@ai-workbench/remote-agent 0.8.21 → 0.8.24

package/dist/workspace-source.js

@@ -1,138 +1 @@
-import { withFailureEvidence } from "./failure-evidence.js";
-import { connectNeedError } from "./connect-need.js";
-import { isDeepStrictEqual } from 'node:util';
-import { sanitizeDisplayLabel } from "./conversation-details.js";
-import { NeedError } from "./remote.js";
-const fail = (code) => new NeedError(code, '工作区来源尚未确认，本轮未执行；你的原话仍保留。', '当前工作区来源及原始员工输入');
-const codeOf = (value) => value instanceof NeedError ? value.code : 'WORKSPACE_SOURCE_CONFIRMATION_FAILED';
-const diagnosticFailure = (error, diagnostic) => withFailureEvidence(error, [diagnostic], 'diagnostic', undefined, codeOf(error));
-/** Explicit human source transition only. No source selection is inferred from a folder path. */
-export async function confirmLegacyWorkspaceSource(get, api, request, hooks) {
-    let initialContext = { workspaceId: null, bindingId: null, source: null, status: null };
-    let diagnosticAttempted = false;
-    try {
-        request.signal?.throwIfAborted();
-        if (api.getContractInfo?.().workspaceLocations !== 1 || typeof api.getWorkspaceLocationState !== 'function')
-            return;
-        if (!api.getWorkspaceLocationState().items.some(item => item.source === 'legacy-host' && item.status === 'legacy-confirmation-required'))
-            return;
-        const workspace = { ...await hooks.workspace(request) };
-        request.signal?.throwIfAborted();
-        const snapshot = api.getWorkspaceLocationState(), rows = snapshot.items.filter(item => item.workspaceId === workspace.id), row = rows[0];
-        if (rows.length !== 1 || row?.status !== 'legacy-confirmation-required' || row.source !== 'legacy-host')
-            return;
-        const frozen = structuredClone(row);
-        initialContext = { workspaceId: frozen.workspaceId, bindingId: frozen.bindingId, source: frozen.source, status: frozen.status };
-        const connection = api.getConnectionState(), turn = { ...hooks.currentUserTurn(request) };
-        const name = sanitizeDisplayLabel(row.workspaceName).replace(/[\u0000-\u001f\u007f\u202a-\u202e\u2066-\u2069]/g, '').trim();
-        if (!name || name.includes('[已脱敏：'))
-            throw fail('WORKSPACE_SOURCE_CONFIRMATION_UNAVAILABLE');
-        const question = '这个工作区以前用的是主机上的文件夹。要改用本机的『' + name + '』文件夹吗？';
-        const record = (code, outcome, current = frozen, stage = 'source-confirmation') => hooks.record(request, { kind: 'need', severity: outcome === 'confirmed' ? 'info' : 'action-required', code, summary: outcome === 'confirmation-required' ? question : outcome === 'confirmed' ? '已确认改用本机文件夹，继续处理本轮原始请求。' : '本轮工作区来源确认未完成；原始请求保留，未执行。', payload: { phase: 'workspace-source-admission', stage, workspaceId: workspace.id, bindingId: current.bindingId, source: current.source, status: current.status, outcome } });
-        // Persistence precedes the question; a failed diagnostic is not retried in this path.
-        diagnosticAttempted = true;
-        await record('WORKSPACE_SOURCE_CONFIRMATION_REQUIRED', 'confirmation-required');
-        let terminalDiagnostic = false;
-        async function stable(requireOldSource) {
-            request.signal?.throwIfAborted();
-            if (get() !== api || api.getContractInfo?.().workspaceLocations !== 1 || typeof api.getWorkspaceLocationState !== 'function')
-                throw fail('EMPLOYEE_CONTEXT_CHANGED');
-            const now = api.getConnectionState(), location = api.getWorkspaceLocationState();
-            if (now.phase !== 'connected' || connection.phase !== 'connected' || now.instanceId !== connection.instanceId || now.epoch !== connection.epoch || location.phase !== 'ready' || location.instanceId !== connection.instanceId || location.epoch !== connection.epoch || snapshot.phase !== 'ready' || snapshot.instanceId !== connection.instanceId || snapshot.epoch !== connection.epoch)
-                throw fail('EMPLOYEE_CONTEXT_CHANGED');
-            const currentWorkspace = await hooks.workspace(request);
-            request.signal?.throwIfAborted();
-            if (!isDeepStrictEqual(currentWorkspace, workspace))
-                throw fail('EMPLOYEE_CONTEXT_CHANGED');
-            if (!isDeepStrictEqual(hooks.currentUserTurn(request), turn))
-                throw fail('LOCAL_USER_TURN_CHANGED');
-            // Re-read after awaits. Only the explicit successful L selection may replace the frozen binding.
-            if (get() !== api)
-                throw fail('EMPLOYEE_CONTEXT_CHANGED');
