@modelzen/feishu-codex-bridge 0.3.4 → 0.3.5

package/README.md

@@ -165,6 +165,7 @@ feishu-codex-bridge bot rm <名>     # 移除一个机器人配置
   - **💬 单会话群**：整群就是**一条连续会话**（全程**免 @**、消息按序排队、无 `/resume`）。适合**个人单线深入**、像私聊一样直接聊。
 - **干活**：在项目群里 **@机器人** 描述需求；机器人在该群绑定的目录里跑 Codex，流式卡片回结果。
 - **话题 = 会话**：对某条消息开话题后，话题内可**免 @** 连续对话，是一条连贯的 Codex 会话。
+- **发图 / 发附件**：直接在消息里**发图片**，Codex 能看到（多模态读图）；**发文件附件**（日志 / PDF / 代码等），桥会把它下载到本地并把**绝对路径**告诉 Codex，让它用工具直接打开分析。⚠️ 附件落在桥的全局临时目录（`~/.feishu-codex-bridge/inbound`，1h 后自动清），**只有「完全访问」档**能读到——「项目内只读 / 读写」档的沙箱把读取锁在项目目录内，读不到该目录。单文件上限 50MB、单条消息最多 9 个；合并转发里的附件飞书官方不支持取，故不支持。
 - **文档评论 @机器人**：在飞书文档评论里 @ 它就回（前提：已开通文档评论权限 + 订阅 `drive.notice.comment_add_v1`，且机器人对该文档有访问权限）。只支持 doc/docx/sheet/file；评论框不渲染 markdown，回复为纯文本，超长会截断。
 - **终止**：卡片上的 **⏹** 随时终止当前轮；卡死超过 watchdog 阈值（默认 120s）自动中止并回收进程。
 - **私聊控制台**：项目列表、设置（模型 / 推理强度 / 免 @ / watchdog / 管理员）、用量、诊断、重连，全在私聊菜单里。

package/dist/cli.js

@@ -68,7 +68,10 @@ var paths = {
    * passes lark-cli's AssertSecurePath audit.
    */
   secretsGetterScript: join(appDir, "secrets-getter"),
-  mediaDir: join(appDir, "media")
+  mediaDir: join(appDir, "media"),
+  /** Inbound file attachments downloaded from chat, handed to codex by absolute
+   * path (codex has no native file input). TTL-pruned like {@link mediaDir}. */
+  inboundDir: join(appDir, "inbound")
 };
 
