happy-imou-cloud 2.1.21 → 2.1.23

package/dist/{BaseReasoningProcessor-DdPnQSmQ.mjs → BaseReasoningProcessor-By0QiYEu.mjs}

@@ -1,5 +1,5 @@
-import { a as createSessionMetadata, p as publishSessionRegistration } from './index-krVv4CWK.mjs';
-import { s as startOfflineReconnection, c as configuration, i as isAuthenticationRequiredError, l as logger } from './api-DB30ctmX.mjs';
+import { a as createSessionMetadata, p as publishSessionRegistration } from './index-CFLvb1x1.mjs';
+import { s as startOfflineReconnection, c as configuration, i as isAuthenticationRequiredError, l as logger } from './api-CDC4ZRT7.mjs';
 import { EventEmitter } from 'node:events';
 import { randomUUID } from 'node:crypto';
 

package/dist/{BaseReasoningProcessor-DxFwO2z9.cjs → BaseReasoningProcessor-_EHQVXKN.cjs}

@@ -1,7 +1,7 @@
 'use strict';
 
-var index = require('./index-D4A092LJ.cjs');
-var persistence = require('./api-8xtJZeXZ.cjs');
+var index = require('./index-yX0QThPc.cjs');
+var persistence = require('./api-CusZs0lm.cjs');
 var node_events = require('node:events');
 var node_crypto = require('node:crypto');
 

package/dist/{ProviderSelectionHandler-B5Aq5gA_.cjs → ProviderSelectionHandler-BSzm8oJH.cjs}

@@ -1,7 +1,7 @@
 'use strict';
 
-var persistence = require('./api-8xtJZeXZ.cjs');
-var registerKillSessionHandler = require('./registerKillSessionHandler-Cl_er9rg.cjs');
+var persistence = require('./api-CusZs0lm.cjs');
+var registerKillSessionHandler = require('./registerKillSessionHandler-3f8MBSd6.cjs');
 
 async function runModeLoop(opts) {
   let currentMode = opts.startingMode;

package/dist/{ProviderSelectionHandler-DQITIqZK.mjs → ProviderSelectionHandler-XwkBLKvY.mjs}

@@ -1,5 +1,5 @@
-import { l as logger } from './api-DB30ctmX.mjs';
-import { g as getPendingInteractionTimeoutMs, I as INTERACTION_SUPERSEDED_ERROR, a as INTERACTION_TIMED_OUT_ERROR } from './registerKillSessionHandler-beu2g-Qo.mjs';
+import { l as logger } from './api-CDC4ZRT7.mjs';
+import { g as getPendingInteractionTimeoutMs, I as INTERACTION_SUPERSEDED_ERROR, a as INTERACTION_TIMED_OUT_ERROR } from './registerKillSessionHandler-aB2llDD3.mjs';
 
 async function runModeLoop(opts) {
   let currentMode = opts.startingMode;

package/dist/{api-DB30ctmX.mjs → api-CDC4ZRT7.mjs}

@@ -18,7 +18,7 @@ import { unlink, readFile, mkdir, open, stat, writeFile, rename } from 'node:fs/
 import { Expo } from 'expo-server-sdk';
 
