hiwork-core 0.0.8 → 0.0.11

package/lib/ai-router-client.js

@@ -12,6 +12,15 @@ const ME_COST_ESTIMATE_PATH = '/api/me/cost-estimate';
 /** 每日一句端点：当日条目（东八区取模轮换）与换一句（排除当前条目的随机）。 */
 const ME_DAILY_QUOTE_PATH = '/api/me/daily-quote';
 const ME_DAILY_QUOTE_RANDOM_PATH = '/api/me/daily-quote/random';
+/**
+ * MCP 分发的自助端点（管理员在 ai-hub 登记 MCP、下发给全员或某人后，员工端从这里拉清单）。
+ * 两条都在网关 `/api/me` 会话组下，鉴权是 `SessionAuth`（只读 Cookie）。
+ *
+ * 清单响应里**没有任何令牌**：客户端拿断言去 MCP 服务自己换 per-user 令牌，
+ * 网关全程不经手明文，所以这里也没有「查看我的令牌」这类端点。
+ */
+const ME_MCP_ASSIGNMENTS_PATH = '/api/me/mcp-assignments';
+const ME_MCP_ASSERTIONS_PATH = '/api/me/mcp-assertions';
 /** 授权请求默认值：桌面端 client_id 与自定义协议回调地址（网关侧精确匹配）。 */
 const DEFAULT_CLIENT_ID = 'hiwork-desktop';
 const DEFAULT_REDIRECT_URI = 'hiwork://auth/callback';
@@ -208,6 +217,52 @@ export class AiRouterClient {
             throw new GatewayError('GATEWAY_UNREACHABLE', `网关返回错误（HTTP ${res.status}）`, res.status);
         return await parseMeJson(res);
     }
+    /**
+     * GET /api/me/mcp-assignments：管理员下发给当前账号的 MCP 清单。
+     *
+     * 不复用 {@link getMeJson}：那条路径把 403 映射成 `NO_KEY_ASSIGNED`（「尚未被分配
+     * 虚拟 KEY」），而本端点的鉴权只有会话——一个还没被分配 Key 的账号照样应该有
+     * 清单（分 MCP 与分 Key 是两件事）。沿用它的 403 文案会把「没有 Key」错报成原因。
+     */
+    async getMyMcpAssignments(sessionCookie) {
+        const res = await this.requestOrUnreachable(ME_MCP_ASSIGNMENTS_PATH, { method: 'GET', sessionCookie });
+        if (res.status === 401)
+            throw new GatewayError('SESSION_EXPIRED', '网关会话已过期，请重新登录', 401);
+        // 403 / 5xx / 反代错误页一律「网关不可达」：这条路径没有需要单独解释的拒绝语义。
+        if (!res.ok)
+            throw new GatewayError('GATEWAY_UNREACHABLE', `网关返回错误（HTTP ${res.status}）`, res.status);
+        return await parseMeJson(res);
+    }
+    /**
+     * POST /api/me/mcp-assertions：为某条分配签一张 120 秒断言。
+     *
+     * 三种拒绝各有确定含义（服务端 handler 的 404/409/503），必须分开映射——否则
+     * 客户端只会看到一句「取断言失败」，既分不清「被撤销了」（该卸连接）还是
+     * 「服务停用了」（该重试）还是「部署没配私钥」（找管理员）。
+     */
+    async issueMyMcpAssertion(sessionCookie, assignmentId) {
+        const res = await this.requestOrUnreachable(ME_MCP_ASSERTIONS_PATH, {
+            method: 'POST',
+            sessionCookie,
+            body: { assignmentId },
+        });
+        if (res.status === 401)
+            throw new GatewayError('SESSION_EXPIRED', '网关会话已过期，请重新登录', 401);
+        // 400 与 404 合并成同一个 code：对客户端而言两者的行为一致（这条 id 用不了了，
+        // 只能等下一次成功同步），文案也不该暗示「是你发错了 id」。
+        if (res.status === 400 || res.status === 404) {
+            throw new GatewayError('MCP_ASSIGNMENT_GONE', '这条分配已失效，稍后同步会重新核对', res.status);
+        }
+        if (res.status === 409) {
+            throw new GatewayError('MCP_NOT_DELIVERABLE', '该 MCP 服务当前不可下发，请联系管理员', 409);
+        }
+        if (res.status === 503) {
+            throw new GatewayError('MCP_ASSERTION_DISABLED', '本部署未启用 MCP 断言签发，请联系管理员', 503);
+        }
+        if (!res.ok)
+            throw new GatewayError('GATEWAY_UNREACHABLE', `网关返回错误（HTTP ${res.status}）`, res.status);
+        return await parseMeJson(res);
+    }
     /**
      * /api/me 自助端点的 GET 公共路径：网络异常 → GATEWAY_UNREACHABLE，
      * 401/403/400 映射为稳定 code，响应体非 JSON 时不把原文带进异常。

package/lib/client-policy.js

@@ -15,6 +15,8 @@ export const DEFAULT_LOGIN_MODE = 'both';
 export const CLIENT_POLICY_PATH = '/api/client/policy';
 /** 策略拉取默认超时：免登录只读接口，超过 5s 视同不可达（fail-open）。 */
 export const CLIENT_POLICY_TIMEOUT_MS = 5_000;
+/** fail-open 缺省：旧网关不返回 passwordLogin 时，密码表单仍视作可用。 */
+export const DEFAULT_PASSWORD_LOGIN = true;
 /**
  * 拼策略 URL：`{baseURL}/api/client/policy?platform=&arch=&version=&device_id=`。
  * 参数固定顺序、逐个 `encodeURIComponent`（device_id 可能是任意 ASCII，含 `+/=` 也必须安全）；
