hiwork-core 0.0.10 → 0.0.16

package/lib/index.js

@@ -3137,7 +3137,7 @@ function isUnloading(ctx) {
 }
 
 // src/version.ts
-var PKG_VERSION = false ? "dev" : "0.0.10";
+var PKG_VERSION = false ? "dev" : "0.0.16";
 
 // src/ai-router-client.ts
 var AUTH_AUTHORIZE_PATH = "/api/auth/authorize";
@@ -3150,6 +3150,13 @@ var ME_KEY_RECHARGES_PATH = "/api/me/key/recharges";
 var ME_COST_ESTIMATE_PATH = "/api/me/cost-estimate";
 var ME_DAILY_QUOTE_PATH = "/api/me/daily-quote";
 var ME_DAILY_QUOTE_RANDOM_PATH = "/api/me/daily-quote/random";
+var ME_MCP_ASSIGNMENTS_PATH = "/api/me/mcp-assignments";
+var ME_MCP_ASSERTIONS_PATH = "/api/me/mcp-assertions";
+var ME_SKILL_ASSIGNMENTS_PATH = "/api/me/skill-assignments";
+var ME_SKILL_PACKAGES_PATH = "/api/me/skill-packages";
+var ME_WORKBENCH_APPS_PATH = "/api/me/workbench-apps";
+var ME_OFFICE_CONFIG_PATH = "/api/me/office-config";
+var ME_OFFICE_RELAY_DOCUMENTS_PATH = "/api/me/office-relay/documents";
 var DEFAULT_CLIENT_ID = "hiwork-desktop";
 var DEFAULT_REDIRECT_URI = "hiwork://auth/callback";
 var GatewayError = class extends Error {
@@ -3308,6 +3315,239 @@ var AiRouterClient = class {
     if (!res.ok) throw new GatewayError("GATEWAY_UNREACHABLE", `\u7F51\u5173\u8FD4\u56DE\u9519\u8BEF\uFF08HTTP ${res.status}\uFF09`, res.status);
     return await parseMeJson(res);
   }
+  /**
+   * GET /api/me/mcp-assignments：管理员下发给当前账号的 MCP 清单。
+   *
+   * 不复用 {@link getMeJson}：那条路径把 403 映射成 `NO_KEY_ASSIGNED`（「尚未被分配
+   * 虚拟 KEY」），而本端点的鉴权只有会话——一个还没被分配 Key 的账号照样应该有
+   * 清单（分 MCP 与分 Key 是两件事）。沿用它的 403 文案会把「没有 Key」错报成原因。
+   */
+  async getMyMcpAssignments(sessionCookie) {
+    const res = await this.requestOrUnreachable(ME_MCP_ASSIGNMENTS_PATH, { method: "GET", sessionCookie });
+    if (res.status === 401) throw new GatewayError("SESSION_EXPIRED", "\u7F51\u5173\u4F1A\u8BDD\u5DF2\u8FC7\u671F\uFF0C\u8BF7\u91CD\u65B0\u767B\u5F55", 401);
+    if (!res.ok) throw new GatewayError("GATEWAY_UNREACHABLE", `\u7F51\u5173\u8FD4\u56DE\u9519\u8BEF\uFF08HTTP ${res.status}\uFF09`, res.status);
+    return await parseMeJson(res);
+  }
+  /**
+   * POST /api/me/office-relay/documents：上传文档字节到中继。
+   *
+   * 文件名走 `X-Office-Document-Name` 头（HTTP 头只能带 ASCII，用 encodeURIComponent
+   * 编码；网关侧 PathUnescape 解码）。状态码映射成稳定 code，供插件层给用户文案。
+   */
+  async createOfficeRelayDocument(sessionCookie, name2, bytes, mode) {
+    const res = await this.requestOrUnreachable(ME_OFFICE_RELAY_DOCUMENTS_PATH, {
+      method: "POST",
+      sessionCookie,
+      rawBody: bytes,
+      headers: {
+        "content-type": "application/octet-stream",
+        "x-office-document-name": encodeURIComponent(name2),
+        // 打开模式只影响网关侧的 document key 变体（view / edit 不能共用 DS 会话）
+        ...mode === void 0 ? {} : { "x-office-document-mode": mode }
+      }
+    });
+    if (res.status === 401) throw new GatewayError("SESSION_EXPIRED", "\u7F51\u5173\u4F1A\u8BDD\u5DF2\u8FC7\u671F\uFF0C\u8BF7\u91CD\u65B0\u767B\u5F55", 401);
+    if (res.status === 404) {
+      throw new GatewayError("RELAY_DISABLED", "\u672C\u90E8\u7F72\u672A\u542F\u7528\u6587\u6863\u4E2D\u7EE7\uFF0C\u8BF7\u8054\u7CFB\u7BA1\u7406\u5458", 404);
+    }
+    if (res.status === 413) throw new GatewayError("RELAY_TOO_LARGE", "\u6587\u6863\u8D85\u8FC7\u5728\u7EBF\u7F16\u8F91\u7684\u5927\u5C0F\u4E0A\u9650", 413);
+    if (res.status === 415) throw new GatewayError("RELAY_EXTENSION", "\u8BE5\u6587\u6863\u7C7B\u578B\u4E0D\u652F\u6301\u5728\u7EBF\u7F16\u8F91", 415);
+    if (res.status === 429) throw new GatewayError("RELAY_QUOTA", "\u540C\u65F6\u6253\u5F00\u7684\u7F16\u8F91\u4F1A\u8BDD\u8FC7\u591A\uFF0C\u8BF7\u7A0D\u540E\u518D\u8BD5", 429);
+    if (!res.ok) throw new GatewayError("GATEWAY_UNREACHABLE", `\u7F51\u5173\u8FD4\u56DE\u9519\u8BEF\uFF08HTTP ${res.status}\uFF09`, res.status);
+    return await parseMeJson(res);
+  }
+  /** GET /api/me/office-relay/documents/:id：轮询状态。 */
+  async getOfficeRelayStatus(sessionCookie, id) {
+    const res = await this.requestOrUnreachable(`${ME_OFFICE_RELAY_DOCUMENTS_PATH}/${encodeURIComponent(id)}`, {
+      method: "GET",
+      sessionCookie
+    });
+    if (res.status === 401) throw new GatewayError("SESSION_EXPIRED", "\u7F51\u5173\u4F1A\u8BDD\u5DF2\u8FC7\u671F\uFF0C\u8BF7\u91CD\u65B0\u767B\u5F55", 401);
+    if (res.status === 404) throw new GatewayError("RELAY_DISABLED", "\u672C\u90E8\u7F72\u672A\u542F\u7528\u6587\u6863\u4E2D\u7EE7\uFF0C\u8BF7\u8054\u7CFB\u7BA1\u7406\u5458", 404);
+    if (res.status === 410) throw new GatewayError("RELAY_EXPIRED", "\u7F16\u8F91\u4F1A\u8BDD\u5DF2\u8FC7\u671F\uFF0C\u8BF7\u91CD\u65B0\u6253\u5F00\u6587\u6863", 410);
+    if (!res.ok) throw new GatewayError("GATEWAY_UNREACHABLE", `\u7F51\u5173\u8FD4\u56DE\u9519\u8BEF\uFF08HTTP ${res.status}\uFF09`, res.status);
+    return await parseMeJson(res);
+  }
+  /**
+   * GET /api/me/office-relay/documents/:id/content[?v=N]：取回当前版本字节。
+   * 204 表示"你手里的版本已是最新"（不是错误）。
+   */
+  async getOfficeRelayContent(sessionCookie, id, revision) {
+    const query = revision === void 0 ? "" : `?v=${revision}`;
+    const res = await this.requestOrUnreachable(
+      `${ME_OFFICE_RELAY_DOCUMENTS_PATH}/${encodeURIComponent(id)}/content${query}`,
+      { method: "GET", sessionCookie }
+    );
+    if (res.status === 204) {
+      return { notModified: true, revision: revision ?? 0 };
+    }
+    if (res.status === 401) throw new GatewayError("SESSION_EXPIRED", "\u7F51\u5173\u4F1A\u8BDD\u5DF2\u8FC7\u671F\uFF0C\u8BF7\u91CD\u65B0\u767B\u5F55", 401);
+    if (res.status === 404) throw new GatewayError("RELAY_DISABLED", "\u672C\u90E8\u7F72\u672A\u542F\u7528\u6587\u6863\u4E2D\u7EE7\uFF0C\u8BF7\u8054\u7CFB\u7BA1\u7406\u5458", 404);
+    if (res.status === 410) throw new GatewayError("RELAY_EXPIRED", "\u7F16\u8F91\u4F1A\u8BDD\u5DF2\u8FC7\u671F\uFF0C\u8BF7\u91CD\u65B0\u6253\u5F00\u6587\u6863", 410);
+    if (!res.ok) throw new GatewayError("GATEWAY_UNREACHABLE", `\u7F51\u5173\u8FD4\u56DE\u9519\u8BEF\uFF08HTTP ${res.status}\uFF09`, res.status);
+    const bytes = new Uint8Array(await res.arrayBuffer());
+    return { notModified: false, revision: -1, bytes };
+  }
+  /** DELETE /api/me/office-relay/documents/:id：关闭会话（幂等）。 */
+  async closeOfficeRelayDocument(sessionCookie, id) {
+    const res = await this.requestOrUnreachable(`${ME_OFFICE_RELAY_DOCUMENTS_PATH}/${encodeURIComponent(id)}`, {
+      method: "DELETE",
+      sessionCookie
+    });
+    if (res.status === 204 || res.status === 404 || res.status === 410) return;
+    if (res.status === 401) throw new GatewayError("SESSION_EXPIRED", "\u7F51\u5173\u4F1A\u8BDD\u5DF2\u8FC7\u671F\uFF0C\u8BF7\u91CD\u65B0\u767B\u5F55", 401);
+    if (!res.ok) throw new GatewayError("GATEWAY_UNREACHABLE", `\u7F51\u5173\u8FD4\u56DE\u9519\u8BEF\uFF08HTTP ${res.status}\uFF09`, res.status);
+  }
+  /**
+   * GET /api/me/office-config：本部署 OnlyOffice 集成（Document Server 地址 + 共享 JWT 密钥）。
+   *
+   * 与 {@link getMyMcpAssignments} 同样的理由不复用 `getMeJson`：那条路径把 403 映射成
+   * `NO_KEY_ASSIGNED`，而本端点只看会话（分集成配置与分 Key 是两件事）。503 是
+   * 「部署未配置」的稳定信号，单独映射——消费方（hiwork-office）据此提示联系管理员
+   * 并回退本地手工配置，而不是报一句含糊的「网关不可达」。
+   */
+  async getMyOfficeConfig(sessionCookie) {
+    const res = await this.requestOrUnreachable(ME_OFFICE_CONFIG_PATH, { method: "GET", sessionCookie });
+    if (res.status === 401) throw new GatewayError("SESSION_EXPIRED", "\u7F51\u5173\u4F1A\u8BDD\u5DF2\u8FC7\u671F\uFF0C\u8BF7\u91CD\u65B0\u767B\u5F55", 401);
+    if (res.status === 503) {
+      throw new GatewayError(
+        "OFFICE_NOT_CONFIGURED",
+        "\u672C\u90E8\u7F72\u5C1A\u672A\u914D\u7F6E HiWork Office \u6587\u6863\u529E\u516C\u96C6\u6210\uFF0C\u8BF7\u8054\u7CFB\u7BA1\u7406\u5458",
+        503
+      );
+    }
+    if (!res.ok) throw new GatewayError("GATEWAY_UNREACHABLE", `\u7F51\u5173\u8FD4\u56DE\u9519\u8BEF\uFF08HTTP ${res.status}\uFF09`, res.status);
+    return await parseMeJson(res);
+  }
+  /**
+   * POST /api/me/mcp-assertions：为某条分配签一张 120 秒断言。
+   *
