mu-agent-bridge 1.0.42 → 1.0.43

package/README.md

@@ -162,3 +162,7 @@ mab feishu unbind cli_你的应用ID
 ```
 
 `configure` 保存凭据及可选关联后，需要在 ABWeb 重载飞书插件以连接机器人。非交互终端请使用网页密码框；不要把 Secret 写进命令行、脚本或仓库。
+
+### 本地 CLI Agent
+
+新增两个独立插件：`agent-bridge-codex-cli`（Codex CLI）与 `agent-bridge-claude-cli`（Claude Code CLI），随核心默认打包。支持在 abweb 配置、启停及通过通道关联 AID，沿用本机 CLI 的登录和默认模型。详见 [本地 CLI 插件使用说明](docs/local-cli-agents.md)。

package/dist/src-ts/headless-account.patch.yml

@@ -1,4 +1,14 @@
 # 复用 DeepSeek Harness 桌面端登录账号的模型。
+# 新版 headless 默认禁用凭据及账号服务，桥接需要显式恢复才能复用桌面登录。
+- id: credentials
+  disabled: false
+
+- id: authorization
+  disabled: false
+
+- id: deepseek-account
+  disabled: false
+
 - id: agent-default-model
   config:
     provider: deepseek-account

package/dist/src-ts/plugin-manifest.js

@@ -21,6 +21,8 @@ function validateManifest(value, baseDir) {
         throw new agent_1.AgentError("invalid plugin capabilities");
     if (m.type && !["agent", "channel", "management", "other"].includes(m.type))
         throw new agent_1.AgentError("invalid plugin type");
+    if (m.executionMode !== undefined && m.executionMode !== "cli" && m.executionMode !== "cdp")
+        throw new agent_1.AgentError("插件运行方式无效");
     const inferredType = m.capabilities.includes("channel") ? "channel" : m.capabilities.includes("chat") ? "agent" : m.capabilities.includes("management") ? "management" : "other";
     if (m.type && inferredType !== "other" && m.type !== inferredType)
         throw new agent_1.AgentError("插件类型与能力不匹配");
@@ -39,5 +41,5 @@ function validateManifest(value, baseDir) {
         if ((0, node_path_1.isAbsolute)(m.entry) || rel.startsWith(`..${node_path_1.sep}`) || rel === "..")
             throw new agent_1.AgentError("plugin entry path escapes plugin directory");
     }
-    return { id: m.id, version: m.version, displayName: m.displayName ?? m.id, type: m.type ?? inferredType, entry: m.entry, apiVersion: m.apiVersion, process: m.process ?? "in-process", capabilities: [...m.capabilities], configSchema: m.configSchema, routes: m.routes, ...(m.dependencies ? { dependencies: { ...m.dependencies } } : {}), ...(m.managementPage ? { managementPage: m.managementPage } : {}), ...(m.clientDownloadUrl ? { clientDownloadUrl: m.clientDownloadUrl } : {}) };
+    return { id: m.id, version: m.version, displayName: m.displayName ?? m.id, type: m.type ?? inferredType, entry: m.entry, apiVersion: m.apiVersion, process: m.process ?? "in-process", capabilities: [...m.capabilities], ...(m.executionMode ? { executionMode: m.executionMode } : {}), configSchema: m.configSchema, routes: m.routes, ...(m.dependencies ? { dependencies: { ...m.dependencies } } : {}), ...(m.managementPage ? { managementPage: m.managementPage } : {}), ...(m.clientDownloadUrl ? { clientDownloadUrl: m.clientDownloadUrl } : {}) };
 }

package/dist/src-ts/plugins/abweb/public/app.js

@@ -308,6 +308,8 @@
             const status = document.createElement("span");
             status.className = `status status-${plugin.status}`;
             status.textContent = plugin.status;
+            if (plugin.type === "agent")
+                type.textContent += ` · ${{ cli: "CLI", cdp: "CDP" }[plugin.manifest?.executionMode ?? ""] ?? "未声明"}`;
             const dependencies = Object.entries(plugin.manifest?.dependencies ?? {});
             if (dependencies.length) {
                 const detail = document.createElement("small");
@@ -340,6 +342,8 @@
             }
             const controls = document.createElement("td");
             controls.className = "controls";
+            if (plugin.manifest?.executionMode === "cli")
+                controls.append(button("配置", `配置 ${plugin.id}`, () => configureCli(plugin)));
             if (pluginVersions[plugin.id]?.state === "update-available" && plugin.path.includes("node_modules")) {
                 controlsUpgrade(plugin.id);
                 controls.append(button("下载", `下载 ${plugin.id}`, async () => { await request(`/api/plugins/${encodeURIComponent(plugin.id)}/download`, "POST", { packageName: plugin.packageName, version: pluginVersions[plugin.id]?.latestVersion }); await load(); }));
@@ -367,6 +371,36 @@
             pluginsNode.append(row);
         }
     }
+    let configuringCli = "";
+    async function configureCli(plugin) {
+        const config = await request(`/api/plugins/${encodeURIComponent(plugin.id)}/config`);
+        configuringCli = plugin.id;
+        node("#cli-config-title").textContent = `${plugin.displayName} 配置`;
+        node("#cli-config-cwd").value = config.cwd ?? "";
