aws-runtime-bridge 1.9.175 → 1.9.180

package/dist/services/terminal-persistence.d.ts

@@ -1,19 +1,48 @@
 
+
+
+
+
 import type { PersistedSession } from '../types.js';
 
+
+
+
+
 export declare function getPersistedSessionsFile(): string;
 
+
+
+
+
 export declare function loadPersistedSessions(): Promise<PersistedSession[]>;
 
+
+
+
+
 export declare function savePersistedSessions(sessions: PersistedSession[]): Promise<void>;
 
+
+
+
+
 export declare function upsertPersistedSession(session: PersistedSession): Promise<void>;
 
+
+
+
+
 export declare function updatePersistedSessionAutoCommands(agentId: string, commands: {
     idleInputAutoCommand: string;
     nonInputAutoCommand: string;
 }): Promise<boolean>;
 
+
+
+
+
+
 export declare function updatePersistedSessionRuntimeState(sessionId: string, runtimeState: {
     runtimeStatus: string;
     runtimeActionType?: string;
@@ -21,8 +50,22 @@ export declare function updatePersistedSessionRuntimeState(sessionId: string, ru
     runtimeActionDetail?: string;
 }): Promise<boolean>;
 
+
+
+
+
 export declare function removePersistedSession(sessionId: string): Promise<void>;
 
+
+
+
+
+
 export declare function findPersistedSessionByAgentId(agentId: string): Promise<PersistedSession | undefined>;
 
+
+
+
+
+
 export declare function removePersistedSessionByAgentId(agentId: string): Promise<void>;

package/dist/services/tool-installer.d.ts

@@ -11,8 +11,12 @@ type ToolCommand = {
 export declare const SUPPORTED_INSTALLABLE_TOOLS: readonly string[];
 export declare const SUPPORTED_UNINSTALLABLE_TOOLS: readonly string[];
 
+
+
 export declare function getToolUninstallCommands(tool: string): string[];
 
+
+
 export declare function getToolCommandSpecs(tool: string, phase: "install" | "uninstall"): Array<{
     command: string;
     args: string[];
@@ -29,11 +33,19 @@ export declare function buildSdkCliInstallStatus(tool: string, sdkResult: {
     error: string | null;
 }, requiresCli: boolean): ToolInstallStatus;
 
+
+
 export declare function detectToolInstallStatus(tool: string): Promise<ToolInstallStatus>;
 
+
+
 export declare function detectToolStatuses(tools: string[]): Promise<Record<string, ToolInstallStatus>>;
 
+
+
 export declare function ensureToolsInstalled(tools: string[]): Promise<Record<string, ToolInstallStatus>>;
 
+
+
 export declare function uninstallTools(tools: string[]): Promise<Record<string, ToolInstallStatus>>;
 export {};

package/dist/services/tunnel-client.d.ts

@@ -1,4 +1,18 @@
 
+
+
+
+
+
+
+
+
+
+
+
+
+
+
 import WebSocket from "ws";
 interface LocalStream {
     ws: WebSocket;
@@ -11,6 +25,13 @@ interface LocalStream {
 interface TunnelState {
     
     serverUrl: string;
+    
+
+
+
+    targetKey: string;
+    
+    userKey?: string;
     instanceId: string;
     ws?: WebSocket;
     
@@ -24,6 +45,10 @@ interface TunnelState {
     shuttingDown: boolean;
 }
 
+
+
+
+
 interface PendingRequestChunks {
     method: string;
     path: string;
@@ -32,13 +57,39 @@ interface PendingRequestChunks {
     timer: NodeJS.Timeout;
 }
 
-export declare function startTunnelClient(serverUrl: string, instanceId: string): void;
+
+
+
+export declare function startTunnelClient(serverUrl: string, instanceId: string, userKey?: string): void;
 
 export declare function stopTunnelClient(): void;
 
+
+
+
+
+export declare function stopTunnelClientForTarget(serverUrl: string, userKey?: string): void;
+
+
+
+
 export declare function stopTunnelClientForServer(serverUrl: string): void;
 
-export declare function stopTunnelClientsExcept(serverUrls: string[]): void;
+
+
+
+
+
+
+export declare function stopTunnelClientsExcept(targetKeys: string[]): void;
+
+
+
+
+
+
+
+
 
 export declare const __tunnelClientTestHooks: {
     createState(serverUrl?: string, instanceId?: string): TunnelState;
@@ -46,6 +97,10 @@ export declare const __tunnelClientTestHooks: {
     
     pendingChunkIds(state: TunnelState): string[];
     
+    activeTargetKeys(): string[];
+    
     cleanup(state: TunnelState): void;
+    
+    teardown(state: TunnelState): void;
 };
 export {};

