@fa-software/semi2-dsh 0.0.18 → 0.0.19-preview.20261001161030

package/lib/api/bootstrap.js

@@ -0,0 +1,45 @@
+import { ConfigurationError } from "../hub/errors.js";
+import { array, decodeModelConfiguration } from "./http-models.js";
+import { decodeSkill } from "./http-assets.js";
+function object(value) {
+    if (typeof value !== 'object' || value === null || Array.isArray(value))
+        throw new ConfigurationError('CONFIG_REQUEST_FAILED');
+    return Object.fromEntries(Object.entries(value));
+}
+function text(value) {
+    if (typeof value !== 'string')
+        throw new ConfigurationError('CONFIG_REQUEST_FAILED');
+    return value;
+}
+function nullableText(value) {
+    return value === null ? null : text(value);
+}
+/** 失败块不得伪装成空配置；缺块或未知状态说明协议不完整。 */
+export function decodeBlock(value, decode) {
+    const block = object(value);
+    if (block.status === 'error') {
+        if (typeof block.code !== 'string' || !/^[A-Z][A-Z0-9_]{0,99}$/.test(block.code))
+            throw new ConfigurationError('CONFIG_REQUEST_FAILED');
+        return { status: 'error', code: block.code };
+    }
+    if (block.status !== 'ok' || !Object.hasOwn(block, 'data'))
+        throw new ConfigurationError('CONFIG_REQUEST_FAILED');
+    return { status: 'ok', data: decode(block.data) };
+}
+export function decodeBootstrap(value) {
+    const root = object(value);
+    const viewer = object(root.viewer);
+    const id = text(viewer.id);
+    if (!id)
+        throw new ConfigurationError('CONFIG_REQUEST_FAILED');
+    return {
+        viewer: { id, username: text(viewer.username), displayName: text(viewer.displayName) },
+        models: decodeBlock(root.models, decodeModelConfiguration),
+        skills: decodeBlock(root.skills, data => array(data, decodeSkill)),
+        selfPortrait: decodeBlock(root.selfPortrait, text),
+        redmine: decodeBlock(root.redmine, data => {
+            const fact = object(data);
+            return { baseUrl: nullableText(fact.baseUrl), apiKey: nullableText(fact.apiKey) };
+        }),
+    };
+}

package/lib/api/generated/http.js

@@ -0,0 +1 @@
+export {};

package/lib/api/http-assets.js

@@ -0,0 +1,89 @@
+import { ConfigurationError } from "../hub/errors.js";
+import { array, boolean, integer, nullableString, reasoning, record, string } from "./http-models.js";
+export function decodeFile(value) {
+    const file = record(value);
+    return {
+        path: string(file.path),
+        sizeBytes: integer(file.sizeBytes),
+        mimeType: string(file.mimeType),
+        isExecutable: boolean(file.isExecutable),
+    };
+}
+export function decodeFileContent(value) {
+    const file = record(value);
+    const encoding = file.encoding === 'UTF8' || file.encoding === 'utf-8'
+        ? 'UTF8'
+        : file.encoding === 'BASE64' || file.encoding === 'base64'
+            ? 'BASE64'
+            : null;
+    if (encoding === null)
+        throw new ConfigurationError('CONFIG_REQUEST_FAILED');
+    return { ...decodeFile(file), content: string(file.content), encoding };
+}
+export function decodeSkill(value) {
+    const skill = record(value), invocation = record(skill.invocation);
+    return {
+        id: string(skill.id),
+        projectId: nullableString(skill.projectId),
+        name: string(skill.name),
+        description: string(skill.description),
+        whenToUse: nullableString(skill.whenToUse),
+        invocation: { modelInvocable: boolean(invocation.modelInvocable), userInvocable: boolean(invocation.userInvocable) },
+        metadata: skill.metadata === null ? null : record(skill.metadata),
+        content: string(skill.content),
+        version: integer(skill.version),
+        files: array(skill.files, decodeFile),
+        fileCount: integer(skill.fileCount),
+        filesBytes: integer(skill.filesBytes),
+    };
+}
+export function decodeProject(value) {
+    const project = record(value);
+    return {
+        id: string(project.id),
+        slug: string(project.slug),
+        name: string(project.name),
+        enabled: boolean(project.enabled),
+        planModelId: nullableString(project.planModelId),
+        executeModelId: nullableString(project.executeModelId),
+        planReasoningLevel: reasoning(project.planReasoningLevel),
+        executeReasoningLevel: reasoning(project.executeReasoningLevel),
+    };
+}
+export function decodeProfile(value) {
+    const profile = record(value);
+    const project = profile.redmine === null ? null : record(profile.redmine);
+    return {
+        projectName: string(profile.projectName),
+        projectSlug: string(profile.projectSlug),
+        redmineProjectId: profile.redmineProjectId === null ? null : integer(profile.redmineProjectId),
+        redmine: project === null
+            ? null
+            : {
+                id: integer(project.id),
+                identifier: string(project.identifier),
+                name: string(project.name),
+                status: integer(project.status),
+                homepage: nullableString(project.homepage),
+                description: nullableString(project.description),
+                truncated: boolean(project.truncated),
+                customFields: array(project.customFields, field => {
+                    const row = record(field);
+                    return { name: string(row.name), value: string(row.value) };
+                }),
+            },
+    };
+}
+export function decodeEvent(value) {
+    const event = record(value);
+    const outcome = event.outcome;
+    if (outcome !== 'SUCCESS' && outcome !== 'DENIED' && outcome !== 'ERROR')
+        throw new ConfigurationError('CONFIG_REQUEST_FAILED');
+    return {
+        id: string(event.id),
+        action: string(event.action),
+        outcome,
+        code: nullableString(event.code),
+        occurredAt: string(event.occurredAt),
+    };
+}

