@dnalec/dsh-auto-approve 0.1.0

package/src/tickets.mjs

@@ -0,0 +1,277 @@
+/**
+ * 短号票据：#1–#99 循环；解析 QQ 批复；结案 30s 记忆。
+ *
+ * 网页与 QQ 竞速：先答的 outcome 生效。结案后 30s 内同一短号再答会提示「已处理」，
+ * 避免用户点两次按钮以为没生效。没有「永久拒绝」。
+ */
+
+const MAX = 99
+
+/** 进程内经纪。不落盘：重启后未结票据作废，网页框也会随会话消失。 */
+export function createTicketBroker() {
+  /** @type {Map<number, object>} */
+  const pending = new Map()
+  /** @type {Map<number, { ts: number, outcome: string }>} */
+  const recent = new Map()
+  let nextNum = 1
+
+  function pruneRecent(now = Date.now()) {
+    for (const [n, rec] of recent) {
+      if (now - rec.ts > 30_000) recent.delete(n)
+    }
+  }
+
+  function allocate(meta) {
+    pruneRecent()
+    for (let i = 0; i < MAX; i++) {
+      const n = ((nextNum - 1 + i) % MAX) + 1
+      if (pending.has(n)) continue
+      nextNum = (n % MAX) + 1
+      const ticket = {
+        n,
+        sessionId: meta.sessionId || '',
+        callId: meta.callId || '',
+        toolName: meta.toolName || '',
+        mode: meta.mode || '',
+        reason: meta.reason || '',
+        justification: meta.justification || '',
+        category: meta.category || '',
+        judgeReason: meta.judgeReason || '',
+        path: meta.path || '',
+        cwd: meta.cwd || '',
+        args: meta.args && typeof meta.args === 'object' ? meta.args : {},
+        resolve: null,
+        settled: false,
+      }
+      const wait = new Promise((resolve) => {
+        ticket.resolve = (result) => {
+          if (ticket.settled) return
+          ticket.settled = true
+          pending.delete(n)
+          recent.set(n, { ts: Date.now(), outcome: result && result.outcome })
+          resolve(result)
+        }
+      })
+      ticket.wait = wait
+      pending.set(n, ticket)
+      return ticket
+    }
+    throw new Error('no free ticket numbers')
+  }
+
+  function get(n) {
+    return pending.get(Number(n))
+  }
+
+  function listPending() {
+    return [...pending.values()].map((t) => ({
+      n: t.n,
+      sessionId: t.sessionId,
+      toolName: t.toolName,
+    }))
+  }
+
+  function answer(n, result) {
+    const ticket = pending.get(Number(n))
+    if (!ticket) return false
+    ticket.resolve({
+      source: 'qq',
+      outcome: result.outcome,
+    })
+    return true
+  }
+
+  function discard(n, reason) {
+    const ticket = pending.get(Number(n))
+    if (!ticket) return
+    ticket.resolve({ source: reason || 'discard', outcome: null })
+  }
+
+  function recentOutcome(n) {
+    pruneRecent()
+    return recent.get(Number(n)) || null
+  }
+
+  function pendingCount() {
+    return pending.size
+  }
+
+  function solePending() {
+    if (pending.size !== 1) return null
+    return pending.values().next().value
+  }
+
+  function dispose() {
+    for (const ticket of [...pending.values()]) {
+      ticket.resolve({ source: 'dispose', outcome: 'cancelled' })
+    }
+  }
+
+  return {
+    allocate,
+    get,
+    listPending,
+    answer,
+    discard,
+    recentOutcome,
+    pendingCount,
+    solePending,
+    dispose,
+  }
+}
+
+/** 未绑定 chatId 时，私人 bot 把这些回复当成「把本聊天设为审批目标」。 */
