@winmatrix/agent-sdk 1.0.4 → 1.0.6

package/dist/observability/WorkstationTokenUsageRecorder.js

@@ -0,0 +1,264 @@
+import { createHash } from 'node:crypto';
+export class WorkstationTokenUsageConflictError extends Error {
+    code = 'WORKSTATION_TOKEN_USAGE_CONFLICT';
+    constructor() {
+        super('Workstation token usage conflicts with an immutable invocation');
+        this.name = 'WorkstationTokenUsageConflictError';
+    }
+}
+export class WorkstationTokenUsageValidationError extends Error {
+    code = 'WORKSTATION_TOKEN_USAGE_INVALID';
+    constructor(message) {
+        super(message);
+        this.name = 'WorkstationTokenUsageValidationError';
+    }
+}
+function sha256(value) {
+    return createHash('sha256').update(value).digest('hex');
+}
+function canonicalize(value) {
+    if (Array.isArray(value))
+        return value.map(canonicalize);
+    if (!value || typeof value !== 'object')
+        return value;
+    const output = {};
+    for (const key of Object.keys(value).sort()) {
+        output[key] = canonicalize(value[key]);
+    }
+    return output;
+}
+function digest(value) {
+    return sha256(JSON.stringify(canonicalize(value)));
+}
+function requireNonEmpty(value, field) {
+    const normalized = value.trim();
+    if (!normalized)
+        throw new WorkstationTokenUsageValidationError(`${field} must be non-empty`);
+    return normalized;
+}
+function requireToken(value, field) {
+    const normalized = value ?? 0;
+    if (!Number.isSafeInteger(normalized) || normalized < 0) {
+        throw new WorkstationTokenUsageValidationError(`${field} must be a non-negative safe integer`);
+    }
+    return normalized;
+}
+function requireIso(value, field) {
+    if (!/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d{1,3})?(?:Z|[+-]\d{2}:\d{2})$/.test(value)) {
+        throw new WorkstationTokenUsageValidationError(`${field} must be an offset ISO timestamp`);
+    }
+    if (!Number.isFinite(Date.parse(value))) {
+        throw new WorkstationTokenUsageValidationError(`${field} is invalid`);
+    }
+    return value;
+}
+function optionalText(value) {
+    const normalized = value?.trim();
+    return normalized ? normalized : null;
+}
+function normalizeInvocation(input) {
+    const workstationId = requireNonEmpty(input.workstationId, 'workstationId');
+    const sourceInvocationId = requireNonEmpty(input.sourceInvocationId, 'sourceInvocationId');
+    const provider = requireNonEmpty(input.provider, 'provider');
+    const startedAt = requireIso(input.startedAt, 'startedAt');
+    const occurredAt = requireIso(input.occurredAt, 'occurredAt');
+    if (Date.parse(startedAt) > Date.parse(occurredAt)) {
+        throw new WorkstationTokenUsageValidationError('startedAt must not be after occurredAt');
+    }
+    if (input.attemptNo !== undefined && (!Number.isSafeInteger(input.attemptNo) || input.attemptNo < 1)) {
+        throw new WorkstationTokenUsageValidationError('attemptNo must be a positive safe integer');
+    }
+    if (input.modelUsages.length === 0) {
+        throw new WorkstationTokenUsageValidationError('modelUsages must be non-empty');
+    }
+    const seenSourceIds = new Set();
+    const modelUsages = input.modelUsages.map((usage) => {
+        const sourceModelUsageId = requireNonEmpty(usage.sourceModelUsageId, 'sourceModelUsageId');
+        if (seenSourceIds.has(sourceModelUsageId)) {
+            throw new WorkstationTokenUsageValidationError('sourceModelUsageId must be unique within an invocation');
+        }
+        seenSourceIds.add(sourceModelUsageId);
+        const inputTokens = requireToken(usage.inputTokens, 'inputTokens');
+        const outputTokens = requireToken(usage.outputTokens, 'outputTokens');
+        const cacheReadTokens = requireToken(usage.cacheReadTokens, 'cacheReadTokens');
+        const cacheCreationTokens = requireToken(usage.cacheCreationTokens, 'cacheCreationTokens');
+        const reasoningTokens = requireToken(usage.reasoningTokens, 'reasoningTokens');
+        return {
+            sourceModelUsageId,
+            modelUsageEventId: `coding_model_${sha256(`${input.runtime}:${workstationId}:${sourceModelUsageId}`)}`,
+            model: requireNonEmpty(usage.model, 'model'),
+            inputTokens,
+            outputTokens,
+            cacheReadTokens,
+            cacheCreationTokens,
+            reasoningTokens,
+            totalTokens: inputTokens + outputTokens + cacheReadTokens + cacheCreationTokens + reasoningTokens,
+        };
+    });
+    if (!modelUsages.some((usage) => usage.totalTokens > 0)) {
+        throw new WorkstationTokenUsageValidationError('invocation must contain token usage');
+    }
+    const totals = modelUsages.reduce((sum, usage) => ({
+        input: sum.input + usage.inputTokens,
+        output: sum.output + usage.outputTokens,
+        cacheRead: sum.cacheRead + usage.cacheReadTokens,
+        cacheCreation: sum.cacheCreation + usage.cacheCreationTokens,
+        reasoning: sum.reasoning + usage.reasoningTokens,
+        total: sum.total + usage.totalTokens,
+    }), { input: 0, output: 0, cacheRead: 0, cacheCreation: 0, reasoning: 0, total: 0 });
+    return {
+        workstationId,
+        runtime: input.runtime,
+        sourceInvocationId,
+        usageEventId: `coding_inv_${sha256(`${input.runtime}:${workstationId}:${sourceInvocationId}`)}`,
+        provider,
+        startedAt,
+        occurredAt,
+        timeSource: input.timeSource,
+        sessionId: optionalText(input.sessionId),
+        taskRecordId: optionalText(input.taskRecordId),
+        taskId: optionalText(input.taskId),
+        attemptNo: input.attemptNo ?? null,
+        modelUsages,
+        tokenInput: totals.input,
+        tokenOutput: totals.output,
+        tokenCacheRead: totals.cacheRead,
+        tokenCacheCreation: totals.cacheCreation,
+        tokenReasoning: totals.reasoning,
+        tokenTotal: totals.total,
+    };
+}
+export class SqliteWorkstationTokenUsageRecorder {
+    db;
+    constructor(db) {
+        this.db = db;
+        this.initializeSchema();
+    }
+    static async open(path) {
+        const sqlite = await import('node:sqlite');
+        return new SqliteWorkstationTokenUsageRecorder(new sqlite.DatabaseSync(path));
+    }
+    async recordCompletedInvocation(input) {
+        const invocation = normalizeInvocation(input);
+        const payloadDigest = digest(invocation);
+        this.db.exec('BEGIN IMMEDIATE');
+        try {
+            const existing = this.db.prepare(`SELECT canonical_payload_digest AS digest
