@ai-workbench/remote-agent 0.8.21 → 0.8.24

package/dist/employee-tools.d.ts

@@ -23,7 +23,7 @@ export declare function createEmployeeTools(options: Options): {
             type: "text";
             text: string;
             annotations?: {
-                audience?: ("assistant" | "user")[] | undefined;
+                audience?: ("user" | "assistant")[] | undefined;
                 priority?: number | undefined;
                 lastModified?: string | undefined;
             } | undefined;
@@ -35,7 +35,7 @@ export declare function createEmployeeTools(options: Options): {
             data: string;
             mimeType: string;
             annotations?: {
-                audience?: ("assistant" | "user")[] | undefined;
+                audience?: ("user" | "assistant")[] | undefined;
                 priority?: number | undefined;
                 lastModified?: string | undefined;
             } | undefined;
@@ -47,7 +47,7 @@ export declare function createEmployeeTools(options: Options): {
             data: string;
             mimeType: string;
             annotations?: {
-                audience?: ("assistant" | "user")[] | undefined;
+                audience?: ("user" | "assistant")[] | undefined;
                 priority?: number | undefined;
                 lastModified?: string | undefined;
             } | undefined;
@@ -62,7 +62,7 @@ export declare function createEmployeeTools(options: Options): {
             mimeType?: string | undefined;
             size?: number | undefined;
             annotations?: {
-                audience?: ("assistant" | "user")[] | undefined;
+                audience?: ("user" | "assistant")[] | undefined;
                 priority?: number | undefined;
                 lastModified?: string | undefined;
             } | undefined;
@@ -94,7 +94,7 @@ export declare function createEmployeeTools(options: Options): {
                 } | undefined;
             };
             annotations?: {
-                audience?: ("assistant" | "user")[] | undefined;
+                audience?: ("user" | "assistant")[] | undefined;
                 priority?: number | undefined;
                 lastModified?: string | undefined;
             } | undefined;

package/dist/failure-evidence.d.ts

@@ -1,16 +1,8 @@
-import { NeedError } from './remote.ts';
 /** Only typed codes, never exception messages, causes, stderr or RPC data. */
 export declare function closeCode(error: unknown, fallback?: string): string;
 /** Retain trusted typed codes through wrappers; never traverse error text or invoke getters. */
 export declare function closeErrorCodes(error: unknown, fallback?: string): string[];
-export declare function closeFailure(code: string, message: string, requires: string, codes: readonly string[]): NeedError;
-/** Saving succeeded: retain the original trusted error type, code and presentation. */
-export declare function withFirstFailureEvidence<T>(primary: T, firstReason: unknown, primaryCode: string): T;
-/** A negotiated close reason is independent evidence, never a replacement error or new gate. */
-export declare function withRemoteFailureEvidence<T>(primary: T, remoteReason: unknown, primaryCode: string): T;
-/** A known turn failure is final even while its original resource is still closing. */
-export declare function withPendingCleanupEvidence<T>(primary: T, firstReason: unknown, primaryCode: string): T;
-/** Preserve causal roles without copying arbitrary exception text into employee output. */
-export declare function withFailureEvidence(primary: unknown, secondary: readonly unknown[], kind: 'diagnostic' | 'cleanup', firstReason?: unknown, primaryCode?: string): NeedError;
+export declare function withFirstFailureEvidence<T>(primary: T, first: unknown, original: string): T;
+export declare function withRemoteFailureEvidence<T>(primary: T, reason: unknown, original: string): T;
 export declare function primaryFailureCode(error: unknown, fallback: string): string;
 export declare function failureEvidenceSummary(error: unknown): string;

