tianshu-harness 3.30.0 → 3.31.0

package/dist/{account-login-EJ7WUO63.js → account-login-A5JAJRJC.js}

@@ -18,7 +18,7 @@ async function handleAccountLogin(app) {
     saveAccountToken,
     isTerminalPollStatus
   } = await import("./account-256QIJ3S.js");
-  const { openInBrowser } = await import("./login-flow-YR4UZCXT.js");
+  const { openInBrowser } = await import("./login-flow-B2OA2OG5.js");
   const { rivetHome } = await import("./paths-NWSL35WG.js");
   app.commitStatic("\u6B63\u5728\u5411\u5929\u67A2\u7533\u8BF7\u8BBE\u5907\u6388\u6743\u2026");
   let created;
@@ -42,7 +42,7 @@ ${created.verifyUrl}
   });
   if (result.status === "approved" && result.accessToken) {
     const token = saveAccountToken(accountStore(rivetHome()), result);
-    const { primeStellarIdentity } = await import("./account-status-C57Q2AHC.js");
+    const { primeStellarIdentity } = await import("./account-status-CTOB5HRN.js");
     const identityLine = await primeStellarIdentity(token.accessToken);
     app.commitStatic("\u2705 \u5DF2\u767B\u5F55\u5929\u67A2\u8D26\u53F7\u2014\u2014\u684C\u9762\u7AEF\u4E0E\u7F51\u9875\u7AEF\u73B0\u5728\u770B\u5230\u540C\u4E00\u4EFD\u8BBE\u5907\u4E0E\u8BA2\u9605\u3002");
     if (identityLine) app.commitStatic(`\u661F\u7C4D\uFF1A${identityLine}`);

package/dist/{account-status-C57Q2AHC.js → account-status-CTOB5HRN.js}

@@ -5,15 +5,15 @@ import {
   commitWelcomeStellarIdentityLine,
   formatStellarIdentityLine,
   primeStellarIdentity
-} from "./chunk-4LFYDBLQ.js";
+} from "./chunk-E7YEMIX7.js";
 import "./chunk-YXTY7XNE.js";
 import "./chunk-GH4JI6BC.js";
-import "./chunk-CPZZ4F6S.js";
+import "./chunk-DEVVRSYJ.js";
 import "./chunk-MUIODEN6.js";
 import "./chunk-XUMXRP3L.js";
-import "./chunk-2FGNWTYC.js";
+import "./chunk-AHHJAKUX.js";
 import "./chunk-R5Q7AA2C.js";
-import "./chunk-IKRUHNK4.js";
+import "./chunk-D6KQ62B7.js";
 import "./chunk-2AYXJ4L2.js";
 import "./chunk-4I2HDYJG.js";
 export {

package/dist/agent/worker-process/child.js

@@ -2,98 +2,102 @@
 import { createRequire as __rivetCreateRequire } from 'node:module'; const require = __rivetCreateRequire(import.meta.url);
 import {
   buildModelCards
-} from "../../chunk-HYRYY2SN.js";
+} from "../../chunk-72XLAKWN.js";
 import {
   CHILD_TICK_INTERVAL_MS,
-  buildReviewOverrideState,
-  buildWorkerRuntime,
   createFrameDecoder,
   createInteractiveToolRegistry,
   encodeFrame
-} from "../../chunk-SNLXUAKI.js";
+} from "../../chunk-Q5LRJH5W.js";
+import {
+  createWorkerRuntimeFactory
+} from "../../chunk-6X7H5AQE.js";
 import "../../chunk-QH44FLDF.js";
-import "../../chunk-PGZUJMDL.js";
+import "../../chunk-P2MZ3DDE.js";
 import "../../chunk-BQLWHC5D.js";
-import "../../chunk-P4EUMVWU.js";
-import "../../chunk-FB2EG2DM.js";
-import "../../chunk-6B5V77PB.js";
-import "../../chunk-EK3R4IN7.js";
+import "../../chunk-IHV4DNVC.js";
+import "../../chunk-A7MH6L6E.js";
+import "../../chunk-NO6DSH3Z.js";
+import "../../chunk-LECTERSO.js";
 import "../../chunk-6FMBZBKW.js";
-import "../../chunk-VRARYDBD.js";