+           FROM workstation_token_usage_invocation
+          WHERE workstation_id = ? AND source_invocation_id = ?`).get(invocation.workstationId, invocation.sourceInvocationId);
+            if (existing) {
+                if (existing.digest !== payloadDigest)
+                    throw new WorkstationTokenUsageConflictError();
+                this.db.exec('COMMIT');
+                return 'replayed';
+            }
+            const inserted = this.db.prepare(`INSERT INTO workstation_token_usage_invocation (
+           workstation_id, runtime, source_invocation_id, usage_event_id, provider,
+           started_at, occurred_at, time_source, session_id, task_record_id, task_id, attempt_no,
+           token_input, token_output, token_cache_read, token_cache_creation, token_reasoning,
+           token_total, canonical_payload_digest, export_schema_version
+         ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, 1)`).run(invocation.workstationId, invocation.runtime, invocation.sourceInvocationId, invocation.usageEventId, invocation.provider, invocation.startedAt, invocation.occurredAt, invocation.timeSource, invocation.sessionId, invocation.taskRecordId, invocation.taskId, invocation.attemptNo, invocation.tokenInput, invocation.tokenOutput, invocation.tokenCacheRead, invocation.tokenCacheCreation, invocation.tokenReasoning, invocation.tokenTotal, payloadDigest);
+            const invocationRowId = Number(inserted.lastInsertRowid);
+            const insertModel = this.db.prepare(`INSERT INTO workstation_token_usage_model (
+           invocation_row_id, workstation_id, source_model_usage_id, model_usage_event_id, model,
+           token_input, token_output, token_cache_read, token_cache_creation, token_reasoning, token_total
+         ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`);
+            for (const usage of invocation.modelUsages) {
+                insertModel.run(invocationRowId, invocation.workstationId, usage.sourceModelUsageId, usage.modelUsageEventId, usage.model, usage.inputTokens, usage.outputTokens, usage.cacheReadTokens, usage.cacheCreationTokens, usage.reasoningTokens, usage.totalTokens);
+            }
+            this.db.prepare(`INSERT INTO workstation_token_usage_metadata (workstation_id, tracking_started_at)
+         VALUES (?, ?)
+         ON CONFLICT(workstation_id) DO NOTHING`).run(invocation.workstationId, invocation.startedAt);
+            this.db.exec('COMMIT');
+            return 'inserted';
+        }
+        catch (error) {
+            this.db.exec('ROLLBACK');
+            throw error;
+        }
+    }
+    async recordCoverageGap(input) {
+        const workstationId = requireNonEmpty(input.workstationId, 'workstationId');
+        const reason = requireNonEmpty(input.reason, 'reason');
+        const occurredAt = requireIso(input.occurredAt, 'occurredAt');
+        const stableSourceReference = requireNonEmpty(input.stableSourceReference, 'stableSourceReference');
+        const gapKey = sha256(`${input.runtime}:${workstationId}:${reason}:${stableSourceReference}`);
+        const result = this.db.prepare(`INSERT INTO workstation_token_usage_gap (
+         workstation_id, runtime, reason, occurred_at, gap_key
+       ) VALUES (?, ?, ?, ?, ?)
+       ON CONFLICT(workstation_id, gap_key) DO NOTHING`).run(workstationId, input.runtime, reason, occurredAt, gapKey);
+        return result.changes === 1 ? 'inserted' : 'replayed';
+    }
+    close() {
+        this.db.close();
+    }
+    initializeSchema() {
+        this.db.exec(`
+      PRAGMA journal_mode = WAL;
+      PRAGMA foreign_keys = ON;
+      PRAGMA busy_timeout = 5000;
+      CREATE TABLE IF NOT EXISTS workstation_token_usage_metadata (
+        workstation_id TEXT PRIMARY KEY,
+        tracking_started_at TEXT NOT NULL,
+        export_after_row_id INTEGER NOT NULL DEFAULT 0
+      );
+      CREATE TABLE IF NOT EXISTS workstation_token_usage_invocation (
+        id INTEGER PRIMARY KEY AUTOINCREMENT,
+        workstation_id TEXT NOT NULL,
+        runtime TEXT NOT NULL CHECK(runtime IN ('claude-code', 'hermes')),
+        source_invocation_id TEXT NOT NULL,
+        usage_event_id TEXT NOT NULL,
+        provider TEXT NOT NULL,
+        started_at TEXT NOT NULL,
+        occurred_at TEXT NOT NULL,
+        time_source TEXT NOT NULL CHECK(time_source IN ('source', 'message_start_observed')),
+        session_id TEXT,
+        task_record_id TEXT,
+        task_id TEXT,
+        attempt_no INTEGER,
+        token_input INTEGER NOT NULL,
+        token_output INTEGER NOT NULL,
+        token_cache_read INTEGER NOT NULL,
+        token_cache_creation INTEGER NOT NULL,
+        token_reasoning INTEGER NOT NULL,
+        token_total INTEGER NOT NULL,
+        canonical_payload_digest TEXT NOT NULL,
+        export_schema_version INTEGER NOT NULL,
+        UNIQUE(workstation_id, source_invocation_id),
+        UNIQUE(workstation_id, usage_event_id)
+      );
+      CREATE TABLE IF NOT EXISTS workstation_token_usage_model (
+        id INTEGER PRIMARY KEY AUTOINCREMENT,
+        invocation_row_id INTEGER NOT NULL REFERENCES workstation_token_usage_invocation(id) ON DELETE CASCADE,
+        workstation_id TEXT NOT NULL,
+        source_model_usage_id TEXT NOT NULL,
+        model_usage_event_id TEXT NOT NULL,
+        model TEXT NOT NULL,
+        token_input INTEGER NOT NULL,
+        token_output INTEGER NOT NULL,
+        token_cache_read INTEGER NOT NULL,
+        token_cache_creation INTEGER NOT NULL,
+        token_reasoning INTEGER NOT NULL,
+        token_total INTEGER NOT NULL,
+        UNIQUE(workstation_id, source_model_usage_id),
+        UNIQUE(workstation_id, model_usage_event_id)
+      );
+      CREATE TABLE IF NOT EXISTS workstation_token_usage_gap (
+        id INTEGER PRIMARY KEY AUTOINCREMENT,
+        workstation_id TEXT NOT NULL,
+        runtime TEXT NOT NULL CHECK(runtime IN ('claude-code', 'hermes')),
+        reason TEXT NOT NULL,
+        occurred_at TEXT NOT NULL,
+        gap_key TEXT NOT NULL,
+        UNIQUE(workstation_id, gap_key)
+      );
+      CREATE INDEX IF NOT EXISTS idx_workstation_usage_invocation_export
+        ON workstation_token_usage_invocation(workstation_id, export_schema_version, id);
+      CREATE INDEX IF NOT EXISTS idx_workstation_usage_model_invocation
+        ON workstation_token_usage_model(invocation_row_id, id);
+      CREATE INDEX IF NOT EXISTS idx_workstation_usage_gap_workstation
+        ON workstation_token_usage_gap(workstation_id, id);
+    `);
+    }
+}
+//# sourceMappingURL=WorkstationTokenUsageRecorder.js.map

