shennian 0.3.85 → 0.3.86

package/dist/src/agents/model-registry/service.js

@@ -1 +1,115 @@
-import{getAgentConfigSummary as m}from"../config-status.js";import{isCacheFresh as h,readCache as a,writeCache as f}from"./cache.js";import{discoverModelsForAgent as A}from"./discovery.js";import{getAgentRuntimeSummary as y}from"../runtime-compatibility.js";import{resolveManagedAgentRuntimeProtection as v}from"../../security/managed-agent-runtime.js";function x(e){const r=new Set,t=[];for(const n of e)!n.id||r.has(n.id)||(r.add(n.id),t.push(n));return t}function g(e){const t=e.type!=="pi"&&e.type!=="openclaw"?v({agentType:e.type,runtimeVersion:e.version,platform:e.runtimePlatform,isWsl:e.runtimeIsWsl,executableFingerprint:e.executableFingerprint,requireExecutableFingerprint:!0}):null;return{supportsManagedAgent:t?.level==="hard",supportsWorker:e.type!=="pi"&&e.type!=="openclaw",supportsManagerMode:e.type==="codex"||e.type==="claude",...t?{managedAgentProtection:t}:{}}}function I(e){const r=a();return e.map(t=>{const n=m(t.type),s=y(t);return{type:t.type,models:r.agents[t.type]?.models??t.models??[],...g(t),...n?{config:n}:{},...s?{runtime:s}:{}}})}async function q(e,r){const t=a();for(const n of e)delete t.agents[n.type];return f(t),C(e,r)}async function C(e,r){const t=a();let n=!1;const s=[];for(const o of e){const i=t.agents[o.type];let c;if(h(i,o.version))c=i.models;else{let p=null;try{p=x(await A(o,r)),c=p.length>0?p:i?.models??o.models??[]}catch{c=i?.models??o.models??[]}if(p&&p.length>0){const d={version:o.version,refreshedAt:Date.now(),models:c};JSON.stringify(i)!==JSON.stringify(d)&&(t.agents[o.type]=d,n=!0)}}const u=m(o.type),l=y(o);s.push({type:o.type,models:c,...g(o),...u?{config:u}:{},...l?{runtime:l}:{}})}return n&&f(t),s}export{I as getCachedAgentInfos,q as refreshAgentInfos,C as resolveAgentInfos};
+// @arch docs/architecture/cli/model-discovery.md
+// @arch docs/features/managed-agent-restricted-runtime.md
+// @test src/__tests__/model-switching.test.ts
+// @test src/__tests__/model-registry-service.test.ts
+import { getAgentConfigSummary } from '../config-status.js';
+import { isCacheFresh, readCache, writeCache } from './cache.js';
+import { discoverModelsForAgent } from './discovery.js';
+import { getAgentRuntimeSummary } from '../runtime-compatibility.js';
+import { resolveManagedAgentRuntimeProtection } from '../../security/managed-agent-runtime.js';
+function uniqueModels(models) {
+    const seen = new Set();
+    const unique = [];
+    for (const model of models) {
+        if (!model.id || seen.has(model.id))
+            continue;
+        seen.add(model.id);
+        unique.push(model);
+    }
+    return unique;
+}
+function runtimeCapabilities(agent) {
+    const managedCandidate = agent.type !== 'pi' && agent.type !== 'openclaw';
+    const managedAgentProtection = managedCandidate
+        ? resolveManagedAgentRuntimeProtection({
+            agentType: agent.type,
+            runtimeVersion: agent.version,
+            platform: agent.runtimePlatform,
+            isWsl: agent.runtimeIsWsl,
+            executableFingerprint: agent.executableFingerprint,
+            requireExecutableFingerprint: true,
+        })
+        : null;
+    // A Room member can be prompted by every other member. "Partial" protection
+    // therefore cannot be converted into an acceptable risk acknowledgement: a
+    // readable host credential is an account capability, not merely a file leak.
