@zhin.js/host-http 1.0.10 → 1.0.11

package/lib/console-rest-pages.d.ts

@@ -30,21 +30,25 @@ export interface ConsoleRestCtx {
 /** 内省数据门面 — 由 basic/cli 用 agent 包 collectIntrospection* 装配。 */
 export interface ConsoleAgentIntrospection {
     commands?(): readonly unknown[];
+    middlewares?(): readonly unknown[];
+    components?(): readonly unknown[];
     bindings?(): readonly unknown[];
     tools?(): readonly unknown[];
     mcp?(): {
         rows: readonly unknown[];
         note?: string;
     } | readonly unknown[];
+    renderComponent?(input: Readonly<{
+        requester: string;
+        name: string;
+        props: unknown;
+        signal: AbortSignal;
+    }>): Promise<unknown>;
 }
 /** Session tree 门面 — 形状对齐 agent 包 SessionTreeRuntimeHandle。 */
 export interface ConsoleAgentSessionTree {
     resolveActiveSessionId(sessionKey: string): Promise<string | null>;
-    agentSessionStore: {
-        getBySessionId(sessionId: string): Promise<{
-            active_leaf_message_id?: number | null;
-        } | null | undefined>;
-    };
+    getActiveLeafMessageId(sessionId: string): Promise<number | null>;
     listBranchPoints(sessionId: string): Promise<readonly unknown[]>;
     switchActiveLeaf(sessionId: string, messageId: number): Promise<boolean>;
     jumpToBranchIndex(sessionId: string, index: number): Promise<{
@@ -66,6 +70,12 @@ export interface ConsoleRestPagesOptions {
     readonly pluginRegistryUrl?: string;
     /** 默认 `https://registry.npmmirror.com`（legacy 同源）。 */
     readonly npmRegistryUrl?: string;
+    /** Component preview deadline; default 5 seconds. */
+    readonly componentPreviewTimeoutMs?: number;
+    /** Maximum serialized Component preview; default 256 KiB. */
+    readonly componentPreviewMaxBytes?: number;
+    /** Maximum in-flight Component previews per Console route set; default 2. */
+    readonly componentPreviewMaxConcurrent?: number;
 }
 /**
  * 注册 Console 页面 REST 路由。返回注销函数（注销全部已注册路由）。

package/lib/console-rest-pages.js

@@ -3,6 +3,8 @@ import { join } from 'node:path';
 import { HttpBodyError, readJsonBody } from './json-body.js';
 const INTROSPECTION_PAGE_SIZES = {
     commands: 25,
+    middlewares: 30,
+    components: 30,
     tools: 15,
     endpoints: 30,
     bindings: 30,
@@ -26,7 +28,7 @@ export function registerConsoleRestPages(host, ctx, options = {}) {
     };
     registerLogsRoutes(route, base, ctx);
     registerMarketplaceRoutes(route, base, ctx, fetchFn, pluginRegistryUrl, npmRegistryUrl);
-    registerIntrospectionRoutes(route, base, ctx);
+    registerIntrospectionRoutes(route, base, ctx, options);
     registerAgentSessionRoutes(route, base, ctx);
     return () => {
         for (const dispose of disposers.splice(0))
@@ -378,17 +380,37 @@ async function listInstalledPluginPackages(projectRoot) {
 // ---------------------------------------------------------------------------
 // introspection（legacy introspection-rest-api.ts；分页形状对齐 IntrospectionJsonResponse）
 // ---------------------------------------------------------------------------
-function registerIntrospectionRoutes(route, base, ctx) {
+function registerIntrospectionRoutes(route, base, ctx, options) {
     const collectors = [
         {
             kind: 'commands',
-            collect: () => ({ rows: agentIntrospection(ctx)?.commands?.() ?? [] }),
+            collect: () => ({ rows: withAgentIntrospection(ctx, (value) => value?.commands?.() ?? []) }),
             fields: [
                 (c) => stringProp(c, 'pattern'),
                 (c) => stringProp(c, 'desc'),
                 (c) => stringProp(c, 'plugin'),
             ],
         },
+        {
+            kind: 'middlewares',
+            collect: () => ({ rows: withAgentIntrospection(ctx, (value) => value?.middlewares?.() ?? []) }),
+            fields: [
+                (m) => stringProp(m, 'name'),
+                (m) => stringProp(m, 'owner'),
+                (m) => stringProp(m, 'phase'),
+                (m) => stringProp(m, 'target'),
+                (m) => stringProp(m, 'source'),
+            ],
+        },
+        {
+            kind: 'components',
+            collect: () => ({ rows: withAgentIntrospection(ctx, (value) => value?.components?.() ?? []) }),
+            fields: [
+                (c) => stringProp(c, 'name'),
+                (c) => stringProp(c, 'owner'),
+                (c) => stringProp(c, 'source'),
