@dsh-cove/dsh-web-all 0.0.0-stage → 0.4.3

package/lib/types/host/services/right-pane/browser.js

@@ -0,0 +1,106 @@
+import { BetterSidebarError } from "./wire.js";
+export function extractFrameAncestors(csp) {
+    if (!csp)
+        return undefined;
+    for (const directive of csp.split(';')) {
+        const parts = directive.trim().split(/\s+/);
+        if (parts[0]?.toLowerCase() === 'frame-ancestors')
+            return parts.slice(1).filter(Boolean) || undefined;
+    }
+    return undefined;
+}
+/** Redirect hops the probe follows before it reports the last response as-is. */
+export const MAX_PROBE_REDIRECTS = 3;
+/** Hostnames that resolve inside the operator's own network. */
+const PRIVATE_HOST_SUFFIXES = ['.local', '.localhost', '.internal', '.home.arpa'];
+function isLoopbackHost(hostname) {
+    return hostname === 'localhost' || hostname === '::1' || hostname === '0.0.0.0'
+        || /^127\./u.test(hostname)
+        || /^::ffff:7f/u.test(hostname);
+}
+function isPrivateIpv4(hostname) {
+    const octets = hostname.split('.');
+    if (octets.length !== 4 || !octets.every(part => /^\d{1,3}$/u.test(part) && Number(part) <= 255))
+        return false;
+    const [a, b] = octets.map(Number);
+    return a === 10
+        || (a === 172 && b >= 16 && b <= 31)
+        || (a === 192 && b === 168)
+        || (a === 169 && b === 254)
+        || (a === 100 && b >= 64 && b <= 127)
+        || a === 0
+        || a >= 224;
+}
+function isPrivateIpv6(hostname) {
+    if (!hostname.startsWith(':'))
+        return false;
+    return hostname === '::' || /^f[cd]/u.test(hostname) || /^fe[89ab]/u.test(hostname) || /^::ffff:(?:7f|0a|a9fe|c0a8)/u.test(hostname);
+}
+/**
+ * Whether the HOST may fetch this URL on a caller's behalf.
+ *
+ * The probe is an outbound request the caller never sees the body of, but its
+ * status and embeddability answer still make it a reconnaissance primitive:
+ * only public http(s) destinations are allowed, and every redirect hop is
+ * judged by the same rule.
+ * @param raw - the caller-supplied URL.
+ * @returns the normalized URL, or the reason the destination is refused.
+ */
+export function evaluateProbeTarget(raw) {
+    let url;
+    try {
+        url = new URL(raw);
+    }
+    catch {
+        return { kind: 'blocked', reason: 'invalid url' };
+    }
+    if (url.protocol !== 'http:' && url.protocol !== 'https:')
+        return { kind: 'blocked', reason: 'only http/https urls can be probed' };
+    // WHATWG normalization rewrites exotic IPv4 spellings (integer, hex, octal)
+    // into dotted-quad, so the hostname checks below see the real address.
+    const hostname = url.hostname.replace(/^\[|\]$/gu, '').replace(/\.$/u, '').toLowerCase();
+    if (hostname === '')
+        return { kind: 'blocked', reason: 'url has no host' };
+    if (isLoopbackHost(hostname))
+        return { kind: 'blocked', reason: 'probe target is not allowed: loopback' };
+    if (isPrivateIpv4(hostname) || isPrivateIpv6(hostname))
+        return { kind: 'blocked', reason: 'probe target is not allowed: private network' };
+    if (PRIVATE_HOST_SUFFIXES.some(suffix => hostname.endsWith(suffix))) {
+        return { kind: 'blocked', reason: 'probe target is not allowed: private network' };
+    }
+    return { kind: 'ok', url: url.href };
+}
+/** The probe target, or the refusal the route turns into a 400. */
+function requireProbeTarget(raw) {
+    const verdict = evaluateProbeTarget(raw);
+    if (verdict.kind === 'blocked')
+        throw new BetterSidebarError('bad-request', verdict.reason);
+    return new URL(verdict.url);
+}
+/**
+ * Probe one public URL for embeddability.
+ *
+ * Redirects are followed manually so each hop passes the destination policy;
+ * after {@link MAX_PROBE_REDIRECTS} hops the last response is reported as-is.
+ * @param raw - the caller-supplied URL.
+ * @param fetchImpl - fetch implementation (injected for tests).
+ * @param signal - abort signal bounding the whole probe.
+ * @returns the probe result for the final response.
+ */
+export async function probeBrowserUrl(raw, fetchImpl = fetch, signal) {
+    let target = requireProbeTarget(raw);
+    for (let hop = 0;; hop += 1) {
+        const response = await fetchImpl(target, { method: 'HEAD', redirect: 'manual', signal });
+        const location = response.headers.get('location');
+        const redirected = response.status >= 300 && response.status < 400 && location !== null;
+        if (redirected && hop < MAX_PROBE_REDIRECTS) {
+            target = requireProbeTarget(new URL(location, target).href);
+            continue;
+        }
+        const xFrameOptions = response.headers.get('x-frame-options') ?? undefined;
+        const frameAncestors = extractFrameAncestors(response.headers.get('content-security-policy'));
+        const blocksXfo = xFrameOptions ? /^(deny|sameorigin)$/i.test(xFrameOptions.trim()) : false;
+        const blocksCsp = frameAncestors?.includes("'none'") ?? false;
+        return { url: response.url || target.href, status: response.status, ok: response.ok, ...(xFrameOptions ? { xFrameOptions } : {}), ...(frameAncestors ? { frameAncestors } : {}), embeddable: !blocksXfo && !blocksCsp };
+    }
+}

