@leterhong/multichat 1.6.0

package/backend/dist/routes/meta.js

@@ -0,0 +1,37 @@
+'use strict';
+Object.defineProperty(exports, "__esModule", { value: true });
+// ── Meta：runtime / catalog / health（信息聚合端点） ─────────────────────
+const ctx = require('../lib/context');
+const extensions = require('../extensions/manager');
+const { assetMeta } = require('../lib/util');
+module.exports = function registerMeta(app) {
+    app.get('/api/runtime', (req, res) => {
+        const providers = ctx.providerStore.list();
+        const skills = extensions.listSkills();
+        const agents = ctx.store.read(ctx.AGENT_FILE, []);
+        const plugins = extensions.listPlugins();
+        const mcpServers = extensions.listMcpServers();
+        res.json({
+            name: 'MultiChat Agent Workspace',
+            version: ctx.VERSION,
+            node: process.version,
+            mode: process.env.NODE_ENV || 'development',
+            capabilities: ['chat', 'streaming', 'agents', 'agent-skills', 'plugins', 'mcp-discovery', 'codex-sync', 'git-diff', 'run-history', 'usage-ledger', 'context-lens', 'capability-passports', 'project-memory', 'project-snapshots'],
+            counts: { providers: providers.length, models: providers.reduce((n, p) => n + (p.models || []).length, 0), skills: skills.length, agents: agents.length, plugins: plugins.length, mcpServers: mcpServers.length, runs: ctx.store.read(ctx.RUN_FILE, []).length, workspaces: ctx.workspaceStore.workspaces().length, projects: ctx.workspaceStore.projects().length, assets: ctx.workspaceStore.assets().length },
+            adapters: Object.keys(ctx.ADAPTER_MAP),
+        });
+    });
+    app.get('/api/catalog', (req, res) => {
+        const providers = ctx.providerStore.list();
+        const skills = extensions.listSkills();
+        const tools = ctx.store.read(ctx.SKILL_FILE, []).filter(item => !['prompt', 'mcp'].includes(item.type));
+        const agents = ctx.store.read(ctx.AGENT_FILE, []);
+        const plugins = extensions.listPlugins();
+        const mcpServers = extensions.listMcpServers();
+        res.json({ providers: providers.map(ctx.providerStore.publicRecord), skills, tools, agents, plugins, mcpServers, workspaces: ctx.workspaceStore.workspaces(), projects: ctx.workspaceStore.projects(), assets: ctx.workspaceStore.assets().map(assetMeta) });
+    });
+    app.get('/api/health', (req, res) => {
+        res.json({ status: 'ok', version: ctx.VERSION, uptime: process.uptime(), storage: ctx.store.kind || 'json', storageFallback: ctx.STORAGE_FALLBACK, skills: extensions.listSkills().length, mcpServers: extensions.listMcpServers().length, agents: ctx.store.read(ctx.AGENT_FILE, []).length });
+    });
+};
+//# sourceMappingURL=meta.js.map

package/backend/dist/routes/meta.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"meta.js","sourceRoot":"","sources":["../../routes/meta.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;;AACb,mEAAmE;AACnE,MAAM,GAAG,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;AACtC,MAAM,UAAU,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;AACpD,MAAM,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;AAE7C,MAAM,CAAC,OAAO,GAAG,SAAS,YAAY,CAAC,GAAG;IACxC,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACnC,MAAM,SAAS,GAAG,GAAG,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC;QAC3C,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,EAAE,CAAC;QACvC,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QAClD,MAAM,OAAO,GAAG,UAAU,CAAC,WAAW,EAAE,CAAC;QACzC,MAAM,UAAU,GAAG,UAAU,CAAC,cAAc,EAAE,CAAC;QAC/C,GAAG,CAAC,IAAI,CAAC;YACP,IAAI,EAAE,2BAA2B;YACjC,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,IAAI,EAAE,OAAO,CAAC,OAAO;YACrB,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,aAAa;YAC3C,YAAY,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,cAAc,EAAE,SAAS,EAAE,eAAe,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,cAAc,EAAE,cAAc,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,mBAAmB,CAAC;YACjO,MAAM,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,UAAU,EAAE,UAAU,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,GAAG,CAAC,cAAc,CAAC,UAAU,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,cAAc,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE;YAChZ,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC;SACvC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACnC,MAAM,SAAS,GAAG,GAAG,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC;QAC3C,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACxG,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QAClD,MAAM,OAAO,GAAG,UAAU,CAAC,WAAW,EAAE,CAAC;QACzC,MAAM,UAAU,GAAG,UAAU,CAAC,cAAc,EAAE,CAAC;QAC/C,GAAG,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,CAAC,cAAc,CAAC,UAAU,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,cAAc,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAC/P,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAClC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,MAAM,EAAE,eAAe,EAAE,GAAG,CAAC,gBAAgB,EAAE,MAAM,EAAE,UAAU,CAAC,UAAU,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,UAAU,CAAC,cAAc,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IAClS,CAAC,CAAC,CAAC;AACL,CAAC,CAAC"}

