agent-embassy 1.8.2 → 1.9.0

package/CHANGELOG.md

@@ -4,6 +4,14 @@ All notable changes to this project are documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 
+## [1.9.0] - 2026-08-17
+
+### Added
+
+- **SSH broker federation.** Declare peers in `<stateDir>/nodes.json` (each token is an OpenSSH Host alias; your SSH config owns keys, users, and ports — Embassy opens no listener and adds no auth system). Brokers exchange a strict three-method protocol (`initialize`, `catalog/get`, `handoff`) over `ssh <node> embassy peer-stdio`; remote routes appear as `alias@host` mirrors behind opaque references, consent edges have exactly one owner broker, and a handoff is `delivered` when the destination durably accepts it — after which the destination owns provider delivery. Anything lost after authorization settles ambiguous and is never replayed. Same-provider directions across different hosts are now routable; one-hop mesh only, no forwarding.
+- **Universal shell peer ingress.** Any harness that can run a shell can be a Embassy peer: `embassy register-peer` mints a token (only its hash is ever persisted), `embassy await` long-polls the peer's ordinary durable queue with flush-before-receipt settlement, and the alias+token principal (supplied via stdin per call) works even in harnesses that give every tool call a fresh shell. One new safe code: `PEER_NOT_AWAITING`.
+- SECURITY.md now documents the configured-SSH networking doctrine: user-owned peers only, local attestation unchanged, body-free network projections, ambiguity never replays.
+
 ## [1.8.2] - 2026-08-17
 
 ### Fixed

package/README.md

@@ -12,7 +12,7 @@
 [![License: MIT](https://img.shields.io/badge/license-MIT-blue.svg)](LICENSE)
 [![Node ≥ 20](https://img.shields.io/badge/node-%E2%89%A520-43853d)](package.json)
 
-Your [Claude Code](https://code.claude.com) sessions, [Codex](https://chatgpt.com/codex) desktop tasks, local DeepSeek Harness, and Grok Build agent do not share one routing surface. Embassy is a small local broker that gives all four providers named routes and explicit consent edges — no plugins, no API keys handled by Embassy, and no cloud relay.
+Your [Claude Code](https://code.claude.com) sessions, [Codex](https://chatgpt.com/codex) desktop tasks, local DeepSeek Harness, Grok Build agent, and shell harnesses do not share one routing surface. Embassy is a small local broker that gives all five providers named routes and explicit consent edges — no plugins, no API keys handled by Embassy, and no cloud relay.
 
 ```bash
 npm install -g agent-embassy
@@ -41,7 +41,7 @@ Embassy is built for one person, one macOS account, and agents you already trust
 
 ## Quickstart
 
-**Requirements:** macOS and Node.js 20+. Claude routes require peer protocol 1; Codex routes require Desktop configured to use its managed standalone App Server. DeepSeek is optional and launches from `DSH_HOME` (default `~/.dsh`) through the checkout's `demo:acp` script; Grok Build is optional and launches the release-pinned ACP package. The release-owned [support matrix](support/provider-support-matrix.json) records the exact artifacts and capabilities tested for all four providers; it is release evidence, never a runtime allowlist:
+**Requirements:** macOS and Node.js 20+. Claude routes require peer protocol 1; Codex routes require Desktop configured to use its managed standalone App Server. DeepSeek is optional and launches from `DSH_HOME` (default `~/.dsh`) through the checkout's `demo:acp` script; Grok Build is optional and launches the release-pinned ACP package. A shell peer needs only the local CLI and its one-time token. The release-owned [support matrix](support/provider-support-matrix.json) records the exact tested provider artifacts and capabilities; it is release evidence, never a runtime allowlist:
 
 ```bash
 ~/.codex/packages/standalone/current/codex app-server daemon start
@@ -88,6 +88,24 @@ You should see `"accepted":true`. The `codex-` prefix is required for Claude dis
 
 Registration records the exact inherited task identity and performs no App Server I/O. Every delivery opens a fresh attested local transport, initializes it, resumes that exact task with history excluded, and authorizes the body write once. App Server and Desktop restarts therefore do not require re-registration or re-anchoring; a current unavailable or unobservable task keeps the logical route and consent edge while the attempt reports an exact safe code. Embassy never retargets by alias or replays an ambiguously written body.
 
