aws-runtime-bridge 1.9.79 → 1.9.80

package/dist/middleware/auth.js

@@ -1,98 +1,2 @@
-/**
- * Token 验证中间件
- *
- * 验证请求头中的 X-Runtime-Token 是否为已配对的 connectionKey 或 runtime binding token。
- * 也提供联合中间件，同时支持面板 cookie 会话认证，用于可从面板 UI 触发的操作。
- */
-import { hasRuntimeBinding, validateRuntimeBindingToken, } from "../services/runtime-binding.js";
-import { getConfiguredConnectionKeys } from "../services/auto-register.js";
-import { validateSession } from "../services/panel-auth.js";
-function extractRuntimeToken(req) {
-    const headerToken = req.header("X-Runtime-Token");
-    if (headerToken) {
-        return headerToken.trim();
-    }
-    const authorization = req.header("Authorization") || "";
-    const bearerMatch = authorization.match(/^Bearer\s+(.+)$/i);
-    return bearerMatch?.[1]?.trim() || "";
-}
-function validateConfiguredToken(token) {
-    if (!token) {
-        return false;
-    }
-    if (getConfiguredConnectionKeys().includes(token)) {
-        return true;
-    }
-    return false;
-}
-/**
- * 校验 runtime token。
- * 主流程：复用 REST 中间件的 runtime binding token 与 connectionKey 校验逻辑，供 WebSocket upgrade 使用。
- */
-export function isRuntimeTokenValid(token) {
-    const normalized = String(token || "").trim();
-    return validateRuntimeBindingToken(normalized) || validateConfiguredToken(normalized);
-}
-/**
- * Token 验证中间件
- * 检查请求头中的 X-Runtime-Token 或 Authorization: Bearer 是否有效。
- *
- * 支持面板/服务器绑定时写入的动态令牌和 bridge 实例 connectionKey。
- */
-export function validateToken(req, res, next) {
-    const token = extractRuntimeToken(req);
-    if (isRuntimeTokenValid(token)) {
-        next();
-        return;
-    }
-    if (!hasRuntimeBinding()) {
-        res.status(401).json({
-            error: "runtime_bridge_unpaired",
-            message: "Runtime bridge is not paired. Add this instance from the panel first.",
-        });
-        return;
-    }
-    res.status(401).json({ error: "unauthorized" });
-}
-// ── 面板 cookie 会话验证 ──────────────────────────────────────
-const PANEL_COOKIE_NAME = "panel_sid";
-function parseCookies(cookieHeader) {
-    const result = {};
-    if (!cookieHeader)
-        return result;
-    for (const part of cookieHeader.split(";")) {
-        const idx = part.indexOf("=");
-        if (idx === -1)
-            continue;
-        const key = part.slice(0, idx).trim();
-        const val = part.slice(idx + 1).trim();
-        if (key)
-            result[key] = val;
-    }
-    return result;
-}
-function extractPanelSessionToken(req) {
-    const cookies = parseCookies(req.headers.cookie);
-    return cookies[PANEL_COOKIE_NAME];
-}
-/**
- * 联合中间件：同时支持 runtime token 和面板 cookie 会话。
- * 面板前端调用时需要 cookie 认证（由浏览器自动附带），
- * 调度中心/服务端调用时使用 X-Runtime-Token 或 Authorization: Bearer。
- * 适用于可从面板 UI 或外部 API 两种途径触发的操作。
- */
-export function validateTokenOrPanelSession(req, res, next) {
-    // 优先检查 runtime token（服务端调用）
-    const token = extractRuntimeToken(req);
-    if (isRuntimeTokenValid(token)) {
-        next();
-        return;
-    }
-    // 回退检查面板 cookie 会话（浏览器调用）
-    const panelToken = extractPanelSessionToken(req);
-    if (panelToken && validateSession(panelToken)) {
-        next();
-        return;
-    }
-    res.status(401).json({ error: "unauthorized" });
-}
+import{hasRuntimeBinding as u,validateRuntimeBindingToken as c}from"../services/runtime-binding.js";import{getConfiguredConnectionKeys as f}from"../services/auto-register.js";import{validateSession as d}from"../services/panel-auth.js";function o(n){const t=n.header("X-Runtime-Token");return t?t.trim():(n.header("Authorization")||"").match(/^Bearer\s+(.+)$/i)?.[1]?.trim()||""}function m(n){return n?!!f().includes(n):!1}function s(n){const t=String(n||"").trim();return c(t)||m(t)}function v(n,t,e){const i=o(n);if(s(i)){e();return}if(!u()){t.status(401).json({error:"runtime_bridge_unpaired",message:"Runtime bridge is not paired. Add this instance from the panel first."});return}t.status(401).json({error:"unauthorized"})}const l="panel_sid";function h(n){const t={};if(!n)return t;for(const e of n.split(";")){const i=e.indexOf("=");if(i===-1)continue;const r=e.slice(0,i).trim(),a=e.slice(i+1).trim();r&&(t[r]=a)}return t}function k(n){return h(n.headers.cookie)[l]}function x(n,t,e){const i=o(n);if(s(i)){e();return}const r=k(n);if(r&&d(r)){e();return}t.status(401).json({error:"unauthorized"})}export{s as isRuntimeTokenValid,v as validateToken,x as validateTokenOrPanelSession};
+

