@tbox.cn/tboxcode-dsh-sdk 0.0.0-stage → 0.1.0-rc.1

package/lib/index.d.ts

@@ -0,0 +1,722 @@
+import { CommandDescriptorLike, ModeKnobs, SkillSummaryLike } from "@tbox.cn/dsh-acp-bridge-core";
+import { SessionUpdate } from "@agentclientprotocol/sdk";
+import { AgentLike, ConfigModelSelection, HostAgentHandle, HostStreamFrame, LlmCatalogDeps, PersistedHeader, SessionDeps, SessionLike, SharedAcpCore } from "@tbox.cn/dsh-acp-full";
+import { IncomingMessage, Server } from "node:http";
+
+//#region src/supervisor.d.ts
+type SupervisorPhase = 'idle' | 'booting' | 'standby' | 'starting' | 'ready' | 'restarting' | 'failed-permanent' | 'failed-protocol' | 'disposed';
+interface SupervisorOptions {
+  /**
+   * cli 启动命令（argv 前缀，末尾追加 'server'）。缺省 = PATH 上的
+   * `tboxcode-dsh`（机器路径裸命令零 flag 契约）；测试注入假 bin。
+   */
+  command?: string[];
+  /**
+   * start 释放形态（warmup 规格——释放时机归 Supervisor，cli 状态机唯一）：
+   * immediate = 常规（收 standby 立即发 start）；on-first-connection = 预热
+   * （首连接触发释放——connect() 挂起到 ready）。
+   */
+  startMode?: 'immediate' | 'on-first-connection';
+  /** 就绪确认超时（boot→ready 全程；超时 kill + 瞬时退避）。缺省 120s。 */
+  readyTimeoutMs?: number;
+  /** 退避基数（缺省 1000ms；序列 = min(base×2^attempt, max)——opencode 先例）。 */
+  backoffBaseMs?: number;
+  /** 退避上限（缺省 5000ms）。 */
+  backoffMaxMs?: number;
+  /** 连续重启上限（缺省 3——耗尽即 failed-permanent 上抛）。 */
+  maxRestartAttempts?: number;
+  /** stderr 环形缓冲行容量（缺省 1000——ready-channel-v2 建议值）。 */
+  ringBufferLines?: number;
+  /** 子进程环境（叠加在 process.env 上）。 */
+  env?: Record<string, string>;
+  /** 进度日志（stderr 通道由消费方收口；禁 token——安全纪律）。 */
+  log?: (message: string) => void;
+}
+interface ConnectionCredentials {
+  baseUrl: string;
+  cookie: string;
+  port: number;
+}
+/** 子进程适配面（默认实现 = child_process 行流包装；测试注入假件）。 */
+interface SupervisorChild {
+  writeStdin(chunk: string): void;
+  onStdoutLine(listener: (line: string) => void): void;
+  onStderrLine(listener: (line: string) => void): void;
+  onExit(listener: (code: number | null) => void): void;
+  kill(signal?: 'SIGTERM' | 'SIGKILL'): void;
+}
+type SupervisorSpawner = (argv: string[]) => SupervisorChild;
+/** Supervisor 部署错误（退出码 2/3 路由或退避耗尽——消费方上抛面）。 */
+declare class SupervisorDeploymentError extends Error {
+  readonly kind: 'permanent' | 'protocol' | 'exhausted';
+  readonly report: string;
+  constructor(kind: 'permanent' | 'protocol' | 'exhausted', message: string, report: string);
+}
+/** 默认凭据交换：GET /connect?interactions=answer → 302 + v2 cookie（S2a 定案通道）。 */
+declare function exchangeCredentialsViaConnect(port: number, token: string): Promise<string>;
+declare class Supervisor {
+  #private;
+  constructor(options?: SupervisorOptions, spawner?: SupervisorSpawner, exchange?: (port: number, token: string) => Promise<string>);
+  phase(): SupervisorPhase;
+  onPhaseChange(listener: (phase: SupervisorPhase) => void): () => void;
+  /** 启动（spawn → standby → start 释放 → ready）。失败（永久 / 偏斜 / 退避耗尽）抛部署错误。 */
+  start(): Promise<void>;
+  /**
+   * 网关连接凭据（pre-standby 连接统一挂到 ready——warmup 规格；on-first-connection
+   * 形态下首调用触发 start 释放）。重启后缓存失效（凭据轮换——新 port + 新 token）。
+   */
+  connect(): Promise<ConnectionCredentials>;
+  /**
+   * 强制重新交换凭据（绕过 generation 缓存——R0 定案：dsh peer 生命周期
+   * 绑定连接面，mux 断开即 PeerId 销毁、旧 cookie 永久 401；再入通道）。
+   */
+  reconnect(): Promise<ConnectionCredentials>;
+  /** 崩溃导出（环形缓冲 stderr + 退出码序列 + 相位历史——诊断自包含）。 */
+  crashReport(): string;
+  /** 停机（SIGTERM → 3s 宽限 → SIGKILL；等待子进程退出）。 */
+  dispose(): Promise<void>;
+}
+//#endregion
+//#region src/wire.d.ts
+/**
+ * wire 契约（手写恰两处之二——sdk 对外面；规格真源 = dsh 0.2.1-rc.2 源码形状，
+ * 逐字段锚点见各类型注释；verify:upgrade 第五项帧比对守护漂移）。
+ *
+ * 编译域 / wire 域二分（bridge-typing-boundary-hardening）：本文件是 wire 域——
+ * dsh wire 形状对齐的子集手写（sdk 自有），永不内联跨仓类型；编译域直借
+ * （import type @deepseek-ai/*）住 bridge-core，不进本包。
+ */
+/** dsh wire JSON 值域（JsonValue 子集声明——wire 域不做深校验，envelope 级守卫）。 */
+type WireJson = string | number | boolean | null | readonly WireJson[] | {
+  readonly [key: string]: WireJson;
+};
+/**
+ * Session 事件 wire envelope（dsh:`packages/api/session-controller/src/types.ts:476-487`
+ * SessionWireEvent——0.2.1 形状：type/seq/time/data 四必备 + ignorable /
+ * sourceEventSeqs / surfaceOp 三可选）。
+ */
+interface WireSessionEvent {
+  readonly type: string;
+  readonly seq: number;
+  readonly time: number;
+  readonly data: WireJson;
+  readonly ignorable?: true;
+  readonly sourceEventSeqs?: WireJson;
+  readonly surfaceOp?: WireJson;
+}
+/** 会话寻址（dsh SessionAddress——durable 会话 id；subagent 联合面桥内不消费）。 */
+type WireSessionAddress = string;
+/** follow 请求参数（dsh:`packages/api/session-controller/src/types.ts:504-509`——无 cursor 参数）。 */
+interface WireFollowRequest {
+  readonly address: WireSessionAddress;
+  readonly maxMessages?: number;
+  readonly assistantStream?: true;
+}
+/** 重连 opening snapshot 的活跃 attempt（assistantStream 基线契约——stream.spec 收口语义）。 */
+interface WireAssistantStreamAttempt {
+  readonly attemptId: string;
+  readonly startedAfterSeq: number;
+  readonly turn: number;
+  readonly step: number;
+  readonly nextIndex: number;
+}
+/** assistant-stream 基线（重连衔接断言面——live 首帧 revision === baseline.revision + 1）。 */
+interface WireAssistantStreamBaseline {
+  readonly revision: number;
+  readonly activeAttempt?: {
+    readonly attemptId: string;
+    readonly nextIndex: number;
+  };
+  readonly attempts?: readonly WireAssistantStreamAttempt[];
+}
+/** assistant-stream live 帧（dsh agent runtime-types 呈现帧的 wire 子集）。 */
+interface WireAssistantStreamFrame {
+  readonly attemptId: string;
+  readonly index: number;
+  readonly revision: number;
+  readonly chunk?: {
+    readonly type: string;
+    readonly text?: string;
+  };
+  readonly finish?: unknown;
+}
+/** 会话 wire 头（dsh:`packages/api/session-controller/src/types.ts:449-466` SessionWireHeader）。 */
+interface WireSessionHeader {
+  readonly version: number;
+  readonly id: string;
+  readonly createdAt: number;
+  readonly cwd?: string;
+  readonly parentSession?: string;
+  readonly isSeeded: boolean;
+  readonly origin?: 'subagent';
+  readonly delegationDepth?: number;
+  readonly agentPreset?: string;
+}
+/** 历史页记录（dsh SessionHistoryRecord = {type:'event', event}）。 */
+interface WireHistoryRecord {
+  readonly type: 'event';
+  readonly event: WireSessionEvent;
+}
+/**
+ * follow 流帧（dsh:`packages/api/session-controller/src/types.ts:570-578`
+ * SessionFollowFrame——opening snapshot（header + cursor + records + hasMore +
+ * projections + assistantStream 基线）→ 有序 event 帧 → assistant-stream 帧）。
+ */
+type WireFollowFrame = {
+  readonly type: 'snapshot';
+  readonly header: WireSessionHeader;
+  readonly cursor: number;
+  readonly records: readonly WireHistoryRecord[];
+  readonly hasMore: boolean;
+  readonly projections: WireJson;
+  readonly assistantStream?: WireAssistantStreamBaseline;
+} | WireHistoryRecord | {
+  readonly type: 'assistant-stream';
+  readonly frame: WireAssistantStreamFrame;
+};
+/** 回看页（dsh:`packages/api/session-controller/src/types.ts:564-568` SessionPage——gap 补齐通道）。 */
+interface WirePage {
+  readonly records: readonly WireHistoryRecord[];
+  readonly hasMore: boolean;
+}
+declare function isRecord(value: unknown): value is Record<string, unknown>;
+declare function parseWireSessionEvent(raw: unknown): WireSessionEvent | null;
+declare function parseWireHistoryRecord(raw: unknown): WireHistoryRecord | null;
+declare function parseWireFollowFrame(raw: unknown): WireFollowFrame | null;
+declare function parseWirePage(raw: unknown): WirePage | null;
+/** $events ready 帧（clientId + host——连接代际身份）。 */
+interface WireEventReadyFrame {
+  readonly type: 'ready';
+  readonly clientId: string;
+  readonly host: {
+    readonly home: string;
+  };
+}
+/** $events 单向通知帧（event = allowlist 词汇；args = 载荷数组）。 */
+interface WireEventEmitFrame {
+  readonly type: 'emit';
+  readonly event: string;
+  readonly args: readonly WireJson[];
+}
+/** $events waterfall 帧（双向事件——answerer 应答经 $events/result）。 */
+interface WireEventWaterfallFrame {
+  readonly type: 'waterfall';
+  readonly event: string;
+  readonly eventId: string;
+  readonly agentId: string;
+  readonly request: Readonly<Record<string, WireJson>>;
+}
+/** waterfall 取消帧（宿主侧取消在途请求）。 */
+interface WireEventCancellationFrame {
+  readonly type: 'cancel';
