ai-fly 0.5.0-alpha.1 → 0.6.0-alpha.1

package/dist/ai-fly.js

@@ -66,7 +66,7 @@ async function dispatch(command, rest) {
 	const lazy = (load) => {
 		return (argv, ctx) => load().then((m) => m.run([...argv], ctx));
 	};
-	return match(command).with("serve", () => lazy(() => import("./serve-B7CRdGoy.mjs"))(rest)).with("app", async () => {
+	return match(command).with("serve", () => lazy(() => import("./serve-DJ8id2Qo.mjs"))(rest)).with("app", async () => {
 		const { join, dirname } = await import("node:path");
 		const { fileURLToPath } = await import("node:url");
 		const { spawn } = await import("node:child_process");
@@ -81,7 +81,7 @@ async function dispatch(command, rest) {
 		return await new Promise((resolve) => {
 			child.once("exit", (c) => resolve(c ?? 0));
 		});
-	}).with("daemon", () => lazy(() => import("./daemon-Oh-SQUeo.mjs"))(rest)).with("presets", () => lazy(() => import("./presets-BwkVV7E2.mjs"))(rest)).with("hooks", () => lazy(() => import("./hooks-BztmB61b.mjs"))(rest)).with("secret", () => lazy(() => import("./secret-BrfkuRkP.mjs"))(rest)).with("settings", async () => (await import("./settings-15j9BB6j.mjs")).runAsSettings(rest, {})).with("relay", async () => (await import("./settings-15j9BB6j.mjs")).runAsRelay(rest, {})).with("test", () => lazy(() => import("./test-ChqaPwHA.mjs"))(rest)).with("service", () => lazy(() => import("./service-P-vz61tx.mjs"))(rest)).with("group", () => lazy(() => import("./group-Dh64zhKn.mjs"))(rest)).with("share", () => lazy(() => import("./share-BogH4NQJ.mjs"))(rest)).with("revoke", () => lazy(() => import("./revoke-CQdhajpu.mjs"))(rest)).with("join", () => lazy(() => import("./join-CLD4fdCf.mjs"))(rest)).with("import", () => lazy(() => import("./import-DpW4ignw.mjs"))(rest)).with("run", () => lazy(() => import("./run-nJ_AEsMr.mjs"))(rest)).with("ports", () => lazy(() => import("./ports-DmBKgLSi.mjs"))(rest)).with("forget", () => lazy(() => import("./forget-DGJwF3Gy.mjs"))(rest)).with("services", () => lazy(() => import("./services-Deh7Gxwa.mjs"))(rest)).with("key", () => {
+	}).with("daemon", () => lazy(() => import("./daemon-D5J50r7U.mjs"))(rest)).with("presets", () => lazy(() => import("./presets-BwkVV7E2.mjs"))(rest)).with("hooks", () => lazy(() => import("./hooks-BztmB61b.mjs"))(rest)).with("secret", () => lazy(() => import("./secret-BrfkuRkP.mjs"))(rest)).with("settings", async () => (await import("./settings-15j9BB6j.mjs")).runAsSettings(rest, {})).with("relay", async () => (await import("./settings-15j9BB6j.mjs")).runAsRelay(rest, {})).with("test", () => lazy(() => import("./test-ChqaPwHA.mjs"))(rest)).with("service", () => lazy(() => import("./service-P-vz61tx.mjs"))(rest)).with("group", () => lazy(() => import("./group-Dh64zhKn.mjs"))(rest)).with("share", () => lazy(() => import("./share-mozydAfj.mjs"))(rest)).with("revoke", () => lazy(() => import("./revoke-DMx9hZUH.mjs"))(rest)).with("join", () => lazy(() => import("./join-CLD4fdCf.mjs"))(rest)).with("import", () => lazy(() => import("./import-DN8bNBJU.mjs"))(rest)).with("run", () => lazy(() => import("./run-C-CxjlLu.mjs"))(rest)).with("ports", () => lazy(() => import("./ports-DmBKgLSi.mjs"))(rest)).with("forget", () => lazy(() => import("./forget-DGJwF3Gy.mjs"))(rest)).with("services", () => lazy(() => import("./services-Deh7Gxwa.mjs"))(rest)).with("key", () => {
 		if (rest[0] === "add") return lazy(() => import("./key-JLJewbw9.mjs"))(rest);
 		return lazy(() => import("./key-Cpw-HzT4.mjs"))(rest);
 	}).with("status", async () => {
@@ -90,8 +90,8 @@ async function dispatch(command, rest) {
 		const wantConsumer = scope === "consumer" || scope !== "provider" && consumersRootExists();
 		const argv = scope === "provider" || scope === "consumer" ? tail : rest;
 		let code = 0;
-		if (wantProvider) code = Math.max(code, await lazy(() => import("./status-VCGexKPW.mjs"))(argv));
-		if (wantConsumer) code = Math.max(code, await lazy(() => import("./status-COzqwi-v.mjs"))(argv));
+		if (wantProvider) code = Math.max(code, await lazy(() => import("./status-DsFpGrzC.mjs"))(argv));
+		if (wantConsumer) code = Math.max(code, await lazy(() => import("./status-BlvQvxGW.mjs"))(argv));
 		if (!wantProvider && !wantConsumer) process.stdout.write("nothing to report: no provider storage and no imported consumers\n");
 		return code;
 	}).otherwise(() => {

