feihong-code 7.2.0 → 7.6.0

package/dist/web/server.js

@@ -38,7 +38,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.startWebServer = startWebServer;
 /**
- * 飞虹 Code (Muse Code 参照复刻)
+ * 飞虹 Code (对标 Muse Code · 自研内核)
  * 晋江市飞虹智科技企业管理有限公司 · 飞扬企源研发中心 · 负责人：吴赐虹
  *
  * M5 Web 控制台：自包含 Express 服务骨架 + 多视图 API。
@@ -56,7 +56,9 @@ const crypto_1 = require("crypto");
 const path_1 = require("path");
 const fs_1 = require("fs");
 const child_process_1 = require("child_process");
+const node_dns_1 = __importDefault(require("node:dns"));
 const auth_1 = require("./auth");
+const extra_apis_1 = require("./extra-apis");
 const task_queue_1 = require("./task-queue");
 const version_1 = require("../cli/version");
 const i18n_1 = require("../shared/i18n");
@@ -65,6 +67,7 @@ const config_1 = require("../shared/config");
 const model_router_1 = require("../models/model-router");
 const openai_compatible_provider_1 = require("../models/providers/openai-compatible.provider");
 const completion_engine_1 = require("../agent/completion-engine");
+const lint_1 = require("../agent/lint");
 const symbol_index_1 = require("../agent/symbol-index");
 const change_manager_1 = require("../agent/change-manager");
 const design_to_code_1 = require("../agent/design-to-code");
@@ -78,6 +81,10 @@ const mcp_client_1 = require("../tools/mcp/mcp-client");
 const memory_1 = require("../memory");
 const auto_summarize_1 = require("../memory/auto-summarize");
 const secure_store_1 = require("../shared/secure-store");
+const wechat_bridge_1 = require("../integrations/wechat-bridge");
+const feishu_bridge_1 = require("../integrations/feishu-bridge");
+const yuanbao_bridge_1 = require("../integrations/yuanbao-bridge");
+const collaboration_1 = require("../integrations/collaboration");
 /**
  * 启动 Web 控制台。
  * - 端口：opts.port > FH_WEB_PORT > 8080
@@ -97,6 +104,10 @@ function startWebServer(opts = {}) {
     const app = (0, express_1.default)();
     // 放宽请求体上限以支持截图/图片 base64 上传（8MB），仍可有效防御内存耗尽
     app.use(express_1.default.json({ limit: '8mb' }));
+    // 微信回调使用 XML body，单独路由用 text 解析
+    app.use('/api/wechat/callback', express_1.default.text({ type: ['*/xml', 'text/xml', 'application/xml'], limit: '1mb' }));
+    // 元宝回调需要原始 body 用于 HMAC 签名校验
+    app.use('/api/yuanbao/callback', express_1.default.raw({ type: 'application/json', limit: '1mb' }));
     // 静态仪表盘（开发时直接从 src 读取，避免 dist 被锁）
     const publicDir = process.env.FH_WEB_SRC_PUBLIC || (0, path_1.join)(__dirname, 'public');
     app.use(express_1.default.static(publicDir, { maxAge: '0' }));
@@ -135,6 +146,18 @@ function startWebServer(opts = {}) {
             catch (e) { /* 暂存失败不影响任务执行 */ }
         },
     });
+    // 微信桥接：注入 TaskQueue 引用并初始化
+    (0, wechat_bridge_1.setWechatTaskQueue)(queue);
+    const wechatConfig = (0, wechat_bridge_1.initWechatBridge)();
+    // 飞书桥接：注入 TaskQueue 和 FeishuIntegration，初始化
+    const feishuConfig = (0, feishu_bridge_1.initFeishuBridge)();
+    if ((0, feishu_bridge_1.isFeishuEnabled)(feishuConfig)) {
+        const feishuIntegration = new collaboration_1.FeishuIntegration({ appId: feishuConfig.appId, appSecret: feishuConfig.appSecret });
+        (0, feishu_bridge_1.setFeishuBridgeDeps)(queue, feishuIntegration);
+    }
+    // 元宝/豆包桥接：注入 TaskQueue 引用并初始化
+    (0, yuanbao_bridge_1.setYuanbaoTaskQueue)(queue);
+    const yuanbaoConfig = (0, yuanbao_bridge_1.initYuanbaoBridge)();
     // 公开健康检查（仅暴露版本/状态等观测信息，无敏感数据）
     app.get('/api/health', (_req, res) => {
         res.json({
@@ -144,9 +167,43 @@ function startWebServer(opts = {}) {
             signature: version_1.SIGNATURE,
             enterprise: (0, enterprise_1.isEnterpriseEnabled)(),
             lang: (0, i18n_1.getLang)(),
+            wechat: (0, wechat_bridge_1.isWechatEnabled)(wechatConfig) ? wechatConfig.mode : 'disabled',
+            feishu: (0, feishu_bridge_1.isFeishuEnabled)(feishuConfig) ? 'enabled' : 'disabled',
+            yuanbao: (0, yuanbao_bridge_1.isYuanbaoEnabled)(yuanbaoConfig) ? 'enabled' : 'disabled',
             time: new Date().toISOString(),
         });
     });
+    // 微信桥接回调（GET=URL验证，POST=消息接收），无需 Bearer Token（微信服务器调用）
