@steerable/agent-shell 0.6.37 → 0.6.39

package/dist/local-backend/router.js

@@ -2439,7 +2439,7 @@ export class LocalBackendRouter {
                     `如确需读取项目外的文件，可请用户在项目里附加为源文件夹。\n` +
                     `例外：本会话的用户上传附件目录 ${chatAttachmentsDirPath(chatId)} 也在项目家目录外，` +
                     `但它已作为**只读放行根**开放给 local_read_file（用绝对路径可直接读取，不会被项目围栏拒绝）。` +
-                    `用户附到本条消息的文件都放在那里；需要转换（docx / pdf / xlsx / pptx 等）时，` +
+                    /* shell-neutral:allow generic document extensions, not product identity */ `用户附到本条消息的文件都放在那里；需要转换（docx / pdf / xlsx / pptx 等）时，` +
                     `把该绝对路径交给 local_exec_shell 的转换脚本处理即可，**不要**因为它在项目家目录外就拒绝读取或要求用户重新拷贝。`;
             // W6-5 + W6-7a：项目级规则文件（AGENTS.md / CLAUDE.md）是不可信输入，
             // 仅在用户显式信任该项目后才注入模型上下文——未信任一律不读取、不注入

package/dist/sidecar/egress-proxy.d.ts

@@ -85,7 +85,7 @@ export declare function egressBinaryCacheDir(platform?: NodeJS.Platform, env?: N
  * 被截断或替换的文件不会被执行。
  */
 export declare function verifiedCachedEgress(cacheDir: string, version: string, target: string): string | null;
-/** Download the lockstep egress binary. Returns the printed path, or null. */
+/** Download the artifact-lock egress binary. Returns the printed path, or null. */
 export declare function downloadPublishedEgress(repoRoot: string, cacheDir: string): Promise<string | null>;
 /**
  * Env override, then a locally built private binary, then a cached copy

package/dist/sidecar/egress-proxy.js

@@ -105,14 +105,22 @@ function hostEgressTarget() {
         return process.arch === 'x64' ? 'linux-x64' : null;
     return null;
 }
-function lockstepVersion(repoRoot) {
+function artifactVersion(repoRoot) {
     try {
-        const pkg = JSON.parse(readFileSync(path.join(repoRoot, 'package.json'), 'utf8'));
-        return typeof pkg.version === 'string' ? pkg.version : null;
+        const lock = JSON.parse(readFileSync(path.join(repoRoot, 'rust-artifacts.lock.json'), 'utf8'));
+        if (lock.compatibility?.egressCli !== 1)
+            return null;
+        return typeof lock.artifactVersion === 'string' ? lock.artifactVersion : null;
     }
     catch {
-        // 读不到根 package.json 就无法定位缓存文件，交给下载步骤处理。
-        return null;
+        try {
+            const manifest = readFileSync(path.join(repoRoot, 'rust-artifacts.toml'), 'utf8');
+            return manifest.match(/\[artifacts\][\s\S]*?\nversion\s*=\s*"([^"]+)"/)?.[1] ?? null;
+        }
+        catch {
+            // 读不到 artifact 版本就无法安全定位缓存文件。
+            return null;
+        }
     }
 }
 /**
@@ -130,13 +138,13 @@ export function verifiedCachedEgress(cacheDir, version, target) {
     return expected && expected === actual ? binary : null;
 }
 const EGRESS_DOWNLOAD_TIMEOUT_MS = 60_000;
-/** Download the lockstep egress binary. Returns the printed path, or null. */
+/** Download the artifact-lock egress binary. Returns the printed path, or null. */
 export function downloadPublishedEgress(repoRoot, cacheDir) {
     const script = path.join(repoRoot, 'scripts', 'fetch_verified_artifacts.py');
     // 与 sidecar 同一解释器：系统 python3 可能不带 SSL，下载不了 https。
     const python = resolveSidecarPython();
     return new Promise((resolve) => {
-        const child = spawn(python, [script, 'egress', '--lockstep', '--target', 'host', '--out', cacheDir], {
+        const child = spawn(python, [script, 'egress', '--artifact-lock', '--target', 'host', '--out', cacheDir], {
             cwd: repoRoot,
             stdio: ['ignore', 'pipe', 'pipe'],
         });
@@ -175,7 +183,7 @@ export async function ensureEgressProxyExecutable(startDir, download = downloadP
     const built = localBuiltEgress(repoRoot);
     if (built)
         return built;
-    const version = lockstepVersion(repoRoot);
+    const version = artifactVersion(repoRoot);
     const target = hostEgressTarget();
     if (!version || !target)
         return null;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@steerable/agent-shell",
-  "version": "0.6.37",
+  "version": "0.6.39",
   "description": "Steerable framework — product-neutral desktop/headless agent host (Tier 5). Electron main + preload + headless HTTP server (BS) sharing one storage/sidecar/tooling core; scenario packs extend it through the @steerable/pack-sdk contract and are composed at build time by the consuming product.",
   "license": "Apache-2.0",
   "homepage": "https://steerableframework.com/",
@@ -55,9 +55,9 @@
     "he": "^1.2.0",
     "node-pty": "^1.1.0",
     "semver": "^7.8.0",
-    "@steerable/agent-harness": "0.6.37",
-    "@steerable/agent-protocol": "0.6.37",
-    "@steerable/pack-sdk": "0.6.37"
+    "@steerable/pack-sdk": "0.6.39",
+    "@steerable/agent-protocol": "0.6.39",
+    "@steerable/agent-harness": "0.6.39"
   },
   "devDependencies": {
     "@types/better-sqlite3": "^7.6.13",