@tea-agent/loop-agent 0.40.0-next.8 → 0.40.0

package/dist/worker/console/pi-plugins.js

@@ -0,0 +1,179 @@
+import { existsSync, mkdirSync, readFileSync } from "node:fs";
+import { spawn } from "node:child_process";
+import os from "node:os";
+import path from "node:path";
+import catalogData from "./pi-plugins.catalog.json" with { type: "json" };
+export function getPiAgentDir() {
+    const envDir = process.env.PI_CODING_AGENT_DIR;
+    return envDir ? envDir : path.join(os.homedir(), ".pi", "agent");
+}
+function npmRoot() {
+    return path.join(getPiAgentDir(), "npm");
+}
+function nodeModulesRoot() {
+    return path.join(npmRoot(), "node_modules");
+}
+function settingsPath() {
+    return path.join(getPiAgentDir(), "settings.json");
+}
+function readSettings() {
+    try {
+        if (!existsSync(settingsPath()))
+            return {};
+        return JSON.parse(readFileSync(settingsPath(), "utf8"));
+    }
+    catch {
+        return {};
+    }
+}
+function packageNameFromSpec(spec) {
+    const base = spec.startsWith("npm:") ? spec.slice(4) : spec;
+    // 剥掉尾部 @<version>（如 pi-lens@3.8.72 → pi-lens），但保留 scoped 包名开头的 @
+    // （如 @scope/pkg → @scope/pkg，@scope/pkg@1.0.0 → @scope/pkg）。
+    const at = base.lastIndexOf("@");
+    if (at > 0)
+        return base.slice(0, at);
+    return base;
+}
+function listInstalledPackageNames() {
+    const settings = readSettings();
+    return (settings.packages ?? []).map(packageNameFromSpec);
+}
+function isPackageInstalledOnDisk(pkg) {
+    return existsSync(path.join(nodeModulesRoot(), ...pkg.split("/")));
+}
+/** 读取已安装包的实际版本（node_modules 里 package.json 的 version）。 */
+function readInstalledVersion(pkg) {
+    try {
+        const manifest = JSON.parse(readFileSync(path.join(nodeModulesRoot(), ...pkg.split("/"), "package.json"), "utf8"));
+        return typeof manifest.version === "string" ? manifest.version : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+/** 目录 + 每个插件的已装状态（settings.packages 声明 + node_modules 存在）+ 已装版本。 */
+export function listPiPlugins() {
+    const installed = new Set(listInstalledPackageNames());
+    const plugins = catalogData.plugins.map((p) => {
+        const isInstalled = installed.has(p.name) && isPackageInstalledOnDisk(p.name);
+        return {
+            ...p,
+            installed: isInstalled,
+            installedVersion: isInstalled ? readInstalledVersion(p.name) : undefined,
+        };
+    });
+    return { summary: catalogData.summary, plugins };
+}
+let cachedRegistry;
+/** 读取 npm 配置的 registry（`npm config get registry`），失败回退官方源。 */
+function getNpmRegistry() {
+    if (cachedRegistry)
+        return Promise.resolve(cachedRegistry);
+    return new Promise((resolve) => {
+        const fallback = () => {
+            cachedRegistry = "https://registry.npmjs.org/";
+            resolve(cachedRegistry);
+        };
+        try {
+            const child = spawn("npm", ["config", "get", "registry"], {
+                stdio: ["ignore", "pipe", "pipe"],
+                cwd: getPiAgentDir(),
+                shell: process.platform === "win32",
+            });
+            let out = "";
+            child.stdout.on("data", (d) => (out += d.toString("utf8")));
+            child.on("close", () => {
+                const reg = out.trim();
+                cachedRegistry = reg || "https://registry.npmjs.org/";
+                resolve(cachedRegistry);
+            });
+            child.on("error", fallback);
+        }
+        catch {
+            fallback();
+        }
+    });
+}
+/** 从 npm 配置的仓库拉取某包的全部已发布版本 + latest。 */
+export async function listPiPluginVersions(name) {
+    const registry = (await getNpmRegistry()).replace(/\/+$/, "");
+    const url = `${registry}/${encodeURIComponent(name).replace(/%2F/g, "/")}`;
+    try {
+        const res = await fetch(url, {
+            headers: { accept: "application/json", "user-agent": "loop-agent/1.0" },
+        });
+        if (!res.ok)
+            return { ok: false, error: `npm registry HTTP ${res.status}` };
+        const body = (await res.json());
