@leterhong/multichat 1.6.0

package/backend/routes/runs.ts

@@ -0,0 +1,55 @@
+'use strict';
+// ── Runs（Agent 运行历史）路由 ──────────────────────────────────────────
+const ctx = require('../lib/context');
+
+module.exports = function registerRuns(app) {
+  app.get('/api/runs', (req, res) => {
+    const limit = Math.min(100, Math.max(1, Number.parseInt(req.query.limit || '40', 10) || 40));
+    let runs = ctx.store.read(ctx.RUN_FILE, []);
+    if (req.query.agent) runs = runs.filter(x => x.agentId === req.query.agent);
+    res.json(runs.slice(0, limit));
+  });
+
+  app.get('/api/runs/:id', (req, res) => {
+    const run = ctx.store.read(ctx.RUN_FILE, []).find(x => x.id === req.params.id);
+    if (!run) return res.status(404).json({ error: 'run not found' });
+    res.json(run);
+  });
+
+  // 取消正在运行的 Agent 任务：中断上游 fetch，并取消当前 MCP request。
+  app.post('/api/runs/:id/cancel', (req, res) => {
+    const ac = ctx.runAborts.get(req.params.id);
+    if (!ac) {
+      return res.status(404).json({ error: { message: '没有正在运行的任务或未注册取消句柄（可能已结束）' }, code: 'RUN_NOT_ACTIVE' });
+    }
+    ac.abort();
+    ctx.runAborts.delete(req.params.id);
+    res.json({ ok: true, id: req.params.id });
+  });
+
+  // 审批决策：写入持久化检查点，不占用原 Agent 响应连接。
+  app.post('/api/runs/:id/approval/:approvalId', (req, res, next) => {
+    void (async () => {
+    const run = ctx.store.read(ctx.RUN_FILE, []).find(x => x.id === req.params.id);
+    if (!run) return res.status(404).json({ error: { message: 'run not found' }, code: 'RUN_NOT_FOUND' });
+    const rec = (run.approvals || []).find(a => a.id === req.params.approvalId);
+    if (!rec || rec.status !== 'pending') {
+      return res.status(409).json({
+        error: { message: '审批请求不存在或已处理' + (rec ? '（当前状态：' + rec.status + '）' : '') },
+        code: 'APPROVAL_NOT_PENDING',
+      });
+    }
+    const action = req.body && req.body.action;
+    if (action !== 'approve' && action !== 'reject') {
+      return res.status(400).json({ error: { message: 'action 必须是 approve 或 reject' }, code: 'BAD_REQUEST' });
+    }
+    rec.status = action === 'approve' ? 'approved' : 'rejected';
+    rec.resolvedAt = new Date().toISOString();
+    run.status = 'paused';
+    run.pauseReason = action === 'approve' ? 'approval granted; ready to resume' : 'approval rejected; ready to resume';
+    if (run.checkpoint) run.checkpoint.approvalDecision = action;
+    await ctx.store.mutate(ctx.RUN_FILE, (runs) => runs.map(item => item.id === run.id ? run : item), []);
+    res.json({ ok: true, approvalId: req.params.approvalId, action, runId: req.params.id, resumable: true });
+    })().catch(next);
+  });
+};

package/backend/routes/skills.ts

@@ -0,0 +1,52 @@
+'use strict';
+
+// Standard Agent Skills API. Skills are real directories with SKILL.md; this
+// route never accepts executable MCP configuration and exposes no direct
+// execution endpoint.
+const extensions = require('../extensions/manager');
+
+module.exports = function registerSkills(app) {
+  app.get('/api/skills', (req, res, next) => {
+    try { res.json(extensions.listSkills()); } catch (error) { next(error); }
+  });
+
+  app.get('/api/skills/:id', (req, res, next) => {
+    try {
+      res.json(extensions.findSkill(req.params.id));
+    } catch (error) { next(error); }
+  });
+
+  app.get('/api/skills/:id/diff', (req, res, next) => {
+    try {
+      const item = extensions.findSkill(req.params.id);
+      res.json(extensions.gitDiff(item.path));
+    } catch (error) { next(error); }
+  });
+
+  app.post('/api/skills', (req, res, next) => {
+    try { res.status(201).json(extensions.createSkill(req.body || {})); }
+    catch (error) { next(error); }
+  });
+
+  app.put('/api/skills/:id', (req, res, next) => {
+    try {
+      const body = req.body || {};
+      if (Object.keys(body).every(key => key === 'enabled')) {
+        return res.json(extensions.setSkillEnabled(req.params.id, body.enabled !== false));
+      }
+      const item = extensions.updateSkill(req.params.id, body);
+      if (body.enabled !== undefined) extensions.setSkillEnabled(req.params.id, body.enabled !== false);
+      res.json(item);
+    } catch (error) { next(error); }
+  });
+
+  app.post('/api/skills/:id/toggle', (req, res, next) => {
+    try { res.json(extensions.setSkillEnabled(req.params.id, req.body?.enabled !== false)); }
+    catch (error) { next(error); }
+  });
+
+  app.delete('/api/skills/:id', (req, res, next) => {
+    try { res.json(extensions.deleteSkill(req.params.id)); }
+    catch (error) { next(error); }
+  });
+};