+### Optional: register a universal shell peer
+
+A local shell harness can join as a `peer-*` route without a plugin, stable shell, daemon, PID binding, token file, or Keychain entry:
+
+```bash
+embassy register-peer --alias peer-reviewer@this-mac
+```
+
+Registration prints the `peer_` token exactly once. Keep it in the agent's context and provide it on the first stdin line of every authenticated peer command; when a command also carries a message body, the remaining stdin bytes are the body. Never put the token in argv. For example, wait for inbound mail:
+
+```bash
+embassy await --alias peer-reviewer@this-mac --token-stdin <<'TOKEN'
+peer_<32-character-token>
+TOKEN
+```
+
+`await` performs bounded 30-second long polls until mail arrives or the caller stops it. Each registration may have one waiter and the broker permits 16 in total. Embassy writes the complete framed message to stdout, waits for stdout to flush, and only then acknowledges its private receipt. A missing receipt is `unconfirmed`; uncertainty after write authorization is `ambiguous`, and neither is replayed after restart. `register-peer --emit-env` is an optional convenience for harnesses that really do retain one stable shell; stdin is the universal path.
+
 ### 3. Select a Claude destination
 
 Pick one name from `availablePeers`:
@@ -185,7 +203,7 @@ The broker also publishes mode-0600 static snapshots as `gateway-dashboard.html`
   └───────────────────────────────────────────────────────────┘
 ```
 
-Embassy publishes each registered Codex task into Claude Code's live-session registry as its own `codex-*` peer. Claude sessions discover those tasks through `ListAgents`; Codex uses its managed App Server. DeepSeek and Grok Build are boot-registered ACP routes whose owned subprocess and one route-local session start lazily on first dispatch.
+Embassy publishes each registered Codex task into Claude Code's live-session registry as its own `codex-*` peer. Claude sessions discover those tasks through `ListAgents`; Codex uses its managed App Server. DeepSeek and Grok Build are boot-registered ACP routes whose owned subprocess and one route-local session start lazily on first dispatch. Universal shell peers use `peer-*` aliases and a pull mailbox authenticated by an alias plus one-time-minted token.
 
 A pair is one explicit permission edge between two named routes from different providers, bounded at 128 edges by default. Every edge is created explicitly with generic `pair --from/--to`; `select-claude` remains the one-Codex-task shorthand for a Claude↔Codex edge. Nothing is implied. Without an edge, a sender settles terminally as `SENDER_NOT_PAIRED`. `embassy serve --inbound open` is the explicit opt-out for supported native inbound senders.
 
@@ -234,6 +252,8 @@ Codex tasks can then be prompted with `$embassy-peer`; Claude Code discovers it
 | `wait-delivery` | either provider | Wait for that tracker to settle, up to the delivery deadline |
 | `untrack` | either provider | Close one active progress watch: `embassy untrack --conversation conv_<token>` |
 | `register-codex` / `unregister-codex` | Codex task | Advertise or retire that exact task; both take `--alias <codex-alias>`, and `embassy register-codex --alias codex-successor@this-mac --succeeds codex-reviewer@this-mac` hands the registration to a different task |
+| `register-peer` / `unregister-peer` | shell harness | Register or retire a `peer-*` route; registration emits its raw token once, while authenticated calls use `--token-stdin` (or the optional stable-shell env form) |
+| `await` | registered shell peer | Long-poll the peer mailbox in bounded 30-second iterations; one waiter per route, 16 globally, with acknowledgement only after stdout flush |
 | `pair` / `unpair` | endpoint participant | Add or remove one cross-provider edge by naming both ends: `embassy pair --from advisor@this-mac --to grok-main@this-mac`; the inherited caller must belong to the edge |
 | `select-claude` / `unselect-claude` | operator or Codex task | One-task shorthand for `pair`/`unpair`, taking `--alias <name@host>` or `--session <uuid>`: resolves the Codex end only when it is unambiguous (inherited or sole registered task), otherwise fails closed |
 | `send-to-claude` | registered Codex task | Send one bounded message to a paired Claude session: `--from <codex-alias> --to <claude-alias>`, body on stdin, optional `--expects-reply` and `--track [--idle-minutes <n>]` |

package/README.zh-CN.md

@@ -12,7 +12,7 @@
 [![License: MIT](https://img.shields.io/badge/license-MIT-blue.svg)](LICENSE)
 [![Node ≥ 20](https://img.shields.io/badge/node-%E2%89%A520-43853d)](package.json)
 
-你的 [Claude Code](https://code.claude.com) 会话、[Codex](https://chatgpt.com/codex) 桌面任务、本地 DeepSeek Harness 与 Grok Build 代理没有共同路由面。Embassy 是一个小型本地代理，为四种提供方提供具名路由与显式同意边——无需插件，Embassy 不处理 API 密钥，也无需云端中继。
+你的 [Claude Code](https://code.claude.com) 会话、[Codex](https://chatgpt.com/codex) 桌面任务、本地 DeepSeek Harness、Grok Build 代理与 shell harness 没有共同路由面。Embassy 是一个小型本地代理，为五种提供方提供具名路由与显式同意边——无需插件，Embassy 不处理 API 密钥，也无需云端中继。
 
 ```bash
 npm install -g agent-embassy
@@ -37,7 +37,7 @@ Embassy 专为单人、单一 macOS 账户以及你已信任以该用户身份
 
