@downcity/agent 1.1.7 → 1.1.10

package/src/host/daemon/ProjectSetup.ts

@@ -9,7 +9,7 @@
 import fs from "fs-extra";
 import path from "node:path";
 import { loadDowncityConfig } from "@/config/Config.js";
-import { PlatformStore } from "@/shared/utils/store/index.js";
+import type { AgentPlatformRuntime } from "@/host/types/AgentHost.js";
 import {
   readProjectExecutionBinding,
   readProjectPrimaryModelId,
@@ -84,7 +84,10 @@ export function ensureRuntimeProjectReady(projectRoot: string): void {
  * - 若走 local 模式，则 `lmp` plugin 必须启用且本地模型文件必须存在。
  * - 若模型被 pause，也要在启动前直接拒绝，避免进程拉起后秒退。
  */
-export function ensureRuntimeExecutionBindingReady(projectRoot: string): void {
+export function ensureRuntimeExecutionBindingReady(
+  projectRoot: string,
+  platform?: Pick<AgentPlatformRuntime, "getModel">,
+): void {
   let primaryModelId = "";
   try {
     const config = loadDowncityConfig(projectRoot);
@@ -103,24 +106,19 @@ export function ensureRuntimeExecutionBindingReady(projectRoot: string): void {
     process.exit(1);
   }
 
-  const store = new PlatformStore();
-  try {
-    const model = store.getModel(primaryModelId);
-    if (!model) {
-      console.error("❌ Model not found in platform model pool");
-      console.error(`   project: ${projectRoot}`);
-      console.error(`   execution.modelId: ${primaryModelId}`);
-      console.error("   fix: run `city model create` or `city model list`");
-      process.exit(1);
-    }
-    if (model.isPaused === true) {
-      console.error("❌ Model is paused");
-      console.error(`   project: ${projectRoot}`);
-      console.error(`   execution.modelId: ${primaryModelId}`);
-      console.error(`   fix: run \`city model pause ${primaryModelId} --enabled false\``);
-      process.exit(1);
-    }
-  } finally {
-    store.close();
+  const model = platform?.getModel(primaryModelId);
+  if (!model) {
+    console.error("❌ Model not found in platform model pool");
+    console.error(`   project: ${projectRoot}`);
+    console.error(`   execution.modelId: ${primaryModelId}`);
+    console.error("   fix: run `city model create` or `city model list`");
+    process.exit(1);
+  }
+  if (model.isPaused === true) {
+    console.error("❌ Model is paused");
+    console.error(`   project: ${projectRoot}`);
+    console.error(`   execution.modelId: ${primaryModelId}`);
+    console.error(`   fix: run \`city model pause ${primaryModelId} --enabled false\``);
+    process.exit(1);
   }
 }