package/backend/routes/tools.ts

@@ -0,0 +1,40 @@
+'use strict';
+
+// MultiChat's built-in functions are tools, not Agent Skills. Keeping this
+// endpoint separate avoids conflating executable capabilities with SKILL.md.
+const ctx = require('../lib/context');
+const agent = require('../runtime/agent');
+
+function listTools() {
+  return ctx.store.read(ctx.SKILL_FILE, [])
+    .filter(item => !['prompt', 'mcp'].includes(item.type))
+    .map(item => ({ ...agent.publicSkill(item), kind: 'builtin-tool' }));
+}
+
+module.exports = function registerTools(app) {
+  app.get('/api/tools', (req, res) => res.json(listTools()));
+  app.put('/api/tools/:id', (req, res) => {
+    const rows = ctx.store.read(ctx.SKILL_FILE, []);
+    const index = rows.findIndex(item => item.id === req.params.id && !['prompt', 'mcp'].includes(item.type));
+    if (index < 0) return res.status(404).json({ error: 'tool not found', code: 'NOT_FOUND' });
+    rows[index].enabled = req.body?.enabled !== false;
+    ctx.store.write(ctx.SKILL_FILE, rows);
+    res.json(agent.publicSkill(rows[index]));
+  });
+
+  // ── 本地试跑：只开放无网络、无副作用的纯计算类工具，避免端点被当作代理 ──
+  const TESTABLE_TYPES = new Set(['datetime', 'calculator']);
+  app.post('/api/tools/:id/test', async (req, res) => {
+    const tool = listTools().find(item => item.id === req.params.id);
+    if (!tool) return res.status(404).json({ error: 'tool not found', code: 'NOT_FOUND' });
+    if (!TESTABLE_TYPES.has(tool.type)) {
+      return res.status(400).json({ error: `「${tool.name}」暂不支持界面试跑（涉及网络访问，请通过对话调用）`, code: 'NOT_TESTABLE' });
+    }
+    const args = tool.type === 'calculator'
+      ? { expression: String(req.body?.expression ?? '').trim() }
+      : {};
+    const started = Date.now();
+    const result = await agent.executeSkill(tool, args);
+    res.json({ ...result, elapsedMs: Date.now() - started });
+  });
+};

package/backend/routes/usage.ts

@@ -0,0 +1,13 @@
+'use strict';
+const ctx = require('../lib/context');
+const usage = require('../lib/usage');
+
+module.exports = function registerUsage(app) {
+  app.get('/api/usage', (req, res) => {
+    res.json(usage.usageSummary(ctx.store, {
+      range: req.query.range,
+      offsetMinutes: req.query.offset,
+      projectId: req.query.projectId,
+    }));
+  });
+};

