@zhin.js/plugin-code-runner 1.0.0 → 1.1.0

package/README.md

@@ -0,0 +1,28 @@
+# @zhin.js/plugin-code-runner
+
+Zhin.js plugin for code-runner functionality.
+
+## Installation
+
+```bash
+pnpm add @zhin.js/plugin-code-runner
+```
+
+## Usage
+
+Add the plugin to your `zhin.config.yml`:
+
+```yaml
+plugins:
+  - @zhin.js/plugin-code-runner
+```
+
+Or via CLI:
+
+```bash
+zhin install @zhin.js/plugin-code-runner
+```
+
+## Configuration
+
+Configure in `zhin.config.yml` under the plugin's key. Refer to the plugin source for available options.

package/agent/skills/code-runner.md

@@ -0,0 +1,55 @@
+---
+name: code-runner
+description: >-
+  在线代码执行能力。当用户要求运行代码片段、验证算法、测试函数输出、
+  或想看某段代码的执行结果时使用。支持 Python、JavaScript、TypeScript、
+  Go、Rust、Java、C/C++、Ruby、PHP 等语言。即使用户只是说「帮我跑一下这段代码」
+  或贴了一段代码想看结果，也应触发。
+keywords:
+  - code
+  - run
+  - 运行
+  - 代码
+  - execute
+  - sandbox
+  - python
+  - javascript
+  - 编程
+  - 执行
+  - 测试
+tags:
+  - code-runner
+  - development
+  - sandbox
+tools:
+  - run_code
+---
+
+# 在线代码执行技能
+
+通过 glot.io API 在隔离沙箱中执行代码，不影响本地环境。
+
+## 使用方式
+
+调用 `run_code` 工具，传入 `language`（语言标识）和 `code`（代码内容）。
+
+**支持语言：** python, javascript, typescript, go, rust, java, c, cpp, ruby, php
+
+**Example:**
+```
+用户: 帮我算一下 1 到 100 的和
+→ run_code(language="python", code="print(sum(range(1, 101)))")
+```
+
+## 限制
+
+- 代码长度上限 **10000 字符**
+- 执行超时 **30 秒**
+- 无法访问网络和文件系统（沙箱隔离）
+- 不支持交互式输入（stdin）
+
+## 易错点
+
+1. **language 参数必须是上面列出的标识符**，不接受中文或全名（如用 `python` 不用 `Python3`）。
+2. **C 和 C++ 是不同的 language 值**：`c` 和 `cpp`。
+3. **代码需要有输出语句**（print/console.log/fmt.Println 等），否则返回为空。

package/agent/tools/run_code.ts

@@ -0,0 +1,17 @@
+import { defineAgentTool } from '@zhin.js/agent/tools';
+import { z } from 'zod';
+import { formatResult, runCode } from '../../src/run-code.js';
+
+export default defineAgentTool<{ language: string; code: string }>({
+  description: '在沙箱中运行代码片段，返回 stdout/stderr/error',
+  inputSchema: z.object({
+    language: z.string().min(1),
+    code: z.string().min(1),
+  }),
+  keywords: ['运行代码', '执行代码', 'run code', 'execute', '代码'],
+  tags: ['code', 'run', 'execute', 'sandbox'],
+  async execute({ language, code }) {
+    const result = await runCode(language, code);
+    return formatResult(result);
+  },
+});

package/commands/run/[language].js

@@ -0,0 +1,16 @@
+// Generated by build-plugin-runtime-entries.mjs. Do not edit.
+import { defineCommand } from 'zhin.js/command';
+import { formatResult, runCode } from "../../lib/run-code.js";
+export default defineCommand({
+    description: '在沙箱中运行代码片段（/code-runner run <语言> <代码>）',
+    params: { language: { type: 'string' } },
+    async execute({ params, args }) {
+        const language = String(params.language ?? '');
+        // code 原来是第二动态段，约定式命令只支持单动态文件参数，改从 args 取
+        const code = args.join(' ').trim();
+        if (!code)
+            return '请提供要运行的代码，例如：/code-runner run javascript alert(1+1)';
+        const result = await runCode(language, code);
+        return formatResult(result);
+    },
+});

