hydro-ai-helper 1.8.5

package/api/report.ts

@@ -0,0 +1,242 @@
+import type { VercelRequest, VercelResponse } from '@vercel/node';
+import {
+  ensurePluginStatsIndexes,
+  getDb,
+  PLUGIN_STATS_COLLECTION
+} from '../lib/mongodb';
+
+interface HeartbeatPayload {
+  instance_id: string;
+  event: 'install' | 'heartbeat';
+  version: string;
+  installed_at: string;
+  first_used_at?: string;
+  stats: {
+    active_users_7d: number;
+    total_conversations: number;
+    last_used_at?: string;
+  };
+  domain_hash: string;
+  timestamp: string;
+}
+
+interface ParsedPayload {
+  instanceId: string;
+  event: 'install' | 'heartbeat';
+  version: string;
+  installedAt: Date;
+  firstUsedAt?: Date;
+  lastReportAt: Date;
+  stats: {
+    activeUsers7d: number;
+    totalConversations: number;
+    lastUsedAt?: Date;
+  };
+  domainHash: string;
+}
+
+class HttpError extends Error {
+  status: number;
+
+  constructor(status: number, message: string) {
+    super(message);
+    this.status = status;
+  }
+}
+
+function isRecord(value: unknown): value is Record<string, unknown> {
+  return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+
+async function readJsonBody(
+  req: VercelRequest
+): Promise<Record<string, unknown>> {
+  if (isRecord(req.body)) {
+    return req.body;
+  }
+
+  if (typeof req.body === 'string') {
+    try {
+      return JSON.parse(req.body);
+    } catch (error) {
+      throw new HttpError(400, 'Invalid JSON body');
+    }
+  }
+
+  if (Buffer.isBuffer(req.body)) {
+    try {
+      return JSON.parse(req.body.toString('utf8'));
+    } catch (error) {
+      throw new HttpError(400, 'Invalid JSON body');
+    }
+  }
+
+  // Fallback for runtimes that do not pre-parse the body.
+  const raw = await new Promise<string>((resolve, reject) => {
+    let data = '';
+    req.on('data', (chunk) => {
+      data += chunk;
+    });
+    req.on('end', () => resolve(data));
+    req.on('error', reject);
+  });
+
+  if (!raw) {
+    return {};
+  }
+
+  try {
+    return JSON.parse(raw);
+  } catch (error) {
+    throw new HttpError(400, 'Invalid JSON body');
+  }
+}
+
+function requireString(value: unknown, field: string): string {
+  if (typeof value !== 'string' || value.trim() === '') {
+    throw new HttpError(400, `${field} is required`);
+  }
+  return value;
+}
+
+function requireNumber(value: unknown, field: string): number {
+  if (typeof value !== 'number' || !Number.isFinite(value)) {
+    throw new HttpError(400, `${field} must be a number`);
+  }
+  return value;
+}
+
+function parseDate(
+  value: unknown,
+  field: string,
+  required: boolean
+): Date | undefined {
+  if (value === undefined || value === null || value === '') {
+    if (required) {
+      throw new HttpError(400, `${field} is required`);
+    }
+    return undefined;
+  }
+
+  const date = new Date(String(value));
+  if (Number.isNaN(date.getTime())) {
+    throw new HttpError(400, `${field} is invalid`);
+  }
+  return date;
+}
+
+function parsePayload(body: Record<string, unknown>): ParsedPayload {
+  const payload = body as Partial<HeartbeatPayload>;
+  const instanceId = requireString(payload.instance_id, 'instance_id');
+  const eventRaw = requireString(payload.event, 'event');
+  if (eventRaw !== 'install' && eventRaw !== 'heartbeat') {
+    throw new HttpError(400, 'event must be install or heartbeat');
+  }
+  const version = requireString(payload.version, 'version');
+  const installedAt = parseDate(payload.installed_at, 'installed_at', true);
+  const firstUsedAt = parseDate(payload.first_used_at, 'first_used_at', false);
+  const lastReportAt = parseDate(payload.timestamp, 'timestamp', true);
+  const domainHash = requireString(payload.domain_hash, 'domain_hash');
+
+  if (!isRecord(payload.stats)) {
+    throw new HttpError(400, 'stats is required');
+  }
+
+  const activeUsers7d = requireNumber(
+    payload.stats.active_users_7d,
+    'stats.active_users_7d'
+  );
+  const totalConversations = requireNumber(
+    payload.stats.total_conversations,
+    'stats.total_conversations'
+  );
+  const lastUsedAt = parseDate(
+    payload.stats.last_used_at,
+    'stats.last_used_at',
+    false
+  );
+
+  const stats: ParsedPayload['stats'] = {
+    activeUsers7d,
+    totalConversations
+  };
+
+  if (lastUsedAt) {
+    stats.lastUsedAt = lastUsedAt;
+  }
+
+  return {
+    instanceId,
+    event: eventRaw as 'install' | 'heartbeat',
+    version,
+    installedAt: installedAt as Date,
+    firstUsedAt,
+    lastReportAt: lastReportAt as Date,
+    stats,
+    domainHash
+  };
+}
+
+export default async function handler(
+  req: VercelRequest,
+  res: VercelResponse
+): Promise<void> {
+  if (req.method !== 'POST') {
+    res.setHeader('Allow', 'POST');
+    res.status(405).json({ success: false, error: 'Method Not Allowed' });
+    return;
+  }
+
+  try {
+    const body = await readJsonBody(req);
+    const payload = parsePayload(body);
+    const db = await getDb();
+
+    // Ensure TTL index exists before writing new reports.
+    await ensurePluginStatsIndexes(db);
+
+    const collection = db.collection(PLUGIN_STATS_COLLECTION);
+    const stats = payload.stats;
+
+    const setFields: Record<string, unknown> = {
+      event: payload.event,
+      version: payload.version,
+      lastReportAt: payload.lastReportAt,
+      stats: {
+        activeUsers7d: stats.activeUsers7d,
+        totalConversations: stats.totalConversations,
+        ...(stats.lastUsedAt ? { lastUsedAt: stats.lastUsedAt } : {})
+      },
+      domainHash: payload.domainHash
+    };
+
+    if (payload.firstUsedAt) {
+      setFields.firstUsedAt = payload.firstUsedAt;
+    }
+
+    // Upsert by instance id to deduplicate installations.
+    await collection.updateOne(
+      { _id: payload.instanceId },
+      {
+        $set: setFields,
+        $setOnInsert: {
+          installedAt: payload.installedAt
+        }
+      },
+      { upsert: true }
+    );
+
+    console.info('[report] upserted', {
+      instanceId: payload.instanceId,
+      event: payload.event
+    });
+
+    res.status(200).json({ success: true });
+  } catch (error) {
+    const status = error instanceof HttpError ? error.status : 500;
+    const message =
+      error instanceof HttpError ? error.message : 'Internal Server Error';
+    console.error('[report] error', error);
+    res.status(status).json({ success: false, error: message });
+  }
+}

