mu-agent-bridge 0.0.0-stage → 1.0.0

package/README.md

@@ -1,3 +1,121 @@
-# Temporary Holding Version
+# mu-agent-bridge 动态插件平台
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+运行时使用 TypeScript/Node.js，实现一个可动态发现、启动、停止、重载和安装插件的 daemon。
+当前插件包括千问办公 `qwenwork`、DeepSeek Harness `dsh`、豆包 `doubao`，以及插件化管理后台
+`abweb`。插件之间独立失败，管理 API 和 OpenAI 兼容接口由同一个本地控制服务提供。
+
+## 快速开始
+
+```powershell
+npm install
+npm test
+npm run start
+```
+
+默认监听 `http://127.0.0.1:26107`，管理页面为 `http://127.0.0.1:26107/abweb/`，管理 API 为 `/api/health`、`/api/plugins`，千问办公的
+OpenAI 兼容 API 为 `/v1/models` 和 `/v1/chat/completions`。管理页面位于 `/abweb`。
+千问办公插件使用 CDP `9226`；没有运行千问办公时，daemon 仍会启动，qwenwork 会显示为失败状态，
+可以通过管理 API 重载。
+
+安装后使用 `mab start` 启动。旧桥仍可使用 `17893`，不会与管理页面冲突。局域网访问时设置
+`AGENT_BRIDGE_HOST=0.0.0.0` 和 `AGENT_BRIDGE_TOKEN`，然后访问
+`http://<Windows 主机 IP>:26107/abweb/`。页面输入令牌后可管理插件；请只在可信网络使用。
+已有 AID 从 EvolCore 的 `ec agent list/show` 读取，只显示当前 AUN 已连接且本机有私钥的身份，
+禁用和断线身份不列出。管理页可指定新 AID 与 owner AID，调用 EvolCore 创建 Agent 和身份；
+新身份连接成功后才会进入列表。
+“已连接 AID”按来源分为 EvolCore 和 mu-agent-bridge 两组；后者只包含通过本页面新建、
+且当前已连接的 AID。分组由 mab 状态目录中的创建记录决定，不改变 EvolCore 的身份存储。
+关联 DSH 或千问办公插件时，管理服务会将所选 AID 的 EvolCore 执行基座分别配置为本机
+`/dsh/v1` 或 `/v1` OpenAI 接口，然后重载该 Agent；AUN 入站消息由 EvolCore 转给插件，
+回复仍由 EvolCore 经 AUN 发送。该操作会覆盖所选 AID 当前的执行基座。
+其他插件的 AID 关联目前只保存配置项，不自动改变 EvolCore 执行基座。
+Windows 可运行 `start-mab.ps1` 注册并启动登录时自动运行的计划任务；令牌保存在
+`%USERPROFILE%\.mab\token.txt`，页面输入该令牌即可使用管理 API。
+
+本机打开 `http://127.0.0.1:26107/abweb/` 无需配置码。局域网管理页可用一次性配置码配对。
+在 Windows 主机运行 `mab pair`，将显示的 6 位码输入
+abweb 的“配置码”栏；配对码 10 分钟有效，只能使用一次，连续输错 5 次后需重新执行
+`mab pair`。配对成功后浏览器在当前会话保存访问凭证。配置码只能从 Windows 本机的
+`127.0.0.1` 接口取得，远程浏览器不能读取。
+
+环境变量：`AGENT_BRIDGE_PORT`、`AGENT_BRIDGE_HOST`、`AGENT_BRIDGE_TOKEN`、
+`AGENT_BRIDGE_PLUGINS_DIR`、`AGENT_BRIDGE_STATE_DIR`。默认插件目录是仓库的 `plugins/`，状态目录
+是 Windows 的 `%APPDATA%\agent-bridge\state`。
+
+## npm 插件
+
+默认包 `mu-agent-bridge` 内置千问办公和管理页面；其他插件单独发布为 npm 包。安装与发布说明见
+[`docs/npm-publishing.md`](docs/npm-publishing.md)。
+
+`mab start` 启动时会查询核心包和托管插件的 npm 最新版本，检查状态保存于 mab 状态目录的
+`versions.json`，abweb 的“版本管理”区域可查看。托管插件发现新版本后会自动下载、验证并替换；
+升级失败会恢复旧插件并继续启动。Windows 的 `start-mab.ps1` 登录计划任务会在启动 daemon 前
+更新全局核心包，健康检查失败时恢复备份。全局单独安装的插件及 Linux 核心自动升级暂不受管理。
+
+运行时会发现核心包依赖和 `AGENT_BRIDGE_PLUGIN_PACKAGES` 中声明的 npm 包。插件包在自己的
+`package.json` 中声明 `agentBridge.plugin`，平台复用统一的 `activate`、`deactivate`、`health`、
+`handle` 生命周期。已加载插件可以通过管理 API 重载；新增 npm 包后重启 daemon 最可靠。
+
+插件仍在 daemon 的同一个 Node.js 进程内运行。修改插件入口依赖后应重启 daemon，避免模块缓存
+影响新代码。
+
+npm 尚未发布时，核心包内置的千问办公与 abweb 仍会出现在插件下拉框。abweb 的“安装本地插件”
+可填写 **Windows 主机上**包含 `plugin.json` 的目录路径，例如编译后的
+`C:\path\to\agent_bridge\packages\dsh`；安装后可在下拉框中启动。已内置的千问办公无需再次安装。
+“安装 npm 插件”只适用于包已经公开发布的情况。npm 发布令牌仅供发布脚本向 npm 官网认证，
+与 abweb 配置码无关；账号锁定期间无需填写发布令牌。
+
+## 开发目录
+
+开发 checkout 仍支持 `plugins/<id>/plugin.json` 平铺目录。设置 `AGENT_BRIDGE_PLUGINS_DIR`
+可以使用其他插件目录；这条路径用于本地开发，不是公开 npm 包的安装方式。
+
+## 旧桥入口
+
+仓库仍保留 Python bridge 作为兼容入口：
+
+- `src/llprobe-qwen-bridge.py`：连接千问办公 CDP `9226`，默认身份 `qwenbg.agentid.cn`
+- `src/llprobe-wb-bridge.py`：调用 CodeBuddy CLI
+
+## 准备环境
+
+在 Windows PowerShell 中执行：
+
+```powershell
+.\setup.ps1
+```
+
+脚本会创建 `.venv` 并安装 `fastaun` 与 `aiohttp`。CodeBuddy 桥还需要已登录的
+`@tencent-ai/codebuddy-code` 和 PATH 中的 Node.js。若 CodeBuddy 不在默认 npm
+目录，可设置：
+
+```powershell
+$env:CODEBUDDY_NPM_DIR = 'C:\path\to\node_modules\@tencent-ai\codebuddy-code'
+```
+
+千问工作区默认使用 `%APPDATA%\QwenWorkCN\workspace`，可用 `$env:QWEN_WORKSPACE`
+覆盖；AUN 数据默认使用 `$env:EVOLCORE_HOME` 或用户目录下的 `.evolcore`。
+千问 CDP 端口默认为 `9226`，也可用 `$env:QWEN_CDP_PORT` 覆盖。
+
+## 自检与运行
+
+```powershell
+.\.venv\Scripts\python.exe src\llprobe-wb-bridge.py --test "你好"
+.\.venv\Scripts\python.exe src\llprobe-qwen-bridge.py --probe