package/dist/app/main.js

@@ -3775,6 +3775,7 @@ async function forwardHttp(ctx, plan, t) {
 	/** js-backend-fetch 路径：连接期探测 + fetch（fetchImpl 测试注入缝保留于此）。 */
 	const nativeResponse = async () => {
 		const probe = ctx.probeConnect ?? defaultProbeConnect;
+		if (ctrl.signal.aborted || ctx.signal.aborted) throw new ProbeFailedError();
 		try {
 			await probe(plan.url, t.connectMs);
 		} catch {
@@ -3921,6 +3922,8 @@ async function forwardHttp(ctx, plan, t) {
 }
 //#endregion
 //#region src/provider/engine.ts
+/** per-peer 并发授权会话容量（LRU 逐出——内核暂无会话终结通知的防泄漏上限）。 */
+const SESSION_AUTH_CAP = 32;
 /** 错误码 → 载体响应（shared 映射表；null status（本地中止族）→ 504 语义）。 */
 function errorCarrierResponse(code, message) {
 	const m = ERROR_HTTP_MAPPING[code] ?? {
@@ -4041,23 +4044,34 @@ var ProviderEngine = class {
 	async refreshSession(ps) {
 		if (!ps.authed()) return;
 		const dir = this.directory();
-		const { valid } = evaluateKeyring(ps.keyring, dir);
-		if (valid.length === 0) {
-			ps.keyring = [];
-			ps.grants = [];
+		let anyAlive = false;
+		for (const sessionId of [...ps.sessionAuthIds()]) {
+			const sa = ps.sessionAuthOf(sessionId);
+			if (sa === void 0) continue;
+			const { valid } = evaluateKeyring(sa.keyring, dir);
+			if (valid.length === 0) {
+				ps.dropSessionAuth(sessionId);
+				continue;
+			}
+			anyAlive = true;
+			const header = buildAuthOk(valid, dir, { refresh: true });
+			const json = JSON.stringify(header);
+			if (json === sa.lastView) {
+				sa.grants = valid;
+				continue;
+			}
+			this.catalogSeq++;
+			sa.grants = valid;
+			sa.lastView = json;
+			ps.notifyWatch(sessionId, header);
+		}
+		if (!anyAlive) {
 			this.keyIndex.untrack(ps);
 			ps.notifyWatchInvalidated();
 			this.fabric.disconnect(ps.peerId).catch(() => void 0);
 			return;
 		}
-		const header = buildAuthOk(valid, dir, { refresh: true });
-		const json = JSON.stringify(header);
-		if (json === ps.lastView) return;
-		this.catalogSeq++;
-		ps.grants = valid;
-		ps.lastView = json;
 		this.keyIndex.track(ps);
-		ps.notifyWatch(header);
 	}
 	async addPeer(peerId) {
 		if (this.stopped) return;
@@ -4104,12 +4118,14 @@ var ProviderPeerServer = class {
 	disposed = false;
 	active = /* @__PURE__ */ new Map();
 	acquired = /* @__PURE__ */ new Map();
-	/** 最近一次 AUTH 呈交的钥环原文（仅内存；撤钥后重算用；MUST NOT 进日志）。 */
-	keyring = [];
-	grants = [];
-	lastView = "";
-	/** watch 长轮询等待者（目录变更时唤醒；授权失效以 "invalid" 唤醒 → 401）。 */
-	watchWaiters = /* @__PURE__ */ new Set();
+	/**
+	* session_id → 授权态（LRU；上限防泄漏——内核暂无「会话终结」通知，旧
+	* session 条目由容量逐出。恢复轮 sessionId 稳定，逐出只发生在远超活跃
+	* 会话数的场景）。
+	*/
+	sessionAuths = /* @__PURE__ */ new Map();
+	/** watch 长轮询等待者（目录变更按各自 session 视图唤醒；失效 → 401）。 */
+	watchWaiters = /* @__PURE__ */ new Map();
 	constructor(engine, peerId, fabric) {
 		this.engine = engine;
 		this.peerId = peerId;
@@ -4118,31 +4134,85 @@ var ProviderPeerServer = class {
 	async start(serveHttpImpl) {
 		this.server = await serveHttpImpl(this.fabric, this.peerId, (req) => this.handle(req));
 	}
+	/** 任一会话持有有效授权（peer 级观测）。 */
 	authed() {
-		return this.grants.length > 0;
+		for (const sa of this.sessionAuths.values()) if (sa.grants.length > 0) return true;
+		return false;
+	}
+	/** 该会话的授权态（无 → undefined：未 AUTH/已失效/被逐出）。访问即提升
+	* LRU 位次（Map 重插——访问序逐出，非仅插入序）。 */
+	sessionAuthOf(sessionId) {
+		const sa = this.sessionAuths.get(sessionId);
+		if (sa !== void 0) {
+			this.sessionAuths.delete(sessionId);
+			this.sessionAuths.set(sessionId, sa);
+		}
+		return sa;
+	}
+	/** 会话 id 快照（engine.refreshSession 迭代用）。 */
+	sessionAuthIds() {
+		return [...this.sessionAuths.keys()];
+	}
+	/** 摘除会话授权态（refresh 裁剪路径——全钥失效的会话；watch 随之唤醒 401）。 */
+	dropSessionAuth(sessionId) {
+		this.sessionAuths.delete(sessionId);
+		this.invalidateWatch(sessionId);
+	}
+	/** 写入该会话授权态（LRU 容量逐出最旧）。 */
+	putSessionAuth(sessionId, keyring, grants) {
+		this.sessionAuths.delete(sessionId);
+		this.sessionAuths.set(sessionId, {
+			keyring,
+			grants,
+			lastView: ""
+		});
+		while (this.sessionAuths.size > SESSION_AUTH_CAP) {
+			const oldest = this.sessionAuths.keys().next().value;
+			if (oldest === void 0) break;
+			this.sessionAuths.delete(oldest);
+			this.invalidateWatch(oldest);
+		}
 	}
 	get keys() {
-		return this.keyring;
+		const out = /* @__PURE__ */ new Set();
+		for (const sa of this.sessionAuths.values()) for (const k of sa.keyring) out.add(k);
+		return [...out];
 	}
 	get keyIds() {
-		return new Set(this.grants.map((g) => g.keyId));
+		const out = /* @__PURE__ */ new Set();
+		for (const sa of this.sessionAuths.values()) for (const g of sa.grants) out.add(g.keyId);
+		return out;
 	}
 	/** 撤键/目录变更后的刷新：唤醒 watch 长轮询（全量视图；refresh 语义不变）。 */
 	async pushRefresh(header) {
-		this.lastView = JSON.stringify(header);
-		this.notifyWatch(header);
+		this.notifyWatchAll(header);
 	}
 	disconnect(reason) {
 		this.disposeLocal(reason);
 	}
-	/** 唤醒全部 watch 等待者（视图变更）。 */
-	notifyWatch(view) {
-		for (const wake of [...this.watchWaiters]) wake(view);
+	/** 会话授权失效（drop/无效 AUTH/逐出）：唤醒该会话全部 watch 等待者以
+	* 401 收敛（5.2-P2——此前删集合不唤醒，在途长轮询干等到 20s 超时）。 */
+	invalidateWatch(sessionId) {
+		const waiters = this.watchWaiters.get(sessionId);
+		if (waiters === void 0) return;
+		for (const wake of [...waiters]) wake("invalid");
+		this.watchWaiters.delete(sessionId);
+	}
+	/** 唤醒指定会话的 watch 等待者（该会话自己的刷新视图）。 */
+	notifyWatch(sessionId, view) {
+		const waiters = this.watchWaiters.get(sessionId);
+		if (waiters === void 0) return;
+		for (const wake of [...waiters]) wake(view);
+		this.watchWaiters.delete(sessionId);
+	}
+	/** 唤醒全部 watch 等待者（键重加等 peer 级推送：并集视图，各会话自行重同步）。 */
+	notifyWatchAll(view) {
+		for (const waiters of [...this.watchWaiters.values()]) for (const wake of [...waiters]) wake(view);
 		this.watchWaiters.clear();
 	}
 	/** 授权失效：唤醒等待者以 401 收敛（watch 循环退出，由 active 转换重启）。 */
 	notifyWatchInvalidated() {
-		for (const wake of [...this.watchWaiters]) wake("invalid");
+		for (const waiters of [...this.watchWaiters.values()]) for (const wake of [...waiters]) wake("invalid");
 		this.watchWaiters.clear();
 	}
 	/** 本地善后（撤钥/引擎关闭）：中止全部在途、释放限额、停 HTTP 引擎、断 fabric 会话。 */
@@ -4163,6 +4233,8 @@ var ProviderPeerServer = class {
 		let result;
 		if (barePath === "/_aifly/auth" && req.method === "POST") result = await this.handleAuth(req);
 		else if (barePath === "/_aifly/catalog-watch" && req.method === "GET") result = await this.handleWatch(req);
+		else if (barePath === "/_aifly/auth" || barePath === "/_aifly/catalog-watch") result = errorCarrierResponse(ERROR_CODE.forbidden_method, `method not allowed on control endpoint: ${req.method} ${barePath}`);
+		else if (barePath.startsWith("/_aifly/")) result = errorCarrierResponse(ERROR_CODE.unauthorized, "unauthorized");
 		else result = await this.handleForward(req);
