ws-spec-kit 0.1.0-beta.0

package/dist/adapters/skills/install.js

@@ -0,0 +1,571 @@
+import { lstat, readFile, realpath } from "node:fs/promises";
+import path from "node:path";
+import { parse } from "yaml";
+import { sha256 } from "../../domain/digests.js";
+import { CliAdapterError } from "../cli/output.js";
+import { spawnJson } from "../process/spawn-json.js";
+import { claudeDriverTarget } from "./claude.js";
+import { codexDriverTarget } from "./codex.js";
+import { cursorDriverTarget } from "./cursor.js";
+import { genericDriverTarget } from "./generic.js";
+const currentDriverVersion = 7;
+const maximumDriverBytes = 1048576n;
+const driverDescription = "使用 WSSpecKit 驱动软件交付 Workflow；新任务、已有任务或用户明确要求时调用。";
+const driverFrontMatterKeys = ["description", "name", "wsspeckit-driver-content-digest", "wsspeckit-driver-version"];
+// v1 的中文指导曾在未提升版本号时更新，因此两个历史摘要都必须显式登记。
+const canonicalDriverDigests = {
+    codex: {
+        1: [
+            "sha256:8804ee37451e7740a488c14291d048b57a21bdd7e2efb1b1beb70a46940030e3",
+            "sha256:69b6ad68c123a711095377ffdf64d21225f4bafaab3a414497ffef6c5391773e",
+        ],
+        2: ["sha256:69b6ad68c123a711095377ffdf64d21225f4bafaab3a414497ffef6c5391773e"],
+        3: ["sha256:451f3853fbc01766264e07c6b3f376aa64acfa0d7f2c6662916f876496558a8f"],
+        4: ["sha256:417eb92d90b1fcd9f3ea519a80fd7d3b9151d211c90371ff17e2edbb361817aa"],
+        5: ["sha256:2168d90a410d3d250645efb01911d09bc0f72259835fa2800819eba6838b65db"],
+        6: ["sha256:dbee7635c12c75cd3548241e36e919f53afa7f6ca5f93a147d2dc674cc39bb25"],
+        7: ["sha256:cccac8ae5fa0fe9df0b6619afc8566be7964b3ae2a5d65f93002a3def5360039"],
+    },
+    claude: {
+        1: [
+            "sha256:3a592093e530e6e65c46d3d0cbde567fc4674135b250b0bd807e44dcb8ff8fb7",
+            "sha256:f7876f2691e037c3d5d9e469275e8f9adb110b6ed39f3ba7eb6f962e5d70cbb1",
+        ],
+        2: ["sha256:f7876f2691e037c3d5d9e469275e8f9adb110b6ed39f3ba7eb6f962e5d70cbb1"],
+        3: ["sha256:100a50a8ca4da95b9513aec29cdd70703cccd6bdb89209d1d18850f63ea944cb"],
+        4: ["sha256:4bc3ec83cec6e94858e91d9530de8cd5cb73808e4afaed40696f0acd0238f1a3"],
+        5: ["sha256:bbaf8982709f2a8a38e62fc1d4142725d9a38932385daad0bba70307295e7f62"],
+        6: ["sha256:3d425ec1ad828b1c58768225bc07e5fa00468566d63997ce8b346c9ba0e50c1f"],
+        7: ["sha256:c24cc8db341e713dc68558ebfa89ea7e697375ed607158daf8376b859e2cc2ff"],
+    },
+    cursor: {
+        1: [
+            "sha256:d74438d605600c54633d2262a9558163a3f0d3a5c664983e4a20d4f84708b392",
+            "sha256:2c5645323532c603f0e2b037bb3cd2cc1275d31abf0fa01180cc3ee436534a93",
+        ],
+        2: ["sha256:2c5645323532c603f0e2b037bb3cd2cc1275d31abf0fa01180cc3ee436534a93"],
+        3: ["sha256:5d16ec26c199a1c552b9ba81d346f87fc26ff508c9204c68501ba01ace39ea98"],
+        4: ["sha256:37dac4a4dfb61cc430cd50fcfd2b57988aa44caf0edbe87e5f5c97c36b153f1e"],
+        5: ["sha256:cb9f9b0b7698c91a8b92443e3818cb5e875392d8f2a97666408ed38967b3d2a7"],
+        6: ["sha256:fde89e7d933eea21e9ef1b9d32f3e8a2b2c5905664cc7f924ad02de4390e73bc"],
+        7: ["sha256:b9bf5f6060ac8d8c7c24aedea265724623e54d76af91c014fc2d8e450ecedb0d"],
+    },
+    generic: {
+        1: [
+            "sha256:a2aeea6a8e14df5fb5477d5ec37eee0a7666f10976e80ac92a8087d1484b94c5",
+            "sha256:8248d34a1ac5306701a7d8ac5fbbea175b22ceb932fbcdc3d672a01e31127c25",
+        ],
+        2: ["sha256:8248d34a1ac5306701a7d8ac5fbbea175b22ceb932fbcdc3d672a01e31127c25"],
+        3: ["sha256:68f5b5a5c650648987fa230f339e162792a431da53d4b4ca202aff78fcb0cff1"],
+        4: ["sha256:c850774fd9c8338c31c6815a83fe526408b76f9473a3482d99bcee42342e3db6"],
+        5: ["sha256:6a5288b339b5bc2ae41f3b445863b32ad11428d5b6362ba4a97bd025cafdcca9"],
+        6: ["sha256:675dbd85103232c879728b080f648b64701813a540050a1af0d622655f37cde3"],
+        7: ["sha256:b10bf3dee31acfa1364ebd8668659095e433ac572450670e1a22130f00c68d3b"],
+    },
+};
+function contract(agent) {
+    const actionCases = {
+        execute: {
+            next: "artifact",
+            capture: {
+                workPackage: "result.workPackage",
+                stepId: "result.workPackage.stepId",
+                attemptId: "result.workPackage.attemptId",
+                leaseToken: "result.workPackage.lease.token",
+                requiredOutputs: "result.workPackage.requiredOutputs",
+            },
+            initialize: {
+                target: "artifactRefs",
+                source: "result.workPackage.artifacts",
+                filter: { field: "artifactType", equals: "requirement-source", requiredBy: "requiredOutputs" },
+            },
+        },
+        await_approval: { next: "await_approval" },
+        blocked: { next: "blocked" },
+        completed: { next: "completed" },
+    };
+    const submitActionCases = {
+        ...actionCases,
+        await_approval: {
+            next: "decide",
+            capture: { approval: "result.approval" },
+            humanGate: { required: true, approval: "result.approval" },
+        },
+    };
+    const decideActionCases = {
+        ...actionCases,
+        execute: {
+            next: "submit",
+            capture: {