+  readonly eventId: string;
+}
+type WireEventFrame = WireEventReadyFrame | WireEventEmitFrame | WireEventWaterfallFrame | WireEventCancellationFrame;
+declare function parseWireEventFrame(raw: unknown): WireEventFrame | null;
+/** waterfall 应答 outcome 三态（dsh:`packages/api/gateway/src/stream-protocol.ts:102-140`）。 */
+type WireEventOutcome = {
+  readonly kind: 'next';
+} | {
+  readonly kind: 'result';
+  readonly value?: WireJson;
+} | {
+  readonly kind: 'rejected';
+  readonly error: {
+    readonly code?: string;
+    readonly message: string;
+  };
+};
+//#endregion
+//#region src/carrier.d.ts
+/** dsh Remote 错误（{ok:false,error} 面——mapRpcError 的载体二输入）。 */
+interface CarrierRpcErrorShape {
+  readonly code: string;
+  readonly message: string;
+  readonly details?: unknown;
+}
+declare class CarrierRpcError extends Error {
+  readonly code: string;
+  readonly details: unknown;
+  constructor(shape: CarrierRpcErrorShape);
+}
+/** 传输层错误（非 JSON-RPC 面：HTTP 非 200 / WS 关闭 / envelope 畸形）。 */
+declare class CarrierTransportError extends Error {
+  constructor(message: string);
+}
+interface StreamHandlers<T> {
+  onItem(value: T): void;
+  onEnd?(): void;
+  onError?(error: CarrierRpcErrorShape): void;
+  onClose?(hadError: boolean): void;
+}
+interface StreamHandle {
+  /** 取消（上行 cancel 帧 + 关闭插座；幂等）。 */
+  cancel(): void;
+}
+interface EventStreamHandlers {
+  onReady(frame: WireEventReadyFrame): void;
+  onEmit(frame: WireEventEmitFrame): void;
+  onWaterfall(frame: WireEventWaterfallFrame): void;
+  onCancel(frame: WireEventCancellationFrame): void;
+  onClose?(hadError: boolean): void;
+}
+interface EventStreamHandle {
+  /** waterfall 应答（$events/result unary——outcome 三态）。 */
+  respond(eventId: string, outcome: WireEventOutcome): Promise<void>;
+  close(): void;
+}
+interface DshCarrierOptions {
+  /** dsh web 根（http://127.0.0.1:<port>——loopback 上游硬约束）。 */
+  baseUrl: string;
+  /** v2 API cookie（Supervisor.connect() 交付；HttpOnly 值原样注入）。 */
+  cookie: string;
+  /**
+   * 凭据再交换（可选——mux 断开销毁 PeerId 后的自愈通道）。R0 定案：dsh
+   * peer 生命周期绑定连接面（admitConnection release 即 peers.delete +
+   * peer.dispose），mux 断开后旧 cookie 永久 401；注入此通道后 carrier 在
+   * 重开 mux 前自动再交换，unary 遇 401 亦触发单飞刷新 + 一次重试。
+   */
+  refreshCredentials?: () => Promise<{
+    baseUrl: string;
+    cookie: string;
+  }>;
+}
+declare class DshCarrier {
+  #private;
+  constructor(options: DshCarrierOptions);
+  /** unary RPC（args 内层 = 方法签名参数名原样——wire 陷阱的调用方契约）。 */
+  unary<T extends WireJson>(method: string, args: Record<string, WireJson>): Promise<T>;
+  /**
+   * 通用 stream（单 mux 多路复用：open → item/end/error；cancel = 上行
+   * cancel 帧——插座为全体流共享，不随单流关闭）。mux 断开时所有活跃流
+   * 收 onError + onClose(hadError)——重开由调用方退避逻辑承接（重开经
+   * ensureMux 自动完成凭据再交换）。
+   */
+  openStream<T>(endpoint: string, args: Record<string, WireJson>, handlers: StreamHandlers<T>): StreamHandle;
+  /**
+   * `$events` 事件流（跨切事件通道——allowlist 词汇：waterfall 两件 answerer
+   * 真通道 + emit 十余件；session 事件词汇走 follow 流，S2a probe ② 定案）。
+   */
+  openEvents(handlers: EventStreamHandlers): EventStreamHandle;
+  /** 释放全部插座（网关停机路径——mux 关闭即 server 侧 peer 释放）。 */
+  dispose(): void;
+}
+//#endregion
+//#region src/decode.d.ts
+/** 消费面 brand（brand-cast 唯一 cast 点的编译标记）。 */
+declare const CONSUMABLE_EVENT_BRAND: unique symbol;
+/** 过分类门的项目事件（brand 后交投影管线——sdk 外不得自造）。 */
+type ConsumableSessionEvent = WireSessionEvent & {
+  readonly [CONSUMABLE_EVENT_BRAND]: true;
+};
+type DecodedWireEvent = {
+  readonly kind: 'consumable';
+  readonly event: ConsumableSessionEvent;
+} | {
+  readonly kind: 'opaque';
+  readonly event: WireSessionEvent;
+  readonly level: 'debug' | 'warn';
+};
+interface DecodeStats {
+  invalid: number;
+  opaqueDebug: number;
+  opaqueWarn: number;
+  consumable: number;
+}
+/**
+ * wire 事件解码：envelope 校验 → 分类门 → project 消费字段守卫（data 必为
+ * JSON 对象——投影鸭子读的最小前提；字段级形状归 wireFixtures 等价 runner
+ * 与投影自身鸭子读域）→ brand-cast。skip / unknown → opaque 降级分级。
+ */
+declare function decodeWireEvent(raw: unknown, stats?: DecodeStats): DecodedWireEvent | null;
+//#endregion
+//#region src/gateway/follow-pool.d.ts
+interface FollowPoolHandlers {
+  /** opening snapshot 首达（每条流生命周期一次；重开再达）。 */
+  onSnapshot(header: WireSessionHeader, cursor: number, projections: WireJson, baseline?: WireAssistantStreamBaseline): void;
+  /** 过分类门的 journal 事件（按 seq 有序；opaque 不回调）。 */
+  onEvent(event: ConsumableSessionEvent): void;
+  /** assistant-stream 呈现帧（衔接校验：live 首 frame.revision === baseline.revision + 1）。 */
+  onAssistantStream(frame: WireAssistantStreamFrame): void;
+  /** 流断（重开由池负责——error/close/error 帧三入口归一）。 */
+  onDown(reason: string): void;
+}
+interface FollowHandle {
+  close(): void;
+}
+interface FollowPoolStats {
+  live: number;
+  reopening: number;
+  decoded: DecodeStats;
+  gapsRepaired: number;
+}
+declare class FollowPool {
+  #private;
+  constructor(carrier: DshCarrier, options?: {
+    reopenBaseMs?: number;
+  });
+  /** 打开（幂等——已 live 返回既有订阅句柄；重开由池内部接管）。 */
+  open(sessionId: string, handlers: FollowPoolHandlers): FollowHandle;
+  close(sessionId: string): void;
+  stats(): FollowPoolStats;
+  /**
+   * 全量读取：follow snapshot + page 环拼接到 hasMore=false → seq 去重排序 +
+   * 连续性断言（dense zero-based 前缀——跳号即 CarrierRpcError fail-fast）。
+   */
+  readAll(sessionId: string): Promise<{
+    header: WireSessionHeader;
+    events: ConsumableSessionEvent[];
+    projections: WireJson;
+  }>;
+}
+//#endregion
+//#region src/gateway/extension-points.d.ts
+/** 连接上下文（钩子签名——request 面 = server→client 请求，answerer 切片 6 消费）。 */
+interface ConnContext {
+  readonly connId: string;
+  readonly caps: {
+    elicitation: boolean;
+  };
+  request(method: string, params: unknown): Promise<unknown>;
+  notify(method: string, params: unknown): Promise<void>;
+}
+interface AcpGatewayHooks {
+  /** 入站参数变换（box 资源解析对位——schema 校验前面）。null = 拒绝。 */
+  transformInbound?(method: string, params: unknown, conn: ConnContext): Promise<unknown | null> | unknown | null;
+  /** 出站 update 变换（box 呈现派生对位）。null = 该连接丢弃。 */
+  transformOutbound?(update: SessionUpdate, conn: ConnContext): SessionUpdate | null;
+  /** `_tbox.cn/*` 本地方法注册表（box 平台方法——不 forward server）。 */
+  methods?: Record<string, (params: unknown, conn: ConnContext) => Promise<unknown>>;
+  /** 入站 content block 变换（image/tbox_url codec——载体一 contentCodec 对位）。 */
+  decodeContent?(block: unknown, conn: ConnContext): Promise<unknown> | unknown;
+  /** 扇出覆写（默认 = 会话亲和集 − echo 抑制）。 */
+  fanout?(update: SessionUpdate, defaultTargets: readonly string[]): readonly string[] | undefined;
+  /** 亲和生命周期钩子（answerer 宽限重问触发面——bind 即 attach、unbind 即失联）。 */
+  onSessionBind?(connId: string, sessionId: string): void;
+  onSessionUnbind?(connId: string, sessionId: string): void;
+}
+/** fail-open 执行器：throw → warn + fallback（钩子纪律的单一实现点）。 */
+declare function runHookOpen<T>(logger: {
+  warn(m: string): void;
+}, label: string, hook: () => T, fallback: T): Promise<T>;
+//#endregion
+//#region src/gateway/fanout.d.ts
+type RouterLogger = {
+  warn(message: string): void;
+  info(message: string): void;
+  debug(message: string): void;
+};
+declare class FanoutRouter {
+  #private;
+  constructor(logger: RouterLogger, hooks?: AcpGatewayHooks);
+  attachConnection(connId: string, send: (frame: unknown) => void, ctx: ConnContext): void;
+  detachConnection(connId: string): void;
+  /** 会话亲和登记（uplink 泵——session/new|load|resume 成功响应）。 */
+  bind(connId: string, sessionId: string): void;
+  unbind(connId: string, sessionId: string): void;
+  /** 会话当前绑定连接读面（answerer 竞速的 eligible 数据源）。 */
+  boundConnIds(sessionId: string): readonly string[];
+  /** 连接的 ConnContext 读面（answerer dispatch——server→client 请求直发）。 */
+  ctxOf(connId: string): ConnContext | undefined;
+  /** 结算通知扇出（answerer resolved——_tbox.cn 扩展帧）。 */
+  routeResolved(method: string, payload: Record<string, unknown>, excludeConnId?: string): void;
+  /** 回放计数（uplink load 生命周期——begin 于请求、take 于响应）。 */
+  beginReplayCount(connId: string): void;
+  takeReplayCount(connId: string): number | undefined;
+  /** turn origin 记账（uplink prompt 钩子——echo 抑制窗口开启/关闭）。 */
+  setTurnOrigin(sessionId: string, connId: string): void;
+  clearTurnOrigin(sessionId: string): void;
+  /** 共享核 io.notify 唯一入口（session/update 帧路由）。 */
