@sleep2agi/agent-network 2.3.0-preview.8 → 2.3.0-preview.80

package/dist/src/process-telemetry.d.ts

@@ -0,0 +1,12 @@
+export interface ProcessTelemetry {
+    rss_bytes: number;
+    rss_mb: number;
+    cpu_pct: number | null;
+    uptime_seconds: number;
+    in_flight_count: number;
+}
+export declare function incrementInFlight(): void;
+export declare function decrementInFlight(): void;
+export declare function getInFlightCount(): number;
+export declare function getProcessTelemetry(): ProcessTelemetry;
+export declare function _resetProcessTelemetry(): void;

package/dist/src/profile-serialize.d.ts

@@ -0,0 +1 @@
+export declare function serializeProfileForConfigJson(normalized: Record<string, any>, profile: Record<string, any>): Record<string, any>;

package/dist/src/project-key.d.ts

@@ -0,0 +1 @@
+export declare function encodeCwd(cwd: string): string;

package/dist/src/reply-originator.d.ts

@@ -0,0 +1,20 @@
+export type ReplyAliasDecision = 
+/** 把 alias 显式发出去 */
+{
+    readonly kind: "known";
+    readonly alias: string;
+}
+/** 省略 alias，交给 hub 从 in_reply_to 推导 */
+ | {
+    readonly kind: "derive";
+}
+/** 没有 task_id 可推导：保持历史行为，发给 hub */
+ | {
+    readonly kind: "hub";
+    readonly alias: "hub";
+};
+export declare function decideReplyAlias(taskId: string | null | undefined, lookup: (taskId: string) => string | undefined): ReplyAliasDecision;
+/** 把决策摊成 send_reply 的参数片段。`derive` 时**不含** alias 键。 */
+export declare function replyAliasArgs(d: ReplyAliasDecision): {
+    alias?: string;
+};

package/dist/src/resume-runtime-infer.d.ts

@@ -0,0 +1,18 @@
+export interface ResumeRuntimeInput {
+    /** raw --resume value; "true" means the flag was present with no value */
+    resume?: string;
+    /** whether --resume-latest was passed */
+    resumeLatest?: boolean;
+    /** an already-resolved session id, if any (skips inference) */
+    session?: string;
+    /** normalized --runtime, or empty/undefined when the user passed none */
+    explicitRuntime?: string;
+}
+export interface ResumeRuntimeResult {
+    /** runtime to force onto opts when it was left to default */
+    inferredRuntime?: string;
+    /** set when an explicit non-cli runtime conflicts with --resume */
+    conflictError?: string;
+}
+export declare const CLAUDE_CODE_CLI = "claude-code-cli";
+export declare function resolveRuntimeForResume(input: ResumeRuntimeInput): ResumeRuntimeResult;

package/dist/src/secret-shell-guidance.d.ts

@@ -0,0 +1,3 @@
+export declare function formatSecretAssignment(platform: string, name: string, value: string): string;
+export declare function secretPersistenceHeading(platform: string): string;
+export declare function secretShellAction(platform: string): "set" | "export";

