NetMesh/electron/bridges/aiBridge/sdk/copilotDriver.cjs

"use strict";

/**
 * Copilot backend driver — wraps @github/copilot-sdk.
 *
 * new CopilotClient({ connection: RuntimeConnection.forStdio({ path }), useLoggedInUser })
 *   .createSession({ model, streaming, onPermissionRequest: approveAll, mcpServers })
 *   .sendAndWait({ prompt }) -> response.data.content
 *
 * - The bundled copilot runtime (@github/copilot) is excluded from packaging
 *   (bring-your-own-CLI), so we MUST point `connection` at the user's system
 *   `copilot` binary via RuntimeConnection.forStdio({ path }) — otherwise the SDK
 *   falls back to the (absent) bundled runtime in the shipped app.
 * - MCP mode: side effects route through the injected netcatty MCP server
 *   (stdio). The permission handler rejects local Copilot tools and allows
 *   only MCP requests; netcatty MCP then enforces approval/scope/blocklist.
 * - Skills mode: only builtin bash is exposed (CLI instructions are injected via
 *   the host prompt; the skill builtin is omitted because its read/custom-tool
 *   permission kinds are not shell-safe to auto-approve). Shell permission
 *   requests are approved only for Netcatty CLI invocations; discovery env is
 *   passed to the Copilot runtime so `netcatty-tool-cli` can reach the host.
 *
 * 🔬 SMOKE-CALIBRATE [copilot-stream]: sendAndWait returns only the final
 *   assistant text. A follow-up can subscribe via session.on(handler) to stream
 *   text + per-tool-call events (assistant.message / tool execution events).
 */
const { mcpEnvPairsToObject } = require("./injectMcp.cjs");

// Neutral client options. The real CopilotClient options (with RuntimeConnection)
// are assembled in runCopilotTurn, because RuntimeConnection comes from the SDK
// module which is loaded via dynamic import().
function buildCopilotClientOptions({ cliPath, gitHubToken }) {
  const options = {};
  if (cliPath) options.cliPath = cliPath;
  if (gitHubToken) options.gitHubToken = gitHubToken;
  return options;
}

function toCopilotMcpServers(injectedMcpServers) {
  const map = {};
  for (const cfg of injectedMcpServers || []) {
    if (!cfg || !cfg.name) continue;
    map[cfg.name] = {
      // Local subprocess MCP server (MCPStdioServerConfig). 'stdio' is the
      // SDK's canonical value for local/subprocess servers.
      type: "stdio",
      command: cfg.command,
      args: cfg.args || [],
      env: mcpEnvPairsToObject(cfg.env),
      tools: ["*"],
    };
  }
  return map;
}

const COPILOT_SKILLS_AVAILABLE_TOOLS = ["builtin:bash"];

function copilotBuiltinTools(toolIntegrationMode) {
  return toolIntegrationMode === "skills" ? [...COPILOT_SKILLS_AVAILABLE_TOOLS] : null;
}

function buildCopilotSessionOptions({ model, injectedMcpServers, toolIntegrationMode }) {
  // onPermissionRequest is wired in runCopilotTurn (it needs the SDK's approveAll).
  const options = {
    mcpServers: toCopilotMcpServers(injectedMcpServers),
    // Copilot SDK enables assistant.message_delta / assistant.reasoning_delta
    // from SessionConfig.streaming, not from MessageOptions. Without this the
    // renderer only receives final assistant.message and the thinking panel never
    // has live reasoning to render.
    streaming: true,
  };
  const availableTools = copilotBuiltinTools(toolIntegrationMode);
  if (availableTools) options.availableTools = availableTools;
  if (model) options.model = model;
  return options;
}

// Shell chaining/redirection in the local Netcatty CLI prefix (not after exec `--`).
const LOCAL_SHELL_METACHAR_PATTERN = /(?:[;&|`]|&&|\|\||\$\(|\$\{|<<?|>{1,2}|\r?\n)/;
const LOCAL_SHELL_WRAPPER_PATTERN = /^(?:\/[^\s]+\/)?(?:ba|z|fi)?sh(?:\.exe)?\s+-c\b/i;
const NETCATTY_CLI_TOKEN = String.raw`netcatty-tool-cli(?:\.(?:cjs|cmd))?`;
const NETCATTY_CLI_PATH_SUFFIX = String.raw`(?:[\\/]|^)${NETCATTY_CLI_TOKEN}`;

