0.9 S1：Projection 的可公开、可追溯来源引用。不得放入 raw payload/session/path。 */
 export type ProjectionSourceType = 'table-row' | 'event' | 'runtime-evidence' | 'derived-rule';
 export interface SourceRef {
@@ -214,12 +214,179 @@ export interface TaskProjectionData {
     } | null;
     actionAvailability: ActionAvailability[];
 }
+/** v1.2：工作台只是现有事实的有界投影，不创建待办/验收状态库。 */
+export interface WorkbenchQueue<T> {
+    totalCount: number;
+    items: T[];
+    truncated: boolean;
+}
+export interface WorkbenchActionItem {
+    id: string;
+    kind: string;
+    taskId: string | null;
+    territoryId: string | null;
+    title: string;
+    summary: string;
+    responsibility: 'OWNER' | 'CHANCELLOR' | 'SUPERVISOR' | 'UNDETERMINED';
+    responsibleBindingId: string | null;
+    /** 复用原有服务端许可；责任分类本身不授予调用权限。 */
+    actionAvailability: ActionAvailability[];
+    sourceRefs: SourceRef[];
+}
+export interface WorkbenchDeliveryItem {
+    taskId: string;
+    title: string;
+    status: string;
+    claim: ClaimView | null;
+    supervisorAccepted: boolean;
+    supervisorDecision: SupervisorDecisionView | null;
+    /** 当前没有人类验收事实；DONE 也不能填为人类已验收。 */
+    humanAcceptance: 'NOT_RECORDED';
+    updatedAt: string;
+    sourceRefs: SourceRef[];
+}
+export interface WorkbenchRoleItem {
+    bindingId: string;
+    roleType: string;
+    roleName: string;
+    sessionBound: boolean;
+    taskCount: number;
+    taskIds: string[];
+    taskIdsTruncated: boolean;
+    activeExecutionCount: number;
+    reviewTaskCount: number;
+    recoveringTaskCount: number;
+    sourceRefs: SourceRef[];
+}
+export interface WorkbenchUsageSummary {
+    scope: 'WORKER_DISPATCH_ONLY';
+    totalDispatches: number;
+    completeDispatches: number;
+    partialDispatches: number;
+    unavailableDispatches: number;
+    /** 实际执行中没有对应 Dispatch 的次数，可能包括 legacy 执行。 */
+    executionsWithoutDispatch: number;
+    coverage: 'COMPLETE' | 'PARTIAL' | 'UNAVAILABLE';
+    /** 仅累加完整、对应当前 Dispatch 的供应商报告；无完整报告返回 null。 */
+    reportedTotals: {
+        uncachedInputTokens: number;
+        outputTokens: number;
+        totalTokens: number;
+    } | null;
+    cost: null;
+    costStatus: 'NOT_RECORDED';
+    sourceRefs: SourceRef[];
+}
+export interface WorkbenchCostRuntime {
+    toolDisclosureMode: 'off' | 'pilot';
+    observerAvailable: boolean;
+}
+/** Public assembly measurements, without runtime/session references or prompt text. */
+export interface WorkbenchPromptCostView {
+    bindingId: string | null;
+    roleType: string;
+    toolsBefore: number | null;
+    toolsAfter: number | null;
+    toolsBytesBefore: number | null;
+    toolsBytesAfter: number | null;
+    sections: {
+        name: string;
+        bytes: number | null;
+    }[];
+    contexts: {
+        name: string;
+        bytes: number | null;
+    }[];
+    partsTruncated: boolean;
+    historyBytes: null;
+    tokenEstimate: null;
+    mode: 'off' | 'pilot' | 'UNKNOWN';
+    reasonCode: string | null;
+}
+export interface WorkbenchCostSummary {
+    additionalRoles: import('../core/cost.js').AdditionalRoleCostSummary | null;
+    budget: import('../core/budget.js').BudgetView | null;
+    prompts: WorkbenchQueue<WorkbenchPromptCostView>;
+    runtime: {
+        toolDisclosureMode: 'off' | 'pilot' | 'UNKNOWN';
+        observerAvailable: boolean | null;
+    };
+}
+export interface WorkbenchPlanReadiness {
+    ready: boolean;
+    reasonCode: string | null;
+    blockingTaskIds: string[];
+    acceptedResults: {
+        taskId: string;
+        attemptNo: number;
