@ai-workbench/connect 0.7.5 → 0.7.7

package/README.md

@@ -1,4 +1,4 @@
-安装：在 DSH「插件 → 添加插件」填写 `@ai-workbench/connect@0.7.5`，或运行 `dsh plugin --profile desktop add @ai-workbench/connect@0.7.5`。
+安装：在 DSH「插件 → 添加插件」填写 `@ai-workbench/connect@0.7.7`，或运行 `dsh plugin --profile desktop add @ai-workbench/connect@0.7.7`。
 
 # 远程主机连接插件（L）
 
@@ -12,7 +12,7 @@
 
 D13已通过[PR15](https://github.com/yzsnstotz/ai-workbench-connect/pull/15)合推main7915df5，移除前为909eabb；五项被拒产物及清单引用已撤除。不再生成新的聚合整包或验收ZIP，交付物为插件本身。
 
-**插件版本0.7.5，API保持0.7.0/native-local-v1。** N0.4.0已接，配套X0.7.1。L导入动作固定使用官方系统目录窗口：自动能力为native时直接消费其pick；SSH等启动上下文提供browse时，明确调用同一官方原生包的公开pickNativeDirectory，不修改全局选择器。失败原因与临时登录路径只在本节技术详情准确投影。js-yaml/yauzl及其传递运行依赖随tgz打包，官方宿主peer由已安装官方程序提供，员工不另装npm依赖。真实中文GUI/授权及leo E门分别留证。旧140测试/46图只属于前任draft.3；本轮证据独立记录于[第2轮证据](docs/evidence/2026-10-21-L-round2-draft4/)。不得拿旧0.6.3 tgz当native-local-v1的输入。
+**插件版本0.7.6，API保持0.7.0/native-local-v1。** N0.4.0已接，配套X0.7.1。L导入动作固定使用官方系统目录窗口：自动能力为native时直接消费其pick；SSH等启动上下文提供browse时，明确调用同一官方原生包的公开pickNativeDirectory，不修改全局选择器。失败原因与临时登录路径只在本节技术详情准确投影。js-yaml/yauzl及其传递运行依赖随tgz打包，官方宿主peer由已安装官方程序提供，员工不另装npm依赖。真实中文GUI/授权及leo E门分别留证。旧140测试/46图只属于前任draft.3；本轮证据独立记录于[第2轮证据](docs/evidence/2026-10-21-L-round2-draft4/)。不得拿旧0.6.3 tgz当native-local-v1的输入。
 
 开发使用Node24.13.1，依赖/缓存/构建和临时HOME放自有外接APFS。工程检查为`npm test`、`npm run check`、`npm run build`；它们不替代真实产品路径。安装走官方插件管理，本包自身只声明一个官方bundle条目，不使用wrapper或员工启动器。工人GUI按[SELFTEST](docs/SELFTEST.md)的PID和三项获准偏离执行，不操作owner实例。
 
@@ -23,3 +23,5 @@ L0.7.4按owner最新纠正分开供给和授权：Electron组件从自身官方
 官方Electron内置Node会把.asar视作虚拟目录；组件缓存/解压专用physical-fs在Electron中使用original-fs核验物理归档，不修改全局process.noAsar。真实官方运行时新建及跨Node复用缓存均有回归。
 
 0.7.5仅调整公开 npm 发布元数据和包内容：运行依赖继续随包，合同、源码、测试与证据不进包；无安装脚本。源码与合同见[项目仓库](https://github.com/yzsnstotz/ai-workbench-connect)。发布前可用官方插件页或上述命令安装已核验的tgz绝对路径。本轮只做发布准备，尚未发布到npm。
+
+0.7.6：L设置节可显式选择 GitHub 官方源或 npmmirror（Electron 官方文档列出的中国镜像），显示所选来源与理由。未保存选择/未显式配置时默认 npmmirror，依据为编排在leo的可达性实测，不代表自动测速。优先级：本profile设置节已保存选择 → helper.componentDownloadSource初值 → 旧helper.source显式URL → 默认npmmirror；坏设置/保存失败明确报错，不静默切源。预设仍校验原Electron44.0.0固定SHA256。helper.componentObservationIntervalMs默认1000毫秒，只刷新“已N秒无进展”，不触发超时/重试/换源。OAuth与回调仍走N主机出口。

