hiwork-core 0.0.10 → 0.0.11

package/lib/ai-router-client.js

@@ -12,6 +12,15 @@ const ME_COST_ESTIMATE_PATH = '/api/me/cost-estimate';
 /** 每日一句端点：当日条目（东八区取模轮换）与换一句（排除当前条目的随机）。 */
 const ME_DAILY_QUOTE_PATH = '/api/me/daily-quote';
 const ME_DAILY_QUOTE_RANDOM_PATH = '/api/me/daily-quote/random';
+/**
+ * MCP 分发的自助端点（管理员在 ai-hub 登记 MCP、下发给全员或某人后，员工端从这里拉清单）。
+ * 两条都在网关 `/api/me` 会话组下，鉴权是 `SessionAuth`（只读 Cookie）。
+ *
+ * 清单响应里**没有任何令牌**：客户端拿断言去 MCP 服务自己换 per-user 令牌，
+ * 网关全程不经手明文，所以这里也没有「查看我的令牌」这类端点。
+ */
+const ME_MCP_ASSIGNMENTS_PATH = '/api/me/mcp-assignments';
+const ME_MCP_ASSERTIONS_PATH = '/api/me/mcp-assertions';
 /** 授权请求默认值：桌面端 client_id 与自定义协议回调地址（网关侧精确匹配）。 */
 const DEFAULT_CLIENT_ID = 'hiwork-desktop';
 const DEFAULT_REDIRECT_URI = 'hiwork://auth/callback';
@@ -208,6 +217,52 @@ export class AiRouterClient {
             throw new GatewayError('GATEWAY_UNREACHABLE', `网关返回错误（HTTP ${res.status}）`, res.status);
         return await parseMeJson(res);
     }
+    /**
+     * GET /api/me/mcp-assignments：管理员下发给当前账号的 MCP 清单。
+     *
+     * 不复用 {@link getMeJson}：那条路径把 403 映射成 `NO_KEY_ASSIGNED`（「尚未被分配
+     * 虚拟 KEY」），而本端点的鉴权只有会话——一个还没被分配 Key 的账号照样应该有
+     * 清单（分 MCP 与分 Key 是两件事）。沿用它的 403 文案会把「没有 Key」错报成原因。
+     */
+    async getMyMcpAssignments(sessionCookie) {
+        const res = await this.requestOrUnreachable(ME_MCP_ASSIGNMENTS_PATH, { method: 'GET', sessionCookie });
+        if (res.status === 401)
+            throw new GatewayError('SESSION_EXPIRED', '网关会话已过期，请重新登录', 401);
+        // 403 / 5xx / 反代错误页一律「网关不可达」：这条路径没有需要单独解释的拒绝语义。
+        if (!res.ok)
+            throw new GatewayError('GATEWAY_UNREACHABLE', `网关返回错误（HTTP ${res.status}）`, res.status);
+        return await parseMeJson(res);
+    }
+    /**
+     * POST /api/me/mcp-assertions：为某条分配签一张 120 秒断言。
+     *
+     * 三种拒绝各有确定含义（服务端 handler 的 404/409/503），必须分开映射——否则
+     * 客户端只会看到一句「取断言失败」，既分不清「被撤销了」（该卸连接）还是
+     * 「服务停用了」（该重试）还是「部署没配私钥」（找管理员）。
+     */
+    async issueMyMcpAssertion(sessionCookie, assignmentId) {
+        const res = await this.requestOrUnreachable(ME_MCP_ASSERTIONS_PATH, {
+            method: 'POST',
+            sessionCookie,
+            body: { assignmentId },
+        });
+        if (res.status === 401)
+            throw new GatewayError('SESSION_EXPIRED', '网关会话已过期，请重新登录', 401);
+        // 400 与 404 合并成同一个 code：对客户端而言两者的行为一致（这条 id 用不了了，
+        // 只能等下一次成功同步），文案也不该暗示「是你发错了 id」。
+        if (res.status === 400 || res.status === 404) {
+            throw new GatewayError('MCP_ASSIGNMENT_GONE', '这条分配已失效，稍后同步会重新核对', res.status);
+        }
+        if (res.status === 409) {
+            throw new GatewayError('MCP_NOT_DELIVERABLE', '该 MCP 服务当前不可下发，请联系管理员', 409);
+        }
+        if (res.status === 503) {
+            throw new GatewayError('MCP_ASSERTION_DISABLED', '本部署未启用 MCP 断言签发，请联系管理员', 503);
+        }
+        if (!res.ok)
+            throw new GatewayError('GATEWAY_UNREACHABLE', `网关返回错误（HTTP ${res.status}）`, res.status);
+        return await parseMeJson(res);
+    }
     /**
      * /api/me 自助端点的 GET 公共路径：网络异常 → GATEWAY_UNREACHABLE，
      * 401/403/400 映射为稳定 code，响应体非 JSON 时不把原文带进异常。

package/lib/client.js

@@ -2812,6 +2812,198 @@ function mountFeatureCenter(options) {
 // src/client/contracts.ts
 var HIWORK_FEATURE_CENTER_SERVICE = "hiworkFeatureCenter";
 
+// src/client/managed-mcp.ts
+var MANAGED_MCP_CHANNEL = "/hiwork-managed-mcp";
+var MANAGED_MCP_STALE_MS = 5 * 6e4;
+var ManagedMcpRpcError = class extends Error {
+  constructor(code, message) {