+.\.venv\Scripts\python.exe src\llprobe-qwen-bridge.py --direct "hi"
+.\.venv\Scripts\python.exe src\llprobe-wb-bridge.py --aid <AID>
+.\.venv\Scripts\python.exe src\llprobe-qwen-bridge.py --aid <AID>
+```
+
+两个桥都只加载已有 AID；首次使用前请先在相同的 `EVOLCORE_HOME` 中注册身份。
+
+## TypeScript 自检
+
+```powershell
+npm install
+npm test
+npm run self-test -- hi
+```
+
+Agent 通过 `AgentRegistry` 注册；DSH 也可以作为动态 `dsh` 插件加载。DeepSeek Harness 不在默认
+Windows 路径时，可设置 `DSH_INSTALL_DIR`。

package/dist/src-ts/agent.js

@@ -0,0 +1,10 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AgentError = void 0;
+class AgentError extends Error {
+    constructor(message, options) {
+        super(message, options);
+        this.name = "AgentError";
+    }
+}
+exports.AgentError = AgentError;

package/dist/src-ts/bridge.js

@@ -0,0 +1,23 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BridgeRouter = void 0;
+class BridgeRouter {
+    registry;
+    agentName;
+    sessions = new Map();
+    constructor(registry, agentName) {
+        this.registry = registry;
+        this.agentName = agentName;
+    }
+    async handle(sender, task) {
+        const response = await this.registry.create(this.agentName).send({ task, sessionId: this.sessions.get(sender) });
+        if (response.sessionId)
+            this.sessions.set(sender, response.sessionId);
+        return response;
+    }
+    /** Route a model request through the dynamic plugin registry when available. */
+    async handleModel(model, task, routes) {
+        return routes.handle(model, { task, sessionId: this.sessions.get(model) });
+    }
+}
+exports.BridgeRouter = BridgeRouter;

package/dist/src-ts/cli.js

@@ -0,0 +1,182 @@
+#!/usr/bin/env node
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+const node_path_1 = require("node:path");
+const node_http_1 = require("node:http");
+const node_fs_1 = require("node:fs");
+const node_os_1 = require("node:os");
+const control_server_1 = require("./control-server");
+const dsh_agent_1 = require("./dsh-agent");
+const registry_1 = require("./registry");
+const bridge_1 = require("./bridge");
+const plugin_manager_1 = require("./plugin-manager");
+const logger = {
+    info(message, fields) { console.log(`[agent-bridge] ${message}`, fields ?? ""); },
+    warn(message, fields) { console.warn(`[agent-bridge] ${message}`, fields ?? ""); },
+    error(message, fields) { console.error(`[agent-bridge] ${message}`, fields ?? ""); },
+};
+function stateDirectory() {
+    if (process.env.AGENT_BRIDGE_STATE_DIR)
+        return (0, node_path_1.resolve)(process.env.AGENT_BRIDGE_STATE_DIR);
+    const appData = process.env.APPDATA ?? (0, node_path_1.resolve)((0, node_os_1.homedir)(), ".agent-bridge");
+    return (0, node_path_1.resolve)(appData, "agent-bridge", "state");
+}
+async function selfTest(task) {
+    const registry = new registry_1.AgentRegistry();
+    const compiledPatch = (0, node_path_1.resolve)(__dirname, "headless-account.patch.yml");
+    const sourcePatch = (0, node_path_1.resolve)(process.cwd(), "src-ts", "headless-account.patch.yml");
+    const patchPath = (0, node_fs_1.existsSync)(compiledPatch) ? compiledPatch : sourcePatch;
+    registry.register("dsh", () => new dsh_agent_1.DshAgent({ patchPath }));
+    const response = await new bridge_1.BridgeRouter(registry, "dsh").handle("self-test", task);
+    console.log(response.text);
+    if (response.sessionId)
+        console.error(`session=${response.sessionId}`);
+    return 0;
+}
+async function pair() {
+    const port = Number(process.env.AGENT_BRIDGE_PORT ?? "26107");
+    const result = await new Promise((resolve, reject) => {
+        const req = (0, node_http_1.request)({ host: "127.0.0.1", port, path: "/api/pair-code", method: "GET" }, (res) => {