package/backend/dist/routes/mock.js

@@ -0,0 +1,28 @@
+'use strict';
+Object.defineProperty(exports, "__esModule", { value: true });
+// A deterministic, fully local OpenAI-compatible endpoint used by the
+// built-in “Mock (本地体验)” provider. It never calls the network and makes the
+// first-run/chat/usage UI testable without an API key.
+module.exports = function registerMock(app) {
+    app.post('/api/mock/v1/chat/completions', (req, res) => {
+        const body = req.body || {};
+        const messages = Array.isArray(body.messages) ? body.messages : [];
+        const last = [...messages].reverse().find(item => item.role === 'user');
+        const input = typeof last?.content === 'string' ? last.content : JSON.stringify(last?.content || '');
+        const output = input ? `本地回声：${input}` : 'MultiChat 本地体验已就绪。';
+        const promptTokens = Math.max(1, Math.ceil(JSON.stringify(messages).length / 4));
+        const completionTokens = Math.max(1, Math.ceil(output.length / 4));
+        const usage = { prompt_tokens: promptTokens, completion_tokens: completionTokens, total_tokens: promptTokens + completionTokens };
+        if (body.stream !== true)
+            return res.json({ id: `mock-${Date.now()}`, model: body.model || 'echo', choices: [{ index: 0, message: { role: 'assistant', content: output }, finish_reason: 'stop' }], usage });
+        res.setHeader('Content-Type', 'text/event-stream');
+        res.setHeader('Cache-Control', 'no-cache');
+        const chunks = output.match(/.{1,8}/gu) || [output];
+        for (const content of chunks)
+            res.write(`data: ${JSON.stringify({ id: `mock-${Date.now()}`, model: body.model || 'echo', choices: [{ index: 0, delta: { content }, finish_reason: null }] })}\n\n`);
+        res.write(`data: ${JSON.stringify({ model: body.model || 'echo', choices: [{ index: 0, delta: {}, finish_reason: 'stop' }], usage })}\n\n`);
+        res.write('data: [DONE]\n\n');
+        res.end();
+    });
+};
+//# sourceMappingURL=mock.js.map

package/backend/dist/routes/mock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mock.js","sourceRoot":"","sources":["../../routes/mock.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;;AAEb,sEAAsE;AACtE,4EAA4E;AAC5E,uDAAuD;AACvD,MAAM,CAAC,OAAO,GAAG,SAAS,YAAY,CAAC,GAAG;IACxC,GAAG,CAAC,IAAI,CAAC,+BAA+B,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACrD,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;QACxE,MAAM,KAAK,GAAG,OAAO,IAAI,EAAE,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC;QACrG,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,QAAQ,KAAK,EAAE,CAAC,CAAC,CAAC,oBAAoB,CAAC;QAC9D,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;QACjF,MAAM,gBAAgB,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;QACnE,MAAM,KAAK,GAAG,EAAE,aAAa,EAAE,YAAY,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,YAAY,EAAE,YAAY,GAAG,gBAAgB,EAAE,CAAC;QAClI,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI;YAAE,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,QAAQ,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAC7M,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,mBAAmB,CAAC,CAAC;QACnD,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;QAC3C,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACpD,KAAK,MAAM,OAAO,IAAI,MAAM;YAAE,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,QAAQ,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC;QACpM,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,MAAM,CAAC,CAAC;QAC5I,GAAG,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;QAC9B,GAAG,CAAC,GAAG,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC"}

package/backend/dist/routes/plugins.js

@@ -0,0 +1,41 @@
+'use strict';
+Object.defineProperty(exports, "__esModule", { value: true });
+// Plugins are packages discovered through repo/managed marketplace.json files.
+// Their components are referenced in place; they are never flattened into
+// skills.json or agents.json.
+const extensions = require('../extensions/manager');
+module.exports = function registerPlugins(app) {
+    app.get('/api/plugins', (req, res, next) => {
+        try {
+            res.json(extensions.listPlugins());
+        }
+        catch (error) {
+            next(error);
+        }
+    });
+    app.get('/api/plugins/:id/diff', (req, res, next) => {
+        try {
+            res.json(extensions.pluginDiff(req.params.id));
+        }
+        catch (error) {
+            next(error);
+        }
+    });
+    app.post('/api/plugins/:id/toggle', (req, res, next) => {
+        try {
+            res.json(extensions.setPluginEnabled(req.params.id, req.body?.enabled !== false));
+        }
+        catch (error) {
+            next(error);
+        }
+    });
+    app.delete('/api/plugins/:id', (req, res, next) => {
+        try {
+            res.json(extensions.deleteImportedPlugin(req.params.id));
+        }
+        catch (error) {
+            next(error);
+        }
+    });
+};
+//# sourceMappingURL=plugins.js.map

package/backend/dist/routes/plugins.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugins.js","sourceRoot":"","sources":["../../routes/plugins.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;;AAEb,+EAA+E;AAC/E,0EAA0E;AAC1E,8BAA8B;AAC9B,MAAM,UAAU,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;AAEpD,MAAM,CAAC,OAAO,GAAG,SAAS,eAAe,CAAC,GAAG;IAC3C,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACzC,IAAI,CAAC;YAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC;QAAC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,uBAAuB,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAClD,IAAI,CAAC;YAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QAAC,CAAC;QACvD,OAAO,KAAK,EAAE,CAAC;YAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAAC,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,yBAAyB,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACrD,IAAI,CAAC;YAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC;QAAC,CAAC;QAC1F,OAAO,KAAK,EAAE,CAAC;YAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAAC,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAChD,IAAI,CAAC;YAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,oBAAoB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QAAC,CAAC;QACjE,OAAO,KAAK,EAAE,CAAC;YAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAAC,CAAC;IAChC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC"}

