open-tui-orchestrator 0.9.6

package/scripts/core/leases.mjs

@@ -0,0 +1,176 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import crypto from 'node:crypto';
+import {fileURLToPath} from 'node:url';
+import {spawn,spawnSync} from 'node:child_process';
+import {keysOverlap,powershellExe} from './contracts.mjs';
+
+// 锚定 SystemRoot 的 powershell.exe：裸名会先按进程 cwd（任意工作区）解析，防二进制投毒。
+const PS_EXE=powershellExe();
+
+export function processSnapshot(timeoutMs=15000) {
+  if(process.platform!=='win32')throw new Error('Visible TUI runtime currently requires Windows');
+  const result=spawnSync(PS_EXE,['-NoProfile','-Command',
+    '$ErrorActionPreference="Stop"; Get-CimInstance Win32_Process | Select-Object ProcessId,Name,CommandLine,@{n="Started";e={$_.CreationDate.ToUniversalTime().ToString("o")}} | ConvertTo-Json -Compress'],
+    {encoding:'utf8',windowsHide:true,timeout:Math.max(1,Math.min(15000,Math.ceil(timeoutMs)))});
+  if(result.status!==0)throw new Error('Cannot verify process identities');
+  return new Map(JSON.parse(result.stdout).map(p=>[p.ProcessId,p]));
+}
+export function sameProcess(expected,actual) {
+  return !!expected&&!!actual&&expected.ProcessId===actual.ProcessId&&expected.Started===actual.Started&&expected.Name===actual.Name&&expected.CommandLine===actual.CommandLine;
+}
+export function launcherIdentity(pid,pidFile,snapshot=processSnapshot()) {
+  const actual=snapshot.get(Number(pid));
+  const script=path.join(path.dirname(pidFile),path.basename(pidFile).replace(/^window-/,'win-launch-').replace(/\.pid$/,'.ps1'));
+  const args=String(actual?.CommandLine||'').toLowerCase().replaceAll('/','\\');
+  if(!/^(powershell|pwsh)\.exe$/i.test(actual?.Name||'')||!args.includes(script.toLowerCase().replaceAll('/','\\')))return null;
+  return actual;
+}
+
+// Only a locator is kept in HKCU; all runtime files remain beneath the first
+// initiating workspace's temp. A named mutex makes first discovery atomic.
+// Under `node --test` (NODE_TEST_CONTEXT is set) the machine-wide locator is
+// never touched: test workspaces keep their coordinator in their own temp.
+export function coordinatorDir(workspace,env=process.env) {
+  const resolved=(()=>{
+  if(env.ORCH_COORDINATOR_DIR)return path.resolve(workspace,env.ORCH_COORDINATOR_DIR);
+  const fallback=path.join(workspace,'temp','orchestrator','coordinator');
+  if(process.platform!=='win32'||env.NODE_TEST_CONTEXT)return fallback;
+  const quoted=fallback.replaceAll("'","''");
+  const script=`$held=$false; $m=[Threading.Mutex]::new($false,'Local\\TuiOrchestrator.Coordinator'); try {try{$held=$m.WaitOne(15000)}catch [Threading.AbandonedMutexException]{$held=$true}; if(-not $held){throw 'Coordinator locator busy'}; $key='HKCU:\\Software\\TuiOrchestrator'; $p=(Get-ItemProperty -LiteralPath $key -Name CoordinatorRoot -ErrorAction SilentlyContinue).CoordinatorRoot; if(-not $p){$p='${quoted}'; New-Item -Path $key -Force|Out-Null; New-ItemProperty -LiteralPath $key -Name CoordinatorRoot -Value $p -PropertyType String -Force|Out-Null}; Write-Output $p}finally{if($held){$m.ReleaseMutex()};$m.Dispose()}`;
+  const r=spawnSync(PS_EXE,['-NoProfile','-Command',script],{encoding:'utf8',windowsHide:true,timeout:20000});
+  if(r.status!==0||!r.stdout.trim())throw new Error('Unable to locate machine window coordinator');
+  return path.resolve(r.stdout.trim());
+  })();
+  // 入口即回收：被强杀的 PS 不会执行自己的清理，过期锁票会一直躺在协调器目录里（本轮清理时实测
+  // 576 个）。这里每次解析协调器目录时顺手按龄回收一次（只删老旧票，绝不碰在票）——保证空闲时
+  // 也不会长期积压，而不是等到下一次事务才清。
+  if(fs.existsSync(resolved))sweepStaleMutexTickets(resolved);
+  return resolved;
+}
+// 协调器内核互斥的口径（全部可调；2026-09-14 修：旧值把等待写死 20s，满载多竞争者会假失败）：
