@artenx/dshb 0.1.18 → 0.1.19

package/lib/core/index.js

@@ -3,12 +3,24 @@ import { sharedAuditLogger } from "./audit.js";
 import { KnownHostsStore } from "./known-hosts.js";
 import { NodeRegistry } from "./node-registry.js";
 import { testNode } from "./test.js";
+import { SyncNodeService } from "./sync/node-sync.js";
 import { registerNodeRoutes, registerSshConfigRoutes } from "./routes.js";
 import { registerRemoteDownloadRoutes, registerWorkspaceRoutes } from "./workspaces.js";
-import { sharedWorkspaceInstructionStore } from "./workspace-instructions.js";
+import { sharedSessionInstructionSnapshotStore, sharedWorkspaceInstructionStore } from "./workspace-instructions.js";
 import { registerWorkspaceInstructionRoutes } from "./workspace-instruction-routes.js";
 import { WorkspaceBindingsStore } from "./workspace-bindings.js";
-import { a as registerWorkspaceInstructionInjector } from "../workspace-instruction-context-DytAmaPY.js";
+import { registerWorkspaceInstructionInjector } from "./workspace-instruction-context.js";
+import { SyncPeerManager } from "./sync/peer-manager.js";
+import { n as SyncSessionService } from "../session-sync-EdfwUON5.js";
+import { registerSyncInternalRoutes } from "./sync/internal-routes.js";
+import { SyncSshTransport } from "./sync/ssh-transport.js";
+import { SyncCoordinator } from "./sync/coordinator.js";
+import { registerSyncPeerRoutes } from "./sync/routes.js";
+import { SyncScheduler } from "./sync/scheduler.js";
+import { registerSyncSessionRoutes } from "./sync/session-routes.js";
+import { SyncOfflineArchiveService } from "./sync/offline-archive.js";
+import { registerSyncOfflineRoutes } from "./sync/offline-routes.js";
+import { SyncPeerStore, SyncStateStore } from "./sync/stores.js";
 //#region src/core/index.ts
 const name = "dshb-core";
 const inject = ["webServer", "credentials"];
@@ -16,20 +28,76 @@ function apply(ctx) {
 	const knownHosts = new KnownHostsStore();
 	const registry = new NodeRegistry(ctx);
 	const bindings = new WorkspaceBindingsStore();
+	const syncPeers = new SyncPeerStore();
+	const syncState = new SyncStateStore();
+	const syncPeerManager = new SyncPeerManager(syncPeers, syncState, ctx.credentials);
+	const syncSshTransport = new SyncSshTransport(syncPeerManager);
 	let workspaceRegistry;
 	if (typeof ctx.inject === "function") ctx.inject(["workspaceRegistry"], (workspaceCtx) => {
 		workspaceRegistry = workspaceCtx.workspaceRegistry;
 	});
+	const syncNodes = new SyncNodeService(registry, bindings, syncState, () => workspaceRegistry, (nodeId) => {
+		const sshWorlds = ctx.get("dshbSshWorlds");
+		const dockerWorlds = ctx.get("dshbDockerWorlds");
+		sshWorlds?.remove?.(nodeId);
+		dockerWorlds?.remove?.(nodeId);
+	});
+	const syncSessions = new SyncSessionService(syncState, syncNodes, registry, bindings, () => workspaceRegistry, () => ctx.get("sessionPersistence"), () => ctx.get("attachments"), () => ctx.get("spillStore"), sharedSessionInstructionSnapshotStore());
+	const syncOfflineArchives = new SyncOfflineArchiveService(syncNodes, syncSessions, void 0, void 0, syncState);
+	try {
+		syncOfflineArchives.cleanupStagingDirectories();
+		syncSessions.cleanupOrphanedStaging();
+	} catch {
+		ctx.logger.warn("sync staging cleanup failed");
+	}
+	const syncCoordinator = new SyncCoordinator(syncPeerManager, syncState, syncNodes, syncSshTransport, Date.now, syncSessions);
+	const syncScheduler = new SyncScheduler(syncPeerManager, syncCoordinator);
 	ctx.provide("nodeRegistry", registry);
 	ctx.provide("knownHosts", knownHosts);
 	ctx.provide("workspaceBindings", bindings);
+	ctx.provide("syncPeerStore", syncPeers);
+	ctx.provide("syncStateStore", syncState);
+	ctx.provide("syncNodeService", syncNodes);
+	ctx.provide("syncSessionService", syncSessions);
+	ctx.provide("syncOfflineArchiveService", syncOfflineArchives);
+	ctx.provide("syncPeerManager", syncPeerManager);
+	ctx.provide("syncSshTransport", syncSshTransport);
+	ctx.provide("syncCoordinator", syncCoordinator);
+	ctx.provide("syncScheduler", syncScheduler);
 	ctx.provide("dshbAudit", sharedAuditLogger());
 	sharedWorldResolver().setBindings(bindings);
-	registerNodeRoutes(ctx, registry, bindings, () => workspaceRegistry);
+	registerNodeRoutes(ctx, registry, bindings, () => workspaceRegistry, syncNodes);
 	registerSshConfigRoutes(ctx, knownHosts);
-	registerWorkspaceRoutes(ctx, registry, bindings);
+	registerWorkspaceRoutes(ctx, registry, bindings, syncNodes);
 	registerRemoteDownloadRoutes(ctx, registry, bindings);
 	registerWorkspaceInstructionRoutes(ctx, sharedWorkspaceInstructionStore());
+	registerSyncPeerRoutes(ctx, syncPeerManager, syncSshTransport, syncCoordinator);
+	registerSyncInternalRoutes(ctx, syncState, syncNodes, syncSessions);
+	registerSyncSessionRoutes(ctx, syncSessions);
+	registerSyncOfflineRoutes(ctx, syncOfflineArchives);
+	ctx.effect(() => {
+		const stopScheduler = syncScheduler.start();
+		let disposed = false;
+		setImmediate(() => {
+			if (disposed) return;
+			(async () => {
+				try {
+					await syncSessions.recoverPending();
+				} catch {
+					ctx.logger.warn("sync session recovery remains pending");
+				}
+				try {
+					await syncOfflineArchives.recoverPending();
+				} catch {
+					ctx.logger.warn("offline archive recovery remains pending");
+				}
+			})();
+		});
+		return () => {
+			disposed = true;
+			stopScheduler();
+		};
+	});
 	registerWorkspaceInstructionInjector(ctx);
 	warmupWorlds(ctx, registry, bindings);
 	startHeartbeat(ctx, registry);

package/lib/core/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":[],"sources":["../../src/core/index.ts"],"sourcesContent":["import type { Context } from '@deepseek-ai/cordis'\nimport { sharedWorldResolver } from '../router/resolve.js'\nimport type {} from '@deepseek-ai/dsh-host-webserver'\nimport { sharedAuditLogger } from './audit.js'\nimport { KnownHostsStore } from './known-hosts.js'\nimport { NodeRegistry } from './node-registry.js'\nimport { registerNodeRoutes, registerSshConfigRoutes } from './routes.js'\nimport { registerWorkspaceRoutes, registerRemoteDownloadRoutes } from './workspaces.js'\nimport { registerWorkspaceInstructionRoutes } from './workspace-instruction-routes.js'\nimport { testNode, type DockerNodeTester, type SshHandshakeTester } from './test.js'\nimport { WorkspaceBindingsStore } from './workspace-bindings.js'\nimport { sharedWorkspaceInstructionStore } from './workspace-instructions.js'\nimport { registerWorkspaceInstructionInjector } from './workspace-instruction-context.js'\n\nexport const name = 'dshb-core'\n\nexport const inject = ['webServer', 'credentials']\n\nexport function apply(ctx: Context): void {\n  const knownHosts = new KnownHostsStore()\n  const registry = new NodeRegistry(ctx)\n  const bindings = new WorkspaceBindingsStore()\n  let workspaceRegistry: { list(): Array<{ path: string; title: string }> } | undefined\n  if (typeof ctx.inject === 'function') {\n    ctx.inject(['workspaceRegistry'], (workspaceCtx: Context) => {\n      workspaceRegistry = (workspaceCtx as unknown as { workspaceRegistry?: typeof workspaceRegistry }).workspaceRegistry\n    })\n  }\n  ctx.provide('nodeRegistry', registry)\n  ctx.provide('knownHosts', knownHosts)\n  ctx.provide('workspaceBindings', bindings)\n  ctx.provide('dshbAudit', sharedAuditLogger())\n  sharedWorldResolver().setBindings(bindings)\n  void registerNodeRoutes(ctx, registry, bindings, () => workspaceRegistry)\n  void registerSshConfigRoutes(ctx, knownHosts)\n  void registerWorkspaceRoutes(ctx, registry, bindings)\n  void registerRemoteDownloadRoutes(ctx, registry, bindings)\n  void registerWorkspaceInstructionRoutes(ctx, sharedWorkspaceInstructionStore())\n  registerWorkspaceInstructionInjector(ctx)\n  warmupWorlds(ctx, registry, bindings)\n  startHeartbeat(ctx, registry)\n  reprovisionDockerNodes(ctx, registry)\n}\n\nconst HEARTBEAT_MS = 5 * 60 * 1000\n\nfunction startHeartbeat(ctx: Context, registry: NodeRegistry): void {\n  const tick = async (): Promise<void> => {\n    const sshTester = ctx.get('dshbSshPool') as SshHandshakeTester | undefined\n    const dockerTester = ctx.get('dshbDockerTester') as DockerNodeTester | undefined\n    for (const node of registry.list()) {\n      try {\n        await testNode(registry, node.id, sshTester, undefined, dockerTester)\n      } catch {\n        // 单节点心跳失败不影响其他节点\n      }\n    }\n  }\n  const timer = setInterval(() => void tick(), HEARTBEAT_MS)\n  ctx.effect(() => () => clearInterval(timer))\n  setImmediate(() => void tick())\n}\n\nfunction reprovisionDockerNodes(ctx: Context, registry: NodeRegistry): void {\n  setImmediate(() => {\n    void (async () => {\n      const provisioner = ctx.get('dshbDockerProvisioner') as { provision(nodeId: string): Promise<unknown> } | undefined\n      if (!provisioner) return\n      for (const node of registry.list()) {\n        if (node.type !