+   * 三种拒绝各有确定含义（服务端 handler 的 404/409/503），必须分开映射——否则
+   * 客户端只会看到一句「取断言失败」，既分不清「被撤销了」（该卸连接）还是
+   * 「服务停用了」（该重试）还是「部署没配私钥」（找管理员）。
+   */
+  async issueMyMcpAssertion(sessionCookie, assignmentId) {
+    const res = await this.requestOrUnreachable(ME_MCP_ASSERTIONS_PATH, {
+      method: "POST",
+      sessionCookie,
+      body: { assignmentId }
+    });
+    if (res.status === 401) throw new GatewayError("SESSION_EXPIRED", "\u7F51\u5173\u4F1A\u8BDD\u5DF2\u8FC7\u671F\uFF0C\u8BF7\u91CD\u65B0\u767B\u5F55", 401);
+    if (res.status === 400 || res.status === 404) {
+      throw new GatewayError("MCP_ASSIGNMENT_GONE", "\u8FD9\u6761\u5206\u914D\u5DF2\u5931\u6548\uFF0C\u7A0D\u540E\u540C\u6B65\u4F1A\u91CD\u65B0\u6838\u5BF9", res.status);
+    }
+    if (res.status === 409) {
+      throw new GatewayError("MCP_NOT_DELIVERABLE", "\u8BE5 MCP \u670D\u52A1\u5F53\u524D\u4E0D\u53EF\u4E0B\u53D1\uFF0C\u8BF7\u8054\u7CFB\u7BA1\u7406\u5458", 409);
+    }
+    if (res.status === 503) {
+      throw new GatewayError("MCP_ASSERTION_DISABLED", "\u672C\u90E8\u7F72\u672A\u542F\u7528 MCP \u65AD\u8A00\u7B7E\u53D1\uFF0C\u8BF7\u8054\u7CFB\u7BA1\u7406\u5458", 503);
+    }
+    if (!res.ok) throw new GatewayError("GATEWAY_UNREACHABLE", `\u7F51\u5173\u8FD4\u56DE\u9519\u8BEF\uFF08HTTP ${res.status}\uFF09`, res.status);
+    return await parseMeJson(res);
+  }
+  /**
+   * GET /api/me/skill-assignments：管理员下发给当前账号的技能清单（spec §4.1）。
+   *
+   * 与 {@link getMyMcpAssignments} 同样的理由不复用 `getMeJson`：那条路径把 403 映射成
+   * `NO_KEY_ASSIGNED`（「尚未被分配虚拟 KEY」），而本端点的鉴权只有会话——一个还没被分配 Key
+   * 的账号照样应该有技能清单（分技能与分 Key 是两件事）。
+   *
+   * **这条路径上只有 401 有独立语义，其余全部收敛成 `GATEWAY_UNREACHABLE`**，理由逐条：
+   *  - 401 = 会话过期/缺失（`middleware` 的会话鉴权）——唯一一条服务端**真的会为这条路由**发出的
+   *    拒绝，也是唯一一条能让人做点什么（重新登录）的；
+   *  - 403 不会出现：这条路由的鉴权只有会话，没有「有没有被分配虚拟 KEY」那一层（正因为如此，
+   *    这里才不能复用 `getMeJson`，那个函数会把 403 读成「没分配 KEY」）；
+   *  - 404 不是这条路由的响应形状：清单**永远**是 200 + 一份数组，某条技能被停用 / 被撤销是
+   *    「不在数组里」，不是 404（`MyAssignments` 逐条过滤，不会为单条抛错）。真收到 404 只可能是
+   *    「路径压根没被路由」——老网关没有这条路由的时候就是这个样子，而它与反代配错无法区分，
+   *    所以诚实读法是网关不可达，不是「管理员把技能全撤了」；
+   *  - 503 不会出现：员工端这条路由**无条件注册**，服务端没有任何「技能下发未启用」的闸
+   *    （`getMySkillPackage` 那条 503 也一样没有生产者，见那里的注释），整份响应由 service
+   *    直接产出；
+   *  - 其余（5xx / 反代错误页 / 维护页）同理：没有可解释的拒绝语义，收敛成网关不可达。
+   *
+   * 形状校验（`assignments` 必须是数组）**不在这里**：本方法只做传输与状态码映射，把 JSON 直接
+   * 断言成契约类型。真正的形状判据在消费端 `/hiwork-managed-skills` 的 Host 半边
+   * （`src/managed-skills.ts` 的 `fetchOnce`）——那里才决定「这一份算不算成功拉到的清单」。
+   */
+  async getMySkillAssignments(sessionCookie) {
+    const res = await this.requestOrUnreachable(ME_SKILL_ASSIGNMENTS_PATH, { method: "GET", sessionCookie });
+    if (res.status === 401) throw new GatewayError("SESSION_EXPIRED", "\u7F51\u5173\u4F1A\u8BDD\u5DF2\u8FC7\u671F\uFF0C\u8BF7\u91CD\u65B0\u767B\u5F55", 401);
+    if (!res.ok) throw new GatewayError("GATEWAY_UNREACHABLE", `\u7F51\u5173\u8FD4\u56DE\u9519\u8BEF\uFF08HTTP ${res.status}\uFF09`, res.status);
+    return await parseMeJson(res);
+  }
+  /**
+   * GET /api/me/skill-packages/:assignmentId：取一条分配的包体字节（spec §4.2）。
+   *
+   * **这条路径是「两个端口」里的另一条**，它才有独立的拒绝语义（与服务端 handler 一一对应）：
+   *  - 404 = 这条分配不在这个账号名下（已被撤销 / 从未属于它，`ErrSkillAssignmentNotForUser`
+   *    ——技能被停用 / 分配被停用也走这一条，服务端刻意不区分），
+   *  - 503 = 部署未启用技能下发（**保留的防御性映射：当前没有生产者**，见下）。
+   * 两者必须分开映射，否则客户端只会看到一句「拉包失败」。用途是**别把原因咽下去**：404 让人
+   * 停止重试、把原因显示出来（「这条分配已失效，稍后同步会重新核对」），503 让人知道该找管理员。
+   * ⚠️ 事实核对（spec §4.5）：`SKILL_DISTRIBUTION_DISABLED` 全仓**只有本方法这一个生产方**
+   * （本方法里 503 那一支），而 ai-hub 目前**没有任何**会产生这个 503 的代码——员工端两条路由在
+   * `cmd/server/main.go` 里无条件注册，技能 / 分配被停用在员工端走 404
+   * （`ErrSkillAssignmentNotForUser`）。映射保留是**防御性 + 与 MCP 同形**（那里
+   * `MCP_ASSERTION_DISABLED` 真有生产者：`me_mcp_handler.go` 的 503），别拿它当「会发生的分支」
+   * 去设计行为。
+   * ⚠️ **这两条都只是「失败的原因」，不是删除本地受管技能的依据**：删除的唯一权柄是「成功拉到的
+   * 清单」（spec §6 的唯一安全不变量），由 Host 的清单端点产出。本文件里没有任何一处据 404 或
+   * `contentSha256` 去删本地技能（全仓 `SKILL_ASSIGNMENT_GONE` 只有生产方、类型联合、文案表与
+   * 测试，没有消费方）。
+   * 404 而不泄露「这条分配是否存在」是服务端的选择（§4.2 明确要 404 不要 403）。
+   *
+   * 本调用方从不发 `If-None-Match`（§4.2 说 304 那条是给管理端与 curl 排障用的），所以 304
+   * 不在这条路径上；真收到（反代插话）会落进下面那条 → 网关不可达。
+   *
+   * 包体**只在本函数里短暂存在**：交给 Host 侧频道（src/managed-skills.ts）后立即 base64
+   * 出去，网关会话 cookie 全程不出 Host，浏览器侧永远拿不到字节。
+   */
+  async getMySkillPackage(sessionCookie, assignmentId) {
+    const res = await this.requestOrUnreachable(
+      `${ME_SKILL_PACKAGES_PATH}/${encodeURIComponent(assignmentId)}`,
+      { method: "GET", sessionCookie }
+    );
+    if (res.status === 401) throw new GatewayError("SESSION_EXPIRED", "\u7F51\u5173\u4F1A\u8BDD\u5DF2\u8FC7\u671F\uFF0C\u8BF7\u91CD\u65B0\u767B\u5F55", 401);
+    if (res.status === 404) {
+      throw new GatewayError("SKILL_ASSIGNMENT_GONE", "\u8FD9\u6761\u5206\u914D\u5DF2\u5931\u6548\uFF0C\u7A0D\u540E\u540C\u6B65\u4F1A\u91CD\u65B0\u6838\u5BF9", 404);
+    }
+    if (res.status === 503) {
+      throw new GatewayError("SKILL_DISTRIBUTION_DISABLED", "\u672C\u90E8\u7F72\u672A\u542F\u7528\u6280\u80FD\u4E0B\u53D1\uFF0C\u8BF7\u8054\u7CFB\u7BA1\u7406\u5458", 503);
+    }
+    if (!res.ok) throw new GatewayError("GATEWAY_UNREACHABLE", `\u7F51\u5173\u8FD4\u56DE\u9519\u8BEF\uFF08HTTP ${res.status}\uFF09`, res.status);
+    return {
+      skillName: res.headers.get("x-hiwork-skill-name") ?? "",
+      contentSha256: res.headers.get("x-hiwork-content-sha256") ?? "",
+      bytes: new Uint8Array(await res.arrayBuffer())
+    };
+  }
+  /**
+   * GET /api/me/workbench-apps：管理员登记并分配给当前账号的工作台应用清单（spec §4.1）。
+   *
+   * 与技能清单同款**不复用 `getMeJson`**：那条路径把 403 映射成 `NO_KEY_ASSIGNED`（「尚未被分配
+   * 虚拟 KEY」），而本端点的鉴权只有会话——一个还没被分配 Key 的账号照样应该有工作台。
+   *
+   * 状态码映射（**与技能清单有一处刻意的不同**，理由在下面）：
+   *  - 401 = 会话过期/缺失：唯一一条能让人做点什么（重新登录）的拒绝；
+   *  - **404 = 本部署未启用工作台**：这条路由在网关侧是「有配置才有」的（spec §10 的降级矩阵：
+   *    「网关未配置 workbench → 回 404」），因此 404 不是「应用清单为空」也不是网络故障，
+   *    而是一个可展示的功能状态——客户端据此显示「本部署尚未启用工作台」而不是报错。
+   *    ⚠️ 技能清单那半**刻意**没有这一档（那里 404 只能是路径没被路由，收敛成网关不可达）；
+   *    两边的差别是服务端语义的差别，不是实现风格的差别，别顺手对齐；
+   *  - 其余（403 / 5xx / 反代错误页 / 维护页）一律 `GATEWAY_UNREACHABLE`：没有可解释的拒绝语义。
+   *
+   * 形状校验（`apps` 必须是数组）**不在这里**：本方法只做传输与状态码映射，把 JSON 直接断言成
+   * 契约类型；真正的形状判据在消费端 `/hiwork-workbench` 的 Host 半边（`src/workbench-bridge.ts`），
+   * 那里才决定「这一份算不算成功拉到的清单」。
+   */
+  async getMyWorkbenchApps(sessionCookie) {
+    const res = await this.requestOrUnreachable(ME_WORKBENCH_APPS_PATH, { method: "GET", sessionCookie });
+    if (res.status === 401) throw new GatewayError("SESSION_EXPIRED", "\u7F51\u5173\u4F1A\u8BDD\u5DF2\u8FC7\u671F\uFF0C\u8BF7\u91CD\u65B0\u767B\u5F55", 401);
+    if (res.status === 404) throw new GatewayError("WORKBENCH_DISABLED", "\u672C\u90E8\u7F72\u672A\u542F\u7528\u5DE5\u4F5C\u53F0\uFF0C\u8BF7\u8054\u7CFB\u7BA1\u7406\u5458", 404);
+    if (!res.ok) throw new GatewayError("GATEWAY_UNREACHABLE", `\u7F51\u5173\u8FD4\u56DE\u9519\u8BEF\uFF08HTTP ${res.status}\uFF09`, res.status);
+    return await parseMeJson(res);
+  }
   /**
    * /api/me 自助端点的 GET 公共路径：网络异常 → GATEWAY_UNREACHABLE，
    * 401/403/400 映射为稳定 code，响应体非 JSON 时不把原文带进异常。
@@ -3346,7 +3586,12 @@ var AiRouterClient = class {
       headers,
       signal: AbortSignal.timeout(this.timeoutMs)
     };
-    if (opts.body !== void 0) init.body = JSON.stringify(opts.body);
+    if (opts.rawBody !== void 0) {
+      init.body = opts.rawBody.buffer.slice(
+        opts.rawBody.byteOffset,
+        opts.rawBody.byteOffset + opts.rawBody.byteLength
+      );
+    } else if (opts.body !== void 0) init.body = JSON.stringify(opts.body);
     return fetch(`${this.baseURL}${path}`, init);
   }
 };
@@ -4407,6 +4652,947 @@ function registerUsageRpc(ctx, deps) {
   };
 }
 
+// src/managed-mcp.ts
+var MANAGED_MCP_RPC_CHANNEL = "/hiwork-managed-mcp";
+var MANAGED_MCP_RPC_ENDPOINTS = ["snapshot", "refresh", "assertion"];
+var MANAGED_MCP_REFRESH_INTERVAL_MS = 30 * 6e4;
+var ManagedMcpRequestError = class extends Error {
+  constructor(code, message) {
+    super(message);
