feishu-codex-console 1.0.0-beta.6

package/dist/diagnostics.js

@@ -0,0 +1,253 @@
+import { chmod, lstat, mkdir, open, writeFile } from "node:fs/promises";
+import { homedir, hostname, platform, release } from "node:os";
+import path from "node:path";
+import { DatabaseSync } from "node:sqlite";
+import { readBridgeHealth, removeBridgeHealth } from "./health-file.js";
+import { trimRuntimeLogs } from "./maintenance.js";
+import { redactDiagnosticText, safeErrorText } from "./redaction.js";
+export async function repairRuntime(config) {
+    const changed = [];
+    const warnings = [];
+    await ensurePrivateDirectory(config.dataDir, changed, "运行数据目录");
+    await ensurePrivateDirectory(path.join(config.dataDir, "log"), changed, "日志目录");
+    for (const file of [
+        config.databaseFile,
+        `${config.databaseFile}-wal`,
+        `${config.databaseFile}-shm`,
+        config.stateFile,
+        path.join(config.dataDir, "bridge-health.json"),
+        path.join(config.dataDir, "log", "bridge.log"),
+        path.join(config.dataDir, "log", "bridge.error.log"),
+    ]) {
+        await repairPrivateFile(file, changed, warnings);
+    }
+    try {
+        const health = await readBridgeHealth(config.dataDir);
+        if (health && !processIsAlive(health.pid) && Date.now() - Date.parse(health.updatedAt) > 45_000) {
+            await removeBridgeHealth(config.dataDir, health.pid);
+            changed.push("移除失效的服务健康标记");
+        }
+    }
+    catch (error) {
+        warnings.push(`健康标记未修复：${safeErrorText(error)}`);
+    }
+    try {
+        const trimmed = await trimRuntimeLogs(path.join(config.dataDir, "log"), config.maxLogBytes);
+        if (trimmed > 0)
+            changed.push(`轮转 ${trimmed} 个超限日志`);
+    }
+    catch (error) {
+        warnings.push(`日志轮转失败：${safeErrorText(error)}`);
+    }
+    return { changed, warnings };
+}
+export async function createDiagnosticBundle(config, checks, requestedFile) {
+    const directory = requestedFile
+        ? path.dirname(path.resolve(requestedFile))
+        : path.join(config.dataDir, "diagnostics");
+    await ensureDiagnosticDirectory(directory);
+    const file = requestedFile
+        ? path.resolve(requestedFile)
+        : path.join(directory, `diagnostic-${timestamp(new Date())}.json`);
+    await assertSafeOptionalFile(file);
+    const health = await readBridgeHealth(config.dataDir).catch((error) => ({
+        unavailable: safeErrorText(error),
+    }));
+    const database = await databaseSummary(config.databaseFile);
+    const logs = {
+        stdout: await readTail(path.join(config.dataDir, "log", "bridge.log"), 32 * 1024),
+        stderr: await readTail(path.join(config.dataDir, "log", "bridge.error.log"), 32 * 1024),
+    };
+    const report = sanitizeDiagnosticValue({
+        version: 1,
+        createdAt: new Date().toISOString(),
+        product: "feishu-codex-console",
+        runtime: {
+            node: process.versions.node,
+            platform: `${platform()} ${release()}`,
+            hostname: hostname(),
+            pid: process.pid,
+        },
+        config: {
+            configVersion: config.configVersion,
+            instanceId: config.instanceId,
+            dataDir: config.dataDir,
+            workdir: config.workdir,
+            projectRoots: config.projectRoots,
+            sandboxMaximum: config.sandboxMode,
+            operatorSandboxMaximum: config.operatorSandboxMode,
+            networkEnabled: config.networkAccessEnabled,
+            webSearchMode: config.webSearchMode,
+            administrators: config.adminSenderIds.size,
+            operators: config.allowedSenderIds.size,
+            viewers: config.viewerSenderIds.size,
+            chatAllowlistEntries: config.allowedChatIds.size,
+            projectAclEntries: config.projectAcl.size,
+            maxConcurrentTasks: config.maxConcurrentTasks,
+        },
+        checks,
+        health,
+        database,
+        logs,
+    });
+    await writeFile(file, `${JSON.stringify(report, null, 2)}\n`, {
+        encoding: "utf8",
+        mode: 0o600,
+        flag: "wx",
+    });
+    await chmod(file, 0o600);
+    return file;
+}
+async function databaseSummary(file) {
+    try {
+        const details = await lstat(file);
+        if (!details.isFile() || details.isSymbolicLink()) {
+            return { exists: true, error: "unsafe database path" };
+        }
+        const database = new DatabaseSync(file, { readOnly: true });
