mu-agent-bridge 1.0.34 → 1.0.39

package/dist/src-ts/plugins/aun/attachments.js

@@ -1,10 +1,12 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.AunDownloadUrlError = void 0;
 exports.parseAunAttachment = parseAunAttachment;
 exports.downloadAunAttachments = downloadAunAttachments;
 exports.downloadAunAttachment = downloadAunAttachment;
 exports.uploadAunAttachments = uploadAunAttachments;
 const node_crypto_1 = require("node:crypto");
+const node_util_1 = require("node:util");
 const attachments_1 = require("../../attachments");
 const aidPattern = /^[a-z0-9][a-z0-9_-]{2,63}\.[a-z0-9-]+(?:\.[a-z0-9-]+)+$/;
 const mimePattern = /^[A-Za-z0-9!#$&^_.+-]+\/[A-Za-z0-9!#$&^_.+-]+$/;
@@ -12,6 +14,21 @@ const imageTypes = new Set(["image/png", "image/jpeg", "image/webp"]);
 function digest(data) { return (0, node_crypto_1.createHash)("sha256").update(data).digest("hex"); }
 function validKey(key) { return /^[A-Za-z0-9._-]+(?:\/[A-Za-z0-9._-]+)*$/.test(key) && !key.split("/").some((part) => part === "." || part === ".."); }
 function validHash(value) { return /^[a-f0-9]{64}$/i.test(value); }
+function normalizedMime(value) {
+    if (value === undefined)
+        return;
+    if (typeof value !== "string" || /[\u0000-\u001f\u007f]/.test(value))
+        throw new Error("AUN 附件 MIME 类型无效");
+    if (!value.trim())
+        return;
+    try {
+        const type = new node_util_1.MIMEType(value).essence;
+        if (mimePattern.test(type))
+            return type;
+    }
+    catch { /* 统一报告无效类型。 */ }
+    throw new Error("AUN 附件 MIME 类型无效");
+}
 function validateReference(ref) {
     if (!aidPattern.test(ref.ownerAid) || !/^[A-Za-z0-9_-][A-Za-z0-9._-]{0,63}$/.test(ref.bucket) || !validKey(ref.objectKey))
         throw new Error("AUN 附件引用路径无效");
@@ -43,11 +60,9 @@ function parseAunAttachment(value) {
     const bucket = item.bucket === undefined ? "default" : typeof item.bucket === "string" ? item.bucket : "";
     const filename = (0, attachments_1.attachmentFilename)(typeof item.filename === "string" ? item.filename : objectKey);
     const ref = { ownerAid, bucket, objectKey, filename };
-    if (item.content_type !== undefined) {
-        if (typeof item.content_type !== "string")
-            throw new Error("AUN 附件 MIME 类型无效");
-        ref.contentType = item.content_type.toLowerCase();
-    }
+    const contentType = normalizedMime(item.content_type);
+    if (contentType)
+        ref.contentType = contentType;
     if (item.size_bytes !== undefined) {
         if (typeof item.size_bytes !== "number")
             throw new Error("AUN 附件大小无效");
@@ -81,10 +96,8 @@ function checkedMetadata(meta, ref) {
     if ([meta.owner, meta.owner_aid].some((owner) => owner && owner !== ref.ownerAid) || meta.bucket && meta.bucket !== ref.bucket
         || [meta.path, meta.object_key].some((path) => path && path !== `/${ref.objectKey}` && path !== ref.objectKey))
         throw new Error("AUN 附件元数据引用不一致");
-    const rawType = metadataValue(meta, "contentType", "content_type");
-    if (rawType && (typeof rawType !== "string" || !mimePattern.test(rawType)))
-        throw new Error("AUN 附件元数据 MIME 类型无效");
-    const contentType = typeof rawType === "string" && rawType ? rawType.toLowerCase() : ref.contentType ?? "application/octet-stream";
+    const rawType = normalizedMime(metadataValue(meta, "contentType", "content_type"));
+    const contentType = rawType ?? ref.contentType ?? "application/octet-stream";
     if (ref.contentType && rawType && ref.contentType.toLowerCase() !== contentType)
         throw new Error("AUN 附件 MIME 类型校验失败");
     const sha256 = typeof meta.sha256 === "string" && meta.sha256 ? meta.sha256.toLowerCase() : undefined;
@@ -162,9 +175,20 @@ async function downloadAunAttachments(client, refs) {
