@ai-workbench/network 0.4.5 → 0.4.7

package/helpers/darwin-x64/licenses-manifest.json

@@ -778,21 +778,169 @@
       "module": "golang.org/x/crypto@v0.57.0",
       "package": "ssh/knownhosts"
     },
+    {
+      "module": "gvisor.dev/gvisor@v0.0.0-20260915211658-a6f909f08a72",
+      "package": "pkg/gohacks"
+    },
+    {
+      "module": "gvisor.dev/gvisor@v0.0.0-20260915211658-a6f909f08a72",
+      "package": "pkg/sync"
+    },
+    {
+      "module": "gvisor.dev/gvisor@v0.0.0-20260915211658-a6f909f08a72",
+      "package": "pkg/state/wire"
+    },
+    {
+      "module": "gvisor.dev/gvisor@v0.0.0-20260915211658-a6f909f08a72",
+      "package": "pkg/state"
+    },
+    {
+      "module": "gvisor.dev/gvisor@v0.0.0-20260915211658-a6f909f08a72",
+      "package": "pkg/atomicbitops"
+    },
+    {
+      "module": "golang.org/x/exp@v0.0.0-20260908205506-85c1c2202aba",
+      "package": "constraints"
+    },
+    {
+      "module": "gvisor.dev/gvisor@v0.0.0-20260915211658-a6f909f08a72",
+      "package": "pkg/bits"
+    },
+    {
+      "module": "golang.org/x/time@v0.16.0",
+      "package": "rate"
+    },
+    {
+      "module": "gvisor.dev/gvisor@v0.0.0-20260915211658-a6f909f08a72",
+      "package": "pkg/linewriter"
+    },
+    {
+      "module": "gvisor.dev/gvisor@v0.0.0-20260915211658-a6f909f08a72",
+      "package": "pkg/log"
+    },
+    {
+      "module": "gvisor.dev/gvisor@v0.0.0-20260915211658-a6f909f08a72",
+      "package": "pkg/waiter"
+    },
+    {
+      "module": "gvisor.dev/gvisor@v0.0.0-20260915211658-a6f909f08a72",
+      "package": "pkg/context"
+    },
+    {
+      "module": "gvisor.dev/gvisor@v0.0.0-20260915211658-a6f909f08a72",
+      "package": "pkg/refs"
+    },
+    {
+      "module": "gvisor.dev/gvisor@v0.0.0-20260915211658-a6f909f08a72",
+      "package": "pkg/tcpip/checksum"
+    },
+    {
+      "module": "gvisor.dev/gvisor@v0.0.0-20260915211658-a6f909f08a72",
+      "package": "pkg/buffer"
+    },
+    {
+      "module": "gvisor.dev/gvisor@v0.0.0-20260915211658-a6f909f08a72",
+      "package": "pkg/rand"
+    },
+    {
+      "module": "gvisor.dev/gvisor@v0.0.0-20260915211658-a6f909f08a72",
+      "package": "pkg/tcpip"
+    },
+    {
+      "module": "gvisor.dev/gvisor@v0.0.0-20260915211658-a6f909f08a72",
+      "package": "pkg/sync/locking"
+    },
+    {
+      "module": "gvisor.dev/gvisor@v0.0.0-20260915211658-a6f909f08a72",
+      "package": "pkg/tcpip/hash/jenkins"
+    },
+    {
+      "module": "gvisor.dev/gvisor@v0.0.0-20260915211658-a6f909f08a72",
+      "package": "pkg/tcpip/seqnum"
+    },
+    {
+      "module": "gvisor.dev/gvisor@v0.0.0-20260915211658-a6f909f08a72",
+      "package": "pkg/tcpip/header"
+    },
+    {
+      "module": "gvisor.dev/gvisor@v0.0.0-20260915211658-a6f909f08a72",
+      "package": "pkg/tcpip/ports"
+    },
+    {
+      "module": "gvisor.dev/gvisor@v0.0.0-20260915211658-a6f909f08a72",
+      "package": "pkg/tcpip/transport/tcpconntrack"
+    },
+    {
+      "module": "gvisor.dev/gvisor@v0.0.0-20260915211658-a6f909f08a72",
+      "package": "pkg/tcpip/stack"
+    },
     {
       "module": "Go go1.27.3",
-      "package": "src/compress/flate"
+      "package": "src/container/heap"
     },
     {
       "module": "Go go1.27.3",
-      "package": "src/hash/crc32"
+      "package": "src/container/list"
+    },
+    {
+      "module": "github.com/google/btree@v1.1.3",
+      "package": ""
+    },
+    {
