fengming 0.3.7 → 0.3.9

package/dist/mcp-http-CamghE-W.js

@@ -0,0 +1,583 @@
+import { c as normalizeOptionalString } from "./string-coerce-DKw2K5wM.js";
+import { t as isTruthyEnvValue } from "./env-CuDPoYuT.js";
+import { o as isRecord } from "./record-coerce-Btbek4uV.js";
+import { i as formatErrorMessage } from "./errors-C_Wa6a5T.js";
+import { v as uniqueValues } from "./string-normalization-B8G0vlWE.js";
+import { a as logWarn, t as logDebug } from "./logger-CT4TpBlo.js";
+import { t as safeEqualSecret } from "./secret-equal-DDhtiQsP.js";
+import { r as isLoopbackAddress } from "./net-DAt4-3lj.js";
+import { s as checkBrowserOrigin } from "./auth-CLEZzwsq.js";
+import { i as getRuntimeConfig } from "./io-T1CV3Z1L.js";
+import { i as normalizeMessageChannel } from "./message-channel-normalize-CaOaCinb.js";
+import "./message-channel-DcN_7tYD.js";
+import { i as resolveMainSessionKey } from "./main-session-BxJmPEXx.js";
+import "./sessions-CtMqsEs2.js";
+import { m as runBeforeToolCallHook } from "./agent-tools.before-tool-call-CNJrIi9o.js";
+import { a as getHeader } from "./http-auth-utils-Bs3UwND5.js";
+import "./http-utils-DgzAJFUp.js";
+import { t as resolveGatewayScopedTools } from "./tool-resolution-CzsLs-87.js";
+import crypto from "node:crypto";
+import { createServer } from "node:http";
+//#region src/gateway/mcp-http.protocol.ts
+const MCP_LOOPBACK_SERVER_NAME = "fengming";
+const MCP_LOOPBACK_SERVER_VERSION = "0.1.0";
+const MCP_LOOPBACK_SUPPORTED_PROTOCOL_VERSIONS = ["2025-03-26", "2024-11-05"];
+function jsonRpcResult(id, result) {
+	return {
+		jsonrpc: "2.0",
+		id: id ?? null,
+		result
+	};
+}
+function jsonRpcError(id, code, message) {
+	return {
+		jsonrpc: "2.0",
+		id: id ?? null,
+		error: {
+			code,
+			message
+		}
+	};
+}
+//#endregion
+//#region src/gateway/mcp-http.handlers.ts
+function normalizeToolCallContent(result) {
+	const content = result?.content;
+	if (Array.isArray(content)) return content.map((block) => ({
+		type: block.type ?? "text",
+		text: block.text ?? (typeof block === "string" ? block : JSON.stringify(block))
+	}));
+	return [{
+		type: "text",
+		text: typeof result === "string" ? result : JSON.stringify(result)
+	}];
+}
+async function handleMcpJsonRpc(params) {
+	const { id, method, params: methodParams } = params.message;
+	switch (method) {
+		case "initialize": {
+			const clientVersion = methodParams?.protocolVersion ?? "";
+			return jsonRpcResult(id, {
+				protocolVersion: MCP_LOOPBACK_SUPPORTED_PROTOCOL_VERSIONS.find((version) => version === clientVersion) ?? MCP_LOOPBACK_SUPPORTED_PROTOCOL_VERSIONS[0],
+				capabilities: { tools: {} },
+				serverInfo: {
+					name: MCP_LOOPBACK_SERVER_NAME,
+					version: MCP_LOOPBACK_SERVER_VERSION
+				}
+			});
+		}
+		case "notifications/initialized":
+		case "notifications/cancelled": return null;
+		case "tools/list": return jsonRpcResult(id, { tools: params.toolSchema });
+		case "tools/call": {
+			const toolName = methodParams?.name;
+			const toolArgs = methodParams?.arguments ?? {};
+			const tool = params.tools.find((candidate) => candidate.name === toolName);
+			if (!tool) return jsonRpcResult(id, {
+				content: [{
+					type: "text",
+					text: `Tool not available: ${toolName}`
+				}],
+				isError: true
+			});
+			const toolCallId = `mcp-${crypto.randomUUID()}`;
+			try {
+				const hookResult = await runBeforeToolCallHook({
+					toolName,
+					params: toolArgs,
+					toolCallId,
+					ctx: params.hookContext,
+					signal: params.signal
+				});
+				if (hookResult.blocked) return jsonRpcResult(id, {