+        const versions = body.versions && typeof body.versions === "object"
+            ? Object.keys(body.versions).sort((a, b) => b.localeCompare(a, undefined, { numeric: true }))
+            : [];
+        const latest = body["dist-tags"]?.latest;
+        return {
+            ok: true,
+            versions,
+            latest: typeof latest === "string" ? latest : undefined,
+        };
+    }
+    catch (error) {
+        return {
+            ok: false,
+            error: error instanceof Error ? error.message : String(error),
+        };
+    }
+}
+function runPi(args) {
+    return new Promise((resolve) => {
+        mkdirSync(getPiAgentDir(), { recursive: true });
+        // Windows 上 pi 是 pi.cmd（无 .exe），.cmd/.bat 只能 shell:true 解析。
+        const child = spawn("pi", args, {
+            stdio: ["ignore", "pipe", "pipe"],
+            cwd: getPiAgentDir(),
+            shell: process.platform === "win32",
+        });
+        let stdout = "";
+        let stderr = "";
+        child.stdout.on("data", (d) => (stdout += d.toString("utf8")));
+        child.stderr.on("data", (d) => (stderr += d.toString("utf8")));
+        child.on("close", (code) => resolve({ code: code ?? -1, stdout, stderr }));
+        child.on("error", (err) => resolve({ code: -1, stdout, stderr: String(err?.message ?? err) }));
+    });
+}
+/** 校验安装目标是否在目录中，且该包确实声明了 pi.extensions（可安装为 Pi 扩展）。 */
+export function findCatalogPlugin(name) {
+    return catalogData.plugins.find((p) => p.name === name);
+}
+/** 全局（用户级 ~/.pi/agent）安装：调用 `pi install npm:<name>`（可带版本，缺省为最新）。 */
+export async function installPiPlugin(name, version) {
+    const entry = findCatalogPlugin(name);
+    if (!entry) {
+        return { ok: false, error: `包 ${name} 不在插件目录中` };
+    }
+    if (!entry.valid) {
+        return {
+            ok: false,
+            error: `包 ${name} 未声明 pi.extensions，无法作为 Pi 扩展使用`,
+        };
+    }
+    const spec = version && version.trim() ? `npm:${name}@${version.trim()}` : `npm:${name}`;
+    const result = await runPi(["install", spec]);
+    if (result.code !== 0) {
+        return {
+            ok: false,
+            error: `pi install 失败 (exit ${result.code}): ${(result.stderr || result.stdout).slice(0, 400)}`,
+        };
+    }
+    return { ok: true };
+}
+/** 全局卸载：调用 `pi remove npm:<name>`。 */
+export async function uninstallPiPlugin(name) {
+    const result = await runPi(["remove", `npm:${name}`]);
+    if (result.code !== 0) {
+        return {
+            ok: false,
+            error: `pi remove 失败 (exit ${result.code}): ${(result.stderr || result.stdout).slice(0, 400)}`,
+        };
+    }
+    return { ok: true };
+}

package/dist/worker/console/routes.js

@@ -8,6 +8,7 @@ import { buildOperatorSurfaceHealthV1 } from "./operator-surface-health.js";
 import { ROUTES } from "../observe/routes.js";
 import { evaluateMutationGate, injectConfirmationTokenScript, isMutationMethod, } from "./security.js";
 import { listDagRunsForRecovery } from "./resolve-dag-run-for-task.js";
+import { installPiPlugin, listPiPluginVersions, listPiPlugins, uninstallPiPlugin, } from "./pi-plugins.js";
 import { pickNativeWorkspaceDirectory } from "./native-directory-picker.js";
 export function sendJson(res, status, body, extraHeaders) {
     const payload = JSON.stringify(body);
@@ -462,6 +463,95 @@ async function handleNightAuxTickerPost(req, res, ctx) {
     const status = ticker.setEnabled(body.enabled);
     sendJson(res, 200, { ok: true, ticker: status });
 }
+async function handlePiPluginInstall(req, res) {
+    let body;
+    try {
+        body = (await readJsonBody(req));
+    }
+    catch (error) {
+        sendJson(res, 400, {
+            ok: false,
+            error: {
+                code: "INVALID_INPUT",
+                message: error instanceof Error ? error.message : String(error),
+            },
+        });
+        return;
+    }
+    const name = typeof body.name === "string" ? body.name.trim() : "";
+    if (!name) {
+        sendJson(res, 400, {
+            ok: false,
