@linkshell/gateway 0.4.54 → 0.5.0

package/dist/wire/src/updates.js

@@ -0,0 +1,210 @@
+import { z } from "zod";
+import { permissionOptionSchema, sessionDriverSchema, sessionStateSchema, toolKindSchema } from "./model.js";
+// Session updates mirror ACP's `SessionUpdate` shapes (discriminated by
+// `sessionUpdate`) so one renderer works for every agent. LinkShell-specific
+// updates use the `ls_` prefix.
+export const contentBlockSchema = z.discriminatedUnion("type", [
+    z.object({ type: z.literal("text"), text: z.string() }),
+    z.object({
+        type: z.literal("image"),
+        mimeType: z.string(),
+        data: z.string().optional(),
+        uri: z.string().optional(),
+    }),
+    z.object({
+        type: z.literal("resource_link"),
+        uri: z.string(),
+        name: z.string(),
+        /** What the link names: a file (default), a skill the user invoked, or another agent. */
+        kind: z.enum(["file", "skill", "agent"]).optional(),
+    }),
+]);
+export const toolCallStatusSchema = z.enum(["pending", "in_progress", "completed", "failed"]);
+export const toolCallContentSchema = z.discriminatedUnion("type", [
+    z.object({ type: z.literal("content"), content: contentBlockSchema }),
+    /** ACP diff: full before/after text. */
+    z.object({
+        type: z.literal("diff"),
+        path: z.string(),
+        oldText: z.string().nullable().optional(),
+        newText: z.string(),
+    }),
+    /** Unified diff, for agents (Codex) that report patches rather than file text. */
+    z.object({
+        type: z.literal("patch"),
+        path: z.string(),
+        change: z.enum(["add", "delete", "update"]),
+        movePath: z.string().optional(),
+        diff: z.string(),
+    }),
+    z.object({ type: z.literal("terminal"), terminalId: z.string() }),
+]);
+export const toolCallLocationSchema = z.object({
+    path: z.string(),
+    line: z.number().int().optional(),
+});
+/**
+ * What a tool call is, when the agent tells us more than ACP's coarse `kind`.
+ * Host drivers fill it from each agent's own tool names; clients render it the
+ * same way for every agent and fall back to `title` + `kind` without it.
+ */
+export const toolDetailSchema = z.discriminatedUnion("type", [
+    z.object({ type: z.literal("mcp"), server: z.string(), tool: z.string() }),
+    z.object({
+        type: z.literal("subagent"),
+        /** spawn starts a sub-agent (its work nests under this call); the rest talk to one. */
+        action: z.enum(["spawn", "message", "wait", "stop", "resume", "list"]).default("spawn"),
+        task: z.string().optional(),
+        /** The sub-agent's role or type, e.g. "Explore". */
+        agentType: z.string().optional(),
+        model: z.string().optional(),
+    }),
+    z.object({ type: z.literal("skill"), name: z.string(), description: z.string().optional() }),
+    z.object({ type: z.literal("web_search"), query: z.string().optional() }),
+    z.object({ type: z.literal("image_generation"), prompt: z.string().optional() }),
+    z.object({ type: z.literal("compaction") }),
+    z.object({ type: z.literal("review"), phase: z.enum(["started", "finished"]) }),
+]);
+export const planEntrySchema = z.object({
+    content: z.string(),
+    priority: z.enum(["high", "medium", "low"]).default("medium"),
+    status: z.enum(["pending", "in_progress", "completed"]),
+});
+export const stopReasonSchema = z.enum(["end_turn", "cancelled", "error", "max_tokens", "refusal"]);
+export const sessionConfigOptionSchema = z.object({
+    /** Agent-defined id; "model" and "mode" are the common ones. */
+    id: z.string(),
+    name: z.string(),
+    category: z.enum(["model", "mode", "effort", "other"]).default("other"),
+    current: z.string(),
+    values: z.array(z.object({ value: z.string(), name: z.string(), description: z.string().optional() })),
+});
+export const sessionUpdateSchema = z.discriminatedUnion("sessionUpdate", [
+    z.object({
+        sessionUpdate: z.literal("user_message_chunk"),
+        messageId: z.string().optional(),
+        content: contentBlockSchema,
+    }),
+    z.object({
+        sessionUpdate: z.literal("agent_message_chunk"),
+        parentToolCallId: z.string().optional(),
+        messageId: z.string(),
+        content: contentBlockSchema,
