aps-agent/server/index.ts

/**
 * 平台服务入口（架构设计第 2 节）。
 *
 * 组装：应用服务 + HTTP / SSE 入口。控制面（core）与引擎适配（agent）在后续阶段接入。
 */
import { randomUUID } from 'node:crypto';
import type { Server } from 'node:http';
import type { AddressInfo } from 'node:net';

import type { AgentRuntime } from './agent/runtime.js';
import { loadConfig } from './config.js';
import type { CapabilityVisibility } from './core/registry/visibility.js';
import { openDatabase, type Database } from './core/storage/db.js';
import { SessionRepository } from './core/storage/sessions.js';
import { ContextRepository } from './core/storage/context.js';
import { RuntimeSupervisor } from './agent/process-manager.js';
import { IdentityContext } from './core/identity/context.js';
import { CredentialBroker } from './core/credentials/broker.js';
import { PendingActionStore } from './core/approval/store.js';
import { AuditLog } from './core/audit/log.js';
import { ApplicationService } from './app/service.js';
import type { Provider } from '@aps/provider-sdk';
import { createHttpServer } from './entry/http.js';

export { ApplicationService } from './app/service.js';
export type { Subject } from './app/subject.js';
export { createHttpServer } from './entry/http.js';

export interface StartOptions {
  host?: string;
  port?: number;
  version?: string;
  /** 引擎实现：默认假引擎；A3.3 起可换成 Pi 子进程，测试也可注入脚本化假引擎 */
  runtime?: AgentRuntime;
  /** 数据库路径：默认取配置；测试传 ':memory:' 以隔离 */
  databasePath?: string;
  /** 引擎覆盖：测试必须传 'fake'，避免读到本机的真实模型配置 */
  engine?: 'fake' | 'pi';
  /** 能力可见性覆盖（A3.5）：不传则用配置里的规则 */
  capabilityVisibility?: CapabilityVisibility;
  /** 确认卡有效期覆盖（A4.4）：测试用，默认配置里的 15 分钟 */
  approvalTtlMs?: number;
}

export interface RunningServer {
  /** 本实例选定的引擎实现（A3.9 一致性对比、A3.10 进程管理要用） */
  runtime: AgentRuntime;
  url: string;
  port: number;
  service: ApplicationService;
  /** 引擎工具回调的内部令牌：由平台生成，启动引擎子进程时注入（A3.11） */
  internalToken: string;
  close(): Promise<void>;
}

export async function startServer(options: StartOptions = {}): Promise<RunningServer> {
  const config = loadConfig();
  const host = options.host ?? config.server.host;
  const port = options.port ?? config.server.port;
  const internalToken = randomUUID();
  // 端口要等 listen 之后才知道，所以桥信息用闭包延后取（A3.11 的能力桥需要它）
  const bridgeRef: { info?: { baseUrl: string; internalToken: string } } = {};
  const runtime = options.runtime ?? (await selectRuntime(config, options.engine, () => bridgeRef.info));
  const database: Database = openDatabase(options.databasePath ?? config.database.path);
  // 引擎进程管理（A3.10）：空闲回收与并发上限可按环境变量调；日志走 stderr
  const supervisor = new RuntimeSupervisor({
    maxConcurrent: Number.parseInt(process.env.APS_MAX_CONCURRENT_ENGINES ?? '4', 10),
    idleTimeoutMs: Number.parseInt(process.env.APS_ENGINE_IDLE_MS ?? String(15 * 60_000), 10),
    onLog: (message) => console.error(message),
  });
  // A4 控制面五块：身份、凭据、待确认动作、审计落平台库；策略判定在 Core 内按同一批依赖执行
  const service = new ApplicationService({
    ...(options.version === undefined ? {} : { version: options.version }),
    runtime,
    sessionRepository: new SessionRepository(database),
    capabilityVisibility: options.capabilityVisibility ?? config.capabilities,
    contextRepository: new ContextRepository(database),
    supervisor,
    identity: new IdentityContext(database),
    credentials: new CredentialBroker({ db: database, keyFile: config.security.credentialKeyPath }),
    approvals: new PendingActionStore(database),
    audit: new AuditLog(database),
    ...(options.approvalTtlMs === undefined ? {} : { approvalTtlMs: options.approvalTtlMs }),
  });
  // 开发期可选：APS_DEV_PROVIDER=1 时注册假 Provider，用于本地联调与演示（默认不注册，能力清单为空）
  if (process.env.APS_DEV_PROVIDER === '1') {
    const { createFakeProvider } = await import('@aps/provider-sdk/testing');
    await service.registerProvider(createFakeProvider());
  }
  // 已配置的真实 Provider（A5）：按配置动态加载，注册不上不阻塞平台启动
  await registerConfiguredProviders(service, config.providers);

