@sleep2agi/agent-network 2.3.0-preview.9 → 2.3.0-preview.91

package/dist/bin/goal-wake-log-render.d.ts

@@ -0,0 +1,31 @@
+export interface WakeLogEntryShape {
+    ts?: string;
+    status?: string;
+    summary?: string;
+    task_id?: string;
+}
+export interface WakeLogGoalShape {
+    goal_id: string;
+    progress_log?: WakeLogEntryShape[];
+}
+export interface WakeLogRenderOpts {
+    /** Trim to the last N entries. undefined = all. */
+    tail?: number;
+}
+/**
+ * Format progress_log as a JSON object suitable for `--json` output.
+ * Pure. Never reads/writes filesystem. Legacy goals without
+ * progress_log render as empty array (not error).
+ */
+export declare function renderWakeLogJson(goal: WakeLogGoalShape, opts?: WakeLogRenderOpts): {
+    goal_id: string;
+    total: number;
+    returned: number;
+    entries: WakeLogEntryShape[];
+};
+/**
+ * Format progress_log as a table for human console output.
+ * Column layout mirrors printGoalShow so the two commands read
+ * consistently. Empty log renders a single "(none)" line, not an error.
+ */
+export declare function renderWakeLogText(goal: WakeLogGoalShape, opts?: WakeLogRenderOpts): string;

package/dist/src/active-network-task.d.ts

@@ -0,0 +1,28 @@
+export interface ActiveNetworkTask {
+    taskId: string;
+    from: string;
+    startedAt: number;
+}
+/** 运行时崩溃没来得及删标记时的兜底:超过这个年龄的标记当不存在。 */
+export declare const ACTIVE_NETWORK_TASK_MAX_AGE_MS: number;
+export declare function parseActiveNetworkTask(raw: string | null | undefined, now: number, maxAgeMs?: number): ActiveNetworkTask | null;
+export type OutboundTool = "commhub_send_task" | "commhub_send_message";
+export type OutboundRewrite = {
+    kind: "pass";
+} | {
+    kind: "progress_of_active_task";
+    taskId: string;
+    from: string;
+    text: string;
+};
+/**
+ * 只在「目标 alias 恰好是当前网络任务的发起方」时改写;发给别人的照常放行——
+ * 模型替任务派活给第三方是合法的协作,不能一刀切。
+ */
+export declare function decideOutboundRewrite(tool: OutboundTool, args: {
+    alias?: unknown;
+    task?: unknown;
+    message?: unknown;
+} | null | undefined, active: ActiveNetworkTask | null): OutboundRewrite;
+/** outbound-only 模式下模型不能自选 high(#1770 第三条):降为 normal,其余原样。 */
+export declare function clampOutboundPriority(priority: unknown, outboundOnly: boolean): "high" | "normal" | "low" | undefined;

package/dist/src/batch-workdir.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Resolve one batch workdir before any mkdir/chdir loop starts.
+ *
+ * Node does not expand shell tildes. Leaving `~/team` relative means every
+ * iteration can resolve it from the previous node's cwd and create paths such
+ * as `/work/~/team/~/team`. Only the current user's `~` form is supported;
+ * `~other` is rejected instead of being written as a literal directory.
+ */
+export declare function normalizeBatchWorkdir(input: string, cwd?: string, home?: string): string;

package/dist/src/bootstrap-password-db.d.ts

@@ -0,0 +1,13 @@
+export interface BootstrapPasswordUpdateInvocation {
+    argv: string[];
+    env: NodeJS.ProcessEnv;
+    script: string;
+}
+/**
+ * Resolve the database selected for the local Hub into an explicit absolute
+ * path before launching the bootstrap helper. The helper must never infer a
+ * database from its own HOME/cwd: those can differ from the parent process.
+ */
+export declare function resolveBootstrapDatabasePath(env: NodeJS.ProcessEnv, home: string, cwd: string): string;
+export declare const BOOTSTRAP_PASSWORD_UPDATE_SCRIPT: string;
+export declare function buildBootstrapPasswordUpdateInvocation(userId: string, dbPath: string, baseEnv?: NodeJS.ProcessEnv): BootstrapPasswordUpdateInvocation;

package/dist/src/channel-attachments.d.ts

@@ -0,0 +1,29 @@
+interface AttachmentDescriptor {
+    type?: unknown;
+    file_id?: unknown;
+    path?: unknown;
+    mime?: unknown;
+    name?: unknown;
+    size?: unknown;
+}
+export interface ChannelAttachmentDeps {
+    hubUrl: string;
+    authToken: string;
+    cacheDir: string;
+    fetch?: typeof fetch;
+    maxBytes?: number;
+}
+export interface ChannelAttachmentResult {
+    paths: string[];
+    failures: Array<{
+        fileId: string;
+        code: string;
+        message: string;
+    }>;
+}
+export declare function readableAttachmentsFromInbox(message: any): AttachmentDescriptor[];
+export declare function channelAttachmentCacheDir(home: string, alias: string): string;
+export declare function downloadChannelAttachments(message: any, deps: ChannelAttachmentDeps): Promise<ChannelAttachmentResult>;
+export declare const downloadChannelImageAttachments: typeof downloadChannelAttachments;
+export declare function appendChannelAttachmentPaths(content: string, paths: readonly string[]): string;
+export {};

package/dist/src/channel-meta.d.ts

@@ -0,0 +1,10 @@
+/** One inbound inbox row → the meta Claude Code renders as `<channel …>` attrs.
+ *
+ * Pure so the attribute set is assertable; it used to be inline in the SSE
+ * handler, where nothing could see it. */
+export declare function inboundChannelMeta(msg: {
+    id: string;
+    from_session?: string | null;
+    priority?: string | null;
+    created_at?: string | null;
+}): Record<string, string>;

package/dist/src/channel-task-trace.d.ts

@@ -0,0 +1,14 @@
+export declare function sendChannelTaskWithTrace(input: {
+    alias: string;
+    task: string;
+    priority?: string;
+    fromAlias: string;
+    networkId?: string | null;
+    /** Structured task metadata forwarded verbatim, e.g. { attachments: [...] }.
+     *  Omitted from the outbound body when absent, so a call without it is
+     *  unchanged. */
+    meta?: Record<string, unknown>;
+}, deps: {
+    send: (args: Record<string, unknown>) => Promise<any>;
+    log: (line: string) => void;
+}): Promise<any>;

package/dist/src/claude-vendor-env.d.ts

@@ -0,0 +1,28 @@
+export declare const CLAUDE_VENDOR_ENV_KEYS: readonly ["ANTHROPIC_BASE_URL", "ANTHROPIC_AUTH_TOKEN", "ANTHROPIC_API_KEY"];
+export type PlainSecretEnvRewrite = {
+    key: string;
+    refName: string;
+    value: string;
+};
+/**
+ * Plan the values that the node-create writer will move into its line-oriented
+ * `.env` file. This is deliberately side-effect free: callers can run it as a
+ * preflight before creating a node directory, changing process.env, or writing
+ * config.json. Keeping the line-break rejection here makes it cover every
+ * caller of the dotenv writer, including the no-name interactive wizard.
+ */
+export declare function planPlainSecretEnvRewrites(input: {
+    env: unknown;
+    nodeId: string;
+}): PlainSecretEnvRewrite[];
+/**
+ * Persist the exact Anthropic-compatible vendor environment used by an
+ * explicit claude-agent-sdk create. Explicit --env values retain precedence;
+ * ambient shell values only fill missing known keys. Other environment values
+ * are intentionally ignored so node create never snapshots the whole shell.
+ */
+export declare function collectClaudeVendorEnvForCreate(input: {
+    runtime: string;
+    explicitEnv: readonly string[];
+    shellEnv: Readonly<Record<string, string | undefined>>;
+}): string[];

package/dist/src/cli-args.d.ts

@@ -0,0 +1,8 @@
+export type ParsedCliOptions = {
+    [key: string]: string | string[];
+    _channels: string[];
+    _envs: string[];
+};
+export declare const BOOLEAN_FLAGS: Set<string>;
+export declare function parseCliOptions(argv: string[]): ParsedCliOptions;
+export declare function positionalArgs(argv: string[]): string[];

