feishu-codex-console 1.0.0-beta.6

package/dist/project-overview-card.js

@@ -0,0 +1,182 @@
+export function renderProjectOverviewCard(snapshot) {
+    const gitLabel = snapshot.gitStatus
+        ? snapshot.gitStatus.dirty
+            ? `${snapshot.gitStatus.changedFiles} 个变更`
+            : "工作区干净"
+        : snapshot.project.isGitRepository
+            ? "Git 状态未知"
+            : "普通文件夹";
+    const branch = snapshot.gitStatus?.branch ?? "—";
+    const stack = snapshot.stack.length > 0 ? snapshot.stack.join(" · ") : "未从 package.json 识别";
+    const languages = snapshot.languages.length > 0 ? snapshot.languages.join(" · ") : "暂未识别";
+    const directories = snapshot.topDirectories.length > 0
+        ? snapshot.topDirectories.map((directory) => `\`${safeMarkdown(directory)}\``).join("  ")
+        : "暂无目录索引";
+    return {
+        schema: "2.0",
+        config: {
+            update_multi: true,
+            width_mode: "default",
+            enable_forward: false,
+            summary: { content: `项目概览 · ${safePlain(snapshot.project.name)}` },
+        },
+        header: {
+            title: { tag: "plain_text", content: `${safePlain(snapshot.project.name)} · 项目概览` },
+            subtitle: { tag: "plain_text", content: "本地确定性快照，不启动 Codex" },
+            template: "blue",
+            icon: { tag: "standard_icon", token: "folder_outlined" },
+            text_tag_list: [
+                {
+                    tag: "text_tag",
+                    text: { tag: "plain_text", content: "0 AI token" },
+                    color: "green",
+                },
+                {
+                    tag: "text_tag",
+                    text: {
+                        tag: "plain_text",
+                        content: snapshot.project.isGitRepository ? "Git" : "文件夹",
+                    },
+                    color: "blue",
+                },
+            ],
+        },
+        body: {
+            direction: "vertical",
+            padding: "12px 12px 20px 12px",
+            vertical_spacing: "12px",
+            elements: [
+                {
+                    tag: "column_set",
+                    element_id: "overview_summary",
+                    flex_mode: "none",
+                    columns: [
+                        {
+                            tag: "column",
+                            width: "weighted",
+                            weight: 1,
+                            background_style: "blue-50",
+                            padding: "12px 12px 12px 12px",
+                            vertical_spacing: "6px",
+                            elements: [
+                                {
+                                    tag: "markdown",
+                                    element_id: "overview_description",
+                                    content: `**项目说明**\n${safeMarkdown(snapshot.description)}`,
+                                },
+                                {
+                                    tag: "markdown",
+                                    element_id: "overview_path",
+                                    text_size: "notation",
+                                    content: `<font color='grey'>路径</font>  ${safeMarkdown(snapshot.project.displayPath)}`,
+                                },
+                            ],
+                        },
+                    ],
+                },
+                {
+                    tag: "column_set",
+                    element_id: "overview_metrics",
+                    flex_mode: "none",
+                    horizontal_spacing: "8px",
+                    columns: [
+                        metric("文件", `${formatNumber(snapshot.fileCount)}${snapshot.indexTruncated ? "+" : ""}`),
+                        metric("分支", branch),
+                        metric("状态", gitLabel),
+                    ],
+                },
+                {
+                    tag: "column_set",
+                    element_id: "overview_tech",