+    this.code = code;
+    this.name = "ManagedMcpRequestError";
+  }
+};
+var MANAGED_MCP_MESSAGE_FALLBACK = {
+  SESSION_EXPIRED: "\u767B\u5F55\u72B6\u6001\u5DF2\u8FC7\u671F\uFF0C\u8BF7\u91CD\u65B0\u767B\u5F55",
+  GATEWAY_UNREACHABLE: "\u7F51\u5173\u6682\u65F6\u4E0D\u53EF\u7528\uFF0C\u8BF7\u7A0D\u540E\u91CD\u8BD5",
+  MCP_ASSIGNMENT_GONE: "\u8FD9\u6761\u5206\u914D\u5DF2\u5931\u6548\uFF0C\u7A0D\u540E\u540C\u6B65\u4F1A\u91CD\u65B0\u6838\u5BF9",
+  MCP_NOT_DELIVERABLE: "\u8BE5 MCP \u670D\u52A1\u5F53\u524D\u4E0D\u53EF\u4E0B\u53D1\uFF0C\u8BF7\u8054\u7CFB\u7BA1\u7406\u5458",
+  MCP_ASSERTION_DISABLED: "\u672C\u90E8\u7F72\u672A\u542F\u7528 MCP \u65AD\u8A00\u7B7E\u53D1\uFF0C\u8BF7\u8054\u7CFB\u7BA1\u7406\u5458",
+  NO_KEY_ASSIGNED: "\u5F53\u524D\u8D26\u53F7\u5C1A\u672A\u88AB\u5206\u914D\u865A\u62DF KEY\uFF0C\u8BF7\u8054\u7CFB\u7BA1\u7406\u5458"
+};
+var MANAGED_MCP_GENERIC_FAILURE_MESSAGE = "MCP \u6E05\u5355\u6682\u65F6\u65E0\u6CD5\u83B7\u53D6\uFF0C\u8BF7\u7A0D\u540E\u91CD\u8BD5";
+var MANAGED_MCP_SESSION_EXPIRED_MESSAGE = "\u767B\u5F55\u72B6\u6001\u5DF2\u8FC7\u671F\uFF0C\u8BF7\u91CD\u65B0\u767B\u5F55";
+function displayManagedMcpMessage(code, message) {
+  const text = typeof message === "string" ? message.trim() : "";
+  if (text === "") return MANAGED_MCP_MESSAGE_FALLBACK[code] ?? MANAGED_MCP_GENERIC_FAILURE_MESSAGE;
+  const leaksImplementationDetail = /https?:\/\//i.test(text) || /\bHTTP\s*\d{3}\b/i.test(text) || /\bbaseURL\b/i.test(text);
+  if (leaksImplementationDetail) return MANAGED_MCP_MESSAGE_FALLBACK[code] ?? MANAGED_MCP_GENERIC_FAILURE_MESSAGE;
+  return text;
+}
+var ASSIGNMENT_ID_PATTERN = /^[0-9a-fA-F-]{1,64}$/;
+function parseManagedMcpPayload(endpoint, raw) {
+  if (raw === void 0 || raw === null) {
+    if (endpoint === "assertion") throw new ManagedMcpRequestError("bad-request", "\u53D6\u65AD\u8A00\u8BF7\u6C42\u7F3A\u5C11 assignmentId\u3002");
+    return {};
+  }
+  if (typeof raw !== "object" || Array.isArray(raw)) {
+    throw new ManagedMcpRequestError("bad-request", "MCP \u6E05\u5355\u8BF7\u6C42\u53C2\u6570\u4E0D\u5408\u6CD5\u3002");
+  }
+  const record = raw;
+  const keys = Object.keys(record);
+  if (endpoint !== "assertion") {
+    if (keys.length > 0) throw new ManagedMcpRequestError("bad-request", `MCP \u6E05\u5355\u8BF7\u6C42\u5305\u542B\u672A\u77E5\u5B57\u6BB5 '${keys[0]}'\u3002`);
+    return {};
+  }
+  for (const key of keys) {
+    if (key !== "assignmentId") throw new ManagedMcpRequestError("bad-request", `\u53D6\u65AD\u8A00\u8BF7\u6C42\u5305\u542B\u672A\u77E5\u5B57\u6BB5 '${key}'\u3002`);
+  }
+  const rawId = record["assignmentId"];
+  if (typeof rawId !== "string" || !ASSIGNMENT_ID_PATTERN.test(rawId.trim())) {
+    throw new ManagedMcpRequestError("bad-request", "\u53D6\u65AD\u8A00\u8BF7\u6C42\u7684 assignmentId \u4E0D\u5408\u6CD5\u3002");
+  }
+  return { assignmentId: rawId.trim() };
+}
+function isManagedMcpRpcEndpoint(endpoint) {
+  return MANAGED_MCP_RPC_ENDPOINTS.includes(endpoint);
+}
+function textOrUndefined(value) {
+  return typeof value === "string" && value.trim() !== "" ? value : void 0;
+}
+function normalizeAssignment(raw, log) {
+  if (typeof raw !== "object" || raw === null || Array.isArray(raw)) return void 0;
+  const record = raw;
+  const assignmentId = textOrUndefined(record["assignmentId"]);
+  const serverName = textOrUndefined(record["serverName"]);
+  const url = textOrUndefined(record["url"]);
+  const transport = textOrUndefined(record["transport"]);
+  const authRaw = record["auth"];
+  const auth = typeof authRaw === "object" && authRaw !== null && !Array.isArray(authRaw) ? authRaw : void 0;
+  const kind = textOrUndefined(auth?.["kind"]);
+  const mintUrl = textOrUndefined(auth?.["mintUrl"]);
+  if (assignmentId === void 0 || serverName === void 0 || url === void 0 || transport === void 0 || kind === void 0 || mintUrl === void 0) {
+    log?.("hiwork-core: MCP \u6E05\u5355\u91CC\u6709\u4E00\u6761\u7ED3\u6784\u4E0D\u5B8C\u6574\u7684\u5206\u914D\uFF0C\u5DF2\u8DF3\u8FC7");
+    return void 0;
+  }
+  const revision = record["revision"];
+  return {
+    assignmentId,
+    revision: typeof revision === "number" && Number.isFinite(revision) ? revision : 0,
+    slug: textOrUndefined(record["slug"]) ?? serverName,
+    displayName: textOrUndefined(record["displayName"]) ?? serverName,
+    serverName,
+    transport,
+    url,
+    extraHeaders: stringMap(record["extraHeaders"]),
+    auth: { kind, mintUrl, revokeUrl: textOrUndefined(auth?.["revokeUrl"]) ?? "" },
+    updatedAt: textOrUndefined(record["updatedAt"]) ?? ""
+  };
+}
+function stringMap(raw) {
+  if (typeof raw !== "object" || raw === null || Array.isArray(raw)) return {};
+  const out = {};
+  for (const [key, value] of Object.entries(raw)) {
+    if (typeof value === "string") out[key] = value;
+  }
+  return out;
+}
+function failureOf(error) {
+  if (error instanceof ManagedMcpRequestError) return { code: error.code, message: error.message, details: {} };
+  if (error instanceof GatewayError) {
+    return { code: error.code, message: displayManagedMcpMessage(error.code, error.message), details: {} };
+  }
+  return { code: "internal", message: MANAGED_MCP_GENERIC_FAILURE_MESSAGE, details: {} };
+}
+var ManagedMcpStore = class {
+  constructor(deps, now = () => Date.now()) {
+    this.deps = deps;
+    this.now = now;
+  }
+  cached;
+  lastError;
+  inFlight;
+  /**
+   * 当前缓存（同步读，不发请求）。从没成功过返回 undefined；
+   * 最近一次失败会以 `stale + lastError` 标注在上一次成功的结果上。
+   */
+  peek() {
+    if (this.cached === void 0) return void 0;
+    return this.lastError === void 0 ? this.cached : { ...this.cached, stale: true, lastError: this.lastError };
+  }
+  /**
+   * 去网关拉一次清单并更新缓存。失败时抛异常，且**缓存原样保留**。
+   *
+   * 并发调用合并成一次请求：后台预热与客户端手动同步撞在一起时不必打两遍网关。
+   */
+  async load() {
+    if (this.inFlight !== void 0) return await this.inFlight;
+    const task = this.fetchOnce();
+    this.inFlight = task;
+    try {
+      return await task;
+    } finally {
+      this.inFlight = void 0;
+    }
+  }
+  async fetchOnce() {
+    try {
+      const sessionCookie = await this.deps.resolveSession();
+      if (sessionCookie === void 0 || sessionCookie === "") {
+        throw new GatewayError("SESSION_EXPIRED", MANAGED_MCP_SESSION_EXPIRED_MESSAGE);
+      }
+      const gateway = this.deps.gateway();
+      if (gateway === void 0) {
+        throw new GatewayError("GATEWAY_UNREACHABLE", "\u7F51\u5173\u5730\u5740\u672A\u914D\u7F6E\uFF0C\u8BF7\u5148\u5728\u300C\u7F51\u5173\u6A21\u578B\u300D\u91CC\u5B8C\u6210\u767B\u5F55");
+      }
+      const view = await gateway.getMyMcpAssignments(sessionCookie);
+      const assignments = [];
+      for (const item of Array.isArray(view?.assignments) ? view.assignments : []) {
+        const normalized = normalizeAssignment(item, this.deps.log);
+        if (normalized !== void 0) assignments.push(normalized);
+      }
+      const snapshot = {
+        revision: typeof view?.revision === "number" && Number.isFinite(view.revision) ? view.revision : 0,
+        fetchedAt: new Date(this.now()).toISOString(),
+        assignments,
+        stale: false
+      };
+      this.cached = snapshot;
+      this.lastError = void 0;
+      return snapshot;
+    } catch (error) {
+      this.lastError = failureOf(error);
+      throw error;
+    }
+  }
+};
+function isAborted4(signal) {
+  return signal?.aborted === true;
+}
+async function handleManagedMcpEndpoint(endpoint, rawPayload, deps, store, signal) {
+  try {
+    if (isAborted4(signal)) return failure4("cancelled", "MCP \u6E05\u5355\u8BF7\u6C42\u5DF2\u53D6\u6D88\u3002");
+    if (!isManagedMcpRpcEndpoint(endpoint)) {
+      throw new ManagedMcpRequestError("bad-request", `\u672A\u77E5\u7684 MCP \u6E05\u5355\u7AEF\u70B9 '${endpoint}'`);
+    }
+    const payload = parseManagedMcpPayload(endpoint, rawPayload);
+    if (endpoint === "assertion") {
+      const assignmentId = payload.assignmentId;
