@mininglamp-oss/octo-runtime 1.1.0 → 1.1.2

package/node_modules/@mininglamp-oss/octo-runtime-extra-channel-gateway/dist/execution/dispatcher.js

@@ -9,6 +9,7 @@ import { join } from "node:path";
 import { assertContextEnvelope, mergeContext } from "@mininglamp-oss/octo-runtime-protocol";
 import { validateImConfig } from "../lifecycle/configuration.js";
 import { compactHistoryGap, historyGapContext } from "../application/context-gap.js";
+import { MENTION_GUIDANCE } from "../transport/mentions.js";
 export function createImInvocation(config, message, context, sessionKey, session, _signal, occurrenceId = message.messageId) {
     validateImConfig(config);
     assertContextEnvelope(context);
@@ -77,7 +78,30 @@ export function createImInvocation(config, message, context, sessionKey, session
         ]
     };
     // Channel 只组装公开 InvokeInput；执行解析和指令渲染统一交给 Host，避免再次拒绝业务 Context。
+    // 宿主已先解析静态/动态 Context；渠道默认指令只在本轮与有效 entries 保序组合一次。
+    // 不改变公共 mergeContext 或动态人设替换合同，也不把上一轮的组合结果累积回来。
     let submitted = context;
+    // 同代次卡片重试已从 occurrence 取得组合后的冻结快照，不能再次追加或按文本去重。
+    if (!message.historyRetry) {
+        const instructions = context.items.find((item) => item.namespace === "octo.control" && item.name === "instructions");
+        const channelInstructions = {
+            namespace: "octo.control",
+            name: "instructions",
+            payload: {
+                entries: [
+                    ...(instructions?.payload
+                        ?.entries ?? []),
+                    { text: MENTION_GUIDANCE }
+                ]
+            }
+        };
+        submitted = {
+            schema: context.schema,
+            items: instructions
+                ? context.items.map((item) => (item === instructions ? channelInstructions : item))
+                : [...context.items, channelInstructions]
+        };
+    }
     let snapshot;
     // 执行默认项也占协议预算；只降级本渠道自动追加的辅助材料，不丢弃显式业务项。
     for (const optional of [

package/node_modules/@mininglamp-oss/octo-runtime-extra-channel-gateway/dist/transport/contexts.js

@@ -8,7 +8,7 @@ import { getGroupMd, getThreadMd } from "./api/rules.js";
 import { getChannelMessagePage } from "./api/conversations.js";
 import { compactHistoryGap, historyGapContext, IM_HISTORY_MESSAGE_LIMIT, planHistoryGap, validMessageSeq } from "../application/context-gap.js";
 import { OctoApiError } from "./api/errors.js";
-import { MENTION_GUIDANCE } from "./mentions.js";
+import { MENTION_REMINDER } from "./mentions.js";
 import { messageContent } from "./message-content.js";
 export async function build_im_contexts(config, message, botToken, signal, options = { initialSession: false }) {
     const items = structuredClone([
@@ -108,7 +108,7 @@ export async function build_im_contexts(config, message, botToken, signal, optio
         const instructions = {
             namespace: "extra.im",
             name: "mention-instructions",
-            guidance: MENTION_GUIDANCE,
+            guidance: MENTION_REMINDER,
             payload: {
                 source,
                 actorId: message.fromUid,

package/node_modules/@mininglamp-oss/octo-runtime-extra-channel-gateway/dist/transport/mentions.d.ts

