@xopcai/xopc 0.0.425 → 0.0.427

package/dist/browser-ext/manifest.json

@@ -3,7 +3,7 @@
   "minimum_chrome_version": "120",
   "default_locale": "en",
   "name": "__MSG_appName__",
-  "version": "0.0.425",
+  "version": "0.0.427",
   "description": "__MSG_appDescription__",
   "key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnpr4vpLC/nmvy+wiOWk3SWlp2nEZkFijfk8ivGw7StNZgCK90nOMvwhdEtlkk3GOWDvdVnq8HxCsM3UNQ8FnGUyerpH1FJXqXuradxeHf8ZxFjiQU/mIWfnKbUuONWQORon3/pigyoXoK/VUXgg0Wbm/rbVwsS0bv+25R6m+mZgBspOLeKuoH7ivhL+48WV6POtMBsFPZweY26477EM7ukh+56Ff5ENevB8ymxBBn7qK5ZoeZd2a23U8ioX5TsHfe6fnrjitPWjIxD8G0NoKQxcaa/Mo+xs+T6UiLKxP0wjz5bm7jB5H+CXtkRJqzBWUB0h+RSLJckzZfA8BAJrRwIDAQAB",
   "permissions": [

package/dist/extensions/telegram/src/adapters/security-adapter.js

@@ -1,6 +1,6 @@
-import { evaluateAccess, resolveDmPolicy, resolveGroupPolicy } from "../../../../src/channels/security.js";
 import { resolveStandardAllowFromPath } from "../../../../src/channels/pairing/paths.js";
 import { readAllowFromIdsSync } from "../../../../src/channels/pairing/allow-from-file.js";
+import { evaluateAccess, resolveDmPolicy, resolveGroupPolicy } from "../../../../src/channels/security.js";
 //#region extensions/telegram/src/adapters/security-adapter.ts
 function createTelegramSecurityAdapter() {
 	return {

package/dist/extensions/telegram/src/pairing-config-resolver.js

@@ -1,5 +1,5 @@
-import { resolveDmPolicy } from "../../../src/channels/security.js";
 import { resolveStandardAllowFromPath, resolveStandardPairingPath } from "../../../src/channels/pairing/paths.js";
+import { resolveDmPolicy } from "../../../src/channels/security.js";
 import { registerPairingChannelResolver } from "../../../src/channels/pairing/pairing-service.js";
 //#region extensions/telegram/src/pairing-config-resolver.ts
 function telegramBlock(config) {

package/dist/extensions/telegram/src/plugin.js

@@ -2,11 +2,11 @@ import { createLogger } from "../../../src/utils/logger/index.js";
 import { init_logger } from "../../../src/utils/logger.js";
 import { TelegramConfigSchema, init_config_schema } from "./config-schema.js";
 import { isSTTAvailable } from "../../../src/voice/stt/availability.js";
-import { registerChannelExecApprovalHandler } from "../../../src/channels/exec-approval-runtime.js";
-import { generateConversationId } from "../../../src/chat-commands/session-key.js";
 import { resolveStandardPairingPath } from "../../../src/channels/pairing/paths.js";
 import { issuePairingChallenge } from "../../../src/channels/pairing/pairing-challenge.js";
 import { createStandardPairingAdapter } from "../../../src/channels/pairing/pairing-store-adapter.js";
+import { registerChannelExecApprovalHandler } from "../../../src/channels/exec-approval-runtime.js";
+import { generateConversationId } from "../../../src/chat-commands/session-key.js";
 import "./pairing-config-resolver.js";
 import { answerClarificationChoiceFromChannel, answerClarificationDecisionFromChannel } from "../../../src/gateway/clarify-runtime.js";
 import { createTimeoutAbortSignal } from "./timeout-abort.js";

package/dist/extensions/telegram/xopc.extension.json

@@ -2,7 +2,7 @@
   "id": "telegram",
   "name": "Telegram Channel",
   "description": "Bundled Telegram Bot channel (private workspace sources; ships inside @xopcai/xopc dist/)",
-  "version": "0.0.425",
+  "version": "0.0.427",
   "kind": "channel",
   "main": "src/index.js",
   "channels": [

package/dist/extensions/weixin/src/api/api.js

@@ -1,5 +1,5 @@
-import { hasProxyEnv } from "../../../../src/infra/http-proxy-env.js";
 import { logger } from "../util/logger.js";
+import { hasProxyEnv } from "../../../../src/infra/http-proxy-env.js";
 import { redactBody, redactUrl } from "../util/redact.js";
 import path from "node:path";
 import fs from "node:fs";

