@botlearn-course/daemon 0.0.20-beta.1 → 0.0.20-beta.11

package/README.md

@@ -47,6 +47,13 @@ daemon，由 root-owned 固定 launcher 清空附加组后直接降权为 `user`
 `agent-service session --bootstrap-stdin` 同样属于受 supervisor 保护的内部协议，不应直接暴露给
 课程任务或 workspace shell。
 
+veFaaS Origin 的托管 workspace 使用用户级 NAS backing image。root bootstrap 完成 NFS、marker、
+ext4、loop mount 和固定 3 GiB 校验后，daemon 才发送 `sandbox.ready`。RuntimeSession 使用稳定路径
+`/workspace/sessions/{runtime_session_id}/workspace`，Sandbox generation 只参与写入隔离。磁盘写满
+统一上报 `workspace_user_quota_exceeded`。pause 和 cleanup 进入 drain 后，daemon 先停止 runtime
+writer，再通过 root launcher 执行 ext4 sync、loop unmount、backing image 和 NFS parent fsync；完成后
+才发送 `sandbox.drained` 并退出。
+
 ## 支持的 runtime
 
 run 的 `runtime.id` 决定用哪个 adapter 执行；未指定时默认 `codex`。runtime 不可用时 run 会

package/dist/agent-service-sandbox.d.ts

@@ -39,6 +39,7 @@ export declare class AgentServiceSandboxClient implements RunReportingClient, Pe
     private readonly sessionProfiles;
     /** activation-scoped 模型短凭据；只保存在内存中，绝不进入 state.json。 */
     private readonly activationContexts;
+    private readonly activationCleanupTasks;
     private readonly pendingAcks;
     private readonly pendingFileReports;
     private readonly inflightCommands;
@@ -70,11 +71,14 @@ export declare class AgentServiceSandboxClient implements RunReportingClient, Pe
     constructor(options: AgentServiceSandboxOptions);
     prepareTurn(payload: RunStartPayload): PreparedPersistentTurn;
     persistNativeSession(nativeSessionId: string): void;
-    finishTurn(payload: RunStartPayload): void;
+    finishTurn(payload: RunStartPayload): Promise<void>;
     private completePendingActivationCleanup;
+    private runPendingActivationCleanup;
     private recoverPendingActivationCleanups;
     run(): Promise<void>;
     stop(): void;
+    stopGracefully(): Promise<void>;
+    private drainWorkspace;
     postEvent(agentRunId: string, event: RunEvent): Promise<RunEventReceipt>;
     postFile(agentRunId: string, file: RunFileCandidate): Promise<RunFileRecord>;
     recordWorkspaceScanMeasurement(agentRunId: string, measurement: WorkspaceScanMeasurement): Promise<void>;
@@ -88,6 +92,7 @@ export declare class AgentServiceSandboxClient implements RunReportingClient, Pe
     /** sandbox.sync 只做对账：重放 spool、关闭待关 session、应用 drain/shutdown。 */
     private applySync;
     private handleSessionOpen;
+    private handleWorkspaceCheckpoint;
     private handleSessionActivate;
     private handleTurnStart;
     private handleTurnCancel;
@@ -105,6 +110,7 @@ export declare class AgentServiceSandboxClient implements RunReportingClient, Pe
     private isCurrentLifecycleFence;
     private runIdsForSession;
     private deactivateSession;
+    private terminateSessionWriters;
     private sameTurnScope;
     private matchesTurnScope;
     private assertTurnScope;