-import "../../chunk-SOM3VA5Y.js";
+import "../../chunk-JVKR7I22.js";
+import "../../chunk-DPKOIXVF.js";
 import "../../chunk-2DIPHKWL.js";
-import "../../chunk-NTWQHSJZ.js";
-import "../../chunk-2DIHLLSK.js";
+import "../../chunk-2SB3R7XO.js";
+import "../../chunk-ULSTKGLP.js";
+import "../../chunk-YHDBRYQL.js";
 import {
   DomainKnowledgeStore
 } from "../../chunk-YZNXPFVK.js";
 import "../../chunk-6ZVYO2RV.js";
-import "../../chunk-ETBTPBZ7.js";
-import "../../chunk-AFHRZDQ6.js";
+import "../../chunk-PYJFDSC2.js";
+import "../../chunk-PJCTDCBL.js";
 import "../../chunk-6FEJAGKX.js";
-import "../../chunk-BM6KNIHP.js";
-import "../../chunk-L4KTGYH5.js";
-import "../../chunk-LKQ3YUUA.js";
-import "../../chunk-XRCKUTCD.js";
+import "../../chunk-RQ46ERNW.js";
+import "../../chunk-3YUMGJM6.js";
+import "../../chunk-3EEWWJMH.js";
+import "../../chunk-DU64VQJQ.js";
+import "../../chunk-C3VWIS6E.js";
+import "../../chunk-7XCFOTCC.js";
 import {
   DelegationCoordinator,
   runWorkerSession
-} from "../../chunk-THPTXC33.js";
-import "../../chunk-6UR57ENX.js";
+} from "../../chunk-5DM67X4N.js";
+import "../../chunk-ZVGIGOOW.js";
 import "../../chunk-7KJ4RHGC.js";
-import "../../chunk-HKFXIHVM.js";
-import "../../chunk-NM2BMKTN.js";
+import "../../chunk-HGGZFSW7.js";
+import "../../chunk-TKQUIO4E.js";
 import {
   filterToolRegistry
 } from "../../chunk-B6QROCL3.js";
-import "../../chunk-HCEWX2FV.js";
-import "../../chunk-5OLG7JKL.js";
+import "../../chunk-52M6PGTO.js";
+import "../../chunk-UM7XNYQ4.js";
 import "../../chunk-3SRRU6OC.js";
 import "../../chunk-JZZUOL4B.js";
-import "../../chunk-QLANDT45.js";
 import "../../chunk-RO7A6HGV.js";
-import "../../chunk-UIV2EGMP.js";
+import "../../chunk-GJZBDGZM.js";
 import "../../chunk-YDL6H5EF.js";
-import "../../chunk-L3LLG44O.js";
-import "../../chunk-G2YDTW5C.js";
-import "../../chunk-TKZLPPCA.js";
-import "../../chunk-GBCFACGJ.js";
-import "../../chunk-2TRS7AMW.js";
-import "../../chunk-HCFIQOAV.js";
+import "../../chunk-WBDGL6TU.js";
+import "../../chunk-UCJLKN5V.js";
+import "../../chunk-6Z4K5E3F.js";
+import "../../chunk-6NUZVEQJ.js";
+import "../../chunk-SGNDJT3C.js";
+import "../../chunk-WGMGOTZT.js";
 import "../../chunk-4RCVGE32.js";
 import "../../chunk-LIWDO7EB.js";
-import "../../chunk-HP47ALRA.js";
-import "../../chunk-WJ5AVIWS.js";
+import "../../chunk-MU7BIQ4U.js";
+import "../../chunk-FMLCZJFG.js";
+import "../../chunk-TDTJMFEO.js";
 import "../../chunk-EHONGTY5.js";
 import {
   deriveWorkerSessionId
-} from "../../chunk-DZ4NAAG3.js";
-import "../../chunk-CPZZ4F6S.js";
-import {
-  createReportClientFactory
-} from "../../chunk-VOSWYDGM.js";
+} from "../../chunk-Y5ZL4BYY.js";
+import "../../chunk-DEVVRSYJ.js";
+import "../../chunk-LFD36U2B.js";
 import {
   PromptEngine
-} from "../../chunk-BMXXBE5H.js";
-import "../../chunk-E5H4X7DU.js";
+} from "../../chunk-I55YJONS.js";
+import {
+  resolveModelBinding
+} from "../../chunk-UGGSBRFM.js";
+import "../../chunk-PKXFSOYY.js";
 import "../../chunk-EPLCSYHN.js";
-import "../../chunk-ECQDVXBG.js";