package/commands/run/[language].ts

@@ -0,0 +1,15 @@
+import { defineCommand } from 'zhin.js/command';
+import { formatResult, runCode } from '../../src/run-code.js';
+
+export default defineCommand({
+  description: '在沙箱中运行代码片段（/code-runner run <语言> <代码>）',
+  params: { language: { type: 'string' } },
+  async execute({ params, args }) {
+    const language = String(params.language ?? '');
+    // code 原来是第二动态段，约定式命令只支持单动态文件参数，改从 args 取
+    const code = args.join(' ').trim();
+    if (!code) return '请提供要运行的代码，例如：/code-runner run javascript alert(1+1)';
+    const result = await runCode(language, code);
+    return formatResult(result);
+  },
+});

package/lib/index.d.ts

@@ -1,2 +1,2 @@
-export {};
+export { formatResult, runCode } from './run-code.js';
 //# sourceMappingURL=index.d.ts.map

package/lib/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":""}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC"}

package/lib/index.js

@@ -1,109 +1,2 @@
-/**
- * @zhin.js/plugin-code-runner
- *
- * 沙箱代码执行插件 —— 通过 glot.io API 安全运行代码片段
- *
- * 功能：
- *   - AI 工具 run_code：AI 可调用执行代码
- *   - 命令「运行 <language> <code>」：用户直接运行代码
- *
- * 安全：
- *   - 代码长度上限 10000 字符
- *   - 语言白名单校验
- *   - 不执行本地代码，全部通过 glot.io 远程沙箱
- */
-import { formatCompact, MessageCommand, usePlugin, ZhinTool } from 'zhin.js';
-const { addCommand, addTool, logger } = usePlugin();
-// ─── 常量 ────────────────────────────────────────────────────────────────────
-const MAX_CODE_LENGTH = 10000;
-const SUPPORTED_LANGUAGES = {
-    python: 'main.py',
-    javascript: 'main.js',
-    typescript: 'main.ts',
-    go: 'main.go',
-    rust: 'main.rs',
-    java: 'Main.java',
-    c: 'main.c',
-    cpp: 'main.cpp',
-    ruby: 'main.rb',
-    php: 'main.php',
-};
-const GLOT_API_BASE = 'https://glot.io/api/run';
-async function runCode(language, code) {
-    const lang = language.toLowerCase().trim();
-    if (!SUPPORTED_LANGUAGES[lang]) {
-        return {
-            stdout: '',
-            stderr: '',
-            error: `不支持的语言: ${lang}。支持: ${Object.keys(SUPPORTED_LANGUAGES).join(', ')}`,
-        };
-    }
-    if (code.length > MAX_CODE_LENGTH) {
-        return {
-            stdout: '',
-            stderr: '',
-            error: `代码长度超过上限 ${MAX_CODE_LENGTH} 字符（当前 ${code.length}）`,
-        };
-    }
-    const fileName = SUPPORTED_LANGUAGES[lang];
-    const url = `${GLOT_API_BASE}/${lang}/latest`;
-    try {
-        const response = await fetch(url, {
-            method: 'POST',
-            headers: { 'Content-Type': 'application/json' },
-            body: JSON.stringify({
-                files: [{ name: fileName, content: code }],
-            }),
-            signal: AbortSignal.timeout(30_000),
-        });
-        if (!response.ok) {
-            return {
-                stdout: '',
-                stderr: '',
-                error: `API 请求失败: ${response.status} ${response.statusText}`,
-            };
-        }
-        const data = (await response.json());
-        return {
-            stdout: data.stdout || '',
-            stderr: data.stderr || '',
-            error: data.error || '',
-        };
-    }
-    catch (e) {
-        const msg = e?.name === 'TimeoutError' ? '请求超时（30s）' : e?.message || '未知错误';
-        return { stdout: '', stderr: '', error: msg };
-    }
-}
-function formatResult(result) {
-    const parts = [];
-    if (result.stdout)
-        parts.push(`[stdout]\n${result.stdout}`);
-    if (result.stderr)
-        parts.push(`[stderr]\n${result.stderr}`);
-    if (result.error)
-        parts.push(`[error]\n${result.error}`);
-    return parts.length ? parts.join('\n') : '（无输出）';
-}
-// ─── AI Tool: run_code ───────────────────────────────────────────────────────
-addTool(new ZhinTool('run_code')
-    .desc('在沙箱中运行代码片段，返回 stdout/stderr/error')
-    .keyword('运行代码', '执行代码', 'run code', 'execute', '代码')
-    .tag('code', 'run', 'execute', 'sandbox')
-    .param('language', { type: 'string', description: '编程语言（python/javascript/typescript/go/rust/java/c/cpp/ruby/php）' }, true)
-    .param('code', { type: 'string', description: '要执行的代码' }, true)
-    .execute(async (args) => {
-    const result = await runCode(args.language, args.code);
-    return formatResult(result);
-})
-    .toTool());
-// ─── 命令: 运行 ─────────────────────────────────────────────────────────────
-addCommand(new MessageCommand('运行 <language:text> <code:text>')
-    .desc('在沙箱中运行代码片段')
-    .action(async (_message, result) => {
-    const { language, code } = result.params;
-    logger.debug(formatCompact({ op: 'run', language, len: code.length }));
-    const res = await runCode(language, code);
-    return formatResult(res);
-}));
+export { formatResult, runCode } from './run-code.js';
 //# sourceMappingURL=index.js.map