+    super(message);
+    this.code = code;
+    this.name = "ManagedMcpRpcError";
+  }
+};
+function unwrapManagedMcpResult(value) {
+  if (typeof value !== "object" || value === null || !("ok" in value)) {
+    throw new ManagedMcpRpcError("internal", "MCP \u6E05\u5355\u4E3B\u673A\u8FD4\u56DE\u4E86\u65E0\u6548\u54CD\u5E94\u3002");
+  }
+  const result = value;
+  if (result.ok === true) return result.value;
+  if (result.ok === false) {
+    const code = typeof result.error?.code === "string" ? result.error.code : "internal";
+    const message = typeof result.error?.message === "string" && result.error.message.trim() !== "" ? result.error.message : "MCP \u6E05\u5355\u6682\u65F6\u65E0\u6CD5\u83B7\u53D6\uFF0C\u8BF7\u7A0D\u540E\u91CD\u8BD5";
+    throw new ManagedMcpRpcError(code, message);
+  }
+  throw new ManagedMcpRpcError("internal", "MCP \u6E05\u5355\u4E3B\u673A\u8FD4\u56DE\u4E86\u65E0\u6548\u54CD\u5E94\u3002");
+}
+function toSnapshot(value) {
+  if (typeof value !== "object" || value === null) {
+    throw new ManagedMcpRpcError("internal", "MCP \u6E05\u5355\u4E3B\u673A\u8FD4\u56DE\u4E86\u65E0\u6548\u54CD\u5E94\u3002");
+  }
+  const record = value;
+  const rawList = record["assignments"];
+  if (!Array.isArray(rawList)) {
+    throw new ManagedMcpRpcError("internal", "MCP \u6E05\u5355\u4E3B\u673A\u8FD4\u56DE\u4E86\u65E0\u6548\u54CD\u5E94\u3002");
+  }
+  const assignments = [];
+  for (const item of rawList) {
+    const normalized = toAssignment(item);
+    if (normalized !== void 0) assignments.push(normalized);
+  }
+  const lastError = record["lastError"];
+  const snapshot = {
+    revision: typeof record["revision"] === "number" ? record["revision"] : 0,
+    fetchedAt: typeof record["fetchedAt"] === "string" ? record["fetchedAt"] : "",
+    assignments,
+    stale: record["stale"] === true
+  };
+  if (typeof lastError === "object" && lastError !== null) {
+    const detail = lastError;
+    snapshot.lastError = {
+      code: typeof detail.code === "string" ? detail.code : "internal",
+      message: typeof detail.message === "string" ? detail.message : "MCP \u6E05\u5355\u6682\u65F6\u65E0\u6CD5\u83B7\u53D6\uFF0C\u8BF7\u7A0D\u540E\u91CD\u8BD5"
+    };
+  }
+  return snapshot;
+}
+function toAssignment(value) {
+  if (typeof value !== "object" || value === null) return void 0;
+  const record = value;
+  const authRaw = record["auth"];
+  const auth = typeof authRaw === "object" && authRaw !== null ? authRaw : void 0;
+  const assignmentId = text(record["assignmentId"]);
+  const serverName = text(record["serverName"]);
+  const url = text(record["url"]);
+  const kind = text(auth?.["kind"]);
+  const mintUrl = text(auth?.["mintUrl"]);
+  if (assignmentId === void 0 || serverName === void 0 || url === void 0 || kind === void 0 || mintUrl === void 0) {
+    return void 0;
+  }
+  return {
+    assignmentId,
+    revision: typeof record["revision"] === "number" ? record["revision"] : 0,
+    slug: text(record["slug"]) ?? serverName,
+    displayName: text(record["displayName"]) ?? serverName,
+    serverName,
+    transport: text(record["transport"]) ?? "",
+    url,
+    extraHeaders: stringMap(record["extraHeaders"]),
+    auth: { kind, mintUrl, revokeUrl: text(auth?.["revokeUrl"]) ?? "" },
+    updatedAt: text(record["updatedAt"]) ?? ""
+  };
+}
+function text(value) {
+  return typeof value === "string" && value.trim() !== "" ? value : void 0;
+}
+function stringMap(raw) {
+  if (typeof raw !== "object" || raw === null || Array.isArray(raw)) return {};