package/dist/extensions/weixin/src/auth/accounts.js

@@ -1,7 +1,7 @@
+import { deleteGetUpdatesBuf } from "../storage/sync-buf.js";
+import { resolveWeixinRootDir } from "../storage/state-dir.js";
 import { logger } from "../util/logger.js";
 import { normalizeWeixinAccountId } from "./weixin-account-id.js";
-import { resolveWeixinRootDir } from "../storage/state-dir.js";
-import { deleteGetUpdatesBuf } from "../storage/sync-buf.js";
 import path from "node:path";
 import fs from "node:fs";
 //#region extensions/weixin/src/auth/accounts.ts

package/dist/extensions/weixin/src/auth/pairing.js

@@ -1,6 +1,6 @@
+import { resolveFrameworkAllowFromPath } from "./accounts.js";
 import { resolveWeixinAllowFromPath } from "../../../../src/channels/pairing/paths.js";
 import { appendAllowFromIdSync, readAllowFromIdsSync } from "../../../../src/channels/pairing/allow-from-file.js";
-import { resolveFrameworkAllowFromPath } from "./accounts.js";
 //#region extensions/weixin/src/auth/pairing.ts
 function readFrameworkAllowFromList(accountId) {
 	return readAllowFromIdsSync(resolveWeixinAllowFromPath(accountId));

package/dist/extensions/weixin/src/cdn/upload.js

@@ -1,7 +1,7 @@
 import { logger } from "../util/logger.js";
+import { toRawIlinkUserIdForApi } from "../auth/weixin-account-id.js";
 import { tempFileName } from "../util/random.js";
 import { UploadMediaType } from "../api/types.js";
-import { toRawIlinkUserIdForApi } from "../auth/weixin-account-id.js";
 import { getUploadUrl } from "../api/api.js";
 import { getExtensionFromContentTypeOrUrl } from "../media/mime.js";
 import { aesEcbPaddedSize } from "./aes-ecb.js";

package/dist/extensions/weixin/src/cli/gateway-qr-login.js

@@ -1,7 +1,7 @@
 import { logger } from "../util/logger.js";
 import { normalizeWeixinAccountId } from "../auth/weixin-account-id.js";
-import { clearContextTokensForAccount } from "../messaging/inbound.js";
 import { clearStaleAccountsForUserId, registerWeixinAccountId, saveWeixinAccount } from "../auth/accounts.js";
+import { clearContextTokensForAccount } from "../messaging/inbound.js";
 import { getWeixinActiveLoginSnapshot, startWeixinLoginWithQr, waitForWeixinLogin } from "../auth/login-qr.js";
 import { getWeixinLoginApiContext, mergeWeixinConfigAfterLogin } from "./qr-login.js";
 import { readFileSync, writeFileSync } from "node:fs";

package/dist/extensions/weixin/src/cli/qr-login.js

@@ -1,8 +1,8 @@
 import { ConfigSchema, init_schema } from "../../../../src/config/schema.js";
 import { logger } from "../util/logger.js";
 import { normalizeWeixinAccountId } from "../auth/weixin-account-id.js";
-import { clearContextTokensForAccount } from "../messaging/inbound.js";
 import { DEFAULT_BASE_URL, clearStaleAccountsForUserId, registerWeixinAccountId, resolveWeixinAccount, saveWeixinAccount } from "../auth/accounts.js";
+import { clearContextTokensForAccount } from "../messaging/inbound.js";
 import { startWeixinLoginWithQr, waitForWeixinLogin } from "../auth/login-qr.js";
 //#region extensions/weixin/src/cli/qr-login.ts
 init_schema();

package/dist/extensions/weixin/src/messaging/debug-mode.js

@@ -1,5 +1,5 @@
-import { logger } from "../util/logger.js";
 import { resolveWeixinRootDir } from "../storage/state-dir.js";
+import { logger } from "../util/logger.js";
 import path from "node:path";
 import fs from "node:fs";
 //#region extensions/weixin/src/messaging/debug-mode.ts

package/dist/extensions/weixin/src/messaging/inbound.js

@@ -1,8 +1,8 @@
+import { resolveWeixinRootDir } from "../storage/state-dir.js";
 import { logger } from "../util/logger.js";
+import { canonicalWeixinPeerId, normalizeWeixinAccountId } from "../auth/weixin-account-id.js";
 import { generateId } from "../util/random.js";
 import { MessageItemType } from "../api/types.js";
-import { canonicalWeixinPeerId, normalizeWeixinAccountId } from "../auth/weixin-account-id.js";
-import { resolveWeixinRootDir } from "../storage/state-dir.js";
 import path from "node:path";
 import fs from "node:fs";
 //#region extensions/weixin/src/messaging/inbound.ts

