@ai-workbench/network 0.4.3 → 0.4.5

package/NOTICE.md

@@ -18,3 +18,6 @@ N3 SSH使用 golang.org/x/crypto/ssh v0.57.0（BSD-3-Clause；实际锁定版本
 N4插件peer：@deepseek-ai/cordis4.0.4、@deepseek-ai/schemastery3.18.4，均MIT，来源为固定DSH提交的vendor目录及官方npm包。TS5.9.3/Node24类型是构建依赖；实际闭包固定package-lock.json，新消费者闭包另存证据。主机下载只用Node内置http/https/tls/stream，经helper认证CONNECT，不新增外部代理库。源码/API升级需要在自有仓库适配，不提上游PR/issue或等待上游修改。
 
 0.4.3分发说明：唯一发布单元为network主包；helpers/darwin-arm64与helpers/darwin-x64的package.json是private内嵌身份元数据，不是独立发布依赖。每目标的helper-manifest.json固定二进制SHA，THIRD_PARTY_NOTICES.txt保留该目标Go实际编译依赖的许可原文，licenses-manifest.json列出模块、编译包、许可来源文件与SHA。构建来源为本仓cmd/aw-net及internal、固定go.mod/go.sum，Go1.27.3、CGO_ENABLED=0、ts_omit_logtail。
+
+
+D20（0.4.4）实际端点复用：x/crypto/ssh v0.57.0（BSD-3-Clause），creack/pty v1.1.24（MIT，revision edfbf75025b0ba4ee17c19f52d9b600fad80a787），kr/fs v0.1.0（BSD-3-Clause），x/sys v0.48.0（BSD-3-Clause）。新增SFTP本地fork源自github.com/pkg/sftp v1.13.11（BSD-2-Clause，revision fc82c354c0d87349411e30a08bef297c9f132105），只在本仓third_party/sftp维护有序操作及原生APPEND补丁；UPSTREAM.json逐文件来源SHA、D20.patch和原LICENSE均保留。不使用gliderlabs/ssh或go-shlex，不要求上游修改。以上固定模块的archive SHA、sum与许可摘要及最终两目标实际编译闭包见本轮依赖证据/各helpers许可证清单；不将未链接研究依赖冒充产品闭包。系统账户shell来自OS，不捆绑系统shell；N内建SFTP子模式随同一Go二进制交付，不依赖员工额外安装sshd、Node或SFTP程序。S主机桥工件独立由S提供、编排安装，N不修改或分发S源码。

package/README.md

@@ -1,14 +1,14 @@
-安装：在 DSH「插件 → 添加插件」填写 `@ai-workbench/network@0.4.3`，或运行 `dsh plugin --profile desktop add @ai-workbench/network@0.4.3`。
+安装：在 DSH「插件 → 添加插件」填写 `@ai-workbench/network@0.4.4`，或运行 `dsh plugin --profile desktop add @ai-workbench/network@0.4.4`。
 
 # 远程主机网络
 
-0.4.3 当前为待发布版本，由编排统一发布公开 npm；工人不执行 publish。发布前可由官方添加插件入口安装本轮固定主包 tgz 的绝对路径，无需再解析平台依赖。
+0.4.4 当前为待发布版本，由编排统一发布公开 npm；工人不执行 publish。发布前可由官方添加插件入口安装本轮固定主包 tgz 的绝对路径，无需再解析平台依赖。
 
 插件通过官方 bundle/Cordis 接口提供远程主机网络、设备身份、SSH 通道、认证登录代理及主机下载能力。不替换 DSH 服务、布局或默认设置，不增加工作区/登录界面。L 负责可信连接资料导入和登录入口，员工不手填主机、用户名、路径或密钥。没有连接资料时明确说明需要导入，不把插件 Running 当作网络已连接。
 
 主包从0.4.3起完整携带`helpers/darwin-arm64`和`helpers/darwin-x64`两架构Go助手，不再声明平台optionalDependencies或下载平台包。运行时只选择本机架构的内嵌文件，严格校验主包与内嵌metadata名称/版本/private/os/cpu、manifest平台/SHA格式，并在启动前验证实际二进制SHA256；缺失、损坏或平台不支持时用中文明确说明需要完整主包并保留原始cause，不使用PATH、旧平台包、另一架构或安装时下载。安装无postinstall/prepare等脚本。两目标分别附实际编译闭包的许可证原文、模块/文件来源与摘要，构建遇缺失声明明确失败。只提供macOS arm64/x64；x64构建/字节检查不等于Intel真机运行验收。
 
