@zhin.js/host-http 1.1.14 → 1.1.16

package/src/console-rpc.ts

@@ -3,7 +3,6 @@ import type { DatabaseHostConsole } from '@zhin.js/plugin-runtime';
 import {
   CONFIG_PATCH_LIMITS,
   CONFIG_RPC,
-  ENDPOINT_RPC,
   type ConsoleConfigPatchRequest,
   type ConsoleConfigPatchResult,
   type ConsoleConfigProjectPatchResult,
@@ -14,6 +13,13 @@ import {
 } from '@zhin.js/console-protocol';
 import { dispatchExtendedConsoleRpc, type ConsoleRpcExtendedCtx } from './console-rpc-extended/index.js';
 import { dispatchPluginConsoleRpc } from './console-plugin-rpc.js';
+import {
+  configurationSaveMessage,
+  dispatchHostResourceConsoleRpc,
+  invalidProjectPatchOperations,
+} from './console-rpc-handlers.js';
+
+export { isDemoHttpAllowed } from './console-rpc-handlers.js';
 
 /**
  * Console RPC 请求结构：未锚定 endpoint 的会话地址（结构对齐
@@ -30,26 +36,6 @@ export interface ConversationAddress {
   readonly threadId?: string;
 }
 
-/** Canonical Console wire fields → runtime conversation address. */
-function wireConversation(
-  channelType: string,
-  channelId: string,
-  parent: unknown,
-): ConversationAddress {
-  const kind: ConversationAddress['kind'] =
-    channelType === 'group' || channelType === 'channel' ? channelType : 'private';
-  const wire = parent && typeof parent === 'object'
-    ? parent as { readonly type?: unknown; readonly id?: unknown }
-    : undefined;
-  const parentKind = wire?.type === 'group' || wire?.type === 'channel' ? wire.type : undefined;
-  const parentId = typeof wire?.id === 'string' && wire.id ? wire.id : undefined;
-  return {
-    kind,
-    id: channelId,
-    ...(parentKind && parentId ? { parent: { kind: parentKind, id: parentId } } : {}),
-  };
-}
-
 export type RuntimeConsoleRpcMessage = {
   readonly type?: unknown;
   readonly requestId?: unknown;
@@ -285,31 +271,6 @@ export function pickRpcReply(
   );
 }
 
-const FORBIDDEN_PATCH_SEGMENTS = new Set(['__proto__', 'constructor', 'prototype']);
-
-/**
- * Structural check for `config:patch-project` operations at the RPC boundary, so no project
- * port implementation receives a malformed request. The store repeats the full validation.
- */
-function invalidProjectPatchOperations(patches: readonly unknown[]): string | undefined {
-  if (patches.length === 0) return 'patches 必须是非空数组';
-  if (patches.length > CONFIG_PATCH_LIMITS.maxOperations) return `一次最多 ${CONFIG_PATCH_LIMITS.maxOperations} 个 patch`;
-  for (const [index, item] of patches.entries()) {
-    if (!item || typeof item !== 'object' || Array.isArray(item)) return `patches[${index}] 必须是对象`;
-    const operation = item as Record<string, unknown>;
-    const path = operation.path;
-    if (!Array.isArray(path) || path.length === 0 || path.length > CONFIG_PATCH_LIMITS.maxPathDepth
-      || path.some(segment => typeof segment !== 'string' || !segment
-        || segment.length > CONFIG_PATCH_LIMITS.maxSegmentLength || FORBIDDEN_PATCH_SEGMENTS.has(segment))) {
-      return `patches[${index}].path 必须是 1–${CONFIG_PATCH_LIMITS.maxPathDepth} 段的有效字符串数组`;
-    }
-    if (operation.op === 'set') {
-      if (!Object.hasOwn(operation, 'value') || operation.value === undefined) return `patches[${index}] 的 set 需要 value`;
-    } else if (operation.op !== 'remove') return `patches[${index}].op 只能是 set 或 remove`;
-  }
-  return undefined;
-}
-
 export async function dispatchRuntimeConsoleRpc(
   message: RuntimeConsoleRpcMessage,
   ctx: RuntimeConsoleRpcContext,
@@ -631,465 +592,10 @@ export async function dispatchRuntimeConsoleRpc(
       }
       return payloads;
     }
-    case 'files:tree': {
-      try {
-        const tree = ctx.listProjectFiles ? await ctx.listProjectFiles() : [];
-        emit({ requestId, data: { tree } });
-      } catch (error) {
-        emit({
-          requestId,
-          error: `Failed to build file tree: ${error instanceof Error ? error.message : String(error)}`,
-        });
-      }
-      return payloads;
-    }
-    case 'files:read': {
-      try {
-        const filePath = String(message.filePath ?? '');
-        if (!filePath) {