+        resultId: string;
+        resultDigest: string;
+        acceptEventId: string;
+    }[];
+}
+export interface WorkbenchPlanView {
+    planId: string;
+    parentTaskId: string;
+    title: string;
+    version: number;
+    digest: string;
+    state: 'PROPOSED' | 'ADOPTED' | 'STALE';
+    mode: 'EXPERT' | 'TEAM';
+    reason: string;
+    integratorBindingId: string;
+    integratorName: string;
+    parentStatus: string;
+    budgetTokens: number;
+    reserveTokens: number;
+    adoptedAt: string | null;
+    integration: WorkbenchPlanReadiness | null;
+    budget: import('../core/collaboration.js').PlanBudgetView | null;
+    items: {
+        key: string;
+        taskId: string;
+        title: string;
+        description: string;
+        acceptanceCriteria: string;
+        territoryId: string;
+        territoryName: string;
+        workerBindingId: string;
+        workerName: string;
+        access: 'READ_ONLY' | 'WRITE';
+        dependsOn: string[];
+        expectedArtifact: string;
+        status: string;
+        readiness: WorkbenchPlanReadiness | null;
+    }[];
+}
+export interface WorkbenchCollaborationView {
+    plans: WorkbenchQueue<WorkbenchPlanView>;
+    pendingAdoptionCount: number;
+    /** Held resources only; absence is not proof that a future start can acquire a workspace. */
+    resources: WorkbenchQueue<{
+        taskId: string;
+        attemptNo: number;
+        access: 'READ_ONLY' | 'WRITE';
+        state: string;
+        recovery: boolean;
+    }>;
+}
+export interface PersonalWorkbenchData {
+    ownerActions: WorkbenchQueue<WorkbenchActionItem>;
+    internalActions: WorkbenchQueue<WorkbenchActionItem>;
+    exceptions: WorkbenchQueue<WorkbenchActionItem>;
+    deliveries: WorkbenchQueue<WorkbenchDeliveryItem>;
+    roles: WorkbenchQueue<WorkbenchRoleItem>;
+    usage: WorkbenchUsageSummary;
+    cost: WorkbenchCostSummary;
+    collaboration: WorkbenchCollaborationView;
+}
 export interface ReadonlySnapshotProjection {
     overview: ProjectionEnvelope<OverviewProjectionData>;
     organization: ProjectionEnvelope<OrganizationProjectionData>;
     executions: ProjectionEnvelope<ExecutionProjectionData>;
     timeline: ProjectionEnvelope<TimelineItem[]>;
     attention: ProjectionEnvelope<AttentionItem[]>;
+    workbench: ProjectionEnvelope<PersonalWorkbenchData>;
 }
 /**
  * S1 只读派生所需的 Host-only 可验证上下文；缺任一项时 action 必须 fail-closed。
@@ -352,6 +519,7 @@ export interface CapabilityDecisionView {
 }
 /** Dispatch Record 投影（RECOVERING 必须如实显示，禁止显示成 Done）。 */
 export interface DispatchView {
+    usage?: import('../core/usage.js').DispatchUsageView | null;
     dispatchId: string;
     leaseId: string;
     executionId: string;
@@ -498,10 +666,16 @@ export interface TaskDetailView {
     executions: ExecutionView[];
     /** Supervisor 的历次裁定（从 events 还原，不存在 task_reviews 表）。 */
     reviews: SupervisorDecisionView[];
+    reviewsTruncated: boolean;
     relatedEvents: EventView[];
+    /** 先按本任务取事件再应用窗口，不受其他任务的事件数量影响。 */
+    relatedEventsTruncated: boolean;
+    humanAcceptance: 'NOT_RECORDED';
     allowedActions: AllowedAction[];
     /** v0.8：本任务的 Runtime Governance 投影（Lease/Decision/Dispatch）。 */
     governance: RuntimeGovernanceView;
+    /** Exact single-task attribution only; shared and unattributed units remain outside task totals. */
+    additionalRoleCost: import('../core/cost.js').AdditionalRoleCostSummary | null;
     /** v0.9 S1：Task Detail 的只读 Projection Envelope。 */
     projection: ProjectionEnvelope<TaskProjectionData>;
 }

