@voko/lite 0.3.1

package/src/server/oss.js

@@ -0,0 +1,186 @@
+/**
+ * OSS 签名生成 - 用于前端直传文件到阿里云 OSS
+ * 采用 PostObject 直传模式：后端签名，前端直传
+ */
+const crypto = require('crypto');
+const ENDPOINTS = require('../endpoints.json');
+
+// 默认配置（优先使用环境变量，其次 endpoints.json）
+let OSS_REGION = process.env.OSS_REGION || ENDPOINTS.oss.region;
+let OSS_BUCKET = process.env.OSS_BUCKET || ENDPOINTS.oss.bucket;
+let OSS_ACCESS_KEY_ID = process.env.OSS_ACCESS_KEY_ID || '';
+let OSS_ACCESS_KEY_SECRET = process.env.OSS_ACCESS_KEY_SECRET || '';
+let OSS_ENDPOINT = process.env.OSS_ENDPOINT || ENDPOINTS.oss.endpoint;
+let OSS_PUBLIC_URL = process.env.OSS_PUBLIC_URL || ENDPOINTS.oss.publicUrl;
+
+/**
+ * 从配置对象加载 OSS 配置（支持 DB / JSON 来源）
+ */
+function loadConfigFromObject(config) {
+  const ossConfig = config.oss_config;
+  if (!ossConfig) return false;
+  if (!OSS_ACCESS_KEY_ID && ossConfig.accessKeyId) OSS_ACCESS_KEY_ID = ossConfig.accessKeyId;
+  if (!OSS_ACCESS_KEY_SECRET && ossConfig.accessKeySecret) OSS_ACCESS_KEY_SECRET = ossConfig.accessKeySecret;
+  if (ossConfig.region) OSS_REGION = ossConfig.region;
+  if (ossConfig.bucket) OSS_BUCKET = ossConfig.bucket;
+  if (ossConfig.endpoint) OSS_ENDPOINT = ossConfig.endpoint;
+  if (ossConfig.publicUrl) OSS_PUBLIC_URL = ossConfig.publicUrl;
+  return true;
+}
+
+/**
+ * 供 main.js 在 DB 初始化后调用，从 DB 配置加载 OSS 凭证
+ */
+function initOSSFromConfig(config) {
+  if (OSS_ACCESS_KEY_ID && OSS_ACCESS_KEY_SECRET) return; // 环境变量优先
+  if (loadConfigFromObject(config)) {
+    console.log('[OSS] 从 SQLite 加载配置');
+  }
+  if (!OSS_ACCESS_KEY_ID || !OSS_ACCESS_KEY_SECRET) {
+    console.warn('[OSS] AccessKey 未配置，OSS 签名接口将不可用');
+  }
+}
+
+/**
+ * 生成 OSS PostObject 直传签名
+ * @param {string} objectName - OSS 中的 object key（如 chat/images/xxx.jpg）
+ * @param {string} contentType - 文件 MIME 类型（可选）
+ * @param {number} maxSize - 最大文件大小（字节），默认 100MB
+ * @returns {Object} 签名参数，前端可直接用于 FormData POST 到 OSS
+ */
+function generateOSSSignature(objectName, contentType = '', maxSize = 100 * 1024 * 1024) {
+  const expiration = new Date(Date.now() + 3600 * 1000).toISOString();
+
+  const conditions = [
+    ['content-length-range', 0, maxSize],
+    { bucket: OSS_BUCKET },
+    ['eq', '$key', objectName]
+  ];
+
+  if (contentType) {
+    conditions.push(['eq', '$Content-Type', contentType]);
+  }
+
+  const disposition = objectName.startsWith('chat/images/') ? 'inline' : 'attachment';
+  conditions.push(['eq', '$Content-Disposition', disposition]);
+
+  const policyObj = { expiration, conditions };
+  const policy = Buffer.from(JSON.stringify(policyObj)).toString('base64');
+  const signature = crypto
+    .createHmac('sha1', OSS_ACCESS_KEY_SECRET)
+    .update(policy)
+    .digest('base64');
+
+  return {
+    endpoint: OSS_ENDPOINT,
+    publicUrl: OSS_PUBLIC_URL,
+    bucket: OSS_BUCKET,
+    region: OSS_REGION,
+    key: objectName,
+    OSSAccessKeyId: OSS_ACCESS_KEY_ID,
+    policy,
+    Signature: signature,
+    contentType,
+    expiration
+  };
+}
+
+/**
+ * 服务端上传 base64 图片到 OSS
+ * @param {string} base64DataUrl - data:image/xxx;base64,xxxxx
+ * @param {string} objectName - OSS object key，如 chat/pay/qr_xxx.png
+ * @returns {Promise<string>} 公开访问的图片 URL
+ */
+async function uploadBase64ToOSS(base64DataUrl, objectName, onProgress) {
+  if (!OSS_ACCESS_KEY_ID || !OSS_ACCESS_KEY_SECRET) {
+    throw new Error('OSS AccessKey 未配置');
+  }
+
+  const matches = base64DataUrl.match(/^data:(.+?);base64,(.+)$/);
+  if (!matches) throw new Error('无效的 base64 data URL');
+  const contentType = matches[1];
+  const base64Data = matches[2];