package/dist/routes/acode-todos.d.ts

@@ -8,4 +8,3 @@
  * 路径与 ~/.acode/cmd-dist/ 惯例一致。
  */
 export declare const acodeTodosRouter: import("express-serve-static-core").Router;
-//# sourceMappingURL=acode-todos.d.ts.map

package/dist/routes/acode-todos.js

@@ -1,75 +1,2 @@
-/**
- * ACode Todo 读取 API 路由
- *
- * 直接读取 bridge 家目录下 ~/.acode/todos/{agentId}.json，
- * 不依赖 agent 工作目录，避免 workspacePath 错误导致读取失败。
- *
- * 文件由 ACode 内置 TodoStore 写入（package/acode/src/todo-store.ts），
- * 路径与 ~/.acode/cmd-dist/ 惯例一致。
- */
-import { promises as fs } from 'node:fs';
-import os from 'node:os';
-import path from 'node:path';
-import { Router } from 'express';
-import { validateToken } from '../middleware/auth.js';
-import { createLogger } from '../utils/logger.js';
-const log = createLogger('acode-todos');
-export const acodeTodosRouter = Router();
-const TODOS_DIR = path.join(os.homedir(), '.acode', 'todos');
-/**
- * 防止路径穿越：与 TodoStore.filePath 一致的字符白名单。
- * 仅允许字母数字下划线短横，其它字符替换为下划线。
- */
-function sanitizeAgentId(agentId) {
-    return String(agentId).replace(/[^a-zA-Z0-9_-]/g, '_');
-}
-function resolveTodoFilePath(agentId) {
-    return path.join(TODOS_DIR, `${sanitizeAgentId(agentId)}.json`);
-}
-/**
- * GET /runtime/acode-todos/:agentId
- * 返回该 agent 的 todo 列表。
- *
- * 响应：
- *   200 { ok: true, agentId, updatedAt, todos: [...] }
- *   200 { ok: true, agentId, updatedAt: null, todos: [] }  文件不存在/损坏时
- *   400 { ok: false, error: "agentId is required" }
- */
-acodeTodosRouter.get('/acode-todos/:agentId', validateToken, async (req, res) => {
-    const agentIdParam = req.params.agentId;
-    const agentId = Array.isArray(agentIdParam) ? agentIdParam[0] : agentIdParam;
-    if (!agentId || !String(agentId).trim()) {
-        res.status(400).json({ ok: false, error: 'agentId is required' });
-        return;
-    }
-    const filePath = resolveTodoFilePath(String(agentId));
-    try {
-        const raw = await fs.readFile(filePath, 'utf-8');
-        const doc = JSON.parse(raw);
-        const todos = Array.isArray(doc.todos) ? doc.todos : [];
-        res.json({
-            ok: true,
-            agentId: String(agentId),
-            updatedAt: typeof doc.updatedAt === 'string' ? doc.updatedAt : null,
-            background: typeof doc.background === 'string' ? doc.background : '',
-            todos,
-        });
-    }
-    catch (err) {
-        const code = typeof err === 'object' && err !== null ? Reflect.get(err, 'code') : undefined;
-        if (code === 'ENOENT') {
-            // 文件不存在：返回空列表（agent 尚未写过 todo）
-            res.json({ ok: true, agentId: String(agentId), updatedAt: null, todos: [] });
-            return;
-        }
-        // JSON 解析错误等：返回空列表，避免损坏文件阻断读取
-        if (err instanceof SyntaxError) {
-            log.warn('[acode-todos] 文件损坏（JSON 解析失败）: %s', filePath);
-            res.json({ ok: true, agentId: String(agentId), updatedAt: null, todos: [] });
-            return;
-        }
-        const e = err;
-        log.error('[acode-todos] 读取失败: %s', e.message);
-        res.status(500).json({ ok: false, error: e.message });
-    }
-});
+import{promises as u}from"node:fs";import g from"node:os";import i from"node:path";import{Router as f}from"express";import{validateToken as p}from"../middleware/auth.js";import{createLogger as m}from"../utils/logger.js";const c=m("acode-todos"),l=f(),A=i.join(g.homedir(),".acode","todos");function y(e){return String(e).replace(/[^a-zA-Z0-9_-]/g,"_")}function I(e){return i.join(A,`${y(e)}.json`)}l.get("/acode-todos/:agentId",p,async(e,n)=>{const s=e.params.agentId,r=Array.isArray(s)?s[0]:s;if(!r||!String(r).trim()){n.status(400).json({ok:!1,error:"agentId is required"});return}const d=I(String(r));try{const o=await u.readFile(d,"utf-8"),t=JSON.parse(o),a=Array.isArray(t.todos)?t.todos:[];n.json({ok:!0,agentId:String(r),updatedAt:typeof t.updatedAt=="string"?t.updatedAt:null,background:typeof t.background=="string"?t.background:"",todos:a})}catch(o){if((typeof o=="object"&&o!==null?Reflect.get(o,"code"):void 0)==="ENOENT"){n.json({ok:!0,agentId:String(r),updatedAt:null,todos:[]});return}if(o instanceof SyntaxError){c.warn("[acode-todos] \u6587\u4EF6\u635F\u574F\uFF08JSON \u89E3\u6790\u5931\u8D25\uFF09: %s",d),n.json({ok:!0,agentId:String(r),updatedAt:null,todos:[]});return}const a=o;c.error("[acode-todos] \u8BFB\u53D6\u5931\u8D25: %s",a.message),n.status(500).json({ok:!1,error:a.message})}});export{l as acodeTodosRouter};
+