+    }),
+    z.object({
+        sessionUpdate: z.literal("agent_thought_chunk"),
+        parentToolCallId: z.string().optional(),
+        messageId: z.string(),
+        content: contentBlockSchema,
+    }),
+    z.object({
+        sessionUpdate: z.literal("tool_call"),
+        toolCallId: z.string(),
+        /** Set when a sub-agent made this call: the sub-agent's own (spawn) tool call. */
+        parentToolCallId: z.string().optional(),
+        title: z.string(),
+        kind: toolKindSchema,
+        status: toolCallStatusSchema,
+        rawInput: z.unknown().optional(),
+        content: z.array(toolCallContentSchema).optional(),
+        locations: z.array(toolCallLocationSchema).optional(),
+        detail: toolDetailSchema.optional(),
+    }),
+    z.object({
+        sessionUpdate: z.literal("tool_call_update"),
+        toolCallId: z.string(),
+        parentToolCallId: z.string().optional(),
+        status: toolCallStatusSchema.optional(),
+        title: z.string().optional(),
+        detail: toolDetailSchema.optional(),
+        /** Replaces the tool call's content when present. */
+        content: z.array(toolCallContentSchema).optional(),
+        /** Streamed output appended to the tool call's running output. */
+        appendOutput: z.string().optional(),
+        rawOutput: z.unknown().optional(),
+    }),
+    z.object({
+        sessionUpdate: z.literal("plan"),
+        entries: z.array(planEntrySchema),
+    }),
+    z.object({
+        sessionUpdate: z.literal("available_commands_update"),
+        availableCommands: z.array(z.object({ name: z.string(), description: z.string(), hint: z.string().optional() })),
+    }),
+    z.object({
+        sessionUpdate: z.literal("current_mode_update"),
+        currentModeId: z.string(),
+    }),
+    z.object({
+        sessionUpdate: z.literal("session_info_update"),
+        title: z.string().optional(),
+        model: z.string().optional(),
+    }),
+    z.object({
+        sessionUpdate: z.literal("usage_update"),
+        usedTokens: z.number().optional(),
+        contextWindow: z.number().optional(),
+    }),
+    // ── LinkShell extensions ──
+    z.object({
+        sessionUpdate: z.literal("ls_message_done"),
+        parentToolCallId: z.string().optional(),
+        messageId: z.string(),
+        role: z.enum(["agent", "thought", "user"]),
+    }),
+    /** Selectable session settings (model, permission mode, effort…) as the agent reports them. */
+    z.object({
+        sessionUpdate: z.literal("ls_config"),
+        options: z.array(sessionConfigOptionSchema),
+    }),
+    z.object({
+        sessionUpdate: z.literal("ls_notice"),
+        level: z.enum(["info", "warning"]),
+        title: z.string(),
+        detail: z.string().optional(),
+    }),
+    z.object({
+        sessionUpdate: z.literal("ls_turn"),
+        /** A sub-agent's turn: whether the sub-agent under this call is working. */
+        parentToolCallId: z.string().optional(),
+        state: z.enum(["started", "ended"]),
+        turnId: z.string().optional(),
+        stopReason: stopReasonSchema.optional(),
+    }),
+    z.object({
+        sessionUpdate: z.literal("ls_permission"),
+        requestId: z.string(),
+        toolCallId: z.string().optional(),
+        title: z.string(),
+        detail: z.string().optional(),
+        options: z.array(permissionOptionSchema).min(1),
+    }),
+    z.object({
+        sessionUpdate: z.literal("ls_permission_resolved"),
+        requestId: z.string(),
+        optionId: z.string().optional(),
+    }),
+    z.object({
+        sessionUpdate: z.literal("ls_driver"),
+        driver: sessionDriverSchema,
+        deviceId: z.string().optional(),
+    }),
+    z.object({
+        sessionUpdate: z.literal("ls_status"),
+        state: sessionStateSchema,
+    }),
+    z.object({
+        sessionUpdate: z.literal("ls_error"),
+        code: z.string(),
+        message: z.string(),
+        hint: z.string().optional(),
+    }),
+]);
+/** One entry in a session's append-only event log. */
+export const sessionEventSchema = z.object({
+    sessionId: z.string(),
+    seq: z.number().int().positive(),
+    ts: z.number(),
+    update: sessionUpdateSchema,
+});
+//# sourceMappingURL=updates.js.map