package/dist/src/session-status-class.d.ts

@@ -0,0 +1,48 @@
+/**
+ * `anet status` 的会话状态分类。
+ *
+ * 🔴 为什么单独成文件:原先它是 statusCommand 里的一个闭包,没有任何测试碰得到它 ——
+ *    而它决定了运维看到的那三个数字。一个把「卡住」算成「在干活」的分类器,
+ *    和一个正确的分类器,在输出上长得一模一样(都是一个数)。
+ *
+ * 🔴 改了什么:`blocked` / `error` 原先被折进 `working`。
+ *    它们的含义是**需要人看一眼**,不是**正在推进**。
+ *    运维看到「5 working」会认为一切正常,而其中可能有几个卡了很久 ——
+ *    #1548 已经证明 `blocked` 是一个**没有出口**的状态:
+ *    只有 report_completion 能把它拉回 idle,所以一个 agent 可以永远停在那里。
+ *
+ * `waiting_input` 保留在 working 里:它是一个**进行中的回合**在等人,
+ * 与 blocked/error 不同 —— 那是回合本身出了问题。
+ */
+export type SessionClass = "idle" | "working" | "attention" | "offline";
+export declare function classifySessionStatus(raw: unknown): SessionClass;
+/**
+ * `anet status` 顶部那三/四个数字。
+ *
+ * 🔴 为什么它必须和上面的分类器用同一套判据(#1625):
+ *    原先 `cli.ts` 是 `statusRes.summary || sessions.reduce(…)`,而
+ *    `/api/status` **总是**返回 summary ⇒ 右边那支从不执行,屏幕上的数字
+ *    来自**服务端**一份还停在 #1548 之前的分类(它把 `blocked`/`error`
+ *    折进 `working`)。于是一个 blocked 节点同时出现在 `working` 和
+ *    `needs attention` 两格里,四个数加起来比总数多一个。
+ *
+ * 🔴 为什么本地算是安全的:`/api/status` 只加 `addNetworkScope`,没有任何
+ *    状态/别名过滤,而它的 summary 就是从**同一个 sessions 数组** reduce 出来的
+ *    —— 两者范围逐字相同。(这一点对 MCP 的 `get_all_status` **不成立**:
+ *    那边 summary 走独立的 `GROUP BY status` 查询、无视 filter,所以别照搬。)
+ *
+ * 🔴 `attention` 必须显式初始化为 0。原来的累加器只有
+ *    `{idle, working, offline, total}`,`acc["attention"]++` 会得到 **NaN**,
+ *    而 `summary.attention ?? attention.length` 里的 `??` **不接 NaN**,
+ *    屏幕会印 `NaN needs attention`。那一支从不执行,所以从没人见过。
+ */
+export type SessionSummary = {
+    idle: number;
+    working: number;
+    attention: number;
+    offline: number;
+    total: number;
+};
+export declare function summarizeSessions(sessions: Array<{
+    status?: unknown;
+}>): SessionSummary;