+        node("#cli-config-executable").value = config.executablePath ?? "";
+        node("#cli-config-timeout").value = String(config.timeoutMs ?? 240000);
+        node("#cli-config-error").hidden = true;
+        node("#cli-config-dialog").showModal();
+    }
+    node("#cli-config-cancel").onclick = () => node("#cli-config-dialog").close();
+    node("#cli-config-form").onsubmit = event => {
+        event.preventDefault();
+        const save = node("#cli-config-save");
+        save.disabled = true;
+        void request(`/api/plugins/${encodeURIComponent(configuringCli)}/config`, "PATCH", {
+            cwd: node("#cli-config-cwd").value.trim(),
+            executablePath: node("#cli-config-executable").value.trim(),
+            timeoutMs: Number(node("#cli-config-timeout").value),
+        }).then(() => {
+            node("#cli-config-dialog").close();
+            showResult("CLI 配置已保存", "请启动插件，然后在 Channel 设置中关联 AID。", false);
+            return load(false);
+        }).catch(cause => {
+            const detail = node("#cli-config-error");
+            detail.textContent = String(cause);
+            detail.hidden = false;
+        }).finally(() => { save.disabled = false; });
+    };
     function renderMessages(messages) {
         messagesNode.replaceChildren();
         messagesEmpty.hidden = messages.length > 0;

package/dist/src-ts/plugins/abweb/public/index.html

@@ -21,6 +21,16 @@
     <div id="logs-panel" role="tabpanel" aria-labelledby="logs-tab" hidden><section><div class="section-heading"><h2>运行日志</h2><button id="logs-refresh" type="button">刷新日志</button></div><div class="table-scroll"><table><thead><tr><th>时间</th><th>级别</th><th>来源</th><th>消息</th><th>详细字段</th></tr></thead><tbody id="logs"></tbody></table></div><p id="logs-empty" class="muted" hidden>暂无运行日志</p><div class="section-heading"><button id="logs-prev" type="button">上一页</button><span id="logs-page" class="muted">第 1 页</span><button id="logs-next" type="button">下一页</button></div></section></div>
     <p id="error" class="error" role="alert" hidden></p>
   </main>
+  <dialog id="cli-config-dialog" aria-labelledby="cli-config-title">
+    <h2 id="cli-config-title">CLI 配置</h2><p class="muted">沿用后台运行用户的 CLI 登录、默认模型及权限。AID 请在 Channel 设置关联。</p>
+    <form id="cli-config-form">
+      <label for="cli-config-cwd">工作目录（必填，绝对路径）</label><input id="cli-config-cwd" required placeholder="C:\Users\用户名\projects\demo">
+      <label for="cli-config-executable">CLI 程序路径（可选，留空使用 PATH）</label><input id="cli-config-executable" placeholder="例如 C:\Users\用户名\AppData\Roaming\npm\codex.cmd">
+      <label for="cli-config-timeout">任务超时（毫秒）</label><input id="cli-config-timeout" type="number" min="1" max="2147483647" required value="240000">
+      <p id="cli-config-error" class="error" role="alert" hidden></p>
+      <div><button id="cli-config-save" type="submit">保存配置</button><button id="cli-config-cancel" type="button">取消</button></div>
+    </form>
+  </dialog>
   <dialog id="operation-result" aria-labelledby="operation-result-title" aria-describedby="operation-result-message">
     <h2 id="operation-result-title">操作结果</h2><p id="operation-result-message"></p><button id="operation-result-close" type="button" autofocus>确定</button>
   </dialog>

package/dist/src-ts/plugins/abweb/public/style.css

@@ -60,3 +60,6 @@ th:nth-child(1) { width: 145px; } th:nth-child(2) { width: 100px; } th:nth-child
 #operation-result { width: min(520px, calc(100% - 32px)); border: 1px solid #bfc9c5; border-radius: 8px; padding: 24px; }
 #operation-result::backdrop { background: rgb(0 0 0 / 35%); }
 #operation-result-message { white-space: pre-wrap; overflow-wrap: anywhere; margin: 16px 0; }
+
+#cli-config-form { display: grid; min-width: min(70vw, 480px); }
+#cli-config-form input { width: 100%; }

package/dist/src-ts/plugins/aun/index.js

@@ -214,7 +214,7 @@ class AunPlugin {
             if (typeof aid === "string" && aidPattern.test(aid))
                 this.createdAids.add(aid);
         }
-        for (const key of ["aid", "owner_aid", "aun_path", "encryption_seed", "root_ca_path", "allow_from", "agent_plugin"]) {
+        for (const key of ["aid", "owner_aid", "aun_path", "encryption_seed", "root_ca_path", "allow_from"]) {
             if (this.config[key] !== undefined && typeof this.config[key] !== "string")
                 throw new Error(`${key} 必须是字符串`);
         }
@@ -419,12 +419,12 @@ class AunPlugin {
                     throw new Error("请求内容过大");
             }
             const body = JSON.parse(raw || "{}");
