@ai-workbench/remote-agent 0.8.10 → 0.8.12

package/dist/remote-details.js

@@ -4,6 +4,7 @@ import { mkdir, open, lstat, realpath, readdir } from 'node:fs/promises';
 import { isAbsolute, join, parse } from 'node:path';
 import { isDeepStrictEqual } from 'node:util';
 import { sanitizeObservation, isSanitizedRedaction } from "./conversation-details.js";
+import { validPreflightPayload } from "./preflight-payload.js";
 import { NeedError } from "./remote.js";
 const failure = (code, message = '技术详情未能持久记录，本轮已停止。') => new NeedError(code, message, '可用的远程主机连接技术详情');
 const hash = (value) => createHash('sha256').update(value).digest('hex');
@@ -90,141 +91,155 @@ export function createRemoteDetails(options) {
     const root = join(options.profileDir, 'ai-workbench-remote-agent', 'diagnostics');
     const scopes = new Map(), loginScopes = new Map();
     const initialize = async () => { await privateDirectory(join(options.profileDir, 'ai-workbench-remote-agent')); await privateDirectory(root); };
-    return {
-        async recordLocalFailure(request) {
-            await initialize();
-            if (!/^[A-Z][A-Z0-9_]*$/.test(request.code))
-                throw failure('REMOTE_DETAIL_STORAGE_FAILED');
-            await durableWrite(join(root, randomUUID() + '.json'), { version: 1, kind: 'local-admission', code: request.code, provider: request.provider, sessionHash: request.sessionId ? hash(request.sessionId) : null, ...request.observation ? { observation: sanitizeObservation(request.observation, true) } : {} });
-        },
-        async recordLoginFailure(request) {
-            await initialize();
-            const eventId = randomUUID(), diagnostic = request.diagnostic;
-            // The original observed IDs and full approved snapshot are durable before any L call.
-            await durableWrite(join(root, eventId + '.json'), { version: 1, eventId, kind: 'login-check', code: request.code, sessionHash: request.sessionId ? hash(request.sessionId) : null, diagnostic, delivery: 'pending' });
-            if (!request.sessionId)
-                throw failure('REMOTE_DETAIL_SCOPE_INVALID');
-            const sessionId = request.sessionId, provider = diagnostic.provider, api = options.getApi(), connection = diagnostic.connection;
-            const stable = () => { const now = api?.getConnectionState(); if (!api || options.getApi() !== api || now?.phase !== 'connected' || now.instanceId !== connection.instanceId || now.epoch !== connection.epoch)
-                throw failure('CONNECTION_LOST'); };
+    async function recordConnectionDiagnostic(request) {
+        request = { ...request, connection: request.connection && structuredClone(request.connection), payload: structuredClone(request.payload), snapshot: structuredClone(request.snapshot), context: request.context && { ...request.context } };
+        await initialize();
+        const eventId = randomUUID();
+        await durableWrite(join(root, eventId + '.json'), { version: 1, eventId, kind: request.kind, code: request.code, provider: request.provider, sessionHash: request.sessionId ? hash(request.sessionId) : null, ...request.snapshot, delivery: 'pending' });
+        if (!request.sessionId)
+            throw failure('REMOTE_DETAIL_SCOPE_INVALID');
+        const sessionId = request.sessionId, provider = request.provider, api = request.binding ? request.binding.api : options.getApi(), connection = request.connection;
+        if (!connection)
+            throw failure('CONNECTION_LOST');
+        const stable = () => { request.assertScope?.(); const now = api?.getConnectionState(); if (!api || options.getApi() !== api || connection.phase !== 'connected' || now?.phase !== 'connected' || now.instanceId !== connection.instanceId || now.epoch !== connection.epoch)
+            throw failure('CONNECTION_LOST'); };
+        stable();
+        const info = api.getContractInfo?.();
+        if ((request.kind === 'login-check' ? info?.loginDiagnostics : info?.preflightDiagnostics) !== 1 || !['appendLoginDiagnostic', 'getLoginDiagnosticReceipt', 'listLoginDiagnostics'].every(key => typeof api[key] === 'function'))
+            throw failure('TECHNICAL_DETAILS_UNAVAILABLE', '技术详情暂不可用，请更新远程主机连接组件。');
+        const parent = join(root, 'login');
+        await privateDirectory(parent);
+        const key = hash(sessionId + '\0' + provider), dir = join(parent, key);
+        await privateDirectory(dir);
+        const scope = loginScopes.get(key) ?? { tail: Promise.resolve(), maximum: 0, loaded: false };
+        loginScopes.set(key, scope);
+        const operation = scope.tail.then(async () => {
             stable();
-            if (api.getContractInfo?.().loginDiagnostics !== 1 || !['appendLoginDiagnostic', 'getLoginDiagnosticReceipt', 'listLoginDiagnostics'].every(key => typeof api[key] === 'function'))
-                throw failure('TECHNICAL_DETAILS_UNAVAILABLE', '技术详情暂不可用，请更新远程主机连接组件。');
-            const parent = join(root, 'login');
-            await privateDirectory(parent);
-            const key = hash(sessionId + '\0' + provider), dir = join(parent, key);
-            await privateDirectory(dir);
-            const scope = loginScopes.get(key) ?? { tail: Promise.resolve(), maximum: 0, loaded: false };
-            loginScopes.set(key, scope);
-            const operation = scope.tail.then(async () => {
-                stable();
-                const generation = connection.instanceId + '\0' + connection.epoch;
-                if (!scope.loaded || scope.generation !== generation) {
-                    const names = await readdir(dir);
-                    for (const name of names) {
-                        const match = /^(\d+)-([0-9a-f-]+)\.json$/.exec(name);
