linkque-cli-v2 1.0.7 → 1.1.1

package/worker.js

@@ -3082,11 +3082,11 @@ var init_types = __esm({
         }
         const pairs = [];
         const keyType = this._def.keyType;
-        const valueType2 = this._def.valueType;
+        const valueType3 = this._def.valueType;
         for (const key in ctx.data) {
           pairs.push({
             key: keyType._parse(new ParseInputLazyPath(ctx, key, ctx.path, key)),
-            value: valueType2._parse(new ParseInputLazyPath(ctx, ctx.data[key], ctx.path, key)),
+            value: valueType3._parse(new ParseInputLazyPath(ctx, ctx.data[key], ctx.path, key)),
             alwaysSet: key in ctx.data
           });
         }
@@ -3134,11 +3134,11 @@ var init_types = __esm({
           return INVALID;
         }
         const keyType = this._def.keyType;
-        const valueType2 = this._def.valueType;
+        const valueType3 = this._def.valueType;
         const pairs = [...ctx.data.entries()].map(([key, value], index2) => {
           return {
             key: keyType._parse(new ParseInputLazyPath(ctx, key, ctx.path, [index2, "key"])),
-            value: valueType2._parse(new ParseInputLazyPath(ctx, value, ctx.path, [index2, "value"]))
+            value: valueType3._parse(new ParseInputLazyPath(ctx, value, ctx.path, [index2, "value"]))
           };
         });
         if (ctx.common.async) {
@@ -3174,9 +3174,9 @@ var init_types = __esm({
         }
       }
     };
-    ZodMap.create = (keyType, valueType2, params) => {
+    ZodMap.create = (keyType, valueType3, params) => {
       return new ZodMap({
-        valueType: valueType2,
+        valueType: valueType3,
         keyType,
         typeName: ZodFirstPartyTypeKind.ZodMap,
         ...processCreateParams(params)
@@ -3220,7 +3220,7 @@ var init_types = __esm({
             status.dirty();
           }
         }
-        const valueType2 = this._def.valueType;
+        const valueType3 = this._def.valueType;
         function finalizeSet(elements2) {
           const parsedSet = /* @__PURE__ */ new Set();
           for (const element of elements2) {
@@ -3232,7 +3232,7 @@ var init_types = __esm({
           }
           return { status: status.value, value: parsedSet };
         }
-        const elements = [...ctx.data.values()].map((item, i2) => valueType2._parse(new ParseInputLazyPath(ctx, item, ctx.path, i2)));
+        const elements = [...ctx.data.values()].map((item, i2) => valueType3._parse(new ParseInputLazyPath(ctx, item, ctx.path, i2)));
         if (ctx.common.async) {
           return Promise.all(elements).then((elements2) => finalizeSet(elements2));
         } else {
@@ -3258,9 +3258,9 @@ var init_types = __esm({
         return this.min(1, message);
       }
     };
-    ZodSet.create = (valueType2, params) => {
+    ZodSet.create = (valueType3, params) => {
       return new ZodSet({
-        valueType: valueType2,
+        valueType: valueType3,
         minSize: null,
         maxSize: null,
         typeName: ZodFirstPartyTypeKind.ZodSet,
@@ -5086,6 +5086,9 @@ function isJsonValue(value) {
     return value.every(isJsonValue);
   return isPlainRecord(value) && Object.values(value).every(isJsonValue);
 }
+function cloneJsonValue(value) {
+  return isJsonValue(value) ? JSON.parse(JSON.stringify(value)) : void 0;
+}
 function cloneJsonObject(value) {
   if (!isPlainRecord(value) || !isJsonValue(value))
     return void 0;
@@ -6411,7 +6414,7 @@ var require_errors = __commonJS({
       message: ({ keyword }) => (0, codegen_1.str)`must pass "${keyword}" keyword validation`
     };
     exports2.keyword$DataError = {
-      message: ({ keyword, schemaType }) => schemaType ? (0, codegen_1.str)`"${keyword}" keyword must be ${schemaType} ($data)` : (0, codegen_1.str)`"${keyword}" keyword is invalid ($data)`
+      message: ({ keyword, schemaType: schemaType2 }) => schemaType2 ? (0, codegen_1.str)`"${keyword}" keyword must be ${schemaType2} ($data)` : (0, codegen_1.str)`"${keyword}" keyword is invalid ($data)`
     };
     function reportError(cxt, error40 = exports2.keywordError, errorPaths, overrideAllErrors) {
       const { it } = cxt;
@@ -7070,8 +7073,8 @@ var require_keyword = __commonJS({
         throw new Error(`keyword "${keyword}" failed to compile`);
       return gen.scopeValue("keyword", typeof result == "function" ? { ref: result } : { ref: result, code: (0, codegen_1.stringify)(result) });
     }
-    function validSchemaType(schema, schemaType, allowUndefined = false) {
-      return !schemaType.length || schemaType.some((st) => st === "array" ? Array.isArray(schema) : st === "object" ? schema && typeof schema == "object" && !Array.isArray(schema) : typeof schema == st || allowUndefined && typeof schema == "undefined");
+    function validSchemaType(schema, schemaType2, allowUndefined = false) {
+      return !schemaType2.length || schemaType2.some((st) => st === "array" ? Array.isArray(schema) : st === "object" ? schema && typeof schema == "object" && !Array.isArray(schema) : typeof schema == st || allowUndefined && typeof schema == "undefined");
     }
     exports2.validSchemaType = validSchemaType;
     function validateKeywordUsage({ schema, opts, self: self2, errSchemaPath }, def, keyword) {
@@ -7849,11 +7852,11 @@ var require_validate = __commonJS({
       check$data(valid = codegen_1.nil, $dataValid = codegen_1.nil) {
         if (!this.$data)
           return;
-        const { gen, schemaCode, schemaType, def } = this;
+        const { gen, schemaCode, schemaType: schemaType2, def } = this;
         gen.if((0, codegen_1.or)((0, codegen_1._)`${schemaCode} === undefined`, $dataValid));
         if (valid !== codegen_1.nil)
           gen.assign(valid, true);
-        if (schemaType.length || def.validateSchema) {
