@iamlbccc/tdxd 1.1.0

package/tdxd.mjs

@@ -0,0 +1,368 @@
+#!/usr/bin/env node
+// TDX-Daemon（tdxd）v1.1.0（1.1.0：跨平台 ctl + init 脚手架 + BUG-05/11/12 修复）
+// 职责：HTTP 入口（鉴权/唤醒/探活）+ SessionRouter(会话即进程) + ACP 事件→协议信封 + 平台回调
+// 配置：--config config.json 或环境变量覆盖（见 config.example.json）
+import http from "node:http";
+import fs from "node:fs";
+import { createHash } from "node:crypto";
+import { SessionRouter } from "./lib/router.mjs";
+import { makeEvaluator, permKeyOf, coreOfSegment, parseShell } from "./lib/perm.mjs";
+
+const args = process.argv.slice(2);
+let cfgPath = "config.json";
+const cfgIdx = args.indexOf("--config");
+if (cfgIdx >= 0) cfgPath = args[cfgIdx + 1];
+
+const fileCfg = fs.existsSync(cfgPath) ? JSON.parse(fs.readFileSync(cfgPath, "utf8")) : {};
+const cfg = {
+  name: process.env.TDXD_NAME ?? fileCfg.name ?? "TDX-Daemon",
+  port: Number(process.env.TDXD_PORT ?? fileCfg.port ?? 18200),
+  bind: process.env.TDXD_BIND ?? fileCfg.bind ?? "127.0.0.1",
+  token: process.env.TDXD_TOKEN ?? fileCfg.token ?? "",
+  workspace: process.env.TDXD_WORKSPACE ?? fileCfg.workspace ?? "",
+  command: process.env.TDXD_COMMAND ?? fileCfg.command ?? "opencode",
+  commandArgs: fileCfg.commandArgs ?? [],
+  idleTtlMin: Number(fileCfg.idleTtlMin ?? 10),
+  maxSessions: Number(fileCfg.maxSessions ?? 5),
+  promptTimeoutMs: Number(fileCfg.promptTimeoutMs ?? 360_000),
+  paperclip: {
+    url: process.env.TDXD_PAPERCLIP_URL ?? fileCfg.paperclip?.url ?? "",
+    agentKey: process.env.TDXD_PAPERCLIP_KEY ?? fileCfg.paperclip?.agentKey ?? "",
+  },
+  permissions: {
+    default: fileCfg.permissions?.default === "allow" ? "allow" : "deny",
+    allow: Array.isArray(fileCfg.permissions?.allow) ? fileCfg.permissions.allow : [],
+    askComment: fileCfg.permissions?.askComment !== false, // v2：deny 时向 issue 发审批请求评论
+  },
+  pricing: {
+    // 模型价格表（USD / 每百万 token）：operator 可随时改配置，无需动代码
+    models: fileCfg.pricing?.models ?? {},
+    default: fileCfg.pricing?.default ?? null,
+  },
+};
+
+if (!cfg.token) { console.error("[tdxd] 缺少 token（配置或 TDXD_TOKEN）"); process.exit(1); }
+if (!cfg.workspace) { console.error("[tdxd] 缺少 workspace 路径"); process.exit(1); }
+
+const router = new SessionRouter({
+  command: cfg.command, args: ["acp", ...(cfg.commandArgs ?? [])], workspace: cfg.workspace,
+  idleTtlMs: cfg.idleTtlMin * 60_000, maxSessions: cfg.maxSessions,
+  busyWaitTimeoutMs: Number(fileCfg.busyWaitTimeoutMs ?? 8 * 60_000),
+  permissionPolicy: basePermissionPolicy,
+});
+
+// ---- 权限策略（v0/v1）：默认 deny + 白名单（解析器：引号/heredoc 感知，$() 递归，核心命令授权） ----
+const allowRes = cfg.permissions.allow
+  .map((e) => { try { return new RegExp(e?.command ?? String(e)); } catch { return null; } })
+  .filter(Boolean);
+const evalCommand = makeEvaluator(allowRes, cfg.permissions.default);
+function basePermissionPolicy(command) { return evalCommand(command); }
+const permKey = (cmd) => permKeyOf(coreOfSegment(parseShell(String(cmd)).segments[0] ?? String(cmd)));