package/client/index.cjs

@@ -80,9 +80,9 @@ window.__ModuleLoader__.load({id:'@ai-workbench/connect',factory:(require)=>{
  const needKey=code=>code==='ENROLLMENT_RESULT_UNKNOWN'?'enrollmentUnknown':code==='ENROLLMENT_REJECTED'?'enrollmentRejected':code==='CONNECTION_UNKNOWN'?'unknown':code==='ENROLLMENT_INVALID'?'importInvalid':code==='DEPENDENCY_REQUIRED'?'notReady':['ENROLLMENT_REQUIRED','NETWORK_KEY_INVALID'].includes(code)?'enrollment':code==='SETTINGS_REQUIRED'?'settings':code==='LOGIN_FAILED'?'loginFailed':code==='POLICY_DENIED'?'denied':code==='LOGIN_PROMPT_INVALID'?'stale':code==='ACTION_FAILED'?'actionFailed':'unavailable';
  function messageKey(s){if(!s||s.phase==='checking')return 'checking';if(s.phase==='blocked'||s.phase==='disposed')return needKey(s.technicalDetails?.code);if(s.phase==='login-required')return 'loginRequired';if(s.phase==='authorizing')return 'authorizing';return Object.keys(s.providerNeeds??{}).length?'loginUnknown':'complete';}
  function createWorkbenchController(call,subscribe){
-  let state={value:undefined,error:''},disposed=false,started=false,off,revision=-1,instance,eventVersion=0;let download;const retiredDownloads=new Set(),retired=new Set(),listeners=new Set();
+  let state={value:undefined,error:''},disposed=false,started=false,off,revision=-1,instance,eventVersion=0;let download,componentSource;const retiredSources=new Set(),retiredDownloads=new Set(),retired=new Set(),listeners=new Set();
   const publish=next=>{state=next;for(const fn of listeners)fn();};
-  const accept=(value,source='event')=>{if(disposed)return;const next=value?.startup?.revision,id=value?.startup?.instanceId;if(typeof id!=='string'||!id||!Number.isSafeInteger(next)||next<0){publish({value:undefined,error:'CONNECTION_UNKNOWN'});return;}if(id!==instance){if(instance&&(source==='http'||retired.has(id)))return;if(instance)retired.add(instance);instance=id;revision=-1;}if(next<revision)return;revision=next;const incoming=value.loginComponent?.download;if(incoming){if(typeof incoming.instanceId!=='string'||!Number.isSafeInteger(incoming.revision)||incoming.revision<0||retiredDownloads.has(incoming.instanceId)||(download&&incoming.instanceId===download.instanceId&&incoming.revision<download.revision)||(download&&incoming.instanceId!==download.instanceId&&source==='http')){value={...value,loginComponent:{...value.loginComponent,download}};}else{if(download&&incoming.instanceId!==download.instanceId)retiredDownloads.add(download.instanceId);download=incoming;}}publish({value,error:value.actionErrorCode||value.enrollment?.need?.code||(value.actionError?'ACTION_FAILED':'')});};
+  const accept=(value,source='event')=>{if(disposed)return;const next=value?.startup?.revision,id=value?.startup?.instanceId;if(typeof id!=='string'||!id||!Number.isSafeInteger(next)||next<0){publish({value:undefined,error:'CONNECTION_UNKNOWN'});return;}if(id!==instance){if(instance&&(source==='http'||retired.has(id)))return;if(instance)retired.add(instance);instance=id;revision=-1;}if(next<revision)return;revision=next;const incoming=value.loginComponent?.download;if(incoming){if(typeof incoming.instanceId!=='string'||!Number.isSafeInteger(incoming.revision)||incoming.revision<0||retiredDownloads.has(incoming.instanceId)||(download&&incoming.instanceId===download.instanceId&&incoming.revision<download.revision)||(download&&incoming.instanceId!==download.instanceId&&source==='http')){value={...value,loginComponent:{...value.loginComponent,download}};}else{if(download&&incoming.instanceId!==download.instanceId)retiredDownloads.add(download.instanceId);download=incoming;}}const choice=value.loginComponent?.source;if(choice){if(typeof choice.instanceId!=='string'||!Number.isSafeInteger(choice.revision)||choice.revision<0||retiredSources.has(choice.instanceId)||(componentSource&&choice.instanceId===componentSource.instanceId&&choice.revision<componentSource.revision)||(componentSource&&choice.instanceId!==componentSource.instanceId&&source==='http')){if(componentSource)value={...value,loginComponent:{...value.loginComponent,source:componentSource}};}else{if(componentSource&&choice.instanceId!==componentSource.instanceId)retiredSources.add(componentSource.instanceId);componentSource=choice;}}publish({value,error:value.actionErrorCode||value.enrollment?.need?.code||(value.actionError?'ACTION_FAILED':'')});};
   const failure=()=>{if(!disposed)publish({value:undefined,error:'CONNECTION_UNKNOWN'});};
   return {getSnapshot:()=>state,subscribe:fn=>{listeners.add(fn);return()=>listeners.delete(fn);},async action(path='/check',body){const at=eventVersion;try{const value=await call(path,'POST',body);if(at===eventVersion)accept(value,'http');}catch{if(at===eventVersion)failure();}},start(){if(disposed||started)return;started=true;off=subscribe(value=>{eventVersion++;accept(value);},()=>{eventVersion++;failure();});const at=eventVersion;void call('/status','GET').then(value=>{if(at===eventVersion)accept(value,'http');},()=>{if(at===eventVersion)failure();});},dispose(){disposed=true;off?.();listeners.clear();}};
  }
@@ -112,8 +112,9 @@ window.__ModuleLoader__.load({id:'@ai-workbench/connect',factory:(require)=>{
   const visible=item=>{if(!sent.current.has(item.notice.noticeId)){sent.current.add(item.notice.noticeId);void action('/workspace-notice/'+item.notice.noticeId+'/displayed');}};
   return h('div',null,...items.map(item=>h(WorkspaceNoticeRow,{key:item.notice.noticeId,item,onVisible:visible})));
  }
- function DownloadProgress({state}){const d=state?.loginComponent?.download;if(!d)return null;const text=d.phase==='downloading'?'正在从官方地址下载登录组件：已下载 '+d.receivedBytes+' 字节'+(d.totalBytes===null?'（总大小未知）':'，共 '+d.totalBytes+' 字节')+'。登录页面仍经远程主机连接。':d.phase==='verifying'?'正在校验登录组件…':d.phase==='unpacking'?'正在解压登录组件…':d.phase==='failed'?'登录组件准备失败，请查看技术详情。':d.phase==='cancelled'?'登录组件下载已取消。':null;return text?h('p',{role:'status'},text):null;}
