@jack200714/mafw 4.8.0 → 4.10.1

package/gateway/dist/media/media-plugin-loader.js

@@ -44,6 +44,8 @@ class MediaPluginLoader {
     pluginsDir;
     state = new Map();
     engines = new Map();
+    builtinEngines = new Map();
+    packageEngines = new Map();
     watcher;
     debounceTimer;
     getCredentials;
@@ -146,8 +148,30 @@ class MediaPluginLoader {
             logger_1.log.warn(`[MediaPluginLoader] ${file} load error: ${err.message}`);
         }
     }
+    /** 内置引擎登记（如 pi）。prompt 是占位——真正的内置路径由 resolveMediaPrompt 在调用点解析。 */
+    registerBuiltinEngine(name, modalities) {
+        this.builtinEngines.set(name, {
+            prompt: (async () => { throw new Error('builtin engine prompt is resolved at call site'); }),
+            modalities,
+            builtin: true,
+        });
+    }
+    getBuiltinEngineNames() {
+        return [...this.builtinEngines.keys()];
+    }
+    /** PluginHost 推送的包贡献。同名覆盖 legacy 与内置。 */
+    setPackageEntries(entries) {
+        this.packageEngines = new Map(entries.map((e) => [e.name, e]));
+    }
     getEngines() {
-        return this.engines;
+        // 合并顺序：内置 → legacy 文件 → 包（后者覆盖前者同名）
+        const merged = new Map(this.builtinEngines);
+        for (const [name, e] of this.engines)
+            merged.set(name, e);
+        for (const [name, e] of this.packageEngines) {
+            merged.set(name, { prompt: e.prompt, modalities: e.modalities, source: e.source });
+        }
+        return merged;
     }
     getState() {
         return [...this.state.values()];

package/gateway/dist/media/resolve-prompt.js

@@ -0,0 +1,20 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveMediaPrompt = resolveMediaPrompt;
+/** media 引擎解析（deps 注入可单测）。用户引擎可同名覆盖内置 pi。 */
+const logger_1 = require("../core/utils/logger");
+function resolveMediaPrompt(engineName, kind, deps) {
+    const engine = deps.engines.get(engineName);
+    if (!engine) {
+        if (engineName !== 'pi')
+            logger_1.log.warn(`[MediaService] engine '${engineName}' not found, falling back to pi`);
+        return deps.builtinPi();
+    }
+    if (engine.builtin)
+        return deps.builtinPi();
+    if (!engine.modalities.includes(kind)) {
+        logger_1.log.warn(`[MediaService] engine '${engineName}' does not support modality '${kind}', falling back to pi`);
+        return deps.builtinPi();
+    }
+    return engine.prompt;
+}

package/gateway/dist/memory/gateway-db.js

@@ -371,6 +371,12 @@ class GatewayDatabase {
         return this.db.prepare('SELECT COUNT(*) AS c FROM t1_observations').get().c;
     }
     // ── KV store (small critical state) ─────────────────────────────────────
+    // Scope 归属规范（新增 scope 必须声明一类）：
+    // - runtime-scoped：生命周期绑定当前 agent runtime（会话 id 属于 runtime 存储），
+    //   切换时由 Scheduler.invalidateRuntimeScopedKv 统一失效——
+    //   manager-session / internal-session / reflect-cursor
+    // - durable：跨 runtime 有效——registry/snapshot / milestone-notified
+    // runtime-scoped 条目的 value 必须携带 `at`（ISO 日期）供 TTL/审计。
     kvGet(scope, key) {
         const row = this.db.prepare('SELECT value FROM kv_store WHERE scope = ? AND key = ?').get(scope, key);
         if (!row)
@@ -402,6 +408,23 @@ class GatewayDatabase {
             }
         });
     }
+    kvClearScope(scope) {
+        const info = this.db.prepare('DELETE FROM kv_store WHERE scope = ?').run(scope);
+        return info.changes;
+    }
+    kvPruneOlderThan(scope, ttlDays) {
+        const now = Date.now();
+        let removed = 0;
+        for (const { key, value } of this.kvAll(scope)) {
+            const at = value && typeof value === 'object' ? value.at : undefined;
+            const ts = typeof at === 'string' ? Date.parse(at) : NaN;
+            if (!isNaN(ts) && now - ts > ttlDays * 86_400_000) {
+                this.kvDelete(scope, key);
+                removed++;
+            }
+        }
+        return removed;
+    }
     // ── Goal outcomes (RSI Phase 1) ─────────────────────────────────────────
     upsertGoalOutcome(o) {
         this.db.prepare(`