package/lib/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AAE5E,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,SAAS,EAAE,CAAA;AAEnD,8EAA8E;AAE9E,MAAM,eAAe,GAAG,KAAK,CAAA;AAE7B,MAAM,mBAAmB,GAA2B;IAClD,MAAM,EAAE,SAAS;IACjB,UAAU,EAAE,SAAS;IACrB,UAAU,EAAE,SAAS;IACrB,EAAE,EAAE,SAAS;IACb,IAAI,EAAE,SAAS;IACf,IAAI,EAAE,WAAW;IACjB,CAAC,EAAE,QAAQ;IACX,GAAG,EAAE,UAAU;IACf,IAAI,EAAE,SAAS;IACf,GAAG,EAAE,UAAU;CAChB,CAAA;AAED,MAAM,aAAa,GAAG,yBAAyB,CAAA;AAU/C,KAAK,UAAU,OAAO,CAAC,QAAgB,EAAE,IAAY;IACnD,MAAM,IAAI,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAA;IAE1C,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/B,OAAO;YACL,MAAM,EAAE,EAAE;YACV,MAAM,EAAE,EAAE;YACV,KAAK,EAAE,WAAW,IAAI,QAAQ,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;SAC5E,CAAA;IACH,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,GAAG,eAAe,EAAE,CAAC;QAClC,OAAO;YACL,MAAM,EAAE,EAAE;YACV,MAAM,EAAE,EAAE;YACV,KAAK,EAAE,YAAY,eAAe,UAAU,IAAI,CAAC,MAAM,GAAG;SAC3D,CAAA;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAA;IAC1C,MAAM,GAAG,GAAG,GAAG,aAAa,IAAI,IAAI,SAAS,CAAA;IAE7C,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAChC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;aAC3C,CAAC;YACF,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;SACpC,CAAC,CAAA;QAEF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,OAAO;gBACL,MAAM,EAAE,EAAE;gBACV,MAAM,EAAE,EAAE;gBACV,KAAK,EAAE,aAAa,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE;aAC7D,CAAA;QACH,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAc,CAAA;QACjD,OAAO;YACL,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,EAAE;YACzB,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,EAAE;YACzB,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,EAAE;SACxB,CAAA;IACH,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,MAAM,GAAG,GAAG,CAAC,EAAE,IAAI,KAAK,cAAc,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,MAAM,CAAA;QAC3E,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAA;IAC/C,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,MAAiB;IACrC,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,IAAI,MAAM,CAAC,MAAM;QAAE,KAAK,CAAC,IAAI,CAAC,aAAa,MAAM,CAAC,MAAM,EAAE,CAAC,CAAA;IAC3D,IAAI,MAAM,CAAC,MAAM;QAAE,KAAK,CAAC,IAAI,CAAC,aAAa,MAAM,CAAC,MAAM,EAAE,CAAC,CAAA;IAC3D,IAAI,MAAM,CAAC,KAAK;QAAE,KAAK,CAAC,IAAI,CAAC,YAAY,MAAM,CAAC,KAAK,EAAE,CAAC,CAAA;IACxD,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAA;AAClD,CAAC;AAED,gFAAgF;AAEhF,OAAO,CACL,IAAI,QAAQ,CAAC,UAAU,CAAC;KACrB,IAAI,CAAC,mCAAmC,CAAC;KACzC,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,CAAC;KACpD,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,CAAC;KACxC,KAAK,CAAC,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,gEAAgE,EAAE,EAAE,IAAI,CAAC;KAC1H,KAAK,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,EAAE,IAAI,CAAC;KAC9D,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IACtB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,CAAA;IACtD,OAAO,YAAY,CAAC,MAAM,CAAC,CAAA;AAC7B,CAAC,CAAC;KACD,MAAM,EAAE,CACZ,CAAA;AAED,2EAA2E;AAE3E,UAAU,CACR,IAAI,cAAc,CAAC,gCAAgC,CAAC;KACjD,IAAI,CAAC,YAAY,CAAC;KAClB,MAAM,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE;IACjC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC,MAA4C,CAAA;IAC9E,MAAM,CAAC,KAAK,CAAC,aAAa,CAAE,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAA;IACvE,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;IACzC,OAAO,YAAY,CAAC,GAAG,CAAC,CAAA;AAC1B,CAAC,CAAC,CACL,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC"}