+      "module": "gvisor.dev/gvisor@v0.0.0-20260915211658-a6f909f08a72",
+      "package": "pkg/sleep"
+    },
+    {
+      "module": "gvisor.dev/gvisor@v0.0.0-20260915211658-a6f909f08a72",
+      "package": "pkg/tcpip/header/parse"
+    },
+    {
+      "module": "gvisor.dev/gvisor@v0.0.0-20260915211658-a6f909f08a72",
+      "package": "pkg/tcpip/internal/tcp"
+    },
+    {
+      "module": "gvisor.dev/gvisor@v0.0.0-20260915211658-a6f909f08a72",
+      "package": "pkg/tcpip/transport"
+    },
+    {
+      "module": "gvisor.dev/gvisor@v0.0.0-20260915211658-a6f909f08a72",
+      "package": "pkg/tcpip/transport/internal/network"
+    },
+    {
+      "module": "gvisor.dev/gvisor@v0.0.0-20260915211658-a6f909f08a72",
+      "package": "pkg/tcpip/transport/internal/noop"
+    },
+    {
+      "module": "gvisor.dev/gvisor@v0.0.0-20260915211658-a6f909f08a72",
+      "package": "pkg/tcpip/transport/packet"
+    },
+    {
+      "module": "gvisor.dev/gvisor@v0.0.0-20260915211658-a6f909f08a72",
+      "package": "pkg/tcpip/transport/raw"
+    },
+    {
+      "module": "gvisor.dev/gvisor@v0.0.0-20260915211658-a6f909f08a72",
+      "package": "pkg/tcpip/transport/tcp"
+    },
+    {
+      "module": "gvisor.dev/gvisor@v0.0.0-20260915211658-a6f909f08a72",
+      "package": "pkg/tcpip/transport/udp"
+    },
+    {
+      "module": "gvisor.dev/gvisor@v0.0.0-20260915211658-a6f909f08a72",
+      "package": "pkg/tcpip/adapters/gonet"
     },
     {
       "module": "Go go1.27.3",
-      "package": "src/compress/gzip"
+      "package": "src/compress/flate"
     },
     {
       "module": "Go go1.27.3",
-      "package": "src/container/list"
+      "package": "src/hash/crc32"
+    },
+    {
+      "module": "Go go1.27.3",
+      "package": "src/compress/gzip"
     },
     {
       "module": "Go go1.27.3",
@@ -1002,10 +1150,6 @@
       "module": "tailscale.com@v1.104.1",
       "package": "util/bufiox"
     },
-    {
-      "module": "golang.org/x/exp@v0.0.0-20260908205506-85c1c2202aba",
-      "package": "constraints"
-    },
     {
       "module": "tailscale.com@v1.104.1",
       "package": "util/mak"
@@ -1726,98 +1870,6 @@
       "module": "github.com/tailscale/wireguard-go@v0.0.0-20260928213032-417aef361226",
       "package": "device"
     },
-    {
-      "module": "golang.org/x/time@v0.16.0",
-      "package": "rate"
-    },
-    {
-      "module": "gvisor.dev/gvisor@v0.0.0-20260915211658-a6f909f08a72",
-      "package": "pkg/gohacks"
-    },
-    {
-      "module": "gvisor.dev/gvisor@v0.0.0-20260915211658-a6f909f08a72",
-      "package": "pkg/state/wire"
-    },
-    {
-      "module": "gvisor.dev/gvisor@v0.0.0-20260915211658-a6f909f08a72",
-      "package": "pkg/state"
-    },
-    {
-      "module": "gvisor.dev/gvisor@v0.0.0-20260915211658-a6f909f08a72",
-      "package": "pkg/sync"
-    },
-    {
-      "module": "gvisor.dev/gvisor@v0.0.0-20260915211658-a6f909f08a72",
-      "package": "pkg/atomicbitops"
-    },
-    {
-      "module": "gvisor.dev/gvisor@v0.0.0-20260915211658-a6f909f08a72",
-      "package": "pkg/bits"
-    },
-    {
-      "module": "gvisor.dev/gvisor@v0.0.0-20260915211658-a6f909f08a72",
-      "package": "pkg/linewriter"
-    },
-    {
-      "module": "gvisor.dev/gvisor@v0.0.0-20260915211658-a6f909f08a72",
-      "package": "pkg/log"
-    },
-    {
-      "module": "gvisor.dev/gvisor@v0.0.0-20260915211658-a6f909f08a72",
-      "package": "pkg/waiter"
-    },
-    {
