@sleep2agi/agent-network 2.3.0-preview.13 → 2.3.0-preview.131

package/dist/src/im/types.d.ts

@@ -72,13 +72,42 @@ export interface NormalizedIMEvent {
     mentioned: boolean;
     content: {
         text?: string;
-        /** Local filesystem paths to already-downloaded images. */
+        /** Local filesystem paths to already-downloaded images.
+         *
+         *  RFC-020 §17 backward-compat shim: the new richer
+         *  `attachments[]` field below is the canonical source going
+         *  forward. `images` stays a `string[]` of paths so an older
+         *  agent-node worker reading this envelope across a rolling
+         *  upgrade doesn't crash. New workers prefer `attachments`,
+         *  old workers ignore it and keep using `images`. */
         images?: string[];
         files?: {
             name: string;
             path?: string;
             url?: string;
         }[];
+        /** RFC-020 §17 cross-machine attachment descriptors.
+         *
+         *  Each entry mirrors `meta.attachments[]` on commhub tasks
+         *  (`{ type, file_id?, path?, mime?, name?, size? }`). The
+         *  feishu bridge populates `file_id` by uploading inbound
+         *  files to `/api/upload` so cross-host agents delegated via
+         *  `commhub_send_task(meta.attachments=...)` can fetch via
+         *  `/api/files/<id>`. When upload fails, `file_id` is absent
+         *  and the descriptor degrades to path-only (single-host
+         *  still works via local Read; no regression vs pre-fix
+         *  baseline).
+         *
+         *  Always populated alongside `images` for the same files —
+         *  duplication is intentional for rolling-upgrade safety. */
+        attachments?: Array<{
+            type: "image" | "file";
+            path?: string;
+            file_id?: string;
+            mime?: string;
+            name?: string;
+            size?: number;
+        }>;
     };
     /**
      * Original platform payload. Default: held in memory only and dropped after

package/dist/src/inbox-drain.d.ts

@@ -0,0 +1,20 @@
+export interface InboxPage<T> {
+    ok?: boolean;
+    messages?: T[];
+}
+export interface DrainOptions<T extends {
+    id: string;
+}> {
+    fetchPage: (limit: number) => Promise<InboxPage<T> | undefined | null>;
+    handle: (msg: T) => Promise<void>;
+    pageSize?: number;
+    maxPages?: number;
+}
+export interface DrainResult {
+    delivered: number;
+    pages: number;
+    stoppedBy: "empty" | "short-page" | "max-pages" | "no-progress" | "fetch-error";
+}
+export declare function drainInbox<T extends {
+    id: string;
+}>(opts: DrainOptions<T>): Promise<DrainResult>;

package/dist/src/local-process-state.d.ts

@@ -0,0 +1,12 @@
+export type LocalProcessState = {
+    kind: "alive";
+    pid: number;
+} | {
+    kind: "stale";
+    pid: number;
+} | {
+    kind: "none";
+};
+export declare function describeLocalProcess(state: LocalProcessState): string;
+/** doctor 印完节点清单后的那一句:说清这一列量的是本机,不是 hub。 */
+export declare const LOCAL_VS_HUB_NOTE: string;

package/dist/src/locale-diagnostic.d.ts

@@ -0,0 +1,12 @@
+export interface LocaleDiagnostic {
+    effectiveVariable: "LC_ALL" | "LC_CTYPE" | "LANG" | null;
+    effectiveValue: string | null;
+    shouldWarn: boolean;
+}
+/**
+ * Resolve the locale with the same precedence used by POSIX libc. Windows
+ * does not use these variables as its process Unicode boundary, so prescribing
+ * a POSIX locale there would be misleading.
+ */
+export declare function diagnoseLocale(env: Readonly<Record<string, string | undefined>>, platform: string): LocaleDiagnostic;
+export declare function formatLocaleSource(diagnostic: LocaleDiagnostic): string;

package/dist/src/login-client-label.d.ts

@@ -0,0 +1,6 @@
+export declare const CLIENT_LABEL_MAX = 64;
+export declare function anetClientLabel(env: {
+    version?: string | null;
+    host?: string | null;
+    command: string;
+}): string;

