@ai-workbench/remote-agent 0.8.5 → 0.8.11

package/dist/workspace-source.js

@@ -0,0 +1,136 @@
+import { isDeepStrictEqual } from 'node:util';
+import { sanitizeDisplayLabel } from "./conversation-details.js";
+import { NeedError } from "./remote.js";
+const fail = (code) => new NeedError(code, '工作区来源尚未确认，本轮未执行；你的原话仍保留。', '当前工作区来源及原始员工输入');
+const codeOf = (value) => value instanceof NeedError ? value.code : 'WORKSPACE_SOURCE_CONFIRMATION_FAILED';
+const diagnosticFailure = (error, diagnostic) => Object.assign(new NeedError('CONVERSATION_DETAILS_FAILED', '工作区来源诊断未能保存，本轮已停止；原话保留。', '原错误代码 ' + codeOf(error) + '；诊断错误代码 ' + codeOf(diagnostic)), { cause: new AggregateError([error, diagnostic], 'WORKSPACE_SOURCE_AND_DIAGNOSTIC_FAILED') });
+/** Explicit human source transition only. No source selection is inferred from a folder path. */
+export async function confirmLegacyWorkspaceSource(get, api, request, hooks) {
+    let initialContext = { workspaceId: null, bindingId: null, source: null, status: null };
+    let diagnosticAttempted = false;
+    try {
+        request.signal?.throwIfAborted();
+        if (api.getContractInfo?.().workspaceLocations !== 1 || typeof api.getWorkspaceLocationState !== 'function')
+            return;
+        if (!api.getWorkspaceLocationState().items.some(item => item.source === 'legacy-host' && item.status === 'legacy-confirmation-required'))
+            return;
+        const workspace = { ...await hooks.workspace(request) };
+        request.signal?.throwIfAborted();
+        const snapshot = api.getWorkspaceLocationState(), rows = snapshot.items.filter(item => item.workspaceId === workspace.id), row = rows[0];
+        if (rows.length !== 1 || row?.status !== 'legacy-confirmation-required' || row.source !== 'legacy-host')
+            return;
+        const frozen = structuredClone(row);
+        initialContext = { workspaceId: frozen.workspaceId, bindingId: frozen.bindingId, source: frozen.source, status: frozen.status };
+        const connection = api.getConnectionState(), turn = { ...hooks.currentUserTurn(request) };
+        const name = sanitizeDisplayLabel(row.workspaceName).replace(/[\u0000-\u001f\u007f\u202a-\u202e\u2066-\u2069]/g, '').trim();
+        if (!name || name.includes('[已脱敏：'))
+            throw fail('WORKSPACE_SOURCE_CONFIRMATION_UNAVAILABLE');
+        const question = '这个工作区以前用的是主机上的文件夹。要改用本机的『' + name + '』文件夹吗？';
+        const record = (code, outcome, current = frozen, stage = 'source-confirmation') => hooks.record(request, { kind: 'need', severity: outcome === 'confirmed' ? 'info' : 'action-required', code, summary: outcome === 'confirmation-required' ? question : outcome === 'confirmed' ? '已确认改用本机文件夹，继续处理本轮原始请求。' : '本轮工作区来源确认未完成；原始请求保留，未执行。', payload: { phase: 'workspace-source-admission', stage, workspaceId: workspace.id, bindingId: current.bindingId, source: current.source, status: current.status, outcome } });
+        // Persistence precedes the question; a failed diagnostic is not retried in this path.
+        diagnosticAttempted = true;
+        await record('WORKSPACE_SOURCE_CONFIRMATION_REQUIRED', 'confirmation-required');
+        let terminalDiagnostic = false;
+        async function stable(requireOldSource) {
+            request.signal?.throwIfAborted();
+            if (get() !== api || api.getContractInfo?.().workspaceLocations !== 1 || typeof api.getWorkspaceLocationState !== 'function')
+                throw fail('EMPLOYEE_CONTEXT_CHANGED');
+            const now = api.getConnectionState(), location = api.getWorkspaceLocationState();
+            if (now.phase !== 'connected' || connection.phase !== 'connected' || now.instanceId !== connection.instanceId || now.epoch !== connection.epoch || location.phase !== 'ready' || location.instanceId !== connection.instanceId || location.epoch !== connection.epoch || snapshot.phase !== 'ready' || snapshot.instanceId !== connection.instanceId || snapshot.epoch !== connection.epoch)
+                throw fail('EMPLOYEE_CONTEXT_CHANGED');
+            const currentWorkspace = await hooks.workspace(request);
+            request.signal?.throwIfAborted();
+            if (!isDeepStrictEqual(currentWorkspace, workspace))
+                throw fail('EMPLOYEE_CONTEXT_CHANGED');
+            if (!isDeepStrictEqual(hooks.currentUserTurn(request), turn))
+                throw fail('LOCAL_USER_TURN_CHANGED');
+            // Re-read after awaits. Only the explicit successful L selection may replace the frozen binding.
+            if (get() !== api)
+                throw fail('EMPLOYEE_CONTEXT_CHANGED');
+            const after = api.getConnectionState(), state = api.getWorkspaceLocationState();
+            if (after.phase !== 'connected' || after.instanceId !== connection.instanceId || after.epoch !== connection.epoch || state.phase !== 'ready' || state.instanceId !== connection.instanceId || state.epoch !== connection.epoch)
+                throw fail('EMPLOYEE_CONTEXT_CHANGED');
+            const current = state.items.filter(item => item.workspaceId === workspace.id);
+            if (current.length !== 1 || current[0].localPath !== workspace.path || requireOldSource && (current[0].bindingId !== frozen.bindingId || current[0].source !== frozen.source || current[0].status !== frozen.status))
+                throw fail('EMPLOYEE_CONTEXT_CHANGED');
+            return current[0];
+        }
+        try {
+            await stable(true);
+            if (typeof api.selectWorkspaceLocation !== 'function')
+                throw fail('DEPENDENCY_REQUIRED');