package/dist/wire/src/updates.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"updates.js","sourceRoot":"","sources":["../../../../wire/src/updates.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAE7G,wEAAwE;AACxE,6EAA6E;AAC7E,gCAAgC;AAEhC,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAC7D,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IACvD,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;QACxB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;QACpB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC3B,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC3B,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC;QAChC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;QACf,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,yFAAyF;QACzF,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE;KACpD,CAAC;CACH,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,aAAa,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC;AAG9F,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAChE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC;IACrE,wCAAwC;IACxC,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;QACvB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;QACzC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;KACpB,CAAC;IACF,kFAAkF;IAClF,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;QACxB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAC3C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC/B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;KACjB,CAAC;IACF,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;CAClE,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;CAClC,CAAC,CAAC;AAGH;;;;GAIG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAC3D,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IAC1E,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;QAC3B,uFAAuF;QACvF,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;QACvF,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC3B,oDAAoD;QACpD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAChC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC7B,CAAC;IACF,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC;IAC5F,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC;IACzE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC;IAChF,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;IAC3C,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC,EAAE,CAAC;CAChF,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;IAC7D,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC;CACxD,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,WAAW,EAAE,OAAO,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC,CAAC;AAGpG,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,gEAAgE;IAChE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IACvE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;CACvG,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,kBAAkB,CAAC,eAAe,EAAE;IACvE,CAAC,CAAC,MAAM,CAAC;QACP,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC;QAC9C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAChC,OAAO,EAAE,kBAAkB;KAC5B,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC;QAC/C,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACvC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;QACrB,OAAO,EAAE,kBAAkB;KAC5B,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC;QAC/C,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACvC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;QACrB,OAAO,EAAE,kBAAkB;KAC5B,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;QACrC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;QACtB,kFAAkF;QAClF,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACvC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;QACjB,IAAI,EAAE,cAAc;QACpB,MAAM,EAAE,oBAAoB;QAC5B,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;QAChC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,QAAQ,EAAE;QAClD,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,QAAQ,EAAE;QACrD,MAAM,EAAE,gBAAgB,CAAC,QAAQ,EAAE;KACpC,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC;QAC5C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;QACtB,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACvC,MAAM,EAAE,oBAAoB,CAAC,QAAQ,EAAE;QACvC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC5B,MAAM,EAAE,gBAAgB,CAAC,QAAQ,EAAE;QACnC,qDAAqD;QACrD,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,QAAQ,EAAE;QAClD,kEAAkE;QAClE,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACnC,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;KAClC,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;QAChC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC;KAClC,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,2BAA2B,CAAC;QACrD,iBAAiB,EAAE,CAAC,CAAC,KAAK,CACxB,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CACrF;KACF,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC;QAC/C,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;KAC1B,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC;QAC/C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC5B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC7B,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC;QACxC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACjC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KACrC,CAAC;IACF,6BAA6B;IAC7B,CAAC,CAAC,MAAM,CAAC;QACP,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC;QAC3C,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACvC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;QACrB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;KAC3C,CAAC;IACF,+FAA+F;IAC/F,CAAC,CAAC,MAAM,CAAC;QACP,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;QACrC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC;KAC5C,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;QACrC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAClC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;QACjB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC9B,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;QACnC,4EAA4E;QAC5E,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACvC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACnC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC7B,UAAU,EAAE,gBAAgB,CAAC,QAAQ,EAAE;KACxC,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC;QACzC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;QACrB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACjC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;QACjB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC7B,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;KAChD,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,wBAAwB,CAAC;QAClD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;QACrB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAChC,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;QACrC,MAAM,EAAE,mBAAmB;QAC3B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAChC,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;QACrC,KAAK,EAAE,kBAAkB;KAC1B,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;QACpC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;QACnB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC5B,CAAC;CACH,CAAC,CAAC;AAIH,sDAAsD;AACtD,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAChC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,MAAM,EAAE,mBAAmB;CAC5B,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@linkshell/gateway",
-  "version": "0.4.54",
+  "version": "0.5.0",
   "type": "module",
   "main": "dist/gateway/src/index.js",
   "exports": {
@@ -28,6 +28,8 @@
   "dependencies": {
     "zod": "^3.24.3",
     "ws": "^8.18.1",
+    "@linkshell/wire": "0.1.0",
+    "@linkshell/gateway-v2": "0.1.0",
     "@linkshell/protocol": "0.4.10"
   },
   "devDependencies": {
@@ -35,6 +37,9 @@
     "tsx": "^4.19.3",
     "vitest": "^3.2.1"
   },
+  "engines": {
+    "node": ">=22.13"
+  },
   "scripts": {
     "build": "tsc -p tsconfig.json",
     "typecheck": "tsc -p tsconfig.json --noEmit",

