@ai-workbench/remote-agent 0.8.21 → 0.8.23

package/dist/conversation-details.d.ts

@@ -1,14 +1,6 @@
 export type JsonValue = null | boolean | number | string | JsonValue[] | {
     [key: string]: JsonValue;
 };
-export interface DetailScope {
-    instanceId: string;
-    epoch: number;
-    sessionId: string;
-    provider: 'claude' | 'codex';
-    turn: number;
-    step: number;
-}
 export interface DetailObservation {
     kind: 'extension' | 'commands' | 'tool' | 'usage' | 'notice' | 'need' | 'session';
     severity: 'info' | 'warning' | 'action-required';
@@ -20,28 +12,7 @@ export interface DetailObservation {
 export type SanitizedObservation = Omit<DetailObservation, 'payload'> & {
     payload: JsonValue;
 };
-export interface DetailRecord extends Omit<DetailObservation, 'payload'>, DetailScope {
-    version: 1;
-    eventId: string;
-    sequence: number;
-    payload: JsonValue;
-}
-export type DetailSink = {
-    append(record: Readonly<DetailRecord>): Promise<void>;
-};
 /** Only objects created by this module are trusted as redaction markers. */
 export declare function isSanitizedRedaction(value: unknown): boolean;
 export declare function sanitizeDisplayLabel(value: string): string;
 export declare function sanitizeObservation(observation: DetailObservation, protectModelMaterial?: boolean): Readonly<SanitizedObservation>;
-/** Internal diagnostic recorder; a sink is not an assertion that an L wire API exists. */
-export declare class ConversationDetails {
-    private readonly scope;
-    private readonly sink;
-    private readonly records;
-    private tail;
-    private firstFailure;
-    constructor(scope: DetailScope, sink: DetailSink);
-    record(observation: DetailObservation): void;
-    flush(): Promise<void>;
-    snapshot(): readonly DetailRecord[];
-}