/** Find the last exec/job-start payload separator outside shell quotes. */
function findExecPayloadSeparatorIndex(command) {
  const text = String(command || "");
  let inSingle = false;
  let inDouble = false;
  let escape = false;
  let lastIndex = -1;

  for (let i = 0; i < text.length; i += 1) {
    const ch = text[i];
    if (escape) {
      escape = false;
      continue;
    }
    if (ch === "\\" && (inSingle || inDouble)) {
      escape = true;
      continue;
    }
    if (!inDouble && ch === "'") {
      inSingle = !inSingle;
      continue;
    }
    if (!inSingle && ch === '"') {
      inDouble = !inDouble;
      continue;
    }
    if (!inSingle && !inDouble && text.startsWith(" -- ", i)) {
      lastIndex = i;
      i += 3;
    }
  }
  return lastIndex;
}

function matchesShellMetacharAt(text, index) {
  const match = LOCAL_SHELL_METACHAR_PATTERN.exec(String(text || "").slice(index));
  return Boolean(match && match.index === 0);
}

function containsUnsafeShellMetachar(text) {
  let inSingle = false;
  let inDouble = false;
  let escape = false;

  for (let i = 0; i < text.length; i += 1) {
    const ch = text[i];
    if (escape) {
      escape = false;
      continue;
    }
    if (ch === "\\" && (inSingle || inDouble)) {
      escape = true;
      continue;
    }
    if (!inDouble && ch === "'") {
      inSingle = !inSingle;
      continue;
    }
    if (!inSingle && ch === '"') {
      inDouble = !inDouble;
      continue;
    }
    if (inSingle) continue;
    if (inDouble) {
      if (text.startsWith("$(", i) || ch === "`") return true;
      continue;
    }
    if (matchesShellMetacharAt(text, i)) return true;
  }
  return false;
}

/** Split before the final exec/job-start remote payload (` -- cmd`), not flag values. */
function getLocalNetcattyCliPrefix(fullCommandText) {
  const command = String(fullCommandText || "").trim();
  const splitAt = findExecPayloadSeparatorIndex(command);
  if (splitAt >= 0) {
    return command.slice(0, splitAt).trim();
  }
  return command;
}

function isNetcattyCliInvocationPrefix(localPart) {
  const text = String(localPart || "").trim();
  if (!text) return false;
  const pathPrefix = String.raw`(?:\.\./|\./|/|[A-Za-z]:[\\/])[\w. \\-]*[\\/]`;
  const invocation = new RegExp(
    String.raw`^(?:(?:[A-Za-z_][\w.-]*=[^\s]+\s+)*)?(?:` +
    String.raw`"[^"]*${NETCATTY_CLI_PATH_SUFFIX}"|` +
    String.raw `'[^']*${NETCATTY_CLI_PATH_SUFFIX}'|` +
    String.raw `${NETCATTY_CLI_TOKEN}(?=\s|$)|` +
    String.raw `${pathPrefix}${NETCATTY_CLI_TOKEN}(?=\s|$)|` +
    String.raw `node\s+(?:${NETCATTY_CLI_TOKEN}(?=\s|$)|${pathPrefix}${NETCATTY_CLI_TOKEN}(?=\s|$)|` +
    String.raw `(?:[\w.-]+(?:[\\/][\w.-]+)*[\\/])?${NETCATTY_CLI_TOKEN}(?=\s|$)|` +
    String.raw `"[^"]*${NETCATTY_CLI_PATH_SUFFIX}"|'[^']*${NETCATTY_CLI_PATH_SUFFIX}'))`,
    "i",
  );
  return invocation.test(text);
}

function hasExecPayloadSubcommand(localPart) {
  return /\b(?:exec|job-start)\b/i.test(String(localPart || ""));
}

function isLikelyNetcattyCliShellCommand(fullCommandText) {
  const command = String(fullCommandText || "").trim();
  if (!command) return false;

  const splitAt = findExecPayloadSeparatorIndex(command);
  const localPart = splitAt >= 0 ? command.slice(0, splitAt).trim() : command;
  const remotePayload = splitAt >= 0 ? command.slice(splitAt + 4).trim() : "";

  if (!localPart || LOCAL_SHELL_WRAPPER_PATTERN.test(localPart)) return false;
  if (!isNetcattyCliInvocationPrefix(localPart)) return false;