package/dist/services/tunnel-client.js

@@ -1,2 +1,2 @@
-import O,{AxiosError as x}from"axios";import g from"ws";import{getActiveBridgeHttpPort as R}from"../config.js";import{logger as s}from"../utils/logger.js";import{loadConfigs as L,loadPrimaryLifecycleConfig as P}from"./auto-register.js";import{getRuntimeAccessToken as W,normalizeSchedulerBaseUrl as C}from"./runtime-binding.js";const $=15e3,G=5e3,H=3e4,A=.2,J=200,K=1*1024*1024,X=4001,Y=768*1024,j=384*1024,z=5*6e4,p=new Map;function F(e){const n=e.serverUrl,r=e.instanceId;if(!n||!r)return null;try{const t=new URL(n),o=t.protocol==="https:"?"wss:":"ws:",u=W(n),l=L().find(h=>C(h.serverUrl)===n)||P(),i=u||l.userKey;if(u?s.debug("[TunnelClient] \u4F7F\u7528 runtime access token \u8FDE\u63A5\u96A7\u9053"):l.userKey&&s.warn("[TunnelClient] getRuntimeAccessToken \u8FD4\u56DE\u7A7A\uFF0C\u56DE\u9000\u5230 userKey\uFF08\u975E runtime token\uFF0C\u9274\u6743\u53EF\u80FD\u5931\u8D25\uFF09: targetUrl=",n),!i)return s.warn("[TunnelClient] \u7F3A\u5C11 runtime token\uFF0C\u65E0\u6CD5\u5EFA\u7ACB\u96A7\u9053: targetUrl=",n),null;const f=new URLSearchParams({instanceId:r});return{url:`${o}//${t.host}/ws/bridge-tunnel?${f.toString()}`,token:i}}catch(t){return s.warn("[TunnelClient] \u65E0\u6CD5\u89E3\u6790 serverUrl:",String(t)),null}}function le(e,n){const r=C(e);if(!r){s.warn("[TunnelClient] serverUrl \u65E0\u6548\uFF0C\u65E0\u6CD5\u542F\u52A8\u96A7\u9053:",e);return}const t=p.get(r);t&&(t.shuttingDown=!0,S(t),p.delete(r));const o={serverUrl:r,instanceId:n,streams:new Map,pendingReqChunks:new Map,shuttingDown:!1};p.set(r,o),B(o)}function de(){for(const e of p.values())e.shuttingDown=!0,S(e);p.clear()}function fe(e){const n=C(e);if(!n)return;const r=p.get(n);r&&(r.shuttingDown=!0,S(r),p.delete(n),s.info(`[TunnelClient] tunnel stopped: ${n}`))}function ae(e){const n=new Set(e.map(r=>C(r)).filter(r=>!!r));for(const[r,t]of p.entries())n.has(r)||(s.info(`[TunnelClient] serverUrl \u5DF2\u4E0D\u5728\u914D\u7F6E\u4E2D\uFF0C\u505C\u6B62\u65E7\u96A7\u9053: ${r}`),t.shuttingDown=!0,S(t),p.delete(r))}function S(e){e.timer&&(clearInterval(e.timer),e.timer=void 0),e.reconnectTimer&&(clearTimeout(e.reconnectTimer),e.reconnectTimer=void 0);for(const[n,r]of e.streams.entries()){try{r.ws.close(1e3,"tunnel client stopped")}catch{}e.streams.delete(n)}if(e.ws){e.ws.removeAllListeners();try{e.ws.close(1e3,"tunnel client stopped")}catch{}e.ws=void 0}}function B(e){if(e.shuttingDown)return;const n=e.instanceId;if(!n)return;const r=F(e);if(!r){b(e);return}s.info("[TunnelClient] \u8FDE\u63A5\u96A7\u9053\u670D\u52A1\u7AEF:",r.url);const t=new g(r.url,{handshakeTimeout:15e3,headers:{"X-Runtime-Token":r.token}});e.ws=t,t.on("open",()=>{s.info("[TunnelClient] \u96A7\u9053\u8FDE\u63A5\u5DF2\u5EFA\u7ACB: server=",e.serverUrl,"instanceId=",n),e.reconnectTimer&&clearTimeout(e.reconnectTimer),e.reconnectTimer=void 0,e.reconnectAttempts=0,e.timer=setInterval(()=>{t.readyState===g.OPEN&&t.send(JSON.stringify({t:"ping"}))},$)}),t.on("unexpected-response",(o,u)=>{s.error("[TunnelClient] \u670D\u52A1\u7AEF\u62D2\u7EDD\u8FDE\u63A5\uFF08\u975E 101 \u54CD\u5E94\uFF09: server=",e.serverUrl,"statusCode=",u.statusCode,"statusMessage=",u.statusMessage)}),t.on("upgrade",o=>{s.debug("[TunnelClient] \u6536\u5230\u5347\u7EA7\u54CD\u5E94: statusCode=",o.statusCode)}),t.on("message",o=>{let u;typeof o=="string"?u=o:Buffer.isBuffer(o)?u=o.toString("utf-8"):u=Buffer.from(o).toString("utf-8");try{const l=JSON.parse(u);M(e,l)}catch(l){s.warn("[TunnelClient] \u89E3\u6790\u96A7\u9053\u6D88\u606F\u5931\u8D25:",String(l))}}),t.on("close",(o,u)=>{if(s.warn("[TunnelClient] \u96A7\u9053\u8FDE\u63A5\u5173\u95ED: server=",e.serverUrl,"code=",o,"reason=",String(u)),k(e),o===X){s.warn("[TunnelClient] \u9274\u6743\u5931\u8D25\uFF084001\uFF09\uFF0C\u505C\u6B62\u81EA\u52A8\u91CD\u8FDE\uFF1B\u5F85\u91CD\u65B0\u6CE8\u518C\u540E\u518D\u542F\u52A8\u96A7\u9053: server=",e.serverUrl);return}b(e)}),t.on("error",o=>{s.warn("[TunnelClient] \u96A7\u9053\u8FDE\u63A5\u9519\u8BEF: server=",e.serverUrl,"err=",o.message,"code=",o.code),k(e),b(e)})}function k(e){e.timer&&(clearInterval(e.timer),e.timer=void 0);for(const[n,r]of e.streams.entries()){try{r.ws.close(1011,"tunnel disconnected")}catch{}e.streams.delete(n)}for(const n of Array.from(e.pendingReqChunks.keys()))E(e,n);e.ws=void 0}function b(e){if(e.shuttingDown||e.reconnectTimer)return;const n=(e.reconnectAttempts??0)+1;e.reconnectAttempts=n;const r=Math.min(G*Math.pow(2,n-1),H),t=1-A+Math.random()*A*2,o=Math.round(r*t);s.debug("[TunnelClient] \u8BA1\u5212\u91CD\u8FDE: server=",e.serverUrl,"attempt=",n,"delayMs=",o),e.reconnectTimer=setTimeout(()=>{e.reconnectTimer=void 0,B(e)},o)}function M(e,n){switch(n.t){case"req":n.chunked?V(e,n):U(e,n);break;case"reqchunk":Q(e,n);break;case"reqend":Z(e,n);break;case"wsopen":ee(e,n);break;case"wsmsg":ne(e,n);break;case"wsclose":re(e,n);break;case"ping":d(e,{t:"pong"});break;case"pong":break;default:s.debug("[TunnelClient] \u672A\u77E5\u6D88\u606F\u7C7B\u578B: t=",n.t)}}function V(e,n){E(e,n.id);const r=setTimeout(()=>{s.warn("[TunnelClient] \u8BF7\u6C42\u4F53\u62C6\u5E27\u8D85\u65F6\uFF0C\u4E22\u5F03\u534A\u5305:",n.id),e.pendingReqChunks.delete(n.id)},z);r.unref?.(),e.pendingReqChunks.set(n.id,{method:n.method||"GET",path:n.path||"/",headers:n.headers,parts:[],timer:r})}function Q(e,n){const r=e.pendingReqChunks.get(n.id);if(!r){s.debug("[TunnelClient] \u6536\u5230\u65E0\u4E3B reqchunk\uFF0C\u5DF2\u5FFD\u7565:",n.id);return}n.d&&r.parts.push(Buffer.from(n.d,"base64"))}async function Z(e,n){const r=e.pendingReqChunks.get(n.id);if(!r){s.debug("[TunnelClient] \u6536\u5230\u65E0\u4E3B reqend\uFF0C\u5DF2\u5FFD\u7565:",n.id);return}E(e,n.id);const t=Buffer.concat(r.parts);await U(e,{t:"req",id:n.id,method:r.method,path:r.path,headers:r.headers,body:t.length>0?t.toString("base64"):null})}function E(e,n){const r=e.pendingReqChunks.get(n);r&&(clearTimeout(r.timer),e.pendingReqChunks.delete(n))}async function U(e,n){const r=n.id,t=n.method||"GET",o=n.path||"/",u=`http://127.0.0.1:${R()}${o}`;try{const l=n.body?Buffer.from(n.body,"base64"):void 0,i={};if(n.headers)for(const[a,c]of Object.entries(n.headers))c&&c.length>0&&(i[a]=c[0]);i["x-bridge-tunnel-source"]=e.serverUrl;const f=await O.request({url:u,method:t,headers:i,data:l,timeout:0,responseType:"stream",validateStatus:()=>!0}),h={};for(const[a,c]of Object.entries(f.headers))c!==void 0&&(h[a]=Array.isArray(c)?c:[String(c)]);const v=f.data,I=String(h["content-type"]?.[0]||"").toLowerCase().includes("text/event-stream"),m=[];let w=0,T=!1,y=!1;try{if(v)for await(const a of v){const c=Buffer.isBuffer(a)?a:Buffer.from(a);if(c.length!