aws-runtime-bridge 1.9.79 → 1.9.80

package/dist/routes/instance.js

@@ -1,748 +1,3 @@
-import { Router } from "express";
-import axios from "axios";
-import { spawn } from "node:child_process";
-import { createHash, timingSafeEqual } from "node:crypto";
-import { getBridgeVersion, resolveSchedulerBaseUrlFrom } from "../config.js";
-import { validateToken, validateTokenOrPanelSession } from "../middleware/auth.js";
-import { getConfiguredConnectionKeys, requestRuntimeAccessTokenRefreshForServer } from "../services/auto-register.js";
-import { discoverCcSwitchConfiguredItems, loadCcSwitchSdk } from "../services/cc-switch-sdk.js";
-import { initInstance, syncLegacyStateFromSdk } from "../services/instance-init-service.js";
-import { createBridgeLifecycleOperation, deliverPendingBridgeLifecycleNotifications, upsertBridgeLifecycleOperation, } from "../services/lifecycle-state.js";
-import { loadInstanceState, saveInstanceState, } from "../services/instance-state.js";
-import { getRuntimeAccessToken } from "../services/runtime-binding.js";
-import { detectToolStatuses, ensureToolsInstalled, SUPPORTED_INSTALLABLE_TOOLS, SUPPORTED_UNINSTALLABLE_TOOLS, uninstallTools, } from "../services/tool-installer.js";
-import { createLogger } from "../utils/logger.js";
-const log = createLogger("instance");
-const PANEL_TOOL_STATUS_KEYS = ["acode", "claude", "opencode", "codex"];
-// ★★★ 导出 gracefulShutdown 的触发函数
-// 用于 aws-mcp-server 通知 bridge 保留会话状态关闭
-let gracefulShutdownFn = null;
-export function setGracefulShutdownFn(fn) {
-    gracefulShutdownFn = fn;
-}
-export const instanceRouter = Router();
-function resolveNpmExecutable() {
-    return process.platform === "win32" ? "npm.cmd" : "npm";
-}
-function truncateCommandOutput(output) {
-    const maxLength = 16_000;
-    return output.length > maxLength
-        ? `${output.slice(output.length - maxLength)}\n[output truncated]`
-        : output;
-}
-function runCommand(command, args) {
-    return new Promise((resolve, reject) => {
-        const child = spawn(command, args, {
-            shell: false,
-            windowsHide: true,
-        });
-        let stdout = "";
-        let stderr = "";
-        child.stdout.on("data", (chunk) => {
-            stdout += chunk.toString("utf8");
-        });
-        child.stderr.on("data", (chunk) => {
-            stderr += chunk.toString("utf8");
-        });
-        child.on("error", reject);
-        child.on("close", (exitCode) => {
-            resolve({
-                command,
-                args,
-                exitCode,
-                stdout: truncateCommandOutput(stdout),
-                stderr: truncateCommandOutput(stderr),
-            });
-        });
-    });
-}
-function normalizeOptionalText(value) {
-    const normalized = String(value || "").trim();
-    return normalized || undefined;
-}
-function resolveRequestRuntimeBridgeBaseUrl(req) {
-    const host = req.get("host");
-    if (!host) {
-        return undefined;
-    }
-    return `${req.protocol}://${host}`;
-}
-async function runBridgeUpdateInBackground(input) {
-    const runningOperation = {
-        ...input.operation,
-        status: "running",
-        message: "Bridge 更新正在后台执行。",
-    };
-    await upsertBridgeLifecycleOperation(runningOperation);
-    try {
-        log.info("[update-bridge] 正在后台更新 aws-runtime-bridge 到最新版本");
-        const result = await runCommand(input.command, input.args);
-        const succeeded = result.exitCode === 0;
-        await upsertBridgeLifecycleOperation({
-            ...runningOperation,
-            status: succeeded ? "succeeded" : "failed",
-            message: succeeded
-                ? "Bridge 更新完成，请重启实例 Bridge 以加载新版本。"
-                : `Bridge 更新失败，npm 退出码: ${result.exitCode ?? "unknown"}`,
-            error: succeeded ? undefined : result.stderr || result.stdout,
-        });
-        await deliverPendingBridgeLifecycleNotifications();
-    }
-    catch (error) {
-        const err = error;
-        log.error("[update-bridge] background update failed:", err);
-        await upsertBridgeLifecycleOperation({
-            ...runningOperation,
-            status: "failed",
-            message: "Bridge 更新失败。",
-            error: err.message || "update bridge failed",
-        });
-        await deliverPendingBridgeLifecycleNotifications();
-    }
-}
-async function writeRestartSessionFlag(preserveSessions) {
-    const fs = await import("node:fs/promises");
-    const path = await import("node:path");
-    const os = await import("node:os");
-    const restartFlagFile = path.join(os.tmpdir(), "agentswork-runtime-bridge", ".preserve-sessions");
-    if (preserveSessions) {
-        await fs.mkdir(path.dirname(restartFlagFile), { recursive: true });
-        await fs.writeFile(restartFlagFile, JSON.stringify({
-            preserveSessions: true,
-            timestamp: new Date().toISOString(),
-        }), "utf-8");
-        log.info(`[prepare-restart] 已创建保留会话标记文件: ${restartFlagFile}`);
-        return;
-    }
-    try {
-        await fs.unlink(restartFlagFile);
-        log.info("[prepare-restart] 已删除保留会话标记文件");
-    }
-    catch {
-        // 文件不存在时无需处理。
-    }
-}
-function md5Hex(value) {
-    return createHash("md5").update(value, "utf8").digest("hex");
-}
-function hasMatchingConnectionKeyDigest(connectionKeyMd5) {
-    const provided = connectionKeyMd5.trim().toLowerCase();
-    if (!/^[a-f0-9]{32}$/.test(provided)) {
-        return false;
-    }
-    const providedBuffer = Buffer.from(provided, "hex");
-    return getConfiguredConnectionKeys()
-        .map((key) => key.trim())
