@ardennguyen/zalo-agent-cli 2.5.1 → 2.5.3

package/src/utils/cli-args.js

@@ -0,0 +1,84 @@
+/**
+ * Small argument parsers for the commands that wrap a zca-js call taking an
+ * enum or a boolean: typing indicator, report, active status, language.
+ *
+ * Each throws an Error whose message says what was accepted, so the command's
+ * catch block can print it as the usage error. None touches Zalo.
+ */
+import { ReportReason, UpdateLangAvailableLanguages } from "zca-js";
+
+/**
+ * `--type <n>`: 0 = user, 1 = group.
+ *
+ * @param {string|number} value
+ * @returns {0|1}
+ * @throws {Error} for anything else
+ */
+export function parseThreadTypeArg(value) {
+    const s = String(value).trim();
+    if (s === "0") return 0;
+    if (s === "1") return 1;
+    throw new Error(`--type must be 0 (user) or 1 (group), got "${value}"`);
+}
+
+/**
+ * `on` / `off` (also true/false, 1/0, yes/no, enable/disable).
+ *
+ * @param {string} value
+ * @param {string} [what] - the setting's name, for the error message
+ * @returns {boolean}
+ * @throws {Error} for anything else
+ */
+export function parseOnOff(value, what = "value") {
+    const s = String(value).trim().toLowerCase();
+    if (["on", "true", "1", "yes", "enable", "enabled"].includes(s)) return true;
+    if (["off", "false", "0", "no", "disable", "disabled"].includes(s)) return false;
+    throw new Error(`${what} must be "on" or "off", got "${value}"`);
+}
+
+/**
+ * `vi` / `en`, as zca-js's `updateLang` takes them (it sends `VI` / `EN`).
+ *
+ * @param {string} value
+ * @returns {string} an UpdateLangAvailableLanguages value
+ * @throws {Error} for any other language
+ */
+export function parseLanguage(value) {
+    const key = String(value).trim().toUpperCase();
+    if (key in UpdateLangAvailableLanguages) return UpdateLangAvailableLanguages[key];
+    throw new Error(`language must be one of: ${Object.keys(UpdateLangAvailableLanguages).join(", ").toLowerCase()}`);
+}
+
+/** The reasons `msg report` accepts, by name. */
+export const REPORT_REASONS = Object.freeze({
+    sensitive: ReportReason.Sensitive,
+    annoy: ReportReason.Annoy,
+    fraud: ReportReason.Fraud,
+    other: ReportReason.Other,
+});
+
+/**
+ * The options object zca-js's `sendReport` takes.
+ *
+ * `other` is the only reason that carries text, and zca-js sends it only for
+ * that reason, so a text given with another reason would be dropped without a
+ * word: refuse it instead of pretending it was reported.
+ *
+ * @param {string} reason - sensitive | annoy | fraud | other
+ * @param {string} [content] - required with `other`, refused otherwise
+ * @returns {{reason: number, content?: string}}
+ * @throws {Error} for an unknown reason, `other` without text, or text with any other reason
+ */
+export function parseReportReason(reason, content) {
+    const key = String(reason).trim().toLowerCase();
+    if (!(key in REPORT_REASONS)) {
+        throw new Error(`--reason must be one of: ${Object.keys(REPORT_REASONS).join(", ")}, got "${reason}"`);
+    }
+    const text = content === undefined ? "" : String(content).trim();
+    if (key === "other") {
+        if (!text) throw new Error('--reason other needs the details: add --content "<what happened>"');
+        return { reason: REPORT_REASONS.other, content: text };
+    }
+    if (text) throw new Error(`--content is only sent with --reason other; "${key}" carries no text`);
+    return { reason: REPORT_REASONS[key] };
+}