package/backend/dist/routes/providers.js

@@ -0,0 +1,197 @@
+'use strict';
+Object.defineProperty(exports, "__esModule", { value: true });
+// ── Provider / Models 路由 ──────────────────────────────────────────────
+// GET 接口返回脱敏后的 provider（apiKey 不出现在响应体中）。
+const ctx = require('../lib/context');
+const { readResponseJson, readResponseText } = require('../lib/util');
+const { redactSecrets } = require('../lib/redact');
+function normalizeProvider(input, previous = null) {
+    const id = previous?.id || ctx.safeId(input.id || Date.now().toString(36), 'provider id');
+    const apiType = String(input.apiType ?? previous?.apiType ?? 'openai').trim().toLowerCase();
+    if (!ctx.ADAPTER_MAP[apiType])
+        throw new Error('unsupported provider apiType');
+    const baseUrl = String(input.baseUrl ?? previous?.baseUrl ?? '').trim().replace(/\/+$/, '');
+    if (!baseUrl || baseUrl.length > 2048)
+        throw new Error('baseUrl is required');
+    let parsed;
+    try {
+        parsed = new URL(baseUrl);
+    }
+    catch {
+        throw new Error('baseUrl must be a valid URL');
+    }
+    if (!['http:', 'https:'].includes(parsed.protocol) || parsed.username || parsed.password) {
+        throw new Error('baseUrl must be an http(s) URL without embedded credentials');
+    }
+    if ([...parsed.searchParams.keys()].some(key => /(?:api[-_]?key|access[-_]?token|token|secret|password|authorization|credential)/i.test(key))) {
+        throw new Error('baseUrl must not contain credential query parameters');
+    }
+    const modelInput = input.models ?? previous?.models;
+    const models = Array.isArray(modelInput)
+        ? [...new Set(modelInput.map(value => String(value).trim()).filter(Boolean))].slice(0, 200)
+        : [];
+    if (models.some(model => model.length > 200))
+        throw new Error('model name is too long');
+    return {
+        id,
+        name: String(input.name ?? previous?.name ?? id).trim().slice(0, 120) || id,
+        apiType,
+        baseUrl,
+        apiKey: input.apiKey !== undefined ? String(input.apiKey || '') : String(previous?.apiKey || ''),
+        models,
+        allowPrivate: input.allowPrivate !== undefined
+            ? input.allowPrivate === true
+            : (previous?.allowPrivate === true || ['ollama', 'lmstudio'].includes(apiType)),
+        updatedAt: new Date().toISOString(),
+        createdAt: previous?.createdAt || new Date().toISOString(),
+    };
+}
+module.exports = function registerProviders(app) {
+    app.get('/api/providers', (req, res) => {
+        res.json(ctx.providerStore.publicList());
+    });
+    app.post('/api/providers', (req, res) => {
+        let provider;
+        try {
+            provider = normalizeProvider(req.body || {});
+        }
+        catch (error) {
+            return res.status(400).json({ error: error.message });
+        }
+        const providers = ctx.providerStore.list();
+        if (providers.some(item => item.id === provider.id))
+            return res.status(409).json({ error: 'provider id already exists' });
+        providers.push(provider);
+        ctx.providerStore.save(providers);
+        res.json(ctx.providerStore.publicRecord(provider));
+    });
+    app.put('/api/providers/:id', (req, res) => {
+        const providers = ctx.providerStore.list();
+        const idx = providers.findIndex(p => p.id === req.params.id);
+        if (idx < 0)
+            return res.status(404).json({ error: 'not found' });
+        const body = req.body || {};
+        const prev = providers[idx];
+        // 未提供新密钥（或回传 masked 占位）时保留原 apiKey，避免被掩码覆盖
+        let apiKey = prev.apiKey;
+        if (body.apiKey && !body.apiKeyMasked && body.apiKey !== '••••••••')
+            apiKey = body.apiKey;
+        let updated;
+        try {
+            updated = normalizeProvider({ ...body, apiKey }, prev);
+        }
+        catch (error) {
+            return res.status(400).json({ error: error.message });
+        }
+        providers[idx] = updated;
+        ctx.providerStore.save(providers);
+        res.json(ctx.providerStore.publicRecord(updated));
+    });
+    app.delete('/api/providers/:id', (req, res) => {
+        let providers = ctx.providerStore.list();
+        providers = providers.filter(p => p.id !== req.params.id);
+        ctx.providerStore.save(providers);
+        res.json({ ok: true });
+    });
+    // ── Models: list all models grouped by provider ──
+    app.get('/api/models', (req, res) => {
+        const providers = ctx.providerStore.list();
+        const models = [];
+        for (const p of providers) {
+            (p.models || []).forEach(m => {
+                models.push({ id: `${p.id}:${m}`, name: m, providerId: p.id, providerName: p.name });
+            });
+        }
+        res.json(models);
+    });
+    // ── 连接测试：用服务端保存的密钥探测 OpenAI 兼容的 GET /models，返回可达性与模型清单 ──
+    app.post('/api/providers/:id/probe', async (req, res) => {