@@ -1,11 +1,14 @@
 import type { MentionEntity } from "./api/types.js";
 import type { GroupMember } from "./api/conversations.js";
-export declare const MENTION_GUIDANCE = "\u4F60\u6B63\u5728\u901A\u8FC7 Octo \u56DE\u590D\u5F53\u524D\u9891\u9053\u3002\u666E\u901A\u56DE\u590D\u4E0D\u8981\u81EA\u52A8 @ \u53D1\u8D77\u8005\u3002\u82E5\u5F53\u524D\u7528\u6237\u660E\u786E\u8981\u6C42\u5728\u4EFB\u52A1\u5B8C\u6210\u540E\u901A\u77E5\u67D0\u4F4D\u771F\u4EBA\uFF0C\u5148\u5B8C\u6210\u4EFB\u52A1\uFF1B\u5728\u6700\u7EC8\u56DE\u7B54\u524D\uFF0C\u786E\u8BA4\u5BF9\u65B9\u5728\u5F53\u524D\u9891\u9053\u4E2D\u7684\u771F\u5B9E UID \u548C\u663E\u793A\u540D\u3002\u4FE1\u606F\u4E0D\u8DB3\u65F6\u6309\u9700\u4F7F\u7528 octo-cli \u67E5\u8BE2\uFF1B\u540C\u540D\u3001\u67E5\u8BE2\u5931\u8D25\u6216\u627E\u4E0D\u5230\u5408\u9002\u76EE\u6807\u65F6\uFF0C\u7531\u4F60\u5224\u65AD\u5E76\u6539\u7528\u666E\u901A @\u540D\u5B57 \u6216\u7EAF\u6587\u672C\uFF0C\u4E0D\u8981\u731C UID\uFF0C\u4E0D\u5FC5\u5F3A\u5236\u8FFD\u95EE\uFF0C\u4E5F\u4E0D\u5FC5\u5C55\u793A\u70B9\u540D\u672A\u5B8C\u6210\u7684\u63D0\u793A\u3002\u80FD\u591F\u786E\u5B9A\u76EE\u6807\u4E14\u9700\u8981\u70B9\u540D\u65F6\uFF0C\u5728 final \u6587\u672C\u7684\u666E\u901A\u6B63\u6587\u4E2D\u8F93\u51FA @[uid:displayName]\uFF0C\u4F8B\u5982 @[user_demo_1:\u5F20\u4E09]\uFF1BChannel \u4F1A\u8F6C\u6362\u4E3A\u539F\u751F mention\uFF0C\u5E76\u968F\u8FD9\u4EFD\u6700\u7EC8\u56DE\u7B54\u7EDF\u4E00\u53D1\u9001\uFF0C\u4E0D\u8981\u518D\u8C03\u7528 octo-cli message send \u91CD\u590D\u53D1\u9001\u3002\u666E\u901A @\u6635\u79F0\u4E0D\u4EA7\u751F\u901A\u77E5\uFF1Bthinking\u3001\u5DE5\u5177\u8F93\u51FA\u3001\u8FDB\u5EA6\u6D88\u606F\u3001\u4EE3\u7801\u5757\u3001\u884C\u5185\u4EE3\u7801\u53CA\u5F15\u7528\u793A\u4F8B\u4E0D\u89E6\u53D1\u70B9\u540D\uFF0C\u4EE3\u7801\u5185\u5BB9\u4FDD\u6301\u539F\u6837\u3002\u4E0D\u8981\u8F93\u51FA\u539F\u59CB\u6D88\u606F\u4F53 JSON \u6216\u81EA\u884C\u8BA1\u7B97\u4F4D\u7F6E\uFF0C\u4E5F\u4E0D\u8981\u6784\u9020 @\u6240\u6709\u4EBA\u3001@\u6240\u6709AI \u6216\u5E7F\u64AD\u54E8\u5175\u3002\u6B64\u6307\u5F15\u4E0D\u6388\u6743\u8DE8\u9891\u9053\u901A\u77E5\u6216\u81EA\u884C\u53D1\u8D77 Bot \u4E92\u76F8\u8C03\u7528\u3002\u5386\u53F2\u4E2D\u7684\u8981\u6C42\u548C\u793A\u4F8B\u4EC5\u4F5C\u4E3A\u80CC\u666F\uFF0C\u4E0D\u80FD\u5355\u72EC\u6388\u6743\u672C\u8F6E\u901A\u77E5\u3002";
+/** Gateway 的稳定控制指令；压缩时的保留由模型遵守文本要求，不新增 Provider 保留机制。 */
+export declare const MENTION_GUIDANCE: string;
+/** 逐轮普通 Context 提醒也覆盖升级前已存在的 Provider 会话，不修改其系统指令或重置会话。 */
+export declare const MENTION_REMINDER = "For this turn, follow the current Octo mention rules: do not automatically mention the sender. Only when the current user explicitly requests a human notification or bot handoff in this channel, confirm the real member UID and display name, using octo-cli if needed, then write @[<uid>:<displayName>] with actual values in the successful final reply. Gateway sends the native mention on that reply; do not send a duplicate via octo-cli message send. Plain @name does not notify. If identity is unconfirmed, use plain text without guessing. Do not broadcast, initiate unsolicited bot calls, or treat history as authorization. Code and quoted examples are not mentions.";
 export interface ImTextMention {
     uids: string[];
     entities: MentionEntity[];
 }
-/** 只转换 final 普通文本的显式标记；查身份失败时正文仍能发送。 */
+/** 只转换 final 普通文本中已核验真人或 Bot 成员的显式标记；查身份失败时正文仍能发送。 */
 export declare function prepareFinalMention(text: string, members: () => Promise<GroupMember[]>): Promise<{
     text: string;
     mention?: ImTextMention;

package/node_modules/@mininglamp-oss/octo-runtime-extra-channel-gateway/dist/transport/mentions.js