package/src/utils/secrets.js

@@ -0,0 +1,69 @@
+/**
+ * Secrets that arrive as command-line flags: masking them for logs, and
+ * resolving the webhook signing secret from its three sources.
+ */
+
+/** Flags whose value is a secret and must never be written to a log. */
+export const SECRET_FLAGS = Object.freeze(["--auth", "--client-secret", "--webhook-secret"]);
+
+/**
+ * A copy of an argument list with every secret flag's value replaced by `***`.
+ *
+ * Handles both `--auth value` and `--auth=value`. The launcher for `-d` writes
+ * its argument list into `daemon.log` ("starting daemon: ..."), and a bearer
+ * token or signing secret has no business in a log that gets shipped or
+ * attached to an issue.
+ *
+ * @param {string[]} args
+ * @returns {string[]} a new array; the input is not modified
+ */
+export function maskSecretArgs(args) {
+    const out = [];
+    for (let i = 0; i < args.length; i++) {
+        const a = String(args[i]);
+        const eq = a.indexOf("=");
+        if (eq > 0 && SECRET_FLAGS.includes(a.slice(0, eq))) {
+            out.push(`${a.slice(0, eq)}=***`);
+        } else if (SECRET_FLAGS.includes(a) && i + 1 < args.length) {
+            out.push(a, "***");
+            i++;
+        } else {
+            out.push(a);
+        }
+    }
+    return out;
+}
+
+/**
+ * The webhook signing secret: the `--webhook-secret` flag, else the
+ * `ZALO_WEBHOOK_SECRET[_<ownId>]` environment variable, else the MCP config's
+ * `webhookSecret`. Null when none is set, which means unsigned webhooks.
+ *
+ * A flag that is present but empty throws instead of falling through: an
+ * unset shell variable (`--webhook-secret "$SECRET"`) is how an empty value
+ * arrives, and falling back to "no secret" would silently send unsigned
+ * webhooks to a receiver that believes it is verifying signatures.
+ *
+ * @param {object} sources
+ * @param {string|undefined} [sources.flag] - the parsed `--webhook-secret` value
+ * @param {string|null|undefined} [sources.env] - the environment variable's value
+ * @param {string|null|undefined} [sources.config] - `webhookSecret` from mcp-config.json
+ * @returns {string|null}
+ * @throws {Error} when the flag is given empty
+ */
+export function resolveWebhookSecret({ flag, env, config } = {}) {
+    if (flag !== undefined) {
+        const s = String(flag).trim();
+        if (!s) {
+            throw new Error(
+                "--webhook-secret was given an empty secret. Refusing to start: webhooks would go out unsigned " +
+                    "while the receiver expects signatures.",
+            );
+        }
+        return s;
+    }
+    for (const v of [env, config]) {
+        if (typeof v === "string" && v.trim()) return v.trim();
+    }
+    return null;
+}

package/node_modules/zca-js/dist/apis/deleteSnapshotMobileMsg.js

@@ -1,18 +0,0 @@
-import { ZaloApiError } from "../Errors/ZaloApiError.js";
-import { apiFactory } from "../utils.js";
-
-export const deleteSnapshotMobileMsgFactory = apiFactory()((api, ctx, utils) => {
-    const serviceURL = utils.makeURL(`${api.zpwServiceMap.file[0]}/api/message/delete_snapshot_mobile_msg`);
-    return async function deleteSnapshotMobileMsg(publicKey) {
-        const params = {
-            public_key: publicKey,
-            imei: ctx.imei
-        };
-        const encryptedParams = utils.encodeAES(JSON.stringify(params));
-        if (!encryptedParams) throw new ZaloApiError("Failed to encrypt message");
-        const response = await utils.request(`${serviceURL}&params=${encodeURIComponent(encryptedParams)}`, {
-            method: "GET"
-        });
-        return utils.resolve(response);
-    };
-});

package/node_modules/zca-js/dist/apis/getCrossDB.js

@@ -1,18 +0,0 @@
-import { ZaloApiError } from "../Errors/ZaloApiError.js";
-import { apiFactory } from "../utils.js";
-
-export const getCrossDBFactory = apiFactory()((api, _, utils) => {
-    const serviceURL = utils.makeURL(`${api.zpwServiceMap.file[0]}/api/message/get_crossdb`);
-    return async function getCrossDB(syncSession) {
-        const params = {
-            pc_name: "Web",
-            sync_session: syncSession
-        };
-        const encryptedParams = utils.encodeAES(JSON.stringify(params));
-        if (!encryptedParams) throw new ZaloApiError("Failed to encrypt message");
-        const response = await utils.request(`${serviceURL}&params=${encodeURIComponent(encryptedParams)}`, {
-            method: "GET"
-        });
-        return utils.resolve(response);
-    };
-});

package/node_modules/zca-js/dist/apis/pullMobileMsg.js

@@ -1,22 +0,0 @@
-import { ZaloApiError } from "../Errors/ZaloApiError.js";
-import { apiFactory } from "../utils.js";
-
-export const pullMobileMsgFactory = apiFactory()((api, _, utils) => {
-    const serviceURL = utils.makeURL(`${api.zpwServiceMap.file[0]}/api/message/pull_mobile_msg`);
-    return async function pullMobileMsg(publicKey, fromSeqId = 0, isRetry = 0, tempKey = "") {
-        const params = {
-            pc_name: "Web",
-            public_key: publicKey,
-            from_seq_id: fromSeqId,
-            is_retry: isRetry,
-            min_seq_id: 0,
-            temp_key: tempKey
-        };
-        const encryptedParams = utils.encodeAES(JSON.stringify(params));
-        if (!encryptedParams) throw new ZaloApiError("Failed to encrypt message");
-        const response = await utils.request(`${serviceURL}&params=${encodeURIComponent(encryptedParams)}`, {
-            method: "GET"
-        });
-        return utils.resolve(response);
-    };
-});

package/node_modules/zca-js/dist/apis/requestSyncMessage.js

@@ -1,18 +0,0 @@
-import { ZaloApiError } from "../Errors/ZaloApiError.js";
-import { apiFactory } from "../utils.js";
-
-export const requestSyncMessageFactory = apiFactory()((api, _, utils) => {
-    const serviceURL = utils.makeURL(`${api.zpwServiceMap.file[0]}/api/transfer-sync-v2/request-sync`);
-    return async function requestSyncMessage(reqId, data) {
-        const params = {
-            reqId: String(reqId),
-            data: JSON.stringify(data)
-        };
-        const encryptedParams = utils.encodeAES(JSON.stringify(params));
-        if (!encryptedParams) throw new ZaloApiError("Failed to encrypt message");
-        const response = await utils.request(`${serviceURL}&params=${encodeURIComponent(encryptedParams)}`, {
-            method: "GET"
-        });
-        return utils.resolve(response);
-    };
-});