package/src/index.ts

@@ -24,7 +24,11 @@ import {
   handleTunnelRequest,
   cleanupSessionTunnels,
 } from "./tunnel.js";
-import { AUTH_REQUIRED, requireAuth, checkWsAuth, validateRequest, checkSubscriptionByUserId, canReadSessionDetail } from "./auth-middleware.js";
+import { AUTH_REQUIRED, SUPABASE_ANON_KEY, SUPABASE_URL, requireAuth, checkWsAuth, validateRequest, checkSubscriptionByUserId, canReadSessionDetail } from "./auth-middleware.js";
+import { mkdirSync } from "node:fs";
+import { dirname } from "node:path";
+import { Gateway as RelayGateway, supabaseVerifier } from "@linkshell/gateway-v2";
+import { RELAY_PATH } from "@linkshell/wire";
 import { setCors } from "./cors.js";
 import { serveWeb, serveWebAsset, webEnabled, webDistPath } from "./static-web.js";
 
@@ -282,7 +286,7 @@ async function handleRequest(
 
   // Health check
   if (method === "GET" && url.pathname === "/healthz") {
-    json(res, 200, { ok: true, version: GATEWAY_VERSION });
+    json(res, 200, { ok: true, version: GATEWAY_VERSION, relay: relay.connected });
     return;
   }
 
@@ -508,9 +512,47 @@ const wss = new WebSocketServer({
   maxPayload: MAX_WS_MESSAGE_SIZE,
 });
 
+// ── v2 relay (end-to-end encrypted, routes ciphertext only) ─────────
+// Served on the same port at RELAY_PATH. Pairings and machine/device keys are
+// kept in SQLite at RELAY_DATA_PATH (a persistent volume in production).
+const relayDataPath = process.env.RELAY_DATA_PATH ?? "./data/relay.db";
+mkdirSync(dirname(relayDataPath), { recursive: true });
+const relay = new RelayGateway({
+  port: 0,
+  databasePath: relayDataPath,
+  verifyToken: SUPABASE_URL && SUPABASE_ANON_KEY ? supabaseVerifier(SUPABASE_URL, SUPABASE_ANON_KEY) : undefined,
+  log: (message) => log("info", `[relay] ${message}`),
+  // The official gateway is a subscription service: a computer needs an active
+  // Pro account to use it (as with v1). Devices only reach computers they're
+  // paired with or share an account with, so they need nothing more.
+  admit: AUTH_REQUIRED
+    ? async ({ role, userId }) => {
+        if (role !== "machine") return undefined;
+        if (!userId) return "官方网关需要登录 Pro 账号：在电脑上运行 linkshell login";
+        const subscription = await checkSubscriptionByUserId(userId);
+        // A lookup failure isn't a lapsed subscription; don't lock people out over it.
+        if (subscription.status === "inactive") return "官方网关需要 Pro 订阅：https://itool.tech";
+        if (subscription.status === "unknown") log("warn", `[relay] subscription check unavailable (${subscription.reason}); admitting ${userId}`);
+        return undefined;
+      }
+    : undefined,
+});
+relay.attach();
+
 server.on("upgrade", (request, socket, head) => {
   const url = new URL(request.url ?? "/", `http://${request.headers.host}`);
 