==0){if(T){if(!_(e,r,c))return}else if(I){if(T=!0,y=!0,!d(e,{t:"res",id:r,status:f.status,headers:h,body:null,chunked:!0})||!_(e,r,c))return}else if(m.push(c),w+=c.length,w>Y){if(T=!0,y=!0,!d(e,{t:"res",id:r,status:f.status,headers:h,body:null,chunked:!0}))return;for(const D of m)if(!_(e,r,D))return;m.length=0,w=0}}}}catch(a){const c=a instanceof Error?a.message:String(a);s.warn("[TunnelClient] \u672C\u5730\u6D41\u8BFB\u53D6\u4E2D\u65AD:",t,o,"->",c),y?d(e,{t:"resend",id:r,error:c}):d(e,{t:"res",id:r,status:502,headers:{"content-type":["text/plain; charset=utf-8"]},body:Buffer.from(c).toString("base64")});return}if(T){d(e,{t:"resend",id:r});return}const N=w>0?Buffer.concat(m).toString("base64"):"";d(e,{t:"res",id:r,status:f.status,headers:h,body:N||null})}catch(l){const i=l instanceof x?l.message:String(l);s.warn("[TunnelClient] \u672C\u5730\u8F6C\u53D1\u5931\u8D25:",t,o,"->",i),d(e,{t:"res",id:r,status:502,headers:{"content-type":["text/plain; charset=utf-8"]},body:Buffer.from(i).toString("base64")})}}function _(e,n,r){let t=0;for(;t<r.length;){const o=r.subarray(t,t+j);if(!d(e,{t:"reschunk",id:n,d:o.toString("base64")}))return!1;t+=o.length}return!0}function ee(e,n){const r=n.id,t=n.path||"/",o=`ws://127.0.0.1:${R()}${t}`;let u;try{u=new g(o,{handshakeTimeout:1e4})}catch(i){s.warn("[TunnelClient] \u672C\u5730 WS \u8FDE\u63A5\u5931\u8D25:",String(i)),d(e,{t:"wsclose",id:r,code:1011,reason:"local ws connect failed"});return}const l={ws:u,pending:[]};e.streams.set(r,l),u.on("open",()=>{for(const i of l.pending)q(l,i.data,i.bin);l.pending=[],d(e,{t:"wsopened",id:r})}),u.on("message",(i,f)=>{const h=Buffer.isBuffer(i)?i:Buffer.from(i);f&&e.ws&&e.ws.bufferedAmount>K||d(e,{t:"wsmsg",id:r,bin:f,d:h.toString("base64")})}),u.on("close",(i,f)=>{e.streams.delete(r),d(e,{t:"wsclose",id:r,code:i,reason:String(f)})}),u.on("error",i=>{s.warn("[TunnelClient] \u672C\u5730 WS \u9519\u8BEF: id=",r,"err=",i.message),e.streams.delete(r);try{u.close(1011,i.message)}catch{}d(e,{t:"wsclose",id:r,code:1011,reason:i.message})})}function q(e,n,r){r?e.ws.send(n):e.ws.send(n.toString("utf-8"))}function ne(e,n){const r=e.streams.get(n.id);if(!r)return;const t=n.d?Buffer.from(n.d,"base64"):Buffer.alloc(0);if(r.ws.readyState!==g.OPEN){r.pending.length>=J&&(r.pending.shift(),s.warn("[TunnelClient] \u672C\u5730 WS \u672A\u5C31\u7EEA\uFF0C\u6392\u961F\u6D88\u606F\u8D85\u4E0A\u9650\uFF0C\u4E22\u5F03\u6700\u65E7\u4E00\u6761: id=",n.id)),r.pending.push({data:t,bin:!!n.bin});return}q(r,t,!!n.bin)}function re(e,n){const r=e.streams.get(n.id);if(r){e.streams.delete(n.id);try{r.ws.close(n.code??1e3,n.reason||"")}catch{}}}function d(e,n){if(!e.ws||e.ws.readyState!==g.OPEN)return!1;try{return e.ws.send(JSON.stringify(n)),!0}catch(r){return s.warn("[TunnelClient] sendJson \u5931\u8D25:",String(r)),!1}}const he={createState(e="http://server.test",n="test-instance"){return{serverUrl:e,instanceId:n,streams:new Map,pendingReqChunks:new Map,shuttingDown:!1}},dispatch(e,n){M(e,n)},pendingChunkIds(e){return Array.from(e.pendingReqChunks.keys())},cleanup(e){k(e)}};export{he as __tunnelClientTestHooks,le as startTunnelClient,de as stopTunnelClient,fe as stopTunnelClientForServer,ae as stopTunnelClientsExcept};
+import O,{AxiosError as L}from"axios";import m from"ws";import{getActiveBridgeHttpPort as v}from"../config.js";import{logger as i}from"../utils/logger.js";import{buildTargetKey as S}from"../utils/target-identity.js";import{getRuntimeAccessToken as W,normalizeSchedulerBaseUrl as A}from"./runtime-binding.js";const P=15e3,$=5e3,K=3e4,B=.2,G=200,H=1*1024*1024,J=4001,F=768*1024,X=384*1024,Y=5*6e4,f=new Map;function j(e){const n=e.serverUrl,t=e.instanceId;if(!n||!t)return null;try{const r=new URL(n),o=r.protocol==="https:"?"wss:":"ws:",s=W(n,e.userKey);if(!s)return i.warn("[TunnelClient] \u7F3A\u5C11\u8BE5\u76EE\u6807\u8EAB\u4EFD\u7684 runtime token\uFF0C\u65E0\u6CD5\u5EFA\u7ACB\u96A7\u9053\uFF08\u8BF7\u91CD\u65B0\u6CE8\u518C bridge\uFF09: targetUrl=",n),null;i.debug("[TunnelClient] \u4F7F\u7528 runtime access token \u8FDE\u63A5\u96A7\u9053");const c=new URLSearchParams({instanceId:t});return{url:`${o}//${r.host}/ws/bridge-tunnel?${c.toString()}`,token:s}}catch(r){return i.warn("[TunnelClient] \u65E0\u6CD5\u89E3\u6790 serverUrl:",String(r)),null}}function ce(e,n,t){const r=A(e);if(!r){i.warn("[TunnelClient] serverUrl \u65E0\u6548\uFF0C\u65E0\u6CD5\u542F\u52A8\u96A7\u9053:",e);return}const o=S(r,t),s=f.get(o);s&&(s.shuttingDown=!0,g(s),f.delete(o));const c={serverUrl:r,targetKey:o,userKey:String(t||"").trim()||void 0,instanceId:n,streams:new Map,pendingReqChunks:new Map,shuttingDown:!1};f.set(o,c),M(c)}function le(){for(const e of f.values())e.shuttingDown=!0,g(e);f.clear()}function de(e,n){const t=S(e,n),r=f.get(t);r&&(r.shuttingDown=!0,g(r),f.delete(t),i.info(`[TunnelClient] tunnel stopped: ${t}`))}function fe(e){const n=A(e);if(!n)return;const t=`${n}#`;for(const[r,o]of[...f.entries()])r!==n&&!r.startsWith(t)||(o.shuttingDown=!0,g(o),f.delete(r),i.info(`[TunnelClient] tunnel stopped: ${r}`))}function ae(e){const n=new Set(e.map(t=>String(t||"").trim()).filter(t=>!!t));for(const[t,r]of f.entries())n.has(t)||(i.info(`[TunnelClient] \u76EE\u6807\u5DF2\u4E0D\u5728\u914D\u7F6E\u4E2D\uFF0C\u505C\u6B62\u65E7\u96A7\u9053: ${t}`),r.shuttingDown=!0,g(r),f.delete(t))}function g(e){e.timer&&(clearInterval(e.timer),e.timer=void 0),e.reconnectTimer&&(clearTimeout(e.reconnectTimer),e.reconnectTimer=void 0);for(const[n,t]of e.streams.entries()){try{t.ws.close(1e3,"tunnel client stopped")}catch{}e.streams.delete(n)}if(e.ws){const n=e.ws;e.ws=void 0,n.removeAllListeners(),n.on("error",()=>{});try{n.close(1e3,"tunnel client stopped")}catch{}}}function M(e){if(e.shuttingDown)return;const n=e.instanceId;if(!n)return;const t=j(e);if(!t){k(e);return}i.info("[TunnelClient] \u8FDE\u63A5\u96A7\u9053\u670D\u52A1\u7AEF:",t.url);const r=new m(t.url,{handshakeTimeout:15e3,headers:{"X-Runtime-Token":t.token}});e.ws=r,r.on("open",()=>{i.info("[TunnelClient] \u96A7\u9053\u8FDE\u63A5\u5DF2\u5EFA\u7ACB: server=",e.serverUrl,"instanceId=",n),e.reconnectTimer&&clearTimeout(e.reconnectTimer),e.reconnectTimer=void 0,e.reconnectAttempts=0,e.timer=setInterval(()=>{r.readyState===m.OPEN&&r.send(JSON.stringify({t:"ping"}))},P)}),r.on("unexpected-response",(o,s)=>{i.error("[TunnelClient] \u670D\u52A1\u7AEF\u62D2\u7EDD\u8FDE\u63A5\uFF08\u975E 101 \u54CD\u5E94\uFF09: server=",e.serverUrl,"statusCode=",s.statusCode,"statusMessage=",s.statusMessage)}),r.on("upgrade",o=>{i.debug("[TunnelClient] \u6536\u5230\u5347\u7EA7\u54CD\u5E94: statusCode=",o.statusCode)}),r.on("message",o=>{let s;typeof