skill-creator 2.0.1 → 2.1.0

package/dist/cli.js

@@ -817,6 +817,11 @@ import { readFile as readFile2, readdir, realpath, stat } from "node:fs/promises
 import { createRequire as createRequire2 } from "node:module";
 import os3 from "node:os";
 import path6 from "node:path";
+function isTextualFileName(name) {
+  return /\.(txt|md|markdown|json|ya?ml|toml|csv|tsv|log|patch|diff|ts|tsx|js|jsx|py|rs|go|java|c|h|cpp|sh|css|html|xml|ini|env)$/i.test(
+    name
+  );
+}
 function toDomainError(error, what, target) {
   const code = error?.code;
   if (code === "ENOENT" || code === "ENOTDIR") {
@@ -1084,7 +1089,29 @@ function createAgentFilesService(deps = {}) {
     }
     return { images, files };
   }
-  return { pickFiles, list: list2, preview: preview2, resolvePromptAttachments };
+  async function resolvePromptReferences(input) {
+    const blocks = [];
+    for (const reference of input.references) {
+      const { real, size } = await canonicalRegularFile(reference.path, "reference");
+      if (size > PROMPT_FILE_MAX_BYTES) {
+        throw new DomainError(
+          "INVALID_OPERATION",
+          `"${path6.basename(real)}" exceeds the 512KiB limit.`
+        );
+      }
+      if (!isTextualFileName(path6.basename(real))) {
+        throw new DomainError(
+          "INVALID_OPERATION",
+          `"${path6.basename(real)}" is not a textual file; attach it instead.`
+        );
+      }
+      const text = await readFile2(real, "utf8");
+      blocks.push(`[reference: ${real}]
+${text.slice(0, 2e5)}`);
+    }
+    return blocks;
+  }
+  return { pickFiles, list: list2, preview: preview2, resolvePromptAttachments, resolvePromptReferences };
 }
 var LIST_ENTRY_LIMIT, PREVIEW_IMAGE_MAX_BYTES, PREVIEW_TEXT_MAX_BYTES, PREVIEW_TEXT_HEAD_BYTES, PROMPT_IMAGE_MAX_BYTES, PROMPT_FILE_MAX_BYTES, PICKER_CHILD_CODE, PICKER_TIMEOUT_MS, PICKER_STDOUT_LIMIT, cachedRfdEntry;
 var init_agent_files = __esm({
@@ -3142,28 +3169,28 @@ var init_create_prompt_CIJV_96B = __esm({
         b = b > 0.04045 ? ((b + 0.055) / 1.055) ** 2.4 : b / 12.92;
         const x = r * 0.4124 + g * 0.3576 + b * 0.1805;
         const y = r * 0.2126 + g * 0.7152 + b * 0.0722;
-        const z25 = r * 0.0193 + g * 0.1192 + b * 0.9505;
+        const z27 = r * 0.0193 + g * 0.1192 + b * 0.9505;
         return [
           x * 100,
           y * 100,
-          z25 * 100
+          z27 * 100
         ];
       };
       convert$1.rgb.lab = function(rgb) {
         const xyz = convert$1.rgb.xyz(rgb);
         let x = xyz[0];
         let y = xyz[1];
-        let z25 = xyz[2];
+        let z27 = xyz[2];
         x /= 95.047;
         y /= 100;
-        z25 /= 108.883;
+        z27 /= 108.883;
         x = x > 8856e-6 ? x ** (1 / 3) : 7.787 * x + 16 / 116;
         y = y > 8856e-6 ? y ** (1 / 3) : 7.787 * y + 16 / 116;
-        z25 = z25 > 8856e-6 ? z25 ** (1 / 3) : 7.787 * z25 + 16 / 116;
+        z27 = z27 > 8856e-6 ? z27 ** (1 / 3) : 7.787 * z27 + 16 / 116;
         return [
           116 * y - 16,
           500 * (x - y),
-          200 * (y - z25)
+          200 * (y - z27)
         ];
       };
       convert$1.hsl.rgb = function(hsl) {
@@ -3360,13 +3387,13 @@ var init_create_prompt_CIJV_96B = __esm({
       convert$1.xyz.rgb = function(xyz) {
         const x = xyz[0] / 100;
         const y = xyz[1] / 100;
-        const z25 = xyz[2] / 100;
+        const z27 = xyz[2] / 100;
         let r;
         let g;
         let b;
-        r = x * 3.2406 + y * -1.5372 + z25 * -0.4986;
-        g = x * -0.9689 + y * 1.8758 + z25 * 0.0415;
-        b = x * 0.0557 + y * -0.204 + z25 * 1.057;
+        r = x * 3.2406 + y * -1.5372 + z27 * -0.4986;
+        g = x * -0.9689 + y * 1.8758 + z27 * 0.0415;
+        b = x * 0.0557 + y * -0.204 + z27 * 1.057;
         r = r > 31308e-7 ? 1.055 * r ** (1 / 2.4) - 0.055 : r * 12.92;
         g = g > 31308e-7 ? 1.055 * g ** (1 / 2.4) - 0.055 : g * 12.92;
         b = b > 31308e-7 ? 1.055 * b ** (1 / 2.4) - 0.055 : b * 12.92;
@@ -3382,17 +3409,17 @@ var init_create_prompt_CIJV_96B = __esm({
       convert$1.xyz.lab = function(xyz) {
         let x = xyz[0];
         let y = xyz[1];
-        let z25 = xyz[2];
+        let z27 = xyz[2];
         x /= 95.047;
         y /= 100;
-        z25 /= 108.883;
+        z27 /= 108.883;
         x = x > 8856e-6 ? x ** (1 / 3) : 7.787 * x + 16 / 116;
         y = y > 8856e-6 ? y ** (1 / 3) : 7.787 * y + 16 / 116;
-        z25 = z25 > 8856e-6 ? z25 ** (1 / 3) : 7.787 * z25 + 16 / 116;
+        z27 = z27 > 8856e-6 ? z27 ** (1 / 3) : 7.787 * z27 + 16 / 116;
         return [
           116 * y - 16,
           500 * (x - y),
-          200 * (y - z25)
+          200 * (y - z27)
         ];
       };
       convert$1.lab.xyz = function(lab) {
@@ -3401,23 +3428,23 @@ var init_create_prompt_CIJV_96B = __esm({
         const b = lab[2];
         let x;
         let y;
-        let z25;
+        let z27;
         y = (l + 16) / 116;
         x = a / 500 + y;
-        z25 = y - b / 200;
+        z27 = y - b / 200;
         const y2 = y ** 3;
         const x2 = x ** 3;
-        const z26 = z25 ** 3;
+        const z28 = z27 ** 3;
         y = y2 > 8856e-6 ? y2 : (y - 16 / 116) / 7.787;
         x = x2 > 8856e-6 ? x2 : (x - 16 / 116) / 7.787;
-        z25 = z26 > 8856e-6 ? z26 : (z25 - 16 / 116) / 7.787;
+        z27 = z28 > 8856e-6 ? z28 : (z27 - 16 / 116) / 7.787;
         x *= 95.047;
         y *= 100;
-        z25 *= 108.883;
+        z27 *= 108.883;
         return [
           x,
           y,
-          z25
+          z27
         ];
       };
       convert$1.lab.lch = function(lab) {
@@ -42289,7 +42316,7 @@ var DSH_AUDITED_COMMIT, DshCompositionRowSchema, DshCapabilityMatrixSchema, DshU
 var init_dsh_runtime = __esm({
   "src/shared/contracts/dsh-runtime.ts"() {
     "use strict";
-    DSH_AUDITED_COMMIT = "d347e703908d0406b7a7ef80e3a0e594d86b2215";
+    DSH_AUDITED_COMMIT = "0a15e36e7f82b6ed45af6fa9759f29b40dcd965d";
     DshCompositionRowSchema = z15.object({
       packageName: z15.string().min(1),
       lockedVersion: z15.string().min(1),
@@ -42567,7 +42594,10 @@ var init_dsh_runtime = __esm({
       "todo-snapshot",
       /** 自动压缩标记（daemon 在 turn-end 后按 inputTokens + maxOutputTokens ≥
        * contextWindow 阈值自动执行 compact；text = 触发说明，UI 以居中注记渲染）。 */
-      "auto-compact"
+      "auto-compact",
+      /** 子代理目录（父会话 subagent/catalog 事件投影；payload = {childId, mode,
+       *  label}——角色 spawn 的可见性帧，settlement 经 user-text 回流）。 */
+      "subagent"
     ]);
     DshSessionStreamFrameSchema = z15.object({
       /** 进程内单调序号（投影视角排序用，非持久协议）。 */
@@ -45703,14 +45733,16 @@ var init_dsh_route_connection = __esm({
 });
 
 // src/daemon/dsh-host-lifecycle.ts
+import { join as join2 } from "node:path";
 function resolveDefaultDshHome() {
   const env2 = process.env.DSH_HOME;
   if (env2 && env2.trim() !== "") return env2;
-  return `${process.env.HOME ?? ""}/.dsh`;
+  return join2(homeDir(), ".skill-creator", "dsh-home");
 }
 var init_dsh_host_lifecycle = __esm({
   "src/daemon/dsh-host-lifecycle.ts"() {
     "use strict";
+    init_paths();
   }
 });
 
@@ -46109,6 +46141,25 @@ var init_dsh_settings = __esm({
   }
 });
 
+// src/shared/contracts/agent-roles.ts
+function agentRoleToolName(slug) {
+  return `${AGENT_ROLE_TOOL_PREFIX}${slug}`;
+}
+var AGENT_ROLE_PROMPT_VERSION, AGENT_ROLE_TOOL_PREFIX, AGENT_MODE_ROLES;
+var init_agent_roles = __esm({
+  "src/shared/contracts/agent-roles.ts"() {
+    "use strict";
+    AGENT_ROLE_PROMPT_VERSION = "1";
+    AGENT_ROLE_TOOL_PREFIX = "role_";
+    AGENT_MODE_ROLES = {
+      create: ["reviewer", "writer"],
+      manage: ["reviewer", "writer"],
+      explore: ["researcher", "reviewer"],
+      free: ["reviewer", "researcher", "writer"]
+    };
+  }
+});
+
 // src/daemon/dsh-profile-support.ts
 var init_dsh_profile_support = __esm({
   "src/daemon/dsh-profile-support.ts"() {
@@ -46116,6 +46167,60 @@ var init_dsh_profile_support = __esm({
   }
 });
 