     (0, attachments_1.validateAttachments)(result);
     return result;
 }
+class AunDownloadUrlError extends Error {
+    diagnostic;
+    constructor(url, reason) {
+        super("AUN 下载地址无效");
+        this.name = "AunDownloadUrlError";
+        this.diagnostic = { protocol: url.protocol, hostname: url.hostname, port: url.port, reason };
+    }
+}
+exports.AunDownloadUrlError = AunDownloadUrlError;
 function checkedDownloadUrl(url) {
-    if (url.protocol !== "https:" || url.username || url.password || url.port || url.hash || !url.hostname.includes(".") || /^(?:localhost|127\.|0\.|10\.|192\.168\.|169\.254\.|172\.(?:1[6-9]|2\d|3[01])\.)/.test(url.hostname) || url.hostname.includes(":"))
-        throw new Error("AUN 下载地址无效");
+    const storagePort = url.port === "9470" && /^storage\.[a-z0-9-]+(?:\.[a-z0-9-]+)+$/i.test(url.hostname);
+    const reason = url.protocol !== "https:" ? "协议" : url.username || url.password ? "凭据" : url.port && !storagePort ? "端口" : url.hash ? "片段" : !url.hostname.includes(".") ? "主机名" : /^(?:localhost|127\.|0\.|10\.|192\.168\.|169\.254\.|172\.(?:1[6-9]|2\d|3[01])\.)/.test(url.hostname) ? "本机地址" : url.hostname.includes(":") ? "主机名" : undefined;
+    if (reason)
+        throw new AunDownloadUrlError(url, reason);
     return url;
 }
 async function readDownloadTicket(value, expectedSize) {
@@ -224,9 +248,16 @@ async function uploadAunAttachments(client, ownerAid, peerAid, items) {
         const filename = (0, attachments_1.attachmentFilename)(item.filename);
         const objectKey = `shared/${(0, node_crypto_1.randomUUID)()}/${filename.replace(/[^A-Za-z0-9._-]/g, "_")}`;
         const sha256 = digest(item.data);
-        const ref = { ownerAid, bucket: "default", objectKey, filename, contentType: item.contentType.toLowerCase(), sizeBytes: item.data.byteLength, sha256 };
-        const uploaded = await client.storage.writeBytes(`/${objectKey}`, item.data, { contentType: item.contentType, public: false, overwrite: false });
+        const contentType = item.contentType.toLowerCase();
+        // 视频播放器不携带 AID 凭据，沿用 EvolCore 的标准可读对象上传方式。
+        const video = contentType.startsWith("video/");
+        const ref = { ownerAid, bucket: "default", objectKey, filename, contentType, sizeBytes: item.data.byteLength, sha256 };
+        const uploaded = await client.storage.writeBytes(`/${objectKey}`, item.data, { contentType, public: video, overwrite: video });
         checkedMetadata({ ...uploaded, size: uploaded.size ?? uploaded.size_bytes ?? item.data.byteLength }, ref);
+        if (video) {
+            result.push({ owner_aid: ownerAid, object_key: objectKey, filename, content_type: contentType, size_bytes: item.data.byteLength, sha256 });
+            continue;
+        }
         const share = await client.storage.lowlevel.createShareLink({ owner: ownerAid, bucket: "default", objectKey, allowedAids: [peerAid], expireInSeconds: 86400 });
         if (share.owner_aid && share.owner_aid !== ownerAid || share.bucket && share.bucket !== "default" || share.object_key && share.object_key !== objectKey)
             throw new Error("AUN 附件分享对象不一致");

package/dist/src-ts/plugins/aun/index.js

@@ -11,7 +11,7 @@ const node_url_1 = require("node:url");
 const messages_1 = require("./messages");
 const attachments_1 = require("./attachments");
 const manifest = {
-    id: "aun", version: "1.0.23", type: "channel", displayName: "AUN 通道",
+    id: "aun", version: "1.0.30", type: "channel", displayName: "AUN 通道",
     entry: "dist/src-ts/plugins/aun/index.js", apiVersion: "1", process: "in-process",
     capabilities: ["channel", "channel.identity.create", "channel.receive", "channel.send", "health", "cli"],
     configSchema: "config.schema.json",