+export function isBindConfirmText(text) {
+  return /^(是|确认|用作审批|yes|ok)$/i.test(String(text || '').trim())
+}
+
+/**
+ * 只认批准/拒绝。没有永久拒绝。多条 pending 必须带短号。
+ * @returns {{ kind: string, n?: number, text?: string } | null}
+ */
+export function parseApprovalReply(text, pendingCount) {
+  const raw = String(text || '').trim()
+  if (!raw) return null
+  const s = raw.replace(/^[@＠]\S+\s+/, '').trim()
+
+  const allowRe = /^(?:批准|同意|允许|yes|ok|allow)\s*#?\s*(\d{1,2})$/i
+  const allowRe2 = /^#?\s*(\d{1,2})\s*(?:批准|同意|允许|yes|ok|allow)$/i
+  const rejectRe = /^(?:拒绝|否决|no|reject|deny)\s*#?\s*(\d{1,2})$/i
+  const rejectRe2 = /^#?\s*(\d{1,2})\s*(?:拒绝|否决|no|reject|deny)$/i
+
+  let m = s.match(allowRe) || s.match(allowRe2)
+  if (m) return { kind: 'allow', n: Number(m[1]) }
+
+  m = s.match(rejectRe) || s.match(rejectRe2)
+  if (m) return { kind: 'reject', n: Number(m[1]) }
+
+  const bareAllow = /^(?:批准|同意|允许|yes|ok|allow)$/i
+  const bareReject = /^(?:拒绝|否决|no|reject|deny)$/i
+  if (bareAllow.test(s)) {
+    if (pendingCount === 1) return { kind: 'allow-bare' }
+    return { kind: 'need-number' }
+  }
+  if (bareReject.test(s)) {
+    if (pendingCount === 1) return { kind: 'reject-bare' }
+    return { kind: 'need-number' }
+  }
+
+  return null
+}
+
+export function formatPendingList(list) {
+  if (!list || list.length === 0) return '当前没有待处理审批'
+  return '当前：' + list.map((t) => '#' + t.n).join('、')
+}
+
+export function truncateText(text, max = 1600) {
+  const s = String(text || '')
+  if (s.length <= max) return s
+  return s.slice(0, max - 1) + '…'
+}
+
+export function formatOutcomeLabel(outcome) {
+  if (outcome === 'allowed-once') return '批准'
+  if (outcome === 'rejected') return '拒绝'
+  if (outcome === 'cancelled') return '取消'
+  if (outcome === 'unavailable') return '未应答'
+  return String(outcome || '已处理')
+}
+
+/**
+ * QQ 推送正文。timeoutSecs 只是「本聊天未答会提醒」，不是审批截止。
+ * 有 command 时不重复 escalate 理由，避免把沙箱升级套话当成命令。
+ */
+export function formatApprovalPush(ticket, timeoutSecs) {
+  const sid = String(ticket.sessionId || '')
+  const tail = sid.length > 8 ? sid.slice(-8) : sid
+  const cwd = String(ticket.cwd || '').replace(/[\\/]+$/, '')
+  const base = cwd.split(/[\\/]/).pop() || cwd || '(cwd)'
+  const args = ticket.args || {}
+  const command = args.command ? truncateText(args.command, 1200) : ''
+  const filePath = args.file_path || args.path || ''
+  const content = args.content ? truncateText(args.content, 400) : ''
+  const oldS = args.old_string ? truncateText(args.old_string, 300) : ''
+  const newS = args.new_string ? truncateText(args.new_string, 300) : ''
+  const extras = [
+    args.code ? `代码：${truncateText(args.code, 400)}` : null,
+    args.url ? `URL：${truncateText(args.url, 300)}` : null,
+    args.query ? `查询：${truncateText(args.query, 300)}` : null,
+    args.script ? `脚本：${truncateText(args.script, 400)}` : null,
+    args.sql ? `SQL：${truncateText(args.sql, 300)}` : null,
+    args.prompt ? `提示词：${truncateText(args.prompt, 300)}` : null,
+    args.input ? `输入：${truncateText(args.input, 300)}` : null,
+    args.text ? `文本：${truncateText(args.text, 300)}` : null,