@@ -47,6 +49,16 @@ function parseLoginMode(payload) {
     const value = payload.loginMode;
     return value === 'browser' || value === 'form' || value === 'both' ? value : undefined;
 }
+/**
+ * 解析 `passwordLogin`：只认布尔值；缺失 / 非法值一律 {@link DEFAULT_PASSWORD_LOGIN}
+ * （fail-open：旧网关不返回该字段，不能因此收起密码入口）。
+ */
+function parsePasswordLogin(payload) {
+    if (typeof payload !== 'object' || payload === null)
+        return DEFAULT_PASSWORD_LOGIN;
+    const value = payload.passwordLogin;
+    return typeof value === 'boolean' ? value : DEFAULT_PASSWORD_LOGIN;
+}
 /**
  * 拉取并解析客户端策略。**永不抛异常**：任何失败都返回 undefined（fail-open）。
  *
@@ -73,7 +85,7 @@ export async function fetchClientPolicy(opts) {
             return undefined;
         }
         const loginMode = parseLoginMode(payload);
-        return loginMode === undefined ? undefined : { loginMode };
+        return loginMode === undefined ? undefined : { loginMode, passwordLogin: parsePasswordLogin(payload) };
     }
     catch {
         // 网络异常 / 超时（AbortSignal.timeout 抛 TimeoutError）/ 非法 URL：一律 fail-open。

package/lib/client.js

@@ -78,7 +78,11 @@ var textInput = {
 var frameSurfaceSelector = '[class*="_frame"]:has(> [class*="_sidebarCol"])';
 var frameCss = [
   `${frameSurfaceSelector} { background: var(--dsw-specific-sidebar-fill, #f9fafb); }`,
+  // 原生会话区根节点：两代链路并存，见上方注释。
   `html[data-dsh-shell="win32"] [class*="_centerCol"] > div > [class*="_root"] { border-top-left-radius: 16px; }`,
+  `html[data-dsh-shell="win32"] [class*="_centerCol"] [data-slot="main.conversation"] > [class*="_root"] { border-top-left-radius: 16px; }`,
+  // HiWork 扩展页 takeover 根节点（中心列直接子元素）。
+  `html[data-dsh-shell="win32"] [class*="_centerCol"] > [data-hiwork-feature-root] { border-top-left-radius: 16px; }`,
   `[class*="_sidebarCol"] { border-right: 0 !important; }`
 ].join("\n");
 var hostHideCss = [
@@ -125,6 +129,9 @@ function authorizeUrlOf(value) {
 function browserLoginPendingOf(value) {
   return authorizeUrlOf(value) !== void 0 || value?.browserLoginRequest !== void 0;
 }
+function passwordLoginOf(value) {
+  return value?.passwordLogin !== false;
+}
 function browserLoginViewOf(value) {
   const loginMode = normalizeLoginMode(value?.loginMode);
   if (loginMode === "form") return { loginMode, browserLoginUrl: void 0, browserLoginPending: false };
@@ -162,7 +169,8 @@ function project(value) {
     budgets: value?.budgets,
     keys: value?.keys,
     activeKeyId: value?.keyId ?? value?.keys?.[0]?.id,
-    ...browserLoginViewOf(value)
+    ...browserLoginViewOf(value),
+    passwordLogin: passwordLoginOf(value)
   };
   if (value?.pendingLogin !== void 0) return { ...base, status: "logging-in" };
   if (value?.lastLogin !== void 0) {
@@ -189,6 +197,7 @@ var AiRouterCardController = class {
       keys: void 0,
       activeKeyId: void 0,
       loginMode: "both",
+      passwordLogin: true,
       browserLoginUrl: void 0,
       browserLoginPending: false
     });
@@ -1016,12 +1025,15 @@ function removeStaleHeroGreeting(doc) {
 
 // src/client/daily-card.ts
 var DAILY_CARD_STYLE_ID = "dcu-daily-card-style";
+var DAILY_MAIN_FONT_SIZE_MAX = 64;
+var DAILY_MAIN_FONT_SIZE_MIN = 24;
 var DAILY_CARD_STYLE = `
 [data-dcu-daily-card]{box-sizing:border-box;display:flex;flex-direction:column;align-items:center;width:100%;max-width:min(880px,100%);margin:6px auto 44px;cursor:pointer;user-select:none;text-align:center}
 [data-dcu-daily-prefix]{display:inline-flex;align-items:center;gap:14px;font-size:20px;line-height:1.4;font-weight:500;letter-spacing:.22em;text-indent:.22em;color:rgba(24,24,27,.35);white-space:nowrap}