package/dist/routes/ai-sources.d.ts

@@ -1,2 +1 @@
 export declare const aiSourcesRouter: import("express-serve-static-core").Router;
-//# sourceMappingURL=ai-sources.d.ts.map

package/dist/routes/ai-sources.js

@@ -1,132 +1,2 @@
-import axios from 'axios';
-import { Router } from 'express';
-import { validateToken } from '../middleware/auth.js';
-import { applyCurrentAiConfigToInstalledTools } from '../services/ai-source-apply.js';
-import { getAiConfigService } from '../services/cc-switch-sdk.js';
-import { detectToolStatuses } from '../services/tool-installer.js';
-import { createLogger } from '../utils/logger.js';
-import { ensureEnabledTools } from '../utils/validation.js';
-const log = createLogger('ai-sources');
-export const aiSourcesRouter = Router();
-function normalizeListedModels(payload) {
-    if (!payload || typeof payload !== 'object' || Array.isArray(payload)) {
-        return [];
-    }
-    const payloadRecord = payload;
-    const data = Array.isArray(payloadRecord.data) ? payloadRecord.data : [];
-    const ids = new Set();
-    for (const item of data) {
-        if (!item || typeof item !== 'object' || Array.isArray(item)) {
-            continue;
-        }
-        const id = String(item.id || '').trim();
-        if (id) {
-            ids.add(id);
-        }
-    }
-    return [...ids];
-}
-async function fetchRemoteModelList(baseUrl, apiKey, protocolType) {
-    const normalizedBaseUrl = baseUrl.replace(/\/+$/, '');
-    if (protocolType === 'anthropic-compatible') {
-        const anthropicUrl = `${normalizedBaseUrl.endsWith('/v1') ? normalizedBaseUrl.replace(/\/v1$/, '') : normalizedBaseUrl}/v1/models`;
-        const response = await axios.get(anthropicUrl, {
-            headers: {
-                'x-api-key': apiKey,
-                'anthropic-version': '2023-06-01',
-            },
-            timeout: 10000,
-        });
-        return normalizeListedModels(response.data);
-    }
-    // Default: OpenAI-compatible
-    const candidates = normalizedBaseUrl.endsWith('/v1')
-        ? [`${normalizedBaseUrl}/models`]
-        : [`${normalizedBaseUrl}/models`, `${normalizedBaseUrl}/v1/models`];
-    for (const candidate of candidates) {
-        try {
-            const response = await axios.get(candidate, {
-                headers: {
-                    Authorization: `Bearer ${apiKey}`,
-                },
-                timeout: 10000,
-            });
-            const models = normalizeListedModels(response.data);
-            if (models.length > 0) {
-                return models;
-            }
-        }
-        catch {
-            // continue probing next compatible endpoint
-        }
-    }
-    return [];
-}
-aiSourcesRouter.post('/cc-switch/apply-ai-sources', validateToken, async (req, res) => {
-    const { agentId, template, ccSwitchEnabledTools, acodeTemplateId, claudecodeTemplateId, codexTemplateId, opencodeTemplateId, acodeModelEffort, claudecodeModelEffort, codexModelEffort, opencodeModelEffort, acodeSubAgentTemplateId, acodeSubAgentModel, acodeSubAgentModelEffort, acode, acodeSubAgent, claudecode, codex, opencode, } = req.body || {};
