@luchenglong/cli-bridge 0.0.0-stage → 0.2.3

package/core/bridge-kit.mjs

@@ -0,0 +1,549 @@
+// core/bridge-kit.mjs — CLI Bridge 单一事实来源：通用执行/状态骨架。
+//
+// 深度重构核心（合并 agy-first-bridge / codebuddy-first-bridge / mimo-first-bridge）：
+// 三条 bridge 的 host 半此前各自复制了一份几乎相同的「状态引擎 + 行流 + 执行编排
+// + 限流回退弹窗 + MCP 快照上报 + 展示层」。本文件把这些**与 provider 无关**的骨架
+// 收敛成一份参数化实现，每个 provider 只提供一个 descriptor（见 providers/*.mjs 与
+// PROVIDER-CONTRACT.md），由 createRunner/createStatusEngine 回调它完成差异化步骤。
+//
+// 骨架覆盖：
+//   - 纯函数：projectName / clampInt / shortLabel / summarizeArgs / endpointHost
+//   - 限流/网络判定：LIMIT_RE + isLimited（provider 可收窄）
+//   - 半行安全行流：createLineStream
+//   - 按项目（cwd）聚合、按 provider 分桶的状态引擎：createStatusEngine
+//   - 执行编排（前台/后台/超时守卫/瞬时错误重试/限流三选一弹窗/回退）：createRunner
+//   - 工具结果与状态的人类可读渲染：renderResult / renderStatus
+//   - MCP 子进程快照上报：buildMcpBridgePayload / normalizeMcpBridge（provider 分文件）
+//   - 回退弹窗三选一文案（provider 名注入）
+//
+// 约束（沙箱与真实 Node 共用，勿违反）：
+//   - 本模块**不 import 任何模块**、不用 process/Buffer/原生定时器/AbortController；
+//     宿主能力（subprocess.spawn / ctx.interval / ctx.timeout / jobs / userQuestions）
+//     全部经 createRunner 的 opts 注入，取消用 exec.signal + handle.terminate()。
+//   - 不序列化任何 DSH 活对象；跨 RPC 只传无 Host 引用的纯 JSON 叶子字段。
+
+// ── 常量 ──────────────────────────────────────────────────────────────────────
+
+export const MAX_TRAIL = 12
+export const MAX_ARG_LEN = 120
+export const MAX_PROJECTS = 24
+export const MAX_SESSIONS = 256
+
+// 限流/网络类错误的宽松正则（英文 + 中文）。provider descriptor 可用自己的收窄版覆盖。
+export const LIMIT_RE =
+  /rate.?limit|ratelimit|\b429\b|too many|quota|insufficient|credit|balance|exhausted|exceed|\bnetwork\b|offline|ENETUNREACH|ECONNREFUSED|ECONNRESET|ETIMEDOUT|EAI_AGAIN|ENOTFOUND|\btimeouts?\b|timed out|unavailable|\b50[023]\b|\b40[13]\b|unauthorized|invalid api|api key|proxy|socket|tls|ssl|\bdns\b|网络|超时|限流|流量|受限|配额|金额|余额|额度|认证|连接|断开/i
+
+// 家级插件与 MCP 子进程之间的快照文件：{dsh-home}/cli-bridge-mcp-<provider>.json
+export const MCP_BRIDGE_PREFIX = 'cli-bridge-mcp-'
+export const MCP_BRIDGE_STALE_MS = 90000
+export function mcpBridgeFileName(providerId) { return MCP_BRIDGE_PREFIX + providerId + '.json' }
+
+// ── 纯函数 ────────────────────────────────────────────────────────────────────
+
+export function projectName(cwd) {
+  const s = String(cwd || '')
+  const parts = s.split(/[\\/]/).filter(Boolean)
+  return parts.length ? parts[parts.length - 1] : s
+}
+
+export function clampInt(v, def, min, max) {
+  const n = Number(v)
+  if (!Number.isFinite(n)) return def
+  const i = Math.floor(n)
+  if (i < min) return min
+  if (i > max) return max
+  return i
+}
+
+export function shortLabel(prompt) {
+  const s = String(prompt || '').replace(/\s+/g, ' ').trim()
+  return s.length > 80 ? s.slice(0, 77) + '...' : s
+}
+
+// 工具入参摘要（状态灯/活动面板）。返回可无损 JSON 化的数据；undefined 值跳过
+// （DSH tool 渲染层不接受 undefined）。
+export function summarizeArgs(parameters) {
+  if (!parameters || typeof parameters !== 'object') return null
+  const out = {}
+  for (const k of Object.keys(parameters)) {
+    let v = parameters[k]
+    if (v === undefined) continue
+    if (typeof v === 'string' && v.length > MAX_ARG_LEN) v = v.slice(0, MAX_ARG_LEN) + '…'
+    out[k] = v
+  }
+  return out
+}
+
+export function endpointHost(url) {
+  const m = String(url || '').match(/^https?:\/\/([^/]+)/i)
+  return m ? m[1] : ''
+}
+
+// 限流/网络类失败（要问用户，重试可能烧额度）。
+export function isLimited(res) {
+  if (!res || res.ok) return false
+  // AUTH_REQUIRED 是配置问题（缺凭据），弹回退/重试无意义 —— 直接给可操作指引。
+  if (res.status === 'AUTH_REQUIRED') return false
+  if (res.status === 'SPAWN_ERROR' || res.status === 'CLI_UNAVAILABLE' || res.status === 'HUNG_TIMEOUT') return true