 		return result;
 	}
@@ -4177,7 +4249,7 @@ var ProviderPeerServer = class {
 		});
 		return out;
 	}
-	/** AUTH（重复 AUTH 以最后一次为准：钥环变更 = 重授权）。 */
+	/** AUTH（重复 AUTH 以最后一次为准：钥环变更 = 重授权；授权按 session_id 隔离）。 */
 	async handleAuth(req) {
 		let parsedBody;
 		try {
@@ -4190,18 +4262,16 @@ var ProviderPeerServer = class {
 		if (!parsed.success) return errorCarrierResponse(ERROR_CODE.protocol_error, "auth body schema rejected");
 		const decision = handleAuthFrame(parsed.data, this.engine.directory());
 		if (decision.kind === "err") {
-			this.keyring = [];
-			this.grants = [];
-			this.engine.keySessionIndex().untrack(this);
+			this.sessionAuths.delete(req.sessionId);
+			this.invalidateWatch(req.sessionId);
+			if (!this.authed()) this.engine.keySessionIndex().untrack(this);
 			return {
 				status: 403,
 				headers: this.jsonHeaders(),
 				bodyChunks: [Buffer.from(JSON.stringify(decision.header))]
 			};
 		}
-		this.keyring = decision.keys;
-		this.grants = decision.valid;
-		this.lastView = JSON.stringify(decision.header);
+		this.putSessionAuth(req.sessionId, decision.keys, decision.valid);
 		this.engine.keySessionIndex().track(this);
 		return {
 			status: 200,
@@ -4211,17 +4281,18 @@ var ProviderPeerServer = class {
 	}
 	/** 目录刷新长轮询：since 落后即时回；未变更挂起至视图变更（200）或超时（204）。 */
 	async handleWatch(req) {
-		if (!this.authed()) return errorCarrierResponse(ERROR_CODE.unauthorized, "session is not authenticated");
+		const sa = this.sessionAuthOf(req.sessionId);
+		if (sa === void 0 || sa.grants.length === 0) return errorCarrierResponse(ERROR_CODE.unauthorized, "session is not authenticated");
 		const query = req.path.split("?", 2)[1] ?? "";
 		const sinceRaw = Number(new URLSearchParams(query).get("since") ?? "0");
 		const since = Number.isFinite(sinceRaw) && sinceRaw >= 0 ? Math.floor(sinceRaw) : 0;
 		const current = this.engine.currentCatalogSeq();
 		if (since < current) {
 			const dir = this.engine.directory();
-			const { valid } = evaluateKeyring(this.keyring, dir);
+			const { valid } = evaluateKeyring(sa.keyring, dir);
 			if (valid.length === 0) return errorCarrierResponse(ERROR_CODE.unauthorized, "no valid key remains");
 			const header = buildAuthOk(valid, dir, { refresh: true });
-			this.grants = valid;
+			sa.grants = valid;
 			return {
 				status: 200,
 				headers: this.jsonHeaders({ "x-aifly-catalog-seq": String(current) }),
@@ -4230,16 +4301,27 @@ var ProviderPeerServer = class {
 		}
 		const changed = await new Promise((resolve) => {
 			const timer = setTimeout(() => {
-				this.watchWaiters.delete(wake);
+				let waiters = this.watchWaiters.get(req.sessionId);
+				waiters?.delete(wake);
+				if (waiters !== void 0 && waiters.size === 0) this.watchWaiters.delete(req.sessionId);
 				resolve(null);
 			}, CATALOG_WATCH_TIMEOUT_MS);
 			const wake = (view) => {
 				clearTimeout(timer);
 				resolve(view);
 			};
-			this.watchWaiters.add(wake);
+			let waiters = this.watchWaiters.get(req.sessionId);
+			if (waiters === void 0) {
+				waiters = /* @__PURE__ */ new Set();
+				this.watchWaiters.set(req.sessionId, waiters);
+			}
+			waiters.add(wake);
 		});
 		if (changed === "invalid") return errorCarrierResponse(ERROR_CODE.unauthorized, "authorization invalidated");
+		if (changed !== null) {
+			const saAfter = this.sessionAuthOf(req.sessionId);
+			if (saAfter === void 0 || saAfter.grants.length === 0) return errorCarrierResponse(ERROR_CODE.unauthorized, "session is not authenticated");
+		}
 		if (changed === null) return {
 			status: 204,
 			headers: [{
@@ -4254,13 +4336,15 @@ var ProviderPeerServer = class {
 		};
 	}
 	async handleForward(req) {
-		if (!this.authed()) return errorCarrierResponse(ERROR_CODE.unauthorized, "session is not authenticated");
+		const sa = this.sessionAuthOf(req.sessionId);
+		if (sa === void 0 || sa.grants.length === 0) return errorCarrierResponse(ERROR_CODE.unauthorized, "session is not authenticated");
+		if (req.signal.aborted) return errorCarrierResponse(ERROR_CODE.aborted, "request cancelled before dispatch");
 		const serviceHeader = req.headers.find((h) => h.name === AIFLY_SERVICE_HEADER)?.value;
 		if (serviceHeader === void 0) return errorCarrierResponse(ERROR_CODE.protocol_error, `missing ${AIFLY_SERVICE_HEADER} header`);
 		const method = req.method.toUpperCase();
 		if (!HTTP_METHODS.includes(method)) return errorCarrierResponse(ERROR_CODE.forbidden_method, `http method not allowed: ${method}`);
 		const service = this.engine.store.getService(serviceHeader);
-		const grant = service === void 0 ? void 0 : this.grants.find((g) => this.engine.groupHasService(g.group, serviceHeader));
+		const grant = service === void 0 ? void 0 : sa.grants.find((g) => this.engine.groupHasService(g.group, serviceHeader));
 		if (service === void 0 || service.enabled === false || grant === void 0) return errorCarrierResponse(ERROR_CODE.unknown_service, "service not available");
 		const acquired = this.engine.limits.acquire(grant.keyId, grant.group);
 		if (!acquired.ok) return errorCarrierResponse(acquired.code, acquired.code === "rate_limited" ? "group concurrency limit reached" : "daily request quota reached");
@@ -4299,6 +4383,11 @@ var ProviderPeerServer = class {
 		};
 		const outcome = new CarrierOutcome((status, headers) => req.respondStreaming(status, headers));
 		const ctrl = new AbortController();
+		const abortUpstream = () => {
+			ctrl.abort(new UpstreamAbortError(ERROR_CODE.aborted, true));
+		};
+		req.signal.addEventListener("abort", abortUpstream, { once: true });
+		if (req.signal.aborted) abortUpstream();
 		const act = {
 			ctrl,
 			keyId: grant.keyId,
@@ -5144,6 +5233,10 @@ function removeKeyring(root, ref) {
 		}
 	};
 }
+//#endregion
+//#region src/consumer/providers.ts
+/** fetchHttp head 等待期取消键序号（per 进程单调；abortKey 注册表关联）。 */
+let fetchAbortKeySeq = 0;
 /**
 * full jitter：delay = random() * min(cap, base * 2^attempt)。
 * attempt 从 0 起（首次重连窗口 [0, base]）；封顶后窗口恒为 [0, cap]。
@@ -5314,6 +5407,7 @@ var ProviderConnection = class {
 		});
 		let aborted = false;
 		let tunnel = null;
+		const abortKey = ++fetchAbortKeySeq;
 		(async () => {
 			try {
 				const resp = await session.fetchHttp({
@@ -5321,7 +5415,8 @@ var ProviderConnection = class {
 					path: input.path,
 					headers,
 					...input.body.length > 0 ? { body: [input.body] } : {},
-					...input.upgrade ? { keepOpen: true } : {}
+					...input.upgrade ? { keepOpen: true } : {},
+					abortKey
 				});
 				if (aborted) {
 					try {
@@ -5398,6 +5493,9 @@ var ProviderConnection = class {
 			id,
 			abort: () => {
 				aborted = true;
+				try {
+					session.abortFetch?.(abortKey);
+				} catch {}
 				try {
 					tunnel?.abort?.();
 				} catch {}

