@downcity/plugins 1.0.30 → 1.0.35

package/src/chat/runtime/PluginPoints.ts

@@ -56,7 +56,7 @@ export const CHAT_PLUGIN_POINTS = {
    *
    * 说明（中文）
    * - 仅做副作用记录，不返回值。
-   * - 典型实现方是 auth plugin。
+   * - 典型实现方是 chat-authorization plugin。
    */
   observePrincipal: "chat.observePrincipal",
   /**
@@ -64,7 +64,7 @@ export const CHAT_PLUGIN_POINTS = {
    *
    * 说明（中文）
    * - 由 chat plugin runtime 在 ingress 阶段显式调用。
-   * - 典型实现方是 auth plugin。
+   * - 典型实现方是 chat-authorization plugin。
    */
   authorizeIncoming: "chat.authorizeIncoming",
   /**
@@ -72,7 +72,7 @@ export const CHAT_PLUGIN_POINTS = {
    *
    * 说明（中文）
    * - 主要用于在 history / queue metadata 中补齐授权上下文。
-   * - 典型实现方是 auth plugin。
+   * - 典型实现方是 chat-authorization plugin。
    */
   resolveUserRole: "chat.resolveUserRole",
 } as const;

package/src/chat/runtime/SystemPrompt.ts

@@ -7,7 +7,7 @@
  * - 统一从 request context + ChatMetaStore 读取当前 chat 元信息。
  */
 
-import { getSessionRunScope } from "@downcity/agent/internal/executor/SessionRunScope.js";
+import { getSessionRunContext } from "@downcity/agent/internal/executor/SessionRunScope.js";
 import type { AgentContext } from "@downcity/agent/internal/types/runtime/agent/AgentContext.js";
 import type { ChatEnvironmentPromptInput } from "@/chat/types/ChatPromptContext.js";
 import { readChatMetaBySessionId } from "@/chat/runtime/ChatMetaStore.js";
@@ -26,7 +26,7 @@ function normalizePromptValue(value: unknown, fallback: string): string {
 export async function resolveCurrentChatEnvironmentPromptInput(
   context: AgentContext,
 ): Promise<ChatEnvironmentPromptInput | null> {
-  const sessionId = String(getSessionRunScope()?.sessionId || "").trim();
+  const sessionId = String(getSessionRunContext()?.sessionId || "").trim();
   if (!sessionId) return null;
 
   const meta = await readChatMetaBySessionId({

package/src/chat/types/ChannelAccount.ts

@@ -6,7 +6,7 @@
  * - 凭据明文只允许出现在写入输入中，读取结果必须是脱敏后的安全视图。
  */
 
-import type { StoredChannelAccountChannel } from "@downcity/agent/internal/types/runtime/host/Store.js";
+import type { StoredChannelAccountChannel } from "@downcity/agent/internal/types/platform/Store.js";
 