+            error: { code: "INVALID_INPUT", message: "missing package name" },
+        });
+        return;
+    }
+    const version = typeof body.version === "string" ? body.version.trim() : undefined;
+    try {
+        const result = await installPiPlugin(name, version);
+        if (!result.ok) {
+            sendJson(res, 400, {
+                ok: false,
+                error: { code: "INSTALL_FAILED", message: result.error },
+            });
+            return;
+        }
+        sendJson(res, 200, { ok: true });
+    }
+    catch (error) {
+        sendJson(res, 500, {
+            ok: false,
+            error: {
+                code: "INTERNAL_ERROR",
+                message: error instanceof Error ? error.message : String(error),
+            },
+        });
+    }
+}
+async function handlePiPluginUninstall(req, res) {
+    let body;
+    try {
+        body = (await readJsonBody(req));
+    }
+    catch (error) {
+        sendJson(res, 400, {
+            ok: false,
+            error: {
+                code: "INVALID_INPUT",
+                message: error instanceof Error ? error.message : String(error),
+            },
+        });
+        return;
+    }
+    const name = typeof body.name === "string" ? body.name.trim() : "";
+    if (!name) {
+        sendJson(res, 400, {
+            ok: false,
+            error: { code: "INVALID_INPUT", message: "missing package name" },
+        });
+        return;
+    }
+    try {
+        const result = await uninstallPiPlugin(name);
+        if (!result.ok) {
+            sendJson(res, 400, {
+                ok: false,
+                error: { code: "UNINSTALL_FAILED", message: result.error },
+            });
+            return;
+        }
+        sendJson(res, 200, { ok: true });
+    }
+    catch (error) {
+        sendJson(res, 500, {
+            ok: false,
+            error: {
+                code: "INTERNAL_ERROR",
+                message: error instanceof Error ? error.message : String(error),
+            },
+        });
+    }
+}
 export async function handleConsoleOperatorRequest(req, res, ctx) {
     const method = (req.method ?? "GET").toUpperCase();
     const url = new URL(req.url ?? "/", "http://localhost");
@@ -495,6 +585,34 @@ export async function handleConsoleOperatorRequest(req, res, ctx) {
         await handleNightAuxTickerGet(req, res, ctx);
         return true;
     }
+    if (method === "GET" && pathname === "/api/operator/v1/pi-plugins") {
+        sendJson(res, 200, { ok: true, data: listPiPlugins() });
+        return true;
+    }
+    if (method === "GET" &&
+        pathname === "/api/operator/v1/pi-plugins/versions") {
+        const name = url.searchParams.get("name")?.trim() ?? "";
+        if (!name) {
+            sendJson(res, 400, {
+                ok: false,
+                error: { code: "INVALID_INPUT", message: "missing name" },
+            });
+            return true;
+        }
+        const result = await listPiPluginVersions(name);
+        if (!result.ok) {
+            sendJson(res, 400, {
+                ok: false,
+                error: { code: "FETCH_FAILED", message: result.error },
+            });
+            return true;
+        }
+        sendJson(res, 200, {
+            ok: true,
+            data: { versions: result.versions, latest: result.latest },
+        });
+        return true;
+    }
     const opMatch = pathname.match(/^\/api\/operator\/v1\/operations\/([^/]+)(?:\/(events))?$/);
     if (opMatch) {
         const operationId = decodeURIComponent(opMatch[1]);
@@ -526,6 +644,14 @@ export async function handleConsoleOperatorRequest(req, res, ctx) {
             await handleNightAuxTickerPost(req, res, ctx);
             return true;
         }
+        if (method === "POST" && pathname === "/api/operator/v1/pi-plugins/install") {
+            await handlePiPluginInstall(req, res);
+            return true;
+        }
+        if (method === "POST" && pathname === "/api/operator/v1/pi-plugins/uninstall") {
