@artenx/dshb 0.1.31 → 0.1.32

package/lib/core/sync/offline-routes.js

@@ -1,4 +1,4 @@
-import { n as SyncSessionError } from "../../session-sync-BQt3HXkp.js";
+import { n as SyncSessionError } from "../../session-sync-CIqjuWkh.js";
 import { SyncOfflineArchiveError } from "./offline-archive.js";
 import { createReadStream } from "node:fs";
 import { randomBytes } from "node:crypto";

package/lib/core/sync/protocol.d.ts

@@ -1,2 +1,2 @@
-import { a as SYNC_SESSION_BUNDLE_OBJECTS_CAPABILITY, c as SyncFrame, d as encodeSyncControlFrame, f as encodeSyncDataFrame, i as SYNC_PROTOCOL_VERSION, l as SyncFrameDecoder, n as MAX_SYNC_DATA_CHUNK_BYTES, o as SYNC_SESSION_EVENT_TAIL_CAPABILITY, r as MAX_SYNC_TRANSFER_BYTES, s as SYNC_SESSION_MANIFEST_CAPABILITY, t as MAX_SYNC_CONTROL_FRAME_BYTES, u as SyncProtocolError } from "../../protocol-KaWZArY8.js";
-export { MAX_SYNC_CONTROL_FRAME_BYTES, MAX_SYNC_DATA_CHUNK_BYTES, MAX_SYNC_TRANSFER_BYTES, SYNC_PROTOCOL_VERSION, SYNC_SESSION_BUNDLE_OBJECTS_CAPABILITY, SYNC_SESSION_EVENT_TAIL_CAPABILITY, SYNC_SESSION_MANIFEST_CAPABILITY, SyncFrame, SyncFrameDecoder, SyncProtocolError, encodeSyncControlFrame, encodeSyncDataFrame };
+import { a as MAX_SYNC_TRANSFER_BYTES, c as SYNC_SESSION_EVENT_TAIL_CAPABILITY, d as SyncFrame, f as SyncFrameDecoder, h as encodeSyncDataFrame, i as MAX_SYNC_DATA_CHUNK_BYTES, l as SYNC_SESSION_MANIFEST_CAPABILITY, m as encodeSyncControlFrame, n as MAX_SESSION_OBJECT_STREAM_BYTES, o as SYNC_PROTOCOL_VERSION, p as SyncProtocolError, r as MAX_SYNC_CONTROL_FRAME_BYTES, s as SYNC_SESSION_BUNDLE_OBJECTS_CAPABILITY, t as MAX_SESSION_OBJECT_INLINE_BYTES, u as SYNC_SESSION_OBJECT_STREAM_CAPABILITY } from "../../protocol-DJ0zyVlB.js";
+export { MAX_SESSION_OBJECT_INLINE_BYTES, MAX_SESSION_OBJECT_STREAM_BYTES, MAX_SYNC_CONTROL_FRAME_BYTES, MAX_SYNC_DATA_CHUNK_BYTES, MAX_SYNC_TRANSFER_BYTES, SYNC_PROTOCOL_VERSION, SYNC_SESSION_BUNDLE_OBJECTS_CAPABILITY, SYNC_SESSION_EVENT_TAIL_CAPABILITY, SYNC_SESSION_MANIFEST_CAPABILITY, SYNC_SESSION_OBJECT_STREAM_CAPABILITY, SyncFrame, SyncFrameDecoder, SyncProtocolError, encodeSyncControlFrame, encodeSyncDataFrame };

package/lib/core/sync/protocol.js

@@ -4,9 +4,12 @@ const SYNC_PROTOCOL_VERSION = 1;
 const SYNC_SESSION_MANIFEST_CAPABILITY = "session-manifest-v1";
 const SYNC_SESSION_EVENT_TAIL_CAPABILITY = "session-event-tail-delta-v1";
 const SYNC_SESSION_BUNDLE_OBJECTS_CAPABILITY = "session-bundle-objects-v1";
+const SYNC_SESSION_OBJECT_STREAM_CAPABILITY = "session-object-stream-v1";
 const MAX_SYNC_CONTROL_FRAME_BYTES = 65536;
 const MAX_SYNC_DATA_CHUNK_BYTES = 1048576;
 const MAX_SYNC_TRANSFER_BYTES = 134217728;
+const MAX_SESSION_OBJECT_INLINE_BYTES = 262144;
+const MAX_SESSION_OBJECT_STREAM_BYTES = 68719476736;
 const FRAME_HEADER_BYTES = 5;
 const CONTROL_FRAME = 0;
 const DATA_FRAME = 1;
@@ -122,6 +125,6 @@ var SyncFrameDecoder = class {
 	}
 };
 //#endregion
-export { MAX_SYNC_CONTROL_FRAME_BYTES, MAX_SYNC_DATA_CHUNK_BYTES, MAX_SYNC_TRANSFER_BYTES, SYNC_PROTOCOL_VERSION, SYNC_SESSION_BUNDLE_OBJECTS_CAPABILITY, SYNC_SESSION_EVENT_TAIL_CAPABILITY, SYNC_SESSION_MANIFEST_CAPABILITY, SyncFrameDecoder, SyncProtocolError, encodeSyncControlFrame, encodeSyncDataFrame };
+export { MAX_SESSION_OBJECT_INLINE_BYTES, MAX_SESSION_OBJECT_STREAM_BYTES, MAX_SYNC_CONTROL_FRAME_BYTES, MAX_SYNC_DATA_CHUNK_BYTES, MAX_SYNC_TRANSFER_BYTES, SYNC_PROTOCOL_VERSION, SYNC_SESSION_BUNDLE_OBJECTS_CAPABILITY, SYNC_SESSION_EVENT_TAIL_CAPABILITY, SYNC_SESSION_MANIFEST_CAPABILITY, SYNC_SESSION_OBJECT_STREAM_CAPABILITY, SyncFrameDecoder, SyncProtocolError, encodeSyncControlFrame, encodeSyncDataFrame };
 