+            ],
+        },
         {
             kind: 'endpoints',
             collect: () => ({
@@ -403,7 +425,7 @@ function registerIntrospectionRoutes(route, base, ctx) {
         },
         {
             kind: 'bindings',
-            collect: () => ({ rows: agentIntrospection(ctx)?.bindings?.() ?? [] }),
+            collect: () => ({ rows: withAgentIntrospection(ctx, (value) => value?.bindings?.() ?? []) }),
             fields: [
                 (a) => stringProp(a, 'name'),
                 (a) => stringProp(a, 'provider'),
@@ -412,7 +434,7 @@ function registerIntrospectionRoutes(route, base, ctx) {
         },
         {
             kind: 'tools',
-            collect: () => ({ rows: agentIntrospection(ctx)?.tools?.() ?? [] }),
+            collect: () => ({ rows: withAgentIntrospection(ctx, (value) => value?.tools?.() ?? []) }),
             fields: [
                 (t) => stringProp(t, 'name'),
                 (t) => stringProp(t, 'source'),
@@ -422,7 +444,7 @@ function registerIntrospectionRoutes(route, base, ctx) {
         {
             kind: 'mcp',
             collect: () => {
-                const result = agentIntrospection(ctx)?.mcp?.();
+                const result = withAgentIntrospection(ctx, (value) => value?.mcp?.());
                 if (result == null)
                     return { rows: [] };
                 // readonly 数组不能用 Array.isArray 收窄，按对象形状判断
@@ -444,7 +466,7 @@ function registerIntrospectionRoutes(route, base, ctx) {
                 const slice = paginateItems(filtered, parsePositiveInt(query.get('page'), 1), parsePositiveInt(query.get('pageSize'), INTROSPECTION_PAGE_SIZES[kind]));
                 const missing = kind === 'endpoints'
                     ? !ctx.getEndpoints
-                    : !agentIntrospection(ctx);
+                    : !hasAgentIntrospection(ctx);
                 const degradedNote = note ?? (missing
                     ? kind === 'endpoints'
                         ? 'Endpoints 数据源未接线（ctx.getEndpoints 缺失）'
@@ -464,18 +486,142 @@ function registerIntrospectionRoutes(route, base, ctx) {
             }
         }, { summary: `Introspection: ${kind}`, tags: ['console', 'introspection'] });
     }
+    let activeComponentPreviews = 0;
+    route('POST', `${base}/introspection/components/render`, async (request, response, _url, authScope) => {
+        if (!requireWriteScope(response, ctx, authScope))
+            return;
+        const body = (await readJsonBody(request)) ?? {};
+        const requester = typeof body.requester === 'string' ? body.requester.trim() : '';
+        const name = typeof body.name === 'string' ? body.name.trim() : '';
+        if (!requester || !name || requester.length > 256 || name.length > 160) {
+            writeJson(response, 400, { success: false, error: '请提供有效的 requester 与 component name' });
+            return;
+        }
+        const maxConcurrent = clampPositiveInt(options.componentPreviewMaxConcurrent, 2, 8);
+        if (activeComponentPreviews >= maxConcurrent) {
+            writeJson(response, 503, { success: false, error: 'Component preview 正忙，请稍后重试' });
+            return;
+        }
+        const lease = ctx.acquireAgentRuntime?.();
+        const render = lease?.value.introspection?.renderComponent;
+        if (!lease || !render) {
+            lease?.release();
+            writeJson(response, 503, { success: false, error: 'Component Runtime 未就绪' });
+            return;
+        }
+        const controller = new AbortController();
+        const timeoutMs = clampPositiveInt(options.componentPreviewTimeoutMs, 5_000, 30_000);
+        const timeout = setTimeout(() => controller.abort(new ComponentPreviewTimeoutError(`Component preview 超过 ${timeoutMs}ms`)), timeoutMs);
+        activeComponentPreviews += 1;
+        let released = false;
+        const release = () => {
+            if (released)
+                return;
+            released = true;
+            activeComponentPreviews -= 1;
+            lease.release();
+        };
+        const renderPromise = Promise.resolve().then(() => render({ requester, name, props: body.props ?? {}, signal: controller.signal }));
+        // A timed-out implementation may ignore AbortSignal. Keep its generation
+        // lease until the real operation settles; the bounded concurrency gate
+        // prevents non-cooperative previews from pinning unbounded generations.