 /**
  * 支持的 chat channel account 类型。

package/src/index.ts

@@ -14,7 +14,7 @@ export {
 export type { BuiltinPluginClass } from "./BuiltinPlugins.js";
 export { ChatPlugin } from "./chat/ChatPlugin.js";
 export { ChatChannelAccountManager } from "./chat/accounts/ChannelAccountManager.js";
-export { AuthPlugin } from "./auth/Plugin.js";
+export { ChatAuthorizationPlugin } from "./auth/Plugin.js";
 export { SkillPlugin } from "./skill/Plugin.js";
 export { WebPlugin } from "./web/Plugin.js";
 export { AsrPlugin } from "./asr/Plugin.js";
@@ -28,6 +28,7 @@ export {
 export { resolveAuthorizedUserRole } from "./auth/runtime/AuthorizationPolicy.js";
 export {
   CHAT_AUTHORIZATION_CHANNELS,
+  CHAT_AUTHORIZATION_PLUGIN_NAME,
   createDefaultChatAuthorizationRoles,
   isChatAuthorizationChannel,
 } from "./auth/types/AuthPlugin.js";
@@ -42,23 +43,22 @@ export type {
   ChatPluginTelegramOptions,
 } from "./chat/ChatPluginTypes.js";
 export type {
-  AuthObservePrincipalPayload,
-  AuthObservePrincipalResult,
-  AuthResolveUserRolePayload,
-  AuthSetUserRolePayload,
-  AuthWriteConfigPayload,
   ChatAuthorizationCatalog,
   ChatAuthorizationChannel,
   ChatAuthorizationConfig,
   ChatAuthorizationDecision,
   ChatAuthorizationEvaluateInput,
   ChatAuthorizationEvaluateResult,
+  ChatAuthorizationObservePrincipalPayload,
   ChatAuthorizationObservedChat,
   ChatAuthorizationObservedUser,
   ChatAuthorizationPermission,
   ChatAuthorizationPermissionMeta,
+  ChatAuthorizationResolveUserRolePayload,
   ChatAuthorizationRole,
+  ChatAuthorizationSetUserRolePayload,
   ChatAuthorizationSnapshot,
   ChatAuthorizationStateFile,
+  ChatAuthorizationWriteConfigPayload,
   ChatChannelAuthorizationConfig,
 } from "./auth/types/AuthPlugin.js";

package/src/shell/runtime/ShellActionRuntime.ts

@@ -9,7 +9,7 @@
 
 import fs from "fs-extra";
 import type { AgentContext } from "@downcity/agent/internal/types/runtime/agent/AgentContext.js";
-import { spawnShellProcess } from "@downcity/agent/internal/runtime/sandbox/SandboxRunner.js";
+import { spawnShellProcess } from "@downcity/agent/internal/sandbox/SandboxRunner.js";
 import type {
   ShellPluginState,
   ShellSessionRuntimeState,

package/src/shell/runtime/ShellRuntimeEnvironment.ts

@@ -8,8 +8,12 @@
 
 import path from "node:path";
 import type { AgentContext } from "@downcity/agent/internal/types/runtime/agent/AgentContext.js";
-import { stripInvocationAuthEnv } from "@downcity/agent/internal/runtime/auth/AuthEnv.js";
-import { getSessionRunScope } from "@downcity/agent/internal/executor/SessionRunScope.js";
+import { getSessionRunContext } from "@downcity/agent/internal/executor/SessionRunScope.js";
+
+function stripShellSecretEnv(env: NodeJS.ProcessEnv): void {
+  delete env.DC_AUTH_TOKEN;
+  delete env.DC_AGENT_TOKEN;
+}
 
 /**
  * 构造 shell 子进程环境变量。
@@ -27,8 +31,8 @@ export function buildShellEnv(context: AgentContext): NodeJS.ProcessEnv {
     env[normalizedKey] = normalizedValue;
   }
 
-  const request = getSessionRunScope();
-  const sessionId = String(request?.sessionId || "").trim();
+  const run_context = getSessionRunContext();
+  const sessionId = String(run_context?.sessionId || "").trim();
   const agentPath = String(context.rootPath || "").trim();
   const configuredAgentId = String(context.config?.id || "").trim();
   const agentId = configuredAgentId || (agentPath ? path.basename(agentPath) : "");
@@ -42,7 +46,7 @@ export function buildShellEnv(context: AgentContext): NodeJS.ProcessEnv {
   if (sessionId) env.DC_SESSION_ID = sessionId;
   if (process.env.DC_CITY_HOST) env.DC_CITY_HOST = process.env.DC_CITY_HOST;
   if (process.env.DC_CITY_PORT) env.DC_CITY_PORT = process.env.DC_CITY_PORT;
-  stripInvocationAuthEnv(env);
+  stripShellSecretEnv(env);
 
   return env;
 }
@@ -62,6 +66,6 @@ export function resolveShellCwd(context: AgentContext, cwd?: string): string {
 export function resolveOwnerContextId(explicit?: string): string | undefined {
   const fromInput = String(explicit || "").trim();
   if (fromInput) return fromInput;
-  const fromRequest = String(getSessionRunScope()?.sessionId || "").trim();
+  const fromRequest = String(getSessionRunContext()?.sessionId || "").trim();
   return fromRequest || undefined;
 }

package/src/skill/runtime/SystemProvider.ts

@@ -7,7 +7,7 @@
  * - `lookup` 行为为无状态：由 action 读取 SKILL.md 后通过协议注入 user message
  */
 
