chatccc 0.2.52 → 0.2.54

package/src/agent-image-rpc.ts

@@ -1,153 +1,153 @@
-import type { IncomingMessage, ServerResponse } from "node:http";
-import { extname, isAbsolute, resolve } from "node:path";
-import { stat } from "node:fs/promises";
-
-import { getTenantAccessToken, sendImageReply, sendTextReply } from "./feishu-platform.ts";
-import { ts } from "./config.ts";
-import { readUtf8JsonBody } from "./agent-rpc-body.ts";
-import { getAdapterForTool } from "./session.ts";
-import { getChatsForSession } from "./session-chat-binding.ts";
-
-export const AGENT_SEND_IMAGE_PATH = "/api/agent/send-image";
-
-const MAX_REQUEST_BYTES = 64 * 1024;
-const MAX_IMAGE_BYTES = 10 * 1024 * 1024;
-const ALLOWED_IMAGE_EXTS = new Set([".png", ".jpg", ".jpeg", ".webp", ".gif", ".bmp"]);
-
-function jsonReply(res: ServerResponse, status: number, data: unknown): void {
-  res.writeHead(status, { "Content-Type": "application/json; charset=utf-8" });
-  res.end(JSON.stringify(data));
-}
-
-async function resolveAndValidateImagePath(cwd: string, rawPath: unknown): Promise<string> {
-  if (typeof rawPath !== "string" || rawPath.trim() === "") {
-    throw new Error("path must be a non-empty string");
-  }
-
-  const sessionRoot = resolve(cwd);
-  const imagePath = isAbsolute(rawPath)
-    ? resolve(rawPath)
-    : resolve(sessionRoot, rawPath);
-
-  const ext = extname(imagePath).toLowerCase();
-  if (!ALLOWED_IMAGE_EXTS.has(ext)) {
-    throw new Error(`unsupported image extension: ${ext || "(none)"}`);
-  }
-
-  const st = await stat(imagePath);
-  if (!st.isFile()) throw new Error("image path is not a file");
-  if (st.size <= 0) throw new Error("image file is empty");
-  if (st.size > MAX_IMAGE_BYTES) throw new Error("image file is larger than 10MB");
-  return imagePath;
-}
-
-export async function handleAgentImageRequest(
-  req: IncomingMessage,
-  res: ServerResponse,
-): Promise<boolean> {
-  const url = new URL(req.url ?? "/", "http://127.0.0.1");
-  if (url.pathname !== AGENT_SEND_IMAGE_PATH) return false;
-
-  if (req.method !== "POST") {
-    jsonReply(res, 405, { ok: false, error: "Method not allowed" });
-    return true;
-  }
-
-  let payload: { session_id?: unknown; path?: unknown; caption?: unknown };
-  try {
-    payload = await readUtf8JsonBody(req, MAX_REQUEST_BYTES);
-  } catch (err) {
-    jsonReply(res, 400, { ok: false, error: (err as Error).message || "Invalid JSON" });
-    return true;
-  }
-
-  const sessionId = typeof payload.session_id === "string" ? payload.session_id : "";
-  if (!sessionId) {
-    jsonReply(res, 400, { ok: false, error: "Missing session_id" });
-    return true;
-  }
-
-  // 获取 cwd 以校验路径
-  let cwd: string;
-  try {
-    const { getSessionTool } = await import("./session.ts");
-    const tool = await getSessionTool(sessionId);
-    const adapter = getAdapterForTool(tool ?? "claude");
-    const info = await adapter.getSessionInfo(sessionId);
-    if (!info?.cwd) {
-      jsonReply(res, 400, { ok: false, error: "Cannot determine cwd for session" });
-      return true;
-    }
-    cwd = info.cwd;
-  } catch (err) {
-    jsonReply(res, 500, { ok: false, error: `Failed to get session info: ${(err as Error).message}` });
-    return true;
-  }
-
-  let imagePath: string;
-  try {
-    imagePath = await resolveAndValidateImagePath(cwd, payload.path);
-  } catch (err) {
-    jsonReply(res, 400, { ok: false, error: (err as Error).message });
-    return true;
-  }
-
-  // 发送到所有绑定该 session 的群
-  const chatIds = getChatsForSession(sessionId);
-  if (chatIds.length === 0) {
-    jsonReply(res, 404, { ok: false, error: "No chats bound to this session" });
-    return true;
-  }
-
-  try {
-    const token = await getTenantAccessToken();