package/dist/__tests__/__mocks__/hydrooj.js

@@ -0,0 +1,29 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Schema = exports.db = exports.PRIV = exports.Handler = void 0;
+exports.definePlugin = definePlugin;
+class Handler {
+    constructor() {
+        this.ctx = {};
+        this.request = {};
+        this.response = {};
+    }
+}
+exports.Handler = Handler;
+exports.PRIV = {
+    PRIV_NONE: 0,
+    PRIV_USER_PROFILE: 1,
+    PRIV_EDIT_SYSTEM: 2
+};
+exports.db = {
+    collection: jest.fn(() => ({
+        find: jest.fn().mockReturnThis(),
+        findOne: jest.fn(),
+        toArray: jest.fn().mockResolvedValue([])
+    }))
+};
+function definePlugin(options) {
+    return options;
+}
+exports.Schema = {};
+//# sourceMappingURL=hydrooj.js.map

package/dist/__tests__/__mocks__/hydrooj.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hydrooj.js","sourceRoot":"","sources":["../../../src/__tests__/__mocks__/hydrooj.ts"],"names":[],"mappings":";;;AAsBA,oCAEC;AAxBD,MAAa,OAAO;IAApB;QACE,QAAG,GAAQ,EAAE,CAAC;QACd,YAAO,GAAQ,EAAE,CAAC;QAClB,aAAQ,GAAQ,EAAE,CAAC;IAGrB,CAAC;CAAA;AAND,0BAMC;AAEY,QAAA,IAAI,GAAG;IAClB,SAAS,EAAE,CAAC;IACZ,iBAAiB,EAAE,CAAC;IACpB,gBAAgB,EAAE,CAAC;CACpB,CAAC;AAEW,QAAA,EAAE,GAAG;IAChB,UAAU,EAAE,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC;QACzB,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,cAAc,EAAE;QAChC,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE;QAClB,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC;KACzC,CAAC,CAAC;CACJ,CAAC;AAEF,SAAgB,YAAY,CAAC,OAAY;IACvC,OAAO,OAAO,CAAC;AACjB,CAAC;AAEY,QAAA,MAAM,GAAG,EAAE,CAAC"}