-          emit({ requestId, error: 'filePath is required' });
-          return payloads;
-        }
-        if (!ctx.readProjectFile) {
-          emit({ requestId, error: 'File read is not configured' });
-          return payloads;
-        }
-        const file = await ctx.readProjectFile(filePath);
-        emit({ requestId, data: file });
-      } catch (error) {
-        emit({
-          requestId,
-          error: `Failed to read file: ${error instanceof Error ? error.message : String(error)}`,
-        });
-      }
-      return payloads;
-    }
-    case 'files:save': {
-      try {
-        const filePath = String(message.filePath ?? '');
-        const content = message.content;
-        if (!filePath) {
-          emit({ requestId, error: 'filePath is required' });
-          return payloads;
-        }
-        if (typeof content !== 'string') {
-          emit({ requestId, error: 'content field is required' });
-          return payloads;
-        }
-        if (!ctx.saveProjectFile) {
-          emit({ requestId, error: 'File write is not configured' });
-          return payloads;
-        }
-        await ctx.saveProjectFile(filePath, content);
-        emit({ requestId, data: { success: true, message: `文件已保存: ${filePath}` } });
-      } catch (error) {
-        emit({
-          requestId,
-          error: `Failed to save file: ${error instanceof Error ? error.message : String(error)}`,
-        });
-      }
-      return payloads;
-    }
-    case 'env:list': {
-      try {
-        const files = ctx.listEnvFiles ? await ctx.listEnvFiles() : [];
-        emit({ requestId, data: { files } });
-      } catch (error) {
-        emit({
-          requestId,
-          error: `Failed to list env files: ${error instanceof Error ? error.message : String(error)}`,
-        });
-      }
-      return payloads;
-    }
-    case 'env:get': {
-      try {
-        const filename = String(message.filename ?? '');
-        if (!filename) {
-          emit({ requestId, error: 'filename is required' });
-          return payloads;
-        }
-        if (!ctx.readEnvFile) {
-          emit({ requestId, error: 'Env read is not configured' });
-          return payloads;
-        }
-        const content = await ctx.readEnvFile(filename);
-        emit({ requestId, data: { content } });
-      } catch (error) {
-        emit({
-          requestId,
-          error: `Failed to read env file: ${error instanceof Error ? error.message : String(error)}`,
-        });
-      }
-      return payloads;
-    }
-    case 'env:save': {
-      try {
-        const filename = String(message.filename ?? '');
-        const content = message.content;
-        if (!filename) {
-          emit({ requestId, error: 'filename is required' });
-          return payloads;
-        }
-        if (typeof content !== 'string') {
-          emit({ requestId, error: 'content field is required' });
-          return payloads;
-        }
-        if (!ctx.writeEnvFile) {
-          emit({ requestId, error: 'Env write is not configured' });
-          return payloads;
-        }
-        await ctx.writeEnvFile(filename, content);
-        emit({ requestId, data: { success: true, message: `环境文件已保存: ${filename}` } });
-      } catch (error) {
-        emit({
-          requestId,
-          error: `Failed to save env file: ${error instanceof Error ? error.message : String(error)}`,
-        });
-      }
-      return payloads;
-    }
-    case 'schema:get': {
-      try {
-        const pluginName = typeof message.pluginName === 'string'
-          ? message.pluginName
-          : undefined;
-        const schema = ctx.getSchema ? await ctx.getSchema(pluginName) : null;
-        emit({ requestId, data: schema });
-      } catch (error) {
-        emit({
-          requestId,
-          error: `Failed to get schema: ${error instanceof Error ? error.message : String(error)}`,
-        });
-      }
-      return payloads;
-    }
-    case 'schema:get-all': {
-      try {
-        const schemas = ctx.getAllSchemas ? await ctx.getAllSchemas() : {};