-    const caption = typeof payload.caption === "string" ? payload.caption.trim() : "";
-    let sentCount = 0;
-    for (const cid of chatIds) {
-      try {
-        await sendImageReply(token, cid, imagePath);
-        if (caption) await sendTextReply(token, cid, caption);
-        sentCount++;
-      } catch (err) {
-        console.error(`[${ts()}] [AGENT-IMAGE] send to ${cid} failed: ${(err as Error).message}`);
-      }
-    }
-    console.log(`[${ts()}] [AGENT-IMAGE] sent image to ${sentCount}/${chatIds.length} chats, session=${sessionId} path=${imagePath}`);
-    jsonReply(res, 200, { ok: true, sentTo: sentCount, total: chatIds.length });
-  } catch (err) {
-    console.error(`[${ts()}] [AGENT-IMAGE] send failed: ${(err as Error).message}`);
-    jsonReply(res, 500, { ok: false, error: (err as Error).message });
-  }
-  return true;
-}
-
-// ---------------------------------------------------------------------------
-// 兼容旧版 buildAgentImageCapabilityPrompt（供 im-skills 使用）
-// ---------------------------------------------------------------------------
-
-export function buildAgentImageCapabilityPrompt(input: {
-  url: string;
-  sessionId?: string;
-  cwd?: string;
-}): string {
-  const lines = [
-    "[ChatCCC local capability: send image]",
-    "You can send an image to all chats bound to this session by calling this local endpoint.",
-    "",
-    `POST ${input.url}`,
-    "Content-Type: application/json; charset=utf-8",
-    "",
-    `Body: {"session_id":"${input.sessionId ?? "YOUR_SESSION_ID"}","path":"absolute image file path","caption":"optional caption"}`,
-    "",
-    "Rules:",
-    "- Save or choose a local image file first, then call the endpoint.",
-    "- Use an absolute local file path. Do not call Feishu Open Platform directly.",
-    "- Request body must be UTF-8 encoded JSON bytes; caption supports Unicode text, including Chinese.",
-    "- Only call this endpoint when the user asked for an image or when an image is useful to the answer.",
-    "[/ChatCCC local capability: send image]",
-  ];
-  if (input.cwd) {
-    lines.splice(2, 0, `Current working directory: ${input.cwd}`);
-  }
-  return lines.join("\n");
+import type { IncomingMessage, ServerResponse } from "node:http";
+import { extname, isAbsolute, resolve } from "node:path";
+import { stat } from "node:fs/promises";
+
+import { getTenantAccessToken, sendImageReply, sendTextReply } from "./feishu-platform.ts";
+import { ts } from "./config.ts";
+import { readUtf8JsonBody } from "./agent-rpc-body.ts";
+import { getAdapterForTool } from "./session.ts";
+import { getChatsForSession } from "./session-chat-binding.ts";
+
+export const AGENT_SEND_IMAGE_PATH = "/api/agent/send-image";
+
+const MAX_REQUEST_BYTES = 64 * 1024;
+const MAX_IMAGE_BYTES = 10 * 1024 * 1024;
+const ALLOWED_IMAGE_EXTS = new Set([".png", ".jpg", ".jpeg", ".webp", ".gif", ".bmp"]);
+
+function jsonReply(res: ServerResponse, status: number, data: unknown): void {
+  res.writeHead(status, { "Content-Type": "application/json; charset=utf-8" });
+  res.end(JSON.stringify(data));
+}
+
+async function resolveAndValidateImagePath(cwd: string, rawPath: unknown): Promise<string> {
+  if (typeof rawPath !== "string" || rawPath.trim() === "") {
+    throw new Error("path must be a non-empty string");
+  }
+
+  const sessionRoot = resolve(cwd);
+  const imagePath = isAbsolute(rawPath)
+    ? resolve(rawPath)
+    : resolve(sessionRoot, rawPath);
+
+  const ext = extname(imagePath).toLowerCase();
+  if (!ALLOWED_IMAGE_EXTS.has(ext)) {
+    throw new Error(`unsupported image extension: ${ext || "(none)"}`);
+  }
+
+  const st = await stat(imagePath);
+  if (!st.isFile()) throw new Error("image path is not a file");
+  if (st.size <= 0) throw new Error("image file is empty");
