super-dsh 0.3.2-e → 0.3.3-b

package/agent-omp-sdk/dist/agent.js

@@ -4,7 +4,7 @@ import { LlmAttemptId, ToolCallId, QUOTA_EXCEEDED_CODE, createAssistantMessage,
 import { createScope } from "@deepseek-ai/dsh-scope";
 import { ompPermissionCommand } from "./permission.js";
 import { getBridgeStore } from "./store/index.js";
-import { withSystemHead } from "../../superd-hub/dist/index.js";
+import { createAgentModelFace, withSystemHead } from "../../superd-hub/dist/index.js";
 /**
  * v2 live assistant-stream publication for the OMP bridge — the same frame
  * protocol the reference loop's AssistantStreamAttempt speaks (start marker,
@@ -254,6 +254,9 @@ export class OmpAgent {
     session;
     inbox;
     ctx;
+    /** Durable model selection (0.2.2 Agent face): the shared hub face over
+     *  `model/selection` events — see superd-hub agent-model-face.ts. */
+    model;
     #rpc;
     #loopCtx;
     #scope;
@@ -304,6 +307,17 @@ export class OmpAgent {
         this.id = id;
         this.options = options;
         this.session = withSystemHead(session, () => createSystemMessage(""));
+        this.model = createAgentModelFace({
+            session: this.session,
+            options: this.options,
+            appendSelection: (selection) => {
+                this.session.append("model/selection", selection);
+            },
+            readDefault: () => {
+                const service = this.ctx.get("agentDefaultModel");
+                return service?.currentSelection?.();
+            },
+        });
         this.#rpc = rpc;
         this.#onIdleExit = onIdleExit;
         this.#dispatch = agentEvents(loopCtx, this);

package/agent-omp-sdk/package.json

@@ -26,14 +26,14 @@
   "dependencies": {},
   "peerDependencies": {
     "@deepseek-ai/cordis": "^4.0.1",
-    "@deepseek-ai/dsh-agent": ">=0.1.5-0 <0.3.0-0",
-    "@deepseek-ai/dsh-agent-presets": ">=0.1.5-0 <0.3.0-0",
-    "@deepseek-ai/dsh-llm": ">=0.1.5-0 <0.3.0-0",
-    "@deepseek-ai/dsh-scope": ">=0.1.5-0 <0.3.0-0",
-    "@deepseek-ai/dsh-session": ">=0.1.5-0 <0.3.0-0",
-    "@deepseek-ai/dsh-session-persistence": ">=0.1.5-0 <0.3.0-0",
-    "@deepseek-ai/dsh-typert-protocol": ">=0.1.5-0 <0.3.0-0",
-    "@deepseek-ai/dsh-home-paths": ">=0.1.5-0 <0.3.0-0",
+    "@deepseek-ai/dsh-agent": ">=0.2.2-0 <1.0.0-0",
+    "@deepseek-ai/dsh-agent-presets": ">=0.2.2-0 <1.0.0-0",
+    "@deepseek-ai/dsh-llm": ">=0.2.2-0 <1.0.0-0",
+    "@deepseek-ai/dsh-scope": ">=0.2.2-0 <1.0.0-0",
+    "@deepseek-ai/dsh-session": ">=0.2.2-0 <1.0.0-0",
+    "@deepseek-ai/dsh-session-persistence": ">=0.2.2-0 <1.0.0-0",
+    "@deepseek-ai/dsh-typert-protocol": ">=0.2.2-0 <1.0.0-0",
+    "@deepseek-ai/dsh-home-paths": ">=0.2.2-0 <1.0.0-0",
     "@pgmi-builds/superd-hub": "*"
   },
   "peerDependenciesMeta": {

package/agent-pi/dist/agent.js

@@ -3,7 +3,7 @@ import { randomUUID } from "node:crypto";
 import { agentEvents } from "@deepseek-ai/dsh-agent";
 import { Inbox } from "./inbox.js";
 import { LlmAttemptId, ToolCallId, QUOTA_EXCEEDED_CODE, createAssistantMessage, createSystemMessage, createToolResultMessage, createUserMessage } from "@deepseek-ai/dsh-llm";
-import { withSystemHead } from "../../superd-hub/dist/index.js";
+import { createAgentModelFace, recordedModelSelection, withSystemHead } from "../../superd-hub/dist/index.js";
 import { createScope } from "@deepseek-ai/dsh-scope";
 import { PI_IDLE_EXIT_MS } from "./knobs.js";
 import { trace } from "./knobs.js";
@@ -176,6 +176,9 @@ export class PiAgent {