+  const hay = String(res.stderr || '') + ' ' + String(res.status || '')
+  // 端点域与登录域不匹配的 401：需要用户换登录域，不是限流。
+  if (/401 authentication failed|differs from the current product endpoint/i.test(hay)) return false
+  return LIMIT_RE.test(hay)
+}
+
+// ── 半行安全的行流（跨 chunk 的 NDJSON 行拼接）───────────────────────────────
+export function createLineStream(consumeLine) {
+  let pending = ''
+  function pushChunk(text) {
+    if (typeof text !== 'string' || !text) return
+    const lines = (pending + text).split(/\r?\n/)
+    pending = lines.pop() || ''
+    for (const ln of lines) consumeLine(ln)
+  }
+  function flush() {
+    const rest = pending
+    pending = ''
+    if (rest) consumeLine(rest)
+  }
+  return { pushChunk, flush }
+}
+
+// ── 状态引擎（按 provider + 项目目录聚合的运行状态表）─────────────────────────
+// opts: { provider: <descriptor>, publish(snapshot) }
+// 快照结构（顶层为全局聚合，向后兼容单 provider 消费者）：
+//   { provider, state, running, lastStatus, lastAt, lastSessionId, lastBackend,
+//     fallbackActive, current, trail, runs, totalTokens, updatedAt,
+//     projects:[{ cwd,name,provider,state,running,current,trail,lastStatus,lastAt,
+//                 lastSessionId,lastBackend,fallbackActive,runs,totalTokens,updatedAt }] }
+export function createStatusEngine(opts) {
+  const o = opts || {}
+  const provider = o.provider
+  const providerId = provider && provider.id ? provider.id : 'cli'
+  const publish = typeof o.publish === 'function' ? o.publish : null
+  const projects = Object.create(null)
+  // sessionId -> { cwd, backend, provider }。会话按 provider 归属（登录域互斥），
+  // 续接时一次解析出 cwd 与 backend。容量上限 MAX_SESSIONS，FIFO 淘汰。
+  const sessions = Object.create(null)
+
+  function ensureProject(cwd) {
+    const key = String(cwd || '')
+    let p = projects[key]
+    if (!p) {
+      if (Object.keys(projects).length >= MAX_PROJECTS) {
+        const idle = Object.keys(projects).filter((k) => projects[k].running === 0)
+        const pool = idle.length ? idle : Object.keys(projects)
+        const victim = pool.sort((a, b) => projects[a].updatedAt - projects[b].updatedAt)[0]
+        delete projects[victim]
+      }
+      p = { cwd: key, name: projectName(key), provider: providerId, state: 'idle', running: 0, lastStatus: null, lastAt: 0, lastSessionId: null, lastBackend: null, lastOk: false, lastFailed: false, fallbackActive: false, current: null, trail: [], runs: 0, totalTokens: 0, updatedAt: 0 }
+      projects[key] = p
+    }
+    return p
+  }
+
+  function globalStatus() {
+    const list = Object.keys(projects).map((k) => projects[k])
+    let running = 0, lastStatus = null, lastAt = 0, lastSessionId = null, lastBackend = null, fallbackActive = false, current = null, trail = [], updatedAt = 0, runs = 0, totalTokens = 0
+    for (const p of list) {
+      running += p.running
+      if (p.updatedAt > updatedAt) updatedAt = p.updatedAt
+      if (p.running > 0 && !current && p.current) current = p.current
+      if (p.lastAt > lastAt) { lastAt = p.lastAt; lastStatus = p.lastStatus; lastSessionId = p.lastSessionId; lastBackend = p.lastBackend }
+      if (p.fallbackActive) fallbackActive = true
+      runs += p.runs || 0
+      totalTokens += p.totalTokens || 0
+      for (const e of p.trail) trail.push(e)
+    }
+    trail.sort((a, b) => (a.at < b.at ? -1 : a.at > b.at ? 1 : 0))
+    trail = trail.slice(-MAX_TRAIL)
+    const state = running > 0 ? 'running' : (fallbackActive ? 'fallback' : (lastStatus ? (lastStatus === 'SUCCESS' ? 'ok' : 'failed') : 'idle'))
+    return { state, running, lastStatus, lastAt, lastSessionId, lastBackend, fallbackActive, current, trail, runs, totalTokens, updatedAt }
+  }
+
+  function statusSnapshot() {