+  if (st.size > MAX_IMAGE_BYTES) throw new Error("image file is larger than 10MB");
+  return imagePath;
+}
+
+export async function handleAgentImageRequest(
+  req: IncomingMessage,
+  res: ServerResponse,
+): Promise<boolean> {
+  const url = new URL(req.url ?? "/", "http://127.0.0.1");
+  if (url.pathname !== AGENT_SEND_IMAGE_PATH) return false;
+
+  if (req.method !== "POST") {
+    jsonReply(res, 405, { ok: false, error: "Method not allowed" });
+    return true;
+  }
+
+  let payload: { session_id?: unknown; path?: unknown; caption?: unknown };
+  try {
+    payload = await readUtf8JsonBody(req, MAX_REQUEST_BYTES);
+  } catch (err) {
+    jsonReply(res, 400, { ok: false, error: (err as Error).message || "Invalid JSON" });
+    return true;
+  }
+
+  const sessionId = typeof payload.session_id === "string" ? payload.session_id : "";
+  if (!sessionId) {
+    jsonReply(res, 400, { ok: false, error: "Missing session_id" });
+    return true;
+  }
+
+  // 获取 cwd 以校验路径
+  let cwd: string;
+  try {
+    const { getSessionTool } = await import("./session.ts");
+    const tool = await getSessionTool(sessionId);
+    const adapter = getAdapterForTool(tool ?? "claude");
+    const info = await adapter.getSessionInfo(sessionId);
+    if (!info?.cwd) {
+      jsonReply(res, 400, { ok: false, error: "Cannot determine cwd for session" });
+      return true;
+    }
+    cwd = info.cwd;
+  } catch (err) {
+    jsonReply(res, 500, { ok: false, error: `Failed to get session info: ${(err as Error).message}` });
+    return true;
+  }
+
+  let imagePath: string;
+  try {
+    imagePath = await resolveAndValidateImagePath(cwd, payload.path);
+  } catch (err) {
+    jsonReply(res, 400, { ok: false, error: (err as Error).message });
+    return true;
+  }
+
+  // 发送到所有绑定该 session 的群
+  const chatIds = getChatsForSession(sessionId);
+  if (chatIds.length === 0) {
+    jsonReply(res, 404, { ok: false, error: "No chats bound to this session" });
+    return true;
+  }
+
+  try {
+    const token = await getTenantAccessToken();
+    const caption = typeof payload.caption === "string" ? payload.caption.trim() : "";
+    let sentCount = 0;
+    for (const cid of chatIds) {
+      try {
+        await sendImageReply(token, cid, imagePath);
+        if (caption) await sendTextReply(token, cid, caption);
+        sentCount++;
+      } catch (err) {
+        console.error(`[${ts()}] [AGENT-IMAGE] send to ${cid} failed: ${(err as Error).message}`);
+      }
+    }
+    console.log(`[${ts()}] [AGENT-IMAGE] sent image to ${sentCount}/${chatIds.length} chats, session=${sessionId} path=${imagePath}`);
+    jsonReply(res, 200, { ok: true, sentTo: sentCount, total: chatIds.length });
+  } catch (err) {
+    console.error(`[${ts()}] [AGENT-IMAGE] send failed: ${(err as Error).message}`);
+    jsonReply(res, 500, { ok: false, error: (err as Error).message });
+  }
+  return true;
+}
+
+// ---------------------------------------------------------------------------
+// 兼容旧版 buildAgentImageCapabilityPrompt（供 im-skills 使用）
+// ---------------------------------------------------------------------------
+
+export function buildAgentImageCapabilityPrompt(input: {
+  url: string;
+  sessionId?: string;
+  cwd?: string;
+}): string {
+  const lines = [
+    "[ChatCCC local capability: send image]",
+    "You can send an image to all chats bound to this session by calling this local endpoint.",
+    "",
+    `POST ${input.url}`,
+    "Content-Type: application/json; charset=utf-8",
+    "",
+    `Body: {"session_id":"${input.sessionId ?? "YOUR_SESSION_ID"}","path":"absolute image file path","caption":"optional caption"}`,
+    "",
+    "Rules:",
+    "- Save or choose a local image file first, then call the endpoint.",