+    args.body ? `正文：${truncateText(args.body, 300)}` : null,
+    args.message ? `消息：${truncateText(args.message, 200)}` : null,
+  ].filter(Boolean)
+  const clipped = Boolean(
+    (args.command && command !== args.command)
+    || (args.content && content !== args.content)
+    || (args.old_string && oldS !== args.old_string)
+    || (args.new_string && newS !== args.new_string)
+    || (args.code && extras.some((l) => l.startsWith('代码：') && l.endsWith('…'))),
+  )
+  const hasCard = Boolean(command || filePath || content || oldS || newS || extras.length)
+  const secs = Number(timeoutSecs) > 0 ? Number(timeoutSecs) : 120
+  const body = [
+    `⚠️ 审批 #${ticket.n}（本聊天 ${secs}s 内未答会提醒）`,
+    `会话：${base} · ${tail}`,
+    `工具：${ticket.toolName || 'unknown'}`,
+    command ? `命令：${command}` : null,
+    filePath ? `路径：${truncateText(filePath, 400)}` : null,
+    args.description ? `描述：${truncateText(args.description, 200)}` : null,
+    content ? `写入：${content}` : null,
+    oldS ? `原文：${oldS}` : null,
+    newS ? `改成：${newS}` : null,
+    ...extras,
+    ticket.judgeReason ? `判定：${truncateText(ticket.judgeReason, 200)}` : null,
+    !command && ticket.reason ? `原因：${truncateText(ticket.justification || ticket.reason, 800)}` : null,
+    !hasCard ? '未捕获命令/路径/内容，请在网页查看全文再批准' : null,
+    clipped ? '正文已截断，请在网页查看全文再批准' : null,
+    `点下方按钮，或回复：批准 ${ticket.n}  /  拒绝 ${ticket.n}`,
+  ].filter(Boolean).join('\n')
+  const out = truncateText(body, 2000)
+  if (out !== body && !clipped) {
+    return truncateText(body.replace(
+      `点下方按钮，或回复：批准 ${ticket.n}  /  拒绝 ${ticket.n}`,
+      `正文已截断，请在网页查看全文再批准\n点下方按钮，或回复：批准 ${ticket.n}  /  拒绝 ${ticket.n}`,
+    ), 2000)
+  }
+  return out
+}
+
+/**
+ * QQ 自定义按钮（单聊/群聊，2026-04-23 起无需模板）。
+ * 必须挂在 markdown 消息上发出，纯文本 200 也会丢掉 keyboard。
+ * @param {number} n
+ * @param {string} [userId] 群聊时限制可点的人
+ */
+export function formatApprovalKeyboard(n, userId) {
+  const num = String(n)
+  const permission = userId
+    ? { type: 0, specify_user_ids: [String(userId)] }
+    : { type: 2 }
+  const button = function (id, label, data, style) {
+    return {
+      id,
+      render_data: { label, visited_label: label, style },
+      action: {
+        type: 1,
+        permission,
+        data,
+        unsupport_tips: '请回复：' + data,
+      },
+    }
+  }
+  return {
+    rows: [
+      {
+        buttons: [
+          button('allow-' + num, '批准', '批准 ' + num, 1),
+          button('reject-' + num, '拒绝', '拒绝 ' + num, 0),
+        ],
+      },
+    ],
+  }
+}

package/src/util.mjs

@@ -0,0 +1,242 @@
+/**
+ * 路径、JSON、审计、事件日志。无副作用：调用方传入目录。
+ *
+ * 规则在 ~/.dsh/auto-approve/；凭据/插件配置在 ~/.dsh/approval-bridge/（旧目录名，不要挪）。
+ * tryLoadJson 区分缺失与损坏：损坏时调用方不得用默认值覆写磁盘。
+ */
+import { appendFileSync, chmodSync, existsSync, mkdirSync, readFileSync, renameSync, statSync, unlinkSync, writeFileSync } from 'node:fs'
+import { homedir } from 'node:os'
+import { dirname, join } from 'node:path'
+
+export const NAME = 'dsh-auto-approve'
+
+export function dshHome() {
+  return process.env.DSH_HOME || join(homedir(), '.dsh')
+}
+