package/dist/constants/jailbreakRules.js

@@ -0,0 +1,29 @@
+"use strict";
+/**
+ * 系统内置的越狱关键词/正则
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getBuiltinJailbreakPatterns = exports.builtinJailbreakPatternSources = void 0;
+const BUILTIN_PATTERNS = [
+    /忽略(之前|上文|所有).*提示/gi,
+    /ignore (all|previous|earlier) (instructions|messages|prompts)/gi,
+    /(从现在开始|现在起?).*(你是|扮演).*(猫娘|女仆|主人|角色|人格)/gi,
+    /重置(设定|設定|系统|system)/gi,
+    /system prompt/gi,
+    /无条件服从/gi,
+    /覆盖(系统|所有)提示/gi,
+    /现在你是.*系统/gi,
+    /(前面|上述|上面).*(规则|说明|内容).*(视为|看作).*(参考|示例|背景)/gi,
+    /(这些|那些).*(规则|要求).*(只是|仅仅是).*(参考|建议)/gi,
+    /(后续|接下来|在.*回答中).*(遇到|如果).*(冲突|不一致).*(优先|首先).*(执行|遵守).*(当前|本段|下面|以下).*(规则|内容)/gi,
+    /如果.*(冲突|矛盾).*(请|就).*(以.*(为准|为先|为主))/gi,
+    /(满足|服从).*(用户|我).*(最新|当前).*(请求|需求).*(视为|看作).*(最高优先级|第一优先)/gi,
+    /(treat|treated)\s+as\s+(reference|background)(\s+only)?/gi,
+    /(this|the following).*(takes?|take)\s+precedence/gi,
+    /in\s+case\s+of\s+conflict.*(follow|use)\s+(this|the following)/gi,
+    /user('?s)?\s+latest\s+(request|instruction).*(highest\s+priority)/gi
+];
+exports.builtinJailbreakPatternSources = BUILTIN_PATTERNS.map((pattern) => pattern.source);
+const getBuiltinJailbreakPatterns = () => BUILTIN_PATTERNS.map((pattern) => new RegExp(pattern.source, pattern.flags));
+exports.getBuiltinJailbreakPatterns = getBuiltinJailbreakPatterns;
+//# sourceMappingURL=jailbreakRules.js.map

package/dist/constants/jailbreakRules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jailbreakRules.js","sourceRoot":"","sources":["../../src/constants/jailbreakRules.ts"],"names":[],"mappings":";AAAA;;GAEG;;;AAEH,MAAM,gBAAgB,GAAa;IACjC,oBAAoB;IACpB,iEAAiE;IACjE,2CAA2C;IAC3C,uBAAuB;IACvB,iBAAiB;IACjB,SAAS;IACT,eAAe;IACf,YAAY;IACZ,+CAA+C;IAC/C,uCAAuC;IACvC,gFAAgF;IAChF,uCAAuC;IACvC,4DAA4D;IAC5D,2DAA2D;IAC3D,oDAAoD;IACpD,kEAAkE;IAClE,qEAAqE;CACtE,CAAC;AAEW,QAAA,8BAA8B,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;AAEzF,MAAM,2BAA2B,GAAG,GAAa,EAAE,CACxD,gBAAgB,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;AADlE,QAAA,2BAA2B,+BACuC"}

package/dist/constants/permissions.js

@@ -0,0 +1,42 @@
+"use strict";
+/**
+ * Permissions Constants - 权限常量定义
+ *
+ * 定义 AI Helper 插件使用的权限常量
+ * 与 HydroOJ 权限系统集成
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PublicPriv = exports.UserPriv = exports.SystemAdminPriv = exports.DomainAdminPerm = void 0;
+exports.hasDomainAdminPerm = hasDomainAdminPerm;
+const hydrooj_1 = require("hydrooj");
+/**
+ * 域管理员权限位 (从 HydroOJ builtin.ts 复制)
+ * PERM_MOD_BADGE = 1n << 57n
+ * 表示域内管理员权限（可以管理用户徽章）
+ * 这是一个适中的域管理权限级别
+ */
+exports.DomainAdminPerm = 1n << 57n;
+/**
+ * 系统管理员 Handler 权限
+ * 用于需要系统级别管理权限的操作（如全局配置、系统设置）
+ */
+exports.SystemAdminPriv = hydrooj_1.PRIV.PRIV_EDIT_SYSTEM;
+/**
+ * 普通用户权限
+ * 用于只需要登录用户权限的操作（如学生使用 AI 助手）
+ */
+exports.UserPriv = hydrooj_1.PRIV.PRIV_USER_PROFILE;
+/**
+ * 公开访问权限
+ * 用于不需要任何权限的操作（如测试接口）
+ */
+exports.PublicPriv = hydrooj_1.PRIV.PRIV_NONE;
+/**
+ * 检查用户是否有域管理权限
+ * @param userPerm 用户在当前域的权限位
+ * @returns 是否有域管理权限
+ */
+function hasDomainAdminPerm(userPerm) {
+    return (userPerm & exports.DomainAdminPerm) === exports.DomainAdminPerm;
+}
+//# sourceMappingURL=permissions.js.map

package/dist/constants/permissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.js","sourceRoot":"","sources":["../../src/constants/permissions.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAmCH,gDAEC;AAnCD,qCAA+B;AAE/B;;;;;GAKG;AACU,QAAA,eAAe,GAAG,EAAE,IAAI,GAAG,CAAC;AAEzC;;;GAGG;AACU,QAAA,eAAe,GAAG,cAAI,CAAC,gBAAgB,CAAC;AAErD;;;GAGG;AACU,QAAA,QAAQ,GAAG,cAAI,CAAC,iBAAiB,CAAC;AAE/C;;;GAGG;AACU,QAAA,UAAU,GAAG,cAAI,CAAC,SAAS,CAAC;AAEzC;;;;GAIG;AACH,SAAgB,kBAAkB,CAAC,QAAgB;IACjD,OAAO,CAAC,QAAQ,GAAG,uBAAe,CAAC,KAAK,uBAAe,CAAC;AAC1D,CAAC"}