@microi.net/cli 5.8.5 → 5.8.7

package/scripts/microi-codex-router.js

@@ -1,618 +1,618 @@
-#!/usr/bin/env node
-/*
- * Microi Agentx Plugin 多连接路由器。
- *
- * 它只负责发现 VS Code/CLI 共用的工作区配置、选择连接并把请求转发给
- * 同一份 Microi MCP bundle。所有业务 schema、确认口令、审计和写后回读
- * 都由原 MCP 工具执行，本文件不实现第二套远端 API。
- */
-
-const childProcess = require('node:child_process');
-const crypto = require('node:crypto');
-const fs = require('node:fs');
-const net = require('node:net');
-const os = require('node:os');
-const path = require('node:path');
-
-const CONFIG_DIR = 'Microi-V8-Engine';
-const CONFIG_FILE = '.microi-config.json';
-const TOKEN_FILE = '.microi-mcp-tokens.json';
-const PROTOCOL_VERSION = '2024-11-05';
-const pluginRoot = path.resolve(__dirname, '..');
-const mcpServerPath = path.resolve(process.env.MICROI_MCP_SERVER_PATH || path.join(__dirname, 'mcp-server.js'));
-const brokerScriptPath = path.resolve(process.env.MICROI_CODEX_BROKER_SCRIPT || path.join(__dirname, 'microi-codex-broker.js'));
-const packagePath = path.join(pluginRoot, 'package.json');
-const packageVersion = String(readJson(packagePath, {}).version || '').trim();
-const environmentVersion = String(process.env.MICROI_TOOL_VERSION || '').trim();
-// An installed plugin is self-describing. A stale parent MCP environment must
-// never force a newer package to reconnect to an older shared broker. The
-// version environment remains authoritative for the package-less stable CLI
-// runtime, whose current.json launcher selects one immutable version folder.
-const pluginVersion = /^\d+(?:\.\d+){2}$/.test(packageVersion)
-  ? packageVersion
-  : (/^\d+(?:\.\d+){2}$/.test(environmentVersion) ? environmentVersion : '0.0.0');
-let inputBuffer = '';
-let requestSequence = 0;
-let shuttingDown = false;
-let brokerClient = null;
-
-function readJson(filePath, fallback) {
-  try {
-    const parsed = JSON.parse(fs.readFileSync(filePath, 'utf8'));
-    return parsed && typeof parsed === 'object' && !Array.isArray(parsed) ? parsed : fallback;
-  } catch {
-    return fallback;
-  }
-}
-
-function normalizeUrl(value) {
-  return String(value || '').trim().replace(/\/+$/, '');
-}
-
-function safeName(value) {
-  return String(value || '').normalize('NFKD').replace(/[^\x00-\x7F]/g, '')
-    .replace(/[^A-Za-z0-9_]+/g, '_').replace(/_+/g, '_')
-    .replace(/^_+|_+$/g, '').toLowerCase().slice(0, 48);
-}
-
-function hostPart(profile) {
-  try { return safeName(new URL(profile.apiBaseUrl).host); } catch { return safeName(profile.apiBaseUrl); }
-}
-
-function profileIdentity(profile) {
-  return [
-    normalizeUrl(profile.apiBaseUrl),
-    String(profile.osClient || '').trim(),
-    String(profile.osClientType || '').trim(),
-    String(profile.osClientNetwork || '').trim(),
-  ].join('|');
-}
-
-function candidateRoots() {
-  const values = [
-    process.env.MICROI_WORKSPACE_ROOT,
-    process.env.CODEX_WORKSPACE_ROOT,
-    process.env.INIT_CWD,
-    process.cwd(),
-  ].filter(Boolean).map(value => path.resolve(value));
-  const roots = [];
-  for (const start of values) {
-    let current = start;
-    while (current && !roots.includes(current)) {
-      roots.push(current);
-      const parent = path.dirname(current);
-      if (parent === current) break;
-      current = parent;
-    }
-  }
-  return roots;
-}
-
-function resolveWorkspace() {
-  const explicitConfig = process.env.MICROI_CONFIG_PATH
-    ? path.resolve(process.env.MICROI_CONFIG_PATH)
-    : '';
-  const candidates = explicitConfig
-    ? [explicitConfig]
-    : candidateRoots().flatMap(root => [
-      path.join(root, CONFIG_DIR, CONFIG_FILE),
-      path.join(root, CONFIG_DIR.toLowerCase(), CONFIG_FILE),
-    ]);
-  const configPath = candidates.find(filePath => fs.existsSync(filePath));
-  const fallbackRoot = path.resolve(process.env.MICROI_WORKSPACE_ROOT || process.cwd());
-  if (!configPath) {
-    return {
-      workspaceRoot: fallbackRoot,
-      syncRoot: path.join(fallbackRoot, CONFIG_DIR),
-      configPath: path.join(fallbackRoot, CONFIG_DIR, CONFIG_FILE),
-      tokenPath: path.join(fallbackRoot, CONFIG_DIR, TOKEN_FILE),
-      config: {},
-    };
-  }
-  const syncRoot = path.dirname(configPath);
-  return {
-    workspaceRoot: path.dirname(syncRoot),
-    syncRoot,
-    configPath,
-    tokenPath: path.join(syncRoot, TOKEN_FILE),
-    config: readJson(configPath, {}),
-  };
-}
-
-function scheduleAutomaticUpdate() {
-  if (process.env.MICROI_DISABLE_AUTO_UPDATE === '1') return;
-  const cliPath = path.join(__dirname, 'microi-cli.js');
-  if (!fs.existsSync(cliPath)) return;
-  const workspace = resolveWorkspace();
-  try {
-    const child = childProcess.spawn(process.execPath, [
-      cliPath,
-      'update',
-      '--background',
-      '--workspace',
-      workspace.workspaceRoot,
-      '--json',
-    ], {
-      cwd: pluginRoot,
-      detached: true,
-      windowsHide: true,
-      stdio: 'ignore',
-      env: { ...process.env },
-    });
-    // 不等待更新、不重启当前 Router。新版本仅供后续新进程使用。
-    child.on('error', () => { /* 下一次启动自动重试 */ });
-    child.unref();
-  } catch {
-    // 自动更新永远不能成为 MCP 启动门禁。
-  }
-}
-
-function loadProfiles() {
-  const workspace = resolveWorkspace();
-  const configured = Array.isArray(workspace.config.profiles)
-    ? workspace.config.profiles
-    : [];
-  const rawProfiles = configured.length > 0
-    ? configured
-    : (workspace.config.apiBaseUrl ? [{
-      label: workspace.config.osClient || workspace.config.apiBaseUrl,
-      apiBaseUrl: workspace.config.apiBaseUrl,
-      osClient: workspace.config.osClient || '',
-    }] : []);
-  const tokens = readJson(workspace.tokenPath, {});
-  const identityNames = rawProfiles.map(profile => safeName(profile.osClient || profile.label) || hostPart(profile) || 'default');
-  const counts = identityNames.reduce((map, name) => map.set(name, (map.get(name) || 0) + 1), new Map());
-  const used = new Set();
-  const profiles = rawProfiles.filter(profile => /^https?:\/\//i.test(String(profile.apiBaseUrl || ''))).map((raw, index) => {
-    const profile = {
-      label: String(raw.label || raw.sysShortTitle || raw.sysTitle || raw.osClient || raw.apiBaseUrl || ''),
-      apiBaseUrl: normalizeUrl(raw.apiBaseUrl),
-      osClient: String(raw.osClient || '').trim(),
-      osClientType: String(raw.osClientType || '').trim(),
-      osClientNetwork: String(raw.osClientNetwork || '').trim(),
-    };
