dsh-kingdom 0.6.0 → 0.8.0

package/README.md

@@ -5,7 +5,7 @@
 **在 DeepSeek Harness 里，装一个插件，拥有一个自己的 Agent 王国。**
 
 [![CI](https://github.com/lusblead/dsh-Kingdom/actions/workflows/ci.yml/badge.svg)](https://github.com/lusblead/dsh-Kingdom/actions/workflows/ci.yml)
-[![Version](https://img.shields.io/badge/version-0.6.0-blue)](https://github.com/lusblead/dsh-Kingdom/releases)
+[![Version](https://img.shields.io/badge/version-0.8.0-blue)](https://github.com/lusblead/dsh-Kingdom/releases)
 [![License](https://img.shields.io/badge/license-BSD--3--Clause-green)](LICENSE)
 [![DSH](https://img.shields.io/badge/DSH-0.1.0--rc.5-orange)](#compatibility)
 [![Node](https://img.shields.io/badge/Node-%3E%3D22.19-339933)](#requirements)
@@ -47,6 +47,9 @@ DSH：任务 CREATED → ASSIGNED → RUNNING → REVIEW → DONE ✅
 | 🔄 **换届与会话归属**（v0.4） | `kingdom_unbind_role` 解绑 / `kingdom_bind_session` 把角色绑到**独立会话**；`session-bound` 模式下只有被绑定会话能行使职权 |
 | 🪪 **会话身份预留字段**（v0.4） | 角色可携带 `model_name` / `agent_name` / `session_meta`（JSON 扩展槽）——现在不必填，未来完整会话逐步填满 |
 | 🎭 **GUI 就绪**（可选） | 结构化快照 + 本地数据网关（默认关闭），前端页面由 GUI 部署方提供 |
+| 👑 **Persistent Governed Worker**（v0.8） | Worker 拥有**长期 DSH Session**（REWORK 唤醒同一 Worker）；Session ↔ Territory Affinity 不可改绑；每次执行经 **Capability Gate**（仅 GRANTED+ENFORCED 才 dispatch，Runtime 无法 enforce → **DENIED + zero execution**）；**Execution Lease** 互斥 + **Dispatch Intent**（crash 可 reconcile，不盲发）；terminal 证据来自事件链，**Runtime 跑完 ≠ Task DONE**（Claim → Supervisor 裁定链不变） |
+| 🛡️ **Fail-closed 能力治理**（v0.8） | 无自授 / 超 Ceiling / scope 外 / 部分 policy 一律拒绝；approval=never 禁扩权；workspace 外写真实拒绝；RECOVERING 状态如实显示，禁止显示成 Done |
+| 🧩 **Legacy 兼容**（v0.8） | 旧 one-shot 路径继续 `LEGACY_COMPAT` 工作，回归全绿 |
 
 ---
 
@@ -68,10 +71,10 @@ dsh plugin --profile web add dsh-kingdom
 
 **方式 B：从 GitHub Releases 下载 tgz**
 
-从 [Releases](https://github.com/lusblead/dsh-Kingdom/releases) 下载 `dsh-kingdom-0.6.0.tgz`，然后：
+从 [Releases](https://github.com/lusblead/dsh-Kingdom/releases) 下载 `dsh-kingdom-0.7.0.tgz`，然后：
 
 ```bash
-dsh plugin --profile web add ./dsh-kingdom-0.6.0.tgz
+dsh plugin --profile web add ./dsh-kingdom-0.7.0.tgz
 ```
 
 > 安装时会打印 5 条 peer dependency warning——**这是预期的**（这些包由 DSH 运行时提供），不是失败。

package/lib/adapter/contract.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=contract.js.map

package/lib/adapter/contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract.js","sourceRoot":"","sources":["../../src/adapter/contract.ts"],"names":[],"mappings":""}