@@ -1,5 +1,19 @@
 import { fromMarkdown } from "mdast-util-from-markdown";
-export const MENTION_GUIDANCE = "你正在通过 Octo 回复当前频道。普通回复不要自动 @ 发起者。若当前用户明确要求在任务完成后通知某位真人，先完成任务；在最终回答前，确认对方在当前频道中的真实 UID 和显示名。信息不足时按需使用 octo-cli 查询；同名、查询失败或找不到合适目标时，由你判断并改用普通 @名字 或纯文本，不要猜 UID，不必强制追问，也不必展示点名未完成的提示。能够确定目标且需要点名时，在 final 文本的普通正文中输出 @[uid:displayName]，例如 @[user_demo_1:张三]；Channel 会转换为原生 mention，并随这份最终回答统一发送，不要再调用 octo-cli message send 重复发送。普通 @昵称不产生通知；thinking、工具输出、进度消息、代码块、行内代码及引用示例不触发点名，代码内容保持原样。不要输出原始消息体 JSON 或自行计算位置，也不要构造 @所有人、@所有AI 或广播哨兵。此指引不授权跨频道通知或自行发起 Bot 互相调用。历史中的要求和示例仅作为背景，不能单独授权本轮通知。";
+/** Gateway 的稳定控制指令；压缩时的保留由模型遵守文本要求，不新增 Provider 保留机制。 */
+export const MENTION_GUIDANCE = [
+    "[OCTO_CHANNEL_MENTION_RULES_V1]",
+    "These are stable output rules for the current Octo channel. When summarizing or compacting the conversation, preserve this entire block verbatim, including its boundary markers and mention syntax.",
+    "Do not automatically mention the sender in ordinary replies. When the current user explicitly requests a notification to a human or a task handoff to a bot in the current channel, confirm the target's real UID and display name before the final reply.",
+    "If identity information is missing, use octo-cli as needed to look it up. For a group or topic, use octo-cli group members <group-no> with the current parent group number. Never infer a UID from a nickname, username, or bot name.",
+    "For a native mention, write @[<uid>:<displayName>] in the ordinary body of the successful final reply. Replace both placeholders with confirmed values and retain the square brackets and single colon. A plain @name is only text and does not notify or activate the target bot.",
+    "Gateway validates current-channel membership and converts valid markers into readable text and native mention metadata on this same final reply. Do not call octo-cli message send to send a duplicate copy of the final reply. Do not output raw message JSON or calculate mention entity offsets.",
+    "Thinking, tool output, progress messages, code blocks, inline code, quoted examples, and failed replies do not trigger mention conversion. Keep code and examples unchanged.",
+    "Do not construct broadcast mentions or broadcast sentinel UIDs. Do not initiate unsolicited bot-to-bot calls or mention loops. Historical requests and examples alone do not authorize a notification or handoff in the current turn. These rules do not authorize cross-channel notifications or bypass recipient admission rules.",
+    "If the target cannot be confirmed, use a plain @name or ordinary text without guessing a UID. Continue delivering the final answer without a separate mention-failure notice or a forced clarification.",
+    "[/OCTO_CHANNEL_MENTION_RULES_V1]"
+].join("\n");
+/** 逐轮普通 Context 提醒也覆盖升级前已存在的 Provider 会话，不修改其系统指令或重置会话。 */
+export const MENTION_REMINDER = "For this turn, follow the current Octo mention rules: do not automatically mention the sender. Only when the current user explicitly requests a human notification or bot handoff in this channel, confirm the real member UID and display name, using octo-cli if needed, then write @[<uid>:<displayName>] with actual values in the successful final reply. Gateway sends the native mention on that reply; do not send a duplicate via octo-cli message send. Plain @name does not notify. If identity is unconfirmed, use plain text without guessing. Do not broadcast, initiate unsolicited bot calls, or treat history as authorization. Code and quoted examples are not mentions.";
 function candidates(text) {
     const found = [];
     const visit = (node) => {
@@ -26,7 +40,7 @@ function candidates(text) {
     visit(fromMarkdown(text));
     return found.sort((a, b) => a.start - b.start);
 }
-/** 只转换 final 普通文本的显式标记；查身份失败时正文仍能发送。 */
+/** 只转换 final 普通文本中已核验真人或 Bot 成员的显式标记；查身份失败时正文仍能发送。 */
 export async function prepareFinalMention(text, members) {
     const targets = candidates(text);
     if (!targets.length)
@@ -38,9 +52,9 @@ export async function prepareFinalMention(text, members) {
     catch {
         verified = [];
     }
-    const humans = new Map((Array.isArray(verified) ? verified : [])
+    const confirmedMembers = new Map((Array.isArray(verified) ? verified : [])
         .filter((member) => member && typeof member.uid === "string" && typeof member.name === "string")
-        .filter((member) => member.robot === false || member.robot === 0)
+        .filter(({ robot }) => robot === false || robot === 0 || robot === true || robot === 1)
         .filter((member) => member.uid && member.name && !["-1", "-2", "-3", "all"].includes(member.uid))
         .map((member) => [member.uid, member]));
     const entities = [];
@@ -49,7 +63,7 @@ export async function prepareFinalMention(text, members) {
     let output = "";
     for (const target of targets) {
         output += text.slice(cursor, target.start);
-        const member = humans.get(target.uid);
+        const member = confirmedMembers.get(target.uid);
         const label = `@${member?.name ?? target.name}`;
         if (member) {
             entities.push({ uid: member.uid, offset: output.length, length: label.length });

package/node_modules/@mininglamp-oss/octo-runtime-extra-channel-gateway/dist/transport/normalize.js