package/lib/types/host/services/right-pane/index.d.ts

@@ -0,0 +1,22 @@
+/** Register the web-all right-pane host routes: sandboxed-browser probing and workspace Git status. */
+import type { IncomingMessage } from 'node:http';
+import type { Context } from '@deepseek-ai/cordis';
+interface RegisteredWorkspace {
+    id: string;
+    path: string;
+    sessionIds: readonly string[];
+}
+export interface WorkbenchScopeRegistry {
+    list(): Array<{
+        id: unknown;
+        path: string;
+        sessionIds: readonly unknown[];
+    }>;
+}
+/** The strict loopback core of the workbench fence (kept for direct callers). */
+export declare function trusted(request: IncomingMessage): boolean;
+/** Resolve a root token and optional session membership against the host registry. */
+export declare function resolveRegisteredWorkspace(registry: WorkbenchScopeRegistry, rootToken: string, sessionId?: string): RegisteredWorkspace;
+export declare function register(ctx: Context): () => void;
+export { BetterSidebarError } from './wire.ts';
+//# sourceMappingURL=index.d.ts.map

package/lib/types/host/services/right-pane/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/host/services/right-pane/index.ts"],"names":[],"mappings":"AAAA,uGAAuG;AACvG,OAAO,KAAK,EAAE,eAAe,EAAkB,MAAM,WAAW,CAAA;AAIhE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AASlD,UAAU,mBAAmB;IAC3B,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,UAAU,EAAE,SAAS,MAAM,EAAE,CAAA;CAC9B;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,IAAI,KAAK,CAAC;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,SAAS,OAAO,EAAE,CAAA;KAAE,CAAC,CAAA;CAC7E;AAED,iFAAiF;AACjF,wBAAgB,OAAO,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAEzD;AA2BD,sFAAsF;AACtF,wBAAgB,0BAA0B,CAAC,QAAQ,EAAE,sBAAsB,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,mBAAmB,CAQvI;AAkBD,wBAAgB,QAAQ,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,IAAI,CAiCjD;AAED,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAA"}

