@sleep2agi/agent-network 2.3.0-preview.17 → 2.3.0-preview.170

package/dist/src/daemon-provider-account-custody.d.ts

@@ -0,0 +1,28 @@
+import { DaemonProviderStore } from './daemon-provider-store';
+export declare function chatgptCredentialFingerprint(raw: string): string;
+export declare class ProviderAccountCustody {
+    private nodeId;
+    private authPath;
+    private readAuth;
+    private previous?;
+    private selected?;
+    private before;
+    private next;
+    private installed;
+    private prepared;
+    constructor(store: DaemonProviderStore, nodeId: string, authPath: string, previousId: string | undefined, selectedId: string | undefined, readAuth: () => string | null);
+    get fingerprint(): string | undefined;
+    get previousFingerprint(): string | undefined;
+    get accountId(): string | undefined;
+    /** Capture AFTER verified stop: Codex may have refreshed auth since preflight. */
+    prepare(): {
+        previous_id: string | null;
+        selected_id: string | null;
+        before_auth: string | null;
+    };
+    private park;
+    install(): void;
+    /** No saved copy is used for an active account. Preserve refreshed credentials
+     * before restoring the old login, including a failed same-account model edit. */
+    rollback(): void;
+}

package/dist/src/daemon-provider-account-readback.d.ts

@@ -0,0 +1,3 @@
+/** Read only the exact owned node's loopback app-server. No logout/login or
+ * token refresh request, and no account details are returned to the Hub. */
+export declare function verifyChatgptAppserver(endpoint: string, timeoutMs?: number, webSocketCtor?: any): Promise<void>;

package/dist/src/daemon-provider-application.d.ts

@@ -0,0 +1,36 @@
+import { DaemonProviderStore } from './daemon-provider-store';
+export declare function providerNodeRevision(nodeDir: string): string;
+export declare function readProviderNodeConfig(nodeDir: string): Record<string, any>;
+export declare function readProviderNodeToml(nodeDir: string): import("smol-toml").TomlTable;
+/** Private, local configured credentials only. Never inherit the caller's env. */
+export declare function readProviderNodeEnv(nodeDir: string): Record<string, string>;
+export type ProviderApplicationRequest = {
+    requestId: string;
+    networkId: string;
+    daemonId: string;
+    nodeId: string;
+    alias: string;
+    nodeRevision: string;
+    revision: number;
+    providerId: string;
+    authId: string;
+    model: string;
+    accountId?: string;
+    confirmRestart: true;
+};
+export type ProviderActivation = {
+    nodeId: string;
+    model: string;
+    runtimeProvider: string;
+    nodeRevision: string;
+};
+export type ProviderApplicationLifecycle = {
+    preflight?: () => Promise<void>;
+    stopVerified: () => Promise<void>;
+    activate: (expected: ProviderActivation) => Promise<ProviderActivation>;
+    verifyChatgpt?: () => Promise<void>;
+    restore: () => Promise<void>;
+};
+/** Stop → private writes → verified activation. A crash leaves an explicit
+ * private recovery journal; reconnect must NOT blindly replay the mutation. */
+export declare function applyDaemonProvider(nodeDir: string, store: DaemonProviderStore, request: ProviderApplicationRequest, lifecycle: ProviderApplicationLifecycle): Promise<any>;

package/dist/src/daemon-provider-apply-command.d.ts

@@ -0,0 +1,9 @@
+import { type ProviderApplicationRequest } from './daemon-provider-application';
+import { type ProviderCliRunner } from './daemon-provider-lifecycle';
+export declare function runDaemonProviderApply(args: string[], deps: {
+    nodesDir: string;
+    readInput: () => string;
+    print: (text: string) => void;
+    run?: ProviderCliRunner;
+    authorizeIdle?: (daemonDir: string, request: ProviderApplicationRequest) => Promise<void>;
+}): Promise<number>;