-                        if (!match)
-                            continue;
-                        const sequence = Number(match[1]);
-                        if (!Number.isSafeInteger(sequence))
-                            throw failure('REMOTE_DETAIL_STORAGE_FAILED');
-                        scope.maximum = Math.max(scope.maximum, sequence);
-                        const saved = await readJournal(join(dir, name));
-                        if (!object(saved) || !object(saved.detail) || saved.detail.sequence !== sequence || saved.detail.eventId !== match[2] || saved.detail.sessionId !== sessionId || saved.detail.provider !== provider)
+            const generation = connection.instanceId + '\0' + connection.epoch;
+            if (!scope.loaded || scope.generation !== generation) {
+                const names = await readdir(dir);
+                for (const name of names) {
+                    const match = /^(\d+)-([0-9a-f-]+)\.json$/.exec(name);
+                    if (!match)
+                        continue;
+                    const sequence = Number(match[1]);
+                    if (!Number.isSafeInteger(sequence))
+                        throw failure('REMOTE_DETAIL_STORAGE_FAILED');
+                    scope.maximum = Math.max(scope.maximum, sequence);
+                    const saved = await readJournal(join(dir, name));
+                    if (!object(saved) || !object(saved.detail) || saved.detail.sequence !== sequence || saved.detail.eventId !== match[2] || saved.detail.sessionId !== sessionId || saved.detail.provider !== provider)
+                        throw failure('REMOTE_DETAIL_STORAGE_FAILED');
+                    const settled = 'settled-' + match[2] + '.json';
+                    if (names.includes(settled)) {
+                        const receipt = await readJournal(join(dir, settled));
+                        if (!object(receipt) || receipt.eventId !== match[2] || !['recorded', 'rejected'].includes(receipt.state))
                             throw failure('REMOTE_DETAIL_STORAGE_FAILED');
-                        const settled = 'settled-' + match[2] + '.json';
-                        if (names.includes(settled)) {
-                            const receipt = await readJournal(join(dir, settled));
-                            if (!object(receipt) || receipt.eventId !== match[2] || !['recorded', 'rejected'].includes(receipt.state))
-                                throw failure('REMOTE_DETAIL_STORAGE_FAILED');
-                            continue;
-                        }
-                        stable();
-                        const receipt = unwrap(await api.getLoginDiagnosticReceipt({ eventId: match[2], sessionId, provider }));
-                        stable();
-                        if (receipt.eventId !== match[2] || !receipt.recorded)
-                            throw failure('REMOTE_DETAIL_DELIVERY_UNKNOWN');
-                        if (!isDeepStrictEqual(receipt.detail, saved.detail))
-                            throw failure('REMOTE_DETAIL_RECEIPT_INVALID');
-                        await durableWrite(join(dir, settled), { eventId: match[2], state: 'recorded' });
+                        continue;
                     }
-                    let cursor, previous = -1, count = 0, expected;
-                    const seen = new Set();
-                    do {
-                        stable();
-                        const page = unwrap(await api.listLoginDiagnostics({ sessionId, provider, ...(cursor ? { cursor } : {}) }));
-                        stable();
-                        if (!object(page) || !Array.isArray(page.items) || ![page.total, page.unknownCount, page.actionRequiredCount].every(n => Number.isSafeInteger(n) && n >= 0))
-                            throw failure('REMOTE_DETAIL_RESPONSE_INVALID');
-                        const counts = { total: page.total, unknownCount: page.unknownCount, actionRequiredCount: page.actionRequiredCount };
-                        if (expected && !isDeepStrictEqual(expected, counts))
-                            throw failure('REMOTE_DETAIL_RESPONSE_INVALID');
-                        expected = counts;
-                        for (const entry of page.items) {
-                            if (entry.sessionId !== sessionId || entry.provider !== provider || !Number.isSafeInteger(entry.sequence) || entry.sequence < 0 || entry.sequence <= previous)
-                                throw failure('REMOTE_DETAIL_RESPONSE_INVALID');
-                            previous = entry.sequence;
-                            scope.maximum = Math.max(scope.maximum, entry.sequence);
-                            count++;
-                        }
-                        cursor = page.nextCursor;
-                        if (cursor !== undefined && (typeof cursor !== 'string' || !cursor || seen.has(cursor)))
-                            throw failure('REMOTE_DETAIL_CURSOR_INVALID');
-                        if (cursor)
-                            seen.add(cursor);
-                    } while (cursor);
-                    if (count !== expected?.total)
-                        throw failure('REMOTE_DETAIL_RESPONSE_INVALID');
-                    scope.loaded = true;
-                    scope.generation = generation;
-                }
-                const mismatch = diagnostic.reason === 'LOGIN_INSTANCE_MISMATCH', unsupported = !!diagnostic.officialReasonRejected;
-                const reason = mismatch ? 'LOGIN_INSTANCE_MISMATCH' : unsupported ? 'OFFICIAL_REASON_UNSUPPORTED' : diagnostic.reason;
-                // L 0.7.11: observed evidence never changes the current connection scope.