-            for (const key of ["agent_plugin", "allow_from", "aun_path"])
+            for (const key of ["allow_from", "aun_path"])
                 if (typeof body[key] !== "string")
                     return this.json(response, 400, { error: `${key} 必须是字符串` });
             if (body.encryption_seed !== undefined && typeof body.encryption_seed !== "string")
                 return this.json(response, 400, { error: "encryption_seed 必须是字符串" });
-            this.config = { ...this.config, agent_plugin: body.agent_plugin, allow_from: body.allow_from, aun_path: body.aun_path, ...(body.encryption_seed ? { encryption_seed: body.encryption_seed } : {}) };
+            this.config = { ...this.config, allow_from: body.allow_from, aun_path: body.aun_path, ...(body.encryption_seed ? { encryption_seed: body.encryption_seed } : {}) };
             await this.persist();
             this.context?.logger.info("AUN 通道配置已保存");
             this.json(response, 200, { ok: true });
@@ -741,7 +741,7 @@ class AunPlugin {
         }
     };
     async onMessage(payload, aid) {
-        if (!this.acceptingMessages)
+        if (!this.acceptingMessages || !this.bindings[aid])
             return;
         const message = (0, messages_1.normalizeAunMessage)(payload, aid, typeof this.config.allow_from === "string" ? this.config.allow_from : undefined);
         if (!message || !this.seen.add(message.messageId ? `${aid}:${message.messageId}` : ""))
@@ -793,7 +793,7 @@ class AunPlugin {
         const channelMessage = {
             channel: "aun", recipientId: aid, peerId: message.peerId, messageId: message.messageId, text: message.text, threadId: message.threadId,
             ...(attachments.length ? { attachments } : {}),
-            agentPlugin: this.bindings[aid] || (typeof this.config.agent_plugin === "string" && this.config.agent_plugin.trim() ? this.config.agent_plugin.trim() : "qwenwork"),
+            agentPlugin: this.bindings[aid],
             reply: async (text) => {
                 if (!text.trim())
                     return;

package/dist/src-ts/plugins/aun/public/app.js

@@ -29,10 +29,7 @@
       agents = (plugins.plugins || []).filter((plugin) => plugin.type === "agent");
       if (refreshForm) createForm.elements.ownerAid.value = config.owner_aid || "";
       await Promise.all(agents.map(async (agent) => { agent.configAid = (await request(`/api/plugins/${encodeURIComponent(agent.id)}/config`)).aid || ""; }));
-      const target = configForm.elements.agent_plugin;
       if (refreshForm) {
-        target.replaceChildren(new Option("默认 Agent", ""), ...agents.map((agent) => new Option(agent.displayName || agent.id, agent.id)));
-        target.value = config.agent_plugin || "";
         for (const key of ["allow_from", "aun_path"]) configForm.elements[key].value = config[key] || "";
         configForm.elements.encryption_seed.value = "";
       }
@@ -76,7 +73,7 @@
       return load();
     }).catch((error) => notify("创建 AID 失败", errorMessage(error), true));
   };
-  configForm.onsubmit = (event) => { event.preventDefault(); const changes = { agent_plugin: configForm.elements.agent_plugin.value, allow_from: configForm.elements.allow_from.value, aun_path: configForm.elements.aun_path.value };
+  configForm.onsubmit = (event) => { event.preventDefault(); const changes = { allow_from: configForm.elements.allow_from.value, aun_path: configForm.elements.aun_path.value };
     if (configForm.elements.encryption_seed.value) changes.encryption_seed = configForm.elements.encryption_seed.value;
     void request("/api/plugins/aun/settings", "POST", changes).then(() => request("/api/plugins/aun/reload", "POST")).then(() => load()).then(() => notify("保存成功", "配置已保存")).catch((error) => notify("保存配置失败", errorMessage(error), true));
   };

package/dist/src-ts/plugins/aun/public/index.html

@@ -7,7 +7,7 @@
     <p id="status" role="status"></p>
     <div class="table-scroll"><table><thead><tr><th>AID</th><th>来源</th><th>已关联 Agent</th><th>操作</th></tr></thead><tbody id="identities"></tbody></table></div>
     <form id="create-form"><h2>创建 AID</h2><div class="fields"><label>新 AID<input name="aid" required placeholder="例如：example.agentid.cn"></label><label>Owner AID<input name="ownerAid" placeholder="例如：owner.agentid.cn"><small class="hint">留空时使用已配置的默认 Owner；未配置时需填写。Owner 保存为本地归属配置；不代表 AUN 协议中的 Owner 关系已激活。</small></label></div><button type="submit">创建</button></form>