package/lib/api/http-models.js

@@ -0,0 +1,101 @@
+import { ConfigurationError } from "../hub/errors.js";
+export function record(value) {
+    if (value === null || typeof value !== 'object' || Array.isArray(value))
+        throw new ConfigurationError('CONFIG_REQUEST_FAILED');
+    return Object.fromEntries(Object.entries(value));
+}
+export function string(value) {
+    if (typeof value !== 'string')
+        throw new ConfigurationError('CONFIG_REQUEST_FAILED');
+    return value;
+}
+export function nullableString(value) {
+    return value === null ? null : string(value);
+}
+export function array(value, decode) {
+    if (!Array.isArray(value))
+        throw new ConfigurationError('CONFIG_REQUEST_FAILED');
+    return value.map((entry) => decode(entry));
+}
+export function boolean(value) {
+    if (typeof value !== 'boolean')
+        throw new ConfigurationError('CONFIG_REQUEST_FAILED');
+    return value;
+}
+export function integer(value) {
+    if (typeof value !== 'number' || !Number.isSafeInteger(value) || value < 0)
+        throw new ConfigurationError('CONFIG_REQUEST_FAILED');
+    return value;
+}
+export function protocol(value) {
+    if (value === 'DEEPSEEK' || value === 'OPENAI_CHAT' || value === 'OPENAI_RESPONSES' || value === 'ANTHROPIC')
+        return value;
+    throw new ConfigurationError('CONFIG_REQUEST_FAILED');
+}
+export function reasoning(value) {
+    if (value === null || value === undefined)
+        return null;
+    const level = string(value).toUpperCase();
+    switch (level) {
+        case 'OFF':
+        case 'MINIMAL':
+        case 'LOW':
+        case 'MEDIUM':
+        case 'HIGH':
+        case 'XHIGH':
+        case 'MAX':
+            return level;
+        default:
+            throw new ConfigurationError('CONFIG_REQUEST_FAILED');
+    }
+}
+function modality(value) {
+    const mode = string(value).toUpperCase();
+    if (mode === 'TEXT' || mode === 'IMAGE')
+        return mode;
+    throw new ConfigurationError('CONFIG_REQUEST_FAILED');
+}
+export function decodeModel(value) {
+    const model = record(value), connection = record(model.connection), metadata = record(model.metadata);
+    return {
+        id: string(model.id),
+        upstreamId: string(model.upstreamId),
+        displayName: nullableString(model.displayName),
+        defaultReasoningLevel: reasoning(model.defaultReasoningLevel),
+        connection: {
+            id: string(connection.id),
+            provider: nullableString(connection.provider),
+            protocol: protocol(connection.protocol),
+            baseUrl: string(connection.baseUrl),
+        },
+        metadata: {
+            contextWindow: metadata.contextWindow == null ? null : integer(metadata.contextWindow),
+            maxTokens: metadata.maxTokens == null ? null : integer(metadata.maxTokens),
+            input: metadata.input == null ? null : array(metadata.input, modality),
+            reasoningLevels: metadata.reasoningLevels == null
+                ? null
+                : array(metadata.reasoningLevels, entry => {
+                    const level = reasoning(entry);
+                    if (level === null)
+                        throw new ConfigurationError('CONFIG_REQUEST_FAILED');
+                    return level;
+                }),
+        },
+    };
+}
+export function decodeCredential(value) {
+    const credential = record(value);
+    return { connectionId: string(credential.connectionId), value: string(credential.value) };
+}
+export function decodeModelConfiguration(value) {
+    const config = record(value), defaults = record(config.defaults);
+    const selection = (value) => {
+        const selected = record(value);
+        return { modelId: nullableString(selected.modelId), reasoningLevel: reasoning(selected.reasoningLevel) };
+    };
+    return {
+        models: array(config.models, decodeModel),
+        credentials: array(config.credentials, decodeCredential),
+        defaults: { web: selection(defaults.web), plan: selection(defaults.plan), execute: selection(defaults.execute) },
+    };
+}

