dsh-harness-supervisor 0.1.1 → 0.1.2

package/LICENSE

@@ -1,21 +1,21 @@
-MIT License
-
-Copyright (c) 2026 Harness Supervisor contributors
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
+MIT License
+
+Copyright (c) 2026 Harness Supervisor contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,48 +1,48 @@
-# DSH Harness Supervisor
-
-将 DSH 会话作为 Harness Supervisor 的 Master，委派 Pi、Qoder、MiniMax Code 等原生 Worker。支持 DSH `0.2.2-rc.1`，配套 HS `0.10.1`；其他 DSH 版本尚需验收。
-
-[项目仓库](https://gitcode.com/chenpi_1/harness-supervisor) · [完整项目 README](https://gitcode.com/chenpi_1/harness-supervisor/blob/main/README.md)
-
-## 安装与使用
-
-在 DSH 插件管理器安装 `dsh-harness-supervisor-0.1.1.tgz` 并启用。安装包包含核心、依赖和共用 WebUI，无需额外安装 HS 或编译。
-
-从左侧导航、会话顶部或设置中的 **Harness Supervisor** 打开共用 WebUI。人工视图可查看全部 Worker，默认只展开当前对话分组；没有当前对话时也可在左侧导航和设置页查看。也可用 `/hs` 在右侧浏览器打开同样的全局视图。支持 DSH Desktop 和本机 DSH Web；禁用或卸载插件不会停止已有 Worker。
-
-## 通过插件更新核心
-
-1. 安装新版插件 `.tgz`。此时仅准备配套核心，运行中的 HS 保持原版本。
-2. 在设置中点击 **Harness Supervisor → 应用配套 HS 核心**。
-3. HS 暂停接收新任务，等待已有任务与队列结束，再切换并验证新核心。可点击 **刷新状态** 查看进展。
-
-等待期间仍可回答请求、取消 Worker 或取消此次更新，不会到时强杀任务。关闭设置页或禁用插件后，已登记的更新仍由 HS 继续执行。切换后需重新打开 WebUI。
-
-更新的是相同状态目录中的共享核心，不会覆盖源码仓库或全局安装文件。当前使用 `.tgz` 分发，尚未提供在线检查新版功能。旧 `0.9.2` 等缺少所需能力的实例须先安排维护窗口、处理活动 Worker 并停止旧 daemon，插件不会自动替换它们。
-
-## 配置与边界
-
-默认复用独立 HS 的状态目录：`HARNESS_SUPERVISOR_HOME` 或 `~/.harness-supervisor`。可在插件配置中设置 `stateDir`、`nodeExecutable`；不同状态目录属于不同实例，更新不会跨实例生效。
-
-插件为每个真实 DSH Agent 复用一个 MCP 连接，固定会话归属和通知策略。模型只能查询和操作所属会话的 Worker 与通知 ACK，不能修改共享通知目标或执行升级。旧 Worker 不会自动归入 DSH 会话。会话范围是路由护栏，不是操作系统隔离。
-
-WebUI 的浏览器入口使用一次性链接兑换独立凭证，不接触 IPC Token。刷新和读取结果不会唤醒模型或自动 ACK；daemon 重启后需重新从入口连接。
-
-无法确认进程状态时，自动切换会停止，不会强杀进程或并行启动另一核心。恢复线索位于状态目录的 `runtime-update.json`、`runtime-update.log` 和 `runtime-backups/`；不要删除锁强行恢复。
-
-## 开发与打包
-
-插件与 HS 核心在同一仓库维护。以下命令在插件目录执行，普通安装无需执行：
-
-```powershell
-npm test
-npm run build
-```
-
-先在仓库根目录运行 `npm run build`、`npm run pack:core`，再在插件目录打包：
-
-```powershell
-npm run pack:release -- --core-tarball ../../.artifacts/harness-supervisor-0.10.1.tgz
-```
-
-HS 核心发布物已包含经过根锁文件校验的生产依赖。插件打包只解包该固定压缩包，对照 `production-lock.json` 核对依赖版本，再使用 npm `bundleDependencies` 制作可直接安装的发布物；不重新解析依赖版本，不执行安装脚本。DSH SDK、React 等宿主能力不随插件重复打包。