-    <form id="config-form"><h2>通道配置</h2><div class="fields"><label>默认 Agent<select name="agent_plugin"></select></label><label>允许的来源<input name="allow_from"></label><label>AUN 存储路径<input name="aun_path"></label><label>加密种子<input name="encryption_seed" type="password" autocomplete="new-password" placeholder="留空则不修改"></label></div><button type="submit">保存配置</button></form>
+    <form id="config-form"><h2>通道配置</h2><div class="fields"><label>允许的来源<input name="allow_from"></label><label>AUN 存储路径<input name="aun_path"></label><label>加密种子<input name="encryption_seed" type="password" autocomplete="new-password" placeholder="留空则不修改"></label></div><button type="submit">保存配置</button></form>
   </main>
   <script src="/abweb/channels/aun/app.js"></script>
 </body>

package/dist/src-ts/plugins/claude-cli/index.js

@@ -0,0 +1,14 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ClaudeCliPlugin = exports.manifest = void 0;
+const agent_1 = require("../local-cli/agent");
+exports.manifest = {
+    id: "claude-cli", version: "1.0.0", displayName: "Claude Code CLI", type: "agent", executionMode: "cli",
+    entry: "dist/src-ts/plugins/claude-cli/index.js", apiVersion: "1", process: "in-process",
+    capabilities: ["chat", "health"], configSchema: "config.schema.json",
+};
+class ClaudeCliPlugin extends agent_1.LocalCliAgent {
+    constructor() { super(exports.manifest, "claude"); }
+}
+exports.ClaudeCliPlugin = ClaudeCliPlugin;
+exports.default = ClaudeCliPlugin;

package/dist/src-ts/plugins/codex-cli/index.js

@@ -0,0 +1,14 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CodexCliPlugin = exports.manifest = void 0;
+const agent_1 = require("../local-cli/agent");
+exports.manifest = {
+    id: "codex-cli", version: "1.0.0", displayName: "Codex CLI", type: "agent", executionMode: "cli",
+    entry: "dist/src-ts/plugins/codex-cli/index.js", apiVersion: "1", process: "in-process",
+    capabilities: ["chat", "health"], configSchema: "config.schema.json",
+};
+class CodexCliPlugin extends agent_1.LocalCliAgent {
+    constructor() { super(exports.manifest, "codex"); }
+}
+exports.CodexCliPlugin = CodexCliPlugin;
+exports.default = CodexCliPlugin;

package/dist/src-ts/plugins/local-cli/agent.js

@@ -0,0 +1,321 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LocalCliAgent = void 0;
+exports.resolveWindowsCliShim = resolveWindowsCliShim;
+const node_child_process_1 = require("node:child_process");
+const node_fs_1 = require("node:fs");
+const promises_1 = require("node:fs/promises");
+const node_path_1 = require("node:path");
+const node_crypto_1 = require("node:crypto");
+const nativeId = /^[0-9a-f]{8}(?:-[0-9a-f]{4}){3}-[0-9a-f]{12}$/i;
+const maximumOutput = 4 * 1024 * 1024;
+function diagnostic(value) {
+    return value.replace(/\b(?:Bearer\s+)[^\s"']+/gi, "Bearer [已隐藏]")
+        .replace(/((?:[\w-]*(?:token|secret|password|api[_-]?key)[\w-]*)["']?\s*[:=]\s*["']?)[^\s"',}]+/gi, "$1[已隐藏]")
+        .replace(/\b(?:sk-|npm_)[A-Za-z0-9_-]+/g, "[已隐藏]")
+        .replace(/https?:\/\/[^\s"']+/g, text => { try {
+        const url = new URL(text);
+        return `${url.origin}/[路径已隐藏]`;
+    }
+    catch {
+        return "[地址已隐藏]";
+    } })
+        .slice(0, 2000);
+}
+async function resolveWindowsCliShim(file, provider) {
+    const modules = (0, node_path_1.basename)((0, node_path_1.dirname)(file)) === ".bin" ? (0, node_path_1.dirname)((0, node_path_1.dirname)(file)) : (0, node_path_1.join)((0, node_path_1.dirname)(file), "node_modules");
+    const root = (0, node_path_1.join)(modules, ...(provider === "codex" ? ["@openai", "codex"] : ["@anthropic-ai", "claude-code"]));
+    const metadata = JSON.parse(await (0, promises_1.readFile)((0, node_path_1.join)(root, "package.json"), "utf8"));
+    const entry = typeof metadata.bin === "string" ? metadata.bin : metadata.bin?.[provider];
+    if (typeof entry !== "string" || !entry)
+        throw new Error("npm CLI 包未声明可执行入口");
+    const target = (0, node_path_1.resolve)(root, entry), path = (0, node_path_1.relative)(root, target);
+    if ((0, node_path_1.isAbsolute)(entry) || path === ".." || path.startsWith(`..${node_path_1.sep}`))
+        throw new Error("npm CLI 入口路径超出包目录");
+    if (!(await (0, promises_1.stat)(target)).isFile())
+        throw new Error("npm CLI 入口不是文件");
+    await (0, promises_1.access)(target, node_fs_1.constants.R_OK);
+    if ([".js", ".cjs", ".mjs"].includes((0, node_path_1.extname)(target)))
+        return { command: process.execPath, args: [target] };
+    if ((0, node_path_1.extname)(target).toLowerCase() !== ".exe")
+        throw new Error("npm CLI 入口必须是原生 exe 或 Node 脚本");