     session;
     inbox;
     ctx;
+    /** Durable model selection (0.2.2 Agent face): the shared hub face over
+     *  `model/selection` events — see superd-hub agent-model-face.ts. */
+    model;
     #client;
     #loopCtx;
     #scope;
@@ -237,6 +240,17 @@ export class PiAgent {
         this.id = id;
         this.options = options;
         this.session = withSystemHead(session, () => createSystemMessage(""));
+        this.model = createAgentModelFace({
+            session: this.session,
+            options: this.options,
+            appendSelection: (selection) => {
+                this.session.append("model/selection", selection);
+            },
+            readDefault: () => {
+                const service = this.ctx.get("agentDefaultModel");
+                return service?.currentSelection?.();
+            },
+        });
         this.#client = client;
         this.#onIdleExit = onIdleExit;
         this.#runtimeInfo = runtimeInfo;
@@ -522,7 +536,11 @@ export class PiAgent {
      * LIVE (an upgrade over the codex SDK line's next-turn switch).
      */
     async #syncModelSelection() {
-        const persisted = this.session.requestHeader()?.config;
+        // 0.2.2: the recorded-selection fold (pending ?? last-used) leads the
+        // waterfall, so a `model.select` switch lands on the NEXT turn — the
+        // native precedence (pending retires only on a matching request header).
+        const recorded = recordedModelSelection(this.session.snapshotEvents());
+        const persisted = recorded ?? this.session.requestHeader()?.config;
         const service = this.ctx.get("agentDefaultModel");
         const selection = service?.currentSelection();
         const target = persisted !== undefined && persisted.provider !== "" && persisted.model !== ""

package/agent-pi/dist/index.js

@@ -29,7 +29,6 @@ import { bindForeignHub } from '@pgmi-builds/superd-hub/foreign-hub';
 import { realpathSync, statSync } from "node:fs";
 import { join } from "node:path";
 import { Service } from "@deepseek-ai/cordis";
-import { installModelSelection } from "@deepseek-ai/dsh-agent";
 import { SessionLogOffset, SessionPreparation, interruptedTurnClosers, } from "@deepseek-ai/dsh-session";
 import { PiSessionClient } from "./pi-client.js";
 import { PiAgent } from "./agent.js";
@@ -514,16 +513,11 @@ async function setupAndPublish(loopCtx, ownerCtx, id, agentOptions, setup, sessi
             const route = runtimeInfo?.routeContext(agentOptions);
             if (route !== undefined) {
                 const selection = { provider: route.provider, model: route.model };
-                let picked = selection;
-                installModelSelection(agent.ctx, {
-                    get current() { return picked; },
-                    set current(next) { picked = next; },
-                    assembled: undefined,
-                });
-                // `model/selection` is contributed to `SessionEventMap` by the upstream
-                // session-controller package (declaration merging); this adapter does
-                // not depend on it, so the append goes through a narrow local cast.
-                session.append("model/selection", selection);
+                // 0.2.2: installModelSelection dropped its injected-ref parameter — the
+                // durable face (`agent.model`, the same mechanism session/selectModel
+                // uses) carries the pin: select() appends the typed, deduped
+                // `model/selection` event.
