@sema-agent/server 4.2.0 → 5.0.0

package/dist/http/server.d.ts

@@ -5,7 +5,7 @@ import type { TaskRequestBody } from "./wire-types.js";
 import type { ServiceConfig } from "../config-types.js";
 import { type RestartSignal, type SessionMirrorRuling } from "../config-center/facade.js";
 import { type OwnerAwareSessionStore } from "../security.js";
-import type { RunStore, ApprovalStore, ImageIndex, ImageBake, CheckpointStoreFull, ResumeAnchorStore, ApprovalExemptionStore, ServiceSessionPolicyStore, ServiceFileSnapshotStore, StoreBackend } from "../plugins/store-backend.js";
+import type { RunStore, ImageIndex, ImageBake, CheckpointStoreFull, ResumeAnchorStore, ApprovalExemptionStore, ServiceSessionPolicyStore, ServiceFileSnapshotStore, StoreBackend } from "../plugins/store-backend.js";
 import { type MemorySyncRequest, type MemorySyncResponse } from "../memory-sync.js";
 import type { TaskAttachmentStore } from "../plugins/task-attachment-store.js";
 import type { LeaderEndpoint } from "../leader/endpoint.js";
@@ -25,8 +25,6 @@ import type { QuotaTracker } from "../observability/cost-quota.js";
 import type { ModelUsageTracker, PromptManifestTracker } from "../budget.js";
 import { scopedIdempotencyKey } from "./idempotency.js";
 export { scopedIdempotencyKey };
-import { clampVerifyRounds } from "./verify-rounds.js";
-export { clampVerifyRounds };
 import { streamApprovals, isQuestionAnswer } from "./routes/approvals-assistant.js";
 export { streamApprovals, isQuestionAnswer };
 import { cascadeConfig } from "./run-meta.js";
@@ -88,8 +86,6 @@ export interface ServiceStoreDeps {
     /** E18 resume-at: the eventId→entryId anchor map (tidb/pg/local). Present whenever a backend is — resolveSpec
      *  resolves body.resumeAt(eventId)→entryId, the run lifecycle captures per-turn anchors, E21 purges them. */
     resumeAnchorStore?: ResumeAnchorStore;
-    /** Human-in-the-loop approval store (F4 poll gate). Enables /v1/approvals when present. */
-    approvalStore?: ApprovalStore;
     /** Per-session approval exemption store — enables decide body `remember:"session"` + the
      *  exemptions list/revoke surfaces on /v1/approvals. The ask-gate probe is wired separately (main.ts). */
     approvalExemptionStore?: ApprovalExemptionStore;
@@ -439,7 +435,6 @@ export type FlatServiceDeps = ServiceCoreDeps & Partial<ServiceStoreDeps & Servi
 export type ServiceDeps = FlatServiceDeps & ServiceDepGroups;
 /** 分组入参 → 平铺视图(createHttpServer 的第一件事)。一组都没给 ⇒ 原样返回(存量调用零开销、零形变)。 */
 export declare function flattenServiceDeps(deps: ServiceDeps): FlatServiceDeps;
-export type { TaskRequestBody } from "./wire-types.js";
 /** Personalization caps: server-pinned hard limits — a UI may be stricter, never looser. */
 export declare const MAX_USER_SKILLS = 10;
 /** = core `SKILL_CONTENT_MAX_CHARS`(1MB 加载门,core 1.293 起 invoke 全文零截断、超 1MB 整拒;常量在
@@ -466,6 +461,22 @@ export declare function validateUserSkills(skills: unknown): string | null;
 export declare function createHttpServer(rawDeps: ServiceDeps): http.Server & {
     denyExpiredApprovals: (now: number) => Promise<void>;
 };
-/** Stable, low-cardinality route label for metrics/logs (ids collapsed to `:id`). */
+/** SSE: replay durable events after Last-Event-ID, then tail until the run is terminal (or stale). */
+/**
+ * The differences a concrete log (task_run | image_bake) feeds the ONE resumable SSE reader (P2.8). Everything
+ * the reader does — Last-Event-ID/`?from=` resume, the 416 retention boundary, the per-poll concurrent
+ * status+events read, the terminal re-fetch (the terminal event lands in the gap before the status flips), the
+ * stale fallback, the 15-min cap, the 15s idle heartbeat — is provider-agnostic and lives in `streamSseLog`.
+ * 🔴 The task_run provider MUST keep the existing wire bytes EXACTLY (center's relay + 730+ tests depend on it).
+ */
+/** POST endpoints that trigger BILLABLE work — the fail-closed auth guard must cover ALL of them (council: the
+ *  guard's inline list had drifted from the handlers and missed `/v1/approvals/:id/decide`, which resumes a run
+ *  via resumeCheckpoint/store.decide → paid tokens). Keep this in sync when adding a billable POST route. */
+export declare function isBillableSubmitPath(url: string): boolean;
+/** Stable, low-cardinality route label for metrics/logs (ids collapsed to `:id`).
+ *  [#104] 字面量**先于**模式:此前模式先查,五条精确路由被形状桶吞掉(`/v1/approvals/stream`
+ *  落 ":id"、`/v1/images/{bakes,select,register}` 落 ":profile"、`/v1/images/bakes/claim` 落
+ *  "bakes/:id")——长连接 stream 的 duration 混进 :id 桶正是 fleet/stream 案的同族错桶病。
+ *  精确匹配恒比形状匹配更对,序修零反例(billable-route-declaration 门逐样本钉)。 */
 export declare function routeLabel(_method: string, url: string): string;
 //# sourceMappingURL=server.d.ts.map