package/lib/types/host/services/right-pane/index.js

@@ -0,0 +1,114 @@
+import { isAbsolute, relative, sep } from 'node:path';
+import { execFile } from 'node:child_process';
+import { promisify } from 'node:util';
+import { BetterSidebarError } from "./wire.js";
+import { probeBrowserUrl } from "./browser.js";
+import { accessTrustOf } from "../access-trust/index.js";
+import { isLoopbackRequest } from "../access-trust/trust.js";
+const execFileAsync = promisify(execFile);
+/** The strict loopback core of the workbench fence (kept for direct callers). */
+export function trusted(request) {
+    return isLoopbackRequest(request);
+}
+function json(response, status, value) {
+    response.writeHead(status, { 'content-type': 'application/json; charset=utf-8', 'x-content-type-options': 'nosniff' });
+    response.end(JSON.stringify(value));
+}
+async function jsonBody(request, maxBytes = 64 * 1024) {
+    const declared = Number(request.headers['content-length'] ?? 0);
+    if (Number.isFinite(declared) && declared > maxBytes)
+        throw new BetterSidebarError('too-large', `request body exceeds ${maxBytes} bytes`);
+    const chunks = [];
+    let size = 0;
+    for await (const chunk of request) {
+        const value = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
+        size += value.length;
+        if (size > maxBytes)
+            throw new BetterSidebarError('too-large', `request body exceeds ${maxBytes} bytes`);
+        chunks.push(value);
+    }
+    try {
+        return JSON.parse(Buffer.concat(chunks).toString('utf8'));
+    }
+    catch {
+        throw new BetterSidebarError('bad-request', 'request body must be valid JSON');
+    }
+}
+function inside(root, target) {
+    const child = relative(root, target);
+    return child === '' || (!child.startsWith(`..${sep}`) && child !== '..' && !isAbsolute(child));
+}
+/** Resolve a root token and optional session membership against the host registry. */
+export function resolveRegisteredWorkspace(registry, rootToken, sessionId) {
+    const match = registry.list().find(workspace => String(workspace.id) === rootToken || workspace.path === rootToken);
+    if (!match)
+        throw new BetterSidebarError('forbidden', 'workspace root is not registered');
+    const sessionIds = match.sessionIds.map(String);
+    if (sessionId !== undefined && sessionId !== '' && !sessionIds.includes(sessionId)) {
+        throw new BetterSidebarError('forbidden', 'session does not belong to this workspace');
+    }
+    return { id: String(match.id), path: match.path, sessionIds };
+}
+function targetFromQuery(registry, url) {
+    const sessionId = url.searchParams.get('session') ?? undefined;
+    let rootToken = url.searchParams.get('root') ?? '';
+    let path = url.searchParams.get('path') ?? '';
+    // An absolute path is accepted only after it is mapped beneath a registered
+    // workspace. It never reaches the filesystem directly.
+    if (rootToken === '' && isAbsolute(path)) {
+        const workspace = registry.list().find(candidate => inside(candidate.path, path));
+        if (!workspace)
+            throw new BetterSidebarError('forbidden', 'absolute path is outside registered workspaces');
+        rootToken = String(workspace.id);
+        path = relative(workspace.path, path).split(sep).join('/');
+    }
+    if (rootToken === '')
+        throw new BetterSidebarError('bad-request', 'workspace root is required');
+    return { root: resolveRegisteredWorkspace(registry, rootToken, sessionId), path };
+}
+export function register(ctx) {
+    const registry = ctx.workspaceRegistry;
+    const isTrusted = accessTrustOf(ctx).isTrusted;
+    const handler = async (request, response) => {
+        if (!isTrusted(request))
+            return json(response, 403, { error: 'forbidden' });
+        const url = new URL(request.url ?? '/', 'http://dsh.local');
+        try {
+            if (url.pathname === '/api/workbench/browser-probe' && request.method === 'POST') {
+                const payload = await jsonBody(request);
+                if (typeof payload.url !== 'string')
+                    throw new BetterSidebarError('bad-request', 'url is required');
+                const controller = new AbortController();
+                const timer = setTimeout(() => controller.abort(), 10_000);
+                try {
+                    return json(response, 200, await probeBrowserUrl(payload.url, fetch, controller.signal));
+                }
+                finally {
+                    clearTimeout(timer);
+                }
+            }
+            if (url.pathname === '/api/workbench/git-status' && request.method === 'GET') {
+                const target = targetFromQuery(registry, url);
+                if (target.path !== '')
+                    throw new BetterSidebarError('bad-request', 'git status root must be the workspace root');
+                const { stdout } = await execFileAsync('git', ['status', '--porcelain=v1', '-z'], { cwd: target.root.path, timeout: 10_000, maxBuffer: 1024 * 1024 });
+                const entries = stdout.split('\0').filter(Boolean).map(row => ({ xy: row.slice(0, 2), path: row.slice(3) }));
+                return json(response, 200, { entries });
+            }
+            response.writeHead(404);
+            response.end();
+        }
+        catch (error) {
+            const code = error instanceof BetterSidebarError ? error.code : 'internal';
+            const status = code === 'bad-request' ? 400
+                : code === 'forbidden' ? 403
+                    : code === 'not-found' ? 404
+                        : code === 'too-large' ? 413
+                            : 500;
+            json(response, status, { error: error instanceof Error ? error.message : String(error), code });
+        }
+    };
+    const disposeHttp = ctx.webServer.register({ kind: 'prefix', path: '/api/workbench', handler });
+    return () => { disposeHttp(); };
+}
+export { BetterSidebarError } from "./wire.js";