package/dist/failure-evidence.js

@@ -29,74 +29,25 @@ export function closeErrorCodes(error, fallback = 'CLOSE_REASON_UNKNOWN') {
     }
     return codes.size ? [...codes] : [fallback];
 }
-export function closeFailure(code, message, requires, codes) {
-    return Object.assign(new NeedError(code, message, requires), { cause: new AggregateError([...new Set(codes)].map(value => new NeedError(value, '关闭收尾代码 ' + value, '按安全代码核对')), 'CLOSE_AND_DIAGNOSTIC_FAILURES') });
-}
 const evidence = new WeakMap();
-const safeCode = (code) => typeof code === 'string' && /^[A-Z][A-Z0-9_]*$/.test(code);
-function retainedEvidence(error) {
-    const queue = [error], seen = new Set();
-    while (queue.length) {
-        const current = queue.shift();
-        if (current && typeof current === 'object') {
-            const known = evidence.get(current);
-            if (known)
-                return known;
-        }
-        if (!(current instanceof NeedError || current instanceof AggregateError) || seen.has(current))
-            continue;
-        seen.add(current);
-        const cause = Object.getOwnPropertyDescriptor(current, 'cause');
-        if (cause && 'value' in cause)
-            queue.push(cause.value);
-        const children = Object.getOwnPropertyDescriptor(current, 'errors');
-        if (children && 'value' in children && Array.isArray(children.value))
-            queue.push(...children.value);
-    }
-    return undefined;
-}
-/** Saving succeeded: retain the original trusted error type, code and presentation. */
-export function withFirstFailureEvidence(primary, firstReason, primaryCode) {
-    if (primary && typeof primary === 'object' && safeCode(firstReason) && safeCode(primaryCode)) {
-        const previous = retainedEvidence(primary);
-        evidence.set(primary, Object.freeze({ ...previous, first: previous?.first ?? firstReason, original: previous?.original ?? Object.freeze([primaryCode]), diagnostic: previous?.diagnostic ?? Object.freeze([]), cleanup: previous?.cleanup ?? Object.freeze([]) }));
+const safe = (value) => typeof value === 'string' && /^[A-Z][A-Z0-9_]*$/.test(value);
+export function withFirstFailureEvidence(primary, first, original) {
+    if (primary && typeof primary === 'object') {
+        const old = evidence.get(primary);
+        evidence.set(primary, { ...old, ...(safe(first) && !old?.first ? { first } : {}), original: old?.original ?? original });
     }
     return primary;
 }
-/** A negotiated close reason is independent evidence, never a replacement error or new gate. */
-export function withRemoteFailureEvidence(primary, remoteReason, primaryCode) {
-    const remote = trustedEmployeeReason(remoteReason);
+export function withRemoteFailureEvidence(primary, reason, original) {
+    const remote = trustedEmployeeReason(reason);
     if (primary && typeof primary === 'object' && remote) {
-        const previous = retainedEvidence(primary);
-        evidence.set(primary, Object.freeze({ ...previous, remote: previous?.remote ?? remote, original: previous?.original ?? Object.freeze([safeCode(primaryCode) ? primaryCode : 'TURN_FAILED']), diagnostic: previous?.diagnostic ?? Object.freeze([]), cleanup: previous?.cleanup ?? Object.freeze([]) }));
+        const old = evidence.get(primary);
+        evidence.set(primary, { ...old, remote: old?.remote ?? remote, original: old?.original ?? original });
     }
     return primary;
 }
-/** A known turn failure is final even while its original resource is still closing. */
-export function withPendingCleanupEvidence(primary, firstReason, primaryCode) {
-    if (primary && typeof primary === 'object') {
-        const previous = retainedEvidence(primary), first = previous?.first ?? (safeCode(firstReason) ? firstReason : undefined);