package/dist/http/server.js

@@ -1,31 +1,31 @@
 import http from "node:http";
 import { once } from "node:events";
 import { createHash } from "node:crypto";
-import { uuidv7, isThinkingLevel, expandTiers, resumeWithVerification, CheckpointError, HAND_TOOL_EFFECTS, canonicalToolName, defaultTaskRegistry, validatePendingSteer, subscribeWorkflow } from "@sema-agent/core"; // canonicalToolName = core single-source (1.162; replaced the transitional service mirror)
+import { uuidv7, isThinkingLevel, expandTiers, resumeWithVerification, CheckpointError, HAND_TOOL_EFFECTS, defaultTaskRegistry, validatePendingSteer, subscribeWorkflow } from "@sema-agent/core"; // canonicalToolName = core single-source (1.162; replaced the transitional service mirror)
 import { decideParkedAgent, findParkedAgentForCheckpoint } from "../parked-decide.js";
 import { matchCatalogModel } from "../model-select.js";
 import {} from "../config-center/facade.js";
-import { HttpError, principalFrom, verifiedPrincipal, setSsoPrincipal, ssoVerifiedPrincipal, setSsoScope, isUuidV7, verifyDirectDoorProof, isDestructiveSessionWrite, decodeCheckpointScope, CHECKPOINT_PUBLIC_SCOPE } from "../security.js";
+import { HttpError, principalFrom, verifiedPrincipal, setSsoPrincipal, ssoVerifiedPrincipal, setSsoScope, isUuidV7, isDestructiveSessionWrite, decodeCheckpointScope, CHECKPOINT_PUBLIC_SCOPE } from "../security.js";
+import { verifyDirectDoorProof } from "../principal-jwt.js";
 import {} from "../memory-sync.js";
 import { MAX_SETTINGS_OUTPUT_STYLE_CHARS, MAX_SETTINGS_PERMISSION_RULES, MAX_SETTINGS_ENV_VARS, MAX_SETTINGS_ENV_KEY_CHARS, MAX_SETTINGS_ENV_VALUE_CHARS } from "../task-settings.js";
 import { parseHooksConfig } from "../hooks/hook-runner.js";
 import { validateTaskAgents } from "../spec-fields.js";
 import { isValidCwd, MAX_ADDITIONAL_DIRS } from "../task-cwd.js";
 import { runInBackground, evictIfConflict, stripCheckpointToken, TurnAnchorCapture, HEARTBEAT_MS, markChildrenStoppedByUserOnAbort } from "../runs.js";
-import { looksLikeJwt } from "../auth-bridge.js";
+import { looksLikeJwt } from "@sema-agent/registry-core/api/auth-bridge";
 import {} from "../orchestration/workflow-agent-steer.js";
 import { emitPendingWorkflowCompletions, taskNotificationInboxEntry, taskNotificationStreamKey, NotifiedKeys } from "../orchestration/workflow-completion-inbox.js";
 import { fleetRunPublisher, fleetRunLabels, fleetRunResiduals } from "../fleet/fleet-bus.js";
 import { defaultSubagentTailBus, projectTailFrame } from "../fleet/subagent-tail-bus.js";
 import {} from "../observability/rate-limit.js";
 import { withPrincipal } from "../observability/principal-context.js";
-import { turnEndEventData, contextUsageEventData, toolStartEventData, toolEndEventData, taskProgressEventData, taskNotificationEventData, compactedEventData, diagnosticsEventData, brainStatusEventData, steeringInjectedEventData, workspaceChangedEventData, appendModelUsageDelta, appendPromptManifest, attachModelUsage } from "../trace/project.js";
+import { turnEndEventData, contextUsageEventData, toolStartEventData, toolEndEventData, taskProgressEventData, taskNotificationEventData, compactedEventData, diagnosticsEventData, brainStatusEventData, steeringInjectedEventData, compactionOutcomeEventData, workspaceChangedEventData, appendModelUsageDelta, appendPromptManifest, attachModelUsage } from "../trace/project.js";
 import { redactSecrets } from "../trace/redact.js";
 import { IdempotencyCache, scopedIdempotencyKey } from "./idempotency.js";
 export { scopedIdempotencyKey };
 import { streamSseLog } from "./sse-log.js";
 import { clampVerifyRounds, verifyRoundsFromBody } from "./verify-rounds.js"; // design/97 R9: the shape's neutral leaf (route-ctx.ts type-imports VerifyRoundsSpec from here, not from this file)
-export { clampVerifyRounds }; // deep-path test imports of http/server.js's clampVerifyRounds keep working unchanged
 import { handleCapabilities } from "./routes/capabilities.js";
 import { handleObservability } from "./routes/observability.js";
 import { handleMemoryPolicy } from "./routes/memory-policy.js";
@@ -59,6 +59,8 @@ export function flattenServiceDeps(deps) {
         return deps;
     return { ...stores, ...coordinators, ...seams, ...observability, ...governance, ...deployment, ...knobs, ...flat };
 }
+// design/158 A4: TaskRequestBody lives in ./wire-types.ts (a type-only leaf) — import it from there
+// ([2354] 兼容面全清:此处的兼容 re-export 已删;index.ts 公共面直接从 wire-types 转出)。
 /** Personalization caps: server-pinned hard limits — a UI may be stricter, never looser. */
 export const MAX_USER_SKILLS = 10;
 /** = core `SKILL_CONTENT_MAX_CHARS`(1MB 加载门,core 1.293 起 invoke 全文零截断、超 1MB 整拒;常量在
@@ -1273,11 +1275,11 @@ export function createHttpServer(rawDeps) {
         // (core `HAND_TOOL_EFFECTS`, not re-exported from the package root → mirrored here). When this deployment
         // has remote exec configured the rebuilt task WILL expose them, so union them in; else gating a hand tool
         // (the common code-agent case) would always 422 on resume. Keep in sync with core's HAND_TOOL_EFFECTS.
-        // Q6 (core 1.161): canonicalize a PRE-Q6 persisted name (`bash`/`write_file`/…) to its CC-aligned new name
-        // BEFORE matching the rebuilt (post-Q6) tool set — else an in-flight checkpoint suspended before the upgrade
-        // would 422 here before core's own resume shim runs. New names map to themselves (idempotent).
+        // [2380] RB-476(5.0.0):Q6 折叠预检退役——满足性匹配按 RAW 名。pre-floor 旧名 checkpoint
+        // (`bash`/`run_workflow` 等)在此 422 诚实拒,与 core 自己的 resume.tool_unavailable 同方向
+        // ([2364] 令:耐久面响亮牺牲 + P-7 重开,不静默兜)。现役名恒自映射。
         const pendingTool = cp.pendingAction.toolName;
-        const pendingToolCanon = pendingTool ? canonicalToolName(pendingTool) : undefined;
+        const pendingToolCanon = pendingTool;
         const availableTools = new Set((spec.tools ?? []).map((t) => t.name));
         if (deps.config.remoteExec)
             for (const name of HAND_TOOL_NAMES)
@@ -1763,6 +1765,10 @@ export function createHttpServer(rawDeps) {
                                 await flush();
                                 await append("steering_injected", steeringInjectedEventData(ev));
                                 break; // [1550]/[1552]: shared whitelist builder, §E1 redact — resume twin of the sync + ledger-sink legs
+                            case "compaction_outcome":
+                                await flush();
+                                await append("compaction_outcome", compactionOutcomeEventData(ev));
+                                break; // [2373]A-2/C-2: durable 双腿补齐(此前回放即消失);共享 builder,差集门看守
                             case "workspace_changed":
                                 await flush();
                                 await append("workspace_changed", workspaceChangedEventData(ev));
@@ -2427,7 +2433,9 @@ export function createHttpServer(rawDeps) {
 /** POST endpoints that trigger BILLABLE work — the fail-closed auth guard must cover ALL of them (council: the
  *  guard's inline list had drifted from the handlers and missed `/v1/approvals/:id/decide`, which resumes a run
  *  via resumeCheckpoint/store.decide → paid tokens). Keep this in sync when adding a billable POST route. */
-function isBillableSubmitPath(url) {
+// [#104/#87-A3] exported for the declaration gate (test/billable-route-declaration.test.ts):每条路由
+// 标签必须显式申明 billable,与本谓词逐样本对账——「Keep this in sync」从注释请求变成机器断言。
+export function isBillableSubmitPath(url) {
     return (url === "/v1/side-query" || // [1469] one-shot brain call — runs the model, so it rides every billable-submit gate
         url === "/v1/tasks" ||
         url === "/v1/tasks/stream" ||
@@ -2468,7 +2476,6 @@ const ROUTE_LABEL_PATTERNS = [
     [/^\/v1\/images\/[^/]+$/, "/v1/images/:profile"],
     [/^\/v1\/approvals\/[^/]+\/decide$/, "/v1/approvals/:id/decide"],
     [/^\/v1\/approvals\/[^/]+\/exemptions(\/[^/]+)?$/, "/v1/approvals/:id/exemptions"],
-    [/^\/v1\/approvals\/[^/]+$/, "/v1/approvals/:id"],
     [/^\/v1\/sessions\/[^/]+\/(wake|fork|init|notify|events|head|mcp|policy|settings)$/, "/v1/sessions/:id/$verb"],
     [/^\/v1\/sessions\/[^/]+\/sync\/(manifest|entries|plan)$/, "/v1/sessions/:id/sync/$verb"],
     [/^\/v1\/sessions\/[^/]+\/sync\/import(\/[^/]+\/entries)?$/, "/v1/sessions/:id/sync/import"],
@@ -2503,13 +2510,17 @@ const ROUTE_LABEL_LITERALS = new Set([
     "/v1/fleet/stream",
     "/v1/memory/export", "/v1/sendfile-links",
 ]);
-/** Stable, low-cardinality route label for metrics/logs (ids collapsed to `:id`). */
+/** Stable, low-cardinality route label for metrics/logs (ids collapsed to `:id`).
+ *  [#104] 字面量**先于**模式:此前模式先查,五条精确路由被形状桶吞掉(`/v1/approvals/stream`
+ *  落 ":id"、`/v1/images/{bakes,select,register}` 落 ":profile"、`/v1/images/bakes/claim` 落
+ *  "bakes/:id")——长连接 stream 的 duration 混进 :id 桶正是 fleet/stream 案的同族错桶病。
+ *  精确匹配恒比形状匹配更对,序修零反例(billable-route-declaration 门逐样本钉)。 */
 export function routeLabel(_method, url) {
+    if (ROUTE_LABEL_LITERALS.has(url))
+        return url;
     for (const [re, label] of ROUTE_LABEL_PATTERNS)
         if (re.test(url))
             return label;
-    if (ROUTE_LABEL_LITERALS.has(url))
-        return url;
     return "other";
 }
 /** CORS v2: allowlist semantics. A SINGLE configured origin keeps the v1 posture