- function Panel({workbench,t}){const {state,error,action}=useWorkbench(workbench),message=messageKey(state?.startup),errorKey=error==='ENROLLMENT_REQUIRED'&&state?.enrollment?.phase==='blocked'?'enrollmentKeyMissing':error?needKey(error):undefined,bodyVisible=!['downloading','verifying','unpacking'].includes(state?.loginComponent?.download?.phase)&&(!error||!!state?.startup)&&!(state?.enrollment?.phase==='blocked'&&state.enrollment.need);return h('section',{'aria-label':t('title')},h('h2',null,t('title')),h(DownloadProgress,{state}),h(Enrollment,{state,action,t}),bodyVisible?h('p',{role:errorKey===message?'alert':undefined},t(message)):null,errorKey&&(!bodyVisible||errorKey!==message)?h('p',{role:'alert'},t(errorKey)):null,state?h(React.Fragment,null,...['codex','claude'].map(provider=>{const brand=provider==='claude'?'Claude':'Codex',checking=state.startup?.checkingProviders?.includes(provider),unknown=state.startup?.providerNeeds?.[provider]||state.startup?.logins?.[provider]===undefined;return h('div',{key:provider},h('p',null,t('provider',{brand})+': '+t(checking?'statusChecking':unknown?'statusUnknown':state.startup.logins[provider]?'statusSignedIn':'statusSignIn')),state.startup?.logins?.[provider]===false&&!checking&&!unknown&&(!isLoginQuestion(state)||state.startup.provider!==provider)?h('button',{type:'button',disabled:state.startup.phase==='authorizing',onClick:()=>void action('/start-login/'+provider+'/'+state.startup.instanceId+'/'+state.startup.revision)},t('signIn',{brand})):null);}),h(Choices,{state,action,t}),h(WorkspaceNotices,{state,action}),h('p',null,t('workspaceLimit'))):null,h(Details,{state,error,t}),h('button',{type:'button',onClick:()=>void action()},t('recheck')));}
+ function ComponentSource({state,action}){const c=state?.loginComponent?.source;if(!c)return null;const busy=c.changing||c.phase!=='ready'||['downloading','verifying','unpacking'].includes(state?.loginComponent?.download?.phase)||state?.startup?.phase==='authorizing';return h('div',null,h('p',null,c.phase==='ready'?'登录组件下载源：'+c.selectedLabel:c.phase==='loading'?'正在读取登录组件下载源设置…':'登录组件下载源设置不可用；未切换到其他来源。'),h('p',null,c.reason),c.selectionErrorCode?h('p',{role:'alert'},c.selectionErrorCode==='COMPONENT_PIN_MISMATCH'?'下载源未更改：当前组件版本或 SHA256 与预设不符，请查看技术详情。':'下载源未更改，请查看技术详情。'):null,...(c.choices??[]).map(choice=>h('button',{key:choice.id,type:'button',disabled:busy||c.selectedId===choice.id,onClick:()=>void action('/component-source/'+choice.id)},'使用 '+choice.label)),h('p',null,'Electron '+c.version+'；两项预设使用同一固定 SHA256，不会因下载失败自动换源。'));}
+ function DownloadProgress({state,action}){const d=state?.loginComponent?.download;const [,refresh]=React.useState(0),interval=state?.loginComponent?.observationIntervalMs,observing=d?.phase==='downloading'&&Number.isFinite(d.lastProgressAt);React.useEffect(()=>{if(!observing||!Number.isSafeInteger(interval)||interval<1||interval>2147483647)return;const timer=setInterval(()=>refresh(x=>x+1),interval);return()=>clearInterval(timer);},[observing,interval,d?.attemptId]);if(!d)return null;const seconds=Number.isFinite(d.lastProgressAt)?Math.max(0,Math.floor((Date.now()-d.lastProgressAt)/1000)):null;const text=d.phase==='downloading'?'正在从'+(d.sourceLabel||'所选地址')+'下载登录组件：已下载 '+d.receivedBytes+' 字节'+(d.totalBytes===null?'（总大小未知）':'，共 '+d.totalBytes+' 字节')+'。'+(seconds===null?'':'已 '+seconds+' 秒无进展；仅观察，不会自动重试或换源。')+'登录页面仍经远程主机连接。':d.phase==='verifying'?'正在校验登录组件…':d.phase==='unpacking'?'正在解压登录组件…':d.phase==='failed'?'登录组件准备失败，请查看技术详情；未重试或换源。':d.phase==='cancelled'?'登录组件下载已取消。':null;return text?h(React.Fragment,null,h('p',{role:'status'},text),['downloading','verifying','unpacking'].includes(d.phase)&&d.attemptId?h('button',{type:'button',onClick:()=>void action('/component-download/cancel/'+d.attemptId)},'取消组件下载'):null):null;}
+ function Panel({workbench,t}){const {state,error,action}=useWorkbench(workbench),message=messageKey(state?.startup),errorKey=error==='ENROLLMENT_REQUIRED'&&state?.enrollment?.phase==='blocked'?'enrollmentKeyMissing':error?needKey(error):undefined,bodyVisible=!['downloading','verifying','unpacking'].includes(state?.loginComponent?.download?.phase)&&(!error||!!state?.startup)&&!(state?.enrollment?.phase==='blocked'&&state.enrollment.need);return h('section',{'aria-label':t('title')},h('h2',null,t('title')),h(ComponentSource,{state,action}),h(DownloadProgress,{state,action}),h(Enrollment,{state,action,t}),bodyVisible?h('p',{role:errorKey===message?'alert':undefined},t(message)):null,errorKey&&(!bodyVisible||errorKey!==message)?h('p',{role:'alert'},t(errorKey)):null,state?h(React.Fragment,null,...['codex','claude'].map(provider=>{const brand=provider==='claude'?'Claude':'Codex',checking=state.startup?.checkingProviders?.includes(provider),unknown=state.startup?.providerNeeds?.[provider]||state.startup?.logins?.[provider]===undefined;return h('div',{key:provider},h('p',null,t('provider',{brand})+': '+t(checking?'statusChecking':unknown?'statusUnknown':state.startup.logins[provider]?'statusSignedIn':'statusSignIn')),state.startup?.logins?.[provider]===false&&!checking&&!unknown&&(!isLoginQuestion(state)||state.startup.provider!==provider)?h('button',{type:'button',disabled:state.startup.phase==='authorizing',onClick:()=>void action('/start-login/'+provider+'/'+state.startup.instanceId+'/'+state.startup.revision)},t('signIn',{brand})):null);}),h(Choices,{state,action,t}),h(WorkspaceNotices,{state,action}),h('p',null,t('workspaceLimit'))):null,h(Details,{state,error,t}),h('button',{type:'button',onClick:()=>void action()},t('recheck')));}
  return {name:'ai-workbench-connect-client',inject:['slots','locale'],createWorkbenchController,Panel,dictionaries,observeNotice,apply(ctx){
   ctx.effect(()=>ctx.locale.register(NS,dictionaries));const t=ctx.locale.bind(NS);
   const workbench=createWorkbenchController(async(path,method,body)=>{const response=await fetch('/ai-workbench-connect'+path,{method,...body===undefined?{}:{headers:{'Content-Type':'application/json'},body:JSON.stringify(body)}});const value=await response.json();if(!response.ok&&!value?.startup)throw Error('connection-unavailable');return value;},(accept,failure)=>{const source=new EventSource('/ai-workbench-connect/events');source.onmessage=event=>{try{accept(JSON.parse(event.data));}catch{failure();}};source.onerror=failure;return()=>source.close();});