+
+/** 按 run usage 与价格表计算成本（USD）；模型无价且无默认价 → undefined（平台记 unpriced） */
+function computeCostUsd(model, usage) {
+  const price = cfg.pricing.models?.[model] ?? cfg.pricing.default;
+  if (!price) return undefined;
+  const u = usage ?? {};
+  const num = (v) => { const n = Number(v); return Number.isFinite(n) ? n : 0; }; // 防 NaN：Number(undefined)=NaN 会毒化总价（JSON 成 null）
+  const cost =
+    num(u.inputTokens) / 1e6 * num(price.inputPerMillion) +
+    num(u.cachedReadTokens ?? u.cachedInputTokens) / 1e6 * num(price.cachedReadPerMillion) +
+    num(u.outputTokens) / 1e6 * num(price.outputPerMillion) +
+    num(u.thoughtTokens) / 1e6 * num(price.thoughtPerMillion ?? price.outputPerMillion);
+  return Number(cost.toFixed(6));
+}
+
+/** 有 pending 审批时，每轮 wake 主动回查 issue 交互卡：accepted 且未武装过 → 武装授权。
+ *  对抗唤醒竞争合并导致 prompt 丢失 checkbox 选中项文本的场景（TDM-29 实证）。 */
+async function armGrantsFromInteractions(taskId, authToken) {
+  if (!pendingApprovals.size || !taskId || !cfg.paperclip.url || !authToken) return;
+  try {
+    const r = await fetch(`${cfg.paperclip.url}/api/issues/${taskId}/interactions`, {
+      headers: { authorization: `Bearer ${authToken}` },
+      signal: AbortSignal.timeout(5000),
+    });
+    if (!r.ok) return;
+    const list = await r.json();
+    const arr = Array.isArray(list) ? list : (list.interactions ?? list.items ?? []);
+    for (const it of arr) {
+      const status = String(it.status ?? it.outcome ?? "");
+      if (!/accepted/.test(status)) continue;
+      const optId = it.payload?.options?.[0]?.id ?? "";
+      const m = String(it.idempotencyKey ?? "").match(/^perm-approval:[^:]+:([0-9a-f]{8}):/);
+      const k = (m ? m[1] : (optId.match(/^approve_([0-9a-f]{8})$/)?.[1] ?? "")).toLowerCase();
+      const pend = pendingApprovals.get(k);
+      if (!k || !pend?.cmd || consumedGrants.has(k)) continue;
+      grantedApprovals.set(k, { cmd: pend.cmd, until: Date.now() + 30 * 60_000, uses: 0 });
+      consumedGrants.add(k);
+      savePermState();
+      console.log(`[tdxd] 授权武装（交互卡回查）key=${k}`);
+    }
+  } catch { /* 回查失败不影响主流程 */ }
+}
+
+// ---- v2：deny 审批（原生交互卡优先，评论降级；同命令 30 分钟去重，单 run 最多 5 条） ----
+const permStateFile = `${cfgPath}.permstate`; // 无 .json 后缀，避免被 tdxd-ctl 的 configs/*.json 实例扫描误认
+function loadPermState() {
+  try {
+    const j = JSON.parse(fs.readFileSync(permStateFile, "utf8"));
+    return {
+      pending: new Map(Object.entries(j.pending ?? {})),
+      granted: new Map(Object.entries(j.granted ?? {})),
+      consumed: new Set(j.consumed ?? []),
+    };
+  } catch { return { pending: new Map(), granted: new Map(), consumed: new Set() }; }
+}
+function savePermState() {
+  try {
+    fs.writeFileSync(permStateFile, JSON.stringify({
+      pending: Object.fromEntries(pendingApprovals),
+      granted: Object.fromEntries([...grantedApprovals].filter(([, g]) => Date.now() < g.until && g.uses < 1)),
