@ai-workbench/remote-agent 0.8.21 → 0.8.23

package/dist/employee-mcp.js

@@ -36,11 +36,11 @@ export class EmployeeSocketTransport {
         this.maxBytes = maxBytes;
         this.observeClose = observeClose;
     }
-    failed(error) { try {
+    failed(error) { this.failure ??= error; try {
         this.onerror?.(error);
     }
-    catch (observation) {
-        this.failure = observation instanceof Error ? observation : new Error('EMPLOYEE_MCP_OBSERVATION_FAILED');
+    catch {
+        console.warn('EMPLOYEE_MCP_DIAGNOSTIC_DROPPED');
     }
     finally {
         void this.close({ layer: 'relay', initiator: 'mcp.socket-failure', reason: closeCode(error, 'EMPLOYEE_MCP_PROTOCOL_OR_SOCKET_ERROR'), action: 'failure' });
@@ -79,8 +79,18 @@ export class EmployeeSocketTransport {
         }
         await new Promise((yes, no) => this.socket.write(wire, error => error ? no(error) : yes()));
     }
-    async close(cause = { layer: 'relay', initiator: 'mcp.transport-close', reason: 'MCP_TRANSPORT_CLOSED', action: 'close' }) { this.observeClose?.({ ...cause, changes: cause.changes ?? [{ field: 'mcp.ended', before: this.ended, after: true }] }); if (this.ended)
-        return; this.ended = true; this.lifetime.abort(); this.socket.destroy(); this.onclose?.(); }
+    async close(cause = { layer: 'relay', initiator: 'mcp.transport-close', reason: 'MCP_TRANSPORT_CLOSED', action: 'close' }) { try {
+        this.observeClose?.({ ...cause, changes: cause.changes ?? [{ field: 'mcp.ended', before: this.ended, after: true }] });
+    }
+    catch {
+        console.warn('EMPLOYEE_MCP_DIAGNOSTIC_DROPPED');
+    } if (this.ended)
+        return; this.ended = true; this.lifetime.abort(); this.socket.destroy(); try {
+        this.onclose?.();
+    }
+    catch {
+        console.warn('EMPLOYEE_MCP_CLOSE_OBSERVER_FAILED');
+    } }
 }
 export async function openEmployeeMcp(options) {
     if (process.platform !== 'darwin')
@@ -88,7 +98,7 @@ export async function openEmployeeMcp(options) {
     if (!Number.isSafeInteger(options.maxBytes) || options.maxBytes < 1)
         throw new NeedError('SETTINGS_REQUIRED', '本机工具消息容量无效。', 'acpMaxMessageBytes');
     await access('/usr/bin/nc', constants.X_OK);
-    const tools = createEmployeeTools({ closeDiagnostics: options.closeDiagnostics, cwd: options.lease.target.local.directory.path, shell: options.lease.target.endpoint.endpointShell, uid: options.lease.target.endpoint.remoteUid, maxBytes: options.maxBytes, killGraceMs: options.killGraceMs, detail: observe, runShell: options.runShell, validate: signal => options.lease.validateDirectory(signal).then(() => { }) });
+    const tools = createEmployeeTools({ closeDiagnostics: options.closeDiagnostics, cwd: options.lease.target.local.directory.path, shell: options.lease.target.endpoint.endpointShell, uid: options.lease.target.endpoint.remoteUid, maxBytes: options.maxBytes, killGraceMs: options.killGraceMs, detail: observe, runShell: options.runShell, validate: async (signal) => { signal?.throwIfAborted(); options.lease.signal.throwIfAborted(); } });
     const root = await mkdtemp('/private/tmp/aw-x87-'), socketPath = root + '/mcp';
     try {
         const info = await lstat(root);
@@ -97,51 +107,27 @@ export async function openEmployeeMcp(options) {
     }
     catch (error) {
         options.closeDiagnostics?.record({ layer: 'relay', initiator: 'mcp.storage-failure', reason: closeCode(error), action: 'failure' });
-        const failures = [error];
-        try {
-            await tools.close({ layer: 'executor', initiator: 'mcp.storage-cleanup', reason: 'MCP_STORAGE_FAILED', action: 'close' });
-        }
-        catch (cleanup) {
-            failures.push(cleanup);
-        }
-        try {
-            await rm(root, { recursive: true });
-        }
-        catch (cleanup) {
