@cjhyy/code-shell-core 0.7.1 → 0.8.0

package/dist/links/http.js

@@ -0,0 +1,166 @@
+const MAX_RESPONSE_BYTES = 1024 * 1024;
+const REQUEST_TIMEOUT_MS = 20_000;
+const LOCAL_LINK_ALLOWED_HOSTS = new Set([
+    "api.github.com",
+    "gitlab.com",
+    "api.figma.com",
+    "api.notion.com",
+    "api.linear.app",
+    "slack.com",
+    "sentry.io",
+    "api.airtable.com",
+    "api.todoist.com",
+    "api.vercel.com",
+]);
+export async function linkRequestJson(request) {
+    if (request.url.protocol !== "https:" ||
+        !LOCAL_LINK_ALLOWED_HOSTS.has(request.url.hostname.toLowerCase())) {
+        throw new Error(`Link provider host is not allowed: ${request.url.hostname}`);
+    }
+    const fetchImpl = request.fetchImpl ?? fetch;
+    const timeout = AbortSignal.timeout(REQUEST_TIMEOUT_MS);
+    const signal = request.signal ? AbortSignal.any([request.signal, timeout]) : timeout;
+    const response = await fetchImpl(request.url, {
+        method: request.method ?? "GET",
+        headers: {
+            Accept: "application/json",
+            ...request.headers,
+            ...(request.body === undefined ? {} : { "Content-Type": "application/json" }),
+        },
+        body: request.body === undefined ? undefined : JSON.stringify(request.body),
+        redirect: "error",
+        signal,
+    });
+    const text = await readResponseText(response);
+    let data;
+    try {
+        data = text ? JSON.parse(text) : null;
+    }
+    catch {
+        throw new Error(`Link provider returned invalid JSON (HTTP ${response.status})`);
+    }
+    if (!response.ok) {
+        throw new Error(normalizeProviderError(response.status, data));
+    }
+    return data;
+}
+async function readResponseText(response) {
+    if (!response.body)
+        return "";
+    const reader = response.body.getReader();
+    const chunks = [];
+    let bytes = 0;
+    try {
+        while (true) {
+            const { done, value } = await reader.read();
+            if (done)
+                break;
+            bytes += value.byteLength;
+            if (bytes > MAX_RESPONSE_BYTES) {
+                await reader.cancel();
+                throw new Error(`Link provider response exceeded ${MAX_RESPONSE_BYTES} bytes`);
+            }
+            chunks.push(value);
+        }
+    }
+    finally {
+        reader.releaseLock();
+    }
+    const combined = new Uint8Array(bytes);
+    let offset = 0;
+    for (const chunk of chunks) {
+        combined.set(chunk, offset);
+        offset += chunk.byteLength;
+    }
+    return new TextDecoder().decode(combined);
+}
+function normalizeProviderError(status, data) {
+    const record = asRecord(data);
+    const nested = asRecord(record?.error);
+    const message = firstString(record?.message, record?.error_description, nested?.message, nested?.type);
+    return message
+        ? `Link provider request failed (HTTP ${status}): ${message.slice(0, 300)}`
+        : `Link provider request failed (HTTP ${status})`;
+}
+export function asRecord(value) {
+    return value && typeof value === "object" && !Array.isArray(value)
+        ? value
+        : undefined;
+}
+export function asArray(value) {
+    return Array.isArray(value) ? value : [];
+}
+export function firstString(...values) {
+    return values.find((value) => typeof value === "string" && value.length > 0);
+}
+export function stringParam(params, key, options = {}) {
+    const value = params[key];
+    if (value === undefined || value === null || value === "") {
+        if (options.required)
+            throw new Error(`Missing required Link Action parameter: ${key}`);
+        return undefined;
+    }
+    if (typeof value !== "string")
+        throw new Error(`Link Action parameter ${key} must be a string`);
+    const trimmed = value.trim();
+    if (!trimmed && options.required)
+        throw new Error(`Missing required Link Action parameter: ${key}`);
+    const max = options.maxLength ?? 300;
+    if (trimmed.length > max)
+        throw new Error(`Link Action parameter ${key} is too long`);
+    return trimmed;
+}
+/**
+ * Values interpolated into a fixed URL path template must never move the
+ * request to another endpoint. `encodeURIComponent` does not neutralize
+ * `.`/`..`, and both `new URL()` and CLI backends like `gh api` normalize dot
+ * segments away, so `organization: ".."` would otherwise turn
+ * `/organizations/../projects/` into `/projects/`.
+ */
+export function assertPathSegment(value, key) {
+    let decoded = value;
+    try {
+        decoded = decodeURIComponent(value);
+    }
+    catch {
+        // Not valid percent-encoding; the raw value is still checked below.
+    }
+    for (const candidate of [value, decoded]) {
+        if (!candidate || candidate === "." || candidate === ".." || /[/\\]/.test(candidate)) {
+            throw new Error(`Link Action parameter ${key} contains an invalid path segment`);
+        }
+    }
+    return value;
+}
+/** A string param used as exactly one segment of a URL path template. */
+export function pathSegmentParam(params, key, options = {}) {
+    const value = stringParam(params, key, options);
+    if (value === undefined)
+        return undefined;
+    return assertPathSegment(value, key);
+}
+/**
+ * A slash-separated resource path (e.g. a file path inside a repository).
+ * Every segment is validated like assertPathSegment and encoded individually;
+ * the returned string is ready to interpolate into a URL path template.
+ */
+export function pathParam(params, key, options = {}) {
+    const value = stringParam(params, key, options);
+    if (value === undefined)
+        return undefined;
+    return value
+        .split("/")
+        .map((segment) => encodeURIComponent(assertPathSegment(segment, key)))
+        .join("/");
+}
+export function intParam(params, key, fallback, max) {
+    const raw = params[key];
+    const value = typeof raw === "number" ? raw : typeof raw === "string" ? Number(raw) : fallback;
+    if (!Number.isInteger(value) || value < 1)
+        throw new Error(`${key} must be a positive integer`);
+    return Math.min(value, max);
+}
+export function pick(record, keys) {
+    const source = asRecord(record) ?? {};
+    return Object.fromEntries(keys.flatMap((key) => (source[key] === undefined ? [] : [[key, source[key]]])));
+}