+    const g = globalStatus()
+    const list = Object.keys(projects).map((k) => projects[k]).sort((a, b) => b.updatedAt - a.updatedAt)
+    return Object.assign({ provider: providerId }, g, {
+      projects: list.map((p) => ({ cwd: p.cwd, name: p.name, provider: providerId, state: p.state, running: p.running, current: p.current, trail: p.trail.slice(-MAX_TRAIL), lastStatus: p.lastStatus, lastAt: p.lastAt, lastSessionId: p.lastSessionId, lastBackend: p.lastBackend, fallbackActive: p.fallbackActive, runs: p.runs || 0, totalTokens: p.totalTokens || 0, updatedAt: p.updatedAt }))
+    })
+  }
+
+  function emit() { if (publish) { try { publish(statusSnapshot()) } catch (e) {} } }
+
+  function begin(cwd) {
+    const p = ensureProject(cwd)
+    p.running += 1
+    p.state = 'running'
+    p.updatedAt = Date.now()
+    emit()
+  }
+
+  function end(res, cwd) {
+    const p = ensureProject(cwd)
+    p.running = Math.max(0, p.running - 1)
+    p.lastStatus = res ? res.status : null
+    p.lastAt = Date.now()
+    if (res && res.sessionId) {
+      p.lastSessionId = res.sessionId
+      sessions[res.sessionId] = { cwd: p.cwd, backend: res.backend || (provider && provider.defaultBackend), provider: providerId }
+      const keys = Object.keys(sessions)
+      if (keys.length > MAX_SESSIONS) delete sessions[keys[0]]
+    }
+    if (res && res.backend) p.lastBackend = res.backend
+    p.runs = (p.runs || 0) + 1
+    if (res && typeof res.totalTokens === 'number' && res.totalTokens > 0) p.totalTokens = (p.totalTokens || 0) + res.totalTokens
+    if (res && res.fallback) { p.fallbackActive = true; p.state = 'fallback' }
+    else if (p.running > 0) { p.state = 'running' }
+    else { p.state = res && res.ok ? 'ok' : 'failed'; p.lastOk = !!(res && res.ok); p.lastFailed = !(res && res.ok) }
+    p.current = null
+    p.updatedAt = Date.now()
+    emit()
+  }
+
+  // 流事件折叠为实时状态。provider 若有 stream-json，提供 foldStreamEvent(ev, project)；
+  // 否则回退到 generic 形态（不产生实时步骤）。
+  function foldEvent(ev, cwd) {
+    const p = ensureProject(cwd)
+    p.updatedAt = Date.now()
+    if (provider && typeof provider.foldStreamEvent === 'function') {
+      try { provider.foldStreamEvent(ev, p, summarizeArgs, MAX_ARG_LEN, MAX_TRAIL) } catch (e) {}
+    }
+    emit()
+  }
+
+  // 会话路由（cwd + backend 一次解析）。续接（--resume/--continue）时未给 cwd
+  // 则回落到该 session 所在项目的 cwd（否则换目录报找不到会话）。
+  function resolveTarget(args, fallbackCwd) {
+    const a = args || {}
+    let backend = null, cwd = null
+    if (a.sessionId) { const hit = sessions[a.sessionId]; if (hit && hit.provider === providerId) { backend = hit.backend; cwd = hit.cwd } }
+    if (a.cwd) {
+      cwd = String(a.cwd)
+    } else if (!cwd && (a.sessionId || a.continueLatest)) {
+      const list = Object.keys(projects).map((k) => projects[k]).sort((a, b) => b.updatedAt - a.updatedAt)
+      if (a.sessionId) {
+        const projHit = list.find((p) => p.lastSessionId === a.sessionId)
+        if (projHit) { cwd = projHit.cwd; if (!backend) backend = projHit.lastBackend }
+      } else if (list.length && list[0].lastSessionId) { cwd = list[0].cwd; if (!backend) backend = list[0].lastBackend }
+    }
+    return { cwd: cwd || fallbackCwd, backend }
+  }
+
+  function resolveCwd(args, fallbackCwd) { return resolveTarget(args, fallbackCwd).cwd }
+
+  return { providerId, projects, sessions, ensureProject, globalStatus, statusSnapshot, begin, end, foldEvent, resolveCwd, resolveTarget }
+}
+
+// ── 回退弹窗三选一（provider 名注入）──────────────────────────────────────────
+export function fallbackLabels(provider) {
+  const bk = (provider && provider.id) || 'CLI'
+  return {
+    fallback: '使用 DSH 本地 API 配置（回退）',
