@linkshell/gateway 0.4.55 → 0.5.1

package/dist/wire/src/updates.js

@@ -0,0 +1,210 @@
+import { z } from "zod";
+import { permissionOptionSchema, sessionDriverSchema, sessionStateSchema, toolKindSchema } from "./model.js";
+// Session updates mirror ACP's `SessionUpdate` shapes (discriminated by
+// `sessionUpdate`) so one renderer works for every agent. LinkShell-specific
+// updates use the `ls_` prefix.
+export const contentBlockSchema = z.discriminatedUnion("type", [
+    z.object({ type: z.literal("text"), text: z.string() }),
+    z.object({
+        type: z.literal("image"),
+        mimeType: z.string(),
+        data: z.string().optional(),
+        uri: z.string().optional(),
+    }),
+    z.object({
+        type: z.literal("resource_link"),
+        uri: z.string(),
+        name: z.string(),
+        /** What the link names: a file (default), a skill the user invoked, or another agent. */
+        kind: z.enum(["file", "skill", "agent"]).optional(),
+    }),
+]);
+export const toolCallStatusSchema = z.enum(["pending", "in_progress", "completed", "failed"]);
+export const toolCallContentSchema = z.discriminatedUnion("type", [
+    z.object({ type: z.literal("content"), content: contentBlockSchema }),
+    /** ACP diff: full before/after text. */
+    z.object({
+        type: z.literal("diff"),
+        path: z.string(),
+        oldText: z.string().nullable().optional(),
+        newText: z.string(),
+    }),
+    /** Unified diff, for agents (Codex) that report patches rather than file text. */
+    z.object({
+        type: z.literal("patch"),
+        path: z.string(),
+        change: z.enum(["add", "delete", "update"]),
+        movePath: z.string().optional(),
+        diff: z.string(),
+    }),
+    z.object({ type: z.literal("terminal"), terminalId: z.string() }),
+]);
+export const toolCallLocationSchema = z.object({
+    path: z.string(),
+    line: z.number().int().optional(),
+});
+/**
+ * What a tool call is, when the agent tells us more than ACP's coarse `kind`.
+ * Host drivers fill it from each agent's own tool names; clients render it the
+ * same way for every agent and fall back to `title` + `kind` without it.
+ */
+export const toolDetailSchema = z.discriminatedUnion("type", [
+    z.object({ type: z.literal("mcp"), server: z.string(), tool: z.string() }),
+    z.object({
+        type: z.literal("subagent"),
+        /** spawn starts a sub-agent (its work nests under this call); the rest talk to one. */
+        action: z.enum(["spawn", "message", "wait", "stop", "resume", "list"]).default("spawn"),
+        task: z.string().optional(),
+        /** The sub-agent's role or type, e.g. "Explore". */
+        agentType: z.string().optional(),
+        model: z.string().optional(),
+    }),
+    z.object({ type: z.literal("skill"), name: z.string(), description: z.string().optional() }),
+    z.object({ type: z.literal("web_search"), query: z.string().optional() }),
+    z.object({ type: z.literal("image_generation"), prompt: z.string().optional() }),
+    z.object({ type: z.literal("compaction") }),
+    z.object({ type: z.literal("review"), phase: z.enum(["started", "finished"]) }),
+]);
+export const planEntrySchema = z.object({
+    content: z.string(),
+    priority: z.enum(["high", "medium", "low"]).default("medium"),
+    status: z.enum(["pending", "in_progress", "completed"]),
+});
+export const stopReasonSchema = z.enum(["end_turn", "cancelled", "error", "max_tokens", "refusal"]);
+export const sessionConfigOptionSchema = z.object({
+    /** Agent-defined id; "model" and "mode" are the common ones. */
+    id: z.string(),
+    name: z.string(),
+    category: z.enum(["model", "mode", "effort", "other"]).default("other"),
+    current: z.string(),
+    values: z.array(z.object({ value: z.string(), name: z.string(), description: z.string().optional() })),
+});
+export const sessionUpdateSchema = z.discriminatedUnion("sessionUpdate", [
+    z.object({
+        sessionUpdate: z.literal("user_message_chunk"),
+        messageId: z.string().optional(),
+        content: contentBlockSchema,
+    }),
+    z.object({
+        sessionUpdate: z.literal("agent_message_chunk"),
+        parentToolCallId: z.string().optional(),
+        messageId: z.string(),
+        content: contentBlockSchema,