+# DSH Harness Supervisor
+
+将 DSH 会话作为 Harness Supervisor 的 Master，委派 Pi、Qoder、MiniMax Code 等原生 Worker。支持 DSH `0.2.2-rc.1`，配套 HS `0.10.2`；其他 DSH 版本尚需验收。
+
+[项目仓库](https://gitcode.com/chenpi_1/harness-supervisor) · [完整项目 README](https://gitcode.com/chenpi_1/harness-supervisor/blob/main/README.md)
+
+## 安装与使用
+
+在 DSH 插件管理器安装 `dsh-harness-supervisor-0.1.2.tgz` 并启用。安装包包含核心、依赖和共用 WebUI，无需额外安装 HS 或编译。
+
+从左侧导航、会话顶部或设置中的 **Harness Supervisor** 打开共用 WebUI。人工视图可查看全部 Worker，默认只展开当前对话分组；没有当前对话时也可在左侧导航和设置页查看。也可用 `/hs` 在右侧浏览器打开同样的全局视图。支持 DSH Desktop 和本机 DSH Web；禁用或卸载插件不会停止已有 Worker。
+
+## 通过插件更新核心
+
+1. 安装新版插件 `.tgz`。此时仅准备配套核心，运行中的 HS 保持原版本。
+2. 在设置中点击 **Harness Supervisor → 应用配套 HS 核心**。
+3. HS 暂停接收新任务，等待已有任务与队列结束，再切换并验证新核心。可点击 **刷新状态** 查看进展。
+
+等待期间仍可回答请求、取消 Worker 或取消此次更新，不会到时强杀任务。关闭设置页或禁用插件后，已登记的更新仍由 HS 继续执行。切换后需重新打开 WebUI。
+
+更新的是相同状态目录中的共享核心，不会覆盖源码仓库或全局安装文件。当前使用 `.tgz` 分发，尚未提供在线检查新版功能。旧 `0.9.2` 等缺少所需能力的实例须先安排维护窗口、处理活动 Worker 并停止旧 daemon，插件不会自动替换它们。
+
+## 配置与边界
+
+默认复用独立 HS 的状态目录：`HARNESS_SUPERVISOR_HOME` 或 `~/.harness-supervisor`。可在插件配置中设置 `stateDir`、`nodeExecutable`；不同状态目录属于不同实例，更新不会跨实例生效。
+
+插件为每个真实 DSH Agent 复用一个 MCP 连接，固定会话归属和通知策略。模型只能查询和操作所属会话的 Worker 与通知 ACK，不能修改共享通知目标或执行升级。旧 Worker 不会自动归入 DSH 会话。会话范围是路由护栏，不是操作系统隔离。
+
+WebUI 的浏览器入口使用一次性链接兑换独立凭证，不接触 IPC Token。刷新和读取结果不会唤醒模型或自动 ACK；daemon 重启后需重新从入口连接。
+
+无法确认进程状态时，自动切换会停止，不会强杀进程或并行启动另一核心。恢复线索位于状态目录的 `runtime-update.json`、`runtime-update.log` 和 `runtime-backups/`；不要删除锁强行恢复。
+
+## 开发与打包
+
+插件与 HS 核心在同一仓库维护。以下命令在插件目录执行，普通安装无需执行：
+
+```powershell
+npm test
+npm run build
+```
+
+先在仓库根目录运行 `npm run build`、`npm run pack:core`，再在插件目录打包：
+
+```powershell
+npm run pack:release -- --core-tarball ../../.artifacts/harness-supervisor-0.10.2.tgz
+```
+
+HS 核心发布物已包含经过根锁文件校验的生产依赖。插件打包只解包该固定压缩包，对照 `production-lock.json` 核对依赖版本，再使用 npm `bundleDependencies` 制作可直接安装的发布物；不重新解析依赖版本，不执行安装脚本。DSH SDK、React 等宿主能力不随插件重复打包。

package/cordis.patch.yml

@@ -1,7 +1,7 @@
-- insert:
-    - id: harness-supervisor
-      name: dsh-harness-supervisor
-
-# The plugin explicitly provides a browser entry on both Desktop and Web.