-        evidence.set(primary, Object.freeze({ ...previous, ...(first ? { first } : {}), original: previous?.original ?? Object.freeze([safeCode(primaryCode) ? primaryCode : 'TURN_FAILED']), diagnostic: previous?.diagnostic ?? Object.freeze([]), cleanup: previous?.cleanup ?? Object.freeze([]), cleanupPending: true }));
-    }
-    return primary;
-}
-/** Preserve causal roles without copying arbitrary exception text into employee output. */
-export function withFailureEvidence(primary, secondary, kind, firstReason, primaryCode) {
-    const previous = retainedEvidence(primary), first = previous?.first ?? (safeCode(firstReason) ? firstReason : undefined);
-    const original = previous?.original ?? (safeCode(primaryCode) ? [primaryCode] : closeErrorCodes(primary, 'TURN_FAILED'));
-    const secondaryFacts = secondary.map(retainedEvidence), added = [...new Set(secondary.flatMap((error, index) => secondaryFacts[index] ? secondaryFacts[index].original.filter(code => !original.includes(code)) : closeErrorCodes(error, kind === 'diagnostic' ? 'DIAGNOSTIC_WRITE_FAILED' : 'REMOTE_CLEANUP_UNCONFIRMED')))];
-    const remote = previous?.remote ?? secondaryFacts.find(f => f?.remote)?.remote;
-    const facts = Object.freeze({ ...(first ? { first } : {}), ...(remote ? { remote } : {}), original: Object.freeze(original), diagnostic: Object.freeze([...new Set([...(previous?.diagnostic ?? []), ...secondaryFacts.flatMap(f => f?.diagnostic ?? []), ...(kind === 'diagnostic' ? added : [])])]), cleanup: Object.freeze([...new Set([...(previous?.cleanup ?? []), ...secondaryFacts.flatMap(f => f?.cleanup ?? []), ...(kind === 'cleanup' ? added : [])])]) });
-    const code = kind === 'cleanup' ? 'REMOTE_CLEANUP_UNCONFIRMED' : !secondary.length ? primary instanceof NeedError ? primary.code : safeCode(primaryCode) ? primaryCode : 'TURN_FAILED' : primary instanceof NeedError && facts.diagnostic.length > 0 && facts.diagnostic.every(code => code === primary.code) && !facts.cleanup.length && !previous ? primary.code : 'CONVERSATION_DETAILS_FAILED';
-    const failure = Object.assign(new NeedError(code, '本轮已停止；运行原因与诊断或清理结果分别保留。', '核对原始原因及未确认的保存/清理结果'), { cause: new AggregateError([primary, ...(safeCode(primaryCode) && !(primary instanceof NeedError) ? [new NeedError(primaryCode, '运行错误代码', '可信调用点提供的固定代码')] : []), ...secondary, ...(first ? [new NeedError(first, '首次观察关闭代码', '不是已证明根因')] : [])], 'TURN_FAILURE_EVIDENCE') });
-    evidence.set(failure, facts);
-    failure.requires = '原错误代码 ' + facts.original.join('、') + (facts.diagnostic.length ? '；诊断错误代码 ' + facts.diagnostic.join('、') : '') + (facts.first ? '；首次观察关闭 ' + facts.first : '') + (facts.cleanup.length ? '；清理错误代码 ' + facts.cleanup.join('、') : '');
-    return failure;
-}
-export function primaryFailureCode(error, fallback) { return retainedEvidence(error)?.original[0] ?? fallback; }
+export function primaryFailureCode(error, fallback) { return error && typeof error === 'object' ? evidence.get(error)?.original ?? fallback : fallback; }
 export function failureEvidenceSummary(error) {
-    const facts = retainedEvidence(error);
-    if (!facts)
-        return '';
-    return '技术详情：' + [...(facts.first ? ['首次观察关闭 ' + facts.first] : []), '运行原因 ' + facts.original.join('、'), ...(facts.remote ? ['远端关闭原因 ' + facts.remote] : []), ...(facts.diagnostic.length ? ['详情保存未确认 ' + facts.diagnostic.join('、')] : []), ...(facts.cleanup.length ? ['清理未确认 ' + facts.cleanup.join('、')] : facts.cleanupPending ? ['正在确认主机清理，原资源清理结果尚待确认'] : [])].join('；');
+    const facts = error && typeof error === 'object' ? evidence.get(error) : undefined;
+    return facts ? '技术详情：' + [...(facts.first ? ['首次关闭原因 ' + facts.first] : []), '运行原因 ' + facts.original, ...(facts.remote ? ['远端原因 ' + facts.remote] : [])].join('；') : '';
 }