+  const out = {};
+  for (const [key, value] of Object.entries(raw)) {
+    if (typeof value === "string") out[key] = value;
+  }
+  return out;
+}
+var ManagedMcpStore = class {
+  constructor(rpc) {
+    this.rpc = rpc;
+  }
+  current;
+  listeners = /* @__PURE__ */ new Set();
+  inFlight;
+  /** 本地镜像（同步）。从没成功同步过返回 undefined。**不要拿它做删除决策**（见文件头）。 */
+  snapshot() {
+    return this.current;
+  }
+  /** 本地镜像是否已经陈旧（或从未同步过）。 */
+  isStale(ttlMs = MANAGED_MCP_STALE_MS, now = Date.now()) {
+    if (this.current === void 0 || this.current.fetchedAt === "") return true;
+    const fetchedAt = Date.parse(this.current.fetchedAt);
+    if (Number.isNaN(fetchedAt)) return true;
+    return now - fetchedAt >= ttlMs;
+  }
+  /**
+   * 强制同步一次并返回**刚拉到的**清单。
+   *
+   * 返回值（而不是让人随后去读 `snapshot()`）是刻意的：只有这个返回值保证「这一次
+   * 网络请求成功了」，用它做删除决策才是安全的；读镜像可能读到上一次的结果。
+   * 失败时抛错且**不动镜像**——调用方据此保持现有的连接一条不删。
+   */
+  async refresh(signal) {
+    return await this.dedupe(async () => {
+      const raw = await this.rpc.call(MANAGED_MCP_CHANNEL, "refresh", {}, signal);
+      return this.adopt(unwrapManagedMcpResult(raw));
+    });
+  }
+  /**
+   * 取一份清单，**能用 Host 的预热缓存就用**（Host 后台每 30 分钟拉一次）。
+   *
+   * 与 {@link refresh} 的分工：这里是「启动时先把界面填上」的便宜入口——命中缓存时
+   * 一次网络请求都不发；Host 缓存也是冷的才会真的去拉。返回值仍保证是「某一次成功
+   * 拉取的结果」，但**可能比服务端现状旧**（最旧不超过 Host 的上一次成功拉取），
+   * 所以调用方按 `stale` / `isStale()` 判定它够不够权威，不够就再 `refresh()` 一次。
+   */
+  async warm(signal) {
+    return await this.dedupe(async () => {
+      const raw = await this.rpc.call(MANAGED_MCP_CHANNEL, "snapshot", {}, signal);
+      return this.adopt(unwrapManagedMcpResult(raw));
+    });
+  }
+  /** 取一张新鲜断言（120 秒）。失败抛错；本层不缓存、不换令牌。 */
+  async assertion(assignmentId, signal) {
+    const raw = await this.rpc.call(MANAGED_MCP_CHANNEL, "assertion", { assignmentId }, signal);
+    const value = unwrapManagedMcpResult(raw);
+    if (typeof value !== "object" || value === null) {
+      throw new ManagedMcpRpcError("internal", "MCP \u6E05\u5355\u4E3B\u673A\u8FD4\u56DE\u4E86\u65E0\u6548\u54CD\u5E94\u3002");
+    }
+    const record = value;
+    const assertion = text(record["assertion"]);
+    const mintUrl = text(record["mintUrl"]);
+    if (assertion === void 0 || mintUrl === void 0) {
+      throw new ManagedMcpRpcError("internal", "MCP \u6E05\u5355\u4E3B\u673A\u8FD4\u56DE\u4E86\u65E0\u6548\u54CD\u5E94\u3002");
+    }
+    return {
+      assertion,
+      mintUrl,
+      revokeUrl: text(record["revokeUrl"]) ?? "",
+      expiresAt: text(record["expiresAt"]) ?? "",
+      serverName: text(record["serverName"]) ?? ""
+    };
+  }
+  /** 订阅镜像变化（连接器域据此重渲染 / 重排同步）。返回退订函数。 */
+  subscribe(listener) {
+    this.listeners.add(listener);
+    return () => {
+      this.listeners.delete(listener);
+    };
+  }
+  /** 清空镜像（登出 / 换账号：清单是按人的，留着会串号）。 */
+  clear() {
+    this.current = void 0;
+    this.emit();
+  }
+  /**
+   * 并发去重：`warm` 与 `refresh` 撞在一起（启动同步与定时同步常常同拍）时共用一次
+   * 请求，且**共用同一个返回值**——两边对「这一次拉到了什么」的判断必须一致。
+   */
+  async dedupe(task) {
+    if (this.inFlight !== void 0) return await this.inFlight;
+    const promise = task();
+    this.inFlight = promise;
+    return await promise.finally(() => {
+      this.inFlight = void 0;
+    });
+  }
+  /** 采纳一份成功响应：写镜像 + 通知订阅者（失败路径永远不会走到这里）。 */
+  adopt(value) {
+    const snapshot = toSnapshot(value);
+    this.current = snapshot;
+    this.emit();
+    return snapshot;
+  }
+  emit() {
+    for (const listener of [...this.listeners]) listener();
+  }
+};
+
 // src/client/index.ts