-            failures.push(cleanup);
-        }
-        try {
-            options.closeDiagnostics?.assertRecorded();
-        }
-        catch (reporting) {
-            failures.push(reporting);
+        for (const clean of [() => tools.close({ layer: 'executor', initiator: 'mcp.storage-cleanup', reason: 'MCP_STORAGE_FAILED', action: 'close' }), () => rm(root, { recursive: true })]) {
+            try {
+                await clean();
+            }
+            catch {
+                console.warn('EMPLOYEE_MCP_CLEANUP_FAILED');
+            }
         }
-        if (failures.length > 1)
-            throw new AggregateError(failures, 'EMPLOYEE_MCP_STORAGE_AND_CLEANUP_FAILED');
         throw error;
     }
     const clients = new Set(), transports = new Set();
-    let closing, diagnosticFailure;
-    const failureLifetime = new AbortController();
-    const poison = (error) => {
-        options.closeDiagnostics?.record({ layer: 'relay', initiator: 'mcp.poison', reason: closeCode(error, 'CONVERSATION_DETAILS_FAILED'), action: 'invalidate' });
-        diagnosticFailure ??= error;
-        failureLifetime.abort(error);
-        // Close is memoized synchronously: no fresh connection/call can pass the fence.
-        void options.lease.close({ layer: 'endpoint', initiator: 'mcp.poison-lease', reason: 'CONVERSATION_DETAILS_FAILED', action: 'close' }).catch(failure => { diagnosticFailure ??= failure; });
-        void close({ layer: 'relay', initiator: 'mcp.poison-close', reason: 'CONVERSATION_DETAILS_FAILED', action: 'close' }).catch(failure => { diagnosticFailure ??= failure; });
-    };
-    function observeUsing(event, sink) { if (diagnosticFailure)
-        throw diagnosticFailure; try {
+    let closing;
+    function observeUsing(event, sink) { try {
         sink(event);
     }
-    catch (error) {
-        poison(error);
-        throw error;
+    catch {
+        console.warn('EMPLOYEE_MCP_DIAGNOSTIC_DROPPED');
     } }
     function observe(event) { observeUsing(event, options.detail); }
     const server = createServer(socket => {
-        if (closing || failureLifetime.signal.aborted || options.lease.signal.aborted) {
+        if (closing || options.lease.signal.aborted) {
             options.closeDiagnostics?.record({ layer: 'relay', initiator: 'mcp.reject-late-socket', reason: 'MCP_CLOSING', action: 'close' });
             socket.destroy();
             return;
@@ -155,16 +141,18 @@ export async function openEmployeeMcp(options) {
             const active = options.activeSignal();
             if (!active || active.aborted)
                 return { isError: true, content: [{ type: 'text', text: 'EMPLOYEE_NO_ACTIVE_TURN：当前没有已接纳的用户轮次，本机工具未执行。' }] };
-            const signal = AbortSignal.any([active, extra.signal, transport.signal, options.lease.signal, failureLifetime.signal]);
-            const sink = options.captureDetail?.() ?? options.detail;
-            return tools.call(request.params.name, request.params.arguments ?? {}, signal, event => observeUsing(event, sink));
+            const signal = AbortSignal.any([active, extra.signal, transport.signal, options.lease.signal]);
+            let sink;
+            try {
+                sink = options.captureDetail?.() ?? options.detail;
+            }
+            catch {
+                console.warn('EMPLOYEE_MCP_DIAGNOSTIC_DROPPED');
+            }
+            return tools.call(request.params.name, request.params.arguments ?? {}, signal, event => { if (sink)
+                observeUsing(event, sink); });
         });
-        mcp.onerror = () => { observeConnection?.({ layer: 'relay', initiator: 'mcp.server-error', reason: 'EMPLOYEE_MCP_PROTOCOL_OR_TRANSPORT_ERROR', action: 'failure' }); try {
-            observe({ kind: 'session', severity: 'warning', code: 'CLAUDE_EMPLOYEE_MCP_UNKNOWN', summary: '本机工具连接出现协议或传输错误；在途结果未知，没有重放' });