+  route(update: SessionUpdate & {
+    sessionId?: string;
+  }): void;
+  /** 共享核 io.extNotify 出口（`_tbox.cn/*`——payload.sessionId 在场则亲和路由）。 */
+  routeExt(notification: {
+    method: string;
+    payload: Record<string, unknown>;
+  }, opts?: {
+    excludeConnId?: string;
+  }): void;
+  stats(): {
+    connections: number;
+    dropped: number;
+    suppressed: number;
+  };
+}
+//#endregion
+//#region src/gateway/session-deps.d.ts
+type GatewayLogger = {
+  warn(message: string): void;
+  info(message: string): void;
+  debug(message: string): void;
+};
+/** followup 鸭子面（桥经 cast 调用——载体一 host agent 同款，见 SessionChannel#runPromptPath）。 */
+type GatewayAgentLike = AgentLike & {
+  followup(message: {
+    id: string;
+    content: readonly unknown[];
+  }): void;
+};
+/** 网关侧会话状态（句柄注册表值——follow 事件交付的身份锚）。 */
+interface RemoteSessionState {
+  readonly id: string;
+  readonly session: SessionLike;
+  readonly agent: GatewayAgentLike;
+  header: WireSessionHeader;
+  projections: WireJson;
+  /** installModelSelection 注册的 'agent/request' 钩子（selection 请求时点提取）。 */
+  selectionProbe: ((payload: unknown, next: () => Promise<unknown>) => Promise<unknown>) | undefined;
+  lastPushedSelection: string | undefined;
+  /** 挂起 prompt 记账（pushPrompt 置位 / turn/end 复位——中断状态机观测面）。 */
+  promptInflight: boolean;
+}
+declare class RpcSessionDeps implements SessionDeps {
+  #private;
+  readonly logger: GatewayLogger;
+  constructor(deps: {
+    carrier: DshCarrier;
+    pool: FollowPool;
+    logger: GatewayLogger;
+  });
+  createAgent(options: Parameters<SessionDeps['createAgent']>[0]): Promise<HostAgentHandle>;
+  resumeAgent(options: Parameters<SessionDeps['resumeAgent']>[0]): Promise<HostAgentHandle>;
+  readonly persistence: {
+    stat: (sessionId: string, _opts: {
+      signal?: AbortSignal;
+    }) => Promise<{
+      header: PersistedHeader;
+    } | undefined>;
+    list: (_opts: {
+      signal?: AbortSignal;
+    }) => Promise<Array<{
+      header: PersistedHeader;
+    }>>;
+    open: (sessionId: string, _opts: {
+      signal?: AbortSignal;
+    }) => Promise<{
+      read(opts?: {
+        signal?: AbortSignal;
+      }): Promise<{
+        events: readonly never[];
+      }>;
+      close(): Promise<void>;
+    }>;
+  };
+  readonly sessionStore: {
+    get: (sessionId: string) => unknown;
+    flush: (session: SessionLike) => Promise<void>;
+  };
+  readonly llm: LlmCatalogDeps;
+  applyModeKnobs(session: SessionLike, _agent: AgentLike, knobs: ModeKnobs): void | Promise<void>;
+  defaultSelection(): ConfigModelSelection | undefined;
+  executeCommand(agent: AgentLike, line: string, _signal?: AbortSignal): Promise<{
+    commandId: string;
+  } | undefined>;
+  listCommands(agent: AgentLike): Promise<ReadonlyArray<CommandDescriptorLike>>;
+  listUserInvocableSkills(agent: AgentLike): Promise<ReadonlyArray<SkillSummaryLike>>;
+  onSessionEvent(listener: (session: never, event: never) => void): () => void;
+  onAssistantStream(listener: (payload: {
+    agent: AgentLike;
+    frame: HostStreamFrame;
+  }) => void): () => void;
+  onInboxClaimed(listener: (payload: {
+    agent: AgentLike;
+    message: {
+      id?: string;
+    };
+    turn: number;
+  }) => void): () => void;
+  onAgentError(listener: (payload: {
+    agent: AgentLike;
+    turn: number;
+    error: unknown;
+  }) => void): () => void;
+  /** caps 门控——serve 形态恒 []（目录层部署期静态；answerer 层逐请求判定） */
+  sessionToolDenies(): ReadonlyArray<string>;
+  /** 命令表面变更 = $events commands/change + skills.watch 流（payload-free 重取） */
+  onCommandSurfaceChanged(listener: () => void): () => void;
+  /** 会话 id 集（受管注册表）。 */
+  sessionIds(): readonly string[];
+  /** 该会话是否有挂起 prompt（pushPrompt 置位 / turn/end 复位）。 */
+  hasInflightPrompt(sessionId: string): boolean;
+  /** follow 池健康（live = 至少一条流在泵；entries = 受管会话数）。 */
+  poolLive(): boolean;
+  poolEntries(): number;
+  /** 结算通道（合成 agent/error——桥内 inflight.fail -32603，诊断走 message）。 */
+  settlePrompt(sessionId: string, error: unknown): void;
+  /** 网关关停（流取消——follow 池由各会话句柄 dispose 承载） */
+  dispose(): void;
+}
+/** $events commands/change 订阅（命令表面变更流源——skills.watch 由此并存） */
+declare function openCommandsChangeEventStream(carrier: DshCarrier, onEvent: () => void, logger: GatewayLogger): EventStreamHandle;
+//#endregion
+//#region src/gateway/interruption.d.ts
+/**
+ * 载体中断状态机（网关承接——对齐 acp-bridge 完成相关性连接中断分支）。
+ *
+ * 作用域：gateway↔dsh carrier 断（follow 池失联）——浏览器 WS 断不归此
+ * （AbortSignal 解耦：响应丢失 + 重连回放恢复，零网关动作）。
+ *
+ * 迁移：CARRIER_LIVE ──(池全断)──> CARRIER_DOWN(t0) ──(池恢复 live)──>
+ * LIVE（挂起 prompt 继续等 turn/end——零动作）| ──(now − t0 > 阈值)──>
+ * 结算：对每个 in-flight 会话合成 agent/error（桥 onAgentError → 挂起
+ * prompt fail -32603，诊断走 message：tboxcode carrier-timeout + downMs +
+ * lastCursor——_meta 专用错误数据面为首版后援注记项）。
+ *
+ * in-flight 观测：RpcSessionDeps 层记账（pushPrompt 置位、turn/end 事件
+ * 复位——桥内挂起态的 deps 侧镜像，零 bridge 改动）。
+ */
+/** 可观测面（RpcSessionDeps 提供）。 */
+interface InterruptionSource {
+  /** 会话 id 集（含在途 prompt 判定）。 */
+  sessionIds(): readonly string[];
+  /** 该会话是否有挂起 prompt（pushPrompt 置位 / turn/end 复位）。 */
+  hasInflightPrompt(sessionId: string): boolean;
+  /** follow 池健康（live = 至少一条流在泵；entries = 受管会话数）。 */
+  poolLive(): boolean;
+  poolEntries(): number;
+  /** 结算通道（合成 agent/error——桥内 inflight.fail）。 */
+  settle(sessionId: string, error: unknown): void;
+}
+interface InterruptionMonitorOptions {
+  /** 结算阈值（缺省 120s；测试注入短值）。 */
+  timeoutMs?: number;
+  /** 轮询间隔（缺省 1s；测试注入）。 */
+  tickMs?: number;
+  now?: () => number;
+  logger?: {
+    warn(m: string): void;
+    info(m: string): void;
+    debug(m: string): void;
+  };
+}
+declare class InterruptionMonitor {
+  #private;
+  constructor(source: InterruptionSource, options?: InterruptionMonitorOptions);
+  start(): void;
+  stop(): void;
+  /** 状态推进（start 的定时入口；测试可直接调）。 */
+  tick(): void;
+  /** 观测（doctor/health 面）。 */
+  snapshot(): {
+    down: boolean;
+    downSince: number | undefined;
+    settled: boolean;
+  };
+}
+//#endregion
+//#region src/gateway/answerer.d.ts
+/** 宽限窗（全员出局后等待切回/attach 的时长——终态前最后机会）。 */
+declare const GRACE_WINDOW_MS = 60000;
+/** 单 question 交互总预算（跨重问累计——防永久循环）。 */
+declare const FORM_BUDGET_MS = 3600000;
+/** permission 单成员应答超时（超时出局——不阻塞其余成员）。 */
+declare const PERMISSION_MEMBER_TIMEOUT_MS = 30000;
+/** 成员弃权 RPC 错误码（客户端显式让位——不计入结算）。 */
+declare const ABSTAIN_RPC_ERROR = -32001;
+type InteractionKind = 'elicitation' | 'permission';
+interface MemberAttempt {
+  readonly connId: string;
+  timer?: ReturnType<typeof setTimeout>;
+}
+interface PendingInteraction {
+  readonly kind: InteractionKind;
+  readonly sessionId: string;
+  readonly eventId: string;
+  readonly frame: WireEventWaterfallFrame;
+  /** 已派发成员（abstain/失联即出局）。 */
+  readonly asked: Map<string, MemberAttempt>;
+  state: 'active' | 'grace' | 'settled';
+  graceTimer?: ReturnType<typeof setTimeout>;
+  readonly budgetStartedAt: number;
+  settledOutcome?: WireEventOutcome;
+  /** 结算通知的排除面（应答者已见结果）。 */
+  respondedBy?: string;
+}
+interface InteractionRegistryDeps {
+  now(): number;
+  timers: {
+    set(fn: () => void, ms: number): ReturnType<typeof setTimeout>;
+    clear(timer: ReturnType<typeof setTimeout>): void;
+  };
+  /** 会话当前绑定连接（fanout 亲和表）。 */
+  eligibleConns(sessionId: string): readonly string[];
+  /** 连接的 elicitation 能力（question 派发前置；permission 不要求）。 */
+  capsOf(connId: string): boolean;
+  /** server→client 请求直发（ConnContext.request——drainUpdates 先行由上游承载）。 */
+  dispatch(connId: string, kind: InteractionKind, params: unknown): Promise<unknown>;
+  /** $events/result unary（outcome 三态）。 */
+  respond(eventId: string, outcome: WireEventOutcome): Promise<void>;
+  /** 结算扇出（_tbox.cn/acp_{elicitation,permission}_resolved——排除应答者）。 */
+  resolvedNotify(kind: InteractionKind, payload: Record<string, unknown>, excludeConnId?: string): void;
+  /** waterfall agentId → 网关 sessionId（session-deps 采纳映射）。 */
+  sessionIdOfAgent(agentId: string): string | undefined;
+  /** question 形状构造（bridge-core buildElicitationSchema 方言映射）。 */
+  buildQuestionParams(sessionId: string, frame: WireEventWaterfallFrame): {
+    message: string;
+    requestedSchema: unknown;
+  };
+  logger: {
+    warn(message: string): void;
+    info(message: string): void;
+    debug(message: string): void;
