@ai-workbench/remote-agent 0.8.19 → 0.8.23

package/dist/remote-details.js

@@ -1,30 +1,12 @@
-import { closeCode, withFailureEvidence } from "./close-diagnostics.js";
-import { createHash, randomUUID } from 'node:crypto';
+import { closeCode } from "./close-diagnostics.js";
+import { randomUUID, createHash } from 'node:crypto';
 import { constants } from 'node:fs';
-import { mkdir, open, lstat, realpath, readdir } from 'node:fs/promises';
+import { mkdir, open, lstat, realpath, appendFile } from 'node:fs/promises';
 import { isAbsolute, join, parse } from 'node:path';
-import { isDeepStrictEqual } from 'node:util';
 import { sanitizeObservation, isSanitizedRedaction } from "./conversation-details.js";
-import { validPreflightPayload } from "./preflight-payload.js";
 import { NeedError } from "./remote.js";
-const failure = (code, message = '技术详情未能持久记录，本轮已停止。') => new NeedError(code, message, '可用的远程主机连接技术详情');
-const hash = (value) => createHash('sha256').update(value).digest('hex');
+const failure = (code) => new NeedError(code, '技术详情未能保存', '诊断存储');
 const object = (value) => !!value && typeof value === 'object' && !Array.isArray(value);
-function unwrap(result) {
-    if (!object(result))
-        throw failure('REMOTE_DETAIL_RESPONSE_INVALID');
-    if (result.ok === false && object(result.error) && typeof result.error.code === 'string')
-        throw failure(result.error.code);
-    if (result.ok !== true)
-        throw failure('REMOTE_DETAIL_RESPONSE_INVALID');
-    return result.value;
-}
-function identifier(value) { return value === null || typeof value === 'string' && value.trim().length > 0 || typeof value === 'number' && Number.isSafeInteger(value) && value >= 0; }
-function kind(observation) {
-    if (/UNKNOWN|UNSUPPORTED|FOREIGN/.test(observation.code))
-        return observation.severity === 'action-required' ? 'action-required' : 'unknown';
-    return { extension: 'extensions', tool: 'tools', need: 'action-required', notice: 'extensions', session: 'extensions' }[observation.kind] ?? observation.kind;
-}
 export async function privateDirectory(path) {
     if (!isAbsolute(path))
         throw failure('REMOTE_DETAIL_STORAGE_FAILED');
@@ -59,376 +41,97 @@ export async function privateDirectory(path) {
     if ((info.mode & 0o077) !== 0 || (process.getuid && info.uid !== process.getuid()))
         throw failure('REMOTE_DETAIL_STORAGE_FAILED');
 }
-export async function durableWrite(path, value) {
-    const file = await open(path, constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL | constants.O_NOFOLLOW, 0o600);
-    try {
-        await file.writeFile(JSON.stringify(value) + '\n');
-        await file.sync();
-    }
-    finally {
-        await file.close();
-    }
-    const parent = await open(join(path, '..'), 'r');
-    try {
-        await parent.sync();
-    }
-    finally {
-        await parent.close();
-    }
-}
-export async function readJournal(path) {
-    const file = await open(path, constants.O_RDONLY | constants.O_NOFOLLOW);
-    try {
-        const info = await file.stat();
-        if (!info.isFile() || (info.mode & 0o077) !== 0 || (process.getuid && info.uid !== process.getuid()))
-            throw failure('REMOTE_DETAIL_STORAGE_FAILED');
-        return JSON.parse(await file.readFile('utf8'));
-    }
-    finally {
-        await file.close();
-    }
-}
+/** Diagnostics are best effort. No delivery journal, receipt lookup, replay or turn gate. */
 export function createRemoteDetails(options) {
-    const root = join(options.profileDir, 'ai-workbench-remote-agent', 'diagnostics');
-    const scopes = new Map(), loginScopes = new Map();
-    const initialize = async () => { await privateDirectory(join(options.profileDir, 'ai-workbench-remote-agent')); await privateDirectory(root); };
-    async function recordConnectionDiagnostic(request) {
-        request = { ...request, connection: request.connection && structuredClone(request.connection), payload: structuredClone(request.payload), snapshot: structuredClone(request.snapshot), context: request.context && { ...request.context } };
-        await initialize();
+    let sequence = 0;
+    let writes = Promise.resolve();
+    const memory = new Map();
+    const filename = (sessionId, provider) => createHash('sha256').update(sessionId + '\0' + provider).digest('hex') + '.jsonl';
+    const root = options.profileDir ? join(options.profileDir, 'ai-workbench-remote-agent', 'logs') : undefined;
+    const warn = (error) => { try {