-旧0.4.1/0.4.2安装保留的锁/依赖树仍可能触发D16，直接add新主包不是迁移方案；L按`G-L-D16-MIGRATION-001`负责更新前重建、保留身份/配置/其他插件版本及失败恢复。本仓不移动员工profile/状态、不要求员工手删锁；公开`/api`、`/cordis`及wire apiVersion=1不变。
+旧0.4.1/0.4.2安装保留的锁/依赖树仍可能触发D16，直接add新主包不是迁移方案；owner已取消产品迁移；测试机的一次remove旧N→add新N整理由编排处理，保留原身份/配置，不把add当清理旧图的替代。本仓不移动员工profile/状态、不要求员工手删锁；公开`/api`、`/cordis`及wire apiVersion=1不变。
 
 一个默认 profile 只启用一个 N 条目。独立安装与 L 聚合安装不要重复挂载 N。N 的网络身份按系统用户隔离、持久保存；不重交未知结果的一次性 key。公开 `aiWorkbenchNetwork.activate(settings, signal)`、`getActivationState/onActivationState` 和通道 API；公开类型入口 `/api`，Cordis 类型入口 `/cordis`。`active` 表示身份恢复与消费交接完成，不等于主机 SSH 或 AI 登录已通过。原六项安装设置仍由可信开通提供；下述策略可在N自己的官方Config独立设置，不要求员工手填路径/身份，不新增数值默认。
 
@@ -42,3 +42,10 @@
 发布准备按 arm64 平台包 → x64 平台包 → 主包顺序 pack/dry-run，版本必须一致；固定 tgz、SHA256、文件清单及证据见仓库 `docs/evidence/2026-10-21-N-npm/` 和 N 回执。不要把先前单平台 0.4.0 的旧 lib/bin 混入本轮产物。根盘按当前编排规则低于8GiB停；临时 HOME、依赖、日志和构建缓存放自有 Elements APFS，用后精确清理，不删除公共缓存。
 
 完整提供方合同见仓库 `contracts/net-helper.md`，第三方来源见包内 NOTICE.md。只做中文，既有英文名称保留。官方 DSH 与 HanaMesh 分别验证；不使用 owner 当前实例，GUI 加载门不替代真实入网、登录、对话、物理断网或 leo E 验收。
+
+
+D20员工端点：0.4.4新增后端 `prepareEmployeeEndpoint(request, signal)`，按当前L本地工作区CAS与真实目录身份取目标；普通N先提供服务，运行时才消费L可选getter。设备SSH从真实OS账户home启动，每工作区的cwd由X逐请求显式指定，不成为路径权限根。L撤回/所有local消失只关闭D20，普通网络不变；一个工作区切换不重建设备。主机经S固定桥回接同一helper内嵌的完整exec/shell/PTY/SFTP端点，员工不开系统Remote Login、不填账户/密码/key。私有持久普通SSH身份在原N stateDir/employee-ssh下，坏身份明确失败、不自动换key，与tailnet入网身份分开。
+
+N从官方后端自行取得OS shell和原umask，经同UID子进程继承交付；L进程/环境对象不进HTTP或网络。exec为账户shell -c，无PTY shell普通启动、PTY为-i，不额外强制login；SSH env仅覆盖该channel，正常初始化由shell处理。会话子执行恢复DSH原umask，私有helper维持077。完整环境只留本机，不复制到主机/renderer/日志。固定S policy逐项消费，无新本地数值默认；N原controlResponseMaxBytes亦约束D20私有控制请求/响应和桥首帧，观察沿原dialTimeoutSeconds，不作为工具运行限时。生产SSH MaxAuthTries显式-1关闭认证次数限制，普通唯一client公钥认证仍必需；加密算法/重协商采用固定x/crypto公开默认。
+
+本包提供N端点与管理能力；两品牌原生工具改道、每RPC撤回、自动工具闭包、真实GUI/TCC/首次员工/leo及Intel实机须各自验收，不能以组件/开发桥验证代替。断线或缺命令完成确认保留UNKNOWN，不自动重连或重放文件/命令。mini原支持节点仍保留；禁止另起同身份N或把它用作D20实验。

package/helpers/darwin-arm64/NOTICE.md

@@ -18,3 +18,6 @@ N3 SSH使用 golang.org/x/crypto/ssh v0.57.0（BSD-3-Clause；实际锁定版本
 N4插件peer：@deepseek-ai/cordis4.0.4、@deepseek-ai/schemastery3.18.4，均MIT，来源为固定DSH提交的vendor目录及官方npm包。TS5.9.3/Node24类型是构建依赖；实际闭包固定package-lock.json，新消费者闭包另存证据。主机下载只用Node内置http/https/tls/stream，经helper认证CONNECT，不新增外部代理库。源码/API升级需要在自有仓库适配，不提上游PR/issue或等待上游修改。
 