package/dist/http/verify-rounds.d.ts

@@ -5,8 +5,8 @@
  * http/server.ts that each re-derived the same "verify:true → clamp rounds + fold cost ceiling" expression from a
  * request body. A leaf (not server.ts itself) so route-ctx.ts — which must never value-import server.ts (that
  * closes the runtime module-load cycle test/module-cycle-gate.test.ts guards) — can `import type` the shape from
- * one place. server.ts imports {@link clampVerifyRounds} from here and RE-EXPORTS it (deep-path test imports of
- * `http/server.js`'s `clampVerifyRounds` keep working unchanged).
+ * one place. server.ts imports {@link clampVerifyRounds} from here; tests import it from HERE too
+ * ([2354] 兼容面全清:server.ts 的保深路径 re-export 已删).
  */
 import type { TaskRequestBody } from "./wire-types.js";
 /** Verification-rounds config threaded onto a task's `verify`/resume paths (see {@link verifyRoundsFromBody}). */

package/dist/http/wire-types.d.ts

@@ -258,7 +258,7 @@ export interface TaskRequestBody {
     enableFork?: boolean;
     [k: string]: unknown;
 }
-/** design/80 D-1: the operator-echoed decision-action binding carried on POST /v1/approvals/:id[/decide].
+/** design/80 D-1: the operator-echoed decision-action binding carried on POST /v1/approvals/:sessionId/decide([2373]C-4:裸 :id 臂已删).
  *  All optional for back-compat — a legacy BFF caller omitting them resumes on the current-pending values
  *  exactly as before (the pre-D-1 path), tracked by a deprecation counter.
  *  design/158 A9: hoisted VERBATIM out of `createHttpServer`'s closure so the approvals/assistant route domain

