@whyshu/argent-engine 0.0.0-stage → 0.6.0

package/engine/core/mcp/client.mjs

@@ -0,0 +1,67 @@
+#!/usr/bin/env node
+/**
+ * argent-mcp-client（0.3 P2）—— **自建最简 MCP client**（用户选定的"第二宿主"）
+ *
+ * 用途：① 证明"Argent 能力可被非 dsh 宿主通过 MCP 使用"；② 做影子比对（下一步）时充当对照执行器。
+ * 用法：
+ *   node core/mcp/client.mjs --selftest                      # 握手 + tools/list + 调 version/license/ledger
+ *   node core/mcp/client.mjs --flow wenyao-invoice --preflight # 只读：跑一个流程的环境自检
+ */
+import { spawn } from 'node:child_process'
+import { dirname, join, resolve } from 'node:path'
+import { fileURLToPath } from 'node:url'
+
+const HERE = dirname(fileURLToPath(import.meta.url))
+const SERVER = join(resolve(HERE, '..', '..'), 'core', 'mcp', 'server.mjs')
+
+export function connect(serverPath = SERVER) {
+  const child = spawn(process.execPath, [serverPath], { stdio: ['pipe', 'pipe', 'inherit'] })
+  const pending = new Map()
+  let nextId = 1
+  let buf = ''
+  child.stdout.setEncoding('utf8')
+  child.stdout.on('data', (c) => {
+    buf += c
+    let i
+    while ((i = buf.indexOf('\n')) >= 0) {
+      const line = buf.slice(0, i).trim(); buf = buf.slice(i + 1)
+      if (!line) continue
+      let msg; try { msg = JSON.parse(line) } catch { continue }
+      const p = pending.get(msg.id)
+      if (p) { pending.delete(msg.id); msg.error ? p.reject(new Error(msg.error.message)) : p.resolve(msg.result) }
+    }
+  })
+  const rpc = (method, params) => new Promise((resolve_, reject) => {
+    const id = nextId++
+    pending.set(id, { resolve: resolve_, reject })
+    child.stdin.write(`${JSON.stringify({ jsonrpc: '2.0', id, method, params })}\n`)
+  })
+  const notify = (method, params) => child.stdin.write(`${JSON.stringify({ jsonrpc: '2.0', method, params })}\n`)
+  return { rpc, notify, close: () => child.kill() }
+}
+
+if (process.argv[1] && process.argv[1].endsWith('client.mjs')) {
+  const args = process.argv.slice(2)
+  const arg = (n, d) => { const i = args.indexOf(n); return i > -1 ? args[i + 1] : d }
+  const c = connect()
+  const init = await c.rpc('initialize', { protocolVersion: '2024-11-05', capabilities: {}, clientInfo: { name: 'argent-selfclient', version: '0.1.0' } })
+  c.notify('notifications/initialized')
+  console.log(`✅ 握手成功：server=${init.serverInfo.name}@${init.serverInfo.version}（协议 ${init.protocolVersion}）`)
+  const tools = await c.rpc('tools/list', {})
+  console.log(`✅ tools：${tools.tools.map((t) => t.name).join(', ')}`)
+  const call = async (name, a = {}) => {
+    const r = await c.rpc('tools/call', { name, arguments: a })
+    const text = (r.content && r.content[0] && r.content[0].text) || ''
+    console.log(`\n--- ${name}（isError=${!!r.isError}）\n${text.slice(0, 700)}`)
+    return text
+  }
+  if (args.includes('--preflight')) {
+    const flow = arg('--flow', 'full')
+    await call('argent_preflight', { flow })
+  } else {
+    await call('argent_version')
+    await call('argent_license')
+    await call('argent_ledger', { tail: 2 })
+  }
+  c.close()
+}

package/engine/core/mcp/http.mjs

@@ -0,0 +1,138 @@
+#!/usr/bin/env node
+/**
+ * argent-mcp HTTP 包装（0.3 P3，2026-09-29）
+ *
+ * 为什么需要：MCP 的 stdio 传输**只能本机**（宿主 spawn 子进程）；要让**云端托管**的 MCP 被远程宿主调用，
+ * 必须给它一个可远程访问的入口 ⇒ 本文件把 stdio server 包成一个 HTTP JSON-RPC 端点。
+ *
+ * 设计要点（与用户决策一致）：
