luckytri 1.0.0 → 1.0.2

package/server/plugins/manifest.js

@@ -1,201 +1,201 @@
-import { readFileSync } from "node:fs";
-import { join, normalize, sep } from "node:path";
-import { VERSION } from "../version.js";
-import { API_VERSION, permissionKnown } from "./permissions.js";
-
-export const RESERVED_IDS = new Set([
-  "onebot",
-  "qqbot",
-  "preview",
-  "core",
-  "mind",
-  "luckytri",
-]);
-const ID = /^[a-z][a-z0-9-]{1,39}$/;
-const SETTING_KEY = /^[a-z][A-Za-z0-9-]{0,39}$/;
-const SEMVER =
-  /^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-[0-9A-Za-z.-]+)?(?:\+[0-9A-Za-z.-]+)?$/;
-const HOST = /^[a-z0-9.-]+$/i;
-
-export function parseVersion(value) {
-  const match = SEMVER.exec(String(value || ""));
-  if (!match) return null;
-  return match.slice(1, 4).map(Number);
-}
-
-export function satisfies(range, version) {
-  const have = parseVersion(version);
-  if (!have || typeof range !== "string") return false;
-  const parts = range.trim().split(/\s+/);
-  return parts.every((part) => {
-    const match = /^(>=|>|<=|<)?(\d+\.\d+\.\d+)$/.exec(part);
-    if (!match) return false;
-    const op = match[1] || "=";
-    const want = parseVersion(match[2]);
-    const cmp = have[0] - want[0] || have[1] - want[1] || have[2] - want[2];
-    if (op === ">=") return cmp >= 0;
-    if (op === ">") return cmp > 0;
-    if (op === "<=") return cmp <= 0;
-    if (op === "<") return cmp < 0;
-    return cmp === 0;
-  });
-}
-
-export function apiCompatible(wanted, host = API_VERSION) {
-  const plugin = parseVersion(`${wanted}.0`);
-  const current = parseVersion(`${host}.0`);
-  if (!plugin || !current) return false;
-  return plugin[0] === current[0] && plugin[1] <= current[1];
-}
-
-function setting(field) {
-  const types = [
-    "text",
-    "secret",
-    "number",
-    "boolean",
-    "select",
-    "textarea",
-    "urls",
-  ];
-  if (
-    !field ||
-    !SETTING_KEY.test(field.key || "") ||
-    !types.includes(field.type)
-  )
-    throw Error("插件设置项无效");
-  if (typeof field.label !== "string" || !field.label.trim())
-    throw Error("插件设置项无效");
-  if (field.type === "select" && !Array.isArray(field.options))
-    throw Error("插件设置项无效");
-  return {
-    key: field.key,
-    type: field.type,
-    label: String(field.label).slice(0, 80),
-    required: !!field.required,
-    default: field.default ?? (field.type === "boolean" ? false : ""),
-    ...(field.allowNetwork ? { allowNetwork: true } : {}),
-    ...(Array.isArray(field.options)
-      ? {
-          options: field.options.slice(0, 20).map((item) => ({
-            value: String(item.value ?? item).slice(0, 80),
-            label: String(item.label ?? item.value ?? item).slice(0, 80),
-          })),
-        }
-      : {}),
-  };
-}
-
-function named(list, pattern, map) {
-  if (!Array.isArray(list)) return [];
-  return list.map((item) => {
-    const value = map(item);
-    if (!pattern.test(value.name || value.kind || value.type || ""))
-      throw Error("插件贡献的名字无效");
-    return value;
-  });
-}
-
-// A manifest is data. Anything that does not fit is refused before the
-// plugin process is ever started.