-        .filter(Boolean)
-        .some((key) => {
-        const configuredBuffer = Buffer.from(md5Hex(key), "hex");
-        return (configuredBuffer.length === providedBuffer.length &&
-            timingSafeEqual(configuredBuffer, providedBuffer));
-    });
-}
-export function buildConnectionCheckResponse(connectionKeyMd5) {
-    const configuredConnectionKeys = getConfiguredConnectionKeys();
-    const connectionKeyRequired = configuredConnectionKeys.length > 0;
-    const version = getBridgeVersion();
-    if (!connectionKeyRequired) {
-        return {
-            status: 200,
-            body: {
-                ok: true,
-                runtimeBridge: "healthy",
-                version,
-                connectionKeyMatched: true,
-                connectionKeyRequired: false,
-            },
-        };
-    }
-    if (hasMatchingConnectionKeyDigest(connectionKeyMd5)) {
-        return {
-            status: 200,
-            body: {
-                ok: true,
-                runtimeBridge: "healthy",
-                version,
-                connectionKeyMatched: true,
-                connectionKeyRequired: true,
-            },
-        };
-    }
-    return {
-        status: 401,
-        body: {
-            ok: false,
-            error: "connection_key_mismatch",
-            version,
-            connectionKeyMatched: false,
-            connectionKeyRequired: true,
-        },
-    };
-}
-/**
- * 构建调度中心 ping 失败响应。
- * 主流程：保留底层错误与 scheduler 地址，同时明确 bridge 本身已连通、失败点在 bridge 回连调度中心。
- */
-export function buildSchedulerPingFailureResponse(error, configuredSchedulerBaseUrl) {
-    const trimmedSchedulerBaseUrl = configuredSchedulerBaseUrl.trim();
-    const schedulerUrl = trimmedSchedulerBaseUrl || "http://localhost:8080";
-    const isLocalhostScheduler = /^https?:\/\/(localhost|127\.0\.0\.1)(:\d+)?(?:\/|$)/i.test(schedulerUrl);
-    return {
-        ok: false,
-        error: error.message || "scheduler ping failed",
-        failureStage: "scheduler_ping",
-        runtimeBridge: "healthy",
-        schedulerBaseUrl: schedulerUrl,
-        hint: isLocalhostScheduler
-            ? "aws-runtime-bridge 已连通，但它回连调度中心失败。请在 bridge 启动环境中将 AWS_RUNTIME_SCHEDULER_BASE_URL 配置为该实例可访问的调度中心地址，例如 http://<server-host>:7380。"
-            : "aws-runtime-bridge 已连通，但它回连调度中心失败。请确认 AWS_RUNTIME_SCHEDULER_BASE_URL 指向的调度中心地址可从 bridge 机器访问，并且运行时访问令牌仍有效。",
-    };
-}
-function getAxiosStatusCode(error) {
-    if (typeof error !== "object" || error === null) {
-        return undefined;
-    }
-    const response = Reflect.get(error, "response");
-    if (typeof response !== "object" || response === null) {
-        return undefined;
-    }
-    const status = Reflect.get(response, "status");
-    return typeof status === "number" ? status : undefined;
-}
-async function pingSchedulerWithToken(schedulerBaseUrl, runtimeAccessToken) {
-    try {
-        const schedulerResponse = await axios.get(`${schedulerBaseUrl}/api/runtime/ping`, { headers: { "X-Runtime-Token": runtimeAccessToken } });
-        return {
-            schedulerReachable: schedulerResponse.status >= 200 && schedulerResponse.status < 300,
-            tokenRefreshed: false,
-        };
-    }
-    catch (error) {
-        if (getAxiosStatusCode(error) !== 401) {
-            throw error;
-        }
-        const refreshResult = await requestRuntimeAccessTokenRefreshForServer(schedulerBaseUrl);
-        if (!refreshResult.success || !refreshResult.runtimeAccessToken) {
-            throw error;
-        }
-        const retryResponse = await axios.get(`${schedulerBaseUrl}/api/runtime/ping`, { headers: { "X-Runtime-Token": refreshResult.runtimeAccessToken } });
-        return {
-            schedulerReachable: retryResponse.status >= 200 && retryResponse.status < 300,
-            tokenRefreshed: true,
-        };
-    }
-}
-/**
- * Build the response for ambiguous scheduler targets.
- * Main flow: never silently pick the first target; require an explicit scheduler URL or future scheduler identity routing.
- */
-export function buildAmbiguousSchedulerBaseUrlResponse(targetUrls) {
-    return {
-        ok: false,
-        error: "ambiguous_scheduler_base_url",
-        failureStage: "scheduler_ping",
-        runtimeBridge: "healthy",
-        schedulerBaseUrl: "",
-        autoRegisterTargetUrls: targetUrls,
-        hint: "Multiple autoRegisterTargets.serverUrl values were found, so bridge cannot safely infer which scheduler /runtime/ping should call back. Set AWS_RUNTIME_SCHEDULER_BASE_URL explicitly, or use future schedulerId/token-bound multi-scheduler routing.",
-    };
-}
-/**
- * 构建工具状态检测目标列表。
- * 主流程：合并实例启用工具与配置面板固定展示工具，避免历史状态缺少 Codex 时前端误判为待检测。
- */
-export function buildToolStatusDetectionTargets(enabledTools) {
-    return Array.from(new Set([...enabledTools, ...PANEL_TOOL_STATUS_KEYS]
-        .map((tool) => String(tool || "").trim().toLowerCase())
-        .filter(Boolean)));
-}
-/**
- * 汇总卸载后仍可执行的工具，用于避免把部分卸载误报为成功。
- */
-export function buildUninstallFailureMessage(requestedTools, toolStatus) {
-    const failedTools = requestedTools.filter((tool) => toolStatus[tool]?.installed);
-    if (failedTools.length === 0) {
-        return "";
-    }
-    return failedTools
-        .map((tool) => {
-        const status = toolStatus[tool];
-        const detail = status?.error || status?.executable || "command is still available";
-        return `${tool}: ${detail}`;
-    })
-        .join("; ");
-}
-export function summarizeToolStatus(toolStatus) {
-    return Object.fromEntries(Object.entries(toolStatus || {}).map(([tool, status]) => [