package/dist/extensions/weixin/src/messaging/process-message.js

@@ -1,9 +1,9 @@
-import { evaluateAccess } from "../../../../src/channels/security.js";
+import { resolveWeixinRootDir } from "../storage/state-dir.js";
+import { logger } from "../util/logger.js";
 import { resolveWeixinPairingPath } from "../../../../src/channels/pairing/paths.js";
 import { issuePairingChallenge } from "../../../../src/channels/pairing/pairing-challenge.js";
-import { logger } from "../util/logger.js";
+import { evaluateAccess } from "../../../../src/channels/security.js";
 import { MessageItemType } from "../api/types.js";
-import { resolveWeixinRootDir } from "../storage/state-dir.js";
 import { isMediaItem, setContextToken, weixinMessageToMsgContext } from "./inbound.js";
 import { readFrameworkAllowFromList } from "../auth/pairing.js";
 import { downloadMediaFromItem } from "../media/media-download.js";

package/dist/extensions/weixin/src/messaging/send.js

@@ -1,7 +1,7 @@
 import { logger } from "../util/logger.js";
+import { toRawIlinkUserIdForApi } from "../auth/weixin-account-id.js";
 import { generateId } from "../util/random.js";
 import { MessageItemType, MessageState, MessageType } from "../api/types.js";
-import { toRawIlinkUserIdForApi } from "../auth/weixin-account-id.js";
 import { sendMessage } from "../api/api.js";
 //#region extensions/weixin/src/messaging/send.ts
 function generateClientId() {
@@ -20,14 +20,23 @@ function markdownToPlainText(text) {
 	let result = text;
 	result = result.replace(/```[^\n]*\n?([\s\S]*?)```/g, (_, code) => code.trim());
 	result = result.replace(/!\[[^\]]*\]\([^)]*\)/g, "");
-	result = result.replace(/\[([^\]]+)\]\([^)]*\)/g, "$1");
+	const links = [];
+	result = result.replace(/\[([^\]]+)\]\(([^)]*)\)/g, (_match, label, href) => {
+		try {
+			const url = new URL(href);
+			if (!["http:", "https:"].includes(url.protocol) || url.username || url.password) return label;
+			return `\u0000WX_LINK_${links.push(label === href ? href : `${label}\n${href}`) - 1}\u0000`;
+		} catch {
+			return label;
+		}
+	});
 	result = result.replace(/^\|[\s:|-]+\|$/gm, "");
 	result = result.replace(/^\|(.+)\|$/gm, (_, inner) => inner.split("|").map((cell) => cell.trim()).join("  "));
 	result = result.replace(/\*\*([^*]+)\*\*/g, "$1");
 	result = result.replace(/\*([^*]+)\*/g, "$1");
 	result = result.replace(/__([^_]+)__/g, "$1");
 	result = result.replace(/`([^`]+)`/g, "$1");
-	return result.trim();
+	return result.replace(/\u0000WX_LINK_(\d+)\u0000/g, (_, index) => links[Number(index)] ?? "").trim();
 }
 /** Build a SendMessageReq containing a single text message. */
 function buildTextMessageReq(params) {

package/dist/extensions/weixin/src/monitor/monitor.js

@@ -1,9 +1,9 @@
+import { loadGetUpdatesBuf, saveGetUpdatesBuf } from "../storage/sync-buf.js";
 import { logger } from "../util/logger.js";
 import { redactBody } from "../util/redact.js";
 import { getUpdates } from "../api/api.js";
 import { WeixinConfigManager } from "../api/config-cache.js";
 import { getRemainingPauseMs, pauseSession } from "../api/session-guard.js";
-import { loadGetUpdatesBuf, saveGetUpdatesBuf } from "../storage/sync-buf.js";
 import { processWeixinInboundMessage } from "../messaging/process-message.js";
 import { setWeixinTypingTicket } from "../messaging/typing-ticket-store.js";
 //#region extensions/weixin/src/monitor/monitor.ts

