@ai-agent-forge/agent-forge 0.85.0

package/dist/remote/server-entry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-entry.js","sourceRoot":"","sources":["../../src/remote/server-entry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACjE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE1C,OAAO,EAEN,8BAA8B,EAG9B,uBAAuB,GACvB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EACN,yBAAyB,GAIzB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,uBAAuB,EAAiC,MAAM,qBAAqB,CAAC;AAE7F;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAAC,QAAgB,EAAU;IAC9D,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;IACpD,IAAI,CAAC;QACJ,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QACnD,IAAI,QAAQ,KAAK,EAAE;YAAE,OAAO,QAAQ,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACR,sEAAsE;IACvE,CAAC;IACD,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;IACxB,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,aAAa,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACxB,OAAO,EAAE,CAAC;AAAA,CACV;AA8DD;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,2BAA2B;IAChC,sDAAsD;IACrC,qBAAqB,GAAG,IAAI,GAAG,EAAkB,CAAC;IACnE,qFAAqF;IACpE,iBAAiB,GAAG,IAAI,GAAG,EAAU,CAAC;IACtC,KAAK,CAA6B;IAEnD,YAAY,KAAiC,EAAE;QAC9C,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IAAA,CACnB;IAED,KAAK,CAAC,MAAM,CAAC,SAAiB,EAAE,KAAkB,EAAmB;QACpE,IAAI,KAAK,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;YACvC,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACzC,kEAAkE;YAClE,iEAAiE;YACjE,mEAAmE;YACnE,mEAAmE;YACnE,2DAA2D;YAC3D,MAAM,GAAG,GAAG,GAAG,SAAS,KAAK,QAAQ,EAAE,CAAC;YACxC,IACC,QAAQ,IAAI,CAAC,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,iBAAiB,CAAC;gBACnF,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,EAC9B,CAAC;gBACF,iEAAiE;gBACjE,qDAAqD;gBACrD,OAAO,CAAC,CAAC;YACV,CAAC;YACD,qEAAqE;YACrE,oDAAoD;YACpD,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAChC,IAAI,CAAC;gBACJ,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;gBACzD,kEAAkE;gBAClE,gEAAgE;gBAChE,gDAAgD;gBAChD,IAAI,QAAQ,GAAG,CAAC,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,iBAAiB,CAAC,EAAE,CAAC;oBACxF,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;gBACrD,CAAC;gBACD,OAAO,MAAM,CAAC;YACf,CAAC;oBAAS,CAAC;gBACV,iEAAiE;gBACjE,gEAAgE;gBAChE,sCAAsC;gBACtC,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACpC,CAAC;QACF,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAAA,CAC3C;IAED,MAAM,CACL,SAAiB,EACjB,WAAmB,EACnB,KAAa,EAMX;QACF,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;IAAA,CACxD;IAED,KAAK,GAAkB;QACtB,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IAAA,CAC1B;CACD;AAED;;;;;;;;;;;;GAYG;AACH,SAAS,yBAAyB,CAAC,YAA0B,EAA2B;IACvF,OAAO;QACN,IAAI,EAAE,KAAK,IAAuC,EAAE,CAAC;YACpD,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC,YAAY,EAAE,CAAC;YACpD,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAC9B,uBAAuB,CAAC,KAAK,EAAE,YAAY,CAAC,iBAAiB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAC9E,CAAC;QAAA,CACF;QACD,OAAO,EAAE,KAAK,EAAE,GAAa,EAAE,EAAE,CAAC;YACjC,MAAM,KAAK,GAAG,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;YAC1D,kEAAkE;YAClE,gEAAgE;YAChE,sDAAsD;YACtD,MAAM,IAAI,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,YAAY,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC1F,IAAI,KAAK,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC/C,MAAM,IAAI,KAAK,CAAC,iCAAiC,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;YAC5E,CAAC;YACD,OAAO,KAAK,CAAC;QAAA,CACb;KACD,CAAC;AAAA,CACF;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,4BAA4B,CACjD,OAA4C,EACH;IACzC,MAAM,oBAAoB,GAAyC,OAAO,CAAC,oBAAoB,CAAC;IAChG,MAAM,QAAQ,GACb,OAAO,CAAC,QAAQ;QAChB,CAAC,oBAAoB,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,uBAAuB,CAAC,oBAAoB,CAAC,CAAC,CAAC;IAClG,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;IACpF,CAAC;IAED,wEAAwE;IACxE,6EAA2E;IAC3E,wEAAwE;IACxE,yEAAyE;IACzE,MAAM,QAAQ,GAAG,oBAAoB,EAAE,QAAQ,IAAI,WAAW,EAAE,CAAC;IACjE,MAAM,OAAO,GAAG,IAAI,2BAA2B,CAC9C,OAAO,CAAC,OAAO;QACd,IAAI,8BAA8B,CAAC,OAAO,CAAC,WAAW,IAAI,IAAI,CAAC,QAAQ,EAAE,6BAA6B,CAAC,CAAC,CACzG,CAAC;IACF,0EAA0E;IAC1E,0EAA0E;IAC1E,wEAAsE;IACtE,iEAA+D;IAC/D,0EAA0E;IAC1E,wCAAwC;IACxC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IAEpE,qEAAqE;IACrE,2EAA2E;IAC3E,MAAM,MAAM,GACX,OAAO,CAAC,MAAM;QACd,yBAAyB,CACxB,MAAM,YAAY,CAAC,MAAM,CACxB,oBAAoB,EAAE,QAAQ,KAAK,SAAS;YAC3C,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACA,QAAQ,EAAE,IAAI,CAAC,oBAAoB,CAAC,QAAQ,EAAE,WAAW,CAAC;gBAC1D,UAAU,EAAE,IAAI,CAAC,oBAAoB,CAAC,QAAQ,EAAE,aAAa,CAAC;aAC9D,CACH,CACD,CAAC;IAEH,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,yBAAyB,CAAC;QACrD,QAAQ;QACR,MAAM;QACN,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,OAAO;QACP,GAAG,CAAC,OAAO,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC;QACrF,GAAG,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC;QAC5E,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC;QACzE,GAAG,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;QACtE,GAAG,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;QACtE,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC;QAC/C,GAAG,CAAC,OAAO,CAAC,kBAAkB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,OAAO,CAAC,kBAAkB,EAAE,CAAC;KACvG,CAAC,CAAC;IAEH,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IAErB,OAAO;QACN,MAAM;QACN,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC;YAClB,mEAAmE;YACnE,mEAAmE;YACnE,mEAAmE;YACnE,iBAAiB;YACjB,IAAI,CAAC;gBACJ,OAAO,CAAC,kBAAkB,EAAE,CAAC;YAC9B,CAAC;YAAC,MAAM,CAAC;gBACR,gDAAgD;YACjD,CAAC;YACD,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;YACrB,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;QAAA,CACtB;KACD,CAAC;AAAA,CACF","sourcesContent":["/**\n * Remote entry assembly: one function that wires the coding-agent session\n * source, the durable journal, and the server boundary into a started\n * `PiServer` handle.\n *\n * The CLI remote entry (`--serve <port>`, src/cli/serve.ts) is a thin wrapper\n * over this function: it supplies the loopback TCP listener, process signal\n * handling, and default error logging, while this entry owns the session\n * source, the durable journal, and the default model catalog. Hosts that need\n * custom listeners or auth use `assembleCodingAgentServer` directly.\n *\n * Defaults: the durable journal lives in the agent config directory\n * (`<agentDir>/remote-server-journal.jsonl`), never in the process cwd, so two\n * servers started from different directories but sharing one agentDir\n * journalize the same session timeline. The default model catalog is built\n * from the real agent model runtime (same agentDir domain as the session\n * source), so `list` reports models whose provider auth is configured and\n * `resolve` applies the local CLI resolution semantics: the ref must exist in\n * the catalog and its provider must have configured auth.\n *\n * Retry boundary: the gate advances only after a successful append so a failed\n * write can be retried; advancing before the write would permanently drop that\n * revision's boundary snapshot on the next same-revision broadcast.\n *\n * Journal boundary: the journal keeps snapshots at durable revision boundaries\n * only. Streaming intermediate states persist no SessionManager entry, so\n * their snapshots are not journaled (wire broadcasts are unaffected); after a\n * restart, replay converges to the same state as a local session reopen.\n *\n * Trust boundary: the expected deployment is loopback listeners with no default\n * authentication, and the session source accepts whatever `cwd` a client\n * submits — a local process can drive the agent in any directory. This entry\n * is therefore only safe in a single-user local trust environment; multi-tenant\n * authentication and workspace path restrictions are later slices (the CLI\n * offers an opt-in `--serve-workspace-root` boundary).\n */\n\nimport { randomUUID } from \"node:crypto\";\nimport { mkdirSync, readFileSync, writeFileSync } from \"node:fs\";\nimport { dirname, join } from \"node:path\";\nimport type { ModelMetadata, ModelRef, ServerEvent } from \"@agent-forge/protocol\";\nimport {\n\ttype DurableSessionEventJournal,\n\tFileDurableSessionEventJournal,\n\ttype PiServer,\n\ttype PiServerListener,\n\ttoProtocolModelMetadata,\n} from \"@agent-forge/server\";\nimport { getAgentDir } from \"../config.ts\";\nimport { ModelRuntime } from \"../core/model-runtime.ts\";\nimport {\n\tassembleCodingAgentServer,\n\ttype CodingAgentServerAssemblyOptions,\n\ttype CodingAgentServerModels,\n\ttype CodingAgentServerSessionSource,\n} from \"./server-assembly.ts\";\nimport { createFileSessionSource, type FileSessionSourceOptions } from \"./session-source.ts\";\n\n/**\n * Stable host-level writer identity for the default durable writer lease\n * (D-067 phase 2 S2): persisted under the agent dir and reused across\n * process restarts, so a restarted server re-claims its own still-live store\n * lease instantly (same writer id = the lease's idempotent refresh) instead\n * of waiting out a dead predecessor's TTL. Distinct nodes sharing one store\n * must each pin their own id via `options.writerId`.\n */\nexport function readOrCreateWriterId(agentDir: string): string {\n\tconst path = join(agentDir, \"durable\", \"writer-id\");\n\ttry {\n\t\tconst existing = readFileSync(path, \"utf8\").trim();\n\t\tif (existing !== \"\") return existing;\n\t} catch {\n\t\t// First start (or unreadable file): fall through and mint a fresh id.\n\t}\n\tconst id = randomUUID();\n\tmkdirSync(dirname(path), { recursive: true });\n\twriteFileSync(path, id);\n\treturn id;\n}\n\n/** Options for the programmatic remote server entry. */\nexport interface StartCodingAgentRemoteServerOptions {\n\t/** Session source; built from `sessionSourceOptions` when omitted. */\n\treadonly sessions?: CodingAgentServerSessionSource;\n\t/** Session source configuration, used when `sessions` is not supplied. */\n\treadonly sessionSourceOptions?: FileSessionSourceOptions;\n\t/**\n\t * Path to the durable journal JSONL file. Defaults to\n\t * `<agentDir>/remote-server-journal.jsonl`, derived from\n\t * `sessionSourceOptions.agentDir` (or the default agent dir), so the\n\t * journal never lands in the process cwd and servers sharing one agentDir\n\t * share one session timeline.\n\t */\n\treadonly journalPath?: string;\n\t/** Pre-built journal; overrides `journalPath`. The revision gate still applies. */\n\treadonly journal?: FileDurableSessionEventJournal;\n\t/**\n\t * Model catalog for `listModels` and `set_model` resolution. Defaults to\n\t * the real agent model runtime for the same agentDir domain as the session\n\t * source: `list` returns models whose provider auth is configured;\n\t * `resolve` requires the ref to exist in the catalog and its provider to\n\t * have configured auth (local CLI semantics).\n\t */\n\treadonly models?: CodingAgentServerModels;\n\t/** Transport listeners (loopback in tests; unix socket or TCP later). */\n\treadonly listeners: readonly PiServerListener[];\n\t/** Optional auth hook, passed through to `assembleCodingAgentServer`. */\n\treadonly authenticate?: CodingAgentServerAssemblyOptions[\"authenticate\"];\n\t/** Optional authorization hook, passed through unchanged. */\n\treadonly authorize?: CodingAgentServerAssemblyOptions[\"authorize\"];\n\t/** Optional server id. */\n\treadonly serverId?: string;\n\t/**\n\t * Durable service backing the server `operations`/`artifacts` surfaces.\n\t * Omission keeps those surfaces unconfigured: operations answer\n\t * `durable_unavailable` and artifacts answer `not_implemented`.\n\t */\n\treadonly durable?: CodingAgentServerAssemblyOptions[\"durable\"];\n\t/**\n\t * Writer id claimed on the durable service. Hosts that also inject the same\n\t * store into the session source (`sessionSourceOptions.agentTaskResults`)\n\t * pass the same id here so the server and the sessions share one writer.\n\t */\n\treadonly writerId?: CodingAgentServerAssemblyOptions[\"writerId\"];\n\t/** Executors for submitted operation types; unknown types terminate as rejected. */\n\treadonly operationExecutors?: CodingAgentServerAssemblyOptions[\"operationExecutors\"];\n\t/** Optional internal-error sink, passed through to `assembleCodingAgentServer`. */\n\treadonly onError?: CodingAgentServerAssemblyOptions[\"onError\"];\n}\n\n/** A started remote server handle. */\nexport interface CodingAgentRemoteServerHandle {\n\t/** The underlying `PiServer` for advanced control. */\n\treadonly server: PiServer;\n\t/** Human-readable listener addresses after startup. */\n\treadonly addresses: readonly string[];\n\t/** Stops the server, closes listeners, and flushes the journal. */\n\tclose(): Promise<void>;\n}\n\n/**\n * Journal decorator that journals snapshots only at durable revision\n * boundaries. The server appends a full snapshot for every runtime event, but\n * streaming intermediate states persist no SessionManager entry: their\n * snapshot revision does not advance. This gate drops `session_snapshot`\n * appends whose revision did not advance past the last journaled one for that\n * session, so per-chunk streaming updates no longer multiply journal entries\n * on disk. Wire broadcasts are unaffected (they flow through the server, not\n * the journal); `session_progress` and `session_removed` events pass through\n * unchanged. After a restart, replay converges to the same state as a local\n * session reopen: the latest snapshot at or before each persisted revision.\n *\n * Retry boundary: the gate advances only after a successful append so a failed\n * write can be retried. Because the server broadcasts snapshots\n * fire-and-forget, several same-revision appends can be in flight at once; a\n * synchronous in-flight claim (taken before the first await, like the old\n * pre-advance) keeps those duplicates dropped while the revision stays\n * retryable until one append actually lands.\n */\nclass RevisionGatedSessionJournal implements DurableSessionEventJournal {\n\t/** Last durably journaled revision per session id. */\n\tprivate readonly lastJournaledRevision = new Map<string, number>();\n\t/** Revisions whose append is currently in flight, keyed by `sessionId\\0revision`. */\n\tprivate readonly inFlightRevisions = new Set<string>();\n\tprivate readonly inner: DurableSessionEventJournal;\n\n\tconstructor(inner: DurableSessionEventJournal) {\n\t\tthis.inner = inner;\n\t}\n\n\tasync append(sessionId: string, event: ServerEvent): Promise<number> {\n\t\tif (event.type === \"session_snapshot\") {\n\t\t\tconst revision = event.snapshot.revision;\n\t\t\t// An empty map reads as -Infinity so the first snapshot is always\n\t\t\t// journaled, including the pre-first-entry revision 0. The first\n\t\t\t// snapshot after a revision advance is never missed: the gate only\n\t\t\t// drops revisions that are <= the last durably journaled one, plus\n\t\t\t// concurrent duplicates of a revision still being written.\n\t\t\tconst key = `${sessionId}\\0${revision}`;\n\t\t\tif (\n\t\t\t\trevision <= (this.lastJournaledRevision.get(sessionId) ?? Number.NEGATIVE_INFINITY) ||\n\t\t\t\tthis.inFlightRevisions.has(key)\n\t\t\t) {\n\t\t\t\t// No record was written; the server discards the snapshot append\n\t\t\t\t// cursor, so 0 (\"no record\") is safe to return here.\n\t\t\t\treturn 0;\n\t\t\t}\n\t\t\t// Synchronous claim before the first await: concurrent same-revision\n\t\t\t// appends are dropped without waiting on the write.\n\t\t\tthis.inFlightRevisions.add(key);\n\t\t\ttry {\n\t\t\t\tconst cursor = await this.inner.append(sessionId, event);\n\t\t\t\t// Advance only after a successful append so a failed write can be\n\t\t\t\t// retried; an earlier revision completing late must not regress\n\t\t\t\t// the high-water mark of a later committed one.\n\t\t\t\tif (revision > (this.lastJournaledRevision.get(sessionId) ?? Number.NEGATIVE_INFINITY)) {\n\t\t\t\t\tthis.lastJournaledRevision.set(sessionId, revision);\n\t\t\t\t}\n\t\t\t\treturn cursor;\n\t\t\t} finally {\n\t\t\t\t// Release the claim on success and failure alike: on failure the\n\t\t\t\t// next same-revision broadcast retries the append instead of it\n\t\t\t\t// being dropped as already journaled.\n\t\t\t\tthis.inFlightRevisions.delete(key);\n\t\t\t}\n\t\t}\n\t\treturn this.inner.append(sessionId, event);\n\t}\n\n\treplay(\n\t\tsessionId: string,\n\t\tafterCursor: number,\n\t\tlimit: number,\n\t): Promise<{\n\t\treadonly events: readonly { readonly cursor: number; readonly event: ServerEvent }[];\n\t\treadonly nextCursor: number;\n\t\treadonly complete: boolean;\n\t\treadonly gap: boolean;\n\t}> {\n\t\treturn this.inner.replay(sessionId, afterCursor, limit);\n\t}\n\n\tclose(): Promise<void> {\n\t\treturn this.inner.close();\n\t}\n}\n\n/**\n * Default model catalog built from the real agent model runtime, mirroring how\n * `createAgentSession` builds one from `agentDir`. `list` projects the models\n * whose provider auth is configured (the local CLI `--list-models` semantics).\n * `resolve` mirrors local model restoration: the ref must exist in the catalog\n * and its provider must have configured auth; anything else fails with a\n * plain `Error` that the server boundary maps to `invalid_request`.\n *\n * Boundary: the catalog is a startup-time snapshot. Provider auth added while\n * the server runs is not reflected in `list` results (new sessions can still\n * resolve such models, since `resolve` checks auth on demand); hosts needing a\n * fresh catalog rebuild the server.\n */\nfunction createDefaultServerModels(modelRuntime: ModelRuntime): CodingAgentServerModels {\n\treturn {\n\t\tlist: async (): Promise<readonly ModelMetadata[]> => {\n\t\t\tconst available = await modelRuntime.getAvailable();\n\t\t\treturn available.map((model) =>\n\t\t\t\ttoProtocolModelMetadata(model, modelRuntime.hasConfiguredAuth(model.provider)),\n\t\t\t);\n\t\t},\n\t\tresolve: async (ref: ModelRef) => {\n\t\t\tconst model = modelRuntime.getModel(ref.provider, ref.id);\n\t\t\t// checkAuth resolves the provider's configured auth on demand, so\n\t\t\t// resolution does not depend on whether an availability refresh\n\t\t\t// (getAvailable) already populated the auth snapshot.\n\t\t\tconst auth = model === undefined ? undefined : await modelRuntime.checkAuth(ref.provider);\n\t\t\tif (model === undefined || auth === undefined) {\n\t\t\t\tthrow new Error(`Unknown or unavailable model: ${ref.provider}/${ref.id}`);\n\t\t\t}\n\t\t\treturn model;\n\t\t},\n\t};\n}\n\n/**\n * Assembles and starts a coding-agent remote server: session source + durable\n * journal + transport listeners behind the public server boundary.\n */\nexport async function startCodingAgentRemoteServer(\n\toptions: StartCodingAgentRemoteServerOptions,\n): Promise<CodingAgentRemoteServerHandle> {\n\tconst sessionSourceOptions: FileSessionSourceOptions | undefined = options.sessionSourceOptions;\n\tconst sessions =\n\t\toptions.sessions ??\n\t\t(sessionSourceOptions === undefined ? undefined : createFileSessionSource(sessionSourceOptions));\n\tif (sessions === undefined) {\n\t\tthrow new Error(\"Remote server requires a session source or sessionSourceOptions\");\n\t}\n\n\t// Default journal domain: the agent config directory the session source\n\t// resolves against (explicit agentDir, else the default agent dir) — never\n\t// the process cwd. Two servers sharing one agentDir therefore share one\n\t// journal for the same sessions, independent of where they were started.\n\tconst agentDir = sessionSourceOptions?.agentDir ?? getAgentDir();\n\tconst journal = new RevisionGatedSessionJournal(\n\t\toptions.journal ??\n\t\t\tnew FileDurableSessionEventJournal(options.journalPath ?? join(agentDir, \"remote-server-journal.jsonl\")),\n\t);\n\t// Default writer identity (D-067 phase 2 S2): stable per agent-dir domain\n\t// (persisted beside the durable log), so a restarted server re-claims its\n\t// own still-live store lease instantly — same writer id = the lease's\n\t// idempotent refresh — instead of being locked out by its dead\n\t// predecessor's TTL. Distinct nodes sharing one store must each pin their\n\t// own writer id via `options.writerId`.\n\tconst writerId = options.writerId ?? readOrCreateWriterId(agentDir);\n\n\t// Default model catalog: build a real runtime from the same agentDir\n\t// domain, mirroring `createAgentSession`'s authPath/modelsPath resolution.\n\tconst models: CodingAgentServerModels =\n\t\toptions.models ??\n\t\tcreateDefaultServerModels(\n\t\t\tawait ModelRuntime.create(\n\t\t\t\tsessionSourceOptions?.agentDir === undefined\n\t\t\t\t\t? {}\n\t\t\t\t\t: {\n\t\t\t\t\t\t\tauthPath: join(sessionSourceOptions.agentDir, \"auth.json\"),\n\t\t\t\t\t\t\tmodelsPath: join(sessionSourceOptions.agentDir, \"models.json\"),\n\t\t\t\t\t\t},\n\t\t\t),\n\t\t);\n\n\tconst { server, service } = assembleCodingAgentServer({\n\t\tsessions,\n\t\tmodels,\n\t\tlisteners: options.listeners,\n\t\tjournal,\n\t\t...(options.authenticate === undefined ? {} : { authenticate: options.authenticate }),\n\t\t...(options.authorize === undefined ? {} : { authorize: options.authorize }),\n\t\t...(options.serverId === undefined ? {} : { serverId: options.serverId }),\n\t\t...(options.onError === undefined ? {} : { onError: options.onError }),\n\t\t...(options.durable === undefined ? {} : { durable: options.durable }),\n\t\t...(writerId === undefined ? {} : { writerId }),\n\t\t...(options.operationExecutors === undefined ? {} : { operationExecutors: options.operationExecutors }),\n\t});\n\n\tawait server.start();\n\n\treturn {\n\t\tserver,\n\t\taddresses: server.addresses,\n\t\tclose: async () => {\n\t\t\t// Graceful shutdown releases the store writer lease (D-067 phase 2\n\t\t\t// S2) so a successor process can claim immediately; crash recovery\n\t\t\t// stays the lease-TTL path. Best-effort: shutdown never fails on a\n\t\t\t// release error.\n\t\t\ttry {\n\t\t\t\tservice.releaseWriterLease();\n\t\t\t} catch {\n\t\t\t\t// Release failures surface nowhere at shutdown.\n\t\t\t}\n\t\t\tawait server.close();\n\t\t\tawait journal.close();\n\t\t},\n\t};\n}\n"]}