+      consumed: [...consumedGrants],
+    }));
+  } catch { /* 状态持久化失败不影响主流程 */ }
+}
+const _perm = loadPermState();
+const pendingApprovals = _perm.pending; // key → { at, cmd }（去重 + 供授权回填命令）
+const grantedApprovals = _perm.granted; // key → { cmd, until, uses }（跨 run 持久授权：30 分钟窗口单次使用）
+const consumedGrants = _perm.consumed;  // 已武装过的交互卡 key（防重复武装）
+async function queueApproval(taskId, runId, info, authToken) {
+  const cmd = String(info.command ?? "").trim();
+  const bearer = authToken || cfg.paperclip.agentKey;
+  if (!cmd || !cfg.permissions.askComment || !taskId || !cfg.paperclip.url || !bearer) return;
+  const key = permKey(cmd);
+  const prev = pendingApprovals.get(key);
+  if (prev && Date.now() - prev.at < 30 * 60_000) return;
+  pendingApprovals.set(key, { at: Date.now(), cmd });
+  savePermState();
+  const safeCmd = cmd.replace(/`/g, "'").slice(0, 300);
+  const headers = {
+    authorization: `Bearer ${bearer}`,
+    "content-type": "application/json",
+    "x-paperclip-run-id": String(runId ?? ""),
+  };
+  // 首选：原生 checkbox 交互卡（选中项文本会渲染进唤醒 prompt → approve 标记可透传；accept/reject 均唤醒 assignee）
+  try {
+    const r = await fetch(`${cfg.paperclip.url}/api/issues/${taskId}/interactions`, {
+      method: "POST", headers,
+      body: JSON.stringify({
+        kind: "request_checkbox_confirmation",
+        title: `权限审批：${safeCmd.slice(0, 80)}`,
+        summary: "命令被默认权限策略拒绝，勾选并确认即可放行（allow_once，单次生效）",
+        continuationPolicy: "wake_assignee",
+        idempotencyKey: `perm-approval:${taskId}:${key}:${Math.floor(Date.now() / 1800_000)}`,
+        payload: {
+          version: 1,
+          prompt: "勾选下方选项并点击确认，即可在下次心跳放行该命令（仅本命令单次生效）。",
+          detailsMarkdown: `- 命令：\`${safeCmd}\`\n- 授权范围：\`allow_once\`，仅对完全相同的命令单次生效\n- 拒绝则无需勾选直接点「拒绝」\n- 30 分钟内同命令不重复发起`,
+          options: [{ id: `approve_${key}`, label: `approve ${key} —— 放行上述命令`, description: safeCmd.slice(0, 120) }],
+          defaultSelectedOptionIds: [`approve_${key}`],
+          minSelected: 1,
+          maxSelected: 1,
+          acceptLabel: "批准",
+          rejectLabel: "拒绝",
+          rejectRequiresReason: false,
+          supersedeOnUserComment: false,
+        },
+      }),
+    });
+    if (r.ok) { console.log(`[tdxd] 权限审批卡 key=${key} → HTTP ${r.status}`); return; }
+    console.log(`[tdxd] 权限审批卡失败 key=${key} → HTTP ${r.status}，降级评论`);
+  } catch (e) {
+    console.log(`[tdxd] 权限审批卡异常 key=${key}: ${e.message}，降级评论`);
+  }
+  // 降级：普通评论（需用户手动回复 approve <key>）
+  const body = `## 权限审批请求（${cfg.name}，tdxd 自动发起）\n\nAgent 请求执行的命令被默认权限策略拒绝，本回合模型将绕行。如需放行，请直接回复本评论：\n\n\`approve ${key}\`\n\n- 命令：\`${safeCmd}\`\n- 授权范围：\`allow_once\`，仅对完全相同的命令单次生效\n- 回复后下一次心跳自动生效；30 分钟内同命令不重复发起`;
+  try {
+    const r = await fetch(`${cfg.paperclip.url}/api/issues/${taskId}/comments`, {
+      method: "POST", headers,
+      body: JSON.stringify({ body }),
+    });
+    console.log(`[tdxd] 权限审批评论 key=${key} → HTTP ${r.status}`);