package/dist/src/daemon-provider-collect.d.ts

@@ -0,0 +1,29 @@
+import { DaemonProviderStore } from './daemon-provider-store';
+import { type ProviderCollection } from './shared/provider-collection';
+export { validProviderCollection, type ProviderCollection } from './shared/provider-collection';
+/** Hub transport must authorize/revalidate binding before invoking this local
+ * operation. Local CLI users explicitly select an owned registry identity. */
+export declare function collectDaemonProvider(nodesDir: string, store: DaemonProviderStore, selection: ProviderCollection, revision: number, requestId?: string): {
+    revision: number;
+    source: "daemon";
+    providers: {
+        id: string;
+        label: string;
+        enabled: boolean;
+        runtimes: {
+            runtime: "codex-tui";
+            auth: {
+                credential_present: boolean;
+                verification: "not_checked";
+                application: "not_applied";
+                account_id?: string | undefined;
+                baseUrl?: string | undefined;
+                id: string;
+                kind: import("./daemon-provider-store").ProviderAuthKind;
+                models: string[];
+            }[];
+        }[];
+    }[];
+    network_id: string;
+    daemon_node_id: string;
+};

package/dist/src/daemon-provider-command.d.ts

@@ -0,0 +1,7 @@
+export declare const DAEMON_PROVIDER_USAGE = "anet daemon provider <list|scan|put|collect|apply|initialize> <daemon> [--revision N] [--request dps_UUID] (put/collect/scan/apply/initialize read private JSON from stdin; no key in argv)";
+export declare function readProviderInput(fd?: number): string;
+export declare function runDaemonProvider(args: string[], deps: {
+    nodesDir: string;
+    readInput: () => string;
+    print: (text: string) => void;
+}): number;

package/dist/src/daemon-provider-initialize.d.ts

@@ -0,0 +1,27 @@
+import { DaemonProviderStore } from './daemon-provider-store';
+import { type ProviderInitialization } from './shared/provider-initialization';
+type Request = {
+    request_id: string;
+    alias: string;
+    network_id: string;
+    daemon_node_id: string;
+    selection: ProviderInitialization;
+};
+export declare function initializeDaemonProvider(nodesDir: string, store: DaemonProviderStore, request: Request): Promise<{
+    status: string;
+    request_id: string;
+    node_id: string;
+    provider_revision: number;
+    provider_id: string;
+    auth_id: string;
+    model: string;
+    runtime_provider: string;
+    node_revision: string;
+    verification: string;
+}>;
+export declare function runDaemonProviderInitialize(args: string[], deps: {
+    nodesDir: string;
+    readInput: () => string;
+    print: (text: string) => void;
+}): Promise<number>;
+export {};

package/dist/src/daemon-provider-lifecycle.d.ts

@@ -0,0 +1,4 @@
+import { type ProviderApplicationLifecycle, type ProviderApplicationRequest } from './daemon-provider-application';
+export type ProviderCliRunner = (argv: string[], cwd: string, timeout: number) => Promise<string>;
+export declare function providerCliRunner(binary: string, script: string, env: NodeJS.ProcessEnv): ProviderCliRunner;
+export declare function providerApplicationLifecycle(nodeDir: string, request: ProviderApplicationRequest, run: ProviderCliRunner, authorizeIdle: () => Promise<void>): ProviderApplicationLifecycle;