+  };
+}
+declare class InteractionRegistry {
+  #private;
+  constructor(deps: InteractionRegistryDeps);
+  /** 在册交互数（观测面）。 */
+  get size(): number;
+  /** pendingOf——会话当前在途交互（观测/测试面）。 */
+  pendingOf(sessionId: string): PendingInteraction | undefined;
+  /** waterfall 帧入口（$events onWaterfall）。 */
+  begin(frame: WireEventWaterfallFrame): void;
+  /** $events cancel 帧——宿主取消（turn 中止链），结算 cancelled 优先于一切。 */
+  cancel(frame: WireEventCancellationFrame): void;
+  /** 连接入册/会话切回（router.bind / load·resume·new 成功）——GRACE 重问触发点。 */
+  attach(connId: string, sessionId: string): void;
+  /** switchBack——同 attach 语义（会话重新绑定的显式形态）。 */
+  switchBack(connId: string, sessionId: string): void;
+  /** 连接失联（ws close）——成员出局；active 空员进 GRACE。 */
+  disconnect(connId: string): void;
+  /** 停机清算（dispose——全 pending 终态 cancelled）。 */
+  dispose(): void;
+}
+//#endregion
+//#region src/gateway/uplink.d.ts
+type UplinkLogger = {
+  warn(message: string): void;
+  info(message: string): void;
+  debug(message: string): void;
+};
+interface AttachAcpGatewayOptions {
+  core: SharedAcpCore;
+  hooks?: AcpGatewayHooks;
+  /** 连接鉴权（box 注入；缺省全放——demo 面 Origin 校验） */
+  authenticate?: (req: IncomingMessage) => boolean | Promise<boolean>;
+  logger: UplinkLogger;
+}
+interface AcpGatewayHandle {
+  close(): void;
+  /** 会话亲和读面（answerer eligibleConns——组合根经此装配竞速面）。 */
+  boundConnIds(sessionId: string): readonly string[];
+  /** server→client 请求面（answerer dispatch 经 ConnContext.request）。 */
+  ctxOf(connId: string): ConnContext | undefined;
+  /** 结算通知扇出（answerer resolvedNotify）。 */
+  routeResolved(method: string, payload: Record<string, unknown>, excludeConnId?: string): void;
+}
+declare function attachAcpGateway(server: Server, path: string, options: AttachAcpGatewayOptions): AcpGatewayHandle;
+//#endregion
+//#region src/index.d.ts
+/**
+ * tboxcode-dsh-sdk：agtcodingbox 唯一依赖面。
+ * - Supervisor：dsh server 子进程生命线监护（信封协议 v2.2 消费面——ready-channel-v2 /
+ *   integration design Supervisor 契约节；切片 2）
+ * - 薄 carrier：unary POST envelope + WS mux + $events waterfall 应答（运行时零
+ *   dsh 包依赖——spike-gateway-assembly 定型手写路线；切片 3）
+ * - wire 契约手写子集 + decodeWireEvent（全仓唯一合法 cast 点——bridge-typing-
+ *   boundary-hardening 类型边界；切片 3）
+ */
+declare const PACKAGE_NAME = "@tbox.cn/tboxcode-dsh-sdk";
+//#endregion
+export { ABSTAIN_RPC_ERROR, type AcpGatewayHandle, type AcpGatewayHooks, type AttachAcpGatewayOptions, CarrierRpcError, type CarrierRpcErrorShape, CarrierTransportError, type ConnContext, type ConnectionCredentials, type ConsumableSessionEvent, type DecodeStats, type DecodedWireEvent, DshCarrier, type DshCarrierOptions, type EventStreamHandle, type EventStreamHandlers, FORM_BUDGET_MS, FanoutRouter, type FollowHandle, FollowPool, type FollowPoolHandlers, type FollowPoolStats, GRACE_WINDOW_MS, type GatewayLogger, type InteractionKind, InteractionRegistry, type InteractionRegistryDeps, InterruptionMonitor, type InterruptionMonitorOptions, type InterruptionSource, PACKAGE_NAME, PERMISSION_MEMBER_TIMEOUT_MS, type PendingInteraction, type RemoteSessionState, RpcSessionDeps, type StreamHandle, type StreamHandlers, Supervisor, type SupervisorChild, SupervisorDeploymentError, type SupervisorOptions, type SupervisorPhase, type SupervisorSpawner, type WireAssistantStreamAttempt, type WireAssistantStreamBaseline, type WireAssistantStreamFrame, type WireEventCancellationFrame, type WireEventEmitFrame, type WireEventFrame, type WireEventOutcome, type WireEventReadyFrame, type WireEventWaterfallFrame, type WireFollowFrame, type WireFollowRequest, type WireHistoryRecord, type WireJson, type WirePage, type WireSessionAddress, type WireSessionEvent, type WireSessionHeader, attachAcpGateway, decodeWireEvent, exchangeCredentialsViaConnect, isRecord, openCommandsChangeEventStream, parseWireEventFrame, parseWireFollowFrame, parseWireHistoryRecord, parseWirePage, parseWireSessionEvent, runHookOpen };

package/lib/index.js

@@ -0,0 +1,5 @@
+import{spawn as e}from"node:child_process";import{randomUUID as t}from"node:crypto";import n,{WebSocketServer as r}from"ws";import{MODE_TABLE as i,classify as a,isIgnorable as o}from"@tbox.cn/dsh-acp-bridge-core";var s=class extends Error{kind;report;constructor(e,t,n){super(t),this.name=`SupervisorDeploymentError`,this.kind=e,this.report=n}};function c(e){let t;try{t=JSON.parse(e)}catch{return null}if(typeof t!=`object`||!t||Array.isArray(t))return null;let n=t;return n.v===1&&(n.event===`standby`||n.event===`ready`&&typeof n.port==`number`&&typeof n.token==`string`)?t:null}async function l(e,t){let n=await fetch(`http://127.0.0.1:${e}/connect?token=${encodeURIComponent(t)}&interactions=answer`,{redirect:`manual`});if(n.status!==302)throw Error(`/connect 凭据交换期待 302，实得 ${n.status}（port ${e}）`);let r=n.headers.get(`set-cookie`);if(r===null)throw Error(`/connect 凭据交换缺 Set-Cookie`);let i=r.split(`;`)[0]??``;if(i===``)throw Error(`/connect 凭据交换缺 Set-Cookie`);return i}var u=class{#e;#t;#n;#r;#i=`idle`;#a=[];#o;#s=!1;#c=!1;#l=0;#u=[];#d=[];#f=[];#p;#m=0;#h=[];#g=!1;#_;constructor(e={},t,n){this.#e={startMode:`immediate`,readyTimeoutMs:12e4,backoffBaseMs:1e3,backoffMaxMs:5e3,maxRestartAttempts:3,ringBufferLines:1e3,...e},this.#t=t??d(e),this.#n=n??l,this.#r=e.log??(()=>{})}phase(){return this.#i}onPhaseChange(e){return this.#a.push(e),()=>{this.#a=this.#a.filter(t=>t!==e)}}async start(){if(this.#i!==`idle`)throw Error(`Supervisor.start 仅 idle 态可调（当前 ${this.#i}）`);this.#w(),await this.#x()}async connect(){this.#y(),this.#s=!0,this.#i===`standby`&&!this.#c&&this.#e.startMode===`on-first-connection`&&this.#D(),this.#i!==`ready`&&await this.#x();let e=this.#p;if(e!==void 0&&e.generation===this.#m)return e;let t=this.#v;if(t===void 0)throw Error(`ready 凭据缺席（状态机时序违例）`);let n=await this.#n(t.port,t.token),r={baseUrl:`http://127.0.0.1:${t.port}`,cookie:n,port:t.port,generation:this.#m};return this.#p=r,this.#r(`凭据交换完成（generation ${this.#m}，port ${t.port}）`),r}async reconnect(){this.#y(),this.#i!==`ready`&&await this.#x();let e=this.#v;if(e===void 0)throw Error(`ready 凭据缺席（状态机时序违例）`);let t=await this.#n(e.port,e.token),n={baseUrl:`http://127.0.0.1:${e.port}`,cookie:t,port:e.port,generation:this.#m};return this.#p=n,this.#r(`凭据再交换完成（generation ${this.#m}，port ${e.port}）`),n}crashReport(){return[`phase=${this.#i} restarts=${this.#l} generation=${this.#m}`,`exitCodes=${JSON.stringify(this.#u)}`,`phaseHistory=${this.#d.join(` → `)}`,`stderr（环形缓冲尾部 ${this.#f.length} 行）:`,...this.#f.map(e=>`  ${e}`)].join(`
+`)}async dispose(){if(this.#g)return;this.#g=!0,this.#_=void 0;let e=this.#o;e!==void 0&&(e.kill(`SIGTERM`),await new Promise(t=>{let n=setTimeout(()=>{e.kill(`SIGKILL`),t()},3e3);e.onExit(()=>{clearTimeout(n),t()})})),this.#C(Error(`Supervisor 已停机`)),this.#b(`disposed`)}#v;#y(){if(this.#g)throw Error(`Supervisor 已停机`);if(this.#i===`idle`)throw Error(`先调用 start()（connect 挂靠 spawn 生命周期）`);if(this.#_!==void 0)throw this.#_.error;if(this.#i===`failed-permanent`||this.#i===`failed-protocol`)throw new s(this.#i===`failed-permanent`?`permanent`:`protocol`,`Supervisor 终态 ${this.#i}`,this.crashReport())}#b(e){this.#i=e,this.#d.push(`${e}@${Date.now()}`),this.#a.forEach(t=>t(e))}#x(){return this.#i===`ready`?Promise.resolve():new Promise((e,t)=>{this.#h.push({generation:this.#m,resolve:e,reject:t})})}#S(){this.#h.splice(0).forEach(e=>e.resolve())}#C(e){this.#h.splice(0).forEach(t=>t.reject(e))}async#w(){for(;;){if(this.#g)return;if(await this.#E(),this.#_!==void 0){this.#b(this.#_.kind===`protocol`?`failed-protocol`:`failed-permanent`);return}return}}#T(e){if(this.#g)return;if(this.#l+=1,this.#l>this.#e.maxRestartAttempts){this.#_={kind:`permanent`,error:new s(`exhausted`,`崩溃退避序列耗尽（${this.#e.maxRestartAttempts} 次）——最后原因：${e}`,this.crashReport())},this.#b(`failed-permanent`),this.#C(this.#_.error);return}let t=Math.min(this.#e.backoffBaseMs*2**(this.#l-1),this.#e.backoffMaxMs);this.#b(`restarting`),this.#r(`瞬时失败（${e}）——${t}ms 后第 ${this.#l} 次重启`),setTimeout(()=>{this.#g||this.#E().then(()=>{this.#_!==void 0&&(this.#b(this.#_.kind===`protocol`?`failed-protocol`:`failed-permanent`),this.#C(this.#_.error))})},t)}async#E(){this.#m+=1,this.#p=void 0,this.#c=!1,this.#v=void 0;let e=this.#m;this.#b(`booting`);let t=this.#e.command??