+                workPackage: "result.workPackage",
+                stepId: "result.workPackage.stepId",
+                attemptId: "result.workPackage.attemptId",
+                leaseToken: "result.workPackage.lease.token",
+                requiredOutputs: "result.workPackage.requiredOutputs",
+            },
+        },
+    };
+    return {
+        kind: "wsspeckit-driver-contract",
+        version: 1,
+        workflowSelection: {
+            feature: "builtin://workflows/feature-delivery",
+            documentation: "builtin://workflows/documentation-delivery",
+        },
+        entrypoints: { new: "start", recovery: "inspect" },
+        operations: {
+            start: {
+                argv: ["wspec", "start", "--prompt", "${prompt}", "--workflow", "${workflowRef}", "--profile", "${profile}", "--provider", agent],
+                capture: { workItemId: "result.workItemId", workflowRef: "result.workflowRef" },
+                next: "inspect",
+            },
+            inspect: {
+                argv: ["wspec", "inspect", "${workItemId}"],
+                capture: { workflowRef: "result.workflowRef" },
+                next: "acquire",
+            },
+            acquire: {
+                argv: ["wspec", "acquire", "${workItemId}", "--actor", "${actor}"],
+                branch: {
+                    field: "result.action",
+                    cases: actionCases,
+                },
+            },
+            artifact: {
+                argv: [
+                    "wspec", "artifact", "create",
+                    "--work-item", "${workItemId}",
+                    "--step", "${stepId}",
+                    "--attempt", "${attemptId}",
+                    "--lease-token", "${leaseToken}",
+                    "--artifact-type", "${artifactType}",
+                    "--output", "${outputId}",
+                    "--content-file", "${contentFile}",
+                ],
+                capture: { artifactRef: "result" },
+                forEach: {
+                    source: "requiredOutputs",
+                    item: "requiredOutput",
+                    filter: { field: "artifactType", notEquals: "requirement-source" },
+                    bindings: {
+                        artifactType: "requiredOutput.artifactType",
+                        outputId: "requiredOutput.outputId",
+                        contentFile: ".wsspec/work-items/${workItemId}/drafts/${outputId}.md",
+                    },
+                    collect: { target: "artifactRefs", value: "result" },
+                },
+                next: "submit",
+            },
+            submit: {
+                argv: [
+                    "wspec", "submit", "${workItemId}",
+                    "--step", "${stepId}",
+                    "--attempt", "${attemptId}",
+                    "--lease", "${leaseToken}",
+                    "--result", "${resultPath}",
+                    "--actor", "${actor}",
+                ],
+                resultBindings: { artifacts: "artifactRefs" },
+                branch: { field: "result.action", cases: submitActionCases },
+            },
+            decide: {
+                argv: ["wspec", "decide", "--input", "${decisionPath}", "--actor", "${actor}"],
+                branch: { field: "result.action", cases: decideActionCases },
+            },
+        },
+        terminals: {
+            await_approval: { stop: true },
+            blocked: { stop: true },
+            completed: { stop: true },
+        },
+    };
+}
+function body(agent) {
+    return [
+        "# WSSpecKit Driver",
+        "",
+        "## Workflow 决策",
+        "",
+        "仅当需求明确为纯文档或无代码变更时选择 `builtin://workflows/documentation-delivery`；其余默认选择 `builtin://workflows/feature-delivery`。用户可以在创建前覆盖选择，但创建时必须传递明确的 `workflowRef`；Work Item 创建后不得自动切换 Workflow。",
+        "",
+        "## 新任务与恢复",
+        "",
+        `新任务执行 \`wspec start --prompt "<用户需求>" --workflow "<workflowRef>" --profile "<profile>" --provider "${agent}"\`。从 JSON 输出读取 \`result.workItemId\` 和 \`result.workflowRef\`；后续所有命令都使用这个 \`workItemId\`，并确认 \`workflowRef\` 未变化。`,
+        "",
+        "已有任务或 Host 重启后的恢复固定执行 inspect -> acquire：先运行 `wspec inspect \"<workItemId>\"`，从 `result.workflowRef` 确认原 Workflow，再运行 `wspec acquire \"<workItemId>\" --actor \"<actor>\"`。不要重新 start，也不要按项目当前默认值替换原 `workflowRef`。",
+        "",
+        "## acquire / submit 循环",
+        "",
+        "每次 acquire 都读取 `result.action` 并按下列分支处理：",
+        "",
+        "- `execute`：读取 `result.workPackage.stepId`、`result.workPackage.attemptId`、`result.workPackage.lease.token` 和完整 `requiredOutputs`。先把 Work Package 中系统提供的 `requirement-source` 引用放入 `artifactRefs`；再按 `requiredOutputs` 顺序逐项处理其余输出。每项正文写入 Work Item 自有的 `.wsspec/work-items/<workItemId>/drafts/<outputId>.md`，执行 `wspec artifact create --work-item \"<workItemId>\" --step \"<stepId>\" --attempt \"<attemptId>\" --lease-token \"<leaseToken>\" --artifact-type \"<artifactType>\" --output \"<outputId>\" --content-file \".wsspec/work-items/<workItemId>/drafts/<outputId>.md\"`，并把每次 JSON stdout 的 `result` 追加到 `artifactRefs`。所有必需输出完成后才生成 SubmitResult；submit JSON 的 `artifacts` 只携带累积的 ArtifactRef，正文、`contentFile`、绝对路径和 Lease token 都不得写入 `<resultPath>`。随后执行 `wspec submit \"<workItemId>\" --step \"<stepId>\" --attempt \"<attemptId>\" --lease \"<leaseToken>\" --result \"<resultPath>\" --actor \"<actor>\"`。submit 也返回 `result.action`：若为 `execute`，它已经携带并 claim 新 Work Package，必须从 artifact 循环处理，不得再次 acquire；其余分支按下文停止。不得复用旧 attemptId 或 leaseToken。",