 [data-dcu-daily-prefix]::before,[data-dcu-daily-prefix]::after{content:"";display:inline-block;width:44px;height:2px;border-radius:1px;background:currentColor;opacity:.5}
 [data-dcu-daily-prefix][hidden]{display:none}
-[data-dcu-daily-main]{margin-top:6px;font-size:64px;line-height:1.25;font-weight:650;letter-spacing:.005em;background:linear-gradient(100deg,#2f6bf0,#1d4ed8 45%,#0e7fc2);-webkit-background-clip:text;background-clip:text;color:transparent;transition:filter .18s ease}
+[data-dcu-daily-main]{margin-top:6px;max-width:100%;overflow:hidden;white-space:nowrap;text-overflow:ellipsis;font-size:${DAILY_MAIN_FONT_SIZE_MAX}px;line-height:1.25;font-weight:650;letter-spacing:.005em;background:linear-gradient(100deg,#2f6bf0,#1d4ed8 45%,#0e7fc2);-webkit-background-clip:text;background-clip:text;color:transparent;transition:filter .18s ease}
+[data-dcu-daily-main][data-dcu-daily-truncated]{text-align:left}
 [data-dcu-daily-card]:hover [data-dcu-daily-main]{filter:brightness(1.12)}
 [data-dcu-daily-card]:focus-visible{outline:2px solid var(--dsw-alias-button-info-fill,#4c8dff);outline-offset:4px;border-radius:6px}
 [data-dcu-daily-shuffle]{flex:none;display:inline-flex;align-items:center;justify-content:center;gap:5px;margin-top:10px;padding:3px 10px;border-radius:8px;color:var(--dsw-alias-label-tertiary,#71717a);font-size:13px;line-height:20px;letter-spacing:.08em;text-indent:.08em;cursor:pointer;transition:color .18s ease}
@@ -1060,6 +1072,31 @@ function ensureDailyCardStyle(doc) {
   style.textContent = DAILY_CARD_STYLE;
   doc.head.append(style);
 }
+function solveDailyMainFontSize(availableWidth, measure) {
+  if (!(availableWidth > 0)) return null;
+  if (measure(DAILY_MAIN_FONT_SIZE_MAX) <= availableWidth) return null;
+  if (measure(DAILY_MAIN_FONT_SIZE_MIN) > availableWidth) return DAILY_MAIN_FONT_SIZE_MIN;
+  let low = DAILY_MAIN_FONT_SIZE_MIN;
+  let high = DAILY_MAIN_FONT_SIZE_MAX;
+  while (high - low > 1) {
+    const mid = Math.floor((low + high) / 2);
+    if (measure(mid) <= availableWidth) low = mid;
+    else high = mid;
+  }
+  return low;
+}
+function fitDailyMainText(card) {
+  const main = card.querySelector("[data-dcu-daily-main]");
+  if (main === null) return null;
+  const availableWidth = card.clientWidth;
+  const size = solveDailyMainFontSize(availableWidth, (fontSize) => {
+    main.style.fontSize = `${fontSize}px`;
+    return main.scrollWidth;
+  });
+  main.style.fontSize = size === null ? "" : `${size}px`;
+  main.toggleAttribute("data-dcu-daily-truncated", size === DAILY_MAIN_FONT_SIZE_MIN && main.scrollWidth > availableWidth);
+  return size;
+}
 function findDailyCardMount(doc) {
   const hero = doc.querySelector('[data-phase="hero"]');
   if (hero === null) return null;
@@ -1068,6 +1105,7 @@ function findDailyCardMount(doc) {
   return headline;
 }
 var modalKeyHandlers = /* @__PURE__ */ new WeakMap();
+var cardHandles = /* @__PURE__ */ new WeakMap();
 function modalHeadline(item) {
   return item.title !== "" ? item.title : item.content;
 }
@@ -1107,6 +1145,36 @@ function buildCard(doc, initial, date, quotes) {
   shuffle.setAttribute("aria-label", "\u6362\u4E00\u53E5");
   shuffle.append(createRefreshIcon(doc), doc.createTextNode("\u6362\u4E00\u53E5"));
   root.append(prefix, main, shuffle);
+  let lastFitWidth = -1;
+  let fitFrame;
+  const fit = (reflow = false) => {
+    const width = root.clientWidth;
+    if (!reflow && width === lastFitWidth) return;
+    lastFitWidth = width;
+    fitDailyMainText(root);
+  };
+  const resizeObserver = typeof ResizeObserver === "function" ? new ResizeObserver(() => {
+    if (fitFrame !== void 0) return;
+    fitFrame = window.requestAnimationFrame(() => {
+      fitFrame = void 0;
+      fit();
+    });