+    retry: '重试 ' + bk + ' 一次',
+    cancel: '不回退（返回错误）'
+  }
+}
+
+// 失败结果的可行动指引；provider.failureHint 优先，未给则通用兜底。
+export function failureHint(res, provider) {
+  if (!res || res.ok) return ''
+  if (provider && typeof provider.failureHint === 'function') {
+    try { const h = provider.failureHint(res); if (h) return h } catch (e) {}
+  }
+  if (res.status === 'AUTH_REQUIRED') return '[诊断] ' + String(res.stderr || '')
+  if (res.status === 'PARSE_ERROR') return '[诊断] 未能从输出解析出 result 事件（进程可能被中断或输出被截断）。可重试；持续出现请检查 CLI 版本。'
+  if (/401 authentication failed|differs from the current product endpoint/i.test(String(res.stderr || ''))) {
+    return '[诊断] 认证失败（401）：请求端点与当前 CLI 登录域不匹配（国际/国内登录互斥）。请让用户在对应产品域完成 CLI 登录后重试；这不是限流。'
+  }
+  return ''
+}
+
+export function fallbackResult(res, mode, provider) {
+  const bk = (provider && provider.id) || 'CLI'
+  return Object.assign({}, res, { ok: false, fallback: true, status: 'FALLBACK_TO_DSH', response: '', stderr: (res && res.stderr ? res.stderr : '') + ' [user chose DSH fallback for ' + bk + ']' })
+}
+
+// ── 展示层 ────────────────────────────────────────────────────────────────────
+export function renderResult(value, provider) {
+  const v = value || {}
+  // backendLabel（codebuddy 旧语义 v1.1.0 verbatim：'workbuddy OK'/'codebuddy-intl OK'）：
+  // 结果带具体 backend 时用 backend 标头；agy/mimo 旧包标头是硬编码 provider 名，不开此旗。
+  const bk = (provider && provider.backendLabel && v.backend) || (provider && provider.id) || v.backend || 'CLI'
+  if (v.background) return [{ type: 'text', text: bk + ' dispatched in background (mode=' + v.mode + '). jobId=' + v.jobId + '. Collect with job_output.' }]
+  if (v.fallback) return [{ type: 'text', text: bk + ' 回退：用户选择使用 DSH 本地 API 配置（原因 ' + v.reason + '）。请改用原生工具/本地模型完成本任务，不要再调 ' + bk + '。' }]
+  const head = bk + ' ' + (v.ok ? 'OK' : 'FAILED') + ' [status=' + v.status + ' mode=' + v.mode + (v.modelUsed ? ' model=' + v.modelUsed : '') + (v.retried ? ' retried=1' : '') + (v.sessionId ? ' session=' + v.sessionId : '') + (v.totalTokens != null ? ' tokens=' + v.totalTokens : '') + (v.durationSeconds != null ? ' ' + v.durationSeconds + 's' : '') + ']'
+  const hint = failureHint(v, provider)
+  let body = v.response ? v.response : (v.stderr ? '[stderr] ' + v.stderr : (v.rawStdout ? '[raw] ' + v.rawStdout : ''))
+  if (hint) body = (body ? body + '\n\n' : '') + hint
+  return [{ type: 'text', text: head + (body ? '\n\n' + body : '') }]
+}
+
+export function renderStatus(value, provider) {
+  const v = value || {}
+  const bk = (provider && provider.id) || 'CLI'
+  const lines = []
+  lines.push(bk + ' status: ' + v.state + (v.running > 0 ? ' (' + v.running + ' running)' : '') + (v.projects && v.projects.length > 1 ? ' across ' + v.projects.length + ' projects' : '') + (v.totalTokens ? ' | total ' + v.runs + ' runs, ' + v.totalTokens + ' tokens' : ''))
+  const projList = (v.projects && v.projects.length) ? v.projects : null
+  if (projList) {
+    for (const p of projList) {
+      const cur = p.current ? (' step ' + p.current.stepIndex + ' → ' + p.current.tool + (p.current.args ? ' ' + JSON.stringify(p.current.args) : '')) : (p.running > 0 ? ' (starting / thinking)' : '')
+      const usage = (p.runs ? ' | total ' + p.runs + ' runs, ' + (p.totalTokens || 0) + ' tokens' : '')
+      const bkTag = (p.lastBackend && p.lastBackend !== bk) ? ' [' + p.lastBackend + ']' : ''
+      lines.push('· ' + p.name + ' [' + p.state + (p.running > 0 ? ' ×' + p.running : '') + ']' + bkTag + cur + (p.lastStatus ? ' | last=' + p.lastStatus + (p.lastSessionId ? ' ' + p.lastSessionId.slice(0, 8) : '') : '') + usage)
+      if (p.trail && p.trail.length) {