package/lib/run-code.d.ts

@@ -0,0 +1,9 @@
+interface RunResult {
+    stdout: string;
+    stderr: string;
+    error: string;
+}
+export declare function runCode(language: string, code: string): Promise<RunResult>;
+export declare function formatResult(result: RunResult): string;
+export {};
+//# sourceMappingURL=run-code.d.ts.map

package/lib/run-code.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-code.d.ts","sourceRoot":"","sources":["../src/run-code.ts"],"names":[],"mappings":"AAiBA,UAAU,SAAS;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;CACf;AAED,wBAAsB,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAmDhF;AAED,wBAAgB,YAAY,CAAC,MAAM,EAAE,SAAS,GAAG,MAAM,CAMtD"}

package/lib/run-code.js

@@ -0,0 +1,72 @@
+const MAX_CODE_LENGTH = 10000;
+const SUPPORTED_LANGUAGES = {
+    python: 'main.py',
+    javascript: 'main.js',
+    typescript: 'main.ts',
+    go: 'main.go',
+    rust: 'main.rs',
+    java: 'Main.java',
+    c: 'main.c',
+    cpp: 'main.cpp',
+    ruby: 'main.rb',
+    php: 'main.php',
+};
+const GLOT_API_BASE = 'https://glot.io/api/run';
+export async function runCode(language, code) {
+    const lang = language.toLowerCase().trim();
+    if (!SUPPORTED_LANGUAGES[lang]) {
+        return {
+            stdout: '',
+            stderr: '',
+            error: `不支持的语言: ${lang}。支持: ${Object.keys(SUPPORTED_LANGUAGES).join(', ')}`,
+        };
+    }
+    if (code.length > MAX_CODE_LENGTH) {
+        return {
+            stdout: '',
+            stderr: '',
+            error: `代码长度超过上限 ${MAX_CODE_LENGTH} 字符（当前 ${code.length}）`,
+        };
+    }
+    const fileName = SUPPORTED_LANGUAGES[lang];
+    const url = `${GLOT_API_BASE}/${lang}/latest`;
+    try {
+        const response = await fetch(url, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify({
+                files: [{ name: fileName, content: code }],
+            }),
+            signal: AbortSignal.timeout(30_000),
+        });
+        if (!response.ok) {
+            return {
+                stdout: '',
+                stderr: '',
+                error: `API 请求失败: ${response.status} ${response.statusText}`,
+            };
+        }
+        const data = (await response.json());
+        return {
+            stdout: data.stdout || '',
+            stderr: data.stderr || '',
+            error: data.error || '',
+        };
+    }
+    catch (e) {
+        const err = e;
+        const msg = err.name === 'TimeoutError' ? '请求超时（30s）' : err.message || '未知错误';
+        return { stdout: '', stderr: '', error: msg };
+    }
+}
+export function formatResult(result) {
+    const parts = [];
+    if (result.stdout)
+        parts.push(`[stdout]\n${result.stdout}`);
+    if (result.stderr)
+        parts.push(`[stderr]\n${result.stderr}`);
+    if (result.error)
+        parts.push(`[error]\n${result.error}`);
+    return parts.length ? parts.join('\n') : '（无输出）';
+}
+//# sourceMappingURL=run-code.js.map

