Feat/acp runtime abstraction

.env.example

@@ -80,3 +80,8 @@ WORKSPACE_ISOLATION=isolated
 # ==================== Proxy (Optional) ====================
 
 # http_proxy=
+
+# ==================== Mino (Optional) ====================
+
+# MiMo openai-compatible proxy API key (used by opencode-acp runtime)
+# MIMO_API_KEY=

.gitignore

@@ -89,4 +89,6 @@ skills-lock.json
 CodeBuddy Code_decompiled
 CodeBuddy Code_files
 decompiled
-decompiled-ui
+decompiled-ui
+# opencode project-level config (auto-generated tool overrides)
+.opencode/tools/

.opencode/opencode.example.json

@@ -0,0 +1,76 @@
+{
+  "$schema": "https://opencode.ai/config.json",
+  "model": "mimo/mimo-v2.5-pro",
+  "provider": {
+    "mimo": {
+      "npm": "@ai-sdk/openai-compatible",
+      "name": "MiMo",
+      "options": {
+        "baseURL": "{env:OPENAI_API_ENDPOINT}",
+        "apiKey": "{env:MIMO_API_KEY}"
+      },
+      "models": {
+        "mimo-v2.5-pro": {
+          "name": "MiMo V2.5 Pro",
+          "tool_call": true,
+          "limit": {
+            "context": 1048576,
+            "output": 131072
+          },
+          "modalities": {
+            "input": ["text", "image"],
+            "output": ["text"]
+          }
+        },
+        "mimo-v2.5": {
+          "name": "MiMo V2.5",
+          "tool_call": true,
+          "limit": {
+            "context": 1048576,
+            "output": 131072
+          },
+          "modalities": {
+            "input": ["text"],
+            "output": ["text"]
+          }
+        },
+        "mimo-v2.5-tts": {
+          "name": "MiMo V2.5 TTS",
+          "tool_call": false,
+          "limit": {
+            "context": 8192,
+            "output": 4096
+          },
+          "modalities": {
+            "input": ["text"],
+            "output": ["audio"]
+          }
+        },
+        "mimo-v2.5-tts-voiceclone": {
+          "name": "MiMo V2.5 TTS VoiceClone",
+          "tool_call": false,
+          "limit": {
+            "context": 8192,
+            "output": 4096
+          },
+          "modalities": {
+            "input": ["text"],
+            "output": ["audio"]
+          }
+        },
+        "mimo-v2.5-tts-voicedesign": {
+          "name": "MiMo V2.5 TTS VoiceDesign",
+          "tool_call": false,
+          "limit": {
+            "context": 8192,
+            "output": 4096
+          },
+          "modalities": {
+            "input": ["text"],
+            "output": ["audio"]
+          }
+        }
+      }
+    }
+  }
+}

.opencode/opencode.json

@@ -0,0 +1,76 @@
+{
+  "$schema": "https://opencode.ai/config.json",
+  "model": "mimo/mimo-v2.5-pro",
+  "provider": {
+    "mimo": {
+      "npm": "@ai-sdk/openai-compatible",
+      "name": "MiMo",
+      "options": {
+        "baseURL": "{env:OPENAI_API_ENDPOINT}",
+        "apiKey": "{env:OPENAI_API_KEY}"
+      },
+      "models": {
+        "mimo-v2.5-pro": {
+          "name": "MiMo V2.5 Pro",
+          "tool_call": true,
+          "limit": {
+            "context": 1048576,
+            "output": 131072
+          },
+          "modalities": {
+            "input": ["text", "image"],
+            "output": ["text"]
+          }
+        },
+        "mimo-v2.5": {
+          "name": "MiMo V2.5",
+          "tool_call": true,
+          "limit": {
+            "context": 1048576,
+            "output": 131072
+          },
+          "modalities": {
+            "input": ["text"],
+            "output": ["text"]
+          }
+        },
+        "mimo-v2.5-tts": {
+          "name": "MiMo V2.5 TTS",
+          "tool_call": false,
+          "limit": {
+            "context": 8192,
+            "output": 4096
+          },
+          "modalities": {
+            "input": ["text"],
+            "output": ["audio"]
+          }
+        },
+        "mimo-v2.5-tts-voiceclone": {
+          "name": "MiMo V2.5 TTS VoiceClone",
+          "tool_call": false,
+          "limit": {
+            "context": 8192,
+            "output": 4096
+          },
+          "modalities": {
+            "input": ["text"],
+            "output": ["audio"]
+          }
+        },
+        "mimo-v2.5-tts-voicedesign": {
+          "name": "MiMo V2.5 TTS VoiceDesign",
+          "tool_call": false,
+          "limit": {
+            "context": 8192,
+            "output": 4096
+          },
+          "modalities": {
+            "input": ["text"],
+            "output": ["audio"]
+          }
+        }
+      }
+    }
+  }
+}

