@wu529778790/open-im 1.11.4-beta.16 → 1.11.4-beta.18

package/dist/clawbot/client.js

@@ -12,7 +12,7 @@ import { createLogger } from '../logger.js';
 import { jitteredDelay, isFatalReconnectError, SLOW_PROBE_MS } from '../shared/reconnect.js';
 import { cacheContextToken } from './message-sender.js';
 import { setClawbotContextToken, clearClawbotContextToken } from '../shared/active-chats.js';
-import { decryptAes256CbcMedia, createMediaTargetPath } from '../shared/media-storage.js';
+import { createMediaTargetPath } from '../shared/media-storage.js';
 import { createDecipheriv } from 'node:crypto';
 import { CLAWBOT_POLL_INTERVAL_MS } from '../constants.js';
 const log = createLogger('ClawBot');
@@ -262,7 +262,8 @@ async function extractImages(msg) {
             log.warn('Image item missing full_url/cdn_url');
             continue;
         }
-        const aesKey = imageItem?.aeskey;
+        // AES key: aeskey 字段是 32 字符 hex（16 字节），需要直接用作 AES-128-CBC key
+        const aesKeyHex = imageItem?.aeskey;
         try {
             // Download from CDN
             const response = await fetch(imageUrl, { signal: AbortSignal.timeout(30_000) });
@@ -271,25 +272,18 @@ async function extractImages(msg) {
                 continue;
             }
             const buffer = Buffer.from(await response.arrayBuffer());
-            // 尝试解密，失败则直接使用原始数据
+            // 解密：aeskey 是 hex 编码的 16 字节密钥，用 AES-128-CBC 解密
             let decrypted;
-            if (aesKey) {
+            if (aesKeyHex && aesKeyHex.length === 32) {
                 try {
-                    decrypted = decryptAes256CbcMedia(buffer, aesKey);
+                    const keyBuf = Buffer.from(aesKeyHex, 'hex');
+                    const iv = keyBuf.subarray(0, 16);
+                    const decipher = createDecipheriv('aes-128-cbc', keyBuf, iv);
+                    decrypted = Buffer.concat([decipher.update(buffer), decipher.final()]);
                 }
                 catch {
-                    // AES-256 解密失败，尝试 AES-128 (16字节 hex key)
-                    try {
-                        const keyBuf = Buffer.from(aesKey, 'hex');
-                        const iv = keyBuf.subarray(0, 16);
-                        const decipher = createDecipheriv('aes-128-cbc', keyBuf, iv);
-                        decrypted = Buffer.concat([decipher.update(buffer), decipher.final()]);
-                    }
-                    catch {
-                        // 都失败了，直接用原始数据
-                        log.info('AES decryption failed, using raw image data');
-                        decrypted = buffer;
-                    }
+                    log.info('AES-128 decryption failed, using raw image data');
+                    decrypted = buffer;
                 }
             }
             else {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wu529778790/open-im",
-  "version": "1.11.4-beta.16",
+  "version": "1.11.4-beta.18",
   "description": "Your AI coding assistant, in every chat app. Multi-platform IM bridge for Claude Code, Codex, and CodeBuddy.",
   "type": "module",
   "main": "dist/index.js",