+// src/daemon/kernel/agent-roles.ts
+var REVIEWER_PERSONA, RESEARCHER_PERSONA, WRITER_PERSONA;
+var init_agent_roles2 = __esm({
+  "src/daemon/kernel/agent-roles.ts"() {
+    "use strict";
+    init_agent_roles();
+    REVIEWER_PERSONA = `# Role: Reviewer (v${AGENT_ROLE_PROMPT_VERSION})
+
+You review local skills and report concrete, actionable findings. You read through
+the skill-creator capability face (skills_list, skills_info, skills_validate,
+creator_load) and judge trigger contracts, scope discipline, and structure.
+
+## Review law
+- Findings must cite the exact skill and the exact defect: vague advice is a failure.
+- Weigh the frontmatter description as the trigger contract: does it say what the
+  skill does and when to use it, in the third person, optimized for retrieval?
+- Flag progressive-disclosure violations (kitchen-sink SKILL.md), secrets, and
+  machine-specific absolute paths.
+- You propose nothing and write nothing: report findings; the parent decides.
+
+## Report shape
+Return a ranked findings list (severity, skill, defect, suggested fix). If the
+library is clean, say so explicitly instead of inventing issues.`;
+    RESEARCHER_PERSONA = `# Role: Researcher (v${AGENT_ROLE_PROMPT_VERSION})
+
+You scan Git skill sources (repository_scan, repository_sources_list) and analyze
+whether candidate skills fit the stated requirements. You compare against what is
+already installed (skills_list, skills_info) to avoid duplicates.
+
+## Research law
+- Turn the requirement into explicit criteria before scanning; state them back
+  in one line.
+- A skill that matches the letter but not the intent is a rejection; say which
+  criterion failed.
+- Red flags end a candidacy: secrets, machine-specific paths, vague triggers,
+  kitchen-sink scope.
+- You install nothing: shortlist with evidence and hand the decision back.`;
+    WRITER_PERSONA = `# Role: Writer (v${AGENT_ROLE_PROMPT_VERSION})
+
+You draft and edit SKILL.md content in imported workspaces. Reads go through
+skills_list / skills_info / creator_load; every mutation goes through the
+propose variants (creator_save / creator_remove) \u2014 a human approves each change
+in the Skill Creator UI before it touches disk.
+
+## Authoring law
+- The frontmatter description is the trigger contract: third person, what it does
+  and when to use it, optimized for retrieval.
+- Progressive disclosure: lean procedural SKILL.md; reference detail goes to
+  bundled files, not long prose.
+- Never claim a document is saved until its propose result says so.
+- Respect preferences the human states (language, style, structure).`;
+  }
+});
+
 // src/daemon/kernel/dsh-kernel.ts
 import path20 from "node:path";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
@@ -46131,6 +46236,7 @@ var init_dsh_kernel = __esm({
   "src/daemon/kernel/dsh-kernel.ts"() {
     "use strict";
     init_dsh_profile_support();
+    init_agent_roles2();
     modulePath = fileURLToPath2(import.meta.url);
     sourceMode = path20.basename(modulePath) === "dsh-kernel.ts";
     repoRoot = sourceMode ? path20.resolve(path20.dirname(modulePath), "../../..") : path20.resolve(path20.dirname(modulePath), "..");
@@ -46434,6 +46540,59 @@ var init_session_cleanup = __esm({
   }
 });
 
+// src/daemon/kernel/agent-queue.ts
+import { createUserMessage } from "@deepseek-ai/dsh-llm";
+import { z as z18 } from "zod";
+function parseInboxMessage(raw) {
+  const checked = InboxMessageSchema.safeParse(raw);
+  return checked.success ? checked.data : null;
+}
+function queueItemOf(message, target) {
+  const texts = [];
+  let attachments = 0;
+  for (const block of message.content) {
+    if (block.type === "text" && typeof block.text === "string" && block.text.length > 0) {
+      texts.push(block.text);
+    }
+    if (block.type === "image" || block.type === "file") attachments += 1;
+  }
+  return { messageId: message.id, target, text: texts.join("\n"), attachments };
+}
+function projectInbox(inbox) {
+  const out = [];
+  for (const [target, list2] of [
+    ["next-step", inbox.nextStep],
+    ["next-turn", inbox.nextTurn]
+  ]) {
+    for (const original of list2) {
+      const parsed = parseInboxMessage(original);
+      if (parsed === null) continue;
+      out.push({ item: queueItemOf(parsed, target), parsed, original });
+    }
+  }
+  return out;
+}
+function rebuildEditedMessage(original, text) {
+  const nonText = original.content.filter((block) => block.type !== "text");
+  const maybeSource = original.source;
+  const source = typeof maybeSource === "object" && maybeSource !== null && maybeSource.kind === "user" ? maybeSource : { kind: "user" };
+  return createUserMessage({
+    source,
+    content: [{ type: "text", text }, ...nonText]
+  });
+}
+var InboxMessageSchema;
+var init_agent_queue = __esm({
+  "src/daemon/kernel/agent-queue.ts"() {
+    "use strict";
+    InboxMessageSchema = z18.object({
+      id: z18.string().min(1),
+      source: z18.unknown().optional(),
+      content: z18.array(z18.object({ type: z18.string().min(1), text: z18.string().optional() }).passthrough()).min(1)
+    }).passthrough();
+  }
+});
+
 // src/daemon/kernel/session-transcripts.ts
 import fs17 from "node:fs";
 import path21 from "node:path";
@@ -46672,8 +46831,8 @@ var init_session_transcripts = __esm({
 