+        lines.push('    steps:')
+        for (const e of p.trail.slice(-3)) { const a = e.args ? ' ' + JSON.stringify(e.args) : ''; lines.push('      [' + e.state + '] step ' + e.stepIndex + ' ' + e.tool + a) }
+      }
+    }
+  } else {
+    if (v.current) { const c = v.current; lines.push('current: step ' + c.stepIndex + ' → ' + c.tool + (c.args ? ' ' + JSON.stringify(c.args) : '')) }
+    else if (v.state === 'running') lines.push('current: (starting / thinking)')
+    if (v.trail && v.trail.length) {
+      lines.push('recent steps:')
+      for (const e of v.trail.slice(-6)) { const a = e.args ? ' ' + JSON.stringify(e.args) : ''; lines.push('  [' + e.state + '] step ' + e.stepIndex + ' ' + e.tool + a) }
+    }
+    if (v.lastStatus) lines.push('last: ' + v.lastStatus + (v.lastSessionId ? ' session=' + v.lastSessionId : '') + (v.lastAt ? ' @ ' + new Date(v.lastAt).toISOString() : ''))
+  }
+  if (v.updatedAt) lines.push('updatedAt: ' + new Date(v.updatedAt).toISOString())
+  return [{ type: 'text', text: lines.join('\n') }]
+}
+
+// ── MCP 子进程快照上报 ────────────────────────────────────────────────────────
+// MCP server 是独立 stdio 子进程：没有 ctx.emit、拿不到 collector 服务，所以把快照
+// 原子写进 {dsh-home}/cli-bridge-mcp-<provider>.json，家级灯在响应请求时读取合并。
+export function buildMcpBridgePayload(snap, pid, nowMs) {
+  const s = snap && typeof snap === 'object' ? snap : {}
+  const src = Array.isArray(s.projects) ? s.projects : []
+  const projects = []
+  for (const p of src) {
+    if (!p || !p.cwd) continue
+    projects.push({
+      cwd: String(p.cwd), name: p.name ? String(p.name) : '', provider: p.provider || s.provider || '', state: p.state ? String(p.state) : 'idle',
+      running: Number(p.running) || 0,
+      current: p.current ? { stepIndex: Number(p.current.stepIndex) || 0, tool: String(p.current.tool || ''), args: p.current.args || null } : null,
+      trail: Array.isArray(p.trail) ? p.trail.slice(-MAX_TRAIL).map((e) => ({ stepIndex: Number(e && e.stepIndex) || 0, tool: String((e && e.tool) || ''), state: String((e && e.state) || ''), args: (e && e.args) || null })) : [],
+      lastStatus: p.lastStatus ? String(p.lastStatus) : null, lastAt: Number(p.lastAt) || 0, lastSessionId: p.lastSessionId ? String(p.lastSessionId) : null,
+      lastBackend: p.lastBackend ? String(p.lastBackend) : null, fallbackActive: !!p.fallbackActive, runs: Number(p.runs) || 0, totalTokens: Number(p.totalTokens) || 0, updatedAt: Number(p.updatedAt) || 0
+    })
+  }
+  return { source: 'mcp', provider: s.provider || '', pid: Number(pid) || 0, updatedAt: Number(nowMs) || 0, projects }
+}
+
+export function normalizeMcpBridge(payload, nowMs, staleMs) {
+  if (!payload || typeof payload !== 'object') return null
+  const projects = Array.isArray(payload.projects) ? payload.projects : []
+  const updatedAt = Number(payload.updatedAt) || 0
+  const stale = (Number(nowMs) || 0) - updatedAt > (Number(staleMs) || MCP_BRIDGE_STALE_MS)
+  const out = []
+  for (const p of projects) {
+    if (!p || !p.cwd) continue
+    if (stale && (Number(p.running) || 0) > 0) out.push(Object.assign({}, p, { running: 0, current: null, state: p.state === 'running' ? 'idle' : p.state }))
+    else out.push(p)
+  }
+  return { source: 'mcp', provider: payload.provider || '', pid: Number(payload.pid) || 0, updatedAt, stale, projects: out }
+}
+
+// ── 执行编排（三形态共用；provider 差异全走 descriptor）──────────────────────
+// o: {
+//   ctx,                 // Cordis ctx（interval/timeout/get）
+//   subprocess,          // DSH subprocess 服务
+//   provider,            // descriptor（见 PROVIDER-CONTRACT.md）
+//   engine,              // createStatusEngine({provider}) 实例