-            const after = api.getConnectionState(), state = api.getWorkspaceLocationState();
-            if (after.phase !== 'connected' || after.instanceId !== connection.instanceId || after.epoch !== connection.epoch || state.phase !== 'ready' || state.instanceId !== connection.instanceId || state.epoch !== connection.epoch)
-                throw fail('EMPLOYEE_CONTEXT_CHANGED');
-            const current = state.items.filter(item => item.workspaceId === workspace.id);
-            if (current.length !== 1 || current[0].localPath !== workspace.path || requireOldSource && (current[0].bindingId !== frozen.bindingId || current[0].source !== frozen.source || current[0].status !== frozen.status))
-                throw fail('EMPLOYEE_CONTEXT_CHANGED');
-            return current[0];
-        }
-        try {
-            await stable(true);
-            if (typeof api.selectWorkspaceLocation !== 'function')
-                throw fail('DEPENDENCY_REQUIRED');
-            const decision = await hooks.confirm({ question, action: '改用本机文件夹' }, request);
-            request.signal?.throwIfAborted();
-            if (decision !== 'allowed-once') {
-                const code = decision === 'rejected' ? 'WORKSPACE_SOURCE_CONFIRMATION_DECLINED' : decision === 'cancelled' ? 'ABORTED' : 'WORKSPACE_SOURCE_CONFIRMATION_UNAVAILABLE';
-                terminalDiagnostic = true;
-                await record(code, decision === 'rejected' ? 'declined' : decision === 'cancelled' ? 'cancelled' : 'failed');
-                throw fail(code);
-            }
-            await stable(true);
-            // The await continuation itself is a boundary: already-observed cancellation,
-            // replacement input or source withdrawal must not start the L mutation.
-            request.signal?.throwIfAborted();
-            if (get() !== api || typeof api.getWorkspaceLocationState !== 'function')
-                throw fail('EMPLOYEE_CONTEXT_CHANGED');
-            const atChoice = api.getConnectionState(), choiceState = api.getWorkspaceLocationState(), choiceRows = choiceState.items.filter(item => item.workspaceId === workspace.id);
-            if (atChoice.phase !== 'connected' || atChoice.instanceId !== connection.instanceId || atChoice.epoch !== connection.epoch || choiceState.phase !== 'ready' || choiceState.instanceId !== connection.instanceId || choiceState.epoch !== connection.epoch || choiceRows.length !== 1 || choiceRows[0].bindingId !== frozen.bindingId || choiceRows[0].source !== frozen.source || choiceRows[0].status !== frozen.status || choiceRows[0].localPath !== workspace.path)
-                throw fail('EMPLOYEE_CONTEXT_CHANGED');
-            if (!isDeepStrictEqual(hooks.currentUserTurn(request), turn))
-                throw fail('LOCAL_USER_TURN_CHANGED');
-            const selected = await api.selectWorkspaceLocation({ instanceId: connection.instanceId, epoch: connection.epoch, workspaceId: workspace.id, expectedBindingId: frozen.bindingId, source: 'local' });
-            request.signal?.throwIfAborted();
-            if (!selected.ok)
-                throw connectNeedError(selected.error);
-            const current = await stable(false), value = selected.value, returned = value.items.filter(item => item.workspaceId === workspace.id);
-            if (value.phase !== 'ready' || value.instanceId !== connection.instanceId || value.epoch !== connection.epoch || returned.length !== 1 || returned[0].source !== 'local' || returned[0].status !== 'selected' || !returned[0].bindingId || returned[0].bindingId === frozen.bindingId || returned[0].localPath !== workspace.path || current.source !== 'local' || current.status !== 'selected' || current.bindingId !== returned[0].bindingId)
-                throw fail('WORKSPACE_SOURCE_SELECTION_UNCONFIRMED');
-            const selectedBinding = returned[0].bindingId;
-            const assertSelected = () => {
-                request.signal?.throwIfAborted();
-                if (get() !== api || typeof api.getWorkspaceLocationState !== 'function')
-                    throw fail('EMPLOYEE_CONTEXT_CHANGED');
-                const c = api.getConnectionState(), s = api.getWorkspaceLocationState(), items = s.items.filter(item => item.workspaceId === workspace.id);
-                if (c.phase !== 'connected' || c.instanceId !== connection.instanceId || c.epoch !== connection.epoch || s.phase !== 'ready' || s.instanceId !== connection.instanceId || s.epoch !== connection.epoch || items.length !== 1 || items[0].source !== 'local' || items[0].status !== 'selected' || items[0].bindingId !== selectedBinding || items[0].localPath !== workspace.path)