 // src/daemon/kernel/agent-sessions.ts
 import { randomUUID as randomUUID2 } from "node:crypto";
-import { createUserMessage } from "@deepseek-ai/dsh-llm";
-import { z as z18 } from "zod";
+import { createUserMessage as createUserMessage2 } from "@deepseek-ai/dsh-llm";
+import { z as z19 } from "zod";
 function messageEnvelopeOf(raw) {
   if (typeof raw === "object" && raw !== null && "message" in raw) {
     const wrapped = raw.message;
@@ -46946,6 +47105,26 @@ function createAgentSessionsService(deps) {
           }
         ];
       }
+      case "subagent/catalog": {
+        const checked = SubagentCatalogEventSchema.safeParse(data);
+        if (!checked.success) {
+          logDroppedEvent(entry.agent.session.id, event.type, data);
+          return [];
+        }
+        return [
+          {
+            ...base,
+            seq: entry.frameSeq++,
+            kind: "subagent",
+            text: checked.data.label ?? checked.data.childId,
+            payload: redactDshPayload({
+              childId: checked.data.childId,
+              mode: checked.data.mode,
+              ...checked.data.label !== void 0 ? { label: checked.data.label } : {}
+            })
+          }
+        ];
+      }
       case "user/message": {
         const checked = MessageEventSchema.safeParse(data);
         if (!checked.success) {
@@ -47149,6 +47328,54 @@ function createAgentSessionsService(deps) {
       return text;
     }
   }
+  const SESSION_DIGEST_MAX_FRAMES = 30;
+  const SESSION_DIGEST_MAX_CHARS = 24e3;
+  function sessionReferenceDigest(sessionId) {
+    const meta = deps.transcripts.listAll().find((item) => item.sessionId === sessionId);
+    const frames = deps.transcripts.readFrames(sessionId);
+    if (meta === void 0 && frames.length === 0) {
+      throw new DomainError("NOT_FOUND", `referenced session not found: ${sessionId}`);
+    }
+    const lines = [];
+    let total = 0;
+    for (let i = frames.length - 1; i >= 0 && lines.length < SESSION_DIGEST_MAX_FRAMES; i -= 1) {
+      const frame = frames[i];
+      const role = frame.kind === "user-text" ? "user" : frame.kind === "assistant-text" ? "assistant" : null;
+      if (role === null || typeof frame.text !== "string" || frame.text.length === 0) continue;
+      const line = `${role}: ${frame.text}`;
+      if (total + line.length > SESSION_DIGEST_MAX_CHARS && lines.length > 0) break;
+      lines.unshift(line.slice(0, SESSION_DIGEST_MAX_CHARS));
+      total += line.length;
+    }
+    const title = meta?.title !== void 0 && meta.title.length > 0 ? ` "${meta.title}"` : "";
+    return `[reference: earlier session${title} (${sessionId})]
+${lines.join("\n")}`;
+  }
+  async function expandReferences(references) {
+    const blocks = [];
+    for (const reference of references) {
+      if (reference.kind === "file") {
+        if (deps.expandFileReferences === void 0) {
+          throw new DomainError(
+            "UNAVAILABLE",
+            "file references require the agent-files service (not wired)"
+          );
+        }
+        blocks.push(...await deps.expandFileReferences([reference]));
+      } else if (reference.kind === "skill") {
+        if (deps.expandSkillReferences === void 0) {
+          throw new DomainError(
+            "UNAVAILABLE",
+            "skill references require the skills service (not wired)"
+          );
+        }
+        blocks.push(...await deps.expandSkillReferences([reference]));
+      } else {
+        blocks.push(sessionReferenceDigest(reference.sessionId));
+      }
+    }
+    return blocks;
+  }
   function textOf(message) {
     const content = message?.content;
     if (!Array.isArray(content)) return void 0;
@@ -47180,11 +47407,7 @@ function createAgentSessionsService(deps) {
     }
     return out;
   }
-  function isTextualFile(name) {
-    return /\.(txt|md|markdown|json|ya?ml|toml|csv|tsv|log|patch|diff|ts|tsx|js|jsx|py|rs|go|java|c|h|cpp|sh|css|html|xml|ini|env)$/i.test(
-      name
-    );
-  }
+  const isTextualFile = isTextualFileName;
   function usageSnapshotOf(data) {
     const checked = UsageEnvelopeSchema.safeParse(data);
     if (!checked.success) return void 0;
@@ -47318,6 +47541,7 @@ function createAgentSessionsService(deps) {
       }
       for (const session of sessions.list()) {
         if (known.has(session.id)) continue;
+        if (session.header.origin === "subagent") continue;
         const entry = live.get(session.id);
         if (entry) {
           summaries.push(summaryOf(entry));
@@ -47386,7 +47610,7 @@ function createAgentSessionsService(deps) {
       });
       if (input.prompt) {
         handle.agent.followup(
-          createUserMessage({
+          createUserMessage2({
             source: { kind: "user" },
             content: [{ type: "text", text: input.prompt }]
           })
@@ -47395,19 +47619,23 @@ function createAgentSessionsService(deps) {
       return summaryOf(entry);
     },
     /** 驱动一轮用户输入（长度硬上限与 RPC 契约一致——外部输入 runtime 收窄）。
-     * 非live但有转录的会话先经内核 agents.resume 复活（跨 daemon 重启续聊）。 */
-    async prompt(sessionId, text, images = [], files = []) {
+     * 非live但有转录的会话先经内核 agents.resume 复活（跨 daemon 重启续聊）。
+     * C1：references 由 daemon 展开（file 读盘 / session 转录摘要）为
+     * [reference: …] 文本块，注入内核 content——与文件附件内联同构；目标缺失
+     * typed NOT_FOUND 整体拒绝，不静默降级。 */
+    async prompt(sessionId, text, images = [], files = [], mode = "queue", references = []) {
       if (text.length > PROMPT_MAX_CHARS) {
         throw new DomainError(
           "INVALID_OPERATION",
           `prompt too long: ${text.length} chars (max ${PROMPT_MAX_CHARS})`
         );
       }
+      const referenceBlocks = references.length > 0 ? await expandReferences(references) : [];
       let entry = live.get(sessionId);
       if (!entry) {
         entry = await reviveSession(sessionId);
       }
-      if (text.startsWith("/") && images.length === 0 && files.length === 0) {
+      if (text.startsWith("/") && images.length === 0 && files.length === 0 && references.length === 0) {
         const commands = requireKernel().ctx.commands;
         if (commands) {
           const executed = await commands.execute(
@@ -47430,6 +47658,9 @@ ${decoded.slice(0, 2e5)}`
         });
         return false;
       });
+      for (const block of referenceBlocks) {
+        content.push({ type: "text", text: block });
+      }
       if (images.length > 0 || restFiles.length > 0) {
         const kernel = requireKernel();
         const attachments = kernel.ctx.attachments;
@@ -47460,18 +47691,22 @@ ${decoded.slice(0, 2e5)}`
           content.push({ type: "file", attachment: ref });
         }
       }
-      entry.agent.followup(
-        createUserMessage({
-          source: { kind: "user" },
-          content
-        })
-      );
+      const message = createUserMessage2({
+        source: { kind: "user" },
+        content
+      });
+      if (mode === "steer" && typeof entry.agent.steer === "function") {
+        entry.agent.steer(message);
+      } else {
+        entry.agent.followup(message);
+      }
     },
-    /** 取消当前活动（幂等；无活动为 no-op）。 */
+    /** 取消当前活动（幂等；无活动为 no-op）。W4：keepInbox——排队消息在停止后
+     *  存活并按 FIFO 续跑（官方 Stop 语义；内核缺省会清 inbox）。 */
     cancel(sessionId) {
       const entry = live.get(sessionId);
       if (!entry) throw new DomainError("NOT_FOUND", `agent session not found: ${sessionId}`);
-      entry.agent.cancel("user");
+      entry.agent.cancel("user", { keepInbox: true });
     },
     /**
      * 切换会话模式（add-agent-settings-modes）：meta 持久化 + live 句柄有界释放 +
@@ -47521,6 +47756,70 @@ ${decoded.slice(0, 2e5)}`
       deps.transcripts.append(sessionId, frame);
       return summary;
     },
+    /**
+     * C2 queue 面薄委托（逻辑在 agent-queue）：非 live 会话返回空 items——
+     * 重启后未复活的挂起队列不可操作（记录边界，不伪装）。live 会话无 inbox
+     * 面（内核面缺失）同样空 items。
+     */
+    queueList(sessionId) {
+      const entry = live.get(sessionId);
+      if (!entry || entry.agent.inbox === void 0) return { items: [] };
+      return { items: projectInbox(entry.agent.inbox).map(({ item }) => item) };
+    },
+    /**
+     * C2 queue 行级操作：edit=replace（新文本 + 原附件块）；remove=remove；
+     * steer=next-turn → next-step（仅 running）。messageId 已被消费（轮次已
+     * 开始）typed NOT_FOUND——竞态可见；目标不在 next-turn 时 steer 拒绝。
+     */
+    queueUpdate(sessionId, input) {
+      const entry = live.get(sessionId);
+      if (!entry) {
+        throw new DomainError("NOT_FOUND", `agent session not found: ${sessionId}`);
+      }
+      if (entry.agent.inbox === void 0) {
+        throw new DomainError("UNAVAILABLE", "agent kernel inbox surface missing");
+      }
+      const inbox = entry.agent.inbox;
+      if (input.action === "remove") {
+        if (!inbox.remove(input.messageId)) {
+          throw new DomainError(
+            "NOT_FOUND",
+            `queued message no longer pending: ${input.messageId}`
+          );
+        }
+        return;
+      }
+      if (input.action === "edit") {
+        const found = projectInbox(inbox).find(({ item }) => item.messageId === input.messageId);
+        if (found === void 0) {
+          throw new DomainError(
+            "NOT_FOUND",
+            `queued message no longer pending: ${input.messageId}`
+          );
+        }
+        inbox.replace(input.messageId, rebuildEditedMessage(found.parsed, input.text ?? ""));
+        return;
+      }
+      if (statusOf(entry) !== "running") {
+        throw new DomainError(
+          "INVALID_OPERATION",
+          "steer needs a running turn; the session is idle"
+        );
+      }
+      const queued = projectInbox(inbox).find(
+        ({ item }) => item.messageId === input.messageId && item.target === "next-turn"
+      );
+      if (queued === void 0) {
+        throw new DomainError(
+          "INVALID_OPERATION",
+          `message is not a queued next-turn item: ${input.messageId}`
+        );
+      }
+      if (!inbox.remove(input.messageId)) {
+        throw new DomainError("NOT_FOUND", `queued message no longer pending: ${input.messageId}`);
+      }
+      inbox.append("next-step", queued.original);
+    },
     /** 增量帧读取（afterSeq 游标 + limit 窗口）；非 live 会话由转录回放。 */
     stream(sessionId, afterSeq, limit) {
       const entry = live.get(sessionId);
@@ -47557,6 +47856,11 @@ ${decoded.slice(0, 2e5)}`
     },
     /** 有界销毁（daemon stop 时逐个回收 agent；待答请求以空答案释放）。 */
     async dispose() {
+      const kernel = deps.kernel();
+      const drain = kernel?.ctx?.subagents?.drainContinuableDescendants;
+      if (drain && live.size > 0) {
+        await Promise.resolve(drain([...live.keys()])).catch(() => void 0);
+      }
       for (const entry of live.values()) {
         for (const pending of entry.pending.values()) {
           pending.resolve({ answers: [] });
@@ -47577,74 +47881,79 @@ function applyProductToolSurface(agentCtx, mode) {
 }
 function productToolDenyList(globalNames, mode) {
   const nativeAllowed = mode === "free" ? [...KERNEL_AGENT_TOOL_ALLOWLIST, "bash"] : KERNEL_AGENT_TOOL_ALLOWLIST;
+  const modeRoles = AGENT_MODE_ROLES[mode];
+  const roleAllowed = modeRoles.map(agentRoleToolName);
   return globalNames.filter(
-    (name) => !nativeAllowed.includes(name) && !name.startsWith("mcp__skill-creator__")
+    (name) => !nativeAllowed.includes(name) && !roleAllowed.includes(name) && !name.startsWith("mcp__skill-creator__")
   );
 }
-var AgentChunkEventSchema, TodoWriteEventSchema, MessageSourceSchema, MessageBlockSchema, MessageShapeSchema, MessageEventSchema, TurnEndEventSchema, SessionTitleEventSchema, ToolCallEventSchema, ToolResultEventSchema, TurnStartEventSchema, AgentStatusEventSchema, UsageEnvelopeSchema, DROPPED_EVENT_LOG_MAX, DEFAULT_RETENTION, PROMPT_MAX_CHARS, DELTA_FLUSH_MS;
+var AgentChunkEventSchema, TodoWriteEventSchema, MessageSourceSchema, MessageBlockSchema, MessageShapeSchema, MessageEventSchema, TurnEndEventSchema, SessionTitleEventSchema, ToolCallEventSchema, ToolResultEventSchema, TurnStartEventSchema, AgentStatusEventSchema, SubagentCatalogEventSchema, UsageEnvelopeSchema, DROPPED_EVENT_LOG_MAX, DEFAULT_RETENTION, PROMPT_MAX_CHARS, DELTA_FLUSH_MS;
 var init_agent_sessions = __esm({
   "src/daemon/kernel/agent-sessions.ts"() {
     "use strict";
     init_dsh_runtime();
     init_domain_error();
+    init_agent_files();
+    init_agent_roles();
     init_dsh_kernel();
     init_agent_modes();
     init_product_prompt();
     init_session_cleanup();
+    init_agent_queue();
     init_session_transcripts();
-    AgentChunkEventSchema = z18.object({
-      chunk: z18.object({
-        type: z18.string().min(1),
-        text: z18.string().optional(),
-        id: z18.string().optional(),
-        name: z18.string().optional(),
-        argumentsDelta: z18.string().optional()
+    AgentChunkEventSchema = z19.object({
+      chunk: z19.object({
+        type: z19.string().min(1),
+        text: z19.string().optional(),
+        id: z19.string().optional(),
+        name: z19.string().optional(),
+        argumentsDelta: z19.string().optional()
       })
     });
-    TodoWriteEventSchema = z18.object({
-      todos: z18.array(
-        z18.object({
-          content: z18.string(),
-          status: z18.string().min(1)
+    TodoWriteEventSchema = z19.object({
+      todos: z19.array(
+        z19.object({
+          content: z19.string(),
+          status: z19.string().min(1)
         })
       )
     });
-    MessageSourceSchema = z18.object({
-      kind: z18.string().optional(),
-      callId: z18.string().optional()
+    MessageSourceSchema = z19.object({
+      kind: z19.string().optional(),
+      callId: z19.string().optional()
     }).passthrough();
-    MessageBlockSchema = z18.object({
-      type: z18.string().min(1),
-      text: z18.string().optional(),
-      name: z18.string().optional()
+    MessageBlockSchema = z19.object({
+      type: z19.string().min(1),
+      text: z19.string().optional(),
+      name: z19.string().optional()
     }).passthrough();
-    MessageShapeSchema = z18.object({
+    MessageShapeSchema = z19.object({
       source: MessageSourceSchema.optional(),
-      content: z18.array(MessageBlockSchema).min(1)
+      content: z19.array(MessageBlockSchema).min(1)
     }).passthrough();
-    MessageEventSchema = z18.preprocess(messageEnvelopeOf, MessageShapeSchema);
-    TurnEndEventSchema = z18.object({
-      reason: z18.object({ kind: z18.string().optional() }).passthrough().optional()
+    MessageEventSchema = z19.preprocess(messageEnvelopeOf, MessageShapeSchema);
+    TurnEndEventSchema = z19.object({
+      reason: z19.object({ kind: z19.string().optional() }).passthrough().optional()
     }).passthrough();
-    SessionTitleEventSchema = z18.object({
-      title: z18.string().optional()
+    SessionTitleEventSchema = z19.object({
+      title: z19.string().optional()
     }).passthrough();
-    ToolCallEventSchema = z18.object({
-      callId: z18.string().min(1),
-      name: z18.string().min(1),
-      arguments: z18.string()
+    ToolCallEventSchema = z19.object({
+      callId: z19.string().min(1),
+      name: z19.string().min(1),
+      arguments: z19.string()
     }).passthrough();
-    ToolResultEventSchema = z18.object({
-      message: z18.object({
-        source: z18.object({ kind: z18.literal("tool"), callId: z18.string().min(1) }).passthrough(),
-        content: z18.tuple([
-          z18.object({
-            type: z18.literal("tool-result"),
-            toolCallId: z18.string().min(1),
-            content: z18.array(
-              z18.object({
-                type: z18.string().min(1),
-                text: z18.string().optional()
+    ToolResultEventSchema = z19.object({
+      message: z19.object({
+        source: z19.object({ kind: z19.literal("tool"), callId: z19.string().min(1) }).passthrough(),
+        content: z19.tuple([
+          z19.object({
+            type: z19.literal("tool-result"),
+            toolCallId: z19.string().min(1),
+            content: z19.array(
+              z19.object({
+                type: z19.string().min(1),
+                text: z19.string().optional()
               }).passthrough()
             ).min(1).refine(
               (parts) => parts.some(
@@ -47656,9 +47965,15 @@ var init_agent_sessions = __esm({
         ])
       }).passthrough()
     });
-    TurnStartEventSchema = z18.record(z18.string(), z18.unknown());
-    AgentStatusEventSchema = z18.record(z18.string(), z18.unknown());
-    UsageEnvelopeSchema = z18.object({ usage: z18.record(z18.string(), z18.unknown()).optional() }).passthrough();
+    TurnStartEventSchema = z19.record(z19.string(), z19.unknown());
+    AgentStatusEventSchema = z19.record(z19.string(), z19.unknown());
+    SubagentCatalogEventSchema = z19.object({
+      childId: z19.string().min(1),
+      childCreatedAt: z19.number().optional(),
+      mode: z19.enum(["one-shot", "continuable"]),
+      label: z19.string().optional()
+    });
+    UsageEnvelopeSchema = z19.object({ usage: z19.record(z19.string(), z19.unknown()).optional() }).passthrough();
     DROPPED_EVENT_LOG_MAX = 200;
     DEFAULT_RETENTION = 200;
     PROMPT_MAX_CHARS = 2e4;
@@ -47856,66 +48171,95 @@ var init_model_catalog = __esm({
 });
 