+    app.get('/api/wechat/callback', async (req, res) => {
+        const result = (await (0, wechat_bridge_1.handleWechatCallback)(wechatConfig, req.query, ''));
+        res.status(result.status);
+        res.setHeader('Content-Type', result.contentType);
+        res.send(result.body);
+    });
+    app.post('/api/wechat/callback', async (req, res) => {
+        const body = typeof req.body === 'string' ? req.body : JSON.stringify(req.body || '');
+        const result = (await (0, wechat_bridge_1.handleWechatCallback)(wechatConfig, req.query, body));
+        res.status(result.status);
+        res.setHeader('Content-Type', result.contentType);
+        res.send(result.body);
+    });
+    // 飞书桥接回调（事件订阅，无需 Bearer Token）
+    app.post('/api/feishu/callback', async (req, res) => {
+        const body = (req.body || {});
+        const result = (await (0, feishu_bridge_1.handleFeishuCallback)(feishuConfig, body));
+        res.status(result.status);
+        res.setHeader('Content-Type', result.contentType);
+        res.send(result.body);
+    });
+    // 元宝/豆包桥接回调（webhook，无需 Bearer Token，原始 body 用于签名校验）
+    app.post('/api/yuanbao/callback', async (req, res) => {
+        const rawBody = Buffer.isBuffer(req.body) ? req.body.toString('utf8') : (typeof req.body === 'string' ? req.body : JSON.stringify(req.body || ''));
+        const headers = req.headers;
+        const result = (await (0, yuanbao_bridge_1.handleYuanbaoCallback)(yuanbaoConfig, rawBody, headers));
+        res.status(result.status);
+        res.setHeader('Content-Type', result.contentType);
+        res.send(result.body);
+    });
     // 手机号直登：无短信验证，生成本地会话令牌
     app.post('/api/auth/login', (req, res) => {
         const body = (req.body ?? {});
@@ -158,23 +215,19 @@ function startWebServer(opts = {}) {
         // 使用新的登录方法，支持首次登录检测
         const result = sessions.login(phone);
         const session = sessions.get(result.token);
-        // 如果是首次登录，自动创建引导任务
+        // 首次登录：返回引导任务定义（不自动提交执行，由用户在前端点「运行」时再真正发起）
         let welcomeTasks = [];
         if (result.isFirstLogin) {
             // 标记会话为首次登录（用于后续接口识别）
             if (session) {
                 session.isFirstLogin = true;
             }
-            // 创建引导任务
+            // 只返回任务定义，taskId 留空，前端点运行时才提交到任务队列
             for (const task of auth_1.WELCOME_TASKS) {
-                const record = queue.submit(task.goal, {
-                    workspaceDir: serverWorkspaceDir,
-                    agentType: 'general',
-                });
                 welcomeTasks.push({
                     ...task,
-                    taskId: record.id,
-                    status: record.status,
+                    taskId: '',
+                    status: 'pending',
                 });
             }
         }
@@ -270,7 +323,21 @@ function startWebServer(opts = {}) {
         const history = (0, auto_summarize_1.getSummaryHistory)(memoryConfig, limit);
         res.json({ ok: true, history });
     });
-    app.use('/api', (0, auth_1.requireToken)(token, sessions));
+    app.post('/api/auth/clear-first-login', (req, res) => {
+        const header = req.header('authorization') || '';
+        const m = /^Bearer\s+(.+)$/i.exec(header);
+        if (!m) {
+            res.status(401).json({ ok: false, error: 'unauthorized' });
+            return;
+        }
+        const token = m[1];
+        const ok = sessions.clearFirstLogin(token);
+        res.json({ ok, cleared: ok });
+    });
+    app.use('/api', (0, auth_1.requireToken)(token, sessions, ['/api/security/public-key']));
+    // ===== v7.2.0 能力接线层：voice / knowledge / figma / sso / collaboration / plugins / self-correction =====
+    // 将原"孤立代码"模块接入 Web API（修复：从 404 变为可调用）
+    (0, extra_apis_1.registerExtraApis)(app, { dataDir: (0, path_1.join)((0, config_1.resolveHomeDir)(), '.feihong-code') });
     app.get('/api/auth/me', (req, res) => {
         const session = req.user;
         res.json({
@@ -776,6 +843,7 @@ function startWebServer(opts = {}) {
         const cursorOffset = typeof body?.cursorOffset === 'number' ? body.cursorOffset : fileContent.length;
         const mode = body?.mode === 'full' ? 'full' : 'quick';