+  }) : null;
+  if (resizeObserver !== null) resizeObserver.observe(root);
+  void doc.fonts?.ready.then(() => {
+    fit(true);
+  }).catch(() => {
+  });
+  cardHandles.set(root, {
+    fit,
+    dispose: () => {
+      if (resizeObserver !== null) resizeObserver.disconnect();
+      if (fitFrame !== void 0) {
+        window.cancelAnimationFrame(fitFrame);
+        fitFrame = void 0;
+      }
+    }
+  });
   let current = initial;
   const applyItem = (next) => {
     current = next;
@@ -1114,6 +1182,7 @@ function buildCard(doc, initial, date, quotes) {
     prefix.hidden = next.subtitle === "";
     main.textContent = next.content;
     root.setAttribute("aria-label", `\u6BCF\u65E5\u4E00\u53E5\uFF1A${modalHeadline(next)}`);
+    fit(true);
   };
   applyItem(initial);
   root.addEventListener("click", (e) => {
@@ -1228,12 +1297,16 @@ function decorateDailyCard(doc, quotes) {
     removeStaleDailyCard(doc);
     const card = buildCard(doc, view, view.date, quotes);
     parent.insertBefore(card, anchor);
+    cardHandles.get(card)?.fit(true);
   }).catch(() => {
   });
 }
 function removeStaleDailyCard(doc) {
   closeDailyModal(doc);
-  for (const stale of Array.from(doc.querySelectorAll("[data-dcu-daily-card]"))) stale.remove();
+  for (const stale of Array.from(doc.querySelectorAll("[data-dcu-daily-card]"))) {
+    cardHandles.get(stale)?.dispose();
+    stale.remove();
+  }
 }
 function observeHeroDecorations(doc, quotes) {
   if (doc.head === null) return () => {
@@ -1450,9 +1523,10 @@ function LoginGateModal(props) {
   }, [props.browserLoginUrl]);
   const showBrowserLogin = props.loginMode !== "form";
   const waiting = showBrowserLogin && props.browserLoginPending;
-  const formVisible = props.loginMode === "form" || formOpen;
+  const passwordFormOffered = props.passwordLogin || props.loginMode === "form";
+  const formVisible = props.loginMode === "form" || passwordFormOffered && formOpen;
   const noKey = props.lastError?.code === "NO_KEY_ASSIGNED";
-  const error = describeLoginError(props.lastError) ?? submitError;
+  const error = (props.lastError?.code === "AUTH_FAILED" && !passwordFormOffered ? "\u5F53\u524D\u7F51\u5173\u5DF2\u542F\u7528\u7EDF\u4E00\u8BA4\u8BC1\uFF0C\u8BF7\u70B9\u51FB\u300C\u4F7F\u7528\u6D4F\u89C8\u5668\u767B\u5F55\u300D\u5B8C\u6210\u767B\u5F55" : describeLoginError(props.lastError)) ?? submitError;
   const loginDisabled = props.loggingIn || username === "" || password === "";
   const submit = () => {
     if (loginDisabled) return;
@@ -1486,7 +1560,7 @@ function LoginGateModal(props) {
     ] }),
     /* @__PURE__ */ (0, import_jsx_runtime5.jsx)("button", { "data-hiwork-core-brand": true, type: "submit", style: loginDisabled ? loginButtonDisabled : loginButton, disabled: loginDisabled, children: props.loggingIn ? "\u767B\u5F55\u4E2D\u2026" : "\u767B \u5F55" }),
     noKey ? /* @__PURE__ */ (0, import_jsx_runtime5.jsx)("button", { "data-hiwork-core-secondary": true, type: "button", style: linkButton, onClick: () => void props.scope.set("refreshRequest", { at: (/* @__PURE__ */ new Date()).toISOString() }), children: "\u6211\u5DF2\u5206\u914D KEY\uFF0C\u5237\u65B0" }) : null
-  ] }) : /* @__PURE__ */ (0, import_jsx_runtime5.jsx)("button", { "data-hiwork-core-secondary": true, "data-hiwork-core-form-toggle": true, type: "button", style: toggleStyle, onClick: () => setFormOpen(true), children: props.loginMode === "browser" ? "\u6D4F\u89C8\u5668\u767B\u5F55\u4E0D\u53EF\u7528\uFF1F\u4F7F\u7528\u8D26\u53F7\u5BC6\u7801\u767B\u5F55" : "\u4F7F\u7528\u8D26\u53F7\u5BC6\u7801\u767B\u5F55" });