-- id: ui-sidebar-browser
-  disabled: false
+- insert:
+    - id: harness-supervisor
+      name: dsh-harness-supervisor
+
+# The plugin explicitly provides a browser entry on both Desktop and Web.
+- id: ui-sidebar-browser
+  disabled: false

package/dist/bridge.js

@@ -1,157 +1,157 @@
-import { createHash } from "node:crypto";
-
-/** Correlation scope only. It is not a same-user or operating-system sandbox. */
-export function ownerRefFor(namespace, sessionId) {
-  if (typeof sessionId !== "string" || !sessionId || sessionId.length > 300) {
-    throw new Error("DSH did not supply a valid live Agent/Session identity");
-  }
-  return `dsh:${createHash("sha256").update(namespace).update("\0").update(sessionId).digest("hex")}`;
-}
-
-/** Own native MCP fibers by exact Agent object, including in-flight activation. */
-export class AgentBridge {
-  #entries = new Map();
-  #closing = false;
-  constructor({ namespace, attach, report = () => {} }) {
-    this.namespace = namespace;
-    this.attach = attach;
-    this.report = report;
-  }
-
-  attachAgent(agent) {
-    if (this.#closing) return Promise.resolve();
-    const found = this.#entries.get(agent);
-    if (found) return found.ready;
-    const entry = { removed: false, fiber: undefined, ready: undefined };
-    this.#entries.set(agent, entry);
-    entry.ready = (async () => {
-      try {
-        const ownerRef = ownerRefFor(this.namespace, agent.id);
-        if (agent.session?.id !== agent.id || typeof agent.ctx?.plugin !== "function") {
-          throw new Error("DSH live Agent capabilities are incompatible (expected 0.2.2-rc.1)");
-        }
-        // attach returns the Fiber synchronously; awaiting the Fiber waits for ready.
-        entry.fiber = this.attach(agent, ownerRef);
-        if (!entry.fiber || typeof entry.fiber.dispose !== "function") {
-          throw new Error("DSH MCP registration did not return a disposable Fiber");
-        }
-        if (entry.removed || this.#closing) {
-          await entry.fiber.dispose();
-          return;
-        }
-        await entry.fiber;
-        if (entry.removed || this.#closing) await entry.fiber.dispose();
-        else this.report(agent, { state: "connected", ownerRef });
-      } catch (error) {
-        if (!entry.removed && !this.#closing) {
-          this.report(agent, { state: "failed", message: error instanceof Error ? error.message : String(error) });
-        }
-        // No global fallback: a failed scope must never register global tools.
-        await entry.fiber?.dispose();
-      }
-    })();
-    return entry.ready;
-  }
-
-  async detachAgent(agent) {
-    const entry = this.#entries.get(agent);
-    if (!entry) return;
-    entry.removed = true;
-    this.#entries.delete(agent);
-    await entry.fiber?.dispose();
-    await entry.ready;
-  }
-
-  async dispose() {
-    if (this.#closing) return;
-    this.#closing = true;
-    const agents = [...this.#entries.keys()];
-    await Promise.allSettled(agents.map((agent) => this.detachAgent(agent)));
-  }
-}
-
-export const RPC_PREFIX = "harness-supervisor/";
-export const RPC_ENDPOINTS = new Set(["open-ui", "status", "apply-core", "cancel-update"]);
-
-/**
- * Exact Fetch routes are owner-only in DSH Connection before this adapter runs.
- * Reuse the public RPC wire format without claiming the single /api interceptor.
- */
-export function createFetchRoutes(handler) {
-  return [...RPC_ENDPOINTS].map((method) => ({
-    path: `/api/${RPC_PREFIX}${method}`, methods: ["POST"], requestBody: "buffered",
-    async fetch(request) {
-      if (request.headers.get("content-type")?.split(";", 1)[0]?.trim() !== "application/json") return new Response("Expected application/json", { status: 415 });
-      let message;
-      try { message = await request.json(); } catch { return new Response("Invalid JSON", { status: 400 }); }
-      if (!message || typeof message !== "object" || Array.isArray(message)
-        || Object.keys(message).some((key) => !["type", "rpcId", "method", "payload"].includes(key))
-        || message.type !== "client-request" || typeof message.rpcId !== "string" || !message.rpcId || message.rpcId.length > 200
-        || message.method !== `${RPC_PREFIX}${method}`) return new Response("Invalid RPC envelope", { status: 400 });
-      const result = await handler(method, message.payload, request.signal, { principal: { kind: "owner" } });
-      return Response.json({ type: "server-response", rpcId: message.rpcId, result });
-    },
-  }));
-}
-
-export function localApplicationOrigin(value) {
-  if (typeof value !== "string") throw new Error("A DSH application origin is required");
-  // Desktop has an opaque URL.origin. Preserve only its exact registered
-  // application origin so the shared UI can be framed in a conversation view.
