@xdxer/dingtalk-agent 0.1.5-beta.3 → 0.1.5-beta.4

package/dist/src/multica-deploy.js

@@ -63,7 +63,11 @@ export function runMulticaWorkspaceIssue(start, name, prompt, options = {}) {
         throw new Error(`Multica workspace run 前置条件不完整: ${plan.blocking.join(', ')}`);
     }
     const command = options.command || env.DTA_MULTICA_BIN || 'multica';
-    const timeoutMs = positiveTimeout(options.timeoutMs, 30_000, 300_000);
+    // A real Issue-channel run does agent work plus issue get/comment/status side-tasks and
+    // routinely needs minutes; the old 30s default timed out on almost every honest run. Wait
+    // 4 minutes by default (still capped at 5). A run that overruns is resumable via
+    // `workspace run --status --run-id` against the same Issue — no duplicate Issue.
+    const timeoutMs = positiveTimeout(options.timeoutMs, 240_000, 300_000);
     const calls = [];
     const inspection = inspectMulticaWorkspace(info.root, name, {
         execute: true, yes: true, persist: false, command, env,
@@ -86,6 +90,18 @@ export function runMulticaWorkspaceIssue(start, name, prompt, options = {}) {
         '--description', normalizedPrompt, '--assignee-id', plan.agentId, '--output', 'json',
     ]), 'workspace-run.issue.create', 'write', info.root, env, Math.min(timeoutMs, 30_000), calls).stdout, 'workspace run issue');
     const issueId = resourceId(issue.id, 'workspace run issue.id');
+    return readbackWorkspaceRun({
+        root: info.root, name, plan, issueId, runId, command, env, timeoutMs, calls, out: options.out,
+    });
+}
+/**
+ * Poll an existing Issue's assignee-agent task to a terminal state, then reconstruct the
+ * run report from its trace. Shared by the initial `workspace run` (right after it creates the
+ * Issue) and `workspace run --status --run-id` (resume against the SAME Issue, no new write) so
+ * a timed-out run reconciles instead of spawning a duplicate Issue.
+ */
+function readbackWorkspaceRun(ctx) {
+    const { root, name, plan, issueId, runId, command, env, timeoutMs, calls } = ctx;
     const started = Date.now();
     const pollIntervalMs = 2_000;
     const pollCalls = [];
@@ -95,7 +111,7 @@ export function runMulticaWorkspaceIssue(start, name, prompt, options = {}) {
         pollAttempts += 1;
         const runs = jsonArray(runProvider(command, scopedArgs({ profile: plan.profile, expected: { workspaceId: plan.workspaceId } }, [
             'issue', 'runs', issueId, '--full-id', '--output', 'json',
-        ]), 'workspace-run.issue.runs', 'read', info.root, env, Math.min(timeoutMs, 30_000), pollCalls).stdout, 'workspace run issue runs');
+        ]), 'workspace-run.issue.runs', 'read', root, env, Math.min(timeoutMs, 30_000), pollCalls).stdout, 'workspace run issue runs');
         task = runs.filter((item) => !optionalString(item.agent_id) ||
             optionalString(item.agent_id) === plan.agentId)
             .sort((a, b) => optionalString(b.created_at).localeCompare(optionalString(a.created_at)))[0];
@@ -111,7 +127,7 @@ export function runMulticaWorkspaceIssue(start, name, prompt, options = {}) {
     if (taskId && ['completed', 'failed', 'cancelled'].includes(taskStatus)) {
         messages = jsonArray(runProvider(command, scopedArgs({ profile: plan.profile, expected: { workspaceId: plan.workspaceId } }, [
             'issue', 'run-messages', taskId, '--issue', issueId, '--output', 'json',
-        ]), 'workspace-run.issue.messages', 'read', info.root, env, Math.min(timeoutMs, 30_000), calls).stdout, 'workspace run messages');
+        ]), 'workspace-run.issue.messages', 'read', root, env, Math.min(timeoutMs, 30_000), calls).stdout, 'workspace run messages');
     }
     const toolUses = messages.filter((item) => optionalString(item.type) === 'tool_use');
     const toolNames = toolUses.map((item) => optionalString(item.tool)).filter(Boolean);
@@ -125,7 +141,7 @@ export function runMulticaWorkspaceIssue(start, name, prompt, options = {}) {