package/dist/images/bake-validate.d.ts

@@ -1,21 +1,3 @@
-/**
- * Bake input WHITELIST + vetted-argv builder (IMAGE-API-DESIGN.md §P2.4 — the anti-RCE core).
- *
- * bands/profile/baseRef/bump compose a Dockerfile + a `FROM` + a `docker build` = arbitrary code on the build
- * host. So EVERY field is validated SERVER-SIDE against a CLOSED SET *before* an argv is built; off-list → an
- * error, never coerced. The runner only ever sees the VETTED argv this module emits (never operator free-text)
- * and only runs `build.sh`, which composes Dockerfiles from the in-repo `bands/` via `gen-dockerfile.sh` — there
- * is no path here to inject a raw Dockerfile or a shell command.
- *
- * Set membership is the gate (NOT regex): `^[a-z0-9-]+$` is belt-only — `python; rm -rf /` ∉ the frozen set →
- * rejected, and the argv is a RAW vetted VECTOR the runner array-spawns (each element in its own argv slot, no
- * shell), never concatenated into a command string.
- *
- * The frozen catalogs below MIRROR the recipe source of truth (`gen-dockerfile.sh` `profile_bands()` + the
- * `bands/` dir). A DRIFT test (test/image-bake-validate.test.ts) asserts they still match — a silently-drifted
- * list would either reject a valid profile or admit a removed band. Keep them in lockstep with the recipes.
- */
-import { SHA256_DIGEST_RE as DIGEST_RE } from "../digest-form.js";
 /**
  * FROZEN profile catalog — mirrored from `e2b-template/dev-sandbox/gen-dockerfile.sh` `profile_bands()`.
  * (db / browser-nodriver are opt-in overlays, NOT in `code-full` — `code-full-db` adds db; per design §4.)
@@ -33,10 +15,6 @@ export declare const FROZEN_BUMP_TOOLS: readonly string[];
 export declare const VER_RE: RegExp;
 /** Belt-only band shape (set-membership is the real gate); a defense-in-depth reject of structurally weird ids. */
 export declare const BAND_SHAPE_RE: RegExp;
-/** A digest must be an immutable sha256 ref (the allow-list check against the index is the real gate, P2.4c).
- *  design/158 R12: the shape itself is collected in `digest-form.ts`'s `SHA256_DIGEST_RE`; `DIGEST_RE` stays a
- *  re-exported alias (compat — export surface unchanged). */
-export { DIGEST_RE };
 /** The raw, untrusted submit body fields this module validates (operator free-text). */
 export interface BakeSubmit {
     profile?: unknown;

package/dist/images/bake-validate.js

@@ -90,10 +90,6 @@ const BUMP_TOOL_SET = new Set(FROZEN_BUMP_TOOLS);
 export const VER_RE = /^[A-Za-z0-9._-]{1,40}$/;
 /** Belt-only band shape (set-membership is the real gate); a defense-in-depth reject of structurally weird ids. */
 export const BAND_SHAPE_RE = /^[a-z0-9-]+$/;
-/** A digest must be an immutable sha256 ref (the allow-list check against the index is the real gate, P2.4c).
- *  design/158 R12: the shape itself is collected in `digest-form.ts`'s `SHA256_DIGEST_RE`; `DIGEST_RE` stays a
- *  re-exported alias (compat — export surface unchanged). */
-export { DIGEST_RE };
 function reject(status, error, conflictBands) {
     return conflictBands ? { ok: false, status, error, conflictBands } : { ok: false, status, error };
 }

package/dist/index.d.ts

@@ -6,8 +6,6 @@ export { CachingSessionStore, type CachingOptions } from "./plugins/caching-sess
 export type { RunRecord, RunEvent } from "./plugins/store-contracts.js";
 export { runInBackground } from "./runs.js";
 export type { VerifyRoundsSpec } from "./http/verify-rounds.js";
-export { type ApprovalRow, type ApprovalStatus } from "./plugins/approval-store-sql.js";
-export { createOaApprovalPolicy, type OaApprovalOptions } from "./approval.js";
 export { createHardenedVmRunner, runInHardenedVm, type HardenedVmLimits, type HardenedMembrane } from "./orchestration/hardened-vm-runner.js";
 export { createWorkerHardenedVmRunner } from "./orchestration/hardened-vm-worker-runner.js";
 export { buildSessionAudit, type SessionAudit } from "./audit.js";
@@ -19,6 +17,8 @@ export { nowTool } from "./capabilities/builtin-tools.js";
 export { createCouncilTool } from "./capabilities/code-review-council.js";
 export { loadSkills, skillsForScenario, type LoadedSkill } from "./capabilities/skills.js";
 export { buildScenarios, selectScenario, type Scenario, type ScenarioBundle, type ScenarioDeps, type ScenarioRequest, } from "./capabilities/scenarios.js";
-export { createAuthorizer, principalFrom, memoryScopeFor, memoryEngineBackendFor, HttpError, type AuthContext, type OwnerAwareSessionStore, } from "./security.js";
-export { createHttpServer, type ServiceDeps, type TaskRequestBody, type RequestAuth, type FlatServiceDeps, type ServiceDepGroups, type ServiceCoreDeps, type ServiceStoreDeps, type ServiceCoordinatorDeps, type ServiceSeamDeps, type ServiceObservabilityDeps, type ServiceGovernanceDeps, type ServiceDeploymentDeps, type ServiceKnobDeps, } from "./http/server.js";
+export { createAuthorizer, principalFrom, HttpError, type AuthContext, type OwnerAwareSessionStore, } from "./security.js";
+export { memoryScopeFor, memoryEngineBackendFor } from "./memory-scope.js";
+export type { TaskRequestBody } from "./http/wire-types.js";
+export { createHttpServer, type ServiceDeps, type RequestAuth, type FlatServiceDeps, type ServiceDepGroups, type ServiceCoreDeps, type ServiceStoreDeps, type ServiceCoordinatorDeps, type ServiceSeamDeps, type ServiceObservabilityDeps, type ServiceGovernanceDeps, type ServiceDeploymentDeps, type ServiceKnobDeps, } from "./http/server.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.js

@@ -11,10 +11,6 @@ export { createStoreBackend } from "./plugins/store-backend.js";
 // docs/schema/baseline-{mysql,pg}.sql(生成基线,机器门逐字节)。类/函数本体仍是内部实现(深径 import)。
 export { CachingSessionStore } from "./plugins/caching-session-store.js";
 export { runInBackground } from "./runs.js";
-// B5-② 补漏:TiDBApprovalStore 是证据包漏数的第 7 个方言导出,同判据同车摘(全生态零消费);
-// 两个中立行类型改从 A12 后的真源(approval-store-sql.ts)导出。
-export {} from "./plugins/approval-store-sql.js";
-export { createOaApprovalPolicy } from "./approval.js";
 export { createHardenedVmRunner, runInHardenedVm } from "./orchestration/hardened-vm-runner.js";
 export { createWorkerHardenedVmRunner } from "./orchestration/hardened-vm-worker-runner.js";
 export { buildSessionAudit } from "./audit.js";
@@ -26,6 +22,7 @@ export { nowTool } from "./capabilities/builtin-tools.js";
 export { createCouncilTool } from "./capabilities/code-review-council.js";
 export { loadSkills, skillsForScenario } from "./capabilities/skills.js";
 export { buildScenarios, selectScenario, } from "./capabilities/scenarios.js";
-export { createAuthorizer, principalFrom, memoryScopeFor, memoryEngineBackendFor, HttpError, } from "./security.js";
+export { createAuthorizer, principalFrom, HttpError, } from "./security.js";
+export { memoryScopeFor, memoryEngineBackendFor } from "./memory-scope.js";
 export { createHttpServer, } from "./http/server.js";
 //# sourceMappingURL=index.js.map