+    }),
+    z.object({
+        sessionUpdate: z.literal("agent_thought_chunk"),
+        parentToolCallId: z.string().optional(),
+        messageId: z.string(),
+        content: contentBlockSchema,
+    }),
+    z.object({
+        sessionUpdate: z.literal("tool_call"),
+        toolCallId: z.string(),
+        /** Set when a sub-agent made this call: the sub-agent's own (spawn) tool call. */
+        parentToolCallId: z.string().optional(),
+        title: z.string(),
+        kind: toolKindSchema,
+        status: toolCallStatusSchema,
+        rawInput: z.unknown().optional(),
+        content: z.array(toolCallContentSchema).optional(),
+        locations: z.array(toolCallLocationSchema).optional(),
+        detail: toolDetailSchema.optional(),
+    }),
+    z.object({
+        sessionUpdate: z.literal("tool_call_update"),
+        toolCallId: z.string(),
+        parentToolCallId: z.string().optional(),
+        status: toolCallStatusSchema.optional(),
+        title: z.string().optional(),
+        detail: toolDetailSchema.optional(),
+        /** Replaces the tool call's content when present. */
+        content: z.array(toolCallContentSchema).optional(),
+        /** Streamed output appended to the tool call's running output. */
+        appendOutput: z.string().optional(),
+        rawOutput: z.unknown().optional(),
+    }),
+    z.object({
+        sessionUpdate: z.literal("plan"),
+        entries: z.array(planEntrySchema),
+    }),
+    z.object({
+        sessionUpdate: z.literal("available_commands_update"),
+        availableCommands: z.array(z.object({ name: z.string(), description: z.string(), hint: z.string().optional() })),
+    }),
+    z.object({
+        sessionUpdate: z.literal("current_mode_update"),
+        currentModeId: z.string(),
+    }),
+    z.object({
+        sessionUpdate: z.literal("session_info_update"),
+        title: z.string().optional(),
+        model: z.string().optional(),
+    }),
+    z.object({
+        sessionUpdate: z.literal("usage_update"),
+        usedTokens: z.number().optional(),
+        contextWindow: z.number().optional(),
+    }),
+    // ── LinkShell extensions ──
+    z.object({
+        sessionUpdate: z.literal("ls_message_done"),
+        parentToolCallId: z.string().optional(),
+        messageId: z.string(),
+        role: z.enum(["agent", "thought", "user"]),
+    }),
+    /** Selectable session settings (model, permission mode, effort…) as the agent reports them. */
+    z.object({
+        sessionUpdate: z.literal("ls_config"),
+        options: z.array(sessionConfigOptionSchema),
+    }),
+    z.object({
+        sessionUpdate: z.literal("ls_notice"),
+        level: z.enum(["info", "warning"]),
+        title: z.string(),
+        detail: z.string().optional(),
+    }),
+    z.object({
+        sessionUpdate: z.literal("ls_turn"),
+        /** A sub-agent's turn: whether the sub-agent under this call is working. */
+        parentToolCallId: z.string().optional(),
+        state: z.enum(["started", "ended"]),
+        turnId: z.string().optional(),
+        stopReason: stopReasonSchema.optional(),
+    }),
+    z.object({
+        sessionUpdate: z.literal("ls_permission"),
+        requestId: z.string(),
+        toolCallId: z.string().optional(),
+        title: z.string(),
+        detail: z.string().optional(),
+        options: z.array(permissionOptionSchema).min(1),
+    }),
+    z.object({
+        sessionUpdate: z.literal("ls_permission_resolved"),
+        requestId: z.string(),
+        optionId: z.string().optional(),
+    }),
+    z.object({
+        sessionUpdate: z.literal("ls_driver"),
+        driver: sessionDriverSchema,
+        deviceId: z.string().optional(),
+    }),
+    z.object({
+        sessionUpdate: z.literal("ls_status"),
+        state: sessionStateSchema,
+    }),
+    z.object({
+        sessionUpdate: z.literal("ls_error"),
+        code: z.string(),
+        message: z.string(),
+        hint: z.string().optional(),
+    }),
+]);
+/** One entry in a session's append-only event log. */
+export const sessionEventSchema = z.object({
+    sessionId: z.string(),
+    seq: z.number().int().positive(),
+    ts: z.number(),
+    update: sessionUpdateSchema,
+});
+//# sourceMappingURL=updates.js.map