-                const login = { phase: diagnostic.login.phase, instanceId: diagnostic.login.instanceId, logins: Object.fromEntries(Object.entries(diagnostic.login.logins).filter(([, v]) => typeof v === 'boolean' || v === 'absent')), queuedProviders: diagnostic.login.queuedProviders, checkingProviders: diagnostic.login.checkingProviders };
-                const payload = { reason, connection: { ...connection }, login, ...(mismatch ? { observedLoginInstanceId: diagnostic.login.instanceId } : {}), ...(diagnostic.officialReason ? { officialReason: diagnostic.officialReason } : {}), ...(unsupported && !mismatch ? { officialReasonRejected: diagnostic.officialReasonRejected } : {}) };
-                // The two payload reasons are exclusive in L's contract. Preserve both facts
-                // using the approved fixed summary and full digest, without inventing a field.
-                const rejected = diagnostic.officialReasonRejected;
-                const summary = '登录检查：' + diagnostic.reason + (rejected ? '; OFFICIAL_REASON_UNSUPPORTED; bytes=' + rejected.bytes + '; SHA256=' + rejected.sha256 : '');
-                const context = request.context ?? { turn: null, step: null };
-                if (!identifier(context.turn) || !identifier(context.step))
-                    throw failure('REMOTE_DETAIL_SCOPE_INVALID');
-                const sequence = scope.maximum + 1;
-                if (!Number.isSafeInteger(sequence))
-                    throw failure('REMOTE_DETAIL_SEQUENCE_INVALID');
-                scope.maximum = sequence;
-                const detail = { version: 1, eventId, instanceId: connection.instanceId, epoch: connection.epoch, sessionId, provider, turn: context.turn, step: context.step, sequence, kind: 'login-check', severity: 'action-required', code: request.code, summary, method: diagnostic.source, payload };
-                await durableWrite(join(dir, sequence + '-' + eventId + '.json'), { state: 'pending', detail });
-                stable();
-                let response;
-                try {
-                    response = await api.appendLoginDiagnostic(structuredClone(detail));
-                }
-                catch {
                     stable();
-                    const receipt = unwrap(await api.getLoginDiagnosticReceipt({ eventId, sessionId, provider }));
+                    const receipt = unwrap(await api.getLoginDiagnosticReceipt({ eventId: match[2], sessionId, provider }));
                     stable();
-                    if (receipt.eventId !== eventId)
-                        throw failure('REMOTE_DETAIL_RECEIPT_INVALID');
-                    if (!receipt.recorded)
+                    if (receipt.eventId !== match[2] || !receipt.recorded)
                         throw failure('REMOTE_DETAIL_DELIVERY_UNKNOWN');
-                    if (!isDeepStrictEqual(receipt.detail, detail))
+                    if (!isDeepStrictEqual(receipt.detail, saved.detail))
                         throw failure('REMOTE_DETAIL_RECEIPT_INVALID');
-                    await durableWrite(join(dir, 'settled-' + eventId + '.json'), { eventId, state: 'recorded' });
-                    return;
+                    await durableWrite(join(dir, settled), { eventId: match[2], state: 'recorded' });
                 }
-                stable();
-                if (response?.ok === false)
-                    await durableWrite(join(dir, 'settled-' + eventId + '.json'), { eventId, state: 'rejected', code: response.error.code });
-                const ack = unwrap(response);
-                if (ack.eventId !== eventId || ack.recorded !== true)
+                let cursor, previous = -1, count = 0, expected;
+                const seen = new Set();
+                do {
+                    stable();
+                    const page = unwrap(await api.listLoginDiagnostics({ sessionId, provider, ...(cursor ? { cursor } : {}) }));
+                    stable();
+                    if (!object(page) || !Array.isArray(page.items) || ![page.total, page.unknownCount, page.actionRequiredCount].every(n => Number.isSafeInteger(n) && n >= 0))
+                        throw failure('REMOTE_DETAIL_RESPONSE_INVALID');
+                    const counts = { total: page.total, unknownCount: page.unknownCount, actionRequiredCount: page.actionRequiredCount };
+                    if (expected && !isDeepStrictEqual(expected, counts))
+                        throw failure('REMOTE_DETAIL_RESPONSE_INVALID');
+                    expected = counts;
+                    for (const entry of page.items) {