o=="string"?s=o:Buffer.isBuffer(o)?s=o.toString("utf-8"):s=Buffer.from(o).toString("utf-8");try{const c=JSON.parse(s);q(e,c)}catch(c){i.warn("[TunnelClient] \u89E3\u6790\u96A7\u9053\u6D88\u606F\u5931\u8D25:",String(c))}}),r.on("close",(o,s)=>{if(i.warn("[TunnelClient] \u96A7\u9053\u8FDE\u63A5\u5173\u95ED: server=",e.serverUrl,"code=",o,"reason=",String(s)),b(e),o===J){i.warn("[TunnelClient] \u9274\u6743\u5931\u8D25\uFF084001\uFF09\uFF0C\u505C\u6B62\u81EA\u52A8\u91CD\u8FDE\uFF1B\u5F85\u91CD\u65B0\u6CE8\u518C\u540E\u518D\u542F\u52A8\u96A7\u9053: server=",e.serverUrl);return}k(e)}),r.on("error",o=>{i.warn("[TunnelClient] \u96A7\u9053\u8FDE\u63A5\u9519\u8BEF: server=",e.serverUrl,"err=",o.message,"code=",o.code),b(e),k(e)})}function b(e){e.timer&&(clearInterval(e.timer),e.timer=void 0);for(const[n,t]of e.streams.entries()){try{t.ws.close(1011,"tunnel disconnected")}catch{}e.streams.delete(n)}for(const n of Array.from(e.pendingReqChunks.keys()))E(e,n);e.ws=void 0}function k(e){if(e.shuttingDown||e.reconnectTimer)return;const n=(e.reconnectAttempts??0)+1;e.reconnectAttempts=n;const t=Math.min($*Math.pow(2,n-1),K),r=1-B+Math.random()*B*2,o=Math.round(t*r);i.debug("[TunnelClient] \u8BA1\u5212\u91CD\u8FDE: server=",e.serverUrl,"attempt=",n,"delayMs=",o),e.reconnectTimer=setTimeout(()=>{e.reconnectTimer=void 0,M(e)},o)}function q(e,n){switch(n.t){case"req":n.chunked?z(e,n):I(e,n);break;case"reqchunk":V(e,n);break;case"reqend":Q(e,n);break;case"wsopen":Z(e,n);break;case"wsmsg":ee(e,n);break;case"wsclose":ne(e,n);break;case"ping":d(e,{t:"pong"});break;case"pong":break;default:i.debug("[TunnelClient] \u672A\u77E5\u6D88\u606F\u7C7B\u578B: t=",n.t)}}function z(e,n){E(e,n.id);const t=setTimeout(()=>{i.warn("[TunnelClient] \u8BF7\u6C42\u4F53\u62C6\u5E27\u8D85\u65F6\uFF0C\u4E22\u5F03\u534A\u5305:",n.id),e.pendingReqChunks.delete(n.id)},Y);t.unref?.(),e.pendingReqChunks.set(n.id,{method:n.method||"GET",path:n.path||"/",headers:n.headers,parts:[],timer:t})}function V(e,n){const t=e.pendingReqChunks.get(n.id);if(!t){i.debug("[TunnelClient] \u6536\u5230\u65E0\u4E3B reqchunk\uFF0C\u5DF2\u5FFD\u7565:",n.id);return}n.d&&t.parts.push(Buffer.from(n.d,"base64"))}async function Q(e,n){const t=e.pendingReqChunks.get(n.id);if(!t){i.debug("[TunnelClient] \u6536\u5230\u65E0\u4E3B reqend\uFF0C\u5DF2\u5FFD\u7565:",n.id);return}E(e,n.id);const r=Buffer.concat(t.parts);await I(e,{t:"req",id:n.id,method:t.method,path:t.path,headers:t.headers,body:r.length>0?r.toString("base64"):null})}function E(e,n){const t=e.pendingReqChunks.get(n);t&&(clearTimeout(t.timer),e.pendingReqChunks.delete(n))}async function I(e,n){const t=n.id,r=n.method||"GET",o=n.path||"/",s=`http://127.0.0.1:${v()}${o}`;try{const c=n.body?Buffer.from(n.body,"base64"):void 0,u={};if(n.headers)for(const[a,l]of Object.entries(n.headers))l&&l.length>0&&(u[a]=l[0]);u["x-bridge-tunnel-source"]=e.serverUrl;const h=await O.request({url:s,method:r,headers:u,data:c,timeout:0,responseType:"stream",validateStatus:()=>!0}),p={};for(const[a,l]of Object.entries(h.headers))l!==void 0&&(p[a]=Array.isArray(l)?l:[String(l)]);const R=h.data,U=String(p["content-type"]?.[0]||"").toLowerCase().includes("text/event-stream"),T=[];let w=0,C=!1,y=!1;try{if(R)for await(const a of R){const l=Buffer.isBuffer(a)?a:Buffer.from(a);if(l.length!==0){if(C){if(!_(e,t,l))return}else if(U){if(C=!0,y=!0,!d(e,{t:"res",id:t,status:h.status,headers:p,body:null,chunked:!0})||!_(e,t,l))return}else if(T.push(l),w+=l.length,w>F){if(C=!0,y=!0,!d(e,{t:"res",id:t,status:h.status,headers:p,body:null,chunked:!0}))return;for(const x of T)if(!_(e,t,x))return;T.length=0,w=0}}}}catch(a){const l=a instanceof Error?a.message:String(a);i.warn("[TunnelClient] \u672C\u5730\u6D41\u8BFB\u53D6\u4E2D\u65AD:",r,o,"->",l),y?d(e,{t:"resend",id:t,error:l}):d(e,{t:"res",id:t,status:502,headers:{"content-type":["text/plain; charset=utf-8"]},body:Buffer.from(l).toString("base64")});return}if(C){d(e,{t:"resend",id:t});return}const D=w>0?Buffer.concat(T).toString("base64"):"";d(e,{t:"res",id:t,status:h.status,headers:p,body:D||null})}catch(c){const u=c instanceof L?c.message:String(c);i.warn("[TunnelClient] \u672C\u5730\u8F6C\u53D1\u5931\u8D25:",r,o,"->",u),d(e,{t:"res",id:t,status:502,headers:{"content-type":["text/plain; charset=utf-8"]},body:Buffer.from(u).toString("base64")})}}function _(e,n,t){let r=0;for(;r<t.length;){const o=t.subarray(r,r+X);if(!d(e,{t:"reschunk",id:n,d:o.toString("base64")}))return!1;r+=o.length}return!0}function Z(e,n){const t=n.id,r=n.path||"/",o=`ws://127.0.0.1:${v()}${r}`;let s;try{s=new m(o,{handshakeTimeout:1e4})}catch(u){i.warn("[TunnelClient] \u672C\u5730 WS \u8FDE\u63A5\u5931\u8D25:",String(u)),d(e,{t:"wsclose",id:t,code:1011,reason:"local ws connect failed"});return}const c={ws:s,pending:[]};e.streams.set(t,c),s.on("open",()=>{for(const u of c.pending)N(c,u.data,u.bin);c.pending=[],d(e,{t:"wsopened",id:t})}),s.on("message",(u,h)=>{const p=Buffer.isBuffer(u)?u:Buffer.from(u);h&&e.ws&&e.ws.bufferedAmount>H||d(e,{t:"wsmsg",id:t,bin:h,d:p.toString("base64")})}),s.on("close",(u,h)=>{e.streams.delete(t),d(e,{t:"wsclose",id:t,code:u,reason:String(h)})}),s.on("error",u=>{i.warn("[TunnelClient] \u672C\u5730 WS \u9519\u8BEF: id=",t,"err=",u.message),e.streams.delete(t);try{s.close(1011,u.message)}catch{}d(e,{t:"wsclose",id:t,code:1011,reason:u.message})})}function N(e,n,t){t?e.ws.send(n):e.ws.send(n.toString("utf-8"))}function ee(e,n){const t=e.streams.get(n.id);if(!t)return;const r=n.d?Buffer.from(n.d,"base64"):Buffer.alloc(0);if(t.ws.readyState!==m.OPEN){t.pending.length>=G&&(t.pending.shift(),i.warn("[TunnelClient] \u672C\u5730 WS \u672A\u5C31\u7EEA\uFF0C\u6392\u961F\u6D88\u606F\u8D85\u4E0A\u9650\uFF0C\u4E22\u5F03\u6700\u65E7\u4E00\u6761: id=",n.id)),t.pending.push({data:r,bin:!!n.bin});return}N(t,r,!!n.bin)}function ne(e,n){const t=e.streams.get(n.id);if(t){e.streams.delete(n.id);try{t.ws.close(n.code??1e3,n.reason||"")}catch{}}}function d(e,n){if(!e.ws||e.ws.readyState!==m.OPEN)return!1;try{return e.ws.send(JSON.stringify(n)),!0}catch(t){return i.warn("[TunnelClient] sendJson \u5931\u8D25:",String(t)),!1}}const he={createState(e="http://server.test",n="test-instance"){return{serverUrl:e,targetKey:S(e,void 0),instanceId:n,streams:new Map,pendingReqChunks:new Map,shuttingDown:!1}},dispatch(e,n){q(e,n)},pendingChunkIds(e){return Array.from(e.pendingReqChunks.keys())},activeTargetKeys(){return[...f.keys()]},cleanup(e){b(e)},teardown(e){g(e)}};export{he as __tunnelClientTestHooks,ce as startTunnelClient,le as stopTunnelClient,fe as stopTunnelClientForServer,de as stopTunnelClientForTarget,ae as stopTunnelClientsExcept};
 

