@tencent-ai/agent-harness 0.2.0-beta.1 → 0.2.0-beta.3

package/cli/dist-server/types/workspace/sandbox-cli/lib/node/sandbox-center-client.d.ts

@@ -0,0 +1,219 @@
+import { type ChildProcess } from 'child_process';
+import { type RuleCategory, SANDBOX_RULES_COMMANDS, type SandboxCommand } from '../common/center-protocol.generated.js';
+export { SANDBOX_BACKUP_COMMANDS, SANDBOX_CENTER_LIFECYCLE_COMMANDS, SANDBOX_RULES_COMMANDS, } from '../common/center-protocol.generated.js';
+export type { BackupReason, CheckMaliciousDomainResponse, CommitModifyBackupResponse, DecideNetworkResponse, EnableModifyBackupRequest, EnableModifyBackupResponse, HttpInterceptConfig, HttpInterceptRuleItem, ModifyBackupCommitEntry, ModifyBackupFileEntry, ModifyBackupRequest, QueryModifyBackupCommitsResponse, RestoreModifyBackupResponse, SetHttpInterceptRequest, SetRulesConfigRequest, SetThreatDatabaseResponse, ShutdownCenterResponse, } from '../common/center-protocol.generated.js';
+export interface SandboxCenterRuntimeContext {
+    appHome: string;
+    executablePath?: string;
+    socketPath: string;
+    uid: string;
+}
+export interface SandboxCenterRequestOptions {
+    messageId?: string;
+    sessionId?: string;
+    signal?: AbortSignal;
+    timeoutMs?: number;
+}
+export type SandboxRulesCommand = (typeof SANDBOX_RULES_COMMANDS)[keyof typeof SANDBOX_RULES_COMMANDS];
+export type SandboxCenterCommand = SandboxCommand;
+export interface SandboxCenterFileRule {
+    ruleRef?: string;
+    path: string;
+    action: string;
+    comment?: string;
+    isDirectory: boolean;
+}
+export interface SandboxCenterNetworkRule {
+    ruleRef?: string;
+    endpoint: string;
+    action: string;
+    comment?: string;
+}
+export interface SandboxCenterMachRule {
+    name: string;
+    action: string;
+    comment?: string;
+}
+export interface SandboxCenterCmdRule {
+    ruleRef?: string;
+    cmd: string;
+    args: string[];
+    action: string;
+    comment?: string;
+}
+export interface SandboxCenterAddFileRulesRequest {
+    rules: SandboxCenterFileRule[];
+    category?: RuleCategory;
+}
+export interface SandboxCenterRemoveFileRulesRequest {
+    paths: string[];
+    category?: RuleCategory;
+}
+export interface SandboxCenterSetFileRulesRequest {
+    rules: SandboxCenterFileRule[];
+    category?: RuleCategory;
+}
+export interface SandboxCenterMatchFileRuleRequest {
+    path: string;
+}
+export interface SandboxCenterMatchFileRuleResponse {
+    matched: boolean;
+    path: string;
+    action: string;
+    category?: RuleCategory;
+    matchedPattern?: string;
+}
+export interface SandboxCenterSetNetworkRulesRequest {
+    rules: SandboxCenterNetworkRule[];
+    category?: RuleCategory;
+}
+export interface SandboxCenterAddNetworkRulesRequest {
+    rules: SandboxCenterNetworkRule[];
+    category?: RuleCategory;
+}
+export interface SandboxCenterRemoveNetworkRulesRequest {
+    endpoints: string[];
+    category?: RuleCategory;
+}
