niceeval 0.13.2-canary.35 → 0.13.2

package/dist/agents/codex.d.cts

@@ -24,15 +24,15 @@ export interface CodexPluginSpec {
     name: string;
 }
 export interface CodexConfig {
-    /** 代理 / OpenAI API key。省略时读 CODEX_API_KEY env。 */
+    /** 代理 / OpenAI API key。省略时读 OPENAI_API_KEY env。 */
     apiKey?: string;
-    /** OpenAI 兼容代理 base URL(如 https://s2a.example.com/v1)。省略时读 CODEX_BASE_URL env。 */
+    /** OpenAI 兼容代理 base URL(如 https://s2a.example.com/v1)。省略时读 OPENAI_BASE_URL env。 */
     baseUrl?: string;
     /**
      * 注入每次 Codex CLI 进程的额外环境变量。首轮 `codex exec` 与续轮 `codex exec resume`
      * 使用同一份声明；Codex 启动的 lifecycle Hook、MCP 动态 header 与命令子进程都会继承。
      * 值只经 Sandbox command options 传入，不拼进 shell 文本或写入 setup manifest，并全部按
-     * 潜在敏感值从 timing / execution / error 证据中脱敏。`CODEX_API_KEY` 仍由 `apiKey` 或
+     * 潜在敏感值从 timing / execution / error 证据中脱敏。`OPENAI_API_KEY` 仍由 `apiKey` 或
      * 宿主同名环境变量提供，Adapter 的鉴权值会覆盖这里的同名键。
      * env value 不进入 carry 身份。会改变被测行为的非敏感值必须同时声明在 Experiment flags
      * 或所属 Plugin identity；只轮换凭据不会让旧结果失效。

package/dist/agents/codex.d.mts

@@ -24,15 +24,15 @@ export interface CodexPluginSpec {
     name: string;
 }
 export interface CodexConfig {
-    /** 代理 / OpenAI API key。省略时读 CODEX_API_KEY env。 */
+    /** 代理 / OpenAI API key。省略时读 OPENAI_API_KEY env。 */
     apiKey?: string;
-    /** OpenAI 兼容代理 base URL(如 https://s2a.example.com/v1)。省略时读 CODEX_BASE_URL env。 */
+    /** OpenAI 兼容代理 base URL(如 https://s2a.example.com/v1)。省略时读 OPENAI_BASE_URL env。 */
     baseUrl?: string;
     /**
      * 注入每次 Codex CLI 进程的额外环境变量。首轮 `codex exec` 与续轮 `codex exec resume`
      * 使用同一份声明；Codex 启动的 lifecycle Hook、MCP 动态 header 与命令子进程都会继承。
      * 值只经 Sandbox command options 传入，不拼进 shell 文本或写入 setup manifest，并全部按
-     * 潜在敏感值从 timing / execution / error 证据中脱敏。`CODEX_API_KEY` 仍由 `apiKey` 或
+     * 潜在敏感值从 timing / execution / error 证据中脱敏。`OPENAI_API_KEY` 仍由 `apiKey` 或
      * 宿主同名环境变量提供，Adapter 的鉴权值会覆盖这里的同名键。
      * env value 不进入 carry 身份。会改变被测行为的非敏感值必须同时声明在 Experiment flags
      * 或所属 Plugin identity；只轮换凭据不会让旧结果失效。

package/dist/agents/codex.d.ts

@@ -24,15 +24,15 @@ export interface CodexPluginSpec {
     name: string;
 }
 export interface CodexConfig {
-    /** 代理 / OpenAI API key。省略时读 CODEX_API_KEY env。 */
+    /** 代理 / OpenAI API key。省略时读 OPENAI_API_KEY env。 */
     apiKey?: string;
-    /** OpenAI 兼容代理 base URL(如 https://s2a.example.com/v1)。省略时读 CODEX_BASE_URL env。 */
+    /** OpenAI 兼容代理 base URL(如 https://s2a.example.com/v1)。省略时读 OPENAI_BASE_URL env。 */
     baseUrl?: string;
     /**
      * 注入每次 Codex CLI 进程的额外环境变量。首轮 `codex exec` 与续轮 `codex exec resume`
      * 使用同一份声明；Codex 启动的 lifecycle Hook、MCP 动态 header 与命令子进程都会继承。
      * 值只经 Sandbox command options 传入，不拼进 shell 文本或写入 setup manifest，并全部按
-     * 潜在敏感值从 timing / execution / error 证据中脱敏。`CODEX_API_KEY` 仍由 `apiKey` 或
+     * 潜在敏感值从 timing / execution / error 证据中脱敏。`OPENAI_API_KEY` 仍由 `apiKey` 或
      * 宿主同名环境变量提供，Adapter 的鉴权值会覆盖这里的同名键。
      * env value 不进入 carry 身份。会改变被测行为的非敏感值必须同时声明在 Experiment flags
      * 或所属 Plugin identity；只轮换凭据不会让旧结果失效。

package/dist/agents/deepseek-harness.cjs

@@ -7,6 +7,9 @@ const util_ts_1 = require("../util.cjs");
 const send_failures_ts_1 = require("../context/send-failures.cjs");
 const shared_ts_1 = require("./shared.cjs");
 const npm_staged_ts_1 = require("./npm-staged.cjs");
+const commands_ts_1 = require("../sandbox/commands.cjs");
+const shell_ts_1 = require("../sandbox/shell.cjs");
+const exact_npm_plugins_ts_1 = require("./exact-npm-plugins.cjs");
 const coding_cli_versions_ts_1 = require("./coding-cli-versions.cjs");
 const DSH_EVIDENCE_COVERAGE = {
     events: { status: "unavailable", reason: "DSH headless mode exposes only the final assistant text." },
@@ -16,6 +19,47 @@ const DSH_EVIDENCE_COVERAGE = {
     status: { status: "complete" },
     data: { status: "unavailable", reason: "DSH headless mode does not expose a separate Turn.data value." },
 };
+const DSH_PNPM_VERSION = "10.17.1";
+function dshPluginLayer(cliVersion, plugins) {
+    const identity = {
+        agent: "deepseek-harness-plugins",
+        version: cliVersion,
+        revision: (0, exact_npm_plugins_ts_1.exactNpmPluginRevision)(plugins),
+    };
+    const expected = JSON.stringify(plugins);
+    const verify = `const fs=require("node:fs"),path=require("node:path");` +
+        `const expected=${expected},root=process.env.DSH_HOME+"/profiles/headless";` +
+        `const profile=JSON.parse(fs.readFileSync(path.join(root,"package.json"),"utf8"));` +
+        `const deps=profile.dependencies||{},names=Object.keys(deps);` +
+        `if(JSON.stringify(names)!==JSON.stringify(expected.map(x=>x.name)))process.exit(1);` +
+        `const bundles=profile.dsh?.profile?.bundles||[];` +
+        `const external=bundles.filter(x=>x!=="@deepseek-ai/dsh-base"&&x!=="@deepseek-ai/dsh-headless");` +
+        `if(JSON.stringify(external)!==JSON.stringify(expected.map(x=>x.name)))process.exit(1);` +
+        `for(const x of expected){if(deps[x.name]!==x.version)process.exit(1);` +
+        `const p=JSON.parse(fs.readFileSync(path.join(root,"node_modules",x.name,"package.json"),"utf8"));` +
+        `if(p.name!==x.name||p.version!==x.version||!p.dsh?.bundle)process.exit(1);}`;
+    const probeScript = `DSH_HOME="$HOME/.niceeval-dsh" node -e ${(0, shell_ts_1.shellQuote)(verify)}`;
+    return {
+        ensure: { identity, probe: (0, commands_ts_1.shell)(probeScript) },
+        installer: {
+            identity,
+            installMode: "sandbox-network",
+            install: async (sandbox, context) => {
+                const specs = plugins.map((plugin) => (0, shell_ts_1.shellQuote)(plugin.spec)).join(" ");
+                const script = `set -eu
+export DSH_HOME="$HOME/.niceeval-dsh"
+rm -rf "$DSH_HOME/profiles/headless"
+wrapper_dir="$HOME/.niceeval-dsh/.niceeval-bin"
+mkdir -p "$wrapper_dir"
+printf '%s\n' '#!/bin/sh' 'exec corepack pnpm@${DSH_PNPM_VERSION} "$@"' > "$wrapper_dir/pnpm"
+chmod +x "$wrapper_dir/pnpm"
+PATH="$wrapper_dir:$PATH" dsh plugin --profile headless add ${specs}
+DSH_HOME="$DSH_HOME" dsh --profile headless --dump-config >/dev/null`;
+                await sandbox.runShellOrThrow(script, { signal: context.signal });
+            },
+        },
+    };
+}
 function resolveApiKey(config) {
     return config?.apiKey ?? (0, util_ts_1.getEnv)("DSH_API_KEY") ?? (0, util_ts_1.requireEnv)("DEEPSEEK_API_KEY");
 }
@@ -25,6 +69,7 @@ function resolveBaseUrl(config) {
 /** DeepSeek Harness sandbox adapter backed by its one-shot headless profile. */
 function deepSeekHarnessAgent(config) {
     const version = config?.version ?? coding_cli_versions_ts_1.DEFAULT_DEEPSEEK_HARNESS_CLI_VERSION;
+    const plugins = (0, exact_npm_plugins_ts_1.normalizeExactNpmPlugins)(config?.plugins, "deepSeekHarnessAgent plugins");
     const install = (0, npm_staged_ts_1.createNpmCliInstaller)({
         identity: {
             agent: "deepseek-harness",
@@ -35,11 +80,14 @@ function deepSeekHarnessAgent(config) {
         bin: "dsh",
     });
     const homes = new Map();
+    const pluginLayer = plugins.length === 0 ? undefined : dshPluginLayer(version, plugins);
     return (0, define_ts_1.defineSandboxAgent)({
         name: "deepseek-harness",
         evidenceCoverage: DSH_EVIDENCE_COVERAGE,
-        ensure: install.ensure,
-        installers: [install.installer],
+        ensure: pluginLayer === undefined ? install.ensure : [install.ensure, pluginLayer.ensure],
+        installers: pluginLayer === undefined
+            ? [install.installer]
+            : [install.installer, pluginLayer.installer],
         async setup(sb, ctx) {
             const homeResult = await sb.runShell('test -n "$HOME" && printf "%s" "$HOME"');
             const home = homeResult.stdout.trim();