package/dist/remote/session-source.d.ts

@@ -0,0 +1,101 @@
+/**
+ * Production `CodingAgentServerSessionSource` backed by the `SessionManager`
+ * file-based persistence and `createAgentSession` from the SDK.
+ *
+ * Owns the mapping between server descriptors and on-disk `.jsonl` session
+ * files. Each `open()` call reconstructs a full `AgentSession` whose messages
+ * are rebuilt from the JSONL entries, producing a transcript and durable
+ * revision identical to an in-process session.
+ *
+ * Honest boundary: model runtime, auth, tool suite, and extensions are resolved
+ * at `open`/`create` time from the host-provided `agentDir` and the session's
+ * own working directory (`descriptor.cwd` at create; the recorded cwd at open,
+ * with the host-level fallback for legacy cwd-less files).
+ * The source does not cache or pool sessions.
+ */
+import type { StreamFn } from "@agent-forge/agent-core";
+import type { CredentialStore } from "@agent-forge/ai";
+import type { Api, Model } from "@agent-forge/ai/compat";
+import type { ThinkingLevel } from "@agent-forge/protocol";
+import type { AgentTaskAdapter } from "../core/extensions/public-api.ts";
+import type { HostLogger } from "../core/logger.ts";
+import type { ModelRuntime } from "../core/model-runtime.ts";
+import type { SessionStorageProvider } from "../core/session-storage.ts";
+import type { SettingsManager } from "../core/settings-manager.ts";
+import type { DurableServiceV1 } from "../durable/durable-service.ts";
+import type { CodingAgentServerSessionSource } from "./server-assembly.ts";
+/** Configuration for a file-backed session source. */
+export interface FileSessionSourceOptions {
+    /** Absolute path to the sessions directory containing `.jsonl` files. */
+    readonly sessionsDir: string;
+    /**
+     * Fallback working directory. Opens of legacy session files that recorded
+     * no cwd (`SessionInfo.cwd` is `""`) run here, and so do creates whose
+     * descriptor carries no cwd. Sessions always prefer their own cwd:
+     * `descriptor.cwd` at create, the recorded cwd at open.
+     */
+    readonly cwd: string;
+    /** Absolute path to the agent config directory (defaults to `~/.agent-forge/agent`). */
+    readonly agentDir?: string;
+    /** Optional pre-built model runtime; created from `agentDir` when omitted. */
+    readonly modelRuntime?: ModelRuntime;
+    /** Optional explicit stream function (faux providers in tests). */
+    readonly streamFn?: StreamFn;
+    /** Optional explicit model to attach on creation. */
+    readonly model?: Model<Api>;
+    /** Optional thinking level for new sessions. */
+    readonly thinkingLevel?: ThinkingLevel;
+    /** Optional pre-built settings manager. */
+    readonly settingsManager?: SettingsManager;
+    /** Opt-in workspace boundary: when provided, `create` rejects descriptors whose resolved cwd is not inside one of these roots. The check is purely lexical (`path.resolve` normalization); symlinks are not resolved. Omit for unrestricted local-trust operation; `open` is not gated (it reopens sessions already on disk). */
+    readonly workspaceRoots?: readonly string[];
+    /**
+     * Storage seam for the session records (D-067 phase 1). Defaults to the
+     * local JSONL file protocol; hosts may inject an alternative provider and
+     * every session this source builds uses it.
+     */
+    readonly storage?: SessionStorageProvider;
+    /**
+     * Credential storage for the model runtime each session builds (D-067
+     * phase 1): forwarded to the default `ModelRuntime` construction. Ignored
+     * when `modelRuntime` is supplied explicitly. Defaults to the file at
+     * `<agentDir>/auth.json`.
+     */
+    readonly credentials?: CredentialStore;
+    /**
+     * Host-process logger forwarded into every session this source builds
+     * (D-067 phase 1 seam: serve sessions previously had no logger at all —
+     * the SDK treats an absent logger as an explicit no-op).
+     */
+    readonly hostLogger?: HostLogger;
+    /**
+     * Durable replay channel for agent task terminal outcomes, forwarded into
+     * every session this source builds (agent-result-replay-v1). The host owns
+     * the store and the writer claim; the writerId must be the same one the
+     * server assembly claims so a single writer serves the whole process.
+     */
+    readonly agentTaskResults?: {
+        readonly store: DurableServiceV1;
+        readonly writerId: string;
+    };
+    /**
+     * 本进程自身入口可信（承载退役切片 2）：转发给每个会话的装配域，delegate 在未
+     * 显式配置池且 self-invocation 可解析时自动池化——serve 装配用它给会话一个
+     * 委派载体。SDK 嵌入方不传则委派面不注册。
+     */
+    readonly subagentPoolFromSelfInvocation?: boolean;
+    /**
+     * Per-session agent task carrier factory（承载退役切片 2）：source 装配的每个
+     * 会话没有默认子任务 creator；SDK 嵌入方可用它按会话绑定父身份注入 in-process
+     * 或池化 adapter（生产 serve 走 `subagentPoolFromSelfInvocation`）。
+     */
+    readonly createAgentTaskAdapter?: (parent: {
+        readonly sessionId: string;
+    }) => AgentTaskAdapter;
+}
+/**
+ * Creates a production `CodingAgentServerSessionSource` backed by on-disk
+ * `.jsonl` session files in `sessionsDir`.
+ */
+export declare function createFileSessionSource(options: FileSessionSourceOptions): CodingAgentServerSessionSource;
+//# sourceMappingURL=session-source.d.ts.map