+export interface SandboxCenterAddMachRulesRequest {
+    rules: SandboxCenterMachRule[];
+    category?: RuleCategory;
+}
+export interface SandboxCenterRemoveMachRulesRequest {
+    names: string[];
+    category?: RuleCategory;
+}
+export interface SandboxCenterSetMachRulesRequest {
+    rules: SandboxCenterMachRule[];
+    category?: RuleCategory;
+}
+export interface SandboxCenterAddCmdRulesRequest {
+    rules: SandboxCenterCmdRule[];
+    category?: RuleCategory;
+}
+export interface SandboxCenterRemoveCmdRulesRequest {
+    cmds: string[];
+    category?: RuleCategory;
+}
+export interface SandboxCenterSetCmdRulesRequest {
+    rules: SandboxCenterCmdRule[];
+    category?: RuleCategory;
+}
+export interface SandboxCenterAddForbiddenProgramRequest {
+    program: string;
+    category?: RuleCategory;
+}
+export interface SandboxCenterRemoveForbiddenProgramRequest {
+    programs: string[];
+    category?: RuleCategory;
+}
+export interface SandboxCenterGetRulesResponse {
+    forbiddenProgramRules: Array<{
+        program: string;
+        comment?: string;
+    }>;
+}
+export interface SandboxCenterClient {
+    request<T>(command: SandboxCenterCommand, data: object, options?: SandboxCenterRequestOptions): Promise<T>;
+    close(): void;
+    getConnectionGeneration?(): number;
+    isConnected?(): boolean;
+    /**
+     * 订阅重连事件:每次成功建立**新连接**(此前无活连接——首连或断线重连)后触发。
+     * 返回取消订阅函数。
+     *
+     * 用途(#126618 规则空窗修复):center 重启(crash/升级/机器重启)后其内存态全部
+     * 丢失(运行时规则、会话授权),client 若只重连不重推,到下一轮全量下发前所有
+     * 判定都会 RuleMissing → fail-closed Ask(误弹确认框)。订阅方(如
+     * SandboxRuleSyncService)应在回调里立即重推全量规则。回调异常静默吞掉。
+     */
+    onReconnect?(listener: () => void): () => void;
+}
+export interface SandboxCenterClientOptions {
+    clientRole?: string;
+    startMode?: 'connect-only' | 'spawn-if-missing';
+    resolveRuntimeContext(options?: SandboxCenterRequestOptions): SandboxCenterRuntimeContext | Promise<SandboxCenterRuntimeContext>;
+}
+type SandboxCenterClientBaseOptions = Omit<SandboxCenterClientOptions, 'resolveRuntimeContext'> & {
+    resolveRuntimeContext?: SandboxCenterClientOptions['resolveRuntimeContext'];
+};
+/** 纪元 IPC 地址环境变量名:拉起方(Desktop/standalone agent-cli)构造后注入,
+ *  经 spawn env 继承透传进程树内所有 center client(agent-cli/sandbox-cli)。 */
+export declare const SANDBOX_CENTER_IPC_ADDRESS_ENV = "SANDBOX_CENTER_IPC_ADDRESS";
+/** A host-owned center uses connect-only; standalone Agent CLI keeps its existing lazy spawn default. */
+export declare const SANDBOX_CENTER_START_MODE_ENV = "CODEBUDDY_SANDBOX_CENTER_START_MODE";
+/**
+ * 回退派生(FNV-1a 64-bit 哈希 appHome → 完整平台路径)——与 sandbox-center 侧
+ * `cipher::ipc_address` 逐字节对齐(未注入 env 的 e2e/dev 场景两侧行为一致)。
+ */
+export declare function resolveSandboxCenterSocketPath(appHome: string, platform?: NodeJS.Platform): string;
+/**
+ * **纪元地址唯一构造函数**(按拉起方主进程 pid 派生):`<回退地址逻辑段>_<launcherPid>`。
+ *
+ * 纪元地址模型(2026-09):新主进程 = 新地址 = 新纪元——center 的 IPC 地址与纪元锁
+ * 都以该地址为键,crash 残留旧 center(持旧地址锁)不再阻塞新实例;同 uid 跨纪元的