package/dist/agents/deepseek-harness.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"deepseek-harness.js","sourceRoot":"","sources":["deepseek-harness.ts"],"names":[],"mappings":";;AA+BA,oDA2EC;AA1GD,mCAAgC;AAChC,4CAAkD;AAClD,wCAAgD;AAEhD,kEAA8D;AAC9D,2CAAqC;AACrC,mDAA+E;AAC/E,qEAAiH;AACjH,MAAM,qBAAqB,GAAqB;IAC5C,MAAM,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,0DAA0D,EAAE;IACrG,OAAO,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,0DAA0D,EAAE;IACtG,QAAQ,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE;IAChC,KAAK,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,gDAAgD,EAAE;IAC1F,MAAM,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE;IAC9B,IAAI,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,+DAA+D,EAAE;CAC3G,CAAC;AASF,SAAS,aAAa,CAAC,MAA8B;IACjD,OAAO,MAAM,EAAE,MAAM,IAAI,IAAA,gBAAM,EAAC,aAAa,CAAC,IAAI,IAAA,oBAAU,EAAC,kBAAkB,CAAC,CAAC;AACrF,CAAC;AACD,SAAS,cAAc,CAAC,MAA8B;IAClD,OAAO,MAAM,EAAE,OAAO,IAAI,IAAA,gBAAM,EAAC,cAAc,CAAC,IAAI,IAAA,gBAAM,EAAC,mBAAmB,CAAC,CAAC;AACpF,CAAC;AACD,gFAAgF;AAChF,SAAgB,oBAAoB,CAAC,MAA8B;IAC/D,MAAM,OAAO,GAAG,MAAM,EAAE,OAAO,IAAI,6DAAoC,CAAC;IACxE,MAAM,OAAO,GAAG,IAAA,qCAAqB,EAAC;QAClC,QAAQ,EAAE;YACN,KAAK,EAAE,kBAAkB;YACzB,OAAO;YACP,QAAQ,EAAE,MAAM,CAAC,uDAA8B,CAAC,kBAAkB,CAAC,CAAC;SACvE;QACD,WAAW,EAAE,kBAAkB;QAC/B,GAAG,EAAE,KAAK;KACb,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IACxC,OAAO,IAAA,8BAAkB,EAAC;QACtB,IAAI,EAAE,kBAAkB;QACxB,gBAAgB,EAAE,qBAAqB;QACvC,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,UAAU,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC;QAC/B,KAAK,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG;YACf,MAAM,UAAU,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,wCAAwC,CAAC,CAAC;YAC/E,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACtC,IAAI,UAAU,CAAC,QAAQ,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBACrD,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;YAC1F,CAAC;YACD,MAAM,OAAO,GAAG,GAAG,IAAI,gBAAgB,CAAC;YACxC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YACjC,MAAM,QAAQ,GAAG;gBACb,qBAAqB,EAAE;oBACnB,QAAQ,EAAE,mBAAmB;oBAC7B,KAAK,EAAE,GAAG,CAAC,KAAK,IAAI,mBAAmB;iBAC1C;gBACD,UAAU,EAAE;oBACR,aAAa,EAAE,oBAAoB;iBACtC;aACJ,CAAC;YACF,MAAM,kBAAM,CAAC,SAAS,CAAC,EAAE,EAAE,GAAG,OAAO,gBAAgB,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC9F,CAAC;QACD,IAAI,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,eAAM,CAAC,UAAU,CAAC,eAAM,CAAC,MAAM,CAAC,eAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YACtE,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,IAAA,qCAAqB,EAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAChE,OAAO,KAAK,CAAC,CAAC,eAAM,CAAC,UAAU,CAAC;gBAC5B,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;oBAClB,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;oBACrC,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;oBACjD,IAAI,CAAC,OAAO;wBACR,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;oBACnE,MAAM,GAAG,GAAsC;wBAC3C,gBAAgB,EAAE,MAAM;wBACxB,QAAQ,EAAE,OAAO;wBACjB,GAAG,GAAG,CAAC,SAAS,EAAE,GAAG;qBACxB,CAAC;oBACF,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;oBACvC,IAAI,OAAO;wBACP,GAAG,CAAC,iBAAiB,GAAG,OAAO,CAAC;oBACpC,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE;wBACpF,GAAG;wBACH,eAAe,EAAE,CAAC,MAAM,CAAC;wBACzB,MAAM,EAAE,IAAI;wBACZ,MAAM;qBACT,CAAC,CAAC;oBACH,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;oBAC/B,IAAI,GAAG,CAAC,QAAQ,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;wBAC9B,MAAM,IAAA,kCAAe,EAAC;4BAClB,UAAU,EAAE,SAAS;4BACrB,OAAO,EAAE,GAAG,CAAC,QAAQ,KAAK,CAAC;gCACvB,CAAC,CAAC,kBAAM,CAAC,eAAe,CAAC,GAAG,EAAE,EAAE,EAAE,SAAS,CAAC;gCAC5C,CAAC,CAAC,yEAAyE;4BAC/E,OAAO,EAAE,GAAG;yBACf,CAAC,CAAC;oBACP,CAAC;oBACD,MAAM,MAAM,GAAkB,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;oBAC7E,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,WAAoB,EAAE,CAAC;gBACpD,CAAC;gBACD,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK;aAC1B,CAAC,CAAC;QACP,CAAC,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;KAC/B,CAAC,CAAC;AACP,CAAC;AACD,kBAAe,oBAAoB,CAAC","sourcesContent":["import { Effect } from \"effect\";\nimport { defineSandboxAgent } from \"../define.ts\";\nimport { getEnv, requireEnv } from \"../util.ts\";\nimport type { Agent, EvidenceCoverage, StreamEvent } from \"../types.ts\";\nimport { makeSendFailure } from \"../context/send-failures.ts\";\nimport { shared } from \"./shared.ts\";\nimport { createNpmCliInstaller, resolveAgentBinEffect } from \"./npm-staged.ts\";\nimport { AGENT_BASELINE_RECIPE_REVISION, DEFAULT_DEEPSEEK_HARNESS_CLI_VERSION, } from \"./coding-cli-versions.ts\";\nconst DSH_EVIDENCE_COVERAGE: EvidenceCoverage = {\n    events: { status: \"unavailable\", reason: \"DSH headless mode exposes only the final assistant text.\" },\n    actions: { status: \"unavailable\", reason: \"DSH headless mode does not expose tool lifecycle events.\" },\n    messages: { status: \"complete\" },\n    usage: { status: \"unavailable\", reason: \"DSH headless mode does not expose token usage.\" },\n    status: { status: \"complete\" },\n    data: { status: \"unavailable\", reason: \"DSH headless mode does not expose a separate Turn.data value.\" },\n};\nexport interface DeepSeekHarnessConfig {\n    /** DeepSeek-compatible API key. Defaults to DSH_API_KEY, then DEEPSEEK_API_KEY. */\n    apiKey?: string;\n    /** DeepSeek-compatible endpoint. Defaults to DSH_BASE_URL, then DEEPSEEK_BASE_URL. */\n    baseUrl?: string;\n    /** Exact npm version of `@deepseek-ai/dsh`. */\n    version?: string;\n}\nfunction resolveApiKey(config?: DeepSeekHarnessConfig): string {\n    return config?.apiKey ?? getEnv(\"DSH_API_KEY\") ?? requireEnv(\"DEEPSEEK_API_KEY\");\n}\nfunction resolveBaseUrl(config?: DeepSeekHarnessConfig): string | undefined {\n    return config?.baseUrl ?? getEnv(\"DSH_BASE_URL\") ?? getEnv(\"DEEPSEEK_BASE_URL\");\n}\n/** DeepSeek Harness sandbox adapter backed by its one-shot headless profile. */\nexport function deepSeekHarnessAgent(config?: DeepSeekHarnessConfig): Agent {\n    const version = config?.version ?? DEFAULT_DEEPSEEK_HARNESS_CLI_VERSION;\n    const install = createNpmCliInstaller({\n        identity: {\n            agent: \"deepseek-harness\",\n            version,\n            revision: String(AGENT_BASELINE_RECIPE_REVISION[\"deepseek-harness\"]),\n        },\n        packageName: \"@deepseek-ai/dsh\",\n        bin: \"dsh\",\n    });\n    const homes = new Map<string, string>();\n    return defineSandboxAgent({\n        name: \"deepseek-harness\",\n        evidenceCoverage: DSH_EVIDENCE_COVERAGE,\n        ensure: install.ensure,\n        installers: [install.installer],\n        async setup(sb, ctx) {\n            const homeResult = await sb.runShell('test -n \"$HOME\" && printf \"%s\" \"$HOME\"');\n            const home = homeResult.stdout.trim();\n            if (homeResult.exitCode !== 0 || !home.startsWith(\"/\")) {\n                throw new Error(\"DeepSeek Harness setup requires an absolute sandbox HOME directory\");\n            }\n            const dshHome = `${home}/.niceeval-dsh`;\n            homes.set(sb.sandboxId, dshHome);\n            const settings = {\n                \"agent-default-model\": {\n                    provider: \"deepseek-official\",\n                    model: ctx.model ?? \"deepseek-v4-flash\",\n                },\n                permission: {\n                    defaultPreset: \"danger-full-access\",\n                },\n            };\n            await shared.writeFile(sb, `${dshHome}/settings.yaml`, JSON.stringify(settings, null, 2));\n        },\n        send: (input, ctx) => Effect.runPromise(Effect.scoped(Effect.gen(function* () {\n            const dshBin = yield* resolveAgentBinEffect(ctx.sandbox, \"dsh\");\n            return yield* Effect.tryPromise({\n                try: async (signal) => {\n                    const apiKey = resolveApiKey(config);\n                    const dshHome = homes.get(ctx.sandbox.sandboxId);\n                    if (!dshHome)\n                        throw new Error(\"DeepSeek Harness setup state is unavailable\");\n                    const env: globalThis.Record<string, string> = {\n                        DEEPSEEK_API_KEY: apiKey,\n                        DSH_HOME: dshHome,\n                        ...ctx.telemetry?.env,\n                    };\n                    const baseUrl = resolveBaseUrl(config);\n                    if (baseUrl)\n                        env.DEEPSEEK_BASE_URL = baseUrl;\n                    const res = await ctx.sandbox.runCommand(dshBin, [\"--profile\", \"headless\", input.text], {\n                        env,\n                        sensitiveValues: [apiKey],\n                        stream: true,\n                        signal,\n                    });\n                    const text = res.stdout.trim();\n                    if (res.exitCode !== 0 || !text) {\n                        throw makeSendFailure({\n                            acceptance: \"unknown\",\n                            message: res.exitCode !== 0\n                                ? shared.diagnoseFailure(res, [], undefined)\n                                : \"DeepSeek Harness exited successfully without a final assistant message.\",\n                            process: res,\n                        });\n                    }\n                    const events: StreamEvent[] = [{ type: \"message\", role: \"assistant\", text }];\n                    return { events, status: \"completed\" as const };\n                },\n                catch: (cause) => cause,\n            });\n        })), { signal: ctx.signal }),\n    });\n}\nexport default deepSeekHarnessAgent;\n"]}
+{"version":3,"file":"deepseek-harness.js","sourceRoot":"","sources":["deepseek-harness.ts"],"names":[],"mappings":";;AAiFA,oDA+EC;AAhKD,mCAAgC;AAChC,4CAAkD;AAClD,wCAAgD;AAEhD,kEAA8D;AAC9D,2CAAqC;AACrC,mDAA+E;AAC/E,wDAA+C;AAC/C,kDAAiD;AAEjD,iEAAgH;AAChH,qEAAiH;AACjH,MAAM,qBAAqB,GAAqB;IAC5C,MAAM,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,0DAA0D,EAAE;IACrG,OAAO,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,0DAA0D,EAAE;IACtG,QAAQ,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE;IAChC,KAAK,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,gDAAgD,EAAE;IAC1F,MAAM,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE;IAC9B,IAAI,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,+DAA+D,EAAE;CAC3G,CAAC;AAWF,MAAM,gBAAgB,GAAG,SAAS,CAAC;AACnC,SAAS,cAAc,CAAC,UAAkB,EAAE,OAAkC;IAI1E,MAAM,QAAQ,GAAG;QACb,KAAK,EAAE,0BAA0B;QACjC,OAAO,EAAE,UAAU;QACnB,QAAQ,EAAE,IAAA,6CAAsB,EAAC,OAAO,CAAC;KAC5C,CAAC;IACF,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,wDAAwD;QACnE,kBAAkB,QAAQ,kDAAkD;QAC5E,mFAAmF;QACnF,8DAA8D;QAC9D,qFAAqF;QACrF,kDAAkD;QAClD,iGAAiG;QACjG,wFAAwF;QACxF,uEAAuE;QACvE,mGAAmG;QACnG,6EAA6E,CAAC;IAClF,MAAM,WAAW,GAAG,0CAA0C,IAAA,qBAAU,EAAC,MAAM,CAAC,EAAE,CAAC;IACnF,OAAO;QACH,MAAM,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAA,mBAAK,EAAC,WAAW,CAAC,EAAE;QAC/C,SAAS,EAAE;YACP,QAAQ;YACR,WAAW,EAAE,iBAAiB;YAC9B,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE;gBAChC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAA,qBAAU,EAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACzE,MAAM,MAAM,GAAG;;;;;gDAKiB,gBAAgB;;8DAEF,KAAK;qEACE,CAAC;gBACtD,MAAM,OAAO,CAAC,eAAe,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;YACtE,CAAC;SACJ;KACJ,CAAC;AACN,CAAC;AACD,SAAS,aAAa,CAAC,MAA8B;IACjD,OAAO,MAAM,EAAE,MAAM,IAAI,IAAA,gBAAM,EAAC,aAAa,CAAC,IAAI,IAAA,oBAAU,EAAC,kBAAkB,CAAC,CAAC;AACrF,CAAC;AACD,SAAS,cAAc,CAAC,MAA8B;IAClD,OAAO,MAAM,EAAE,OAAO,IAAI,IAAA,gBAAM,EAAC,cAAc,CAAC,IAAI,IAAA,gBAAM,EAAC,mBAAmB,CAAC,CAAC;AACpF,CAAC;AACD,gFAAgF;AAChF,SAAgB,oBAAoB,CAAC,MAA8B;IAC/D,MAAM,OAAO,GAAG,MAAM,EAAE,OAAO,IAAI,6DAAoC,CAAC;IACxE,MAAM,OAAO,GAAG,IAAA,+CAAwB,EAAC,MAAM,EAAE,OAAO,EAAE,8BAA8B,CAAC,CAAC;IAC1F,MAAM,OAAO,GAAG,IAAA,qCAAqB,EAAC;QAClC,QAAQ,EAAE;YACN,KAAK,EAAE,kBAAkB;YACzB,OAAO;YACP,QAAQ,EAAE,MAAM,CAAC,uDAA8B,CAAC,kBAAkB,CAAC,CAAC;SACvE;QACD,WAAW,EAAE,kBAAkB;QAC/B,GAAG,EAAE,KAAK;KACb,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IACxC,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACxF,OAAO,IAAA,8BAAkB,EAAC;QACtB,IAAI,EAAE,kBAAkB;QACxB,gBAAgB,EAAE,qBAAqB;QACvC,MAAM,EAAE,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC;QACzF,UAAU,EAAE,WAAW,KAAK,SAAS;YACjC,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;YACrB,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,WAAW,CAAC,SAAS,CAAC;QAChD,KAAK,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG;YACf,MAAM,UAAU,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,wCAAwC,CAAC,CAAC;YAC/E,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACtC,IAAI,UAAU,CAAC,QAAQ,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBACrD,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;YAC1F,CAAC;YACD,MAAM,OAAO,GAAG,GAAG,IAAI,gBAAgB,CAAC;YACxC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YACjC,MAAM,QAAQ,GAAG;gBACb,qBAAqB,EAAE;oBACnB,QAAQ,EAAE,mBAAmB;oBAC7B,KAAK,EAAE,GAAG,CAAC,KAAK,IAAI,mBAAmB;iBAC1C;gBACD,UAAU,EAAE;oBACR,aAAa,EAAE,oBAAoB;iBACtC;aACJ,CAAC;YACF,MAAM,kBAAM,CAAC,SAAS,CAAC,EAAE,EAAE,GAAG,OAAO,gBAAgB,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC9F,CAAC;QACD,IAAI,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,eAAM,CAAC,UAAU,CAAC,eAAM,CAAC,MAAM,CAAC,eAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YACtE,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,IAAA,qCAAqB,EAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAChE,OAAO,KAAK,CAAC,CAAC,eAAM,CAAC,UAAU,CAAC;gBAC5B,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;oBAClB,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;oBACrC,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;oBACjD,IAAI,CAAC,OAAO;wBACR,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;oBACnE,MAAM,GAAG,GAAsC;wBAC3C,gBAAgB,EAAE,MAAM;wBACxB,QAAQ,EAAE,OAAO;wBACjB,GAAG,GAAG,CAAC,SAAS,EAAE,GAAG;qBACxB,CAAC;oBACF,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;oBACvC,IAAI,OAAO;wBACP,GAAG,CAAC,iBAAiB,GAAG,OAAO,CAAC;oBACpC,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE;wBACpF,GAAG;wBACH,eAAe,EAAE,CAAC,MAAM,CAAC;wBACzB,MAAM,EAAE,IAAI;wBACZ,MAAM;qBACT,CAAC,CAAC;oBACH,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;oBAC/B,IAAI,GAAG,CAAC,QAAQ,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;wBAC9B,MAAM,IAAA,kCAAe,EAAC;4BAClB,UAAU,EAAE,SAAS;4BACrB,OAAO,EAAE,GAAG,CAAC,QAAQ,KAAK,CAAC;gCACvB,CAAC,CAAC,kBAAM,CAAC,eAAe,CAAC,GAAG,EAAE,EAAE,EAAE,SAAS,CAAC;gCAC5C,CAAC,CAAC,yEAAyE;4BAC/E,OAAO,EAAE,GAAG;yBACf,CAAC,CAAC;oBACP,CAAC;oBACD,MAAM,MAAM,GAAkB,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;oBAC7E,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,WAAoB,EAAE,CAAC;gBACpD,CAAC;gBACD,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK;aAC1B,CAAC,CAAC;QACP,CAAC,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;KAC/B,CAAC,CAAC;AACP,CAAC;AACD,kBAAe,oBAAoB,CAAC","sourcesContent":["import { Effect } from \"effect\";\nimport { defineSandboxAgent } from \"../define.ts\";\nimport { getEnv, requireEnv } from \"../util.ts\";\nimport type { Agent, EvidenceCoverage, StreamEvent } from \"../types.ts\";\nimport { makeSendFailure } from \"../context/send-failures.ts\";\nimport { shared } from \"./shared.ts\";\nimport { createNpmCliInstaller, resolveAgentBinEffect } from \"./npm-staged.ts\";\nimport { shell } from \"../sandbox/commands.ts\";\nimport { shellQuote } from \"../sandbox/shell.ts\";\nimport type { AgentEnsure, AgentInstaller } from \"./types.ts\";\nimport { exactNpmPluginRevision, normalizeExactNpmPlugins, type ExactNpmPlugin, } from \"./exact-npm-plugins.ts\";\nimport { AGENT_BASELINE_RECIPE_REVISION, DEFAULT_DEEPSEEK_HARNESS_CLI_VERSION, } from \"./coding-cli-versions.ts\";\nconst DSH_EVIDENCE_COVERAGE: EvidenceCoverage = {\n    events: { status: \"unavailable\", reason: \"DSH headless mode exposes only the final assistant text.\" },\n    actions: { status: \"unavailable\", reason: \"DSH headless mode does not expose tool lifecycle events.\" },\n    messages: { status: \"complete\" },\n    usage: { status: \"unavailable\", reason: \"DSH headless mode does not expose token usage.\" },\n    status: { status: \"complete\" },\n    data: { status: \"unavailable\", reason: \"DSH headless mode does not expose a separate Turn.data value.\" },\n};\nexport interface DeepSeekHarnessConfig {\n    /** DeepSeek-compatible API key. Defaults to DSH_API_KEY, then DEEPSEEK_API_KEY. */\n    apiKey?: string;\n    /** DeepSeek-compatible endpoint. Defaults to DSH_BASE_URL, then DEEPSEEK_BASE_URL. */\n    baseUrl?: string;\n    /** Exact npm version of `@deepseek-ai/dsh`. */\n    version?: string;\n    /** Native DSH bundles as exact npm package@version declarations. */\n    plugins?: readonly string[];\n}\nconst DSH_PNPM_VERSION = \"10.17.1\";\nfunction dshPluginLayer(cliVersion: string, plugins: readonly ExactNpmPlugin[]): {\n    ensure: AgentEnsure;\n    installer: AgentInstaller;\n} {\n    const identity = {\n        agent: \"deepseek-harness-plugins\",\n        version: cliVersion,\n        revision: exactNpmPluginRevision(plugins),\n    };\n    const expected = JSON.stringify(plugins);\n    const verify = `const fs=require(\"node:fs\"),path=require(\"node:path\");` +\n        `const expected=${expected},root=process.env.DSH_HOME+\"/profiles/headless\";` +\n        `const profile=JSON.parse(fs.readFileSync(path.join(root,\"package.json\"),\"utf8\"));` +\n        `const deps=profile.dependencies||{},names=Object.keys(deps);` +\n        `if(JSON.stringify(names)!==JSON.stringify(expected.map(x=>x.name)))process.exit(1);` +\n        `const bundles=profile.dsh?.profile?.bundles||[];` +\n        `const external=bundles.filter(x=>x!==\"@deepseek-ai/dsh-base\"&&x!==\"@deepseek-ai/dsh-headless\");` +\n        `if(JSON.stringify(external)!==JSON.stringify(expected.map(x=>x.name)))process.exit(1);` +\n        `for(const x of expected){if(deps[x.name]!==x.version)process.exit(1);` +\n        `const p=JSON.parse(fs.readFileSync(path.join(root,\"node_modules\",x.name,\"package.json\"),\"utf8\"));` +\n        `if(p.name!==x.name||p.version!==x.version||!p.dsh?.bundle)process.exit(1);}`;\n    const probeScript = `DSH_HOME=\"$HOME/.niceeval-dsh\" node -e ${shellQuote(verify)}`;\n    return {\n        ensure: { identity, probe: shell(probeScript) },\n        installer: {\n            identity,\n            installMode: \"sandbox-network\",\n            install: async (sandbox, context) => {\n                const specs = plugins.map((plugin) => shellQuote(plugin.spec)).join(\" \");\n                const script = `set -eu\nexport DSH_HOME=\"$HOME/.niceeval-dsh\"\nrm -rf \"$DSH_HOME/profiles/headless\"\nwrapper_dir=\"$HOME/.niceeval-dsh/.niceeval-bin\"\nmkdir -p \"$wrapper_dir\"\nprintf '%s\\n' '#!/bin/sh' 'exec corepack pnpm@${DSH_PNPM_VERSION} \"$@\"' > \"$wrapper_dir/pnpm\"\nchmod +x \"$wrapper_dir/pnpm\"\nPATH=\"$wrapper_dir:$PATH\" dsh plugin --profile headless add ${specs}\nDSH_HOME=\"$DSH_HOME\" dsh --profile headless --dump-config >/dev/null`;\n                await sandbox.runShellOrThrow(script, { signal: context.signal });\n            },\n        },\n    };\n}\nfunction resolveApiKey(config?: DeepSeekHarnessConfig): string {\n    return config?.apiKey ?? getEnv(\"DSH_API_KEY\") ?? requireEnv(\"DEEPSEEK_API_KEY\");\n}\nfunction resolveBaseUrl(config?: DeepSeekHarnessConfig): string | undefined {\n    return config?.baseUrl ?? getEnv(\"DSH_BASE_URL\") ?? getEnv(\"DEEPSEEK_BASE_URL\");\n}\n/** DeepSeek Harness sandbox adapter backed by its one-shot headless profile. */\nexport function deepSeekHarnessAgent(config?: DeepSeekHarnessConfig): Agent {\n    const version = config?.version ?? DEFAULT_DEEPSEEK_HARNESS_CLI_VERSION;\n    const plugins = normalizeExactNpmPlugins(config?.plugins, \"deepSeekHarnessAgent plugins\");\n    const install = createNpmCliInstaller({\n        identity: {\n            agent: \"deepseek-harness\",\n            version,\n            revision: String(AGENT_BASELINE_RECIPE_REVISION[\"deepseek-harness\"]),\n        },\n        packageName: \"@deepseek-ai/dsh\",\n        bin: \"dsh\",\n    });\n    const homes = new Map<string, string>();\n    const pluginLayer = plugins.length === 0 ? undefined : dshPluginLayer(version, plugins);\n    return defineSandboxAgent({\n        name: \"deepseek-harness\",\n        evidenceCoverage: DSH_EVIDENCE_COVERAGE,\n        ensure: pluginLayer === undefined ? install.ensure : [install.ensure, pluginLayer.ensure],\n        installers: pluginLayer === undefined\n            ? [install.installer]\n            : [install.installer, pluginLayer.installer],\n        async setup(sb, ctx) {\n            const homeResult = await sb.runShell('test -n \"$HOME\" && printf \"%s\" \"$HOME\"');\n            const home = homeResult.stdout.trim();\n            if (homeResult.exitCode !== 0 || !home.startsWith(\"/\")) {\n                throw new Error(\"DeepSeek Harness setup requires an absolute sandbox HOME directory\");\n            }\n            const dshHome = `${home}/.niceeval-dsh`;\n            homes.set(sb.sandboxId, dshHome);\n            const settings = {\n                \"agent-default-model\": {\n                    provider: \"deepseek-official\",\n                    model: ctx.model ?? \"deepseek-v4-flash\",\n                },\n                permission: {\n                    defaultPreset: \"danger-full-access\",\n                },\n            };\n            await shared.writeFile(sb, `${dshHome}/settings.yaml`, JSON.stringify(settings, null, 2));\n        },\n        send: (input, ctx) => Effect.runPromise(Effect.scoped(Effect.gen(function* () {\n            const dshBin = yield* resolveAgentBinEffect(ctx.sandbox, \"dsh\");\n            return yield* Effect.tryPromise({\n                try: async (signal) => {\n                    const apiKey = resolveApiKey(config);\n                    const dshHome = homes.get(ctx.sandbox.sandboxId);\n                    if (!dshHome)\n                        throw new Error(\"DeepSeek Harness setup state is unavailable\");\n                    const env: globalThis.Record<string, string> = {\n                        DEEPSEEK_API_KEY: apiKey,\n                        DSH_HOME: dshHome,\n                        ...ctx.telemetry?.env,\n                    };\n                    const baseUrl = resolveBaseUrl(config);\n                    if (baseUrl)\n                        env.DEEPSEEK_BASE_URL = baseUrl;\n                    const res = await ctx.sandbox.runCommand(dshBin, [\"--profile\", \"headless\", input.text], {\n                        env,\n                        sensitiveValues: [apiKey],\n                        stream: true,\n                        signal,\n                    });\n                    const text = res.stdout.trim();\n                    if (res.exitCode !== 0 || !text) {\n                        throw makeSendFailure({\n                            acceptance: \"unknown\",\n                            message: res.exitCode !== 0\n                                ? shared.diagnoseFailure(res, [], undefined)\n                                : \"DeepSeek Harness exited successfully without a final assistant message.\",\n                            process: res,\n                        });\n                    }\n                    const events: StreamEvent[] = [{ type: \"message\", role: \"assistant\", text }];\n                    return { events, status: \"completed\" as const };\n                },\n                catch: (cause) => cause,\n            });\n        })), { signal: ctx.signal }),\n    });\n}\nexport default deepSeekHarnessAgent;\n"]}