+import "../../chunk-QB437FOC.js";
 import "../../chunk-E7PFSNWI.js";
-import "../../chunk-EU6SCFHJ.js";
+import "../../chunk-MERHAERB.js";
 import "../../chunk-UWHGBGCJ.js";
 import "../../chunk-3V275PK3.js";
 import "../../chunk-7YW5ZYLP.js";
 import "../../chunk-R4DACBK6.js";
-import "../../chunk-4HSKZM5J.js";
-import "../../chunk-C3VWIS6E.js";
-import "../../chunk-EJM5MQJ5.js";
+import "../../chunk-J56NCYS6.js";
+import "../../chunk-GONPFOPE.js";
 import "../../chunk-4FBYPLF7.js";
-import "../../chunk-NF6NO7P6.js";
-import "../../chunk-HBQNADZ3.js";
-import "../../chunk-XHQ25VMU.js";
-import "../../chunk-PMYJERVB.js";
+import "../../chunk-Y3GEAA42.js";
+import "../../chunk-BHT4LKH5.js";
+import "../../chunk-N4E7D7UZ.js";
+import "../../chunk-AHOCDYP7.js";
 import "../../chunk-LCRH7DHL.js";
-import "../../chunk-DYCTNS5X.js";
+import "../../chunk-7VFG6ENC.js";
 import "../../chunk-G3O6WCL5.js";
 import "../../chunk-WODM54WO.js";
 import "../../chunk-6SJBFGO2.js";
@@ -101,97 +105,95 @@ import "../../chunk-2S5HLVY5.js";
 import "../../chunk-77O25DOI.js";
 import "../../chunk-4A5DQMWU.js";
 import "../../chunk-3L6Y25YS.js";
-import "../../chunk-J4VJAGQ5.js";
+import "../../chunk-JYSFGERL.js";
+import {
+  TodoStore
+} from "../../chunk-PEH3Z2C4.js";
 import {
   applyDescriptionMode
 } from "../../chunk-L4REHO7N.js";
 import "../../chunk-M66PYSTZ.js";
-import "../../chunk-7EH3QERG.js";
 import "../../chunk-TE2KD6QU.js";
 import "../../chunk-QP32NS3V.js";
 import "../../chunk-IFR7LPDO.js";
 import "../../chunk-6WZFF5JT.js";
-import "../../chunk-IIUBQPJQ.js";
+import "../../chunk-RL42JDRY.js";
 import "../../chunk-FVYIMDXS.js";
-import "../../chunk-MAPEZPLZ.js";
+import "../../chunk-XJYOLRAW.js";
 import "../../chunk-JRCYSFQL.js";
-import "../../chunk-YCUHHMPO.js";
+import "../../chunk-5IKCONT3.js";
 import "../../chunk-TZCG6QH5.js";
 import "../../chunk-SAOULLLQ.js";
+import {
+  profileRegistry
+} from "../../chunk-OTSVEM2O.js";
 import {
   withWorkspaceRoots
 } from "../../chunk-62HZ6YCS.js";
 import "../../chunk-FH7EWXY4.js";
-import {
-  profileRegistry
-} from "../../chunk-NYPS6JX4.js";
 import "../../chunk-3ITRK5TJ.js";
 import "../../chunk-KL4F2FYA.js";
 import "../../chunk-ADWEQ5BN.js";
 import "../../chunk-P5X23XMQ.js";
 import "../../chunk-ADSVPJLE.js";
 import "../../chunk-TJIPZ32B.js";
-import "../../chunk-OHEGD7BF.js";
+import "../../chunk-32YJJTZP.js";
+import "../../chunk-SMXURZYO.js";
+import "../../chunk-TN4JTXJN.js";
 import "../../chunk-LK32JS2X.js";
-import {
-  TodoStore
-} from "../../chunk-PEH3Z2C4.js";
 import "../../chunk-YGDLZO6J.js";
-import "../../chunk-UFAQG5BP.js";
+import "../../chunk-RPNRSDDF.js";
 import "../../chunk-IDRGTMLL.js";
 import "../../chunk-TDV2J2EC.js";
-import "../../chunk-T6BMJKBF.js";
+import "../../chunk-7PIY4RDJ.js";
 import "../../chunk-MKU54OS4.js";
 import "../../chunk-MUIODEN6.js";
-import {
-  createAuthProvider
-} from "../../chunk-BOWD7QM7.js";
+import "../../chunk-BOWD7QM7.js";
 import "../../chunk-EWALQ6XG.js";
 import "../../chunk-XUMXRP3L.js";
