@botlearn-course/daemon 0.0.5 → 0.0.7

package/README.md

@@ -40,7 +40,9 @@ npx @botlearn-course/daemon@latest course logout
 `botlearn-sandbox-supervisor agent-service session`。它不是 BYOA 用户入口：生产环境只允许由
 Agent Service 以固定 argv 启动，通过 stdin 接收一次性 bootstrap，并把 daemon/runtime 分别降权
 到 `botlearn-control`/`user` UID。E2B Template 通过 root-owned 固定 launcher 将 DeepSeek
-单向降权为 `user` 并设置 `no_new_privs`；runtime 用户本身没有 sudo 权限。
+单向降权为 `user` 并设置 `no_new_privs`；runtime 用户本身没有 sudo 权限。托管启动链只执行
+`/opt` 下的固定 Node、supervisor、daemon、launcher 与 DeepSeek 文件，不信任 E2B 会开放给 runtime
+写入的 `/usr/local/bin`。
 `agent-service session --bootstrap-stdin` 同样属于受 supervisor 保护的内部协议，不应直接暴露给
 课程任务或 workspace shell。
 
@@ -103,6 +105,9 @@ runtime 凭据。
   （SIGTERM → SIGKILL）。
 - `report_progress` MCP 子进程以 clean environment 启动，不继承 Course 控制字段或模型凭据；
   transcript 与 Course event 只保留严格归一化后的 `summary` / `status`，不保存原始 tool arguments。
+- 浏览器可见执行流使用 `agent-stream/0.1`：assistant 正文按 100ms/512 字符合并上报；
+  reasoning 只报告阶段，工具只报告安全名称和生命周期。raw chain-of-thought、工具参数、工具结果
+  和完整命令输出不会进入 Course event。
 - `course logout` 只删除本机凭据；要让服务端立即吊销该 daemon，请在前端 daemon 列表执行
   revoke。
 - 本包 production 依赖为零，发布 tarball 只包含 `dist/`、`README.md`、`package.json`、

package/dist/agent-service-session.js

@@ -94,7 +94,10 @@ function loadState(sessionId, token) {
             return {
                 sessionGeneration: Number(value.sessionGeneration ?? 0),
                 nextOutboundSeq: Number(value.nextOutboundSeq ?? 0),
-                reconnectToken: typeof value.reconnectToken === "string" ? value.reconnectToken : token,
+                // A controller launch always supplies a freshly minted, session-scoped bootstrap
+                // token. Preserve runtime/command continuity from disk, but never let an expired
+                // persisted reconnect token shadow the controller's recovery credential.
+                reconnectToken: token,
                 completedCommands: Array.isArray(value.completedCommands)
                     ? value.completedCommands.filter((item) => typeof item === "string")
                     : [],