+        "- `await_approval`：读取并向用户展示 `result.approval`，停止自动执行；不得代替用户批准。人工决定写入 `<decisionPath>` 后执行 `wspec decide --input \"<decisionPath>\" --actor \"<actor>\"`。若 decide 返回 `execute`，必须捕获其完整 Work Package identity，并使用原样未改的 `<resultPath>` 直接重新 submit，不得再次执行 Artifact authoring；若 Host 会话已中断，再从 inspect / acquire 恢复。",
+        "- `blocked`：读取并展示 `result.problems`，停止循环；只有问题被外部解决后才从 inspect / acquire 恢复。",
+        "- `completed`：读取 `result.summary`，报告完成并停止，不再 acquire 或 submit。",
+        "",
+        "以下 fenced JSON 是 Host 和自动验收共同消费的命令/状态机合同；`${...}` 变量必须来自用户选择、Host 身份或前一条命令声明的 capture，不能自行猜测：",
+        "",
+        "```json",
+        JSON.stringify(contract(agent), null, 2),
+        "```",
+        "",
+        "面向用户的说明、文档和交互文案默认使用中文；协议字段、类型名、URI、命令名和错误码保持英文。",
+        "",
+        "Driver 不得调用模型 API，不得缓存或管理对话、Token、记忆或隐藏推理，不得把 Artifact 正文放入协议 JSON。Artifact 只通过协议中的引用读取，模型上下文由当前 Agent Host 自主管理。",
+        "",
+        "安装只写入本 Skill 文件，不会启动后台 Runner。Driver 使用 WSSpecKit Application Protocol 驱动当前 Agent，不冒充 Codex、Claude、Cursor 或其他真实 Agent Host。",
+        "",
+        `手动调用示例：\`wspec start --provider ${agent} --prompt "更新 README" --workflow builtin://workflows/documentation-delivery --profile quick\`。`,
+        "",
+    ].join("\n");
+}
+function skill(agent) {
+    const content = body(agent);
+    const digest = sha256(content);
+    if (!canonicalDriverDigests[agent][currentDriverVersion].includes(digest)) {
+        throw new Error("当前 Driver 正文未登记 canonical 摘要。");
+    }
+    return [
+        "---",
+        "name: wsspeckit-driver",
+        `wsspeckit-driver-version: ${currentDriverVersion}`,
+        `wsspeckit-driver-content-digest: ${digest}`,
+        `description: ${driverDescription}`,
+        "---",
+        "",
+        content,
+    ].join("\n");
+}
+function conflict(message = "安装目标已存在且不是 WSSpecKit Driver，拒绝覆盖。") {
+    throw new CliAdapterError("WSSPEC_SKILL_INSTALL_CONFLICT", message);
+}
+function isMissing(error) {
+    return error instanceof Error && "code" in error && error.code === "ENOENT";
+}
+function isWithin(parent, candidate) {
+    const relative = path.relative(parent, candidate);
+    return relative === "" || (relative !== ".." && !relative.startsWith(`..${path.sep}`) && !path.isAbsolute(relative));
+}
+async function canonicalDirectory(directory) {
+    let canonical;
+    try {
+        canonical = await realpath(path.resolve(directory));
+    }
+    catch {
+        return conflict("Driver 安装 authority 不存在或不可访问。");
+    }
+    const info = await lstat(canonical, { bigint: true });
+    if (!info.isDirectory())
+        return conflict("Driver 安装 authority 必须是普通目录。");
+    return canonical;
+}
+async function targetFor(input) {
+    if (input.agent !== "generic" && input.target !== undefined)
+        throw new CliAdapterError("WSSPEC_ARGUMENT_INVALID", "只有 Generic Driver 支持 --target。");
+    const home = await canonicalDirectory(input.home);
+    const supplied = genericDriverTarget(input.target);
+    const rawHome = path.resolve(input.home);
+    const genericTarget = supplied === undefined ? undefined : path.resolve(supplied);
+    const normalizedGenericTarget = genericTarget !== undefined && isWithin(rawHome, genericTarget)
+        ? path.join(home, path.relative(rawHome, genericTarget))
+        : genericTarget;
+    const target = input.agent === "codex" ? codexDriverTarget(home)
+        : input.agent === "claude" ? claudeDriverTarget(home)
+            : input.agent === "cursor" ? cursorDriverTarget(home)
+                : normalizedGenericTarget;
+    if (target === undefined || target === "")
+        throw new CliAdapterError("WSSPEC_ARGUMENT_REQUIRED", "Generic Driver 必须通过 --target 指定安装目录。");
+    return path.resolve(target);
+}
+function sameIdentity(left, right) {
+    return left.dev === right.dev && left.ino === right.ino;
+}
+function assertDirectory(info) {
+    if (!info.isDirectory())
+        conflict("Driver 安装路径的每一段都必须是普通目录，禁止 symlink 或其他文件类型。");
+}
+async function assertCanonicalDirectoryChain(directory) {
+    const resolved = path.resolve(directory);
+    const root = path.parse(resolved).root;
+    let current = root;
+    let currentInfo = await lstat(current, { bigint: true });
+    assertDirectory(currentInfo);
+    for (const segment of path.relative(root, resolved).split(path.sep).filter(Boolean)) {
+        current = path.join(current, segment);
+        const info = await lstat(current, { bigint: true });
+        assertDirectory(info);
+        if (await realpath(current) !== current)
+            conflict("Driver 安装路径必须是 canonical，禁止任何祖先 symlink。");
+        currentInfo = info;
+    }
+    return currentInfo;
+}
+function ownedSkillVersion(content, agent) {
+    const match = /^---\r?\n([\s\S]*?)\r?\n---\r?\n\r?\n([\s\S]*)$/u.exec(content);
+    if (match === null)
+        return undefined;