package/dist/host-workspace.d.ts

@@ -1,6 +1,5 @@
 import type { ConnectApi, ConnectTarget, ConnectionState, RuntimeRequest, Runtime } from './provider.ts';
 import type { NativeWorkspaceApi, HostSessionProjectTarget, LoginProvider } from './connect-contract.ts';
-import type { WorkspaceSourceOptions } from './workspace-source.ts';
 export interface HostWorkspaceGuard {
     readonly signal: AbortSignal;
     readonly revocation: AbortSignal;
@@ -10,4 +9,7 @@ export interface HostWorkspaceGuard {
     dispose(): void;
 }
 /** Current official membership and explicit host selection; never infer source from a pathname. */
-export declare function hostWorkspaceGuard(get: () => ConnectApi | undefined, api: ConnectApi & NativeWorkspaceApi, connection: ConnectionState, target: ConnectTarget, request: RuntimeRequest, workspace: WorkspaceSourceOptions['workspace'] | undefined, provider: LoginProvider): Promise<HostWorkspaceGuard | undefined>;
+export declare function hostWorkspaceGuard(get: () => ConnectApi | undefined, api: ConnectApi & NativeWorkspaceApi, connection: ConnectionState, target: ConnectTarget, request: RuntimeRequest, workspace: ((request: RuntimeRequest) => Promise<{
+    id: string;
+    path: string;
+}>) | undefined, provider: LoginProvider): Promise<HostWorkspaceGuard | undefined>;

package/dist/host-workspace.js

@@ -27,7 +27,7 @@ export async function hostWorkspaceGuard(get, api, connection, target, request,
     if (rows.length !== 1 || !selected)
         return;
     if (selected.source !== 'host') {
-        if (selected.source !== null && !['local', 'legacy-host'].includes(selected.source))
+        if (selected.source !== null && selected.source !== 'local')
             throw invalid();
         return;
     }