package/lib/adapter/dsh-backend.js

@@ -0,0 +1,277 @@
+/**
+ * dsh-kingdom — v0.8 DSH Persistent Session Backend（M3-S3，RuntimeAdapter 的 DSH 实现）。
+ *
+ * 依 M3-S3 Thin Spec §2（DSH Mapping，seam 均 @ 00b7102f1d 源码核实）：
+ * - createSession  → AgentRegistry.create（meta.cwd=territory.workspace_path；setup 装配 preset）
+ * - resumeSession  → AgentRegistry.resume（resumeSessionId=session_ref，恢复同一长期会话）
+ * - dispatch       → agent.followup(完整 UserMessage)（C-007 负知识：禁裸 text block）
+ * - observeExecution → session.events 事件链重建（turn/start → turn/end → assistant/message，C-006/C-010）
+ * - reconcile      → 两维独立（execution 事件链 / session live+persistence）
+ *
+ * 结构型局部类型（同 dsh-subagent.ts 模式）：不 import dsh 类型、不新增 peer dep。
+ * 缺 seam 诚实返回：S4 未实现的 enforcement 面一律 CANNOT_ENFORCE（fail-closed）。
+ */
+import { randomUUID } from 'node:crypto';
+import { cleanupDshEnforcement, materializeDshEnforcement, readEnforceableSet, } from '../capability/dsh-enforcement.js';
+import { terminalOutcomeOf } from '../dispatch/evidence.js';
+function asAgents(value) {
+    return value;
+}
+function asPersistence(value) {
+    return value;
+}
+function asPresets(value) {
+    return value;
+}
+/** 完整 UserMessage（C-007：followup 必须收完整消息，否则毒化会话）。 */
+function buildUserMessage(text) {
+    return {
+        id: randomUUID(),
+        role: 'user',
+        content: [{ type: 'text', text }],
+        source: { kind: 'user' },
+    };
+}
+/**
+ * 事件链重建 execution 观测（S3 粗粒度；S5 evidence.ts 细化到 splice/turn 边界）。
+ * 以「我们的消息 id 在事件流中出现之后」为起点：
+ * - 未见 turn/start         → QUEUED（Intent 已持久、Runtime 未开工）
+ * - 有 turn/start 无 turn/end → RUNNING
+ * - ★ fail-closed（STABILITY-FINDINGS §4.2）：仅当 turn/end.reason.kind=='completed'
+ *   **且** 有 assistant/message 才 TERMINAL；interrupted/aborted/error/blocked/max-tokens
+ *   或缺失 → UNKNOWN（不得判 TERMINAL，绝不写 COMPLETED）
+ * - 无法判定                 → UNKNOWN
+ */
+export function reconstructExecutionObservation(session, sinceDispatchRef) {
+    try {
+        const events = session.events;
+        const startIndex = events.findIndex((event) => JSON.stringify(event.data ?? {}).includes(sinceDispatchRef) || event.type === 'user/message' && JSON.stringify(event).includes(sinceDispatchRef));
+        if (startIndex === -1)
+            return 'UNKNOWN'; // 消息不在本 session 日志（可能未落库）
+        const tail = events.slice(startIndex);
+        const turnStarts = tail.filter(e => e.type === 'turn/start').length;
+        if (turnStarts === 0)
+            return 'QUEUED';
+        const lastTurnStart = [...tail].reverse().find(e => e.type === 'turn/start');
+        const lastTurnEnd = [...tail].reverse().find(e => e.type === 'turn/end');
+        const startTurn = lastTurnStart?.data?.turn;
+        const endTurn = lastTurnEnd?.data?.turn;
+        const endReason = (() => {
+            const data = lastTurnEnd?.data ?? {};
+            const fromReason = data.reason !== null && typeof data.reason === 'object'
+                ? data.reason.kind
+                : undefined;
+            return typeof fromReason === 'string' ? fromReason : (typeof data.kind === 'string' ? data.kind : null);
+        })();
+        const hasAssistant = tail.some(e => e.type === 'assistant/message');
+        const outcome = lastTurnEnd && (startTurn === undefined || endTurn === undefined || endTurn >= startTurn) ? terminalOutcomeOf(endReason) : null;
+        if (lastTurnEnd && outcome === 'COMPLETED' && hasAssistant)
+            return 'TERMINAL';
+        if (lastTurnEnd && (outcome === 'FAILED' || outcome === 'ABORTED'))
+            return 'TERMINAL'; // 明确终止 reason（aborted/blocked/error/max-tokens）
+        if (lastTurnEnd)
+            return 'UNKNOWN'; // completed 无 assistant / interrupted / 缺失 → 证据不足（fail-closed）
+        if (lastTurnStart)
+            return 'RUNNING';
+        return 'UNKNOWN';
+    }
+    catch {
+        return 'UNKNOWN';
+    }
+}
+/** DSH RuntimeAdapter 实现。 */
+export class DshRuntimeAdapter {
+    runtimeType = 'dsh';
+    deps;
+    constructor(deps) {
+        this.deps = {
+            runtimeInstanceRef: deps.runtimeInstanceRef,
+            provider: deps.provider,
+            model: deps.model ?? null,
+            agents: asAgents(deps.agents),
+            sessionPersistence: asPersistence(deps.sessionPersistence),
+            presets: asPresets(deps.presets),
+            policy: {
+                permission: deps.permission,
+                sandboxPolicy: deps.sandboxPolicy,
+                approval: deps.approval,
+            },
+        };
+    }
+    identify() {
+        return { runtimeType: this.runtimeType, runtimeInstanceRef: this.deps.runtimeInstanceRef };
+    }
+    agentOptions() {
+        return { provider: this.deps.provider, ...(this.deps.model ? { model: this.deps.model } : {}) };
+    }
+    composeSetup(agentPreset) {
+        if (!agentPreset || !this.deps.presets)
+            return undefined;
+        return async (agentCtx) => {
+            await this.deps.presets.mount(agentCtx, agentPreset);
+        };
+    }
+    async createSession(input) {
+        const sessionId = randomUUID();
+        const handle = await this.deps.agents.create({
+            sessionId,
+            meta: { cwd: input.cwd, ...(input.agentPreset ? { agentPreset: input.agentPreset } : {}) },
+            agentOptions: { provider: input.provider ?? this.deps.provider, ...(input.model ?? this.deps.model ? { model: input.model ?? this.deps.model } : {}) },
+            setup: this.composeSetup(input.agentPreset),
+        });
+        return this.toHandle(handle);
+    }
+    async resumeSession(input) {
+        const handle = await this.deps.agents.resume({
+            resumeSessionId: input.sessionRef,
+            agentOptions: { provider: input.provider ?? this.deps.provider, ...(input.model ?? this.deps.model ? { model: input.model ?? this.deps.model } : {}) },
+            setup: undefined, // resume 的 enforcement 装配由 S4 提供（Enforcement Plan → setup）
+        });
+        return this.toHandle(handle);
+    }
+    /**
+     * v0.8（Owner V0.8 PRODUCTION-PATH CLOSURE B）：同进程 live Session 复用。
+     * session 已在 live registry → 返回其 handle（**不** resume）；否则 null。
+     * DSH seam（真实 E2E 实证）：`agents.resume` 对 live session 抛