package/dist/src/ls-columns.d.ts

@@ -0,0 +1,15 @@
+/**
+ * 一列该多宽:装得下表头,也装得下这一列里最长的那个值。
+ *
+ * 🔴 两处用它的地方来源不同,但问题一样:
+ *  - `anet node ls` 的 RUNTIME 列:值域来自 `SUPPORTED_RUNTIME_NAMES`(唯一真源);
+ *  - `anet status` / `anet tasks` 的 STATUS 列:值域散在 server/ 里(另一个包),
+ *    CLI 没法 import —— 但**要打印的那些行就在手上**,直接从数据算。
+ *
+ * 两种情况都不该写死一个数:写死的那个,下一次加 runtime / 加状态时就漂了。
+ */
+export declare function columnWidth(values: readonly unknown[], header: string): number;
+/** RUNTIME 列的专用入口 —— 保留原名,调用点不用改。 */
+export declare function runtimeColumnWidth(names: readonly string[], header?: string): number;
+export declare function lsHeaderRow(runtimeWidth: number): string;
+export declare function lsSeparatorRow(runtimeWidth: number): string;

package/dist/src/mock-llm.d.ts

@@ -0,0 +1,12 @@
+export declare const MOCK_LLM_FALLBACK = "(mock LLM: no rule matched)";
+export type MockLlmRule = Readonly<{
+    in_substring: string;
+    out: string;
+}>;
+export type MockLlmResolution = Readonly<{
+    reply: string;
+    matched: boolean;
+    ruleIndex: number | null;
+}>;
+export declare function loadMockLlmRules(path: string): readonly MockLlmRule[];
+export declare function resolveMockLlmReply(rules: readonly MockLlmRule[], prompt: string, warn?: (message: string) => void): MockLlmResolution;

package/dist/src/node-activity-log.d.ts

@@ -0,0 +1,4 @@
+export interface ActivityLogSink {
+    append(line: string): void;
+}
+export declare function createActivityLogSink(baseDir: string, alias: string, now?: () => Date): ActivityLogSink;