package/dist/agents/deepseek-harness.d.cts

@@ -6,6 +6,8 @@ export interface DeepSeekHarnessConfig {
     baseUrl?: string;
     /** Exact npm version of `@deepseek-ai/dsh`. */
     version?: string;
+    /** Native DSH bundles as exact npm package@version declarations. */
+    plugins?: readonly string[];
 }
 /** DeepSeek Harness sandbox adapter backed by its one-shot headless profile. */
 export declare function deepSeekHarnessAgent(config?: DeepSeekHarnessConfig): Agent;

package/dist/agents/deepseek-harness.d.mts

@@ -6,6 +6,8 @@ export interface DeepSeekHarnessConfig {
     baseUrl?: string;
     /** Exact npm version of `@deepseek-ai/dsh`. */
     version?: string;
+    /** Native DSH bundles as exact npm package@version declarations. */
+    plugins?: readonly string[];
 }
 /** DeepSeek Harness sandbox adapter backed by its one-shot headless profile. */
 export declare function deepSeekHarnessAgent(config?: DeepSeekHarnessConfig): Agent;

package/dist/agents/deepseek-harness.d.ts

@@ -6,6 +6,8 @@ export interface DeepSeekHarnessConfig {
     baseUrl?: string;
     /** Exact npm version of `@deepseek-ai/dsh`. */
     version?: string;
+    /** Native DSH bundles as exact npm package@version declarations. */
+    plugins?: readonly string[];
 }
 /** DeepSeek Harness sandbox adapter backed by its one-shot headless profile. */
 export declare function deepSeekHarnessAgent(config?: DeepSeekHarnessConfig): Agent;

package/dist/agents/exact-npm-plugins.cjs

@@ -0,0 +1,28 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.normalizeExactNpmPlugins = normalizeExactNpmPlugins;
+exports.exactNpmPluginRevision = exactNpmPluginRevision;
+const PACKAGE = String.raw `(?:@[a-z0-9][a-z0-9._-]*/)?[a-z0-9][a-z0-9._-]*`;
+const VERSION = String.raw `\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?(?:\+[0-9A-Za-z.-]+)?`;
+const EXACT_NPM_SPEC = new RegExp(`^(${PACKAGE})@(${VERSION})$`);
+/** Keep declaration order, but reject tags/ranges/duplicates before a Sandbox is created. */
+function normalizeExactNpmPlugins(input, label) {
+    const seen = new Set();
+    return Object.freeze((input ?? []).map((raw, index) => {
+        const spec = raw.trim();
+        const match = EXACT_NPM_SPEC.exec(spec);
+        if (match === null) {
+            throw new TypeError(`${label}[${index}] must be an exact npm package@version (tags and ranges are not accepted).`);
+        }
+        const [, name, version] = match;
+        if (seen.has(name))
+            throw new TypeError(`${label} contains duplicate package ${name}.`);
+        seen.add(name);
+        return Object.freeze({ name, version, spec });
+    }));
+}
+/** Readable identity: the normalized declaration itself is persisted in agentInstalls/config identity. */
+function exactNpmPluginRevision(plugins) {
+    return `exact-npm-v1:${plugins.map((plugin) => plugin.spec).join(",")}`;
+}
+//# sourceMappingURL=exact-npm-plugins.cjs.map