package/lib/types/host/services/right-pane/wire.d.ts

@@ -0,0 +1,6 @@
+/** Typed errors returned by the right-pane service domain. */
+export declare class BetterSidebarError extends Error {
+    readonly code: 'bad-request' | 'forbidden' | 'not-found' | 'method-error' | 'too-large' | 'fs-error' | 'git-error' | 'terminal-error' | 'settings-rejected' | 'settings-conflict' | 'internal';
+    constructor(code: 'bad-request' | 'forbidden' | 'not-found' | 'method-error' | 'too-large' | 'fs-error' | 'git-error' | 'terminal-error' | 'settings-rejected' | 'settings-conflict' | 'internal', message: string);
+}
+//# sourceMappingURL=wire.d.ts.map

package/lib/types/host/services/right-pane/wire.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wire.d.ts","sourceRoot":"","sources":["../../../../../src/host/services/right-pane/wire.ts"],"names":[],"mappings":"AAAA,8DAA8D;AAC9D,qBAAa,kBAAmB,SAAQ,KAAK;IAEzC,QAAQ,CAAC,IAAI,EAAE,aAAa,GAAG,WAAW,GAAG,WAAW,GAAG,cAAc,GAAG,WAAW,GAAG,UAAU,GAAG,WAAW,GAAG,gBAAgB,GAAG,mBAAmB,GAAG,mBAAmB,GAAG,UAAU;gBAArL,IAAI,EAAE,aAAa,GAAG,WAAW,GAAG,WAAW,GAAG,cAAc,GAAG,WAAW,GAAG,UAAU,GAAG,WAAW,GAAG,gBAAgB,GAAG,mBAAmB,GAAG,mBAAmB,GAAG,UAAU,EAC9L,OAAO,EAAE,MAAM;CAKlB"}

package/lib/types/host/services/right-pane/wire.js

@@ -0,0 +1,9 @@
+/** Typed errors returned by the right-pane service domain. */
+export class BetterSidebarError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+        this.name = 'BetterSidebarError';
+    }
+}

package/lib/types/host/services/schedule-mode/config.d.ts

@@ -0,0 +1,11 @@
+import z from 'schemastery';
+export declare const SCHEDULE_MODE_SETTINGS_NAMESPACE = "schedule-mode";
+export interface ScheduleModeConfig {
+    enabled?: boolean;
+    /** 给每条运行会话命名（`<任务名> · #N`）；关闭时使用运行时默认标题。 */
+    nameRunSessions?: boolean;
+    /** 每个任务保留的运行记录条数。 */
+    runHistoryLimit?: number;
+}
+export declare const Config: z<ScheduleModeConfig>;
+//# sourceMappingURL=config.d.ts.map

package/lib/types/host/services/schedule-mode/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../../../../src/host/services/schedule-mode/config.ts"],"names":[],"mappings":"AAOA,OAAO,CAAC,MAAM,aAAa,CAAA;AAE3B,eAAO,MAAM,gCAAgC,kBAAkB,CAAA;AAE/D,MAAM,WAAW,kBAAkB;IACjC,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,4CAA4C;IAC5C,eAAe,CAAC,EAAE,OAAO,CAAA;IACzB,qBAAqB;IACrB,eAAe,CAAC,EAAE,MAAM,CAAA;CACzB;AAED,eAAO,MAAM,MAAM,EAIF,CAAC,CAAC,kBAAkB,CAAC,CAAA"}

package/lib/types/host/services/schedule-mode/config.js

@@ -0,0 +1,15 @@
+/**
+ * schedule-mode 家族设置命名空间（`web-all` Config 的一个键）。
+ *
+ * 与其它能力域一致：schema 在模块顶层登记，装配器在所有服务域 import 求值
+ * 完成后构建聚合 Config；读取走 `familyNamespace()`，因此改设置无需重挂插件。
+ */
+import { registerFamilyNamespace } from "../family-config.js";
+import z from 'schemastery';
+export const SCHEDULE_MODE_SETTINGS_NAMESPACE = 'schedule-mode';
+export const Config = z.object({
+    enabled: z.boolean().default(true),
+    nameRunSessions: z.boolean().default(true),
+    runHistoryLimit: z.number().step(1).min(1).default(50),
+});
+registerFamilyNamespace(SCHEDULE_MODE_SETTINGS_NAMESPACE, Config);

