@sleep2agi/agent-network 2.3.0-preview.13 → 2.3.0-preview.130

package/dist/src/tmux.d.ts

@@ -0,0 +1,44 @@
+import { type ChildProcess, type ExecFileSyncOptions, type ExecFileSyncOptionsWithBufferEncoding, type ExecFileSyncOptionsWithStringEncoding, type SpawnOptions, type SpawnSyncOptions, type SpawnSyncReturns } from "node:child_process";
+export type TmuxEnv = Record<string, string | undefined>;
+export interface TmuxIsolation {
+    /** Socket path passed to tmux as `-S`. */
+    socket: string;
+    /** Which variable asked for isolation. */
+    source: "ANET_TMUX_SOCKET" | "TMUX_TMPDIR";
+}
+export declare class TmuxKillServerRefused extends Error {
+    constructor(args: readonly string[]);
+}
+/**
+ * Where tmux should talk to, or null for "today's default behaviour".
+ * `TMUX_TMPDIR` resolves the same way tmux itself does: `$TMUX_TMPDIR/tmux-<uid>/default`.
+ */
+export declare function resolveTmuxIsolation(env?: TmuxEnv, uid?: number): TmuxIsolation | null;
+/** The socket path inside `$TMUX` (`<socket>,<server pid>,<session idx>`), or null. */
+export declare function socketOfTmuxVar(value: string | undefined): string | null;
+/**
+ * True when argv asks tmux to kill its server, including `a ; kill-server`
+ * chains and the unambiguous prefixes tmux accepts (`kill-ser`, `kill-serv`, …).
+ */
+export declare function isKillServer(args: readonly string[]): boolean;
+export interface TmuxInvocation {
+    file: "tmux";
+    args: string[];
+    /** undefined ⇒ inherit the caller's env exactly as before (no isolation requested). */
+    env: TmuxEnv | undefined;
+    isolation: TmuxIsolation | null;
+}
+/**
+ * Pure argv/env builder. Throws TmuxKillServerRefused for kill-server.
+ * `env` is the env the child would otherwise get (the caller's `options.env`,
+ * else process.env); isolation is decided from it.
+ */
+export declare function buildTmuxInvocation(args: readonly string[], env?: TmuxEnv, uid?: number): TmuxInvocation;
+/** `execFileSync("tmux", args, options)` through the #505 rules. */
+export declare function execTmux(args: readonly string[], options: ExecFileSyncOptionsWithStringEncoding): string;
+export declare function execTmux(args: readonly string[], options?: ExecFileSyncOptionsWithBufferEncoding): Buffer;
+export declare function execTmux(args: readonly string[], options?: ExecFileSyncOptions): string | Buffer;
+/** `spawnSync("tmux", args, options)` through the #505 rules. */
+export declare function spawnSyncTmux(args: readonly string[], options?: SpawnSyncOptions): SpawnSyncReturns<string | Buffer>;
+/** `spawn("tmux", args, options)` through the #505 rules. */
+export declare function spawnTmux(args: readonly string[], options?: SpawnOptions): ChildProcess;

package/dist/src/token-cli.d.ts

@@ -0,0 +1,13 @@
+export type TokenCreateNameResult = {
+    ok: true;
+    name: string;
+} | {
+    ok: false;
+    error: string;
+};
+/** Parse only `anet token create` operands.
+ *
+ * The legacy positional form stays supported, while flag parsing is strict so
+ * a typo cannot become the name of a newly issued credential.
+ */
+export declare function parseTokenCreateName(argv: readonly string[]): TokenCreateNameResult;