package/dist/services/update-log.d.ts

@@ -1,8 +1,14 @@
 
 export declare function getUpdateLogPath(): Promise<string>;
 
+
+
+
 export declare function appendUpdateLog(text: string): Promise<string>;
 
+
+
+
 export declare function readUpdateLog(): Promise<{
     path: string;
     content: string;

package/dist/services/update-notifier.d.ts

@@ -1,7 +1,24 @@
 
 
+
+
+
+
+
+
+
+
+
+
+
+
 export declare function runUpdateCheck(): Promise<boolean>;
 
+
+
+
+
+
 export declare function startUpdateNotifier(): void;
 
 export declare function stopUpdateNotifier(): void;

package/dist/services/update-notifier.js

@@ -1,3 +1,3 @@
-import f from"node:fs/promises";import g from"node:path";import E from"axios";import{getRuntimeHomeDir as w}from"../config.js";import{createLogger as A}from"../utils/logger.js";import{checkBridgeUpdate as S}from"../utils/npm-version.js";import{loadConfigs as U,resolveRuntimeBridgeBaseUrl as $}from"./auto-register.js";import{getRuntimeAccessToken as D}from"./runtime-binding.js";import{appendUpdateLog as N}from"./update-log.js";const r=A("update-notifier"),h=6*60*60*1e3,y=3e4,T="\u5F53\u524D\u5BA2\u6237\u7AEFbridge\u53EF\u66F4\u65B0\uFF0C\u8BF7\u53CA\u65F6\u66F4\u65B0~";function v(){return g.join(w(),".aws-bridge","update-notify-state.json")}async function b(){try{const e=await f.readFile(v(),"utf8"),n=JSON.parse(e);return{latestVersion:n.latestVersion,notifiedAt:n.notifiedAt}}catch{return{}}}async function B(e){const n=v();await f.mkdir(g.dirname(n),{recursive:!0}),await f.writeFile(n,`${JSON.stringify(e,null,2)}
-`,{encoding:"utf8",mode:384})}async function I(){const e=await S();if(!e.ok||!e.hasUpdate||!e.latestVersion||(await b()).latestVersion===e.latestVersion)return!1;const a=U().filter(t=>t.enabled&&!!t.serverUrl);if(a.length===0)return r.info(`[update-notifier] \u68C0\u6D4B\u5230\u65B0\u7248\u672C v${e.latestVersion}\uFF08\u5F53\u524D v${e.currentVersion}\uFF09\uFF0C\u4F46\u672A\u914D\u7F6E\u4EFB\u4F55\u8C03\u5EA6\u4E2D\u5FC3\uFF0C\u8DF3\u8FC7\u901A\u77E5`),!1;const i=e.currentVersion,l=e.latestVersion,d=a[0]?.instanceName||"",u={eventType:"update-available",bridgeInstanceId:a[0]?.instanceId||"",bridgeInstanceName:d,currentVersion:i,latestVersion:l,message:T},c=await Promise.allSettled(a.map(async t=>{const o=String(t.serverUrl).replace(/\/+$/,""),p=D(o);if(!p)throw r.warn(`[update-notifier] \u8DF3\u8FC7 ${o}\uFF1A\u7F3A\u5C11 runtime access token\uFF08\u672A\u6CE8\u518C\uFF09`),new Error("\u7F3A\u5C11 runtime access token\uFF08\u672A\u6CE8\u518C\uFF09");const _=$(t);await E.post(`${o}/api/runtime/callback/bridge-update-notify`,{...u,bridgeInstanceId:t.instanceId||u.bridgeInstanceId,bridgeInstanceName:t.instanceName||d,runtimeBridgeBaseUrl:_},{headers:{"X-Runtime-Token":p},timeout:1e4})})),m=c.some(t=>t.status==="fulfilled");if(m)await B({latestVersion:l,notifiedAt:new Date().toISOString()}),r.info(`[update-notifier] \u5DF2\u901A\u77E5 ${c.filter(t=>t.status==="fulfilled").length}/${c.length} \u4E2A\u8C03\u5EA6\u4E2D\u5FC3\uFF1Av${i} -> v${l}`),N(`\u68C0\u6D4B\u5230\u65B0\u7248\u672C v${l}\uFF08\u5F53\u524D v${i}\uFF09\uFF0C\u5DF2\u53D1\u9001\u53EF\u66F4\u65B0\u901A\u77E5`).catch(()=>{});else{r.warn(`[update-notifier] \u5411 ${c.length} \u4E2A\u8C03\u5EA6\u4E2D\u5FC3\u53D1\u9001\u66F4\u65B0\u901A\u77E5\u5747\u5931\u8D25\uFF0C\u5C06\u5728\u4E0B\u4E2A\u5468\u671F\u91CD\u8BD5`);for(const[t,o]of c.entries())o.status==="rejected"&&r.warn(`[update-notifier] \u901A\u77E5\u5931\u8D25: ${a[t]?.serverUrl}, ${o.reason?.message}`)}return m}let s=null;function M(){if(process.env.AWS_BRIDGE_UPDATE_CHECK_DISABLED==="true"){r.info("[update-notifier] \u7248\u672C\u68C0\u67E5\u5DF2\u901A\u8FC7 AWS_BRIDGE_UPDATE_CHECK_DISABLED \u5173\u95ED");return}if(s)return;const e=Number(process.env.AWS_BRIDGE_UPDATE_CHECK_INTERVAL_HOURS),n=Number.isFinite(e)&&e>0?e*60*60*1e3:h;setTimeout(()=>{I().catch(i=>{r.warn(`[update-notifier] \u68C0\u67E5\u5F02\u5E38: ${i?.message}`)})},y).unref?.(),s=setInterval(()=>{I().catch(i=>{r.warn(`[update-notifier] \u68C0\u67E5\u5F02\u5E38: ${i?.message}`)})},n),s.unref?.(),r.info(`[update-notifier] \u7248\u672C\u68C0\u67E5\u5B9A\u65F6\u4EFB\u52A1\u5DF2\u542F\u52A8\uFF0C\u95F4\u9694 ${Math.round(n/36e5)} \u5C0F\u65F6`)}function O(){s&&(clearInterval(s),s=null)}export{I as runUpdateCheck,M as startUpdateNotifier,O as stopUpdateNotifier};
+import d from"node:fs/promises";import g from"node:path";import E from"axios";import{getRuntimeHomeDir as w}from"../config.js";import{createLogger as A}from"../utils/logger.js";import{checkBridgeUpdate as S}from"../utils/npm-version.js";import{loadConfigs as U,resolveRuntimeBridgeBaseUrl as $}from"./auto-register.js";import{getRuntimeAccessToken as D}from"./runtime-binding.js";import{appendUpdateLog as N}from"./update-log.js";const r=A("update-notifier"),h=6*60*60*1e3,y=3e4,T="\u5F53\u524D\u5BA2\u6237\u7AEFbridge\u53EF\u66F4\u65B0\uFF0C\u8BF7\u53CA\u65F6\u66F4\u65B0~";function v(){return g.join(w(),".aws-bridge","update-notify-state.json")}async function b(){try{const e=await d.readFile(v(),"utf8"),n=JSON.parse(e);return{latestVersion:n.latestVersion,notifiedAt:n.notifiedAt}}catch{return{}}}async function B(e){const n=v();await d.mkdir(g.dirname(n),{recursive:!0}),await d.writeFile(n,`${JSON.stringify(e,null,2)}