 //# sourceMappingURL=protocol.js.map

package/lib/core/sync/protocol.js.map

@@ -1 +1 @@
-{"version":3,"file":"protocol.js","names":[],"sources":["../../../src/core/sync/protocol.ts"],"sourcesContent":["import { createHash, timingSafeEqual } from 'node:crypto'\n\nexport const SYNC_PROTOCOL_VERSION = 1\nexport const SYNC_SESSION_MANIFEST_CAPABILITY = 'session-manifest-v1'\nexport const SYNC_SESSION_EVENT_TAIL_CAPABILITY = 'session-event-tail-delta-v1'\nexport const SYNC_SESSION_BUNDLE_OBJECTS_CAPABILITY = 'session-bundle-objects-v1'\nexport const MAX_SYNC_CONTROL_FRAME_BYTES = 64 * 1024\nexport const MAX_SYNC_DATA_CHUNK_BYTES = 1024 * 1024\n// 单次传输（bundle 请求/响应、原始附件/溢出流）的硬上限。必须远小于宿主进程\n// JS 堆（桌面端约 1.4GB）：JSON.parse 的对象图膨胀约为 JSON 文本的 5-10 倍，\n// 100GB 级上限等于无内存保护。协调器按更小的目标分批传输（见 coordinator.ts）。\nexport const MAX_SYNC_TRANSFER_BYTES = 128 * 1024 * 1024\n\nconst FRAME_HEADER_BYTES = 5\nconst CONTROL_FRAME = 0\nconst DATA_FRAME = 1\nconst DATA_METADATA_BYTES = 36\n\nexport type SyncFrame =\n  | { kind: 'control'; value: Record<string, unknown> }\n  | { kind: 'data'; sequence: number; digest: string; data: Buffer }\n\nexport class SyncProtocolError extends Error {\n  constructor(message: string) {\n    super(message)\n    this.name = 'SyncProtocolError'\n  }\n}\n\nfunction makeHeader(type: number, payloadLength: number): Buffer {\n  const header = Buffer.allocUnsafe(FRAME_HEADER_BYTES)\n  header[0] = type\n  header.writeUInt32BE(payloadLength, 1)\n  return header\n}\n\nexport function encodeSyncControlFrame(value: Record<string, unknown>): Buffer {\n  const payload = Buffer.from(`${JSON.stringify(value)}\\n`, 'utf8')\n  if (payload.length > MAX_SYNC_CONTROL_FRAME_BYTES) throw new SyncProtocolError('control frame exceeds size limit')\n  return Buffer.concat([makeHeader(CONTROL_FRAME, payload.length), payload])\n}\n\nexport function encodeSyncDataFrame(sequence: number, data: Buffer): Buffer {\n  if (!Number.isSafeInteger(sequence) || sequence < 0 || sequence > 0xffffffff) {\n    throw new SyncProtocolError('data sequence is invalid')\n  }\n  if (data.length > MAX_SYNC_DATA_CHUNK_BYTES) throw new SyncProtocolError('data chunk exceeds size limit')\n  const metadata = Buffer.allocUnsafe(DATA_METADATA_BYTES)\n  metadata.writeUInt32BE(sequence, 0)\n  createHash('sha256').update(data).digest().copy(metadata, 4)\n  return Buffer.concat([makeHeader(DATA_FRAME, metadata.length + data.length), metadata, data])\n}\n\nexport class SyncFrameDecoder {\n  private readonly header = Buffer.allocUnsafe(FRAME_HEADER_BYTES)\n  private headerOffset = 0\n  private frameType = -1\n  private payload: Buffer | undefined\n  private payloadOffset = 0\n  private nextDataSequence = 0\n  private ended = false\n\n  push(chunk: Buffer): SyncFrame[] {\n    if (this.ended) throw new SyncProtocolError('frame decoder is already finished')\n    const frames: SyncFrame[] = []\n    let inputOffset = 0\n\n    while (inputOffset < chunk.length) {\n      if (!this.payload) {\n        const copied = Math.min(FRAME_HEADER_BYTES - this.headerOffset, chunk.length - inputOffset)\n        chunk.copy(this.header, this.headerOffset, inputOffset, inputOffset + copied)\n        this.headerOffset += copied\n        inputOffset += copied\n        if (this.headerOffset < FRAME_HEADER_BYTES) continue\n\n        this.frameType = this.header[0]\n        const payloadLength = this.header.readUInt32BE(1)\n        if (this.frameType === CONTROL_FRAME) {\n          if (payloadLength < 2 || payloadLength > MAX_SYNC_CONTROL_FRAME_BYTES) {\n            throw new SyncProtocolError('control frame length is invalid')\n          }\n        } else if (this.frameType === DATA_FRAME) {\n          if (payloadLength < DATA_METADATA_BYTES || payloadLength > DATA_METADATA_BYTES + MAX_SYNC_DATA_CHUNK_BYTES) {\n            throw new SyncProtocolError('data frame length is invalid')\n          }\n        } else {\n          throw new SyncProtocolError('unknown frame type')\n        }\n        this.payload = Buffer.allocUnsafe(payloadLength)\n        this.payloadOffset = 0\n      }\n\n      const payload = this.payload\n      const copied = Math.min(payload.length - this.payloadOffset, chunk.length - inputOffset)\n      chunk.copy(payload, this.payloadOffset, inputOffset, inputOffset + copied)\n      this.payloadOffset += copied\n      inputOffset += copied\n\n      if (this.payloadOffset === payload.length) {\n        frames.push(this.decodeFrame(this.frameType, payload))\n        this.resetFrame()\n      }\n    }\n    return frames\n  }\n\n  finish(): void {\n    if (this.headerOffset !== 0 || this.payload !== undefined) throw new SyncProtocolError('truncated frame stream')\n    this.ended = true\n  }\n\n  private decodeFrame(type: number, payload: Buffer): SyncFrame {\n    if (type === CONTROL_FRAME) {\n      if (payload[payload.length - 1] !== 0x0a) throw new SyncProtocolError('control frame must end with a newline')\n      let value: unknown\n      try {\n        value = JSON.parse(payload.subarray(0, -1).toString('utf8'))\n      } catch {\n        throw new SyncProtocolError('control frame contains invalid JSON')\n      }\n      if (value === null || typeof value !== 'object' || Array.isArray(value)) {\n        throw new SyncProtocolError('control frame must contain an object')\n      }\n      return { kind: 'control', value: value as Record<string, unknown> }\n    }\n\n    const sequence = payload.readUInt32BE(0)\n    if (sequence !== this.nextDataSequence) throw new SyncProtocolError('data sequence is out of order')\n    const expectedDigest = payload.subarray(4, DATA_METADATA_BYTES)\n    const data = payload.subarray(DATA_METADATA_BYTES)\n    const actualDigest = createHash('sha256').update(data).digest()\n    if (!timingSafeEqual(expectedDigest, actualDigest)) throw new SyncProtocolError('data chunk digest mismatch')\n    this.nextDataSequence += 1\n    return { kind: 'data', sequence, digest: actualDigest.toString('hex'), data: Buffer.from(data) }\n  }\n\n  private resetFrame(): void {\n    this.headerOffset = 0\n    this.frameType = -1\n    this.payload = undefined\n    this.payloadOffset = 0\n  }\n}\n"],"mappings":";;AAEA,MAAa,wBAAwB;AACrC,MAAa,mCAAmC;AAChD,MAAa,qCAAqC;AAClD,MAAa,yCAAyC;AACtD,MAAa,+BAA+B;AAC5C,MAAa,4BAA4B;AAIzC,MAAa,0BAA0B;AAEvC,MAAM,qBAAqB;AAC3B,MAAM,gBAAgB;AACtB,MAAM,aAAa;AACnB,MAAM,sBAAsB;AAM5B,IAAa,oBAAb,cAAuC,MAAM;CAC3C,YAAY,SAAiB;EAC3B,MAAM,OAAO;EACb,KAAK,OAAO;CACd;AACF;AAEA,SAAS,WAAW,MAAc,eAA+B;CAC/D,MAAM,SAAS,OAAO,YAAY,kBAAkB;CACpD,OAAO,KAAK;CACZ,OAAO,cAAc,eAAe,CAAC;CACrC,OAAO;AACT;AAEA,SAAgB,uBAAuB,OAAwC;CAC7E,MAAM,UAAU,OAAO,KAAK,GAAG,KAAK,UAAU,KAAK,EAAE,KAAK,MAAM;CAChE,IAAI,QAAQ,SAAA,OAAuC,MAAM,IAAI,kBAAkB,kCAAkC;CACjH,OAAO,OAAO,OAAO,CAAC,WAAW,eAAe,QAAQ,MAAM,GAAG,OAAO,CAAC;AAC3E;AAEA,SAAgB,oBAAoB,UAAkB,MAAsB;CAC1E,IAAI,CAAC,OAAO,cAAc,QAAQ,KAAK,WAAW,KAAK,WAAW,YAChE,MAAM,IAAI,kBAAkB,0BAA0B;CAExD,IAAI,KAAK,SAAA,SAAoC,MAAM,IAAI,kBAAkB,+BAA+B;CACxG,MAAM,WAAW,OAAO,YAAY,mBAAmB;CACvD,SAAS,cAAc,UAAU,CAAC;CAClC,WAAW,QAAQ,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,UAAU,CAAC;CAC3D,OAAO,OAAO,OAAO;EAAC,WAAW,YAAY,SAAS,SAAS,KAAK,MAAM;EAAG;EAAU;CAAI,CAAC;AAC9F;AAEA,IAAa,mBAAb,MAA8B;CAC5B,SAA0B,OAAO,YAAY,kBAAkB;CAC/D,eAAuB;CACvB,YAAoB;CACpB;CACA,gBAAwB;CACxB,mBAA2B;CAC3B,QAAgB;CAEhB,KAAK,OAA4B;EAC/B,IAAI,KAAK,OAAO,MAAM,IAAI,kBAAkB,mCAAmC;EAC/E,MAAM,SAAsB,CAAC;EAC7B,IAAI,cAAc;EAElB,OAAO,cAAc,MAAM,QAAQ;GACjC,IAAI,CAAC,KAAK,SAAS;IACjB,MAAM,SAAS,KAAK,IAAI,qBAAqB,KAAK,cAAc,MAAM,SAAS,WAAW;IAC1F,MAAM,KAAK,KAAK,QAAQ,KAAK,cAAc,aAAa,cAAc,MAAM;IAC5E,KAAK,gBAAgB;IACrB,eAAe;IACf,IAAI,KAAK,eAAe,oBAAoB;IAE5C,KAAK,YAAY,KAAK,OAAO;IAC7B,MAAM,gBAAgB,KAAK,OAAO,aAAa,CAAC;IAChD,IAAI,KAAK,cAAc,eACjB;SAAA,gBAAgB,KAAK,gBAAA,OACvB,MAAM,IAAI,kBAAkB,iCAAiC;IAAA,OAE1D,IAAI,KAAK,cAAc,YACxB;SAAA,gBAAgB,uBAAuB,gBAAgB,SACzD,MAAM,IAAI,kBAAkB,8BAA8B;IAAA,OAG5D,MAAM,IAAI,kBAAkB,oBAAoB;IAElD,KAAK,UAAU,OAAO,YAAY,aAAa;IAC/C,KAAK,gBAAgB;GACvB;GAEA,MAAM,UAAU,KAAK;GACrB,MAAM,SAAS,KAAK,IAAI,QAAQ,SAAS,KAAK,eAAe,MAAM,SAAS,WAAW;GACvF,MAAM,KAAK,SAAS,KAAK,eAAe,aAAa,cAAc,MAAM;GACzE,KAAK,iBAAiB;GACtB,eAAe;GAEf,IAAI,KAAK,kBAAkB,QAAQ,QAAQ;IACzC,OAAO,KAAK,KAAK,YAAY,KAAK,WAAW,OAAO,CAAC;IACrD,KAAK,WAAW;GAClB;EACF;EACA,OAAO;CACT;CAEA,SAAe;EACb,IAAI,KAAK,iBAAiB,KAAK,KAAK,YAAY,KAAA,GAAW,MAAM,IAAI,kBAAkB,wBAAwB;EAC/G,KAAK,QAAQ;CACf;CAEA,YAAoB,MAAc,SAA4B;EAC5D,IAAI,SAAS,eAAe;GAC1B,IAAI,QAAQ,QAAQ,SAAS,OAAO,IAAM,MAAM,IAAI,kBAAkB,uCAAuC;GAC7G,IAAI;GACJ,IAAI;IACF,QAAQ,KAAK,MAAM,QAAQ,SAAS,GAAG,EAAE,CAAC,CAAC,SAAS,MAAM,CAAC;GAC7D,QAAQ;IACN,MAAM,IAAI,kBAAkB,qCAAqC;GACnE;GACA,IAAI,UAAU,QAAQ,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,GACpE,MAAM,IAAI,kBAAkB,sCAAsC;GAEpE,OAAO;IAAE,MAAM;IAAkB;GAAiC;EACpE;EAEA,MAAM,WAAW,QAAQ,aAAa,CAAC;EACvC,IAAI,aAAa,KAAK,kBAAkB,MAAM,IAAI,kBAAkB,+BAA+B;EACnG,MAAM,iBAAiB,QAAQ,SAAS,GAAG,mBAAmB;EAC9D,MAAM,OAAO,QAAQ,SAAS,mBAAmB;EACjD,MAAM,eAAe,WAAW,QAAQ,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO;EAC9D,IAAI,CAAC,gBAAgB,gBAAgB,YAAY,GAAG,MAAM,IAAI,kBAAkB,4BAA4B;EAC5G,KAAK,oBAAoB;EACzB,OAAO;GAAE,MAAM;GAAQ;GAAU,QAAQ,aAAa,SAAS,KAAK;GAAG,MAAM,OAAO,KAAK,IAAI;EAAE;CACjG;CAEA,aAA2B;EACzB,KAAK,eAAe;EACpB,KAAK,YAAY;EACjB,KAAK,UAAU,KAAA;EACf,KAAK,gBAAgB;CACvB;AACF"}
