@leterhong/multichat 1.6.0

package/backend/dist/server.js

@@ -0,0 +1,103 @@
+'use strict';
+Object.defineProperty(exports, "__esModule", { value: true });
+// ── MultiChat Agent Workspace · 应用装配入口 ───────────────────────────
+// 本文件只负责：加载共享上下文、注册中间件、挂载各路由模块、托管前端静态资源、
+// 注册全局错误处理、执行数据种子、监听端口。具体业务逻辑已拆分到：
+//   routes/    —— 各 REST 端点（providers / conversations / workspaces /
+//                assistants / runs / skills / agents / plugins / import / chat / meta）
+//   runtime/   —— Agent 运行时核心（技能 / 智能体 / 运行）
+//   extensions/—— 标准 Skills、MCP servers 与插件来源注册表
+//   lib/       —— 存储、SSRF、catalog、workspace-store、统一错误码、共享上下文
+const express = require('express');
+const cors = require('cors');
+const path = require('path');
+const crypto = require('crypto');
+const ctx = require('./lib/context');
+const { requestIdMiddleware, errorHandler } = require('./lib/errors');
+const runtime = require('./runtime/agent');
+const app = express();
+const PORT = ctx.PORT;
+const HOST = process.env.HOST || '127.0.0.1';
+// ── 基础中间件 ──
+const corsOrigins = String(process.env.CORS_ORIGINS || '').split(',').map(value => value.trim()).filter(Boolean);
+if (corsOrigins.length)
+    app.use(cors({ origin: corsOrigins, credentials: false }));
+// Extension packages are transported as Base64 JSON so the API stays usable
+// behind the same reverse proxies as the rest of MultiChat.  The importer
+// applies a stricter 20 MB compressed / 80 MB unpacked limit of its own.
+app.use(express.json({ limit: '32mb' }));
+const apiToken = String(process.env.MULTICHAT_API_TOKEN || process.env.MC_API_TOKEN || '');
+const basicAuth = String(process.env.MULTICHAT_BASIC_AUTH || '');
+function equalSecret(actual, expected) {
+    const left = Buffer.from(String(actual || ''));
+    const right = Buffer.from(String(expected || ''));
+    return left.length === right.length && crypto.timingSafeEqual(left, right);
+}
+app.use((req, res, next) => {
+    if ((!apiToken && !basicAuth) || (!req.path.startsWith('/api/') && !req.path.startsWith('/v1/')) || req.path === '/api/health')
+        return next();
+    const authorization = String(req.headers.authorization || '');
+    const bearerOk = apiToken && authorization.startsWith('Bearer ') && equalSecret(authorization.slice(7), apiToken);
+    const basicOk = basicAuth && authorization.startsWith('Basic ') && equalSecret(Buffer.from(authorization.slice(6), 'base64').toString('utf8'), basicAuth);
+    if (bearerOk || basicOk)
+        return next();
+    res.setHeader('WWW-Authenticate', 'Bearer realm="MultiChat"');
+    return res.status(401).json({ error: { message: 'MultiChat access token required' }, code: 'AUTH_REQUIRED' });
+});
+app.use((req, res, next) => {
+    res.setHeader('X-Content-Type-Options', 'nosniff');
+    res.setHeader('X-Frame-Options', 'DENY');
+    res.setHeader('Referrer-Policy', 'no-referrer');
+    res.setHeader('Permissions-Policy', 'camera=(), microphone=(), geolocation=()');
+    res.setHeader('Cross-Origin-Opener-Policy', 'same-origin');
+    res.setHeader('Content-Security-Policy', "default-src 'self'; base-uri 'none'; object-src 'none'; frame-ancestors 'none'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; connect-src 'self' http://127.0.0.1:* http://localhost:*");
+    if (req.path.startsWith('/api/') || req.path.startsWith('/v1/'))
+        res.setHeader('Cache-Control', 'no-store');
+    next();
+});
+// 统一请求ID：每个请求分配 id 并写入响应头 X-Request-Id（A3）
+app.use(requestIdMiddleware);
+// ── 路由注册 ──
+require('./routes/providers')(app);
+require('./routes/conversations')(app);
+require('./routes/workspaces')(app);
+require('./routes/assistants')(app);
+require('./routes/runs')(app);
+require('./routes/usage')(app);
+require('./routes/control-plane')(app);
+require('./routes/skills')(app);
+require('./routes/tools')(app);
+require('./routes/mcp-servers')(app);
+require('./routes/agents')(app);
+require('./routes/plugins')(app);
+require('./routes/extensions-import')(app);
+require('./routes/import')(app);
+require('./routes/mock')(app);
+require('./routes/chat')(app);
+require('./routes/meta')(app);
+// ── 前端静态资源（生产构建件） ──
+// 默认按源码布局取 ../frontend/dist；CLI 或打包运行时可通过 FRONTEND_DIST 覆盖。
+const frontendDist = process.env.FRONTEND_DIST || path.join(ctx.BACKEND_ROOT, '..', 'frontend', 'dist');
+app.use(express.static(frontendDist));
+// ── 全局错误处理（兜底未捕获异常，统一输出 { error, code, requestId }）──
+app.use(errorHandler);
+// ── 启动 ──
+runtime.ensureSeed();
+require('./extensions/manager').ensureDefaults();
+const server = app.listen(PORT, HOST, () => {
+    console.log(`Multi-model chat server running on http://${HOST}:${PORT}`);
+    console.log(`OpenAI-compatible endpoint: POST /v1/chat/completions`);
+    console.log(`Agent endpoint:           POST /api/agents/:id/chat`);
+});
+function shutdown(signal) {
+    console.log(`${signal}: closing MCP clients and HTTP server`);
+    ctx.closeAllMcpClients();
+    server.close(() => {
+        ctx.store.close?.();
+        process.exit(0);
+    });
+    setTimeout(() => process.exit(1), 5000).unref();
+}
+process.once('SIGINT', () => shutdown('SIGINT'));
+process.once('SIGTERM', () => shutdown('SIGTERM'));
+//# sourceMappingURL=server.js.map

