@gt-fe/eap-runtime 0.0.8

package/dist/api/middleware/auth.middleware.js

@@ -0,0 +1,158 @@
+/**
+ * Auth Middleware — 3种认证方式
+ *
+ * 支持:
+ * - CAS SSO Token (Cookie: CAS_TOKEN) — 浏览器用户
+ * - API Key (Authorization: Bearer <token>) — 业务系统集成
+ * - CLI Token (X-CLI-Token header) — 开发者 Playground
+ *
+ * Requirement 11 AC8: THE 系统 SHALL 支持3种认证方式调用
+ */
+// ─────────────────────────────────────────────
+// Error
+// ─────────────────────────────────────────────
+/**
+ * 认证失败自定义错误
+ */
+export class AuthenticationError extends Error {
+    code = 'AUTHENTICATION_FAILED';
+    constructor(message = 'Authentication required') {
+        super(message);
+        this.name = 'AuthenticationError';
+        // 确保 instanceof 正常工作
+        Object.setPrototypeOf(this, AuthenticationError.prototype);
+    }
+}
+// ─────────────────────────────────────────────
+// Constants
+// ─────────────────────────────────────────────
+/** CAS SSO Cookie 名称 */
+const CAS_COOKIE_NAME = 'CAS_TOKEN';
+/** CLI Token 请求头名称 */
+const CLI_TOKEN_HEADER = 'x-cli-token';
+/** Authorization 请求头名称 */
+const AUTHORIZATION_HEADER = 'authorization';
+/** Bearer 前缀 */
+const BEARER_PREFIX = 'Bearer ';
+// ─────────────────────────────────────────────
+// AuthMiddleware
+// ─────────────────────────────────────────────
+/**
+ * Auth Middleware — 按优先级尝试3种认证方式
+ *
+ * 优先级：CAS SSO Cookie > Authorization Bearer > X-CLI-Token
+ */
+export class AuthMiddleware {
+    authService;
+    constructor(authService) {
+        this.authService = authService;
+    }
+    /**
+     * 认证入口
+     *
+     * 按优先级依次尝试:
+     * 1. CAS SSO Cookie (CAS_TOKEN)
+     * 2. Authorization: Bearer <token> (API Key)
+     * 3. X-CLI-Token header (CLI Token)
+     *
+     * @throws AuthenticationError 如果无有效凭证或验证失败
+     */
+    async authenticate(req) {
+        // 1. 尝试 CAS SSO Cookie
+        const casToken = this.extractCasToken(req);
+        if (casToken) {
+            const user = await this.authService.validate(casToken, 'cas_sso');
+            if (user)
+                return user;
+        }
+        // 2. 尝试 Authorization: Bearer <token>
+        const bearerToken = this.extractBearerToken(req);
+        if (bearerToken) {
+            const user = await this.authService.validate(bearerToken, 'api_key');
+            if (user)
+                return user;
+        }
+        // 3. 尝试 X-CLI-Token header
+        const cliToken = this.extractCliToken(req);
+        if (cliToken) {
+            const user = await this.authService.validate(cliToken, 'cli_token');
+            if (user)
+                return user;
+        }
+        // 均未命中 → 抛出认证错误
+        throw new AuthenticationError('No valid credentials provided');
+    }
+    // ─── Private helpers ──────────────────────────
+    /**
+     * 从 Cookie 中提取 CAS Token
+     */
+    extractCasToken(req) {
+        // 优先从已解析的 cookies 对象中取
+        if (req.cookies?.[CAS_COOKIE_NAME]) {
+            return req.cookies[CAS_COOKIE_NAME];
+        }
+        // 回退：从 cookie header 手动解析
+        const cookieHeader = req.headers['cookie'];
+        if (!cookieHeader)
+            return undefined;
+        const cookies = parseCookieHeader(cookieHeader);
+        return cookies[CAS_COOKIE_NAME];
+    }
+    /**
+     * 从 Authorization header 提取 Bearer Token
+     */
+    extractBearerToken(req) {
+        const authHeader = req.headers[AUTHORIZATION_HEADER];
+        if (!authHeader)
+            return undefined;
+        if (authHeader.startsWith(BEARER_PREFIX)) {
+            const token = authHeader.slice(BEARER_PREFIX.length).trim();
+            return token || undefined;
+        }
+        return undefined;
+    }
+    /**
+     * 从 X-CLI-Token header 提取 CLI Token
+     */
+    extractCliToken(req) {
+        const token = req.headers[CLI_TOKEN_HEADER];
+        return token?.trim() || undefined;
+    }
+}
+// ─────────────────────────────────────────────
+// Standalone authenticate function (convenience)
+// ─────────────────────────────────────────────
+/**
+ * 便捷函数 — 创建 AuthMiddleware 实例并执行认证
+ *
+ * @param req - 框架无关的请求对象
+ * @param authService - 认证服务实现
+ * @returns 认证后的用户信息
+ * @throws AuthenticationError
+ */
+export async function authenticate(req, authService) {
+    const middleware = new AuthMiddleware(authService);
+    return middleware.authenticate(req);
+}
+// ─────────────────────────────────────────────
+// Utils
+// ─────────────────────────────────────────────
+/**
+ * 简易 Cookie header 解析
+ * 格式: "name1=value1; name2=value2"
+ */
+function parseCookieHeader(header) {
+    const result = {};
+    const pairs = header.split(';');
+    for (const pair of pairs) {
+        const eqIdx = pair.indexOf('=');
+        if (eqIdx === -1)
+            continue;
+        const key = pair.slice(0, eqIdx).trim();
+        const value = pair.slice(eqIdx + 1).trim();
+        if (key) {
+            result[key] = value;
+        }
+    }
+    return result;
+}