+  } catch (e) {
+    console.log(`[tdxd] 权限审批评论失败: ${e.message}`);
+  }
+}
+
+// ---- ACP update → 协议 v1 信封（恒等翻译） ----
+function translate(update) {
+  if (!update || typeof update.sessionUpdate !== "string") return null;
+  const u = update.sessionUpdate;
+  if (u === "agent_message_chunk") return { kind: "message_chunk", text: contentText(update.content) };
+  if (u === "agent_thought_chunk") return { kind: "thought_chunk", text: contentText(update.content) };
+  if (u === "user_message_chunk") return { kind: "user_message_chunk", text: contentText(update.content) };
+  if (u === "tool_call") return { kind: "tool_call", toolCallId: update.toolCallId, title: update.title, content: update.content ?? null, rawKind: update.kind ?? null };
+  if (u === "tool_call_update") return { kind: "tool_call_update", toolCallId: update.toolCallId, title: update.title, content: update.content ?? null, rawKind: update.kind ?? null };
+  if (u === "usage_update") return { kind: "usage", inputTokens: update.used ?? 0, outputTokens: 0, totalTokens: update.size ?? 0, note: "context-usage" };
+  return { kind: "agent_event", event: u, data: trim(update) };
+}
+const contentText = (c) => (c && typeof c === "object" ? String(c.text ?? "") : String(c ?? ""));
+const trim = (o) => { try { return JSON.parse(JSON.stringify(o)); } catch { return null; } };
+
+// ---- 平台回调 ----
+async function reportDone(taskId, runId, summary) {
+  if (!taskId || !cfg.paperclip.url || !cfg.paperclip.agentKey) return;
+  try {
+    const r = await fetch(`${cfg.paperclip.url}/api/issues/${taskId}`, {
+      method: "PATCH",
+      headers: {
+        authorization: `Bearer ${cfg.paperclip.agentKey}`,
+        "content-type": "application/json",
+        "x-paperclip-run-id": String(runId ?? ""),
+      },
+      body: JSON.stringify({
+        status: "done",
+        comment: summary,
+      }),
+    });
+    console.log(`[tdxd] 回调 issue=${taskId.slice(0, 8)} → HTTP ${r.status}`);
+  } catch (e) {
+    console.log(`[tdxd] 回调失败: ${e.message}`);
+  }
+}
+
+const okAuth = (req) => (req.headers.authorization ?? "") === `Bearer ${cfg.token}`;
+
+const server = http.createServer((req, res) => {
+  if (req.method === "GET" && req.url === "/health") {
+    if (!okAuth(req)) { res.writeHead(401); res.end(); return; }
+    res.writeHead(200, { "content-type": "application/json" });
+    res.end(JSON.stringify({ ok: true, name: cfg.name, workspace: cfg.workspace, version: "1.1.0",
+      activeSessions: router.sessions.size }));
+    return;
+  }
+
+  if (req.method === "POST" && req.url === "/run") {
+    if (!okAuth(req)) { res.writeHead(401); res.end("unauthorized"); return; }
+    (async () => {
+      let body = "";
+      for await (const c of req) body += c;
+      let wake;
+      try { wake = JSON.parse(body || "{}"); } catch { res.writeHead(400); res.end("bad json"); return; }
+      await handleRun(wake, req, res);