package/dist/conversation-details.js

@@ -1,7 +1,4 @@
 import { employeeExecutionInfo } from "./employee-info.js";
-import { trustedEmployeeReason } from "./employee-reasons.js";
-import { randomUUID } from 'node:crypto';
-import { STAGES } from "./stage-timing.js";
 const redactionMarkers = new WeakSet();
 function redaction(fields) {
     const marker = { redacted: true, ...fields };
@@ -257,22 +254,6 @@ function usageStructure(value, key = '') {
         return value;
     return opaqueStructure(value);
 }
-/** Only fixed local stage names and finite nonnegative millisecond observations. */
-function timingStructure(value) {
-    if (!value || typeof value !== 'object' || Array.isArray(value))
-        return opaqueStructure(value);
-    return Object.fromEntries(Object.entries(value).map(([key, child]) => {
-        if (key === 'count' && typeof child === 'number' && Number.isSafeInteger(child) && child >= 1)
-            return [key, child];
-        if (key === 'phase' && typeof child === 'string' && Object.hasOwn(STAGES, child))
-            return [key, child];
-        if (key === 'clock' && child === 'client-monotonic' || key === 'outcome' && (child === 'ok' || child === 'failed'))
-            return [key, child];
-        if (['durationMs', 'elapsedMs', 'totalDurationMs', 'minDurationMs', 'maxDurationMs'].includes(key) && typeof child === 'number' && Number.isFinite(child) && child >= 0)
-            return [key, child];
-        return [key, opaqueStructure(child)];
-    }));
-}
 /** Only our two model-configuration observations approve these exact diagnostic
  * paths. Directory source, config metadata and arbitrary subtrees stay opaque. */
 function modelConfigurationStructure(value, level = 'root') {
@@ -344,34 +325,11 @@ function closeStructure(value) {
     if (!value || typeof value !== 'object' || Array.isArray(value))
         return opaqueStructure(value);
     return Object.fromEntries(Object.entries(value).map(([key, child]) => {
-        if (key === 'changes' && Array.isArray(child))
-            return [key, child.map(change => {
-                    if (!change || typeof change !== 'object' || Array.isArray(change))
-                        return opaqueStructure(change);
-                    const field = change.field;
-                    const known = typeof field === 'string' && (/^(?:observer.close-sequence|executor.ended|transport.closed|transport.termination-requested|provider.ended|broker.ended|broker.attached|broker.lease-aborted|lease.aborted|lease.closed|mcp.ended|mcp.closing|mcp.poisoned|shell.settled|shell.stop-code|tools.aborted|tools.stop-code|acp.close-requested|adapter.turn-aborted|adapter.detached|adapter.shutting-down|workspace.binding-id|workspace.source|workspace.status|workspace.match-count|network.phase|catalog.api-replaced|catalog.capability|catalog.signature-sha256|connection.instance-id|connection.epoch|connection.phase|connection.need-code)$/.test(field) || /^catalog\.(?:codex|claude)\.(?:ok|error-code|instance-id|epoch|provider|target-sha256|metadata-sha256|selected-model-valid)$/.test(field));
-                    if (!known)
-                        return opaqueStructure(change);
-                    const scalar = (value) => value === null || typeof value === 'boolean' || typeof value === 'number' && Number.isFinite(value) || typeof value === 'string' && /^[a-zA-Z0-9_.:@-]+$/.test(value) ? value : opaqueStructure(value);
-                    return Object.fromEntries(Object.entries(change).map(([name, value]) => [name, name === 'field' ? field : ['before', 'after'].includes(name) ? scalar(value) : opaqueStructure(value)]));
-                })];
-        if (key === 'pendingOperations' && Array.isArray(child))
-            return [key, child.map(field => typeof field === 'string' && /^[a-z][a-z0-9._/-]*$/.test(field) ? field : opaqueStructure(field))];
-        if (key === 'changedFields' && Array.isArray(child))
-            return [key, child.map(field => typeof field === 'string' && /^[a-z][a-z-]*$/.test(field) ? field : opaqueStructure(field))];
-        if (['closeId', 'parentCloseId'].includes(key) && typeof child === 'string' && /^[a-f0-9-]+$/.test(child))
-            return [key, child];
-        if (['layer', 'initiator', 'action', 'operation', 'stage', 'clock'].includes(key) && typeof child === 'string' && /^[a-z][a-z0-9._/-]*$/.test(child))
-            return [key, child];
-        if (key === 'reason' && typeof child === 'string' && /^[A-Z][A-Z0-9_]*$/.test(child))
+        if (['layer', 'initiator', 'stage', 'clock'].includes(key) && typeof child === 'string' && /^[a-z][a-z0-9._/-]*$/.test(child))
             return [key, child];
-        if (key === 'remoteReason' && (child === 'unavailable' || trustedEmployeeReason(child) !== undefined) || key === 'first' && typeof child === 'boolean')
+        if (['reason', 'remoteReason'].includes(key) && typeof child === 'string' && /^[A-Z][A-Z0-9_]*$/.test(child))
             return [key, child];
-        if (['closeSequence', 'elapsedMs'].includes(key) && typeof child === 'number' && Number.isFinite(child) && child >= 0)