-      "module": "gvisor.dev/gvisor@v0.0.0-20260915211658-a6f909f08a72",
-      "package": "pkg/context"
-    },
-    {
-      "module": "gvisor.dev/gvisor@v0.0.0-20260915211658-a6f909f08a72",
-      "package": "pkg/refs"
-    },
-    {
-      "module": "gvisor.dev/gvisor@v0.0.0-20260915211658-a6f909f08a72",
-      "package": "pkg/tcpip/checksum"
-    },
-    {
-      "module": "gvisor.dev/gvisor@v0.0.0-20260915211658-a6f909f08a72",
-      "package": "pkg/buffer"
-    },
-    {
-      "module": "gvisor.dev/gvisor@v0.0.0-20260915211658-a6f909f08a72",
-      "package": "pkg/rand"
-    },
-    {
-      "module": "gvisor.dev/gvisor@v0.0.0-20260915211658-a6f909f08a72",
-      "package": "pkg/sync/locking"
-    },
-    {
-      "module": "gvisor.dev/gvisor@v0.0.0-20260915211658-a6f909f08a72",
-      "package": "pkg/tcpip"
-    },
-    {
-      "module": "gvisor.dev/gvisor@v0.0.0-20260915211658-a6f909f08a72",
-      "package": "pkg/tcpip/hash/jenkins"
-    },
-    {
-      "module": "gvisor.dev/gvisor@v0.0.0-20260915211658-a6f909f08a72",
-      "package": "pkg/tcpip/seqnum"
-    },
-    {
-      "module": "gvisor.dev/gvisor@v0.0.0-20260915211658-a6f909f08a72",
-      "package": "pkg/tcpip/header"
-    },
-    {
-      "module": "gvisor.dev/gvisor@v0.0.0-20260915211658-a6f909f08a72",
-      "package": "pkg/tcpip/ports"
-    },
-    {
-      "module": "gvisor.dev/gvisor@v0.0.0-20260915211658-a6f909f08a72",
-      "package": "pkg/tcpip/transport/tcpconntrack"
-    },
-    {
-      "module": "gvisor.dev/gvisor@v0.0.0-20260915211658-a6f909f08a72",
-      "package": "pkg/tcpip/stack"
-    },
     {
       "module": "tailscale.com@v1.104.1",
       "package": "disco"
@@ -1842,10 +1894,6 @@
       "module": "tailscale.com@v1.104.1",
       "package": "types/netlogfunc"
     },
-    {
-      "module": "gvisor.dev/gvisor@v0.0.0-20260915211658-a6f909f08a72",
-      "package": "pkg/tcpip/header/parse"
-    },
     {
       "module": "gvisor.dev/gvisor@v0.0.0-20260915211658-a6f909f08a72",
       "package": "pkg/tcpip/stack/gro"
@@ -2214,54 +2262,6 @@
       "module": "tailscale.com@v1.104.1",
       "package": "net/socks5"
     },
-    {
-      "module": "Go go1.27.3",
-      "package": "src/container/heap"
-    },
-    {
-      "module": "github.com/google/btree@v1.1.3",
-      "package": ""
-    },
-    {
-      "module": "gvisor.dev/gvisor@v0.0.0-20260915211658-a6f909f08a72",
-      "package": "pkg/sleep"
-    },
-    {
-      "module": "gvisor.dev/gvisor@v0.0.0-20260915211658-a6f909f08a72",
-      "package": "pkg/tcpip/internal/tcp"
-    },
-    {
-      "module": "gvisor.dev/gvisor@v0.0.0-20260915211658-a6f909f08a72",
-      "package": "pkg/tcpip/transport"
-    },
-    {
-      "module": "gvisor.dev/gvisor@v0.0.0-20260915211658-a6f909f08a72",
-      "package": "pkg/tcpip/transport/internal/network"
-    },
-    {
-      "module": "gvisor.dev/gvisor@v0.0.0-20260915211658-a6f909f08a72",
-      "package": "pkg/tcpip/transport/internal/noop"
-    },
-    {
-      "module": "gvisor.dev/gvisor@v0.0.0-20260915211658-a6f909f08a72",
-      "package": "pkg/tcpip/transport/packet"
-    },
-    {
-      "module": "gvisor.dev/gvisor@v0.0.0-20260915211658-a6f909f08a72",
-      "package": "pkg/tcpip/transport/raw"
-    },
-    {
-      "module": "gvisor.dev/gvisor@v0.0.0-20260915211658-a6f909f08a72",
-      "package": "pkg/tcpip/transport/tcp"
-    },
-    {
-      "module": "gvisor.dev/gvisor@v0.0.0-20260915211658-a6f909f08a72",