-                    throw fail('EMPLOYEE_CONTEXT_CHANGED');
-                if (!isDeepStrictEqual(hooks.currentUserTurn(request), turn))
-                    throw fail('LOCAL_USER_TURN_CHANGED');
-            };
-            terminalDiagnostic = true;
-            await record('WORKSPACE_SOURCE_CONFIRMED', 'confirmed', current);
-            terminalDiagnostic = false;
-            await stable(false);
-            assertSelected();
-            return { assertCurrent: assertSelected, async recordFailure(error, stage) {
-                    try {
-                        await record(request.signal?.aborted ? 'ABORTED' : codeOf(error), request.signal?.aborted ? 'cancelled' : 'failed', current, stage);
-                    }
-                    catch (diagnostic) {
-                        throw diagnosticFailure(error, diagnostic);
-                    }
-                } };
-        }
-        catch (error) {
-            if (!terminalDiagnostic) {
-                try {
-                    await record(request.signal?.aborted ? 'ABORTED' : codeOf(error), request.signal?.aborted ? 'cancelled' : 'failed');
-                }
-                catch (diagnostic) {
-                    throw diagnosticFailure(error, diagnostic);
-                }
-            }
-            throw error;
-        }
-    }
-    catch (error) {
-        if (!diagnosticAttempted) {
-            try {
-                await hooks.record(request, { kind: 'need', severity: 'action-required', code: request.signal?.aborted ? 'ABORTED' : codeOf(error), summary: '无法核对本轮工作区来源，已停止；原话保留。', payload: { phase: 'workspace-source-admission', stage: 'source-context', ...initialContext, outcome: request.signal?.aborted ? 'cancelled' : 'failed' } });
-            }
-            catch (diagnostic) {
-                throw diagnosticFailure(error, diagnostic);
-            }
-        }
-        throw error;
-    }
-}
+export {};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ai-workbench/remote-agent",
-  "version": "0.8.21",
+  "version": "0.8.24",
   "type": "module",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -22,11 +22,9 @@
   "scripts": {
     "test": "npm run build && node --test --test-concurrency=1 lib/test/*.test.js",
     "typecheck": "node node_modules/typescript/bin/tsc --noEmit",
-    "build": "node node_modules/typescript/bin/tsc && node node_modules/typescript/bin/tsc -p tsconfig.build.json && chmod 755 lib/src/sdk-ssh-wrapper.js dist/sdk-ssh-wrapper.js && node tools/build-client.mjs",
+    "build": "node node_modules/typescript/bin/tsc && node node_modules/typescript/bin/tsc -p tsconfig.build.json && node tools/build-client.mjs",
     "probe:host": "node tools/probe-host.ts",
-    "probe:broker": "node tools/probe-broker.ts",
-    "pack:artifact": "node tools/pack-artifact.mjs",
-    "probe:formal": "node tools/probe-formal.mjs"
+    "pack:artifact": "node tools/pack-artifact.mjs"
   },
   "engines": {
     "node": ">=24.13.1"
@@ -35,12 +33,11 @@
     "@agentclientprotocol/sdk": "2.0.0",
     "@modelcontextprotocol/sdk": "1.32.1",
     "@openai/codex": "0.160.1",
-    "@openai/codex-sdk": "0.163.0",
     "zod": "4.6.7"
   },
   "devDependencies": {
-    "@ai-workbench/connect": "file:test/fixtures/ai-workbench-connect-0.7.20.tgz",
-    "@ai-workbench/network": "file:test/fixtures/ai-workbench-network-0.4.4.tgz",
+    "@ai-workbench/connect": "file:test/fixtures/ai-workbench-connect-0.7.27.tgz",
+    "@ai-workbench/network": "file:test/fixtures/ai-workbench-network-0.4.9.tgz",
     "@deepseek-ai/cordis": "4.0.4",
     "@deepseek-ai/cordis-plugin-group": "1.0.4",
     "@deepseek-ai/cordis-plugin-include": "1.0.9",
@@ -65,11 +62,12 @@
     "react": "18.3.1",
     "react-dom": "18.3.1",
     "typescript": "5.9.3",
-    "zustand": "4.4.7"
+    "zustand": "4.4.7",
+    "@deepseek-ai/dsh-sandbox-policy": "0.2.0-rc.2"
   },
   "peerDependencies": {
-    "@ai-workbench/connect": "~0.7.20",
-    "@ai-workbench/network": "~0.4.4",
+    "@ai-workbench/connect": "~0.7.27",
+    "@ai-workbench/network": "~0.4.9",
     "@deepseek-ai/cordis": "4.0.4",
     "@deepseek-ai/dsh-agent": "0.2.0-rc.2",
     "@deepseek-ai/dsh-attachment": "0.2.0-rc.2",
@@ -77,7 +75,8 @@
     "@deepseek-ai/dsh-session": "0.2.0-rc.2",
     "@deepseek-ai/dsh-typert-protocol": "0.2.0-rc.2",
     "@deepseek-ai/dsh-user-approval": "0.2.0-rc.2",
-    "@deepseek-ai/schemastery": "3.18.4"
+    "@deepseek-ai/schemastery": "3.18.4",
+    "@deepseek-ai/dsh-sandbox-policy": "0.2.0-rc.2"
   },
   "dsh": {
     "bundle": {