package/lib/api/http.js

@@ -0,0 +1,99 @@
+import { ConfigurationError } from "../hub/errors.js";
+const TOKEN = /^(?:cnbk_[A-Za-z0-9_-]+|[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+)$/;
+const MAX_BYTES = 2 * 1024 * 1024;
+/** 保留部署路径前缀；操作路径只能由代码提供，不能跨 origin 或向上跳转。 */
+export function runtimeEndpoint(baseUrl, path, nodeEnv) {
+    let base;
+    try {
+        base = new URL(baseUrl.trim());
+    }
+    catch {
+        throw new ConfigurationError('INVALID_CONFIG_URL');
+    }
+    const loopback = base.hostname === 'localhost' || base.hostname === '[::1]' || /^127(?:\.\d{1,3}){3}$/.test(base.hostname);
+    if (base.username ||
+        base.password ||
+        base.search ||
+        base.hash ||
+        (base.protocol !== 'https:' && !(base.protocol === 'http:' && nodeEnv !== 'production' && loopback)))
+        throw new ConfigurationError('INVALID_CONFIG_URL');
+    if (!/^[A-Za-z0-9_-]+(?:\/[A-Za-z0-9_-]+)*$/.test(path))
+        throw new ConfigurationError('INVALID_INPUT');
+    base.pathname = `${base.pathname.replace(/\/+$/, '')}/api/v1/runtime/${path}`;
+    return base;
+}
+/** 不信任远端 DTO：返回 unknown，由每个业务入口完成结构校验。 */
+export async function requestRuntime(options, path, body) {
+    const endpoint = runtimeEndpoint(options.baseUrl, path, options.nodeEnv);
+    const token = options.token.trim();
+    if (token.length > 512 || !TOKEN.test(token))
+        throw new ConfigurationError('MISSING_ACCESS_TOKEN');
+    try {
+        const response = await (options.fetchImpl ?? fetch)(endpoint, {
+            method: body === undefined ? 'GET' : 'POST',
+            headers: {
+                authorization: `Bearer ${token}`,
+                accept: 'application/json',
+                'cache-control': 'no-store',
+                ...(body === undefined ? {} : { 'content-type': 'application/json' }),
+                ...(options.creator === undefined ? {} : { 'x-semi2-cnb-creator': options.creator }),
+                ...(options.channel === undefined ? {} : { 'x-semi2-channel': options.channel }),
+            },
+            ...(body === undefined ? {} : { body: JSON.stringify(body) }),
+            redirect: 'error',
+            cache: 'no-store',
+            signal: AbortSignal.timeout(15_000),
+        });
+        if (!response.body)
+            throw new ConfigurationError('CONFIG_REQUEST_FAILED');
+        const reader = response.body.getReader();
+        const chunks = [];
+        let size = 0;
+        try {
+            for (;;) {
+                const next = await reader.read();
+                if (next.done)
+                    break;
+                const chunk = next.value;
+                if (!(chunk instanceof Uint8Array))
+                    throw new ConfigurationError('CONFIG_REQUEST_FAILED');
+                size += chunk.byteLength;
+                if (size > MAX_BYTES) {
+                    await reader.cancel();
+                    throw new ConfigurationError('CONFIG_REQUEST_FAILED');
+                }
+                chunks.push(chunk);
+            }
+        }
+        finally {
+            reader.releaseLock();
+        }
+        let data;
+        try {
+            data = JSON.parse(Buffer.concat(chunks).toString('utf8'));
+        }
+        catch {
+            if (response.status === 401)
+                return { data: null, errorCode: 'UNAUTHENTICATED' };
+            throw new ConfigurationError('CONFIG_REQUEST_FAILED');
+        }
+        if (!response.ok) {
+            const code = typeof data === 'object' &&
+                data !== null &&
+                'code' in data &&
+                typeof data.code === 'string' &&
+                /^[A-Z][A-Z0-9_]{0,99}$/.test(data.code)
+                ? data.code
+                : response.status === 401
+                    ? 'UNAUTHENTICATED'
+                    : 'CONFIG_REQUEST_FAILED';
+            return { data: null, errorCode: code };
+        }
+        return { data, errorCode: null };
+    }
+    catch (error) {
+        if (error instanceof ConfigurationError)
+            throw error;
+        throw new ConfigurationError('CONFIG_REQUEST_FAILED');
+    }
+}

