@downcity/agent 1.1.74 → 1.1.81

package/src/runtime/auth/AuthEnv.ts

@@ -1,62 +0,0 @@
-/**
- * AuthEnv：统一认证环境变量与 token 解析辅助模块。
- *
- * 关键点（中文）
- * - 收敛 `DC_AUTH_TOKEN` 的变量名与 Bearer 归一化逻辑。
- * - 通用子进程默认不继承任何 Bearer Token，避免隐式走本地 HTTP。
- */
-
-/**
- * 用户显式覆盖 Bearer Token 的环境变量名。
- */
-export const CLI_AUTH_TOKEN_ENV_KEY = "DC_AUTH_TOKEN";
-
-/**
- * 归一化 Bearer Token。
- *
- * 关键点（中文）
- * - 允许传入纯 token 或 `Bearer xxx`。
- * - 空字符串与无效值统一归一化为 `null`。
- */
-export function normalizeBearerToken(value: unknown): string | null {
-  const raw = String(value || "").trim();
-  if (!raw) return null;
-  const bearerMatch = /^Bearer\s+(.+)$/i.exec(raw);
-  const token = bearerMatch?.[1]?.trim() || raw;
-  return token || null;
-}
-
-/**
- * 解析本次调用应使用的 token。
- */
-export function resolveInvocationToken(params: {
-  explicitToken?: string;
-  env?: NodeJS.ProcessEnv;
-  storedToken?: string;
-} = {}): string | undefined {
-  const explicitToken = normalizeBearerToken(params.explicitToken);
-  if (explicitToken) return explicitToken;
-
-  const env = params.env || process.env;
-
-  const envAuthToken = normalizeBearerToken(env[CLI_AUTH_TOKEN_ENV_KEY]);
-  if (envAuthToken) return envAuthToken;
-
-  return normalizeBearerToken(params.storedToken) || undefined;
-}
-
-/**
- * 从通用子进程环境中剥离 Bearer Token。
- */
-export function stripInvocationAuthEnv(targetEnv: NodeJS.ProcessEnv): void {
-  delete targetEnv[CLI_AUTH_TOKEN_ENV_KEY];
-  delete targetEnv.DC_AGENT_TOKEN;
-}
-
-/**
- * 生成标准 Authorization 头值。
- */
-export function formatBearerHeaderValue(tokenInput: string | undefined): string | undefined {
-  const token = normalizeBearerToken(tokenInput);
-  return token ? `Bearer ${token}` : undefined;
-}

package/src/runtime/auth/CliAuthStateStore.ts

@@ -1,46 +0,0 @@
-/**
- * CLI Bearer Token 解析模块。
- *
- * 关键点（中文）
- * - 只解析显式 token 与环境变量 token，不再读取任何本机持久化默认值。
- * - 这样远程 HTTP 鉴权始终是显式行为，不会出现本地“兜底复用”。
- */
-
-import {
-  CLI_AUTH_TOKEN_ENV_KEY,
-  formatBearerHeaderValue,
-  resolveInvocationToken,
-} from "./AuthEnv.js";
-
-/**
- * Bearer Token 解析参数。
- */
-export interface CliAuthStateStoreOptions {
-  /**
-   * 保留参数形状，当前不再使用本地存储。
-   */
-  dbPath?: string;
-}
-
-/**
- * 解析当前 CLI 应使用的 Bearer Token。
- */
-export function resolveCliAuthToken(params: {
-  explicitToken?: string;
-  env?: NodeJS.ProcessEnv;
-  dbPath?: string;
-} = {}): string | undefined {
-  return resolveInvocationToken({
-    explicitToken: params.explicitToken,
-    env: {
-      [CLI_AUTH_TOKEN_ENV_KEY]: params.env?.[CLI_AUTH_TOKEN_ENV_KEY],
-    },
-  });
-}
-
-/**
- * 生成标准 Authorization 头值。
- */
-export function formatCliBearerHeaderValue(tokenInput: string | undefined): string | undefined {
-  return formatBearerHeaderValue(tokenInput);
-}