+    const supportsManagedAgent = managedAgentProtection?.level === 'hard';
+    return {
+        supportsManagedAgent,
+        supportsWorker: agent.type !== 'pi' && agent.type !== 'openclaw',
+        supportsManagerMode: agent.type === 'codex' || agent.type === 'claude',
+        ...(managedAgentProtection
+            ? {
+                managedAgentProtection,
+            }
+            : {}),
+    };
+}
+export function getCachedAgentInfos(detectedAgents) {
+    const cache = readCache();
+    return detectedAgents.map((agent) => {
+        const config = getAgentConfigSummary(agent.type);
+        const runtime = getAgentRuntimeSummary(agent);
+        return {
+            type: agent.type,
+            models: cache.agents[agent.type]?.models ?? agent.models ?? [],
+            ...runtimeCapabilities(agent),
+            ...(config ? { config } : {}),
+            ...(runtime ? { runtime } : {}),
+        };
+    });
+}
+export async function refreshAgentInfos(detectedAgents, context) {
+    const cache = readCache();
+    for (const agent of detectedAgents) {
+        delete cache.agents[agent.type];
+    }
+    writeCache(cache);
+    return resolveAgentInfos(detectedAgents, context);
+}
+export async function resolveAgentInfos(detectedAgents, context) {
+    const cache = readCache();
+    let changed = false;
+    const infos = [];
+    for (const agent of detectedAgents) {
+        const cached = cache.agents[agent.type];
+        let models;
+        if (isCacheFresh(cached, agent.version)) {
+            models = cached.models;
+        }
+        else {
+            let discovered = null;
+            try {
+                discovered = uniqueModels(await discoverModelsForAgent(agent, context));
+                models = discovered.length > 0 ? discovered : (cached?.models ?? agent.models ?? []);
+            }
+            catch {
+                models = cached?.models ?? agent.models ?? [];
+            }
+            if (discovered && discovered.length > 0) {
+                const nextEntry = {
+                    version: agent.version,
+                    refreshedAt: Date.now(),
+                    models,
+                };
+                if (JSON.stringify(cached) !== JSON.stringify(nextEntry)) {
+                    cache.agents[agent.type] = nextEntry;
+                    changed = true;
+                }
+            }
+        }
+        const config = getAgentConfigSummary(agent.type);
+        const runtime = getAgentRuntimeSummary(agent);
+        infos.push({
+            type: agent.type,
+            models,
+            ...runtimeCapabilities(agent),
+            ...(config ? { config } : {}),
+            ...(runtime ? { runtime } : {}),
+        });
+    }
+    if (changed) {
+        writeCache(cache);
+    }
+    return infos;
+}

package/dist/src/agents/model-registry/types.js

@@ -1 +1,8 @@
-import o from"node:os";import{resolveShennianPath as t}from"../../config/index.js";const n=1,p=1440*60*1e3,s=t("model-cache.json"),C=o.tmpdir();export{p as CACHE_TTL_MS,n as CACHE_VERSION,C as DISCOVERY_WORKDIR,s as MODEL_CACHE_PATH};
+// @arch docs/architecture/cli/model-discovery.md
+// @test src/__tests__/model-switching.test.ts
+import os from 'node:os';
+import { resolveShennianPath } from '../../config/index.js';
+export const CACHE_VERSION = 1;
+export const CACHE_TTL_MS = 24 * 60 * 60 * 1000;
+export const MODEL_CACHE_PATH = resolveShennianPath('model-cache.json');
+export const DISCOVERY_WORKDIR = os.tmpdir();

package/dist/src/agents/model-registry.js

@@ -1 +1,19 @@