+{"version":3,"file":"protocol.js","names":[],"sources":["../../../src/core/sync/protocol.ts"],"sourcesContent":["import { createHash, timingSafeEqual } from 'node:crypto'\n\nexport const SYNC_PROTOCOL_VERSION = 1\nexport const SYNC_SESSION_MANIFEST_CAPABILITY = 'session-manifest-v1'\nexport const SYNC_SESSION_EVENT_TAIL_CAPABILITY = 'session-event-tail-delta-v1'\nexport const SYNC_SESSION_BUNDLE_OBJECTS_CAPABILITY = 'session-bundle-objects-v1'\n// 对象带外流：附件/spill 负载不再内联进 bundle JSON，而是通过专用 RPC 以\n// 磁盘到磁盘的帧流传输（内存占用 O(单帧)），单对象与会话引用总量不再受\n// JSON 传输上限约束。两端都声明该能力时才启用，旧版本对端回退内联路径。\nexport const SYNC_SESSION_OBJECT_STREAM_CAPABILITY = 'session-object-stream-v1'\nexport const MAX_SYNC_CONTROL_FRAME_BYTES = 64 * 1024\nexport const MAX_SYNC_DATA_CHUNK_BYTES = 1024 * 1024\n// 单次传输（bundle 请求/响应、原始附件/溢出流）的硬上限。必须远小于宿主进程\n// JS 堆（桌面端约 1.4GB）：JSON.parse 的对象图膨胀约为 JSON 文本的 5-10 倍，\n// 100GB 级上限等于无内存保护。协调器按更小的目标分批传输（见 coordinator.ts）。\n// 注意：该上限只约束 JSON bundle；对象带外流是磁盘流式传输，走独立上限。\nexport const MAX_SYNC_TRANSFER_BYTES = 128 * 1024 * 1024\n// 对象内联进 bundle JSON 的字节阈值：小对象内联（减少往返），大对象走带外流。\nexport const MAX_SESSION_OBJECT_INLINE_BYTES = 256 * 1024\n// 单个带外对象流的字节上限：磁盘到磁盘传输，内存不随体积增长，上限只为\n// 防失控对端无限发送。64GB 覆盖一切真实会话负载。\nexport const MAX_SESSION_OBJECT_STREAM_BYTES = 64 * 1024 * 1024 * 1024\n\nconst FRAME_HEADER_BYTES = 5\nconst CONTROL_FRAME = 0\nconst DATA_FRAME = 1\nconst DATA_METADATA_BYTES = 36\n\nexport type SyncFrame =\n  | { kind: 'control'; value: Record<string, unknown> }\n  | { kind: 'data'; sequence: number; digest: string; data: Buffer }\n\nexport class SyncProtocolError extends Error {\n  constructor(message: string) {\n    super(message)\n    this.name = 'SyncProtocolError'\n  }\n}\n\nfunction makeHeader(type: number, payloadLength: number): Buffer {\n  const header = Buffer.allocUnsafe(FRAME_HEADER_BYTES)\n  header[0] = type\n  header.writeUInt32BE(payloadLength, 1)\n  return header\n}\n\nexport function encodeSyncControlFrame(value: Record<string, unknown>): Buffer {\n  const payload = Buffer.from(`${JSON.stringify(value)}\\n`, 'utf8')\n  if (payload.length > MAX_SYNC_CONTROL_FRAME_BYTES) throw new SyncProtocolError('control frame exceeds size limit')\n  return Buffer.concat([makeHeader(CONTROL_FRAME, payload.length), payload])\n}\n\nexport function encodeSyncDataFrame(sequence: number, data: Buffer): Buffer {\n  if (!Number.isSafeInteger(sequence) || sequence < 0 || sequence > 0xffffffff) {\n    throw new SyncProtocolError('data sequence is invalid')\n  }\n  if (data.length > MAX_SYNC_DATA_CHUNK_BYTES) throw new SyncProtocolError('data chunk exceeds size limit')\n  const metadata = Buffer.allocUnsafe(DATA_METADATA_BYTES)\n  metadata.writeUInt32BE(sequence, 0)\n  createHash('sha256').update(data).digest().copy(metadata, 4)\n  return Buffer.concat([makeHeader(DATA_FRAME, metadata.length + data.length), metadata, data])\n}\n\nexport class SyncFrameDecoder {\n  private readonly header = Buffer.allocUnsafe(FRAME_HEADER_BYTES)\n  private headerOffset = 0\n  private frameType = -1\n  private payload: Buffer | undefined\n  private payloadOffset = 0\n  private nextDataSequence = 0\n  private ended = false\n\n  push(chunk: Buffer): SyncFrame[] {\n    if (this.ended) throw new SyncProtocolError('frame decoder is already finished')\n    const frames: SyncFrame[] = []\n    let inputOffset = 0\n\n    while (inputOffset < chunk.length) {\n      if (!this.payload) {\n        const copied = Math.min(FRAME_HEADER_BYTES - this.headerOffset, chunk.length - inputOffset)\n        chunk.copy(this.header, this.headerOffset, inputOffset, inputOffset + copied)\n        this.headerOffset += copied\n        inputOffset += copied\n        if (this.headerOffset < FRAME_HEADER_BYTES) continue\n\n        this.frameType = this.header[0]\n        const payloadLength = this.header.readUInt32BE(1)\n        if (this.frameType === CONTROL_FRAME) {\n          if (payloadLength < 2 || payloadLength > MAX_SYNC_CONTROL_FRAME_BYTES) {\n            throw new SyncProtocolError('control frame length is invalid')\n          }\n        } else if (this.frameType === DATA_FRAME) {\n          if (payloadLength < DATA_METADATA_BYTES || payloadLength > DATA_METADATA_BYTES + MAX_SYNC_DATA_CHUNK_BYTES) {\n            throw new SyncProtocolError('data frame length is invalid')\n          }\n        } else {\n          throw new SyncProtocolError('unknown frame type')\n        }\n        this.payload = Buffer.allocUnsafe(payloadLength)\n        this.payloadOffset = 0\n      }\n\n      const payload = this.payload\n      const copied = Math.min(payload.length - this.payloadOffset, chunk.length - inputOffset)\n      chunk.copy(payload, this.payloadOffset, inputOffset, inputOffset + copied)\n      this.payloadOffset += copied\n      inputOffset += copied\n\n      if (this.payloadOffset === payload.length) {\n        frames.push(this.decodeFrame(this.frameType, payload))\n        this.resetFrame()\n      }\n    }\n    return frames\n  }\n\n  finish(): void {\n    if (this.headerOffset !== 0 || this.payload !== undefined) throw new SyncProtocolError('truncated frame stream')\n    this.ended = true\n  }\n\n  private decodeFrame(type: number, payload: Buffer): SyncFrame {\n    if (type === CONTROL_FRAME) {\n      if (payload[payload.length - 1] !== 0x0a) throw new SyncProtocolError('control frame must end with a newline')\n      let value: unknown\n      try {\n        value = JSON.parse(payload.subarray(0, -1).toString('utf8'))\n      } catch {\n        throw new SyncProtocolError('control frame contains invalid JSON')\n      }\n      if (value === null || typeof value !== 'object' || Array.isArray(value)) {\n        throw new SyncProtocolError('control frame must contain an object')\n      }\n      return { kind: 'control', value: value as Record<string, unknown> }\n    }\n\n    const sequence = payload.readUInt32BE(0)\n    if (sequence !== this.nextDataSequence) throw new SyncProtocolError('data sequence is out of order')\n    const expectedDigest = payload.subarray(4, DATA_METADATA_BYTES)\n    const data = payload.subarray(DATA_METADATA_BYTES)\n    const actualDigest = createHash('sha256').update(data).digest()\n    if (!timingSafeEqual(expectedDigest, actualDigest)) throw new SyncProtocolError('data chunk digest mismatch')\n    this.nextDataSequence += 1\n    return { kind: 'data', sequence, digest: actualDigest.toString('hex'), data: Buffer.from(data) }\n  }\n\n  private resetFrame(): void {\n    this.headerOffset = 0\n    this.frameType = -1\n    this.payload = undefined\n    this.payloadOffset = 0\n  }\n}\n"],"mappings":";;AAEA,MAAa,wBAAwB;AACrC,MAAa,mCAAmC;AAChD,MAAa,qCAAqC;AAClD,MAAa,yCAAyC;AAItD,MAAa,wCAAwC;AACrD,MAAa,+BAA+B;AAC5C,MAAa,4BAA4B;AAKzC,MAAa,0BAA0B;AAEvC,MAAa,kCAAkC;AAG/C,MAAa,kCAAkC;AAE/C,MAAM,qBAAqB;AAC3B,MAAM,gBAAgB;AACtB,MAAM,aAAa;AACnB,MAAM,sBAAsB;AAM5B,IAAa,oBAAb,cAAuC,MAAM;CAC3C,YAAY,SAAiB;EAC3B,MAAM,OAAO;EACb,KAAK,OAAO;CACd;AACF;AAEA,SAAS,WAAW,MAAc,eAA+B;CAC/D,MAAM,SAAS,OAAO,YAAY,kBAAkB;CACpD,OAAO,KAAK;CACZ,OAAO,cAAc,eAAe,CAAC;CACrC,OAAO;AACT;AAEA,SAAgB,uBAAuB,OAAwC;CAC7E,MAAM,UAAU,OAAO,KAAK,GAAG,KAAK,UAAU,KAAK,EAAE,KAAK,MAAM;CAChE,IAAI,QAAQ,SAAA,OAAuC,MAAM,IAAI,kBAAkB,kCAAkC;CACjH,OAAO,OAAO,OAAO,CAAC,WAAW,eAAe,QAAQ,MAAM,GAAG,OAAO,CAAC;AAC3E;AAEA,SAAgB,oBAAoB,UAAkB,MAAsB;CAC1E,IAAI,CAAC,OAAO,cAAc,QAAQ,KAAK,WAAW,KAAK,WAAW,YAChE,MAAM,IAAI,kBAAkB,0BAA0B;CAExD,IAAI,KAAK,SAAA,SAAoC,MAAM,IAAI,kBAAkB,+BAA+B;CACxG,MAAM,WAAW,OAAO,YAAY,mBAAmB;CACvD,SAAS,cAAc,UAAU,CAAC;CAClC,WAAW,QAAQ,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,UAAU,CAAC;CAC3D,OAAO,OAAO,OAAO;EAAC,WAAW,YAAY,SAAS,SAAS,KAAK,MAAM;EAAG;EAAU;CAAI,CAAC;AAC9F;AAEA,IAAa,mBAAb,MAA8B;CAC5B,SAA0B,OAAO,YAAY,kBAAkB;CAC/D,eAAuB;CACvB,YAAoB;CACpB;CACA,gBAAwB;CACxB,mBAA2B;CAC3B,QAAgB;CAEhB,KAAK,OAA4B;EAC/B,IAAI,KAAK,OAAO,MAAM,IAAI,kBAAkB,mCAAmC;EAC/E,MAAM,SAAsB,CAAC;EAC7B,IAAI,cAAc;EAElB,OAAO,cAAc,MAAM,QAAQ;GACjC,IAAI,CAAC,KAAK,SAAS;IACjB,MAAM,SAAS,KAAK,IAAI,qBAAqB,KAAK,cAAc,MAAM,SAAS,WAAW;IAC1F,MAAM,KAAK,KAAK,QAAQ,KAAK,cAAc,aAAa,cAAc,MAAM;IAC5E,KAAK,gBAAgB;IACrB,eAAe;IACf,IAAI,KAAK,eAAe,oBAAoB;IAE5C,KAAK,YAAY,KAAK,OAAO;IAC7B,MAAM,gBAAgB,KAAK,OAAO,aAAa,CAAC;IAChD,IAAI,KAAK,cAAc,eACjB;SAAA,gBAAgB,KAAK,gBAAA,OACvB,MAAM,IAAI,kBAAkB,iCAAiC;IAAA,OAE1D,IAAI,KAAK,cAAc,YACxB;SAAA,gBAAgB,uBAAuB,gBAAgB,SACzD,MAAM,IAAI,kBAAkB,8BAA8B;IAAA,OAG5D,MAAM,IAAI,kBAAkB,oBAAoB;IAElD,KAAK,UAAU,OAAO,YAAY,aAAa;IAC/C,KAAK,gBAAgB;GACvB;GAEA,MAAM,UAAU,KAAK;GACrB,MAAM,SAAS,KAAK,IAAI,QAAQ,SAAS,KAAK,eAAe,MAAM,SAAS,WAAW;GACvF,MAAM,KAAK,SAAS,KAAK,eAAe,aAAa,cAAc,MAAM;GACzE,KAAK,iBAAiB;GACtB,eAAe;GAEf,IAAI,KAAK,kBAAkB,QAAQ,QAAQ;IACzC,OAAO,KAAK,KAAK,YAAY,KAAK,WAAW,OAAO,CAAC;IACrD,KAAK,WAAW;GAClB;EACF;EACA,OAAO;CACT;CAEA,SAAe;EACb,IAAI,KAAK,iBAAiB,KAAK,KAAK,YAAY,KAAA,GAAW,MAAM,IAAI,kBAAkB,wBAAwB;EAC/G,KAAK,QAAQ;CACf;CAEA,YAAoB,MAAc,SAA4B;EAC5D,IAAI,SAAS,eAAe;GAC1B,IAAI,QAAQ,QAAQ,SAAS,OAAO,IAAM,MAAM,IAAI,kBAAkB,uCAAuC;GAC7G,IAAI;GACJ,IAAI;IACF,QAAQ,KAAK,MAAM,QAAQ,SAAS,GAAG,EAAE,CAAC,CAAC,SAAS,MAAM,CAAC;GAC7D,QAAQ;IACN,MAAM,IAAI,kBAAkB,qCAAqC;GACnE;GACA,IAAI,UAAU,QAAQ,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,GACpE,MAAM,IAAI,kBAAkB,sCAAsC;GAEpE,OAAO;IAAE,MAAM;IAAkB;GAAiC;EACpE;EAEA,MAAM,WAAW,QAAQ,aAAa,CAAC;EACvC,IAAI,aAAa,KAAK,kBAAkB,MAAM,IAAI,kBAAkB,+BAA+B;EACnG,MAAM,iBAAiB,QAAQ,SAAS,GAAG,mBAAmB;EAC9D,MAAM,OAAO,QAAQ,SAAS,mBAAmB;EACjD,MAAM,eAAe,WAAW,QAAQ,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO;EAC9D,IAAI,CAAC,gBAAgB,gBAAgB,YAAY,GAAG,MAAM,IAAI,kBAAkB,4BAA4B;EAC5G,KAAK,oBAAoB;EACzB,OAAO;GAAE,MAAM;GAAQ;GAAU,QAAQ,aAAa,SAAS,KAAK;GAAG,MAAM,OAAO,KAAK,IAAI;EAAE;CACjG;CAEA,aAA2B;EACzB,KAAK,eAAe;EACpB,KAAK,YAAY;EACjB,KAAK,UAAU,KAAA;EACf,KAAK,gBAAgB;CACvB;AACF"}

