codebee 0.1.64 → 0.1.66

package/app/core/market_remote.py

@@ -30,10 +30,10 @@ import subprocess
 import tarfile
 import tempfile
 import time
-import urllib.error
-import urllib.request
-import urllib.parse
-import zipfile
+import urllib.error
+import urllib.request
+import urllib.parse
+import zipfile
 from pathlib import Path
 from urllib.parse import urlparse
 
@@ -94,8 +94,8 @@ _CAP_DOWNLOAD = 80 * 1024 * 1024
 _CAP_UNPACKED = 120 * 1024 * 1024
 _CAP_FILES = 500
 _CAP_FILE_TEXT = 512 * 1024
-_CAP_TOTAL_TEXT = 4 * 1024 * 1024
-_MAX_REDIRECTS = 3
+_CAP_TOTAL_TEXT = 4 * 1024 * 1024
+_MAX_REDIRECTS = 3
 
 
 def _cache_dir():
@@ -132,52 +132,52 @@ def assert_public_url(url):
     return host, port
 
 
-def _fetch(url, cap=_CAP_MANIFEST):
+def _fetch(url, cap=_CAP_MANIFEST):
     """带体量上限的 https GET；返回 bytes。
 
     两段式网络策略：先走默认通道（Windows 上 urllib 会读注册表系统代理，
     依赖代理上网的环境靠它），失败再自动直连重试一次（实测本机代理对部分
     CDN 文件返回 404/篡改，直连正常；反过来需要代理的网络第一段就成功）。
     体量超限属确定性错误，不重试。"""
-    assert_public_url(url)
-
-    class _NoRedirect(urllib.request.HTTPRedirectHandler):
-        def redirect_request(self, req, fp, code, msg, headers, newurl):
-            return None
-
-    def _close_quietly(resp):
-        try:
-            resp.close()
-        except Exception:
-            pass
-
-    def _open(opener, target):
-        """逐跳 GET；重定向目标在发起下一跳前重新过 SSRF 网关。"""
-        current = target
-        for hop in range(_MAX_REDIRECTS + 1):
-            assert_public_url(current)
-            req = urllib.request.Request(current, headers={
-                "User-Agent": "CodeBee-Market/1.0",
-                "Accept": "*/*",
-            })
-            try:
-                resp = opener.open(req, timeout=30)
-                code = getattr(resp, "status", getattr(resp, "code", 200))
-            except urllib.error.HTTPError as e:
-                code, resp = e.code, e
-            if code not in (301, 302, 303, 307, 308):
-                if isinstance(resp, urllib.error.HTTPError):
-                    raise resp
-                return resp
-            location = resp.headers.get("Location")
-            if not location:
-                _close_quietly(resp)
-                raise ValueError("重定向缺少 Location: %s" % current)
-            _close_quietly(resp)
-            current = urllib.parse.urljoin(current, location)
-            if hop >= _MAX_REDIRECTS:
-                raise ValueError("重定向次数超过上限: %s" % target)
-        raise ValueError("重定向失败: %s" % target)
+    assert_public_url(url)
+
+    class _NoRedirect(urllib.request.HTTPRedirectHandler):
+        def redirect_request(self, req, fp, code, msg, headers, newurl):
+            return None
+
+    def _close_quietly(resp):
+        try:
+            resp.close()
+        except Exception:
+            pass
+
+    def _open(opener, target):
+        """逐跳 GET；重定向目标在发起下一跳前重新过 SSRF 网关。"""
+        current = target
+        for hop in range(_MAX_REDIRECTS + 1):
+            assert_public_url(current)
+            req = urllib.request.Request(current, headers={
+                "User-Agent": "CodeBee-Market/1.0",
+                "Accept": "*/*",
+            })
+            try:
+                resp = opener.open(req, timeout=30)
+                code = getattr(resp, "status", getattr(resp, "code", 200))
+            except urllib.error.HTTPError as e:
+                code, resp = e.code, e
+            if code not in (301, 302, 303, 307, 308):
+                if isinstance(resp, urllib.error.HTTPError):
+                    raise resp
+                return resp
+            location = resp.headers.get("Location")
+            if not location:
+                _close_quietly(resp)
+                raise ValueError("重定向缺少 Location: %s" % current)
+            _close_quietly(resp)
+            current = urllib.parse.urljoin(current, location)
+            if hop >= _MAX_REDIRECTS:
+                raise ValueError("重定向次数超过上限: %s" % target)
+        raise ValueError("重定向失败: %s" % target)
 
     def _read(open_fn):
         with open_fn() as resp:
@@ -192,17 +192,17 @@ def _fetch(url, cap=_CAP_MANIFEST):
                 chunks.append(chunk)
         return b"".join(chunks)
 