 0.4.3分发说明：唯一发布单元为network主包；helpers/darwin-arm64与helpers/darwin-x64的package.json是private内嵌身份元数据，不是独立发布依赖。每目标的helper-manifest.json固定二进制SHA，THIRD_PARTY_NOTICES.txt保留该目标Go实际编译依赖的许可原文，licenses-manifest.json列出模块、编译包、许可来源文件与SHA。构建来源为本仓cmd/aw-net及internal、固定go.mod/go.sum，Go1.27.3、CGO_ENABLED=0、ts_omit_logtail。
+
+
+D20（0.4.4）实际端点复用：x/crypto/ssh v0.57.0（BSD-3-Clause），creack/pty v1.1.24（MIT，revision edfbf75025b0ba4ee17c19f52d9b600fad80a787），kr/fs v0.1.0（BSD-3-Clause），x/sys v0.48.0（BSD-3-Clause）。新增SFTP本地fork源自github.com/pkg/sftp v1.13.11（BSD-2-Clause，revision fc82c354c0d87349411e30a08bef297c9f132105），只在本仓third_party/sftp维护有序操作及原生APPEND补丁；UPSTREAM.json逐文件来源SHA、D20.patch和原LICENSE均保留。不使用gliderlabs/ssh或go-shlex，不要求上游修改。以上固定模块的archive SHA、sum与许可摘要及最终两目标实际编译闭包见本轮依赖证据/各helpers许可证清单；不将未链接研究依赖冒充产品闭包。系统账户shell来自OS，不捆绑系统shell；N内建SFTP子模式随同一Go二进制交付，不依赖员工额外安装sshd、Node或SFTP程序。S主机桥工件独立由S提供、编排安装，N不修改或分发S源码。

package/helpers/darwin-arm64/README.md

@@ -1 +1 @@
-这是`@ai-workbench/network@0.4.3`内嵌的macOS arm64助手，不再作为独立npm包安装或发布。由本仓Go1.27.3从固定go.mod/go.sum构建；同目录helper-manifest.json记录SHA256，THIRD_PARTY_NOTICES.txt和licenses-manifest.json记录此目标实际编译闭包的许可证原文与来源摘要。运行时只能选择本机架构并在启动前校验SHA；文件校验不等于Intel真机或真实联网验收。
+这是`@ai-workbench/network@0.4.4`内嵌的macOS arm64助手，不再作为独立npm包安装或发布。由本仓Go1.27.3从固定go.mod/go.sum构建；同目录helper-manifest.json记录SHA256，THIRD_PARTY_NOTICES.txt和licenses-manifest.json记录此目标实际编译闭包的许可证原文与来源摘要。运行时只能选择本机架构并在启动前校验SHA；文件校验不等于Intel真机或真实联网验收。

package/helpers/darwin-arm64/THIRD_PARTY_NOTICES.txt

@@ -46,6 +46,32 @@ ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
 OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
 
 
+===== github.com/creack/pty@v1.1.24/LICENSE =====
+Copyright (c) 2011 Keith Rarick
+
+Permission is hereby granted, free of charge, to any person
+obtaining a copy of this software and associated
+documentation files (the "Software"), to deal in the
+Software without restriction, including without limitation
+the rights to use, copy, modify, merge, publish, distribute,
+sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so,
+subject to the following conditions:
+
+The above copyright notice and this permission notice shall
+be included in all copies or substantial portions of the
+Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY
+KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE
+WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR
+PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS
+OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR
+OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR
+OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE
+SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+
 ===== github.com/fxamacker/cbor/v2@v2.9.3/LICENSE =====
 MIT License
 
@@ -953,6 +979,36 @@ OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
 WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
 
 
+===== github.com/kr/fs@v0.1.0/LICENSE =====
+Copyright (c) 2012 The Go Authors. All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are
+met:
+
+   * Redistributions of source code must retain the above copyright
+notice, this list of conditions and the following disclaimer.
+   * Redistributions in binary form must reproduce the above
+copyright notice, this list of conditions and the following disclaimer
+in the documentation and/or other materials provided with the
+distribution.
+   * Neither the name of Google Inc. nor the names of its
+contributors may be used to endorse or promote products derived from
+this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+"AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
+A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
+OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
+LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
+THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+
 ===== github.com/mitchellh/go-ps@v1.0.0/LICENSE.md =====
 The MIT License (MIT)
 
@@ -1181,6 +1237,18 @@ THE SOFTWARE.
    limitations under the License.
 