+        const providers = ctx.providerStore.list();
+        const provider = providers.find(p => p.id === req.params.id);
+        if (!provider)
+            return res.status(404).json({ error: 'provider not found', code: 'NOT_FOUND' });
+        const baseUrl = String(provider.baseUrl || '').replace(/\/+$/, '');
+        let parsed;
+        try {
+            parsed = new URL(baseUrl);
+        }
+        catch {
+            return res.status(400).json({ error: 'provider baseUrl 无效' });
+        }
+        const modelsUrl = `${parsed.origin}${parsed.pathname.replace(/\/+$/, '')}/models`;
+        const headers = { accept: 'application/json' };
+        if (provider.apiKey)
+            headers.authorization = `Bearer ${provider.apiKey}`;
+        try {
+            const resp = await ctx.safeFetch(modelsUrl, { headers, signal: AbortSignal.timeout(8000) }, provider.allowPrivate === true);
+            if (!resp.ok) {
+                const detail = await readResponseText(resp).catch(() => '');
+                const brief = redactSecrets(String(detail || '').slice(0, 200));
+                return res.status(resp.status).json({ ok: false, error: `HTTP ${resp.status}${brief ? `：${brief}` : ''}` });
+            }
+            const data = await readResponseJson(resp, 2_000_000);
+            const raw = Array.isArray(data.data) ? data.data : Array.isArray(data.models) ? data.models : [];
+            const models = raw.map((m) => String(m?.id || m?.name || '')).filter(Boolean);
+            const capabilities = {
+                vision: models.some(m => /(?:vision|vl|omni|multimodal|4o|gpt-4-turbo|gemini|claude-[35])/i.test(m)),
+                reasoning: models.some(m => /(?:reason|think|o[1345]-|r1|qwq)/i.test(m)),
+            };
+            res.json({ ok: true, models, capabilities, modelCount: models.length });
+        }
+        catch (error) {
+            const raw = error instanceof Error ? error.message : String(error);
+            const causeCode = error?.cause?.code || '';
+            const timedOut = /timeout|abort/i.test(raw);
+            const friendly = timedOut ? '连接超时（8s）——请确认 baseUrl 可达'
+                : /fetch failed/i.test(raw) ? `无法连接到 ${parsed.host}${causeCode ? `（${causeCode}）` : ''}`
+                    : redactSecrets(raw);
+            res.status(502).json({ ok: false, error: friendly });
+        }
+    });
+    // ── Local model discovery (Ollama / LM Studio) ──
+    app.post('/api/fetch-local-models', async (req, res) => {
+        const { apiType, baseUrl } = req.body || {};
+        if (!apiType || !baseUrl) {
+            return res.status(400).json({ error: 'apiType and baseUrl are required' });
+        }
+        try {
+            let parsed;
+            try {
+                parsed = new URL(baseUrl);
+            }
+            catch {
+                return res.status(400).json({ error: 'baseUrl must be a valid URL' });
+            }
+            const hostname = parsed.hostname.replace(/^\[|\]$/g, '');
+            if (!['http:', 'https:'].includes(parsed.protocol) || parsed.username || parsed.password || !['localhost', '127.0.0.1', '::1'].includes(hostname)) {
+                return res.status(400).json({ error: 'local model discovery only accepts loopback addresses' });
+            }
+            if (!['ollama', 'lmstudio'].includes(String(apiType).toLowerCase())) {
+                return res.status(400).json({ error: `Unsupported apiType for local discovery: ${apiType}` });
+            }
+            if (apiType === 'ollama') {
+                const url = new URL('/api/tags', parsed.origin).toString();
+                const resp = await ctx.safeFetch(url, { signal: AbortSignal.timeout(5000) }, true);
+                if (!resp.ok)
+                    return res.status(resp.status).json({ error: `Ollama returned HTTP ${resp.status}` });
+                const data = await readResponseJson(resp, 2_000_000);
+                const models = (data.models || []).map(m => m.name || m.model).filter(Boolean);
+                return res.json({ models });
+            }
+            if (apiType === 'lmstudio') {
+                const base = `${parsed.origin}${parsed.pathname.replace(/\/+$/, '')}`;
+                const url = `${base}${/\/v1$/i.test(base) ? '' : '/v1'}/models`;
+                const resp = await ctx.safeFetch(url, { signal: AbortSignal.timeout(5000) }, true);
+                if (!resp.ok)
+                    return res.status(resp.status).json({ error: `LM Studio returned HTTP ${resp.status}` });
+                const data = await readResponseJson(resp, 2_000_000);
+                const models = (data.data || []).map(m => m.id).filter(Boolean);
+                return res.json({ models });
+            }
+        }
+        catch (e) {
+            res.status(502).json({ error: `Cannot connect to the local model service: ${redactSecrets(e.message)}` });
+        }
+    });
+};
+//# sourceMappingURL=providers.js.map