 // src/shared/contracts/agent.ts
-import { z as z19 } from "zod";
-var AgentSessionStatusSchema, AgentSessionSummarySchema, AgentSessionCreateInputSchema, AgentSessionCreateResultSchema, AgentPromptImageSchema, AgentPromptFileSchema, AgentSessionPromptInputSchema, AgentSessionPromptResultSchema, AgentSessionSetModeInputSchema, AgentSessionSetModeResultSchema, AgentSessionCancelInputSchema, AgentSessionCancelResultSchema, AgentSessionStreamInputSchema, AgentSessionStreamResultSchema, AgentSessionsStreamsInputSchema, AgentSessionsCleanupInputSchema, AgentSessionsCleanupResultSchema, AgentApprovalQuestionSchema, AgentSessionAnswerInputSchema, AgentSessionAnswerResultSchema, AgentCardGetInputSchema, AgentCardGetResultSchema, AgentMcpProposalViewSchema, AgentProposalDecisionInputSchema, AgentFilesListInputSchema, AgentFilesEntrySchema, AgentFilesListResultSchema, AgentFilesPreviewInputSchema, AgentFilesPreviewResultSchema;
+import { z as z20 } from "zod";
+var AgentSessionStatusSchema, AgentSessionSummarySchema, AgentSessionCreateInputSchema, AgentSessionCreateResultSchema, AgentPromptImageSchema, AgentPromptFileSchema, AgentPromptReferenceSchema, AgentSessionPromptInputSchema, AgentSessionPromptResultSchema, AgentSessionSetModeInputSchema, AgentSessionSetModeResultSchema, AgentSessionCancelInputSchema, AgentSessionCancelResultSchema, AgentSessionStreamInputSchema, AgentSessionStreamResultSchema, AgentQueueItemSchema, AgentQueueListInputSchema, AgentQueueListResultSchema, AgentQueueUpdateInputSchema, AgentQueueUpdateResultSchema, AgentSessionsStreamsInputSchema, AgentSessionsCleanupInputSchema, AgentSessionsCleanupResultSchema, AgentApprovalQuestionSchema, AgentSessionAnswerInputSchema, AgentSessionAnswerResultSchema, AgentCardGetInputSchema, AgentCardGetResultSchema, AgentMcpProposalViewSchema, AgentProposalDecisionInputSchema, AgentFilesListInputSchema, AgentFilesEntrySchema, AgentFilesListResultSchema, AgentFilesPreviewInputSchema, AgentFilesPreviewResultSchema;
 var init_agent = __esm({
   "src/shared/contracts/agent.ts"() {
     "use strict";
     init_dsh_runtime();
-    AgentSessionStatusSchema = z19.enum(["idle", "running", "disposed"]);
-    AgentSessionSummarySchema = z19.object({
-      sessionId: z19.string().min(1),
+    init_workspaces();
+    init_skills();
+    AgentSessionStatusSchema = z20.enum(["idle", "running", "disposed"]);
+    AgentSessionSummarySchema = z20.object({
+      sessionId: z20.string().min(1),
       /** 自动标题（内核 session-title；首 prompt 前为空串）。 */
-      title: z19.string(),
+      title: z20.string(),
       status: AgentSessionStatusSchema,
-      cwd: z19.string(),
-      createdAt: z19.string().min(1),
+      cwd: z20.string(),
+      createdAt: z20.string().min(1),
       /** 会话模式（旧转录缺失读 free——其创建时即全工具面的事实投影）。 */
       mode: DshAgentModeSchema,
       /** 产品转录归属（R15 codex P1-3）：false = kernel/steward-only 会话——清理
        * RPC 只管产品转录层，这类行 UI 禁删并以 kernel-only 标记呈现。 */
-      hasTranscript: z19.boolean().optional()
+      hasTranscript: z20.boolean().optional()
     });
-    AgentSessionCreateInputSchema = z19.object({
+    AgentSessionCreateInputSchema = z20.object({
       /** 会话工作目录（缺省 daemon cwd；产品面通常传 Workspace 目录）。 */
-      cwd: z19.string().min(1).optional(),
+      cwd: z20.string().min(1).optional(),
       /** 首条消息（可选；提供则创建后立即驱动一轮）。 */
-      prompt: z19.string().min(1).max(2e4).optional(),
+      prompt: z20.string().min(1).max(2e4).optional(),
       /** 会话模式（缺省取 settings.defaultMode）。 */
       mode: DshAgentModeSchema.optional()
     });
-    AgentSessionCreateResultSchema = z19.object({
+    AgentSessionCreateResultSchema = z20.object({
       session: AgentSessionSummarySchema
     });
-    AgentPromptImageSchema = z19.union([
-      z19.strictObject({
-        mediaType: z19.enum(["image/png", "image/jpeg", "image/webp", "image/gif"]),
+    AgentPromptImageSchema = z20.union([
+      z20.strictObject({
+        mediaType: z20.enum(["image/png", "image/jpeg", "image/webp", "image/gif"]),
         /** canonical base64（≤4MiB 解码后；超限 schema 拒绝）。 */
-        data: z19.string().min(1),
-        name: z19.string().min(1).max(120).optional()
+        data: z20.string().min(1),
+        name: z20.string().min(1).max(120).optional()
       }),
-      z19.strictObject({
+      z20.strictObject({
         /** daemon 可读的绝对路径（源文件 ≤4MiB，daemon 读盘时校验）。 */
-        path: z19.string().min(1),
-        name: z19.string().min(1).max(120).optional()
+        path: z20.string().min(1),
+        name: z20.string().min(1).max(120).optional()
       })
     ]);
-    AgentPromptFileSchema = z19.union([
-      z19.strictObject({
-        name: z19.string().min(1).max(200),
+    AgentPromptFileSchema = z20.union([
+      z20.strictObject({
+        name: z20.string().min(1).max(200),
         /** canonical base64（≤512KiB 解码后）。 */
-        data: z19.string().min(1).max(71e4)
+        data: z20.string().min(1).max(71e4)
       }),
-      z19.strictObject({
+      z20.strictObject({
         /** daemon 可读的绝对路径。 */
-        path: z19.string().min(1)
+        path: z20.string().min(1)
+      })
+    ]);
+    AgentPromptReferenceSchema = z20.discriminatedUnion("kind", [
+      z20.strictObject({
+        kind: z20.literal("file"),
+        /** daemon 可读的绝对路径（realpath + regular file + ≤512KiB + 文本扩展名）。 */
+        path: z20.string().min(1)
+      }),
+      z20.strictObject({
+        kind: z20.literal("session"),
+        /** 被引用的历史会话（排除语义由 UI 持有；daemon 不猜）。 */
+        sessionId: z20.string().min(1)
+      }),
+      z20.strictObject({
+        kind: z20.literal("skill"),
+        /** 技能引用的 server-owned 作用域三元组（`$` 触发；registry 解析 containment）。 */
+        workspaceId: WorkspaceIdSchema,
+        providerId: ProviderIdSchema,
+        skillId: SkillIdSchema
       })
     ]);
-    AgentSessionPromptInputSchema = z19.object({
-      sessionId: z19.string().min(1),
-      text: z19.string().max(2e4),
-      images: z19.array(AgentPromptImageSchema).max(4).default([]),
-      files: z19.array(AgentPromptFileSchema).max(2).default([])
+    AgentSessionPromptInputSchema = z20.object({
+      sessionId: z20.string().min(1),
+      text: z20.string().max(2e4),
+      images: z20.array(AgentPromptImageSchema).max(4).default([]),
+      files: z20.array(AgentPromptFileSchema).max(2).default([]),
+      /**
+       * 提交模式（W4，官方 submission-policy 语义）：queue = next-turn（当前轮
+       * 完成后运行，内核 inbox 排队）；steer = next-step（在下一步骤边界转向
+       * 当前轮）。缺省 queue。
+       */
+      mode: z20.enum(["queue", "steer"]).default("queue"),
+      /** `@` 引用（C1）：daemon 展开为 [reference: …] 文本块；缺省无。 */
+      references: z20.array(AgentPromptReferenceSchema).max(4).default([])
     }).refine(
       // R17 codex P1：files-only 也是合法 prompt（后端文件选择器的主路径）。
       (input) => input.text.trim().length > 0 || input.images.length > 0 || input.files.length > 0,
@@ -47926,134 +48270,164 @@ var init_agent = __esm({
       (input) => input.images.every((image) => !("data" in image) || image.data.length <= 5592406),
       { message: "each image must decode to \u22644MiB" }
     );
-    AgentSessionPromptResultSchema = z19.object({ accepted: z19.literal(true) });
-    AgentSessionSetModeInputSchema = z19.object({
-      sessionId: z19.string().min(1),
+    AgentSessionPromptResultSchema = z20.object({ accepted: z20.literal(true) });
+    AgentSessionSetModeInputSchema = z20.object({
+      sessionId: z20.string().min(1),
       mode: DshAgentModeSchema
     });
-    AgentSessionSetModeResultSchema = z19.object({
+    AgentSessionSetModeResultSchema = z20.object({
       session: AgentSessionSummarySchema
     });
-    AgentSessionCancelInputSchema = z19.object({ sessionId: z19.string().min(1) });
-    AgentSessionCancelResultSchema = z19.object({ canceled: z19.literal(true) });
-    AgentSessionStreamInputSchema = z19.object({
-      sessionId: z19.string().min(1),
-      afterSeq: z19.number().int().nonnegative().default(0),
-      limit: z19.number().int().positive().max(200).default(50)
+    AgentSessionCancelInputSchema = z20.object({ sessionId: z20.string().min(1) });
+    AgentSessionCancelResultSchema = z20.object({ canceled: z20.literal(true) });
+    AgentSessionStreamInputSchema = z20.object({
+      sessionId: z20.string().min(1),
+      afterSeq: z20.number().int().nonnegative().default(0),
+      limit: z20.number().int().positive().max(200).default(50)
     });
-    AgentSessionStreamResultSchema = z19.object({
-      frames: z19.array(DshSessionStreamFrameSchema),
+    AgentSessionStreamResultSchema = z20.object({
+      frames: z20.array(DshSessionStreamFrameSchema),
       status: AgentSessionStatusSchema
     });
-    AgentSessionsStreamsInputSchema = z19.object({