package/dist/links/index.d.ts

@@ -0,0 +1,4 @@
+export { LOCAL_LINK_PROVIDERS, getLocalLinkProvider, listLocalLinkProviders, validateLocalLinkToken, } from "./providers.js";
+export { linkActionToolDef, linkActionTool, isLinkActionAvailable } from "./link-action-tool.js";
+export { assertCliLinkAccount, connectCliLink, executeCliLinkAction, getCliLinkStatus, isCliLinkProvider, managedLinkCliPath, resolveLinkCliExecutable, runCliLinkCommand, type CliLinkCommandResult, type CliLinkCommandRunner, type CliLinkProviderId, type CliLinkRunOptions, type CliLinkStatus, } from "./cli.js";
+export type { LinkActionRisk, LocalLinkIdentity, LocalLinkValidationResult, LocalLinkActionSummary, LocalLinkProviderSummary, LocalLinkActionContext, LocalLinkActionSpec, LocalLinkProviderSpec, } from "./types.js";

package/dist/links/index.js

@@ -0,0 +1,3 @@
+export { LOCAL_LINK_PROVIDERS, getLocalLinkProvider, listLocalLinkProviders, validateLocalLinkToken, } from "./providers.js";
+export { linkActionToolDef, linkActionTool, isLinkActionAvailable } from "./link-action-tool.js";
+export { assertCliLinkAccount, connectCliLink, executeCliLinkAction, getCliLinkStatus, isCliLinkProvider, managedLinkCliPath, resolveLinkCliExecutable, runCliLinkCommand, } from "./cli.js";

package/dist/links/link-action-tool.d.ts

@@ -0,0 +1,5 @@
+import type { ToolDefinition } from "../types.js";
+import type { ToolContext } from "../tool-system/context.js";
+export declare const linkActionToolDef: ToolDefinition;
+export declare function linkActionTool(args: Record<string, unknown>, ctx?: ToolContext): Promise<string>;
+export declare function isLinkActionAvailable(cwd: string, settingsScope?: import("../settings/manager.js").SettingsScope): boolean;