package/dist/index.d.ts

@@ -1,7 +1,6 @@
-import { type CloseChange } from './close-diagnostics.ts';
 import type { Context } from '@deepseek-ai/cordis';
 import Schema from '@deepseek-ai/schemastery';
-import { LlmAdapter, type GenerateOptions, type StreamChunk } from '@deepseek-ai/dsh-llm';
+import { LlmAdapter, type GenerateOptions, type StreamChunk, type LlmResolvedModelInfo } from '@deepseek-ai/dsh-llm';
 import { type AcpHooks } from './acp.ts';
 import { type RuntimeProvider } from './provider.ts';
 import { type AgentDefinition } from './agents.ts';
@@ -9,48 +8,34 @@ import { type ImageReader, type HostWorkspacePresentation } from './input.ts';
 import type { LoginDiagnostic } from './login-diagnostic.ts';
 import { type ModelDirectory, type HostModel } from './model-catalog.ts';
 import { type PreflightDiagnostics } from './preflight-diagnostic.ts';
+import { type PermissionSource } from './permissions.ts';
+export { readDshPermissions } from './permissions.ts';
 export declare const name = "ai-workbench-remote-agent";
 export declare const settingsNamespace = "ai-workbench-codex";
 export declare const inject: string[];
 /** Owner-approved defaults; administrators may override through the existing settings. */
 export declare const DEFAULT_CONFIG: Readonly<{
-    readonly mode: "session";
     readonly acpMaxMessageBytes: 4194304;
     readonly brokerMaxFrameBytes: 2097152;
     readonly brokerControlMaxBytes: 1048576;
-    readonly oneShotSandbox: "workspace-write";
-    readonly oneShotApproval: "never";
     readonly employeeShellKillGraceMs: 1000;
-    readonly employeeHttpMcpPolicy: "ignore";
 }>;
 export declare const Config: Schema<Schemastery.ObjectS<NoInfer<{
-    employeeHttpMcpPolicy: Schema<"reject" | "ignore", "reject" | "ignore", "volatile-defined">;
-    mode: Schema<"session" | "one-shot", "session" | "one-shot", "volatile-defined">;
     acpMaxMessageBytes: Schema<number, number, "volatile-defined">;
     brokerMaxFrameBytes: Schema<number, number, "volatile-defined">;
     brokerControlMaxBytes: Schema<number, number, "volatile-defined">;
-    oneShotSandbox: Schema<"read-only" | "workspace-write" | "danger-full-access", "read-only" | "workspace-write" | "danger-full-access", "volatile-defined">;
-    oneShotApproval: Schema<"never", "never", "volatile-defined">;
     employeeShellKillGraceMs: Schema<number, number, "volatile-defined">;
 }>>, Schemastery.ObjectT<NoInfer<{
-    employeeHttpMcpPolicy: Schema<"reject" | "ignore", "reject" | "ignore", "volatile-defined">;
-    mode: Schema<"session" | "one-shot", "session" | "one-shot", "volatile-defined">;
     acpMaxMessageBytes: Schema<number, number, "volatile-defined">;
     brokerMaxFrameBytes: Schema<number, number, "volatile-defined">;
     brokerControlMaxBytes: Schema<number, number, "volatile-defined">;
-    oneShotSandbox: Schema<"read-only" | "workspace-write" | "danger-full-access", "read-only" | "workspace-write" | "danger-full-access", "volatile-defined">;
-    oneShotApproval: Schema<"never", "never", "volatile-defined">;
     employeeShellKillGraceMs: Schema<number, number, "volatile-defined">;
 }>>, "plain">;
 export interface PluginConfig {
-    mode?: 'session' | 'one-shot';
     acpMaxMessageBytes?: number;
     brokerMaxFrameBytes?: number;
     brokerControlMaxBytes?: number;
-    oneShotSandbox?: 'read-only' | 'workspace-write' | 'danger-full-access';
-    oneShotApproval?: 'never';
     employeeShellKillGraceMs?: number;
-    employeeHttpMcpPolicy?: 'reject' | 'ignore';
 }
 type LiveConfig = {
     [K in keyof PluginConfig]: PluginConfig[K] | {
@@ -61,7 +46,6 @@ type LiveConfig = {
 export declare function readConfig(config: LiveConfig): PluginConfig;
 export type LoginFailureReporter = (sessionId: string | undefined, code: string, diagnostic: LoginDiagnostic) => Promise<{
     eventId: string;
-    recorded: true;
 }>;
 export declare class CodexRemoteAdapter extends LlmAdapter {
     private resolveRuntime;
@@ -72,35 +56,29 @@ export declare class CodexRemoteAdapter extends LlmAdapter {
     private readonly reportLoginFailure?;
     private readonly directory?;
     private readonly preflightDiagnostics?;
+    private readonly permissions?;
     private config;
     private sessions;
     private turns;
     private lifetime;
     private shuttingDown;
     private detached;
-    private cleanups;
-    private preparationFailures;
     private modelPresentation;
     private employeeNoticeSessions;
-    constructor(config: PluginConfig | (() => PluginConfig), resolveRuntime: RuntimeProvider, approve?: InvocationApproval | undefined, providerName?: () => string, agent?: AgentDefinition, readImage?: ImageReader | undefined, reportLoginFailure?: LoginFailureReporter | undefined, directory?: ModelDirectory | undefined, preflightDiagnostics?: PreflightDiagnostics | undefined);