 import "../../chunk-AOWNRCIU.js";
 import "../../chunk-Z2NJXTYR.js";
 import "../../chunk-DLVSLSMB.js";
+import "../../chunk-RWCX2NBM.js";
+import "../../chunk-HFGDIYWR.js";
+import "../../chunk-JIVTST33.js";
+import "../../chunk-A2WIYFPK.js";
 import {
   createProviderClient,
-  resolveApiKey,
   resolveCapabilities
-} from "../../chunk-4MR4RM2K.js";
-import "../../chunk-HQGTTQO6.js";
+} from "../../chunk-L4VXF26B.js";
+import "../../chunk-3O4RNW36.js";
 import "../../chunk-LPYOO7VH.js";
 import "../../chunk-4FATPZA2.js";
 import "../../chunk-TWHHPGO4.js";
-import "../../chunk-EISBSOAA.js";
-import "../../chunk-KDTQEDM2.js";
+import "../../chunk-X7HQ5IHR.js";
+import "../../chunk-WDG2LLVP.js";
 import "../../chunk-L2JP45FC.js";
 import "../../chunk-TBS6TJXJ.js";
-import "../../chunk-GPJZXFSJ.js";
+import "../../chunk-NRN3KUNK.js";
 import "../../chunk-Q2A7U3WW.js";
 import "../../chunk-QNGHNILH.js";
 import "../../chunk-MRLTSAGR.js";
-import "../../chunk-TKIAH7YX.js";
+import "../../chunk-XMVSB7DA.js";
 import "../../chunk-44EIQA5D.js";
 import {
   loadConfig,
   subagentPromptBlocks
-} from "../../chunk-QBQDK2JL.js";
-import "../../chunk-JF323BYF.js";
-import "../../chunk-2FGNWTYC.js";
+} from "../../chunk-B7JIUN2U.js";
+import "../../chunk-AHHJAKUX.js";
 import "../../chunk-OHT2I555.js";
 import "../../chunk-R5Q7AA2C.js";
-import "../../chunk-IKRUHNK4.js";
+import "../../chunk-EMQRBCTH.js";
+import "../../chunk-D6KQ62B7.js";
+import "../../chunk-FA35RTLN.js";
 import "../../chunk-5S2SAGRU.js";
-import {
-  isLocalWorkerPolicyError
-} from "../../chunk-XYZBAQ6O.js";
 import "../../chunk-NSHETV6T.js";
 import "../../chunk-3I5K7XOZ.js";
-import "../../chunk-FRGTCSFE.js";
-import "../../chunk-RPEKFRI2.js";
+import {
+  isLocalWorkerPolicyError
+} from "../../chunk-6TL4VEX6.js";
+import "../../chunk-T5KZYAUZ.js";
 import "../../chunk-W5WBZUSD.js";
-import "../../chunk-RWCX2NBM.js";
-import "../../chunk-A2WIYFPK.js";
-import "../../chunk-HFGDIYWR.js";
-import "../../chunk-JIVTST33.js";
 import "../../chunk-2AYXJ4L2.js";
 import {
   init_esm_shims
@@ -221,13 +223,16 @@ function createBridgedMailbox() {
   };
 }
 function buildChildCoordinator(deps, registry, config, parentApprovalMode) {
+  const runtime = createWorkerRuntimeFactory(() => ({ ...deps, config: loadConfig({ cwd: deps.cwd }) }));
   return new DelegationCoordinator({
     baseToolRegistry: registry,
+    sessionId: deps.rootSessionId,
     modelCards: buildModelCards(deps.provider),
     maxWorkers: resolveMaxWorkers(config),
     providers: config.provider.providers,
-    runtimeFactory: (order, card, workerRegistry) => buildWorkerRuntime(deps, order, card, workerRegistry),
-    routing: deps.workerRouting,
+    runtimeFactory: runtime.runtimeFactory,
+    selectModel: runtime.selectModel,
+    allowAutomaticModelRotation: () => loadConfig({ cwd: deps.cwd }).workers.defaultStrategy === "auto",
     sharedWorktree: true,
     patcherTier: config.workers.patcherTier,
     escalationCap: config.workers.escalationCap,