package/dist/wire/src/updates.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"updates.js","sourceRoot":"","sources":["../../../../wire/src/updates.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAE7G,wEAAwE;AACxE,6EAA6E;AAC7E,gCAAgC;AAEhC,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAC7D,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IACvD,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;QACxB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;QACpB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC3B,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC3B,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC;QAChC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;QACf,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,yFAAyF;QACzF,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE;KACpD,CAAC;CACH,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,aAAa,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC;AAG9F,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAChE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC;IACrE,wCAAwC;IACxC,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;QACvB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;QACzC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;KACpB,CAAC;IACF,kFAAkF;IAClF,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;QACxB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAC3C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC/B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;KACjB,CAAC;IACF,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;CAClE,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;CAClC,CAAC,CAAC;AAGH;;;;GAIG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAC3D,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IAC1E,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;QAC3B,uFAAuF;QACvF,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;QACvF,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC3B,oDAAoD;QACpD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAChC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC7B,CAAC;IACF,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC;IAC5F,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC;IACzE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC;IAChF,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;IAC3C,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC,EAAE,CAAC;CAChF,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;IAC7D,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC;CACxD,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,WAAW,EAAE,OAAO,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC,CAAC;AAGpG,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,gEAAgE;IAChE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IACvE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;CACvG,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,kBAAkB,CAAC,eAAe,EAAE;IACvE,CAAC,CAAC,MAAM,CAAC;QACP,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC;QAC9C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAChC,OAAO,EAAE,kBAAkB;KAC5B,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC;QAC/C,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACvC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;QACrB,OAAO,EAAE,kBAAkB;KAC5B,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC;QAC/C,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACvC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;QACrB,OAAO,EAAE,kBAAkB;KAC5B,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;QACrC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;QACtB,kFAAkF;QAClF,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACvC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;QACjB,IAAI,EAAE,cAAc;QACpB,MAAM,EAAE,oBAAoB;QAC5B,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;QAChC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,QAAQ,EAAE;QAClD,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,QAAQ,EAAE;QACrD,MAAM,EAAE,gBAAgB,CAAC,QAAQ,EAAE;KACpC,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC;QAC5C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;QACtB,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACvC,MAAM,EAAE,oBAAoB,CAAC,QAAQ,EAAE;QACvC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC5B,MAAM,EAAE,gBAAgB,CAAC,QAAQ,EAAE;QACnC,qDAAqD;QACrD,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,QAAQ,EAAE;QAClD,kEAAkE;QAClE,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACnC,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;KAClC,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;QAChC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC;KAClC,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,2BAA2B,CAAC;QACrD,iBAAiB,EAAE,CAAC,CAAC,KAAK,CACxB,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CACrF;KACF,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC;QAC/C,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;KAC1B,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC;QAC/C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC5B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC7B,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC;QACxC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACjC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KACrC,CAAC;IACF,6BAA6B;IAC7B,CAAC,CAAC,MAAM,CAAC;QACP,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC;QAC3C,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACvC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;QACrB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;KAC3C,CAAC;IACF,+FAA+F;IAC/F,CAAC,CAAC,MAAM,CAAC;QACP,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;QACrC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC;KAC5C,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;QACrC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAClC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;QACjB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC9B,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;QACnC,4EAA4E;QAC5E,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACvC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACnC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC7B,UAAU,EAAE,gBAAgB,CAAC,QAAQ,EAAE;KACxC,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC;QACzC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;QACrB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACjC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;QACjB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC7B,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;KAChD,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,wBAAwB,CAAC;QAClD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;QACrB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAChC,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;QACrC,MAAM,EAAE,mBAAmB;QAC3B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAChC,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;QACrC,KAAK,EAAE,kBAAkB;KAC1B,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;QACpC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;QACnB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC5B,CAAC;CACH,CAAC,CAAC;AAIH,sDAAsD;AACtD,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAChC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,MAAM,EAAE,mBAAmB;CAC5B,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@linkshell/gateway",
-  "version": "0.4.55",
+  "version": "0.5.1",
   "type": "module",
   "main": "dist/gateway/src/index.js",
   "exports": {
@@ -28,13 +28,18 @@
   "dependencies": {
     "zod": "^3.24.3",
     "ws": "^8.18.1",
-    "@linkshell/protocol": "0.4.10"
+    "@linkshell/protocol": "0.4.10",
+    "@linkshell/wire": "0.1.1",
+    "@linkshell/gateway-v2": "0.1.1"
   },
   "devDependencies": {
     "@types/ws": "^8.5.14",
     "tsx": "^4.19.3",
     "vitest": "^3.2.1"
   },
+  "engines": {
+    "node": ">=22.13"
+  },
   "scripts": {
     "build": "tsc -p tsconfig.json",
     "typecheck": "tsc -p tsconfig.json --noEmit",