package/lib/run-code.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-code.js","sourceRoot":"","sources":["../src/run-code.ts"],"names":[],"mappings":"AAAA,MAAM,eAAe,GAAG,KAAK,CAAC;AAE9B,MAAM,mBAAmB,GAA2B;IAClD,MAAM,EAAE,SAAS;IACjB,UAAU,EAAE,SAAS;IACrB,UAAU,EAAE,SAAS;IACrB,EAAE,EAAE,SAAS;IACb,IAAI,EAAE,SAAS;IACf,IAAI,EAAE,WAAW;IACjB,CAAC,EAAE,QAAQ;IACX,GAAG,EAAE,UAAU;IACf,IAAI,EAAE,SAAS;IACf,GAAG,EAAE,UAAU;CAChB,CAAC;AAEF,MAAM,aAAa,GAAG,yBAAyB,CAAC;AAQhD,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,QAAgB,EAAE,IAAY;IAC1D,MAAM,IAAI,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;IAE3C,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/B,OAAO;YACL,MAAM,EAAE,EAAE;YACV,MAAM,EAAE,EAAE;YACV,KAAK,EAAE,WAAW,IAAI,QAAQ,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;SAC5E,CAAC;IACJ,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,GAAG,eAAe,EAAE,CAAC;QAClC,OAAO;YACL,MAAM,EAAE,EAAE;YACV,MAAM,EAAE,EAAE;YACV,KAAK,EAAE,YAAY,eAAe,UAAU,IAAI,CAAC,MAAM,GAAG;SAC3D,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAC3C,MAAM,GAAG,GAAG,GAAG,aAAa,IAAI,IAAI,SAAS,CAAC;IAE9C,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAChC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;aAC3C,CAAC;YACF,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;SACpC,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,OAAO;gBACL,MAAM,EAAE,EAAE;gBACV,MAAM,EAAE,EAAE;gBACV,KAAK,EAAE,aAAa,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE;aAC7D,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAc,CAAC;QAClD,OAAO;YACL,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,EAAE;YACzB,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,EAAE;YACzB,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,EAAE;SACxB,CAAC;IACJ,CAAC;IAAC,OAAO,CAAU,EAAE,CAAC;QACpB,MAAM,GAAG,GAAG,CAAU,CAAC;QACvB,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,IAAI,MAAM,CAAC;QAC9E,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;IAChD,CAAC;AACH,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,MAAiB;IAC5C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,MAAM,CAAC,MAAM;QAAE,KAAK,CAAC,IAAI,CAAC,aAAa,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAC5D,IAAI,MAAM,CAAC,MAAM;QAAE,KAAK,CAAC,IAAI,CAAC,aAAa,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAC5D,IAAI,MAAM,CAAC,KAAK;QAAE,KAAK,CAAC,IAAI,CAAC,YAAY,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;IACzD,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;AACnD,CAAC"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@zhin.js/plugin-code-runner",
-  "version": "1.0.0",
-  "description": "Sandboxed code execution plugin for Zhin.js — run code snippets via AI or command",
+  "version": "1.1.0",
+  "description": "Sandboxed code execution plugin for Zhin.js (Plugin Runtime)",
   "type": "module",
   "main": "./lib/index.js",
   "types": "./lib/index.d.ts",
@@ -14,8 +14,12 @@
     "./package.json": "./package.json"
   },
   "files": [
+    "plugin.js",
+    "schema.json",
+    "commands",
     "src",
     "lib",
+    "agent",
     "README.md"
   ],
   "keywords": [
@@ -33,13 +37,29 @@
     "url": "https://github.com/lc-cn"
   },
   "license": "MIT",
-  "dependencies": {},
   "devDependencies": {
     "typescript": "^6.0.3",
-    "zhin.js": "2.0.0"
+    "vitest": "^4.1.10",
+    "zod": "^4.4.3",
+    "@zhin.js/agent": "1.1.23",
+    "zhin.js": "1.1.0"
   },
   "peerDependencies": {
-    "zhin.js": "2.0.0"
+    "zod": "^4.0.0",
+    "@zhin.js/agent": "^1.1.23",
+    "@zhin.js/command": "^1.1.0",
+    "zhin.js": "^1.1.0"
+  },
+  "peerDependenciesMeta": {
+    "@zhin.js/agent": {
+      "optional": true
+    },
+    "@zhin.js/command": {
+      "optional": true
+    },
+    "zod": {
+      "optional": true
+    }
   },
   "repository": {
     "type": "git",
@@ -50,8 +70,26 @@
     "access": "public",
     "registry": "https://registry.npmjs.org"
   },
+  "engines": {
+    "node": "^20.19.0 || >=22.12.0"
+  },
+  "zhin": {
+    "protocol": 1,
+    "type": "plugin",
+    "entry": "./plugin.js",
+    "engine": "^1.0.0",
+    "runtime": "trusted",
+    "features": [
+      {
+        "package": "@zhin.js/command",
+        "api": "^1.0.0"
+      }
+    ],
+    "plugins": []
+  },
   "scripts": {
-    "build": "tsc --build",
-    "clean": "rimraf lib"
+    "build": "tsc",
+    "clean": "rimraf lib",
+    "test": "NODE_OPTIONS=--experimental-strip-types vitest run --root ../../.. plugins/utils/code-runner/tests"
   }
 }