package/lib/types/gui/control-contract.d.ts

@@ -8,7 +8,7 @@
  * from the direct `/kingdom gui` activation.
  */
 /** Commands that the loopback GUI may submit after control-session admission. */
-export declare const GUI_SESSION_COMMANDS: readonly ["plan", "assign", "start", "review", "execution.pause", "execution.resume", "execution.abort", "control.revoke"];
+export declare const GUI_SESSION_COMMANDS: readonly ["plan", "assign", "start", "reconcile", "review", "execution.pause", "execution.resume", "execution.abort", "control.revoke"];
 export type GuiSessionCommand = (typeof GUI_SESSION_COMMANDS)[number];
 /** Exact browser-controlled top-level fields for each executable command. */
 export declare const GUI_COMMAND_PAYLOAD_FIELDS: Record<GuiSessionCommand, readonly string[]>;

package/lib/types/gui/owner-control.d.ts

@@ -0,0 +1,45 @@
+import type { IncomingMessage, ServerResponse } from 'node:http';
+import type { OwnerControlCapability } from '../core/owner-control.js';
+import type { OwnerDecisionController, OwnerDecisionInput } from '../core/owner-window.js';
+import { type GuiControlRequestMeta } from './control-contract.js';
+export declare const OWNER_CONTROL_COOKIE = "dsh_kingdom_owner";
+export declare class OwnerTransportError extends Error {
+    readonly code: string;
+    readonly status: number;
+    constructor(code: string, message: string, status?: number);
+}
+export interface OwnerLocalControlOptions {
+    controller: OwnerDecisionController;
+    expectedOrigin: string | (() => string);
+    now?: () => number;
+}
+/** Transport references existing direct-human decisions; it never accepts an HTTP identity. */
+export declare class OwnerLocalControlManager {
+    private readonly options;
+    private readonly tickets;
+    private readonly windows;
+    private readonly now;
+    private closed;
+    constructor(options: OwnerLocalControlOptions);
+    private origin;
+    checkTransport(meta: GuiControlRequestMeta, mutation?: boolean, navigation?: boolean): void;
+    activate(capability: OwnerControlCapability, input: OwnerDecisionInput): {
+        launchTicket: string;
+        launchPath: '/owner';
+        decisionId: string;
+        expiresAt: string;
+        ttlMs: number;
+    };
+    redeem(ticket: string, meta: GuiControlRequestMeta): {
+        cookie: string;
+        maxAgeSeconds: number;
+    };
+    private window;
+    inspect(cookie: string | null, meta: GuiControlRequestMeta): Promise<unknown>;
+    receipt(cookie: string | null, meta: GuiControlRequestMeta, operationId: string, decisionId: string | null): unknown;
+    mutate(cookie: string | null, csrf: string | null, requestId: string | null, meta: GuiControlRequestMeta, action: 'prepare' | 'commit' | 'revoke', payload: Record<string, unknown>): Promise<unknown>;
+    private invalidate;
+    dispose(): void;
+}
+/** Runs before the Role Plane bearer/admission routes. Neither cookie upgrades the other. */
+export declare function handleOwnerRequest(req: IncomingMessage, res: ServerResponse, url: URL, manager: OwnerLocalControlManager | undefined): Promise<boolean>;

package/lib/types/gui/owner-ui.d.ts

@@ -0,0 +1,2 @@
+/** Self-contained management surface; all business values are rendered as text. */
+export declare function renderOwnerApp(nonce: string): string;

package/lib/types/gui/server.d.ts

@@ -1,5 +1,6 @@
 import type { CommandResultView, SnapshotView, TaskDetailView } from './contract.js';
 import type { EventView } from './contract.js';
+import { type OwnerLocalControlManager } from './owner-control.js';
 import { GuiControlBroker, GuiControlExecutionContext, type GuiControlReadContext } from './control-contract.js';
 export interface GuiServerHandlers {
     snapshot(readContext?: GuiControlReadContext): SnapshotView;
@@ -21,6 +22,8 @@ export interface GuiServerOptions {
     token?: string;
     allowOrigins?: string[];
     control?: GuiControlBroker;
+    /** Independent direct-human decision transport; never upgrades Role cookies. */
+    ownerControl?: OwnerLocalControlManager;
     onListening?(address: GuiServerAddress): void;
     onUnavailable?(error: Error): void;
     logger?: {