package/dist/{daemon-Oh-SQUeo.mjs → daemon-D5J50r7U.mjs}

@@ -99,7 +99,7 @@ async function start(startArgv, home) {
 	process.on("exit", () => {
 		clearPid(home);
 	});
-	const { run: serveRun } = await import("./serve-B7CRdGoy.mjs");
+	const { run: serveRun } = await import("./serve-DJ8id2Qo.mjs");
 	return serveRun([...startArgv], { homedir: home });
 }
 /** 后台 pid（活性核验；陈旧 pidfile 就地清理返回 null）。 */

package/dist/{import-DpW4ignw.mjs → import-DN8bNBJU.mjs}

@@ -3,7 +3,7 @@ import { n as parseArgv } from "./args-CSxXW9eD.mjs";
 import { n as consumersRoot, s as listKeyrings } from "./store-Bu4I1rNj.mjs";
 import { a as ringsForRun, i as printListeners, n as ctxHomedir, o as waitForSignals, r as ctxOut, t as createSdkFabricFactory } from "./common-9KRvrs5f.mjs";
 import { a as importLink, i as formatLinkPreview, n as decodeShareLink, r as formatKeyringSummary } from "./join-D5QUz8mh.mjs";
-import { n as createFabricSessionFactory, t as startEngine } from "./runtime-D9rSByOO.mjs";
+import { n as createFabricSessionFactory, t as startEngine } from "./runtime-DKmrkfNT.mjs";
 import { homedir } from "node:os";
 //#region src/cli/commands/consumer/import.ts
 async function run(argv, ctx = {}) {