package/gateway/dist/opencode-adapter.js

@@ -27,6 +27,28 @@ function messageToParts(message, parts) {
 async function createOpencodeAdapter(config) {
     const { createOpencodeClient } = await import('@opencode-ai/sdk/v2');
     const client = createOpencodeClient(config);
+    // opencode 原生 V1 路由的 workspace 路由细节收敛在 adapter 内（契约保持
+    // runtime 中立）——带 directory 的调用直连 fetch（V2 SDK 调用不带 workspace 语义）。
+    const directNative = async (path, method, body, directory) => {
+        const url = `${config.baseUrl}${path}${directory ? `?directory=${encodeURIComponent(directory)}` : ''}`;
+        const res = await fetch(url, {
+            method,
+            headers: {
+                ...(body !== undefined ? { 'content-type': 'application/json' } : {}),
+                ...(directory ? { 'x-opencode-directory': encodeURIComponent(directory) } : {}),
+                ...(config.headers ?? {}),
+            },
+            ...(body !== undefined ? { body: JSON.stringify(body) } : {}),
+        });
+        if (!res.ok)
+            throw new Error(`opencode native ${path} failed: ${res.status}`);
+        try {
+            return await res.json();
+        }
+        catch {
+            return null;
+        }
+    };
     return {
         session: {
             async create(opts) {
@@ -192,6 +214,10 @@ async function createOpencodeAdapter(config) {
                     return Array.isArray(data) ? data : data?.items ?? [];
                 },
                 async reply(opts) {
+                    if (opts.directory) {
+                        await directNative(`/question/${opts.requestID}/reply`, 'POST', { answers: opts.answers }, opts.directory);
+                        return;
+                    }
                     const result = await client.session.question.reply({
                         requestID: opts.requestID,
                         answers: opts.answers,
@@ -201,12 +227,20 @@ async function createOpencodeAdapter(config) {
                     }
                 },
                 async reject(opts) {
+                    if (opts.directory) {
+                        await directNative(`/question/${opts.requestID}/reject`, 'POST', undefined, opts.directory);
+                        return;
+                    }
                     const result = await client.session.question.reject({ requestID: opts.requestID });
                     if (result && typeof result === 'object' && 'error' in result && result.error) {
                         throw new Error(String(result.error));
                     }
                 },
             },
+            async permissionList(opts) {
+                const data = await directNative('/permission', 'GET', undefined, opts?.directory);
+                return Array.isArray(data) ? data : data?.items ?? [];
+            },
         },
         global: {
             event() {

package/gateway/dist/plugins/package-context.js

@@ -0,0 +1,24 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createPluginPackageContext = createPluginPackageContext;
+const config_1 = require("../config");
+const logger_1 = require("../core/utils/logger");
+const auth_1 = require("../runtime/auth");
+const EMPTY_USAGE = { modelStats: () => [] };
+function createPluginPackageContext(name, deps) {
+    return {
+        log: logger_1.log,
+        fetch: (url, opts) => fetch(url, { ...opts, signal: opts?.signal ?? AbortSignal.timeout(60_000) }),
+        apiKey: (provider) => (0, auth_1.getProviderApiKey)(provider, undefined, deps.getCredentials?.()) ?? null,
+        pluginConfig: () => config_1.config.raw?.plugins?.[name]?.config
+            ?? config_1.config.raw?.usage?.pluginConfig?.[name]
+            ?? config_1.config.raw?.media?.pluginConfig?.[name]
+            ?? config_1.config.raw?.runtime?.pluginConfig?.[name]
+            ?? {},
+        credentials: deps.getCredentials?.(),
+        projectDir: deps.projectDir,
+        gatewayPort: deps.gatewayPort,
+        usage: deps.usageStats?.() ?? EMPTY_USAGE,
+        emit: (event) => deps.emit?.(event),
+    };
+}