package/dist/observability/WorkstationTokenUsageRecorder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"WorkstationTokenUsageRecorder.js","sourceRoot":"","sources":["../../src/observability/WorkstationTokenUsageRecorder.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAwFzC,MAAM,OAAO,kCAAmC,SAAQ,KAAK;IAClD,IAAI,GAAG,kCAAkC,CAAC;IAEnD;QACE,KAAK,CAAC,gEAAgE,CAAC,CAAC;QACxE,IAAI,CAAC,IAAI,GAAG,oCAAoC,CAAC;IACnD,CAAC;CACF;AAED,MAAM,OAAO,oCAAqC,SAAQ,KAAK;IACpD,IAAI,GAAG,iCAAiC,CAAC;IAElD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,sCAAsC,CAAC;IACrD,CAAC;CACF;AAED,SAAS,MAAM,CAAC,KAAa;IAC3B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACzD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAgC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QACvE,MAAM,CAAC,GAAG,CAAC,GAAG,YAAY,CAAE,KAAiC,CAAC,GAAG,CAAC,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,MAAM,CAAC,KAAc;IAC5B,OAAO,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,eAAe,CAAC,KAAa,EAAE,KAAa;IACnD,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAChC,IAAI,CAAC,UAAU;QAAE,MAAM,IAAI,oCAAoC,CAAC,GAAG,KAAK,oBAAoB,CAAC,CAAC;IAC9F,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,YAAY,CAAC,KAAyB,EAAE,KAAa;IAC5D,MAAM,UAAU,GAAG,KAAK,IAAI,CAAC,CAAC;IAC9B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,oCAAoC,CAAC,GAAG,KAAK,sCAAsC,CAAC,CAAC;IACjG,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,UAAU,CAAC,KAAa,EAAE,KAAa;IAC9C,IAAI,CAAC,0EAA0E,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5F,MAAM,IAAI,oCAAoC,CAAC,GAAG,KAAK,kCAAkC,CAAC,CAAC;IAC7F,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,oCAAoC,CAAC,GAAG,KAAK,aAAa,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,YAAY,CAAC,KAAyB;IAC7C,MAAM,UAAU,GAAG,KAAK,EAAE,IAAI,EAAE,CAAC;IACjC,OAAO,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;AACxC,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAqC;IAChE,MAAM,aAAa,GAAG,eAAe,CAAC,KAAK,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;IAC5E,MAAM,kBAAkB,GAAG,eAAe,CAAC,KAAK,CAAC,kBAAkB,EAAE,oBAAoB,CAAC,CAAC;IAC3F,MAAM,QAAQ,GAAG,eAAe,CAAC,KAAK,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAC7D,MAAM,SAAS,GAAG,UAAU,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IAC3D,MAAM,UAAU,GAAG,UAAU,CAAC,KAAK,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IAC9D,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,oCAAoC,CAAC,wCAAwC,CAAC,CAAC;IAC3F,CAAC;IACD,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,EAAE,CAAC;QACrG,MAAM,IAAI,oCAAoC,CAAC,2CAA2C,CAAC,CAAC;IAC9F,CAAC;IACD,IAAI,KAAK,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,oCAAoC,CAAC,+BAA+B,CAAC,CAAC;IAClF,CAAC;IAED,MAAM,aAAa,GAAG,IAAI,GAAG,EAAU,CAAC;IACxC,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QAClD,MAAM,kBAAkB,GAAG,eAAe,CAAC,KAAK,CAAC,kBAAkB,EAAE,oBAAoB,CAAC,CAAC;QAC3F,IAAI,aAAa,CAAC,GAAG,CAAC,kBAAkB,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAI,oCAAoC,CAAC,wDAAwD,CAAC,CAAC;QAC3G,CAAC;QACD,aAAa,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;QACtC,MAAM,WAAW,GAAG,YAAY,CAAC,KAAK,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;QACnE,MAAM,YAAY,GAAG,YAAY,CAAC,KAAK,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;QACtE,MAAM,eAAe,GAAG,YAAY,CAAC,KAAK,CAAC,eAAe,EAAE,iBAAiB,CAAC,CAAC;QAC/E,MAAM,mBAAmB,GAAG,YAAY,CAAC,KAAK,CAAC,mBAAmB,EAAE,qBAAqB,CAAC,CAAC;QAC3F,MAAM,eAAe,GAAG,YAAY,CAAC,KAAK,CAAC,eAAe,EAAE,iBAAiB,CAAC,CAAC;QAC/E,OAAO;YACL,kBAAkB;YAClB,iBAAiB,EAAE,gBAAgB,MAAM,CAAC,GAAG,KAAK,CAAC,OAAO,IAAI,aAAa,IAAI,kBAAkB,EAAE,CAAC,EAAE;YACtG,KAAK,EAAE,eAAe,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC;YAC5C,WAAW;YACX,YAAY;YACZ,eAAe;YACf,mBAAmB;YACnB,eAAe;YACf,WAAW,EAAE,WAAW,GAAG,YAAY,GAAG,eAAe,GAAG,mBAAmB,GAAG,eAAe;SAClG,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,GAAG,CAAC,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,oCAAoC,CAAC,qCAAqC,CAAC,CAAC;IACxF,CAAC;IAED,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAC/B,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QACf,KAAK,EAAE,GAAG,CAAC,KAAK,GAAG,KAAK,CAAC,WAAW;QACpC,MAAM,EAAE,GAAG,CAAC,MAAM,GAAG,KAAK,CAAC,YAAY;QACvC,SAAS,EAAE,GAAG,CAAC,SAAS,GAAG,KAAK,CAAC,eAAe;QAChD,aAAa,EAAE,GAAG,CAAC,aAAa,GAAG,KAAK,CAAC,mBAAmB;QAC5D,SAAS,EAAE,GAAG,CAAC,SAAS,GAAG,KAAK,CAAC,eAAe;QAChD,KAAK,EAAE,GAAG,CAAC,KAAK,GAAG,KAAK,CAAC,WAAW;KACrC,CAAC,EACF,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAChF,CAAC;IAEF,OAAO;QACL,aAAa;QACb,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,kBAAkB;QAClB,YAAY,EAAE,cAAc,MAAM,CAAC,GAAG,KAAK,CAAC,OAAO,IAAI,aAAa,IAAI,kBAAkB,EAAE,CAAC,EAAE;QAC/F,QAAQ;QACR,SAAS;QACT,UAAU;QACV,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,SAAS,EAAE,YAAY,CAAC,KAAK,CAAC,SAAS,CAAC;QACxC,YAAY,EAAE,YAAY,CAAC,KAAK,CAAC,YAAY,CAAC;QAC9C,MAAM,EAAE,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC;QAClC,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI;QAClC,WAAW;QACX,UAAU,EAAE,MAAM,CAAC,KAAK;QACxB,WAAW,EAAE,MAAM,CAAC,MAAM;QAC1B,cAAc,EAAE,MAAM,CAAC,SAAS;QAChC,kBAAkB,EAAE,MAAM,CAAC,aAAa;QACxC,cAAc,EAAE,MAAM,CAAC,SAAS;QAChC,UAAU,EAAE,MAAM,CAAC,KAAK;KACzB,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,mCAAmC;IACT;IAArC,YAAqC,EAAgB;QAAhB,OAAE,GAAF,EAAE,CAAc;QACnD,IAAI,CAAC,gBAAgB,EAAE,CAAC;IAC1B,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAY;QAC5B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;QAC3C,OAAO,IAAI,mCAAmC,CAAC,IAAI,MAAM,CAAC,YAAY,CAAC,IAAI,CAAiB,CAAC,CAAC;IAChG,CAAC;IAED,KAAK,CAAC,yBAAyB,CAAC,KAAqC;QACnE,MAAM,UAAU,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;QAC9C,MAAM,aAAa,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;QACzC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAChC,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAC9B;;gEAEwD,CACzD,CAAC,GAAG,CAAC,UAAU,CAAC,aAAa,EAAE,UAAU,CAAC,kBAAkB,CAAoC,CAAC;YAClG,IAAI,QAAQ,EAAE,CAAC;gBACb,IAAI,QAAQ,CAAC,MAAM,KAAK,aAAa;oBAAE,MAAM,IAAI,kCAAkC,EAAE,CAAC;gBACtF,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBACvB,OAAO,UAAU,CAAC;YACpB,CAAC;YAED,MAAM,QAAQ,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAC9B;;;;;+EAKuE,CACxE,CAAC,GAAG,CACH,UAAU,CAAC,aAAa,EAAE,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,kBAAkB,EAC3E,UAAU,CAAC,YAAY,EAAE,UAAU,CAAC,QAAQ,EAAE,UAAU,CAAC,SAAS,EAAE,UAAU,CAAC,UAAU,EACzF,UAAU,CAAC,UAAU,EAAE,UAAU,CAAC,SAAS,EAAE,UAAU,CAAC,YAAY,EAAE,UAAU,CAAC,MAAM,EACvF,UAAU,CAAC,SAAS,EAAE,UAAU,CAAC,UAAU,EAAE,UAAU,CAAC,WAAW,EAAE,UAAU,CAAC,cAAc,EAC9F,UAAU,CAAC,kBAAkB,EAAE,UAAU,CAAC,cAAc,EAAE,UAAU,CAAC,UAAU,EAAE,aAAa,CAC/F,CAAC;YACF,MAAM,eAAe,GAAG,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;YACzD,MAAM,WAAW,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CACjC;;;oDAG4C,CAC7C,CAAC;YACF,KAAK,MAAM,KAAK,IAAI,UAAU,CAAC,WAAW,EAAE,CAAC;gBAC3C,WAAW,CAAC,GAAG,CACb,eAAe,EAAE,UAAU,CAAC,aAAa,EAAE,KAAK,CAAC,kBAAkB,EACnE,KAAK,CAAC,iBAAiB,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,YAAY,EAC3E,KAAK,CAAC,eAAe,EAAE,KAAK,CAAC,mBAAmB,EAAE,KAAK,CAAC,eAAe,EAAE,KAAK,CAAC,WAAW,CAC3F,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,EAAE,CAAC,OAAO,CACb;;gDAEwC,CACzC,CAAC,GAAG,CAAC,UAAU,CAAC,aAAa,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC;YACtD,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACvB,OAAO,UAAU,CAAC;QACpB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACzB,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,KAA6B;QACnD,MAAM,aAAa,GAAG,eAAe,CAAC,KAAK,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;QAC5E,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACvD,MAAM,UAAU,GAAG,UAAU,CAAC,KAAK,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;QAC9D,MAAM,qBAAqB,GAAG,eAAe,CAAC,KAAK,CAAC,qBAAqB,EAAE,uBAAuB,CAAC,CAAC;QACpG,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,KAAK,CAAC,OAAO,IAAI,aAAa,IAAI,MAAM,IAAI,qBAAqB,EAAE,CAAC,CAAC;QAC9F,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAC5B;;;uDAGiD,CAClD,CAAC,GAAG,CAAC,aAAa,EAAE,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;QAChE,OAAO,MAAM,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC;IACxD,CAAC;IAED,KAAK;QACH,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;IAClB,CAAC;IAEO,gBAAgB;QACtB,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAiEZ,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/utils/contextBudget.d.ts