+    })().catch((e) => {
+      console.log(`[tdxd] 运行异常: ${e.message}`);
+      try { res.writeHead(500); res.end(JSON.stringify({ kind: "error", message: e.message })); } catch { /* noop */ }
+    });
+    return;
+  }
+  res.writeHead(404); res.end();
+});
+
+async function handleRun(wake, req, res) {
+  const key = wake.conversationKey ?? `adhoc:${wake.runId}`;
+  console.log(`[tdxd] run 收到 conversation=${key} resume=${!!wake.nativeSessionId} jwt=${!!wake.env?.authToken}`);
+
+  // 流式 NDJSON 响应
+  res.writeHead(200, { "content-type": "application/x-ndjson", "transfer-encoding": "chunked" });
+  const write = (obj) => res.write(JSON.stringify(obj) + "\n");
+
+  let terminal = { stopReason: "end_turn" };
+  const usageAcc = { inputTokens: 0, outputTokens: 0, totalTokens: 0, cachedReadTokens: 0 };
+  const msgTail = [];
+
+  const onUpdate = (u) => {
+    const ev = translate(u);
+    if (!ev) return;
+    if (ev.kind === "usage") return; // 终态 usage 更准，忽略流内 context usage
+    write(ev);
+    if (ev.kind === "message_chunk" && ev.text) msgTail.push(ev.text);
+  };
+
+  // run 凭据与工具（协议 v1.1）：注入 agent 子进程 / 挂载 MCP，使 paperclip skill 原生心跳可用
+  const runEnv = wake.env?.authToken ? {
+    PAPERCLIP_API_KEY: wake.env.authToken,
+    PAPERCLIP_API_URL: cfg.paperclip.url,
+    PAPERCLIP_AGENT_ID: wake.env.agentId ?? "",
+    PAPERCLIP_COMPANY_ID: wake.env.companyId ?? "",
+    PAPERCLIP_RUN_ID: String(wake.runId ?? ""),
+    PAPERCLIP_TASK_ID: String(wake.taskId ?? ""),
+  } : null;
+  const runMcp = Array.isArray(wake.mcpServers) ? wake.mcpServers : [];
+
+  let entry, sessionId, note, resumed;
+  try {
+    ({ entry, sessionId, resumed, note } = await router.acquire(key, wake.nativeSessionId, onUpdate, runEnv, runMcp));
+  } catch (e) {
+    write({ kind: "error", message: `会话建立失败: ${e.message}`, code: "session_setup_failed" });
+    res.end(); return;
+  }
+  write({ kind: "session", nativeSessionId: sessionId, resumed: !!resumed });
+  if (note) write({ kind: "agent_event", event: "note", data: { message: note } });
+
+  // v2：从 wake 上下文（交互卡选中项 / 审批评论）提取授权标记 → 武装跨 run 持久授权（30 分钟窗口单次使用）
+  for (const m of String(wake.prompt ?? "").matchAll(/^[ \t]*(?:[-*+][ \t]+)?approve[ \t_-]*([0-9a-f]{8})/gim)) {
+    const k = m[1].toLowerCase();
+    const pend = pendingApprovals.get(k);
+    if (pend?.cmd) { grantedApprovals.set(k, { cmd: pend.cmd, until: Date.now() + 30 * 60_000, uses: 0 }); savePermState(); }
+  }
+  if (runEnv) await armGrantsFromInteractions(wake.taskId, wake.env?.authToken).catch(() => {});
+  entry.agent.permissionPolicy = (cmd) => evalCommand(cmd, (coreKey) => {
+    const g = grantedApprovals.get(coreKey);
+    if (g && Date.now() < g.until && g.uses < 1) { g.uses++; savePermState(); return true; }
+    return false;
+  });
+  let askCount = 0;
+  entry.agent.onPermissionEvent = (info) => {
+    write({ kind: "permission", decision: info.decision, reason: info.reason, command: String(info.command ?? "").slice(0, 200) });