-  if (value === "dsh-app://app") return value;
-  const url = new URL(value);
-  if (!['http:', 'https:'].includes(url.protocol) || !["127.0.0.1", "localhost", "[::1]"].includes(url.hostname)
-    || url.username || url.password || url.origin !== value) {
-    throw new Error("HS embedding is available only in a local DSH application");
-  }
-  return url.origin;
-}
-
-export function createRpcHandler({ agents, namespace, request, status, applyCore, cancelUpdate }) {
-  return async (endpoint, payload, signal, peer) => {
-    try {
-      if (peer?.principal?.kind !== "owner") throw new Error("Only the authenticated DSH owner may manage HS");
-      if (signal.aborted) throw new Error("Request aborted");
-      const method = endpoint;
-      if (!RPC_ENDPOINTS.has(method)) throw new Error("Unknown HS endpoint");
-      if (!payload || typeof payload !== "object" || Array.isArray(payload)) throw new Error("Invalid HS request");
-      let value;
-      if (method === "open-ui") {
-        if (Object.keys(payload).some((key) => !["sessionId", "applicationOrigin", "viewKey", "viewGeneration"].includes(key))) throw new Error("Unexpected open-ui field");
-        if (payload.viewKey !== undefined && (typeof payload.viewKey !== "string" || !payload.viewKey || payload.viewKey.length > 200)) throw new Error("Invalid panel view key");
-        if (payload.viewGeneration !== undefined && (!Number.isSafeInteger(payload.viewGeneration) || payload.viewGeneration < 1 || payload.viewKey === undefined)) throw new Error("Invalid panel generation");
-        let preferredOwnerRef;
-        if (payload.sessionId !== undefined) {
-          const agent = typeof payload.sessionId === "string" ? agents.get(payload.sessionId) : undefined;
-          if (!agent || agent.session?.id !== agent.id) throw new Error("Open a live DSH session before choosing its default Worker group");
-          preferredOwnerRef = ownerRefFor(namespace, agent.id);
-        }
-        const frameOrigin = localApplicationOrigin(payload.applicationOrigin);
-        try {
-          // This route is authenticated owner UI, not a model tool. Its access
-          // is global; the live session is only a default expansion preference.
-          value = await request("ui_start", { ...(preferredOwnerRef === undefined ? {} : { preferredOwnerRef }), frameOrigin, ...(payload.viewKey === undefined ? {} : { viewKey: payload.viewKey }), ...(payload.viewGeneration === undefined ? {} : { viewGeneration: payload.viewGeneration }) });
-        } catch (error) {
-          if (["BAD_REQUEST", "UNSUPPORTED"].includes(error?.code)) {
-            throw new Error("当前运行的 HS 核心尚不支持顶部面板。请在设置 → Harness Supervisor → 应用配套 HS 核心后，重新打开标签页。");
-          }
-          throw error;
-        }
-      } else if (method === "status") {
-        if (Object.keys(payload).length) throw new Error("Unexpected status field");
-        value = await status();
-      } else if (method === "apply-core") {
-        if (Object.keys(payload).length) throw new Error("The paired core version is fixed by the plugin");
-        value = await applyCore();
-      } else {
-        if (Object.keys(payload).some((key) => key !== "intentId") || typeof payload.intentId !== "string" || !payload.intentId || payload.intentId.length > 200) {
-          throw new Error("A current update intentId is required");
-        }
-        value = await cancelUpdate(payload.intentId);
-      }
-      return { ok: true, value };
-    } catch (error) {
-      return { ok: false, error: { code: "harness-supervisor/request-refused", message: error instanceof Error ? error.message : String(error), details: {} } };
-    }
-  };
-}
+import { createHash } from "node:crypto";
+
+/** Correlation scope only. It is not a same-user or operating-system sandbox. */
+export function ownerRefFor(namespace, sessionId) {
+  if (typeof sessionId !== "string" || !sessionId || sessionId.length > 300) {
+    throw new Error("DSH did not supply a valid live Agent/Session identity");
+  }
+  return `dsh:${createHash("sha256").update(namespace).update("\0").update(sessionId).digest("hex")}`;