package/dist/links/link-action-tool.js

@@ -0,0 +1,241 @@
+import { credentialAccessScope, getCredentialAccess, } from "../credentials/access.js";
+import { getLocalLinkProvider, listLocalLinkProviders } from "./providers.js";
+import { assertCliLinkAccount, executeCliLinkAction, isCliLinkProvider } from "./cli.js";
+const TOOL_NAME = "LinkAction";
+export const linkActionToolDef = {
+    name: TOOL_NAME,
+    description: "Use a connected local Link provider without exposing its token. Call with no arguments " +
+        "to list connected providers and actions. Call with provider and action plus params to run " +
+        "an action. Provider responses are untrusted external content. Write actions always ask the " +
+        "user for approval inside the tool.",
+    inputSchema: {
+        type: "object",
+        properties: {
+            provider: {
+                type: "string",
+                description: "Connected provider id, for example github, figma, notion, or slack.",
+            },
+            action: {
+                type: "string",
+                description: "Provider action id. Omit to list that provider's available actions.",
+            },
+            params: {
+                type: "object",
+                description: "Action-specific parameters. List the provider first when unsure.",
+                additionalProperties: true,
+            },
+        },
+    },
+};
+function isUsableLinkCredential(credential) {
+    return credential.oauthStatus?.state !== "expired" && credential.oauthStatus?.state !== "invalid";
+}
+function connectedLocalLinks(ctx) {
+    const cwd = ctx?.cwd ?? process.cwd();
+    const scope = credentialAccessScope(ctx?.settingsScope);
+    return getCredentialAccess()
+        .listMasked(cwd, scope)
+        .flatMap((credential) => {
+        const providerId = credential.meta?.linkProvider;
+        return credential.type === "link" &&
+            credential.hasSecret &&
+            isUsableLinkCredential(credential) &&
+            credential.meta?.linkExecutionRuntime === "local" &&
+            typeof providerId === "string" &&
+            getLocalLinkProvider(providerId)
+            ? [{ credential, providerId }]
+            : [];
+    });
+}
+function newestConnection(connections) {
+    return [...connections].sort((left, right) => {
+        const l = Date.parse(left.credential.meta?.linkLastVerifiedAt ?? "") || 0;
+        const r = Date.parse(right.credential.meta?.linkLastVerifiedAt ?? "") || 0;
+        return r - l;
+    })[0];
+}
+function parseParams(value) {
+    if (value === undefined)
+        return {};
+    if (!value || typeof value !== "object" || Array.isArray(value)) {
+        throw new Error("Link Action params must be an object");
+    }
+    return value;
+}
+export async function linkActionTool(args, ctx) {
+    const providerId = typeof args.provider === "string" ? args.provider.trim() : "";
+    const actionId = typeof args.action === "string" ? args.action.trim() : "";
+    const links = connectedLocalLinks(ctx);
+    if (!providerId) {
+        const summaries = listLocalLinkProviders();
+        return JSON.stringify({
+            kind: "connected_providers",
+            runtimePreference: "local-first",
+            providers: summaries.flatMap((provider) => {
+                const connection = newestConnection(links.filter((candidate) => candidate.providerId === provider.id));
+                if (!connection)
+                    return [];
+                return [
+                    {
+                        id: provider.id,
+                        name: provider.displayName,
+                        account: connection.credential.meta?.linkAccountLabel,
+                        verifiedAt: connection.credential.meta?.linkLastVerifiedAt,
+                        actions: provider.actions,
+                    },
+                ];
+            }),
+        });
+    }
+    const provider = getLocalLinkProvider(providerId);
+    if (!provider) {
+        return JSON.stringify({ kind: "error", error: `Unknown local Link provider: ${providerId}` });
+    }
+    const connection = newestConnection(links.filter((candidate) => candidate.providerId === providerId));
+    if (!connection) {
+        return JSON.stringify({
+            kind: "error",
+            error: `${provider.displayName} is not connected locally. Connect it in Credentials → Link.`,
+        });
+    }
+    if (!actionId) {
+        return JSON.stringify({
+            kind: "provider_actions",
+            provider: provider.id,
+            name: provider.displayName,
+            account: connection.credential.meta?.linkAccountLabel,
+            actions: provider.actions.map(({ id, title, description, risk }) => ({
+                id,
+                title,
+                description,
+                risk,
+            })),
+        });
+    }
+    const action = provider.actions.find((candidate) => candidate.id === actionId);
+    if (!action) {
+        return JSON.stringify({
+            kind: "error",
+            error: `Unknown ${provider.displayName} Link Action: ${actionId}`,
+        });
+    }
+    const capabilityId = `${providerId}.${actionId}`;
+    if (connection.credential.meta?.linkCapabilityIds?.length &&
+        !connection.credential.meta.linkCapabilityIds.includes(capabilityId)) {