package/src/host/http/Server.ts

@@ -0,0 +1,157 @@
+/**
+ * Agent HTTP Server 装配模块。
+ *
+ * 职责说明：
+ * 1. 创建主 Hono 应用并挂载各路由模块。
+ * 2. 管理 Node HTTP Server 的启动与停止。
+ * 3. 保持 server 层只做协议装配，不混入具体路由实现。
+ */
+
+import { Hono } from "hono";
+import { cors } from "hono/cors";
+import { logger } from "hono/logger";
+import http from "node:http";
+import { logger as serverLogger } from "@/utils/logger/Logger.js";
+import { executeRouter } from "@/host/http/execute/execute.js";
+import { healthRouter } from "@/host/http/health/health.js";
+import {
+  ensureServiceActionRoutesRegistered,
+  servicesRouter,
+} from "@/host/http/services/services.js";
+import { pluginsRouter } from "@/host/http/plugins/plugins.js";
+import { staticRouter } from "@/host/http/static/static.js";
+import { controlRouter } from "@/host/http/control/ControlRouter.js";
+import {
+  listBuiltinPluginRuntimeAuthPolicies,
+  registerBuiltinPluginHttpRoutes,
+} from "@/plugin/core/HttpRoutes.js";
+import { getAgentContext } from "@/agent/AgentRuntime.js";
+
+/**
+ * Server 启动参数。
+ */
+export interface ServerStartOptions {
+  /** HTTP 服务监听端口。 */
+  port: number;
+  /** HTTP 服务监听主机。 */
+  host: string;
+}
+
+/**
+ * Server 运行实例。
+ */
+export interface ServerInstance {
+  /** Hono 应用实例。 */
+  app: Hono;
+  /** 原生 HTTP Server 实例。 */
+  server: http.Server;
+  /** 停止当前服务。 */
+  stop(): Promise<void>;
+}
+
+/**
+ * 创建主 Hono 应用。
+ */
+export function createServerApp(): Hono {
+  const app = new Hono();
+
+  app.use("*", logger());
+  app.use(
+    "*",
+    cors({
+      origin: "*",
+      allowMethods: ["GET", "POST", "PUT", "DELETE", "OPTIONS"],
+      allowHeaders: ["Content-Type", "Authorization"],
+    }),
+  );
+
+  // 关键点（中文）：service action 路由在 runtime ready 后再注册，避免命令级 import 副作用。
+  ensureServiceActionRoutesRegistered();
+
+  // 关键点（中文）：按路由域挂载，server 模块只保留装配职责。
+  app.route("/", staticRouter);
+  app.route("/", healthRouter);
+  app.route("/", servicesRouter);
+  app.route("/", pluginsRouter);
+  app.route("/", executeRouter);
+  app.route("/", controlRouter);
+  registerBuiltinPluginHttpRoutes({
+    app,
+    getContext: getAgentContext,
+  });
+
+  return app;
+}
+
+/**
+ * 启动主 HTTP 服务。
+ */
+export async function startServer(
+  options: ServerStartOptions,
+): Promise<ServerInstance> {
+  const app = createServerApp();
+  const server = createNodeServer(app, options);
+
+  await new Promise<void>((resolve) => {
+    server.listen(options.port, options.host, () => {
+      serverLogger.info(
+        `🚀 Agent Server started: http://${options.host}:${options.port}`,
+      );
+      serverLogger.info("Available APIs:");
+      resolve();
+    });
+  });
+
+  return {
+    app,
+    server,
+    async stop(): Promise<void> {
+      await serverLogger.saveAllLogs();
+      await new Promise<void>((resolve) => {
+        server.close(() => resolve());
+      });
+      serverLogger.info("Agent Server stopped");
+    },
+  };
+}
+
+/**
+ * 创建 Node HTTP Server 适配层。
+ */
+function createNodeServer(app: Hono, options: ServerStartOptions): http.Server {
+  return http.createServer(async (req, res) => {
+    try {
+      const url = new URL(req.url || "/", `http://${options.host}:${options.port}`);
+      const method = req.method || "GET";
+      const bodyBuffer = await readRequestBody(req);
+      const request = new Request(url.toString(), {
+        method,
+        headers: new Headers(req.headers as Record<string, string>),
+        body: bodyBuffer.length > 0 ? bodyBuffer : undefined,
+      });
+
+      const response = await app.fetch(request);
+      res.statusCode = response.status;
+      for (const [key, value] of response.headers.entries()) {
+        res.setHeader(key, value);
+      }
+      const body = await response.text();
+      res.end(body);
+    } catch {
+      res.statusCode = 500;
+      res.end("Internal Server Error");
+    }
+  });
+}
+
+/**
+ * 读取原生请求体。
+ */
+async function readRequestBody(req: http.IncomingMessage): Promise<Buffer> {
+  return new Promise<Buffer>((resolve, reject) => {
+    const chunks: Buffer[] = [];
+    req.on("data", (chunk) => chunks.push(chunk));
+    req.on("end", () => resolve(Buffer.concat(chunks)));
+    req.on("error", reject);
+  });
+}