-export function readManifest(dir) {
-  let raw;
-  try {
-    raw = JSON.parse(readFileSync(join(dir, "luckytri-plugin.json"), "utf8"));
-  } catch {
-    throw Error("插件清单无法读取");
-  }
-  return validateManifest(raw);
-}
-
-export function validateManifest(raw, version = VERSION) {
-  if (!raw || typeof raw !== "object" || Array.isArray(raw))
-    throw Error("插件清单无效");
-  if (!ID.test(raw.id || "") || RESERVED_IDS.has(raw.id))
-    throw Error("插件标识无效");
-  if (!parseVersion(raw.version)) throw Error("插件版本号无效");
-  if (!apiCompatible(raw.pluginApi)) throw Error("插件 API 版本不兼容");
-  if (raw.luckytri && !satisfies(raw.luckytri, version))
-    throw Error("插件不支持这个 LuckyTri 版本");
-  const entry = normalize(String(raw.entry || "index.js"));
-  if (
-    !entry ||
-    entry.startsWith("..") ||
-    entry.startsWith("/") ||
-    entry.includes(`..${sep}`) ||
-    entry.includes("..\\") ||
-    entry.includes("../")
-  )
-    throw Error("插件入口无效");
-  const permissions = [...new Set(raw.permissions || [])];
-  if (permissions.some((item) => !permissionKnown(item)))
-    throw Error("插件权限无效");
-  const network = [
-    ...new Set((raw.network || []).map((host) => String(host).toLowerCase())),
-  ];
-  if (network.some((host) => !HOST.test(host) || host.length > 200))
-    throw Error("插件网络主机无效");
-  const name = String(raw.name || "")
-    .trim()
-    .slice(0, 40);
-  if (!name) throw Error("插件清单无效");
-  const contributes = raw.contributes || {};
-  const short = /^[a-z][a-z0-9-]{0,40}$/;
-  return {
-    id: raw.id,
-    name,
-    version: raw.version,
-    pluginApi: raw.pluginApi,
-    luckytri: raw.luckytri || "",
-    description: String(raw.description || "").slice(0, 400),
-    author: String(raw.author || "").slice(0, 80),
-    license: String(raw.license || "").slice(0, 40),
-    entry,
-    permissions,
-    network,
-    settings: (raw.settings || []).map(setting),
-    contributes: {
-      senses: (contributes.senses || []).map((key) => {
-        if (!short.test(key)) throw Error("插件贡献的名字无效");
-        return key;
-      }),
-      channels: named(contributes.channels, short, (item) => ({
-        type: item.type === raw.id ? item.type : `${raw.id}-${item.type}`,
-        label: String(item.label || item.type).slice(0, 40),
-        capabilities: item.capabilities || {},
-        mediaHosts: String(item.mediaHosts || "").slice(0, 200),
-      })),
-      activities: (contributes.activities || []).map((item) => {
-        if (!short.test(item?.kind || "")) throw Error("插件贡献的名字无效");
-        return {
-          kind: `${raw.id}.${item.kind}`,
-          label: String(item.label || item.kind).slice(0, 40),
-          describe: String(item.describe || "").slice(0, 160),
-          keywords: String(item.keywords || "").slice(0, 200),
-          minutes: Number(item.minutes) || 15,
-          energy: !!item.energy,
-        };
-      }),
-      actions: (contributes.actions || []).map((item) => {
-        if (!short.test(item?.name || "")) throw Error("插件贡献的名字无效");
-        return {
-          name: `${raw.id}.${item.name}`,
-          label: String(item.label || item.name).slice(0, 40),
-          describe: String(item.describe || "").slice(0, 160),
-          input: Array.isArray(item.input) ? item.input.slice(0, 12) : [],
-          risk: item.risk === "high" ? "high" : "low",
-          confirm: item.confirm === "owner" ? "owner" : "none",
-          where: item.where === "any" ? "any" : "private",
-          dailyLimit: Number.isInteger(item.dailyLimit) ? item.dailyLimit : 20,
-        };
-      }),
-      perceive: (contributes.perceive || []).map((type) => {
-        const value = String(type).slice(0, 40);
-        if (!value) throw Error("插件贡献的名字无效");
-        return value;
-      }),
-      page: !!contributes.ui?.page,
-    },
-    i18n: raw.i18n && typeof raw.i18n === "object" ? raw.i18n : {},
-  };
-}
+import { readFileSync } from "node:fs";
+import { join, normalize, sep } from "node:path";
+import { VERSION } from "../version.js";
+import { API_VERSION, permissionKnown } from "./permissions.js";
+
+export const RESERVED_IDS = new Set([