-import{getCachedAgentInfos as m,refreshAgentInfos as u,resolveAgentInfos as v}from"./model-registry/service.js";import{applyClaudeModelEnvOverrides as e,discoverClaudeAliasModelsFromEnv as s,fallbackCodexModels as o,fallbackClaudeAliasModels as l,parseClaudeBinaryModels as r,parseClaudeModels as d,parseCodexModels as a,parseCodexAppServerModels as p,parseCursorModels as n,parseGeminiModels as i,parseOpenClawModels as t,stripAnsi as C}from"./model-registry/parsers.js";const f={applyClaudeModelEnvOverrides:e,discoverClaudeAliasModelsFromEnv:s,fallbackCodexModels:o,fallbackClaudeAliasModels:l,parseClaudeBinaryModels:r,parseClaudeModels:d,parseCodexModels:a,parseCodexAppServerModels:p,parseCursorModels:n,parseOpenClawModels:t,parseGeminiModels:i,stripAnsi:C};export{m as getCachedAgentInfos,f as modelSwitchingTestExports,u as refreshAgentInfos,v as resolveAgentInfos};
+// @arch docs/architecture/cli/model-discovery.md
+// @test src/__tests__/model-switching.test.ts
+export { getCachedAgentInfos, refreshAgentInfos, resolveAgentInfos, } from './model-registry/service.js';
+import { applyClaudeModelEnvOverrides, discoverClaudeAliasModelsFromEnv, fallbackCodexModels, fallbackClaudeAliasModels, parseClaudeBinaryModels, parseClaudeModels, parseCodexModels, parseCodexAppServerModels, parseCursorModels, parseGeminiModels, parseOpenClawModels, stripAnsi, } from './model-registry/parsers.js';
+/** Used by Vitest / `model-switching-e2e.ts` — not a stable public API. */
+export const modelSwitchingTestExports = {
+    applyClaudeModelEnvOverrides,
+    discoverClaudeAliasModelsFromEnv,
+    fallbackCodexModels,
+    fallbackClaudeAliasModels,
+    parseClaudeBinaryModels,
+    parseClaudeModels,
+    parseCodexModels,
+    parseCodexAppServerModels,
+    parseCursorModels,
+    parseOpenClawModels,
+    parseGeminiModels,
+    stripAnsi,
+};

package/dist/src/agents/native-capabilities.js

@@ -1 +1,237 @@
-import v from"node:crypto";import{execFileSync as g}from"node:child_process";import u from"node:fs";import x from"node:os";import c from"node:path";const S=new Set(["codex","claude","workbuddy"]);function P(t){return S.has(t)}function L(t){if(!P(t.agentType))return[];const i=c.resolve(t.homeDir??x.homedir()),e=c.resolve(t.workDir||i),r=[];if(t.agentType==="codex"){for(const o of y(e))l(r,c.join(o,".agents","skills"),{provider:"codex",source:"project",priority:0,invocationPrefix:"$",maxDepth:2});l(r,c.join(i,".agents","skills"),{provider:"codex",source:"personal",priority:1,invocationPrefix:"$",maxDepth:2}),l(r,c.join(i,".codex","skills"),{provider:"codex",source:"personal",priority:1,invocationPrefix:"$",maxDepth:3,systemSegment:".system"}),l(r,"/etc/codex/skills",{provider:"codex",source:"system",priority:3,invocationPrefix:"$",maxDepth:2}),t.homeDir||$(r)}else{const o=t.agentType==="claude"?".claude":".codebuddy";for(const s of y(e))l(r,c.join(s,o,"skills"),{provider:t.agentType,source:"project",priority:0,invocationPrefix:"/",maxDepth:3});l(r,c.join(i,o,"skills"),{provider:t.agentType,source:"personal",priority:1,invocationPrefix:"/",maxDepth:3}),D(r,{provider:t.agentType,homeDir:i,configFolder:o})}const n=new Map;for(const o of r){const s=n.get(o.invocation);(!s||o.priority<s.priority)&&n.set(o.invocation,o)}return[...n.values()].sort((o,s)=>o.name.localeCompare(s.name)||o.invocation.localeCompare(s.invocation)).map(({priority:o,...s})=>s)}function $(t){try{const i=g("codex",["plugin","list","--json"],{encoding:"utf8",timeout:5e3,maxBuffer:4194304,stdio:["ignore","pipe","ignore"]}),e=JSON.parse(i);for(const r of e.installed??[]){const n=typeof r.name=="string"?r.name.trim():"",o=typeof r.source?.path=="string"?r.source.path:"";!n||!/^[a-zA-Z0-9._-]+$/.test(n)||!o||r.installed!==!0||r.enabled!