+ * 存储单写者由 center 侧数据锁(security/&lt;uid&gt;/data.lock)守卫。
+ *
+ * **调用权规则**:只有「即将 spawn center 的拉起方」允许调用本函数并写
+ * `SANDBOX_CENTER_IPC_ADDRESS` env;树内其余 client 一律经
+ * {@link consumeEpochCenterAddress} 消费(env 优先,缺失回退旧派生)。
+ * 双入口:Desktop 主进程(workbuddy-desktop)与 standalone agent-cli
+ * (startMode='spawn-if-missing' 且 env 未注入时,以自身 pid 兜底构造)。
+ */
+export declare function buildEpochCenterAddress(appHome: string, launcherPid: number, platform?: NodeJS.Platform): string;
+/**
+ * 消费纪元地址(树内 client 统一入口):env 已注入 → 忠实返回(不再派生,防双算法漂移);
+ * env 缺失/空白 → 回退 {@link resolveSandboxCenterSocketPath}(e2e/dev 兼容)。
+ *
+ * standalone agent-cli 的 spawn-if-missing 入口额外允许 `deriveIfMissing`:
+ * env 缺失且自己是拉起方时,以自身 pid 构造纪元地址并写回 env(供随后 spawn 的
+ * center 与更深的子进程继承)。Desktop 拓扑恒 connect-only,不走该分支。
+ */
+export declare function consumeEpochCenterAddress(appHome: string, options?: {
+    deriveIfMissing?: boolean;
+    platform?: NodeJS.Platform;
+}): string;
+/** Start a center with the same configuration used by the lazy CLI client.
+ * The caller owns the returned child and may shut it down through IPC.
+ * The address is passed in both config and env so all clients in its process tree
+ * use the same epoch. UID stays in the child env and never appears in argv.
+ */
+export declare function spawnSandboxCenter(runtime: SandboxCenterRuntimeContext): Promise<ChildProcess>;
+export declare function createSandboxCenterClient(options: SandboxCenterClientOptions): SandboxCenterClient;
+export declare class SandboxCenterClientBase implements SandboxCenterClient {
+    private readonly options;
+    private socket;
+    private connectedRuntimeKey;
+    private connectPromise;
+    private connectPromiseGeneration;
+    private connectionGeneration;
+    private decoder;
+    private lineBuffer;
+    private messageSequence;
+    private readonly pendingRequests;
+    /** 重连监听器(onReconnect 订阅)。 */
+    private readonly reconnectListeners;
+    constructor(options?: SandboxCenterClientBaseOptions);
+    getConnectionGeneration(): number;
+    isConnected(): boolean;
+    onReconnect(listener: () => void): () => void;
+    /** 通知所有重连监听器(边沿触发:新连接建立成功)。异常静默。 */
+    private notifyReconnect;
+    request<T>(command: SandboxCenterCommand, data: object, requestOptions?: SandboxCenterRequestOptions): Promise<T>;
+    close(): void;
+    protected spawnCenter(runtime: SandboxCenterRuntimeContext): Promise<void>;
+    protected resolveRuntimeContext(requestOptions?: SandboxCenterRequestOptions): SandboxCenterRuntimeContext | Promise<SandboxCenterRuntimeContext>;
+    private ensureConnected;
+    private connectWithStart;
+    private waitForConnection;
+    private openSocket;
+    private handleData;
+    private handleResponse;
+    private handleDisconnect;
+    private isCurrentConnection;
+    private finishPending;
+    private rejectAllPending;
+    private withClientMetadata;
+    private nextMessageId;
+    private isRetryableConnectionError;
+}