+  "onebot",
+  "qqbot",
+  "preview",
+  "core",
+  "mind",
+  "luckytri",
+]);
+const ID = /^[a-z][a-z0-9-]{1,39}$/;
+const SETTING_KEY = /^[a-z][A-Za-z0-9-]{0,39}$/;
+const SEMVER =
+  /^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-[0-9A-Za-z.-]+)?(?:\+[0-9A-Za-z.-]+)?$/;
+const HOST = /^[a-z0-9.-]+$/i;
+
+export function parseVersion(value) {
+  const match = SEMVER.exec(String(value || ""));
+  if (!match) return null;
+  return match.slice(1, 4).map(Number);
+}
+
+export function satisfies(range, version) {
+  const have = parseVersion(version);
+  if (!have || typeof range !== "string") return false;
+  const parts = range.trim().split(/\s+/);
+  return parts.every((part) => {
+    const match = /^(>=|>|<=|<)?(\d+\.\d+\.\d+)$/.exec(part);
+    if (!match) return false;
+    const op = match[1] || "=";
+    const want = parseVersion(match[2]);
+    const cmp = have[0] - want[0] || have[1] - want[1] || have[2] - want[2];
+    if (op === ">=") return cmp >= 0;
+    if (op === ">") return cmp > 0;
+    if (op === "<=") return cmp <= 0;
+    if (op === "<") return cmp < 0;
+    return cmp === 0;
+  });
+}
+
+export function apiCompatible(wanted, host = API_VERSION) {
+  const plugin = parseVersion(`${wanted}.0`);
+  const current = parseVersion(`${host}.0`);
+  if (!plugin || !current) return false;
+  return plugin[0] === current[0] && plugin[1] <= current[1];
+}
+
+function setting(field) {
+  const types = [
+    "text",
+    "secret",
+    "number",
+    "boolean",
+    "select",
+    "textarea",
+    "urls",
+  ];
+  if (
+    !field ||
+    !SETTING_KEY.test(field.key || "") ||
+    !types.includes(field.type)
+  )
+    throw Error("插件设置项无效");
+  if (typeof field.label !== "string" || !field.label.trim())
+    throw Error("插件设置项无效");
+  if (field.type === "select" && !Array.isArray(field.options))
+    throw Error("插件设置项无效");
+  return {
+    key: field.key,
+    type: field.type,
+    label: String(field.label).slice(0, 80),
+    required: !!field.required,
+    default: field.default ?? (field.type === "boolean" ? false : ""),
+    ...(field.allowNetwork ? { allowNetwork: true } : {}),
+    ...(Array.isArray(field.options)
+      ? {
+          options: field.options.slice(0, 20).map((item) => ({
+            value: String(item.value ?? item).slice(0, 80),
+            label: String(item.label ?? item.value ?? item).slice(0, 80),
+          })),
+        }
+      : {}),
+  };
+}
+
+function named(list, pattern, map) {
+  if (!Array.isArray(list)) return [];
+  return list.map((item) => {
+    const value = map(item);
+    if (!pattern.test(value.name || value.kind || value.type || ""))
+      throw Error("插件贡献的名字无效");
+    return value;
+  });
+}
+
+// A manifest is data. Anything that does not fit is refused before the
+// plugin process is ever started.
+export function readManifest(dir) {
+  let raw;
+  try {
+    raw = JSON.parse(readFileSync(join(dir, "luckytri-plugin.json"), "utf8"));
+  } catch {
+    throw Error("插件清单无法读取");
+  }
+  return validateManifest(raw);
+}
+
+export function validateManifest(raw, version = VERSION) {
+  if (!raw || typeof raw !== "object" || Array.isArray(raw))
+    throw Error("插件清单无效");
+  if (!ID.test(raw.id || "") || RESERVED_IDS.has(raw.id))
+    throw Error("插件标识无效");
+  if (!parseVersion(raw.version)) throw Error("插件版本号无效");
+  if (!apiCompatible(raw.pluginApi)) throw Error("插件 API 版本不兼容");
+  if (raw.luckytri && !satisfies(raw.luckytri, version))
+    throw Error("插件不支持这个 LuckyTri 版本");
+  const entry = normalize(String(raw.entry || "index.js"));
+  if (
+    !entry ||
+    entry.startsWith("..") ||
+    entry.startsWith("/") ||
+    entry.includes(`..${sep}`) ||
+    entry.includes("..\\") ||
+    entry.includes("../")
+  )
+    throw Error("插件入口无效");
+  const permissions = [...new Set(raw.permissions || [])];
+  if (permissions.some((item) => !permissionKnown(item)))
+    throw Error("插件权限无效");
+  const network = [
+    ...new Set((raw.network || []).map((host) => String(host).toLowerCase())),
+  ];
+  if (network.some((host) => !HOST.test(host) || host.length > 200))