+            let body = "";
+            res.setEncoding("utf8");
+            res.on("data", (chunk) => body += chunk);
+            res.on("end", () => {
+                let value;
+                try {
+                    value = JSON.parse(body);
+                }
+                catch {
+                    reject(new Error("配对码响应格式错误"));
+                    return;
+                }
+                if (res.statusCode === 200)
+                    resolve(value);
+                else
+                    reject(new Error(value.error ?? `HTTP ${res.statusCode}`));
+            });
+        });
+        req.on("error", reject);
+        req.end();
+    });
+    const minutes = Math.max(0, Math.round(((result.expiresAt ?? Date.now()) - Date.now()) / 60000));
+    console.log(`配对码: ${result.code}（约 ${minutes} 分钟内有效，仅可使用一次）`);
+    return 0;
+}
+async function serve() {
+    const manager = new plugin_manager_1.PluginManager({
+        pluginsDir: (0, node_path_1.resolve)(process.env.AGENT_BRIDGE_PLUGINS_DIR ?? (0, node_path_1.resolve)(__dirname, "..", "..", "plugins")),
+        stateDir: stateDirectory(),
+        logger,
+    });
+    await manager.discover();
+    await manager.versions.load();
+    const coreVersion = await Promise.resolve().then(() => __importStar(require("node:fs/promises"))).then(({ readFile }) => readFile((0, node_path_1.resolve)(__dirname, "../../package.json"), "utf8").then((value) => JSON.parse(value).version).catch(() => "0.0.0"));
+    const checkedVersions = await Promise.all([manager.versions.checkPackage("mu-agent-bridge", coreVersion), ...manager.list().map((plugin) => {
+            const info = manager.packageInfo(plugin.id);
+            return info.packageName && info.managed ? manager.versions.checkPackage(info.packageName, plugin.version) : Promise.resolve(undefined);
+        })]);
+    for (const status of checkedVersions.slice(1)) {
+        if (status?.state !== "update-available")
+            continue;
+        const plugin = manager.list().find((record) => manager.packageInfo(record.id).packageName === status.packageName);
+        if (!plugin)
+            continue;
+        try {
+            await manager.upgradePackage(plugin.id, status.packageName, status.latestVersion);
+            logger.info(`插件已升级：${plugin.id}`, { version: status.latestVersion });
+        }
+        catch (error) {
+            logger.error(`插件升级失败，保留旧版本：${plugin.id}`, { error: error instanceof Error ? error.message : String(error) });
+        }
+    }
+    const port = Number(process.env.AGENT_BRIDGE_PORT ?? "26107");
+    const host = process.env.AGENT_BRIDGE_HOST ?? "127.0.0.1";
+    if (host !== "127.0.0.1" && host !== "localhost" && host !== "::1" && !process.env.AGENT_BRIDGE_TOKEN) {
+        throw new Error("局域网监听必须设置 AGENT_BRIDGE_TOKEN");
+    }
+    const server = new control_server_1.ControlServer({ manager, host, port, token: process.env.AGENT_BRIDGE_TOKEN });
+    const address = await server.start();
+    logger.info(`daemon listening on http://${address.host}:${address.port}`);
+    const order = ["abweb", ...manager.list().map((plugin) => plugin.id).filter((id) => id !== "abweb")];
+    for (const id of order) {
+        try {
+            await manager.start(id);
+            logger.info(`plugin ready: ${id}`);
+        }
+        catch (error) {
+            logger.error(`plugin failed: ${id}`, { error: error instanceof Error ? error.message : String(error) });
+        }
+    }
+    let stopping = false;
+    const shutdown = async () => {
+        if (stopping)
+            return;
+        stopping = true;
+        for (const plugin of manager.list().reverse()) {
+            try {
+                await manager.stop(plugin.id);