+    "- Use an absolute local file path. Do not call Feishu Open Platform directly.",
+    "- Request body must be UTF-8 encoded JSON bytes; caption supports Unicode text, including Chinese.",
+    "- Only call this endpoint when the user asked for an image or when an image is useful to the answer.",
+    "[/ChatCCC local capability: send image]",
+  ];
+  if (input.cwd) {
+    lines.splice(2, 0, `Current working directory: ${input.cwd}`);
+  }
+  return lines.join("\n");
 }

package/src/agent-rpc-body.ts

@@ -1,48 +1,48 @@
-import type { IncomingMessage } from "node:http";
-import { TextDecoder } from "node:util";
-
-function normalizeHeaderValue(value: string | string[] | undefined): string {
-  if (Array.isArray(value)) return value.join("; ");
-  return value ?? "";
-}
-
-export function getRequestCharset(req: IncomingMessage): string {
-  const contentType = normalizeHeaderValue(req.headers["content-type"]);
-  const match = contentType.match(/(?:^|;)\s*charset\s*=\s*("?)([^";\s]+)\1/i);
-  return (match?.[2] ?? "utf-8").toLowerCase();
-}
-
-async function readLimitedBodyBuffer(req: IncomingMessage, maxBytes: number): Promise<Buffer> {
-  const chunks: Buffer[] = [];
-  let size = 0;
-
-  return new Promise((resolve, reject) => {
-    req.on("data", (chunk: Buffer) => {
-      size += chunk.length;
-      if (size > maxBytes) {
-        reject(new Error("Request body too large"));
-        req.destroy();
-        return;
-      }
-      chunks.push(chunk);
-    });
-    req.on("end", () => resolve(Buffer.concat(chunks, size)));
-    req.on("error", reject);
-  });
-}
-
-export async function readUtf8JsonBody<T>(req: IncomingMessage, maxBytes: number): Promise<T> {
-  const charset = getRequestCharset(req);
-  if (charset !== "utf-8" && charset !== "utf8") {
-    throw new Error(`Unsupported charset: ${charset}. Use UTF-8 JSON.`);
-  }
-
-  const body = await readLimitedBodyBuffer(req, maxBytes);
-  let text: string;
-  try {
-    text = new TextDecoder("utf-8", { fatal: true }).decode(body);
-  } catch {
-    throw new Error("Request body must be valid UTF-8 JSON");
-  }
-  return JSON.parse(text) as T;
-}
+import type { IncomingMessage } from "node:http";
+import { TextDecoder } from "node:util";
+
+function normalizeHeaderValue(value: string | string[] | undefined): string {
+  if (Array.isArray(value)) return value.join("; ");
+  return value ?? "";
+}
+
+export function getRequestCharset(req: IncomingMessage): string {
+  const contentType = normalizeHeaderValue(req.headers["content-type"]);
+  const match = contentType.match(/(?:^|;)\s*charset\s*=\s*("?)([^";\s]+)\1/i);
+  return (match?.[2] ?? "utf-8").toLowerCase();
+}
+
+async function readLimitedBodyBuffer(req: IncomingMessage, maxBytes: number): Promise<Buffer> {
+  const chunks: Buffer[] = [];
+  let size = 0;
+
+  return new Promise((resolve, reject) => {
+    req.on("data", (chunk: Buffer) => {
+      size += chunk.length;
+      if (size > maxBytes) {
+        reject(new Error("Request body too large"));
+        req.destroy();
+        return;
+      }
+      chunks.push(chunk);
+    });
+    req.on("end", () => resolve(Buffer.concat(chunks, size)));
+    req.on("error", reject);
+  });
+}
+
+export async function readUtf8JsonBody<T>(req: IncomingMessage, maxBytes: number): Promise<T> {
+  const charset = getRequestCharset(req);
+  if (charset !== "utf-8" && charset !== "utf8") {
+    throw new Error(`Unsupported charset: ${charset}. Use UTF-8 JSON.`);
+  }
+
+  const body = await readLimitedBodyBuffer(req, maxBytes);
+  let text: string;
+  try {
+    text = new TextDecoder("utf-8", { fatal: true }).decode(body);
+  } catch {
+    throw new Error("Request body must be valid UTF-8 JSON");