+// - ORCH_MUTEX_WAIT_MS     PS 侧 WaitOne 时长，默认 60000ms；
+// - ORCH_MUTEX_RETRIES     获取失败后的重试次数，默认 2（退避复用 waitBackoffMs）；
+// - ORCH_MUTEX_TICKET_TTL_MS  锁票老化回收阈值，默认 600000ms。
+// 被强杀/超时的 PS 进程跑不到自己的清理（finally 只在本进程里），锁票会在协调器目录无界堆积
+// （2026-09-14 实测 576 个）——所以每次事务前按龄回收一次：只收老旧票，绝不碰在票。
+const sleepFor=ms=>{try{Atomics.wait(new Int32Array(new SharedArrayBuffer(4)),0,0,ms);}catch{}};
+function mutexWaitMs(){const v=Number(process.env.ORCH_MUTEX_WAIT_MS);return Number.isFinite(v)&&v>=1000?Math.floor(v):60000;}
+function mutexRetries(){const v=Number(process.env.ORCH_MUTEX_RETRIES);return Number.isFinite(v)&&v>=0?Math.min(10,Math.floor(v)):2;}
+function mutexTicketTtlMs(){const v=Number(process.env.ORCH_MUTEX_TICKET_TTL_MS);return Number.isFinite(v)&&v>=0?Math.floor(v):600000;}
+export function sweepStaleMutexTickets(dir,{ttlMs=mutexTicketTtlMs(),now=Date.now()}={}){
+  let removed=0;
+  try{
+    for(const name of fs.readdirSync(dir)){
+      if(!/^lock-[0-9a-f-]+\.(ready|release)$/.test(name))continue;
+      const full=path.join(dir,name);
+      try{if(now-fs.statSync(full).mtimeMs>=ttlMs){fs.rmSync(full,{force:true});removed++;}}catch{}
+    }
+  }catch{}
+  return removed;
+}
+// 取一次内核互斥：PS 侧等 waitMs，JS 侧按 waitMs + 启动/退出余量设界。
+// 注意：等待是同步阻塞的（Atomics.wait），事件回调在阻塞期间不会运行——所以这里**不能**依赖
+// 'exit' 事件判早退（旧实现就是干等满 30s）。失败时按 waitMs 有界返回，由调用方决定重试。
+function acquireCoordinatorMutex(dir,owner,waitMs,script){
+  const ticket=path.join(dir,'lock-'+crypto.randomUUID());
+  const child=spawn(PS_EXE,['-NoProfile','-File',script,'-Directory',dir,'-Ticket',ticket,'-Owner',String(owner.ProcessId),'-Started',owner.Started],{windowsHide:true,stdio:'ignore'});
+  child.on('error',()=>{});child.unref();
+  const deadline=Date.now()+waitMs+2500;
+  while(!fs.existsSync(ticket+'.ready')&&Date.now()<deadline)sleepFor(25);
+  const ready=fs.existsSync(ticket+'.ready');
+  const release=()=>{try{fs.writeFileSync(ticket+'.release','release');}catch{}};
+  const discard=()=>{for(const suffix of ['.ready','.release'])try{fs.rmSync(ticket+suffix,{force:true});}catch{}};
+  return {ready,release,discard};
+}
+export function atomicJson(file,value){
+  fs.mkdirSync(path.dirname(file),{recursive:true});
+  const tmp=file+'.'+process.pid+'.tmp';fs.writeFileSync(tmp,JSON.stringify(value,null,2));
+  // Windows: renameSync 不覆盖已存在目标，且目标被杀软/索引器瞬时占用时报 EPERM/EACCES。
+  // 单次 remove+rename 仍有窗口，这里做短暂退避重试；非暂时性错误立即上抛，临时文件不残留。
+  const sleepSync=sleepFor;
+  let lastError=null;
+  for(let attempt=0;attempt<6;attempt++){
+    try{fs.renameSync(tmp,file);return;}
+    catch(error){
+      lastError=error;
+      if(!error||!['EEXIST','EPERM','EACCES'].includes(error.code))break;
+      try{fs.rmSync(file,{force:true});}catch{}
+      sleepSync(60+attempt*80);
+    }
+  }
+  try{fs.rmSync(tmp,{force:true});}catch{}
+  throw lastError;
+}
+export function transaction(dir,fn,snapshot=processSnapshot) {
+  fs.mkdirSync(dir,{recursive:true});const lock=path.join(dir,'mutex.json'),file=path.join(dir,'leases.json');
+  let processes=snapshot();const owner=processes.get(process.pid);
+  if(!owner)throw new Error('Coordinator owner identity unavailable');
+  // A kernel mutex is released by Windows on a crash. Unlike a stale lockfile,
+  // it cannot be reclaimed by two contenders or strand an empty lock forever.
+  let unlock=()=>{};
+  if(snapshot===processSnapshot) {
+    sweepStaleMutexTickets(dir);
+    const waitMs=mutexWaitMs(),tries=mutexRetries();
+    const script=fileURLToPath(new URL('./lease-lock.ps1',import.meta.url));
+    let held=null;
+    for(let attempt=0;;attempt++) {
+      const candidate=acquireCoordinatorMutex(dir,owner,waitMs,script);
+      if(candidate.ready){held=candidate;break;}