package/src/runtime/control/AuthControlService.ts

@@ -1,169 +0,0 @@
-/**
- * Control Authorization Service。
- *
- * 关键点（中文）
- * - 这是 control 侧的 auth 管理面 facade。
- * - 它通过 auth plugin action 读取与写入授权数据，但自身不属于 plugin 内核。
- * - 这样调用方不需要知道 plugin action 名称，也不需要依赖具体 auth plugin 源码目录。
- */
-
-import type { AgentContext } from "@/types/runtime/agent/AgentContext.js";
-import type { JsonObject } from "@/types/common/Json.js";
-import type { AuthControlPayload } from "@/runtime/control/types/AuthControl.js";
-
-const AUTH_PLUGIN_NAME = "auth";
-const AUTH_ACTIONS = {
-  snapshot: "snapshot",
-  readConfig: "read-config",
-  writeConfig: "write-config",
-  setUserRole: "set-user-role",
-} as const;
-const CHAT_AUTHORIZATION_CATALOG: JsonObject = {
-  channels: ["telegram", "feishu", "qq"],
-};
-
-function toRecord(value: unknown): Record<string, unknown> {
-  if (!value || typeof value !== "object" || Array.isArray(value)) return {};
-  return value as Record<string, unknown>;
-}
-
-function readSnapshot(value: unknown): {
-  config: JsonObject;
-  users: JsonObject[];
-  chats: JsonObject[];
-} {
-  const record = toRecord(value);
-  return {
-    config: toRecord(record.config) as JsonObject,
-    users: (Array.isArray(record.users) ? record.users : []) as JsonObject[],
-    chats: (Array.isArray(record.chats) ? record.chats : []) as JsonObject[],
-  };
-}
-
-/**
- * 读取 auth plugin 快照。
- */
-async function readAuthorizationSnapshotViaPlugin(
-  context: AgentContext,
-): Promise<ReturnType<typeof readSnapshot>> {
-  const result = await context.plugins.runAction({
-    plugin: AUTH_PLUGIN_NAME,
-    action: AUTH_ACTIONS.snapshot,
-  });
-  if (!result.success) {
-    throw new Error(result.error || result.message || "auth snapshot failed");
-  }
-  return readSnapshot(result.data);
-}
-
-/**
- * 读取 auth plugin 配置。
- */
-async function readAuthorizationConfigViaPlugin(
-  context: AgentContext,
-): Promise<JsonObject> {
-  const result = await context.plugins.runAction({
-    plugin: AUTH_PLUGIN_NAME,
-    action: AUTH_ACTIONS.readConfig,
-  });
-  if (!result.success) {
-    throw new Error(result.error || result.message || "auth read-config failed");
-  }
-  return toRecord(result.data) as JsonObject;
-}
-
-/**
- * 通过 auth plugin 覆盖写入授权配置。
- */
-async function writeAuthorizationConfigViaPlugin(params: {
-  context: AgentContext;
-  config: JsonObject;
-}): Promise<JsonObject> {
-  const result = await params.context.plugins.runAction({
-    plugin: AUTH_PLUGIN_NAME,
-    action: AUTH_ACTIONS.writeConfig,
-    payload: {
-      config: params.config,
-    },
-  });
-  if (!result.success) {
-    throw new Error(result.error || result.message || "auth write-config failed");
-  }
-  return toRecord(result.data) as JsonObject;
-}
-
-/**
- * 通过 auth plugin 设置用户角色。
- */
-async function setAuthorizationUserRoleViaPlugin(params: {
-  context: AgentContext;
-  channel: string;
-  userId: string;
-  roleId: string;
-}): Promise<JsonObject> {
-  const result = await params.context.plugins.runAction({
-    plugin: AUTH_PLUGIN_NAME,
-    action: AUTH_ACTIONS.setUserRole,
-    payload: {
-      channel: params.channel,
-      userId: params.userId,
-      roleId: params.roleId,
-    },
-  });
-  if (!result.success) {
-    throw new Error(result.error || result.message || "auth set-user-role failed");
-  }
-  return toRecord(result.data) as JsonObject;
-}
-
-/**
- * 读取 authorization 页面所需的完整数据。
- */
-export async function readAuthControlPayload(
-  context: AgentContext,
-): Promise<AuthControlPayload> {
-  const [config, snapshot] = await Promise.all([
-    readAuthorizationConfigViaPlugin(context),
-    readAuthorizationSnapshotViaPlugin(context),
-  ]);
-  return {
-    catalog: CHAT_AUTHORIZATION_CATALOG,
-    config,
-    users: snapshot.users,
-    chats: snapshot.chats,
-  };
-}
-
-/**
- * 覆盖写入授权配置，并返回最新 control payload。
- */
-export async function writeAuthControlConfig(params: {
-  context: AgentContext;
-  config: JsonObject;
-}): Promise<AuthControlPayload> {
-  await writeAuthorizationConfigViaPlugin({
-    context: params.context,
-    config: params.config,
-  });
-  return readAuthControlPayload(params.context);
-}
-
-/**
- * 设置用户角色，并返回最新 control payload。
- */
-export async function setAuthControlUserRole(params: {
-  context: AgentContext;
-  input: {
-    channel: string;
-    userId: string;
-    roleId: string;
-  };
-}): Promise<AuthControlPayload> {
-  await setAuthorizationUserRoleViaPlugin({
-    context: params.context,
-    channel: params.input.channel,
-    userId: params.input.userId,
-    roleId: params.input.roleId,
-  });
-  return readAuthControlPayload(params.context);
-}