+        if (schemaType2.length || def.validateSchema) {
           gen.elseIf(this.invalid$data());
           this.$dataError();
           if (valid !== codegen_1.nil)
@@ -7862,13 +7865,13 @@ var require_validate = __commonJS({
         gen.else();
       }
       invalid$data() {
-        const { gen, schemaCode, schemaType, def, it } = this;
+        const { gen, schemaCode, schemaType: schemaType2, def, it } = this;
         return (0, codegen_1.or)(wrong$DataType(), invalid$DataSchema());
         function wrong$DataType() {
-          if (schemaType.length) {
+          if (schemaType2.length) {
             if (!(schemaCode instanceof codegen_1.Name))
               throw new Error("ajv implementation error");
-            const st = Array.isArray(schemaType) ? schemaType : [schemaType];
+            const st = Array.isArray(schemaType2) ? schemaType2 : [schemaType2];
             return (0, codegen_1._)`${(0, dataType_2.checkDataTypes)(st, schemaCode, it.opts.strictNumbers, dataType_2.DataType.Wrong)}`;
           }
           return codegen_1.nil;
@@ -13843,6 +13846,7 @@ function analyzeA2UIBindings(protocol) {
     }
   }
   return {
+    surfaceIds: [...surfaces],
     surfaceId: surfaces.size === 1 ? [...surfaces][0] : void 0,
     occurrences,
     issues
@@ -14843,6 +14847,7 @@ var init_compiler = __esm({
     "use strict";
     init_json2();
     init_validation();
+    init_schema2();
   }
 });
 
@@ -14864,8 +14869,8 @@ async function executeA2UICardResolver(input) {
     if (!tool) {
       throw new A2UICardResolverError("MCP_TOOL_UNAVAILABLE", `MCP tool ${call.mcpResourceId}/${call.toolName} is unavailable`, fieldId);
     }
-    if (!tool.readOnly || !tool.outputSchema) {
-      throw new A2UICardResolverError("MCP_SCHEMA_UNSUPPORTED", `MCP tool ${call.mcpResourceId}/${call.toolName} is not a read-only structured tool`, fieldId);
+    if (!tool.outputSchema) {
+      throw new A2UICardResolverError("MCP_SCHEMA_UNSUPPORTED", `MCP tool ${call.mcpResourceId}/${call.toolName} has no output schema`, fieldId);
     }
     const args = {};
     for (const binding of call.inputBindings) {
@@ -14892,7 +14897,7 @@ async function executeA2UICardResolver(input) {
   for (const binding of input.resolver.outputBindings) {
     const field = fieldById.get(binding.fieldId);
     const result = results.get(binding.callId);
-    if (!field || !result) {
+    if (!field || result === void 0) {
       throw new A2UICardResolverError("CARD_BINDING_INVALID", `Output binding ${binding.fieldId} is invalid`, binding.fieldId);
     }
     let value;
@@ -14928,7 +14933,7 @@ async function executeA2UICardResolver(input) {
     }
     const value = readJsonPointer(viewModel, field.path);
     if (field.required && value === void 0) {
-      throw new A2UICardResolverError("CARD_REQUIRED_FIELD_MISSING", `Required card field ${field.fieldId} is missing`, field.fieldId);
+      throw new A2UICardResolverError("CARD_REQUIRED_FIELD_MISSING", `Required card field ${field.fieldId} is missing`, field.fieldId, field.type, "missing");
     }
     if (value !== void 0) {
       assertSchemaValue(field.valueSchema, value, "CARD_MAPPING_SCHEMA_MISMATCH", `card field ${field.fieldId}`, field.fieldId);
@@ -14968,8 +14973,8 @@ function normalizeOptionalNulls(value, schema, required2) {
 }
 async function executeTool(tool, args, signal, fieldId) {
   const response = await tool.call(args, signal);
-  const structured = cloneJsonObject(response.structuredContent);
-  if (!structured) {
+  const structured = cloneJsonValue(response.structuredContent);
+  if (structured === void 0) {
     throw new A2UICardResolverError("MCP_STRUCTURED_CONTENT_REQUIRED", `MCP tool ${tool.resourceId}/${tool.toolName} did not return structuredContent`, fieldId);
   }
   return structured;
@@ -14983,9 +14988,19 @@ function toolKey(resourceId, toolName) {
 function assertSchemaValue(schema, value, code, label, fieldId) {
   const issues = validateJsonSchemaValue2(schema, value);
   if (issues.length > 0) {
-    throw new A2UICardResolverError(code, `${label} does not match schema at ${issues[0].path}: ${issues[0].message}`, fieldId);
+    throw new A2UICardResolverError(code, `${label} does not match schema at ${issues[0].path}: ${issues[0].message}`, fieldId, schemaType(schema), valueType2(value));
   }
 }
+function schemaType(schema) {
+  return typeof schema.type === "string" ? schema.type : "unknown";
+}
+function valueType2(value) {
+  if (value === null)
+    return "null";
+  if (Array.isArray(value))
+    return "array";
+  return typeof value === "object" ? "object" : typeof value;
+}
 var A2UICardResolverError;
 var init_resolver = __esm({
   "../agent-a2ui-card-contract/dist/esm/resolver.js"() {
@@ -14994,7 +15009,7 @@ var init_resolver = __esm({
     init_expression();
     init_schema2();
     A2UICardResolverError = class extends Error {
-      constructor(code, message, fieldId) {
+      constructor(code, message, fieldId, expectedType, actualType) {
         super(message);
         Object.defineProperty(this, "code", {
           enumerable: true,
@@ -15008,9 +15023,23 @@ var init_resolver = __esm({
           writable: true,
           value: void 0
         });
+        Object.defineProperty(this, "expectedType", {
+          enumerable: true,
+          configurable: true,
+          writable: true,
+          value: void 0
+        });
+        Object.defineProperty(this, "actualType", {
+          enumerable: true,
+          configurable: true,
+          writable: true,
+          value: void 0
+        });
         this.name = "A2UICardResolverError";
         this.code = code;
         this.fieldId = fieldId;
+        this.expectedType = expectedType;