+      if (assignmentId === void 0) throw new ManagedMcpRequestError("bad-request", "\u53D6\u65AD\u8A00\u8BF7\u6C42\u7F3A\u5C11 assignmentId\u3002");
+      return await handleAssertion(assignmentId, deps, signal);
+    }
+    const cached = store.peek();
+    if (endpoint === "snapshot" && cached !== void 0) return { ok: true, value: cached };
+    return { ok: true, value: await store.load() };
+  } catch (error) {
+    deps.log?.(`hiwork-core: MCP \u6E05\u5355 RPC '${endpoint}' \u5931\u8D25\uFF08${error instanceof Error ? error.name : typeof error}\uFF09`);
+    return { ok: false, error: failureOf(error) };
+  }
+}
+async function handleAssertion(assignmentId, deps, signal) {
+  const sessionCookie = await deps.resolveSession();
+  if (sessionCookie === void 0 || sessionCookie === "") {
+    return failure4("SESSION_EXPIRED", MANAGED_MCP_SESSION_EXPIRED_MESSAGE);
+  }
+  const gateway = deps.gateway();
+  if (gateway === void 0) {
+    return failure4("GATEWAY_UNREACHABLE", "\u7F51\u5173\u5730\u5740\u672A\u914D\u7F6E\uFF0C\u8BF7\u5148\u5728\u300C\u7F51\u5173\u6A21\u578B\u300D\u91CC\u5B8C\u6210\u767B\u5F55");
+  }
+  if (isAborted4(signal)) return failure4("cancelled", "MCP \u6E05\u5355\u8BF7\u6C42\u5DF2\u53D6\u6D88\u3002");
+  const ticket = await gateway.issueMyMcpAssertion(sessionCookie, assignmentId);
+  const assertion = textOrUndefined(ticket?.assertion);
+  const mintUrl = textOrUndefined(ticket?.mintUrl);
+  if (assertion === void 0 || mintUrl === void 0) {
+    deps.log?.("hiwork-core: \u53D6\u65AD\u8A00\u6536\u5230\u65E0\u6548\u54CD\u5E94\uFF08\u7F3A assertion / mintUrl\uFF09");
+    return failure4("internal", MANAGED_MCP_GENERIC_FAILURE_MESSAGE);
+  }
+  return {
+    ok: true,
+    value: {
+      assertion,
+      mintUrl,
+      revokeUrl: textOrUndefined(ticket?.revokeUrl) ?? "",
+      expiresAt: textOrUndefined(ticket?.expiresAt) ?? "",
+      serverName: textOrUndefined(ticket?.serverName) ?? ""
+    }
+  };
+}
+function failure4(code, message) {
+  return { ok: false, error: { code, message, details: {} } };
+}
+function registerManagedMcpRpc(ctx, deps, store) {
+  const handler = (endpoint, payload, signal) => handleManagedMcpEndpoint(endpoint, payload, deps, store, signal);
+  const remove = ctx.connection.rpc.handle(MANAGED_MCP_RPC_CHANNEL, handler, { authority: "loopback" });
+  return async () => {
+    await remove();
+  };
+}
+
+// src/managed-skills.ts
+var MANAGED_SKILLS_RPC_CHANNEL = "/hiwork-managed-skills";
+var MANAGED_SKILLS_RPC_ENDPOINTS = ["snapshot", "refresh", "package"];
+var MANAGED_SKILLS_REFRESH_INTERVAL_MS = 30 * 6e4;
+var MAX_MANAGED_SKILL_ARCHIVE_BYTES = 4 * 1024 * 1024;
+var ManagedSkillsRequestError = class extends Error {
+  constructor(code, message) {
+    super(message);
+    this.code = code;
+    this.name = "ManagedSkillsRequestError";
+  }
+};
+var MANAGED_SKILLS_MESSAGE_FALLBACK = {
+  SESSION_EXPIRED: "\u767B\u5F55\u72B6\u6001\u5DF2\u8FC7\u671F\uFF0C\u8BF7\u91CD\u65B0\u767B\u5F55",
+  GATEWAY_UNREACHABLE: "\u7F51\u5173\u6682\u65F6\u4E0D\u53EF\u7528\uFF0C\u8BF7\u7A0D\u540E\u91CD\u8BD5",
+  SKILL_ASSIGNMENT_GONE: "\u8FD9\u6761\u5206\u914D\u5DF2\u5931\u6548\uFF0C\u7A0D\u540E\u540C\u6B65\u4F1A\u91CD\u65B0\u6838\u5BF9",
+  SKILL_DISTRIBUTION_DISABLED: "\u672C\u90E8\u7F72\u672A\u542F\u7528\u6280\u80FD\u4E0B\u53D1\uFF0C\u8BF7\u8054\u7CFB\u7BA1\u7406\u5458"
+};
+var MANAGED_SKILLS_GENERIC_FAILURE_MESSAGE = "\u6280\u80FD\u6E05\u5355\u6682\u65F6\u65E0\u6CD5\u83B7\u53D6\uFF0C\u8BF7\u7A0D\u540E\u91CD\u8BD5";
+var MANAGED_SKILLS_SESSION_EXPIRED_MESSAGE = "\u767B\u5F55\u72B6\u6001\u5DF2\u8FC7\u671F\uFF0C\u8BF7\u91CD\u65B0\u767B\u5F55";
+var MANAGED_SKILLS_PACKAGE_TOO_LARGE_CODE = "SKILL_PACKAGE_TOO_LARGE";
+var MANAGED_SKILLS_PACKAGE_TOO_LARGE_MESSAGE = "\u8FD9\u4E2A\u6280\u80FD\u5305\u8D85\u8FC7\u4E86\u5927\u5C0F\u4E0A\u9650\uFF0C\u6682\u65F6\u88C5\u4E0D\u4E0A\uFF0C\u8BF7\u8054\u7CFB\u7BA1\u7406\u5458";
+function displayManagedSkillsMessage(code, message) {
+  const text = typeof message === "string" ? message.trim() : "";
+  if (text === "") return MANAGED_SKILLS_MESSAGE_FALLBACK[code] ?? MANAGED_SKILLS_GENERIC_FAILURE_MESSAGE;
+  const leaksImplementationDetail = /https?:\/\//i.test(text) || /\bHTTP\s*\d{3}\b/i.test(text) || /\bbaseURL\b/i.test(text);
+  if (leaksImplementationDetail) return MANAGED_SKILLS_MESSAGE_FALLBACK[code] ?? MANAGED_SKILLS_GENERIC_FAILURE_MESSAGE;
+  return text;
+}
+var ASSIGNMENT_ID_PATTERN2 = /^[0-9a-fA-F-]{1,64}$/;
+function parseManagedSkillsPayload(endpoint, raw) {
+  if (raw === void 0 || raw === null) {
+    if (endpoint === "package") throw new ManagedSkillsRequestError("bad-request", "\u53D6\u6280\u80FD\u5305\u8BF7\u6C42\u7F3A\u5C11 assignmentId\u3002");
+    return {};
+  }
+  if (typeof raw !== "object" || Array.isArray(raw)) {
+    throw new ManagedSkillsRequestError("bad-request", "\u6280\u80FD\u6E05\u5355\u8BF7\u6C42\u53C2\u6570\u4E0D\u5408\u6CD5\u3002");
+  }
+  const record = raw;
+  const keys = Object.keys(record);
+  if (endpoint !== "package") {
+    if (keys.length > 0) throw new ManagedSkillsRequestError("bad-request", `\u6280\u80FD\u6E05\u5355\u8BF7\u6C42\u5305\u542B\u672A\u77E5\u5B57\u6BB5 '${keys[0]}'\u3002`);
+    return {};
+  }
+  for (const key of keys) {
+    if (key !== "assignmentId") throw new ManagedSkillsRequestError("bad-request", `\u53D6\u6280\u80FD\u5305\u8BF7\u6C42\u5305\u542B\u672A\u77E5\u5B57\u6BB5 '${key}'\u3002`);
+  }
+  const rawId = record["assignmentId"];
+  if (typeof rawId !== "string" || !ASSIGNMENT_ID_PATTERN2.test(rawId.trim())) {
+    throw new ManagedSkillsRequestError("bad-request", "\u53D6\u6280\u80FD\u5305\u8BF7\u6C42\u7684 assignmentId \u4E0D\u5408\u6CD5\u3002");
+  }
+  return { assignmentId: rawId.trim() };
+}
+function isManagedSkillsRpcEndpoint(endpoint) {
+  return MANAGED_SKILLS_RPC_ENDPOINTS.includes(endpoint);
+}
+function textOrUndefined2(value) {
+  return typeof value === "string" && value.trim() !== "" ? value : void 0;
+}
+function normalizeAssignment2(raw, log) {
+  if (typeof raw !== "object" || raw === null || Array.isArray(raw)) return void 0;
+  const record = raw;
+  const assignmentId = textOrUndefined2(record["assignmentId"]);
+  const skillName = textOrUndefined2(record["skillName"]);
+  const contentSha256 = textOrUndefined2(record["contentSha256"]);
+  if (assignmentId === void 0 || skillName === void 0 || contentSha256 === void 0) {
+    log?.("hiwork-core: \u6280\u80FD\u6E05\u5355\u91CC\u6709\u4E00\u6761\u7ED3\u6784\u4E0D\u5B8C\u6574\u7684\u5206\u914D\uFF0C\u5DF2\u8DF3\u8FC7");
+    return void 0;
+  }
+  const revision = record["revision"];
+  const sizeBytes = record["sizeBytes"];
+  return {
+    assignmentId,
+    revision: typeof revision === "number" && Number.isFinite(revision) ? revision : 0,
+    slug: textOrUndefined2(record["slug"]) ?? skillName,
+    displayName: textOrUndefined2(record["displayName"]) ?? skillName,
+    skillName,
+    description: textOrUndefined2(record["description"]) ?? "",
+    contentSha256,
+    sizeBytes: typeof sizeBytes === "number" && Number.isFinite(sizeBytes) ? sizeBytes : 0,
+    version: textOrUndefined2(record["version"]) ?? "",
+    updatedAt: textOrUndefined2(record["updatedAt"]) ?? ""
+  };
+}
+function failureOf2(error) {
+  if (error instanceof ManagedSkillsRequestError) return { code: error.code, message: error.message, details: {} };
+  if (error instanceof GatewayError) {
+    return { code: error.code, message: displayManagedSkillsMessage(error.code, error.message), details: {} };
+  }
+  return { code: "internal", message: MANAGED_SKILLS_GENERIC_FAILURE_MESSAGE, details: {} };
+}
+function normalizeSession(sessionCookie) {
+  return sessionCookie === void 0 || sessionCookie === "" ? void 0 : sessionCookie;
+}
+var ManagedSkillsStore = class {
+  constructor(deps, now = () => Date.now()) {
+    this.deps = deps;
+    this.now = now;
+  }
+  cached;
+  lastError;