+     * `cannot prepare ... while it is live`（PersistenceCoordinator.prepare）；
+     * 因此「已有 current affinity 且 session 仍 live」时必须复用同一 live handle——
+     * 同一 session_ref = 同一持久 Session = 同一 Worker / Territory affinity。
+     */
+    getLiveHandle(sessionRef) {
+        const agent = this.deps.agents.get(sessionRef);
+        if (!agent)
+            return null;
+        return {
+            refs: {
+                runtimeType: this.runtimeType,
+                runtimeInstanceRef: this.deps.runtimeInstanceRef,
+                sessionRef: agent.id,
+            },
+            agent,
+            session: agent.session,
+            dispose: async () => {
+                // live agent 生命周期由宿主（AgentRegistry）管理；退役走 retireSession
+            },
+        };
+    }
+    toHandle(handle) {
+        const agent = handle.agent;
+        return {
+            refs: {
+                runtimeType: this.runtimeType,
+                runtimeInstanceRef: this.deps.runtimeInstanceRef,
+                sessionRef: agent.id,
+            },
+            agent,
+            session: agent.session,
+            dispose: () => handle.dispose(),
+        };
+    }
+    async observeSession(handle) {
+        const agent = handle.agent;
+        if (!agent || !agent.status)
+            return 'gone';
+        return agent.status === 'idle' ? 'idle' : 'running';
+    }
+    async retireSession(handle) {
+        await handle.dispose();
+    }
+    // ── Capability（S4：context-bound 集合 + preflight/materialize/cleanup）────────
+    /**
+     * context-bound Runtime Enforceable Set：回答「这次 Session 下**能** enforce 什么」。
+     * - tools：A∩B（A=真实 `tools.schemas()` Runtime inventory；B=preset 声明面，回退 session 装配面）——
+     *   Owner S4 seam 裁决（A+B 组合），见 `readEnforceableSet`；
+     * - sandboxMode：有 confining 后端（sandboxPolicy 或 permission preset）→ 'workspace-write'；
+     * - approvalPolicy：有禁扩权机制（approval 或 permission preset）→ 'never'。
+     */
+    async capabilities(context) {
+        const ctx = context;
+        const tools = ctx?.agent?.session ? (await readEnforceableSet(ctx, { presets: this.deps.presets })).tools : [];
+        const hasSandbox = Boolean(this.deps.policy.sandboxPolicy || this.deps.policy.permission);
+        const hasApproval = Boolean(this.deps.policy.approval || this.deps.policy.permission);
+        return {
+            tools,
+            sandboxMode: hasSandbox ? 'workspace-write' : null,
+            approvalPolicy: hasApproval ? 'never' : null,
+            presetId: null,
+        };
+    }
+    /** preflight：纯检查、零副作用（M3-S1 Stage 3）。 */
+    async preflight(request, context) {
+        const reasons = [];
+        const ctx = context;
+        if (request.approvalPolicy !== 'never') {
+            reasons.push('governed Execution 要求 approvalPolicy=never（禁扩权）；收到 ' + request.approvalPolicy);
+        }
+        if (!ctx?.agent?.ctx?.tools?.restrict || !ctx.agent.ctx.tools.guard) {
+            reasons.push('agent.ctx.tools 无 restrict/guard（工具面不可 enforce）');
+        }
+        if (!request.presetId && !this.deps.policy.sandboxPolicy) {
+            reasons.push('sandboxPolicy 缺失且未指定 permission preset（领地写边界不可 enforce）');
+        }
+        if (!request.presetId && !this.deps.policy.approval) {
+            reasons.push('approval 服务缺失且未指定 permission preset（禁扩权不可 enforce）');
+        }
+        if (request.sandboxMode === 'workspace-write' && !request.territoryPath) {
+            reasons.push('workspace-write 要求 territoryPath（领地写边界无锚点）');
+        }
+        return { ok: reasons.length === 0, reasons };
+    }
+    /** materialize：把 EnforcementRequest 应用到 live session；失败 → DENIED + zero execution。 */
+    async materialize(request, context) {
+        const ctx = context;
+        if (!ctx?.agent?.session)
+            return { ok: false, evidenceJson: null, reasons: ['materialize: 缺少 live session context'] };
+        return materializeDshEnforcement(this.deps.policy, ctx, request);
+    }
+    /** cleanup：拆除 per-execution guard/restrict（session 级政策保留）。 */
+    async cleanup(_request, context) {
+        const ctx = context;
+        if (!ctx?.agent?.session)
+            return { ok: false, evidenceJson: null };
+        return cleanupDshEnforcement(ctx);
+    }
+    // ── Dispatch / Evidence / Reconcile ────────────────────────────────────────
+    async dispatch(input) {
+        const agent = this.deps.agents.get(input.sessionRef);
+        if (!agent)
+            throw new Error(`dsh dispatch: session ${input.sessionRef} 不在 live registry（无法 dispatch）`);
+        const message = buildUserMessage(input.text);
+        agent.followup(message); // 持久 splice 插入即「已接受」
+        return {
+            refs: {
+                runtimeType: this.runtimeType,
+                runtimeInstanceRef: this.deps.runtimeInstanceRef,
+                sessionRef: input.sessionRef,
+                runtimeDispatchRef: message.id,
+            },
+            acceptedAt: new Date().toISOString(),
+        };
+    }
+    async observeExecution(refs, session) {
+        const live = session;
+        if (!live || !Array.isArray(live.events) || !refs.runtimeDispatchRef)
+            return 'UNKNOWN';
+        return reconstructExecutionObservation(live, refs.runtimeDispatchRef);
+    }
+    async reconcile(kingdomDispatchId, refs) {
+        // session 维：live registry 或持久可恢复 → AVAILABLE；否则 UNKNOWN（GONE 需显式删除证据，S5 细化）
+        const live = this.deps.agents.get(refs.sessionRef);
+        let sessionObservation = 'UNKNOWN';
+        if (live)
+            sessionObservation = 'AVAILABLE';
+        else if (this.deps.sessionPersistence?.has?.(refs.sessionRef) === true)
+            sessionObservation = 'AVAILABLE';
+        // execution 维：live 会话事件链；不可判定 → UNKNOWN（fail-closed，不盲发、不 ABORT）
+        let executionObservation = 'UNKNOWN';
+        if (live && refs.runtimeDispatchRef) {
+            executionObservation = reconstructExecutionObservation(live.session, refs.runtimeDispatchRef);
+        }
+        return {
+            executionObservation,
+            sessionObservation,
+            evidence: { kingdomDispatchId, runtimeDispatchRef: refs.runtimeDispatchRef ?? null, observedAt: new Date().toISOString() },
+        };
+    }
+}
+//# sourceMappingURL=dsh-backend.js.map