==!0||l(t,c.resolve(o),{provider:"codex",source:"plugin",priority:2,invocationPrefix:"$",pluginName:n,maxDepth:4})}}catch{}}function y(t){const i=[];let e=t;for(let r=0;r<64;r+=1){i.push(e);const n=c.dirname(e);if(n===e)break;e=n}return i}function l(t,i,e){N(i)&&k(i,e.maxDepth,r=>{const n=b(r);if(!n)return;const o=c.relative(i,r).split(c.sep),s=e.systemSegment&&o.includes(e.systemSegment)?"system":e.source,a=e.pluginName?`${e.invocationPrefix}${e.pluginName}:${n.name}`:`${e.invocationPrefix}${n.name}`;t.push({id:j(e.provider,a,r),name:n.name,description:n.description,kind:e.pluginName?"plugin_skill":"skill",source:s,invocation:a,priority:e.priority})})}function D(t,i){const e=c.join(i.homeDir,i.configFolder,"plugins"),r=c.join(e,"installed_plugins.json");if(_(r))try{const n=JSON.parse(u.readFileSync(r,"utf8"));for(const[o,s]of Object.entries(n.plugins??{})){const a=o.split("@")[0]?.trim();if(!a||!/^[a-zA-Z0-9._-]+$/.test(a))continue;const p=Array.isArray(s)?s:[s];for(const d of p){const f=d&&typeof d=="object"&&"installPath"in d?String(d.installPath??""):"";if(!f)continue;const m=c.resolve(f);w(m,e)&&l(t,m,{provider:i.provider,source:"plugin",priority:2,invocationPrefix:"/",pluginName:a,maxDepth:4})}}}catch{}}function k(t,i,e){const r=[{directory:t,depth:0}];let n=0;for(;r.length>0&&n<2e3;){const o=r.shift();let s;try{s=u.readdirSync(o.directory,{withFileTypes:!0})}catch{continue}for(const a of s){if(n+=1,n>=2e3)break;const p=c.join(o.directory,a.name);a.isFile()&&!a.isSymbolicLink()&&a.name==="SKILL.md"&&e(p),a.isDirectory()&&!a.isSymbolicLink()&&o.depth<i&&r.push({directory:p,depth:o.depth+1})}}}function b(t){try{const e=u.readFileSync(t,"utf8").slice(0,65536).match(/^---\s*\r?\n([\s\S]*?)\r?\n---(?:\s*\r?\n|$)/)?.[1]??"",r=h(e,"name")||c.basename(c.dirname(t));if(!/^[a-zA-Z0-9._-]+$/.test(r))return null;const n=h(e,"description");return{name:r,...n?{description:n}:{}}}catch{return null}}function h(t,i){const e=t.split(/\r?\n/).find(n=>n.startsWith(`${i}:`));return e?e.slice(i.length+1).trim().replace(/^(?:"([\s\S]*)"|'([\s\S]*)')$/,"$1$2").trim():""}function j(t,i,e){return v.createHash("sha256").update(`${t}\0${i}\0${e}`).digest("hex").slice(0,20)}function w(t,i){const e=c.relative(c.resolve(i),t);return e===""||!e.startsWith(`..${c.sep}`)&&e!==".."&&!c.isAbsolute(e)}function N(t){try{const i=u.lstatSync(t);return i.isDirectory()&&!i.isSymbolicLink()}catch{return!1}}function _(t){try{const i=u.lstatSync(t);return i.isFile()&&!i.isSymbolicLink()}catch{return!1}}export{P as isNativeCapabilityProvider,L as listAgentNativeCapabilities};
+// @arch docs/features/agent-native-capabilities.md
+// @test src/__tests__/native-capabilities.test.ts
+import crypto from 'node:crypto';
+import { execFileSync } from 'node:child_process';
+import fs from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+const SUPPORTED_PROVIDERS = new Set(['codex', 'claude', 'workbuddy']);
+export function isNativeCapabilityProvider(value) {
+    return SUPPORTED_PROVIDERS.has(value);
+}
+export function listAgentNativeCapabilities(options) {
+    if (!isNativeCapabilityProvider(options.agentType))
+        return [];
+    const homeDir = path.resolve(options.homeDir ?? os.homedir());
+    const workDir = path.resolve(options.workDir || homeDir);
+    const candidates = [];
+    if (options.agentType === 'codex') {
+        for (const root of ancestorRoots(workDir)) {
+            collectSkillDirectory(candidates, path.join(root, '.agents', 'skills'), {
+                provider: 'codex', source: 'project', priority: 0, invocationPrefix: '$', maxDepth: 2,
+            });
+        }
+        collectSkillDirectory(candidates, path.join(homeDir, '.agents', 'skills'), {
+            provider: 'codex', source: 'personal', priority: 1, invocationPrefix: '$', maxDepth: 2,
+        });
+        // Current Codex hosts also expose built-in and locally installed skills here.
