@cjhyy/code-shell-server 0.9.41 → 0.9.42

package/dist/panels/agent-task-host.js

@@ -261,6 +261,9 @@ export function createPanelAgentTaskHost(options = {}) {
                     buildEnv: options.buildEnv ??
                         (() => ({
                             ...process.env,
+                            // These switch on Desktop-main-only IPC clients in the worker.
+                            CODE_SHELL_OPERATION_BATCH_ACCESS: undefined,
+                            CODE_SHELL_MODEL_REQUEST_SIGNING: undefined,
                             CODE_SHELL_CREDENTIAL_ACCESS: "local",
                             CODE_SHELL_CAPABILITY_MODULES: `${import.meta.resolve("@cjhyy/code-shell-capability-coding")}#createCodingModule`,
                         })),

package/dist/panels/bridge-contract.d.ts

@@ -1,4 +1,4 @@
-export declare const panelRuntimeApiVersion = 14;
+export declare const panelRuntimeApiVersion: 14;
 export declare const panelProcessMethods: string[];
 export declare const panelResourceMethods: string[];
 export declare const panelToolJobMethods: string[];

package/dist/panels/bridge-contract.js

@@ -1,5 +1,6 @@
+import { CONTRACTS } from "@cjhyy/code-shell-core";
 import { processLimits } from "./process-state.js";
-export const panelRuntimeApiVersion = 14;
+export const panelRuntimeApiVersion = CONTRACTS.panelApi;
 export const panelProcessMethods = [
     "process.find",
     "process.info",

package/dist/project-runtime/cloud-account-auth.d.ts

@@ -1,6 +1,6 @@
 import { type CloudAccountBinding } from "./account-binding.js";
 import type { CloudAccountAuthority, CloudManagementSession, ProjectControlAuthority } from "./control-authority.js";
-export declare const CLOUD_MANAGEMENT_AUTHORITY_VERSION = 2;
+export declare const CLOUD_MANAGEMENT_AUTHORITY_VERSION: 2;
 export declare const CLOUD_MANAGEMENT_COOKIE = "cs_cloud_management";
 export declare function cloudManagementSessionView(session: CloudManagementSession): {
     id: string;

package/dist/project-runtime/cloud-account-auth.js

@@ -1,7 +1,8 @@
 import { createHash, randomBytes, randomUUID } from "node:crypto";
+import { CONTRACTS } from "@cjhyy/code-shell-core";
 import { isCloudAccountOrigin } from "./account-binding.js";
 import { ProjectRegistryError } from "./registry.js";
-export const CLOUD_MANAGEMENT_AUTHORITY_VERSION = 2;
+export const CLOUD_MANAGEMENT_AUTHORITY_VERSION = CONTRACTS.cloudManagementAuthority;
 export const CLOUD_MANAGEMENT_COOKIE = "cs_cloud_management";
 const TOKEN = /^[A-Za-z0-9_-]{43}$/;
 const UUID = /^[a-f0-9]{8}(?:-[a-f0-9]{4}){3}-[a-f0-9]{12}$/;

package/dist/project-runtime/cloud-browser-auth.d.ts

@@ -1,6 +1,6 @@
 import type { CloudAccountAuthority, ProjectControlAuthority } from "./control-authority.js";
 /** Browser bootstrap is separate from the native, single-operator v2 API. */
-export declare const CLOUD_BROWSER_AUTHORITY_VERSION = 1;
+export declare const CLOUD_BROWSER_AUTHORITY_VERSION: 1;
 export declare const CLOUD_BROWSER_COOKIE = "cs_cloud_browser";
 /** Every principal is independently scoped; a login never claims legacy projects. */
 export declare function createCloudBrowserAuth(options: {