  if (remotePayload) {
    if (!hasExecPayloadSubcommand(localPart)) return false;
    if (containsUnsafeShellMetachar(localPart)) return false;
    // The runtime executes fullCommandText in a local shell; scan all of it so
    // tokens after `--` cannot chain additional local commands unless quoted.
    if (containsUnsafeShellMetachar(command)) return false;
    return true;
  }

  return !containsUnsafeShellMetachar(command);
}

function approveNetcattyMcpOnly(request) {
  if (request?.kind === "mcp" && request?.toolName) {
    return { kind: "approve-once" };
  }
  return {
    kind: "reject",
    feedback: "Only Netcatty MCP tools are allowed from this integration.",
  };
}

function approveNetcattyCliShellOnly(request) {
  if (request?.kind === "shell") {
    const fullCommandText = request.fullCommandText || "";
    if (isLikelyNetcattyCliShellCommand(fullCommandText)) {
      return { kind: "approve-once" };
    }
    return {
      kind: "reject",
      feedback:
        "Only Netcatty CLI shell commands are allowed. Invoke the netcatty-tool-cli launcher or script prefix provided in the host context, and include --chat-session on every call.",
    };
  }
  return {
    kind: "reject",
    feedback: "Only Netcatty CLI shell commands are allowed from this integration.",
  };
}

function buildCopilotPermissionHandler(toolIntegrationMode) {
  return toolIntegrationMode === "skills" ? approveNetcattyCliShellOnly : approveNetcattyMcpOnly;
}

function extractCopilotContent(response) {
  return (response && response.data && response.data.content) || "";
}

function buildCopilotMessageOptions({ prompt, attachments }) {
  const options = { prompt: String(prompt || "") };
  const nativeAttachments = [];
  for (const attachment of Array.isArray(attachments) ? attachments : []) {
    if (!attachment) continue;
    const displayName = attachment.filename || undefined;
    if (attachment.base64Data && attachment.mediaType) {
      nativeAttachments.push({
        type: "blob",
        data: attachment.base64Data,
        mimeType: attachment.mediaType,
        displayName,
      });
      continue;
    }
    if (attachment.filePath) {
      nativeAttachments.push({
        type: "file",
        path: attachment.filePath,
        displayName,
      });
    }
  }
  if (nativeAttachments.length > 0) options.attachments = nativeAttachments;
  return options;
}

/** Extract a display string from a tool.execution_complete event's data. */
function extractCopilotResultText(data) {
  if (!data) return "";
  if (data.error && data.error.message) return String(data.error.message);
  const result = data.result;
  if (result == null) return "";
  if (typeof result === "string") return result;
  const content = result.content;
  if (Array.isArray(content)) {
    return content
      .map((b) => (b && typeof b.text === "string" ? b.text : (b == null ? "" : JSON.stringify(b))))
      .join("");
  }
  return typeof result === "object" ? JSON.stringify(result) : String(result);
}

/**
 * Translate one copilot SessionEvent into emitter calls — gives copilot the same
 * live tool-card + thinking-panel UX as codex/claude (it previously showed only
 * the final text). `state` ({ reasoningOpen, streamedText, streamedReasoning })
 * threads the thinking block and records whether any delta streamed, so
 * runCopilotTurn can fall back to final consolidated events when needed.
 * Event shapes calibrated against @github/copilot-sdk generated session-events.
 */
function translateCopilotEvent(event, emitter, state) {
  if (!event || typeof event !== "object") return;
  const st = state || {};
  const data = event.data || {};
  const closeReasoning = () => {
    if (st.reasoningOpen) { emitter.reasoningEnd(); st.reasoningOpen = false; }
  };
  switch (event.type) {
    case "assistant.reasoning_delta":
      if (data.deltaContent) {
        emitter.reasoning(data.deltaContent);
        st.reasoningOpen = true;
        st.streamedReasoning = true;
      }
      return;
    case "assistant.reasoning":
      if (data.content && !st.streamedReasoning) {
        emitter.reasoning(data.content);
        st.reasoningOpen = true;
        closeReasoning();
      }
      return;
    case "assistant.message_delta":
      if (data.deltaContent) { closeReasoning(); emitter.text(data.deltaContent); st.streamedText = true; }
      return;
    case "tool.execution_start":
      closeReasoning();
      emitter.toolCall(data.toolName || data.mcpToolName || "tool", data.arguments || {}, data.toolCallId);
      return;
    case "tool.execution_complete":
      emitter.toolResult(data.toolCallId, extractCopilotResultText(data), undefined);
      return;
    default:
      // assistant.message (final consolidated text) is intentionally ignored —
      // text arrives via message_delta (or the runCopilotTurn fallback). Other
      // events (turn start/end, usage, state changes) have no UI mapping.
      return;
  }
}