package/dist/src/cli-version-display.d.ts

@@ -0,0 +1,16 @@
+/**
+ * #1645 —— `anet doctor` 原先对三个 runtime CLI **只检查「在不在」**:
+ *
+ *   try { execSync("codex --version", …); check("Codex CLI", true); } catch { … }
+ *
+ * 于是一个**装着、但太旧**的 CLI 会拿到一个 ✅。实测过一次:`codex-cli 0.149.1`
+ * 解不动上游 models 响应(`unknown variant \`max\``,它只认到 `xhigh`),
+ * rmcp worker 致命退出,用户看到的是 300s 超时 —— 而 doctor 说一切正常。
+ *
+ * 🔴 **这里只把版本摆出来,不做最低版本判定。**
+ *    「多少版本才够」由上游返回什么决定,不是我们能钉死的常量;猜一个下限,
+ *    会在别人升级 CLI、上游又改动之后变成误报。而一个会误报的检查,
+ *    第一周就会被人关掉。摆出实际版本,让读的人自己对得上号,是这一格
+ *    现在能诚实做到的全部。
+ */
+export declare function formatCliVersion(raw: unknown): string;

package/dist/src/client-task-trace.d.ts

@@ -0,0 +1,9 @@
+export declare function sendClientTaskWithTrace(input: {
+    alias: string;
+    fromAlias: string;
+    parentTaskId?: string | null;
+    networkId?: string | null;
+}, dependencies: {
+    send: () => Promise<any>;
+    log: (line: string) => void;
+}): Promise<any>;