+  ] }) : !passwordFormOffered ? null : /* @__PURE__ */ (0, import_jsx_runtime5.jsx)("button", { "data-hiwork-core-secondary": true, "data-hiwork-core-form-toggle": true, type: "button", style: toggleStyle, onClick: () => setFormOpen(true), children: props.loginMode === "browser" ? "\u6D4F\u89C8\u5668\u767B\u5F55\u4E0D\u53EF\u7528\uFF1F\u4F7F\u7528\u8D26\u53F7\u5BC6\u7801\u767B\u5F55" : "\u4F7F\u7528\u8D26\u53F7\u5BC6\u7801\u767B\u5F55" });
   return /* @__PURE__ */ (0, import_jsx_runtime5.jsxs)("div", { style: overlayStyle, children: [
     /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(OceanWaves, {}),
     /* @__PURE__ */ (0, import_jsx_runtime5.jsxs)("main", { id: "hiwork-core-frame", "data-hiwork-core-frame": true, style: contentFrameStyle, children: [
@@ -1553,7 +1627,7 @@ function mountLoginGate(scope, storeCredential) {
       root = (0, import_client.createRoot)(gateContainer);
       if (appRoot !== null) appRoot.inert = true;
     }
-    root.render(/* @__PURE__ */ (0, import_jsx_runtime5.jsx)(LoginGateModal, { scope, storeCredential, lastError: value?.lastError, loggingIn: value?.pendingLogin !== void 0, initialUsername: value?.username, initialRememberPassword: value?.rememberPassword === true, ...browserLoginViewOf(value) }));
+    root.render(/* @__PURE__ */ (0, import_jsx_runtime5.jsx)(LoginGateModal, { scope, storeCredential, lastError: value?.lastError, loggingIn: value?.pendingLogin !== void 0, initialUsername: value?.username, initialRememberPassword: value?.rememberPassword === true, passwordLogin: passwordLoginOf(value), ...browserLoginViewOf(value) }));
   };
   render();
   const dispose = scope.subscribe(() => render());
@@ -2120,8 +2194,15 @@ function rfc3339Of(time) {
   const date = new Date(time);
   return Number.isNaN(date.getTime()) ? void 0 : date.toISOString();
 }
-function selectSessionCost(owner) {
-  return sessionCostMatchOf(owner.turn.data.get("turn-tail"));
+function closingTurnTailData(snapshot, messageId) {
+  for (const key of snapshot.order) {
+    const node = snapshot.nodes.get(key);
+    if (node === void 0 || node.kind !== "turn-tail") continue;
+    const data = node.data;
+    if (data === void 0) continue;
+    if (data.closing?.finalNode?.messageId === messageId) return data;
+  }
+  return void 0;
 }
 function sessionCostKey(sessionId, match) {
   return `${sessionId}\0${match.turn}\0${JSON.stringify(match.items)}`;
@@ -2178,30 +2259,35 @@ var SessionCostStore = class {
   }
 };
 var costStyle = {
+  // 字号/颜色与同一行的「用量」「用时」胶囊同源变量，保证在动作行里不显得突兀。
   color: textTertiary,
-  fontSize: 12,
+  fontSize: "var(--dsh-content-font-size-secondary, 13px)",
   lineHeight: "18px",
   whiteSpace: "nowrap",
   cursor: "default"
 };
-function SessionCost({ matched, sessionId, store }) {
-  const key = sessionCostKey(sessionId, matched);
-  const [result, setResult] = (0, import_react6.useState)(void 0);
+function SessionCost({ messageId, sessionId, useChat, store }) {
+  const data = useChat((snapshot) => closingTurnTailData(snapshot, messageId));
+  const match = sessionCostMatchOf(data);
+  const key = match === null ? null : sessionCostKey(sessionId, match);
+  const [shown, setShown] = (0, import_react6.useState)(void 0);
   (0, import_react6.useEffect)(() => {
+    if (match === null || key === null) return;
     let disposed = false;
     const controller = new AbortController();
-    void store.estimate({ sessionId, turn: matched.turn, items: matched.items, signal: controller.signal }).then((value) => {
-      if (!disposed) setResult(value);
+    void store.estimate({ sessionId, turn: match.turn, items: match.items, signal: controller.signal }).then((value) => {
+      if (!disposed) setShown({ key, result: value });
     }).catch(() => {