package/dist/src/stale-socket.d.ts

@@ -0,0 +1,118 @@
+export interface StaleSocketProbes {
+    /** 读 /proc/net/unix 全文;读不到就 throw(调用方按 fail-closed 处理)。 */
+    procNetUnix(): string;
+    /** 路径不存在返回 null。 */
+    lstat(path: string): {
+        dev: number;
+        ino: number;
+        uid: number;
+        isSocket: boolean;
+    } | null;
+    unlink(path: string): void;
+    /** 当前进程 uid —— 只回收自己拥有的 socket。 */
+    currentUid(): number;
+}
+export interface ReapScope {
+    /**
+     * 只允许回收这个目录**之下**的路径。
+     * 🔴 这一格防的不是文件系统竞态,是**被污染的 identity**:socket 路径来自
+     *    profile,如果 profile 被写坏成 `/run/systemd/private` 之类,前面所有
+     *    "无监听者"检查都会照常通过,然后 unlink 掉一个不属于这个节点的东西。
+     *    删除不可逆,所以范围校验必须在**所有**其它检查之前。
+     */
+    allowedRoot: string;
+}
+export type ReapOutcome = 
+/** 路径已经不在了 —— 正常的成功拆卸,无事可做。 */
+{
+    kind: "absent";
+}
+/** 确认无人引用,已删除。 */
+ | {
+    kind: "removed";
+}
+/** /proc/net/unix 里仍能找到这个路径 ⇒ 有人在用,**不删**,调用方应判红。 */
+ | {
+    kind: "in-use";
+}
+/** /proc/net/unix 读不到 ⇒ fail-closed,不删。 */
+ | {
+    kind: "unreadable";
+    detail: string;
+}
+/** 检查与删除之间文件身份变了(dev/ino/uid),或已不是 socket ⇒ 不删。 */
+ | {
+    kind: "changed";
+}
+/** 路径不在该节点自己的 runtime 目录之下 ⇒ 一律不删。 */
+ | {
+    kind: "out-of-scope";
+    detail: string;
+};
+/**
+ * `/proc/net/unix` 的每一行以路径结尾(没有绑定路径的行就没有这一列)。
+ * 这里只问「这个路径出现过没有」,不解释 flags/type/state。
+ */
+export declare function unixSocketPathInUse(procNetUnix: string, path: string): boolean;
+/**
+ * 属主进程**已被证明消失之后**,回收一个陈旧的 socket 路径名。
+ * 任何一种不确定都不删 —— 删文件不可逆,而留下一个 socket 只是让 stop 判红,
+ * 那正是本函数之前的行为。
+ */
+export declare function reapStaleSocket(path: string, probes: StaleSocketProbes, scope: ReapScope): ReapOutcome;
+/**
+ * 从「本次 stop 看到的残留路径」里挑出**允许回收**的那些。
+ *
+ * 🔴 判据是「与重新算出来的规范路径**完全相等**」,不是前缀、不是包含。
+ *    profile 里存的 socket 路径是**被写坏就会跟着坏**的数据;
+ *    grokCopresenceSocketPaths 是纯函数,同样的 nodeId + home 永远算出同一个值。
+ *    所以这里不问「这条路径看起来对不对」,只问「它是不是我自己算出来的那两个之一」。
+ *    ——一个被污染的 profile 因此一条都带不进来。
+ */
+export declare function planReapableSockets(canonical: {
+    leaderSocket: string;
+    attachSocket: string;
+}, residualPaths: readonly (string | undefined)[]): string[];
+export interface CanonicalSocketProfile {
+    node_id?: string;
+    grokLeaderSocket?: string;
+    grokAttachSocket?: string;
+}
+export type CanonicalSocketsOutcome = {
+    kind: "ok";
+    leaderSocket: string;
+    attachSocket: string;
+}
+/** profile 里没有 node_id —— 算不出来,不动手。 */
+ | {
+    kind: "no-node-id";
+}
+/** 重新算出来的与 profile 存的不一致 —— profile 被写坏、HOME 变了、或**调用方喂错了 id**。 */
+ | {
+    kind: "mismatch";
+    recomputedLeader: string;
+    storedLeader: string;
+}
+/** 路径算不出来(grokCopresenceSocketPaths 抛错)—— 不动手,但也不该把 stop 整个弄失败。 */
+ | {
+    kind: "uncomputable";
+    detail: string;
+};
+/**
+ * 从 profile 推出规范 socket 路径,并**与 profile 里存的那份交叉校验**。
+ *
+ * 🔴 这个交叉校验是一次真实缺陷催生的,不是补全性写的:
+ *    我第一版在 cli.ts 里写的是 `grokCopresenceSocketPaths(resolved.id)`,而
+ *    `resolveNodeRef` 返回的 `id` 是**目录名(别名)**,socket 路径却是
+ *    `anet node create` 用 **node_id** 算的。两者哈希不同 ⇒ 算出的路径永远对不上 ⇒
+ *    可回收集合恒为空 ⇒ **一条都回收不了,而且完全静默**(循环体一次都不进)。
+ *    12 轮验收里 4 次红、0 次回收,红话与修复前逐字相同 —— 从外面看,
+ *    「守卫拒绝了一切」和「这个修复不存在」是同一个样子。
+ *
+ *    所以判据不能只是「算一个路径出来」,必须是「算出来的和存着的对得上」。
+ *    对不上就说出来,别静默跳过。
+ */
+export declare function canonicalSocketsForProfile(profile: CanonicalSocketProfile, compute: (nodeId: string) => {
+    leaderSocket: string;
+    attachSocket: string;
+}): CanonicalSocketsOutcome;