+            }
+            catch (error) {
+                logger.warn(`plugin stop failed: ${plugin.id}`, { error: String(error) });
+            }
+        }
+        await server.stop();
+    };
+    process.once("SIGINT", () => void shutdown().finally(() => process.exit(0)));
+    process.once("SIGTERM", () => void shutdown().finally(() => process.exit(0)));
+    await new Promise(() => undefined);
+    return 0;
+}
+async function main() {
+    const args = process.argv.slice(2);
+    if (args.includes("pair"))
+        return pair();
+    if (args[0] === "update" && args.includes("--startup")) {
+        console.log("核心升级由 Windows 启动器执行；请更新全局 mu-agent-bridge 后重新启动。");
+        return 0;
+    }
+    const selfTestIndex = args.indexOf("--self-test");
+    if (selfTestIndex >= 0)
+        return selfTest(args[selfTestIndex + 1] ?? "hi");
+    if (args.includes("--serve") || args.includes("start"))
+        return serve();
+    console.error("用法：mab start | mab --self-test <任务>");
+    return 2;
+}
+main().then((code) => { process.exitCode = code; }).catch((error) => {
+    console.error(error instanceof Error ? error.stack ?? error.message : error);
+    process.exitCode = 1;
+});

package/dist/src-ts/control-server.js

@@ -0,0 +1,243 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ControlServer = void 0;
+exports.configureAidForPlugin = configureAidForPlugin;
+exports.listExistingAids = listExistingAids;
+exports.listConnectedAids = listConnectedAids;
+const node_http_1 = require("node:http");
+const promises_1 = require("node:fs/promises");
+const node_child_process_1 = require("node:child_process");
+const node_util_1 = require("node:util");
+const node_os_1 = require("node:os");
+const node_path_1 = require("node:path");
+const node_crypto_1 = require("node:crypto");
+const execFileAsync = (0, node_util_1.promisify)(node_child_process_1.execFile);
+const AID_PATTERN = /^[a-zA-Z0-9](?:[a-zA-Z0-9-]*[a-zA-Z0-9])?(?:\.[a-zA-Z0-9](?:[a-zA-Z0-9-]*[a-zA-Z0-9])?){2,}$/;
+async function runEc(args) {
+    const command = process.platform === "win32" ? process.env.ComSpec ?? "cmd.exe" : "ec";
+    const argv = process.platform === "win32" ? ["/d", "/s", "/c", `ec ${args.join(" ")}`] : args;
+    try {
+        const { stdout } = await execFileAsync(command, argv, { timeout: 120_000, maxBuffer: 1024 * 1024 });
+        return JSON.parse(stdout);
+    }
+    catch (error) {
+        const stdout = error.stdout;
+        if (stdout) {
+            try {
+                return JSON.parse(stdout);
+            }
+            catch { /* 保留原始命令错误 */ }
+        }
+        throw error;
+    }
+}
+async function configureAidForPlugin(pluginId, aid, port, run = runEc) {
+    if (!aid || (pluginId !== "dsh" && pluginId !== "qwenwork"))
+        return;
+    const model = pluginId === "dsh" ? "dsh" : "qwenwork";
+    const path = pluginId === "dsh" ? "/dsh/v1" : "/v1";
+    const settings = [
+        ["baseagents.ecagent.baseUrl", `http://127.0.0.1:${port}${path}`],
+        ["baseagents.ecagent.apiKey", "mab-local"],
+        ["baseagents.ecagent.model", model],
+        ["active_baseagent", "ecagent"],
+    ];
+    for (const [key, value] of settings) {
+        const result = await run(["agent", "set", aid, key, value, "--format", "json"]);
+        if (!result?.ok)
+            throw new Error(`配置 AID ${aid} 失败：${key}`);
+    }
+    const reloaded = await run(["agent", "reload", aid, "--format", "json"]);
+    if (!reloaded?.ok)
+        throw new Error(`重载 AID ${aid} 失败：${reloaded?.error ?? reloaded?.code ?? "未知错误"}`);
+}
+class ControlServer {
+    options;
+    server;
+    address;
+    pairingCode = String((0, node_crypto_1.randomInt)(0, 1_000_000)).padStart(6, "0");