package/dist/remote/session-source.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-source.d.ts","sourceRoot":"","sources":["../../src/remote/session-source.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAIH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AACxD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AACvD,OAAO,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAE3D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACzE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAG7D,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AACzE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,KAAK,EAAE,8BAA8B,EAAgC,MAAM,sBAAsB,CAAC;AAEzG,sDAAsD;AACtD,MAAM,WAAW,wBAAwB;IACxC,yEAAyE;IACzE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B;;;;;OAKG;IACH,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,wFAAwF;IACxF,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,8EAA8E;IAC9E,QAAQ,CAAC,YAAY,CAAC,EAAE,YAAY,CAAC;IACrC,mEAAmE;IACnE,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC;IAC7B,qDAAqD;IACrD,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;IAC5B,gDAAgD;IAChD,QAAQ,CAAC,aAAa,CAAC,EAAE,aAAa,CAAC;IACvC,2CAA2C;IAC3C,QAAQ,CAAC,eAAe,CAAC,EAAE,eAAe,CAAC;IAC3C,iUAAiU;IACjU,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5C;;;;OAIG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,sBAAsB,CAAC;IAC1C;;;;;OAKG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,eAAe,CAAC;IACvC;;;;OAIG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;IACjC;;;;;OAKG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE;QAC3B,QAAQ,CAAC,KAAK,EAAE,gBAAgB,CAAC;QACjC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;KAC1B,CAAC;IACF;;;;OAIG;IACH,QAAQ,CAAC,8BAA8B,CAAC,EAAE,OAAO,CAAC;IAClD;;;;OAIG;IACH,QAAQ,CAAC,sBAAsB,CAAC,EAAE,CAAC,MAAM,EAAE;QAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;KAAE,KAAK,gBAAgB,CAAC;CAC/F;AA8GD;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,wBAAwB,GAAG,8BAA8B,CAwDzG","sourcesContent":["/**\n * Production `CodingAgentServerSessionSource` backed by the `SessionManager`\n * file-based persistence and `createAgentSession` from the SDK.\n *\n * Owns the mapping between server descriptors and on-disk `.jsonl` session\n * files. Each `open()` call reconstructs a full `AgentSession` whose messages\n * are rebuilt from the JSONL entries, producing a transcript and durable\n * revision identical to an in-process session.\n *\n * Honest boundary: model runtime, auth, tool suite, and extensions are resolved\n * at `open`/`create` time from the host-provided `agentDir` and the session's\n * own working directory (`descriptor.cwd` at create; the recorded cwd at open,\n * with the host-level fallback for legacy cwd-less files).\n * The source does not cache or pool sessions.\n */\n\nimport { stat } from \"node:fs/promises\";\nimport { isAbsolute, relative, resolve, sep } from \"node:path\";\nimport type { StreamFn } from \"@agent-forge/agent-core\";\nimport type { CredentialStore } from \"@agent-forge/ai\";\nimport type { Api, Model } from \"@agent-forge/ai/compat\";\nimport type { ThinkingLevel } from \"@agent-forge/protocol\";\nimport type { AgentSession } from \"../core/agent-session.ts\";\nimport type { AgentTaskAdapter } from \"../core/extensions/public-api.ts\";\nimport type { HostLogger } from \"../core/logger.ts\";\nimport type { ModelRuntime } from \"../core/model-runtime.ts\";\nimport { createAgentSession } from \"../core/sdk.ts\";\nimport { type SessionInfo, SessionManager } from \"../core/session-manager.ts\";\nimport type { SessionStorageProvider } from \"../core/session-storage.ts\";\nimport type { SettingsManager } from \"../core/settings-manager.ts\";\nimport type { DurableServiceV1 } from \"../durable/durable-service.ts\";\nimport type { CodingAgentServerSessionSource, CodingAgentSessionDescriptor } from \"./server-assembly.ts\";\n\n/** Configuration for a file-backed session source. */\nexport interface FileSessionSourceOptions {\n\t/** Absolute path to the sessions directory containing `.jsonl` files. */\n\treadonly sessionsDir: string;\n\t/**\n\t * Fallback working directory. Opens of legacy session files that recorded\n\t * no cwd (`SessionInfo.cwd` is `\"\"`) run here, and so do creates whose\n\t * descriptor carries no cwd. Sessions always prefer their own cwd:\n\t * `descriptor.cwd` at create, the recorded cwd at open.\n\t */\n\treadonly cwd: string;\n\t/** Absolute path to the agent config directory (defaults to `~/.agent-forge/agent`). */\n\treadonly agentDir?: string;\n\t/** Optional pre-built model runtime; created from `agentDir` when omitted. */\n\treadonly modelRuntime?: ModelRuntime;\n\t/** Optional explicit stream function (faux providers in tests). */\n\treadonly streamFn?: StreamFn;\n\t/** Optional explicit model to attach on creation. */\n\treadonly model?: Model<Api>;\n\t/** Optional thinking level for new sessions. */\n\treadonly thinkingLevel?: ThinkingLevel;\n\t/** Optional pre-built settings manager. */\n\treadonly settingsManager?: SettingsManager;\n\t/** Opt-in workspace boundary: when provided, `create` rejects descriptors whose resolved cwd is not inside one of these roots. The check is purely lexical (`path.resolve` normalization); symlinks are not resolved. Omit for unrestricted local-trust operation; `open` is not gated (it reopens sessions already on disk). */\n\treadonly workspaceRoots?: readonly string[];\n\t/**\n\t * Storage seam for the session records (D-067 phase 1). Defaults to the\n\t * local JSONL file protocol; hosts may inject an alternative provider and\n\t * every session this source builds uses it.\n\t */\n\treadonly storage?: SessionStorageProvider;\n\t/**\n\t * Credential storage for the model runtime each session builds (D-067\n\t * phase 1): forwarded to the default `ModelRuntime` construction. Ignored\n\t * when `modelRuntime` is supplied explicitly. Defaults to the file at\n\t * `<agentDir>/auth.json`.\n\t */\n\treadonly credentials?: CredentialStore;\n\t/**\n\t * Host-process logger forwarded into every session this source builds\n\t * (D-067 phase 1 seam: serve sessions previously had no logger at all —\n\t * the SDK treats an absent logger as an explicit no-op).\n\t */\n\treadonly hostLogger?: HostLogger;\n\t/**\n\t * Durable replay channel for agent task terminal outcomes, forwarded into\n\t * every session this source builds (agent-result-replay-v1). The host owns\n\t * the store and the writer claim; the writerId must be the same one the\n\t * server assembly claims so a single writer serves the whole process.\n\t */\n\treadonly agentTaskResults?: {\n\t\treadonly store: DurableServiceV1;\n\t\treadonly writerId: string;\n\t};\n\t/**\n\t * 本进程自身入口可信（承载退役切片 2）：转发给每个会话的装配域，delegate 在未\n\t * 显式配置池且 self-invocation 可解析时自动池化——serve 装配用它给会话一个\n\t * 委派载体。SDK 嵌入方不传则委派面不注册。\n\t */\n\treadonly subagentPoolFromSelfInvocation?: boolean;\n\t/**\n\t * Per-session agent task carrier factory（承载退役切片 2）：source 装配的每个\n\t * 会话没有默认子任务 creator；SDK 嵌入方可用它按会话绑定父身份注入 in-process\n\t * 或池化 adapter（生产 serve 走 `subagentPoolFromSelfInvocation`）。\n\t */\n\treadonly createAgentTaskAdapter?: (parent: { readonly sessionId: string }) => AgentTaskAdapter;\n}\n\n/**\n * Maps a `SessionInfo` from `SessionManager.listAll` to a\n * `CodingAgentSessionDescriptor` visible to the server boundary.\n */\nfunction infoToDescriptor(info: SessionInfo): CodingAgentSessionDescriptor {\n\treturn {\n\t\tid: info.id,\n\t\t...(info.name === undefined ? {} : { name: info.name }),\n\t\t// Legacy session files recorded no cwd (empty string); omit the field\n\t\t// like `name` instead of leaking a protocol-invalid empty cwd.\n\t\t...(info.cwd === \"\" ? {} : { cwd: info.cwd }),\n\t\t// Profile lock recorded in the header at creation; omit the keys when\n\t\t// absent so descriptors keep the protocol's optional-field semantics\n\t\t// and reopened-session snapshots echo exactly what was persisted.\n\t\t...(info.profileId === undefined ? {} : { profileId: info.profileId }),\n\t\t...(info.profileVersion === undefined ? {} : { profileVersion: info.profileVersion }),\n\t\tcreatedAt: info.created.getTime(),\n\t\tupdatedAt: info.modified.getTime(),\n\t};\n}\n\n/**\n * Shared logic to reconstruct an `AgentSession` from an existing\n * `SessionManager` instance (used by both `create` and `open`). `cwd` is the\n * session's own working directory — the one the descriptor recorded at create\n * (or the recorded cwd at open) — and drives tool ctx, resource discovery, and\n * the agents.md chain for this session regardless of the host-level fallback.\n * Optional `overrides` carry per-session descriptor values; they win over the\n * host-level `options` defaults.\n */\nasync function buildSession(\n\tsessionManager: SessionManager,\n\toptions: FileSessionSourceOptions,\n\tcwd: string,\n\toverrides?: { readonly model?: Model<Api>; readonly thinkingLevel?: ThinkingLevel },\n): Promise<AgentSession> {\n\tconst model = overrides?.model ?? options.model;\n\tconst thinkingLevel = overrides?.thinkingLevel ?? options.thinkingLevel;\n\tconst { session } = await createAgentSession({\n\t\tcwd,\n\t\t...(options.agentDir === undefined ? {} : { agentDir: options.agentDir }),\n\t\tsessionManager,\n\t\t...(options.modelRuntime === undefined ? {} : { modelRuntime: options.modelRuntime }),\n\t\t...(options.streamFn === undefined ? {} : { streamFn: options.streamFn }),\n\t\t...(model === undefined ? {} : { model }),\n\t\t...(thinkingLevel === undefined ? {} : { thinkingLevel }),\n\t\t...(options.settingsManager === undefined ? {} : { settingsManager: options.settingsManager }),\n\t\t...(options.credentials === undefined ? {} : { credentials: options.credentials }),\n\t\t...(options.hostLogger === undefined ? {} : { hostLogger: options.hostLogger }),\n\t\t...(options.agentTaskResults === undefined ? {} : { agentTaskResults: options.agentTaskResults }),\n\t\t...(options.subagentPoolFromSelfInvocation === undefined\n\t\t\t? {}\n\t\t\t: { subagentPoolFromSelfInvocation: options.subagentPoolFromSelfInvocation }),\n\t\t...(options.createAgentTaskAdapter === undefined\n\t\t\t? {}\n\t\t\t: {\n\t\t\t\t\tagentTaskAdapter: options.createAgentTaskAdapter({ sessionId: sessionManager.getSessionId() }),\n\t\t\t\t}),\n\t});\n\treturn session;\n}\n\n/**\n * Enforces the opt-in workspace boundary for `create`. Both the root and the\n * final cwd are resolved first; the cwd is inside when it is the root itself\n * or a descendant. On win32 `path.relative` compares case-insensitively by\n * platform default and yields an absolute path across drive letters, which\n * fails the containment check naturally. Throws a plain `Error` (matching the\n * existing session-source convention) so the server boundary maps it to a\n * request-class protocol error with the original message.\n */\nfunction assertWithinWorkspaceRoots(cwd: string, roots: readonly string[] | undefined): void {\n\tif (roots === undefined) return;\n\tconst resolvedCwd = resolve(cwd);\n\tfor (const root of roots) {\n\t\tconst resolvedRoot = resolve(root);\n\t\tconst rel = relative(resolvedRoot, resolvedCwd);\n\t\t// `rel === \"\"` means the cwd is the root itself, which is allowed. The\n\t\t// escape check is segment-precise so in-root entries that merely start\n\t\t// with \"..\" (e.g. `..foo`) are not mistaken for parent escapes.\n\t\tif (rel === \"\" || (!isAbsolute(rel) && rel !== \"..\" && !rel.startsWith(`..${sep}`))) return;\n\t}\n\tthrow new Error(\n\t\t`cwd \"${resolvedCwd}\" is outside the configured workspace roots: [${roots.map((root) => resolve(root)).join(\", \")}]`,\n\t);\n}\n\n/**\n * `create` targets a fresh session workspace, so a missing or non-directory\n * cwd must fail the create with a clear, path-bearing error instead of\n * producing a session whose tools fail on their first relative access.\n * `open` re-opens sessions already recorded on disk and is not gated. The\n * plain `Error` matches the session-source convention; the server boundary\n * maps it to an `invalid_request` protocol error with the original message.\n */\nasync function assertCwdIsDirectory(cwd: string): Promise<void> {\n\tconst stats = await stat(cwd).catch((error: unknown) => {\n\t\tif ((error as NodeJS.ErrnoException).code === \"ENOENT\") return undefined;\n\t\tthrow error;\n\t});\n\tif (stats === undefined) {\n\t\tthrow new Error(`Cannot create session: cwd does not exist: ${cwd}`);\n\t}\n\tif (!stats.isDirectory()) {\n\t\tthrow new Error(`Cannot create session: cwd is not a directory: ${cwd}`);\n\t}\n}\n\n/**\n * Creates a production `CodingAgentServerSessionSource` backed by on-disk\n * `.jsonl` session files in `sessionsDir`.\n */\nexport function createFileSessionSource(options: FileSessionSourceOptions): CodingAgentServerSessionSource {\n\tconst sessionsDir = resolve(options.sessionsDir);\n\n\treturn {\n\t\tasync list(): Promise<readonly CodingAgentSessionDescriptor[]> {\n\t\t\tconst infos = await SessionManager.listAll(sessionsDir);\n\t\t\treturn infos.map(infoToDescriptor);\n\t\t},\n\n\t\t/**\n\t\t * Creates a session in the descriptor cwd (or the host-level fallback).\n\t\t * The final cwd must be inside the configured workspace roots (when\n\t\t * provided) and must exist as a directory; both checks run before any\n\t\t * session file is written, so a rejected create leaves the disk\n\t\t * untouched.\n\t\t */\n\t\tasync create(descriptor: CodingAgentSessionDescriptor): Promise<AgentSession> {\n\t\t\t// The server boundary rejects cwd-less creates; a direct host call\n\t\t\t// falls back to the host-level cwd like legacy opens.\n\t\t\tconst cwd = descriptor.cwd === undefined || descriptor.cwd === \"\" ? options.cwd : descriptor.cwd;\n\t\t\tassertWithinWorkspaceRoots(cwd, options.workspaceRoots);\n\t\t\tawait assertCwdIsDirectory(cwd);\n\t\t\tconst sm = SessionManager.create(\n\t\t\t\tcwd,\n\t\t\t\tsessionsDir,\n\t\t\t\t{\n\t\t\t\t\tid: descriptor.id,\n\t\t\t\t\t// Creation-time profile lock, persisted into the session header so\n\t\t\t\t\t// it survives restarts (read back via `list`/`open` descriptors).\n\t\t\t\t\t...(descriptor.profileId === undefined ? {} : { profileId: descriptor.profileId }),\n\t\t\t\t\t...(descriptor.profileVersion === undefined ? {} : { profileVersion: descriptor.profileVersion }),\n\t\t\t\t},\n\t\t\t\toptions.storage,\n\t\t\t);\n\t\t\treturn buildSession(sm, options, cwd, {\n\t\t\t\t...(descriptor.model === undefined ? {} : { model: descriptor.model }),\n\t\t\t\t...(descriptor.thinkingLevel === undefined ? {} : { thinkingLevel: descriptor.thinkingLevel }),\n\t\t\t});\n\t\t},\n\n\t\tasync open(descriptor: CodingAgentSessionDescriptor): Promise<AgentSession> {\n\t\t\t// Re-scan to locate the session file path for the given id.\n\t\t\tconst infos = await SessionManager.listAll(sessionsDir);\n\t\t\tconst match = infos.find((info) => info.id === descriptor.id);\n\t\t\tif (!match) {\n\t\t\t\tthrow new Error(`Session not found: ${descriptor.id}`);\n\t\t\t}\n\t\t\t// The session file records the cwd it ran in; legacy files may have\n\t\t\t// none (empty string), which falls back to the host-level cwd. The\n\t\t\t// override keeps the SessionManager cwd consistent with the build\n\t\t\t// cwd for consumers of `getCwd()` (extension surface, snapshot).\n\t\t\tconst cwd = match.cwd === \"\" ? options.cwd : match.cwd;\n\t\t\tconst sm = SessionManager.open(match.path, sessionsDir, cwd, options.storage);\n\t\t\treturn buildSession(sm, options, cwd);\n\t\t},\n\t};\n}\n"]}