-            return [key, child];
-        if (key === 'exitCode' && (child === null || typeof child === 'number' && Number.isSafeInteger(child)))
-            return [key, child];
-        if (key === 'signal' && (child === null || typeof child === 'string' && /^SIG[A-Z]+$/.test(child)))
+        if (key === 'elapsedMs' && typeof child === 'number' && Number.isFinite(child) && child >= 0)
             return [key, child];
         return [key, opaqueStructure(child)];
     }));
@@ -401,62 +359,13 @@ export function sanitizeObservation(observation, protectModelMaterial = false) {
             : observation.kind === 'session' && observation.code === 'CATALOG_SCOPE_INFORMATION' ? catalogScopeStructure(payload)
                 : observation.kind === 'session' && observation.code === 'CODEX_CONTEXT_SESSION_REPLACED' ? contextTransitionStructure(payload)
                     : observation.kind === 'session' && ['MODEL_CONFIGURATION_CONFIRMED', 'MODEL_CONFIGURATION_FAILED', 'MODEL_CONFIGURATION_INFORMATION', 'MODEL_CONFIGURATION_CHANGED_DURING_TURN', 'TURN_GATE_INFORMATION'].includes(observation.code) ? modelConfigurationStructure(payload)
-                        : observation.kind === 'session' && ['REMOTE_CLOSE_FIRST', 'REMOTE_CLOSE_NEXT'].includes(observation.code) ? closeStructure(payload)
+                        : observation.kind === 'session' && observation.code === 'REMOTE_CLOSE_REASON' ? closeStructure(payload)
                             : observation.kind === 'commands' ? catalogStructure(payload)
                                 : observation.kind === 'usage' ? usageStructure(payload)
                                     : observation.kind === 'session' && observation.code === 'EMPLOYEE_MCP_INFORMATION' ? (employeeExecutionInfo(observation.payload) ?? { information: 'unconfirmed' })
-                                        : observation.kind === 'session' && observation.code === 'REMOTE_STAGE_TIMING' ? timingStructure(payload)
-                                            : observation.kind === 'session' && ['CLAUDE_EMPLOYEE_OPERATION', 'CLAUDE_EMPLOYEE_PROCESS', 'CLAUDE_EMPLOYEE_REVOKED', 'CLAUDE_EMPLOYEE_SCOPE'].includes(observation.code) ? employeeStructure(payload)
-                                                : observation.kind === 'need' ? payload
-                                                    : observation.kind === 'tool' || ['SDK_ITEM', 'SDK_TOOL', 'ACP_SESSION_UPDATE', 'ACP_IDLE_UPDATE'].includes(observation.code) ? toolStructure(payload)
-                                                        : opaqueStructure(payload),
+                                        : observation.kind === 'session' && ['CLAUDE_EMPLOYEE_OPERATION', 'CLAUDE_EMPLOYEE_PROCESS', 'CLAUDE_EMPLOYEE_REVOKED', 'CLAUDE_EMPLOYEE_SCOPE'].includes(observation.code) ? employeeStructure(payload)
+                                            : observation.kind === 'need' ? payload
+                                                : observation.kind === 'tool' || ['SDK_ITEM', 'SDK_TOOL', 'ACP_SESSION_UPDATE', 'ACP_IDLE_UPDATE'].includes(observation.code) ? toolStructure(payload)
+                                                    : opaqueStructure(payload),
     });
 }
-function validatedScope(scope) {
-    for (const name of ['instanceId', 'sessionId']) {
-        if (typeof scope[name] !== 'string' || scope[name].trim().length === 0)
-            throw new TypeError(`Invalid detail scope ${name}`);
-    }
-    for (const name of ['epoch', 'turn', 'step']) {
-        if (!Number.isInteger(scope[name]) || scope[name] < (name === 'epoch' ? 0 : 1))
-            throw new TypeError(`Invalid detail scope ${name}`);
-    }
-    if (scope.provider !== 'claude' && scope.provider !== 'codex')
-        throw new TypeError('Invalid detail scope provider');
-    return { instanceId: scope.instanceId, epoch: scope.epoch, sessionId: scope.sessionId, provider: scope.provider, turn: scope.turn, step: scope.step };
-}
-/** Internal diagnostic recorder; a sink is not an assertion that an L wire API exists. */
-export class ConversationDetails {
-    scope;
-    sink;
-    records = [];
-    tail = Promise.resolve();
-    firstFailure;
-    constructor(scope, sink) {
-        this.scope = freezeDeep(validatedScope(scope));
-        this.sink = sink;
-    }
-    record(observation) {
-        const record = freezeDeep({
-            ...this.scope, version: 1, eventId: randomUUID(), sequence: this.records.length + 1,
-            ...sanitizeObservation(observation),
-        });
-        this.records.push(record);
-        this.tail = this.tail.then(async () => {
-            try {
-                await this.sink.append(cloneFrozen(record));
-            }
-            catch (error) {
-                // Keep processing later entries in order, but never turn a failed flush green.
-                if (!this.firstFailure)
-                    this.firstFailure = { error };
-            }
-        });
-    }
-    async flush() {
-        await this.tail;
-        if (this.firstFailure)
-            throw this.firstFailure.error;
-    }
-    snapshot() { return cloneFrozen(this.records); }
-}