-      if (!disposed) setResult(void 0);
+      if (!disposed) setShown({ key, result: void 0 });
     });
     return () => {
       disposed = true;
       controller.abort();
     };
   }, [store, key]);
-  if (result === void 0) return null;
-  const estimated = !result.channelResolved || matched.ambiguous;
+  if (match === null || key === null || shown === void 0 || shown.key !== key || shown.result === void 0) return null;
+  const result = shown.result;
+  const estimated = !result.channelResolved || match.ambiguous;
   return /* @__PURE__ */ (0, import_jsx_runtime7.jsx)("span", { style: costStyle, "data-hiwork-session-cost": estimated ? "estimated" : "exact", title: SESSION_COST_HINT, children: `\u2248 ${formatYuan(result.cost)}${estimated ? SESSION_COST_ESTIMATED_SUFFIX : ""}` });
 }
 
@@ -2726,6 +2812,198 @@ function mountFeatureCenter(options) {
 // src/client/contracts.ts
 var HIWORK_FEATURE_CENTER_SERVICE = "hiworkFeatureCenter";
 
+// src/client/managed-mcp.ts
+var MANAGED_MCP_CHANNEL = "/hiwork-managed-mcp";
+var MANAGED_MCP_STALE_MS = 5 * 6e4;
+var ManagedMcpRpcError = class extends Error {
+  constructor(code, message) {
+    super(message);
+    this.code = code;
+    this.name = "ManagedMcpRpcError";
+  }
+};
+function unwrapManagedMcpResult(value) {
+  if (typeof value !== "object" || value === null || !("ok" in value)) {
+    throw new ManagedMcpRpcError("internal", "MCP \u6E05\u5355\u4E3B\u673A\u8FD4\u56DE\u4E86\u65E0\u6548\u54CD\u5E94\u3002");
+  }
+  const result = value;
+  if (result.ok === true) return result.value;
+  if (result.ok === false) {
+    const code = typeof result.error?.code === "string" ? result.error.code : "internal";
+    const message = typeof result.error?.message === "string" && result.error.message.trim() !== "" ? result.error.message : "MCP \u6E05\u5355\u6682\u65F6\u65E0\u6CD5\u83B7\u53D6\uFF0C\u8BF7\u7A0D\u540E\u91CD\u8BD5";
+    throw new ManagedMcpRpcError(code, message);
+  }
+  throw new ManagedMcpRpcError("internal", "MCP \u6E05\u5355\u4E3B\u673A\u8FD4\u56DE\u4E86\u65E0\u6548\u54CD\u5E94\u3002");
+}
+function toSnapshot(value) {
+  if (typeof value !== "object" || value === null) {
+    throw new ManagedMcpRpcError("internal", "MCP \u6E05\u5355\u4E3B\u673A\u8FD4\u56DE\u4E86\u65E0\u6548\u54CD\u5E94\u3002");
+  }
+  const record = value;
+  const rawList = record["assignments"];
+  if (!Array.isArray(rawList)) {
+    throw new ManagedMcpRpcError("internal", "MCP \u6E05\u5355\u4E3B\u673A\u8FD4\u56DE\u4E86\u65E0\u6548\u54CD\u5E94\u3002");
+  }
+  const assignments = [];
+  for (const item of rawList) {
+    const normalized = toAssignment(item);
+    if (normalized !== void 0) assignments.push(normalized);
+  }
+  const lastError = record["lastError"];
+  const snapshot = {
+    revision: typeof record["revision"] === "number" ? record["revision"] : 0,
+    fetchedAt: typeof record["fetchedAt"] === "string" ? record["fetchedAt"] : "",
+    assignments,
+    stale: record["stale"] === true
+  };
+  if (typeof lastError === "object" && lastError !== null) {
+    const detail = lastError;
+    snapshot.lastError = {
+      code: typeof detail.code === "string" ? detail.code : "internal",
+      message: typeof detail.message === "string" ? detail.message : "MCP \u6E05\u5355\u6682\u65F6\u65E0\u6CD5\u83B7\u53D6\uFF0C\u8BF7\u7A0D\u540E\u91CD\u8BD5"
+    };
+  }
+  return snapshot;
+}
+function toAssignment(value) {
+  if (typeof value !== "object" || value === null) return void 0;
+  const record = value;
+  const authRaw = record["auth"];
+  const auth = typeof authRaw === "object" && authRaw !== null ? authRaw : void 0;
+  const assignmentId = text(record["assignmentId"]);
