@downcity/plugins 1.0.29 → 1.0.34

package/src/chat/accounts/ChannelAccountManager.ts

@@ -8,7 +8,7 @@
  */
 
 import crypto from "node:crypto";
-import type { StoredChannelAccountChannel } from "@downcity/agent/internal/types/runtime/host/Store.js";
+import type { StoredChannelAccountChannel } from "@downcity/agent/internal/types/platform/Store.js";
 import { resolveChatChannelBotInfo } from "@/chat/channels/BotInfoProvider.js";
 import {
   getStoredChannelAccountSync,
@@ -24,7 +24,7 @@ import type {
   ChatChannelAccountProbeResult,
   ChatChannelAccountUpsertInput,
 } from "@/chat/types/ChannelAccount.js";
-import type { StoredChannelAccount } from "@downcity/agent/internal/types/runtime/host/Store.js";
+import type { StoredChannelAccount } from "@downcity/agent/internal/types/platform/Store.js";
 
 const SUPPORTED_CHANNELS: readonly StoredChannelAccountChannel[] = [
   "telegram",

package/src/chat/accounts/Store.ts

@@ -20,7 +20,7 @@ import type {
   StoredChannelAccount,
   StoredChannelAccountChannel,
   UpsertChannelAccountInput,
-} from "@downcity/agent/internal/types/runtime/host/Store.js";
+} from "@downcity/agent/internal/types/platform/Store.js";
 
 function nowIso(): string {
   return new Date().toISOString();

package/src/chat/runtime/ChatChannelConfig.ts

@@ -11,7 +11,7 @@ import fs from "node:fs/promises";
 import path from "node:path";
 import type { JsonObject, JsonValue } from "@downcity/agent/internal/types/common/Json.js";
 import type { AgentContext } from "@downcity/agent/internal/types/runtime/agent/AgentContext.js";
-import type { StoredChannelAccount } from "@downcity/agent/internal/types/runtime/host/Store.js";
+import type { StoredChannelAccount } from "@downcity/agent/internal/types/platform/Store.js";
 import type {
   ChatChannelName,
   ChatChannelStateSnapshot,

package/src/chat/runtime/ChatChannelCore.ts

@@ -8,7 +8,7 @@
  */
 
 import type { AgentContext } from "@downcity/agent/internal/types/runtime/agent/AgentContext.js";
-import type { StoredChannelAccount } from "@downcity/agent/internal/types/runtime/host/Store.js";
+import type { StoredChannelAccount } from "@downcity/agent/internal/types/platform/Store.js";
 import type { ChatChannelName } from "@/chat/types/ChannelStatus.js";
 import type { ChatChannelState } from "@/chat/types/ChatRuntime.js";
 import { getStoredChannelAccountSync } from "@/chat/accounts/Store.js";

package/src/chat/runtime/ChatQueueWorker.ts

@@ -18,7 +18,6 @@ import {
 } from "./ChatQueue.js";
 import { getChatSender } from "./ChatSendRegistry.js";
 import {
-  hasPersistedAssistantSteps,
   pickLastSuccessfulChatSendText,
 } from "@downcity/agent/internal/executor/messages/UserVisibleText.js";
 import {
@@ -439,10 +438,7 @@ export class ChatQueueWorker {
       return;
     }
 
-    if (
-      observation.assistantStepDispatched ||
-      hasPersistedAssistantSteps(result.assistantMessage)
-    ) {
+    if (observation.assistantStepDispatched) {
       return;
     }
 

package/src/chat/runtime/PluginDispatch.ts

@@ -9,7 +9,7 @@
 import type { AgentContext } from "@downcity/agent/internal/types/runtime/agent/AgentContext.js";
 import type { JsonObject } from "@downcity/agent/internal/types/common/Json.js";
 import type {
-  AuthObservePrincipalPayload,
+  ChatAuthorizationObservePrincipalPayload,
   ChatAuthorizationEvaluateInput,
   ChatAuthorizationRole,
 } from "@/auth/types/AuthPlugin.js";
@@ -40,7 +40,7 @@ export async function observeIncomingChatPrincipal(params: {
     ...(params.chatTitle ? { chatTitle: params.chatTitle } : {}),
     ...(params.userId ? { userId: params.userId } : {}),
     ...(params.username ? { username: params.username } : {}),
-  } as AuthObservePrincipalPayload as unknown as JsonObject);
+  } as ChatAuthorizationObservePrincipalPayload as unknown as JsonObject);
 }
 