package/lib/api/index.js

@@ -1,72 +1 @@
-import { consoleEndpoint, postGraphql } from "./client.js";
-import { RUNTIME_REPORT_EVENT_DOCUMENT, RUNTIME_BOOT_DOCUMENT, RUNTIME_MODEL_CREDENTIALS_DOCUMENT, RUNTIME_PROJECT_PROFILE_DOCUMENT, RUNTIME_SKILL_FILES_DOCUMENT, RUNTIME_WORKSPACE_PROJECTS_DOCUMENT, } from "./generated/documents.js";
-import { exchangeCnbToken, loginToConsole } from "./login.js";
-import { ConfigurationError } from "../hub/errors.js";
-function text(value) {
-    const trimmed = value?.trim();
-    return trimmed === undefined || trimmed === '' ? undefined : trimmed;
-}
-export function createSemi2Api(options) {
-    const request = async (operationName, document, variables = {}) => {
-        const connection = options.readConnection();
-        if (connection === null)
-            throw new ConfigurationError('MISSING_ACCESS_TOKEN');
-        // CNB 端带上环境创建者：hub 用它决定读取身份（密钥只证明来自 CNB 环境）。
-        const creator = text(options.environment.CNB_BUILD_USER_ID);
-        const outcome = await postGraphql({
-            endpoint: consoleEndpoint(connection.url, options.environment.NODE_ENV),
-            token: connection.token,
-            ...(options.fetchImpl === undefined ? {} : { fetchImpl: options.fetchImpl }),
-            ...(creator === undefined ? {} : { creator }),
-            ...(() => {
-                const channel = options.readChannel?.();
-                return channel === undefined ? {} : { channel };
-            })(),
-        }, {
-            operationName,
-            document,
-            ...(Object.keys(variables).length === 0 ? {} : { variables }),
-        });
-        return { data: outcome.data, errorCode: outcome.errorCode };
-    };
-    return {
-        boot: () => request('RuntimeBoot', RUNTIME_BOOT_DOCUMENT),
-        workspaceProjects: slugs => request('RuntimeWorkspaceProjects', RUNTIME_WORKSPACE_PROJECTS_DOCUMENT, {
-            slugs,
-        }),
-        projectProfile: projectId => request('RuntimeProjectProfile', RUNTIME_PROJECT_PROFILE_DOCUMENT, {
-            projectId,
-        }),
-        skillFiles: skillId => request('RuntimeSkillFiles', RUNTIME_SKILL_FILES_DOCUMENT, { skillId }),
-        modelCredentials: connectionIds => request('RuntimeModelCredentials', RUNTIME_MODEL_CREDENTIALS_DOCUMENT, connectionIds === undefined ? {} : { connectionIds }),
-        exchangeCnbToken: input => exchangeCnbToken(input, options.fetchImpl),
-        loginToConsole: input => loginToConsole(input, options.fetchImpl),
-        reportEvent: event => request('RuntimeReportEvent', RUNTIME_REPORT_EVENT_DOCUMENT, {
-            input: {
-                action: event.action,
-                outcome: event.outcome,
-                ...(event.code === undefined ? {} : { code: event.code }),
-                ...(event.projectSlug === undefined
-                    ? {}
-                    : { projectSlug: event.projectSlug }),
-                ...(event.targetLabel === undefined
-                    ? {}
-                    : { targetLabel: event.targetLabel }),
-                ...(event.detail === undefined ? {} : { detail: event.detail }),
-                ...(event.sessionId === undefined ? {} : { sessionId: event.sessionId }),
-                ...(event.clientId === undefined ? {} : { clientId: event.clientId }),
-                ...(event.runRef === undefined ? {} : { runRef: event.runRef }),
-                ...(event.workspacePath === undefined
-                    ? {}
-                    : { workspacePath: event.workspacePath }),
-                ...(event.workspaceSlug === undefined
-                    ? {}
-                    : { workspaceSlug: event.workspaceSlug }),
-                ...(event.modelId === undefined ? {} : { modelId: event.modelId }),
-                ...(event.reasoningLevel === undefined
-                    ? {}
-                    : { reasoningLevel: event.reasoningLevel }),
-            },
-        }),
-    };
-}
+export { createRestApi as createSemi2Api } from "./rest.js";