+        (options.warn ?? console.warn)('[remote-agent] 技术详情未保存：' + closeCode(error, 'DIAGNOSTIC_WRITE_FAILED'));
+    }
+    catch { /* Logging cannot become a turn gate. */ } };
+    const wire = (value) => Array.isArray(value) ? value.map(wire) : object(value) ? isSanitizedRedaction(value) ? (typeof value.valueType === 'string' ? { redacted: true, valueType: value.valueType, value: '已脱敏' } : '已脱敏') : Object.fromEntries(Object.entries(value).map(([key, child]) => [key, wire(child)])) : value;
+    function send(request, observation, context, diagnosticKind, owner) {
         const eventId = randomUUID();
-        await durableWrite(join(root, eventId + '.json'), { version: 1, eventId, kind: request.kind, code: request.code, provider: request.provider, sessionHash: request.sessionId ? hash(request.sessionId) : null, ...request.snapshot, delivery: 'pending' });
-        if (!request.sessionId)
-            throw failure('REMOTE_DETAIL_SCOPE_INVALID');
-        const sessionId = request.sessionId, provider = request.provider, api = request.binding ? request.binding.api : options.getApi(), connection = request.connection;
-        if (!connection)
-            throw failure('CONNECTION_LOST');
-        const stable = () => { request.assertScope?.(); const now = api?.getConnectionState(); if (!api || options.getApi() !== api || connection.phase !== 'connected' || now?.phase !== 'connected' || now.instanceId !== connection.instanceId || now.epoch !== connection.epoch)
-            throw failure('CONNECTION_LOST'); };
-        stable();
-        const info = api.getContractInfo?.();
-        if ((request.kind === 'login-check' ? info?.loginDiagnostics : info?.preflightDiagnostics) !== 1 || !['appendLoginDiagnostic', 'getLoginDiagnosticReceipt', 'listLoginDiagnostics'].every(key => typeof api[key] === 'function'))
-            throw failure('TECHNICAL_DETAILS_UNAVAILABLE', '技术详情暂不可用，请更新远程主机连接组件。');
-        const parent = join(root, 'login');
-        await privateDirectory(parent);
-        const key = hash(sessionId + '\0' + provider), dir = join(parent, key);
-        await privateDirectory(dir);
-        const scope = loginScopes.get(key) ?? { tail: Promise.resolve(), maximum: 0, loaded: false };
-        loginScopes.set(key, scope);
-        const operation = scope.tail.then(async () => {
-            stable();
-            const generation = connection.instanceId + '\0' + connection.epoch;
-            if (!scope.loaded || scope.generation !== generation) {
-                const names = await readdir(dir);
-                for (const name of names) {
-                    const match = /^(\d+)-([0-9a-f-]+)\.json$/.exec(name);
-                    if (!match)
-                        continue;
-                    const sequence = Number(match[1]);
-                    if (!Number.isSafeInteger(sequence))
-                        throw failure('REMOTE_DETAIL_STORAGE_FAILED');
-                    scope.maximum = Math.max(scope.maximum, sequence);
-                    const saved = await readJournal(join(dir, name));
-                    if (!object(saved) || !object(saved.detail) || saved.detail.sequence !== sequence || saved.detail.eventId !== match[2] || saved.detail.sessionId !== sessionId || saved.detail.provider !== provider)
-                        throw failure('REMOTE_DETAIL_STORAGE_FAILED');
-                    const settled = 'settled-' + match[2] + '.json';
-                    if (names.includes(settled)) {
-                        const receipt = await readJournal(join(dir, settled));
-                        if (!object(receipt) || receipt.eventId !== match[2] || !['recorded', 'rejected'].includes(receipt.state))
-                            throw failure('REMOTE_DETAIL_STORAGE_FAILED');
-                        continue;
-                    }
-                    stable();
-                    const receipt = unwrap(await api.getLoginDiagnosticReceipt({ eventId: match[2], sessionId, provider }));
-                    stable();
-                    if (receipt.eventId !== match[2] || !receipt.recorded)
-                        throw failure('REMOTE_DETAIL_DELIVERY_UNKNOWN');
-                    if (!isDeepStrictEqual(receipt.detail, saved.detail))
-                        throw failure('REMOTE_DETAIL_RECEIPT_INVALID');
-                    await durableWrite(join(dir, settled), { eventId: match[2], state: 'recorded' });
+        try {
+            const connection = request.connection;