+  const serverName = text(record["serverName"]);
+  const url = text(record["url"]);
+  const kind = text(auth?.["kind"]);
+  const mintUrl = text(auth?.["mintUrl"]);
+  if (assignmentId === void 0 || serverName === void 0 || url === void 0 || kind === void 0 || mintUrl === void 0) {
+    return void 0;
+  }
+  return {
+    assignmentId,
+    revision: typeof record["revision"] === "number" ? record["revision"] : 0,
+    slug: text(record["slug"]) ?? serverName,
+    displayName: text(record["displayName"]) ?? serverName,
+    serverName,
+    transport: text(record["transport"]) ?? "",
+    url,
+    extraHeaders: stringMap(record["extraHeaders"]),
+    auth: { kind, mintUrl, revokeUrl: text(auth?.["revokeUrl"]) ?? "" },
+    updatedAt: text(record["updatedAt"]) ?? ""
+  };
+}
+function text(value) {
+  return typeof value === "string" && value.trim() !== "" ? value : void 0;
+}
+function stringMap(raw) {
+  if (typeof raw !== "object" || raw === null || Array.isArray(raw)) return {};
+  const out = {};
+  for (const [key, value] of Object.entries(raw)) {
+    if (typeof value === "string") out[key] = value;
+  }
+  return out;
+}
+var ManagedMcpStore = class {
+  constructor(rpc) {
+    this.rpc = rpc;
+  }
+  current;
+  listeners = /* @__PURE__ */ new Set();
+  inFlight;
+  /** 本地镜像（同步）。从没成功同步过返回 undefined。**不要拿它做删除决策**（见文件头）。 */
+  snapshot() {
+    return this.current;
+  }
+  /** 本地镜像是否已经陈旧（或从未同步过）。 */
+  isStale(ttlMs = MANAGED_MCP_STALE_MS, now = Date.now()) {
+    if (this.current === void 0 || this.current.fetchedAt === "") return true;
+    const fetchedAt = Date.parse(this.current.fetchedAt);
+    if (Number.isNaN(fetchedAt)) return true;
+    return now - fetchedAt >= ttlMs;
+  }
+  /**
+   * 强制同步一次并返回**刚拉到的**清单。
+   *
+   * 返回值（而不是让人随后去读 `snapshot()`）是刻意的：只有这个返回值保证「这一次
+   * 网络请求成功了」，用它做删除决策才是安全的；读镜像可能读到上一次的结果。
+   * 失败时抛错且**不动镜像**——调用方据此保持现有的连接一条不删。
+   */
+  async refresh(signal) {
+    return await this.dedupe(async () => {
+      const raw = await this.rpc.call(MANAGED_MCP_CHANNEL, "refresh", {}, signal);
+      return this.adopt(unwrapManagedMcpResult(raw));
+    });
+  }
+  /**
+   * 取一份清单，**能用 Host 的预热缓存就用**（Host 后台每 30 分钟拉一次）。
+   *
+   * 与 {@link refresh} 的分工：这里是「启动时先把界面填上」的便宜入口——命中缓存时
+   * 一次网络请求都不发；Host 缓存也是冷的才会真的去拉。返回值仍保证是「某一次成功
+   * 拉取的结果」，但**可能比服务端现状旧**（最旧不超过 Host 的上一次成功拉取），
+   * 所以调用方按 `stale` / `isStale()` 判定它够不够权威，不够就再 `refresh()` 一次。
+   */
+  async warm(signal) {
+    return await this.dedupe(async () => {
+      const raw = await this.rpc.call(MANAGED_MCP_CHANNEL, "snapshot", {}, signal);
+      return this.adopt(unwrapManagedMcpResult(raw));
+    });
+  }
+  /** 取一张新鲜断言（120 秒）。失败抛错；本层不缓存、不换令牌。 */
+  async assertion(assignmentId, signal) {
+    const raw = await this.rpc.call(MANAGED_MCP_CHANNEL, "assertion", { assignmentId }, signal);
+    const value = unwrapManagedMcpResult(raw);
+    if (typeof value !== "object" || value === null) {
+      throw new ManagedMcpRpcError("internal", "MCP \u6E05\u5355\u4E3B\u673A\u8FD4\u56DE\u4E86\u65E0\u6548\u54CD\u5E94\u3002");
+    }
+    const record = value;
+    const assertion = text(record["assertion"]);
+    const mintUrl = text(record["mintUrl"]);
+    if (assertion === void 0 || mintUrl === void 0) {
+      throw new ManagedMcpRpcError("internal", "MCP \u6E05\u5355\u4E3B\u673A\u8FD4\u56DE\u4E86\u65E0\u6548\u54CD\u5E94\u3002");
+    }
+    return {
+      assertion,
+      mintUrl,
+      revokeUrl: text(record["revokeUrl"]) ?? "",
+      expiresAt: text(record["expiresAt"]) ?? "",
+      serverName: text(record["serverName"]) ?? ""
+    };
+  }
+  /** 订阅镜像变化（连接器域据此重渲染 / 重排同步）。返回退订函数。 */
+  subscribe(listener) {