package/gateway/dist/plugins/package-host.js

@@ -0,0 +1,331 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PluginHost = void 0;
+/**
+ * 统一插件包宿主 —— 扫 ~/.mafw/plugins/（单文件包 *.js / 目录包 plugin.json+入口），
+ * 激活后把贡献分发给三个 legacy loader（setPackageEntries）。fail-open。
+ * 优先级（同名）：包 > legacy 目录文件 > 内置。
+ */
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const logger_1 = require("../core/utils/logger");
+const pi_adapter_1 = require("../media/pi-adapter");
+const VALID_MODALITIES = new Set(['image', 'video', 'audio']);
+class PluginHost {
+    dir;
+    createContext;
+    state = new Map();
+    watcher;
+    dirWatchers = new Map();
+    debounce;
+    /** 当前目录包的子目录绝对路径（refreshDirWatchers 用） */
+    pkgDirs = [];
+    runtimeCb;
+    mediaCb;
+    usageCb;
+    lastRuntime = [];
+    lastMedia = [];
+    lastUsage = [];
+    constructor(dir, createContext) {
+        this.dir = dir;
+        this.createContext = createContext;
+    }
+    bindRuntime(cb) { this.runtimeCb = cb; cb(this.lastRuntime); }
+    bindMedia(cb) { this.mediaCb = cb; cb(this.lastMedia); }
+    bindUsage(cb) { this.usageCb = cb; cb(this.lastUsage); }
+    async init() {
+        this.ensureDir();
+        await this.reload();
+        this.startWatch();
+    }
+    getState() {
+        return [...this.state.values()].sort((a, b) => a.name.localeCompare(b.name));
+    }
+    stop() {
+        this.watcher?.close();
+        for (const w of this.dirWatchers.values())
+            w.close();
+        this.dirWatchers.clear();
+        if (this.debounce)
+            clearTimeout(this.debounce);
+    }
+    ensureDir() {
+        if (!fs.existsSync(this.dir)) {
+            fs.mkdirSync(this.dir, { recursive: true });
+            fs.writeFileSync(path.join(this.dir, 'README.md'), README_CONTENT);
+            logger_1.log.info(`[PluginHost] Created ${this.dir}`);
+        }
+    }
+    /** 全量重扫 + 重新激活 + 一次性推送（跨面原子：先全部激活完再推各 loader）。 */
+    async reload() {
+        const next = new Map();
+        const runtime = [];
+        const media = [];
+        const usage = [];
+        const pkgDirs = [];
+        for (const desc of this.scanDescriptors(next)) {
+            if (desc.pkgDir)
+                pkgDirs.push(desc.pkgDir);
+            try {
+                const c = await this.activate(desc);
+                if (c.runtime)
+                    runtime.push(c.runtime);
+                if (c.media)
+                    media.push(c.media);
+                if (c.usage)
+                    usage.push(c.usage);
+                next.set(desc.name, {
+                    name: desc.name, source: desc.mainFile, status: 'ok',
+                    contributions: c.contributions, version: desc.manifest?.version,
+                });
+            }
+            catch (err) {
+                next.set(desc.name, { name: desc.name, source: desc.mainFile, status: 'error', error: err.message, contributions: [] });
+                logger_1.log.warn(`[PluginHost] ${desc.name} activate error: ${err.message}`);
+            }
+        }
+        this.state = next;
+        this.pkgDirs = pkgDirs;
+        this.lastRuntime = runtime;
+        this.lastMedia = media;
+        this.lastUsage = usage;
+        this.runtimeCb?.(runtime);
+        this.mediaCb?.(media);
+        this.usageCb?.(usage);
+        this.refreshDirWatchers();
+    }
+    /** 每个目录包一个 watcher（跨平台——不用 recursive）。reload 后按当前包集合增删。 */
+    refreshDirWatchers() {
+        if (!this.watcher)
+            return; // 顶层 watch 未建立（init 前手动 reload）则不建
+        const wanted = new Set(this.pkgDirs);
+        for (const [dir, w] of this.dirWatchers) {
+            if (!wanted.has(dir)) {
+                w.close();
+                this.dirWatchers.delete(dir);
+            }
+        }
+        for (const dir of wanted) {
+            if (this.dirWatchers.has(dir))
+                continue;
+            try {
+                const w = fs.watch(dir, () => {
+                    if (this.debounce)
+                        clearTimeout(this.debounce);