-        emit({ requestId, data: schemas });
-      } catch (error) {
-        emit({
-          requestId,
-          error: `Failed to get all schemas: ${error instanceof Error ? error.message : String(error)}`,
-        });
-      }
-      return payloads;
-    }
-    case 'db:info': {
-      if (ctx.database) {
-        emit({ requestId, data: ctx.database.info() });
-        return payloads;
-      }
-      if (ctx.dbInfo) {
-        try {
-          emit({ requestId, data: await ctx.dbInfo() });
-        } catch (error) {
-          emit({
-            requestId,
-            error: error instanceof Error ? error.message : String(error),
-          });
-        }
-        return payloads;
-      }
-      emit({
-        requestId,
-        data: { dialect: null, connected: false, message: 'Database not configured on Plugin Runtime Host' },
-      });
-      return payloads;
-    }
-    case 'db:tables': {
-      try {
-        if (ctx.database) {
-          emit({ requestId, data: { tables: ctx.database.tables() } });
-          return payloads;
-        }
-        const tables = ctx.dbTables ? await ctx.dbTables() : [];
-        emit({ requestId, data: tables });
-      } catch (error) {
-        emit({
-          requestId,
-          error: error instanceof Error ? error.message : String(error),
-        });
-      }
-      return payloads;
-    }
-    case 'db:select': {
-      const table = stringField(message, 'table');
-      if (!table) return errorReply(payloads, requestId, 'table is required');
-      const page = positiveInteger(message.page, 1);
-      const pageSize = Math.min(positiveInteger(message.pageSize, 50), 500);
-      const where = recordField(message.where);
-      if (!ctx.database) {
-        emit({ requestId, data: { rows: [], total: 0, page, pageSize } });
+    default: {
+      if (await dispatchHostResourceConsoleRpc(type, message, ctx, requestId, payloads)) {
         return payloads;
       }
-      try {
-        emit({ requestId, data: await ctx.database.select(table, page, pageSize, where) });
-      } catch (error) {
-        emit({ requestId, error: `Failed to select: ${errorMessage(error)}` });
-      }
-      return payloads;
-    }
-    case 'db:insert': {
-      if (!ctx.database) return errorReply(payloads, requestId, 'Database RPC is not available on Plugin Runtime Host');
-      const table = stringField(message, 'table');
-      const row = recordField(message.row);
-      if (!table || !row) return errorReply(payloads, requestId, 'table and row are required');
-      try {
-        await ctx.database.insert(table, row);
-        emit({ requestId, data: { success: true } });
-      } catch (error) {
-        emit({ requestId, error: `Failed to insert: ${errorMessage(error)}` });
-      }
-      return payloads;
-    }
-    case 'db:update': {
-      if (!ctx.database) return errorReply(payloads, requestId, 'Database RPC is not available on Plugin Runtime Host');
-      const table = stringField(message, 'table');
-      const row = recordField(message.row);
-      const where = recordField(message.where);
-      if (!table || !row || !where) {
-        return errorReply(payloads, requestId, 'table, row, and where are required');
-      }
-      try {
-        const affected = await ctx.database.update(table, row, where);
-        emit({ requestId, data: { success: true, affected } });
-      } catch (error) {
-        emit({ requestId, error: `Failed to update: ${errorMessage(error)}` });
-      }
-      return payloads;
-    }
-    case 'db:delete': {
-      if (!ctx.database) return errorReply(payloads, requestId, 'Database RPC is not available on Plugin Runtime Host');
-      const table = stringField(message, 'table');
-      const where = recordField(message.where);
-      if (!table || !where) return errorReply(payloads, requestId, 'table and where are required');
-      try {
-        const deleted = await ctx.database.delete(table, where);
-        emit({ requestId, data: { success: true, deleted } });
-      } catch (error) {