package/lib/types/host/services/schedule-mode/engine.d.ts

@@ -0,0 +1,150 @@
+/**
+ * 「会话模式」引擎：把原生 schedule 任务在 `original` / `new` 两种运行目标之间
+ * 切换，并在 `new` 模式下按次轮转运行副本。
+ *
+ * 引擎不实现计时：`new` 模式照样用原生 `schedule.create` 按原规则挂一把副本，
+ * 副本到点由原生运行时投递进运行会话；引擎只负责「投递确认后开下一条会话并
+ * 换挂副本」。因此 cron / 每日 / 每周的时点语义与原生完全一致。
+ *
+ * 一致性：
+ *   - 所有写操作走同一条串行队列，和原生 schedule 服务的 FIFO 语义对齐；
+ *   - `reconcile()` 以「副本的下一次时点是否已经推进」为主判据、原生投递回执为
+ *     辅助判据。已持久化的精确任务关联可以恢复；原生 create 无幂等键，
+ *     未保存返回 ID 的窗口只能标记 recovery-required，不能承诺 exactly-once。
+ *
+ * 全部外部副作用通过 {@link ScheduleModePorts} 注入，纯逻辑可脱离 DSH 运行时
+ * 在单测里用假件驱动。
+ *
+ * 身份约定：策略的 `logicalId` 是用户最初创建的那条原生任务 id，永不改变
+ * （面板据此稳定定位）；`armedTaskId` 指向当前真正挂在原生调度上的那一行
+ * （`new` 模式是轮转副本；切回 `original` 后是还原出来的新行）。
+ */
+import type { NativeTaskView } from '../../../core/schedule-mode/native.ts';
+import { type NativeCreateRequest, type ScheduleModeRule, type ScheduleModeRun } from '../../../core/schedule-mode/types.ts';
+import type { ScheduleModeListValue, ScheduleModeTaskView } from '../../../core/schedule-mode/view.ts';
+import type { ScheduleModeStore } from './store.ts';
+/** 原生 schedule 面：只声明用到的三个方法。 */
+export interface ScheduleModePorts {
+    /** 原生任务目录（`ctx.schedule.catalog()` 的已解码投影）。 */
+    listTasks(): Promise<NativeTaskView[]>;
+    /** 在原会话或运行会话上挂一把任务；返回 id 与首次时点。 */
+    createTask(sessionId: string, request: NativeCreateRequest): Promise<{
+        id: string;
+        scheduledAt: string;
+    }>;
+    /** 删除一条原生任务（必须带正确绑定会话）。 */
+    deleteTask(sessionId: string, id: string): Promise<void>;
+    /** 读取会话的 cwd / preset，用于新建运行会话时继承。 */
+    inspectSession(sessionId: string): Promise<{
+        cwd?: string;
+        agentPreset?: string;
+    }>;
+    /** 新建一条运行会话。创建时**不**请求工作区归属（见 `session-create.ts`）。 */
+    createSession(input: {
+        cwd?: string;
+        agentPreset?: string;
+    }): Promise<string>;
+    /**
+     * 运行会话投递出第一轮后把它挂回所属工作区。
+     * 待运行期间不挂：工作区里的空会话会被 DSH 的「新建会话」复用。
+     */
+    attachSession?(sessionId: string, cwd?: string): Promise<void>;
+    /** 给运行会话命名；失败不影响运行。 */
+    renameSession?(sessionId: string, title: string): Promise<void>;
+    now(): number;
+    log(message: string, error?: unknown): void;
+    /** 运行记录保留条数。 */
+    runHistoryLimit?: number;
+}
+/** 稳定的引擎错误码（路由与工具据此回稳定文案）。 */
+export type ScheduleModeErrorCode = 'unknown-task' | 'task-ended' | 'invalid-request' | 'recovery-required';
+/** 引擎可预期的失败。 */
+export declare class ScheduleModeError extends Error {
+    readonly code: ScheduleModeErrorCode;
+    constructor(code: ScheduleModeErrorCode, message: string);
+}
+export declare class ScheduleModeEngine {
+    private readonly store;
+    private readonly ports;
+    private pending;
+    private disposed;
+    private enabled;
+    private epoch;
+    private executingEpoch;