-    if (!agentId) {
-        res.status(400).json({ error: 'agentId is required' });
-        return;
-    }
-    try {
-        const aiConfigService = getAiConfigService();
-        const tools = ensureEnabledTools(ccSwitchEnabledTools);
-        const toolStatus = await detectToolStatuses(tools);
-        const appliedSummary = await applyCurrentAiConfigToInstalledTools({
-            template: template,
-            requestedSources: { acode, claudecode, codex, opencode },
-            toolStatus,
-            aiConfigService,
-        });
-        res.json({
-            ok: true,
-            agentId: String(agentId),
-            acodeTemplateId: String(acodeTemplateId || ''),
-            claudecodeTemplateId: String(claudecodeTemplateId || ''),
-            codexTemplateId: String(codexTemplateId || ''),
-            opencodeTemplateId: String(opencodeTemplateId || ''),
-            acodeModelEffort: String(acodeModelEffort || ''),
-            claudecodeModelEffort: String(claudecodeModelEffort || ''),
-            codexModelEffort: String(codexModelEffort || ''),
-            opencodeModelEffort: String(opencodeModelEffort || ''),
-            acodeSubAgentTemplateId: String(acodeSubAgentTemplateId || ''),
-            acodeSubAgentModel: String(acodeSubAgentModel || ''),
-            acodeSubAgentModelEffort: String(acodeSubAgentModelEffort || ''),
-            generatedFromUnifiedTemplate: appliedSummary.generatedFromUnifiedTemplate,
-            applied: appliedSummary.applied,
-            skippedTools: appliedSummary.skippedTools,
-        });
-    }
-    catch (error) {
-        const err = error;
-        log.error('Failed to apply AI sources', {
-            error: err?.message,
-            agentId: String(agentId || ''),
-        });
-        res.status(400).json({ error: err?.message || 'apply ai sources failed' });
-    }
-});
-aiSourcesRouter.post('/cc-switch/list-ai-models', validateToken, async (req, res) => {
-    const { baseUrl, apiKey, protocolType } = req.body || {};
-    const normalizedBaseUrl = String(baseUrl || '').trim();
-    const normalizedApiKey = String(apiKey || '').trim();
-    if (!normalizedBaseUrl || !normalizedApiKey) {
-        res.status(400).json({ error: 'baseUrl and apiKey are required' });
-        return;
-    }
-    try {
-        const models = await fetchRemoteModelList(normalizedBaseUrl, normalizedApiKey, protocolType);
-        res.json({
-            ok: true,
-            models,
-        });
-    }
-    catch (error) {
-        const err = error;
-        log.error('Failed to list remote AI models', {
-            error: err?.message,
-            baseUrl: normalizedBaseUrl,
-        });
-        res.status(400).json({ error: err?.message || 'list ai models failed' });
-    }
-});