+      candidate.release();
+      // 失败路径的锁票清理延后到事件循环恢复之后（阻塞等待期间 setTimeout 也不会跑）；
+      // 真正兜底的是 sweepStaleMutexTickets 的按龄回收。
+      setTimeout(candidate.discard,3000).unref?.();
+      if(attempt>=tries)throw new Error('Coordinator mutex acquisition failed (waited '+waitMs+'ms x'+(attempt+1)+'; tune ORCH_MUTEX_WAIT_MS / ORCH_MUTEX_RETRIES)');
+      sleepFor(waitBackoffMs(attempt,{base:250,max:2000}));
+    }
+    unlock=()=>held.release();
+  }
+  try {processes=snapshot();let leases=[];try{leases=JSON.parse(fs.readFileSync(file,'utf8'));}catch(e){if(e.code!=='ENOENT')throw e;}
+    leases=leases.filter(l=>{
+      if(l.launcher)return sameProcess(l.launcher,processes.get(l.launcher.ProcessId));
+      if(l.pidFile){let pid=0;try{pid=Number(fs.readFileSync(l.pidFile,'utf8').replace(/^\uFEFF/,''));}catch{};const found=launcherIdentity(pid,l.pidFile,processes);if(found){l.launcher=found;return true;}}
+      return sameProcess(l.owner,processes.get(l.owner.ProcessId))||Date.now()-(l.reservedAt||0)<90000;
+    });
+    const result=fn(leases,owner,processes);atomicJson(file,leases);return result;
+  }finally{unlock();}
+}
+// 排队退避（P1）：容量/冲突等待按指数退避 + 抖动——多等待者错峰，避免每秒各打一发协调器事务的惊群。
+// attempt 从 0 起；base=首等毫秒、max=封顶（抖动上界 max×1.2）；random 可注入以保证测试确定性。
+export function waitBackoffMs(attempt, {base = 600, max = 5000, random = Math.random} = {}) {
+  const grow = Math.max(0, Math.floor(Number(attempt) || 0));
+  const cap = Math.max(1, Number(max) || 1);
+  const start = Math.min(Math.max(1, Number(base) || 1), cap);
+  const target = Math.min(cap, start * Math.pow(1.7, grow));
+  const jitter = 0.8 + (typeof random === 'function' ? Number(random()) : Math.random()) * 0.4;
+  return Math.max(1, Math.round(target * jitter));
+}
+export function reserve(dir,rec,capacity,snapshot) {
+  return transaction(dir,(leases,owner)=>{
+    if(leases.some(l=>l.id===rec.id))return {ok:false,reason:'existing reservation'};
+    const limit=Math.min(capacity,...leases.map(l=>l.capacity||capacity));
+    if(leases.length>=limit)return {ok:false,reason:'capacity'};
+    if(leases.some(l=>keysOverlap(l.keys,rec.keys)))return {ok:false,reason:'conflict'};
+    leases.push({...rec,owner,capacity,reservedAt:Date.now()});return {ok:true};
+  },snapshot);
+}
+export function bind(dir,id,launcher,snapshot){return transaction(dir,leases=>{const l=leases.find(l=>l.id===id);if(!l)throw new Error('Reservation expired');l.launcher=launcher;},snapshot);}
+export function release(dir,id,snapshot){return transaction(dir,leases=>{const index=leases.findIndex(l=>l.id===id);if(index>=0)leases.splice(index,1);},snapshot);}
+
+export function prepare(dir,id,pidFile){return transaction(dir,leases=>{const l=leases.find(l=>l.id===id);if(!l)throw new Error("Reservation expired");l.pidFile=pidFile;});}
+
+export function claimRun(dir,key) {
+  return transaction(dir,(_leases,owner,processes)=>{
+    const file=path.join(dir,'run-owners.json');let owners={};
+    try{owners=JSON.parse(fs.readFileSync(file,'utf8'));}catch(e){if(e.code!=='ENOENT')throw e;}
+    for(const [id,r] of Object.entries(owners))if(!sameProcess(r.owner,processes.get(r.owner.ProcessId)))delete owners[id];
+    if(owners[key])throw new Error('Run already has a live controller');
+    const claim={owner,token:crypto.randomUUID()};owners[key]=claim;atomicJson(file,owners);return claim;
+  });
+}
+export function releaseRun(dir,key,claim) {
+  return transaction(dir,()=>{
+    const file=path.join(dir,'run-owners.json');const owners=JSON.parse(fs.readFileSync(file,'utf8'));
+    if(owners[key]?.token===claim.token){delete owners[key];atomicJson(file,owners);}
+  });
+}