+    dispose(): void;
+    setEnabled(value: boolean): void;
+    private assertActive;
+    constructor(store: ScheduleModeStore, ports: ScheduleModePorts);
+    /** 串行化所有写操作（与原生 schedule 的 FIFO 对齐）。 */
+    private serialize;
+    private nativeTasks;
+    private get historyLimit();
+    /** 原生侧（自动化任务页/原生工具）对副本的编辑是否与策略快照不一致。 */
+    private isCopyEdited;
+    /**
+     * 把原生侧对副本的编辑并入策略并落盘，返回更新后的策略。
+     * 编辑会重排副本时点，所以同时把 `nextScheduledAt` 对齐到副本，避免
+     * 「编辑造成的时点变化」被误判成一次投递而触发无意义轮转。
+     */
+    private adoptCopyEdits;
+    /**
+     * 合并视图：`new` 模式的一条逻辑任务 + 其余原生任务。
+     * 原生 schedule 不可用时返回 `available: false`（面板给出提示），不抛错。
+     */
+    list(): Promise<ScheduleModeListValue>;
+    /** 读取一条逻辑任务的当前视图（找不到返回 undefined）。 */
+    task(sessionId: string, id: string): Promise<ScheduleModeTaskView | undefined>;
+    /**
+     * 切换运行目标。
+     * - `original`：撤下轮转副本并把任务还原到原会话（规则仍可挂时）。
+     * - `new`：把原任务轮转到一条新建运行会话上，原会话不再接收投递。
+     */
+    setMode(sessionId: string, id: string, mode: 'original' | 'new'): Promise<ScheduleModeTaskView>;
+    /** 删除一条逻辑任务（`new` 模式一并撤下轮转副本），返回是否删除成功。 */
+    deleteTask(sessionId: string, id: string): Promise<boolean>;
+    /**
+     * 与原生目录对齐的幂等收敛：记录已完成的新会话运行，并把副本轮转到下一条会话。
+     * 由 `schedule/changed`、Host 启动、以及面板显式刷新触发。
+     */
+    reconcile(): Promise<void>;
+    /** 原会话被归档/停止时撤下轮转副本（原生只清理绑定在原会话上的任务）。 */
+    stopSession(sourceSessionId: string): Promise<void>;
+    /**
+     * 解析策略：面板与工具给的是 (原会话, 逻辑 id)；原生页给的是副本 id，且副本挂在
+     * 运行会话上，所以副本 id 不再要求会话与原会话一致，但**必须**是这个策略自己的
+     * 会话（原会话或运行会话）。任务 id 不是凭证：外部只要枚举到 id 就能凭它操作别的
+     * 会话的任务，因此这条回退只在调用方属于同一策略时生效。
+     */
+    private resolvePolicy;
+    /**
+     * 空目录二次确认：再读一次，只有确实仍为空才算「原生侧被删光了」。
+     * 读失败视为未确认（宁可暂时保留策略，也不误退役一个还在跑的任务）。
+     */
+    private catalogConfirmedEmpty;
+    /**
+     * 待运行会话：已经建好、但还没有投递过的那条运行会话（`runSessionId` 尚未出现在
+     * `runs` 里）。它已经占用了一轮 `#N`，重建副本时复用它可以避免同一轮留下两条同名
+     * 会话、以及被弃用的那条以空会话身份留在会话列表里。已投递过的会话不算待运行会话。
+     */
+    private pendingRunSession;
+    /** 投递已确认的运行会话挂回工作区（待运行期间它一直留在工作区之外）。 */
+    private attachRunSession;
+    private reconcileOne;
+    private blockRecovery;
+    /** Write-ahead journal driver. Only exact saved row IDs may be deleted/adopted. */
+    private resumeTransition;
+    /** Persist cancellation before reading the directory, including during a failed switch. */
+    private beginCleanup;
+    /** Restore through the same journal as rotation; recovery retains the requested direction. */
+    private disarm;
+    private inspect;
+    private viewForNative;
+    /**
+     * 策略视图。逻辑 id 恒为 `logicalId`（面板据此稳定定位），`activeTaskId`
+     * 指向当前真正挂在原生调度上的那一行；策略停止后任务回到 `original`，
+     * 状态改由还原出来的原生行决定。
+     */
+    private viewForPolicy;
+}
+export type { ScheduleModeRule, ScheduleModeRun };
+//# sourceMappingURL=engine.d.ts.map