+  const buffer = Buffer.from(base64Data, 'base64');
+
+  // OSS REST API PUT 签名（含 x-oss-object-acl 头）
+  const date = new Date().toUTCString();
+  const ossHeaders = 'x-oss-object-acl:public-read';
+  const resource = `/${OSS_BUCKET}/${objectName}`;
+  const stringToSign = `PUT\n\n${contentType}\n${date}\n${ossHeaders}\n${resource}`;
+  const signature = crypto
+    .createHmac('sha1', OSS_ACCESS_KEY_SECRET)
+    .update(stringToSign)
+    .digest('base64');
+
+  const url = `${OSS_PUBLIC_URL}/${objectName}`;
+
+  if (onProgress) onProgress(0);
+  const resp = await fetch(url, {
+    method: 'PUT',
+    headers: {
+      'Authorization': `OSS ${OSS_ACCESS_KEY_ID}:${signature}`,
+      'Content-Type': contentType,
+      'Date': date,
+      'Content-Length': String(buffer.length),
+      'x-oss-object-acl': 'public-read'
+    },
+    body: buffer
+  });
+
+  if (onProgress) onProgress(100);
+  if (!resp.ok) {
+    const text = await resp.text();
+    throw new Error(`OSS 上传失败 (${resp.status}): ${text}`);
+  }
+
+  return url;
+}
+
+/**
+ * 服务端上传任意内容到 OSS（通用版）
+ * @param {string} objectName - OSS object key
+ * @param {string|Buffer} content - 文件内容
+ * @param {string} contentType - MIME 类型
+ * @returns {Promise<string>} 公开访问的 URL
+ */
+async function uploadToOSS(objectName, content, contentType, onProgress) { return _uploadToOSS(objectName, content, contentType, onProgress); }
+
+async function uploadToOSSWithProgress(objectName, content, contentType, onProgress) { return _uploadToOSS(objectName, content, contentType, onProgress); }
+
+async function _uploadToOSS(objectName, content, contentType, onProgress) {
+  if (!OSS_ACCESS_KEY_ID || !OSS_ACCESS_KEY_SECRET) {
+    throw new Error('OSS AccessKey 未配置');
+  }
+  const buffer = typeof content === 'string' ? Buffer.from(content, 'utf-8') : content;
+  const date = new Date().toUTCString();
+  const ossHeaders = 'x-oss-object-acl:public-read';
+  const resource = `/${OSS_BUCKET}/${objectName}`;
+  const stringToSign = `PUT\n\n${contentType}\n${date}\n${ossHeaders}\n${resource}`;
+  const signature = crypto
+    .createHmac('sha1', OSS_ACCESS_KEY_SECRET)
+    .update(stringToSign)
+    .digest('base64');
+
+  const url = `https://${OSS_BUCKET}.${OSS_REGION}.aliyuncs.com/${objectName}`;
+
+  const resp = await fetch(url, {
+    method: 'PUT',
+    headers: {
+      'Authorization': `OSS ${OSS_ACCESS_KEY_ID}:${signature}`,
+      'Content-Type': contentType,
+      'Date': date,
+      'Content-Length': String(buffer.length),
+      'x-oss-object-acl': 'public-read'
+    },
+    body: buffer
+  });
+
+  if (!resp.ok) {
+    const text = await resp.text();
+    throw new Error(`OSS 上传失败 (${resp.status}): ${text}`);
+  }
+
+  return `${OSS_PUBLIC_URL || OSS_ENDPOINT}/${objectName}`;
+}
+
+module.exports = { generateOSSSignature, uploadBase64ToOSS, uploadToOSS, uploadToOSSWithProgress, initOSSFromConfig };

package/src/server/owner-intervention-notifier.js

@@ -0,0 +1,320 @@
+/**
+ * Owner Intervention Notifier — 事件驱动的通知模块
+ *
+ * 替代原有的轮询机制 (startOwnerInterventionPolling)：
+ * - saveOwnerIntervention 完成后立即通知，无需等待轮询周期
+ * - 内置重试队列（指数退避）替代轮询重试
+ * - 启动时扫描 is_sent=0 的记录作为崩溃恢复兜底
+ *
+ * 使用方式：
+ *   const notifier = new OwnerInterventionNotifier({ databaseAPI, registry, db, mainWindow });
+ *   notifier.enqueue(record);
+ */
+
+const MAX_RETRIES = 5;
+const BASE_BACKOFF_MS = 5000;
+const MAX_RETRY_DELAY = 80000; // 80s cap
+const STARTUP_SCAN_INTERVAL = 3000;
+const bus = require('../core/lite-bus');
+
+class OwnerInterventionNotifier {