package/src/runtime/control/CommonHelpers.ts

@@ -1,69 +0,0 @@
-/**
- * 单 agent control API 通用 helper。
- *
- * 关键点（中文）
- * - 聚合 control 路由、query/path/文本裁剪等基础工具。
- * - 单 agent 控制面统一收敛到 `/api/control/*`。
- * - 不依赖任何业务状态。
- */
-
-const DEFAULT_LIMIT = 50;
-const MAX_LIMIT = 500;
-
-/**
- * 单 agent control API 的公开路由前缀。
- *
- * 说明（中文）
- * - 单 agent 控制面只暴露 `/api/control/*`。
- */
-export const CONTROL_API_ROUTE_PREFIXES = ["/api/control"] as const;
-
-/**
- * 为同一个 control 端点生成公开路径别名。
- */
-export function buildControlRouteAliases(suffix: string): string[] {
-  const normalizedSuffix = String(suffix || "").startsWith("/")
-    ? String(suffix || "")
-    : `/${String(suffix || "")}`;
-  return CONTROL_API_ROUTE_PREFIXES.map((prefix) => `${prefix}${normalizedSuffix}`);
-}
-
-/**
- * 解析 limit 参数并做边界裁剪。
- */
-export function toLimit(
-  raw: string | undefined,
-  fallback = DEFAULT_LIMIT,
-): number {
-  const n = Number.parseInt(String(raw || "").trim(), 10);
-  if (!Number.isFinite(n) || Number.isNaN(n)) return fallback;
-  return Math.max(1, Math.min(MAX_LIMIT, n));
-}
-
-/**
- * 转成可选字符串。
- */
-export function toOptionalString(input: unknown): string | undefined {
-  const value = typeof input === "string" ? input.trim() : "";
-  return value ? value : undefined;
-}
-
-/**
- * 安全 decodeURIComponent。
- */
-export function decodeMaybe(value: string): string {
-  try {
-    return decodeURIComponent(String(value || ""));
-  } catch {
-    return String(value || "");
-  }
-}
-
-/**
- * 文本截断。
- */
-export function truncateText(text: string, maxChars: number): string {
-  const normalized = String(text || "");
-  if (normalized.length <= maxChars) return normalized;
-  return normalized.slice(0, Math.max(0, maxChars - 3)) + "...";
-}

