@jack200714/mafw 4.5.2 → 4.10.1

package/gateway/dist/media/media-plugin-loader.js

@@ -44,6 +44,8 @@ class MediaPluginLoader {
     pluginsDir;
     state = new Map();
     engines = new Map();
+    builtinEngines = new Map();
+    packageEngines = new Map();
     watcher;
     debounceTimer;
     getCredentials;
@@ -60,7 +62,6 @@ class MediaPluginLoader {
         if (!fs.existsSync(this.pluginsDir)) {
             fs.mkdirSync(this.pluginsDir, { recursive: true });
             fs.writeFileSync(path.join(this.pluginsDir, 'README.md'), README_CONTENT);
-            fs.writeFileSync(path.join(this.pluginsDir, 'example.js.disabled'), EXAMPLE_CONTENT);
             logger_1.log.info(`[MediaPluginLoader] Created ${this.pluginsDir}`);
         }
     }
@@ -147,8 +148,30 @@ class MediaPluginLoader {
             logger_1.log.warn(`[MediaPluginLoader] ${file} load error: ${err.message}`);
         }
     }
+    /** 内置引擎登记（如 pi）。prompt 是占位——真正的内置路径由 resolveMediaPrompt 在调用点解析。 */
+    registerBuiltinEngine(name, modalities) {
+        this.builtinEngines.set(name, {
+            prompt: (async () => { throw new Error('builtin engine prompt is resolved at call site'); }),
+            modalities,
+            builtin: true,
+        });
+    }
+    getBuiltinEngineNames() {
+        return [...this.builtinEngines.keys()];
+    }
+    /** PluginHost 推送的包贡献。同名覆盖 legacy 与内置。 */
+    setPackageEntries(entries) {
+        this.packageEngines = new Map(entries.map((e) => [e.name, e]));
+    }
     getEngines() {
-        return this.engines;
+        // 合并顺序：内置 → legacy 文件 → 包（后者覆盖前者同名）
+        const merged = new Map(this.builtinEngines);
+        for (const [name, e] of this.engines)
+            merged.set(name, e);
+        for (const [name, e] of this.packageEngines) {
+            merged.set(name, { prompt: e.prompt, modalities: e.modalities, source: e.source });
+        }
+        return merged;
     }
     getState() {
         return [...this.state.values()];
@@ -241,14 +264,3 @@ media:
     engine: qwen-vl       # override for video
 \`\`\`
 `;
-const EXAMPLE_CONTENT = `// Rename to example.js to activate
-module.exports = {
-  name: "example",
-  modalities: ["image"],
-  async createPrompt(ctx) {
-    return async (parts, opts) => {
-      return "Example analysis result";
-    };
-  },
-};
-`;

package/gateway/dist/media/resolve-prompt.js

@@ -0,0 +1,20 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveMediaPrompt = resolveMediaPrompt;
+/** media 引擎解析（deps 注入可单测）。用户引擎可同名覆盖内置 pi。 */
+const logger_1 = require("../core/utils/logger");
+function resolveMediaPrompt(engineName, kind, deps) {
+    const engine = deps.engines.get(engineName);
+    if (!engine) {
+        if (engineName !== 'pi')
+            logger_1.log.warn(`[MediaService] engine '${engineName}' not found, falling back to pi`);
+        return deps.builtinPi();
+    }
+    if (engine.builtin)
+        return deps.builtinPi();
+    if (!engine.modalities.includes(kind)) {
+        logger_1.log.warn(`[MediaService] engine '${engineName}' does not support modality '${kind}', falling back to pi`);
+        return deps.builtinPi();
+    }
+    return engine.prompt;
+}

package/gateway/dist/memory/gateway-db.js

@@ -371,6 +371,12 @@ class GatewayDatabase {
         return this.db.prepare('SELECT COUNT(*) AS c FROM t1_observations').get().c;
     }
     // ── KV store (small critical state) ─────────────────────────────────────
+    // Scope 归属规范（新增 scope 必须声明一类）：
+    // - runtime-scoped：生命周期绑定当前 agent runtime（会话 id 属于 runtime 存储），
+    //   切换时由 Scheduler.invalidateRuntimeScopedKv 统一失效——
+    //   manager-session / internal-session / reflect-cursor
+    // - durable：跨 runtime 有效——registry/snapshot / milestone-notified
+    // runtime-scoped 条目的 value 必须携带 `at`（ISO 日期）供 TTL/审计。
     kvGet(scope, key) {
         const row = this.db.prepare('SELECT value FROM kv_store WHERE scope = ? AND key = ?').get(scope, key);
         if (!row)
@@ -402,6 +408,23 @@ class GatewayDatabase {
             }
         });
     }
+    kvClearScope(scope) {
+        const info = this.db.prepare('DELETE FROM kv_store WHERE scope = ?').run(scope);
+        return info.changes;
+    }
+    kvPruneOlderThan(scope, ttlDays) {
+        const now = Date.now();
+        let removed = 0;
+        for (const { key, value } of this.kvAll(scope)) {
+            const at = value && typeof value === 'object' ? value.at : undefined;
+            const ts = typeof at === 'string' ? Date.parse(at) : NaN;
+            if (!isNaN(ts) && now - ts > ttlDays * 86_400_000) {
+                this.kvDelete(scope, key);
+                removed++;
+            }
+        }
+        return removed;
+    }
     // ── Goal outcomes (RSI Phase 1) ─────────────────────────────────────────
     upsertGoalOutcome(o) {
         this.db.prepare(`