-    const identityName = identityNames[index];
-    const host = hostPart(profile);
-    const base = `microi_${identityName}`;
-    let name = counts.get(identityName) > 1 && host && host !== identityName ? `${base}_${host}` : base;
-    if (used.has(name) && host) name = `${base}_${host}`;
-    let suffix = 2;
-    while (used.has(name)) name = `${base}_${suffix++}`;
-    used.add(name);
-    const exactKey = profileIdentity(profile);
-    const legacyKey = profile.osClient ? `${profile.apiBaseUrl}|${profile.osClient}` : profile.apiBaseUrl;
-    return {
-      ...profile,
-      index: index + 1,
-      name,
-      identity: exactKey,
-      loggedIn: typeof tokens[exactKey] === 'string' || typeof tokens[legacyKey] === 'string',
-      workspaceRoot: workspace.workspaceRoot,
-      syncRoot: workspace.syncRoot,
-      tokenPath: workspace.tokenPath,
-    };
-  });
-  return { workspace, profiles };
-}
-
-function publicProfile(profile) {
-  return {
-    index: profile.index,
-    name: profile.name,
-    label: profile.label,
-    apiBaseUrl: profile.apiBaseUrl,
-    osClient: profile.osClient,
-    osClientType: profile.osClientType,
-    osClientNetwork: profile.osClientNetwork,
-    loggedIn: profile.loggedIn,
-  };
-}
-
-function selectProfile(selector) {
-  const state = loadProfiles();
-  if (state.profiles.length === 0) {
-    throw new Error(`当前工作区尚未初始化 Microi。请在 ${state.workspace.workspaceRoot} 运行 bundled CLI 的 init 命令。`);
-  }
-  const raw = String(selector || '').trim();
-  if (raw) {
-    const lower = raw.toLowerCase();
-    const matches = state.profiles.filter(profile =>
-      String(profile.index) === raw
-      || profile.name.toLowerCase() === lower
-      || profile.osClient.toLowerCase() === lower
-      || profile.label.toLowerCase() === lower
-      || profile.identity.toLowerCase() === lower
-    );
-    if (matches.length === 1) return matches[0];
-    if (matches.length > 1) throw new Error(`连接选择“${raw}”存在歧义，请改用 profiles 返回的 name。`);
-    throw new Error(`未找到连接“${raw}”。可用连接：${state.profiles.map(item => item.name).join(', ')}`);
-  }
-  const loggedIn = state.profiles.filter(profile => profile.loggedIn);
-  if (loggedIn.length === 1) return loggedIn[0];
-  if (state.profiles.length === 1) return state.profiles[0];
-  throw new Error(`当前工作区有 ${state.profiles.length} 个 Microi 连接，请先调用 action="profiles"，再传 profile=name。`);
-}
-
-function buildApplicationsDir(profile) {
-  const title = profile.label || profile.apiBaseUrl || 'Microi';
-  const serverDir = `${title} (${hostPart(profile) || 'server'})`.replace(/[<>:"/\\|?*]/g, '_');
-  const osClientDir = [profile.osClient || 'default', profile.osClientType || 'default', profile.osClientNetwork || 'default']
-    .join('.').replace(/[<>:"/\\|?*]/g, '_');
-  return path.join(profile.syncRoot, serverDir, osClientDir, 'AI应用');
-}
-
-function brokerCoordinates(workspace) {
-  const normalizedRoot = process.platform === 'win32'
-    ? workspace.workspaceRoot.toLowerCase()
-    : workspace.workspaceRoot;
-  const key = crypto.createHash('sha256').update(`${normalizedRoot}\0${pluginVersion}`).digest('hex').slice(0, 24);
-  const runtimeRoot = path.resolve(process.env.MICROI_RUNTIME_HOME || path.join(os.homedir(), '.microi', 'runtime'));
-  const endpoint = process.env.MICROI_CODEX_BROKER_ENDPOINT || (process.platform === 'win32'
-    ? `\\\\.\\pipe\\microi-codex-${key}`
-    : path.join(runtimeRoot, 'brokers', `${key}.sock`));
-  return {
-    endpoint,
-    leasePath: path.resolve(process.env.MICROI_CODEX_BROKER_LEASE || path.join(runtimeRoot, 'leases', `microi-codex-${key}.json`)),
-    workspaceRoot: workspace.workspaceRoot,
-  };
-}
-
-function wait(milliseconds) {
-  return new Promise(resolve => setTimeout(resolve, milliseconds));
-}
-
-function readBrokerToken(leasePath) {
-  const lease = readJson(leasePath, {});
-  return typeof lease.token === 'string' ? lease.token : '';
-}
-
-class SharedBrokerClient {
-  constructor(workspace) {
-    this.coordinates = brokerCoordinates(workspace);
-    this.pending = new Map();
-    this.buffer = '';
-    this.closed = false;
-    this.spawnAttempted = false;
-    this.ready = this.connect();
-  }
-
-  startBroker() {
-    if (!fs.existsSync(brokerScriptPath)) {
-      throw new Error(`Codex Plugin 缺少共享 Broker：${brokerScriptPath}`);
-    }
-    const child = childProcess.spawn(process.execPath, [brokerScriptPath], {
-      cwd: pluginRoot,
-      detached: true,
-      windowsHide: true,
-      stdio: 'ignore',
-      env: {
-        ...process.env,
-        MICROI_CODEX_BROKER_ENDPOINT: this.coordinates.endpoint,
-        MICROI_CODEX_BROKER_LEASE: this.coordinates.leasePath,
-        MICROI_WORKSPACE_ROOT: this.coordinates.workspaceRoot,
-        MICROI_MCP_SERVER_PATH: mcpServerPath,
-        MICROI_TOOL_VERSION: pluginVersion,
-      },
-    });
-    child.on('error', () => { /* connect retry reports the actionable failure */ });
-    child.unref();
-  }
-
-  openSocket() {
-    return new Promise((resolve, reject) => {
-      const socket = net.createConnection(this.coordinates.endpoint);
-      const fail = error => {
-        socket.destroy();
-        reject(error);
-      };
-      socket.once('error', fail);
-      socket.once('connect', () => {
-        socket.off('error', fail);
-        this.socket = socket;
-        socket.setEncoding('utf8');
-        socket.on('data', chunk => this.onData(chunk));
-        socket.on('error', error => this.rejectAll(error));
-        socket.on('close', () => {
-          this.closed = true;
-          this.rejectAll(new Error('Microi shared broker disconnected'));
-        });
-        resolve();
-      });
-    });
-  }
-
-  async connect() {
-    let lastError;
-    for (let attempt = 0; attempt < 50; attempt += 1) {
-      try {
-        await this.openSocket();
-        return;
-      } catch (error) {
-        lastError = error;
-        if (!this.spawnAttempted || attempt === 15) {
-          this.spawnAttempted = true;
-          this.startBroker();
-        }
-        await wait(Math.min(40 + attempt * 12, 250));
-      }
-    }
-    throw new Error(`无法连接 Microi 共享 Broker：${lastError instanceof Error ? lastError.message : String(lastError)}`);
-  }
-
-  onData(chunk) {
-    this.buffer += chunk.toString('utf8');
-    let newline;
-    while ((newline = this.buffer.indexOf('\n')) >= 0) {
-      const line = this.buffer.slice(0, newline).trim();