+                    flex_mode: "none",
+                    columns: [
+                        {
+                            tag: "column",
+                            width: "weighted",
+                            weight: 1,
+                            background_style: "grey-50",
+                            padding: "12px 12px 12px 12px",
+                            vertical_spacing: "6px",
+                            elements: [
+                                {
+                                    tag: "markdown",
+                                    element_id: "overview_stack",
+                                    content: `**技术概况**\n<font color='grey'>技术栈</font>  ${safeMarkdown(stack)}\n<font color='grey'>语言</font>  ${safeMarkdown(languages)}\n<font color='grey'>包管理</font>  ${safeMarkdown(snapshot.packageManager)}${snapshot.workspace ? " · Workspace" : ""}${snapshot.commit ? `\n<font color='grey'>Commit</font>  \`${safeMarkdown(snapshot.commit)}\`` : ""}`,
+                                },
+                                {
+                                    tag: "markdown",
+                                    element_id: "overview_dirs",
+                                    content: `**主要目录**\n${directories}`,
+                                },
+                            ],
+                        },
+                    ],
+                },
+                {
+                    tag: "markdown",
+                    element_id: "overview_hint",
+                    text_size: "notation",
+                    text_align: "center",
+                    content: "<font color='grey'>“读取项目”只生成本地快照；发送“深入分析项目架构”才会启动 Codex。</font>",
+                },
+            ],
+        },
+    };
+}
+export function renderProjectOverviewText(snapshot) {
+    const git = snapshot.gitStatus
+        ? `${snapshot.gitStatus.branch} · ${snapshot.gitStatus.dirty ? `${snapshot.gitStatus.changedFiles} 个变更` : "工作区干净"}`
+        : snapshot.project.isGitRepository ? "Git 状态未知" : "普通文件夹";
+    return [
+        `项目概览 · ${snapshot.project.name}`,
+        snapshot.description,
+        "",
+        `- 路径：${snapshot.project.displayPath}`,
+        `- Git：${git}`,
+        `- 文件：${snapshot.fileCount}${snapshot.indexTruncated ? "+" : ""}`,
+        `- 技术栈：${snapshot.stack.join("、") || "未识别"}`,
+        `- 语言：${snapshot.languages.join("、") || "未识别"}`,
+        `- 包管理：${snapshot.packageManager}${snapshot.workspace ? " · Workspace" : ""}`,
+        `- 主要目录：${snapshot.topDirectories.join("、") || "暂无"}`,
+        "",
+        "本次使用本地快照，AI token：0。发送“深入分析项目架构”才会启动 Codex。",
+    ].join("\n");
+}
+function metric(label, value) {
+    return {
+        tag: "column",
+        width: "weighted",
+        weight: 1,
+        background_style: "grey-50",
+        padding: "8px 4px 8px 4px",
+        vertical_spacing: "2px",
+        elements: [
+            {
+                tag: "markdown",
+                text_align: "center",
+                text_size: "notation",
+                content: `<font color='grey'>${safeMarkdown(label)}</font>`,
+            },
+            {
+                tag: "markdown",
+                text_align: "center",
+                content: `**${safeMarkdown(truncate(value, 24))}**`,
+            },
+        ],
+    };
+}
+function safeMarkdown(value) {
+    return value
+        .replaceAll("\\", "\\\\")
+        .replace(/[<>&]/g, (character) => ({ "<": "＜", ">": "＞", "&": "＆" })[character])
+        .replaceAll("`", "ˋ");
+}
+function safePlain(value) {
+    return value.replace(/[\r\n\u0000-\u001f\u007f]/g, " ").slice(0, 80);
+}
+function truncate(value, max) {
+    return value.length <= max ? value : `${value.slice(0, max - 1)}…`;
+}
+function formatNumber(value) {
+    return new Intl.NumberFormat("zh-CN").format(value);
+}

package/dist/project-overview.js

@@ -0,0 +1,278 @@
+import { execFile } from "node:child_process";
+import { access, readFile, readdir, stat } from "node:fs/promises";
