coze_lab 0.1.43 → 0.1.45

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "coze_lab",
-  "version": "0.1.43",
+  "version": "0.1.45",
   "description": "Configure local AI agents (Claude Code, Codex, OpenClaw) to report traces to CozeLoop",
   "keywords": [
     "cozeloop",
@@ -21,7 +21,6 @@
     "index.js",
     "scripts/claude-code/cozeloop_hook.py",
     "scripts/codex/cozeloop_hook.py",
-    "scripts/shared/cozeloop_refresh.py",
     "scripts/openclaw/dist/",
     "scripts/openclaw/openclaw.plugin.json",
     "scripts/openclaw/package.json"

package/scripts/claude-code/cozeloop_hook.py

@@ -22,8 +22,6 @@ import sys
 import glob
 import hashlib
 import time
-import urllib.request
-import urllib.error
 from datetime import datetime
 from pathlib import Path
 from typing import Optional, List, Dict, Any
@@ -105,12 +103,7 @@ else:
 
 # --- Configuration ---
 DEBUG = os.environ.get("CC_COZELOOP_DEBUG", "").lower() == "true"
-_COZELOOP_CLIENT_ID = "08972682140163281554629748278108.app.coze"
-_COZE_API = "https://api.coze.cn"
 _OTEL_SUFFIX = "/v1/loop/opentelemetry"
-_REFRESH_THRESHOLD = 10 * 60  # refresh when < 10 minutes remain
-_FORCE_REFRESH_COOLDOWN_MS = 60 * 1000
-_REFRESH_LOCK_STALE = 30
 _DEFAULT_WORKSPACE_ID = "7649231955045072915"  # hardcoded spaceID fallback
 
 
@@ -256,230 +249,17 @@ def debug_log(message: str):
     if DEBUG:
         print(f"[COZELOOP_HOOK_DEBUG] {datetime.now().isoformat()} - {message}", file=sys.stderr)
 