-      this.buffer = this.buffer.slice(newline + 1);
-      if (!line) continue;
-      let message;
-      try { message = JSON.parse(line); } catch { continue; }
-      if (message.id == null) continue;
-      const pending = this.pending.get(String(message.id));
-      if (!pending) continue;
-      this.pending.delete(String(message.id));
-      if (message.error) pending.reject(new Error(typeof message.error === 'string' ? message.error : (message.error.message || JSON.stringify(message.error))));
-      else pending.resolve(message.result);
-    }
-  }
-
-  rejectAll(error) {
-    for (const pending of this.pending.values()) pending.reject(error);
-    this.pending.clear();
-  }
-
-  request(profile, method, params) {
-    return (async () => {
-      await this.ready;
-      if (this.closed || !this.socket || this.socket.destroyed) throw new Error('Microi shared broker is unavailable');
-      let auth = '';
-      for (let attempt = 0; attempt < 10 && !auth; attempt += 1) {
-        auth = readBrokerToken(this.coordinates.leasePath);
-        if (!auth) await wait(25);
-      }
-      if (!auth) throw new Error('Microi shared broker lease is unavailable');
-      const id = `router-${process.pid}-${++requestSequence}`;
-      const response = new Promise((resolve, reject) => this.pending.set(id, { resolve, reject }));
-      this.socket.write(`${JSON.stringify({
-        id,
-        auth,
-        type: 'request',
-        profile: { ...profile, applicationsDir: buildApplicationsDir(profile) },
-        method,
-        params,
-      })}\n`);
-      return response;
-    })();
-  }
-
-  close() {
-    try { this.socket?.end(); } catch { /* best effort */ }
-  }
-}
-
-function sharedBroker(profile) {
-  if (!brokerClient || brokerClient.closed) brokerClient = new SharedBrokerClient({ workspaceRoot: profile.workspaceRoot });
-  return brokerClient;
-}
-
-function requestThroughBroker(profile, method, params) {
-  return sharedBroker(profile).request(profile, method, params);
-}
-
-function resultText(value, isError = false) {
-  return {
-    content: [{ type: 'text', text: typeof value === 'string' ? value : JSON.stringify(value, null, 2) }],
-    ...(isError ? { isError: true } : {}),
-  };
-}
-
-function toolchainStatus(workspaceRoot) {
-  // 状态文件可能由另一工作区的后台更新器写入，只回读有限的诊断字段，
-  // 不透传日志/错误正文或未知字段，也不把安装版本冒充当前已加载版本。
-  const statusPath = path.join(path.resolve(process.env.MICROI_UPDATE_HOME || path.join(os.homedir(), '.microi', 'updater')), 'status.json');
-  let status = {};
-  try {
-    if (fs.statSync(statusPath).size <= 64 * 1024) status = readJson(statusPath, {});
-  } catch { /* 缺失/损坏状态不阻断连接发现 */ }
-  const version = value => /^\d+(?:\.\d+){2}$/.test(String(value || '')) ? String(value) : 'unknown';
-  const states = ['scheduled', 'running', 'completed', 'completed-with-warnings', 'deferred'];
-  const skills = readJson(path.join(workspaceRoot, 'microi.skills', '.microi-skills-manifest.json'), {});
-  return {
-    package: '@microi.net/cli',
-    loadedVersion: pluginVersion,
-    workspaceSkillsVersion: version(skills.bundleVersion),
-    automaticUpdate: {
-      enabled: process.env.MICROI_DISABLE_AUTO_UPDATE !== '1',
-      statusPath,
-      state: states.includes(status.state) ? status.state : 'unknown',
-      latestObservedVersion: version(status.latestVersion),
-      globalVersion: version(status.globalVersion),
-      checkedAt: typeof status.attemptedAt === 'string' && /^\d{4}-\d{2}-\d{2}T[\d:.]+Z$/.test(status.attemptedAt) ? status.attemptedAt : null,
-      // 共享状态只证明记录中的工作区；其它目录须单独 doctor 验证。
-      appliesToWorkspace: typeof status.workspace === 'string' && path.resolve(status.workspace) === path.resolve(workspaceRoot),
-    },
-  };
-}
-
-function baseInstructions() {
-  return `先调用 microi_codex action="profiles"；多连接时把返回的 name 作为 profile。所有业务动作由同源 Microi MCP 工具处理。
-每次新建或接续吾码任务必须先完整读取工作区 microi.skills/workspace-conventions/SKILL.md；尚未初始化时读取插件 skills/workspace-conventions/SKILL.md。同样强制执行其中的进度播报与非阻塞自动更新规范，适用于任何 AI 模型。
-首次说明必须以“Microi吾码开发工具版本”报告实际版本、官方最新版本及自动更新/Skills/MCP 同步状态；profiles.toolchain.loadedVersion=${pluginVersion} 只代表本进程，历史 latestObservedVersion 必须附 checkedAt，未知项写检测中，禁止猜测全局 CLI 或 npm 最新版。
-已有 CLI 时必须执行 microi update --background --workspace "<工作区绝对路径>" --json，自动升级 @microi.net/cli 到 npm 官方 latest 并同步 Skills/AI/MCP；不得等更新结束才继续工作，不终止或强制重载当前会话。用户明确关闭或宿主禁止执行时报告限制。`;
-}
-
-function toolCatalog() {
-  return [{
-    name: 'microi_codex',
-    description: 'Microi吾码统一入口。每次吾码任务先用 action="profiles" 查看连接与 toolchain 版本/自动更新状态，并读取 workspace-conventions/SKILL.md 执行强制版本播报与后台升级；多连接时传 profile=name。其余 action 复用原工具验证、确认、审计和回读。',
-    inputSchema: {
-      type: 'object',
-      additionalProperties: false,
-      required: ['action'],
-      properties: {
-        profile: { type: 'string', description: '可选：profiles 返回的 name、序号、OsClient 或连接名称。多连接时必填。' },
-        action: { type: 'string', description: 'profiles | list_tools | describe_tool | 任意原始 microi_* 工具名' },
-        params: { type: 'object', additionalProperties: true, description: '所选 action 的参数。' },
-      },
-    },
-  }];
-}
-
-async function callRouterTool(args) {
-  const action = String(args?.action || '').trim();
-  if (!action) return resultText('action 不能为空', true);
-  if (action === 'profiles' || action === 'profile_list') {
-    const state = loadProfiles();
-    return resultText({
-      workspace: state.workspace.workspaceRoot,
-      configPath: state.workspace.configPath,
-      count: state.profiles.length,
-      profiles: state.profiles.map(publicProfile),
-      toolchain: toolchainStatus(state.workspace.workspaceRoot),
-      next: state.profiles.length > 1 ? '后续调用请传 profile=name。' : '后续调用可省略 profile。',
-    });
-  }
-  try {
-    const profile = selectProfile(args?.profile);
-    return await requestThroughBroker(profile, 'tools/call', {
-      name: 'microi_codex',
-      arguments: { action, params: args?.params || {} },
-    });
-  } catch (error) {
-    return resultText(`Microi Agentx 路由失败：${error instanceof Error ? error.message : String(error)}`, true);
-  }
-}
-
-function resourceList() {
-  const state = loadProfiles();
-  return [{
-    uri: 'microi://codex/profiles',
-    name: 'microi_profiles',
-    title: 'Microi connection profiles',
-    description: '当前工作区 Microi 连接与登录状态。',
-    mimeType: 'application/json',
-  }, ...state.profiles.flatMap(profile => ['status', 'tools'].map(kind => ({