+  /** 产生 `cached` 的那个会话 cookie（只在内存里）。会话绑定的全部依据就是它。 */
+  cachedSession;
+  /**
+   * 在飞请求连同它所用的会话一起记账：并发合并**只允许发生在同一会话内**。
+   * 合并跨会话等于把 A 那次拉取的结果交给 B——`refresh` 是客户端唯一被允许用来删本地技能的那条
+   * 路（spec §6 的唯一安全不变量），这条缝不能留。
+   */
+  inFlight;
+  /**
+   * 当前缓存（同步读，不发请求）。从没成功过返回 undefined；
+   * 最近一次失败会以 `stale + lastError` 标注在上一次成功的结果上。
+   *
+   * ⚠️ **本方法不做会话绑定**——它是 spec §4.5 冻结的同步读，而当前会话只能异步解析（见
+   * {@link peekForCurrentSession}），同步函数里根本判不了「这份缓存还算不算我的」。
+   * 所以模块内唯一的正确用法是：先 `await store.peekForCurrentSession()`，再（或由它内部）`peek()`。
+   * 直接调 `peek()` 只适合诊断与测试断言内存状态。
+   */
+  peek() {
+    if (this.cached === void 0) return void 0;
+    return this.lastError === void 0 ? this.cached : { ...this.cached, stale: true, lastError: this.lastError };
+  }
+  /**
+   * 「当前会话下的缓存」= 解析当前会话 → 剪枝 → {@link peek}。
+   *
+   * 为什么比对写在**这里**而不是 `peek()` 里：`peek()` 是 spec §4.5 冻结的**同步**接口，而
+   * 「当前是谁」只有 `deps.resolveSession()` 异步拿得到。两者凑不到一个函数里，于是分工只能是
+   * 「async 的一侧先绑会话，sync 的 `peek()` 再读」。这是本文件里唯一一处 async 前置步骤，
+   * 端点实现（`handleManagedSkillsEndpoint`）必须走它、不许绕过。
+   */
+  async peekForCurrentSession() {
+    this.bindSession(normalizeSession(await this.deps.resolveSession()));
+    return this.peek();
+  }
+  /**
+   * 会话绑定：缓存只属于产生它的那个会话；当前会话不是它（含**当前没有会话**）→ 立刻丢弃。
+   *
+   * 这是刻意与 `src/managed-mcp.ts` **不同**的一处，**不许**为了「两半对齐」改回去：
+   *  - 技能这半的 {@link clear} 是 spec §4.5 冻结要求提供的接口，却**没有任何调用方**——端点白名单
+   *    只有 `snapshot`/`refresh`/`package`，客户端够不到 Host 的内存，Host 自己也没有登出钩子；
+   *    而「靠一个没人调的钩子保证安全」正是**已经失败过一次**的做法（MCP 那条链路里同样的
+   *    `clear()` 也悬着），不能把安全不变量挂在它上面。
+   *  - 绑会话**自带**：不依赖任何调用方、不依赖谁记得清缓存，且方向更严——登出后（当前会话为空）
+   *    与换账号后都不会再吐出上一个人的清单。更严在这里恒等于更安全。
+   *
+   * 它也**不**触碰「失败不覆写缓存」那条铁律：剪枝的触发条件是**会话变了**，不是「这一次拉取
+   * 失败了」。失败路径仍然原样保留本会话上一次成功的清单（`stale + lastError`）。
+   */
+  bindSession(current) {
+    if (current === this.cachedSession) return;
+    this.cached = void 0;
+    this.cachedSession = void 0;
+    this.lastError = void 0;
+  }
+  /**
+   * 去网关拉一次清单并更新缓存。失败时抛异常，且**本会话的缓存原样保留**。
+   *
+   * 并发调用合并成一次请求：后台预热与客户端手动同步撞在一起时不必打两遍网关。
+   * 合并**只在同一会话内**——两个会话合并到一起，就等于把 A 的结果发给 B。
+   */
+  async load() {
+    const session = normalizeSession(await this.deps.resolveSession());
+    const inFlight = this.inFlight;
+    if (inFlight !== void 0 && inFlight.session === session) return await inFlight.task;
+    const task = this.fetchOnce(session);
+    this.inFlight = { session, task };
+    try {
+      return await task;
+    } finally {
+      if (this.inFlight?.task === task) this.inFlight = void 0;
+    }
+  }
+  /**
+   * 清空内存清单（登出 / 换账号调用）。
+   *
+   * ⚠️ **当前没有任何调用方**：这是 spec §4.5 冻结要求提供的接口（客户端半边的同名方法有调用方，
+   * Host 这半没有），而它的用途已经被**会话绑定**覆盖——缓存按会话剪枝，登出 / 换账号后再也吐不出
+   * 上一个人的清单（见 {@link bindSession}）。保留它是为了不改冻结接口；真要删得先改 spec §4.5。
+   * 冻结接口里的成员不要悄悄删掉，哪怕它暂时是死的。
+   */
+  clear() {
+    this.cached = void 0;
+    this.lastError = void 0;
+    this.cachedSession = void 0;
+  }
+  async fetchOnce(sessionCookie) {
+    try {
+      if (sessionCookie === void 0) {
+        throw new GatewayError("SESSION_EXPIRED", MANAGED_SKILLS_SESSION_EXPIRED_MESSAGE);
+      }
+      const gateway = this.deps.gateway();
+      if (gateway === void 0) {
+        throw new GatewayError("GATEWAY_UNREACHABLE", "\u7F51\u5173\u5730\u5740\u672A\u914D\u7F6E\uFF0C\u8BF7\u5148\u5728\u300C\u7F51\u5173\u6A21\u578B\u300D\u91CC\u5B8C\u6210\u767B\u5F55");
+      }
+      const view = await gateway.getMySkillAssignments(sessionCookie);
+      if (typeof view !== "object" || view === null || !Array.isArray(view.assignments)) {
+        this.deps.log?.("hiwork-core: \u6280\u80FD\u6E05\u5355\u54CD\u5E94\u4E0D\u662F\u5E26 assignments \u6570\u7EC4\u7684\u5BF9\u8C61\uFF08\u53EF\u80FD\u7684\u4E2D\u95F4\u5C42\uFF09\uFF0C\u6309\u53D6\u6570\u5931\u8D25\u5904\u7406");
+        throw new GatewayError("GATEWAY_UNREACHABLE", MANAGED_SKILLS_GENERIC_FAILURE_MESSAGE);
+      }
+      const assignments = [];
+      for (const item of view.assignments) {
+        const normalized = normalizeAssignment2(item, this.deps.log);
+        if (normalized !== void 0) assignments.push(normalized);
+      }
+      const snapshot = {
+        revision: typeof view.revision === "number" && Number.isFinite(view.revision) ? view.revision : 0,
+        fetchedAt: new Date(this.now()).toISOString(),
+        assignments,
+        stale: false
+      };
+      this.cached = snapshot;
+      this.cachedSession = sessionCookie;
+      this.lastError = void 0;
+      return snapshot;
+    } catch (error) {
+      this.lastError = failureOf2(error);
+      throw error;
+    }
+  }
+};
+function isAborted5(signal) {
+  return signal?.aborted === true;
+}
+async function handleManagedSkillsEndpoint(endpoint, rawPayload, deps, store, signal) {
+  try {
+    if (isAborted5(signal)) return failure5("cancelled", "\u6280\u80FD\u6E05\u5355\u8BF7\u6C42\u5DF2\u53D6\u6D88\u3002");
+    if (!isManagedSkillsRpcEndpoint(endpoint)) {
+      throw new ManagedSkillsRequestError("bad-request", `\u672A\u77E5\u7684\u6280\u80FD\u6E05\u5355\u7AEF\u70B9 '${endpoint}'`);
+    }
+    const payload = parseManagedSkillsPayload(endpoint, rawPayload);
+    if (endpoint === "package") {
+      const assignmentId = payload.assignmentId;
+      if (assignmentId === void 0) throw new ManagedSkillsRequestError("bad-request", "\u53D6\u6280\u80FD\u5305\u8BF7\u6C42\u7F3A\u5C11 assignmentId\u3002");
+      return await handlePackage(assignmentId, deps, signal);
+    }
+    const cached = await store.peekForCurrentSession();
+    if (endpoint === "snapshot" && cached !== void 0) return { ok: true, value: cached };
+    return { ok: true, value: await store.load() };
+  } catch (error) {
+    deps.log?.(`hiwork-core: \u6280\u80FD\u6E05\u5355 RPC '${endpoint}' \u5931\u8D25\uFF08${error instanceof Error ? error.name : typeof error}\uFF09`);
+    return { ok: false, error: failureOf2(error) };
+  }
+}
+async function handlePackage(assignmentId, deps, signal) {
+  const sessionCookie = await deps.resolveSession();
+  if (sessionCookie === void 0 || sessionCookie === "") {
+    return failure5("SESSION_EXPIRED", MANAGED_SKILLS_SESSION_EXPIRED_MESSAGE);
+  }
+  const gateway = deps.gateway();
+  if (gateway === void 0) {
+    return failure5("GATEWAY_UNREACHABLE", "\u7F51\u5173\u5730\u5740\u672A\u914D\u7F6E\uFF0C\u8BF7\u5148\u5728\u300C\u7F51\u5173\u6A21\u578B\u300D\u91CC\u5B8C\u6210\u767B\u5F55");
+  }
+  if (isAborted5(signal)) return failure5("cancelled", "\u6280\u80FD\u6E05\u5355\u8BF7\u6C42\u5DF2\u53D6\u6D88\u3002");
+  const pkg = await gateway.getMySkillPackage(sessionCookie, assignmentId);
+  const bytes = pkg?.bytes;
+  const skillName = textOrUndefined2(pkg?.skillName);
+  const contentSha256 = textOrUndefined2(pkg?.contentSha256);
+  if (!(bytes instanceof Uint8Array) || bytes.byteLength === 0 || skillName === void 0 || contentSha256 === void 0) {
+    deps.log?.("hiwork-core: \u53D6\u6280\u80FD\u5305\u6536\u5230\u65E0\u6548\u54CD\u5E94\uFF08\u7F3A skillName / contentSha256 \u6216\u7A7A\u5305\u4F53\uFF09");
+    return failure5("internal", MANAGED_SKILLS_GENERIC_FAILURE_MESSAGE);
+  }
+  if (bytes.byteLength > MAX_MANAGED_SKILL_ARCHIVE_BYTES) {
+    deps.log?.("hiwork-core: \u6280\u80FD\u5305\u8D85\u8FC7\u5927\u5C0F\u4E0A\u9650\uFF0C\u5DF2\u62D2\u7EDD\u642C\u8FD0");
+    return failure5(MANAGED_SKILLS_PACKAGE_TOO_LARGE_CODE, MANAGED_SKILLS_PACKAGE_TOO_LARGE_MESSAGE);
+  }
+  return {
+    ok: true,
+    value: {
+      assignmentId,
+      skillName,
+      contentSha256,
+      // Host 半边只跑在 Node 侧（`tsconfig.build.json` 排除 `src/client/**`，client bundle
+      // 不 import 本文件），所以直接用 Buffer；客户端那半边的解码在 Task 11 的文件里。
+      archiveBase64: Buffer.from(bytes).toString("base64")
+    }
+  };
+}
+function failure5(code, message) {
+  return { ok: false, error: { code, message, details: {} } };
+}
+function registerManagedSkillsRpc(ctx, deps, store) {