+        try {
+            const integrity = database.prepare("PRAGMA quick_check").get();
+            const row = database.prepare("SELECT payload FROM bridge_state WHERE id = 1").get();
+            const state = row?.payload ? JSON.parse(row.payload) : {};
+            const tasks = Object.values(state.tasks ?? {});
+            const statuses = {};
+            for (const task of tasks) {
+                const status = task.status ?? "unknown";
+                statuses[status] = (statuses[status] ?? 0) + 1;
+            }
+            return {
+                exists: true,
+                sizeBytes: details.size,
+                integrity: integrity?.quick_check ?? "unknown",
+                stateVersion: state.version ?? "unknown",
+                taskStatuses: statuses,
+            };
+        }
+        finally {
+            database.close();
+        }
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return { exists: false };
+        return { exists: true, error: safeErrorText(error) };
+    }
+}
+async function readTail(file, maxBytes) {
+    try {
+        const details = await lstat(file);
+        if (!details.isFile() || details.isSymbolicLink())
+            return "[unsafe log path]";
+        const length = Math.min(details.size, maxBytes);
+        const buffer = Buffer.alloc(length);
+        const handle = await open(file, "r");
+        try {
+            await handle.read(buffer, 0, length, Math.max(0, details.size - length));
+        }
+        finally {
+            await handle.close();
+        }
+        return buffer.toString("utf8");
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return "";
+        return `[unavailable: ${safeErrorText(error)}]`;
+    }
+}
+async function ensurePrivateDirectory(directory, changed, label) {
+    let created = false;
+    try {
+        const details = await lstat(directory);
+        if (!details.isDirectory() || details.isSymbolicLink()) {
+            throw new Error(`${label}不是安全的普通目录：${directory}`);
+        }
+    }
+    catch (error) {
+        if (error.code !== "ENOENT")
+            throw error;
+        await mkdir(directory, { recursive: true, mode: 0o700 });
+        created = true;
+    }
+    const details = await lstat(directory);
+    if ((details.mode & 0o777) !== 0o700) {
+        await chmod(directory, 0o700);
+        changed.push(`修复 ${label} 权限为 0700`);
+    }
+    else if (created) {
+        changed.push(`创建${label}`);
+    }
+}
+async function repairPrivateFile(file, changed, warnings) {
+    try {
+        const details = await lstat(file);
+        if (!details.isFile() || details.isSymbolicLink()) {
+            warnings.push(`跳过不安全路径：${file}`);
+            return;
+        }
+        if ((details.mode & 0o777) !== 0o600) {
+            await chmod(file, 0o600);
+            changed.push(`修复 ${path.basename(file)} 权限为 0600`);
+        }
+    }
+    catch (error) {
+        if (error.code !== "ENOENT") {
+            warnings.push(`无法检查 ${path.basename(file)}：${safeErrorText(error)}`);
+        }
+    }
+}
+async function ensureDiagnosticDirectory(directory) {
+    try {
+        const details = await lstat(directory);
+        if (!details.isDirectory() || details.isSymbolicLink()) {
+            throw new Error(`诊断目录不是安全的普通目录：${directory}`);
+        }
+    }
+    catch (error) {
+        if (error.code !== "ENOENT")
+            throw error;
+        await mkdir(directory, { recursive: true, mode: 0o700 });
+    }
+    await chmod(directory, 0o700);
+}
+async function assertSafeOptionalFile(file) {
+    try {
+        const details = await lstat(file);
+        if (!details.isFile() || details.isSymbolicLink()) {
+            throw new Error(`诊断文件路径不安全：${file}`);
+        }
+        throw new Error(`诊断文件已存在，请选择新路径：${file}`);
+    }
+    catch (error) {
+        if (error.code !== "ENOENT")
+            throw error;
+    }
+}
+function sanitizeDiagnosticValue(value) {
+    if (typeof value === "string") {
+        return redactDiagnosticText(value, { homeDirectory: homedir(), maxChars: 64_000 });
+    }
+    if (Array.isArray(value))
+        return value.map(sanitizeDiagnosticValue);
+    if (typeof value === "object" && value !== null) {
+        return Object.fromEntries(Object.entries(value).map(([key, entry]) => [
+            key,
+            sanitizeDiagnosticValue(entry),
+        ]));
+    }
+    return value;
+}
+function processIsAlive(pid) {