+    return { command: target, args: [] };
+}
+async function executable(provider, configured) {
+    const candidates = configured ? [(0, node_path_1.resolve)(configured)] : (process.env.PATH ?? "").split(node_path_1.delimiter).filter(Boolean)
+        .flatMap(directory => (process.platform === "win32" ? [".exe", ".cmd", ".bat", ""] : [""]).map(extension => (0, node_path_1.join)(directory, provider + extension)));
+    for (const file of candidates) {
+        try {
+            if (!(await (0, promises_1.stat)(file)).isFile())
+                continue;
+            if (process.platform === "win32" && [".cmd", ".bat"].includes((0, node_path_1.extname)(file).toLowerCase()))
+                return await resolveWindowsCliShim(file, provider);
+            if ([".js", ".cjs", ".mjs"].includes((0, node_path_1.extname)(file))) {
+                await (0, promises_1.access)(file, node_fs_1.constants.R_OK);
+                return { command: process.execPath, args: [file] };
+            }
+            await (0, promises_1.access)(file, process.platform === "win32" ? node_fs_1.constants.F_OK : node_fs_1.constants.X_OK);
+            return { command: file, args: [] };
+        }
+        catch (error) {
+            if (configured)
+                throw new Error(`无法使用 ${provider} CLI 程序：${diagnostic(String(error))}；请检查路径、安装及 daemon 用户的执行权限`);
+        }
+    }
+    throw new Error(`未找到 ${provider} CLI 可执行程序，请安装并在 daemon 用户下登录，或配置 executablePath`);
+}
+class LocalCliAgent {
+    manifest;
+    provider;
+    sessionOperations = ["new"];
+    attachmentInput = false;
+    context;
+    command;
+    cwd = "";
+    timeoutMs = 240000;
+    ready = false;
+    message = "插件尚未启动";
+    version = "";
+    sessions = new Map();
+    writes = Promise.resolve();
+    pending = new Map();
+    children = new Map();
+    constructor(manifest, provider) {
+        this.manifest = manifest;
+        this.provider = provider;
+    }
+    async activate(context) {
+        this.context = context;
+        this.ready = false;
+        try {
+            const cwd = context.config.cwd;
+            if (typeof cwd !== "string" || !cwd.trim() || !(0, node_path_1.isAbsolute)(cwd))
+                throw new Error("请配置已存在的绝对工作目录 cwd");
+            if (!(await (0, promises_1.stat)(cwd)).isDirectory())
+                throw new Error("工作目录 cwd 不是目录");
+            this.cwd = cwd;
+            const timeout = context.config.timeoutMs ?? 240000;
+            if (typeof timeout !== "number" || !Number.isInteger(timeout) || timeout <= 0 || timeout > 2147483647)
+                throw new Error("timeoutMs 必须是有效的正整数毫秒数");
+            this.timeoutMs = timeout;
+            const configured = context.config.executablePath;
+            if (configured !== undefined && typeof configured !== "string")
+                throw new Error("executablePath 必须是路径字符串");
+            this.command = await executable(this.provider, typeof configured === "string" && configured.trim() ? configured : undefined);
+            this.version = (await this.run(["--version"], "", 10000)).stdout.trim();
+            if (!/\d+\.\d+\.\d+/.test(this.version))
+                throw new Error("无法识别 CLI 版本");
+            const help = (await this.run(this.provider === "codex" ? ["exec", "--help"] : ["--help"], "", 10000)).stdout;
+            if (this.provider === "codex" ? !help.includes("--json") || !help.includes("resume") : !help.includes("--output-format") || !help.includes("--resume"))
+                throw new Error("CLI 版本不支持所需的结构化输出和会话恢复，请升级 CLI");
+            this.sessions = new Map();
+            try {
+                const data = JSON.parse(await (0, promises_1.readFile)((0, node_path_1.join)(context.dataDir, "cli-sessions.json"), "utf8"));
+                if (data.version !== 1 || !Array.isArray(data.sessions) || data.sessions.some((entry) => !Array.isArray(entry) || entry.length !== 2 || typeof entry[0] !== "string" || typeof entry[1] !== "string" || !nativeId.test(entry[1])))
+                    throw new Error("CLI 会话映射文件无效，请检查数据文件，不能安全恢复会话");
+                this.sessions = new Map(data.sessions);
+            }
+            catch (error) {
+                if (error.code !== "ENOENT")
+                    throw error;
+            }
+            this.ready = true;
+            this.message = "";
+            context.logger.info("本地 CLI 插件已就绪", { plugin: this.manifest.id, version: diagnostic(this.version) });
+        }
+        catch (error) {
+            this.message = diagnostic(String(error));