package/dist/src/client.js

@@ -1 +1 @@
-const a0_0x5920d3=a0_0x16ff;(function(_0x2ba291,_0x1e2095){const _0x4ffd6f=a0_0x16ff,_0x24cf74=_0x2ba291();while(!![]){try{const _0x494620=parseInt(_0x4ffd6f(0x210))/0x1*(parseInt(_0x4ffd6f(0x206))/0x2)+-parseInt(_0x4ffd6f(0x22d))/0x3+parseInt(_0x4ffd6f(0x1e6))/0x4*(-parseInt(_0x4ffd6f(0x21e))/0x5)+parseInt(_0x4ffd6f(0x220))/0x6*(parseInt(_0x4ffd6f(0x22c))/0x7)+-parseInt(_0x4ffd6f(0x215))/0x8*(-parseInt(_0x4ffd6f(0x1d8))/0x9)+-parseInt(_0x4ffd6f(0x20f))/0xa*(-parseInt(_0x4ffd6f(0x20b))/0xb)+-parseInt(_0x4ffd6f(0x20e))/0xc;if(_0x494620===_0x1e2095)break;else _0x24cf74['push'](_0x24cf74['shift']());}catch(_0x1fb59b){_0x24cf74['push'](_0x24cf74['shift']());}}}(a0_0x1d84,0x5cc6a));function a0_0x16ff(_0x2bd2c0,_0x1bf401){_0x2bd2c0=_0x2bd2c0-0x1d8;const _0x1d84fe=a0_0x1d84();let _0x16ff51=_0x1d84fe[_0x2bd2c0];return _0x16ff51;}import{EventEmitter as a0_0x302ef1}from'events';function a0_0x1d84(){const _0x4a5a59=['application/json,\x20text/event-stream','alias','705krKHwc','get_all_status','351228KPOtwm','s...','match','token','broadcast','url','call','SSE\x20reconnecting\x20in\x20','POST','tools/call','text/event-stream','signal','28SICtSD','140412SGeGSj','disconnected','send_task','connected','read','531JsuzXG','disconnect','toTimeString','heartbeatInterval','report_status','inbox\x20error:\x20','data:\x20','/mcp','stringify','slice','sdk','processInbox','now','normal','10936cbUyUZ','offline','min','getReader','cwd','parse','catch','Bearer\x20','registered','message','SSE\x20error:\x20','status','toString','resumeId','content','connect','new_task','from_session','log','new_message','send_reply','getAllStatus','messages','AbortError','autoConnect','sseAbort','connectSSE','text','sleep','type','startsWith','/events/','8anUVCl','emit','agent','completed','send_message','11YGRDNc','Authorization','reconnectDelay','8968332JGzJBc','4836790IREQic','184529cLDiAv','split','heartbeatTimer','name','send','14064aPspDd','body','running','2.0','idle','decode','sdk-'];a0_0x1d84=function(){return _0x4a5a59;};return a0_0x1d84();}import{hostname as a0_0x2755ad}from'os';class T extends a0_0x302ef1{['url'];[a0_0x5920d3(0x21d)];['token'];[a0_0x5920d3(0x208)];[a0_0x5920d3(0x1f3)];['heartbeatInterval'];[a0_0x5920d3(0x20d)];[a0_0x5920d3(0x212)];[a0_0x5920d3(0x1ff)];['running']=!0x1;constructor(_0x5f2f64){const _0x12a96f=a0_0x5920d3;super();if(this[_0x12a96f(0x225)]=_0x5f2f64[_0x12a96f(0x225)]['replace'](/\/$/,''),this[_0x12a96f(0x21d)]=_0x5f2f64[_0x12a96f(0x21d)],this[_0x12a96f(0x223)]=_0x5f2f64[_0x12a96f(0x223)],this[_0x12a96f(0x208)]=_0x5f2f64['agent']||_0x12a96f(0x1e2),this[_0x12a96f(0x1f3)]=_0x12a96f(0x21b)+_0x5f2f64[_0x12a96f(0x21d)]+'-'+Date[_0x12a96f(0x1e4)]()[_0x12a96f(0x1f2)](0x24),this[_0x12a96f(0x1db)]=_0x5f2f64['heartbeatInterval']??0x2bf20,this[_0x12a96f(0x20d)]=_0x5f2f64[_0x12a96f(0x20d)]??0xbb8,_0x5f2f64[_0x12a96f(0x1fe)]!==!0x1)this['connect']();}[a0_0x5920d3(0x1f8)](_0x1c820b){const _0x51a463=a0_0x5920d3;console[_0x51a463(0x1f8)]('['+new Date()[_0x51a463(0x1da)]()[_0x51a463(0x1e1)](0x0,0x8)+']\x20[commhub:'+this['alias']+']\x20'+_0x1c820b);}async[a0_0x5920d3(0x226)](_0x510e92,_0x16eb96){const _0xde81c6=a0_0x5920d3;let _0x29b431={'Content-Type':'application/json','Accept':_0xde81c6(0x21c)};if(this[_0xde81c6(0x223)])_0x29b431[_0xde81c6(0x20c)]=_0xde81c6(0x1ed)+this[_0xde81c6(0x223)];let _0x362ba8=await(await fetch(this[_0xde81c6(0x225)]+_0xde81c6(0x1df),{'method':_0xde81c6(0x228),'headers':_0x29b431,'body':JSON[_0xde81c6(0x1e0)]({'jsonrpc':_0xde81c6(0x218),'id':Date[_0xde81c6(0x1e4)](),'method':_0xde81c6(0x229),'params':{'name':_0x510e92,'arguments':_0x16eb96}})}))[_0xde81c6(0x201)](),_0x2e5516=_0x362ba8[_0xde81c6(0x222)](/data: (.+)/),_0x3d67c1=_0x2e5516?JSON[_0xde81c6(0x1eb)](_0x2e5516[0x1]):JSON['parse'](_0x362ba8),_0x2607c=_0x3d67c1?.['result']?.[_0xde81c6(0x1f4)]?.[0x0]?.[_0xde81c6(0x201)];return _0x2607c?JSON[_0xde81c6(0x1eb)](_0x2607c):_0x3d67c1;}async[a0_0x5920d3(0x1f5)](){const _0x3747bf=a0_0x5920d3;if(this[_0x3747bf(0x217)])return;this[_0x3747bf(0x217)]=!0x0,await this['status'](_0x3747bf(0x219)),this[_0x3747bf(0x1f8)](_0x3747bf(0x1ee)),this['heartbeatTimer']=setInterval(()=>{const _0xd4119b=_0x3747bf;this[_0xd4119b(0x1f1)](_0xd4119b(0x219))[_0xd4119b(0x1ec)](_0x19410a=>this[_0xd4119b(0x1f8)]('heartbeat\x20failed:\x20'+_0x19410a[_0xd4119b(0x1ef)]));},this[_0x3747bf(0x1db)]),this['connectSSE']();}async[a0_0x5920d3(0x1d9)](){const _0x3b0abc=a0_0x5920d3;if(this[_0x3b0abc(0x217)]=!0x1,this[_0x3b0abc(0x1ff)]?.['abort'](),this[_0x3b0abc(0x212)])clearInterval(this[_0x3b0abc(0x212)]);await this[_0x3b0abc(0x1f1)](_0x3b0abc(0x1e7))[_0x3b0abc(0x1ec)](()=>{}),this[_0x3b0abc(0x1f8)](_0x3b0abc(0x22e));}async[a0_0x5920d3(0x214)](_0x172e8d,_0x4ee915,_0x520465=a0_0x5920d3(0x1e5)){const _0x496136=a0_0x5920d3;return this[_0x496136(0x226)](_0x496136(0x22f),{'alias':_0x172e8d,'task':_0x4ee915,'priority':_0x520465,'from_session':this[_0x496136(0x21d)]});}async[a0_0x5920d3(0x1ef)](_0x5dd07a,_0x1d1ce3){const _0x5f1bab=a0_0x5920d3;return this[_0x5f1bab(0x226)](_0x5f1bab(0x20a),{'alias':_0x5dd07a,'message':_0x1d1ce3,'from_session':this['alias']});}async['reply'](_0x12a01c,_0x87fda4,_0x466014=a0_0x5920d3(0x209)){const _0x2d5f9a=a0_0x5920d3;return this[_0x2d5f9a(0x226)](_0x2d5f9a(0x1fa),{'in_reply_to':_0x12a01c,'text':_0x87fda4,'status':_0x466014});}async[a0_0x5920d3(0x1f1)](_0x26fef4,_0xd4c06c){const _0x120180=a0_0x5920d3;return this[_0x120180(0x226)](_0x120180(0x1dc),{'resume_id':this[_0x120180(0x1f3)],'alias':this[_0x120180(0x21d)],'status':_0x26fef4,'server':a0_0x2755ad(),'hostname':a0_0x2755ad(),'agent':this[_0x120180(0x208)],'project_dir':process[_0x120180(0x1ea)](),..._0xd4c06c});}async[a0_0x5920d3(0x1fb)](){const _0x1d9c4e=a0_0x5920d3;return this[_0x1d9c4e(0x226)](_0x1d9c4e(0x21f),{});}async[a0_0x5920d3(0x224)](_0x58200f,_0x22c77d){const _0x50a4ec=a0_0x5920d3;return this[_0x50a4ec(0x226)](_0x50a4ec(0x224),{'message':_0x58200f,'filter_server':_0x22c77d?.['server'],'filter_status':_0x22c77d?.[_0x50a4ec(0x1f1)]});}async[a0_0x5920d3(0x200)](){const _0x47cb57=a0_0x5920d3;let _0x560cc2=encodeURIComponent(this['alias']),_0x4841a1=this[_0x47cb57(0x225)]+_0x47cb57(0x205)+_0x560cc2,_0x12cd58=this[_0x47cb57(0x20d)];while(this[_0x47cb57(0x217)]){try{this[_0x47cb57(0x1ff)]=new AbortController();let _0x35d2c6={'Accept':_0x47cb57(0x22a)};if(this[_0x47cb57(0x223)])_0x35d2c6['Authorization']=_0x47cb57(0x1ed)+this[_0x47cb57(0x223)];let _0x34a2cc=await fetch(_0x4841a1,{'headers':_0x35d2c6,'signal':this[_0x47cb57(0x1ff)][_0x47cb57(0x22b)]});if(!_0x34a2cc['ok']||!_0x34a2cc[_0x47cb57(0x216)]){this['log']('SSE\x20failed:\x20'+_0x34a2cc['status']),await this[_0x47cb57(0x202)](_0x12cd58),_0x12cd58=Math['min'](_0x12cd58*1.5,0xea60);continue;}_0x12cd58=this[_0x47cb57(0x20d)];let _0x54d9bc=_0x34a2cc['body'][_0x47cb57(0x1e9)](),_0x44e986=new TextDecoder(),_0x214d83='';while(this[_0x47cb57(0x217)]){let {done:_0x3256bd,value:_0x33943a}=await _0x54d9bc[_0x47cb57(0x231)]();if(_0x3256bd)break;_0x214d83+=_0x44e986[_0x47cb57(0x21a)](_0x33943a,{'stream':!0x0});let _0x5eac3f=_0x214d83[_0x47cb57(0x211)]('\x0a');_0x214d83=_0x5eac3f['pop']()||'';for(let _0x1dc067 of _0x5eac3f){if(!