package/dist/catalog-diagnostics.d.ts

@@ -1,16 +0,0 @@
-import { Context } from '@deepseek-ai/cordis';
-import { TypertRemoteService } from '@deepseek-ai/dsh-typert-protocol';
-import type { CatalogSshEvent } from './catalog-ssh.ts';
-export declare function createCatalogDiagnostics(profile: () => string | undefined): {
-    record(event: Readonly<CatalogSshEvent>): Promise<void>;
-    snapshot(): Promise<{
-        storageError: string | null;
-        records: CatalogSshEvent[];
-    }>;
-};
-export declare class CatalogDiagnosticsRemote extends TypertRemoteService {
-    private readonly snapshot;
-    private disposed;
-    constructor(ctx: Context, snapshot: () => Promise<unknown>);
-    read(request: unknown, signal: AbortSignal): Promise<unknown>;
-}

package/dist/catalog-diagnostics.js

@@ -1,108 +0,0 @@
-var __runInitializers = (this && this.__runInitializers) || function (thisArg, initializers, value) {
-    var useValue = arguments.length > 2;
-    for (var i = 0; i < initializers.length; i++) {
-        value = useValue ? initializers[i].call(thisArg, value) : initializers[i].call(thisArg);
-    }
-    return useValue ? value : void 0;
-};
-var __esDecorate = (this && this.__esDecorate) || function (ctor, descriptorIn, decorators, contextIn, initializers, extraInitializers) {
-    function accept(f) { if (f !== void 0 && typeof f !== "function") throw new TypeError("Function expected"); return f; }
-    var kind = contextIn.kind, key = kind === "getter" ? "get" : kind === "setter" ? "set" : "value";
-    var target = !descriptorIn && ctor ? contextIn["static"] ? ctor : ctor.prototype : null;
-    var descriptor = descriptorIn || (target ? Object.getOwnPropertyDescriptor(target, contextIn.name) : {});
-    var _, done = false;
-    for (var i = decorators.length - 1; i >= 0; i--) {
-        var context = {};
-        for (var p in contextIn) context[p] = p === "access" ? {} : contextIn[p];
-        for (var p in contextIn.access) context.access[p] = contextIn.access[p];
-        context.addInitializer = function (f) { if (done) throw new TypeError("Cannot add initializers after decoration has completed"); extraInitializers.push(accept(f || null)); };
-        var result = (0, decorators[i])(kind === "accessor" ? { get: descriptor.get, set: descriptor.set } : descriptor[key], context);
-        if (kind === "accessor") {
-            if (result === void 0) continue;
-            if (result === null || typeof result !== "object") throw new TypeError("Object expected");
-            if (_ = accept(result.get)) descriptor.get = _;
-            if (_ = accept(result.set)) descriptor.set = _;
-            if (_ = accept(result.init)) initializers.unshift(_);
-        }
-        else if (_ = accept(result)) {
-            if (kind === "field") initializers.unshift(_);
-            else descriptor[key] = _;
-        }
-    }
-    if (target) Object.defineProperty(target, contextIn.name, descriptor);
-    done = true;
-};
-import { join } from 'node:path';
-import { open, rename, lstat, realpath } from 'node:fs/promises';
-import { randomUUID } from 'node:crypto';
-import { Remote, TypertRemoteService } from '@deepseek-ai/dsh-typert-protocol';
-import { privateDirectory, durableWrite, readJournal } from "./remote-details.js";
-export function createCatalogDiagnostics(profile) {
-    let tail = Promise.resolve();
-    const errors = new Map();
-    const latest = new Map();
-    const dir = () => { const p = profile(); if (!p)
-        throw Error('PROFILE_UNAVAILABLE'); return join(p, 'ai-workbench-remote-agent', 'catalog-diagnostics'); };
-    const prepare = async () => { const root = dir(); await privateDirectory(join(root, '..')); await privateDirectory(root); return root; };
-    return {
-        record(event) {
-            const saved = structuredClone(event);
-            if (event.stage === 'started' || !latest.has(event.provider) || latest.get(event.provider)?.eventId === event.eventId)
-                latest.set(event.provider, saved);
-            const work = tail.then(async () => { const root = await prepare(); await durableWrite(join(root, event.eventId + '-' + event.stage + '.json'), saved); if (latest.get(event.provider)?.eventId !== event.eventId)
-                return; const temp = join(root, randomUUID() + '.current'); await durableWrite(temp, saved); await rename(temp, join(root, event.provider + '-latest.json')); const d = await open(root, 'r'); try {
-                await d.sync();
-            }
-            finally {
-                await d.close();
-            } errors.delete(event.provider); });
-            tail = work.catch(() => { errors.set(event.provider, '本机目录诊断未能写入磁盘，本次记录仅在当前客户端内可见；请联系管理员检查本机诊断目录。'); });
-            return tail;
-        },
-        async snapshot() {
-            await tail;
-            for (const brand of ['claude', 'codex'])
-                if (!latest.has(brand)) {
-                    try {
-                        const root = dir(), info = await lstat(root);
-                        if (!info.isDirectory() || info.isSymbolicLink() || await realpath(root) !== root || (info.mode & 0o077) !== 0 || process.getuid && info.uid !== process.getuid())
-                            throw Error('CATALOG_DIAGNOSTIC_INVALID');
-                        const value = await readJournal(join(root, brand + '-latest.json'));
-                        if (value?.version !== 1 || value.provider !== brand || !['started', 'closed'].includes(value.stage) || !/^[-a-f0-9]{36}$/.test(value.eventId))
-                            throw Error('CATALOG_DIAGNOSTIC_INVALID');
-                        if (!latest.has(brand))
-                            latest.set(brand, value);
-                    }
-                    catch (error) {
-                        if (error.code !== 'ENOENT')
-                            errors.set(brand, '本机已保存的目录诊断暂不可读；未将它当作当前状态，请联系管理员检查本机诊断目录。');
-                    }
-                }
-            return { storageError: errors.size ? [...new Set(errors.values())].join('\n') : null, records: [...latest.values()].map(v => structuredClone(v)) };
-        }
-    };
-}
-let CatalogDiagnosticsRemote = (() => {
-    let _classSuper = TypertRemoteService;
-    let _instanceExtraInitializers = [];
-    let _read_decorators;
-    return class CatalogDiagnosticsRemote extends _classSuper {
-        static {
-            const _metadata = typeof Symbol === "function" && Symbol.metadata ? Object.create(_classSuper[Symbol.metadata] ?? null) : void 0;
-            _read_decorators = [Remote];
-            __esDecorate(this, null, _read_decorators, { kind: "method", name: "read", static: false, private: false, access: { has: obj => "read" in obj, get: obj => obj.read }, metadata: _metadata }, null, _instanceExtraInitializers);
-            if (_metadata) Object.defineProperty(this, Symbol.metadata, { enumerable: true, configurable: true, writable: true, value: _metadata });
-        }
-        snapshot = __runInitializers(this, _instanceExtraInitializers);
-        disposed = false;
-        constructor(ctx, snapshot) {
-            super(ctx, 'awRemoteModelDiagnostics');
-            this.snapshot = snapshot;
-            ctx.effect(() => () => { this.disposed = true; });
-        }
-        async read(request, signal) { signal.throwIfAborted(); if (this.disposed)
-            throw Error('DISPOSED'); const value = await this.snapshot(); signal.throwIfAborted(); if (this.disposed)
-            throw Error('DISPOSED'); return value; }
-    };
-})();
-export { CatalogDiagnosticsRemote };