 var inject = ["slots", "locale", "remote", "remote.credentials", "settingsScope", "connection"];
 var INTERACTION_STYLE_ID = "hiwork-core-interaction-styles";
@@ -2849,6 +3041,7 @@ function apply(ctx) {
   const usage = new UsageDataStore(connection.rpc);
   const sessionCost = new SessionCostStore(connection.rpc);
   const dailyQuotes = new DailyDataStore(connection.rpc);
+  const managedMcp = new ManagedMcpStore(connection.rpc);
   const appVersion = createAppVersion(connection.rpc);
   ctx.slots.inject("settings.section", () => ctx.slots.register({
     name: "settings.section",
@@ -2866,6 +3059,7 @@ function apply(ctx) {
   ctx.effect(() => observeAccountChange(controller.inject().hooks.aiRouterCard, () => {
     usage.clear();
     sessionCost.clear();
+    managedMcp.clear();
   }), "hiwork-core: \u7528\u91CF\u7F13\u5B58\u968F\u8D26\u53F7 / Key \u53D8\u5316\u6E05\u7A7A");
   ctx.effect(() => observeAboutNavIcon(), "hiwork-core: about nav icon");
   ctx.slots.inject("sidebar.brand.mark", () => ctx.slots.register({
@@ -2884,9 +3078,9 @@ function apply(ctx) {
   }, UserBadge));
   ctx.effect(() => mountLoginGate(scope, storeCredential), "hiwork-core: login gate");
   ctx.effect(() => observeHeroDecorations(document, dailyQuotes), "hiwork-core: hero decorations");
-  installFeatureCenter(ctx);
+  installFeatureCenter(ctx, managedMcp);
 }
-function installFeatureCenter(ctx) {
+function installFeatureCenter(ctx, managedMcp) {
   const featureRegistry = createFeatureRegistry();
   let center;
   const sessions = ctx.get("sessions");
@@ -2905,6 +3099,16 @@ function installFeatureCenter(ctx) {
         return;
       }
       featureRegistry.openNative();
+    },
+    // 受管 MCP 面：连接器域（hiwork-capabilities）按这个成员判断「有没有这个能力」，
+    // 老 core 上它是 undefined，能力中心照常工作、只是没有受管连接。
+    managedMcp: {
+      snapshot: () => managedMcp.snapshot(),
+      isStale: (ttlMs) => managedMcp.isStale(ttlMs),
+      warm: async (signal) => await managedMcp.warm(signal),
+      refresh: async (signal) => await managedMcp.refresh(signal),
+      assertion: async (assignmentId, signal) => await managedMcp.assertion(assignmentId, signal),
+      subscribe: (listener) => managedMcp.subscribe(listener)
     }
   };
   ctx.provide(HIWORK_FEATURE_CENTER_SERVICE, face);

package/lib/index.js

@@ -3137,7 +3137,7 @@ function isUnloading(ctx) {
 }
 
 // src/version.ts
-var PKG_VERSION = false ? "dev" : "0.0.10";
+var PKG_VERSION = false ? "dev" : "0.0.11";
 
 // src/ai-router-client.ts
 var AUTH_AUTHORIZE_PATH = "/api/auth/authorize";
@@ -3150,6 +3150,8 @@ var ME_KEY_RECHARGES_PATH = "/api/me/key/recharges";
 var ME_COST_ESTIMATE_PATH = "/api/me/cost-estimate";
 var ME_DAILY_QUOTE_PATH = "/api/me/daily-quote";
 var ME_DAILY_QUOTE_RANDOM_PATH = "/api/me/daily-quote/random";
+var ME_MCP_ASSIGNMENTS_PATH = "/api/me/mcp-assignments";
+var ME_MCP_ASSERTIONS_PATH = "/api/me/mcp-assertions";
 var DEFAULT_CLIENT_ID = "hiwork-desktop";
 var DEFAULT_REDIRECT_URI = "hiwork://auth/callback";
 var GatewayError = class extends Error {
@@ -3308,6 +3310,45 @@ var AiRouterClient = class {
     if (!res.ok) throw new GatewayError("GATEWAY_UNREACHABLE", `\u7F51\u5173\u8FD4\u56DE\u9519\u8BEF\uFF08HTTP ${res.status}\uFF09`, res.status);
     return await parseMeJson(res);
   }
+  /**
+   * GET /api/me/mcp-assignments：管理员下发给当前账号的 MCP 清单。
+   *
+   * 不复用 {@link getMeJson}：那条路径把 403 映射成 `NO_KEY_ASSIGNED`（「尚未被分配
+   * 虚拟 KEY」），而本端点的鉴权只有会话——一个还没被分配 Key 的账号照样应该有
+   * 清单（分 MCP 与分 Key 是两件事）。沿用它的 403 文案会把「没有 Key」错报成原因。
+   */
+  async getMyMcpAssignments(sessionCookie) {
