mocode-ai 1.1.7 → 1.1.9

package/dist/repl/index.js

@@ -1,8 +1,9 @@
 import readline from 'node:readline/promises';
 import { emitKeypressEvents } from 'node:readline';
 import { stdin, stdout } from 'node:process';
-import { config, updateModelConfig, isModelConfigured, updateMemoryConfig, isMemoryEnabled, isSubAgentEnabled, updateSubAgentConfig, updateLanguageConfig, languageFromShell, buildBasePrompt, getPlanModeSuffix, hasCodegraphIndex, } from '../config/index.js';
+import { config, updateModelConfig, isModelConfigured, updateMemoryConfig, isMemoryEnabled, isSubAgentEnabled, updateSubAgentConfig, isFrontendToolsEnabled, updateFrontendToolsConfig, updateLanguageConfig, languageFromShell, buildBasePrompt, getPlanModeSuffix, hasCodegraphIndex, reinjectActivePlanIntoSystem, DEFAULT_CONTEXT_WINDOW_TOKENS, } from '../config/index.js';
 import { getLanguage, normalizeLanguage, t, } from '../i18n/index.js';
+import { DEFAULT_BUDGET_POLICY } from '../context/budget.js';
 import { updateConfigKey, writeConfigKeys, CONFIG_PATH } from '../config/file.js';
 import { deletePreset, getPreset, isValidPresetName, listPresets, migrateCurrentToPreset, savePreset, } from '../config/presets.js';
 import { runAgent } from '../agent/index.js';
@@ -71,6 +72,13 @@ function buildSlashCommands() {
                 { name: 'status', value: '/subagent status', desc: d('commands.subagentStatus') },
             ],
         },
+        {
+            name: '/fe', desc: d('commands.fe'), children: [
+                { name: 'on', value: '/fe on', desc: d('commands.feOn') },
+                { name: 'off', value: '/fe off', desc: d('commands.feOff') },
+                { name: 'status', value: '/fe status', desc: d('commands.feStatus') },
+            ],
+        },
         { name: '/theme', desc: d('commands.theme') },
         {
             name: '/model', desc: d('commands.model'), children: [
@@ -142,15 +150,15 @@ function themeDescription(name) {
 }
 /** /model 预设后端:选一个预填 baseURL,仍可逐项改。base_url 取自 README 常见表。 */
 const MODEL_PRESETS = [
-    { label: 'GLM(智谱)', baseURL: 'https://open.bigmodel.cn/api/v3', model: 'glm-4.6', window: 128000 },
-    { label: 'DeepSeek', baseURL: 'https://api.deepseek.com', model: 'deepseek-chat', window: 64000 },
-    { label: 'Qwen(阿里)', baseURL: 'https://dashscope.aliyuncs.com/compatible-mode/v1', model: 'qwen-plus', window: 128000 },
+    { label: 'GLM(智谱)', baseURL: 'https://open.bigmodel.cn/api/v3', model: 'glm-4.6', window: DEFAULT_CONTEXT_WINDOW_TOKENS },
+    { label: 'DeepSeek', baseURL: 'https://api.deepseek.com', model: 'deepseek-chat', window: DEFAULT_CONTEXT_WINDOW_TOKENS },
+    { label: 'Qwen(阿里)', baseURL: 'https://dashscope.aliyuncs.com/compatible-mode/v1', model: 'qwen-plus', window: DEFAULT_CONTEXT_WINDOW_TOKENS },
     // MiniMax OpenAI 兼容端点(https://platform.minimax.io/docs/api-reference/text-openai-api)。
     // MiniMax-M3 为唯一支持图片/视频输入的模型;M2 系列纯文本(见 llm/capabilities.ts KNOWN_TEXT_ONLY_PREFIXES)。
-    { label: 'MiniMax', baseURL: 'https://api.minimax.io/v1', model: 'MiniMax-M3', window: 1000000 },
-    { label: '本地 Ollama', baseURL: 'http://localhost:11434/v1', model: 'qwen2.5:7b', window: 32768 },
-    { label: '本地 vLLM', baseURL: 'http://localhost:8000/v1', model: 'default', window: 32768 },
-    { label: '自定义 base_url', baseURL: '', model: '', window: 128000 },
+    { label: 'MiniMax', baseURL: 'https://api.minimax.io/v1', model: 'MiniMax-M3', window: DEFAULT_CONTEXT_WINDOW_TOKENS },
+    { label: '本地 Ollama', baseURL: 'http://localhost:11434/v1', model: 'qwen2.5:7b', window: DEFAULT_CONTEXT_WINDOW_TOKENS },
+    { label: '本地 vLLM', baseURL: 'http://localhost:8000/v1', model: 'default', window: DEFAULT_CONTEXT_WINDOW_TOKENS },
