Go 单二进制网关 + React 前端 + opencode 桥接插件。部署产物是 「一个二进制加一个 .db 文件」:前端经 go:embed 打进二进制, 数据库默认内置 SQLite,systemd 托管。 核心设计 - 三维寻址 name@path.session,按最后一个 . 切分;session 位三态: 省略=默认会话 / new=强制新建 / 具体别名=必须已存在(否则 404 无法送达) - 会话别名默认复用 Agent 平台自己的命名机制(opencode 的 slug 与模型生成的 标题),不在本侧另造一套;人显式定过的别名不被平台同步覆盖 - 对话树不建 tree_nodes 表:parent_mail_id 已完整编码树结构, 再维护一张表就是第二份真相。用递归 CTE 查,按方向分块加载 - 附件内容存磁盘、按 sha256 内容寻址,数据库只存元数据;天然去重, 且路径与用户 filename 无关,杜绝 ../ 穿越 - 配额约束的是模型的自主发信,不是 harness 的转发:插件代劳的权限询问与 最终总结走免配额通道,靠上游消息 id 做幂等键而非计数 - 往返预算下沉到会话(写信时给、对话页里改)+ Agent 全局配额,两层都要过 后端 gateway/ - models/repo/handler/middleware/sse/blob 分层;两方言(SQLite/PostgreSQL) 共用一份 repo 层 SQL,差异集中在 internal/db - 多用户认证(bcrypt cost12、登录限速、会话隔离、权限边界) - 密钥体系:Agent 密钥与用户密钥分表,三种生命周期;登记式密钥让全文 只从客户端流向服务器一次 - 所有「判断 + 自增」都在同一条 UPDATE 里(配额、预算、one_time 密钥、 附件挂载),并发下不会刷穿 前端 web/ - 三栏布局、三段式地址补全、权限卡片、密钥面板、配额面板、对话树、附件 - 全站纯 SVG 图标,不使用 emoji - api/ 即可复用的客户端 SDK:基地址与凭证集中在 api/config.ts 插件 plugins/opencode-mail-bridge/ - 六个工具 + 两类自动转发(permission.ask 钩子接管平台原生权限询问、 session.idle 时转发本轮总结)
208 lines
5.4 KiB
Go
208 lines
5.4 KiB
Go
package handler
|
||
|
||
import (
|
||
"net/http"
|
||
|
||
"github.com/agentmail/gateway/internal/middleware"
|
||
"github.com/agentmail/gateway/internal/models"
|
||
"github.com/agentmail/gateway/internal/repo"
|
||
"github.com/agentmail/gateway/internal/sse"
|
||
"github.com/google/uuid"
|
||
)
|
||
|
||
// ---------- Contacts(左侧联系人界面,按登录用户隔离) ----------
|
||
|
||
// GET /api/v1/contacts?archived=false
|
||
func ListContacts(w http.ResponseWriter, r *http.Request) {
|
||
user := middleware.GetUser(r)
|
||
if user == nil {
|
||
Error(w, http.StatusUnauthorized, "not authenticated")
|
||
return
|
||
}
|
||
archived := r.URL.Query().Get("archived") == "true"
|
||
|
||
// 管理员可用 ?all=true 查看全部
|
||
scope := user.Username
|
||
if user.IsAdmin() && r.URL.Query().Get("all") == "true" {
|
||
scope = ""
|
||
}
|
||
|
||
contacts, err := repo.ListContactsFor(r.Context(), scope, archived)
|
||
if err != nil {
|
||
Error(w, http.StatusInternalServerError, "Failed to list contacts")
|
||
return
|
||
}
|
||
JSON(w, http.StatusOK, map[string]interface{}{
|
||
"contacts": emptySlice(contacts),
|
||
})
|
||
}
|
||
|
||
type archiveRequest struct {
|
||
Address string `json:"address"`
|
||
SessionID string `json:"session_id"`
|
||
}
|
||
|
||
// POST /api/v1/contacts/archive
|
||
// 归档指定 name@path.session:Agent 侧会话归档 + 邮箱界面移除
|
||
func ArchiveContact(w http.ResponseWriter, r *http.Request) {
|
||
user := middleware.GetUser(r)
|
||
if user == nil {
|
||
Error(w, http.StatusUnauthorized, "not authenticated")
|
||
return
|
||
}
|
||
|
||
var req archiveRequest
|
||
if err := Decode(r, &req); err != nil {
|
||
Error(w, http.StatusBadRequest, "Invalid JSON")
|
||
return
|
||
}
|
||
|
||
var sessionID uuid.UUID
|
||
switch {
|
||
case req.SessionID != "":
|
||
id, err := uuid.Parse(req.SessionID)
|
||
if err != nil {
|
||
Error(w, http.StatusBadRequest, "Invalid session_id")
|
||
return
|
||
}
|
||
sessionID = id
|
||
|
||
case req.Address != "":
|
||
addr, err := models.ParseAddress(req.Address)
|
||
if err != nil {
|
||
Error(w, http.StatusBadRequest, "Invalid address: "+err.Error())
|
||
return
|
||
}
|
||
id, err := repo.FindSessionByAddress(r.Context(), addr.Name, addr.Path, addr.Session)
|
||
if err != nil {
|
||
Error(w, http.StatusNotFound, "No session matches "+req.Address)
|
||
return
|
||
}
|
||
sessionID = id
|
||
|
||
default:
|
||