+        this.actualType = actualType;
       }
     };
   }
@@ -15099,7 +15128,7 @@ async function executeCardPresentation(resource, registry2, runtimeContext, args
       if (!handle) {
         throw new Error(`MCP tool ${call.mcpResourceId}/${call.toolName} is unavailable`);
       }
-      const inputSchema = isJsonObject(handle.inputSchema) ? handle.inputSchema : FALLBACK_OBJECT_SCHEMA;
+      const inputSchema = normalizeMcpInputSchema(handle.inputSchema);
       return {
         resourceId: call.mcpResourceId,
         toolName: call.toolName,
@@ -15109,9 +15138,6 @@ async function executeCardPresentation(resource, registry2, runtimeContext, args
         // ViewModel Schema 校验。
         inputSchema,
         outputSchema: isJsonObject(handle.outputSchema) ? handle.outputSchema : FALLBACK_OBJECT_SCHEMA,
-        // 未声明 readOnlyHint 是旧 MCP 的常见情况；只拒绝明确声明
-        // readOnlyHint=false 的工具。
-        readOnly: handle.readOnly !== false,
         call: async (input, callSignal) => {
           const result = await handle.execute(supplementMcpInput(input, invocation, config2.presentationInputSchema, inputSchema), callSignal);
           return { structuredContent: readStructuredContent(result) };
@@ -15160,29 +15186,46 @@ async function executeCardPresentationFromSources(resource, runtimeContext, sour
       transform: binding.transform
     }))
   };
-  const viewModel = await executeA2UICardResolver({
-    resolver,
-    fields: config2.fields,
-    presentationInputSchema: {
-      type: "object",
-      properties: {},
-      additionalProperties: false
-    },
-    argsSchema: config2.a2uiTemplate.argsSchema,
-    invocation: {},
-    runtimeContext,
-    tools: config2.dataSources.filter((source) => sourceResults.has(source.sourceId)).map((source) => ({
-      resourceId: source.mcpResourceId,
-      toolName: source.toolName,
-      inputSchema: FALLBACK_OBJECT_SCHEMA,
-      outputSchema: source.outputSchema ?? FALLBACK_OBJECT_SCHEMA,
-      readOnly: true,
-      call: async () => ({
-        structuredContent: sourceResults.get(source.sourceId)
-      })
-    })),
-    signal
-  });
+  let viewModel;
+  try {
+    viewModel = await executeA2UICardResolver({
+      resolver,
+      fields: config2.fields,
+      presentationInputSchema: {
+        type: "object",
+        properties: {},
+        additionalProperties: false
+      },
+      argsSchema: config2.a2uiTemplate.argsSchema,
+      invocation: {},
+      runtimeContext,
+      tools: config2.dataSources.filter((source) => sourceResults.has(source.sourceId)).map((source) => ({
+        resourceId: source.mcpResourceId,
+        toolName: source.toolName,
+        inputSchema: FALLBACK_OBJECT_SCHEMA,
+        outputSchema: source.outputSchema ?? FALLBACK_OBJECT_SCHEMA,
+        call: async () => ({
+          structuredContent: sourceResults.get(source.sourceId)
+        })
+      })),
+      signal
+    });
+  } catch (error40) {
+    if (error40 instanceof A2UICardResolverError) {
+      const binding = config2.bindings.find((candidate) => candidate.fieldId === error40.fieldId);
+      const field = config2.fields.find((candidate) => candidate.fieldId === error40.fieldId);
+      throw new CardMappingError({
+        code: error40.code,
+        cardId: resource.resourceId,
+        fieldId: error40.fieldId ?? "unknown",
+        sourceId: binding?.sourceId ?? "unknown",
+        expectedType: error40.expectedType ?? field?.type ?? "unknown",
+        actualType: error40.actualType ?? "unknown",
+        retryable: false
+      });
+    }
+    throw error40;
+  }
   return createPresentationResult(resource, config2, viewModel);
 }
 function createPresentationResult(resource, config2, viewModel) {
@@ -15217,25 +15260,46 @@ function isAgentPresentationToolResult(value) {
 }
 function injectResolvedViewModel(protocol, viewModel) {
   const analysis = analyzeA2UIBindings(protocol);
-  if (analysis.issues.length || !analysis.surfaceId) {
-    throw new Error("CARD template does not contain one valid A2UI surface");
+  const declaredSurfaceIds = analysis.surfaceIds;
+  const surfaceIds = Array.isArray(declaredSurfaceIds) && declaredSurfaceIds.every((surfaceId) => typeof surfaceId === "string") ? declaredSurfaceIds : collectA2UISurfaceIdsForLegacyContract(protocol);
+  if (analysis.issues.length || surfaceIds.length === 0) {
+    throw new Error("CARD template does not contain a valid A2UI surface");
   }
   return [
     ...protocol,
     {
       version: "0.9",
-      datas: [
-        {
-          updateDataModel: {
-            surfaceId: analysis.surfaceId,
-            path: "/",
-            value: viewModel
-          }
+      datas: surfaceIds.map((surfaceId) => ({
+        updateDataModel: {
+          surfaceId,
+          path: "/",
+          value: viewModel
         }
-      ]
+      }))
     }
   ];
 }
+function collectA2UISurfaceIdsForLegacyContract(protocol) {
+  const surfaceIds = /* @__PURE__ */ new Set();
+  for (const message of protocol) {
+    if (!isJsonObject(message) || !Array.isArray(message.datas))
+      continue;
+    for (const instruction of message.datas) {
+      if (!isJsonObject(instruction))
+        continue;
+      const operations = [
+        "createSurface" in instruction ? instruction.createSurface : void 0,
+        "updateComponents" in instruction ? instruction.updateComponents : void 0
+      ];
+      for (const operation of operations) {
+        if (isJsonObject(operation) && typeof operation.surfaceId === "string") {
+          surfaceIds.add(operation.surfaceId);
+        }
+      }
+    }
+  }
+  return [...surfaceIds];
+}
 function createPresentationDescription(config2) {
   return [
     config2.description,