@@ -783,7 +783,7 @@ class AunPlugin {
             }
         }
         catch (error) {
-            this.context?.logger.warn("AUN 附件下载失败", { error: safeError(error) });
+            this.context?.logger.warn("AUN 附件下载失败", { error: safeError(error), ...(error instanceof attachments_1.AunDownloadUrlError ? { downloadUrl: error.diagnostic } : {}) });
             try {
                 await this.sendText(aid, message.peerId, `附件接收失败：${safeError(error)}`, message.threadId);
             }
@@ -817,15 +817,14 @@ class AunPlugin {
                     }
                     const groups = new Map();
                     for (const [index, item] of items.entries()) {
-                        const kind = item.kind;
-                        const ref = refs[index];
+                        const kind = item.kind === "file" && item.contentType.toLowerCase().startsWith("video/") ? "video" : item.kind;
                         const group = groups.get(kind) ?? [];
-                        group.push(ref);
+                        group.push(refs[index]);
                         groups.set(kind, group);
                     }
                     groupsCount = groups.size;
                     for (const [kind, group] of groups) {
-                        const payload = { type: kind, text: text || (kind === "image" ? "图片已生成。" : "文件已生成。"), attachments: group };
+                        const payload = { type: kind, text: text || (kind === "image" ? "图片已生成。" : kind === "video" ? "视频已生成。" : "文件已生成。"), attachments: group };
                         if (message.threadId)
                             payload.thread_id = message.threadId;
                         if (message.messageId)

package/dist/src-ts/plugins/chatgpt/cdp-client.js

@@ -1,9 +1,45 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.ChatgptCdpClient = exports.userBubbleSelector = exports.turnSelector = exports.editorSelector = void 0;
+exports.chatgptAttachmentPath = chatgptAttachmentPath;
 const node_child_process_1 = require("node:child_process");
+const node_crypto_1 = require("node:crypto");
+const attachments_1 = require("../../attachments");
 const session_store_1 = require("./session-store");
 const cdp_draft_1 = require("../cdp-draft");
+function chatgptAttachmentPath(href, outputDirectory) {
+    let path;
+    try {
+        if (decodeURIComponent(href).split(/[\\/]/).some(part => part === "." || part === ".."))
+            return;
+        if (href.startsWith("file://")) {
+            const url = new URL(href);
+            if (url.hostname || url.search || url.hash || url.username || url.password)
+                return;
+            path = decodeURIComponent(url.pathname);
+        }
+        else if (href.startsWith("sandbox:/"))
+            path = decodeURIComponent(href.slice("sandbox:".length));
+        else if (href.startsWith("/") || /^[a-z]:\//i.test(href))
+            path = decodeURIComponent(href);
+        else
+            return;
+    }
+    catch {
+        return;
+    }
+    if (/[%?#\u0000-\u001f\u007f]/.test(path) || path.startsWith("//") || path.includes("\\"))
+        return;
+    if (path.split("/").some(part => part === "." || part === ".."))
+        return;
+    const normalized = /^\/[a-z]:\//i.test(path) ? path.slice(1) : path;
+    const unixRoot = `/tmp/${outputDirectory}/`;
+    const windowsRoot = normalized.match(/^[a-z]:\/Users\/[^/]+\/AppData\/Local\/Temp\//i)?.[0];
+    const prefix = normalized.startsWith(unixRoot) ? unixRoot : windowsRoot && normalized.startsWith(`${windowsRoot}${outputDirectory}/`) ? `${windowsRoot}${outputDirectory}/` : undefined;
+    if (!prefix || normalized.slice(prefix.length).split("/").some(part => !part || part.startsWith(".")))