 /**

package/src/chat/runtime/PluginPoints.ts

@@ -56,7 +56,7 @@ export const CHAT_PLUGIN_POINTS = {
    *
    * 说明（中文）
    * - 仅做副作用记录，不返回值。
-   * - 典型实现方是 auth plugin。
+   * - 典型实现方是 chat-authorization plugin。
    */
   observePrincipal: "chat.observePrincipal",
   /**
@@ -64,7 +64,7 @@ export const CHAT_PLUGIN_POINTS = {
    *
    * 说明（中文）
    * - 由 chat plugin runtime 在 ingress 阶段显式调用。
-   * - 典型实现方是 auth plugin。
+   * - 典型实现方是 chat-authorization plugin。
    */
   authorizeIncoming: "chat.authorizeIncoming",
   /**
@@ -72,7 +72,7 @@ export const CHAT_PLUGIN_POINTS = {
    *
    * 说明（中文）
    * - 主要用于在 history / queue metadata 中补齐授权上下文。
-   * - 典型实现方是 auth plugin。
+   * - 典型实现方是 chat-authorization plugin。
    */
   resolveUserRole: "chat.resolveUserRole",
 } as const;

package/src/chat/types/ChannelAccount.ts

@@ -6,7 +6,7 @@
  * - 凭据明文只允许出现在写入输入中，读取结果必须是脱敏后的安全视图。
  */
 
-import type { StoredChannelAccountChannel } from "@downcity/agent/internal/types/runtime/host/Store.js";
+import type { StoredChannelAccountChannel } from "@downcity/agent/internal/types/platform/Store.js";
 
 /**
  * 支持的 chat channel account 类型。

package/src/index.ts

@@ -14,7 +14,7 @@ export {
 export type { BuiltinPluginClass } from "./BuiltinPlugins.js";
 export { ChatPlugin } from "./chat/ChatPlugin.js";
 export { ChatChannelAccountManager } from "./chat/accounts/ChannelAccountManager.js";
-export { AuthPlugin } from "./auth/Plugin.js";
+export { ChatAuthorizationPlugin } from "./auth/Plugin.js";
 export { SkillPlugin } from "./skill/Plugin.js";
 export { WebPlugin } from "./web/Plugin.js";
 export { AsrPlugin } from "./asr/Plugin.js";
@@ -28,6 +28,7 @@ export {
 export { resolveAuthorizedUserRole } from "./auth/runtime/AuthorizationPolicy.js";
 export {
   CHAT_AUTHORIZATION_CHANNELS,
+  CHAT_AUTHORIZATION_PLUGIN_NAME,
   createDefaultChatAuthorizationRoles,
   isChatAuthorizationChannel,
 } from "./auth/types/AuthPlugin.js";
@@ -42,23 +43,22 @@ export type {
   ChatPluginTelegramOptions,
 } from "./chat/ChatPluginTypes.js";
 export type {
-  AuthObservePrincipalPayload,
-  AuthObservePrincipalResult,
-  AuthResolveUserRolePayload,
-  AuthSetUserRolePayload,
-  AuthWriteConfigPayload,
   ChatAuthorizationCatalog,
   ChatAuthorizationChannel,
   ChatAuthorizationConfig,
   ChatAuthorizationDecision,
   ChatAuthorizationEvaluateInput,
   ChatAuthorizationEvaluateResult,
+  ChatAuthorizationObservePrincipalPayload,
   ChatAuthorizationObservedChat,
   ChatAuthorizationObservedUser,
   ChatAuthorizationPermission,
   ChatAuthorizationPermissionMeta,
+  ChatAuthorizationResolveUserRolePayload,
   ChatAuthorizationRole,
+  ChatAuthorizationSetUserRolePayload,
   ChatAuthorizationSnapshot,
   ChatAuthorizationStateFile,
+  ChatAuthorizationWriteConfigPayload,
   ChatChannelAuthorizationConfig,
 } from "./auth/types/AuthPlugin.js";