package/dist/src/daemon-provider-store.d.ts

@@ -0,0 +1,104 @@
+export type ProviderAuthKind = "chatgpt" | "api_key";
+export type ApplicationProfile = {
+    providerId: string;
+    authId: string;
+    model: string;
+} & ({
+    kind: 'api_key';
+    baseUrl: string;
+    key: string;
+} | {
+    kind: 'chatgpt';
+    accountId: string;
+});
+export declare class DaemonProviderError extends Error {
+    readonly code: string;
+    constructor(code: string);
+}
+export declare function readPrivateJson(path: string): unknown;
+export declare class DaemonProviderStore {
+    private readonly root;
+    private readonly scope;
+    constructor(daemonDir: string);
+    private checkRoot;
+    private read;
+    private publicState;
+    list(): {
+        revision: number;
+        source: "daemon";
+        providers: {
+            id: string;
+            label: string;
+            enabled: boolean;
+            runtimes: {
+                runtime: "codex-tui";
+                auth: {
+                    credential_present: boolean;
+                    verification: "not_checked";
+                    application: "not_applied";
+                    account_id?: string | undefined;
+                    baseUrl?: string | undefined;
+                    id: string;
+                    kind: ProviderAuthKind;
+                    models: string[];
+                }[];
+            }[];
+        }[];
+        network_id: string;
+        daemon_node_id: string;
+    };
+    /** Presence only, never entitlement. Resolve an opaque saved-login ID solely
+     * inside this daemon's owned directory; callers cannot supply a credential path. */
+    private savedAccountPresent;
+    /** Local-only resolver. Never serialize this credential directory into a receipt. */
+    savedAccountHome(id: string): string | null;
+    /** Internal daemon bootstrap; this private path must never enter Hub replies. */
+    prepareLoginDirectory(): {
+        root: string;
+        network_id: string;
+        daemon_node_id: string;
+    };
+    /** Local application lease. Secrets stay inside the daemon callback, never in list/scan. */
+    withApiKey<T>(selection: {
+        revision: number;
+        providerId: string;
+        authId: string;
+        model: string;
+    }, apply: (profile: {
+        providerId: string;
+        authId: string;
+        model: string;
+        baseUrl: string;
+        key: string;
+    }) => Promise<T>): Promise<T>;
+    withApplicationProfile<T>(selection: {
+        revision: number;
+        providerId: string;
+        authId: string;
+        model: string;
+    }, apply: (profile: ApplicationProfile) => Promise<T>): Promise<T>;
+    upsert(value: unknown, expectedRevision: number, requestId?: string): {
+        revision: number;
+        source: "daemon";
+        providers: {
+            id: string;
+            label: string;
+            enabled: boolean;
+            runtimes: {
+                runtime: "codex-tui";
+                auth: {
+                    credential_present: boolean;
+                    verification: "not_checked";
+                    application: "not_applied";
+                    account_id?: string | undefined;
+                    baseUrl?: string | undefined;
+                    id: string;
+                    kind: ProviderAuthKind;
+                    models: string[];
+                }[];
+            }[];
+        }[];
+        network_id: string;
+        daemon_node_id: string;
+    };
+}

package/dist/src/daemon-runtime-path-preflight.d.ts

@@ -0,0 +1,22 @@
+/** 一个 runtime 依赖的外部二进制,以及它**有据可查**的安装位置。 */
+export type RuntimeBinaryHint = {
+    /** 哪些 runtime 名需要这个二进制 */
+    readonly runtimes: readonly string[];
+    /** 在 PATH 上查的裸名 */
+    readonly binary: string;
+    /** 官方安装位置(相对 $HOME) */
+    readonly homeRelativeDir: string;
+    /** 🔴 这一条的出处 —— 没有出处就不许进这张表 */
+    readonly evidence: string;
+};
+export declare const RUNTIME_BINARY_HINTS: readonly RuntimeBinaryHint[];
+export type PathPreflightInput = {
+    /** 这台 daemon 声称支持的 runtime */
+    readonly runtimes: readonly string[];
+    /** 二进制在 daemon 的 PATH 上能不能找到 */
+    readonly resolvesOnPath: (binary: string) => boolean;
+    /** 二进制在那个已知位置存不存在 */
+    readonly existsInHomeDir: (homeRelativeDir: string, binary: string) => boolean;
+};
+/** 返回要打给用户的警告。**没问题时返回空数组** —— 空是常态,不是失败。 */
+export declare function daemonPathWarnings(input: PathPreflightInput): string[];

package/dist/src/daemon-runtime-staleness.d.ts

@@ -0,0 +1,13 @@
+/**
+ * daemon 的 `runtimes_supported` 是**写配置那一刻**的支持集快照，之后不会自愈。
+ *
+ * 🔴 这不是假想的：#1298 (2026-08-28) 把新建 daemon 的默认清单从 3 个放开到
+ *    `SUPPORTED_RUNTIME_NAMES` 全体，但**它只改了写入路径**。在那之前 init 过的
+ *    daemon，配置里仍然只有那 3 个，而且没有任何东西会说出这件事 ——
+ *    用户在客户端「选服务器」里看到某台机器少几个 runtime，
+ *    既不知道为什么，也不知道该做什么。
+ *
+ * 判据从**分发处**取（`SUPPORTED_RUNTIME_NAMES`），不在这里手写一份清单：
+ * 抄一份就意味着它会再漂一次（同 #1728 的教训）。
+ */
+export declare function describeStaleRuntimeSupport(declared: readonly string[] | undefined | null, supported: readonly string[], nameHint?: string): string | null;