+                    this.debounce = setTimeout(() => {
+                        void this.reload().catch((err) => logger_1.log.warn(`[PluginHost] reload error: ${err.message}`));
+                    }, 300);
+                });
+                this.dirWatchers.set(dir, w);
+            }
+            catch { /* 单个目录不可 watch → 跳过，fail-open */ }
+        }
+    }
+    /** 枚举候选包；逐条错误记入 errorStates（不抛出）。 */
+    scanDescriptors(errorStates) {
+        const out = [];
+        if (!fs.existsSync(this.dir))
+            return out;
+        const entries = fs.readdirSync(this.dir, { withFileTypes: true })
+            .sort((a, b) => a.name.localeCompare(b.name));
+        for (const entry of entries) {
+            try {
+                if (entry.isFile() && entry.name.endsWith('.js')) {
+                    out.push({ name: entry.name.replace(/\.js$/, ''), mainFile: path.join(this.dir, entry.name) });
+                }
+                else if (entry.isDirectory()) {
+                    const pkgDir = path.join(this.dir, entry.name);
+                    const manifestPath = path.join(pkgDir, 'plugin.json');
+                    let manifest;
+                    if (fs.existsSync(manifestPath)) {
+                        manifest = JSON.parse(fs.readFileSync(manifestPath, 'utf-8'));
+                    }
+                    const mainFile = path.join(pkgDir, manifest?.main ?? 'index.js');
+                    if (!fs.existsSync(mainFile))
+                        throw new Error(`main file not found: ${manifest?.main ?? 'index.js'}`);
+                    out.push({ name: manifest?.name ?? entry.name, mainFile, manifest, pkgDir });
+                }
+            }
+            catch (err) {
+                errorStates.set(entry.name, { name: entry.name, source: path.join(this.dir, entry.name), status: 'error', error: err.message, contributions: [] });
+            }
+        }
+        return out;
+    }
+    async activate(desc) {
+        try {
+            delete require.cache[require.resolve(desc.mainFile)];
+        }
+        catch { /* first load */ }
+        const mod = require(desc.mainFile);
+        const modName = mod?.name;
+        if (typeof modName !== 'string' || !modName)
+            throw new Error('missing name');
+        if (modName !== desc.name)
+            throw new Error(`name mismatch: exports '${modName}', package '${desc.name}'`);
+        const ctx = this.createContext(modName);
+        const contribs = typeof mod.activate === 'function' ? ((await mod.activate(ctx)) ?? {}) : pickContributions(mod);
+        const kinds = [];
+        let runtime;
+        let media;
+        let usage;
+        if (contribs.usage) {
+            const u = contribs.usage;
+            if (typeof u.name !== 'string' || !u.name)
+                throw new Error('usage contribution missing name');
+            if (typeof u.fetch !== 'function')
+                throw new Error('usage contribution missing fetch(ctx)');
+            usage = { mod: u, source: desc.mainFile };
+            kinds.push('usage');
+        }
+        if (contribs.media) {
+            const spec = contribs.media;
+            if (!Array.isArray(spec.modalities) || spec.modalities.length === 0
+                || !spec.modalities.every((m) => VALID_MODALITIES.has(m)))
+                throw new Error('media: invalid modalities');
+            const hasCreatePrompt = typeof spec.createPrompt === 'function';
+            const hasPiEngine = spec.engine === 'pi';
+            if (hasCreatePrompt === hasPiEngine)
+                throw new Error('media: createPrompt and engine:"pi" are mutually exclusive');
+            const prompt = hasCreatePrompt
+                ? await spec.createPrompt(ctx)
+                : (0, pi_adapter_1.createPiPromptAdapter)({ fixPayload: spec.fixPayload, credentials: ctx.credentials });
+            if (typeof prompt !== 'function')
+                throw new Error('media: createPrompt did not return a function');