 // src/config/bots.ts
@@ -5404,7 +5407,7 @@ async function collectInboundImages(channel, msg) {
     return [];
   }
   if (refs.length === 0) return [];
-  await pruneOldMedia();
+  await pruneOldMedia(paths.mediaDir);
   try {
     await mkdir11(paths.mediaDir, { recursive: true });
   } catch {
@@ -5507,16 +5510,16 @@ function readHeader(headers, name) {
 function safeName(fileKey) {
   return fileKey.replace(/[^a-zA-Z0-9_-]/g, "").slice(-40) || "img";
 }
-async function pruneOldMedia() {
+async function pruneOldMedia(dir) {
   let entries;
   try {
-    entries = await readdir2(paths.mediaDir);
+    entries = await readdir2(dir);
   } catch {
     return;
   }
   const cutoff = Date.now() - MEDIA_TTL_MS;
   for (const name of entries) {
-    const file = join14(paths.mediaDir, name);
+    const file = join14(dir, name);
     try {
       const st = await stat3(file);
       if (st.mtimeMs < cutoff) await rm4(file, { force: true });
@@ -5524,6 +5527,84 @@ async function pruneOldMedia() {
     }
   }
 }
+var MAX_FILES = 9;
+var MAX_FILE_BYTES = 50 * 1024 * 1024;
+function messageHasFiles(msg) {
+  return (msg.resources ?? []).some((r) => r.type === "file");
+}
+async function collectInboundFiles(channel, msg) {
+  const refs = [];
+  const seen = /* @__PURE__ */ new Set();
+  for (const r of msg.resources ?? []) {
+    if (r.type === "file" && r.fileKey && !seen.has(r.fileKey)) {
+      seen.add(r.fileKey);
+      refs.push({ messageId: msg.messageId, fileKey: r.fileKey, fileName: r.fileName });
+    }
+  }
+  if (refs.length === 0) return [];
+  await pruneOldMedia(paths.inboundDir);
+  try {
+    await mkdir11(paths.inboundDir, { recursive: true });
+  } catch {
+  }
+  const out = [];
+  for (const ref of refs.slice(0, MAX_FILES)) {
+    const f = await downloadOneFile(channel, ref);
+    if (f) out.push(f);
+  }
+  log.info("intake", "files", { found: refs.length, downloaded: out.length });
+  return out;
+}
+async function downloadOneFile(channel, ref) {
+  try {
+    const res = await channel.rawClient.im.v1.messageResource.get({
+      path: { message_id: ref.messageId, file_key: ref.fileKey },
+      params: { type: "file" }
+    });
+    const declared = Number(readHeader(res.headers, "content-length"));
+    if (Number.isFinite(declared) && declared > MAX_FILE_BYTES) {
+      log.warn("intake", "file-too-large", { fileKey: ref.fileKey.slice(0, 24), bytes: declared });
+      return void 0;
+    }
+    const name = cleanFileName(ref.fileName) || "attachment";
+    const onDisk = `${safeName(ref.fileKey)}-${name}`;
+    const file = join14(paths.inboundDir, onDisk);
+    await res.writeFile(file);
+    try {
+      const st = await stat3(file);
+      if (st.size > MAX_FILE_BYTES) {
+        await rm4(file, { force: true });
+        log.warn("intake", "file-too-large", { fileKey: ref.fileKey.slice(0, 24), bytes: st.size });
+        return void 0;
+      }
+    } catch {
+    }
+    return { path: file, name };
+  } catch (err) {
+    log.warn("intake", "file-download-failed", { fileKey: ref.fileKey.slice(0, 24), err: String(err) });
+    return void 0;
+  }
+}
+function cleanFileName(name) {
+  if (!name) return "";
+  const base = name.split(/[/\\]/).pop() ?? name;
+  const cleaned = base.replace(/[\x00-\x1f<>:"|?*]/g, "_").replace(/\s+/g, " ").trim().slice(0, 100);
+  return cleaned === "." || cleaned === ".." ? "" : cleaned;
+}
+function stripFileTokens(text) {
+  return text.replace(/<file\b[^<]*\/>/g, "").replace(/[ \t]+\n/g, "\n").trim();
+}
+function weaveFileManifest(text, files) {
+  const stripped = stripFileTokens(text);
+  if (files.length === 0) return stripped;
+  const lines = files.map((f) => `- ${f.name} \u2192 ${f.path}`).join("\n");
+  const head = stripped ? `${stripped}
+
+` : "";
+  return `${head}[\u7528\u6237\u4E0A\u4F20\u4E86 ${files.length} \u4E2A\u9644\u4EF6\uFF0C\u5DF2\u4FDD\u5B58\u5230\u672C\u5730\uFF0C\u53EF\u7528 shell / \u8BFB\u53D6\u5DE5\u5177\u6309\u4E0B\u9762\u7684\u7EDD\u5BF9\u8DEF\u5F84\u76F4\u63A5\u6253\u5F00\uFF1A
+${lines}
+]`;
+}
 
