opencode-codebuddy-external-auth 1.0.14 → 1.0.16

package/dist/plugin.js

@@ -8,13 +8,24 @@ const PROVIDER_ID = "codebuddy-external";
 const CONFIG = {
     // IOA 版本使用 copilot.tencent.com 进行认证
     serverUrl: "https://copilot.tencent.com",
-    // 本地 codebuddy --serve 代理地址
-    localServeUrl: "http://127.0.0.1:3000",
+    // 真实对话 API 路径
+    chatCompletionsPath: "/v2/chat/completions",
     // 平台标识
     platform: "CLI",
     appVersion: "2.37.20",
-    // 使用 HTTP API 模式还是 CLI 模式
+    ideName: "CLI",
+    ideType: "CLI",
+    domain: "tencent.sso.copilot.tencent.com",
+    product: "SaaS",
+    agentIntent: "craft",
+    // 使用 HTTP Auth API 模式还是 CLI 模式
     useHttpApi: true,
+    // 可通过环境变量注入（从零启动时必需）
+    tenantId: process.env.CODEBUDDY_TENANT_ID || "",
+    enterpriseId: process.env.CODEBUDDY_ENTERPRISE_ID || "",
+    userId: process.env.CODEBUDDY_USER_ID || "",
+    // 强制覆盖模型（避免 OpenCode 仍使用旧模型）
+    defaultModel: process.env.CODEBUDDY_DEFAULT_MODEL || "",
 };
 // ============================================================================
 // Utility Functions
@@ -22,6 +33,108 @@ const CONFIG = {
 function sleep(ms) {
     return new Promise((resolve) => setTimeout(resolve, ms));
 }
+function generateUuid() {
+    if (globalThis.crypto?.randomUUID) {
+        return globalThis.crypto.randomUUID();
+    }
+    return `${Date.now()}-${Math.random().toString(16).slice(2)}`;
+}
+function decodeJwtPayload(token) {
+    try {
+        const parts = token.split(".");
+        if (parts.length < 2)
+            return null;
+        const payload = parts[1].replace(/-/g, "+").replace(/_/g, "/");
+        const pad = "=".repeat((4 - (payload.length % 4)) % 4);
+        const json = Buffer.from(payload + pad, "base64").toString("utf8");
+        return JSON.parse(json);
+    }
+    catch {
+        return null;
+    }
+}
+function extractTenantIdFromIss(iss) {
+    if (!iss)
+        return "";
+    const match = iss.match(/realms\/sso-([^/]+)$/);
+    return match?.[1] || "";
+}
+let warnedTenantId = false;
+let warnedEnterpriseId = false;
+let warnedUserId = false;
+function resolveTenantId(accessToken) {
+    if (CONFIG.tenantId)
+        return CONFIG.tenantId;
+    const payload = decodeJwtPayload(accessToken);
+    return (payload?.tenant_id ||
+        payload?.tenantId ||
+        extractTenantIdFromIss(payload?.iss));
+}
+function resolveEnterpriseId(accessToken) {
+    if (CONFIG.enterpriseId)
+        return CONFIG.enterpriseId;
+    const payload = decodeJwtPayload(accessToken);
+    return (payload?.enterprise_id ||
+        payload?.enterpriseId ||
+        payload?.ent_id ||
+        payload?.entId ||
+        "");
+}
+function resolveUserId(accessToken) {
+    if (CONFIG.userId)
+        return CONFIG.userId;
+    const payload = decodeJwtPayload(accessToken);
+    return payload?.user_id || payload?.userId || payload?.uid || payload?.sub || "";
+}
+function resolveModel(inputModel) {
+    if (CONFIG.defaultModel)
+        return CONFIG.defaultModel;
+    return inputModel || "";
+}
+function buildAuthHeaders(accessToken) {
+    const tenantId = resolveTenantId(accessToken);
+    const enterpriseId = resolveEnterpriseId(accessToken);
+    const userId = resolveUserId(accessToken);
+    if (!tenantId && !warnedTenantId) {
+        warnedTenantId = true;
+        console.warn("[codebuddy-external] 未获取到 X-Tenant-Id，请设置 CODEBUDDY_TENANT_ID");
+    }
+    if (!enterpriseId && !warnedEnterpriseId) {
+        warnedEnterpriseId = true;
+        console.warn("[codebuddy-external] 未获取到 X-Enterprise-Id，请设置 CODEBUDDY_ENTERPRISE_ID");
+    }
+    if (!userId && !warnedUserId) {
+        warnedUserId = true;
+        console.warn("[codebuddy-external] 未获取到 X-User-Id，请设置 CODEBUDDY_USER_ID");
+    }
+    const conversationId = generateUuid();