package/dist/{revoke-CQdhajpu.mjs → revoke-DMx9hZUH.mjs}

@@ -2,7 +2,7 @@ import { n as UsageError, r as reportCliError } from "./errors-BGtxPkM7.mjs";
 import { n as parseArgv } from "./args-CSxXW9eD.mjs";
 import { t as resolveHttpProxy } from "./proxy-D7VMUVEg.mjs";
 import { d as resolvedRelayUrls, f as str, u as resolveDataDir } from "./common-DqSyhR6F.mjs";
-import { t as openExistingFabric } from "./serve-BlWkrYrl.mjs";
+import { t as openExistingFabric } from "./serve-BB6-4Ixd.mjs";
 import { homedir } from "node:os";
 //#region src/cli/commands/provider/revoke.ts
 const SPEC = {

package/dist/{run-nJ_AEsMr.mjs → run-C-CxjlLu.mjs}

@@ -2,7 +2,7 @@ import { n as UsageError, r as reportCliError, t as CliError } from "./errors-BG
 import { n as parseArgv } from "./args-CSxXW9eD.mjs";
 import { c as loadKeyring, n as consumersRoot, o as keyringDir, s as listKeyrings } from "./store-Bu4I1rNj.mjs";
 import { a as ringsForRun, i as printListeners, n as ctxHomedir, o as waitForSignals, r as ctxOut, t as createSdkFabricFactory } from "./common-9KRvrs5f.mjs";
-import { n as createFabricSessionFactory, t as startEngine } from "./runtime-D9rSByOO.mjs";
+import { n as createFabricSessionFactory, t as startEngine } from "./runtime-DKmrkfNT.mjs";
 import { a as killHard, c as terminateGracefully, i as isAlive, l as writeLastStart, n as daemonDir, o as readLastStart, r as ensureDaemonDir, s as readPid, t as clearPid, u as writePid } from "./daemon-state-CYkiW3SA.mjs";
 import { openSync, readFileSync, watch } from "node:fs";
 import { resolve } from "node:path";

package/dist/{runtime-D9rSByOO.mjs → runtime-DKmrkfNT.mjs}

@@ -5,6 +5,9 @@ import { n as desiredPortFor, r as listenWithFallback, t as LOOPBACK_HOST } from
 import { Hono } from "hono";
 import { createAdaptorServer } from "@hono/node-server";
 import { WebSocketServer } from "ws";
+//#region src/consumer/providers.ts
+/** fetchHttp head 等待期取消键序号（per 进程单调；abortKey 注册表关联）。 */
+let fetchAbortKeySeq = 0;
 /**
 * full jitter：delay = random() * min(cap, base * 2^attempt)。
 * attempt 从 0 起（首次重连窗口 [0, base]）；封顶后窗口恒为 [0, cap]。
@@ -175,6 +178,7 @@ var ProviderConnection = class {
 		});
 		let aborted = false;
 		let tunnel = null;
+		const abortKey = ++fetchAbortKeySeq;
 		(async () => {
 			try {
 				const resp = await session.fetchHttp({
@@ -182,7 +186,8 @@ var ProviderConnection = class {
 					path: input.path,
 					headers,
 					...input.body.length > 0 ? { body: [input.body] } : {},
-					...input.upgrade ? { keepOpen: true } : {}
+					...input.upgrade ? { keepOpen: true } : {},
+					abortKey
 				});
 				if (aborted) {
 					try {
@@ -259,6 +264,9 @@ var ProviderConnection = class {
 			id,
 			abort: () => {
 				aborted = true;
+				try {
+					session.abortFetch?.(abortKey);
+				} catch {}
 				try {
 					tunnel?.abort?.();
 				} catch {}