-      runId: z19.string().min(1).optional(),
+    AgentQueueItemSchema = z20.object({
+      /** 内核 UserMessage id（edit/remove/steer 的幂等寻址键）。 */
+      messageId: z20.string().min(1),
+      target: z20.enum(["next-turn", "next-step"]),
+      /** content 文本块拼接（引用/附件块不展开——chip 已在正文 token 中）。 */
+      text: z20.string(),
+      /** image/file 附件块计数（行尾 chip 展示）。 */
+      attachments: z20.number().int().nonnegative()
+    });
+    AgentQueueListInputSchema = z20.object({ sessionId: z20.string().min(1) });
+    AgentQueueListResultSchema = z20.object({ items: z20.array(AgentQueueItemSchema) });
+    AgentQueueUpdateInputSchema = z20.discriminatedUnion("action", [
+      z20.strictObject({
+        sessionId: z20.string().min(1),
+        messageId: z20.string().min(1),
+        action: z20.literal("edit"),
+        text: z20.string().min(1).max(2e4)
+      }),
+      z20.strictObject({
+        sessionId: z20.string().min(1),
+        messageId: z20.string().min(1),
+        action: z20.literal("remove")
+      }),
+      z20.strictObject({
+        sessionId: z20.string().min(1),
+        messageId: z20.string().min(1),
+        action: z20.literal("steer")
+      })
+    ]);
+    AgentQueueUpdateResultSchema = z20.object({ updated: z20.literal(true) });
+    AgentSessionsStreamsInputSchema = z20.object({
+      runId: z20.string().min(1).optional(),
       /** 返回最新 N 帧（默认 50，上限 500）。 */
-      limit: z19.number().int().positive().max(500).optional()
+      limit: z20.number().int().positive().max(500).optional()
     });
-    AgentSessionsCleanupInputSchema = z19.union([
-      z19.strictObject({ beforeDays: z19.number().int().min(0).max(365) }),
-      z19.strictObject({ all: z19.literal(true) }),
-      z19.strictObject({ sessionIds: z19.array(z19.string().min(1)).min(1).max(200) })
+    AgentSessionsCleanupInputSchema = z20.union([
+      z20.strictObject({ beforeDays: z20.number().int().min(0).max(365) }),
+      z20.strictObject({ all: z20.literal(true) }),
+      z20.strictObject({ sessionIds: z20.array(z20.string().min(1)).min(1).max(200) })
     ]);
-    AgentSessionsCleanupResultSchema = z19.object({
-      kind: z19.literal("summary"),
-      deleted: z19.number().int().nonnegative(),
-      kept: z19.number().int().nonnegative(),
-      deletedIds: z19.array(z19.string().min(1)).max(1e3).optional(),
+    AgentSessionsCleanupResultSchema = z20.object({
+      kind: z20.literal("summary"),
+      deleted: z20.number().int().nonnegative(),
+      kept: z20.number().int().nonnegative(),
+      deletedIds: z20.array(z20.string().min(1)).max(1e3).optional(),
       /** deletedIds 达到 1000 上限被截断（客户端需以列表复核失效当前会话）。 */
-      deletedIdsTruncated: z19.boolean().optional(),
-      errors: z19.array(z19.string().min(1)).optional()
-    });
-    AgentApprovalQuestionSchema = z19.object({
-      id: z19.string().min(1),
-      question: z19.string().min(1),
-      detail: z19.string().optional(),
-      header: z19.string().optional(),
-      multiSelect: z19.boolean().optional(),
-      options: z19.array(z19.object({ label: z19.string().min(1), description: z19.string().optional() })).optional()
-    });
-    AgentSessionAnswerInputSchema = z19.object({
-      sessionId: z19.string().min(1),
+      deletedIdsTruncated: z20.boolean().optional(),
+      errors: z20.array(z20.string().min(1)).optional()
+    });
+    AgentApprovalQuestionSchema = z20.object({
+      id: z20.string().min(1),
+      question: z20.string().min(1),
+      detail: z20.string().optional(),
+      header: z20.string().optional(),
+      multiSelect: z20.boolean().optional(),
+      options: z20.array(z20.object({ label: z20.string().min(1), description: z20.string().optional() })).optional()
+    });
+    AgentSessionAnswerInputSchema = z20.object({
+      sessionId: z20.string().min(1),
       /** 待答请求的帧 seq（幂等键：已解决的请求返回 resolved:false）。 */
-      requestSeq: z19.number().int().nonnegative(),
-      answers: z19.array(
-        z19.object({
-          id: z19.string().min(1),
-          selected: z19.array(z19.string().min(1)),
-          custom: z19.string().optional()
+      requestSeq: z20.number().int().nonnegative(),
+      answers: z20.array(
+        z20.object({
+          id: z20.string().min(1),
+          selected: z20.array(z20.string().min(1)),
+          custom: z20.string().optional()
         })
       ).min(1)
     });
-    AgentSessionAnswerResultSchema = z19.object({ answered: z19.boolean() });
-    AgentCardGetInputSchema = z19.object({
-      uri: z19.string().regex(/^ui:\/\/card\/[a-z-]+\/[a-z0-9-]+$/)
+    AgentSessionAnswerResultSchema = z20.object({ answered: z20.boolean() });
+    AgentCardGetInputSchema = z20.object({
+      uri: z20.string().regex(/^ui:\/\/card\/[a-z-]+\/[a-z0-9-]+$/)
     });
-    AgentCardGetResultSchema = z19.object({
-      html: z19.string().nullable()
+    AgentCardGetResultSchema = z20.object({
+      html: z20.string().nullable()
     });
-    AgentMcpProposalViewSchema = z19.object({
-      proposalId: z19.string().min(1),
-      capability: z19.string().min(1),
-      input: z19.unknown(),
-      status: z19.enum(["pending", "approved", "rejected", "executed", "failed"]),
-      createdAt: z19.string().min(1),
-      decidedAt: z19.string().optional()
+    AgentMcpProposalViewSchema = z20.object({
+      proposalId: z20.string().min(1),
+      capability: z20.string().min(1),
+      input: z20.unknown(),
+      status: z20.enum(["pending", "approved", "rejected", "executed", "failed"]),
+      createdAt: z20.string().min(1),
+      decidedAt: z20.string().optional()
     });
-    AgentProposalDecisionInputSchema = z19.object({
-      proposalId: z19.string().min(1)
+    AgentProposalDecisionInputSchema = z20.object({
+      proposalId: z20.string().min(1)
     });
-    AgentFilesListInputSchema = z19.object({
-      dir: z19.string().min(1).optional()
+    AgentFilesListInputSchema = z20.object({
+      dir: z20.string().min(1).optional()
     });
-    AgentFilesEntrySchema = z19.object({
-      name: z19.string().min(1),
-      kind: z19.enum(["file", "dir"]),
-      size: z19.number().int().nonnegative().optional()
+    AgentFilesEntrySchema = z20.object({
+      name: z20.string().min(1),
+      kind: z20.enum(["file", "dir"]),
+      size: z20.number().int().nonnegative().optional()
     });
-    AgentFilesListResultSchema = z19.object({
-      dir: z19.string().min(1),
+    AgentFilesListResultSchema = z20.object({
+      dir: z20.string().min(1),
       /** 上一级目录（文件系统根为 null）。 */
-      parent: z19.string().min(1).nullable(),
-      entries: z19.array(AgentFilesEntrySchema).max(2e3),
-      truncated: z19.boolean().optional()
-    });
-    AgentFilesPreviewInputSchema = z19.object({
-      path: z19.string().min(1)
-    });
-    AgentFilesPreviewResultSchema = z19.discriminatedUnion("kind", [
-      z19.strictObject({
-        kind: z19.literal("image"),
-        name: z19.string().min(1),
-        size: z19.number().int().nonnegative(),
-        mediaType: z19.enum(["image/png", "image/jpeg"]),
+      parent: z20.string().min(1).nullable(),
+      entries: z20.array(AgentFilesEntrySchema).max(2e3),
+      truncated: z20.boolean().optional()
+    });
+    AgentFilesPreviewInputSchema = z20.object({
+      path: z20.string().min(1)
+    });
+    AgentFilesPreviewResultSchema = z20.discriminatedUnion("kind", [
+      z20.strictObject({
+        kind: z20.literal("image"),
+        name: z20.string().min(1),
+        size: z20.number().int().nonnegative(),
+        mediaType: z20.enum(["image/png", "image/jpeg"]),
         /** data:image/(png|jpeg);base64,… 缩略图（≤256px 长边）。 */
-        dataUrl: z19.string().min(1),
-        width: z19.number().int().positive(),
-        height: z19.number().int().positive()
+        dataUrl: z20.string().min(1),
+        width: z20.number().int().positive(),
+        height: z20.number().int().positive()
       }),
-      z19.strictObject({
-        kind: z19.literal("text"),
-        name: z19.string().min(1),
-        size: z19.number().int().nonnegative(),
-        text: z19.string(),
-        truncated: z19.boolean()
+      z20.strictObject({
+        kind: z20.literal("text"),
+        name: z20.string().min(1),
+        size: z20.number().int().nonnegative(),
+        text: z20.string(),
+        truncated: z20.boolean()
       }),
-      z19.strictObject({
-        kind: z19.literal("binary"),
-        name: z19.string().min(1),
-        size: z19.number().int().nonnegative()
+      z20.strictObject({
+        kind: z20.literal("binary"),
+        name: z20.string().min(1),
+        size: z20.number().int().nonnegative()
       })
     ]);
   }
 });
 