package/dist/host-layout.d.ts

@@ -1,8 +0,0 @@
-import { type ConnectTarget } from './provider.ts';
-/** S host-layout 0.3.4 fixed executable conventions, not employee policy defaults. */
-export declare function protectedOneShotLayout(target: ConnectTarget): {
-    runner: string;
-    runnerKind: "executable";
-    root: string;
-    codex: string;
-};

package/dist/host-layout.js

@@ -1,9 +0,0 @@
-import { validateTarget } from "./provider.js";
-import { NeedError } from "./remote.js";
-/** S host-layout 0.3.4 fixed executable conventions, not employee policy defaults. */
-export function protectedOneShotLayout(target) {
-    validateTarget(target);
-    if (!/^emp-[a-z0-9][a-z0-9-]*$/.test(target.username) || target.session.root !== `/Users/${target.username}/.aw/s`)
-        throw new NeedError('HOST_LAYOUT_MISMATCH', '远程主机的运行位置需要管理员核对', 'S声明的同一员工HOME/.aw/s与HOME/.aw/oneshot布局');
-    return { runner: '/usr/local/aw-host/bin/aw-codex-once', runnerKind: 'executable', root: `/Users/${target.username}/.aw/oneshot`, codex: '/opt/homebrew/bin/codex' };
-}

package/dist/job.d.ts

@@ -1,17 +0,0 @@
-import { type ChildProcess } from 'node:child_process';
-import { type DevelopmentSshTarget } from './remote.ts';
-import { type ConnectTarget } from './provider.ts';
-export interface JobSpec {
-    target: DevelopmentSshTarget | ConnectTarget;
-    cwd: string;
-    runner: string;
-    runnerKind: 'executable' | 'node-source';
-    root: string;
-    codex: string;
-    id: string;
-    /** Test/programmatic transport seam only; never an employee setting. */
-    sshExecutable?: string;
-}
-export type OneShotRuntime = Omit<JobSpec, 'id' | 'sshExecutable'>;
-export declare function jobCommand(spec: JobSpec, op: 'prepare' | 'stage' | 'run' | 'kill'): string;
-export declare function executeJob(spec: JobSpec, op: 'prepare' | 'stage' | 'run' | 'kill', input?: string, onSpawn?: (child: ChildProcess) => void, inheritOutput?: boolean, signal?: AbortSignal): Promise<number | null>;