package/dist/api/middleware/index.d.ts

@@ -0,0 +1 @@
+export * from './auth.middleware.js';

package/dist/api/middleware/index.js

@@ -0,0 +1,2 @@
+// Middleware barrel export
+export * from './auth.middleware.js';

package/dist/api/routes/agent.routes.d.ts

@@ -0,0 +1,44 @@
+/**
+ * Agent Invoke API — Route Handlers（dev-only HTTP 适配层）
+ *
+ * 生产环境由 Hosting 提供对外 HTTP；本模块供 `EAP_DEV_HTTP=1` 本地调试。
+ */
+import type { ServerResponse } from 'node:http';
+import type { InvokeRequest as ContractInvokeRequest, InvokeResponse as ContractInvokeResponse } from '@gt-fe/eap-contracts';
+import type { ITaskManager } from '../../task/task.service.js';
+import type { SessionService } from '../../session/session.service.js';
+import type { IStateGraphEngine } from '../../graph/contracts/executable-graph.js';
+import type { SSEEmitter } from '../../sse/sse-emitter.js';
+export type { InvokeConfig, InvokeResponseData } from '@gt-fe/eap-contracts';
+/**
+ * dev HTTP 层 Invoke 请求（扩展 userId，Hosting 从 auth 注入）
+ */
+export type InvokeRequest = ContractInvokeRequest & {
+    userId?: string;
+};
+export type InvokeResponse = ContractInvokeResponse;
+/** 流式调用请求 — 与 InvokeRequest 相同 */
+export type StreamRequest = InvokeRequest;
+/**
+ * Agent 路由处理器依赖
+ */
+export interface AgentRouteDependencies {
+    /** Task 管理器 */
+    taskManager: ITaskManager;
+    /** Session 服务 */
+    sessionService: SessionService;
+    /** Graph 引擎 */
+    graphEngine: IStateGraphEngine;
+    /** SSE 发射器 */
+    sseEmitter: SSEEmitter;
+}
+/**
+ * 创建 Agent 路由处理器
+ *
+ * @param deps - 依赖注入
+ * @returns 路由处理器函数
+ */
+export declare function createAgentRouteHandlers(deps: AgentRouteDependencies): {
+    invokeHandler: (req: InvokeRequest) => Promise<InvokeResponse>;
+    streamHandler: (req: StreamRequest, res: ServerResponse) => Promise<void>;
+};