package/dist/employee-endpoint.d.ts

@@ -87,9 +87,7 @@ export interface EmployeeLease {
     target: EmployeeEndpointTarget;
     request: Readonly<LocalWorkspaceContextRequest>;
     signal: AbortSignal;
-    validate(callerSignal?: AbortSignal): Promise<EmployeeEndpointTarget>;
+    sshArgs: readonly string[];
     close(cause?: CloseCause): Promise<void>;
-    /** Existing physical fence, relocated to actual local tools rather than broker messages. */
-    validateDirectory(callerSignal?: AbortSignal): Promise<EmployeeEndpointTarget>;
 }
 export declare function openEmployeeLease(options: EmployeeLeaseOptions, initialSignal?: AbortSignal): Promise<EmployeeLease>;

package/dist/employee-endpoint.js

@@ -41,16 +41,17 @@ export async function openEmployeeLease(options, initialSignal) {
     if (connection.phase !== 'connected' || state.phase !== 'ready' || state.instanceId !== connection.instanceId || state.epoch !== connection.epoch || items.length !== 1 || items[0].source !== 'local' || items[0].status !== 'selected' || !items[0].bindingId)
         throw fail();
     const request = { instanceId: connection.instanceId, epoch: connection.epoch, workspaceId: workspace.workspaceId, expectedBindingId: items[0].bindingId };
-    let target, closed = false, diagnosticFailure;
+    let target, closed = false;
+    let sshArgs = [];
     const invalidate = (code, initiator = 'lease.validate') => { options.closeDiagnostics?.record({ layer: 'endpoint', initiator, reason: code, action: 'invalidate', changes: [{ field: 'lease.aborted', before: lifetime.signal.aborted, after: true }] }); if (lifetime.signal.aborted)
         return; try {
         options.detail({ kind: 'session', severity: 'warning', code: 'CLAUDE_EMPLOYEE_REVOKED', summary: '本机旧绑定已停止派发，在途结果按实际确认；不会重放', payload: { reason: code, workspaceId: request.workspaceId, bindingId: request.expectedBindingId } });
     }
-    catch (error) {
-        diagnosticFailure ??= error;
+    catch {
+        console.warn("EMPLOYEE_DIAGNOSTIC_DROPPED");
     }
     finally {
-        lifetime.abort(diagnosticFailure ?? fail(code));
+        lifetime.abort(fail(code));
     } };
     const current = () => {
         if (options.getConnect() !== api || options.getNetwork() !== network)
@@ -79,8 +80,6 @@ export async function openEmployeeLease(options, initialSignal) {
     }
     // Remote endpoint discovery belongs to lease opening only.
     async function openTarget(callerSignal) {
-        if (diagnosticFailure)
-            throw diagnosticFailure;
         callerSignal?.throwIfAborted();
         const signal = AbortSignal.any([lifetime.signal, ...callerSignal ? [callerSignal] : []]);
         try {
@@ -112,7 +111,7 @@ export async function openEmployeeLease(options, initialSignal) {
             catch {
                 throw fail('EMPLOYEE_BRIDGE_PROTOCOL_INVALID');
             }
-            verifyBridgeTarget(result, next);
+            sshArgs = verifyBridgeTarget(result, next).sshArgs;
             const final = await lstat(workspace.directory.path);
             signal.throwIfAborted();
             current();
@@ -127,44 +126,14 @@ export async function openEmployeeLease(options, initialSignal) {
             throw error instanceof NeedError || callerSignal?.aborted ? error : fail();
         }
     }
-    async function validate(callerSignal) {
-        if (diagnosticFailure)
-            throw diagnosticFailure;
-        callerSignal?.throwIfAborted();
-        try {
-            current();
-            return structuredClone(target);
-        }
-        catch (error) {
-            if (!callerSignal?.aborted)
-                invalidate(error instanceof NeedError ? error.code : 'EMPLOYEE_CONTEXT_CHANGED');
-            throw error instanceof NeedError || callerSignal?.aborted ? error : fail();
-        }
-    }
-    async function validateDirectory(callerSignal) {
-        if (diagnosticFailure)
-            throw diagnosticFailure;
-        callerSignal?.throwIfAborted();
-        const signal = AbortSignal.any([lifetime.signal, ...callerSignal ? [callerSignal] : []]);
-        try {
-            await physicalDirectory(signal);
-            return await validate(callerSignal);
-        }
-        catch (error) {
-            if (!callerSignal?.aborted)
-                invalidate(error instanceof NeedError ? error.code : 'EMPLOYEE_CONTEXT_CHANGED');
-            throw error instanceof NeedError || callerSignal?.aborted ? error : fail();
-        }
-    }
     try {
         await openTarget(initialSignal);
-        return { target: structuredClone(target), request: Object.freeze({ ...request }), signal: lifetime.signal, validate, validateDirectory, close: async (cause = { layer: 'endpoint', initiator: 'lease.close', reason: 'EMPLOYEE_EXECUTOR_CLOSED', action: 'close' }) => { options.closeDiagnostics?.record({ ...cause, changes: cause.changes ?? [{ field: 'lease.closed', before: closed, after: true }] }); if (!closed) {
+        return { target: structuredClone(target), sshArgs: [...sshArgs], request: Object.freeze({ ...request }), signal: lifetime.signal, close: async (cause = { layer: 'endpoint', initiator: 'lease.close', reason: 'EMPLOYEE_EXECUTOR_CLOSED', action: 'close' }) => { options.closeDiagnostics?.record({ ...cause, changes: cause.changes ?? [{ field: 'lease.closed', before: closed, after: true }] }); if (!closed) {
                 closed = true;
                 lifetime.abort(fail('EMPLOYEE_EXECUTOR_CLOSED'));
                 for (const off of offs)
                     off();
-            } if (diagnosticFailure)
-                throw diagnosticFailure; } };
+            } } };
     }
     catch (error) {
         options.closeDiagnostics?.record({ layer: 'endpoint', initiator: 'lease.open-failure', reason: closeCode(error), action: 'failure' });