/**
 * Run a Copilot turn (保底同步形态 via sendAndWait).
 * @param {object} args
 * @param {string} args.prompt
 * @param {Array<object>} [args.attachments]
 * @param {object} args.clientOptions   buildCopilotClientOptions(...) (neutral: {cliPath, gitHubToken})
 * @param {object} args.sessionOptions  buildCopilotSessionOptions(...) ({model, mcpServers})
 * @param {object} args.emitter
 * @param {AbortSignal} [args.signal]
 * @param {object} [args.sdkModule] inject the @github/copilot-sdk module (for tests)
 */
async function runCopilotTurn({
  prompt,
  attachments,
  clientOptions,
  sessionOptions,
  resumeSessionId,
  toolIntegrationMode,
  runtimeEnv,
  emitter,
  signal,
  sdkModule,
}) {
  let resolvedModule = sdkModule;
  if (!resolvedModule) {
    try { resolvedModule = await import("@github/copilot-sdk"); } catch { emitter.emitError("GitHub Copilot SDK not installed. Run: npm install @github/copilot-sdk"); return { sessionId: null }; }
  }
  const sdk = resolvedModule;
  const { CopilotClient, RuntimeConnection } = sdk;

  // Assemble the real CopilotClient options: point at the user's system CLI
  // (the bundled runtime is excluded from packaging) and authenticate as the
  // logged-in user (gh CLI / stored OAuth).
  const realClientOptions = { useLoggedInUser: true };
  if (runtimeEnv && typeof runtimeEnv === "object") {
    realClientOptions.env = runtimeEnv;
  }
  if (clientOptions?.cliPath && RuntimeConnection?.forStdio) {
    realClientOptions.connection = RuntimeConnection.forStdio({ path: clientOptions.cliPath });
  }
  if (clientOptions?.gitHubToken) realClientOptions.gitHubToken = clientOptions.gitHubToken;

  let client = null;
  let sessionId = resumeSessionId || null;
  try {
    client = new CopilotClient(realClientOptions);
    const sessionConfig = {
      ...sessionOptions,
      streaming: true,
      // MCP mode: only netcatty MCP. Skills mode: only Netcatty CLI shell commands.
      onPermissionRequest: buildCopilotPermissionHandler(toolIntegrationMode),
    };
    // Resume the prior conversation so context carries ACROSS turns (incl. after
    // a Stop). Always (re)apply sessionConfig so the FRESH netcatty MCP server
    // config — its current port/token/chat-session id — is used, not the stale
    // one from the resumed session. Fall back to a fresh session if there's no id
    // yet or the resume fails (session expired/deleted).
    let session;
    if (resumeSessionId && typeof client.resumeSession === "function") {
      try {
        session = await client.resumeSession(resumeSessionId, sessionConfig);
      } catch {
        session = await client.createSession(sessionConfig);
      }
    } else {
      session = await client.createSession(sessionConfig);
    }
    // Emit the resumable session id IMMEDIATELY — before the blocking sendAndWait
    // — so a mid-turn Stop can't lose it; the next turn resumes this conversation.
    sessionId = session.sessionId || sessionId;
    if (sessionId) emitter.sessionId(sessionId);
    if (signal?.aborted) return { sessionId };

    // Stream tool calls + text/reasoning deltas in real time (parity with
    // codex/claude — copilot previously showed only the final text). on() gets
    // every SessionEvent; SessionConfig.streaming enables assistant.message_delta
    // / assistant.reasoning_delta; tool.execution_* events arrive regardless.
    const state = { reasoningOpen: false, streamedText: false, streamedReasoning: false };
    let unsubscribe = () => {};
    if (typeof session.on === "function") {
      unsubscribe = session.on((ev) => translateCopilotEvent(ev, emitter, state));
    }
    let abortRequested = false;
    let removeAbortListener = () => {};
    if (signal) {
      const onAbort = () => {
        abortRequested = true;
        if (typeof session.abort === "function") {
          void session.abort().catch(() => {});
        }
      };
      if (signal.aborted) {
        onAbort();
      } else {
        signal.addEventListener("abort", onAbort, { once: true });
        removeAbortListener = () => signal.removeEventListener("abort", onAbort);
      }
    }
    let final;
    try {
      final = await session.sendAndWait(buildCopilotMessageOptions({ prompt, attachments }));
    } finally {
      try { unsubscribe(); } catch { /* best effort */ }
      removeAbortListener();
    }
    if (state.reasoningOpen) emitter.reasoningEnd();
    if (abortRequested || signal?.aborted) {
      return { sessionId };
    }