+            throw new Error(this.message);
+        }
+    }
+    run(args, input, timeout) {
+        const command = this.command;
+        let child;
+        let stop;
+        const done = new Promise((accept, reject) => {
+            let stdout = "", stderr = "", size = 0, failure = "";
+            child = (0, node_child_process_1.spawn)(command.command, [...command.args, ...args], { cwd: this.cwd, env: process.env, shell: false, windowsHide: true, detached: process.platform !== "win32", stdio: ["pipe", "pipe", "pipe"] });
+            const terminate = (reason) => {
+                if (failure)
+                    return;
+                failure = reason;
+                if (!child.pid)
+                    return;
+                if (process.platform === "win32")
+                    (0, node_child_process_1.execFile)("taskkill.exe", ["/PID", String(child.pid), "/T", "/F"], { windowsHide: true }, () => { });
+                else {
+                    try {
+                        process.kill(-child.pid, "SIGKILL");
+                    }
+                    catch {
+                        child.kill("SIGKILL");
+                    }
+                }
+            };
+            stop = () => terminate("插件已停止，当前 CLI 任务已终止");
+            const timer = setTimeout(() => terminate(`CLI 调用超时（${timeout}ms），请检查登录、网络或权限审批`), timeout);
+            const cleanup = () => { clearTimeout(timer); this.children.delete(child); };
+            child.stdout.setEncoding("utf8");
+            child.stderr.setEncoding("utf8");
+            const collect = (value, error) => {
+                size += Buffer.byteLength(value);
+                if (size > maximumOutput) {
+                    terminate("CLI 输出超过 4MB 限制");
+                    return;
+                }
+                if (error)
+                    stderr += value;
+                else
+                    stdout += value;
+            };
+            child.stdout.on("data", value => collect(value, false));
+            child.stderr.on("data", value => collect(value, true));
+            child.on("error", error => { cleanup(); reject(new Error(`无法启动 ${this.provider} CLI：${diagnostic(String(error))}`)); });
+            child.on("close", (code, signal) => {
+                cleanup();
+                if (failure) {
+                    reject(new Error(failure));
+                    return;
+                }
+                if (code !== 0) {
+                    const detail = diagnostic(stderr || stdout);
+                    const hint = /login|authenticat|not logged|unauthorized|401/i.test(detail) ? "请检查 daemon 运行用户的 CLI 登录状态" : /permission|approval|denied|EACCES/i.test(detail) ? "权限审批受阻，请在本机 CLI 确认目录和工具权限" : "请检查 CLI 配置及网络";
+                    reject(new Error(`${this.provider} CLI 退出码 ${code ?? signal}：${hint}；${detail}`));
+                }
+                else
+                    accept({ stdout, stderr });
+            });
+            child.stdin.on("error", () => { });
+            child.stdin.end(input);
+        });
+        this.children.set(child, { stop, done });
+        return done;
+    }
+    save(session, id) {
+        const operation = this.writes.catch(() => { }).then(async () => {
+            const next = new Map(this.sessions);
+            if (id)
+                next.set(session, id);
+            else
+                next.delete(session);
+            const directory = this.context.dataDir;
+            await (0, promises_1.mkdir)(directory, { recursive: true, mode: 0o700 });
+            const file = (0, node_path_1.join)(directory, "cli-sessions.json"), temporary = `${file}.${(0, node_crypto_1.randomUUID)()}.tmp`;
+            try {
+                await (0, promises_1.writeFile)(temporary, JSON.stringify({ version: 1, sessions: [...next] }), { flag: "wx", mode: 0o600 });
+                await (0, promises_1.rename)(temporary, file);
+            }
+            finally {
+                await (0, promises_1.rm)(temporary, { force: true });
+            }
+            this.sessions = next;
+        });
+        this.writes = operation;
+        return operation;
+    }
+    serial(key, operation) {
+        const next = (this.pending.get(key) ?? Promise.resolve()).catch(() => { }).then(operation);
+        this.pending.set(key, next);
+        return next.finally(() => { if (this.pending.get(key) === next)
+            this.pending.delete(key); });
+    }
+    requireReady() { if (!this.ready)
+        throw new Error(`${this.manifest.displayName} 插件未启动或已停止：${this.message}`); }