 ## 快速开始
 
-**前置要求：** macOS 与 Node.js 20+。Claude 路由要求对等协议 1；Codex 路由要求 Desktop 使用托管独立 App Server。DeepSeek 是可选提供方，通过 `DSH_HOME`（默认 `~/.dsh`）指向的本地 checkout 中 `demo:acp` 脚本启动；Grok Build 也是可选提供方，通过发布版固定的 ACP 包启动。发布版自有的[支持矩阵](support/provider-support-matrix.json)记录四种提供方已测试的精确构件与能力；它只是发布证据，绝不是运行时允许列表：
+**前置要求：** macOS 与 Node.js 20+。Claude 路由要求对等协议 1；Codex 路由要求 Desktop 使用托管独立 App Server。DeepSeek 是可选提供方，通过 `DSH_HOME`（默认 `~/.dsh`）指向的本地 checkout 中 `demo:acp` 脚本启动；Grok Build 也是可选提供方，通过发布版固定的 ACP 包启动。Shell 对等方只需要本地 CLI 与其仅铸造一次的令牌。发布版自有的[支持矩阵](support/provider-support-matrix.json)记录精确已测的提供方构件与能力；它只是发布证据，绝不是运行时允许列表：
 
 ```bash
 ~/.codex/packages/standalone/current/codex app-server daemon start
@@ -81,6 +81,24 @@ embassy register-codex --alias codex-reviewer@this-mac
 
 注册会记录精确的继承任务身份，并且不执行 App Server I/O。每次投递都会打开并验证新的本地传输，初始化后在排除历史的前提下恢复精确任务，并仅授权一次正文写入。因此 App Server、Desktop 与 `embassy serve` 重启都不需要重新注册或重新锚定；当前任务不可用或无法观测时，尝试会返回精确安全代码，而逻辑路由与同意边保持不变。Embassy 绝不会按别名改投其他任务，也不会重放写入结果不明确的正文。
 
+### 可选：注册通用 shell 对等方
+
+本地 shell harness 可以作为 `peer-*` 路由加入，无需插件、稳定 shell、守护进程、PID 绑定、令牌文件或 Keychain 条目：
+
+```bash
+embassy register-peer --alias peer-reviewer@this-mac
+```
+
+注册只打印一次 `peer_` 令牌。将它保留在代理上下文中，并在每个需要认证的 peer 命令的标准输入第一行提供；若命令还携带消息正文，则其余标准输入字节就是正文。绝不要把令牌放进 argv。例如，等待入站邮件：
+
+```bash
+embassy await --alias peer-reviewer@this-mac --token-stdin <<'TOKEN'
+peer_<32-character-token>
+TOKEN
+```
+
+`await` 会进行有界的 30 秒长轮询，直到收到邮件或调用方停止。每条注册路由只能有一个等待者，broker 全局最多允许 16 个。Embassy 将完整带框消息写入 stdout，等待 stdout 刷新完成，之后才确认其私有回执。缺失回执会结算为 `unconfirmed`；写入授权后的不确定性会结算为 `ambiguous`，两者在重启后都不会重放。`register-peer --emit-env` 只是为确实保留稳定 shell 的 harness 提供的可选便利；标准输入是通用路径。
+
 ### 3. 选择 Claude 目的地
 
 从 `availablePeers` 中选择一个名称：
@@ -158,7 +176,7 @@ Embassy 会在实际写入提供方之前，为双向路由消息添加一个由
   └───────────────────────────────────────────────────────────┘
 ```
 
-Embassy 将每个已注册的 Codex 任务以各自的 `codex-*` 对等方身份发布到 Claude Code 的实时会话注册表中。Claude 会话通过 `ListAgents` 发现这些任务；Codex 使用托管 App Server。DeepSeek 与 Grok Build 是启动时登记的 ACP 路由，其自有子进程与单个路由本地会话会在首次投递时惰性启动。
+Embassy 将每个已注册的 Codex 任务以各自的 `codex-*` 对等方身份发布到 Claude Code 的实时会话注册表中。Claude 会话通过 `ListAgents` 发现这些任务；Codex 使用托管 App Server。DeepSeek 与 Grok Build 是启动时登记的 ACP 路由，其自有子进程与单个路由本地会话会在首次投递时惰性启动。通用 shell 对等方使用 `peer-*` 别名与一个由别名加仅铸造一次的令牌认证的拉取邮箱。
 
 配对是来自不同提供方的两条具名路由之间的单一显式权限边，默认上限 128 条。每条边都通过通用的 `pair --from/--to` 显式创建；`select-claude` 保留为单 Codex 任务建立 Claude↔Codex 边的简写。一切都不会被隐式推断。没有边时，发送方以 `SENDER_NOT_PAIRED` 终局结算。`embassy serve --inbound open` 是针对受支持原生入站发送方的显式退出选项。
 