+}
+
+/** Own native MCP fibers by exact Agent object, including in-flight activation. */
+export class AgentBridge {
+  #entries = new Map();
+  #closing = false;
+  constructor({ namespace, attach, report = () => {} }) {
+    this.namespace = namespace;
+    this.attach = attach;
+    this.report = report;
+  }
+
+  attachAgent(agent) {
+    if (this.#closing) return Promise.resolve();
+    const found = this.#entries.get(agent);
+    if (found) return found.ready;
+    const entry = { removed: false, fiber: undefined, ready: undefined };
+    this.#entries.set(agent, entry);
+    entry.ready = (async () => {
+      try {
+        const ownerRef = ownerRefFor(this.namespace, agent.id);
+        if (agent.session?.id !== agent.id || typeof agent.ctx?.plugin !== "function") {
+          throw new Error("DSH live Agent capabilities are incompatible (expected 0.2.2-rc.1)");
+        }
+        // attach returns the Fiber synchronously; awaiting the Fiber waits for ready.
+        entry.fiber = this.attach(agent, ownerRef);
+        if (!entry.fiber || typeof entry.fiber.dispose !== "function") {
+          throw new Error("DSH MCP registration did not return a disposable Fiber");
+        }
+        if (entry.removed || this.#closing) {
+          await entry.fiber.dispose();
+          return;
+        }
+        await entry.fiber;
+        if (entry.removed || this.#closing) await entry.fiber.dispose();
+        else this.report(agent, { state: "connected", ownerRef });
+      } catch (error) {
+        if (!entry.removed && !this.#closing) {
+          this.report(agent, { state: "failed", message: error instanceof Error ? error.message : String(error) });
+        }
+        // No global fallback: a failed scope must never register global tools.
+        await entry.fiber?.dispose();
+      }
+    })();
+    return entry.ready;
+  }
+
+  async detachAgent(agent) {
+    const entry = this.#entries.get(agent);
+    if (!entry) return;
+    entry.removed = true;
+    this.#entries.delete(agent);
+    await entry.fiber?.dispose();
+    await entry.ready;
+  }
+
+  async dispose() {
+    if (this.#closing) return;
+    this.#closing = true;
+    const agents = [...this.#entries.keys()];
+    await Promise.allSettled(agents.map((agent) => this.detachAgent(agent)));
+  }
+}
+
+export const RPC_PREFIX = "harness-supervisor/";
+export const RPC_ENDPOINTS = new Set(["open-ui", "status", "apply-core", "cancel-update"]);
+
+/**
+ * Exact Fetch routes are owner-only in DSH Connection before this adapter runs.
+ * Reuse the public RPC wire format without claiming the single /api interceptor.
+ */
+export function createFetchRoutes(handler) {
+  return [...RPC_ENDPOINTS].map((method) => ({
+    path: `/api/${RPC_PREFIX}${method}`, methods: ["POST"], requestBody: "buffered",
+    async fetch(request) {
+      if (request.headers.get("content-type")?.split(";", 1)[0]?.trim() !== "application/json") return new Response("Expected application/json", { status: 415 });
+      let message;
+      try { message = await request.json(); } catch { return new Response("Invalid JSON", { status: 400 }); }
+      if (!message || typeof message !== "object" || Array.isArray(message)
+        || Object.keys(message).some((key) => !["type", "rpcId", "method", "payload"].includes(key))
+        || message.type !== "client-request" || typeof message.rpcId !== "string" || !message.rpcId || message.rpcId.length > 200
+        || message.method !== `${RPC_PREFIX}${method}`) return new Response("Invalid RPC envelope", { status: 400 });
+      const result = await handler(method, message.payload, request.signal, { principal: { kind: "owner" } });
+      return Response.json({ type: "server-response", rpcId: message.rpcId, result });
+    },
+  }));
+}
+
+export function localApplicationOrigin(value) {
+  if (typeof value !== "string") throw new Error("A DSH application origin is required");
+  // Desktop has an opaque URL.origin. Preserve only its exact registered
+  // application origin so the shared UI can be framed in a conversation view.
