@voko/lite 0.3.1

package/src/core/messenger.js

@@ -0,0 +1,456 @@
+/**
+ * messenger.js — 消息处理核心
+ *
+ * 消息处理中枢：handleAgentMessage / handleAgentReply / forwardToAgent。
+ * 纯 Node.js，无 Electron 依赖。通过 options 注入外部依赖。
+ */
+
+const EventEmitter = require('events');
+
+class MessageHandler extends EventEmitter {
+  /**
+   * @param {object} db - better-sqlite3 实例
+   * @param {object} options
+   * @param {object}   options.databaseAPI - DB 查询封装
+   * @param {object}   options.agentWorkers - AgentWorkerManager.workers Map
+   * @param {object}   [options.hermesHandler] - Hermes 处理器（可选，Lite 不传）
+   * @param {object}   [options.openclawHandler] - OpenClaw 处理器（可选，Lite 不传）
+   * @param {object}   [options.ac] - access-control 模块（可选）
+   * @param {Function} [options.sendSystemMessage] - 发送系统消息函数
+   * @param {Function} [options.checkAuditRules] - 审核规则检查函数
+   * @param {Function} [options.substitutePromptVariables] - 提示词变量替换函数
+   * @param {Function} [options.notifyUI] - UI 通知回调 (eventName, data)
+   * @param {Function} [options.notifyTray] - 托盘通知回调
+   * @param {Function} [options.enqueueIntervention] - 主人介入入队回调
+   * @param {Function} [options.createPendingPayment] - 创建支付订单回调
+   * @param {Function} [options.onOwnerInterventionNew] - 有新介入时回调
+   */
+  constructor(db, options = {}) {
+    super();
+    this.db = db;
+    this.databaseAPI = options.databaseAPI;
+    this.agentWorkers = options.agentWorkers;
+    this.hermesHandler = options.hermesHandler || null;
+    this.openclawHandler = options.openclawHandler || null;
+    this.ac = options.ac || null;
+    this._sendSystemMessage = options.sendSystemMessage || (() => {});
+    this._checkAuditRules = options.checkAuditRules || (() => ({ action: 'allow' }));
+    this._substitutePromptVariables = options.substitutePromptVariables || ((p) => p);
+    this._notifyUI = options.notifyUI || (() => {});
+    this._enqueueIntervention = options.enqueueIntervention || (() => {});
+    this._createPendingPayment = options.createPendingPayment || (() => {});
+    this._onOwnerInterventionNew = options.onOwnerInterventionNew || (() => {});
+
+    // 预填充大小写映射（OpenClaw WS）
+    this._caseMap = new Map();
+  }
+
+  /** 设置 Hermes 处理器（延迟初始化） */
+  setHermesHandler(handler) { this.hermesHandler = handler; }
+  /** 设置 OpenClaw 处理器（延迟初始化） */
+  setOpenclawHandler(handler) { this.openclawHandler = handler; }
+
+  // ==========================================
+  // 审计：插入被拦截消息
+  // ==========================================
+  insertBlockedMessage(agentId, visitorId, content, keyword, action, direction, fromUid, ts, originalMsgId) {
+    if (!ts) ts = Math.floor(Date.now() / 1000);
+    const msgId = originalMsgId || ('blk-' + agentId + '-' + visitorId + '-' + ts + '-' + Math.random().toString(36).substr(2, 4));
+    const title = direction === 'inbound' ? '触发入站消息审核' : '触发出站消息审核';
+    const isMe = direction === 'inbound' ? 0 : 1;
+    const actionLabel = direction === 'inbound'
+      ? (action === 'hard_deny' ? '已拒绝，已回复提示语给访客' : '已放行，已转发给 Agent')
+      : (action === 'hard_deny' ? '已拒绝，未发送给访客' : '已放行，已发送给访客');
+    const jsonContent = JSON.stringify({
+      text: content,
+      audit: '⚠️ ' + title + '\n命中敏感词: ' + keyword + '\n' + actionLabel,
+      keyword: keyword,
+      action: action
+    });
+
+    try {
+      if (originalMsgId) {
+        this.db.prepare('UPDATE messages SET content_type=11, content=? WHERE id=?').run(jsonContent, originalMsgId);
+      } else {
+        this.db.prepare('INSERT INTO messages (id, from_uid, to_uid, content, channel_id, channel_type, agent_id, timestamp, is_me, status, content_type) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)')
+          .run(msgId, fromUid, visitorId, jsonContent, visitorId, 1, agentId, ts, isMe, 'sent', 11);
+      }
+    } catch (e) {
+      console.error('[Audit] 写入拦截消息失败:', e.message);
+    }
+
+    try {
+      const displayText = '⛔ 消息被拦截';
+      const existConv = this.db.prepare('SELECT user_uid FROM conversations WHERE channel_id = ? AND agent_id = ?').get(visitorId, agentId);
+      if (existConv) {
+        this.db.prepare('UPDATE conversations SET last_message = ?, last_timestamp = ? WHERE user_uid = ? AND channel_id = ?')