@@ -205,6 +223,8 @@ cp -R "$(npm root -g)/agent-embassy/skills/embassy-peer" ~/.claude/skills/
 | `wait-delivery` | 任一提供方 | 等待该跟踪器结算，直至投递截止时间 |
 | `untrack` | 任一提供方 | 关闭一个活跃的进度监视：`embassy untrack --conversation conv_<token>` |
 | `register-codex` / `unregister-codex` | Codex 任务 | 通告或注销该任务；两者都需要 `--alias <codex-alias>`，而 `embassy register-codex --alias codex-successor@this-mac --succeeds codex-reviewer@this-mac` 会将注册转交给另一个任务 |
+| `register-peer` / `unregister-peer` | shell harness | 注册或注销一条 `peer-*` 路由；注册只输出一次原始令牌，已认证调用使用 `--token-stdin`（也可选用稳定 shell 环境形式） |
+| `await` | 已注册 shell 对等方 | 以有界 30 秒迭代长轮询 peer 邮箱；每条路由一个等待者、全局 16 个，且只在 stdout 刷新后确认回执 |
 | `pair` / `unpair` | 端点参与方 | 显式指定两端来添加或移除一条跨提供方边：`embassy pair --from advisor@this-mac --to grok-main@this-mac`；继承调用方必须属于该边 |
 | `select-claude` / `unselect-claude` | 操作员或 Codex 任务 | `pair`/`unpair` 的单任务简写，接受 `--alias <name@host>` 或 `--session <uuid>`：仅在 Codex 端无歧义（继承标识或唯一已注册任务）时解析，否则以关闭状态失败 |
 | `send-to-claude` | 已注册的 Codex 任务 | 向已配对的 Claude 会话发送一条有界消息：`--from <codex-alias> --to <claude-alias>`，正文从标准输入读取，可选 `--expects-reply` 与 `--track [--idle-minutes <n>]` |

package/SECURITY.md

@@ -17,11 +17,13 @@ session or thread identifiers, or unredacted personal paths.
 
 ## Deployment boundary
 
-Embassy is personal, same-machine software for one macOS user. Run it only
-under an OS account that is yours alone and where you trust every process
-already running as that user. Do not expose its sockets or state directory on a
-network, host it as a service, or use it to share a Claude or Codex subscription
-between users.
+Embassy is personal software for one macOS user. Each broker remains local to
+one machine; an explicit private `nodes.json` may connect the user's own
+SSH-reachable machines through the user's existing OpenSSH configuration. Run
+every node only under an OS account that is yours alone and where you trust
+every process already running as that user. Do not expose Embassy sockets or
+state on a network, host it as a service, or use it to share a provider
+subscription between users.
 
 The broker is local; the agents are not. Embassy does not call a provider API,
 but a delivered body becomes model input in the receiving product and may be
@@ -120,6 +122,12 @@ silently expand Embassy's claimed boundary.
 
 ## Routing and consent
 
+- A universal shell peer explicitly registers one `peer-*` alias. Its principal
+  is that alias plus a `peer_` token minted and printed exactly once. The token
+  is supplied on stdin (or inherited only by a harness with a stable shell),
+  compared in constant time, and rechecked immediately before effects. This is
+  same-UID attribution, not authentication against other same-user software;
+  there is deliberately no PID binding, token file, Keychain entry, or daemon.
 - A Codex task must explicitly self-register with a `codex-*` alias before it
   can participate.
 - Codex-to-Claude delivery requires an explicit operator-created pair with a
@@ -167,7 +175,11 @@ broker.
 
 ## Process and protocol boundary
 
-- The v1 launcher is foreground, macOS-only, same-machine, and local-host-only.
+- The launcher is foreground and macOS-only. Provider attestation and the
+  control plane remain machine-local. Configured federation owns only a fixed
+  outbound `ssh ... embassy peer-stdio` subprocess; SSH supplies transport
+  authentication, encryption, and liveness, and Embassy opens no federation
+  listener.
 - Before provider setup, the launcher acquires one host-wide macOS advisory
   lease. If its lease helper exits or the lease is otherwise lost
   unexpectedly, Embassy shuts down rather than continuing without singleton
@@ -214,6 +226,11 @@ broker.
 - Queues, frames, bodies, callbacks, deadlines, deduplication,
   rate limits, and transient conversations are bounded. Ambiguous writes are
   never retried automatically.
+- A peer catalog contains only bounded, body-free local metadata. It never
+  exports imported rows, message or conversation tokens, native identifiers,
+  provider frames, sockets, paths, credentials, or raw diagnostics. Each
+  destination broker owns its durable queue; loss after a federated write is
+  UNKNOWN and is never replayed.
 - Raw-body classification and accounting happen before framing. In the
   untrusted body only, Embassy case-insensitively neutralizes boundary-shaped
   opening or closing copies of its reserved framing tags before composing the
@@ -276,6 +293,13 @@ a broker restart against its still-exact logical route and consent edge. An
 armed or accepted message at crash settles ambiguous or unconfirmed and is
 never replayed.
 
