@botlearn-course/daemon 0.0.1 → 0.0.3

package/README.md

@@ -36,6 +36,12 @@ npx @botlearn-course/daemon@latest course logout
 | `course doctor` | 打印 Auth 状态（不含 token）与 runtime 探测表（安装路径 / 版本 / 登录状态 / 安装提示）。 |
 | `--help` / `--version` | 帮助与版本。 |
 
+包内还包含供 BotLearn 托管 E2B Template 使用的内部命令
+`botlearn-sandbox-supervisor agent-service session`。它不是 BYOA 用户入口：生产环境只允许由
+Agent Service 以固定 argv 启动，通过 stdin 接收一次性 bootstrap，并把 daemon/runtime 分别降权
+到 `botlearn-control`/`user` UID。`agent-service session --bootstrap-stdin` 同样属于受 supervisor
+保护的内部协议，不应直接暴露给课程任务或 workspace shell。
+
 ## 支持的 runtime
 
 run 的 `runtime.id` 决定用哪个 adapter 执行；未指定时默认 `codex`。runtime 不可用时 run 会
@@ -47,7 +53,7 @@ run 的 `runtime.id` 决定用哪个 adapter 执行；未指定时默认 `codex`
 | `claude-code` | Claude Code | `claude` | `BOTLEARN_CLAUDE_BIN` | doctor 会额外探测登录状态 |
 | `gemini` | Gemini CLI | `gemini` | `BOTLEARN_GEMINI_BIN` | |
 | `kimi-cli` | Kimi CLI | `kimi` | `BOTLEARN_KIMI_CLI_BIN` | |
-| `deepseek-tui` | DeepSeek TUI | `deepseek` | `BOTLEARN_DEEPSEEK_TUI_BIN` | |
+| `deepseek-tui` | DeepSeek TUI | `deepseek` | `BOTLEARN_DEEPSEEK_TUI_BIN` | Linux/macOS 本地 server 会保留现有 MCP 配置并注入零依赖 `report_progress`；`botlearn` 是保留 server key。Windows 因固定 runtime 无法保证 MCP clean-env，首版 fail closed、不注入 progress |
 | `hermes-agent` | Hermes Agent | `hermes-acp` | `BOTLEARN_HERMES_AGENT_BIN` | ACP stdio 协议 |
 | `openclaw-acp` | OpenClaw (ACP) | `openclaw` | `BOTLEARN_OPENCLAW_BIN` | 还需配置 `BOTLEARN_OPENCLAW_URL`（可选 `BOTLEARN_OPENCLAW_TOKEN` / `BOTLEARN_OPENCLAW_AGENT`），二进制或 URL 缺失时 doctor 标记不可用 |
 | `fake` | 假 runtime | 无 | — | 仅测试/演示用：产出确定性文本与一个 `draft.md`。默认隐藏，只有 `BOTLEARN_DAEMON_ENABLE_FAKE_RUNTIME=1` 时才注册并上报 |
@@ -93,10 +99,15 @@ runtime 凭据。
   终态前把完整文件上传到 Course Service 的受保护存储。
 - 每个 run 在独立 workspace 内执行并有超时上限；runtime 进程在取消/超时后会被终止
   （SIGTERM → SIGKILL）。
+- `report_progress` MCP 子进程以 clean environment 启动，不继承 Course 控制字段或模型凭据；
+  transcript 与 Course event 只保留严格归一化后的 `summary` / `status`，不保存原始 tool arguments。
 - `course logout` 只删除本机凭据；要让服务端立即吊销该 daemon，请在前端 daemon 列表执行
   revoke。
 - 本包 production 依赖为零，发布 tarball 只包含 `dist/`、`README.md`、`package.json`、
   `LICENSE`（CI 发布前强制校验）。
+- 托管 session 的 control token/reconnect state 位于 runtime UID 不可访问的 `0700` control home；
+  runtime workspace 独立可写，Prompt Pack/Skill 则通过 control-owned、group-readable 的只读视图
+  提供。长期模型 provider key 留在 Agent Service，runtime 只拿 generation-scoped proxy grant。
 
 ## 发布
 

package/dist/agent-service-session.d.ts

@@ -0,0 +1,67 @@
+import { type Logger } from "./log.js";
+import { type PersistentSessionExecution, type PreparedPersistentTurn, type RunReportingClient } from "./run-dispatcher.js";
+import type { CourseRuntime, CourseRuntimeProfile, RunEvent, RunFileCandidate, RunFileRecord, RunStartPayload } from "./types.js";
+export interface AgentServiceSessionOptions {
+    wsUrl: string;
+    sessionId: string;
+    sessionToken: string;
+    runtimes: Map<string, CourseRuntime>;
+    daemonVersion: string;
+    runtimeEnv?: Record<string, string>;
+    log?: Logger;
+    random?: () => number;
+    sleep?: (ms: number) => Promise<void>;
+}
+/** Long-running daemon client for one persistent managed sandbox session. */
+export declare class AgentServiceSessionClient implements RunReportingClient, PersistentSessionExecution {
+    private readonly options;
+    private readonly log;
+    private readonly random;
+    private readonly sleep;
+    private readonly state;
+    private readonly dispatcher;
+    private readonly attempts;
+    private readonly runtimeProfiles;
+    private readonly pendingAcks;
+    private readonly pendingFilePrepares;
+    private readonly pendingFileCommits;
+    private readonly fileGrants;
+    private readonly inflightCommands;
+    private socket;
+    private sessionGeneration;
+    private connectionEpoch;
+    private inboundSeq;
+    private heartbeatMs;
+    private staleMs;
+    private stopped;
+    private permanentFailure;
+    constructor(options: AgentServiceSessionOptions);
+    prepareTurn(payload: RunStartPayload): PreparedPersistentTurn;
+    persistNativeSession(sessionId: string): void;
+    run(): Promise<void>;
+    stop(): void;
+    postEvent(agentRunId: string, event: RunEvent): Promise<void>;
+    postFile(agentRunId: string, file: RunFileCandidate): Promise<RunFileRecord>;
+    uploadFileContent(agentRunId: string, fileId: string, absPath: string, mimeType?: string): Promise<RunFileRecord>;
+    getRunRuntimeProfile(agentRunId: string): Promise<CourseRuntimeProfile>;
+    private connectOnce;
+    private handleHello;
+    private assertServerFrame;
+    private handleServerFrame;
+    private applyDesiredState;
+    private reconcileInterruptedCommand;
+    private runtimeActivation;
+    private ackEventOrFile;
+    private acceptFileGrant;
+    private replaySpool;
+    private sendHeartbeat;
+    private sendCommandAck;
+    private sendControlFrame;
+    private sendFrame;
+    private nextOutboundSeq;
+    private spoolBytes;
+    private enforceSpoolLimit;
+    private rejectPending;
+    private rejectPendingFiles;
+    private persist;
+}