package/dist/run-dispatcher.js

@@ -18,10 +18,28 @@ const MAX_TIMEOUT_SECONDS = 7200;
 const DEFAULT_MAX_OUTPUT_CHARS = 100_000;
 // wire 上单块文本上限；完整文本在本地 transcript。
 const BLOCK_TEXT_MAX_CHARS = 4000;
+const CONTENT_FLUSH_MAX_CHARS = 512;
+const CONTENT_FLUSH_INTERVAL_MS = 100;
+const AGENT_STREAM_SCHEMA_VERSION = "agent-stream/0.1";
+const SAFE_TOOL_NAME = /^[A-Za-z0-9][A-Za-z0-9._:/-]{0,79}$/;
 function clampTimeoutSeconds(value) {
     const n = typeof value === "number" && Number.isFinite(value) ? value : DEFAULT_TIMEOUT_SECONDS;
     return Math.min(MAX_TIMEOUT_SECONDS, Math.max(MIN_TIMEOUT_SECONDS, n));
 }
+function normalizeToolName(value) {
+    if (typeof value !== "string")
+        return undefined;
+    const name = value.trim();
+    return SAFE_TOOL_NAME.test(name) ? name : undefined;
+}
+function chunkUnicodeText(value, maxCodePoints) {
+    const codePoints = Array.from(value);
+    const chunks = [];
+    for (let offset = 0; offset < codePoints.length; offset += maxCodePoints) {
+        chunks.push(codePoints.slice(offset, offset + maxCodePoints).join(""));
+    }
+    return chunks;
+}
 /**
  * Run dispatcher：把 Course Service 下发的 run.start 交给 runtime，
  * 并把 runtime 输出归一化成 run.block / run.message / run.completed 回报 Course Service。
@@ -110,6 +128,7 @@ export class RunDispatcher {
         let terminalSent = false;
         let timedOut = false;
         let timer;
+        let contentFlushTimer;
         let profileApplied = false;
         let toolCalls = 0;
         let toolLimitExceeded = false;
@@ -265,8 +284,80 @@ export class RunDispatcher {
                 controller.abort();
             }, timeoutSeconds * 1000);
             let finalText = "";
-            // 上一次真正上了 wire 的块 kind：thinking/status 只在 kind 切换时上报一次，避免刷屏。
+            // 上一次真正上了 wire 的块 kind：status 只在 kind 切换时上报一次，避免刷屏。
             let lastReportedKind = null;
+            let lastReasoningPhase = null;
+            let pendingContent = "";
+            let streamEventFailure;
+            let streamEventChain = Promise.resolve();
+            const queueStreamEvent = (event) => {
+                const operation = streamEventChain.then(async () => {
+                    if (streamEventFailure)
+                        throw streamEventFailure;
+                    await send(event);
+                });
+                streamEventChain = operation.catch((error) => {
+                    streamEventFailure ??= error;
+                });
+                return operation;
+            };
+            const awaitStreamEvents = async () => {
+                await streamEventChain;
+                if (streamEventFailure)
+                    throw streamEventFailure;
+            };
+            const flushContent = async () => {
+                if (contentFlushTimer !== undefined) {
+                    clearTimeout(contentFlushTimer);
+                    contentFlushTimer = undefined;
+                }
+                if (!pendingContent) {
+                    await awaitStreamEvents();
+                    return;
+                }
+                const content = pendingContent;
+                pendingContent = "";
+                for (const text of chunkUnicodeText(redactSecretString(content), BLOCK_TEXT_MAX_CHARS)) {
+                    if (!text)
+                        continue;
+                    await queueStreamEvent({
+                        type: "run.block",
+                        text,
+                        payload: {
+                            schema_version: AGENT_STREAM_SCHEMA_VERSION,
+                            kind: "text_delta",
+                            runtime: runtime.id,
+                        },
+                    });
+                }
+                await awaitStreamEvents();
+            };
+            const scheduleContentFlush = () => {
+                if (contentFlushTimer !== undefined)
+                    return;
+                contentFlushTimer = setTimeout(() => {
+                    contentFlushTimer = undefined;
+                    void flushContent().catch((error) => {
+                        streamEventFailure ??= error;
+                    });
+                }, CONTENT_FLUSH_INTERVAL_MS);
+            };
+            const sendReasoningPhase = async (phase) => {
+                if (phase === "completed" && lastReasoningPhase !== "in_progress")
+                    return;
+                if (phase === lastReasoningPhase)
+                    return;
+                lastReasoningPhase = phase;
+                await queueStreamEvent({
+                    type: "run.block",
+                    payload: {
+                        schema_version: AGENT_STREAM_SCHEMA_VERSION,
+                        kind: "reasoning",
+                        runtime: runtime.id,
+                        phase,
+                    },
+                });
+            };
             const sink = {
                 progressDispositions: async (dispositions) => {
                     progressDisposition.invalid += dispositions.invalid;
@@ -287,6 +378,7 @@ export class RunDispatcher {
                 },
                 block: async (block) => {
                     if (block.kind === "progress") {
+                        await flushContent();
                         const normalized = tryNormalizeProgressReport({
                             summary: block.summary,
                             status: block.status,
@@ -363,19 +455,87 @@ export class RunDispatcher {
                     }
                     if (serverTerminal)
                         return;
-                    const perBlock = block.kind === "tool_call" || block.kind === "tool_result" || block.kind === "error";
-                    const onTransition = (block.kind === "thinking" || block.kind === "status") &&
-                        block.kind !== lastReportedKind;
-                    if (!perBlock && !onTransition)
+                    if (block.kind === "text_delta") {
+                        if (!block.text)
+                            return;
+                        pendingContent += block.text;
+                        if (pendingContent.length >= CONTENT_FLUSH_MAX_CHARS) {
+                            await flushContent();
+                        }
+                        else {
+                            scheduleContentFlush();
+                        }
                         return;
-                    lastReportedKind = block.kind;
-                    await send({
-                        type: "run.block",
-                        text: redactSecretString(truncateText(block.text ?? "", BLOCK_TEXT_MAX_CHARS)),
-                        payload: { kind: block.kind, runtime: runtime.id },
-                    });
+                    }
+                    await flushContent();
+                    if (block.kind === "thinking") {
+                        await sendReasoningPhase(block.phase ?? "in_progress");
+                        return;
+                    }
+                    if (block.kind === "status") {
+                        if (lastReportedKind === "status")
+                            return;
+                        lastReportedKind = "status";
+                        await queueStreamEvent({
+                            type: "run.block",
+                            payload: {
+                                schema_version: AGENT_STREAM_SCHEMA_VERSION,
+                                kind: "status",
+                                runtime: runtime.id,
+                                phase: "executing",
+                            },
+                        });
+                        return;
+                    }
+                    if (block.kind === "tool_call") {
+                        lastReportedKind = block.kind;
+                        lastReasoningPhase = null;
+                        await queueStreamEvent({
+                            type: "run.block",
+                            payload: {
+                                schema_version: AGENT_STREAM_SCHEMA_VERSION,
+                                kind: "tool_call",
+                                runtime: runtime.id,
+                                status: "started",
+                                ...(normalizeToolName(block.name)
+                                    ? { name: normalizeToolName(block.name) }
+                                    : {}),
+                            },
+                        });
+                        return;
+                    }
+                    if (block.kind === "tool_result") {
+                        lastReportedKind = block.kind;
+                        lastReasoningPhase = null;
+                        await queueStreamEvent({
+                            type: "run.block",
+                            payload: {
+                                schema_version: AGENT_STREAM_SCHEMA_VERSION,
+                                kind: "tool_result",
+                                runtime: runtime.id,
+                                status: block.status === "error" ? "error" : "completed",
+                                ...(normalizeToolName(block.name)
+                                    ? { name: normalizeToolName(block.name) }
+                                    : {}),
+                            },
+                        });
+                        return;
+                    }
+                    if (block.kind === "error") {
+                        lastReportedKind = block.kind;
+                        await queueStreamEvent({
+                            type: "run.block",
+                            payload: {
+                                schema_version: AGENT_STREAM_SCHEMA_VERSION,
+                                kind: "error",
+                                runtime: runtime.id,
+                                status: "error",
+                            },
+                        });
+                    }
                 },
                 message: async (text) => {
+                    await flushContent();
                     finalText = text;
                 },
                 file: async (file) => {
@@ -483,6 +643,8 @@ export class RunDispatcher {
         finally {
             if (timer !== undefined)
                 clearTimeout(timer);
+            if (contentFlushTimer !== undefined)
+                clearTimeout(contentFlushTimer);
             if (profileApplied)
                 cleanupRunRuntimeProfile(runId);
             if (Object.values(progressDisposition).some((count) => count > 0)) {