package/dist/src/node-clone.d.ts

@@ -0,0 +1,134 @@
+export interface CloneArgs {
+    source: string;
+    target: string;
+    /** Raw --workdir as typed (resolved later against cwd). */
+    workdir?: string;
+    model?: string;
+    start: boolean;
+}
+export type CloneArgsResult = {
+    ok: true;
+    args: CloneArgs;
+} | {
+    ok: false;
+    error: string;
+} | {
+    ok: false;
+    help: true;
+};
+export declare const NODE_CLONE_USAGE = "anet node clone <source> <new-name> [--workdir <dir>] [--model <id>] [--start]\nanet node create <new-name> --from <source> [--workdir <dir>] [--model <id>] [--start]\n\n  Make a new node with the same settings as <source>, under a NEW identity.\n  The clone is registered with the Hub as its own node (new node_id + token);\n  it never shares the source's identity, session, login or logs.\n\n  Copied:      runtime, model, tools, permission flags, prompts, non-secret env,\n               rules file / skills / .mcp.json (with --workdir)\n  Regenerated: node_id, token, session id, co-presence sockets\n  Not copied:  token, sessions/threads, logs, inbox, channel bot credentials,\n               codex auth.json, secret env values (key names are kept)\n\n  --workdir <dir>  Put the clone in another project directory (created if\n                   missing; path must be ASCII). Default: the source's project\n                   directory (the current one), sharing its rules file/skills.\n  --model <id>     Use a different model than the source.\n  --start          Start the clone right after creating it.\n\n  Never copy a node directory with cp -r: the copy keeps the same node_id and\n  token, so the Hub delivers every task to both processes and it runs twice.";
+/**
+ * Parse the tokens after the verb.
+ *   mode "clone":       [<source>, <new>, ...flags]
+ *   mode "create-from": [<new>, ...flags]  with a required --from <source>
+ */
+export declare function parseCloneArgs(tokens: readonly string[], mode: "clone" | "create-from"): CloneArgsResult;
+/** Project rule: node working directories are ASCII (aliases may be Chinese, directories not). */
+export declare function isAsciiPath(p: string): boolean;
+export interface RefusalInput {
+    sourceId: string;
+    sourceProfile: Record<string, any>;
+    target: string;
+    sourceNodeDir: string;
+    targetNodeDir: string;
+    /** Present only when --workdir was given; absolute. */
+    explicitWorkdir?: string;
+}
+/** Every reason to stop before touching the Hub or the disk. null = go. */
+export declare function cloneRefusal(i: RefusalInput): string | null;
+export interface LedgerItem {
+    item: string;
+    note?: string;
+}
+export interface CloneLedger {
+    copied: LedgerItem[];
+    regenerated: LedgerItem[];
+    skipped: LedgerItem[];
+    /** env keys whose value is a secret: the clone references `ref`, which the user must set. */
+    secrets: {
+        key: string;
+        ref: string;
+    }[];
+}
+export declare function emptyLedger(): CloneLedger;
+export interface PlanInput {
+    sourceProfile: Record<string, any>;
+    target: string;
+    newNodeId: string;
+    /** Absolute project directory the clone will live in. */
+    targetWorkdir: string;
+    modelOverride?: string;
+    /** New claude-code-cli session id. */
+    newSession: () => string;
+    /** grok co-presence socket fields for the new node id (grokBuildCliCreationFields). */
+    grokFields?: (nodeId: string) => Record<string, unknown>;
+}
+/** Build the clone's profile (no token yet) and the ledger of what happened to each field. */
+export declare function planCloneProfile(p: PlanInput, ledger?: CloneLedger): {
+    profile: Record<string, any>;
+    ledger: CloneLedger;
+};
+/** Files a codex-home may carry to the clone. Never auth.json, never .anet-copresence.env. */
+export declare const CODEX_HOME_COPY: readonly ["config.toml", "AGENTS.md", "version.json"];
+export declare const CODEX_HOME_COPY_DIRS: readonly ["skills"];
+/** Workdir-level settings copied only when the clone gets its own --workdir. */
+export declare const WORKDIR_COPY_FILES: readonly ["CLAUDE.md", "AGENTS.md"];
+export declare const WORKDIR_COPY_DIRS: readonly [".claude/skills", ".agents/skills", ".grok/skills", ".opencode/skill", ".opencode/skills"];
+/** Recursive copy that never follows symlinks and never copies credential-looking files. Returns files copied. */
+export declare function copyTreeSafe(from: string, to: string, skipped: LedgerItem[], label: string): number;
+/** Strip values from env/headers of every MCP server; drop the commhub entry (regenerated at start). */
+export declare function sanitizeMcpJson(raw: string): {
+    text: string;
+    blanked: string[];
+};
+export interface CopyFilesInput {
+    sourceNodeDir: string;
+    targetNodeDir: string;
+    sourceWorkdir: string;
+    targetWorkdir: string;
+}
+/** Copy the whitelisted on-disk settings. The target node dir must already exist. */
+export declare function copyCloneFiles(i: CopyFilesInput, ledger: CloneLedger): void;
+export interface RunCloneInput {
+    sourceId: string;
+    /** Raw source config.json (as stored, before normalisation). */
+    sourceProfile: Record<string, any>;
+    target: string;
+    sourceNodeDir: string;
+    sourceWorkdir: string;
+    targetWorkdir: string;
+    /** True when the user passed --workdir. */
+    explicitWorkdir: boolean;
+    modelOverride?: string;
+    newNodeId: () => string;
+    newSession: () => string;
+    grokFields?: (nodeId: string) => Record<string, unknown>;
+    /** Hub registration — returns the new node's ntok_. Same endpoint `anet node create` uses. */
+    register: (profile: Record<string, any>) => Promise<string>;
+    /** Write config.json into targetNodeDir (the CLI passes its create writer). */
+    persist: (profile: Record<string, any>, targetNodeDir: string) => void;
+}
+export type RunCloneResult = {
+    ok: true;
+    profile: Record<string, any>;
+    ledger: CloneLedger;
+    targetNodeDir: string;
+} | {
+    ok: false;
+    stage: "refused" | "register" | "write";
+    error: string;
+};
+export declare function runNodeClone(i: RunCloneInput): Promise<RunCloneResult>;
+/** Test/default writer: the same config.json whitelist `anet node create` persists, mode 0600. */
+export declare function defaultClonePersist(profile: Record<string, any>, targetNodeDir: string): void;
+/** The summary table printed after a clone. Never prints a token or a secret value. */
+export declare function formatCloneSummary(r: {
+    source: string;
+    target: string;
+    profile: Record<string, any>;
+    ledger: CloneLedger;
+    targetNodeDir: string;
+    sourceNodeId?: string;
+}): string;
+/** realpath that tolerates a missing path (resolves the nearest existing parent). */
+export declare function realpathLoose(p: string): string;