package/dist/lsp/e2b-bridge.d.ts

@@ -3,16 +3,33 @@
  * **auth token** `LSP_TOKEN` (the endpoint is a public `wss://<port>-<id>.e2b.app` URL — the runner connects with
  * `?token=<secret>`; without it, anyone with the URL could read the workspace via LSP, council #4). Frame parsing
  * uses the unit-tested {@link FRAME_DECODER_JS} (council #1/#2/#5).
+ *
+ * redesign⑤ (#96 §DESIGN-V2 F4): the WS server now rides an explicit `http.createServer` instead of binding its
+ * own socket (`new WebSocketServer({host,port})`) — the same port also answers `GET /healthz` (host-side liveness
+ * probe, §DESIGN-V2 F2/C6) without a second port or dependency. The EADDRINUSE loud-exit handler MOVES with the
+ * bind onto the http server (`server.on('error', …)`, same `lsp-bridge wss error` text + `exit 1` — test/lsp-e2b.test.ts
+ * :256-269 pins this exact text/code); `ws` still forwards its underlying server's `'error'` to `wss`, so nothing
+ * downstream (per-connection handling) changes.
  */
 export declare const BRIDGE_SOURCE: string;
+/** Bridge dir inside the sandbox(声明提前:tsserver 定值路径引用它)。 */
+export declare const BRIDGE_DIR = "/home/user/.lsp-bridge";
+/** tls 的 tsserver.js 定值路径(#96 真机门):install 腿保证在场,connect 腿经
+ *  `initializationOptions.tsserver.path` 告知 tls(v4 起无 CLI 旗可用)。 */
+export declare const TSSERVER_JS_PATH = "/home/user/.lsp-bridge/node_modules/typescript/lib/tsserver.js";
 /** Language server command per languageId. P1 = typescript/javascript; dart/kotlin land with their template servers.
  *  `--stdio` only where the server needs it to pick stdio over its other transports (the node-based servers);
- *  gopls/jdtls/kotlin-language-server/sourcekit-lsp/`dart language-server` speak LSP over stdio by default. */
+ *  gopls/jdtls/kotlin-language-server/sourcekit-lsp/`dart language-server` speak LSP over stdio by default.
+ *  #96 真机门发现(E2B 真沙箱逐帧取证,test/lsp-e2b-bridge-live.test.ts):typescript-language-server
+ *  **不自动发现全局 typescript**(只认 workspace 内 node_modules/typescript 或显式 tsserver 路径),
+ *  `npm i -g … typescript` 装成之后 initialize 仍答 "Could not find a valid TypeScript installation";
+ *  且 v4 起 `--tsserver-path` CLI 旗已移除(未知参数=进程退 1,第二轮真机实测)——路径只能走 LSP
+ *  `initializationOptions.tsserver.path`(TSSERVER_JS_PATH,connectE2bLspBridge 对 ts/js 传入),
+ *  typescript 本体由 lspInstallCommand 落进 BRIDGE_DIR 定值路径(烤好模板文件在场则秒过)。 */
 export declare const SERVER_CMD: Readonly<Record<string, string>>;
 /** npm packages a non-baked sandbox needs (on-the-fly install). Languages absent here (go) REQUIRE a baked template. */
 export declare const SERVER_NPM: Readonly<Record<string, string>>;
-/** Bridge dir + port inside the sandbox. One bridge process per language → distinct ports. */
-export declare const BRIDGE_DIR = "/home/user/.lsp-bridge";
+/** One bridge process per language → distinct ports.(BRIDGE_DIR 声明已提前至 SERVER_CMD 上方。) */
 export declare function portForLanguage(language: string): number;
 /** FOREGROUND install (run via `env.exec` — must finish before the start). A baked template makes both checks
  *  skip instantly; a non-baked sandbox npm-installs the server + ws here (slow once per sandbox). */
@@ -21,4 +38,20 @@ export declare function lspInstallCommand(language: string): string;
  *  foreground run: E2B reaps the foreground process group on completion, killing an in-shell `&`/nohup child.
  *  So node is the FOREGROUND here and E2B keeps the background command alive. */
 export declare function lspStartCommand(language: string, port: number, token: string): string;
+/** Where the on-the-fly `npm i` output from {@link lspInstallCommand} lands — previously had zero readers
+ *  (§DESIGN-V2 F7 bonus fix); an install failure now tails this for the `lastError`/event snippet. */
+export declare const LSP_SETUP_LOG = "/tmp/lsp-setup.log";
+/** BRIDGE_DIR-relative log the bridge process itself appends to (fatal errors, child exits) — §DESIGN-V2 C4. */
+export declare function bridgeLogFile(): string;
+/** Per-port pidfile the bridge writes ONLY after a confirmed bind (BRIDGE_SOURCE's `listen` callback) — see its
+ *  header comment for why a losing (EADDRINUSE) second bridge must never clobber this. */
+export declare function bridgePidFile(port: number): string;
+/** §DESIGN-V2 F3: verify a prior bridge generation ACTUALLY stopped before the host mints a replacement.
+ *  Exit 0 = confirmed dead (or the pidfile never existed — nothing was ever listening) → safe to start a new
+ *  generation on this port. Exit 1 = still alive after the bound wait — the caller MUST NOT start a new bridge:
+ *  an unconfirmed kill risks EADDRINUSE (the new generation's fresh token would then be permanently rejected by
+ *  the still-listening old process, the token check in BRIDGE_SOURCE) — better to stay `dead` than double-burn
+ *  the restart budget on a doomed attempt. POSIX `sh` only (no `seq`/bashisms — sandboxes vary in shell).
+ *  Bound: 20 × 0.1s = 2s. */
+export declare function terminateBridgeCommand(port: number): string;
 //# sourceMappingURL=e2b-bridge.d.ts.map