_0x1dc067[_0x47cb57(0x204)](_0x47cb57(0x1de)))continue;try{let _0x8c8d76=JSON[_0x47cb57(0x1eb)](_0x1dc067[_0x47cb57(0x1e1)](0x6));if(_0x8c8d76[_0x47cb57(0x203)]==='connected'){this[_0x47cb57(0x1f8)]('SSE\x20connected'),this[_0x47cb57(0x207)](_0x47cb57(0x230));continue;}if(_0x8c8d76[_0x47cb57(0x203)]===_0x47cb57(0x1f6)||_0x8c8d76[_0x47cb57(0x203)]===_0x47cb57(0x1f9)||_0x8c8d76[_0x47cb57(0x203)]===_0x47cb57(0x224))await this[_0x47cb57(0x1e3)]();}catch{}}}}catch(_0x169a25){if(_0x169a25[_0x47cb57(0x213)]===_0x47cb57(0x1fd))break;this[_0x47cb57(0x207)]('error',_0x169a25),this[_0x47cb57(0x1f8)](_0x47cb57(0x1f0)+_0x169a25[_0x47cb57(0x1ef)]);}if(this[_0x47cb57(0x217)])this[_0x47cb57(0x207)](_0x47cb57(0x22e)),this[_0x47cb57(0x1f8)](_0x47cb57(0x227)+_0x12cd58/0x3e8+_0x47cb57(0x221)),await this['sleep'](_0x12cd58),_0x12cd58=Math[_0x47cb57(0x1e8)](_0x12cd58*1.5,0xea60);}}async['processInbox'](){const _0x60277b=a0_0x5920d3;try{let _0x30d1eb=(await this[_0x60277b(0x226)]('get_inbox',{'alias':this[_0x60277b(0x21d)],'limit':0xa}))?.[_0x60277b(0x1fc)]||[];for(let _0x8a5294 of _0x30d1eb)await this[_0x60277b(0x226)]('ack_inbox',{'alias':this[_0x60277b(0x21d)],'message_id':_0x8a5294['id']}),this[_0x60277b(0x1f8)]('←\x20'+_0x8a5294[_0x60277b(0x1f7)]+':\x20'+_0x8a5294[_0x60277b(0x1f4)][_0x60277b(0x1e1)](0x0,0x3c)),this[_0x60277b(0x207)]('task',_0x8a5294),this[_0x60277b(0x207)](_0x60277b(0x1ef),_0x8a5294);}catch(_0x1597fe){this[_0x60277b(0x1f8)](_0x60277b(0x1dd)+_0x1597fe['message']);}}[a0_0x5920d3(0x202)](_0x11d201){return new Promise(_0x3186f5=>setTimeout(_0x3186f5,_0x11d201));}}var $=T;export{$ as default,T as CommHub};
+const a0_0x3c4af8=a0_0x3789;(function(_0x92be0b,_0x19026d){const _0x23474f=a0_0x3789,_0x4c8888=_0x92be0b();while(!![]){try{const _0x2d096e=parseInt(_0x23474f(0x211))/0x1*(-parseInt(_0x23474f(0x1fe))/0x2)+-parseInt(_0x23474f(0x254))/0x3+-parseInt(_0x23474f(0x224))/0x4+parseInt(_0x23474f(0x1d5))/0x5+-parseInt(_0x23474f(0x230))/0x6+parseInt(_0x23474f(0x246))/0x7*(parseInt(_0x23474f(0x1db))/0x8)+parseInt(_0x23474f(0x252))/0x9;if(_0x2d096e===_0x19026d)break;else _0x4c8888['push'](_0x4c8888['shift']());}catch(_0x2048a9){_0x4c8888['push'](_0x4c8888['shift']());}}}(a0_0x2087,0xe4a2b));import{EventEmitter as a0_0x12baea}from'events';import{hostname as a0_0x57a71c}from'os';function a0_0x3789(_0x50668f,_0x1a1335){_0x50668f=_0x50668f-0x1d3;const _0x2087c7=a0_0x2087();let _0x378978=_0x2087c7[_0x50668f];return _0x378978;}var K=/(?:atok|ntok|utok|ghp|github_pat)_[A-Za-z0-9_-]+|Bearer\s+\S+/gi,L=(_0x195155,_0x40650f)=>(_0x195155??_0x40650f)[a0_0x3c4af8(0x1e6)](/[\r\n\x00-\x1f\x7f]/g,'\x20')[a0_0x3c4af8(0x213)](0x0,0xf0);function N(_0x157e02){const _0x47ee24=a0_0x3c4af8;return(_0x157e02 instanceof Error?_0x157e02[_0x47ee24(0x1e2)]:String(_0x157e02??'unknown\x20error'))[_0x47ee24(0x1e6)](K,_0x47ee24(0x1e5))[_0x47ee24(0x1e6)](/[\r\n\x00-\x1f\x7f]/g,'\x20')['slice'](0x0,0xf0);}function O(_0x451712,_0x526cfc=process.env.ANET_TASK_TRACE_FORMAT===a0_0x3c4af8(0x1d9)){const _0x3adcd8=a0_0x3c4af8;if(_0x526cfc)return JSON[_0x3adcd8(0x235)](_0x451712);let _0x1d3e1a=L(_0x451712[_0x3adcd8(0x201)],_0x3adcd8(0x240)),_0x448630=L(_0x451712['task_id'],_0x3adcd8(0x239)),_0x389b5c=_0x451712[_0x3adcd8(0x1f1)]?_0x3adcd8(0x24c)+_0x451712['error_code']+':'+(_0x451712[_0x3adcd8(0x1f3)]??''):'';return _0x3adcd8(0x1d8)+_0x451712[_0x3adcd8(0x256)]+_0x3adcd8(0x1ee)+L(_0x451712[_0x3adcd8(0x242)],_0x3adcd8(0x1fa))+_0x3adcd8(0x206)+L(_0x451712[_0x3adcd8(0x1f9)],_0x3adcd8(0x1fa))+_0x3adcd8(0x212)+_0x448630+'\x20parent_task_id='+_0x1d3e1a+'\x20network_id='+L(_0x451712['network_id'],_0x3adcd8(0x1fa))+_0x3adcd8(0x1d6)+_0x451712['transport']+_0x3adcd8(0x1f2)+_0x451712['duration_ms']+_0x3adcd8(0x23a)+_0x451712[_0x3adcd8(0x236)]+_0x389b5c;}function U(_0x34f605){const _0x208f82=a0_0x3c4af8;return{'event':{'sending':_0x208f82(0x223),'delivered':_0x208f82(0x1d4),'failed':_0x208f82(0x24e),'acked':_0x208f82(0x229),'started':_0x208f82(0x241),'replied':_0x208f82(0x245),'expired':_0x208f82(0x22a)}[_0x34f605[_0x208f82(0x256)]],..._0x34f605};}function j(_0x3a2dd4){const _0xd0d93e=a0_0x3c4af8;let _0x122059=_0x3a2dd4?.[_0xd0d93e(0x231)]||_0x3a2dd4?.[_0xd0d93e(0x22e)]||_0x3a2dd4?.['id'];if(_0x122059)return String(_0x122059);let _0x58280c=_0x3a2dd4?.['content']?.[0x0]?.[_0xd0d93e(0x21a)];if(typeof _0x58280c!==_0xd0d93e(0x249))return null;try{let _0x447d44=JSON['parse'](_0x58280c);return _0x447d44?.[_0xd0d93e(0x231)]||_0x447d44?.[_0xd0d93e(0x22e)]||_0x447d44?.['id']||null;}catch{return null;}}async function X(_0x34a2a2,_0x2bc429){const _0x284051=a0_0x3c4af8;let _0x4d7218=_0x2bc429['now']??Date['now'],_0xb3eac5=_0x4d7218(),_0x38197a=(_0x2775b7,_0x25b331,_0x14a6c4,_0x27c0cf)=>{const _0x2a13ff=a0_0x3789;_0x2bc429[_0x2a13ff(0x22d)](O(U({'from_alias':_0x34a2a2[_0x2a13ff(0x1f8)],'to_alias':_0x34a2a2[_0x2a13ff(0x1fc)],'task_id':_0x25b331,'parent_task_id':_0x34a2a2[_0x2a13ff(0x24d)],'network_id':_0x34a2a2[_0x2a13ff(0x244)],'transport':_0x34a2a2[_0x2a13ff(0x21e)],'status':_0x2775b7,'duration_ms':_0x4d7218()-_0xb3eac5,'lifecycle_tracking':_0x34a2a2[_0x2a13ff(0x227)],..._0x14a6c4!==void 0x0?{'error_code':_0x27c0cf||'send_failed','error_message':N(_0x14a6c4)}:{}})));};_0x38197a(_0x284051(0x1e9),null);try{let _0x23fc41=await _0x2bc429[_0x284051(0x23c)](),_0x753b0f=j(_0x23fc41);if(_0x753b0f)_0x38197a(_0x284051(0x243),_0x753b0f);else{if(_0x23fc41?.['ok']===!0x1||_0x23fc41?.[_0x284051(0x1e3)])_0x38197a(_0x284051(0x1ec),_0x753b0f,_0x23fc41?.[_0x284051(0x1e3)]||_0x284051(0x1dd),_0x284051(0x208));else _0x38197a(_0x284051(0x1ec),null,_0x284051(0x210),'missing_task_id');}return _0x23fc41;}catch(_0x31595c){throw _0x38197a('failed',null,_0x31595c,'send_failed'),_0x31595c;}}async function Y(_0x5c5059,_0x22be45){const _0x50abcc=a0_0x3c4af8;return X({'fromAlias':_0x5c5059[_0x50abcc(0x1f8)],'toAlias':_0x5c5059[_0x50abcc(0x22f)],'parentTaskId':_0x5c5059['parentTaskId']||null,'networkId':_0x5c5059['networkId']||null,'transport':_0x50abcc(0x20c),'lifecycleTracking':_0x50abcc(0x1d7)},_0x22be45);}class $ extends a0_0x12baea{[a0_0x3c4af8(0x1ff)];[a0_0x3c4af8(0x22f)];[a0_0x3c4af8(0x207)];[a0_0x3c4af8(0x203)];[a0_0x3c4af8(0x226)];[a0_0x3c4af8(0x247)];[a0_0x3c4af8(0x1df)];[a0_0x3c4af8(0x1f5)];['sseAbort'];[a0_0x3c4af8(0x215)]=!0x1;constructor(_0x562283){const _0x5aad4a=a0_0x3c4af8;super();if(this[_0x5aad4a(0x1ff)]=_0x562283[_0x5aad4a(0x1ff)]['replace'](/\/$/,''),this[_0x5aad4a(0x22f)]=_0x562283[_0x5aad4a(0x22f)],this[_0x5aad4a(0x207)]=_0x562283[_0x5aad4a(0x207)],this[_0x5aad4a(0x203)]=_0x562283[_0x5aad4a(0x203)]||_0x5aad4a(0x22c),this[_0x5aad4a(0x226)]=_0x5aad4a(0x1f7)+_0x562283[_0x5aad4a(0x22f)]+'-'+Date[_0x5aad4a(0x228)]()['toString'](0x24),this[_0x5aad4a(0x247)]=_0x562283[_0x5aad4a(0x247)]??0x2bf20,this[_0x5aad4a(0x1df)]=_0x562283[_0x5aad4a(0x1df)]??0xbb8,_0x562283[_0x5aad4a(0x200)]!==!0x1)this[_0x5aad4a(0x248)]();}[a0_0x3c4af8(0x22d)](_0xb58bae){const _0x1fffa9=a0_0x3c4af8;console[_0x1fffa9(0x22d)]('['+new Date()[_0x1fffa9(0x20f)]()['slice'](0x0,0x8)+']\x20[commhub:'+this[_0x1fffa9(0x22f)]+']\x20'+_0xb58bae);}async[a0_0x3c4af8(0x1e8)](_0x2f916a,_0x1ff14b){const _0x1ffead=a0_0x3c4af8;let _0x3e2692={'Content-Type':_0x1ffead(0x234),'Accept':'application/json,\x20text/event-stream'};if(this['token'])_0x3e2692[_0x1ffead(0x21b)]=_0x1ffead(0x217)+this[_0x1ffead(0x207)];let _0xe0aa51=await(await fetch(this['url']+_0x1ffead(0x1ea),{'method':_0x1ffead(0x1e4),'headers':_0x3e2692,'body':JSON[_0x1ffead(0x235)]({'jsonrpc':_0x1ffead(0x1fb),'id':Date['now'](),'method':_0x1ffead(0x23b),'params':{'name':_0x2f916a,'arguments':_0x1ff14b}})}))['text'](),_0x471cc2=_0xe0aa51[_0x1ffead(0x21f)](/data: (.