package/scripts/core/maintenance-lock.mjs

@@ -0,0 +1,77 @@
+import fs from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+
+// 维护锁：编排器在对自身做升级/优化/维护/更新等改动期间上锁。上锁期间任何 agent
+// 调用编排器（--run-windows/--spawn/--resume-run/preflight/force --assert 等动作入口）
+// 都只得到 MAINTENANCE_MESSAGE 一句话——本轮跳过 orchestrator、由发起对话直接执行。
+// 锁是礼让性门禁而非安全边界：文件损坏/过期一律 fail-open 视为未锁，绝不把工具卡死。
+export const MAINTENANCE_MESSAGE = 'open-tui-orchestrator正在维护更新，本轮跳过orchestrator直接开始执行';
+export const DEFAULT_TTL_MINUTES = 180;
+export const MAX_TTL_MINUTES = 24 * 60;
+
+// 锁全局唯一（按用户），与工作区无关：任何工作区里的调用都能看到同一把锁。
+// ORCH_MAINTENANCE_LOCK 覆盖默认路径（测试/隔离用）。
+export function maintenanceLockPath(env = process.env) {
+  const override = String(env.ORCH_MAINTENANCE_LOCK || '').trim();
+  if (override) return path.resolve(override);
+  return path.join(os.homedir(), '.open-tui-orchestrator', 'maintenance-lock.json');
+}
+
+function parseLockJson(raw) {
+  const text = String(raw);
+  return JSON.parse(text.charCodeAt(0) === 0xFEFF ? text.slice(1) : text);
+}
+
+export function readMaintenanceLock(env = process.env, now = Date.now()) {
+  const file = maintenanceLockPath(env);
+  let raw;
+  try { raw = fs.readFileSync(file, 'utf8'); } catch { return { locked: false }; }
+  let data;
+  try { data = parseLockJson(raw); } catch { return { locked: false, invalid: true }; }
+  const expiresAt = Number(data && data.expiresAt);
+  if (!Number.isFinite(expiresAt)) {
+    // expiresAt 缺失/非数字 = 损坏锁：按自身契约 fail-open（绝不把工具卡死），顺手清理。
+    try { fs.rmSync(file, { force: true }); } catch { /* ignore */ }
+    return { locked: false, invalid: true };
+  }
+  if (expiresAt <= now) {
+    // 过期即解锁并顺手清理（维护方崩溃/忘记解锁也不会把编排器关死）。
+    try { fs.rmSync(file, { force: true }); } catch { /* ignore */ }
+    return { locked: false, expired: true };
+  }
+  return {
+    locked: true,
+    reason: String((data && data.reason) || ''),
+    startedAt: Number(data && data.startedAt) || null,
+    expiresAt,
+  };
+}
+
+export function lockedForMaintenance(env = process.env) {
+  try { return readMaintenanceLock(env).locked; } catch { return false; }
+}
+
+export function acquireMaintenanceLock({ reason = '', ttlMinutes = DEFAULT_TTL_MINUTES, env = process.env } = {}) {
+  const ttl = Number(ttlMinutes);
+  const minutes = Number.isFinite(ttl) && ttl > 0 ? Math.min(ttl, MAX_TTL_MINUTES) : DEFAULT_TTL_MINUTES;
+  const file = maintenanceLockPath(env);
+  fs.mkdirSync(path.dirname(file), { recursive: true });
+  const now = Date.now();
+  const data = { version: 1, pid: process.pid, reason: String(reason || ''), startedAt: now, expiresAt: now + Math.round(minutes * 60000) };
+  // tmp+rename 原子落盘，读者永远只看到完整 JSON 或不存在。
+  const tmp = file + '.tmp-' + process.pid;
+  fs.writeFileSync(tmp, JSON.stringify(data, null, 2) + '\n', 'utf8');
+  fs.renameSync(tmp, file);
+  return data;
+}
+
+export function releaseMaintenanceLock(env = process.env) {
+  try {
+    const file = maintenanceLockPath(env);
+    fs.rmSync(file, { force: true });
+    // 顺手收掉空目录（仅当为空才成功，绝不误删其它内容）。
+    try { fs.rmdirSync(path.dirname(file)); } catch { /* ignore */ }
+    return true;
+  } catch { return false; }
+}

package/scripts/core/native-argv.mjs

@@ -0,0 +1,9 @@
+// Windows PowerShell 5 uses legacy native argv serialization. Preserve embedded
+// quotes and trailing backslashes in quoted arguments; PowerShell 7 uses Standard.
+export function nativeArgumentLines() {
+  return [
+    "if($PSVersionTable.PSVersion.Major -ge 7){$PSNativeCommandArgumentPassing='Standard'}else{",
+    "  $agentArgs=@($agentArgs|ForEach-Object{$v=[regex]::Replace($_,'(\\\\*)\"','${1}${1}\\\"'); if($_ -match '\\s'){$v=[regex]::Replace($v,'\\\\+$','$0$0')}; $v})",
+    "}",
+  ];
+}

package/scripts/core/network-policy.mjs

@@ -0,0 +1,18 @@
+// OpenAI-authenticated Responses over HTTPS, without the failing WebSocket probe.
+// Keep the configured model and login. No third-party endpoint or credentials.
+export const networkConfig = Object.freeze({
+  model_provider: 'orchestrator-openai-https',
+  model_providers: {
+    'orchestrator-openai-https': {
+      name: 'OpenAI', wire_api: 'responses', requires_openai_auth: true,
+      supports_websockets: false, supports_standalone_web_search: true,
+    },
+  },
+});
+
+export function networkArgs() {
+  const provider = networkConfig.model_providers[networkConfig.model_provider];
+  return ['-c', `model_provider=${JSON.stringify(networkConfig.model_provider)}`,
+    ...Object.entries(provider).flatMap(([key, value]) =>
+      ['-c', `model_providers.${networkConfig.model_provider}.${key}=${JSON.stringify(value)}`])];
+}