+`,{encoding:"utf8",mode:384})}async function I(){const e=await S();if(!e.ok||!e.hasUpdate||!e.latestVersion||(await b()).latestVersion===e.latestVersion)return!1;const a=U().filter(t=>t.enabled&&!!t.serverUrl);if(a.length===0)return r.info(`[update-notifier] \u68C0\u6D4B\u5230\u65B0\u7248\u672C v${e.latestVersion}\uFF08\u5F53\u524D v${e.currentVersion}\uFF09\uFF0C\u4F46\u672A\u914D\u7F6E\u4EFB\u4F55\u8C03\u5EA6\u4E2D\u5FC3\uFF0C\u8DF3\u8FC7\u901A\u77E5`),!1;const i=e.currentVersion,l=e.latestVersion,f=a[0]?.instanceName||"",u={eventType:"update-available",bridgeInstanceId:a[0]?.instanceId||"",bridgeInstanceName:f,currentVersion:i,latestVersion:l,message:T},c=await Promise.allSettled(a.map(async t=>{const s=String(t.serverUrl).replace(/\/+$/,""),p=D(s,t.userKey);if(!p)throw r.warn(`[update-notifier] \u8DF3\u8FC7 ${s}\uFF1A\u7F3A\u5C11 runtime access token\uFF08\u672A\u6CE8\u518C\uFF09`),new Error("\u7F3A\u5C11 runtime access token\uFF08\u672A\u6CE8\u518C\uFF09");const _=$(t);await E.post(`${s}/api/runtime/callback/bridge-update-notify`,{...u,bridgeInstanceId:t.instanceId||u.bridgeInstanceId,bridgeInstanceName:t.instanceName||f,runtimeBridgeBaseUrl:_},{headers:{"X-Runtime-Token":p},timeout:1e4})})),m=c.some(t=>t.status==="fulfilled");if(m)await B({latestVersion:l,notifiedAt:new Date().toISOString()}),r.info(`[update-notifier] \u5DF2\u901A\u77E5 ${c.filter(t=>t.status==="fulfilled").length}/${c.length} \u4E2A\u8C03\u5EA6\u4E2D\u5FC3\uFF1Av${i} -> v${l}`),N(`\u68C0\u6D4B\u5230\u65B0\u7248\u672C v${l}\uFF08\u5F53\u524D v${i}\uFF09\uFF0C\u5DF2\u53D1\u9001\u53EF\u66F4\u65B0\u901A\u77E5`).catch(()=>{});else{r.warn(`[update-notifier] \u5411 ${c.length} \u4E2A\u8C03\u5EA6\u4E2D\u5FC3\u53D1\u9001\u66F4\u65B0\u901A\u77E5\u5747\u5931\u8D25\uFF0C\u5C06\u5728\u4E0B\u4E2A\u5468\u671F\u91CD\u8BD5`);for(const[t,s]of c.entries())s.status==="rejected"&&r.warn(`[update-notifier] \u901A\u77E5\u5931\u8D25: ${a[t]?.serverUrl}, ${s.reason?.message}`)}return m}let o=null;function M(){if(process.env.AWS_BRIDGE_UPDATE_CHECK_DISABLED==="true"){r.info("[update-notifier] \u7248\u672C\u68C0\u67E5\u5DF2\u901A\u8FC7 AWS_BRIDGE_UPDATE_CHECK_DISABLED \u5173\u95ED");return}if(o)return;const e=Number(process.env.AWS_BRIDGE_UPDATE_CHECK_INTERVAL_HOURS),n=Number.isFinite(e)&&e>0?e*60*60*1e3:h;setTimeout(()=>{I().catch(i=>{r.warn(`[update-notifier] \u68C0\u67E5\u5F02\u5E38: ${i?.message}`)})},y).unref?.(),o=setInterval(()=>{I().catch(i=>{r.warn(`[update-notifier] \u68C0\u67E5\u5F02\u5E38: ${i?.message}`)})},n),o.unref?.(),r.info(`[update-notifier] \u7248\u672C\u68C0\u67E5\u5B9A\u65F6\u4EFB\u52A1\u5DF2\u542F\u52A8\uFF0C\u95F4\u9694 ${Math.round(n/36e5)} \u5C0F\u65F6`)}function O(){o&&(clearInterval(o),o=null)}export{I as runUpdateCheck,M as startUpdateNotifier,O as stopUpdateNotifier};
 

package/dist/services/user-scope.d.ts

@@ -0,0 +1,115 @@
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+import type { NextFunction, Request, Response } from "express";
+export interface UserScope {
+    tenantId: string;
+    userId: string;
+}
+export declare const SCOPE_ID_PATTERN: RegExp;
+
+export declare const LEGACY_SCOPE: Readonly<UserScope>;
+
+export declare const TENANT_HEADER = "x-tenant-id";
+export declare const USER_HEADER = "x-user-id";
+declare module "express-serve-static-core" {
+    interface Request {
+        
+        userScope?: UserScope;
+    }
+}
+
+
+
+
+
+
+
+
+
+export declare function sanitizeScopeId(id: unknown): string;
+
+export declare function isValidScopeId(id: unknown): id is string;
+
+
+
+
+export declare function normalizeUserScope(tenantId: unknown, userId: unknown): UserScope | null;
+
+export declare function scopeEquals(a: UserScope | null, b: UserScope | null): boolean;
+
+export declare function isLegacyScope(scope: UserScope | null): boolean;
+
+
+
+
+export declare function isLegacyScopeAllowed(): boolean;
+
+export declare function isLegacyFallbackDisabled(): boolean;
+
+export declare function getUserScopeRoot(scope: UserScope): string;
+
+export declare function getUserAiConfigFile(scope: UserScope): string;
+
+export declare function getUserSkillsDir(scope: UserScope): string;
+
+export declare function getUserSkillsDeployedDir(scope: UserScope): string;
+
+export declare function getUserMcpDir(scope: UserScope): string;
+
+export declare function getUserMcpDeployedDir(scope: UserScope): string;
+
+export declare function getUserMcpPackagesDir(scope: UserScope): string;
+
+export declare function getUserPluginsDir(scope: UserScope): string;
+
+export declare function getUserPluginsDeployedDir(scope: UserScope): string;
+export type CapabilityType = "skills" | "mcp" | "plugins";
+
+export declare function getUserCapabilityDir(scope: UserScope, type: CapabilityType): string;
+
+export declare function getUserCapabilityDefaultsFile(scope: UserScope, type: CapabilityType): string;
+
+export declare function getUserCapabilityAgentFile(scope: UserScope, type: CapabilityType, agentId: string): string;
+
+
+
+
+export declare function extractUserScope(req: Request): UserScope | null;
+
+
+
+
+export declare function resolveUserScope(req: Request, _res: Response, next: NextFunction): void;
+
+
+
+
+export declare function requireUserScope(req: Request, res: Response, next: NextFunction): void;
+
+export declare function getUserScopeOrThrow(req: Request): UserScope;
+
+export declare function setAgentOwnershipChecker(checker: (agentId: string, scope: UserScope) => boolean): void;
+export declare function requireAgentOwnership(req: Request, res: Response, next: NextFunction): void;