+  if (url.pathname === RELAY_PATH) {
+    const ip = getClientIp(request);
+    if (!isRateLimitBypassed(ip) && !wsConnectLimiter.allow(ip)) {
+      socket.write("HTTP/1.1 429 Too Many Requests\r\n\r\n");
+      socket.destroy();
+      return;
+    }
+    relay.handleUpgrade(request, socket, head);
+    return;
+  }
+
   // Tunnel WebSocket upgrade (for HMR etc.)
   const tunnelParsed = parseTunnelPath(url.pathname);
   if (tunnelParsed) {
@@ -851,6 +893,7 @@ function shutdown() {
   pairingManager.destroy();
   tokenManager.destroy();
   hostAuthManager.destroy();
+  void relay.stop();
   server.close(() => {
     process.stdout.write("[gateway] stopped\n");
     process.exit(0);

package/dist/gateway/src/agent-permission-http.d.ts

@@ -1,119 +0,0 @@
-import { z } from "zod";
-import type { SessionManager } from "./sessions.js";
-import type { TokenManager } from "./tokens.js";
-export declare const agentPermissionHttpBodySchema: z.ZodDiscriminatedUnion<"protocol", [z.ZodObject<{
-    protocol: z.ZodLiteral<"v2">;
-    sessionId: z.ZodString;
-    conversationId: z.ZodString;
-    requestId: z.ZodString;
-    outcome: z.ZodEnum<["allow", "deny", "cancelled"]>;
-    optionId: z.ZodOptional<z.ZodString>;
-    terminalId: z.ZodOptional<z.ZodString>;
-    agentSessionId: z.ZodOptional<z.ZodString>;
-}, "strip", z.ZodTypeAny, {
-    protocol: "v2";
-    sessionId: string;
-    conversationId: string;
-    requestId: string;
-    outcome: "allow" | "deny" | "cancelled";
-    optionId?: string | undefined;
-    terminalId?: string | undefined;
-    agentSessionId?: string | undefined;
-}, {
-    protocol: "v2";
-    sessionId: string;
-    conversationId: string;
-    requestId: string;
-    outcome: "allow" | "deny" | "cancelled";
-    optionId?: string | undefined;
-    terminalId?: string | undefined;
-    agentSessionId?: string | undefined;
-}>, z.ZodObject<{
-    protocol: z.ZodLiteral<"legacy">;
-    sessionId: z.ZodString;
-    conversationId: z.ZodOptional<z.ZodString>;
-    agentSessionId: z.ZodOptional<z.ZodString>;
-    requestId: z.ZodString;
-    outcome: z.ZodEnum<["allow", "deny", "cancelled"]>;
-    optionId: z.ZodOptional<z.ZodString>;
-    terminalId: z.ZodOptional<z.ZodString>;
-}, "strip", z.ZodTypeAny, {
-    protocol: "legacy";
-    sessionId: string;
-    requestId: string;
-    outcome: "allow" | "deny" | "cancelled";
-    conversationId?: string | undefined;
-    optionId?: string | undefined;
-    terminalId?: string | undefined;
-    agentSessionId?: string | undefined;
-}, {
-    protocol: "legacy";
-    sessionId: string;
-    requestId: string;
-    outcome: "allow" | "deny" | "cancelled";
-    conversationId?: string | undefined;
-    optionId?: string | undefined;
-    terminalId?: string | undefined;
-    agentSessionId?: string | undefined;
-}>, z.ZodObject<{
-    protocol: z.ZodLiteral<"terminal">;
-    sessionId: z.ZodString;
-    conversationId: z.ZodOptional<z.ZodString>;
-    requestId: z.ZodString;
-    outcome: z.ZodEnum<["allow", "deny", "cancelled"]>;
-    optionId: z.ZodOptional<z.ZodString>;
-    terminalId: z.ZodOptional<z.ZodString>;
-    agentSessionId: z.ZodOptional<z.ZodString>;
-}, "strip", z.ZodTypeAny, {
-    protocol: "terminal";
-    sessionId: string;
-    requestId: string;
-    outcome: "allow" | "deny" | "cancelled";
-    conversationId?: string | undefined;
-    optionId?: string | undefined;
-    terminalId?: string | undefined;
-    agentSessionId?: string | undefined;
-}, {
-    protocol: "terminal";
-    sessionId: string;
-    requestId: string;
-    outcome: "allow" | "deny" | "cancelled";
-    conversationId?: string | undefined;
-    optionId?: string | undefined;
-    terminalId?: string | undefined;
-    agentSessionId?: string | undefined;
-}>]>;
-export type AgentPermissionHttpBody = z.infer<typeof agentPermissionHttpBodySchema>;
-export type AgentPermissionHttpResult = {
-    status: number;
-    forwarded?: Array<{
-        type: string;
-        terminalId?: string;
-    }>;
-    ack?: AgentPermissionAck;
-    body: {
-        ok?: true;
-        error?: "unauthorized" | "session_not_found" | "host_not_connected" | "invalid_payload" | "permission_not_delivered" | "permission_ack_timeout";
-        message?: string;
-        resolved?: boolean;
-        delivered?: boolean;
-    };
-};
-export type AgentPermissionAck = {
-    requestId: string;
-    decision: "allow" | "deny";
-    resolved: boolean;
-    delivered: boolean;
-    source?: string;
-    message?: string;
-};
-export declare function resolveAgentPermissionHttpAck(input: {
-    sessionId: string;
-    ack: AgentPermissionAck;
-}): boolean;
-export declare function forwardAgentPermissionHttp(input: {
-    token: string | null;
-    body: AgentPermissionHttpBody;
-    sessionManager: SessionManager;
-    tokenManager: TokenManager;
-}): Promise<AgentPermissionHttpResult>;