-        emit({ requestId, error: `Failed to delete: ${errorMessage(error)}` });
-      }
-      return payloads;
-    }
-    case 'db:drop-table': {
-      if (!ctx.database) return errorReply(payloads, requestId, 'Database RPC is not available on Plugin Runtime Host');
-      const table = stringField(message, 'table');
-      if (!table) return errorReply(payloads, requestId, 'table is required');
-      try {
-        await ctx.database.dropTable(table);
-        emit({ requestId, data: { success: true } });
-      } catch (error) {
-        emit({ requestId, error: `Failed to drop table: ${errorMessage(error)}` });
-      }
-      return payloads;
-    }
-    case 'db:kv:get': {
-      const table = stringField(message, 'table');
-      const key = stringField(message, 'key');
-      if (!table || !key) return errorReply(payloads, requestId, 'table and key are required');
-      if (!ctx.database) {
-        emit({ requestId, data: { key, value: null } });
-        return payloads;
-      }
-      try {
-        emit({ requestId, data: { key, value: await ctx.database.kvGet(table, key) } });
-      } catch (error) {
-        emit({ requestId, error: `Failed to get kv: ${errorMessage(error)}` });
-      }
-      return payloads;
-    }
-    case 'db:kv:set': {
-      if (!ctx.database) return errorReply(payloads, requestId, 'Database RPC is not available on Plugin Runtime Host');
-      const table = stringField(message, 'table');
-      const key = stringField(message, 'key');
-      if (!table || !key) return errorReply(payloads, requestId, 'table and key are required');
-      try {
-        const ttl = typeof message.ttl === 'number' && Number.isFinite(message.ttl)
-          ? message.ttl
-          : undefined;
-        await ctx.database.kvSet(table, key, message.value, ttl);
-        emit({ requestId, data: { success: true } });
-      } catch (error) {
-        emit({ requestId, error: `Failed to set kv: ${errorMessage(error)}` });
-      }
-      return payloads;
-    }
-    case 'db:kv:delete': {
-      if (!ctx.database) return errorReply(payloads, requestId, 'Database RPC is not available on Plugin Runtime Host');
-      const table = stringField(message, 'table');
-      const key = stringField(message, 'key');
-      if (!table || !key) return errorReply(payloads, requestId, 'table and key are required');
-      try {
-        await ctx.database.kvDelete(table, key);
-        emit({ requestId, data: { success: true } });
-      } catch (error) {
-        emit({ requestId, error: `Failed to delete kv: ${errorMessage(error)}` });
-      }
-      return payloads;
-    }
-    case 'db:kv:entries': {
-      const table = stringField(message, 'table');
-      if (!table) return errorReply(payloads, requestId, 'table is required');
-      if (!ctx.database) {
-        emit({ requestId, data: { entries: [] } });
-        return payloads;
-      }
-      try {
-        emit({ requestId, data: { entries: await ctx.database.kvEntries(table) } });
-      } catch (error) {
-        emit({ requestId, error: `Failed to get entries: ${errorMessage(error)}` });
-      }
-      return payloads;
-    }
-    case 'endpoint.list': {
-      try {
-        const endpoints = ctx.listEndpoints ? await ctx.listEndpoints() : [];
-        emit({ requestId, data: { endpoints } });
-      } catch (error) {
-        emit({
-          requestId,
-          error: error instanceof Error ? error.message : String(error),
-        });
-      }
-      return payloads;
-    }
-    case 'endpoint.info': {
-      try {
-        const data = recordField(message.data) ?? message;
-        const adapter = String(data.adapter ?? '');
-        const endpointKey = String(data.endpointKey ?? '');
-        if (!adapter || !endpointKey) {
-          emit({ requestId, error: 'adapter and endpointKey are required' });
-          return payloads;
-        }
-        if (!ctx.getEndpoint) {
-          emit({ requestId, error: 'Endpoint registry is not configured' });
-          return payloads;
-        }