package/dist/remote/session-source.js

@@ -0,0 +1,173 @@
+/**
+ * Production `CodingAgentServerSessionSource` backed by the `SessionManager`
+ * file-based persistence and `createAgentSession` from the SDK.
+ *
+ * Owns the mapping between server descriptors and on-disk `.jsonl` session
+ * files. Each `open()` call reconstructs a full `AgentSession` whose messages
+ * are rebuilt from the JSONL entries, producing a transcript and durable
+ * revision identical to an in-process session.
+ *
+ * Honest boundary: model runtime, auth, tool suite, and extensions are resolved
+ * at `open`/`create` time from the host-provided `agentDir` and the session's
+ * own working directory (`descriptor.cwd` at create; the recorded cwd at open,
+ * with the host-level fallback for legacy cwd-less files).
+ * The source does not cache or pool sessions.
+ */
+import { stat } from "node:fs/promises";
+import { isAbsolute, relative, resolve, sep } from "node:path";
+import { createAgentSession } from "../core/sdk.js";
+import { SessionManager } from "../core/session-manager.js";
+/**
+ * Maps a `SessionInfo` from `SessionManager.listAll` to a
+ * `CodingAgentSessionDescriptor` visible to the server boundary.
+ */
+function infoToDescriptor(info) {
+    return {
+        id: info.id,
+        ...(info.name === undefined ? {} : { name: info.name }),
+        // Legacy session files recorded no cwd (empty string); omit the field
+        // like `name` instead of leaking a protocol-invalid empty cwd.
+        ...(info.cwd === "" ? {} : { cwd: info.cwd }),
+        // Profile lock recorded in the header at creation; omit the keys when
+        // absent so descriptors keep the protocol's optional-field semantics
+        // and reopened-session snapshots echo exactly what was persisted.
+        ...(info.profileId === undefined ? {} : { profileId: info.profileId }),
+        ...(info.profileVersion === undefined ? {} : { profileVersion: info.profileVersion }),
+        createdAt: info.created.getTime(),
+        updatedAt: info.modified.getTime(),
+    };
+}
+/**
+ * Shared logic to reconstruct an `AgentSession` from an existing
+ * `SessionManager` instance (used by both `create` and `open`). `cwd` is the
+ * session's own working directory — the one the descriptor recorded at create
+ * (or the recorded cwd at open) — and drives tool ctx, resource discovery, and
+ * the agents.md chain for this session regardless of the host-level fallback.
+ * Optional `overrides` carry per-session descriptor values; they win over the
+ * host-level `options` defaults.
+ */
+async function buildSession(sessionManager, options, cwd, overrides) {
+    const model = overrides?.model ?? options.model;
+    const thinkingLevel = overrides?.thinkingLevel ?? options.thinkingLevel;
+    const { session } = await createAgentSession({
+        cwd,
+        ...(options.agentDir === undefined ? {} : { agentDir: options.agentDir }),
+        sessionManager,
+        ...(options.modelRuntime === undefined ? {} : { modelRuntime: options.modelRuntime }),
+        ...(options.streamFn === undefined ? {} : { streamFn: options.streamFn }),
+        ...(model === undefined ? {} : { model }),
+        ...(thinkingLevel === undefined ? {} : { thinkingLevel }),
+        ...(options.settingsManager === undefined ? {} : { settingsManager: options.settingsManager }),
+        ...(options.credentials === undefined ? {} : { credentials: options.credentials }),
+        ...(options.hostLogger === undefined ? {} : { hostLogger: options.hostLogger }),
+        ...(options.agentTaskResults === undefined ? {} : { agentTaskResults: options.agentTaskResults }),
+        ...(options.subagentPoolFromSelfInvocation === undefined
+            ? {}
+            : { subagentPoolFromSelfInvocation: options.subagentPoolFromSelfInvocation }),
+        ...(options.createAgentTaskAdapter === undefined
+            ? {}
+            : {
+                agentTaskAdapter: options.createAgentTaskAdapter({ sessionId: sessionManager.getSessionId() }),
+            }),
+    });
+    return session;
+}
+/**
+ * Enforces the opt-in workspace boundary for `create`. Both the root and the
+ * final cwd are resolved first; the cwd is inside when it is the root itself
+ * or a descendant. On win32 `path.relative` compares case-insensitively by
+ * platform default and yields an absolute path across drive letters, which
+ * fails the containment check naturally. Throws a plain `Error` (matching the
+ * existing session-source convention) so the server boundary maps it to a
+ * request-class protocol error with the original message.
+ */
+function assertWithinWorkspaceRoots(cwd, roots) {
+    if (roots === undefined)
+        return;
+    const resolvedCwd = resolve(cwd);
+    for (const root of roots) {
+        const resolvedRoot = resolve(root);
+        const rel = relative(resolvedRoot, resolvedCwd);
+        // `rel === ""` means the cwd is the root itself, which is allowed. The
+        // escape check is segment-precise so in-root entries that merely start
+        // with ".." (e.g. `..foo`) are not mistaken for parent escapes.
+        if (rel === "" || (!isAbsolute(rel) && rel !== ".." && !rel.startsWith(`..${sep}`)))
+            return;
+    }
+    throw new Error(`cwd "${resolvedCwd}" is outside the configured workspace roots: [${roots.map((root) => resolve(root)).join(", ")}]`);
+}
+/**
+ * `create` targets a fresh session workspace, so a missing or non-directory
+ * cwd must fail the create with a clear, path-bearing error instead of
+ * producing a session whose tools fail on their first relative access.
+ * `open` re-opens sessions already recorded on disk and is not gated. The
+ * plain `Error` matches the session-source convention; the server boundary
+ * maps it to an `invalid_request` protocol error with the original message.
+ */
+async function assertCwdIsDirectory(cwd) {
+    const stats = await stat(cwd).catch((error) => {
+        if (error.code === "ENOENT")
+            return undefined;
+        throw error;
+    });
+    if (stats === undefined) {
+        throw new Error(`Cannot create session: cwd does not exist: ${cwd}`);
+    }
+    if (!stats.isDirectory()) {
+        throw new Error(`Cannot create session: cwd is not a directory: ${cwd}`);
+    }
+}
+/**
+ * Creates a production `CodingAgentServerSessionSource` backed by on-disk
+ * `.jsonl` session files in `sessionsDir`.
+ */
+export function createFileSessionSource(options) {
+    const sessionsDir = resolve(options.sessionsDir);
+    return {
+        async list() {
+            const infos = await SessionManager.listAll(sessionsDir);
+            return infos.map(infoToDescriptor);
+        },
+        /**
+         * Creates a session in the descriptor cwd (or the host-level fallback).
+         * The final cwd must be inside the configured workspace roots (when
+         * provided) and must exist as a directory; both checks run before any
+         * session file is written, so a rejected create leaves the disk
+         * untouched.
+         */
+        async create(descriptor) {
+            // The server boundary rejects cwd-less creates; a direct host call
+            // falls back to the host-level cwd like legacy opens.
+            const cwd = descriptor.cwd === undefined || descriptor.cwd === "" ? options.cwd : descriptor.cwd;
+            assertWithinWorkspaceRoots(cwd, options.workspaceRoots);
+            await assertCwdIsDirectory(cwd);
+            const sm = SessionManager.create(cwd, sessionsDir, {
+                id: descriptor.id,
+                // Creation-time profile lock, persisted into the session header so
+                // it survives restarts (read back via `list`/`open` descriptors).
+                ...(descriptor.profileId === undefined ? {} : { profileId: descriptor.profileId }),
+                ...(descriptor.profileVersion === undefined ? {} : { profileVersion: descriptor.profileVersion }),
+            }, options.storage);
+            return buildSession(sm, options, cwd, {
+                ...(descriptor.model === undefined ? {} : { model: descriptor.model }),
+                ...(descriptor.thinkingLevel === undefined ? {} : { thinkingLevel: descriptor.thinkingLevel }),
+            });
+        },
+        async open(descriptor) {
+            // Re-scan to locate the session file path for the given id.
+            const infos = await SessionManager.listAll(sessionsDir);
+            const match = infos.find((info) => info.id === descriptor.id);
+            if (!match) {
+                throw new Error(`Session not found: ${descriptor.id}`);
+            }
+            // The session file records the cwd it ran in; legacy files may have
+            // none (empty string), which falls back to the host-level cwd. The
+            // override keeps the SessionManager cwd consistent with the build
+            // cwd for consumers of `getCwd()` (extension surface, snapshot).
+            const cwd = match.cwd === "" ? options.cwd : match.cwd;
+            const sm = SessionManager.open(match.path, sessionsDir, cwd, options.storage);
+            return buildSession(sm, options, cwd);
+        },
+    };
+}
+//# sourceMappingURL=session-source.js.map