+					content: [{
+						type: "text",
+						text: hookResult.reason
+					}],
+					isError: true
+				});
+				return jsonRpcResult(id, {
+					content: normalizeToolCallContent(await tool.execute(toolCallId, hookResult.params, params.signal)),
+					isError: false
+				});
+			} catch (error) {
+				return jsonRpcResult(id, {
+					content: [{
+						type: "text",
+						text: formatErrorMessage(error) || "tool execution failed"
+					}],
+					isError: true
+				});
+			}
+		}
+		default: return jsonRpcError(id, -32601, `Method not found: ${method}`);
+	}
+}
+//#endregion
+//#region src/gateway/mcp-http.loopback-runtime.ts
+let activeRuntime;
+function getActiveMcpLoopbackRuntime() {
+	return activeRuntime ? { ...activeRuntime } : void 0;
+}
+function setActiveMcpLoopbackRuntime(runtime) {
+	activeRuntime = { ...runtime };
+}
+function resolveMcpLoopbackBearerToken(runtime, senderIsOwner) {
+	return senderIsOwner ? runtime.ownerToken : runtime.nonOwnerToken;
+}
+function clearActiveMcpLoopbackRuntimeByOwnerToken(ownerToken) {
+	if (activeRuntime?.ownerToken === ownerToken) activeRuntime = void 0;
+}
+function createMcpLoopbackServerConfig(port) {
+	return { mcpServers: { fengming: {
+		type: "http",
+		url: `http://127.0.0.1:${port}/mcp`,
+		headers: {
+			Authorization: "Bearer ${FENGMING_MCP_TOKEN}",
+			"x-session-key": "${FENGMING_MCP_SESSION_KEY}",
+			"x-fengming-agent-id": "${FENGMING_MCP_AGENT_ID}",
+			"x-fengming-account-id": "${FENGMING_MCP_ACCOUNT_ID}",
+			"x-fengming-message-channel": "${FENGMING_MCP_MESSAGE_CHANNEL}",
+			"x-fengming-current-channel-id": "${FENGMING_MCP_CURRENT_CHANNEL_ID}",
+			"x-fengming-current-thread-ts": "${FENGMING_MCP_CURRENT_THREAD_TS}",
+			"x-fengming-current-message-id": "${FENGMING_MCP_CURRENT_MESSAGE_ID}",
+			"x-fengming-inbound-event-kind": "${FENGMING_MCP_INBOUND_EVENT_KIND}",
+			"x-fengming-source-reply-delivery-mode": "${FENGMING_MCP_SOURCE_REPLY_DELIVERY_MODE}"
+		}
+	} } };
+}
+//#endregion
+//#region src/gateway/mcp-http.request.ts
+const MAX_MCP_BODY_BYTES = 1048576;
+function shouldLogMcpLoopbackHttp() {
+	return isTruthyEnvValue(process.env.FENGMING_CLI_BACKEND_LOG_OUTPUT) || isTruthyEnvValue(process.env.FENGMING_LIVE_CLI_BACKEND_DEBUG);
+}
+function logMcpLoopbackHttp(step, details) {
+	if (!shouldLogMcpLoopbackHttp()) return;
+	console.error(`[mcp-loopback] ${step} ${JSON.stringify(details)}`);
+}
+function resolveScopedSessionKey(cfg, rawSessionKey) {
+	const trimmed = normalizeOptionalString(rawSessionKey);
+	return !trimmed || trimmed === "main" ? resolveMainSessionKey(cfg) : trimmed;
+}
+function normalizeMcpInboundEventKind(value) {
+	const trimmed = normalizeOptionalString(value);
+	return trimmed === "room_event" || trimmed === "user_request" ? trimmed : void 0;
+}
+function normalizeMcpSourceReplyDeliveryMode(value) {
+	const trimmed = normalizeOptionalString(value);
+	return trimmed === "automatic" || trimmed === "message_tool_only" ? trimmed : void 0;
+}
+function rejectsBrowserLoopbackRequest(req) {
+	const origin = getHeader(req, "origin");
+	if (!origin) return false;
+	return !checkBrowserOrigin({
+		requestHost: getHeader(req, "host"),
+		origin,
+		isLocalClient: isLoopbackAddress(req.socket?.remoteAddress)
+	}).ok;
+}
+function validateMcpLoopbackRequest(params) {
+	let url;
+	try {
+		url = new URL(params.req.url ?? "/", `http://${params.req.headers.host ?? "localhost"}`);
+	} catch {
+		logMcpLoopbackHttp("reject", {
+			reason: "bad_request_url",
+			method: params.req.method ?? ""
+		});