-        }
-        catch (error) {
-            poison(error);
-        } };
+        mcp.onerror = () => { observeConnection?.({ layer: 'relay', initiator: 'mcp.server-error', reason: 'EMPLOYEE_MCP_PROTOCOL_OR_TRANSPORT_ERROR', action: 'failure' }); observe({ kind: 'session', severity: 'warning', code: 'CLAUDE_EMPLOYEE_MCP_UNKNOWN', summary: '本机工具连接出现协议或传输错误；恢复后可在原会话继续。' }); };
         mcp.onclose = () => { observeConnection?.({ layer: 'relay', initiator: 'mcp.client-closed', reason: 'MCP_CLIENT_CLOSED', action: 'close' }); clients.delete(mcp); transports.delete(transport); };
         void mcp.connect(transport).catch(error => { observeConnection?.({ layer: 'relay', initiator: 'mcp.connect-failure', reason: closeCode(error, 'MCP_CONNECT_FAILED'), action: 'close' }); socket.destroy(); });
     });
@@ -172,12 +160,11 @@ export async function openEmployeeMcp(options) {
         options.closeDiagnostics?.record({ ...cause, changes: cause.changes ?? [{ field: 'mcp.closing', before: !!closing, after: true }] });
         return closing ??= Promise.resolve().then(async () => {
             options.lease.signal.removeEventListener('abort', aborted);
-            const errors = [], clean = async (operation) => { try {
+            const clean = async (operation) => { try {
                 await operation();
             }
-            catch (error) {
-                if (!errors.includes(error))
-                    errors.push(error);
+            catch {
+                console.warn('EMPLOYEE_MCP_CLEANUP_FAILED');
             } };
             for (const transport of transports)
                 await clean(() => transport.close({ layer: 'relay', initiator: 'mcp.cleanup-transport', reason: 'MCP_CLEANUP', action: 'close' }));
@@ -188,27 +175,15 @@ export async function openEmployeeMcp(options) {
             if (server.listening)
                 await clean(() => new Promise((yes, no) => server.close(error => error ? no(error) : yes())));
             await clean(() => rm(root, { recursive: true }));
-            if (diagnosticFailure && !errors.includes(diagnosticFailure))
-                errors.unshift(diagnosticFailure);
-            try {
-                options.closeDiagnostics?.assertRecorded();
-            }
-            catch (error) {
-                errors.push(error);
-            }
-            if (errors.length === 1)
-                throw errors[0];
-            if (errors.length)
-                throw new AggregateError(errors, 'EMPLOYEE_MCP_CLEANUP_FAILED');
         });
     };
-    const aborted = () => { void close({ layer: 'endpoint', initiator: 'mcp.lease-abort', reason: closeCode(options.lease.signal.reason, 'EMPLOYEE_CONTEXT_CHANGED'), action: 'abort' }).catch(error => { diagnosticFailure ??= error; failureLifetime.abort(error); }); };
+    const aborted = () => { void close({ layer: 'endpoint', initiator: 'mcp.lease-abort', reason: closeCode(options.lease.signal.reason, 'EMPLOYEE_CONTEXT_CHANGED'), action: 'abort' }).catch(() => console.warn('EMPLOYEE_MCP_CLEANUP_FAILED')); };
     try {
         await new Promise((yes, no) => { server.once('error', no); server.listen(socketPath, () => { server.removeListener('error', no); yes(); }); });
         options.lease.signal.addEventListener('abort', aborted, { once: true });
         if (options.lease.signal.aborted)
             throw options.lease.signal.reason;
-        return { routing: employeeRouting(options.lease.target, socketPath, options.maxBytes), signal: failureLifetime.signal, close };
+        return { routing: employeeRouting(options.lease.target, socketPath, options.maxBytes), signal: options.lease.signal, close };
     }
     catch (error) {
         await close({ layer: 'relay', initiator: 'mcp.open-failure', reason: closeCode(error, 'MCP_OPEN_FAILED'), action: 'failure' });