package/dist/lsp/e2b-bridge.js

@@ -14,23 +14,60 @@ import { FRAME_DECODER_JS } from "./lsp-frames.js";
  * **auth token** `LSP_TOKEN` (the endpoint is a public `wss://<port>-<id>.e2b.app` URL — the runner connects with
  * `?token=<secret>`; without it, anyone with the URL could read the workspace via LSP, council #4). Frame parsing
  * uses the unit-tested {@link FRAME_DECODER_JS} (council #1/#2/#5).
+ *
+ * redesign⑤ (#96 §DESIGN-V2 F4): the WS server now rides an explicit `http.createServer` instead of binding its
+ * own socket (`new WebSocketServer({host,port})`) — the same port also answers `GET /healthz` (host-side liveness
+ * probe, §DESIGN-V2 F2/C6) without a second port or dependency. The EADDRINUSE loud-exit handler MOVES with the
+ * bind onto the http server (`server.on('error', …)`, same `lsp-bridge wss error` text + `exit 1` — test/lsp-e2b.test.ts
+ * :256-269 pins this exact text/code); `ws` still forwards its underlying server's `'error'` to `wss`, so nothing
+ * downstream (per-connection handling) changes.
  */
 export const BRIDGE_SOURCE = FRAME_DECODER_JS +
     String.raw `
 const { WebSocketServer } = require('ws');
 const { spawn } = require('child_process');
 const { URLSearchParams } = require('url');
+const http = require('http');
+const fs = require('fs');
 const PORT = Number(process.env.LSP_PORT || 8123);
 const CMD = (process.env.LSP_CMD || 'typescript-language-server --stdio').split(' ');
 const TOKEN = process.env.LSP_TOKEN || '';
 const MAX = 50 * 1024 * 1024;
 const HEARTBEAT_MS = Number(process.env.LSP_HEARTBEAT_MS || 30000);
-const wss = new WebSocketServer({ host: '0.0.0.0', port: PORT });
+const START_MS = Date.now();
+// Per-port pidfile (BRIDGE_DIR-relative — lspStartCommand cd's there first): the host reads this to verify a
+// prior generation ACTUALLY stopped before minting a replacement (§DESIGN-V2 F3) — an unconfirmed kill risks a
+// new generation's token being permanently rejected by a still-listening old process (the token check below).
+// Written ONLY after a successful bind (inside the listen callback) — a SECOND bridge racing this same port
+// must NOT clobber the FIRST (still listening) bridge's pidfile with its own (about-to-die) pid.
+const PIDFILE = 'bridge-' + PORT + '.pid';
+const LOGFILE = 'bridge.log';
+function logLine(line) { try { fs.appendFileSync(LOGFILE, line + '\n'); } catch {} }
+// Process-fatal hardening (§DESIGN-V2 C1/C2): an uncaught exception/rejection anywhere in this process previously
+// died silently (no stderr line, no log) — the host's only signal was the WS going dead with no explanation.
+process.on('uncaughtException', (err) => { const m = 'lsp-bridge fatal ' + (err && err.message); console.error(m); logLine(m); process.exit(1); });
+process.on('unhandledRejection', (err) => { const m = 'lsp-bridge fatal ' + (err && err.message); console.error(m); logLine(m); process.exit(1); });
+function tokenOf(url) { return new URLSearchParams(((url || '').split('?')[1]) || '').get('token'); }
+const server = http.createServer((req, res) => {
+  const path = ((req && req.url) || '').split('?')[0];
+  if (path === '/healthz') {
+    // Same-origin auth as the WS gate below: TOKEN unset = open (dev/test), TOKEN set + mismatch = 401.
+    if (TOKEN && tokenOf(req.url) !== TOKEN) { res.writeHead(401); res.end(); return; }
+    const body = JSON.stringify({ pid: process.pid, uptimeMs: Date.now() - START_MS, connections: wss.clients.size, generationToken: TOKEN.slice(0, 8) });
+    res.writeHead(200, { 'Content-Type': 'application/json' });
+    res.end(body);
+    return;
+  }
+  const body = http.STATUS_CODES[426]; // preserves ws's own default "upgrade required" response for any other path
+  res.writeHead(426, { 'Content-Length': Buffer.byteLength(body), 'Content-Type': 'text/plain' });
+  res.end(body);
+});
 // A zero-listener 'error' on ANY EventEmitter throws and crashes the process (Node default). Without this, a
 // bind failure (e.g. EADDRINUSE — a second bridge start racing the same port) took down the WHOLE bridge
 // process, killing every language's LSP session in the sandbox, not just the one that failed to start (HRD-LSP-4).
 // Exit loud + explicit instead of an uncaught-exception dump so the failure is at least attributable.
-wss.on('error', (err) => { console.error('lsp-bridge wss error', err && err.message); process.exit(1); });
+server.on('error', (err) => { const m = 'lsp-bridge wss error ' + (err && err.message); console.error(m); logLine(m); process.exit(1); });
+const wss = new WebSocketServer({ server });
 wss.on('connection', (ws, req) => {
   // Same zero-listener 'error' hazard as wss above, but per-connection: registered FIRST, before anything else
   // touches this socket. Close (don't crash) — the heartbeat reaper's own ws.terminate() below is a routine
@@ -51,7 +88,7 @@ wss.on('connection', (ws, req) => {
   // CALLER's process group instead of the (nonexistent) child (HRD-LSP-4; same hazard class as bake-runner's
   // spawner, src/bake-runner/main.ts).
   ws.on('close', () => { if (child.pid !== undefined) child.kill(); });
-  child.on('exit', () => { try { ws.close(); } catch {} });
+  child.on('exit', (code, signal) => { logLine('lsp-bridge child exit code=' + code + ' signal=' + signal); try { ws.close(); } catch {} });
 });
 // Reap half-open connections: the E2B proxy kills a WS at ~60-75s and the kill can be SILENT on THIS side too —
 // no close frame, so the per-connection language server above would outlive its dead socket (one leaked server