  supervisor.startSweeper();
  const server: Server = createHttpServer(service, internalToken);

  await new Promise<void>((resolve, reject) => {
    server.once('error', reject);
    server.listen(port, host, () => resolve());
  });

  const address = server.address() as AddressInfo | null;
  const actualPort = address ? address.port : port;
  // 监听完成后才拿得到真实端口，这时桥信息才可用
  bridgeRef.info = { baseUrl: `http://${host}:${actualPort}`, internalToken };

  return {
    url: `http://${host}:${actualPort}`,
    port: actualPort,
    service,
    runtime,
    internalToken,
    close: async () => {
      await new Promise<void>((resolve, reject) => {
        server.close((error) => (error ? reject(error) : resolve()));
        // 事件流是长连接，关停时必须主动断开，否则 close 会一直等它们
        // 客户端断线后按 Last-Event-ID 重连，不会丢事件（协议文档第 5 节）
        server.closeAllConnections();
      });
      // 等引擎子进程回收完成再返回：关停后不该有残留进程（A3.10）
      await supervisor.disposeAll();
      database.close();
    },
  };
}
/**
 * 按配置加载 Provider（A5/A7 的可插拔位）。
 *
 * 用配置里的模块名做动态 import：平台代码不静态依赖任何具体 Provider（依赖方向检查不允许），
 * 换一个 Provider 只改配置。注册失败只记账——APS 没起来时平台照样能启动，只是能力清单里没有它。
 */
async function registerConfiguredProviders(
  service: ApplicationService,
  providers: Array<{ module: string; baseUrl: string; token?: string; timeoutMs?: number }>,
): Promise<void> {
  for (const instance of providers) {
    try {
      const loaded = (await import(instance.module)) as { createProvider?: (options: Record<string, unknown>) => Provider };
      if (typeof loaded.createProvider !== 'function') {
        console.error(`Provider ${instance.module} 没导出 createProvider(options)，已跳过`);
        continue;
      }
      const provider = loaded.createProvider({
        baseUrl: instance.baseUrl,
        ...(instance.token === undefined ? {} : { token: instance.token }),
        ...(instance.timeoutMs === undefined ? {} : { timeoutMs: instance.timeoutMs }),
      });
      const manifest = await service.registerProvider(provider);
      console.log(`Provider 已注册：${manifest.id}（${manifest.capabilities.length} 个能力）← ${instance.baseUrl}`);
    } catch (error) {
      console.error(`Provider ${instance.module} 注册失败（${instance.baseUrl}）：${error instanceof Error ? error.message : '未知错误'}`);
    }
  }
}

/** 引擎选择：显式注入 > 配置里的 engine.kind；选 pi 但没密钥时明确回退到假引擎 */
async function selectRuntime(
  config: ReturnType<typeof loadConfig>,
  override?: 'fake' | 'pi',
  bridge?: () => { baseUrl: string; internalToken: string } | undefined,
): Promise<AgentRuntime> {
  const kind = override ?? config.engine.kind;
  if (kind !== 'pi') {
    const { createFakeRuntime } = await import('./agent/fake-runtime.js');
    const { createRulePlanner, plannerToFakeTurn } = await import('./agent/rule-planner.js');
    return createFakeRuntime({ name: 'fake', planner: plannerToFakeTurn(createRulePlanner()) });
  }
  if (config.llm.apiKey.trim() === '') {
    console.error('警告：配置要求 Pi 引擎但没有模型密钥，已回退到假引擎（ADR-0011 允许未配置时降级）');
    const { createFakeRuntime } = await import('./agent/fake-runtime.js');
    const { createRulePlanner, plannerToFakeTurn } = await import('./agent/rule-planner.js');
    return createFakeRuntime({ name: 'fake', planner: plannerToFakeTurn(createRulePlanner()) });
  }
  const { createPiRuntime } = await import('./agent/pi/runtime.js');
  return createPiRuntime({
    provider: config.llm.provider,
    model: config.llm.model,
    apiKey: config.llm.apiKey,
    ...(bridge === undefined ? {} : { bridge }),
  });
}