package/dist/remote/session-source.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-source.js","sourceRoot":"","sources":["../../src/remote/session-source.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAS/D,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACpD,OAAO,EAAoB,cAAc,EAAE,MAAM,4BAA4B,CAAC;AA0E9E;;;GAGG;AACH,SAAS,gBAAgB,CAAC,IAAiB,EAAgC;IAC1E,OAAO;QACN,EAAE,EAAE,IAAI,CAAC,EAAE;QACX,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;QACvD,sEAAsE;QACtE,+DAA+D;QAC/D,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7C,sEAAsE;QACtE,qEAAqE;QACrE,kEAAkE;QAClE,GAAG,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;QACtE,GAAG,CAAC,IAAI,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC;QACrF,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE;QACjC,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE;KAClC,CAAC;AAAA,CACF;AAED;;;;;;;;GAQG;AACH,KAAK,UAAU,YAAY,CAC1B,cAA8B,EAC9B,OAAiC,EACjC,GAAW,EACX,SAAmF,EAC3D;IACxB,MAAM,KAAK,GAAG,SAAS,EAAE,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC;IAChD,MAAM,aAAa,GAAG,SAAS,EAAE,aAAa,IAAI,OAAO,CAAC,aAAa,CAAC;IACxE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,kBAAkB,CAAC;QAC5C,GAAG;QACH,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC;QACzE,cAAc;QACd,GAAG,CAAC,OAAO,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC;QACrF,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC;QACzE,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;QACzC,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC;QACzD,GAAG,CAAC,OAAO,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,OAAO,CAAC,eAAe,EAAE,CAAC;QAC9F,GAAG,CAAC,OAAO,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC;QAClF,GAAG,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC;QAC/E,GAAG,CAAC,OAAO,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,EAAE,CAAC;QACjG,GAAG,CAAC,OAAO,CAAC,8BAA8B,KAAK,SAAS;YACvD,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,8BAA8B,EAAE,OAAO,CAAC,8BAA8B,EAAE,CAAC;QAC9E,GAAG,CAAC,OAAO,CAAC,sBAAsB,KAAK,SAAS;YAC/C,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACA,gBAAgB,EAAE,OAAO,CAAC,sBAAsB,CAAC,EAAE,SAAS,EAAE,cAAc,CAAC,YAAY,EAAE,EAAE,CAAC;aAC9F,CAAC;KACJ,CAAC,CAAC;IACH,OAAO,OAAO,CAAC;AAAA,CACf;AAED;;;;;;;;GAQG;AACH,SAAS,0BAA0B,CAAC,GAAW,EAAE,KAAoC,EAAQ;IAC5F,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO;IAChC,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IACjC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QAC1B,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,GAAG,GAAG,QAAQ,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;QAChD,uEAAuE;QACvE,uEAAuE;QACvE,gEAAgE;QAChE,IAAI,GAAG,KAAK,EAAE,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,GAAG,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC;YAAE,OAAO;IAC7F,CAAC;IACD,MAAM,IAAI,KAAK,CACd,QAAQ,WAAW,iDAAiD,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACpH,CAAC;AAAA,CACF;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,oBAAoB,CAAC,GAAW,EAAiB;IAC/D,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE,CAAC;QACvD,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QACzE,MAAM,KAAK,CAAC;IAAA,CACZ,CAAC,CAAC;IACH,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,8CAA8C,GAAG,EAAE,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,kDAAkD,GAAG,EAAE,CAAC,CAAC;IAC1E,CAAC;AAAA,CACD;AAED;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CAAC,OAAiC,EAAkC;IAC1G,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAEjD,OAAO;QACN,KAAK,CAAC,IAAI,GAAqD;YAC9D,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;YACxD,OAAO,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QAAA,CACnC;QAED;;;;;;WAMG;QACH,KAAK,CAAC,MAAM,CAAC,UAAwC,EAAyB;YAC7E,mEAAmE;YACnE,sDAAsD;YACtD,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,KAAK,SAAS,IAAI,UAAU,CAAC,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC;YACjG,0BAA0B,CAAC,GAAG,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;YACxD,MAAM,oBAAoB,CAAC,GAAG,CAAC,CAAC;YAChC,MAAM,EAAE,GAAG,cAAc,CAAC,MAAM,CAC/B,GAAG,EACH,WAAW,EACX;gBACC,EAAE,EAAE,UAAU,CAAC,EAAE;gBACjB,mEAAmE;gBACnE,kEAAkE;gBAClE,GAAG,CAAC,UAAU,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,UAAU,CAAC,SAAS,EAAE,CAAC;gBAClF,GAAG,CAAC,UAAU,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,UAAU,CAAC,cAAc,EAAE,CAAC;aACjG,EACD,OAAO,CAAC,OAAO,CACf,CAAC;YACF,OAAO,YAAY,CAAC,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE;gBACrC,GAAG,CAAC,UAAU,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC;gBACtE,GAAG,CAAC,UAAU,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,CAAC,aAAa,EAAE,CAAC;aAC9F,CAAC,CAAC;QAAA,CACH;QAED,KAAK,CAAC,IAAI,CAAC,UAAwC,EAAyB;YAC3E,4DAA4D;YAC5D,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;YACxD,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,UAAU,CAAC,EAAE,CAAC,CAAC;YAC9D,IAAI,CAAC,KAAK,EAAE,CAAC;gBACZ,MAAM,IAAI,KAAK,CAAC,sBAAsB,UAAU,CAAC,EAAE,EAAE,CAAC,CAAC;YACxD,CAAC;YACD,oEAAoE;YACpE,mEAAmE;YACnE,kEAAkE;YAClE,iEAAiE;YACjE,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC;YACvD,MAAM,EAAE,GAAG,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;YAC9E,OAAO,YAAY,CAAC,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;QAAA,CACtC;KACD,CAAC;AAAA,CACF","sourcesContent":["/**\n * Production `CodingAgentServerSessionSource` backed by the `SessionManager`\n * file-based persistence and `createAgentSession` from the SDK.\n *\n * Owns the mapping between server descriptors and on-disk `.jsonl` session\n * files. Each `open()` call reconstructs a full `AgentSession` whose messages\n * are rebuilt from the JSONL entries, producing a transcript and durable\n * revision identical to an in-process session.\n *\n * Honest boundary: model runtime, auth, tool suite, and extensions are resolved\n * at `open`/`create` time from the host-provided `agentDir` and the session's\n * own working directory (`descriptor.cwd` at create; the recorded cwd at open,\n * with the host-level fallback for legacy cwd-less files).\n * The source does not cache or pool sessions.\n */\n\nimport { stat } from \"node:fs/promises\";\nimport { isAbsolute, relative, resolve, sep } from \"node:path\";\nimport type { StreamFn } from \"@agent-forge/agent-core\";\nimport type { CredentialStore } from \"@agent-forge/ai\";\nimport type { Api, Model } from \"@agent-forge/ai/compat\";\nimport type { ThinkingLevel } from \"@agent-forge/protocol\";\nimport type { AgentSession } from \"../core/agent-session.ts\";\nimport type { AgentTaskAdapter } from \"../core/extensions/public-api.ts\";\nimport type { HostLogger } from \"../core/logger.ts\";\nimport type { ModelRuntime } from \"../core/model-runtime.ts\";\nimport { createAgentSession } from \"../core/sdk.ts\";\nimport { type SessionInfo, SessionManager } from \"../core/session-manager.ts\";\nimport type { SessionStorageProvider } from \"../core/session-storage.ts\";\nimport type { SettingsManager } from \"../core/settings-manager.ts\";\nimport type { DurableServiceV1 } from \"../durable/durable-service.ts\";\nimport type { CodingAgentServerSessionSource, CodingAgentSessionDescriptor } from \"./server-assembly.ts\";\n\n/** Configuration for a file-backed session source. */\nexport interface FileSessionSourceOptions {\n\t/** Absolute path to the sessions directory containing `.jsonl` files. */\n\treadonly sessionsDir: string;\n\t/**\n\t * Fallback working directory. Opens of legacy session files that recorded\n\t * no cwd (`SessionInfo.cwd` is `\"\"`) run here, and so do creates whose\n\t * descriptor carries no cwd. Sessions always prefer their own cwd:\n\t * `descriptor.cwd` at create, the recorded cwd at open.\n\t */\n\treadonly cwd: string;\n\t/** Absolute path to the agent config directory (defaults to `~/.agent-forge/agent`). */\n\treadonly agentDir?: string;\n\t/** Optional pre-built model runtime; created from `agentDir` when omitted. */\n\treadonly modelRuntime?: ModelRuntime;\n\t/** Optional explicit stream function (faux providers in tests). */\n\treadonly streamFn?: StreamFn;\n\t/** Optional explicit model to attach on creation. */\n\treadonly model?: Model<Api>;\n\t/** Optional thinking level for new sessions. */\n\treadonly thinkingLevel?: ThinkingLevel;\n\t/** Optional pre-built settings manager. */\n\treadonly settingsManager?: SettingsManager;\n\t/** Opt-in workspace boundary: when provided, `create` rejects descriptors whose resolved cwd is not inside one of these roots. The check is purely lexical (`path.resolve` normalization); symlinks are not resolved. Omit for unrestricted local-trust operation; `open` is not gated (it reopens sessions already on disk). */\n\treadonly workspaceRoots?: readonly string[];\n\t/**\n\t * Storage seam for the session records (D-067 phase 1). Defaults to the\n\t * local JSONL file protocol; hosts may inject an alternative provider and\n\t * every session this source builds uses it.\n\t */\n\treadonly storage?: SessionStorageProvider;\n\t/**\n\t * Credential storage for the model runtime each session builds (D-067\n\t * phase 1): forwarded to the default `ModelRuntime` construction. Ignored\n\t * when `modelRuntime` is supplied explicitly. Defaults to the file at\n\t * `<agentDir>/auth.json`.\n\t */\n\treadonly credentials?: CredentialStore;\n\t/**\n\t * Host-process logger forwarded into every session this source builds\n\t * (D-067 phase 1 seam: serve sessions previously had no logger at all —\n\t * the SDK treats an absent logger as an explicit no-op).\n\t */\n\treadonly hostLogger?: HostLogger;\n\t/**\n\t * Durable replay channel for agent task terminal outcomes, forwarded into\n\t * every session this source builds (agent-result-replay-v1). The host owns\n\t * the store and the writer claim; the writerId must be the same one the\n\t * server assembly claims so a single writer serves the whole process.\n\t */\n\treadonly agentTaskResults?: {\n\t\treadonly store: DurableServiceV1;\n\t\treadonly writerId: string;\n\t};\n\t/**\n\t * 本进程自身入口可信（承载退役切片 2）：转发给每个会话的装配域，delegate 在未\n\t * 显式配置池且 self-invocation 可解析时自动池化——serve 装配用它给会话一个\n\t * 委派载体。SDK 嵌入方不传则委派面不注册。\n\t */\n\treadonly subagentPoolFromSelfInvocation?: boolean;\n\t/**\n\t * Per-session agent task carrier factory（承载退役切片 2）：source 装配的每个\n\t * 会话没有默认子任务 creator；SDK 嵌入方可用它按会话绑定父身份注入 in-process\n\t * 或池化 adapter（生产 serve 走 `subagentPoolFromSelfInvocation`）。\n\t */\n\treadonly createAgentTaskAdapter?: (parent: { readonly sessionId: string }) => AgentTaskAdapter;\n}\n\n/**\n * Maps a `SessionInfo` from `SessionManager.listAll` to a\n * `CodingAgentSessionDescriptor` visible to the server boundary.\n */\nfunction infoToDescriptor(info: SessionInfo): CodingAgentSessionDescriptor {\n\treturn {\n\t\tid: info.id,\n\t\t...(info.name === undefined ? {} : { name: info.name }),\n\t\t// Legacy session files recorded no cwd (empty string); omit the field\n\t\t// like `name` instead of leaking a protocol-invalid empty cwd.\n\t\t...(info.cwd === \"\" ? {} : { cwd: info.cwd }),\n\t\t// Profile lock recorded in the header at creation; omit the keys when\n\t\t// absent so descriptors keep the protocol's optional-field semantics\n\t\t// and reopened-session snapshots echo exactly what was persisted.\n\t\t...(info.profileId === undefined ? {} : { profileId: info.profileId }),\n\t\t...(info.profileVersion === undefined ? {} : { profileVersion: info.profileVersion }),\n\t\tcreatedAt: info.created.getTime(),\n\t\tupdatedAt: info.modified.getTime(),\n\t};\n}\n\n/**\n * Shared logic to reconstruct an `AgentSession` from an existing\n * `SessionManager` instance (used by both `create` and `open`). `cwd` is the\n * session's own working directory — the one the descriptor recorded at create\n * (or the recorded cwd at open) — and drives tool ctx, resource discovery, and\n * the agents.md chain for this session regardless of the host-level fallback.\n * Optional `overrides` carry per-session descriptor values; they win over the\n * host-level `options` defaults.\n */\nasync function buildSession(\n\tsessionManager: SessionManager,\n\toptions: FileSessionSourceOptions,\n\tcwd: string,\n\toverrides?: { readonly model?: Model<Api>; readonly thinkingLevel?: ThinkingLevel },\n): Promise<AgentSession> {\n\tconst model = overrides?.model ?? options.model;\n\tconst thinkingLevel = overrides?.thinkingLevel ?? options.thinkingLevel;\n\tconst { session } = await createAgentSession({\n\t\tcwd,\n\t\t...(options.agentDir === undefined ? {} : { agentDir: options.agentDir }),\n\t\tsessionManager,\n\t\t...(options.modelRuntime === undefined ? {} : { modelRuntime: options.modelRuntime }),\n\t\t...(options.streamFn === undefined ? {} : { streamFn: options.streamFn }),\n\t\t...(model === undefined ? {} : { model }),\n\t\t...(thinkingLevel === undefined ? {} : { thinkingLevel }),\n\t\t...(options.settingsManager === undefined ? {} : { settingsManager: options.settingsManager }),\n\t\t...(options.credentials === undefined ? {} : { credentials: options.credentials }),\n\t\t...(options.hostLogger === undefined ? {} : { hostLogger: options.hostLogger }),\n\t\t...(options.agentTaskResults === undefined ? {} : { agentTaskResults: options.agentTaskResults }),\n\t\t...(options.subagentPoolFromSelfInvocation === undefined\n\t\t\t? {}\n\t\t\t: { subagentPoolFromSelfInvocation: options.subagentPoolFromSelfInvocation }),\n\t\t...(options.createAgentTaskAdapter === undefined\n\t\t\t? {}\n\t\t\t: {\n\t\t\t\t\tagentTaskAdapter: options.createAgentTaskAdapter({ sessionId: sessionManager.getSessionId() }),\n\t\t\t\t}),\n\t});\n\treturn session;\n}\n\n/**\n * Enforces the opt-in workspace boundary for `create`. Both the root and the\n * final cwd are resolved first; the cwd is inside when it is the root itself\n * or a descendant. On win32 `path.relative` compares case-insensitively by\n * platform default and yields an absolute path across drive letters, which\n * fails the containment check naturally. Throws a plain `Error` (matching the\n * existing session-source convention) so the server boundary maps it to a\n * request-class protocol error with the original message.\n */\nfunction assertWithinWorkspaceRoots(cwd: string, roots: readonly string[] | undefined): void {\n\tif (roots === undefined) return;\n\tconst resolvedCwd = resolve(cwd);\n\tfor (const root of roots) {\n\t\tconst resolvedRoot = resolve(root);\n\t\tconst rel = relative(resolvedRoot, resolvedCwd);\n\t\t// `rel === \"\"` means the cwd is the root itself, which is allowed. The\n\t\t// escape check is segment-precise so in-root entries that merely start\n\t\t// with \"..\" (e.g. `..foo`) are not mistaken for parent escapes.\n\t\tif (rel === \"\" || (!isAbsolute(rel) && rel !== \"..\" && !rel.startsWith(`..${sep}`))) return;\n\t}\n\tthrow new Error(\n\t\t`cwd \"${resolvedCwd}\" is outside the configured workspace roots: [${roots.map((root) => resolve(root)).join(\", \")}]`,\n\t);\n}\n\n/**\n * `create` targets a fresh session workspace, so a missing or non-directory\n * cwd must fail the create with a clear, path-bearing error instead of\n * producing a session whose tools fail on their first relative access.\n * `open` re-opens sessions already recorded on disk and is not gated. The\n * plain `Error` matches the session-source convention; the server boundary\n * maps it to an `invalid_request` protocol error with the original message.\n */\nasync function assertCwdIsDirectory(cwd: string): Promise<void> {\n\tconst stats = await stat(cwd).catch((error: unknown) => {\n\t\tif ((error as NodeJS.ErrnoException).code === \"ENOENT\") return undefined;\n\t\tthrow error;\n\t});\n\tif (stats === undefined) {\n\t\tthrow new Error(`Cannot create session: cwd does not exist: ${cwd}`);\n\t}\n\tif (!stats.isDirectory()) {\n\t\tthrow new Error(`Cannot create session: cwd is not a directory: ${cwd}`);\n\t}\n}\n\n/**\n * Creates a production `CodingAgentServerSessionSource` backed by on-disk\n * `.jsonl` session files in `sessionsDir`.\n */\nexport function createFileSessionSource(options: FileSessionSourceOptions): CodingAgentServerSessionSource {\n\tconst sessionsDir = resolve(options.sessionsDir);\n\n\treturn {\n\t\tasync list(): Promise<readonly CodingAgentSessionDescriptor[]> {\n\t\t\tconst infos = await SessionManager.listAll(sessionsDir);\n\t\t\treturn infos.map(infoToDescriptor);\n\t\t},\n\n\t\t/**\n\t\t * Creates a session in the descriptor cwd (or the host-level fallback).\n\t\t * The final cwd must be inside the configured workspace roots (when\n\t\t * provided) and must exist as a directory; both checks run before any\n\t\t * session file is written, so a rejected create leaves the disk\n\t\t * untouched.\n\t\t */\n\t\tasync create(descriptor: CodingAgentSessionDescriptor): Promise<AgentSession> {\n\t\t\t// The server boundary rejects cwd-less creates; a direct host call\n\t\t\t// falls back to the host-level cwd like legacy opens.\n\t\t\tconst cwd = descriptor.cwd === undefined || descriptor.cwd === \"\" ? options.cwd : descriptor.cwd;\n\t\t\tassertWithinWorkspaceRoots(cwd, options.workspaceRoots);\n\t\t\tawait assertCwdIsDirectory(cwd);\n\t\t\tconst sm = SessionManager.create(\n\t\t\t\tcwd,\n\t\t\t\tsessionsDir,\n\t\t\t\t{\n\t\t\t\t\tid: descriptor.id,\n\t\t\t\t\t// Creation-time profile lock, persisted into the session header so\n\t\t\t\t\t// it survives restarts (read back via `list`/`open` descriptors).\n\t\t\t\t\t...(descriptor.profileId === undefined ? {} : { profileId: descriptor.profileId }),\n\t\t\t\t\t...(descriptor.profileVersion === undefined ? {} : { profileVersion: descriptor.profileVersion }),\n\t\t\t\t},\n\t\t\t\toptions.storage,\n\t\t\t);\n\t\t\treturn buildSession(sm, options, cwd, {\n\t\t\t\t...(descriptor.model === undefined ? {} : { model: descriptor.model }),\n\t\t\t\t...(descriptor.thinkingLevel === undefined ? {} : { thinkingLevel: descriptor.thinkingLevel }),\n\t\t\t});\n\t\t},\n\n\t\tasync open(descriptor: CodingAgentSessionDescriptor): Promise<AgentSession> {\n\t\t\t// Re-scan to locate the session file path for the given id.\n\t\t\tconst infos = await SessionManager.listAll(sessionsDir);\n\t\t\tconst match = infos.find((info) => info.id === descriptor.id);\n\t\t\tif (!match) {\n\t\t\t\tthrow new Error(`Session not found: ${descriptor.id}`);\n\t\t\t}\n\t\t\t// The session file records the cwd it ran in; legacy files may have\n\t\t\t// none (empty string), which falls back to the host-level cwd. The\n\t\t\t// override keeps the SessionManager cwd consistent with the build\n\t\t\t// cwd for consumers of `getCwd()` (extension surface, snapshot).\n\t\t\tconst cwd = match.cwd === \"\" ? options.cwd : match.cwd;\n\t\t\tconst sm = SessionManager.open(match.path, sessionsDir, cwd, options.storage);\n\t\t\treturn buildSession(sm, options, cwd);\n\t\t},\n\t};\n}\n"]}