package/src/runtime/control/ExecuteBySession.ts

@@ -1,52 +0,0 @@
-/**
- * Control execute by session helper。
- *
- * 关键点（中文）
- * - control 层只负责把请求转成 session prompt。
- * - chat / queue 等渠道语义由宿主显式注入的 plugin 自行实现。
- */
-
-import type { AgentRuntime } from "@/types/runtime/agent/AgentRuntime.js";
-import type { AgentContext } from "@/types/runtime/agent/AgentContext.js";
-import type { ControlSessionExecuteAttachmentInput } from "@/runtime/control/types/ControlSessionExecute.js";
-import { buildExecuteInputText } from "./Helpers.js";
-
-/**
- * 在指定 session 中执行一轮请求。
- *
- * 说明（中文）
- * - 按普通 session 同步执行。
- */
-export async function executeBySessionId(params: {
-  agentState: AgentRuntime;
-  executionContext: AgentContext;
-  sessionId: string;
-  instructions: string;
-  attachments?: ControlSessionExecuteAttachmentInput[];
-}) {
-  const sessionId = String(params.sessionId || "").trim();
-  const instructions = String(params.instructions || "").trim();
-  if (!sessionId) throw new Error("Missing sessionId");
-  if (!instructions) throw new Error("Missing instructions");
-
-  const executeInput = await buildExecuteInputText({
-    projectRoot: params.agentState.rootPath,
-    sessionId,
-    instructions,
-    attachments: params.attachments,
-  });
-
-  const session = params.agentState.getSession(sessionId);
-  const turn = await session.prompt({
-    query: executeInput,
-  });
-  const result = await turn.finished;
-
-  return {
-    success: result.success,
-    ...(result.error ? { error: result.error } : {}),
-    assistantMessage: result.assistantMessage,
-    userVisible: result.text.trim(),
-    queued: false,
-  };
-}