+		params.res.writeHead(400, { "Content-Type": "application/json" });
+		params.res.end(JSON.stringify({ error: "bad_request" }));
+		return null;
+	}
+	if (params.req.method === "GET" && url.pathname.startsWith("/.well-known/")) {
+		params.res.writeHead(404);
+		params.res.end();
+		return null;
+	}
+	if (url.pathname !== "/mcp") {
+		logMcpLoopbackHttp("reject", {
+			reason: "not_found",
+			method: params.req.method ?? "",
+			path: url.pathname
+		});
+		params.res.writeHead(404, { "Content-Type": "application/json" });
+		params.res.end(JSON.stringify({ error: "not_found" }));
+		return null;
+	}
+	if (params.req.method !== "POST") {
+		logMcpLoopbackHttp("reject", {
+			reason: "method_not_allowed",
+			method: params.req.method ?? "",
+			path: url.pathname
+		});
+		params.res.writeHead(405, { Allow: "POST" });
+		params.res.end();
+		return null;
+	}
+	if (rejectsBrowserLoopbackRequest(params.req)) {
+		logMcpLoopbackHttp("reject", {
+			reason: "forbidden_origin",
+			method: params.req.method ?? "",
+			origin: getHeader(params.req, "origin") ?? ""
+		});
+		params.res.writeHead(403, { "Content-Type": "application/json" });
+		params.res.end(JSON.stringify({ error: "forbidden" }));
+		return null;
+	}
+	const authHeader = getHeader(params.req, "authorization") ?? "";
+	const ownerTokenMatched = safeEqualSecret(authHeader, `Bearer ${params.ownerToken}`);
+	const nonOwnerTokenMatched = safeEqualSecret(authHeader, `Bearer ${params.nonOwnerToken}`);
+	const senderIsOwner = ownerTokenMatched ? true : nonOwnerTokenMatched ? false : null;
+	if (senderIsOwner === null) {
+		logMcpLoopbackHttp("reject", {
+			reason: "unauthorized",
+			method: params.req.method ?? "",
+			hasAuthorization: authHeader.length > 0
+		});
+		params.res.writeHead(401, { "Content-Type": "application/json" });
+		params.res.end(JSON.stringify({ error: "unauthorized" }));
+		return null;
+	}
+	const contentType = getHeader(params.req, "content-type") ?? "";
+	if (!contentType.startsWith("application/json")) {
+		logMcpLoopbackHttp("reject", {
+			reason: "unsupported_media_type",
+			method: params.req.method ?? "",
+			contentType
+		});
+		params.res.writeHead(415, { "Content-Type": "application/json" });
+		params.res.end(JSON.stringify({ error: "unsupported_media_type" }));
+		return null;
+	}
+	return { senderIsOwner };
+}
+async function readMcpHttpBody(req) {
+	return await new Promise((resolve, reject) => {
+		const chunks = [];
+		let received = 0;
+		req.on("data", (chunk) => {
+			received += chunk.length;
+			if (received > MAX_MCP_BODY_BYTES) {
+				req.destroy();
+				reject(/* @__PURE__ */ new Error(`Request body exceeds ${MAX_MCP_BODY_BYTES} bytes`));
+				return;
+			}
+			chunks.push(chunk);
+		});
+		req.on("end", () => resolve(Buffer.concat(chunks).toString("utf-8")));
+		req.on("error", reject);
+	});
+}
+function resolveMcpRequestContext(req, cfg, auth) {
+	return {
+		sessionKey: resolveScopedSessionKey(cfg, getHeader(req, "x-session-key")),
+		messageProvider: normalizeMessageChannel(getHeader(req, "x-fengming-message-channel")) ?? void 0,
+		currentChannelId: normalizeOptionalString(getHeader(req, "x-fengming-current-channel-id")),
+		currentThreadTs: normalizeOptionalString(getHeader(req, "x-fengming-current-thread-ts")),
+		currentMessageId: normalizeOptionalString(getHeader(req, "x-fengming-current-message-id")),
+		accountId: normalizeOptionalString(getHeader(req, "x-fengming-account-id")),
+		inboundEventKind: normalizeMcpInboundEventKind(getHeader(req, "x-fengming-inbound-event-kind")),