package/dist/src/node-files.d.ts

@@ -0,0 +1,62 @@
+export declare const NODE_FILE_READ_MAX_BYTES: number;
+export declare const NODE_FILES_LIST_MAX = 1000;
+export declare const NODE_FILE_PATH_MAX = 1024;
+/** 回给 hub 的 JSON 最长这么多字符(hub 端 ack 上限相同)。 */
+export declare const NODE_FILES_RESULT_MAX_CHARS: number;
+export type NodeFileType = "dir" | "file" | "symlink" | "other";
+export type HiddenReason = "secret" | "skipped";
+export interface NodeFileEntry {
+    name: string;
+    type: NodeFileType;
+    /** 普通文件的字节数;凭据文件不给。 */
+    size?: number;
+    /** 毫秒时间戳。 */
+    mtime?: number;
+    hidden_reason?: HiddenReason;
+    /** 目录(或指向目录的软链接)不允许进入。 */
+    no_descend?: boolean;
+    /** 软链接:指向工作目录内的什么;指向外面或断链为 null(不透露目标)。 */
+    link_type?: "dir" | "file" | null;
+}
+export interface NodeFilesListResult {
+    path: string;
+    entries: NodeFileEntry[];
+    truncated: boolean;
+    total: number;
+}
+export type NodeFileReadKind = "text" | "binary" | "too_large" | "secret";
+export interface NodeFileReadResult {
+    path: string;
+    name: string;
+    kind: NodeFileReadKind;
+    size?: number;
+    mtime?: number;
+    content?: string;
+    hidden_reason?: HiddenReason;
+}
+/**
+ * 纯函数:一个路径是否属于凭据。
+ *   relPosix —— 相对工作目录(请求的路径,或 realpath 之后相对工作目录的路径)。
+ *   rootAbs  —— 工作目录自身的绝对路径(posix);只作为「祖先目录」参与判定:工作目录本身
+ *               就在 .claude/ .codex/ 之类里面时,里面的一切都算凭据;在 .anet/ 里面时
+ *               config.json* 算凭据。工作目录自己的名字不参与文件名规则。
+ * 任一祖先段(含末段)是凭据目录 → secret;末段按文件名规则判。大小写不敏感(macOS 默认不分大小写)。
+ */
+export declare function secretReasonFor(relPosix: string, rootAbs?: string): "secret" | null;
+/** 纯函数:这个目录能不能进入。凭据目录 → secret;node_modules → skipped;路径上任一段命中同样不行。 */
+export declare function noDescendReasonFor(relPosix: string, rootAbs?: string): HiddenReason | null;
+/** 客户端给的路径 → 规范化相对路径("" = 根)。不合法抛错,错误信息不回显输入。 */
+export declare function normalizeNodeRelPath(raw: unknown): string;
+export interface ResolvedNodePath {
+    rootReal: string;
+    real: string;
+    /** realpath 之后相对根的路径(posix)。 */
+    relReal: string;
+}
+/**
+ * 解析并收在工作目录里:realpath(根) + realpath(根/rel),后者必须在前者之内。
+ * 不存在抛 `not found`;逃出去抛 `outside the work dir`。
+ */
+export declare function resolveInsideWorkDir(workDir: string, rel: string): Promise<ResolvedNodePath>;
+export declare function listNodeFiles(workDir: string, rawPath: unknown): Promise<NodeFilesListResult>;
+export declare function readNodeFile(workDir: string, rawPath: unknown): Promise<NodeFileReadResult>;

package/dist/src/node-not-found.d.ts

@@ -0,0 +1 @@
+export declare function nodeNotFoundMessage(ref: string, knownNames: string[], suggestion: string | null): string;

package/dist/src/node-running-guard.d.ts

@@ -0,0 +1,9 @@
+export declare const isAgentNodeCommand: (cmdline: string) => boolean;
+export interface RunningNodeProbe {
+    pidFileContent: string | null;
+    isAlive: (pid: number) => boolean;
+    commandOf: (pid: number) => string | null;
+}
+/** 返回还活着且确实是 agent-node 的 pid;否则 null(不存在 / 死了 / pid 被别的进程复用)。 */
+export declare const runningNodePid: (probe: RunningNodeProbe) => number | null;
+export declare const alreadyRunningMessage: (displayName: string, pid: number) => string[];

package/dist/src/node-server-identity.d.ts

@@ -0,0 +1,35 @@
+export interface NodeIdentityFromConfig {
+    node_id?: string;
+    node_name?: string;
+    model?: string;
+}
+export declare function nodeIdentityFromConfig(path: string | undefined): NodeIdentityFromConfig;
+export interface NodeRowLike {
+    node_id?: string | null;
+    alias?: string | null;
+    runtime?: string | null;
+    config_path?: string | null;
+}
+export type NodeIdClaimVerdict = {
+    claim: true;
+} | {
+    claim: false;
+    owner: string;
+    runtime: string | null;
+    config_path: string | null;
+};
+export declare function nodeIdClaimVerdict(nodeId: string, rows: readonly NodeRowLike[], alias: string): NodeIdClaimVerdict;
+export type NodeIdClaimState = "ok" | "conflict" | "unknown";
+/** 取 hub 上这个 node_id 的行并下结论;任何失败都是 "unknown"(调用方这次不报 node_id)。 */
+export declare function checkNodeIdClaim(opts: {
+    hubUrl: string;
+    token: string;
+    nodeId: string;
+    alias: string;
+    fetchImpl?: typeof fetch;
+    timeoutMs?: number;
+}): Promise<{
+    state: NodeIdClaimState;
+    verdict?: NodeIdClaimVerdict;
+    error?: string;
+}>;