-import { getSessionRunScope } from "@downcity/agent/internal/executor/SessionRunScope.js";
+import { getSessionRunContext } from "@downcity/agent/internal/executor/SessionRunScope.js";
 import type { DowncityConfig } from "@downcity/agent/internal/types/config/DowncityConfig.js";
 import { discoverClaudeSkillsSync } from "./Discovery.js";
 import { renderClaudeSkillsPromptSection } from "./Prompt.js";
@@ -19,8 +19,8 @@ type SkillSystemRuntime = {
 };
 
 function getCurrentSessionId(): string {
-  const request = getSessionRunScope();
-  return String(request?.sessionId || "").trim();
+  const run_context = getSessionRunContext();
+  return String(run_context?.sessionId || "").trim();
 }
 
 /**

package/src/task/runtime/TaskRunnerRound.ts

@@ -8,10 +8,10 @@
 
 import path from "node:path";
 import fs from "fs-extra";
-import { stripInvocationAuthEnv } from "@downcity/agent/internal/runtime/auth/AuthEnv.js";
 import type { AgentContext } from "@downcity/agent/internal/types/runtime/agent/AgentContext.js";
-import { runSandboxCommand } from "@downcity/agent/internal/runtime/sandbox/SandboxRunner.js";
+import { runSandboxCommand } from "@downcity/agent/internal/sandbox/SandboxRunner.js";
 import type { SessionRunResult } from "@downcity/agent/internal/executor/types/SessionRun.js";
+import type { SessionRunContext } from "@downcity/agent/internal/types/executor/SessionRunContext.js";
 import type { JsonObject } from "@downcity/agent/internal/types/common/Json.js";
 import type {
   ChatSendOutputPick,
@@ -23,6 +23,11 @@ import type {
 import { withSessionRunScope } from "@downcity/agent/internal/executor/SessionRunScope.js";
 import { appendTaskRoundUserMessage } from "./TaskRunnerSession.js";
 
+function stripTaskSecretEnv(env: NodeJS.ProcessEnv): void {
+  delete env.DC_AUTH_TOKEN;
+  delete env.DC_AGENT_TOKEN;
+}
+
 /**
  * 从文本中提取 JSON 对象（支持 ```json 代码块）。
  */
@@ -241,7 +246,7 @@ export async function runAgentRound(params: {
 
   const result = await withSessionRunScope(
     {
-      sessionId: params.sessionId,
+      runContext: create_task_run_context(params.sessionId),
     },
     () =>
       params.taskSessionRuntime.getExecutor(params.sessionId).run({
@@ -282,13 +287,13 @@ export async function runScriptTask(params: {
   await fs.writeFile(scriptAbs, body.endsWith("\n") ? body : `${body}\n`, "utf-8");
 
   const execResult = await withSessionRunScope(
-    { sessionId: params.sessionId },
+    { runContext: create_task_run_context(params.sessionId) },
     () => {
       const childEnv: NodeJS.ProcessEnv = {
         ...process.env,
         DC_SESSION_ID: params.sessionId,
       };
-      stripInvocationAuthEnv(childEnv);
+      stripTaskSecretEnv(childEnv);
       return runSandboxCommand({
         context: params.context,
         shellId: `task-script:${params.sessionId}`,
@@ -310,6 +315,18 @@ export async function runScriptTask(params: {
   };
 }
 