package/dist/api/routes/agent.routes.js

@@ -0,0 +1,204 @@
+/**
+ * Agent Invoke API — Route Handlers（dev-only HTTP 适配层）
+ *
+ * 生产环境由 Hosting 提供对外 HTTP；本模块供 `EAP_DEV_HTTP=1` 本地调试。
+ */
+// ─────────────────────────────────────────────
+// Route Handlers
+// ─────────────────────────────────────────────
+/**
+ * 创建 Agent 路由处理器
+ *
+ * @param deps - 依赖注入
+ * @returns 路由处理器函数
+ */
+export function createAgentRouteHandlers(deps) {
+    const { taskManager, sessionService, graphEngine, sseEmitter } = deps;
+    /**
+     * 同步调用 Agent
+     *
+     * 接收解析后的请求体，执行 Agent Graph，等待完整结果返回。
+     */
+    async function invokeHandler(req) {
+        const { input, sessionId, config, userId } = req;
+        const agentCode = req.agentCode ?? req.agentId;
+        if (!agentCode) {
+            throw new Error('agentCode is required');
+        }
+        const startTime = Date.now();
+        try {
+            // 1. 获取或创建 Session
+            let resolvedSessionId = sessionId;
+            if (!resolvedSessionId) {
+                const session = await sessionService.createSession({
+                    userId: userId ?? 'anonymous',
+                    agentId: agentCode,
+                });
+                resolvedSessionId = session.id;
+            }
+            // 2. 创建 Task
+            const task = await taskManager.create({
+                id: req.taskId,
+                agentId: agentCode,
+                sessionId: resolvedSessionId,
+                userId: userId ?? 'anonymous',
+                correlationId: `corr-${Date.now()}`,
+                input,
+                timeout: 60000,
+            });
+            // 3. 执行 Graph
+            const graph = await graphEngine.buildGraph({
+                name: agentCode,
+                version: '1.0.0',
+                nodes: [],
+                edges: [],
+                conditionalEdges: [],
+                entryPoint: '__start__',
+                finishPoints: ['__end__'],
+                description: '',
+                state: {},
+                config: {},
+            });
+            const result = await graphEngine.invoke(graph, {
+                messages: [{ role: 'user', content: input }],
+                userId: userId ?? 'anonymous',
+            });
+            // 4. 完成 Task
+            await taskManager.updateStatus(task.id, 'success', result.output);
+            // 5. 计算耗时
+            const duration = Date.now() - startTime;
+            return {
+                code: 'ok',
+                data: {
+                    taskId: task.id,
+                    sessionId: resolvedSessionId,
+                    output: result.output ?? '',
+                    tokenUsage: {
+                        input: result.tokenUsage?.input ?? 0,
+                        output: result.tokenUsage?.output ?? 0,
+                        total: result.tokenUsage?.total ?? 0,
+                    },
+                    duration,
+                    status: 'success',
+                },
+                traceId: task.id,
+            };
+        }
+        catch (error) {
+            // 错误处理
+            const duration = Date.now() - startTime;
+            const errorMessage = error instanceof Error ? error.message : 'Unknown error';
+            return {
+                code: 'runtime.graph.execution_error',
+                data: {
+                    taskId: '',
+                    sessionId: sessionId ?? '',
+                    output: '',
+                    tokenUsage: { input: 0, output: 0, total: 0 },
+                    duration,
+                    status: 'failed',
+                },
+                traceId: '',