+    const messageId = generateUuid();
+    const requestId = messageId;
+    const headers = {
+        "Accept": "application/json",
+        "Content-Type": "application/json",
+        "X-Requested-With": "XMLHttpRequest",
+        "Authorization": `Bearer ${accessToken}`,
+        "X-Conversation-ID": conversationId,
+        "X-Conversation-Message-ID": messageId,
+        "X-Conversation-Request-ID": requestId,
+        "X-Request-ID": requestId,
+        "X-Agent-Intent": CONFIG.agentIntent,
+        "X-IDE-Type": CONFIG.ideType,
+        "X-IDE-Name": CONFIG.ideName,
+        "X-IDE-Version": CONFIG.appVersion,
+        "X-Domain": CONFIG.domain,
+        "X-Product": CONFIG.product,
+        "User-Agent": `CLI/${CONFIG.appVersion} CodeBuddy/${CONFIG.appVersion}`,
+    };
+    if (tenantId)
+        headers["X-Tenant-Id"] = tenantId;
+    if (enterpriseId)
+        headers["X-Enterprise-Id"] = enterpriseId;
+    if (userId)
+        headers["X-User-Id"] = userId;
+    return headers;
+}
 /**
  * Convert OpenAI chat messages to a single prompt string
  */
@@ -187,7 +300,7 @@ async function executeCodeBuddyCLI(prompt, model, systemPrompt) {
  * Creates a fetch function that invokes codebuddy CLI
  * and converts between OpenAI and CodeBuddy formats
  */
-function createProxyFetch() {
+function createProxyFetch(auth) {
     return async (url, init) => {
         const urlStr = url.toString();
         // Check if this is a chat completions request
@@ -202,18 +315,13 @@ function createProxyFetch() {
                     });
                 }
                 const openaiRequest = JSON.parse(typeof body === "string" ? body : await new Response(body).text());
-                // Convert to CodeBuddy format
-                const { prompt, systemPrompt } = convertMessagesToPrompt(openaiRequest.messages);
-                // 调试日志
-                console.log(`[codebuddy-external] Messages count: ${openaiRequest.messages.length}`);
-                console.log(`[codebuddy-external] Prompt: ${prompt.substring(0, 100)}...`);
                 // 根据配置选择 HTTP API 模式或 CLI 模式
                 if (CONFIG.useHttpApi) {
-                    return await executeViaHttpApi(openaiRequest, prompt, systemPrompt);
-                }
-                else {
-                    return await executeViaCli(openaiRequest, prompt, systemPrompt);
+                    return await executeViaAuthApi(openaiRequest, auth);
                 }
+                // CLI 模式：将消息拼接为 prompt
+                const { prompt, systemPrompt } = convertMessagesToPrompt(openaiRequest.messages);
+                return await executeViaCli(openaiRequest, prompt, systemPrompt);
             }
             catch (error) {
                 console.error(`[codebuddy-external] Error:`, error);
@@ -228,61 +336,44 @@ function createProxyFetch() {
     };
 }
 /**
- * Execute via HTTP API (codebuddy --serve)
- * 支持流式响应
+ * Execute via Auth HTTP API (真实对话接口)
  */
-async function executeViaHttpApi(openaiRequest, prompt, systemPrompt) {
-    // 构建 CodeBuddy /agent 请求
-    // 暂时禁用流式模式，先确保基础功能正常
-    const useStream = false; // openaiRequest.stream
-    const agentRequest = {
-        prompt,
-        model: openaiRequest.model,
-        print: true, // 关键：非交互模式，返回结果
-        outputFormat: useStream ? "stream-json" : "text",
-    };
-    if (systemPrompt) {
-        agentRequest.systemPrompt = systemPrompt;
+async function executeViaAuthApi(openaiRequest, auth) {
+    if (auth.type !== "oauth" || !auth.access) {
+        throw new Error("缺少 access token，无法调用 CodeBuddy API");
     }
-    // 调用本地 codebuddy --serve
-    const response = await fetch(`${CONFIG.localServeUrl}/agent`, {
-        method: "POST",
-        headers: {
-            "Content-Type": "application/json",
-        },
-        body: JSON.stringify(agentRequest),