-    uri: `microi://codex/${encodeURIComponent(profile.name)}/${kind}`,
-    name: `microi_${profile.name}_${kind}`,
-    title: `Microi ${profile.label || profile.name} ${kind}`,
-    description: kind === 'status' ? '只读连接状态。' : '该连接的原始工具目录。',
-    mimeType: 'application/json',
-  })))];
-}
-
-async function readResource(uri) {
-  if (uri === 'microi://codex/profiles') {
-    const state = loadProfiles();
-    return { contents: [{ uri, mimeType: 'application/json', text: JSON.stringify({ profiles: state.profiles.map(publicProfile), toolchain: toolchainStatus(state.workspace.workspaceRoot) }, null, 2) }] };
-  }
-  const match = /^microi:\/\/codex\/([^/]+)\/(status|tools|action\/([^/]+)\/(.*))$/.exec(uri);
-  if (!match) throw new Error(`不支持的 Microi 资源 URI：${uri}`);
-  const profile = selectProfile(decodeURIComponent(match[1]));
-  let action;
-  let params = {};
-  if (match[2] === 'status') action = 'microi_get_status';
-  else if (match[2] === 'tools') action = 'list_tools';
-  else {
-    action = decodeURIComponent(match[3]);
-    const raw = decodeURIComponent(match[4] || '');
-    params = raw ? JSON.parse(raw) : {};
-  }
-  const result = await requestThroughBroker(profile, 'tools/call', {
-    name: 'microi_codex',
-    arguments: { action, params },
-  });
-  return { contents: [{ uri, mimeType: 'application/json', text: JSON.stringify(result, null, 2) }] };
-}
-
-function send(message) {
-  process.stdout.write(`${JSON.stringify(message)}\n`);
-}
-
-function sendResult(id, result) {
-  send({ jsonrpc: '2.0', id, result });
-}
-
-function sendError(id, code, message) {
-  send({ jsonrpc: '2.0', id, error: { code, message } });
-}
-
-async function handle(message) {
-  if (!message || message.jsonrpc !== '2.0') return;
-  const { id, method, params } = message;
-  if (method === 'initialize') {
-    sendResult(id, {
-      protocolVersion: params?.protocolVersion || PROTOCOL_VERSION,
-      capabilities: { tools: {}, resources: {} },
-      serverInfo: { name: 'Microi-Codex-Plugin', version: pluginVersion },
-      instructions: baseInstructions(),
-    });
-    return;
-  }
-  if (method === 'ping') { sendResult(id, {}); return; }
-  if (method === 'tools/list') { sendResult(id, { tools: toolCatalog() }); return; }
-  if (method === 'tools/call') {
-    if (params?.name !== 'microi_codex') { sendResult(id, resultText(`Unknown tool: ${params?.name || '(empty)'}`, true)); return; }
-    sendResult(id, await callRouterTool(params.arguments || {})); return;
-  }
-  if (method === 'resources/list') { sendResult(id, { resources: resourceList() }); return; }
-  if (method === 'resources/templates/list') {
-    sendResult(id, { resourceTemplates: [{
-      uriTemplate: 'microi://codex/{profile}/action/{action}/{params}',
-      name: 'microi_codex_action',
-      title: 'Microi action fallback',
-      description: '工具未注入时，按连接路由到同一原始 Microi 工具。params 是 URI 编码 JSON 对象。',
-      mimeType: 'application/json',
-    }] });
-    return;
-  }
-  if (method === 'resources/read') {
-    try { sendResult(id, await readResource(String(params?.uri || ''))); }
-    catch (error) { sendError(id, -32002, error instanceof Error ? error.message : String(error)); }
-    return;
-  }
-  if (method === 'shutdown') { sendResult(id, {}); shutdown(); return; }
-  if (method?.startsWith('notifications/')) return;
-  if (id != null) sendError(id, -32601, `Method not found: ${method}`);
-}
-
-function shutdown() {
-  if (shuttingDown) return;
-  shuttingDown = true;
-  brokerClient?.close();
-  brokerClient = null;
-}
-
-process.stdin.setEncoding('utf8');
-const automaticUpdateTimer = setTimeout(scheduleAutomaticUpdate, 1500);
-automaticUpdateTimer.unref();
-process.stdin.on('data', chunk => {
-  inputBuffer += chunk;
-  let newline;
-  while ((newline = inputBuffer.indexOf('\n')) >= 0) {
-    const line = inputBuffer.slice(0, newline).trim();
-    inputBuffer = inputBuffer.slice(newline + 1);
-    if (!line) continue;
-    let message;
-    try { message = JSON.parse(line); }
-    catch { continue; }
-    Promise.resolve(handle(message)).catch(error => {
-      if (message.id != null) sendError(message.id, -32603, error instanceof Error ? error.message : String(error));
-    });
-  }
-});
-process.stdin.on('end', () => { shutdown(); process.exit(0); });
-process.stdin.on('error', () => { shutdown(); process.exit(1); });
-process.stdout.on('error', error => { shutdown(); process.exit(error?.code === 'EPIPE' ? 0 : 1); });
-process.on('disconnect', () => { shutdown(); process.exit(0); });
-for (const signal of ['SIGINT', 'SIGTERM', 'SIGHUP']) process.on(signal, () => { shutdown(); process.exit(0); });
-process.on('exit', shutdown);
-
-const parentPid = process.ppid;
-if (parentPid > 1) {
-  const parentWatchTimer = setInterval(() => {
-    try { process.kill(parentPid, 0); }
-    catch (error) { if (error?.code === 'ESRCH') { shutdown(); process.exit(0); } }
-  }, 5000);
-  parentWatchTimer.unref();
-}
+#!/usr/bin/env node
+/*
+ * Microi Agentx Plugin 多连接路由器。
+ *
+ * 它只负责发现 VS Code/CLI 共用的工作区配置、选择连接并把请求转发给
+ * 同一份 Microi MCP bundle。所有业务 schema、确认口令、审计和写后回读
+ * 都由原 MCP 工具执行，本文件不实现第二套远端 API。
+ */
+
+const childProcess = require('node:child_process');
+const crypto = require('node:crypto');
+const fs = require('node:fs');
+const net = require('node:net');
+const os = require('node:os');
+const path = require('node:path');
+
+const CONFIG_DIR = 'Microi-V8-Engine';
+const CONFIG_FILE = '.microi-config.json';
+const TOKEN_FILE = '.microi-mcp-tokens.json';
+const PROTOCOL_VERSION = '2024-11-05';
+const pluginRoot = path.resolve(__dirname, '..');
+const mcpServerPath = path.resolve(process.env.MICROI_MCP_SERVER_PATH || path.join(__dirname, 'mcp-server.js'));
+const brokerScriptPath = path.resolve(process.env.MICROI_CODEX_BROKER_SCRIPT || path.join(__dirname, 'microi-codex-broker.js'));
+const packagePath = path.join(pluginRoot, 'package.json');
+const packageVersion = String(readJson(packagePath, {}).version || '').trim();
+const environmentVersion = String(process.env.MICROI_TOOL_VERSION || '').trim();
+// An installed plugin is self-describing. A stale parent MCP environment must
+// never force a newer package to reconnect to an older shared broker. The
+// version environment remains authoritative for the package-less stable CLI
+// runtime, whose current.json launcher selects one immutable version folder.