package/dist/{serve-BlWkrYrl.mjs → serve-BB6-4Ixd.mjs}

@@ -825,6 +825,7 @@ async function forwardHttp(ctx, plan, t) {
 	/** js-backend-fetch 路径：连接期探测 + fetch（fetchImpl 测试注入缝保留于此）。 */
 	const nativeResponse = async () => {
 		const probe = ctx.probeConnect ?? defaultProbeConnect;
+		if (ctrl.signal.aborted || ctx.signal.aborted) throw new ProbeFailedError();
 		try {
 			await probe(plan.url, t.connectMs);
 		} catch {
@@ -971,6 +972,8 @@ async function forwardHttp(ctx, plan, t) {
 }
 //#endregion
 //#region src/provider/engine.ts
+/** per-peer 并发授权会话容量（LRU 逐出——内核暂无会话终结通知的防泄漏上限）。 */
+const SESSION_AUTH_CAP = 32;
 /** 错误码 → 载体响应（shared 映射表；null status（本地中止族）→ 504 语义）。 */
 function errorCarrierResponse(code, message) {
 	const m = ERROR_HTTP_MAPPING[code] ?? {
@@ -1091,23 +1094,34 @@ var ProviderEngine = class {
 	async refreshSession(ps) {
 		if (!ps.authed()) return;
 		const dir = this.directory();
-		const { valid } = evaluateKeyring(ps.keyring, dir);
-		if (valid.length === 0) {
-			ps.keyring = [];
-			ps.grants = [];
+		let anyAlive = false;
+		for (const sessionId of [...ps.sessionAuthIds()]) {
+			const sa = ps.sessionAuthOf(sessionId);
+			if (sa === void 0) continue;
+			const { valid } = evaluateKeyring(sa.keyring, dir);
+			if (valid.length === 0) {
+				ps.dropSessionAuth(sessionId);
+				continue;
+			}
+			anyAlive = true;
+			const header = buildAuthOk(valid, dir, { refresh: true });
+			const json = JSON.stringify(header);
+			if (json === sa.lastView) {
+				sa.grants = valid;
+				continue;
+			}
+			this.catalogSeq++;
+			sa.grants = valid;
+			sa.lastView = json;
+			ps.notifyWatch(sessionId, header);
+		}
+		if (!anyAlive) {
 			this.keyIndex.untrack(ps);
 			ps.notifyWatchInvalidated();
 			this.fabric.disconnect(ps.peerId).catch(() => void 0);
 			return;
 		}
-		const header = buildAuthOk(valid, dir, { refresh: true });
-		const json = JSON.stringify(header);
-		if (json === ps.lastView) return;
-		this.catalogSeq++;
-		ps.grants = valid;
-		ps.lastView = json;
 		this.keyIndex.track(ps);
-		ps.notifyWatch(header);
 	}
 	async addPeer(peerId) {
 		if (this.stopped) return;
@@ -1154,12 +1168,14 @@ var ProviderPeerServer = class {
 	disposed = false;
 	active = /* @__PURE__ */ new Map();
 	acquired = /* @__PURE__ */ new Map();
-	/** 最近一次 AUTH 呈交的钥环原文（仅内存；撤钥后重算用；MUST NOT 进日志）。 */
-	keyring = [];
-	grants = [];
-	lastView = "";
-	/** watch 长轮询等待者（目录变更时唤醒；授权失效以 "invalid" 唤醒 → 401）。 */
-	watchWaiters = /* @__PURE__ */ new Set();
+	/**
+	* session_id → 授权态（LRU；上限防泄漏——内核暂无「会话终结」通知，旧
+	* session 条目由容量逐出。恢复轮 sessionId 稳定，逐出只发生在远超活跃
+	* 会话数的场景）。
+	*/
+	sessionAuths = /* @__PURE__ */ new Map();
+	/** watch 长轮询等待者（目录变更按各自 session 视图唤醒；失效 → 401）。 */
+	watchWaiters = /* @__PURE__ */ new Map();
 	constructor(engine, peerId, fabric) {
 		this.engine = engine;
 		this.peerId = peerId;
@@ -1168,31 +1184,85 @@ var ProviderPeerServer = class {
 	async start(serveHttpImpl) {
 		this.server = await serveHttpImpl(this.fabric, this.peerId, (req) => this.handle(req));
 	}
+	/** 任一会话持有有效授权（peer 级观测）。 */
 	authed() {
-		return this.grants.length > 0;
+		for (const sa of this.sessionAuths.values()) if (sa.grants.length > 0) return true;
+		return false;
+	}
+	/** 该会话的授权态（无 → undefined：未 AUTH/已失效/被逐出）。访问即提升
+	* LRU 位次（Map 重插——访问序逐出，非仅插入序）。 */
+	sessionAuthOf(sessionId) {
+		const sa = this.sessionAuths.get(sessionId);
+		if (sa !== void 0) {
+			this.sessionAuths.delete(sessionId);
+			this.sessionAuths.set(sessionId, sa);
+		}
+		return sa;
+	}
+	/** 会话 id 快照（engine.refreshSession 迭代用）。 */
+	sessionAuthIds() {
+		return [...this.sessionAuths.keys()];
+	}
+	/** 摘除会话授权态（refresh 裁剪路径——全钥失效的会话；watch 随之唤醒 401）。 */
+	dropSessionAuth(sessionId) {
+		this.sessionAuths.delete(sessionId);
+		this.invalidateWatch(sessionId);
+	}
+	/** 写入该会话授权态（LRU 容量逐出最旧）。 */
+	putSessionAuth(sessionId, keyring, grants) {
+		this.sessionAuths.delete(sessionId);
+		this.sessionAuths.set(sessionId, {
+			keyring,
+			grants,
+			lastView: ""
+		});
+		while (this.sessionAuths.size > SESSION_AUTH_CAP) {
+			const oldest = this.sessionAuths.keys().next().value;
+			if (oldest === void 0) break;
+			this.sessionAuths.delete(oldest);
+			this.invalidateWatch(oldest);
+		}
 	}
 	get keys() {
-		return this.keyring;
+		const out = /* @__PURE__ */ new Set();
+		for (const sa of this.sessionAuths.values()) for (const k of sa.keyring) out.add(k);
+		return [...out];
 	}
 	get keyIds() {
-		return new Set(this.grants.map((g) => g.keyId));
+		const out = /* @__PURE__ */ new Set();
+		for (const sa of this.sessionAuths.values()) for (const g of sa.grants) out.add(g.keyId);
+		return out;
 	}
 	/** 撤键/目录变更后的刷新：唤醒 watch 长轮询（全量视图；refresh 语义不变）。 */
 	async pushRefresh(header) {
-		this.lastView = JSON.stringify(header);
-		this.notifyWatch(header);
+		this.notifyWatchAll(header);
 	}
 	disconnect(reason) {
 		this.disposeLocal(reason);
 	}
-	/** 唤醒全部 watch 等待者（视图变更）。 */
-	notifyWatch(view) {
-		for (const wake of [...this.watchWaiters]) wake(view);
+	/** 会话授权失效（drop/无效 AUTH/逐出）：唤醒该会话全部 watch 等待者以
+	* 401 收敛（5.2-P2——此前删集合不唤醒，在途长轮询干等到 20s 超时）。 */
+	invalidateWatch(sessionId) {
+		const waiters = this.watchWaiters.get(sessionId);
+		if (waiters === void 0) return;
+		for (const wake of [...waiters]) wake("invalid");
+		this.watchWaiters.delete(sessionId);
+	}
+	/** 唤醒指定会话的 watch 等待者（该会话自己的刷新视图）。 */
+	notifyWatch(sessionId, view) {
+		const waiters = this.watchWaiters.get(sessionId);
+		if (waiters === void 0) return;
+		for (const wake of [...waiters]) wake(view);
+		this.watchWaiters.delete(sessionId);
+	}
+	/** 唤醒全部 watch 等待者（键重加等 peer 级推送：并集视图，各会话自行重同步）。 */
+	notifyWatchAll(view) {
+		for (const waiters of [...this.watchWaiters.values()]) for (const wake of [...waiters]) wake(view);
 		this.watchWaiters.clear();
 	}
 	/** 授权失效：唤醒等待者以 401 收敛（watch 循环退出，由 active 转换重启）。 */
 	notifyWatchInvalidated() {
-		for (const wake of [...this.watchWaiters]) wake("invalid");
+		for (const waiters of [...this.watchWaiters.values()]) for (const wake of [...waiters]) wake("invalid");
 		this.watchWaiters.clear();
 	}
 	/** 本地善后（撤钥/引擎关闭）：中止全部在途、释放限额、停 HTTP 引擎、断 fabric 会话。 */
@@ -1213,6 +1283,8 @@ var ProviderPeerServer = class {
 		let result;