package/dist/agents/exact-npm-plugins.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"exact-npm-plugins.js","sourceRoot":"","sources":["exact-npm-plugins.ts"],"names":[],"mappings":";;AAUA,4DAcC;AAED,wDAEC;AAtBD,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,iDAAiD,CAAC;AAC7E,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,wDAAwD,CAAC;AACpF,MAAM,cAAc,GAAG,IAAI,MAAM,CAAC,KAAK,OAAO,MAAM,OAAO,IAAI,CAAC,CAAC;AACjE,6FAA6F;AAC7F,SAAgB,wBAAwB,CAAC,KAAoC,EAAE,KAAa;IACxF,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;QAClD,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QACxB,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACjB,MAAM,IAAI,SAAS,CAAC,GAAG,KAAK,IAAI,KAAK,4EAA4E,CAAC,CAAC;QACvH,CAAC;QACD,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,KAAK,CAAC;QAChC,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;YACd,MAAM,IAAI,SAAS,CAAC,GAAG,KAAK,+BAA+B,IAAI,GAAG,CAAC,CAAC;QACxE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACf,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC,CAAC;AACR,CAAC;AACD,0GAA0G;AAC1G,SAAgB,sBAAsB,CAAC,OAAkC;IACrE,OAAO,gBAAgB,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;AAC5E,CAAC","sourcesContent":["/** A provider-owned native plugin pinned to one immutable npm version. */\nexport interface ExactNpmPlugin {\n    readonly name: string;\n    readonly version: string;\n    readonly spec: string;\n}\nconst PACKAGE = String.raw `(?:@[a-z0-9][a-z0-9._-]*/)?[a-z0-9][a-z0-9._-]*`;\nconst VERSION = String.raw `\\d+\\.\\d+\\.\\d+(?:-[0-9A-Za-z.-]+)?(?:\\+[0-9A-Za-z.-]+)?`;\nconst EXACT_NPM_SPEC = new RegExp(`^(${PACKAGE})@(${VERSION})$`);\n/** Keep declaration order, but reject tags/ranges/duplicates before a Sandbox is created. */\nexport function normalizeExactNpmPlugins(input: readonly string[] | undefined, label: string): readonly ExactNpmPlugin[] {\n    const seen = new Set<string>();\n    return Object.freeze((input ?? []).map((raw, index) => {\n        const spec = raw.trim();\n        const match = EXACT_NPM_SPEC.exec(spec);\n        if (match === null) {\n            throw new TypeError(`${label}[${index}] must be an exact npm package@version (tags and ranges are not accepted).`);\n        }\n        const [, name, version] = match;\n        if (seen.has(name))\n            throw new TypeError(`${label} contains duplicate package ${name}.`);\n        seen.add(name);\n        return Object.freeze({ name, version, spec });\n    }));\n}\n/** Readable identity: the normalized declaration itself is persisted in agentInstalls/config identity. */\nexport function exactNpmPluginRevision(plugins: readonly ExactNpmPlugin[]): string {\n    return `exact-npm-v1:${plugins.map((plugin) => plugin.spec).join(\",\")}`;\n}\n"]}

package/dist/agents/exact-npm-plugins.d.cts

@@ -0,0 +1,10 @@
+/** A provider-owned native plugin pinned to one immutable npm version. */
+export interface ExactNpmPlugin {
+    readonly name: string;
+    readonly version: string;
+    readonly spec: string;
+}
+/** Keep declaration order, but reject tags/ranges/duplicates before a Sandbox is created. */
+export declare function normalizeExactNpmPlugins(input: readonly string[] | undefined, label: string): readonly ExactNpmPlugin[];
+/** Readable identity: the normalized declaration itself is persisted in agentInstalls/config identity. */
+export declare function exactNpmPluginRevision(plugins: readonly ExactNpmPlugin[]): string;

package/dist/agents/exact-npm-plugins.d.mts

@@ -0,0 +1,10 @@
+/** A provider-owned native plugin pinned to one immutable npm version. */
+export interface ExactNpmPlugin {
+    readonly name: string;
+    readonly version: string;
+    readonly spec: string;
+}
+/** Keep declaration order, but reject tags/ranges/duplicates before a Sandbox is created. */
+export declare function normalizeExactNpmPlugins(input: readonly string[] | undefined, label: string): readonly ExactNpmPlugin[];
+/** Readable identity: the normalized declaration itself is persisted in agentInstalls/config identity. */
+export declare function exactNpmPluginRevision(plugins: readonly ExactNpmPlugin[]): string;

package/dist/agents/exact-npm-plugins.d.ts

@@ -0,0 +1,10 @@
+/** A provider-owned native plugin pinned to one immutable npm version. */
+export interface ExactNpmPlugin {
+    readonly name: string;
+    readonly version: string;
+    readonly spec: string;
+}
+/** Keep declaration order, but reject tags/ranges/duplicates before a Sandbox is created. */
+export declare function normalizeExactNpmPlugins(input: readonly string[] | undefined, label: string): readonly ExactNpmPlugin[];
+/** Readable identity: the normalized declaration itself is persisted in agentInstalls/config identity. */
+export declare function exactNpmPluginRevision(plugins: readonly ExactNpmPlugin[]): string;

package/dist/agents/exact-npm-plugins.js

@@ -0,0 +1,8 @@
+import { createRequire as __niceevalCreateRequire } from "node:module";
+const __niceevalRequire = __niceevalCreateRequire(import.meta.url);
+const __niceevalCanonical = __niceevalRequire("./exact-npm-plugins.cjs");
+const __niceevalExport0 = __niceevalCanonical["exactNpmPluginRevision"];
+export { __niceevalExport0 as exactNpmPluginRevision };
+const __niceevalExport1 = __niceevalCanonical["normalizeExactNpmPlugins"];
+export { __niceevalExport1 as normalizeExactNpmPlugins };
+//# sourceMappingURL=exact-npm-plugins.js.map

package/dist/agents/exact-npm-plugins.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"exact-npm-plugins.js","sources":[],"names":[],"mappings":""}

package/dist/agents/openclaw.cjs

@@ -14,6 +14,9 @@ const coding_cli_versions_ts_1 = require("./coding-cli-versions.cjs");
 const npm_staged_ts_1 = require("./npm-staged.cjs");
 const node_crypto_1 = require("node:crypto");
 const send_failures_ts_1 = require("../context/send-failures.cjs");
+const commands_ts_1 = require("../sandbox/commands.cjs");
+const shell_ts_1 = require("../sandbox/shell.cjs");
+const exact_npm_plugins_ts_1 = require("./exact-npm-plugins.cjs");
 // ───────────────────────────────────────────────────────────────────────────
 // OpenClaw 的 agent adapter(沙箱型)。
 //
@@ -29,6 +32,40 @@ const send_failures_ts_1 = require("../context/send-failures.cjs");
 const SKILL_DIR = ".agents/skills";
 /** 自定义 OpenAI 兼容网关在 openclaw.json 里的 provider id。 */
 const COMPAT_PROVIDER = "compat";
+function openClawPluginLayer(cliVersion, plugins) {
+    const identity = {
+        agent: "openclaw-plugins",
+        version: cliVersion,
+        revision: (0, exact_npm_plugins_ts_1.exactNpmPluginRevision)(plugins),
+    };
+    const verifyFiles = `const fs=require("node:fs"),path=require("node:path");` +
+        `const expected=${JSON.stringify(plugins)},base=path.join(process.env.HOME,".openclaw");` +
+        `const projects=path.join(base,"npm/projects"),found=[];` +
+        `for(const dir of fs.readdirSync(projects)){const root=path.join(projects,dir),p=JSON.parse(fs.readFileSync(path.join(root,"package.json"),"utf8"));` +
+        `for(const [name,version] of Object.entries(p.dependencies||{})){const pkg=JSON.parse(fs.readFileSync(path.join(root,"node_modules",name,"package.json"),"utf8"));` +
+        `const manifest=JSON.parse(fs.readFileSync(path.join(root,"node_modules",name,"openclaw.plugin.json"),"utf8"));found.push({name,version,pkgVersion:pkg.version,id:manifest.id});}}` +
+        `if(found.length!==expected.length)process.exit(1);` +
+        `const config=JSON.parse(fs.readFileSync(path.join(base,"openclaw.json"),"utf8"));` +
+        `const ordered=expected.map(e=>found.find(x=>x.name===e.name&&x.version===e.version));` +
+        `for(const x of ordered){if(!x||x.pkgVersion!==x.version||!config.plugins?.entries?.[x.id]?.enabled||!/^[A-Za-z0-9._-]+$/.test(x.id))process.exit(1);}`;
+    return {
+        ensure: { identity, probe: (0, commands_ts_1.shell)(`node -e ${(0, shell_ts_1.shellQuote)(verifyFiles)}`) },
+        installer: {
+            identity,
+            installMode: "sandbox-network",
+            install: async (sandbox, context) => {
+                const installs = plugins
+                    .map((plugin) => `openclaw plugins install --pin ${(0, shell_ts_1.shellQuote)(plugin.spec)}`)
+                    .join("\n");
+                const script = `set -eu
+ids=$(openclaw plugins list --json | node -e ${(0, shell_ts_1.shellQuote)(`let s="";process.stdin.on("data",c=>s+=c).on("end",()=>{const x=JSON.parse(s);for(const p of x.plugins||[])if(p.origin==="global")console.log(p.id)})`)})
+for id in $ids; do openclaw plugins uninstall --force "$id"; done
+${installs}`;
+                await sandbox.runShellOrThrow(script, { signal: context.signal });
+            },
+        },
+    };
+}
 function resolveApiKey(config) {
     return config?.apiKey ?? (0, util_ts_1.getEnv)("OPENCLAW_API_KEY") ?? (0, util_ts_1.requireEnv)("ANTHROPIC_API_KEY");
 }
@@ -54,6 +91,7 @@ function resolveModelFlag(model, hasCompatBase) {
  */
 function openClawAgent(config) {
     const version = config?.version ?? coding_cli_versions_ts_1.DEFAULT_OPENCLAW_CLI_VERSION;
+    const plugins = (0, exact_npm_plugins_ts_1.normalizeExactNpmPlugins)(config?.plugins, "openClawAgent plugins");
     const { ensure, installer } = (0, npm_staged_ts_1.createNpmCliInstaller)({
         identity: {
             agent: "openclaw",
@@ -63,6 +101,7 @@ function openClawAgent(config) {
         packageName: "openclaw",
         bin: "openclaw",
     });
+    const pluginLayer = plugins.length === 0 ? undefined : openClawPluginLayer(version, plugins);
     return (0, define_ts_1.defineSandboxAgent)({
         name: "openclaw",
         // e2e 已用真实 CLI 证明 session transcript 能给出工具轨 / 消息 / 用量;
@@ -71,8 +110,8 @@ function openClawAgent(config) {
         // OpenClaw 没有专属 span 方言 mapper:原生 span 走 canonical 通用 heuristic。
         // OTel 内容采集关闭时只影响 trace 证据面;行为轨(下面的 transcript 解析)不受影响。
         spanMapper: canonical_ts_1.mapGenericSpans,
-        ensure,
-        installers: [installer],
+        ensure: pluginLayer === undefined ? ensure : [ensure, pluginLayer.ensure],
+        installers: pluginLayer === undefined ? [installer] : [installer, pluginLayer.installer],
         tracing: {
             protocol: "http/protobuf",
             env: (endpoint) => ({
@@ -88,7 +127,17 @@ function openClawAgent(config) {
                 // OpenAI 兼容网关走自定义 provider + openai-completions;
                 // skipBootstrap 跳过首轮身份仪式,否则 agent 会先问 "Who am I"。
                 // workspace 钉沙箱工作目录,文件工具写到 eval 可见的路径。
+                let persistentConfig = {};
+                try {
+                    const existing = await sb.runShell('cat "$HOME/.openclaw/openclaw.json"');
+                    if (existing.exitCode === 0)
+                        persistentConfig = JSON.parse(existing.stdout);
+                }
+                catch {
+                    persistentConfig = {};
+                }
                 const openclawConfig = {
+                    ...persistentConfig,
                     agents: {
                         defaults: {
                             skipBootstrap: true,