     const answer = safeRemoteOutput(replyWrites.at(-1) || texts.at(-1) || '', 64 * 1024);
     const issueReadback = jsonObject(runProvider(command, scopedArgs({ profile: plan.profile, expected: { workspaceId: plan.workspaceId } }, [
         'issue', 'get', issueId, '--output', 'json',
-    ]), 'workspace-run.issue.readback', 'read', info.root, env, Math.min(timeoutMs, 30_000), calls).stdout, 'workspace run issue readback');
+    ]), 'workspace-run.issue.readback', 'read', root, env, Math.min(timeoutMs, 30_000), calls).stdout, 'workspace run issue readback');
     const issueStatus = optionalString(issueReadback.status);
     const failures = [];
     if (!task)
@@ -165,17 +181,88 @@ export function runMulticaWorkspaceIssue(start, name, prompt, options = {}) {
         calls,
         evidencePath: '',
         remoteRead: true,
-        remoteWrite: true,
+        remoteWrite: calls.some((call) => call.kind === 'write'),
         triggerWrite: false,
         sideEffect: 'multica-issue-read-write',
         dingtalkSideEffect: false,
     };
     const defaultEvidence = join(MULTICA_EVIDENCE_ROOT, safeName(name), 'multica-runs', `${runId}.json`);
-    report.evidencePath = relative(info.root, safeProjectPath(info.root, options.out || defaultEvidence, false));
+    report.evidencePath = relative(root, safeProjectPath(root, ctx.out || defaultEvidence, false));
     assertReportRedacted(report);
-    atomicJson(safeProjectPath(info.root, report.evidencePath, false), report);
+    atomicJson(safeProjectPath(root, report.evidencePath, false), report);
     return report;
 }
+/**
+ * Resume a `workspace run` by re-reading the SAME Issue's task instead of creating a new one.
+ * Loads the persisted run evidence by runId, confirms the workspace scope still resolves to the
+ * same target (fail closed on drift), then polls that Issue's assignee-agent task to a terminal
+ * state and rewrites the run report. Read-only against Multica — never enqueues a second Issue.
+ */
+export function statusMulticaWorkspaceRun(start, name, options = {}) {
+    const env = options.env || process.env;
+    const cliVersion = options.cliVersion || '';
+    const runId = String(options.runId || '').trim();
+    if (!/^multica_workspace_run_[0-9]+_[a-f0-9]{8}$/.test(runId)) {
+        throw new Error('workspace run --status 需要一个合法的 --run-id（来自上次 run 的 runId）');
+    }
+    if (!options.execute) {
+        throw new Error('workspace run --status 会向 Multica 独立回读同一 Issue；必须传 --execute');
+    }
+    if (!options.yes)
+        throw new Error('workspace run --status 远端回读必须同时传 --execute --yes');
+    const info = inspectAgentProject(start, cliVersion);
+    requireMulticaWorkspace(info.root, name, cliVersion);
+    // The original run persists evidence to `--out` when given, else the default runId path. Resume
+    // must look where the run actually wrote, so honor the same `--out` (and rewrite back to it).
+    const evidenceRel = options.out || join(MULTICA_EVIDENCE_ROOT, safeName(name), 'multica-runs', `${runId}.json`);
+    const evidenceAbs = safeProjectPath(info.root, evidenceRel, false);
+    if (!existsSync(evidenceAbs)) {
+        throw new Error(`找不到 run 证据 ${evidenceRel}；--run-id 必须是本 Workspace 已有的 runId` +
+            `${options.out ? '' : '（若原 run 用了 --out，请对 --status 传相同 --out）'}`);
+    }
+    const prior = JSON.parse(readFileSync(evidenceAbs, 'utf8'));
+    if (prior.$schema !== 'dingtalk-agent/multica-workspace-run@1' ||
+        prior.provider !== 'multica' || prior.workspace !== name || !prior.issueId) {
+        throw new Error('run 证据不是本 Workspace 的 multica run，或缺少 issueId；已 fail closed');
+    }
+    // The evidence file must belong to THIS runId. Two runs sharing one --out overwrite each
+    // other, so resuming the first runId against that path would otherwise read the second run's
+    // Issue while reporting the first runId — cross-wiring answer and run. Fail closed on mismatch.
