@botlearn-course/daemon 0.0.2 → 0.0.4

package/README.md

@@ -36,6 +36,12 @@ npx @botlearn-course/daemon@latest course logout
 | `course doctor` | 打印 Auth 状态（不含 token）与 runtime 探测表（安装路径 / 版本 / 登录状态 / 安装提示）。 |
 | `--help` / `--version` | 帮助与版本。 |
 
+包内还包含供 BotLearn 托管 E2B Template 使用的内部命令
+`botlearn-sandbox-supervisor agent-service session`。它不是 BYOA 用户入口：生产环境只允许由
+Agent Service 以固定 argv 启动，通过 stdin 接收一次性 bootstrap，并把 daemon/runtime 分别降权
+到 `botlearn-control`/`user` UID。`agent-service session --bootstrap-stdin` 同样属于受 supervisor
+保护的内部协议，不应直接暴露给课程任务或 workspace shell。
+
 ## 支持的 runtime
 
 run 的 `runtime.id` 决定用哪个 adapter 执行；未指定时默认 `codex`。runtime 不可用时 run 会
@@ -99,6 +105,9 @@ runtime 凭据。
   revoke。
 - 本包 production 依赖为零，发布 tarball 只包含 `dist/`、`README.md`、`package.json`、
   `LICENSE`（CI 发布前强制校验）。
+- 托管 session 的 control token/reconnect state 位于 runtime UID 不可访问的 `0700` control home；
+  runtime workspace 独立可写，Prompt Pack/Skill 则通过 control-owned、group-readable 的只读视图
+  提供。长期模型 provider key 留在 Agent Service，runtime 只拿 generation-scoped proxy grant。
 
 ## 发布
 

package/dist/agent-service-session.d.ts

@@ -0,0 +1,67 @@
+import { type Logger } from "./log.js";
+import { type PersistentSessionExecution, type PreparedPersistentTurn, type RunReportingClient } from "./run-dispatcher.js";
+import type { CourseRuntime, CourseRuntimeProfile, RunEvent, RunFileCandidate, RunFileRecord, RunStartPayload } from "./types.js";
+export interface AgentServiceSessionOptions {
+    wsUrl: string;
+    sessionId: string;
+    sessionToken: string;
+    runtimes: Map<string, CourseRuntime>;
+    daemonVersion: string;
+    runtimeEnv?: Record<string, string>;
+    log?: Logger;
+    random?: () => number;
+    sleep?: (ms: number) => Promise<void>;
+}
+/** Long-running daemon client for one persistent managed sandbox session. */
+export declare class AgentServiceSessionClient implements RunReportingClient, PersistentSessionExecution {
+    private readonly options;
+    private readonly log;
+    private readonly random;
+    private readonly sleep;
+    private readonly state;
+    private readonly dispatcher;
+    private readonly attempts;
+    private readonly runtimeProfiles;
+    private readonly pendingAcks;
+    private readonly pendingFilePrepares;
+    private readonly pendingFileCommits;
+    private readonly fileGrants;
+    private readonly inflightCommands;
+    private socket;
+    private sessionGeneration;
+    private connectionEpoch;
+    private inboundSeq;
+    private heartbeatMs;
+    private staleMs;
+    private stopped;
+    private permanentFailure;
+    constructor(options: AgentServiceSessionOptions);
+    prepareTurn(payload: RunStartPayload): PreparedPersistentTurn;
+    persistNativeSession(sessionId: string): void;
+    run(): Promise<void>;
+    stop(): void;
+    postEvent(agentRunId: string, event: RunEvent): Promise<void>;
+    postFile(agentRunId: string, file: RunFileCandidate): Promise<RunFileRecord>;
+    uploadFileContent(agentRunId: string, fileId: string, absPath: string, mimeType?: string): Promise<RunFileRecord>;
+    getRunRuntimeProfile(agentRunId: string): Promise<CourseRuntimeProfile>;
+    private connectOnce;
+    private handleHello;
+    private assertServerFrame;
+    private handleServerFrame;
+    private applyDesiredState;
+    private reconcileInterruptedCommand;
+    private runtimeActivation;
+    private ackEventOrFile;
+    private acceptFileGrant;
+    private replaySpool;
+    private sendHeartbeat;
+    private sendCommandAck;
+    private sendControlFrame;
+    private sendFrame;
+    private nextOutboundSeq;
+    private spoolBytes;
+    private enforceSpoolLimit;
+    private rejectPending;
+    private rejectPendingFiles;
+    private persist;
+}