package/backend/dist/routes/providers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"providers.js","sourceRoot":"","sources":["../../routes/providers.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;;AACb,yEAAyE;AACzE,0CAA0C;AAC1C,MAAM,GAAG,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;AACtC,MAAM,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;AACtE,MAAM,EAAE,aAAa,EAAE,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;AAGnD,SAAS,iBAAiB,CAAC,KAAiB,EAAE,WAA8B,IAAI;IAC9E,MAAM,EAAE,GAAG,QAAQ,EAAE,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,aAAa,CAAC,CAAC;IAC1F,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,IAAI,QAAQ,EAAE,OAAO,IAAI,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC5F,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAC/E,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,IAAI,QAAQ,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC5F,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;IAC9E,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QAAC,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IAAC,CAAC;IAC5F,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACzF,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;IACjF,CAAC;IACD,IAAI,CAAC,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,kFAAkF,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QAC9I,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;IACD,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,IAAI,QAAQ,EAAE,MAAM,CAAC;IACpD,MAAM,MAAM,GAAa,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;QAChD,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;QAC3F,CAAC,CAAC,EAAE,CAAC;IACP,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IACxF,OAAO;QACL,EAAE;QACF,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,EAAE;QAC3E,OAAO;QACP,OAAO;QACP,MAAM,EAAE,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,IAAI,EAAE,CAAC;QAChG,MAAM;QACN,YAAY,EAAE,KAAK,CAAC,YAAY,KAAK,SAAS;YAC5C,CAAC,CAAC,KAAK,CAAC,YAAY,KAAK,IAAI;YAC7B,CAAC,CAAC,CAAC,QAAQ,EAAE,YAAY,KAAK,IAAI,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACjF,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,SAAS,EAAE,QAAQ,EAAE,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KAC3D,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,OAAO,GAAG,SAAS,iBAAiB,CAAC,GAAG;IAC7C,GAAG,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACrC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,UAAU,EAAE,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IACH,GAAG,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACtC,IAAI,QAAQ,CAAC;QACb,IAAI,CAAC;YAAC,QAAQ,GAAG,iBAAiB,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;QACrD,OAAO,KAAK,EAAE,CAAC;YAAC,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAAC,CAAC;QACxE,MAAM,SAAS,GAAG,GAAG,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC;QAC3C,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,QAAQ,CAAC,EAAE,CAAC;YAAE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,4BAA4B,EAAE,CAAC,CAAC;QAC1H,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACzB,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAClC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IACH,GAAG,CAAC,GAAG,CAAC,oBAAoB,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACzC,MAAM,SAAS,GAAG,GAAG,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC;QAC3C,MAAM,GAAG,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC7D,IAAI,GAAG,GAAG,CAAC;YAAE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;QACjE,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;QAC5B,2CAA2C;QAC3C,IAAI,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QACzB,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,MAAM,KAAK,UAAU;YAAE,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1F,IAAI,OAAO,CAAC;QACZ,IAAI,CAAC;YAAC,OAAO,GAAG,iBAAiB,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,CAAC,CAAC;QAAC,CAAC;QAC/D,OAAO,KAAK,EAAE,CAAC;YAAC,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAAC,CAAC;QACxE,SAAS,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC;QACzB,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAClC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IACH,GAAG,CAAC,MAAM,CAAC,oBAAoB,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC5C,IAAI,SAAS,GAAG,GAAG,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC;QACzC,SAAS,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC1D,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAClC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IACzB,CAAC,CAAC,CAAC;IAEH,oDAAoD;IACpD,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAClC,MAAM,SAAS,GAAG,GAAG,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC;QAC3C,MAAM,MAAM,GAAG,EAAE,CAAC;QAClB,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;YAC1B,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE;gBAC3B,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YACvF,CAAC,CAAC,CAAC;QACL,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACnB,CAAC,CAAC,CAAC;IAEH,2DAA2D;IAC3D,GAAG,CAAC,IAAI,CAAC,0BAA0B,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACtD,MAAM,SAAS,GAAG,GAAG,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC;QAC3C,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC7D,IAAI,CAAC,QAAQ;YAAE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;QAC/F,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACnE,IAAI,MAAW,CAAC;QAChB,IAAI,CAAC;YAAC,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,CAAC;QAAC,CAAC;QAC3G,MAAM,SAAS,GAAG,GAAG,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,SAAS,CAAC;QAClF,MAAM,OAAO,GAA2B,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;QACvE,IAAI,QAAQ,CAAC,MAAM;YAAE,OAAO,CAAC,aAAa,GAAG,UAAU,QAAQ,CAAC,MAAM,EAAE,CAAC;QACzE,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,YAAY,KAAK,IAAI,CAAC,CAAC;YAC5H,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;gBACb,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;gBAC5D,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;gBAChE,OAAO,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;YAC9G,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,IAAI,EAAE,SAAS,CAAe,CAAC;YACnE,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;YACjG,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAa,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAC1F,MAAM,YAAY,GAAG;gBACnB,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,kEAAkE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACpG,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,mCAAmC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;aACzE,CAAC;YACF,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAC1E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,GAAG,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACnE,MAAM,SAAS,GAAI,KAAuC,EAAE,KAAK,EAAE,IAAI,IAAI,EAAE,CAAC;YAC9E,MAAM,QAAQ,GAAG,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC5C,MAAM,QAAQ,GAAG,QAAQ,CAAC,CAAC,CAAC,0BAA0B;gBACpD,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,MAAM,CAAC,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,SAAS,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;oBACxF,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;YACvB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QACvD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,mDAAmD;IACnD,GAAG,CAAC,IAAI,CAAC,yBAAyB,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACrD,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;QAC5C,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC;YACzB,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kCAAkC,EAAE,CAAC,CAAC;QAC7E,CAAC;QACD,IAAI,CAAC;YACH,IAAI,MAAW,CAAC;YAChB,IAAI,CAAC;gBAAC,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC,CAAC;YAAC,CAAC;YACnH,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;YACzD,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAClJ,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uDAAuD,EAAE,CAAC,CAAC;YAClG,CAAC;YACD,IAAI,CAAC,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;gBACpE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,4CAA4C,OAAO,EAAE,EAAE,CAAC,CAAC;YAChG,CAAC;YACD,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;gBACzB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;gBAC3D,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;gBACnF,IAAI,CAAC,IAAI,CAAC,EAAE;oBAAE,OAAO,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,wBAAwB,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;gBACpG,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,IAAI,EAAE,SAAS,CAAe,CAAC;gBACnE,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;gBAC/E,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;YAC9B,CAAC;YACD,IAAI,OAAO,KAAK,UAAU,EAAE,CAAC;gBAC3B,MAAM,IAAI,GAAG,GAAG,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC;gBACtE,MAAM,GAAG,GAAG,GAAG,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC;gBAChE,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;gBACnF,IAAI,CAAC,IAAI,CAAC,EAAE;oBAAE,OAAO,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,2BAA2B,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;gBACvG,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,IAAI,EAAE,SAAS,CAAe,CAAC;gBACnE,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;gBAChE,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,8CAA8C,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;QAC5G,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC"}

