feihong-code 7.5.0 → 7.6.0

package/dist/web/server.js

@@ -38,7 +38,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.startWebServer = startWebServer;
 /**
- * 飞虹 Code (Muse Code 参照复刻)
+ * 飞虹 Code (对标 Muse Code · 自研内核)
  * 晋江市飞虹智科技企业管理有限公司 · 飞扬企源研发中心 · 负责人：吴赐虹
  *
  * M5 Web 控制台：自包含 Express 服务骨架 + 多视图 API。
@@ -56,6 +56,7 @@ const crypto_1 = require("crypto");
 const path_1 = require("path");
 const fs_1 = require("fs");
 const child_process_1 = require("child_process");
+const node_dns_1 = __importDefault(require("node:dns"));
 const auth_1 = require("./auth");
 const extra_apis_1 = require("./extra-apis");
 const task_queue_1 = require("./task-queue");
@@ -80,6 +81,10 @@ const mcp_client_1 = require("../tools/mcp/mcp-client");
 const memory_1 = require("../memory");
 const auto_summarize_1 = require("../memory/auto-summarize");
 const secure_store_1 = require("../shared/secure-store");
+const wechat_bridge_1 = require("../integrations/wechat-bridge");
+const feishu_bridge_1 = require("../integrations/feishu-bridge");
+const yuanbao_bridge_1 = require("../integrations/yuanbao-bridge");
+const collaboration_1 = require("../integrations/collaboration");
 /**
  * 启动 Web 控制台。
  * - 端口：opts.port > FH_WEB_PORT > 8080
@@ -99,6 +104,10 @@ function startWebServer(opts = {}) {
     const app = (0, express_1.default)();
     // 放宽请求体上限以支持截图/图片 base64 上传（8MB），仍可有效防御内存耗尽
     app.use(express_1.default.json({ limit: '8mb' }));
+    // 微信回调使用 XML body，单独路由用 text 解析
+    app.use('/api/wechat/callback', express_1.default.text({ type: ['*/xml', 'text/xml', 'application/xml'], limit: '1mb' }));
+    // 元宝回调需要原始 body 用于 HMAC 签名校验
+    app.use('/api/yuanbao/callback', express_1.default.raw({ type: 'application/json', limit: '1mb' }));
     // 静态仪表盘（开发时直接从 src 读取，避免 dist 被锁）
     const publicDir = process.env.FH_WEB_SRC_PUBLIC || (0, path_1.join)(__dirname, 'public');
     app.use(express_1.default.static(publicDir, { maxAge: '0' }));
@@ -137,6 +146,18 @@ function startWebServer(opts = {}) {
             catch (e) { /* 暂存失败不影响任务执行 */ }
         },
     });
+    // 微信桥接：注入 TaskQueue 引用并初始化
+    (0, wechat_bridge_1.setWechatTaskQueue)(queue);
+    const wechatConfig = (0, wechat_bridge_1.initWechatBridge)();
+    // 飞书桥接：注入 TaskQueue 和 FeishuIntegration，初始化
+    const feishuConfig = (0, feishu_bridge_1.initFeishuBridge)();
+    if ((0, feishu_bridge_1.isFeishuEnabled)(feishuConfig)) {
+        const feishuIntegration = new collaboration_1.FeishuIntegration({ appId: feishuConfig.appId, appSecret: feishuConfig.appSecret });
+        (0, feishu_bridge_1.setFeishuBridgeDeps)(queue, feishuIntegration);
+    }
+    // 元宝/豆包桥接：注入 TaskQueue 引用并初始化
+    (0, yuanbao_bridge_1.setYuanbaoTaskQueue)(queue);
+    const yuanbaoConfig = (0, yuanbao_bridge_1.initYuanbaoBridge)();
     // 公开健康检查（仅暴露版本/状态等观测信息，无敏感数据）
     app.get('/api/health', (_req, res) => {
         res.json({
@@ -146,9 +167,43 @@ function startWebServer(opts = {}) {
             signature: version_1.SIGNATURE,
             enterprise: (0, enterprise_1.isEnterpriseEnabled)(),
             lang: (0, i18n_1.getLang)(),
+            wechat: (0, wechat_bridge_1.isWechatEnabled)(wechatConfig) ? wechatConfig.mode : 'disabled',
+            feishu: (0, feishu_bridge_1.isFeishuEnabled)(feishuConfig) ? 'enabled' : 'disabled',
+            yuanbao: (0, yuanbao_bridge_1.isYuanbaoEnabled)(yuanbaoConfig) ? 'enabled' : 'disabled',
             time: new Date().toISOString(),
         });
     });