.opencode/tools/AskUserQuestion.ts

@@ -0,0 +1,128 @@
+/**
+ * AskUserQuestion custom tool — 对齐 Tencent AskUserQuestion 契约
+ *
+ * 这不是 opencode builtin tool 的 override，而是我们新增的 custom tool。
+ * opencode 原生的 question tool 在 ACP 模式默认禁用且无 ACP 路由，
+ * 因此我们自行实现。工具名和 schema 对齐 Tencent SDK 的 AskUserQuestion。
+ *
+ * 版本声明（用于 check:tool-schemas 脚本识别）：
+ *   custom tool, not synced from opencode v1.14.33 src/tool/
+ *
+ * Schema 来源：packages/web/src/types/task-chat.ts:AskUserQuestionData
+ *   - 前端 `task-chat.tsx` 按 `part.toolName === 'AskUserQuestion'` 匹配渲染
+ *     AskUserForm；用其他名字前端识别不到
+ *   - 前端从 `part.input.questions` 取字段，结构必须是
+ *     `{ question, header, options:[{label, description}], multiSelect }`
+ *   - askAnswers resume 契约也已存在：
+ *     `{ [assistantMessageId]: { toolCallId, answers: { [header]: value } } }`
+ *
+ * OpenCode 文件名约定：文件名 = tool id（ACP tool_call.title）
+ * 所以文件名 `AskUserQuestion.ts` → opencode 注册的 tool id `AskUserQuestion`
+ * → 我们 runtime 把 ACP tool_call.title 透传为 AgentCallbackMessage.name
+ * → convertToSessionUpdate 把 name 放到 sessionUpdate.title
+ * → 前端 part.toolName = 'AskUserQuestion' ✓
+ *
+ * 运行时行为：
+ *   - execute 发 fetch 到 ASK_USER_URL 阻塞等答案
+ *   - 收到答案格式：{ ok: true, answers: { [header]: value } }
+ *   - 格式化文本返回给 LLM
+ *
+ * env 契约（由 server spawn opencode 时注入）：
+ *   ASK_USER_URL            — server 本地回环 endpoint
+ *   ASK_USER_TOKEN          — shared secret，X-Internal-Token header
+ *   ASK_USER_CONVERSATION_ID — 当前会话 id
+ */
+import { z } from 'zod'
+
+const OptionSchema = z.object({
+  label: z.string().describe('Short display text (1-5 words)'),
+  description: z.string().describe('Explanation of what this option means or its implications'),
+})
+
+const QuestionSchema = z.object({
+  question: z.string().describe('The complete question text (ends with ?)'),
+  header: z
+    .string()
+    .max(30)
+    .describe('Very short label for this question (max 30 chars, e.g. "Database", "Framework")'),
+  options: z.array(OptionSchema).min(2).max(4).describe('2-4 available choices'),
+  multiSelect: z.boolean().optional().describe('true = user may select multiple; false (default) = single selection'),
+})
+
+export default {
+  description:
+    'Ask the user one or more multiple-choice questions during execution. Use this when you need a decision or clarification that can be expressed as choices. Each question has a `question` (full text), `header` (short label), `options` (2-4 choices, each with `label` and `description`), and `multiSelect` (default false). The user may also type a custom answer.',
+  args: {
+    questions: z.array(QuestionSchema).min(1).describe('Questions to ask'),
+  },
+  async execute(
+    args: { questions: Array<z.infer<typeof QuestionSchema>> },
+    context: { sessionID?: string; callID?: string },
+  ) {
+    const url = process.env.ASK_USER_URL
+    const token = process.env.ASK_USER_TOKEN
+    const conversationId = process.env.ASK_USER_CONVERSATION_ID
+
+    if (!url || !token || !conversationId) {
+      return {
+        output:
+          'Cannot ask questions: AskUser HTTP endpoint is not configured in this environment (ASK_USER_URL missing). Please ask the user directly in your next text response instead.',
+      }
+    }
+
+    // 用 opencode 的 callID 作为 toolCallId，与 tool_call 事件的 toolCallId 对齐
+    const toolCallId = context.callID || `ask-${context.sessionID ?? 'unknown'}-${Date.now()}`
+
+    const timeoutMs = Number(process.env.ASK_USER_TIMEOUT_MS || 10 * 60 * 1000)
+
+    try {
+      const res = await fetch(url, {
+        method: 'POST',
+        headers: {
+          'Content-Type': 'application/json',
+          'X-Internal-Token': token,
+        },
+        body: JSON.stringify({
+          conversationId,
+          toolCallId,
+          questions: args.questions,
+        }),
+        signal: AbortSignal.timeout(timeoutMs + 5_000),
+      })
+
+      const data = (await res.json().catch(() => ({}))) as {
+        ok?: boolean
+        answers?: Record<string, string>
+        error?: string
+      }
+
+      if (!res.ok || !data.ok || !data.answers) {
+        return {
+          output: `Failed to get user answer: ${data.error ?? 'unknown error'} (status=${res.status}). Consider asking via plain text.`,
+        }
+      }
+
+      // 格式化答案给 LLM（answer key 是 question.header）
+      const formatted = args.questions
+        .map((q) => {
+          const a = data.answers![q.header]
+          return `"${q.question}" → ${a || '(unanswered)'}`
+        })
+        .join('; ')
+
+      return {
+        output: formatted,
+        hint: `You can continue with these answers in mind.`,
+        // output: `User answered: ${formatted}. You can continue with these answers in mind.`,
+        metadata: {
+          answers: data.answers,
+        },
+      }
+    } catch (e) {
+      const msg = (e as Error).message
+      return {
+        output: `Error asking user (${msg}). You can try asking via plain text in your next response.`,
+      }
+    }
+  },
+}