+        void renderPromise.then(release, release);
+        try {
+            const output = await raceWithAbort(renderPromise, controller.signal);
+            assertPreviewOutput(output, options.componentPreviewMaxBytes ?? 256 * 1024);
+            writeJson(response, 200, { success: true, data: { requester, name, output } });
+        }
+        catch (error) {
+            const status = error instanceof ComponentPreviewTimeoutError
+                ? 408
+                : error instanceof ComponentPreviewLimitError ? 413 : 422;
+            writeJson(response, status, {
+                success: false,
+                error: error instanceof Error ? error.message : String(error),
+            });
+        }
+        finally {
+            clearTimeout(timeout);
+            if (!controller.signal.aborted)
+                controller.abort();
+        }
+    }, { summary: 'Render a Component preview', tags: ['console', 'introspection', 'component'] });
+}
+class ComponentPreviewTimeoutError extends Error {
+    name = 'ComponentPreviewTimeoutError';
 }
-function agentIntrospection(ctx) {
+class ComponentPreviewLimitError extends Error {
+    name = 'ComponentPreviewLimitError';
+}
+function clampPositiveInt(value, fallback, ceiling) {
+    if (!Number.isFinite(value) || !value || value < 1)
+        return fallback;
+    return Math.min(Math.floor(value), ceiling);
+}
+async function raceWithAbort(promise, signal) {
+    if (signal.aborted)
+        throw abortReason(signal);
+    return await new Promise((resolve, reject) => {
+        const onAbort = () => reject(abortReason(signal));
+        signal.addEventListener('abort', onAbort, { once: true });
+        promise.then(resolve, reject).finally(() => signal.removeEventListener('abort', onAbort));
+    });
+}
+function abortReason(signal) {
+    return signal.reason instanceof Error
+        ? signal.reason
+        : new DOMException('Component preview aborted', 'AbortError');
+}
+function assertPreviewOutput(output, maxBytes) {
+    const byteLimit = clampPositiveInt(maxBytes, 256 * 1024, 1024 * 1024);
+    const seen = new WeakSet();
+    let nodes = 0;
+    const visit = (value, depth) => {
+        nodes += 1;
+        if (nodes > 10_000)
+            throw new ComponentPreviewLimitError('Component preview 节点数超过 10000');
+        if (depth > 24)
+            throw new ComponentPreviewLimitError('Component preview 嵌套深度超过 24');
+        if (!value || typeof value !== 'object')
+            return;
+        if (seen.has(value))
+            throw new ComponentPreviewLimitError('Component preview 不能包含循环引用');
+        seen.add(value);
+        if (Array.isArray(value)) {
+            for (const item of value)
+                visit(item, depth + 1);
+        }
+        else {
+            for (const item of Object.values(value))
+                visit(item, depth + 1);
+        }
+    };
+    visit(output, 0);
+    let serialized;
+    try {
+        serialized = JSON.stringify(output);
+    }
+    catch (error) {
+        throw new ComponentPreviewLimitError(`Component preview 无法序列化: ${error instanceof Error ? error.message : String(error)}`);
+    }
+    if (Buffer.byteLength(serialized ?? '') > byteLimit) {
+        throw new ComponentPreviewLimitError(`Component preview 超过 ${byteLimit} bytes`);
+    }
+}
+function withAgentIntrospection(ctx, operation) {
     const lease = ctx.acquireAgentRuntime?.();
     if (!lease)
-        return undefined;
+        return operation(undefined);
     try {
-        return lease.value.introspection;
+        return operation(lease.value.introspection);
     }
     finally {
         lease.release();
     }
 }