package/src/host/http/auth/AuthEnv.ts

@@ -0,0 +1,62 @@
+/**
+ * AuthEnv：统一认证环境变量与 token 解析辅助模块。
+ *
+ * 关键点（中文）
+ * - 收敛 `DC_AUTH_TOKEN` 的变量名与 Bearer 归一化逻辑。
+ * - 通用子进程默认不继承任何 Bearer Token，避免隐式走本地 HTTP。
+ */
+
+/**
+ * 用户显式覆盖 Bearer Token 的环境变量名。
+ */
+export const CLI_AUTH_TOKEN_ENV_KEY = "DC_AUTH_TOKEN";
+
+/**
+ * 归一化 Bearer Token。
+ *
+ * 关键点（中文）
+ * - 允许传入纯 token 或 `Bearer xxx`。
+ * - 空字符串与无效值统一归一化为 `null`。
+ */
+export function normalizeBearerToken(value: unknown): string | null {
+  const raw = String(value || "").trim();
+  if (!raw) return null;
+  const bearerMatch = /^Bearer\s+(.+)$/i.exec(raw);
+  const token = bearerMatch?.[1]?.trim() || raw;
+  return token || null;
+}
+
+/**
+ * 解析本次调用应使用的 token。
+ */
+export function resolveInvocationToken(params: {
+  explicitToken?: string;
+  env?: NodeJS.ProcessEnv;
+  storedToken?: string;
+} = {}): string | undefined {
+  const explicitToken = normalizeBearerToken(params.explicitToken);
+  if (explicitToken) return explicitToken;
+
+  const env = params.env || process.env;
+
+  const envAuthToken = normalizeBearerToken(env[CLI_AUTH_TOKEN_ENV_KEY]);
+  if (envAuthToken) return envAuthToken;
+
+  return normalizeBearerToken(params.storedToken) || undefined;
+}
+
+/**
+ * 从通用子进程环境中剥离 Bearer Token。
+ */
+export function stripInvocationAuthEnv(targetEnv: NodeJS.ProcessEnv): void {
+  delete targetEnv[CLI_AUTH_TOKEN_ENV_KEY];
+  delete targetEnv.DC_AGENT_TOKEN;
+}
+
+/**
+ * 生成标准 Authorization 头值。
+ */
+export function formatBearerHeaderValue(tokenInput: string | undefined): string | undefined {
+  const token = normalizeBearerToken(tokenInput);
+  return token ? `Bearer ${token}` : undefined;
+}

package/src/host/http/auth/CliAuthStateStore.ts

@@ -0,0 +1,46 @@
+/**
+ * CLI Bearer Token 解析模块。
+ *
+ * 关键点（中文）
+ * - 只解析显式 token 与环境变量 token，不再读取任何本机持久化默认值。
+ * - 这样远程 HTTP 鉴权始终是显式行为，不会出现本地“兜底复用”。
+ */
+
+import {
+  CLI_AUTH_TOKEN_ENV_KEY,
+  formatBearerHeaderValue,
+  resolveInvocationToken,
+} from "./AuthEnv.js";
+
+/**
+ * Bearer Token 解析参数。
+ */
+export interface CliAuthStateStoreOptions {
+  /**
+   * 保留参数形状，当前不再使用本地存储。
+   */
+  dbPath?: string;
+}
+
+/**
+ * 解析当前 CLI 应使用的 Bearer Token。
+ */
+export function resolveCliAuthToken(params: {
+  explicitToken?: string;
+  env?: NodeJS.ProcessEnv;
+  dbPath?: string;
+} = {}): string | undefined {
+  return resolveInvocationToken({
+    explicitToken: params.explicitToken,
+    env: {
+      [CLI_AUTH_TOKEN_ENV_KEY]: params.env?.[CLI_AUTH_TOKEN_ENV_KEY],
+    },
+  });
+}
+
+/**
+ * 生成标准 Authorization 头值。
+ */
+export function formatCliBearerHeaderValue(tokenInput: string | undefined): string | undefined {
+  return formatBearerHeaderValue(tokenInput);
+}