+            const decision = await hooks.confirm({ question, action: '改用本机文件夹' }, request);
+            request.signal?.throwIfAborted();
+            if (decision !== 'allowed-once') {
+                const code = decision === 'rejected' ? 'WORKSPACE_SOURCE_CONFIRMATION_DECLINED' : decision === 'cancelled' ? 'ABORTED' : 'WORKSPACE_SOURCE_CONFIRMATION_UNAVAILABLE';
+                terminalDiagnostic = true;
+                await record(code, decision === 'rejected' ? 'declined' : decision === 'cancelled' ? 'cancelled' : 'failed');
+                throw fail(code);
+            }
+            await stable(true);
+            // The await continuation itself is a boundary: already-observed cancellation,
+            // replacement input or source withdrawal must not start the L mutation.
+            request.signal?.throwIfAborted();
+            if (get() !== api || typeof api.getWorkspaceLocationState !== 'function')
+                throw fail('EMPLOYEE_CONTEXT_CHANGED');
+            const atChoice = api.getConnectionState(), choiceState = api.getWorkspaceLocationState(), choiceRows = choiceState.items.filter(item => item.workspaceId === workspace.id);
+            if (atChoice.phase !== 'connected' || atChoice.instanceId !== connection.instanceId || atChoice.epoch !== connection.epoch || choiceState.phase !== 'ready' || choiceState.instanceId !== connection.instanceId || choiceState.epoch !== connection.epoch || choiceRows.length !== 1 || choiceRows[0].bindingId !== frozen.bindingId || choiceRows[0].source !== frozen.source || choiceRows[0].status !== frozen.status || choiceRows[0].localPath !== workspace.path)
+                throw fail('EMPLOYEE_CONTEXT_CHANGED');
+            if (!isDeepStrictEqual(hooks.currentUserTurn(request), turn))
+                throw fail('LOCAL_USER_TURN_CHANGED');
+            const selected = await api.selectWorkspaceLocation({ instanceId: connection.instanceId, epoch: connection.epoch, workspaceId: workspace.id, expectedBindingId: frozen.bindingId, source: 'local' });
+            request.signal?.throwIfAborted();
+            if (!selected.ok)
+                throw new NeedError(selected.error.code, selected.error.message, selected.error.requires);
+            const current = await stable(false), value = selected.value, returned = value.items.filter(item => item.workspaceId === workspace.id);
+            if (value.phase !== 'ready' || value.instanceId !== connection.instanceId || value.epoch !== connection.epoch || returned.length !== 1 || returned[0].source !== 'local' || returned[0].status !== 'selected' || !returned[0].bindingId || returned[0].bindingId === frozen.bindingId || returned[0].localPath !== workspace.path || current.source !== 'local' || current.status !== 'selected' || current.bindingId !== returned[0].bindingId)
+                throw fail('WORKSPACE_SOURCE_SELECTION_UNCONFIRMED');
+            const selectedBinding = returned[0].bindingId;
+            const assertSelected = () => {
+                request.signal?.throwIfAborted();
+                if (get() !== api || typeof api.getWorkspaceLocationState !== 'function')
+                    throw fail('EMPLOYEE_CONTEXT_CHANGED');
+                const c = api.getConnectionState(), s = api.getWorkspaceLocationState(), items = s.items.filter(item => item.workspaceId === workspace.id);
+                if (c.phase !== 'connected' || c.instanceId !== connection.instanceId || c.epoch !== connection.epoch || s.phase !== 'ready' || s.instanceId !== connection.instanceId || s.epoch !== connection.epoch || items.length !== 1 || items[0].source !== 'local' || items[0].status !== 'selected' || items[0].bindingId !== selectedBinding || items[0].localPath !== workspace.path)
+                    throw fail('EMPLOYEE_CONTEXT_CHANGED');
+                if (!isDeepStrictEqual(hooks.currentUserTurn(request), turn))
+                    throw fail('LOCAL_USER_TURN_CHANGED');
+            };
+            terminalDiagnostic = true;
+            await record('WORKSPACE_SOURCE_CONFIRMED', 'confirmed', current);
+            terminalDiagnostic = false;
+            await stable(false);
+            assertSelected();
+            return { assertCurrent: assertSelected, async recordFailure(error, stage) {
+                    try {
+                        await record(request.signal?.aborted ? 'ABORTED' : codeOf(error), request.signal?.aborted ? 'cancelled' : 'failed', current, stage);
+                    }
+                    catch (diagnostic) {
+                        throw diagnosticFailure(error, diagnostic);
+                    }
+                } };
+        }
+        catch (error) {
+            if (!terminalDiagnostic) {
+                try {
+                    await record(request.signal?.aborted ? 'ABORTED' : codeOf(error), request.signal?.aborted ? 'cancelled' : 'failed');
+                }
+                catch (diagnostic) {
+                    throw diagnosticFailure(error, diagnostic);
+                }
+            }
+            throw error;
+        }
+    }
+    catch (error) {
+        if (!diagnosticAttempted) {
+            try {
+                await hooks.record(request, { kind: 'need', severity: 'action-required', code: request.signal?.aborted ? 'ABORTED' : codeOf(error), summary: '无法核对本轮工作区来源，已停止；原话保留。', payload: { phase: 'workspace-source-admission', stage: 'source-context', ...initialContext, outcome: request.signal?.aborted ? 'cancelled' : 'failed' } });
+            }
+            catch (diagnostic) {
+                throw diagnosticFailure(error, diagnostic);
+            }
+        }
+        throw error;
+    }
+}