+    { label: '自定义 base_url', baseURL: '', model: '', window: DEFAULT_CONTEXT_WINDOW_TOKENS },
 ];
 /** apiKey 脱敏:只露末 4 位,前面打星号(显示用,绝不把明文 key 写进内容区)。 */
 function maskKey(k) {
@@ -217,7 +225,7 @@ function renderContextBar(history) {
     const bar = '█'.repeat(filled) + '░'.repeat(W - filled);
     const src = contextState.lastUsage ? t('status.measured') : t('status.estimated');
     const k = (n) => `${Math.round(n / 1000)}k`;
-    const pctCol = pct >= config.compactThreshold ? ui.yellow : ui.accent;
+    const pctCol = pct >= DEFAULT_BUDGET_POLICY.pressureTriggerRatio ? ui.yellow : ui.accent;
     const lifecycle = contextState.lifecycleStats;
     const archived = computePruneStats(history);
     const artifactStats = contextState.artifactStats;
@@ -242,7 +250,7 @@ function renderContextBarInline(history) {
     const filled = Math.round(pct * W);
     const bar = '█'.repeat(filled) + '░'.repeat(W - filled);
     const k = (n) => `${Math.round(n / 1000)}k`;
-    const pctCol = pct >= config.compactThreshold ? ui.yellow : ui.accent;
+    const pctCol = pct >= DEFAULT_BUDGET_POLICY.pressureTriggerRatio ? ui.yellow : ui.accent;
     return `${ui.gray}[${pctCol}${bar}${ui.reset}] ${pctCol}${Math.round(pct * 100)}%${ui.reset} ${ui.dim}${k(est)}/${k(win)}${ui.reset}`;
 }
 // 宿主侧记录已结束轮次最后看到的 plan。notes.md 仍完整保留，只抑制未变化的旧 plan 状态栏，
@@ -1031,10 +1039,14 @@ export async function startRepl(initialHistory, sessionId, sandboxRootOverride,
             // 直接给原文对中文用户不友好。这里翻译成中文 + 提示 /model 换视觉模型。
             const msg = e instanceof Error ? e.message : String(e);
             const lower = msg.toLowerCase();
-            const looksLikeImageError = /\b(image|vision|multimodal|vision[-_ ]?capable|unsupported (media|image))\b/i.test(lower) ||
-                /不支持(视觉|图片|图像|多模态)/.test(msg) ||
-                (/图片|图像|视觉|多模态/.test(msg) && /不支持|invalid|reject|fail/i.test(lower));
-            if (looksLikeImageError) {
+            // 只有明确的「能力不支持」才显示换模型提示。不能仅因错误里出现 image/vision
+            // 就下结论:例如 MiniMax 会因 `image_url.detail=auto` 返 400 invalid params，
+            // 模型本身仍支持视觉。参数/格式错误应保留原始 provider 诊断，方便准确修复。
+            const isImageParameterError = /\b(?:invalid|unsupported)\s+(?:image\s+)?(?:detail|parameter|param|format|url)\b/i.test(lower);
+            const isVisionUnsupportedError = !isImageParameterError && (/\b(?:does not support|doesn't support|not supported|unsupported)\b.{0,48}\b(?:image|vision|multimodal|media)\b/i.test(lower) ||
+                /\b(?:image|vision|multimodal|media)\b.{0,48}\b(?:is not supported|not supported|unsupported)\b/i.test(lower) ||
+                /(?:不支持|不具备).{0,12}(?:视觉|图片|图像|多模态)|(?:视觉|图片|图像|多模态).{0,12}(?:不支持|不可用)/.test(msg));
+            if (isVisionUnsupportedError) {
                 layout.contentWrite(`${ui.red}${t('repl.errorLabel')}${ui.reset} ${t('repl.visionUnsupported', { model: `${ui.accent}${config.model}${ui.reset}` })}${ui.dim}${t('repl.originalError', { message: msg })}${ui.reset}\n`);
                 layout.contentWrite(`${ui.dim}${t('repl.visionHint')}${ui.reset}\n`);
             }
@@ -1049,6 +1061,7 @@ export async function startRepl(initialHistory, sessionId, sandboxRootOverride,
             const waitingForPlanApproval = ok && planMode && getAgentMode() === 'plan';
             if (!waitingForPlanApproval)
                 settlePlanStatus();
+            layout.setLiveUsage(undefined); // 轮末清实时 chip,回 INPUT 态不再显示
             refreshStatusBase(history, lastTurnUsage);
             layout.drawStatusBar();
         }
@@ -1463,6 +1476,9 @@ export async function startRepl(initialHistory, sessionId, sandboxRootOverride,
             // focus 透传到 compact_history action 的 LLM 摘要 prompt。