package/backend/dist/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../server.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;;AACb,oEAAoE;AACpE,yCAAyC;AACzC,mCAAmC;AACnC,qEAAqE;AACrE,uFAAuF;AACvF,6CAA6C;AAC7C,iDAAiD;AACjD,8DAA8D;AAC9D,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;AACnC,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;AAC7B,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;AAC7B,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;AAEjC,MAAM,GAAG,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;AACrC,MAAM,EAAE,mBAAmB,EAAE,YAAY,EAAE,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;AACtE,MAAM,OAAO,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;AAE3C,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;AACtB,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;AACtB,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,WAAW,CAAC;AAE7C,cAAc;AACd,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AACjH,IAAI,WAAW,CAAC,MAAM;IAAE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;AACnF,4EAA4E;AAC5E,0EAA0E;AAC1E,yEAAyE;AACzE,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;AACzC,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;AAC3F,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC;AACjE,SAAS,WAAW,CAAC,MAAM,EAAE,QAAQ;IACnC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC;IAClD,OAAO,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,IAAI,MAAM,CAAC,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AAC7E,CAAC;AACD,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;IACzB,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,KAAK,aAAa;QAAE,OAAO,IAAI,EAAE,CAAC;IAC9I,MAAM,aAAa,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC;IAC9D,MAAM,QAAQ,GAAG,QAAQ,IAAI,aAAa,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,WAAW,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IAClH,MAAM,OAAO,GAAG,SAAS,IAAI,aAAa,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,CAAC,CAAC;IAC1J,IAAI,QAAQ,IAAI,OAAO;QAAE,OAAO,IAAI,EAAE,CAAC;IACvC,GAAG,CAAC,SAAS,CAAC,kBAAkB,EAAE,0BAA0B,CAAC,CAAC;IAC9D,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,iCAAiC,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,CAAC;AAChH,CAAC,CAAC,CAAC;AACH,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;IACzB,GAAG,CAAC,SAAS,CAAC,wBAAwB,EAAE,SAAS,CAAC,CAAC;IACnD,GAAG,CAAC,SAAS,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC;IACzC,GAAG,CAAC,SAAS,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC;IAChD,GAAG,CAAC,SAAS,CAAC,oBAAoB,EAAE,0CAA0C,CAAC,CAAC;IAChF,GAAG,CAAC,SAAS,CAAC,4BAA4B,EAAE,aAAa,CAAC,CAAC;IAC3D,GAAG,CAAC,SAAS,CAAC,yBAAyB,EAAE,2NAA2N,CAAC,CAAC;IACtQ,IAAI,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;IAC5G,IAAI,EAAE,CAAC;AACT,CAAC,CAAC,CAAC;AACH,2CAA2C;AAC3C,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;AAE7B,aAAa;AACb,OAAO,CAAC,oBAAoB,CAAC,CAAC,GAAG,CAAC,CAAC;AACnC,OAAO,CAAC,wBAAwB,CAAC,CAAC,GAAG,CAAC,CAAC;AACvC,OAAO,CAAC,qBAAqB,CAAC,CAAC,GAAG,CAAC,CAAC;AACpC,OAAO,CAAC,qBAAqB,CAAC,CAAC,GAAG,CAAC,CAAC;AACpC,OAAO,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,CAAC;AAC9B,OAAO,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,CAAC;AAC/B,OAAO,CAAC,wBAAwB,CAAC,CAAC,GAAG,CAAC,CAAC;AACvC,OAAO,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAAC,CAAC;AAChC,OAAO,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,CAAC;AAC/B,OAAO,CAAC,sBAAsB,CAAC,CAAC,GAAG,CAAC,CAAC;AACrC,OAAO,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAAC,CAAC;AAChC,OAAO,CAAC,kBAAkB,CAAC,CAAC,GAAG,CAAC,CAAC;AACjC,OAAO,CAAC,4BAA4B,CAAC,CAAC,GAAG,CAAC,CAAC;AAC3C,OAAO,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAAC,CAAC;AAChC,OAAO,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,CAAC;AAC9B,OAAO,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,CAAC;AAC9B,OAAO,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,CAAC;AAE9B,sBAAsB;AACtB,4DAA4D;AAC5D,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;AACxG,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC;AAEtC,uDAAuD;AACvD,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;AAEtB,WAAW;AACX,OAAO,CAAC,UAAU,EAAE,CAAC;AACrB,OAAO,CAAC,sBAAsB,CAAC,CAAC,cAAc,EAAE,CAAC;AAEjD,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE;IACzC,OAAO,CAAC,GAAG,CAAC,6CAA6C,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,CAAC,GAAG,CAAC,uDAAuD,CAAC,CAAC;IACrE,OAAO,CAAC,GAAG,CAAC,qDAAqD,CAAC,CAAC;AACrE,CAAC,CAAC,CAAC;AAEH,SAAS,QAAQ,CAAC,MAAM;IACtB,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,uCAAuC,CAAC,CAAC;IAC9D,GAAG,CAAC,kBAAkB,EAAE,CAAC;IACzB,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE;QAChB,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QACpB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;IACH,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;AAClD,CAAC;AACD,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;AACjD,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC"}