-        tool,
-        {
-            installed: Boolean(status?.installed),
-            version: status?.version || null,
-            executable: status?.executable || null,
-            error: status?.error || null,
-        },
-    ]));
-}
-/**
- * GET /runtime/check-update
- *
- * 查询 npm registry 获取 aws-runtime-bridge 的最新版本并和当前版本比较。
- * 使用 5 分钟内存缓存减少对 npm registry 的请求。
- */
-let updateCheckCache = null;
-const UPDATE_CHECK_CACHE_TTL = 300_000; // 5 分钟
-async function fetchLatestNpmVersion() {
-    const response = await axios.get("https://registry.npmjs.org/aws-runtime-bridge/latest", { timeout: 10_000, responseType: "json" });
-    const data = response.data;
-    return data?.version || "unknown";
-}
-instanceRouter.get("/check-update", async (_req, res) => {
-    try {
-        let latestVersion;
-        if (updateCheckCache && Date.now() - updateCheckCache.ts < UPDATE_CHECK_CACHE_TTL) {
-            latestVersion = updateCheckCache.latestVersion;
-        }
-        else {
-            latestVersion = await fetchLatestNpmVersion();
-            updateCheckCache = { latestVersion, ts: Date.now() };
-        }
-        const currentVersion = getBridgeVersion();
-        const hasUpdate = latestVersion !== "unknown" && currentVersion !== "unknown" && latestVersion !== currentVersion;
-        res.json({
-            ok: true,
-            hasUpdate,
-            currentVersion,
-            latestVersion,
-        });
-    }
-    catch (error) {
-        const err = error;
-        log.warn("[check-update] Failed to query npm registry:", err.message);
-        res.json({
-            ok: false,
-            hasUpdate: false,
-            currentVersion: getBridgeVersion(),
-            latestVersion: null,
-            error: err.message || "failed to check for updates",
-        });
-    }
-});
-instanceRouter.get("/healthz", (_req, res) => {
-    res.json({
-        ok: true,
-        runtimeBridge: "healthy",
-    });
-});
-instanceRouter.get("/connection-check", (req, res) => {
-    const connectionKeyMd5 = String(req.header("X-Bridge-Connection-Key-MD5") || "");
-    const result = buildConnectionCheckResponse(connectionKeyMd5);
-    res.status(result.status).json(result.body);
-});
-instanceRouter.get("/ping", validateToken, async (req, res) => {
-    const schedulerBaseUrlResolution = resolveSchedulerBaseUrlFrom(req.header("X-Scheduler-Base-Url"), req.header("X-Bridge-Instance-Id"), req.header("X-Bridge-Instance-Name"));
-    if (schedulerBaseUrlResolution.source === "ambiguous-auto-register-targets") {
-        res
-            .status(400)
-            .json(buildAmbiguousSchedulerBaseUrlResponse(schedulerBaseUrlResolution.ambiguousTargetUrls));
-        return;
-    }
-    const schedulerBaseUrl = schedulerBaseUrlResolution.url;
-    try {
-        const runtimeAccessToken = getRuntimeAccessToken(schedulerBaseUrl);
-        if (!runtimeAccessToken) {
-            res.status(401).json({ ok: false, error: "runtime_access_token_required" });
-            return;
-        }
-        const schedulerPing = await pingSchedulerWithToken(schedulerBaseUrl, runtimeAccessToken);
-        res.json({
-            ok: true,
-            runtimeBridge: "healthy",
-            version: getBridgeVersion(),
-            schedulerReachable: schedulerPing.schedulerReachable,
-            tokenRefreshed: schedulerPing.tokenRefreshed,
-            schedulerBaseUrl,
-            // 回传匹配到的 instanceId/instanceName，让 server 知道 bridge 实际绑定的是哪个
-            instanceId: schedulerBaseUrlResolution.instanceId,
-            instanceName: schedulerBaseUrlResolution.instanceName,
-        });
-    }
-    catch (error) {
-        const err = error;
-        res
-            .status(502)
-            .json(buildSchedulerPingFailureResponse(err, schedulerBaseUrl));
-    }
-});
-instanceRouter.post("/init-instance", validateToken, async (req, res) => {
-    const { agentId, workspacePath, skillEnabled, mcpEnabled, ccSwitchEnabledTools, skillPackage, skillPackages, mcpServers, } = req.body || {};
-    if (!agentId || !workspacePath) {
-        res.status(400).json({ error: "agentId and workspacePath are required" });
-        return;
-    }
-    try {
-        log.info("[init-instance] Request received", {
-            agentId: String(agentId),
-            workspacePath: String(workspacePath),
-            skillEnabled,
-            mcpEnabled,
-            ccSwitchEnabledTools,
-        });
-        const result = await initInstance(agentId, workspacePath, {
-            skillEnabled,
-            mcpEnabled,
-            ccSwitchEnabledTools,
-            skillPackage,
-            skillPackages,
-            mcpServers,
-        });
-        log.info("[init-instance] Initialization completed", {
-            agentId: String(agentId),
-            ok: result.ok,
-            logCount: result.logs?.length || 0,
-            enabledTools: result.enabledTools,
-        });
-        res.json(result);
-    }
-    catch (error) {
-        const err = error;
-        log.error("[init-instance] Initialization failed", {
-            agentId: String(agentId),
-            workspacePath: String(workspacePath),
-            error: err?.message || String(error),
-            stack: err?.stack || null,
-        });
-        res.status(400).json({
-            error: err?.message || "initialize instance failed",
-        });
-    }
-});
-instanceRouter.post("/cc-switch/state", validateToken, async (req, res) => {
-    const { agentId } = req.body || {};
-    if (!agentId) {
-        res.status(400).json({ error: "agentId is required" });
