dingtalk-ask-mcp-server 0.1.0

package/dist/permissionHook.js

@@ -0,0 +1,136 @@
+/**
+ * Claude Code PermissionRequest 钩子（瘦客户端，含安全兜底）。
+ *
+ * 构建到 dist/permissionHook.js，settings.json 用 `node <abs>/dist/permissionHook.js` 调用。
+ * 逻辑：读 stdin(命令) → 离开模式？→ 读守护进程锁 → POST /ask 推钉钉批/拒 →
+ * 映射为 PermissionRequest 决定 JSON（allow/deny），任何失败/超时/歧义 → exit 0 空输出（回落终端）。
+ *
+ * 编排核心在 permissionHookCore.ts（可注入依赖单测）；本文件只做 I/O 适配与 process.exit。
+ *
+ * 只用 Node 内置 http（不用 axios，钩子要独立轻量）。安全铁律：只有明确"允许"才 allow；
+ * 其余一切（含超时、歧义、错误、端点不可达）都不能误放行——要么 deny、要么回落，绝不 allow。
+ */
+import { request } from 'node:http';
+import { appendFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { daemonLockPath, readDaemonLock } from './daemon/lock.js';
+import { isAway } from './awayState.js';
+import { defaultResolveLabel, parseAskResponse, runPermissionHook, } from './permissionHookCore.js';
+/** 诊断日志开关：设 DINGTALK_HOOK_DEBUG=1 时把钩子每步写日志到 tmpdir/dingtalk-hook-debug.log（排查用）。 */
+const DEBUG = process.env.DINGTALK_HOOK_DEBUG === '1';
+const DEBUG_LOG = join(tmpdir(), 'dingtalk-hook-debug.log');
+/** 追加一行诊断日志（仅 DEBUG 时）。 */
+function dbg(msg) {
+    if (!DEBUG)
+        return;
+    try {
+        appendFileSync(DEBUG_LOG, `[${new Date().toISOString()}] ${msg}\n`, 'utf8');
+    }
+    catch {
+        /* 日志失败不影响主流程 */
+    }
+}
+/**
+ * 钩子内部超时（毫秒）：必须 < settings.json 里该钩子的 timeout（建议 settings 设 60000）。
+ * 到点即回落终端，不硬拦，保证用户仍能自己处理。
+ */
+const HOOK_ASK_TIMEOUT_MS = 50_000;
+/** HTTP 请求本身的兜底超时（略大于服务端决策超时，防连接吊死）。 */
+const HTTP_TIMEOUT_MS = HOOK_ASK_TIMEOUT_MS + 5_000;
+/**
+ * 回落：exit 0 且 stdout 为空 → Claude Code 正常终端弹窗（安全兜底）。
+ * 任何不确定的情形都走这里，绝不误放行。
+ */
+function fallthrough() {
+    process.exit(0);
+}
+/** 读取全部 stdin。 */
+function readStdin() {
+    return new Promise((resolve) => {
+        let raw = '';
+        process.stdin.setEncoding('utf8');
+        process.stdin.on('data', (c) => {
+            raw += c;
+        });
+        process.stdin.on('end', () => resolve(raw));
+        process.stdin.on('error', () => resolve(raw));
+    });
+}
+/**
+ * POST /ask，返回解析后的 AskResponse；任何网络/超时/解析错误 reject。
+ *
+ * @param lock 守护进程锁（端口 + token）。
+ * @param question 审批问题正文。
+ * @param label 发起该命令审批的 Agent 标签（多 Agent 场景标注来源）。
+ * @returns /ask 响应。
+ */
+function postAsk(lock, question, label) {
+    return new Promise((resolve, reject) => {
+        const payload = JSON.stringify({
+            question,
+            options: ['允许', '拒绝'],
+            label,
+            timeoutMs: HOOK_ASK_TIMEOUT_MS,
+        });
+        const req = request({
+            host: '127.0.0.1',
+            port: lock.port,
+            path: '/ask',
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/json',
+                'Content-Length': Buffer.byteLength(payload),
+                'x-ask-token': lock.token,
+            },
+            timeout: HTTP_TIMEOUT_MS,
+        }, (res) => {
+            let body = '';
+            res.setEncoding('utf8');
+            res.on('data', (c) => {
+                body += c;
+            });
+            res.on('end', () => {
+                if (res.statusCode !== 200) {
+                    reject(new Error(`/ask 返回非 200：${res.statusCode ?? '?'}`));
+                    return;
+                }
+                try {
+                    resolve(parseAskResponse(body));
+                }
+                catch (error) {
+                    reject(error instanceof Error ? error : new Error(String(error)));
+                }
+            });
+        });
+        req.on('error', reject);
+        req.on('timeout', () => {
+            req.destroy(new Error('/ask 请求超时'));
+        });
+        req.write(payload);
+        req.end();
+    });
+}
+/** 钩子主流程：读 stdin → 编排 → 写 stdout / 回落。 */
+async function main() {
+    const raw = await readStdin();
+    dbg(`钩子被触发。stdin 长度=${raw.length}`);
+    const outcome = await runPermissionHook(raw, {
+        isAway,
+        readLock: () => readDaemonLock(daemonLockPath()),
+        postAsk,
+        resolveLabel: defaultResolveLabel,
+        env: process.env,
+        log: dbg,
+    });
+    if (outcome.kind === 'fallthrough') {
+        dbg(`回落：${outcome.reason}`);
+        fallthrough();
+    }
+    process.stdout.write(outcome.text);
+    process.exit(0);
+}
+main().catch(() => {
+    // 兜底：主流程任何未预期异常一律回落，绝不误放行。
+    process.exit(0);
+});