 // src/shared/contracts/errors.ts
-import { z as z20 } from "zod";
+import { z as z21 } from "zod";
 var RpcErrorCodeSchema, RpcErrorDefinitions;
 var init_errors = __esm({
   "src/shared/contracts/errors.ts"() {
     "use strict";
-    RpcErrorCodeSchema = z20.enum([
+    RpcErrorCodeSchema = z21.enum([
       "NOT_FOUND",
       "CONFLICT",
       "INVALID_OPERATION",
@@ -48069,19 +48443,19 @@ var init_errors = __esm({
 });
 
 // src/shared/contracts/skills-update.ts
-import { z as z21 } from "zod";
+import { z as z22 } from "zod";
 var UpdateCheckInputSchema, UpdateCheckStatusSchema, UpdateCheckResultEntrySchema, UpdateCheckResultSchema, ApplyUpdateInputSchema, ApplyUpdateStatusSchema, ApplyUpdateResultEntrySchema, ApplyUpdateResultSchema;
 var init_skills_update = __esm({
   "src/shared/contracts/skills-update.ts"() {
     "use strict";
     init_skills();
     init_workspaces();
-    UpdateCheckInputSchema = z21.object({
+    UpdateCheckInputSchema = z22.object({
       ...WorkspaceProviderTargetSchema.shape,
       /** 仅检查这些技能；缺省检查当前作用域下所有 skills-CLI 来源技能。 */
-      skillIds: z21.array(SkillIdSchema).optional()
+      skillIds: z22.array(SkillIdSchema).optional()
     });
-    UpdateCheckStatusSchema = z21.enum([
+    UpdateCheckStatusSchema = z22.enum([
       /** hash 改变，待升级。 */
       "updated",
       /** hash 相等，已是最新。 */
@@ -48091,28 +48465,28 @@ var init_skills_update = __esm({
       /** 上游不可达（如限流 / 无网络）。 */
       "unavailable"
     ]);
-    UpdateCheckResultEntrySchema = z21.object({
+    UpdateCheckResultEntrySchema = z22.object({
       skillId: SkillIdSchema,
       /** 技能显示名。 */
-      name: z21.string(),
+      name: z22.string(),
       /** 当前记录的 hash。 */
-      currentHash: z21.string(),
+      currentHash: z22.string(),
       /** 上游算出的 hash；`unavailable` 时可为空串。 */
-      upstreamHash: z21.string(),
+      upstreamHash: z22.string(),
       /** 源 URL（用于在 UI 中展示来源）。 */
-      source: z21.string(),
+      source: z22.string(),
       status: UpdateCheckStatusSchema,
       /** 失败 / 不可达时的原因（可选）。 */
-      error: z21.string().optional()
+      error: z22.string().optional()
     });
-    UpdateCheckResultSchema = z21.object({
-      results: z21.array(UpdateCheckResultEntrySchema)
+    UpdateCheckResultSchema = z22.object({
+      results: z22.array(UpdateCheckResultEntrySchema)
     });
-    ApplyUpdateInputSchema = z21.object({
+    ApplyUpdateInputSchema = z22.object({
       ...WorkspaceProviderTargetSchema.shape,
-      skillIds: z21.array(SkillIdSchema).min(1)
+      skillIds: z22.array(SkillIdSchema).min(1)
     });
-    ApplyUpdateStatusSchema = z21.enum([
+    ApplyUpdateStatusSchema = z22.enum([
       /** 重装成功且 hash 已刷新。 */
       "updated",
       /** 执行前已与上游一致，未实际重装。 */
@@ -48120,22 +48494,22 @@ var init_skills_update = __esm({
       /** 重装或 hash 刷新失败。 */
       "failed"
     ]);
-    ApplyUpdateResultEntrySchema = z21.object({
+    ApplyUpdateResultEntrySchema = z22.object({
       skillId: SkillIdSchema,
-      name: z21.string(),
+      name: z22.string(),
       status: ApplyUpdateStatusSchema,
       /** 失败原因（可选）。 */
-      error: z21.string().optional()
+      error: z22.string().optional()
     });
-    ApplyUpdateResultSchema = z21.object({
-      results: z21.array(ApplyUpdateResultEntrySchema)
+    ApplyUpdateResultSchema = z22.object({
+      results: z22.array(ApplyUpdateResultEntrySchema)
     });
   }
 });
 