 
+===== github.com/pkg/sftp@v1.13.11/LICENSE =====
+Copyright (c) 2013, Dave Cheney
+All rights reserved.
+
+Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:
+
+ * Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer.
+ * Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+
 ===== github.com/tailscale/hujson@v0.0.0-20260727124030-b80ff77dac4f/LICENSE =====
 Copyright (c) 2019 Tailscale Inc. All rights reserved.
 

package/helpers/darwin-arm64/helper-manifest.json

@@ -1 +1 @@
-{"platform":"darwin","arch":"arm64","sha256":"597303055c9f7a797b421315a71cb110aa8c8437a5560d59d7684d6c0d86db07"}
+{"platform":"darwin","arch":"arm64","sha256":"c53e5811e06eaea0f3411ad4da87e88b7c33196fe0e775c7d36d669ad53bac86"}

package/helpers/darwin-arm64/licenses-manifest.json

@@ -9,6 +9,7 @@
     "Go go1.27.3",
     "filippo.io/edwards25519@v1.2.0",
     "github.com/coder/websocket@v1.8.15",
+    "github.com/creack/pty@v1.1.24",
     "github.com/fxamacker/cbor/v2@v2.9.3",
     "github.com/gaissmai/bart@v0.29.0",
     "github.com/go-json-experiment/json@v0.0.0-20260820222146-c27c302e5fc3",
@@ -17,8 +18,10 @@
     "github.com/hdevalence/ed25519consensus@v0.2.0",
     "github.com/huin/goupnp@v1.3.0",
     "github.com/klauspost/compress@v1.20.0",
+    "github.com/kr/fs@v0.1.0",
     "github.com/mitchellh/go-ps@v1.0.0",
     "github.com/pires/go-proxyproto@v0.15.0",
+    "github.com/pkg/sftp@v1.13.11",
     "github.com/tailscale/hujson@v0.0.0-20260727124030-b80ff77dac4f",
     "github.com/tailscale/peercred@v0.0.0-20250107143737-35a0c7bd7edc",
     "github.com/tailscale/web-client-prebuilt@v0.0.0-20260917222731-e0ed2d0d0fea",
@@ -483,22 +486,6 @@
       "module": "Go go1.27.3",
       "package": "src/crypto/sha256"
     },
-    {
-      "module": "Go go1.27.3",
-      "package": "src/path/filepath"
-    },
-    {
-      "module": "Go go1.27.3",
-      "package": "src/sort"
-    },
-    {
-      "module": "Go go1.27.3",
-      "package": "src/regexp/syntax"
-    },
-    {
-      "module": "Go go1.27.3",
-      "package": "src/regexp"
-    },
     {
       "module": "Go go1.27.3",
       "package": "src/crypto/aes"
@@ -687,6 +674,10 @@
       "module": "Go go1.27.3",
       "package": "src/net/url"
     },
+    {
+      "module": "Go go1.27.3",
+      "package": "src/path/filepath"
+    },
     {
       "module": "Go go1.27.3",
       "package": "src/crypto/x509"
@@ -731,10 +722,58 @@
       "module": "Go go1.27.3",
       "package": "src/log"
     },
+    {
+      "module": "Go go1.27.3",
+      "package": "src/sort"
+    },
     {
       "module": "golang.org/x/crypto@v0.57.0",
       "package": "ssh"
     },
+    {
+      "module": "Go go1.27.3",
+      "package": "src/regexp/syntax"
+    },
+    {
+      "module": "Go go1.27.3",
+      "package": "src/regexp"
+    },
+    {
+      "module": "Go go1.27.3",
+      "package": "src/os/user"
+    },
+    {
+      "module": "Go go1.27.3",
+      "package": "src/os/exec"
+    },
+    {
+      "module": "github.com/creack/pty@v1.1.24",
+      "package": ""
+    },
+    {
+      "module": "Go go1.27.3",
+      "package": "src/io/ioutil"
+    },
+    {
+      "module": "github.com/kr/fs@v0.1.0",
+      "package": ""
+    },
+    {
+      "module": "github.com/pkg/sftp@v1.13.11",
+      "package": "internal/encoding/ssh/filexfer"
+    },
+    {
+      "module": "github.com/pkg/sftp@v1.13.11",
+      "package": "internal/encoding/ssh/filexfer/openssh"
+    },
+    {
+      "module": "github.com/pkg/sftp@v1.13.11",