package/backend/dist/routes/runs.js

@@ -0,0 +1,57 @@
+'use strict';
+Object.defineProperty(exports, "__esModule", { value: true });
+// ── Runs（Agent 运行历史）路由 ──────────────────────────────────────────
+const ctx = require('../lib/context');
+module.exports = function registerRuns(app) {
+    app.get('/api/runs', (req, res) => {
+        const limit = Math.min(100, Math.max(1, Number.parseInt(req.query.limit || '40', 10) || 40));
+        let runs = ctx.store.read(ctx.RUN_FILE, []);
+        if (req.query.agent)
+            runs = runs.filter(x => x.agentId === req.query.agent);
+        res.json(runs.slice(0, limit));
+    });
+    app.get('/api/runs/:id', (req, res) => {
+        const run = ctx.store.read(ctx.RUN_FILE, []).find(x => x.id === req.params.id);
+        if (!run)
+            return res.status(404).json({ error: 'run not found' });
+        res.json(run);
+    });
+    // 取消正在运行的 Agent 任务：中断上游 fetch，并取消当前 MCP request。
+    app.post('/api/runs/:id/cancel', (req, res) => {
+        const ac = ctx.runAborts.get(req.params.id);
+        if (!ac) {
+            return res.status(404).json({ error: { message: '没有正在运行的任务或未注册取消句柄（可能已结束）' }, code: 'RUN_NOT_ACTIVE' });
+        }
+        ac.abort();
+        ctx.runAborts.delete(req.params.id);
+        res.json({ ok: true, id: req.params.id });
+    });
+    // 审批决策：写入持久化检查点，不占用原 Agent 响应连接。
+    app.post('/api/runs/:id/approval/:approvalId', (req, res, next) => {
+        void (async () => {
+            const run = ctx.store.read(ctx.RUN_FILE, []).find(x => x.id === req.params.id);
+            if (!run)
+                return res.status(404).json({ error: { message: 'run not found' }, code: 'RUN_NOT_FOUND' });
+            const rec = (run.approvals || []).find(a => a.id === req.params.approvalId);
+            if (!rec || rec.status !== 'pending') {
+                return res.status(409).json({
+                    error: { message: '审批请求不存在或已处理' + (rec ? '（当前状态：' + rec.status + '）' : '') },
+                    code: 'APPROVAL_NOT_PENDING',
+                });
+            }
+            const action = req.body && req.body.action;
+            if (action !== 'approve' && action !== 'reject') {
+                return res.status(400).json({ error: { message: 'action 必须是 approve 或 reject' }, code: 'BAD_REQUEST' });
+            }
+            rec.status = action === 'approve' ? 'approved' : 'rejected';
+            rec.resolvedAt = new Date().toISOString();
+            run.status = 'paused';
+            run.pauseReason = action === 'approve' ? 'approval granted; ready to resume' : 'approval rejected; ready to resume';
+            if (run.checkpoint)
+                run.checkpoint.approvalDecision = action;
+            await ctx.store.mutate(ctx.RUN_FILE, (runs) => runs.map(item => item.id === run.id ? run : item), []);
+            res.json({ ok: true, approvalId: req.params.approvalId, action, runId: req.params.id, resumable: true });
+        })().catch(next);
+    });
+};
+//# sourceMappingURL=runs.js.map