+                agent.model.select(selection);
                 trace(`session route pinned: ${route.provider}/${route.model}`);
             }
         }

package/agent-pi/package.json

@@ -27,13 +27,13 @@
   },
   "peerDependencies": {
     "@deepseek-ai/cordis": "^4.0.1",
-    "@deepseek-ai/dsh-agent": ">=0.1.5-0 <0.3.0-0",
-    "@deepseek-ai/dsh-agent-presets": ">=0.1.5-0 <0.3.0-0",
-    "@deepseek-ai/dsh-llm": ">=0.1.5-0 <0.3.0-0",
-    "@deepseek-ai/dsh-scope": ">=0.1.5-0 <0.3.0-0",
-    "@deepseek-ai/dsh-session": ">=0.1.5-0 <0.3.0-0",
-    "@deepseek-ai/dsh-session-persistence": ">=0.1.5-0 <0.3.0-0",
-    "@deepseek-ai/dsh-typert-protocol": ">=0.1.5-0 <0.3.0-0",
+    "@deepseek-ai/dsh-agent": ">=0.2.2-0 <1.0.0-0",
+    "@deepseek-ai/dsh-agent-presets": ">=0.2.2-0 <1.0.0-0",
+    "@deepseek-ai/dsh-llm": ">=0.2.2-0 <1.0.0-0",
+    "@deepseek-ai/dsh-scope": ">=0.2.2-0 <1.0.0-0",
+    "@deepseek-ai/dsh-session": ">=0.2.2-0 <1.0.0-0",
+    "@deepseek-ai/dsh-session-persistence": ">=0.2.2-0 <1.0.0-0",
+    "@deepseek-ai/dsh-typert-protocol": ">=0.2.2-0 <1.0.0-0",
     "@pgmi-builds/superd-hub": "*"
   },
   "peerDependenciesMeta": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "super-dsh",
-  "version": "0.3.2-e",
+  "version": "0.3.3-b",
   "description": "Super D for the DeepSeek Harness (DSH) — one dsh plugin that mounts the superd hub (runtime selector, roster, per-runtime agents) and joins local foreign-agent runtimes (OMP, Codex, Claude, Pi, Hermes, Antigravity) into the DSH Web UI. Each runtime keeps its native home and session store; the hub only bridges.",
   "type": "module",
   "license": "MIT",
@@ -93,26 +93,26 @@
   },
   "peerDependencies": {
     "@deepseek-ai/cordis": "^4.0.1",
-    "@deepseek-ai/dsh-agent": ">=0.1.5-0 <0.3.0-0",
-    "@deepseek-ai/dsh-agent-presets": ">=0.1.5-0 <0.3.0-0",
-    "@deepseek-ai/dsh-api-gateway": ">=0.1.5-0 <0.3.0-0",
-    "@deepseek-ai/dsh-commands": ">=0.1.5-0 <0.3.0-0",
-    "@deepseek-ai/dsh-home-paths": ">=0.1.5-0 <0.3.0-0",
-    "@deepseek-ai/dsh-host-webserver": ">=0.1.5-0 <0.3.0-0",
-    "@deepseek-ai/dsh-llm": ">=0.1.5-0 <0.3.0-0",
-    "@deepseek-ai/dsh-scope": ">=0.1.5-0 <0.3.0-0",
-    "@deepseek-ai/dsh-session": ">=0.1.5-0 <0.3.0-0",
-    "@deepseek-ai/dsh-session-persistence": ">=0.1.5-0 <0.3.0-0",
-    "@deepseek-ai/dsh-tools": ">=0.1.5-0 <0.3.0-0",
-    "@deepseek-ai/dsh-typert-protocol": ">=0.1.5-0 <0.3.0-0",
-    "@deepseek-ai/dsh-user-approval": ">=0.1.5-0 <0.3.0-0",
-    "@deepseek-ai/dsh-user-questions": ">=0.1.5-0 <0.3.0-0",
-    "@deepseek-ai/dsh-client-connection": ">=0.1.5-0 <0.3.0-0",
-    "@deepseek-ai/dsh-app-boot": ">=0.1.5-0 <0.3.0-0",
-    "@deepseek-ai/dsh-atomic-write": ">=0.1.5-0 <0.3.0-0",