+ *  1. **复用 stdio server**：本进程 spawn `server.mjs` 并代理 JSON-RPC（**零重复实现**，
+ *     tools 只有一份定义，改一处两边生效）；
+ *  2. **鉴权 = 问述账号体系**（不另造一套）：要求 `Authorization: Bearer <WHYSHU_KEY>`，
+ *     用该 token 调 `GET /api/argent/entitlements` 验证（200 ⇒ 通过），结果**内存缓存 5 分钟**；
+ *     云端因此**不需要**保存客户密钥，只做验证；
+ *  3. **不用组网/IP 白名单**：公开部署 + 账号鉴权（用户明确要求）；
+ *  4. 每请求带 `userId`（由验证接口身份确定）写入审计日志行（谁在何时调了哪个 tool）。
+ */
+import { spawn } from 'node:child_process'
+import { createServer } from 'node:http'
+import { dirname, join, resolve } from 'node:path'
+import { fileURLToPath } from 'node:url'
+import { readFileSync } from 'node:fs'
+
+// ⚠️ **不要** import server.mjs：它有 `process.stdin.on('end', … process.exit(0))`，
+// 而 systemd 下 stdin 是 /dev/null ⇒ 'end' 立即触发 ⇒ HTTP 进程自杀、重启循环（2026-09-30 实测）。
+// 作用域表改为**运行时读** core/contracts/verbs.schema.json（单一真源、零副作用）。
+// 路径直接用 import.meta.url 解析（**不依赖 HERE**：此前插在 HERE 定义之前 ⇒ join(undefined,…) 抛错
+// 被 catch 吞掉 ⇒ 作用域表全空、门禁静默失效 —— 实测审计里 scope 全是 account 才发现）。
+const SCHEMA_URL = new URL('../contracts/verbs.schema.json', import.meta.url)
+const SCOPE = (() => {
+  try {
+    const sc = JSON.parse(readFileSync(SCHEMA_URL, 'utf8')).scope || {}
+    const m = {}
+    for (const t of sc.local || []) m[t] = 'local'
+    for (const t of sc.account || []) m[t] = 'account'
+    if (!Object.keys(m).length) throw new Error('scope 表为空')
+    return m
+  } catch (e) {
+    // 不静默：作用域表读不到 = 门禁失效，必须显式可见
+    console.error(`[argent-mcp] ⚠️ 作用域表加载失败（门禁将退化为"全部放行"）：${String(e.message)}`)
+    return {}
+  }
+})()
+const toolScope = (name) => SCOPE[String(name || '').replace(/^argent_/, '')] || 'account'
+
+const HERE = dirname(fileURLToPath(import.meta.url))
+const SERVER = join(HERE, 'server.mjs')
+const PORT = Number(process.env.ARGENT_MCP_PORT || 8790)
+const BIND = process.env.ARGENT_MCP_BIND || '127.0.0.1'
+const VERIFY_URL = process.env.ARGENT_MCP_VERIFY_URL || 'https://whyshu.com/api/argent/entitlements'
+const PROXY_VERIFY_URL = process.env.ARGENT_MCP_PROXY_VERIFY_URL || 'https://whyshu.com/api/argent/v1/models'
+const AUTH_CACHE_MS = 5 * 60 * 1000
+
+const child = spawn(process.execPath, [SERVER], { stdio: ['pipe', 'pipe', 'inherit'] })
+const pending = new Map()
+let nextId = 1
+let buf = ''
+child.stdout.setEncoding('utf8')
+child.stdout.on('data', (c) => {
+  buf += c
+  let i
+  while ((i = buf.indexOf('\n')) >= 0) {
+    const line = buf.slice(0, i).trim(); buf = buf.slice(i + 1)
+    if (!line) continue
+    let msg; try { msg = JSON.parse(line) } catch { continue }
+    const p = pending.get(msg.id)
+    if (p) { pending.delete(msg.id); p(msg) }
+  }
+})
+child.on('exit', (code) => { console.error(`[argent-mcp] stdio server 退出（code=${code}）`); process.exit(1) })
+
+const rpc = (method, params) => new Promise((res) => {
+  const id = nextId++
+  pending.set(id, res)
+  child.stdin.write(`${JSON.stringify({ jsonrpc: '2.0', id, method, params })}\n`)
+})
+
+const authCache = new Map()
+async function authorize(token) {
+  if (!token) return { ok: false, reason: 'no_token' }
+  const hit = authCache.get(token)
+  if (hit && Date.now() - hit.at < AUTH_CACHE_MS) return hit.result
+  // **两类凭据都接受**（2026-09-30 实测发现它们是两种东西、两个端点）：
+  //   ① 账号会话令牌（JWT，224 位，见 ~/.dsh/argent/whyshu.env）⇒ /api/argent/entitlements