package/dist/employee-exec.d.ts

@@ -12,8 +12,6 @@ export interface EmployeeExecutionOptions {
     bindingId: string;
     closeDiagnostics?: CloseDiagnostics;
     acpMaxMessageBytes: number;
-    /** Rechecks the current L CAS/directory/account and N/S five-tuple. No cached permit. */
-    validate(signal: AbortSignal): Promise<void>;
     /** Once allocation starts, settle only after returning its executor or confirming aborted cleanup. */
     transport(signal: AbortSignal): Promise<EmployeeExecutionTransport>;
 }
@@ -58,4 +56,7 @@ export declare class EmployeeExecution {
     private read;
 }
 /** NDJSON carrier with byte bounds and backpressure derived solely from acpMaxMessageBytes. */
-export declare function createEmployeeProcessTransport(child: ChildProcessWithoutNullStreams, acpMaxMessageBytes: number, stderrCodes?: readonly string[], observe?: CloseObserver): EmployeeExecutionTransport;
+export interface EmployeeProcessTransport extends EmployeeExecutionTransport {
+    readonly ready: Promise<void>;
+}
+export declare function createEmployeeProcessTransport(child: ChildProcessWithoutNullStreams, acpMaxMessageBytes: number, stderrCodes?: readonly string[], observe?: CloseObserver, readyMarker?: string): EmployeeProcessTransport;