package/lib/component-download.d.ts

@@ -9,11 +9,18 @@ export interface ComponentDownloadState extends ComponentProgress {
     instanceId: string;
     revision: number;
     attemptId: string | null;
+    lastProgressAt?: number;
+    sourceLabel?: string;
+    sourceId?: string;
 }
-export declare function createComponentProgress(): {
+export declare function createComponentProgress(now?: () => number): {
     getState: () => ComponentDownloadState;
     onState(fn: () => void): () => void;
-    begin(): {
+    cancel(attemptId: string): boolean;
+    begin(source?: {
+        id: string;
+        label: string;
+    }, cancel?: () => void): {
         attemptId: `${string}-${string}-${string}-${string}-${string}`;
         update: (progress: ComponentProgress) => void;
     };

package/lib/component-download.js

@@ -1,12 +1,15 @@
 import https from 'node:https';
 import { Readable } from 'node:stream';
 import { randomUUID } from 'node:crypto';
-export function createComponentProgress() {
+export function createComponentProgress(now = Date.now) {
     let state = { instanceId: randomUUID(), revision: 0, attemptId: null, phase: 'idle', receivedBytes: 0, totalBytes: null };
     const listeners = new Set();
-    return { getState: () => structuredClone(state), onState(fn) { listeners.add(fn); return () => { listeners.delete(fn); }; }, begin() { const attemptId = randomUUID(); const update = (progress) => { if (state.attemptId !== attemptId)
-            return; state = { ...progress, instanceId: state.instanceId, revision: state.revision + 1, attemptId }; for (const fn of listeners)
-            fn(); }; state = { ...state, attemptId }; update({ phase: 'downloading', receivedBytes: 0, totalBytes: null }); return { attemptId, update }; } };
+    let cancelDownload;
+    return { getState: () => structuredClone(state), onState(fn) { listeners.add(fn); return () => { listeners.delete(fn); }; }, cancel(attemptId) { if (state.attemptId !== attemptId || !['downloading', 'verifying', 'unpacking'].includes(state.phase) || !cancelDownload)
+            return false; const cancel = cancelDownload; cancelDownload = undefined; cancel(); return true; }, begin(source, cancel) { cancelDownload = cancel; const attemptId = randomUUID(); const update = (progress) => { if (state.attemptId !== attemptId)
+            return; if (['ready', 'failed', 'cancelled'].includes(progress.phase))
+            cancelDownload = undefined; state = { ...progress, lastProgressAt: progress.receivedBytes > state.receivedBytes ? now() : state.lastProgressAt, ...(source ? { sourceLabel: source.label, sourceId: source.id } : {}), instanceId: state.instanceId, revision: state.revision + 1, attemptId }; for (const fn of listeners)
+            fn(); }; state = { ...state, attemptId, receivedBytes: 0, lastProgressAt: now() }; update({ phase: 'downloading', receivedBytes: 0, totalBytes: null }); return { attemptId, update }; } };
 }
 export class ComponentDownloadError extends Error {
     constructor(code) { super(code); this.name = 'ComponentDownloadError'; }