+  //   ② 问述代理 API Key（`sk-…`，35 位，见 credentials refs.WHYSHU_API_KEY）⇒ /v1/models
+  const VERIFY_ENDPOINTS = [
+    { url: VERIFY_URL, kind: 'account', headers: (t) => ({ Authorization: `Bearer ${t}` }) },
+    { url: PROXY_VERIFY_URL, kind: 'proxy_key', headers: (t) => ({ Authorization: `Bearer ${t}`, 'x-api-key': t }) },
+  ]
+  let result = { ok: false, reason: 'verify_failed' }
+  for (const ep of VERIFY_ENDPOINTS) {
+    try {
+      const r = await fetch(ep.url, { headers: { ...ep.headers(token), 'cache-control': 'no-store' }, cache: 'no-store' })
+      if (!r.ok) { result = { ok: false, reason: `verify_${r.status}(${ep.kind})` }; continue }
+      let j = {}
+      try { j = await r.json() } catch { /* 非 JSON 也认为通过 */ }
+      result = { ok: true, kind: ep.kind, plan: j.plan || '', billingMode: j.billingMode || '', licenseActive: j.licenseActive !== false }
+      break
+    } catch (e) { result = { ok: false, reason: `verify_error:${String(e.message).slice(0, 60)}` } }
+  }
+  authCache.set(token, { at: Date.now(), result })
+  return result
+}
+
+const audit = (row) => console.log(JSON.stringify({ at: new Date().toISOString(), ...row }))
+
+const server = createServer(async (req, res) => {
+  const send = (code, body) => { res.writeHead(code, { 'Content-Type': 'application/json', 'Cache-Control': 'no-store' }); res.end(JSON.stringify(body)) }
+  if (req.method === 'GET' && req.url === '/mcp/health') return send(200, { ok: true, tools: pending.size >= 0, auth: 'whyshu-account', bind: `${BIND}:${PORT}` })
+  if (!(req.method === 'POST' && (req.url === '/mcp' || req.url === '/mcp/'))) return send(404, { error: 'not_found' })
+
+  const h = req.headers.authorization || ''
+  const token = h.startsWith('Bearer ') ? h.slice(7) : (req.headers['x-api-key'] || '')
+  const who = await authorize(token)
+  if (!who.ok) { audit({ event: 'deny', reason: who.reason }); return send(401, { error: 'unauthorized', reason: who.reason }) }
+
+  let raw = ''
+  for await (const chunk of req) raw += chunk
+  let body
+  try { body = JSON.parse(raw || '{}') } catch { return send(400, { error: 'bad_json' }) }
+
+  // 单条 JSON-RPC（MCP 的 tools/list、tools/call 都是单条；通知无 id 直接 202）
+  const id = body && body.id
+  const name = body && body.params && body.params.name
+  if (id === undefined) { audit({ event: 'notify', method: body && body.method, user: who.plan }); return send(202, { ok: true }) }
+  // **作用域门禁**（2026-09-30）：`local` 类 tool（写台账/回写生产表等）在云上**默认禁止**
+  // —— 它们只在本机（有数据面与凭据）有意义；云端放行等于让公网调用者操作我们不掌握的机器状态。
+  // 需要时由运维显式 `ARGENT_MCP_ALLOW_LOCAL=1` 放开（默认安全）。
+  if (name && toolScope(name) === 'local' && process.env.ARGENT_MCP_ALLOW_LOCAL !== '1') {
+    audit({ event: 'scope_blocked', tool: name, plan: who.plan })
+    return send(403, { error: 'scope_blocked', scope: 'local', tool: name,
+      hint: '该 tool 只在本机有意义（数据面/凭据在客户端）；云端默认拒绝，运维可用 ARGENT_MCP_ALLOW_LOCAL=1 显式放开' })
+  }
+  const out = await rpc(body.method, body.params)
+  audit({ event: 'call', method: body.method, tool: name || '', plan: who.plan, scope: name ? toolScope(name) : '', billingMode: who.billingMode, ok: !out.error })
+  return send(200, out)
+})
+
+server.listen(PORT, BIND, () => console.error(`[argent-mcp] HTTP 就绪：http://${BIND}:${PORT}/mcp （鉴权=问述账号；验证端点 ${VERIFY_URL}）`))