+    if (!Number.isSafeInteger(pid) || pid <= 0)
+        return false;
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch (error) {
+        return error.code === "EPERM";
+    }
+}
+function timestamp(value) {
+    return value.toISOString().replace(/[:.]/g, "-");
+}

package/dist/doctor.js

@@ -0,0 +1,250 @@
+import "dotenv/config";
+import { spawn } from "node:child_process";
+import { access } from "node:fs/promises";
+import { homedir } from "node:os";
+import path from "node:path";
+import { loadConfig } from "./config.js";
+import { createDiagnosticBundle, repairRuntime, } from "./diagnostics.js";
+import { ProjectRegistry } from "./project-registry.js";
+import { installConsoleRedaction, redactDiagnosticText, safeErrorText, } from "./redaction.js";
+installConsoleRedaction();
+async function main() {
+    const options = parseDoctorOptions(process.argv.slice(2));
+    const results = [];
+    let config;
+    try {
+        config = loadConfig();
+        results.push({
+            label: "配置",
+            status: "ok",
+            detail: `${config.sandboxMode} · 并发 ${config.maxConcurrentTasks} · 附件保留 ${config.attachmentRetentionHours} 小时 · 新手引导${config.autoOnboarding ? "自动" : "手动"}`,
+        });
+        if (config.sandboxMode === "danger-full-access" && config.allowedChatIds.size === 0) {
+            results.push({
+                label: "群聊门禁",
+                status: "warning",
+                detail: "完全访问模式未配置聊天白名单；私聊可用，群聊将自动拒绝",
+            });
+        }
+        else {
+            results.push({
+                label: "群聊门禁",
+                status: "ok",
+                detail: config.allowedChatIds.size > 0 ? "已配置聊天白名单" : "当前非完全访问模式",
+            });
+        }
+        results.push({
+            label: "团队权限",
+            status: "ok",
+            detail: `管理员 ${config.adminSenderIds.size} · 操作者 ${config.allowedSenderIds.size} · 只读 ${config.viewerSenderIds.size} · 友好名称 ${config.memberLabels.size} · 群聊按${config.groupSessionScope === "member" ? "成员" : "整群"}隔离`,
+        });
+        results.push({
+            label: "项目 ACL",
+            status: config.projectAcl.size > 0 ? "ok" : "warning",
+            detail: config.projectAcl.size > 0
+                ? `已配置 ${config.projectAcl.size} 条项目访问规则`
+                : "未配置时，所有授权成员可看到全部已发现项目",
+        });
+        results.push({
+            label: "权限上限",
+            status: "ok",
+            detail: `管理员 ${config.sandboxMode} · 普通操作者 ${config.operatorSandboxMode}`,
+        });
+        results.push({
+            label: "环境隔离",
+            status: "ok",
+            detail: `敏感环境变量默认不传给 Codex；额外放行 ${config.codexAllowedEnvVars.length} 个`,
+        });
+    }
+    catch (error) {
+        results.push({ label: "配置", status: "failed", detail: safeErrorText(error) });
+        print(results);
+        process.exitCode = 1;
+        return;
+    }
+    if (options.fix) {
+        try {
+            const repair = await repairRuntime(config);
+            results.push({
+                label: "自动修复",
+                status: repair.warnings.length > 0 ? "warning" : "ok",
+                detail: [
+                    repair.changed.length > 0 ? repair.changed.join("；") : "没有发现可自动修复的问题",
+                    ...repair.warnings,
+                ].join("；"),
+            });
+        }
+        catch (error) {
+            results.push({ label: "自动修复", status: "failed", detail: safeErrorText(error) });
+        }
+    }
+    const lark = await run(config.larkCliPath, ["whoami", "--as", "bot"]);
+    results.push({
+        label: "飞书 Bot",
+        status: lark.code === 0 ? "ok" : "failed",
+        detail: lark.code === 0 ? "应用身份可用" : "lark-cli Bot 身份不可用",
+    });
+    const localCodex = config.codexCliPath ?? path.join(config.projectDir, "node_modules", ".bin", "codex");
+    const codex = await run(localCodex, ["login", "status"]);
+    results.push({
+        label: "Codex",
+        status: codex.code === 0 ? "ok" : "failed",
+        detail: codex.code === 0 ? codex.stdout.trim() || "登录态可用" : "本机 Codex 登录态不可用",
+    });
+    try {
+        await access(path.dirname(config.databaseFile));
+        results.push({
+            label: "可靠状态",
+            status: "ok",
+            detail: `SQLite WAL · ${path.relative(config.projectDir, config.databaseFile)}`,
+        });
+    }
+    catch {
+        results.push({
+            label: "可靠状态",
+            status: "warning",
+            detail: "数据库目录尚未创建，首次启动时会自动创建",
