@musnows/scriverse 0.8.0 → 0.8.2

package/dist/app.js

@@ -40,10 +40,14 @@ import { S3BackupManager } from "./s3-backup.js";
 import { APP_VERSION } from "./version.js";
 import { ReleaseUpdateChecker } from "./release-update.js";
 import { DEFAULT_IMAGE_UPLOAD_LIMITS, formatUploadLimit } from "./upload-limits.js";
-import { canReadWorkModule, canWriteWorkModule, fullWorkModulePermissions, proseReplacementPermissionModules } from "./work-permissions.js";
+import { canReadWorkModule, canWriteWorkModule, chapterAnnotationPermissionModule, fullWorkModulePermissions, proseReplacementPermissionModules } from "./work-permissions.js";
 import { CollaborationPresence, editorPageKey, entityEditorPageKey, modulePageKey, presencePageKinds } from "./collaboration-presence.js";
 import { PresenceStore } from "./presence-store.js";
 import { analysisTaskReadModules, clearSessionCookie, createCliApiScopeMiddleware, createUserSessionMiddleware, createWorkAuthorizationMiddleware, relationshipAnalysisReadModules, setSessionCookie, UserAuthService } from "./user-auth.js";
+const chapterAnnotationKinds = ["note", "todo"];
+function readableChapterAnnotationKinds(permissions) {
+    return chapterAnnotationKinds.filter((kind) => canReadWorkModule(permissions, chapterAnnotationPermissionModule(kind)));
+}
 const nonEmpty = z.string().trim().min(1);
 const identifier = z.string().trim().min(1).max(200);
 const idempotencyKeySchema = z.string().trim().min(16).max(128)
@@ -110,6 +114,8 @@ const memberRoleValueSchema = z.enum(["editor", "settings-editor", "viewer"]);
 const moduleAccessSchema = z.enum(["none", "read", "write"]);
 const modulePermissionsSchema = z.object({
     prose: moduleAccessSchema,
+    comments: moduleAccessSchema.optional(),
+    todos: moduleAccessSchema.optional(),
     drafts: moduleAccessSchema.optional(),
     settings: moduleAccessSchema,
     characters: moduleAccessSchema,
@@ -124,6 +130,8 @@ const modulePermissionsSchema = z.object({
     "ai-settings": moduleAccessSchema
 }).strict().transform((permissions) => ({
     ...permissions,
+    comments: permissions.comments ?? permissions.prose,
+    todos: permissions.todos ?? permissions.prose,
     drafts: permissions.drafts ?? (permissions.prose === "write" && permissions.settings === "write"
         ? "write"
         : permissions.prose === "none" || permissions.settings === "none" ? "none" : "read")
@@ -932,12 +940,18 @@ function redactAiConversationMessage(item, permissions) {
     if (!message)
         return item;
     if (permissions.prose !== "none") {
-        if (permissions.characters !== "none")
-            return item;
         const metadata = recordValue(message.metadata);
-        if (!metadata || !("mentionCharacterIds" in metadata))
+        if (!metadata)
+            return item;
+        const readableMetadata = { ...metadata };
+        if (permissions.characters === "none")
+            delete readableMetadata.mentionCharacterIds;
+        if (permissions.races === "none")
+            delete readableMetadata.mentionRaceIds;
+        if (permissions.organizations === "none")
+            delete readableMetadata.mentionOrganizationIds;
+        if (Object.keys(readableMetadata).length === Object.keys(metadata).length)
             return item;
-        const { mentionCharacterIds: _mentionCharacterIds, ...readableMetadata } = metadata;
         return { ...message, metadata: readableMetadata };
     }
     return {
@@ -950,7 +964,9 @@ function redactAiConversationMessage(item, permissions) {
 }
 /** 无正文读取权限时隐藏对话预览与消息正文，避免历史对话泄露章节原文。 */
 function redactAiConversation(record, permissions) {
-    const readableRecord = permissions.characters === "none" ? { ...record, roleplayCharacter: null } : record;
+    const readableRecord = permissions.characters === "none"
+        ? { ...record, roleplayCharacter: null, roleplayUserCharacter: null }
+        : record;
     const scopedRecord = redactAiCallContext(readableRecord, permissions);
     const result = {
         ...scopedRecord
@@ -1609,12 +1625,23 @@ export function createRuntime(options) {
         const pagination = parsePagination(request.query);
         data(response, pagination ? store.listChapterInsightsPage(request.params.chapterId, pagination) : store.listChapterInsights(request.params.chapterId));
     });
-    app.get("/api/chapters/:chapterId/annotations", (request, response) => data(response, store.listChapterAnnotations(request.params.chapterId)));
+    app.get("/api/chapters/:chapterId/annotation-counts", (request, response) => {
+        const permissions = requestPermissions(request);