+    constructor(config: PluginConfig | (() => PluginConfig), resolveRuntime: RuntimeProvider, approve?: InvocationApproval | undefined, providerName?: () => string, agent?: AgentDefinition, readImage?: ImageReader | undefined, reportLoginFailure?: LoginFailureReporter | undefined, directory?: ModelDirectory | undefined, preflightDiagnostics?: PreflightDiagnostics | undefined, permissions?: PermissionSource | undefined);
     providerInfo(provider: string): {
         id: string;
         name: string;
     };
     private catalog;
-    listModels(provider: string): Promise<(import("@deepseek-ai/dsh-llm").LlmResolvedModelInfo & {
+    listModels(provider: string): Promise<(LlmResolvedModelInfo & {
         catalog: HostModel;
     })[]>;
-    resolveModel(provider: string, id: string, signal?: AbortSignal): Promise<import("@deepseek-ai/dsh-llm").LlmResolvedModelInfo>;
+    resolveModel(provider: string, id: string, signal?: AbortSignal): Promise<LlmResolvedModelInfo>;
     prepareCall(provider: string, id: string, signal?: AbortSignal): Promise<{
-        model: import("@deepseek-ai/dsh-llm").LlmResolvedModelInfo & {
-            catalog: HostModel;
-        };
+        model: LlmResolvedModelInfo;
         stream: (options: GenerateOptions) => AsyncGenerator<StreamChunk, any, any>;
     }>;
-    observeModelInvalidation(fields: readonly string[], changes?: readonly CloseChange[]): void;
-    invalidateModelState(): Promise<void>;
-    invalidateEmployeeState(): Promise<void>;
     providerRetryPolicy(): {
         mode: "normal";
         maxRetries: number;
@@ -110,8 +88,6 @@ export declare class CodexRemoteAdapter extends LlmAdapter {
         jitterRatio: number;
     };
     private cleanupRuntime;
-    /** Publish an already known failure without coupling the official stream to cleanup. */
-    private finishFailedTurn;
     disposeSession(sessionId: string): Promise<void>;
     detachSession(sessionId: string): Promise<void>;
     dispose(): Promise<void>;
@@ -121,25 +97,20 @@ export declare class CodexRemoteAdapter extends LlmAdapter {
 /** One official registration owns both routes, preserving opaque replay ownership. */
 export declare class RemoteAgentsAdapter extends LlmAdapter {
     private adapters;
-    constructor(config: () => PluginConfig, makeRuntime: (agent: AgentDefinition) => RuntimeProvider, approve: InvocationApproval, nameFor: (agent: AgentDefinition) => string, readImage?: ImageReader, reportLoginFailure?: LoginFailureReporter, directory?: ModelDirectory, preflightDiagnostics?: PreflightDiagnostics);
+    constructor(config: () => PluginConfig, makeRuntime: (agent: AgentDefinition) => RuntimeProvider, approve: InvocationApproval, nameFor: (agent: AgentDefinition) => string, readImage?: ImageReader, reportLoginFailure?: LoginFailureReporter, directory?: ModelDirectory, preflightDiagnostics?: PreflightDiagnostics, permissions?: PermissionSource);
     private adapter;
     providerInfo(provider: string): {
         id: string;
         name: string;
     };
-    listModels(provider: string): Promise<(import("@deepseek-ai/dsh-llm").LlmResolvedModelInfo & {
+    listModels(provider: string): Promise<(LlmResolvedModelInfo & {
         catalog: HostModel;
     })[]>;
-    resolveModel(provider: string, model: string, signal?: AbortSignal): Promise<import("@deepseek-ai/dsh-llm").LlmResolvedModelInfo>;
+    resolveModel(provider: string, model: string, signal?: AbortSignal): Promise<LlmResolvedModelInfo>;
     prepareCall(provider: string, model: string, signal?: AbortSignal): Promise<{
-        model: import("@deepseek-ai/dsh-llm").LlmResolvedModelInfo & {
-            catalog: HostModel;
-        };
+        model: LlmResolvedModelInfo;
         stream: (options: GenerateOptions) => AsyncGenerator<StreamChunk, any, any>;
     }>;
-    observeModelInvalidation(fields: readonly string[], changes?: readonly CloseChange[]): void;
-    invalidateModelState(): Promise<void>;
-    invalidateEmployeeState(): Promise<void>;
     providerRetryPolicy(): {
         mode: "normal";
         maxRetries: number;
@@ -156,4 +127,3 @@ export declare class RemoteAgentsAdapter extends LlmAdapter {
 export declare function apply(ctx: Context, live: LiveConfig): void;
 type InvocationApproval = (request: Parameters<NonNullable<AcpHooks['approve']>>[0], signal: AbortSignal | undefined, options: GenerateOptions, context?: string, hostWorkspace?: HostWorkspacePresentation) => ReturnType<NonNullable<AcpHooks['approve']>>;
 export declare function dshApproval(ctx: Context): InvocationApproval;
-export {};