[`tboxcode-dsh`],n=this.#t([...t,`server`]);this.#o=n;let r=!1,i;clearTimeout(i),i=setTimeout(()=>{this.#m!==e||this.#i===`ready`||(this.#r(`就绪确认超时——kill 子进程（瞬时面）`),n.kill(`SIGKILL`))},this.#e.readyTimeoutMs),n.onStdoutLine(t=>{if(this.#m!==e)return;let a=c(t);if(!r){if(a===null||a.event!==`standby`){this.#_={kind:`protocol`,error:new s(`protocol`,`首行校验失败（期待 standby 信封，实得 "${t.slice(0,80)}"）`,this.crashReport())},this.#b(`failed-protocol`),this.#C(this.#_.error),n.kill(`SIGKILL`);return}r=!0,this.#b(`standby`),(this.#e.startMode===`immediate`||this.#s)&&this.#D();return}if(a===null){this.#i===`ready`&&this.#r(`stdout 违约（ready 后非静默）: ${t.slice(0,120)}`),this.#O(`[stdout] ${t}`);return}a.event!==`standby`&&this.#i!==`ready`&&(this.#v=a,this.#b(`ready`),clearTimeout(i),this.#S())}),n.onStderrLine(t=>{this.#m===e&&this.#O(t)}),n.onExit(t=>{if(this.#m===e&&(clearTimeout(i),this.#u.push(t),!this.#g&&this.#_===void 0)){if(t===2){this.#_={kind:`permanent`,error:new s(`permanent`,`server 永久失败（退出码 2——config 非法 / 未设 model / profile 损坏）`,this.crashReport())},this.#b(`failed-permanent`),this.#C(this.#_.error);return}if(t===3){this.#_={kind:`protocol`,error:new s(`protocol`,`server 协议版本偏斜（退出码 3——部署错误最显眼信号）`,this.crashReport())},this.#b(`failed-protocol`),this.#C(this.#_.error);return}this.#T(`退出码 ${t??`signal`}`)}})}#D(){this.#c||this.#o===void 0||(this.#c=!0,this.#b(`starting`),this.#o.writeStdin(`${JSON.stringify({v:1,cmd:`start`})}\n`),this.#r(`start 已释放`))}#O(e){this.#f.push(`${Date.now()} ${e}`),this.#f.length>this.#e.ringBufferLines&&this.#f.splice(0,this.#f.length-this.#e.ringBufferLines)}};function d(t){return n=>{let r=e(n[0],n.slice(1),{stdio:[`pipe`,`pipe`,`pipe`],env:{...process.env,...t.env??{}}}),i=``,a=``,o=[],s=[],c=[],l=(e,t,n)=>{for(e+=t.toString();;){let t=e.indexOf(`
+`);if(t<0)break;let r=e.slice(0,t);e=e.slice(t+1),n.forEach(e=>e(r))}return e};return r.stdout?.on(`data`,e=>{i=l(i,e.toString(),o)}),r.stderr?.on(`data`,e=>{a=l(a,e.toString(),s)}),r.on(`close`,e=>{i!==``&&o.forEach(e=>e(i)),a!==``&&s.forEach(e=>e(a)),c.forEach(t=>t(e))}),{writeStdin:e=>r.stdin?.write(e),onStdoutLine:e=>o.push(e),onStderrLine:e=>s.push(e),onExit:e=>c.push(e),kill:e=>r.kill(e??`SIGTERM`)}}}function f(e){return typeof e==`object`&&!!e&&!Array.isArray(e)}function p(e){return!f(e)||typeof e.type!=`string`||e.type===``||typeof e.seq!=`number`||!Number.isInteger(e.seq)||typeof e.time!=`number`||!(`data`in e)?null:e}function m(e){if(!f(e)||e.type!==`event`)return null;let t=p(e.event);return t===null?null:{type:`event`,event:t}}function h(e){if(!f(e))return null;if(e.type===`snapshot`){let t=f(e.header)?e.header:null;if(t===null||typeof e.cursor!=`number`||typeof e.hasMore!=`boolean`)return null;let n=[];if(Array.isArray(e.records))for(let t of e.records){let e=m(t);if(e===null)return null;n.push(e)}else return null;return{type:`snapshot`,header:t,cursor:e.cursor,records:n,hasMore:e.hasMore,projections:e.projections,...f(e.assistantStream)?{assistantStream:e.assistantStream}:{}}}return e.type===`assistant-stream`?f(e.frame)?{type:`assistant-stream`,frame:e.frame}:null:m(e)}function g(e){if(!f(e)||typeof e.hasMore!=`boolean`||!Array.isArray(e.records))return null;let t=[];for(let n of e.records){let e=m(n);if(e===null)return null;t.push(e)}return{records:t,hasMore:e.hasMore}}function _(e){return f(e)&&(e.type===`ready`&&typeof e.clientId==`string`&&f(e.host)||e.type===`emit`&&typeof e.event==`string`&&Array.isArray(e.args)||e.type===`waterfall`&&typeof e.eventId==`string`&&typeof e.agentId==`string`&&typeof e.event==`string`&&f(e.request)||e.type===`cancel`&&typeof e.eventId==`string`)?e:null}var v=class extends Error{code;details;constructor(e){super(e.message),this.name=`CarrierRpcError`,this.code=e.code,this.details=e.details}},y=class extends Error{constructor(e){super(e),this.name=`CarrierTransportError`}},b=class{#e;#t;#n;#r;#i;#a;#o=!1;#s=!1;constructor(e){this.#e=e.baseUrl.replace(/\/$/,``),this.#t=e.cookie,this.#n=e.refreshCredentials}async unary(e,t){this.#p();try{return await this.#c(e,t)}catch(n){if(!(n instanceof y&&n.message.endsWith(`HTTP 401`))||this.#n===void 0)throw n;return await this.#f(),this.#c(e,t)}}async#c(e,n){let r=t(),i;try{i=await fetch(`${this.#e}/api/${e}`,{method:`POST`,headers:{"content-type":`application/json`,cookie:this.#t},body:JSON.stringify({type:`client-request`,rpcId:r,method:e,payload:{args:n}}),signal:AbortSignal.timeout(6e4)})}catch(t){throw t instanceof Error&&t.name===`TimeoutError`?new y(`unary ${e} 超时（上游 60s 无响应）`):t}if(i.status!==200)throw new y(`unary ${e} HTTP ${i.status}`);let a=await i.json();if(a.type!==`server-response`||a.rpcId!==r)throw new y(`unary ${e} envelope 畸形（type/rpcId 失配）`);if(a.result.ok)return a.result.value;throw new v(a.result.error)}openStream(e,r,i){this.#p();let a=t(),o=!1,s={canceled:!1,onFrame:e=>{e.type===`item`?i.onItem(e.value):e.type===`end`?(s.canceled=!0,i.onEnd?.()):e.type===`error`&&(s.canceled=!0,i.onError?.(e.error??{code:`gateway/internal`,message:`stream error 帧缺 error 字段`}))},onDown:e=>{s.canceled||(s.canceled=!0,e&&i.onError?.({code:`carrier/mux-closed`,message:`mux 插座意外关闭`}),i.onClose?.(e))}};return this.#l().then(t=>{if(o||s.canceled){process.stderr.write(`[carrier] open ABORTED (canceled=${String(o)} entry=${String(s.canceled)}) ${e}\n`);return}t.streams.set(a,s),t.socket.readyState===n.OPEN?(t.socket.send(JSON.stringify({type:`open`,streamId:a,endpoint:e,payload:{args:r}})),process.env.CARRIER_WIRE_DEBUG===`1`&&process.stderr.write(`[carrier] open sent ${e} streamId=${a.slice(0,8)}\n`)):process.stderr.write(`[carrier] open SKIPPED (readyState ${t.socket.readyState}) ${e}\n`)}).catch(e=>{o||s.canceled||(s.canceled=!0,i.onError?.({code:`carrier/mux-open`,message:e.message}),i.onClose?.(!0))}),{cancel:()=>{o=!0,s.canceled=!0;let e=this.#r;e!==void 0&&e.streams.delete(a)&&e.socket.readyState===n.OPEN&&e.socket.send(JSON.stringify({type:`cancel`,streamId:a}))}}}async#l(){let e=this.#r;if(e!==void 0&&e.socket.readyState===n.OPEN)return e;if(this.#i!==void 0)return this.#i;let t=this.#u().finally(()=>{this.#i===t&&(this.#i=void 0)});return this.#i=t,t}async#u(){this.#p(),this.#o&&this.#n!==void 0&&await this.#f();let e=new n(`${x(this.#e)}/api/remote.mux`,{headers:{cookie:this.#t}});await new Promise((t,n)=>{let r=setTimeout(()=>n(new y(`mux 插座打开超时`)),15e3);r.unref(),e.once(`open`,()=>{clearTimeout(r),t()}),e.once(`error`,e=>{clearTimeout(r),n(new y(`mux 插座打开失败: ${e.message}`))}),e.once(`unexpected-response`,(e,t)=>{clearTimeout(r),n(new y(`mux 升级被拒 HTTP ${t.statusCode??`?`}`))})});let t={socket:e,streams:new Map};e.on(`message`,e=>{let n;try{n=JSON.parse(String(e))}catch{return}typeof n.streamId==`string`&&t.streams.get(n.streamId)?.onFrame(n)});let r=!1;return e.on(`close`,()=>this.#d(t,r)),e.on(`error`,()=>{r=!0}),this.#r=t,this.#o=!0,t}#d(e,t){if(this.#r===e){this.#r=void 0;for(let n of e.streams.values())n.onDown(t);e.streams.clear()}}#f(){if(this.#a!==void 0)return this.#a;let e=(async()=>{let e=this.#n;if(e===void 0)return;let t=await e();this.#t=t.cookie,this.#e=t.baseUrl.replace(/\/$/,``)})().finally(()=>{this.#a===e&&(this.#a=void 0)});return this.#a=e,e}openEvents(e){let t,n=n=>{switch(n.type){case`ready`:t=n.clientId,e.onReady(n);return;case`emit`:e.onEmit(n);return;case`waterfall`:e.onWaterfall(n);return;case`cancel`:e.onCancel(n);return}},r=this.openStream(`$events`,{},{onItem:t=>{let i=_(t);if(i===null){e.onClose?.(!1),r.cancel();return}n(i)},onClose:t=>e.onClose?.(t)});return{respond:async(e,n)=>{if(t===void 0)throw new y(`waterfall 应答先于 ready 帧（clientId 缺席）`);await this.unary(`$events/result`,{clientId:t,eventId:e,outcome:n})},close:()=>r.cancel()}}dispose(){this.#s=!0,this.#r?.socket.close(),this.#r=void 0}#p(){if(this.#s)throw new y(`carrier 已释放`)}};function x(e){if(e.startsWith(`https://`))return`wss://${e.slice(8)}`;if(e.startsWith(`http://`))return`ws://${e.slice(7)}`;throw new y(`baseUrl 非法（期待 http(s)://，实得 ${e}）`)}function S(e,t){let n=p(e);if(n===null)return t!==void 0&&(t.invalid+=1),null;if(a(n.type)===`project`)return typeof n.data!=`object`||n.data===null||Array.isArray(n.data)?(t!==void 0&&(t.opaqueWarn+=1),{kind:`opaque`,event:n,level:`warn`}):(t!==void 0&&(t.consumable+=1),{kind:`consumable`,event:n});let r=o(n)?