             // 返回 SchedulerRunLog 给 UI 显示决策;退化路径(开关关时)在 manualCompact 内部走 compactHistory。
             const log = await manualCompact(history, focus, { force });
+            // ② compact 后把活跃 plan 重注入系统提示（history[0]），避免 agent 因上下文压缩丢失执行计划。
+            if (log.compactHistoryCalled)
+                reinjectActivePlanIntoSystem(history);
             const d = log.compactDetail;
             appendCurrentSessionRuntimeEvent('compact', {
                 source: 'manual',
@@ -1915,7 +1931,7 @@ export async function startRepl(initialHistory, sessionId, sandboxRootOverride,
                     const res = await promptIntervention({
                         type: 'input',
                         title: 'CONTEXT_WINDOW_TOKENS',
-                        detail: '模型上下文窗口(须对齐真实模型;GLM≈128k,DeepSeek-V3≈64k)。回车采纳预填值。',
+                        detail: '模型上下文窗口，全局默认 256k；如需不同窗口可手动覆盖。回车采纳预填值。',
                         seed: String(preset.window || config.contextWindowTokens),
                     });
                     if (res.action === 'cancelled') {
@@ -2006,6 +2022,44 @@ export async function startRepl(initialHistory, sessionId, sandboxRootOverride,
             layout.contentWrite(`${enabled ? ui.green : ui.yellow}${t(enabled ? 'subagent.changedOn' : 'subagent.changedOff')}${ui.reset}\n`);
             continue;
         }
+        if (line === '/fe' ||
+            line.startsWith('/fe ') ||
+            line === '/frontend' ||
+            line.startsWith('/frontend ')) {
+            // /fe — 前端工具簇总开关(browser / dev_server / screenshot / view_image)。
+            // 无参切换 on/off;有参 on|off 显式;status 只读。设计同 /subagent:单一来源
+            // isFrontendToolsEnabled();关闭时 4 个工具不进模型 schema(refreshChatTools 过滤)、
+            // 运行时 getRuntimeDisabledTools 兜底拦截、plan 模式 getPlanDisabledTools 也剔除。默认 false。
+            const raw = line.startsWith('/fe ')
+                ? line.slice('/fe '.length)
+                : line.startsWith('/frontend ')
+                    ? line.slice('/frontend '.length)
+                    : line === '/frontend'
+                        ? ''
+                        : line.slice('/fe'.length);
+            const arg = raw.trim().toLowerCase();
+            if (arg === '' || arg === 'status') {
+                const enabled = isFrontendToolsEnabled();
+                const state = t(enabled ? 'fe.stateOn' : 'fe.stateOff');
+                layout.contentWrite(`${ui.accent}${t('fe.status', { state })}${ui.reset}\n` +
+                    `${ui.dim}MOCODE_FRONTEND_TOOLS_ENABLED=${enabled ? 'true' : 'false'} · ${CONFIG_PATH}${ui.reset}\n`);
+                continue;
+            }
+            if (arg !== 'on' && arg !== 'off') {
+                layout.contentWrite(`${ui.yellow}${t('fe.usage')}${ui.reset}\n`);
+                continue;
+            }
+            const enabled = arg === 'on';
+            if (enabled !== isFrontendToolsEnabled()) {
+                updateFrontendToolsConfig(enabled);
+                updateConfigKey('MOCODE_FRONTEND_TOOLS_ENABLED', enabled ? 'true' : 'false');
+                refreshChatTools();
+                history[0] = { role: 'system', content: buildSystemMessage(getAgentMode() === 'plan') };
+                layout.rewriteBanner(bannerLines(banner()));
+            }
+            layout.contentWrite(`${enabled ? ui.green : ui.yellow}${t(enabled ? 'fe.changedOn' : 'fe.changedOff')}${ui.reset}\n`);
+            continue;
+        }
         if (line === '/memory_switch' ||
             line.startsWith('/memory_switch ') ||
             line === '/memory_status' ||

package/dist/runtime/browser-manager.js

@@ -0,0 +1,299 @@
+// Playwright 浏览器会话管理器。
+//
+// 设计要点:
+//  - 会话跨工具调用存活(Browser 单例 + 每会话独立 BrowserContext/Page),这样 agent 可以
+//    navigate → click → screenshot 连续操作同一个页面,而不是每次重开浏览器丢状态。
+//  - playwright 用动态 import:启动 mocode 不该为一个可选能力付加载成本,缺浏览器二进制时
+//    也能给出明确的 `npx playwright install chromium` 指引而不是崩在模块加载期。
+//  - 默认只允许回环地址。agent 能驱动真浏览器意味着它能发任意请求,若放开就等于给了
+//    SSRF / 内网扫描能力。放开需用户显式设 MOCODE_BROWSER_ALLOW_REMOTE=true。
+//  - 采集 console / pageerror / requestfailed 到有界 ring buffer:前端问题往往只在控制台可见,
+//    截图看不出来。
+import { randomBytes } from 'node:crypto';
+export class BrowserManagerError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+        this.name = 'BrowserManagerError';
+    }
+}
+const sessions = new Map();
+const DIAGNOSTIC_LIMIT = 200;
+const DEFAULT_TIMEOUT_MS = 15_000;
+const MAX_TIMEOUT_MS = 60_000;
+const DEFAULT_VIEWPORT = { width: 1280, height: 800 };
+let browserPromise = null;
+let launchedHeaded = false;
+function errorMessage(error) {
+    return error instanceof Error ? error.message : String(error);
+}
+export function resolveTimeout(input) {
+    const value = Number(input ?? DEFAULT_TIMEOUT_MS);
+    if (!Number.isFinite(value))
+        return DEFAULT_TIMEOUT_MS;
+    return Math.min(Math.max(value, 500), MAX_TIMEOUT_MS);
+}
+function remoteAllowed() {
+    return process.env.MOCODE_BROWSER_ALLOW_REMOTE === 'true';
+}
+/** 默认只放行 http/https 回环地址;拒绝 file:/data:/javascript: 等本地读取与脚本注入面。 */
+export function validateNavigationUrl(input) {
+    let url;
+    try {
+        url = new URL(input);
+    }
+    catch {
+        throw new BrowserManagerError('INVALID_ARGUMENTS', `Invalid url: ${input}`);
+    }
+    if (url.protocol !== 'http:' && url.protocol !== 'https:') {
+        throw new BrowserManagerError('SANDBOX_DENIED', `Only http and https URLs are allowed (received ${url.protocol}).`);
+    }
+    if (url.username || url.password) {
+        throw new BrowserManagerError('SANDBOX_DENIED', 'URLs with embedded credentials are not allowed.');
+    }
+    const host = url.hostname.toLowerCase().replace(/^\[|\]$/g, '');
+    const loopback = host === 'localhost' || host === '127.0.0.1' || host === '::1';
+    if (!loopback && !remoteAllowed()) {
+        throw new BrowserManagerError('SANDBOX_DENIED', `Only localhost, 127.0.0.1, and ::1 are allowed by default (received ${url.hostname}). ` +
+            'Set MOCODE_BROWSER_ALLOW_REMOTE=true to permit remote navigation.');
+    }
+    return url;
+}
+async function launchBrowser(headed) {
+    let playwright;
+    try {
+        playwright = await import('playwright');
+    }
+    catch (error) {
+        throw new BrowserManagerError('EXECUTION_ERROR', `Playwright is not available: ${errorMessage(error)}. Run "npm install" first.`);
+    }
+    try {
+        return await playwright.chromium.launch({ headless: !headed });
+    }
+    catch (error) {
+        throw new BrowserManagerError('EXECUTION_ERROR', `Unable to launch Chromium: ${errorMessage(error)}. If the browser binary is missing, run "npx playwright install chromium".`);
+    }
+}
+async function getBrowser(headed) {
+    const existing = browserPromise ? await browserPromise.catch(() => null) : null;
+    // headless 与 headed 是不同的进程模式;请求切换时重开,避免默默给出与请求不符的模式。
+    if (existing?.isConnected() && launchedHeaded === headed)
+        return existing;
+    if (existing?.isConnected())
+        await existing.close().catch(() => { });
+    launchedHeaded = headed;
+    browserPromise = launchBrowser(headed);
+    try {
+        return await browserPromise;
+    }
+    catch (error) {
+        browserPromise = null;
+        throw error;
+    }
+}
+function record(session, bucket, line) {
+    const target = session[bucket];
+    target.push(line);
+    if (target.length > DIAGNOSTIC_LIMIT)