-    "@deepseek-ai/dsh-cmdline": ">=0.1.5-0 <0.3.0-0",
-    "@deepseek-ai/dsh-plugin-manager": ">=0.1.5-0 <0.3.0-0",
-    "@deepseek-ai/dsh-jobs": ">=0.1.5-0 <0.3.0-0"
+    "@deepseek-ai/dsh-agent": ">=0.2.2-0 <1.0.0-0",
+    "@deepseek-ai/dsh-agent-presets": ">=0.2.2-0 <1.0.0-0",
+    "@deepseek-ai/dsh-api-gateway": ">=0.2.2-0 <1.0.0-0",
+    "@deepseek-ai/dsh-commands": ">=0.2.2-0 <1.0.0-0",
+    "@deepseek-ai/dsh-home-paths": ">=0.2.2-0 <1.0.0-0",
+    "@deepseek-ai/dsh-host-webserver": ">=0.2.2-0 <1.0.0-0",
+    "@deepseek-ai/dsh-llm": ">=0.2.2-0 <1.0.0-0",
+    "@deepseek-ai/dsh-scope": ">=0.2.2-0 <1.0.0-0",
+    "@deepseek-ai/dsh-session": ">=0.2.2-0 <1.0.0-0",
+    "@deepseek-ai/dsh-session-persistence": ">=0.2.2-0 <1.0.0-0",
+    "@deepseek-ai/dsh-tools": ">=0.2.2-0 <1.0.0-0",
+    "@deepseek-ai/dsh-typert-protocol": ">=0.2.2-0 <1.0.0-0",
+    "@deepseek-ai/dsh-user-approval": ">=0.2.2-0 <1.0.0-0",
+    "@deepseek-ai/dsh-user-questions": ">=0.2.2-0 <1.0.0-0",
+    "@deepseek-ai/dsh-client-connection": ">=0.2.2-0 <1.0.0-0",
+    "@deepseek-ai/dsh-app-boot": ">=0.2.2-0 <1.0.0-0",
+    "@deepseek-ai/dsh-atomic-write": ">=0.2.2-0 <1.0.0-0",
+    "@deepseek-ai/dsh-cmdline": ">=0.2.2-0 <1.0.0-0",
+    "@deepseek-ai/dsh-plugin-manager": ">=0.2.2-0 <1.0.0-0",
+    "@deepseek-ai/dsh-jobs": ">=0.2.2-0 <1.0.0-0"
   },
   "peerDependenciesMeta": {
     "@deepseek-ai/cordis": {

package/remote/plugin.d.ts

@@ -225,9 +225,13 @@ interface ProcessOptions {
   onOutput?: () => void;
   /** Overlay on process.env (tool-built values only, e.g. RSYNC_RSH). */
   env?: NodeJS.ProcessEnv;
+  /** Task E（SSH MUX）：取消（timeout 或显式 cancel）即同步回调，不等 close。mux master 会经
+   *  fd-passing 持有被杀客户端的会话 fd 直到远端会话结束——若远端清理 killer 等 close 后才发射，
+   *  就成了「close 等远端结束、远端结束等 killer」死锁。此处先行启动 killer 才能解开 close。至多一次。 */
+  onCancel?: () => void;
 }
 /** Real detached process. Completion includes group cleanup, even after its leader closes. */
-declare function startBinaryProcess(argv: string[], options?: Pick<ProcessOptions, 'cwd' | 'timeoutSec' | 'env'>): {
+declare function startBinaryProcess(argv: string[], options?: Pick<ProcessOptions, 'cwd' | 'timeoutSec' | 'env' | 'onCancel'>): {
   stdout: Readable;
   stderr: Readable;
   stdin: Writable;
@@ -334,15 +338,6 @@ interface PtyDispatchResult {
   running?: boolean;
   job?: PtyRunningJob;
 }
-/** 账本条目（§5）：commandId / 摘要 / exit / 耗时；保留最近 20 条（user 定案）。 */
-interface LedgerEntry {
-  commandId: string;
-  jobId?: string;
-  summary: string;
-  exit: number | null;
-  durationMs: number;
-  running: boolean;
-}
 type PtyState = 'cold' | 'starting' | 'ready' | 'dead' | 'disposed';
 /** 会话运行时快照（status 面消费，Ruling 16 词汇源）。 */
 interface SessionSnapshot {