+          .run(displayText, ts, existConv.user_uid, visitorId);
+      } else {
+        this.db.prepare('INSERT INTO conversations (user_uid, channel_id, channel_type, name, last_message, last_timestamp, unread_count, agent_id) VALUES (?, ?, ?, ?, ?, ?, ?, ?)')
+          .run(fromUid, visitorId, 1, visitorId, displayText, ts, 1, agentId);
+      }
+    } catch (e) {
+      console.error('[Audit] 会话更新失败:', e.message);
+    }
+
+    this._notifyUI('agent-wukongim:message', {
+      agentId, fromUid, toUid: visitorId, channelId: visitorId,
+      content: jsonContent, messageId: msgId, timestamp: ts, isMe, contentType: 11
+    });
+  }
+
+  // ==========================================
+  // 消息处理中枢
+  // ==========================================
+  handleAgentMessage(agentId, data, skipForward = false) {
+    const { fromUid, toUid, channelId, content, messageId, timestamp, channelType, contentType,
+      messageSeq, clientMsgNo, noPersist, redDot, syncOnce } = data;
+
+    if (channelId && typeof this.openclawHandler?.setCaseMapEntry === 'function') {
+      this.openclawHandler.setCaseMapEntry(agentId, channelId);
+    }
+
+    if (!content || (typeof content === 'string' && content.trim() === '')) {
+      console.log(`[消息跳过] agentId=${agentId} content 为空`);
+      return;
+    }
+
+    const systemMsg = ['NO_REPLY', 'HEARTBEAT_OK', 'ANNOUNCE_SKIP'];
+    if (typeof content === 'string' && systemMsg.includes(content.trim())) {
+      console.log(`[消息跳过] agentId=${agentId} 系统消息: ${content.trim()}`);
+      return;
+    }
+
+    // 保存到数据库
+    try {
+      const stmt = this.db.prepare(`
+        INSERT INTO messages (id, from_uid, to_uid, content, channel_id, channel_type, agent_id, timestamp, is_me, status, message_seq, client_msg_no, no_persist, red_dot, sync_once, content_type)
+        VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+      `);
+      stmt.run(messageId, fromUid, toUid, typeof content === 'string' ? content : String(content), channelId, channelType || 1, agentId, timestamp, 0, 'received', messageSeq ?? null, clientMsgNo ?? null, noPersist ?? 0, redDot ?? 0, syncOnce ?? 0, data.contentType || 1);
+    } catch (e) {
+      if (!e.message.includes('UNIQUE constraint')) {
+        console.error(`[消息存储] 失败:`, e.message);
+      }
+    }
+
+    // 更新会话
+    try {
+      const exist = this.db.prepare(`SELECT user_uid FROM conversations WHERE user_uid = ? AND channel_id = ?`).get(toUid, channelId);
+      if (exist) {
+        this.db.prepare(`UPDATE conversations SET last_message = ?, last_timestamp = ?, agent_id = COALESCE(?, agent_id) WHERE user_uid = ? AND channel_id = ?`)
+          .run(typeof content === 'string' ? content : String(content), timestamp, agentId, toUid, channelId);
+      } else {
+        this.db.prepare(`INSERT INTO conversations (user_uid, channel_id, channel_type, name, last_message, last_timestamp, unread_count, agent_id) VALUES (?, ?, ?, ?, ?, ?, ?, ?)`)
+          .run(toUid, channelId, channelType || 1, fromUid, typeof content === 'string' ? content : String(content), timestamp, 1, agentId);
+      }
+    } catch (e) {
+      console.error(`[会话存储] 失败:`, e.message);