+  constructor({ databaseAPI, registry, db, mainWindow, getEnabledChannel, agentEmailApi, getOpenclawHandler, getHermesHandler, buildOwnerReplyPrompt }) {
+    this.databaseAPI = databaseAPI;
+    this.registry = registry;
+    this.db = db;
+    this.mainWindow = mainWindow;
+    this.getEnabledChannel = getEnabledChannel;
+    this.agentEmailApi = agentEmailApi;
+    this.getOpenclawHandler = getOpenclawHandler || (() => null);
+    this.getHermesHandler = getHermesHandler || (() => null);
+    this.buildOwnerReplyPrompt = buildOwnerReplyPrompt || (() => '');
+
+    /** 重试队列: { [id]: { record, retryCount, timer } } */
+    this._retryQueue = {};
+    this._processing = false;
+  }
+
+  /**
+   * 启动时扫描 is_sent=0 的记录，补充处理（进程崩溃恢复）
+   */
+  startScan() {
+    console.log('[OwnerInterventionNotifier] 启动恢复扫描...');
+    // 延迟执行，确保所有依赖都已就绪
+    setTimeout(() => this._recoverPending(), STARTUP_SCAN_INTERVAL);
+    // 启动邮件回复轮询
+    this.startEmailReplyPolling();
+  }
+
+  /**
+   * 停止所有重试定时器
+   */
+  stop() {
+    for (const id of Object.keys(this._retryQueue)) {
+      clearTimeout(this._retryQueue[id].timer);
+      delete this._retryQueue[id];
+    }
+    this.stopEmailReplyPolling();
+    console.log('[OwnerInterventionNotifier] 已停止');
+  }
+
+  // ============ 公开方法 ============
+
+  /**
+   * 入队一条干预记录并立即发送。
+   * 可在 saveOwnerIntervention 后直接调用。
+   */
+  enqueue(record) {
+    if (!record || !record.id) {
+      console.warn('[OwnerInterventionNotifier] enqueue 跳过：无效记录');
+      return;
+    }
+    console.log('[OwnerInterventionNotifier] 入队通知, id:', record.id, 'visitor:', record.visitorId);
+    this._processRecord(record);
+  }
+
+  // ============ 私有方法 ============
+
+  /**
+   * 处理单条记录：标记 is_sent=1 → 发送 → 更新 DB → 通知 UI
+   */
+  async _processRecord(record) {
+    const channel = this.getEnabledChannel();
+    if (!channel) {
+      console.warn('[OwnerInterventionNotifier] 无可用渠道，标记失败, id:', record.id);
+      this.db.prepare(`UPDATE owner_interventions SET is_sent=1, status='failed', updated_at=? WHERE id=? AND is_sent=0`)
+        .run(Date.now(), record.id);
+      return;
+    }
+
+    const channelType = channel.name;
+    const handler = this.registry.getHandler(channelType);
+    if (!handler || typeof handler.sendMessageToOwnerWithTracking !== 'function') {
+      console.warn('[OwnerInterventionNotifier] 渠道处理器不可用, id:', record.id, 'channelType:', channelType);
+      this.db.prepare(`UPDATE owner_interventions SET is_sent=1, status='failed', updated_at=? WHERE id=? AND is_sent=0`)
+        .run(Date.now(), record.id);
+      return;
+    }
+
+    try {
+      // 原子标记 is_sent=1，防止重复处理
+      const updateResult = this.db.prepare(
+        `UPDATE owner_interventions SET is_sent=1, updated_at=? WHERE id=? AND is_sent=0`
+      ).run(Date.now(), record.id);
+      if (updateResult.changes === 0) {
+        console.log('[OwnerInterventionNotifier] 跳过，已被处理, id:', record.id);
+        return;
+      }
+
+      // 构造通知消息
+      const msgBody = `访客：${record.visitorId}
+问题：${record.problem}
+建议：${record.agentSuggestion || ""}
+时间：${new Date(record.askTime).toLocaleString("zh-CN")}`;
+
+      console.log('[OwnerInterventionNotifier] 发送通知, id:', record.id, 'channelType:', channelType);
+      const result = await handler.sendMessageToOwnerWithTracking(
+        msgBody,
+        record.visitorId,
+        record.sessionKey,
+        record.agentId
+      );
+
+      const sentMessageId = result?.sentMessageId || result?.messageId || `sent-${Date.now()}`;
+      console.log('[OwnerInterventionNotifier] 发送成功, id:', record.id, 'sentMessageId:', sentMessageId);