 var name = "happy-imou-cloud";
-var version = "2.1.21";
+var version = "2.1.23";
 var description = "hicloud - Imou 企业定制版。关键是 happy！移动端远程 AI 编程工具，支持 Claude Code、Codex 和 Gemini CLI";
 var author = "long.zhu";
 var license = "MIT";
@@ -844,7 +844,9 @@ const credentialsSchema = z.object({
   encryption: z.object({
     publicKey: z.string().base64(),
     machineKey: z.string().base64()
-  }).nullish()
+  }).nullish(),
+  aesKey: z.string().nullish()
+  // AES shared key for enterprise comm (hex), from login response
 });
 async function readCredentials() {
   if (!existsSync(configuration.privateKeyFile)) {
@@ -857,6 +859,7 @@ async function readCredentials() {
       return {
         token: credentials.token,
         signing: credentials.signing ?? null,
+        aesKey: credentials.aesKey ?? void 0,
         encryption: {
           type: "legacy",
           secret: new Uint8Array(Buffer.from(credentials.secret, "base64"))
@@ -866,6 +869,7 @@ async function readCredentials() {
       return {
         token: credentials.token,
         signing: credentials.signing ?? null,
+        aesKey: credentials.aesKey ?? void 0,
         encryption: {
           type: "dataKey",
           publicKey: new Uint8Array(Buffer.from(credentials.encryption.publicKey, "base64")),
@@ -885,7 +889,8 @@ async function writeCredentialsLegacy(credentials) {
   await writeFile(configuration.privateKeyFile, JSON.stringify({
     secret: encodeBase64(credentials.secret),
     token: credentials.token,
-    signing: credentials.signing
+    signing: credentials.signing,
+    aesKey: credentials.aesKey
   }, null, 2));
 }
 async function writeCredentialsDataKey(credentials) {
@@ -895,7 +900,8 @@ async function writeCredentialsDataKey(credentials) {
   await writeFile(configuration.privateKeyFile, JSON.stringify({
     encryption: { publicKey: encodeBase64(credentials.publicKey), machineKey: encodeBase64(credentials.machineKey) },
     token: credentials.token,
-    signing: credentials.signing
+    signing: credentials.signing,
+    aesKey: credentials.aesKey
   }, null, 2));
 }
 async function clearCredentials() {
@@ -1282,11 +1288,18 @@ const ProtocolV3DescriptorSchema = z$1.object({
 const ProtocolV3CapabilitiesResponseSchema = z$1.object({
   protocol: ProtocolV3DescriptorSchema
 });
-const SessionMessageContentSchema = z$1.object({
-  c: z$1.string(),
-  // Base64 encoded encrypted content
-  t: z$1.literal("encrypted")
-});
+const SessionMessageContentSchema = z$1.union([
+  z$1.object({
+    t: z$1.literal("encrypted"),
+    c: z$1.string()
+    // Base64 encoded encrypted content
+  }),
+  z$1.object({
+    t: z$1.literal("plaintext"),
+    p: z$1.string()
+    // Plaintext JSON string (AES mode, server pre-decrypted)
+  })
+]);
 const NewSessionBodySchema = z$1.object({
   t: z$1.literal("new-session"),
   id: z$1.string(),
@@ -1523,7 +1536,7 @@ const AgentMessageSchema = z$1.object({
   }),
   meta: MessageMetaSchema.optional()
 });
-z$1.union([UserMessageSchema, AgentMessageSchema]);
+const MessageContentSchema = z$1.union([UserMessageSchema, AgentMessageSchema]);
 