+    // 微信桥接回调（GET=URL验证，POST=消息接收），无需 Bearer Token（微信服务器调用）
+    app.get('/api/wechat/callback', async (req, res) => {
+        const result = (await (0, wechat_bridge_1.handleWechatCallback)(wechatConfig, req.query, ''));
+        res.status(result.status);
+        res.setHeader('Content-Type', result.contentType);
+        res.send(result.body);
+    });
+    app.post('/api/wechat/callback', async (req, res) => {
+        const body = typeof req.body === 'string' ? req.body : JSON.stringify(req.body || '');
+        const result = (await (0, wechat_bridge_1.handleWechatCallback)(wechatConfig, req.query, body));
+        res.status(result.status);
+        res.setHeader('Content-Type', result.contentType);
+        res.send(result.body);
+    });
+    // 飞书桥接回调（事件订阅，无需 Bearer Token）
+    app.post('/api/feishu/callback', async (req, res) => {
+        const body = (req.body || {});
+        const result = (await (0, feishu_bridge_1.handleFeishuCallback)(feishuConfig, body));
+        res.status(result.status);
+        res.setHeader('Content-Type', result.contentType);
+        res.send(result.body);
+    });
+    // 元宝/豆包桥接回调（webhook，无需 Bearer Token，原始 body 用于签名校验）
+    app.post('/api/yuanbao/callback', async (req, res) => {
+        const rawBody = Buffer.isBuffer(req.body) ? req.body.toString('utf8') : (typeof req.body === 'string' ? req.body : JSON.stringify(req.body || ''));
+        const headers = req.headers;
+        const result = (await (0, yuanbao_bridge_1.handleYuanbaoCallback)(yuanbaoConfig, rawBody, headers));
+        res.status(result.status);
+        res.setHeader('Content-Type', result.contentType);
+        res.send(result.body);
+    });
     // 手机号直登：无短信验证，生成本地会话令牌
     app.post('/api/auth/login', (req, res) => {
         const body = (req.body ?? {});
@@ -160,23 +215,19 @@ function startWebServer(opts = {}) {
         // 使用新的登录方法，支持首次登录检测
         const result = sessions.login(phone);
         const session = sessions.get(result.token);
-        // 如果是首次登录，自动创建引导任务
+        // 首次登录：返回引导任务定义（不自动提交执行，由用户在前端点「运行」时再真正发起）
         let welcomeTasks = [];
         if (result.isFirstLogin) {
             // 标记会话为首次登录（用于后续接口识别）
             if (session) {
                 session.isFirstLogin = true;
             }
-            // 创建引导任务
+            // 只返回任务定义，taskId 留空，前端点运行时才提交到任务队列
             for (const task of auth_1.WELCOME_TASKS) {
-                const record = queue.submit(task.goal, {
-                    workspaceDir: serverWorkspaceDir,
-                    agentType: 'general',
-                });
                 welcomeTasks.push({
                     ...task,
-                    taskId: record.id,
-                    status: record.status,
+                    taskId: '',
+                    status: 'pending',
                 });
             }
         }
@@ -272,7 +323,18 @@ function startWebServer(opts = {}) {
         const history = (0, auto_summarize_1.getSummaryHistory)(memoryConfig, limit);
         res.json({ ok: true, history });
     });
-    app.use('/api', (0, auth_1.requireToken)(token, sessions));
+    app.post('/api/auth/clear-first-login', (req, res) => {
+        const header = req.header('authorization') || '';
+        const m = /^Bearer\s+(.+)$/i.exec(header);
+        if (!m) {
+            res.status(401).json({ ok: false, error: 'unauthorized' });
+            return;
+        }
+        const token = m[1];
+        const ok = sessions.clearFirstLogin(token);
+        res.json({ ok, cleared: ok });