package/plugin.js

@@ -0,0 +1,8 @@
+// Generated by build-plugin-runtime-entries.mjs. Do not edit.
+import { definePlugin } from 'zhin.js';
+export default definePlugin({
+    name: 'code-runner',
+    metadata: {
+        displayName: 'Code Runner',
+    },
+});

package/schema.json

@@ -0,0 +1,6 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "type": "object",
+  "additionalProperties": false,
+  "properties": {}
+}

package/src/index.ts

@@ -1,133 +1 @@
-/**
- * @zhin.js/plugin-code-runner
- *
- * 沙箱代码执行插件 —— 通过 glot.io API 安全运行代码片段
- *
- * 功能：
- *   - AI 工具 run_code：AI 可调用执行代码
- *   - 命令「运行 <language> <code>」：用户直接运行代码
- *
- * 安全：
- *   - 代码长度上限 10000 字符
- *   - 语言白名单校验
- *   - 不执行本地代码，全部通过 glot.io 远程沙箱
- */
-import { formatCompact, MessageCommand, usePlugin, ZhinTool } from 'zhin.js'
-
-const { addCommand, addTool, logger } = usePlugin()
-
-// ─── 常量 ────────────────────────────────────────────────────────────────────
-
-const MAX_CODE_LENGTH = 10000
-
-const SUPPORTED_LANGUAGES: Record<string, string> = {
-  python: 'main.py',
-  javascript: 'main.js',
-  typescript: 'main.ts',
-  go: 'main.go',
-  rust: 'main.rs',
-  java: 'Main.java',
-  c: 'main.c',
-  cpp: 'main.cpp',
-  ruby: 'main.rb',
-  php: 'main.php',
-}
-
-const GLOT_API_BASE = 'https://glot.io/api/run'
-
-// ─── 核心执行函数 ────────────────────────────────────────────────────────────
-
-interface RunResult {
-  stdout: string
-  stderr: string
-  error: string
-}
-
-async function runCode(language: string, code: string): Promise<RunResult> {
-  const lang = language.toLowerCase().trim()
-
-  if (!SUPPORTED_LANGUAGES[lang]) {
-    return {
-      stdout: '',
-      stderr: '',
-      error: `不支持的语言: ${lang}。支持: ${Object.keys(SUPPORTED_LANGUAGES).join(', ')}`,
-    }
-  }
-
-  if (code.length > MAX_CODE_LENGTH) {
-    return {
-      stdout: '',
-      stderr: '',
-      error: `代码长度超过上限 ${MAX_CODE_LENGTH} 字符（当前 ${code.length}）`,
-    }
-  }
-
-  const fileName = SUPPORTED_LANGUAGES[lang]
-  const url = `${GLOT_API_BASE}/${lang}/latest`
-
-  try {
-    const response = await fetch(url, {
-      method: 'POST',
-      headers: { 'Content-Type': 'application/json' },
-      body: JSON.stringify({
-        files: [{ name: fileName, content: code }],
-      }),
-      signal: AbortSignal.timeout(30_000),
-    })
-
-    if (!response.ok) {
-      return {
-        stdout: '',
-        stderr: '',
-        error: `API 请求失败: ${response.status} ${response.statusText}`,
-      }
-    }
-
-    const data = (await response.json()) as RunResult
-    return {
-      stdout: data.stdout || '',
-      stderr: data.stderr || '',
-      error: data.error || '',
-    }
-  } catch (e: any) {
-    const msg = e?.name === 'TimeoutError' ? '请求超时（30s）' : e?.message || '未知错误'
-    return { stdout: '', stderr: '', error: msg }
-  }
-}
-
-function formatResult(result: RunResult): string {
-  const parts: string[] = []
-  if (result.stdout) parts.push(`[stdout]\n${result.stdout}`)
-  if (result.stderr) parts.push(`[stderr]\n${result.stderr}`)
-  if (result.error) parts.push(`[error]\n${result.error}`)
-  return parts.length ? parts.join('\n') : '（无输出）'
-}
-
-// ─── AI Tool: run_code ───────────────────────────────────────────────────────
-
-addTool(
-  new ZhinTool('run_code')
-    .desc('在沙箱中运行代码片段，返回 stdout/stderr/error')
-    .keyword('运行代码', '执行代码', 'run code', 'execute', '代码')
-    .tag('code', 'run', 'execute', 'sandbox')
-    .param('language', { type: 'string', description: '编程语言（python/javascript/typescript/go/rust/java/c/cpp/ruby/php）' }, true)
-    .param('code', { type: 'string', description: '要执行的代码' }, true)
-    .execute(async (args) => {
-      const result = await runCode(args.language, args.code)
-      return formatResult(result)
-    })
-    .toTool(),
-)
-
-// ─── 命令: 运行 ─────────────────────────────────────────────────────────────
-
-addCommand(
-  new MessageCommand('运行 <language:text> <code:text>')
-    .desc('在沙箱中运行代码片段')
-    .action(async (_message, result) => {
-      const { language, code } = result.params as { language: string; code: string }
-      logger.debug(formatCompact( { op: 'run', language, len: code.length }))
-      const res = await runCode(language, code)
-      return formatResult(res)
-    }),
-)
+export { formatResult, runCode } from './run-code.js';