+For a shell peer, durable route ownership stores only
+`peer:<sha256(uid NUL alias NUL token)>`; the raw peer token and private mailbox
+receipts never enter state, logs, snapshots, dashboards, or routed frames.
+Pending waiters, acknowledgements, and the bounded exact-duplicate receipt
+tombstone are memory-only. A restart therefore cannot falsely confirm a
+stdout write whose acknowledgement was not observed.
+
 The full `conv_` token exposed to a CLI initiator or routed recipient travels
 only inside the accepted CLI result or transient provider payload. It is never
 persisted, journaled, logged, placed in a receipt, projected through public

package/dist/src/gateway/cli-copy.en.d.ts

@@ -1,6 +1,6 @@
 export declare const callerIdentityConflictHintEn = "both agent identities were inherited; the Codex App Server daemon may have been started inside an agent session. From a normal terminal, run: codex app-server daemon restart";
 export declare const cliCopyEn: {
-    readonly "help.usage": "Embassy — local messaging for Claude Code and Codex\n\nUsage:\n  embassy <command> [options] [--lang en|zh-CN]\n\nCommands:\n  serve [--inbound open] Run the socket-only broker (paired inbound by default)\n  health                 Check broker health\n  status                 Read the public status snapshot\n  doctor                 Diagnose Codex Desktop attachment\n  convert-state-v2-to-v3 Convert stopped-broker state after making a backup\n  refresh-dashboard      Refresh discovery and publish both static dashboards\n  dashboard --live [--port <n>]\n                         Open live status and bounded route consent\n  register-codex         Register or succeed a Codex task\n  unregister-codex       Unregister the current Codex task\n  select-claude          Select a discovered Claude session\n  unselect-claude        Clear the Claude selection\n  pair [--from <alias> --to <alias>] Add one cross-provider consent edge\n  unpair [--from <alias> --to <alias>] Remove one cross-provider consent edge\n  send-to-claude         Send stdin to the selected Claude route\n  send-to-codex          Send stdin to a registered Codex route\n  reply                  Reply with a conversation token\n  delivery-status        Read a delivery token\n  wait-delivery          Wait for terminal delivery status\n  untrack                Close one active progress watch\n\nOptions:\n  --lang en|zh-CN        Localize user-facing text\n  --port <n>             Live dashboard port, 1024–65535 (default 41961)\n  --version, -v          Print the version\n  --help, -h             Show this help\n";
+    readonly "help.usage": "Embassy — local messaging for Claude Code and Codex\n\nUsage:\n  embassy <command> [options] [--lang en|zh-CN]\n\nCommands:\n  serve [--inbound open] Run the socket-only broker (paired inbound by default)\n  health                 Check broker health\n  status                 Read the public status snapshot\n  doctor                 Diagnose Codex Desktop attachment\n  convert-state-v2-to-v3 Convert stopped-broker state after making a backup\n  refresh-dashboard      Refresh discovery and publish both static dashboards\n  dashboard --live [--port <n>]\n                         Open live status and bounded route consent\n  register-codex         Register or succeed a Codex task\n  unregister-codex       Unregister the current Codex task\n  register-peer --alias <peer-alias> [--token-stdin|--emit-env]\n                         Register a universal shell peer\n  unregister-peer --alias <peer-alias> [--token-stdin]\n                         Unregister a universal shell peer\n  await --alias <peer-alias> [--token-stdin]\n                         Wait for one peer message and acknowledge stdout\n  select-claude          Select a discovered Claude session\n  unselect-claude        Clear the Claude selection\n  pair [--from <alias> --to <alias>] Add one cross-provider consent edge\n  unpair [--from <alias> --to <alias>] Remove one cross-provider consent edge\n  send-to-claude         Send stdin to the selected Claude route\n  send-to-codex          Send stdin to a registered Codex route\n  reply                  Reply with a conversation token\n  delivery-status        Read a delivery token\n  wait-delivery          Wait for terminal delivery status\n  untrack                Close one active progress watch\n\nOptions:\n  --lang en|zh-CN        Localize user-facing text\n  --token-stdin          Read the peer token as the first LF-terminated stdin line\n  --emit-env             Print the first registration token as an export command\n  --port <n>             Live dashboard port, 1024–65535 (default 41961)\n  --version, -v          Print the version\n  --help, -h             Show this help\n";
     readonly "hint.dashboardLiveRequired": "dashboard requires --live; static files are published by serve and refresh-dashboard.";
     readonly "hint.dashboardPortInUse": "live dashboard port {port} is already in use; close the holding process or choose another with --port <n>.";
     readonly "hint.controlInvalidResponse": "client/broker version skew is likely; rebuild or repoint this client to the broker's Embassy installation, then retry.";

package/dist/src/gateway/cli-copy.en.js

@@ -16,6 +16,12 @@ Commands:
                          Open live status and bounded route consent
   register-codex         Register or succeed a Codex task
   unregister-codex       Unregister the current Codex task
+  register-peer --alias <peer-alias> [--token-stdin|--emit-env]
+                         Register a universal shell peer
+  unregister-peer --alias <peer-alias> [--token-stdin]
+                         Unregister a universal shell peer
+  await --alias <peer-alias> [--token-stdin]
+                         Wait for one peer message and acknowledge stdout
   select-claude          Select a discovered Claude session
   unselect-claude        Clear the Claude selection
   pair [--from <alias> --to <alias>] Add one cross-provider consent edge
@@ -29,6 +35,8 @@ Commands:
 