package/dist/extensions/weixin/src/outbound-send.js

@@ -1,11 +1,11 @@
+import { resolveWeixinRootDir } from "./storage/state-dir.js";
 import { logger } from "./util/logger.js";
-import { TypingStatus } from "./api/types.js";
 import { toRawIlinkUserIdForApi } from "./auth/weixin-account-id.js";
-import { resolveWeixinRootDir } from "./storage/state-dir.js";
+import { listWeixinAccountIds, resolveWeixinAccount } from "./auth/accounts.js";
+import { TypingStatus } from "./api/types.js";
 import { findAccountIdsByContextToken, findContextTokenEntriesByPeer, getContextToken, getWeixinOutboundSendUserId, tryHydrateAnyAccountContextTokenFromDisk } from "./messaging/inbound.js";
 import { sendTyping } from "./api/api.js";
 import { assertSessionActive } from "./api/session-guard.js";
-import { listWeixinAccountIds, resolveWeixinAccount } from "./auth/accounts.js";
 import { markdownToPlainText, sendMessageWeixin } from "./messaging/send.js";
 import { getWeixinTypingTicket } from "./messaging/typing-ticket-store.js";
 import { downloadRemoteImageToTemp } from "./cdn/upload.js";
@@ -57,6 +57,10 @@ async function resolveWeixinSendContext(ctx) {
 	};
 	let account = prep.account;
 	let ctxTok = prep.ctxTok?.trim() || void 0;
+	if (!ctxTok && ctx.accountId?.trim()) return {
+		ok: false,
+		error: MISSING_WEIXIN_CONTEXT_TOKEN
+	};
 	if (!ctxTok) for (const aid of listWeixinAccountIds(ctx.cfg)) {
 		let a;
 		try {
@@ -112,6 +116,11 @@ async function resolveWeixinSendContext(ctx) {
 		ok: false,
 		error: MISSING_WEIXIN_CONTEXT_TOKEN
 	};
+	const originalPeer = getWeixinOutboundSendUserId(account.accountId, ctx.to)?.trim();
+	if (ctx.outboundMetadata?.strictWeixinIdentity === true && (!originalPeer || originalPeer.toLowerCase() !== ctx.to.trim().toLowerCase())) return {
+		ok: false,
+		error: "weixin: the original private-message identity is unavailable; no alternative recipient is allowed."
+	};
 	const ilinkToUserId = getWeixinOutboundSendUserId(account.accountId, ctx.to)?.trim() || toRawIlinkUserIdForApi(ctx.to);
 	return {
 		ok: true,

package/dist/extensions/weixin/src/pairing-config-resolver.js

@@ -1,5 +1,5 @@
-import { resolveDmPolicy } from "../../../src/channels/security.js";
 import { resolveWeixinAllowFromPath, resolveWeixinPairingPath } from "../../../src/channels/pairing/paths.js";
+import { resolveDmPolicy } from "../../../src/channels/security.js";
 import { registerPairingChannelResolver } from "../../../src/channels/pairing/pairing-service.js";
 //#region extensions/weixin/src/pairing-config-resolver.ts
 function weixinBlock(config) {

package/dist/extensions/weixin/src/plugin.js

@@ -1,13 +1,13 @@
 import { createLogger } from "../../../src/utils/logger/index.js";
 import { init_logger } from "../../../src/utils/logger.js";
 import { WeixinConfigSchema, init_config_schema } from "./config-schema.js";
+import { listWeixinAccountIds, resolveWeixinAccount } from "./auth/accounts.js";
 import { evaluateAccess, resolveDmPolicy } from "../../../src/channels/security.js";
 import { createStandardPairingAdapter } from "../../../src/channels/pairing/pairing-store-adapter.js";
 import { weixinConfigSurface } from "./config-surface.js";
 import { normalizeWeixinCronDeliveryToResolved } from "./delivery-to.js";
 import "./pairing-config-resolver.js";
 import { restoreContextTokens } from "./messaging/inbound.js";
-import { listWeixinAccountIds, resolveWeixinAccount } from "./auth/accounts.js";
 import { readFrameworkAllowFromList } from "./auth/pairing.js";
 import { monitorWeixinProvider } from "./monitor/monitor.js";
 import { createWeixinOutboundHandlers, weixinTextChunker } from "./outbound-send.js";

package/dist/gateway/static/root/assets/{activity-store-CMw8qBuC.js → activity-store-D_DXNHba.js}