package/dist/job.js

@@ -1,57 +0,0 @@
-var __rewriteRelativeImportExtension = (this && this.__rewriteRelativeImportExtension) || function (path, preserveJsx) {
-    if (typeof path === "string" && /^\.\.?\//.test(path)) {
-        return path.replace(/\.(tsx)$|((?:\.d)?)((?:\.[^./]+?)?)\.([cm]?)ts$/i, function (m, tsx, d, ext, cm) {
-            return tsx ? preserveJsx ? ".jsx" : ".js" : d && (!ext || !cm) ? m : (d + ext + "." + cm.toLowerCase() + "js");
-        });
-    }
-    return path;
-};
-import { spawn } from 'node:child_process';
-import { shellQuote, sshArgs, NeedError } from "./remote.js";
-import { validateTarget } from "./provider.js";
-import { protectedOneShotLayout } from "./host-layout.js";
-export function jobCommand(spec, op) {
-    if (!/^[a-f0-9]{32}$/.test(spec.id) || !['executable', 'node-source'].includes(spec.runnerKind) || ![spec.cwd, spec.root, spec.runner, spec.codex].every(p => p.startsWith('/') && !p.includes('\0'))) {
-        throw new NeedError('INVALID_RUNTIME', '我需要主机提供有效的单次运行上下文', '主机程序与工作目录');
-    }
-    if (!('kind' in spec.target)) {
-        const layout = protectedOneShotLayout(spec.target);
-        if (spec.runnerKind !== layout.runnerKind || spec.runner !== layout.runner || spec.root !== layout.root || spec.codex !== layout.codex)
-            throw new NeedError('INVALID_RUNTIME', '远程主机的单次运行位置需要管理员核对', 'S安装的受保护单次运行路径');
-    }
-    return [...(spec.runnerKind === 'node-source' ? ['node'] : []), spec.runner, op, spec.root, spec.id].map(shellQuote).join(' ');
-}
-export async function executeJob(spec, op, input, onSpawn, inheritOutput = false, signal) {
-    signal?.throwIfAborted();
-    const command = jobCommand(spec, op);
-    let args;
-    if ('kind' in spec.target) {
-        args = sshArgs(spec.target, command, op !== 'stage');
-    }
-    else {
-        validateTarget(spec.target);
-        if (spec.runnerKind !== 'executable')
-            throw new NeedError('INVALID_RUNTIME', '主机单次助手必须使用管理员安装的启动器', 'host-layout 单次启动器');
-        let supplied;
-        try {
-            const moduleName = '@ai-workbench/connect';
-            supplied = await import(__rewriteRelativeImportExtension(moduleName));
-            if (typeof supplied.sshArgs !== 'function')
-                throw Error('missing sshArgs');
-        }
-        catch {
-            throw new NeedError('DEPENDENCY_REQUIRED', '我需要连接组件提供可信连接', '@ai-workbench/connect sshArgs');
-        }
-        args = [...(op === 'stage' ? [] : ['-n']), ...supplied.sshArgs(spec.target), command];
-    }
-    signal?.throwIfAborted();
-    const child = spawn(spec.sshExecutable ?? 'ssh', args, { stdio: ['pipe', inheritOutput ? 'inherit' : 'ignore', 'ignore'], signal });
-    onSpawn?.(child);
-    child.stdin.on('error', () => { }); // Exit status owns transport failure; EPIPE cannot mean success.
-    child.stdin.end(input);
-    return new Promise((resolve, reject) => {
-        let failed = false;
-        child.on('error', () => { failed = true; });
-        child.on('close', code => failed ? reject(new NeedError('SSH_FAILED', 'SSH 启动失败或已取消，根因未查明', '可用的员工连接')) : resolve(code));
-    });
-}

package/dist/model-defaults.d.ts

@@ -1,29 +0,0 @@
-import type { AgentDefinition } from './agents.ts';
-import { type HostModel } from './model-catalog.ts';
-export interface DefaultSelection {
-    provider: string;
-    model: string;
-    reasoningEffort?: string;
-}
-/** Public agentDefaultModel service; writes below use the atomic config editor. */
-export interface DefaultModelService {
-    currentSelection(): DefaultSelection;
-}
-interface DefaultEntry {
-    options: {
-        name?: string;
-    };
-}
-/** Public rc.2 configEditor.entries/edit subset; no ownerContext/private config access. */
-export interface DefaultConfigEditor {
-    entries(): readonly DefaultEntry[];
-    edit(entry: DefaultEntry, change: (current: Record<string, unknown>, inherited: Record<string, unknown>) => Record<string, unknown>): Promise<void>;
-}
-export type DefaultSelectionWriter = (expected: DefaultSelection, next: DefaultSelection, assertCurrent: () => void) => Promise<void>;
-/** The editor invokes the guard synchronously under its profile lock after reconciliation. */
-export declare function createDefaultSelectionWriter(service: DefaultModelService, getEditor: () => DefaultConfigEditor | undefined): DefaultSelectionWriter;
-export declare function createModelDefaults(service: DefaultModelService, report: (provider: string, message: string | undefined) => void, write?: DefaultSelectionWriter): {
-    observe(agent: AgentDefinition, models: readonly HostModel[], assertCurrent?: () => void): Promise<void>;
-    dispose(): void;
-};
-export {};