package/dist/employee-exec.js

@@ -86,7 +86,7 @@ export class EmployeeExecution {
     }
     active() { if (this.ended)
         throw this.error ?? need('EMPLOYEE_EXEC_CLOSED'); }
-    async gate(signal) { this.active(); cancelled(signal); await waiting(this.options.validate(signal), signal); this.active(); cancelled(signal); }
+    gate(signal) { this.active(); cancelled(signal); }
     stop(error, cause = { layer: 'executor', initiator: 'executor.stop', reason: closeCode(error, 'EMPLOYEE_EXEC_CLOSED'), action: 'close' }, observe = this.options.closeDiagnostics?.capture()) {
         observe?.({ ...cause, changes: cause.changes ?? [{ field: 'executor.ended', before: this.ended, after: true }] });
         if (this.ended)
@@ -147,12 +147,12 @@ export class EmployeeExecution {
         this.queuedWriteBytes += size;
         const operation = this.writeTail.then(async () => {
             try {
-                await this.gate(current);
+                this.gate(current);
                 const io = this.io;
                 if (!io)
                     throw need('EMPLOYEE_EXEC_CLOSED');
                 await waiting(io.write(value.message, current), current);
-                await this.gate(current);
+                this.gate(current);
                 return { version: 1 };
             }
             catch (error) {
@@ -172,7 +172,7 @@ export class EmployeeExecution {
             throw need('EMPLOYEE_EXEC_ALREADY_OPEN');
         this.opening = true;
         try {
-            await this.gate(signal);
+            this.gate(signal);
             // A factory may finish after revoke/abort. Its late executor belongs to this binding and must close.
             const created = Promise.resolve().then(() => { cancelled(signal); return this.options.transport(signal); }).then(async (io) => { if (this.ended || signal.aborted) {
                 this.closeTransport(io, { layer: 'executor', initiator: 'executor.late-factory', reason: this.error?.code ?? 'ABORTED', operation: 'open', action: 'close' }, observe);
@@ -187,7 +187,7 @@ export class EmployeeExecution {
             } });
             void this.factoryReceipt.catch(() => { });
             await waiting(created, signal);
-            await this.gate(signal);
+            this.gate(signal);
             this.executionId = randomUUID();
             return { version: 1, executionId: this.executionId };
         }
@@ -206,7 +206,7 @@ export class EmployeeExecution {
         this.pendingRead = true;
         let consumed = false;
         try {
-            await this.gate(signal);
+            this.gate(signal);
             const io = this.io;
             if (!io)
                 throw need('EMPLOYEE_EXEC_CLOSED');
@@ -216,7 +216,7 @@ export class EmployeeExecution {
                     throw this.error;
                 return { version: 1, messages: [], closed: true };
             }
-            await this.gate(signal);
+            this.gate(signal);
             if (message === null) {
                 this.stop(undefined, { layer: 'executor', initiator: 'executor.read-eof', reason: 'EXECUTOR_EOF', operation: 'read', action: 'eof' }, observe);
                 return { version: 1, messages: [], closed: true };
@@ -248,16 +248,21 @@ export class EmployeeExecution {
         }
     }
 }
-/** NDJSON carrier with byte bounds and backpressure derived solely from acpMaxMessageBytes. */
-export function createEmployeeProcessTransport(child, acpMaxMessageBytes, stderrCodes = [], observe) {
+export function createEmployeeProcessTransport(child, acpMaxMessageBytes, stderrCodes = [], observe, readyMarker) {
     capacity(acpMaxMessageBytes);
     let partial = Buffer.alloc(0), queuedBytes = 0, writingBytes = 0, closed = false, reason;
     let processClosed = false, terminationRequested = false;
     const receipt = Promise.withResolvers();
     void receipt.promise.catch(() => { });
     let sawOutput = false, diagnosticCode, stderrPosition = 0;
+    const readiness = Promise.withResolvers();
+    void readiness.promise.catch(() => { });
+    let readySeen = readyMarker === undefined;
+    if (readySeen)
+        readiness.resolve();
     const knownCodes = stderrCodes.filter(code => /^[A-Z][A-Z0-9_]*$/.test(code));
-    let stderrCandidates = knownCodes;
+    const stderrPatterns = readyMarker ? [...knownCodes, readyMarker] : knownCodes;
+    let stderrCandidates = stderrPatterns;
     const queue = [];
     let pending;
     const writes = new Set();
@@ -290,6 +295,8 @@ export function createEmployeeProcessTransport(child, acpMaxMessageBytes, stderr
         if (!closed) {
             closed = true;
             reason = error;
+            if (!readySeen)
+                readiness.reject(error ?? need('EMPLOYEE_EXEC_UNKNOWN'));
             partial = Buffer.alloc(0);
             if (error) {
                 queue.length = 0;
@@ -355,15 +362,19 @@ export function createEmployeeProcessTransport(child, acpMaxMessageBytes, stderr
     });
     // Match fixed startup codes byte by byte. No arbitrary diagnostic bytes are retained.
     child.stderr.on('data', (chunk) => {
-        if (sawOutput || closed || !knownCodes.length)
+        if (closed || !stderrPatterns.length)
             return;
         for (const byte of chunk) {
             if (byte === 10) {
                 const match = stderrCandidates.find(code => code.length === stderrPosition);
-                if (match)
+                if (match === readyMarker && !readySeen) {
+                    readySeen = true;
+                    readiness.resolve();
+                }
+                else if (match && !sawOutput && knownCodes.includes(match))
                     diagnosticCode = match;
                 stderrPosition = 0;
-                stderrCandidates = knownCodes;
+                stderrCandidates = stderrPatterns;
             }
             else if (stderrCandidates.length) {
                 stderrCandidates = stderrCandidates.filter(code => code.charCodeAt(stderrPosition) === byte);
@@ -377,6 +388,7 @@ export function createEmployeeProcessTransport(child, acpMaxMessageBytes, stderr
     child.prependOnceListener('close', (code, signal) => observe?.({ layer: 'relay', initiator: 'ssh.process.close', reason: diagnosticCode ?? (code === 0 && !signal ? 'PROCESS_EXIT' : 'EMPLOYEE_EXEC_UNKNOWN'), action: 'exit', exitCode: code, signal }));
     child.once('close', (code, signal) => { processClosed = true; finish(partial.length ? need('EMPLOYEE_EXEC_PROTOCOL_INVALID') : code === 0 && !signal ? undefined : need(diagnosticCode ?? 'EMPLOYEE_EXEC_UNKNOWN'), false, { layer: 'relay', initiator: 'ssh.process-close-settle', reason: diagnosticCode ?? (code === 0 && !signal ? 'PROCESS_EXIT' : 'EMPLOYEE_EXEC_UNKNOWN'), action: 'exit', exitCode: code, signal }); receipt.resolve(); });
     return {
+        ready: readiness.promise,
         write: async (message, signal) => {
             cancelled(signal);
             if (closed)