package/dist/src/dashboard-managed-process.d.ts

@@ -0,0 +1,35 @@
+export type DashboardLaunchSource = "npx" | "global";
+export interface DashboardLaunchRecord {
+    schema: 1;
+    port: number;
+    listener_pid: number;
+    listener_birth: string;
+    source: DashboardLaunchSource;
+    source_key: string;
+    recorded_at: string;
+}
+export type DashboardListenerDecision = {
+    action: "start";
+} | {
+    action: "already_running";
+    pid: number;
+} | {
+    action: "terminate_owned_stale";
+    pid: number;
+    reason: "unhealthy" | "version_changed";
+} | {
+    action: "refuse";
+    reason: string;
+};
+export declare function isDashboardProcessCommand(command: string): boolean;
+export declare function decideDashboardListener(input: {
+    port: number;
+    listenerPids: number[];
+    record: DashboardLaunchRecord | null;
+    listenerBirth: string | null;
+    listenerCommand: string | null;
+    desiredSource: DashboardLaunchSource;
+    desiredSourceKey: string;
+    healthy: boolean;
+}): DashboardListenerDecision;
+export declare function parseDashboardLaunchRecord(value: unknown): DashboardLaunchRecord | null;

package/dist/src/display-width.d.ts

@@ -0,0 +1,27 @@
+/**
+ * 终端里的**显示列宽** —— CJK 字符占 2 列,而 `String.length` / `padEnd` 只数码元。
+ *
+ * 🔴 这份知识仓里本来就有,但它只活在**一个测试文件**里
+ * (`daemon-capability-display.test.ts` 的 `displayWidth`,2026-08-30 由 macOS 真机
+ * 上「合成首行约 99 列、80 列终端折行且折点落在句子中间」催生)。
+ * 生产代码没有它,于是所有用 `padEnd` 对齐的表在中文别名下都是歪的。
+ *
+ * 实测(2026-08-31,`anet node ls` 对着一支全中文别名的军团):
+ *
+ *   NAME                 RUNTIME        STATUS
+ *   ──────────────────── ────────────── ────────
+ *   通信工程马                claude-code-cli idle      ← RUNTIME 列起点
+ *   通信IM马                claude-code-cli idle       ← 不一样
+ *   通信SDK牛               codex-sdk      idle        ← 又不一样
+ *
+ * `通信工程马`.length 是 5,`padEnd(20)` 补 15 个空格 —— 但它渲染出来是 10 列,
+ * 于是这一行实际占 25 列而不是 20。**别名里 CJK 越多,歪得越远。**
+ */
+export declare function displayWidth(s: unknown): number;
+/**
+ * 按**显示列**右补空格。已经不短于目标宽度时原样返回(与 `padEnd` 一致,不截断)。
+ *
+ * 🔴 不截断是有意的:截断会引出「截到一半的宽字符」这个新问题,
+ *    而调用方要的只是对齐。**一个修对齐的改动不该顺手引入截断语义。**
+ */
+export declare function padDisplayEnd(s: unknown, width: number): string;

package/dist/src/doctor-node-count.d.ts

@@ -0,0 +1,28 @@
+/**
+ * `anet doctor` 原先对「本机配置了几个节点」的判定是:
+ *
+ *   check("Nodes configured", ids.length > 0, `${ids.length} node(s)`);
+ *
+ * 于是 **0 个节点 → ❌**。而一个刚装好、还没建节点的人跑 `anet doctor`,
+ * 看到的是:
+ *
+ *   ❌ Nodes configured — 0 node(s)
+ *   Result: 9 ok, 3 warnings, 2 errors
+ *
+ * 🔴 「还没有节点」是**全新安装的预期状态**,不是故障。把它报成 error,
+ *    等于在新用户的第一次诊断里制造一个假警报 —— 而这条命令存在的意义
+ *    正是告诉他「你这台机器现在好不好」。
+ *
+ * 🔴 但也不能反过来直接判成「一切正常」:同一个 0 对一个**本来有节点**的人
+ *    意味着配置目录不见了。doctor 手上只有一个数字,**分不出这两种现实**。
+ *    所以这里既不报错也不报好 —— 把两种都说出来,让读的人自己对号,
+ *    并给出各自的下一步。
+ */
+export type NodeCountLine = {
+    ok: true;
+    detail: string;
+} | {
+    ok: false;
+    info: string;
+};
+export declare function nodeCountLine(count: number): NodeCountLine;

