@musnows/scriverse 1.0.8 → 1.0.10

package/dist/app.js

@@ -1111,6 +1111,18 @@ function redactSuggestion(record, permissions) {
         restricted: true
     };
 }
+function redactAiConversationInlineReferences(content, permissions) {
+    const source = typeof content === "string" ? content : "";
+    return source.replace(/<ai_reference kind="(character|setting|chapter|context-settings)" id="[^"]+">[\s\S]*?<\/ai_reference>/gu, (reference, kind) => {
+        const readable = ({
+            character: permissions.characters !== "none",
+            setting: permissions.settings !== "none",
+            chapter: permissions.prose !== "none",
+            "context-settings": permissions.settings !== "none"
+        })[kind] ?? false;
+        return readable ? reference : "（已隐藏引用）";
+    });
+}
 function redactAiConversationMessage(item, permissions) {
     const message = recordValue(item);
     if (!message)
@@ -1130,9 +1142,10 @@ function redactAiConversationMessage(item, permissions) {
             delete readableMetadata.mentionSettingIds;
         if (permissions.settings === "none")
             delete readableMetadata.mentionContextSettingIds;
-        if (Object.keys(readableMetadata).length === Object.keys(metadata).length)
+        const content = redactAiConversationInlineReferences(message.content, permissions);
+        if (Object.keys(readableMetadata).length === Object.keys(metadata).length && content === message.content)
             return item;
-        return { ...message, metadata: readableMetadata };
+        return { ...message, content, metadata: readableMetadata };
     }
     return {
         ...message,
@@ -1387,9 +1400,14 @@ export function createRuntime(options) {
     });
     if (!options.liteLlmPriceCache && options.liteLlmPriceCachePath)
         liteLlmPriceCache.start();
-    const ai = new AiManager(store, credentialVault, options.fetchImpl ?? fetch, options.developmentServer === true || options.disableAiEndpointValidation === true
+    const disableAiEndpointValidation = options.developmentServer === true || options.disableAiEndpointValidation === true;
+    const validateAiEndpoint = disableAiEndpointValidation || options.disableAiProviderEndpointValidation === true
         ? undefined
-        : options.security ? (url) => assertSafeAiEndpoint(url, options.security?.allowPrivateAiEndpoints) : undefined, (task, actor) => {
+        : options.security ? (url) => assertSafeAiEndpoint(url, options.security?.allowPrivateAiEndpoints) : undefined;
+    const validateRemoteMcpEndpoint = disableAiEndpointValidation
+        ? undefined
+        : options.security ? (url) => assertSafeAiEndpoint(url, options.security?.allowPrivateAiEndpoints) : undefined;
+    const ai = new AiManager(store, credentialVault, options.fetchImpl ?? fetch, validateAiEndpoint, (task, actor) => {
         const requiredModules = analysisTaskReadModules(task.taskType, task.scope);
         const creator = actor ? null : database.get("SELECT created_by_user_id, created_via_api_key FROM analysis_tasks WHERE id = ?", String(task.id));
         const userId = actor?.userId ?? (typeof creator?.created_by_user_id === "string" ? creator.created_by_user_id : null);
@@ -1408,6 +1426,7 @@ export function createRuntime(options) {
         retrySleep: options.aiRetrySleep,
         aiChatImageMaxBytes: uploadLimits.chatImageBytes,
         liteLlmPriceCache,
+        remoteMcpValidateOutboundUrl: validateRemoteMcpEndpoint,
         allowPrivateAiEndpoints: options.security?.allowPrivateAiEndpoints === true
     });
     const imOrchestrator = new ImOrchestrator(store, auth, im, ai);
@@ -4034,15 +4053,6 @@ export function createRuntime(options) {
                 }
                 if (begun.request.status === "completed" && begun.assistantMessage) {
                     const content = String(begun.assistantMessage.content ?? "");
-                    const assistantMetadata = begun.assistantMessage.metadata && typeof begun.assistantMessage.metadata === "object"
-                        ? begun.assistantMessage.metadata
-                        : {};
-                    const writingSuggestionId = typeof assistantMetadata.writingSuggestionId === "string"
-                        ? assistantMetadata.writingSuggestionId
-                        : "";
-                    const writingSuggestion = writingSuggestionId
-                        ? redactSuggestion(ai.getSuggestion(writingSuggestionId), permissions)
-                        : null;
                     if (content)
                         sendEvent("delta", { delta: content, replayed: true });
                     sendEvent("complete", {
@@ -4050,8 +4060,7 @@ export function createRuntime(options) {
                         conversationId,
                         conversationTitle: store.getAiConversationSummary(conversationId).title,
                         messageId: begun.assistantMessage.id,