package/scripts/core/openclaw-bootstrap.mjs

@@ -0,0 +1,25 @@
+// Loaded before the actual installed CLI. Credentials stay in memory.
+import fs from 'node:fs';
+import path from 'node:path';
+import {pathToFileURL} from 'node:url';
+import {isolatedConfig,protectSecrets} from './openclaw-config.mjs';
+// Node on Windows can reject recursive mkdir of an existing drive root.
+// Only an already-existing root directory qualifies; all other errors propagate.
+if(process.platform==='win32'){
+ const mkdir=fs.promises.mkdir.bind(fs.promises);
+ fs.promises.mkdir=async function(target,options){
+  if(typeof target==='string'&&options?.recursive&&path.resolve(target)===path.parse(path.resolve(target)).root&&fs.statSync(target).isDirectory())return undefined;
+  return mkdir(target,options);
+ };
+}
+const spec=JSON.parse(fs.readFileSync(process.env.ORCH_OPENCLAW_SPEC,'utf8'));
+const runtime=await import(pathToFileURL(path.join(spec.packageRoot,'dist','plugin-sdk','config-runtime.js')));
+const source=runtime.loadConfig();
+process.env.OPENCLAW_STATE_DIR=spec.state;
+process.env.OPENCLAW_CONFIG_PATH=path.join(spec.state,'runtime-config.json');
+process.env.TEMP=spec.state;process.env.TMP=spec.state;process.env.TMPDIR=spec.state;
+runtime.clearConfigCache();
+const cfg=isolatedConfig(source,spec.workspace,spec.state,spec.planner);
+fs.writeFileSync(process.env.OPENCLAW_CONFIG_PATH,JSON.stringify(protectSecrets(cfg,process.env)),{encoding:'utf8',mode:0o600});
+runtime.setRuntimeConfigSnapshot(cfg,cfg);
+process.chdir(spec.workspace);

package/scripts/core/openclaw-config.mjs

@@ -0,0 +1,35 @@
+import path from 'node:path';
+export function isolatedConfig(source,workspace,state,planner=false) {
+ const cfg=structuredClone(source);
+ cfg.agents={...cfg.agents,defaults:{...cfg.agents?.defaults,workspace,skipBootstrap:true,heartbeat:{every:'0m'}},entries:{main:{workspace,agentDir:path.join(state,'agents','main','agent')}}};
+ delete cfg.agents.list;delete cfg.agents.defaults.memorySearch;
+ cfg.memory={...cfg.memory,search:{enabled:false}};
+ cfg.channels={};cfg.hooks={enabled:false};cfg.cron={enabled:false};
+ // Channel plugins can discover saved accounts even without a channels entry.
+ // Explicitly disable Weixin in workers while retaining model provider plugins.
+ cfg.plugins={...cfg.plugins,entries:{...cfg.plugins?.entries,'openclaw-weixin':{enabled:false}}};
+ cfg.logging={...cfg.logging,file:path.join(state,'openclaw.log')};
+ cfg.tools={...cfg.tools,...(planner?{deny:['*']}:{})};
+ return cfg;
+}
+export function completionText(events,token) {
+ const last=events.filter(e=>e.type==='message'&&e.message).at(-1)?.message;
+ if(last?.role!=='assistant'||!['stop','end_turn'].includes(last.stopReason))return null;
+ const content=Array.isArray(last.content)?last.content:[{type:'text',text:last.content||''}];
+ if(content.some(c=>['toolCall','tool_use'].includes(c.type)))return null;
+ const text=content.filter(c=>c.type==='text').map(c=>c.text).join('').trim();
+ const lastLine=text.split(/\r?\n/).at(-1).trim();
+ return lastLine===`__ORCH_DONE__ ${token}`?lastLine:null;
+}
+export function protectSecrets(config,env) {
+ let index=0;
+ const visit=(value,key='')=>{
+  if(typeof value==='string'&&/(api.?key|token|password|secret|authorization|private.?key)/i.test(key)&&value&&!value.startsWith('${')){
+   const name='ORCH_OC_SECRET_'+index++;env[name]=value;return '${'+name+'}';
+  }
+  if(Array.isArray(value))return value.map(v=>visit(v,key));
+  if(value&&typeof value==='object')return Object.fromEntries(Object.entries(value).map(([k,v])=>[k,visit(v,k)]));
+  return value;
+ };
+ return visit(config);
+}