+    const res = await this.requestOrUnreachable(ME_MCP_ASSIGNMENTS_PATH, { method: "GET", sessionCookie });
+    if (res.status === 401) throw new GatewayError("SESSION_EXPIRED", "\u7F51\u5173\u4F1A\u8BDD\u5DF2\u8FC7\u671F\uFF0C\u8BF7\u91CD\u65B0\u767B\u5F55", 401);
+    if (!res.ok) throw new GatewayError("GATEWAY_UNREACHABLE", `\u7F51\u5173\u8FD4\u56DE\u9519\u8BEF\uFF08HTTP ${res.status}\uFF09`, res.status);
+    return await parseMeJson(res);
+  }
+  /**
+   * POST /api/me/mcp-assertions：为某条分配签一张 120 秒断言。
+   *
+   * 三种拒绝各有确定含义（服务端 handler 的 404/409/503），必须分开映射——否则
+   * 客户端只会看到一句「取断言失败」，既分不清「被撤销了」（该卸连接）还是
+   * 「服务停用了」（该重试）还是「部署没配私钥」（找管理员）。
+   */
+  async issueMyMcpAssertion(sessionCookie, assignmentId) {
+    const res = await this.requestOrUnreachable(ME_MCP_ASSERTIONS_PATH, {
+      method: "POST",
+      sessionCookie,
+      body: { assignmentId }
+    });
+    if (res.status === 401) throw new GatewayError("SESSION_EXPIRED", "\u7F51\u5173\u4F1A\u8BDD\u5DF2\u8FC7\u671F\uFF0C\u8BF7\u91CD\u65B0\u767B\u5F55", 401);
+    if (res.status === 400 || res.status === 404) {
+      throw new GatewayError("MCP_ASSIGNMENT_GONE", "\u8FD9\u6761\u5206\u914D\u5DF2\u5931\u6548\uFF0C\u7A0D\u540E\u540C\u6B65\u4F1A\u91CD\u65B0\u6838\u5BF9", res.status);
+    }
+    if (res.status === 409) {
+      throw new GatewayError("MCP_NOT_DELIVERABLE", "\u8BE5 MCP \u670D\u52A1\u5F53\u524D\u4E0D\u53EF\u4E0B\u53D1\uFF0C\u8BF7\u8054\u7CFB\u7BA1\u7406\u5458", 409);
+    }
+    if (res.status === 503) {
+      throw new GatewayError("MCP_ASSERTION_DISABLED", "\u672C\u90E8\u7F72\u672A\u542F\u7528 MCP \u65AD\u8A00\u7B7E\u53D1\uFF0C\u8BF7\u8054\u7CFB\u7BA1\u7406\u5458", 503);
+    }
+    if (!res.ok) throw new GatewayError("GATEWAY_UNREACHABLE", `\u7F51\u5173\u8FD4\u56DE\u9519\u8BEF\uFF08HTTP ${res.status}\uFF09`, res.status);
+    return await parseMeJson(res);
+  }
   /**
    * /api/me 自助端点的 GET 公共路径：网络异常 → GATEWAY_UNREACHABLE，
    * 401/403/400 映射为稳定 code，响应体非 JSON 时不把原文带进异常。
@@ -4407,6 +4448,232 @@ function registerUsageRpc(ctx, deps) {
   };
 }
 
+// src/managed-mcp.ts
+var MANAGED_MCP_RPC_CHANNEL = "/hiwork-managed-mcp";
+var MANAGED_MCP_RPC_ENDPOINTS = ["snapshot", "refresh", "assertion"];
+var MANAGED_MCP_REFRESH_INTERVAL_MS = 30 * 6e4;
+var ManagedMcpRequestError = class extends Error {
+  constructor(code, message) {
+    super(message);
+    this.code = code;
+    this.name = "ManagedMcpRequestError";
+  }
+};
+var MANAGED_MCP_MESSAGE_FALLBACK = {
+  SESSION_EXPIRED: "\u767B\u5F55\u72B6\u6001\u5DF2\u8FC7\u671F\uFF0C\u8BF7\u91CD\u65B0\u767B\u5F55",
+  GATEWAY_UNREACHABLE: "\u7F51\u5173\u6682\u65F6\u4E0D\u53EF\u7528\uFF0C\u8BF7\u7A0D\u540E\u91CD\u8BD5",
+  MCP_ASSIGNMENT_GONE: "\u8FD9\u6761\u5206\u914D\u5DF2\u5931\u6548\uFF0C\u7A0D\u540E\u540C\u6B65\u4F1A\u91CD\u65B0\u6838\u5BF9",
+  MCP_NOT_DELIVERABLE: "\u8BE5 MCP \u670D\u52A1\u5F53\u524D\u4E0D\u53EF\u4E0B\u53D1\uFF0C\u8BF7\u8054\u7CFB\u7BA1\u7406\u5458",
+  MCP_ASSERTION_DISABLED: "\u672C\u90E8\u7F72\u672A\u542F\u7528 MCP \u65AD\u8A00\u7B7E\u53D1\uFF0C\u8BF7\u8054\u7CFB\u7BA1\u7406\u5458",
+  NO_KEY_ASSIGNED: "\u5F53\u524D\u8D26\u53F7\u5C1A\u672A\u88AB\u5206\u914D\u865A\u62DF KEY\uFF0C\u8BF7\u8054\u7CFB\u7BA1\u7406\u5458"
+};
+var MANAGED_MCP_GENERIC_FAILURE_MESSAGE = "MCP \u6E05\u5355\u6682\u65F6\u65E0\u6CD5\u83B7\u53D6\uFF0C\u8BF7\u7A0D\u540E\u91CD\u8BD5";
+var MANAGED_MCP_SESSION_EXPIRED_MESSAGE = "\u767B\u5F55\u72B6\u6001\u5DF2\u8FC7\u671F\uFF0C\u8BF7\u91CD\u65B0\u767B\u5F55";
+function displayManagedMcpMessage(code, message) {