+    }
+
+    // 通知 UI + 系统通知（含提示音）
+    console.log('[通知] 收到访客消息, from=' + fromUid + ' agent=' + agentId + ' content="' + (typeof content === 'string' ? content.substring(0, 30) : '') + '"');
+    this._notifyUI('agent-wukongim:message', {
+      agentId, fromUid, toUid, channelId,
+      content: typeof content === 'string' ? content : String(content),
+      contentType: data.contentType || 1, messageId, timestamp, isMe: false
+    });
+
+    // 检查发布状态
+    const agentStatusRow = this.db.prepare(`SELECT publish_status, owner_email, access_mode FROM agents WHERE agent_id = ?`).get(agentId);
+    if (agentStatusRow && agentStatusRow.publish_status !== 'published' && agentStatusRow.publish_status !== 'private') {
+      const ownerEmail = agentStatusRow.owner_email || '管理员';
+      this._sendSystemMessage(agentId, fromUid, '【系统消息】当前Agent已下架，请联系' + ownerEmail + '。', timestamp);
+      return;
+    }
+
+    // 黑白名单检查
+    if (agentStatusRow && this.ac) {
+      if (this.ac.isBlacklisted(this.db, agentId, fromUid)) {
+        this._sendSystemMessage(agentId, fromUid, '【系统消息】您已被加入黑名单，无法继续交流。', timestamp);
+        return;
+      }
+      if (agentStatusRow.access_mode === 'private') {
+        const whitelisted = this.ac.isWhitelisted(this.db, agentId, fromUid);
+        if (!whitelisted) {
+          // 检测消息中是否含邀请码，有则自动通过
+          const match = typeof content === 'string' ? content.match(/邀请码[：:]\s*([A-Za-z0-9]{6})|invite[：:]\s*([A-Za-z0-9]{6})/i) : null;
+          const code = match?.[1] || match?.[2];
+          if (code) {
+            const inviteRow = this.db.prepare(`SELECT * FROM friend_invitations WHERE code=? AND agent_id=?`).get(code, agentId);
+            if (inviteRow && !inviteRow.whitelisted) {
+              this.ac.addEntry(this.db, { agentId, listType: 'whitelist', visitorId: fromUid, reason: '邀请码自动通过' });
+              this.db.prepare(`DELETE FROM friend_invitations WHERE code=? AND agent_id=?`).run(code);
+                this._sendSystemMessage(agentId, fromUid, '【系统消息】欢迎！你已通过邀请自动加入白名单。', timestamp);
+                console.log(`[邀请] 邀请码 ${code} 已验证，访客 ${fromUid} 已加入白名单`);
+                // 继续处理消息，不拦截
+              }
+            }
+          }
+          if (!this.ac.isWhitelisted(this.db, agentId, fromUid)) {
+            this._sendSystemMessage(agentId, fromUid, '【系统消息】好友申请已收到，请等待确认。', timestamp);
+            this._triggerFriendRequestIntervention(agentId, fromUid, typeof content === 'string' ? content : String(content), timestamp);
+            return;
+          }
+        }
+      }
+
+    // 计费检查
+    const pricingRow = this.db.prepare('SELECT * FROM agent_pricing WHERE agent_id = ? AND enabled = 1').get(agentId);
+    if (pricingRow && pricingRow.pricing_model === 'timed') {
+      const conv = this.db.prepare('SELECT session_status, session_expire_at FROM conversations WHERE user_uid = ? AND channel_id = ?').get(toUid, channelId);
+      const isBuyCmd = typeof content === 'string' && content.trim() === '购买';
+
+      if (!conv || !conv.session_status) {
+        if (pricingRow.trial_minutes > 0 && !isBuyCmd) {