package/dist/src/environ-alias.d.ts

@@ -0,0 +1,14 @@
+/** Parse the environ blob (NUL-separated key=val) and return the
+ *  COMMHUB_ALIAS value if present, else null. Exported for testing. */
+export declare function parseEnvironAlias(environBlob: string): string | null;
+/** Read /proc/<pid>/environ and return the COMMHUB_ALIAS value.
+ *  Any file-read error (not-a-Linux, permission denied, race with
+ *  process exit) returns null — caller must not fail-closed on that
+ *  (the process is stale/gone/inaccessible, not our problem). */
+export declare function readEnvironAlias(pid: number): string | null;
+/** Scan /proc for pids whose COMMHUB_ALIAS env matches any of the
+ *  target aliases. Linux-only (procfs); returns null on non-Linux or
+ *  when /proc is unreadable — caller MUST fail-closed on null per
+ *  the same #180 R2 fail-closed contract as findNodeProcessesByAlias.
+ *  Self-pid + init (PID 1) are excluded. */
+export declare function findEnvironAliasMatches(aliases: Iterable<string>, selfPid: number): number[] | null;

package/dist/src/grok-attach-client.d.ts

@@ -0,0 +1,129 @@
+import type { Duplex } from "node:stream";
+export declare const GROK_ATTACH_PROTOCOL = "anet-grok-copresence-attach";
+export declare const GROK_ATTACH_PROTOCOL_VERSION = 1;
+export declare const GROK_ATTACH_DEFAULT_MAX_FRAME_BYTES: number;
+export declare const GROK_ATTACH_DEFAULT_MAX_BUFFER_BYTES: number;
+export declare const GROK_ATTACH_DEFAULT_HANDSHAKE_TIMEOUT_MS = 5000;
+export declare const GROK_ATTACH_DEFAULT_CLOSE_TIMEOUT_MS = 1000;
+export type GrokAttachJsonValue = null | boolean | number | string | GrokAttachJsonValue[] | {
+    [key: string]: GrokAttachJsonValue;
+};
+export interface GrokAttachHelloFrame {
+    type: "hello";
+    protocol: typeof GROK_ATTACH_PROTOCOL;
+    version: typeof GROK_ATTACH_PROTOCOL_VERSION;
+    alias: string;
+    sessionId: string;
+    [key: string]: unknown;
+}
+export interface GrokAttachOutputFrame {
+    type: "output";
+    data: string;
+    encoding: "base64";
+}
+export interface GrokAttachStatusFrame {
+    type: "status";
+    status: GrokAttachJsonValue;
+}
+export interface GrokAttachErrorFrame {
+    type: "error";
+    code: string;
+    message: string;
+    fatal: boolean;
+}
+export interface GrokAttachDetachFrame {
+    type: "detach";
+}
+export type GrokAttachServerFrame = GrokAttachHelloFrame | GrokAttachOutputFrame | GrokAttachStatusFrame | GrokAttachErrorFrame | GrokAttachDetachFrame;
+export interface GrokAttachInputFrame {
+    type: "input";
+    data: string;
+    encoding: "base64";
+}
+export interface GrokAttachResizeFrame {
+    type: "resize";
+    cols: number;
+    rows: number;
+}
+/** Asks the node to switch models (issue #879); allowed on control connections. */
+export interface GrokAttachSetModelFrame {
+    type: "set-model";
+    model: string;
+}
+export type GrokAttachClientFrame = GrokAttachInputFrame | GrokAttachResizeFrame | GrokAttachSetModelFrame | GrokAttachDetachFrame;
+export interface GrokAttachInputSource {
+    on(event: "data", listener: (chunk: unknown) => void): unknown;
+    on(event: "end", listener: () => void): unknown;
+    off?(event: "data" | "end", listener: (...args: any[]) => void): unknown;
+    removeListener?(event: "data" | "end", listener: (...args: any[]) => void): unknown;
+    pause?(): unknown;
+    resume?(): unknown;
+}
+export interface GrokAttachOutputSink {
+    write(chunk: Uint8Array): boolean | void;
+    columns?: number;
+    rows?: number;
+    once?(event: "drain", listener: () => void): unknown;
+}
+export interface GrokAttachSignalSource {
+    on(event: "SIGWINCH", listener: () => void): unknown;
+    off?(event: "SIGWINCH", listener: () => void): unknown;
+    removeListener?(event: "SIGWINCH", listener: () => void): unknown;
+}
+export interface GrokAttachSocketStat {
+    uid: number;
+    isSocket(): boolean;
+    isSymbolicLink(): boolean;
+}
+export interface GrokAttachDependencies {
+    lstat?: (socketPath: string) => Promise<GrokAttachSocketStat>;
+    getuid?: () => number | undefined;
+    connect?: (socketPath: string) => Duplex;
+}
+export interface GrokAttachClientOptions {
+    socketPath: string;
+    input: GrokAttachInputSource;
+    output: GrokAttachOutputSink;
+    signalSource?: GrokAttachSignalSource;
+    terminalSize?: () => {
+        cols: number | undefined;
+        rows: number | undefined;
+    };
+    maxFrameBytes?: number;
+    maxBufferBytes?: number;
+    handshakeTimeoutMs?: number;
+    closeTimeoutMs?: number;
+    detachOnInputEnd?: boolean;
+    onHello?: (frame: GrokAttachHelloFrame) => void;
+    onStatus?: (frame: GrokAttachStatusFrame) => void;
+    onError?: (error: Error, frame?: GrokAttachErrorFrame) => void;
+    onDetach?: (frame: GrokAttachDetachFrame) => void;
+    dependencies?: GrokAttachDependencies;
+}
+export type GrokAttachCloseReason = "local-detach" | "input-end" | "remote-detach" | "socket-close" | "socket-error" | "protocol-error";
+export interface GrokAttachCloseInfo {
+    reason: GrokAttachCloseReason;
+    error?: Error;
+}
+export interface GrokAttachSession {
+    readonly socketPath: string;
+    readonly closed: Promise<GrokAttachCloseInfo>;
+    detach(): void;
+    resize(cols?: number, rows?: number): void;
+    /**
+     * Ask the node to switch models (issue #879).
+     *
+     * The outcome does not come back from this call — it arrives as a `status`
+     * frame carrying `modelSwitch`, because the node may accept, refuse
+     * (busy / unchanged / invalid), or fail while re-spawning. Callers read it
+     * through `onStatus`.
+     */
+    setModel(model: string): void;
+}
+export declare class GrokAttachRemoteError extends Error {
+    readonly code: string;
+    readonly fatal: boolean;
+    constructor(frame: GrokAttachErrorFrame);
+}
+export declare function validateGrokAttachSocket(socketPath: string, dependencies?: GrokAttachDependencies): Promise<void>;
+export declare function connectGrokAttach(options: GrokAttachClientOptions): Promise<GrokAttachSession>;