+  }
+  return JSON.parse(text) as T;
+}

package/src/card-plain-text.ts

@@ -1,108 +1,108 @@
-type JsonObject = Record<string, unknown>;
-
-function isObject(value: unknown): value is JsonObject {
-  return !!value && typeof value === "object" && !Array.isArray(value);
-}
-
-function stringValue(value: unknown): string | null {
-  return typeof value === "string" && value.trim() ? value.trim() : null;
-}
-
-function textContent(value: unknown): string | null {
-  if (typeof value === "string") return stringValue(value);
-  if (!isObject(value)) return null;
-  return stringValue(value.content);
-}
-
-function parseButtonValue(value: unknown): unknown {
-  if (typeof value !== "string") return value;
-  try {
-    return JSON.parse(value);
-  } catch {
-    return value;
-  }
-}
-
-function commandFromValue(value: unknown): string | null {
-  const parsed = parseButtonValue(value);
-  if (typeof parsed === "string") {
-    const trimmed = parsed.trim();
-    return trimmed.startsWith("/") ? trimmed : null;
-  }
-  if (!isObject(parsed)) return null;
-
-  const cmd = stringValue(parsed.cmd);
-  if (cmd) return cmd.startsWith("/") ? cmd : `/${cmd}`;
-
-  const action = stringValue(parsed.action);
-  if (!action) return null;
-
-  if (action === "cd") {
-    const path = stringValue(parsed.path);
-    return path ? `/cd ${path}` : "/cd";
-  }
-  return action.startsWith("/") ? action : `/${action}`;
-}
-
-function buttonText(element: JsonObject): string | null {
-  const label = textContent(element.text);
-  const command = commandFromValue(element.value);
-  if (label && command) return `${label}: ${command}`;
-  return label ?? command;
-}
-
-function elementToText(element: unknown): string[] {
-  if (!isObject(element)) return [];
-  const tag = stringValue(element.tag);
-
-  if (tag === "div") {
-    const content = textContent(element.text);
-    return content ? [content] : [];
-  }
-
-  if (tag === "markdown") {
-    const content = stringValue(element.content);
-    return content ? [content] : [];
-  }
-
-  if (tag === "button") {
-    const content = buttonText(element);
-    return content ? [content] : [];
-  }
-
-  if (tag === "action" && Array.isArray(element.actions)) {
-    return element.actions.flatMap(elementToText);
-  }
-
-  return [];
-}
-
-function rootElements(card: JsonObject): unknown[] {
-  if (Array.isArray(card.elements)) return card.elements;
-  if (isObject(card.body) && Array.isArray(card.body.elements)) {
-    return card.body.elements;
-  }
-  return [];
-}
-
-export function cardJsonToPlainText(cardJson: string): string | null {
-  let card: unknown;
-  try {
-    card = JSON.parse(cardJson);
-  } catch {
-    return null;
-  }
-  if (!isObject(card)) return null;
-
-  const title = isObject(card.header) && isObject(card.header.title)
-    ? textContent(card.header.title)
-    : null;
-  const lines = rootElements(card).flatMap(elementToText);
-  const parts = title ? [`# ${title}`, ...lines] : lines;
-  const text = parts
-    .map((part) => part.trim())
-    .filter(Boolean)
-    .join("\n\n")
-    .trim();
-  return text || null;
-}
+type JsonObject = Record<string, unknown>;
+
+function isObject(value: unknown): value is JsonObject {
+  return !!value && typeof value === "object" && !Array.isArray(value);
+}
+
+function stringValue(value: unknown): string | null {
+  return typeof value === "string" && value.trim() ? value.trim() : null;
+}
+
+function textContent(value: unknown): string | null {
+  if (typeof value === "string") return stringValue(value);
+  if (!isObject(value)) return null;
+  return stringValue(value.content);
+}
+
+function parseButtonValue(value: unknown): unknown {
+  if (typeof value !== "string") return value;