-      "package": "pkg/tcpip/transport/udp"
-    },
-    {
-      "module": "gvisor.dev/gvisor@v0.0.0-20260915211658-a6f909f08a72",
-      "package": "pkg/tcpip/adapters/gonet"
-    },
     {
       "module": "gvisor.dev/gvisor@v0.0.0-20260915211658-a6f909f08a72",
       "package": "pkg/tcpip/network/hash"

package/helpers/darwin-x64/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ai-workbench/net-helper-darwin-x64",
-  "version": "0.4.5",
+  "version": "0.4.7",
   "description": "远程主机网络助手（macOS x64，仅随network主包内嵌分发）",
   "os": [
     "darwin"

package/lib/activation.js

@@ -2,7 +2,7 @@ import { randomUUID } from 'node:crypto';
 import { isAbsolute } from 'node:path';
 import { createNetwork } from "./network.js";
 import { fail, ok } from "./api.js";
-import { settingsFields as fields, validHelperPolicy, mergedSettings } from "./settings.js";
+import { settingsFields as fields, validHelperPolicy, validRecoveryPolicy, recoveryPolicy, mergedSettings } from "./settings.js";
 import { createEmployeeEndpointController } from "./employee-endpoint.js";
 function normalized(s) {
     if (!s || typeof s !== 'object' || Object.keys(s).some(k => !fields.includes(k)))
@@ -14,7 +14,7 @@ function normalized(s) {
             return;
     if (!Number.isSafeInteger(s.controlResponseMaxBytes) || s.controlResponseMaxBytes <= 0 || !Number.isSafeInteger(s.downloadMaxRedirects) || s.downloadMaxRedirects < 0)
         return;
-    if (!validHelperPolicy(s))
+    if (!validHelperPolicy(s) || !validRecoveryPolicy(s))
         return;
     return Object.fromEntries(fields.filter(k => s[k] !== undefined).map(k => [k, s[k]]));
 }
@@ -23,6 +23,9 @@ export function createActivationService(initial, executable, emit = () => { }, f
     let network = { phase: 'blocked', error: { code: 'SETTINGS_REQUIRED', message: '我需要导入连接资料。', needs: '在设置 → 远程主机连接 导入连接资料', actor: 'network' } };
     let activation = { instanceId: randomUUID(), revision: 0, phase: 'unconfigured', receipt: null, error: network.error };
     let runtime, selected, disposed = false, disposing, handoff, generation = 0, handedOff = false, consumerOnline = false;
+    let recoveryTimer, stableTimer, recovering;
+    let recoveryAttempts = 0, recoverAgain = false, handledFailure, lastFailure, policy = recoveryPolicy(initial);
+    const processFailures = new Set(['HELPER_EXITED', 'HELPER_PROCESS_FAILED', 'HELPER_START_FAILED', 'HELPER_STARTUP_EXPIRED']);
     const listeners = new Set(), edges = new Set(), updates = new Set();
     const snapshot = () => structuredClone(activation);
     const employee = createEmployeeEndpointController({ getConnect, getRuntime: () => activation.phase === 'active' ? runtime : undefined, getState: () => network, connect: (target, signal) => api.connect(target, signal) });
@@ -72,7 +75,7 @@ export function createActivationService(initial, executable, emit = () => { }, f
                         return;
                     }
                     handedOff = true;
-                    install(JSON.parse(selected));
+                    install(JSON.parse(selected), true);
                     launch();
                 }).catch(() => observed({ phase: 'blocked', error: { code: 'HELPER_HANDOFF_FAILED', message: '网络身份交接失败，根因未查明。', needs: '保留身份并检查私有日志；不要重交密钥', actor: 'network' } }));
             }
@@ -94,15 +97,77 @@ export function createActivationService(initial, executable, emit = () => { }, f