package/src/embedded.ts

@@ -28,6 +28,11 @@ export interface EmbeddedGatewayOptions {
   port?: number;
   logLevel?: "debug" | "info" | "warn" | "error";
   silent?: boolean;
+  /**
+   * Also serve the v2 relay (end-to-end encrypted, at /v2/connect), keeping its
+   * pairings in SQLite here. Needs Node.js 22.13+ (node:sqlite).
+   */
+  relayDataPath?: string;
 }
 
 export interface EmbeddedGateway {
@@ -91,7 +96,7 @@ function extractBearerToken(req: IncomingMessage): string | null {
  * Start an embedded gateway. Returns a handle to get URLs and close it.
  * Used by CLI when no external --gateway is provided.
  */
-export function startEmbeddedGateway(
+export async function startEmbeddedGateway(
   options: EmbeddedGatewayOptions = {},
 ): Promise<EmbeddedGateway> {
   const targetPort = options.port ?? 0; // 0 = random available port
@@ -272,9 +277,17 @@ export function startEmbeddedGateway(
     maxPayload: MAX_WS_MESSAGE_SIZE,
   });
 
+  // Loaded on demand: v1 users on older Node never touch node:sqlite.
+  const relay = options.relayDataPath ? await startRelay(options.relayDataPath, log) : undefined;
+
   server.on("upgrade", (request, socket, head) => {
     const url = new URL(request.url ?? "/", `http://${request.headers.host}`);
 
+    if (relay && url.pathname === relay.path) {
+      relay.gateway.handleUpgrade(request, socket, head);
+      return;
+    }
+
     // Tunnel WebSocket upgrade (for HMR etc.)
     const tunnelParsed = parseTunnelPath(url.pathname);
     if (tunnelParsed) {
@@ -488,9 +501,26 @@ export function startEmbeddedGateway(
             sessionManager.destroy();
             pairingManager.destroy();
             tokenManager.destroy();
+            void relay?.gateway.stop();
             server.close(() => res());
           }),
       });
     });
   });
 }
+
+async function startRelay(databasePath: string, log: (level: "debug" | "info" | "warn" | "error", message: string) => void) {
+  const [major = 0, minor = 0] = process.versions.node.split(".").map(Number);
+  if (major < 22 || (major === 22 && minor < 13)) {
+    log("warn", `v2 relay needs Node.js 22.13+ (this is ${process.version}); serving v1 only`);
+    return undefined;
+  }
+  const { mkdirSync } = await import("node:fs");
+  const { dirname } = await import("node:path");
+  const [{ Gateway }, { RELAY_PATH }] = await Promise.all([import("@linkshell/gateway-v2"), import("@linkshell/wire")]);
+  mkdirSync(dirname(databasePath), { recursive: true });
+  const gateway = new Gateway({ port: 0, databasePath, log: (message) => log("info", `[relay] ${message}`) });
+  gateway.attach();
+  log("info", `v2 relay on ${RELAY_PATH}`);
+  return { gateway, path: RELAY_PATH };
+}

package/src/index.ts

@@ -24,7 +24,11 @@ import {
   handleTunnelRequest,
   cleanupSessionTunnels,
 } from "./tunnel.js";
-import { AUTH_REQUIRED, requireAuth, checkWsAuth, validateRequest, checkSubscriptionByUserId, canReadSessionDetail } from "./auth-middleware.js";
+import { AUTH_REQUIRED, SUPABASE_ANON_KEY, SUPABASE_URL, requireAuth, checkWsAuth, validateRequest, checkSubscriptionByUserId, canReadSessionDetail } from "./auth-middleware.js";
+import { mkdirSync } from "node:fs";
+import { dirname } from "node:path";
+import { Gateway as RelayGateway, supabaseVerifier } from "@linkshell/gateway-v2";
+import { RELAY_PATH } from "@linkshell/wire";
 import { setCors } from "./cors.js";
 import { serveWeb, serveWebAsset, webEnabled, webDistPath } from "./static-web.js";
 