@@ -276,26 +281,11 @@ async function bootAndRunInWorkspace(init, steerQueue, abortController) {
     const cfg = init.config;
     const cwd = cfg.cwd;
     const config = loadConfig({ cwd });
-    const providerName = cfg.providerName ?? config.provider.default;
-    const provider = config.provider.providers[providerName] ?? config.provider.providers[config.provider.default];
-    let apiKey = "";
-    try {
-      apiKey = resolveApiKey(provider);
-    } catch {
-      apiKey = "";
-    }
-    const auth = provider.auth ? createAuthProvider(provider.auth, process.env) : void 0;
-    const overrideState = config.agent.review?.profiles ? buildReviewOverrideState(config.agent.review.profiles, config.provider.providers) : { cards: /* @__PURE__ */ new Map(), overrides: /* @__PURE__ */ new Map() };
-    const reviewOverrides = overrideState.overrides;
-    const reviewOverrideApiKeys = /* @__PURE__ */ new Map();
-    for (const [profileName, resolved] of reviewOverrides) {
-      try {
-        reviewOverrideApiKeys.set(profileName, resolveApiKey(resolved.providerConfig));
-      } catch {
-        reviewOverrides.delete(profileName);
-      }
-    }
-    const workerRouting = config.workers?.profiles && Object.keys(config.workers.profiles).length > 0 ? { profiles: config.workers.profiles, routing: config.workers.routing, providers: config.provider.providers } : void 0;
+    const decision = cfg.runtimeDecision;
+    if (!decision?.rootSessionBinding) throw new Error("Missing root session binding");
+    const rootSessionBinding = decision.rootSessionBinding;
+    const root = resolveModelBinding(config.provider.providers, rootSessionBinding);
+    const { provider, apiKey, auth } = root;
     const domainKnowledgeStore = new DomainKnowledgeStore(join(cwd, ".rivet", "knowledge"));
     const deps = {
       config,
@@ -303,13 +293,12 @@ async function bootAndRunInWorkspace(init, steerQueue, abortController) {
       provider,
       apiKey,
       auth,
-      currentModelId: config.provider.default,
+      currentModelId: rootSessionBinding.model,
+      rootSessionBinding,
+      rootSessionId: decision.rootSessionId,
       listActiveClaims: () => init.activeClaims,
       sessionMemoryBlock: () => init.memoryBlock,
       domainKnowledgeStore,
-      reviewOverrides,
-      reviewOverrideApiKeys,
-      workerRouting,
       writeProfiles: profileRegistry.listWriteProfiles()
     };
     const refs = {
@@ -335,42 +324,42 @@ async function bootAndRunInWorkspace(init, steerQueue, abortController) {
     };
     const { registry } = createInteractiveToolRegistry(refs, config, cwd);
     refs.coordinator = buildChildCoordinator(deps, registry, config, cfg.parentApprovalMode);
-    const decision = cfg.runtimeDecision;
-    if (!decision) throw new Error("init \u7F3A runtimeDecision\u2014\u2014\u7236\u8FDB\u7A0B buildWorkerRuntime \u672A\u76D6\u6233\uFF08\u7248\u672C\u4E0D\u5339\u914D\uFF1F\uFF09");
     const presentTools = cfg.order.allowedTools.filter((name) => registry.has(name));
