@geminixiang/mikan 1.0.0-beta.39 → 1.0.0-beta.40

package/dist/web/admin/portal.js

@@ -1,12 +1,10 @@
-import { existsSync, readdirSync, readFileSync, statSync } from "fs";
-import { basename, join, resolve as pathResolve, sep as pathSep } from "path";
-import { MikanModels, parseFrontmatter, SessionStore } from "../../harness/index.js";
+import { existsSync, readdirSync, readFileSync, statSync } from "node:fs";
+import { basename, join, resolve as pathResolve, sep as pathSep } from "node:path";
+import { defaultExtensionDirs, listInstalledExtensions, MikanModels, parseFrontmatter, SessionStore, } from "../../harness/index.js";
 import { loadConversationAutoReplyConfig, loadConversationWorkspaceOverride, loadGlobalSettings, resolveConversationSettings, saveConversationAutoReplyConfig, } from "../../config.js";
 import { applyConversationSettings, applyConversationWorkspacePolicy, applyGlobalSettings, applyGlobalWorkspacePolicy, } from "../../settings-mutation.js";
 import { addPackage, inspectConversationPackages, refreshPackage, removePackage, } from "../../packages/index.js";
-import { escapeHtml } from "../../utils/html.js";
-import { readRawBody } from "../../utils/http-body.js";
-import { renderPortalShell } from "../portal-shell.js";
+import { escapeHtml, readJsonBody, renderPortalShell } from "../portal-shell.js";
 import { resolveExistingSessionFile } from "../session-view/service.js";
 import { PRODUCT_NAME } from "../../platform-messages.js";
 import { credentialAuthorizationKey } from "../../sandbox/identity.js";
@@ -95,6 +93,10 @@ async function routeApiRequest(req, res, url, services) {
             await servePackagesList(res, url, services, token);
             return;
         }
+        if (url.pathname === "/admin/api/extension-secrets") {
+            serveExtensionSecretsList(res, url, services, token);
+            return;
+        }
         if (url.pathname === "/admin/api/events") {
             await serveEventsList(res, services);
             return;
@@ -114,7 +116,7 @@ async function routeApiRequest(req, res, url, services) {
         jsonRes(res, 405, { error: "Method not allowed" });
         return;
     }
-    const body = await readJsonBody(req, res);
+    const body = await readJsonBody(req, res, 32 * 1024);
     if (!body)
         return;
     const rawToken = typeof body.token === "string" ? body.token : "";
@@ -155,6 +157,10 @@ async function routeApiRequest(req, res, url, services) {
         servePackageMutation(res, body, services, token);
         return;
     }
+    if (url.pathname === "/admin/api/extension-secrets/mutate") {
+        serveExtensionSecretMutation(res, body, services);
+        return;
+    }
     if (url.pathname === "/admin/api/settings/model") {
         serveGlobalModelUpdate(res, body, services);
         return;
@@ -854,9 +860,9 @@ function isWorkspacePathAllowed(rel) {
     if (rel === "")
         return true;
     const segments = rel.split("/").filter(Boolean);
-    if (segments.length === 0)
-        return true;
     const first = segments[0];
+    if (first === undefined)
+        return true;
     if (segments.length === 1) {
         return WORKSPACE_TOP_DIRS.has(first) || WORKSPACE_TOP_FILES.has(first);
     }
@@ -981,7 +987,7 @@ function looksTextual(buf) {
     const limit = Math.min(buf.length, BINARY_PROBE_BYTES);
     for (let i = 0; i < limit; i++) {
         const byte = buf[i];
-        if (byte === 0)
+        if (byte === undefined || byte === 0)
             return false;
         if (byte < 9)
             return false;
@@ -1137,6 +1143,77 @@ async function servePackagesList(res, url, services, token) {
         jsonRes(res, 500, { error: err instanceof Error ? err.message : String(err) });
     }
 }
+const EXTENSION_SLUG_PATTERN = /^[a-z0-9_-]{1,64}$/;
+const EXTENSION_SECRET_KEY_PATTERN = /^[A-Za-z_][A-Za-z0-9_]*$/;