@@ -15276,27 +15340,39 @@ function compatibleSchemaTypes(source, target) {
 function readStructuredContent(result) {
   if (!isJsonObject(result))
     return void 0;
-  if (isJsonObject(result.structuredContent)) {
-    return JSON.parse(JSON.stringify(result.structuredContent));
+  if (Object.hasOwn(result, "structuredContent") && isJsonValue(result.structuredContent)) {
+    return cloneJsonValue(result.structuredContent);
   }
-  if (!Array.isArray(result.content) || result.content.length !== 1) {
+  if (!Array.isArray(result.content) || result.content.length === 0) {
     return void 0;
   }
-  const [content] = result.content;
-  if (!isJsonObject(content) || content.type !== "text" || typeof content.text !== "string") {
-    return void 0;
+  const texts = [];
+  for (const content of result.content) {
+    if (!isJsonObject(content) || content.type !== "text" || typeof content.text !== "string")
+      return void 0;
+    texts.push(content.text);
   }
+  if (texts.length > 1)
+    return texts.join("\n");
   try {
-    const parsed = JSON.parse(content.text);
-    return isJsonObject(parsed) ? JSON.parse(JSON.stringify(parsed)) : void 0;
+    const parsed = JSON.parse(texts[0]);
+    return isJsonValue(parsed) ? cloneJsonValue(parsed) : texts[0];
   } catch {
-    return void 0;
+    return texts[0];
   }
 }
+function normalizeMcpInputSchema(value) {
+  if (!isJsonObject(value) || getJsonSchemaIssues2(value).length > 0) {
+    return { ...FALLBACK_OBJECT_SCHEMA };
+  }
+  if (value.type === "object" && (!isJsonObject(value.properties) || Object.keys(value.properties).length === 0))
+    return { ...FALLBACK_OBJECT_SCHEMA };
+  return JSON.parse(JSON.stringify(value));
+}
 function isJsonObject(value) {
   return Boolean(value) && typeof value === "object" && !Array.isArray(value);
 }
-var import_node_crypto2, PRESENTATION_RESULT_TEXT, FALLBACK_OBJECT_SCHEMA;
+var import_node_crypto2, PRESENTATION_RESULT_TEXT, FALLBACK_OBJECT_SCHEMA, CardMappingError;
 var init_cardTools = __esm({
   "../linkque-agent-runtime/dist/esm/core/cardTools.js"() {
     "use strict";
@@ -15308,6 +15384,15 @@ var init_cardTools = __esm({
       type: "object",
       additionalProperties: true
     };
+    CardMappingError = class extends Error {
+      details;
+      retryable = false;
+      constructor(details) {
+        super(JSON.stringify(details));
+        this.name = "CardMappingError";
+        this.details = details;
+      }
+    };
   }
 });
 
@@ -15479,11 +15564,9 @@ var init_mcpProxyTool = __esm({
         const tool = entry.tools.find((t2) => t2.name === toolName);
         if (!tool)
           return void 0;
-        const annotations = tool.annotations;
         return {
           inputSchema: tool.inputSchema,
           outputSchema: tool.outputSchema,
-          readOnly: annotations?.readOnlyHint,
           execute: (args, sig) => entry.server.callTool(tool.name, args, sig)
         };
       }
@@ -16731,6 +16814,7 @@ var init_noopHookExecutor = __esm({
   "../linkque-agent-runtime/dist/esm/core/hook/noopHookExecutor.js"() {
     "use strict";
     NoopHookExecutor = class {
+      name = "NoopHookExecutor";
       execute(_resource, _context, _options) {
         return Promise.resolve({
           ok: true,
@@ -16865,6 +16949,7 @@ var init_linkquegwEventHookExecutor = __esm({
     LINKQUEGW_AGENT_EVENT_TRIGGER_PATH = "/api/agent/event/trigger";
     LINKQUEGW_EVENT_TYPE_BY_STAGE = { [EHookStage.RUN_STARTED]: "AGENT_DIALOG_ROUND_STARTED" };
     LinkquegwEventHookExecutor = class {
+      name = EHookExecutorName.LinkquegwEventHookExecutor;
       baseUrl;
       getAuthHeaders;
       fetchImpl;
@@ -92034,26 +92119,26 @@ function _tuple(Class2, items, _paramsOrRest, _params) {
     ...normalizeParams(params)
   });
 }
-function _record(Class2, keyType, valueType2, params) {
+function _record(Class2, keyType, valueType3, params) {
   return new Class2({
     type: "record",
     keyType,
-    valueType: valueType2,
+    valueType: valueType3,
     ...normalizeParams(params)
   });
 }
-function _map(Class2, keyType, valueType2, params) {
+function _map(Class2, keyType, valueType3, params) {
   return new Class2({
     type: "map",
     keyType,
-    valueType: valueType2,
+    valueType: valueType3,
     ...normalizeParams(params)
   });
 }
-function _set(Class2, valueType2, params) {
+function _set(Class2, valueType3, params) {
   return new Class2({
     type: "set",
-    valueType: valueType2,
+    valueType: valueType3,
     ...normalizeParams(params)
   });
 }
@@ -93700,34 +93785,34 @@ function tuple(items, _paramsOrRest, _params) {
     ...util_exports.normalizeParams(params)
   });
 }
-function record(keyType, valueType2, params) {
+function record(keyType, valueType3, params) {
   return new ZodRecord2({
     type: "record",
     keyType,
-    valueType: valueType2,
+    valueType: valueType3,
     ...util_exports.normalizeParams(params)
   });
 }
-function partialRecord(keyType, valueType2, params) {
+function partialRecord(keyType, valueType3, params) {
   return new ZodRecord2({
     type: "record",
     keyType: union([keyType, never()]),
-    valueType: valueType2,
+    valueType: valueType3,
     ...util_exports.normalizeParams(params)
   });
 }
-function map(keyType, valueType2, params) {
+function map(keyType, valueType3, params) {
   return new ZodMap2({
     type: "map",
     keyType,
-    valueType: valueType2,
+    valueType: valueType3,
     ...util_exports.normalizeParams(params)
   });
 }
-function set(valueType2, params) {
+function set(valueType3, params) {
   return new ZodSet2({
     type: "set",
-    valueType: valueType2,
+    valueType: valueType3,
     ...util_exports.normalizeParams(params)
   });
 }