@@ -282,7 +286,7 @@ async function handleRequest(
 
   // Health check
   if (method === "GET" && url.pathname === "/healthz") {
-    json(res, 200, { ok: true, version: GATEWAY_VERSION });
+    json(res, 200, { ok: true, version: GATEWAY_VERSION, relay: relay.connected });
     return;
   }
 
@@ -508,9 +512,47 @@ const wss = new WebSocketServer({
   maxPayload: MAX_WS_MESSAGE_SIZE,
 });
 
+// ── v2 relay (end-to-end encrypted, routes ciphertext only) ─────────
+// Served on the same port at RELAY_PATH. Pairings and machine/device keys are
+// kept in SQLite at RELAY_DATA_PATH (a persistent volume in production).
+const relayDataPath = process.env.RELAY_DATA_PATH ?? "./data/relay.db";
+mkdirSync(dirname(relayDataPath), { recursive: true });
+const relay = new RelayGateway({
+  port: 0,
+  databasePath: relayDataPath,
+  verifyToken: SUPABASE_URL && SUPABASE_ANON_KEY ? supabaseVerifier(SUPABASE_URL, SUPABASE_ANON_KEY) : undefined,
+  log: (message) => log("info", `[relay] ${message}`),
+  // The official gateway is a subscription service: a computer needs an active
+  // Pro account to use it (as with v1). Devices only reach computers they're
+  // paired with or share an account with, so they need nothing more.
+  admit: AUTH_REQUIRED
+    ? async ({ role, userId }) => {
+        if (role !== "machine") return undefined;
+        if (!userId) return "官方网关需要登录 Pro 账号：在电脑上运行 linkshell login";
+        const subscription = await checkSubscriptionByUserId(userId);
+        // A lookup failure isn't a lapsed subscription; don't lock people out over it.
+        if (subscription.status === "inactive") return "官方网关需要 Pro 订阅：https://itool.tech";
+        if (subscription.status === "unknown") log("warn", `[relay] subscription check unavailable (${subscription.reason}); admitting ${userId}`);
+        return undefined;
+      }
+    : undefined,
+});
+relay.attach();
+
 server.on("upgrade", (request, socket, head) => {
   const url = new URL(request.url ?? "/", `http://${request.headers.host}`);
 
+  if (url.pathname === RELAY_PATH) {
+    const ip = getClientIp(request);
+    if (!isRateLimitBypassed(ip) && !wsConnectLimiter.allow(ip)) {
+      socket.write("HTTP/1.1 429 Too Many Requests\r\n\r\n");
+      socket.destroy();
+      return;
+    }
+    relay.handleUpgrade(request, socket, head);
+    return;
+  }
+
   // Tunnel WebSocket upgrade (for HMR etc.)
   const tunnelParsed = parseTunnelPath(url.pathname);
   if (tunnelParsed) {
@@ -851,6 +893,7 @@ function shutdown() {
   pairingManager.destroy();
   tokenManager.destroy();
   hostAuthManager.destroy();
+  void relay.stop();
   server.close(() => {
     process.stdout.write("[gateway] stopped\n");
     process.exit(0);

