@jack200714/mafw 4.5.1

package/gateway/dist/routes/usage-plugins.js

@@ -0,0 +1,251 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.handleUsagePluginsList = handleUsagePluginsList;
+exports.handleUsagePluginCreate = handleUsagePluginCreate;
+exports.handleUsagePluginSourceGet = handleUsagePluginSourceGet;
+exports.handleUsagePluginSourcePut = handleUsagePluginSourcePut;
+exports.handleUsagePluginDelete = handleUsagePluginDelete;
+exports.handleUsagePluginTest = handleUsagePluginTest;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const logger_1 = require("../core/utils/logger");
+const templates_1 = require("../usage/templates");
+const NAME_RE = /^[a-z0-9][a-z0-9-]{0,63}$/;
+function json(res, status, payload) {
+    res.writeHead(status, { 'Content-Type': 'application/json' });
+    res.end(JSON.stringify(payload));
+}
+function readBody(req) {
+    return new Promise((resolve, reject) => {
+        let body = '';
+        req.on('data', (chunk) => body += chunk);
+        req.on('end', () => resolve(body));
+        req.on('error', reject);
+    });
+}
+function originOf(deps, s) {
+    if (s.builtin)
+        return 'builtin';
+    if (s.name && deps.loader.isBuiltinName(s.name))
+        return 'override';
+    return 'user';
+}
+/** Name regex already blocks traversal; the prefix check is belt-and-suspenders. */
+function safeUserPath(deps, name) {
+    if (!NAME_RE.test(name))
+        return null;
+    const root = path.resolve(deps.pluginsDir);
+    const p = path.join(root, name + '.js');
+    return p.startsWith(root + path.sep) ? p : null;
+}
+function syntaxCheck(source) {
+    try {
+        new Function(source);
+        return null;
+    }
+    catch (err) {
+        return err.message;
+    }
+}
+function pluginSummary(deps) {
+    return deps.loader.getState().map(s => ({
+        file: s.file,
+        name: s.name,
+        status: s.status,
+        error: s.error,
+        disabled: s.disabled,
+        origin: originOf(deps, s),
+        pluginType: s.pluginType,
+        configSchema: s.configSchema,
+        config: s.name ? deps.getPluginConfig(s.name) : null,
+    }));
+}
+async function handleUsagePluginsList(_req, res, deps) {
+    json(res, 200, { plugins: pluginSummary(deps), templates: templates_1.USAGE_TEMPLATES, builtins: deps.builtinNames() });
+}
+async function handleUsagePluginCreate(req, res, deps) {
+    let body;
+    try {
+        body = JSON.parse(await readBody(req));
+    }
+    catch (err) {
+        json(res, 400, { error: err.message });
+        return;
+    }
+    const values = body?.values ?? {};
+    let name = body?.name ?? values.name;
+    let content;
+    if (body?.template) {
+        if (body.template === 'clone-builtin' && !name)
+            name = values.sourceName;
+        const rendered = (0, templates_1.renderTemplate)(String(body.template), { ...values, name }, { readBuiltinSource: deps.readBuiltinSource });
+        if (!rendered.ok) {
+            json(res, 400, { error: rendered.error });
+            return;
+        }
+        name = rendered.name;
+        content = rendered.content;
+        // clone-builtin targets a builtin name on purpose (override semantics); other templates must not collide
+        if (body.template !== 'clone-builtin' && name && deps.loader.isBuiltinName(name)) {
+            json(res, 409, { error: `name '${name}' collides with a builtin plugin` });
+            return;
+        }
+    }
+    else if (typeof body?.source === 'string' && name) {
+        if (deps.loader.isBuiltinName(String(name))) {
+            json(res, 409, { error: `name '${name}' collides with a builtin plugin` });
+            return;
+        }
+        const err = syntaxCheck(body.source);
+        if (err) {
+            json(res, 400, { error: `syntax error: ${err}` });
+            return;
+        }
+        content = body.source;
+    }
+    else {
+        json(res, 400, { error: 'template+values or name+source required' });
+        return;
+    }
+    if (!name || !NAME_RE.test(name)) {
+        json(res, 400, { error: 'invalid name' });
+        return;
+    }
+    const target = safeUserPath(deps, name);
+    if (!target) {
+        json(res, 400, { error: 'invalid name' });
+        return;
+    }
+    if (fs.existsSync(target)) {
+        json(res, 409, { error: 'plugin file already exists' });
+        return;
+    }
+    try {
+        fs.writeFileSync(target, content);
+    }
+    catch (err) {
+        json(res, 500, { error: err.message });
+        return;
+    }
+    await deps.loader.reload();
+    logger_1.log.info(`[UsagePlugins] created ${name}`);
+    json(res, 200, { ok: true, name, plugins: pluginSummary(deps) });
+}
+async function handleUsagePluginSourceGet(_req, res, deps, name) {
+    const target = safeUserPath(deps, name);
+    if (!target) {
+        json(res, 400, { error: 'invalid name' });
+        return;
+    }
+    if (fs.existsSync(target)) {
+        json(res, 200, { source: fs.readFileSync(target, 'utf8'), origin: deps.loader.isBuiltinName(name) ? 'override' : 'user' });
+        return;
+    }
+    if (deps.loader.isBuiltinName(name)) {
+        json(res, 403, { error: 'builtin plugin source is read-only; clone it to edit', builtin: true });
+        return;
+    }
+    json(res, 404, { error: 'plugin file not found' });
+}
+async function handleUsagePluginSourcePut(req, res, deps, name) {
+    const target = safeUserPath(deps, name);
+    if (!target) {
+        json(res, 400, { error: 'invalid name' });
+        return;
+    }
+    if (!fs.existsSync(target)) {
+        if (deps.loader.isBuiltinName(name)) {
+            json(res, 403, { error: 'builtin plugin source is read-only; clone it to edit', builtin: true });
+            return;
+        }
+        json(res, 404, { error: 'plugin file not found' });
+        return;
+    }
+    let body;
+    try {
+        body = JSON.parse(await readBody(req));
+    }
+    catch (err) {
+        json(res, 400, { error: err.message });
+        return;
+    }
+    if (typeof body?.source !== 'string' || body.source.length === 0) {
+        json(res, 400, { error: 'source required' });
+        return;
+    }
+    const err = syntaxCheck(body.source);
+    if (err) {
+        json(res, 400, { error: `syntax error: ${err}` });
+        return;
+    }
+    try {
+        fs.writeFileSync(target, body.source);
+    }
+    catch (e) {
+        json(res, 500, { error: e.message });
+        return;
+    }
+    await deps.loader.reload();
+    json(res, 200, { ok: true, plugins: pluginSummary(deps) });
+}
+async function handleUsagePluginDelete(_req, res, deps, name) {
+    const target = safeUserPath(deps, name);
+    if (!target) {
+        json(res, 400, { error: 'invalid name' });
+        return;
+    }
+    if (!fs.existsSync(target)) {
+        if (deps.loader.isBuiltinName(name)) {
+            json(res, 403, { error: 'cannot delete a builtin plugin', builtin: true });
+            return;
+        }
+        json(res, 404, { error: 'plugin file not found' });
+        return;
+    }
+    try {
+        fs.unlinkSync(target);
+    }
+    catch (err) {
+        json(res, 500, { error: err.message });
+        return;
+    }
+    await deps.loader.reload();
+    json(res, 200, { ok: true, plugins: pluginSummary(deps) });
+}
+async function handleUsagePluginTest(_req, res, deps, name) {
+    const result = await deps.runAdapter(name);
+    json(res, 200, result);
+}