package/dist/project-runtime/cloud-browser-auth.js

@@ -1,9 +1,10 @@
 import { createHash, randomBytes, randomUUID } from "node:crypto";
+import { CONTRACTS } from "@cjhyy/code-shell-core";
 import { isCloudAccountOrigin } from "./account-binding.js";
 import { cloudManagementSessionView } from "./cloud-account-auth.js";
 import { ProjectRegistryError } from "./registry.js";
 /** Browser bootstrap is separate from the native, single-operator v2 API. */
-export const CLOUD_BROWSER_AUTHORITY_VERSION = 1;
+export const CLOUD_BROWSER_AUTHORITY_VERSION = CONTRACTS.cloudBrowserAuthority;
 export const CLOUD_BROWSER_COOKIE = "cs_cloud_browser";
 const TOKEN = /^[A-Za-z0-9_-]{43}$/;
 const UUID = /^[a-f0-9]{8}(?:-[a-f0-9]{4}){3}-[a-f0-9]{12}$/;

package/dist/serve/headless-server.js

@@ -21,7 +21,7 @@ import { readFileSync, existsSync } from "node:fs";
 import { basename, dirname, extname, join, resolve } from "node:path";
 import { randomBytes, randomUUID } from "node:crypto";
 import { WebSocketServer } from "ws";
-import { SessionManager, SettingsManager } from "@cjhyy/code-shell-core";
+import { CONTRACTS, SessionManager, SettingsManager } from "@cjhyy/code-shell-core";
 import { SessionOutputCoverageStore, readOutputJournal, readOutputJournalLegacyBase, } from "@cjhyy/code-shell-core/internal";
 import { AccessPasscode } from "../mobile-remote/access-passcode.js";
 import { resolveSafe } from "../mobile-remote/mobile-static.js";
@@ -42,6 +42,7 @@ import { createHubSessions, hubSessionPreview, readHubSessionState, readHubTrans
 import { createHubFiles } from "../hub/files.js";
 import { createSessionHttpResponses } from "../session-http-responses.js";
 import { WorkerBridgeCore, previewLine } from "../worker-bridge-core.js";
+import { isHostAuthorityRequest, unsupportedHostRequestResponse, unsupportedLoopbackAnswer, unsupportedLoopbackCapability, } from "./host-requests.js";
 export async function startHeadlessServer(opts) {
     const remoteLink = remoteLinkHostConfiguration(opts.remoteLink, opts.publicOrigin);
     if (remoteLink && opts.authMode !== "hub")
@@ -226,6 +227,48 @@ export async function startHeadlessServer(opts) {
         }
     }, pendingResponseReaperMs);
     pendingResponseReaper.unref?.();
+    // Answer loopbacks only Desktop main can serve, instead of leasing them to a
+    // Web tab that has no way to fulfil them (ch.16 §3.2 step 1.1). Hub mode
+    // serves Panel actions itself; passcode mode has no Panel runtime.
+    const serveCapabilities = { panels: Boolean(hubAuth) };
+    const replyUnsupportedLoopback = (params) => {
+        const approval = params;
+        if (!approval ||
+            typeof approval.requestId !== "string" ||
+            typeof approval.sessionId !== "string")
+            return false;
+        const request = approval.request;
+        const capability = unsupportedLoopbackCapability(request?.toolName, serveCapabilities);
+        if (!capability)
+            return false;
+        // Core's child-browser activate/release frames are one-way notifications
+        // (protocol/server.ts childHost.activate / childHost.release): their
+        // requestId is never registered, so there is nothing to answer.
+        const childHost = approval.childHost;
+        if (childHost?.activate === true || childHost?.release === true)
+            return true;
+        log("worker.loopback_unsupported", { capability });
+        void bridge
+            .request("agent/approve", {
+            sessionId: approval.sessionId,
+            requestId: approval.requestId,
+            connectionId: approval.connectionId,
+            generation: approval.generation,
+            decision: { approved: true, answer: unsupportedLoopbackAnswer(capability) },
+        }, {
+            id: `unsupported-reply-${randomUUID()}`,
+            consume: true,
+            settleOnExit: true,
+            failFast: true,
+            timeoutMs: 5000,
+            meta: { origin: "host", producer: "serve-unsupported-loopback" },
+        })
+            .catch((e) => log("worker.loopback_unsupported_failed", {
+            capability,
+            reason: e instanceof Error ? e.message : "error",
+        }));
+        return true;
+    };
     // Notifications describe shared agent state and are broadcast. Correlated
     // JSON-RPC responses must return only to the tab that issued the request;
     // browser tabs all start their local counters at `web-1`, so broadcasting a
@@ -240,6 +283,15 @@ export async function startHeadlessServer(opts) {
             return;
         }
         if (!message || message.id === undefined || message.method !== undefined) {
+            if (message && isHostAuthorityRequest(message)) {
+                log("worker.host_request_unsupported", { method: message.method });
+                bridge.sendLine(unsupportedHostRequestResponse(message.id, message.method));
+                return;
+            }
+            if (!hubAuth &&
+                message?.method === "agent/approvalRequest" &&
+                replyUnsupportedLoopback(message.params))
+                return;
             if (hubAuth && message?.method === "agent/streamEvent") {
                 const params = message.params;
                 if (typeof params?.sessionId === "string" && params.event !== undefined) {
@@ -288,6 +340,8 @@ export async function startHeadlessServer(opts) {
                     typeof approval.sessionId === "string") {
                     if (automationWorker?.handleApproval(approval))
                         return;
+                    if (replyUnsupportedLoopback(approval))
+                        return;
                     const request = approval.request;
                     if (request?.toolName === "__panel_action__") {
                         const ownerId = runOwners.get(approval.sessionId);
@@ -391,6 +445,9 @@ export async function startHeadlessServer(opts) {
         buildEnv: () => ({
             ...process.env,
             CODE_SHELL_REMOTE_LINK_CLIENT_SECRET: undefined,
+            // These switch on Desktop-main-only IPC clients in the worker.
+            CODE_SHELL_OPERATION_BATCH_ACCESS: undefined,
+            CODE_SHELL_MODEL_REQUEST_SIGNING: undefined,
             CODE_SHELL_DATA_ROOT: workerDataRoot,
             CODE_SHELL_CREDENTIAL_ACCESS: "local",
             ...(opts.workerCapabilityModules
@@ -502,6 +559,9 @@ export async function startHeadlessServer(opts) {
                 buildEnv: () => ({
                     ...process.env,
                     CODE_SHELL_REMOTE_LINK_CLIENT_SECRET: undefined,
+                    // These switch on Desktop-main-only IPC clients in the worker.
+                    CODE_SHELL_OPERATION_BATCH_ACCESS: undefined,
+                    CODE_SHELL_MODEL_REQUEST_SIGNING: undefined,
                     CODE_SHELL_DATA_ROOT: workerDataRoot,
                     CODE_SHELL_CREDENTIAL_ACCESS: "local",
                     ...(opts.workerCapabilityModules
@@ -591,7 +651,7 @@ export async function startHeadlessServer(opts) {
         res.setHeader("x-content-type-options", "nosniff");
         res.setHeader("referrer-policy", "no-referrer");
         if (pathname === "/health" && req.method === "GET") {
-            hubJson(res, 200, { status: "ok", mode: hubAuth ? "hub" : "passcode" });
+            hubJson(res, 200, { status: "ok", mode: hubAuth ? "hub" : "passcode", contracts: CONTRACTS });
             return;
         }
         // The public shell probes this before login. A standalone workspace has no