+/**
+ * Declared + provisioned secrets for every extension visible to the selected
+ * conversation (global scope plus the conversation's own installs, deduped by
+ * slug — the vault is keyed by slug, so two scopes share one secret set).
+ * Values never leave the server; only key names and provisioning status do.
+ */
+function serveExtensionSecretsList(res, url, services, token) {
+    const scope = resolveConversationFromQuery(url, token);
+    if (scope.error) {
+        jsonRes(res, 403, { error: scope.error });
+        return;
+    }
+    const workspace = requireAdminWorkspace(res, services);
+    if (!workspace)
+        return;
+    const infosBySlug = new Map();
+    for (const info of listInstalledExtensions(defaultExtensionDirs(scope.address, workspace.stateDir))) {
+        infosBySlug.set(info.slug, info);
+    }
+    const extensions = [...infosBySlug.values()]
+        .toSorted((left, right) => left.slug.localeCompare(right.slug))
+        .map((info) => {
+        const provisioned = Object.keys(services.vaultManager.resolve(`extensions/${info.slug}`)?.env ?? {}).toSorted();
+        const declaredKeys = new Set(info.secrets.map((secret) => secret.key));
+        return {
+            slug: info.slug,
+            name: info.name,
+            declared: info.secrets.map((secret) => ({
+                ...secret,
+                provisioned: provisioned.includes(secret.key),
+            })),
+            extraProvisioned: provisioned.filter((key) => !declaredKeys.has(key)),
+        };
+    });
+    jsonRes(res, 200, { extensions });
+}
+/** Set or delete one extension secret. Values are write-only through here. */
+function serveExtensionSecretMutation(res, body, services) {
+    const action = body.action;
+    if (action !== "set" && action !== "delete") {
+        jsonRes(res, 400, { error: "action must be 'set' or 'delete'" });
+        return;
+    }
+    const slug = typeof body.slug === "string" ? body.slug : "";
+    if (!EXTENSION_SLUG_PATTERN.test(slug)) {
+        jsonRes(res, 400, { error: "invalid extension slug" });
+        return;
+    }
+    const key = typeof body.key === "string" ? body.key : "";
+    if (!EXTENSION_SECRET_KEY_PATTERN.test(key)) {
+        jsonRes(res, 400, { error: "invalid secret key (expected an env-style name)" });
+        return;
+    }
+    const vaultKey = `extensions/${slug}`;
+    if (action === "set") {
+        const value = typeof body.value === "string" ? body.value : "";
+        if (!value) {
+            jsonRes(res, 400, { error: "value is required" });
+            return;
+        }
+        services.vaultManager.upsertEnv(vaultKey, { [key]: value });
+    }
+    else if (!services.vaultManager.deleteEnvKey(vaultKey, key)) {
+        jsonRes(res, 404, { error: "Not provisioned." });
+        return;
+    }
+    const provisioned = Object.keys(services.vaultManager.resolve(vaultKey)?.env ?? {}).toSorted();
+    jsonRes(res, 200, { ok: true, provisioned });
+}
 /**
  * Add / remove / refresh, in one route because they share validation and all
  * three answer with the freshly re-read inventory: the panel never has to
@@ -1363,18 +1440,6 @@ function jsonRes(res, status, body) {
     });
     res.end(JSON.stringify(body));
 }
-async function readJsonBody(req, res) {
-    const data = await readRawBody(req, res, 32 * 1024);
-    if (data === null)
-        return null;
-    try {
-        return JSON.parse(data);
-    }
-    catch {
-        jsonRes(res, 400, { error: "Invalid JSON" });
-        return null;
-    }
-}
 const esc = escapeHtml;
 // ── HTML ───────────────────────────────────────────────────────────────────────
 function renderAdminPage(token) {
@@ -1539,6 +1604,18 @@ function renderAdminPage(token) {
         <div id="pkg-global-content"><div class="loading-msg">Loading…</div></div>
       </section>
 