+function hasAgentIntrospection(ctx) {
+    return withAgentIntrospection(ctx, (value) => value !== undefined);
+}
 // ---------------------------------------------------------------------------
 // agent sessions（legacy agent-sessions-rest-api.ts；ADR 0010 D3）
 // ---------------------------------------------------------------------------
@@ -518,14 +664,14 @@ function registerAgentSessionRoutes(route, base, ctx) {
                 });
                 return;
             }
-            const session = await runtime.agentSessionStore.getBySessionId(sessionId);
+            const activeLeafMessageId = await runtime.getActiveLeafMessageId(sessionId);
             const points = await runtime.listBranchPoints(sessionId);
             writeJson(response, 200, {
                 success: true,
                 data: {
                     sessionKey: parsed.sessionKey,
                     sessionId,
-                    activeLeafMessageId: session?.active_leaf_message_id ?? null,
+                    activeLeafMessageId,
                     points,
                 },
             });
@@ -594,27 +740,27 @@ function registerAgentSessionRoutes(route, base, ctx) {
             }
             if (branchIndex !== undefined) {
                 const result = await runtime.jumpToBranchIndex(sessionId, branchIndex);
-                const session = await runtime.agentSessionStore.getBySessionId(sessionId);
+                const activeLeafMessageId = await runtime.getActiveLeafMessageId(sessionId);
                 writeJson(response, result.ok ? 200 : 400, {
                     success: result.ok,
                     message: result.message,
                     data: {
                         sessionKey: parsed.sessionKey,
                         sessionId,
-                        activeLeafMessageId: session?.active_leaf_message_id ?? null,
+                        activeLeafMessageId,
                     },
                 });
                 return;
             }
             const ok = await runtime.switchActiveLeaf(sessionId, messageId);
-            const session = await runtime.agentSessionStore.getBySessionId(sessionId);
+            const activeLeafMessageId = await runtime.getActiveLeafMessageId(sessionId);
             writeJson(response, ok ? 200 : 400, {
                 success: ok,
                 message: ok ? `已切换 active leaf 至消息 #${messageId}` : '切换失败',
                 data: {
                     sessionKey: parsed.sessionKey,
                     sessionId,
-                    activeLeafMessageId: session?.active_leaf_message_id ?? null,
+                    activeLeafMessageId,
                 },
             });
         }

package/lib/console-rpc-extended.d.ts

@@ -8,7 +8,9 @@
  * 数据源约定（只读真实数据源，不做内存假数据）：
  * - cron：`ctx.scheduleHost`（Plugin Runtime ScheduleHost，仅 register/list，
  *   无持久化引擎，故 cron:add/remove/pause/resume 报"未接线"）。
- * - inbox：`ctx.databaseHost.models`（unified_inbox_message/request/notice 三张表，
+ * - request.list：优先 `management.listRequests()`（live endpoint）；否则回退
+ *   unified_inbox_request。审批始终走 approveRequest/rejectRequest。
+ * - inbox（历史）：`ctx.databaseHost.models`（unified_inbox_message/request/notice，
  *   表不存在或查询失败 → 空数组 + inboxEnabled:false；requestConsumed/noticeConsumed
  *   按行 id update consumed=1，表/model 缺失时报"未接线"）。
  * - 社交/群管：`ctx.withEndpointManagement` 在固定 generation lease 内
@@ -28,8 +30,85 @@ export interface ConsoleRpcExtendedCtx {
             get(name: string): unknown;
         };
     };
-    /** Agent Host 持久化调度引擎（@zhin.js/agent getAssistantRuntime().engine），未 init 时返回 null。 */
+    /** Narrow generation-bound persistent-job port; null when Assistant is disabled. */