 		if (barePath === "/_aifly/auth" && req.method === "POST") result = await this.handleAuth(req);
 		else if (barePath === "/_aifly/catalog-watch" && req.method === "GET") result = await this.handleWatch(req);
+		else if (barePath === "/_aifly/auth" || barePath === "/_aifly/catalog-watch") result = errorCarrierResponse(ERROR_CODE.forbidden_method, `method not allowed on control endpoint: ${req.method} ${barePath}`);
+		else if (barePath.startsWith("/_aifly/")) result = errorCarrierResponse(ERROR_CODE.unauthorized, "unauthorized");
 		else result = await this.handleForward(req);
 		return result;
 	}
@@ -1227,7 +1299,7 @@ var ProviderPeerServer = class {
 		});
 		return out;
 	}
-	/** AUTH（重复 AUTH 以最后一次为准：钥环变更 = 重授权）。 */
+	/** AUTH（重复 AUTH 以最后一次为准：钥环变更 = 重授权；授权按 session_id 隔离）。 */
 	async handleAuth(req) {
 		let parsedBody;
 		try {
@@ -1240,18 +1312,16 @@ var ProviderPeerServer = class {
 		if (!parsed.success) return errorCarrierResponse(ERROR_CODE.protocol_error, "auth body schema rejected");
 		const decision = handleAuthFrame(parsed.data, this.engine.directory());
 		if (decision.kind === "err") {
-			this.keyring = [];
-			this.grants = [];
-			this.engine.keySessionIndex().untrack(this);
+			this.sessionAuths.delete(req.sessionId);
+			this.invalidateWatch(req.sessionId);
+			if (!this.authed()) this.engine.keySessionIndex().untrack(this);
 			return {
 				status: 403,
 				headers: this.jsonHeaders(),
 				bodyChunks: [Buffer.from(JSON.stringify(decision.header))]
 			};
 		}
-		this.keyring = decision.keys;
-		this.grants = decision.valid;
-		this.lastView = JSON.stringify(decision.header);
+		this.putSessionAuth(req.sessionId, decision.keys, decision.valid);
 		this.engine.keySessionIndex().track(this);
 		return {
 			status: 200,
@@ -1261,17 +1331,18 @@ var ProviderPeerServer = class {
 	}
 	/** 目录刷新长轮询：since 落后即时回；未变更挂起至视图变更（200）或超时（204）。 */
 	async handleWatch(req) {
-		if (!this.authed()) return errorCarrierResponse(ERROR_CODE.unauthorized, "session is not authenticated");
+		const sa = this.sessionAuthOf(req.sessionId);
+		if (sa === void 0 || sa.grants.length === 0) return errorCarrierResponse(ERROR_CODE.unauthorized, "session is not authenticated");
 		const query = req.path.split("?", 2)[1] ?? "";
 		const sinceRaw = Number(new URLSearchParams(query).get("since") ?? "0");
 		const since = Number.isFinite(sinceRaw) && sinceRaw >= 0 ? Math.floor(sinceRaw) : 0;
 		const current = this.engine.currentCatalogSeq();
 		if (since < current) {
 			const dir = this.engine.directory();
-			const { valid } = evaluateKeyring(this.keyring, dir);
+			const { valid } = evaluateKeyring(sa.keyring, dir);
 			if (valid.length === 0) return errorCarrierResponse(ERROR_CODE.unauthorized, "no valid key remains");
 			const header = buildAuthOk(valid, dir, { refresh: true });
-			this.grants = valid;
+			sa.grants = valid;
 			return {
 				status: 200,
 				headers: this.jsonHeaders({ "x-aifly-catalog-seq": String(current) }),
@@ -1280,16 +1351,27 @@ var ProviderPeerServer = class {
 		}
 		const changed = await new Promise((resolve) => {
 			const timer = setTimeout(() => {
-				this.watchWaiters.delete(wake);
+				let waiters = this.watchWaiters.get(req.sessionId);
+				waiters?.delete(wake);
+				if (waiters !== void 0 && waiters.size === 0) this.watchWaiters.delete(req.sessionId);
 				resolve(null);
 			}, CATALOG_WATCH_TIMEOUT_MS);
 			const wake = (view) => {
 				clearTimeout(timer);
 				resolve(view);
 			};
-			this.watchWaiters.add(wake);
+			let waiters = this.watchWaiters.get(req.sessionId);
+			if (waiters === void 0) {
+				waiters = /* @__PURE__ */ new Set();
+				this.watchWaiters.set(req.sessionId, waiters);
+			}
+			waiters.add(wake);
 		});
 		if (changed === "invalid") return errorCarrierResponse(ERROR_CODE.unauthorized, "authorization invalidated");
+		if (changed !== null) {
+			const saAfter = this.sessionAuthOf(req.sessionId);
+			if (saAfter === void 0 || saAfter.grants.length === 0) return errorCarrierResponse(ERROR_CODE.unauthorized, "session is not authenticated");
+		}
 		if (changed === null) return {
 			status: 204,
 			headers: [{
@@ -1304,13 +1386,15 @@ var ProviderPeerServer = class {
 		};
 	}
 	async handleForward(req) {
-		if (!this.authed()) return errorCarrierResponse(ERROR_CODE.unauthorized, "session is not authenticated");
+		const sa = this.sessionAuthOf(req.sessionId);
+		if (sa === void 0 || sa.grants.length === 0) return errorCarrierResponse(ERROR_CODE.unauthorized, "session is not authenticated");
+		if (req.signal.aborted) return errorCarrierResponse(ERROR_CODE.aborted, "request cancelled before dispatch");
 		const serviceHeader = req.headers.find((h) => h.name === AIFLY_SERVICE_HEADER)?.value;
 		if (serviceHeader === void 0) return errorCarrierResponse(ERROR_CODE.protocol_error, `missing ${AIFLY_SERVICE_HEADER} header`);
 		const method = req.method.toUpperCase();
 		if (!HTTP_METHODS.includes(method)) return errorCarrierResponse(ERROR_CODE.forbidden_method, `http method not allowed: ${method}`);
 		const service = this.engine.store.getService(serviceHeader);
-		const grant = service === void 0 ? void 0 : this.grants.find((g) => this.engine.groupHasService(g.group, serviceHeader));
+		const grant = service === void 0 ? void 0 : sa.grants.find((g) => this.engine.groupHasService(g.group, serviceHeader));
 		if (service === void 0 || service.enabled === false || grant === void 0) return errorCarrierResponse(ERROR_CODE.unknown_service, "service not available");
 		const acquired = this.engine.limits.acquire(grant.keyId, grant.group);
 		if (!acquired.ok) return errorCarrierResponse(acquired.code, acquired.code === "rate_limited" ? "group concurrency limit reached" : "daily request quota reached");
@@ -1349,6 +1433,11 @@ var ProviderPeerServer = class {
 		};
 		const outcome = new CarrierOutcome((status, headers) => req.respondStreaming(status, headers));
 		const ctrl = new AbortController();
+		const abortUpstream = () => {
+			ctrl.abort(new UpstreamAbortError(ERROR_CODE.aborted, true));
+		};
+		req.signal.addEventListener("abort", abortUpstream, { once: true });
+		if (req.signal.aborted) abortUpstream();
 		const act = {
 			ctrl,
 			keyId: grant.keyId,