+//   resolveExe,          // async (backend, signal) => 'exe' | [nodeExe, binPath] | throw
+//   getCwdFallback,      // () => 默认 cwd
+//   getPreferredBackend, // () => 用户偏好后端（可缺省）
+//   getSettings,         // () => 当前设置对象（可缺省；provider 用它读 defaultModel 等）
+//   planActiveFor,       // (exec) => bool（plan 模式判定，可缺省）
+//   defaultMode          // 'auto'
+// }
+export function createRunner(o) {
+  const ctx = o.ctx
+  const subprocess = o.subprocess
+  const provider = o.provider
+  const engine = o.engine
+  const stdio = { stdin: 'ignore', stdout: { maxBytes: 4000000, spill: { maxBytes: 40000000 } }, stderr: { maxBytes: 1000000, spill: { maxBytes: 8000000 } } }
+
+  function readStreams(handle) {
+    const stdoutText = handle.collected.stdout ? handle.collected.stdout.readFrom(0).text : ''
+    const stderrText = handle.collected.stderr ? handle.collected.stderr.readFrom(0).text : ''
+    return { stdoutText, stderrText }
+  }
+
+  let built_env = null
+  function spawnSpec(argv, cwd, callerSignal) {
+    const spec = { argv, cwd, stdio, graceMs: 5000 }
+    if (callerSignal) spec.signal = callerSignal
+    if (built_env && typeof built_env === 'object') spec.env = built_env
+    return spec
+  }
+
+  function startLiveParser(handle, cwd) {
+    let cursor = 0
+    const stream = createLineStream((ln) => {
+      const t = ln.trim()
+      if (!t.startsWith('{')) return
+      try { engine.foldEvent(JSON.parse(t), cwd) } catch (e) {}
+    })
+    const tick = function () {
+      try {
+        const full = handle.collected.stdout ? handle.collected.stdout.readFrom(0).text : ''
+        if (full.length <= cursor) return
+        const fresh = full.slice(cursor)
+        cursor = full.length
+        stream.pushChunk(fresh)
+      } catch (e) {}
+    }
+    const disposeInterval = ctx.interval(tick, 250)
+    return function disposeLive() { try { stream.flush() } catch (e) {} disposeInterval() }
+  }
+
+  async function runSync(argv, cwd, timeoutSec, callerSignal, extraEnv) {
+    const spec = spawnSpec(argv, cwd, callerSignal)
+    if (extraEnv && typeof extraEnv === 'object') spec.env = Object.assign({}, spec.env, extraEnv)
+    const handle = subprocess.spawn(spec)
+    let lastEventSummary = '(no events yet)'
+    let timedOut = false
+    const disposeTimer = ctx.timeout(function () {
+      timedOut = true
+      try {
+        const p = engine.ensureProject(cwd)
+        lastEventSummary = (p.current ? ('last step ' + p.current.stepIndex + ' -> ' + p.current.tool) : '') +
+          ' | trail=' + (p.trail.length ? p.trail.slice(-2).map((e) => '[' + e.state + ']' + e.tool).join(',') : 'empty') +
+          ' | elapsed=' + Math.round((Date.now() - (p.updatedAt || Date.now())) / 1000) + 's since last activity'
+      } catch (e) {}
+      try { handle.terminate() } catch (e) {}
+    }, (timeoutSec + 60) * 1000)
+    const disposeLive = startLiveParser(handle, cwd)
+    try {
+      const outcome = await handle.done
+      const s = readStreams(handle)
+      return { outcome, stdoutText: s.stdoutText, stderrText: s.stderrText, timedOut, lastEventSummary }
+    } finally { disposeLive(); disposeTimer() }
+  }
+
+  async function askFallback(exec, res, canRetry) {
+    const uq = ctx.get('userQuestions')
+    if (!uq || !exec || !exec.agent) return 'error'
+    const labels = fallbackLabels(provider)
+    const bk = provider.id
+    const detail = String(res.stderr || res.response || res.status || '').slice(-600)
+    const opts = [{ label: labels.fallback, description: '本次改由 DSH 本地模型/原生工具完成，不再走 ' + bk }]
+    if (canRetry) opts.push({ label: labels.retry, description: '再调用一次 ' + bk + '（网络抖动时可用）' })