+        collectSkillDirectory(candidates, path.join(homeDir, '.codex', 'skills'), {
+            provider: 'codex', source: 'personal', priority: 1, invocationPrefix: '$', maxDepth: 3,
+            systemSegment: '.system',
+        });
+        collectSkillDirectory(candidates, '/etc/codex/skills', {
+            provider: 'codex', source: 'system', priority: 3, invocationPrefix: '$', maxDepth: 2,
+        });
+        if (!options.homeDir)
+            collectCodexPluginSkills(candidates);
+    }
+    else {
+        const configFolder = options.agentType === 'claude' ? '.claude' : '.codebuddy';
+        for (const root of ancestorRoots(workDir)) {
+            collectSkillDirectory(candidates, path.join(root, configFolder, 'skills'), {
+                provider: options.agentType, source: 'project', priority: 0, invocationPrefix: '/', maxDepth: 3,
+            });
+        }
+        collectSkillDirectory(candidates, path.join(homeDir, configFolder, 'skills'), {
+            provider: options.agentType, source: 'personal', priority: 1, invocationPrefix: '/', maxDepth: 3,
+        });
+        collectInstalledPluginSkills(candidates, {
+            provider: options.agentType,
+            homeDir,
+            configFolder,
+        });
+    }
+    const deduped = new Map();
+    for (const candidate of candidates) {
+        const current = deduped.get(candidate.invocation);
+        if (!current || candidate.priority < current.priority)
+            deduped.set(candidate.invocation, candidate);
+    }
+    return [...deduped.values()]
+        .sort((a, b) => a.name.localeCompare(b.name) || a.invocation.localeCompare(b.invocation))
+        .map(({ priority: _priority, ...capability }) => capability);
+}
+function collectCodexPluginSkills(target) {
+    try {
+        const output = execFileSync('codex', ['plugin', 'list', '--json'], {
+            encoding: 'utf8',
+            timeout: 5_000,
+            maxBuffer: 4 * 1024 * 1024,
+            stdio: ['ignore', 'pipe', 'ignore'],
+        });
+        const parsed = JSON.parse(output);
+        for (const plugin of parsed.installed ?? []) {
+            const pluginName = typeof plugin.name === 'string' ? plugin.name.trim() : '';
+            const installPath = typeof plugin.source?.path === 'string' ? plugin.source.path : '';
+            if (!pluginName || !/^[a-zA-Z0-9._-]+$/.test(pluginName) || !installPath)
+                continue;
+            if (plugin.installed !== true || plugin.enabled !== true)
+                continue;
+            collectSkillDirectory(target, path.resolve(installPath), {
+                provider: 'codex',
+                source: 'plugin',
+                priority: 2,
+                invocationPrefix: '$',
+                pluginName,
+                maxDepth: 4,
+            });
+        }
+    }
+    catch {
+        // Codex versions without the plugin JSON command still expose filesystem skills.
+    }
+}
+function ancestorRoots(start) {
+    const roots = [];
+    let current = start;
+    for (let count = 0; count < 64; count += 1) {
+        roots.push(current);
+        const parent = path.dirname(current);
+        if (parent === current)
+            break;
+        current = parent;
+    }
+    return roots;
+}
+function collectSkillDirectory(target, root, options) {
+    if (!isRealDirectory(root))
+        return;
+    walkSkillFiles(root, options.maxDepth, (skillFile) => {
+        const metadata = readSkillMetadata(skillFile);
+        if (!metadata)
+            return;
+        const relative = path.relative(root, skillFile).split(path.sep);
+        const source = options.systemSegment && relative.includes(options.systemSegment)
+            ? 'system'
+            : options.source;
+        const invocation = options.pluginName
+            ? `${options.invocationPrefix}${options.pluginName}:${metadata.name}`
+            : `${options.invocationPrefix}${metadata.name}`;
+        target.push({
+            id: stableCapabilityId(options.provider, invocation, skillFile),
+            name: metadata.name,
+            description: metadata.description,
+            kind: options.pluginName ? 'plugin_skill' : 'skill',
+            source,
+            invocation,
+            priority: options.priority,