+            media = { name: spec.name ?? modName, prompt, modalities: spec.modalities, source: desc.mainFile };
+            kinds.push('media');
+        }
+        if (contribs.runtime) {
+            const spec = contribs.runtime;
+            if (typeof spec.createRuntime !== 'function')
+                throw new Error('runtime: missing createRuntime(ctx)');
+            runtime = {
+                name: spec.name ?? modName,
+                // 包 runtime 一律拿统一 ctx（忽略 loader 传入的 legacy ctx）
+                createRuntime: (_ignored) => spec.createRuntime(ctx),
+                capabilities: spec.capabilities ?? {},
+                external: spec.external !== false,
+                source: desc.mainFile,
+            };
+            kinds.push('runtime');
+        }
+        if (contribs.uiTools) {
+            // 声明期字段级校验：桌面 validateCard 是运行时兜底，形状错位应在激活期暴露
+            if (typeof contribs.uiTools !== 'object' || Array.isArray(contribs.uiTools)) {
+                throw new Error(`uiTools must be an object (got ${typeof contribs.uiTools})`);
+            }
+            for (const [tool, def] of Object.entries(contribs.uiTools)) {
+                if (!def || typeof def !== 'object' || Array.isArray(def)) {
+                    throw new Error(`uiTools.${tool} must be an object (got ${Array.isArray(def) ? 'array' : typeof def})`);
+                }
+            }
+            kinds.push('uiTools');
+        }
+        if (kinds.length === 0)
+            throw new Error('no contributions (usage/media/runtime/uiTools)');
+        return { contributions: kinds, runtime, media, usage };
+    }
+    startWatch() {
+        if (!fs.existsSync(this.dir))
+            return;
+        try {
+            this.watcher = fs.watch(this.dir, () => {
+                if (this.debounce)
+                    clearTimeout(this.debounce);
+                this.debounce = setTimeout(() => {
+                    if (!fs.existsSync(this.dir)) {
+                        this.watcher?.close();
+                        this.watcher = undefined;
+                        return;
+                    }
+                    void this.reload().catch((err) => logger_1.log.warn(`[PluginHost] reload error: ${err.message}`));
+                }, 300);
+            });
+            // init 的 reload 跑在本方法之前（当时 watcher 未建，refreshDirWatchers 早退）
+            // ——这里补建目录包子目录的 watcher。
+            this.refreshDirWatchers();
+        }
+        catch (err) {
+            logger_1.log.warn(`[PluginHost] watch failed: ${err.message}`);
+        }
+    }
+}
+exports.PluginHost = PluginHost;
+function pickContributions(mod) {
+    const out = {};
+    if (mod.usage)
+        out.usage = mod.usage;
+    if (mod.media)
+        out.media = mod.media;
+    if (mod.runtime)
+        out.runtime = mod.runtime;
+    if (mod.uiTools)
+        out.uiTools = mod.uiTools;
+    return out;
+}
+const README_CONTENT = `# MAFW Plugin Packages
+
+一个插件包可以同时贡献多种能力（usage 配额 / media 引擎 / runtime / UI 工具卡）。
+
+## 形态
+
+- 单文件包：\`my-vendor.js\`（包名 = 文件名）
+- 目录包：\`my-vendor/plugin.json\`（\`{ "name", "version"?, "main"? }\`，main 缺省 index.js）
+
+## 模块形状（二选一）
+
+\`\`\`js
+module.exports = {
+  name: "my-vendor",
+  usage:   { name: "my-vendor", type: "api", plan: "P", async fetch(ctx) {} },
+  media:   { modalities: ["image"], engine: "pi", fixPayload(p) {} },
+  runtime: { capabilities: {}, async createRuntime(ctx) {} },
+  uiTools: {},  // v1 仅在插件中心展示登记，桌面侧加载仍走 ~/.mafw/ui-plugins/
+};
+// 或：module.exports = { name, async activate(ctx) { return { usage: {...} }; } };
+\`\`\`
+
+## ctx（三个 legacy ctx 的超集）
+
+- \`ctx.apiKey(provider)\` / \`ctx.fetch(url, opts)\`（60s）/ \`ctx.log\`
+- \`ctx.pluginConfig()\` —— 读 config.yaml \`plugins.<name>.config\`（回退 legacy 三段 pluginConfig）
+- \`ctx.projectDir\` / \`ctx.gatewayPort\` / \`ctx.usage.modelStats({sinceMs?, provider?})\`
+
+## 优先级
+
+同名时：**包 > legacy 目录文件（usage-plugins/ media-plugins/ runtime-plugins/）> 内置**。
+legacy 目录行为不变。reload 只清主文件的 require.cache——改包内 lib/ 共享代码需 \`mafw restart\`。
+`;