package/dist/employee-native.d.ts

@@ -1,4 +1,3 @@
-/** Fixed native input already proven by D18/D20; never resolve a PATH executable. */
 export declare const EMPLOYEE_NATIVE: Readonly<{
     version: "0.160.1";
     platform: "darwin";
@@ -6,13 +5,12 @@ export declare const EMPLOYEE_NATIVE: Readonly<{
     package: "@openai/codex-darwin-arm64";
     packageVersion: "0.160.1-darwin-arm64";
     triple: "aarch64-apple-darwin";
-    sha256: "09fa44fdc37a5fc70dc1ace31235f90468a2e193d0e85f7552eab068ea2582be";
 }>;
+/** Resolve the installed executable; no per-turn hash or version probe. */
 export declare function resolveEmployeeNative(ports?: {
     platform?: string;
     arch?: string;
     resolve?: (name: string) => string;
 }): Promise<{
     path: string;
-    sha256: string;
 }>;

package/dist/employee-native.js

@@ -1,38 +1,17 @@
 import { createRequire } from 'node:module';
-import { readFile, lstat, realpath, access } from 'node:fs/promises';
-import { constants } from 'node:fs';
 import { dirname, join } from 'node:path';
-import { createHash } from 'node:crypto';
 import { NeedError } from "./remote.js";
 const require = createRequire(import.meta.url);
-/** Fixed native input already proven by D18/D20; never resolve a PATH executable. */
-export const EMPLOYEE_NATIVE = Object.freeze({ version: '0.160.1', platform: 'darwin', arch: 'arm64', package: '@openai/codex-darwin-arm64', packageVersion: '0.160.1-darwin-arm64', triple: 'aarch64-apple-darwin', sha256: '09fa44fdc37a5fc70dc1ace31235f90468a2e193d0e85f7552eab068ea2582be' });
+export const EMPLOYEE_NATIVE = Object.freeze({ version: '0.160.1', platform: 'darwin', arch: 'arm64', package: '@openai/codex-darwin-arm64', packageVersion: '0.160.1-darwin-arm64', triple: 'aarch64-apple-darwin' });
+/** Resolve the installed executable; no per-turn hash or version probe. */
 export async function resolveEmployeeNative(ports = {}) {
     if ((ports.platform ?? process.platform) !== EMPLOYEE_NATIVE.platform || (ports.arch ?? process.arch) !== EMPLOYEE_NATIVE.arch)
-        throw new NeedError('EMPLOYEE_PLATFORM_UNSUPPORTED', '当前版本的Codex本机执行仅验证了Apple芯片Mac，本轮没有执行。', '对应平台固定执行器及验证');
-    let manifest;
+        throw new NeedError('EMPLOYEE_PLATFORM_UNSUPPORTED', '当前设备尚未支持本机执行。', '对应平台执行器');
     try {
-        manifest = (ports.resolve ?? require.resolve)(EMPLOYEE_NATIVE.package + '/package.json');
+        const manifest = (ports.resolve ?? require.resolve)(EMPLOYEE_NATIVE.package + '/package.json');
+        return { path: join(dirname(manifest), 'vendor', EMPLOYEE_NATIVE.triple, 'bin', 'codex') };
     }
     catch {
-        throw new NeedError('AW_EMPLOYEE_BINARY_MISSING', 'Codex本机执行组件没有装齐，本轮没有执行，请联系管理员。', '随插件安装的固定Codex0.160.1执行组件');
-    }
-    try {
-        const metadata = JSON.parse(await readFile(manifest, 'utf8'));
-        if (metadata.version !== EMPLOYEE_NATIVE.packageVersion)
-            throw new NeedError('AW_EMPLOYEE_BINARY_VERSION', 'Codex本机执行组件版本不匹配，本轮没有执行。', '固定Codex0.160.1组件');
-        const path = join(dirname(manifest), 'vendor', EMPLOYEE_NATIVE.triple, 'bin', 'codex');
-        const info = await lstat(path);
-        if (!info.isFile() || info.isSymbolicLink() || await realpath(path) !== path)
-            throw new NeedError('AW_EMPLOYEE_BINARY_INVALID', 'Codex本机执行组件位置无效，本轮没有执行。', '安装包内的固定原生执行器');
-        await access(path, constants.X_OK);
-        if (createHash('sha256').update(await readFile(path)).digest('hex') !== EMPLOYEE_NATIVE.sha256)
-            throw new NeedError('AW_EMPLOYEE_BINARY_HASH', 'Codex本机执行组件校验不一致，本轮没有执行。', '固定原生执行器SHA256');
-        return { path, sha256: EMPLOYEE_NATIVE.sha256 };
-    }
-    catch (error) {
-        if (error instanceof NeedError)
-            throw error;
-        throw new NeedError('AW_EMPLOYEE_BINARY_INVALID', 'Codex本机执行组件无法核验，本轮没有执行。', '完整安装包与固定执行器');
+        throw new NeedError('AW_EMPLOYEE_BINARY_MISSING', '本机执行组件没有装齐，请重新安装插件。', '随插件安装的执行组件');
     }
 }