+import m from"axios";import{Router as U}from"express";import{validateToken as f}from"../middleware/auth.js";import{applyCurrentAiConfigToInstalledTools as $}from"../services/ai-source-apply.js";import{getAiConfigService as k}from"../services/cc-switch-sdk.js";import{detectToolStatuses as z}from"../services/tool-installer.js";import{createLogger as C}from"../utils/logger.js";import{ensureEnabledTools as F}from"../utils/validation.js";const u=C("ai-sources"),g=U();function S(r){if(!r||typeof r!="object"||Array.isArray(r))return[];const o=r,d=Array.isArray(o.data)?o.data:[],e=new Set;for(const a of d){if(!a||typeof a!="object"||Array.isArray(a))continue;const t=String(a.id||"").trim();t&&e.add(t)}return[...e]}async function R(r,o,d){const e=r.replace(/\/+$/,"");if(d==="anthropic-compatible"){const t=`${e.endsWith("/v1")?e.replace(/\/v1$/,""):e}/v1/models`,n=await m.get(t,{headers:{"x-api-key":o,"anthropic-version":"2023-06-01"},timeout:1e4});return S(n.data)}const a=e.endsWith("/v1")?[`${e}/models`]:[`${e}/models`,`${e}/v1/models`];for(const t of a)try{const n=await m.get(t,{headers:{Authorization:`Bearer ${o}`},timeout:1e4}),s=S(n.data);if(s.length>0)return s}catch{}return[]}g.post("/cc-switch/apply-ai-sources",f,async(r,o)=>{const{agentId:d,template:e,ccSwitchEnabledTools:a,acodeTemplateId:t,claudecodeTemplateId:n,codexTemplateId:s,opencodeTemplateId:i,acodeModelEffort:y,claudecodeModelEffort:T,codexModelEffort:A,opencodeModelEffort:b,acodeSubAgentTemplateId:I,acodeSubAgentModel:h,acodeSubAgentModelEffort:M,acode:E,acodeSubAgent:q,claudecode:v,codex:w,opencode:j}=r.body||{};if(!d){o.status(400).json({error:"agentId is required"});return}try{const l=k(),c=F(a),x=await z(c),p=await $({template:e,requestedSources:{acode:E,claudecode:v,codex:w,opencode:j},toolStatus:x,aiConfigService:l});o.json({ok:!0,agentId:String(d),acodeTemplateId:String(t||""),claudecodeTemplateId:String(n||""),codexTemplateId:String(s||""),opencodeTemplateId:String(i||""),acodeModelEffort:String(y||""),claudecodeModelEffort:String(T||""),codexModelEffort:String(A||""),opencodeModelEffort:String(b||""),acodeSubAgentTemplateId:String(I||""),acodeSubAgentModel:String(h||""),acodeSubAgentModelEffort:String(M||""),generatedFromUnifiedTemplate:p.generatedFromUnifiedTemplate,applied:p.applied,skippedTools:p.skippedTools})}catch(l){const c=l;u.error("Failed to apply AI sources",{error:c?.message,agentId:String(d||"")}),o.status(400).json({error:c?.message||"apply ai sources failed"})}}),g.post("/cc-switch/list-ai-models",f,async(r,o)=>{const{baseUrl:d,apiKey:e,protocolType:a}=r.body||{},t=String(d||"").trim(),n=String(e||"").trim();if(!t||!n){o.status(400).json({error:"baseUrl and apiKey are required"});return}try{const s=await R(t,n,a);o.json({ok:!0,models:s})}catch(s){const i=s;u.error("Failed to list remote AI models",{error:i?.message,baseUrl:t}),o.status(400).json({error:i?.message||"list ai models failed"})}});export{g as aiSourcesRouter};
+

package/dist/routes/dashboard.d.ts

@@ -5,4 +5,3 @@
  * 支持中/英文界面，默认中文
  */
 export declare const dashboardRouter: import("express-serve-static-core").Router;
-//# sourceMappingURL=dashboard.d.ts.map