package/scripts/core/openclaw-host.mjs

@@ -0,0 +1,29 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import {probeCli} from './host-probe.mjs';
+export function resolveOpenClawHost(env=process.env) {
+ const explicit=env.ORCH_CLI||env.OPENCLAW_EXE;
+ const paths=explicit?[path.resolve(explicit)]:String(env.PATH||env.Path||'').split(path.delimiter).flatMap(d=>['openclaw.cmd','openclaw'].map(n=>path.join(d,n)));
+ const rejected=[];
+ for(const file of [...new Set(paths)]){
+  if(!fs.existsSync(file))continue;
+  let entry=/\.mjs$/.test(file)?file:null;
+  if(!entry&&/node_modules[\\/]openclaw[\\/]openclaw\.mjs/.test(fs.readFileSync(file,'utf8')))entry=path.join(path.dirname(file),'node_modules','openclaw','openclaw.mjs');
+  if(!entry||!fs.existsSync(entry))continue;
+  const packageRoot=path.dirname(entry),pkg=JSON.parse(fs.readFileSync(path.join(packageRoot,'package.json'),'utf8'));
+  const bin=fs.existsSync(path.join(path.dirname(file),'node.exe'))?path.join(path.dirname(file),'node.exe'):process.execPath;
+  const ptyEntry=path.join(packageRoot,'node_modules','@lydell','node-pty','index.js');
+  // 接口自证先于版本门：版本常量只记「最后验证于」，不是准入门槛；未验证版本必须带探针实测结果 fail-closed。
+  // 运行时快照与 transcript 模式逐版敏感：扩版 = 逐版实机验收（见 docs/openclaw-adapter.md）。
+  const help=probeCli(bin,[entry,'tui','--help'],{env,timeoutMs:30000});
+  const probeOk=help.status===0&&['--local','--session','--message'].every(x=>String(help.stdout||'').includes(x));
+  if(pkg.name!=='openclaw'||pkg.version!=='2026.9.2'){
+    if(pkg.name==='openclaw')throw new Error('OPENCLAW_VERSION_UNTESTED: installed '+pkg.version+' (tui interface probe '+(probeOk?'OK':'mismatch')+', node-pty '+(fs.existsSync(ptyEntry)?'present':'missing')+'); last fully verified 2026.9.2. Expansion requires per-version acceptance of the config/transcript/TUI interfaces (docs/openclaw-adapter.md).');
+    throw new Error('OPENCLAW_VERSION_UNTESTED: supported version is 2026.9.2');
+  }
+  if(!probeOk){rejected.push(`${bin} ${entry}: tui --help ${help.error?'probe error '+help.error:'exit '+help.status+'; flags mismatch'}`);continue;}
+  if(!fs.existsSync(ptyEntry))throw new Error('OPENCLAW_PTY_MISSING');
+  return {agent:'openclaw',config:{id:'openclaw',bin,entry,packageRoot,ptyEntry,version:pkg.version,available:true}};
+ }
+ throw new Error(`CLI_MISSING: no supported installed OpenClaw CLI; no fallback or automatic install. Tried: ${rejected.join(' | ')||'no candidate found on disk'}`);
+}

package/scripts/core/openclaw-runtime.mjs

@@ -0,0 +1,33 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import {spawn} from 'node:child_process';
+import {fileURLToPath} from 'node:url';
+import {nativeArgumentLines} from './native-argv.mjs';
+const quote=x=>"'"+String(x).replaceAll("'","''")+"'";
+export function writeOpenClawLauncher(config,{key,prompt,suffix,workspace,temp}) {
+ const stem=String(key+'-'+suffix).replace(/[^a-zA-Z0-9_-]/g,'-');
+ const token=/【本块唯一标识】\s*([A-Za-z0-9][A-Za-z0-9_-]*)/.exec(prompt)?.[1];
+ if(!token)throw new Error('OpenClaw window requires a completion token');
+ const state=path.join(temp,'orchestrator','openclaw',stem);fs.mkdirSync(state,{recursive:true});
+ const lp=path.join(temp,'win-launch-'+stem+'.ps1'),pidf=path.join(temp,'window-'+stem+'.pid'),pf=path.join(temp,'agent-win-'+stem+'.md'),rf=path.join(temp,'win-'+stem+'.result.json'),specFile=path.join(state,'launch.json');
+ fs.writeFileSync(pf,prompt,'utf8');
+ fs.writeFileSync(specFile,JSON.stringify({...config,state,workspace,prompt:pf,result:rf,token,timeoutMs:Number(process.env.ORCH_MAX_POLL_MS||900000)}),'utf8');
+ const args=[fileURLToPath(new URL('./openclaw-window.mjs',import.meta.url)),specFile];
+ fs.writeFileSync(lp,'\ufeff'+["$ErrorActionPreference = 'Stop'",`$PID | Set-Content -LiteralPath ${quote(pidf)} -Encoding UTF8`,
+ '[Console]::OutputEncoding = [System.Text.Encoding]::UTF8','$OutputEncoding = [System.Text.Encoding]::UTF8','chcp 65001 | Out-Null',`Set-Location -LiteralPath ${quote(workspace)}`,"$env:ORCH_WINDOW = '1'",
+ '$agentArgs = @('+args.map(quote).join(',')+')',...nativeArgumentLines(),`& ${quote(config.bin)} @agentArgs`,
+ `if (-not (Test-Path -LiteralPath ${quote(rf)})) { @{__EXIT__=1;__DONE__=$true;token=${quote(token)}} | ConvertTo-Json -Compress | Set-Content -LiteralPath ${quote(rf)} -Encoding UTF8 }`,'exit 0'].join('\r\n'),'utf8');
+ return {lp,pidf,pf,rf,openclawState:state};
+}
+export async function runOpenClawPlanner(config,prompt,cwd) {
+ const root=path.join(cwd,'temp','orchestrator','openclaw');fs.mkdirSync(root,{recursive:true});
+ const state=fs.mkdtempSync(path.join(root,'planner-')),specFile=path.join(state,'launch.json');
+ fs.writeFileSync(specFile,JSON.stringify({...config,state,workspace:cwd,planner:true}),'utf8');
+ try{return await new Promise((resolve,reject)=>{
+  const child=spawn(config.bin,['--import',new URL('./openclaw-bootstrap.mjs',import.meta.url).href,config.entry,'agent','exec','--cwd',cwd,'--state-dir',state,'--timeout','60','--json',prompt],{cwd,windowsHide:true,env:{...process.env,ORCH_OPENCLAW_SPEC:specFile,NODE_DISABLE_COMPILE_CACHE:'1'},stdio:['ignore','pipe','pipe']});
+  let raw='',timedOut=false;const timer=setTimeout(()=>{timedOut=true;child.kill();},75000);
+  child.stdout.on('data',b=>{raw+=b;if(raw.length>8000000)child.kill();});child.stderr.resume();
+  child.on('error',e=>{clearTimeout(timer);reject(e);});
+  child.on('close',code=>{clearTimeout(timer);try{if(code!==0||timedOut)throw new Error('OPENCLAW_PLANNER_FAILED');const value=JSON.parse(raw);const final=value.outputText||value.text||value.result?.finalAssistantVisibleText||value.result?.payloads?.map(p=>p.text||'').join('')||value.payloads?.map(p=>p.text||'').join('');if(!final)throw new Error('OPENCLAW_PLANNER_EMPTY_RESPONSE');resolve({final});}catch(e){reject(e);}});
+ });}finally{fs.rmSync(state,{recursive:true,force:true});}
+}