`debug`:`warn`;return r===`debug`?t!==void 0&&(t.opaqueDebug+=1):t!==void 0&&(t.opaqueWarn+=1),{kind:`opaque`,event:n,level:r}}var C=class{#e;#t;#n={invalid:0,opaqueDebug:0,opaqueWarn:0,consumable:0};#r=new Map;#i=0;constructor(e,t){this.#e=e,this.#t=t?.reopenBaseMs??1e3}open(e,t){let n=this.#r.get(e);if(n!==void 0&&!n.closed)return n.handlers=t,{close:()=>this.close(e)};let r={sessionId:e,handlers:t,handle:void 0,cursor:void 0,baseline:void 0,streamSeenRevision:!1,reopening:!1,backoffMs:this.#t,closed:!1,pending:[]};return this.#r.set(e,r),this.#a(r),{close:()=>this.close(e)}}close(e){let t=this.#r.get(e);t!==void 0&&(t.closed=!0,t.handle?.cancel(),this.#r.delete(e))}stats(){let e=0,t=0;for(let n of this.#r.values())n.closed||(n.reopening||n.cursor===void 0?t++:e++);return{live:e,reopening:t,decoded:{...this.#n},gapsRepaired:this.#i}}#a(e){e.closed||(e.reopening=e.cursor!==void 0,e.handle=this.#e.openStream(`session/follow`,{request:{address:{kind:`session`,sessionId:e.sessionId},assistantStream:!0}},{onItem:t=>this.#s(e,t),onEnd:()=>this.#o(e,`stream end`),onError:t=>this.#o(e,`${t.code}: ${t.message}`),onClose:t=>{t&&this.#o(e,`socket error`)}}))}#o(e,t){if(e.closed)return;e.handle=void 0,e.handlers.onDown(t);let n=e.backoffMs;e.backoffMs=Math.min(e.backoffMs*2,3e4),e.baseline=void 0,e.streamSeenRevision=!1,e.reopening=!0,setTimeout(()=>{e.closed||this.#a(e)},n)}#s(e,t){if(t.type===`snapshot`){this.#c(e,t);return}if(e.cursor!==void 0){if(e.reopening){e.pending.push(t);return}this.#d(e,t)}}#c(e,t){let n=e.cursor;if(n!==void 0&&t.cursor<n){e.handlers.onDown(`cursor 回退：${String(t.cursor)} < ${String(n)}`);return}e.baseline=t.assistantStream,e.streamSeenRevision=!1,e.reopening=!0,e.handlers.onSnapshot(t.header,t.cursor,t.projections,t.assistantStream),this.#l(e,t,n)}async#l(e,t,n){try{let r=[];if(n!==void 0&&t.records.length>0){let i=t.records[0]?.event.seq??t.cursor;i>n+1&&(r.push(...await this.#u(e,n+1,i)),this.#i+=r.length)}for(let e of t.records)r.push(e.event);for(let t of r)this.#f(e,t);let i=e.pending;e.pending=[],e.reopening=!1,e.cursor=t.cursor,e.backoffMs=this.#t;for(let t of i)this.#d(e,t)}catch(t){e.handlers.onDown(`backlog 补齐失败：${String(t)}`)}}async#u(e,t,n){let r=[],i=n;for(;i>t;){let n=g(await this.#e.unary(`session/page`,{request:{address:{kind:`session`,sessionId:e.sessionId},throughSeq:i-1,beforeSeq:t,maxMessages:200}}));if(n===null)throw new y(`session/page 帧畸形（records/hasMore 缺失）`);for(let e of n.records)r.push(e.event);let a=n.records[0]?.event.seq;if(a===void 0||a<=t||(i=a,!n.hasMore))break}return r.sort((e,t)=>e.seq-t.seq),r}#d(e,t){if(t.type===`assistant-stream`){if(!e.streamSeenRevision){e.streamSeenRevision=!0;let n=(e.baseline?.revision??-1)+1;if(e.baseline!==void 0&&t.frame.revision!==n){e.handlers.onDown(`assistant-stream 衔接断裂：revision ${String(t.frame.revision)} ≠ ${String(n)}`);return}}e.handlers.onAssistantStream(t.frame);return}t.type===`event`&&this.#f(e,t.event)}#f(e,t){let n=S(t,this.#n);n!==null&&n.kind===`consumable`&&e.handlers.onEvent(n.event)}async readAll(e){return await new Promise((t,n)=>{let r=new Map,i,a,o=!1,s=this.#e.openStream(`session/follow`,{request:{address:{kind:`session`,sessionId:e},assistantStream:!1}},{onItem:c=>{o||c.type===`snapshot`&&(o=!0,i=c.header,a=c.projections,s.cancel(),this.#p(e,c,r).then(e=>t({header:i,events:e,projections:a}),e=>n(e)))},onEnd:()=>{o||(o=!0,n(new y(`session/follow 在 snapshot 前关闭`)))},onError:e=>{o||(o=!0,n(new v(e)))}})})}async#p(e,t,n){let r=[];for(let e of t.records)r.push(e.event);let i=t.records.length>0?t.records[0]?.event.seq:void 0;for(;t.hasMore===!0;){let n=g(await this.#e.unary(`session/page`,{request:{address:{kind:`session`,sessionId:e},throughSeq:t.cursor,...i===void 0?{}:{beforeSeq:i},maxMessages:200}}));if(n===null)throw new y(`session/page 帧畸形（records/hasMore 缺失）`);for(let e of n.records)r.push(e.event);if(!n.hasMore||n.records.length===0)break;let a=n.records[0]?.event.seq;if(a===void 0||a===0)break;i=a}let a=new Map;for(let e of r)a.set(e.seq,e);let o=[...a.values()].sort((e,t)=>e.seq-t.seq);for(let e=0;e<o.length;e++){let t=o[e];if(t?.seq!==e)throw new v({code:`gateway/internal`,message:`journal 连续性断裂：位置 ${String(e)} 实得 seq ${String(t?.seq)}`});let r=S(t,this.#n);r?.kind===`consumable`&&n.set(t.seq,r.event)}return[...n.values()]}},w=class{#e=new Map;#t=new Map;#n=new Map;#r=new Map;#i;#a;#o=0;#s=0;constructor(e,t){this.#i=e,this.#a=t}attachConnection(e,t,n){this.#e.set(e,{connId:e,send:t,ctx:n})}detachConnection(e){this.#e.delete(e);for(let[t,n]of this.#t)n.delete(e),n.size===0&&this.#t.delete(t),this.#a?.onSessionUnbind?.(e,t);for(let[t,n]of this.#n)n===e&&this.#n.delete(t)}bind(e,t){let n=this.#t.get(t);n===void 0&&(n=new Set,this.#t.set(t,n)),n.add(e),this.#a?.onSessionBind?.(e,t)}unbind(e,t){this.#t.get(t)?.delete(e),this.#a?.onSessionUnbind?.(e,t)}boundConnIds(e){return[...this.#t.get(e)??[]]}ctxOf(e){return this.#e.get(e)?.ctx}routeResolved(e,t,n){this.routeExt({method:e,payload:t},n===void 0?void 0:{excludeConnId:n})}beginReplayCount(e){this.#r.set(e,0)}takeReplayCount(e){let t=this.#r.get(e);return this.#r.delete(e),t}setTurnOrigin(e,t){this.#n.set(e,t)}clearTurnOrigin(e){this.#n.delete(e)}route(e){let t=e.sessionId,n;if(t===void 0)n=[...this.#e.keys()];else{let r=this.#n.get(t),i=e.update?.sessionUpdate===`user_message_chunk`;n=[...this.#t.get(t)??[]],r!==void 0&&i&&(n=n.filter(e=>e!==r),this.#s++);let a=this.#a?.fanout===void 0?void 0:T(this.#i,`fanout`,()=>this.#a?.fanout?.(e,n));if(a!==void 0&&(n=[...a]),n.length===0){this.#o++;return}}for(let t of n){let n=this.#e.get(t);if(n===void 0)continue;let r=e;if(this.#a?.transformOutbound!==void 0){let t=T(this.#i,`transformOutbound`,()=>this.#a?.transformOutbound?.(e,n.ctx));if(t===null)continue;t!==void 0&&(r=t)}n.send({jsonrpc:`2.0`,method:`session/update`,params:r});let i=this.#r.get(t);i!==void 0&&this.#r.set(t,i+1)}}routeExt(e,t){let n=typeof e.payload.sessionId==`string`?e.payload.sessionId:void 0,r=n===void 0?[...this.#e.keys()]:[...this.#t.get(n)??[]];t?.excludeConnId!==void 0&&(r=r.filter(e=>e!==t.excludeConnId));for(let t of r)this.#e.get(t)?.send({jsonrpc:`2.0`,method:e.method,params:e.payload})}stats(){return{connections:this.#e.size,dropped:this.#o,suppressed:this.#s}}};function T(e,t,n){try{return n()}catch(n){e.warn(`gateway hook ${t} failed (fail-open): ${String(n)}`);return}}const E=1e3,D=3e4;function O(e){return{id:e.id,get header(){let t=e.header;return{...t?.cwd===void 0?{}:{cwd:t.cwd},...t?.origin===void 0?{}:{origin:t.origin},...t?.parentSession===void 0?{}:{parentSession:t.parentSession},...t?.createdAt===void 0?{}:{createdAt:t.createdAt}}},requestHeader(){let t=e.projections?.modelSelection,n=t?.pending??t?.lastUsed;if(!(n==null||typeof n.provider!=`string`||typeof n.model!=`string`))return{config:{provider:n.provider,model:n.model,...typeof n.reasoningEffort==`string`?{reasoningEffort:n.reasoningEffort}:{}}}}}}function k(e,t,n){return{id:e.id,session:e.session,cancel:async n=>{await t.unary(`session/cancel`,{request:{sessionId:e.id}})},followup:t=>{n(e,t)}}}var A=class{logger;#e;#t;#n;#r=new Map;#i=new Set;#a=new Set;#o=new Set;#s=new Set;#c=new Set;#l;#u=E;#d;#f=E;#p;#m={groups:[],failures:[]};#h=0;#g;constructor(e){this.#e=e.carrier,this.#t=e.pool,this.#n=e.logger,this.logger=e.logger,this.#S(),this.#w(),this.#E()}async createAgent(e){return await this.#_(e)}async resumeAgent(e){return await this.#_(e)}async#_(e){let t=(await this.#e.unary(`session/create`,{request:{sessionId:e.sessionId,cwd:e.cwd}})).sessionId,n=this.#r.get(t);if(n!==void 0)return await e.configureScope?.(this.#y(n),n.agent),{agent:n.agent,dispose:async()=>this.#v(t)};let r={id:t,header:{version:1,id:t,createdAt:0,cwd:e.cwd,isSeeded:!1},projections:{},selectionProbe:void 0,lastPushedSelection:void 0,promptInflight:!1};r.session=O(r),r.agent=k(r,this.#e,(e,t)=>this.#b(e,t));let i=r;return this.#r.set(t,i),await e.configureScope?.(this.#y(i),i.agent),this.#t.open(t,this.#C(i)),{agent:i.agent,dispose:async()=>this.#v(t)}}#v(e){return this.#t.close(e),this.#r.delete(e),Promise.resolve()}#y(e){return{on:(t,n)=>(t===`agent/request`&&(e.selectionProbe=n),()=>{}),tools:{restrict:e=>void 0}}}async#b(e,t){if(e.promptInflight=!0,e.selectionProbe!