-        return;
-    }
-    try {
-        log.info("[cc-switch/state] Request received", { agentId: String(agentId) });
-        const sdk = await loadCcSwitchSdk(agentId);
-        const imported = await discoverCcSwitchConfiguredItems(sdk);
-        const synced = await syncLegacyStateFromSdk(agentId, sdk);
-        const state = synced.state;
-        const detectionTargets = buildToolStatusDetectionTargets(state.enabledTools || []);
-        log.info("[cc-switch/state] Detecting SDK statuses", {
-            agentId: String(agentId),
-            detectionTargets,
-        });
-        const toolStatus = await detectToolStatuses(detectionTargets);
-        log.info("[cc-switch/state] SDK status detection completed", {
-            agentId: String(agentId),
-            toolStatus: summarizeToolStatus(toolStatus),
-            importedMcpCount: imported.mcpServers,
-            importedSkillCount: imported.skills,
-        });
-        res.json({
-            ok: true,
-            agentId: String(agentId),
-            imported: {
-                mcpServers: imported.mcpServers,
-                skills: imported.skills,
-            },
-            state: { ...state, toolStatus },
-        });
-    }
-    catch (error) {
-        const err = error;
-        log.error("[cc-switch/state] Failed to load state", {
-            agentId: String(agentId),
-            error: err?.message || String(error),
-            stack: err?.stack || null,
-        });
-        res.status(400).json({ error: err?.message || "load state failed" });
-    }
-});
-instanceRouter.post("/cc-switch/install-tools", validateToken, async (req, res) => {
-    const { agentId, tools } = req.body || {};
-    if (!agentId) {
-        res.status(400).json({ error: "agentId is required" });
-        return;
-    }
-    const requestedTools = Array.isArray(tools)
-        ? tools
-            .map((tool) => String(tool || "")
-            .trim()
-            .toLowerCase())
-            .filter(Boolean)
-        : [];
-    log.info("[cc-switch/install-tools] Request received", {
-        agentId: String(agentId),
-        requestedTools,
-    });
-    const supportedInstallableTools = new Set(SUPPORTED_INSTALLABLE_TOOLS);
-    const installableTools = requestedTools.filter((tool) => supportedInstallableTools.has(tool));
-    log.info("[cc-switch/install-tools] Request normalized", {
-        agentId: String(agentId),
-        requestedTools,
-        installableTools,
-        supportedInstallableTools: SUPPORTED_INSTALLABLE_TOOLS,
-    });
-    if (installableTools.length === 0) {
-        log.warn("[cc-switch/install-tools] No supported installable tools requested", {
-            agentId: String(agentId),
-            requestedTools,
-        });
-        res
-            .status(400)
-            .json({
-            error: `tools must include ${SUPPORTED_INSTALLABLE_TOOLS.join(", ")}`,
-        });
-        return;
-    }
-    try {
-        const state = await loadInstanceState(agentId);
-        const enabledTools = Array.from(new Set([...(state.enabledTools || []), ...installableTools]));
-        log.info("[cc-switch/install-tools] Starting installer", {
-            agentId: String(agentId),
-            installableTools,
-            previousEnabledTools: state.enabledTools || [],
-            nextEnabledTools: enabledTools,
-        });
-        const toolStatus = await ensureToolsInstalled(installableTools);
-        log.info("[cc-switch/install-tools] Installer completed", {
-            agentId: String(agentId),
-            toolStatus: summarizeToolStatus(toolStatus),
-        });
-        const refreshedToolStatus = await detectToolStatuses(enabledTools);
-        log.info("[cc-switch/install-tools] Refreshed enabled SDK statuses", {
-            agentId: String(agentId),
-            refreshedToolStatus: summarizeToolStatus(refreshedToolStatus),
-        });
-        const nextToolStatus = {
-            ...refreshedToolStatus,
-            ...toolStatus,
-        };
-        const savedState = await saveInstanceState(agentId, {
-            ...state,
-            enabledTools,
-            toolStatus: nextToolStatus,
-        });
-        const installableToolSet = new Set(installableTools);
-        const failedTools = Object.entries(nextToolStatus)
-            .filter(([tool]) => installableToolSet.has(tool))
-            .filter(([, status]) => !status.installed)
-            .map(([tool, status]) => ({ tool, error: status.error || null }));
-        if (failedTools.length > 0) {
-            log.warn("[cc-switch/install-tools] Some SDKs remain unavailable", {
-                agentId: String(agentId),
-                failedTools,
-            });
-        }
-        log.info("[cc-switch/install-tools] State saved", {
-            agentId: String(agentId),
-            enabledTools: savedState.enabledTools,
-            toolStatus: summarizeToolStatus(nextToolStatus),
-        });
-        res.json({
-            ok: failedTools.length === 0,
-            agentId: String(agentId),
-            toolStatus: nextToolStatus,
-            failedTools,
-            state: savedState,
-        });
-    }
-    catch (error) {
-        const err = error;
-        log.error("[cc-switch/install-tools] Install route failed", {
-            agentId: String(agentId),
-            requestedTools,
-            installableTools,
-            error: err?.message || String(error),
-            stack: err?.stack || null,
-        });
-        res.status(400).json({ error: err?.message || "install tools failed" });
-    }