    // Fallback: if nothing streamed (older runtime / streamDeltas unsupported),
    // emit the final consolidated text so the turn isn't silent.
    if (!state.streamedText) {
      const content = extractCopilotContent(final);
      if (content) emitter.text(content);
      if (!content && !signal?.aborted) {
        emitter.emitError(
          "Copilot returned an empty response. Run `copilot` once to log in, or `gh auth login`.",
        );
        return { sessionId };
      }
    }
    emitter.emitDone();
    return { sessionId };
  } catch (error) {
    if (signal?.aborted) {
      return { sessionId };
    }
    const code = error && error.code;
    const msg = String((error && error.message) || error || "");
    if (code === "ENOENT" || /ENOENT/i.test(msg)) {
      emitter.emitError(
        "Copilot CLI not found. Install with `npm i -g @github/copilot` and run `gh auth login`.",
      );
    } else {
      emitter.emitError(msg || "Copilot turn failed");
    }
    return { sessionId };
  } finally {
    try { await client?.stop?.(); } catch { /* best effort */ }
  }
}

/** Map copilot-sdk ModelInfo[] -> renderer preset shape {id,name}. */
function mapCopilotModels(models) {
  if (!Array.isArray(models)) return [];
  return models
    .filter((m) => m && m.id)
    .map((m) => ({ id: m.id, name: m.name || m.id }));
}

/**
 * Fetch available Copilot models via client.start() + client.listModels().
 * Returns [] on failure (the caller falls back to the UI's curated presets).
 * @param {object} args
 * @param {string} [args.cliPath]
 * @param {object} [args.sdkModule] inject the @github/copilot-sdk module (for tests)
 */
async function listCopilotModels({ cliPath, sdkModule, abortController, signal }) {
  const externalSignal = signal || abortController?.signal;
  if (externalSignal?.aborted) return [];
  let resolvedModule = sdkModule;
  if (!resolvedModule) {
    try { resolvedModule = await import("@github/copilot-sdk"); } catch { return []; }
  }
  const sdk = resolvedModule;
  const { CopilotClient, RuntimeConnection } = sdk;
  const clientOptions = { useLoggedInUser: true };
  if (cliPath && RuntimeConnection?.forStdio) {
    clientOptions.connection = RuntimeConnection.forStdio({ path: cliPath });
  }
  const client = new CopilotClient(clientOptions);
  let stopPromise;
  const stopClient = () => {
    if (!stopPromise) {
      try { stopPromise = Promise.resolve(client.stop()).catch(() => {}); } catch { stopPromise = Promise.resolve(); }
    }
    return stopPromise;
  };
  let resolveAbort;
  const aborted = new Promise((resolve) => { resolveAbort = resolve; });
  const onAbort = () => {
    resolveAbort({ type: "aborted" });
    void stopClient();
  };
  externalSignal?.addEventListener("abort", onAbort, { once: true });
  if (externalSignal?.aborted) onAbort();
  try {
    const started = await Promise.race([
      Promise.resolve(client.start()).then(() => ({ type: "started" })),
      aborted,
    ]);
    if (started.type === "aborted") return [];
    const result = await Promise.race([
      Promise.resolve(client.listModels()).then((models) => ({ type: "models", models })),
      aborted,
    ]);
    return result.type === "models" ? mapCopilotModels(result.models) : [];
  } catch {
    return [];
  } finally {
    externalSignal?.removeEventListener("abort", onAbort);
    void stopClient();
  }
}

module.exports = {
  buildCopilotClientOptions,
  buildCopilotSessionOptions,
  buildCopilotMessageOptions,
  buildCopilotPermissionHandler,
  approveNetcattyMcpOnly,
  approveNetcattyCliShellOnly,
  isLikelyNetcattyCliShellCommand,
  getLocalNetcattyCliPrefix,
  findExecPayloadSeparatorIndex,
  containsUnsafeShellMetachar,
  matchesShellMetacharAt,
  hasExecPayloadSubcommand,
  copilotBuiltinTools,
  toCopilotMcpServers,
  extractCopilotContent,
  extractCopilotResultText,
  translateCopilotEvent,
  runCopilotTurn,
  listCopilotModels,
  mapCopilotModels,
};