package/gateway/dist/plugins/package-types.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/gateway/dist/recall/gateway-db-migrate.js

@@ -112,9 +112,12 @@ function migrateGatewayDb(memoryDir, managerSessions, cursorFile, registrySnapsh
                 logger_1.log.warn(`[gateway-db] cursor import failed: ${err.message}`);
             }
         }
-        // ④ registry snapshot (refreshed every start)
+        // ④ registry snapshot (refreshed every start) — scope/key aligned with the
+        // live read/write path (index.ts 'registry/snapshot'/'default'); the legacy
+        // 'registry' scope is removed idempotently.
         if (registrySnapshot !== null) {
-            db.kvSet('registry', 'snapshot', registrySnapshot);
+            db.kvSet('registry/snapshot', 'default', registrySnapshot);
+            db.kvDelete('registry', 'snapshot');
             result.registrySnapshot = true;
         }
         db.close();

package/gateway/dist/recall/redact.js

@@ -0,0 +1,53 @@
+"use strict";
+// Secret redaction for the observation pipeline. Applied once at capture time
+// (before t1_observations insert) so every downstream consumer (turnCompress
+// transcripts, worker prompts, archives) only ever sees redacted content.
+// Deterministic regex pass — no LLM, no false-negative risk beyond pattern
+// coverage; deliberately conservative about false positives (prose like
+// "token budget" or "the secret sauce" must survive).
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.redactSecrets = redactSecrets;
+const PLACEHOLDER = '[REDACTED]';
+// Ordered: specific token formats first, generic key=value forms last.
+const PATTERNS = [
+    // Bearer tokens in Authorization-style headers
+    /(Bearer\s+)[A-Za-z0-9._~+/=-]{8,}/g,
+    // OpenAI / DashScope / OpenRouter / Anthropic style: sk-..., sk-or-v1-..., sk-ant-...
+    /\bsk-[A-Za-z0-9_-]{16,}\b/g,
+    // GitHub tokens
+    /\b(?:ghp|gho|ghu|ghs|ghr)_[A-Za-z0-9]{16,}\b/g,
+    /\bgithub_pat_[A-Za-z0-9_]{20,}\b/g,
+    // Google API keys
+    /\bAIza[0-9A-Za-z_-]{35}\b/g,
+    // AWS access key ids
+    /\bAKIA[0-9A-Z]{16}\b/g,
+    // Slack tokens
+    /\bxox[baprs]-[A-Za-z0-9-]{10,}\b/g,
+    // JWTs (header.payload.signature)
+    /\beyJ[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{4,}\b/g,
+    // Generic key=value / "key": "value" secret forms. Keys are explicit
+    // (optionally wrapped in quotes); values must be >= 8 non-delimiter chars so
+    // prose ("password length", short numerics) is untouched. Quoted values
+    // keep their quotes.
+    // group1 keeps everything through the opening value quote; the closing
+    // quote stays outside the match so it survives in place.
+    /((?:"?)\b(?:api[_-]?key|apikey|api[_-]?secret|secret[_-]?key|access[_-]?token|auth[_-]?token|private[_-]?key|client[_-]?secret|password|passwd)\b"?\s*[=:]\s*")[^"\s]{8,}/gi,
+    // "[" excluded from values so an already-written [REDACTED] placeholder is
+    // never re-matched by this pass.
+    /((?:"?)\b(?:api[_-]?key|apikey|api[_-]?secret|secret[_-]?key|access[_-]?token|auth[_-]?token|private[_-]?key|client[_-]?secret|password|passwd)\b"?\s*[=:]\s*)[^\s"',\][]{8,}/gi,
+];
+function redactSecrets(content) {
+    if (!content)
+        return content;
+    let out = content;
+    for (const pattern of PATTERNS) {
+        out = out.replace(pattern, (match, ...rest) => {
+            // Group-free patterns: first rest arg is the numeric offset, replace
+            // wholesale. Patterns with one capture group keep the captured prefix
+            // (e.g. "Bearer ", "api_key=").
+            const group1 = rest[0];
+            return typeof group1 === 'string' ? `${group1}${PLACEHOLDER}` : PLACEHOLDER;
+        });
+    }
+    return out;
+}

