chenxin
684261f4b4
- 百工域 domains/baigong：capabilities（统一能力契约：执行类型 builtin/qiankun/mcp/http + 四维风险标注 + 来源版本）、mandates（授契 grant / 行契 charter 预算时间窗，撤销立即生效）、tool_calls（净化摘要 + 观察标证）；请命复用 pending_confirmations 加 expires_at/brief_json（超时=拒绝执行 HJ-1302，六要素说明） - 司命裁决器 siming.py：四维取最高档（能力/数据/后果/情境）；禁域为代码常量不可配置（递归删根/格式化/写裸设备/fork 炸弹、file:// 协议、密钥材料外发）——专项测试断言恶意标注与篡改对象仍拒 HJ-1301 - 执行链：禁域→裁决（HJ-1303 未授契拒且双留痕）→请命→执行（乾坤经 SandboxClient HMAC；MCP 经 call_tool；内置无副作用）→净化标证（观察非事实，敏感遮蔽+体量截断）→行动账 - MCP 登记/启停/刷新自动派生与撤下 capabilities（博闻登记接入点）；内置能力种子（echo/datetime/qiankun.shell/web.fetch） - 端点：/capabilities /mandates /petitions /tool-calls + /tools 兼容投影；前端百工页四区（能力目录四维标注/授契行契/请命批准拒绝/行动账观察标证） - 退役：modules/safety|skills|tool_runtime|agent、application/tool_runtime、services/skills|safety、tool_policies/skills/model_endpoint_overrides 表（迁移 006）、前端 SkillManager/ToolsConsole/旧 tools 页 - 验收（test_baigong_siming 四用例）：未授契被拒留痕、请命超时不执行、禁域不可关闭、结果为观察不入忆；后端 454、前端 220、BFF 4、神识 5 包全绿（2 个预存环境失败不变）
112 lines
3.4 KiB
Python
112 lines
3.4 KiB
Python
"""Streamable HTTP 传输层实现。
|
|
|
|
通过 HTTP POST /message 发送 JSON-RPC 2.0 请求的标准 MCP 传输协议。
|
|
"""
|
|
|
|
from __future__ import annotations
|
|
|
|
import time
|
|
from typing import Any
|
|
|
|
import httpx
|
|
|
|
from app.core.config import settings
|
|
from app.integrations.mcp.client import _auth_headers, _parse_call_result
|
|
from app.integrations.mcp.transports.base import TransportProtocol
|
|
from app.integrations.mcp.models import ToolResult
|
|
|
|
|
|
class StreamableHttpTransport(TransportProtocol):
|
|
"""通过 HTTP POST /message 通信的 MCP 传输层。"""
|
|
|
|
def __init__(
|
|
self,
|
|
server_id: str,
|
|
server_name: str,
|
|
endpoint_url: str,
|
|
auth_token: str | None = None,
|
|
http_client: httpx.AsyncClient | None = None,
|
|
) -> None:
|
|
self.server_id = server_id
|
|
self.server_name = server_name
|
|
self._endpoint_url = endpoint_url.rstrip("/")
|
|
self._auth_token = auth_token
|
|
self._http_client = http_client or httpx.AsyncClient(trust_env=False)
|
|
self._own_client = http_client is None
|
|
self._started_at: float | None = None
|
|
|
|
async def list_tools(self) -> list[dict[str, Any]]:
|
|
body = {
|
|
"jsonrpc": "2.0",
|
|
"id": 1,
|
|
"method": "tools/list",
|
|
"params": {},
|
|
}
|
|
try:
|
|
resp = await self._http_client.post(
|
|
self._endpoint_url,
|
|
json=body,
|
|
headers=_auth_headers(self._auth_token),
|
|
timeout=settings.mcp_list_timeout_seconds,
|
|
)
|
|
resp.raise_for_status()
|
|
data = resp.json()
|
|
except (httpx.HTTPError, ValueError):
|
|
return []
|
|
result = data.get("result") if isinstance(data, dict) else None
|
|
if not result:
|
|
return []
|
|
return result.get("tools") if isinstance(result.get("tools"), list) else []
|
|
|
|
async def call_tool(self, name: str, arguments: dict[str, Any]) -> ToolResult:
|
|
body = {
|
|
"jsonrpc": "2.0",
|
|
"id": 1,
|
|
"method": "tools/call",
|
|
"params": {
|
|
"name": name,
|
|
"arguments": arguments,
|
|
},
|
|
}
|
|
try:
|
|
resp = await self._http_client.post(
|
|
self._endpoint_url,
|
|
json=body,
|
|
headers=_auth_headers(self._auth_token),
|
|
timeout=settings.mcp_call_timeout_seconds,
|
|
)
|
|
resp.raise_for_status()
|
|
data = resp.json()
|
|
except (httpx.HTTPError, ValueError, TypeError) as exc:
|
|
return ToolResult(
|
|
ok=False,
|
|
stdout="",
|
|
stderr=str(exc),
|
|
duration_ms=0,
|
|
exit_code=None,
|
|
timeout=False,
|
|
truncated=False,
|
|
trace_id="",
|
|
)
|
|
return _parse_call_result(data)
|
|
|
|
async def start(self) -> None:
|
|
self._started_at = time.time()
|
|
|
|
@property
|
|
def is_running(self) -> bool:
|
|
return True
|
|
|
|
async def get_status(self) -> dict[str, Any]:
|
|
uptime = None
|
|
if self._started_at is not None:
|
|
uptime = time.time() - self._started_at
|
|
return {
|
|
"server_id": self.server_id,
|
|
"name": self.server_name,
|
|
"transport": "streamable-http",
|
|
"status": "running",
|
|
"pid": None,
|
|
"uptime_seconds": uptime,
|
|
}
|