package/dist/serve/host-requests.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Worker → host requests that a headless serve host cannot fulfil.
+ *
+ * Desktop main answers the browser, credential-cookie and workspace-switch
+ * loopbacks plus the `desktop/*` authority requests. serve used to broadcast
+ * them to Web tabs as ordinary approvals, so the worker waited for its timeout
+ * (5 minutes for loopbacks, 30 seconds for automation). Answering at once with
+ * a typed `unsupported` result lets the tool fail fast with a reason.
+ *
+ * Pure and host-neutral on purpose: it moves into packages/host unchanged
+ * (architecture ch.16 §3.2 step 1.1). The wire shapes are documented in
+ * docs/todo/platform-s0-protocol-inventory.md ("S0 应答格式").
+ */
+/** What this host can serve itself; Panel actions are only served with a Panel runtime. */
+export interface ServeHostCapabilities {
+    panels: boolean;
+}
+export declare function unsupportedLoopbackCapability(toolName: unknown, host: ServeHostCapabilities): string | undefined;
+/** The `answer` string for an approved loopback decision. */
+export declare function unsupportedLoopbackAnswer(capability: string): string;
+export declare function isHostAuthorityRequest(message: {
+    id?: unknown;
+    method?: unknown;
+}): message is {
+    id: string | number;
+    method: string;
+};
+/** One JSON-RPC response line to write back to the worker. */
+export declare function unsupportedHostRequestResponse(id: string | number, method: string): string;