@@ -63,11 +100,25 @@ setInterval(() => {
     try { ws.ping(); } catch {}
   }
 }, HEARTBEAT_MS);
-console.log('lsp-bridge listening', PORT);
+server.listen(PORT, '0.0.0.0', () => {
+  try { fs.writeFileSync(PIDFILE, String(process.pid)); } catch (e) { logLine('lsp-bridge pidfile write failed ' + (e && e.message)); }
+  console.log('lsp-bridge listening', PORT);
+});
 `;
+/** Bridge dir inside the sandbox(声明提前:tsserver 定值路径引用它)。 */
+export const BRIDGE_DIR = "/home/user/.lsp-bridge";
+/** tls 的 tsserver.js 定值路径(#96 真机门):install 腿保证在场,connect 腿经
+ *  `initializationOptions.tsserver.path` 告知 tls(v4 起无 CLI 旗可用)。 */
+export const TSSERVER_JS_PATH = `${BRIDGE_DIR}/node_modules/typescript/lib/tsserver.js`;
 /** Language server command per languageId. P1 = typescript/javascript; dart/kotlin land with their template servers.
  *  `--stdio` only where the server needs it to pick stdio over its other transports (the node-based servers);
- *  gopls/jdtls/kotlin-language-server/sourcekit-lsp/`dart language-server` speak LSP over stdio by default. */
+ *  gopls/jdtls/kotlin-language-server/sourcekit-lsp/`dart language-server` speak LSP over stdio by default.
+ *  #96 真机门发现(E2B 真沙箱逐帧取证,test/lsp-e2b-bridge-live.test.ts):typescript-language-server
+ *  **不自动发现全局 typescript**(只认 workspace 内 node_modules/typescript 或显式 tsserver 路径),
+ *  `npm i -g … typescript` 装成之后 initialize 仍答 "Could not find a valid TypeScript installation";
+ *  且 v4 起 `--tsserver-path` CLI 旗已移除(未知参数=进程退 1,第二轮真机实测)——路径只能走 LSP
+ *  `initializationOptions.tsserver.path`(TSSERVER_JS_PATH,connectE2bLspBridge 对 ts/js 传入),
+ *  typescript 本体由 lspInstallCommand 落进 BRIDGE_DIR 定值路径(烤好模板文件在场则秒过)。 */
 export const SERVER_CMD = {
     typescript: "typescript-language-server --stdio",
     javascript: "typescript-language-server --stdio",
@@ -85,8 +136,7 @@ export const SERVER_NPM = {
     javascript: "typescript-language-server typescript",
     python: "pyright",
 };
-/** Bridge dir + port inside the sandbox. One bridge process per language → distinct ports. */
-export const BRIDGE_DIR = "/home/user/.lsp-bridge";
+/** One bridge process per language → distinct ports.(BRIDGE_DIR 声明已提前至 SERVER_CMD 上方。) */
 export function portForLanguage(language) {
     // stable per-language port; extend the table as templates add servers (dev-mobile: dart/kotlin/java/swift)
     const ports = { typescript: 8123, javascript: 8123, dart: 8124, kotlin: 8125, python: 8126, go: 8127, java: 8128, swift: 8129 };
@@ -101,6 +151,13 @@ export function lspInstallCommand(language) {
         `mkdir -p ${BRIDGE_DIR}`,
         `[ -f ${BRIDGE_DIR}/node_modules/ws/package.json ] || (cd ${BRIDGE_DIR} && echo '{}' > package.json && npm i ws >/tmp/lsp-setup.log 2>&1)`,
         npm ? `command -v ${cmd.split(" ")[0]} >/dev/null || npm i -g ${npm} >>/tmp/lsp-setup.log 2>&1` : "true",
+        // #96 真机门:tls 只认 workspace typescript 或显式 tsserver 路径(全局装了也不认)——把 typescript
+        // 落到 BRIDGE_DIR 定值路径,与 TSSERVER_JS_PATH(initializationOptions 腿)同源。烤好模板文件在场则秒过。
+        // 🔴 钉 @5:裸 `typescript` 现装到 7.x(Go 原生港,lib/ 无 tsserver.js,真机实测)——tls 绑死
+        // TS5 的 JS tsserver。TS7 自带原生 LSP 是未来的换代方向(届时连 tls 一起退役),不是本车。
+        npm?.includes("typescript")
+            ? `[ -f ${TSSERVER_JS_PATH} ] || (cd ${BRIDGE_DIR} && npm i typescript@5 >>/tmp/lsp-setup.log 2>&1)`
+            : "true",
     ].join(" && ");
 }
 /** Start the bridge — run as a TRUE background command (`env.startBackground`), NOT `&`-backgrounded inside a
@@ -109,4 +166,34 @@ export function lspInstallCommand(language) {
 export function lspStartCommand(language, port, token) {
     return `cd ${BRIDGE_DIR} && LSP_PORT=${port} LSP_TOKEN='${token}' LSP_CMD='${SERVER_CMD[language]}' node bridge.cjs`;
 }
+/** Where the on-the-fly `npm i` output from {@link lspInstallCommand} lands — previously had zero readers
+ *  (§DESIGN-V2 F7 bonus fix); an install failure now tails this for the `lastError`/event snippet. */
+export const LSP_SETUP_LOG = "/tmp/lsp-setup.log";
+/** BRIDGE_DIR-relative log the bridge process itself appends to (fatal errors, child exits) — §DESIGN-V2 C4. */
+export function bridgeLogFile() {
+    return `${BRIDGE_DIR}/bridge.log`;
+}
+/** Per-port pidfile the bridge writes ONLY after a confirmed bind (BRIDGE_SOURCE's `listen` callback) — see its
+ *  header comment for why a losing (EADDRINUSE) second bridge must never clobber this. */
+export function bridgePidFile(port) {
+    return `${BRIDGE_DIR}/bridge-${port}.pid`;
+}
+/** §DESIGN-V2 F3: verify a prior bridge generation ACTUALLY stopped before the host mints a replacement.
+ *  Exit 0 = confirmed dead (or the pidfile never existed — nothing was ever listening) → safe to start a new
+ *  generation on this port. Exit 1 = still alive after the bound wait — the caller MUST NOT start a new bridge:
+ *  an unconfirmed kill risks EADDRINUSE (the new generation's fresh token would then be permanently rejected by
+ *  the still-listening old process, the token check in BRIDGE_SOURCE) — better to stay `dead` than double-burn
+ *  the restart budget on a doomed attempt. POSIX `sh` only (no `seq`/bashisms — sandboxes vary in shell).
+ *  Bound: 20 × 0.1s = 2s. */
+export function terminateBridgeCommand(port) {
+    const pidfile = bridgePidFile(port);
+    return [
+        `[ -f ${pidfile} ] || exit 0`,
+        `PID=$(cat ${pidfile})`,
+        `kill "$PID" 2>/dev/null`,
+        `i=0`,
+        `while [ $i -lt 20 ]; do kill -0 "$PID" 2>/dev/null || exit 0; i=$((i+1)); sleep 0.1; done`,
+        `exit 1`,
+    ].join("; ");
+}
 //# sourceMappingURL=e2b-bridge.js.map