+    throw Error("插件网络主机无效");
+  const name = String(raw.name || "")
+    .trim()
+    .slice(0, 40);
+  if (!name) throw Error("插件清单无效");
+  const contributes = raw.contributes || {};
+  const short = /^[a-z][a-z0-9-]{0,40}$/;
+  return {
+    id: raw.id,
+    name,
+    version: raw.version,
+    pluginApi: raw.pluginApi,
+    luckytri: raw.luckytri || "",
+    description: String(raw.description || "").slice(0, 400),
+    author: String(raw.author || "").slice(0, 80),
+    license: String(raw.license || "").slice(0, 40),
+    entry,
+    permissions,
+    network,
+    settings: (raw.settings || []).map(setting),
+    contributes: {
+      senses: (contributes.senses || []).map((key) => {
+        if (!short.test(key)) throw Error("插件贡献的名字无效");
+        return key;
+      }),
+      channels: named(contributes.channels, short, (item) => ({
+        type: item.type === raw.id ? item.type : `${raw.id}-${item.type}`,
+        label: String(item.label || item.type).slice(0, 40),
+        capabilities: item.capabilities || {},
+        mediaHosts: String(item.mediaHosts || "").slice(0, 200),
+      })),
+      activities: (contributes.activities || []).map((item) => {
+        if (!short.test(item?.kind || "")) throw Error("插件贡献的名字无效");
+        return {
+          kind: `${raw.id}.${item.kind}`,
+          label: String(item.label || item.kind).slice(0, 40),
+          describe: String(item.describe || "").slice(0, 160),
+          keywords: String(item.keywords || "").slice(0, 200),
+          minutes: Number(item.minutes) || 15,
+          energy: !!item.energy,
+        };
+      }),
+      actions: (contributes.actions || []).map((item) => {
+        if (!short.test(item?.name || "")) throw Error("插件贡献的名字无效");
+        return {
+          name: `${raw.id}.${item.name}`,
+          label: String(item.label || item.name).slice(0, 40),
+          describe: String(item.describe || "").slice(0, 160),
+          input: Array.isArray(item.input) ? item.input.slice(0, 12) : [],
+          risk: item.risk === "high" ? "high" : "low",
+          confirm: item.confirm === "owner" ? "owner" : "none",
+          where: item.where === "any" ? "any" : "private",
+          dailyLimit: Number.isInteger(item.dailyLimit) ? item.dailyLimit : 20,
+        };
+      }),
+      perceive: (contributes.perceive || []).map((type) => {
+        const value = String(type).slice(0, 40);
+        if (!value) throw Error("插件贡献的名字无效");
+        return value;
+      }),
+      page: !!contributes.ui?.page,
+    },
+    i18n: raw.i18n && typeof raw.i18n === "object" ? raw.i18n : {},
+  };
+}

package/server/plugins/permissions.js

@@ -1,42 +1,42 @@
-// What a plugin may be given. The risk is shown when the owner agrees;
-// the host is what actually refuses a call the plugin was not given.
-export const PERMISSIONS = {
-  "mind.read": {
-    risk: "low",
-    label: "知道她醒着没有、心情和在做什么",
-  },
-  notify: { risk: "low", label: "给工作室发一条通知" },
-  ui: { risk: "low", label: "在工作室里放一个自己的页面" },
-  "http.routes": { risk: "low", label: "给自己的页面提供接口" },
-  senses: { risk: "medium", label: "把感知放进她的此刻" },
-  observe: { risk: "medium", label: "把发生的事作为经历交给她" },
-  "knowledge.offer": { risk: "medium", label: "往她的书架放资料" },
-  activities: { risk: "medium", label: "给她一件可以自己做的事" },
-  models: { risk: "medium", label: "使用她的模型服务" },
-  "net.fetch": { risk: "medium", label: "访问声明过的网站" },
-  actions: { risk: "high", label: "让她可以选择做一件事" },
-  perceive: { risk: "high", label: "读取聊天里的附件" },
-  channel: { risk: "high", label: "接入一个平台，并看到那里的消息" },
-  "http.public": { risk: "high", label: "开放一个不需要令牌的地址" },
-  "net.raw": { risk: "high", label: "自己直接联网" },
-};
-
-export const API_VERSION = "1.0";
-export const API_FEATURES = [
-  "senses",
-  "observe",
-  "activities",
-  "actions",
-  "perceive",
-  "channel",
-  "knowledge",
-  "models",
-  "http",
-  "notify",
-  "mind.read",
-  "ui",
-];
-
-export function permissionKnown(name) {
-  return Object.hasOwn(PERMISSIONS, name);
-}
+// What a plugin may be given. The risk is shown when the owner agrees;
+// the host is what actually refuses a call the plugin was not given.