+            };
+        }
+    }
+    /**
+     * 流式调用 Agent（SSE）
+     *
+     * 接收解析后的请求体，通过 Node.js ServerResponse 推送 SSE 事件流。
+     */
+    async function streamHandler(req, res) {
+        const { input, sessionId, config, userId } = req;
+        const agentCode = req.agentCode ?? req.agentId;
+        if (!agentCode) {
+            res.write(`event: error\ndata: ${JSON.stringify({ error: 'agentCode is required' })}\n\n`);
+            res.end();
+            return;
+        }
+        // 设置 SSE 标准响应头
+        res.writeHead(200, {
+            'Content-Type': 'text/event-stream',
+            'Cache-Control': 'no-cache',
+            'Connection': 'keep-alive',
+            'X-Accel-Buffering': 'no', // 禁用 Nginx 缓冲
+        });
+        try {
+            // 1. 获取或创建 Session
+            let resolvedSessionId = sessionId;
+            if (!resolvedSessionId) {
+                const session = await sessionService.createSession({
+                    userId: userId ?? 'anonymous',
+                    agentId: agentCode,
+                });
+                resolvedSessionId = session.id;
+            }
+            // 2. 创建 Task
+            const task = await taskManager.create({
+                id: req.taskId,
+                agentId: agentCode,
+                sessionId: resolvedSessionId,
+                userId: userId ?? 'anonymous',
+                correlationId: `corr-${Date.now()}`,
+                input,
+                timeout: 60000,
+            });
+            // 3. 发送 task.started 事件
+            const taskId = task.id;
+            const timestamp = new Date().toISOString();
+            res.write(`event: task.started\ndata: ${JSON.stringify({
+                taskId,
+                sessionId: resolvedSessionId,
+                timestamp,
+            })}\n\n`);
+            // 4. 流式执行 Graph
+            const graph2 = await graphEngine.buildGraph({
+                name: agentCode,
+                version: '1.0.0',
+                nodes: [],
+                edges: [],
+                conditionalEdges: [],
+                entryPoint: '__start__',
+                finishPoints: ['__end__'],
+                description: '',
+                state: {},
+                config: {},
+            });
+            const stream = graphEngine.stream(graph2, {
+                messages: [{ role: 'user', content: input }],
+                userId: userId ?? 'anonymous',
+            });
+            // 5. 将 Graph 事件转为 SSE 格式
+            for await (const event of stream) {
+                // 检查连接是否关闭
+                if (res.writableEnded)
+                    break;
+                // 发送 SSE 事件
+                res.write(`event: ${event.type}\ndata: ${JSON.stringify(event.payload)}\n\n`);
+            }
+            // 6. 完成 Task
+            await taskManager.updateStatus(taskId, 'success');
+            // 7. 发送 task.completed 事件
+            res.write(`event: task.completed\ndata: ${JSON.stringify({
+                taskId,
+                duration: Date.now() - new Date(timestamp).getTime(),
+                timestamp: new Date().toISOString(),
+            })}\n\n`);
+        }
+        catch (error) {
+            // 发送错误事件
+            const errorMessage = error instanceof Error ? error.message : 'Unknown error';
+            res.write(`event: error\ndata: ${JSON.stringify({
+                error: errorMessage,
+                timestamp: new Date().toISOString(),
+            })}\n\n`);
+        }
+        finally {
+            // 关闭连接
+            res.end();
+        }
+    }
+    return {
+        invokeHandler,
+        streamHandler,
+    };
+}