package/lib/core/sync/remote-helper.js

@@ -5,6 +5,7 @@ const { createHash, timingSafeEqual } = require('node:crypto')
 const MAX_CONTROL = 65536
 const MAX_CHUNK = 1048576
 const MAX_TRANSFER = 107374182400
+const OBJECT_STREAM_LIMIT = 68719476736
 const PATHS = {
   handshake: { path: '/api/dshb/sync/internal/handshake', method: 'GET' },
   'node-manifest': { path: '/api/dshb/sync/internal/nodes/manifest', method: 'GET' },
@@ -13,9 +14,11 @@ const PATHS = {
   'session-manifest': { path: '/api/dshb/sync/internal/sessions/manifest', method: 'GET' },
   'session-entries': { path: '/api/dshb/sync/internal/sessions/entries', method: 'POST' },
   'session-apply': { path: '/api/dshb/sync/internal/sessions/apply', method: 'POST' },
+  'session-objects': { path: '/api/dshb/sync/internal/sessions/objects', method: 'POST' },
+  'session-objects-push': { path: '/api/dshb/sync/internal/sessions/objects', method: 'POST' },
 }
-const input = []
-let inputBytes = 0
+const BUFFERED_BODY_OPERATIONS = ['node-apply', 'session-entries', 'session-apply', 'session-objects']
+const STREAMING_RESPONSE_OPERATIONS = ['node-manifest', 'session-bundle', 'session-manifest', 'session-entries', 'session-objects']
 
 function encodeControl(value) {
   const body = Buffer.from(JSON.stringify(value) + '\n', 'utf8')
@@ -38,69 +41,116 @@ function encodeData(sequence, data) {
   return Buffer.concat([header, payload])
 }
 
-function decodeFrames(buffer) {
-  const frames = []
-  let offset = 0
-  let sequence = 0
-  let totalData = 0
-  while (offset < buffer.length) {
-    if (buffer.length - offset < 5) throw new Error('truncated frame header')
-    const kind = buffer[offset]
-    const length = buffer.readUInt32BE(offset + 1)
-    offset += 5
-    const maxLength = kind === 0 ? MAX_CONTROL : 36 + MAX_CHUNK
-    if ((kind !== 0 && kind !== 1) || length > maxLength || length > buffer.length - offset) {
-      throw new Error('invalid frame length')
-    }
-    const payload = buffer.subarray(offset, offset + length)
-    offset += length
-    if (kind === 0) {
-      if (length < 2 || payload[length - 1] !== 10) throw new Error('invalid control frame')
-      frames.push({ kind: 'control', value: JSON.parse(payload.subarray(0, -1).toString('utf8')) })
-    } else {
-      if (length < 36) throw new Error('invalid data frame')
-      const currentSequence = payload.readUInt32BE(0)
-      const expected = payload.subarray(4, 36)
-      const data = payload.subarray(36)
-      const actual = createHash('sha256').update(data).digest()
-      if (currentSequence !== sequence || !timingSafeEqual(expected, actual)) throw new Error('invalid data chunk')
-      sequence += 1
-      totalData += data.length
-      if (totalData > MAX_TRANSFER) throw new Error('transfer exceeds size limit')
-      frames.push({ kind: 'data', data })
+function decodeOneFrame(kind, payload, state) {
+  if (kind === 0) {
+    if (payload.length < 2 || payload[payload.length - 1] !== 10) throw new Error('invalid control frame')
+    return { kind: 'control', value: JSON.parse(payload.subarray(0, -1).toString('utf8')) }
+  }
+  if (payload.length < 36) throw new Error('invalid data frame')
+  const currentSequence = payload.readUInt32BE(0)
+  const expected = payload.subarray(4, 36)
+  const data = payload.subarray(36)
+  const actual = createHash('sha256').update(data).digest()
+  if (currentSequence !== state.sequence || !timingSafeEqual(expected, actual)) throw new Error('invalid data chunk')
+  state.sequence += 1
+  state.totalData += data.length
+  if (state.totalData > MAX_TRANSFER && state.totalData > OBJECT_STREAM_LIMIT) throw new Error('transfer exceeds size limit')
+  return { kind: 'data', data }
+}
+
+async function readFrame(iterator, state) {
+  for (;;) {
+    if (state.buffer.length >= 5) {
+      const kind = state.buffer[0]
+      const length = state.buffer.readUInt32BE(1)
+      const maxLength = kind === 0 ? MAX_CONTROL : 36 + MAX_CHUNK
+      if ((kind !== 0 && kind !== 1) || length > maxLength) throw new Error('invalid frame length')
+      if (state.buffer.length >= 5 + length) {
+        const payload = state.buffer.subarray(5, 5 + length)
+        state.buffer = state.buffer.subarray(5 + length)
+        return decodeOneFrame(kind, payload, state)
+      }
     }
+    const next = await iterator.next()
+    if (next.done) throw new Error('helper input ended inside a frame')
+    state.buffer = Buffer.concat([state.buffer, Buffer.from(next.value)])
   }
-  return frames
 }
 