+            if (!request.sessionId)
+                throw failure('DIAGNOSTIC_CONTEXT_UNAVAILABLE');
+            const safe = sanitizeObservation(observation, true);
+            sequence = Math.max(sequence + 1, Date.now());
+            const detail = { ...safe, payload: wire(safe.payload), version: 1, eventId, instanceId: connection?.instanceId ?? null, epoch: connection?.epoch ?? null, sessionId: request.sessionId, provider: request.provider, ...context, sequence, kind: diagnosticKind ?? { extension: 'extensions', tool: 'tools', need: 'action-required', notice: 'extensions', session: 'extensions' }[observation.kind] ?? observation.kind };
+            const name = filename(request.sessionId, request.provider), records = memory.get(name);
+            if (records && (!owner || owner === records))
+                records.push(detail);
+            writes = writes.then(async () => { if (!root)
+                throw failure('DIAGNOSTIC_CONTEXT_UNAVAILABLE'); await privateDirectory(join(root, '..')); await privateDirectory(root); await appendFile(join(root, name), JSON.stringify(detail) + '\n', { mode: 0o600, flag: constants.O_WRONLY | constants.O_CREAT | constants.O_APPEND | constants.O_NOFOLLOW }); }).catch(warn);
+        }
+        catch (error) {
+            warn(error);
+        }
+        return { eventId };
+    }
+    return {
+        /** Await queued best-effort writes only when releasing the profile, never before dispatch. */
+        async dispose() { await writes; memory.clear(); },
+        releaseSession(sessionId) { for (const provider of ['claude', 'codex'])
+            memory.delete(filename(sessionId, provider)); },
+        async read(query) {
+            await writes;
+            const name = filename(query.sessionId, query.provider), records = new Map();
+            try {
+                if (!root)
+                    throw failure('DIAGNOSTIC_CONTEXT_UNAVAILABLE');
+                await privateDirectory(join(root, '..'));
+                await privateDirectory(root);
+                const file = await open(join(root, name), constants.O_RDONLY | constants.O_NOFOLLOW);
+                let value;
+                try {
+                    const info = await file.stat();
+                    if (!info.isFile() || (info.mode & 0o077) !== 0 || process.getuid && info.uid !== process.getuid())
+                        throw failure('DIAGNOSTIC_LOG_INVALID');
+                    value = await file.readFile('utf8');
                 }
-                let cursor, previous = -1, count = 0, expected;
-                const seen = new Set();
-                do {
-                    stable();
-                    const page = unwrap(await api.listLoginDiagnostics({ sessionId, provider, ...(cursor ? { cursor } : {}) }));
-                    stable();
-                    if (!object(page) || !Array.isArray(page.items) || ![page.total, page.unknownCount, page.actionRequiredCount].every(n => Number.isSafeInteger(n) && n >= 0))
-                        throw failure('REMOTE_DETAIL_RESPONSE_INVALID');
-                    const counts = { total: page.total, unknownCount: page.unknownCount, actionRequiredCount: page.actionRequiredCount };
-                    if (expected && !isDeepStrictEqual(expected, counts))
-                        throw failure('REMOTE_DETAIL_RESPONSE_INVALID');
-                    expected = counts;
-                    for (const entry of page.items) {
-                        if (entry.sessionId !== sessionId || entry.provider !== provider || !Number.isSafeInteger(entry.sequence) || entry.sequence < 0 || entry.sequence <= previous)
-                            throw failure('REMOTE_DETAIL_RESPONSE_INVALID');
-                        previous = entry.sequence;
-                        scope.maximum = Math.max(scope.maximum, entry.sequence);
-                        count++;
+                finally {
+                    await file.close();
+                }
+                for (const line of value.split('\n'))
+                    if (line) {
+                        try {
+                            const record = JSON.parse(line);
+                            if (record.sessionId === query.sessionId && record.provider === query.provider)
+                                records.set(record.eventId, record);
+                        }
+                        catch {
+                            warn(failure('DIAGNOSTIC_LOG_INVALID'));
+                        }