package/lib/adapter/dsh-backend.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dsh-backend.js","sourceRoot":"","sources":["../../src/adapter/dsh-backend.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAgBxC,OAAO,EACL,qBAAqB,EACrB,yBAAyB,EACzB,kBAAkB,GAGnB,MAAM,kCAAkC,CAAA;AACzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAA;AAwD3D,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,KAAmB,CAAA;AAC5B,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,KAA2C,CAAA;AACpD,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,OAAO,KAAqC,CAAA;AAC9C,CAAC;AAED,qDAAqD;AACrD,SAAS,gBAAgB,CAAC,IAAY;IACpC,OAAO;QACL,EAAE,EAAE,UAAU,EAAE;QAChB,IAAI,EAAE,MAAM;QACZ,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QACjC,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;KACzB,CAAA;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,+BAA+B,CAC7C,OAAoB,EACpB,gBAAwB;IAExB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAA;QAC7B,MAAM,UAAU,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE,CAC5C,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CACjJ,CAAA;QACD,IAAI,UAAU,KAAK,CAAC,CAAC;YAAE,OAAO,SAAS,CAAA,CAAC,0BAA0B;QAClE,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA;QACrC,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,MAAM,CAAA;QACnE,IAAI,UAAU,KAAK,CAAC;YAAE,OAAO,QAAQ,CAAA;QACrC,MAAM,aAAa,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC,CAAA;QAC5E,MAAM,WAAW,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,CAAA;QACxE,MAAM,SAAS,GAAG,aAAa,EAAE,IAAI,EAAE,IAA0B,CAAA;QACjE,MAAM,OAAO,GAAG,WAAW,EAAE,IAAI,EAAE,IAA0B,CAAA;QAC7D,MAAM,SAAS,GAAG,CAAC,GAAG,EAAE;YACtB,MAAM,IAAI,GAAG,WAAW,EAAE,IAAI,IAAI,EAAE,CAAA;YACpC,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,KAAK,IAAI,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ;gBACxE,CAAC,CAAE,IAAI,CAAC,MAA6B,CAAC,IAAI;gBAC1C,CAAC,CAAC,SAAS,CAAA;YACb,OAAO,OAAO,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;QACzG,CAAC,CAAC,EAAE,CAAA;QACJ,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,mBAAmB,CAAC,CAAA;QACnE,MAAM,OAAO,GAAG,WAAW,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,IAAI,SAAS,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;QAC/I,IAAI,WAAW,IAAI,OAAO,KAAK,WAAW,IAAI,YAAY;YAAE,OAAO,UAAU,CAAA;QAC7E,IAAI,WAAW,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,SAAS,CAAC;YAAE,OAAO,UAAU,CAAA,CAAC,gDAAgD;QACtI,IAAI,WAAW;YAAE,OAAO,SAAS,CAAA,CAAC,+DAA+D;QACjG,IAAI,aAAa;YAAE,OAAO,SAAS,CAAA;QACnC,OAAO,SAAS,CAAA;IAClB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;AACH,CAAC;AAED,6BAA6B;AAC7B,MAAM,OAAO,iBAAiB;IACnB,WAAW,GAAG,KAAK,CAAA;IACX,IAAI,CAMpB;IAED,YAAY,IAAoB;QAC9B,IAAI,CAAC,IAAI,GAAG;YACV,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;YAC3C,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,IAAI;YACzB,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC;YAC7B,kBAAkB,EAAE,aAAa,CAAC,IAAI,CAAC,kBAAkB,CAAC;YAC1D,OAAO,EAAE,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC;YAChC,MAAM,EAAE;gBACN,UAAU,EAAE,IAAI,CAAC,UAAqD;gBACtE,aAAa,EAAE,IAAI,CAAC,aAA2D;gBAC/E,QAAQ,EAAE,IAAI,CAAC,QAAiD;aACjE;SACF,CAAA;IACH,CAAC;IAED,QAAQ;QACN,OAAO,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,kBAAkB,EAAE,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAAA;IAC5F,CAAC;IAEO,YAAY;QAClB,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAA;IACjG,CAAC;IAEO,YAAY,CAAC,WAAoB;QACvC,IAAI,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO,SAAS,CAAA;QACxD,OAAO,KAAK,EAAE,QAAiB,EAAE,EAAE;YACjC,MAAM,IAAI,CAAC,IAAI,CAAC,OAAQ,CAAC,KAAK,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAA;QACvD,CAAC,CAAA;IACH,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,KAA+E;QACjG,MAAM,SAAS,GAAG,UAAU,EAAE,CAAA;QAC9B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;YAC3C,SAAS;YACT,IAAI,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;YAC1F,YAAY,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,KAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;YACvJ,KAAK,EAAE,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,WAAW,CAAC;SAC5C,CAAC,CAAA;QACF,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;IAC9B,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,KAAgE;QAClF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;YAC3C,eAAe,EAAE,KAAK,CAAC,UAAU;YACjC,YAAY,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,KAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;YACvJ,KAAK,EAAE,SAAS,EAAE,2DAA2D;SAC9E,CAAC,CAAA;QACF,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;IAC9B,CAAC;IAED;;;;;;;OAOG;IACH,aAAa,CAAC,UAAkB;QAC9B,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;QAC9C,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAA;QACvB,OAAO;YACL,IAAI,EAAE;gBACJ,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,kBAAkB,EAAE,IAAI,CAAC,IAAI,CAAC,kBAAkB;gBAChD,UAAU,EAAE,KAAK,CAAC,EAAE;aACrB;YACD,KAAK;YACL,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,OAAO,EAAE,KAAK,IAAI,EAAE;gBAClB,wDAAwD;YAC1D,CAAC;SACF,CAAA;IACH,CAAC;IAEO,QAAQ,CAAC,MAAuB;QACtC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAA;QAC1B,OAAO;YACL,IAAI,EAAE;gBACJ,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,kBAAkB,EAAE,IAAI,CAAC,IAAI,CAAC,kBAAkB;gBAChD,UAAU,EAAE,KAAK,CAAC,EAAE;aACrB;YACD,KAAK;YACL,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE;SAChC,CAAA;IACH,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,MAAqB;QACxC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAkB,CAAA;QACvC,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,MAAM;YAAE,OAAO,MAAM,CAAA;QAC1C,OAAO,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAA;IACrD,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,MAAqB;QACvC,MAAM,MAAM,CAAC,OAAO,EAAE,CAAA;IACxB,CAAC;IAED,6EAA6E;IAE7E;;;;;;OAMG;IACH,KAAK,CAAC,YAAY,CAAC,OAAgB;QACjC,MAAM,GAAG,GAAG,OAA4C,CAAA;QACxD,MAAM,KAAK,GAAG,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,kBAAkB,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAA;QAC9G,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;QACzF,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;QACrF,OAAO;YACL,KAAK;YACL,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI;YAClD,cAAc,EAAE,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI;YAC5C,QAAQ,EAAE,IAAI;SACf,CAAA;IACH,CAAC;IAED,yCAAyC;IACzC,KAAK,CAAC,SAAS,CAAC,OAA2B,EAAE,OAAgB;QAC3D,MAAM,OAAO,GAAa,EAAE,CAAA;QAC5B,MAAM,GAAG,GAAG,OAA4C,CAAA;QACxD,IAAI,OAAO,CAAC,cAAc,KAAK,OAAO,EAAE,CAAC;YACvC,OAAO,CAAC,IAAI,CAAC,qDAAqD,GAAG,OAAO,CAAC,cAAc,CAAC,CAAA;QAC9F,CAAC;QACD,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,QAAQ,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YACpE,OAAO,CAAC,IAAI,CAAC,iDAAiD,CAAC,CAAA;QACjE,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;YACzD,OAAO,CAAC,IAAI,CAAC,yDAAyD,CAAC,CAAA;QACzE,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YACpD,OAAO,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAA;QACpE,CAAC;QACD,IAAI,OAAO,CAAC,WAAW,KAAK,iBAAiB,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;YACxE,OAAO,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAA;QAC5D,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,OAAO,EAAE,CAAA;IAC9C,CAAC;IAED,sFAAsF;IACtF,KAAK,CAAC,WAAW,CAAC,OAA2B,EAAE,OAAgB;QAC7D,MAAM,GAAG,GAAG,OAA4C,CAAA;QACxD,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,sCAAsC,CAAC,EAAE,CAAA;QACrH,OAAO,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC,CAAA;IAClE,CAAC;IAED,8DAA8D;IAC9D,KAAK,CAAC,OAAO,CAAC,QAA4B,EAAE,OAAgB;QAC1D,MAAM,GAAG,GAAG,OAA4C,CAAA;QACxD,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,CAAA;QAClE,OAAO,qBAAqB,CAAC,GAAG,CAAC,CAAA;IACnC,CAAC;IAED,8EAA8E;IAE9E,KAAK,CAAC,QAAQ,CAAC,KAAoB;QACjC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA;QACpD,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,KAAK,CAAC,UAAU,gCAAgC,CAAC,CAAA;QACtG,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QAC5C,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA,CAAC,qBAAqB;QAC7C,OAAO;YACL,IAAI,EAAE;gBACJ,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,kBAAkB,EAAE,IAAI,CAAC,IAAI,CAAC,kBAAkB;gBAChD,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,kBAAkB,EAAE,OAAO,CAAC,EAAE;aAC/B;YACD,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACrC,CAAA;IACH,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,IAAyD,EAAE,OAAgB;QAChG,MAAM,IAAI,GAAG,OAAkC,CAAA;QAC/C,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB;YAAE,OAAO,SAAS,CAAA;QACtF,OAAO,+BAA+B,CAAC,IAAI,EAAE,IAAI,CAAC,kBAAkB,CAAC,CAAA;IACvE,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,iBAAyB,EAAE,IAAyD;QAClG,4EAA4E;QAC5E,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QAClD,IAAI,kBAAkB,GAA0C,SAAS,CAAA;QACzE,IAAI,IAAI;YAAE,kBAAkB,GAAG,WAAW,CAAA;aACrC,IAAI,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,IAAI;YAAE,kBAAkB,GAAG,WAAW,CAAA;QAExG,iEAAiE;QACjE,IAAI,oBAAoB,GAAyB,SAAS,CAAA;QAC1D,IAAI,IAAI,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;YACpC,oBAAoB,GAAG,+BAA+B,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,kBAAkB,CAAC,CAAA;QAC/F,CAAC;QACD,OAAO;YACL,oBAAoB;YACpB,kBAAkB;YAClB,QAAQ,EAAE,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,IAAI,CAAC,kBAAkB,IAAI,IAAI,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE;SAC3H,CAAA;IACH,CAAC;CACF"}