 function buildSessionRuntimeIndex(metadata) {
   if (!metadata) {
@@ -2426,20 +2439,23 @@ async function ensureSigningCredentials(credentials, opts = {}) {
     const upgradedCredentials = {
       ...credentials,
       token: response.data.token,
-      signing: response.data.signing
+      signing: response.data.signing,
+      aesKey: response.data.aesKey ?? credentials.aesKey
     };
     if (upgradedCredentials.encryption.type === "legacy") {
       await writeCredentialsLegacy({
         secret: upgradedCredentials.encryption.secret,
         token: upgradedCredentials.token,
-        signing: upgradedCredentials.signing
+        signing: upgradedCredentials.signing,
+        aesKey: upgradedCredentials.aesKey
       });
     } else {
       await writeCredentialsDataKey({
         publicKey: upgradedCredentials.encryption.publicKey,
         machineKey: upgradedCredentials.encryption.machineKey,
         token: upgradedCredentials.token,
-        signing: upgradedCredentials.signing
+        signing: upgradedCredentials.signing,
+        aesKey: upgradedCredentials.aesKey
       });
     }
     logger.debug("[AUTH] Signing credentials bootstrapped successfully");
@@ -3099,6 +3115,17 @@ class ApiSessionClient extends EventEmitter {
       logger.debug("[SOCKET] [UPDATE] [ERROR] No body in update!");
       return;
     }
+    if (data.body.t === "new-message" && data.body.message.content.t === "plaintext") {
+      const messageSeq = typeof data.body.message.seq === "number" ? data.body.message.seq : null;
+      if (messageSeq !== null && messageSeq <= this.lastChangeSeq) {
+        return;
+      }
+      this.dispatchPlaintextSessionMessage(data.body.message.content.p);
+      if (messageSeq !== null) {
+        this.lastChangeSeq = Math.max(this.lastChangeSeq, messageSeq);
+      }
+      return;
+    }
     if (data.body.t === "new-message" && data.body.message.content.t === "encrypted") {
       const messageSeq = typeof data.body.message.seq === "number" ? data.body.message.seq : null;
       if (messageSeq !== null && messageSeq <= this.lastChangeSeq) {
@@ -3165,6 +3192,32 @@ class ApiSessionClient extends EventEmitter {
     }
     this.emit("message", parsedBody);
   }
+  /**
+   * Dispatch a plaintext session message (AES mode: server already decrypted).
+   * The plaintext JSON is parsed and validated as a UserMessage.
+   */
+  dispatchPlaintextSessionMessage(plaintextJson) {
+    logger.debug("[SOCKET] [UPDATE] [PLAINTEXT] Received plaintext message");
+    let parsedBody = null;
+    try {
+      parsedBody = JSON.parse(plaintextJson);
+    } catch {
+      logger.debug("[SOCKET] [UPDATE] [PLAINTEXT] Failed to parse plaintext JSON, ignoring");
+      return;
+    }
+    const userResult = UserMessageSchema.safeParse(parsedBody);
+    if (userResult.success) {
+      this.maybeAutoAcknowledgeHappyOrgDispatch(userResult.data);
+      if (this.pendingMessageCallback) {
+        this.pendingMessageCallback(userResult.data);
+      } else {
+        this.pendingMessages.push(userResult.data);
+      }
+      return;
+    }
+    logger.debug("[SOCKET] [UPDATE] [PLAINTEXT] Message did not match UserMessageSchema, emitting generic event");
+    this.emit("message", parsedBody);
+  }
   maybeAutoAcknowledgeHappyOrgDispatch(message) {
     const candidate = this.resolveHappyOrgDispatchBusinessAckCandidate(message);
     if (!candidate) {
@@ -3472,7 +3525,9 @@ class ApiSessionClient extends EventEmitter {
       if (message.seq <= this.lastChangeSeq) {
         continue;
       }
-      if (message.content.t === "encrypted") {
+      if (message.content.t === "plaintext") {
+        this.dispatchPlaintextSessionMessage(message.content.p);
+      } else if (message.content.t === "encrypted") {
         this.dispatchEncryptedSessionMessage(message.content.c);
       }
       this.lastChangeSeq = Math.max(this.lastChangeSeq, message.seq);
@@ -3503,7 +3558,9 @@ class ApiSessionClient extends EventEmitter {
         const message = payload.message;
         if (message && typeof message === "object") {
           const content = message.content;
-          if (content && typeof content === "object" && content.t === "encrypted" && typeof content.c === "string") {
+          if (content && typeof content === "object" && content.t === "plaintext" && typeof content.p === "string") {
+            this.dispatchPlaintextSessionMessage(content.p);
+          } else if (content && typeof content === "object" && content.t === "encrypted" && typeof content.c === "string") {
             this.dispatchEncryptedSessionMessage(content.c);
           }
         }
@@ -5060,4 +5117,4 @@ var api = /*#__PURE__*/Object.freeze({
   ApiClient: ApiClient
 });
 