package/backend/dist/routes/runs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runs.js","sourceRoot":"","sources":["../../routes/runs.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;;AACb,mEAAmE;AACnE,MAAM,GAAG,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;AAEtC,MAAM,CAAC,OAAO,GAAG,SAAS,YAAY,CAAC,GAAG;IACxC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAChC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAC7F,IAAI,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAC5C,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK;YAAE,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC5E,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACpC,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC/E,IAAI,CAAC,GAAG;YAAE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,CAAC;QAClE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChB,CAAC,CAAC,CAAC;IAEH,iDAAiD;IACjD,GAAG,CAAC,IAAI,CAAC,sBAAsB,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC5C,MAAM,EAAE,GAAG,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC5C,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,0BAA0B,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC;QAC1G,CAAC;QACD,EAAE,CAAC,KAAK,EAAE,CAAC;QACX,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACpC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,iCAAiC;IACjC,GAAG,CAAC,IAAI,CAAC,oCAAoC,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAChE,KAAK,CAAC,KAAK,IAAI,EAAE;YACjB,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC/E,IAAI,CAAC,GAAG;gBAAE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,eAAe,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,CAAC;YACtG,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAC5E,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBACrC,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBAC1B,KAAK,EAAE,EAAE,OAAO,EAAE,aAAa,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;oBAC5E,IAAI,EAAE,sBAAsB;iBAC7B,CAAC,CAAC;YACL,CAAC;YACD,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC;YAC3C,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAChD,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,6BAA6B,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC;YAC1G,CAAC;YACD,GAAG,CAAC,MAAM,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC;YAC5D,GAAG,CAAC,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAC1C,GAAG,CAAC,MAAM,GAAG,QAAQ,CAAC;YACtB,GAAG,CAAC,WAAW,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,mCAAmC,CAAC,CAAC,CAAC,oCAAoC,CAAC;YACpH,IAAI,GAAG,CAAC,UAAU;gBAAE,GAAG,CAAC,UAAU,CAAC,gBAAgB,GAAG,MAAM,CAAC;YAC7D,MAAM,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;YACtG,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACzG,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACnB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC"}

package/backend/dist/routes/skills.js

@@ -0,0 +1,73 @@
+'use strict';
+Object.defineProperty(exports, "__esModule", { value: true });
+// Standard Agent Skills API. Skills are real directories with SKILL.md; this
+// route never accepts executable MCP configuration and exposes no direct
+// execution endpoint.
+const extensions = require('../extensions/manager');
+module.exports = function registerSkills(app) {
+    app.get('/api/skills', (req, res, next) => {
+        try {
+            res.json(extensions.listSkills());
+        }
+        catch (error) {
+            next(error);
+        }
+    });
+    app.get('/api/skills/:id', (req, res, next) => {
+        try {
+            res.json(extensions.findSkill(req.params.id));
+        }
+        catch (error) {
+            next(error);
+        }
+    });
+    app.get('/api/skills/:id/diff', (req, res, next) => {
+        try {
+            const item = extensions.findSkill(req.params.id);
+            res.json(extensions.gitDiff(item.path));
+        }
+        catch (error) {
+            next(error);
+        }
+    });
+    app.post('/api/skills', (req, res, next) => {
+        try {
+            res.status(201).json(extensions.createSkill(req.body || {}));
+        }
+        catch (error) {
+            next(error);
+        }
+    });
+    app.put('/api/skills/:id', (req, res, next) => {
+        try {
+            const body = req.body || {};
+            if (Object.keys(body).every(key => key === 'enabled')) {
+                return res.json(extensions.setSkillEnabled(req.params.id, body.enabled !== false));
+            }
+            const item = extensions.updateSkill(req.params.id, body);
+            if (body.enabled !== undefined)
+                extensions.setSkillEnabled(req.params.id, body.enabled !== false);
+            res.json(item);
+        }
+        catch (error) {
+            next(error);
+        }
+    });
+    app.post('/api/skills/:id/toggle', (req, res, next) => {
+        try {
+            res.json(extensions.setSkillEnabled(req.params.id, req.body?.enabled !== false));
+        }
+        catch (error) {
+            next(error);
+        }
+    });
+    app.delete('/api/skills/:id', (req, res, next) => {
+        try {
+            res.json(extensions.deleteSkill(req.params.id));
+        }
+        catch (error) {
+            next(error);
+        }
+    });
+};
+//# sourceMappingURL=skills.js.map

package/backend/dist/routes/skills.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skills.js","sourceRoot":"","sources":["../../routes/skills.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;;AAEb,6EAA6E;AAC7E,yEAAyE;AACzE,sBAAsB;AACtB,MAAM,UAAU,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;AAEpD,MAAM,CAAC,OAAO,GAAG,SAAS,cAAc,CAAC,GAAG;IAC1C,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACxC,IAAI,CAAC;YAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC,CAAC;QAAC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC5C,IAAI,CAAC;YACH,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QAChD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,sBAAsB,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACjD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,UAAU,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACjD,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACzC,IAAI,CAAC;YAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;QAAC,CAAC;QACrE,OAAO,KAAK,EAAE,CAAC;YAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAAC,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC5C,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;YAC5B,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,SAAS,CAAC,EAAE,CAAC;gBACtD,OAAO,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC;YACrF,CAAC;YACD,MAAM,IAAI,GAAG,UAAU,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YACzD,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS;gBAAE,UAAU,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC;YAClG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,wBAAwB,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACpD,IAAI,CAAC;YAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC;QAAC,CAAC;QACzF,OAAO,KAAK,EAAE,CAAC;YAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAAC,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC/C,IAAI,CAAC;YAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QAAC,CAAC;QACxD,OAAO,KAAK,EAAE,CAAC;YAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAAC,CAAC;IAChC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC"}