package/dist/employee-presentation.d.ts

@@ -1,6 +1 @@
-import type { GenerateOptions } from '@deepseek-ai/dsh-llm';
-export declare const CLAUDE_EMPLOYEE_SCOPE_NOTICE = "\u672C\u8F6E\u516D\u7C7B\u6587\u4EF6\u4E0E\u547D\u4EE4\u5DE5\u5177\u5728\u4F60\u7684\u7535\u8111\u6267\u884C\uFF0C\u4F7F\u7528\u4F60\u9009\u62E9\u7684\u6587\u4EF6\u5939\uFF1BGit\u4E5F\u4F7F\u7528\u672C\u673A\u4ED3\u5E93\u3002\u5B50\u4EE3\u7406\u548C\u5185\u90E8\u76F4\u63A5\u8C03\u7528\u5C1A\u4E0D\u652F\u6301\u672C\u673A\uFF0C\u53EF\u80FD\u4ECD\u5728\u4E3B\u673A\uFF1B\u5DF2\u8BC6\u522B\u7684\u6B64\u7C7B\u5BA1\u6279\u4E0D\u4F1A\u6267\u884C\u3002PDF\u7B49\u4E8C\u8FDB\u5236\u8BFB\u53D6\u3001\u540E\u53F0\u547D\u4EE4\u6682\u4E0D\u652F\u6301\u3002";
-export declare const CODEX_EMPLOYEE_SCOPE_NOTICE = "\u6587\u4EF6\u4E0E\u547D\u4EE4\u5728\u672C\u673A\u9009\u5B9A\u76EE\u5F55\u8FD0\u884C\uFF0CGit \u4F7F\u7528\u672C\u673A\u4ED3\u5E93\uFF1B\u6A21\u578B\u3001\u767B\u5F55\u548C\u5168\u5C40\u52A9\u624B\u8981\u6C42\u4ECD\u5728\u8FDC\u7A0B\u4E3B\u673A\u3002\u672C\u673A\u81EA\u5B9A\u4E49\u7684\u9644\u52A0\u5DE5\u5177\u3001\u81EA\u52A8\u52A8\u4F5C\u3001\u63D2\u4EF6\u53CA\u65AD\u5F00\u540E\u7684\u4F1A\u8BDD\u6062\u590D\u6682\u4E0D\u652F\u6301\u3002\u5B50\u4EFB\u52A1\u88AB\u7CFB\u7EDF\u56DE\u6536\u540E\u80FD\u5426\u7EE7\u7EED\uFF0C\u5C1A\u672A\u9A8C\u8BC1\u3002";
 export declare const EMPLOYEE_EXECUTION_NOTICE = "\u6587\u4EF6\u548C\u547D\u4EE4\u5728\u4F60\u7684\u7535\u8111\u4E0A\u6267\u884C";
-/** Presentation receipt only; it grants no process, workspace or replay authority. */
-export declare function employeeNoticePreviouslyShown(options: Pick<GenerateOptions, 'messages' | 'sessionId'>): boolean;