package/dist/src/tool-allowlist.d.ts

@@ -0,0 +1,28 @@
+export declare const CLAUDE_KNOWN_TOOLS: readonly string[];
+type Runtime = string;
+/** Parse the comma-joined --tools string, validate each token, return the
+ * trimmed list. Runtime-scoped:
+ *
+ *   Claude-lineage → each token must be in CLAUDE_KNOWN_TOOLS OR match
+ *                    the MCP pattern (mcp__<server>__<tool>).
+ *   Other runtimes → only the basic per-token format check runs, so grok /
+ *                    codex / opencode tools flow through unchanged and get
+ *                    validated by their own downstream layers.
+ *
+ * Throws on the first offense with a message naming the bad token and,
+ * for Claude-side violations, the expected set. Never returns a
+ * partially-cleaned list — a typo must surface, not silently reshape the
+ * persisted profile.
+ */
+export declare function parseAndValidateTools(raw: string, runtime: Runtime): string[];
+/** Minimal --model validation: non-empty after trim, no whitespace inside.
+ *
+ * We do NOT enforce a known-model allowlist — models are vendor-defined,
+ * evolve independently, and a strict list would break the first time
+ * MiniMax/DeepSeek/GLM/etc. ships a new variant. This catches the obvious
+ * user-side typos (`--model " claude-3 " `, `--model ""`) without
+ * over-restricting legitimate values. Vendor-side model resolution
+ * (defaultCodexModelForRuntime etc.) already validates its own contract.
+ */
+export declare function validateModel(raw: string): string;
+export {};

package/dist/src/unsafe-package-path-reason.d.ts

@@ -0,0 +1,17 @@
+export interface PathModeFacts {
+    /** Owner uid of the path. */
+    uid: number;
+    /** Permission bits (st_mode & 0o777). */
+    mode: number;
+    /** uid of the process doing the check. */
+    processUid: number;
+}
+export type UnsafePathReason = "owner" | "group-writable" | "world-writable" | null;
+/** Which condition makes this path unsafe to execute from, if any. */
+export declare function classifyUnsafePath(facts: PathModeFacts): UnsafePathReason;
+/**
+ * Operator-facing explanation. Names the path, the offending bits, and the
+ * command that fixes it — a message that says only "unsafe" leaves the reader
+ * guessing between four different conditions.
+ */
+export declare function describeUnsafePath(path: string, facts: PathModeFacts): string;

package/dist/src/upgrade-channel.d.ts

@@ -0,0 +1,31 @@
+export type ReleaseChannel = "preview" | "latest";
+export interface DistTags {
+    latest?: string | null;
+    preview?: string | null;
+}
+export type ChannelResolution = {
+    ok: true;
+    channel: ReleaseChannel;
+    source: "flag" | "detected";
+    reason: string;
+} | {
+    ok: false;
+    error: string;
+};
+export interface ResolveUpgradeChannelInput {
+    /** Installed anet version (full string, prerelease preserved). */
+    installed: string | null | undefined;
+    /** Value of `--channel`. `"true"` means the flag was given without a value. */
+    flag?: string | null;
+    /** dist-tags of @sleep2agi/agent-network, or null when the lookup failed. */
+    distTags: DistTags | null;
+}
+interface ParsedSemver {
+    core: [number, number, number];
+    pre: string[];
+}
+export declare function parseSemver(version: string | null | undefined): ParsedSemver | null;
+/** semver §11 precedence. Returns <0, 0, >0. */
+export declare function compareSemver(a: ParsedSemver, b: ParsedSemver): number;
+export declare function resolveUpgradeChannel(input: ResolveUpgradeChannelInput): ChannelResolution;
+export {};

package/dist/src/win-launcher.d.ts

@@ -0,0 +1,20 @@
+import { type ExecFileSyncOptions, type ExecFileSyncOptionsWithStringEncoding, type SpawnOptions } from "child_process";
+/** Windows needs a command interpreter to run a .cmd; POSIX runs the file. */
+export declare function launcherNeedsShell(platform?: NodeJS.Platform): boolean;
+/**
+ * Quote one argument for `cmd.exe /c`.
+ *
+ * cmd's rules are not the shell's: a double quote is escaped by doubling it,
+ * and the metacharacters below must be quoted or cmd will act on them. Anything
+ * safe is left bare, so the common case stays readable in a process listing.
+ */
+export declare function quoteForCmd(arg: string): string;
+/** The argv to hand to execFile/spawn so `cmd args…` runs on this platform. */
+export declare function launcherArgv(cmd: string, args: readonly string[], platform?: NodeJS.Platform, comspec?: string | undefined): {
+    file: string;
+    argv: string[];
+};
+export declare function runLauncherSync(cmd: string, args: readonly string[], options: ExecFileSyncOptionsWithStringEncoding): string;
+export declare function runLauncherSync(cmd: string, args: readonly string[], options?: ExecFileSyncOptions): Buffer;
+/** spawn for a launcher, correct on Windows. */
+export declare function spawnLauncher(cmd: string, args: readonly string[], options?: SpawnOptions): import("node:child_process").ChildProcess;