package/dist/src/grok-build-drift.d.ts

@@ -0,0 +1,15 @@
+/** 从一段日志文本里取出**最后一次**出现的 grok 版本串。
+ *  🔴 取最后一次，不是第一次：日志按时间追加，最后一次才是这个进程最近一次
+ *     启动时用的那个。取第一次会在日志轮转/多次重启后指向历史。 */
+export declare function parseGrokBuildFromLog(text: string): string | undefined;
+/** 从 `grok --version` 的输出里取版本串（同一形状）。 */
+export declare function parseGrokBuildFromVersionOutput(out: string): string | undefined;
+export type GrokBuildDriftKind = "match" | "drift" | "unknown-current" | "unknown-started";
+export interface GrokBuildDrift {
+    readonly kind: GrokBuildDriftKind;
+    readonly started?: string;
+    readonly current?: string;
+    /** 一句人读的话。四种 kind 四句不同的话 —— 含糊化等于把这一格的功能删掉。 */
+    readonly line: string;
+}
+export declare function describeGrokBuildDrift(started: string | undefined, current: string | undefined): GrokBuildDrift;

package/dist/src/grok-copresence-disclosure.d.ts

@@ -0,0 +1,11 @@
+export type GrokCopresenceSessionDisclosure = "configured" | "new" | "resume";
+export type GrokCopresenceDisclosure = {
+    profile: "commhub-only" | "x-search" | "repo-read" | "invalid";
+    lines: readonly string[];
+};
+/**
+ * Describe only the exact tool profiles accepted by the pinned Grok TUI
+ * runtime. This is deliberately exact: a near-miss must never be presented as
+ * either reviewed capability set.
+ */
+export declare function grokCopresenceDisclosure(tools: unknown, session?: GrokCopresenceSessionDisclosure): GrokCopresenceDisclosure;