package/backend/dist/routes/tools.js

@@ -0,0 +1,40 @@
+'use strict';
+Object.defineProperty(exports, "__esModule", { value: true });
+// MultiChat's built-in functions are tools, not Agent Skills. Keeping this
+// endpoint separate avoids conflating executable capabilities with SKILL.md.
+const ctx = require('../lib/context');
+const agent = require('../runtime/agent');
+function listTools() {
+    return ctx.store.read(ctx.SKILL_FILE, [])
+        .filter(item => !['prompt', 'mcp'].includes(item.type))
+        .map(item => ({ ...agent.publicSkill(item), kind: 'builtin-tool' }));
+}
+module.exports = function registerTools(app) {
+    app.get('/api/tools', (req, res) => res.json(listTools()));
+    app.put('/api/tools/:id', (req, res) => {
+        const rows = ctx.store.read(ctx.SKILL_FILE, []);
+        const index = rows.findIndex(item => item.id === req.params.id && !['prompt', 'mcp'].includes(item.type));
+        if (index < 0)
+            return res.status(404).json({ error: 'tool not found', code: 'NOT_FOUND' });
+        rows[index].enabled = req.body?.enabled !== false;
+        ctx.store.write(ctx.SKILL_FILE, rows);
+        res.json(agent.publicSkill(rows[index]));
+    });
+    // ── 本地试跑：只开放无网络、无副作用的纯计算类工具，避免端点被当作代理 ──
+    const TESTABLE_TYPES = new Set(['datetime', 'calculator']);
+    app.post('/api/tools/:id/test', async (req, res) => {
+        const tool = listTools().find(item => item.id === req.params.id);
+        if (!tool)
+            return res.status(404).json({ error: 'tool not found', code: 'NOT_FOUND' });
+        if (!TESTABLE_TYPES.has(tool.type)) {
+            return res.status(400).json({ error: `「${tool.name}」暂不支持界面试跑（涉及网络访问，请通过对话调用）`, code: 'NOT_TESTABLE' });
+        }
+        const args = tool.type === 'calculator'
+            ? { expression: String(req.body?.expression ?? '').trim() }
+            : {};
+        const started = Date.now();
+        const result = await agent.executeSkill(tool, args);
+        res.json({ ...result, elapsedMs: Date.now() - started });
+    });
+};
+//# sourceMappingURL=tools.js.map

package/backend/dist/routes/tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools.js","sourceRoot":"","sources":["../../routes/tools.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;;AAEb,2EAA2E;AAC3E,6EAA6E;AAC7E,MAAM,GAAG,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;AACtC,MAAM,KAAK,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;AAE1C,SAAS,SAAS;IAChB,OAAO,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,CAAC;SACtC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;SACtD,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC;AACzE,CAAC;AAED,MAAM,CAAC,OAAO,GAAG,SAAS,aAAa,CAAC,GAAG;IACzC,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IAC3D,GAAG,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACrC,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QAChD,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1G,IAAI,KAAK,GAAG,CAAC;YAAE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;QAC3F,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,OAAO,KAAK,KAAK,CAAC;QAClD,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QACtC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,0CAA0C;IAC1C,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC,CAAC;IAC3D,GAAG,CAAC,IAAI,CAAC,qBAAqB,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACjD,MAAM,IAAI,GAAG,SAAS,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACjE,IAAI,CAAC,IAAI;YAAE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;QACvF,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACnC,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,IAAI,CAAC,IAAI,2BAA2B,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;QACzG,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,KAAK,YAAY;YACrC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,UAAU,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE;YAC3D,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACpD,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC"}

package/backend/dist/routes/usage.js

@@ -0,0 +1,14 @@
+'use strict';
+Object.defineProperty(exports, "__esModule", { value: true });
+const ctx = require('../lib/context');
+const usage = require('../lib/usage');
+module.exports = function registerUsage(app) {
+    app.get('/api/usage', (req, res) => {
+        res.json(usage.usageSummary(ctx.store, {
+            range: req.query.range,
+            offsetMinutes: req.query.offset,
+            projectId: req.query.projectId,
+        }));
+    });
+};
+//# sourceMappingURL=usage.js.map

package/backend/dist/routes/usage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"usage.js","sourceRoot":"","sources":["../../routes/usage.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;;AACb,MAAM,GAAG,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;AACtC,MAAM,KAAK,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;AAEtC,MAAM,CAAC,OAAO,GAAG,SAAS,aAAa,CAAC,GAAG;IACzC,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACjC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE;YACrC,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,KAAK;YACtB,aAAa,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM;YAC/B,SAAS,EAAE,GAAG,CAAC,KAAK,CAAC,SAAS;SAC/B,CAAC,CAAC,CAAC;IACN,CAAC,CAAC,CAAC;AACL,CAAC,CAAC"}