package/dist/src/subcommand-redirect.d.ts

@@ -0,0 +1,26 @@
+/**
+ * `anet daemon <sub>` 认不出子命令时，原先只走 `suggestSimilar`，而它的候选集
+ * 是 `["init","start","restart","up","list"]` —— **全是会改变状态的命令**。
+ *
+ * 🔴 实测（用仓里那个 `suggestSimilar` 本身跑的，不是推的）：
+ *
+ *      anet daemon rm     → 建议 "up"      想删,被指去「创建 + 启动」
+ *      anet daemon state  → 建议 "start"   想看状态,被指去「启动」
+ *      anet daemon stat   → 建议 "start"   同上
+ *      anet daemon stop   → 建议 null      (levenshtein("stop","start") = 3)
+ *
+ * 一个「你是不是想 X」的提示，把只读/销毁意图导向一个会动世界的命令，
+ * 比不给提示更贵。
+ *
+ * 而这些动作**本来就有**：daemon 就是一个 role=host_supervisor 的 agent-node，
+ * `anet daemon restart` 内部调的正是 `anet node stop` 用的那个 stopCommand()。
+ * 缺的从来不是功能，是**可发现性**。
+ */
+/** 这些是 `anet daemon` 自己的子命令 —— 它们**会改变状态**，所以任何
+ *  只读/销毁意图都不该被导向它们。测试用它做对照。 */
+export declare const DAEMON_STATE_CHANGING: readonly ["init", "start", "restart", "up"];
+export declare const PROJECT_STATE_CHANGING: readonly ["up", "restart"];
+export declare const NODE_STATE_CHANGING: readonly ["create", "start", "restart", "resume", "rename", "loop"];
+export declare const daemonSubcommandRedirect: (sub: unknown, name?: unknown) => string[] | null;
+export declare const projectSubcommandRedirect: (sub: unknown, name?: unknown) => string[] | null;
+export declare const nodeSubcommandRedirect: (sub: unknown, name?: unknown) => string[] | null;

package/dist/src/task-trace.d.ts

@@ -0,0 +1,33 @@
+export type TaskTraceTransport = "mcp_http" | "sdk_mcp_proxy" | "channel_mcp_proxy";
+export type TaskTraceStatus = "sending" | "delivered" | "failed" | "acked" | "started" | "replied" | "expired";
+export interface TaskTraceEvent {
+    event: string;
+    from_alias: string;
+    to_alias: string;
+    task_id: string | null;
+    parent_task_id: string | null;
+    network_id: string | null;
+    transport: TaskTraceTransport;
+    status: TaskTraceStatus;
+    duration_ms: number;
+    lifecycle_tracking: "tracked" | "not_tracked";
+    error_code?: string;
+    error_message?: string;
+}
+export declare function safeTaskTraceError(value: unknown): string;
+export declare function renderTaskTrace(event: TaskTraceEvent, json?: boolean): string;
+export declare function taskTraceEvent(input: Omit<TaskTraceEvent, "event">): TaskTraceEvent;
+export interface SendTaskTraceInput {
+    fromAlias: string;
+    toAlias: string;
+    parentTaskId: string | null;
+    networkId: string | null;
+    transport: TaskTraceTransport;
+    lifecycleTracking: "tracked" | "not_tracked";
+}
+export interface SendTaskTraceDependencies {
+    send: () => Promise<any>;
+    log: (line: string) => void;
+    now?: () => number;
+}
+export declare function sendTaskWithTrace(input: SendTaskTraceInput, dependencies: SendTaskTraceDependencies): Promise<any>;

package/dist/src/tmux-attach.d.ts

@@ -0,0 +1,8 @@
+export type TmuxSession = {
+    id: string;
+    name: string;
+};
+export declare function parseTmuxSessions(output: string): TmuxSession[];
+/** Resolve by exact decoded session name, then attach by tmux's opaque ID.
+ * This avoids tmux target prefix matching and works for Unicode names. */
+export declare function findExactTmuxSession(output: string, expectedName: string): TmuxSession | null;