+    this.listeners.add(listener);
+    return () => {
+      this.listeners.delete(listener);
+    };
+  }
+  /** 清空镜像（登出 / 换账号：清单是按人的，留着会串号）。 */
+  clear() {
+    this.current = void 0;
+    this.emit();
+  }
+  /**
+   * 并发去重：`warm` 与 `refresh` 撞在一起（启动同步与定时同步常常同拍）时共用一次
+   * 请求，且**共用同一个返回值**——两边对「这一次拉到了什么」的判断必须一致。
+   */
+  async dedupe(task) {
+    if (this.inFlight !== void 0) return await this.inFlight;
+    const promise = task();
+    this.inFlight = promise;
+    return await promise.finally(() => {
+      this.inFlight = void 0;
+    });
+  }
+  /** 采纳一份成功响应：写镜像 + 通知订阅者（失败路径永远不会走到这里）。 */
+  adopt(value) {
+    const snapshot = toSnapshot(value);
+    this.current = snapshot;
+    this.emit();
+    return snapshot;
+  }
+  emit() {
+    for (const listener of [...this.listeners]) listener();
+  }
+};
+
 // src/client/index.ts
 var inject = ["slots", "locale", "remote", "remote.credentials", "settingsScope", "connection"];
 var INTERACTION_STYLE_ID = "hiwork-core-interaction-styles";
@@ -2763,6 +3041,7 @@ function apply(ctx) {
   const usage = new UsageDataStore(connection.rpc);
   const sessionCost = new SessionCostStore(connection.rpc);
   const dailyQuotes = new DailyDataStore(connection.rpc);
+  const managedMcp = new ManagedMcpStore(connection.rpc);
   const appVersion = createAppVersion(connection.rpc);
   ctx.slots.inject("settings.section", () => ctx.slots.register({
     name: "settings.section",
@@ -2771,14 +3050,16 @@ function apply(ctx) {
     label: () => "\u7528\u91CF\u4E0E\u6210\u672C",
     inject: () => ({ hooks: controller.inject().hooks, usage })
   }, UsageSection));
-  ctx.slots.inject("conversation.chat.turnTail", () => ctx.slots.register({
-    name: "conversation.chat.turnTail",
-    select: selectSessionCost,
+  ctx.slots.inject("conversation.chat.assistant-actions", () => ctx.slots.register({
+    name: "conversation.chat.assistant-actions",
+    id: "hiwork-session-cost",
+    order: 20,
     inject: () => ({ store: sessionCost })
   }, SessionCost));
   ctx.effect(() => observeAccountChange(controller.inject().hooks.aiRouterCard, () => {
     usage.clear();
     sessionCost.clear();
+    managedMcp.clear();
   }), "hiwork-core: \u7528\u91CF\u7F13\u5B58\u968F\u8D26\u53F7 / Key \u53D8\u5316\u6E05\u7A7A");
   ctx.effect(() => observeAboutNavIcon(), "hiwork-core: about nav icon");
   ctx.slots.inject("sidebar.brand.mark", () => ctx.slots.register({
@@ -2797,9 +3078,9 @@ function apply(ctx) {
   }, UserBadge));
   ctx.effect(() => mountLoginGate(scope, storeCredential), "hiwork-core: login gate");
   ctx.effect(() => observeHeroDecorations(document, dailyQuotes), "hiwork-core: hero decorations");
-  installFeatureCenter(ctx);
+  installFeatureCenter(ctx, managedMcp);
 }
-function installFeatureCenter(ctx) {
+function installFeatureCenter(ctx, managedMcp) {
   const featureRegistry = createFeatureRegistry();
   let center;
   const sessions = ctx.get("sessions");
@@ -2818,6 +3099,16 @@ function installFeatureCenter(ctx) {
         return;
       }
       featureRegistry.openNative();
+    },
+    // 受管 MCP 面：连接器域（hiwork-capabilities）按这个成员判断「有没有这个能力」，
+    // 老 core 上它是 undefined，能力中心照常工作、只是没有受管连接。
+    managedMcp: {
+      snapshot: () => managedMcp.snapshot(),
+      isStale: (ttlMs) => managedMcp.isStale(ttlMs),
+      warm: async (signal) => await managedMcp.warm(signal),
+      refresh: async (signal) => await managedMcp.refresh(signal),
+      assertion: async (assignmentId, signal) => await managedMcp.assertion(assignmentId, signal),
+      subscribe: (listener) => managedMcp.subscribe(listener)
     }
   };
   ctx.provide(HIWORK_FEATURE_CENTER_SERVICE, face);