== 'local-docker' && node.type !== 'remote-docker') continue\n        if (!node.docker?.image) continue\n        if (node.docker?.containerId) continue\n        try {\n          await provisioner.provision(node.id)\n        } catch {\n          // 失败已记录到 provisionStatuses\n        }\n      }\n    })()\n  })\n}\n\ninterface WarmupWorldsLike {\n  ensure(nodeId: string): Promise<{ ensureDir(path: string): Promise<void> } | undefined>\n}\n\nfunction warmupWorlds(ctx: Context, registry: NodeRegistry, bindings: WorkspaceBindingsStore): void {\n  setImmediate(() => {\n    void (async () => {\n      for (const b of bindings.list()) {\n        const node = registry.get(b.nodeId)\n        if (!node || node.type === 'local-host') continue\n        try {\n          const isDocker = node.type === 'local-docker' || node.type === 'remote-docker'\n          const worlds = isDocker\n            ? (ctx.get('dshbDockerWorldsGeneric') as WarmupWorldsLike | undefined)\n            : (ctx.get('dshbWorlds') as WarmupWorldsLike | undefined)\n          if (!worlds) continue\n          const world = await worlds.ensure(b.nodeId)\n          if (world) await world.ensureDir(b.remotePath)\n        } catch {\n          // 预热失败不应阻塞启动；运行时可再次 ensure\n        }\n      }\n    })()\n  })\n}\n"],"mappings":";;;;;;;;;;;;AAcA,MAAa,OAAO;AAEpB,MAAa,SAAS,CAAC,aAAa,aAAa;AAEjD,SAAgB,MAAM,KAAoB;CACxC,MAAM,aAAa,IAAI,gBAAgB;CACvC,MAAM,WAAW,IAAI,aAAa,GAAG;CACrC,MAAM,WAAW,IAAI,uBAAuB;CAC5C,IAAI;CACJ,IAAI,OAAO,IAAI,WAAW,YACxB,IAAI,OAAO,CAAC,mBAAmB,IAAI,iBAA0B;EAC3D,oBAAqB,aAA6E;CACpG,CAAC;CAEH,IAAI,QAAQ,gBAAgB,QAAQ;CACpC,IAAI,QAAQ,cAAc,UAAU;CACpC,IAAI,QAAQ,qBAAqB,QAAQ;CACzC,IAAI,QAAQ,aAAa,kBAAkB,CAAC;CAC5C,oBAAoB,CAAC,CAAC,YAAY,QAAQ;CAC1C,mBAAwB,KAAK,UAAU,gBAAgB,iBAAiB;CACxE,wBAA6B,KAAK,UAAU;CAC5C,wBAA6B,KAAK,UAAU,QAAQ;CACpD,6BAAkC,KAAK,UAAU,QAAQ;CACzD,mCAAwC,KAAK,gCAAgC,CAAC;CAC9E,qCAAqC,GAAG;CACxC,aAAa,KAAK,UAAU,QAAQ;CACpC,eAAe,KAAK,QAAQ;CAC5B,uBAAuB,KAAK,QAAQ;AACtC;AAEA,MAAM,eAAe;AAErB,SAAS,eAAe,KAAc,UAA8B;CAClE,MAAM,OAAO,YAA2B;EACtC,MAAM,YAAY,IAAI,IAAI,aAAa;EACvC,MAAM,eAAe,IAAI,IAAI,kBAAkB;EAC/C,KAAK,MAAM,QAAQ,SAAS,KAAK,GAC/B,IAAI;GACF,MAAM,SAAS,UAAU,KAAK,IAAI,WAAW,KAAA,GAAW,YAAY;EACtE,QAAQ,CAER;CAEJ;CACA,MAAM,QAAQ,kBAAkB,KAAK,KAAK,GAAG,YAAY;CACzD,IAAI,mBAAmB,cAAc,KAAK,CAAC;CAC3C,mBAAmB,KAAK,KAAK,CAAC;AAChC;AAEA,SAAS,uBAAuB,KAAc,UAA8B;CAC1E,mBAAmB;EACjB,CAAM,YAAY;GAChB,MAAM,cAAc,IAAI,IAAI,uBAAuB;GACnD,IAAI,CAAC,aAAa;GAClB,KAAK,MAAM,QAAQ,SAAS,KAAK,GAAG;IAClC,IAAI,KAAK,SAAS,kBAAkB,KAAK,SAAS,iBAAiB;IACnE,IAAI,CAAC,KAAK,QAAQ,OAAO;IACzB,IAAI,KAAK,QAAQ,aAAa;IAC9B,IAAI;KACF,MAAM,YAAY,UAAU,KAAK,EAAE;IACrC,QAAQ,CAER;GACF;EACF,EAAA,CAAG;CACL,CAAC;AACH;AAMA,SAAS,aAAa,KAAc,UAAwB,UAAwC;CAClG,mBAAmB;EACjB,CAAM,YAAY;GAChB,KAAK,MAAM,KAAK,SAAS,KAAK,GAAG;IAC/B,MAAM,OAAO,SAAS,IAAI,EAAE,MAAM;IAClC,IAAI,CAAC,QAAQ,KAAK,SAAS,cAAc;IACzC,IAAI;KAEF,MAAM,SADW,KAAK,SAAS,kBAAkB,KAAK,SAAS,kBAE1D,IAAI,IAAI,yBAAyB,IACjC,IAAI,IAAI,YAAY;KACzB,IAAI,CAAC,QAAQ;KACb,MAAM,QAAQ,MAAM,OAAO,OAAO,EAAE,MAAM;KAC1C,IAAI,OAAO,MAAM,MAAM,UAAU,EAAE,UAAU;IAC/C,QAAQ,CAER;GACF;EACF,EAAA,CAAG;CACL,CAAC;AACH"}
+{"version":3,"file":"index.js","names":[],"sources":["../../src/core/index.ts"],"sourcesContent":["import type { Context } from '@deepseek-ai/cordis'\nimport { sharedWorldResolver } from '../router/resolve.js'\nimport type {} from '@deepseek-ai/dsh-host-webserver'\nimport { sharedAuditLogger } from './audit.js'\nimport { KnownHostsStore } from './known-hosts.js'\nimport { NodeRegistry } from './node-registry.js'\nimport { registerNodeRoutes, registerSshConfigRoutes } from './routes.js'\nimport { registerWorkspaceRoutes, registerRemoteDownloadRoutes } from './workspaces.js'\nimport { registerWorkspaceInstructionRoutes } from './workspace-instruction-routes.js'\nimport { testNode, type DockerNodeTester, type SshHandshakeTester } from './test.js'\nimport { WorkspaceBindingsStore } from './workspace-bindings.js'\nimport { sharedWorkspaceInstructionStore } from './workspace-instructions.js'\nimport { registerWorkspaceInstructionInjector } from './workspace-instruction-context.js'\nimport { SyncPeerManager } from './sync/peer-manager.js'\nimport { registerSyncInternalRoutes } from './sync/internal-routes.js'\nimport { registerSyncPeerRoutes } from './sync/routes.js'\nimport { SyncSshTransport } from './sync/ssh-transport.js'\nimport { SyncCoordinator } from './sync/coordinator.js'\nimport { SyncScheduler } from './sync/scheduler.js'\nimport { SyncNodeService } from './sync/node-sync.js'\nimport { SyncSessionService, type WorkspaceRegistryLike } from './sync/session-sync.js'\nimport { registerSyncSessionRoutes } from './sync/session-routes.js'\nimport { SyncOfflineArchiveService } from './sync/offline-archive.js'\nimport { registerSyncOfflineRoutes } from './sync/offline-routes.js'\nimport { SyncPeerStore, SyncStateStore } from './sync/stores.js'\nimport { sharedSessionInstructionSnapshotStore } from './workspace-instructions.js'\n\nexport const name = 'dshb-core'\n\nexport const inject = ['webServer', 'credentials']\n\nexport function apply(ctx: Context): void {\n  const knownHosts = new KnownHostsStore()\n  const registry = new NodeRegistry(ctx)\n  const bindings = new WorkspaceBindingsStore()\n  const syncPeers = new SyncPeerStore()\n  const syncState = new SyncStateStore()\n  const syncPeerManager = new SyncPeerManager(syncPeers, syncState, ctx.credentials as never)\n  const syncSshTransport = new SyncSshTransport(syncPeerManager)\n  let workspaceRegistry: WorkspaceRegistryLike | undefined\n  if (typeof ctx.inject === 'function') {\n    ctx.inject(['workspaceRegistry'], (workspaceCtx: Context) => {\n      workspaceRegistry = (workspaceCtx as unknown as { workspaceRegistry?: typeof workspaceRegistry }).workspaceRegistry\n    })\n  }\n  const syncNodes = new SyncNodeService(registry, bindings, syncState, () => workspaceRegistry, (nodeId) => {\n    const sshWorlds = ctx.get('dshbSshWorlds') as { remove?: (id: string) => void } | undefined\n    const dockerWorlds = ctx.get('dshbDockerWorlds') as { remove?: (id: string) => void } | undefined\n    sshWorlds?.remove?.(nodeId)\n    dockerWorlds?.remove?.