@vibe-lark/larkpal 0.1.78 → 0.1.80

package/dist/main.mjs

@@ -4583,6 +4583,8 @@ async function handleSessionFileUpload(req, res, messageStore) {
 				traceId,
 				runtimeEventType: "session-file-attached",
 				fileName: file.fileName,
+				originalName: file.originalName,
+				displayName: file.displayName,
 				relativePath: file.relativePath,
 				mimeType: file.mimeType,
 				size: file.size,
@@ -4613,6 +4615,7 @@ function parseSessionFileUpload(req, sessionId) {
 	return new Promise((resolvePromise, rejectPromise) => {
 		const busboy = Busboy({
 			headers: req.headers,
+			defParamCharset: "utf8",
 			limits: {
 				fileSize: getSessionFileUploadMaxBytes(),
 				files: 1
@@ -4676,6 +4679,7 @@ function writeSessionFile(sessionId, params) {
 	return new Promise((resolvePromise, rejectPromise) => {
 		const uploadsDir = resolve(resolveAgentCwd(sessionId), "uploads");
 		const fileName = buildSafeUploadFileName(params.originalName);
+		const originalName = buildDisplayUploadFileName(params.originalName);
 		const destination = resolve(uploadsDir, fileName);
 		const relativePath = `uploads/${fileName}`;
 		const maxBytes = getSessionFileUploadMaxBytes();
@@ -4713,6 +4717,8 @@ function writeSessionFile(sessionId, params) {
 					sessionId,
 					kind: "session-file",
 					fileName,
+					originalName,
+					displayName: originalName,
 					relativePath,
 					uri: `session-file://${relativePath}`,
 					mimeType: params.mimeType,
@@ -4737,6 +4743,9 @@ function buildSafeUploadFileName(originalName) {
 	const stem = basename(base, extname(base)).replace(/[^A-Za-z0-9._-]/g, "_").replace(/^\.+$/, "").slice(0, 80) || "upload";
 	return `${Date.now().toString(36)}-${Math.random().toString(36).slice(2, 8)}-${stem}${extension}`;
 }
+function buildDisplayUploadFileName(originalName) {
+	return basename(originalName).replace(/[\0\r\n]/g, "_").trim() || "upload.bin";
+}
 function isPathInside(parent, child) {
 	const path = relative(parent, child);
 	return path !== "" && !path.startsWith("..") && !isAbsolute(path);
@@ -7332,6 +7341,7 @@ function asObject(value) {
 * 所有 hook 当前只做日志记录，不做复杂业务处理。
 */
 const logger$5 = larkLogger("gateway/hooks");
+const DELAYED_SANITIZER_RETRY_MS = 1e3;
 /**
 * 创建 HTTP Hooks 路由
 */
@@ -7384,7 +7394,7 @@ function createHooksRouter() {
 	});
 	router.post("/post-tool-use", async (req, res) => {
 		const body = req.body;
-		const transcriptPath = typeof body.transcript_path === "string" ? body.transcript_path : typeof body.transcriptPath === "string" ? body.transcriptPath : void 0;
+		const transcriptPath = getTranscriptPath(body);
 		logger$5.info("hook received: post-tool-use", {
 			method: req.method,
 			url: req.originalUrl,
@@ -7392,36 +7402,28 @@ function createHooksRouter() {
 			toolName: body.tool_name,
 			transcriptPath
 		});
-		if (!transcriptPath || !isTranscriptSanitizerEnabled()) {
-			res.json({ continue: true });
-			return;
-		}
-		try {
-			const result = await sanitizeClaudeTranscriptFile(transcriptPath);
-			res.json({
-				continue: true,
-				hookSpecificOutput: result.changed ? {
-					hookEventName: "PostToolUse",
-					additionalContext: `LarkPal externalized ${result.sanitizedImageBlocks} image tool result(s) from the persisted Claude transcript to reduce future replay payload.`
-				} : void 0
-			});
-		} catch (err) {
-			logger$5.warn("post-tool-use transcript sanitizer failed", {
-				transcriptPath,