package/dist/permissionHookCore.js

@@ -0,0 +1,79 @@
+import { resolveAgentLabel } from './agentLabel.js';
+import { buildPermissionQuestion, decideFromReply, serializeDecision, } from './permissionDecision.js';
+/**
+ * 跑钩子编排（不 exit、不读 stdin 流）。
+ *
+ * @param stdinRaw 钩子 stdin 原文（JSON 字符串）。
+ * @param deps 可注入依赖。
+ * @returns stdout 文本或 fallthrough。
+ */
+export async function runPermissionHook(stdinRaw, deps) {
+    const log = deps.log ?? (() => undefined);
+    // 1. 解析 stdin。
+    let input;
+    try {
+        input = JSON.parse(stdinRaw);
+    }
+    catch {
+        log('stdin 解析失败 → 回落');
+        return { kind: 'fallthrough', reason: 'stdin-invalid-json' };
+    }
+    const command = input.tool_input?.command;
+    log(`tool_name=${input.tool_name ?? '?'} command=${command ?? '(无)'}`);
+    if (typeof command !== 'string' || command.trim() === '') {
+        log('无 command → 回落');
+        return { kind: 'fallthrough', reason: 'no-command' };
+    }
+    // 2. 未开离开模式 → 立刻回落，不推钉钉、不读锁。
+    if (!deps.isAway()) {
+        log('未开离开模式 → 回落终端');
+        return { kind: 'fallthrough', reason: 'not-away' };
+    }
+    // 3. 读锁；不存在 → 回落。
+    const lock = deps.readLock();
+    if (lock === undefined) {
+        log('锁文件不存在/损坏 → 回落');
+        return { kind: 'fallthrough', reason: 'no-lock' };
+    }
+    log(`锁文件 OK：port=${lock.port}`);
+    // 4. POST /ask；任何异常/超时 → 回落。
+    let response;
+    try {
+        const label = deps.resolveLabel(deps.env, input.cwd);
+        response = await deps.postAsk(lock, buildPermissionQuestion(command, input.cwd), label);
+        log(`/ask 返回：kind=${response.kind} value=${response.value ?? ''}`);
+    }
+    catch (error) {
+        log(`/ask 请求失败 → 回落：${error instanceof Error ? error.message : String(error)}`);
+        return { kind: 'fallthrough', reason: 'post-ask-failed' };
+    }
+    // 5. 映射决定：仅明确 allow/deny 写 stdout；其余 fallthrough。
+    const decision = decideFromReply(response);
+    const out = serializeDecision(decision);
+    log(`决定：${decision.behavior}，输出=${out || '(空→回落)'}`);
+    if (out === '') {
+        return { kind: 'fallthrough', reason: `decision-${decision.behavior}` };
+    }
+    return { kind: 'stdout', text: out };
+}
+/**
+ * 校验并解析 /ask 响应体为 AskResponse（纯函数，HTTP 适配层与单测共用）。
+ *
+ * @param body 响应体字符串。
+ * @returns AskResponse。
+ * @throws 当结构非法时抛错。
+ */
+export function parseAskResponse(body) {
+    const raw = JSON.parse(body);
+    if (typeof raw !== 'object' || raw === null) {
+        throw new Error('/ask 响应非对象');
+    }
+    const obj = raw;
+    if (obj.kind !== 'answered' && obj.kind !== 'timeout') {
+        throw new Error('/ask 响应 kind 非法');
+    }
+    const value = typeof obj.value === 'string' ? obj.value : undefined;
+    return { kind: obj.kind, value };
+}
+/** 默认 resolveLabel：生产用 resolveAgentLabel。 */
+export const defaultResolveLabel = resolveAgentLabel;