-export { ApiClient as A, acquireDaemonLock as B, writeDaemonState as C, releaseDaemonLock as D, validateProfileForAgent as E, getProfileEnvironmentVariables as F, clearCredentials as G, HAPPY_ORG_TURN_REPORT_TAG as H, clearMachineId as I, HeadTailPreviewBuffer as J, getLatestDaemonLog as K, persistence as L, api as M, ApiSessionClient as a, connectionState as b, configuration as c, HAPPY_ORG_SUMMARY_MAX_LENGTH as d, HAPPY_ORG_REPEAT_THRESHOLD as e, backoff as f, delay as g, AsyncLock as h, isAuthenticationRequiredError as i, encodeBase64 as j, readCredentials as k, logger as l, ensureSigningCredentials as m, encodeBase64Url as n, buildClientHeaders as o, preserveSessionRuntimeMetadata as p, decodeBase64 as q, readSettings as r, startOfflineReconnection as s, writeCredentialsDataKey as t, updateSettings as u, readDaemonState as v, writeCredentialsLegacy as w, HAPPY_CLOUD_DAEMON_PORT as x, clearDaemonState as y, packageJson as z };
+export { ApiClient as A, acquireDaemonLock as B, writeDaemonState as C, releaseDaemonLock as D, validateProfileForAgent as E, getProfileEnvironmentVariables as F, clearCredentials as G, HAPPY_ORG_TURN_REPORT_TAG as H, clearMachineId as I, buildSocketAuth as J, encrypt as K, HeadTailPreviewBuffer as L, MessageContentSchema as M, getLatestDaemonLog as N, persistence as O, api as P, ApiSessionClient as a, connectionState as b, configuration as c, HAPPY_ORG_SUMMARY_MAX_LENGTH as d, HAPPY_ORG_REPEAT_THRESHOLD as e, backoff as f, delay as g, AsyncLock as h, isAuthenticationRequiredError as i, encodeBase64 as j, readCredentials as k, logger as l, ensureSigningCredentials as m, encodeBase64Url as n, buildClientHeaders as o, preserveSessionRuntimeMetadata as p, decodeBase64 as q, readSettings as r, startOfflineReconnection as s, writeCredentialsDataKey as t, updateSettings as u, readDaemonState as v, writeCredentialsLegacy as w, HAPPY_CLOUD_DAEMON_PORT as x, clearDaemonState as y, packageJson as z };

package/dist/{api-8xtJZeXZ.cjs → api-CusZs0lm.cjs}

@@ -38,7 +38,7 @@ function _interopNamespaceDefault(e) {
 var z__namespace = /*#__PURE__*/_interopNamespaceDefault(z);
 
 var name = "happy-imou-cloud";
-var version = "2.1.21";
+var version = "2.1.23";
 var description = "hicloud - Imou 企业定制版。关键是 happy！移动端远程 AI 编程工具，支持 Claude Code、Codex 和 Gemini CLI";
 var author = "long.zhu";
 var license = "MIT";
@@ -864,7 +864,9 @@ const credentialsSchema = z__namespace.object({
   encryption: z__namespace.object({
     publicKey: z__namespace.string().base64(),
     machineKey: z__namespace.string().base64()
-  }).nullish()
+  }).nullish(),
+  aesKey: z__namespace.string().nullish()
+  // AES shared key for enterprise comm (hex), from login response
 });
 async function readCredentials() {
   if (!fs.existsSync(configuration.privateKeyFile)) {
@@ -877,6 +879,7 @@ async function readCredentials() {
       return {
         token: credentials.token,
         signing: credentials.signing ?? null,
+        aesKey: credentials.aesKey ?? void 0,
         encryption: {
           type: "legacy",
           secret: new Uint8Array(Buffer.from(credentials.secret, "base64"))
@@ -886,6 +889,7 @@ async function readCredentials() {
       return {
         token: credentials.token,
         signing: credentials.signing ?? null,
+        aesKey: credentials.aesKey ?? void 0,
         encryption: {
           type: "dataKey",
           publicKey: new Uint8Array(Buffer.from(credentials.encryption.publicKey, "base64")),
@@ -905,7 +909,8 @@ async function writeCredentialsLegacy(credentials) {
   await promises.writeFile(configuration.privateKeyFile, JSON.stringify({
     secret: encodeBase64(credentials.secret),
     token: credentials.token,
-    signing: credentials.signing
+    signing: credentials.signing,
+    aesKey: credentials.aesKey
   }, null, 2));
 }
 async function writeCredentialsDataKey(credentials) {
@@ -915,7 +920,8 @@ async function writeCredentialsDataKey(credentials) {
   await promises.writeFile(configuration.privateKeyFile, JSON.stringify({
     encryption: { publicKey: encodeBase64(credentials.publicKey), machineKey: encodeBase64(credentials.machineKey) },
     token: credentials.token,
-    signing: credentials.signing
+    signing: credentials.signing,
+    aesKey: credentials.aesKey
   }, null, 2));
 }
 async function clearCredentials() {
@@ -1302,11 +1308,18 @@ const ProtocolV3DescriptorSchema = z.z.object({
 const ProtocolV3CapabilitiesResponseSchema = z.z.object({
   protocol: ProtocolV3DescriptorSchema
 });
-const SessionMessageContentSchema = z.z.object({
-  c: z.z.string(),
-  // Base64 encoded encrypted content
-  t: z.z.literal("encrypted")
-});
+const SessionMessageContentSchema = z.z.union([
+  z.z.object({
+    t: z.z.literal("encrypted"),
+    c: z.z.string()
+    // Base64 encoded encrypted content
+  }),
+  z.z.object({
+    t: z.z.literal("plaintext"),
+    p: z.z.string()
+    // Plaintext JSON string (AES mode, server pre-decrypted)
+  })
+]);
 const NewSessionBodySchema = z.z.object({
   t: z.z.literal("new-session"),
   id: z.z.string(),
@@ -1543,7 +1556,7 @@ const AgentMessageSchema = z.z.object({
   }),
   meta: MessageMetaSchema.optional()
 });
-z.z.union([UserMessageSchema, AgentMessageSchema]);
+const MessageContentSchema = z.z.union([UserMessageSchema, AgentMessageSchema]);
 