+            await handlePiPluginUninstall(req, res);
+            return true;
+        }
         // Allow other operator POSTs only under known routes; unknown → 404
         sendJson(res, 404, {
             ok: false,
@@ -587,9 +713,11 @@ function pendingReadinessSummary(inspectReady) {
  *   POST   /api/operator/v1/workspaces/pick        — host native folder chooser
  *   POST   /api/operator/v1/workspaces             — body { "name": "<label>",
  *                                                     "directoryPath": "<dir>" }
+ *   PATCH  /api/operator/v1/workspaces/:workspaceId — body { "beforeWorkspaceId":
+ *                                                     "<id>" | null }
  *   DELETE /api/operator/v1/workspaces/:workspaceId — soft remove (restore on re-add)
  *
- * POST/DELETE are mutations and pass the Console mutation gate. GET carries no
+ * POST/PATCH/DELETE are mutations and pass the Console mutation gate. GET carries no
  * workspace selection parameter.
  *
  * AC-006 (2026-08-23): GET is NON-BLOCKING — registry + process-level
@@ -598,8 +726,53 @@ function pendingReadinessSummary(inspectReady) {
  * requests. A hanging probe can never delay the 200 list.
  */
 export async function handleWorkspaceRoutes(req, res, registry, deps, url, pathname, method, readinessDeps) {
+    if (method === "GET" &&
+        pathname === "/api/operator/v1/workspaces/events") {
+        res.writeHead(200, {
+            "Content-Type": "text/event-stream; charset=utf-8",
+            "Cache-Control": "no-cache, no-transform",
+            Connection: "keep-alive",
+            "X-Accel-Buffering": "no",
+        });
+        const sendRevision = (event, revision) => {
+            if (res.destroyed || res.writableEnded)
+                return;
+            res.write(`id: ${revision}\nevent: ${event}\ndata: ${JSON.stringify({ schemaVersion: 1, revision })}\n\n`);
+        };
+        let baselineSent = false;
+        let pendingRevision = 0;
+        const unsubscribe = registry.subscribe((revision) => {
+            if (!baselineSent)
+                pendingRevision = Math.max(pendingRevision, revision);
+            else
+                sendRevision("workspace_registry_changed", revision);
+        });
+        const initial = await registry.snapshotVisible();
+        sendRevision("workspace_registry_ready", initial.revision);
+        baselineSent = true;
+        if (pendingRevision > initial.revision) {
+            sendRevision("workspace_registry_changed", pendingRevision);
+        }
+        const heartbeat = setInterval(() => {
+            if (!res.destroyed && !res.writableEnded)
+                res.write(": keepalive\n\n");
+        }, 15_000);
+        heartbeat.unref();
+        let closed = false;
+        const close = () => {
+            if (closed)
+                return;
+            closed = true;
+            clearInterval(heartbeat);
+            unsubscribe();
+        };
+        req.once("aborted", close);
+        res.once("close", close);
+        return;
+    }
     if (method === "GET" && pathname === "/api/operator/v1/workspaces") {
-        const records = await registry.listVisible();
+        const snapshot = await registry.snapshotVisible();
+        const records = snapshot.workspaces;
         const inspectReady = readinessDeps.inspectReady;
         const readinessCache = readinessDeps.readinessCache ?? defaultWorkspaceReadinessCache;
         const workspaces = records.map((record) => {
@@ -611,6 +784,7 @@ export async function handleWorkspaceRoutes(req, res, registry, deps, url, pathn
                 repoFingerprint: record.repoFingerprint,
                 createdAt: record.createdAt,
                 lastAccessedAt: record.lastAccessedAt,
+                sessionIds: record.sessionIds,
                 readiness: cached
                     ? {
                         state: cached.state,
@@ -622,7 +796,8 @@ export async function handleWorkspaceRoutes(req, res, registry, deps, url, pathn
         // Respond FIRST, then refresh readiness in the background (AC-006).