-function parseRequest(buffer) {
-  const frames = decodeFrames(buffer)
-  const first = frames[0]
-  if (!first || first.kind !== 'control') throw new Error('request control frame required')
-  const request = first.value
+function validateRequest(request) {
   if (!request || request.kind !== 'request' || request.protocolVersion !== 1 || !Object.prototype.hasOwnProperty.call(PATHS, request.operation)) {
     throw new Error('unsupported helper request')
   }
-  if (Object.keys(request).some((key) => !['kind', 'protocolVersion', 'operation', 'port'].includes(key))) {
+  if (Object.keys(request).some(function (key) { return ['kind', 'protocolVersion', 'operation', 'port'].indexOf(key) < 0 })) {
     throw new Error('unsupported helper request field')
   }
   if (!Number.isInteger(request.port) || request.port < 1 || request.port > 65535) throw new Error('invalid loopback port')
-  const operation = PATHS[request.operation]
-  if (request.operation === 'node-apply' || request.operation === 'session-entries' || request.operation === 'session-apply') {
-    const last = frames[frames.length - 1]
-    if (!last || last.kind !== 'control' || last.value.kind !== 'request-end') throw new Error('apply request terminator required')
-    if (frames.slice(1, -1).some((frame) => frame.kind !== 'data')) throw new Error('invalid apply request body')
-    const chunks = frames.slice(1, -1).map((frame) => frame.data)
-    return { request, operation, body: Buffer.concat(chunks) }
-  }
-  if (frames.length !== 1) throw new Error('unexpected helper request frames')
-  return { request, operation }
+  return PATHS[request.operation]
+}
+
+function writeStdout(data) {
+  return new Promise(function (resolve, reject) {
+    if (process.stdout.write(data)) resolve()
+    else process.stdout.once('drain', resolve)
+  })
 }
 
 async function run() {
-  const buffer = Buffer.concat(input, inputBytes)
-  const { request, operation, body } = parseRequest(buffer)
+  const iterator = process.stdin[Symbol.asyncIterator]()
+  const state = { buffer: Buffer.alloc(0), sequence: 0, totalData: 0 }
+  const first = await readFrame(iterator, state)
+  if (first.kind !== 'control' || first.value.kind !== 'request') throw new Error('request control frame required')
+  const request = first.value
+  const operation = validateRequest(request)
   const url = 'http://127.0.0.1:' + request.port + operation.path
+
+  if (request.operation === 'session-objects-push') {
+    // 对象推送：请求体（对象帧流）直接转发为 HTTP 流式请求体，内存 O(帧)。
+    const { Readable } = require('node:stream')
+    const bodyStream = new Readable({ read: function () {} })
+    const pump = (async function () {
+      try {
+        for (;;) {
+          const frame = await readFrame(iterator, state)
+          if (frame.kind === 'control' && frame.value.kind === 'request-end') break
+          if (frame.kind !== 'data') throw new Error('invalid object push frame')
+          if (!bodyStream.push(Buffer.from(frame.data))) {
+            await new Promise(function (resolve) { bodyStream.once('drain', resolve) })
+          }
+        }
+        bodyStream.push(null)
+      } catch (error) {
+        bodyStream.destroy(error)
+      }
+    })()
+    const response = await fetch(url, {
+      method: 'POST',
+      redirect: 'error',
+      headers: { 'content-type': 'application/x-dshb-object-stream' },
+      body: bodyStream,
+      duplex: 'half',
+    })
+    const text = await response.text()
+    if (Buffer.byteLength(text, 'utf8') > MAX_CONTROL) throw new Error('response control frame too large')
+    await writeStdout(encodeControl({ kind: 'response', status: response.status, body: JSON.parse(text) }))
+    if (!response.ok) process.exitCode = 1
+    await pump
+    return
+  }
+
+  let body
+  if (BUFFERED_BODY_OPERATIONS.indexOf(request.operation) >= 0) {
+    // 帧序：control(request) → data… → control(request-end)。
+    const chunks = []
+    for (;;) {
+      const frame = await readFrame(iterator, state)
+      if (frame.kind === 'control' && frame.value.kind === 'request-end') break
+      if (frame.kind !== 'data') throw new Error('invalid apply request body')
+      chunks.push(frame.data)
+    }
+    body = Buffer.concat(chunks)
+  }
+
   const response = await fetch(url, {
     method: operation.method,
     redirect: 'error',
@@ -108,23 +158,15 @@ async function run() {
     ...(body ? { body } : {}),
   })
 
-  function writeStdout(data) {
-    return new Promise(function(resolve, reject) {
-      if (process.stdout.write(data)) resolve()
-      else process.stdout.once('drain', resolve)
-    })
-  }
-
-  if (request.operation === 'node-manifest' || request.operation === 'session-bundle' ||
-      request.operation === 'session-manifest' || request.operation === 'session-entries') {
+  if (STREAMING_RESPONSE_OPERATIONS.indexOf(request.operation) >= 0) {
     await writeStdout(encodeControl({ kind: 'response', status: response.status, bodyMode: 'data' }))
-    if (!response.body) throw new Error('manifest response body missing')
+    if (!response.body) throw new Error('streaming response body missing')
     var sequence = 0
     var total = 0
     for await (var chunk of response.body) {
       var data = Buffer.from(chunk)
       total += data.length
-      if (total > MAX_TRANSFER) throw new Error('manifest exceeds size limit')
+      if (total > MAX_TRANSFER && total > OBJECT_STREAM_LIMIT) throw new Error('response exceeds size limit')
       for (var offset = 0; offset < data.length; offset += MAX_CHUNK) {
         await writeStdout(encodeData(sequence++, data.subarray(offset, Math.min(offset + MAX_CHUNK, data.length))))
       }
@@ -143,20 +185,9 @@ async function run() {
   if (!response.ok && !recoverableDeltaMismatch) process.exitCode = 1
 }
 
-process.stdin.on('data', (chunk) => {
-  inputBytes += chunk.length
-  if (inputBytes > MAX_TRANSFER + 2 * MAX_CONTROL) {
-    process.exitCode = 1
-    process.stdin.destroy()
-    return
-  }
-  input.push(Buffer.from(chunk))
-})
-process.stdin.on('end', () => {
-  run().catch(() => {
-    try { process.stdout.write(encodeControl({ kind: 'error', code: 'helper-failed' })) } catch {}
-    process.exitCode = 1
-  })
+run().catch(function () {
+  try { process.stdout.write(encodeControl({ kind: 'error', code: 'helper-failed' })) } catch (err) {}
+  process.exitCode = 1
 })
 `;
 const REMOTE_SYNC_HELPER_COMMAND = `node -e 'eval(Buffer.from("${Buffer.from(REMOTE_HELPER_SOURCE, "utf8").toString("base64")}","base64").toString("utf8"))'`;