(nodeId)\n  })\n  const syncSessions = new SyncSessionService(\n    syncState,\n    syncNodes,\n    registry,\n    bindings,\n    () => workspaceRegistry,\n    () => ctx.get('sessionPersistence') as never,\n    () => ctx.get('attachments') as never,\n    () => ctx.get('spillStore') as never,\n    sharedSessionInstructionSnapshotStore(),\n  )\n  const syncOfflineArchives = new SyncOfflineArchiveService(syncNodes, syncSessions, undefined, undefined, syncState)\n  try {\n    syncOfflineArchives.cleanupStagingDirectories()\n    syncSessions.cleanupOrphanedStaging()\n  } catch {\n    ctx.logger.warn('sync staging cleanup failed')\n  }\n  const syncCoordinator = new SyncCoordinator(syncPeerManager, syncState, syncNodes, syncSshTransport, Date.now, syncSessions)\n  const syncScheduler = new SyncScheduler(syncPeerManager, syncCoordinator)\n  ctx.provide('nodeRegistry', registry)\n  ctx.provide('knownHosts', knownHosts)\n  ctx.provide('workspaceBindings', bindings)\n  ctx.provide('syncPeerStore', syncPeers)\n  ctx.provide('syncStateStore', syncState)\n  ctx.provide('syncNodeService', syncNodes)\n  ctx.provide('syncSessionService', syncSessions)\n  ctx.provide('syncOfflineArchiveService', syncOfflineArchives)\n  ctx.provide('syncPeerManager', syncPeerManager)\n  ctx.provide('syncSshTransport', syncSshTransport)\n  ctx.provide('syncCoordinator', syncCoordinator)\n  ctx.provide('syncScheduler', syncScheduler)\n  ctx.provide('dshbAudit', sharedAuditLogger())\n  sharedWorldResolver().setBindings(bindings)\n  void registerNodeRoutes(ctx, registry, bindings, () => workspaceRegistry, syncNodes)\n  void registerSshConfigRoutes(ctx, knownHosts)\n  void registerWorkspaceRoutes(ctx, registry, bindings, syncNodes)\n  void registerRemoteDownloadRoutes(ctx, registry, bindings)\n  void registerWorkspaceInstructionRoutes(ctx, sharedWorkspaceInstructionStore())\n  registerSyncPeerRoutes(ctx, syncPeerManager, syncSshTransport, syncCoordinator)\n  registerSyncInternalRoutes(ctx, syncState, syncNodes, syncSessions)\n  registerSyncSessionRoutes(ctx, syncSessions)\n  registerSyncOfflineRoutes(ctx, syncOfflineArchives)\n  ctx.effect(() => {\n    const stopScheduler = syncScheduler.start()\n    let disposed = false\n    setImmediate(() => {\n      if (disposed) return\n      void (async () => {\n        try {\n          await syncSessions.recoverPending()\n        } catch {\n          ctx.logger.warn('sync session recovery remains pending')\n        }\n        try {\n          await syncOfflineArchives.recoverPending()\n        } catch {\n          ctx.logger.warn('offline archive recovery remains pending')\n        }\n      })()\n    })\n    return () => {\n      disposed = true\n      stopScheduler()\n    }\n  })\n  registerWorkspaceInstructionInjector(ctx)\n  warmupWorlds(ctx, registry, bindings)\n  startHeartbeat(ctx, registry)\n  reprovisionDockerNodes(ctx, registry)\n}\n\nconst HEARTBEAT_MS = 5 * 60 * 1000\n\nfunction startHeartbeat(ctx: Context, registry: NodeRegistry): void {\n  const tick = async (): Promise<void> => {\n    const sshTester = ctx.get('dshbSshPool') as SshHandshakeTester | undefined\n    const dockerTester = ctx.get('dshbDockerTester') as DockerNodeTester | undefined\n    for (const node of registry.list()) {\n      try {\n        await testNode(registry, node.id, sshTester, undefined, dockerTester)\n      } catch {\n        // 单节点心跳失败不影响其他节点\n      }\n    }\n  }\n  const timer = setInterval(() => void tick(), HEARTBEAT_MS)\n  ctx.effect(() => () => clearInterval(timer))\n  setImmediate(() => void tick())\n}\n\nfunction reprovisionDockerNodes(ctx: Context, registry: NodeRegistry): void {\n  setImmediate(() => {\n    void (async () => {\n      const provisioner = ctx.get('dshbDockerProvisioner') as { provision(nodeId: string): Promise<unknown> } | undefined\n      if (!provisioner) return\n      for (const node of registry.list()) {\n        if (node.type !== 'local-docker' && node.type !== 'remote-docker') continue\n        if (!node.docker?.image) continue\n        if (node.docker?.containerId) continue\n        try {\n          await provisioner.provision(node.id)\n        } catch {\n          // 失败已记录到 provisionStatuses\n        }\n      }\n    })()\n  })\n}\n\ninterface WarmupWorldsLike {\n  ensure(nodeId: string): Promise<{ ensureDir(path: string): Promise<void> } | undefined>\n}\n\nfunction warmupWorlds(ctx: Context, registry: NodeRegistry, bindings: WorkspaceBindingsStore): void {\n  setImmediate(() => {\n    void (async () => {\n      for (const b of bindings.list()) {\n        const node = registry.get(b.nodeId)\n        if (!node || node.type === 'local-host') continue\n        try {\n          const isDocker = node.type === 'local-docker' || node.type === 'remote-docker'\n          const worlds = isDocker\n            ? (ctx.get('dshbDockerWorldsGeneric') as WarmupWorldsLike | undefined)\n            : (ctx.get('dshbWorlds') as WarmupWorldsLike | undefined)\n          if (!worlds) continue\n          const world = await worlds.ensure(b.nodeId)\n          if (world) await world.ensureDir(b.remotePath)\n        } catch {\n          // 预热失败不应阻塞启动；运行时可再次 ensure\n        }\n      }\n    })()\n  })\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AA2BA,MAAa,OAAO;AAEpB,MAAa,SAAS,CAAC,aAAa,aAAa;AAEjD,SAAgB,MAAM,KAAoB;CACxC,MAAM,aAAa,IAAI,gBAAgB;CACvC,MAAM,WAAW,IAAI,aAAa,GAAG;CACrC,MAAM,WAAW,IAAI,uBAAuB;CAC5C,MAAM,YAAY,IAAI,cAAc;CACpC,MAAM,YAAY,IAAI,eAAe;CACrC,MAAM,kBAAkB,IAAI,gBAAgB,WAAW,WAAW,IAAI,WAAoB;CAC1F,MAAM,mBAAmB,IAAI,iBAAiB,eAAe;CAC7D,IAAI;CACJ,IAAI,OAAO,IAAI,WAAW,YACxB,IAAI,OAAO,CAAC,mBAAmB,IAAI,iBAA0B;EAC3D,oBAAqB,aAA6E;CACpG,CAAC;CAEH,MAAM,YAAY,IAAI,gBAAgB,UAAU,UAAU,iBAAiB,oBAAoB,WAAW;EACxG,MAAM,YAAY,IAAI,IAAI,eAAe;EACzC,MAAM,eAAe,IAAI,IAAI,kBAAkB;EAC/C,WAAW,SAAS,MAAM;EAC1B,cAAc,SAAS,MAAM;CAC/B,CAAC;CACD,MAAM,eAAe,IAAI,mBACvB,WACA,WACA,UACA,gBACM,yBACA,IAAI,IAAI,oBAAoB,SAC5B,IAAI,IAAI,aAAa,SACrB,IAAI,IAAI,YAAY,GAC1B,sCAAsC,CACxC;CACA,MAAM,sBAAsB,IAAI,0BAA0B,WAAW,cAAc,KAAA,GAAW,KAAA,GAAW,SAAS;CAClH,IAAI;EACF,oBAAoB,0BAA0B;EAC9C,aAAa,uBAAuB;CACtC,QAAQ;EACN,IAAI,OAAO,KAAK,6BAA6B;CAC/C;CACA,MAAM,kBAAkB,IAAI,gBAAgB,iBAAiB,WAAW,WAAW,kBAAkB,KAAK,KAAK,YAAY;CAC3H,MAAM,gBAAgB,IAAI,cAAc,iBAAiB,eAAe;CACxE,IAAI,QAAQ,gBAAgB,QAAQ;CACpC,IAAI,QAAQ,cAAc,UAAU;CACpC,IAAI,QAAQ,qBAAqB,QAAQ;CACzC,IAAI,QAAQ,iBAAiB,SAAS;CACtC,IAAI,QAAQ,kBAAkB,SAAS;CACvC,IAAI,QAAQ,mBAAmB,SAAS;CACxC,IAAI,QAAQ,sBAAsB,YAAY;CAC9C,IAAI,QAAQ,6BAA6B,mBAAmB;CAC5D,IAAI,QAAQ,mBAAmB,eAAe;CAC9C,IAAI,QAAQ,oBAAoB,gBAAgB;CAChD,IAAI,QAAQ,mBAAmB,eAAe;CAC9C,IAAI,QAAQ,iBAAiB,aAAa;CAC1C,IAAI,QAAQ,aAAa,kBAAkB,CAAC;CAC5C,oBAAoB,CAAC,CAAC,YAAY,QAAQ;CAC1C,mBAAwB,KAAK,UAAU,gBAAgB,mBAAmB,SAAS;CACnF,wBAA6B,KAAK,UAAU;CAC5C,wBAA6B,KAAK,UAAU,UAAU,SAAS;CAC/D,6BAAkC,KAAK,UAAU,QAAQ;CACzD,mCAAwC,KAAK,gCAAgC,CAAC;CAC9E,uBAAuB,KAAK,iBAAiB,kBAAkB,eAAe;CAC9E,2BAA2B,KAAK,WAAW,WAAW,YAAY;CAClE,0BAA0B,KAAK,YAAY;CAC3C,0BAA0B,KAAK,mBAAmB;CAClD,IAAI,aAAa;EACf,MAAM,gBAAgB,cAAc,MAAM;EAC1C,IAAI,WAAW;EACf,mBAAmB;GACjB,IAAI,UAAU;GACd,CAAM,YAAY;IAChB,IAAI;KACF,MAAM,aAAa,eAAe;IACpC,QAAQ;KACN,IAAI,OAAO,KAAK,uCAAuC;IACzD;IACA,IAAI;KACF,MAAM,oBAAoB,eAAe;IAC3C,QAAQ;KACN,IAAI,OAAO,KAAK,0CAA0C;IAC5D;GACF,EAAA,CAAG;EACL,CAAC;EACD,aAAa;GACX,WAAW;GACX,cAAc;EAChB;CACF,CAAC;CACD,qCAAqC,GAAG;CACxC,aAAa,KAAK,UAAU,QAAQ;CACpC,eAAe,KAAK,QAAQ;CAC5B,uBAAuB,KAAK,QAAQ;AACtC;AAEA,MAAM,eAAe;AAErB,SAAS,eAAe,KAAc,UAA8B;CAClE,MAAM,OAAO,YAA2B;EACtC,MAAM,YAAY,IAAI,IAAI,aAAa;EACvC,MAAM,eAAe,IAAI,IAAI,kBAAkB;EAC/C,KAAK,MAAM,QAAQ,SAAS,KAAK,GAC/B,IAAI;GACF,MAAM,SAAS,UAAU,KAAK,IAAI,WAAW,KAAA,GAAW,YAAY;EACtE,QAAQ,CAER;CAEJ;CACA,MAAM,QAAQ,kBAAkB,KAAK,KAAK,GAAG,YAAY;CACzD,IAAI,mBAAmB,cAAc,KAAK,CAAC;CAC3C,mBAAmB,KAAK,KAAK,CAAC;AAChC;AAEA,SAAS,uBAAuB,KAAc,UAA8B;CAC1E,mBAAmB;EACjB,CAAM,YAAY;GAChB,MAAM,cAAc,IAAI,IAAI,uBAAuB;GACnD,IAAI,CAAC,aAAa;GAClB,KAAK,MAAM,QAAQ,SAAS,KAAK,GAAG;IAClC,IAAI,KAAK,SAAS,kBAAkB,KAAK,SAAS,iBAAiB;IACnE,IAAI,CAAC,KAAK,QAAQ,OAAO;IACzB,IAAI,KAAK,QAAQ,aAAa;IAC9B,IAAI;KACF,MAAM,YAAY,UAAU,KAAK,EAAE;IACrC,QAAQ,CAER;GACF;EACF,EAAA,CAAG;CACL,CAAC;AACH;AAMA,SAAS,aAAa,KAAc,UAAwB,UAAwC;CAClG,mBAAmB;EACjB,CAAM,YAAY;GAChB,KAAK,MAAM,KAAK,SAAS,KAAK,GAAG;IAC/B,MAAM,OAAO,SAAS,IAAI,EAAE,MAAM;IAClC,IAAI,CAAC,QAAQ,KAAK,SAAS,cAAc;IACzC,IAAI;KAEF,MAAM,SADW,KAAK,SAAS,kBAAkB,KAAK,SAAS,kBAE1D,IAAI,IAAI,yBAAyB,IACjC,IAAI,IAAI,YAAY;KACzB,IAAI,CAAC,QAAQ;KACb,MAAM,QAAQ,MAAM,OAAO,OAAO,EAAE,MAAM;KAC1C,IAAI,OAAO,MAAM,MAAM,UAAU,EAAE,UAAU;IAC/C,QAAQ,CAER;GACF;EACF,EAAA,CAAG;CACL,CAAC;AACH"}

package/lib/core/node-registry.d.ts

@@ -1,108 +1,2 @@
-import { CredentialKey } from "@deepseek-ai/dsh-credentials";
-import { Context } from "@deepseek-ai/cordis";
-//#region src/core/node-registry.d.ts
-type NodeType = 'local-host' | 'local-docker' | 'remote-ssh' | 'remote-docker';
-interface NodeSshAuth {
-  kind: 'password' | 'key' | 'agent';
-  keyPath?: string;
-}
-interface NodeJumpHop {
-  host: string;
-  port?: number;
-  username?: string;