+                        if (entry.sessionId !== sessionId || entry.provider !== provider || !Number.isSafeInteger(entry.sequence) || entry.sequence < 0 || entry.sequence <= previous)
+                            throw failure('REMOTE_DETAIL_RESPONSE_INVALID');
+                        previous = entry.sequence;
+                        scope.maximum = Math.max(scope.maximum, entry.sequence);
+                        count++;
+                    }
+                    cursor = page.nextCursor;
+                    if (cursor !== undefined && (typeof cursor !== 'string' || !cursor || seen.has(cursor)))
+                        throw failure('REMOTE_DETAIL_CURSOR_INVALID');
+                    if (cursor)
+                        seen.add(cursor);
+                } while (cursor);
+                if (count !== expected?.total)
                     throw failure('REMOTE_DETAIL_RESPONSE_INVALID');
+                scope.loaded = true;
+                scope.generation = generation;
+            }
+            const context = request.context ?? { turn: null, step: null };
+            if (!identifier(context.turn) || !identifier(context.step))
+                throw failure('REMOTE_DETAIL_SCOPE_INVALID');
+            const sequence = scope.maximum + 1;
+            if (!Number.isSafeInteger(sequence))
+                throw failure('REMOTE_DETAIL_SEQUENCE_INVALID');
+            scope.maximum = sequence;
+            const detail = { version: 1, eventId, instanceId: connection.instanceId, epoch: connection.epoch, sessionId, provider, turn: context.turn, step: context.step, sequence, kind: request.kind, severity: request.severity, code: request.code, summary: request.summary, method: request.method, payload: request.payload };
+            await durableWrite(join(dir, sequence + '-' + eventId + '.json'), { state: 'pending', detail });
+            stable();
+            let response;
+            try {
+                response = await api.appendLoginDiagnostic(structuredClone(detail));
+            }
+            catch {
+                stable();
+                const receipt = unwrap(await api.getLoginDiagnosticReceipt({ eventId, sessionId, provider }));
+                stable();
+                if (receipt.eventId !== eventId)
+                    throw failure('REMOTE_DETAIL_RECEIPT_INVALID');
+                if (!receipt.recorded)
+                    throw failure('REMOTE_DETAIL_DELIVERY_UNKNOWN');
+                if (!isDeepStrictEqual(receipt.detail, detail))
+                    throw failure('REMOTE_DETAIL_RECEIPT_INVALID');
                 await durableWrite(join(dir, 'settled-' + eventId + '.json'), { eventId, state: 'recorded' });
-            });
-            scope.tail = operation.then(() => { }, () => { scope.loaded = false; });
-            await operation;
-            return { eventId, recorded: true };
+                return;
+            }
+            stable();
+            if (response?.ok === false)
+                await durableWrite(join(dir, 'settled-' + eventId + '.json'), { eventId, state: 'rejected', code: response.error.code });
+            const ack = unwrap(response);
+            if (ack.eventId !== eventId || ack.recorded !== true)
+                throw failure('REMOTE_DETAIL_RESPONSE_INVALID');
+            await durableWrite(join(dir, 'settled-' + eventId + '.json'), { eventId, state: 'recorded' });
+        });
+        scope.tail = operation.then(() => { }, () => { scope.loaded = false; });
+        await operation;
+        return { eventId, recorded: true };
+    }
+    return {
+        async recordLocalFailure(request) {
+            await initialize();
+            if (!/^[A-Z][A-Z0-9_]*$/.test(request.code))
+                throw failure('REMOTE_DETAIL_STORAGE_FAILED');
+            await durableWrite(join(root, randomUUID() + '.json'), { version: 1, kind: 'local-admission', code: request.code, provider: request.provider, sessionHash: request.sessionId ? hash(request.sessionId) : null, ...request.observation ? { observation: sanitizeObservation(request.observation, true) } : {} });
+        },
+        async recordLoginFailure(request) {
+            const diagnostic = request.diagnostic, connection = diagnostic.connection;
+            const mismatch = diagnostic.reason === 'LOGIN_INSTANCE_MISMATCH', unsupported = !!diagnostic.officialReasonRejected;
+            const reason = mismatch ? 'LOGIN_INSTANCE_MISMATCH' : unsupported ? 'OFFICIAL_REASON_UNSUPPORTED' : diagnostic.reason;
+            // L 0.7.11: observed evidence never changes the current connection scope.