+
+      // 更新 DB
+      this.databaseAPI.updateOwnerInterventionSent(record.id, sentMessageId, channelType);
+
+      // 通知 UI
+      this._notifyUI(record, sentMessageId, channelType);
+    } catch (err) {
+      console.error('[OwnerInterventionNotifier] 发送失败, id:', record.id, err.message);
+
+      // 会话过期不重试
+      if (err.message?.startsWith('SESSION_EXPIRED')) {
+        this.db.prepare(
+          `UPDATE owner_interventions SET is_sent=1, status='failed', updated_at=? WHERE id=?`
+        ).run(Date.now(), record.id);
+        console.log('[OwnerInterventionNotifier] 会话过期，标记失败, id:', record.id);
+        return;
+      }
+
+      // 回滚 is_sent=0，加入重试队列
+      try {
+        this.db.prepare(
+          `UPDATE owner_interventions SET is_sent=0, updated_at=? WHERE id=?`
+        ).run(Date.now(), record.id);
+      } catch (e2) {
+        console.error('[OwnerInterventionNotifier] 回滚失败:', e2.message);
+      }
+      this._scheduleRetry(record, 0);
+    }
+  }
+
+  /**
+   * 调度重试
+   */
+  _scheduleRetry(record, currentRetryCount) {
+    const nextRetry = currentRetryCount + 1;
+    if (nextRetry > MAX_RETRIES) {
+      console.log('[OwnerInterventionNotifier] 超过最大重试次数，放弃, id:', record.id);
+      this.db.prepare(
+        `UPDATE owner_interventions SET is_sent=1, status='failed', updated_at=? WHERE id=?`
+      ).run(Date.now(), record.id);
+      return;
+    }
+
+    const delay = Math.min(BASE_BACKOFF_MS * Math.pow(2, nextRetry - 1), MAX_RETRY_DELAY);
+    console.log(`[OwnerInterventionNotifier] 计划重试, id: ${record.id}, 第${nextRetry}次, ${delay}ms后`);
+
+    if (this._retryQueue[record.id]) {
+      clearTimeout(this._retryQueue[record.id].timer);
+    }
+
+    this._retryQueue[record.id] = {
+      record: { ...record, retry_count: nextRetry },
+      timer: setTimeout(() => {
+        delete this._retryQueue[record.id];
+        // 重新从 DB 读取最新状态
+        const fresh = this.db.prepare('SELECT * FROM owner_interventions WHERE id = ?').get(record.id);
+        if (!fresh || fresh.is_sent === 1) {
+          console.log('[OwnerInterventionNotifier] 重试跳过，记录已被处理或不存在, id:', record.id);
+          return;
+        }
+        this._processRecord({
+          id: fresh.id,
+          visitorId: fresh.visitor_id,
+          agentId: fresh.agent_id,
+          sessionKey: fresh.session_key,
+          problem: fresh.problem,
+          agentSuggestion: fresh.agent_suggestion,
+          askTime: fresh.ask_time,
+          skipReply: fresh.skip_reply,
+          retry_count: nextRetry,
+        });
+      }, delay),
+    };
+  }
+
+  /**
+   * 通知渲染进程
+   */
+  _notifyUI(record, sentMessageId, channelType) {
+    if (this.mainWindow && !this.mainWindow.isDestroyed()) {
+      bus.emit('feishu:owner-intervention-add', {
+        id: record.id,
+        visitorId: record.visitorId,
+        agentId: record.agentId || 'voko',
+        sessionKey: record.sessionKey,
+        problem: record.problem,
+        agentSuggestion: record.agentSuggestion,
+        sentMessageId,
+        channelType,
+        skipReply: record.skipReply || 0,
+        askTime: record.askTime,
+      });
+    }
+  }
+
+  /**
+   * 启动恢复：扫描所有 is_sent=0 的记录重新入队
+   */
+  async _recoverPending() {
+    try {
+      const pending = this.databaseAPI.getPendingOwnerInterventions();
+      if (!pending || pending.length === 0) {
+        console.log('[OwnerInterventionNotifier] 启动扫描完毕，无待发送记录');
+        return;
+      }
+      console.log(`[OwnerInterventionNotifier] 启动扫描发现 ${pending.length} 条待发送记录`);
+      for (const item of pending) {