package/src/host/http/control/AuthControlService.ts

@@ -0,0 +1,161 @@
+/**
+ * Control Authorization Service。
+ *
+ * 关键点（中文）
+ * - 这是 control 侧的 auth 管理面 facade。
+ * - 它通过 auth plugin action 读取与写入授权数据，但自身不属于 plugin 内核。
+ * - 这样调用方不需要知道 plugin action 名称，也不需要依赖 `plugin/builtins/auth/*` 目录。
+ */
+
+import type { AgentContext } from "@/agent/AgentContextTypes.js";
+import type { JsonObject } from "@/utils/types/Json.js";
+import type { AuthControlPayload } from "@/host/http/control/types/AuthControl.js";
+import type {
+  AuthSetUserRolePayload,
+  AuthWriteConfigPayload,
+  ChatAuthorizationConfig,
+  ChatAuthorizationSnapshot,
+} from "@/plugin/builtins/auth/types/AuthPlugin.js";
+import {
+  AUTH_ACTIONS,
+  AUTH_PLUGIN_NAME,
+  CHAT_AUTHORIZATION_CATALOG,
+} from "@/plugin/builtins/auth/types/AuthPlugin.js";
+
+function toRecord(value: unknown): Record<string, unknown> {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return {};
+  return value as Record<string, unknown>;
+}
+
+function readSnapshot(value: unknown): ChatAuthorizationSnapshot {
+  const record = toRecord(value);
+  return {
+    config: toRecord(record.config) as unknown as ChatAuthorizationConfig,
+    users: (Array.isArray(record.users) ? record.users : []) as ChatAuthorizationSnapshot["users"],
+    chats: (Array.isArray(record.chats) ? record.chats : []) as ChatAuthorizationSnapshot["chats"],
+  };
+}
+
+/**
+ * 读取 auth plugin 快照。
+ */
+async function readAuthorizationSnapshotViaPlugin(
+  context: AgentContext,
+): Promise<ChatAuthorizationSnapshot> {
+  const result = await context.plugins.runAction({
+    plugin: AUTH_PLUGIN_NAME,
+    action: AUTH_ACTIONS.snapshot,
+  });
+  if (!result.success) {
+    throw new Error(result.error || result.message || "auth snapshot failed");
+  }
+  return readSnapshot(result.data);
+}
+
+/**
+ * 读取 auth plugin 配置。
+ */
+async function readAuthorizationConfigViaPlugin(
+  context: AgentContext,
+): Promise<ChatAuthorizationConfig> {
+  const result = await context.plugins.runAction({
+    plugin: AUTH_PLUGIN_NAME,
+    action: AUTH_ACTIONS.readConfig,
+  });
+  if (!result.success) {
+    throw new Error(result.error || result.message || "auth read-config failed");
+  }
+  return toRecord(result.data) as unknown as ChatAuthorizationConfig;
+}
+
+/**
+ * 通过 auth plugin 覆盖写入授权配置。
+ */
+async function writeAuthorizationConfigViaPlugin(params: {
+  context: AgentContext;
+  config: ChatAuthorizationConfig;
+}): Promise<ChatAuthorizationConfig> {
+  const result = await params.context.plugins.runAction({
+    plugin: AUTH_PLUGIN_NAME,
+    action: AUTH_ACTIONS.writeConfig,
+    payload: {
+      config: params.config,
+    } as AuthWriteConfigPayload as unknown as JsonObject,
+  });
+  if (!result.success) {
+    throw new Error(result.error || result.message || "auth write-config failed");
+  }
+  return toRecord(result.data) as unknown as ChatAuthorizationConfig;
+}
+
+/**
+ * 通过 auth plugin 设置用户角色。
+ */
+async function setAuthorizationUserRoleViaPlugin(params: {
+  context: AgentContext;
+  channel: string;
+  userId: string;
+  roleId: string;
+}): Promise<ChatAuthorizationConfig> {
+  const result = await params.context.plugins.runAction({
+    plugin: AUTH_PLUGIN_NAME,
+    action: AUTH_ACTIONS.setUserRole,
+    payload: {
+      channel: params.channel,
+      userId: params.userId,
+      roleId: params.roleId,
+    } as AuthSetUserRolePayload as unknown as JsonObject,
+  });
+  if (!result.success) {
+    throw new Error(result.error || result.message || "auth set-user-role failed");
+  }
+  return toRecord(result.data) as unknown as ChatAuthorizationConfig;
+}
+
+/**
+ * 读取 authorization 页面所需的完整数据。
+ */
+export async function readAuthControlPayload(
+  context: AgentContext,
+): Promise<AuthControlPayload> {
+  const [config, snapshot] = await Promise.all([
+    readAuthorizationConfigViaPlugin(context),
+    readAuthorizationSnapshotViaPlugin(context),
+  ]);
+  return {
+    catalog: CHAT_AUTHORIZATION_CATALOG,
+    config,
+    users: snapshot.users,
+    chats: snapshot.chats,
+  };
+}
+
+/**
+ * 覆盖写入授权配置，并返回最新 control payload。
+ */
+export async function writeAuthControlConfig(params: {
+  context: AgentContext;
+  config: ChatAuthorizationConfig;
+}): Promise<AuthControlPayload> {
+  await writeAuthorizationConfigViaPlugin({
+    context: params.context,
+    config: params.config,
+  });
+  return readAuthControlPayload(params.context);
+}
+
+/**
+ * 设置用户角色，并返回最新 control payload。
+ */
+export async function setAuthControlUserRole(params: {
+  context: AgentContext;
+  input: AuthSetUserRolePayload;
+}): Promise<AuthControlPayload> {
+  await setAuthorizationUserRoleViaPlugin({
+    context: params.context,
+    channel: params.input.channel,
+    userId: params.input.userId,
+    roleId: params.input.roleId,
+  });
+  return readAuthControlPayload(params.context);
+}