+          const paidCount = this.db.prepare('SELECT COUNT(*) as c FROM payment_orders WHERE agent_id = ? AND visitor_id = ? AND status = ?').get(agentId, fromUid, 'paid');
+          if (paidCount.c === 0) {
+            const expireAt = Date.now() + pricingRow.trial_minutes * 60 * 1000;
+            this.db.prepare('UPDATE conversations SET session_status=?, session_expire_at=? WHERE user_uid=? AND channel_id=?').run('active', expireAt, toUid, channelId);
+            this._sendSystemMessage(agentId, fromUid, '【系统消息】欢迎使用本Agent！首次可免费试用 ' + pricingRow.trial_minutes + ' 分钟。试用结束后需付费，资费：' + pricingRow.price + '元/' + pricingRow.duration_minutes + '分钟。回复"购买"查看支付方式。', timestamp);
+          } else {
+            this._sendSystemMessage(agentId, fromUid, '【系统消息】欢迎回来！该 Agent 为付费服务，资费：' + pricingRow.price + '元/' + pricingRow.duration_minutes + '分钟。回复"购买"查看支付方式。', timestamp);
+            return;
+          }
+        } else {
+          if (isBuyCmd) {
+            this._createPendingPayment(agentId, fromUid, toUid, pricingRow, timestamp);
+          } else {
+            const trialPart = pricingRow.trial_minutes > 0
+              ? '【系统消息】欢迎使用本Agent！首次可免费试用 ' + pricingRow.trial_minutes + '分钟。试用结束后需付费，资费：'
+              : '【系统消息】本Agent需付费使用，资费：';
+            this._sendSystemMessage(agentId, fromUid, trialPart + pricingRow.price + '元/' + pricingRow.duration_minutes + '分钟。回复"购买"查看支付方式。', timestamp);
+          }
+          return;
+        }
+      } else if (conv.session_status === 'active') {
+        if (conv.session_expire_at && conv.session_expire_at > Date.now()) {
+          if (conv.session_expire_at - Date.now() < 60000) {
+            this._sendSystemMessage(agentId, fromUid, '【系统消息】⏰ 您的服务即将到期（剩余不到 1 分钟），如需继续使用请回复"购买"。', timestamp);
+          }
+        } else {
+          this.db.prepare('UPDATE conversations SET session_status=? WHERE user_uid=? AND channel_id=?').run('expired', toUid, channelId);
+          if (isBuyCmd) {
+            this._createPendingPayment(agentId, fromUid, toUid, pricingRow, timestamp);
+          } else {
+            this._sendSystemMessage(agentId, fromUid, '【系统消息】⏰ 服务时间已到，对话已中断。如需继续使用，请回复"购买"续费。', timestamp);
+          }
+          return;
+        }
+      } else if (conv.session_status === 'expired') {
+        if (isBuyCmd) {
+          this._createPendingPayment(agentId, fromUid, toUid, pricingRow, timestamp);
+        } else {
+          this._sendSystemMessage(agentId, fromUid, '【系统消息】⏰ 服务时间已到，对话已中断。如需继续使用，请回复"购买"续费。', timestamp);
+        }
+        return;
+      }
+    }
+
+    // 入站消息审核
+    if (this._checkAuditRules) {
+      const auditResult = this._checkAuditRules(typeof content === 'string' ? content : String(content), 'inbound');
+      if (auditResult.action === 'hard_deny') {
+        const prompt = this._substitutePromptVariables(auditResult.matchedRule?.prompt || '', { keyword: auditResult.matchedKeyword, visitorId: fromUid, agentId });
+        if (prompt) this._sendSystemMessage(agentId, fromUid, '【系统消息】' + prompt, timestamp);
+        this._triggerAuditIntervention(agentId, fromUid, typeof content === 'string' ? content : String(content), auditResult, timestamp, messageId);
+        return;
+      }