     resolveScheduleEngine?: () => ConsoleScheduleEngine | null | undefined;
+    /** LoginAssist list/submit/cancel（刷新后仍可消费扫码/滑块待办）。 */
+    loginAssist?: {
+        listPending(): readonly {
+            id: string;
+            adapter: string;
+            endpointKey: string;
+            type: string;
+            payload: Record<string, unknown>;
+            createdAt: number;
+            expiresAt?: number;
+        }[];
+        submit(id: string, value: string | Record<string, unknown>): boolean;
+        cancel(id: string, reason?: string): boolean;
+    };
+    /** Authenticated Root adapter; mutation DTOs deliberately contain no principal/decision fields. */
+    workroomProfileControl?: ConsoleWorkroomProfileControlPort;
+    /** Authenticated HTTP principal; never accepted from the RPC body. */
+    authenticatedPrincipal?: Readonly<{
+        principalId: string;
+    }>;
+    workroomKnowledgeControl?: ConsoleWorkroomKnowledgeControlPort;
+}
+export interface ConsoleWorkroomProfileControlPort {
+    publishPack(command: Readonly<{
+        operationId: string;
+        pack: unknown;
+    }>, authenticatedPrincipal: Readonly<{
+        principalId: string;
+    }>): Promise<unknown>;
+    publishProfile(command: Readonly<{
+        operationId: string;
+        projectId: string;
+        expectedRegistryRevision: number;
+        overlay: unknown;
+        activate: boolean;
+    }>, authenticatedPrincipal: Readonly<{
+        principalId: string;
+    }>): Promise<unknown>;
+    publishRollback(command: Readonly<{
+        operationId: string;
+        projectId: string;
+        expectedRegistryRevision: number;
+        restoredFromRevisionId: string;
+        overlay: unknown;
+        activate: boolean;
+    }>, authenticatedPrincipal: Readonly<{
+        principalId: string;
+    }>): Promise<unknown>;
+    publishPlanningPolicy(command: Readonly<{
+        operationId: string;
+        projectId: string;
+        profileRevisionId: string;
+        revision: number;
+        expectedPreviousDigest?: string;
+        policy: unknown;
+    }>, authenticatedPrincipal: Readonly<{
+        principalId: string;
+    }>): Promise<unknown>;
+}
+export interface ConsoleWorkroomKnowledgeControlPort {
+    read(projectId: string): Promise<unknown>;
+    publish(command: Readonly<{
+        operationId: string;
+        projectId: string;
+        expectedRevision: number;
+        entries: readonly unknown[];
+    }>, authenticatedPrincipal: Readonly<{
+        principalId: string;
+    }>): Promise<unknown>;
+    rollback(command: Readonly<{
+        operationId: string;
+        projectId: string;
+        expectedRevision: number;
+        restoreRevision: number;
+    }>, authenticatedPrincipal: Readonly<{
+        principalId: string;
+    }>): Promise<unknown>;
 }
 export interface ConsoleScheduleEngine {
     addJob(job: Record<string, unknown>): Promise<Record<string, unknown>>;
@@ -63,6 +142,17 @@ interface EndpointManagementPort {
         };
     }[]>;
     listGroupMembers?(groupId: string): Promise<readonly unknown[]>;
+    listRequests?(): Promise<readonly {
+        platform_request_id: string;
+        type: string;
+        scene_type?: string | null;
+        scene_id: string;
+        sub_type?: string | null;
+        actor_id: string;
+        actor_name?: string | null;
+        comment?: string | null;
+        created_at: number;
+    }[]>;
     approveRequest?(requestId: string, remark?: string): Promise<void>;
     rejectRequest?(requestId: string, reason?: string): Promise<void>;
     kickGroupMember?(groupId: string, userId: string): Promise<void>;