 // src/shared/rpc-contract.ts
 import { oc } from "@orpc/contract";
-import { z as z22 } from "zod";
+import { z as z23 } from "zod";
 var WorkspaceProviderReadInputSchema, SkillsListInputSchema, SkillsInfoInputSchema, SkillsToggleInputSchema, WorkspaceAddInputSchema, WorkspaceRemoveInputSchema, WorkspaceSetActiveInputSchema, CreatorRemoveInputSchema, RepositoryScanInputSchema, RepositoryPreviewInputSchema, rpcContract;
 var init_rpc_contract = __esm({
   "src/shared/rpc-contract.ts"() {
@@ -48154,42 +48528,42 @@ var init_rpc_contract = __esm({
     init_skill_intelligence();
     init_skills();
     init_workspaces();
-    WorkspaceProviderReadInputSchema = z22.object({
+    WorkspaceProviderReadInputSchema = z23.object({
       ...WorkspaceProviderTargetSchema.shape,
-      includeDisabled: z22.boolean().optional()
+      includeDisabled: z23.boolean().optional()
     });
     SkillsListInputSchema = WorkspaceProviderReadInputSchema;
     SkillsInfoInputSchema = WorkspaceProviderReadInputSchema.extend({
       skillId: SkillIdSchema
     });
-    SkillsToggleInputSchema = z22.object({
+    SkillsToggleInputSchema = z23.object({
       ...WorkspaceProviderTargetSchema.shape,
-      skillIds: z22.array(SkillIdSchema).min(1),
-      mode: z22.enum(["enable", "disable"])
+      skillIds: z23.array(SkillIdSchema).min(1),
+      mode: z23.enum(["enable", "disable"])
     });
-    WorkspaceAddInputSchema = z22.object({
-      path: z22.string().trim().min(1),
-      label: z22.string().trim().min(1).optional()
+    WorkspaceAddInputSchema = z23.object({
+      path: z23.string().trim().min(1),
+      label: z23.string().trim().min(1).optional()
     });
-    WorkspaceRemoveInputSchema = z22.object({ id: ImportedWorkspaceIdSchema });
-    WorkspaceSetActiveInputSchema = z22.object({ id: WorkspaceIdSchema });
-    CreatorRemoveInputSchema = z22.object({
+    WorkspaceRemoveInputSchema = z23.object({ id: ImportedWorkspaceIdSchema });
+    WorkspaceSetActiveInputSchema = z23.object({ id: WorkspaceIdSchema });
+    CreatorRemoveInputSchema = z23.object({
       ...WorkspaceProviderTargetSchema.shape,
       skillId: SkillIdSchema,
-      expectedRevision: z22.string().regex(/^sha256:[a-f0-9]{64}$/)
+      expectedRevision: z23.string().regex(/^sha256:[a-f0-9]{64}$/)
     });
-    RepositoryScanInputSchema = z22.object({
-      source: z22.string().trim().min(1),
-      ref: z22.string().trim().min(1).optional()
+    RepositoryScanInputSchema = z23.object({
+      source: z23.string().trim().min(1),
+      ref: z23.string().trim().min(1).optional()
     });
-    RepositoryPreviewInputSchema = z22.object({
+    RepositoryPreviewInputSchema = z23.object({
       sessionId: RepositorySessionIdSchema,
       skillId: RemoteSkillIdSchema
     });
     rpcContract = oc.errors(RpcErrorDefinitions).router({
       skills: {
         /** Discover skills within one explicit Workspace Provider. */
-        list: oc.input(SkillsListInputSchema).output(z22.object({ skills: z22.array(SkillMetadataSchema) })),
+        list: oc.input(SkillsListInputSchema).output(z23.object({ skills: z23.array(SkillMetadataSchema) })),
         /** Read one Workspace Provider-scoped skill document. */
         info: oc.input(SkillsInfoInputSchema).output(SkillInfoSchema),
         /** Enable or disable selected opaque skill IDs. */
@@ -48205,13 +48579,13 @@ var init_rpc_contract = __esm({
       },
       workspace: {
         /** List Global and imported Workspaces with fresh Provider counts. */
-        list: oc.input(z22.object({})).output(z22.object({ workspaces: z22.array(WorkspaceSchema) })),
+        list: oc.input(z23.object({})).output(z23.object({ workspaces: z23.array(WorkspaceSchema) })),
         /** Import a canonical directory workspace. */
-        add: oc.input(WorkspaceAddInputSchema).output(z22.object({ workspace: WorkspaceSchema })),
+        add: oc.input(WorkspaceAddInputSchema).output(z23.object({ workspace: WorkspaceSchema })),
         /** Remove an imported workspace registration. */
-        remove: oc.input(WorkspaceRemoveInputSchema).output(z22.object({ activeId: WorkspaceIdSchema })),
+        remove: oc.input(WorkspaceRemoveInputSchema).output(z23.object({ activeId: WorkspaceIdSchema })),
         /** Select the active workspace. */
-        setActive: oc.input(WorkspaceSetActiveInputSchema).output(z22.object({ activeId: WorkspaceIdSchema }))
+        setActive: oc.input(WorkspaceSetActiveInputSchema).output(z23.object({ activeId: WorkspaceIdSchema }))
       },
       creator: {
         /** Create or revision-check and update a skill. */
@@ -48219,7 +48593,7 @@ var init_rpc_contract = __esm({
         /** Load an editable skill document. */
         load: oc.input(SkillsInfoInputSchema).output(SkillDocumentSchema),
         /** Revision-check and delete one skill. */
-        remove: oc.input(CreatorRemoveInputSchema).output(z22.object({ removed: z22.literal(true) })),
+        remove: oc.input(CreatorRemoveInputSchema).output(z23.object({ removed: z23.literal(true) })),
         /** Read revision history for one skill (change 5: change log sub-view). */
         revisions: oc.input(CreatorRevisionsInputSchema).output(CreatorRevisionsResultSchema)
       },
@@ -48232,29 +48606,29 @@ var init_rpc_contract = __esm({
         install: oc.input(RepositoryInstallInputSchema).output(InstallResultSchema),
         sources: {
           /** List curated (built-in) and user-persisted sources for the Discover grid. */
-          list: oc.input(z22.object({})).output(
-            z22.object({
-              builtIn: z22.array(
-                z22.object({
-                  id: z22.string(),
-                  label: z22.string(),
-                  gitUrl: z22.string(),
-                  description: z22.string(),
-                  homepage: z22.string().optional()
+          list: oc.input(z23.object({})).output(
+            z23.object({
+              builtIn: z23.array(
+                z23.object({
+                  id: z23.string(),
+                  label: z23.string(),
+                  gitUrl: z23.string(),
+                  description: z23.string(),
+                  homepage: z23.string().optional()
                 })
               ),
-              user: z22.array(UserSourceSchema)
+              user: z23.array(UserSourceSchema)
             })
           ),
           /** Persist a new user source (https git URL only). */
-          add: oc.input(AddUserSourceInputSchema).output(z22.object({ source: UserSourceSchema })),
+          add: oc.input(AddUserSourceInputSchema).output(z23.object({ source: UserSourceSchema })),
           /** Remove one user-persisted source; built-in ids are rejected. */
-          remove: oc.input(RemoveUserSourceInputSchema).output(z22.object({ removed: z22.literal(true) }))
+          remove: oc.input(RemoveUserSourceInputSchema).output(z23.object({ removed: z23.literal(true) }))
         }
       },
       daemon: {
         /** Read the live daemon and tray status. */
-        status: oc.input(z22.object({})).output(DaemonStatusSchema)
+        status: oc.input(z23.object({})).output(DaemonStatusSchema)
       },
       skillIntelligence: {
         /** Read-only multi-skill analysis locked to observed revisions. */
@@ -48262,7 +48636,7 @@ var init_rpc_contract = __esm({
         /** Store a Manager-owned proposal draft; never mutates Providers. */
         propose: oc.input(ProposeInputSchema).output(ProposeResultSchema),
         /** List pending proposal drafts (newest first). */
-        list: oc.input(z22.object({})).output(ListProposalsResultSchema),
+        list: oc.input(z23.object({})).output(ListProposalsResultSchema),
         /** Delete one proposal draft. */
         reject: oc.input(RejectProposalInputSchema).output(RejectProposalResultSchema),
         /** Apply one proposal through existing revision-safe mutations. */
@@ -48270,9 +48644,9 @@ var init_rpc_contract = __esm({
       },
       steward: {
         /** Probe every registered backend (typed unavailable; no auto fallback). */
-        backends: oc.input(z22.object({})).output(StewardBackendsResultSchema),
+        backends: oc.input(z23.object({})).output(StewardBackendsResultSchema),
         /** List steward runs (newest first, bounded). */
-        list: oc.input(z22.object({})).output(StewardListResultSchema),
+        list: oc.input(z23.object({})).output(StewardListResultSchema),
         /** Start a steward run on an explicit backend and Imported Workspace.Provider. */
         start: oc.input(StewardStartInputSchema).output(StewardStartResultSchema),
         /** Poll normalized run events after a seq cursor. */
@@ -48307,16 +48681,16 @@ var init_rpc_contract = __esm({
         },
         /** MCP mutation proposal 审批链（task 4.4；Manager authority 的决定面）。 */
         proposals: {
-          list: oc.input(z22.object({})).output(z22.object({ proposals: z22.array(AgentMcpProposalViewSchema) })),
-          approve: oc.input(AgentProposalDecisionInputSchema).output(z22.object({ proposal: AgentMcpProposalViewSchema })),
-          reject: oc.input(AgentProposalDecisionInputSchema).output(z22.object({ proposal: AgentMcpProposalViewSchema }))
+          list: oc.input(z23.object({})).output(z23.object({ proposals: z23.array(AgentMcpProposalViewSchema) })),
+          approve: oc.input(AgentProposalDecisionInputSchema).output(z23.object({ proposal: AgentMcpProposalViewSchema })),
+          reject: oc.input(AgentProposalDecisionInputSchema).output(z23.object({ proposal: AgentMcpProposalViewSchema }))
         },
         /** 面板会话：内核 agent 会话的生命周期投影（task 2.2；旧 dsh.* 收敛并入）。 */
         sessions: {
           /** 列出内核 live 会话（含非面板会话的 disposed 投影）。 */
-          list: oc.input(z22.object({})).output(z22.object({ sessions: z22.array(AgentSessionSummarySchema) })),
+          list: oc.input(z23.object({})).output(z23.object({ sessions: z23.array(AgentSessionSummarySchema) })),
           /** 脱敏 run/session 帧查询（原 dsh.sessions.streams 平移；steward 投影消费）。 */
-          streams: oc.input(AgentSessionsStreamsInputSchema).output(z22.object({ frames: z22.array(DshSessionStreamFrameSchema) })),
+          streams: oc.input(AgentSessionsStreamsInputSchema).output(z23.object({ frames: z23.array(DshSessionStreamFrameSchema) })),
           /**
            * 清理面板会话转录（R14-C）：按保留天数 / 全量 / 显式 ID 删除产品转录层
            * （sessions/YYYY/MM/DD），running 会话跳过；不触碰 $DSH_HOME 内核日志。
@@ -48338,6 +48712,16 @@ var init_rpc_contract = __esm({
            * 下一次 prompt 以新模式 setup 复活，历史由内核 session log 保留）。 */
           setMode: oc.input(AgentSessionSetModeInputSchema).output(AgentSessionSetModeResultSchema)
         },
+        /**
+         * 内核 inbox 队列面（C2）：queue 真相在 ReactLoopInbox；list 投影待处理项，
+         * update 执行行级 edit/remove/steer（官方 updateQueue 语义）。
+         */
+        queue: {
+          /** 待处理项（非 live 会话 = 空 items；live next-step + next-turn 有序）。 */
+          list: oc.input(AgentQueueListInputSchema).output(AgentQueueListResultSchema),
+          /** 行级操作；messageId 已消费 = typed NOT_FOUND（竞态可见）。 */
+          update: oc.input(AgentQueueUpdateInputSchema).output(AgentQueueUpdateResultSchema)
+        },
         /**
          * 后端文件选择器（R17-B）：真实路径浏览 + 单文件预览。用户本机自由浏览是
          * 功能目的（读面，无 Workspace containment）；prompt 附件 path 通道在
@@ -48349,16 +48733,16 @@ var init_rpc_contract = __esm({
           /** 单文件预览：图片缩略（jSquash）/ 文本头 / 二进制名投影。 */
           preview: oc.input(AgentFilesPreviewInputSchema).output(AgentFilesPreviewResultSchema),
           /** 原生文件选择（R18 @xmorse/rfd）：mode 预置 filter；空 = 取消。 */
-          pickFiles: oc.input(z22.object({ mode: z22.enum(["image", "file"]) })).output(z22.object({ paths: z22.array(z22.string().min(1)) }))
+          pickFiles: oc.input(z23.object({ mode: z23.enum(["image", "file"]) })).output(z23.object({ paths: z23.array(z23.string().min(1)) }))
         },
         /** pi-ai 装配目录（models.dev 镜像）投影：全量 provider 画廊（filter 在 UI）。 */
         models: {
-          catalog: oc.input(z22.object({})).output(z22.object({ providers: z22.array(ModelProviderCatalogEntrySchema) }))
+          catalog: oc.input(z23.object({})).output(z23.object({ providers: z23.array(ModelProviderCatalogEntrySchema) }))
         },
         /** model/preset/permission/approval 投影（原 dsh.settings 平移）。 */
         settings: {
           /** 当前 settings 投影 + provider 凭据（apiKey 按 R16 用户裁决回显）。 */
-          get: oc.input(z22.object({})).output(DshStewardSettingsViewSchema),
+          get: oc.input(z23.object({})).output(DshStewardSettingsViewSchema),
           /** 应用补丁；revision 只在真实变更时 +1；类型化 rejected 见契约 union。 */
           update: oc.input(DshSettingsUpdateSchema).output(DshSettingsUpdateResultSchema),
           /**
@@ -48383,13 +48767,13 @@ var init_rpc_contract = __esm({
         /** List ACP-capable agents installed on this machine (daemon-lifetime cached). */
         agents: {
           /** Probe known PATH binaries and return their availability projection. */
-          list: oc.input(z22.object({})).output(z22.object({ agents: z22.array(AcpAgentInfoSchema) }))
+          list: oc.input(z23.object({})).output(z23.object({ agents: z23.array(AcpAgentInfoSchema) }))
         },
         session: {
           /** Spawn the selected agent subprocess and register a daemon-owned session. */
           open: oc.input(AcpSessionOpenInputSchema).output(AcpSessionOpenResultSchema),
           /** Terminate the agent subprocess for one session (idempotent). */
-          close: oc.input(AcpSessionCloseInputSchema).output(z22.object({ closed: z22.literal(true) }))
+          close: oc.input(AcpSessionCloseInputSchema).output(z23.object({ closed: z23.literal(true) }))
         }
       }
     });
@@ -48397,7 +48781,7 @@ var init_rpc_contract = __esm({
 });
 