+    if (prior.runId !== runId) {
+        throw new Error(`run 证据 ${evidenceRel} 属于 runId ${prior.runId}，与 --run-id ${runId} 不一致；已 fail closed` +
+            `（同一 --out 被后一次 run 覆盖时会这样）`);
+    }
+    // Re-resolve scope offline and refuse unless the WHOLE frozen target still matches: an env
+    // pointing at a different runtime/agent/profile (or an invalid ref surfacing in blocking) must
+    // not let the resume mis-record the old task or overwrite the frozen values. workspaceId alone
+    // is not enough.
+    const providerPlan = planMulticaWorkspace(info.root, name, { env, cliVersion });
+    const scopeDrift = providerPlan.blocking.length ? ['blocking:' + providerPlan.blocking.join(',')] : [];
+    if (providerPlan.profile !== prior.profile)
+        scopeDrift.push('profile');
+    if (providerPlan.expected.workspaceId !== prior.workspaceId)
+        scopeDrift.push('workspace');
+    if (providerPlan.expected.runtimeId !== prior.runtimeId)
+        scopeDrift.push('runtime');
+    if (providerPlan.expected.agentId !== prior.agentId)
+        scopeDrift.push('agent');
+    if (scopeDrift.length) {
+        throw new Error(`workspace run --status: 当前 workspace scope 与 run 证据不一致 [${scopeDrift.join(', ')}]；已 fail closed`);
+    }
+    const command = options.command || env.DTA_MULTICA_BIN || 'multica';
+    const timeoutMs = positiveTimeout(options.timeoutMs, 240_000, 300_000);
+    const plan = {
+        profile: providerPlan.profile,
+        workspaceId: providerPlan.expected.workspaceId,
+        runtimeId: providerPlan.expected.runtimeId,
+        agentId: providerPlan.expected.agentId,
+        promptHash: prior.promptHash,
+    };
+    return readbackWorkspaceRun({
+        root: info.root, name, plan, issueId: prior.issueId, runId,
+        command, env, timeoutMs, calls: [], out: options.out,
+    });
+}
 export function planMulticaDeployment(start, name, options = {}) {
     const action = options.action || 'apply';
     const env = options.env || process.env;
@@ -299,7 +386,7 @@ export function applyMulticaDeployment(start, name, options = {}, action = 'appl
             receipt = retireDeployment(info.root, workspace, source, plan, preflight, operation, command, env, timeoutMs, calls);
         }
         else {
-            receipt = executeApply(info.root, workspace, source, plan, preflight, operation, command, env, timeoutMs, positiveTimeout(options.smokeTimeoutMs, 30_000, 60_000), Boolean(options.noWait), calls, rollback, temp);
+            receipt = executeApply(info.root, workspace, source, plan, preflight, operation, command, env, timeoutMs, positiveTimeout(options.smokeTimeoutMs, 30_000, 300_000), Boolean(options.noWait), calls, rollback, temp);
         }
     }
     catch (error) {
@@ -866,7 +953,12 @@ function safeSmokeResponsePath(value) {
     const names = new Set(['reply.md', 'result.md', 'result.json']);
     if (value.startsWith('./'))
         return names.has(value.slice(2));
-    if (!value.startsWith('/') || !names.has(value.split('/').at(-1) || ''))
+    // 裸文件名与 `./` 前缀等价：Agent 在 workdir 里写绝对路径、随后用裸名引用同一个文件是
+    // 平台的常见写法。只放行精确 basename —— `foo/result.md` 与 `../result.md` 仍然落到
+    // 下面的绝对路径分支并被拒绝，白名单没有变宽。
+    if (!value.startsWith('/'))
+        return names.has(value);
+    if (!names.has(value.split('/').at(-1) || ''))
         return false;
     return value.split('/').every((part) => !part ||
         (part !== '.' && part !== '..' && /^[A-Za-z0-9._-]+$/.test(part)));