package/src/shell/runtime/ShellActionRuntime.ts

@@ -9,7 +9,7 @@
 
 import fs from "fs-extra";
 import type { AgentContext } from "@downcity/agent/internal/types/runtime/agent/AgentContext.js";
-import { spawnShellProcess } from "@downcity/agent/internal/runtime/sandbox/SandboxRunner.js";
+import { spawnShellProcess } from "@downcity/agent/internal/sandbox/SandboxRunner.js";
 import type {
   ShellPluginState,
   ShellSessionRuntimeState,

package/src/shell/runtime/ShellRuntimeEnvironment.ts

@@ -8,9 +8,13 @@
 
 import path from "node:path";
 import type { AgentContext } from "@downcity/agent/internal/types/runtime/agent/AgentContext.js";
-import { stripInvocationAuthEnv } from "@downcity/agent/internal/runtime/auth/AuthEnv.js";
 import { getSessionRunScope } from "@downcity/agent/internal/executor/SessionRunScope.js";
 
+function stripShellSecretEnv(env: NodeJS.ProcessEnv): void {
+  delete env.DC_AUTH_TOKEN;
+  delete env.DC_AGENT_TOKEN;
+}
+
 /**
  * 构造 shell 子进程环境变量。
  */
@@ -36,13 +40,13 @@ export function buildShellEnv(context: AgentContext): NodeJS.ProcessEnv {
   // 关键点（中文）
   // - agent 自己在 shell 里执行 `town <service> ...` 时，也需要显式知道“当前 agent 是谁”。
   // - 否则 service CLI 会退回到当前终端 cwd / registry 猜测，在多 agent 或外部工作目录下
-  //   很容易把请求发到错误项目，最终误报 “Agent server 没启动”。
+  //   很容易把请求发到错误项目，最终误报 “Agent runtime 没启动”。
   if (agentPath) env.DC_AGENT_PATH = agentPath;
   if (agentId) env.DC_AGENT_ID = agentId;
   if (sessionId) env.DC_SESSION_ID = sessionId;
   if (process.env.DC_CITY_HOST) env.DC_CITY_HOST = process.env.DC_CITY_HOST;
   if (process.env.DC_CITY_PORT) env.DC_CITY_PORT = process.env.DC_CITY_PORT;
-  stripInvocationAuthEnv(env);
+  stripShellSecretEnv(env);
 
   return env;
 }

package/src/task/runtime/TaskRunnerRound.ts

@@ -8,9 +8,8 @@
 
 import path from "node:path";
 import fs from "fs-extra";
-import { stripInvocationAuthEnv } from "@downcity/agent/internal/runtime/auth/AuthEnv.js";
 import type { AgentContext } from "@downcity/agent/internal/types/runtime/agent/AgentContext.js";
-import { runSandboxCommand } from "@downcity/agent/internal/runtime/sandbox/SandboxRunner.js";
+import { runSandboxCommand } from "@downcity/agent/internal/sandbox/SandboxRunner.js";
 import type { SessionRunResult } from "@downcity/agent/internal/executor/types/SessionRun.js";
 import type { JsonObject } from "@downcity/agent/internal/types/common/Json.js";
 import type {
@@ -23,6 +22,11 @@ import type {
 import { withSessionRunScope } from "@downcity/agent/internal/executor/SessionRunScope.js";
 import { appendTaskRoundUserMessage } from "./TaskRunnerSession.js";
 