@@ -157406,10 +157491,10 @@ function coerceWithJsonSchema(value, schema) {
     nextValue = coerceWithUnionSchema(nextValue, schema.oneOf);
   }
   const schemaTypes = getSchemaTypes(schema);
-  const matchesUnionMember = schemaTypes.length > 1 && schemaTypes.some((schemaType) => matchesJsonType(nextValue, schemaType));
+  const matchesUnionMember = schemaTypes.length > 1 && schemaTypes.some((schemaType2) => matchesJsonType(nextValue, schemaType2));
   if (schemaTypes.length > 0 && !matchesUnionMember) {
-    for (const schemaType of schemaTypes) {
-      const candidate = coercePrimitiveByType(nextValue, schemaType);
+    for (const schemaType2 of schemaTypes) {
+      const candidate = coercePrimitiveByType(nextValue, schemaType2);
       if (candidate !== nextValue) {
         nextValue = candidate;
         break;
@@ -188105,16 +188190,12 @@ function createCardSourceToolName(resourceId, sourceId) {
 function createCardFinishToolName(resourceId) {
   return stableToolName("card_finish", resourceId);
 }
-var FALLBACK_SOURCE_INPUT_SCHEMA, CardRenderMcpServer;
+var CardRenderMcpServer;
 var init_cardRenderMcpServer = __esm({
   "../linkque-agent-runtime/dist/esm/core/cardRenderMcpServer.js"() {
     "use strict";
     init_cardTools();
     init_mcpNaming();
-    FALLBACK_SOURCE_INPUT_SCHEMA = {
-      type: "object",
-      additionalProperties: true
-    };
     CardRenderMcpServer = class {
       resources;
       registry;
@@ -188216,7 +188297,7 @@ Select this card first, then call its card_source tools and card_finish tool.`,
               resourceId: resource.resourceId,
               label: source.purpose,
               description: `Use after selecting ${name}. ${source.purpose}. Choose all MCP arguments from the conversation and prior source results.`,
-              inputSchema: discoveredHandle?.inputSchema ?? FALLBACK_SOURCE_INPUT_SCHEMA,
+              inputSchema: normalizeMcpInputSchema(discoveredHandle?.inputSchema),
               outputSchema: discoveredHandle?.outputSchema ?? source.outputSchema,
               execute: async (args, signal) => {
                 if (!state2.selected || this.activeCardId !== resource.resourceId)
@@ -188227,12 +188308,21 @@ Select this card first, then call its card_source tools and card_finish tool.`,
                 const handle = discoveredHandle ?? await this.registry.resolve(source.mcpResourceId, source.toolName, signal);
                 if (!handle)
                   throw new Error(`MCP tool ${source.mcpResourceId}/${source.toolName} is unavailable`);
-                if (handle.readOnly === false)
-                  throw new Error(`Card data source ${source.mcpResourceId}/${source.toolName} must be read-only`);
                 const result = await handle.execute(args, signal);
                 const structured = readStructuredContent(result);
-                if (!structured)
-                  throw new Error(`MCP tool ${source.mcpResourceId}/${source.toolName} did not return structured content`);
+                if (structured === void 0) {
+                  const binding = config2.bindings.find((candidate) => candidate.sourceId === source.sourceId);
+                  const field = config2.fields.find((candidate) => candidate.fieldId === binding?.fieldId);
+                  throw new CardMappingError({
+                    code: "MCP_RESULT_UNSUPPORTED",
+                    cardId: resource.resourceId,
+                    fieldId: binding?.fieldId ?? "unknown",
+                    sourceId: source.sourceId,
+                    expectedType: field?.type ?? "json",
+                    actualType: "mixed-or-empty-content",
+                    retryable: false
+                  });
+                }
                 state2.results.set(source.sourceId, structured);
                 return structured;
               }
@@ -188478,6 +188568,99 @@ var init_noopKnowledgeSearchPort = __esm({
   }
 });
 
+// ../linkque-agent-runtime/dist/esm/core/agentRuntimePlugin.js
+function assertAgentConfigRoot(value, pluginName) {
+  if (typeof value !== "object" || value === null || !("agent" in value)) {
+    throw new Error(`Agent runtime \u63D2\u4EF6 ${pluginName} \u7684 modifyAgentConfig \u8FD4\u56DE\u4E86\u65E0\u6548\u914D\u7F6E`);
+  }
+}
+var validatePlugins, applyAgentRuntimePluginConfig, MergedHookExecutorHandler, resolveAgentRuntimeHookExecutor;
+var init_agentRuntimePlugin = __esm({
+  "../linkque-agent-runtime/dist/esm/core/agentRuntimePlugin.js"() {
+    "use strict";
+    init_types2();
+    validatePlugins = (plugins) => {
+      const names = /* @__PURE__ */ new Set();
+      for (const plugin of plugins) {
+        const name = plugin.name.trim();
+        if (!name) {
+          throw new Error("Agent runtime \u63D2\u4EF6 name \u4E0D\u80FD\u4E3A\u7A7A");
+        }
+        if (names.has(name)) {
+          throw new Error(`Agent runtime \u63D2\u4EF6 name \u91CD\u590D: ${name}`);
+        }
+        names.add(name);
+      }
+      return plugins;
+    };
+    applyAgentRuntimePluginConfig = (agentConfig, plugins = []) => {
+      const validatedPlugins = validatePlugins(plugins);
+      const modifiers = validatedPlugins.filter((plugin) => plugin.modifyAgentConfig !== void 0);
+      if (modifiers.length === 0)
+        return agentConfig;
+      let current = structuredClone(agentConfig);
+      for (const plugin of modifiers) {
+        try {
+          const modified = plugin.modifyAgentConfig?.(current);
+          if (modified !== void 0) {
+            assertAgentConfigRoot(modified, plugin.name);
+            current = modified;
+          }
+          current = structuredClone(current);
+        } catch (error40) {