package/src/runtime/control/ExecuteInput.ts

@@ -1,236 +0,0 @@
-/**
- * Control execute 输入拼装 helper。
- *
- * 关键点（中文）
- * - 负责把 API 传入的附件规范化并落盘。
- * - 最终统一转成 `<file>` 标签注入到 user message。
- */
-
-import fs from "fs-extra";
-import path from "node:path";
-import { getCacheDirPath } from "@/config/Paths.js";
-import { renderChatMessageFileTag } from "@/executor/messages/ChatMessageMarkup.js";
-import type {
-  ControlSessionExecuteAttachmentInput,
-  ControlSessionExecuteAttachmentType,
-} from "@/runtime/control/types/ControlSessionExecute.js";
-
-const EXECUTE_ATTACHMENT_MAX_COUNT = 8;
-const EXECUTE_ATTACHMENT_MAX_BYTES = 2 * 1024 * 1024;
-const EXECUTE_ATTACHMENT_CONTENT_MAX_CHARS = 1_500_000;
-const EXECUTE_ATTACHMENT_FALLBACK_TEXT = "请查看以上附件并按用户要求处理。";
-
-function normalizeExecuteAttachmentType(
-  value: unknown,
-): ControlSessionExecuteAttachmentType {
-  const raw = String(value || "")
-    .trim()
-    .toLowerCase();
-  if (
-    raw === "photo" ||
-    raw === "voice" ||
-    raw === "audio" ||
-    raw === "video"
-  ) {
-    return raw;
-  }
-  return "document";
-}
-
-function normalizeAttachmentCaption(value: unknown): string | undefined {
-  const text = String(value || "")
-    .replace(/\r?\n+/g, " ")
-    .replace(/\s+/g, " ")
-    .replace(/\|/g, "/")
-    .trim();
-  if (!text) return undefined;
-  return text.slice(0, 180);
-}
-
-function toProjectRelativePath(projectRoot: string, absPath: string): string | null {
-  const relative = path.relative(projectRoot, absPath);
-  if (!relative) return null;
-  if (relative.startsWith("..")) return null;
-  if (path.isAbsolute(relative)) return null;
-  return relative.split(path.sep).join("/");
-}
-
-function normalizeAttachmentFileName(params: {
-  fileName?: string;
-  fallbackExt: string;
-}): string {
-  const raw = String(params.fileName || "").trim();
-  const base = (raw || "attachment")
-    .replace(/[\\/:*?"<>|]/g, "-")
-    .replace(/\s+/g, "-")
-    .replace(/-+/g, "-")
-    .replace(/^\.+/, "")
-    .replace(/^-+|-+$/g, "")
-    .slice(0, 72);
-  const safeBase = base || "attachment";
-  const fallbackExt = params.fallbackExt.startsWith(".")
-    ? params.fallbackExt
-    : `.${params.fallbackExt}`;
-  const hasExt = /\.[A-Za-z0-9]+$/.test(safeBase);
-  return hasExt ? safeBase : `${safeBase}${fallbackExt}`;
-}
-
-function inferAttachmentExt(params: {
-  type: ControlSessionExecuteAttachmentType;
-  fileName?: string;
-  contentType?: string;
-}): string {
-  const fromFileName = path.extname(String(params.fileName || "").trim())
-    .toLowerCase()
-    .trim();
-  if (fromFileName) return fromFileName;
-  const contentType = String(params.contentType || "").toLowerCase();
-  if (contentType.includes("markdown")) return ".md";
-  if (contentType.includes("json")) return ".json";
-  if (contentType.includes("html")) return ".html";
-  if (contentType.includes("plain")) return ".txt";
-  if (params.type === "photo") return ".jpg";
-  if (params.type === "voice" || params.type === "audio") return ".mp3";
-  if (params.type === "video") return ".mp4";
-  return ".md";
-}
-
-async function resolveAttachmentPathFromInput(params: {
-  projectRoot: string;
-  attachment: ControlSessionExecuteAttachmentInput;
-}): Promise<string | null> {
-  const rawPath = String(params.attachment.path || "").trim();
-  if (!rawPath) return null;
-  const abs = path.isAbsolute(rawPath)
-    ? path.normalize(rawPath)
-    : path.resolve(params.projectRoot, rawPath);
-  const relative = toProjectRelativePath(params.projectRoot, abs);
-  if (!relative) return null;
-  const stat = await fs
-    .stat(abs)
-    .then((value) => value)
-    .catch(() => null);
-  if (!stat?.isFile()) return null;
-  return relative;
-}
-
-function resolveAttachmentBytes(
-  attachment: ControlSessionExecuteAttachmentInput,
-): Buffer | null {
-  const textContent =
-    typeof attachment.content === "string" ? attachment.content : "";
-  if (textContent) {
-    const clipped = textContent.slice(0, EXECUTE_ATTACHMENT_CONTENT_MAX_CHARS);
-    return Buffer.from(clipped, "utf8");
-  }
-