@@ -361,12 +356,11 @@ declare class PtySession {
   private deathWaiters;
   private diag;
   private inFlight;
+  private cmdSeq;
   /** P4/P5：当前占用前台的 detached job（background/超时 handoff）。非 null 时新命令拒绝（Q6）。 */
   private detachedJob;
   /** §3.2（2026-10-25）：当前占用会话的命令——dispatch 同步占位，settle/cleanup 释放；input 的唯一写入对象。 */
   private activeCommand;
-  /** 账本（§5）：本会话最近 20 条命令（FIFO，超出丢最旧）。 */
-  private ledger;
   /** env 侧信道基线（init E 帧）；undefined = 侧信道不可用（不报假 delta）。 */
   private envBaseline;
   /** idle 起点（ready / settle 时重置）；null = 尚无 idle 时钟（cold 或已 dispose）。 */
@@ -387,7 +381,12 @@ declare class PtySession {
   get lastCwd(): string | null;
   /** 占用前台的 detached job 的 commandId（无 = null；close 拒绝与 busy 文案共用）。 */
   get detachedCommandId(): string | null;
-  /** job 通道收养后回填 jobId（timeout handoff 时 registry id ≠ commandId，账本如实记录两者）；运行中的命令同步携带（input 回执用）。 */
+  /** handoff/card 面（2026-11-01 默认 PTY 轮）：当前占用会话的命令与可选 job 句柄；无 = null。 */
+  get active(): {
+    commandId: string;
+    jobId?: string;
+  } | null;
+  /** job 通道收养后回填 jobId（timeout handoff 时 registry id ≠ commandId）；运行中的命令同步携带（stdin-only 写入回执用）。 */
   attachJob(commandId: string, jobId: string): void;
   /** Workbench 身份（§3）：id + 可选 label + connection + byo 标记。 */
   get identity(): {
@@ -397,8 +396,6 @@ declare class PtySession {
     byo: boolean;
     builtOn: boolean;
   };
-  /** 账本快照（session card 面，只读）。 */
-  ledgerSnapshot(): readonly LedgerEntry[];
   /** spawn 创建原文（仅 BYO 会话；v2 起仅存档，不参与复用判定）。 */
   get origin(): string | undefined;
   /** status 面快照：state + busy（有命令在跑）+ idleMs（上次 settle 至今）+ pid（进程组头，kill 兜底可观测）。 */
@@ -597,6 +594,41 @@ interface RsyncReceipt extends RunResult {
  */
 declare function runRsync(request: RsyncRequest, source: RsyncEndpoint, destination: RsyncEndpoint, signal: AbortSignal, options?: RelayRsyncOptions): Promise<RsyncReceipt>;
 //#endregion
+//#region src/remote/ssh-mux.d.ts
+interface SshMuxIdentity {
+  /** 原始 target 串（如 `ssh:dev4` / `dev4`）——同一 effective 身份不同拼法也不串 socket。 */
+  target: string;
+  connection: SshConnection;
+}
+interface SshMuxOptions {
+  persistSec?: number;
+  /** socket 目录根（默认 os.tmpdir()）；测试注入口。 */
+  rootDir?: string;
+  runner?: (argv: string[], opts?: {
+    timeoutSec?: number;
+  }) => Promise<{
+    exit: number | null;
+  }>;
+}
+/** 每 Agent 一个（driver 私有）：tool-owned 0700 socket 目录 + 按连接身份的 socket 名。
+ *  目录名含随机 owner 后缀，跨 Agent 天然不共享；dispose 逐 socket `-O exit` 后整目录删除。 */
+declare class SshMux {
+  private readonly persistSec;
+  private readonly rootDir;
+  private readonly runner;
+  private readonly owner;
+  private readonly sockets;
+  private dir;
+  private disposal;
+  constructor(options?: SshMuxOptions);
+  /** 注入 SSH argv 的 MUX 选项（trusted internal argv，非模型输入）。目录懒建（纯 docker/hub