package/dist/runtime-env.js

@@ -20,7 +20,8 @@ const AGENT_SERVICE_SUPERVISOR_ENV_KEYS = [
 ];
 const RUNTIME_USER_PATTERN = /^[a-z_][a-z0-9_-]{0,31}$/;
 const RUNTIME_SUDO_BINARY = "/usr/bin/sudo";
-const MANAGED_RUNTIME_LAUNCHER = "/usr/local/bin/botlearn-runtime-launcher";
+const MANAGED_RUNTIME_LAUNCHER = "/opt/botlearn/bin/botlearn-runtime-launcher";
+const MANAGED_RUNTIME_BINARY = "/opt/deepseek-tui/0.8.39/bin/deepseek";
 /** Remove Course control-plane coordinates before any model/runtime child is created. */
 export function clearAgentServiceControlEnv(env = process.env) {
     for (const key of AGENT_SERVICE_CONTROL_ENV_KEYS)
@@ -72,6 +73,9 @@ export function runtimeChildLaunch(binary, args, env = process.env) {
     if (env.BOTLEARN_RUNTIME_LAUNCHER !== MANAGED_RUNTIME_LAUNCHER) {
         throw new Error("invalid supervisor-provided runtime launcher");
     }
+    if (binary !== MANAGED_RUNTIME_BINARY) {
+        throw new Error("invalid supervisor-provided runtime binary");
+    }
     return {
         binary: RUNTIME_SUDO_BINARY,
         args: [

package/dist/runtimes/claude-code.js

@@ -324,22 +324,33 @@ function claudeStatusEvent(obj) {
 }
 function normalizeBlock(obj, seq) {
     let kind = "other";
+    const contents = Array.isArray(obj?.message?.content) ? obj.message.content : [];
     if (obj?.type === "assistant") {
-        const contents = Array.isArray(obj.message?.content) ? obj.message.content : [];
         if (contents.some((c) => c?.type === "tool_use"))
             kind = "tool_use";
         else if (contents.some((c) => c?.type === "text"))
             kind = "assistant_text";
     }
     else if (obj?.type === "user") {
-        const contents = Array.isArray(obj.message?.content) ? obj.message.content : [];
         if (contents.some((c) => c?.type === "tool_result"))
             kind = "tool_result";
     }
     else if (obj?.type === "system") {
         kind = "system";
     }
-    return { raw: obj, kind, seq };
+    const tool = contents.find((c) => c?.type === "tool_use");
+    const text = contents
+        .filter((c) => c?.type === "text" && typeof c.text === "string")
+        .map((c) => c.text)
+        .join("");
+    return {
+        raw: obj,
+        kind,
+        seq,
+        ...(kind === "assistant_text" && text ? { text } : {}),
+        ...(kind === "tool_use" && typeof tool?.name === "string" ? { name: tool.name } : {}),
+        ...(kind === "tool_result" ? { status: "completed" } : {}),
+    };
 }
 export const claudeCodeModule = {
     id: "claude-code",