+    if (info.decision === "deny" && askCount < 5) {
+      askCount++;
+      queueApproval(wake.taskId, wake.runId, info, wake.env?.authToken).catch(() => {});
+    }
+  };
+
+  // 客户端断开 → 取消本次 prompt（进程与会话保留，供续接）
+  req.on("close", () => { entry.agent.cancel(sessionId).catch(() => {}); });
+
+  try {
+    const result = await entry.agent.prompt(sessionId, wake.prompt ?? "(empty)");
+    terminal = { stopReason: result?.stopReason ?? "end_turn" };
+    const u = result?.usage ?? {};
+    usageAcc.inputTokens = u.inputTokens ?? 0;
+    usageAcc.outputTokens = u.outputTokens ?? 0;
+    usageAcc.totalTokens = u.totalTokens ?? (usageAcc.inputTokens + usageAcc.outputTokens);
+    usageAcc.cachedReadTokens = u.cachedReadTokens ?? u.cachedInputTokens ?? 0;
+    usageAcc.costUsd = computeCostUsd(entry.agent.model, u);
+  } catch (e) {
+    // BUG-11：prompt 失败/超时 → cancel + 丢弃会话条目（stop 进程 + 删条目 + 放锁），
+    // 不留僵尸进程供下轮复用（TDM-20 事故链根治）；nativeSessionId 已上报平台留档，
+    // 下轮重派 respawn+resume 续接，会话状态由 opencode 落盘保留。
+    entry.agent.cancel(sessionId).catch(() => {});
+    router.discard(key);
+    write({ kind: "error", message: e.message, code: "prompt_failed" });
+    write({ kind: "done", stopReason: "error", nativeSessionId: sessionId,
+      usage: usageAcc, resumed: !!resumed });
+    res.end();
+    return;
+  }
+
+  write({ kind: "usage", ...usageAcc, cachedInputTokens: usageAcc.cachedReadTokens }); // BUG-01：双口径下发，适配 adapter 字段名
+  write({ kind: "done", ...terminal, nativeSessionId: sessionId, resumed: !!resumed, model: entry.agent.model ?? undefined,
+    costUsd: usageAcc.costUsd !== undefined && Number.isFinite(usageAcc.costUsd) ? usageAcc.costUsd : undefined });
+
+  // 终态回调：仅旧链路（无 run 凭据）执行；新链路 agent 按 skill 心跳自行 PATCH 收尾
+  if (!runEnv) {
+    const summaryText = msgTail.join("").slice(-600).trim();
+    const comment = terminal.stopReason === "end_turn"
+      ? (summaryText || `【${cfg.name}】(无文本输出)`)
+      : `【${cfg.name}】stopReason=${terminal.stopReason}\n\n${summaryText || "(无文本输出)"}`;
+    await reportDone(wake.taskId, wake.runId, comment);
+  } else if (terminal.stopReason !== "end_turn") {
+    // 新链路异常兜底：agent 未按预期运行时至少留下痕迹
+    await reportDone(wake.taskId, wake.runId,
+      `【${cfg.name}】stopReason=${terminal.stopReason}（agent 可能未能自行更新状态，请检查）`);
+  }
+
+  router.release(key);
+  res.end();
+}
+
+server.listen(cfg.port, cfg.bind, () => {
+  console.log(`[tdxd] ${cfg.name} v1.1.0 就绪 ${cfg.bind}:${cfg.port}`);
+  console.log(`[tdxd] workspace=${cfg.workspace} command=${cfg.command} ${cfg.commandArgs.join(" ")}`);
+  console.log(`[tdxd] idleTTL=${cfg.idleTtlMin}min maxSessions=${cfg.maxSessions} 回调=${cfg.paperclip.url ? "启用" : "未配置"}`);
+});
+
+const shutdown = () => { console.log("[tdxd] 退出，回收全部会话进程"); router.stopAll(); server.close(); process.exit(0); };
+process.on("SIGINT", shutdown);
+process.on("SIGTERM", shutdown);