-        const endpoint = await ctx.getEndpoint(adapter, endpointKey);
-        if (!endpoint) {
-          emit({ requestId, error: 'endpoint not found' });
-          return payloads;
-        }
-        emit({ requestId, data: endpoint });
-      } catch (error) {
-        emit({
-          requestId,
-          error: error instanceof Error ? error.message : String(error),
-        });
-      }
-      return payloads;
-    }
-    case ENDPOINT_RPC.TEST: {
-      const data = recordField(message.data) ?? message;
-      const adapter = stringField(data, 'adapter');
-      const endpointKey = stringField(data, 'endpointKey');
-      if (!adapter || !endpointKey) {
-        emit({ requestId, error: 'adapter and endpointKey are required' });
-        return payloads;
-      }
-      if (!ctx.getEndpoint) {
-        emit({ requestId, error: 'Endpoint registry is not configured' });
-        return payloads;
-      }
-      const startedAt = Date.now();
-      try {
-        const endpoint = await ctx.getEndpoint(adapter, endpointKey);
-        if (!endpoint) {
-          emit({ requestId, data: {
-            reachable: false,
-            connected: false,
-            phase: 'unconfigured',
-            latencyMs: Date.now() - startedAt,
-            message: 'Endpoint 未注册到当前 generation',
-          } });
-          return payloads;
-        }
-        emit({ requestId, data: {
-          reachable: endpoint.connected && endpoint.status === 'online',
-          connected: endpoint.connected,
-          status: endpoint.status,
-          admitted: endpoint.admitted,
-          transportState: endpoint.transportState,
-          phase: endpoint.phase ?? (endpoint.connected ? 'online' : 'pending'),
-          pendingLogin: endpoint.pendingLogin ?? false,
-          latencyMs: Date.now() - startedAt,
-          message: endpoint.connected
-            ? 'Endpoint 已连接'
-            : endpoint.pendingLogin
-              ? 'Endpoint 等待登录操作'
-              : 'Endpoint 当前离线',
-        } });
-      } catch (error) {
-        emit({ requestId, data: {
-          reachable: false,
-          connected: false,
-          phase: 'failed',
-          latencyMs: Date.now() - startedAt,
-          message: error instanceof Error ? error.message : String(error),
-        } });
-      }
-      return payloads;
-    }
-    case 'endpoint.send_message': {
-      try {
-        const data = recordField(message.data) ?? message;
-        const adapter = String(data.adapter ?? '');
-        const endpointKey = String(data.endpointKey ?? '');
-        const channelId = String(data.channelId ?? data.id ?? '');
-        const channelType = String(data.channelType ?? data.type ?? '');
-        const content = data.content;
-        if (!adapter || !endpointKey || !channelId || !channelType || content === undefined) {
-          emit({
-            requestId,
-            error: 'adapter, endpointKey, channelId, channelType, and content are required',
-          });
-          return payloads;
-        }
-        if (!ctx.sendEndpointMessage) {
-          emit({ requestId, error: 'Endpoint send is not configured' });
-          return payloads;
-        }
-        const result = await ctx.sendEndpointMessage({
-          adapter,
-          endpointKey,
-          conversation: wireConversation(channelType, channelId, data.parent),
-          content,
-        });
-        emit({ requestId, data: { messageId: result.messageId } });
-      } catch (error) {
-        emit({
-          requestId,
-          error: error instanceof Error ? error.message : String(error),
-        });
-      }
-      return payloads;
-    }
-    case 'system:restart': {
-      try {
-        if (!ctx.requestRestart) {
-          emit({ requestId, error: 'Process restart is not configured' });
-          return payloads;
-        }
-        ctx.publishEvent?.('system:restarting', { timestamp: Date.now() });
-        emit({ requestId, data: { success: true, message: '正在重启...' } });
-        // Delay so the HTTP response can flush (parity with legacy host-api).