package/dist/employee-info.d.ts

@@ -1,7 +1,11 @@
 /** Optional protocol information only. Malformed metadata cannot stop a turn. */
+export interface EmployeeInitializationInfo {
+    phase: 'awaiting-request' | 'awaiting-response' | 'response-delivered';
+}
 export interface EmployeeExecutionInfo {
+    initialization?: EmployeeInitializationInfo;
     version: 1;
-    httpMcpPolicy: 'reject' | 'ignore';
+    httpMcpPolicy: 'ignore';
     ignoredStdio: string[];
     ignoredHttp: string[];
     ignoredNativeHttp: string[];

package/dist/employee-info.js

@@ -1,7 +1,7 @@
 const object = (value) => value !== null && typeof value === 'object' && !Array.isArray(value);
 const safeName = (value) => typeof value === 'string' && value.length > 0 && !/[\p{C}\r\n]/u.test(value);
 export function employeeExecutionInfo(value) {
-    if (!object(value) || value.version !== 1 || (value.httpMcpPolicy !== 'reject' && value.httpMcpPolicy !== 'ignore'))
+    if (!object(value) || value.version !== 1 || value.httpMcpPolicy !== 'ignore')
         return;
     const lists = {};
     for (const key of ['ignoredStdio', 'ignoredHttp', 'ignoredNativeHttp']) {
@@ -12,25 +12,36 @@ export function employeeExecutionInfo(value) {
         const unshown = value[key + 'Unshown'];
         lists[key + 'Unshown'] = (Number.isSafeInteger(unshown) && Number(unshown) >= 0 ? Number(unshown) : 0) + entries.filter(entry => !safeName(entry)).length;
     }
-    return { version: 1, httpMcpPolicy: value.httpMcpPolicy, ...lists };
+    const initialization = employeeInitializationInfo(value.initialization);
+    return { version: 1, httpMcpPolicy: value.httpMcpPolicy, ...lists, ...(initialization ? { initialization } : {}) };
+}
+function employeeInitializationInfo(value) {
+    if (!object(value) || !['awaiting-request', 'awaiting-response', 'response-delivered'].includes(value.phase))
+        return;
+    return { phase: value.phase };
 }
 // Code-span delimiter exceeds every backtick run, so names cannot inject Markdown/HTML.
 const quoted = (names) => names.map(name => { let longest = 0; for (const run of name.matchAll(/`+/g))
     longest = Math.max(longest, run[0].length); const delimiter = '`'.repeat(longest + 1); return delimiter + ' ' + name + ' ' + delimiter; }).join('、');
 export function employeeMcpSummary(info) {
     const parts = [];
-    for (const [key, label] of [['ignoredStdio', '已忽略本机 stdio MCP'], ['ignoredHttp', info.httpMcpPolicy === 'ignore' ? '已按设置忽略本机 HTTP MCP' : '本机 HTTP MCP 未获支持，当前设置为拒绝'], ['ignoredNativeHttp', '已按原生能力忽略本机 HTTP MCP']]) {
+    for (const [key, label] of [['ignoredStdio', '已忽略本机 stdio MCP'], ['ignoredHttp', '已忽略本机 HTTP MCP'], ['ignoredNativeHttp', '已按原生能力忽略本机 HTTP MCP']]) {
         const names = info[key], unshown = info[key + 'Unshown'];
         if (names.length || unshown)
             parts.push(label + ': ' + [...(names.length ? [quoted(names)] : []), ...(unshown ? [`${unshown} 个名称含不可显示内容`] : [])].join('；'));
     }
+    const init = info.initialization;
+    if (init) {
+        const phase = { 'awaiting-request': '未收到初始化请求', 'awaiting-response': '初始化回应尚未送达', 'response-delivered': '初始化回应已送达' }[init.phase];
+        parts.push('员工执行器初始化：' + phase);
+    }
     return parts.join('。');
 }
 /** Employee-facing execution fact; protocol terms and stdio names remain in details. */
 export function employeeHttpNotice(info, sanitizeLabel, showUnshown) {
-    const rawNames = [...new Set([...(info.httpMcpPolicy === 'ignore' ? info.ignoredHttp : []), ...info.ignoredNativeHttp])];
+    const rawNames = [...new Set([...info.ignoredHttp, ...info.ignoredNativeHttp])];
     const names = rawNames.filter(name => sanitizeLabel(name) === name && !name.includes('[已脱敏：'));
-    const unshown = showUnshown && (rawNames.length - names.length + (info.httpMcpPolicy === 'ignore' ? info.ignoredHttpUnshown : 0) + info.ignoredNativeHttpUnshown) > 0;
+    const unshown = showUnshown && (rawNames.length - names.length + info.ignoredHttpUnshown + info.ignoredNativeHttpUnshown) > 0;
     if (!names.length)
         return unshown ? '你电脑上的一项本地扩展本次不可用，详情见技术详情。' : '';
     const named = names.map(name => '『' + quoted([name]) + '』').join('、');