package/lib/component-source.d.ts

@@ -0,0 +1,52 @@
+export declare const COMPONENT_SOURCES: Readonly<{
+    github: {
+        label: string;
+        source: "https://github.com/electron/electron/releases/download/v44.0.0/electron-v44.0.0-darwin-arm64.zip";
+    };
+    npmmirror: {
+        label: string;
+        source: string;
+    };
+}>;
+export type ComponentSourceId = keyof typeof COMPONENT_SOURCES;
+export declare const DEFAULT_SOURCE_REASON = "\u9ED8\u8BA4\u9009\u62E9 npmmirror\uFF1A\u4E2D\u56FD\u955C\u50CF\u53EF\u907F\u5F00\u90E8\u5206\u7F51\u7EDC\u4E0B\u65E0\u6CD5\u8BBF\u95EE\u7684 GitHub \u53D1\u5E03\u6587\u4EF6 CDN\uFF1B\u672A\u81EA\u52A8\u6D4B\u901F\u6216\u5931\u8D25\u6362\u6E90\u3002";
+export declare const preset: (id: unknown) => id is ComponentSourceId;
+interface Options {
+    profileDir?: string;
+    metadataMaxBytes: number;
+    source?: string;
+    sha256?: string;
+    reason: string;
+    busy: () => boolean;
+}
+export declare function createComponentSources(options: Options): {
+    ready: Promise<void>;
+    getState: () => {
+        changing: boolean;
+        instanceId: `${string}-${string}-${string}-${string}-${string}`;
+        revision: number;
+        phase: "loading" | "ready" | "blocked";
+        selectedId: string;
+        selectedLabel: string;
+        reason: string;
+        version: string;
+        sha256: string | null;
+        errorCode: string | null;
+        selectionErrorCode: string | null;
+        choices: {
+            id: string;
+            label: string;
+        }[];
+    };
+    onState(fn: () => void): () => void;
+    resolve: () => Promise<{
+        source: string;
+        id: string;
+        label: string;
+        reason: string;
+    }>;
+    select: (id: unknown) => Promise<void>;
+    dispose(): Promise<void>;
+};
+export type ComponentSources = ReturnType<typeof createComponentSources>;
+export {};

package/lib/component-source.js

@@ -0,0 +1,146 @@
+import { join, isAbsolute, resolve } from 'node:path';
+import { lstat, realpath, open, rename, rm } from 'node:fs/promises';
+import { randomUUID } from 'node:crypto';
+import { privateDirectory, readPrivate } from "./private-files.js";
+import { ELECTRON_PIN } from "./defaults.js";
+import { ComponentDownloadError } from "./component-download.js";
+export const COMPONENT_SOURCES = Object.freeze({
+    github: { label: 'GitHub 官方源', source: ELECTRON_PIN.source },
+    npmmirror: { label: 'npmmirror 镜像（Electron 官方文档列出）', source: 'https://npmmirror.com/mirrors/electron/44.0.0/electron-v44.0.0-darwin-arm64.zip' },
+});
+export const DEFAULT_SOURCE_REASON = '默认选择 npmmirror：中国镜像可避开部分网络下无法访问的 GitHub 发布文件 CDN；未自动测速或失败换源。';
+export const preset = (id) => typeof id === 'string' && Object.hasOwn(COMPONENT_SOURCES, id);
+export function createComponentSources(options) {
+    let selected = Object.entries(COMPONENT_SOURCES).find(([, v]) => v.source === options.source)?.[0];
+    let state = { instanceId: randomUUID(), revision: 0, phase: 'loading', selectedId: selected ?? 'custom', selectedLabel: selected ? COMPONENT_SOURCES[selected].label : '管理员自定义源', reason: options.reason, version: '44.0.0', sha256: options.sha256 ?? null, errorCode: null, selectionErrorCode: null, choices: Object.entries(COMPONENT_SOURCES).map(([id, v]) => ({ id, label: v.label })) };
+    let source = options.source, disposed = false, changing = false;
+    const listeners = new Set();
+    const pending = new Set();
+    function error(code) { throw new ComponentDownloadError(code); }
+    const notify = () => { if (!disposed) {
+        state = { ...state, revision: state.revision + 1 };
+        for (const fn of listeners)
+            fn();
+    } };
+    const blocked = (code) => { state = { ...state, phase: 'blocked', errorCode: code }; notify(); };
+    const directory = options.profileDir ? join(options.profileDir, 'ai-workbench-connect') : undefined;
+    const file = directory ? join(directory, 'component-source.json') : undefined;
+    const checkPin = () => { if (options.sha256 !== ELECTRON_PIN.sha256)
+        error('COMPONENT_PIN_MISMATCH'); };
+    async function canonical() { if (!options.profileDir || !directory || !isAbsolute(options.profileDir) || await realpath(options.profileDir) !== resolve(options.profileDir))
+        error('COMPONENT_SOURCE_PROFILE_REQUIRED'); await privateDirectory(directory); if (await realpath(directory) !== resolve(directory))
+        error('COMPONENT_SOURCE_STATE_INVALID'); }
+    const ready = (async () => {
+        try {
+            if (!file)
+                error('COMPONENT_SOURCE_PROFILE_REQUIRED');
+            if (!source)
+                error('COMPONENT_SOURCE_INVALID');
+            const initialUrl = new URL(source);
+            if (initialUrl.protocol !== 'https:' || initialUrl.username || initialUrl.password)
+                error('COMPONENT_SOURCE_INVALID');
+            await canonical();
+            try {
+                const stat = await lstat(file);
+                if (!stat.isFile() || stat.isSymbolicLink() || stat.nlink !== 1)
+                    error('COMPONENT_SOURCE_STATE_INVALID');
+                const saved = JSON.parse(await readPrivate(file, options.metadataMaxBytes));
+                if (saved.schemaVersion !== 1 || !preset(saved.sourceId))
+                    error('COMPONENT_SOURCE_STATE_INVALID');
+                const savedId = saved.sourceId;
+                selected = savedId;
+                source = COMPONENT_SOURCES[savedId].source;
+                state = { ...state, selectedId: savedId, selectedLabel: COMPONENT_SOURCES[savedId].label, reason: '沿用你在本设置节保存的下载源；未自动切源。' };
+            }
+            catch (e) {
+                if (e.code !== 'ENOENT')
+                    throw e;
+            }
+            if (!source)
+                error('COMPONENT_SOURCE_INVALID');
+            const url = new URL(source);
+            if (url.protocol !== 'https:' || url.username || url.password)
+                error('COMPONENT_SOURCE_INVALID');
+            state = { ...state, phase: 'ready' };
+            notify();
+        }
+        catch (e) {
+            blocked(e instanceof ComponentDownloadError ? e.message : 'COMPONENT_SOURCE_STATE_INVALID');
+        }
+    })();
+    async function resolveSource() { await ready; if (disposed)
+        error('COMPONENT_SOURCE_DISPOSED'); if (state.phase === 'blocked')
+        error(state.errorCode); if (changing)
+        error('COMPONENT_SOURCE_BUSY'); if (selected)
+        checkPin(); return { source: source, id: state.selectedId, label: state.selectedLabel, reason: state.reason }; }
+    function select(id) {
+        const task = (async () => {
+            if (!preset(id))
+                error('COMPONENT_SOURCE_INVALID');
+            if (disposed)
+                error('COMPONENT_SOURCE_DISPOSED');
+            if (changing || options.busy())
+                error('COMPONENT_SOURCE_BUSY');
+            changing = true;
+            notify();
+            let temp;
+            try {
+                await ready;
+                if (disposed)
+                    error('COMPONENT_SOURCE_DISPOSED');
+                if (state.phase === 'blocked')
+                    error(state.errorCode);
+                if (options.busy())
+                    error('COMPONENT_SOURCE_BUSY');
+                checkPin();
+                await canonical();
+                const data = JSON.stringify({ schemaVersion: 1, sourceId: id });
+                if (!Number.isSafeInteger(options.metadataMaxBytes) || Buffer.byteLength(data) > options.metadataMaxBytes)
+                    error('COMPONENT_SOURCE_STATE_INVALID');
+                temp = join(directory, '.component-source-' + randomUUID());
+                const handle = await open(temp, 'wx', 0o600);
+                try {
+                    await handle.writeFile(data);
+                    await handle.sync();
+                }
+                finally {
+                    await handle.close();
+                }
+                if (disposed)
+                    error('COMPONENT_SOURCE_DISPOSED');
+                if (options.busy())
+                    error('COMPONENT_SOURCE_BUSY');
+                await rename(temp, file);
+                temp = undefined;
+                const parent = await open(directory, 'r');
+                try {
+                    await parent.sync();
+                }
+                finally {
+                    await parent.close();
+                }
+                selected = id;
+                source = COMPONENT_SOURCES[id].source;
+                state = { ...state, selectedId: id, selectedLabel: COMPONENT_SOURCES[id].label, reason: '你在本设置节显式选择并保存了此下载源；未自动切源。', errorCode: null, selectionErrorCode: null };
+            }
+            catch (e) {
+                if (!(e instanceof ComponentDownloadError)) {
+                    blocked('COMPONENT_SOURCE_STATE_INVALID');
+                    error('COMPONENT_SOURCE_STATE_INVALID');
+                }
+                state = { ...state, selectionErrorCode: e.message };
+                throw e;
+            }
+            finally {
+                if (temp)
+                    await rm(temp, { force: true });
+                changing = false;
+                notify();
+            }
+        })();
+        pending.add(task);
+        void task.then(() => pending.delete(task), () => pending.delete(task));
+        return task;
+    }
+    return { ready, getState: () => structuredClone({ ...state, changing }), onState(fn) { listeners.add(fn); return () => { listeners.delete(fn); }; }, resolve: resolveSource, select, async dispose() { disposed = true; listeners.clear(); await ready; await Promise.allSettled([...pending]); } };
+}