+      <section class="card sect">
+        <header class="sect-head">
+          <div>
+            <p class="eyebrow">Extension Secrets</p>
+            <h2 class="card-title">Extension 密鑰(依 slug 全域共用)</h2>
+          </div>
+          <button class="refresh-btn" onclick="loadExtensionSecrets()">↻</button>
+        </header>
+        <div id="ext-secrets-msg" class="pkg-msg" style="display:none"></div>
+        <div id="ext-secrets-content"><div class="loading-msg">Loading…</div></div>
+      </section>
+
       <section class="card sect">
         <header class="sect-head">
           <div>
@@ -2012,6 +2089,94 @@ function renderAdminPage(token) {
       void mutatePackage(btn.dataset.pkgScope, btn.dataset.pkgAction, btn.dataset.pkgSource);
     });
 
+    // ── Extension secrets ───────────────────────────────────────────────────────
+
+    function extSecretsMessage(text, kind) {
+      const el = document.getElementById('ext-secrets-msg');
+      if (!el) return;
+      el.style.display = 'block';
+      el.className = 'pkg-msg pkg-msg-' + kind;
+      el.textContent = text;
+    }
+
+    function renderSecretRow(slug, key, meta) {
+      return '<div class="pkg-row">' +
+        '<div class="pkg-row-main"><span class="pkg-source">' + escHtml(key) + '</span>' +
+        (meta.required ? '<span class="pkg-badge pkg-badge-warn">required</span>' : '') +
+        (meta.provisioned
+          ? '<span class="pkg-badge pkg-badge-ok">provisioned</span>'
+          : '<span class="pkg-badge pkg-badge-err">missing</span>') +
+        '</div>' +
+        (meta.description ? '<div class="skill-desc">' + escHtml(meta.description) + '</div>' : '') +
+        '<div class="pkg-actions">' +
+          '<button class="pkg-btn" data-secret-action="set" data-secret-slug="' + escAttr(slug) + '" data-secret-key="' + escAttr(key) + '">Set</button>' +
+          (meta.provisioned
+            ? '<button class="pkg-btn pkg-btn-danger" data-secret-action="delete" data-secret-slug="' + escAttr(slug) + '" data-secret-key="' + escAttr(key) + '">Delete</button>'
+            : '') +
+        '</div>' +
+      '</div>';
+    }
+
+    async function loadExtensionSecrets() {
+      const container = document.getElementById('ext-secrets-content');
+      if (!container) return;
+      container.innerHTML = '<div class="loading-msg">Loading…</div>';
+      try {
+        const data = await apiGet('/admin/api/extension-secrets?' + scopeQuery());
+        if (data.extensions.length === 0) {
+          container.innerHTML = '<div class="empty-state">No extensions installed</div>';
+          return;
+        }
+        container.innerHTML = data.extensions.map((ext) => {
+          const declared = ext.declared.map((s) => renderSecretRow(ext.slug, s.key, s)).join('');
+          const extras = ext.extraProvisioned
+            .map((key) => renderSecretRow(ext.slug, key, { provisioned: true }))
+            .join('');
+          return '<div class="pkg-group">' +
+            '<div class="pkg-group-head"><strong>' + escHtml(ext.name) + '</strong>' +
+              '<span class="pkg-source">' + escHtml(ext.slug) + '</span>' +
+              '<button class="pkg-btn" data-secret-action="add" data-secret-slug="' + escAttr(ext.slug) + '">Add key</button>' +
+            '</div>' +
+            '<div class="pkg-list">' +
+              (declared + extras || '<div class="pkg-provides-empty">No secrets declared</div>') +
+            '</div>' +
+          '</div>';
+        }).join('');
+      } catch (err) {
+        container.innerHTML = '<div class="err-msg">' + escHtml(err.message) + '</div>';
+      }
+    }
+
+    document.addEventListener('click', async (event) => {
+      const btn = event.target.closest('[data-secret-action]');
+      if (!btn) return;
+      const slug = btn.dataset.secretSlug;
+      const action = btn.dataset.secretAction;
+      let key = btn.dataset.secretKey;
+      if (action === 'add') {
+        key = (prompt('Secret key for ' + slug + '(e.g. SLACK_BOT_TOKEN)') || '').trim();
+        if (!key) return;
+      }
+      if (action === 'delete' && !confirm('Delete ' + key + ' from ' + slug + '?')) return;
+      let value;
+      if (action !== 'delete') {
+        value = prompt('Value for ' + key + '(' + slug + ')');
+        if (!value) return;
+      }
+      try {
+        await apiPost('/admin/api/extension-secrets/mutate', {
+          action: action === 'delete' ? 'delete' : 'set',
+          slug: slug,
+          key: key,
+          value: value,
+        });
+        extSecretsMessage('已更新。對話輸入 /pi-new 生效。', 'ok');
+        await loadExtensionSecrets();
+      } catch (err) {
+        extSecretsMessage(err.message, 'err');
+      }
+    });
+
     async function loadSkills() {
       const container = document.getElementById('skills-content');
       const previewEl = document.getElementById('skills-preview');
@@ -2176,6 +2341,7 @@ function renderAdminPage(token) {
       loadGlobalSettings();
       loadGlobalSkills();
       loadEvents();
+      loadExtensionSecrets();
     }
 
     async function loadAllConversations() {
@@ -2761,6 +2927,12 @@ const adminViewStyles = `
   }
   .pkg-btn:hover { background: rgba(0,0,0,0.05); }
   .pkg-btn-danger { color: #b91c1c; }
+  .pkg-group { margin-bottom: 16px; }
+  .pkg-group-head {
+    display: flex; align-items: center; gap: 8px; margin-bottom: 8px;
+    font-size: 0.85rem;
+  }
+  .pkg-group-head .pkg-btn { margin-left: auto; }
 
   /* ── Events ─────────────────────────────────────────────────────────── */