package/src/host/http/control/ControlApiRoutes.ts

@@ -0,0 +1,31 @@
+/**
+ * Agent Control API 路由聚合入口。
+ *
+ * 关键点（中文）
+ * - 本文件只做模块装配，不再承载具体业务逻辑。
+ * - 单 agent control API 子路由按 overview/session/model/task/auth 五类拆分，便于继续维护。
+ * - 单 agent control API 统一暴露在 `/api/control/*` 下。
+ */
+
+import type { ControlRouteRegistrationParams } from "@/host/http/control/types/ControlRoutes.js";
+import { registerControlAuthorizationRoutes } from "@/host/http/control/ControlAuthorizationRoutes.js";
+import { registerControlSessionRoutes } from "@/host/http/control/SessionRoutes.js";
+import { registerControlModelRoutes } from "@/host/http/control/ModelRoutes.js";
+import { registerControlOverviewRoutes } from "@/host/http/control/OverviewRoutes.js";
+import { registerControlTaskRoutes } from "@/host/http/control/TaskRoutes.js";
+
+/**
+ * 注册单 agent control API 路由。
+ */
+export function registerControlApiRoutes(
+  params: ControlRouteRegistrationParams,
+): void {
+  registerControlAuthorizationRoutes({
+    app: params.app,
+    getAgentContext: params.getAgentContext,
+  });
+  registerControlOverviewRoutes(params);
+  registerControlSessionRoutes(params);
+  registerControlModelRoutes(params);
+  registerControlTaskRoutes(params);
+}