+   *  Agent 永不触盘）；超限/已 dispose 返回 [] = 诚实退化为普通连接。 */
+  argvFor(identity: SshMuxIdentity): string[];
+  /** Teardown：先 `-O exit` 逐 socket 礼貌拆除 master（不拨号、5s 上限、错误全吞——
+   *  master 已死/残 socket 属正常），再删目录。单飞（重复调用同一 Promise）。 */
+  dispose(): Promise<void>;
+}
+//#endregion
 //#region src/remote/oneshot.d.ts
 interface OneShotOptions {
   stdin?: string;
@@ -616,6 +648,8 @@ interface ProbeOptions {
   connectTimeoutSec?: number;
   hardTimeoutSec?: number;
   runner?: (argv: string[], opts?: OneShotOptions) => Promise<OneShotResult>;
+  /** Task E：SSH 探测与 oneshot 执行链共用 MUX（同一身份 → 同一 master，探测零额外握手）。 */
+  muxArgvFor?: (plan: TargetPlan) => readonly string[];
 }
 //#endregion
 //#region src/remote/roster.d.ts
@@ -680,6 +714,7 @@ interface RemoteDriverOptions {
   onAudit?: (r: RemoteAuditRecord) => void;
   oneshotArgvFor?: (plan: TargetPlan, cmd: string, options: {
     cleanupTag?: string;
+    muxArgv?: readonly string[];
   }) => string[];
   ptyArgvFor?: (plan: TargetPlan) => string[];
   spawnArgvFor?: (spawnCommand: string) => string[];
@@ -688,6 +723,8 @@ interface RemoteDriverOptions {
   probeRunner?: ProbeOptions['runner'];
   /** 测试/验收缝：helper 资产来源（默认 lib 旁挂 helper-bin）；显式 null 强制 shim 路径。 */
   helperAssetsFor?: () => HelperAssets | null;
+  /** 测试/验收缝：SSH oneshot MUX 状态（默认每 driver 一个 SshMux = 每 Agent 隔离）。 */
+  sshMux?: SshMux;
   /** 测试缝：roster 扫描执行器（裸名解析复用）。 */
   rosterRunner?: RosterOptions['runner'];
   /** 测试缝：ssh config 读取（裸名解析复用）。 */
@@ -703,6 +740,10 @@ declare function hubPtyAssets(): {
 declare class RemoteDriver {
   private readonly opts;
   private readonly pool;
+  /** 默认 PTY 槽（spec remote-default-pty §1）：sessionKey → 归一 machineKey → pool key。
+   * 会话本体是普通 PtySession（id 创建即认领，roster 全可见）；槽登记在 dispose/TTL 后悬空，
+   * 取槽时经 pool.get（disposed 视同出池）惰性清理。 */
+  private readonly defaultSlots;
   private readonly labels;
   private readonly hubOwner;
   private readonly hubProviders;
@@ -715,6 +756,7 @@ declare class RemoteDriver {
   private readonly runnerOf;
   private disposal;
   private readonly ptyIdleTtlSec;
+  private readonly mux;
   constructor(opts?: RemoteDriverOptions);
   call(params: RemoteCallParams, callCtx?: {
     sessionKey?: string;
@@ -753,6 +795,10 @@ declare class RemoteDriver {
   private planOf;
   /** ssh:<name> 的池感知解析：BYO 身份 → 其 connection；否则按 config 别名/主机名。 */
   private sshPlanFor;
+  /** Task E MUX 身份：仅 SSH plan 注入（docker/incus/hub 返回 undefined）。身份键 = 原始
+   * target 串 + 有效连接字段（host/user/port/key/ProxyJump）——同身份共享 master，跨身份
+   * 不串 socket；目录/寿命/拆除全部由 SshMux 自持。 */
+  private muxArgvFor;
   /** BYO ssh 注册（v2：无 spec 对比——label 占用即拒；注册成功才认领）。返回实际名（label 或 s-id）。 */
   private registerByoSsh;