+    let frontMatter;
+    try {
+        frontMatter = parse(match[1]);
+    }
+    catch {
+        return undefined;
+    }
+    if (frontMatter === null || typeof frontMatter !== "object" || Array.isArray(frontMatter))
+        return undefined;
+    const source = frontMatter;
+    const keys = Object.keys(source).sort();
+    const version = source["wsspeckit-driver-version"];
+    const digest = source["wsspeckit-driver-content-digest"];
+    const owned = source.name === "wsspeckit-driver"
+        && source.description === driverDescription
+        && keys.length === driverFrontMatterKeys.length
+        && keys.every((key, index) => key === driverFrontMatterKeys[index])
+        && (version === 1 || version === 2 || version === 3 || version === 4 || version === 5 || version === 6 || version === 7)
+        && typeof digest === "string"
+        && digest === sha256(match[2])
+        && canonicalDriverDigests[agent][version].includes(digest);
+    return owned ? version : undefined;
+}
+async function skillIdentity(filename) {
+    let info;
+    try {
+        info = await lstat(filename, { bigint: true });
+    }
+    catch (error) {
+        if (isMissing(error))
+            return undefined;
+        throw error;
+    }
+    if (!info.isFile() || info.nlink !== 1n || info.size > maximumDriverBytes)
+        conflict("Driver Skill 必须是有界单链接普通文件，禁止 symlink、hardlink 或其他文件类型。");
+    return info;
+}
+async function assertOwned(target, agent) {
+    const filename = path.join(target, "SKILL.md");
+    const before = await skillIdentity(filename);
+    if (before === undefined)
+        return undefined;
+    let existing;
+    try {
+        existing = await readFile(filename, "utf8");
+    }
+    catch {
+        return conflict();
+    }
+    const after = await skillIdentity(filename);
+    const version = ownedSkillVersion(existing, agent);
+    if (after === undefined || !sameIdentity(before, after) || version === undefined)
+        return conflict();
+    return { content: existing, info: after, version };
+}
+const secureInstallScript = String.raw `
+import base64, hashlib, json, os, stat, sys
+
+def result(ok, code=None):
+    value = {"ok": ok}
+    if code is not None:
+        value["code"] = code
+    sys.stdout.write(json.dumps(value, separators=(",", ":")))
+
+def fail():
+    raise RuntimeError("conflict")
+
+def request_value(source, key, kind):
+    value = source.get(key)
+    if not isinstance(value, kind):
+        fail()
+    return value
+
+def open_target(target, expected_dev, expected_ino):
+    if not target.startswith("/") or os.path.normpath(target) != target or target == "/" or "\x00" in target:
+        fail()
+    current = os.open("/", os.O_RDONLY | os.O_DIRECTORY | os.O_NOFOLLOW)
+    try:
+        for segment in [part for part in target.split("/") if part]:
+            before = os.stat(segment, dir_fd=current, follow_symlinks=False)
+            if not stat.S_ISDIR(before.st_mode):
+                fail()
+            child = os.open(segment, os.O_RDONLY | os.O_DIRECTORY | os.O_NOFOLLOW, dir_fd=current)
+            after = os.fstat(child)
+            if (before.st_dev, before.st_ino) != (after.st_dev, after.st_ino):
+                os.close(child)
+                fail()
+            os.close(current)
+            current = child
+        final = os.fstat(current)
+        if str(final.st_dev) != expected_dev or str(final.st_ino) != expected_ino:
+            fail()
+        return current
+    except BaseException:
+        os.close(current)
+        raise
+
+def existing_file(directory):
+    try:
+        before = os.stat("SKILL.md", dir_fd=directory, follow_symlinks=False)
+    except FileNotFoundError:
+        return None
+    if not stat.S_ISREG(before.st_mode) or before.st_nlink != 1 or before.st_size > 1048576:
+        fail()
+    handle = os.open("SKILL.md", os.O_RDONLY | os.O_NOFOLLOW, dir_fd=directory)
+    after = os.fstat(handle)
+    if (before.st_dev, before.st_ino, before.st_size) != (after.st_dev, after.st_ino, after.st_size):
+        os.close(handle)
+        fail()
+    return handle
+
+def verify(directory, expected_digest, expected_size):
+    handle = existing_file(directory)
+    if handle is None:
+        fail()
+    try:
+        data = bytearray()
+        while True:
+            chunk = os.read(handle, 65536)
+            if not chunk:
+                break
+            data.extend(chunk)
+            if len(data) > 1048576:
+                fail()
+        if len(data) != expected_size or hashlib.sha256(data).hexdigest() != expected_digest:
+            fail()
+    finally:
+        os.close(handle)
+
+def create(directory, content, dry_run):
+    existing = existing_file(directory)
+    if existing is not None:
+        os.close(existing)
+        fail()
+    if dry_run:
+        return False
+    handle = None
+    try:
+        handle = os.open("SKILL.md", os.O_WRONLY | os.O_CREAT | os.O_EXCL | os.O_NOFOLLOW, 0o600, dir_fd=directory)
+        offset = 0
+        while offset < len(content):
+            written = os.write(handle, content[offset:])
+            if written < 1:
+                fail()
+            offset += written