+/**
+ * 创建 task runner 的显式 session run context。
+ */
+function create_task_run_context(session_id: string): SessionRunContext {
+  return {
+    sessionId: session_id,
+    injectedUserMessages: [],
+    deferredPersistedUserMessages: [],
+    pendingAssistantFileParts: [],
+  };
+}
+
 /**
  * 校验任务结果是否满足“必须有结果”的规则。
  */

package/src/voice/Config.ts

@@ -7,7 +7,7 @@
  */
 
 import type { VoicePluginConfig } from "@/voice/types/VoicePlugin.js";
-import type { AgentPluginConfigRuntime } from "@downcity/agent/internal/types/runtime/host/AgentHost.js";
+import type { AgentPluginConfigRuntime } from "@downcity/agent/internal/types/agent/AgentRuntimeAssembly.js";
 import type { JsonObject, JsonValue } from "@downcity/agent/internal/types/common/Json.js";
 
 /**

package/src/workboard/runtime/Collector.ts

@@ -8,9 +8,9 @@
 
 import { listTaskDefinitions } from "@/task/Action.js";
 import { listPluginStates } from "@downcity/agent/internal/plugin/core/Manager.js";
-import { listControlSessionSummaries } from "@downcity/agent/internal/runtime/control/SessionSummaryStore.js";
 import type { AgentContext } from "@downcity/agent/internal/types/runtime/agent/AgentContext.js";
 import type { WorkboardSnapshot } from "@/workboard/types/Workboard.js";
+import { listWorkboardSessionSummaries } from "@/workboard/runtime/SessionSummary.js";
 import {
   buildIdleActivity,
   toRecentActivity,
@@ -30,10 +30,8 @@ export async function collectWorkboardSnapshot(
 ): Promise<WorkboardSnapshot> {
   const collectedAt = new Date().toISOString();
   const executingSessionIds = new Set(context.session.listExecutingSessionIds());
-  const sessions = await listControlSessionSummaries({
-    projectRoot: context.rootPath,
-    agentId: context.paths.agentId,
-    executionContext: context,
+  const sessions = await listWorkboardSessionSummaries({
+    context,
     limit: WORKBOARD_RECENT_LIMIT + Math.max(executingSessionIds.size, 1),
     executingSessionIds,
   });

package/src/workboard/runtime/Normalizer.ts

@@ -6,9 +6,9 @@
  * - 所有会泄漏上下文的字段都必须在这里截断或抽象。
  */
 
-import type { ControlSessionSummary } from "@downcity/agent/internal/runtime/control/types/ControlViewData.js";
 import type { PluginStateSnapshot } from "@downcity/agent/internal/plugin/types/PluginState.js";
 import type { TaskListResponse } from "@/task/types/TaskCommand.js";
+import type { WorkboardSessionSummary } from "@/workboard/runtime/SessionSummary.js";
 import type {
   WorkboardActivityItem,
   WorkboardAgentSummary,
@@ -59,7 +59,7 @@ function buildMomentum(params: { currentCount: number; recentCount: number }): s
   return "安静";
 }
 
-function buildRunningSummary(item: ControlSessionSummary): string {
+function buildRunningSummary(item: WorkboardSessionSummary): string {
   const messageCount = typeof item.messageCount === "number" ? item.messageCount : 0;
   if (messageCount >= 24) return "正在延展一段较长的工作脉络，并持续生成新的内容。";
   if (messageCount >= 8) return "正在承接连续输入，逐步形成新的阶段结果。";
@@ -67,7 +67,7 @@ function buildRunningSummary(item: ControlSessionSummary): string {
   return "当前处于活跃展开之中。";
 }
 