package/dist/runtimes/codex.js

@@ -318,7 +318,23 @@ function normalizeBlock(obj, seq) {
             kind = type === "item.completed" ? "tool_result" : "tool_use";
         }
     }
-    return { raw: obj, kind, seq };
+    const toolName = itemType === "mcp_tool_call"
+        ? obj?.item?.tool ?? obj?.item?.name ?? itemType
+        : itemType;
+    return {
+        raw: obj,
+        kind,
+        seq,
+        ...(kind === "assistant_text" && typeof obj?.item?.text === "string"
+            ? { text: obj.item.text }
+            : {}),
+        ...((kind === "tool_use" || kind === "tool_result") && typeof toolName === "string"
+            ? { name: toolName }
+            : {}),
+        ...(kind === "tool_result"
+            ? { status: obj?.item?.status === "failed" ? "error" : "completed" }
+            : {}),
+    };
 }
 export const codexModule = {
     id: "codex",

package/dist/runtimes/deepseek-tui.js

@@ -7,6 +7,18 @@ import { runtimeChildEnv, runtimeChildLaunch } from "../runtime-env.js";
 import { readCommandVersion, resolveCommandOnPath } from "./probe.js";
 import { adaptDeepseekProgressStarted, cleanupProgressMcpConfig, createDeepseekProgressState, createProgressMcpConfig, deepseekProgressDispositions, isDeepseekProgressCompletion, progressMcpAutoInjectionSupported, progressSystemContext, } from "./progress.js";
 import { consoleLogger, wrapEngineAdapter, } from "./engine.js";
+class DeepseekHttpError extends Error {
+    status;
+    constructor(status, detail = "", operation = "") {
+        super(`${operation ? `${operation} ` : ""}HTTP ${status}${detail ? `: ${detail.slice(0, 300)}` : ""}`);
+        this.status = status;
+        this.name = "DeepseekHttpError";
+    }
+}
+function isMissingThreadHttpError(error) {
+    return (error instanceof DeepseekHttpError
+        && (error.status === 404 || error.status === 410));
+}
 const log = consoleLogger;
 const DEEPSEEK_IDLE_TIMEOUT_MS = 5 * 60 * 1000;
 const STARTUP_TIMEOUT_MS = 30_000;
@@ -150,8 +162,8 @@ export class DeepseekTuiAdapter {
         }
         catch (err) {
             const message = err instanceof Error ? err.message : String(err);
-            // 服务端已丢失该线程（重启、GC）→ 清空 sessionId 让下次重建。
-            const staleSession = opts.sessionId && /404|not found|missing/i.test(message);
+            // 服务端明确确认线程不存在/已过期时才清空 sessionId，让下一轮从 durable context 重建。
+            const staleSession = Boolean(opts.sessionId) && isMissingThreadHttpError(err);
             return {
                 text: "",
                 newSessionId: staleSession ? "" : (opts.sessionId ?? ""),
@@ -404,7 +416,7 @@ export class DeepseekTuiAdapter {
     async readEvents(url, headers, opts, signal) {
         const res = await this.fetchFn(url, { method: "GET", headers, signal });
         if (!res.ok)
-            throw new Error(`events stream failed HTTP ${res.status}`);
+            throw new DeepseekHttpError(res.status, "", "events stream failed");
         if (!res.body)
             throw new Error("events stream response missing body");
         const reader = res.body.getReader();
@@ -538,7 +550,7 @@ export class DeepseekTuiAdapter {
             catch {
                 // ignore
             }
-            throw new Error(`HTTP ${res.status}${detail ? `: ${detail.slice(0, 300)}` : ""}`);
+            throw new DeepseekHttpError(res.status, detail);
         }
         return (await res.json());
     }
@@ -553,16 +565,37 @@ export function __resetDeepseekTuiPoolForTests() {
 }
 function normalizeDeepseekEvent(eventName, payload, seq) {
     if (eventName === "message.delta") {
-        return { raw: { event: eventName, payload }, kind: "assistant_text", seq };
+        return {
+            raw: { event: eventName, payload },
+            kind: "assistant_text",
+            seq,
+            text: stringField(payload, "content") ?? "",
+        };
     }
     if (eventName === "tool.started" || isToolStarted(eventName, payload)) {
-        return { raw: { event: eventName, payload }, kind: "tool_use", seq };
+        return {
+            raw: { event: eventName, payload },
+            kind: "tool_use",
+            seq,
+            ...(deepseekToolName(payload) ? { name: deepseekToolName(payload) } : {}),
+        };
     }
     if (eventName === "tool.completed" || isToolCompleted(eventName, payload)) {
-        return { raw: { event: eventName, payload }, kind: "tool_result", seq };
+        return {
+            raw: { event: eventName, payload },
+            kind: "tool_result",
+            seq,
+            ...(deepseekToolName(payload) ? { name: deepseekToolName(payload) } : {}),
+            status: deepseekToolFailed(payload) ? "error" : "completed",
+        };
     }
     if (eventName === "item.delta" && isAgentMessageDelta(payload)) {
-        return { raw: { event: eventName, payload }, kind: "assistant_text", seq };
+        return {
+            raw: { event: eventName, payload },
+            kind: "assistant_text",
+            seq,
+            text: extractDeepseekDelta(payload),
+        };
     }
     if (eventName === "item.completed" && isAgentReasoningItem(payload)) {
         return { raw: { event: eventName, payload }, kind: "thinking", seq };
@@ -674,6 +707,19 @@ function inferDeepseekToolName(item) {
     }
     return undefined;
 }
+function deepseekToolName(payload) {
+    return (stringField(payload, "name")
+        ?? stringField(payload?.tool, "name")
+        ?? stringField(payload?.payload?.tool, "name")
+        ?? inferDeepseekToolName(payload?.item ?? payload?.payload?.item));
+}
+function deepseekToolFailed(payload) {
+    const status = (stringField(payload, "status")
+        ?? stringField(payload?.tool, "status")
+        ?? stringField(payload?.payload?.tool, "status")
+        ?? "").toLowerCase();
+    return status.includes("fail") || status.includes("error");
+}
 function emptyCompletionError(stderrTail) {
     const tail = stderrTail.trim();
     if (!tail) {