+          throw new Error(`Agent runtime \u63D2\u4EF6 ${plugin.name} \u4FEE\u6539 Agent Config \u5931\u8D25`, { cause: error40 });
+        }
+      }
+      return current;
+    };
+    MergedHookExecutorHandler = class {
+      executorByName;
+      constructor(executorByName) {
+        this.executorByName = executorByName;
+      }
+      async execute(resource, context2, options) {
+        const executor = this.executorByName.get(resource.config.executorName);
+        if (executor)
+          return executor.execute(resource, context2, options);
+        return {
+          ok: true,
+          skipped: true,
+          code: "PLUGIN_EXECUTOR_NOT_FOUND",
+          message: `\u672A\u627E\u5230 name=${resource.config.executorName} \u7684 hook executor`
+        };
+      }
+    };
+    resolveAgentRuntimeHookExecutor = (plugins = [], portHookExecutorList = [], debugLog) => {
+      const entries = validatePlugins(plugins).flatMap((plugin) => (plugin.hookExecutorList ?? []).map((executor, index2) => ({
+        executor,
+        source: `plugin:${plugin.name}[${index2}]`
+      })));
+      entries.push(...portHookExecutorList.map((executor, index2) => ({
+        executor,
+        source: `ports.hookExecutorList[${index2}]`
+      })));
+      if (entries.length === 0)
+        return void 0;
+      const merged = /* @__PURE__ */ new Map();
+      for (const entry of entries) {
+        const name = entry.executor.name;
+        if (!name.trim())
+          throw new Error(`Hook executor name \u4E0D\u80FD\u4E3A\u7A7A: ${entry.source}`);
+        const previous = merged.get(name);
+        if (previous) {
+          try {
+            debugLog?.(`[hook-executor-merge] name=${name} \u51B2\u7A81: ${previous.source} \u88AB ${entry.source} \u8986\u76D6`, EDebugLogScope.HOOK);
+          } catch {
+          }
+        }
+        merged.set(name, entry);
+      }
+      const executorByName = new Map([...merged].map(([name, entry]) => [name, entry.executor]));
+      return new MergedHookExecutorHandler(executorByName);
+    };
+  }
+});
+
 // ../linkque-agent-runtime/dist/esm/core/agentRuntime.js
 function composeSystemPrompt(harnessPrompt, systemPrompt, skillcatalog = "") {
   const parts = [];
@@ -188514,6 +188697,7 @@ var init_agentRuntime = __esm({
     init_noopHookExecutor();
     init_sideEffectRunner();
     init_hookToolWrapper();
+    init_agentRuntimePlugin();
     DEFAULT_HARNESS_PROMPT = `# Harness \u8FD0\u884C\u89C4\u7EA6
 
 \u4F60\u662F\u8FD0\u884C\u5728 LinkQue harness \u4E4B\u4E0B\u7684\u667A\u80FD\u4F53\u3002\u8BF7\u9075\u5B88\u4EE5\u4E0B\u7A33\u5B9A\u8FD0\u884C\u89C4\u7EA6:
@@ -188575,13 +188759,14 @@ var init_agentRuntime = __esm({
        * 本 constructor 供单测/noop 调试或需要完全自定义默认的场景。
        */
       constructor(ports = {}) {
+        const mergedHookExecutor = resolveAgentRuntimeHookExecutor(ports.plugins, ports.hookExecutorList, ports.debugLog);
         this.agentLoop = ports.agentLoop ?? new PiAgentLoop(void 0, ports.linkqueBaseUrl);
         this.followUpQuestionGenerator = ports.followUpQuestionGenerator ?? new PiFollowUpQuestionGenerator(ports.linkqueBaseUrl);
         this.sessionManager = ports.sessionManager ?? new InMemorySessionManager();
         this.skillLoader = ports.skillLoader ?? new NoopSkillLoader();
         this.mcpServerProvider = ports.mcpServerProvider ?? new NoopMcpServerProvider();
         this.knowledgeSearchPort = ports.knowledgeSearchPort ?? new NoopKnowledgeSearchPort();
-        this.hookExecutor = ports.hookExecutor ?? new NoopHookExecutor();
+        this.hookExecutor = mergedHookExecutor ?? new NoopHookExecutor();
         this.hookMetricsSink = ports.hookMetricsSink;
         this.portsDebugLog = ports.debugLog;
       }
@@ -188597,31 +188782,32 @@ var init_agentRuntime = __esm({
        * @param ports     可选端口覆盖(任一缺省走默认适配器)
        */
       static create(protocol, ports) {
-        const model = protocol.agent.model;
-        const skillResources = protocol.agent.resources.filter((r2) => r2.resourceType === EResourceType.SKILL);
-        const mcpResources = protocol.agent.resources.filter((r2) => r2.resourceType === EResourceType.MCP);
-        const mcpToolResources = protocol.agent.resources.filter((r2) => r2.resourceType === EResourceType.MCP_TOOL);
-        const cardResources = protocol.agent.resources.filter((r2) => r2.resourceType === EResourceType.CARD);
-        const knowledgeResources = protocol.agent.resources.filter((r2) => r2.resourceType === EResourceType.KNOWLEDGE);
-        const followUpQuestionGenerationEnabled = protocol.agent.resources.filter((resource) => resource.resourceType === EResourceType.FOLLOW_UP_QUESTIONS).some((resource) => resource.config.enable === true);
-        const mcpServerSpecs = aggregateMcpServers([...mcpResources, ...mcpToolResources], protocol.agentId);
         const portsArg = ports ?? {};
+        const agentConfig = applyAgentRuntimePluginConfig(protocol, portsArg.plugins);
+        const model = agentConfig.agent.model;
+        const skillResources = agentConfig.agent.resources.filter((r2) => r2.resourceType === EResourceType.SKILL);
+        const mcpResources = agentConfig.agent.resources.filter((r2) => r2.resourceType === EResourceType.MCP);
+        const mcpToolResources = agentConfig.agent.resources.filter((r2) => r2.resourceType === EResourceType.MCP_TOOL);
+        const cardResources = agentConfig.agent.resources.filter((r2) => r2.resourceType === EResourceType.CARD);
+        const knowledgeResources = agentConfig.agent.resources.filter((r2) => r2.resourceType === EResourceType.KNOWLEDGE);
+        const followUpQuestionGenerationEnabled = agentConfig.agent.resources.filter((resource) => resource.resourceType === EResourceType.FOLLOW_UP_QUESTIONS).some((resource) => resource.config.enable === true);