+      if (auditResult.action === 'soft_deny') {
+        this._triggerAuditIntervention(agentId, fromUid, typeof content === 'string' ? content : String(content), auditResult, timestamp, messageId);
+      }
+    }
+
+    // 检查会话模式：MANUAL 时不转发
+    if (channelId) {
+      const convMode = this.db.prepare(`SELECT mode FROM conversations WHERE channel_id = ? AND agent_id = ?`).get(channelId, agentId);
+      if (convMode && convMode.mode === 'MANUAL') return;
+    }
+
+    if (skipForward) return;
+    this.forwardToAgent(agentId, fromUid, content, channelId, channelType, data.contentType, messageId, timestamp);
+  }
+
+  // ==========================================
+  // 好友申请介入
+  // ==========================================
+  _triggerFriendRequestIntervention(agentId, visitorId, content, timestamp) {
+    if (!this.ac || !this.databaseAPI) return;
+    const now = Date.now();
+    const oiId = `private_req_${now}_${Math.random().toString(36).substr(2, 6)}`;
+    const backendRow = this.db.prepare(`SELECT backend_type FROM agents WHERE agent_id = ?`).get(agentId);
+    const prefix = backendRow?.backend_type === 'hermes' ? 'hermes' : 'agent';
+    const visitorName = visitorId;
+    this.databaseAPI.saveOwnerIntervention({
+      id: oiId, visitorId, sessionKey: `${prefix}:${agentId}:${visitorId}`,
+      problem: `访客 "${visitorName}"(${visitorId}) 申请添加好友\n消息内容: "${content}"`,
+      agentSuggestion: '如同意请回复 "同意"，主人回复后将自动添加该访客到白名单并通知访客。',
+      askTime: now, expireTime: null, status: 'pending',
+      ownerReply: null, replyTime: null, parentMessageId: null,
+      channelType: 'voko', resolvedAt: null, createdAt: now, updatedAt: now, agentId
+    });
+    this._enqueueIntervention({
+      id: oiId, visitorId, agentId, sessionKey: `${prefix}:${agentId}:${visitorId}`,
+      problem: `访客 "${visitorName}"(${visitorId}) 申请添加好友\n消息内容: "${content}"`,
+      agentSuggestion: '如同意请回复 "同意"，主人回复后将自动添加该访客到白名单并通知访客。',
+      askTime: now, skipReply: 0,
+    });
+    this._onOwnerInterventionNew();
+  }
+
+  // ==========================================
+  // 审核介入
+  // ==========================================
+  _triggerAuditIntervention(agentId, visitorId, content, auditResult, timestamp, messageId) {
+    const now = Date.now();
+    const oiId = `audit_${now}_${Math.random().toString(36).substr(2, 6)}`;
+    const backendRow = this.db.prepare(`SELECT backend_type FROM agents WHERE agent_id = ?`).get(agentId);
+    const prefix = backendRow?.backend_type === 'hermes' ? 'hermes' : 'agent';
+    const actionLabel = auditResult.action === 'hard_deny' ? '系统已拒绝，自动回复提示语。' : '已转发给 Agent，请关注。';
+    if (this.databaseAPI) {
+      this.databaseAPI.saveOwnerIntervention({
+        id: oiId, visitorId, sessionKey: `${prefix}:${agentId}:${visitorId}`,
+        problem: `访客消息: "${content}"\n命中敏感词: "${auditResult.matchedKeyword}"\n${actionLabel}`,
+        agentSuggestion: '出站/入站关键词拦截提醒，无需回复',
+        askTime: now, expireTime: null, status: 'pending',
+        ownerReply: null, replyTime: null, parentMessageId: null,
+        channelType: 'voko', resolvedAt: null, createdAt: now, updatedAt: now, agentId
+      });
+    }