package/gateway/dist/runtime/agent-definition.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/gateway/dist/runtime/auth.js

@@ -0,0 +1,80 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DEFAULT_AUTH_PATH = void 0;
+exports.readOpencodeAuth = readOpencodeAuth;
+exports.getProviderApiKey = getProviderApiKey;
+/**
+ * Auth utilities — single implementation source for opencode auth.json credential reading.
+ *
+ * Aligns with RuntimeCredentials interface (contract.ts) and plugin ctx apiKey(name) semantics.
+ * opencode-runtime.ts re-exports these for consumer convenience.
+ */
+const fs = __importStar(require("fs"));
+const os = __importStar(require("os"));
+const path = __importStar(require("path"));
+/** opencode auth.json 默认路径（Windows: ~/.local/share/opencode/auth.json）。 */
+const DEFAULT_AUTH_PATH = () => path.join(os.homedir(), '.local', 'share', 'opencode', 'auth.json');
+exports.DEFAULT_AUTH_PATH = DEFAULT_AUTH_PATH;
+/** 读取 opencode auth.json（provider → { type, key }）。失败返回空对象。 */
+function readOpencodeAuth(authPath) {
+    try {
+        const raw = fs.readFileSync(authPath ?? (0, exports.DEFAULT_AUTH_PATH)(), 'utf8');
+        const parsed = JSON.parse(raw);
+        if (parsed && typeof parsed === 'object')
+            return parsed;
+    }
+    catch {
+        /* missing/corrupt → empty */
+    }
+    return {};
+}
+/**
+ * 取指定 provider 的 API key。
+ * 查找顺序：credentials.getApiKey(provider) → auth.json 回退。
+ * 与 plugin ctx 的 apiKey(name) 语义完全一致。
+ */
+function getProviderApiKey(provider, authPath, credentials) {
+    if (credentials) {
+        const key = credentials.getApiKey(provider);
+        if (key)
+            return key;
+    }
+    const auth = readOpencodeAuth(authPath);
+    const cred = auth[provider];
+    if (cred && typeof cred.key === 'string' && cred.key)
+        return cred.key;
+    return undefined;
+}