package/gateway/dist/opencode-adapter.js

@@ -27,6 +27,28 @@ function messageToParts(message, parts) {
 async function createOpencodeAdapter(config) {
     const { createOpencodeClient } = await import('@opencode-ai/sdk/v2');
     const client = createOpencodeClient(config);
+    // opencode 原生 V1 路由的 workspace 路由细节收敛在 adapter 内（契约保持
+    // runtime 中立）——带 directory 的调用直连 fetch（V2 SDK 调用不带 workspace 语义）。
+    const directNative = async (path, method, body, directory) => {
+        const url = `${config.baseUrl}${path}${directory ? `?directory=${encodeURIComponent(directory)}` : ''}`;
+        const res = await fetch(url, {
+            method,
+            headers: {
+                ...(body !== undefined ? { 'content-type': 'application/json' } : {}),
+                ...(directory ? { 'x-opencode-directory': encodeURIComponent(directory) } : {}),
+                ...(config.headers ?? {}),
+            },
+            ...(body !== undefined ? { body: JSON.stringify(body) } : {}),
+        });
+        if (!res.ok)
+            throw new Error(`opencode native ${path} failed: ${res.status}`);
+        try {
+            return await res.json();
+        }
+        catch {
+            return null;
+        }
+    };
     return {
         session: {
             async create(opts) {
@@ -192,6 +214,10 @@ async function createOpencodeAdapter(config) {
                     return Array.isArray(data) ? data : data?.items ?? [];
                 },
                 async reply(opts) {
+                    if (opts.directory) {
+                        await directNative(`/question/${opts.requestID}/reply`, 'POST', { answers: opts.answers }, opts.directory);
+                        return;
+                    }
                     const result = await client.session.question.reply({
                         requestID: opts.requestID,
                         answers: opts.answers,
@@ -201,12 +227,20 @@ async function createOpencodeAdapter(config) {
                     }
                 },
                 async reject(opts) {
+                    if (opts.directory) {
+                        await directNative(`/question/${opts.requestID}/reject`, 'POST', undefined, opts.directory);
+                        return;
+                    }
                     const result = await client.session.question.reject({ requestID: opts.requestID });
                     if (result && typeof result === 'object' && 'error' in result && result.error) {
                         throw new Error(String(result.error));
                     }
                 },
             },
+            async permissionList(opts) {
+                const data = await directNative('/permission', 'GET', undefined, opts?.directory);
+                return Array.isArray(data) ? data : data?.items ?? [];
+            },
         },
         global: {
             event() {