+  try {
+    return JSON.parse(value);
+  } catch {
+    return value;
+  }
+}
+
+function commandFromValue(value: unknown): string | null {
+  const parsed = parseButtonValue(value);
+  if (typeof parsed === "string") {
+    const trimmed = parsed.trim();
+    return trimmed.startsWith("/") ? trimmed : null;
+  }
+  if (!isObject(parsed)) return null;
+
+  const cmd = stringValue(parsed.cmd);
+  if (cmd) return cmd.startsWith("/") ? cmd : `/${cmd}`;
+
+  const action = stringValue(parsed.action);
+  if (!action) return null;
+
+  if (action === "cd") {
+    const path = stringValue(parsed.path);
+    return path ? `/cd ${path}` : "/cd";
+  }
+  return action.startsWith("/") ? action : `/${action}`;
+}
+
+function buttonText(element: JsonObject): string | null {
+  const label = textContent(element.text);
+  const command = commandFromValue(element.value);
+  if (label && command) return `${label}: ${command}`;
+  return label ?? command;
+}
+
+function elementToText(element: unknown): string[] {
+  if (!isObject(element)) return [];
+  const tag = stringValue(element.tag);
+
+  if (tag === "div") {
+    const content = textContent(element.text);
+    return content ? [content] : [];
+  }
+
+  if (tag === "markdown") {
+    const content = stringValue(element.content);
+    return content ? [content] : [];
+  }
+
+  if (tag === "button") {
+    const content = buttonText(element);
+    return content ? [content] : [];
+  }
+
+  if (tag === "action" && Array.isArray(element.actions)) {
+    return element.actions.flatMap(elementToText);
+  }
+
+  return [];
+}
+
+function rootElements(card: JsonObject): unknown[] {
+  if (Array.isArray(card.elements)) return card.elements;
+  if (isObject(card.body) && Array.isArray(card.body.elements)) {
+    return card.body.elements;
+  }
+  return [];
+}
+
+export function cardJsonToPlainText(cardJson: string): string | null {
+  let card: unknown;
+  try {
+    card = JSON.parse(cardJson);
+  } catch {
+    return null;
+  }
+  if (!isObject(card)) return null;
+
+  const title = isObject(card.header) && isObject(card.header.title)
+    ? textContent(card.header.title)
+    : null;
+  const lines = rootElements(card).flatMap(elementToText);
+  const parts = title ? [`# ${title}`, ...lines] : lines;
+  const text = parts
+    .map((part) => part.trim())
+    .filter(Boolean)
+    .join("\n\n")
+    .trim();
+  return text || null;
+}

package/src/feishu-api.ts

@@ -15,6 +15,7 @@ import {
   CODEX_SESSION_PREFIX,
   ts,
 } from "./config.ts";
+import { applyPrivacy } from "./privacy.ts";
 import { buildHelpCard } from "./cards.ts";
 
 // ---------------------------------------------------------------------------
@@ -536,9 +537,10 @@ export async function sendTextReply(
   chatId: string,
   text: string
 ): Promise<boolean> {
+  const safeText = applyPrivacy(text);
   const card = JSON.stringify({
     config: { wide_screen_mode: true },
-    elements: [{ tag: "markdown", content: text }],
+    elements: [{ tag: "markdown", content: safeText }],
   });
   try {
     const resp = await fetch(`${BASE_URL}/im/v1/messages?receive_id_type=chat_id`, {
@@ -778,10 +780,12 @@ export async function sendCardReply(
   content: string,
   template = "green"
 ): Promise<boolean> {
+  const safeTitle = applyPrivacy(title);
+  const safeContent = applyPrivacy(content);
   const card = JSON.stringify({
     config: { wide_screen_mode: true },
-    header: { template, title: { content: title, tag: "plain_text" } },
-    elements: [{ tag: "div", text: { tag: "lark_md", content } }],
+    header: { template, title: { content: safeTitle, tag: "plain_text" } },
+    elements: [{ tag: "div", text: { tag: "lark_md", content: safeContent } }],
   });
 
   try {