+function stripTaskSecretEnv(env: NodeJS.ProcessEnv): void {
+  delete env.DC_AUTH_TOKEN;
+  delete env.DC_AGENT_TOKEN;
+}
+
 /**
  * 从文本中提取 JSON 对象（支持 ```json 代码块）。
  */
@@ -288,7 +292,7 @@ export async function runScriptTask(params: {
         ...process.env,
         DC_SESSION_ID: params.sessionId,
       };
-      stripInvocationAuthEnv(childEnv);
+      stripTaskSecretEnv(childEnv);
       return runSandboxCommand({
         context: params.context,
         shellId: `task-script:${params.sessionId}`,

package/src/voice/Config.ts

@@ -7,7 +7,7 @@
  */
 
 import type { VoicePluginConfig } from "@/voice/types/VoicePlugin.js";
-import type { AgentPluginConfigRuntime } from "@downcity/agent/internal/types/runtime/host/AgentHost.js";
+import type { AgentPluginConfigRuntime } from "@downcity/agent/internal/types/agent/AgentRuntimeAssembly.js";
 import type { JsonObject, JsonValue } from "@downcity/agent/internal/types/common/Json.js";
 
 /**

package/src/workboard/Plugin.ts

@@ -3,7 +3,7 @@
  *
  * 关键点（中文）
  * - workboard 是一个 runtime 观测面板插件，负责提供结构化工作快照。
- * - 当前同时通过 plugin action 与 HTTP 注入提供快照，供 Town/RPC 与旧 HTTP 宿主复用。
+ * - 当前同时通过 plugin action 与 HTTP 注入提供快照，供 Town RPC 与 Town HTTP gateway 复用。
  */
 
 import type { AgentRuntime } from "@downcity/agent/internal/types/runtime/agent/AgentRuntime.js";

package/src/workboard/runtime/Collector.ts

@@ -8,9 +8,9 @@
 
 import { listTaskDefinitions } from "@/task/Action.js";
 import { listPluginStates } from "@downcity/agent/internal/plugin/core/Manager.js";
-import { listControlSessionSummaries } from "@downcity/agent/internal/runtime/control/SessionSummaryStore.js";
 import type { AgentContext } from "@downcity/agent/internal/types/runtime/agent/AgentContext.js";
 import type { WorkboardSnapshot } from "@/workboard/types/Workboard.js";
+import { listWorkboardSessionSummaries } from "@/workboard/runtime/SessionSummary.js";
 import {
   buildIdleActivity,
   toRecentActivity,
@@ -30,10 +30,8 @@ export async function collectWorkboardSnapshot(
 ): Promise<WorkboardSnapshot> {
   const collectedAt = new Date().toISOString();
   const executingSessionIds = new Set(context.session.listExecutingSessionIds());
-  const sessions = await listControlSessionSummaries({
-    projectRoot: context.rootPath,
-    agentId: context.paths.agentId,
-    executionContext: context,
+  const sessions = await listWorkboardSessionSummaries({
+    context,
     limit: WORKBOARD_RECENT_LIMIT + Math.max(executingSessionIds.size, 1),
     executingSessionIds,
   });

package/src/workboard/runtime/Normalizer.ts

@@ -6,9 +6,9 @@
  * - 所有会泄漏上下文的字段都必须在这里截断或抽象。
  */
 
-import type { ControlSessionSummary } from "@downcity/agent/internal/runtime/control/types/ControlViewData.js";
 import type { PluginStateSnapshot } from "@downcity/agent/internal/plugin/types/PluginState.js";
 import type { TaskListResponse } from "@/task/types/TaskCommand.js";
+import type { WorkboardSessionSummary } from "@/workboard/runtime/SessionSummary.js";
 import type {
   WorkboardActivityItem,
   WorkboardAgentSummary,
@@ -59,7 +59,7 @@ function buildMomentum(params: { currentCount: number; recentCount: number }): s
   return "安静";
 }
 
-function buildRunningSummary(item: ControlSessionSummary): string {
+function buildRunningSummary(item: WorkboardSessionSummary): string {
   const messageCount = typeof item.messageCount === "number" ? item.messageCount : 0;
   if (messageCount >= 24) return "正在延展一段较长的工作脉络，并持续生成新的内容。";
   if (messageCount >= 8) return "正在承接连续输入，逐步形成新的阶段结果。";
@@ -67,7 +67,7 @@ function buildRunningSummary(item: ControlSessionSummary): string {
   return "当前处于活跃展开之中。";
 }
 