+  const handler = (endpoint, payload, signal) => handleManagedSkillsEndpoint(endpoint, payload, deps, store, signal);
+  const remove = ctx.connection.rpc.handle(MANAGED_SKILLS_RPC_CHANNEL, handler, { authority: "loopback" });
+  return async () => {
+    await remove();
+  };
+}
+
+// src/workbench-bridge.ts
+var WORKBENCH_RPC_CHANNEL = "/hiwork-workbench";
+var WORKBENCH_RPC_ENDPOINTS = ["snapshot", "refresh"];
+var WORKBENCH_REFRESH_INTERVAL_MS = 30 * 6e4;
+var WorkbenchRequestError = class extends Error {
+  constructor(code, message) {
+    super(message);
+    this.code = code;
+    this.name = "WorkbenchRequestError";
+  }
+};
+var WORKBENCH_GENERIC_FAILURE_MESSAGE = "\u5DE5\u4F5C\u53F0\u5E94\u7528\u6E05\u5355\u6682\u65F6\u65E0\u6CD5\u83B7\u53D6\uFF0C\u8BF7\u7A0D\u540E\u91CD\u8BD5";
+var WORKBENCH_SESSION_EXPIRED_MESSAGE = "\u767B\u5F55\u72B6\u6001\u5DF2\u8FC7\u671F\uFF0C\u8BF7\u91CD\u65B0\u767B\u5F55";
+var WORKBENCH_DISABLED_MESSAGE = "\u672C\u90E8\u7F72\u672A\u542F\u7528\u5DE5\u4F5C\u53F0\uFF0C\u8BF7\u8054\u7CFB\u7BA1\u7406\u5458";
+var WORKBENCH_DISABLED_CODE = "WORKBENCH_DISABLED";
+var WORKBENCH_MESSAGE_FALLBACK = {
+  SESSION_EXPIRED: WORKBENCH_SESSION_EXPIRED_MESSAGE,
+  GATEWAY_UNREACHABLE: WORKBENCH_GENERIC_FAILURE_MESSAGE,
+  [WORKBENCH_DISABLED_CODE]: WORKBENCH_DISABLED_MESSAGE
+};
+function displayWorkbenchMessage(code, message) {
+  const text = typeof message === "string" ? message.trim() : "";
+  if (text === "") return WORKBENCH_MESSAGE_FALLBACK[code] ?? WORKBENCH_GENERIC_FAILURE_MESSAGE;
+  const leaksImplementationDetail = /https?:\/\//i.test(text) || /\bHTTP\s*\d{3}\b/i.test(text) || /\bbaseURL\b/i.test(text);
+  if (leaksImplementationDetail) return WORKBENCH_MESSAGE_FALLBACK[code] ?? WORKBENCH_GENERIC_FAILURE_MESSAGE;
+  return text;
+}
+function parseWorkbenchPayload(endpoint, raw) {
+  if (raw === void 0 || raw === null) return {};
+  if (typeof raw !== "object" || Array.isArray(raw)) {
+    throw new WorkbenchRequestError("bad-request", "\u5DE5\u4F5C\u53F0\u6E05\u5355\u8BF7\u6C42\u53C2\u6570\u4E0D\u5408\u6CD5\u3002");
+  }
+  const record = raw;
+  const keys = Object.keys(record);
+  const first = keys[0];
+  if (first !== void 0) {
+    throw new WorkbenchRequestError("bad-request", `\u5DE5\u4F5C\u53F0\u6E05\u5355\u8BF7\u6C42\u5305\u542B\u672A\u77E5\u5B57\u6BB5 '${first}'\u3002`);
+  }
+  return {};
+}
+function isWorkbenchRpcEndpoint(endpoint) {
+  return WORKBENCH_RPC_ENDPOINTS.includes(endpoint);
+}
+function textOrUndefined3(value) {
+  return typeof value === "string" && value.trim() !== "" ? value : void 0;
+}
+function isRecord2(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function stringArray(value) {
+  if (!Array.isArray(value)) return [];
+  return value.filter((item) => typeof item === "string" && item.trim() !== "");
+}
+function normalizeExecutor(raw) {
+  if (!isRecord2(raw)) return void 0;
+  const kind = textOrUndefined3(raw["kind"]);
+  if (kind === void 0) return void 0;
+  const executor = { ...raw, kind };
+  const mode = textOrUndefined3(raw["mode"]);
+  if (mode === void 0) delete executor.mode;
+  else executor.mode = mode;
+  return executor;
+}
+function normalizeInput(raw) {
+  if (!isRecord2(raw)) return void 0;
+  const key = textOrUndefined3(raw["key"]);
+  if (key === void 0) return void 0;
+  return {
+    ...raw,
+    key,
+    type: textOrUndefined3(raw["type"]) ?? "",
+    label: textOrUndefined3(raw["label"]) ?? key,
+    required: raw["required"] === true
+  };
+}
+function normalizeOutput(raw) {
+  if (!isRecord2(raw)) return void 0;
+  const key = textOrUndefined3(raw["key"]);
+  if (key === void 0) return void 0;
+  return { ...raw, key, type: textOrUndefined3(raw["type"]) ?? "" };
+}
+function normalizeApp(raw, log) {
+  if (!isRecord2(raw)) return void 0;
+  const code = textOrUndefined3(raw["code"]);
+  const executor = normalizeExecutor(raw["executor"]);
+  if (code === void 0 || executor === void 0) {
+    log?.("hiwork-core: \u5DE5\u4F5C\u53F0\u6E05\u5355\u91CC\u6709\u4E00\u6761\u7ED3\u6784\u4E0D\u5B8C\u6574\u7684\u5E94\u7528\uFF08\u7F3A code \u6216 executor.kind\uFF09\uFF0C\u5DF2\u8DF3\u8FC7");
+    return void 0;
+  }
+  const iconUrl = textOrUndefined3(raw["icon"]);
+  const category = isRecord2(raw["category"]) ? raw["category"] : void 0;
+  const inputs = [];
+  for (const item of Array.isArray(raw["inputs"]) ? raw["inputs"] : []) {
+    const normalized = normalizeInput(item);
+    if (normalized !== void 0) inputs.push(normalized);
+  }
+  const outputs = [];
+  for (const item of Array.isArray(raw["outputs"]) ? raw["outputs"] : []) {
+    const normalized = normalizeOutput(item);
+    if (normalized !== void 0) outputs.push(normalized);
+  }
+  const revision = raw["revision"];
+  return {
+    code,
+    displayName: textOrUndefined3(raw["displayName"]) ?? code,
+    summary: textOrUndefined3(raw["summary"]) ?? "",
+    // `exactOptionalPropertyTypes` 下不许显式写 undefined，用条件展开。
+    ...iconUrl === void 0 ? {} : { iconUrl },
+    category: {
+      code: textOrUndefined3(category?.["code"]) ?? "",
+      name: textOrUndefined3(category?.["name"]) ?? ""
+    },
+    tags: stringArray(raw["tags"]),
+    featured: raw["featured"] === true,
+    revision: typeof revision === "number" && Number.isFinite(revision) ? revision : 0,
+    executor,
+    inputs,
+    outputs,
+    effects: stringArray(raw["effects"])
+  };
+}
+function failureOf3(error) {
+  if (error instanceof WorkbenchRequestError) return { code: error.code, message: error.message, details: {} };
+  if (error instanceof GatewayError) {
+    return { code: error.code, message: displayWorkbenchMessage(error.code, error.message), details: {} };
+  }
+  return { code: "internal", message: WORKBENCH_GENERIC_FAILURE_MESSAGE, details: {} };
+}
+function normalizeSession2(sessionCookie) {
+  return sessionCookie === void 0 || sessionCookie === "" ? void 0 : sessionCookie;
+}
+function isAborted6(signal) {
+  return signal?.aborted === true;
+}
+var WorkbenchStore = class {
+  constructor(deps, now = () => Date.now()) {
+    this.deps = deps;
+    this.now = now;
+  }
+  cached;
+  lastError;
+  /** 产生 `cached` 的那个会话 cookie（只在内存里）。会话绑定的全部依据就是它。 */
+  cachedSession;
+  /**
+   * 在飞请求连同它所用的会话一起记账：并发合并**只允许发生在同一会话内**。
+   * 合并跨会话等于把 A 那次拉取的结果交给 B（登出 / 换账号后货架会显示上一个人的应用）。
+   */
+  inFlight;
+  /**
+   * 当前缓存（同步读，不发请求）。从没成功过返回 undefined；
+   * 最近一次失败会以 `stale + lastError` 标注在上一次成功的结果上。
+   *
+   * ⚠️ **本方法不做会话绑定**——它是 spec §4.5 冻结的同步读，而当前会话只能异步解析（见
+   * {@link peekForCurrentSession}），同步函数里根本判不了「这份缓存还算不算我的」。
+   * 所以模块内唯一的正确用法是：先 `await store.peekForCurrentSession()`，再（或由它内部）`peek()`。
+   * 直接调 `peek()` 只适合诊断与测试断言内存状态。
+   */
+  peek() {
+    if (this.cached === void 0) return void 0;
+    return this.lastError === void 0 ? this.cached : { ...this.cached, stale: true, lastError: this.lastError };
+  }
+  /**
+   * 「当前会话下的缓存」= 解析当前会话 → 剪枝 → {@link peek}。
+   *
+   * 与 `src/managed-skills.ts` 的同名方法逐字同款：`peek()` 是 spec §4.5 冻结的**同步**接口，而
+   * 「当前是谁」只有 `deps.resolveSession()` 异步拿得到，于是分工只能是「async 的一侧先绑会话，
+   * sync 的 `peek()` 再读」。端点实现必须走它、不许绕过。
+   */
+  async peekForCurrentSession() {
+    this.bindSession(normalizeSession2(await this.deps.resolveSession()));
+    return this.peek();
+  }
+  /**
+   * 会话绑定：缓存只属于产生它的那个会话；当前会话不是它（含**当前没有会话**）→ 立刻丢弃。
+   *
+   * 与技能清单那半逐字同款（那里写了为什么**不许**为了「两半对齐」改回 MCP 的写法）：
+   * 绑会话**自带**——不依赖任何调用方、不依赖谁记得清缓存，登出后（当前会话为空）与换账号后
+   * 都不会再吐出上一个人的清单。`clear()` 也没有任何调用方（端点白名单够不到 Host 内存），
+   * 把安全不变量挂在一个没人调的钩子上正是已经失败过一次的做法。
+   *
+   * 它也**不**触碰「失败不覆写缓存」那条铁律：剪枝的触发条件是**会话变了**，不是「这一次拉取
+   * 失败了」。失败路径仍然原样保留本会话上一次成功的清单（`stale + lastError`）。
+   */
+  bindSession(current) {
+    if (current === this.cachedSession) return;
+    this.cached = void 0;
+    this.cachedSession = void 0;
+    this.lastError = void 0;
+  }
+  /**
+   * 去网关拉一次清单并更新缓存。失败时抛异常，且**本会话的缓存原样保留**。
+   *
+   * 并发调用合并成一次请求：后台预热与消费方的手动刷新撞在一起时不必打两遍网关。
+   * 合并**只在同一会话内**——两个会话合并到一起，就等于把 A 的结果发给 B。
+   */