package/dist/rpc-entry.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=rpc-entry.d.ts.map

package/dist/rpc-entry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rpc-entry.d.ts","sourceRoot":"","sources":["../src/rpc-entry.ts"],"names":[],"mappings":"","sourcesContent":["#!/usr/bin/env node\nimport { APP_NAME } from \"./config.ts\";\nimport { configureHttpDispatcher } from \"./core/http-dispatcher.ts\";\nimport { main } from \"./main.ts\";\n\nprocess.title = `${APP_NAME}-rpc`;\nprocess.env.AGENT_FORGE = \"true\";\nprocess.env.AI_AGENT = \"agent-forge\";\nprocess.emitWarning = (() => {}) as typeof process.emitWarning;\n\nconfigureHttpDispatcher();\n\nmain([\"--mode\", \"rpc\", ...process.argv.slice(2)]);\n"]}

package/dist/rpc-entry.js

@@ -0,0 +1,11 @@
+#!/usr/bin/env node
+import { APP_NAME } from "./config.js";
+import { configureHttpDispatcher } from "./core/http-dispatcher.js";
+import { main } from "./main.js";
+process.title = `${APP_NAME}-rpc`;
+process.env.AGENT_FORGE = "true";
+process.env.AI_AGENT = "agent-forge";
+process.emitWarning = (() => { });
+configureHttpDispatcher();
+main(["--mode", "rpc", ...process.argv.slice(2)]);
+//# sourceMappingURL=rpc-entry.js.map

package/dist/rpc-entry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rpc-entry.js","sourceRoot":"","sources":["../src/rpc-entry.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,CAAC,KAAK,GAAG,GAAG,QAAQ,MAAM,CAAC;AAClC,OAAO,CAAC,GAAG,CAAC,WAAW,GAAG,MAAM,CAAC;AACjC,OAAO,CAAC,GAAG,CAAC,QAAQ,GAAG,aAAa,CAAC;AACrC,OAAO,CAAC,WAAW,GAAG,CAAC,GAAG,EAAE,CAAC,EAAC,CAAC,CAA+B,CAAC;AAE/D,uBAAuB,EAAE,CAAC;AAE1B,IAAI,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC","sourcesContent":["#!/usr/bin/env node\nimport { APP_NAME } from \"./config.ts\";\nimport { configureHttpDispatcher } from \"./core/http-dispatcher.ts\";\nimport { main } from \"./main.ts\";\n\nprocess.title = `${APP_NAME}-rpc`;\nprocess.env.AGENT_FORGE = \"true\";\nprocess.env.AI_AGENT = \"agent-forge\";\nprocess.emitWarning = (() => {}) as typeof process.emitWarning;\n\nconfigureHttpDispatcher();\n\nmain([\"--mode\", \"rpc\", ...process.argv.slice(2)]);\n"]}

package/dist/server/create-harness.d.ts

@@ -0,0 +1,26 @@
+import { AgentHarness, type AgentHarnessOptions, type ExecutionEnv, type HarnessTool } from "@agent-forge/agent-core";
+import { type BuildSystemPromptOptions } from "../core/system-prompt.ts";
+export interface CodingAgentHarnessTool extends HarnessTool {
+    promptSnippet?: string;
+    promptGuidelines?: readonly string[];
+}
+export interface CreateCodingAgentHarnessOptions extends Omit<AgentHarnessOptions, "toolContext" | "tools"> {
+    env: ExecutionEnv;
+    bashCommandPrefix?: string;
+    /** Path to the JSONL session file exposed to default bash commands as AGENT_FORGE_SESSION_FILE. */
+    sessionFile?: string;
+    tools?: CodingAgentHarnessTool[];
+    systemPromptOptions?: Omit<BuildSystemPromptOptions, "cwd" | "promptGuidelines" | "selectedTools" | "toolSnippets">;
+}
+export interface BuildCodingAgentHarnessSystemPromptOptions {
+    cwd: string;
+    tools: readonly CodingAgentHarnessTool[];
+    activeToolNames: readonly string[];
+    systemPromptOptions?: CreateCodingAgentHarnessOptions["systemPromptOptions"];
+}
+export declare function buildCodingAgentHarnessSystemPrompt(options: BuildCodingAgentHarnessSystemPromptOptions): string;
+export declare function createCodingAgentHarness(options: CreateCodingAgentHarnessOptions): Promise<{
+    harness: AgentHarness;
+    suspended: import("@agent-forge/agent-core").SuspendedOperation[];
+}>;
+//# sourceMappingURL=create-harness.d.ts.map