@@ -0,0 +1,27 @@
+import type { AgentTaskContext } from '../core/AgentAdapter.js';
+import type { ContextCompressionMode } from '@winmatrix/protocol';
+export interface ContextBudgetDiagnostics {
+    originalInputChars: number;
+    finalInputChars: number;
+    originalSystemChars?: number;
+    finalSystemChars?: number;
+    action: 'none' | 'truncated_input' | 'truncated_system' | 'truncated_both';
+    compression: ContextCompressionMode;
+}
+export interface ContextBudgetResult {
+    input: string;
+    systemPrompt?: string;
+    diagnostics?: ContextBudgetDiagnostics;
+}
+/**
+ * 对当前 turn 的 input / systemPrompt 应用上下文预算。
+ *
+ * 规则：
+ * - 无 budget 时原样返回。
+ * - compression 缺省为 'truncate_head'（body-first，与 octo 实测模式一致）。
+ * - 先按 maxSystemChars 截 systemPrompt，再按 maxInputChars 截 input。
+ * - 若指定 maxContextChars，则优先继续压缩 input，必要时再压缩 systemPrompt。
+ * - 返回 diagnostics 只含字符数与 action，不含正文。
+ */
+export declare function applyContextBudget(task: AgentTaskContext): ContextBudgetResult;
+//# sourceMappingURL=contextBudget.d.ts.map