+    pairingExpiresAt = Date.now() + 10 * 60 * 1000;
+    pairedTokens = new Set();
+    pairingUsed = false;
+    pairingFailures = 0;
+    constructor(options) {
+        this.options = options;
+        this.server = (0, node_http_1.createServer)((req, res) => { void this.handle(req, res); });
+    }
+    async start() { return new Promise((resolve, reject) => { const host = this.options.host ?? "127.0.0.1"; this.server.once("error", reject); this.server.listen(this.options.port ?? 0, host, () => { this.server.removeListener("error", reject); const info = this.server.address(); if (!info || typeof info === "string")
+        return reject(new Error("failed to bind control server")); this.address = { host, port: info.port }; resolve(this.address); }); }); }
+    async stop() { if (!this.server.listening)
+        return; await new Promise((resolve, reject) => this.server.close((error) => error ? reject(error) : resolve())); }
+    async handle(req, res) {
+        try {
+            const url = new URL(req.url ?? "/", `http://${req.headers.host ?? "localhost"}`);
+            const method = req.method ?? "GET";
+            const parts = url.pathname.split("/").filter(Boolean);
+            if (method === "GET" && url.pathname === "/api/pair-code") {
+                if (!isLoopback(req.socket.remoteAddress))
+                    return this.json(res, 403, { error: "配对码只能在本机获取" });
+                if (Date.now() >= this.pairingExpiresAt || this.pairingUsed || this.pairingFailures >= 5) {
+                    this.pairingCode = String((0, node_crypto_1.randomInt)(0, 1_000_000)).padStart(6, "0");
+                    this.pairingExpiresAt = Date.now() + 10 * 60 * 1000;
+                    this.pairingUsed = false;
+                    this.pairingFailures = 0;
+                }
+                return this.json(res, 200, { code: this.pairingCode, expiresAt: this.pairingExpiresAt });
+            }
+            if (method === "POST" && url.pathname === "/api/pair") {
+                const body = await this.body(req);
+                if (this.pairingUsed || Date.now() >= this.pairingExpiresAt || this.pairingFailures >= 5)
+                    return this.json(res, 403, { ok: false, reason: "配对码无效或已过期" });
+                if (body.code !== this.pairingCode) {
+                    this.pairingFailures++;
+                    return this.json(res, 403, { ok: false, reason: "配对码无效或已过期" });
+                }
+                this.pairingUsed = true;
+                const token = (0, node_crypto_1.randomBytes)(32).toString("hex");
+                this.pairedTokens.add(token);
+                return this.json(res, 200, { ok: true, token });
+            }
+            const authorization = req.headers.authorization;
+            const authorized = authorization === `Bearer ${this.options.token}` || (authorization?.startsWith("Bearer ") && this.pairedTokens.has(authorization.slice(7)));
+            if (this.options.token && !isLoopback(req.socket.remoteAddress) && !authorized && !(method === "GET" && url.pathname.startsWith("/abweb")))
+                return this.json(res, 401, { error: "unauthorized" });
+            if (method === "GET" && url.pathname === "/api/health")
+                return this.json(res, 200, { status: "ok", plugins: this.options.manager.list().length });
+            if (method === "GET" && url.pathname === "/api/versions")
+                return this.json(res, 200, { core: this.options.manager.versions.get("mu-agent-bridge") ?? null, plugins: this.options.manager.list().map((plugin) => ({ ...plugin, versionStatus: this.options.manager.versions.get(`agent-bridge-${plugin.id}`) ?? null })) });