package/gateway/dist/plugins/hub.js

@@ -36,11 +36,14 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.HubError = void 0;
 exports.parseType = parseType;
 exports.listPlugins = listPlugins;
+exports.cleanupExamples = cleanupExamples;
 exports.installPlugin = installPlugin;
 exports.setPluginEnabled = setPluginEnabled;
 exports.deletePlugin = deletePlugin;
 const fs = __importStar(require("fs"));
+const os = __importStar(require("os"));
 const path = __importStar(require("path"));
+const logger_1 = require("../core/utils/logger");
 class HubError extends Error {
     status;
     constructor(status, message) {
@@ -87,6 +90,19 @@ function statEntry(type, dir, file) {
     };
 }
 function listPlugins(deps) {
+    const userEntries = collectUserEntries(deps);
+    const builtins = (deps.builtinEntries?.() ?? []).map((e) => ({ ...e, builtin: true }));
+    const userKeys = new Set(userEntries.map((e) => `${e.type}/${e.name}`));
+    const configDisabled = deps.configDisabledUsage?.() ?? new Set();
+    for (const b of builtins) {
+        if (userKeys.has(`${b.type}/${b.name}`))
+            b.overridden = true;
+        if (b.type === 'usage' && configDisabled.has(b.name) && b.status === 'enabled')
+            b.status = 'config-disabled';
+    }
+    return [...builtins, ...userEntries];
+}
+function collectUserEntries(deps) {
     const entries = [];
     for (const type of PLUGIN_TYPES) {
         const dir = deps.dirs[type];
@@ -130,24 +146,52 @@ function listPlugins(deps) {
     }
     return entries;
 }
-function decodeContent(contentBase64, maxBytes) {
-    if (typeof contentBase64 !== 'string' || contentBase64.length === 0)
-        throw new HubError(400, 'empty content');
-    const buf = Buffer.from(contentBase64, 'base64');
-    if (buf.length === 0)
-        throw new HubError(400, 'empty content');
-    // round-trip check rejects non-base64 garbage
-    if (buf.toString('base64') !== contentBase64)
-        throw new HubError(400, 'content is not valid base64');
-    if (buf.length > maxBytes)
-        throw new HubError(413, `content exceeds ${maxBytes} bytes`);
-    return buf;
+function cleanupExamples(deps) {
+    const removed = [];
+    const failed = [];
+    for (const dir of Object.values(deps.dirs)) {
+        const target = path.join(dir, 'example.js.disabled');
+        try {
+            if (fs.existsSync(target)) {
+                fs.unlinkSync(target);
+                removed.push(target);
+            }
+        }
+        catch {
+            failed.push(target);
+        }
+    }
+    return { removed, failed };
 }
 async function installPlugin(deps, input) {
-    const type = parseType(input.type);
     const filename = validateFilename(input.filename);
     if (!filename.endsWith('.js'))
         throw new HubError(400, `install filename must end with .js: ${filename}`);
+    const maxBytes = deps.maxBytes ?? DEFAULT_MAX_BYTES;
+    if (!Buffer.isBuffer(input.bytes) || input.bytes.length === 0)
+        throw new HubError(400, 'empty content');
+    if (input.bytes.length > maxBytes)
+        throw new HubError(413, `content exceeds ${maxBytes} bytes`);
+    const explicitType = input.type ? parseType(input.type) : undefined;
+    const { matches, mod } = inspectPlugin(filename, input.bytes);
+    validateName(mod, filename);
+    let type;
+    if (matches.length === 0)
+        throw new HubError(400, 'unrecognized plugin interface: export createRuntime / createPrompt / fetch / tools');
+    if (explicitType) {
+        if (!matches.includes(explicitType)) {
+            const listing = matches.map((m) => `${m} (${MATCH_IFACE[m]})`).join('/');
+            throw new HubError(400, `plugin interface mismatch: selected ${explicitType}, exports ${listing}`);
+        }
+        type = explicitType;
+    }
+    else {
+        if (matches.length > 1)
+            throw new HubError(400, `ambiguous plugin interface: ${matches.join('/')}`);
+        type = matches[0];
+    }
+    if (type === 'media')
+        await validateMediaActivation(mod);
     const dir = deps.dirs[type];
     fs.mkdirSync(dir, { recursive: true });
     const target = resolveInDir(dir, filename);
@@ -156,23 +200,113 @@ async function installPlugin(deps, input) {
     if (!input.overwrite && (fs.existsSync(dup) || fs.existsSync(dupDisabled))) {
         throw new HubError(409, `plugin already exists: ${filename}`);
     }
-    const buf = decodeContent(input.contentBase64, deps.maxBytes ?? DEFAULT_MAX_BYTES);
     const tmp = `${target}.tmp`;
-    fs.writeFileSync(tmp, buf);
+    fs.writeFileSync(tmp, input.bytes);
     fs.renameSync(tmp, target);
     await deps.reload?.(type);
     return statEntry(type, dir, filename);
 }
+const MATCH_IFACE = {
+    runtime: 'createRuntime',
+    media: 'createPrompt',
+    usage: 'fetch',
+    ui: 'tools',
+};
+function computeMatches(mod) {
+    const matches = [];
+    if (typeof mod?.createRuntime === 'function')
+        matches.push('runtime');
+    if (typeof mod?.createPrompt === 'function' || typeof mod?.fixPayload === 'function'
+        || typeof mod?.engine === 'string' || Array.isArray(mod?.modalities))
+        matches.push('media');
+    if (typeof mod?.fetch === 'function'
+        && (mod.type === undefined || mod.type === 'api' || mod.type === 'token-plan' || mod.type === 'local'))
+        matches.push('usage');
+    if (mod?.tools && typeof mod.tools === 'object' && Object.keys(mod.tools).length > 0)
+        matches.push('ui');
+    return matches;
+}
+function inspectPlugin(filename, bytes) {
+    const tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), 'mafw-hub-sniff-'));
+    const tmpFile = path.join(tmpDir, filename);
+    try {
+        fs.writeFileSync(tmpFile, bytes);
+        try {
+            delete require.cache[require.resolve(tmpFile)];
+        }
+        catch { /* first load */ }
+        let mod;
+        try {
+            mod = require(tmpFile);
+        }
+        catch (err) {
+            throw new HubError(400, `plugin failed to load: ${err.message}`);
+        }
+        return { matches: computeMatches(mod), mod };
+    }
+    finally {
+        try {
+            fs.rmSync(tmpDir, { recursive: true, force: true });
+        }
+        catch { /* best effort */ }
+    }
+}
+function validateName(mod, filename) {
+    const name = mod?.name;
+    if (typeof name !== 'string' || name.length === 0)
+        throw new HubError(400, 'missing plugin name');
+    const stem = baseName(filename);
+    if (name !== stem) {
+        throw new HubError(400, `plugin name mismatch: exports '${name}', filename '${filename}' (must match)`);
+    }
+}
+const VALID_MODALITIES = new Set(['image', 'video', 'audio']);
+const STUB_MEDIA_CTX = {
+    apiKey: () => null,
+    fetch: (url, opts) => fetch(url, opts),
+    pluginConfig: () => null,
+    log: logger_1.log,
+};
+async function validateMediaActivation(mod) {
+    const modalities = mod?.modalities;
+    if (!Array.isArray(modalities) || modalities.length === 0
+        || !modalities.every((m) => VALID_MODALITIES.has(m))) {
+        throw new HubError(400, 'invalid modalities');
+    }
+    const hasCreatePrompt = typeof mod?.createPrompt === 'function';
+    const hasPiEngine = mod?.engine === 'pi';
+    if (!hasCreatePrompt && !hasPiEngine)
+        throw new HubError(400, 'missing createPrompt() or engine:"pi"');
+    if (hasCreatePrompt && hasPiEngine)
+        throw new HubError(400, 'createPrompt and engine:"pi" are mutually exclusive');
+    if (hasCreatePrompt) {
+        const fn = await mod.createPrompt(STUB_MEDIA_CTX);
+        if (typeof fn !== 'function')
+            throw new HubError(400, 'createPrompt did not return a function');
+    }
+}
 async function setPluginEnabled(deps, input) {
     const type = parseType(input.type);
     const filename = validateFilename(input.filename);
     const dir = deps.dirs[type];
-    const current = resolveInDir(dir, filename);
-    if (!fs.existsSync(current))
+    // Accept either on-disk state: a stale client snapshot (double-toggled
+    // switch, unrefreshed list) sends the opposite-state filename, which must
+    // resolve idempotently instead of 404ing ("激活 not found").
+    const primary = resolveInDir(dir, filename);
+    const variant = /\.js\.disabled$/.test(filename)
+        ? filename.replace(/\.js\.disabled$/, '.js')
+        : filename.replace(/\.js$/, '.js.disabled');
+    const variantPath = resolveInDir(dir, variant);
+    const current = fs.existsSync(primary) ? primary : fs.existsSync(variantPath) ? variantPath : null;
+    if (!current)
         throw new HubError(404, `plugin file not found: ${filename}`);
-    const nextName = input.enabled ? filename.replace(/\.js\.disabled$/, '.js') : filename.replace(/\.js$/, '.js.disabled');
+    const currentName = path.basename(current);
+    const nextName = input.enabled
+        ? currentName.replace(/\.js\.disabled$/, '.js')
+        : currentName.replace(/\.js$/, '.js.disabled');
     const next = resolveInDir(dir, nextName);
-    fs.renameSync(current, next);
+    if (next !== current)
+        fs.renameSync(current, next);
     await deps.reload?.(type);
     return statEntry(type, dir, nextName);
 }