+      "package": ""
+    },
+    {
+      "module": "golang.org/x/sys@v0.48.0",
+      "package": "unix"
+    },
     {
       "module": "golang.org/x/crypto@v0.57.0",
       "package": "ssh/knownhosts"
@@ -887,10 +926,6 @@
       "module": "go4.org/mem@v0.0.0-20240501181205-ae6ca9944745",
       "package": ""
     },
-    {
-      "module": "Go go1.27.3",
-      "package": "src/os/exec"
-    },
     {
       "module": "github.com/go-json-experiment/json@v0.0.0-20260820222146-c27c302e5fc3",
       "package": ""
@@ -1279,10 +1314,6 @@
       "module": "golang.org/x/net@v0.59.0",
       "package": "route"
     },
-    {
-      "module": "golang.org/x/sys@v0.48.0",
-      "package": "unix"
-    },
     {
       "module": "tailscale.com@v1.104.1",
       "package": "util/cloudenv"
@@ -1335,10 +1366,6 @@
       "module": "tailscale.com@v1.104.1",
       "package": "net/udprelay/status"
     },
-    {
-      "module": "Go go1.27.3",
-      "package": "src/os/user"
-    },
     {
       "module": "tailscale.com@v1.104.1",
       "package": "paths"
@@ -2095,10 +2122,6 @@
       "module": "github.com/huin/goupnp@v1.3.0",
       "package": "scpd"
     },
-    {
-      "module": "Go go1.27.3",
-      "package": "src/io/ioutil"
-    },
     {
       "module": "github.com/huin/goupnp@v1.3.0",
       "package": "soap"
@@ -2281,6 +2304,10 @@
       "source": "github.com/coder/websocket@v1.8.15/LICENSE.txt",
       "sha256": "cc0975a5f6305145bdd7b41ce9479632fdac3870e6ac4281f28017f18c767c4e"
     },
+    {
+      "source": "github.com/creack/pty@v1.1.24/LICENSE",
+      "sha256": "a2a1cea59d9c2d71908082f516f86bb560abf857646ecf69d70c121ead14aef4"
+    },
     {
       "source": "github.com/fxamacker/cbor/v2@v2.9.3/LICENSE",
       "sha256": "78cad457d5ea7318230f3d969d4cdf29cef45524a1fc8ca3a97646da1ad7a841"
@@ -2329,6 +2356,10 @@
       "source": "github.com/klauspost/compress@v1.20.0/zstd/internal/xxhash/LICENSE.txt",
       "sha256": "f566a9f97bacdaf00d9f21dd991e81dc11201c4e016c86b470799429a1c9a79c"
     },
+    {
+      "source": "github.com/kr/fs@v0.1.0/LICENSE",
+      "sha256": "dd26a7abddd02e2d0aba97805b31f248ef7835d9e10da289b22e3b8ab78b324d"
+    },
     {
       "source": "github.com/mitchellh/go-ps@v1.0.0/LICENSE.md",
       "sha256": "3c377fad2e5ae1d7081c7c2f16da867a87cca1d1f5f1aa7ed0b8a16bb553142a"
@@ -2337,6 +2368,10 @@
       "source": "github.com/pires/go-proxyproto@v0.15.0/LICENSE",
       "sha256": "666f1951be1d543e744818d232bb311a4a310fd1d344288642c796fca39af3c7"
     },
+    {
+      "source": "github.com/pkg/sftp@v1.13.11/LICENSE",
+      "sha256": "f5b5087b8e596d015cfea7db26527fe67a196c18ca37415c288dd2534ff74c37"
+    },
     {
       "source": "github.com/tailscale/hujson@v0.0.0-20260727124030-b80ff77dac4f/LICENSE",
       "sha256": "a125b6c2721809b6c2a8761771932611833008ed8697d752b3e35d36e4bbd83e"

package/helpers/darwin-arm64/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ai-workbench/net-helper-darwin-arm64",
-  "version": "0.4.3",
+  "version": "0.4.5",
   "description": "远程主机网络助手（macOS arm64，仅随network主包内嵌分发）",
   "os": [
     "darwin"

package/helpers/darwin-x64/NOTICE.md

@@ -18,3 +18,6 @@ N3 SSH使用 golang.org/x/crypto/ssh v0.57.0（BSD-3-Clause；实际锁定版本
 N4插件peer：@deepseek-ai/cordis4.0.4、@deepseek-ai/schemastery3.18.4，均MIT，来源为固定DSH提交的vendor目录及官方npm包。TS5.9.3/Node24类型是构建依赖；实际闭包固定package-lock.json，新消费者闭包另存证据。主机下载只用Node内置http/https/tls/stream，经helper认证CONNECT，不新增外部代理库。源码/API升级需要在自有仓库适配，不提上游PR/issue或等待上游修改。
 