+            const login = { phase: diagnostic.login.phase, instanceId: diagnostic.login.instanceId, logins: Object.fromEntries(Object.entries(diagnostic.login.logins).filter(([, v]) => typeof v === 'boolean' || v === 'absent')), queuedProviders: diagnostic.login.queuedProviders, checkingProviders: diagnostic.login.checkingProviders };
+            const payload = { reason, connection: { ...connection }, login, ...(mismatch ? { observedLoginInstanceId: diagnostic.login.instanceId } : {}), ...(diagnostic.officialReason ? { officialReason: diagnostic.officialReason } : {}), ...(unsupported && !mismatch ? { officialReasonRejected: diagnostic.officialReasonRejected } : {}) };
+            // The two payload reasons are exclusive in L's contract. Preserve both facts
+            // using the approved fixed summary and full digest, without inventing a field.
+            const rejected = diagnostic.officialReasonRejected;
+            const summary = '登录检查：' + diagnostic.reason + (rejected ? '; OFFICIAL_REASON_UNSUPPORTED; bytes=' + rejected.bytes + '; SHA256=' + rejected.sha256 : '');
+            return recordConnectionDiagnostic({ ...request, provider: diagnostic.provider, connection: diagnostic.connection, kind: 'login-check', severity: 'action-required', summary, method: diagnostic.source, payload, snapshot: { diagnostic } });
+        },
+        async recordPreflightCheck(request) {
+            const observation = sanitizeObservation(request.observation, true);
+            if (!/^[A-Z][A-Z0-9_]*$/.test(observation.code) || !validPreflightPayload(observation.payload))
+                throw failure('REMOTE_DETAIL_SCOPE_INVALID');
+            const api = request.binding ? request.binding.api : options.getApi(), connection = request.binding ? request.binding.connection : api?.getConnectionState();
+            return recordConnectionDiagnostic({ ...request, connection, binding: { api, connection }, kind: 'preflight-check', code: observation.code, summary: observation.summary, method: observation.payload.stage, severity: observation.severity, payload: observation.payload, snapshot: { observation } });
         },
         async open(request) {
             request = structuredClone(request);

package/dist/workspace-source-confirmation.d.ts

@@ -0,0 +1,4 @@
+import type { Context } from '@deepseek-ai/cordis';
+import type { WorkspaceSourceOptions } from './workspace-source.ts';
+/** Official same-turn one-shot question; never changes policy or fabricates a tool call. */
+export declare function nativeWorkspaceSourceConfirmation(ctx: Context): WorkspaceSourceOptions['confirm'];

package/dist/workspace-source-confirmation.js

@@ -0,0 +1,12 @@
+import { SessionId } from '@deepseek-ai/dsh-session';
+/** Official same-turn one-shot question; never changes policy or fabricates a tool call. */
+export function nativeWorkspaceSourceConfirmation(ctx) {
+    return async (question, request) => {
+        const agent = request.sessionId ? ctx.get('agents')?.get(SessionId(request.sessionId)) : undefined;
+        const approval = ctx.get('approval');
+        const session = request.sessionId ? ctx.get('sessions')?.get(SessionId(request.sessionId)) : undefined;
+        if (!agent || !approval || !session || agent.session !== session)
+            return 'unavailable';
+        return approval.request({ agent, toolName: question.action, reason: question.question, signal: request.signal });
+    };
+}

package/dist/workspace-source.d.ts

@@ -0,0 +1,25 @@
+import type { ConnectApi, RuntimeRequest } from './provider.ts';
+import type { DetailObservation } from './conversation-details.ts';
+export type SourceDecision = 'allowed-once' | 'rejected' | 'cancelled' | 'unavailable';
+export type SourceAdmissionStage = 'source-context' | 'source-confirmation' | 'input-acceptance' | 'login-readiness' | 'local-admission' | 'input-prepare' | 'model-catalog' | 'runtime-resolve';