 function buildSessionRuntimeIndex(metadata) {
   if (!metadata) {
@@ -2446,20 +2459,23 @@ async function ensureSigningCredentials(credentials, opts = {}) {
     const upgradedCredentials = {
       ...credentials,
       token: response.data.token,
-      signing: response.data.signing
+      signing: response.data.signing,
+      aesKey: response.data.aesKey ?? credentials.aesKey
     };
     if (upgradedCredentials.encryption.type === "legacy") {
       await writeCredentialsLegacy({
         secret: upgradedCredentials.encryption.secret,
         token: upgradedCredentials.token,
-        signing: upgradedCredentials.signing
+        signing: upgradedCredentials.signing,
+        aesKey: upgradedCredentials.aesKey
       });
     } else {
       await writeCredentialsDataKey({
         publicKey: upgradedCredentials.encryption.publicKey,
         machineKey: upgradedCredentials.encryption.machineKey,
         token: upgradedCredentials.token,
-        signing: upgradedCredentials.signing
+        signing: upgradedCredentials.signing,
+        aesKey: upgradedCredentials.aesKey
       });
     }
     logger.debug("[AUTH] Signing credentials bootstrapped successfully");
@@ -3119,6 +3135,17 @@ class ApiSessionClient extends node_events.EventEmitter {
       logger.debug("[SOCKET] [UPDATE] [ERROR] No body in update!");
       return;
     }
+    if (data.body.t === "new-message" && data.body.message.content.t === "plaintext") {
+      const messageSeq = typeof data.body.message.seq === "number" ? data.body.message.seq : null;
+      if (messageSeq !== null && messageSeq <= this.lastChangeSeq) {
+        return;
+      }
+      this.dispatchPlaintextSessionMessage(data.body.message.content.p);
+      if (messageSeq !== null) {
+        this.lastChangeSeq = Math.max(this.lastChangeSeq, messageSeq);
+      }
+      return;
+    }
     if (data.body.t === "new-message" && data.body.message.content.t === "encrypted") {
       const messageSeq = typeof data.body.message.seq === "number" ? data.body.message.seq : null;
       if (messageSeq !== null && messageSeq <= this.lastChangeSeq) {
@@ -3185,6 +3212,32 @@ class ApiSessionClient extends node_events.EventEmitter {
     }
     this.emit("message", parsedBody);
   }
+  /**
+   * Dispatch a plaintext session message (AES mode: server already decrypted).
+   * The plaintext JSON is parsed and validated as a UserMessage.
+   */
+  dispatchPlaintextSessionMessage(plaintextJson) {
+    logger.debug("[SOCKET] [UPDATE] [PLAINTEXT] Received plaintext message");
+    let parsedBody = null;
+    try {
+      parsedBody = JSON.parse(plaintextJson);
+    } catch {
+      logger.debug("[SOCKET] [UPDATE] [PLAINTEXT] Failed to parse plaintext JSON, ignoring");
+      return;
+    }
+    const userResult = UserMessageSchema.safeParse(parsedBody);
+    if (userResult.success) {
+      this.maybeAutoAcknowledgeHappyOrgDispatch(userResult.data);
+      if (this.pendingMessageCallback) {
+        this.pendingMessageCallback(userResult.data);
+      } else {
+        this.pendingMessages.push(userResult.data);
+      }
+      return;
+    }
+    logger.debug("[SOCKET] [UPDATE] [PLAINTEXT] Message did not match UserMessageSchema, emitting generic event");