                     }
-                    cursor = page.nextCursor;
-                    if (cursor !== undefined && (typeof cursor !== 'string' || !cursor || seen.has(cursor)))
-                        throw failure('REMOTE_DETAIL_CURSOR_INVALID');
-                    if (cursor)
-                        seen.add(cursor);
-                } while (cursor);
-                if (count !== expected?.total)
-                    throw failure('REMOTE_DETAIL_RESPONSE_INVALID');
-                scope.loaded = true;
-                scope.generation = generation;
             }
-            const context = request.context ?? { turn: null, step: null };
-            if (!identifier(context.turn) || !identifier(context.step))
-                throw failure('REMOTE_DETAIL_SCOPE_INVALID');
-            const sequence = scope.maximum + 1;
-            if (!Number.isSafeInteger(sequence))
-                throw failure('REMOTE_DETAIL_SEQUENCE_INVALID');
-            scope.maximum = sequence;
-            const detail = { version: 1, eventId, instanceId: connection.instanceId, epoch: connection.epoch, sessionId, provider, turn: context.turn, step: context.step, sequence, kind: request.kind, severity: request.severity, code: request.code, summary: request.summary, method: request.method, payload: request.payload };
-            await durableWrite(join(dir, sequence + '-' + eventId + '.json'), { state: 'pending', detail });
-            stable();
-            let response;
-            try {
-                response = await api.appendLoginDiagnostic(structuredClone(detail));
+            catch (error) {
+                if (error.code !== 'ENOENT')
+                    warn(error);
             }
-            catch {
-                stable();
-                const receipt = unwrap(await api.getLoginDiagnosticReceipt({ eventId, sessionId, provider }));
-                stable();
-                if (receipt.eventId !== eventId)
-                    throw failure('REMOTE_DETAIL_RECEIPT_INVALID');
-                if (!receipt.recorded)
-                    throw failure('REMOTE_DETAIL_DELIVERY_UNKNOWN');
-                if (!isDeepStrictEqual(receipt.detail, detail))
-                    throw failure('REMOTE_DETAIL_RECEIPT_INVALID');
-                await durableWrite(join(dir, 'settled-' + eventId + '.json'), { eventId, state: 'recorded' });
-                return;
-            }
-            stable();
-            if (response?.ok === false)
-                await durableWrite(join(dir, 'settled-' + eventId + '.json'), { eventId, state: 'rejected', code: response.error.code });
-            const ack = unwrap(response);
-            if (ack.eventId !== eventId || ack.recorded !== true)
-                throw failure('REMOTE_DETAIL_RESPONSE_INVALID');
-            await durableWrite(join(dir, 'settled-' + eventId + '.json'), { eventId, state: 'recorded' });
-        });
-        scope.tail = operation.then(() => { }, () => { scope.loaded = false; });
-        await operation;
-        return { eventId, recorded: true };
-    }
-    return {
-        async recordLocalFailure(request) {
-            await initialize();
-            if (!/^[A-Z][A-Z0-9_]*$/.test(request.code))
-                throw failure('REMOTE_DETAIL_STORAGE_FAILED');
-            await durableWrite(join(root, randomUUID() + '.json'), { version: 1, kind: 'local-admission', code: request.code, provider: request.provider, sessionHash: request.sessionId ? hash(request.sessionId) : null, ...request.observation ? { observation: sanitizeObservation(request.observation, true) } : {} });
+            for (const record of memory.get(name) ?? [])
+                records.set(record.eventId, record);
+            return structuredClone([...records.values()]);
         },
+        async recordLocalFailure(request) { send(request, request.observation ?? { kind: 'need', severity: 'warning', code: request.code, summary: '本轮未完成', payload: {} }, { turn: null, step: null }); },
         async recordLoginFailure(request) {
-            const diagnostic = request.diagnostic, connection = diagnostic.connection;
-            const mismatch = diagnostic.reason === 'LOGIN_INSTANCE_MISMATCH', unsupported = !!diagnostic.officialReasonRejected;
-            const reason = mismatch ? 'LOGIN_INSTANCE_MISMATCH' : unsupported ? 'OFFICIAL_REASON_UNSUPPORTED' : diagnostic.reason;
-            // L 0.7.11: observed evidence never changes the current connection scope.