+        os.fsync(handle)
+        os.close(handle)
+        handle = None
+        os.fsync(directory)
+        return True
+    except BaseException:
+        if handle is not None:
+            os.close(handle)
+        raise
+
+try:
+    source = json.load(sys.stdin)
+    if not isinstance(source, dict) or set(source) - {"target", "targetDev", "targetIno", "operation", "dryRun", "contentBase64", "expectedDigest", "expectedSize"}:
+        fail()
+    target = request_value(source, "target", str)
+    target_dev = request_value(source, "targetDev", str)
+    target_ino = request_value(source, "targetIno", str)
+    operation = request_value(source, "operation", str)
+    dry_run = request_value(source, "dryRun", bool)
+    directory = open_target(target, target_dev, target_ino)
+    created = False
+    try:
+        if operation == "create":
+            encoded = request_value(source, "contentBase64", str)
+            content = base64.b64decode(encoded, validate=True)
+            if len(content) > 1048576:
+                fail()
+            created = create(directory, content, dry_run)
+            if created:
+                verify(directory, hashlib.sha256(content).hexdigest(), len(content))
+        elif operation == "verify":
+            digest = request_value(source, "expectedDigest", str)
+            size = request_value(source, "expectedSize", int)
+            if dry_run not in (True, False) or len(digest) != 64 or size < 0 or size > 1048576:
+                fail()
+            verify(directory, digest, size)
+        else:
+            fail()
+        confirmed = open_target(target, target_dev, target_ino)
+        os.close(confirmed)
+    except BaseException:
+        raise
+    finally:
+        os.close(directory)
+    result(True)
+except BaseException:
+    result(False, "conflict")
+`;
+function helperSucceeded(value) {
+    return value !== null && typeof value === "object" && !Array.isArray(value)
+        && Object.keys(value).length === 1 && value.ok === true;
+}
+export async function secureInstallDriverFile(request) {
+    if (process.platform !== "darwin")
+        conflict("Driver 安全安装当前仅支持 macOS。");
+    try {
+        const helper = await realpath("/usr/bin/python3");
+        const helperInfo = await lstat(helper);
+        if (!helperInfo.isFile() || helperInfo.uid !== 0 || (helperInfo.mode & 0o022) !== 0) {
+            conflict("Driver 安全安装 helper 不可信。");
+        }
+        const result = await spawnJson({
+            executable: helper,
+            argv: ["-I", "-S", "-c", secureInstallScript],
+            input: request,
+            timeoutMs: 5_000,
+            maxStdoutBytes: 256,
+        });
+        if (!helperSucceeded(result.value))
+            conflict("Driver 安全安装未通过文件系统边界校验。");
+    }
+    catch (error) {
+        if (error instanceof CliAdapterError)
+            throw error;
+        conflict("Driver 安全安装 helper 不可用或执行失败。");
+    }
+}
+const defaultDependencies = { secureInstall: secureInstallDriverFile };
+export function createDriverSkillInstaller(overrides = {}) {
+    const dependencies = { ...defaultDependencies, ...overrides };
+    return async (input) => {
+        const target = await targetFor(input);
+        let targetInfo;
+        try {
+            targetInfo = await assertCanonicalDirectoryChain(target);
+        }
+        catch (error) {
+            if (isMissing(error))
+                conflict("Driver 安装目标目录必须预先创建。");
+            throw error;
+        }
+        const existing = await assertOwned(target, input.agent);
+        if (existing !== undefined && existing.version !== currentDriverVersion) {
+            conflict("旧版 Driver 不进行原地升级；请移除旧文件后重新安装。");
+        }
+        const content = skill(input.agent);
+        const request = existing === undefined
+            ? {
+                target,
+                targetDev: targetInfo.dev.toString(),
+                targetIno: targetInfo.ino.toString(),
+                operation: "create",
+                dryRun: input.dryRun === true,
+                contentBase64: Buffer.from(content).toString("base64"),
+            }
+            : {
+                target,
+                targetDev: targetInfo.dev.toString(),
+                targetIno: targetInfo.ino.toString(),
+                operation: "verify",
+                dryRun: input.dryRun === true,
+                expectedDigest: sha256(existing.content).slice("sha256:".length),
+                expectedSize: Buffer.byteLength(existing.content),
+            };
+        await dependencies.secureInstall(request);
+        return { agent: input.agent, target, dryRun: input.dryRun === true };
+    };
+}
+export const installDriverSkill = createDriverSkillInstaller();
+//# sourceMappingURL=install.js.map