package/scripts/core/openclaw-window.mjs

@@ -0,0 +1,44 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import {createRequire} from 'node:module';
+import {fileURLToPath} from 'node:url';
+import {DatabaseSync} from 'node:sqlite';
+import {spawnSync} from 'node:child_process';
+import {completionText} from './openclaw-config.mjs';
+const specFile=process.argv[2],spec=JSON.parse(fs.readFileSync(specFile,'utf8'));
+const pty=createRequire(import.meta.url)(spec.ptyEntry);
+const env={...process.env,ORCH_OPENCLAW_SPEC:specFile,NODE_DISABLE_COMPILE_CACHE:'1',OPENCLAW_NO_RESPAWN:'1'};
+delete env.NODE_COMPILE_CACHE;
+const validation=spawnSync(spec.bin,['--import',new URL('./openclaw-bootstrap.mjs',import.meta.url).href,spec.entry,'config','validate','--json'],{env,cwd:spec.workspace,windowsHide:true,timeout:30000,encoding:'utf8'});
+if(validation.status!==0){
+ fs.writeFileSync(spec.result,JSON.stringify({__EXIT__:1,__DONE__:true,__REPORT__:'OPENCLAW_CONFIG_INVALID: preflight failed before interactive startup',token:spec.token}),'utf8');
+ process.exit(1);
+}
+const child=pty.spawn(spec.bin,['--import',new URL('./openclaw-bootstrap.mjs',import.meta.url).href,spec.entry,'tui','--local','--session','main','--message',fs.readFileSync(spec.prompt,'utf8'),'--timeout-ms',String(spec.timeoutMs)],{cwd:spec.workspace,env,cols:process.stdout.columns||120,rows:process.stdout.rows||35,name:'xterm-256color'});
+child.onData(data=>process.stdout.write(data));
+let marker=null,seenAt=0,closingAt=0,failure='',finished=false;
+const dbFile=path.join(spec.state,'agents','main','agent','openclaw-agent.sqlite');
+const started=Date.now();
+const timer=setInterval(()=>{
+ if(Date.now()-started>spec.timeoutMs&&!closingAt){failure='OPENCLAW_WINDOW_TIMEOUT';closingAt=Date.now();child.write('/exit\r');}
+ if(closingAt){if(Date.now()-closingAt>10000)child.kill();return;}
+ if(!fs.existsSync(dbFile))return;
+ let db;
+ try{
+  db=new DatabaseSync(dbFile,{readOnly:true});
+  const rows=db.prepare('SELECT e.event_json FROM transcript_events e JOIN session_nodes s ON s.current_session_id=e.session_id WHERE s.session_key=? ORDER BY e.seq DESC LIMIT 8').all('agent:main:main');
+  const text=completionText(rows.reverse().map(r=>JSON.parse(r.event_json)),spec.token);
+  if(!text){seenAt=0;return;}
+  if(!seenAt){seenAt=Date.now();return;}
+  if(Date.now()-seenAt>=1000){marker=text;closingAt=Date.now();child.write('/exit\r');}
+ }catch(error){if(!/locked|busy|no such table/i.test(error.message)){failure='OPENCLAW_TRANSCRIPT_UNSUPPORTED: '+error.message;closingAt=Date.now();child.write('/exit\r');}}
+ finally{db?.close();}
+},500);
+child.onExit(({exitCode})=>{
+ if(finished)return;finished=true;clearInterval(timer);
+ const result={__EXIT__:marker&&!failure&&exitCode===0?0:1,__DONE__:true,__REPORT__:marker||failure||'OpenClaw exited without a verified completion marker',token:spec.token};
+ fs.writeFileSync(path.join(spec.state,'completion.json'),JSON.stringify({...result,nativeExitCode:exitCode,automaticClose:Boolean(marker)&&!failure,finishedAt:Date.now()}),'utf8');
+ fs.writeFileSync(spec.result+'.tmp',JSON.stringify(result),'utf8');fs.renameSync(spec.result+'.tmp',spec.result);
+ process.exit(result.__EXIT__);
+});
+process.on('SIGINT',()=>{failure='OPENCLAW_INTERRUPTED';closingAt=Date.now();child.write('\x03');});