+import path from "node:path";
+import { promisify } from "node:util";
+import { readProjectGitStatus } from "./project-status.js";
+const execFileAsync = promisify(execFile);
+const MAX_METADATA_BYTES = 256 * 1024;
+const MAX_INDEX_BYTES = 4 * 1024 * 1024;
+const MAX_FILES = 20_000;
+const SKIP_DIRECTORIES = new Set([
+    ".git",
+    ".idea",
+    ".vscode",
+    "node_modules",
+    "dist",
+    "build",
+    "coverage",
+    "vendor",
+    ".next",
+    ".nuxt",
+]);
+export async function readProjectOverview(project) {
+    const [gitStatus, commit, packageMetadata, readme, indexedFiles] = await Promise.all([
+        project.isGitRepository ? readProjectGitStatus(project.path) : Promise.resolve(null),
+        project.isGitRepository ? readGitCommit(project.path) : Promise.resolve(null),
+        readPackageMetadata(project.path),
+        readReadme(project.path),
+        project.isGitRepository
+            ? readGitFiles(project.path)
+            : readDirectoryFiles(project.path),
+    ]);
+    const workspacePackages = await readWorkspacePackageMetadata(project.path, indexedFiles.files);
+    const dependencyNames = new Set([
+        ...Object.keys(packageMetadata?.dependencies ?? {}),
+        ...Object.keys(packageMetadata?.devDependencies ?? {}),
+        ...workspacePackages.flatMap((metadata) => Object.keys(metadata.dependencies ?? {})),
+        ...workspacePackages.flatMap((metadata) => Object.keys(metadata.devDependencies ?? {})),
+    ]);
+    const workspace = Boolean(packageMetadata?.workspaces) || await exists(path.join(project.path, "pnpm-workspace.yaml"));
+    return {
+        project,
+        generatedAt: new Date().toISOString(),
+        gitStatus,
+        commit,
+        description: cleanDescription(packageMetadata?.description) ||
+            extractReadmeDescription(readme) ||
+            "暂未发现项目描述。",
+        packageManager: await detectPackageManager(project.path, packageMetadata?.packageManager),
+        workspace,
+        fileCount: indexedFiles.files.length,
+        indexTruncated: indexedFiles.truncated,
+        languages: detectLanguages(indexedFiles.files),
+        stack: detectStack(dependencyNames),
+        topDirectories: detectTopDirectories(indexedFiles.files),
+        scripts: Object.keys(packageMetadata?.scripts ?? {}).slice(0, 8),
+    };
+}
+async function readPackageMetadata(projectPath) {
+    return readPackageMetadataFile(path.join(projectPath, "package.json"));
+}
+async function readWorkspacePackageMetadata(projectPath, files) {
+    const manifests = files
+        .filter((file) => file !== "package.json" && file.endsWith("/package.json"))
+        .slice(0, 20);
+    const values = await Promise.all(manifests.map((manifest) => readPackageMetadataFile(path.join(projectPath, manifest))));
+    return values.filter((value) => value !== null);
+}
+async function readPackageMetadataFile(file) {
+    try {
+        if ((await stat(file)).size > MAX_METADATA_BYTES)
+            return null;
+        const value = JSON.parse(await readFile(file, "utf8"));
+        return isRecord(value) ? value : null;
+    }
+    catch {
+        return null;
+    }
+}
+async function readReadme(projectPath) {
+    try {
+        const entries = await readdir(projectPath);
+        const name = entries.find((entry) => /^readme(?:\.|$)/i.test(entry));
+        if (!name)
+            return "";
+        const file = path.join(projectPath, name);
+        if ((await stat(file)).size > MAX_METADATA_BYTES)
+            return "";
+        return await readFile(file, "utf8");
+    }
+    catch {
+        return "";
+    }
+}
+async function readGitCommit(projectPath) {
+    try {
+        const { stdout } = await execFileAsync("git", ["-C", projectPath, "rev-parse", "--short=10", "HEAD"], gitOptions(128 * 1024));
+        return stdout.trim() || null;
+    }
+    catch {
+        return null;
+    }
+}
+async function readGitFiles(projectPath) {
+    try {