+export interface WorkspaceSourceAdmission {
+    assertCurrent(): void;
+    recordFailure(error: unknown, stage: SourceAdmissionStage): Promise<void>;
+}
+export interface WorkspaceSourceOptions {
+    workspace(request: RuntimeRequest): Promise<{
+        id: string;
+        path: string;
+    }>;
+    currentUserTurn(request: RuntimeRequest): {
+        turn: number;
+        userMessageId: string;
+    };
+    confirm(question: {
+        question: string;
+        action: string;
+    }, request: RuntimeRequest): Promise<SourceDecision>;
+    record(request: RuntimeRequest, observation: DetailObservation): Promise<void>;
+}
+/** Explicit human source transition only. No source selection is inferred from a folder path. */
+export declare function confirmLegacyWorkspaceSource(get: () => ConnectApi | undefined, api: ConnectApi, request: RuntimeRequest, hooks: WorkspaceSourceOptions): Promise<WorkspaceSourceAdmission | undefined>;

package/dist/workspace-source.js

@@ -0,0 +1,136 @@
+import { isDeepStrictEqual } from 'node:util';
+import { sanitizeDisplayLabel } from "./conversation-details.js";
+import { NeedError } from "./remote.js";
+const fail = (code) => new NeedError(code, '工作区来源尚未确认，本轮未执行；你的原话仍保留。', '当前工作区来源及原始员工输入');
+const codeOf = (value) => value instanceof NeedError ? value.code : 'WORKSPACE_SOURCE_CONFIRMATION_FAILED';
+const diagnosticFailure = (error, diagnostic) => Object.assign(new NeedError('CONVERSATION_DETAILS_FAILED', '工作区来源诊断未能保存，本轮已停止；原话保留。', '原错误代码 ' + codeOf(error) + '；诊断错误代码 ' + codeOf(diagnostic)), { cause: new AggregateError([error, diagnostic], 'WORKSPACE_SOURCE_AND_DIAGNOSTIC_FAILED') });
+/** Explicit human source transition only. No source selection is inferred from a folder path. */
+export async function confirmLegacyWorkspaceSource(get, api, request, hooks) {
+    let initialContext = { workspaceId: null, bindingId: null, source: null, status: null };
+    let diagnosticAttempted = false;
+    try {
+        request.signal?.throwIfAborted();
+        if (api.getContractInfo?.().workspaceLocations !== 1 || typeof api.getWorkspaceLocationState !== 'function')
+            return;
+        if (!api.getWorkspaceLocationState().items.some(item => item.source === 'legacy-host' && item.status === 'legacy-confirmation-required'))
+            return;
+        const workspace = { ...await hooks.workspace(request) };
+        request.signal?.throwIfAborted();
+        const snapshot = api.getWorkspaceLocationState(), rows = snapshot.items.filter(item => item.workspaceId === workspace.id), row = rows[0];
+        if (rows.length !== 1 || row?.status !== 'legacy-confirmation-required' || row.source !== 'legacy-host')
+            return;
+        const frozen = structuredClone(row);
+        initialContext = { workspaceId: frozen.workspaceId, bindingId: frozen.bindingId, source: frozen.source, status: frozen.status };
+        const connection = api.getConnectionState(), turn = { ...hooks.currentUserTurn(request) };
+        const name = sanitizeDisplayLabel(row.workspaceName).replace(/[\u0000-\u001f\u007f\u202a-\u202e\u2066-\u2069]/g, '').trim();
+        if (!name || name.includes('[已脱敏：'))
+            throw fail('WORKSPACE_SOURCE_CONFIRMATION_UNAVAILABLE');
+        const question = '这个工作区以前用的是主机上的文件夹。要改用本机的『' + name + '』文件夹吗？';
+        const record = (code, outcome, current = frozen, stage = 'source-confirmation') => hooks.record(request, { kind: 'need', severity: outcome === 'confirmed' ? 'info' : 'action-required', code, summary: outcome === 'confirmation-required' ? question : outcome === 'confirmed' ? '已确认改用本机文件夹，继续处理本轮原始请求。' : '本轮工作区来源确认未完成；原始请求保留，未执行。', payload: { phase: 'workspace-source-admission', stage, workspaceId: workspace.id, bindingId: current.bindingId, source: current.source, status: current.status, outcome } });
+        // Persistence precedes the question; a failed diagnostic is not retried in this path.