-  const base64 = String(attachment.contentBase64 || "").trim();
-  if (!base64) return null;
-  try {
-    return Buffer.from(base64, "base64");
-  } catch {
-    return null;
-  }
-}
-
-async function materializeAttachmentContent(params: {
-  projectRoot: string;
-  sessionId: string;
-  attachment: ControlSessionExecuteAttachmentInput;
-  index: number;
-}): Promise<string | null> {
-  const bytes = resolveAttachmentBytes(params.attachment);
-  if (!bytes || bytes.length <= 0) return null;
-  if (bytes.length > EXECUTE_ATTACHMENT_MAX_BYTES) {
-    throw new Error(
-      `Attachment too large (>${EXECUTE_ATTACHMENT_MAX_BYTES} bytes)`,
-    );
-  }
-
-  const type = normalizeExecuteAttachmentType(params.attachment.type);
-  const ext = inferAttachmentExt({
-    type,
-    fileName: params.attachment.fileName,
-    contentType: params.attachment.contentType,
-  });
-  const safeName = normalizeAttachmentFileName({
-    fileName: params.attachment.fileName,
-    fallbackExt: ext,
-  });
-  const safeContext = String(params.sessionId || "session")
-    .replace(/[^A-Za-z0-9_-]+/g, "-")
-    .replace(/-+/g, "-")
-    .replace(/^-+|-+$/g, "")
-    .slice(0, 32);
-  const prefix = safeContext || "context";
-  const fileName = `${Date.now()}-${prefix}-${String(params.index + 1).padStart(2, "0")}-${safeName}`;
-  const cacheDir = path.join(getCacheDirPath(params.projectRoot), "chrome-extension");
-  await fs.ensureDir(cacheDir);
-  const absPath = path.join(cacheDir, fileName);
-  await fs.writeFile(absPath, bytes);
-  return toProjectRelativePath(params.projectRoot, absPath);
-}
-
-function toAttachmentLine(params: {
-  type: ControlSessionExecuteAttachmentType;
-  relativePath: string;
-  caption?: string;
-}): string {
-  return renderChatMessageFileTag({
-    type: params.type,
-    path: params.relativePath,
-    ...(params.caption ? { caption: params.caption } : {}),
-  });
-}
-
-/**
- * 构造 execute 入站文本。
- */
-export async function buildExecuteInputText(params: {
-  projectRoot: string;
-  sessionId: string;
-  instructions: string;
-  attachments?: ControlSessionExecuteAttachmentInput[];
-}): Promise<string> {
-  const instructions = String(params.instructions || "").trim();
-  const inputAttachments = Array.isArray(params.attachments)
-    ? params.attachments.slice(0, EXECUTE_ATTACHMENT_MAX_COUNT)
-    : [];
-  if (inputAttachments.length === 0) return instructions;
-
-  const lines: string[] = [];
-  for (let index = 0; index < inputAttachments.length; index += 1) {
-    const attachment = inputAttachments[index];
-    if (!attachment || typeof attachment !== "object") continue;
-    const type = normalizeExecuteAttachmentType(attachment.type);
-    const caption = normalizeAttachmentCaption(attachment.caption);
-
-    const reusePath = await resolveAttachmentPathFromInput({
-      projectRoot: params.projectRoot,
-      attachment,
-    });
-    const relativePath =
-      reusePath ||
-      (await materializeAttachmentContent({
-        projectRoot: params.projectRoot,
-        sessionId: params.sessionId,
-        attachment,
-        index,
-      }));
-    if (!relativePath) continue;
-
-    lines.push(
-      toAttachmentLine({
-        type,
-        relativePath,
-        ...(caption ? { caption } : {}),
-      }),
-    );
-  }
-
-  if (lines.length === 0) return instructions;
-  return [lines.join("\n"), instructions || EXECUTE_ATTACHMENT_FALLBACK_TEXT]
-    .filter(Boolean)
-    .join("\n\n")
-    .trim();
-}

package/src/runtime/control/Helpers.ts

@@ -1,22 +0,0 @@
-/**
- * Control helper 聚合出口。
- *
- * 关键点（中文）
- * - 兼容控制面路由层的统一 import 路径。
- * - 具体实现已拆分到独立子模块，避免单文件继续膨胀。
- */
-
-export { toLimit, toOptionalString, decodeMaybe } from "./CommonHelpers.js";
-export { buildExecuteInputText } from "./ExecuteInput.js";
-export {
-  loadSessionMessagesFromFile,
-  resolveUiMessagePreview,
-  toUiMessageTimeline,
-} from "./MessageTimeline.js";
-export { listControlSessionSummaries } from "./SessionSummaryStore.js";
-export {
-  TASK_RUN_DIR_REGEX,
-  listTaskRuns,
-  readRecentLogs,
-  readTaskRunDetail,
-} from "./TaskStore.js";