-});
-instanceRouter.post("/cc-switch/uninstall-tools", validateToken, async (req, res) => {
-    const { agentId, tools } = req.body || {};
-    if (!agentId) {
-        res.status(400).json({ error: "agentId is required" });
-        return;
-    }
-    const requestedTools = Array.isArray(tools)
-        ? tools
-            .map((tool) => String(tool || "")
-            .trim()
-            .toLowerCase())
-            .filter(Boolean)
-        : [];
-    const supportedUninstallableTools = new Set(SUPPORTED_UNINSTALLABLE_TOOLS);
-    const uninstallableTools = requestedTools.filter((tool) => supportedUninstallableTools.has(tool));
-    if (uninstallableTools.length === 0) {
-        res.status(400).json({
-            error: `tools must include ${SUPPORTED_UNINSTALLABLE_TOOLS.join(", ")}`,
-        });
-        return;
-    }
-    try {
-        const state = await loadInstanceState(agentId);
-        const uninstallableToolSet = new Set(uninstallableTools);
-        const enabledTools = (state.enabledTools || []).filter((tool) => !uninstallableToolSet.has(String(tool || "").trim().toLowerCase()));
-        const uninstalledToolStatus = await uninstallTools(uninstallableTools);
-        const refreshedToolStatus = await detectToolStatuses([
-            ...enabledTools,
-            ...uninstallableTools,
-        ]);
-        const nextToolStatus = {
-            ...refreshedToolStatus,
-            ...uninstalledToolStatus,
-        };
-        const uninstallFailureMessage = buildUninstallFailureMessage(uninstallableTools, nextToolStatus);
-        const nextEnabledTools = uninstallFailureMessage
-            ? state.enabledTools || []
-            : enabledTools;
-        const savedState = await saveInstanceState(agentId, {
-            ...state,
-            enabledTools: nextEnabledTools,
-            toolStatus: nextToolStatus,
-        });
-        if (uninstallFailureMessage) {
-            res.status(400).json({
-                ok: false,
-                agentId: String(agentId),
-                error: `uninstall incomplete: ${uninstallFailureMessage}`,
-                toolStatus: nextToolStatus,
-                state: savedState,
-            });
-            return;
-        }
-        res.json({
-            ok: true,
-            agentId: String(agentId),
-            toolStatus: nextToolStatus,
-            state: savedState,
-        });
-    }
-    catch (error) {
-        const err = error;
-        res.status(400).json({ error: err?.message || "uninstall tools failed" });
-    }
-});
-/**
- * ★★★ 新增：aws-mcp-server 通知 bridge 准备重启
- * POST /runtime/prepare-restart
- *
- * 当 aws-mcp-server 准备重启时，调用此接口通知 bridge：
- * - bridge 保留所有会话状态（不清空持久化）
- * - aws-mcp-server 重启后可以从 bridge 恢复 agent 状态
- *
- * 请求体：
- * - preserveSessions: true = 保留会话（aws-mcp-server 重启）
- *                     false = 清理会话（bridge 自己关闭）
- */
-instanceRouter.post("/prepare-restart", validateToken, async (req, res) => {
-    const { preserveSessions = true } = req.body || {};
-    try {
-        log.info(`[prepare-restart] 收到准备重启通知，preserveSessions=${preserveSessions}`);
-        // 记录重启模式到文件，供下次启动时判断。
-        await writeRestartSessionFlag(Boolean(preserveSessions));
-        res.json({
-            ok: true,
-            preserveSessions,
-            message: preserveSessions
-                ? "Bridge will preserve sessions for aws-mcp-server restart"
-                : "Bridge will clean up sessions on shutdown",
-        });
-    }
-    catch (error) {
-        const err = error;
-        log.error("[prepare-restart] Error:", err);
-        res.status(500).json({ error: err.message });
-    }
-});
-/**
- * POST /runtime/update-bridge
- *
- * 通过当前 Bridge 进程执行全局 npm 包更新，等价于 CLI 的
- * `awsb update`，用于面板上的“更新实例 Bridge”。
- */
-instanceRouter.post("/update-bridge", validateTokenOrPanelSession, async (req, res) => {
-    const command = resolveNpmExecutable();
-    const args = ["install", "-g", "aws-runtime-bridge@latest", "--omit=optional"];
-    const requestedByUserId = normalizeOptionalText(req.body?.requestedByUserId);
-    try {
-        if (!requestedByUserId) {
-            res.status(400).json({ error: "requestedByUserId is required" });
-            return;
-        }
-        const operation = createBridgeLifecycleOperation({
-            operationType: "update",
-            requestedByUserId,
-            schedulerBaseUrl: req.body?.schedulerBaseUrl,
-            runtimeBridgeBaseUrl: resolveRequestRuntimeBridgeBaseUrl(req),
-            status: "accepted",
-            message: "Bridge 更新请求已收到，将在后台执行。",
-        });
-        await upsertBridgeLifecycleOperation(operation);
-        void runBridgeUpdateInBackground({ command, args, operation });
-        res.json({
-            ok: true,
-            operationId: operation.operationId,
-            message: "Bridge 更新已在后台开始，完成后会通过消息中心通知结果。",
-        });
-    }
-    catch (error) {
-        const err = error;
-        log.error("[update-bridge] Error:", err);
-        res.status(500).json({ error: err.message || "update bridge failed" });
-    }
-});
-/**
- * POST /runtime/restart-bridge
- *
- * 写入保留会话标记后优雅关闭当前 Bridge 进程。真正的重新拉起由
- * systemd、PM2、Docker 外部守护或用户手动启动完成。
- */
-instanceRouter.post("/restart-bridge", validateTokenOrPanelSession, async (req, res) => {
-    const { preserveSessions = true } = req.body || {};
-    const requestedByUserId = normalizeOptionalText(req.body?.requestedByUserId);
-    try {
-        if (!requestedByUserId) {
-            res.status(400).json({ error: "requestedByUserId is required" });
-            return;
-        }