package/gateway/dist/runtime/completion-http.js

@@ -0,0 +1,97 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveCompletionBaseUrl = resolveCompletionBaseUrl;
+exports.httpComplete = httpComplete;
+const auth_1 = require("./auth");
+/** providerID → chat-completions URL。config scanEndpoints 优先于硬编码表。 */
+function resolveCompletionBaseUrl(providerID, endpoints) {
+    if (!providerID)
+        return undefined;
+    const mapped = endpoints?.[providerID];
+    if (mapped)
+        return mapped;
+    const p = providerID.toLowerCase();
+    if (p.includes('alibaba') || p.includes('dashscope') || p.includes('qwen')) {
+        return 'https://dashscope.aliyuncs.com/compatible-mode/v1/chat/completions';
+    }
+    return undefined;
+}
+function buildUserContent(user) {
+    if (user.length === 1 && user[0].type === 'text')
+        return user[0].text;
+    return user.map((p) => p.type === 'text'
+        ? { type: 'text', text: p.text }
+        : { type: 'image_url', image_url: { url: `data:${p.mimeType};base64,${p.data}` } });
+}
+async function httpComplete(req, deps = {}) {
+    const providerID = req.model.providerID;
+    const baseUrl = deps.baseUrl
+        ?? (await deps.resolveEndpoint?.(providerID) ?? undefined)
+        ?? resolveCompletionBaseUrl(providerID, deps.scanEndpoints);
+    const apiKey = deps.apiKey
+        ?? (await deps.resolveApiKey?.(providerID) ?? undefined)
+        ?? (0, auth_1.getProviderApiKey)(providerID, deps.authPath, deps.credentials);
+    if (!baseUrl || !apiKey) {
+        throw new Error(`completion: no endpoint or API key for provider "${providerID}"`);
+    }
+    const systemContent = (req.system ?? []).map((b) => b.cacheable
+        ? { type: 'text', text: b.text, cache_control: { type: 'ephemeral' } }
+        : { type: 'text', text: b.text });
+    const messages = [];
+    if (systemContent.length > 0)
+        messages.push({ role: 'system', content: systemContent });
+    messages.push({ role: 'user', content: buildUserContent(req.user) });
+    const timeoutMs = req.timeoutMs ?? 30_000;
+    const fetchFn = deps.fetchFn ?? globalThis.fetch.bind(globalThis);
+    const resp = await Promise.race([
+        fetchFn(baseUrl, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json', 'Authorization': `Bearer ${apiKey}` },
+            body: JSON.stringify({
+                model: req.model.modelID,
+                messages,
+                temperature: req.temperature ?? 0,
+                max_tokens: req.maxTokens ?? 4096,
+                ...(req.responseFormat
+                    ? {
+                        response_format: {
+                            type: 'json_schema',
+                            json_schema: {
+                                name: req.responseFormat.name,
+                                schema: req.responseFormat.schema,
+                                ...(req.responseFormat.strict !== undefined ? { strict: req.responseFormat.strict } : {}),
+                            },
+                        },
+                    }
+                    : {}),
+            }),
+        }),
+        new Promise((_, reject) => {
+            const timer = setTimeout(() => reject(new Error('completion timeout')), timeoutMs);
+            timer.unref?.();
+        }),
+    ]);
+    if (!resp?.ok) {
+        const text = await resp?.text?.().catch(() => '') ?? '';
+        throw new Error(`completion failed: HTTP ${resp?.status}: ${String(text).slice(0, 200)}`);
+    }
+    const json = await resp.json();
+    const message = json?.choices?.[0]?.message;
+    let text = typeof message?.content === 'string' ? message.content : '';
+    // Reasoning models may put the answer in reasoning_content when content is empty.
+    if (!text.trim() && typeof message?.reasoning_content === 'string') {
+        text = message.reasoning_content;
+    }
+    const usage = json?.usage;
+    const cached = usage?.prompt_tokens_details?.cached_tokens;
+    return {
+        text,
+        usage: usage
+            ? {
+                input: Math.max(0, (usage.prompt_tokens || 0) - (cached || 0)),
+                cached: cached || 0,
+                output: usage.completion_tokens || 0,
+            }
+            : undefined,
+    };
+}

package/gateway/dist/runtime/contract.js

@@ -0,0 +1,37 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.fullCapabilities = fullCapabilities;
+exports.minimalCapabilities = minimalCapabilities;
+function fullCapabilities() {
+    return {
+        sessionApi: true,
+        promptWhileBusy: true,
+        eventStream: true,
+        nativeApprovals: true,
+        providerConfigApi: true,
+        perLlmCallTransform: true,
+        sessionStorageApi: true,
+        agentConfigApi: true,
+        agentProcessApi: true,
+        completionApi: true,
+        sessionBranchApi: true,
+        turnBudgetApi: true,
+        questionApi: true,
+    };
+}
+function minimalCapabilities() {
+    return {
+        sessionApi: true,
+        promptWhileBusy: true,
+        eventStream: false,
+        nativeApprovals: false,
+        providerConfigApi: false,
+        perLlmCallTransform: false,
+        sessionStorageApi: false,
+        agentConfigApi: false,
+        agentProcessApi: false,
+        sessionBranchApi: false,
+        turnBudgetApi: false,
+        questionApi: false,
+    };
+}