+const pluginVersion = /^\d+(?:\.\d+){2}$/.test(packageVersion)
+  ? packageVersion
+  : (/^\d+(?:\.\d+){2}$/.test(environmentVersion) ? environmentVersion : '0.0.0');
+let inputBuffer = '';
+let requestSequence = 0;
+let shuttingDown = false;
+let brokerClient = null;
+
+function readJson(filePath, fallback) {
+  try {
+    const parsed = JSON.parse(fs.readFileSync(filePath, 'utf8'));
+    return parsed && typeof parsed === 'object' && !Array.isArray(parsed) ? parsed : fallback;
+  } catch {
+    return fallback;
+  }
+}
+
+function normalizeUrl(value) {
+  return String(value || '').trim().replace(/\/+$/, '');
+}
+
+function safeName(value) {
+  return String(value || '').normalize('NFKD').replace(/[^\x00-\x7F]/g, '')
+    .replace(/[^A-Za-z0-9_]+/g, '_').replace(/_+/g, '_')
+    .replace(/^_+|_+$/g, '').toLowerCase().slice(0, 48);
+}
+
+function hostPart(profile) {
+  try { return safeName(new URL(profile.apiBaseUrl).host); } catch { return safeName(profile.apiBaseUrl); }
+}
+
+function profileIdentity(profile) {
+  return [
+    normalizeUrl(profile.apiBaseUrl),
+    String(profile.osClient || '').trim(),
+    String(profile.osClientType || '').trim(),
+    String(profile.osClientNetwork || '').trim(),
+  ].join('|');
+}
+
+function candidateRoots() {
+  const values = [
+    process.env.MICROI_WORKSPACE_ROOT,
+    process.env.CODEX_WORKSPACE_ROOT,
+    process.env.INIT_CWD,
+    process.cwd(),
+  ].filter(Boolean).map(value => path.resolve(value));
+  const roots = [];
+  for (const start of values) {
+    let current = start;
+    while (current && !roots.includes(current)) {
+      roots.push(current);
+      const parent = path.dirname(current);
+      if (parent === current) break;
+      current = parent;
+    }
+  }
+  return roots;
+}
+
+function resolveWorkspace() {
+  const explicitConfig = process.env.MICROI_CONFIG_PATH
+    ? path.resolve(process.env.MICROI_CONFIG_PATH)
+    : '';
+  const candidates = explicitConfig
+    ? [explicitConfig]
+    : candidateRoots().flatMap(root => [
+      path.join(root, CONFIG_DIR, CONFIG_FILE),
+      path.join(root, CONFIG_DIR.toLowerCase(), CONFIG_FILE),
+    ]);
+  const configPath = candidates.find(filePath => fs.existsSync(filePath));
+  const fallbackRoot = path.resolve(process.env.MICROI_WORKSPACE_ROOT || process.cwd());
+  if (!configPath) {
+    return {
+      workspaceRoot: fallbackRoot,
+      syncRoot: path.join(fallbackRoot, CONFIG_DIR),
+      configPath: path.join(fallbackRoot, CONFIG_DIR, CONFIG_FILE),
+      tokenPath: path.join(fallbackRoot, CONFIG_DIR, TOKEN_FILE),
+      config: {},
+    };
+  }
+  const syncRoot = path.dirname(configPath);
+  return {
+    workspaceRoot: path.dirname(syncRoot),
+    syncRoot,
+    configPath,
+    tokenPath: path.join(syncRoot, TOKEN_FILE),
+    config: readJson(configPath, {}),
+  };
+}
+
+function scheduleAutomaticUpdate() {
+  if (process.env.MICROI_DISABLE_AUTO_UPDATE === '1') return;
+  const cliPath = path.join(__dirname, 'microi-cli.js');
+  if (!fs.existsSync(cliPath)) return;
+  const workspace = resolveWorkspace();
+  try {
+    const child = childProcess.spawn(process.execPath, [
+      cliPath,
+      'update',
+      '--background',
+      '--workspace',
+      workspace.workspaceRoot,
+      '--json',
+    ], {
+      cwd: pluginRoot,
+      detached: true,
+      windowsHide: true,
+      stdio: 'ignore',
+      env: { ...process.env },
+    });
+    // 不等待更新、不重启当前 Router。新版本仅供后续新进程使用。
+    child.on('error', () => { /* 下一次启动自动重试 */ });
+    child.unref();
+  } catch {
+    // 自动更新永远不能成为 MCP 启动门禁。
+  }
+}
+
+function loadProfiles() {
+  const workspace = resolveWorkspace();
+  const configured = Array.isArray(workspace.config.profiles)
+    ? workspace.config.profiles
+    : [];
+  const rawProfiles = configured.length > 0
+    ? configured
+    : (workspace.config.apiBaseUrl ? [{
+      label: workspace.config.osClient || workspace.config.apiBaseUrl,
+      apiBaseUrl: workspace.config.apiBaseUrl,
+      osClient: workspace.config.osClient || '',
+    }] : []);
+  const tokens = readJson(workspace.tokenPath, {});
+  const identityNames = rawProfiles.map(profile => safeName(profile.osClient || profile.label) || hostPart(profile) || 'default');
+  const counts = identityNames.reduce((map, name) => map.set(name, (map.get(name) || 0) + 1), new Map());
+  const used = new Set();
+  const profiles = rawProfiles.filter(profile => /^https?:\/\//i.test(String(profile.apiBaseUrl || ''))).map((raw, index) => {
+    const profile = {
+      label: String(raw.label || raw.sysShortTitle || raw.sysTitle || raw.osClient || raw.apiBaseUrl || ''),
+      apiBaseUrl: normalizeUrl(raw.apiBaseUrl),
+      osClient: String(raw.osClient || '').trim(),
+      osClientType: String(raw.osClientType || '').trim(),
+      osClientNetwork: String(raw.osClientNetwork || '').trim(),
+    };
+    const identityName = identityNames[index];
+    const host = hostPart(profile);
+    const base = `microi_${identityName}`;
+    let name = counts.get(identityName) > 1 && host && host !== identityName ? `${base}_${host}` : base;
+    if (used.has(name) && host) name = `${base}_${host}`;
+    let suffix = 2;
+    while (used.has(name)) name = `${base}_${suffix++}`;
+    used.add(name);
+    const exactKey = profileIdentity(profile);
+    const legacyKey = profile.osClient ? `${profile.apiBaseUrl}|${profile.osClient}` : profile.apiBaseUrl;
+    return {
+      ...profile,
+      index: index + 1,
+      name,
+      identity: exactKey,
+      loggedIn: typeof tokens[exactKey] === 'string' || typeof tokens[legacyKey] === 'string',
+      workspaceRoot: workspace.workspaceRoot,