+  if (value === "dsh-app://app") return value;
+  const url = new URL(value);
+  if (!['http:', 'https:'].includes(url.protocol) || !["127.0.0.1", "localhost", "[::1]"].includes(url.hostname)
+    || url.username || url.password || url.origin !== value) {
+    throw new Error("HS embedding is available only in a local DSH application");
+  }
+  return url.origin;
+}
+
+export function createRpcHandler({ agents, namespace, request, status, applyCore, cancelUpdate }) {
+  return async (endpoint, payload, signal, peer) => {
+    try {
+      if (peer?.principal?.kind !== "owner") throw new Error("Only the authenticated DSH owner may manage HS");
+      if (signal.aborted) throw new Error("Request aborted");
+      const method = endpoint;
+      if (!RPC_ENDPOINTS.has(method)) throw new Error("Unknown HS endpoint");
+      if (!payload || typeof payload !== "object" || Array.isArray(payload)) throw new Error("Invalid HS request");
+      let value;
+      if (method === "open-ui") {
+        if (Object.keys(payload).some((key) => !["sessionId", "applicationOrigin", "viewKey", "viewGeneration"].includes(key))) throw new Error("Unexpected open-ui field");
+        if (payload.viewKey !== undefined && (typeof payload.viewKey !== "string" || !payload.viewKey || payload.viewKey.length > 200)) throw new Error("Invalid panel view key");
+        if (payload.viewGeneration !== undefined && (!Number.isSafeInteger(payload.viewGeneration) || payload.viewGeneration < 1 || payload.viewKey === undefined)) throw new Error("Invalid panel generation");
+        let preferredOwnerRef;
+        if (payload.sessionId !== undefined) {
+          const agent = typeof payload.sessionId === "string" ? agents.get(payload.sessionId) : undefined;
+          if (!agent || agent.session?.id !== agent.id) throw new Error("Open a live DSH session before choosing its default Worker group");
+          preferredOwnerRef = ownerRefFor(namespace, agent.id);
+        }
+        const frameOrigin = localApplicationOrigin(payload.applicationOrigin);
+        try {
+          // This route is authenticated owner UI, not a model tool. Its access
+          // is global; the live session is only a default expansion preference.
+          value = await request("ui_start", { ...(preferredOwnerRef === undefined ? {} : { preferredOwnerRef }), frameOrigin, ...(payload.viewKey === undefined ? {} : { viewKey: payload.viewKey }), ...(payload.viewGeneration === undefined ? {} : { viewGeneration: payload.viewGeneration }) });
+        } catch (error) {
+          if (["BAD_REQUEST", "UNSUPPORTED"].includes(error?.code)) {
+            throw new Error("当前运行的 HS 核心尚不支持顶部面板。请在设置 → Harness Supervisor → 应用配套 HS 核心后，重新打开标签页。");
+          }
+          throw error;
+        }
+      } else if (method === "status") {
+        if (Object.keys(payload).length) throw new Error("Unexpected status field");
+        value = await status();
+      } else if (method === "apply-core") {
+        if (Object.keys(payload).length) throw new Error("The paired core version is fixed by the plugin");
+        value = await applyCore();
+      } else {
+        if (Object.keys(payload).some((key) => key !== "intentId") || typeof payload.intentId !== "string" || !payload.intentId || payload.intentId.length > 200) {
+          throw new Error("A current update intentId is required");
+        }
+        value = await cancelUpdate(payload.intentId);
+      }
+      return { ok: true, value };
+    } catch (error) {
+      return { ok: false, error: { code: "harness-supervisor/request-refused", message: error instanceof Error ? error.message : String(error), details: {} } };
+    }
+  };
+}