-        log.info(`[restart-bridge] 收到实例 Bridge 重启请求，preserveSessions=${preserveSessions}`);
-        const operation = createBridgeLifecycleOperation({
-            operationType: "restart",
-            requestedByUserId,
-            schedulerBaseUrl: req.body?.schedulerBaseUrl,
-            runtimeBridgeBaseUrl: resolveRequestRuntimeBridgeBaseUrl(req),
-            status: "accepted",
-            message: "Bridge 已收到重启请求；下次启动后会发送确认通知。",
-        });
-        await upsertBridgeLifecycleOperation(operation);
-        await writeRestartSessionFlag(Boolean(preserveSessions));
-        res.json({
-            ok: true,
-            operationId: operation.operationId,
-            preserveSessions: Boolean(preserveSessions),
-            message: "Bridge 正在优雅退出；下次启动后会通过消息中心通知结果。若未由守护进程管理，请手动重新启动。",
-        });
-        setTimeout(() => {
-            // 用退出码 42 表示"重启请求"，配合 systemd Restart=on-failure 触发自动拉起
-            process.exitCode = 42;
-            if (gracefulShutdownFn) {
-                gracefulShutdownFn("PANEL_RESTART", Boolean(preserveSessions)).catch((error) => {
-                    const err = error;
-                    log.error("[restart-bridge] graceful shutdown failed:", err);
-                    process.exit(1);
-                });
-                return;
-            }
-            process.exit(42);
-        }, 250);
-    }
-    catch (error) {
-        const err = error;
-        log.error("[restart-bridge] Error:", err);
-        res.status(500).json({ error: err.message || "restart bridge failed" });
-    }
-});
+import{Router as D}from"express";import I from"axios";import{spawn as N}from"node:child_process";import{createHash as $,timingSafeEqual as F}from"node:crypto";import{getBridgeVersion as b,resolveSchedulerBaseUrlFrom as M}from"../config.js";import{validateToken as S,validateTokenOrPanelSession as j}from"../middleware/auth.js";import{getConfiguredConnectionKeys as _,requestRuntimeAccessTokenRefreshForServer as z}from"../services/auto-register.js";import{discoverCcSwitchConfiguredItems as H,loadCcSwitchSdk as V}from"../services/cc-switch-sdk.js";import{initInstance as X,syncLegacyStateFromSdk as W}from"../services/instance-init-service.js";import{createBridgeLifecycleOperation as E,deliverPendingBridgeLifecycleNotifications as C,upsertBridgeLifecycleOperation as y}from"../services/lifecycle-state.js";import{loadInstanceState as x,saveInstanceState as L}from"../services/instance-state.js";import{getRuntimeAccessToken as G}from"../services/runtime-binding.js";import{detectToolStatuses as R,ensureToolsInstalled as J,SUPPORTED_INSTALLABLE_TOOLS as v,SUPPORTED_UNINSTALLABLE_TOOLS as A,uninstallTools as Y}from"../services/tool-installer.js";import{createLogger as Q}from"../utils/logger.js";const l=Q("instance"),Z=["acode","claude","opencode","codex"];let U=null;function je(r){U=r}const d=D();function ee(){return process.platform==="win32"?"npm.cmd":"npm"}function q(r){return r.length>16e3?`${r.slice(r.length-16e3)}
+[output truncated]`:r}function te(r,t){return new Promise((e,s)=>{const n=N(r,t,{shell:!1,windowsHide:!0});let a="",i="";n.stdout.on("data",o=>{a+=o.toString("utf8")}),n.stderr.on("data",o=>{i+=o.toString("utf8")}),n.on("error",s),n.on("close",o=>{e({command:r,args:t,exitCode:o,stdout:q(a),stderr:q(i)})})})}function K(r){return String(r||"").trim()||void 0}function O(r){const t=r.get("host");if(t)return`${r.protocol}://${t}`}async function re(r){const t={...r.operation,status:"running",message:"Bridge \u66F4\u65B0\u6B63\u5728\u540E\u53F0\u6267\u884C\u3002"};await y(t);try{l.info("[update-bridge] \u6B63\u5728\u540E\u53F0\u66F4\u65B0 aws-runtime-bridge \u5230\u6700\u65B0\u7248\u672C");const e=await te(r.command,r.args),s=e.exitCode===0;await y({...t,status:s?"succeeded":"failed",message:s?"Bridge \u66F4\u65B0\u5B8C\u6210\uFF0C\u8BF7\u91CD\u542F\u5B9E\u4F8B Bridge \u4EE5\u52A0\u8F7D\u65B0\u7248\u672C\u3002":`Bridge \u66F4\u65B0\u5931\u8D25\uFF0Cnpm \u9000\u51FA\u7801: ${e.exitCode??"unknown"}`,error:s?void 0:e.stderr||e.stdout}),await C()}catch(e){const s=e;l.error("[update-bridge] background update failed:",s),await y({...t,status:"failed",message:"Bridge \u66F4\u65B0\u5931\u8D25\u3002",error:s.message||"update bridge failed"}),await C()}}async function P(r){const t=await import("node:fs/promises"),e=await import("node:path"),s=await import("node:os"),n=e.join(s.tmpdir(),"agentswork-runtime-bridge",".preserve-sessions");if(r){await t.mkdir(e.dirname(n),{recursive:!0}),await t.writeFile(n,JSON.stringify({preserveSessions:!0,timestamp:new Date().toISOString()}),"utf-8"),l.info(`[prepare-restart] \u5DF2\u521B\u5EFA\u4FDD\u7559\u4F1A\u8BDD\u6807\u8BB0\u6587\u4EF6: ${n}`);return}try{await t.unlink(n),l.info("[prepare-restart] \u5DF2\u5220\u9664\u4FDD\u7559\u4F1A\u8BDD\u6807\u8BB0\u6587\u4EF6")}catch{}}function se(r){return $("md5").update(r,"utf8").digest("hex")}function ne(r){const t=r.trim().toLowerCase();if(!/^[a-f0-9]{32}$/.test(t))return!1;const e=Buffer.from(t,"hex");return _().map(s=>s.trim()).filter(Boolean).some(s=>{const n=Buffer.from(se(s),"hex");return n.length===e.length&&F(n,e)})}function oe(r){const e=_().length>0,s=b();return e?ne(r)?{status:200,body:{ok:!0,runtimeBridge:"healthy",version:s,connectionKeyMatched:!0,connectionKeyRequired:!0}}:{status:401,body:{ok:!1,error:"connection_key_mismatch",version:s,connectionKeyMatched:!1,connectionKeyRequired:!0}}:{status:200,body:{ok:!0,runtimeBridge:"healthy",version:s,connectionKeyMatched:!0,connectionKeyRequired:!1}}}function ae(r,t){const s=t.trim()||"http://localhost:8080",n=/^https?:\/\/(localhost|127\.0\.0\.1)(:\d+)?