+        const mcpServerSpecs = aggregateMcpServers([...mcpResources, ...mcpToolResources], agentConfig.agentId);
         const innerProvider = portsArg.mcpServerProvider ?? new NoopMcpServerProvider();
         const rt = new _AgentRuntime({
           ...portsArg,
           mcpServerProvider: new CardRenderMcpServerProvider(innerProvider)
         });
-        rt.defaultSystemPrompt = protocol.agent.systemPrompt.content;
-        rt.defaultHarnessPrompt = protocol.agent.harness ? protocol.agent.harness.systemPrompt : DEFAULT_HARNESS_PROMPT;
+        rt.defaultSystemPrompt = agentConfig.agent.systemPrompt.content;
+        rt.defaultHarnessPrompt = agentConfig.agent.harness ? agentConfig.agent.harness.systemPrompt : DEFAULT_HARNESS_PROMPT;
         rt.defaultModel = model.defaultModel || void 0;
         rt.defaultThinkingLevel = model.callParams?.thinkingLevel;
         rt.skillResources = skillResources;
         rt.mcpServerSpecs = mcpServerSpecs;
         rt.cardResources = cardResources;
         rt.knowledgeResources = knowledgeResources;
-        rt.agentId = protocol.agentId;
+        rt.agentId = agentConfig.agentId;
         rt.followUpQuestionGenerationEnabled = followUpQuestionGenerationEnabled;
-        rt.hookResources = normalizeHookResources(protocol.agent.resources.filter((r2) => r2.resourceType === EResourceType.HOOK));
+        rt.hookResources = normalizeHookResources(agentConfig.agent.resources.filter((r2) => r2.resourceType === EResourceType.HOOK));
         return rt;
       }
       async prepareFollowUpQuestionContext(sessionId, history = []) {
@@ -196768,6 +196954,115 @@ var init_esm9 = __esm({
   }
 });
 
+// ../linkque-agent-runtime/dist/esm/impl/plugin/examplePlugin.js
+var ExamplePlugin;
+var init_examplePlugin = __esm({
+  "../linkque-agent-runtime/dist/esm/impl/plugin/examplePlugin.js"() {
+    "use strict";
+    ExamplePlugin = class {
+      name = "example-plugin";
+      hookExecutorList;
+      systemPromptSuffix;
+      constructor(options) {
+        this.hookExecutorList = options.hookExecutorList;
+        this.systemPromptSuffix = options.systemPromptSuffix;
+      }
+      /**
+       * 为业务 system prompt 追加配置后缀。
+       *
+       * 当前内容或后缀已经在边界携带换行时不重复插入;空后缀保持配置不变。
+       */
+      modifyAgentConfig(agentConfig) {
+        const suffix = this.systemPromptSuffix;
+        if (!suffix)
+          return;
+        const current = agentConfig.agent.systemPrompt.content;
+        const separator = current && !current.endsWith("\n") && !suffix.startsWith("\n") ? "\n" : "";
+        agentConfig.agent.systemPrompt.content = `${current}${separator}${suffix}`;
+      }
+    };
+  }
+});
+
+// ../linkque-agent-runtime/dist/esm/impl/plugin/linkquegwEventPlugin.js
+var LINKQUEGW_EVENT_PLUGIN_NAME, LINKQUEGW_EVENT_HOOK_RESOURCE_ID, createLinkquegwEventHookResource, isUserTokenAuthorization, isLinkquegwRunStartedHook, LinkquegwEventPlugin;
+var init_linkquegwEventPlugin = __esm({
+  "../linkque-agent-runtime/dist/esm/impl/plugin/linkquegwEventPlugin.js"() {
+    "use strict";
+    init_esm2();
+    init_linkquegwEventHookExecutor();
+    LINKQUEGW_EVENT_PLUGIN_NAME = "linkquegw-event-plugin";
+    LINKQUEGW_EVENT_HOOK_RESOURCE_ID = "linkquegw-event-run-started";
+    createLinkquegwEventHookResource = () => ({
+      resourceId: LINKQUEGW_EVENT_HOOK_RESOURCE_ID,
+      resourceType: EResourceType.HOOK,
+      providerType: EResourceProviderType.LINK_QUE,
+      config: {
+        name: "LinkqueGW \u751F\u547D\u5468\u671F\u4E8B\u4EF6\u4E0A\u62A5",
+        executorName: EHookExecutorName.LinkquegwEventHookExecutor,
+        stage: EHookStage.RUN_STARTED,
+        hasSideEffects: true
+      }
+    });
+    isUserTokenAuthorization = (value) => /^Bearer[\t ]+[^\s,]+$/u.test(value);
+    isLinkquegwRunStartedHook = (resource) => {
+      if (resource.resourceType !== EResourceType.HOOK)
+        return false;
+      const hookResource = resource;
+      return hookResource.config.executorName === EHookExecutorName.LinkquegwEventHookExecutor && hookResource.config.stage === EHookStage.RUN_STARTED;
+    };
+    LinkquegwEventPlugin = class {
+      name = LINKQUEGW_EVENT_PLUGIN_NAME;
+      hookExecutorList;
+      constructor(options) {
+        const executorOptions = {
+          getAuthHeaders: async () => {
+            const authorization = await options.getUserTokenAuthorizationHeader();
+            if (!isUserTokenAuthorization(authorization)) {
+              throw new Error("LinkqueGW event trigger \u53EA\u5141\u8BB8\u5355\u4E2A Bearer user token");
+            }
+            return {
+              authorization,
+              ...options.agentId ? { "x-linkque-agent-id": options.agentId } : {}
+            };
+          },
+          ...options.baseUrl !== void 0 && { baseUrl: options.baseUrl },
+          ...options.fetchImpl !== void 0 && { fetchImpl: options.fetchImpl },
+          ...options.debugLog !== void 0 && { debugLog: options.debugLog },
+          ...options.metricsSink !== void 0 && {
+            metricsSink: options.metricsSink
+          },
+          ...options.now !== void 0 && { now: options.now }
+        };
+        this.hookExecutorList = [new LinkquegwEventHookExecutor(executorOptions)];
+      }
+      /** 自动补入 event trigger 所需 HookResource;已有同 executorName + stage 时保持原配置。 */
+      modifyAgentConfig(agentConfig) {
+        const exists = agentConfig.agent.resources.some(isLinkquegwRunStartedHook);
+        if (exists)
+          return;
+        agentConfig.agent.resources.push(createLinkquegwEventHookResource());
+      }
+    };
+  }
+});
+
+// ../linkque-agent-runtime/dist/esm/impl/plugin/index.js
+var plugin_exports = {};
+__export(plugin_exports, {