package/dist/server/create-harness.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-harness.d.ts","sourceRoot":"","sources":["../../src/server/create-harness.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,YAAY,EACZ,KAAK,mBAAmB,EAMxB,KAAK,YAAY,EAEjB,KAAK,WAAW,EAChB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EAAE,KAAK,wBAAwB,EAAqB,MAAM,0BAA0B,CAAC;AAM5F,MAAM,WAAW,sBAAuB,SAAQ,WAAW;IAC1D,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gBAAgB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACrC;AAgBD,MAAM,WAAW,+BAAgC,SAAQ,IAAI,CAAC,mBAAmB,EAAE,aAAa,GAAG,OAAO,CAAC;IAC1G,GAAG,EAAE,YAAY,CAAC;IAClB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,mGAAmG;IACnG,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,sBAAsB,EAAE,CAAC;IACjC,mBAAmB,CAAC,EAAE,IAAI,CAAC,wBAAwB,EAAE,KAAK,GAAG,kBAAkB,GAAG,eAAe,GAAG,cAAc,CAAC,CAAC;CACpH;AAED,MAAM,WAAW,0CAA0C;IAC1D,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,SAAS,sBAAsB,EAAE,CAAC;IACzC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,mBAAmB,CAAC,EAAE,+BAA+B,CAAC,qBAAqB,CAAC,CAAC;CAC7E;AAED,wBAAgB,mCAAmC,CAAC,OAAO,EAAE,0CAA0C,GAAG,MAAM,CAsB/G;AAED,wBAAsB,wBAAwB,CAAC,OAAO,EAAE,+BAA+B;;;GAkFtF","sourcesContent":["import {\n\tAgentHarness,\n\ttype AgentHarnessOptions,\n\ttype AgentHarnessTool,\n\tcreateBashTool,\n\tcreateEditTool,\n\tcreateReadTool,\n\tcreateWriteTool,\n\ttype ExecutionEnv,\n\ttype ExecutionToolContext,\n\ttype HarnessTool,\n} from \"@agent-forge/agent-core\";\nimport type { Static, TSchema } from \"typebox\";\nimport { type BuildSystemPromptOptions, buildSystemPrompt } from \"../core/system-prompt.ts\";\nimport { bashToolSystemPromptContribution } from \"../core/tools/bash.ts\";\nimport { editToolSystemPromptContribution } from \"../core/tools/edit.ts\";\nimport { readToolSystemPromptContribution } from \"../core/tools/read.ts\";\nimport { writeToolSystemPromptContribution } from \"../core/tools/write.ts\";\n\nexport interface CodingAgentHarnessTool extends HarnessTool {\n\tpromptSnippet?: string;\n\tpromptGuidelines?: readonly string[];\n}\n\nfunction createCodingAgentHarnessTool<TParameters extends TSchema, TDetails>(\n\ttool: AgentHarnessTool<ExecutionToolContext, TParameters, TDetails>,\n\tcontext: ExecutionToolContext,\n\tprompt: Required<Pick<CodingAgentHarnessTool, \"promptSnippet\" | \"promptGuidelines\">>,\n): CodingAgentHarnessTool {\n\treturn {\n\t\t...tool,\n\t\t...prompt,\n\t\tconstrainedSampling: { type: \"json_schema\", strict: \"prefer\" },\n\t\texecute: (toolCallId, params, signal, onUpdate) =>\n\t\t\ttool.execute(toolCallId, params as Static<TParameters>, signal, onUpdate, context),\n\t};\n}\n\nexport interface CreateCodingAgentHarnessOptions extends Omit<AgentHarnessOptions, \"toolContext\" | \"tools\"> {\n\tenv: ExecutionEnv;\n\tbashCommandPrefix?: string;\n\t/** Path to the JSONL session file exposed to default bash commands as AGENT_FORGE_SESSION_FILE. */\n\tsessionFile?: string;\n\ttools?: CodingAgentHarnessTool[];\n\tsystemPromptOptions?: Omit<BuildSystemPromptOptions, \"cwd\" | \"promptGuidelines\" | \"selectedTools\" | \"toolSnippets\">;\n}\n\nexport interface BuildCodingAgentHarnessSystemPromptOptions {\n\tcwd: string;\n\ttools: readonly CodingAgentHarnessTool[];\n\tactiveToolNames: readonly string[];\n\tsystemPromptOptions?: CreateCodingAgentHarnessOptions[\"systemPromptOptions\"];\n}\n\nexport function buildCodingAgentHarnessSystemPrompt(options: BuildCodingAgentHarnessSystemPromptOptions): string {\n\tconst activeTools = options.activeToolNames.flatMap((name) => {\n\t\tconst tool = options.tools.find((candidate) => candidate.name === name);\n\t\treturn tool ? [tool] : [];\n\t});\n\tconst toolSnippets = Object.fromEntries(\n\t\tactiveTools.flatMap((tool) => {\n\t\t\tconst promptSnippet = tool.promptSnippet\n\t\t\t\t?.replace(/[\\r\\n]+/g, \" \")\n\t\t\t\t.replace(/\\s+/g, \" \")\n\t\t\t\t.trim();\n\t\t\treturn promptSnippet ? [[tool.name, promptSnippet]] : [];\n\t\t}),\n\t);\n\tconst promptGuidelines = activeTools.flatMap((tool) => tool.promptGuidelines ?? []);\n\treturn buildSystemPrompt({\n\t\t...options.systemPromptOptions,\n\t\tcwd: options.cwd,\n\t\tselectedTools: activeTools.map((tool) => tool.name),\n\t\ttoolSnippets,\n\t\tpromptGuidelines,\n\t});\n}\n\nexport async function createCodingAgentHarness(options: CreateCodingAgentHarnessOptions) {\n\tconst {\n\t\tenv,\n\t\tbashCommandPrefix,\n\t\tsessionFile,\n\t\tsystemPromptOptions,\n\t\ttools: providedTools,\n\t\tactiveToolNames: providedActiveToolNames,\n\t\tsystemPrompt: providedSystemPrompt,\n\t\t...harnessOptions\n\t} = options;\n\tlet harness: AgentHarness | undefined;\n\tconst getHarness = (): AgentHarness => {\n\t\t// v8 ignore next -- harness 在 create 返回后同步赋值，回调只会在其后执行\n\t\tif (!harness) throw new Error(\"Coding-agent Harness callback ran before Harness initialization\");\n\t\treturn harness;\n\t};\n\tlet tools = providedTools;\n\tif (tools === undefined) {\n\t\tconst metadata = await options.session.getMetadata();\n\t\tconst toolContext = { env } satisfies ExecutionToolContext;\n\t\ttools = [\n\t\t\tcreateCodingAgentHarnessTool(createReadTool<ExecutionToolContext>(), toolContext, {\n\t\t\t\tpromptSnippet: readToolSystemPromptContribution.snippet,\n\t\t\t\tpromptGuidelines: readToolSystemPromptContribution.guidelines,\n\t\t\t}),\n\t\t\tcreateCodingAgentHarnessTool(\n\t\t\t\tcreateBashTool<ExecutionToolContext>({\n\t\t\t\t\tcommandPrefix: bashCommandPrefix,\n\t\t\t\t\tprepare: async (execution) => {\n\t\t\t\t\t\tconst currentHarness = getHarness();\n\t\t\t\t\t\tconst [model, thinkingLevel] = await Promise.all([\n\t\t\t\t\t\t\tcurrentHarness.getModel(),\n\t\t\t\t\t\t\tcurrentHarness.getThinkingLevel(),\n\t\t\t\t\t\t]);\n\t\t\t\t\t\texecution.env.AGENT_FORGE_SESSION_ID = metadata.id;\n\t\t\t\t\t\texecution.env.AGENT_FORGE_SESSION_FILE = sessionFile ?? \"\";\n\t\t\t\t\t\texecution.env.AGENT_FORGE_PROVIDER = model.provider;\n\t\t\t\t\t\texecution.env.AGENT_FORGE_MODEL = model.id;\n\t\t\t\t\t\texecution.env.AGENT_FORGE_REASONING_LEVEL = thinkingLevel;\n\t\t\t\t\t},\n\t\t\t\t}),\n\t\t\t\ttoolContext,\n\t\t\t\t{\n\t\t\t\t\tpromptSnippet: bashToolSystemPromptContribution.snippet,\n\t\t\t\t\tpromptGuidelines: bashToolSystemPromptContribution.guidelines,\n\t\t\t\t},\n\t\t\t),\n\t\t\tcreateCodingAgentHarnessTool(createEditTool<ExecutionToolContext>(), toolContext, {\n\t\t\t\tpromptSnippet: editToolSystemPromptContribution.snippet,\n\t\t\t\tpromptGuidelines: editToolSystemPromptContribution.guidelines,\n\t\t\t}),\n\t\t\tcreateCodingAgentHarnessTool(createWriteTool<ExecutionToolContext>(), toolContext, {\n\t\t\t\tpromptSnippet: writeToolSystemPromptContribution.snippet,\n\t\t\t\tpromptGuidelines: writeToolSystemPromptContribution.guidelines,\n\t\t\t}),\n\t\t];\n\t}\n\tconst activeToolNames = [...(providedActiveToolNames ?? tools.map((tool) => tool.name))];\n\tconst systemPrompt =\n\t\tprovidedSystemPrompt ??\n\t\t(async () => {\n\t\t\tconst currentHarness = getHarness();\n\t\t\tconst [currentTools, currentActiveToolNames] = await Promise.all([\n\t\t\t\tcurrentHarness.getTools(),\n\t\t\t\tcurrentHarness.getActiveTools(),\n\t\t\t]);\n\t\t\treturn buildCodingAgentHarnessSystemPrompt({\n\t\t\t\tcwd: env.cwd,\n\t\t\t\ttools: currentTools,\n\t\t\t\tactiveToolNames: currentActiveToolNames,\n\t\t\t\tsystemPromptOptions,\n\t\t\t});\n\t\t});\n\tconst created = await AgentHarness.create({\n\t\t...harnessOptions,\n\t\ttools,\n\t\tactiveToolNames,\n\t\tsystemPrompt,\n\t});\n\tharness = created.harness;\n\treturn created;\n}\n"]}

package/dist/server/create-harness.js

@@ -0,0 +1,106 @@
+import { AgentHarness, createBashTool, createEditTool, createReadTool, createWriteTool, } from "@agent-forge/agent-core";
+import { buildSystemPrompt } from "../core/system-prompt.js";
+import { bashToolSystemPromptContribution } from "../core/tools/bash.js";
+import { editToolSystemPromptContribution } from "../core/tools/edit.js";
+import { readToolSystemPromptContribution } from "../core/tools/read.js";
+import { writeToolSystemPromptContribution } from "../core/tools/write.js";
+function createCodingAgentHarnessTool(tool, context, prompt) {
+    return {
+        ...tool,
+        ...prompt,
+        constrainedSampling: { type: "json_schema", strict: "prefer" },
+        execute: (toolCallId, params, signal, onUpdate) => tool.execute(toolCallId, params, signal, onUpdate, context),
+    };
+}
+export function buildCodingAgentHarnessSystemPrompt(options) {
+    const activeTools = options.activeToolNames.flatMap((name) => {
+        const tool = options.tools.find((candidate) => candidate.name === name);
+        return tool ? [tool] : [];
+    });
+    const toolSnippets = Object.fromEntries(activeTools.flatMap((tool) => {
+        const promptSnippet = tool.promptSnippet
+            ?.replace(/[\r\n]+/g, " ")
+            .replace(/\s+/g, " ")
+            .trim();
+        return promptSnippet ? [[tool.name, promptSnippet]] : [];
+    }));
+    const promptGuidelines = activeTools.flatMap((tool) => tool.promptGuidelines ?? []);
+    return buildSystemPrompt({
+        ...options.systemPromptOptions,
+        cwd: options.cwd,
+        selectedTools: activeTools.map((tool) => tool.name),
+        toolSnippets,
+        promptGuidelines,
+    });
+}
+export async function createCodingAgentHarness(options) {
+    const { env, bashCommandPrefix, sessionFile, systemPromptOptions, tools: providedTools, activeToolNames: providedActiveToolNames, systemPrompt: providedSystemPrompt, ...harnessOptions } = options;
+    let harness;
+    const getHarness = () => {
+        // v8 ignore next -- harness 在 create 返回后同步赋值，回调只会在其后执行
+        if (!harness)
+            throw new Error("Coding-agent Harness callback ran before Harness initialization");
+        return harness;
+    };
+    let tools = providedTools;
+    if (tools === undefined) {
+        const metadata = await options.session.getMetadata();
+        const toolContext = { env };
+        tools = [
+            createCodingAgentHarnessTool(createReadTool(), toolContext, {
+                promptSnippet: readToolSystemPromptContribution.snippet,
+                promptGuidelines: readToolSystemPromptContribution.guidelines,
+            }),
+            createCodingAgentHarnessTool(createBashTool({
+                commandPrefix: bashCommandPrefix,
+                prepare: async (execution) => {
+                    const currentHarness = getHarness();
+                    const [model, thinkingLevel] = await Promise.all([
+                        currentHarness.getModel(),
+                        currentHarness.getThinkingLevel(),
+                    ]);
+                    execution.env.AGENT_FORGE_SESSION_ID = metadata.id;
+                    execution.env.AGENT_FORGE_SESSION_FILE = sessionFile ?? "";
+                    execution.env.AGENT_FORGE_PROVIDER = model.provider;
+                    execution.env.AGENT_FORGE_MODEL = model.id;
+                    execution.env.AGENT_FORGE_REASONING_LEVEL = thinkingLevel;
+                },
+            }), toolContext, {
+                promptSnippet: bashToolSystemPromptContribution.snippet,
+                promptGuidelines: bashToolSystemPromptContribution.guidelines,
+            }),
+            createCodingAgentHarnessTool(createEditTool(), toolContext, {
+                promptSnippet: editToolSystemPromptContribution.snippet,
+                promptGuidelines: editToolSystemPromptContribution.guidelines,
+            }),
+            createCodingAgentHarnessTool(createWriteTool(), toolContext, {
+                promptSnippet: writeToolSystemPromptContribution.snippet,
+                promptGuidelines: writeToolSystemPromptContribution.guidelines,
+            }),
+        ];
+    }
+    const activeToolNames = [...(providedActiveToolNames ?? tools.map((tool) => tool.name))];
+    const systemPrompt = providedSystemPrompt ??
+        (async () => {
+            const currentHarness = getHarness();
+            const [currentTools, currentActiveToolNames] = await Promise.all([
+                currentHarness.getTools(),
+                currentHarness.getActiveTools(),
+            ]);
+            return buildCodingAgentHarnessSystemPrompt({
+                cwd: env.cwd,
+                tools: currentTools,
+                activeToolNames: currentActiveToolNames,
+                systemPromptOptions,
+            });
+        });
+    const created = await AgentHarness.create({
+        ...harnessOptions,
+        tools,
+        activeToolNames,
+        systemPrompt,
+    });
+    harness = created.harness;
+    return created;
+}
+//# sourceMappingURL=create-harness.js.map

