mesalogo
e5aebaa67d
Managed SSH previously tied remote Agent and Runtime artifacts to desktop packaging and Host activation. Settings now manages verified Linux x64 and arm64 .gbagent packages explicitly, with source-aligned download and update plus offline import and export. Each package contains the signed Agent, pinned Node, and compatible OpenCode Runtime, and project activation never downloads one automatically. Dedicated native CI and a protected release workflow publish deterministic, signed cumulative catalogs to GitHub and Beijing OSS without replacing the desktop Latest release. Desktop packaging is metadata-only, remains independent of Agent artifacts and signing credentials, and Linux desktop releases add RPM installers. The managed SSH path also keeps model credentials in Main, enforces Ask as read-only, verifies signed Agent and Runtime inputs, preserves ACP recovery, and reports Host update cancellation and failures accurately. Release note: 远程项目现可在“设置”中手动下载、更新或离线导入签名 Agent 包，桌面安装包与远程组件发布相互独立；Linux 桌面版同时新增 RPM 安装包。
22 lines
817 B
TypeScript
22 lines
817 B
TypeScript
import type { SshExecutionSpaceDescriptor } from './execution-space-resolver'
|
|
|
|
/**
|
|
* Prevents a request from combining persisted remote Runtime evidence with a
|
|
* different Agent installation. Runtime provider, model profile, and Ask /
|
|
* Execute behavior are validated by the live Runtime path for each request.
|
|
*/
|
|
export function assertRemoteRuntimeRequestValidated(
|
|
executionSpace: SshExecutionSpaceDescriptor
|
|
): void {
|
|
const executionValidation = executionSpace.validation
|
|
const runtimeValidation = executionSpace.runtimeValidation
|
|
if (
|
|
!executionValidation ||
|
|
!runtimeValidation ||
|
|
executionValidation.agentInstallationIdAtValidation !==
|
|
runtimeValidation.agentInstallationIdAtValidation
|
|
) {
|
|
throw new Error('远程 Project 缺少完整的当前验证，请重新验证')
|
|
}
|
|
}
|