+        target.splice(0, target.length - DIAGNOSTIC_LIMIT);
+}
+export async function openSession(opts = {}) {
+    const headed = opts.headed === true;
+    const browser = await getBrowser(headed);
+    const context = await browser.newContext({ viewport: DEFAULT_VIEWPORT });
+    const page = await context.newPage();
+    page.setDefaultTimeout(DEFAULT_TIMEOUT_MS);
+    const session = {
+        sessionId: `page-${randomBytes(3).toString('hex')}`,
+        context,
+        page,
+        headed,
+        console: [],
+        pageErrors: [],
+        failedRequests: [],
+    };
+    page.on('console', (message) => {
+        record(session, 'console', `[${message.type()}] ${message.text()}`);
+    });
+    page.on('pageerror', (error) => record(session, 'pageErrors', errorMessage(error)));
+    page.on('requestfailed', (request) => {
+        record(session, 'failedRequests', `${request.method()} ${request.url()} — ${request.failure()?.errorText ?? 'failed'}`);
+    });
+    sessions.set(session.sessionId, session);
+    return describe(session);
+}
+function requireSession(sessionId) {
+    if (sessionId) {
+        const session = sessions.get(sessionId);
+        if (!session) {
+            const known = [...sessions.keys()];
+            throw new BrowserManagerError('INVALID_ARGUMENTS', known.length
+                ? `Unknown browser sessionId "${sessionId}". Known sessions: ${known.join(', ')}.`
+                : `Unknown browser sessionId "${sessionId}". Call action=open first.`);
+        }
+        return session;
+    }
+    // 只有一个会话时允许省略 sessionId,减少模型出错面;多会话必须显式指定。
+    const all = [...sessions.values()];
+    if (all.length === 1)
+        return all[0];
+    if (all.length === 0) {
+        throw new BrowserManagerError('INVALID_ARGUMENTS', 'No browser session is open. Call action=open first.');
+    }
+    throw new BrowserManagerError('INVALID_ARGUMENTS', `Multiple browser sessions are open; specify sessionId. Known sessions: ${all.map((s) => s.sessionId).join(', ')}.`);
+}
+function describe(session) {
+    const viewport = session.page.viewportSize() ?? DEFAULT_VIEWPORT;
+    return {
+        sessionId: session.sessionId,
+        url: session.page.url(),
+        title: '',
+        headed: session.headed,
+        viewport,
+    };
+}
+async function describeAsync(session) {
+    const base = describe(session);
+    return { ...base, title: await session.page.title().catch(() => '') };
+}
+/** Playwright 的超时错误统一映射成结构化 TIMEOUT,便于 agent 区分「选择器没出现」与真故障。 */
+function wrapActionError(error) {
+    if (error instanceof BrowserManagerError)
+        throw error;
+    const message = errorMessage(error);
+    if (/Timeout .* exceeded|waiting for/i.test(message)) {
+        throw new BrowserManagerError('TIMEOUT', message);
+    }
+    throw new BrowserManagerError('EXECUTION_ERROR', message);
+}
+function diagnostics(session) {
+    return {
+        console: session.console.slice(-20),
+        pageErrors: session.pageErrors.slice(-20),
+        failedRequests: session.failedRequests.slice(-20),
+    };
+}
+async function finish(session, action) {
+    return { action, ...(await describeAsync(session)), diagnostics: diagnostics(session) };
+}
+export async function navigate(opts) {
+    const session = requireSession(opts.sessionId);
+    const url = validateNavigationUrl(opts.url);
+    try {
+        const response = await session.page.goto(url.toString(), {
+            timeout: resolveTimeout(opts.timeoutMs),
+            waitUntil: 'domcontentloaded',
+        });
+        if (response && !response.ok()) {
+            record(session, 'failedRequests', `GET ${url.toString()} — HTTP ${response.status()}`);
+        }