+)/),_0x4f5520=_0x471cc2?JSON[_0x1ffead(0x221)](_0x471cc2[0x1]):JSON['parse'](_0xe0aa51),_0x18da20=_0x4f5520?.[_0x1ffead(0x1ef)]?.[_0x1ffead(0x1f0)]?.[0x0]?.[_0x1ffead(0x21a)];return _0x18da20?JSON[_0x1ffead(0x221)](_0x18da20):_0x4f5520;}async[a0_0x3c4af8(0x248)](){const _0x256be5=a0_0x3c4af8;if(this[_0x256be5(0x215)])return;this['running']=!0x0,await this[_0x256be5(0x256)](_0x256be5(0x204)),this[_0x256be5(0x22d)](_0x256be5(0x237)),this[_0x256be5(0x1f5)]=setInterval(()=>{const _0xbf5778=_0x256be5;this[_0xbf5778(0x256)](_0xbf5778(0x204))['catch'](_0x5a44f1=>this['log'](_0xbf5778(0x209)+_0x5a44f1[_0xbf5778(0x1e2)]));},this[_0x256be5(0x247)]),this[_0x256be5(0x23f)]();}async[a0_0x3c4af8(0x255)](){const _0x3d17df=a0_0x3c4af8;if(this[_0x3d17df(0x215)]=!0x1,this[_0x3d17df(0x23d)]?.['abort'](),this['heartbeatTimer'])clearInterval(this[_0x3d17df(0x1f5)]);await this[_0x3d17df(0x256)](_0x3d17df(0x1de))[_0x3d17df(0x216)](()=>{}),this['log'](_0x3d17df(0x205));}async[a0_0x3c4af8(0x23c)](_0x1972cd,_0x167bbf,_0x5800d7=a0_0x3c4af8(0x20d)){const _0x4c0bb7=a0_0x3c4af8;return Y({'alias':_0x1972cd,'fromAlias':this[_0x4c0bb7(0x22f)]},{'log':_0x2bb9f7=>console[_0x4c0bb7(0x22d)](_0x2bb9f7),'send':()=>this[_0x4c0bb7(0x1e8)]('send_task',{'alias':_0x1972cd,'task':_0x167bbf,'priority':_0x5800d7,'from_session':this[_0x4c0bb7(0x22f)]})});}async['message'](_0x156aaa,_0x2260cf){const _0x371a2f=a0_0x3c4af8;return this['call'](_0x371a2f(0x1d3),{'alias':_0x156aaa,'message':_0x2260cf,'from_session':this[_0x371a2f(0x22f)]});}async['reply'](_0x49bfdc,_0x1fe905,_0x37f5de=a0_0x3c4af8(0x1e1)){const _0x291378=a0_0x3c4af8;return this[_0x291378(0x1e8)](_0x291378(0x214),{'in_reply_to':_0x49bfdc,'text':_0x1fe905,'status':_0x37f5de});}async[a0_0x3c4af8(0x256)](_0x5aa81f,_0x2ce057){const _0x2d1ebe=a0_0x3c4af8;return this[_0x2d1ebe(0x1e8)]('report_status',{'resume_id':this[_0x2d1ebe(0x226)],'alias':this[_0x2d1ebe(0x22f)],'status':_0x5aa81f,'server':a0_0x57a71c(),'hostname':a0_0x57a71c(),'agent':this[_0x2d1ebe(0x203)],'project_dir':process[_0x2d1ebe(0x22b)](),..._0x2ce057});}async[a0_0x3c4af8(0x1da)](){const _0x277e2e=a0_0x3c4af8;return this['call'](_0x277e2e(0x1eb),{});}async['broadcast'](_0x224fd6,_0x289481){const _0x1f1f48=a0_0x3c4af8;return this[_0x1f1f48(0x1e8)]('broadcast',{'message':_0x224fd6,'filter_server':_0x289481?.[_0x1f1f48(0x20e)],'filter_status':_0x289481?.[_0x1f1f48(0x256)]});}async['connectSSE'](){const _0x23030b=a0_0x3c4af8;let _0x2c5ea5=encodeURIComponent(this[_0x23030b(0x22f)]),_0x3c26d3=this[_0x23030b(0x1ff)]+_0x23030b(0x1fd)+_0x2c5ea5,_0x2e1b98=this[_0x23030b(0x1df)];while(this[_0x23030b(0x215)]){try{this[_0x23030b(0x23d)]=new AbortController();let _0x42aa37={'Accept':_0x23030b(0x202)};if(this[_0x23030b(0x207)])_0x42aa37[_0x23030b(0x21b)]='Bearer\x20'+this[_0x23030b(0x207)];let _0x5eefd7=await fetch(_0x3c26d3,{'headers':_0x42aa37,'signal':this['sseAbort'][_0x23030b(0x1f4)]});if(!_0x5eefd7['ok']||!_0x5eefd7[_0x23030b(0x1f6)]){this[_0x23030b(0x22d)](_0x23030b(0x225)+_0x5eefd7[_0x23030b(0x256)]),await this[_0x23030b(0x251)](_0x2e1b98),_0x2e1b98=Math[_0x23030b(0x219)](_0x2e1b98*1.5,0xea60);continue;}_0x2e1b98=this[_0x23030b(0x1df)];let _0x59994d=_0x5eefd7[_0x23030b(0x1f6)]['getReader'](),_0x9f493c=new TextDecoder(),_0x50c522='';while(this[_0x23030b(0x215)]){let {done:_0x36e3d1,value:_0x495045}=await _0x59994d[_0x23030b(0x20a)]();if(_0x36e3d1)break;_0x50c522+=_0x9f493c[_0x23030b(0x222)](_0x495045,{'stream':!0x0});let _0x38099c=_0x50c522[_0x23030b(0x218)]('\x0a');_0x50c522=_0x38099c['pop']()||'';for(let _0x11fd4f of _0x38099c){if(!_0x11fd4f[_0x23030b(0x232)](_0x23030b(0x1dc)))continue;try{let _0x536992=JSON[_0x23030b(0x221)](_0x11fd4f[_0x23030b(0x213)](0x6));if(_0x536992[_0x23030b(0x23e)]===_0x23030b(0x21c)){this[_0x23030b(0x22d)](_0x23030b(0x24b)),this[_0x23030b(0x21d)](_0x23030b(0x21c));continue;}if(_0x536992[_0x23030b(0x23e)]===_0x23030b(0x1e0)||_0x536992[_0x23030b(0x23e)]===_0x23030b(0x250)||_0x536992[_0x23030b(0x23e)]===_0x23030b(0x24a))await this[_0x23030b(0x20b)]();}catch{}}}}catch(_0x6475e2){if(_0x6475e2['name']==='AbortError')break;this[_0x23030b(0x21d)](_0x23030b(0x1e3),_0x6475e2),this[_0x23030b(0x22d)](_0x23030b(0x1ed)+_0x6475e2[_0x23030b(0x1e2)]);}if(this[_0x23030b(0x215)])this[_0x23030b(0x21d)](_0x23030b(0x205)),this[_0x23030b(0x22d)](_0x23030b(0x1e7)+_0x2e1b98/0x3e8+_0x23030b(0x238)),await this[_0x23030b(0x251)](_0x2e1b98),_0x2e1b98=Math[_0x23030b(0x219)](_0x2e1b98*1.5,0xea60);}}async['processInbox'](){const _0x1a707f=a0_0x3c4af8;try{let _0x421ec8=(await this[_0x1a707f(0x1e8)](_0x1a707f(0x253),{'alias':this[_0x1a707f(0x22f)],'limit':0xa}))?.[_0x1a707f(0x220)]||[];for(let _0x526670 of _0x421ec8)await this[_0x1a707f(0x1e8)](_0x1a707f(0x24f),{'alias':this[_0x1a707f(0x22f)],'message_id':_0x526670['id']}),this['log']('←\x20'+_0x526670['from_session']+':\x20'+_0x526670[_0x1a707f(0x1f0)][_0x1a707f(0x213)](0x0,0x3c)),this[_0x1a707f(0x21d)](_0x1a707f(0x233),_0x526670),this['emit']('message',_0x526670);}catch(_0x355b79){this['log']('inbox\x20error:\x20'+_0x355b79['message']);}}[a0_0x3c4af8(0x251)](_0x300b3f){return new Promise(_0x517085=>setTimeout(_0x517085,_0x300b3f));}}var F=$;export{F as default,$ as CommHub};function a0_0x2087(){const _0x23e6f0=['new_task','completed','message','error','POST','[REDACTED]','replace','SSE\x20reconnecting\x20in\x20','call','sending','/mcp','get_all_status','failed','SSE\x20error:\x20','\x20from=','result','content','error_code','\x20duration_ms=','error_message','signal','heartbeatTimer','body','sdk-','fromAlias','to_alias','<unknown>','2.0','toAlias','/events/','591574WuJWMi','url','autoConnect','parent_task_id','text/event-stream','agent','idle','disconnected','\x20to=','token','send_rejected','heartbeat\x20failed:\x20','read','processInbox','mcp_http','normal','server','toTimeString','CommHub\x20response\x20omitted\x20task_id','5QQqXAh','\x20task_id=','slice','send_reply','running','catch','Bearer\x20','split','min','text','Authorization','connected','emit','transport','match','messages','parse','decode','task.send.start','2489060akvgSU','SSE\x20failed:\x20','resumeId','lifecycleTracking','now','task.ack','task.expired','cwd','sdk','log','message_id','alias','3947994Htgohk','task_id','startsWith','task','application/json','stringify','lifecycle_tracking','registered','s...','<pending>','\x20lifecycle=','tools/call','send','sseAbort','type','connectSSE','<missing>','task.started','from_alias','delivered','networkId','task.replied','112623kLtdjV','heartbeatInterval','connect','string','broadcast','SSE\x20connected','\x20error=','parentTaskId','task.send.failed','ack_inbox','new_message','sleep','24972165lDjlyB','get_inbox','5509074UZoPmn','disconnect','status','send_message','task.send.delivered','7914330nqPSXV','\x20transport=','not_tracked','[commhub:task]\x20','json','getAllStatus','584yQqLhs','data:\x20','CommHub\x20rejected\x20task','offline','reconnectDelay'];a0_0x2087=function(){return _0x23e6f0;};return a0_0x2087();}