+  const text = typeof message === "string" ? message.trim() : "";
+  if (text === "") return MANAGED_MCP_MESSAGE_FALLBACK[code] ?? MANAGED_MCP_GENERIC_FAILURE_MESSAGE;
+  const leaksImplementationDetail = /https?:\/\//i.test(text) || /\bHTTP\s*\d{3}\b/i.test(text) || /\bbaseURL\b/i.test(text);
+  if (leaksImplementationDetail) return MANAGED_MCP_MESSAGE_FALLBACK[code] ?? MANAGED_MCP_GENERIC_FAILURE_MESSAGE;
+  return text;
+}
+var ASSIGNMENT_ID_PATTERN = /^[0-9a-fA-F-]{1,64}$/;
+function parseManagedMcpPayload(endpoint, raw) {
+  if (raw === void 0 || raw === null) {
+    if (endpoint === "assertion") throw new ManagedMcpRequestError("bad-request", "\u53D6\u65AD\u8A00\u8BF7\u6C42\u7F3A\u5C11 assignmentId\u3002");
+    return {};
+  }
+  if (typeof raw !== "object" || Array.isArray(raw)) {
+    throw new ManagedMcpRequestError("bad-request", "MCP \u6E05\u5355\u8BF7\u6C42\u53C2\u6570\u4E0D\u5408\u6CD5\u3002");
+  }
+  const record = raw;
+  const keys = Object.keys(record);
+  if (endpoint !== "assertion") {
+    if (keys.length > 0) throw new ManagedMcpRequestError("bad-request", `MCP \u6E05\u5355\u8BF7\u6C42\u5305\u542B\u672A\u77E5\u5B57\u6BB5 '${keys[0]}'\u3002`);
+    return {};
+  }
+  for (const key of keys) {
+    if (key !== "assignmentId") throw new ManagedMcpRequestError("bad-request", `\u53D6\u65AD\u8A00\u8BF7\u6C42\u5305\u542B\u672A\u77E5\u5B57\u6BB5 '${key}'\u3002`);
+  }
+  const rawId = record["assignmentId"];
+  if (typeof rawId !== "string" || !ASSIGNMENT_ID_PATTERN.test(rawId.trim())) {
+    throw new ManagedMcpRequestError("bad-request", "\u53D6\u65AD\u8A00\u8BF7\u6C42\u7684 assignmentId \u4E0D\u5408\u6CD5\u3002");
+  }
+  return { assignmentId: rawId.trim() };
+}
+function isManagedMcpRpcEndpoint(endpoint) {
+  return MANAGED_MCP_RPC_ENDPOINTS.includes(endpoint);
+}
+function textOrUndefined(value) {
+  return typeof value === "string" && value.trim() !== "" ? value : void 0;
+}
+function normalizeAssignment(raw, log) {
+  if (typeof raw !== "object" || raw === null || Array.isArray(raw)) return void 0;
+  const record = raw;
+  const assignmentId = textOrUndefined(record["assignmentId"]);
+  const serverName = textOrUndefined(record["serverName"]);
+  const url = textOrUndefined(record["url"]);
+  const transport = textOrUndefined(record["transport"]);
+  const authRaw = record["auth"];
+  const auth = typeof authRaw === "object" && authRaw !== null && !Array.isArray(authRaw) ? authRaw : void 0;
+  const kind = textOrUndefined(auth?.["kind"]);
+  const mintUrl = textOrUndefined(auth?.["mintUrl"]);
+  if (assignmentId === void 0 || serverName === void 0 || url === void 0 || transport === void 0 || kind === void 0 || mintUrl === void 0) {
+    log?.("hiwork-core: MCP \u6E05\u5355\u91CC\u6709\u4E00\u6761\u7ED3\u6784\u4E0D\u5B8C\u6574\u7684\u5206\u914D\uFF0C\u5DF2\u8DF3\u8FC7");
+    return void 0;
+  }
+  const revision = record["revision"];
+  return {
+    assignmentId,
+    revision: typeof revision === "number" && Number.isFinite(revision) ? revision : 0,
+    slug: textOrUndefined(record["slug"]) ?? serverName,
+    displayName: textOrUndefined(record["displayName"]) ?? serverName,
+    serverName,
+    transport,
+    url,
+    extraHeaders: stringMap(record["extraHeaders"]),
+    auth: { kind, mintUrl, revokeUrl: textOrUndefined(auth?.["revokeUrl"]) ?? "" },
+    updatedAt: textOrUndefined(record["updatedAt"]) ?? ""
+  };
+}
+function stringMap(raw) {
+  if (typeof raw !== "object" || raw === null || Array.isArray(raw)) return {};
+  const out = {};