 0.4.3分发说明：唯一发布单元为network主包；helpers/darwin-arm64与helpers/darwin-x64的package.json是private内嵌身份元数据，不是独立发布依赖。每目标的helper-manifest.json固定二进制SHA，THIRD_PARTY_NOTICES.txt保留该目标Go实际编译依赖的许可原文，licenses-manifest.json列出模块、编译包、许可来源文件与SHA。构建来源为本仓cmd/aw-net及internal、固定go.mod/go.sum，Go1.27.3、CGO_ENABLED=0、ts_omit_logtail。
+
+
+D20（0.4.4）实际端点复用：x/crypto/ssh v0.57.0（BSD-3-Clause），creack/pty v1.1.24（MIT，revision edfbf75025b0ba4ee17c19f52d9b600fad80a787），kr/fs v0.1.0（BSD-3-Clause），x/sys v0.48.0（BSD-3-Clause）。新增SFTP本地fork源自github.com/pkg/sftp v1.13.11（BSD-2-Clause，revision fc82c354c0d87349411e30a08bef297c9f132105），只在本仓third_party/sftp维护有序操作及原生APPEND补丁；UPSTREAM.json逐文件来源SHA、D20.patch和原LICENSE均保留。不使用gliderlabs/ssh或go-shlex，不要求上游修改。以上固定模块的archive SHA、sum与许可摘要及最终两目标实际编译闭包见本轮依赖证据/各helpers许可证清单；不将未链接研究依赖冒充产品闭包。系统账户shell来自OS，不捆绑系统shell；N内建SFTP子模式随同一Go二进制交付，不依赖员工额外安装sshd、Node或SFTP程序。S主机桥工件独立由S提供、编排安装，N不修改或分发S源码。

package/helpers/darwin-x64/README.md

@@ -1 +1 @@
-这是`@ai-workbench/network@0.4.3`内嵌的macOS x64助手，不再作为独立npm包安装或发布。由本仓Go1.27.3从固定go.mod/go.sum构建；同目录helper-manifest.json记录SHA256，THIRD_PARTY_NOTICES.txt和licenses-manifest.json记录此目标实际编译闭包的许可证原文与来源摘要。运行时只能选择本机架构并在启动前校验SHA；文件校验不等于Intel真机或真实联网验收。
+这是`@ai-workbench/network@0.4.4`内嵌的macOS x64助手，不再作为独立npm包安装或发布。由本仓Go1.27.3从固定go.mod/go.sum构建；同目录helper-manifest.json记录SHA256，THIRD_PARTY_NOTICES.txt和licenses-manifest.json记录此目标实际编译闭包的许可证原文与来源摘要。运行时只能选择本机架构并在启动前校验SHA；文件校验不等于Intel真机或真实联网验收。

package/helpers/darwin-x64/THIRD_PARTY_NOTICES.txt

@@ -46,6 +46,32 @@ ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
 OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
 
 
+===== github.com/creack/pty@v1.1.24/LICENSE =====
+Copyright (c) 2011 Keith Rarick
+
+Permission is hereby granted, free of charge, to any person
+obtaining a copy of this software and associated
+documentation files (the "Software"), to deal in the
+Software without restriction, including without limitation
+the rights to use, copy, modify, merge, publish, distribute,
+sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so,
+subject to the following conditions:
+
+The above copyright notice and this permission notice shall
+be included in all copies or substantial portions of the
+Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY
+KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE
+WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR
+PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS
+OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR
+OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR
+OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE
+SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+
 ===== github.com/fxamacker/cbor/v2@v2.9.3/LICENSE =====
 MIT License
 
@@ -953,6 +979,36 @@ OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
 WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
 
 
+===== github.com/kr/fs@v0.1.0/LICENSE =====
+Copyright (c) 2012 The Go Authors. All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are
+met:
+
+   * Redistributions of source code must retain the above copyright
+notice, this list of conditions and the following disclaimer.
+   * Redistributions in binary form must reproduce the above
+copyright notice, this list of conditions and the following disclaimer
+in the documentation and/or other materials provided with the
+distribution.
+   * Neither the name of Google Inc. nor the names of its
+contributors may be used to endorse or promote products derived from
+this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+"AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
+A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
+OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
+LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
+THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+
 ===== github.com/mitchellh/go-ps@v1.0.0/LICENSE.md =====
 The MIT License (MIT)
 
@@ -1181,6 +1237,18 @@ THE SOFTWARE.
    limitations under the License.
 