package/lib/types/host/services/schedule-mode/engine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.d.ts","sourceRoot":"","sources":["../../../../../src/host/services/schedule-mode/engine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAA;AAC3E,OAAO,EAEL,KAAK,mBAAmB,EAA2B,KAAK,gBAAgB,EAAE,KAAK,eAAe,EAC/F,MAAM,sCAAsC,CAAA;AAC7C,OAAO,KAAK,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAA;AACtG,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAA;AAEnD,gCAAgC;AAChC,MAAM,WAAW,iBAAiB;IAChC,+CAA+C;IAC/C,SAAS,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC,CAAA;IACtC,mCAAmC;IACnC,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IACzG,2BAA2B;IAC3B,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACxD,sCAAsC;IACtC,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAClF,uDAAuD;IACvD,aAAa,CAAC,KAAK,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IAC7E;;;OAGG;IACH,aAAa,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC9D,uBAAuB;IACvB,aAAa,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC/D,GAAG,IAAI,MAAM,CAAA;IACb,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,GAAG,IAAI,CAAA;IAC3C,gBAAgB;IAChB,eAAe,CAAC,EAAE,MAAM,CAAA;CACzB;AAED,8BAA8B;AAC9B,MAAM,MAAM,qBAAqB,GAAG,cAAc,GAAG,YAAY,GAAG,iBAAiB,GAAG,mBAAmB,CAAA;AAE3G,gBAAgB;AAChB,qBAAa,iBAAkB,SAAQ,KAAK;IAC9B,QAAQ,CAAC,IAAI,EAAE,qBAAqB;gBAA3B,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,MAAM;CAIlE;AAiBD,qBAAa,kBAAkB;IAe3B,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,KAAK;IAfxB,OAAO,CAAC,OAAO,CAAI;IACnB,OAAO,CAAC,QAAQ,CAAQ;IACxB,OAAO,CAAC,OAAO,CAAO;IACtB,OAAO,CAAC,KAAK,CAAI;IACjB,OAAO,CAAC,cAAc,CAAoB;IAE1C,OAAO,IAAI,IAAI;IACf,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI;IAEhC,OAAO,CAAC,YAAY;gBAKD,KAAK,EAAE,iBAAiB,EACxB,KAAK,EAAE,iBAAiB;IAG3C,wCAAwC;IACxC,OAAO,CAAC,SAAS;YAaH,WAAW;IAUzB,OAAO,KAAK,YAAY,GAEvB;IAED,wCAAwC;IACxC,OAAO,CAAC,YAAY;IAMpB;;;;OAIG;IACH,OAAO,CAAC,cAAc;IAgBtB;;;OAGG;IACG,IAAI,IAAI,OAAO,CAAC,qBAAqB,CAAC;IA4C5C,sCAAsC;IAChC,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,GAAG,SAAS,CAAC;IAKpF;;;;OAIG;IACG,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,KAAK,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAkFrG,2CAA2C;IACrC,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAiBjE;;;OAGG;IACG,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC;IA4BhC,yCAAyC;IACnC,WAAW,CAAC,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAWzD;;;;;OAKG;IACH,OAAO,CAAC,aAAa;IAerB;;;OAGG;YACW,qBAAqB;IAUnC;;;;OAIG;IACH,OAAO,CAAC,iBAAiB;IAMzB,wCAAwC;YAC1B,gBAAgB;YAMhB,YAAY;IA2D1B,OAAO,CAAC,aAAa;IAMrB,mFAAmF;YACrE,gBAAgB;IA2H9B,2FAA2F;YAC7E,YAAY;IAkB1B,8FAA8F;YAChF,MAAM;YAgBN,OAAO;IAKrB,OAAO,CAAC,aAAa;IAiBrB;;;;OAIG;IACH,OAAO,CAAC,aAAa;CAuBtB;AAED,YAAY,EAAE,gBAAgB,EAAE,eAAe,EAAE,CAAA"}