+        data(response, store.listChapterAnnotationCounts(request.params.chapterId, readableChapterAnnotationKinds(permissions)));
+    });
+    app.get("/api/chapters/:chapterId/annotations", (request, response) => {
+        const line = request.query.line === undefined
+            ? undefined
+            : parse(z.coerce.number().int().positive().max(100_000), request.query.line);
+        const permissions = requestPermissions(request);
+        data(response, store.listChapterAnnotations(request.params.chapterId, readableChapterAnnotationKinds(permissions), line));
+    });
     app.get("/api/works/:workId/chapter-annotations", (request, response) => {
         const pagination = parsePagination(request.query);
+        const permissions = requestPermissions(request, request.params.workId);
         data(response, pagination
-            ? store.listWorkChapterAnnotationsPage(request.params.workId, pagination)
-            : store.listWorkChapterAnnotations(request.params.workId));
+            ? store.listWorkChapterAnnotationsPage(request.params.workId, pagination, readableChapterAnnotationKinds(permissions))
+            : store.listWorkChapterAnnotations(request.params.workId, readableChapterAnnotationKinds(permissions)));
     });
     app.post("/api/chapters/:chapterId/annotations", (request, response) => {
         const input = parse(z.object({
@@ -2436,7 +2463,7 @@ export function createRuntime(options) {
         }).strict(), request.body);
         const sourceConversation = store.getAiConversationSummary(request.params.conversationId);
         const permissions = requestPermissions(request, String(sourceConversation.workId));
-        if (sourceConversation.roleplayCharacter && !canReadWorkModule(permissions, "characters")) {
+        if ((sourceConversation.roleplayCharacter || sourceConversation.roleplayUserCharacter) && !canReadWorkModule(permissions, "characters")) {
             throw new AppError(403, "WORK_MODULE_READ_DENIED", "你没有读取“角色”模块的权限");
         }
         const forked = store.forkAiConversation(request.params.conversationId, input.messageId, input.title, input.requestId);
@@ -2455,8 +2482,11 @@ export function createRuntime(options) {
         data(response, redactAiConversation(updated, permissions));
     });
     app.patch("/api/ai-conversations/:conversationId/roleplay", (request, response) => {
-        const input = parse(z.object({ characterId: identifier.nullable() }).strict(), request.body);
-        const updated = store.setAiConversationRoleplayCharacter(request.params.conversationId, input.characterId);
+        const input = parse(z.object({
+            characterId: identifier.nullable(),
+            userCharacterId: identifier.nullable().optional()
+        }).strict(), request.body);
+        const updated = store.setAiConversationRoleplayCharacter(request.params.conversationId, input.characterId, input.userCharacterId);
         const permissions = requestPermissions(request, String(updated.workId));
         data(response, redactAiConversation(updated, permissions));
     });
@@ -2709,6 +2739,8 @@ export function createRuntime(options) {
                     ...(resolvedScope.characterIds ?? []),
                     ...(resolvedScope.mentionCharacterIds ?? [])
                 ])];
+            const mentionRaceIds = [...new Set(resolvedScope.raceIds ?? [])];
+            const mentionOrganizationIds = [...new Set(resolvedScope.organizationIds ?? [])];
             const begun = store.beginAiConversationStreamRequest({
                 workId: request.params.workId,
                 conversationId,
@@ -2719,9 +2751,11 @@ export function createRuntime(options) {
                     content: input.instruction,
                     citations,
                     ...(input.currentMessageId ? { existingMessageId: input.currentMessageId } : {}),
-                    ...((modelId || mentionCharacterIds.length) ? { metadata: {
+                    ...((modelId || mentionCharacterIds.length || mentionRaceIds.length || mentionOrganizationIds.length) ? { metadata: {
                             ...(modelId ? { modelId } : {}),
-                            ...(mentionCharacterIds.length ? { mentionCharacterIds } : {})
+                            ...(mentionCharacterIds.length ? { mentionCharacterIds } : {}),
+                            ...(mentionRaceIds.length ? { mentionRaceIds } : {}),
+                            ...(mentionOrganizationIds.length ? { mentionOrganizationIds } : {})
                         } } : {})
                 }
             });