+/** auto-approve = 规则/审计；approval-bridge = QQ 凭据与插件配置。 */
+export function pathsFor(home = dshHome()) {
+  const auto = join(home, 'auto-approve')
+  const bridge = join(home, 'approval-bridge')
+  return {
+    home,
+    auto,
+    bridge,
+    allowlist: join(auto, 'allowlist.json'),
+    audit: join(auto, 'audit.log'),
+    events: join(auto, 'events.jsonl'),
+    pluginConfig: join(bridge, 'config.json'),
+    qqbot: join(bridge, 'qqbot.json'),
+    profilePatch: join(home, 'profiles', 'web', 'cordis.patch.yml'),
+  }
+}
+
+export function ensureDir(dir) {
+  try { mkdirSync(dir, { recursive: true }) } catch { /* ignore */ }
+}
+
+export function tryLoadJson(path) {
+  try {
+    if (!existsSync(path)) return { ok: true, missing: true, value: null }
+    return { ok: true, missing: false, value: JSON.parse(readFileSync(path, 'utf8')) }
+  } catch (error) {
+    return { ok: false, missing: false, error, value: null }
+  }
+}
+
+export function loadJson(path, fallback) {
+  const loaded = tryLoadJson(path)
+  if (!loaded.ok) {
+    console.error(`[${NAME}] 读取 ${path} 失败，用默认值`, loaded.error)
+    return fallback
+  }
+  if (loaded.missing) return fallback
+  return loaded.value
+}
+
+function chmodPrivate(path) {
+  try { chmodSync(path, 0o600) } catch { /* ignore */ }
+}
+
+function writeAtomic(path, text, mode) {
+  const tmp = path + '.tmp'
+  try {
+    ensureDir(dirname(path))
+    if (mode != null) writeFileSync(tmp, text, { encoding: 'utf8', mode })
+    else writeFileSync(tmp, text, 'utf8')
+    renameSync(tmp, path)
+    chmodPrivate(path)
+    return true
+  } catch (error) {
+    try { unlinkSync(tmp) } catch { /* ignore */ }
+    throw error
+  }
+}
+
+export function saveJson(path, data) {
+  try {
+    writeAtomic(path, JSON.stringify(data, null, 2) + '\n')
+    return true
+  } catch (error) {
+    console.error(`[${NAME}] 写入 ${path} 失败`, error)
+    return false
+  }
+}
+
+/** 凭据文件：0600。目录也尽量收紧。 */
+export function saveSecretJson(path, data) {
+  try {
+    writeAtomic(path, JSON.stringify(data, null, 2) + '\n', 0o600)
+  } catch (error) {
+    console.error(`[${NAME}] 写入凭据 ${path} 失败`, error)
+    throw error
+  }
+}
+
+export function appendLine(path, line) {
+  try {
+    ensureDir(dirname(path))
+    appendFileSync(path, line, 'utf8')
+    chmodPrivate(path)
+  } catch { /* ignore */ }
+}
+
+export function audit(auditPath, line) {
+  appendLine(auditPath, `[${new Date().toISOString()}] ${line}\n`)
+}
+
+/** @type {{ path: string, mtimeMs: number, size: number, records: object[] } | null} */
+let eventsCache = null
+
+function loadEventRecords(eventsPath) {
+  try {
+    const st = statSync(eventsPath)
+    if (
+      eventsCache
+      && eventsCache.path === eventsPath
+      && eventsCache.mtimeMs === st.mtimeMs
+      && eventsCache.size === st.size
+    ) {
+      return eventsCache.records
+    }
+    const text = readFileSync(eventsPath, 'utf8')
+    const records = []
+    for (const line of text.split('\n')) {
+      if (!line.trim()) continue
+      try {
+        const ev = JSON.parse(line)
+        if (Number.isInteger(ev.id)) records.push(ev)