+    opts.push({ label: labels.cancel, description: '不回退，直接返回 ' + bk + ' 错误' })
+    try {
+      const ans = await uq.ask({ agent: exec.agent, signal: exec.signal, questions: [{ id: bk + '-fallback', header: bk + ' 受限', question: bk + ' 调用失败（疑似流量受限/网络不通，状态=' + String(res.status) + '）。是否改用 DSH 本地 API 配置继续？', detail, options: opts }] })
+      const sel = (ans && ans.answers && ans.answers[0] && ans.answers[0].selected) || []
+      if (sel.indexOf(labels.fallback) >= 0) return 'fallback'
+      if (sel.indexOf(labels.retry) >= 0) return 'retry'
+      return 'error'
+    } catch (e) { return 'error' }
+  }
+
+  async function coreExecute(rawArgs, exec) {
+    const args = rawArgs || {}
+    built_env = null
+    const mk = (over) => Object.assign({ ok: false, status: 'BAD_ARGS', response: '', sessionId: null, durationSeconds: null, numTurns: null, totalTokens: null, exitCode: null, mode: provider.defaultMode || 'auto', backend: null, stderr: '' }, over)
+    if (!args.prompt || !String(args.prompt).trim()) return mk({ stderr: 'prompt is required' })
+
+    const target = engine.resolveTarget(args, o.getCwdFallback())
+    const backend = provider.resolveBackend ? provider.resolveBackend(args, target, o.getPreferredBackend ? o.getPreferredBackend() : null) : (o.getPreferredBackend ? o.getPreferredBackend() : provider.defaultBackend)
+    const cwd = target.cwd
+
+    // provider 前置检查（凭据/桌面健康等）：返回 { abort: res } 则直接结束。
+    if (provider.preflight) {
+      const pre = provider.preflight({ args, exec, backend, cwd, engine, ctx, o })
+      if (pre && pre.abort) { engine.begin(cwd); engine.end(pre.abort, cwd); return pre.abort }
+    }
+
+    let exePrefix = provider.fallbackExePrefix ? provider.fallbackExePrefix(backend) : [provider.exeName || provider.id]
+    let exeOk = true, resolveErr = ''
+    try { const resExe = await o.resolveExe(backend, exec ? exec.signal : undefined); exePrefix = Array.isArray(resExe) ? resExe : [resExe] }
+    catch (e) { exeOk = false; resolveErr = String(e && e.message || e) }
+
+    const built = provider.buildArgv(exePrefix, args, {
+      planActive: o.planActiveFor ? o.planActiveFor(exec) : false,
+      defaultMode: provider.defaultMode || 'auto',
+      defaultModel: (!args.model && o.getSettings) ? (o.getSettings() || {}).defaultModel || null : null,
+      backend, settings: o.getSettings ? o.getSettings() : null, engine
+    })
+    built_env = (built.env && typeof built.env === 'object') ? built.env : null
+    const unavailableStatus = provider.unavailableStatus || 'CLI_UNAVAILABLE'
+
+    if (!exeOk) {
+      engine.begin(cwd)
+      let res = mk({ status: unavailableStatus, mode: built.mode, backend, stderr: (backend || provider.id) + ' executable not found: ' + resolveErr })
+      if (await askFallback(exec, res, true) === 'fallback') res = fallbackResult(res, built.mode, provider)
+      engine.end(res, cwd); return res
+    }
+
+    // 非 spawn 路径（如 mimo 桌面走本地 HTTP）：provider 若给 execute 且（未给 delegates
+    // 或 delegates(backend)=true）则完全交给它；否则落回通用 pipeline（jobs/重试/弹窗）。
+    if (provider.execute && (!provider.delegates || provider.delegates(backend, args))) {
+      engine.begin(cwd)
+      try {
+        const res = await provider.execute({ args, exec, backend, cwd, built, engine, ctx, o, runSync })
+        engine.end(res, cwd); return res
+      } catch (e) {
+        const res = mk({ status: 'SPAWN_ERROR', mode: built.mode, backend, stderr: String(e && e.message || e) })
+        engine.end(res, cwd); return res
+      }
+    }
+
+    const jobs = ctx.get('jobs')
+    if (args.background && jobs && exec && exec.agent) {
+      try {
+        engine.begin(cwd)