 
+===== github.com/pkg/sftp@v1.13.11/LICENSE =====
+Copyright (c) 2013, Dave Cheney
+All rights reserved.
+
+Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:
+
+ * Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer.
+ * Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+
 ===== github.com/tailscale/hujson@v0.0.0-20260727124030-b80ff77dac4f/LICENSE =====
 Copyright (c) 2019 Tailscale Inc. All rights reserved.
 

package/helpers/darwin-x64/helper-manifest.json

@@ -1 +1 @@
-{"platform":"darwin","arch":"x64","sha256":"93fd31c86da81d00d31daeea55de5aef8e32cd7328d1393e3a52f348b9c86584"}
+{"platform":"darwin","arch":"x64","sha256":"255909c42f1b61c676117a4e040e3bba0372a8e893934f5e7bea5ba83ad231ad"}

package/helpers/darwin-x64/licenses-manifest.json

@@ -9,6 +9,7 @@
     "Go go1.27.3",
     "filippo.io/edwards25519@v1.2.0",
     "github.com/coder/websocket@v1.8.15",
+    "github.com/creack/pty@v1.1.24",
     "github.com/fxamacker/cbor/v2@v2.9.3",
     "github.com/gaissmai/bart@v0.29.0",
     "github.com/go-json-experiment/json@v0.0.0-20260820222146-c27c302e5fc3",
@@ -17,8 +18,10 @@
     "github.com/hdevalence/ed25519consensus@v0.2.0",
     "github.com/huin/goupnp@v1.3.0",
     "github.com/klauspost/compress@v1.20.0",
+    "github.com/kr/fs@v0.1.0",
     "github.com/mitchellh/go-ps@v1.0.0",
     "github.com/pires/go-proxyproto@v0.15.0",
+    "github.com/pkg/sftp@v1.13.11",
     "github.com/tailscale/hujson@v0.0.0-20260727124030-b80ff77dac4f",
     "github.com/tailscale/peercred@v0.0.0-20250107143737-35a0c7bd7edc",
     "github.com/tailscale/web-client-prebuilt@v0.0.0-20260917222731-e0ed2d0d0fea",
@@ -483,22 +486,6 @@
       "module": "Go go1.27.3",
       "package": "src/crypto/sha256"
     },
-    {
-      "module": "Go go1.27.3",
-      "package": "src/path/filepath"
-    },
-    {
-      "module": "Go go1.27.3",
-      "package": "src/sort"
-    },
-    {
-      "module": "Go go1.27.3",
-      "package": "src/regexp/syntax"
-    },
-    {
-      "module": "Go go1.27.3",
-      "package": "src/regexp"
-    },
     {
       "module": "Go go1.27.3",
       "package": "src/crypto/aes"
@@ -687,6 +674,10 @@
       "module": "Go go1.27.3",
       "package": "src/net/url"
     },
+    {
+      "module": "Go go1.27.3",
+      "package": "src/path/filepath"
+    },
     {
       "module": "Go go1.27.3",
       "package": "src/crypto/x509"
@@ -731,10 +722,58 @@
       "module": "Go go1.27.3",
       "package": "src/log"
     },
+    {
+      "module": "Go go1.27.3",
+      "package": "src/sort"
+    },
     {
       "module": "golang.org/x/crypto@v0.57.0",
       "package": "ssh"
     },
+    {
+      "module": "Go go1.27.3",
+      "package": "src/regexp/syntax"
+    },
+    {
+      "module": "Go go1.27.3",
+      "package": "src/regexp"
+    },
+    {
+      "module": "Go go1.27.3",
+      "package": "src/os/user"
+    },
+    {
+      "module": "Go go1.27.3",
+      "package": "src/os/exec"
+    },
+    {
+      "module": "github.com/creack/pty@v1.1.24",
+      "package": ""
+    },
+    {
+      "module": "Go go1.27.3",
+      "package": "src/io/ioutil"
+    },
+    {
+      "module": "github.com/kr/fs@v0.1.0",
+      "package": ""
+    },
+    {
+      "module": "github.com/pkg/sftp@v1.13.11",
+      "package": "internal/encoding/ssh/filexfer"