package/lib/types/gui/snapshot.d.ts

@@ -1,13 +1,4 @@
-/**
- * dsh-kingdom — DB 行 → GUI 视图的投影（Phase 3）。
- *
- * 全部是**纯函数**：给定 (库状态, now) 就唯一确定输出。
- * 因此 GUI 轮询即可拿到正确的表演状态，服务端不需要任何定时器或推送状态机。
- *
- * 再次强调边界：本文件只产出 `{ role, state, activity }` 这类语义，
- * 绝不产出贴图、clip、场景文件名——那些是 GUI 的 visual-map 的事。
- */
-import type { AllowedAction, ActionAvailability, AttentionItem, BindingView, ClaimView, EventView, ExecutionView, ProjectionEnvelope, ProjectionSecurityContext, ReadonlySnapshotProjection, RuntimeGovernanceView, SourceRef, StageActorView, TaskProjectionData, TaskDetailView, TaskView, TerritoryView, SnapshotView, TimelineItem, AuthView } from './contract.js';
+import type { AllowedAction, ActionAvailability, AttentionItem, BindingView, ClaimView, EventView, ExecutionView, ProjectionEnvelope, ProjectionSecurityContext, ReadonlySnapshotProjection, RuntimeGovernanceView, SourceRef, StageActorView, TaskProjectionData, TaskDetailView, TaskView, TerritoryView, SnapshotView, TimelineItem, AuthView, WorkbenchCostRuntime } from './contract.js';
 import { type EventRow, type ExecutionRow, type KingdomStore, type RoleBindingRow, type TaskRow, type TerritoryRow, type WorkerResultRow } from '../core/db.js';
 /** 对外暴露前统一限制数量与标识格式；不接受 session/raw payload/path 作为引用。 */
 export declare function boundedSourceRefs(refs: SourceRef[]): SourceRef[];
@@ -57,6 +48,7 @@ export interface ReadonlyProjectionOptions {
     eventLimit?: number;
     nowMs?: number;
     security?: ProjectionSecurityContext;
+    costRuntime?: WorkbenchCostRuntime;
 }
 /** S1 顶层只读 Projection；没有 kingdom 时显式返回 UNKNOWN/空数据。 */
 export declare function buildReadonlySnapshotProjection(store: KingdomStore, kingdomId: string | null, options?: ReadonlyProjectionOptions): ReadonlySnapshotProjection;
@@ -68,6 +60,7 @@ export interface SnapshotOptions {
     nowMs?: number;
     /** 缺少完整主体/scope/Host context 时 action 保持 fail-closed。 */
     security?: ProjectionSecurityContext;
+    costRuntime?: WorkbenchCostRuntime;
 }
 export declare function buildSnapshot(store: KingdomStore, options: SnapshotOptions): SnapshotView;
 export declare function buildTaskDetail(store: KingdomStore, kingdomId: string, taskId: string, options?: {

package/lib/types/gui/visual-assets.d.ts

@@ -0,0 +1,27 @@
+/** Decorative icons must be paired with visible text or an accessible control name. */
+export declare const GUI_ICONS: Readonly<{
+    map: string;
+    management: string;
+    ledger: string;
+    refresh: string;
+    chancellor: string;
+    supervisor: string;
+    worker: string;
+    plan: string;
+    assign: string;
+    next: string;
+    run: string;
+    review: string;
+    accept: string;
+    lock: string;
+    error: string;
+    idle: string;
+    unknown: string;
+    empty: string;
+}>;
+/** Original gate-and-organization brand mark; the adjacent wordmark supplies its name. */
+export declare const KINGDOM_BRAND_SVG = "<svg class=\"kingdom-brand-mark\" xmlns=\"http://www.w3.org/2000/svg\" width=\"48\" height=\"48\" viewBox=\"0 0 48 48\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\" focusable=\"false\">\n  <path d=\"M9 31V12h6v5h6v-5h6v5h6v-5h6v19H9Z\" />\n  <path d=\"M19 31v-7a5 5 0 0 1 10 0v7M24 31v5M12 36h24M12 36v3M36 36v3\" />\n  <circle cx=\"12\" cy=\"41\" r=\"2\" /><circle cx=\"24\" cy=\"38\" r=\"2\" /><circle cx=\"36\" cy=\"41\" r=\"2\" />\n</svg>";
+/** Original decorative empty state. It deliberately contains no role or binding claims. */
+export declare const EMPTY_STATE_SVG = "<svg class=\"empty-state-art\" xmlns=\"http://www.w3.org/2000/svg\" width=\"240\" height=\"128\" viewBox=\"0 0 240 128\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\" focusable=\"false\">\n  <path d=\"M84 67V27h12v9h16v-9h16v9h16v-9h12v40H84Z\" />\n  <path d=\"M109 67V53a11 11 0 0 1 22 0v14M76 67h88\" />\n  <path d=\"M120 74v10M62 84h116M62 84v12M120 84v12M178 84v12\" stroke-dasharray=\"4 5\" opacity=\".55\" />\n  <rect x=\"43\" y=\"96\" width=\"38\" height=\"20\" rx=\"6\" stroke-dasharray=\"4 5\" opacity=\".65\" />\n  <rect x=\"101\" y=\"96\" width=\"38\" height=\"20\" rx=\"6\" stroke-dasharray=\"4 5\" opacity=\".65\" />\n  <rect x=\"159\" y=\"96\" width=\"38\" height=\"20\" rx=\"6\" stroke-dasharray=\"4 5\" opacity=\".65\" />\n</svg>";
+/** Static governance guidance, never a projection of current task progress. */
+export declare const GOVERNANCE_FLOW_HTML: string;