         sendJson(res, 200, {
             ok: true,
-            schemaVersion: 1,
+            schemaVersion: 2,
+            revision: snapshot.revision,
             workspaces,
         });
         void Promise.all(records.map(async (record) => {
@@ -789,8 +964,73 @@ export async function handleWorkspaceRoutes(req, res, registry, deps, url, pathn
         });
         return;
     }
-    const removeMatch = pathname.match(/^\/api\/operator\/v1\/workspaces\/([^/]+)$/);
-    if (method === "DELETE" && removeMatch) {
+    const workspaceMatch = pathname.match(/^\/api\/operator\/v1\/workspaces\/([^/]+)$/);
+    if (method === "PATCH" && workspaceMatch) {
+        const failure = evaluateMutationGate(req, {
+            cookieName: deps.bootToken.cookieName,
+            bootToken: deps.bootToken.value,
+            confirmationToken: deps.bootToken.confirmationToken,
+            consoleOrigin: deps.getConsoleOrigin(),
+            allowNonLoopbackAccess: deps.allowNonLoopbackAccess,
+        });
+        if (failure) {
+            sendJson(res, failure.status, {
+                ok: false,
+                error: { code: failure.code, message: failure.message },
+            });
+            return;
+        }
+        let body;
+        try {
+            body = (await readJsonBody(req));
+        }
+        catch (error) {
+            sendJson(res, 400, {
+                ok: false,
+                error: {
+                    code: "INVALID_INPUT",
+                    message: error instanceof Error ? error.message : String(error),
+                },
+            });
+            return;
+        }
+        if (body.beforeWorkspaceId !== null &&
+            typeof body.beforeWorkspaceId !== "string") {
+            sendJson(res, 400, {
+                ok: false,
+                error: {
+                    code: "INVALID_INPUT",
+                    message: "beforeWorkspaceId must be a workspace id or null",
+                },
+            });
+            return;
+        }
+        const workspaceId = decodeURIComponent(workspaceMatch[1]);
+        const beforeWorkspaceId = typeof body.beforeWorkspaceId === "string"
+            ? body.beforeWorkspaceId
+            : null;
+        const reordered = await registry.insertBefore(workspaceId, beforeWorkspaceId);
+        if (!reordered.ok) {
+            sendJson(res, 404, {
+                ok: false,
+                error: {
+                    code: reordered.code,
+                    message: reordered.code === "ANCHOR_NOT_FOUND"
+                        ? `unknown workspace anchor: ${beforeWorkspaceId}`
+                        : `unknown workspace: ${workspaceId}`,
+                },
+            });
+            return;
+        }
+        sendJson(res, 200, {
+            ok: true,
+            workspaceId,
+            beforeWorkspaceId,
+            changed: reordered.changed,
+        });
+        return;
+    }
+    if (method === "DELETE" && workspaceMatch) {
         const failure = evaluateMutationGate(req, {
             cookieName: deps.bootToken.cookieName,
             bootToken: deps.bootToken.value,
@@ -805,7 +1045,7 @@ export async function handleWorkspaceRoutes(req, res, registry, deps, url, pathn
             });
             return;
         }
-        const workspaceId = decodeURIComponent(removeMatch[1]);
+        const workspaceId = decodeURIComponent(workspaceMatch[1]);
         const removed = await registry.remove(workspaceId);
         if (!removed) {
             sendJson(res, 404, {