+        });
+    });
+}
+function collectInstalledPluginSkills(target, options) {
+    const pluginRoot = path.join(options.homeDir, options.configFolder, 'plugins');
+    const manifestPath = path.join(pluginRoot, 'installed_plugins.json');
+    if (!isRealFile(manifestPath))
+        return;
+    try {
+        const parsed = JSON.parse(fs.readFileSync(manifestPath, 'utf8'));
+        for (const [qualifiedName, rawInstallations] of Object.entries(parsed.plugins ?? {})) {
+            const pluginName = qualifiedName.split('@')[0]?.trim();
+            if (!pluginName || !/^[a-zA-Z0-9._-]+$/.test(pluginName))
+                continue;
+            const installations = Array.isArray(rawInstallations) ? rawInstallations : [rawInstallations];
+            for (const raw of installations) {
+                const installPath = raw && typeof raw === 'object' && 'installPath' in raw
+                    ? String(raw.installPath ?? '')
+                    : '';
+                if (!installPath)
+                    continue;
+                const resolved = path.resolve(installPath);
+                if (!isWithinRoot(resolved, pluginRoot))
+                    continue;
+                collectSkillDirectory(target, resolved, {
+                    provider: options.provider,
+                    source: 'plugin',
+                    priority: 2,
+                    invocationPrefix: '/',
+                    pluginName,
+                    maxDepth: 4,
+                });
+            }
+        }
+    }
+    catch {
+        // A malformed third-party plugin registry must not break ordinary chat.
+    }
+}
+function walkSkillFiles(root, maxDepth, visit) {
+    const queue = [{ directory: root, depth: 0 }];
+    let visited = 0;
+    while (queue.length > 0 && visited < 2_000) {
+        const item = queue.shift();
+        let entries;
+        try {
+            entries = fs.readdirSync(item.directory, { withFileTypes: true });
+        }
+        catch {
+            continue;
+        }
+        for (const entry of entries) {
+            visited += 1;
+            if (visited >= 2_000)
+                break;
+            const fullPath = path.join(item.directory, entry.name);
+            if (entry.isFile() && !entry.isSymbolicLink() && entry.name === 'SKILL.md')
+                visit(fullPath);
+            if (entry.isDirectory() && !entry.isSymbolicLink() && item.depth < maxDepth) {
+                queue.push({ directory: fullPath, depth: item.depth + 1 });
+            }
+        }
+    }
+}
+function readSkillMetadata(skillFile) {
+    try {
+        const content = fs.readFileSync(skillFile, 'utf8').slice(0, 64 * 1024);
+        const frontmatter = content.match(/^---\s*\r?\n([\s\S]*?)\r?\n---(?:\s*\r?\n|$)/)?.[1] ?? '';
+        const name = readFrontmatterScalar(frontmatter, 'name') || path.basename(path.dirname(skillFile));
+        if (!/^[a-zA-Z0-9._-]+$/.test(name))
+            return null;
+        const description = readFrontmatterScalar(frontmatter, 'description');
+        return { name, ...(description ? { description } : {}) };
+    }
+    catch {
+        return null;
+    }
+}
+function readFrontmatterScalar(frontmatter, key) {
+    const line = frontmatter.split(/\r?\n/).find((value) => value.startsWith(`${key}:`));
+    if (!line)
+        return '';
+    const value = line.slice(key.length + 1).trim();
+    return value.replace(/^(?:"([\s\S]*)"|'([\s\S]*)')$/, '$1$2').trim();
+}
+function stableCapabilityId(provider, invocation, skillFile) {
+    return crypto.createHash('sha256').update(`${provider}\0${invocation}\0${skillFile}`).digest('hex').slice(0, 20);
+}
+function isWithinRoot(candidate, root) {
+    const relative = path.relative(path.resolve(root), candidate);
+    return relative === '' || (!relative.startsWith(`..${path.sep}`) && relative !== '..' && !path.isAbsolute(relative));
+}
+function isRealDirectory(value) {
+    try {
+        const stat = fs.lstatSync(value);
+        return stat.isDirectory() && !stat.isSymbolicLink();
+    }
+    catch {
+        return false;
+    }
+}
+function isRealFile(value) {
+    try {
+        const stat = fs.lstatSync(value);
+        return stat.isFile() && !stat.isSymbolicLink();
+    }
+    catch {
+        return false;
+    }
+}