package/lib/adapter/session-store.js

@@ -0,0 +1,76 @@
+import { establishAffinity, retireAffinity, } from '../core/governed.js';
+/** 建立/恢复 Worker 的长期 Session 并落受治理 affinity（§20）。 */
+export async function ensureWorkerSession(store, adapter, input) {
+    const current = store.getCurrentAffinityForWorker(input.kingdomId, input.workerBindingId);
+    if (current) {
+        // v0.8（Owner V0.8 PRODUCTION-PATH CLOSURE B）：session 仍 live → 复用同一 live handle。
+        // DSH 的 agents.resume 对 live session 抛 `cannot prepare ... while it is live`；
+        // 禁止 live 时强行 resume、禁止因 resume 失败新建第二个 session（same session_ref / Worker / Territory）。
+        const live = adapter.getLiveHandle(current.session_ref);
+        if (live) {
+            return {
+                handle: live,
+                created: false,
+                affinity: { affinityId: current.affinity_id, territoryId: current.territory_id, sessionRef: current.session_ref },
+            };
+        }
+        // session 不 live、但可恢复 → resume persistent session_ref
+        const handle = await adapter.resumeSession({
+            sessionRef: current.session_ref,
+            provider: input.provider,
+            model: input.model,
+        });
+        return {
+            handle,
+            created: false,
+            affinity: { affinityId: current.affinity_id, territoryId: current.territory_id, sessionRef: current.session_ref },
+        };
+    }
+    // 无 current Session → 创建 → 绑定 affinity → 更新 current projection
+    const handle = await adapter.createSession({
+        cwd: input.cwd,
+        agentPreset: input.agentPreset,
+        provider: input.provider,
+        model: input.model,
+    });
+    const session = {
+        runtimeType: adapter.runtimeType,
+        runtimeInstanceRef: adapter.identify().runtimeInstanceRef,
+        sessionRef: handle.refs.sessionRef,
+    };
+    const affinity = bindWorkerSession(store, {
+        kingdomId: input.kingdomId,
+        workerBindingId: input.workerBindingId,
+        session,
+        territoryId: input.territoryId,
+    });
+    return {
+        handle,
+        created: true,
+        affinity: { affinityId: affinity.affinityId, territoryId: affinity.territoryId, sessionRef: session.sessionRef },
+    };
+}
+/** 落 affinity Ledger + 更新 role_binding current projection（v3 模型）。 */
+export function bindWorkerSession(store, input) {
+    const affinity = establishAffinity(store, {
+        kingdomId: input.kingdomId,
+        workerBindingId: input.workerBindingId,
+        session: input.session,
+        territoryId: input.territoryId,
+    });
+    store.updateBindingProfile(input.workerBindingId, { sessionId: input.session.sessionRef }, new Date().toISOString());
+    return { affinityId: affinity.affinity_id, territoryId: affinity.territory_id, sessionRef: input.session.sessionRef };
+}
+/**
+ * 跨 Territory 迁移：retire 旧 Session（留历史证据）→ 返回后由调用方 create 新 Session 并绑定新 territory。
+ * 禁止 UPDATE affinity（v6 trigger 权威强制；本层显式走 retire 路径）。
+ */
+export function retireWorkerSession(store, input) {
+    const current = store.getCurrentAffinityForWorker(input.kingdomId, input.workerBindingId);
+    if (!current)
+        return;
+    retireAffinity(store, current.affinity_id);
+    // current projection 清空（历史归属仍可查 affinity Ledger；Current Projection ≠ History）
+    store.updateBindingProfile(input.workerBindingId, { sessionId: null }, new Date().toISOString());
+}
+//# sourceMappingURL=session-store.js.map

package/lib/adapter/session-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-store.js","sourceRoot":"","sources":["../../src/adapter/session-store.ts"],"names":[],"mappings":"AAWA,OAAO,EACL,iBAAiB,EACjB,cAAc,GAEf,MAAM,qBAAqB,CAAA;AAsB5B,oDAAoD;AACpD,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,KAAmB,EACnB,OAAuB,EACvB,KAA+B;IAE/B,MAAM,OAAO,GAAG,KAAK,CAAC,2BAA2B,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,eAAe,CAAC,CAAA;IACzF,IAAI,OAAO,EAAE,CAAC;QACZ,gFAAgF;QAChF,8EAA8E;QAC9E,wFAAwF;QACxF,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;QACvD,IAAI,IAAI,EAAE,CAAC;YACT,OAAO;gBACL,MAAM,EAAE,IAAI;gBACZ,OAAO,EAAE,KAAK;gBACd,QAAQ,EAAE,EAAE,UAAU,EAAE,OAAO,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,YAAY,EAAE,UAAU,EAAE,OAAO,CAAC,WAAW,EAAE;aAClH,CAAA;QACH,CAAC;QACD,sDAAsD;QACtD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC;YACzC,UAAU,EAAE,OAAO,CAAC,WAAW;YAC/B,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,KAAK,EAAE,KAAK,CAAC,KAAK;SACnB,CAAC,CAAA;QACF,OAAO;YACL,MAAM;YACN,OAAO,EAAE,KAAK;YACd,QAAQ,EAAE,EAAE,UAAU,EAAE,OAAO,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,YAAY,EAAE,UAAU,EAAE,OAAO,CAAC,WAAW,EAAE;SAClH,CAAA;IACH,CAAC;IACD,+DAA+D;IAC/D,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC;QACzC,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,KAAK,EAAE,KAAK,CAAC,KAAK;KACnB,CAAC,CAAA;IACF,MAAM,OAAO,GAAoB;QAC/B,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,kBAAkB,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,kBAAkB;QACzD,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU;KACnC,CAAA;IACD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,KAAK,EAAE;QACxC,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,OAAO;QACP,WAAW,EAAE,KAAK,CAAC,WAAW;KAC/B,CAAC,CAAA;IACF,OAAO;QACL,MAAM;QACN,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,WAAW,EAAE,QAAQ,CAAC,WAAW,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE;KACjH,CAAA;AACH,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,iBAAiB,CAC/B,KAAmB,EACnB,KAKC;IAED,MAAM,QAAQ,GAAG,iBAAiB,CAAC,KAAK,EAAE;QACxC,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,WAAW,EAAE,KAAK,CAAC,WAAW;KAC/B,CAAC,CAAA;IACF,KAAK,CAAC,oBAAoB,CAAC,KAAK,CAAC,eAAe,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAA;IACpH,OAAO,EAAE,UAAU,EAAE,QAAQ,CAAC,WAAW,EAAE,WAAW,EAAE,QAAQ,CAAC,YAAY,EAAE,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,CAAA;AACvH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CACjC,KAAmB,EACnB,KAAqD;IAErD,MAAM,OAAO,GAAG,KAAK,CAAC,2BAA2B,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,eAAe,CAAC,CAAA;IACzF,IAAI,CAAC,OAAO;QAAE,OAAM;IACpB,cAAc,CAAC,KAAK,EAAE,OAAO,CAAC,WAAW,CAAC,CAAA;IAC1C,8EAA8E;IAC9E,KAAK,CAAC,oBAAoB,CAAC,KAAK,CAAC,eAAe,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAA;AAClG,CAAC"}