package/dist/runtimes/engine.d.ts

@@ -9,6 +9,11 @@ export interface ContentStreamBlock {
     raw: unknown;
     kind: "assistant_text" | "tool_use" | "tool_result" | "system" | "thinking" | "other";
     seq: number;
+    /** Assistant-visible text only. Provider raw payloads must never be used as browser text. */
+    text?: string;
+    /** Safe provider-normalized tool identifier; arguments and results remain private. */
+    name?: string;
+    status?: "completed" | "error";
 }
 /** provider 已严格校验的进度块；禁止携带原始 tool envelope。 */
 export interface ProgressStreamBlock {

package/dist/runtimes/engine.js

@@ -88,7 +88,12 @@ export function wrapEngineAdapter(id, engine, opts) {
         id,
         async run(run, sink, signal) {
             const payload = run.payload;
-            const text = renderConversationInput(payload);
+            // DeepSeek persists and replays the native thread history. The durable Course Service
+            // conversation is recovery/bootstrap data, not a second history to inject on every turn.
+            const resumesDeepseekThread = id === "deepseek-tui" && Boolean(run.nativeSessionId?.trim());
+            const text = resumesDeepseekThread
+                ? (payload.input.text ?? "")
+                : renderConversationInput(payload);
             if (!text.trim()) {
                 throw new RuntimeExecutionError("empty task brief");
             }
@@ -131,10 +136,22 @@ export function wrapEngineAdapter(id, engine, opts) {
                         return;
                     }
                     const kind = BLOCK_KIND_MAP[block.kind] ?? "status";
-                    queueBlock({ kind, raw: block.raw });
+                    queueBlock({
+                        kind,
+                        raw: block.raw,
+                        ...(block.text !== undefined ? { text: block.text } : {}),
+                        ...(block.name !== undefined ? { name: block.name } : {}),
+                        ...(block.status !== undefined ? { status: block.status } : {}),
+                    });
                 },
                 onStatus: (event) => {
                     consoleLogger.debug(`${id} status`, { kind: event.kind, phase: event.phase });
+                    if (event.kind === "thinking") {
+                        queueBlock({
+                            kind: "thinking",
+                            phase: event.phase === "stopped" ? "completed" : "in_progress",
+                        });
+                    }
                 },
             });
             // Preserve provider event order through durable run.block before the final run.message.

package/dist/runtimes/gemini.js

@@ -238,7 +238,20 @@ function normalizeBlock(obj, seq) {
     else if (type === "init" || type === "result") {
         kind = "system";
     }
-    return { raw: obj, kind, seq };
+    return {
+        raw: obj,
+        kind,
+        seq,
+        ...(kind === "assistant_text" && typeof obj.content === "string"
+            ? { text: obj.content }
+            : {}),
+        ...(kind === "tool_use" && typeof obj.tool_name === "string"
+            ? { name: obj.tool_name }
+            : {}),
+        ...(kind === "tool_result"
+            ? { status: obj.status === "error" ? "error" : "completed" }
+            : {}),
+    };
 }
 export const geminiModule = {
     id: "gemini",