-# --- Token refresh --------------------------------------------------------
-
-def _get_credentials_path() -> Path:
-    return Path.home() / ".cozeloop" / "credentials.json"
-
-def _get_refresh_state_path() -> Path:
-    return Path.home() / ".cozeloop" / "refresh-state.json"
-
-def _get_refresh_lock_path() -> Path:
-    return Path.home() / ".cozeloop" / "refresh-state.lock"
-
-def _load_credentials() -> Optional[Dict]:
-    path = _get_credentials_path()
-    if not path.exists():
-        return None
-    try:
-        return json.loads(path.read_text())
-    except Exception:
-        return None
-
-def _save_credentials(creds: Dict):
-    path = _get_credentials_path()
-    path.parent.mkdir(parents=True, exist_ok=True)
-    path.write_text(json.dumps(creds, indent=2))
-    os.chmod(path, 0o600)
-
-def _load_refresh_state() -> Dict[str, Any]:
-    path = _get_refresh_state_path()
-    if not path.exists():
-        return {}
-    try:
-        return json.loads(path.read_text())
-    except Exception:
-        return {}
-
-def _save_refresh_state(patch: Dict[str, Any]):
-    path = _get_refresh_state_path()
-    try:
-        path.parent.mkdir(parents=True, exist_ok=True)
-        state = _load_refresh_state()
-        state.update(patch)
-        path.write_text(json.dumps(state, indent=2))
-        os.chmod(path, 0o600)
-    except Exception:
-        pass
-
-def _with_refresh_lock(fn):
-    lock_path = _get_refresh_lock_path()
-    lock_path.parent.mkdir(parents=True, exist_ok=True)
-    for _ in range(24):
-        fd = None
-        try:
-            fd = os.open(str(lock_path), os.O_CREAT | os.O_EXCL | os.O_WRONLY, 0o600)
-            try:
-                return fn()
-            finally:
-                try:
-                    os.close(fd)
-                except Exception:
-                    pass
-                try:
-                    lock_path.unlink()
-                except Exception:
-                    pass
-        except FileExistsError:
-            try:
-                if time.time() - lock_path.stat().st_mtime > _REFRESH_LOCK_STALE:
-                    lock_path.unlink()
-                    continue
-            except Exception:
-                pass
-            time.sleep(0.25)
-    hook_log("forced refresh skipped because refresh lock is busy")
-    return None
-
-def _refresh_token(refresh_token: str) -> Optional[str]:
-    """Call Coze refresh token API. Returns new access_token or None on failure."""
-    try:
-        payload = json.dumps({
-            "grant_type": "refresh_token",
-            "client_id": _COZELOOP_CLIENT_ID,
-            "refresh_token": refresh_token,
-        }).encode()
-        req = urllib.request.Request(
-            f"{_COZE_API}/api/permission/oauth2/token",
-            data=payload,
-            headers={
-                "Content-Type": "application/json",
-            },
-        )
-        with urllib.request.urlopen(req, timeout=10) as resp:
-            data = json.loads(resp.read())
-        if data.get("access_token"):
-            existing = _load_credentials() or {}
-            creds = {
-                "access_token": data["access_token"],
-                "refresh_token": data.get("refresh_token", refresh_token),
-                "expires_at": data.get("expires_in", 0) * 1000,  # unix timestamp in seconds
-                "workspace_id": existing.get("workspace_id", ""),
-            }
-            _save_credentials(creds)
-            debug_log("Token refreshed successfully.")
-            return creds["access_token"]
-    except Exception as e:
-        debug_log(f"Token refresh failed: {e}")
-    return None
-
-def force_refresh_token_after_upload_failure(reason: str = "upload_failure", current_token: Optional[str] = None) -> Optional[str]:
-    """Force-refresh local credentials after an upload failure, with cross-process throttling."""
-    is_cloud = os.environ.get("COZELAB_ONBOARD_CLOUD", "").lower() in ("1", "true", "yes")
-    if is_cloud:
-        hook_log("upload failure token refresh skipped in cloud mode")
-        return None
-
-    creds = _load_credentials()
-    if not creds or not creds.get("refresh_token"):
-        hook_log("upload failure token refresh skipped; no local refresh_token")
-        return None
-
-    cached = creds.get("access_token")
-    now_ms = int(time.time() * 1000)
-    last_ms = int(_load_refresh_state().get("last_forced_refresh_ms", 0) or 0)
-    if last_ms and now_ms - last_ms < _FORCE_REFRESH_COOLDOWN_MS:
-        if cached and cached != current_token:
-            hook_log("forced refresh throttled; reuse newer cached token")
-            return cached
-        hook_log(f"forced refresh throttled ageMs={now_ms - last_ms}")
-        return None
-
-    def _locked_refresh():
-        locked_creds = _load_credentials()
-        if not locked_creds or not locked_creds.get("refresh_token"):
-            hook_log("forced refresh skipped in lock; credentials missing")
-            return None
-        locked_cached = locked_creds.get("access_token")
-        locked_now_ms = int(time.time() * 1000)
-        locked_last_ms = int(_load_refresh_state().get("last_forced_refresh_ms", 0) or 0)
-        if locked_last_ms and locked_now_ms - locked_last_ms < _FORCE_REFRESH_COOLDOWN_MS:
-            if locked_cached and locked_cached != current_token:
-                hook_log("forced refresh already done by another process; reuse token")
-                return locked_cached
-            hook_log(f"forced refresh skipped in lock ageMs={locked_now_ms - locked_last_ms}")
-            return None
-        _save_refresh_state({
-            "last_forced_refresh_ms": locked_now_ms,
-            "last_reason": (reason or "upload_failure")[:120],
-        })
-        hook_log(f"forced token refresh after upload failure reason={(reason or 'upload_failure')[:120]}")
-        refreshed = _refresh_token(locked_creds["refresh_token"])
-        if refreshed:
-            hook_log("forced token refresh OK")
-        else:
-            hook_log("forced token refresh FAILED")
-        return refreshed
-
-    return _with_refresh_lock(_locked_refresh)
-
-def _normalize_api_base_url(url: str) -> str:
-    base = (url or "").strip().rstrip("/")
-    if not base:
-        return base
-    # 剥除已知 loop 路径后缀，还原纯 API base。
-    # 关键：含 /api 的变体必须连 /api 整体剥掉，否则残留 /api 会拼出 /api/v1/loop/... → 后端 400。
-    # 顺序：更长 / 带 /api 的在前，裸 /v1 最后，避免误匹配短后缀。
-    suffixes = (
-        "/api/v1/loop/opentelemetry/v1/traces",
-        _OTEL_SUFFIX + "/v1/traces",
-        "/api/v1/loop/opentelemetry",
-        _OTEL_SUFFIX,
-        "/api/v1",
-        "/v1",
-    )
-    for suffix in suffixes:
-        if base.endswith(suffix):
-            return base[:-len(suffix)].rstrip("/")
-    return base
-
-def get_api_base_url() -> str:
-    return _normalize_api_base_url(
-        os.environ.get("COZELOOP_API_BASE_URL", "")
-    )
-
-def _token_from_credentials() -> Optional[str]:
-    creds = _load_credentials()
-    if not creds:
-        return None
-    # expires_at 由 index.js 以毫秒存储；先减去当前毫秒时间再换算成秒，与 _REFRESH_THRESHOLD(秒) 比较。
-    remaining = (creds.get("expires_at", 0) - time.time() * 1000) / 1000
-    if remaining > _REFRESH_THRESHOLD:
-        debug_log(f"Cached token valid, expires in {int(remaining)}s.")
-        return creds.get("access_token")
-    if creds.get("refresh_token"):
-        debug_log(f"Token expiring in {int(remaining)}s, refreshing...")
-        new_token = _refresh_token(creds["refresh_token"])
-        if new_token:
-            return new_token
-        debug_log("Refresh failed.")
-    return None
-
+# --- Token resolution -----------------------------------------------------
 