package/backend/routes/workspaces.ts

@@ -0,0 +1,124 @@
+'use strict';
+// ── Workspaces / Projects / Assets / Prompts 路由 ───────────────────────
+const ctx = require('../lib/context');
+const { assetMeta, readResponseText } = require('../lib/util');
+
+function sendWorkspaceError(res, error) {
+  const status = /not found/i.test(error.message) ? 404 : 400;
+  res.status(status).json({ error: error.message });
+}
+
+module.exports = function registerWorkspaces(app) {
+  app.get('/api/workspaces', (req, res) => {
+    const projects = ctx.workspaceStore.projects();
+    res.json(ctx.workspaceStore.workspaces().map(workspace => ({ ...workspace, projectCount: projects.filter(project => project.workspaceId === workspace.id).length })));
+  });
+
+  app.get('/api/workspaces/:id', (req, res) => {
+    const workspace = ctx.workspaceStore.getWorkspace(req.params.id);
+    if (!workspace) return res.status(404).json({ error: 'workspace not found' });
+    res.json({ ...workspace, projects: ctx.workspaceStore.projects().filter(project => project.workspaceId === workspace.id) });
+  });
+
+  app.post('/api/workspaces', (req, res) => {
+    try { res.status(201).json(ctx.workspaceStore.createWorkspace(req.body)); }
+    catch (error) { sendWorkspaceError(res, error); }
+  });
+
+  app.put('/api/workspaces/:id', (req, res) => {
+    try { res.json(ctx.workspaceStore.updateWorkspace(req.params.id, req.body)); }
+    catch (error) { sendWorkspaceError(res, error); }
+  });
+
+  app.delete('/api/workspaces/:id', (req, res) => {
+    try { res.json({ ok: true, workspace: ctx.workspaceStore.removeWorkspace(req.params.id) }); }
+    catch (error) { sendWorkspaceError(res, error); }
+  });
+
+  app.get('/api/projects', (req, res) => {
+    let projects = ctx.workspaceStore.projects();
+    if (req.query.workspaceId) projects = projects.filter(project => project.workspaceId === req.query.workspaceId);
+    res.json(projects);
+  });
+
+  app.get('/api/projects/:id', (req, res) => {
+    const project = ctx.workspaceStore.getProject(req.params.id);
+    if (!project) return res.status(404).json({ error: 'project not found' });
+    res.json({ ...project, assets: ctx.workspaceStore.assets().filter(asset => asset.projectId === project.id).map(assetMeta) });
+  });
+
+  app.post('/api/projects', (req, res) => {
+    try {
+      const project = ctx.workspaceStore.createProject(req.body);
+      const workspace = ctx.workspaceStore.getWorkspace(project.workspaceId);
+      if (workspace && !workspace.defaultProjectId) ctx.workspaceStore.updateWorkspace(workspace.id, { defaultProjectId: project.id });
+      res.status(201).json(project);
+    } catch (error) { sendWorkspaceError(res, error); }
+  });
+
+  app.put('/api/projects/:id', (req, res) => {
+    try { res.json(ctx.workspaceStore.updateProject(req.params.id, req.body)); }
+    catch (error) { sendWorkspaceError(res, error); }
+  });
+
+  app.delete('/api/projects/:id', (req, res) => {
+    try { res.json({ ok: true, project: ctx.workspaceStore.removeProject(req.params.id) }); }
+    catch (error) { sendWorkspaceError(res, error); }
+  });
+
+  app.get('/api/assets', (req, res) => {
+    let assets = ctx.workspaceStore.assets();
+    if (req.query.projectId) assets = assets.filter(asset => asset.projectId === req.query.projectId);
+    if (req.query.workspaceId) assets = assets.filter(asset => asset.workspaceId === req.query.workspaceId);
+    res.json(assets.map(assetMeta));
+  });
+
+  app.get('/api/assets/:id', (req, res) => {
+    const asset = ctx.workspaceStore.getAsset(req.params.id);
+    if (!asset) return res.status(404).json({ error: 'asset not found' });
+    res.json(asset);
+  });
+
+  app.post('/api/assets', async (req, res) => {
+    const body = req.body || {};
+    try {
+      let content = body.content;
+      let source = 'local';
+      let url = null;
+      let mimeType = body.mimeType || 'text/plain';
+      let name = body.name || '';
+      if (body.url) {
+        let value = String(body.url).trim();
+        let sameOrigin = false;
+        if (value.startsWith('/')) { value = 'http://127.0.0.1:' + ctx.PORT + value; sameOrigin = true; }
+        if (!/^https?:\/\//i.test(value)) return res.status(400).json({ error: 'only http(s) URL is allowed' });
+        const response = await ctx.safeFetch(value, { signal: AbortSignal.timeout(20000), headers: { accept: 'text/plain, text/markdown, application/json, text/html' } }, sameOrigin);
+        if (!response.ok) return res.status(502).json({ error: 'asset fetch failed with HTTP ' + response.status });
+        const contentType = response.headers.get('content-type') || '';
+        if (!/^(text\/|application\/(json|xml))/i.test(contentType)) {
+          return res.status(415).json({ error: '不支持的内容类型: ' + contentType });
+        }
+        content = await readResponseText(response, 2_000_000);
+        source = 'url';
+        url = value;
+        mimeType = response.headers.get('content-type') || mimeType;
+        if (!name) name = value.split('/').pop().split('?')[0] || '远程文件';
+      }
+      const asset = ctx.workspaceStore.createAsset({ ...body, content, source, url, mimeType, name });
+      res.status(201).json(assetMeta(asset));
+    } catch (error) { sendWorkspaceError(res, error); }
+  });
+
+  app.delete('/api/assets/:id', (req, res) => {
+    try { res.json({ ok: true, asset: assetMeta(ctx.workspaceStore.removeAsset(req.params.id)) }); }
+    catch (error) { sendWorkspaceError(res, error); }
+  });
+
+  // ── Prompt Templates ──
+  app.get('/api/prompts', (req, res) => {
+    const file = ctx.path.join(ctx.BACKEND_ROOT, 'prompts.json');
+    if (!ctx.fs.existsSync(file)) return res.json([]);
+    try { res.json(JSON.parse(ctx.fs.readFileSync(file, 'utf-8'))); }
+    catch { res.json([]); }
+  });
+};