package/lib/api/login.js

@@ -12,17 +12,12 @@ export function consoleOrigin(value, nodeEnv) {
     catch {
         throw new ConfigurationError('INVALID_CONFIG_URL');
     }
-    const loopback = endpoint.hostname === 'localhost' ||
-        endpoint.hostname === '[::1]' ||
-        /^127(?:\.\d{1,3}){3}$/.test(endpoint.hostname);
+    const loopback = endpoint.hostname === 'localhost' || endpoint.hostname === '[::1]' || /^127(?:\.\d{1,3}){3}$/.test(endpoint.hostname);
     if (endpoint.username ||
         endpoint.password ||
         endpoint.search ||
         endpoint.hash ||
-        (endpoint.protocol !== 'https:' &&
-            !(endpoint.protocol === 'http:' &&
-                nodeEnv !== 'production' &&
-                loopback)))
+        (endpoint.protocol !== 'https:' && !(endpoint.protocol === 'http:' && nodeEnv !== 'production' && loopback)))
         throw new ConfigurationError('INVALID_CONFIG_URL');
     return endpoint.origin;
 }
@@ -64,9 +59,7 @@ export async function loginToConsole(input, fetchImpl = fetch) {
     const token = payload?.token;
     if (typeof token !== 'string' || !USER_KEY_SHAPE.test(token))
         throw new ConfigurationError('LOGIN_FAILED');
-    const userName = typeof payload?.user?.username === 'string'
-        ? payload.user.username
-        : '';
+    const userName = typeof payload?.user?.username === 'string' ? payload.user.username : '';
     return { userName, token, url: origin };
 }
 /** CNB 运行端：平台注入的短期 CNB_TOKEN 换 hub 用户密钥（服务端到服务端，无 Origin/CSRF）。 */

package/lib/api/operations.js

@@ -0,0 +1,9 @@
+/** 领域操作名与 HTTP 契约 operationId 对应；路径由实际请求适配器使用。 */
+export const RUNTIME_OPERATIONS = {
+    RuntimeBoot: { operationId: 'runtimeBootstrap', path: 'bootstrap' },
+    RuntimeWorkspaceProjects: { operationId: 'runtimeProjects', path: 'projects/query' },
+    RuntimeModelCredentials: { operationId: 'runtimeCredentials', path: 'model-credentials/query' },
+    RuntimeSkillFiles: { operationId: 'runtimeSkillFiles', path: 'skills' },
+    RuntimeProjectProfile: { operationId: 'runtimeProjectProfile', path: 'projects' },
+    RuntimeReportEvent: { operationId: 'runtimeReportEvent', path: 'events' },
+};