package/dist/gateway/src/agent-permission-http.d.ts

@@ -1,119 +0,0 @@
-import { z } from "zod";
-import type { SessionManager } from "./sessions.js";
-import type { TokenManager } from "./tokens.js";
-export declare const agentPermissionHttpBodySchema: z.ZodDiscriminatedUnion<"protocol", [z.ZodObject<{
-    protocol: z.ZodLiteral<"v2">;
-    sessionId: z.ZodString;
-    conversationId: z.ZodString;
-    requestId: z.ZodString;
-    outcome: z.ZodEnum<["allow", "deny", "cancelled"]>;
-    optionId: z.ZodOptional<z.ZodString>;
-    terminalId: z.ZodOptional<z.ZodString>;
-    agentSessionId: z.ZodOptional<z.ZodString>;
-}, "strip", z.ZodTypeAny, {
-    protocol: "v2";
-    sessionId: string;
-    conversationId: string;
-    requestId: string;
-    outcome: "allow" | "deny" | "cancelled";
-    optionId?: string | undefined;
-    terminalId?: string | undefined;
-    agentSessionId?: string | undefined;
-}, {
-    protocol: "v2";
-    sessionId: string;
-    conversationId: string;
-    requestId: string;
-    outcome: "allow" | "deny" | "cancelled";
-    optionId?: string | undefined;
-    terminalId?: string | undefined;
-    agentSessionId?: string | undefined;
-}>, z.ZodObject<{
-    protocol: z.ZodLiteral<"legacy">;
-    sessionId: z.ZodString;
-    conversationId: z.ZodOptional<z.ZodString>;
-    agentSessionId: z.ZodOptional<z.ZodString>;
-    requestId: z.ZodString;
-    outcome: z.ZodEnum<["allow", "deny", "cancelled"]>;
-    optionId: z.ZodOptional<z.ZodString>;
-    terminalId: z.ZodOptional<z.ZodString>;
-}, "strip", z.ZodTypeAny, {
-    protocol: "legacy";
-    sessionId: string;
-    requestId: string;
-    outcome: "allow" | "deny" | "cancelled";
-    conversationId?: string | undefined;
-    optionId?: string | undefined;
-    terminalId?: string | undefined;
-    agentSessionId?: string | undefined;
-}, {
-    protocol: "legacy";
-    sessionId: string;
-    requestId: string;
-    outcome: "allow" | "deny" | "cancelled";
-    conversationId?: string | undefined;
-    optionId?: string | undefined;
-    terminalId?: string | undefined;
-    agentSessionId?: string | undefined;
-}>, z.ZodObject<{
-    protocol: z.ZodLiteral<"terminal">;
-    sessionId: z.ZodString;
-    conversationId: z.ZodOptional<z.ZodString>;
-    requestId: z.ZodString;
-    outcome: z.ZodEnum<["allow", "deny", "cancelled"]>;
-    optionId: z.ZodOptional<z.ZodString>;
-    terminalId: z.ZodOptional<z.ZodString>;
-    agentSessionId: z.ZodOptional<z.ZodString>;
-}, "strip", z.ZodTypeAny, {
-    protocol: "terminal";
-    sessionId: string;
-    requestId: string;
-    outcome: "allow" | "deny" | "cancelled";
-    conversationId?: string | undefined;
-    optionId?: string | undefined;
-    terminalId?: string | undefined;
-    agentSessionId?: string | undefined;
-}, {
-    protocol: "terminal";
-    sessionId: string;
-    requestId: string;
-    outcome: "allow" | "deny" | "cancelled";
-    conversationId?: string | undefined;
-    optionId?: string | undefined;
-    terminalId?: string | undefined;
-    agentSessionId?: string | undefined;
-}>]>;
-export type AgentPermissionHttpBody = z.infer<typeof agentPermissionHttpBodySchema>;
-export type AgentPermissionHttpResult = {
-    status: number;
-    forwarded?: Array<{
-        type: string;
-        terminalId?: string;
-    }>;
-    ack?: AgentPermissionAck;
-    body: {
-        ok?: true;
-        error?: "unauthorized" | "session_not_found" | "host_not_connected" | "invalid_payload" | "permission_not_delivered" | "permission_ack_timeout";
-        message?: string;
-        resolved?: boolean;
-        delivered?: boolean;
-    };
-};
-export type AgentPermissionAck = {
-    requestId: string;
-    decision: "allow" | "deny";
-    resolved: boolean;
-    delivered: boolean;
-    source?: string;
-    message?: string;
-};
-export declare function resolveAgentPermissionHttpAck(input: {
-    sessionId: string;
-    ack: AgentPermissionAck;
-}): boolean;
-export declare function forwardAgentPermissionHttp(input: {
-    token: string | null;
-    body: AgentPermissionHttpBody;
-    sessionManager: SessionManager;
-    tokenManager: TokenManager;
-}): Promise<AgentPermissionHttpResult>;