package/dist/src/node-server-payload.d.ts

@@ -0,0 +1,66 @@
+/**
+ * What gets written to `<project>/.anet/node-server.js` (issue #1216).
+ *
+ * The target name is not negotiable: `agent-node`'s grok co-presence spawn
+ * gate pins the CommHub MCP payload to exactly that path, so whatever the
+ * source is, the file that lands there is called `.js`.
+ *
+ * 🔴 The bug this module exists to remove: the old code copied the source
+ * verbatim and justified it with a comment claiming
+ *
+ *     "bun runs .ts content under a .js extension fine"
+ *
+ * which is false — bun selects its parser from the extension:
+ *
+ *     $ printf 'function f(x: string): void {}\nf("hi");\n' > probe.ts
+ *     $ cp probe.ts probe.js
+ *     $ bun probe.ts   → runs
+ *     $ bun probe.js   → error: Expected ")" but found ":"
+ *
+ * An installed npm package never hit it, because its first resolver candidate
+ * (`dist/src/node-server.js`) is compiled. Only a source checkout fell through
+ * to `src/node-server.ts` — i.e. every local run and every hand-verified PR.
+ *
+ * And the symptom was three layers from the cause: the node died on
+ * `grok copresence CommHub MCP readiness preflight failed (1)`, which names
+ * neither a file nor a parse error.
+ */
+/** Injected so the decision is testable without spawning anything. */
+export interface TypeScriptBundler {
+    /** Returns the self-contained JavaScript for `entryPath`, or throws. */
+    bundleSync(entryPath: string): string;
+}
+export declare class NodeServerPayloadError extends Error {
+    constructor(message: string);
+}
+/**
+ * Decide what bytes belong at the `.js` target for a given source path.
+ *
+ * A `.js` source is passed through untouched — the published package ships a
+ * compiled bundle there, and re-processing it risks changing bytes for no gain.
+ *
+ * 🔴 A `.ts` source must be **bundled, not merely transpiled**. Stripping types
+ * fixes the parse error but leaves the file's relative imports pointing at
+ * siblings that do not exist beside the destination:
+ *
+ *     import { inboundChannelMeta } from "./channel-meta.js";
+ *     → Cannot find module './channel-meta.js' from '<project>/.anet/node-server.js'
+ *
+ * That second failure is why transpiling alone still ended at
+ * "CommHub MCP readiness preflight failed (1)". The published
+ * `dist/src/node-server.js` works precisely because it is a self-contained
+ * bundle, so a source checkout has to produce the same shape.
+ */
+export declare function nodeServerPayloadFor(source: string, sourcePath: string, bundler: TypeScriptBundler | null): string;
+/**
+ * The bundler available on this runtime, or null.
+ *
+ * bun can bundle; the published CLI runs under node and cannot — but it also
+ * never resolves a `.ts` candidate (its `dist/` copy wins), so null there is
+ * correct rather than a gap.
+ *
+ * `spawnSync` rather than `Bun.build()` because both call sites are
+ * synchronous, and making them async would change the ordering of the file
+ * writes around them.
+ */
+export declare function ambientTypeScriptTranspiler(): TypeScriptBundler | null;

package/dist/src/node-server-rules-file.d.ts

@@ -0,0 +1,14 @@
+export declare const CLAUDE_CODE_RULES_RUNTIME = "claude";
+export interface RulesDoorbellDeps {
+    callCommHub: (method: string, params: Record<string, unknown>) => Promise<any>;
+    workDir: string;
+    log: (msg: string) => void;
+    /** 技能的用户级根目录(~/.claude/skills)取自这里;缺省 os.homedir()。测试注入临时目录。 */
+    home?: string;
+}
+/** SSE 事件分派:是 rules_file 门铃就处理并返回 true;其它事件原样返回 false。 */
+export declare function handleRulesFileEvent(event: {
+    type?: unknown;
+} | null | undefined, deps: RulesDoorbellDeps): Promise<boolean>;
+/** 连上 / 重连后补拉一次:断线期间桌面端可能已发起请求(hub 侧 60s 内仍 pending)。 */
+export declare function drainRulesFileRequests(deps: RulesDoorbellDeps, why: string): Promise<number>;