package/helpers/ripgrep/LICENSE-vscode

@@ -0,0 +1,13 @@
+vscode-ripgrep
+
+Copyright (c) Microsoft Corporation
+
+All rights reserved.
+
+MIT License
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the ""Software""), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED *AS IS*, WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

package/helpers/ripgrep/PROVENANCE.md

@@ -0,0 +1,9 @@
+# Bundled Mac search component
+
+Original unmodified binaries from Microsoft @vscode/ripgrep-universal 1.18.0. The npm integrity/SHA256, per-file SHA/bytes and upstream release archives are in manifest.json. Both npm binaries were compared byte for byte with the pinned Microsoft release assets (v15.0.1). No employee download/install hook or PATH lookup.
+
+Microsoft packaging tag v1.18.0 commit d22dec46c67fc8c5d307c9b18dba2792efd1f016 locks ripgrep-prebuilt v15.0.1 commit 67202aaafb17aecd9b5b7046d5b7baa92b05237a. Its config pins upstream ripgrep15.0.0 plus the retained Microsoft patch (Windows/ARM-musl adjustments); reported binaries are ripgrep15.0.0 with PCRE2 10.45. Upstream source: https://github.com/BurntSushi/ripgrep/tree/15.0.0 ; vendor source/config: https://github.com/microsoft/ripgrep-prebuilt/tree/v15.0.1 ; npm wrapper: https://github.com/microsoft/vscode-ripgrep/tree/v1.18.0 . Source-input hashes are retained in manifest.json. This is vendor artifact provenance, not a local reproducible build attestation; exact vendor compiler invocation/runtime std build was not independently attested.
+
+LICENSE-vscode retains Microsoft packaging MIT text. notices/ contains ripgrep MIT/Unlicense/COPYING, PCRE2 licence, and a conservative full upstream Cargo.lock dependency superset plus Microsoft's Windows-only msvc_spectre_libs. Every crate archive matches its Cargo checksum; DEPENDENCIES.json identifies original package, version, licence and retained texts. r-efi licence is embedded in AUTHORS. wasip2 texts omitted from its crate were retrieved at its .cargo_vcs_info.json exact source commit. Superset inclusion is not a claim all non-Mac/build/test crates are linked into these Mac binaries. prepare-ripgrep-notices.py regenerates notices from the retained pinned inputs.
+
+Runtime validates shipped rg size/SHA256, executable regular file, macOS arm64/x64 only. No strip/sign/byte alteration by X. Arm64 actual PCRE2 operation is fixture-tested; x64 is byte/inventory verified, not executed on this arm64 Mac. macOS SDK/system libraries are supplied by the OS; binaries have no Homebrew dylib dependency. The plugin message/output bound uses named acpMaxMessageBytes. Other platforms fail explicitly rather than host fallback.