package/gateway/dist/plugins/package-context.js

@@ -0,0 +1,24 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createPluginPackageContext = createPluginPackageContext;
+const config_1 = require("../config");
+const logger_1 = require("../core/utils/logger");
+const auth_1 = require("../runtime/auth");
+const EMPTY_USAGE = { modelStats: () => [] };
+function createPluginPackageContext(name, deps) {
+    return {
+        log: logger_1.log,
+        fetch: (url, opts) => fetch(url, { ...opts, signal: opts?.signal ?? AbortSignal.timeout(60_000) }),
+        apiKey: (provider) => (0, auth_1.getProviderApiKey)(provider, undefined, deps.getCredentials?.()) ?? null,
+        pluginConfig: () => config_1.config.raw?.plugins?.[name]?.config
+            ?? config_1.config.raw?.usage?.pluginConfig?.[name]
+            ?? config_1.config.raw?.media?.pluginConfig?.[name]
+            ?? config_1.config.raw?.runtime?.pluginConfig?.[name]
+            ?? {},
+        credentials: deps.getCredentials?.(),
+        projectDir: deps.projectDir,
+        gatewayPort: deps.gatewayPort,
+        usage: deps.usageStats?.() ?? EMPTY_USAGE,
+        emit: (event) => deps.emit?.(event),
+    };
+}