ework-daemon 0.4.62 → 0.4.64

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ework-daemon",
-  "version": "0.4.62",
+  "version": "0.4.64",
   "description": "Issue-driven AI development daemon. Spawns opencode subprocesses to resolve Gitea issues.",
   "module": "src/index.ts",
   "type": "module",

package/src/attachments.ts

@@ -0,0 +1,102 @@
+import { mkdir, writeFile } from "node:fs/promises";
+
+/**
+ * ework-web attachment links: `[name](/attachments/<uuid>)` in issue bodies
+ * and comments. The web requires auth on that route, but the daemon's Gitea
+ * PAT is accepted (same auth surface as cookies), so the daemon downloads
+ * attachments for the agent instead of teaching it to curl with tokens.
+ */
+export const ATTACHMENT_LINK_RE = /\/attachments\/([0-9a-fA-F-]{36})/g;
+
+export interface DownloadedAttachment {
+  uuid: string;
+  filename: string;
+  size: number;
+  /** Reason the referenced attachment was not downloaded, if any. */
+  skipped?: string;
+}
+
+export const MAX_ATTACHMENT_BYTES = 64 * 1024 * 1024;
+
+function sanitizeFilename(raw: string, fallback: string): string {
+  const cleaned = raw
+    .replace(/[\u0000-\u001f\u007f]/g, "")
+    .replace(/[/\\]/g, "_")
+    .replace(/^\.+/, "")
+    .trim();
+  return cleaned || fallback;
+}
+
+/**
+ * Download every /attachments/<uuid> referenced in `content` into
+ * `<workdir>/attachments/` using the daemon's Gitea PAT. Best-effort:
+ * failures are reported per-attachment via `skipped`, never thrown.
+ */
+export async function downloadIssueAttachments(
+  content: string,
+  baseUrl: string,
+  token: string,
+  workdir: string,
+): Promise<DownloadedAttachment[]> {
+  const uuids = new Set<string>();
+  for (const m of content.matchAll(ATTACHMENT_LINK_RE)) {
+    if (m[1]) uuids.add(m[1]);
+  }
+  if (uuids.size === 0) return [];
+  const base = baseUrl.replace(/\/+$/, "");
+  const out: DownloadedAttachment[] = [];
+  for (const uuid of uuids) {
+    try {
+      const res = await fetch(`${base}/attachments/${uuid}`, {
+        headers: { authorization: `token ${token}` },
+        signal: AbortSignal.timeout(120_000),
+        // Auth failures surface as 302 -> login; treat redirects as failures
+        // instead of following them to the login page.
+        redirect: "manual",
+      });
+      if (res.status >= 300 && res.status < 400) {
+        out.push({ uuid, filename: "", size: 0, skipped: `HTTP ${res.status} (auth)` });
+        continue;
+      }
+      if (!res.ok) {
+        out.push({ uuid, filename: "", size: 0, skipped: `HTTP ${res.status}` });
+        continue;
+      }
+      const lenHeader = Number(res.headers.get("content-length") ?? "0");
+      if (lenHeader > MAX_ATTACHMENT_BYTES) {
+        out.push({ uuid, filename: "", size: lenHeader, skipped: "too large" });
+        continue;
+      }
+      const cd = res.headers.get("content-disposition") ?? "";
+      const nameMatch = cd.match(/filename="([^"]*)"/);
+      const filename = sanitizeFilename(nameMatch?.[1] ?? "", `${uuid}.bin`);
+      const buf = Buffer.from(await res.arrayBuffer());
+      if (buf.length > MAX_ATTACHMENT_BYTES) {
+        out.push({ uuid, filename, size: buf.length, skipped: "too large" });
+        continue;
+      }
+      const dir = `${workdir}/attachments`;
+      await mkdir(dir, { recursive: true });
+      await writeFile(`${dir}/${filename}`, buf);
+      out.push({ uuid, filename, size: buf.length });
+    } catch (e) {
+      out.push({
+        uuid,
+        filename: "",
+        size: 0,
+        skipped: e instanceof Error ? e.message : "download error",
+      });
+    }
+  }
+  return out;
+}
+
+export function attachmentNote(atts: DownloadedAttachment[]): string {
+  if (atts.length === 0) return "";
+  const lines = atts.map((a) =>
+    a.skipped
+      ? `- ${a.filename || a.uuid}: 未能下载（${a.skipped}）`
+      : `- attachments/${a.filename}（${(a.size / 1024).toFixed(1)} KB）`,
+  );
+  return `\n\n[system] 本条消息引用的附件已由系统代为下载到工作目录的 attachments/ 目录：\n${lines.join("\n")}\n请直接用文件工具读取分析（日志类文件建议分段/grep 查看）。`;
+}

package/src/opencode.ts

@@ -10,6 +10,7 @@ import { formatKey, parseKey } from "./trackers/types";
 import type { RuntimeBackend, RuntimeHandle } from "./runtime/types";
 import { OpencodeBackend } from "./runtime/opencode-backend";
 import { PiBackend } from "./runtime/pi-backend";
+import { downloadIssueAttachments, attachmentNote } from "./attachments";
 
 // ─── Types ───
 
@@ -330,6 +331,23 @@ export function wakePolicySkips(
   return null;
 }
 
+// Per-issue npm prefix: `npm install -g <pkg>` inside a session lands in the issue's
+// workdir instead of the system global, so concurrent agents debugging different
+// issues cannot clobber each other's global installs (nor poison the shared daemon env).
+export function spawnEnvFor(
+  base: Record<string, string | undefined>,
+  hooks: Record<string, string | undefined>,
+  workdir: string,
+): Record<string, string> {
+  const npmHome = `${workdir}/.npm-global`;
+  return {
+    ...base,
+    ...hooks,
+    NPM_CONFIG_PREFIX: npmHome,
+    PATH: `${npmHome}/bin:${base.PATH ?? ""}`,
+  };
+}
+
 export class Engine {
   private cfg: Config;
   private store: Store;
@@ -1259,7 +1277,27 @@ export class Engine {
       try { await tracker.setReaction(ref, msg.sourceCommentId, "eyes"); } catch { /* non-critical */ }
     }
 
-    const childEnv = { ...process.env, ...this.hookEnvFor(issue, session, workdir) };
+    const childEnv = spawnEnvFor(process.env, this.hookEnvFor(issue, session, workdir), workdir);
+
+    let spawnPrompt = msg.content;
+    try {
+      const atts = await downloadIssueAttachments(
+        msg.content,
+        this.cfg.gitea.url,
+        this.cfg.gitea.token,
+        workdir,
+      );
+      if (atts.length > 0) {
+        log.info(
+          `engine: attachments for ${k}: ${atts
+            .map((a) => `${a.filename || a.uuid}${a.skipped ? ` (skip: ${a.skipped})` : ""}`)
+            .join(", ")}`,
+        );
+        spawnPrompt += attachmentNote(atts);
+      }
+    } catch {
+      // Best-effort: the agent still has the raw message without files.
+    }
 
     let exitCode: number | null = null;
 
@@ -1267,7 +1305,7 @@ export class Engine {
       const handle = await backend.spawn(
         {
           workdir,
-          prompt: msg.content,
+          prompt: spawnPrompt,
           model: model || undefined,
           resumeSessionId: resumeSessionId || undefined,
           env: childEnv,