-            const login = { phase: diagnostic.login.phase, instanceId: diagnostic.login.instanceId, logins: Object.fromEntries(Object.entries(diagnostic.login.logins).filter(([, v]) => typeof v === 'boolean' || v === 'absent')), queuedProviders: diagnostic.login.queuedProviders, checkingProviders: diagnostic.login.checkingProviders };
-            const payload = { reason, connection: { ...connection }, login, ...(mismatch ? { observedLoginInstanceId: diagnostic.login.instanceId } : {}), ...(diagnostic.officialReason ? { officialReason: diagnostic.officialReason } : {}), ...(unsupported && !mismatch ? { officialReasonRejected: diagnostic.officialReasonRejected } : {}) };
-            // The two payload reasons are exclusive in L's contract. Preserve both facts
-            // using the approved fixed summary and full digest, without inventing a field.
-            const rejected = diagnostic.officialReasonRejected;
-            const summary = '登录检查：' + diagnostic.reason + (rejected ? '; OFFICIAL_REASON_UNSUPPORTED; bytes=' + rejected.bytes + '; SHA256=' + rejected.sha256 : '');
-            return recordConnectionDiagnostic({ ...request, provider: diagnostic.provider, connection: diagnostic.connection, kind: 'login-check', severity: 'action-required', summary, method: diagnostic.source, payload, snapshot: { diagnostic } });
+            const d = request.diagnostic, mismatch = d.reason === 'LOGIN_INSTANCE_MISMATCH', unsupported = !!d.officialReasonRejected;
+            const login = { phase: d.login.phase, instanceId: d.login.instanceId, logins: Object.fromEntries(Object.entries(d.login.logins).filter(([, v]) => typeof v === 'boolean' || v === 'absent')), queuedProviders: d.login.queuedProviders, checkingProviders: d.login.checkingProviders };
+            const payload = { reason: mismatch ? 'LOGIN_INSTANCE_MISMATCH' : unsupported ? 'OFFICIAL_REASON_UNSUPPORTED' : d.reason, connection: { ...d.connection }, login, ...(mismatch ? { observedLoginInstanceId: d.login.instanceId } : {}), ...(d.officialReason ? { officialReason: d.officialReason } : {}), ...(unsupported && !mismatch ? { officialReasonRejected: d.officialReasonRejected } : {}) };
+            return send({ sessionId: request.sessionId, provider: d.provider, connection: d.connection }, { kind: 'need', severity: 'warning', code: request.code, summary: '登录检查：' + d.reason, method: d.source, payload: payload }, request.context ?? { turn: null, step: null }, 'login-check');
         },
         async recordPreflightCheck(request) {
-            const observation = sanitizeObservation(request.observation, true);
-            if (!/^[A-Z][A-Z0-9_]*$/.test(observation.code) || !validPreflightPayload(observation.payload))
-                throw failure('REMOTE_DETAIL_SCOPE_INVALID');
-            const api = request.binding ? request.binding.api : options.getApi(), connection = request.binding ? request.binding.connection : api?.getConnectionState();
-            return recordConnectionDiagnostic({ ...request, connection, binding: { api, connection }, kind: 'preflight-check', code: observation.code, summary: observation.summary, method: observation.payload.stage, severity: observation.severity, payload: observation.payload, snapshot: { observation } });
+            return send({ sessionId: request.sessionId, provider: request.provider, connection: request.binding?.connection }, request.observation, request.context ?? { turn: null, step: null }, 'preflight-check');
         },
         async open(request) {
-            request = structuredClone(request);
-            if (request.localAcceptanceId !== undefined && (typeof request.localAcceptanceId !== 'string' || !request.localAcceptanceId.trim()))
-                throw failure('REMOTE_DETAIL_SCOPE_INVALID');