package/lib/types/gui/visual-system.d.ts

@@ -0,0 +1,2 @@
+/** Final presentation layer; the existing console owns all state and behavior. */
+export declare const CONSOLE_DESIGN_CSS: string;

package/lib/types/gui/workbench-ui.d.ts

@@ -0,0 +1,5 @@
+/** Personal workbench presentation. No model calls or authority are created here. */
+export declare const WORKBENCH_CSS: string;
+export declare const WORKBENCH_HTML: string;
+/** Injected into the existing console closure; all Host text uses append/textContent. */
+export declare const WORKBENCH_SCRIPT: string;

package/lib/types/gui/workbench.d.ts

@@ -0,0 +1,33 @@
+import type { ActionAvailability, ExecutionView, PersonalWorkbenchData, RuntimeGovernanceView, SupervisorDecisionView, TaskView, WorkbenchUsageSummary, WorkbenchCostSummary, WorkbenchCollaborationView } from './contract.js';
+export declare const WORKBENCH_ITEM_LIMIT = 40;
+/** All inputs are public projections. This module has no Store, command or model access. */
+export interface PersonalWorkbenchInput {
+    kingdomPresent: boolean;
+    bindings: {
+        bindingId: string;
+        roleType: string;
+        roleName: string;
+        status: string;
+        sessionBound: boolean;
+    }[];
+    territories: {
+        territoryId: string;
+        name: string;
+        status: string;
+        supervisorBindingId: string | null;
+    }[];
+    tasks: {
+        task: Pick<TaskView, 'taskId' | 'territoryId' | 'title' | 'status' | 'assignedBindingId' | 'latestClaim' | 'latestExecution' | 'updatedAt'>;
+        actionAvailability: ActionAvailability[];
+        latestReview: SupervisorDecisionView | null;
+        claimExecutionMismatch: boolean;
+    }[];
+    executions: Pick<ExecutionView, 'executionId' | 'taskId' | 'workerBindingId' | 'state'>[];
+    governance: RuntimeGovernanceView;
+    cost?: WorkbenchCostSummary;
+    collaboration?: WorkbenchCollaborationView;
+}
+/** Sum only provider reports whose identity and numeric shape match this Dispatch. */
+export declare function buildWorkbenchUsage(input: Pick<PersonalWorkbenchInput, 'governance' | 'executions'>): WorkbenchUsageSummary;
+/** Derive current work; past DENIED and ordinary in-flight receipts are not current incidents. */
+export declare function buildPersonalWorkbench(input: PersonalWorkbenchInput): PersonalWorkbenchData;