+        diagnosticAttempted = true;
+        await record('WORKSPACE_SOURCE_CONFIRMATION_REQUIRED', 'confirmation-required');
+        let terminalDiagnostic = false;
+        async function stable(requireOldSource) {
+            request.signal?.throwIfAborted();
+            if (get() !== api || api.getContractInfo?.().workspaceLocations !== 1 || typeof api.getWorkspaceLocationState !== 'function')
+                throw fail('EMPLOYEE_CONTEXT_CHANGED');
+            const now = api.getConnectionState(), location = api.getWorkspaceLocationState();
+            if (now.phase !== 'connected' || connection.phase !== 'connected' || now.instanceId !== connection.instanceId || now.epoch !== connection.epoch || location.phase !== 'ready' || location.instanceId !== connection.instanceId || location.epoch !== connection.epoch || snapshot.phase !== 'ready' || snapshot.instanceId !== connection.instanceId || snapshot.epoch !== connection.epoch)
+                throw fail('EMPLOYEE_CONTEXT_CHANGED');
+            const currentWorkspace = await hooks.workspace(request);
+            request.signal?.throwIfAborted();
+            if (!isDeepStrictEqual(currentWorkspace, workspace))
+                throw fail('EMPLOYEE_CONTEXT_CHANGED');
+            if (!isDeepStrictEqual(hooks.currentUserTurn(request), turn))
+                throw fail('LOCAL_USER_TURN_CHANGED');
+            // Re-read after awaits. Only the explicit successful L selection may replace the frozen binding.
+            if (get() !== api)
+                throw fail('EMPLOYEE_CONTEXT_CHANGED');
+            const after = api.getConnectionState(), state = api.getWorkspaceLocationState();
+            if (after.phase !== 'connected' || after.instanceId !== connection.instanceId || after.epoch !== connection.epoch || state.phase !== 'ready' || state.instanceId !== connection.instanceId || state.epoch !== connection.epoch)
+                throw fail('EMPLOYEE_CONTEXT_CHANGED');
+            const current = state.items.filter(item => item.workspaceId === workspace.id);
+            if (current.length !== 1 || current[0].localPath !== workspace.path || requireOldSource && (current[0].bindingId !== frozen.bindingId || current[0].source !== frozen.source || current[0].status !== frozen.status))
+                throw fail('EMPLOYEE_CONTEXT_CHANGED');
+            return current[0];
+        }
+        try {
+            await stable(true);
+            if (typeof api.selectWorkspaceLocation !== 'function')
+                throw fail('DEPENDENCY_REQUIRED');
+            const decision = await hooks.confirm({ question, action: '改用本机文件夹' }, request);
+            request.signal?.throwIfAborted();
+            if (decision !== 'allowed-once') {
+                const code = decision === 'rejected' ? 'WORKSPACE_SOURCE_CONFIRMATION_DECLINED' : decision === 'cancelled' ? 'ABORTED' : 'WORKSPACE_SOURCE_CONFIRMATION_UNAVAILABLE';
+                terminalDiagnostic = true;
+                await record(code, decision === 'rejected' ? 'declined' : decision === 'cancelled' ? 'cancelled' : 'failed');
+                throw fail(code);
+            }
+            await stable(true);
+            // The await continuation itself is a boundary: already-observed cancellation,
+            // replacement input or source withdrawal must not start the L mutation.
+            request.signal?.throwIfAborted();
+            if (get() !== api || typeof api.getWorkspaceLocationState !== 'function')
+                throw fail('EMPLOYEE_CONTEXT_CHANGED');
+            const atChoice = api.getConnectionState(), choiceState = api.getWorkspaceLocationState(), choiceRows = choiceState.items.filter(item => item.workspaceId === workspace.id);
+            if (atChoice.phase !== 'connected' || atChoice.instanceId !== connection.instanceId || atChoice.epoch !== connection.epoch || choiceState.phase !== 'ready' || choiceState.instanceId !== connection.instanceId || choiceState.epoch !== connection.epoch || choiceRows.length !== 1 || choiceRows[0].bindingId !== frozen.bindingId || choiceRows[0].source !== frozen.source || choiceRows[0].status !== frozen.status || choiceRows[0].localPath !== workspace.path)
+                throw fail('EMPLOYEE_CONTEXT_CHANGED');
+            if (!isDeepStrictEqual(hooks.currentUserTurn(request), turn))
+                throw fail('LOCAL_USER_TURN_CHANGED');
+            const selected = await api.selectWorkspaceLocation({ instanceId: connection.instanceId, epoch: connection.epoch, workspaceId: workspace.id, expectedBindingId: frozen.bindingId, source: 'local' });
+            request.signal?.throwIfAborted();
+            if (!selected.ok)
+                throw new NeedError(selected.error.code, selected.error.message, selected.error.requires);
+            const current = await stable(false), value = selected.value, returned = value.items.filter(item => item.workspaceId === workspace.id);