+    async handle(request) {
+        this.requireReady();
+        if (request.attachments?.length)
+            throw new Error(`${this.manifest.displayName} 本期不支持附件输入`);
+        if (!request.task?.trim())
+            throw new Error("CLI 任务文本不能为空");
+        const logical = request.sessionId || (0, node_crypto_1.randomUUID)();
+        return this.serial(logical, async () => {
+            this.requireReady();
+            const id = request.newSession ? undefined : this.sessions.get(logical);
+            const args = this.provider === "codex"
+                ? ["exec", ...(id ? ["resume", id] : []), "--json", "-"]
+                : ["--print", "--output-format", "json", ...(id ? ["--resume", id] : [])];
+            const timeout = request.timeoutMs ?? this.timeoutMs;
+            if (!Number.isInteger(timeout) || timeout <= 0 || timeout > 2147483647)
+                throw new Error("任务超时必须是有效的正整数毫秒数");
+            const started = Date.now();
+            this.context.logger.info("本地 CLI 任务开始", { plugin: this.manifest.id, sessionId: logical, resume: Boolean(id) });
+            try {
+                const output = await this.run(args, request.task, timeout);
+                const response = this.parse(output.stdout);
+                if (id && response.id !== id)
+                    throw new Error("CLI 恢复返回的会话 ID 与指定会话不一致，保留原会话绑定");
+                await this.save(logical, response.id);
+                this.context.logger.info("本地 CLI 任务完成", { plugin: this.manifest.id, sessionId: logical, durationMs: Date.now() - started, exitCode: 0 });
+                return { text: response.text, sessionId: logical };
+            }
+            catch (error) {
+                const detail = diagnostic(String(error));
+                this.context.logger.error("本地 CLI 任务失败", { plugin: this.manifest.id, sessionId: logical, durationMs: Date.now() - started, error: detail });
+                throw new Error(`${this.manifest.displayName}：${detail}`);
+            }
+        });
+    }
+    parse(stdout) {
+        let id = "", text = "";
+        try {
+            if (this.provider === "codex") {
+                let completed = false, lastError = "";
+                const messages = [];
+                for (const line of stdout.split(/\r?\n/).filter(line => line.trim())) {
+                    const event = JSON.parse(line);
+                    if (event.type === "thread.started")
+                        id = event.thread_id;
+                    if (event.type === "item.completed" && event.item?.type === "agent_message" && typeof event.item.text === "string")
+                        messages.push(event.item.text);
+                    if (event.type === "turn.failed")
+                        throw new Error(JSON.stringify(event.error ?? event));
+                    // 中途错误后仍可能恢复，必须以最终完成事件判定成功。
+                    if (event.type === "error") {
+                        completed = false;
+                        lastError = JSON.stringify(event.error ?? event);
+                    }
+                    if (event.type === "turn.completed")
+                        completed = true;
+                }
+                if (!completed)
+                    throw new Error(lastError || "缺少完成事件");
+                text = messages.join("\n\n");
+            }
+            else {
+                const event = JSON.parse(stdout);
+                if (event.is_error || event.type !== "result")
+                    throw new Error(JSON.stringify(event.errors ?? event));
+                id = event.session_id;
+                text = event.result;
+            }
+            if (typeof id !== "string" || !nativeId.test(id))
+                throw new Error("缺少有效原生会话 ID");
+            if (typeof text !== "string" || !text.trim())
+                throw new Error("未返回有效回复文本");
+            return { id, text };
+        }
+        catch (error) {
+            throw new Error(`CLI 输出或会话无效：${diagnostic(String(error))}`);
+        }
+    }
+    async controlSession(request) {
+        this.requireReady();
+        return this.serial(request.sessionId, async () => {
+            this.requireReady();
+            await this.save(request.sessionId);
+            return { text: "已新建会话，下条消息将使用新的 CLI 会话", sessionId: (0, node_crypto_1.randomUUID)() };
+        });
+    }
+    async health() {
+        return { status: this.ready ? "ready" : "failed", ...(this.message ? { message: this.message } : {}), details: { executionMode: "cli", version: diagnostic(this.version), activeRequests: this.children.size } };