-    try:
-        # 默认 opener 仍读取系统代理，但显式禁用自动重定向。
-        opener = urllib.request.build_opener(
-            _NoRedirect(), urllib.request.HTTPSHandler(context=tlsctx.context()))
-        return _read(lambda: _open(opener, url))
-    except (urllib.error.HTTPError, urllib.error.URLError):
-        # 直连重试：ProxyHandler({}) 显式清空代理；每一跳仍经过 SSRF 校验。
-        opener = urllib.request.build_opener(
-            _NoRedirect(), urllib.request.ProxyHandler({}),
-            urllib.request.HTTPSHandler(context=tlsctx.context()))
-        return _read(lambda: _open(opener, url))
+    try:
+        # 默认 opener 仍读取系统代理，但显式禁用自动重定向。
+        opener = urllib.request.build_opener(
+            _NoRedirect(), urllib.request.HTTPSHandler(context=tlsctx.context()))
+        return _read(lambda: _open(opener, url))
+    except (urllib.error.HTTPError, urllib.error.URLError):
+        # 直连重试：ProxyHandler({}) 显式清空代理；每一跳仍经过 SSRF 校验。
+        opener = urllib.request.build_opener(
+            _NoRedirect(), urllib.request.ProxyHandler({}),
+            urllib.request.HTTPSHandler(context=tlsctx.context()))
+        return _read(lambda: _open(opener, url))
 
 
 # ---------------------------------------------------------------- 清单解析
@@ -810,22 +810,22 @@ def _gh_fetch_files(entry, tmp):
     raise ValueError("jsdelivr 拉取失败: %s/%s（%s）" % (owner, repo, last_err))
 
 
-def _download_git(entry, tmp):
+def _download_git(entry, tmp):
     """git 浅克隆取子目录（Anthropic 生态的 git-subdir 来源）。"""
     if shutil.which("git") is None:
         raise ValueError("本机没有 git，无法安装 git-subdir 来源的插件")
-    inst = entry["install"]
-    # 非 GitHub 来源没有 codeload/jsdelivr 的安全收口，必须在 clone 前
-    # 复用同一公网 HTTPS 网关，避免 git 自己跟随重定向或访问内网。
-    assert_public_url(inst.get("url") or "")
+    inst = entry["install"]
+    # 非 GitHub 来源没有 codeload/jsdelivr 的安全收口，必须在 clone 前
+    # 复用同一公网 HTTPS 网关，避免 git 自己跟随重定向或访问内网。
+    assert_public_url(inst.get("url") or "")
     dst = tmp / "git"
     sub = str(inst.get("path") or "").replace("\\", "/")
     if sub.startswith("/") or ":" in sub or ".." in _rel_parts(sub):
         raise ValueError("插件子目录路径可疑: %s" % inst.get("path"))
-    # git 会自行跟随 HTTP 重定向，而重定向目标无法再经过 assert_public_url；
-    # ��装来源宁可明确失败，也不能让 clone 跳进内网。
-    cmd = ["git", "-c", "http.followRedirects=false", "clone",
-           "--depth", "1", "--single-branch", "--quiet"]
+    # git 会自行跟随 HTTP 重定向，而重定向目标无法再经过 assert_public_url；
+    # ��装来源宁可明确失败，也不能让 clone 跳进内网。
+    cmd = ["git", "-c", "http.followRedirects=false", "clone",
+           "--depth", "1", "--single-branch", "--quiet"]
     if inst.get("ref"):
         cmd += ["--branch", inst["ref"]]
     cmd += [inst["url"], str(dst)]