package/dist/services/user-scope.js

@@ -0,0 +1,2 @@
+import n from"node:path";import{getBridgeDataHome as I}from"../config.js";import{loadRuntimeBinding as x}from"./runtime-binding.js";const m=/^[a-zA-Z0-9_.-]+$/,c=Object.freeze({tenantId:"_legacy",userId:"_legacy"}),y="x-tenant-id",U="x-user-id";function s(e){const r=String(e??"").replace(/[^a-zA-Z0-9_.-]/g,"_");return/^\.+$/.test(r)?"_":r.replace(/^\.+/g,"")}function w(e){return typeof e=="string"&&e.length>0&&m.test(e)}function p(e,r){const t=String(e??"").trim(),o=String(r??"").trim();return!t||!o?null:{tenantId:t,userId:o}}function D(e,r){return!e||!r?!1:s(e.tenantId)===s(r.tenantId)&&s(e.userId)===s(r.userId)}function b(e){return D(e,c)}function l(){return String(process.env.AWS_BRIDGE_LEGACY_SCOPE||"").trim().toLowerCase()==="1"}function L(){return String(process.env.AWS_BRIDGE_DISABLE_LEGACY_FALLBACK||"").trim().toLowerCase()==="1"}function _(e){return[s(e.tenantId),s(e.userId)]}function i(e){return n.join(I(),"users",..._(e))}function R(e){return n.join(i(e),"ai","acode.json")}function j(e){return n.join(i(e),"skills")}function O(e){return n.join(j(e),"deployed")}function d(e){return n.join(i(e),"mcp")}function P(e){return n.join(d(e),"deployed")}function B(e){return n.join(d(e),"packages")}function A(e){return n.join(i(e),"plugins")}function F(e){return n.join(A(e),"deployed")}function g(e,r){return n.join(i(e),"capability",r)}function T(e,r){return n.join(g(e,r),"config.json")}function z(e,r,t){return n.join(g(e,r),"agents",`${s(t)}.json`)}function E(...e){for(const r of e){const t=String(r??"").trim();if(t)return t}return""}function u(e){const r=p(e.header(y),e.header(U));if(r)return r;const t=e.body??{};return p(t.tenantId,E(t.ownerUserId,t.userId))}function S(){try{const e=x();return e?.userId?p("_local",e.userId):null}catch{return null}}function G(e,r,t){const o=u(e)??S();o?e.userScope=o:l()&&(e.userScope={...c}),t()}function v(e,r,t){const o=u(e)??S();if(o){e.userScope=o,t();return}if(l()){e.userScope={...c},t();return}r.status(400).json({ok:!1,error:"user-scope-required",message:"\u8BF7\u6C42\u7F3A\u5C11 X-Tenant-Id / X-User-Id\uFF08\u6216\u4F53 tenantId + ownerUserId\uFF09\u8EAB\u4EFD"})}function H(e){const r=e.userScope??u(e);if(!r)throw new Error("user-scope-required: \u8BF7\u6C42\u7F3A\u5C11 (tenantId, userId) \u8EAB\u4EFD");return r}let a=null;function N(e){a=e}function M(e,r,t){const o=String(e.params?.agentId??e.body?.agentId??"").trim();if(!o){t();return}const f=e.userScope??u(e);if(!f){r.status(400).json({ok:!1,error:"user-scope-required",message:"agent \u7EA7\u64CD\u4F5C\u7F3A\u5C11 (tenantId, userId) \u8EAB\u4EFD"});return}if(a&&!a(o,f)){r.status(403).json({ok:!1,error:"agent-ownership-mismatch",message:"\u8BE5\u5B9E\u4F8B\u4E0D\u5C5E\u4E8E\u5F53\u524D\u7528\u6237"});return}t()}export{c as LEGACY_SCOPE,m as SCOPE_ID_PATTERN,y as TENANT_HEADER,U as USER_HEADER,u as extractUserScope,R as getUserAiConfigFile,z as getUserCapabilityAgentFile,T as getUserCapabilityDefaultsFile,g as getUserCapabilityDir,P as getUserMcpDeployedDir,d as getUserMcpDir,B as getUserMcpPackagesDir,F as getUserPluginsDeployedDir,A as getUserPluginsDir,H as getUserScopeOrThrow,i as getUserScopeRoot,O as getUserSkillsDeployedDir,j as getUserSkillsDir,L as isLegacyFallbackDisabled,b as isLegacyScope,l as isLegacyScopeAllowed,w as isValidScopeId,p as normalizeUserScope,M as requireAgentOwnership,v as requireUserScope,G as resolveUserScope,s as sanitizeScopeId,D as scopeEquals,N as setAgentOwnershipChecker};
+

package/dist/services/windows-service-manager.d.ts

@@ -1,4 +1,16 @@
 
+
+
+
+
+
+
+
+
+
+
+
+
 export interface WindowsServiceConfig {
     name: string;
     description: string;

package/dist/services/workspace-files.d.ts

@@ -1,4 +1,7 @@
 
+
+
+
 export interface WorkspaceFileItem {
     name: string;
     path: string;
@@ -185,16 +188,38 @@ export interface ChmodWorkspaceEntryResult {
     changedCount: number;
 }
 
+
+
+
+
+
+
 export declare function listWorkspaceDirectory(params: WorkspacePathParams): Promise<ListWorkspaceDirectoryResult>;
 
+
+
 export declare function readWorkspaceFile(params: WorkspaceFileParams): Promise<ReadWorkspaceFileResult>;
 
+
+
+
+
 export declare function getWorkspaceEntryProperties(params: DeleteWorkspaceEntryParams): Promise<WorkspaceEntryPropertiesResult>;
 
+
+
+
 export declare function chmodWorkspaceEntry(params: ChmodWorkspaceEntryParams): Promise<ChmodWorkspaceEntryResult>;
 
+
+
+
+
+
 export declare function previewWorkspaceDocument(params: WorkspaceFileParams): Promise<WorkspaceDocumentPreviewResult>;
 
+
+
 export declare function writeWorkspaceFile(params: WriteWorkspaceFileParams): Promise<{
     ok: true;
     workspacePath: string;
@@ -202,6 +227,8 @@ export declare function writeWorkspaceFile(params: WriteWorkspaceFileParams): Pr
     mtimeMs: number;
 }>;
 
+
+
 export declare function createWorkspaceEntry(params: CreateWorkspaceEntryParams): Promise<{
     ok: true;
     workspacePath: string;
@@ -209,6 +236,8 @@ export declare function createWorkspaceEntry(params: CreateWorkspaceEntryParams)
     isDirectory: boolean;
 }>;
 
+
+
 export declare function renameWorkspaceEntry(params: RenameWorkspaceEntryParams): Promise<{
     ok: true;
     workspacePath: string;
@@ -216,6 +245,8 @@ export declare function renameWorkspaceEntry(params: RenameWorkspaceEntryParams)
     targetPath: string;
 }>;
 
+
+
 export declare function moveWorkspaceEntry(params: MoveWorkspaceEntryParams): Promise<{
     ok: true;
     workspacePath: string;
@@ -224,12 +255,16 @@ export declare function moveWorkspaceEntry(params: MoveWorkspaceEntryParams): Pr
     destinationPath: string;
 }>;
 