+  async load() {
+    const session = normalizeSession2(await this.deps.resolveSession());
+    const inFlight = this.inFlight;
+    if (inFlight !== void 0 && inFlight.session === session) return await inFlight.task;
+    const task = this.fetchOnce(session);
+    this.inFlight = { session, task };
+    try {
+      return await task;
+    } finally {
+      if (this.inFlight?.task === task) this.inFlight = void 0;
+    }
+  }
+  /**
+   * 清空内存清单（登出 / 换账号调用）。
+   *
+   * ⚠️ **当前没有任何调用方**：这是 spec §4.5 冻结要求提供的接口（与技能清单那半同款），而它的
+   * 用途已经被**会话绑定**覆盖——缓存按会话剪枝，登出 / 换账号后再也吐不出上一个人的清单。
+   * 保留它是为了不改冻结接口；真要删得先改 spec §4.5。冻结接口里的成员不要悄悄删掉。
+   */
+  clear() {
+    this.cached = void 0;
+    this.lastError = void 0;
+    this.cachedSession = void 0;
+  }
+  async fetchOnce(sessionCookie) {
+    try {
+      if (sessionCookie === void 0) {
+        throw new GatewayError("SESSION_EXPIRED", WORKBENCH_SESSION_EXPIRED_MESSAGE);
+      }
+      const gateway = this.deps.gateway();
+      if (gateway === void 0) {
+        throw new GatewayError("GATEWAY_UNREACHABLE", "\u7F51\u5173\u5730\u5740\u672A\u914D\u7F6E\uFF0C\u8BF7\u5148\u5728\u300C\u7F51\u5173\u6A21\u578B\u300D\u91CC\u5B8C\u6210\u767B\u5F55");
+      }
+      const view = await gateway.getMyWorkbenchApps(sessionCookie);
+      if (!isRecord2(view) || !Array.isArray(view.apps)) {
+        this.deps.log?.("hiwork-core: \u5DE5\u4F5C\u53F0\u6E05\u5355\u54CD\u5E94\u4E0D\u662F\u5E26 apps \u6570\u7EC4\u7684\u5BF9\u8C61\uFF08\u53EF\u80FD\u7684\u4E2D\u95F4\u5C42\uFF09\uFF0C\u6309\u53D6\u6570\u5931\u8D25\u5904\u7406");
+        throw new GatewayError("GATEWAY_UNREACHABLE", WORKBENCH_GENERIC_FAILURE_MESSAGE);
+      }
+      const apps = [];
+      for (const item of view.apps) {
+        const normalized = normalizeApp(item, this.deps.log);
+        if (normalized !== void 0) apps.push(normalized);
+      }
+      const snapshot = {
+        revision: typeof view.revision === "number" && Number.isFinite(view.revision) ? view.revision : 0,
+        fetchedAt: new Date(this.now()).toISOString(),
+        apps,
+        stale: false
+      };
+      this.cached = snapshot;
+      this.cachedSession = sessionCookie;
+      this.lastError = void 0;
+      return snapshot;
+    } catch (error) {
+      this.lastError = failureOf3(error);
+      throw error;
+    }
+  }
+};
+async function handleWorkbenchEndpoint(endpoint, rawPayload, deps, store, signal) {
+  try {
+    if (isAborted6(signal)) return failure6("cancelled", "\u5DE5\u4F5C\u53F0\u6E05\u5355\u8BF7\u6C42\u5DF2\u53D6\u6D88\u3002");
+    if (!isWorkbenchRpcEndpoint(endpoint)) {
+      throw new WorkbenchRequestError("bad-request", `\u672A\u77E5\u7684\u5DE5\u4F5C\u53F0\u6E05\u5355\u7AEF\u70B9 '${endpoint}'`);
+    }
+    parseWorkbenchPayload(endpoint, rawPayload);
+    const cached = await store.peekForCurrentSession();
+    if (endpoint === "snapshot" && cached !== void 0) return { ok: true, value: cached };
+    return { ok: true, value: await store.load() };
+  } catch (error) {
+    deps.log?.(`hiwork-core: \u5DE5\u4F5C\u53F0\u6E05\u5355 RPC '${endpoint}' \u5931\u8D25\uFF08${error instanceof Error ? error.name : typeof error}\uFF09`);
+    return { ok: false, error: failureOf3(error) };
+  }
+}
+function failure6(code, message) {
+  return { ok: false, error: { code, message, details: {} } };
+}
+function registerWorkbenchRpc(ctx, deps, store) {
+  const handler = (endpoint, payload, signal) => handleWorkbenchEndpoint(endpoint, payload, deps, store, signal);
+  const remove = ctx.connection.rpc.handle(WORKBENCH_RPC_CHANNEL, handler, { authority: "loopback" });
+  return async () => {
+    await remove();
+  };
+}
+
+// src/office-credentials.ts
+var OFFICE_CREDENTIALS_SERVICE = "hiworkOfficeCredentials";
+var OFFICE_MESSAGE_FALLBACK = {
+  SESSION_EXPIRED: "\u767B\u5F55\u72B6\u6001\u5DF2\u8FC7\u671F\uFF0C\u8BF7\u91CD\u65B0\u767B\u5F55",
+  GATEWAY_UNREACHABLE: "\u7F51\u5173\u6682\u65F6\u4E0D\u53EF\u7528\uFF0C\u8BF7\u7A0D\u540E\u91CD\u8BD5",
+  OFFICE_NOT_CONFIGURED: "\u672C\u90E8\u7F72\u5C1A\u672A\u914D\u7F6E HiWork Office \u6587\u6863\u529E\u516C\u96C6\u6210\uFF0C\u8BF7\u8054\u7CFB\u7BA1\u7406\u5458"
+};
+var OFFICE_CREDENTIALS_GENERIC_FAILURE_MESSAGE = "HiWork Office \u96C6\u6210\u914D\u7F6E\u6682\u65F6\u65E0\u6CD5\u83B7\u53D6\uFF0C\u8BF7\u7A0D\u540E\u91CD\u8BD5";
+var OFFICE_CREDENTIALS_SESSION_EXPIRED_MESSAGE = "\u767B\u5F55\u72B6\u6001\u5DF2\u8FC7\u671F\uFF0C\u8BF7\u91CD\u65B0\u767B\u5F55";
+function displayOfficeGatewayMessage(code, message) {
+  const text = typeof message === "string" ? message.trim() : "";
+  if (text === "") return OFFICE_MESSAGE_FALLBACK[code] ?? OFFICE_CREDENTIALS_GENERIC_FAILURE_MESSAGE;
+  const leaksImplementationDetail = /https?:\/\//i.test(text) || /\bHTTP\s*\d{3}\b/i.test(text) || /\bbaseURL\b/i.test(text);
+  if (leaksImplementationDetail) return OFFICE_MESSAGE_FALLBACK[code] ?? OFFICE_CREDENTIALS_GENERIC_FAILURE_MESSAGE;
+  return text;
+}
+var OfficeCredentialsBroker = class {
+  constructor(deps) {
+    this.deps = deps;
+  }
+  async resolve() {
+    try {
+      const sessionCookie = await this.deps.resolveSession();
+      if (sessionCookie === void 0 || sessionCookie === "") {
+        return { ok: false, code: "SESSION_EXPIRED", message: OFFICE_CREDENTIALS_SESSION_EXPIRED_MESSAGE };
+      }
+      const gateway = this.deps.gateway();
+      if (gateway === void 0) {
+        return {
+          ok: false,
+          code: "GATEWAY_UNREACHABLE",
+          message: "\u7F51\u5173\u5730\u5740\u672A\u914D\u7F6E\uFF0C\u8BF7\u5148\u5728\u300C\u7F51\u5173\u6A21\u578B\u300D\u91CC\u5B8C\u6210\u767B\u5F55"
+        };
+      }
+      const view = await gateway.getMyOfficeConfig(sessionCookie);
+      const documentServerUrl = typeof view?.documentServerUrl === "string" ? view.documentServerUrl.trim() : "";
+      const jwtSecret = typeof view?.jwtSecret === "string" ? view.jwtSecret.trim() : "";
+      if (documentServerUrl === "" || jwtSecret === "") {
+        this.deps.log?.("hiwork-core: \u7F51\u5173\u8FD4\u56DE\u7684 office-config \u4E0D\u5B8C\u6574\uFF08\u7F3A documentServerUrl \u6216 jwtSecret\uFF09");
+        return { ok: false, code: "GATEWAY_UNREACHABLE", message: OFFICE_CREDENTIALS_GENERIC_FAILURE_MESSAGE };
+      }
+      return {
+        ok: true,
+        value: {
+          documentServerUrl,
+          jwtSecret,
+          fetchedAt: (this.deps.now?.() ?? /* @__PURE__ */ new Date()).toISOString(),
+          relayEnabled: view?.relayEnabled === true
+        }
+      };
+    } catch (error) {
+      if (error instanceof GatewayError) {
+        return { ok: false, code: error.code, message: displayOfficeGatewayMessage(error.code, error.message) };
+      }
+      this.deps.log?.(
+        `hiwork-core: HiWork Office \u51ED\u636E\u83B7\u53D6\u5931\u8D25\uFF08${error instanceof Error ? error.name : typeof error}\uFF09`
+      );
+      return { ok: false, code: "internal", message: OFFICE_CREDENTIALS_GENERIC_FAILURE_MESSAGE };
+    }
+  }
+};
+function provideOfficeCredentials(ctx, deps) {
+  const service = new OfficeCredentialsBroker(deps);
+  const dispose = ctx.provide(OFFICE_CREDENTIALS_SERVICE, service);
+  return typeof dispose === "function" ? dispose : () => {
+  };
+}
+
+// src/office-relay.ts
+var OFFICE_RELAY_SERVICE = "hiworkOfficeRelay";
+var OFFICE_RELAY_MESSAGE_FALLBACK = {
+  SESSION_EXPIRED: "\u767B\u5F55\u72B6\u6001\u5DF2\u8FC7\u671F\uFF0C\u8BF7\u91CD\u65B0\u767B\u5F55",
+  GATEWAY_UNREACHABLE: "\u7F51\u5173\u6682\u65F6\u4E0D\u53EF\u7528\uFF0C\u8BF7\u7A0D\u540E\u91CD\u8BD5",
+  RELAY_DISABLED: "\u672C\u90E8\u7F72\u672A\u542F\u7528\u6587\u6863\u4E2D\u7EE7\uFF0C\u8BF7\u8054\u7CFB\u7BA1\u7406\u5458",
+  RELAY_EXPIRED: "\u7F16\u8F91\u4F1A\u8BDD\u5DF2\u8FC7\u671F\uFF0C\u8BF7\u91CD\u65B0\u6253\u5F00\u6587\u6863",
+  RELAY_TOO_LARGE: "\u6587\u6863\u8D85\u8FC7\u5728\u7EBF\u7F16\u8F91\u7684\u5927\u5C0F\u4E0A\u9650",