                 catch {
                     console.error('NETWORK_OBSERVER_FAILED');
                 }
+        if (next.phase === 'online') {
+            if (recoveryAttempts > 0 && !stableTimer) {
+                const ownGeneration = generation;
+                stableTimer = setTimeout(() => { stableTimer = undefined; if (!disposed && generation === ownGeneration && network.phase === 'online')
+                    recoveryAttempts = 0; }, policy.helperRecoveryStableSeconds * 1000);
+                stableTimer.unref?.();
+            }
+        }
+        else if (stableTimer) {
+            clearTimeout(stableTimer);
+            stableTimer = undefined;
+        }
+        const resumable = current?.identity === 'resumable' && (current.cleanup === 'complete' || current.cleanup === 'not-required') && (current.session === 'identity' || handedOff);
+        if (next.error && processFailures.has(next.error.code) && resumable && runtime && handledFailure !== runtime) {
+            handledFailure = runtime;
+            lastFailure = next.error;
+            if (recovering || recoveryTimer)
+                recoverAgain = true;
+            else
+                scheduleRecovery(next.error);
+        }
+    }
+    function recoveryState(error) {
+        const status = network.status ? { ...network.status, enrollment: 'error', host: { ...network.status.host, online: null, observedAt: null }, error } : undefined;
+        observed({ phase: error.code === 'HELPER_RECOVERING' ? 'starting' : 'blocked', ...status ? { status } : {}, error });
+    }
+    function scheduleRecovery(cause) {
+        if (disposed)
+            return;
+        const detail = [cause.code, cause.message, cause.cause].filter(Boolean).join('；');
+        if (recoveryAttempts >= policy.helperRecoveryMaxAttempts) {
+            recoveryState({ code: policy.helperRecoveryMaxAttempts === 0 ? 'HELPER_RECOVERY_DISABLED' : 'HELPER_RECOVERY_EXHAUSTED', message: policy.helperRecoveryMaxAttempts === 0 ? '网络组件意外退出；自动恢复已关闭。' : `网络组件连续恢复${recoveryAttempts}次仍未稳定，已停止自动恢复。`, needs: `请管理员检查网络组件退出日志与原身份；helperRecoveryMaxAttempts=${policy.helperRecoveryMaxAttempts}，连续在线helperRecoveryStableSeconds=${policy.helperRecoveryStableSeconds}秒后才清零；排查后正常重载插件，不重交密钥。`, actor: 'network', cause: detail });
+            return;
+        }
+        recoveryAttempts++;
+        recoveryState({ code: 'HELPER_RECOVERING', message: `网络组件意外退出，正在第${recoveryAttempts}/${policy.helperRecoveryMaxAttempts}次恢复。`, needs: `等待helperRecoveryDelaySeconds=${policy.helperRecoveryDelaySeconds}秒后按原配置恢复；原连接已撤回，请在恢复后发起新操作，旧请求不会重放。`, actor: 'network', cause: detail });
+        if (disposed)
+            return;
+        recoveryTimer = setTimeout(() => {
+            recoveryTimer = undefined;
+            const owned = runtime;
+            generation++;
+            recovering = Promise.resolve().then(async () => {
+                await owned.dispose();
+                if (disposed)
+                    return;
+                const error = owned.getState().error;
+                if (error) {
+                    recoveryState({ ...error, cause: [error.cause, detail].filter(Boolean).join('；') });
+                    return;
+                }
+                install(JSON.parse(selected), true, owned.getRecoveryConfigSHA256?.());
+                await launch();