 def get_fresh_token() -> Optional[str]:
-    """Return a valid access token, refreshing if needed."""
+    """Return the token injected by onboard. Do not read local credentials."""
     env_token = os.environ.get("COZELOOP_API_TOKEN")
     env_coze_token = os.environ.get("COZE_API_TOKEN")
-    is_cloud = os.environ.get("COZELAB_ONBOARD_CLOUD", "").lower() in ("1", "true", "yes")
-    if is_cloud:
-        return env_token or env_coze_token or _token_from_credentials()
-
-    # Local onboard used to write a short-lived access token into settings.local.json.
-    # If credentials exist but cannot be refreshed, do not fall back to that stale
-    # env token; failing closed keeps state from advancing on a known-bad token.
-    creds = _load_credentials()
-    if creds:
-        return _token_from_credentials()
-    if env_token and not env_coze_token:
-        token = _token_from_credentials()
-        if token:
-            return token
-        return env_token
     if env_token:
         return env_token
-    if env_coze_token:
+    if os.environ.get("COZELAB_ONBOARD_CLOUD", "").lower() in ("1", "true", "yes"):
         return env_coze_token
-    return _token_from_credentials()
+    return None
 
 # -------------------------------------------------------------------------
 
@@ -1084,7 +864,7 @@ def _build_history_messages(history_turns: List[Dict[str, Any]]) -> list:
 
 # --- CozeLoop Trace Reporting ---
 
-def send_turns_to_cozeloop(turns: List[Dict[str, Any]], session_id: str, history_turns: Optional[List[Dict[str, Any]]] = None, retry_on_auth_failure: bool = True, coze_tags_override: Optional[Dict[str, str]] = None):
+def send_turns_to_cozeloop(turns: List[Dict[str, Any]], session_id: str, history_turns: Optional[List[Dict[str, Any]]] = None, coze_tags_override: Optional[Dict[str, str]] = None):
     """Send conversation turns to CozeLoop.
 
     Span hierarchy:
@@ -1107,14 +887,7 @@ def send_turns_to_cozeloop(turns: List[Dict[str, Any]], session_id: str, history
         print(f"[CozeLoop] Token 获取成功 ({token[:12]}...)", file=sys.stderr)
     else:
         print("[CozeLoop] 警告: 未找到有效 Token，上报可能失败", file=sys.stderr)
-    creds = _load_credentials()
-    # 云端模式：sandbox 注入的 COZELOOP_WORKSPACE_ID 必须优先于 credentials.json。
-    # 否则残留的本地 credentials.json workspace_id 会覆盖云端注入，导致 trace 上报错位。
-    is_cloud = os.environ.get("COZELAB_ONBOARD_CLOUD", "").lower() in ("1", "true", "yes")
-    if is_cloud:
-        workspace_id = os.environ.get("COZELOOP_WORKSPACE_ID", "") or (creds or {}).get("workspace_id") or _DEFAULT_WORKSPACE_ID
-    else:
-        workspace_id = (creds or {}).get("workspace_id") or os.environ.get("COZELOOP_WORKSPACE_ID", "") or _DEFAULT_WORKSPACE_ID
+    workspace_id = os.environ.get("COZELOOP_WORKSPACE_ID", "") or _DEFAULT_WORKSPACE_ID
     os.environ["COZELOOP_WORKSPACE_ID"] = workspace_id
     upload_events: List[str] = []
     client_kwargs = {
@@ -1617,12 +1390,6 @@ def send_turns_to_cozeloop(turns: List[Dict[str, Any]], session_id: str, history
 
     if upload_events:
         debug_log(f"Upload failed, state not advanced. Last failure: {upload_events[-1][:500]}")
-        if retry_on_auth_failure:
-            new_token = force_refresh_token_after_upload_failure(upload_events[-1], token)
-            if new_token:
-                os.environ["COZELOOP_API_TOKEN"] = new_token
-                hook_log("retry upload once after forced token refresh")
-                return send_turns_to_cozeloop(turns, session_id, history_turns, retry_on_auth_failure=False, coze_tags_override=coze_tags_override)
         return None
 
     return True