-  keyPath?: string;
-}
-interface NodeSsh {
-  host: string;
-  port: number;
-  username: string;
-  auth: NodeSshAuth;
-  jump?: NodeJumpHop[];
-  hostKeyFingerprint?: string;
-}
-interface NodeDocker {
-  mode: 'existing' | 'managed';
-  containerId?: string;
-  image?: string;
-  resources?: {
-    cpus?: number;
-    memoryMB?: number;
-  };
-}
-interface NodeProfile {
-  id: string;
-  name: string;
-  type: NodeType;
-  ssh?: NodeSsh;
-  docker?: NodeDocker;
-  createdAt: string;
-  updatedAt: string;
-}
-interface NodeSecrets {
-  password?: string;
-  privateKey?: string;
-  passphrase?: string;
-}
-interface NodeStatus {
-  reachable?: boolean;
-  lastCheckedAt?: string;
-  error?: string;
-}
-interface NodeTestReport {
-  ok: boolean;
-  reachable?: boolean;
-  error?: string;
-  category?: string;
-}
-interface NodeCreateInput {
-  name: string;
-  type: NodeType;
-  ssh?: Omit<NodeSsh, 'hostKeyFingerprint'> & {
-    hostKeyFingerprint?: string;
-  };
-  docker?: NodeDocker;
-  secrets?: NodeSecrets;
-}
-interface NodeUpdateInput {
-  name?: string;
-  ssh?: Partial<Omit<NodeSsh, 'hostKeyFingerprint'>>;
-  docker?: Partial<NodeDocker>;
-  secrets?: NodeSecrets;
-}
-interface CredentialLike {
-  readRecord(key: CredentialKey): Promise<unknown>;
-  modifyRecord(key: CredentialKey, mutate: (current: unknown) => Promise<unknown>): Promise<unknown>;
-  deleteRecord(key: CredentialKey): Promise<void>;
-}
-declare function slugifyName(name: string): string;
-declare function dshHome(): string;
-declare class NodeRegistry {
-  private readonly ctx;
-  private profiles;
-  private loaded;
-  private readonly statuses;
-  constructor(ctx: Context);
-  private get creds();
-  private file;
-  private load;
-  private ensureLocalHost;
-  private save;
-  list(): NodeProfile[];
-  get(id: string): NodeProfile | undefined;
-  hasSecret(id: string): Promise<{
-    hasPassword: boolean;
-    hasKey: boolean;
-    hasPassphrase: boolean;
-  }>;
-  getSecrets(id: string): Promise<NodeSecrets | undefined>;
-  create(input: NodeCreateInput): Promise<NodeProfile>;
-  update(id: string, input: NodeUpdateInput): Promise<NodeProfile>;
-  remove(id: string): Promise<void>;
-  status(id: string): NodeStatus;
-  setStatus(id: string, status: NodeStatus): void;
-  private credKey;
-  private writeSecrets;
-}
-//#endregion
-export { CredentialLike, NodeCreateInput, NodeDocker, NodeJumpHop, NodeProfile, NodeRegistry, NodeSecrets, NodeSsh, NodeSshAuth, NodeStatus, NodeTestReport, NodeType, NodeUpdateInput, dshHome, slugifyName };
-//# sourceMappingURL=node-registry.d.ts.map
+import { a as NodeProfile, c as NodeSsh, d as NodeTestReport, f as NodeType, h as slugifyName, i as NodeJumpHop, l as NodeSshAuth, m as dshHome, n as NodeCreateInput, o as NodeRegistry, p as NodeUpdateInput, r as NodeDocker, s as NodeSecrets, t as CredentialLike, u as NodeStatus } from "../node-registry-BTnnM5-k.js";
+export { CredentialLike, NodeCreateInput, NodeDocker, NodeJumpHop, NodeProfile, NodeRegistry, NodeSecrets, NodeSsh, NodeSshAuth, NodeStatus, NodeTestReport, NodeType, NodeUpdateInput, dshHome, slugifyName };

package/lib/core/node-registry.js

@@ -109,11 +109,19 @@ var NodeRegistry = class {
 		return (await this.creds.readRecord(key))?.payload;
 	}
 	async create(input) {
+		return this.createProfile(input, false);
+	}
+	async createImported(input, preferredId) {
+		if (input.type === "local-host" || input.type === "local-docker") throw new Error("sync imports only support remote nodes");
+		return this.createProfile(input, true, preferredId);
+	}
+	async createProfile(input, allowDuplicateName, preferredId) {
 		this.load();
 		const name = slugifyName(input.name);
-		if (this.profiles.some((p) => sameName(p.name, name))) throw new Error(`node name "${name}" already exists`);
-		const id = newId();
+		if (!allowDuplicateName && this.profiles.some((p) => sameName(p.name, name))) throw new Error(`node name "${name}" already exists`);
+		const id = preferredId ?? newId();
 		if (!isLowerHyphenatedId(id)) throw new Error("internal: invalid generated id");
+		if (this.profiles.some((profile) => profile.id === id)) throw new Error(`node ${id} already exists`);
 		const now = (/* @__PURE__ */ new Date()).toISOString();
 		const profile = {
 			id,
@@ -129,6 +137,27 @@ var NodeRegistry = class {
 		this.save();
 		return { ...profile };
 	}
+	async updateImported(id, input) {
+		if (id === LOCAL_NODE_ID || input.type === "local-host" || input.type === "local-docker") throw new Error("sync imports only support remote nodes");
+		this.load();
+		const idx = this.profiles.findIndex((profile) => profile.id === id);
+		if (idx < 0) throw new Error(`node ${id} not found`);
+		const current = this.profiles[idx];
+		const next = {
+			id,
+			name: slugifyName(input.name),
+			type: input.type,
+			ssh: input.ssh,
+			docker: input.docker,
+			createdAt: current.createdAt,
+			updatedAt: (/* @__PURE__ */ new Date()).toISOString()
+		};
+		if (input.secrets && (input.secrets.password || input.secrets.privateKey || input.secrets.passphrase)) await this.writeSecrets(id, input.secrets);
+		this.profiles[idx] = next;
+		this.statuses.delete(id);
+		this.save();
+		return { ...next };
+	}
 	async update(id, input) {
 		this.load();
 		const idx = this.profiles.findIndex((p) => p.id === id);
@@ -163,6 +192,18 @@ var NodeRegistry = class {
 		const key = this.credKey(id);
 		if (key) await this.creds.deleteRecord(key);
 	}
+	async removeImported(id) {
+		if (id === LOCAL_NODE_ID) throw new Error("默认环境节点不可删除");
+		this.load();
+		const idx = this.profiles.findIndex((p) => p.id === id);
+		if (idx >= 0) {
+			this.profiles.splice(idx, 1);
+			this.save();
+		}
+		this.statuses.delete(id);
+		const key = this.credKey(id);
+		if (key) await this.creds.deleteRecord(key);
+	}
 	status(id) {
 		return this.statuses.get(id) ?? {};
 	}

package/lib/core/node-registry.js.map

@@ -1 +1 @@
-{"version":3,"file":"node-registry.js","names":[],"sources":["../../src/core/node-registry.ts"],"sourcesContent":["import { createHash, randomBytes, timingSafeEqual } from 'node:crypto'\nimport { chmodSync, mkdirSync, readFileSync, renameSync, writeFileSync } from 'node:fs'\nimport { homedir } from 'node:os'\nimport { credentialKey, type CredentialKey } from '@deepseek-ai/dsh-credentials'\nimport type { Context } from '@deepseek-ai/cordis'\n\nexport type NodeType = 'local-host' | 'local-docker' | 'remote-ssh' | 'remote-docker'\n\nexport interface NodeSshAuth {\n  kind: 'password' | 'key' | 'agent'\n  keyPath?: string\n}\n\nexport interface NodeJumpHop {\n  host: string\n  port?: number\n  username?: string\n  keyPath?: string\n}\n\nexport interface NodeSsh {\n  host: string\n  port: number\n  username: string\n  auth: NodeSshAuth\n  jump?: NodeJumpHop[]\n  hostKeyFingerprint?: string\n}\n\nexport interface NodeDocker {\n  mode: 'existing' | 'managed'\n  containerId?: string\n  image?: string\n  resources?: { cpus?: number; memoryMB?: number }\n}\n\nexport interface NodeProfile {\n  id: string\n  name: string\n  type: NodeType\n  ssh?: NodeSsh\n  docker?: NodeDocker\n  createdAt: string\n  updatedAt: string\n}\n\nexport interface NodeSecrets {\n  password?: string\n  privateKey?: string\n  passphrase?: string\n}\n\nexport interface NodeStatus {\n  reachable?: boolean\n  lastCheckedAt?: string\n  error?: string\n}\n\nexport interface NodeTestReport {\n  ok: boolean\n  reachable?: boolean\n  error?: string\n  category?: string\n}\n\nexport interface NodeCreateInput {\n  name: string\n  type: NodeType\n  ssh?: Omit<NodeSsh, 'hostKeyFingerprint'> & { hostKeyFingerprint?: string }\n  docker?: NodeDocker\n  secrets?: NodeSecrets\n}\n\nexport interface NodeUpdateInput {\n  name?: string\n  ssh?: Partial<Omit<NodeSsh, 'hostKeyFingerprint'>>\n  docker?: Partial<NodeDocker>\n  secrets?: NodeSecrets\n}\n\nexport interface CredentialLike {\n  readRecord(key: CredentialKey): Promise<unknown>\n  modifyRecord(key: CredentialKey, mutate: (current: unknown) => Promise<unknown>): Promise<unknown>\n  deleteRecord(key: CredentialKey): Promise<void>\n}\n\nfunction newId(): string {\n  return `n${randomBytes(6).toString('hex')}`\n}\n\nexport function slugifyName(name: string): string {\n  return name.trim().slice(0, 64) || 'node'\n}\n\nfunction isLowerHyphenatedId(value: string): boolean {\n  return /^[a-z][a-z0-9-]*$/.test(value)\n}\n\nfunction sameName(a: string, b: string): boolean {\n  const ha = createHash('sha256').update(a).digest()\n  const hb = createHash('sha256').update(b).digest()\n  return timingSafeEqual(ha, hb)\n}\n\nexport function dshHome(): string {\n  return process.env.DSH_HOME ?? join(homedir(), '.dsh')\n}\n\nfunction join(...parts: string[]): string {\n  return parts.join('/')\n}\n\nconst LOCAL_NODE_ID = 'local'\n\nexport class NodeRegistry {\n  private profiles: NodeProfile[] = []\n  private loaded = false\n  private readonly statuses = new Map<string, NodeStatus>()\n\n  constructor(private readonly ctx: Context) {}\n\n  private get creds(): CredentialLike {\n    return this.ctx.credentials as unknown as CredentialLike\n  }\n\n  private file(): string {\n    return `${dshHome()}/dshb/nodes.json`\n  }\n\n  private load(): void {\n    if (this.loaded) return\n    this.loaded = true\n    try {\n      this.profiles = JSON.parse(readFileSync(this.file(), 'utf8')) as NodeProfile[]\n    } catch {\n      this.profiles = []\n    }\n    this.ensureLocalHost()\n  }\n\n  private ensureLocalHost(): void {\n    const existing = this.profiles.find((p) => p.type === 'local-host')\n    if (existing) {\n      if (existing.name !== '默认环境') {\n        existing.name = '默认环境'\n        existing.updatedAt = new Date().toISOString()\n        this.save()\n      }\n      return\n    }\n    const now = new Date().toISOString()\n    this.profiles.unshift({\n      id: LOCAL_NODE_ID,\n      name: '默认环境',\n      type: 'local-host',\n      createdAt: now,\n      updatedAt: now,\n    })\n    this.save()\n  }\n\n  private save(): void {\n    const file = this.file()\n    const dir = file.slice(0, file.lastIndexOf('/'))\n    mkdirSync(dir, { recursive: true, mode: 0o700 })\n    const tmp = `${file}.${process.pid}.tmp`\n    writeFileSync(tmp, JSON.stringify(this.profiles, null, 2), { mode: 0o600 })\n    renameSync(tmp, file)\n    chmodSync(file, 0o600)\n  }\n\n  list(): NodeProfile[] {\n    this.load()\n    return this.profiles.map((p) => ({ ...p }))\n  }\n\n  get(id: string): NodeProfile | undefined {\n    this.load()\n    const found = this.profiles.find((p) => p.id === id)\n    return found ? { ...found } : undefined\n  }\n\n  async hasSecret(id: string): Promise<{ hasPassword: boolean; hasKey: boolean; hasPassphrase: boolean }> {\n    const key = this.credKey(id)\n    if (!key) return { hasPassword: false, hasKey: false, hasPassphrase: false }\n    const record = (await this.creds.readRecord(key)) as { payload?: NodeSecrets } | undefined\n    const payload = record?.payload\n    return {\n      hasPassword: Boolean(payload?.password),\n      hasKey: Boolean(payload?.privateKey),\n      hasPassphrase: Boolean(payload?.passphrase),\n    }\n  }\n\n  async getSecrets(id: string): Promise<NodeSecrets | undefined> {\n    const key = this.credKey(id)\n    if (!key) return undefined\n    const record = (await this.creds.readRecord(key)) as { payload?: NodeSecrets } | undefined\n    return record?.payload\n  }\n\n  async create(input: NodeCreateInput): Promise<NodeProfile> {\n    this.load()\n    const name = slugifyName(input.name)\n    if (this.profiles.some((p) => sameName(p.name, name))) {\n      throw new Error(`node name \"${name}\" already exists`)\n    }\n    const id = newId()\n    if (!isLowerHyphenatedId(id)) throw new Error('internal: invalid generated id')\n    const now = new Date().toISOString()\n    const profile: NodeProfile = {\n      id,\n      name,\n      type: input.type,\n      ssh: input.ssh as NodeSsh | undefined,\n      docker: input.docker,\n      createdAt: now,\n      updatedAt: now,\n    }\n    if (input.secrets && (input.secrets.password || input.secrets.privateKey || input.secrets.passphrase)) {\n      await this.writeSecrets(id, input.secrets)\n    }\n    this.profiles.push(profile)\n    this.save()\n    return { ...profile }\n  }\n\n  async update(id: string, input: NodeUpdateInput): Promise<NodeProfile> {\n    this.load()\n    const idx = this.profiles.findIndex((p) => p.id === id)\n    if (idx < 0) throw new Error(`node ${id} not found`)\n    const current = this.profiles[idx]\n    const next: NodeProfile = { ...current, updatedAt: new Date().toISOString() }\n    if (input.name !== undefined) next.name = slugifyName(input.name)\n    if (input.ssh) next.ssh = { ...current.ssh, ...input.ssh } as NodeSsh\n    if (input.docker) next.docker = { ...current.docker, ...input.docker } as NodeDocker\n    this.profiles[idx] = next\n    if (input.secrets && (input.secrets.password || input.secrets.privateKey || input.secrets.passphrase)) {\n      await this.writeSecrets(id, input.secrets)\n    }\n    this.save()\n    return { ...next }\n  }\n\n  async remove(id: string): Promise<void> {\n    if (id === LOCAL_NODE_ID) throw new Error('默认环境节点不可删除')\n    this.load()\n    const idx = this.profiles.findIndex((p) => p.id === id)\n    if (idx < 0) return\n    this.profiles.splice(idx, 1)\n    this.statuses.delete(id)\n    this.save()\n    const key = this.credKey(id)\n    if (key) await this.creds.deleteRecord(key)\n  }\n\n  status(id: string): NodeStatus {\n    return this.statuses.get(id) ?? {}\n  }\n\n  setStatus(id: string, status: NodeStatus): void {\n    this.statuses.set(id, status)\n  }\n\n  private credKey(id: string): CredentialKey | undefined {\n    try {\n      return credentialKey('dshb-core', id)\n    } catch {\n      return undefined\n    }\n  }\n\n  private async writeSecrets(id: string, secrets: NodeSecrets): Promise<void> {\n    const key = this.credKey(id)\n    if (!key) throw new Error('credentials service unavailable')\n    await this.creds.modifyRecord(key, async () => ({\n      kind: 'grant' as const,\n      payload: { ...secrets },\n    }))\n  }\n}\n"],"mappings":";;;;;AAsFA,SAAS,QAAgB;CACvB,OAAO,IAAI,YAAY,CAAC,CAAC,CAAC,SAAS,KAAK;AAC1C;AAEA,SAAgB,YAAY,MAAsB;CAChD,OAAO,KAAK,KAAK,CAAC,CAAC,MAAM,GAAG,EAAE,KAAK;AACrC;AAEA,SAAS,oBAAoB,OAAwB;CACnD,OAAO,oBAAoB,KAAK,KAAK;AACvC;AAEA,SAAS,SAAS,GAAW,GAAoB;CAC/C,MAAM,KAAK,WAAW,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO;CACjD,MAAM,KAAK,WAAW,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO;CACjD,OAAO,gBAAgB,IAAI,EAAE;AAC/B;AAEA,SAAgB,UAAkB;CAChC,OAAO,QAAQ,IAAI,YAAY,KAAK,QAAQ,GAAG,MAAM;AACvD;AAEA,SAAS,KAAK,GAAG,OAAyB;CACxC,OAAO,MAAM,KAAK,GAAG;AACvB;AAEA,MAAM,gBAAgB;AAEtB,IAAa,eAAb,MAA0B;CAKK;CAJ7B,WAAkC,CAAC;CACnC,SAAiB;CACjB,2BAA4B,IAAI,IAAwB;CAExD,YAAY,KAA+B;EAAd,KAAA,MAAA;CAAe;CAE5C,IAAY,QAAwB;EAClC,OAAO,KAAK,IAAI;CAClB;CAEA,OAAuB;EACrB,OAAO,GAAG,QAAQ,EAAE;CACtB;CAEA,OAAqB;EACnB,IAAI,KAAK,QAAQ;EACjB,KAAK,SAAS;EACd,IAAI;GACF,KAAK,WAAW,KAAK,MAAM,aAAa,KAAK,KAAK,GAAG,MAAM,CAAC;EAC9D,QAAQ;GACN,KAAK,WAAW,CAAC;EACnB;EACA,KAAK,gBAAgB;CACvB;CAEA,kBAAgC;EAC9B,MAAM,WAAW,KAAK,SAAS,MAAM,MAAM,EAAE,SAAS,YAAY;EAClE,IAAI,UAAU;GACZ,IAAI,SAAS,SAAS,QAAQ;IAC5B,SAAS,OAAO;IAChB,SAAS,6BAAY,IAAI,KAAK,EAAA,CAAE,YAAY;IAC5C,KAAK,KAAK;GACZ;GACA;EACF;EACA,MAAM,uBAAM,IAAI,KAAK,EAAA,CAAE,YAAY;EACnC,KAAK,SAAS,QAAQ;GACpB,IAAI;GACJ,MAAM;GACN,MAAM;GACN,WAAW;GACX,WAAW;EACb,CAAC;EACD,KAAK,KAAK;CACZ;CAEA,OAAqB;EACnB,MAAM,OAAO,KAAK,KAAK;EACvB,MAAM,MAAM,KAAK,MAAM,GAAG,KAAK,YAAY,GAAG,CAAC;EAC/C,UAAU,KAAK;GAAE,WAAW;GAAM,MAAM;EAAM,CAAC;EAC/C,MAAM,MAAM,GAAG,KAAK,GAAG,QAAQ,IAAI;EACnC,cAAc,KAAK,KAAK,UAAU,KAAK,UAAU,MAAM,CAAC,GAAG,EAAE,MAAM,IAAM,CAAC;EAC1E,WAAW,KAAK,IAAI;EACpB,UAAU,MAAM,GAAK;CACvB;CAEA,OAAsB;EACpB,KAAK,KAAK;EACV,OAAO,KAAK,SAAS,KAAK,OAAO,EAAE,GAAG,EAAE,EAAE;CAC5C;CAEA,IAAI,IAAqC;EACvC,KAAK,KAAK;EACV,MAAM,QAAQ,KAAK,SAAS,MAAM,MAAM,EAAE,OAAO,EAAE;EACnD,OAAO,QAAQ,EAAE,GAAG,MAAM,IAAI,KAAA;CAChC;CAEA,MAAM,UAAU,IAAwF;EACtG,MAAM,MAAM,KAAK,QAAQ,EAAE;EAC3B,IAAI,CAAC,KAAK,OAAO;GAAE,aAAa;GAAO,QAAQ;GAAO,eAAe;EAAM;EAE3E,MAAM,WAAU,MADM,KAAK,MAAM,WAAW,GAAG,EAAA,EACvB;EACxB,OAAO;GACL,aAAa,QAAQ,SAAS,QAAQ;GACtC,QAAQ,QAAQ,SAAS,UAAU;GACnC,eAAe,QAAQ,SAAS,UAAU;EAC5C;CACF;CAEA,MAAM,WAAW,IAA8C;EAC7D,MAAM,MAAM,KAAK,QAAQ,EAAE;EAC3B,IAAI,CAAC,KAAK,OAAO,KAAA;EAEjB,QAAO,MADe,KAAK,MAAM,WAAW,GAAG,EAAA,EAChC;CACjB;CAEA,MAAM,OAAO,OAA8C;EACzD,KAAK,KAAK;EACV,MAAM,OAAO,YAAY,MAAM,IAAI;EACnC,IAAI,KAAK,SAAS,MAAM,MAAM,SAAS,EAAE,MAAM,IAAI,CAAC,GAClD,MAAM,IAAI,MAAM,cAAc,KAAK,iBAAiB;EAEtD,MAAM,KAAK,MAAM;EACjB,IAAI,CAAC,oBAAoB,EAAE,GAAG,MAAM,IAAI,MAAM,gCAAgC;EAC9E,MAAM,uBAAM,IAAI,KAAK,EAAA,CAAE,YAAY;EACnC,MAAM,UAAuB;GAC3B;GACA;GACA,MAAM,MAAM;GACZ,KAAK,MAAM;GACX,QAAQ,MAAM;GACd,WAAW;GACX,WAAW;EACb;EACA,IAAI,MAAM,YAAY,MAAM,QAAQ,YAAY,MAAM,QAAQ,cAAc,MAAM,QAAQ,aACxF,MAAM,KAAK,aAAa,IAAI,MAAM,OAAO;EAE3C,KAAK,SAAS,KAAK,OAAO;EAC1B,KAAK,KAAK;EACV,OAAO,EAAE,GAAG,QAAQ;CACtB;CAEA,MAAM,OAAO,IAAY,OAA8C;EACrE,KAAK,KAAK;EACV,MAAM,MAAM,KAAK,SAAS,WAAW,MAAM,EAAE,OAAO,EAAE;EACtD,IAAI,MAAM,GAAG,MAAM,IAAI,MAAM,QAAQ,GAAG,WAAW;EACnD,MAAM,UAAU,KAAK,SAAS;EAC9B,MAAM,OAAoB;GAAE,GAAG;GAAS,4BAAW,IAAI,KAAK,EAAA,CAAE,YAAY;EAAE;EAC5E,IAAI,MAAM,SAAS,KAAA,GAAW,KAAK,OAAO,YAAY,MAAM,IAAI;EAChE,IAAI,MAAM,KAAK,KAAK,MAAM;GAAE,GAAG,QAAQ;GAAK,GAAG,MAAM;EAAI;EACzD,IAAI,MAAM,QAAQ,KAAK,SAAS;GAAE,GAAG,QAAQ;GAAQ,GAAG,MAAM;EAAO;EACrE,KAAK,SAAS,OAAO;EACrB,IAAI,MAAM,YAAY,MAAM,QAAQ,YAAY,MAAM,QAAQ,cAAc,MAAM,QAAQ,aACxF,MAAM,KAAK,aAAa,IAAI,MAAM,OAAO;EAE3C,KAAK,KAAK;EACV,OAAO,EAAE,GAAG,KAAK;CACnB;CAEA,MAAM,OAAO,IAA2B;EACtC,IAAI,OAAO,eAAe,MAAM,IAAI,MAAM,YAAY;EACtD,KAAK,KAAK;EACV,MAAM,MAAM,KAAK,SAAS,WAAW,MAAM,EAAE,OAAO,EAAE;EACtD,IAAI,MAAM,GAAG;EACb,KAAK,SAAS,OAAO,KAAK,CAAC;EAC3B,KAAK,SAAS,OAAO,EAAE;EACvB,KAAK,KAAK;EACV,MAAM,MAAM,KAAK,QAAQ,EAAE;EAC3B,IAAI,KAAK,MAAM,KAAK,MAAM,aAAa,GAAG;CAC5C;CAEA,OAAO,IAAwB;EAC7B,OAAO,KAAK,SAAS,IAAI,EAAE,KAAK,CAAC;CACnC;CAEA,UAAU,IAAY,QAA0B;EAC9C,KAAK,SAAS,IAAI,IAAI,MAAM;CAC9B;CAEA,QAAgB,IAAuC;EACrD,IAAI;GACF,OAAO,cAAc,aAAa,EAAE;EACtC,QAAQ;GACN;EACF;CACF;CAEA,MAAc,aAAa,IAAY,SAAqC;EAC1E,MAAM,MAAM,KAAK,QAAQ,EAAE;EAC3B,IAAI,CAAC,KAAK,MAAM,IAAI,MAAM,iCAAiC;EAC3D,MAAM,KAAK,MAAM,aAAa,KAAK,aAAa;GAC9C,MAAM;GACN,SAAS,EAAE,GAAG,QAAQ;EACxB,EAAE;CACJ;AACF"}
+{"version":3,"file":"node-registry.js","names":[],"sources":["../../src/core/node-registry.ts"],"sourcesContent":["import { createHash, randomBytes, timingSafeEqual } from 'node:crypto'\nimport { chmodSync, mkdirSync, readFileSync, renameSync, writeFileSync } from 'node:fs'\nimport { homedir } from 'node:os'\nimport { credentialKey, type CredentialKey } from '@deepseek-ai/dsh-credentials'\nimport type { Context } from '@deepseek-ai/cordis'\n\nexport type NodeType = 'local-host' | 'local-docker' | 'remote-ssh' | 'remote-docker'\n\nexport interface NodeSshAuth {\n  kind: 'password' | 'key' | 'agent'\n  keyPath?: string\n}\n\nexport interface NodeJumpHop {\n  host: string\n  port?: number\n  username?: string\n  keyPath?: string\n}\n\nexport interface NodeSsh {\n  host: string\n  port: number\n  username: string\n  auth: NodeSshAuth\n  jump?: NodeJumpHop[]\n  hostKeyFingerprint?: string\n}\n\nexport interface NodeDocker {\n  mode: 'existing' | 'managed'\n  containerId?: string\n  image?: string\n  resources?: { cpus?: number; memoryMB?: number }\n}\n\nexport interface NodeProfile {\n  id: string\n  name: string\n  type: NodeType\n  ssh?: NodeSsh\n  docker?: NodeDocker\n  createdAt: string\n  updatedAt: string\n}\n\nexport interface NodeSecrets {\n  password?: string\n  privateKey?: string\n  passphrase?: string\n}\n\nexport interface NodeStatus {\n  reachable?: boolean\n  lastCheckedAt?: string\n  error?: string\n}\n\nexport interface NodeTestReport {\n  ok: boolean\n  reachable?: boolean\n  error?: string\n  category?: string\n}\n\nexport interface NodeCreateInput {\n  name: string\n  type: NodeType\n  ssh?: Omit<NodeSsh, 'hostKeyFingerprint'> & { hostKeyFingerprint?: string }\n  docker?: NodeDocker\n  secrets?: NodeSecrets\n}\n\nexport interface NodeUpdateInput {\n  name?: string\n  ssh?: Partial<Omit<NodeSsh, 'hostKeyFingerprint'>>\n  docker?: Partial<NodeDocker>\n  secrets?: NodeSecrets\n}\n\nexport interface CredentialLike {\n  readRecord(key: CredentialKey): Promise<unknown>\n  modifyRecord(key: CredentialKey, mutate: (current: unknown) => Promise<unknown>): Promise<unknown>\n  deleteRecord(key: CredentialKey): Promise<void>\n}\n\nfunction newId(): string {\n  return `n${randomBytes(6).toString('hex')}`\n}\n\nexport function slugifyName(name: string): string {\n  return name.trim().slice(0, 64) || 'node'\n}\n\nfunction isLowerHyphenatedId(value: string): boolean {\n  return /^[a-z][a-z0-9-]*$/.test(value)\n}\n\nfunction sameName(a: string, b: string): boolean {\n  const ha = createHash('sha256').update(a).digest()\n  const hb = createHash('sha256').update(b).digest()\n  return timingSafeEqual(ha, hb)\n}\n\nexport function dshHome(): string {\n  return process.env.DSH_HOME ?? join(homedir(), '.dsh')\n}\n\nfunction join(...parts: string[]): string {\n  return parts.join('/')\n}\n\nconst LOCAL_NODE_ID = 'local'\n\nexport class NodeRegistry {\n  private profiles: NodeProfile[] = []\n  private loaded = false\n  private readonly statuses = new Map<string, NodeStatus>()\n\n  constructor(private readonly ctx: Context) {}\n\n  private get creds(): CredentialLike {\n    return this.ctx.credentials as unknown as CredentialLike\n  }\n\n  private file(): string {\n    return `${dshHome()}/dshb/nodes.json`\n  }\n\n  private load(): void {\n    if (this.loaded) return\n    this.loaded = true\n    try {\n      this.profiles = JSON.parse(readFileSync(this.file(), 'utf8')) as NodeProfile[]\n    } catch {\n      this.profiles = []\n    }\n    this.ensureLocalHost()\n  }\n\n  private ensureLocalHost(): void {\n    const existing = this.profiles.find((p) => p.type === 'local-host')\n    if (existing) {\n      if (existing.name !== '默认环境') {\n        existing.name = '默认环境'\n        existing.updatedAt = new Date().toISOString()\n        this.save()\n      }\n      return\n    }\n    const now = new Date().toISOString()\n    this.profiles.unshift({\n      id: LOCAL_NODE_ID,\n      name: '默认环境',\n      type: 'local-host',\n      createdAt: now,\n      updatedAt: now,\n    })\n    this.save()\n  }\n\n  private save(): void {\n    const file = this.file()\n    const dir = file.slice(0, file.lastIndexOf('/'))\n    mkdirSync(dir, { recursive: true, mode: 0o700 })\n    const tmp = `${file}.${process.pid}.tmp`\n    writeFileSync(tmp, JSON.stringify(this.profiles, null, 2), { mode: 0o600 })\n    renameSync(tmp, file)\n    chmodSync(file, 0o600)\n  }\n\n  list(): NodeProfile[] {\n    this.load()\n    return this.profiles.map((p) => ({ ...p }))\n  }\n\n  get(id: string): NodeProfile | undefined {\n    this.load()\n    const found = this.profiles.find((p) => p.id === id)\n    return found ? { ...found } : undefined\n  }\n\n  async hasSecret(id: string): Promise<{ hasPassword: boolean; hasKey: boolean; hasPassphrase: boolean }> {\n    const key = this.credKey(id)\n    if (!key) return { hasPassword: false, hasKey: false, hasPassphrase: false }\n    const record = (await this.creds.readRecord(key)) as { payload?: NodeSecrets } | undefined\n    const payload = record?.payload\n    return {\n      hasPassword: Boolean(payload?.password),\n      hasKey: Boolean(payload?.privateKey),\n      hasPassphrase: Boolean(payload?.passphrase),\n    }\n  }\n\n  async getSecrets(id: string): Promise<NodeSecrets | undefined> {\n    const key = this.credKey(id)\n    if (!key) return undefined\n    const record = (await this.creds.readRecord(key)) as { payload?: NodeSecrets } | undefined\n    return record?.payload\n  }\n\n  async create(input: NodeCreateInput): Promise<NodeProfile> {\n    return this.createProfile(input, false)\n  }\n\n  async createImported(input: NodeCreateInput, preferredId?: string): Promise<NodeProfile> {\n    if (input.type === 'local-host' || input.type === 'local-docker') {\n      throw new Error('sync imports only support remote nodes')\n    }\n    return this.createProfile(input, true, preferredId)\n  }\n\n  private async createProfile(input: NodeCreateInput, allowDuplicateName: boolean, preferredId?: string): Promise<NodeProfile> {\n    this.load()\n    const name = slugifyName(input.name)\n    if (!allowDuplicateName && this.profiles.some((p) => sameName(p.name, name))) {\n      throw new Error(`node name \"${name}\" already exists`)\n    }\n    const id = preferredId ?? newId()\n    if (!isLowerHyphenatedId(id)) throw new Error('internal: invalid generated id')\n    if (this.profiles.some((profile) => profile.id === id)) throw new Error(`node ${id} already exists`)\n    const now = new Date().toISOString()\n    const profile: NodeProfile = {\n      id,\n      name,\n      type: input.type,\n      ssh: input.ssh as NodeSsh | undefined,\n      docker: input.docker,\n      createdAt: now,\n      updatedAt: now,\n    }\n    if (input.secrets && (input.secrets.password || input.secrets.privateKey || input.secrets.passphrase)) {\n      await this.writeSecrets(id, input.secrets)\n    }\n    this.profiles.push(profile)\n    this.save()\n    return { ...profile }\n  }\n\n  async updateImported(id: string, input: NodeCreateInput): Promise<NodeProfile> {\n    if (id === LOCAL_NODE_ID || input.type === 'local-host' || input.type === 'local-docker') {\n      throw new Error('sync imports only support remote nodes')\n    }\n    this.load()\n    const idx = this.profiles.findIndex((profile) => profile.id === id)\n    if (idx < 0) throw new Error(`node ${id} not found`)\n    const current = this.profiles[idx]\n    const next: NodeProfile = {\n      id,\n      name: slugifyName(input.name),\n      type: input.type,\n      ssh: input.ssh as NodeSsh | undefined,\n      docker: input.docker,\n      createdAt: current.createdAt,\n      updatedAt: new Date().toISOString(),\n    }\n    if (input.secrets && (input.secrets.password || input.secrets.privateKey || input.secrets.passphrase)) {\n      await this.writeSecrets(id, input.secrets)\n    }\n    this.profiles[idx] = next\n    this.statuses.delete(id)\n    this.save()\n    return { ...next }\n  }\n\n  async update(id: string, input: NodeUpdateInput): Promise<NodeProfile> {\n    this.load()\n    const idx = this.profiles.findIndex((p) => p.id === id)\n    if (idx < 0) throw new Error(`node ${id} not found`)\n    const current = this.profiles[idx]\n    const next: NodeProfile = { ...current, updatedAt: new Date().toISOString() }\n    if (input.name !== undefined) next.name = slugifyName(input.name)\n    if (input.ssh) next.ssh = { ...current.ssh, ...input.ssh } as NodeSsh\n    if (input.docker) next.docker = { ...current.docker, ...input.docker } as NodeDocker\n    this.profiles[idx] = next\n    if (input.secrets && (input.secrets.password || input.secrets.privateKey || input.secrets.passphrase)) {\n      await this.writeSecrets(id, input.secrets)\n    }\n    this.save()\n    return { ...next }\n  }\n\n  async remove(id: string): Promise<void> {\n    if (id === LOCAL_NODE_ID) throw new Error('默认环境节点不可删除')\n    this.load()\n    const idx = this.profiles.findIndex((p) => p.id === id)\n    if (idx < 0) return\n    this.profiles.splice(idx, 1)\n    this.statuses.delete(id)\n    this.save()\n    const key = this.credKey(id)\n    if (key) await this.creds.deleteRecord(key)\n  }\n\n  async removeImported(id: string): Promise<void> {\n    if (id === LOCAL_NODE_ID) throw new Error('默认环境节点不可删除')\n    this.load()\n    const idx = this.profiles.findIndex((p) => p.id === id)\n    if (idx >= 0) {\n      this.profiles.splice(idx, 1)\n      this.save()\n    }\n    this.statuses.delete(id)\n    const key = this.credKey(id)\n    if (key) await this.creds.deleteRecord(key)\n  }\n\n  status(id: string): NodeStatus {\n    return this.statuses.get(id) ?? {}\n  }\n\n  setStatus(id: string, status: NodeStatus): void {\n    this.statuses.set(id, status)\n  }\n\n  private credKey(id: string): CredentialKey | undefined {\n    try {\n      return credentialKey('dshb-core', id)\n    } catch {\n      return undefined\n    }\n  }\n\n  private async writeSecrets(id: string, secrets: NodeSecrets): Promise<void> {\n    const key = this.credKey(id)\n    if (!key) throw new Error('credentials service unavailable')\n    await this.creds.modifyRecord(key, async () => ({\n      kind: 'grant' as const,\n      payload: { ...secrets },\n    }))\n  }\n}\n"],"mappings":";;;;;AAsFA,SAAS,QAAgB;CACvB,OAAO,IAAI,YAAY,CAAC,CAAC,CAAC,SAAS,KAAK;AAC1C;AAEA,SAAgB,YAAY,MAAsB;CAChD,OAAO,KAAK,KAAK,CAAC,CAAC,MAAM,GAAG,EAAE,KAAK;AACrC;AAEA,SAAS,oBAAoB,OAAwB;CACnD,OAAO,oBAAoB,KAAK,KAAK;AACvC;AAEA,SAAS,SAAS,GAAW,GAAoB;CAC/C,MAAM,KAAK,WAAW,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO;CACjD,MAAM,KAAK,WAAW,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO;CACjD,OAAO,gBAAgB,IAAI,EAAE;AAC/B;AAEA,SAAgB,UAAkB;CAChC,OAAO,QAAQ,IAAI,YAAY,KAAK,QAAQ,GAAG,MAAM;AACvD;AAEA,SAAS,KAAK,GAAG,OAAyB;CACxC,OAAO,MAAM,KAAK,GAAG;AACvB;AAEA,MAAM,gBAAgB;AAEtB,IAAa,eAAb,MAA0B;CAKK;CAJ7B,WAAkC,CAAC;CACnC,SAAiB;CACjB,2BAA4B,IAAI,IAAwB;CAExD,YAAY,KAA+B;EAAd,KAAA,MAAA;CAAe;CAE5C,IAAY,QAAwB;EAClC,OAAO,KAAK,IAAI;CAClB;CAEA,OAAuB;EACrB,OAAO,GAAG,QAAQ,EAAE;CACtB;CAEA,OAAqB;EACnB,IAAI,KAAK,QAAQ;EACjB,KAAK,SAAS;EACd,IAAI;GACF,KAAK,WAAW,KAAK,MAAM,aAAa,KAAK,KAAK,GAAG,MAAM,CAAC;EAC9D,QAAQ;GACN,KAAK,WAAW,CAAC;EACnB;EACA,KAAK,gBAAgB;CACvB;CAEA,kBAAgC;EAC9B,MAAM,WAAW,KAAK,SAAS,MAAM,MAAM,EAAE,SAAS,YAAY;EAClE,IAAI,UAAU;GACZ,IAAI,SAAS,SAAS,QAAQ;IAC5B,SAAS,OAAO;IAChB,SAAS,6BAAY,IAAI,KAAK,EAAA,CAAE,YAAY;IAC5C,KAAK,KAAK;GACZ;GACA;EACF;EACA,MAAM,uBAAM,IAAI,KAAK,EAAA,CAAE,YAAY;EACnC,KAAK,SAAS,QAAQ;GACpB,IAAI;GACJ,MAAM;GACN,MAAM;GACN,WAAW;GACX,WAAW;EACb,CAAC;EACD,KAAK,KAAK;CACZ;CAEA,OAAqB;EACnB,MAAM,OAAO,KAAK,KAAK;EACvB,MAAM,MAAM,KAAK,MAAM,GAAG,KAAK,YAAY,GAAG,CAAC;EAC/C,UAAU,KAAK;GAAE,WAAW;GAAM,MAAM;EAAM,CAAC;EAC/C,MAAM,MAAM,GAAG,KAAK,GAAG,QAAQ,IAAI;EACnC,cAAc,KAAK,KAAK,UAAU,KAAK,UAAU,MAAM,CAAC,GAAG,EAAE,MAAM,IAAM,CAAC;EAC1E,WAAW,KAAK,IAAI;EACpB,UAAU,MAAM,GAAK;CACvB;CAEA,OAAsB;EACpB,KAAK,KAAK;EACV,OAAO,KAAK,SAAS,KAAK,OAAO,EAAE,GAAG,EAAE,EAAE;CAC5C;CAEA,IAAI,IAAqC;EACvC,KAAK,KAAK;EACV,MAAM,QAAQ,KAAK,SAAS,MAAM,MAAM,EAAE,OAAO,EAAE;EACnD,OAAO,QAAQ,EAAE,GAAG,MAAM,IAAI,KAAA;CAChC;CAEA,MAAM,UAAU,IAAwF;EACtG,MAAM,MAAM,KAAK,QAAQ,EAAE;EAC3B,IAAI,CAAC,KAAK,OAAO;GAAE,aAAa;GAAO,QAAQ;GAAO,eAAe;EAAM;EAE3E,MAAM,WAAU,MADM,KAAK,MAAM,WAAW,GAAG,EAAA,EACvB;EACxB,OAAO;GACL,aAAa,QAAQ,SAAS,QAAQ;GACtC,QAAQ,QAAQ,SAAS,UAAU;GACnC,eAAe,QAAQ,SAAS,UAAU;EAC5C;CACF;CAEA,MAAM,WAAW,IAA8C;EAC7D,MAAM,MAAM,KAAK,QAAQ,EAAE;EAC3B,IAAI,CAAC,KAAK,OAAO,KAAA;EAEjB,QAAO,MADe,KAAK,MAAM,WAAW,GAAG,EAAA,EAChC;CACjB;CAEA,MAAM,OAAO,OAA8C;EACzD,OAAO,KAAK,cAAc,OAAO,KAAK;CACxC;CAEA,MAAM,eAAe,OAAwB,aAA4C;EACvF,IAAI,MAAM,SAAS,gBAAgB,MAAM,SAAS,gBAChD,MAAM,IAAI,MAAM,wCAAwC;EAE1D,OAAO,KAAK,cAAc,OAAO,MAAM,WAAW;CACpD;CAEA,MAAc,cAAc,OAAwB,oBAA6B,aAA4C;EAC3H,KAAK,KAAK;EACV,MAAM,OAAO,YAAY,MAAM,IAAI;EACnC,IAAI,CAAC,sBAAsB,KAAK,SAAS,MAAM,MAAM,SAAS,EAAE,MAAM,IAAI,CAAC,GACzE,MAAM,IAAI,MAAM,cAAc,KAAK,iBAAiB;EAEtD,MAAM,KAAK,eAAe,MAAM;EAChC,IAAI,CAAC,oBAAoB,EAAE,GAAG,MAAM,IAAI,MAAM,gCAAgC;EAC9E,IAAI,KAAK,SAAS,MAAM,YAAY,QAAQ,OAAO,EAAE,GAAG,MAAM,IAAI,MAAM,QAAQ,GAAG,gBAAgB;EACnG,MAAM,uBAAM,IAAI,KAAK,EAAA,CAAE,YAAY;EACnC,MAAM,UAAuB;GAC3B;GACA;GACA,MAAM,MAAM;GACZ,KAAK,MAAM;GACX,QAAQ,MAAM;GACd,WAAW;GACX,WAAW;EACb;EACA,IAAI,MAAM,YAAY,MAAM,QAAQ,YAAY,MAAM,QAAQ,cAAc,MAAM,QAAQ,aACxF,MAAM,KAAK,aAAa,IAAI,MAAM,OAAO;EAE3C,KAAK,SAAS,KAAK,OAAO;EAC1B,KAAK,KAAK;EACV,OAAO,EAAE,GAAG,QAAQ;CACtB;CAEA,MAAM,eAAe,IAAY,OAA8C;EAC7E,IAAI,OAAO,iBAAiB,MAAM,SAAS,gBAAgB,MAAM,SAAS,gBACxE,MAAM,IAAI,MAAM,wCAAwC;EAE1D,KAAK,KAAK;EACV,MAAM,MAAM,KAAK,SAAS,WAAW,YAAY,QAAQ,OAAO,EAAE;EAClE,IAAI,MAAM,GAAG,MAAM,IAAI,MAAM,QAAQ,GAAG,WAAW;EACnD,MAAM,UAAU,KAAK,SAAS;EAC9B,MAAM,OAAoB;GACxB;GACA,MAAM,YAAY,MAAM,IAAI;GAC5B,MAAM,MAAM;GACZ,KAAK,MAAM;GACX,QAAQ,MAAM;GACd,WAAW,QAAQ;GACnB,4BAAW,IAAI,KAAK,EAAA,CAAE,YAAY;EACpC;EACA,IAAI,MAAM,YAAY,MAAM,QAAQ,YAAY,MAAM,QAAQ,cAAc,MAAM,QAAQ,aACxF,MAAM,KAAK,aAAa,IAAI,MAAM,OAAO;EAE3C,KAAK,SAAS,OAAO;EACrB,KAAK,SAAS,OAAO,EAAE;EACvB,KAAK,KAAK;EACV,OAAO,EAAE,GAAG,KAAK;CACnB;CAEA,MAAM,OAAO,IAAY,OAA8C;EACrE,KAAK,KAAK;EACV,MAAM,MAAM,KAAK,SAAS,WAAW,MAAM,EAAE,OAAO,EAAE;EACtD,IAAI,MAAM,GAAG,MAAM,IAAI,MAAM,QAAQ,GAAG,WAAW;EACnD,MAAM,UAAU,KAAK,SAAS;EAC9B,MAAM,OAAoB;GAAE,GAAG;GAAS,4BAAW,IAAI,KAAK,EAAA,CAAE,YAAY;EAAE;EAC5E,IAAI,MAAM,SAAS,KAAA,GAAW,KAAK,OAAO,YAAY,MAAM,IAAI;EAChE,IAAI,MAAM,KAAK,KAAK,MAAM;GAAE,GAAG,QAAQ;GAAK,GAAG,MAAM;EAAI;EACzD,IAAI,MAAM,QAAQ,KAAK,SAAS;GAAE,GAAG,QAAQ;GAAQ,GAAG,MAAM;EAAO;EACrE,KAAK,SAAS,OAAO;EACrB,IAAI,MAAM,YAAY,MAAM,QAAQ,YAAY,MAAM,QAAQ,cAAc,MAAM,QAAQ,aACxF,MAAM,KAAK,aAAa,IAAI,MAAM,OAAO;EAE3C,KAAK,KAAK;EACV,OAAO,EAAE,GAAG,KAAK;CACnB;CAEA,MAAM,OAAO,IAA2B;EACtC,IAAI,OAAO,eAAe,MAAM,IAAI,MAAM,YAAY;EACtD,KAAK,KAAK;EACV,MAAM,MAAM,KAAK,SAAS,WAAW,MAAM,EAAE,OAAO,EAAE;EACtD,IAAI,MAAM,GAAG;EACb,KAAK,SAAS,OAAO,KAAK,CAAC;EAC3B,KAAK,SAAS,OAAO,EAAE;EACvB,KAAK,KAAK;EACV,MAAM,MAAM,KAAK,QAAQ,EAAE;EAC3B,IAAI,KAAK,MAAM,KAAK,MAAM,aAAa,GAAG;CAC5C;CAEA,MAAM,eAAe,IAA2B;EAC9C,IAAI,OAAO,eAAe,MAAM,IAAI,MAAM,YAAY;EACtD,KAAK,KAAK;EACV,MAAM,MAAM,KAAK,SAAS,WAAW,MAAM,EAAE,OAAO,EAAE;EACtD,IAAI,OAAO,GAAG;GACZ,KAAK,SAAS,OAAO,KAAK,CAAC;GAC3B,KAAK,KAAK;EACZ;EACA,KAAK,SAAS,OAAO,EAAE;EACvB,MAAM,MAAM,KAAK,QAAQ,EAAE;EAC3B,IAAI,KAAK,MAAM,KAAK,MAAM,aAAa,GAAG;CAC5C;CAEA,OAAO,IAAwB;EAC7B,OAAO,KAAK,SAAS,IAAI,EAAE,KAAK,CAAC;CACnC;CAEA,UAAU,IAAY,QAA0B;EAC9C,KAAK,SAAS,IAAI,IAAI,MAAM;CAC9B;CAEA,QAAgB,IAAuC;EACrD,IAAI;GACF,OAAO,cAAc,aAAa,EAAE;EACtC,QAAQ;GACN;EACF;CACF;CAEA,MAAc,aAAa,IAAY,SAAqC;EAC1E,MAAM,MAAM,KAAK,QAAQ,EAAE;EAC3B,IAAI,CAAC,KAAK,MAAM,IAAI,MAAM,iCAAiC;EAC3D,MAAM,KAAK,MAAM,aAAa,KAAK,aAAa;GAC9C,MAAM;GACN,SAAS,EAAE,GAAG,QAAQ;EACxB,EAAE;CACJ;AACF"}

package/lib/core/routes.d.ts

@@ -1,6 +1,7 @@
 import { KnownHostsStore } from "./known-hosts.js";
-import { NodeRegistry } from "./node-registry.js";
-import { WorkspaceBindingsStore } from "./workspace-bindings.js";
+import { o as NodeRegistry } from "../node-registry-BTnnM5-k.js";
+import { r as WorkspaceBindingsStore } from "../workspace-bindings-CsB0TIJB.js";
+import { s as SyncNodeService } from "../node-sync-3Z9QLz2n.js";
 import { Context } from "@deepseek-ai/cordis";
 //#region src/core/routes.d.ts
 interface WorkspaceRegistryLike {
@@ -9,7 +10,7 @@ interface WorkspaceRegistryLike {
     title: string;
   }>;
 }
-declare function registerNodeRoutes(ctx: Context, registry: NodeRegistry, bindings: WorkspaceBindingsStore, getWorkspaceRegistry?: () => WorkspaceRegistryLike | undefined): Promise<void>;
+declare function registerNodeRoutes(ctx: Context, registry: NodeRegistry, bindings: WorkspaceBindingsStore, getWorkspaceRegistry?: () => WorkspaceRegistryLike | undefined, syncNodes?: SyncNodeService): Promise<void>;
 declare function registerSshConfigRoutes(ctx: Context, knownHosts: KnownHostsStore): Promise<void>;
 //#endregion
 export { registerNodeRoutes, registerSshConfigRoutes };

package/lib/core/routes.js

@@ -1,6 +1,7 @@
 import { resolveHostRunner } from "../exec-docker/host-runner.js";
 import { readSshConfig, resolveSshConfigEntry } from "./ssh-config.js";
 import { testNode } from "./test.js";
+import { SyncNodeInUseError } from "./sync/node-sync.js";
 import { mkdirSync, readdirSync } from "node:fs";
 //#region src/core/routes.ts
 function resolveWorlds(ctx, nodeType) {
@@ -59,7 +60,7 @@ function maybeProvision(ctx, node) {
 	provisioner.provision(node.id).catch(() => {});
 	return true;
 }
-async function registerNodeRoutes(ctx, registry, bindings, getWorkspaceRegistry) {
+async function registerNodeRoutes(ctx, registry, bindings, getWorkspaceRegistry, syncNodes) {
 	const webServer = ctx.webServer;
 	ctx.effect(() => webServer.register({
 		kind: "prefix",
@@ -76,6 +77,14 @@ async function registerNodeRoutes(ctx, registry, bindings, getWorkspaceRegistry)
 					});
 					return;
 				}
+				if (syncNodes?.isPendingRemoval(resourceId)) {
+					sendJson(res, 409, {
+						ok: false,
+						code: "node/pending-removal",
+						error: "节点等待工作区解绑后清理"
+					});
+					return;
+				}
 				const path = new URL(req.url ?? "/", "http://x").searchParams.get("path") ?? (node.type === "local-host" ? process.env.HOME ?? "/" : "/");
 				try {
 					if (node.type === "local-host") {
@@ -129,6 +138,14 @@ async function registerNodeRoutes(ctx, registry, bindings, getWorkspaceRegistry)
 					});
 					return;
 				}
+				if (syncNodes?.isPendingRemoval(resourceId)) {
+					sendJson(res, 409, {
+						ok: false,
+						code: "node/pending-removal",
+						error: "节点等待工作区解绑后清理"
+					});
+					return;
+				}
 				const body = await readBody(req);
 				const path = body && typeof body.path === "string" ? body.path : void 0;
 				if (!path) {
@@ -178,15 +195,29 @@ async function registerNodeRoutes(ctx, registry, bindings, getWorkspaceRegistry)
 			}
 			if (req.method === "GET" && resourceId === void 0) {
 				const provisioner = ctx.get("dshbDockerProvisioner");
+				try {
+					await syncNodes?.reconcilePendingRemovals();
+				} catch {
+					sendJson(res, 503, {
+						ok: false,
+						error: "同步删除状态暂不可用"
+					});
+					return;
+				}
 				const nodes = registry.list();
+				const syncViews = syncNodes?.views(nodes.map((node) => node.id));
 				sendJson(res, 200, {
 					ok: true,
-					nodes: await Promise.all(nodes.map(async (n) => ({
-						...n,
-						hasSecret: await registry.hasSecret(n.id),
-						status: registry.status(n.id),
-						provision: provisioner?.status(n.id)
-					})))
+					nodes: await Promise.all(nodes.map(async (n) => {
+						const sync = syncViews?.get(n.id);
+						return {
+							...n,
+							hasSecret: await registry.hasSecret(n.id),
+							status: registry.status(n.id),
+							provision: provisioner?.status(n.id),
+							...sync ? { sync } : {}
+						};
+					}))
 				});
 				return;
 			}
@@ -332,24 +363,37 @@ async function registerNodeRoutes(ctx, registry, bindings, getWorkspaceRegistry)
 					return;
 				}
 				try {
-					if ((node.type === "local-docker" || node.type === "remote-docker") && node.docker?.containerId) {
-						const runner = await resolveHostRunner(ctx, node);
-						if (!runner) throw new Error("Docker 节点执行环境不可用，节点未删除");
-						const result = await runner.run([
-							"docker",
-							"rm",
-							"-f",
-							node.docker.containerId
-						]);
-						if (result.code !== 0) throw new Error((result.stderr || result.stdout).trim() || "删除容器失败，节点未删除");
-					}
-					await registry.remove(resourceId);
-					const sshWorlds = ctx.get("dshbSshWorlds");
-					const dockerWorlds = ctx.get("dshbDockerWorlds");
-					sshWorlds?.remove?.(resourceId);
-					dockerWorlds?.remove?.(resourceId);
+					const removeNode = async () => {
+						if ((node.type === "local-docker" || node.type === "remote-docker") && node.docker?.containerId) {
+							const runner = await resolveHostRunner(ctx, node);
+							if (!runner) throw new Error("Docker 节点执行环境不可用，节点未删除");
+							const result = await runner.run([
+								"docker",
+								"rm",
+								"-f",
+								node.docker.containerId
+							]);
+							if (result.code !== 0) throw new Error((result.stderr || result.stdout).trim() || "删除容器失败，节点未删除");
+						}
+						await registry.remove(resourceId);
+						const sshWorlds = ctx.get("dshbSshWorlds");
+						const dockerWorlds = ctx.get("dshbDockerWorlds");
+						sshWorlds?.remove?.(resourceId);
+						dockerWorlds?.remove?.(resourceId);
+					};
+					if (syncNodes) await syncNodes.removeLocalNode(resourceId, removeNode);
+					else await removeNode();
 					sendJson(res, 200, { ok: true });
 				} catch (err) {
+					if (err instanceof SyncNodeInUseError) {
+						sendJson(res, 409, {
+							ok: false,
+							code: "node/in-use",
+							error: "节点仍被工作区使用，请先移除或迁移这些工作区。",
+							workspaces: err.workspaces
+						});
+						return;
+					}
 					sendJson(res, 502, {
 						ok: false,
 						error: err instanceof Error ? err.message : String(err)