@@ -15,6 +15,7 @@ export function observesImScope(config, channelId, channelType, spaceId) {
             config.group_ids.includes(groupScope(channelId).groupNo)));
 }
 export function acceptsImMessage(config, owner, message) {
+    // 自己发出的消息永不触发 AgentRun，即使真实 @ 自己、@所有AI 或显式列入发送者名单。
     if (message.fromUid === config.bot_id ||
         isRulesNotification(message) ||
         !message.messageId ||

package/node_modules/@mininglamp-oss/octo-runtime-extra-channel-gateway/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mininglamp-oss/octo-runtime-extra-channel-gateway",
-  "version": "1.1.0",
+  "version": "1.1.2",
   "private": true,
   "type": "module",
   "exports": {
@@ -18,11 +18,11 @@
     "docs"
   ],
   "dependencies": {
-    "@mininglamp-oss/octo-runtime-executor-kernel": "1.1.0",
-    "@mininglamp-oss/octo-runtime-adapter-sdk": "1.1.0",
-    "@mininglamp-oss/octo-runtime-executor-core": "1.1.0",
-    "@mininglamp-oss/octo-runtime-host-sdk": "1.1.0",
-    "@mininglamp-oss/octo-runtime-protocol": "1.1.0",
+    "@mininglamp-oss/octo-runtime-executor-kernel": "1.1.2",
+    "@mininglamp-oss/octo-runtime-adapter-sdk": "1.1.2",
+    "@mininglamp-oss/octo-runtime-executor-core": "1.1.2",
+    "@mininglamp-oss/octo-runtime-host-sdk": "1.1.2",
+    "@mininglamp-oss/octo-runtime-protocol": "1.1.2",
     "mdast-util-from-markdown": "2.1.0",
     "ws": "8.22.0"
   }

package/node_modules/@mininglamp-oss/octo-runtime-extra-channel-wecom/config-schema.json

@@ -6,12 +6,12 @@
   "$comment": "声明文件最多 1 MiB，POSIX 权限须为 0600。Bot 按 ws_url 与 bot_id 的组合判重；凭据文件权限、目标 Agent 是否存在、Provider 是否可用等仍需运行时检查。Context 内部对象遵循 octo.context-envelope/v3，具体协议约束由现有运行时校验，本文件不重复展开。",
   "type": "object",
   "additionalProperties": false,
-  "required": ["module", "config"],
+  "required": ["config"],
   "properties": {
     "module": {
       "type": "string",
       "const": "@mininglamp-oss/octo-runtime-extra-channel-wecom",
-      "description": "必填。企业微信 Extra 的固定包入口；宿主须预先安装并确保模块可解析。此 schema 约束包名声明，宿主通过绝对路径加载同一模块时可自行调整该约束。插件实例名及 CLI 配置目录名为 channel-wecom。"
+      "description": "可选旧声明。CLI 从 manifest.json 选择模块；省略时使用有效清单，保留时须与清单文字一致。SDK 原生 import 不需要此字段。此 schema 约束固定包名，宿主使用其他公开路径时可自行调整。"
     },
     "enabled": {
       "type": "boolean",

package/node_modules/@mininglamp-oss/octo-runtime-extra-channel-wecom/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mininglamp-oss/octo-runtime-extra-channel-wecom",
-  "version": "1.1.0",
+  "version": "1.1.2",
   "private": true,
   "type": "module",
   "exports": {
@@ -18,10 +18,10 @@
     "docs"
   ],
   "dependencies": {
-    "@mininglamp-oss/octo-runtime-host-sdk": "1.1.0",
-    "@mininglamp-oss/octo-runtime-executor-core": "1.1.0",
-    "@mininglamp-oss/octo-runtime-executor-kernel": "1.1.0",
+    "@mininglamp-oss/octo-runtime-host-sdk": "1.1.2",
+    "@mininglamp-oss/octo-runtime-executor-core": "1.1.2",
+    "@mininglamp-oss/octo-runtime-executor-kernel": "1.1.2",
     "ws": "8.22.0",
-    "@mininglamp-oss/octo-runtime-protocol": "1.1.0"
+    "@mininglamp-oss/octo-runtime-protocol": "1.1.2"
   }
 }