package/dist/src/tmux-capability.d.ts

@@ -0,0 +1,58 @@
+/** Lowest tmux version whose `new-session` understands `-e KEY=VALUE`. */
+export declare const MIN_TMUX_MAJOR = 3;
+export declare const MIN_TMUX_MINOR = 2;
+export interface TmuxVersion {
+    major: number;
+    minor: number;
+    /** Trailing letter suffix, e.g. the "a" of "3.0a". Not used for ordering. */
+    suffix: string;
+    raw: string;
+}
+/**
+ * Parse the output of `tmux -V`, e.g.:
+ *   "tmux 3.2a"        → { major: 3, minor: 2,  suffix: "a" }
+ *   "tmux 3.0a"        → { major: 3, minor: 0,  suffix: "a" }
+ *   "tmux 3.4"         → { major: 3, minor: 4,  suffix: ""  }
+ *   "tmux next-3.4"    → { major: 3, minor: 4,  suffix: ""  }
+ *   "tmux 2.9"         → { major: 2, minor: 9,  suffix: ""  }
+ *
+ * Returns null when no version can be extracted (unknown build, empty
+ * output, `tmux master` with no numbers). Callers must treat null as
+ * "unknown" and NOT as "too old" — refusing to start on an unparseable
+ * version string would break hosts whose tmux is perfectly capable.
+ */
+export declare function parseTmuxVersion(raw: string): TmuxVersion | null;
+/**
+ * True when this version's `new-session` supports `-e KEY=VALUE` (>= 3.2).
+ * Note 3.0a / 3.1c sort BELOW 3.2 — the letter suffix is a patch marker,
+ * never a minor bump, so it must not participate in the comparison.
+ */
+export declare function tmuxSupportsSessionEnv(v: TmuxVersion): boolean;
+export type TmuxCapabilityVerdict = {
+    kind: "ok";
+    version: TmuxVersion;
+} | {
+    kind: "unknown";
+    detail: string;
+} | {
+    kind: "too_old";
+    version: TmuxVersion;
+    detail: string;
+    remedy: string[];
+} | {
+    kind: "missing";
+    detail: string;
+    remedy: string[];
+};
+/**
+ * Pure decision function — `runVersionCmd` returns `tmux -V` output, or
+ * throws if tmux is absent/unrunnable. Split from the printing/exiting
+ * wrapper so tests drive every branch without a tmux binary.
+ */
+export declare function checkTmuxCapability(runVersionCmd: () => string): TmuxCapabilityVerdict;
+/**
+ * cli.ts wrapper: run the check, print an actionable message, and exit
+ * non-zero when tmux cannot carry the marker. `unknown` is deliberately
+ * permissive — we log and continue.
+ */
+export declare function assertTmuxSupportsSessionEnv(runVersionCmd: () => string, log: (msg: string) => void, fail: (msg: string) => never): void;

package/dist/src/tmux-exact-target.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Exact-match tmux target for a session name.
+ *
+ * tmux treats a leading `=` as "this exact name, no prefix matching". Names are
+ * passed to tmux as argv entries, never through a shell, so no quoting belongs
+ * here — callers that build a copy-pasteable command for a human should shell-
+ * quote the result themselves.
+ */
+export declare function exactSession(name: string): string;
+/**
+ * True when this target is already pinned to an exact session.
+ *
+ * Applying the prefix twice would look for a session literally named `=x`.
+ */
+export declare function isExactTarget(target: string): boolean;
+/** Idempotent form, for call sites that may receive either shape. */
+export declare function ensureExactSession(nameOrTarget: string): string;
+/** One row of `tmux list-panes -a -F '#{session_name}\t#{window_index}.#{pane_index}'`. */
+export interface PaneRow {
+    session: string;
+    /** `window.pane`, e.g. `0.0`. */
+    coord: string;
+}
+export declare function parsePaneRows(listOutput: string): PaneRow[];
+/**
+ * Pane target for a session, or null when that exact session has no pane.
+ *
+ * Matching is exact string equality on the session name — the whole point is to
+ * not hand tmux a name it might prefix-match, and to not hand it a `=` form it
+ * cannot resolve for non-ASCII names.
+ */
+export declare function paneTargetFor(listOutput: string, sessionName: string): string | null;
+/** The format string the two functions above expect. */
+export declare const PANE_LIST_FORMAT = "#{session_name}::ANET_PANE::#{window_index}.#{pane_index}";

package/dist/src/tmux-pane-prompt.d.ts

@@ -0,0 +1,22 @@
+/** A prompt the watcher knows how to answer, or null. */
+export type PanePrompt = "dev-channels" | "folder-trust";
+/**
+ * Which known prompt (if any) the pane is currently blocking on.
+ *
+ * Dev-channels is checked FIRST, even though it appears second in time. The two
+ * prompts are sequential — trust, then channels — so a capture showing both
+ * means the trust prompt is already answered and only its text is still sitting
+ * in the pane. Classifying that as "folder-trust" would make a watcher that has
+ * already answered trust ignore the prompt it was waiting for, and the node
+ * would hang exactly as if the fix had never been made. Preferring the later
+ * prompt keeps a stale line of scrollback from outranking the live prompt.
+ */
+export declare function classifyPanePrompt(pane: string): PanePrompt | null;
+/**
+ * Best-effort one-line explanation of why a detached start died, taken from the
+ * dead pane's own output.
+ *
+ * Returns null when the pane holds nothing that looks like a refusal — the
+ * caller must then fall back to a generic message rather than inventing one.
+ */
+export declare function extractStartFailureReason(pane: string): string | null;