         const language = typeof body?.language === 'string' ? body.language : undefined;
+        const crossFileContext = typeof body?.crossFileContext === 'string' ? body.crossFileContext : undefined;
         if (!filePath || !fileContent) {
             res.status(400).json({ ok: false, error: '缺少 filePath 或 fileContent' });
             return;
@@ -791,6 +859,7 @@ function startWebServer(opts = {}) {
                 cursorOffset,
                 mode,
                 language,
+                crossFileContext,
             });
             res.json({ ok: true, ...result });
         }
@@ -798,6 +867,17 @@ function startWebServer(opts = {}) {
             res.status(500).json({ ok: false, error: '补全失败: ' + e.message, suggestions: [] });
         }
     });
+    app.post('/api/lint', (req, res) => {
+        const body = (req.body ?? {});
+        const code = typeof body?.code === 'string' ? body.code : '';
+        const language = typeof body?.language === 'string' ? body.language : undefined;
+        if (!code) {
+            res.status(400).json({ ok: false, error: '缺少 code' });
+            return;
+        }
+        const errors = (0, lint_1.lintSnippet)(code, language);
+        res.json({ ok: true, errors, clean: errors.length === 0 });
+    });
     /* ========== 阶段一-2：补全 Pro API ========== */
     // 记录用户接受的补全（用于连续推荐）
     app.post('/api/completion/accept', (req, res) => {
@@ -844,6 +924,15 @@ function startWebServer(opts = {}) {
         }
     });
     /* ========== P2-1: 设计稿转代码 API（多模态，图片→代码） ========== */
+    // P1-3: 设计稿转代码引擎状态查询
+    app.get('/api/design-to-code', (_req, res) => {
+        res.json({
+            ok: true,
+            configured: !!designToCodeEngine,
+            framework: designToCodeEngine ? 'html' : null,
+            note: designToCodeEngine ? '已配置多模态模型' : '未配置多模态模型（POST /api/design-to-code 需 vision 模型）',
+        });
+    });
     app.post('/api/design-to-code', async (req, res) => {
         const body = (req.body ?? {});
         const image = typeof body?.image === 'string' ? body.image.trim() : '';
@@ -1337,6 +1426,15 @@ function startWebServer(opts = {}) {
             .catch((e) => res.status(500).json({ ok: false, error: e.message }));
     });
     // Cron 任务 CRUD
+    app.get('/api/event-driven/cron', (_req, res) => {
+        try {
+            const cfg = eventDrivenManager.getConfig();
+            res.json({ ok: true, cronTasks: cfg.cronTasks ?? [] });
+        }
+        catch (e) {
+            res.status(500).json({ ok: false, error: e.message });
+        }
+    });
     app.post('/api/event-driven/cron', (req, res) => {
         const body = (req.body ?? {});
         if (!body.name || !body.cron || !body.task) {
@@ -1609,18 +1707,18 @@ function startWebServer(opts = {}) {
                 res.status(400).json({ ok: false, error: '仅支持 Windows 系统' });
                 return;
             }
-            const script = `
-        Add-Type -AssemblyName System.Windows.Forms
-        Add-Type -AssemblyName System.Drawing
-        $screen = [System.Windows.Forms.Screen]::PrimaryScreen
-        $bounds = $screen.Bounds
-        $bitmap = New-Object System.Drawing.Bitmap $bounds.Width, $bounds.Height
-        $graphics = [System.Drawing.Graphics]::FromImage($bitmap)
-        $graphics.CopyFromScreen($bounds.Location, [System.Drawing.Point]::Empty, $bounds.Size)
-        $ms = New-Object System.IO.MemoryStream
-        $bitmap.Save($ms, [System.Drawing.Imaging.ImageFormat]::Png)
-        $bytes = $ms.ToArray()
-        [Convert]::ToBase64String($bytes)
+            const script = `
+        Add-Type -AssemblyName System.Windows.Forms
+        Add-Type -AssemblyName System.Drawing
+        $screen = [System.Windows.Forms.Screen]::PrimaryScreen
+        $bounds = $screen.Bounds
+        $bitmap = New-Object System.Drawing.Bitmap $bounds.Width, $bounds.Height
+        $graphics = [System.Drawing.Graphics]::FromImage($bitmap)
+        $graphics.CopyFromScreen($bounds.Location, [System.Drawing.Point]::Empty, $bounds.Size)
+        $ms = New-Object System.IO.MemoryStream
+        $bitmap.Save($ms, [System.Drawing.Imaging.ImageFormat]::Png)