==void 0)try{let t=await e.selectionProbe(void 0,async()=>({}));if(typeof t.provider==`string`&&typeof t.model==`string`){let n=JSON.stringify([t.provider,t.model,t.reasoningEffort]);n!==e.lastPushedSelection&&(await this.#e.unary(`session/selectModel`,{request:{sessionId:e.id,provider:t.provider,model:t.model,...typeof t.reasoningEffort==`string`?{reasoningEffort:t.reasoningEffort}:{}}}),e.lastPushedSelection=n)}}catch(e){this.#n.debug(`selection probe failed: ${String(e)}`)}await this.#e.unary(`session/prompt`,{request:{requestId:t.id,sessionId:e.id,mode:`steer`,content:t.content}})}persistence={stat:async(e,t)=>{let n=await this.#e.unary(`tboxcode/sessions.stat`,{request:{sessionId:e}});if(n!==null)return{header:n.header}},list:async e=>(await this.#e.unary(`session/list`,{_request:{}})).items.map(e=>({header:{id:e.sessionId,...e.cwd===void 0?{}:{cwd:e.cwd},...e.origin===void 0?{}:{origin:e.origin},...e.parentSessionId===void 0?{}:{parentSession:e.parentSessionId},createdAt:e.updatedAt}})),open:async(e,t)=>{let n=await this.#t.readAll(e);return{read:async()=>({events:n.events}),close:async()=>{}}}};sessionStore={get:e=>this.#r.get(e)?.session,flush:async e=>{await this.#e.unary(`tboxcode/sessions.flush`,{request:{sessionId:e.id}})}};llm={listProviders:()=>this.#x().groups.map(e=>({id:e.id,name:e.name})),listModels:async e=>(this.#x().groups.find(t=>t.id===e)?.models??[]).map(e=>({id:String(e.id),name:String(e.name),...e.description===void 0?{}:{description:String(e.description)}})),resolveModelInfo:async(e,t)=>{let n=this.#x().groups.find(t=>t.id===e)?.models.find(e=>e.id===t)?.reasoning;return{reasoning:{defaultEffort:n?.defaultEffort,efforts:n?.efforts??[]}}},resolveCallConfig:async e=>e};#x(){return Date.now()-this.#h>3e4&&this.#S(),this.#m}async#S(){try{this.#m=await this.#e.unary(`session/modelCatalog`,{}),this.#h=Date.now();let e=await this.#e.unary(`tboxcode/selection.default`,{});this.#g=typeof e.provider==`string`&&typeof e.model==`string`?{provider:e.provider,model:e.model,...e.reasoningEffort===void 0?{}:{reasoningEffort:e.reasoningEffort}}:void 0}catch(e){this.#n.warn(`catalog warm failed: ${String(e)}`)}}applyModeKnobs(e,t,n){let r=Object.entries(i).find(([,e])=>e.sandbox===n.sandbox&&e.approval===n.approval)?.[0];if(r===void 0)throw Error(`tboxcode: mode knobs 无对位（${String(n.sandbox)}/${String(n.approval)}——MODE_TABLE 外组合）`);return this.#e.unary(`tboxcode/mode`,{request:{agentId:e.id,mode:r}}).then(()=>void 0)}defaultSelection(){return this.#g}async executeCommand(e,t,n){let r=await this.#e.unary(`tboxcode/commands.execute`,{request:{agentId:e.id,line:t}});return r?.commandId===void 0?void 0:{commandId:r.commandId}}async listCommands(e){return await this.#e.unary(`tboxcode/commands.list`,{request:{agentId:e.id}})}async listUserInvocableSkills(e){return await this.#e.unary(`tboxcode/skills.userInvocable`,{request:{agentId:e.id}})}onSessionEvent(e){let t=e;return this.#i.add(t),()=>this.#i.delete(t)}onAssistantStream(e){return this.#a.add(e),()=>this.#a.delete(e)}onInboxClaimed(e){return this.#o.add(e),()=>this.#o.delete(e)}onAgentError(e){return this.#s.add(e),()=>this.#s.delete(e)}sessionToolDenies(){return[]}onCommandSurfaceChanged(e){return this.#c.add(e),()=>this.#c.delete(e)}sessionIds(){return[...this.#r.keys()]}hasInflightPrompt(e){return this.#r.get(e)?.promptInflight===!0}poolLive(){return this.#t.stats().live>0}poolEntries(){return this.#r.size}settlePrompt(e,t){let n=this.#r.get(e);if(!(n===void 0||!n.promptInflight)){n.promptInflight=!1;for(let e of this.#s)e({agent:n.agent,turn:0,error:t})}}#C(e){return{onSnapshot:(t,n,r)=>{e.header=t,e.projections=r},onEvent:t=>{t.type===`turn/end`&&(e.promptInflight=!1);for(let n of this.#i)n(e.session,t)},onAssistantStream:t=>{let n={type:t.finish===void 0?t.index===0?`start`:`chunk`:`end`,attemptId:t.attemptId,...t.chunk===void 0?{}:{chunk:t.chunk}};for(let t of this.#a)t({agent:e.agent,frame:n})},onDown:t=>this.#n.warn(`follow pool down (${e.id}): ${t}`)}}#w(){this.#l=this.#e.openStream(`tboxcode/agent.watch`,{},{onItem:e=>{this.#n.debug(`agent.watch item: ${JSON.stringify(e).slice(0,160)} states=${[...this.#r.keys()].join(`,`)}`);let t=this.#r.get(e.sessionId);if(t!==void 0){if(e.kind===`inboxClaimed`)for(let n of this.#o)n({agent:t.agent,message:{...e.messageId===void 0?{}:{id:e.messageId}},turn:e.turn??0});else if(e.kind===`error`)for(let n of this.#s)n({agent:t.agent,turn:0,error:e.error??`unknown agent error`})}},onError:e=>{this.#n.warn(`agent.watch stream error: ${JSON.stringify(e).slice(0,200)}`),this.#T()},onClose:e=>{e&&(this.#n.warn(`agent.watch stream closed`),this.#T())}})}#T(){let e=this.#u;this.#u=Math.min(this.#u*2,D),setTimeout(()=>{this.#w(),this.#u=E},e)}#E(){let e=()=>{for(let e of this.#c)e()};this.#d=j(this.#e,e,this.#n),this.#p=this.#e.openStream(`tboxcode/skills.watch`,{},{onItem:()=>e(),onError:()=>this.#D(),onClose:e=>{e&&this.#D()}})}#D(){let e=this.#f;this.#f=Math.min(this.#f*2,D),setTimeout(()=>{this.#E(),this.#f=E},e)}dispose(){this.#l?.cancel(),this.#d?.close(),this.#p?.cancel()}};function j(e,t,n){return e.openEvents({onReady:()=>n.debug(`commands/change $events ready`),onEmit:e=>{e.event===`commands/change`&&t()},onWaterfall:()=>{},onCancel:()=>{},onClose:e=>{e&&n.warn(`commands/change $events closed with error`)}})}var M=class{#e;#t;#n;#r;#i;#a;#o=!1;#s;constructor(e,t){this.#e=e,this.#t=t?.timeoutMs??12e4,this.#n=t?.tickMs??1e3,this.#r=t?.now??Date.now,this.#i=t?.logger??{warn:()=>{},info:()=>{},debug:()=>{}}}start(){this.#s=setInterval(()=>this.tick(),this.#n)}stop(){this.#s!==void 0&&clearInterval(this.#s),this.#s=void 0}tick(){if(!(this.#e.poolEntries()>0&&!this.#e.poolLive())){this.#a=void 0,this.#o=!1;return}if(this.#a===void 0){this.#a=this.#r();return}if(this.#o||this.#r()-this.#a<this.#t)return;this.#o=!0;let e=this.#r()-this.#a;for(let t of this.#e.sessionIds())this.#e.hasInflightPrompt(t)&&(this.#i.warn(`carrier timeout settle (${t}): downMs=${String(e)}`),this.#e.settle(t,Error(`tboxcode carrier-timeout (downMs=${String(e)})`)))}snapshot(){return{down:this.#a!==void 0,downSince:this.#a,settled:this.#o}}};const N=6e4,P=36e5,F=3e4,I=-32001;var L=class{#e=new Map;#t;constructor(e){this.#t=e}get size(){return this.#e.size}pendingOf(e){for(let t of this.#e.values())if(t.sessionId===e)return t}begin(e){let t=e.event===`user-questions/request`?`elicitation`:e.event===`approval/request`?`permission`:void 0;if(t===void 0||this.#e.has(e.eventId))return;let n=this.#t.sessionIdOfAgent(e.agentId);if(n===void 0){this.#l(e.eventId,{kind:`rejected`,error:{code:`gateway/agent-not-found`,message:`agent ${e.agentId} not managed by gateway`}});return}let r={kind:t,sessionId:n,eventId:e.eventId,frame:e,asked:new Map,state:`active`,budgetStartedAt:this.#t.now()};this.#e.set(e.eventId,r),this.#n(r),this.#s(r)}cancel(e){let t=this.#e.get(e.eventId);t===void 0||t.state===`settled`||this.#c(t,{kind:`result`,value:`cancelled`},`turn`)}attach(e,t){for(let n of this.#e.values()){if(n.sessionId!==t||n.state!==`grace`)continue;let r=n.graceTimer;n.graceTimer=void 0,r!==void 0&&this.#t.timers.clear(r),n.state=`active`,this.#t.logger.info(`answerer: grace broken by attach (${n.eventId} conn=${e})`),this.#n(n)}}switchBack(e,t){this.attach(e,t)}disconnect(e){for(let t of this.#e.values())t.asked.delete(e)&&t.state===`active`&&t.asked.size===0&&this.#o(t,`member disconnected`)}dispose(){for(let e of[...this.#e.values()])e.state!==`settled`&&this.#c(e,{kind:`result`,value:`cancelled`},`dispose`);this.#e.clear()}#n(e){let t=this.#t.eligibleConns(e.sessionId).filter(t=>!e.asked.has(t)).filter(t=>e.kind===`permission`||this.#t.capsOf(t));if(t.length===0){this.#o(e,`no eligible connections`);return}for(let n of t){let t={connId:n};e.kind===`permission`&&(t.timer=this.#t.timers.set(()=>{e.state!==`active`||!e.asked.has(n)||(e.asked.delete(n),this.#t.logger.info(`answerer: member timeout (${e.eventId} conn=${n})`),e.asked.size===0&&this.#o(e,`all members timed out`))},F)),e.asked.set(n,t),this.#r(e,n)}}async#r(e,t){let n=e.kind===`elicitation`?this.#t.buildQuestionParams(e.sessionId,e.frame):{callId:e.frame.request.callId};try{let r=await this.#t.dispatch(t,e.kind,n);if(e.state===`settled`||!e.asked.has(t))return;let i=this.