package/dist/src/token-cli.d.ts

@@ -0,0 +1,13 @@
+export type TokenCreateNameResult = {
+    ok: true;
+    name: string;
+} | {
+    ok: false;
+    error: string;
+};
+/** Parse only `anet token create` operands.
+ *
+ * The legacy positional form stays supported, while flag parsing is strict so
+ * a typo cannot become the name of a newly issued credential.
+ */
+export declare function parseTokenCreateName(argv: readonly string[]): TokenCreateNameResult;

package/dist/src/tool-allowlist.d.ts

@@ -0,0 +1,28 @@
+export declare const CLAUDE_KNOWN_TOOLS: readonly string[];
+type Runtime = string;
+/** Parse the comma-joined --tools string, validate each token, return the
+ * trimmed list. Runtime-scoped:
+ *
+ *   Claude-lineage → each token must be in CLAUDE_KNOWN_TOOLS OR match
+ *                    the MCP pattern (mcp__<server>__<tool>).
+ *   Other runtimes → only the basic per-token format check runs, so grok /
+ *                    codex / opencode tools flow through unchanged and get
+ *                    validated by their own downstream layers.
+ *
+ * Throws on the first offense with a message naming the bad token and,
+ * for Claude-side violations, the expected set. Never returns a
+ * partially-cleaned list — a typo must surface, not silently reshape the
+ * persisted profile.
+ */
+export declare function parseAndValidateTools(raw: string, runtime: Runtime): string[];
+/** Minimal --model validation: non-empty after trim, no whitespace inside.
+ *
+ * We do NOT enforce a known-model allowlist — models are vendor-defined,
+ * evolve independently, and a strict list would break the first time
+ * MiniMax/DeepSeek/GLM/etc. ships a new variant. This catches the obvious
+ * user-side typos (`--model " claude-3 " `, `--model ""`) without
+ * over-restricting legitimate values. Vendor-side model resolution
+ * (defaultCodexModelForRuntime etc.) already validates its own contract.
+ */
+export declare function validateModel(raw: string): string;
+export {};

package/dist/src/unsafe-package-path-reason.d.ts

@@ -0,0 +1,17 @@
+export interface PathModeFacts {
+    /** Owner uid of the path. */
+    uid: number;
+    /** Permission bits (st_mode & 0o777). */
+    mode: number;
+    /** uid of the process doing the check. */
+    processUid: number;
+}
+export type UnsafePathReason = "owner" | "group-writable" | "world-writable" | null;
+/** Which condition makes this path unsafe to execute from, if any. */
+export declare function classifyUnsafePath(facts: PathModeFacts): UnsafePathReason;
+/**
+ * Operator-facing explanation. Names the path, the offending bits, and the
+ * command that fixes it — a message that says only "unsafe" leaves the reader
+ * guessing between four different conditions.
+ */
+export declare function describeUnsafePath(path: string, facts: PathModeFacts): string;