-function buildRecentSummary(item: ControlSessionSummary, index: number): string {
+function buildRecentSummary(item: WorkboardSessionSummary, index: number): string {
   const messageCount = typeof item.messageCount === "number" ? item.messageCount : 0;
   if (index === 0 && messageCount > 0) return "刚刚完成一段新的展开，正在短暂停留。";
   if (messageCount >= 12) return "近期完成了一次较长的内容延展。";
@@ -103,7 +103,7 @@ export function toWorkboardAgentSummary(params: {
  * 将运行中的 session 映射为对外安全活动项。
  */
 export function toRunningActivity(params: {
-  item: ControlSessionSummary;
+  item: WorkboardSessionSummary;
   index: number;
 }): WorkboardActivityItem {
   const title = params.index === 0 ? "当前主线" : `当前并行线 ${params.index + 1}`;
@@ -123,7 +123,7 @@ export function toRunningActivity(params: {
  * 将近期 session 映射为对外安全活动项。
  */
 export function toRecentActivity(params: {
-  item: ControlSessionSummary;
+  item: WorkboardSessionSummary;
   index: number;
 }): WorkboardActivityItem {
   const title = params.index === 0 ? "最近一次更新" : `近期片段 ${params.index + 1}`;

package/src/workboard/runtime/SessionSummary.ts

@@ -0,0 +1,92 @@
+/**
+ * Workboard session 摘要采集。
+ *
+ * 关键点（中文）
+ * - workboard 只需要模糊运行态，不复用 Town control 视图模型。
+ * - 这里只读取消息数量、更新时间与执行中状态，不暴露消息内容。
+ */
+
+import fs from "fs-extra";
+import path from "node:path";
+import type { AgentContext } from "@downcity/agent/internal/types/runtime/agent/AgentContext.js";
+
+/**
+ * Workboard 内部 session 摘要。
+ */
+export interface WorkboardSessionSummary {
+  /**
+   * session 稳定标识，仅供内部排序和执行态匹配使用，不会进入公开输出。
+   */
+  sessionId: string;
+  /**
+   * 当前 session 消息数量。
+   */
+  messageCount: number;
+  /**
+   * 最近更新时间戳。
+   */
+  updatedAt?: number;
+  /**
+   * 当前 session 是否仍在执行。
+   */
+  executing?: boolean;
+}
+
+/**
+ * 采集 workboard 需要的 session 摘要。
+ */
+export async function listWorkboardSessionSummaries(params: {
+  /**
+   * Agent runtime context。
+   */
+  context: AgentContext;
+  /**
+   * 返回上限。
+   */
+  limit: number;
+  /**
+   * 正在执行的 session id 集合。
+   */
+  executingSessionIds?: Set<string>;
+}): Promise<WorkboardSessionSummary[]> {
+  const root_dir = params.context.paths.getDowncitySessionRootDirPath();
+  if (!(await fs.pathExists(root_dir))) return [];
+
+  const entries = await fs.readdir(root_dir, { withFileTypes: true });
+  const items: WorkboardSessionSummary[] = [];
+
+  for (const entry of entries) {
+    if (!entry.isDirectory()) continue;
+    const session_id = decodeMaybe(entry.name);
+    if (!session_id) continue;
+    const messages_path = path.join(
+      params.context.paths.getDowncitySessionDirPath(session_id),
+      "messages",
+      "messages.jsonl",
+    );
+    const stat = await fs.stat(messages_path).catch(() => null);
+    items.push({
+      sessionId: session_id,
+      messageCount: await countJsonlLines(messages_path),
+      ...(stat ? { updatedAt: stat.mtimeMs } : {}),
+      ...(params.executingSessionIds?.has(session_id) ? { executing: true } : {}),
+    });
+  }
+
+  items.sort((a, b) => (b.updatedAt || 0) - (a.updatedAt || 0));
+  return items.slice(0, Math.max(1, params.limit));
+}
+
+async function countJsonlLines(file_path: string): Promise<number> {
+  const raw = await fs.readFile(file_path, "utf-8").catch(() => "");
+  if (!raw) return 0;
+  return raw.split("\n").filter((line) => line.trim()).length;
+}
+
+function decodeMaybe(value: string): string {
+  try {
+    return decodeURIComponent(String(value || "")).trim();
+  } catch {
+    return String(value || "").trim();
+  }
+}