package/node_modules/@mininglamp-oss/octo-runtime-extra-webui/config-schema.json

@@ -6,12 +6,12 @@
   "$comment": "声明文件最多 1 MiB，POSIX 权限须为 0600。端口占用、路径可访问性、会话文件内容及文件权限仍需运行时检查。加载生命周期 loaded 不等于监听成功，宿主须检查插件状态中的 listening 与 errors。",
   "type": "object",
   "additionalProperties": false,
-  "required": ["module", "config"],
+  "required": ["config"],
   "properties": {
     "module": {
       "type": "string",
       "const": "@mininglamp-oss/octo-runtime-extra-webui",
-      "description": "必填。本地 WebUI Extra 的固定包入口；宿主须预先安装并确保模块可解析。此 schema 约束包名声明，宿主通过绝对路径加载同一模块时可自行调整该约束。插件实例名及 CLI 配置目录名为 webui。"
+      "description": "可选旧声明。CLI 从 manifest.json 选择模块；省略时使用有效清单，保留时须与清单文字一致。SDK 原生 import 不需要此字段。此 schema 约束固定包名，宿主使用其他公开路径时可自行调整。"
     },
     "enabled": {
       "type": "boolean",

package/node_modules/@mininglamp-oss/octo-runtime-extra-webui/dist/index.js

@@ -73,7 +73,7 @@ async function initialize(ctx, config) {
         errors.push("WEBUI_CONTEXT_INVALID");
         return;
     }
-    const store = new SessionStore(config.sessionStorePath);
+    const store = new SessionStore(config.sessionStorePath, ctx.log);
     try {
         await store.open();
     }

package/node_modules/@mininglamp-oss/octo-runtime-extra-webui/dist/store.d.ts

@@ -1,3 +1,4 @@
+import type { RuntimeLog } from "@mininglamp-oss/octo-runtime-host-sdk";
 export interface Session {
     id: string;
     title: string;
@@ -14,9 +15,11 @@ export declare function validMessages(value: unknown): value is unknown[];
 export declare function validBinding(value: unknown): value is Record<string, unknown>;
 export declare class SessionStore {
     readonly path: string;
+    private readonly log?;
     records: Session[];
     private queue;
-    constructor(path: string);
+    constructor(path: string, log?: RuntimeLog | undefined);
+    private cleanupError;
     open(): Promise<void>;
     change<T>(operation: (records: Session[]) => T): Promise<T>;
 }

package/node_modules/@mininglamp-oss/octo-runtime-extra-webui/dist/store.js

@@ -1,6 +1,26 @@
-import { mkdir, readFile, rename, writeFile } from "node:fs/promises";
+import { mkdir, open, readFile, rename, unlink } from "node:fs/promises";
 import { dirname } from "node:path";
 import { randomUUID } from "node:crypto";
+import { setTimeout as delay } from "node:timers/promises";
+// 本机 Windows 的瞬态 EPERM 在约 1.6 秒后恢复；只重试替换，不重放业务变更。
+// 最多 8 次替换、3170 ms 退避；文件系统调用和调度本身的耗时不计入退避预算。
+const replacementDelays = [20, 50, 100, 200, 400, 800, 1600];
+async function replace(temporary, destination) {
+    for (let attempt = 0;; attempt++) {
+        try {
+            await rename(temporary, destination);
+            return;
+        }
+        catch (error) {
+            // 返回结束重试的实际错误及其原生字段，不能让最初的 EPERM 掩盖后续错误。
+            if (process.platform !== "win32" ||
+                error.code !== "EPERM" ||
+                attempt === replacementDelays.length)
+                throw error;
+            await delay(replacementDelays[attempt]);
+        }
+    }
+}
 export function validMessages(value) {
     return (Array.isArray(value) &&
         value.every((message) => {
@@ -24,10 +44,21 @@ export function validBinding(value) {
 }
 export class SessionStore {
     path;
+    log;
     records = [];
     queue = Promise.resolve();
-    constructor(path) {
+    constructor(path, log) {
         this.path = path;
+        this.log = log;
+    }
+    cleanupError(event, error) {
+        // 清理可能因未释放句柄等原因失败；仅报告错误码，诊断失败不能覆盖保存错误。
+        try {
+            this.log?.("warn", event, { code: error?.code });
+        }
+        catch {
+            // 日志回调不能改变存储操作的结果。
+        }
     }
     async open() {
         try {
@@ -69,8 +100,27 @@ export class SessionStore {
                 throw new Error("WEBUI_STORE_TOO_LARGE");
             await mkdir(dirname(this.path), { recursive: true, mode: 0o700 });
             const temporary = `${this.path}.${randomUUID()}.tmp`;
-            await writeFile(temporary, text, { mode: 0o600, flag: "wx" });
-            await rename(temporary, this.path);
+            // 独占创建成功才取得所有权；open 失败不能删除可能属于其他写入者的文件。
+            const handle = await open(temporary, "wx", 0o600);
+            try {
+                try {
+                    await handle.writeFile(text);
+                }
+                catch (error) {
+                    await handle
+                        .close()
+                        .catch((closeError) => this.cleanupError("webui.store.close_failed", closeError));
+                    throw error;
+                }
+                // 关闭失败同样是保存失败，不能尝试替换或提交内存。
+                await handle.close();
+                await replace(temporary, this.path);
+            }
+            catch (error) {
+                await unlink(temporary).catch((cleanupError) => this.cleanupError("webui.store.temporary_cleanup_failed", cleanupError));
+                throw error;
+            }
+            // rename 成功就是提交点；此后没有可能将成功翻转成失败的日志或清理动作。
             this.records = next;
             return result;
         });