package/dist/agents/openclaw.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"openclaw.js","sourceRoot":"","sources":["openclaw.ts"],"names":[],"mappings":";;AAiEA,sCAmLC;AApPD,4CAAkD;AAClD,mCAAgC;AAChC,wCAAgD;AAChD,2CAAqC;AACrC,2CAAuH;AACvH,4DAA4D;AAC5D,yEAAgF;AAChF,6DAA4F;AAC5F,2DAAqE;AACrE,qEAAwG;AACxG,mDAA+E;AAC/E,6CAAyC;AAEzC,kEAAwF;AACxF,8EAA8E;AAC9E,iCAAiC;AACjC,EAAE;AACF,mEAAmE;AACnE,0DAA0D;AAC1D,0FAA0F;AAC1F,EAAE;AACF,oEAAoE;AACpE,qDAAqD;AACrD,sBAAsB;AACtB,8EAA8E;AAC9E,wEAAwE;AACxE,MAAM,SAAS,GAAG,gBAAgB,CAAC;AACnC,qDAAqD;AACrD,MAAM,eAAe,GAAG,QAAQ,CAAC;AAcjC,SAAS,aAAa,CAAC,MAAuB;IAC1C,OAAO,MAAM,EAAE,MAAM,IAAI,IAAA,gBAAM,EAAC,kBAAkB,CAAC,IAAI,IAAA,oBAAU,EAAC,mBAAmB,CAAC,CAAC;AAC3F,CAAC;AACD,SAAS,cAAc,CAAC,MAAuB;IAC3C,OAAO,MAAM,EAAE,OAAO,IAAI,IAAA,gBAAM,EAAC,mBAAmB,CAAC,CAAC;AAC1D,CAAC;AACD,mEAAmE;AACnE,SAAS,gBAAgB,CAAC,KAAyB,EAAE,aAAsB;IACvE,IAAI,CAAC,KAAK;QACN,OAAO,SAAS,CAAC;IACrB,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;QACnB,OAAO,KAAK,CAAC;IACjB,OAAO,aAAa,CAAC,CAAC,CAAC,GAAG,eAAe,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;AACjE,CAAC;AACD;;;;;;;;GAQG;AACH,SAAgB,aAAa,CAAC,MAAuB;IACjD,MAAM,OAAO,GAAG,MAAM,EAAE,OAAO,IAAI,qDAA4B,CAAC;IAChE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,IAAA,qCAAqB,EAAC;QAChD,QAAQ,EAAE;YACN,KAAK,EAAE,UAAU;YACjB,OAAO;YACP,QAAQ,EAAE,MAAM,CAAC,uDAA8B,CAAC,QAAQ,CAAC;SAC5D;QACD,WAAW,EAAE,UAAU;QACvB,GAAG,EAAE,UAAU;KAClB,CAAC,CAAC;IACH,OAAO,IAAA,8BAAkB,EAAC;QACtB,IAAI,EAAE,UAAU;QAChB,uDAAuD;QACvD,sDAAsD;QACtD,gBAAgB,EAAE,sCAAwB;QAC1C,iEAAiE;QACjE,wDAAwD;QACxD,UAAU,EAAE,8BAAe;QAC3B,MAAM;QACN,UAAU,EAAE,CAAC,SAAS,CAAC;QACvB,OAAO,EAAE;YACL,QAAQ,EAAE,eAAe;YACzB,GAAG,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;gBAChB,oBAAoB,EAAE,MAAM;gBAC5B,kCAAkC,EAAE,QAAQ;gBAC5C,kCAAkC,EAAE,eAAe;aACtD,CAAC;SACL;QACD,KAAK,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG;YACf,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;YACvC,IAAI,OAAO,EAAE,CAAC;gBACV,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;gBACrC,iDAAiD;gBACjD,kDAAkD;gBAClD,uCAAuC;gBACvC,MAAM,cAAc,GAAG;oBACnB,MAAM,EAAE;wBACJ,QAAQ,EAAE;4BACN,aAAa,EAAE,IAAI;4BACnB,SAAS,EAAE,EAAE,CAAC,OAAO;yBACxB;qBACJ;oBACD,MAAM,EAAE;wBACJ,IAAI,EAAE,OAAO;wBACb,SAAS,EAAE;4BACP,CAAC,eAAe,CAAC,EAAE;gCACf,OAAO;gCACP,MAAM;gCACN,GAAG,EAAE,oBAAoB;gCACzB,MAAM,EAAE;oCACJ,EAAE,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,cAAc,EAAE;oCAC5C,EAAE,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,cAAc,EAAE;oCAC5C,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE;iCACrC;6BACJ;yBACJ;qBACJ;iBACJ,CAAC;gBACF,MAAM,kBAAM,CAAC,SAAS,CAAC,EAAE,EAAE,2BAA2B,EAAE,IAAI,CAAC,SAAS,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,eAAe,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBAChI,kCAAkC;gBAClC,MAAM,kBAAM,CAAC,SAAS,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,OAAO,cAAc,EAAE,0CAA0C,CAAC,CAAC;gBACpG,MAAM,kBAAM,CAAC,SAAS,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,OAAO,UAAU,EAAE,oCAAoC,CAAC,CAAC;gBAC1F,MAAM,kBAAM,CAAC,SAAS,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,OAAO,UAAU,EAAE,uEAAuE,CAAC,CAAC;YACjI,CAAC;YACD,MAAM,QAAQ,GAAuB,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;YACpD,IAAI,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;gBACzB,QAAQ,CAAC,MAAM,GAAG,MAAM,IAAA,yBAAa,EAAC,EAAE,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC;gBAC7E,sBAAsB;gBACtB,MAAM,IAAA,oCAAwB,EAAC,EAAE,EAAE,IAAA,qCAAyB,EAAC,SAAS,EAAE,IAAA,+BAAmB,EAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACnH,CAAC;YACD,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;gBACzB,GAAG,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;YAC9B,CAAC;QACL,CAAC;QACD,IAAI,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,eAAM,CAAC,UAAU,CAAC,eAAM,CAAC,MAAM,CAAC,eAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YACtE,MAAM,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC;YACvB,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,IAAA,qCAAqB,EAAC,EAAE,EAAE,UAAU,CAAC,CAAC;YACjE,OAAO,KAAK,CAAC,CAAC,eAAM,CAAC,UAAU,CAAC;gBAC5B,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;oBAClB,kDAAkD;oBAClD,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,EAAE,IAAI,YAAY,EAAE,CAAC,SAAS,IAAI,IAAA,wBAAU,GAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;oBAC3F,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;oBAC/B,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;oBACvC,MAAM,IAAI,GAAG,CAAC,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,SAAS,EAAE,WAAW,EAAE,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;oBAChG,MAAM,KAAK,GAAG,gBAAgB,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;oBAC5D,IAAI,KAAK;wBACL,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;oBAChC,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;oBACrC,MAAM,GAAG,GAAsC;wBAC3C,gBAAgB,EAAE,MAAM;wBACxB,iBAAiB,EAAE,MAAM;wBACzB,cAAc,EAAE,MAAM;wBACtB,GAAG,GAAG,CAAC,SAAS,EAAE,GAAG;qBACxB,CAAC;oBACF,IAAI,OAAO,EAAE,CAAC;wBACV,GAAG,CAAC,iBAAiB,GAAG,OAAO,CAAC;wBAChC,GAAG,CAAC,eAAe,GAAG,OAAO,CAAC;oBAClC,CAAC;oBACD,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,UAAU,CAAC,WAAW,EAAE,IAAI,EAAE;wBAC/C,GAAG;wBACH,eAAe,EAAE,CAAC,MAAM,CAAC;wBACzB,MAAM,EAAE,IAAI;wBACZ,MAAM;qBACT,CAAC,CAAC;oBACH,MAAM,OAAO,GAAG,IAAA,kCAAoB,EAAC,GAAG,CAAC,MAAM,CAAC,CAAC;oBACjD,6DAA6D;oBAC7D,qBAAqB;oBACrB,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;oBACvC,kCAAkC;oBAClC,qDAAqD;oBACrD,mDAAmD;oBACnD,+CAA+C;oBAC/C,IAAI,GAAuB,CAAC;oBAC5B,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;wBACtB,IAAI,CAAC;4BACD,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;wBACjD,CAAC;wBACD,MAAM,CAAC;4BACH,GAAG,GAAG,SAAS,CAAC;wBACpB,CAAC;oBACL,CAAC;oBACD,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;wBACpB,GAAG,GAAG,MAAM,kBAAM,CAAC,kBAAkB,CAAC,EAAE,EAAE,oBAAoB,EAAE;4BAC5D,WAAW,EAAE,uBAAuB;yBACvC,CAAC,CAAC;oBACP,CAAC;oBACD,MAAM,MAAM,GAAG,IAAA,qCAAuB,EAAC,GAAG,CAAC,CAAC;oBAC5C,MAAM,MAAM,GAAkB,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;oBACjD,qDAAqD;oBACrD,+CAA+C;oBAC/C,IAAI,oBAAsD,CAAC;oBAC3D,IAAI,GAAG,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;wBAClD,MAAM,MAAM,GAAG,2EAA2E,CAAC;wBAC3F,oBAAoB,GAAG;4BACnB,MAAM,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE;4BACzC,OAAO,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE;4BAC1C,KAAK,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE;yBAC3C,CAAC;wBACF,GAAG,CAAC,GAAG,CAAC,4GAA4G,CAAC,CAAC;wBACtH,IAAI,OAAO,CAAC,IAAI;4BACZ,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;oBAChF,CAAC;yBACI,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;wBAC5B,MAAM,MAAM,GAAG,2CAA2C,CAAC;wBAC3D,oBAAoB,GAAG;4BACnB,MAAM,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE;4BACrC,OAAO,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE;yBACzC,CAAC;oBACN,CAAC;yBACI,CAAC;wBACF,oBAAoB,GAAG,IAAA,uDAA+B,EAAC,MAAM,CAAC,CAAC;oBACnE,CAAC;oBACD,sDAAsD;oBACtD,MAAM,KAAK,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,IAAI,CAAC,CAAC,GAAG,CAAC;wBACrF,CAAC,CAAC,MAAM,CAAC,KAAK;wBACd,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC;oBACtC,IAAI,GAAG,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;wBACrB,MAAM,IAAA,kCAAe,EAAC;4BAClB,UAAU,EAAE,IAAA,2CAAwB,EAAC,MAAM,CAAC;4BAC5C,OAAO,EAAE,kBAAM,CAAC,eAAe,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC;4BACxD,MAAM;4BACN,KAAK;4BACL,OAAO,EAAE,GAAG;yBACf,CAAC,CAAC;oBACP,CAAC;oBACD,IAAI,OAAO,CAAC,MAAM;wBACd,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,kBAAM,CAAC,eAAe,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;oBAC7F,OAAO;wBACH,MAAM;wBACN,KAAK;wBACL,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,QAAiB,CAAC,CAAC,CAAC,WAAoB;wBACjE,GAAG,CAAC,oBAAoB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBAC9E,CAAC;gBACN,CAAC;gBACD,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK;aAC1B,CAAC,CAAC;QACP,CAAC,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;KAC/B,CAAC,CAAC;AACP,CAAC;AACD,kBAAe,aAAa,EAAE,CAAC","sourcesContent":["import { defineSandboxAgent } from \"../define.ts\";\nimport { Effect } from \"effect\";\nimport { requireEnv, getEnv } from \"../util.ts\";\nimport { shared } from \"./shared.ts\";\nimport { appendProjectInstruction, installSkills, installedSkillNames, skillDiscoveryInstruction, } from \"./skills.ts\";\nimport { mapGenericSpans } from \"../o11y/otlp/canonical.ts\";\nimport { unclassifiedToolActionsCoverage } from \"../o11y/command-projection.ts\";\nimport { parseOpenClawTranscript, parseOpenClawRunJson } from \"../o11y/parsers/openclaw.ts\";\nimport { completeEvidenceCoverage } from \"../assertions/coverage.ts\";\nimport { DEFAULT_OPENCLAW_CLI_VERSION, AGENT_BASELINE_RECIPE_REVISION } from \"./coding-cli-versions.ts\";\nimport { createNpmCliInstaller, resolveAgentBinEffect } from \"./npm-staged.ts\";\nimport { randomUUID } from \"node:crypto\";\nimport type { Agent, AgentSetupManifest, SkillSpec, StreamEvent, TurnEvidenceCoverage } from \"../types.ts\";\nimport { makeSendFailure, sendAcceptanceFromEvents } from \"../context/send-failures.ts\";\n// ───────────────────────────────────────────────────────────────────────────\n// OpenClaw 的 agent adapter(沙箱型)。\n//\n// 连接方式:在沙箱里 spawn `openclaw agent --local --json`(嵌入式 agent 循环,不依赖\n// 长驻 gateway),读回结果封包 + session transcript → 标准事件流。方言解析全部住\n// src/o11y/parsers/openclaw.ts,不进 core(契约见 docs/feature/adapters/sdk/openclaw/README.md)。\n//\n// 行为轨优先级(collection.md):session transcript(完整工具轨迹)优先;transcript 拿不到\n// 时只保留 `--json` 封包的最终回复,不从最终文本猜工具行为——此时负断言不可信,send 会\n// 经 ctx.log 明确记录这个限制。\n// ───────────────────────────────────────────────────────────────────────────\n/** OpenClaw 的 skill 目录(`skills` 生态的「通用」目录);发现靠 AGENTS.md 指引,不依赖原生扫描。 */\nconst SKILL_DIR = \".agents/skills\";\n/** 自定义 OpenAI 兼容网关在 openclaw.json 里的 provider id。 */\nconst COMPAT_PROVIDER = \"compat\";\nexport interface OpenClawConfig {\n    /** 模型 API key。省略时读 OPENCLAW_API_KEY,再回落 ANTHROPIC_API_KEY。 */\n    apiKey?: string;\n    /** OpenAI 兼容端点。省略时读 OPENCLAW_BASE_URL。 */\n    baseUrl?: string;\n    /** 固定安装的 openclaw npm 版本(如 \"1.2.3\");省略时用内置默认。 */\n    version?: string;\n    /**\n     * 装进沙箱的 Skill(本地目录/文件,或 repo + 可钉 ref + 可选启用集)。\n     * 落在 `.agents/skills/<name>/`,并写一段发现指引进 AGENTS.md。\n     */\n    skills?: SkillSpec[];\n}\nfunction resolveApiKey(config?: OpenClawConfig): string {\n    return config?.apiKey ?? getEnv(\"OPENCLAW_API_KEY\") ?? requireEnv(\"ANTHROPIC_API_KEY\");\n}\nfunction resolveBaseUrl(config?: OpenClawConfig): string | undefined {\n    return config?.baseUrl ?? getEnv(\"OPENCLAW_BASE_URL\");\n}\n/** experiment.model → `--model`。裸模型名在自定义网关下补成 `compat/<model>`。 */\nfunction resolveModelFlag(model: string | undefined, hasCompatBase: boolean): string | undefined {\n    if (!model)\n        return undefined;\n    if (model.includes(\"/\"))\n        return model;\n    return hasCompatBase ? `${COMPAT_PROVIDER}/${model}` : model;\n}\n/**\n * OpenClaw 的内置 sandbox Agent 工厂。复用 `defineSandboxAgent`、`shared` 安装工具、\n * `ctx.session` 存取器与 canonical OTel 通用 mapper(`mapGenericSpans`);OpenClaw 方言\n * (transcript / `agent --json` 字段)只住 `src/o11y/parsers/openclaw.ts`,不进 core。\n *\n * 会话契约:首轮显式发一个全新 session id 并 `ctx.session.capture()`(不依赖 OpenClaw 的\n * 默认主会话——否则相邻 attempt 会静默共享历史),后续轮用 `ctx.session.id` resume;\n * `t.newSession()` 后的新会话线自然拿到新 id,session 之间互相隔离。\n */\nexport function openClawAgent(config?: OpenClawConfig): Agent {\n    const version = config?.version ?? DEFAULT_OPENCLAW_CLI_VERSION;\n    const { ensure, installer } = createNpmCliInstaller({\n        identity: {\n            agent: \"openclaw\",\n            version,\n            revision: String(AGENT_BASELINE_RECIPE_REVISION.openclaw),\n        },\n        packageName: \"openclaw\",\n        bin: \"openclaw\",\n    });\n    return defineSandboxAgent({\n        name: \"openclaw\",\n        // e2e 已用真实 CLI 证明 session transcript 能给出工具轨 / 消息 / 用量;\n        // 采集失败的单轮仍会在 send 里把 coverage 降成 unavailable/partial。\n        evidenceCoverage: completeEvidenceCoverage,\n        // OpenClaw 没有专属 span 方言 mapper:原生 span 走 canonical 通用 heuristic。\n        // OTel 内容采集关闭时只影响 trace 证据面;行为轨(下面的 transcript 解析)不受影响。\n        spanMapper: mapGenericSpans,\n        ensure,\n        installers: [installer],\n        tracing: {\n            protocol: \"http/protobuf\",\n            env: (endpoint) => ({\n                OTEL_TRACES_EXPORTER: \"otlp\",\n                OTEL_EXPORTER_OTLP_TRACES_ENDPOINT: endpoint,\n                OTEL_EXPORTER_OTLP_TRACES_PROTOCOL: \"http/protobuf\",\n            }),\n        },\n        async setup(sb, ctx) {\n            const baseUrl = resolveBaseUrl(config);\n            if (baseUrl) {\n                const apiKey = resolveApiKey(config);\n                // OpenAI 兼容网关走自定义 provider + openai-completions;\n                // skipBootstrap 跳过首轮身份仪式,否则 agent 会先问 \"Who am I\"。\n                // workspace 钉沙箱工作目录,文件工具写到 eval 可见的路径。\n                const openclawConfig = {\n                    agents: {\n                        defaults: {\n                            skipBootstrap: true,\n                            workspace: sb.workdir,\n                        },\n                    },\n                    models: {\n                        mode: \"merge\",\n                        providers: {\n                            [COMPAT_PROVIDER]: {\n                                baseUrl,\n                                apiKey,\n                                api: \"openai-completions\",\n                                models: [\n                                    { id: \"gpt-5.6-luna\", name: \"gpt-5.6-luna\" },\n                                    { id: \"gpt-5.4-mini\", name: \"gpt-5.4-mini\" },\n                                    { id: \"gpt-5.4\", name: \"gpt-5.4\" },\n                                ],\n                            },\n                        },\n                    },\n                };\n                await shared.writeFile(sb, \"~/.openclaw/openclaw.json\", JSON.stringify(openclawConfig, null, 2), { sensitiveValues: [apiKey] });\n                // 预置最小身份文件,避免缺 IDENTITY 时仍触发仪式文案。\n                await shared.writeFile(sb, `${sb.workdir}/IDENTITY.md`, \"# Identity\\n\\nName: niceeval\\nEmoji: ✓\\n\");\n                await shared.writeFile(sb, `${sb.workdir}/USER.md`, \"# User\\n\\nEval harness operator.\\n\");\n                await shared.writeFile(sb, `${sb.workdir}/SOUL.md`, \"# Soul\\n\\nExecute the user's task directly. Do not ask who you are.\\n\");\n            }\n            const manifest: AgentSetupManifest = { skills: [] };\n            if (config?.skills?.length) {\n                manifest.skills = await installSkills(sb, config.skills, { dir: SKILL_DIR });\n                // 发现指引跟着一起写:不提示 = 白装。\n                await appendProjectInstruction(sb, skillDiscoveryInstruction(SKILL_DIR, installedSkillNames(manifest.skills)));\n            }\n            if (manifest.skills.length) {\n                ctx.reportSetup(manifest);\n            }\n        },\n        send: (input, ctx) => Effect.runPromise(Effect.scoped(Effect.gen(function* () {\n            const sb = ctx.sandbox;\n            const openclawBin = yield* resolveAgentBinEffect(sb, \"openclaw\");\n            return yield* Effect.tryPromise({\n                try: async (signal) => {\n                    // 会话契约:新会话线显式发新 session id(隔离);后续轮 resume 记录的 id。