package/dist/adapters/skills/install.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"install.js","sourceRoot":"","sources":["../../../src/adapters/skills/install.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC7D,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,KAAK,EAAE,MAAM,MAAM,CAAC;AAE7B,OAAO,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AACrD,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAsBnD,MAAM,oBAAoB,GAAG,CAAU,CAAC;AACxC,MAAM,kBAAkB,GAAG,QAAU,CAAC;AACtC,MAAM,iBAAiB,GAAG,kDAAkD,CAAC;AAC7E,MAAM,qBAAqB,GAAG,CAAC,aAAa,EAAE,MAAM,EAAE,iCAAiC,EAAE,0BAA0B,CAAU,CAAC;AAE9H,uCAAuC;AACvC,MAAM,sBAAsB,GAAkE;IAC5F,KAAK,EAAE;QACL,CAAC,EAAE;YACD,yEAAyE;YACzE,yEAAyE;SAC1E;QACD,CAAC,EAAE,CAAC,yEAAyE,CAAC;QAC9E,CAAC,EAAE,CAAC,yEAAyE,CAAC;QAC9E,CAAC,EAAE,CAAC,yEAAyE,CAAC;QAC9E,CAAC,EAAE,CAAC,yEAAyE,CAAC;QAC9E,CAAC,EAAE,CAAC,yEAAyE,CAAC;QAC9E,CAAC,EAAE,CAAC,yEAAyE,CAAC;KAC/E;IACD,MAAM,EAAE;QACN,CAAC,EAAE;YACD,yEAAyE;YACzE,yEAAyE;SAC1E;QACD,CAAC,EAAE,CAAC,yEAAyE,CAAC;QAC9E,CAAC,EAAE,CAAC,yEAAyE,CAAC;QAC9E,CAAC,EAAE,CAAC,yEAAyE,CAAC;QAC9E,CAAC,EAAE,CAAC,yEAAyE,CAAC;QAC9E,CAAC,EAAE,CAAC,yEAAyE,CAAC;QAC9E,CAAC,EAAE,CAAC,yEAAyE,CAAC;KAC/E;IACD,MAAM,EAAE;QACN,CAAC,EAAE;YACD,yEAAyE;YACzE,yEAAyE;SAC1E;QACD,CAAC,EAAE,CAAC,yEAAyE,CAAC;QAC9E,CAAC,EAAE,CAAC,yEAAyE,CAAC;QAC9E,CAAC,EAAE,CAAC,yEAAyE,CAAC;QAC9E,CAAC,EAAE,CAAC,yEAAyE,CAAC;QAC9E,CAAC,EAAE,CAAC,yEAAyE,CAAC;QAC9E,CAAC,EAAE,CAAC,yEAAyE,CAAC;KAC/E;IACD,OAAO,EAAE;QACP,CAAC,EAAE;YACD,yEAAyE;YACzE,yEAAyE;SAC1E;QACD,CAAC,EAAE,CAAC,yEAAyE,CAAC;QAC9E,CAAC,EAAE,CAAC,yEAAyE,CAAC;QAC9E,CAAC,EAAE,CAAC,yEAAyE,CAAC;QAC9E,CAAC,EAAE,CAAC,yEAAyE,CAAC;QAC9E,CAAC,EAAE,CAAC,yEAAyE,CAAC;QAC9E,CAAC,EAAE,CAAC,yEAAyE,CAAC;KAC/E;CACF,CAAC;AAEF,SAAS,QAAQ,CAAC,KAAkB;IAClC,MAAM,WAAW,GAAG;QAClB,OAAO,EAAE;YACP,IAAI,EAAE,UAAU;YAChB,OAAO,EAAE;gBACP,WAAW,EAAE,oBAAoB;gBACjC,MAAM,EAAE,2BAA2B;gBACnC,SAAS,EAAE,8BAA8B;gBACzC,UAAU,EAAE,gCAAgC;gBAC5C,eAAe,EAAE,oCAAoC;aACtD;YACD,UAAU,EAAE;gBACV,MAAM,EAAE,cAAc;gBACtB,MAAM,EAAE,8BAA8B;gBACtC,MAAM,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,EAAE,oBAAoB,EAAE,UAAU,EAAE,iBAAiB,EAAE;aAC/F;SACF;QACD,cAAc,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE;QAC1C,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;QAC5B,SAAS,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE;KACjC,CAAC;IACF,MAAM,iBAAiB,GAAG;QACxB,GAAG,WAAW;QACd,cAAc,EAAE;YACd,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,EAAE,QAAQ,EAAE,iBAAiB,EAAE;YACxC,SAAS,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,iBAAiB,EAAE;SAC3D;KACF,CAAC;IACF,MAAM,iBAAiB,GAAG;QACxB,GAAG,WAAW;QACd,OAAO,EAAE;YACP,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE;gBACP,WAAW,EAAE,oBAAoB;gBACjC,MAAM,EAAE,2BAA2B;gBACnC,SAAS,EAAE,8BAA8B;gBACzC,UAAU,EAAE,gCAAgC;gBAC5C,eAAe,EAAE,oCAAoC;aACtD;SACF;KACF,CAAC;IACF,OAAO;QACL,IAAI,EAAE,2BAA2B;QACjC,OAAO,EAAE,CAAC;QACV,iBAAiB,EAAE;YACjB,OAAO,EAAE,sCAAsC;YAC/C,aAAa,EAAE,4CAA4C;SAC5D;QACD,WAAW,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE;QAClD,UAAU,EAAE;YACV,KAAK,EAAE;gBACL,IAAI,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,gBAAgB,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,KAAK,CAAC;gBACjI,OAAO,EAAE,EAAE,UAAU,EAAE,mBAAmB,EAAE,WAAW,EAAE,oBAAoB,EAAE;gBAC/E,IAAI,EAAE,SAAS;aAChB;YACD,OAAO,EAAE;gBACP,IAAI,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,eAAe,CAAC;gBAC3C,OAAO,EAAE,EAAE,WAAW,EAAE,oBAAoB,EAAE;gBAC9C,IAAI,EAAE,SAAS;aAChB;YACD,OAAO,EAAE;gBACP,IAAI,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,SAAS,EAAE,UAAU,CAAC;gBAClE,MAAM,EAAE;oBACN,KAAK,EAAE,eAAe;oBACtB,KAAK,EAAE,WAAW;iBACnB;aACF;YACD,QAAQ,EAAE;gBACR,IAAI,EAAE;oBACJ,OAAO,EAAE,UAAU,EAAE,QAAQ;oBAC7B,aAAa,EAAE,eAAe;oBAC9B,QAAQ,EAAE,WAAW;oBACrB,WAAW,EAAE,cAAc;oBAC3B,eAAe,EAAE,eAAe;oBAChC,iBAAiB,EAAE,iBAAiB;oBACpC,UAAU,EAAE,aAAa;oBACzB,gBAAgB,EAAE,gBAAgB;iBACnC;gBACD,OAAO,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE;gBAClC,OAAO,EAAE;oBACP,MAAM,EAAE,iBAAiB;oBACzB,IAAI,EAAE,gBAAgB;oBACtB,MAAM,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,SAAS,EAAE,oBAAoB,EAAE;oBAClE,QAAQ,EAAE;wBACR,YAAY,EAAE,6BAA6B;wBAC3C,QAAQ,EAAE,yBAAyB;wBACnC,WAAW,EAAE,wDAAwD;qBACtE;oBACD,OAAO,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,KAAK,EAAE,QAAQ,EAAE;iBACrD;gBACD,IAAI,EAAE,QAAQ;aACf;YACD,MAAM,EAAE;gBACN,IAAI,EAAE;oBACJ,OAAO,EAAE,QAAQ,EAAE,eAAe;oBAClC,QAAQ,EAAE,WAAW;oBACrB,WAAW,EAAE,cAAc;oBAC3B,SAAS,EAAE,eAAe;oBAC1B,UAAU,EAAE,eAAe;oBAC3B,SAAS,EAAE,UAAU;iBACtB;gBACD,cAAc,EAAE,EAAE,SAAS,EAAE,cAAc,EAAE;gBAC7C,MAAM,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,iBAAiB,EAAE;aAC7D;YACD,MAAM,EAAE;gBACN,IAAI,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,iBAAiB,EAAE,SAAS,EAAE,UAAU,CAAC;gBAC9E,MAAM,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,iBAAiB,EAAE;aAC7D;SACF;QACD,SAAS,EAAE;YACT,cAAc,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;YAC9B,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;YACvB,SAAS,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;SAC1B;KACF,CAAC;AACJ,CAAC;AAED,SAAS,IAAI,CAAC,KAAkB;IAC9B,OAAO;QACL,oBAAoB;QACpB,EAAE;QACF,gBAAgB;QAChB,EAAE;QACF,qLAAqL;QACrL,EAAE;QACF,WAAW;QACX,EAAE;QACF,sGAAsG,KAAK,oHAAoH;QAC/N,EAAE;QACF,qNAAqN;QACrN,EAAE;QACF,wBAAwB;QACxB,EAAE;QACF,0CAA0C;QAC1C,EAAE;QACF,ygCAAygC;QACzgC,iTAAiT;QACjT,6EAA6E;QAC7E,gEAAgE;QAChE,EAAE;QACF,+FAA+F;QAC/F,EAAE;QACF,SAAS;QACT,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QACxC,KAAK;QACL,EAAE;QACF,iDAAiD;QACjD,EAAE;QACF,mHAAmH;QACnH,EAAE;QACF,6HAA6H;QAC7H,EAAE;QACF,mCAAmC,KAAK,gGAAgG;QACxI,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,SAAS,KAAK,CAAC,KAAkB;IAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