+            }).catch(() => recoveryState({ code: 'HELPER_RECOVERY_FAILED', message: '网络组件恢复未能完成，已停止自动恢复；根因未查明。', needs: '管理员检查私有日志、旧实例清理及安装状态；不启动第二个同身份实例，不重交密钥。', actor: 'network', cause: detail })).finally(() => {
+                recovering = undefined;
+                if (!disposed && recoverAgain) {
+                    recoverAgain = false;
+                    scheduleRecovery(lastFailure);
+                }
+            });
+        }, policy.helperRecoveryDelaySeconds * 1000);
+        recoveryTimer.unref?.();
     }
-    function install(config) {
+    function install(config, resumeIdentityOnly = false, expectedConfigSHA256) {
         const ownGeneration = ++generation;
         runtime = factory(config, executable, next => { if (ownGeneration === generation)
-            observed(next); });
+            observed(next); }, undefined, resumeIdentityOnly, expectedConfigSHA256);
     }
     function launch() {
         const owned = runtime, ownGeneration = generation;
-        void owned.start().then(() => {
+        return owned.start().then(() => {
             if (!disposed && ownGeneration === generation && !network.error && !network.status?.receipt)
                 observed({ phase: 'blocked', error: { code: 'ENROLLMENT_RECEIPT_REQUIRED', message: '网络组件缺少消费确认。', needs: '管理员核对插件与helper版本', actor: 'network' } });
         }).catch(() => { if (ownGeneration === generation)
@@ -129,6 +194,7 @@ export function createActivationService(initial, executable, emit = () => { }, f
                 return fail('ACTIVATION_CONFLICT', '已有连接激活，不能替换身份。', '管理员核对当前开通上下文');
             if (!runtime) {
                 selected = key;
+                policy = recoveryPolicy(config);
                 install(config);
                 publish('activating', null);
                 if (!disposed)
@@ -152,12 +218,15 @@ export function createActivationService(initial, executable, emit = () => { }, f
         async download(source, signal) { if (disposed)
             return fail('DISPOSED', '网络服务已停止。', '重新加载插件'); return activation.phase === 'active' && runtime ? runtime.download(source, signal) : { ok: false, error: network.error ?? { code: 'NETWORK_NOT_READY', message: '连接尚未就绪。', needs: '等待N身份交接完成', actor: 'network' } }; },
         dispose() { if (disposing)
-            return disposing; disposed = true; return disposing = Promise.resolve().then(async () => { publish('stopped', activation.error); try {
+            return disposing; disposed = true; if (recoveryTimer)
+            clearTimeout(recoveryTimer); if (stableTimer)
+            clearTimeout(stableTimer); return disposing = Promise.resolve().then(async () => { publish('stopped', activation.error); try {
             await employee.dispose();
         }
         finally {
             await runtime?.dispose();
             await handoff;
+            await recovering;
             network = runtime?.getState() ?? { phase: 'stopped' };
             emit(structuredClone(network));
             publish('stopped', network.error ?? null);

package/lib/api.d.ts

@@ -129,6 +129,9 @@ export interface PluginSettings {
     shutdownObservationSeconds?: number;
     controlResponseMaxBytes?: number;
     downloadMaxRedirects?: number;
+    helperRecoveryMaxAttempts?: number;
+    helperRecoveryDelaySeconds?: number;
+    helperRecoveryStableSeconds?: number;
     statusRefreshIntervalSeconds?: number;
     dialTimeoutSeconds?: number;
     headerTimeoutSeconds?: number;

package/lib/index.js

@@ -12,13 +12,16 @@ export const Config = z.object({