package/dist/gateway/src/agent-permission-http.js

@@ -1,234 +0,0 @@
-import { createEnvelope, parseTypedPayload, serializeEnvelope, } from "@linkshell/protocol";
-import { z } from "zod";
-const permissionOutcomeSchema = z.enum(["allow", "deny", "cancelled"]);
-const PERMISSION_ACK_TIMEOUT_MS = 12_000;
-export const agentPermissionHttpBodySchema = z.discriminatedUnion("protocol", [
-    z.object({
-        protocol: z.literal("v2"),
-        sessionId: z.string().min(1),
-        conversationId: z.string().min(1),
-        requestId: z.string().min(1),
-        outcome: permissionOutcomeSchema,
-        optionId: z.string().optional(),
-        terminalId: z.string().optional(),
-        agentSessionId: z.string().optional(),
-    }),
-    z.object({
-        protocol: z.literal("legacy"),
-        sessionId: z.string().min(1),
-        conversationId: z.string().optional(),
-        agentSessionId: z.string().optional(),
-        requestId: z.string().min(1),
-        outcome: permissionOutcomeSchema,
-        optionId: z.string().optional(),
-        terminalId: z.string().optional(),
-    }),
-    z.object({
-        protocol: z.literal("terminal"),
-        sessionId: z.string().min(1),
-        conversationId: z.string().optional(),
-        requestId: z.string().min(1),
-        outcome: permissionOutcomeSchema,
-        optionId: z.string().optional(),
-        terminalId: z.string().min(1).optional(),
-        agentSessionId: z.string().optional(),
-    }),
-]);
-const pendingAcks = new Map();
-function ackKey(sessionId, requestId) {
-    return `${sessionId}:${requestId}`;
-}
-export function resolveAgentPermissionHttpAck(input) {
-    const key = ackKey(input.sessionId, input.ack.requestId);
-    const pending = pendingAcks.get(key);
-    if (!pending)
-        return false;
-    pendingAcks.delete(key);
-    clearTimeout(pending.timer);
-    pending.resolve(input.ack);
-    return true;
-}
-function waitForAck(sessionId, requestId) {
-    const key = ackKey(sessionId, requestId);
-    const existing = pendingAcks.get(key);
-    if (existing) {
-        pendingAcks.delete(key);
-        clearTimeout(existing.timer);
-        existing.resolve({
-            requestId,
-            decision: "deny",
-            resolved: false,
-            delivered: false,
-            message: "Superseded by a newer permission response",
-        });
-    }
-    return new Promise((resolve) => {
-        const timer = setTimeout(() => {
-            pendingAcks.delete(key);
-            resolve(null);
-        }, PERMISSION_ACK_TIMEOUT_MS);
-        pendingAcks.set(key, { resolve, timer });
-    });
-}
-export async function forwardAgentPermissionHttp(input) {
-    const { token, body, sessionManager, tokenManager } = input;
-    if (!token || !tokenManager.owns(token, body.sessionId)) {
-        return {
-            status: 401,
-            body: {
-                error: "unauthorized",
-                message: "Valid device token required",
-            },
-        };
-    }
-    const session = sessionManager.get(body.sessionId);
-    if (!session) {
-        return {
-            status: 404,
-            body: {
-                error: "session_not_found",
-                message: "Session not found",
-            },
-        };
-    }
-    if (!session.host || session.host.socket.readyState !== session.host.socket.OPEN) {
-        return {
-            status: 409,
-            body: {
-                error: "host_not_connected",
-                message: "Host is not connected",
-            },
-        };
-    }
-    try {
-        const envelopes = createPermissionEnvelopes(body);
-        const waitsForDelivery = envelopes.some((envelope) => envelope.type === "permission.decision");
-        const ackPromise = waitsForDelivery ? waitForAck(body.sessionId, body.requestId) : null;
-        for (const envelope of envelopes) {
-            session.host.socket.send(serializeEnvelope(envelope));
-        }
-        session.lastActivity = Date.now();
-        if (ackPromise) {
-            const ack = await ackPromise;
-            if (!ack) {
-                return {
-                    status: 504,
-                    forwarded: envelopes.map((envelope) => ({
-                        type: envelope.type,
-                        terminalId: envelope.terminalId,
-                    })),
-                    body: {