package/cli/dist-server/types/workspace/telemetry/lib/common/event/types/craft.d.ts

@@ -22,10 +22,29 @@ export interface CraftRequest {
     actionCode: string;
 }
 /**
- * 聊天请求发送遥测数据接口
+ * Role of a model call, mirroring Claude Code's `x-claude-code-request-class`: main /
+ * subagent / team agent loops, `compaction` summary calls, and `auxiliary` for other
+ * one-shot helpers (title, WebFetch analysis, ...) on any Session.
+ */
+export type AgentType = 'main' | 'subagent' | 'team' | 'auxiliary' | 'compaction';
+/**
+ * Compaction class, with the values of Claude Code's `x-claude-code-compaction` /
+ * `x-claude-code-context-compacted` headers.
+ */
+export type CompactionKind = 'manual' | 'auto' | 'reactive';
+/**
+ * Why the harness compacted (`blocking_limit` / `ptl` are Claude Code's terms):
+ *
+ * | trigger | kind | condition |
+ * |---|---|---|
+ * | `manual` | manual | `/compact` from any entry (TUI, IM, /server, typed command) |
+ * | `pre_message_threshold` | auto | before a user message, tokens ≥ `tokenUsageThresholds.inputTokens.preMessage` |
+ * | `cache_expired` | auto | before a user message, the used prompt cache is ≥ 1h old and tokens ≥ 50% of the budget |
+ * | `emergency_threshold` | auto | before a model call, tokens ≥ `tokenUsageThresholds.inputTokens.emergency`; the call is sent, then interrupted |
+ * | `blocking_limit` | auto | before a model call, tokens + max output would exceed the context budget; the call waits |
+ * | `ptl` | reactive | the model rejected the prompt as too long |
  */
-/** Agent 角色类型：main = 主 agent，subagent = fork 子 agent，team = 团队成员 agent */
-export type AgentType = 'main' | 'subagent' | 'team';
+export type CompactionTrigger = 'manual' | 'pre_message_threshold' | 'cache_expired' | 'emergency_threshold' | 'blocking_limit' | 'ptl';
 export interface UserTaskFailedCreditRefundTelemetry {
     /** 用户 ID，对齐公共 userId 字段；业务侧显式传入，避免特定宿主未注入 UserinfoProvider 时缺失。 */
     userId: string;
@@ -74,6 +93,9 @@ export interface ToolCallLoopTelemetry {
     /** 重复序列的周期长度；连续同工具为 1。 */
     total: number;
 }
+/**
+ * 聊天请求发送遥测数据接口
+ */
 export interface ChatRequestSendTelemetry {
     /** 聊天模式，枚举值：ask / chat */
     mode: string;
@@ -307,6 +329,20 @@ export interface ChatMessageSendTelemetry {
     isContextTruncated: boolean;
     /** 当前 stepCount 数值 */
     currentStepCount: number;
+    /**
+     * Agent-loop model call number within this conversation. Unlike
+     * `currentStepCount` it never resets (runs, compaction, resume); retries of
+     * one call share the number.
+     */
+    totalStepCount?: number;
+    /** Completed context compactions of this conversation when the call is sent; never resets. */
+    compactionCount?: number;
+    /** Compaction the call's context starts from (`cmp_*`, the JSONL boundary item id). */
+    compactionId?: string;
+    /** First call after a compaction: the compaction's class. */
+    contextCompacted?: CompactionKind;
+    /** Set with `contextCompacted`: why the harness compacted. */
+    compactionTrigger?: CompactionTrigger;
     /** 是否是自定义模型 */
     isCustomModel?: boolean;
     /**
@@ -352,6 +388,8 @@ export interface ChatMessageResponseTelemetry {
     requestId: string;
     /** 模型调用 ID */
     messageId: string;
+    /** Same value as the paired `chat_message_send.totalStepCount`. */
+    totalStepCount?: number;
     /** 模型 ID */
     requestModelId: string;
     /** 模型名称 */
@@ -425,6 +463,8 @@ export interface ChatToolActionTelemetry {
     messageId: string;
     /** 当前 stepCount 数值 */
     stepCount: number;
+    /** Agent-loop step (`chat_message_send.totalStepCount`) whose response requested this tool call. */
+    totalStepCount?: number;
     /** 工具 ID */
     toolCallId: string;
     /** 工具名称 */

package/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tencent-ai/codebuddy-code",
-  "version": "2.156.0",
+  "version": "2.159.0",
   "private": true,
   "description": "CodeBuddy runtime embedded in @tencent-ai/agent-harness",
   "license": "SEE LICENSE IN LICENSE.txt",

package/cli/product.cloudhosted.json

@@ -666,8 +666,8 @@
       },
       "maxAllowedSize": 256000,
       "relatedModels": {
-        "lite": "kimi-k2.6",
-        "reasoning": "kimi-k2.6"
+        "lite": "kimi-k2.5",
+        "reasoning": "kimi-k2-thinking"
       }
     },
     {
@@ -798,6 +798,6 @@
     "SelectImage": true,
     "SkipToolCallSupportCheck": true
   },
-  "commit": "dc049917f83480787e2618027a5efef739dfc3e0",
-  "date": "2026-09-22T06:02:01.815Z"
+  "commit": "5fdb0502c8031c71fd947c537235505bdae49eec",
+  "date": "2026-09-28T07:49:01.626Z"
 }