+    this.emit("message", parsedBody);
+  }
   maybeAutoAcknowledgeHappyOrgDispatch(message) {
     const candidate = this.resolveHappyOrgDispatchBusinessAckCandidate(message);
     if (!candidate) {
@@ -3492,7 +3545,9 @@ class ApiSessionClient extends node_events.EventEmitter {
       if (message.seq <= this.lastChangeSeq) {
         continue;
       }
-      if (message.content.t === "encrypted") {
+      if (message.content.t === "plaintext") {
+        this.dispatchPlaintextSessionMessage(message.content.p);
+      } else if (message.content.t === "encrypted") {
         this.dispatchEncryptedSessionMessage(message.content.c);
       }
       this.lastChangeSeq = Math.max(this.lastChangeSeq, message.seq);
@@ -3523,7 +3578,9 @@ class ApiSessionClient extends node_events.EventEmitter {
         const message = payload.message;
         if (message && typeof message === "object") {
           const content = message.content;
-          if (content && typeof content === "object" && content.t === "encrypted" && typeof content.c === "string") {
+          if (content && typeof content === "object" && content.t === "plaintext" && typeof content.p === "string") {
+            this.dispatchPlaintextSessionMessage(content.p);
+          } else if (content && typeof content === "object" && content.t === "encrypted" && typeof content.c === "string") {
             this.dispatchEncryptedSessionMessage(content.c);
           }
         }
@@ -5088,10 +5145,12 @@ exports.HAPPY_ORG_REPEAT_THRESHOLD = HAPPY_ORG_REPEAT_THRESHOLD;
 exports.HAPPY_ORG_SUMMARY_MAX_LENGTH = HAPPY_ORG_SUMMARY_MAX_LENGTH;
 exports.HAPPY_ORG_TURN_REPORT_TAG = HAPPY_ORG_TURN_REPORT_TAG;
 exports.HeadTailPreviewBuffer = HeadTailPreviewBuffer;
+exports.MessageContentSchema = MessageContentSchema;
 exports.acquireDaemonLock = acquireDaemonLock;
 exports.api = api;
 exports.backoff = backoff;
 exports.buildClientHeaders = buildClientHeaders;
+exports.buildSocketAuth = buildSocketAuth;
 exports.clearCredentials = clearCredentials;
 exports.clearDaemonState = clearDaemonState;
 exports.clearMachineId = clearMachineId;
@@ -5101,6 +5160,7 @@ exports.decodeBase64 = decodeBase64;
 exports.delay = delay;
 exports.encodeBase64 = encodeBase64;
 exports.encodeBase64Url = encodeBase64Url;
+exports.encrypt = encrypt;
 exports.ensureSigningCredentials = ensureSigningCredentials;
 exports.getLatestDaemonLog = getLatestDaemonLog;
 exports.getProfileEnvironmentVariables = getProfileEnvironmentVariables;

package/dist/{command-C6injNJE.mjs → command-B7O2Hn-D.mjs}

@@ -1,6 +1,6 @@
-import { c as createDefaultRuntimeShell } from './index-krVv4CWK.mjs';
+import { c as createDefaultRuntimeShell } from './index-CFLvb1x1.mjs';
 import 'chalk';
-import './api-DB30ctmX.mjs';
+import './api-CDC4ZRT7.mjs';
 import 'axios';
 import 'fs';
 import 'node:fs';

package/dist/{command-79M8Bz4I.cjs → command-Cp_bgCOD.cjs}

@@ -1,8 +1,8 @@
 'use strict';
 
-var index = require('./index-D4A092LJ.cjs');
+var index = require('./index-yX0QThPc.cjs');
 require('chalk');
-require('./api-8xtJZeXZ.cjs');
+require('./api-CusZs0lm.cjs');
 require('axios');
 require('fs');
 require('node:fs');