package/lib/core/sync/remote-helper.js.map

@@ -1 +1 @@
-{"version":3,"file":"remote-helper.js","names":[],"sources":["../../../src/core/sync/remote-helper.ts"],"sourcesContent":["import { Buffer } from 'node:buffer'\n\nconst REMOTE_HELPER_SOURCE = String.raw`'use strict'\nconst { createHash, timingSafeEqual } = require('node:crypto')\nconst MAX_CONTROL = 65536\nconst MAX_CHUNK = 1048576\nconst MAX_TRANSFER = 107374182400\nconst PATHS = {\n  handshake: { path: '/api/dshb/sync/internal/handshake', method: 'GET' },\n  'node-manifest': { path: '/api/dshb/sync/internal/nodes/manifest', method: 'GET' },\n  'node-apply': { path: '/api/dshb/sync/internal/nodes/apply', method: 'POST' },\n  'session-bundle': { path: '/api/dshb/sync/internal/sessions/bundle', method: 'GET' },\n  'session-manifest': { path: '/api/dshb/sync/internal/sessions/manifest', method: 'GET' },\n  'session-entries': { path: '/api/dshb/sync/internal/sessions/entries', method: 'POST' },\n  'session-apply': { path: '/api/dshb/sync/internal/sessions/apply', method: 'POST' },\n}\nconst input = []\nlet inputBytes = 0\n\nfunction encodeControl(value) {\n  const body = Buffer.from(JSON.stringify(value) + '\\n', 'utf8')\n  if (body.length > MAX_CONTROL) throw new Error('control frame too large')\n  const header = Buffer.alloc(5)\n  header[0] = 0\n  header.writeUInt32BE(body.length, 1)\n  return Buffer.concat([header, body])\n}\n\nfunction encodeData(sequence, data) {\n  const digest = createHash('sha256').update(data).digest()\n  const metadata = Buffer.alloc(36)\n  metadata.writeUInt32BE(sequence, 0)\n  digest.copy(metadata, 4)\n  const payload = Buffer.concat([metadata, data])\n  const header = Buffer.alloc(5)\n  header[0] = 1\n  header.writeUInt32BE(payload.length, 1)\n  return Buffer.concat([header, payload])\n}\n\nfunction decodeFrames(buffer) {\n  const frames = []\n  let offset = 0\n  let sequence = 0\n  let totalData = 0\n  while (offset < buffer.length) {\n    if (buffer.length - offset < 5) throw new Error('truncated frame header')\n    const kind = buffer[offset]\n    const length = buffer.readUInt32BE(offset + 1)\n    offset += 5\n    const maxLength = kind === 0 ? MAX_CONTROL : 36 + MAX_CHUNK\n    if ((kind !== 0 && kind !== 1) || length > maxLength || length > buffer.length - offset) {\n      throw new Error('invalid frame length')\n    }\n    const payload = buffer.subarray(offset, offset + length)\n    offset += length\n    if (kind === 0) {\n      if (length < 2 || payload[length - 1] !== 10) throw new Error('invalid control frame')\n      frames.push({ kind: 'control', value: JSON.parse(payload.subarray(0, -1).toString('utf8')) })\n    } else {\n      if (length < 36) throw new Error('invalid data frame')\n      const currentSequence = payload.readUInt32BE(0)\n      const expected = payload.subarray(4, 36)\n      const data = payload.subarray(36)\n      const actual = createHash('sha256').update(data).digest()\n      if (currentSequence !== sequence || !timingSafeEqual(expected, actual)) throw new Error('invalid data chunk')\n      sequence += 1\n      totalData += data.length\n      if (totalData > MAX_TRANSFER) throw new Error('transfer exceeds size limit')\n      frames.push({ kind: 'data', data })\n    }\n  }\n  return frames\n}\n\nfunction parseRequest(buffer) {\n  const frames = decodeFrames(buffer)\n  const first = frames[0]\n  if (!first || first.kind !== 'control') throw new Error('request control frame required')\n  const request = first.value\n  if (!request || request.kind !== 'request' || request.protocolVersion !== 1 || !Object.prototype.hasOwnProperty.call(PATHS, request.operation)) {\n    throw new Error('unsupported helper request')\n  }\n  if (Object.keys(request).some((key) => !['kind', 'protocolVersion', 'operation', 'port'].includes(key))) {\n    throw new Error('unsupported helper request field')\n  }\n  if (!Number.isInteger(request.port) || request.port < 1 || request.port > 65535) throw new Error('invalid loopback port')\n  const operation = PATHS[request.operation]\n  if (request.operation === 'node-apply' || request.operation === 'session-entries' || request.operation === 'session-apply') {\n    const last = frames[frames.length - 1]\n    if (!last || last.kind !== 'control' || last.value.kind !== 'request-end') throw new Error('apply request terminator required')\n    if (frames.slice(1, -1).some((frame) => frame.kind !== 'data')) throw new Error('invalid apply request body')\n    const chunks = frames.slice(1, -1).map((frame) => frame.data)\n    return { request, operation, body: Buffer.concat(chunks) }\n  }\n  if (frames.length !== 1) throw new Error('unexpected helper request frames')\n  return { request, operation }\n}\n\nasync function run() {\n  const buffer = Buffer.concat(input, inputBytes)\n  const { request, operation, body } = parseRequest(buffer)\n  const url = 'http://127.0.0.1:' + request.port + operation.path\n  const response = await fetch(url, {\n    method: operation.method,\n    redirect: 'error',\n    headers: { accept: 'application/json', ...(body ? { 'content-type': 'application/json' } : {}) },\n    ...(body ? { body } : {}),\n  })\n\n  function writeStdout(data) {\n    return new Promise(function(resolve, reject) {\n      if (process.stdout.write(data)) resolve()\n      else process.stdout.once('drain', resolve)\n    })\n  }\n\n  if (request.operation === 'node-manifest' || request.operation === 'session-bundle' ||\n      request.operation === 'session-manifest' || request.operation === 'session-entries') {\n    await writeStdout(encodeControl({ kind: 'response', status: response.status, bodyMode: 'data' }))\n    if (!response.body) throw new Error('manifest response body missing')\n    var sequence = 0\n    var total = 0\n    for await (var chunk of response.body) {\n      var data = Buffer.from(chunk)\n      total += data.length\n      if (total > MAX_TRANSFER) throw new Error('manifest exceeds size limit')\n      for (var offset = 0; offset < data.length; offset += MAX_CHUNK) {\n        await writeStdout(encodeData(sequence++, data.subarray(offset, Math.min(offset + MAX_CHUNK, data.length))))\n      }\n    }\n    await writeStdout(encodeControl({ kind: 'response-end' }))\n    if (!response.ok) process.exitCode = 1\n    return\n  }\n\n  var text = await response.text()\n  if (Buffer.byteLength(text, 'utf8') > MAX_CONTROL) throw new Error('response control frame too large')\n  var responseBody = JSON.parse(text)\n  await writeStdout(encodeControl({ kind: 'response', status: response.status, body: responseBody }))\n  var recoverableDeltaMismatch = request.operation === 'session-apply' && response.status === 409 &&\n    responseBody && responseBody.code === 'session-delta-prefix'\n  if (!response.ok && !recoverableDeltaMismatch) process.exitCode = 1\n}\n\nprocess.stdin.on('data', (chunk) => {\n  inputBytes += chunk.length\n  if (inputBytes > MAX_TRANSFER + 2 * MAX_CONTROL) {\n    process.exitCode = 1\n    process.stdin.destroy()\n    return\n  }\n  input.push(Buffer.from(chunk))\n})\nprocess.stdin.on('end', () => {\n  run().catch(() => {\n    try { process.stdout.write(encodeControl({ kind: 'error', code: 'helper-failed' })) } catch {}\n    process.exitCode = 1\n  })\n})\n`\n\nconst REMOTE_HELPER_BASE64 = Buffer.from(REMOTE_HELPER_SOURCE, 'utf8').toString('base64')\n\nexport const REMOTE_SYNC_HELPER_COMMAND =\n  `node -e 'eval(Buffer.from(\"${REMOTE_HELPER_BASE64}\",\"base64\").toString(\"utf8\"))'`\n"],"mappings":";;AAEA,MAAM,uBAAuB,OAAO,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkKvC,MAAa,6BACX,8BAH2B,OAAO,KAAK,sBAAsB,MAAM,CAAC,CAAC,SAAS,QAGhD,EAAqB"}
+{"version":3,"file":"remote-helper.js","names":[],"sources":["../../../src/core/sync/remote-helper.ts"],"sourcesContent":["import { Buffer } from 'node:buffer'\n\nconst REMOTE_HELPER_SOURCE = String.raw`'use strict'\nconst { createHash, timingSafeEqual } = require('node:crypto')\nconst MAX_CONTROL = 65536\nconst MAX_CHUNK = 1048576\nconst MAX_TRANSFER = 107374182400\nconst OBJECT_STREAM_LIMIT = 68719476736\nconst PATHS = {\n  handshake: { path: '/api/dshb/sync/internal/handshake', method: 'GET' },\n  'node-manifest': { path: '/api/dshb/sync/internal/nodes/manifest', method: 'GET' },\n  'node-apply': { path: '/api/dshb/sync/internal/nodes/apply', method: 'POST' },\n  'session-bundle': { path: '/api/dshb/sync/internal/sessions/bundle', method: 'GET' },\n  'session-manifest': { path: '/api/dshb/sync/internal/sessions/manifest', method: 'GET' },\n  'session-entries': { path: '/api/dshb/sync/internal/sessions/entries', method: 'POST' },\n  'session-apply': { path: '/api/dshb/sync/internal/sessions/apply', method: 'POST' },\n  'session-objects': { path: '/api/dshb/sync/internal/sessions/objects', method: 'POST' },\n  'session-objects-push': { path: '/api/dshb/sync/internal/sessions/objects', method: 'POST' },\n}\nconst BUFFERED_BODY_OPERATIONS = ['node-apply', 'session-entries', 'session-apply', 'session-objects']\nconst STREAMING_RESPONSE_OPERATIONS = ['node-manifest', 'session-bundle', 'session-manifest', 'session-entries', 'session-objects']\n\nfunction encodeControl(value) {\n  const body = Buffer.from(JSON.stringify(value) + '\\n', 'utf8')\n  if (body.length > MAX_CONTROL) throw new Error('control frame too large')\n  const header = Buffer.alloc(5)\n  header[0] = 0\n  header.writeUInt32BE(body.length, 1)\n  return Buffer.concat([header, body])\n}\n\nfunction encodeData(sequence, data) {\n  const digest = createHash('sha256').update(data).digest()\n  const metadata = Buffer.alloc(36)\n  metadata.writeUInt32BE(sequence, 0)\n  digest.copy(metadata, 4)\n  const payload = Buffer.concat([metadata, data])\n  const header = Buffer.alloc(5)\n  header[0] = 1\n  header.writeUInt32BE(payload.length, 1)\n  return Buffer.concat([header, payload])\n}\n\nfunction decodeOneFrame(kind, payload, state) {\n  if (kind === 0) {\n    if (payload.length < 2 || payload[payload.length - 1] !== 10) throw new Error('invalid control frame')\n    return { kind: 'control', value: JSON.parse(payload.subarray(0, -1).toString('utf8')) }\n  }\n  if (payload.length < 36) throw new Error('invalid data frame')\n  const currentSequence = payload.readUInt32BE(0)\n  const expected = payload.subarray(4, 36)\n  const data = payload.subarray(36)\n  const actual = createHash('sha256').update(data).digest()\n  if (currentSequence !== state.sequence || !timingSafeEqual(expected, actual)) throw new Error('invalid data chunk')\n  state.sequence += 1\n  state.totalData += data.length\n  if (state.totalData > MAX_TRANSFER && state.totalData > OBJECT_STREAM_LIMIT) throw new Error('transfer exceeds size limit')\n  return { kind: 'data', data }\n}\n\nasync function readFrame(iterator, state) {\n  for (;;) {\n    if (state.buffer.length >= 5) {\n      const kind = state.buffer[0]\n      const length = state.buffer.readUInt32BE(1)\n      const maxLength = kind === 0 ? MAX_CONTROL : 36 + MAX_CHUNK\n      if ((kind !== 0 && kind !== 1) || length > maxLength) throw new Error('invalid frame length')\n      if (state.buffer.length >= 5 + length) {\n        const payload = state.buffer.subarray(5, 5 + length)\n        state.buffer = state.buffer.subarray(5 + length)\n        return decodeOneFrame(kind, payload, state)\n      }\n    }\n    const next = await iterator.next()\n    if (next.done) throw new Error('helper input ended inside a frame')\n    state.buffer = Buffer.concat([state.buffer, Buffer.from(next.value)])\n  }\n}\n\nfunction validateRequest(request) {\n  if (!request || request.kind !== 'request' || request.protocolVersion !== 1 || !Object.prototype.hasOwnProperty.call(PATHS, request.operation)) {\n    throw new Error('unsupported helper request')\n  }\n  if (Object.keys(request).some(function (key) { return ['kind', 'protocolVersion', 'operation', 'port'].indexOf(key) < 0 })) {\n    throw new Error('unsupported helper request field')\n  }\n  if (!Number.isInteger(request.port) || request.port < 1 || request.port > 65535) throw new Error('invalid loopback port')\n  return PATHS[request.operation]\n}\n\nfunction writeStdout(data) {\n  return new Promise(function (resolve, reject) {\n    if (process.stdout.write(data)) resolve()\n    else process.stdout.once('drain', resolve)\n  })\n}\n\nasync function run() {\n  const iterator = process.stdin[Symbol.asyncIterator]()\n  const state = { buffer: Buffer.alloc(0), sequence: 0, totalData: 0 }\n  const first = await readFrame(iterator, state)\n  if (first.kind !== 'control' || first.value.kind !== 'request') throw new Error('request control frame required')\n  const request = first.value\n  const operation = validateRequest(request)\n  const url = 'http://127.0.0.1:' + request.port + operation.path\n\n  if (request.operation === 'session-objects-push') {\n    // 对象推送：请求体（对象帧流）直接转发为 HTTP 流式请求体，内存 O(帧)。\n    const { Readable } = require('node:stream')\n    const bodyStream = new Readable({ read: function () {} })\n    const pump = (async function () {\n      try {\n        for (;;) {\n          const frame = await readFrame(iterator, state)\n          if (frame.kind === 'control' && frame.value.kind === 'request-end') break\n          if (frame.kind !== 'data') throw new Error('invalid object push frame')\n          if (!bodyStream.push(Buffer.from(frame.data))) {\n            await new Promise(function (resolve) { bodyStream.once('drain', resolve) })\n          }\n        }\n        bodyStream.push(null)\n      } catch (error) {\n        bodyStream.destroy(error)\n      }\n    })()\n    const response = await fetch(url, {\n      method: 'POST',\n      redirect: 'error',\n      headers: { 'content-type': 'application/x-dshb-object-stream' },\n      body: bodyStream,\n      duplex: 'half',\n    })\n    const text = await response.text()\n    if (Buffer.byteLength(text, 'utf8') > MAX_CONTROL) throw new Error('response control frame too large')\n    await writeStdout(encodeControl({ kind: 'response', status: response.status, body: JSON.parse(text) }))\n    if (!response.ok) process.exitCode = 1\n    await pump\n    return\n  }\n\n  let body\n  if (BUFFERED_BODY_OPERATIONS.indexOf(request.operation) >= 0) {\n    // 帧序：control(request) → data… → control(request-end)。\n    const chunks = []\n    for (;;) {\n      const frame = await readFrame(iterator, state)\n      if (frame.kind === 'control' && frame.value.kind === 'request-end') break\n      if (frame.kind !== 'data') throw new Error('invalid apply request body')\n      chunks.push(frame.data)\n    }\n    body = Buffer.concat(chunks)\n  }\n\n  const response = await fetch(url, {\n    method: operation.method,\n    redirect: 'error',\n    headers: { accept: 'application/json', ...(body ? { 'content-type': 'application/json' } : {}) },\n    ...(body ? { body } : {}),\n  })\n\n  if (STREAMING_RESPONSE_OPERATIONS.indexOf(request.operation) >= 0) {\n    await writeStdout(encodeControl({ kind: 'response', status: response.status, bodyMode: 'data' }))\n    if (!response.body) throw new Error('streaming response body missing')\n    var sequence = 0\n    var total = 0\n    for await (var chunk of response.body) {\n      var data = Buffer.from(chunk)\n      total += data.length\n      if (total > MAX_TRANSFER && total > OBJECT_STREAM_LIMIT) throw new Error('response exceeds size limit')\n      for (var offset = 0; offset < data.length; offset += MAX_CHUNK) {\n        await writeStdout(encodeData(sequence++, data.subarray(offset, Math.min(offset + MAX_CHUNK, data.length))))\n      }\n    }\n    await writeStdout(encodeControl({ kind: 'response-end' }))\n    if (!response.ok) process.exitCode = 1\n    return\n  }\n\n  var text = await response.text()\n  if (Buffer.byteLength(text, 'utf8') > MAX_CONTROL) throw new Error('response control frame too large')\n  var responseBody = JSON.parse(text)\n  await writeStdout(encodeControl({ kind: 'response', status: response.status, body: responseBody }))\n  var recoverableDeltaMismatch = request.operation === 'session-apply' && response.status === 409 &&\n    responseBody && responseBody.code === 'session-delta-prefix'\n  if (!response.ok && !recoverableDeltaMismatch) process.exitCode = 1\n}\n\nrun().catch(function () {\n  try { process.stdout.write(encodeControl({ kind: 'error', code: 'helper-failed' })) } catch (err) {}\n  process.exitCode = 1\n})\n`\n\nconst REMOTE_HELPER_BASE64 = Buffer.from(REMOTE_HELPER_SOURCE, 'utf8').toString('base64')\n\nexport const REMOTE_SYNC_HELPER_COMMAND =\n  `node -e 'eval(Buffer.from(\"${REMOTE_HELPER_BASE64}\",\"base64\").toString(\"utf8\"))'`\n"],"mappings":";;AAEA,MAAM,uBAAuB,OAAO,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAiMvC,MAAa,6BACX,8BAH2B,OAAO,KAAK,sBAAsB,MAAM,CAAC,CAAC,SAAS,QAGhD,EAAqB"}