-                        error: "permission_ack_timeout",
-                        message: "Timed out waiting for host permission delivery acknowledgement",
-                    },
-                };
-            }
-            if (!ack.delivered) {
-                return {
-                    status: 409,
-                    forwarded: envelopes.map((envelope) => ({
-                        type: envelope.type,
-                        terminalId: envelope.terminalId,
-                    })),
-                    ack,
-                    body: {
-                        error: "permission_not_delivered",
-                        message: ack.message ?? "Permission response was not delivered to the Agent",
-                        resolved: ack.resolved,
-                        delivered: ack.delivered,
-                    },
-                };
-            }
-            return {
-                status: 200,
-                forwarded: envelopes.map((envelope) => ({
-                    type: envelope.type,
-                    terminalId: envelope.terminalId,
-                })),
-                ack,
-                body: {
-                    ok: true,
-                    resolved: ack.resolved,
-                    delivered: ack.delivered,
-                },
-            };
-        }
-        return {
-            status: 200,
-            forwarded: envelopes.map((envelope) => ({
-                type: envelope.type,
-                terminalId: envelope.terminalId,
-            })),
-            body: { ok: true },
-        };
-    }
-    catch (err) {
-        return {
-            status: 400,
-            body: {
-                error: "invalid_payload",
-                message: err instanceof Error ? err.message : "Invalid permission response",
-            },
-        };
-    }
-}
-function createPermissionEnvelopes(body) {
-    if (body.protocol === "v2") {
-        const payload = parseTypedPayload("agent.v2.permission.respond", {
-            conversationId: body.conversationId,
-            requestId: body.requestId,
-            outcome: body.outcome,
-            optionId: body.optionId || undefined,
-        });
-        return [createEnvelope({
-                type: "agent.v2.permission.respond",
-                sessionId: body.sessionId,
-                deviceId: "live-activity",
-                payload,
-            })];
-    }
-    if (body.protocol === "legacy") {
-        const legacyPayload = parseTypedPayload("agent.permission.response", {
-            agentSessionId: body.agentSessionId || undefined,
-            requestId: body.requestId,
-            outcome: body.outcome,
-            optionId: body.optionId || undefined,
-        });
-        const envelopes = [createEnvelope({
-                type: "agent.permission.response",
-                sessionId: body.sessionId,
-                deviceId: "live-activity",
-                payload: legacyPayload,
-            })];
-        // `pr-*` requests are terminal PermissionRequest hooks surfaced through the
-        // legacy Agent UI channel. Send the terminal decision too so older hosts, and
-        // hosts that route hook permissions through terminal handling, can resolve it
-        // without involving the mobile websocket/controller path.
-        if (body.requestId.startsWith("pr-")) {
-            const decisionPayload = parseTypedPayload("permission.decision", {
-                requestId: body.requestId,
-                decision: body.outcome === "allow" ? "allow" : "deny",
-            });
-            envelopes.push(createEnvelope({
-                type: "permission.decision",
-                sessionId: body.sessionId,
-                terminalId: body.terminalId ?? "default",
-                deviceId: "live-activity",
-                payload: decisionPayload,
-            }));
-        }
-        return envelopes;
-    }
-    const payload = parseTypedPayload("permission.decision", {
-        requestId: body.requestId,
-        decision: body.outcome === "allow" ? "allow" : "deny",
-    });
-    return [createEnvelope({
-            type: "permission.decision",
-            sessionId: body.sessionId,
-            terminalId: body.terminalId ?? "default",
-            deviceId: "live-activity",
-            payload,
-        })];
-}
-//# sourceMappingURL=agent-permission-http.js.map