package/dist/src/grok-copresence-orchestration.d.ts

@@ -0,0 +1,75 @@
+/** tmux session names. The attachable TUI owns the bare alias so that
+ *  `tmux attach -t '=<alias>'` lands a human on the TUI, matching the codex
+ *  lane exactly — an operator should not have to remember which runtime a node
+ *  uses in order to know where to attach. */
+export declare function grokCopresenceSessions(displayName: string): {
+    node: string;
+    tui: string;
+};
+export type GrokAttachSocketState = "missing" | "not_a_socket" | "ready";
+/** Readiness is "the attach socket exists AND is a socket", never "the child
+ *  process started". A grok leader that dies during startup leaves either no
+ *  socket at all or a stale regular file from an aborted run; both used to read
+ *  as ready because nothing looked. */
+export declare function grokAttachSocketState(entry: {
+    isSocket(): boolean;
+} | null | undefined): GrokAttachSocketState;
+/** Set on the node child so that `anet node start` inside the tmux session does
+ *  not re-enter this orchestration and fork bomb. The codex lane guards on the
+ *  same variable (cli.ts: `process.env.ANET_COPRESENCE_BRIDGE !== "1"`); using a
+ *  second name would leave two guards that must be kept in sync by hand. */
+export declare const GROK_COPRESENCE_CHILD_ENV = "ANET_COPRESENCE_BRIDGE";
+export interface GrokCopresenceDiagnosis {
+    readonly ok: boolean;
+    readonly lines: readonly string[];
+    /** #1768 —— 非阻断提示:平台能跑,但 agent-node 的能力表说它少了内核层保证。
+     *  ok=true 时也可能非空;调用方打印它,不退出。 */
+    readonly notices: readonly string[];
+}
+/** One block naming every reason this node cannot run the shared TUI, not one
+ *  exit per reason. A node that is both the wrong runtime AND missing its
+ *  attach socket should learn both in one run. */
+/** Platforms whose PTY / IPC / isolation primitives the grok co-presence lane
+ *  has actually been validated on. agent-node refuses anywhere else, and it does
+ *  so only after the node has been created and started once:
+ *
+ *    [agent-node] grok-build-cli co-presence 无法在 darwin 上运行，缺少：
+ *                 平台 darwin 尚未验证过共存所需的 PTY / IPC / 隔离原语
+ *
+ *  Learned the expensive way on a Mac mini: install anet, install agent-node,
+ *  create the node, start it — and only then find out the platform is refused.
+ *  A one-command launcher that lets someone get that far has not saved them
+ *  anything, so say it in the same breath as every other gap. */
+export declare const GROK_COPRESENCE_PLATFORMS: readonly NodeJS.Platform[];
+/** 能跑但没有内核层强制的平台 —— agent-node 启动时逐条打印 reducedGuarantees,这里只提前说一句。 */
+export declare const GROK_COPRESENCE_REDUCED_GUARANTEE_PLATFORMS: readonly NodeJS.Platform[];
+export declare function diagnoseGrokCopresence(input: {
+    runtime: string;
+    displayName: string;
+    grokCopresence?: boolean;
+    grokAttachSocket?: string;
+    platform?: NodeJS.Platform;
+}): GrokCopresenceDiagnosis;
+/** True when a plain `anet node start <name>` (no flag) should bring the shared
+ *  TUI up by itself.
+ *
+ * 🔴 Deliberately NOT keyed on `grokCopresence`. That field is set to true at
+ *    CREATE time for every grok-build-cli node, so reading it here would silently
+ *    change what `anet node start` does for every grok node that already exists —
+ *    they would stop running in the foreground and fork into tmux, unasked. Caught
+ *    exactly that way: a start without the flag entered the orchestration.
+ *
+ *    The codex lane looks the same but is not: `codexCopresence` is written only
+ *    when the operator passes the flag. So grok needs its own record of the
+ *    operator's choice, and `grokCopresenceAuto` is it. */
+export declare function grokCopresenceRequested(flagPassed: boolean, profile: {
+    runtime?: unknown;
+    grokCopresence?: unknown;
+    grokCopresenceAuto?: unknown;
+}): boolean;
+/** Record the operator's opt-in so the NEXT start needs no flag — and only then.
+ *  Never infer it from `grokCopresence`, which create sets by default. */
+export declare function shouldPersistGrokCopresence(flagPassed: boolean, profile: {
+    runtime?: unknown;
+    grokCopresenceAuto?: unknown;
+}): boolean;