+        return;
+    return normalized;
+}
 exports.editorSelector = '[data-codex-composer="true"][contenteditable="true"]';
 exports.turnSelector = '[data-chatgpt-conversation-turn="true"]';
 exports.userBubbleSelector = "[data-user-message-bubble]";
@@ -16,6 +52,7 @@ const sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
 const sidebarSelector = "[data-app-action-sidebar-thread-id]";
 const newSessionSelector = 'button,[role="button"]';
 class ChatgptCdpClient {
+    attachmentInput = true;
     socket;
     tunnel;
     sequence = 0;
@@ -58,6 +95,78 @@ class ChatgptCdpClient {
     })()`);
         return (0, session_store_1.validSession)(entry) ? entry : undefined;
     }
+    async historyBusy() {
+        return Boolean(await this.evaluate(`Boolean(document.querySelector(${JSON.stringify(stopButtonSelector)}))`));
+    }
+    async readSessionHistory(session) {
+        if (!this.connected())
+            return { supported: false, reason: "ChatGPT CDP 当前未连接" };
+        const before = await this.activeSession();
+        if (!before || before.id !== session.id || before.host !== session.host)
+            return { supported: false, reason: "当前活动会话身份与请求不一致" };
+        if (await this.historyBusy())
+            return { supported: false, reason: "ChatGPT 正在生成回复，暂不读取历史" };
+        const raw = await this.evaluate(`(() => {
+      const selected = document.querySelector('[data-app-action-sidebar-thread-selected="true"], [data-app-action-sidebar-thread-active="true"]');
+      if (selected?.getAttribute('data-app-action-sidebar-thread-id') !== ${JSON.stringify(session.id)}
+        || selected?.getAttribute('data-app-action-sidebar-thread-host-id') !== ${JSON.stringify(session.host)}) return { supported: false, reason: '读取期间活动会话身份发生变化' };
+      if (document.querySelector(${JSON.stringify(stopButtonSelector)})) return { supported: false, reason: 'ChatGPT 正在生成回复，暂不读取历史' };
+      const turns = [...document.querySelectorAll(${JSON.stringify(exports.turnSelector)})];
+      const output = [];
+      const missingReasons = [];
+      let chars = 0;
+      const collect = (role, text) => {
+        chars += text.length;
+        if (chars > 60000) throw new Error('ChatGPT 会话正文超过 60,000 字符上限');
+        output.push({ role, text });
+      };
+      for (const turn of turns) {
+        const turnId = turn.getAttribute(${JSON.stringify(turnIdAttribute)});
+        if (!turnId) {
+          missingReasons.push('部分消息缺少可验证的 turn 身份');
+          continue;
+        }
+        const users = [...turn.querySelectorAll(${JSON.stringify(exports.userBubbleSelector)})];
+        for (const item of users) {
+          const body = item.querySelector('[data-markdown-text-tone="user-message"]');
+          if (!body) {
+            missingReasons.push('部分用户消息缺少专用正文标记，已跳过');
+            continue;
+          }
+          const text = body.innerText?.trim();
+          if (text) collect('user', text);
+        }
+        const assistants = [...turn.querySelectorAll(${JSON.stringify(assistantMessageSelector)})];
+        for (const item of assistants) {
+          const marker = item.closest('[data-response-annotation-target][data-response-annotation-conversation]');
+          const excluded = item.closest('[data-message-author-role="tool"], [data-message-author-role="system"], [data-message-channel="analysis"], [data-message-channel="commentary"], [data-reasoning], [data-is-streaming="true"], [data-streaming="true"], [aria-busy="true"]');
+          const text = item.innerText?.trim();
+          if (marker?.getAttribute('data-response-annotation-conversation') === ${JSON.stringify(session.id.replace(/^local:/, ""))}
+            && marker.getAttribute('data-response-annotation-target') && !excluded && text) collect('assistant', text);
+        }
+      }
+      return { supported: true, turns: output, missingReasons };
+    })()`);
+        const after = await this.activeSession();
+        if (!after || after.id !== session.id || after.host !== session.host)
+            return { supported: false, reason: "读取期间活动会话身份发生变化" };
+        if (await this.historyBusy())
+            return { supported: false, reason: "ChatGPT 正在生成回复，暂不读取历史" };
+        const result = raw;
+        if (result?.supported === false && typeof result.reason === "string")
+            return { supported: false, reason: result.reason };
+        if (!result || !Array.isArray(result.turns) || !result.turns.every((turn) => {
+            if (!turn || typeof turn !== "object")