package/dist/src/codex-copresence-preflight.d.ts

@@ -0,0 +1,65 @@
+export interface CodexHomeInheritedFile {
+    readonly name: string;
+    readonly mode: number;
+    /** Why a node needs it — printed when staged, so the action is legible. */
+    readonly because: string;
+}
+export declare const CODEX_HOME_INHERITED_FILES: readonly CodexHomeInheritedFile[];
+export interface StatLike {
+    readonly mtimeMs: number;
+}
+export type StatFn = (path: string) => StatLike | null;
+export interface CodexHomeStageStep {
+    readonly name: string;
+    readonly src: string;
+    readonly dst: string;
+    readonly mode: number;
+    readonly reason: "missing" | "host-newer";
+    readonly because: string;
+}
+/**
+ * What to copy from the host CODEX_HOME into the node's, right now.
+ *
+ * Pure: takes the stat function so the ordering rules are testable without a
+ * filesystem. A node file that is NEWER than the host's is left alone — codex
+ * refreshes its own copy in place, and clobbering it would throw away a fresher
+ * token than the one we hold.
+ */
+export declare function codexHomeStagePlan(hostHome: string, nodeHome: string, stat: StatFn, join: (a: string, b: string) => string, files?: readonly CodexHomeInheritedFile[]): CodexHomeStageStep[];
+export type CodexTuiBlocker = "sign-in" | "update-prompt" | "trust-prompt";
+export type CodexTuiPaneState = CodexTuiBlocker | "not-painted" | "usable";
+/**
+ * Classify the TUI, from two different reads of the same pane.
+ *
+ * They answer different questions and need different tmux flags — the same
+ * distinction `waitForTmuxPaneText` documents one screenful up:
+ *
+ *   onScreen  (capture-pane, no -S)  → "is it sitting on a prompt right now"
+ *             A prompt that was already answered stays in scrollback forever,
+ *             so reading history here would report a fixed node as blocked.
+ *
+ *   everSeen  (capture-pane -S -N)   → "did the TUI ever paint"
+ *             The banner is printed once and scrolls away — an MCP error burst
+ *             was enough to push it off screen in under a minute — so reading
+ *             only the current screen here would report a working node as dead.
+ *
+ * 🔴 And "the pane has text" answers neither. An earlier version of this used
+ * "≥3 non-empty lines ⇒ ready" and passed a node parked on the sign-in page.
+ * Measured timeline for that start:
+ *
+ *     t≈3s   22 non-empty lines   ← launcher output, TUI not up yet
+ *     t≈6s    0 non-empty lines   ← codex clears the screen and takes over
+ *     t≈9s   10 non-empty lines   ← the sign-in page finally paints
+ *
+ * The rule fired at t≈3s, six seconds before the thing it was meant to catch
+ * existed.
+ */
+export declare function codexTuiPaneState(onScreen: string, everSeen?: string): CodexTuiPaneState;
+/**
+ * What the operator should read when a node came up but cannot work. Names the
+ * blocker AND where to look — a launcher that only says "not ready" sends
+ * someone hunting through three tmux sessions.
+ */
+export declare function describeCodexTuiBlocker(blocker: CodexTuiBlocker, displayName: string, tuiSession: string): string;
+/** The TUI never painted at all — a distinct failure from being blocked. */
+export declare function describeCodexTuiNotPainted(displayName: string, tuiSession: string, waitedMs: number): string;