package/dist/employee-presentation.js

@@ -1,16 +1 @@
-import { AGENTS } from "./agents.js";
-export const CLAUDE_EMPLOYEE_SCOPE_NOTICE = '本轮六类文件与命令工具在你的电脑执行，使用你选择的文件夹；Git也使用本机仓库。子代理和内部直接调用尚不支持本机，可能仍在主机；已识别的此类审批不会执行。PDF等二进制读取、后台命令暂不支持。';
-export const CODEX_EMPLOYEE_SCOPE_NOTICE = '文件与命令在本机选定目录运行，Git 使用本机仓库；模型、登录和全局助手要求仍在远程主机。本机自定义的附加工具、自动动作、插件及断开后的会话恢复暂不支持。子任务被系统回收后能否继续，尚未验证。';
 export const EMPLOYEE_EXECUTION_NOTICE = '文件和命令在你的电脑上执行';
-/** Presentation receipt only; it grants no process, workspace or replay authority. */
-export function employeeNoticePreviouslyShown(options) {
-    if (!options.sessionId)
-        return false;
-    return options.messages.some(message => {
-        if (message.role !== 'assistant' || !AGENTS.some(agent => agent.id === message.source.provider))
-            return false;
-        const pointer = message.source.replayState?.response;
-        const sameSession = !!pointer && pointer.version === 2 && pointer.agent === message.source.provider && pointer.dshSessionId === options.sessionId && [pointer.identity, pointer.cwd, pointer.sessionId].every(value => typeof value === 'string' && value.length > 0);
-        return sameSession && (pointer.presentation?.employeeExecutionNotice === 'local-v1' || message.content.some(block => block.type === 'text' && [CLAUDE_EMPLOYEE_SCOPE_NOTICE, CODEX_EMPLOYEE_SCOPE_NOTICE].some(notice => block.text.startsWith(notice + '\n\n'))));
-    });
-}

package/dist/employee-provider.d.ts

@@ -3,12 +3,8 @@ import type { AgentDefinition } from './agents.ts';
 import type { ConnectApi, ConnectTarget, ConnectionState, Project, Runtime, RuntimeRequest } from './provider.ts';
 import { type BrokerIo, type SshArgv } from './broker.ts';
 import type { DetailChannel } from './remote-details.ts';
-import type { LocalUserTurnAcceptance } from '@ai-workbench/connect/api';
+import type { LocalWorkspaceContext } from '@ai-workbench/connect/api';
 export interface EmployeeProviderOptions {
-    currentUserTurn(request: RuntimeRequest): {
-        turn: number;
-        userMessageId: string;
-    };
     getNetwork(): NetworkApi | undefined;
     workspace(request: RuntimeRequest): Promise<{
         id: string;
@@ -16,7 +12,6 @@ export interface EmployeeProviderOptions {
     }>;
     native(): Promise<{
         path: string;
-        sha256: string;
     }>;
     argv?: SshArgv;
     io?: BrokerIo;
@@ -31,12 +26,9 @@ interface Admission {
     target: ConnectTarget;
     connection: ConnectionState;
     request: RuntimeRequest;
-    stable: (signal?: AbortSignal) => Promise<unknown>;
 }
-/** Read-only local classification and explicit acceptance precede even ensureReady's SSH status. */
-export declare function acceptEmployeeUserTurn(get: () => ConnectApi | undefined, employee: EmployeeProviderOptions, agent: AgentDefinition, api: ConnectApi, request: RuntimeRequest): Promise<Readonly<LocalUserTurnAcceptance> | undefined>;
-/** Recheck the admitted read-only facts after readiness awaits, before the catalog command. */
-export declare function validateEmployeeUserTurn(get: () => ConnectApi | undefined, employee: EmployeeProviderOptions, api: ConnectApi, request: RuntimeRequest, connection: ConnectionState): Promise<void>;
+/** Inspect the current local workspace once at turn start, before host readiness. */
+export declare function inspectEmployeeWorkspace(get: () => ConnectApi | undefined, employee: EmployeeProviderOptions, agent: AgentDefinition, api: ConnectApi, request: RuntimeRequest): Promise<Readonly<LocalWorkspaceContext> | undefined>;
 /** Source admission is separate from L's legacy host project resolver. */
 export declare function createEmployeeProvider(get: () => ConnectApi | undefined, options: Options, agent: AgentDefinition): (input: Admission) => Promise<Runtime | undefined>;
 export {};