+    this.db.prepare('UPDATE owner_interventions SET skip_reply = 1 WHERE id = ?').run(oiId);
+    this._enqueueIntervention({
+      id: oiId, visitorId, agentId, sessionKey: `${prefix}:${agentId}:${visitorId}`,
+      problem: `访客消息: "${content}"\n命中敏感词: "${auditResult.matchedKeyword}"\n${actionLabel}`,
+      agentSuggestion: '出站/入站关键词拦截提醒，无需回复',
+      askTime: now, skipReply: 1,
+    });
+    this.insertBlockedMessage(agentId, visitorId, content, auditResult.matchedKeyword, auditResult.action, 'inbound', visitorId, timestamp, messageId);
+    this._onOwnerInterventionNew();
+  }
+
+  // ==========================================
+  // 好友申请自动审批
+  // ==========================================
+  autoApproveWhitelistIfFriendRequest(intervention, ownerReply) {
+    if (!this.ac) return;
+    return this.ac.autoApproveIfFriendRequest(this.db, this._sendSystemMessage, intervention, ownerReply);
+  }
+
+  // ==========================================
+  // 转发到 Agent 后端
+  // ==========================================
+  forwardToAgent(agentId, fromUid, content, channelId, channelType, contentType, messageId, timestamp) {
+    const agentBackendRow = this.db.prepare(`SELECT backend_type FROM agents WHERE agent_id = ?`).get(agentId);
+    const agentBackend = agentBackendRow?.backend_type || 'openclaw';
+
+    if (agentBackend !== 'openclaw' && agentBackend !== 'hermes') {
+      console.log(`[转发] agent=${agentId} 类型为 ${agentBackend}，跳过转发`);
+      return;
+    }
+
+    const extraData = { channelId, channelType, contentType, messageId, timestamp };
+
+    if (agentBackend === 'hermes') {
+      if (this.hermesHandler?.enabled) {
+        const sessionKey = `hermes:${agentId}:${fromUid}`;
+        this.hermesHandler.sendToSession(sessionKey, content, extraData)
+          .then(() => console.log(`[转发] 已转发到 Hermes ${sessionKey}`))
+          .catch(err => console.error(`[转发] Hermes 失败:`, err.message));
+      } else {
+        this._notifyUI('show-tray-notification', {
+          title: '转发失败', body: 'Hermes Bridge 未就绪，消息无法转发'
+        });
+      }
+    } else if (this.openclawHandler) {
+      const sessionKey = `agent:${agentId}:${fromUid}`;
+      this.openclawHandler.sendToSession(sessionKey, content, extraData)
+        .then(() => console.log(`[转发] 已转发到 ${sessionKey}`))
+        .catch(err => console.error(`[转发] 失败:`, err.message));
+    } else {
+      this._notifyUI('show-tray-notification', {
+        title: '转发失败', body: 'OpenClaw WS 未连接，消息无法转发'
+      });
+    }
+  }
+
+  // ==========================================
+  // Agent 回复处理
+  // ==========================================
+  handleAgentReply(data) {
+    const { agentId, visitorId, content, sessionKey } = data;
+    if (!content || !content.trim()) return;
+
+    // 过滤系统消息（全大写 + 下划线）
+    if (/^[A-Z_]{3,}$/.test(content.trim())) {
+      console.log(`[Agent回复] 跳过系统消息: ${content.trim()}`);
+      return;
+    }
+
+    const trimmedContent = content.replace(/^[\n\r\s]+/, '').trim();
+    const agentRow = this.db.prepare('SELECT agent_id, imUid FROM agents WHERE agent_id = ?').get(agentId);
+    if (!agentRow) return;
+
+    const fromUid = agentRow.imUid;