package/lib/core/sync/routes.d.ts

@@ -1,5 +1,5 @@
 import { SyncPeerManager } from "./peer-manager.js";
-import { s as SyncSshTransport } from "../../ssh-transport-Cfb_nwkY.js";
+import { s as SyncSshTransport } from "../../ssh-transport-B2oNDs0D.js";
 import { SyncCoordinator } from "./coordinator.js";
 import { Context } from "@deepseek-ai/cordis";
 //#region src/core/sync/routes.d.ts

package/lib/core/sync/session-routes.d.ts

@@ -1,4 +1,4 @@
-import { p as SyncSessionService } from "../../session-sync-Zfo1Q-qT.js";
+import { h as SyncSessionService } from "../../session-sync-BuOJvFxK.js";
 import { Context } from "@deepseek-ai/cordis";
 //#region src/core/sync/session-routes.d.ts
 declare function registerSyncSessionRoutes(ctx: Context, sessions: SyncSessionService): void;

package/lib/core/sync/session-routes.js

@@ -1,4 +1,4 @@
-import { n as SyncSessionError } from "../../session-sync-BQt3HXkp.js";
+import { n as SyncSessionError } from "../../session-sync-CIqjuWkh.js";
 //#region src/core/sync/session-routes.ts
 function sendJson(res, status, body) {
 	res.writeHead(status, {

package/lib/core/sync/session-sync.d.ts

@@ -1,2 +1,2 @@
-import { C as validateSyncSessionBundle, S as syncSessionEntryKey, _ as estimateJsonBytes, a as SyncSessionEntry, b as planSessionTransfers, c as SyncSessionEventPrefix, d as SyncSessionManifestEntry, f as SyncSessionObject, g as WorkspaceRegistryLike, h as SyncSessionWorkspace, i as SyncSessionBundle, l as SyncSessionInstructionSnapshot, m as SyncSessionTransferPlan, n as SyncSessionApplyOptions, o as SyncSessionError, p as SyncSessionService, r as SyncSessionApplyResult, s as SyncSessionEventDelta, t as ExportObjectCache, u as SyncSessionManifest, v as makeSyncSessionBundle, w as validateSyncSessionManifest, x as sessionEventListDigest, y as makeSyncSessionManifest } from "../../session-sync-Zfo1Q-qT.js";
-export { ExportObjectCache, SyncSessionApplyOptions, SyncSessionApplyResult, SyncSessionBundle, SyncSessionEntry, SyncSessionError, SyncSessionEventDelta, SyncSessionEventPrefix, SyncSessionInstructionSnapshot, SyncSessionManifest, SyncSessionManifestEntry, SyncSessionObject, SyncSessionService, SyncSessionTransferPlan, SyncSessionWorkspace, WorkspaceRegistryLike, estimateJsonBytes, makeSyncSessionBundle, makeSyncSessionManifest, planSessionTransfers, sessionEventListDigest, syncSessionEntryKey, validateSyncSessionBundle, validateSyncSessionManifest };
+import { C as sessionEventListDigest, D as validateSyncSessionManifest, E as validateSyncSessionBundle, S as planSessionTransfers, T as validateObjectPayload, _ as SyncSessionWorkspace, a as SyncSessionBundle, b as makeSyncSessionBundle, c as SyncSessionEventDelta, d as SyncSessionManifest, f as SyncSessionManifestEntry, g as SyncSessionTransferPlan, h as SyncSessionService, i as SyncSessionApplyResult, l as SyncSessionEventPrefix, m as SyncSessionObjectInbox, n as SyncObjectInboxWriter, o as SyncSessionEntry, p as SyncSessionObject, r as SyncSessionApplyOptions, s as SyncSessionError, t as ExportObjectCache, u as SyncSessionInstructionSnapshot, v as WorkspaceRegistryLike, w as syncSessionEntryKey, x as makeSyncSessionManifest, y as estimateJsonBytes } from "../../session-sync-BuOJvFxK.js";
+export { ExportObjectCache, SyncObjectInboxWriter, SyncSessionApplyOptions, SyncSessionApplyResult, SyncSessionBundle, SyncSessionEntry, SyncSessionError, SyncSessionEventDelta, SyncSessionEventPrefix, SyncSessionInstructionSnapshot, SyncSessionManifest, SyncSessionManifestEntry, SyncSessionObject, SyncSessionObjectInbox, SyncSessionService, SyncSessionTransferPlan, SyncSessionWorkspace, WorkspaceRegistryLike, estimateJsonBytes, makeSyncSessionBundle, makeSyncSessionManifest, planSessionTransfers, sessionEventListDigest, syncSessionEntryKey, validateObjectPayload, validateSyncSessionBundle, validateSyncSessionManifest };