 Options:
   --lang en|zh-CN        Localize user-facing text
+  --token-stdin          Read the peer token as the first LF-terminated stdin line
+  --emit-env             Print the first registration token as an export command
   --port <n>             Live dashboard port, 1024–65535 (default 41961)
   --version, -v          Print the version
   --help, -h             Show this help

package/dist/src/gateway/cli-copy.en.js.map

@@ -1 +1 @@
-{"version":3,"file":"cli-copy.en.js","sourceRoot":"","sources":["../../../src/gateway/cli-copy.en.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,4BAA4B,GACvC,+KAA+K,CAAC;AAElL,MAAM,CAAC,MAAM,SAAS,GAAG;IACvB,YAAY,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgCf;IACC,4BAA4B,EAC1B,uFAAuF;IACzF,yBAAyB,EACvB,4GAA4G;IAC9G,6BAA6B,EAC3B,wHAAwH;IAC1H,sBAAsB,EACpB,4GAA4G;IAC9G,iCAAiC,EAC/B,kJAAkJ;IACpJ,aAAa,EAAE,mBAAmB;IAClC,gBAAgB,EAAE,+BAA+B;IACjD,mBAAmB,EAAE,sBAAsB;IAC3C,iBAAiB,EAAE,gDAAgD;IACnE,eAAe,EAAE,iBAAiB;IAClC,cAAc,EACZ,iJAAiJ;IACnJ,oBAAoB,EAClB,+EAA+E;IACjF,uBAAuB,EACrB,iHAAiH;CACzF,CAAC"}
+{"version":3,"file":"cli-copy.en.js","sourceRoot":"","sources":["../../../src/gateway/cli-copy.en.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,4BAA4B,GACvC,+KAA+K,CAAC;AAElL,MAAM,CAAC,MAAM,SAAS,GAAG;IACvB,YAAY,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAwCf;IACC,4BAA4B,EAC1B,uFAAuF;IACzF,yBAAyB,EACvB,4GAA4G;IAC9G,6BAA6B,EAC3B,wHAAwH;IAC1H,sBAAsB,EACpB,4GAA4G;IAC9G,iCAAiC,EAC/B,kJAAkJ;IACpJ,aAAa,EAAE,mBAAmB;IAClC,gBAAgB,EAAE,+BAA+B;IACjD,mBAAmB,EAAE,sBAAsB;IAC3C,iBAAiB,EAAE,gDAAgD;IACnE,eAAe,EAAE,iBAAiB;IAClC,cAAc,EACZ,iJAAiJ;IACnJ,oBAAoB,EAClB,+EAA+E;IACjF,uBAAuB,EACrB,iHAAiH;CACzF,CAAC"}