package/dist/src/win-launcher.d.ts

@@ -0,0 +1,20 @@
+import { type ExecFileSyncOptions, type ExecFileSyncOptionsWithStringEncoding, type SpawnOptions } from "child_process";
+/** Windows needs a command interpreter to run a .cmd; POSIX runs the file. */
+export declare function launcherNeedsShell(platform?: NodeJS.Platform): boolean;
+/**
+ * Quote one argument for `cmd.exe /c`.
+ *
+ * cmd's rules are not the shell's: a double quote is escaped by doubling it,
+ * and the metacharacters below must be quoted or cmd will act on them. Anything
+ * safe is left bare, so the common case stays readable in a process listing.
+ */
+export declare function quoteForCmd(arg: string): string;
+/** The argv to hand to execFile/spawn so `cmd args…` runs on this platform. */
+export declare function launcherArgv(cmd: string, args: readonly string[], platform?: NodeJS.Platform, comspec?: string | undefined): {
+    file: string;
+    argv: string[];
+};
+export declare function runLauncherSync(cmd: string, args: readonly string[], options: ExecFileSyncOptionsWithStringEncoding): string;
+export declare function runLauncherSync(cmd: string, args: readonly string[], options?: ExecFileSyncOptions): Buffer;
+/** spawn for a launcher, correct on Windows. */
+export declare function spawnLauncher(cmd: string, args: readonly string[], options?: SpawnOptions): import("node:child_process").ChildProcess;

package/dist/src/windows-codex-copresence.d.ts

@@ -0,0 +1,60 @@
+export type WindowsCopresenceRole = "appsrv" | "bridge";
+export interface WindowsManagedProcess {
+    role: WindowsCopresenceRole;
+    pid: number;
+    creationDate: string;
+    logPath: string;
+}
+export interface WindowsCopresenceRecord {
+    version: 1 | 2;
+    nodeId: string;
+    createdAt: string;
+    marker?: string;
+    processes: WindowsManagedProcess[];
+}
+export declare function windowsCopresenceRecordPath(nodesDir: string, nodeId: string): string;
+export declare function windowsCopresenceLogPath(nodesDir: string, nodeId: string, role: WindowsCopresenceRole): string;
+export declare function openPrivateAppendLog(path: string): number;
+/** Protect credential-bearing state with native Windows ACLs. */
+export declare function ensureWindowsPrivateDirectory(path: string): void;
+export declare function closeLog(fd: number): void;
+export type CreationDateProbe = (pid: number) => string | null;
+/** Uses CIM instead of locale-dependent tasklist output. */
+export declare function probeWindowsCreationDate(pid: number): string | null;
+/**
+ * Attribute an ESTABLISHED loopback connection to the launched TUI process
+ * tree. This is deliberately stronger than counting listeners/connections:
+ * an unrelated local client cannot satisfy it.
+ */
+export declare function probeWindowsOwnedLoopbackConnection(rootPid: number, expectedCreationDate: string, port: number, runPowerShell?: (script: string) => string): boolean;
+/**
+ * #1342 —— 只在健康检查**即将失败**时跑一次,用来回答一个此前没人量过的问题:
+ * 那 10.5 秒到底花在 **PowerShell 启动**上,还是花在 `Get-CimInstance Win32_Process`
+ * 这个全表查询上?
+ *
+ * 实测背景(由 #1628/#1637 加的 probeMs 量到,2026-08-31):
+ *   probes=1  waited=10897ms  probeMsLast=10490   ← 单次探测吃掉 96% 的预算
+ * 而 #1636 把全表枚举提到循环外之后这个数**没有变小**(9963 → 10490),
+ * 说明成本不在"重复枚举",而在那一次调用本身。但"那一次调用"包含两段:
+ * 起一个 powershell 进程,和在里面跑 CIM 查询。**这两段要查的东西完全不同** ——
+ * 前者是 runner/镜像的问题,后者是查询写法的问题。
+ *
+ * 🔴 这里跑的是一个**什么都不做**的脚本(`'x'`),所以它测到的就是启动那一段的下界。
+ *    只在失败路径调用一次,不进探测循环 —— 不给正常路径增加任何成本,
+ *    也**不可能**改变探测的返回值。
+ *
+ * 拿不到就返回 null(未知),不返回 0 —— 0 会被读成「启动不花时间」。
+ */
+export declare function measurePowerShellStartupMs(): number | null;
+export declare function writeWindowsCopresenceRecord(nodesDir: string, nodeId: string, processes: WindowsManagedProcess[], marker?: string): void;
+export declare function readWindowsCopresenceRecord(nodesDir: string, nodeId: string): WindowsCopresenceRecord | null;
+export interface WindowsStopDecision {
+    safe: WindowsManagedProcess[];
+    refused: Array<{
+        process: WindowsManagedProcess;
+        reason: "missing" | "pid-reused";
+    }>;
+}
+/** PID alone is never authority: Windows reuses PIDs, so CreationDate must match. */
+export declare function decideWindowsManagedStop(record: WindowsCopresenceRecord, probe: CreationDateProbe): WindowsStopDecision;
+export declare function taskkillWindowsProcessTree(pid: number): void;

