io.agentscope.builder.web.managed

Live document access, scoped to one authorized session mount.

Shared merge helper for session-scoped agent overrides.

Local execution ownership.

Builds stable `externalKey` values for managed-session find-or-create, aligned with channel `dmScope`: - MAIN DMs → `{channelId}|main` - PER_PEER DMs / groups → `{channelId}|{peerKind}|{peerId}` from the outbound address - Groups always use the group peer id even under MAIN (so group and DM never share a slot)

Authenticated, durable work intake.

Scheduler-plane cron loop: every minute, finds due cron deployments, acquires a shared fire lease, and asks the control plane to fire (create session + kick data-plane turn).

Data-plane read access to environment templates.

Data-plane session service: status transitions, override merges and turn execution for sessions that were created (and version-pinned) by the control plane.

Maps Managed Agents `EnvironmentDto` onto harness filesystem / sandbox specs.

Environment template type constants, shared across planes.

Hands work-queue facade.

Live `sessionId -> Sandbox` handles registered by an Environment Worker (a remote worker calling the worker REST API).

Brokers hands work-queue signaling for `self_hosted` managed sessions.

Direct CP memory operations also usable when filesystem tools execute on an external Worker.

Bridges inbound IM channel turns (DingTalk, Feishu, WeCom, GitHub, GitLab, ...) into the managed-session model across plane boundaries: - `POST /api/internal/sessions/find-or-create` on the **control plane** resolves (or creates and version-pins) the session for the channel conversation; - `POST /api/sessions/{id}/events` on the **data plane** posts the user message, which schedules the harness turn asynchronously; - `GET /api/sessions/{id}/events?after=seq` on the **data plane** is polled until the turn reaches a terminal status, and the last `agent.message` text is returned as the channel reply.

Resolves session-bound memory stores into `MemoryStoreFilesystem` routes mounted under `memory-stores/{storeName}/` in the harness filesystem (see `MemoryStoreFilesystem#routePrefix` and `EnvironmentSpecFactory#applyMemoryStoreRoutes`).

`AbstractFilesystem` view over a single `MemoryStoreService` store, mounted under `memory-stores/{storeName}/` via `io.agentscope.harness.agent.HarnessAgent.Builder#filesystemRoute`.

Maps harness `AgentEvent`s onto persisted session event types / payloads and stream-only preview frames.

Process-local stream-only preview bus for `event_start` / `event_delta`.

Canonical session event type names (persisted + stream-only).

Mounts session-level `resources[]` entries (see ` ManagedSessionService.CreateSessionRequest#resources`) into a managed session's workspace at agent-build time.

Shared session status vocabulary.

Executes a managed session turn against the harness agent and records session events.

Resolves vault credentials into MCP `ToolsConfig` env substitutions so session vault mounts actually reach MCP server processes.

Docker-less `Sandbox` backed by a plain host directory, registered by an Environment Worker (via the worker REST API) as the Priority-1 `externalSandbox` for a `self_hosted` managed session.

Immutable snapshot of versioned agent configuration fields persisted in `io.agentscope.builder.web.persistence.jpa.AgentVersionEntity`.

API representation of a deployment: agent + version + environment + trigger.

API representation of an execution environment template.

API representation of a managed agent session.

Root Session identity retained when a subagent uses its own conversation session key.

Immutable managed Attempt and continuation lease captured at physical-turn admission.

API representation of a path-addressed memory document.

API representation of a cross-session memory store.

API representation of an immutable memory document version.

API view of a `io.agentscope.builder.web.persistence.jpa.ResourceShareEntity` grant.

Runtime build parameters for a managed-session `io.agentscope.harness.agent.HarnessAgent`.

API representation of a single append-only session event.

API representation of a vault credential entry (no plaintext).

API representation of a credential vault (no secrets).