package/dist/serve/host-requests.js

@@ -0,0 +1,62 @@
+/**
+ * Worker → host requests that a headless serve host cannot fulfil.
+ *
+ * Desktop main answers the browser, credential-cookie and workspace-switch
+ * loopbacks plus the `desktop/*` authority requests. serve used to broadcast
+ * them to Web tabs as ordinary approvals, so the worker waited for its timeout
+ * (5 minutes for loopbacks, 30 seconds for automation). Answering at once with
+ * a typed `unsupported` result lets the tool fail fast with a reason.
+ *
+ * Pure and host-neutral on purpose: it moves into packages/host unchanged
+ * (architecture ch.16 §3.2 step 1.1). The wire shapes are documented in
+ * docs/todo/platform-s0-protocol-inventory.md ("S0 应答格式").
+ */
+const DESKTOP_ONLY_LOOPBACKS = Object.freeze({
+    __browser_action__: "browser",
+    __credential_action__: "credential.browserCookie",
+    __workspace_action__: "workspace.switch",
+});
+const PANEL_LOOPBACK = "__panel_action__";
+const PANEL_CAPABILITY = "panel";
+const HOST_AUTHORITY_METHOD_PREFIX = "desktop/";
+const METHOD_NOT_FOUND = -32601;
+function unsupportedText(capability) {
+    return `${capability} is not supported by this host (headless serve)`;
+}
+export function unsupportedLoopbackCapability(toolName, host) {
+    if (typeof toolName !== "string")
+        return undefined;
+    if (toolName === PANEL_LOOPBACK)
+        return host.panels ? undefined : PANEL_CAPABILITY;
+    return Object.hasOwn(DESKTOP_ONLY_LOOPBACKS, toolName)
+        ? DESKTOP_ONLY_LOOPBACKS[toolName]
+        : undefined;
+}
+/** The `answer` string for an approved loopback decision. */
+export function unsupportedLoopbackAnswer(capability) {
+    const text = unsupportedText(capability);
+    return JSON.stringify({
+        ok: false,
+        failure: "unsupported",
+        capability,
+        error: text,
+        detail: text,
+    });
+}
+export function isHostAuthorityRequest(message) {
+    return ((typeof message.id === "string" || typeof message.id === "number") &&
+        typeof message.method === "string" &&
+        message.method.startsWith(HOST_AUTHORITY_METHOD_PREFIX));
+}
+/** One JSON-RPC response line to write back to the worker. */
+export function unsupportedHostRequestResponse(id, method) {
+    return JSON.stringify({
+        jsonrpc: "2.0",
+        id,
+        error: {
+            code: METHOD_NOT_FOUND,
+            message: unsupportedText(method),
+            data: { failure: "unsupported", capability: method },
+        },
+    });
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cjhyy/code-shell-server",
-  "version": "0.9.41",
+  "version": "0.9.42",
   "description": "CodeShell server transport layer — mobile remote HTTP/WS host, pairing, passcode gate, tunnel, rooms, uploads, and session/attachment services. Electron-free; precursor of the auth gateway.",
   "type": "module",
   "main": "./dist/index.js",
@@ -61,13 +61,13 @@
     "clean": "node -e \"require('node:fs').rmSync('dist',{recursive:true,force:true})\""
   },
   "dependencies": {
-    "@cjhyy/code-shell-capability-coding": "0.9.41",
-    "@cjhyy/code-shell-core": "0.9.41",
-    "@cjhyy/code-shell-web": "0.9.41",
+    "@cjhyy/code-shell-capability-coding": "0.9.42",
+    "@cjhyy/code-shell-core": "0.9.42",
+    "@cjhyy/code-shell-web": "0.9.42",
     "@modelcontextprotocol/sdk": "^1.31.0",
     "@types/ws": "^8.18.1",
     "ws": "^8.21.0",
-    "@cjhyy/code-shell-link": "0.9.41"
+    "@cjhyy/code-shell-link": "0.9.42"
   },
   "engines": {
     "node": ">=20.10"