+        });
+    }
+    if (process.platform === "darwin") {
+        try {
+            await access("/usr/bin/caffeinate");
+            results.push({
+                label: "远程就绪",
+                status: "ok",
+                detail: "macOS caffeinate 可用，可从飞书设备卡开启",
+            });
+        }
+        catch {
+            results.push({
+                label: "远程就绪",
+                status: "warning",
+                detail: "未找到 /usr/bin/caffeinate",
+            });
+        }
+    }
+    try {
+        await access(config.workdir);
+        const registry = new ProjectRegistry(config.projectRoots, config.workdir, config.projectScanDepth, config.maxProjects, config.syncSavedProjects ? config.codexProjectStateFile : undefined);
+        const projects = await registry.refresh();
+        results.push({
+            label: "项目",
+            status: projects.length > 0 ? "ok" : "failed",
+            detail: `发现 ${projects.length} 个可用项目`,
+        });
+    }
+    catch (error) {
+        results.push({ label: "项目", status: "failed", detail: safeErrorText(error) });
+    }
+    if (process.platform === "darwin") {
+        const service = await run("launchctl", [
+            "print",
+            `gui/${process.getuid?.() ?? 0}/${config.serviceLabel}`,
+        ]);
+        results.push({
+            label: "后台守护",
+            status: service.code === 0 ? "ok" : "warning",
+            detail: service.code === 0 ? "LaunchAgent 正在运行" : "尚未安装，可运行 npm run service:install",
+        });
+    }
+    else if (process.platform === "linux") {
+        const service = await run("systemctl", [
+            "--user",
+            "is-active",
+            `feishu-codex-bridge-${config.instanceId}.service`,
+        ]);
+        results.push({
+            label: "后台守护",
+            status: service.code === 0 ? "ok" : "warning",
+            detail: service.code === 0 ? "systemd user service 正在运行" : "尚未安装，可运行 npm run service:install",
+        });
+    }
+    if (options.diagnostics) {
+        try {
+            const diagnosticFile = await createDiagnosticBundle(config, results, options.diagnostics);
+            results.push({
+                label: "诊断包",
+                status: "ok",
+                detail: `已生成脱敏诊断包：${diagnosticFile}`,
+            });
+        }
+        catch (error) {
+            results.push({ label: "诊断包", status: "failed", detail: safeErrorText(error) });
+        }
+    }
+    print(results);
+    if (results.some((result) => result.status === "failed"))
+        process.exitCode = 1;
+}
+function run(command, args, timeoutMs = 15_000) {
+    return new Promise((resolve) => {
+        const child = spawn(command, args, {
+            cwd: process.cwd(),
+            env: process.env,
+            shell: false,
+            stdio: ["ignore", "pipe", "ignore"],
+        });
+        let stdout = "";
+        let settled = false;
+        let forceKillTimer;
+        const finish = (code) => {
+            if (settled)
+                return;
+            settled = true;
+            clearTimeout(timeout);
+            if (forceKillTimer)
+                clearTimeout(forceKillTimer);
+            resolve({ code, stdout });
+        };
+        const timeout = setTimeout(() => {
+            child.kill("SIGTERM");
+            forceKillTimer = setTimeout(() => {
+                child.kill("SIGKILL");
+                finish(null);
+            }, 2_000);
+            forceKillTimer.unref();
+        }, timeoutMs);
+        timeout.unref();
+        child.stdout.setEncoding("utf8");
+        child.stdout.on("data", (chunk) => {
+            stdout += chunk;
+        });
+        child.once("error", () => finish(null));
+        child.once("exit", (code) => finish(code));
+    });
+}
+function print(results) {
+    console.log("Feishu Codex Bridge V5 自检");
+    for (const result of results) {
+        const marker = result.status === "ok" ? "通过" : result.status === "warning" ? "提醒" : "失败";
+        console.log(`${marker.padEnd(4)} ${result.label}：${redactDiagnosticText(result.detail, {
+            homeDirectory: homedir(),
+            maxChars: 2_000,
+        })}`);
+    }
+}
+function parseDoctorOptions(args) {
+    const options = { fix: false };
+    for (let index = 0; index < args.length; index += 1) {
+        const value = args[index];
+        if (value === "--fix") {
+            options.fix = true;
+            continue;
+        }