+    });
+    app.use('/api', (0, auth_1.requireToken)(token, sessions, ['/api/security/public-key']));
     // ===== v7.2.0 能力接线层：voice / knowledge / figma / sso / collaboration / plugins / self-correction =====
     // 将原"孤立代码"模块接入 Web API（修复：从 404 变为可调用）
     (0, extra_apis_1.registerExtraApis)(app, { dataDir: (0, path_1.join)((0, config_1.resolveHomeDir)(), '.feihong-code') });
@@ -1827,7 +1889,7 @@ function startWebServer(opts = {}) {
             const headers = { 'User-Agent': 'fhcode-node/1.0' };
             if (node.apiKey)
                 headers['Authorization'] = 'Bearer ' + node.apiKey;
-            const r = await fetchWithRetry(url, 10000, 0);
+            const r = await fetchWithRetry(url, 25000, 0);
             if (!r.ok)
                 return { ok: false, error: `HTTP ${r.status}` };
             if (node.type === 'http') {
@@ -2104,7 +2166,10 @@ function startWebServer(opts = {}) {
     /* ========== 技能市场（插件市场）：聚合 ClawHub + Agent-Foundry + 自定义节点 + 自定义来源 ========== */
     const CLAWHUB_API = 'https://clawhub.ai/api/v1/skills';
     const AGENT_FOUNDRY_CATALOG = 'https://raw.githubusercontent.com/hebertzhu/agent-foundry/main/catalog/skills-catalog.json';
-    async function fetchWithRetry(url, timeoutMs = 15000, retries = 1) {
+    async function fetchWithRetry(url, timeoutMs = 25000, retries = 1) {
+        // 强制 IPv4 优先：规避 IPv6 链路故障（部分网络 IPv6 路由不可达时，
+        // 默认 verbatim 解析会优先走 IPv6 导致连接超时/失败）。幂等，重复调用无副作用。
+        node_dns_1.default.setDefaultResultOrder('ipv4first');
         let lastErr;
         for (let attempt = 0; attempt <= retries; attempt++) {
             const ctrl = new AbortController();
@@ -2154,7 +2219,7 @@ function startWebServer(opts = {}) {
     }
     async function fetchAgentFoundrySkills(keyword, limit) {
         try {
-            const r = await fetchWithRetry(AGENT_FOUNDRY_CATALOG);
+            const r = await fetchWithRetry(AGENT_FOUNDRY_CATALOG, 30000);
             if (!r.ok)
                 return [];
             const data = (await r.json());
@@ -2225,7 +2290,7 @@ function startWebServer(opts = {}) {
                 if (!src.enabled || src.type !== 'skills')
                     continue;
                 try {
-                    const r = await fetchWithRetry(src.url, 10000, 0);
+                    const r = await fetchWithRetry(src.url, 25000, 0);
                     if (r.ok) {
                         const data = await r.json();
                         const list = Array.isArray(data) ? data : (data.items || data.skills || []);
@@ -2531,7 +2596,7 @@ function startWebServer(opts = {}) {
             if (!src.enabled || src.type !== 'templates')
                 continue;
             try {
-                const r = await fetchWithRetry(src.url, 10000, 0);
+                const r = await fetchWithRetry(src.url, 25000, 0);
                 if (r.ok) {
                     const data = await r.json();
                     const list = Array.isArray(data) ? data : (data.items || data.templates || []);
@@ -2655,7 +2720,7 @@ function startWebServer(opts = {}) {
             if (!src.enabled || src.type !== 'office')
                 continue;
             try {
-                const r = await fetchWithRetry(src.url, 10000, 0);
+                const r = await fetchWithRetry(src.url, 25000, 0);
                 if (r.ok) {
                     const data = await r.json();
                     const list = Array.isArray(data) ? data : (data.items || data.capabilities || []);