     const missing = cfg.order.allowedTools.filter((name) => !registry.has(name));
-    if (missing.length > 0) childLog(`[worker-child] dropping ${missing.length} unregistered tool(s): ${missing.join(",")}`);
+    if (missing.length > 0) throw new Error(`Isolated worker tool catalog unavailable: ${missing.join(",")}`);
     const workerRegistry = filterToolRegistry(registry, presentTools);
-    const providerForDecision = config.provider.providers[decision.providerName] ?? provider;
-    const modelSpec = providerForDecision.models.find((m) => m.id === decision.model);
+    const actual = resolveModelBinding(config.provider.providers, { provider: decision.providerName, model: decision.model, keyId: decision.keyId, baseUrl: decision.baseUrl });
+    const providerForDecision = actual.provider;
+    const modelSpec = actual.spec;
     const capabilities = resolveCapabilities(decision.providerName, providerForDecision.capabilities, modelSpec?.capabilities);
     const blocks = subagentPromptBlocks();
     const client = createProviderClient(providerForDecision, capabilities, {
-      apiKey,
+      singleAttempt: true,
+      credentialScope: `${decision.providerName}:${decision.keyId ?? "default"}`,
+      expectedPrincipal: decision.expectedPrincipal,
+      apiKey: actual.apiKey,
       model: decision.model,
       reasoningEffort: void 0,
       maxTokens: decision.maxTokens,
       thinkingBudget: decision.thinkingBudget,
-      auth,
+      auth: actual.auth,
       // 与父进程 buildWorkerRuntime 用同一公式（只取 order.id，不带 nonce）：
       // 子进程重建 client 时若落回 factory 的进程兜底，同一 work order 会在父子
       // 进程各拿一个 ID，上游会当成两段对话。
-      sessionId: deriveWorkerSessionId(cfg.order.id)
+      sessionId: deriveWorkerSessionId(cfg.order.id, cfg.sessionNonce)
     });
     const promptEngine = new PromptEngine({
       model: decision.model,
       maxTokens: decision.maxTokens,
       staticCtx: { tools: applyDescriptionMode(workerRegistry.getDefinitions(), blocks.toolDescriptions), audience: "subagent" },
-      volatileCtx: { cwd, sessionMemoryBlock: init.memoryBlock, blockCaps: blocks.caps },
+      volatileCtx: { cwd, sessionMemoryBlock: init.memoryBlock, blockCaps: blocks.caps }
       // 续跑/复核/重试继承上一轮冻结快照——历史 user 消息恢复原始字节，
       // 前缀缓存只在新 user 边界断尾（缺省/坏数据引擎内降级为冷启动）。
-      inheritFrozenFrom: cfg.priorFrozenSnapshot
     });
     const workerConfig = {
       workspaceRoots: cfg.workspaceRoots,
       order: cfg.order,
       client,
-      reportRepairClient: createReportClientFactory(providerForDecision, capabilities, { apiKey, model: decision.model, auth, sessionId: deriveWorkerSessionId(cfg.order.id) }),
       promptEngine,
       toolRegistry: workerRegistry,
       cwd,
@@ -398,6 +387,7 @@ async function bootAndRunInWorkspace(init, steerQueue, abortController) {
       routeReason: cfg.routeReason,
       priorUsage: cfg.priorUsage,
       sessionNonce: cfg.sessionNonce,
+      policyLeaseId: cfg.policyLeaseId,
       mailbox: createBridgedMailbox(),
       abortSignal: abortController.signal
     };