\n                    const sessionId = ctx.session.id ?? `niceeval-${sb.sandboxId}-${randomUUID().slice(0, 8)}`;\n                    ctx.session.capture(sessionId);\n                    const baseUrl = resolveBaseUrl(config);\n                    const args = [\"agent\", \"--local\", \"--session-id\", sessionId, \"--message\", input.text, \"--json\"];\n                    const model = resolveModelFlag(ctx.model, Boolean(baseUrl));\n                    if (model)\n                        args.push(\"--model\", model);\n                    const apiKey = resolveApiKey(config);\n                    const env: globalThis.Record<string, string> = {\n                        OPENCLAW_API_KEY: apiKey,\n                        ANTHROPIC_API_KEY: apiKey,\n                        OPENAI_API_KEY: apiKey,\n                        ...ctx.telemetry?.env,\n                    };\n                    if (baseUrl) {\n                        env.OPENCLAW_BASE_URL = baseUrl;\n                        env.OPENAI_BASE_URL = baseUrl;\n                    }\n                    const res = await sb.runCommand(openclawBin, args, {\n                        env,\n                        sensitiveValues: [apiKey],\n                        stream: true,\n                        signal,\n                    });\n                    const runJson = parseOpenClawRunJson(res.stdout);\n                    // 封包若带回服务端分配的 session key,后续轮以它为准(capture first-writer-wins,\n                    // 首轮已用自发 id 落地时不覆盖)。\n                    ctx.session.capture(runJson.sessionId);\n                    // 完整工具轨迹的唯一来源:session transcript。\n                    // 优先读封包给出的 sessionFile(精确);否则在 agents 目录取最新 *.jsonl,\n                    // 但排除同目录旁路产物 *.trajectory.jsonl(mtime 常更新、却不是消息轨——\n                    // 误读会导致 events 为空、整轮 coverage 降成 unavailable)。\n                    let raw: string | undefined;\n                    if (runJson.sessionFile) {\n                        try {\n                            raw = await sb.readText(runJson.sessionFile);\n                        }\n                        catch {\n                            raw = undefined;\n                        }\n                    }\n                    if (raw === undefined) {\n                        raw = await shared.captureLatestJsonl(sb, \"~/.openclaw/agents\", {\n                            excludeName: /\\.trajectory\\.jsonl$/i,\n                        });\n                    }\n                    const parsed = parseOpenClawTranscript(raw);\n                    const events: StreamEvent[] = [...parsed.events];\n                    // transcript 缺失 / 有解析不了的行:这一轮的工具轨迹不可信,coverage 降级说出来\n                    // (负断言由此落 unavailable,而不是在空流上假通过),不从最终文本猜工具行为。\n                    let turnEvidenceCoverage: TurnEvidenceCoverage | undefined;\n                    if (raw === undefined || parsed.events.length === 0) {\n                        const reason = \"session transcript unavailable; only the --json final reply was collected\";\n                        turnEvidenceCoverage = {\n                            events: { status: \"unavailable\", reason },\n                            actions: { status: \"unavailable\", reason },\n                            usage: { status: \"unavailable\", reason },\n                        };\n                        ctx.log(\"openclaw transcript unavailable: tool trajectory missing for this turn, negative assertions are unreliable\");\n                        if (runJson.text)\n                            events.push({ type: \"message\", role: \"assistant\", text: runJson.text });\n                    }\n                    else if (!parsed.parseSuccess) {\n                        const reason = \"some transcript lines could not be parsed\";\n                        turnEvidenceCoverage = {\n                            events: { status: \"partial\", reason },\n                            actions: { status: \"partial\", reason },\n                        };\n                    }\n                    else {\n                        turnEvidenceCoverage = unclassifiedToolActionsCoverage(events);\n                    }\n                    // 用量:transcript 逐消息累加优先;transcript 没报时用封包摘要,都没有就是空对象。\n                    const usage = (parsed.usage.inputTokens ?? 0) > 0 || (parsed.usage.outputTokens ?? 0) > 0\n                        ? parsed.usage\n                        : (runJson.usage ?? parsed.usage);\n                    if (res.exitCode !== 0) {\n                        throw makeSendFailure({\n                            acceptance: sendAcceptanceFromEvents(events),\n                            message: shared.diagnoseFailure(res, parsed.events, raw),\n                            events,\n                            usage,\n                            process: res,\n                        });\n                    }\n                    if (runJson.failed)\n                        events.push({ type: \"error\", message: shared.diagnoseFailure(res, parsed.events, raw) });\n                    return {\n                        events,\n                        usage,\n                        status: runJson.failed ? \"failed\" as const : \"completed\" as const,\n                        ...(turnEvidenceCoverage ? { evidenceCoverage: turnEvidenceCoverage } : {}),\n                    };\n                },\n                catch: (cause) => cause,\n            });\n        })), { signal: ctx.signal }),\n    });\n}\nexport default openClawAgent();\n"]}
+{"version":3,"file":"openclaw.js","sourceRoot":"","sources":["openclaw.ts"],"names":[],"mappings":";;AA4GA,sCA+LC;AA3SD,4CAAkD;AAClD,mCAAgC;AAChC,wCAAgD;AAChD,2CAAqC;AACrC,2CAAuH;AACvH,4DAA4D;AAC5D,yEAAgF;AAChF,6DAA4F;AAC5F,2DAAqE;AACrE,qEAAwG;AACxG,mDAA+E;AAC/E,6CAAyC;AAEzC,kEAAwF;AACxF,wDAA+C;AAC/C,kDAAiD;AAEjD,iEAAgH;AAChH,8EAA8E;AAC9E,iCAAiC;AACjC,EAAE;AACF,mEAAmE;AACnE,0DAA0D;AAC1D,0FAA0F;AAC1F,EAAE;AACF,oEAAoE;AACpE,qDAAqD;AACrD,sBAAsB;AACtB,8EAA8E;AAC9E,wEAAwE;AACxE,MAAM,SAAS,GAAG,gBAAgB,CAAC;AACnC,qDAAqD;AACrD,MAAM,eAAe,GAAG,QAAQ,CAAC;AAgBjC,SAAS,mBAAmB,CAAC,UAAkB,EAAE,OAAkC;IAI/E,MAAM,QAAQ,GAAG;QACb,KAAK,EAAE,kBAAkB;QACzB,OAAO,EAAE,UAAU;QACnB,QAAQ,EAAE,IAAA,6CAAsB,EAAC,OAAO,CAAC;KAC5C,CAAC;IACF,MAAM,WAAW,GAAG,wDAAwD;QACxE,kBAAkB,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,gDAAgD;QACzF,yDAAyD;QACzD,qJAAqJ;QACrJ,mKAAmK;QACnK,mLAAmL;QACnL,oDAAoD;QACpD,mFAAmF;QACnF,uFAAuF;QACvF,uJAAuJ,CAAC;IAC5J,OAAO;QACH,MAAM,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAA,mBAAK,EAAC,WAAW,IAAA,qBAAU,EAAC,WAAW,CAAC,EAAE,CAAC,EAAE;QACxE,SAAS,EAAE;YACP,QAAQ;YACR,WAAW,EAAE,iBAAiB;YAC9B,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE;gBAChC,MAAM,QAAQ,GAAG,OAAO;qBACnB,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,kCAAkC,IAAA,qBAAU,EAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;qBAC5E,IAAI,CAAC,IAAI,CAAC,CAAC;gBAChB,MAAM,MAAM,GAAG;+CACgB,IAAA,qBAAU,EAAC,uJAAuJ,CAAC;;EAEhN,QAAQ,EAAE,CAAC;gBACG,MAAM,OAAO,CAAC,eAAe,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;YACtE,CAAC;SACJ;KACJ,CAAC;AACN,CAAC;AACD,SAAS,aAAa,CAAC,MAAuB;IAC1C,OAAO,MAAM,EAAE,MAAM,IAAI,IAAA,gBAAM,EAAC,kBAAkB,CAAC,IAAI,IAAA,oBAAU,EAAC,mBAAmB,CAAC,CAAC;AAC3F,CAAC;AACD,SAAS,cAAc,CAAC,MAAuB;IAC3C,OAAO,MAAM,EAAE,OAAO,IAAI,IAAA,gBAAM,EAAC,mBAAmB,CAAC,CAAC;AAC1D,CAAC;AACD,mEAAmE;AACnE,SAAS,gBAAgB,CAAC,KAAyB,EAAE,aAAsB;IACvE,IAAI,CAAC,KAAK;QACN,OAAO,SAAS,CAAC;IACrB,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;QACnB,OAAO,KAAK,CAAC;IACjB,OAAO,aAAa,CAAC,CAAC,CAAC,GAAG,eAAe,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;AACjE,CAAC;AACD;;;;;;;;GAQG;AACH,SAAgB,aAAa,CAAC,MAAuB;IACjD,MAAM,OAAO,GAAG,MAAM,EAAE,OAAO,IAAI,qDAA4B,CAAC;IAChE,MAAM,OAAO,GAAG,IAAA,+CAAwB,EAAC,MAAM,EAAE,OAAO,EAAE,uBAAuB,CAAC,CAAC;IACnF,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,IAAA,qCAAqB,EAAC;QAChD,QAAQ,EAAE;YACN,KAAK,EAAE,UAAU;YACjB,OAAO;YACP,QAAQ,EAAE,MAAM,CAAC,uDAA8B,CAAC,QAAQ,CAAC;SAC5D;QACD,WAAW,EAAE,UAAU;QACvB,GAAG,EAAE,UAAU;KAClB,CAAC,CAAC;IACH,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC7F,OAAO,IAAA,8BAAkB,EAAC;QACtB,IAAI,EAAE,UAAU;QAChB,uDAAuD;QACvD,sDAAsD;QACtD,gBAAgB,EAAE,sCAAwB;QAC1C,iEAAiE;QACjE,wDAAwD;QACxD,UAAU,EAAE,8BAAe;QAC3B,MAAM,EAAE,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC;QACzE,UAAU,EAAE,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,WAAW,CAAC,SAAS,CAAC;QACxF,OAAO,EAAE;YACL,QAAQ,EAAE,eAAe;YACzB,GAAG,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;gBAChB,oBAAoB,EAAE,MAAM;gBAC5B,kCAAkC,EAAE,QAAQ;gBAC5C,kCAAkC,EAAE,eAAe;aACtD,CAAC;SACL;QACD,KAAK,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG;YACf,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;YACvC,IAAI,OAAO,EAAE,CAAC;gBACV,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;gBACrC,iDAAiD;gBACjD,kDAAkD;gBAClD,uCAAuC;gBACvC,IAAI,gBAAgB,GAAuC,EAAE,CAAC;gBAC9D,IAAI,CAAC;oBACD,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,qCAAqC,CAAC,CAAC;oBAC1E,IAAI,QAAQ,CAAC,QAAQ,KAAK,CAAC;wBACvB,gBAAgB,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBACvD,CAAC;gBACD,MAAM,CAAC;oBACH,gBAAgB,GAAG,EAAE,CAAC;gBAC1B,CAAC;gBACD,MAAM,cAAc,GAAG;oBACnB,GAAG,gBAAgB;oBACnB,MAAM,EAAE;wBACJ,QAAQ,EAAE;4BACN,aAAa,EAAE,IAAI;4BACnB,SAAS,EAAE,EAAE,CAAC,OAAO;yBACxB;qBACJ;oBACD,MAAM,EAAE;wBACJ,IAAI,EAAE,OAAO;wBACb,SAAS,EAAE;4BACP,CAAC,eAAe,CAAC,EAAE;gCACf,OAAO;gCACP,MAAM;gCACN,GAAG,EAAE,oBAAoB;gCACzB,MAAM,EAAE;oCACJ,EAAE,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,cAAc,EAAE;oCAC5C,EAAE,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,cAAc,EAAE;oCAC5C,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE;iCACrC;6BACJ;yBACJ;qBACJ;iBACJ,CAAC;gBACF,MAAM,kBAAM,CAAC,SAAS,CAAC,EAAE,EAAE,2BAA2B,EAAE,IAAI,CAAC,SAAS,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,eAAe,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBAChI,kCAAkC;gBAClC,MAAM,kBAAM,CAAC,SAAS,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,OAAO,cAAc,EAAE,0CAA0C,CAAC,CAAC;gBACpG,MAAM,kBAAM,CAAC,SAAS,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,OAAO,UAAU,EAAE,oCAAoC,CAAC,CAAC;gBAC1F,MAAM,kBAAM,CAAC,SAAS,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,OAAO,UAAU,EAAE,uEAAuE,CAAC,CAAC;YACjI,CAAC;YACD,MAAM,QAAQ,GAAuB,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;YACpD,IAAI,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;gBACzB,QAAQ,CAAC,MAAM,GAAG,MAAM,IAAA,yBAAa,EAAC,EAAE,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC;gBAC7E,sBAAsB;gBACtB,MAAM,IAAA,oCAAwB,EAAC,EAAE,EAAE,IAAA,qCAAyB,EAAC,SAAS,EAAE,IAAA,+BAAmB,EAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACnH,CAAC;YACD,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;gBACzB,GAAG,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;YAC9B,CAAC;QACL,CAAC;QACD,IAAI,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,eAAM,CAAC,UAAU,CAAC,eAAM,CAAC,MAAM,CAAC,eAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YACtE,MAAM,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC;YACvB,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,IAAA,qCAAqB,EAAC,EAAE,EAAE,UAAU,CAAC,CAAC;YACjE,OAAO,KAAK,CAAC,CAAC,eAAM,CAAC,UAAU,CAAC;gBAC5B,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;oBAClB,kDAAkD;oBAClD,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,EAAE,IAAI,YAAY,EAAE,CAAC,SAAS,IAAI,IAAA,wBAAU,GAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;oBAC3F,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;oBAC/B,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;oBACvC,MAAM,IAAI,GAAG,CAAC,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,SAAS,EAAE,WAAW,EAAE,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;oBAChG,MAAM,KAAK,GAAG,gBAAgB,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;oBAC5D,IAAI,KAAK;wBACL,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;oBAChC,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;oBACrC,MAAM,GAAG,GAAsC;wBAC3C,gBAAgB,EAAE,MAAM;wBACxB,iBAAiB,EAAE,MAAM;wBACzB,cAAc,EAAE,MAAM;wBACtB,GAAG,GAAG,CAAC,SAAS,EAAE,GAAG;qBACxB,CAAC;oBACF,IAAI,OAAO,EAAE,CAAC;wBACV,GAAG,CAAC,iBAAiB,GAAG,OAAO,CAAC;wBAChC,GAAG,CAAC,eAAe,GAAG,OAAO,CAAC;oBAClC,CAAC;oBACD,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,UAAU,CAAC,WAAW,EAAE,IAAI,EAAE;wBAC/C,GAAG;wBACH,eAAe,EAAE,CAAC,MAAM,CAAC;wBACzB,MAAM,EAAE,IAAI;wBACZ,MAAM;qBACT,CAAC,CAAC;oBACH,MAAM,OAAO,GAAG,IAAA,kCAAoB,EAAC,GAAG,CAAC,MAAM,CAAC,CAAC;oBACjD,6DAA6D;oBAC7D,qBAAqB;oBACrB,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;oBACvC,kCAAkC;oBAClC,qDAAqD;oBACrD,mDAAmD;oBACnD,+CAA+C;oBAC/C,IAAI,GAAuB,CAAC;oBAC5B,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;wBACtB,IAAI,CAAC;4BACD,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;wBACjD,CAAC;wBACD,MAAM,CAAC;4BACH,GAAG,GAAG,SAAS,CAAC;wBACpB,CAAC;oBACL,CAAC;oBACD,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;wBACpB,GAAG,GAAG,MAAM,kBAAM,CAAC,kBAAkB,CAAC,EAAE,EAAE,oBAAoB,EAAE;4BAC5D,WAAW,EAAE,uBAAuB;yBACvC,CAAC,CAAC;oBACP,CAAC;oBACD,MAAM,MAAM,GAAG,IAAA,qCAAuB,EAAC,GAAG,CAAC,CAAC;oBAC5C,MAAM,MAAM,GAAkB,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;oBACjD,qDAAqD;oBACrD,+CAA+C;oBAC/C,IAAI,oBAAsD,CAAC;oBAC3D,IAAI,GAAG,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;wBAClD,MAAM,MAAM,GAAG,2EAA2E,CAAC;wBAC3F,oBAAoB,GAAG;4BACnB,MAAM,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE;4BACzC,OAAO,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE;4BAC1C,KAAK,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE;yBAC3C,CAAC;wBACF,GAAG,CAAC,GAAG,CAAC,4GAA4G,CAAC,CAAC;wBACtH,IAAI,OAAO,CAAC,IAAI;4BACZ,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;oBAChF,CAAC;yBACI,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;wBAC5B,MAAM,MAAM,GAAG,2CAA2C,CAAC;wBAC3D,oBAAoB,GAAG;4BACnB,MAAM,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE;4BACrC,OAAO,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE;yBACzC,CAAC;oBACN,CAAC;yBACI,CAAC;wBACF,oBAAoB,GAAG,IAAA,uDAA+B,EAAC,MAAM,CAAC,CAAC;oBACnE,CAAC;oBACD,sDAAsD;oBACtD,MAAM,KAAK,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,IAAI,CAAC,CAAC,GAAG,CAAC;wBACrF,CAAC,CAAC,MAAM,CAAC,KAAK;wBACd,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC;oBACtC,IAAI,GAAG,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;wBACrB,MAAM,IAAA,kCAAe,EAAC;4BAClB,UAAU,EAAE,IAAA,2CAAwB,EAAC,MAAM,CAAC;4BAC5C,OAAO,EAAE,kBAAM,CAAC,eAAe,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC;4BACxD,MAAM;4BACN,KAAK;4BACL,OAAO,EAAE,GAAG;yBACf,CAAC,CAAC;oBACP,CAAC;oBACD,IAAI,OAAO,CAAC,MAAM;wBACd,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,kBAAM,CAAC,eAAe,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;oBAC7F,OAAO;wBACH,MAAM;wBACN,KAAK;wBACL,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,QAAiB,CAAC,CAAC,CAAC,WAAoB;wBACjE,GAAG,CAAC,oBAAoB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBAC9E,CAAC;gBACN,CAAC;gBACD,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK;aAC1B,CAAC,CAAC;QACP,CAAC,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;KAC/B,CAAC,CAAC;AACP,CAAC;AACD,kBAAe,aAAa,EAAE,CAAC","sourcesContent":["import { defineSandboxAgent } from \"../define.ts\";\nimport { Effect } from \"effect\";\nimport { requireEnv, getEnv } from \"../util.ts\";\nimport { shared } from \"./shared.ts\";\nimport { appendProjectInstruction, installSkills, installedSkillNames, skillDiscoveryInstruction, } from \"./skills.ts\";\nimport { mapGenericSpans } from \"../o11y/otlp/canonical.ts\";\nimport { unclassifiedToolActionsCoverage } from \"../o11y/command-projection.ts\";\nimport { parseOpenClawTranscript, parseOpenClawRunJson } from \"../o11y/parsers/openclaw.ts\";\nimport { completeEvidenceCoverage } from \"../assertions/coverage.ts\";\nimport { DEFAULT_OPENCLAW_CLI_VERSION, AGENT_BASELINE_RECIPE_REVISION } from \"./coding-cli-versions.ts\";\nimport { createNpmCliInstaller, resolveAgentBinEffect } from \"./npm-staged.ts\";\nimport { randomUUID } from \"node:crypto\";\nimport type { Agent, AgentSetupManifest, SkillSpec, StreamEvent, TurnEvidenceCoverage } from \"../types.ts\";\nimport { makeSendFailure, sendAcceptanceFromEvents } from \"../context/send-failures.ts\";\nimport { shell } from \"../sandbox/commands.ts\";\nimport { shellQuote } from \"../sandbox/shell.ts\";\nimport type { AgentEnsure, AgentInstaller } from \"./types.ts\";\nimport { exactNpmPluginRevision, normalizeExactNpmPlugins, type ExactNpmPlugin, } from \"./exact-npm-plugins.ts\";\n// ───────────────────────────────────────────────────────────────────────────\n// OpenClaw 的 agent adapter(沙箱型)。