-				error: err instanceof Error ? err.message : String(err)
-			});
-			res.json({ continue: true });
-		}
+		const result = await sanitizeTranscriptFromHook("PostToolUse", transcriptPath);
+		if (result?.changed === false) scheduleDelayedTranscriptSanitizer("PostToolUse", transcriptPath);
+		res.json({
+			continue: true,
+			hookSpecificOutput: result?.changed ? {
+				hookEventName: "PostToolUse",
+				additionalContext: `LarkPal externalized ${result.sanitizedImageBlocks} image tool result(s) from the persisted Claude transcript to reduce future replay payload.`
+			} : void 0
+		});
 	});
-	router.post("/session-end", (req, res) => {
+	router.post("/session-end", async (req, res) => {
 		const body = req.body;
+		const transcriptPath = getTranscriptPath(body);
 		logger$5.info("hook received: session-end", {
 			method: req.method,
 			url: req.originalUrl,
 			sessionId: body.session_id,
+			transcriptPath,
 			body
 		});
-		resetImageReadGuard(typeof body.transcript_path === "string" ? body.transcript_path : void 0);
+		resetImageReadGuard(transcriptPath);
+		if ((await sanitizeTranscriptFromHook("SessionEnd", transcriptPath))?.changed === false) scheduleDelayedTranscriptSanitizer("SessionEnd", transcriptPath);
 		res.json({ received: true });
 	});
 	router.post("/notification", (req, res) => {
@@ -7435,6 +7437,47 @@ function createHooksRouter() {
 	});
 	return router;
 }
+function getTranscriptPath(body) {
+	return typeof body.transcript_path === "string" ? body.transcript_path : typeof body.transcriptPath === "string" ? body.transcriptPath : void 0;
+}
+async function sanitizeTranscriptFromHook(hookEventName, transcriptPath) {
+	if (!transcriptPath) {
+		logger$5.info("transcript sanitizer skipped: no transcript path", { hookEventName });
+		return;
+	}
+	if (!isTranscriptSanitizerEnabled()) {
+		logger$5.info("transcript sanitizer skipped: disabled", {
+			hookEventName,
+			transcriptPath
+		});
+		return;
+	}
+	try {
+		const result = await sanitizeClaudeTranscriptFile(transcriptPath);
+		logger$5.info("transcript sanitizer completed", {
+			hookEventName,
+			transcriptPath,
+			changed: result.changed,
+			lines: result.lines,
+			sanitizedImageBlocks: result.sanitizedImageBlocks,
+			artifacts: result.artifacts
+		});
+		return result;
+	} catch (err) {
+		logger$5.warn("transcript sanitizer failed", {
+			hookEventName,
+			transcriptPath,
+			error: err instanceof Error ? err.message : String(err)
+		});
+		return;
+	}
+}
+function scheduleDelayedTranscriptSanitizer(hookEventName, transcriptPath) {
+	if (!transcriptPath || !isTranscriptSanitizerEnabled()) return;
+	setTimeout(() => {
+		sanitizeTranscriptFromHook(`${hookEventName}:delayed`, transcriptPath);
+	}, DELAYED_SANITIZER_RETRY_MS).unref();
+}
 //#endregion
 //#region src/memory/store.ts
 const log$27 = larkLogger("memory/store");
@@ -20139,6 +20182,8 @@ async function main() {
 	logger.info("LarkPal 启动中...");
 	if (process.env.LARKPAL_HEADLESS === "1" || process.env.LARKPAL_HEADLESS === "true") {
 		logger.info("Headless 模式启动 — 跳过飞书凭证/preflight/WebSocket");
+		await ensureDefaults();
+		logger.info("Headless 默认配置检查完成");
 		await startHeadless();
 		return;
 	}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vibe-lark/larkpal",
-  "version": "0.1.78",
+  "version": "0.1.80",
   "description": "LarkPal - Lark/Feishu bot service",
   "type": "module",
   "main": "./dist/main.mjs",