package/dist/utils/contextBudget.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contextBudget.d.ts","sourceRoot":"","sources":["../../src/utils/contextBudget.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,KAAK,EAAiB,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAEjF,MAAM,WAAW,wBAAwB;IACvC,kBAAkB,EAAE,MAAM,CAAC;IAC3B,eAAe,EAAE,MAAM,CAAC;IACxB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,MAAM,EAAE,MAAM,GAAG,iBAAiB,GAAG,kBAAkB,GAAG,gBAAgB,CAAC;IAC3E,WAAW,EAAE,sBAAsB,CAAC;CACrC;AAED,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,wBAAwB,CAAC;CACxC;AAcD;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,gBAAgB,GAAG,mBAAmB,CAqE9E"}

package/dist/utils/contextBudget.js

@@ -0,0 +1,86 @@
+function truncateText(text, maxChars, mode) {
+    if (text.length <= maxChars)
+        return text;
+    if (mode === 'truncate_tail') {
+        return text.slice(0, maxChars);
+    }
+    if (mode === 'none') {
+        return text;
+    }
+    // default / truncate_head: preserve the body/tail, drop the oldest prefix from the front.
+    return text.slice(-maxChars);
+}
+/**
+ * 对当前 turn 的 input / systemPrompt 应用上下文预算。
+ *
+ * 规则：
+ * - 无 budget 时原样返回。
+ * - compression 缺省为 'truncate_head'（body-first，与 octo 实测模式一致）。
+ * - 先按 maxSystemChars 截 systemPrompt，再按 maxInputChars 截 input。
+ * - 若指定 maxContextChars，则优先继续压缩 input，必要时再压缩 systemPrompt。
+ * - 返回 diagnostics 只含字符数与 action，不含正文。
+ */
+export function applyContextBudget(task) {
+    const budget = task.contextBudget;
+    if (!budget) {
+        return { input: task.input, systemPrompt: task.systemPrompt };
+    }
+    const compression = budget.compression ?? 'truncate_head';
+    const originalInputChars = task.input.length;
+    const originalSystemChars = task.systemPrompt?.length;
+    let systemPrompt = task.systemPrompt;
+    let input = task.input;
+    if (systemPrompt !== undefined && budget.maxSystemChars !== undefined) {
+        systemPrompt = truncateText(systemPrompt, budget.maxSystemChars, compression);
+    }
+    if (budget.maxInputChars !== undefined) {
+        input = truncateText(input, budget.maxInputChars, compression);
+    }
+    if (budget.maxContextChars !== undefined) {
+        const systemLen = systemPrompt?.length ?? 0;
+        const inputLen = input.length;
+        const total = systemLen + inputLen;
+        if (total > budget.maxContextChars) {
+            const remaining = Math.max(0, budget.maxContextChars - systemLen);
+            if (remaining < inputLen) {
+                input = truncateText(input, remaining, compression);
+            }
+            const newTotal = (systemPrompt?.length ?? 0) + input.length;
+            if (newTotal > budget.maxContextChars) {
+                const systemRemaining = Math.max(0, budget.maxContextChars - input.length);
+                if (systemPrompt !== undefined && systemRemaining < systemPrompt.length) {
+                    systemPrompt = truncateText(systemPrompt, systemRemaining, compression);
+                }
+            }
+        }
+    }
+    const finalInputChars = input.length;
+    const finalSystemChars = systemPrompt?.length;
+    let action = 'none';
+    const inputTruncated = finalInputChars < originalInputChars;
+    const systemTruncated = originalSystemChars !== undefined &&
+        finalSystemChars !== undefined &&
+        finalSystemChars < originalSystemChars;
+    if (inputTruncated && systemTruncated)
+        action = 'truncated_both';
+    else if (inputTruncated)
+        action = 'truncated_input';
+    else if (systemTruncated)
+        action = 'truncated_system';
+    if (action === 'none') {
+        return { input, systemPrompt };
+    }
+    return {
+        input,
+        systemPrompt,
+        diagnostics: {
+            originalInputChars,
+            finalInputChars,
+            ...(originalSystemChars !== undefined ? { originalSystemChars } : {}),
+            ...(finalSystemChars !== undefined ? { finalSystemChars } : {}),
+            action,
+            compression,
+        },
+    };
+}
+//# sourceMappingURL=contextBudget.js.map