+            if (value.phase !== 'ready' || value.instanceId !== connection.instanceId || value.epoch !== connection.epoch || returned.length !== 1 || returned[0].source !== 'local' || returned[0].status !== 'selected' || !returned[0].bindingId || returned[0].bindingId === frozen.bindingId || returned[0].localPath !== workspace.path || current.source !== 'local' || current.status !== 'selected' || current.bindingId !== returned[0].bindingId)
+                throw fail('WORKSPACE_SOURCE_SELECTION_UNCONFIRMED');
+            const selectedBinding = returned[0].bindingId;
+            const assertSelected = () => {
+                request.signal?.throwIfAborted();
+                if (get() !== api || typeof api.getWorkspaceLocationState !== 'function')
+                    throw fail('EMPLOYEE_CONTEXT_CHANGED');
+                const c = api.getConnectionState(), s = api.getWorkspaceLocationState(), items = s.items.filter(item => item.workspaceId === workspace.id);
+                if (c.phase !== 'connected' || c.instanceId !== connection.instanceId || c.epoch !== connection.epoch || s.phase !== 'ready' || s.instanceId !== connection.instanceId || s.epoch !== connection.epoch || items.length !== 1 || items[0].source !== 'local' || items[0].status !== 'selected' || items[0].bindingId !== selectedBinding || items[0].localPath !== workspace.path)
+                    throw fail('EMPLOYEE_CONTEXT_CHANGED');
+                if (!isDeepStrictEqual(hooks.currentUserTurn(request), turn))
+                    throw fail('LOCAL_USER_TURN_CHANGED');
+            };
+            terminalDiagnostic = true;
+            await record('WORKSPACE_SOURCE_CONFIRMED', 'confirmed', current);
+            terminalDiagnostic = false;
+            await stable(false);
+            assertSelected();
+            return { assertCurrent: assertSelected, async recordFailure(error, stage) {
+                    try {
+                        await record(request.signal?.aborted ? 'ABORTED' : codeOf(error), request.signal?.aborted ? 'cancelled' : 'failed', current, stage);
+                    }
+                    catch (diagnostic) {
+                        throw diagnosticFailure(error, diagnostic);
+                    }
+                } };
+        }
+        catch (error) {
+            if (!terminalDiagnostic) {
+                try {
+                    await record(request.signal?.aborted ? 'ABORTED' : codeOf(error), request.signal?.aborted ? 'cancelled' : 'failed');
+                }
+                catch (diagnostic) {
+                    throw diagnosticFailure(error, diagnostic);
+                }
+            }
+            throw error;
+        }
+    }
+    catch (error) {
+        if (!diagnosticAttempted) {
+            try {
+                await hooks.record(request, { kind: 'need', severity: 'action-required', code: request.signal?.aborted ? 'ABORTED' : codeOf(error), summary: '无法核对本轮工作区来源，已停止；原话保留。', payload: { phase: 'workspace-source-admission', stage: 'source-context', ...initialContext, outcome: request.signal?.aborted ? 'cancelled' : 'failed' } });
+            }
+            catch (diagnostic) {
+                throw diagnosticFailure(error, diagnostic);
+            }
+        }
+        throw error;
+    }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ai-workbench/remote-agent",
-  "version": "0.8.10",
+  "version": "0.8.12",
   "type": "module",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -17,8 +17,7 @@
     "dist",
     "locale",
     "cordis.patch.yml",
-    "helpers",
-    "CANDIDATE-NOT-FOR-INSTALL.json"
+    "helpers"
   ],
   "scripts": {
     "test": "npm run build && node --test --test-concurrency=1 lib/test/*.test.js",
@@ -40,7 +39,7 @@
     "zod": "4.6.7"
   },
   "devDependencies": {
-    "@ai-workbench/connect": "file:test/fixtures/ai-workbench-connect-0.7.17.tgz",
+    "@ai-workbench/connect": "file:test/fixtures/ai-workbench-connect-0.7.18.tgz",
     "@ai-workbench/network": "file:test/fixtures/ai-workbench-network-0.4.4.tgz",
     "@deepseek-ai/cordis": "4.0.4",
     "@deepseek-ai/cordis-plugin-group": "1.0.4",
@@ -48,6 +47,7 @@
     "@deepseek-ai/cordis-plugin-loader": "1.0.5",
     "@deepseek-ai/cordis-plugin-timer": "1.1.6",
     "@deepseek-ai/dsh-agent": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-agent-loop": "0.2.0-rc.2",
     "@deepseek-ai/dsh-api-gateway": "0.2.0-rc.2",
     "@deepseek-ai/dsh-attachment": "0.2.0-rc.2",
     "@deepseek-ai/dsh-client-connection": "0.2.0-rc.2",
@@ -68,7 +68,7 @@
     "zustand": "4.4.7"
   },
   "peerDependencies": {
-    "@ai-workbench/connect": "~0.7.17",
+    "@ai-workbench/connect": "~0.7.18",
     "@ai-workbench/network": "~0.4.4",
     "@deepseek-ai/cordis": "4.0.4",
     "@deepseek-ai/dsh-agent": "0.2.0-rc.2",