package/scripts/core/opencode-host.mjs

@@ -0,0 +1,80 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import {probeCli} from './host-probe.mjs';
+
+// opencode adapter: resolve the real opencode binary and build window/planner argv.
+// Window mode is interactive `opencode run -i --auto` (auto-approves permissions like
+// pi's --approve; the orchestrator has already normalized authorization).
+export function resolveOpenCodeHost(env = process.env) {
+  const explicit = env.ORCH_CLI || env.OPENCODE_EXE;
+  const candidates = explicit
+    ? [path.resolve(explicit)]
+    : String(env.PATH || env.Path || '')
+        .split(path.delimiter)
+        .flatMap((dir) => ['opencode.exe', 'opencode.cmd', 'opencode'].map((n) => path.join(dir, n)));
+  const rejected = [];
+  for (const file of [...new Set(candidates)]) {
+    if (!fs.existsSync(file) || !fs.statSync(file).isFile()) continue;
+    let bin = file;
+    let prefixArgs = [];
+    if (!/\.exe$/i.test(file)) {
+      // npm shim (opencode / opencode.cmd) -> resolve the packaged opencode-ai binary.
+      let entry = /\.[cm]?js$/i.test(file) ? file : null;
+      if (!entry) {
+        try {
+          const shim = fs.readFileSync(file, 'utf8');
+          const match = shim.match(/node_modules[\\/]opencode-ai[\\/]bin[\\/](opencode\.exe|opencode)/);
+          if (match) entry = path.join(path.dirname(file), 'node_modules', 'opencode-ai', 'bin', match[1]);
+        } catch {
+          /* not a text shim */
+        }
+      }
+      const packaged = path.join(path.dirname(file), 'node_modules', 'opencode-ai', 'bin', 'opencode.exe');
+      entry = [entry, packaged].find((p) => p && fs.existsSync(p));
+      if (!entry) continue;
+      if (/\.exe$/i.test(entry)) {
+        bin = entry;
+      } else {
+        const sibling = path.join(path.dirname(file), 'node.exe');
+        bin = fs.existsSync(sibling) ? sibling : process.execPath;
+        prefixArgs = [entry];
+      }
+    }
+    const label = [bin, ...prefixArgs].join(' ');
+    const help = probeCli(bin, [...prefixArgs, '--help'], {env});
+    if (help.status !== 0 || !/run opencode with a message/.test(help.out)) { rejected.push(`${label}: --help ${help.error ? 'probe error ' + help.error : 'exit ' + help.status + '; banner mismatch'}`); continue; }
+    const runHelp = probeCli(bin, [...prefixArgs, 'run', '--help'], {env});
+    if (runHelp.status !== 0 || !['--interactive', '--auto', '--dir'].every((f) => runHelp.out.includes(f))) { rejected.push(`${label}: run --help ${runHelp.error ? 'probe error ' + runHelp.error : 'exit ' + runHelp.status + '; flags mismatch'}`); continue; }
+    const versionResult = probeCli(bin, [...prefixArgs, '--version'], {env});
+    const version = versionResult.out.trim().split(/\s+/)[0];
+    if (versionResult.status !== 0 || !version) { rejected.push(`${label}: --version ${versionResult.error ? 'probe error ' + versionResult.error : 'exit ' + versionResult.status + '; unusable output'}`); continue; }
+    return {agent:'opencode', config:{id:'opencode', label:'opencode', version, bin, prefixArgs, available:true, native:prefixArgs.length===0, completionMarker:'__ORCH_DONE__', modelEnv:'ORCH_MODEL', effortEnv:'ORCH_EFFORT'}};
+  }
+  throw new Error(`CLI_MISSING: opencode; no supported installed opencode CLI found. No fallback or automatic install. Tried: ${rejected.join(' | ') || 'no candidate found on disk'}`);
+}
+
+// Base argv for an opencode run. The interactive window uses `run -i --auto --dir <cwd>`.
+export function opencodeArgs(config, {model, effort, cwd} = {}) {
+  return [
+    ...(config.prefixArgs || []),
+    'run',
+    '-i',
+    '--auto',
+    '--dir',
+    cwd || process.cwd(),
+    ...(model && String(model).trim() && !/\s/.test(String(model)) ? ['--model', String(model).trim()] : []),
+  ];
+}
+
+// Planner argv: headless, JSON events, no interactive mode.
+export function opencodePlannerArgs(config, {model, cwd} = {}) {
+  return [
+    ...(config.prefixArgs || []),
+    'run',
+    '--format',
+    'json',
+    '--dir',
+    cwd || process.cwd(),
+    ...(model && String(model).trim() && !/\s/.test(String(model)) ? ['--model', String(model).trim()] : []),
+  ];
+}