+        $bytes = $ms.ToArray()
+        [Convert]::ToBase64String($bytes)
       `;
             const base64 = await runPowerShell(script);
             res.json({ ok: true, image: 'data:image/png;base64,' + base64, width: 1920, height: 1080 });
@@ -1639,17 +1737,17 @@ function startWebServer(opts = {}) {
                 res.status(400).json({ ok: false, error: '缺少 x 或 y 坐标' });
                 return;
             }
-            const script = `
-        Add-Type @"
-        using System;
-        using System.Runtime.InteropServices;
-        public class MouseHelper {
-            [DllImport("user32.dll")]
-            public static extern bool SetCursorPos(int X, int Y);
-        }
-"@
-        [MouseHelper]::SetCursorPos(${x}, ${y}) | Out-Null
-        Write-Output "ok"
+            const script = `
+        Add-Type @"
+        using System;
+        using System.Runtime.InteropServices;
+        public class MouseHelper {
+            [DllImport("user32.dll")]
+            public static extern bool SetCursorPos(int X, int Y);
+        }
+"@
+        [MouseHelper]::SetCursorPos(${x}, ${y}) | Out-Null
+        Write-Output "ok"
       `;
             await runPowerShell(script);
             res.json({ ok: true, x, y });
@@ -1676,20 +1774,20 @@ function startWebServer(opts = {}) {
             const clickPart = doubleClick
                 ? `[MouseHelper]::mouse_event(${clickFlag}, 0, 0, 0, 0); [MouseHelper]::mouse_event(${upFlag}, 0, 0, 0, 0); Start-Sleep -Milliseconds 100; [MouseHelper]::mouse_event(${clickFlag}, 0, 0, 0, 0); [MouseHelper]::mouse_event(${upFlag}, 0, 0, 0, 0);`
                 : `[MouseHelper]::mouse_event(${clickFlag}, 0, 0, 0, 0); [MouseHelper]::mouse_event(${upFlag}, 0, 0, 0, 0);`;
-            const script = `
-        Add-Type @"
-        using System;
-        using System.Runtime.InteropServices;
-        public class MouseHelper {
-            [DllImport("user32.dll")]
-            public static extern bool SetCursorPos(int X, int Y);
-            [DllImport("user32.dll")]
-            public static extern void mouse_event(uint dwFlags, uint dx, uint dy, uint cButtons, uint dwExtraInfo);
-        }
-"@
-        ${movePart}
-        ${clickPart}
-        Write-Output "ok"
+            const script = `
+        Add-Type @"
+        using System;
+        using System.Runtime.InteropServices;
+        public class MouseHelper {
+            [DllImport("user32.dll")]
+            public static extern bool SetCursorPos(int X, int Y);
+            [DllImport("user32.dll")]
+            public static extern void mouse_event(uint dwFlags, uint dx, uint dy, uint cButtons, uint dwExtraInfo);
+        }
+"@
+        ${movePart}
+        ${clickPart}
+        Write-Output "ok"
       `;
             await runPowerShell(script);
             res.json({ ok: true, button, x, y, double: doubleClick });
@@ -1709,10 +1807,10 @@ function startWebServer(opts = {}) {
             }
             // SendKeys 需要转义特殊字符
             const escaped = text.replace(/([+^%~(){}])/g, '{$1}');
-            const script = `
-        Add-Type -AssemblyName System.Windows.Forms
-        [System.Windows.Forms.SendKeys]::SendWait('${escaped.replace(/'/g, "''")}')
-        Write-Output "ok"
+            const script = `
+        Add-Type -AssemblyName System.Windows.Forms
+        [System.Windows.Forms.SendKeys]::SendWait('${escaped.replace(/'/g, "''")}')
+        Write-Output "ok"
       `;
             await runPowerShell(script);
             res.json({ ok: true, text });
@@ -1730,10 +1828,10 @@ function startWebServer(opts = {}) {
                 res.status(400).json({ ok: false, error: '缺少 key 字段' });
                 return;
             }
-            const script = `
-        Add-Type -AssemblyName System.Windows.Forms
-        [System.Windows.Forms.SendKeys]::SendWait('${key.replace(/'/g, "''")}')
-        Write-Output "ok"
+            const script = `
+        Add-Type -AssemblyName System.Windows.Forms
+        [System.Windows.Forms.SendKeys]::SendWait('${key.replace(/'/g, "''")}')
+        Write-Output "ok"
       `;
             await runPowerShell(script);