+    }
+    async deactivate(_reason) {
+        this.ready = false;
+        this.message = "插件已停止";
+        const children = [...this.children.values()];
+        children.forEach(child => child.stop());
+        await Promise.allSettled([...children.map(child => child.done), ...this.pending.values()]);
+        await this.writes.catch(() => { });
+    }
+}
+exports.LocalCliAgent = LocalCliAgent;

package/dist/src-ts/plugins/workbuddy/desktop-launch.js

@@ -0,0 +1,10 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.launchWorkbuddyDesktop = launchWorkbuddyDesktop;
+const node_child_process_1 = require("node:child_process");
+function launchWorkbuddyDesktop(executable, args, profileDirectory, port) {
+    // WorkBuddy 会覆盖 Chromium 的用户目录参数，必须使用它自己的环境变量隔离实例。
+    const env = { ...process.env, WORKBUDDY_USER_DATA_DIR: profileDirectory, WORKBUDDY_REMOTE_DEBUGGING_PORT: String(port) };
+    delete env.ELECTRON_RUN_AS_NODE;
+    return (0, node_child_process_1.spawn)(executable, args, { env, detached: true, stdio: "ignore", windowsHide: false });
+}

package/dist/src-ts/plugins/workbuddy/index.js

@@ -13,6 +13,7 @@ const cdp_client_1 = require("./cdp-client");
 const cli_client_1 = require("./cli-client");
 const session_history_1 = require("./session-history");
 const desktop_launch_1 = require("../desktop-launch");
+const desktop_launch_2 = require("./desktop-launch");
 exports.workbuddyManifest = {
     id: "workbuddy", version: "1.1.13", displayName: "WorkBuddy", type: "agent",
     entry: "dist/index.js", apiVersion: "1", process: "in-process",
@@ -112,7 +113,7 @@ class WorkbuddyPlugin {
         const port = (0, plugin_1.resolveRuntimePort)(config, context.runtime, "workbuddy", "WORKBUDDY_CDP_PORT", this.options.cdpPort ?? 9229);
         this.client = this.options.client ?? new cdp_client_1.WorkbuddyCdpClient({ port });
         try {
-            await this.connectOrStart(config, context.logger, port);
+            await this.connectOrStart(config, context.logger, port, context.dataDir);
         }
         catch (error) {
             this.failure = error instanceof Error ? error.message : String(error);
@@ -314,10 +315,10 @@ class WorkbuddyPlugin {
         this.queue = run.then(() => { this.pending--; }, () => { this.pending--; });
         return run;
     }
-    async connectOrStart(config, logger, port) {
+    async connectOrStart(config, logger, port, dataDir) {
         const executable = findExecutable(typeof config.executablePath === "string" ? config.executablePath : this.options.executablePath);
-        // 沿用 WorkBuddy 的默认用户目录，保留用户在桌面端的登录状态。
-        const profile = undefined;
+        const profile = (0, node_path_1.join)(dataDir ?? (0, node_path_1.join)((0, node_os_1.homedir)(), ".agent-bridge", "workbuddy"), "desktop");
+        const launch = (file, args) => (0, desktop_launch_2.launchWorkbuddyDesktop)(file, args, profile, port);
         const timeoutMs = typeof config.startupTimeoutMs === "number" ? config.startupTimeoutMs : 30_000;
         this.reconnect = async () => {
             try {
@@ -327,7 +328,9 @@ class WorkbuddyPlugin {
             catch (first) {
                 if (config.autoStart === false || this.options.client || !executable)
                     throw first;
-                await (0, desktop_launch_1.restartOwnedAndWait)(this.process, executable, [`--remote-debugging-port=${port}`], profile, () => this.client.connect(), timeoutMs, child => { this.process = child; });
+                await (0, desktop_launch_1.terminateOwnedProcess)(this.process);
+                this.process = undefined;
+                await (0, desktop_launch_1.launchManagedAndWait)(executable, [`--remote-debugging-port=${port}`], profile, () => this.client.connect(), timeoutMs, child => { this.process = child; }, launch);
             }
         };
         try {
@@ -340,7 +343,7 @@ class WorkbuddyPlugin {
             if (!executable)
                 throw new Error("未找到 WorkBuddy.exe，请配置 executablePath");
             logger.info(`WorkBuddy 已启动，等待 CDP ${port}`);
-            await (0, desktop_launch_1.launchManagedAndWait)(executable, [`--remote-debugging-port=${port}`], profile, () => this.client.connect(), timeoutMs, child => { this.process = child; });
+            await (0, desktop_launch_1.launchManagedAndWait)(executable, [`--remote-debugging-port=${port}`], profile, () => this.client.connect(), timeoutMs, child => { this.process = child; }, launch);
         }
     }
 }