   /** PTY 会话创建（native/spawn 同一形状）：上限 → label 认领 → 惰性会话（失败由 onDead 释放 label）。 */
@@ -760,8 +806,36 @@ declare class RemoteDriver {
   private ttlMinutes;
   /** connection 由 BYO ssh 身份建立 → card 面标 `(built on)`（与 roster 同词，R2 复核 P2-10）。 */
   private isBuiltOn;
-  /** PTY 创建形唯一实现（execute 与 background 预建共用）：spawn BYO / ssh BYO / native `<transport>:pty`。 */
+  /** PTY 创建形唯一实现（execute 与 background 预建共用）：spawn BYO（spec 2026-11-01：native `:pty`/hub-pty 创建语法已删，machine 会话经默认槽 + handoff）。 */
   private createPtyLane;
+  /** 池条目的槽键归一：同一实体（host/container/machine 身份）跨裸名/前缀/撞名前缀共享同一默认槽。 */
+  private machineKeyOfEntry;
+  /** 默认槽的 machine 规格：归一 key + 创建 argv + 展示 connection（hub 每次经 ptyEndpoint 重验 pairing，P10）。 */
+  private machineSlotSpec;
+  /** 取/懒建 machine 的默认 PTY 槽：dead/disposed 槽惰性重建；id 创建即认领（roster 全可见 + 防撞）。 */
+  private defaultSlot;
+  private releaseDefaultSlot;
+  /** 按池键反查并解绑默认槽（background 提交即 handoff 用）；非槽会话无操作。 */
+  private releaseSlotByPoolKey;
+  /** roster/status 面：本 session 的默认槽标注（session id → machineKey；悬空条目过滤）。 */
+  private defaultMarks;
+  /** spec §1 handoff（2026-11-01 二/三轮裁决）：把 machine 默认 PTY 解绑成可寻址 pty:<id>——同引用移动
+   * （不重启、不复制输出流）；fresh（尚无默认槽）= 后台创建空闲 shell 再隔离（默认 PTY 思维模型恒
+   * ready，创建时机是实现细节）；busy = 附当前命令与 job 句柄。machine 下次 exec 按需新建默认 PTY。 */
+  handoff(target: string, callCtx?: {
+    sessionKey?: string;
+  }): Promise<RemoteCallResult>;
+  /** close 统一入口（spec §1 + 三轮补充裁决）：machine target 只关默认槽；pty selector 关该会话；
+   * 不存在 job 定位——取消运行中命令的唯一入口是官方 job_kill。 */
+  close(target: string, sessionKey: string, force?: boolean): Promise<{
+    session: string;
+    connection: string;
+    closed: boolean;
+    reason?: string;
+    killed: string[];
+    message?: string;
+  }>;
+  private closeDefault;
   /** background PTY lane：会话先占位（不拨号）再进官方 jobs registry——首回执必须能寻址；
    * registry 拒绝时把新建的会话拆掉（复用形的会话绝不拆）。返回 undefined = 走普通 oneshot job。 */
   preparePtyLane(params: RemoteCallParams, callCtx?: {
@@ -786,10 +860,9 @@ declare class RemoteDriver {
   };
   /** job 通道收养回填（timeout handoff 时 registry id ≠ commandId，账本记录两者）。 */
   attachPtyJob(commandId: string, jobId: string, sessionKey: string): void;
-  /** §3.1（2026-10-25）interactive-stdin：input 动作——向已有 live PTY 的当前运行命令
-   * 追加 stdin。只解析池内已存在的会话（pty:<id|label> / 裸 label 命中 pty 项），
-   * 不触发发现、拨号、创建或重连；machine target 与创建形（:pty 后缀，含 hub:<m4>:pty）
-   * 一律明确拒绝并给出可恢复指引。回执附 connection/label 供工具层渲染。 */
+  /** spec remote-default-pty §1（2026-11-01）：exec stdin-only 写入核心——向已有 live PTY 的当前运行命令
+   * 追加 exact-byte stdin。寻址：pty:<id|label> / 裸 label 命中 pty 项 / machine target（其默认槽的
+   * 当前命令，无槽不懒建、如实报错）。不触发拨号、创建或重连；回执附 connection/label 供工具层渲染。 */
   input(target: string, options: PtyInputOptions, callCtx?: {
     sessionKey?: string;
   }): Promise<PtyInputReceipt & {