+            if (method === "POST" && url.pathname === "/api/versions/check")
+                return this.json(res, 200, { versions: await this.options.manager.checkPackageUpdates() });
+            if (method === "GET" && url.pathname === "/api/messages")
+                return this.json(res, 200, { messages: this.options.manager.recentMessages() });
+            if (method === "GET" && url.pathname === "/api/aids") {
+                const aids = await listConnectedAids();
+                const created = new Set(await this.options.manager.createdAids?.() ?? []);
+                return this.json(res, 200, { aids, groups: { evolcore: aids.filter((aid) => !created.has(aid)), muAgentBridge: aids.filter((aid) => created.has(aid)) } });
+            }
+            if (method === "POST" && url.pathname === "/api/aids") {
+                const body = await this.body(req);
+                if (typeof body.aid !== "string" || !AID_PATTERN.test(body.aid) || typeof body.ownerAid !== "string" || !AID_PATTERN.test(body.ownerAid))
+                    return this.json(res, 400, { error: "需要有效的 AID 和 owner AID" });
+                const project = (0, node_path_1.join)((0, node_os_1.homedir)(), ".mab", "projects", body.aid);
+                const result = await runEc(["agent", "new", body.aid, "--non-interactive", "--owner", body.ownerAid, "--project", project, "--name", body.aid, "--description", `mu-agent-bridge 的 ${body.aid} Agent`, "--format", "json"]);
+                if (result.ok)
+                    await this.options.manager.recordCreatedAid(body.aid);
+                return this.json(res, result.ok ? 201 : 400, result);
+            }
+            if (method === "GET" && url.pathname === "/api/plugins")
+                return this.json(res, 200, { ok: true, plugins: this.options.manager.list() });
+            if (method === "GET" && url.pathname === "/api/routes")
+                return this.json(res, 200, []);
+            if (parts[0] === "api" && parts[1] === "plugins" && parts[2]) {
+                const id = decodeURIComponent(parts[2]);
+                if (method === "POST" && parts[3] === "start") {
+                    await this.options.manager.start(id);
+                    return this.json(res, 200, { ok: true });
+                }
+                if (method === "POST" && parts[3] === "stop") {
+                    await this.options.manager.stop(id);
+                    return this.json(res, 200, { ok: true });
+                }
+                if (method === "POST" && parts[3] === "reload") {
+                    await this.options.manager.reload(id);
+                    return this.json(res, 200, { ok: true });
+                }
+                if (method === "POST" && parts[3] === "update") {
+                    const body = await this.body(req);
+                    return this.json(res, 200, { ok: true, plugin: await this.options.manager.upgradePackage(id, body.packageName, body.version) });
+                }
+                if (method === "DELETE" && parts.length === 3) {
+                    await this.options.manager.uninstall(id);
+                    return this.json(res, 200, { ok: true });
+                }
+                if (method === "GET" && parts[3] === "config")
+                    return this.json(res, 200, maskSecrets(await this.options.manager.config(id)));
+                if (method === "PATCH" && parts[3] === "aid") {
+                    const body = await this.body(req);
+                    if (typeof body.aid !== "string" || (body.aid && !(await listConnectedAids()).includes(body.aid)))
+                        return this.json(res, 400, { error: "AID 当前未连接" });