package/dist/src/codex-copresence-profile.d.ts

@@ -0,0 +1,125 @@
+export interface CodexCopresenceProfileFields {
+    readonly runtime?: string;
+    readonly codexCopresence?: boolean;
+    readonly codexCopresenceFullAccess?: boolean;
+    readonly flags?: Record<string, unknown>;
+    /** Absolute project directory to launch the codex TUI in. Passed as
+     *  `-C <dir>` to `codex resume`. Also cross-checked against hub-reported
+     *  `session.project_dir` in Phase 4.3. */
+    readonly codexProjectDir?: string;
+    /** Which launch adapter to use in Phase 3.2. `"codex-standard"` = stock
+     *  `codex app-server` + `codex resume`; `"codex-custom-wrapper"` = TMHR狗-class
+     *  custom LLM API wrapper (hosted tool / compaction / image-output compat).
+     *  Unknown / absent → Phase 0 fail-closed (unknown adapters must not fall
+     *  through to a default that might not fit the node's real topology). */
+    readonly codexLaunchAdapter?: "codex-standard" | "codex-custom-wrapper";
+    /** Alias of the peer that will verify this node's identity in Phase 6.
+     *  Peer MUST be (a) registered in the same network, (b) online at resume
+     *  time, (c) not this node itself. Identity attestation uses a fresh
+     *  Hub outbound `send_task` from THIS node's Bridge to <codexProbePeer>
+     *  carrying a nonce; peer echoes the nonce back; CLI cross-checks Hub's
+     *  recorded `from_name / from_node_id / to_name / to_node_id`.
+     *
+     *  🔴 self-loop is deliberately not accepted here — it cannot prove
+     *  cross-node routing closure (design v7 Phase 6 = D, per TMHR
+     *  06cfb29a). Single-node users cannot run `anet node resume` in
+     *  this initial cut; tracked at #1527. */
+    readonly codexProbePeer?: string;
+}
+/** #1521 — the three fields `anet node resume <alias>` will require on a
+ *  codex-copresence node once the resume dispatcher lands (#1528, Draft).
+ *  In this PR, only shape-level enumeration exists (see
+ *  `missingCodexResumeFields` below); no CLI code reads that enumeration
+ *  and the operator-facing remediation flow is deliberately deferred
+ *  along with its real caller. */
+export type CodexResumeRequiredField = "codexProjectDir" | "codexLaunchAdapter" | "codexProbePeer";
+export declare const CODEX_RESUME_REQUIRED_FIELDS: readonly CodexResumeRequiredField[];
+/** Enumerate which of the three resume-required fields are absent /
+ *  wrong-shaped on this profile. Returns [] when all three are present
+ *  and well-shaped.
+ *
+ *  🔴 SHAPE-ONLY validation:
+ *    - codexProjectDir : string starting with `/`. This is a CHEAP typo
+ *      filter, NOT the security gate. Phase 0 (in #1528) MUST additionally
+ *      `realpath`/canonicalize + reject NUL, `/`, and any untrusted target
+ *      before passing this value to `codex resume -C <dir>` (per TMHR
+ *      4bab8196: "startsWith('/') 不是最终安全门").
+ *    - codexLaunchAdapter : enum membership.
+ *    - codexProbePeer : Hub exact-alias lookup, so value MUST equal its own
+ *      trim. Values with leading/trailing whitespace would fail Hub lookup
+ *      100% of the time; rejecting them at the shape layer is a witnessed-red
+ *      canary rather than a permissive pass-through (per TMHR 048d0061 R2:
+ *      "不要 pin 一个必然在 Hub exact lookup 阶段失败的 well-shaped 值").
+ *      Liveness (registered + online + non-self) is a separate hub-side
+ *      check in Phase 0.
+ *
+ *  Deliberately NOT included: an operator-facing diagnostic helper. An
+ *  earlier draft included `codexResumeMissingConfigHint` that referenced
+ *  a `anet node config apply` verb which does not exist in the tree —
+ *  TMHR 4bab8196 blocked it as the exact "存在 ≠ 会执行" antipattern.
+ *  The diagnostic lands with its real caller in a later PR that either
+ *  (a) implements `anet node config apply` first, or (b) reworks the
+ *  diagnostic to reference existing commands only. */
+export declare function missingCodexResumeFields(profile: CodexCopresenceProfileFields): CodexResumeRequiredField[];
+export declare const CODEX_COPRESENCE_RUNTIME = "codex-app-server";
+/**
+ * Should this `anet node start` bring up the co-presence stack?
+ *
+ * The flag still works for a one-off; the profile field is what makes the
+ * second start a single command.
+ */
+export declare function codexCopresenceRequested(flagPassed: boolean, profile: CodexCopresenceProfileFields): boolean;
+/**
+ * True when a plain `anet node start` just became enough for this node — i.e.
+ * the flag was passed and the profile had not recorded it yet. Callers persist
+ * `codexCopresence: true` and tell the user they can drop the flag.
+ */
+export declare function shouldPersistCodexCopresence(flagPassed: boolean, profile: CodexCopresenceProfileFields): boolean;
+export interface CodexCopresencePosture {
+    readonly sandboxMode: "danger-full-access" | "read-only";
+    readonly approvalPolicy: "never" | "on-request";
+    /** Set when the node asked for full access and is NOT getting it. */
+    readonly downgradeNotice?: string;
+    /** Set when a remembered grant (not this invocation's flag) opened it up. */
+    readonly grantedFromProfile: boolean;
+}
+/**
+ * Resolve the sandbox the co-presence app-server runs under.
+ *
+ * Precedence: this invocation's flag → a grant already recorded on the profile
+ * → read-only. `flags.sandboxMode` alone never opens the sandbox; it only
+ * decides whether staying closed is worth telling the user about.
+ */
+export declare function codexCopresencePosture(dangerFlagPassed: boolean, profile: CodexCopresenceProfileFields, displayName?: string): CodexCopresencePosture;
+/** True when an explicit grant should be written to the profile for next time. */
+export declare function shouldPersistCodexFullAccess(dangerFlagPassed: boolean, profile: CodexCopresenceProfileFields): boolean;
+/**
+ * What `anet node create --runtime codex-app-server` should record, so that a
+ * later `anet node start <name>` is a single command with no flag.
+ *
+ * Shape copied from opencode, which already does exactly this at create time:
+ *
+ *   ...(runtime === "opencode-cli"
+ *     ? { opencodeMode: opts.mode === "copresence" || opts.copresence === "true"
+ *         ? "copresence" : "headless" }
+ *     : {}),
+ *
+ * Deliberately NOT keyed on which alias the operator typed. `codex-tui`,
+ * `codex-appserver` and `codex-app-server` are documented as aliases of one
+ * runtime (agent-node/src/cli.ts); giving one of them a different default would
+ * quietly break that contract, and "I typed the short name" is not a reliable
+ * statement of intent. Opting in stays explicit, exactly as it is for opencode.
+ */
+export declare function codexCopresenceCreateFields(normalizedRuntime: string | undefined, copresenceOpt: string | boolean | undefined): {
+    codexCopresence?: true;
+};
+/**
+ * One line at create time for a node that will start headless.
+ *
+ * NOT keyed on which alias the operator typed: by the time create builds the
+ * profile, `opts.runtime` has already been normalized to `codex-app-server`, so
+ * `codex-tui` is simply not recoverable here — a hint that tried to read it
+ * would never fire. (It didn't; that is how this was found.) Keying on the
+ * runtime instead also keeps the aliases true synonyms.
+ */
+export declare function codexCopresenceCreateHint(normalizedRuntime: string | undefined, copresenceOpt: string | boolean | undefined, displayName: string): string | undefined;

package/dist/src/codex-copresence-recovery.d.ts

@@ -0,0 +1,43 @@
+export interface CodexRecoveryVerification {
+    method: "thread/start" | "thread/resume";
+    threadId: string;
+    verifiedAt: string;
+    historyTurnCount: number;
+    historyFingerprint: string;
+}
+export interface CodexRecoveryBackup {
+    backupDir: string;
+    createdAt: string;
+    stateFiles: string[];
+}
+/** Transaction boundary shared by Windows and POSIX cutovers: the snapshot
+ * cannot begin until every authoritative state writer has quiesced. */
+export declare function quiesceThenSnapshot<T>(quiesce: () => Promise<void>, snapshot: () => T): Promise<T>;
+/** A stored thread is never considered resumed until app-server reads the
+ * exact thread back with persisted history. This is deliberately stricter
+ * than accepting a successful thread/resume RPC response. */
+export declare function verifyCodexThreadHistory(method: "thread/start" | "thread/resume", expectedThreadId: string, readResult: unknown, now?: Date): CodexRecoveryVerification;
+export declare function resumeAndVerifyCodexThread(threadId: string, request: (method: string, params: Record<string, unknown>) => Promise<unknown>): Promise<CodexRecoveryVerification>;
+/** Private, node-local recovery point. config-recovery.json is deliberately
+ * redacted non-credential audit/recovery metadata, not an identity backup.
+ * Identity recovery relies on leaving the original node config and CODEX_HOME
+ * in place. Credentials are never copied into this snapshot. */
+export declare function backupCodexRecoveryState(opts: {
+    nodeDir: string;
+    codexHome: string;
+    now?: Date;
+}): CodexRecoveryBackup;
+export declare function codexTopologyAudit(profile: Record<string, any>, nodeDir: string, cwd: string): {
+    launchMode: string;
+    cwd: string;
+    codexHome: string;
+    remote: any;
+    threadId: any;
+    model: any;
+    flags: any;
+    lastRecoveryVerification: any;
+    lastRecoveryBackup: {
+        createdAt: any;
+        stateFiles: any;
+    } | null;
+};