 // src/bot/comments.ts
 var SUPPORTED_FILE_TYPES = /* @__PURE__ */ new Set(["doc", "docx", "sheet", "file"]);
@@ -6010,20 +6091,30 @@ function createOrchestrator(channel, cfg, fallbackCwd) {
     const perm = turnPerm(project, senderId);
     return { sessionKey: perm.roleSuffix ? `${baseKey}#${perm.roleSuffix}` : baseKey, ...perm };
   }
+  async function ingestFiles(msg, text) {
+    if (!messageHasFiles(msg)) return text;
+    const files = await collectInboundFiles(channel, msg);
+    const woven = weaveFileManifest(text, files);
+    if (!woven.trim()) {
+      return "\u7528\u6237\u53D1\u6765\u4E00\u4E2A\u9644\u4EF6\uFF0C\u4F46\u6865\u6CA1\u80FD\u4E0B\u8F7D\u5B83\uFF08\u53EF\u80FD\u8D85\u8FC7 50MB \u4E0A\u9650\u6216\u88AB\u98DE\u4E66\u62D2\u7EDD\uFF09\u3002\u8BF7\u544A\u8BC9\u7528\u6237\u9644\u4EF6\u6CA1\u8BFB\u5230\uFF0C\u53EF\u4EE5\u91CD\u53D1\uFF0C\u6216\u6539\u4E3A\u7C98\u8D34\u6587\u672C / \u53D1\u56FE\u7247\u3002";
+    }
+    return woven;
+  }
   async function handleTurn(msg, text, sessionKey, flat, project, perm) {
     const existing = active.get(sessionKey);
     if (existing) {
       const images = messageHasImages(msg) ? await collectInboundImages(channel, msg) : void 0;
+      const woven = await ingestFiles(msg, text);
       const cur = active.get(sessionKey);
       if (!cur) {
-        startReservedRun(msg, text, sessionKey, flat, project, perm, images);
+        startReservedRun(msg, woven, sessionKey, flat, project, perm, images, true, text);
         return;
       }
       if (getPendingPolicy(cfg) === "steer" && cur.run && cur.thread) {
         const tid = cur.run.turnId();
         if (tid) {
           try {
-            await cur.thread.steer({ text, images }, tid);
+            await cur.thread.steer({ text: woven, images }, tid);
             log.info("intake", "steer", { tid, images: images?.length ?? 0 });
             return;
           } catch (err) {
@@ -6031,13 +6122,13 @@ function createOrchestrator(channel, cfg, fallbackCwd) {
           }
         }
       }
-      cur.queue.push({ text, images });
+      cur.queue.push({ text: woven, images });
       log.info("intake", "queued", { depth: cur.queue.length });
       return;
     }
     startReservedRun(msg, text, sessionKey, flat, project, perm);
   }
-  function startReservedRun(msg, text, sessionKey, flat, project, perm, preloadedImages) {
+  function startReservedRun(msg, text, sessionKey, flat, project, perm, preloadedImages, preIngested, summaryText2) {
     const existing = active.get(sessionKey);
     if (existing) {
       existing.queue.push({ text, images: preloadedImages });
@@ -6050,6 +6141,7 @@ function createOrchestrator(channel, cfg, fallbackCwd) {
       const reaction = runReaction(msg.messageId, !sema.hasFree());
       try {
         const images = preloadedImages ?? (messageHasImages(msg) ? await collectInboundImages(channel, msg) : void 0);
+        const firstText = preIngested ? text : await ingestFiles(msg, text);
         let thread = await resolveThread(sessionKey, msg.chatId, { mode: perm.mode, network: perm.network });
         if (!thread) {
           const cwd = project?.cwd ?? fallbackCwd;
@@ -6060,7 +6152,10 @@ function createOrchestrator(channel, cfg, fallbackCwd) {
             chatId: msg.chatId,
             cwd,
             codexThreadId: thread.codexThreadId,
-            summary: text.slice(0, 80),
+            // `text` is already file-woven when preIngested; use the raw
+            // `summaryText` (handleTurn's original) so the session label isn't
+            // manifest boilerplate + a temp path.
+            summary: stripFileTokens(summaryText2 ?? text).slice(0, 80),
             createdAt: Date.now(),
             updatedAt: Date.now()
           });
@@ -6073,7 +6168,7 @@ function createOrchestrator(channel, cfg, fallbackCwd) {
             replyInThread: !flat,
             flat,
             thread,
-            firstText: text,
+            firstText,
             images,
             knownThreadId: sessionKey,
             requesterOpenId: msg.senderId
@@ -6147,8 +6242,8 @@ function createOrchestrator(channel, cfg, fallbackCwd) {
         await channel.send(msg.chatId, { markdown: `\u274C \u542F\u52A8\u5931\u8D25\uFF1A${err instanceof Error ? err.message : String(err)}` }, { replyTo: msg.messageId }).catch(() => void 0);
         return;
       }
-      const firstText = text || "\u4F60\u597D\uFF0C\u6211\u4EEC\u5F00\u59CB\u5427\u3002";
       const images = messageHasImages(msg) ? await collectInboundImages(channel, msg) : void 0;
+      const firstText = await ingestFiles(msg, text) || "\u4F60\u597D\uFF0C\u6211\u4EEC\u5F00\u59CB\u5427\u3002";
       log.info("card", "start", { project: project?.name ?? "(unregistered)", model, effort, images: images?.length ?? 0 });
       await launchRun(
         {
@@ -6161,7 +6256,7 @@ function createOrchestrator(channel, cfg, fallbackCwd) {
           model,
           effort,
           cwd,
-          summary: text.slice(0, 80) || "(\u7A7A)",
+          summary: stripFileTokens(text).slice(0, 80) || "(\u7A7A)",
           requesterOpenId: msg.senderId,
           roleSuffix: perm.roleSuffix
         },

package/dist/index.d.ts

@@ -42,6 +42,9 @@ declare const paths: {
      */
     secretsGetterScript: string;
     mediaDir: string;
+    /** Inbound file attachments downloaded from chat, handed to codex by absolute
+     * path (codex has no native file input). TTL-pruned like {@link mediaDir}. */
+    inboundDir: string;
 };
 
 export { log, newTraceId, paths, withTrace };

package/dist/index.js

@@ -47,7 +47,10 @@ var paths = {
    * passes lark-cli's AssertSecurePath audit.
    */
   secretsGetterScript: join(appDir, "secrets-getter"),
-  mediaDir: join(appDir, "media")
+  mediaDir: join(appDir, "media"),
+  /** Inbound file attachments downloaded from chat, handed to codex by absolute
+   * path (codex has no native file input). TTL-pruned like {@link mediaDir}. */
+  inboundDir: join(appDir, "inbound")
 };
 
 // src/core/logger.ts

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@modelzen/feishu-codex-bridge",
-  "version": "0.3.4",
+  "version": "0.3.5",
   "description": "Bridge Feishu/Lark messenger with local Codex via app-server (project=group, thread=session)",
   "type": "module",
   "bin": {