\n//\n// 连接方式:在沙箱里 spawn `openclaw agent --local --json`(嵌入式 agent 循环,不依赖\n// 长驻 gateway),读回结果封包 + session transcript → 标准事件流。方言解析全部住\n// src/o11y/parsers/openclaw.ts,不进 core(契约见 docs/feature/adapters/sdk/openclaw/README.md)。\n//\n// 行为轨优先级(collection.md):session transcript(完整工具轨迹)优先;transcript 拿不到\n// 时只保留 `--json` 封包的最终回复,不从最终文本猜工具行为——此时负断言不可信,send 会\n// 经 ctx.log 明确记录这个限制。\n// ───────────────────────────────────────────────────────────────────────────\n/** OpenClaw 的 skill 目录(`skills` 生态的「通用」目录);发现靠 AGENTS.md 指引,不依赖原生扫描。 */\nconst SKILL_DIR = \".agents/skills\";\n/** 自定义 OpenAI 兼容网关在 openclaw.json 里的 provider id。 */\nconst COMPAT_PROVIDER = \"compat\";\nexport interface OpenClawConfig {\n    /** 模型 API key。省略时读 OPENCLAW_API_KEY,再回落 ANTHROPIC_API_KEY。 */\n    apiKey?: string;\n    /** OpenAI 兼容端点。省略时读 OPENCLAW_BASE_URL。 */\n    baseUrl?: string;\n    /** 固定安装的 openclaw npm 版本(如 \"1.2.3\");省略时用内置默认。 */\n    version?: string;\n    /**\n     * 装进沙箱的 Skill(本地目录/文件,或 repo + 可钉 ref + 可选启用集)。\n     * 落在 `.agents/skills/<name>/`,并写一段发现指引进 AGENTS.md。\n     */\n    skills?: SkillSpec[];\n    /** Native OpenClaw plugins as exact npm package@version declarations. */\n    plugins?: readonly string[];\n}\nfunction openClawPluginLayer(cliVersion: string, plugins: readonly ExactNpmPlugin[]): {\n    ensure: AgentEnsure;\n    installer: AgentInstaller;\n} {\n    const identity = {\n        agent: \"openclaw-plugins\",\n        version: cliVersion,\n        revision: exactNpmPluginRevision(plugins),\n    };\n    const verifyFiles = `const fs=require(\"node:fs\"),path=require(\"node:path\");` +\n        `const expected=${JSON.stringify(plugins)},base=path.join(process.env.HOME,\".openclaw\");` +\n        `const projects=path.join(base,\"npm/projects\"),found=[];` +\n        `for(const dir of fs.readdirSync(projects)){const root=path.join(projects,dir),p=JSON.parse(fs.readFileSync(path.join(root,\"package.json\"),\"utf8\"));` +\n        `for(const [name,version] of Object.entries(p.dependencies||{})){const pkg=JSON.parse(fs.readFileSync(path.join(root,\"node_modules\",name,\"package.json\"),\"utf8\"));` +\n        `const manifest=JSON.parse(fs.readFileSync(path.join(root,\"node_modules\",name,\"openclaw.plugin.json\"),\"utf8\"));found.push({name,version,pkgVersion:pkg.version,id:manifest.id});}}` +\n        `if(found.length!==expected.length)process.exit(1);` +\n        `const config=JSON.parse(fs.readFileSync(path.join(base,\"openclaw.json\"),\"utf8\"));` +\n        `const ordered=expected.map(e=>found.find(x=>x.name===e.name&&x.version===e.version));` +\n        `for(const x of ordered){if(!x||x.pkgVersion!==x.version||!config.plugins?.entries?.[x.id]?.enabled||!/^[A-Za-z0-9._-]+$/.test(x.id))process.exit(1);}`;\n    return {\n        ensure: { identity, probe: shell(`node -e ${shellQuote(verifyFiles)}`) },\n        installer: {\n            identity,\n            installMode: \"sandbox-network\",\n            install: async (sandbox, context) => {\n                const installs = plugins\n                    .map((plugin) => `openclaw plugins install --pin ${shellQuote(plugin.spec)}`)\n                    .join(\"\\n\");\n                const script = `set -eu\nids=$(openclaw plugins list --json | node -e ${shellQuote(`let s=\"\";process.stdin.on(\"data\",c=>s+=c).on(\"end\",()=>{const x=JSON.parse(s);for(const p of x.plugins||[])if(p.origin===\"global\")console.log(p.id)})`)})\nfor id in $ids; do openclaw plugins uninstall --force \"$id\"; done\n${installs}`;\n                await sandbox.runShellOrThrow(script, { signal: context.signal });\n            },\n        },\n    };\n}\nfunction resolveApiKey(config?: OpenClawConfig): string {\n    return config?.apiKey ?? getEnv(\"OPENCLAW_API_KEY\") ?? requireEnv(\"ANTHROPIC_API_KEY\");\n}\nfunction resolveBaseUrl(config?: OpenClawConfig): string | undefined {\n    return config?.baseUrl ?? getEnv(\"OPENCLAW_BASE_URL\");\n}\n/** experiment.model → `--model`。裸模型名在自定义网关下补成 `compat/<model>`。 */\nfunction resolveModelFlag(model: string | undefined, hasCompatBase: boolean): string | undefined {\n    if (!model)\n        return undefined;\n    if (model.includes(\"/\"))\n        return model;\n    return hasCompatBase ? `${COMPAT_PROVIDER}/${model}` : model;\n}\n/**\n * OpenClaw 的内置 sandbox Agent 工厂。复用 `defineSandboxAgent`、`shared` 安装工具、\n * `ctx.session` 存取器与 canonical OTel 通用 mapper(`mapGenericSpans`);OpenClaw 方言\n * (transcript / `agent --json` 字段)只住 `src/o11y/parsers/openclaw.ts`,不进 core。\n *\n * 会话契约:首轮显式发一个全新 session id 并 `ctx.session.capture()`(不依赖 OpenClaw 的\n * 默认主会话——否则相邻 attempt 会静默共享历史),后续轮用 `ctx.session.id` resume;\n * `t.newSession()` 后的新会话线自然拿到新 id,session 之间互相隔离。\n */\nexport function openClawAgent(config?: OpenClawConfig): Agent {\n    const version = config?.version ?? DEFAULT_OPENCLAW_CLI_VERSION;\n    const plugins = normalizeExactNpmPlugins(config?.plugins, \"openClawAgent plugins\");\n    const { ensure, installer } = createNpmCliInstaller({\n        identity: {\n            agent: \"openclaw\",\n            version,\n            revision: String(AGENT_BASELINE_RECIPE_REVISION.openclaw),\n        },\n        packageName: \"openclaw\",\n        bin: \"openclaw\",\n    });\n    const pluginLayer = plugins.length === 0 ? undefined : openClawPluginLayer(version, plugins);\n    return defineSandboxAgent({\n        name: \"openclaw\",\n        // e2e 已用真实 CLI 证明 session transcript 能给出工具轨 / 消息 / 用量;\n        // 采集失败的单轮仍会在 send 里把 coverage 降成 unavailable/partial。\n        evidenceCoverage: completeEvidenceCoverage,\n        // OpenClaw 没有专属 span 方言 mapper:原生 span 走 canonical 通用 heuristic。\n        // OTel 内容采集关闭时只影响 trace 证据面;行为轨(下面的 transcript 解析)不受影响。\n        spanMapper: mapGenericSpans,\n        ensure: pluginLayer === undefined ? ensure : [ensure, pluginLayer.ensure],\n        installers: pluginLayer === undefined ? [installer] : [installer, pluginLayer.installer],\n        tracing: {\n            protocol: \"http/protobuf\",\n            env: (endpoint) => ({\n                OTEL_TRACES_EXPORTER: \"otlp\",\n                OTEL_EXPORTER_OTLP_TRACES_ENDPOINT: endpoint,\n                OTEL_EXPORTER_OTLP_TRACES_PROTOCOL: \"http/protobuf\",\n            }),\n        },\n        async setup(sb, ctx) {\n            const baseUrl = resolveBaseUrl(config);\n            if (baseUrl) {\n                const apiKey = resolveApiKey(config);\n                // OpenAI 兼容网关走自定义 provider + openai-completions;\n                // skipBootstrap 跳过首轮身份仪式,否则 agent 会先问 \"Who am I\"。\n                // workspace 钉沙箱工作目录,文件工具写到 eval 可见的路径。\n                let persistentConfig: globalThis.Record<string, unknown> = {};\n                try {\n                    const existing = await sb.runShell('cat \"$HOME/.openclaw/openclaw.json\"');\n                    if (existing.exitCode === 0)\n                        persistentConfig = JSON.parse(existing.stdout);\n                }\n                catch {\n                    persistentConfig = {};\n                }\n                const openclawConfig = {\n                    ...persistentConfig,\n                    agents: {\n                        defaults: {\n                            skipBootstrap: true,\n                            workspace: sb.workdir,\n                        },\n                    },\n                    models: {\n                        mode: \"merge\",\n                        providers: {\n                            [COMPAT_PROVIDER]: {\n                                baseUrl,\n                                apiKey,\n                                api: \"openai-completions\",\n                                models: [\n                                    { id: \"gpt-5.6-luna\", name: \"gpt-5.6-luna\" },\n                                    { id: \"gpt-5.4-mini\", name: \"gpt-5.4-mini\" },\n                                    { id: \"gpt-5.4\", name: \"gpt-5.4\" },\n                                ],\n                            },\n                        },\n                    },\n                };\n                await shared.writeFile(sb, \"~/.openclaw/openclaw.json\", JSON.stringify(openclawConfig, null, 2), { sensitiveValues: [apiKey] });\n                // 预置最小身份文件,避免缺 IDENTITY 时仍触发仪式文案。\n                await shared.writeFile(sb, `${sb.workdir}/IDENTITY.md`, \"# Identity\\n\\nName: niceeval\\nEmoji: ✓\\n\");\n                await shared.writeFile(sb, `${sb.workdir}/USER.md`, \"# User\\n\\nEval harness operator.\\n\");\n                await shared.writeFile(sb, `${sb.workdir}/SOUL.md`, \"# Soul\\n\\nExecute the user's task directly. Do not ask who you are.\\n\");\n            }\n            const manifest: AgentSetupManifest = { skills: [] };\n            if (config?.skills?.length) {\n                manifest.skills = await installSkills(sb, config.skills, { dir: SKILL_DIR });\n                // 发现指引跟着一起写:不提示 = 白装。\n                await appendProjectInstruction(sb, skillDiscoveryInstruction(SKILL_DIR, installedSkillNames(manifest.skills)));\n            }\n            if (manifest.skills.length) {\n                ctx.reportSetup(manifest);\n            }\n        },\n        send: (input, ctx) => Effect.runPromise(Effect.scoped(Effect.gen(function* () {\n            const sb = ctx.sandbox;\n            const openclawBin = yield* resolveAgentBinEffect(sb, \"openclaw\");\n            return yield* Effect.tryPromise({\n                try: async (signal) => {\n                    // 会话契约:新会话线显式发新 session id(隔离);后续轮 resume 记录的 id。\n                    const sessionId = ctx.session.id ?? `niceeval-${sb.sandboxId}-${randomUUID().slice(0, 8)}`;\n                    ctx.session.capture(sessionId);\n                    const baseUrl = resolveBaseUrl(config);\n                    const args = [\"agent\", \"--local\", \"--session-id\", sessionId, \"--message\", input.text, \"--json\"];\n                    const model = resolveModelFlag(ctx.model, Boolean(baseUrl));\n                    if (model)\n                        args.push(\"--model\", model);\n                    const apiKey = resolveApiKey(config);\n                    const env: globalThis.Record<string, string> = {\n                        OPENCLAW_API_KEY: apiKey,\n                        ANTHROPIC_API_KEY: apiKey,\n                        OPENAI_API_KEY: apiKey,\n                        ...ctx.telemetry?.env,\n                    };\n                    if (baseUrl) {\n                        env.OPENCLAW_BASE_URL = baseUrl;\n                        env.OPENAI_BASE_URL = baseUrl;\n                    }\n                    const res = await sb.runCommand(openclawBin, args, {\n                        env,\n                        sensitiveValues: [apiKey],\n                        stream: true,\n                        signal,\n                    });\n                    const runJson = parseOpenClawRunJson(res.stdout);\n                    // 封包若带回服务端分配的 session key,后续轮以它为准(capture first-writer-wins,\n                    // 首轮已用自发 id 落地时不覆盖)。\n                    ctx.session.capture(runJson.sessionId);\n                    // 完整工具轨迹的唯一来源:session transcript。\n                    // 优先读封包给出的 sessionFile(精确);否则在 agents 目录取最新 *.jsonl,\n                    // 但排除同目录旁路产物 *.trajectory.jsonl(mtime 常更新、却不是消息轨——\n                    // 误读会导致 events 为空、整轮 coverage 降成 unavailable)。\n                    let raw: string | undefined;\n                    if (runJson.sessionFile) {\n                        try {\n                            raw = await sb.readText(runJson.sessionFile);\n                        }\n                        catch {\n                            raw = undefined;\n                        }\n                    }\n                    if (raw === undefined) {\n                        raw = await shared.captureLatestJsonl(sb, \"~/.openclaw/agents\", {\n                            excludeName: /\\.trajectory\\.jsonl$/i,\n                        });\n                    }\n                    const parsed = parseOpenClawTranscript(raw);\n                    const events: StreamEvent[] = [...parsed.events];\n                    // transcript 缺失 / 有解析不了的行:这一轮的工具轨迹不可信,coverage 降级说出来\n                    // (负断言由此落 unavailable,而不是在空流上假通过),不从最终文本猜工具行为。\n                    let turnEvidenceCoverage: TurnEvidenceCoverage | undefined;\n                    if (raw === undefined || parsed.events.length === 0) {\n                        const reason = \"session transcript unavailable; only the --json final reply was collected\";\n                        turnEvidenceCoverage = {\n                            events: { status: \"unavailable\", reason },\n                            actions: { status: \"unavailable\", reason },\n                            usage: { status: \"unavailable\", reason },\n                        };\n                        ctx.log(\"openclaw transcript unavailable: tool trajectory missing for this turn, negative assertions are unreliable\");\n                        if (runJson.text)\n                            events.push({ type: \"message\", role: \"assistant\", text: runJson.text });\n                    }\n                    else if (!parsed.parseSuccess) {\n                        const reason = \"some transcript lines could not be parsed\";\n                        turnEvidenceCoverage = {\n                            events: { status: \"partial\", reason },\n                            actions: { status: \"partial\", reason },\n                        };\n                    }\n                    else {\n                        turnEvidenceCoverage = unclassifiedToolActionsCoverage(events);\n                    }\n                    // 用量:transcript 逐消息累加优先;transcript 没报时用封包摘要,都没有就是空对象。\n                    const usage = (parsed.usage.inputTokens ?? 0) > 0 || (parsed.usage.outputTokens ?? 0) > 0\n                        ? parsed.usage\n                        : (runJson.usage ?? parsed.usage);\n                    if (res.exitCode !== 0) {\n                        throw makeSendFailure({\n                            acceptance: sendAcceptanceFromEvents(events),\n                            message: shared.diagnoseFailure(res, parsed.events, raw),\n                            events,\n                            usage,\n                            process: res,\n                        });\n                    }\n                    if (runJson.failed)\n                        events.push({ type: \"error\", message: shared.diagnoseFailure(res, parsed.events, raw) });\n                    return {\n                        events,\n                        usage,\n                        status: runJson.failed ? \"failed\" as const : \"completed\" as const,\n                        ...(turnEvidenceCoverage ? { evidenceCoverage: turnEvidenceCoverage } : {}),\n                    };\n                },\n                catch: (cause) => cause,\n            });\n        })), { signal: ctx.signal }),\n    });\n}\nexport default openClawAgent();\n"]}