package/dist/employee-location.js

@@ -39,12 +39,11 @@ export async function admitEmployeeLocation(options) {
             throw fail('EMPLOYEE_CONTEXT_CHANGED');
         return { request, local: { instanceId: c.instanceId, epoch: c.epoch, workspaceId: c.workspaceId, bindingId: c.bindingId, directory: structuredClone(c.directory) } };
     };
-    const initial = await read(options.signal);
+    const initial = options.expectedLocal ? { request: { instanceId: connection.instanceId, epoch: connection.epoch, workspaceId: workspace.id, expectedBindingId: options.expectedLocal.bindingId }, local: structuredClone(options.expectedLocal) } : await read(options.signal);
     if (options.expectedLocal && !same(initial.local, options.expectedLocal))
         throw fail('EMPLOYEE_CONTEXT_CHANGED');
-    const prepare = async (signal) => { signal.throwIfAborted(); const before = await read(signal); if (!same(before, initial))
-        throw fail('EMPLOYEE_CONTEXT_CHANGED'); const result = await network.prepareEmployeeEndpoint(initial.request, signal); signal.throwIfAborted(); if (!result.ok)
-        throw new NeedError(result.error.code, result.error.message, result.error.needs); const fresh = endpointValue(result.value, initial.local, settingsPath); const after = await read(signal); if (!same(after, initial))
+    const prepare = async (signal) => { signal.throwIfAborted(); const result = await network.prepareEmployeeEndpoint(initial.request, signal); signal.throwIfAborted(); if (!result.ok)
+        throw new NeedError(result.error.code, result.error.message, result.error.needs); const fresh = endpointValue(result.value, initial.local, settingsPath); const state = api.getWorkspaceLocationState(); if (state.phase !== 'ready' || state.instanceId !== connection.instanceId || state.epoch !== connection.epoch || !state.items.some(row => row.workspaceId === workspace.id && row.bindingId === initial.local.bindingId && row.source === 'local' && row.status === 'selected'))
         throw fail('EMPLOYEE_CONTEXT_CHANGED'); return fresh; };
     const endpoint = await prepare(options.signal ?? new AbortController().signal);
     return { cwd: initial.local.directory.path, bindingId: initial.local.bindingId, workspaceId: initial.local.workspaceId, endpoint, validate: async (signal) => { const fresh = await prepare(signal); if (!same(fresh, endpoint))