package/dist/src/windows-codex-copresence.d.ts

@@ -0,0 +1,60 @@
+export type WindowsCopresenceRole = "appsrv" | "bridge";
+export interface WindowsManagedProcess {
+    role: WindowsCopresenceRole;
+    pid: number;
+    creationDate: string;
+    logPath: string;
+}
+export interface WindowsCopresenceRecord {
+    version: 1 | 2;
+    nodeId: string;
+    createdAt: string;
+    marker?: string;
+    processes: WindowsManagedProcess[];
+}
+export declare function windowsCopresenceRecordPath(nodesDir: string, nodeId: string): string;
+export declare function windowsCopresenceLogPath(nodesDir: string, nodeId: string, role: WindowsCopresenceRole): string;
+export declare function openPrivateAppendLog(path: string): number;
+/** Protect credential-bearing state with native Windows ACLs. */
+export declare function ensureWindowsPrivateDirectory(path: string): void;
+export declare function closeLog(fd: number): void;
+export type CreationDateProbe = (pid: number) => string | null;
+/** Uses CIM instead of locale-dependent tasklist output. */
+export declare function probeWindowsCreationDate(pid: number): string | null;
+/**
+ * Attribute an ESTABLISHED loopback connection to the launched TUI process
+ * tree. This is deliberately stronger than counting listeners/connections:
+ * an unrelated local client cannot satisfy it.
+ */
+export declare function probeWindowsOwnedLoopbackConnection(rootPid: number, expectedCreationDate: string, port: number, runPowerShell?: (script: string) => string): boolean;
+/**
+ * #1342 —— 只在健康检查**即将失败**时跑一次,用来回答一个此前没人量过的问题:
+ * 那 10.5 秒到底花在 **PowerShell 启动**上,还是花在 `Get-CimInstance Win32_Process`
+ * 这个全表查询上?
+ *
+ * 实测背景(由 #1628/#1637 加的 probeMs 量到,2026-08-31):
+ *   probes=1  waited=10897ms  probeMsLast=10490   ← 单次探测吃掉 96% 的预算
+ * 而 #1636 把全表枚举提到循环外之后这个数**没有变小**(9963 → 10490),
+ * 说明成本不在"重复枚举",而在那一次调用本身。但"那一次调用"包含两段:
+ * 起一个 powershell 进程,和在里面跑 CIM 查询。**这两段要查的东西完全不同** ——
+ * 前者是 runner/镜像的问题,后者是查询写法的问题。
+ *
+ * 🔴 这里跑的是一个**什么都不做**的脚本(`'x'`),所以它测到的就是启动那一段的下界。
+ *    只在失败路径调用一次,不进探测循环 —— 不给正常路径增加任何成本,
+ *    也**不可能**改变探测的返回值。
+ *
+ * 拿不到就返回 null(未知),不返回 0 —— 0 会被读成「启动不花时间」。
+ */
+export declare function measurePowerShellStartupMs(): number | null;
+export declare function writeWindowsCopresenceRecord(nodesDir: string, nodeId: string, processes: WindowsManagedProcess[], marker?: string): void;
+export declare function readWindowsCopresenceRecord(nodesDir: string, nodeId: string): WindowsCopresenceRecord | null;
+export interface WindowsStopDecision {
+    safe: WindowsManagedProcess[];
+    refused: Array<{
+        process: WindowsManagedProcess;
+        reason: "missing" | "pid-reused";
+    }>;
+}
+/** PID alone is never authority: Windows reuses PIDs, so CreationDate must match. */
+export declare function decideWindowsManagedStop(record: WindowsCopresenceRecord, probe: CreationDateProbe): WindowsStopDecision;
+export declare function taskkillWindowsProcessTree(pid: number): void;