+  for (const [key, value] of Object.entries(raw)) {
+    if (typeof value === "string") out[key] = value;
+  }
+  return out;
+}
+function failureOf(error) {
+  if (error instanceof ManagedMcpRequestError) return { code: error.code, message: error.message, details: {} };
+  if (error instanceof GatewayError) {
+    return { code: error.code, message: displayManagedMcpMessage(error.code, error.message), details: {} };
+  }
+  return { code: "internal", message: MANAGED_MCP_GENERIC_FAILURE_MESSAGE, details: {} };
+}
+var ManagedMcpStore = class {
+  constructor(deps, now = () => Date.now()) {
+    this.deps = deps;
+    this.now = now;
+  }
+  cached;
+  lastError;
+  inFlight;
+  /**
+   * 当前缓存（同步读，不发请求）。从没成功过返回 undefined；
+   * 最近一次失败会以 `stale + lastError` 标注在上一次成功的结果上。
+   */
+  peek() {
+    if (this.cached === void 0) return void 0;
+    return this.lastError === void 0 ? this.cached : { ...this.cached, stale: true, lastError: this.lastError };
+  }
+  /**
+   * 去网关拉一次清单并更新缓存。失败时抛异常，且**缓存原样保留**。
+   *
+   * 并发调用合并成一次请求：后台预热与客户端手动同步撞在一起时不必打两遍网关。
+   */
+  async load() {
+    if (this.inFlight !== void 0) return await this.inFlight;
+    const task = this.fetchOnce();
+    this.inFlight = task;
+    try {
+      return await task;
+    } finally {
+      this.inFlight = void 0;
+    }
+  }
+  async fetchOnce() {
+    try {
+      const sessionCookie = await this.deps.resolveSession();
+      if (sessionCookie === void 0 || sessionCookie === "") {
+        throw new GatewayError("SESSION_EXPIRED", MANAGED_MCP_SESSION_EXPIRED_MESSAGE);
+      }
+      const gateway = this.deps.gateway();
+      if (gateway === void 0) {
+        throw new GatewayError("GATEWAY_UNREACHABLE", "\u7F51\u5173\u5730\u5740\u672A\u914D\u7F6E\uFF0C\u8BF7\u5148\u5728\u300C\u7F51\u5173\u6A21\u578B\u300D\u91CC\u5B8C\u6210\u767B\u5F55");
+      }
+      const view = await gateway.getMyMcpAssignments(sessionCookie);
+      const assignments = [];
+      for (const item of Array.isArray(view?.assignments) ? view.assignments : []) {
+        const normalized = normalizeAssignment(item, this.deps.log);
+        if (normalized !== void 0) assignments.push(normalized);
+      }
+      const snapshot = {
+        revision: typeof view?.revision === "number" && Number.isFinite(view.revision) ? view.revision : 0,
+        fetchedAt: new Date(this.now()).toISOString(),
+        assignments,
+        stale: false
+      };
+      this.cached = snapshot;
+      this.lastError = void 0;
+      return snapshot;
+    } catch (error) {
+      this.lastError = failureOf(error);
+      throw error;
+    }
+  }
+};
+function isAborted4(signal) {
+  return signal?.aborted === true;
+}
+async function handleManagedMcpEndpoint(endpoint, rawPayload, deps, store, signal) {
+  try {
+    if (isAborted4(signal)) return failure4("cancelled", "MCP \u6E05\u5355\u8BF7\u6C42\u5DF2\u53D6\u6D88\u3002");
+    if (!isManagedMcpRpcEndpoint(endpoint)) {
+      throw new ManagedMcpRequestError("bad-request", `\u672A\u77E5\u7684 MCP \u6E05\u5355\u7AEF\u70B9 '${endpoint}'`);
+    }
+    const payload = parseManagedMcpPayload(endpoint, rawPayload);
+    if (endpoint === "assertion") {
+      const assignmentId = payload.assignmentId;
+      if (assignmentId === void 0) throw new ManagedMcpRequestError("bad-request", "\u53D6\u65AD\u8A00\u8BF7\u6C42\u7F3A\u5C11 assignmentId\u3002");
+      return await handleAssertion(assignmentId, deps, signal);
+    }
+    const cached = store.peek();