package/dist/utils/contextBudget.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contextBudget.js","sourceRoot":"","sources":["../../src/utils/contextBudget.ts"],"names":[],"mappings":"AAkBA,SAAS,YAAY,CAAC,IAAY,EAAE,QAAgB,EAAE,IAA4B;IAChF,IAAI,IAAI,CAAC,MAAM,IAAI,QAAQ;QAAE,OAAO,IAAI,CAAC;IACzC,IAAI,IAAI,KAAK,eAAe,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IACjC,CAAC;IACD,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACpB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,0FAA0F;IAC1F,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC;AAC/B,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAsB;IACvD,MAAM,MAAM,GAA8B,IAAI,CAAC,aAAa,CAAC;IAC7D,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC;IAChE,CAAC;IAED,MAAM,WAAW,GAA2B,MAAM,CAAC,WAAW,IAAI,eAAe,CAAC;IAClF,MAAM,kBAAkB,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;IAC7C,MAAM,mBAAmB,GAAG,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC;IAEtD,IAAI,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;IACrC,IAAI,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;IAEvB,IAAI,YAAY,KAAK,SAAS,IAAI,MAAM,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;QACtE,YAAY,GAAG,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;IAChF,CAAC;IAED,IAAI,MAAM,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;QACvC,KAAK,GAAG,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;IACjE,CAAC;IAED,IAAI,MAAM,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;QACzC,MAAM,SAAS,GAAG,YAAY,EAAE,MAAM,IAAI,CAAC,CAAC;QAC5C,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC;QAC9B,MAAM,KAAK,GAAG,SAAS,GAAG,QAAQ,CAAC;QACnC,IAAI,KAAK,GAAG,MAAM,CAAC,eAAe,EAAE,CAAC;YACnC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,eAAe,GAAG,SAAS,CAAC,CAAC;YAClE,IAAI,SAAS,GAAG,QAAQ,EAAE,CAAC;gBACzB,KAAK,GAAG,YAAY,CAAC,KAAK,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;YACtD,CAAC;YACD,MAAM,QAAQ,GAAG,CAAC,YAAY,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC;YAC5D,IAAI,QAAQ,GAAG,MAAM,CAAC,eAAe,EAAE,CAAC;gBACtC,MAAM,eAAe,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,eAAe,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;gBAC3E,IAAI,YAAY,KAAK,SAAS,IAAI,eAAe,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC;oBACxE,YAAY,GAAG,YAAY,CAAC,YAAY,EAAE,eAAe,EAAE,WAAW,CAAC,CAAC;gBAC1E,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,eAAe,GAAG,KAAK,CAAC,MAAM,CAAC;IACrC,MAAM,gBAAgB,GAAG,YAAY,EAAE,MAAM,CAAC;IAE9C,IAAI,MAAM,GAAuC,MAAM,CAAC;IACxD,MAAM,cAAc,GAAG,eAAe,GAAG,kBAAkB,CAAC;IAC5D,MAAM,eAAe,GACnB,mBAAmB,KAAK,SAAS;QACjC,gBAAgB,KAAK,SAAS;QAC9B,gBAAgB,GAAG,mBAAmB,CAAC;IACzC,IAAI,cAAc,IAAI,eAAe;QAAE,MAAM,GAAG,gBAAgB,CAAC;SAC5D,IAAI,cAAc;QAAE,MAAM,GAAG,iBAAiB,CAAC;SAC/C,IAAI,eAAe;QAAE,MAAM,GAAG,kBAAkB,CAAC;IAEtD,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;IACjC,CAAC;IAED,OAAO;QACL,KAAK;QACL,YAAY;QACZ,WAAW,EAAE;YACX,kBAAkB;YAClB,eAAe;YACf,GAAG,CAAC,mBAAmB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrE,GAAG,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/D,MAAM;YACN,WAAW;SACZ;KACF,CAAC;AACJ,CAAC"}

package/dist/utils/envSanitizer.d.ts

@@ -0,0 +1,38 @@
+/**
+ * 环境变量凭据剥离（harden-external-computer-daemon P1，design D3）。
+ *
+ * ## 背景
+ * daemon 跑在用户自有机器上，adapter 旧实现把 daemon 进程的全部环境变量
+ * （`{ ...process.env, ...(task.env ?? {}) }`）原样传给外部 CLI——用户环境里的
+ * ANTHROPIC_API_KEY、各类 SDK token、内部凭据全部被第三方进程继承。
+ *
+ * ## 策略：先剥后显式加
+ * 1. 剥离一切"长得像凭据"的环境变量（命名模式匹配，见下）；
+ * 2. 叠加 task.env 中显式声明的条目（要传 key 必须在任务配置里写明，
+ *    不靠"顺便继承"）；
+ * 3. 剥离动作返回 strippedKeys 供审计日志使用（只记 key 名，不记值）。
+ *
+ * 与 workstation Pod 侧 env-sanitizer 的差异：Pod 环境由平台控制，凭据本就
+ * 是平台下发的，故 supervisor 只过滤内部标记；daemon 环境是用户的，必须
+ * 剥离凭据。
+ *
+ * 回退开关：WINMATRIX_DAEMON_ENV_PASSTHROUGH=true 时恢复旧的全量继承行为
+ * （迁移窗口用，默认 false）。
+ */
+/** 判断 key 是否为凭据形态（应剥离）。 */
+export declare function isCredentialEnvKey(key: string): boolean;
+/** 回退开关：恢复旧的全量继承行为（迁移窗口用）。 */
+export declare function isEnvPassthroughEnabled(baseEnv?: NodeJS.ProcessEnv): boolean;
+export interface SanitizedEnv {
+    env: Record<string, string>;
+    /** 被剥离的 key 名（审计用；绝不包含值）。 */
+    strippedKeys: string[];
+}
+/**
+ * 构建传给外部 CLI 子进程的清洁环境。
+ *
+ * @param overrides 任务显式声明的 env（task.env / launchSpec.env），最后叠加
+ * @param baseEnv   基础环境（默认 process.env，可注入测试）
+ */
+export declare function sanitizeTaskEnv(overrides?: Record<string, string | undefined>, baseEnv?: NodeJS.ProcessEnv): SanitizedEnv;
+//# sourceMappingURL=envSanitizer.d.ts.map

package/dist/utils/envSanitizer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"envSanitizer.d.ts","sourceRoot":"","sources":["../../src/utils/envSanitizer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AA6BH,2BAA2B;AAC3B,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAIvD;AAED,8BAA8B;AAC9B,wBAAgB,uBAAuB,CAAC,OAAO,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAEzF;AAED,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5B,6BAA6B;IAC7B,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAC7B,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,EAC9C,OAAO,GAAE,MAAM,CAAC,UAAwB,GACvC,YAAY,CA2Bd"}