package/dist/server/create-harness.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-harness.js","sourceRoot":"","sources":["../../src/server/create-harness.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,YAAY,EAGZ,cAAc,EACd,cAAc,EACd,cAAc,EACd,eAAe,GAIf,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EAAiC,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC5F,OAAO,EAAE,gCAAgC,EAAE,MAAM,uBAAuB,CAAC;AACzE,OAAO,EAAE,gCAAgC,EAAE,MAAM,uBAAuB,CAAC;AACzE,OAAO,EAAE,gCAAgC,EAAE,MAAM,uBAAuB,CAAC;AACzE,OAAO,EAAE,iCAAiC,EAAE,MAAM,wBAAwB,CAAC;AAO3E,SAAS,4BAA4B,CACpC,IAAmE,EACnE,OAA6B,EAC7B,MAAoF,EAC3D;IACzB,OAAO;QACN,GAAG,IAAI;QACP,GAAG,MAAM;QACT,mBAAmB,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,QAAQ,EAAE;QAC9D,OAAO,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,CACjD,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,MAA6B,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC;KACnF,CAAC;AAAA,CACF;AAkBD,MAAM,UAAU,mCAAmC,CAAC,OAAmD,EAAU;IAChH,MAAM,WAAW,GAAG,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QAC7D,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QACxE,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAAA,CAC1B,CAAC,CAAC;IACH,MAAM,YAAY,GAAG,MAAM,CAAC,WAAW,CACtC,WAAW,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QAC7B,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa;YACvC,EAAE,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC;aACzB,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;aACpB,IAAI,EAAE,CAAC;QACT,OAAO,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAAA,CACzD,CAAC,CACF,CAAC;IACF,MAAM,gBAAgB,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC;IACpF,OAAO,iBAAiB,CAAC;QACxB,GAAG,OAAO,CAAC,mBAAmB;QAC9B,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,aAAa,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;QACnD,YAAY;QACZ,gBAAgB;KAChB,CAAC,CAAC;AAAA,CACH;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,OAAwC,EAAE;IACxF,MAAM,EACL,GAAG,EACH,iBAAiB,EACjB,WAAW,EACX,mBAAmB,EACnB,KAAK,EAAE,aAAa,EACpB,eAAe,EAAE,uBAAuB,EACxC,YAAY,EAAE,oBAAoB,EAClC,GAAG,cAAc,EACjB,GAAG,OAAO,CAAC;IACZ,IAAI,OAAiC,CAAC;IACtC,MAAM,UAAU,GAAG,GAAiB,EAAE,CAAC;QACtC,2FAAuD;QACvD,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;QACjG,OAAO,OAAO,CAAC;IAAA,CACf,CAAC;IACF,IAAI,KAAK,GAAG,aAAa,CAAC;IAC1B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;QACrD,MAAM,WAAW,GAAG,EAAE,GAAG,EAAiC,CAAC;QAC3D,KAAK,GAAG;YACP,4BAA4B,CAAC,cAAc,EAAwB,EAAE,WAAW,EAAE;gBACjF,aAAa,EAAE,gCAAgC,CAAC,OAAO;gBACvD,gBAAgB,EAAE,gCAAgC,CAAC,UAAU;aAC7D,CAAC;YACF,4BAA4B,CAC3B,cAAc,CAAuB;gBACpC,aAAa,EAAE,iBAAiB;gBAChC,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,CAAC;oBAC7B,MAAM,cAAc,GAAG,UAAU,EAAE,CAAC;oBACpC,MAAM,CAAC,KAAK,EAAE,aAAa,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;wBAChD,cAAc,CAAC,QAAQ,EAAE;wBACzB,cAAc,CAAC,gBAAgB,EAAE;qBACjC,CAAC,CAAC;oBACH,SAAS,CAAC,GAAG,CAAC,sBAAsB,GAAG,QAAQ,CAAC,EAAE,CAAC;oBACnD,SAAS,CAAC,GAAG,CAAC,wBAAwB,GAAG,WAAW,IAAI,EAAE,CAAC;oBAC3D,SAAS,CAAC,GAAG,CAAC,oBAAoB,GAAG,KAAK,CAAC,QAAQ,CAAC;oBACpD,SAAS,CAAC,GAAG,CAAC,iBAAiB,GAAG,KAAK,CAAC,EAAE,CAAC;oBAC3C,SAAS,CAAC,GAAG,CAAC,2BAA2B,GAAG,aAAa,CAAC;gBAAA,CAC1D;aACD,CAAC,EACF,WAAW,EACX;gBACC,aAAa,EAAE,gCAAgC,CAAC,OAAO;gBACvD,gBAAgB,EAAE,gCAAgC,CAAC,UAAU;aAC7D,CACD;YACD,4BAA4B,CAAC,cAAc,EAAwB,EAAE,WAAW,EAAE;gBACjF,aAAa,EAAE,gCAAgC,CAAC,OAAO;gBACvD,gBAAgB,EAAE,gCAAgC,CAAC,UAAU;aAC7D,CAAC;YACF,4BAA4B,CAAC,eAAe,EAAwB,EAAE,WAAW,EAAE;gBAClF,aAAa,EAAE,iCAAiC,CAAC,OAAO;gBACxD,gBAAgB,EAAE,iCAAiC,CAAC,UAAU;aAC9D,CAAC;SACF,CAAC;IACH,CAAC;IACD,MAAM,eAAe,GAAG,CAAC,GAAG,CAAC,uBAAuB,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACzF,MAAM,YAAY,GACjB,oBAAoB;QACpB,CAAC,KAAK,IAAI,EAAE,CAAC;YACZ,MAAM,cAAc,GAAG,UAAU,EAAE,CAAC;YACpC,MAAM,CAAC,YAAY,EAAE,sBAAsB,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;gBAChE,cAAc,CAAC,QAAQ,EAAE;gBACzB,cAAc,CAAC,cAAc,EAAE;aAC/B,CAAC,CAAC;YACH,OAAO,mCAAmC,CAAC;gBAC1C,GAAG,EAAE,GAAG,CAAC,GAAG;gBACZ,KAAK,EAAE,YAAY;gBACnB,eAAe,EAAE,sBAAsB;gBACvC,mBAAmB;aACnB,CAAC,CAAC;QAAA,CACH,CAAC,CAAC;IACJ,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC;QACzC,GAAG,cAAc;QACjB,KAAK;QACL,eAAe;QACf,YAAY;KACZ,CAAC,CAAC;IACH,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAC1B,OAAO,OAAO,CAAC;AAAA,CACf","sourcesContent":["import {\n\tAgentHarness,\n\ttype AgentHarnessOptions,\n\ttype AgentHarnessTool,\n\tcreateBashTool,\n\tcreateEditTool,\n\tcreateReadTool,\n\tcreateWriteTool,\n\ttype ExecutionEnv,\n\ttype ExecutionToolContext,\n\ttype HarnessTool,\n} from \"@agent-forge/agent-core\";\nimport type { Static, TSchema } from \"typebox\";\nimport { type BuildSystemPromptOptions, buildSystemPrompt } from \"../core/system-prompt.ts\";\nimport { bashToolSystemPromptContribution } from \"../core/tools/bash.ts\";\nimport { editToolSystemPromptContribution } from \"../core/tools/edit.ts\";\nimport { readToolSystemPromptContribution } from \"../core/tools/read.ts\";\nimport { writeToolSystemPromptContribution } from \"../core/tools/write.ts\";\n\nexport interface CodingAgentHarnessTool extends HarnessTool {\n\tpromptSnippet?: string;\n\tpromptGuidelines?: readonly string[];\n}\n\nfunction createCodingAgentHarnessTool<TParameters extends TSchema, TDetails>(\n\ttool: AgentHarnessTool<ExecutionToolContext, TParameters, TDetails>,\n\tcontext: ExecutionToolContext,\n\tprompt: Required<Pick<CodingAgentHarnessTool, \"promptSnippet\" | \"promptGuidelines\">>,\n): CodingAgentHarnessTool {\n\treturn {\n\t\t...tool,\n\t\t...prompt,\n\t\tconstrainedSampling: { type: \"json_schema\", strict: \"prefer\" },\n\t\texecute: (toolCallId, params, signal, onUpdate) =>\n\t\t\ttool.execute(toolCallId, params as Static<TParameters>, signal, onUpdate, context),\n\t};\n}\n\nexport interface CreateCodingAgentHarnessOptions extends Omit<AgentHarnessOptions, \"toolContext\" | \"tools\"> {\n\tenv: ExecutionEnv;\n\tbashCommandPrefix?: string;\n\t/** Path to the JSONL session file exposed to default bash commands as AGENT_FORGE_SESSION_FILE. */\n\tsessionFile?: string;\n\ttools?: CodingAgentHarnessTool[];\n\tsystemPromptOptions?: Omit<BuildSystemPromptOptions, \"cwd\" | \"promptGuidelines\" | \"selectedTools\" | \"toolSnippets\">;\n}\n\nexport interface BuildCodingAgentHarnessSystemPromptOptions {\n\tcwd: string;\n\ttools: readonly CodingAgentHarnessTool[];\n\tactiveToolNames: readonly string[];\n\tsystemPromptOptions?: CreateCodingAgentHarnessOptions[\"systemPromptOptions\"];\n}\n\nexport function buildCodingAgentHarnessSystemPrompt(options: BuildCodingAgentHarnessSystemPromptOptions): string {\n\tconst activeTools = options.activeToolNames.flatMap((name) => {\n\t\tconst tool = options.tools.find((candidate) => candidate.name === name);\n\t\treturn tool ? [tool] : [];\n\t});\n\tconst toolSnippets = Object.fromEntries(\n\t\tactiveTools.flatMap((tool) => {\n\t\t\tconst promptSnippet = tool.promptSnippet\n\t\t\t\t?.replace(/[\\r\\n]+/g, \" \")\n\t\t\t\t.replace(/\\s+/g, \" \")\n\t\t\t\t.trim();\n\t\t\treturn promptSnippet ? [[tool.name, promptSnippet]] : [];\n\t\t}),\n\t);\n\tconst promptGuidelines = activeTools.flatMap((tool) => tool.promptGuidelines ?? []);\n\treturn buildSystemPrompt({\n\t\t...options.systemPromptOptions,\n\t\tcwd: options.cwd,\n\t\tselectedTools: activeTools.map((tool) => tool.name),\n\t\ttoolSnippets,\n\t\tpromptGuidelines,\n\t});\n}\n\nexport async function createCodingAgentHarness(options: CreateCodingAgentHarnessOptions) {\n\tconst {\n\t\tenv,\n\t\tbashCommandPrefix,\n\t\tsessionFile,\n\t\tsystemPromptOptions,\n\t\ttools: providedTools,\n\t\tactiveToolNames: providedActiveToolNames,\n\t\tsystemPrompt: providedSystemPrompt,\n\t\t...harnessOptions\n\t} = options;\n\tlet harness: AgentHarness | undefined;\n\tconst getHarness = (): AgentHarness => {\n\t\t// v8 ignore next -- harness 在 create 返回后同步赋值，回调只会在其后执行\n\t\tif (!harness) throw new Error(\"Coding-agent Harness callback ran before Harness initialization\");\n\t\treturn harness;\n\t};\n\tlet tools = providedTools;\n\tif (tools === undefined) {\n\t\tconst metadata = await options.session.getMetadata();\n\t\tconst toolContext = { env } satisfies ExecutionToolContext;\n\t\ttools = [\n\t\t\tcreateCodingAgentHarnessTool(createReadTool<ExecutionToolContext>(), toolContext, {\n\t\t\t\tpromptSnippet: readToolSystemPromptContribution.snippet,\n\t\t\t\tpromptGuidelines: readToolSystemPromptContribution.guidelines,\n\t\t\t}),\n\t\t\tcreateCodingAgentHarnessTool(\n\t\t\t\tcreateBashTool<ExecutionToolContext>({\n\t\t\t\t\tcommandPrefix: bashCommandPrefix,\n\t\t\t\t\tprepare: async (execution) => {\n\t\t\t\t\t\tconst currentHarness = getHarness();\n\t\t\t\t\t\tconst [model, thinkingLevel] = await Promise.all([\n\t\t\t\t\t\t\tcurrentHarness.getModel(),\n\t\t\t\t\t\t\tcurrentHarness.getThinkingLevel(),\n\t\t\t\t\t\t]);\n\t\t\t\t\t\texecution.env.AGENT_FORGE_SESSION_ID = metadata.id;\n\t\t\t\t\t\texecution.env.AGENT_FORGE_SESSION_FILE = sessionFile ?? \"\";\n\t\t\t\t\t\texecution.env.AGENT_FORGE_PROVIDER = model.provider;\n\t\t\t\t\t\texecution.env.AGENT_FORGE_MODEL = model.id;\n\t\t\t\t\t\texecution.env.AGENT_FORGE_REASONING_LEVEL = thinkingLevel;\n\t\t\t\t\t},\n\t\t\t\t}),\n\t\t\t\ttoolContext,\n\t\t\t\t{\n\t\t\t\t\tpromptSnippet: bashToolSystemPromptContribution.snippet,\n\t\t\t\t\tpromptGuidelines: bashToolSystemPromptContribution.guidelines,\n\t\t\t\t},\n\t\t\t),\n\t\t\tcreateCodingAgentHarnessTool(createEditTool<ExecutionToolContext>(), toolContext, {\n\t\t\t\tpromptSnippet: editToolSystemPromptContribution.snippet,\n\t\t\t\tpromptGuidelines: editToolSystemPromptContribution.guidelines,\n\t\t\t}),\n\t\t\tcreateCodingAgentHarnessTool(createWriteTool<ExecutionToolContext>(), toolContext, {\n\t\t\t\tpromptSnippet: writeToolSystemPromptContribution.snippet,\n\t\t\t\tpromptGuidelines: writeToolSystemPromptContribution.guidelines,\n\t\t\t}),\n\t\t];\n\t}\n\tconst activeToolNames = [...(providedActiveToolNames ?? tools.map((tool) => tool.name))];\n\tconst systemPrompt =\n\t\tprovidedSystemPrompt ??\n\t\t(async () => {\n\t\t\tconst currentHarness = getHarness();\n\t\t\tconst [currentTools, currentActiveToolNames] = await Promise.all([\n\t\t\t\tcurrentHarness.getTools(),\n\t\t\t\tcurrentHarness.getActiveTools(),\n\t\t\t]);\n\t\t\treturn buildCodingAgentHarnessSystemPrompt({\n\t\t\t\tcwd: env.cwd,\n\t\t\t\ttools: currentTools,\n\t\t\t\tactiveToolNames: currentActiveToolNames,\n\t\t\t\tsystemPromptOptions,\n\t\t\t});\n\t\t});\n\tconst created = await AgentHarness.create({\n\t\t...harnessOptions,\n\t\ttools,\n\t\tactiveToolNames,\n\t\tsystemPrompt,\n\t});\n\tharness = created.harness;\n\treturn created;\n}\n"]}