+      } catch { /* skip */ }
+    }
+    eventsCache = { path: eventsPath, mtimeMs: st.mtimeMs, size: st.size, records }
+    return records
+  } catch {
+    return null
+  }
+}
+
+export function readEventsSince(eventsPath, sessionId, since) {
+  const records = loadEventRecords(eventsPath)
+  if (!records) return []
+  const events = []
+  for (const ev of records) {
+    if (ev.id <= since) continue
+    if (sessionId && ev.sessionId !== sessionId) continue
+    events.push(ev)
+  }
+  return events
+}
+
+export const EVENTS_MAX_BYTES = 2 * 1024 * 1024
+export const EVENTS_KEEP = 2000
+
+export function trimEventsFile(eventsPath, maxBytes = EVENTS_MAX_BYTES, keep = EVENTS_KEEP) {
+  try {
+    const st = statSync(eventsPath)
+    if (st.size < maxBytes) return false
+    const records = loadEventRecords(eventsPath) || []
+    const kept = records.slice(-Math.max(1, keep))
+    const text = kept.length ? kept.map((r) => JSON.stringify(r)).join('\n') + '\n' : ''
+    writeAtomic(eventsPath, text)
+    eventsCache = null
+    return true
+  } catch {
+    return false
+  }
+}
+
+export function appendEvent(eventsPath, ev) {
+  ensureDir(dirname(eventsPath))
+  appendFileSync(eventsPath, JSON.stringify(ev) + '\n', 'utf8')
+  chmodPrivate(eventsPath)
+  eventsCache = null
+  trimEventsFile(eventsPath)
+}
+
+export function maxEventId(eventsPath) {
+  let max = 0
+  try {
+    const text = readFileSync(eventsPath, 'utf8')
+    for (const line of text.split('\n')) {
+      if (!line.trim()) continue
+      try {
+        const ev = JSON.parse(line)
+        if (Number.isInteger(ev.id) && ev.id > max) max = ev.id
+      } catch { /* skip */ }
+    }
+  } catch { /* missing */ }
+  return max
+}
+
+export function maskSecret(value) {
+  const s = String(value || '')
+  if (!s) return ''
+  if (s.length <= 4) return '****'
+  return s.slice(0, 2) + '****' + s.slice(-2)
+}
+
+/**
+ * 网页审批框用的独立 signal：父 signal 中止时跟着中止；
+ * 主动 abort() 只关网页，不碰父 signal（避免整单变成 cancelled）。
+ * @param {AbortSignal | undefined} parent
+ */
+export function forkAbortSignal(parent) {
+  const child = new AbortController()
+  const forward = () => {
+    if (child.signal.aborted) return
+    try { child.abort(parent && parent.reason) } catch { /* ignore */ }
+  }
+  if (parent) {
+    if (parent.aborted) forward()
+    else parent.addEventListener('abort', forward, { once: true })
+  }
+  return {
+    signal: child.signal,
+    abort() {
+      if (parent) {
+        try { parent.removeEventListener('abort', forward) } catch { /* ignore */ }
+      }
+      forward()
+    },
+  }
+}
+
+/** 把 req.signal 换成网页专用 signal；失败则 false（网页框可能关不掉）。 */
+export function replaceRequestSignal(req, signal) {
+  if (!req || typeof req !== 'object') return false
+  try {
+    req.signal = signal
+    if (req.signal === signal) return true
+  } catch { /* readonly */ }
+  try {
+    Object.defineProperty(req, 'signal', {
+      configurable: true,
+      enumerable: true,
+      writable: true,
+      value: signal,
+    })
+    return req.signal === signal
+  } catch {
+    return false
+  }
+}