+    },
+    {
+      "module": "github.com/pkg/sftp@v1.13.11",
+      "package": "internal/encoding/ssh/filexfer/openssh"
+    },
+    {
+      "module": "github.com/pkg/sftp@v1.13.11",
+      "package": ""
+    },
+    {
+      "module": "golang.org/x/sys@v0.48.0",
+      "package": "unix"
+    },
     {
       "module": "golang.org/x/crypto@v0.57.0",
       "package": "ssh/knownhosts"
@@ -891,10 +930,6 @@
       "module": "go4.org/mem@v0.0.0-20240501181205-ae6ca9944745",
       "package": ""
     },
-    {
-      "module": "Go go1.27.3",
-      "package": "src/os/exec"
-    },
     {
       "module": "github.com/go-json-experiment/json@v0.0.0-20260820222146-c27c302e5fc3",
       "package": ""
@@ -1283,10 +1318,6 @@
       "module": "golang.org/x/net@v0.59.0",
       "package": "route"
     },
-    {
-      "module": "golang.org/x/sys@v0.48.0",
-      "package": "unix"
-    },
     {
       "module": "tailscale.com@v1.104.1",
       "package": "util/cloudenv"
@@ -1339,10 +1370,6 @@
       "module": "tailscale.com@v1.104.1",
       "package": "net/udprelay/status"
     },
-    {
-      "module": "Go go1.27.3",
-      "package": "src/os/user"
-    },
     {
       "module": "tailscale.com@v1.104.1",
       "package": "paths"
@@ -2103,10 +2130,6 @@
       "module": "github.com/huin/goupnp@v1.3.0",
       "package": "scpd"
     },
-    {
-      "module": "Go go1.27.3",
-      "package": "src/io/ioutil"
-    },
     {
       "module": "github.com/huin/goupnp@v1.3.0",
       "package": "soap"
@@ -2289,6 +2312,10 @@
       "source": "github.com/coder/websocket@v1.8.15/LICENSE.txt",
       "sha256": "cc0975a5f6305145bdd7b41ce9479632fdac3870e6ac4281f28017f18c767c4e"
     },
+    {
+      "source": "github.com/creack/pty@v1.1.24/LICENSE",
+      "sha256": "a2a1cea59d9c2d71908082f516f86bb560abf857646ecf69d70c121ead14aef4"
+    },
     {
       "source": "github.com/fxamacker/cbor/v2@v2.9.3/LICENSE",
       "sha256": "78cad457d5ea7318230f3d969d4cdf29cef45524a1fc8ca3a97646da1ad7a841"
@@ -2337,6 +2364,10 @@
       "source": "github.com/klauspost/compress@v1.20.0/zstd/internal/xxhash/LICENSE.txt",
       "sha256": "f566a9f97bacdaf00d9f21dd991e81dc11201c4e016c86b470799429a1c9a79c"
     },
+    {
+      "source": "github.com/kr/fs@v0.1.0/LICENSE",
+      "sha256": "dd26a7abddd02e2d0aba97805b31f248ef7835d9e10da289b22e3b8ab78b324d"
+    },
     {
       "source": "github.com/mitchellh/go-ps@v1.0.0/LICENSE.md",
       "sha256": "3c377fad2e5ae1d7081c7c2f16da867a87cca1d1f5f1aa7ed0b8a16bb553142a"
@@ -2345,6 +2376,10 @@
       "source": "github.com/pires/go-proxyproto@v0.15.0/LICENSE",
       "sha256": "666f1951be1d543e744818d232bb311a4a310fd1d344288642c796fca39af3c7"
     },
+    {
+      "source": "github.com/pkg/sftp@v1.13.11/LICENSE",
+      "sha256": "f5b5087b8e596d015cfea7db26527fe67a196c18ca37415c288dd2534ff74c37"
+    },
     {
       "source": "github.com/tailscale/hujson@v0.0.0-20260727124030-b80ff77dac4f/LICENSE",
       "sha256": "a125b6c2721809b6c2a8761771932611833008ed8697d752b3e35d36e4bbd83e"

package/helpers/darwin-x64/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ai-workbench/net-helper-darwin-x64",
-  "version": "0.4.3",
+  "version": "0.4.5",
   "description": "远程主机网络助手（macOS x64，仅随network主包内嵌分发）",
   "os": [
     "darwin"