-function buildRecentSummary(item: ControlSessionSummary, index: number): string {
+function buildRecentSummary(item: WorkboardSessionSummary, index: number): string {
   const messageCount = typeof item.messageCount === "number" ? item.messageCount : 0;
   if (index === 0 && messageCount > 0) return "刚刚完成一段新的展开，正在短暂停留。";
   if (messageCount >= 12) return "近期完成了一次较长的内容延展。";
@@ -103,7 +103,7 @@ export function toWorkboardAgentSummary(params: {
  * 将运行中的 session 映射为对外安全活动项。
  */
 export function toRunningActivity(params: {
-  item: ControlSessionSummary;
+  item: WorkboardSessionSummary;
   index: number;
 }): WorkboardActivityItem {
   const title = params.index === 0 ? "当前主线" : `当前并行线 ${params.index + 1}`;
@@ -123,7 +123,7 @@ export function toRunningActivity(params: {
  * 将近期 session 映射为对外安全活动项。
  */
 export function toRecentActivity(params: {
-  item: ControlSessionSummary;
+  item: WorkboardSessionSummary;
   index: number;
 }): WorkboardActivityItem {
   const title = params.index === 0 ? "最近一次更新" : `近期片段 ${params.index + 1}`;

package/src/workboard/runtime/SessionSummary.ts

@@ -0,0 +1,92 @@
+/**
+ * Workboard session 摘要采集。
+ *
+ * 关键点（中文）
+ * - workboard 只需要模糊运行态，不复用 Town control 视图模型。
+ * - 这里只读取消息数量、更新时间与执行中状态，不暴露消息内容。
+ */
+
+import fs from "fs-extra";
+import path from "node:path";
+import type { AgentContext } from "@downcity/agent/internal/types/runtime/agent/AgentContext.js";
+
+/**
+ * Workboard 内部 session 摘要。
+ */
+export interface WorkboardSessionSummary {
+  /**
+   * session 稳定标识，仅供内部排序和执行态匹配使用，不会进入公开输出。
+   */
+  sessionId: string;
+  /**
+   * 当前 session 消息数量。
+   */
+  messageCount: number;
+  /**
+   * 最近更新时间戳。
+   */
+  updatedAt?: number;
+  /**
+   * 当前 session 是否仍在执行。
+   */
+  executing?: boolean;
+}
+
+/**
+ * 采集 workboard 需要的 session 摘要。
+ */
+export async function listWorkboardSessionSummaries(params: {
+  /**
+   * Agent runtime context。
+   */
+  context: AgentContext;
+  /**
+   * 返回上限。
+   */
+  limit: number;
+  /**
+   * 正在执行的 session id 集合。
+   */
+  executingSessionIds?: Set<string>;
+}): Promise<WorkboardSessionSummary[]> {
+  const root_dir = params.context.paths.getDowncitySessionRootDirPath();
+  if (!(await fs.pathExists(root_dir))) return [];
+
+  const entries = await fs.readdir(root_dir, { withFileTypes: true });
+  const items: WorkboardSessionSummary[] = [];
+
+  for (const entry of entries) {
+    if (!entry.isDirectory()) continue;
+    const session_id = decodeMaybe(entry.name);
+    if (!session_id) continue;
+    const messages_path = path.join(
+      params.context.paths.getDowncitySessionDirPath(session_id),
+      "messages",
+      "messages.jsonl",
+    );
+    const stat = await fs.stat(messages_path).catch(() => null);
+    items.push({
+      sessionId: session_id,
+      messageCount: await countJsonlLines(messages_path),
+      ...(stat ? { updatedAt: stat.mtimeMs } : {}),
+      ...(params.executingSessionIds?.has(session_id) ? { executing: true } : {}),
+    });
+  }
+
+  items.sort((a, b) => (b.updatedAt || 0) - (a.updatedAt || 0));
+  return items.slice(0, Math.max(1, params.limit));
+}
+
+async function countJsonlLines(file_path: string): Promise<number> {
+  const raw = await fs.readFile(file_path, "utf-8").catch(() => "");
+  if (!raw) return 0;
+  return raw.split("\n").filter((line) => line.trim()).length;
+}
+
+function decodeMaybe(value: string): string {
+  try {
+    return decodeURIComponent(String(value || "")).trim();
+  } catch {
+    return String(value || "").trim();
+  }
+}