+    const msgId = `agent-${agentId}-${visitorId}-${Date.now()}`;
+    const timestamp = Math.floor(Date.now() / 1000);
+
+    // 存储到数据库
+    try {
+      this.db.prepare(`INSERT INTO messages (id, from_uid, to_uid, content, channel_id, channel_type, agent_id, timestamp, is_me, status, message_seq, client_msg_no, no_persist, red_dot, sync_once, content_type)
+        VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`)
+        .run(msgId, fromUid, visitorId, trimmedContent, visitorId, 1, agentId, timestamp, 1, 'sent', null, null, 0, 0, 0, 1);
+      console.log(`[Agent回复] 已存入DB id=${msgId} agent=${agentId} visitor=${visitorId} 字数=${trimmedContent.length}`);
+    } catch (e) {
+      if (!e.message.includes('UNIQUE constraint')) {
+        console.error('[Agent回复] 存储失败:', e.message);
+      }
+    }
+
+    // 更新会话
+    try {
+      const existConv = this.db.prepare('SELECT user_uid FROM conversations WHERE user_uid = ? AND channel_id = ?').get(fromUid, visitorId);
+      if (existConv) {
+        this.db.prepare('UPDATE conversations SET last_message = ?, last_timestamp = ? WHERE user_uid = ? AND channel_id = ?')
+          .run(trimmedContent, timestamp, fromUid, visitorId);
+      } else {
+        this.db.prepare('INSERT INTO conversations (user_uid, channel_id, channel_type, name, last_message, last_timestamp, unread_count, agent_id) VALUES (?, ?, ?, ?, ?, ?, ?, ?)')
+          .run(fromUid, visitorId, 1, visitorId, trimmedContent, timestamp, 0, agentId);
+      }
+    } catch (e) {
+      console.error('[Agent回复] 会话更新失败:', e.message);
+    }
+
+    // 出站审核
+    if (this._checkAuditRules) {
+      const auditResult = this._checkAuditRules(trimmedContent, 'outbound');
+      if (auditResult.action === 'hard_deny') {
+        console.log(`[审核-出站] hard_deny agentId=${agentId} keyword="${auditResult.matchedKeyword}"`);
+        this.insertBlockedMessage(agentId, visitorId, trimmedContent, auditResult.matchedKeyword, 'hard_deny', 'outbound', fromUid, timestamp, msgId);
+        this._notifyUI('agent-wukongim:message', {
+          agentId, fromUid, toUid: visitorId, channelId: visitorId,
+          content: trimmedContent, messageId: msgId, timestamp, isMe: true
+        });
+        return;
+      }
+      if (auditResult.action === 'soft_deny') {
+        this.insertBlockedMessage(agentId, visitorId, trimmedContent, auditResult.matchedKeyword, 'soft_deny', 'outbound', fromUid, timestamp, msgId);
+      }
+    }
+
+    // 发送给访客
+    const workerEntry = this.agentWorkers?.get(agentId);
+    if (workerEntry) {
+      workerEntry.worker.send({ type: 'send', channelId: visitorId, content: trimmedContent, localMsgId: msgId });
+    } else {
+      console.error(`[Agent回复] 未找到 worker: ${agentId}`);
+    }
+
+    // 通知 UI
+    this._notifyUI('agent-wukongim:message', {
+      agentId, fromUid, toUid: visitorId, channelId: visitorId,
+      content: trimmedContent, contentType: 1, messageId: msgId, timestamp, isMe: true
+    });
+  }
+}
+
+module.exports = { MessageHandler };

package/src/core/notifier.js

@@ -0,0 +1,99 @@
+/**
+ * notifier.js — 新消息通知与提示音
+ *
+ * 主进程模块。收到访客消息时：
+ *  - 前台运行 → 只播放自定义提示音