package/lib/types/index.d.ts

@@ -25,6 +25,7 @@
  */
 import type { Context } from '@deepseek-ai/cordis';
 import z from '@deepseek-ai/schemastery';
+import { type ToolDisclosureConfig } from './capability/tool-disclosure.js';
 import { type AdminAuth, type ExecutionProfileV1 } from './core/binding.js';
 import type { KingdomStore, RoleBindingRow, TerritoryRow } from './core/db.js';
 import type { CommandResult } from '@deepseek-ai/dsh-commands';
@@ -32,6 +33,7 @@ import { type TargetSessionClassification } from './core/owner-binding-intent.js
 export declare const name = "dsh-kingdom";
 export declare const inject: string[];
 export interface Config {
+    toolDisclosure?: ToolDisclosureConfig;
     kingdomName: string;
     ownerName: string;
     workerProvider: string;
@@ -48,6 +50,10 @@ export interface Config {
  * functions are not Config, HTTP, GUI payload, or persisted-state inputs.
  */
 export interface ApplyDependencies {
+    governedPolling?: {
+        intervalMs: number;
+        maxPolls: number;
+    };
     openLocalConsole?: (url: string) => boolean;
     loadS4Policy?: () => Promise<{
         sandboxPolicy: {
@@ -121,6 +127,19 @@ export declare function resolveTrustedToolSession(execution: KingdomToolExecutio
 /** Validate a direct Owner Slash target without requiring current-initiator scope. */
 export declare function validateLiveDirectSession(sessionId: string, seam: KingdomDshRegistrySeam): LiveDirectSessionResolution;
 export declare const Config: z<Schemastery.ObjectS<{
+    toolDisclosure: z<Schemastery.ObjectS<{
+        mode: z<"off" | "pilot", "off" | "pilot">;
+        residentTools: z<string[], string[]>;
+        phaseTools: z<string[], string[]>;
+        maxResults: z<number, number>;
+        maxResultBytes: z<number, number>;
+    }>, Schemastery.ObjectT<{
+        mode: z<"off" | "pilot", "off" | "pilot">;
+        residentTools: z<string[], string[]>;
+        phaseTools: z<string[], string[]>;
+        maxResults: z<number, number>;
+        maxResultBytes: z<number, number>;
+    }>>;
     kingdomName: z<string, string>;
     ownerName: z<string, string>;
     /** Worker 执行用的 subagent provider（dsh base bundle 默认注册 spawn / fork）。 */
@@ -130,7 +149,7 @@ export declare const Config: z<Schemastery.ObjectS<{
      * 设为非零值即启用，只绑定 127.0.0.1。
      */
     guiPort: z<number, number>;
-    /** 可选 bearer token；设置后 GUI 所有请求都要带 Authorization 头。 */
+    /** Role GUI 可选 bearer；独立 Owner 路由使用其直接激活的短期凭据，不升级 Role 权限。 */
     guiToken: z<string, string>;
     /** CORS 允许的 Origin 列表；默认放开（服务只绑本机回环）。 */
     guiAllowOrigins: z<string[], string[]>;
@@ -140,7 +159,7 @@ export declare const Config: z<Schemastery.ObjectS<{
      * **不验证调用者就是该角色** —— snapshot 会如实报 `trustLevel: local-demo`。
      * `session-bound` 额外要求调用方 session 与 binding.session_id 一致。
      */
-    authMode: z<"session-bound" | "declarative", "session-bound" | "declarative">;
+    authMode: z<"declarative" | "session-bound", "declarative" | "session-bound">;
     /**
      * v0.8（M3-S2 v6）：允许对已有 v3 库执行 Schema v4 迁移。
      * **默认 false**：正式 kingdom.db 受 Formal DB Migration Gate 保护——
@@ -148,6 +167,19 @@ export declare const Config: z<Schemastery.ObjectS<{
      */
     migrateV4: z<boolean, boolean>;
 }>, Schemastery.ObjectT<{
+    toolDisclosure: z<Schemastery.ObjectS<{
+        mode: z<"off" | "pilot", "off" | "pilot">;
+        residentTools: z<string[], string[]>;
+        phaseTools: z<string[], string[]>;
+        maxResults: z<number, number>;
+        maxResultBytes: z<number, number>;
+    }>, Schemastery.ObjectT<{
+        mode: z<"off" | "pilot", "off" | "pilot">;
+        residentTools: z<string[], string[]>;
+        phaseTools: z<string[], string[]>;
+        maxResults: z<number, number>;
+        maxResultBytes: z<number, number>;
+    }>>;
     kingdomName: z<string, string>;
     ownerName: z<string, string>;
     /** Worker 执行用的 subagent provider（dsh base bundle 默认注册 spawn / fork）。 */
@@ -157,7 +189,7 @@ export declare const Config: z<Schemastery.ObjectS<{
      * 设为非零值即启用，只绑定 127.0.0.1。
      */
     guiPort: z<number, number>;
-    /** 可选 bearer token；设置后 GUI 所有请求都要带 Authorization 头。 */
+    /** Role GUI 可选 bearer；独立 Owner 路由使用其直接激活的短期凭据，不升级 Role 权限。 */
     guiToken: z<string, string>;
     /** CORS 允许的 Origin 列表；默认放开（服务只绑本机回环）。 */
     guiAllowOrigins: z<string[], string[]>;
@@ -167,7 +199,7 @@ export declare const Config: z<Schemastery.ObjectS<{
      * **不验证调用者就是该角色** —— snapshot 会如实报 `trustLevel: local-demo`。
      * `session-bound` 额外要求调用方 session 与 binding.session_id 一致。
      */
-    authMode: z<"session-bound" | "declarative", "session-bound" | "declarative">;
+    authMode: z<"declarative" | "session-bound", "declarative" | "session-bound">;
     /**
      * v0.8（M3-S2 v6）：允许对已有 v3 库执行 Schema v4 迁移。
      * **默认 false**：正式 kingdom.db 受 Formal DB Migration Gate 保护——