package/dist/api/routes/index.d.ts

@@ -0,0 +1,3 @@
+export * from './agent.routes.js';
+export * from './session.routes.js';
+export * from './task.routes.js';

package/dist/api/routes/index.js

@@ -0,0 +1,4 @@
+// API Routes barrel export
+export * from './agent.routes.js';
+export * from './session.routes.js';
+export * from './task.routes.js';

package/dist/api/routes/session.routes.d.ts

@@ -0,0 +1,82 @@
+/**
+ * Session Messages API — Route Handlers
+ *
+ * 框架无关的路由处理函数，接受解析后的请求体，返回响应体。
+ * - postMessageHandler: 在已有会话中发送新消息，触发 Agent 执行
+ * - getMessagesHandler: 获取会话消息历史
+ *
+ * Requirement 11: Agent Invoke API — AC3, AC5
+ */
+import type { MessageRecord, SessionService } from '../../session/session.service.js';
+import type { ITaskManager } from '../../task/task.service.js';
+import type { IStateGraphEngine } from '../../graph/contracts/executable-graph.js';
+import type { InvokeConfig, InvokeResponse } from './agent.routes.js';
+/**
+ * 发送消息请求 — POST /api/v1/sessions/:sessionId/messages
+ */
+export interface PostMessageRequest {
+    /** 目标 Session ID（从路径参数获取） */
+    sessionId: string;
+    /** 用户输入 */
+    input: string;
+    /** 执行配置（可选） */
+    config?: InvokeConfig;
+    /** 用户 ID */
+    userId?: string;
+    /** 预装版本；缺省时回退 session.metadata.agentVersion */
+    agentVersion?: string;
+}
+/**
+ * 发送消息响应 — 与 InvokeResponse 相同（触发 Agent 执行）
+ */
+export type PostMessageResponse = InvokeResponse;
+/**
+ * 获取消息历史请求 — GET /api/v1/sessions/:sessionId/messages
+ */
+export interface GetMessagesRequest {
+    /** 目标 Session ID（从路径参数获取） */
+    sessionId: string;
+    /** 返回条数上限（可选） */
+    limit?: number;
+    /** 偏移量（可选） */
+    offset?: number;
+}
+/**
+ * 获取消息历史响应数据
+ */
+export interface GetMessagesResponseData {
+    /** 消息列表 */
+    messages: MessageRecord[];
+    /** 消息总数（可选，用于分页） */
+    total?: number;
+}
+/**
+ * 获取消息历史完整响应
+ */
+export interface GetMessagesResponse {
+    /** 业务码：'ok' 表示成功，否则为三段式错误码 */
+    code: string;
+    /** 响应数据 */
+    data: GetMessagesResponseData;
+}
+/**
+ * Session 路由处理器依赖
+ */
+export interface SessionRouteDependencies {
+    /** Session 服务 */
+    sessionService: SessionService;
+    /** Task 管理器 */
+    taskManager: ITaskManager;
+    /** Graph 引擎 */
+    graphEngine: IStateGraphEngine;
+}
+/**
+ * 创建 Session 路由处理器
+ *
+ * @param deps - 依赖注入
+ * @returns 路由处理器函数
+ */
+export declare function createSessionRouteHandlers(deps: SessionRouteDependencies): {
+    postMessageHandler: (req: PostMessageRequest) => Promise<PostMessageResponse>;
+    getMessagesHandler: (req: GetMessagesRequest) => Promise<GetMessagesResponse>;
+};