             res.json({ ok: true, key });
@@ -1791,7 +1889,7 @@ function startWebServer(opts = {}) {
             const headers = { 'User-Agent': 'fhcode-node/1.0' };
             if (node.apiKey)
                 headers['Authorization'] = 'Bearer ' + node.apiKey;
-            const r = await fetchWithRetry(url, 10000, 0);
+            const r = await fetchWithRetry(url, 25000, 0);
             if (!r.ok)
                 return { ok: false, error: `HTTP ${r.status}` };
             if (node.type === 'http') {
@@ -2068,7 +2166,10 @@ function startWebServer(opts = {}) {
     /* ========== 技能市场（插件市场）：聚合 ClawHub + Agent-Foundry + 自定义节点 + 自定义来源 ========== */
     const CLAWHUB_API = 'https://clawhub.ai/api/v1/skills';
     const AGENT_FOUNDRY_CATALOG = 'https://raw.githubusercontent.com/hebertzhu/agent-foundry/main/catalog/skills-catalog.json';
-    async function fetchWithRetry(url, timeoutMs = 15000, retries = 1) {
+    async function fetchWithRetry(url, timeoutMs = 25000, retries = 1) {
+        // 强制 IPv4 优先：规避 IPv6 链路故障（部分网络 IPv6 路由不可达时，
+        // 默认 verbatim 解析会优先走 IPv6 导致连接超时/失败）。幂等，重复调用无副作用。
+        node_dns_1.default.setDefaultResultOrder('ipv4first');
         let lastErr;
         for (let attempt = 0; attempt <= retries; attempt++) {
             const ctrl = new AbortController();
@@ -2118,7 +2219,7 @@ function startWebServer(opts = {}) {
     }
     async function fetchAgentFoundrySkills(keyword, limit) {
         try {
-            const r = await fetchWithRetry(AGENT_FOUNDRY_CATALOG);
+            const r = await fetchWithRetry(AGENT_FOUNDRY_CATALOG, 30000);
             if (!r.ok)
                 return [];
             const data = (await r.json());
@@ -2189,7 +2290,7 @@ function startWebServer(opts = {}) {
                 if (!src.enabled || src.type !== 'skills')
                     continue;
                 try {
-                    const r = await fetchWithRetry(src.url, 10000, 0);
+                    const r = await fetchWithRetry(src.url, 25000, 0);
                     if (r.ok) {
                         const data = await r.json();
                         const list = Array.isArray(data) ? data : (data.items || data.skills || []);
@@ -2495,7 +2596,7 @@ function startWebServer(opts = {}) {
             if (!src.enabled || src.type !== 'templates')
                 continue;
             try {
-                const r = await fetchWithRetry(src.url, 10000, 0);
+                const r = await fetchWithRetry(src.url, 25000, 0);
                 if (r.ok) {
                     const data = await r.json();
                     const list = Array.isArray(data) ? data : (data.items || data.templates || []);
@@ -2619,7 +2720,7 @@ function startWebServer(opts = {}) {
             if (!src.enabled || src.type !== 'office')
                 continue;
             try {
-                const r = await fetchWithRetry(src.url, 10000, 0);
+                const r = await fetchWithRetry(src.url, 25000, 0);
                 if (r.ok) {
                     const data = await r.json();
                     const list = Array.isArray(data) ? data : (data.items || data.capabilities || []);
@@ -2738,6 +2839,22 @@ function startWebServer(opts = {}) {
         const list = loadModels().map(publicModel);
         res.json({ ok: true, models: list, defaultId: (list.find((m) => m.default) || {}).id || null });
     });
+    // P1-3: 模型提供商聚合视图（按 apiBase 分组）
+    app.get('/api/models/providers', (_req, res) => {
+        const list = loadModels().map(publicModel);
+        const byKey = new Map();
+        for (const m of list) {
+            const key = m.apiBase || 'custom';
+            let entry = byKey.get(key);
+            if (!entry) {
+                entry = { providerId: key, apiBase: key, models: [], count: 0 };
+                byKey.set(key, entry);
+            }
+            entry.models.push(m);
+            entry.count++;
+        }
+        res.json({ ok: true, providers: Array.from(byKey.values()), total: list.length });
+    });
     app.post('/api/models', (req, res) => {
         const body = req.body;
         const name = typeof body?.name === 'string' ? body.name.trim() : '';