     shutdownObservationSeconds: positive().description('退出观察 shutdownObservationSeconds（秒）：默认未设，沿开通值（现值10）；等待自有组件正常退出，仅为可观测性；增大清理等更久，减小可能强制结束并报告；无关闭值，不终止未知进程'),
     controlResponseMaxBytes: bytes().description('控制响应上限 controlResponseMaxBytes（字节）：默认未设，沿开通值（现值65536）；控制JSON、ready及代理首帧，也约束员工端点私有控制请求/响应和主机桥首帧；增大增加内存，减小可能拒绝合法帧；无关闭或无限值，不限制下载或SFTP正文'),
     downloadMaxRedirects: z.number().step(1).min(0).max(Number.MAX_SAFE_INTEGER).description('下载重定向上限 downloadMaxRedirects：默认未设，沿开通值（现值3）；增大允许更多HTTPS跳转，减小可能拒绝下载，0关闭跳转；不自动换源'),
+    helperRecoveryMaxAttempts: z.number().step(1).min(0).max(Number.MAX_SAFE_INTEGER).description('组件自动恢复次数 helperRecoveryMaxAttempts：默认3；仅复用已有身份恢复意外退出的自有helper，不重放SSH或模型请求。增大允许更多连续恢复，减小更早停止；0关闭自动恢复。次数耗尽停止并显示退出原因，需要管理员排查后正常重载插件；不重交密钥'),
+    helperRecoveryDelaySeconds: positive().description('组件恢复间隔 helperRecoveryDelaySeconds（秒）：默认1；增大减少频繁拉起但恢复更慢，减小恢复更快且增加连续启动开销；无关闭值，关闭自动恢复请将helperRecoveryMaxAttempts设为0'),
+    helperRecoveryStableSeconds: positive().description('组件恢复计数清零 helperRecoveryStableSeconds（秒）：默认60；连续在线达到此时长才清零。增大更严格识别反复崩溃，减小更快清零但可能把短暂在线当成稳定；无关闭值，不以刚收到ready立即清零'),
     statusRefreshIntervalSeconds: positive().description('状态刷新间隔 statusRefreshIntervalSeconds（秒）：默认沿已开通配置（现值2）；影响组件状态查询及插件轮询；增大提示更迟，减小增加查询开销；无关闭值，不代表失败重试已修复'),
     dialTimeoutSeconds: positive().description('拨号观察 dialTimeoutSeconds（秒）：默认沿已开通配置（现值20）；远端TCP/SSH、控制响应头、下载CONNECT/响应头；Node请求采用阶段空闲观察，仅为可观测性，增大等更久，减小可能提前中止；无关闭值，超时说明等待事项、已等时长、下一步检查，不是修复'),
     headerTimeoutSeconds: z.number().min(1e-9).max(9223372036.854774).description('请求头观察 headerTimeoutSeconds（秒）：默认沿已开通配置（现值10）；本机控制与登录代理请求头；仅为可观测性，增大保留连接更久，减小可能拒绝慢请求头；无关闭值，超时在私有日志说明等待事项、已等时长、下一步检查'),
     enrollmentObservationSeconds: z.number().min(1e-9).max(9223372036.854774).description('首次入网观察 enrollmentObservationSeconds（秒）：默认沿已开通配置（现值30）；仅观察首次开通结果，不用于删除已有身份；增大等更久，减小可能更早报未知；无关闭值，超时说明等待事项、已等时长、下一步检查，不重交开通材料'),
     httpMaxHeaderBytes: bytes().description('本机HTTP头上限 httpMaxHeaderBytes（字节）：默认沿已开通配置（现值1048576）；控制/登录代理请求头及控制响应头；增大增加解析内存，减小可能拒绝合法头；无关闭或无限值，不是正文上限'),
     httpMaxResponseHeaderBytes: bytes().description('下载HTTP响应头上限 httpMaxResponseHeaderBytes（字节）：默认沿已开通配置（现值1048576）；主机代理及下载响应头/CONNECT头；增大增加解析内存，减小可能拒绝合法头；无关闭或无限值，不是正文上限'),
-}).description('运行策略优先级：本插件显式值 > 开通方传入值 > 原私有配置；未设置沿用原值，不注入新数值默认。活动连接改策略须正常重载插件，不重交开通材料。固定正确性约束不可关闭：macOS控制socket路径≤103字节、端口1–65535、计时器/整数可表示范围、私有700/600权限、当前用户与单身份隔离、SHA256及加密随机凭据强度。');
+}).description('运行策略优先级：本插件显式值 > 开通方传入值 > 原私有配置；既有策略未设置沿用原值。新增组件恢复策略未设时分别为3次/1秒/连续在线60秒，均在本页可改；不写回私有配置。活动连接改策略须正常重载插件，不重交开通材料。固定正确性约束不可关闭：macOS控制socket路径≤103字节、端口1–65535、计时器/整数可表示范围、私有700/600权限、当前用户与单身份隔离、SHA256及加密随机凭据强度。');
 export function register(ctx, api) {
     ctx.provide('aiWorkbenchNetwork', api);
     ctx.effect(() => { void api.start(); return () => api.dispose(); });

package/lib/network.d.ts

@@ -7,6 +7,7 @@ export interface Executable {
     platform: string;
     arch: string;
 }
-export declare function createNetwork(settings: PluginSettings, executable: Executable, emit?: (state: NetworkState) => void, controlIO?: typeof control): NetworkChannels & EmployeeRuntime & {
+export declare function createNetwork(settings: PluginSettings, executable: Executable, emit?: (state: NetworkState) => void, controlIO?: typeof control, resumeIdentityOnly?: boolean, expectedConfigSHA256?: string): NetworkChannels & EmployeeRuntime & {
     start(): Promise<void>;
+    getRecoveryConfigSHA256?(): string | undefined;
 };