package/lib/components.d.ts

@@ -1,3 +1,4 @@
+import type { ComponentSources } from './component-source.ts';
 import type { ComponentProgressStore } from './component-download.ts';
 import type { Context } from '@deepseek-ai/cordis';
 export interface ComponentInventory {
@@ -6,4 +7,4 @@ export interface ComponentInventory {
     claude: string;
     codex?: string;
 }
-export declare function registerComponents(ctx: Context, inventory?: ComponentInventory, temporaryDataParent?: string, component?: ComponentProgressStore): void;
+export declare function registerComponents(ctx: Context, inventory?: ComponentInventory, temporaryDataParent?: string, component?: ComponentProgressStore, sources?: ComponentSources, observationIntervalMs?: number): void;

package/lib/components.js

@@ -1,10 +1,12 @@
+import { ComponentDownloadError } from "./component-download.js";
+import { L_DEFAULTS } from "./defaults.js";
 import { fail } from "./needs.js";
 import { employeeMessage } from "./startup.js";
-export function registerComponents(ctx, inventory, temporaryDataParent, component) {
+export function registerComponents(ctx, inventory, temporaryDataParent, component, sources, observationIntervalMs = L_DEFAULTS.componentObservationIntervalMs) {
     const api = () => ctx.get('aiWorkbenchConnect');
     const getState = () => {
         const network = ctx.get('aiWorkbenchNetwork'), connect = api(), state = connect?.getState(), networkState = network?.getState();
-        return { workspaceBindings: connect?.getWorkspaceBindingState?.() ?? null, loginComponent: { temporaryDataParent: temporaryDataParent ?? null, download: component?.getState() ?? null }, startup: connect?.getLoginPromptState?.() ?? null, inventory: inventory ?? null, network: { serviceProvided: !!network, phase: networkState?.phase ?? 'missing', needCode: networkState?.error?.code ?? networkState?.need?.code }, enrollment: connect?.getEnrollmentState?.() ?? null, connection: connect?.getConnectionState?.() ?? null, connect: { serviceProvided: !!connect, phase: state?.phase ?? 'missing', message: state?.need ? employeeMessage(state.need.code) : '连接服务等待就绪' }, codex: inventory ? { installed: !!inventory.codex, message: inventory.codex ? 'Codex 组件已安装' : 'Codex 组件未安装' } : { installed: null, message: '组件清单未装配' } };
+        return { workspaceBindings: connect?.getWorkspaceBindingState?.() ?? null, loginComponent: { temporaryDataParent: temporaryDataParent ?? null, download: component?.getState() ?? null, source: sources?.getState() ?? null, observationIntervalMs }, startup: connect?.getLoginPromptState?.() ?? null, inventory: inventory ?? null, network: { serviceProvided: !!network, phase: networkState?.phase ?? 'missing', needCode: networkState?.error?.code ?? networkState?.need?.code }, enrollment: connect?.getEnrollmentState?.() ?? null, connection: connect?.getConnectionState?.() ?? null, connect: { serviceProvided: !!connect, phase: state?.phase ?? 'missing', message: state?.need ? employeeMessage(state.need.code) : '连接服务等待就绪' }, codex: inventory?.codex ? { installed: true, message: 'Codex 组件已安装' } : { installed: null, message: '组件清单未装配' } };
     };
     ctx.provide('aiWorkbenchComponents', { getState });
     ctx.inject(['webServer', 'connection'], host => {
@@ -25,9 +27,9 @@ export function registerComponents(ctx, inventory, temporaryDataParent, componen
                         res.setHeader('Content-Type', 'text/event-stream; charset=utf-8');
                         res.statusCode = 200;
                         let closed = false;
-                        let unprompt = () => { }, unconnection = () => { }, unenrollment = () => { }, unnative = () => { }, undownload = () => { };
+                        let unprompt = () => { }, unconnection = () => { }, unenrollment = () => { }, unnative = () => { }, undownload = () => { }, unsource = () => { };
                         const close = () => { if (closed)
-                            return; closed = true; unprompt(); unconnection(); unenrollment(); unnative(); undownload(); streams.delete(close); res.end(); };
+                            return; closed = true; unprompt(); unconnection(); unenrollment(); unnative(); undownload(); unsource(); streams.delete(close); res.end(); };
                         const send = () => { if (closed)
                             return; try {
                             if (!res.write('data: ' + JSON.stringify(getState()) + '\n\n'))
@@ -41,11 +43,42 @@ export function registerComponents(ctx, inventory, temporaryDataParent, componen
                         unenrollment = service.onEnrollmentState?.(send) ?? (() => { });
                         unnative = service.onWorkspaceBindingState?.(send) ?? (() => { });
                         undownload = component?.onState(send) ?? (() => { });
+                        unsource = sources?.onState(send) ?? (() => { });
                         streams.add(close);
                         res.once('close', close);
                         send();
                         return;
                     }
+                    if (req.method === 'POST' && /^\/ai-workbench-connect\/component-download\/cancel\/[a-zA-Z0-9-]+$/.test(path) && component) {
+                        res.setHeader('Content-Type', 'application/json; charset=utf-8');
+                        if (Number(req.headers?.['content-length'] ?? 0) > 0 || req.headers?.['transfer-encoding']) {
+                            res.statusCode = 400;
+                            res.end(JSON.stringify({ error: 'no-input-accepted' }));
+                            return;
+                        }
+                        const cancelled = component.cancel(path.split('/').at(-1));
+                        res.statusCode = cancelled ? 200 : 409;
+                        res.end(JSON.stringify({ ...getState(), ...(!cancelled ? { actionErrorCode: 'COMPONENT_DOWNLOAD_NOT_ACTIVE', actionError: '该组件下载已经结束或更新，请使用当前状态。' } : {}) }));
+                        return;
+                    }
+                    if (req.method === 'POST' && /^\/ai-workbench-connect\/component-source\/(github|npmmirror)$/.test(path) && sources) {
+                        res.setHeader('Content-Type', 'application/json; charset=utf-8');
+                        if (Number(req.headers?.['content-length'] ?? 0) > 0 || req.headers?.['transfer-encoding']) {
+                            res.statusCode = 400;
+                            res.end(JSON.stringify({ error: 'no-input-accepted' }));
+                            return;
+                        }
+                        try {
+                            await sources.select(path.split('/').at(-1));
+                            res.statusCode = 200;
+                            res.end(JSON.stringify(getState()));
+                        }
+                        catch (e) {
+                            res.statusCode = 409;
+                            res.end(JSON.stringify({ ...getState(), actionErrorCode: e instanceof ComponentDownloadError ? e.message : 'COMPONENT_SOURCE_STATE_INVALID', actionError: '下载源未更改；请结束当前下载或授权后重选，或检查技术详情。' }));
+                        }
+                        return;
+                    }
                     res.setHeader('Content-Type', 'application/json; charset=utf-8');
                     let actionError, actionErrorCode;
                     if (req.method === 'POST' && service) {

package/lib/defaults.d.ts

@@ -3,6 +3,7 @@ export declare const L_DEFAULTS: Readonly<{
     commandOutputMaxBytes: 1048576;
     remoteKillGraceMs: 1000;
     componentDownloadMaxRedirects: 3;
+    componentObservationIntervalMs: 1000;
     maxDownloadBytes: 200000000;
     maxExtractedBytes: 600000000;
     loginOutputMaxBytes: 1048576;

package/lib/defaults.js

@@ -1,4 +1,4 @@
 // Owner-approved technical settings (2026-10-20, part two). One source for schema and composition.
-export const L_DEFAULTS = Object.freeze({ enrollmentMetadataMaxBytes: 1048576, commandOutputMaxBytes: 1048576, remoteKillGraceMs: 1000, componentDownloadMaxRedirects: 3, maxDownloadBytes: 200000000, maxExtractedBytes: 600000000, loginOutputMaxBytes: 1048576, ipcMaxBytes: 1048576 });
+export const L_DEFAULTS = Object.freeze({ enrollmentMetadataMaxBytes: 1048576, commandOutputMaxBytes: 1048576, remoteKillGraceMs: 1000, componentDownloadMaxRedirects: 3, componentObservationIntervalMs: 1000, maxDownloadBytes: 200000000, maxExtractedBytes: 600000000, loginOutputMaxBytes: 1048576, ipcMaxBytes: 1048576 });
 export const ELECTRON_PIN = Object.freeze({ source: 'https://github.com/electron/electron/releases/download/v44.0.0/electron-v44.0.0-darwin-arm64.zip', sha256: '076d79742986e1b100b69ebecc691cb07368045e54c9087cef631b8622b76a80', executable: 'Electron.app/Contents/MacOS/Electron' });
 export const NETWORK_DEFAULTS = Object.freeze({ proxyListen: '127.0.0.1:0', logUpload: false, statusRefreshIntervalSeconds: 2, dialTimeoutSeconds: 20, headerTimeoutSeconds: 10, enrollmentObservationSeconds: 30, httpMaxHeaderBytes: 1048576, httpMaxResponseHeaderBytes: 1048576, startupObservationSeconds: 35, shutdownObservationSeconds: 10, controlResponseMaxBytes: 65536, downloadMaxRedirects: 3 });

package/lib/index.d.ts

@@ -19,6 +19,8 @@ export interface Config {
     commandOutputMaxBytes?: number;
     network?: (NetworkSettings & AssemblySettings);
     helper?: {
+        componentDownloadSource?: 'github' | 'npmmirror';
+        componentObservationIntervalMs?: number;
         componentDownloadMaxRedirects?: number;
         remoteKillGraceMs?: number;
         maxRedirects?: number;
@@ -33,7 +35,7 @@ export interface Config {
     };
 }
 export declare const Config: z<Config>;
-export declare function register(ctx: Context, ports: Ports, inventory?: ComponentInventory, extend?: (api: import('./api.ts').ConnectApi) => void): void;
+export declare function register(ctx: Context, ports: Ports, _inventory?: ComponentInventory, extend?: (api: import('./api.ts').ConnectApi) => void): void;
 export declare function apply(ctx: Context, config?: Config): void;
 export { createProfileEnrollment } from './profile-enrollment.ts';
 export { createWorkspaceBindings } from './workspace-bindings.ts';