+      syncRoot: workspace.syncRoot,
+      tokenPath: workspace.tokenPath,
+    };
+  });
+  return { workspace, profiles };
+}
+
+function publicProfile(profile) {
+  return {
+    index: profile.index,
+    name: profile.name,
+    label: profile.label,
+    apiBaseUrl: profile.apiBaseUrl,
+    osClient: profile.osClient,
+    osClientType: profile.osClientType,
+    osClientNetwork: profile.osClientNetwork,
+    loggedIn: profile.loggedIn,
+  };
+}
+
+function selectProfile(selector) {
+  const state = loadProfiles();
+  if (state.profiles.length === 0) {
+    throw new Error(`当前工作区尚未初始化 Microi。请在 ${state.workspace.workspaceRoot} 运行 bundled CLI 的 init 命令。`);
+  }
+  const raw = String(selector || '').trim();
+  if (raw) {
+    const lower = raw.toLowerCase();
+    const matches = state.profiles.filter(profile =>
+      String(profile.index) === raw
+      || profile.name.toLowerCase() === lower
+      || profile.osClient.toLowerCase() === lower
+      || profile.label.toLowerCase() === lower
+      || profile.identity.toLowerCase() === lower
+    );
+    if (matches.length === 1) return matches[0];
+    if (matches.length > 1) throw new Error(`连接选择“${raw}”存在歧义，请改用 profiles 返回的 name。`);
+    throw new Error(`未找到连接“${raw}”。可用连接：${state.profiles.map(item => item.name).join(', ')}`);
+  }
+  const loggedIn = state.profiles.filter(profile => profile.loggedIn);
+  if (loggedIn.length === 1) return loggedIn[0];
+  if (state.profiles.length === 1) return state.profiles[0];
+  throw new Error(`当前工作区有 ${state.profiles.length} 个 Microi 连接，请先调用 action="profiles"，再传 profile=name。`);
+}
+
+function buildApplicationsDir(profile) {
+  const title = profile.label || profile.apiBaseUrl || 'Microi';
+  const serverDir = `${title} (${hostPart(profile) || 'server'})`.replace(/[<>:"/\\|?*]/g, '_');
+  const osClientDir = [profile.osClient || 'default', profile.osClientType || 'default', profile.osClientNetwork || 'default']
+    .join('.').replace(/[<>:"/\\|?*]/g, '_');
+  return path.join(profile.syncRoot, serverDir, osClientDir, 'AI应用');
+}
+
+function brokerCoordinates(workspace) {
+  const normalizedRoot = process.platform === 'win32'
+    ? workspace.workspaceRoot.toLowerCase()
+    : workspace.workspaceRoot;
+  const key = crypto.createHash('sha256').update(`${normalizedRoot}\0${pluginVersion}`).digest('hex').slice(0, 24);
+  const runtimeRoot = path.resolve(process.env.MICROI_RUNTIME_HOME || path.join(os.homedir(), '.microi', 'runtime'));
+  const endpoint = process.env.MICROI_CODEX_BROKER_ENDPOINT || (process.platform === 'win32'
+    ? `\\\\.\\pipe\\microi-codex-${key}`
+    : path.join(runtimeRoot, 'brokers', `${key}.sock`));
+  return {
+    endpoint,
+    leasePath: path.resolve(process.env.MICROI_CODEX_BROKER_LEASE || path.join(runtimeRoot, 'leases', `microi-codex-${key}.json`)),
+    workspaceRoot: workspace.workspaceRoot,
+  };
+}
+
+function wait(milliseconds) {
+  return new Promise(resolve => setTimeout(resolve, milliseconds));
+}
+
+function readBrokerToken(leasePath) {
+  const lease = readJson(leasePath, {});
+  return typeof lease.token === 'string' ? lease.token : '';
+}
+
+class SharedBrokerClient {
+  constructor(workspace) {
+    this.coordinates = brokerCoordinates(workspace);
+    this.pending = new Map();
+    this.buffer = '';
+    this.closed = false;
+    this.spawnAttempted = false;
+    this.ready = this.connect();
+  }
+
+  startBroker() {
+    if (!fs.existsSync(brokerScriptPath)) {
+      throw new Error(`Codex Plugin 缺少共享 Broker：${brokerScriptPath}`);
+    }
+    const child = childProcess.spawn(process.execPath, [brokerScriptPath], {
+      cwd: pluginRoot,
+      detached: true,
+      windowsHide: true,
+      stdio: 'ignore',
+      env: {
+        ...process.env,
+        MICROI_CODEX_BROKER_ENDPOINT: this.coordinates.endpoint,
+        MICROI_CODEX_BROKER_LEASE: this.coordinates.leasePath,
+        MICROI_WORKSPACE_ROOT: this.coordinates.workspaceRoot,
+        MICROI_MCP_SERVER_PATH: mcpServerPath,
+        MICROI_TOOL_VERSION: pluginVersion,
+      },
+    });
+    child.on('error', () => { /* connect retry reports the actionable failure */ });
+    child.unref();
+  }
+
+  openSocket() {
+    return new Promise((resolve, reject) => {
+      const socket = net.createConnection(this.coordinates.endpoint);
+      const fail = error => {
+        socket.destroy();
+        reject(error);
+      };
+      socket.once('error', fail);
+      socket.once('connect', () => {
+        socket.off('error', fail);
+        this.socket = socket;
+        socket.setEncoding('utf8');
+        socket.on('data', chunk => this.onData(chunk));
+        socket.on('error', error => this.rejectAll(error));
+        socket.on('close', () => {
+          this.closed = true;
+          this.rejectAll(new Error('Microi shared broker disconnected'));
+        });
+        resolve();
+      });
+    });
+  }
+
+  async connect() {
+    let lastError;
+    for (let attempt = 0; attempt < 50; attempt += 1) {
+      try {
+        await this.openSocket();
+        return;
+      } catch (error) {
+        lastError = error;
+        if (!this.spawnAttempted || attempt === 15) {
+          this.spawnAttempted = true;
+          this.startBroker();
+        }
+        await wait(Math.min(40 + attempt * 12, 250));
+      }
+    }
+    throw new Error(`无法连接 Microi 共享 Broker：${lastError instanceof Error ? lastError.message : String(lastError)}`);
+  }
+
+  onData(chunk) {
+    this.buffer += chunk.toString('utf8');
+    let newline;
+    while ((newline = this.buffer.indexOf('\n')) >= 0) {
+      const line = this.buffer.slice(0, newline).trim();
+      this.buffer = this.buffer.slice(newline + 1);