package/node_modules/@mininglamp-oss/octo-runtime-extra-webui/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mininglamp-oss/octo-runtime-extra-webui",
-  "version": "1.1.0",
+  "version": "1.1.2",
   "private": true,
   "type": "module",
   "description": "Local Runtime workbench with canonical SSE presentation",
@@ -19,6 +19,6 @@
     "porting-map.md"
   ],
   "dependencies": {
-    "@mininglamp-oss/octo-runtime-protocol": "1.1.0"
+    "@mininglamp-oss/octo-runtime-protocol": "1.1.2"
   }
 }

package/node_modules/@mininglamp-oss/octo-runtime-host-sdk/dist/extra-config.d.ts

@@ -6,8 +6,15 @@ export interface ExtraDescriptor {
     enabled?: boolean;
     config: JsonObject;
 }
-export type StoredExtra = Omit<ExtraDescriptor, "name">;
+/** CLI 配置可由 manifest 提供模块；原生代码声明 ExtraDescriptor 仍显式指定模块。 */
+export interface StoredExtra {
+    module?: string;
+    enabled?: boolean;
+    config: JsonObject;
+}
 export declare function assertStoredExtra(value: unknown): asserts value is StoredExtra;
 export declare function extraRegistration(descriptor: ExtraDescriptor): ExtraRegistration;
 /** Called only by a host that explicitly selects this directory as its source. */
 export declare function readExtraDirectory(directory: string): Promise<ExtraRegistration[]>;
+/** 宿主显式选取的配置文件；保持凭据权限校验，不解析或导入模块。 */
+export declare function readStoredExtra(directory: string, name: string): Promise<StoredExtra>;

package/node_modules/@mininglamp-oss/octo-runtime-host-sdk/dist/extra-config.js

@@ -8,7 +8,7 @@ export function assertStoredExtra(value) {
     const item = value;
     if (Object.keys(item).some((key) => !["module", "enabled", "config"].includes(key)))
         throw new Error("EXTRA_CONFIG_FIELD_INVALID");
-    if (typeof item.module !== "string" || !validModule(item.module))
+    if (item.module !== undefined && (typeof item.module !== "string" || !validModule(item.module)))
         throw new Error("EXTRA_MODULE_INVALID");
     if (item.enabled !== undefined && typeof item.enabled !== "boolean")
         throw new Error("EXTRA_ENABLED_INVALID");
@@ -35,12 +35,15 @@ export function extraRegistration(descriptor) {
     assertExtraName(descriptor.name);
     const { name, ...stored } = descriptor;
     assertStoredExtra(stored);
+    const module = stored.module;
+    if (!module)
+        throw new Error("EXTRA_MODULE_REQUIRED");
     return {
         name,
-        module: stored.module,
+        module,
         config: stored.config,
         enabled: stored.enabled,
-        load: () => import(isAbsolute(stored.module) ? pathToFileURL(stored.module).href : stored.module)
+        load: () => import(isAbsolute(module) ? pathToFileURL(module).href : module)
     };
 }
 /** Called only by a host that explicitly selects this directory as its source. */
@@ -56,15 +59,14 @@ export async function readExtraDirectory(directory) {
             continue;
         assertExtraName(entry.name);
         try {
-            const file = join(directory, entry.name, "config.json");
-            const info = await lstat(file);
-            if (!info.isFile() || (process.platform !== "win32" && info.mode & 0o077))
-                throw new Error("EXTRA_CONFIG_PERMISSIONS_INVALID");
-            if (info.size > 1024 * 1024)
-                throw new Error("EXTRA_CONFIG_TOO_LARGE");
-            const stored = JSON.parse(await readFile(file, "utf8"));
-            assertStoredExtra(stored);
-            registrations.push(extraRegistration({ name: entry.name, ...stored }));
+            const stored = await readStoredExtra(directory, entry.name);
+            registrations.push(stored.module
+                ? extraRegistration({ ...stored, name: entry.name, module: stored.module })
+                : {
+                    ...stored,
+                    name: entry.name,
+                    load: () => Promise.reject(new Error("EXTRA_MODULE_REQUIRED"))
+                });
         }
         catch (error) {
             const code = error instanceof Error && /^EXTRA_[A-Z_]+$/.test(error.message)
@@ -79,6 +81,19 @@ export async function readExtraDirectory(directory) {
     }
     return registrations;
 }
+/** 宿主显式选取的配置文件；保持凭据权限校验，不解析或导入模块。 */
+export async function readStoredExtra(directory, name) {
+    assertExtraName(name);
+    const file = join(directory, name, "config.json");
+    const info = await lstat(file);
+    if (!info.isFile() || (process.platform !== "win32" && info.mode & 0o077))
+        throw new Error("EXTRA_CONFIG_PERMISSIONS_INVALID");
+    if (info.size > 1024 * 1024)
+        throw new Error("EXTRA_CONFIG_TOO_LARGE");
+    const stored = JSON.parse(await readFile(file, "utf8"));
+    assertStoredExtra(stored);
+    return stored;
+}
 function validModule(module) {
     if (isAbsolute(module))
         return true;