package/lib/types/runtime-cost-observer.d.ts

@@ -0,0 +1,22 @@
+import type { KingdomStore } from './core/db.js';
+export interface RuntimeCostHost {
+    on?(event: string, callback: (...args: any[]) => any): () => void;
+    get(name: string): unknown;
+}
+export interface DisclosureCostMeta {
+    toolsBefore: number;
+    toolsAfter: number;
+    toolsBytesBefore: number;
+    toolsBytesAfter: number;
+    mode: 'off' | 'pilot';
+    reasonCode: string | null;
+}
+/** Integration observer: Runtime evidence is neutral; all role attribution comes from Core bindings. */
+export declare function installRuntimeCostObservers(host: RuntimeCostHost, store: KingdomStore, input: {
+    runtimeInstanceRef: string;
+    mode: 'off' | 'pilot';
+    disclosureMeta?: (assembly: object) => DisclosureCostMeta | undefined;
+}): {
+    available: boolean;
+    dispose(): void;
+};

package/lib/types/worker/collaboration.d.ts

@@ -0,0 +1,35 @@
+import type { KingdomStore } from '../core/db.js';
+import { type CommandContext } from '../core/task-service.js';
+export interface AdvanceCollaborationInput {
+    planId: string;
+    version: number;
+    digest: string;
+    strategy: 'SERIAL' | 'PARALLEL';
+    items: {
+        taskId: string;
+        grant: Record<string, boolean>;
+    }[];
+}
+export interface CollaborationStartInput {
+    taskId: string;
+    grantJson: string;
+    sandboxMode: 'read-only' | 'workspace-write';
+}
+export interface CollaborationStartResult {
+    ok: boolean;
+    message: string;
+}
+export interface AdvanceCollaborationResult {
+    ok: boolean;
+    planId: string;
+    startedTaskIds: string[];
+    failedTaskId: string | null;
+    reasonCode: string | null;
+    results: {
+        taskId: string;
+        ok: boolean;
+        message: string;
+    }[];
+}
+/** One bounded batch, using current Supervisor authority and the existing governed start callback. */
+export declare function advanceCollaboration(store: KingdomStore, currentContext: () => CommandContext | null, raw: AdvanceCollaborationInput, start: (input: CollaborationStartInput) => Promise<CollaborationStartResult>): Promise<AdvanceCollaborationResult>;

package/lib/types/worker/executor.d.ts

@@ -10,6 +10,7 @@
  * 本文件**零 dsh 依赖**：只有类型和纯函数，因此 Task Core 与自测都不需要活的 DSH。
  */
 import type { TaskRow } from '../core/db.js';
+import type { CollaborationReadiness } from '../core/collaboration.js';
 /**
  * Worker 交回的结构化结果（受 subagent outputSchema 约束）。
  *
@@ -39,6 +40,8 @@ export interface WorkerContext {
     prevResultSummary?: string;
     /** Supervisor 的 REWORK 理由（仅 REWORK 时存在）。 */
     reworkReason?: string;
+    /** Only this task's accepted dependency references; no broadcast conversation history. */
+    collaboration?: CollaborationReadiness;
 }
 /**
  * 一次 Worker 执行的结果，只有两种：

package/lib/types/worker/governed-executor.d.ts

@@ -13,6 +13,8 @@ import type { RuntimeAdapter, RuntimeTrustFence } from '../adapter/contract.js';
 import { type CleanupReceipt } from '../dispatch/service.js';
 import type { GrantMap } from '../capability/resolver.js';
 export interface GovernedTaskInput {
+    /** Internal current-principal check; never supplied by a model or browser. */
+    stillAuthorized?: () => boolean;
     store: KingdomStore;
     adapter: RuntimeAdapter;
     kingdomId: string;