package/src/host/http/control/ControlAuthorizationRoutes.ts

@@ -0,0 +1,108 @@
+/**
+ * Agent Control Authorization 路由。
+ *
+ * 关键点（中文）
+ * - 单独承接 `/api/control/authorization*`。
+ * - 授权页面的数据统一通过 auth plugin API 读取与写入。
+ */
+
+import type { Hono } from "hono";
+import type { AgentContext } from "@/agent/AgentContextTypes.js";
+import {
+  readAuthControlPayload,
+  setAuthControlUserRole,
+  writeAuthControlConfig,
+} from "@/host/http/control/AuthControlService.js";
+import {
+  isChatAuthorizationChannel,
+  type AuthSetUserRolePayload,
+  type ChatAuthorizationConfig,
+} from "@/plugin/builtins/auth/types/AuthPlugin.js";
+import type { ChatAuthorizationChannel } from "@/plugin/builtins/auth/types/AuthPlugin.js";
+import { buildControlRouteAliases } from "@/host/http/control/CommonHelpers.js";
+
+function normalizeChatChannel(value: unknown): ChatAuthorizationChannel | null {
+  const text = String(value || "").trim().toLowerCase();
+  if (isChatAuthorizationChannel(text)) return text;
+  return null;
+}
+
+/**
+ * 注册 authorization 相关路由。
+ */
+export function registerControlAuthorizationRoutes(params: {
+  app: Hono;
+  getAgentContext: () => AgentContext;
+}): void {
+  const { app, getAgentContext } = params;
+
+  for (const routePath of buildControlRouteAliases("/authorization")) {
+    app.get(routePath, async (c) => {
+      try {
+        const payload = await readAuthControlPayload(getAgentContext());
+        return c.json({
+          success: true,
+          ...payload,
+        });
+      } catch (error) {
+        return c.json({ success: false, error: String(error) }, 500);
+      }
+    });
+  }
+
+  for (const routePath of buildControlRouteAliases("/authorization/config")) {
+    app.post(routePath, async (c) => {
+      try {
+        const body = (await c.req.json().catch(() => ({}))) as {
+          config?: ChatAuthorizationConfig;
+        };
+        const payload = await writeAuthControlConfig({
+          context: getAgentContext(),
+          config: body.config && typeof body.config === "object" ? body.config : {},
+        });
+        return c.json({
+          success: true,
+          ...payload,
+        });
+      } catch (error) {
+        return c.json({ success: false, error: String(error) }, 500);
+      }
+    });
+  }
+
+  for (const routePath of buildControlRouteAliases("/authorization/action")) {
+    app.post(routePath, async (c) => {
+      try {
+        const body = (await c.req.json().catch(() => ({}))) as {
+          action?: string;
+          channel?: string;
+          userId?: string;
+          roleId?: string;
+        };
+        const action = String(body.action || "").trim();
+        const channel = normalizeChatChannel(body.channel);
+        if (!action || !channel) {
+          return c.json({ success: false, error: "Missing action/channel" }, 400);
+        }
+        if (action !== "setUserRole") {
+          return c.json({ success: false, error: `Unsupported action: ${action}` }, 400);
+        }
+
+        const payload = await setAuthControlUserRole({
+          context: getAgentContext(),
+          input: {
+            channel,
+            userId: String(body.userId || "").trim(),
+            roleId: String(body.roleId || "").trim(),
+          } as AuthSetUserRolePayload,
+        });
+        return c.json({
+          success: true,
+          ...payload,
+        });
+      } catch (error) {
+        return c.json({ success: false, error: String(error) }, 500);
+      }
+    });
+  }
+}

package/src/host/http/control/ControlRouter.ts

@@ -0,0 +1,31 @@
+/**
+ * Agent Control API 路由入口模块。
+ *
+ * 职责说明：
+ * 1. 为单 agent control API 暴露独立 router。
+ * 2. 将控制域的 API 装配收敛在 `host/http/control/` 下。
+ * 3. server 只负责挂载该 router，不再持有控制面细节。
+ *
+ * 命名说明（中文）
+ * - 这里的 control 指“单 agent 控制域”。
+ * - 它不是 city 的 gateway / control plane。
+ * - 当前公开路径统一使用 `/api/control/*`。
+ */
+
+import { Hono } from "hono";
+import {
+  getAgentRuntime,
+  getAgentContext,
+} from "@/agent/AgentRuntime.js";
+import { registerControlApiRoutes } from "@/host/http/control/ControlApiRoutes.js";
+
+/**
+ * 单 agent control API 专用路由。
+ */
+export const controlRouter = new Hono();
+
+registerControlApiRoutes({
+  app: controlRouter,
+  getAgentRuntime: getAgentRuntime,
+  getAgentContext: getAgentContext,
+});