+  ExamplePlugin: () => ExamplePlugin,
+  LINKQUEGW_EVENT_HOOK_RESOURCE_ID: () => LINKQUEGW_EVENT_HOOK_RESOURCE_ID,
+  LINKQUEGW_EVENT_PLUGIN_NAME: () => LINKQUEGW_EVENT_PLUGIN_NAME,
+  LinkquegwEventPlugin: () => LinkquegwEventPlugin
+});
+var init_plugin = __esm({
+  "../linkque-agent-runtime/dist/esm/impl/plugin/index.js"() {
+    "use strict";
+    init_examplePlugin();
+    init_linkquegwEventPlugin();
+  }
+});
+
 // src/commands/agentdev/worker.ts
 var import_http219 = require("http");
 var import_promises5 = require("fs/promises");
@@ -196857,12 +197152,18 @@ init_esm();
 
 // src/commands/agentdev/sandboxIntegrate/sandboxAuth.ts
 var LINKQUE_AGENT_ACCESS_KEY_ENV = "LINKQUE_AGENT_ACCESS_KEY";
+var LINKQUE_USER_TOKEN_ENV = "LINKQUE_USER_TOKEN";
 var resolveAgentAccessKey = (env2) => env2[LINKQUE_AGENT_ACCESS_KEY_ENV]?.trim() || void 0;
+var resolveLinkqueUserToken = (env2) => env2[LINKQUE_USER_TOKEN_ENV]?.trim() || void 0;
 var createAgentAccessAuthorization = (agentAccessKey) => `aak ${agentAccessKey}`;
-var createAgentAccessHeaders = (agentAccessKey, agentId) => ({
-  authorization: createAgentAccessAuthorization(agentAccessKey),
-  "x-linkque-agent-id": agentId
-});
+var createLinkqueUserAuthorization = (userToken) => `Bearer ${userToken}`;
+var resolveSandboxGatewayAuthorization = (env2) => {
+  const userToken = resolveLinkqueUserToken(env2);
+  if (userToken) return createLinkqueUserAuthorization(userToken);
+  const agentAccessKey = resolveAgentAccessKey(env2);
+  return agentAccessKey ? createAgentAccessAuthorization(agentAccessKey) : void 0;
+};
+var createSandboxGatewayHeaders = (authorization, agentId) => ({ authorization, "x-linkque-agent-id": agentId });
 var resolveSandboxApiKey = (provider, env2) => {
   const fallbackApiKey = env2.LINKQUE_AGENT_API_KEY?.trim() || void 0;
   if (provider === "LINKQUE") {
@@ -197140,9 +197441,9 @@ var maskSecret = (raw) => {
 var AGENT_ENV_SNAPSHOT = [
   ["LINKQUE_AGENT_API_KEY", true],
   ["LINKQUE_AGENT_ACCESS_KEY", true],
+  ["LINKQUE_USER_TOKEN", true],
   ["LINKQUEGW_KNOWLEDGE_BASE_URL", false],
   ["LINKQUEGW_BILLING_SUBJECT_OID", false],
-  ["LINKQUEGW_OPEN_USER_ID", false],
   ["LINKQUE_BASE_URL", false],
   ["LINKQUE_OPEN_MCP_BASE_URL", false],
   ["LINKQUE_MCP_SIGN_ENDPOINT", false],
@@ -197271,27 +197572,34 @@ var main = async () => {
 `);
   };
   const agentModule = await Promise.resolve().then(() => (init_esm9(), esm_exports));
+  const pluginModule = await Promise.resolve().then(() => (init_plugin(), plugin_exports));
   runConversation2 = agentModule.runConversation;
   executeHomeData2 = agentModule.executeHomeData;
   const localMcpUrl = process.env.LINKQUE_AGENT_MCP_FIXTURE_URL?.trim();
-  const agentAccessKey = resolveAgentAccessKey(process.env);
-  const remoteAuthorizationHeader = agentAccessKey ? async () => createAgentAccessAuthorization(agentAccessKey) : void 0;
+  const gatewayAuthorization = resolveSandboxGatewayAuthorization(process.env);
+  const remoteAuthorizationHeader = gatewayAuthorization ? async () => gatewayAuthorization : void 0;
   const knowledgeBaseUrl = process.env.LINKQUEGW_KNOWLEDGE_BASE_URL?.trim();
-  const knowledgeSearchPort = agentAccessKey ? new agentModule.LinkqueKnowledgeSearchPort({
+  const knowledgeSearchPort = gatewayAuthorization ? new agentModule.LinkqueKnowledgeSearchPort({
     baseUrl: knowledgeBaseUrl,
     getAuthHeaders: async () => {
-      const headers = createAgentAccessHeaders(
-        agentAccessKey,
+      const headers = createSandboxGatewayHeaders(
+        gatewayAuthorization,
         input.agentId
       );
       const billingOid = process.env.LINKQUEGW_BILLING_SUBJECT_OID?.trim();
       if (billingOid) headers["x-linkque-billing-subject-oid"] = billingOid;
-      const openUserId = process.env.LINKQUEGW_OPEN_USER_ID?.trim();
-      if (openUserId) headers["x-linkque-open-user-id"] = openUserId;
       return headers;
     },
     debugLog
   }) : void 0;
+  const linkqueUserToken = resolveLinkqueUserToken(process.env);
+  const userTokenAuthorization = linkqueUserToken ? createLinkqueUserAuthorization(linkqueUserToken) : void 0;
+  const linkquegwEventPlugin = userTokenAuthorization ? new pluginModule.LinkquegwEventPlugin({
+    baseUrl: knowledgeBaseUrl,
+    getUserTokenAuthorizationHeader: async () => userTokenAuthorization,
+    agentId: input.agentId,
+    debugLog
+  }) : void 0;
   const linkqueBaseUrl = process.env.LINKQUE_BASE_URL?.trim();
   const buildSkillLoader = () => new agentModule.WebSkillLoader({ root: input.cwd, debugLog });
   const sharedSessionManager = new agentModule.InMemorySessionManager();
@@ -197305,6 +197613,7 @@ var main = async () => {
       mcpServerProvider: createMcpServerProvider(protocol),
       sessionManager: sharedSessionManager,
       ...knowledgeSearchPort ? { knowledgeSearchPort } : {},
+      ...linkquegwEventPlugin ? { plugins: [linkquegwEventPlugin] } : {},
       ...linkqueBaseUrl ? { linkqueBaseUrl } : {},
       debugLog
     });
@@ -197336,6 +197645,7 @@ var main = async () => {
         mcpServerProvider: createMcpServerProvider(protocol),
         sessionManager: sharedSessionManager,
         ...knowledgeSearchPort ? { knowledgeSearchPort } : {},
+        ...linkquegwEventPlugin ? { plugins: [linkquegwEventPlugin] } : {},
         ...linkqueBaseUrl ? { linkqueBaseUrl } : {},
         debugLog
       });
@@ -197351,6 +197661,7 @@ var main = async () => {
       mcpServerProvider: createMcpServerProvider(protocol),
       sessionManager: sharedSessionManager,
       ...knowledgeSearchPort ? { knowledgeSearchPort } : {},
+      ...linkquegwEventPlugin ? { plugins: [linkquegwEventPlugin] } : {},
       ...linkqueBaseUrl ? { linkqueBaseUrl } : {},
       debugLog
     });