package/dist/api/routes/session.routes.js

@@ -0,0 +1,169 @@
+/**
+ * Session Messages API — Route Handlers
+ *
+ * 框架无关的路由处理函数，接受解析后的请求体，返回响应体。
+ * - postMessageHandler: 在已有会话中发送新消息，触发 Agent 执行
+ * - getMessagesHandler: 获取会话消息历史
+ *
+ * Requirement 11: Agent Invoke API — AC3, AC5
+ */
+// ─────────────────────────────────────────────
+// Route Handlers
+// ─────────────────────────────────────────────
+/**
+ * 创建 Session 路由处理器
+ *
+ * @param deps - 依赖注入
+ * @returns 路由处理器函数
+ */
+export function createSessionRouteHandlers(deps) {
+    const { sessionService, taskManager, graphEngine } = deps;
+    /**
+     * 在已有会话中发送新消息
+     *
+     * 接收解析后的请求体，在现有 Session 上下文中触发 Agent 执行。
+     */
+    async function postMessageHandler(req) {
+        const { sessionId, input, config, userId } = req;
+        const startTime = Date.now();
+        try {
+            // 1. 验证 Session 存在
+            const session = await sessionService.getSession(sessionId);
+            if (!session) {
+                return {
+                    code: 'runtime.session.not_found',
+                    data: {
+                        taskId: '',
+                        sessionId,
+                        output: '',
+                        tokenUsage: { input: 0, output: 0, total: 0 },
+                        duration: Date.now() - startTime,
+                        status: 'failed',
+                    },
+                    traceId: '',
+                };
+            }
+            // 2. 加载 Session 历史消息作为上下文
+            const history = await sessionService.loadHistory(sessionId, {
+                limit: 50, // 最近 50 条消息
+            });
+            // 3. 创建 Task
+            const task = await taskManager.create({
+                agentId: session.agentId,
+                sessionId,
+                userId: userId ?? session.userId,
+                correlationId: `corr-${Date.now()}`,
+                input,
+                timeout: 60000,
+            });
+            // 4. 构建消息列表（历史 + 新消息）
+            const messages = [
+                ...history.map((m) => ({
+                    role: m.role,
+                    content: m.content,
+                })),
+                { role: 'user', content: input },
+            ];
+            // 5. 执行 Graph
+            const graph = await graphEngine.buildGraph({
+                name: session.agentId,
+                version: '1.0.0',
+                nodes: [],
+                edges: [],
+                conditionalEdges: [],
+                entryPoint: '__start__',
+                finishPoints: ['__end__'],
+                description: '',
+                state: {},
+                config: {},
+            });
+            const result = await graphEngine.invoke(graph, {
+                messages,
+                userId: userId ?? session.userId,
+            });
+            // 6. 完成 Task
+            await taskManager.updateStatus(task.id, 'success', result.output);
+            // 7. 计算耗时
+            const duration = Date.now() - startTime;
+            return {
+                code: 'ok',
+                data: {
+                    taskId: task.id,
+                    sessionId,
+                    output: result.output ?? '',
+                    tokenUsage: {
+                        input: result.tokenUsage?.input ?? 0,
+                        output: result.tokenUsage?.output ?? 0,
+                        total: result.tokenUsage?.total ?? 0,
+                    },
+                    duration,
+                    status: 'success',
+                },
+                traceId: task.id,
+            };
+        }
+        catch (error) {
+            // 错误处理
+            const duration = Date.now() - startTime;
+            const errorMessage = error instanceof Error ? error.message : 'Unknown error';
+            return {
+                code: 'runtime.graph.execution_error',
+                data: {
+                    taskId: '',
+                    sessionId,
+                    output: '',
+                    tokenUsage: { input: 0, output: 0, total: 0 },
+                    duration,
+                    status: 'failed',
+                },
+                traceId: '',
+            };
+        }
+    }
+    /**
+     * 获取会话消息历史
+     *
+     * 接收解析后的请求体，返回指定 Session 的消息列表（支持分页）。
+     */
+    async function getMessagesHandler(req) {
+        const { sessionId, limit, offset } = req;
+        try {
+            // 1. 验证 Session 存在
+            const session = await sessionService.getSession(sessionId);
+            if (!session) {
+                return {
+                    code: 'runtime.session.not_found',
+                    data: {
+                        messages: [],
+                        total: 0,
+                    },
+                };
+            }
+            // 2. 查询消息
+            const messages = await sessionService.loadHistory(sessionId, {
+                limit: limit ?? 50,
+                offset: offset ?? 0,
+            });
+            return {
+                code: 'ok',
+                data: {
+                    messages,
+                    total: messages.length,
+                },
+            };
+        }
+        catch (error) {
+            return {
+                code: 'runtime.graph.execution_error',
+                data: {
+                    messages: [],
+                    total: 0,
+                },
+            };
+        }
+    }
+    return {
+        postMessageHandler,
+        getMessagesHandler,
+    };
+}