5B,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IAC/B,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC,oBAAoB,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1E,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnD,CAAC;IACD,OAAO;QACL,KAAK;QACL,wBAAwB;QACxB,6BAA6B,oBAAoB,EAAE;QACnD,oCAAoC,MAAM,EAAE;QAC5C,gBAAgB,iBAAiB,EAAE;QACnC,KAAK;QACL,EAAE;QACF,OAAO;KACR,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,SAAS,QAAQ,CAAC,OAAO,GAAG,mCAAmC;IAC7D,MAAM,IAAI,eAAe,CAAC,+BAA+B,EAAE,OAAO,CAAC,CAAC;AACtE,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,OAAO,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,CAAC;AACzG,CAAC;AAED,SAAS,QAAQ,CAAC,MAAc,EAAE,SAAiB;IACjD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAClD,OAAO,QAAQ,KAAK,EAAE,IAAI,CAAC,QAAQ,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;AACvH,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,SAAiB;IACjD,IAAI,SAAiB,CAAC;IACtB,IAAI,CAAC;QAAC,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;IAAC,CAAC;IAC5D,MAAM,CAAC;QAAC,OAAO,QAAQ,CAAC,+BAA+B,CAAC,CAAC;IAAC,CAAC;IAC3D,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;QAAE,OAAO,QAAQ,CAAC,8BAA8B,CAAC,CAAC;IACzE,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,KAA8B;IACrD,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;QAAE,MAAM,IAAI,eAAe,CAAC,yBAAyB,EAAE,gCAAgC,CAAC,CAAC;IACpJ,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClD,MAAM,QAAQ,GAAG,mBAAmB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACnD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACzC,MAAM,aAAa,GAAG,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAClF,MAAM,uBAAuB,GAAG,aAAa,KAAK,SAAS,IAAI,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;QAC7F,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QACxD,CAAC,CAAC,aAAa,CAAC;IAClB,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC;QAC9D,CAAC,CAAC,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC;YACnD,CAAC,CAAC,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC;gBACnD,CAAC,CAAC,uBAAuB,CAAC;IAChC,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,EAAE;QAAE,MAAM,IAAI,eAAe,CAAC,0BAA0B,EAAE,sCAAsC,CAAC,CAAC;IACzI,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,YAAY,CAAC,IAAiB,EAAE,KAAkB;IACzD,OAAO,IAAI,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,CAAC;AAC1D,CAAC;AAED,SAAS,eAAe,CAAC,IAAiB;IACxC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;QAAE,QAAQ,CAAC,6CAA6C,CAAC,CAAC;AACnF,CAAC;AAED,KAAK,UAAU,6BAA6B,CAAC,SAAiB;IAC5D,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC;IACvC,IAAI,OAAO,GAAG,IAAI,CAAC;IACnB,IAAI,WAAW,GAAG,MAAM,KAAK,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,eAAe,CAAC,WAAW,CAAC,CAAC;IAC7B,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QACpF,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACtC,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACpD,eAAe,CAAC,IAAI,CAAC,CAAC;QACtB,IAAI,MAAM,QAAQ,CAAC,OAAO,CAAC,KAAK,OAAO;YAAE,QAAQ,CAAC,0CAA0C,CAAC,CAAC;QAC9F,WAAW,GAAG,IAAI,CAAC;IACrB,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAe,EAAE,KAAkB;IAC5D,MAAM,KAAK,GAAG,kDAAkD,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/E,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IACrC,IAAI,WAAoB,CAAC;IACzB,IAAI,CAAC;QAAC,WAAW,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,SAAS,CAAC;IAAC,CAAC;IACnE,IAAI,WAAW,KAAK,IAAI,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5G,MAAM,MAAM,GAAG,WAAsC,CAAC;IACtD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IACxC,MAAM,OAAO,GAAG,MAAM,CAAC,0BAA0B,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,MAAM,CAAC,iCAAiC,CAAC,CAAC;IACzD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,KAAK,kBAAkB;WAC3C,MAAM,CAAC,WAAW,KAAK,iBAAiB;WACxC,IAAI,CAAC,MAAM,KAAK,qBAAqB,CAAC,MAAM;WAC5C,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,qBAAqB,CAAC,KAAK,CAAC,CAAC;WAChE,CAAC,OAAO,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,CAAC;WACrH,OAAO,MAAM,KAAK,QAAQ;WAC1B,MAAM,KAAK,MAAM,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC;WAC5B,sBAAsB,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC7D,OAAO,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AACrC,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,QAAgB;IAC3C,IAAI,IAAiB,CAAC;IACtB,IAAI,CAAC;QAAC,IAAI,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAAC,CAAC;IACvD,OAAO,KAAK,EAAE,CAAC;QAAC,IAAI,SAAS,CAAC,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QAAC,MAAM,KAAK,CAAC;IAAC,CAAC;IACtE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,KAAK,KAAK,EAAE,IAAI,IAAI,CAAC,IAAI,GAAG,kBAAkB;QAAE,QAAQ,CAAC,wDAAwD,CAAC,CAAC;IAC9I,OAAO,IAAI,CAAC;AACd,CAAC;AAQD,KAAK,UAAU,WAAW,CAAC,MAAc,EAAE,KAAkB;IAC3D,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,QAAQ,CAAC,CAAC;IAC7C,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC3C,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QAAC,QAAQ,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAAC,CAAC;IACpD,MAAM,CAAC;QAAC,OAAO,QAAQ,EAAE,CAAC;IAAC,CAAC;IAC5B,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,QAAQ,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAG,iBAAiB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IACnD,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