package/dist/model-defaults.js

@@ -1,62 +0,0 @@
-import { declaredDefault } from "./model-catalog.js";
-const same = (a, b) => a.provider === b.provider && a.model === b.model && a.reasoningEffort === b.reasoningEffort;
-/** The editor invokes the guard synchronously under its profile lock after reconciliation. */
-export function createDefaultSelectionWriter(service, getEditor) {
-    return async (expected, next, assertCurrent) => {
-        const editor = getEditor();
-        const entries = editor?.entries().filter(entry => entry.options.name === '@deepseek-ai/dsh-agent-default-model');
-        if (!editor || entries?.length !== 1)
-            throw Error('缺少唯一可原子编辑的官方默认模型设置');
-        await editor.edit(entries[0], current => {
-            assertCurrent();
-            if (!same(expected, service.currentSelection()))
-                throw Error('员工已改变模型选择，本次默认更新已撤回');
-            const updated = { ...current, provider: next.provider, model: next.model };
-            Reflect.deleteProperty(updated, 'reasoningEffort');
-            if (next.reasoningEffort !== undefined)
-                Object.assign(updated, { reasoningEffort: next.reasoningEffort });
-            return updated;
-        });
-    };
-}
-export function createModelDefaults(service, report, write) {
-    let disposed = false, queue = Promise.resolve();
-    return {
-        observe(agent, models, assertCurrent = () => { }) {
-            const snapshot = { ...service.currentSelection() };
-            const job = queue.then(async () => {
-                if (disposed || snapshot.provider !== agent.id || !same(snapshot, service.currentSelection()))
-                    return;
-                if (snapshot.model !== 'remote' && models.some(model => model.id === snapshot.model)) {
-                    report(agent.id, undefined);
-                    return;
-                }
-                const model = declaredDefault(agent, models);
-                const notice = model ? undefined : '提供方没有声明唯一的默认模型，请先选择模型。（诊断代码：MODEL_DEFAULT_UNAVAILABLE）';
-                const next = { provider: agent.id, model: model?.id ?? '', ...(model?.reasoning.defaultKnown && model.reasoning.defaultValue !== null ? { reasoningEffort: model.reasoning.defaultValue } : {}) };
-                try {
-                    const guard = () => { assertCurrent(); if (disposed)
-                        throw Error('默认设置消费已撤回'); };
-                    guard();
-                    if (!same(snapshot, next)) {
-                        if (!write)
-                            throw Error('缺少原子配置能力');
-                        await write(snapshot, next, guard);
-                    }
-                    if (disposed)
-                        return;
-                    if (!same(next, service.currentSelection()))
-                        throw Error('未确认官方默认模型设置已保存');
-                    report(agent.id, notice);
-                }
-                catch {
-                    if (!disposed)
-                        report(agent.id, (notice ? notice + '\n' : '') + '未能确认默认模型设置已更新，员工新选择不会被迟到的自动更新覆盖；请在模型菜单选择当前目录中的模型。（诊断代码：MODEL_DEFAULT_SAVE_FAILED）');
-                }
-            });
-            queue = job;
-            return job;
-        },
-        dispose() { disposed = true; },
-    };
-}

package/dist/oneshot.d.ts

@@ -1,13 +0,0 @@
-import { type ThreadEvent, type SandboxMode } from '@openai/codex-sdk';
-import { type OneShotRuntime } from './job.ts';
-export type { OneShotRuntime } from './job.ts';
-export interface OneShotOptions {
-    wrapperPath: string;
-    sshExecutable?: string;
-    sandboxMode?: SandboxMode;
-    approvalPolicy?: 'never';
-    /** Independent disposal signal for control/cleanup; not the already-cancelled turn signal. */
-    controlSignal?: AbortSignal;
-    onTiming?: (phase: string, elapsedMs: number) => void;
-}
-export declare function runOneShot(runtime: OneShotRuntime, options: OneShotOptions, prompt: string, resumeId?: string, signal?: AbortSignal): AsyncGenerator<ThreadEvent>;