package/dist/src/gateway/cli-copy.zh-CN.d.ts

@@ -1,6 +1,6 @@
 export declare const callerIdentityConflictHintZhCn = "\u540C\u65F6\u7EE7\u627F\u4E86\u4E24\u79CD\u4EE3\u7406\u8EAB\u4EFD\uFF1BCodex App Server \u5B88\u62A4\u8FDB\u7A0B\u53EF\u80FD\u662F\u5728\u4EE3\u7406\u4F1A\u8BDD\u5185\u542F\u52A8\u7684\u3002\u8BF7\u5728\u666E\u901A\u7EC8\u7AEF\u4E2D\u8FD0\u884C\uFF1Acodex app-server daemon restart";
 export declare const cliCopyZhCn: {
-    readonly "help.usage": "Embassy — Claude Code 与 Codex 的本地消息通道\n\n用法：\n  embassy <command> [options] [--lang en|zh-CN]\n\n命令：\n  serve [--inbound open] 在前台运行仅使用套接字的代理（默认配对入站）\n  health                 检查代理健康状态\n  status                 读取公开状态快照\n  doctor                 诊断 Codex 桌面应用连接状态\n  convert-state-v2-to-v3 备份后转换已停止代理的状态\n  refresh-dashboard      刷新发现结果并发布两份静态仪表盘\n  dashboard --live [--port <n>]\n                         打开实时状态与有限路由同意操作\n  register-codex         注册或继任 Codex 任务\n  unregister-codex       注销当前 Codex 任务\n  select-claude          选择已发现的 Claude 会话\n  unselect-claude        清除 Claude 选择\n  pair [--from <别名> --to <别名>] 添加一条跨提供商同意边\n  unpair [--from <别名> --to <别名>] 移除一条跨提供商同意边\n  send-to-claude         将标准输入发送到所选 Claude 路由\n  send-to-codex          将标准输入发送到已注册 Codex 路由\n  reply                  使用会话令牌回复\n  delivery-status        读取投递令牌状态\n  wait-delivery          等待终结投递状态\n  untrack                关闭一个活跃的进度监视\n\n选项：\n  --lang en|zh-CN        本地化面向用户的文本\n  --port <n>             实时仪表盘端口，1024–65535（默认 41961）\n  --version, -v          输出版本\n  --help, -h             显示此帮助\n";
+    readonly "help.usage": "Embassy — Claude Code 与 Codex 的本地消息通道\n\n用法：\n  embassy <command> [options] [--lang en|zh-CN]\n\n命令：\n  serve [--inbound open] 在前台运行仅使用套接字的代理（默认配对入站）\n  health                 检查代理健康状态\n  status                 读取公开状态快照\n  doctor                 诊断 Codex 桌面应用连接状态\n  convert-state-v2-to-v3 备份后转换已停止代理的状态\n  refresh-dashboard      刷新发现结果并发布两份静态仪表盘\n  dashboard --live [--port <n>]\n                         打开实时状态与有限路由同意操作\n  register-codex         注册或继任 Codex 任务\n  unregister-codex       注销当前 Codex 任务\n  register-peer --alias <对等别名> [--token-stdin|--emit-env]\n                         注册通用 shell 对等方\n  unregister-peer --alias <对等别名> [--token-stdin]\n                         注销通用 shell 对等方\n  await --alias <对等别名> [--token-stdin]\n                         等待一条对等消息并在标准输出后确认\n  select-claude          选择已发现的 Claude 会话\n  unselect-claude        清除 Claude 选择\n  pair [--from <别名> --to <别名>] 添加一条跨提供商同意边\n  unpair [--from <别名> --to <别名>] 移除一条跨提供商同意边\n  send-to-claude         将标准输入发送到所选 Claude 路由\n  send-to-codex          将标准输入发送到已注册 Codex 路由\n  reply                  使用会话令牌回复\n  delivery-status        读取投递令牌状态\n  wait-delivery          等待终结投递状态\n  untrack                关闭一个活跃的进度监视\n\n选项：\n  --lang en|zh-CN        本地化面向用户的文本\n  --token-stdin          从标准输入首个 LF 结尾行读取对等令牌\n  --emit-env             将首次注册令牌输出为 export 命令\n  --port <n>             实时仪表盘端口，1024–65535（默认 41961）\n  --version, -v          输出版本\n  --help, -h             显示此帮助\n";
     readonly "hint.dashboardLiveRequired": "dashboard 需要 --live；静态文件由 serve 和 refresh-dashboard 发布。";
     readonly "hint.dashboardPortInUse": "实时仪表盘端口 {port} 已被占用；请关闭占用进程，或使用 --port <n> 选择其他端口。";
     readonly "hint.controlInvalidResponse": "客户端与网关进程的版本可能不一致；请重新构建客户端，或将其重新指向网关进程所使用的 Embassy 安装，然后重试。";

package/dist/src/gateway/cli-copy.zh-CN.js

@@ -16,6 +16,12 @@ export const cliCopyZhCn = {
                          打开实时状态与有限路由同意操作
   register-codex         注册或继任 Codex 任务
   unregister-codex       注销当前 Codex 任务
+  register-peer --alias <对等别名> [--token-stdin|--emit-env]
+                         注册通用 shell 对等方
+  unregister-peer --alias <对等别名> [--token-stdin]
+                         注销通用 shell 对等方
+  await --alias <对等别名> [--token-stdin]
+                         等待一条对等消息并在标准输出后确认
   select-claude          选择已发现的 Claude 会话
   unselect-claude        清除 Claude 选择
   pair [--from <别名> --to <别名>] 添加一条跨提供商同意边
@@ -29,6 +35,8 @@ export const cliCopyZhCn = {
 
 选项：
   --lang en|zh-CN        本地化面向用户的文本
+  --token-stdin          从标准输入首个 LF 结尾行读取对等令牌
+  --emit-env             将首次注册令牌输出为 export 命令
   --port <n>             实时仪表盘端口，1024–65535（默认 41961）
   --version, -v          输出版本
   --help, -h             显示此帮助