+        const { stdout } = await execFileAsync("git", ["-C", projectPath, "ls-files", "-z", "--cached", "--others", "--exclude-standard"], gitOptions(MAX_INDEX_BYTES));
+        const all = stdout.split("\0").filter(Boolean);
+        return { files: all.slice(0, MAX_FILES), truncated: all.length > MAX_FILES };
+    }
+    catch {
+        return readDirectoryFiles(projectPath);
+    }
+}
+async function readDirectoryFiles(projectPath) {
+    const files = [];
+    const pending = [projectPath];
+    while (pending.length > 0 && files.length < MAX_FILES) {
+        const directory = pending.shift();
+        if (!directory)
+            break;
+        let entries;
+        try {
+            entries = await readdir(directory, { withFileTypes: true });
+        }
+        catch {
+            continue;
+        }
+        for (const entry of entries) {
+            if (entry.isSymbolicLink())
+                continue;
+            const absolute = path.join(directory, entry.name);
+            if (entry.isDirectory()) {
+                if (!SKIP_DIRECTORIES.has(entry.name))
+                    pending.push(absolute);
+            }
+            else if (entry.isFile()) {
+                files.push(path.relative(projectPath, absolute));
+                if (files.length >= MAX_FILES)
+                    break;
+            }
+        }
+    }
+    return { files, truncated: pending.length > 0 };
+}
+function detectLanguages(files) {
+    const labels = {
+        ".ts": "TypeScript",
+        ".tsx": "TypeScript",
+        ".js": "JavaScript",
+        ".jsx": "JavaScript",
+        ".vue": "Vue",
+        ".py": "Python",
+        ".go": "Go",
+        ".rs": "Rust",
+        ".java": "Java",
+        ".kt": "Kotlin",
+        ".swift": "Swift",
+        ".php": "PHP",
+        ".rb": "Ruby",
+        ".css": "CSS",
+        ".scss": "SCSS",
+        ".less": "Less",
+    };
+    const counts = new Map();
+    for (const file of files) {
+        const label = labels[path.extname(file).toLocaleLowerCase()];
+        if (label)
+            counts.set(label, (counts.get(label) ?? 0) + 1);
+    }
+    return [...counts.entries()]
+        .sort((left, right) => right[1] - left[1])
+        .slice(0, 5)
+        .map(([label]) => label);
+}
+function detectStack(dependencies) {
+    const known = [
+        ["react", "React"],
+        ["next", "Next.js"],
+        ["vue", "Vue"],
+        ["nuxt", "Nuxt"],
+        ["@angular/core", "Angular"],
+        ["svelte", "Svelte"],
+        ["typescript", "TypeScript"],
+        ["vite", "Vite"],
+        ["@rspack/core", "Rspack"],
+        ["webpack", "Webpack"],
+        ["express", "Express"],
+        ["@nestjs/core", "NestJS"],
+        ["jest", "Jest"],
+        ["vitest", "Vitest"],
+        ["playwright", "Playwright"],
+        ["@playwright/test", "Playwright"],
+        ["zustand", "Zustand"],
+        ["redux", "Redux"],
+        ["@reduxjs/toolkit", "Redux Toolkit"],
+    ];
+    const seen = new Set();
+    const result = [];
+    for (const [dependency, label] of known) {
+        if (dependencies.has(dependency) && !seen.has(label)) {
+            seen.add(label);
+            result.push(label);
+        }
+    }
+    return result.slice(0, 8);
+}
+function detectTopDirectories(files) {
+    const counts = new Map();
+    for (const file of files) {
+        const [first, ...rest] = file.split("/");
+        if (!first || rest.length === 0 || SKIP_DIRECTORIES.has(first))
+            continue;
+        counts.set(first, (counts.get(first) ?? 0) + 1);
+    }
+    return [...counts.entries()]
+        .sort((left, right) => right[1] - left[1] || left[0].localeCompare(right[0]))
+        .slice(0, 6)
+        .map(([directory]) => directory);
+}
+async function detectPackageManager(projectPath, declared) {
+    if (declared?.trim())
+        return declared.trim().split("@")[0] || declared.trim();
+    if (await exists(path.join(projectPath, "pnpm-lock.yaml")))