package/app/core/mocks.py

@@ -1,64 +1,64 @@
-# -*- coding: utf-8 -*-
-"""内置演示/测试智能体（mock）：不消耗任何配额即可跑通全流程。"""
-from __future__ import annotations
-
-import hashlib
-
-
-def _seed(agent_id):
-    return int(hashlib.sha256(agent_id.encode("utf-8")).hexdigest()[:6], 16)
-
-
-def draft_manuscript(task, round_no):
-    """生成一份示例稿件（mock 起草/修订直接落盘的内容）。"""
-    title = task.get("title") or "未命名章节"
-    goal = task.get("goal") or ""
-    return (
-        "# {title}\n\n"
-        "这是第 {r} 轮 mock 草稿（演示用，不消耗模型配额）。\n\n"
-        "## 任务目标\n{goal}\n\n"
-        "## 正文\n"
-        "夜色沿着山脊线缓慢退去，主角终于看清了石门上的刻痕——那不是文字，"
-        "而是一段被反复涂抹又反复显影的名字。他伸手触碰的瞬间，耳边响起的"
-        "却是自己昨夜说过的话。{extra}\n\n"
-        "（本轮修订关注：{focus}）\n"
-    ).format(
-        title=title, r=round_no, goal=goal,
-        extra="这一段在第 2 轮修订中补充了人物动机的伏笔。" if round_no >= 2 else "",
-        focus="节奏与悬念铺排" if round_no == 1 else "人物弧光与首尾呼应",
-    )
-
-
-def implement_note(task):
-    return "（mock 实现）已在目标目录写入 mock-impl.txt 作为变更占位。"
-
-
-def critique(agent_id, round_no, dims, threshold):
-    """确定性评分：第 1 轮略低于阈值，第 2 轮达标，用于验证发布门禁逻辑。"""
-    s = _seed(agent_id)
-    scores = {}
-    for i, d in enumerate(dims):
-        jitter = ((s >> i) % 5) * 0.1
-        scores[d] = round(min(9.5, 4.8 + 1.2 * round_no + jitter), 1)
-    passed = all(v >= threshold for v in scores.values())
-    issues = []
-    if round_no == 1:
-        issues = [
-            {"dim": dims[0], "severity": "major", "note": "开篇信息密度偏低，钩子出现太晚（mock 意见）"},
-            {"dim": dims[-1], "severity": "minor", "note": "段落长短交替不够，读感偏平（mock 意见）"},
-        ]
-    return {
-        "scores": scores,
-        "issues": issues,
-        "summary": "mock 总评：第 %d 轮稿件%s发布阈值" % (round_no, "已达到" if passed else "尚未达到"),
-    }
-
-
-def review(task, verify_passed):
-    return {
-        "pass": bool(verify_passed),
-        "scores": {"正确性": 8.0 if verify_passed else 5.0, "可维护性": 8.0, "安全": 8.5},
-        "issues": [] if verify_passed else [
-            {"severity": "major", "title": "验证命令未通过", "detail": "请检查测试输出（mock 意见）"}],
-        "summary": "mock 代码评审：%s" % ("通过" if verify_passed else "未通过"),
-    }
+# -*- coding: utf-8 -*-
+"""内置演示/测试智能体（mock）：不消耗任何配额即可跑通全流程。"""
+from __future__ import annotations
+
+import hashlib
+
+
+def _seed(agent_id):
+    return int(hashlib.sha256(agent_id.encode("utf-8")).hexdigest()[:6], 16)
+
+
+def draft_manuscript(task, round_no):
+    """生成一份示例稿件（mock 起草/修订直接落盘的内容）。"""
+    title = task.get("title") or "未命名章节"
+    goal = task.get("goal") or ""
+    return (
+        "# {title}\n\n"
+        "这是第 {r} 轮 mock 草稿（演示用，不消耗模型配额）。\n\n"
+        "## 任务目标\n{goal}\n\n"
+        "## 正文\n"
+        "夜色沿着山脊线缓慢退去，主角终于看清了石门上的刻痕——那不是文字，"
+        "而是一段被反复涂抹又反复显影的名字。他伸手触碰的瞬间，耳边响起的"
+        "却是自己昨夜说过的话。{extra}\n\n"
+        "（本轮修订关注：{focus}）\n"
+    ).format(
+        title=title, r=round_no, goal=goal,
+        extra="这一段在第 2 轮修订中补充了人物动机的伏笔。" if round_no >= 2 else "",
+        focus="节奏与悬念铺排" if round_no == 1 else "人物弧光与首尾呼应",
+    )
+
+
+def implement_note(task):
+    return "（mock 实现）已在目标目录写入 mock-impl.txt 作为变更占位。"
+
+
+def critique(agent_id, round_no, dims, threshold):
+    """确定性评分：第 1 轮略低于阈值，第 2 轮达标，用于验证发布门禁逻辑。"""
+    s = _seed(agent_id)
+    scores = {}
+    for i, d in enumerate(dims):
+        jitter = ((s >> i) % 5) * 0.1
+        scores[d] = round(min(9.5, 4.8 + 1.2 * round_no + jitter), 1)
+    passed = all(v >= threshold for v in scores.values())
+    issues = []
+    if round_no == 1:
+        issues = [
+            {"dim": dims[0], "severity": "major", "note": "开篇信息密度偏低，钩子出现太晚（mock 意见）"},
+            {"dim": dims[-1], "severity": "minor", "note": "段落长短交替不够，读感偏平（mock 意见）"},
+        ]
+    return {
+        "scores": scores,
+        "issues": issues,
+        "summary": "mock 总评：第 %d 轮稿件%s发布阈值" % (round_no, "已达到" if passed else "尚未达到"),
+    }
+
+
+def review(task, verify_passed):
+    return {
+        "pass": bool(verify_passed),
+        "scores": {"正确性": 8.0 if verify_passed else 5.0, "可维护性": 8.0, "安全": 8.5},
+        "issues": [] if verify_passed else [
+            {"severity": "major", "title": "验证命令未通过", "detail": "请检查测试输出（mock 意见）"}],
+        "summary": "mock 代码评审：%s" % ("通过" if verify_passed else "未通过"),
+    }