+        if (value === "--diagnostics") {
+            const target = args[index + 1];
+            if (!target || target.startsWith("--")) {
+                throw new Error("--diagnostics 需要指定输出 JSON 文件");
+            }
+            options.diagnostics = target;
+            index += 1;
+            continue;
+        }
+        throw new Error(`无法识别 doctor 参数：${value}`);
+    }
+    return options;
+}
+void main().catch((error) => {
+    console.error(`doctor 无法启动：${safeErrorText(error)}`);
+    process.exitCode = 2;
+});

package/dist/fallback-card-session.js

@@ -0,0 +1,37 @@
+import { renderResponseCard } from "./response-card.js";
+export class FallbackCardSession {
+    lark;
+    cardId;
+    messageId;
+    sequence;
+    constructor(lark, cardId, messageId, sequence = 0) {
+        this.lark = lark;
+        this.cardId = cardId;
+        this.messageId = messageId;
+        this.sequence = sequence;
+    }
+    static async create(lark, replyToMessageId, text, phase, idempotencyKey) {
+        const cardId = await lark.createCard(renderResponseCard(text, phase));
+        const messageId = await lark.replyCard(replyToMessageId, cardId, idempotencyKey);
+        if (!messageId)
+            throw new Error("飞书没有返回产品回复卡消息 ID");
+        return new FallbackCardSession(lark, cardId, messageId);
+    }
+    static restore(lark, cardId, messageId, sequence = 0) {
+        return new FallbackCardSession(lark, cardId, messageId, sequence);
+    }
+    get sequenceNumber() {
+        return this.sequence;
+    }
+    async update(text, phase) {
+        try {
+            this.sequence += 1;
+            await this.lark.updateCard(this.cardId, renderResponseCard(text, phase), this.sequence);
+            return true;
+        }
+        catch (error) {
+            console.error(`[card] fallback update failed card=${this.cardId}`, error);
+            return false;
+        }
+    }
+}

package/dist/health-file.js

@@ -0,0 +1,75 @@
+import { chmod, lstat, mkdir, readFile, rename, rm, writeFile } from "node:fs/promises";
+import path from "node:path";
+export const BRIDGE_HEALTH_FILE = "bridge-health.json";
+export function bridgeHealthPath(dataDir) {
+    return path.join(dataDir, BRIDGE_HEALTH_FILE);
+}
+export async function writeBridgeHealth(dataDir, input) {
+    await ensurePrivateDirectory(dataDir);
+    const target = bridgeHealthPath(dataDir);
+    await assertSafeOptionalFile(target);
+    const snapshot = {
+        version: 1,
+        ...input,
+        updatedAt: new Date().toISOString(),
+    };
+    const temporary = `${target}.tmp-${process.pid}-${Date.now()}`;
+    await writeFile(temporary, `${JSON.stringify(snapshot, null, 2)}\n`, {
+        encoding: "utf8",
+        mode: 0o600,
+        flag: "wx",
+    });
+    await chmod(temporary, 0o600);
+    await rename(temporary, target);
+    await chmod(target, 0o600);
+    return snapshot;
+}
+export async function readBridgeHealth(dataDir) {
+    const target = bridgeHealthPath(dataDir);
+    try {
+        const details = await lstat(target);
+        if (!details.isFile() || details.isSymbolicLink()) {
+            throw new Error(`Unsafe bridge health file: ${target}`);
+        }
+        return JSON.parse(await readFile(target, "utf8"));
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return null;
+        throw error;
+    }
+}
+export async function removeBridgeHealth(dataDir, ownerPid) {
+    if (ownerPid !== undefined) {
+        const current = await readBridgeHealth(dataDir);
+        if (current && current.pid !== ownerPid)
+            return;
+    }
+    await rm(bridgeHealthPath(dataDir), { force: true });
+}
+async function ensurePrivateDirectory(directory) {
+    try {
+        const details = await lstat(directory);
+        if (!details.isDirectory() || details.isSymbolicLink()) {
+            throw new Error(`Unsafe bridge data directory: ${directory}`);
+        }
+    }
+    catch (error) {
+        if (error.code !== "ENOENT")
+            throw error;
+        await mkdir(directory, { recursive: true, mode: 0o700 });
+    }
+    await chmod(directory, 0o700);
+}
+async function assertSafeOptionalFile(file) {
+    try {
+        const details = await lstat(file);
+        if (!details.isFile() || details.isSymbolicLink()) {
+            throw new Error(`Unsafe bridge health file: ${file}`);
+        }
+    }
+    catch (error) {
+        if (error.code !== "ENOENT")
+            throw error;
+    }
+}