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@sleep2agi/agent-network",
-  "version": "2.3.0-preview.8",
-  "description": "AI Agent Network CLI \u2014 Local-first multi-agent orchestration across 4 runtimes (Claude Code CLI / Claude Agent SDK / Codex SDK / Grok Build ACP) and 8+ LLM providers (Anthropic / OpenAI / xAI Grok / MiniMax / DeepSeek / GLM / Kimi / InternLM / Xiaomi MiMo / OpenRouter). Apache 2.0.",
+  "version": "2.3.0-preview.80",
+  "description": "AI Agent Network CLI — Local-first multi-agent orchestration across 6 runtimes (Claude Code CLI / Claude Agent SDK / Codex SDK / Codex app-server / Grok Build ACP / OpenCode CLI) and 8+ LLM providers. Apache 2.0.",
   "type": "module",
   "main": "dist/src/client.js",
   "types": "dist/client.d.ts",
@@ -9,10 +9,14 @@
     ".": {
       "import": "./dist/src/client.js",
       "types": "./dist/client.d.ts"
+    },
+    "./daemon-capability-display": {
+      "import": "./dist/src/daemon-capability-display.js",
+      "types": "./dist/src/daemon-capability-display.d.ts"
     }
   },
   "bin": {
-    "anet": "dist/bin/cli.js"
+    "anet": "dist/bin/anet.cjs"
   },
   "files": [
     "dist"
@@ -20,7 +24,7 @@
   "scripts": {
     "typecheck": "tsc --noEmit",
     "test:feishu-bridge": "bun tests/feishu-bridge-ackplaceholder.test.ts",
-    "build": "bun build src/client.ts --outdir dist/src --target node --minify && bun build bin/cli.ts --outdir dist/bin --target node --minify --external @sleep2agi/commhub-server --external bun:sqlite --external '../../server/*' && bun build src/node-server.ts --outdir dist/src --target node --minify --external @modelcontextprotocol/sdk && bun build src/im/feishu/worker.ts --outdir dist/src/im/feishu --target node --minify --external @larksuiteoapi/node-sdk && tsc --emitDeclarationOnly --declaration --outDir dist && npx javascript-obfuscator dist/bin/cli.js --output dist/bin/cli.js --compact true --string-array true --string-array-encoding base64 && npx javascript-obfuscator dist/src/client.js --output dist/src/client.js --compact true --string-array true && npx javascript-obfuscator dist/src/node-server.js --output dist/src/node-server.js --compact true --string-array true",
+    "build": "bun build src/client.ts --outdir dist/src --target node --minify && bun build src/daemon-capability-display.ts --outdir dist/src --target browser --minify && bun build bin/cli.ts --outdir dist/bin --target node --minify --external @sleep2agi/commhub-server --external bun:sqlite --external '../../server/*' && bun build src/node-server.ts --outdir dist/src --target node --minify && bun build src/im/feishu/worker.ts --outdir dist/src/im/feishu --target node --minify --external @larksuiteoapi/node-sdk && tsc --emitDeclarationOnly --declaration --outDir dist && npx javascript-obfuscator dist/bin/cli.js --output dist/bin/cli.js --compact true --string-array true --string-array-encoding base64 && npx javascript-obfuscator dist/src/client.js --output dist/src/client.js --compact true --string-array true && npx javascript-obfuscator dist/src/node-server.js --output dist/src/node-server.js --compact true --string-array true && cp bin/anet.cjs dist/bin/anet.cjs",
     "prepublishOnly": "npm run build"
   },
   "keywords": [
@@ -54,7 +58,8 @@
     "directory": "agent-network"
   },
   "publishConfig": {
-    "access": "public"
+    "access": "public",
+    "tag": "preview"
   },
   "bugs": {
     "url": "https://github.com/sleep2agi/agent-network/issues"