+        this._processRecord(item);
+      }
+    } catch (err) {
+      console.error('[OwnerInterventionNotifier] 启动扫描失败:', err.message);
+    }
+  }
+
+  // ============ 邮件回复轮询（每 5 秒） ============
+
+  startEmailReplyPolling() {
+    this.stopEmailReplyPolling();
+    this._emailReplyPollTimer = setInterval(() => this._pollEmailReplies(), 5000);
+    console.log('[OwnerInterventionNotifier] 邮件回复轮询已启动');
+  }
+
+  stopEmailReplyPolling() {
+    if (this._emailReplyPollTimer) {
+      clearInterval(this._emailReplyPollTimer);
+      this._emailReplyPollTimer = null;
+    }
+  }
+
+  async _pollEmailReplies() {
+    if (!this.agentEmailApi) return;
+    try {
+      const rows = this.db.prepare(
+        `SELECT oi.id, oi.email_message_id, oi.agent_id, oi.visitor_id, oi.session_key, oi.problem
+         FROM owner_interventions oi
+         WHERE oi.email_message_id IS NOT NULL
+         AND (oi.status='pending' OR oi.status='awaiting')`
+      ).all();
+      for (const row of rows) {
+        const reply = await this.agentEmailApi.queryReply({ message_id: row.email_message_id });
+        if (reply?.has_reply && reply.raw_text) {
+          const updateResult = this.databaseAPI.updateOwnerInterventionReply(
+            row.id, reply.raw_text,
+            Date.parse(reply.replied_at) || Date.now(), 'voko-email'
+          );
+
+          // 转发回复给 agent（和渠道回复一致）
+          if (updateResult?.contentChanged && row.session_key && row.agent_id) {
+            const forwardMsg = this.buildOwnerReplyPrompt(
+              { id: row.id, visitorId: row.visitor_id, problem: row.problem, agentId: row.agent_id },
+              reply.raw_text
+            );
+            const doNotify = () => {
+              this.databaseAPI.markAgentNotified(row.id);
+              this.databaseAPI.updateOwnerInterventionStatus(row.id, 'resolved', Date.now());
+            };
+            const backendRow = this.db.prepare('SELECT backend_type FROM agents WHERE agent_id = ?').get(row.agent_id);
+            const agentBackend = backendRow?.backend_type;
+
+            if (agentBackend === 'hermes') {
+              const hermesHandler = this.getHermesHandler();
+              const hermesSessionKey = 'hermes:' + row.agent_id + ':' + row.visitor_id;
+              if (hermesHandler?.connected) {
+                hermesHandler.steer(hermesSessionKey, forwardMsg).then(doNotify).catch(err => {
+                  console.error('[OwnerInterventionNotifier] 邮件回复转发 Hermes 失败:', err.message);
+                });
+              }
+            } else {
+              const openclawHandler = this.getOpenclawHandler();
+              if (openclawHandler?.connected) {
+                openclawHandler.sendToSession(row.session_key, forwardMsg).then(doNotify).catch(err => {
+                  console.error('[OwnerInterventionNotifier] 邮件回复转发 OpenClaw 失败:', err.message);
+                });
+              }
+            }
+          }
+
+          // 通知 UI 定向更新（推一条，不重载）
+          if (this.mainWindow && !this.mainWindow.isDestroyed()) {
+            bus.emit('owner-intervention:email-reply', {
+              id: row.id,
+              ownerReply: reply.raw_text,
+              replyTime: Date.parse(reply.replied_at) || Date.now(),
+              status: 'replied',
+            });
+          }
+
+          console.log('[OwnerInterventionNotifier] 邮件回复已入库并转发, id:', row.id);
+        }
+      }
+    } catch (e) {
+      console.warn('[OwnerInterventionNotifier] 邮件回复轮询错误:', e.message);
+    }
+  }
+}
+
+module.exports = { OwnerInterventionNotifier };