+        return "pnpm";
+    if (await exists(path.join(projectPath, "yarn.lock")))
+        return "yarn";
+    if (await exists(path.join(projectPath, "bun.lockb")))
+        return "bun";
+    if (await exists(path.join(projectPath, "package-lock.json")))
+        return "npm";
+    return "未识别";
+}
+function extractReadmeDescription(source) {
+    if (!source.trim())
+        return "";
+    const withoutCode = source.replace(/```[\s\S]*?```/g, " ");
+    const paragraphs = withoutCode.split(/\n\s*\n/);
+    for (const paragraph of paragraphs) {
+        const cleaned = cleanDescription(paragraph
+            .replace(/^#{1,6}\s+.*$/gm, "")
+            .replace(/!\[[^\]]*]\([^)]*\)/g, "")
+            .replace(/\[[^\]]*]\([^)]*\)/g, (match) => match.replace(/^\[|]\([^)]*\)$/g, ""))
+            .replace(/<[^>]+>/g, "")
+            .replace(/^[-*>\s]+/gm, "")
+            .replace(/[`*_~]/g, ""));
+        if (cleaned.length >= 24)
+            return cleaned;
+    }
+    return "";
+}
+function cleanDescription(value) {
+    if (typeof value !== "string")
+        return "";
+    return value.replace(/\s+/g, " ").trim().slice(0, 240);
+}
+function gitOptions(maxBuffer) {
+    return {
+        timeout: 4_000,
+        maxBuffer,
+        encoding: "utf8",
+        env: {
+            ...process.env,
+            GIT_OPTIONAL_LOCKS: "0",
+            GIT_TERMINAL_PROMPT: "0",
+        },
+    };
+}
+async function exists(file) {
+    try {
+        await access(file);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+function isRecord(value) {
+    return Boolean(value) && typeof value === "object" && !Array.isArray(value);
+}

package/dist/project-policy.js

@@ -0,0 +1,160 @@
+import { lstat, readFile } from "node:fs/promises";
+import path from "node:path";
+export const PROJECT_POLICY_FILE = ".feishu-codex-policy.json";
+const MAX_POLICY_BYTES = 64 * 1024;
+const EXTERNAL_ACTIONS = ["commit", "push", "pull_request", "deploy"];
+export class ProjectPolicyError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "ProjectPolicyError";
+    }
+}
+export async function loadProjectPolicy(projectPath) {
+    const filePath = path.join(projectPath, PROJECT_POLICY_FILE);
+    let details;
+    try {
+        details = await lstat(filePath);
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return defaultProjectPolicy();
+        throw new ProjectPolicyError(`无法读取项目策略：${safeErrorMessage(error)}`);
+    }
+    if (details.isSymbolicLink() || !details.isFile()) {
+        throw new ProjectPolicyError(`${PROJECT_POLICY_FILE} 必须是项目根目录中的普通文件`);
+    }
+    if (details.size > MAX_POLICY_BYTES) {
+        throw new ProjectPolicyError(`${PROJECT_POLICY_FILE} 不能超过 64 KB`);
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(await readFile(filePath, "utf8"));
+    }
+    catch (error) {
+        throw new ProjectPolicyError(`项目策略不是有效 JSON：${safeErrorMessage(error)}`);
+    }
+    const record = requireRecord(parsed, "项目策略");
+    if (record.version !== 1)
+        throw new ProjectPolicyError("项目策略 version 必须为 1");
+    const sandbox = optionalRecord(record.sandbox, "sandbox");
+    const maximumSandbox = sandbox
+        ? optionalSandboxMode(sandbox.maximum, "sandbox.maximum")
+        : undefined;
+    const operations = optionalRecord(record.operations, "operations");
+    const allowedActions = operations
+        ? optionalActionList(operations.allow, "operations.allow")
+        : null;
+    const deniedActions = operations
+        ? optionalActionList(operations.deny, "operations.deny") ?? []
+        : [];
+    const configuredApprovals = operations
+        ? optionalActionList(operations.requireApproval, "operations.requireApproval") ?? []
+        : [];
+    return {
+        source: "repository",
+        filePath,
+        ...(maximumSandbox ? { maximumSandbox } : {}),
+        allowedActions,
+        deniedActions,
+        // External side effects always keep the bridge-level confirmation floor.