+		sourceReplyDeliveryMode: normalizeMcpSourceReplyDeliveryMode(getHeader(req, "x-fengming-source-reply-delivery-mode")),
+		senderIsOwner: auth.senderIsOwner
+	};
+}
+//#endregion
+//#region src/gateway/mcp-http.schema.ts
+function flattenUnionSchema(raw) {
+	const variants = raw.anyOf ?? raw.oneOf;
+	if (!Array.isArray(variants) || variants.length === 0) return raw;
+	const mergedProps = {};
+	const requiredSets = [];
+	for (const variant of variants) {
+		const props = variant.properties;
+		if (props) for (const [key, schema] of Object.entries(props)) {
+			if (!(key in mergedProps)) {
+				mergedProps[key] = schema;
+				continue;
+			}
+			const existing = mergedProps[key];
+			const incoming = schema;
+			if (Array.isArray(existing.enum) && Array.isArray(incoming.enum)) {
+				mergedProps[key] = {
+					...existing,
+					enum: uniqueValues([...existing.enum, ...incoming.enum])
+				};
+				continue;
+			}
+			if ("const" in existing && "const" in incoming && existing.const !== incoming.const) {
+				const merged = {
+					...existing,
+					enum: [existing.const, incoming.const]
+				};
+				delete merged.const;
+				mergedProps[key] = merged;
+				continue;
+			}
+			logWarn(`mcp loopback: conflicting schema definitions for "${key}", keeping the first variant`);
+		}
+		requiredSets.push(new Set(Array.isArray(variant.required) ? variant.required : []));
+	}
+	const required = requiredSets.length > 0 ? [...requiredSets[0] ?? []].filter((key) => requiredSets.every((set) => set.has(key))) : [];
+	const { anyOf: _anyOf, oneOf: _oneOf, ...rest } = raw;
+	return {
+		...rest,
+		type: "object",
+		properties: mergedProps,
+		required
+	};
+}
+function buildMcpToolSchema(tools) {
+	return tools.map((tool) => {
+		let raw = tool.parameters && typeof tool.parameters === "object" ? { ...tool.parameters } : {};
+		if (raw.anyOf || raw.oneOf) raw = flattenUnionSchema(raw);
+		if (raw.type !== "object") raw.type = "object";
+		if (!raw.properties) raw.properties = {};
+		return {
+			name: tool.name,
+			description: tool.description,
+			inputSchema: raw
+		};
+	});
+}
+//#endregion
+//#region src/gateway/mcp-http.runtime.ts
+const TOOL_CACHE_TTL_MS = 3e4;
+const NATIVE_TOOL_EXCLUDE = new Set([
+	"read",
+	"write",
+	"edit",
+	"apply_patch",
+	"exec",
+	"process"
+]);
+function resolveMcpLoopbackScopedTools(params) {
+	const scoped = resolveGatewayScopedTools({
+		cfg: params.cfg,
+		sessionKey: params.sessionKey,
+		messageProvider: params.messageProvider,
+		currentChannelId: params.currentChannelId,
+		currentThreadTs: params.currentThreadTs,
+		currentMessageId: params.currentMessageId,
+		accountId: params.accountId,
+		inboundEventKind: params.inboundEventKind,
+		sourceReplyDeliveryMode: params.sourceReplyDeliveryMode,
+		senderIsOwner: params.senderIsOwner,
+		surface: "loopback",
+		excludeToolNames: NATIVE_TOOL_EXCLUDE
+	});
+	return {
+		agentId: scoped.agentId,
+		tools: scoped.tools
+	};
+}
+var McpLoopbackToolCache = class {
+	#entries = /* @__PURE__ */ new Map();
+	resolve(params) {
+		const cacheKey = [
+			params.sessionKey,
+			params.messageProvider ?? "",
+			params.currentChannelId ?? "",
+			params.currentThreadTs ?? "",
+			params.currentMessageId != null ? String(params.currentMessageId) : "",
+			params.accountId ?? "",
+			params.inboundEventKind ?? "",
+			params.sourceReplyDeliveryMode ?? "",
+			params.senderIsOwner === true ? "owner" : "non-owner"
+		].join("\0");
+		const now = Date.now();
+		const cached = this.#entries.get(cacheKey);
+		if (cached && cached.configRef === params.cfg && now - cached.time < TOOL_CACHE_TTL_MS) return cached;