+    }
+    catch (error) {
+        wrapActionError(error);
+    }
+    return finish(session, 'navigate');
+}
+export async function click(opts) {
+    const session = requireSession(opts.sessionId);
+    try {
+        await session.page.click(opts.selector, { timeout: resolveTimeout(opts.timeoutMs) });
+    }
+    catch (error) {
+        wrapActionError(error);
+    }
+    return finish(session, 'click');
+}
+export async function fill(opts) {
+    const session = requireSession(opts.sessionId);
+    try {
+        await session.page.fill(opts.selector, opts.value, { timeout: resolveTimeout(opts.timeoutMs) });
+    }
+    catch (error) {
+        wrapActionError(error);
+    }
+    return finish(session, 'fill');
+}
+export async function press(opts) {
+    const session = requireSession(opts.sessionId);
+    const timeout = resolveTimeout(opts.timeoutMs);
+    try {
+        if (opts.selector)
+            await session.page.press(opts.selector, opts.key, { timeout });
+        else
+            await session.page.keyboard.press(opts.key);
+    }
+    catch (error) {
+        wrapActionError(error);
+    }
+    return finish(session, 'press');
+}
+export async function waitFor(opts) {
+    const session = requireSession(opts.sessionId);
+    try {
+        await session.page.waitForSelector(opts.selector, { timeout: resolveTimeout(opts.timeoutMs) });
+    }
+    catch (error) {
+        wrapActionError(error);
+    }
+    return finish(session, 'wait_for');
+}
+export async function readText(opts) {
+    const session = requireSession(opts.sessionId);
+    const limit = Math.min(Math.max(Number(opts.limit ?? 4_000), 100), 32_000);
+    let text;
+    try {
+        text = opts.selector
+            ? (await session.page.textContent(opts.selector, { timeout: DEFAULT_TIMEOUT_MS })) ?? ''
+            : await session.page.innerText('body');
+    }
+    catch (error) {
+        wrapActionError(error);
+    }
+    const normalized = text.replace(/\n{3,}/g, '\n\n').trim();
+    return {
+        ...(await finish(session, 'text')),
+        text: normalized.length > limit ? `${normalized.slice(0, limit)}\n… (truncated)` : normalized,
+    };
+}
+export async function screenshot(opts) {
+    const session = requireSession(opts.sessionId);
+    const timeout = resolveTimeout(opts.timeoutMs);
+    let buffer;
+    try {
+        buffer = opts.selector
+            ? await session.page.locator(opts.selector).screenshot({ timeout, type: 'png' })
+            : await session.page.screenshot({ timeout, type: 'png', fullPage: opts.fullPage === true });
+    }
+    catch (error) {
+        wrapActionError(error);
+    }
+    return { ...(await finish(session, 'screenshot')), buffer };
+}
+export function listSessions() {
+    return [...sessions.values()].map(describe);
+}
+export async function closeSession(sessionId) {
+    const session = requireSession(sessionId);
+    sessions.delete(session.sessionId);
+    await session.context.close().catch(() => { });
+    if (sessions.size === 0 && browserPromise) {
+        const browser = await browserPromise.catch(() => null);
+        browserPromise = null;
+        await browser?.close().catch(() => { });
+    }
+    return { sessionId: session.sessionId, closed: true };
+}
+/** 全局退出清理:关闭所有页面与浏览器进程。幂等。 */
+export async function closeAllBrowsers() {
+    for (const session of [...sessions.values()]) {
+        sessions.delete(session.sessionId);
+        await session.context.close().catch(() => { });
+    }
+    const pending = browserPromise;
+    browserPromise = null;
+    if (!pending)
+        return;
+    const browser = await pending.catch(() => null);
+    await browser?.close().catch(() => { });
+}