package/dist/utils/envSanitizer.js

@@ -0,0 +1,94 @@
+/**
+ * 环境变量凭据剥离（harden-external-computer-daemon P1，design D3）。
+ *
+ * ## 背景
+ * daemon 跑在用户自有机器上，adapter 旧实现把 daemon 进程的全部环境变量
+ * （`{ ...process.env, ...(task.env ?? {}) }`）原样传给外部 CLI——用户环境里的
+ * ANTHROPIC_API_KEY、各类 SDK token、内部凭据全部被第三方进程继承。
+ *
+ * ## 策略：先剥后显式加
+ * 1. 剥离一切"长得像凭据"的环境变量（命名模式匹配，见下）；
+ * 2. 叠加 task.env 中显式声明的条目（要传 key 必须在任务配置里写明，
+ *    不靠"顺便继承"）；
+ * 3. 剥离动作返回 strippedKeys 供审计日志使用（只记 key 名，不记值）。
+ *
+ * 与 workstation Pod 侧 env-sanitizer 的差异：Pod 环境由平台控制，凭据本就
+ * 是平台下发的，故 supervisor 只过滤内部标记；daemon 环境是用户的，必须
+ * 剥离凭据。
+ *
+ * 回退开关：WINMATRIX_DAEMON_ENV_PASSTHROUGH=true 时恢复旧的全量继承行为
+ * （迁移窗口用，默认 false）。
+ */
+/** 凭据命名的通用模式：片段为 KEY/TOKEN/SECRET/PASSWORD/CREDENTIAL(S) 等。 */
+const CREDENTIAL_NAME_PATTERN = /(^|_)(API_?KEY|ACCESS_?KEY|SECRET_?KEY|TOKEN|SECRET|PASSWORD|PASSWD|CREDENTIALS?|AUTH_?KEY|PRIVATE_?KEY)(_|$)/i;
+/**
+ * 显式凭据前缀清单（模式之外的已知凭据变量，如 AWS_SESSION_TOKEN 已被
+ * 模式覆盖，这里补模式覆盖不到的厂商变量）。
+ */
+const CREDENTIAL_EXACT_OR_PREFIX = [
+    /^ANTHROPIC_/i,
+    /^OPENAI_/i,
+    /^CLAUDE_CODE_OAUTH/i,
+    /^GH_TOKEN$/i,
+    /^GITHUB_/i,
+    /^GITLAB_/i,
+    /^NPM_TOKEN/i,
+    /^DOCKER_AUTH/i,
+    /^KUBECONFIG$/i, // 指向 kubeconfig 文件路径，内含集群凭据
+    /^AWS_/i,
+    /^AZURE_/i,
+    /^GCLOUD_/i,
+    /^GOOGLE_APPLICATION_CREDENTIALS$/i,
+];
+/** 即使匹配凭据模式也必须保留的运行必需变量（当前为空，模式不会误伤 PATH/HOME 等）。 */
+const ALWAYS_KEEP = new Set([]);
+/** 判断 key 是否为凭据形态（应剥离）。 */
+export function isCredentialEnvKey(key) {
+    if (ALWAYS_KEEP.has(key))
+        return false;
+    if (CREDENTIAL_NAME_PATTERN.test(key))
+        return true;
+    return CREDENTIAL_EXACT_OR_PREFIX.some((pattern) => pattern.test(key));
+}
+/** 回退开关：恢复旧的全量继承行为（迁移窗口用）。 */
+export function isEnvPassthroughEnabled(baseEnv = process.env) {
+    return baseEnv.WINMATRIX_DAEMON_ENV_PASSTHROUGH?.trim() === 'true';
+}
+/**
+ * 构建传给外部 CLI 子进程的清洁环境。
+ *
+ * @param overrides 任务显式声明的 env（task.env / launchSpec.env），最后叠加
+ * @param baseEnv   基础环境（默认 process.env，可注入测试）
+ */
+export function sanitizeTaskEnv(overrides, baseEnv = process.env) {
+    if (isEnvPassthroughEnabled(baseEnv)) {
+        const env = {};
+        for (const [key, value] of Object.entries(baseEnv)) {
+            if (value !== undefined)
+                env[key] = value;
+        }
+        for (const [key, value] of Object.entries(overrides ?? {})) {
+            if (value !== undefined)
+                env[key] = value;
+        }
+        return { env, strippedKeys: [] };
+    }
+    const env = {};
+    const strippedKeys = [];
+    for (const [key, value] of Object.entries(baseEnv)) {
+        if (value === undefined)
+            continue;
+        if (isCredentialEnvKey(key)) {
+            strippedKeys.push(key);
+            continue;
+        }
+        env[key] = value;
+    }
+    // 显式声明的条目最后叠加（允许显式传凭据——这是"写明"的通道）
+    for (const [key, value] of Object.entries(overrides ?? {})) {
+        if (value !== undefined)
+            env[key] = value;
+    }
+    return { env, strippedKeys };
+}
+//# sourceMappingURL=envSanitizer.js.map

package/dist/utils/envSanitizer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"envSanitizer.js","sourceRoot":"","sources":["../../src/utils/envSanitizer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,+DAA+D;AAC/D,MAAM,uBAAuB,GAC3B,gHAAgH,CAAC;AAEnH;;;GAGG;AACH,MAAM,0BAA0B,GAAG;IACjC,cAAc;IACd,WAAW;IACX,qBAAqB;IACrB,aAAa;IACb,WAAW;IACX,WAAW;IACX,aAAa;IACb,eAAe;IACf,eAAe,EAAE,4BAA4B;IAC7C,QAAQ;IACR,UAAU;IACV,WAAW;IACX,mCAAmC;CACpC,CAAC;AAEF,qDAAqD;AACrD,MAAM,WAAW,GAAG,IAAI,GAAG,CAAS,EAAE,CAAC,CAAC;AAExC,2BAA2B;AAC3B,MAAM,UAAU,kBAAkB,CAAC,GAAW;IAC5C,IAAI,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACvC,IAAI,uBAAuB,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACnD,OAAO,0BAA0B,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AACzE,CAAC;AAED,8BAA8B;AAC9B,MAAM,UAAU,uBAAuB,CAAC,UAA6B,OAAO,CAAC,GAAG;IAC9E,OAAO,OAAO,CAAC,gCAAgC,EAAE,IAAI,EAAE,KAAK,MAAM,CAAC;AACrE,CAAC;AAQD;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAC7B,SAA8C,EAC9C,UAA6B,OAAO,CAAC,GAAG;IAExC,IAAI,uBAAuB,CAAC,OAAO,CAAC,EAAE,CAAC;QACrC,MAAM,GAAG,GAA2B,EAAE,CAAC;QACvC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACnD,IAAI,KAAK,KAAK,SAAS;gBAAE,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAC5C,CAAC;QACD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC,EAAE,CAAC;YAC3D,IAAI,KAAK,KAAK,SAAS;gBAAE,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAC5C,CAAC;QACD,OAAO,EAAE,GAAG,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;IACnC,CAAC;IAED,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACnD,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAClC,IAAI,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC;YAC5B,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACvB,SAAS;QACX,CAAC;QACD,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACnB,CAAC;IACD,kCAAkC;IAClC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC,EAAE,CAAC;QAC3D,IAAI,KAAK,KAAK,SAAS;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IAC5C,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC;AAC/B,CAAC"}