Error(w, http.StatusBadRequest, "Provide address or session_id")
|
||
return
|
||
}
|
||
|
||
// 鉴权:只能归档自己参与的会话(管理员不限)
|
||
allowed, err := repo.UserCanAccessSession(r.Context(), user, sessionID)
|
||
if err != nil {
|
||
Error(w, http.StatusInternalServerError, "Failed to check permission")
|
||
return
|
||
}
|
||
if !allowed {
|
||
Error(w, http.StatusForbidden, "无权归档他人的会话")
|
||
return
|
||
}
|
||
|
||
session, err := repo.GetSessionByID(r.Context(), sessionID)
|
||
if err != nil {
|
||
Error(w, http.StatusNotFound, "Session not found")
|
||
return
|
||
}
|
||
mails, _ := repo.GetSessionMails(r.Context(), sessionID)
|
||
|
||
if err := repo.ArchiveSession(r.Context(), sessionID); err != nil {
|
||
Error(w, http.StatusInternalServerError, "Failed to archive session")
|
||
return
|
||
}
|
||
|
||
alias := ""
|
||
if session.Alias != nil {
|
||
alias = *session.Alias
|
||
}
|
||
payload := map[string]interface{}{
|
||
"session_id": sessionID.String(),
|
||
"session_alias": alias,
|
||
"archived_by": user.Username,
|
||
}
|
||
|
||
// 通知会话内所有参与方(Agent 与人类),各自归档/移除
|
||
notified := map[string]bool{}
|
||
for _, m := range mails {
|
||
names := append([]string{m.FromName, m.ToName}, ccNames(m.CCList)...)
|
||
for _, name := range names {
|
||
if name == "" || notified[name] {
|
||
continue
|
||
}
|
||
notified[name] = true
|
||
sse.Default.SendToRecipient(name, "session_archived", payload)
|
||
}
|
||
}
|
||
if !notified[user.Username] {
|
||
sse.Default.SendToUser(user.Username, "session_archived", payload)
|
||
}
|
||
|
||
JSON(w, http.StatusOK, map[string]interface{}{
|
||
"status": "archived",
|
||
"session_id": sessionID.String(),
|
||
"session_alias": alias,
|
||
})
|
||
}
|
||
|
||
// GET /api/v1/contacts/suggest?name=xxx&path=yyy
|
||
// 三段式补全:无 name 给 Agent+人类用户名;有 name 给工作区;两者都有给会话别名(含 new)
|
||
func SuggestAddress(w http.ResponseWriter, r *http.Request) {
|
||
user := middleware.GetUser(r)
|
||
if user == nil {
|
||
Error(w, http.StatusUnauthorized, "not authenticated")
|
||
return
|
||
}
|
||
|
||
name := r.URL.Query().Get("name")
|
||
path := r.URL.Query().Get("path")
|
||
|
||
if name == "" {
|
||
agents, err := repo.ListAgents(r.Context(), "")
|
||
if err != nil {
|
||
Error(w, http.StatusInternalServerError, "Failed to list agents")
|
||
return
|
||
}
|
||
users, _ := repo.ListActiveUsernames(r.Context())
|
||
|
||
names := make([]string, 0, len(agents)+len(users))
|
||
for _, a := range agents {
|
||
names = append(names, a.Name)
|
||
}
|
||
for _, u := range users {
|
||
if u == user.Username {
|
||
continue // 不建议给自己发信
|
||
}
|
||
names = append(names, u)
|
||
}
|
||
JSON(w, http.StatusOK, map[string]interface{}{
|
||
"kind": "name",
|
||
"suggestions": emptySlice(names),
|
||
})
|
||
return
|
||
}
|
||
|
||
if path == "" {
|
||
// 人类用户没有工作区,直接给空列表(前端会继续走 session 段)
|
||
paths, _ := repo.SuggestPaths(r.Context(), name)
|
||
JSON(w, http.StatusOK, map[string]interface{}{
|
||
"kind": "path",
|
||
"suggestions": emptySlice(paths),
|
||
})
|
||
return
|
||
}
|
||
|
||
sessions, _ := repo.SuggestSessionsFor(r.Context(), user.Username, name, path)
|
||
sessions = append(sessions, "new")
|
||
JSON(w, http.StatusOK, map[string]interface{}{
|
||
"kind": "session",
|
||
"suggestions": sessions,
|
||
})
|
||
}
|
||
|
||
func ccNames(list []models.Address) []string {
|
||
out := make([]string, 0, len(list))
|
||
for _, a := range list {
|
||
if a.Name != "" {
|
||
out = append(out, a.Name)
|
||
}
|
||
}
|
||
return out
|
||
}
|