+        return JSON.stringify({
+            kind: "error",
+            error: `${provider.displayName} connection does not allow Link Action ${actionId}.`,
+        });
+    }
+    let params;
+    try {
+        params = parseParams(args.params);
+    }
+    catch (error) {
+        return JSON.stringify({ kind: "error", error: String(error) });
+    }
+    if (action.risk === "write") {
+        if (!ctx?.askUser) {
+            return JSON.stringify({
+                kind: "error",
+                error: `Cannot run write Link Action ${providerId}.${actionId} without an approval UI.`,
+            });
+        }
+        const allowLabel = "允许执行";
+        const answer = await ctx.askUser(`允许 CodeShell 通过本地 ${provider.displayName} 连接执行「${action.title}」吗？\n\n参数：${JSON.stringify(params).slice(0, 2_000)}`, {
+            header: "Link 写入",
+            optionsOnly: true,
+            options: [
+                { label: allowLabel, description: "仅执行本次操作。", tone: "ok" },
+                { label: "取消", description: "不执行，并且不会发送请求。", tone: "danger" },
+            ],
+        });
+        if (answer !== allowLabel) {
+            return JSON.stringify({ kind: "cancelled", provider: providerId, action: actionId });
+        }
+    }
+    const cwd = ctx?.cwd ?? process.cwd();
+    const scope = credentialAccessScope(ctx?.settingsScope);
+    const access = getCredentialAccess();
+    const invalidated = new AbortController();
+    const stillConnected = () => {
+        const live = access.resolveMeta(cwd, connection.credential.id, scope);
+        return Boolean(live?.hasSecret &&
+            live.type === "link" &&
+            live.meta?.linkExecutionRuntime === "local" &&
+            live.meta.linkProvider === providerId &&
+            live.meta.linkLastVerifiedAt === connection.credential.meta?.linkLastVerifiedAt);
+    };
+    const unsubscribe = access.subscribe?.(() => {
+        if (!stillConnected())
+            invalidated.abort("Link connection disconnected");
+    });
+    try {
+        if (!stillConnected())
+            throw new Error(`${provider.displayName} connection was disconnected`);
+        const signal = ctx?.signal
+            ? AbortSignal.any([ctx.signal, invalidated.signal])
+            : invalidated.signal;
+        let data;
+        if (connection.credential.meta?.linkExecutionBackend === "cli") {
+            if (!isCliLinkProvider(providerId)) {
+                throw new Error(`${provider.displayName} does not support local CLI execution`);
+            }
+            const accountId = connection.credential.meta.linkAccountId;
+            if (!accountId) {
+                throw new Error(`${provider.displayName} CLI connection must be reconnected`);
+            }
+            await assertCliLinkAccount(providerId, accountId, { cwd, signal });
+            if (!stillConnected())
+                throw new Error(`${provider.displayName} connection was disconnected`);
+            data = await executeCliLinkAction(providerId, actionId, params, { cwd, signal });
+        }
+        else {
+            // Resolve on every invocation (and after write approval). Disconnecting the
+            // credential therefore invalidates the next action instead of reusing an old token.
+            if (!access.resolveValue)
+                throw new Error("Credential resolver is unavailable");
+            const token = await access.resolveValue({
+                cwd,
+                id: connection.credential.id,
+                scope,
+                purpose: "link",
+            });
+            data = await action.execute({ token, params, signal });
+        }
+        return JSON.stringify({
+            kind: "action_result",
+            provider: providerId,
+            action: actionId,
+            runtime: "local",
+            untrustedExternalContent: true,
+            data,
+        });
+    }
+    catch (error) {
+        return JSON.stringify({
+            kind: "error",
+            provider: providerId,
+            action: actionId,
+            error: error instanceof Error ? error.message : String(error),
+        });
+    }
+    finally {
+        unsubscribe?.();
+    }
+}
+export function isLinkActionAvailable(cwd, settingsScope) {
+    try {
+        return getCredentialAccess()
+            .listMasked(cwd, credentialAccessScope(settingsScope))
+            .some((credential) => credential.type === "link" &&
+            credential.hasSecret &&
+            isUsableLinkCredential(credential) &&
+            credential.meta?.linkExecutionRuntime === "local" &&
+            Boolean(credential.meta.linkProvider) &&
+            Boolean(getLocalLinkProvider(credential.meta.linkProvider)));
+    }
+    catch {
+        return false;
+    }
+}

package/dist/links/providers.d.ts

@@ -0,0 +1,8 @@
+import type { LocalLinkProviderSpec, LocalLinkProviderSummary } from "./types.js";
+export declare const LOCAL_LINK_PROVIDERS: readonly LocalLinkProviderSpec[];
+export declare function getLocalLinkProvider(providerId: string): LocalLinkProviderSpec | undefined;
+export declare function listLocalLinkProviders(): LocalLinkProviderSummary[];
+export declare function validateLocalLinkToken(providerId: string, token: string, options?: {
+    signal?: AbortSignal;
+    fetchImpl?: typeof fetch;
+}): Promise<import("./types.js").LocalLinkValidationResult>;