,QAAQ,EAAE,CAAC;IACpG,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;AACrD,CAAC;AAED,MAAM,mBAAmB,GAAG,MAAM,CAAC,GAAG,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAyIrC,CAAC;AAEF,SAAS,eAAe,CAAC,KAAc;IACrC,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;WACtE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,IAAK,KAAiC,CAAC,EAAE,KAAK,IAAI,CAAC;AACzF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,OAA6B;IACzE,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ;QAAE,QAAQ,CAAC,yBAAyB,CAAC,CAAC;IACvE,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,kBAAkB,CAAC,CAAC;QAClD,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC;QACvC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,IAAI,UAAU,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YACpF,QAAQ,CAAC,yBAAyB,CAAC,CAAC;QACtC,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC;YAC7B,UAAU,EAAE,MAAM;YAClB,IAAI,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,mBAAmB,CAAC;YAC7C,KAAK,EAAE,OAAO;YACd,SAAS,EAAE,KAAK;YAChB,cAAc,EAAE,GAAG;SACpB,CAAC,CAAC;QACH,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC;YAAE,QAAQ,CAAC,yBAAyB,CAAC,CAAC;IAC1E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,eAAe;YAAE,MAAM,KAAK,CAAC;QAClD,QAAQ,CAAC,8BAA8B,CAAC,CAAC;IAC3C,CAAC;AACH,CAAC;AAED,MAAM,mBAAmB,GAAqC,EAAE,aAAa,EAAE,uBAAuB,EAAE,CAAC;AAEzG,MAAM,UAAU,0BAA0B,CAAC,YAAuD,EAAE;IAClG,MAAM,YAAY,GAAG,EAAE,GAAG,mBAAmB,EAAE,GAAG,SAAS,EAAE,CAAC;IAC9D,OAAO,KAAK,EAAE,KAAK,EAAE,EAAE;QACrB,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,UAAuB,CAAC;QAC5B,IAAI,CAAC;YAAC,UAAU,GAAG,MAAM,6BAA6B,CAAC,MAAM,CAAC,CAAC;QAAC,CAAC;QACjE,OAAO,KAAK,EAAE,CAAC;YACb,IAAI,SAAS,CAAC,KAAK,CAAC;gBAAE,QAAQ,CAAC,sBAAsB,CAAC,CAAC;YACvD,MAAM,KAAK,CAAC;QACd,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QACxD,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,OAAO,KAAK,oBAAoB,EAAE,CAAC;YACxE,QAAQ,CAAC,gCAAgC,CAAC,CAAC;QAC7C,CAAC;QACD,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACnC,MAAM,OAAO,GAAyB,QAAQ,KAAK,SAAS;YAC1D,CAAC,CAAC;gBACA,MAAM;gBACN,SAAS,EAAE,UAAU,CAAC,GAAG,CAAC,QAAQ,EAAE;gBACpC,SAAS,EAAE,UAAU,CAAC,GAAG,CAAC,QAAQ,EAAE;gBACpC,SAAS,EAAE,QAAQ;gBACnB,MAAM,EAAE,KAAK,CAAC,MAAM,KAAK,IAAI;gBAC7B,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;aACvD;YACD,CAAC,CAAC;gBACA,MAAM;gBACN,SAAS,EAAE,UAAU,CAAC,GAAG,CAAC,QAAQ,EAAE;gBACpC,SAAS,EAAE,UAAU,CAAC,GAAG,CAAC,QAAQ,EAAE;gBACpC,SAAS,EAAE,QAAQ;gBACnB,MAAM,EAAE,KAAK,CAAC,MAAM,KAAK,IAAI;gBAC7B,cAAc,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC;gBAChE,YAAY,EAAE,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC;aAClD,CAAC;QACJ,MAAM,YAAY,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QAC1C,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;IACvE,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,kBAAkB,GAAG,0BAA0B,EAAE,CAAC"}

package/dist/application/acquire.d.ts

@@ -0,0 +1,60 @@
+import type { AgentAction, AcquireInput, StepFailureCode, SubmitResult } from "../protocol/application.js";
+import type { WorkPackage } from "../protocol/work-package.js";
+import type { ExecutorRegistry } from "../registry/executors/registry.js";
+import { type RuntimeProjection } from "../storage/control-plane.js";
+import { type CloseDecision } from "../engine/archive.js";
+import type { ApplicationState } from "./state.js";
+import type { ExternalActionExecutor } from "./external-action.js";
+export interface AcquireDependencies {
+    now(): Date;
+    executors: ExecutorRegistry;
+    home: string;
+    provider: import("../registry/skills/types.js").SkillProvider;
+    externalExecutor(provider: string, action: import("../engine/external-effects/authorization.js").ExternalActionName): ExternalActionExecutor;
+}
+export interface ApplicationStepResult extends SubmitResult {
+    failureCode?: StepFailureCode;
+}
+export interface ApplicationAttemptRecord {
+    workPackage: WorkPackage;
+    retryCount: number;
+    actor?: string;
+    stepInstanceId?: string;
+    artifactValues?: Record<string, Record<string, unknown>>;
+    result?: ApplicationStepResult;
+    nextAction?: AgentAction;
+}
+export interface ApplicationSkippedStepRecord {
+    stepInstanceId: string;
+    skipped: true;
+}
+interface AcquiredMutation {
+    action: AgentAction;
+    skippedStepIds: string[];
+    closeDecision?: CloseDecision;
+    reacquired?: {
+        stageId: string;
+        attemptId: string;
+        previousLeaseDigest: string;
+        leaseDigest: string;
+    };
+}
+export declare class ApplicationAcquireError extends Error {
+    readonly code: `WSSPEC_${string}`;
+    constructor(code: `WSSPEC_${string}`, message: string);
+}
+export declare function acquireNextLocked(input: {
+    state: ApplicationState;
+    projection: RuntimeProjection;
+    actor: string;
+    root: string;
+    dependencies: AcquireDependencies;
+}): Promise<{
+    projection: RuntimeProjection;
+    action: AgentAction;
+    skippedStepIds: string[];
+    closeDecision?: CloseDecision;
+    reacquired?: NonNullable<AcquiredMutation["reacquired"]>;
+}>;
+export declare function acquireApplication(input: AcquireInput, dependencies: AcquireDependencies): Promise<AgentAction>;
+export {};