package/dist/agents/openclaw.d.cts

@@ -11,6 +11,8 @@ export interface OpenClawConfig {
      * 落在 `.agents/skills/<name>/`,并写一段发现指引进 AGENTS.md。
      */
     skills?: SkillSpec[];
+    /** Native OpenClaw plugins as exact npm package@version declarations. */
+    plugins?: readonly string[];
 }
 /**
  * OpenClaw 的内置 sandbox Agent 工厂。复用 `defineSandboxAgent`、`shared` 安装工具、

package/dist/agents/openclaw.d.mts

@@ -11,6 +11,8 @@ export interface OpenClawConfig {
      * 落在 `.agents/skills/<name>/`,并写一段发现指引进 AGENTS.md。
      */
     skills?: SkillSpec[];
+    /** Native OpenClaw plugins as exact npm package@version declarations. */
+    plugins?: readonly string[];
 }
 /**
  * OpenClaw 的内置 sandbox Agent 工厂。复用 `defineSandboxAgent`、`shared` 安装工具、

package/dist/agents/openclaw.d.ts

@@ -11,6 +11,8 @@ export interface OpenClawConfig {
      * 落在 `.agents/skills/<name>/`,并写一段发现指引进 AGENTS.md。
      */
     skills?: SkillSpec[];
+    /** Native OpenClaw plugins as exact npm package@version declarations. */
+    plugins?: readonly string[];
 }
 /**
  * OpenClaw 的内置 sandbox Agent 工厂。复用 `defineSandboxAgent`、`shared` 安装工具、