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@sleep2agi/agent-network",
-  "version": "2.3.0-preview.13",
-  "description": "AI Agent Network CLI — Local-first multi-agent orchestration across 4 runtimes (Claude Code CLI / Claude Agent SDK / Codex SDK / Grok Build ACP) and 8+ LLM providers (Anthropic / OpenAI / xAI Grok / MiniMax / DeepSeek / GLM / Kimi / InternLM / Xiaomi MiMo / OpenRouter). Apache 2.0.",
+  "version": "2.3.0-preview.130",
+  "description": "AI Agent Network CLI — Local-first multi-agent orchestration across 6 runtimes (Claude Code CLI / Claude Agent SDK / Codex SDK / Codex app-server / Grok Build ACP / OpenCode CLI) and 8+ LLM providers. Apache 2.0.",
   "type": "module",
   "main": "dist/src/client.js",
   "types": "dist/client.d.ts",
@@ -9,10 +9,14 @@
     ".": {
       "import": "./dist/src/client.js",
       "types": "./dist/client.d.ts"
+    },
+    "./daemon-capability-display": {
+      "import": "./dist/src/daemon-capability-display.js",
+      "types": "./dist/src/daemon-capability-display.d.ts"
     }
   },
   "bin": {
-    "anet": "dist/bin/cli.js"
+    "anet": "dist/bin/anet.cjs"
   },
   "files": [
     "dist"
@@ -20,7 +24,7 @@
   "scripts": {
     "typecheck": "tsc --noEmit",
     "test:feishu-bridge": "bun tests/feishu-bridge-ackplaceholder.test.ts",
-    "build": "bun build src/client.ts --outdir dist/src --target node --minify && bun build bin/cli.ts --outdir dist/bin --target node --minify --external @sleep2agi/commhub-server --external bun:sqlite --external '../../server/*' && bun build src/node-server.ts --outdir dist/src --target node --minify --external @modelcontextprotocol/sdk && bun build src/im/feishu/worker.ts --outdir dist/src/im/feishu --target node --minify --external @larksuiteoapi/node-sdk && tsc --emitDeclarationOnly --declaration --outDir dist && npx javascript-obfuscator dist/bin/cli.js --output dist/bin/cli.js --compact true --string-array true --string-array-encoding base64 && npx javascript-obfuscator dist/src/client.js --output dist/src/client.js --compact true --string-array true && npx javascript-obfuscator dist/src/node-server.js --output dist/src/node-server.js --compact true --string-array true",
+    "build": "bun build src/client.ts --outdir dist/src --target node --minify && bun build src/daemon-capability-display.ts --outdir dist/src --target browser --minify && bun build bin/cli.ts --outdir dist/bin --target node --minify --external @sleep2agi/commhub-server --external bun:sqlite --external '../../server/*' && bun build src/node-server.ts --outdir dist/src --target node --minify && bun build src/im/feishu/worker.ts --outdir dist/src/im/feishu --target node --minify --external @larksuiteoapi/node-sdk && tsc --emitDeclarationOnly --declaration --outDir dist && npx javascript-obfuscator dist/bin/cli.js --output dist/bin/cli.js --compact true --string-array true --string-array-encoding base64 && npx javascript-obfuscator dist/src/client.js --output dist/src/client.js --compact true --string-array true && npx javascript-obfuscator dist/src/node-server.js --output dist/src/node-server.js --compact true --string-array true && cp bin/anet.cjs dist/bin/anet.cjs",
     "prepublishOnly": "npm run build"
   },
   "keywords": [
@@ -54,7 +58,8 @@
     "directory": "agent-network"
   },
   "publishConfig": {
-    "access": "public"
+    "access": "public",
+    "tag": "preview"
   },
   "bugs": {
     "url": "https://github.com/sleep2agi/agent-network/issues"
@@ -70,7 +75,7 @@
     "puppeteer-core": "^24.10.2"
   },
   "devDependencies": {
-    "@modelcontextprotocol/sdk": "^1.12.0",
+    "@modelcontextprotocol/sdk": "1.32.0",
     "@types/markdown-it": "^14.1.2",
     "@types/node": "^25.0.0",
     "javascript-obfuscator": "^5.4.1",