package/src/run-code.ts

@@ -0,0 +1,83 @@
+const MAX_CODE_LENGTH = 10000;
+
+const SUPPORTED_LANGUAGES: Record<string, string> = {
+  python: 'main.py',
+  javascript: 'main.js',
+  typescript: 'main.ts',
+  go: 'main.go',
+  rust: 'main.rs',
+  java: 'Main.java',
+  c: 'main.c',
+  cpp: 'main.cpp',
+  ruby: 'main.rb',
+  php: 'main.php',
+};
+
+const GLOT_API_BASE = 'https://glot.io/api/run';
+
+interface RunResult {
+  stdout: string;
+  stderr: string;
+  error: string;
+}
+
+export async function runCode(language: string, code: string): Promise<RunResult> {
+  const lang = language.toLowerCase().trim();
+
+  if (!SUPPORTED_LANGUAGES[lang]) {
+    return {
+      stdout: '',
+      stderr: '',
+      error: `不支持的语言: ${lang}。支持: ${Object.keys(SUPPORTED_LANGUAGES).join(', ')}`,
+    };
+  }
+
+  if (code.length > MAX_CODE_LENGTH) {
+    return {
+      stdout: '',
+      stderr: '',
+      error: `代码长度超过上限 ${MAX_CODE_LENGTH} 字符（当前 ${code.length}）`,
+    };
+  }
+
+  const fileName = SUPPORTED_LANGUAGES[lang];
+  const url = `${GLOT_API_BASE}/${lang}/latest`;
+
+  try {
+    const response = await fetch(url, {
+      method: 'POST',
+      headers: { 'Content-Type': 'application/json' },
+      body: JSON.stringify({
+        files: [{ name: fileName, content: code }],
+      }),
+      signal: AbortSignal.timeout(30_000),
+    });
+
+    if (!response.ok) {
+      return {
+        stdout: '',
+        stderr: '',
+        error: `API 请求失败: ${response.status} ${response.statusText}`,
+      };
+    }
+
+    const data = (await response.json()) as RunResult;
+    return {
+      stdout: data.stdout || '',
+      stderr: data.stderr || '',
+      error: data.error || '',
+    };
+  } catch (e: unknown) {
+    const err = e as Error;
+    const msg = err.name === 'TimeoutError' ? '请求超时（30s）' : err.message || '未知错误';
+    return { stdout: '', stderr: '', error: msg };
+  }
+}
+
+export function formatResult(result: RunResult): string {
+  const parts: string[] = [];
+  if (result.stdout) parts.push(`[stdout]\n${result.stdout}`);
+  if (result.stderr) parts.push(`[stderr]\n${result.stderr}`);
+  if (result.error) parts.push(`[error]\n${result.error}`);
+  return parts.length ? parts.join('\n') : '（无输出）';
+}