package/dist/src/gateway/cli-copy.zh-CN.js.map

@@ -1 +1 @@
-{"version":3,"file":"cli-copy.zh-CN.js","sourceRoot":"","sources":["../../../src/gateway/cli-copy.zh-CN.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,8BAA8B,GACzC,yFAAyF,CAAC;AAE5F,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,YAAY,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgCf;IACC,4BAA4B,EAC1B,yDAAyD;IAC3D,yBAAyB,EACvB,oDAAoD;IACtD,6BAA6B,EAC3B,4DAA4D;IAC9D,sBAAsB,EACpB,kDAAkD;IACpD,iCAAiC,EAC/B,mFAAmF;IACrF,aAAa,EAAE,QAAQ;IACvB,gBAAgB,EAAE,WAAW;IAC7B,mBAAmB,EAAE,QAAQ;IAC7B,iBAAiB,EAAE,eAAe;IAClC,eAAe,EAAE,OAAO;IACxB,cAAc,EACZ,wDAAwD;IAC1D,oBAAoB,EAAE,8BAA8B;IACpD,uBAAuB,EACrB,oDAAoD;CAC5B,CAAC"}
+{"version":3,"file":"cli-copy.zh-CN.js","sourceRoot":"","sources":["../../../src/gateway/cli-copy.zh-CN.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,8BAA8B,GACzC,yFAAyF,CAAC;AAE5F,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,YAAY,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAwCf;IACC,4BAA4B,EAC1B,yDAAyD;IAC3D,yBAAyB,EACvB,oDAAoD;IACtD,6BAA6B,EAC3B,4DAA4D;IAC9D,sBAAsB,EACpB,kDAAkD;IACpD,iCAAiC,EAC/B,mFAAmF;IACrF,aAAa,EAAE,QAAQ;IACvB,gBAAgB,EAAE,WAAW;IAC7B,mBAAmB,EAAE,QAAQ;IAC7B,iBAAiB,EAAE,eAAe;IAClC,eAAe,EAAE,OAAO;IACxB,cAAc,EACZ,wDAAwD;IAC1D,oBAAoB,EAAE,8BAA8B;IACpD,uBAAuB,EACrB,oDAAoD;CAC5B,CAAC"}

package/dist/src/gateway/cli.d.ts

@@ -1,11 +1,13 @@
 #!/usr/bin/env node
 import { type GatewayControlMethod, type GatewayControlResponse, type SendGatewayControlRequestOptions } from "./control.js";
 import { type GatewayConfig } from "./config.js";
+import { type GatewayNodeInventory } from "./federation-nodes.js";
 import { type LiveDashboardCommandOutcome, type LiveDashboardCommandOptions } from "./live-dashboard-command.js";
 import { type GatewayServerOptions } from "./server.js";
+import { runPeerStdio, type PeerStdioSession } from "./peer-stdio.js";
 import { type GatewayStateV2ToV3Result } from "./state-v2-to-v3.js";
-export declare const EMBASSY_VERSION = "1.8.2";
-export declare const gatewayCliCommands: readonly ["serve", "health", "status", "doctor", "convert-state-v2-to-v3", "delivery-status", "wait-delivery", "untrack", "refresh-dashboard", "dashboard", "register-codex", "unregister-codex", "select-claude", "unselect-claude", "pair", "unpair", "send-to-claude", "send-to-codex", "reply"];
+export declare const EMBASSY_VERSION = "1.9.0";
+export declare const gatewayCliCommands: readonly ["serve", "health", "status", "doctor", "convert-state-v2-to-v3", "delivery-status", "wait-delivery", "untrack", "refresh-dashboard", "dashboard", "register-codex", "unregister-codex", "select-claude", "unselect-claude", "pair", "unpair", "send-to-claude", "send-to-codex", "reply", "register-peer", "unregister-peer", "await", "peer-stdio"];
 export type GatewayCliCommand = (typeof gatewayCliCommands)[number];
 export declare const gatewayCliExitCodes: Readonly<{
     readonly ok: 0;
@@ -16,7 +18,7 @@ export declare const gatewayCliExitCodes: Readonly<{
     readonly failure: 6;
 }>;
 type Writable = {
-    write(chunk: string): unknown;
+    write(chunk: string, callback?: (error?: Error | null) => void): unknown;
 };
 type GatewayControlSender = <M extends GatewayControlMethod>(options: SendGatewayControlRequestOptions<M>) => Promise<GatewayControlResponse<M>>;
 type GatewayServerRunner = (options: GatewayServerOptions) => Promise<void>;
@@ -24,12 +26,14 @@ type LiveDashboardRunner = (options: LiveDashboardCommandOptions) => Promise<Liv
 type GatewayStateConverter = (options: Readonly<{
     stateDir: string;
 }>) => Promise<GatewayStateV2ToV3Result>;
+type PeerStdioRunner = (options: Parameters<typeof runPeerStdio>[0]) => PeerStdioSession;
 export type GatewayCliDependencies = {
     env?: NodeJS.ProcessEnv;
     stdin?: AsyncIterable<unknown>;
     stdout?: Writable;
     stderr?: Writable;
     loadConfig?: (env: NodeJS.ProcessEnv) => GatewayConfig;
+    loadNodeInventory?: (stateDir: string) => Promise<GatewayNodeInventory>;
     sendRequest?: GatewayControlSender;
     runServer?: GatewayServerRunner;
     runLiveDashboard?: LiveDashboardRunner;
@@ -37,6 +41,7 @@ export type GatewayCliDependencies = {
     serverSignal?: AbortSignal;
     liveDashboardSignal?: AbortSignal;
     validateControlSocket?: (stateDir: string, socketPath: string) => Promise<void>;
+    runPeerStdio?: PeerStdioRunner;
     now?: () => number;
     delay?: (milliseconds: number) => Promise<void>;
 };