+		const next = resolveMcpLoopbackScopedTools({
+			cfg: params.cfg,
+			sessionKey: params.sessionKey,
+			messageProvider: params.messageProvider,
+			currentChannelId: params.currentChannelId,
+			currentThreadTs: params.currentThreadTs,
+			currentMessageId: params.currentMessageId,
+			accountId: params.accountId,
+			inboundEventKind: params.inboundEventKind,
+			sourceReplyDeliveryMode: params.sourceReplyDeliveryMode,
+			senderIsOwner: params.senderIsOwner
+		});
+		const nextEntry = {
+			agentId: next.agentId,
+			tools: next.tools,
+			toolSchema: buildMcpToolSchema(next.tools),
+			configRef: params.cfg,
+			time: now
+		};
+		this.#entries.set(cacheKey, nextEntry);
+		for (const [key, entry] of this.#entries) if (now - entry.time >= TOOL_CACHE_TTL_MS) this.#entries.delete(key);
+		return nextEntry;
+	}
+};
+//#endregion
+//#region src/gateway/mcp-http.ts
+let activeMcpLoopbackServer;
+let activeMcpLoopbackServerPromise = null;
+function shouldLogMcpLoopbackTraffic() {
+	return isTruthyEnvValue(process.env.FENGMING_CLI_BACKEND_LOG_OUTPUT) || isTruthyEnvValue(process.env.FENGMING_LIVE_CLI_BACKEND_DEBUG);
+}
+function logMcpLoopbackTraffic(step, details) {
+	if (!shouldLogMcpLoopbackTraffic()) return;
+	console.error(`[mcp-loopback] ${step} ${JSON.stringify(details)}`);
+}
+function createRequestAbortSignal(req, res) {
+	const controller = new AbortController();
+	const abort = () => {
+		if (!controller.signal.aborted) controller.abort();
+	};
+	const abortIfRequestIncomplete = () => {
+		if (!req.complete) abort();
+	};
+	const abortIfResponseStillOpen = () => {
+		if (!res.writableEnded) abort();
+	};
+	req.once("close", abortIfRequestIncomplete);
+	res.once("close", abortIfResponseStillOpen);
+	if (req.destroyed && !req.complete) abort();
+	return {
+		signal: controller.signal,
+		cleanup: () => {
+			req.off("close", abortIfRequestIncomplete);
+			res.off("close", abortIfResponseStillOpen);
+		}
+	};
+}
+async function startMcpLoopbackServer(port = 0) {
+	const ownerToken = crypto.randomBytes(32).toString("hex");
+	const nonOwnerToken = crypto.randomBytes(32).toString("hex");
+	const toolCache = new McpLoopbackToolCache();
+	const httpServer = createServer((req, res) => {
+		const auth = validateMcpLoopbackRequest({
+			req,
+			res,
+			ownerToken,
+			nonOwnerToken
+		});
+		if (!auth) return;
+		const requestAbort = createRequestAbortSignal(req, res);
+		(async () => {
+			try {
+				const body = await readMcpHttpBody(req);
+				const parsed = JSON.parse(body);
+				const cfg = getRuntimeConfig();
+				const requestContext = resolveMcpRequestContext(req, cfg, auth);
+				const scopedTools = toolCache.resolve({
+					cfg,
+					sessionKey: requestContext.sessionKey,
+					messageProvider: requestContext.messageProvider,
+					currentChannelId: requestContext.currentChannelId,
+					currentThreadTs: requestContext.currentThreadTs,
+					currentMessageId: requestContext.currentMessageId,
+					accountId: requestContext.accountId,
+					inboundEventKind: requestContext.inboundEventKind,
+					sourceReplyDeliveryMode: requestContext.sourceReplyDeliveryMode,
+					senderIsOwner: requestContext.senderIsOwner
+				});
+				const messages = Array.isArray(parsed) ? parsed : [parsed];
+				logMcpLoopbackTraffic("request", {
+					batchSize: messages.length,
+					methods: messages.map((message) => message.method),
+					sessionKey: requestContext.sessionKey,
+					inboundEventKind: requestContext.inboundEventKind,
+					senderIsOwner: requestContext.senderIsOwner === true,