(?:\/|$)/i.test(s);return{ok:!1,error:r.message||"scheduler ping failed",failureStage:"scheduler_ping",runtimeBridge:"healthy",schedulerBaseUrl:s,hint:n?"aws-runtime-bridge \u5DF2\u8FDE\u901A\uFF0C\u4F46\u5B83\u56DE\u8FDE\u8C03\u5EA6\u4E2D\u5FC3\u5931\u8D25\u3002\u8BF7\u5728 bridge \u542F\u52A8\u73AF\u5883\u4E2D\u5C06 AWS_RUNTIME_SCHEDULER_BASE_URL \u914D\u7F6E\u4E3A\u8BE5\u5B9E\u4F8B\u53EF\u8BBF\u95EE\u7684\u8C03\u5EA6\u4E2D\u5FC3\u5730\u5740\uFF0C\u4F8B\u5982 http://<server-host>:7380\u3002":"aws-runtime-bridge \u5DF2\u8FDE\u901A\uFF0C\u4F46\u5B83\u56DE\u8FDE\u8C03\u5EA6\u4E2D\u5FC3\u5931\u8D25\u3002\u8BF7\u786E\u8BA4 AWS_RUNTIME_SCHEDULER_BASE_URL \u6307\u5411\u7684\u8C03\u5EA6\u4E2D\u5FC3\u5730\u5740\u53EF\u4ECE bridge \u673A\u5668\u8BBF\u95EE\uFF0C\u5E76\u4E14\u8FD0\u884C\u65F6\u8BBF\u95EE\u4EE4\u724C\u4ECD\u6709\u6548\u3002"}}function ie(r){if(typeof r!="object"||r===null)return;const t=Reflect.get(r,"response");if(typeof t!="object"||t===null)return;const e=Reflect.get(t,"status");return typeof e=="number"?e:void 0}async function le(r,t){try{const e=await I.get(`${r}/api/runtime/ping`,{headers:{"X-Runtime-Token":t}});return{schedulerReachable:e.status>=200&&e.status<300,tokenRefreshed:!1}}catch(e){if(ie(e)!==401)throw e;const s=await z(r);if(!s.success||!s.runtimeAccessToken)throw e;const n=await I.get(`${r}/api/runtime/ping`,{headers:{"X-Runtime-Token":s.runtimeAccessToken}});return{schedulerReachable:n.status>=200&&n.status<300,tokenRefreshed:!0}}}function ce(r){return{ok:!1,error:"ambiguous_scheduler_base_url",failureStage:"scheduler_ping",runtimeBridge:"healthy",schedulerBaseUrl:"",autoRegisterTargetUrls:r,hint:"Multiple autoRegisterTargets.serverUrl values were found, so bridge cannot safely infer which scheduler /runtime/ping should call back. Set AWS_RUNTIME_SCHEDULER_BASE_URL explicitly, or use future schedulerId/token-bound multi-scheduler routing."}}function ue(r){return Array.from(new Set([...r,...Z].map(t=>String(t||"").trim().toLowerCase()).filter(Boolean)))}function de(r,t){const e=r.filter(s=>t[s]?.installed);return e.length===0?"":e.map(s=>{const n=t[s],a=n?.error||n?.executable||"command is still available";return`${s}: ${a}`}).join("; ")}function T(r){return Object.fromEntries(Object.entries(r||{}).map(([t,e])=>[t,{installed:!!e?.installed,version:e?.version||null,executable:e?.executable||null,error:e?.error||null}]))}let k=null;const ge=3e5;async function fe(){return(await I.get("https://registry.npmjs.org/aws-runtime-bridge/latest",{timeout:1e4,responseType:"json"})).data?.version||"unknown"}d.get("/check-update",async(r,t)=>{try{let e;k&&Date.now()-k.ts<ge?e=k.latestVersion:(e=await fe(),k={latestVersion:e,ts:Date.now()});const s=b(),n=e!=="unknown"&&s!=="unknown"&&e!==s;t.json({ok:!0,hasUpdate:n,currentVersion:s,latestVersion:e})}catch(e){const s=e;l.warn("[check-update] Failed to query npm registry:",s.message),t.json({ok:!1,hasUpdate:!1,currentVersion:b(),latestVersion:null,error:s.message||"failed to check for updates"})}}),d.get("/healthz",(r,t)=>{t.json({ok:!0,runtimeBridge:"healthy"})}),d.get("/connection-check",(r,t)=>{const e=String(r.header("X-Bridge-Connection-Key-MD5")||""),s=oe(e);t.status(s.status).json(s.body)}),d.get("/ping",S,async(r,t)=>{const e=M(r.header("X-Scheduler-Base-Url"),r.header("X-Bridge-Instance-Id"),r.header("X-Bridge-Instance-Name"));if(e.source==="ambiguous-auto-register-targets"){t.status(400).json(ce(e.ambiguousTargetUrls));return}const s=e.url;try{const n=G(s);if(!n){t.status(401).json({ok:!1,error:"runtime_access_token_required"});return}const a=await le(s,n);t.json({ok:!0,runtimeBridge:"healthy",version:b(),schedulerReachable:a.schedulerReachable,tokenRefreshed:a.tokenRefreshed,schedulerBaseUrl:s,instanceId:e.instanceId,instanceName:e.instanceName})}catch(n){const a=n;t.status(502).json(ae(a,s))}}),d.post("/init-instance",S,async(r,t)=>{const{agentId:e,workspacePath:s,skillEnabled:n,mcpEnabled:a,ccSwitchEnabledTools:i,skillPackage:o,skillPackages:c,mcpServers:m}=r.body||{};if(!e||!s){t.status(400).json({error:"agentId and workspacePath are required"});return}try{l.info("[init-instance] Request received",{agentId:String(e),workspacePath:String(s),skillEnabled:n,mcpEnabled:a,ccSwitchEnabledTools:i});const u=await X(e,s,{skillEnabled:n,mcpEnabled:a,ccSwitchEnabledTools:i,skillPackage:o,skillPackages:c,mcpServers:m});l.info("[init-instance] Initialization completed",{agentId:String(e),ok:u.ok,logCount:u.logs?.length||0,enabledTools:u.enabledTools}),t.json(u)}catch(u){const g=u;l.error("[init-instance] Initialization failed",{agentId:String(e),workspacePath:String(s),error:g?.message||String(u),stack:g?.stack||null}),t.status(400).json({error:g?.message||"initialize instance failed"})}}),d.post("/cc-switch/state",S,async(r,t)=>{const{agentId:e}=r.body||{};if(!e){t.status(400).json({error:"agentId is required"});return}try{l.info("[cc-switch/state] Request received",{agentId:String(e)});const s=await V(e),n=await H(s),i=(await W(e,s)).state,o=ue(i.enabledTools||[]);l.info("[cc-switch/state] Detecting SDK statuses",{agentId:String(e),detectionTargets:o});const c=await R(o);l.info("[cc-switch/state] SDK status detection completed",{agentId:String(e),toolStatus:T(c),importedMcpCount:n.mcpServers,importedSkillCount:n.skills}),t.json({ok:!0,agentId:String(e),imported:{mcpServers:n.mcpServers,skills:n.skills},state:{...i,toolStatus:c}})}catch(s){const n=s;l.error("[cc-switch/state] Failed to load state",{agentId:String(e),error:n?.message||String(s),stack:n?.stack||null}),t.status(400).json({error:n?.message||"load state