+
+
 export declare function deleteWorkspaceEntry(params: DeleteWorkspaceEntryParams): Promise<{
     ok: true;
     workspacePath: string;
     targetPath: string;
 }>;
 
+
+
 export declare function uploadWorkspaceFiles(params: UploadWorkspaceFilesParams): Promise<{
     ok: true;
     workspacePath: string;
@@ -242,17 +277,46 @@ export declare function uploadWorkspaceFiles(params: UploadWorkspaceFilesParams)
     }>;
 }>;
 
+
+
 export declare function resolveWorkspaceDownloadTarget(params: DownloadWorkspaceEntryParams): Promise<WorkspaceDownloadTarget>;
 
+
+
 export declare function streamWorkspaceDirectoryZip(directoryPath: string, output: NodeJS.WritableStream): Promise<void>;
 
+
+
+
+
+
+
+
+
+
+
+
 export declare function zipWorkspaceDirectoryToTemp(directoryPath: string, zipName: string, onProgress?: (zippedBytes: number) => void, shouldCancel?: () => boolean): Promise<string>;
 
+
+
 export declare function extractWorkspaceArchive(params: ExtractWorkspaceArchiveParams): Promise<WorkspaceArchiveExtractResult>;
 
+
+
+
 export declare function searchWorkspaceFiles(params: SearchWorkspaceFilesParams): Promise<SearchWorkspaceFilesResult>;
 
+
+
+
+
+
+
 export declare function searchWorkspacePaths(params: SearchWorkspacePathsParams): Promise<SearchWorkspacePathsResult>;
 
+
+
+
 export declare function replaceWorkspaceFiles(params: ReplaceWorkspaceFilesParams): Promise<ReplaceWorkspaceFilesResult>;
 export {};

package/dist/services/workspace-index/index-manager.d.ts

@@ -0,0 +1,46 @@
+
+
+
+
+
+
+
+
+
+
+import { type IndexQueryResult } from "./query.js";
+import type { IndexBuildOptions, WorkspaceIndexSnapshot } from "./types.js";
+export interface IndexStatus {
+    workspacePath: string;
+    ready: boolean;
+    building: boolean;
+    builtAt: number | null;
+    truncated: boolean;
+    stats: WorkspaceIndexSnapshot["stats"] | null;
+    error: string | null;
+}
+
+
+
+
+export declare function ensureIndex(workspacePath: string, options?: IndexBuildOptions): Promise<WorkspaceIndexSnapshot>;
+
+export declare function getIndexSnapshot(workspacePath: string): WorkspaceIndexSnapshot | null;
+
+export declare function getIndexStatus(workspacePath: string): IndexStatus;
+
+export declare function isIndexStale(workspacePath: string): boolean;
+
+export declare function refreshIndexInBackground(workspacePath: string): void;
+
+export declare function dropIndex(workspacePath: string): void;
+
+export declare function runIndexQuery(workspacePath: string, params: {
+    kind: "definition" | "references" | "symbols" | "outline";
+    filePath?: string;
+    line?: number;
+    column?: number;
+    name?: string;
+    includeDeclaration?: boolean;
+    limit?: number;
+}): Promise<IndexQueryResult>;

package/dist/services/workspace-index/index-manager.js

@@ -0,0 +1,2 @@
+import y from"node:crypto";import{existsSync as g,promises as d}from"node:fs";import u from"node:path";import{getBridgeDataHome as k}from"../../config.js";import{createLogger as b}from"../../utils/logger.js";import{buildWorkspaceIndex as x}from"./indexer.js";import{queryDefinition as P,queryOutline as S,queryReferences as C,querySymbols as I}from"./query.js";const c=b("workspace-index"),w=1,A=10*6e4,h=new Map;function N(){return u.join(k(),"workspace-index")}function m(t){const e=y.createHash("sha1").update(t).digest("hex").slice(0,16);return u.join(N(),`${e}.json`)}function l(t){return u.resolve(String(t||"").trim())}function f(t){const e=l(t);let n=h.get(e);return n||(n={workspacePath:e,snapshot:null,building:null,error:null,loadedFromCache:!1},h.set(e,n)),n}function v(t){return{version:w,workspacePath:t.workspacePath,builtAt:t.builtAt,truncated:t.truncated,stats:t.stats,files:[...t.files.values()]}}function $(t){const e=new Map,n=new Map,i=new Map;for(const r of t.files){e.set(r.filePath,r);for(const s of r.symbols){const o=s.name.trim().toLowerCase();if(!o)continue;const a=n.get(o);a?a.push(s):n.set(o,[s])}for(const s of r.identifierNames){const o=s.trim().toLowerCase();if(!o)continue;const a=i.get(o);a?a.add(r.filePath):i.set(o,new Set([r.filePath]))}}return{workspacePath:t.workspacePath,builtAt:t.builtAt,files:e,byName:n,filesByIdentifier:i,truncated:t.truncated,stats:t.stats}}async function F(t){const e=m(t);if(!g(e))return null;try{const n=await d.readFile(e,"utf8"),i=JSON.parse(n);return i.version!==w||l(i.workspacePath)!==l(t)?null:$(i)}catch(n){return c.warn(`[workspace-index] \u8BFB\u53D6\u7F13\u5B58\u5931\u8D25 ${e}: ${n.message}`),null}}async function D(t){const e=m(t.workspacePath);try{await d.mkdir(u.dirname(e),{recursive:!0}),await d.writeFile(e,JSON.stringify(v(t)),"utf8")}catch(n){c.warn(`[workspace-index] \u5199\u5165\u7F13\u5B58\u5931\u8D25 ${e}: ${n.message}`)}}async function p(t,e={}){const n=f(t);if(n.snapshot&&!e.force)return n.snapshot;if(n.building)return n.building;const i=(async()=>{if(!e.force){const r=await F(n.workspacePath);if(r)return c.info(`[workspace-index] \u547D\u4E2D\u78C1\u76D8\u7F13\u5B58 workspace=${n.workspacePath} files=${r.stats.fileCount}`),n.snapshot=r,n.loadedFromCache=!0,n.error=null,r}try{const r=await x(n.workspacePath,e);return n.snapshot=r,n.error=null,n.loadedFromCache=!1,D(r),r}catch(r){throw n.error=r.message,r}finally{n.building=null}})();return n.building=i,i}function M(t){return f(t).snapshot}function B(t){const e=f(t);return{workspacePath:e.workspacePath,ready:e.snapshot!==null,building:e.building!==null,builtAt:e.snapshot?.builtAt??null,truncated:e.snapshot?.truncated??!1,stats:e.snapshot?.stats??null,error:e.error}}function E(t){const e=M(t);return e?Date.now()-e.builtAt>A:!0}function J(t){f(t).building||p(t,{force:!0}).catch(n=>{c.warn(`[workspace-index] \u540E\u53F0\u5237\u65B0\u5931\u8D25: ${n.message}`)})}function R(t){h.delete(l(t))}async function T(t,e){const n=await p(t);return e.kind==="symbols"?I(n,String(e.name||""),e.limit??100):e.kind==="outline"?S(n,{filePath:String(e.filePath||"")}):e.kind==="references"?C(n,{filePath:String(e.filePath||""),line:Number(e.line||1),column:Number(e.column||1),name:e.name,includeDeclaration:e.includeDeclaration!==!1},e.limit??300):P(n,{filePath:String(e.filePath||""),line:Number(e.line||1),column:Number(e.column||1),name:e.name})}export{R as dropIndex,p as ensureIndex,M as getIndexSnapshot,B as getIndexStatus,E as isIndexStale,J as refreshIndexInBackground,T as runIndexQuery};
+

package/dist/services/workspace-index/indexer.d.ts

@@ -0,0 +1,15 @@
+
+
+
+
+
+
+
+
+
+import { type IndexBuildOptions, type WorkspaceIndexSnapshot } from "./types.js";
+
+
+
+
+export declare function buildWorkspaceIndex(workspacePath: string, options?: IndexBuildOptions): Promise<WorkspaceIndexSnapshot>;