+      if (!line) continue;
+      let message;
+      try { message = JSON.parse(line); } catch { continue; }
+      if (message.id == null) continue;
+      const pending = this.pending.get(String(message.id));
+      if (!pending) continue;
+      this.pending.delete(String(message.id));
+      if (message.error) pending.reject(new Error(typeof message.error === 'string' ? message.error : (message.error.message || JSON.stringify(message.error))));
+      else pending.resolve(message.result);
+    }
+  }
+
+  rejectAll(error) {
+    for (const pending of this.pending.values()) pending.reject(error);
+    this.pending.clear();
+  }
+
+  request(profile, method, params) {
+    return (async () => {
+      await this.ready;
+      if (this.closed || !this.socket || this.socket.destroyed) throw new Error('Microi shared broker is unavailable');
+      let auth = '';
+      for (let attempt = 0; attempt < 10 && !auth; attempt += 1) {
+        auth = readBrokerToken(this.coordinates.leasePath);
+        if (!auth) await wait(25);
+      }
+      if (!auth) throw new Error('Microi shared broker lease is unavailable');
+      const id = `router-${process.pid}-${++requestSequence}`;
+      const response = new Promise((resolve, reject) => this.pending.set(id, { resolve, reject }));
+      this.socket.write(`${JSON.stringify({
+        id,
+        auth,
+        type: 'request',
+        profile: { ...profile, applicationsDir: buildApplicationsDir(profile) },
+        method,
+        params,
+      })}\n`);
+      return response;
+    })();
+  }
+
+  close() {
+    try { this.socket?.end(); } catch { /* best effort */ }
+  }
+}
+
+function sharedBroker(profile) {
+  if (!brokerClient || brokerClient.closed) brokerClient = new SharedBrokerClient({ workspaceRoot: profile.workspaceRoot });
+  return brokerClient;
+}
+
+function requestThroughBroker(profile, method, params) {
+  return sharedBroker(profile).request(profile, method, params);
+}
+
+function resultText(value, isError = false) {
+  return {
+    content: [{ type: 'text', text: typeof value === 'string' ? value : JSON.stringify(value, null, 2) }],
+    ...(isError ? { isError: true } : {}),
+  };
+}
+
+function toolchainStatus(workspaceRoot) {
+  // 状态文件可能由另一工作区的后台更新器写入，只回读有限的诊断字段，
+  // 不透传日志/错误正文或未知字段，也不把安装版本冒充当前已加载版本。
+  const statusPath = path.join(path.resolve(process.env.MICROI_UPDATE_HOME || path.join(os.homedir(), '.microi', 'updater')), 'status.json');
+  let status = {};
+  try {
+    if (fs.statSync(statusPath).size <= 64 * 1024) status = readJson(statusPath, {});
+  } catch { /* 缺失/损坏状态不阻断连接发现 */ }
+  const version = value => /^\d+(?:\.\d+){2}$/.test(String(value || '')) ? String(value) : 'unknown';
+  const states = ['scheduled', 'running', 'completed', 'completed-with-warnings', 'deferred'];
+  const skills = readJson(path.join(workspaceRoot, 'microi.skills', '.microi-skills-manifest.json'), {});
+  return {
+    package: '@microi.net/cli',
+    loadedVersion: pluginVersion,
+    workspaceSkillsVersion: version(skills.bundleVersion),
+    automaticUpdate: {
+      enabled: process.env.MICROI_DISABLE_AUTO_UPDATE !== '1',
+      statusPath,
+      state: states.includes(status.state) ? status.state : 'unknown',
+      latestObservedVersion: version(status.latestVersion),
+      globalVersion: version(status.globalVersion),
+      checkedAt: typeof status.attemptedAt === 'string' && /^\d{4}-\d{2}-\d{2}T[\d:.]+Z$/.test(status.attemptedAt) ? status.attemptedAt : null,
+      // 共享状态只证明记录中的工作区；其它目录须单独 doctor 验证。
+      appliesToWorkspace: typeof status.workspace === 'string' && path.resolve(status.workspace) === path.resolve(workspaceRoot),
+    },
+  };
+}
+
+function baseInstructions() {
+  return `先调用 microi_codex action="profiles"；多连接时把返回的 name 作为 profile。所有业务动作由同源 Microi MCP 工具处理。
+每次新建或接续吾码任务必须先完整读取工作区 microi.skills/workspace-conventions/SKILL.md；尚未初始化时读取插件 skills/workspace-conventions/SKILL.md。同样强制执行其中的进度播报与非阻塞自动更新规范，适用于任何 AI 模型。
+首次说明必须以“Microi吾码开发工具版本”报告实际版本、官方最新版本及自动更新/Skills/MCP 同步状态；profiles.toolchain.loadedVersion=${pluginVersion} 只代表本进程，历史 latestObservedVersion 必须附 checkedAt，未知项写检测中，禁止猜测全局 CLI 或 npm 最新版。
+已有 CLI 时必须执行 microi update --background --workspace "<工作区绝对路径>" --json，自动升级 @microi.net/cli 到 npm 官方 latest 并同步 Skills/AI/MCP；不得等更新结束才继续工作，不终止或强制重载当前会话。用户明确关闭或宿主禁止执行时报告限制。`;
+}
+
+function toolCatalog() {
+  return [{
+    name: 'microi_codex',
+    description: 'Microi吾码统一入口。每次吾码任务先用 action="profiles" 查看连接与 toolchain 版本/自动更新状态，并读取 workspace-conventions/SKILL.md 执行强制版本播报与后台升级；多连接时传 profile=name。其余 action 复用原工具验证、确认、审计和回读。',
+    inputSchema: {
+      type: 'object',
+      additionalProperties: false,
+      required: ['action'],
+      properties: {
+        profile: { type: 'string', description: '可选：profiles 返回的 name、序号、OsClient 或连接名称。多连接时必填。' },
+        action: { type: 'string', description: 'profiles | list_tools | describe_tool | 任意原始 microi_* 工具名' },
+        params: { type: 'object', additionalProperties: true, description: '所选 action 的参数。' },
+      },
+    },
+  }];
+}
+
+async function callRouterTool(args) {
+  const action = String(args?.action || '').trim();
+  if (!action) return resultText('action 不能为空', true);
+  if (action === 'profiles' || action === 'profile_list') {
+    const state = loadProfiles();
+    return resultText({
+      workspace: state.workspace.workspaceRoot,
+      configPath: state.workspace.configPath,
+      count: state.profiles.length,
+      profiles: state.profiles.map(publicProfile),
+      toolchain: toolchainStatus(state.workspace.workspaceRoot),
+      next: state.profiles.length > 1 ? '后续调用请传 profile=name。' : '后续调用可省略 profile。',
+    });