-        setTimeout(() => {
-          void Promise.resolve(ctx.requestRestart?.()).catch(() => {
-            /* restart is best-effort */
-          });
-        }, 500);
-      } catch (error) {
-        emit({
-          requestId,
-          error: error instanceof Error ? error.message : String(error),
-        });
-      }
-      return payloads;
-    }
-    default:
       if (type.startsWith('db:')) {
         emit({
           requestId,
@@ -1099,81 +605,6 @@ export async function dispatchRuntimeConsoleRpc(
       }
       emit({ requestId, error: `Unknown RPC type: ${type || '<empty>'}` });
       return payloads;
+    }
   }
 }
-
-function stringField(message: RuntimeConsoleRpcMessage, key: string): string {
-  const value = message[key];
-  return typeof value === 'string' ? value.trim() : '';
-}
-
-function recordField(value: unknown): Record<string, unknown> | undefined {
-  return value && typeof value === 'object' && !Array.isArray(value)
-    ? value as Record<string, unknown>
-    : undefined;
-}
-
-function positiveInteger(value: unknown, fallback: number): number {
-  const parsed = Number(value ?? fallback);
-  return Number.isInteger(parsed) && parsed > 0 ? parsed : fallback;
-}
-
-function errorMessage(error: unknown): string {
-  return error instanceof Error ? error.message : String(error);
-}
-
-function errorReply(
-  payloads: RuntimeConsoleRpcReply[],
-  requestId: number | string | undefined,
-  error: string,
-): RuntimeConsoleRpcReply[] {
-  payloads.push({ requestId, error });
-  return payloads;
-}
-
-/** HTTP paths under apiBase that demo scope may call (ADR 0016). */
-export function isDemoHttpAllowed(method: string, pathname: string, apiBase: string): boolean {
-  const normalizedBase = apiBase.replace(/\/$/u, '') || '/api';
-  const m = method.toUpperCase();
-  // Each inference handler resolves a static authenticated personal binding before reading or mutating anything.
-  if (m === 'GET' && ['', '/owners', '/export', '/mutation', '/sessions', '/session'].some(path => pathname === `${normalizedBase}/agent/inference${path}`)) return true;
-  if (m === 'PUT' && pathname === `${normalizedBase}/agent/inference/session`) return true;
-  if (m === 'POST' && ['/plan', '/apply', '/key/prepare', '/discover', '/profile-schema'].some(path => pathname === `${normalizedBase}/agent/inference${path}`)) return true;
-  if (m === 'GET' && pathname === `${normalizedBase}/events`) return true;
-  if (m === 'GET' && pathname === `${normalizedBase}/events/history`) return true;
-  if (m === 'GET' && DEMO_INTROSPECTION_PATHS.has(pathname.slice(normalizedBase.length))) return true;
-  if (m === 'POST' && pathname === `${normalizedBase}/console/request`) return true;
-  // Read-only dashboard / plugin inspection routes (legacy host-api parity).
-  if (m === 'GET' && pathname === `${normalizedBase}/system/status`) return true;
-  if (m === 'GET' && pathname === `${normalizedBase}/stats`) return true;
-  if (m === 'GET' && (pathname === `${normalizedBase}/plugins`
-    || pathname.startsWith(`${normalizedBase}/plugins/`))) return true;
-  return false;
-}
-
-function configurationSaveMessage(result: { restartRequired: boolean; revision?: string }
-  & import('@zhin.js/console-protocol').ConsoleConfigApplicationStatus): string {
-  if (result.applicationError === 'superseded') return '配置已保存，但该次生效申请已被替代';
-  if (result.applicationError === 'invalid') return '配置已保存，但配置校验失败，未生效';
-  if (result.applicationError) return '配置已保存，生效结果未确认';
-  if (result.application) {
-    if (result.revision && result.application.sourceRevision !== result.revision) return '配置已保存，但已被较新修订替代';
-    if (result.application.groups.some(group => group.status === 'unknown')) return '配置已保存，生效结果未确认';
-    if (result.application.groups.some(group => group.status === 'superseded')) return '配置已保存，但该次生效申请已被替代';
-    if (result.application.groups.some(group => ['failed', 'blocked'].includes(group.status))) return '配置已保存，部分配置未生效';
-    if (result.restartRequired) return '配置已保存，部分配置待重启生效';
-    return '配置已保存并已生效';
-  }
-  return result.restartRequired ? '配置已保存，需重启进程才能生效' : '配置已保存';
-}
-
-const DEMO_INTROSPECTION_PATHS: ReadonlySet<string> = new Set([
-  '/introspection/commands',
-  '/introspection/middlewares',
-  '/introspection/components',
-  '/introspection/endpoints',
-  '/introspection/bindings',
-  '/introspection/tools',
-  '/introspection/prompt-sections',
-  '/introspection/mcp',
-]);