+export const PERMISSIONS = {
+  "mind.read": {
+    risk: "low",
+    label: "知道她醒着没有、心情和在做什么",
+  },
+  notify: { risk: "low", label: "给工作室发一条通知" },
+  ui: { risk: "low", label: "在工作室里放一个自己的页面" },
+  "http.routes": { risk: "low", label: "给自己的页面提供接口" },
+  senses: { risk: "medium", label: "把感知放进她的此刻" },
+  observe: { risk: "medium", label: "把发生的事作为经历交给她" },
+  "knowledge.offer": { risk: "medium", label: "往她的书架放资料" },
+  activities: { risk: "medium", label: "给她一件可以自己做的事" },
+  models: { risk: "medium", label: "使用她的模型服务" },
+  "net.fetch": { risk: "medium", label: "访问声明过的网站" },
+  actions: { risk: "high", label: "让她可以选择做一件事" },
+  perceive: { risk: "high", label: "读取聊天里的附件" },
+  channel: { risk: "high", label: "接入一个平台，并看到那里的消息" },
+  "http.public": { risk: "high", label: "开放一个不需要令牌的地址" },
+  "net.raw": { risk: "high", label: "自己直接联网" },
+};
+
+export const API_VERSION = "1.0";
+export const API_FEATURES = [
+  "senses",
+  "observe",
+  "activities",
+  "actions",
+  "perceive",
+  "channel",
+  "knowledge",
+  "models",
+  "http",
+  "notify",
+  "mind.read",
+  "ui",
+];
+
+export function permissionKnown(name) {
+  return Object.hasOwn(PERMISSIONS, name);
+}

package/server/plugins/runner/guard.mjs

@@ -1,36 +1,36 @@
-import { registerHooks } from "node:module";
-
-// A plugin process may use the language. It may not open the database, start
-// another process, or reach the network unless it was explicitly allowed to.
-const raw = process.env.LUCKYTRI_NET_RAW === "1";
-const blocked = new Set([
-  "sqlite",
-  "child_process",
-  "worker_threads",
-  "cluster",
-  "inspector",
-  ...(raw
-    ? []
-    : ["net", "http", "https", "tls", "dgram", "dns", "http2", "tls"]),
-]);
-
-function denied(specifier) {
-  const name = String(specifier || "").replace(/^node:/, "");
-  const root = name.split("/")[0];
-  return blocked.has(name) || blocked.has(root);
-}
-
-registerHooks({
-  resolve(specifier, context, next) {
-    if (denied(specifier)) {
-      const error = new Error("插件没有这个能力");
-      error.code = "ERR_PLUGIN_DENIED";
-      throw error;
-    }
-    return next(specifier, context);
-  },
-});
-
-process.kill = () => {
-  throw new Error("插件不能结束别的进程");
-};
+import { registerHooks } from "node:module";
+
+// A plugin process may use the language. It may not open the database, start
+// another process, or reach the network unless it was explicitly allowed to.
+const raw = process.env.LUCKYTRI_NET_RAW === "1";
+const blocked = new Set([
+  "sqlite",
+  "child_process",
+  "worker_threads",
+  "cluster",
+  "inspector",
+  ...(raw
+    ? []
+    : ["net", "http", "https", "tls", "dgram", "dns", "http2", "tls"]),
+]);
+
+function denied(specifier) {
+  const name = String(specifier || "").replace(/^node:/, "");
+  const root = name.split("/")[0];
+  return blocked.has(name) || blocked.has(root);
+}
+
+registerHooks({
+  resolve(specifier, context, next) {
+    if (denied(specifier)) {
+      const error = new Error("插件没有这个能力");
+      error.code = "ERR_PLUGIN_DENIED";
+      throw error;
+    }
+    return next(specifier, context);
+  },
+});
+
+process.kill = () => {
+  throw new Error("插件不能结束别的进程");
+};