package/dist/runtimes/hermes-agent.js

@@ -123,7 +123,7 @@ export class HermesAgentAdapter extends AcpRuntimeAdapter {
             blockKind = "assistant_text";
         }
         else if (kind === "tool_call" || kind === "tool_call_update") {
-            blockKind = "tool_use";
+            blockKind = kind === "tool_call_update" ? "tool_result" : "tool_use";
         }
         else if (kind === "user_message_chunk") {
             blockKind = "other";
@@ -132,7 +132,24 @@ export class HermesAgentAdapter extends AcpRuntimeAdapter {
         const status = hermesStatusEvent(kind, update, assistantTextSeen);
         if (status)
             ctx.emitStatus(status);
-        ctx.emitBlock({ raw: params, kind: blockKind, seq: ctx.seq });
+        const tool = update.toolCall;
+        ctx.emitBlock({
+            raw: params,
+            kind: blockKind,
+            seq: ctx.seq,
+            ...(blockKind === "assistant_text" && kind === "agent_message_chunk"
+                ? {
+                    text: update.content?.text ?? "",
+                }
+                : {}),
+            ...((blockKind === "tool_use" || blockKind === "tool_result")
+                && typeof tool?.name === "string"
+                ? { name: tool.name }
+                : {}),
+            ...(blockKind === "tool_result"
+                ? { status: tool?.status === "failed" ? "error" : "completed" }
+                : {}),
+        });
     }
     /**
      * owner 信任：选第一个 `kind` 以 `allow_` 开头的选项，没有再退回第一个

package/dist/runtimes/kimi.js

@@ -323,7 +323,15 @@ function normalizeBlock(obj, seq) {
     else if (obj.category || obj.severity) {
         kind = "system";
     }
-    return { raw: obj, kind, seq };
+    const text = kind === "assistant_text" ? extractText(obj.content) : "";
+    return {
+        raw: obj,
+        kind,
+        seq,
+        ...(text ? { text } : {}),
+        ...(kind === "tool_use" ? { name: firstToolName(obj.tool_calls) } : {}),
+        ...(kind === "tool_result" ? { status: "completed" } : {}),
+    };
 }
 export const kimiCliModule = {
     id: "kimi-cli",

package/dist/runtimes/openclaw-acp.js

@@ -177,12 +177,30 @@ export class OpenclawAcpAdapter {
                 if (!text)
                     return;
                 seq += 1;
-                emitBlock({ raw: sanitizeAssistantChunk(note, text), kind: "assistant_text", seq });
+                emitBlock({
+                    raw: sanitizeAssistantChunk(note, text),
+                    kind: "assistant_text",
+                    seq,
+                    text,
+                });
                 return;
             }
             seq += 1;
             const kind = classifyAcpUpdate(note);
-            emitBlock({ raw: note, kind, seq });
+            const toolCall = update?.toolCall;
+            const toolName = toolCall && typeof toolCall.name === "string" ? toolCall.name : undefined;
+            const toolStatus = toolCall && typeof toolCall.status === "string" ? toolCall.status.toLowerCase() : "";
+            emitBlock({
+                raw: note,
+                kind,
+                seq,
+                ...((kind === "tool_use" || kind === "tool_result") && toolName
+                    ? { name: toolName }
+                    : {}),
+                ...(kind === "tool_result"
+                    ? { status: /fail|error/.test(toolStatus) ? "error" : "completed" }
+                    : {}),
+            });
         };
         let abortListener;
         try {
@@ -293,6 +311,7 @@ export class OpenclawAcpAdapter {
                         },
                         kind: "assistant_text",
                         seq,
+                        text: textForBlock,
                     });
                 }
             }

package/dist/runtimes/progress.d.ts

@@ -23,6 +23,11 @@ export interface ProgressMcpConfig {
 export interface ProgressMcpConfigOptions {
     /** undefined auto-discovers explicit/default config; null creates a progress-only config. */
     baseConfigPath?: string | null;
+    /**
+     * undefined auto-detects the managed runtime boundary, null forces a private BYOA
+     * config, and a path writes a sanitized runtime-readable config below that root.
+     */
+    managedRoot?: string | null;
     platform?: NodeJS.Platform;
 }
 export declare class ProgressMcpConfigError extends Error {
@@ -45,6 +50,13 @@ export declare function isDeepseekProgressCompletion(payload: unknown, state: De
  */
 export declare function progressMcpAutoInjectionSupported(platform?: NodeJS.Platform): boolean;
 export declare function resolveExistingDeepseekMcpConfig(env?: NodeJS.ProcessEnv, home?: string): string | null;
-/** Create an ephemeral config that preserves a user's existing MCP servers and settings. */
+/**
+ * Create an ephemeral DeepSeek MCP config.
+ *
+ * BYOA keeps the user's existing MCP settings in a private 0700/0600 directory. Managed
+ * Agent Service sessions instead write a progress-only 0750/0640 handoff below the
+ * supervisor-owned profile root so the separate runtime UID can read it without exposing
+ * control-plane configuration.
+ */
 export declare function createProgressMcpConfig(options?: ProgressMcpConfigOptions): ProgressMcpConfig;
 export declare function cleanupProgressMcpConfig(config: ProgressMcpConfig | undefined): void;