package/lib/api/rest.js

@@ -0,0 +1,57 @@
+import { ConfigurationError } from "../hub/errors.js";
+import { requestRuntime } from "./http.js";
+import { decodeBootstrap } from "./bootstrap.js";
+import { array, decodeCredential } from "./http-models.js";
+import { decodeEvent, decodeFileContent, decodeProfile, decodeProject } from "./http-assets.js";
+import { exchangeCnbToken, loginToConsole } from "./login.js";
+import { RUNTIME_OPERATIONS as operations } from "./operations.js";
+/** 六个业务读取入口，不把服务端资源路径泄漏进领域编排。 */
+export function createRestApi(options) {
+    async function request(path, decode, body) {
+        const connection = options.readConnection();
+        if (connection === null)
+            throw new ConfigurationError('MISSING_ACCESS_TOKEN');
+        const creator = options.environment.CNB_BUILD_USER_ID?.trim();
+        const channel = options.readChannel?.();
+        const result = await requestRuntime({
+            baseUrl: connection.url,
+            token: connection.token,
+            ...(options.environment.NODE_ENV === undefined ? {} : { nodeEnv: options.environment.NODE_ENV }),
+            ...(creator ? { creator } : {}),
+            ...(channel === undefined ? {} : { channel }),
+            ...(options.fetchImpl === undefined ? {} : { fetchImpl: options.fetchImpl }),
+        }, path, body);
+        if (result.errorCode !== null)
+            return { data: null, errorCode: result.errorCode };
+        return { data: decode(result.data), errorCode: null };
+    }
+    return {
+        boot: async () => {
+            const result = await request(operations.RuntimeBoot.path, decodeBootstrap);
+            if (result.data === null)
+                return { data: null, errorCode: result.errorCode };
+            const boot = result.data;
+            const facts = {
+                runtimeViewer: boot.viewer,
+                runtimeModels: boot.models.status === 'ok' ? boot.models.data.models : null,
+                runtimeModelCredentials: boot.models.status === 'ok' ? boot.models.data.credentials : null,
+                runtimeDefaultModelId: boot.models.status === 'ok' ? boot.models.data.defaults.web.modelId : null,
+                runtimeHeadlessModels: boot.models.status === 'ok'
+                    ? { planModelId: boot.models.data.defaults.plan.modelId, executeModelId: boot.models.data.defaults.execute.modelId }
+                    : null,
+                runtimeSkillCatalog: boot.skills.status === 'ok' ? boot.skills.data : null,
+                runtimeSelfPortrait: boot.selfPortrait.status === 'ok' ? boot.selfPortrait.data : null,
+                runtimeRedmine: boot.redmine.status === 'ok' ? boot.redmine.data : null,
+            };
+            const failure = [boot.models, boot.skills, boot.selfPortrait, boot.redmine].find(block => block.status === 'error');
+            return { data: facts, errorCode: failure?.status === 'error' ? failure.code : null };
+        },
+        workspaceProjects: slugs => request(operations.RuntimeWorkspaceProjects.path, data => ({ runtimeProjects: array(data, decodeProject) }), { slugs }),
+        modelCredentials: connectionIds => request(operations.RuntimeModelCredentials.path, data => ({ runtimeModelCredentials: array(data, decodeCredential) }), connectionIds === undefined ? {} : { connectionIds }),
+        projectProfile: id => request(`${operations.RuntimeProjectProfile.path}/${id}/profile`, data => ({ runtimeProjectProfile: decodeProfile(data) })),
+        skillFiles: id => request(`${operations.RuntimeSkillFiles.path}/${id}/files`, data => ({ runtimeSkillFiles: array(data, decodeFileContent) })),
+        reportEvent: event => request(operations.RuntimeReportEvent.path, data => ({ runtimeReportEvent: decodeEvent(data) }), event),
+        exchangeCnbToken: input => exchangeCnbToken(input, options.fetchImpl),
+        loginToConsole: input => loginToConsole(input, options.fetchImpl),
+    };
+}