package/lib/index.js

@@ -3,6 +3,7 @@ import { createConnect } from "./connect.js";
 import { configuredPorts } from "./integration.js";
 import { attachProfileRuntime } from "./profile-runtime.js";
 import { profileSettings } from "./profile-settings.js";
+import { createComponentSources, DEFAULT_SOURCE_REASON } from "./component-source.js";
 import { createComponentProgress } from "./component-download.js";
 import { L_DEFAULTS, NETWORK_DEFAULTS } from "./defaults.js";
 import { registerComponents } from "./components.js";
@@ -23,25 +24,32 @@ export const Config = z.object({
     commandOutputMaxBytes: positive().default(L_DEFAULTS.commandOutputMaxBytes).description('CLI检查输出内存上限（字节）；owner已定1048576，管理员可改'),
     network: z.object({ executable: z.string(), runtimeDir: z.string(), stateDir: z.string(), configFile: z.string(), helperLogFile: z.string(), nodeName: z.string(), startupObservationSeconds: z.number().min(0.001).max(2147483.647).default(NETWORK_DEFAULTS.startupObservationSeconds), shutdownObservationSeconds: z.number().min(0.001).max(2147483.647).default(NETWORK_DEFAULTS.shutdownObservationSeconds), controlResponseMaxBytes: positive().default(NETWORK_DEFAULTS.controlResponseMaxBytes), downloadMaxRedirects: z.number().step(1).min(0).default(NETWORK_DEFAULTS.downloadMaxRedirects), proxyListen: z.string().default(NETWORK_DEFAULTS.proxyListen), logUpload: z.boolean().default(NETWORK_DEFAULTS.logUpload), statusRefreshIntervalSeconds: z.number().min(0.001).max(2147483.647).default(NETWORK_DEFAULTS.statusRefreshIntervalSeconds), dialTimeoutSeconds: z.number().min(1e-9).default(NETWORK_DEFAULTS.dialTimeoutSeconds), headerTimeoutSeconds: z.number().min(0.001).max(2147483.647).default(NETWORK_DEFAULTS.headerTimeoutSeconds), enrollmentObservationSeconds: z.number().min(1e-9).default(NETWORK_DEFAULTS.enrollmentObservationSeconds), httpMaxHeaderBytes: positive().default(NETWORK_DEFAULTS.httpMaxHeaderBytes), httpMaxResponseHeaderBytes: positive().default(NETWORK_DEFAULTS.httpMaxResponseHeaderBytes), controlMaxBytes: positive() }).description('N v1 交接设置；沿owner已定技术值自动装配，管理员可改；路径由当前用户/profile派生，员工不填'),
     helper: z.object({
+        componentDownloadSource: z.union([z.const('github'), z.const('npmmirror')]).description('未保存设置节选择时的初始下载源；未设且无旧source时默认npmmirror（编排leo实测可达），可选github；不自动测速/换源，版本与SHA固定'),
+        componentObservationIntervalMs: z.number().step(1).min(1).max(2147483647).default(L_DEFAULTS.componentObservationIntervalMs).description('无进展观察刷新间隔毫秒，默认1000；只刷新秒数，不超时/重试/换源'),
         componentDownloadMaxRedirects: z.number().step(1).min(0).default(L_DEFAULTS.componentDownloadMaxRedirects).description('组件直接HTTPS下载的重定向次数上限；默认3，0拒绝重定向；管理员可改，不影响OAuth主机出口'),
         remoteKillGraceMs: z.number().step(1).min(0).max(2147483647).default(L_DEFAULTS.remoteKillGraceMs).description('远端本轮登录进程组结束宽限毫秒；owner已定1000，0立即KILL，管理员可改'),
         maxRedirects: z.number().step(1).min(0).description('兼容旧配置；0.5默认路径改由N插件downloadMaxRedirects控制，此项不再生效'),
-        source: z.string().description('darwin-arm64默认已定Electron44.0.0官方ZIP；其他平台无默认，管理员可改'), sha256: z.string().description('darwin-arm64默认已定44.0.0下载SHA256；管理员可改，必须校验'),
+        source: z.string().description('兼容初始管理员显式URL；无已保存的设置节选择且未设componentDownloadSource时生效；无隐式换源'), sha256: z.string().description('darwin-arm64默认已定44.0.0下载SHA256；管理员可改，必须校验'),
         cacheDir: z.string().description('默认从当前profile自动派生ai-workbench-connect/login-component-cache；管理员可改，员工不填路径'), maxDownloadBytes: positive().default(L_DEFAULTS.maxDownloadBytes).description('下载字节上限；owner已定200000000，管理员可改'), maxExtractedBytes: positive().default(L_DEFAULTS.maxExtractedBytes).description('解压字节上限；owner已定600000000，管理员可改'),
         executable: z.string().description('darwin-arm64默认Electron.app/Contents/MacOS/Electron；其他平台无默认，管理员可改'), loginOutputMaxBytes: positive().default(L_DEFAULTS.loginOutputMaxBytes).description('登录进程输出字节上限；owner已定1048576，管理员可改'), ipcMaxBytes: positive().default(L_DEFAULTS.ipcMaxBytes).description('私有IPC字节上限；owner已定1048576，管理员可改'),
     }),
 });
-export function register(ctx, ports, inventory, extend) {
-    const api = createConnect(ports, state => ctx.emit('ai-workbench/connect-state', state), { providers: inventory && !inventory.codex ? ['claude'] : ['codex', 'claude'], onConnectionState: state => ctx.emit('ai-workbench/connection-state', state), onPromptState: state => ctx.emit('ai-workbench/login-prompt-state', state), onPromptResult: result => ctx.emit('ai-workbench/login-prompt-result', result) });
+export function register(ctx, ports, _inventory, extend) {
+    // 当前独立插件始终检查两品牌；保留旧inventory参数兼容调用，但不以交付清单开关能力。
+    const api = createConnect(ports, state => ctx.emit('ai-workbench/connect-state', state), { onConnectionState: state => ctx.emit('ai-workbench/connection-state', state), onPromptState: state => ctx.emit('ai-workbench/login-prompt-state', state), onPromptResult: result => ctx.emit('ai-workbench/login-prompt-result', result) });
     extend?.(api);
     ctx.provide('aiWorkbenchConnect', api);
     ctx.effect(() => { void api.refreshLoginPrompts(); return () => api.dispose(); });
 }
 export function apply(ctx, config = {}) {
+    const sourceReason = config.helper?.componentDownloadSource !== undefined ? '管理员通过 helper.componentDownloadSource 指定此下载源。' : config.helper?.source !== undefined ? '管理员通过 helper.source 指定此下载源。' : DEFAULT_SOURCE_REASON;
     config = profileSettings(config, ctx.get('profileContext')?.dir);
-    const network = ctx.get('aiWorkbenchNetwork'), component = createComponentProgress(), ports = configuredPorts(config, network, component);
+    const network = ctx.get('aiWorkbenchNetwork'), component = createComponentProgress();
+    const sources = createComponentSources({ profileDir: ctx.get('profileContext')?.dir, metadataMaxBytes: config.enrollmentMetadataMaxBytes ?? L_DEFAULTS.enrollmentMetadataMaxBytes, source: config.helper?.source, sha256: config.helper?.sha256, reason: sourceReason, busy: () => ['downloading', 'verifying', 'unpacking'].includes(component.getState().phase) || ctx.get('aiWorkbenchConnect')?.getLoginPromptState().phase === 'authorizing' });
+    ctx.effect(() => () => sources.dispose());
+    const ports = configuredPorts(config, network, component, sources);
     register(ctx, ports, config.inventory, api => attachProfileRuntime(ctx, api, ports, config, network));
-    registerComponents(ctx, config.inventory, config.helper?.cacheDir, component);
+    registerComponents(ctx, config.inventory, config.helper?.cacheDir, component, sources, config.helper?.componentObservationIntervalMs);
 }
 export { createProfileEnrollment } from "./profile-enrollment.js";
 export { createWorkspaceBindings } from "./workspace-bindings.js";