package/gateway/dist/recall/turn-pipeline.js

@@ -14,6 +14,8 @@ Rules:
 - every cue_anchors list MUST include the topic entity names (project, module, person, API, feature) so the memory can be retrieved across sessions
 - for preferences or constraints, include a machine-readable anchor like "pref:<dimension>=<value>" (e.g., "pref:ui-language=chinese") in addition to the entity
 - skip redundant or trivial content; do not repeat entries that are obviously already known
+- pointer over fulltext: if the durable content is already carried by a repo artifact (code, docs, ADR, issue, config), record a POINTER (path/URL + one-line gist) instead of restating the full content — the artifact is the source of truth, the memory is only its index
+- for procedural memories, end memory_value with a next-time pointer when applicable: which skill, tool, or command the next agent should reach for (e.g., "→ next time: use the /tdd skill") — a memory should be a signpost, not just an archive
 - for every memory you write, include an explicit importance score via the mafw_add_memory importance parameter: 1=trivial routine, 5=ordinary fact, 9-10=architecture-level decision or serious incident
 - if nothing is worth saving, do not call the tool
 Division of labor: your job is the FACT LAYER of this session — concrete facts, decisions, preferences, event outcomes, and specific technical pitfalls (which API does what). Do NOT attempt cross-session pattern generalization — that is the daily reflection pipeline's job.

package/gateway/dist/routes/event-publish.js

@@ -0,0 +1,44 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.handleEventPublish = handleEventPublish;
+const event_broadcast_1 = require("../runtime/event-broadcast");
+function readBody(req) {
+    return new Promise((resolve, reject) => {
+        let body = '';
+        req.on('data', (c) => body += c);
+        req.on('end', () => resolve(body));
+        req.on('error', reject);
+    });
+}
+async function handleEventPublish(deps, req, res) {
+    const send = (status, payload) => {
+        res.writeHead(status, { 'Content-Type': 'application/json' });
+        res.end(JSON.stringify(payload));
+    };
+    try {
+        const body = JSON.parse(await readBody(req));
+        if (!body || typeof body !== 'object' || Array.isArray(body)) {
+            send(400, { error: 'body must be a JSON object' });
+            return;
+        }
+        if (typeof body.type !== 'string' || !body.type) {
+            send(400, { error: "body.type must be a non-empty string (recommended namespace: 'plugin:<name>:<event>')" });
+            return;
+        }
+        if (body.type === 'opencode_event') {
+            // 信封旁路：data 形状守卫（data.type 缺失 → 400，不发半成品事件）
+            if (!body.data || typeof body.data !== 'object' || typeof body.data.type !== 'string' || !body.data.type) {
+                send(400, { error: 'opencode_event envelope requires data.type (non-empty string)' });
+                return;
+            }
+            deps.broadcast((0, event_broadcast_1.opencodeBroadcast)(body.data, body.data.internal === true));
+            send(200, { ok: true });
+            return;
+        }
+        deps.broadcast(body);
+        send(200, { ok: true });
+    }
+    catch (err) {
+        send(400, { error: `invalid JSON body: ${err.message}` });
+    }
+}

package/gateway/dist/routes/plugins.js

@@ -51,7 +51,10 @@ async function guarded(res, fn) {
     }
 }
 async function handlePluginsList(_req, res, deps) {
-    await guarded(res, async () => ({ plugins: (0, hub_1.listPlugins)(deps.hub) }));
+    await guarded(res, async () => ({
+        plugins: (0, hub_1.listPlugins)(deps.hub),
+        packages: deps.hub.getPackages?.() ?? [],
+    }));
 }
 async function handlePluginsInstall(req, res, deps) {
     await guarded(res, async () => {