+  }
+  try {
+    const profile = selectProfile(args?.profile);
+    return await requestThroughBroker(profile, 'tools/call', {
+      name: 'microi_codex',
+      arguments: { action, params: args?.params || {} },
+    });
+  } catch (error) {
+    return resultText(`Microi Agentx 路由失败：${error instanceof Error ? error.message : String(error)}`, true);
+  }
+}
+
+function resourceList() {
+  const state = loadProfiles();
+  return [{
+    uri: 'microi://codex/profiles',
+    name: 'microi_profiles',
+    title: 'Microi connection profiles',
+    description: '当前工作区 Microi 连接与登录状态。',
+    mimeType: 'application/json',
+  }, ...state.profiles.flatMap(profile => ['status', 'tools'].map(kind => ({
+    uri: `microi://codex/${encodeURIComponent(profile.name)}/${kind}`,
+    name: `microi_${profile.name}_${kind}`,
+    title: `Microi ${profile.label || profile.name} ${kind}`,
+    description: kind === 'status' ? '只读连接状态。' : '该连接的原始工具目录。',
+    mimeType: 'application/json',
+  })))];
+}
+
+async function readResource(uri) {
+  if (uri === 'microi://codex/profiles') {
+    const state = loadProfiles();
+    return { contents: [{ uri, mimeType: 'application/json', text: JSON.stringify({ profiles: state.profiles.map(publicProfile), toolchain: toolchainStatus(state.workspace.workspaceRoot) }, null, 2) }] };
+  }
+  const match = /^microi:\/\/codex\/([^/]+)\/(status|tools|action\/([^/]+)\/(.*))$/.exec(uri);
+  if (!match) throw new Error(`不支持的 Microi 资源 URI：${uri}`);
+  const profile = selectProfile(decodeURIComponent(match[1]));
+  let action;
+  let params = {};
+  if (match[2] === 'status') action = 'microi_get_status';
+  else if (match[2] === 'tools') action = 'list_tools';
+  else {
+    action = decodeURIComponent(match[3]);
+    const raw = decodeURIComponent(match[4] || '');
+    params = raw ? JSON.parse(raw) : {};
+  }
+  const result = await requestThroughBroker(profile, 'tools/call', {
+    name: 'microi_codex',
+    arguments: { action, params },
+  });
+  return { contents: [{ uri, mimeType: 'application/json', text: JSON.stringify(result, null, 2) }] };
+}
+
+function send(message) {
+  process.stdout.write(`${JSON.stringify(message)}\n`);
+}
+
+function sendResult(id, result) {
+  send({ jsonrpc: '2.0', id, result });
+}
+
+function sendError(id, code, message) {
+  send({ jsonrpc: '2.0', id, error: { code, message } });
+}
+
+async function handle(message) {
+  if (!message || message.jsonrpc !== '2.0') return;
+  const { id, method, params } = message;
+  if (method === 'initialize') {
+    sendResult(id, {
+      protocolVersion: params?.protocolVersion || PROTOCOL_VERSION,
+      capabilities: { tools: {}, resources: {} },
+      serverInfo: { name: 'Microi-Codex-Plugin', version: pluginVersion },
+      instructions: baseInstructions(),
+    });
+    return;
+  }
+  if (method === 'ping') { sendResult(id, {}); return; }
+  if (method === 'tools/list') { sendResult(id, { tools: toolCatalog() }); return; }
+  if (method === 'tools/call') {
+    if (params?.name !== 'microi_codex') { sendResult(id, resultText(`Unknown tool: ${params?.name || '(empty)'}`, true)); return; }
+    sendResult(id, await callRouterTool(params.arguments || {})); return;
+  }
+  if (method === 'resources/list') { sendResult(id, { resources: resourceList() }); return; }
+  if (method === 'resources/templates/list') {
+    sendResult(id, { resourceTemplates: [{
+      uriTemplate: 'microi://codex/{profile}/action/{action}/{params}',
+      name: 'microi_codex_action',
+      title: 'Microi action fallback',
+      description: '工具未注入时，按连接路由到同一原始 Microi 工具。params 是 URI 编码 JSON 对象。',
+      mimeType: 'application/json',
+    }] });
+    return;
+  }
+  if (method === 'resources/read') {
+    try { sendResult(id, await readResource(String(params?.uri || ''))); }
+    catch (error) { sendError(id, -32002, error instanceof Error ? error.message : String(error)); }
+    return;
+  }
+  if (method === 'shutdown') { sendResult(id, {}); shutdown(); return; }
+  if (method?.startsWith('notifications/')) return;
+  if (id != null) sendError(id, -32601, `Method not found: ${method}`);
+}
+
+function shutdown() {
+  if (shuttingDown) return;
+  shuttingDown = true;
+  brokerClient?.close();
+  brokerClient = null;
+}
+
+process.stdin.setEncoding('utf8');
+const automaticUpdateTimer = setTimeout(scheduleAutomaticUpdate, 1500);
+automaticUpdateTimer.unref();
+process.stdin.on('data', chunk => {
+  inputBuffer += chunk;
+  let newline;
+  while ((newline = inputBuffer.indexOf('\n')) >= 0) {
+    const line = inputBuffer.slice(0, newline).trim();
+    inputBuffer = inputBuffer.slice(newline + 1);
+    if (!line) continue;
+    let message;
+    try { message = JSON.parse(line); }
+    catch { continue; }
+    Promise.resolve(handle(message)).catch(error => {
+      if (message.id != null) sendError(message.id, -32603, error instanceof Error ? error.message : String(error));
+    });
+  }
+});
+process.stdin.on('end', () => { shutdown(); process.exit(0); });
+process.stdin.on('error', () => { shutdown(); process.exit(1); });
+process.stdout.on('error', error => { shutdown(); process.exit(error?.code === 'EPIPE' ? 0 : 1); });
+process.on('disconnect', () => { shutdown(); process.exit(0); });
+for (const signal of ['SIGINT', 'SIGTERM', 'SIGHUP']) process.on(signal, () => { shutdown(); process.exit(0); });
+process.on('exit', shutdown);
+
+const parentPid = process.ppid;
+if (parentPid > 1) {
+  const parentWatchTimer = setInterval(() => {
+    try { process.kill(parentPid, 0); }
+    catch (error) { if (error?.code === 'ESRCH') { shutdown(); process.exit(0); } }
+  }, 5000);
+  parentWatchTimer.unref();
+}