package/dist/utils/errorClassification.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Adapter 错误统一分类（harden-external-computer-daemon P2.2/D6）
+ *
+ * 各 adapter 在产出 error 事件时附带 code + retryable，上层（daemon / server）
+ * 不再靠 regex 猜 stderr 来决定重试/降级策略。regex 分类仅作为 adapter 未
+ * 显式给出 code 时的兜底。
+ */
+export declare const ADAPTER_ERROR_CODES: readonly ["timeout", "cancelled", "cli_crash", "auth_failed", "session_expired", "rate_limited", "network", "unknown"];
+export type AdapterErrorCode = (typeof ADAPTER_ERROR_CODES)[number];
+export interface ClassifiedAdapterError {
+    code: AdapterErrorCode;
+    retryable: boolean;
+}
+export interface ClassifyInput {
+    message?: string;
+    exitCode?: number | null;
+    signal?: string | null;
+    /** 取消信号已触发（AbortSignal.aborted）——优先判 cancelled */
+    aborted?: boolean;
+}
+/**
+ * 将一次失败的原始信号（消息 / 退出码 / 取消标记）归类为统一错误码。
+ * 分类优先级：aborted → 消息 pattern → 退出码 → unknown。
+ */
+export declare function classifyAdapterError(input: ClassifyInput): ClassifiedAdapterError;
+//# sourceMappingURL=errorClassification.d.ts.map

package/dist/utils/errorClassification.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errorClassification.d.ts","sourceRoot":"","sources":["../../src/utils/errorClassification.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,eAAO,MAAM,mBAAmB,wHAStB,CAAC;AAEX,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEpE,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,gBAAgB,CAAC;IACvB,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,kDAAkD;IAClD,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAcD;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,aAAa,GAAG,sBAAsB,CAkBjF"}

package/dist/utils/errorClassification.js

@@ -0,0 +1,52 @@
+/**
+ * Adapter 错误统一分类（harden-external-computer-daemon P2.2/D6）
+ *
+ * 各 adapter 在产出 error 事件时附带 code + retryable，上层（daemon / server）
+ * 不再靠 regex 猜 stderr 来决定重试/降级策略。regex 分类仅作为 adapter 未
+ * 显式给出 code 时的兜底。
+ */
+export const ADAPTER_ERROR_CODES = [
+    'timeout',
+    'cancelled',
+    'cli_crash',
+    'auth_failed',
+    'session_expired',
+    'rate_limited',
+    'network',
+    'unknown',
+];
+const PATTERNS = [
+    { code: 'session_expired', retryable: true, pattern: /session .*(not found|not exist|does not exist|expired|invalid)/i },
+    { code: 'session_expired', retryable: true, pattern: /(invalid|unknown|missing) .*session/i },
+    { code: 'session_expired', retryable: true, pattern: /resume .*(not found|expired|invalid)/i },
+    { code: 'session_expired', retryable: true, pattern: /thread .*(not found|not exist|does not exist|expired|invalid)/i },
+    { code: 'session_expired', retryable: true, pattern: /no conversation|conversation .*not found/i },
+    { code: 'auth_failed', retryable: false, pattern: /(401|403)\b|unauthorized|forbidden|authentication|invalid .*api.?key|api.?key .*invalid|permission denied/i },
+    { code: 'rate_limited', retryable: true, pattern: /\b429\b|rate.?limit|too many requests|quota exceeded|usage limit/i },
+    { code: 'network', retryable: true, pattern: /ECONNRESET|ECONNREFUSED|ETIMEDOUT|ENOTFOUND|EAI_AGAIN|ECONNABORTED|socket hang up|fetch failed|network error|connection refused/i },
+    { code: 'timeout', retryable: true, pattern: /\btimeout\b|timed out|deadline exceeded/i },
+];
+/**
+ * 将一次失败的原始信号（消息 / 退出码 / 取消标记）归类为统一错误码。
+ * 分类优先级：aborted → 消息 pattern → 退出码 → unknown。
+ */
+export function classifyAdapterError(input) {
+    if (input.aborted) {
+        return { code: 'cancelled', retryable: false };
+    }
+    const message = input.message ?? '';
+    for (const { code, retryable, pattern } of PATTERNS) {
+        if (pattern.test(message)) {
+            return { code, retryable };
+        }
+    }
+    if (input.signal) {
+        // 被信号杀死但未标记 aborted（如外部 OOM killer / 手动 kill）
+        return { code: 'cli_crash', retryable: false };
+    }
+    if (typeof input.exitCode === 'number' && input.exitCode !== 0) {
+        return { code: 'cli_crash', retryable: false };
+    }
+    return { code: 'unknown', retryable: false };
+}
+//# sourceMappingURL=errorClassification.js.map

package/dist/utils/errorClassification.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errorClassification.js","sourceRoot":"","sources":["../../src/utils/errorClassification.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,SAAS;IACT,WAAW;IACX,WAAW;IACX,aAAa;IACb,iBAAiB;IACjB,cAAc;IACd,SAAS;IACT,SAAS;CACD,CAAC;AAiBX,MAAM,QAAQ,GAA2E;IACvF,EAAE,IAAI,EAAE,iBAAiB,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,iEAAiE,EAAE;IACxH,EAAE,IAAI,EAAE,iBAAiB,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,sCAAsC,EAAE;IAC7F,EAAE,IAAI,EAAE,iBAAiB,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,uCAAuC,EAAE;IAC9F,EAAE,IAAI,EAAE,iBAAiB,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,gEAAgE,EAAE;IACvH,EAAE,IAAI,EAAE,iBAAiB,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,2CAA2C,EAAE;IAClG,EAAE,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,4GAA4G,EAAE;IAChK,EAAE,IAAI,EAAE,cAAc,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,mEAAmE,EAAE;IACvH,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,kIAAkI,EAAE;IACjL,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,0CAA0C,EAAE;CAC1F,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAoB;IACvD,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QAClB,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACjD,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC;IACpC,KAAK,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,QAAQ,EAAE,CAAC;QACpD,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1B,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QAC7B,CAAC;IACH,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACjB,8CAA8C;QAC9C,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACjD,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QAC/D,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACjD,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;AAC/C,CAAC"}

package/dist/utils/mcpUrlValidation.d.ts

@@ -0,0 +1,10 @@
+import { validateMcpUrl, mcpUrlFailureReasonToCode } from '@winmatrix/protocol';
+export { validateMcpUrl, mcpUrlFailureReasonToCode };
+/**
+ * 校验任务级 MCP Bridge URL；失败时抛出统一前缀错误。
+ *
+ * 错误消息格式：`TASK_BOUND_TOOL_PROXY_REQUIRED: MCP_BRIDGE_URL_<reason>`，
+ * 与现有 adapter（CodexAdapter / OpenClawAdapter）的 fail-fast 行为一致。
+ */
+export declare function validateMcpBridgeUrl(url: string | undefined): asserts url is string;
+//# sourceMappingURL=mcpUrlValidation.d.ts.map