.opencode/tools/bash.ts

@@ -0,0 +1,83 @@
+/**
+ * Global opencode tool override: bash
+ * 覆盖 opencode builtin bash tool，沙箱模式下通过 HTTP 路由到 SCF 沙箱。
+ *
+ * Schema 与 opencode builtin 完全对齐（v1.14.33 src/tool/bash.ts）。
+ * 如果 opencode 版本升级导致 builtin schema 变更，需同步更新本文件。
+ *
+ * 运行时行为：
+ *   SANDBOX_MODE=1 → fetch SANDBOX_BASE_URL/api/tools/bash（沙箱内执行，与宿主机完全隔离）
+ *   否则          → 本地 execSync
+ *
+ * 注意：sandbox 模式下 workdir 参数会被忽略（沙箱有自己的 cwd，
+ * 沙箱 API 暂不支持覆盖 cwd）。
+ */
+import { z } from 'zod'
+import { execSync } from 'node:child_process'
+
+export default {
+  description:
+    'Executes a bash command. In sandbox mode, the command runs inside the SCF container (isolated from host).\n\n' +
+    'Usage:\n' +
+    '- The command argument is required.\n' +
+    '- You can specify an optional timeout in milliseconds (default 120000ms).\n' +
+    '- It is very helpful to write a clear, concise description of what this command does in 5-10 words.\n' +
+    '- Use the workdir parameter to change the working directory instead of "cd ... && command".\n' +
+    '- AVOID using this tool for file operations (reading/writing/editing/searching); use the specialized tools instead.',
+  args: {
+    command: z.string().describe('The command to execute'),
+    timeout: z.number().int().positive().optional().describe('Optional timeout in milliseconds'),
+    description: z.string().optional().describe('A clear, concise description of what this command does in 5-10 words'),
+    workdir: z
+      .string()
+      .optional()
+      .describe(
+        'The working directory to run the command in. Defaults to the current directory. Use this instead of "cd" commands.',
+      ),
+  },
+  async execute(
+    args: { command: string; timeout?: number; description?: string; workdir?: string },
+    context: { directory?: string },
+  ) {
+    const timeoutMs = args.timeout ?? 120_000
+    if (process.env.SANDBOX_MODE === '1') {
+      // workdir not forwarded to sandbox (sandbox manages its own cwd)
+      return await sandboxCall('bash', { command: args.command, timeout: timeoutMs }, timeoutMs)
+    }
+    try {
+      const out = execSync(args.command, {
+        timeout: timeoutMs,
+        cwd: args.workdir ?? context?.directory ?? undefined,
+        encoding: 'utf8',
+        maxBuffer: 1024 * 1024 * 4,
+      })
+      return out
+    } catch (e) {
+      const err = e as { stdout?: Buffer | string; stderr?: Buffer | string; message: string }
+      const stdout = typeof err.stdout === 'string' ? err.stdout : (err.stdout?.toString() ?? '')
+      const stderr = typeof err.stderr === 'string' ? err.stderr : (err.stderr?.toString() ?? '')
+      throw new Error(`${err.message}\nstdout:\n${stdout}\nstderr:\n${stderr}`)
+    }
+  },
+}
+
+async function sandboxCall(tool: string, body: unknown, timeoutMs: number): Promise<string | { output: string }> {
+  const baseUrl = process.env.SANDBOX_BASE_URL
+  if (!baseUrl) throw new Error('SANDBOX_BASE_URL not set')
+  const headers = JSON.parse(process.env.SANDBOX_AUTH_HEADERS_JSON || '{}') as Record<string, string>
+  const res = await fetch(`${baseUrl}/api/tools/${tool}`, {
+    method: 'POST',
+    headers: { 'Content-Type': 'application/json', ...headers },
+    body: JSON.stringify(body),
+    signal: AbortSignal.timeout(timeoutMs + 5_000),
+  })
+  const data = (await res.json().catch(() => ({}))) as { success?: boolean; result?: unknown; error?: string }
+  if (!data.success) throw new Error(data.error ?? `sandbox ${tool} failed (${res.status})`)
+  const r = data.result as { output?: string; stdout?: string } | string | undefined
+  if (typeof r === 'string') return r
+  if (r && typeof r === 'object') {
+    if (typeof r.output === 'string') return r.output
+    if (typeof r.stdout === 'string') return r.stdout
+  }
+  return JSON.stringify(r ?? '')
+}