package/dist/lsp/e2b-manager.d.ts

@@ -1,5 +1,5 @@
 import { connectWsLspTransport } from "./ws-transport.js";
-import { E2bLspManager, type LspCapableEnv } from "./manager.js";
+import { E2bLspManager, type LspCapableEnv, type LspUnavailableReason } from "./manager.js";
 import type { LspTransport } from "./types.js";
 export interface E2bLspOptions {
     /** Injectable for tests (no E2B/ws). */
@@ -20,11 +20,74 @@ export interface E2bLspOptions {
     scheme?: "ws" | "wss";
     /** Observability hook (open/heal/degrade events) — prod wires the service logger. */
     log?: (event: string, fields: Record<string, unknown>) => void;
+    /** §DESIGN-V2 F11: metrics registry (structural — matches the narrow surface remote-env-e2b.ts's `cfg.metrics`
+     *  already uses). `provider`/`generation`/`reason` labels are filled in by this module, never left freeform. */
+    metrics?: {
+        inc(name: string, labels?: Record<string, string>): void;
+    };
+    /** §DESIGN-V2 F11: the deployment lane feeding this manager (boot/execution-env.ts passes it explicitly —
+     *  "e2b" or "k8s" — rather than this module guessing it back out of `scheme`, which is a WS-protocol detail
+     *  that happens to correlate with the lane but isn't the same axis). Defaults to inferring from `scheme` only
+     *  so existing callers that don't pass it (tests) keep working. */
+    provider?: string;
+    /** §DESIGN-V2 F2/C6: health-probe override for tests (no real sandbox network). Defaults to a real
+     *  `GET /healthz` fetch (1s timeout) — `scheme` maps to the probe's URL scheme, F11 (`wss→https`, `ws→http`). */
+    probe?: (env: LspCapableEnv, port: number, token: string, scheme: "ws" | "wss") => Promise<boolean>;
 }
 /** Start (+ install on a non-baked template) the language server + bridge inside THIS env's sandbox, then connect.
  *  Every call starts (or re-starts) the bridge unconditionally — the one production caller is
  *  `createE2bLspManager`, which de-dupes per env+port before ever reaching here (see its doc). */
 export declare function openE2bLspTransport(language: string, env: LspCapableEnv, opts?: E2bLspOptions): Promise<LspTransport | undefined>;
+/** §DESIGN-V2 A: `starting` while the write+install+startBackground sequence is in flight; `ready` once at
+ *  least one WS connect through this generation has succeeded; `dead` once this generation is confirmed (or
+ *  presumed, per its own failure) unusable — the ONLY way out of `dead` is minting a new generation. */
+export type BridgeState = "starting" | "ready" | "dead";
+/**
+ * §DESIGN-V2 A/F3/F6: one bridge RESOURCE per env+port (not per language — `portForLanguage` maps
+ * typescript/javascript onto the SAME port/process off the same `SERVER_CMD`, HRD-LSP-4). A crashed/never-
+ * booted bridge can be replaced by minting a new `generation` (bounded by `MAX_BRIDGE_GENERATIONS` — a
+ * crash-loop must degrade the language, not burn the sandbox indefinitely); the NEW generation is only ever
+ * minted after `terminateBridgeCommand` confirms the OLD one actually stopped (F3) — an unconfirmed kill risks
+ * EADDRINUSE permanently rejecting the new generation's fresh token (the old process is still the one
+ * listening, and its token check has no way to know a replacement was intended).
+ */
+export interface E2bBridgeHandle {
+    readonly port: number;
+    /** Pinned once per generation — the shared bridge resource's auth secret. A per-LANGUAGE token would be
+     *  rejected by the one bridge process actually listening whenever two languages share a port (see the
+     *  module doc's HRD-LSP-4 reference): the second language mints a different token, the bridge only
+     *  recognizes whichever token started it, auth fails, retries exhaust, and that language is permanently
+     *  degraded to grep/read_file for the task. */
+    readonly token: string;
+    /** The `LSP_CMD` this generation's bridge process was launched with — identity documentation (ts/js sharing
+     *  one value/port/process is legitimate, §DESIGN-V2 "不做"); not read back by this module. */
+    readonly serverCmd: string;
+    /** 1 at first mint; +1 every restart. Bounds the restart budget (`MAX_BRIDGE_GENERATIONS`). */
+    readonly generation: number;
+    state: BridgeState;
+    /** The most recent human-readable diagnostic (write/install/start/connect failure, or a probe verdict) —
+     *  feeds `lastError`-style debugging; the MODEL-facing word is `deathReason` (via `unavailableReason`), not
+     *  this free-text string. */
+    lastError?: string;
+    /** The SPECIFIC reason THIS generation died (unset while starting/ready). `unavailableReason`-facing
+     *  reporting overrides this to `bridge-restart-budget-exhausted` once `generation >= MAX_BRIDGE_GENERATIONS`
+     *  — "further restarts won't help" is a different (and, once true, more useful) word than "what killed the
+     *  last one." */
+    deathReason?: LspUnavailableReason;
+    /** True once this generation has completed at least one real WS connect. Gates the fast healthz-probe heal
+     *  path (§DESIGN-V2 F2/F6): a generation that has never connected yet is still cold-starting, not dead —
+     *  treating an unreachable healthz as "dead" during that window would misjudge ordinary boot lag as a crash
+     *  and burn a restart generation for nothing. A generation that HAS connected before, though, really should
+     *  be reachable again quickly, so it skips the blind 6×1500ms retry loop and asks the bridge directly. */
+    everConnected: boolean;
+    /** Resolves once the write+install+startBackground sequence has been ATTEMPTED for this generation — `false`
+     *  (with `state` already flipped to `dead` + `deathReason`/`lastError` set) means it failed before ever
+     *  reaching a connect attempt. */
+    ready: Promise<boolean>;
+}
+/** A crash-loop must degrade the language, not retry the sandbox forever. 3 covers "an occasional OOM kill";
+ *  a bridge that dies again immediately after 3 fresh starts is a standing failure, not a blip. */
+export declare const MAX_BRIDGE_GENERATIONS = 3;
 /** The single shared `LspServerManager` for the deployment (`RunnerDeps.lspManager`). */
 export declare function createE2bLspManager(opts?: E2bLspOptions): E2bLspManager;
 //# sourceMappingURL=e2b-manager.d.ts.map