package/package.json

@@ -0,0 +1,70 @@
+{
+  "name": "dingtalk-ask-mcp-server",
+  "version": "0.1.0",
+  "description": "Human-in-the-loop MCP server：把 code agent（Claude Code / Codex）的决策与命令审批推送到钉钉，阻塞等你在手机回复。离开电脑也能远程拍板。",
+  "keywords": [
+    "mcp",
+    "model-context-protocol",
+    "dingtalk",
+    "钉钉",
+    "claude-code",
+    "codex",
+    "human-in-the-loop",
+    "ask-human"
+  ],
+  "license": "MIT",
+  "author": "姬煜",
+  "repository": {
+    "type": "git",
+    "url": "git+https://gitee.com/ji-yu66/agents-study.git",
+    "directory": "mcps/dingtalk-ask-mcp-server"
+  },
+  "type": "module",
+  "main": "./dist/index.js",
+  "engines": {
+    "node": ">=18"
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "bin": {
+    "dingtalk-ask": "./dist/installCli.js",
+    "dingtalk-ask-mcp-server": "./dist/index.js",
+    "dingtalk-ask-install-hook": "./dist/installHook.js"
+  },
+  "publishConfig": {
+    "registry": "https://registry.npmjs.org/",
+    "access": "public"
+  },
+  "scripts": {
+    "build": "tsc",
+    "prepare": "npm run build",
+    "prepublishOnly": "npm run check",
+    "test": "vitest run",
+    "check": "npm run build && npm run test",
+    "install-hook": "node dist/installHook.js",
+    "away:on": "node dist/awayToggle.js on",
+    "away:off": "node dist/awayToggle.js off",
+    "away:status": "node dist/awayToggle.js status",
+    "daemon:status": "node dist/daemonCli.js status",
+    "daemon:stop": "node dist/daemonCli.js stop",
+    "verify:send": "tsx scripts/verify-send.ts",
+    "verify:roundtrip": "tsx scripts/verify-roundtrip.ts",
+    "verify:multiagent": "tsx scripts/verify-multiagent.ts",
+    "probe:stream": "tsx scripts/probe-stream.ts",
+    "probe:gateway": "tsx scripts/probe-gateway.ts"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.29.0",
+    "axios": "^1.18.1",
+    "dingtalk-stream": "^2.1.6-beta.1",
+    "zod": "^4.2.1"
+  },
+  "devDependencies": {
+    "@types/node": "^24.10.2",
+    "typescript": "^5.9.3",
+    "tsx": "^4.19.2",
+    "vitest": "^4.0.14"
+  }
+}