@@ -1 +1 @@
-import{p as e}from"./locale-store-Bg_XR36n.js";var t=`xopc.activity-center.v2`,n=80,r=720*60*60*1e3;function i(e){return e===`error`?`failed`:e===`warning`?`attention`:`done`}function a(){if(!(typeof window>`u`))return window.location.hash.replace(/^#/,``)||`${window.location.pathname}${window.location.search}`||void 0}function o(){try{let e=globalThis.localStorage?.getItem(t);if(!e)return[];let i=JSON.parse(e);if(!Array.isArray(i.items))return[];let a=Date.now()-r,o=i.items.filter(e=>e&&typeof e.id==`string`&&typeof e.title==`string`).filter(e=>Number.isFinite(e.updatedAt)&&e.updatedAt>=a).slice(0,n);return o.length!==i.items.length&&s(o),o}catch{return[]}}function s(e){try{globalThis.localStorage?.setItem(t,JSON.stringify({items:e}))}catch{}}function c(e){return`${e.toString(36)}-${Math.random().toString(36).slice(2,8)}`}var l=e(e=>({items:o(),add:t=>e(e=>{let r=t.title.trim();if(!r)return e;let o=Date.now(),l=t.tone??`info`,u=t.dedupeKey?e.items.findIndex(e=>e.dedupeKey===t.dedupeKey):-1,d=[{id:u>=0?e.items[u].id:c(o),tone:l,status:t.status??i(l),title:r,message:t.message?.trim()||void 0,source:t.source?.trim()||void 0,href:t.href??a(),dedupeKey:t.dedupeKey,createdAt:u>=0?e.items[u].createdAt:o,updatedAt:o,read:t.read??!1,occurrences:u>=0?e.items[u].occurrences+1:1},...u>=0?e.items.filter((e,t)=>t!==u):e.items].slice(0,n);return s(d),{items:d}}),markAllRead:()=>e(e=>{let t=e.items.map(e=>({...e,read:!0}));return s(t),{items:t}}),markRead:t=>e(e=>{let n=e.items.map(e=>e.id===t?{...e,read:!0}:e);return s(n),{items:n}}),remove:t=>e(e=>{let n=e.items.filter(e=>e.id!==t);return s(n),{items:n}}),clearFinished:()=>e(e=>{let t=e.items.filter(e=>e.status!==`done`);return s(t),{items:t}}),clear:()=>{s([]),e({items:[]})}}));function u(e){l.getState().add(e)}export{l as n,u as t};
+import{p as e}from"./locale-store-Br7IfbXK.js";var t=`xopc.activity-center.v2`,n=80,r=720*60*60*1e3;function i(e){return e===`error`?`failed`:e===`warning`?`attention`:`done`}function a(){if(!(typeof window>`u`))return window.location.hash.replace(/^#/,``)||`${window.location.pathname}${window.location.search}`||void 0}function o(){try{let e=globalThis.localStorage?.getItem(t);if(!e)return[];let i=JSON.parse(e);if(!Array.isArray(i.items))return[];let a=Date.now()-r,o=i.items.filter(e=>e&&typeof e.id==`string`&&typeof e.title==`string`).filter(e=>Number.isFinite(e.updatedAt)&&e.updatedAt>=a).slice(0,n);return o.length!==i.items.length&&s(o),o}catch{return[]}}function s(e){try{globalThis.localStorage?.setItem(t,JSON.stringify({items:e}))}catch{}}function c(e){return`${e.toString(36)}-${Math.random().toString(36).slice(2,8)}`}var l=e(e=>({items:o(),add:t=>e(e=>{let r=t.title.trim();if(!r)return e;let o=Date.now(),l=t.tone??`info`,u=t.dedupeKey?e.items.findIndex(e=>e.dedupeKey===t.dedupeKey):-1,d=[{id:u>=0?e.items[u].id:c(o),tone:l,status:t.status??i(l),title:r,message:t.message?.trim()||void 0,source:t.source?.trim()||void 0,href:t.href??a(),dedupeKey:t.dedupeKey,createdAt:u>=0?e.items[u].createdAt:o,updatedAt:o,read:t.read??!1,occurrences:u>=0?e.items[u].occurrences+1:1},...u>=0?e.items.filter((e,t)=>t!==u):e.items].slice(0,n);return s(d),{items:d}}),markAllRead:()=>e(e=>{let t=e.items.map(e=>({...e,read:!0}));return s(t),{items:t}}),markRead:t=>e(e=>{let n=e.items.map(e=>e.id===t?{...e,read:!0}:e);return s(n),{items:n}}),remove:t=>e(e=>{let n=e.items.filter(e=>e.id!==t);return s(n),{items:n}}),clearFinished:()=>e(e=>{let t=e.items.filter(e=>e.status!==`done`);return s(t),{items:t}}),clear:()=>{s([]),e({items:[]})}}));function u(e){l.getState().add(e)}export{l as n,u as t};