+ *  - 托盘/最小化 → 播放提示音 + 弹系统通知
+ */
+
+let Notification;
+try { Notification = require('electron').Notification; } catch (_) { Notification = null; }
+const { exec } = require('child_process');
+const path = require('path');
+
+let _mainWindow = null;
+let _db = null;
+
+// 播放自定义 MP3（主进程系统调用，无 CORS/自动播放限制）
+function _playCustomSound() {
+  try {
+    const soundFile = path.join(__dirname, '..', '..', '..', '..', 'src', 'renderer', 'assets', 'notification-1-message.mp3');
+    if (process.platform === 'win32') {
+      const ps = [
+        `Add-Type -AssemblyName PresentationCore`,
+        `$p = New-Object System.Windows.Media.MediaPlayer`,
+        `$p.Open('${soundFile.replace(/'/g,"''")}')`,
+        `$p.Play()`,
+        `Start-Sleep 2`,
+        `$p.Close()`,
+      ].join(';');
+      exec(`powershell -NoProfile -Command "${ps}"`, { timeout: 5000, windowsHide: true }, (e) => {
+        if (e) console.log('[通知] 提示音播放失败:', e.message);
+      });
+    } else if (process.platform === 'darwin') {
+      exec(`afplay "${soundFile}" 2>/dev/null`, { timeout: 5000 }, () => {});
+    } else {
+      exec(`paplay "${soundFile}" 2>/dev/null || aplay "${soundFile}" 2>/dev/null`, { timeout: 5000 }, () => {});
+    }
+  } catch (_) {}
+}
+
+// 查询 Agent 名称
+function _getAgentName(agentId) {
+  try {
+    const row = _db.prepare('SELECT agent_name FROM agents WHERE agent_id=?').get(agentId);
+    return row?.agent_name || agentId;
+  } catch (_) { return agentId; }
+}
+
+// 查询访客昵称
+function _getVisitorName(visitorId) {
+  try {
+    const row = _db.prepare('SELECT nickname FROM user_cache WHERE uid=?').get(visitorId);
+    return row?.nickname || '';
+  } catch (_) { return ''; }
+}
+
+/**
+ * 初始化通知模块
+ * @param {object} mainWindow - BrowserWindow 实例
+ * @param {object} db - better-sqlite3 实例
+ */
+function init(mainWindow, db) {
+  _mainWindow = mainWindow;
+  _db = db;
+  console.log('[通知] 模块初始化, mainWindow=' + (mainWindow ? '✅ 已创建' : '❌ null'));
+}
+
+/**
+ * 处理访客新消息通知
+ * @param {string} agentId
+ * @param {string} visitorId
+ * @param {string} content
+ * @param {number} timestamp
+ */
+function notifyNewMessage(agentId, visitorId, content, timestamp) {
+  try {
+    _playCustomSound();
+
+    // 前台运行 → 只出声，不弹通知
+    const isFg = _mainWindow && _mainWindow.isVisible() && !_mainWindow.isMinimized();
+    console.log('[通知] 窗口状态: visible=' + (_mainWindow ? _mainWindow.isVisible() : '无窗口') + ' minimized=' + (_mainWindow ? _mainWindow.isMinimized() : '无窗口') + ' → ' + (isFg ? '前台(只出声)' : '托盘(弹通知)'));
+    if (isFg) {
+      return;
+    }
+
+    const agentName = _getAgentName(agentId);
+    const visitorName = _getVisitorName(visitorId);
+    const time = timestamp
+      ? new Date(timestamp * 1000).toLocaleTimeString('zh-CN', { hour: '2-digit', minute: '2-digit' })
+      : '';
+    const sender = visitorName || visitorId;
+    const msgContent = (content || '').substring(0, 60);
+    const body = '发件人: ' + sender + '\n内容: ' + msgContent + (time ? '  ' + time : '');
+
+    new Notification({ title: '收件人: ' + agentName, body, silent: true }).show();
+  } catch (_) {}
+}
+
+module.exports = { init, notifyNewMessage };