+        const jobId = jobs.start({
+          kind: 'bash', label: provider.id + ': ' + shortLabel(args.prompt), owner: exec.agent,
+          run() {
+            const handle = subprocess.spawn(spawnSpec(built.argv, cwd))
+            const disposeLive = startLiveParser(handle, cwd)
+            let bgKilled = false
+            const disposeGuard = ctx.timeout(function () { bgKilled = true; try { handle.terminate() } catch (e) {} }, (built.timeoutSec + 60) * 1000)
+            const done = handle.done.then(function (outcome) {
+              disposeLive(); disposeGuard()
+              const s = readStreams(handle)
+              const res = provider.buildResult(provider.parseJson(s.stdoutText), outcome, built.mode, s.stderrText, s.stdoutText, backend)
+              if (bgKilled && !res.ok) { res.status = 'HUNG_TIMEOUT'; res.stderr = (res.stderr ? res.stderr + ' ' : '') + '[killed by timeout guard after ' + built.timeoutSec + 's; raise timeoutSec for long builds]' }
+              engine.end(res, cwd)
+              return { status: res.ok ? 'completed' : 'failed', detail: provider.id + ' ' + res.status, output: JSON.stringify(res) }
+            }).catch(function (err) { disposeLive(); disposeGuard(); engine.end(mk({ status: 'JOB_ERROR', backend }), cwd); return { status: 'failed', detail: String(err && err.message || err) } })
+            return { cancel: function () { try { handle.terminate() } catch (e) {} }, done }
+          }
+        })
+        return { ok: true, background: true, jobId: String(jobId), mode: built.mode, backend, note: provider.id + ' running in background; collect with job_output ' + String(jobId) + '. Background failures do NOT open the fallback dialog; on failure re-run in foreground to be prompted.' }
+      } catch (e) {
+        const res = mk({ status: 'JOB_START_ERROR', mode: built.mode, backend, stderr: 'failed to start background job: ' + String(e && e.message || e) })
+        engine.end(res, cwd); return res
+      }
+    }
+
+    engine.begin(cwd)
+    try {
+      let attempt = 0, cliRetried = false, res
+      while (true) {
+        attempt += 1
+        const r = await runSync(built.argv, cwd, built.timeoutSec, exec ? exec.signal : undefined, built.env)
+        if (r.timedOut) { res = mk({ status: 'HUNG_TIMEOUT', mode: built.mode, backend, exitCode: r.outcome ? r.outcome.exitCode : null, stderr: provider.id + ' did not finish within ' + built.timeoutSec + 's (DSH hard timeout). Last activity: ' + r.lastEventSummary + '. NOTE: raise timeoutSec for long builds; this was a hang guard.' }); break }
+        res = provider.buildResult(provider.parseJson(r.stdoutText), r.outcome, built.mode, r.stderrText, r.stdoutText, backend)
+        if (res.ok) break
+        if (provider.isTransientCliError && provider.isTransientCliError(res)) {
+          if (!cliRetried) { cliRetried = true; attempt -= 1; continue }
+          res.retried = true; break
+        }
+        if (!(provider.isLimited ? provider.isLimited(res) : isLimited(res))) break
+        const decision = await askFallback(exec, res, attempt < 2)
+        if (decision === 'fallback') { res = fallbackResult(res, built.mode, provider); break }
+        if (decision === 'retry' && attempt < 2) continue
+        break
+      }
+      engine.end(res, cwd); return res
+    } catch (e) {
+      const res = mk({ status: 'SPAWN_ERROR', mode: built.mode, backend, stderr: String(e && e.message || e) })
+      const out = (await askFallback(exec, res, true) === 'fallback') ? fallbackResult(res, built.mode, provider) : res
+      engine.end(out, cwd); return out
+    }
+  }
+
+  return { coreExecute, runSync, askFallback }
+}