 // src/daemon/capability/domain-capabilities.ts
-import { z as z23 } from "zod";
+import { z as z24 } from "zod";
 function toResult(error) {
   if (error instanceof DomainError) {
     return { kind: "failed", code: error.code, message: error.message };
@@ -48612,7 +48996,7 @@ var init_domain_capabilities = __esm({
     init_creator();
     init_skills_update();
     init_repository();
-    none = z23.object({});
+    none = z24.object({});
   }
 });
 
@@ -49784,7 +50168,7 @@ var init_provider_roots = __esm({
 
 // src/daemon/workspace-registry/state.ts
 import path24 from "node:path";
-import { z as z24 } from "zod";
+import { z as z25 } from "zod";
 function emptyRegistryState() {
   return { schemaVersion: 2, activeId: GLOBAL_WORKSPACE_ID, workspaces: [] };
 }
@@ -49826,15 +50210,15 @@ var init_state = __esm({
     "use strict";
     init_workspaces();
     init_path_safety();
-    StoredWorkspaceSchema = z24.object({
+    StoredWorkspaceSchema = z25.object({
       id: ImportedWorkspaceIdSchema,
-      label: z24.string().trim().min(1),
-      path: z24.string().min(1).refine(path24.isAbsolute, "Workspace path must be absolute.").refine((value) => path24.normalize(value) === value, "Workspace path must be normalized.")
+      label: z25.string().trim().min(1),
+      path: z25.string().min(1).refine(path24.isAbsolute, "Workspace path must be absolute.").refine((value) => path24.normalize(value) === value, "Workspace path must be normalized.")
     }).strict();
-    WorkspaceRegistryStateSchema = z24.object({
-      schemaVersion: z24.literal(2),
+    WorkspaceRegistryStateSchema = z25.object({
+      schemaVersion: z25.literal(2),
       activeId: WorkspaceIdSchema,
-      workspaces: z24.array(StoredWorkspaceSchema)
+      workspaces: z25.array(StoredWorkspaceSchema)
     }).strict().superRefine((state, context) => {
       const ids = /* @__PURE__ */ new Set();
       const paths = /* @__PURE__ */ new Set();
@@ -50205,7 +50589,7 @@ var domain_exports = {};
 __export(domain_exports, {
   createDaemonDomain: () => createDaemonDomain
 });
-import { join as join2 } from "node:path";
+import { join as join3 } from "node:path";
 function defaultStewardAdapters() {
   const adapters = [createCodexAppServerAdapter()];
   if (process.env.SKILL_CREATOR_STEWARD_ENABLE_FIXTURE === "1") {
@@ -50216,8 +50600,11 @@ function defaultStewardAdapters() {
 function createDaemonDomain(workspaces = createWorkspaceRegistry(), options2 = {}) {
   const kernelHostRef = { handle: null };
   const dshSettings = createDshSettingsService();
-  const agentTranscripts = createSessionTranscripts(join2(appDir(), "sessions"));
+  const agentTranscripts = createSessionTranscripts(join3(appDir(), "sessions"));
   const modelCatalog = createModelCatalogService();
+  const agentFiles = createAgentFilesService();
+  const skillsCliProbe = options2.skillsCliProbe ?? createSkillsCliProbe();
+  const skills = createSkillService(workspaces, { skillsCliProbe });
   const agentSessions = createAgentSessionsService({
     kernel: () => kernelHostRef.handle,
     modelSelection: async () => (await dshSettings.getView()).settings.model,
@@ -50230,10 +50617,25 @@ function createDaemonDomain(workspaces = createWorkspaceRegistry(), options2 = {
       if (entry === void 0) return null;
       return { contextWindow: entry.contextWindow, maxOutputTokens: entry.maxOutputTokens };
     },
-    transcripts: agentTranscripts
+    transcripts: agentTranscripts,
+    expandFileReferences: (references) => agentFiles.resolvePromptReferences({ references }),
+    // skill-refs C1：`$` 引用展开——registry 作用域解析 + 文档读取在 skills 服务
+    //（NOT_FOUND 随 resolveSkill typed 抛出）；内容截断对齐 file 引用（200k chars）。
+    expandSkillReferences: async (references) => {
+      const blocks = [];
+      for (const reference of references) {
+        const info3 = await skills.info(
+          { workspaceId: reference.workspaceId, providerId: reference.providerId },
+          reference.skillId
+        );
+        blocks.push(
+          `[reference: skill ${info3.name} \xB7 ${info3.provider}]
+${info3.content.slice(0, 2e5)}`
+        );
+      }
+      return blocks;
+    }
   });
-  const skillsCliProbe = options2.skillsCliProbe ?? createSkillsCliProbe();
-  const skills = createSkillService(workspaces, { skillsCliProbe });
   const repository = createRepositoryService(workspaces, skills);
   const creator = createCreatorService(workspaces, skills);
   const skillIntelligence = createSkillIntelligenceService(skills, creator);
@@ -50253,7 +50655,7 @@ function createDaemonDomain(workspaces = createWorkspaceRegistry(), options2 = {
     skillSteward: createSkillStewardPipelineService({ workspaces, skills, creator }),
     dshSettings,
     agentSessions,
-    agentFiles: createAgentFilesService(),
+    agentFiles,
     modelCatalog,
     setKernelHost: (handle) => {
       kernelHostRef.handle = handle;
@@ -50309,7 +50711,8 @@ __export(skill_creator_mcp_exports, {
   createSkillCreatorMcpServer: () => createSkillCreatorMcpServer,
   mcpToolName: () => mcpToolName
 });
-import { McpServer, ResourceTemplate } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { McpServer, ResourceTemplate } from "@modelcontextprotocol/server";
+import { z as z26 } from "zod";
 function mcpToolName(capabilityName) {
   return capabilityName.replace(/\./g, "_");
 }
@@ -50369,16 +50772,20 @@ function createSkillCreatorMcpServer(deps) {
         ]
       });
       if (shape2) {
-        server.tool(
+        server.registerTool(
           proposeName,
-          `Propose: ${descriptor.description} A human approves it in the Skill Creator UI before execution.`,
-          shape2,
+          {
+            description: `Propose: ${descriptor.description} A human approves it in the Skill Creator UI before execution.`,
+            inputSchema: z26.object(shape2)
+          },
           async (args) => proposeResult(deps.proposals.create(descriptor.name, args))
         );
       } else {
-        server.tool(
+        server.registerTool(
           proposeName,
-          `Propose: ${descriptor.description} A human approves it in the Skill Creator UI before execution.`,
+          {
+            description: `Propose: ${descriptor.description} A human approves it in the Skill Creator UI before execution.`
+          },
           async () => proposeResult(deps.proposals.create(descriptor.name, void 0))
         );
       }
@@ -50389,10 +50796,9 @@ function createSkillCreatorMcpServer(deps) {
     const shape = input && typeof input.shape === "object" ? input.shape : null;
     const toolName = mcpToolName(descriptor.name);
     if (shape) {
-      server.tool(
+      server.registerTool(
         toolName,
-        descriptor.description,
-        shape,
+        { description: descriptor.description, inputSchema: z26.object(shape) },
         async (args) => withCard(
           descriptor.name,
           await deps.capabilities.call(descriptor.name, args, MCP_PRINCIPAL),
@@ -50400,9 +50806,9 @@ function createSkillCreatorMcpServer(deps) {
         )
       );
     } else {
-      server.tool(
+      server.registerTool(
         toolName,
-        descriptor.description,
+        { description: descriptor.description },
         async () => withCard(
           descriptor.name,
           await deps.capabilities.call(descriptor.name, void 0, MCP_PRINCIPAL),
@@ -51126,21 +51532,18 @@ async function main() {
   return COMMANDS[command].run();
 }
 async function runMcpStdio() {
-  const { StdioServerTransport: StdioServerTransport2 } = await import("@modelcontextprotocol/sdk/server/stdio.js");
+  const { serveStdio } = await import("@modelcontextprotocol/server/stdio");
   const { createDaemonDomain: createDaemonDomain2 } = await Promise.resolve().then(() => (init_domain(), domain_exports));
   const { createSkillCreatorMcpServer: createSkillCreatorMcpServer2 } = await Promise.resolve().then(() => (init_skill_creator_mcp(), skill_creator_mcp_exports));
   const domain = createDaemonDomain2();
-  const server = createSkillCreatorMcpServer2({
-    capabilities: domain.managerCapabilities,
-    cards: domain.uiCards,
-    face: "stdio"
-  });
-  const transport = new StdioServerTransport2();
-  await server.connect(transport);
   console.error("skill-creator mcp: stdio server ready (readonly face)");
-  process.on("SIGINT", () => {
-    void server.close().finally(() => process.exit(0));
-  });
+  await serveStdio(
+    () => createSkillCreatorMcpServer2({
+      capabilities: domain.managerCapabilities,
+      cards: domain.uiCards,
+      face: "stdio"
+    })
+  );
 }
 void main().then((code) => process.exit(code)).catch((err) => {
   console.error(err instanceof Error ? err.message : String(err));