-            const localScope = request.localAcceptanceId === undefined ? undefined : Object.freeze({ localAcceptanceId: request.localAcceptanceId });
-            if (!request.sessionId || !request.identity || !request.connection.instanceId || !Number.isSafeInteger(request.connection.epoch) || request.connection.epoch < 0 || !['claude', 'codex'].includes(request.provider))
-                throw failure('REMOTE_DETAIL_SCOPE_INVALID');
-            try {
-                await initialize();
-            }
-            catch {
-                throw failure('REMOTE_DETAIL_STORAGE_FAILED');
-            }
-            const api = options.getApi();
-            const stable = () => {
-                const now = api?.getConnectionState();
-                if (!api || options.getApi() !== api || now?.phase !== 'connected' || now.instanceId !== request.connection.instanceId || now.epoch !== request.connection.epoch)
-                    throw failure('CONNECTION_LOST');
-            };
-            stable();
-            const capability = api.getContractInfo?.();
-            if (!object(capability) || capability.remoteConversationDetails !== 1 || !['appendRemoteConversationDetail', 'getRemoteConversationDetailReceipt', 'listRemoteConversationDetails'].every(key => typeof api[key] === 'function')) {
-                await durableWrite(join(root, randomUUID() + '.json'), { version: 1, code: 'TECHNICAL_DETAILS_UNAVAILABLE', summary: '技术详情暂不可用', session: hash(request.sessionId), provider: request.provider });
-                throw failure('TECHNICAL_DETAILS_UNAVAILABLE', '技术详情暂不可用，请更新远程主机连接组件。');
-            }
-            const key = hash(request.identity + '\0' + request.sessionId + '\0' + request.provider), dir = join(root, key);
-            await privateDirectory(dir);
-            const scope = scopes.get(key) ?? { tail: Promise.resolve(), maximum: 0, loaded: false };
-            scopes.set(key, scope);
-            // Serialize open and appends in this host-user/session/brand scope.
-            const load = scope.tail.then(async () => {
-                stable();
-                const generation = request.connection.instanceId + '\0' + request.connection.epoch;
-                if (scope.loaded && scope.generation === generation)
-                    return;
-                const names = await readdir(dir);
-                for (const name of names) {
-                    const match = /^(\d+)-([0-9a-f-]+)\.json$/.exec(name);
-                    if (!match)
-                        continue;
-                    const n = Number(match[1]);
-                    if (!Number.isSafeInteger(n))
-                        throw failure('REMOTE_DETAIL_STORAGE_FAILED');
-                    scope.maximum = Math.max(scope.maximum, n);
-                    const saved = await readJournal(join(dir, name));
-                    if (!object(saved) || !object(saved.detail) || saved.detail.eventId !== match[2] || saved.detail.sequence !== n || saved.detail.sessionId !== request.sessionId || saved.detail.provider !== request.provider)
-                        throw failure('REMOTE_DETAIL_STORAGE_FAILED');
-                    const settled = 'settled-' + match[2] + '.json';
-                    if (names.includes(settled)) {
-                        const result = await readJournal(join(dir, settled));
-                        if (!object(result) || result.eventId !== match[2] || !['recorded', 'rejected'].includes(result.state))
-                            throw failure('REMOTE_DETAIL_STORAGE_FAILED');
-                        continue;
-                    }
-                    // An interrupted append is reconciled by pure read, with the original
-                    // event's epoch intact. Missing receipts stay unknown and never trigger append.