+                    if (body.aid && (id === "dsh" || id === "qwenwork") && this.options.manager.get(id)?.record.status !== "ready")
+                        return this.json(res, 409, { error: "插件未启动" });
+                    await configureAidForPlugin(id, body.aid, this.address.port);
+                    await this.options.manager.setAid(id, body.aid);
+                    return this.json(res, 200, { ok: true });
+                }
+                if (method === "PATCH" && parts[3] === "config") {
+                    await this.options.manager.saveConfig(id, await this.body(req));
+                    return this.json(res, 200, { ok: true });
+                }
+                if (method === "GET" && parts[3] === "health")
+                    return this.json(res, 200, await this.options.manager.health(id));
+                if (method === "GET" && parts[3] === "logs")
+                    return this.json(res, 200, { logs: this.options.manager.recentMessages(id) });
+            }
+            if (method === "POST" && url.pathname === "/api/plugins/install") {
+                const body = await this.body(req);
+                if (body.packageName)
+                    return this.json(res, 201, await this.options.manager.installPackage(body.packageName));
+                if (body.source)
+                    return this.json(res, 201, await this.options.manager.install(body.source));
+                return this.json(res, 400, { error: "需要 packageName 或 source" });
+            }
+            if (await this.options.manager.dispatchHttp(req, res))
+                return;
+            return this.json(res, 404, { error: "not found" });
+        }
+        catch (error) {
+            const status = error.statusCode ?? 400;
+            return this.json(res, status, { error: error instanceof Error ? error.message : String(error) });
+        }
+    }
+    async body(req) { let raw = ""; for await (const chunk of req)
+        raw += chunk; if (!raw)
+        return {}; try {
+        return JSON.parse(raw);
+    }
+    catch {
+        throw new Error("invalid JSON body");
+    } }
+    json(res, status, value) { res.statusCode = status; res.setHeader("content-type", "application/json; charset=utf-8"); res.end(JSON.stringify(value)); }
+}
+exports.ControlServer = ControlServer;
+function isLoopback(address) {
+    return address === "127.0.0.1" || address === "::1" || address === "::ffff:127.0.0.1";
+}
+async function listExistingAids() {
+    const root = (0, node_path_1.resolve)(process.env.EVOLCORE_HOME ?? (0, node_path_1.join)((0, node_os_1.homedir)(), ".evolcore"), "AIDs");
+    let names;
+    try {
+        names = await (0, promises_1.readdir)(root);
+    }
+    catch {
+        return [];
+    }
+    const available = await Promise.all(names.filter((name) => /^[a-zA-Z0-9.-]+$/.test(name)).map(async (name) => {
+        try {
+            await (0, promises_1.access)((0, node_path_1.join)(root, name, "private", "key.json"));
+            return name;
+        }
+        catch {
+            return undefined;
+        }
+    }));
+    return available.filter((name) => Boolean(name)).sort();
+}
+async function listConnectedAids(run = runEc) {
+    const result = await run(["agent", "list", "--format", "json"]);
+    if (!result.ok || !Array.isArray(result.agents))
+        throw new Error("读取 EvolCore Agent 列表失败");
+    const candidates = result.agents.filter((agent) => agent.status === "running" && typeof agent.aid === "string" && AID_PATTERN.test(agent.aid) && agent.channels?.some((channel) => channel.startsWith("aun#")));
+    const details = await Promise.all(candidates.map((agent) => run(["agent", "show", agent.aid, "--format", "json"]).catch(() => null)));
+    const local = new Set(await listExistingAids());