+  RELAY_EXTENSION: "\u8BE5\u6587\u6863\u7C7B\u578B\u4E0D\u652F\u6301\u5728\u7EBF\u7F16\u8F91",
+  RELAY_QUOTA: "\u540C\u65F6\u6253\u5F00\u7684\u7F16\u8F91\u4F1A\u8BDD\u8FC7\u591A\uFF0C\u8BF7\u7A0D\u540E\u518D\u8BD5"
+};
+var OFFICE_RELAY_GENERIC_FAILURE_MESSAGE = "\u6587\u6863\u4E2D\u7EE7\u6682\u65F6\u4E0D\u53EF\u7528\uFF0C\u8BF7\u7A0D\u540E\u91CD\u8BD5";
+var OFFICE_RELAY_SESSION_EXPIRED_MESSAGE = "\u767B\u5F55\u72B6\u6001\u5DF2\u8FC7\u671F\uFF0C\u8BF7\u91CD\u65B0\u767B\u5F55";
+function displayOfficeRelayMessage(code, message) {
+  const text = typeof message === "string" ? message.trim() : "";
+  if (text === "") return OFFICE_RELAY_MESSAGE_FALLBACK[code] ?? OFFICE_RELAY_GENERIC_FAILURE_MESSAGE;
+  const leaksImplementationDetail = /https?:\/\//i.test(text) || /\bHTTP\s*\d{3}\b/i.test(text) || /\bbaseURL\b/i.test(text);
+  if (leaksImplementationDetail) return OFFICE_RELAY_MESSAGE_FALLBACK[code] ?? OFFICE_RELAY_GENERIC_FAILURE_MESSAGE;
+  return text;
+}
+var OfficeRelayBroker = class {
+  constructor(deps) {
+    this.deps = deps;
+  }
+  async withSession(run) {
+    try {
+      const sessionCookie = await this.deps.resolveSession();
+      if (sessionCookie === void 0 || sessionCookie === "") {
+        return { ok: false, code: "SESSION_EXPIRED", message: OFFICE_RELAY_SESSION_EXPIRED_MESSAGE };
+      }
+      const gateway = this.deps.gateway();
+      if (gateway === void 0) {
+        return { ok: false, code: "GATEWAY_UNREACHABLE", message: "\u7F51\u5173\u5730\u5740\u672A\u914D\u7F6E\uFF0C\u8BF7\u5148\u5728\u300C\u7F51\u5173\u6A21\u578B\u300D\u91CC\u5B8C\u6210\u767B\u5F55" };
+      }
+      return { ok: true, value: await run(sessionCookie, gateway) };
+    } catch (error) {
+      if (error instanceof GatewayError) {
+        return { ok: false, code: error.code, message: displayOfficeRelayMessage(error.code, error.message) };
+      }
+      this.deps.log?.(`hiwork-core: \u6587\u6863\u4E2D\u7EE7\u8C03\u7528\u5931\u8D25\uFF08${error instanceof Error ? error.name : typeof error}\uFF09`);
+      return { ok: false, code: "internal", message: OFFICE_RELAY_GENERIC_FAILURE_MESSAGE };
+    }
+  }
+  async upload(input, signal) {
+    if (signal?.aborted === true) return { ok: false, code: "cancelled", message: "\u4E0A\u4F20\u5DF2\u53D6\u6D88\u3002" };
+    return await this.withSession(async (cookie, gateway) => {
+      const created = await gateway.createOfficeRelayDocument(cookie, input.name, input.bytes, input.mode);
+      return {
+        id: created.id,
+        documentKey: created.documentKey,
+        readUrl: created.readUrl,
+        callbackUrl: created.callbackUrl,
+        expiresAt: created.expiresAt
+      };
+    });
+  }
+  async status(id, _signal) {
+    return await this.withSession(async (cookie, gateway) => await gateway.getOfficeRelayStatus(cookie, id));
+  }
+  async download(id, revision, _signal) {
+    return await this.withSession(async (cookie, gateway) => {
+      const content = await gateway.getOfficeRelayContent(cookie, id, revision);
+      return content.notModified ? { notModified: true } : { notModified: false, ...content.bytes === void 0 ? {} : { bytes: content.bytes } };
+    });
+  }
+  async close(id, _signal) {
+    return await this.withSession(async (cookie, gateway) => {
+      await gateway.closeOfficeRelayDocument(cookie, id);
+      return {};
+    });
+  }
+};
+function provideOfficeRelay(ctx, deps) {
+  const service = new OfficeRelayBroker(deps);
+  const dispose = ctx.provide(OFFICE_RELAY_SERVICE, service);
+  return typeof dispose === "function" ? dispose : () => {
+  };
+}
+
 // src/index.ts
 var name = "hiwork-core";
 var inject = ["settings", "credentials", "workspaceRegistry", "connection"];
@@ -4762,6 +5948,110 @@ function apply(ctx, config) {
       ctx.logger.warn(message);
     }
   }), "hiwork-core: daily rpc");
+  const managedMcpDeps = {
+    resolveSession: async () => (await ports.credentials.resolve(SESSION_REF))?.value,
+    gateway: () => {
+      const baseURL = current().baseURL;
+      return baseURL === void 0 || baseURL === "" ? void 0 : gatewayFor(baseURL);
+    },
+    log: (message) => {
+      ctx.logger.warn(message);
+    }
+  };
+  const managedMcp = new ManagedMcpStore(managedMcpDeps);
+  ctx.effect(
+    () => registerManagedMcpRpc({ connection, logger: ctx.logger }, managedMcpDeps, managedMcp),
+    "hiwork-core: managed mcp rpc"
+  );
+  ctx.effect(() => {
+    const warm = () => {
+      void managedMcp.load().catch((error) => {
+        ctx.logger.warn(`hiwork-core: \u53D7\u7BA1 MCP \u6E05\u5355\u9884\u70ED\u5931\u8D25\uFF08${error instanceof Error ? error.name : typeof error}\uFF09`);
+      });
+    };
+    warm();
+    const timer = setInterval(warm, MANAGED_MCP_REFRESH_INTERVAL_MS);
+    timer.unref?.();
+    return () => {
+      clearInterval(timer);
+    };
+  }, "hiwork-core: managed mcp warmup");
+  const managedSkillsDeps = {
+    resolveSession: async () => (await ports.credentials.resolve(SESSION_REF))?.value,
+    gateway: () => {
+      const baseURL = current().baseURL;
+      return baseURL === void 0 || baseURL === "" ? void 0 : gatewayFor(baseURL);
+    },
+    log: (message) => {
+      ctx.logger.warn(message);
+    }
+  };
+  const managedSkills = new ManagedSkillsStore(managedSkillsDeps);
+  ctx.effect(
+    () => registerManagedSkillsRpc({ connection, logger: ctx.logger }, managedSkillsDeps, managedSkills),
+    "hiwork-core: managed skills rpc"
+  );
+  ctx.effect(() => {
+    const warm = () => {
+      void managedSkills.load().catch((error) => {
+        ctx.logger.warn(`hiwork-core: \u53D7\u7BA1\u6280\u80FD\u6E05\u5355\u9884\u70ED\u5931\u8D25\uFF08${error instanceof Error ? error.name : typeof error}\uFF09`);
+      });
+    };
+    warm();
+    const timer = setInterval(warm, MANAGED_SKILLS_REFRESH_INTERVAL_MS);
+    timer.unref?.();
+    return () => {
+      clearInterval(timer);
+    };
+  }, "hiwork-core: managed skills warmup");
+  const workbenchDeps = {
+    resolveSession: async () => (await ports.credentials.resolve(SESSION_REF))?.value,
+    gateway: () => {
+      const baseURL = current().baseURL;
+      return baseURL === void 0 || baseURL === "" ? void 0 : gatewayFor(baseURL);
+    },
+    log: (message) => {
+      ctx.logger.warn(message);
+    }
+  };
+  const workbench = new WorkbenchStore(workbenchDeps);
+  ctx.effect(
+    () => registerWorkbenchRpc({ connection, logger: ctx.logger }, workbenchDeps, workbench),
+    "hiwork-core: workbench rpc"
+  );
+  ctx.effect(() => {
+    const warm = () => {
+      void workbench.load().catch((error) => {
+        ctx.logger.warn(`hiwork-core: \u5DE5\u4F5C\u53F0\u5E94\u7528\u6E05\u5355\u9884\u70ED\u5931\u8D25\uFF08${error instanceof Error ? error.name : typeof error}\uFF09`);
+      });
+    };
+    warm();
+    const timer = setInterval(warm, WORKBENCH_REFRESH_INTERVAL_MS);
+    timer.unref?.();
+    return () => {
+      clearInterval(timer);
+    };
+  }, "hiwork-core: workbench warmup");
+  ctx.effect(() => provideOfficeCredentials(ctx, {
+    resolveSession: async () => (await ports.credentials.resolve(SESSION_REF))?.value,
+    gateway: () => {
+      const baseURL = current().baseURL;
+      return baseURL === void 0 || baseURL === "" ? void 0 : gatewayFor(baseURL);
+    },
+    log: (message) => {
+      ctx.logger.warn(message);
+    }
+  }), "hiwork-core: office credentials");
+  ctx.effect(() => provideOfficeRelay(ctx, {
+    resolveSession: async () => (await ports.credentials.resolve(SESSION_REF))?.value,
+    gateway: () => {
+      const baseURL = current().baseURL;
+      return baseURL === void 0 || baseURL === "" ? void 0 : gatewayFor(baseURL);
+    },
+    log: (message) => {
+      ctx.logger.warn(message);
+    }
+  }), "hiwork-core: office relay");
   ctx.effect(() => registerAppVersionRpc({ connection, logger: ctx.logger }, {
     appVersion: () => pushedAppVersion(),
     log: (message) => {