package/lib/integration.d.ts

@@ -1,5 +1,6 @@
+import type { ComponentSources } from './component-source.ts';
 import type { Config } from './index.ts';
 import type { Ports } from './ports.ts';
 import { type NetworkProvider } from './provider.ts';
 import { type ComponentProgressStore } from './component-download.ts';
-export declare function configuredPorts(config: Config, provider?: NetworkProvider, component?: ComponentProgressStore): Ports;
+export declare function configuredPorts(config: Config, provider?: NetworkProvider, component?: ComponentProgressStore, sources?: ComponentSources): Ports;

package/lib/integration.js

@@ -1,3 +1,4 @@
+import { ComponentDownloadError } from "./component-download.js";
 import { fileURLToPath } from 'node:url';
 import { readEnrollment } from "./enrollment.js";
 import { adaptNetwork } from "./provider.js";
@@ -10,7 +11,7 @@ import { ensureHelper } from "./cache.js";
 import { launchElectron } from "./electron.js";
 import { need, fail } from "./needs.js";
 import { createComponentProgress, downloadComponent } from "./component-download.js";
-export function configuredPorts(config, provider, component = createComponentProgress()) {
+export function configuredPorts(config, provider, component = createComponentProgress(), sources) {
     const ports = {};
     const network = provider ? adaptNetwork(provider) : undefined;
     if (config.enrollmentPackageDir && config.trustDir)
@@ -30,8 +31,16 @@ export function configuredPorts(config, provider, component = createComponentPro
                 const h = config.helper;
                 if (!h || !Number.isSafeInteger(h.remoteKillGraceMs) || h.remoteKillGraceMs < 0 || h.remoteKillGraceMs > 2147483647 || ![h.source, h.sha256, h.cacheDir, h.executable].every(x => typeof x === 'string' && x) || !Number.isSafeInteger(h.componentDownloadMaxRedirects) || h.componentDownloadMaxRedirects < 0 || ![h.maxDownloadBytes, h.maxExtractedBytes, h.loginOutputMaxBytes, h.ipcMaxBytes].every(x => Number.isSafeInteger(x) && x > 0))
                     return { ok: false, error: need('SETTINGS_REQUIRED') };
-                const attempt = component.begin();
-                const result = await ensureHelper(h, { download: source => downloadComponent(source, signal, h.componentDownloadMaxRedirects), signal, onProgress: attempt.update });
+                let selection;
+                try {
+                    selection = await sources?.resolve();
+                }
+                catch (e) {
+                    return { ok: false, error: { ...need('SETTINGS_REQUIRED'), officialReason: e instanceof ComponentDownloadError ? e.message : 'COMPONENT_SOURCE_STATE_INVALID' } };
+                }
+                const cancellation = new AbortController(), downloadSignal = AbortSignal.any([signal, cancellation.signal]);
+                const attempt = component.begin(selection, () => cancellation.abort());
+                const result = await ensureHelper({ ...h, source: selection?.source ?? h.source }, { download: source => downloadComponent(source, downloadSignal, h.componentDownloadMaxRedirects), signal: downloadSignal, onProgress: attempt.update });
                 if (!result.ok)
                     return result;
                 if (signal.aborted)

package/lib/profile-settings.js

@@ -1,10 +1,13 @@
 import { isAbsolute, join } from 'node:path';
+import { COMPONENT_SOURCES, preset } from "./component-source.js";
 import { L_DEFAULTS, ELECTRON_PIN } from "./defaults.js";
 // Owner approved technical values, 2026-10-20 settings decision, part two.
 // 组件直接来自自己的官方地址；OAuth网页仍通过N主机出口。
 export function profileSettings(config, profileDir, platform = process.platform, arch = process.arch) {
     if (typeof profileDir !== 'string' || !isAbsolute(profileDir))
         return config;
-    const runtime = platform === 'darwin' && arch === 'arm64' ? ELECTRON_PIN : {};
-    return { ...config, commandOutputMaxBytes: config.commandOutputMaxBytes === undefined ? L_DEFAULTS.commandOutputMaxBytes : config.commandOutputMaxBytes, helper: { ...runtime, componentDownloadMaxRedirects: L_DEFAULTS.componentDownloadMaxRedirects, maxDownloadBytes: L_DEFAULTS.maxDownloadBytes, maxExtractedBytes: L_DEFAULTS.maxExtractedBytes, loginOutputMaxBytes: L_DEFAULTS.loginOutputMaxBytes, ipcMaxBytes: L_DEFAULTS.ipcMaxBytes, remoteKillGraceMs: L_DEFAULTS.remoteKillGraceMs, ...config.helper, cacheDir: config.helper?.cacheDir === undefined ? join(profileDir, 'ai-workbench-connect', 'login-component-cache') : config.helper.cacheDir } };
+    const runtime = platform === 'darwin' && arch === 'arm64' ? { ...ELECTRON_PIN, source: COMPONENT_SOURCES.npmmirror.source } : {};
+    const chosen = config.helper?.componentDownloadSource;
+    const selected = chosen === undefined ? {} : { source: preset(chosen) ? COMPONENT_SOURCES[chosen].source : '' };
+    return { ...config, commandOutputMaxBytes: config.commandOutputMaxBytes === undefined ? L_DEFAULTS.commandOutputMaxBytes : config.commandOutputMaxBytes, helper: { ...runtime, componentDownloadMaxRedirects: L_DEFAULTS.componentDownloadMaxRedirects, componentObservationIntervalMs: L_DEFAULTS.componentObservationIntervalMs, maxDownloadBytes: L_DEFAULTS.maxDownloadBytes, maxExtractedBytes: L_DEFAULTS.maxExtractedBytes, loginOutputMaxBytes: L_DEFAULTS.loginOutputMaxBytes, ipcMaxBytes: L_DEFAULTS.ipcMaxBytes, remoteKillGraceMs: L_DEFAULTS.remoteKillGraceMs, ...config.helper, ...selected, cacheDir: config.helper?.cacheDir === undefined ? join(profileDir, 'ai-workbench-connect', 'login-component-cache') : config.helper.cacheDir } };
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ai-workbench/connect",
-  "version": "0.7.5",
+  "version": "0.7.7",
   "type": "module",
   "engines": {
     "node": ">=24.13.1"