package/backend/dist/types.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/backend/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../types.ts"],"names":[],"mappings":""}

package/backend/extensions/demo-mcp-server.js

@@ -0,0 +1,70 @@
+'use strict';
+
+// Dependency-free MCP STDIO fixture used by the default project setup and
+// interoperability tests. Each JSON-RPC message occupies exactly one line.
+const readline = require('readline');
+
+const tools = [
+  {
+    name: 'get_current_time',
+    description: '返回 UTC 时间、本地时间和当前时区。',
+    inputSchema: { type: 'object', properties: {}, additionalProperties: false },
+    annotations: { readOnlyHint: true },
+  },
+  {
+    name: 'get_project_summary',
+    description: '返回当前 MultiChat 项目的运行目录与 Node.js 版本。',
+    inputSchema: { type: 'object', properties: {}, additionalProperties: false },
+    annotations: { readOnlyHint: true },
+  },
+];
+
+function send(message) { process.stdout.write(JSON.stringify(message) + '\n'); }
+
+async function handle(message) {
+  if (!message || message.jsonrpc !== '2.0') return;
+  if (message.id === undefined || message.id === null) return;
+  if (message.method === 'initialize') {
+    return send({
+      jsonrpc: '2.0',
+      id: message.id,
+      result: {
+        protocolVersion: '2025-06-18',
+        capabilities: { tools: { listChanged: false } },
+        serverInfo: { name: 'multichat-demo', version: '1.0.0' },
+        instructions: 'These tools are read-only and intended for local interoperability checks.',
+      },
+    });
+  }
+  if (message.method === 'tools/list') {
+    return send({ jsonrpc: '2.0', id: message.id, result: { tools } });
+  }
+  if (message.method === 'tools/call') {
+    const name = message.params?.name;
+    let data;
+    if (name === 'get_current_time') {
+      data = { utc: new Date().toISOString(), local: new Date().toString(), timezone: Intl.DateTimeFormat().resolvedOptions().timeZone };
+    } else if (name === 'get_project_summary') {
+      data = { cwd: process.cwd(), node: process.version, platform: process.platform };
+    } else {
+      return send({ jsonrpc: '2.0', id: message.id, error: { code: -32602, message: `Unknown tool: ${name}` } });
+    }
+    return send({
+      jsonrpc: '2.0',
+      id: message.id,
+      result: {
+        content: [{ type: 'text', text: JSON.stringify(data, null, 2) }],
+        structuredContent: data,
+        isError: false,
+      },
+    });
+  }
+  send({ jsonrpc: '2.0', id: message.id, error: { code: -32601, message: 'Method not found' } });
+}
+
+const lines = readline.createInterface({ input: process.stdin, crlfDelay: Infinity });
+lines.on('line', line => {
+  if (!line.trim()) return;
+  try { void handle(JSON.parse(line)); }
+  catch (error) { console.error(error.message); }
+});