package/node_modules/zca-js/dist/cjs/apis/deleteSnapshotMobileMsg.cjs

@@ -1,22 +0,0 @@
-'use strict';
-
-var ZaloApiError = require('../Errors/ZaloApiError.cjs');
-var utils = require('../utils.cjs');
-
-const deleteSnapshotMobileMsgFactory = utils.apiFactory()((api, ctx, utils) => {
-    const serviceURL = utils.makeURL(`${api.zpwServiceMap.file[0]}/api/message/delete_snapshot_mobile_msg`);
-    return async function deleteSnapshotMobileMsg(publicKey) {
-        const params = {
-            public_key: publicKey,
-            imei: ctx.imei
-        };
-        const encryptedParams = utils.encodeAES(JSON.stringify(params));
-        if (!encryptedParams) throw new ZaloApiError.ZaloApiError("Failed to encrypt message");
-        const response = await utils.request(`${serviceURL}&params=${encodeURIComponent(encryptedParams)}`, {
-            method: "GET"
-        });
-        return utils.resolve(response);
-    };
-});
-
-exports.deleteSnapshotMobileMsgFactory = deleteSnapshotMobileMsgFactory;

package/node_modules/zca-js/dist/cjs/apis/getCrossDB.cjs

@@ -1,22 +0,0 @@
-'use strict';
-
-var ZaloApiError = require('../Errors/ZaloApiError.cjs');
-var utils = require('../utils.cjs');
-
-const getCrossDBFactory = utils.apiFactory()((api, _, utils) => {
-    const serviceURL = utils.makeURL(`${api.zpwServiceMap.file[0]}/api/message/get_crossdb`);
-    return async function getCrossDB(syncSession) {
-        const params = {
-            pc_name: "Web",
-            sync_session: syncSession
-        };
-        const encryptedParams = utils.encodeAES(JSON.stringify(params));
-        if (!encryptedParams) throw new ZaloApiError.ZaloApiError("Failed to encrypt message");
-        const response = await utils.request(`${serviceURL}&params=${encodeURIComponent(encryptedParams)}`, {
-            method: "GET"
-        });
-        return utils.resolve(response);
-    };
-});
-
-exports.getCrossDBFactory = getCrossDBFactory;

package/node_modules/zca-js/dist/cjs/apis/pullMobileMsg.cjs

@@ -1,26 +0,0 @@
-'use strict';
-
-var ZaloApiError = require('../Errors/ZaloApiError.cjs');
-var utils = require('../utils.cjs');
-
-const pullMobileMsgFactory = utils.apiFactory()((api, _, utils) => {
-    const serviceURL = utils.makeURL(`${api.zpwServiceMap.file[0]}/api/message/pull_mobile_msg`);
-    return async function pullMobileMsg(publicKey, fromSeqId = 0, isRetry = 0, tempKey = "") {
-        const params = {
-            pc_name: "Web",
-            public_key: publicKey,
-            from_seq_id: fromSeqId,
-            is_retry: isRetry,
-            min_seq_id: 0,
-            temp_key: tempKey
-        };
-        const encryptedParams = utils.encodeAES(JSON.stringify(params));
-        if (!encryptedParams) throw new ZaloApiError.ZaloApiError("Failed to encrypt message");
-        const response = await utils.request(`${serviceURL}&params=${encodeURIComponent(encryptedParams)}`, {
-            method: "GET"
-        });
-        return utils.resolve(response);
-    };
-});
-
-exports.pullMobileMsgFactory = pullMobileMsgFactory;

package/node_modules/zca-js/dist/cjs/apis/requestSyncMessage.cjs

@@ -1,22 +0,0 @@
-'use strict';
-
-var ZaloApiError = require('../Errors/ZaloApiError.cjs');
-var utils = require('../utils.cjs');
-
-const requestSyncMessageFactory = utils.apiFactory()((api, _, utils) => {
-    const serviceURL = utils.makeURL(`${api.zpwServiceMap.file[0]}/api/transfer-sync-v2/request-sync`);
-    return async function requestSyncMessage(reqId, data) {
-        const params = {
-            reqId: String(reqId),
-            data: JSON.stringify(data)
-        };
-        const encryptedParams = utils.encodeAES(JSON.stringify(params));
-        if (!encryptedParams) throw new ZaloApiError.ZaloApiError("Failed to encrypt message");
-        const response = await utils.request(`${serviceURL}&params=${encodeURIComponent(encryptedParams)}`, {
-            method: "GET"
-        });
-        return utils.resolve(response);
-    };
-});
-
-exports.requestSyncMessageFactory = requestSyncMessageFactory;