package/dist/oneshot.js

@@ -1,78 +0,0 @@
-import { Codex } from '@openai/codex-sdk';
-import { randomUUID } from 'node:crypto';
-import { mkdtemp, writeFile, rm } from 'node:fs/promises';
-import { tmpdir } from 'node:os';
-import { join } from 'node:path';
-import { executeJob } from "./job.js";
-import { NeedError } from "./remote.js";
-export async function* runOneShot(runtime, options, prompt, resumeId, signal) {
-    if (!options.sandboxMode || options.approvalPolicy !== 'never')
-        throw new NeedError('SETTINGS_REQUIRED', '我需要管理员明确单次模式的沙箱及无交互审批设置', 'oneShotSandbox / oneShotApproval（待 owner 确认）');
-    signal?.throwIfAborted();
-    const started = performance.now();
-    const timing = (phase) => options.onTiming?.(phase, Math.round(performance.now() - started));
-    const dir = await mkdtemp(join(tmpdir(), 'aw-x-job-'));
-    const spec = { ...runtime, id: randomUUID().replaceAll('-', ''), sshExecutable: options.sshExecutable };
-    try {
-        timing('prepare-start');
-        const prepareSignal = signal && options.controlSignal ? AbortSignal.any([signal, options.controlSignal]) : signal ?? options.controlSignal;
-        if (await executeJob(spec, 'prepare', undefined, undefined, false, prepareSignal) !== 0)
-            throw new NeedError('ONESHOT_FAILED', '主机单次运行准备失败，根因未查明', '已安装的主机单次运行助手');
-        timing('prepare-complete');
-        signal?.throwIfAborted();
-        const file = join(dir, 'job.json');
-        await writeFile(file, JSON.stringify(spec), { mode: 0o600 });
-        const codex = new Codex({ codexPathOverride: options.wrapperPath, env: { PATH: process.env.PATH ?? '', AW_X_JOB_FILE: file } });
-        const threadOptions = { workingDirectory: runtime.cwd, sandboxMode: options.sandboxMode, approvalPolicy: options.approvalPolicy };
-        const thread = resumeId ? codex.resumeThread(resumeId, threadOptions) : codex.startThread(threadOptions);
-        timing('sdk-start');
-        const { events } = await thread.runStreamed(prompt, { signal });
-        let first = true;
-        let firstModel = true;
-        let completed = false;
-        for await (const event of events) {
-            const lifecycle = event;
-            if (lifecycle.type === 'aw.remote.lifecycle') {
-                if (lifecycle.phase === 'remote-run-ready' || lifecycle.phase === 'remote-codex-spawned')
-                    timing(lifecycle.phase);
-                continue;
-            }
-            if (first) {
-                timing('first-event');
-                first = false;
-            }
-            if (firstModel && (event.type === 'item.started' || event.type === 'item.updated' || event.type === 'item.completed') && (event.item.type === 'agent_message' || event.item.type === 'reasoning')) {
-                firstModel = false;
-                timing('first-model-output');
-            }
-            if (event.type === 'turn.failed' || event.type === 'error')
-                throw new NeedError('ONESHOT_FAILED', 'Codex 单次运行返回失败，根因未查明', '可用的主机 Codex 会话');
-            if (event.type === 'turn.completed')
-                completed = true;
-            yield event;
-        }
-        if (!completed)
-            throw new NeedError('ONESHOT_INCOMPLETE', '连接结束前未收到 turn.completed，结果不完整', '确认远端运行状态');
-    }
-    catch (error) {
-        if (signal?.aborted)
-            throw new NeedError('ABORTED', '本轮单次运行已取消', '重新开始或恢复已保存的线程');
-        if (error instanceof NeedError)
-            throw error;
-        throw new NeedError('ONESHOT_FAILED', 'SSH / Codex 单次运行失败，根因未查明', '有效的远端运行连接');
-    }
-    finally {
-        timing('cleanup-start');
-        let cleanupOk = false;
-        try {
-            cleanupOk = (await executeJob(spec, 'kill', undefined, undefined, false, options.controlSignal)) === 0;
-        }
-        catch { /* No fallback: every failed control attempt below reports cleanup unconfirmed. */ }
-        finally {
-            await rm(dir, { recursive: true });
-        }
-        timing('cleanup-complete');
-        if (!cleanupOk)
-            throw new NeedError('REMOTE_CLEANUP_UNCONFIRMED', '连接中断，无法确认远端进程已结束；需要管理员确认此轮状态', '恢复连接并结束对应运行');
-    }
-}

package/dist/protocol-boundary.d.ts

@@ -1,13 +0,0 @@
-/** Byte fragments remain only in memory. A cursor is clean only after SDK consumption. */
-export declare class ProtocolBoundary {
-    private readonly maxBytes;
-    private partial;
-    private pending;
-    private requests;
-    constructor(maxBytes: number);
-    receive(bytes: Uint8Array, gate?: (message: Record<string, unknown>) => void): void;
-    consumed(message: Record<string, unknown>): void;
-    responded(id: unknown): void;
-    get complete(): boolean;
-    get wholeLine(): boolean;
-}