+        // Repository policy can add intent, but can never remove this list.
+        approvalActions: uniqueActions([...EXTERNAL_ACTIONS, ...configuredApprovals]),
+    };
+}
+export function defaultProjectPolicy() {
+    return {
+        source: "default",
+        allowedActions: null,
+        deniedActions: [],
+        approvalActions: [...EXTERNAL_ACTIONS],
+    };
+}
+export function applyProjectSandboxMaximum(requested, policy) {
+    if (!policy.maximumSandbox)
+        return requested;
+    return sandboxRank(requested) <= sandboxRank(policy.maximumSandbox)
+        ? requested
+        : policy.maximumSandbox;
+}
+export function decideProjectActions(policy, actions) {
+    const allowed = policy.allowedActions ? new Set(policy.allowedActions) : null;
+    const denied = new Set(policy.deniedActions);
+    const blockedActions = uniqueActions(actions.filter((action) => denied.has(action) || (allowed !== null && !allowed.has(action))));
+    const approvalFloor = new Set(policy.approvalActions);
+    return {
+        blockedActions,
+        approvalActions: uniqueActions(actions.filter((action) => !blockedActions.includes(action) && approvalFloor.has(action))),
+    };
+}
+export function projectPolicySummary(policy) {
+    if (policy.source === "default")
+        return "主机默认策略";
+    const restrictions = [
+        policy.maximumSandbox ? `权限最高 ${sandboxLabel(policy.maximumSandbox)}` : "",
+        policy.allowedActions ? `允许 ${policy.allowedActions.length} 类外部动作` : "",
+        policy.deniedActions.length > 0 ? `拒绝 ${policy.deniedActions.length} 类外部动作` : "",
+    ].filter(Boolean);
+    return restrictions.length > 0 ? `仓库策略 · ${restrictions.join(" · ")}` : "仓库策略 · 使用安全默认值";
+}
+function optionalActionList(value, label) {
+    if (value === undefined)
+        return null;
+    if (!Array.isArray(value))
+        throw new ProjectPolicyError(`${label} 必须是数组`);
+    if (value.length > EXTERNAL_ACTIONS.length) {
+        throw new ProjectPolicyError(`${label} 包含重复项或未知操作`);
+    }
+    const actions = [];
+    for (const entry of value) {
+        if (typeof entry !== "string" || !isExternalAction(entry)) {
+            throw new ProjectPolicyError(`${label} 仅支持：${EXTERNAL_ACTIONS.join(", ")}`);
+        }
+        if (actions.includes(entry))
+            throw new ProjectPolicyError(`${label} 不能包含重复项`);
+        actions.push(entry);
+    }
+    return actions;
+}
+function optionalSandboxMode(value, label) {
+    if (value === undefined)
+        return undefined;
+    if (value === "read-only" || value === "workspace-write" || value === "danger-full-access") {
+        return value;
+    }
+    throw new ProjectPolicyError(`${label} 仅支持 read-only、workspace-write 或 danger-full-access`);
+}
+function optionalRecord(value, label) {
+    if (value === undefined)
+        return undefined;
+    return requireRecord(value, label);
+}
+function requireRecord(value, label) {
+    if (typeof value !== "object" || value === null || Array.isArray(value)) {
+        throw new ProjectPolicyError(`${label} 必须是对象`);
+    }
+    return value;
+}
+function isExternalAction(value) {
+    return EXTERNAL_ACTIONS.includes(value);
+}
+function uniqueActions(actions) {
+    return [...new Set(actions)];
+}
+function sandboxRank(mode) {
+    if (mode === "read-only")
+        return 0;
+    if (mode === "workspace-write")
+        return 1;
+    return 2;
+}
+function sandboxLabel(mode) {
+    if (mode === "read-only")
+        return "只读";
+    if (mode === "workspace-write")
+        return "工作区写入";
+    return "完全访问";
+}
+function safeErrorMessage(error) {
+    const message = error instanceof Error ? error.message : String(error);
+    return message.replace(/[\r\n]+/g, " ").slice(0, 300);
+}