+    return details.filter((detail) => detail?.ok && detail.status === "running" && detail.connection?.status === "connected" && local.has(detail.aid)).map((detail) => detail.aid).sort();
+}
+function maskSecrets(value) {
+    if (Array.isArray(value))
+        return value.map(maskSecrets);
+    if (!value || typeof value !== "object")
+        return value;
+    const result = {};
+    for (const [key, item] of Object.entries(value))
+        result[key] = /token|secret|password|passwd|api[-_]?key/i.test(key) ? "******" : maskSecrets(item);
+    return result;
+}

package/dist/src-ts/dsh-agent.js

@@ -0,0 +1,70 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DshAgent = void 0;
+const node_child_process_1 = require("node:child_process");
+const agent_1 = require("./agent");
+const dsh_paths_1 = require("./dsh-paths");
+class DshAgent {
+    name = "dsh";
+    paths;
+    spawnProcess;
+    defaultTimeoutMs;
+    constructor(options) {
+        this.paths = options.paths ?? (0, dsh_paths_1.resolveDshPaths)(options.patchPath);
+        this.spawnProcess = options.spawn ?? node_child_process_1.spawn;
+        this.defaultTimeoutMs = options.defaultTimeoutMs ?? 300_000;
+    }
+    async send(request) {
+        if (!request.task.trim())
+            throw new agent_1.AgentError("DSH task must not be empty");
+        const args = ["--expose-internals", this.paths.cli, "--profile", "headless", "--patch", this.paths.patch, "--json"];
+        if (request.sessionId)
+            args.push("--session-id", request.sessionId);
+        args.push("-");
+        const child = this.spawnProcess(this.paths.executable, args, {
+            cwd: request.cwd,
+            env: { ...process.env, ELECTRON_RUN_AS_NODE: "1" },
+            stdio: ["pipe", "pipe", "pipe"],
+        });
+        child.stdin.end(request.task, "utf8");
+        let output = "";
+        let errors = "";
+        let sessionId = request.sessionId;
+        let finalText = "";
+        child.stdout.setEncoding?.("utf8");
+        child.stderr.setEncoding?.("utf8");
+        child.stdout.on("data", (chunk) => {
+            output += chunk;
+            for (const line of output.split(/\r?\n/).slice(0, -1)) {
+                try {
+                    const event = JSON.parse(line);
+                    if (event.type === "session" && event.sessionId)
+                        sessionId = event.sessionId;
+                    if (event.type === "final" && event.text)
+                        finalText = event.text.trim();
+                }
+                catch { /* diagnostics and partial lines are ignored */ }
+            }
+            output = output.split(/\r?\n/).at(-1) ?? "";
+        });
+        child.stderr.on("data", (chunk) => { errors += chunk; });
+        await new Promise((resolve, reject) => {
+            const timer = setTimeout(() => {
+                child.kill();
+                reject(new agent_1.AgentError(`DSH task timed out after ${request.timeoutMs ?? this.defaultTimeoutMs}ms`));
+            }, request.timeoutMs ?? this.defaultTimeoutMs);
+            child.once("error", (error) => { clearTimeout(timer); reject(new agent_1.AgentError("failed to start DSH", { cause: error })); });
+            child.once("close", (code) => {
+                clearTimeout(timer);
+                if (code !== 0 && !finalText)
+                    reject(new agent_1.AgentError(errors.trim() || `DSH exited with code ${code}`));
+                else
+                    resolve();
+            });
+        });
+        if (!finalText)
+            throw new agent_1.AgentError("DSH returned no final text");
+        return { text: finalText, sessionId };
+    }
+}
+exports.DshAgent = DshAgent;