failed"})}}),d.post("/cc-switch/install-tools",S,async(r,t)=>{const{agentId:e,tools:s}=r.body||{};if(!e){t.status(400).json({error:"agentId is required"});return}const n=Array.isArray(s)?s.map(o=>String(o||"").trim().toLowerCase()).filter(Boolean):[];l.info("[cc-switch/install-tools] Request received",{agentId:String(e),requestedTools:n});const a=new Set(v),i=n.filter(o=>a.has(o));if(l.info("[cc-switch/install-tools] Request normalized",{agentId:String(e),requestedTools:n,installableTools:i,supportedInstallableTools:v}),i.length===0){l.warn("[cc-switch/install-tools] No supported installable tools requested",{agentId:String(e),requestedTools:n}),t.status(400).json({error:`tools must include ${v.join(", ")}`});return}try{const o=await x(e),c=Array.from(new Set([...o.enabledTools||[],...i]));l.info("[cc-switch/install-tools] Starting installer",{agentId:String(e),installableTools:i,previousEnabledTools:o.enabledTools||[],nextEnabledTools:c});const m=await J(i);l.info("[cc-switch/install-tools] Installer completed",{agentId:String(e),toolStatus:T(m)});const u=await R(c);l.info("[cc-switch/install-tools] Refreshed enabled SDK statuses",{agentId:String(e),refreshedToolStatus:T(u)});const g={...u,...m},p=await L(e,{...o,enabledTools:c,toolStatus:g}),w=new Set(i),h=Object.entries(g).filter(([f])=>w.has(f)).filter(([,f])=>!f.installed).map(([f,B])=>({tool:f,error:B.error||null}));h.length>0&&l.warn("[cc-switch/install-tools] Some SDKs remain unavailable",{agentId:String(e),failedTools:h}),l.info("[cc-switch/install-tools] State saved",{agentId:String(e),enabledTools:p.enabledTools,toolStatus:T(g)}),t.json({ok:h.length===0,agentId:String(e),toolStatus:g,failedTools:h,state:p})}catch(o){const c=o;l.error("[cc-switch/install-tools] Install route failed",{agentId:String(e),requestedTools:n,installableTools:i,error:c?.message||String(o),stack:c?.stack||null}),t.status(400).json({error:c?.message||"install tools failed"})}}),d.post("/cc-switch/uninstall-tools",S,async(r,t)=>{const{agentId:e,tools:s}=r.body||{};if(!e){t.status(400).json({error:"agentId is required"});return}const n=Array.isArray(s)?s.map(o=>String(o||"").trim().toLowerCase()).filter(Boolean):[],a=new Set(A),i=n.filter(o=>a.has(o));if(i.length===0){t.status(400).json({error:`tools must include ${A.join(", ")}`});return}try{const o=await x(e),c=new Set(i),m=(o.enabledTools||[]).filter(B=>!c.has(String(B||"").trim().toLowerCase())),u=await Y(i),p={...await R([...m,...i]),...u},w=de(i,p),h=w?o.enabledTools||[]:m,f=await L(e,{...o,enabledTools:h,toolStatus:p});if(w){t.status(400).json({ok:!1,agentId:String(e),error:`uninstall incomplete: ${w}`,toolStatus:p,state:f});return}t.json({ok:!0,agentId:String(e),toolStatus:p,state:f})}catch(o){const c=o;t.status(400).json({error:c?.message||"uninstall tools failed"})}}),d.post("/prepare-restart",S,async(r,t)=>{const{preserveSessions:e=!0}=r.body||{};try{l.info(`[prepare-restart] \u6536\u5230\u51C6\u5907\u91CD\u542F\u901A\u77E5\uFF0CpreserveSessions=${e}`),await P(!!e),t.json({ok:!0,preserveSessions:e,message:e?"Bridge will preserve sessions for aws-mcp-server restart":"Bridge will clean up sessions on shutdown"})}catch(s){const n=s;l.error("[prepare-restart] Error:",n),t.status(500).json({error:n.message})}}),d.post("/update-bridge",j,async(r,t)=>{const e=ee(),s=["install","-g","aws-runtime-bridge@latest","--omit=optional"],n=K(r.body?.requestedByUserId);try{if(!n){t.status(400).json({error:"requestedByUserId is required"});return}const a=E({operationType:"update",requestedByUserId:n,schedulerBaseUrl:r.body?.schedulerBaseUrl,runtimeBridgeBaseUrl:O(r),status:"accepted",message:"Bridge \u66F4\u65B0\u8BF7\u6C42\u5DF2\u6536\u5230\uFF0C\u5C06\u5728\u540E\u53F0\u6267\u884C\u3002"});await y(a),re({command:e,args:s,operation:a}),t.json({ok:!0,operationId:a.operationId,message:"Bridge \u66F4\u65B0\u5DF2\u5728\u540E\u53F0\u5F00\u59CB\uFF0C\u5B8C\u6210\u540E\u4F1A\u901A\u8FC7\u6D88\u606F\u4E2D\u5FC3\u901A\u77E5\u7ED3\u679C\u3002"})}catch(a){const i=a;l.error("[update-bridge] Error:",i),t.status(500).json({error:i.message||"update bridge failed"})}}),d.post("/restart-bridge",j,async(r,t)=>{const{preserveSessions:e=!0}=r.body||{},s=K(r.body?.requestedByUserId);try{if(!s){t.status(400).json({error:"requestedByUserId is required"});return}l.info(`[restart-bridge] \u6536\u5230\u5B9E\u4F8B Bridge \u91CD\u542F\u8BF7\u6C42\uFF0CpreserveSessions=${e}`);const n=E({operationType:"restart",requestedByUserId:s,schedulerBaseUrl:r.body?.schedulerBaseUrl,runtimeBridgeBaseUrl:O(r),status:"accepted",message:"Bridge \u5DF2\u6536\u5230\u91CD\u542F\u8BF7\u6C42\uFF1B\u4E0B\u6B21\u542F\u52A8\u540E\u4F1A\u53D1\u9001\u786E\u8BA4\u901A\u77E5\u3002"});await y(n),await P(!!e),t.json({ok:!0,operationId:n.operationId,preserveSessions:!!e,message:"Bridge \u6B63\u5728\u4F18\u96C5\u9000\u51FA\uFF1B\u4E0B\u6B21\u542F\u52A8\u540E\u4F1A\u901A\u8FC7\u6D88\u606F\u4E2D\u5FC3\u901A\u77E5\u7ED3\u679C\u3002\u82E5\u672A\u7531\u5B88\u62A4\u8FDB\u7A0B\u7BA1\u7406\uFF0C\u8BF7\u624B\u52A8\u91CD\u65B0\u542F\u52A8\u3002"}),setTimeout(()=>{if(process.exitCode=42,U){U("PANEL_RESTART",!!e).catch(a=>{const i=a;l.error("[restart-bridge] graceful shutdown failed:",i),process.exit(1)});return}process.exit(42)},250)}catch(n){const a=n;l.error("[restart-bridge] Error:",a),t.status(500).json({error:a.message||"restart bridge failed"})}});export{ce as buildAmbiguousSchedulerBaseUrlResponse,oe as buildConnectionCheckResponse,ae as buildSchedulerPingFailureResponse,ue as buildToolStatusDetectionTargets,de as buildUninstallFailureMessage,d as instanceRouter,je as setGracefulShutdownFn,T as summarizeToolStatus};
+