package/node_modules/@mininglamp-oss/octo-runtime-host-sdk/dist/extra-service.js

@@ -54,6 +54,35 @@ export function createExtraService(options) {
     let server;
     let binding;
     let release;
+    let healthTimer;
+    let healthCheck;
+    let lastAvailable;
+    const logState = (event, state, code) => logs?.extra(name)(code ? "warn" : "info", event, { state, ...(code ? { code } : {}) });
+    const kernelAvailable = () => {
+        if (healthCheck)
+            return healthCheck;
+        healthCheck = (client?.status().then((value) => value.execution_ready, () => false) ?? Promise.resolve(false))
+            .then((available) => {
+            if (!owner.signal.aborted && available !== lastAvailable) {
+                lastAvailable = available;
+                logState(available ? "kernel.available" : "kernel.unavailable", available ? "available" : "unavailable");
+            }
+            return available;
+        })
+            .finally(() => {
+            healthCheck = undefined;
+        });
+        return healthCheck;
+    };
+    const watchKernel = () => {
+        // Allow one probe at a time and schedule after settlement; emit transitions, not idle heartbeats.
+        void kernelAvailable().finally(() => {
+            if (owner.signal.aborted || !logging)
+                return;
+            healthTimer = setTimeout(watchKernel, 5000);
+            healthTimer.unref();
+        });
+    };
     const sockets = new Set();
     let finishClosed;
     const closed = new Promise((resolve) => {
@@ -63,7 +92,7 @@ export function createExtraService(options) {
         phase,
         name,
         pid: process.pid,
-        kernel_available: (await client?.status().then((value) => value.execution_ready, () => false)) ?? false,
+        kernel_available: await kernelAvailable(),
         plugin: !enabled
             ? { phase: "disabled" }
             : phase === "ready" && plugins
@@ -95,6 +124,8 @@ export function createExtraService(options) {
         if (closing)
             return closing;
         phase = "closing";
+        logState("service.closing", phase);
+        clearTimeout(healthTimer);
         shutdownUntil ??= shutdownDeadline();
         const draining = beginDrain();
         owner.abort();
@@ -139,7 +170,6 @@ export function createExtraService(options) {
                     });
             });
             client?.close();
-            await attempt("logs", () => logs?.close());
             if (!errors.length)
                 await attempt("control-endpoint", async () => {
                     if (!release)
@@ -148,6 +178,8 @@ export function createExtraService(options) {
                         await rm(controlEndpoint, { force: true });
                     await release();
                 });
+            logState(errors.length ? "service.cleanup_incomplete" : "service.closed", errors.length ? "failed" : "closed", errors.length ? "EXTRA_CLEANUP_INCOMPLETE" : undefined);
+            await attempt("logs", () => logs?.close());
             if (acquired) {
                 if (errors.length)
                     ownership.failed = true;
@@ -202,6 +234,9 @@ export function createExtraService(options) {
                 acquired = true;
                 client = attachKernel({ endpoint });
                 logs = new RuntimeLogging(logging);
+                logState("service.initializing", phase);
+                if (logging)
+                    watchKernel();
                 plugins = new ExtraPlugins([], client, () => logs.extra(name));
                 if (enabled)
                     await plugins.load({
@@ -257,9 +292,11 @@ export function createExtraService(options) {
                     owner.signal.throwIfAborted();
                 }
                 phase = "ready";
+                logState("service.ready", phase);
             })();
             initialized = Promise.race([starting, cancelled])
                 .catch(async (error) => {
+                logState("service.failed", "failed", "SERVICE_INITIALIZATION_FAILED");
                 throw new ServiceInitializationError(error, await close());
             })
                 .finally(() => {