-                    stable();
-                    const receipt = unwrap(await api.getRemoteConversationDetailReceipt({ eventId: match[2], sessionId: request.sessionId, provider: request.provider }));
-                    stable();
-                    if (receipt.eventId !== match[2])
-                        throw failure('REMOTE_DETAIL_RECEIPT_INVALID');
-                    if (!receipt.recorded)
-                        throw failure('REMOTE_DETAIL_DELIVERY_UNKNOWN');
-                    if (!isDeepStrictEqual(receipt.detail, saved.detail))
-                        throw failure('REMOTE_DETAIL_RECEIPT_INVALID');
-                    await durableWrite(join(dir, settled), { eventId: match[2], state: 'recorded' });
-                }
-                let cursor, previous = -1;
-                const seen = new Set();
-                let expected;
-                let count = 0;
-                do {
-                    stable();
-                    const page = unwrap(await api.listRemoteConversationDetails({ sessionId: request.sessionId, provider: request.provider, ...(cursor ? { cursor } : {}) }));
-                    stable();
-                    if (!object(page) || !Array.isArray(page.items) || ![page.total, page.unknownCount, page.actionRequiredCount].every(n => Number.isSafeInteger(n) && n >= 0))
-                        throw failure('REMOTE_DETAIL_RESPONSE_INVALID');
-                    const counts = { total: page.total, unknownCount: page.unknownCount, actionRequiredCount: page.actionRequiredCount };
-                    if (expected && !isDeepStrictEqual(expected, counts))
-                        throw failure('REMOTE_DETAIL_RESPONSE_INVALID');
-                    expected = counts;
-                    for (const entry of page.items) {
-                        if (entry.sessionId !== request.sessionId || entry.provider !== request.provider || !Number.isSafeInteger(entry.sequence) || entry.sequence <= previous)
-                            throw failure('REMOTE_DETAIL_RESPONSE_INVALID');
-                        previous = entry.sequence;
-                        scope.maximum = Math.max(scope.maximum, entry.sequence);
-                        count++;
-                    }
-                    cursor = page.nextCursor;
-                    if (cursor !== undefined && (typeof cursor !== 'string' || !cursor || seen.has(cursor)))
-                        throw failure('REMOTE_DETAIL_CURSOR_INVALID');
-                    if (cursor)
-                        seen.add(cursor);
-                } while (cursor);
-                if (count !== expected?.total)
-                    throw failure('REMOTE_DETAIL_RESPONSE_INVALID');
-                scope.loaded = true;
-                scope.generation = generation;
-            });
-            scope.tail = load.then(() => { }, () => { });
-            await load;
-            let turn = null, step = null;
-            let tail = Promise.resolve(), firstFailure;
-            const enqueue = (operation) => {
-                const task = scope.tail.then(operation);
-                scope.tail = task.then(() => { }, () => { });
-                tail = task.catch(error => { scope.loaded = false; firstFailure ??= { error }; });
-            };
-            return {
-                beginTurn(ids) { if (!identifier(ids.turn) || !identifier(ids.step))
-                    throw failure('REMOTE_DETAIL_SCOPE_INVALID'); turn = ids.turn; step = ids.step; },
-                endTurn() { turn = null; step = null; },
-                record(observation) {
-                    const safe = sanitizeObservation(observation, true);
-                    const wire = (value) => Array.isArray(value) ? value.map(wire) : object(value) ? isSanitizedRedaction(value) ? (typeof value.valueType === 'string' ? { redacted: true, valueType: value.valueType, value: '已脱敏' } : '已脱敏') : Object.fromEntries(Object.entries(value).map(([key, child]) => [key, wire(child)])) : value;
-                    const sequence = scope.maximum + 1;
-                    if (!Number.isSafeInteger(sequence))
-                        throw failure('REMOTE_DETAIL_SEQUENCE_INVALID');
-                    scope.maximum = sequence;
-                    const detail = Object.freeze({ ...safe, payload: wire(safe.payload), version: 1, eventId: randomUUID(), instanceId: request.connection.instanceId, epoch: request.connection.epoch, sessionId: request.sessionId, provider: request.provider, turn, step, sequence, kind: kind(observation) });
-                    enqueue(async () => {
-                        // Pending is not a delivery verdict. Keep the exact failed stage separately.