+					toolCount: scopedTools.toolSchema.length,
+					cronVisible: scopedTools.toolSchema.some((tool) => tool.name === "cron")
+				});
+				const responses = [];
+				for (const message of messages) {
+					const response = await handleMcpJsonRpc({
+						message,
+						tools: scopedTools.tools,
+						toolSchema: scopedTools.toolSchema,
+						hookContext: {
+							agentId: scopedTools.agentId,
+							config: cfg,
+							sessionKey: requestContext.sessionKey
+						},
+						signal: requestAbort.signal
+					});
+					if (response !== null) {
+						const toolName = message.method === "tools/call" && isRecord(message.params) ? message.params.name : void 0;
+						const isError = isRecord(response) && isRecord(response.result) && response.result.isError === true;
+						logMcpLoopbackTraffic("response", {
+							method: message.method,
+							toolName: typeof toolName === "string" ? toolName : void 0,
+							isError
+						});
+						responses.push(response);
+					}
+				}
+				if (responses.length === 0) {
+					res.writeHead(202);
+					res.end();
+					return;
+				}
+				const payload = Array.isArray(parsed) ? JSON.stringify(responses) : JSON.stringify(responses[0]);
+				res.writeHead(200, { "Content-Type": "application/json" });
+				res.end(payload);
+			} catch (error) {
+				logWarn(`mcp loopback: request handling failed: ${formatErrorMessage(error)}`);
+				logMcpLoopbackTraffic("request-failed", { message: formatErrorMessage(error) });
+				if (!res.headersSent) {
+					res.writeHead(400, { "Content-Type": "application/json" });
+					res.end(JSON.stringify(jsonRpcError(null, -32700, "Parse error")));
+				}
+			} finally {
+				requestAbort.cleanup();
+			}
+		})();
+	});
+	await new Promise((resolve, reject) => {
+		httpServer.once("error", reject);
+		httpServer.listen(port, "127.0.0.1", () => {
+			httpServer.removeListener("error", reject);
+			resolve();
+		});
+	});
+	const address = httpServer.address();
+	if (!address || typeof address === "string") throw new Error("mcp loopback did not bind to a TCP port");
+	setActiveMcpLoopbackRuntime({
+		port: address.port,
+		ownerToken,
+		nonOwnerToken
+	});
+	logDebug(`mcp loopback listening on 127.0.0.1:${address.port}`);
+	const server = {
+		port: address.port,
+		close: () => new Promise((resolve, reject) => {
+			httpServer.close((error) => {
+				if (!error) {
+					clearActiveMcpLoopbackRuntimeByOwnerToken(ownerToken);
+					if (activeMcpLoopbackServer === server) activeMcpLoopbackServer = void 0;
+				}
+				if (error) {
+					reject(error);
+					return;
+				}
+				resolve();
+			});
+		})
+	};
+	return server;
+}
+async function ensureMcpLoopbackServer(port = 0) {
+	if (activeMcpLoopbackServer) return activeMcpLoopbackServer;
+	if (!activeMcpLoopbackServerPromise) activeMcpLoopbackServerPromise = startMcpLoopbackServer(port).then((server) => {
+		activeMcpLoopbackServer = server;
+		return server;
+	}).finally(() => {
+		activeMcpLoopbackServerPromise = null;
+	});
+	return activeMcpLoopbackServerPromise;
+}
+async function closeMcpLoopbackServer() {
+	const server = activeMcpLoopbackServer ?? (activeMcpLoopbackServerPromise ? await activeMcpLoopbackServerPromise : void 0);
+	if (!server) return;
+	activeMcpLoopbackServer = void 0;
+	await server.close();
+}
+//#endregion
+export { createMcpLoopbackServerConfig as a, resolveMcpLoopbackScopedTools as i, ensureMcpLoopbackServer as n, getActiveMcpLoopbackRuntime as o, startMcpLoopbackServer as r, resolveMcpLoopbackBearerToken as s, closeMcpLoopbackServer as t };