package/node_modules/@mininglamp-oss/octo-runtime-host-sdk/dist/index.d.ts

@@ -1,4 +1,5 @@
 export { RUNTIME_RUN_CONTRACT } from "@mininglamp-oss/octo-runtime-protocol";
+export type { RuntimeLoggingOptions, ExtraStatusRecord } from "@mininglamp-oss/octo-runtime-adapter-sdk";
 export * from "./extras.js";
 export * from "./extra-config.js";
 export * from "./context-loader.js";

package/node_modules/@mininglamp-oss/octo-runtime-host-sdk/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mininglamp-oss/octo-runtime-host-sdk",
-  "version": "1.1.0",
+  "version": "1.1.2",
   "private": true,
   "type": "module",
   "exports": {
@@ -19,9 +19,9 @@
     }
   },
   "dependencies": {
-    "@mininglamp-oss/octo-runtime-adapter-sdk": "1.1.0",
-    "@mininglamp-oss/octo-runtime-executor-kernel": "1.1.0",
-    "@mininglamp-oss/octo-runtime-protocol": "1.1.0"
+    "@mininglamp-oss/octo-runtime-adapter-sdk": "1.1.2",
+    "@mininglamp-oss/octo-runtime-executor-kernel": "1.1.2",
+    "@mininglamp-oss/octo-runtime-protocol": "1.1.2"
   },
   "types": "./dist/index.d.ts",
   "files": [

package/node_modules/@mininglamp-oss/octo-runtime-protocol/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mininglamp-oss/octo-runtime-protocol",
-  "version": "1.1.0",
+  "version": "1.1.2",
   "private": true,
   "type": "module",
   "exports": {

package/node_modules/import-meta-resolve/index.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Match `import.meta.resolve` except that `parent` is required (you can pass
+ * `import.meta.url`).
+ *
+ * @param {string} specifier
+ *   The module specifier to resolve relative to parent
+ *   (`/example.js`, `./example.js`, `../example.js`, `some-package`, `fs`,
+ *   etc).
+ * @param {string} parent
+ *   The absolute parent module URL to resolve from.
+ *   You must pass `import.meta.url` or something else.
+ * @returns {string}
+ *   Returns a string to a full `file:`, `data:`, or `node:` URL
+ *   to the found thing.
+ */
+export function resolve(specifier: string, parent: string): string;
+export { moduleResolve } from "./lib/resolve.js";
+export type ErrnoException = import("./lib/errors.js").ErrnoException;
+//# sourceMappingURL=index.d.ts.map

package/node_modules/import-meta-resolve/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["index.js"],"names":[],"mappings":"AAQA;;;;;;;;;;;;;;GAcG;AACH,mCAXW,MAAM,UAIN,MAAM,GAGJ,MAAM,CA2BlB;;6BA7CY,OAAO,iBAAiB,EAAE,cAAc"}

package/node_modules/import-meta-resolve/index.js

@@ -0,0 +1,47 @@
+/**
+ * @typedef {import('./lib/errors.js').ErrnoException} ErrnoException
+ */
+
+import {defaultResolve} from './lib/resolve.js'
+
+export {moduleResolve} from './lib/resolve.js'
+
+/**
+ * Match `import.meta.resolve` except that `parent` is required (you can pass
+ * `import.meta.url`).
+ *
+ * @param {string} specifier
+ *   The module specifier to resolve relative to parent
+ *   (`/example.js`, `./example.js`, `../example.js`, `some-package`, `fs`,
+ *   etc).
+ * @param {string} parent
+ *   The absolute parent module URL to resolve from.
+ *   You must pass `import.meta.url` or something else.
+ * @returns {string}
+ *   Returns a string to a full `file:`, `data:`, or `node:` URL
+ *   to the found thing.
+ */
+export function resolve(specifier, parent) {
+  if (!parent) {
+    throw new Error(
+      'Please pass `parent`: `import-meta-resolve` cannot ponyfill that'
+    )
+  }
+
+  try {
+    return defaultResolve(specifier, {parentURL: parent}).url
+  } catch (error) {
+    // See: <https://github.com/nodejs/node/blob/45f5c9b/lib/internal/modules/esm/initialize_import_meta.js#L34>
+    const exception = /** @type {ErrnoException} */ (error)
+
+    if (
+      (exception.code === 'ERR_UNSUPPORTED_DIR_IMPORT' ||
+        exception.code === 'ERR_MODULE_NOT_FOUND') &&
+      typeof exception.url === 'string'
+    ) {
+      return exception.url
+    }
+
+    throw error
+  }
+}