+    if (endpoint === "snapshot" && cached !== void 0) return { ok: true, value: cached };
+    return { ok: true, value: await store.load() };
+  } catch (error) {
+    deps.log?.(`hiwork-core: MCP \u6E05\u5355 RPC '${endpoint}' \u5931\u8D25\uFF08${error instanceof Error ? error.name : typeof error}\uFF09`);
+    return { ok: false, error: failureOf(error) };
+  }
+}
+async function handleAssertion(assignmentId, deps, signal) {
+  const sessionCookie = await deps.resolveSession();
+  if (sessionCookie === void 0 || sessionCookie === "") {
+    return failure4("SESSION_EXPIRED", MANAGED_MCP_SESSION_EXPIRED_MESSAGE);
+  }
+  const gateway = deps.gateway();
+  if (gateway === void 0) {
+    return failure4("GATEWAY_UNREACHABLE", "\u7F51\u5173\u5730\u5740\u672A\u914D\u7F6E\uFF0C\u8BF7\u5148\u5728\u300C\u7F51\u5173\u6A21\u578B\u300D\u91CC\u5B8C\u6210\u767B\u5F55");
+  }
+  if (isAborted4(signal)) return failure4("cancelled", "MCP \u6E05\u5355\u8BF7\u6C42\u5DF2\u53D6\u6D88\u3002");
+  const ticket = await gateway.issueMyMcpAssertion(sessionCookie, assignmentId);
+  const assertion = textOrUndefined(ticket?.assertion);
+  const mintUrl = textOrUndefined(ticket?.mintUrl);
+  if (assertion === void 0 || mintUrl === void 0) {
+    deps.log?.("hiwork-core: \u53D6\u65AD\u8A00\u6536\u5230\u65E0\u6548\u54CD\u5E94\uFF08\u7F3A assertion / mintUrl\uFF09");
+    return failure4("internal", MANAGED_MCP_GENERIC_FAILURE_MESSAGE);
+  }
+  return {
+    ok: true,
+    value: {
+      assertion,
+      mintUrl,
+      revokeUrl: textOrUndefined(ticket?.revokeUrl) ?? "",
+      expiresAt: textOrUndefined(ticket?.expiresAt) ?? "",
+      serverName: textOrUndefined(ticket?.serverName) ?? ""
+    }
+  };
+}
+function failure4(code, message) {
+  return { ok: false, error: { code, message, details: {} } };
+}
+function registerManagedMcpRpc(ctx, deps, store) {
+  const handler = (endpoint, payload, signal) => handleManagedMcpEndpoint(endpoint, payload, deps, store, signal);
+  const remove = ctx.connection.rpc.handle(MANAGED_MCP_RPC_CHANNEL, handler, { authority: "loopback" });
+  return async () => {
+    await remove();
+  };
+}
+
 // src/index.ts
 var name = "hiwork-core";
 var inject = ["settings", "credentials", "workspaceRegistry", "connection"];
@@ -4762,6 +5029,34 @@ function apply(ctx, config) {
       ctx.logger.warn(message);
     }
   }), "hiwork-core: daily rpc");
+  const managedMcpDeps = {
+    resolveSession: async () => (await ports.credentials.resolve(SESSION_REF))?.value,
+    gateway: () => {
+      const baseURL = current().baseURL;
+      return baseURL === void 0 || baseURL === "" ? void 0 : gatewayFor(baseURL);
+    },
+    log: (message) => {
+      ctx.logger.warn(message);
+    }
+  };
+  const managedMcp = new ManagedMcpStore(managedMcpDeps);
+  ctx.effect(
+    () => registerManagedMcpRpc({ connection, logger: ctx.logger }, managedMcpDeps, managedMcp),
+    "hiwork-core: managed mcp rpc"
+  );
+  ctx.effect(() => {
+    const warm = () => {
+      void managedMcp.load().catch((error) => {
+        ctx.logger.warn(`hiwork-core: \u53D7\u7BA1 MCP \u6E05\u5355\u9884\u70ED\u5931\u8D25\uFF08${error instanceof Error ? error.name : typeof error}\uFF09`);
+      });
+    };
+    warm();
+    const timer = setInterval(warm, MANAGED_MCP_REFRESH_INTERVAL_MS);
+    timer.unref?.();
+    return () => {
+      clearInterval(timer);
+    };
+  }, "hiwork-core: managed mcp warmup");
   ctx.effect(() => registerAppVersionRpc({ connection, logger: ctx.logger }, {
     appVersion: () => pushedAppVersion(),
     log: (message) => {