package/helpers/ripgrep/manifest.json

@@ -0,0 +1,56 @@
+{
+  "npm": "@vscode/ripgrep-universal@1.18.0",
+  "source": "https://registry.npmjs.org/@vscode/ripgrep-universal/-/ripgrep-universal-1.18.0.tgz",
+  "archiveSha256": "76a03f429dc13a90f53b60995211a54308ab4f67b2521bac00f9c4be953dff52",
+  "integrity": "sha512-kgrAVy1L/v/8erAjo+I720ifTf7o4rvYUwgsuEu97XAEBtPT9sk3HhcSgFpxMydvNmwdJtXo9/AVee7JjocTrg==",
+  "files": {
+    "darwin-arm64": {
+      "bytes": 4528512,
+      "sha256": "6ef40346bf31fcce79d9614c7745c198542925a0c7d4911e1ffe794c53392ac1"
+    },
+    "darwin-x64": {
+      "bytes": 4742676,
+      "sha256": "f999495980a5e6f1e7d26461ef5768b4013a62df610ed7d77a8b2de247a5b228"
+    }
+  },
+  "vendorRelease": "microsoft/ripgrep-prebuilt@v15.0.1",
+  "vendorCommit": "67202aaafb17aecd9b5b7046d5b7baa92b05237a",
+  "sourceRipgrep": "BurntSushi/ripgrep@15.0.0",
+  "reportedVersion": "ripgrep 15.0.0 / PCRE2 10.45",
+  "sourceInputs": [
+    {
+      "file": "vscode-build.json",
+      "sha256": "fcf6b245175385854a06785ae990546fe0d197ceb65ec9ca58860a5817f07abd"
+    },
+    {
+      "file": "vscode-binaries.lock.json",
+      "sha256": "0bd421f46e3ee2f127290f67e73adb240e1311162d6d33c25121849e5f2beadc"
+    },
+    {
+      "file": "prebuilt-config.json",
+      "sha256": "71bc7b3ecdd5442001f74896a738eafb3b831ee5a183e128067fe6b6d6b64ea7"
+    },
+    {
+      "file": "prebuilt-build-build.sh",
+      "sha256": "cf0d97cafca064c763d3ceeebe8b2f7647f5b4b35710b37c74804a4d3e1b3929"
+    },
+    {
+      "file": "prebuilt-patches-0001-resolve-binskim-issues.patch",
+      "sha256": "45f8b58bba714c446de407f93120f557736b45fad6f43ea283077201646a1be7"
+    },
+    {
+      "file": "ripgrep-lock",
+      "sha256": "257bfa1eeacfa4d8222e2c50f9d2f8d15ef07e96adee46eaa87839f3b6cfa3b4"
+    }
+  ],
+  "vendorArchives": {
+    "darwin-arm64": {
+      "sha256": "2fa16464fd8638588a67c7fc172d3c4b57fbdc65dff366e10b0b0e90734628a6",
+      "url": "https://github.com/microsoft/ripgrep-prebuilt/releases/download/v15.0.1/ripgrep-v15.0.1-aarch64-apple-darwin.tar.gz"
+    },
+    "darwin-x64": {
+      "sha256": "591c693e80bb444ef1907b2a906feb9c77bcafe1cdf509107cc75dcf0e875bd2",
+      "url": "https://github.com/microsoft/ripgrep-prebuilt/releases/download/v15.0.1/ripgrep-v15.0.1-x86_64-apple-darwin.tar.gz"
+    }
+  }
+}

package/helpers/ripgrep/notices/COPYING-ripgrep

@@ -0,0 +1,3 @@
+This project is dual-licensed under the Unlicense and MIT licenses.
+
+You may use this code under the terms of either license.