@wu529778790/open-im 1.11.4-beta.17 → 1.11.4-beta.18

package/dist/clawbot/client.js

@@ -12,7 +12,8 @@ import { createLogger } from '../logger.js';
 import { jitteredDelay, isFatalReconnectError, SLOW_PROBE_MS } from '../shared/reconnect.js';
 import { cacheContextToken } from './message-sender.js';
 import { setClawbotContextToken, clearClawbotContextToken } from '../shared/active-chats.js';
-import { decryptAes256CbcMedia, createMediaTargetPath } from '../shared/media-storage.js';
+import { createMediaTargetPath } from '../shared/media-storage.js';
+import { createDecipheriv } from 'node:crypto';
 import { CLAWBOT_POLL_INTERVAL_MS } from '../constants.js';
 const log = createLogger('ClawBot');
 const RECONNECT_DELAYS_MS = [3000, 5000, 10000, 20000, 30000];
@@ -261,8 +262,8 @@ async function extractImages(msg) {
             log.warn('Image item missing full_url/cdn_url');
             continue;
         }
-        // AES key: media.aes_key 是 base64 编码，decodeAesKey 会解码为 32 字节
-        const aesKey = media?.aes_key;
+        // AES key: aeskey 字段是 32 字符 hex（16 字节），需要直接用作 AES-128-CBC key
+        const aesKeyHex = imageItem?.aeskey;
         try {
             // Download from CDN
             const response = await fetch(imageUrl, { signal: AbortSignal.timeout(30_000) });
@@ -271,15 +272,17 @@ async function extractImages(msg) {
                 continue;
             }
             const buffer = Buffer.from(await response.arrayBuffer());
-            // 解密：使用 media.aes_key（base64 编码的 32 字节密钥）
+            // 解密：aeskey 是 hex 编码的 16 字节密钥，用 AES-128-CBC 解密
             let decrypted;
-            if (aesKey) {
+            if (aesKeyHex && aesKeyHex.length === 32) {
                 try {
-                    decrypted = decryptAes256CbcMedia(buffer, aesKey);
+                    const keyBuf = Buffer.from(aesKeyHex, 'hex');
+                    const iv = keyBuf.subarray(0, 16);
+                    const decipher = createDecipheriv('aes-128-cbc', keyBuf, iv);
+                    decrypted = Buffer.concat([decipher.update(buffer), decipher.final()]);
                 }
                 catch {
-                    // AES-256 解密失败，直接用原始数据
-                    log.info('AES decryption failed, using raw image data');
+                    log.info('AES-128 decryption failed, using raw image data');
                     decrypted = buffer;
                 }
             }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wu529778790/open-im",
-  "version": "1.11.4-beta.17",
+  "version": "1.11.4-beta.18",
   "description": "Your AI coding assistant, in every chat app. Multi-platform IM bridge for Claude Code, Codex, and CodeBuddy.",
   "type": "module",
   "main": "dist/index.js",