package/lib/core/sync/session-sync.js

@@ -1,2 +1,2 @@
-import { a as makeSyncSessionBundle, c as sessionEventListDigest, d as validateSyncSessionManifest, i as estimateJsonBytes, l as syncSessionEntryKey, n as SyncSessionError, o as makeSyncSessionManifest, r as SyncSessionService, s as planSessionTransfers, t as ExportObjectCache, u as validateSyncSessionBundle } from "../../session-sync-BQt3HXkp.js";
-export { ExportObjectCache, SyncSessionError, SyncSessionService, estimateJsonBytes, makeSyncSessionBundle, makeSyncSessionManifest, planSessionTransfers, sessionEventListDigest, syncSessionEntryKey, validateSyncSessionBundle, validateSyncSessionManifest };
+import { a as estimateJsonBytes, c as planSessionTransfers, d as validateObjectPayload, f as validateSyncSessionBundle, i as SyncSessionService, l as sessionEventListDigest, n as SyncSessionError, o as makeSyncSessionBundle, p as validateSyncSessionManifest, r as SyncSessionObjectInbox, s as makeSyncSessionManifest, t as ExportObjectCache, u as syncSessionEntryKey } from "../../session-sync-CIqjuWkh.js";
+export { ExportObjectCache, SyncSessionError, SyncSessionObjectInbox, SyncSessionService, estimateJsonBytes, makeSyncSessionBundle, makeSyncSessionManifest, planSessionTransfers, sessionEventListDigest, syncSessionEntryKey, validateObjectPayload, validateSyncSessionBundle, validateSyncSessionManifest };

package/lib/core/sync/ssh-transport.d.ts

@@ -1,2 +1,2 @@
-import { a as SyncSshProbeError, c as buildSyncSshConnectConfig, i as SyncSshErrorCategory, n as SyncRemoteNodeManifest, o as SyncSshSession, r as SyncSessionDeltaPrefixError, s as SyncSshTransport, t as SyncRemoteHandshake } from "../../ssh-transport-Cfb_nwkY.js";
+import { a as SyncSshProbeError, c as buildSyncSshConnectConfig, i as SyncSshErrorCategory, n as SyncRemoteNodeManifest, o as SyncSshSession, r as SyncSessionDeltaPrefixError, s as SyncSshTransport, t as SyncRemoteHandshake } from "../../ssh-transport-B2oNDs0D.js";
 export { SyncRemoteHandshake, SyncRemoteNodeManifest, SyncSessionDeltaPrefixError, SyncSshErrorCategory, SyncSshProbeError, SyncSshSession, SyncSshTransport, buildSyncSshConnectConfig };

package/lib/core/sync/ssh-transport.js

@@ -296,11 +296,12 @@ var SyncSshTransport = class {
 		if (manifest.protocolVersion !== 1 || typeof manifest.instanceId !== "string" || !Array.isArray(manifest.entries) || !Array.isArray(manifest.skipped) || typeof manifest.digest !== "string") throw new SyncSshProbeError("protocol");
 		return manifest;
 	}
-	async fetchSessionEntries(peerId, keys, manifestDigest, prefixes = []) {
+	async fetchSessionEntries(peerId, keys, manifestDigest, prefixes = [], deferredObjects = false) {
 		const value = await this.fetchDataOperation(peerId, "session-entries", {
 			keys,
 			manifestDigest,
-			prefixes
+			prefixes,
+			deferredObjects
 		});
 		if (!isRecord(value) || value.ok !== true || !isRecord(value.bundle)) throw new SyncSshProbeError("helper");
 		const bundle = value.bundle;
@@ -359,6 +360,103 @@ var SyncSshTransport = class {
 		const fingerprint = this.hostKeyChallenges.acceptObserved(peer);
 		await this.peerManager.pinHostKey(peerId, fingerprint);
 	}
+	/**
+	* 拉取带外对象流：响应以帧流形式逐块 yield，调用方（收件箱）边收边落盘，
+	* 内存 O(单帧)。会话在流结束/出错时关闭（生成器 finally）。
+	*/
+	async *fetchSessionObjects(peerId, objects) {
+		const body = Buffer.from(JSON.stringify({ objects: [...objects] }), "utf8");
+		if (body.length > 134217728) throw new SyncSshProbeError("protocol");
+		const { peer, session } = await this.openSession(peerId);
+		try {
+			await session.sendControl({
+				kind: "request",
+				protocolVersion: 1,
+				operation: "session-objects",
+				port: peer.remoteWebPort ?? DEFAULT_REMOTE_WEB_PORT
+			});
+			for (let offset = 0, sequence = 0; offset < body.length; offset += MAX_SYNC_DATA_CHUNK_BYTES, sequence += 1) await session.sendData(sequence, body.subarray(offset, Math.min(offset + MAX_SYNC_DATA_CHUNK_BYTES, body.length)));
+			await session.sendControl({ kind: "request-end" });
+			session.endInput();
+			let responseStatus;
+			let bodyMode;
+			let responseEnded = false;
+			let totalBytes = 0;
+			for await (const frame of session.readFrames()) {
+				if (frame.kind === "control") {
+					if (frame.value.kind === "error") throw new SyncSshProbeError("helper");
+					if (frame.value.kind === "response" && responseStatus === void 0) {
+						responseStatus = typeof frame.value.status === "number" ? frame.value.status : void 0;
+						bodyMode = typeof frame.value.bodyMode === "string" ? frame.value.bodyMode : void 0;
+						continue;
+					}
+					if (frame.value.kind === "response-end" && responseStatus !== void 0 && !responseEnded) {
+						responseEnded = true;
+						continue;
+					}
+					throw new SyncProtocolError("unexpected session-objects control frame");
+				}
+				if (responseStatus === void 0 || bodyMode !== "data" || responseEnded) throw new SyncProtocolError("unexpected session-objects data frame");
+				totalBytes += frame.data.length;
+				if (totalBytes > 68719476736) throw new SyncProtocolError("session-objects exceeds object stream limit");
+				yield frame.data;
+			}
+			if (responseStatus !== 200 || !responseEnded) throw new SyncSshProbeError("helper");
+		} catch (error) {
+			if (error instanceof SyncSshProbeError) throw error;
+			if (error instanceof SyncProtocolError) {
+				const probe = new SyncSshProbeError("protocol");
+				probe.detail = error.message;
+				throw probe;
+			}
+			throw new SyncSshProbeError("helper");
+		} finally {
+			session.close();
+		}
+	}
+	/**
+	* 推送带外对象流：把帧流按 1MB 分块写入请求体，逐块经 SSH 发送；
+	* 对端流式落盘收件箱后返回 JSON 摘要。
+	*/
+	async pushSessionObjects(peerId, frames) {
+		const { peer, session } = await this.openSession(peerId);
+		try {
+			await session.sendControl({
+				kind: "request",
+				protocolVersion: 1,
+				operation: "session-objects-push",
+				port: peer.remoteWebPort ?? DEFAULT_REMOTE_WEB_PORT
+			});
+			let sequence = 0;
+			let totalBytes = 0;
+			for await (const chunk of frames) {
+				if (!(chunk instanceof Uint8Array)) throw new SyncProtocolError("session-objects-push contains a non-byte chunk");
+				const data = Buffer.from(chunk);
+				totalBytes += data.byteLength;
+				if (totalBytes > 68719476736) throw new SyncProtocolError("session-objects-push exceeds object stream limit");
+				for (let offset = 0; offset < data.byteLength; offset += MAX_SYNC_DATA_CHUNK_BYTES, sequence += 1) await session.sendData(sequence, data.subarray(offset, Math.min(offset + MAX_SYNC_DATA_CHUNK_BYTES, data.byteLength)));
+			}
+			await session.sendControl({ kind: "request-end" });
+			session.endInput();
+			let response;
+			for await (const frame of session.readFrames()) {
+				if (frame.kind !== "control" || response !== void 0) throw new SyncProtocolError("unexpected session-objects-push frame");
+				if (frame.value.kind === "error") throw new SyncSshProbeError("helper");
+				if (frame.value.kind === "response") response = frame.value;
+			}
+			if (!response || response.status !== 200) throw new SyncSshProbeError("helper");
+		} catch (error) {
+			if (error instanceof SyncSshProbeError) throw error;
+			if (error instanceof SyncProtocolError) {
+				const probe = new SyncSshProbeError("protocol");
+				probe.detail = error.message;
+				throw probe;
+			}
+			throw new SyncSshProbeError("helper");
+		} finally {
+			session.close();
+		}
+	}
 	async fetchDataOperation(peerId, operation, requestBody) {
 		const body = requestBody === void 0 ? void 0 : Buffer.from(JSON.stringify(requestBody), "utf8");
 		if (body && body.length > 134217728) throw new SyncSshProbeError("protocol");