-                        messageCreatedAt: begun.assistantMessage.createdAt,
-                        ...(writingSuggestion ? { writingSuggestion } : {})
+                        messageCreatedAt: begun.assistantMessage.createdAt
                     });
                 }
                 else {
@@ -4083,7 +4092,7 @@ export function createRuntime(options) {
                     questionId: pendingQuestion.id
                 });
             }
-            const suggestion = await ai.createStreamingChat({
+            const result = await ai.createStreamingChat({
                 workId: request.params.workId,
                 instruction: resolvedInstruction,
                 skillInstruction: instructionText,
@@ -4101,33 +4110,30 @@ export function createRuntime(options) {
                 ...(input.parameters ? { parameters: input.parameters } : {}),
                 ...(preparedChatImageAttachments.length ? { imageAttachments: preparedChatImageAttachments } : {})
             }, (delta) => sendEvent("delta", { delta }));
-            const assistantMessageId = typeof suggestion.conversationMessage === "object" && suggestion.conversationMessage !== null
-                ? String(suggestion.conversationMessage.id ?? "")
+            const assistantMessageId = typeof result.conversationMessage === "object" && result.conversationMessage !== null
+                ? String(result.conversationMessage.id ?? "")
                 : "";
             if (!stopping) {
                 store.finishAiConversationStreamRequest(streamRequestId, "completed", "completed", assistantMessageId || undefined);
             }
             streamRequestFinished = true;
             sendEvent("complete", {
-                suggestionId: suggestion.id,
-                callId: suggestion.callId,
-                provider: suggestion.provider,
-                model: suggestion.model,
-                outputTokens: suggestion.outputTokens,
-                cacheHitPercent: suggestion.cacheHitPercent,
-                processDurationMs: suggestion.processDurationMs,
-                chapterVersion: suggestion.chapterVersion,
-                toolCalls: suggestion.toolCalls,
-                processSteps: suggestion.processSteps,
-                contextUsage: suggestion.contextUsage,
+                callId: result.callId,
+                provider: result.provider,
+                model: result.model,
+                outputTokens: result.outputTokens,
+                cacheHitPercent: result.cacheHitPercent,
+                processDurationMs: result.processDurationMs,
+                toolCalls: result.toolCalls,
+                processSteps: result.processSteps,
+                contextUsage: result.contextUsage,
                 conversationId,
-                conversationTitle: suggestion.conversationTitle,
-                ...(suggestion.action !== "note" ? { writingSuggestion: redactSuggestion(suggestion, permissions) } : {}),
-                messageId: typeof suggestion.conversationMessage === "object" && suggestion.conversationMessage !== null
-                    ? suggestion.conversationMessage.id
+                conversationTitle: result.conversationTitle,
+                messageId: typeof result.conversationMessage === "object" && result.conversationMessage !== null
+                    ? result.conversationMessage.id
                     : undefined,
-                messageCreatedAt: typeof suggestion.conversationMessage === "object" && suggestion.conversationMessage !== null
-                    ? suggestion.conversationMessage.createdAt
+                messageCreatedAt: typeof result.conversationMessage === "object" && result.conversationMessage !== null
+                    ? result.conversationMessage.createdAt
                     : undefined
             });
         }
@@ -4183,15 +4189,6 @@ export function createRuntime(options) {
         const permissions = requestPermissions(request, String(suggestion.workId));
         data(response, redactContinuationGuard(await ai.runSuggestionGuard(request.params.suggestionId, input.content), permissions), 201);
     });
-    app.post("/api/suggestions/:suggestionId/accept", (request, response) => {
-        const input = parse(z.object({ content: z.string().max(2_000_000).optional() }), request.body ?? {});
-        const suggestion = ai.getSuggestion(request.params.suggestionId);
-        const permissions = requestPermissions(request, String(suggestion.workId));
-        if (!canWriteWorkModule(permissions, "prose")) {
-            throw new AppError(403, "WORK_MODULE_WRITE_DENIED", "你没有将 AI 建议写入正文的权限");
-        }
-        data(response, ai.acceptSuggestion(request.params.suggestionId, input.content));
-    });
     app.post("/api/suggestions/:suggestionId/reject", (request, response) => {
         const suggestion = ai.rejectSuggestion(request.params.suggestionId);
         const permissions = requestPermissions(request, String(suggestion.workId));