#i(e,r);if(i.abstain){this.#a(e,t,`abstained`);return}this.#c(e,i.outcome,t)}catch(n){if(e.state===`settled`||!e.asked.has(t))return;if(n.code===I){this.#a(e,t,`abstained`);return}this.#t.logger.warn(`answerer: dispatch failed (${e.eventId} conn=${t}): ${n instanceof Error?n.message:String(n)}`),this.#a(e,t,`dispatch failed`)}}#i(e,t){if(e.kind===`permission`){let e=t?.outcome;return e?.outcome===`cancelled`?{abstain:!1,outcome:{kind:`result`,value:`cancelled`}}:{abstain:!1,outcome:{kind:`result`,value:e?.optionId===`allow-once`?`allowed-once`:`rejected`}}}let n=t;return n?.action===`accept`?{abstain:!1,outcome:{kind:`result`,value:n.content??{}}}:{abstain:!1,outcome:{kind:`rejected`,error:{code:n?.action===`decline`?`ASK_DECLINED`:`ASK_ABORTED`,message:`ask_user_question ${n?.action===`decline`?`declined`:`cancelled`} by client`}}}}#a(e,t,n){let r=e.asked.get(t);r?.timer!==void 0&&this.#t.timers.clear(r.timer),e.asked.delete(t),this.#t.logger.debug(`answerer: member dropped (${e.eventId} conn=${t} ${n})`),e.state===`active`&&e.asked.size===0&&this.#o(e,`all members out (${n})`)}#o(e,t){e.state===`active`&&(e.state=`grace`,e.graceTimer=this.#t.timers.set(()=>{this.#c(e,e.kind===`elicitation`?{kind:`rejected`,error:{code:`ASK_ABORTED`,message:`ask_user_question grace window expired`}}:{kind:`result`,value:`cancelled`},`grace`)},N),this.#t.logger.info(`answerer: grace entered (${e.eventId} ${t})`))}#s(e){let t=P-(this.#t.now()-e.budgetStartedAt);if(t<=0){this.#c(e,e.kind===`elicitation`?{kind:`rejected`,error:{code:`ASK_ABORTED`,message:`ask_user_question form budget exhausted`}}:{kind:`result`,value:`cancelled`},`budget`);return}this.#t.timers.set(()=>{e.state!==`settled`&&(this.#t.logger.warn(`answerer: form budget exhausted (${e.eventId})`),this.#c(e,e.kind===`elicitation`?{kind:`rejected`,error:{code:`ASK_ABORTED`,message:`ask_user_question form budget exhausted`}}:{kind:`result`,value:`cancelled`},`budget`))},t)}#c(e,t,n){if(e.state!==`settled`){e.state=`settled`,e.settledOutcome=t,e.respondedBy=n,e.graceTimer!==void 0&&(this.#t.timers.clear(e.graceTimer),e.graceTimer=void 0);for(let t of e.asked.values())t.timer!==void 0&&this.#t.timers.clear(t.timer);e.asked.clear(),this.#l(e.eventId,t),this.#t.resolvedNotify(e.kind,{sessionId:e.sessionId,eventId:e.eventId,outcome:t,respondedBy:n},typeof n==`string`&&n!==`grace`&&n!==`turn`&&n!==`dispose`&&n!==`budget`?n:void 0),this.#t.logger.info(`answerer: settled (${e.eventId} by=${n} kind=${t.kind})`)}}async#l(e,t){try{await this.#t.respond(e,t)}catch(t){this.#t.logger.warn(`answerer: respond failed (${e}): ${t instanceof Error?t.message:String(t)}`)}}};function R(e,t,n){let{core:i,hooks:a,authenticate:o,logger:s}=n,c=new w(s,a),l=new r({noServer:!0}),u=new Set;return i.io.notify=async e=>{c.route(e)},i.io.extNotify=async e=>{c.routeExt(e)},e.on(`upgrade`,(e,n,r)=>{new URL(e.url??`/`,`http://localhost`).pathname===t&&(async()=>{if(!(o===void 0||await z(o,e,s))){n.write(`HTTP/1.1 401 Unauthorized\r
+\r
+`),n.destroy();return}l.handleUpgrade(e,n,r,e=>{B(e,i,a,c,s,u)})})().catch(e=>{s.warn(`gateway upgrade failed: ${String(e)}`),n.destroy()})}),{close:()=>{for(let e of u)e.socket.close();l.close()},boundConnIds:e=>c.boundConnIds(e),ctxOf:e=>c.ctxOf(e),routeResolved:(e,t,n)=>c.routeResolved(e,t,n)}}async function z(e,t,n){try{return await e(t)}catch(e){return n.warn(`gateway authenticate failed: ${String(e)}`),!1}}function B(e,n,r,i,a,o){let s=t(),c={elicitation:!1},l=t=>{e.readyState===e.OPEN&&e.send(JSON.stringify(t))},u={connId:s,get caps(){return c},request:async(e,t)=>{throw Error(`tboxcode: server→client request 面直通由 attach 后覆写（answerer 切片消费）`)},notify:async(e,t)=>{l({jsonrpc:`2.0`,method:e,params:t})}};i.attachConnection(s,l,u);let d=new TransformStream,f=d.writable.getWriter(),p={writable:new WritableStream({write:e=>{V(e,h,i,l)}}),readable:d.readable},m=n.attachConnection(p,{beforePrompt:e=>i.setTurnOrigin(e,s),afterPrompt:e=>i.clearTurnOrigin(e)}),h={connId:s,socket:e,conn:m,ctx:u,pending:new Map,get caps(){return c}};u.request=(e,t)=>m.client.request(e,t),o.add(h),e.on(`message`,e=>{let t=typeof e==`string`?e:Buffer.isBuffer(e)?e.toString(`utf8`):void 0;if(t===void 0)return;let n;try{n=JSON.parse(t)}catch{l({jsonrpc:`2.0`,id:null,error:{code:-32700,message:`Parse error`}});return}H(n,h,f,r,i,a)}),e.on(`close`,()=>{o.delete(h),i.detachConnection(s),f.close().catch(()=>{}),a.debug(`gateway connection detached (${s})`)}),e.on(`error`,e=>{a.warn(`gateway socket error (${s}): ${String(e)}`)})}function V(e,t,n,r){if(e.method===void 0&&e.id!==void 0){let r=t.pending.get(String(e.id));if(r!==void 0&&(t.pending.delete(String(e.id)),e.error===void 0)){let i=e.result?.sessionId??r.params?.sessionId;if(r.method===`session/close`)i!==void 0&&n.unbind(t.connId,i);else if(i!==void 0&&(n.bind(t.connId,i),r.method===`session/load`)){let e=n.takeReplayCount(t.connId)??0;setImmediate(()=>{n.routeExt({method:`_tbox.cn/acp_replay_complete`,payload:{sessionId:i,notificationCount:e}})})}}}r(e)}async function H(e,t,n,r,i,a){let o=e.method;if(o===void 0){await n.write(e);return}if(o===`initialize`){let n=e.params?.clientCapabilities;t.caps.elicitation=n?.elicitation!=null}if(o.startsWith(`_tbox.cn/`)){let n=r?.methods?.[o];if(e.id===void 0)return;if(n===void 0){t.socket.send(JSON.stringify({jsonrpc:`2.0`,id:e.id,error:{code:-32601,message:`Method not found: ${o}`}}));return}try{let r=await n(e.params,t.ctx);t.socket.send(JSON.stringify({jsonrpc:`2.0`,id:e.id,result:r??{}}))}catch(n){t.socket.send(JSON.stringify({jsonrpc:`2.0`,id:e.id,error:{code:-32603,message:n instanceof Error?n.message:String(n)}}))}return}if(r?.transformInbound!==void 0&&e.id!==void 0){let n;try{n=await r.transformInbound(o,e.params,t.ctx)}catch(t){a.warn(`gateway hook transformInbound failed (fail-open): ${String(t)}`),n=e.params}if(n===null){t.socket.send(JSON.stringify({jsonrpc:`2.0`,id:e.id,error:{code:-32602,message:`Invalid params: ${o} rejected by gateway`}}));return}e.params=n}if((o===`session/new`||o===`session/load`||o===`session/resume`||o===`session/close`)&&e.id!==void 0&&(t.pending.set(String(e.id),{method:o,params:e.params}),o===`session/load`&&i.beginReplayCount(t.connId),o===`session/close`)){let n=e.params?.sessionId;n!==void 0&&i.unbind(t.connId,n)}if(await n.write(e),o===`session/close`&&e.id===void 0){let n=e.params?.sessionId;n!==void 0&&i.unbind(t.connId,n)}}async function U(e,t,n,r){try{return await n()}catch(n){return e.warn(`gateway hook ${t} failed (fail-open): ${String(n)}`),r}}const W=`@tbox.cn/tboxcode-dsh-sdk`;export{I as ABSTAIN_RPC_ERROR,v as CarrierRpcError,y as CarrierTransportError,b as DshCarrier,P as FORM_BUDGET_MS,w as FanoutRouter,C as FollowPool,N as GRACE_WINDOW_MS,L as InteractionRegistry,M as InterruptionMonitor,W as PACKAGE_NAME,F as PERMISSION_MEMBER_TIMEOUT_MS,A as RpcSessionDeps,u as Supervisor,s as SupervisorDeploymentError,R as attachAcpGateway,S as decodeWireEvent,l as exchangeCredentialsViaConnect,f as isRecord,j as openCommandsChangeEventStream,_ as parseWireEventFrame,h as parseWireFollowFrame,m as parseWireHistoryRecord,g as parseWirePage,p as parseWireSessionEvent,U as runHookOpen};

package/package.json

@@ -1,6 +1,30 @@
 {
   "name": "@tbox.cn/tboxcode-dsh-sdk",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
+  "version": "0.1.0-rc.1",
+  "type": "module",
+  "description": "AcpGateway 扩展点 + Supervisor + 直连 RPC 面（薄 carrier：POST envelope + WS mux + /connect 凭据交换，运行时零 dsh 包依赖）+ 上链 ACP server 面 + wire 契约与 decodeWireEvent；agtcodingbox 唯一依赖面",
+  "main": "lib/index.js",
+  "types": "lib/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./lib/index.d.ts",
+      "default": "./lib/index.js"
+    }
+  },
+  "files": [
+    "lib"
+  ],
+  "dependencies": {
+    "ws": "^8.19.0",
+    "@tbox.cn/dsh-acp-bridge-core": "0.1.0-rc.1",
+    "@tbox.cn/dsh-acp-full": "0.1.0-rc.1"
+  },
+  "devDependencies": {
+    "@types/ws": "^8.18.1",
+    "@agentclientprotocol/sdk": "1.8.0"
+  },
+  "scripts": {
+    "build": "tsdown",
+    "typecheck": "tsc --noEmit -p tsconfig.json"
+  }
 }

package/README.md

@@ -1,3 +0,0 @@
-# Temporary Holding Version
-
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.