package/dist/runtimes/progress.js

@@ -1,4 +1,4 @@
-import { existsSync, mkdtempSync, readFileSync, renameSync, rmSync, writeFileSync, } from "node:fs";
+import { chmodSync, existsSync, lstatSync, mkdtempSync, readFileSync, renameSync, rmSync, writeFileSync, } from "node:fs";
 import { homedir, tmpdir } from "node:os";
 import path from "node:path";
 import { fileURLToPath } from "node:url";
@@ -10,6 +10,7 @@ export const DEEPSEEK_PROGRESS_TOOL_ALIASES = new Set([
 ]);
 export const DEEPSEEK_PROGRESS_SYSTEM_INSTRUCTION = [
     "BotLearn execution progress reporting:",
+    "- DeepSeek may defer this MCP tool. Before the first meaningful progress phase, if report_progress is not exposed, call tool_search_tool_regex once with query report_progress, then call the discovered progress tool.",
     "- Use report_progress only when a meaningful user-visible execution phase starts or completes.",
     "- Use status in_progress at phase start and completed only when that execution phase actually ends.",
     "- Short tasks need no progress report; do not report every command, file read, or retry.",
@@ -120,22 +121,37 @@ export function resolveExistingDeepseekMcpConfig(env = process.env, home = homed
     const defaultPath = path.join(home, ".deepseek", "mcp.json");
     return existsSync(defaultPath) ? defaultPath : null;
 }
-/** Create an ephemeral config that preserves a user's existing MCP servers and settings. */
+/**
+ * Create an ephemeral DeepSeek MCP config.
+ *
+ * BYOA keeps the user's existing MCP settings in a private 0700/0600 directory. Managed
+ * Agent Service sessions instead write a progress-only 0750/0640 handoff below the
+ * supervisor-owned profile root so the separate runtime UID can read it without exposing
+ * control-plane configuration.
+ */
 export function createProgressMcpConfig(options = {}) {
     const platform = options.platform ?? process.platform;
     if (!progressMcpAutoInjectionSupported(platform)) {
         throw new ProgressMcpConfigError("report_progress MCP auto-injection is unavailable on Windows because clean child env isolation cannot be guaranteed");
     }
+    const managedRoot = resolveManagedProgressRoot(options.managedRoot);
+    if (managedRoot
+        && options.baseConfigPath !== undefined
+        && options.baseConfigPath !== null) {
+        throw new ProgressMcpConfigError("managed progress MCP config cannot preserve an existing DeepSeek MCP config");
+    }
     const serverPath = fileURLToPath(new URL("../mcp/report-progress-server.js", import.meta.url));
-    const baseConfigPath = options.baseConfigPath === undefined
-        ? resolveExistingDeepseekMcpConfig()
-        : options.baseConfigPath;
+    const baseConfigPath = managedRoot
+        ? null
+        : options.baseConfigPath === undefined
+            ? resolveExistingDeepseekMcpConfig()
+            : options.baseConfigPath;
     const baseConfig = loadBaseMcpConfig(baseConfigPath);
     const baseServers = mergeMcpServerFields(baseConfig);
     if (Object.hasOwn(baseServers, "botlearn")) {
         throw new ProgressMcpConfigError("DeepSeek MCP server key 'botlearn' is reserved for BotLearn progress reporting");
     }
-    const dir = mkdtempSync(path.join(tmpdir(), "botlearn-progress-mcp-"));
+    const dir = mkdtempSync(path.join(managedRoot ?? tmpdir(), "botlearn-progress-mcp-"));
     const configPath = path.join(dir, "mcp.json");
     const stagingPath = path.join(dir, ".mcp.json.tmp");
     const minimalPath = "/usr/bin:/bin";
@@ -157,7 +173,11 @@ export function createProgressMcpConfig(options = {}) {
         },
     };
     try {
+        if (managedRoot)
+            chmodSync(dir, 0o750);
         writeFileSync(stagingPath, `${JSON.stringify(config, null, 2)}\n`, { mode: 0o600 });
+        if (managedRoot)
+            chmodSync(stagingPath, 0o640);
         renameSync(stagingPath, configPath);
         return { dir, path: configPath };
     }
@@ -166,6 +186,41 @@ export function createProgressMcpConfig(options = {}) {
         throw error;
     }
 }
+function resolveManagedProgressRoot(explicit) {
+    if (explicit === null)
+        return null;
+    let root = explicit?.trim();
+    if (root === undefined) {
+        const managedRuntime = process.env.BOTLEARN_RUNTIME_USER?.trim();
+        if (!managedRuntime)
+            return null;
+        root = process.env.BOTLEARN_AGENT_SERVICE_PROFILE_ROOT?.trim();
+        if (!root) {
+            throw new ProgressMcpConfigError("managed runtime is missing BOTLEARN_AGENT_SERVICE_PROFILE_ROOT");
+        }
+    }
+    if (!root || !path.isAbsolute(root)) {
+        throw new ProgressMcpConfigError("managed progress MCP root must be an absolute path");
+    }
+    try {
+        const stat = lstatSync(root);
+        if (!stat.isDirectory() || stat.isSymbolicLink()) {
+            throw new Error("root is not a regular directory");
+        }
+        const currentUid = process.getuid?.();
+        if (currentUid !== undefined && stat.uid !== currentUid) {
+            throw new Error("root is not owned by the control process uid");
+        }
+        if ((stat.mode & 0o022) !== 0) {
+            throw new Error("root must not be group or world writable");
+        }
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        throw new ProgressMcpConfigError(`managed progress MCP root is unavailable: ${message}`);
+    }
+    return root;
+}
 function loadBaseMcpConfig(configPath) {
     if (!configPath)
         return {};