package/dist/{serve-B7CRdGoy.mjs → serve-DJ8id2Qo.mjs}

@@ -2,7 +2,7 @@ import { n as UsageError, r as reportCliError } from "./errors-BGtxPkM7.mjs";
 import { n as parseArgv } from "./args-CSxXW9eD.mjs";
 import { t as resolveHttpProxy } from "./proxy-D7VMUVEg.mjs";
 import { d as resolvedRelayUrls, f as str, u as resolveDataDir } from "./common-DqSyhR6F.mjs";
-import { n as startProviderDaemon } from "./serve-BlWkrYrl.mjs";
+import { n as startProviderDaemon } from "./serve-BB6-4Ixd.mjs";
 import { homedir } from "node:os";
 //#region src/cli/commands/provider/serve.ts
 const SPEC = {

package/dist/{share-BogH4NQJ.mjs → share-mozydAfj.mjs}

@@ -4,7 +4,7 @@ import { m as SERVICE_ENTRY_SCHEMA } from "./rpc-contract-BAz-C8fx.mjs";
 import { t as resolveHttpProxy } from "./proxy-D7VMUVEg.mjs";
 import { n as StoreError } from "./store-CmHtxOCd.mjs";
 import { d as resolvedRelayUrls, f as str, i as openStore, l as requireString, u as resolveDataDir } from "./common-DqSyhR6F.mjs";
-import { i as buildServiceEntry, t as openExistingFabric } from "./serve-BlWkrYrl.mjs";
+import { i as buildServiceEntry, t as openExistingFabric } from "./serve-BB6-4Ixd.mjs";
 import { homedir } from "node:os";
 import { z } from "zod";
 //#region src/provider/link.ts

package/dist/{status-COzqwi-v.mjs → status-BlvQvxGW.mjs}

@@ -1,7 +1,7 @@
 import { n as parseArgv } from "./args-CSxXW9eD.mjs";
 import { n as consumersRoot, s as listKeyrings } from "./store-Bu4I1rNj.mjs";
 import { a as ringsForRun, n as ctxHomedir, r as ctxOut, t as createSdkFabricFactory } from "./common-9KRvrs5f.mjs";
-import { n as createFabricSessionFactory, t as startEngine } from "./runtime-D9rSByOO.mjs";
+import { n as createFabricSessionFactory, t as startEngine } from "./runtime-DKmrkfNT.mjs";
 import { homedir } from "node:os";
 //#region src/cli/commands/consumer/status.ts
 /** 状态显示名（spec 六态）。 */

package/dist/{status-VCGexKPW.mjs → status-DsFpGrzC.mjs}

@@ -2,7 +2,7 @@ import { r as reportCliError } from "./errors-BGtxPkM7.mjs";
 import { n as parseArgv } from "./args-CSxXW9eD.mjs";
 import { t as resolveHttpProxy } from "./proxy-D7VMUVEg.mjs";
 import { d as resolvedRelayUrls, f as str, i as openStore, u as resolveDataDir } from "./common-DqSyhR6F.mjs";
-import { a as detailDisplayLines, r as buildServiceDetail, t as openExistingFabric } from "./serve-BlWkrYrl.mjs";
+import { a as detailDisplayLines, r as buildServiceDetail, t as openExistingFabric } from "./serve-BB6-4Ixd.mjs";
 import { homedir } from "node:os";
 //#region src/cli/commands/provider/status.ts
 const SPEC = {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ai-fly",
-  "version": "0.5.0-alpha.1",
+  "version": "0.6.0-alpha.1",
   "description": "ai-fly — peer-to-peer HTTP/WebSocket bridge with AI-ready presets, over OpenDWeb fabric",
   "license": "MIT OR Apache-2.0",
   "type": "module",
@@ -32,7 +32,7 @@
   },
   "dependencies": {
     "@hono/node-server": "^2.1.1",
-    "@jixo/opendweb-client-sdk": "^0.5.0",
+    "@jixo/opendweb-client-sdk": "^0.6.0",
     "@opentray/ext-webview": "0.23.0",
     "@orpc/contract": "1.14.6",
     "@orpc/server": "1.14.6",