package/lib/capability/dsh-enforcement.js

@@ -0,0 +1,241 @@
+/**
+ * 真实工具面 shape 归一化（Owner S4 seam 裁决 · A/B 组合）。
+ * 接受：字符串数组 / `[{name, description, parameters}, …]`（真实 `tools.schemas()` 实证 shape）/
+ *       对象含 `tools`/`toolSurface`/`name` 字段（preset/mountable 声明 shape）。
+ * 解析失败 → 空数组（fail-closed，不默认放行）。
+ */
+export function normalizeToolInventory(value) {
+    const names = new Set();
+    const walk = (node, isElement, depth) => {
+        if (depth > 3)
+            return;
+        if (typeof node === 'string') {
+            if (node.length > 0)
+                names.add(node);
+            return;
+        }
+        if (Array.isArray(node)) {
+            for (const item of node)
+                walk(item, true, depth + 1);
+            return;
+        }
+        if (node && typeof node === 'object') {
+            const record = node;
+            // 仅数组元素提取 name（schemas() 的 [{name,description,parameters}] 形态）；
+            // 顶层/嵌套对象自身的 name（如 preset 元信息 {id,name,description}）**不**作为工具名。
+            if (isElement && typeof record.name === 'string') {
+                names.add(record.name);
+                return;
+            }
+            // 常见声明容器字段（tools 数组 / toolSurface·toolNames 映射）
+            for (const key of ['tools', 'toolSurface', 'toolNames', 'allow']) {
+                if (record[key] !== undefined) {
+                    const value = record[key];
+                    if (Array.isArray(value)) {
+                        for (const item of value)
+                            walk(item, true, depth + 1);
+                    }
+                    else if (value && typeof value === 'object') {
+                        // 工具名映射形态：{ toolName: definition }
+                        for (const name of Object.keys(value))
+                            names.add(name);
+                    }
+                    else {
+                        walk(value, false, depth + 1);
+                    }
+                    return;
+                }
+            }
+        }
+    };
+    walk(value, false, 0);
+    return [...names];
+}
+/** preset/mountable 面解析：resolveMountable 返回值 → 工具名集（无法解析 → 空）。 */
+function presetSurfaceOf(value) {
+    if (value === undefined || value === null)
+        return [];
+    return normalizeToolInventory(value);
+}
+export const ENFORCEMENT_EVIDENCE_TYPE = 'DshEnforcementEvidence/v1';
+export const TEARDOWN_EVIDENCE_TYPE = 'DshEnforcementTeardownEvidence/v1';
+/** per-session disposer 注册表（materialize 注册、cleanup 消费；避免把 disposer 塞进 Core 类型）。 */
+const disposerRegistry = new WeakMap();
+function sessionKey(context) {
+    return context.agent.session;
+}
+/**
+ * 从真实 DSH API 重建 context-bound RuntimeEnforceableSet（Owner S4 seam 裁决：A∩B）。
+ *
+ * - A = **Runtime Tool Inventory**：`tools.schemas()`（实证返回 `[{name,description,parameters}]`）；
+ * - B = **Actual Agent Preset / Session Tool Surface**：仅用 `context.agentPresetId`（真实 agent preset：
+ *   standard/code/minimal/…）调 `presets.resolveMountable(agentPresetId)`（await + catch，**禁止未处理
+ *   rejection 泄漏**——BLOCKER #2 根因）；`permission/preset` 事件值是 PermissionPresetService 的预设名
+ *   （workspace-write 等），**绝不**传给 agentPresets（概念严格分离）。preset 无法解析 → 回退 session 装配面；
+ * - **Runtime Enforceable Tool Set = A ∩ B**；任一来源无法证明 → 空（fail-closed，不默认放行）。
+ */
+export async function readEnforceableSet(context, deps) {
+    const events = context.agent.session.events;
+    const sandboxEvents = events.filter(e => e.type === 'sandbox/mode');
+    const approvalEvents = events.filter(e => e.type === 'approval/policy');
+    const presetEvents = events.filter(e => e.type === 'permission/preset');
+    const lastSandboxRaw = sandboxEvents.length > 0 ? sandboxEvents[sandboxEvents.length - 1]?.data?.mode : undefined;
+    const lastApprovalRaw = approvalEvents.length > 0 ? approvalEvents[approvalEvents.length - 1]?.data?.policy : undefined;
+    const lastPresetRaw = presetEvents.length > 0 ? presetEvents[presetEvents.length - 1]?.data?.preset : undefined;
+    const lastSandbox = lastSandboxRaw === 'read-only' || lastSandboxRaw === 'workspace-write' || lastSandboxRaw === 'danger-full-access' ? lastSandboxRaw : null;
+    const lastApproval = lastApprovalRaw === 'never' || lastApprovalRaw === 'ask' ? lastApprovalRaw : null;
+    // permission/preset 事件值 = PermissionPresetService 预设名（materialize 的 permission.set 用）；非 agentPresetId
+    const lastPermissionPreset = typeof lastPresetRaw === 'string' ? lastPresetRaw : null;
+    // A：Runtime Tool Inventory（真实 schemas API；解析失败 → 空 → fail-closed）
+    const inventory = normalizeToolInventory(context.agent.ctx.tools?.schemas?.());
+    // B：Actual Agent Preset / Session Tool Surface
+    //    仅用 context.agentPresetId（真实 agent preset）；await + try/catch 消费一切 rejection（BLOCKER #2 修复）
+    let surface = [];
+    const agentPresetId = context.agentPresetId;
+    if (agentPresetId && deps?.presets?.resolveMountable) {
+        try {
+            const resolved = await deps.presets.resolveMountable(agentPresetId);
+            surface = presetSurfaceOf(resolved);
+        }
+        catch {
+            // resolveMountable rejection/throw → 已消费，不泄漏；B 面视为无法证明 → 回退（fail-closed）
+            surface = [];
+        }
+    }
+    if (surface.length === 0) {
