service-dataplane

Entry point for the builder **data plane**.

Data-plane HTTP client for control-plane (aistiod) internal APIs.

Projects data-plane session events into the aistiod runtime event store.

Optionally self-registers this Java data plane with aistiod and heartbeats so the control plane can poll `/agentscope/*` without Kubernetes discovery.

Lightweight session row from `GET /api/internal/sessions` on the control plane (product schema).

One-shot session materialization returned by `GET /api/internal/sessions/{id}/resolve` on the control plane (aistiod).

aistio data-plane HTTP contract (`/agentscope/*`).

Data-plane session API: inbound user events (message / interrupt / tool confirmation / tool results), the persisted event log, SSE streaming and hands metrics.

Observability for Hands workers, turn coordination, and lease health.

Fenced control-plane abort delivery for one physical Managed AgentTask Attempt.

Internal control-plane callback that resolves one fully fenced Managed AgentTask HITL ticket.

Outbound-worker data plane for `self_hosted`: pending tool_use listing, tool_result resume, and skills download.

REST surface for out-of-process Environment Workers on `self_hosted` environments.

Data-plane agent factory: instantiates (and caches) `HarnessAgent` instances for managed sessions.

Materializes a CP definition into a session-private workspace, including deletions.

Bean assembly for the builder data plane.

WebFlux Security configuration for the builder data plane.

Ensures the dataplane JDBC schema `dp` exists before Hibernate validates / updates tables.

Reconciles expired turn leases and HITL tickets so multi-replica Brain fleets do not leave sessions stuck in `running` / `requires_action`.

Acquires and heartbeats the in-flight turn lease for a managed session.

Local execution ownership.

Data-plane read access to environment templates.

Data-plane session service: status transitions, override merges and turn execution for sessions that were created (and version-pinned) by the control plane.

Maps Managed Agents `EnvironmentDto` onto harness filesystem / sandbox specs.

Hands work-queue facade.

Live `sessionId -> Sandbox` handles registered by an Environment Worker (a remote worker calling the worker REST API).

Brokers hands work-queue signaling for `self_hosted` managed sessions.

Direct CP memory operations also usable when filesystem tools execute on an external Worker.

Root Session identity retained when a subagent uses its own conversation session key.

Immutable managed Attempt and continuation lease captured at physical-turn admission.

Live document access, scoped to one authorized session mount.

Resolves session-bound memory stores into `MemoryStoreFilesystem` routes mounted under `memory-stores/{storeName}/` in the harness filesystem (see `MemoryStoreFilesystem#routePrefix` and `EnvironmentSpecFactory#applyMemoryStoreRoutes`).

`AbstractFilesystem` view over a single `MemoryStoreService` store, mounted under `memory-stores/{storeName}/` via `io.agentscope.harness.agent.HarnessAgent.Builder#filesystemRoute`.

Maps harness `AgentEvent`s onto persisted session event types / payloads and stream-only preview frames.

Process-local stream-only preview bus for `event_start` / `event_delta`.

Mounts session-level `resources[]` entries (see ` ManagedSessionService.CreateSessionRequest#resources`) into a managed session's workspace at agent-build time.

Executes a managed session turn against the harness agent and records session events.

Resolves vault credentials into MCP `ToolsConfig` env substitutions so session vault mounts actually reach MCP server processes.

Docker-less `Sandbox` backed by a plain host directory, registered by an Environment Worker (via the worker REST API) as the Priority-1 `externalSandbox` for a `self_hosted` managed session.

Resolves pending `agent.tool_use` events that still lack a matching tool result.

Schema definitions for the self-hosted external toolset.

Packs agent skills into a Worker-downloadable manifest (Claude-style skills sync for self-hosted).

Coordinates human-in-the-loop tool confirmations.

Harness middleware that enforces per-tool permission policies.

Singleton in-memory event bus for tool-call events emitted by HarnessAgent hooks.

`MiddlewareBase` implementation that publishes tool-call events to `ToolEventBus` before each tool-call execution, enabling real-time SSE streaming of tool calls in `io.agentscope.builder.web.api.DataSessionApiController`.