-                        const file = join(dir, sequence + '-' + detail.eventId + '.json');
-                        let phase = 'journal', appendAttempted = false, outcomeKnown = false;
-                        try {
-                            try {
-                                await durableWrite(file, { state: 'pending', detail });
-                            }
-                            catch {
-                                throw failure('REMOTE_DETAIL_STORAGE_FAILED');
-                            }
-                            phase = 'append-scope';
-                            stable();
-                            let response;
-                            try {
-                                phase = 'append';
-                                appendAttempted = true;
-                                response = await (localScope === undefined ? api.appendRemoteConversationDetail(structuredClone(detail)) : api.appendRemoteConversationDetail(structuredClone(detail), localScope));
-                            }
-                            catch {
-                                phase = 'receipt-scope';
-                                stable();
-                                phase = 'receipt';
-                                const receipt = unwrap(await api.getRemoteConversationDetailReceipt({ eventId: detail.eventId, sessionId: detail.sessionId, provider: detail.provider }));
-                                phase = 'receipt-scope';
-                                stable();
-                                if (receipt.eventId !== detail.eventId)
-                                    throw failure('REMOTE_DETAIL_RECEIPT_INVALID');
-                                if (!receipt.recorded)
-                                    throw failure('REMOTE_DETAIL_DELIVERY_UNKNOWN');
-                                if (!isDeepStrictEqual(receipt.detail, detail))
-                                    throw failure('REMOTE_DETAIL_RECEIPT_INVALID');
-                                phase = 'settlement';
-                                await durableWrite(join(dir, 'settled-' + detail.eventId + '.json'), { eventId: detail.eventId, state: 'recorded' });
-                                outcomeKnown = true;
-                                return;
-                            }
-                            phase = 'ack-scope';
-                            stable();
-                            if (response?.ok === false) {
-                                phase = 'settlement';
-                                await durableWrite(join(dir, 'settled-' + detail.eventId + '.json'), { eventId: detail.eventId, state: 'rejected', code: response.error.code });
-                                outcomeKnown = true;
-                            }
-                            const ack = unwrap(response);
-                            if (ack.eventId !== detail.eventId || ack.recorded !== true)
-                                throw failure('REMOTE_DETAIL_RESPONSE_INVALID');
-                            phase = 'settlement';
-                            await durableWrite(join(dir, 'settled-' + detail.eventId + '.json'), { eventId: detail.eventId, state: 'recorded' });
-                            outcomeKnown = true;
-                        }
-                        catch (error) {
-                            if (!outcomeKnown) {
-                                try {
-                                    await durableWrite(join(dir, 'unconfirmed-' + detail.eventId + '.json'), { version: 1, eventId: detail.eventId, state: 'unconfirmed', phase, appendAttempted, code: closeCode(error, 'REMOTE_DETAIL_STORAGE_FAILED') });
-                                }
-                                catch {
-                                    throw withFailureEvidence(error, [failure('REMOTE_DETAIL_STORAGE_FAILED')], 'diagnostic');
-                                }
-                            }
-                            throw error;
-                        }
-                    });
-                },
-                async flush() { await tail; if (firstFailure)
-                    throw firstFailure.error; stable(); },
-            };
-        }
+            const name = filename(request.sessionId, request.provider), owner = memory.get(name) ?? [];
+            memory.set(name, owner);
+            let context = { turn: null, step: null };
+            return { beginTurn(ids) { context = { ...ids }; }, endTurn() { context = { turn: null, step: null }; }, record(observation) { send(request, observation, context, undefined, owner); } };
+        },
     };
 }

package/dist/workspace-source.d.ts

@@ -1,25 +1 @@
-import type { ConnectApi, RuntimeRequest } from './provider.ts';
-import type { DetailObservation } from './conversation-details.ts';
-export type SourceDecision = 'allowed-once' | 'rejected' | 'cancelled' | 'unavailable';
-export type SourceAdmissionStage = 'source-context' | 'source-confirmation' | 'input-acceptance' | 'login-readiness' | 'local-admission' | 'input-prepare' | 'model-catalog' | 'runtime-resolve';
-export interface WorkspaceSourceAdmission {
-    assertCurrent(): void;
-    recordFailure(error: unknown, stage: SourceAdmissionStage): Promise<void>;
-}
-export interface WorkspaceSourceOptions {
-    workspace(request: RuntimeRequest): Promise<{
-        id: string;
-        path: string;
-    }>;
-    currentUserTurn(request: RuntimeRequest): {
-        turn: number;
-        userMessageId: string;
-    };
-    confirm(question: {
-        question: string;
-        action: string;
-    }, request: RuntimeRequest): Promise<SourceDecision>;
-    record(request: RuntimeRequest, observation: DetailObservation): Promise<void>;
-}
-/** Explicit human source transition only. No source selection is inferred from a folder path. */
-export declare function confirmLegacyWorkspaceSource(get: () => ConnectApi | undefined, api: ConnectApi, request: RuntimeRequest, hooks: WorkspaceSourceOptions): Promise<WorkspaceSourceAdmission | undefined>;
+export type SourceAdmissionStage = 'source-context' | 'input-acceptance' | 'login-readiness' | 'local-admission' | 'input-prepare' | 'model-catalog' | 'runtime-resolve';