+        // preset 声明面无法证明（无 agentPresetId / 解析失败 / 空面）→ 回退当前 session 装配面（live schemas 实证）
+        surface = inventory;
+    }
+    // Enforceable = A ∩ B
+    const tools = inventory.filter(name => surface.includes(name));
+    return {
+        tools,
+        sandboxMode: lastSandbox ?? null,
+        approvalPolicy: lastApproval ?? null,
+        presetId: lastPermissionPreset ?? null,
+    };
+}
+/**
+ * materialize：把 EnforcementRequest 应用到一个 **live** session。
+ * 失败即返回 {ok:false, reasons}（调用方负责 DENIED + zero execution）。
+ */
+export async function materializeDshEnforcement(deps, context, request) {
+    const reasons = [];
+    const disposers = [];
+    const applied = [];
+    const toolsApi = context.agent.ctx.tools;
+    // 1) 工具面：restrict（允许清单）+ guard（单调拒绝，body 不执行）
+    if (!toolsApi?.restrict || !toolsApi?.guard) {
+        reasons.push('agent.ctx.tools 无 restrict/guard（工具面无法 enforce）');
+    }
+    else {
+        try {
+            const d1 = toolsApi.restrict({ allow: [...request.tools] });
+            disposers.push(d1);
+            applied.push(`restrict:allow=[${request.tools.join(',')}]`);
+            const d2 = toolsApi.guard((exec) => {
+                // dsh ToolGuard 运行时契约：仅 `undefined` 放行；`null` 会被当作拒绝 reason（实测
+                // `Error: null`——正式入口 E2E seam）。允许 → 必须返回 undefined。
+                return request.tools.includes(exec.name) ? undefined : `capability not granted: ${exec.name}`;
+            });
+            disposers.push(d2);
+            applied.push('guard:monotonic-deny');
+        }
+        catch (error) {
+            reasons.push(`工具面应用失败: ${error instanceof Error ? error.message : String(error)}`);
+        }
+    }
+    // 2) 领地写边界 + 禁扩权：一键 preset 或逐 knob
+    if (request.presetId && deps.permission) {
+        try {
+            deps.permission.set(context.agent.session, request.presetId);
+            applied.push(`permission:preset=${request.presetId}`);
+        }
+        catch (error) {
+            reasons.push(`permission preset 应用失败: ${error instanceof Error ? error.message : String(error)}`);
+        }
+    }
+    else {
+        if (!deps.sandboxPolicy) {
+            reasons.push('sandboxPolicy 缺失（领地写边界无法 enforce）');
+        }
+        else {
+            try {
+                deps.sandboxPolicy.setSandboxMode(context.agent.session, request.sandboxMode);
+                applied.push(`sandbox:mode=${request.sandboxMode}`);
+            }
+            catch (error) {
+                reasons.push(`sandbox 应用失败: ${error instanceof Error ? error.message : String(error)}`);
+            }
+        }
+        if (!deps.approval) {
+            reasons.push('approval 服务缺失（禁扩权无法 enforce）');
+        }
+        else {
+            try {
+                deps.approval.setApprovalPolicy(context.agent.session, request.approvalPolicy);
+                applied.push(`approval:policy=${request.approvalPolicy}`);
+            }
+            catch (error) {
+                reasons.push(`approval 应用失败: ${error instanceof Error ? error.message : String(error)}`);
+            }
+        }
+    }
+    // 3) 证据核验：策略事件必须落到持久 session 日志（typed evidence 的诚实基础）
+    const types = new Set(context.agent.session.events.map(e => e.type));
+    if (request.sandboxMode !== 'read-only' && !types.has('sandbox/mode')) {
+        reasons.push('sandbox/mode 事件缺失（无法证明领地写边界已生效）');
+    }
+    if (!types.has('approval/policy')) {
+        reasons.push('approval/policy 事件缺失（无法证明禁扩权已生效）');
+    }
+    const evidenceEvents = ['sandbox/mode', 'approval/policy', 'permission/preset'].filter(t => types.has(t));
+    if (evidenceEvents.length > 0)
+        applied.push(`events=[${evidenceEvents.join(',')}]`);
+    if (reasons.length > 0) {
+        for (const dispose of disposers) {
+            try {
+                dispose();
+            }
+            catch { /* 忽略 */ }
+        }
+        return { ok: false, evidenceJson: null, reasons };
+    }
+    disposerRegistry.set(sessionKey(context), disposers);
+    const evidenceJson = JSON.stringify({
+        type: ENFORCEMENT_EVIDENCE_TYPE,
+        payload: {
+            presetId: request.presetId ?? null,
+            sandboxMode: request.sandboxMode,
+            approvalPolicy: request.approvalPolicy,
+            tools: request.tools,
+            guards: disposers.length,
+            sessionRef: context.sessionRef,
+            applied,
+            verifiedAt: new Date().toISOString(),
+        },
+    });
+    return { ok: true, evidenceJson, reasons };
+}
+/** cleanup：拆除 per-execution guard/restrict（session 级政策保留，由下一 plan 重设）。 */
+export async function cleanupDshEnforcement(context) {
+    const key = sessionKey(context);
+    const disposers = disposerRegistry.get(key) ?? [];
+    disposerRegistry.delete(key);
+    let disposed = 0;
+    for (const dispose of disposers) {
+        try {
+            dispose();
+            disposed++;
+        }
+        catch { /* 忽略单个失败 */ }
+    }
+    return {
+        ok: true,
+        evidenceJson: JSON.stringify({
+            type: TEARDOWN_EVIDENCE_TYPE,
+            payload: { disposed, sessionRef: context.sessionRef, at: new Date().toISOString() },
+        }),
+    };
+}
+//# sourceMappingURL=dsh-enforcement.js.map