package/dist/src/codex-copresence-thread.d.ts

@@ -0,0 +1,13 @@
+export type CopresenceThreadPlan = {
+    method: "thread/resume";
+    params: {
+        threadId: string;
+    };
+    bootstrap: false;
+} | {
+    method: "thread/start";
+    params: Record<string, never>;
+    bootstrap: true;
+};
+/** Restarting a node must preserve its conversation; only a virgin node starts one. */
+export declare function copresenceThreadPlan(storedThreadId?: string): CopresenceThreadPlan;

package/dist/src/codex-lifecycle-account.d.ts

@@ -0,0 +1,104 @@
+import type { ReceiptCheck } from "./codex-lifecycle-receipt.js";
+import type { RestartOutcome } from "./codex-lifecycle-restart.js";
+export declare const SOURCE_KIND = "codex-login-profile";
+/** `--source` 只接受 `codex-login:<profile-id>`。路径、`env:`、`-`(stdin)、绝对/相对路径都拒绝,错误里说清为什么。 */
+export declare function parseSourceRef(raw: string): {
+    kind: typeof SOURCE_KIND;
+    profileId: string;
+};
+export declare function shortHash(value: string, length?: number): string;
+/** host_id:machine-id(有则用)+ hostname 的不可逆摘要;registry entry 绑定它,拷到别的机器就不认。 */
+export declare function hostIdOf(machineId: string | null, hostname: string): string;
+export interface ChatgptAuthShape {
+    auth_mode?: unknown;
+    tokens?: {
+        account_id?: unknown;
+    } | null;
+    OPENAI_API_KEY?: unknown;
+}
+/** 只认 ChatGPT 登录:auth_mode=chatgpt 且 tokens.account_id 是 36 位 uuid;指纹 = sha256(account_id) 前 16 位。 */
+export declare function accountFingerprint(auth: ChatgptAuthShape): string;
+export interface RegistryEntry {
+    schema_version: 1;
+    profile_id: string;
+    provider: "openai-chatgpt";
+    host_id: string;
+    /** 由 registry 目录解析的相对引用;从不是绝对路径。 */
+    credential_ref: string;
+    account_fingerprint: string;
+    created_at: string;
+    last_model_probe_at: string | null;
+    last_model_probe_status: ProbeStatus | null;
+    revoked: boolean;
+    disabled: boolean;
+}
+export interface Registry {
+    schema_version: 1;
+    host_id: string;
+    profiles: Record<string, RegistryEntry>;
+}
+export type ProbeStatus = "ok" | "auth" | "quota" | "model" | "unknown";
+export declare function credentialRefFor(profileId: string): string;
+export declare function credentialPath(registryDir: string, entry: RegistryEntry): string;
+export declare function readRegistry(registryDir: string, hostId: string): Registry;
+export declare function writeRegistry(registryDir: string, reg: Registry): void;
+/** 解析一个 profile:必须存在、未 revoked/disabled、host_id 一致、凭据文件在且 0600。返回凭据路径(只在进程内用,不进 receipt)。 */
+export declare function resolveProfile(registryDir: string, reg: Registry, profileId: string, hostId: string): {
+    entry: RegistryEntry;
+    credentialFile: string;
+};
+/** 把一次 fresh 模型请求的结果归类;归不进已知类的一律 unknown(unknown 也 STOP,不猜)。 */
+export declare function classifyProbe(exitCode: number | null, stdout: string, stderr: string, expected?: string): ProbeStatus;
+export declare function backupRefFor(receiptId: string): string;
+/** rollback 只认 `receipt:<id>`,且只在该节点的 receipts/ 目录里解析;调用方不能另指文件。 */
+export declare function backupPathFor(nodeDir: string, backupRef: string): string;
+export interface InstallActions {
+    /** 目标节点 before 核对:返回 fail 的 key(空 = 可继续)。 */
+    preflightBlocks(): Promise<string[]>;
+    /** 目标当前 auth 指纹(没有 auth.json → null)。 */
+    currentFingerprint(): Promise<string | null>;
+    /** 在隔离 staging HOME 里用该 profile 发一次 fresh 模型请求。 */
+    probe(): Promise<{
+        status: ProbeStatus;
+        detail: string;
+    }>;
+    /** 备份目标 auth.json → backup_ref(0600)。 */
+    backup(): Promise<{
+        backupRef: string;
+    }>;
+    /** 把 profile 凭据装进目标 CODEX_HOME(0600,原子)。 */
+    install(): Promise<void>;
+    /** 完整重启(PR-B 状态机),返回其 outcome。 */
+    restart(): Promise<RestartOutcome>;
+    /** 从 backup_ref 恢复 auth.json。 */
+    restore(backupRef: string): Promise<void>;
+    /** 探针在 registry 里的回写(时间 + 状态)。 */
+    recordProbe(status: ProbeStatus): Promise<void>;
+}
+export interface InstallInput {
+    profileId: string;
+    sourceFingerprint: string;
+}
+export interface InstallOutcome {
+    checks: ReceiptCheck[];
+    stoppedAt: string;
+    rolledBack: boolean;
+    backupRef: string | null;
+}
+/**
+ * account install 状态机:preflight → fresh 探针(401/quota/模型不兼容/unknown 都 STOP,目标一字未动)→ 备份 → 安装 →
+ * 完整重启(含 verify)→ 目标指纹 == 源指纹。安装后任一步失败 → 恢复备份 + 再重启一次(回滚),receipt 记两段。
+ */
+export declare function runAccountInstall(input: InstallInput, a: InstallActions): Promise<InstallOutcome>;
+export interface RollbackActions {
+    /** 读原 install receipt;返回它的 backup_ref 与当时的 target_previous_fingerprint。 */
+    readInstallReceipt(): Promise<{
+        backupRef: string;
+        targetPreviousFingerprint: string | null;
+    } | null>;
+    backupExists(backupRef: string): Promise<boolean>;
+    restore(backupRef: string): Promise<void>;
+    restart(): Promise<RestartOutcome>;
+    currentFingerprint(): Promise<string | null>;
+}
+export declare function runRollback(a: RollbackActions): Promise<InstallOutcome>;

package/dist/src/codex-lifecycle-canary.d.ts

@@ -0,0 +1,20 @@
+/**
+ * #1856 PR-E — `anet node codex canary <alias>...`:批量只读体检,**顺序跑、第一个 FAIL 即停**。
+ * 批量重启 / 换账号之前先 canary;后面的节点一个都不碰,汇总里明确写"未跑"。纯逻辑,verify 由调用方注入。
+ */
+export interface CanaryNodeResult {
+    readonly alias: string;
+    readonly verdict: "PASS" | "FAIL";
+    readonly blocking: readonly string[];
+    readonly receiptPath: string | null;
+    readonly ms: number;
+}
+export interface CanarySummary {
+    readonly verdict: "PASS" | "FAIL";
+    readonly ran: readonly CanaryNodeResult[];
+    /** 因前面 FAIL 而没跑的节点(顺序保留)。 */
+    readonly skipped: readonly string[];
+    readonly stoppedAt: string | null;
+}
+export declare function runCanary(aliases: readonly string[], verifyOne: (alias: string) => Promise<Omit<CanaryNodeResult, "alias" | "ms">>, now?: () => number): Promise<CanarySummary>;
+export declare function formatCanarySummary(s: CanarySummary): string;