package/dist/sandbox-supervisor.js

@@ -10,7 +10,19 @@ const CONTROL_HOME = "/home/botlearn-control/.botlearn-course/daemon";
 const WORKSPACE = "/workspace";
 const RUNTIME_PROFILE_ROOT = "/run/botlearn-runtime-profiles";
 const SUPERVISOR_LOCK_ROOT = "/run/botlearn-sandbox-supervisors";
-const DAEMON_BINARY = "/usr/local/bin/botlearn-course-daemon";
+const NODE_BINARY = "/opt/node/22.23.1/bin/node";
+const DAEMON_ENTRY = "/opt/botlearn/course-daemon/dist/cli.js";
+const RUNTIME_LAUNCHER = "/opt/botlearn/bin/botlearn-runtime-launcher";
+const DEEPSEEK_BINARY = "/opt/deepseek-tui/0.8.39/bin/deepseek";
+const MANAGED_PATH = [
+    "/opt/deepseek-tui/0.8.39/bin",
+    "/opt/node/22.23.1/bin",
+    "/usr/bin",
+    "/bin",
+    // E2B materializes this directory as runtime-writable. Keep it last and never
+    // use it for a managed control-plane executable.
+    "/usr/local/bin",
+].join(":");
 function numericId(flag, user) {
     const output = execFileSync("/usr/bin/id", [flag, user], {
         encoding: "utf8",
@@ -117,19 +129,25 @@ export async function runSandboxSupervisor(argv) {
         if (releaseLock === null)
             return 0;
         prepareDirectories(controlUid, controlGid, runtimeUid, runtimeSessionId, sessionGeneration);
-        child = spawn(DAEMON_BINARY, ["agent-service", "session", "--bootstrap-stdin"], {
+        child = spawn(NODE_BINARY, [
+            DAEMON_ENTRY,
+            "agent-service",
+            "session",
+            "--bootstrap-stdin",
+        ], {
             uid: controlUid,
             gid: controlGid,
             env: {
                 HOME: "/home/botlearn-control",
-                PATH: "/usr/local/bin:/usr/bin:/bin",
+                PATH: MANAGED_PATH,
                 BOTLEARN_DAEMON_HOME: CONTROL_HOME,
                 BOTLEARN_RUNTIME_UID: String(runtimeUid),
                 BOTLEARN_RUNTIME_GID: String(controlGid),
                 BOTLEARN_RUNTIME_USER: RUNTIME_USER,
                 BOTLEARN_RUNTIME_GROUP: CONTROL_USER,
                 BOTLEARN_RUNTIME_HOME: "/home/user",
-                BOTLEARN_RUNTIME_LAUNCHER: "/usr/local/bin/botlearn-runtime-launcher",
+                BOTLEARN_RUNTIME_LAUNCHER: RUNTIME_LAUNCHER,
+                BOTLEARN_DEEPSEEK_TUI_BIN: DEEPSEEK_BINARY,
                 BOTLEARN_AGENT_SERVICE_WORKSPACE_ROOT: WORKSPACE,
                 BOTLEARN_AGENT_SERVICE_PROFILE_ROOT: RUNTIME_PROFILE_ROOT,
             },

package/dist/types.d.ts

@@ -114,6 +114,11 @@ export interface AppliedRunRuntimeProfile {
 export interface RuntimeContentBlock {
     kind: "text_delta" | "text" | "thinking" | "tool_call" | "tool_result" | "status" | "error";
     text?: string;
+    /** Safe provider-normalized tool identifier. Raw arguments/results stay in the transcript only. */
+    name?: string;
+    /** Public lifecycle metadata; never carries provider reasoning or tool output. */
+    phase?: "in_progress" | "completed";
+    status?: "completed" | "error";
     raw?: unknown;
 }
 /** 已由 provider adapter 严格归一化、无 provider raw envelope 的进度遥测。 */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@botlearn-course/daemon",
-  "version": "0.0.5",
+  "version": "0.0.7",
   "description": "Lightweight BotLearn Course daemon: run course tasks on your own machine with your own agent runtime (BYOA).",
   "type": "module",
   "bin": {