-    });
-    if (!response.ok) {
-        const errorText = await response.text();
-        throw new Error(`HTTP API error: ${response.status} - ${errorText}`);
+    let accessToken = auth.access;
+    const resolvedModel = resolveModel(openaiRequest.model);
+    if (!resolvedModel) {
+        throw new Error("未设置模型，请设置 CODEBUDDY_DEFAULT_MODEL 或在 OpenCode 选择模型");
     }
-    // 处理流式响应
-    if (useStream && response.body) {
-        return new Response(transformCodeBuddyStreamToOpenAI(response.body, openaiRequest.model), {
-            headers: {
-                "Content-Type": "text/event-stream",
-                "Cache-Control": "no-cache",
-                "Connection": "keep-alive",
-            },
+    const requestBody = {
+        ...openaiRequest,
+        model: resolvedModel,
+        response_format: openaiRequest.response_format || { type: "text" },
+        stream: openaiRequest.stream ?? true,
+    };
+    const doRequest = async (token) => {
+        const response = await fetch(`${CONFIG.serverUrl}${CONFIG.chatCompletionsPath}`, {
+            method: "POST",
+            headers: buildAuthHeaders(token),
+            body: JSON.stringify(requestBody),
         });
+        return response;
+    };
+    let response = await doRequest(accessToken);
+    if ((response.status === 401 || response.status === 403) && auth.refresh) {
+        const refreshed = await refreshAccessToken(auth.refresh);
+        if (refreshed?.accessToken) {
+            accessToken = refreshed.accessToken;
+            response = await doRequest(accessToken);
+        }
     }
-    // 非流式响应 - 等待完整结果
-    const responseText = await response.text();
-    let resultText = responseText.trim();
-    // 返回 OpenAI 格式响应
-    // 如果客户端请求流式，返回伪流式响应
-    if (openaiRequest.stream) {
-        return new Response(createOpenAIStreamResponse(resultText, openaiRequest.model), {
-            headers: {
-                "Content-Type": "text/event-stream",
-                "Cache-Control": "no-cache",
-                "Connection": "keep-alive",
-            },
-        });
+    if (!response.ok) {
+        const errorText = await response.text();
+        throw new Error(`Auth API error: ${response.status} - ${errorText}`);
     }
-    return new Response(createOpenAIResponse(resultText, openaiRequest.model), {
-        headers: { "Content-Type": "application/json" },
-    });
+    return response;
 }
 /**
  * Transform CodeBuddy SSE stream to OpenAI SSE stream
@@ -524,9 +615,9 @@ const CodeBuddyExternalAuthPlugin = async (_input) => {
                     // 返回代理 fetch 函数，通过 codebuddy CLI 处理请求
                     // baseURL 可以是任意值，因为 fetch 会拦截并调用 CLI
                     return {
-                        apiKey: "cli-proxy", // 占位符，实际认证由 codebuddy CLI 处理
-                        baseURL: "http://localhost", // 占位符，fetch 会拦截请求
-                        fetch: createProxyFetch(),
+                        apiKey: "cli-proxy", // 占位符，实际认证由 fetch 处理
+                        baseURL: CONFIG.serverUrl,
+                        fetch: createProxyFetch(auth),
                     };
                 }
                 return {};
@@ -583,8 +674,8 @@ const CodeBuddyExternalAuthPlugin = async (_input) => {
             if (input.model.providerID !== PROVIDER_ID) {
                 return;
             }
-            // 占位符，实际请求由 fetch 函数拦截并通过 CLI 处理
-            output.options.baseURL = "http://localhost";
+            // 交由 fetch 处理，baseURL 仅用于 SDK 记录
+            output.options.baseURL = CONFIG.serverUrl;
         },
     };
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "opencode-codebuddy-external-auth",
-  "version": "1.0.14",
+  "version": "1.0.16",
   "description": "OpenCode plugin for CodeBuddy External (IOA) authentication",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",