+                return false;
+            const value = turn;
+            return (value.role === "user" || value.role === "assistant") && typeof value.text === "string";
+        })) {
+            return { supported: false, reason: "ChatGPT 会话正文格式无法验证" };
+        }
+        const missingReasons = Array.isArray(result.missingReasons) ? result.missingReasons.filter((item) => typeof item === "string") : [];
+        missingReasons.push("仅包含当前页面已加载的可验证正文，页面虚拟化或未加载历史导致完整性无法确认");
+        return { supported: true, turns: result.turns, complete: false, missingReasons };
+    }
     async switchSession(session) {
         await this.recoverDraft();
         const locate = `[...document.querySelectorAll(${JSON.stringify(sidebarSelector)})].find(item =>
@@ -190,15 +299,55 @@ class ChatgptCdpClient {
         this.tunnel = undefined;
         this.rejectPending(new Error("ChatGPT CDP 已关闭"));
     }
-    async direct(text, timeoutMs = 240_000) {
+    async direct(text, timeoutMs = 240_000, attachments) {
+        (0, attachments_1.validateAttachments)(attachments);
+        const slot = `__agentBridgeChatgpt_${(0, node_crypto_1.randomUUID)().replaceAll("-", "")}`;
+        const outputDirectory = `agent-bridge-chatgpt-${(0, node_crypto_1.randomUUID)()}`;
+        const startedAt = Date.now();
+        const instruction = `附件回传约定：如果本轮需要返回文件、图片或视频，请把要返回的文件副本写入本轮新建的临时目录（Linux/macOS：/tmp/${outputDirectory}；Windows：C:/Users/<当前用户>/AppData/Local/Temp/${outputDirectory}），并在最终回复给出文件链接。仅需文字时无需创建目录。`;
+        let failure;
+        try {
+            return await this.directTurn(`${text} ${instruction}`, timeoutMs, attachments, slot, outputDirectory, startedAt);
+        }
+        catch (error) {
+            failure = error;
+            throw error;
+        }
+        finally {
+            if (attachments?.length) {
+                try {
+                    await this.evaluate(`(async () => {
+          const state = globalThis[${JSON.stringify(slot)}];
+          if (!state) return;
+          state.observer?.disconnect();
+          for (const button of state.buttons ?? []) if (button.isConnected) button.click();
+          try { await Promise.all(state.paths.map(path => state.services.workspaceFiles.releaseTemporaryFile({ path }))); }
+          finally { delete globalThis[${JSON.stringify(slot)}]; }
+        })()`);
+                }
+                catch (cleanupError) {
+                    if (failure === undefined)
+                        throw cleanupError;
+                    throw new AggregateError([failure, cleanupError], `${failure instanceof Error ? failure.message : String(failure)}；临时附件清理失败`, { cause: failure });
+                }
+            }
+        }
+    }
+    async directTurn(text, timeoutMs, attachments, slot, outputDirectory, startedAt) {
         await this.waitFor(`Boolean(document.querySelector(${JSON.stringify(exports.editorSelector)}))`, "ChatGPT 桌面端输入框未就绪");
         await this.recoverDraft();
         const beforeTurnsJson = await this.evaluate(`JSON.stringify([...document.querySelectorAll(${JSON.stringify(exports.turnSelector)})].map(turn => ({ id: turn.getAttribute(${JSON.stringify(turnIdAttribute)}), users: turn.querySelectorAll(${JSON.stringify(exports.userBubbleSelector)}).length })))`);
         const beforeTurns = JSON.parse(String(beforeTurnsJson || "[]"));
         const beforeAssistantCount = Number(await this.evaluate(`document.querySelectorAll(${JSON.stringify(assistantMessageSelector)}).length`));
+        const baseline = await this.evaluate(`JSON.stringify([...document.querySelectorAll(${JSON.stringify(assistantMessageSelector)})].map(node => {
+      const message = node.closest('[data-response-annotation-target][data-response-annotation-conversation]');
+      return message ? [message.getAttribute('data-response-annotation-conversation'), message.getAttribute('data-response-annotation-target')] : null;
+    }).filter(Boolean))`);
+        const beforeMessages = JSON.parse(String(baseline || "[]"));
+        const origin = await this.activeSession();
         const ready = await this.evaluate(`(() => {
       const editor = document.querySelector(${JSON.stringify(exports.editorSelector)});
-      if (!editor || editor.innerText.trim()) return false;
+      if (!editor || editor.innerText.trim() || document.querySelector('button[aria-label^="Remove "]')) return false;
       const findButton = () => {
         for (let parent = editor; parent && parent !== document.body; parent = parent.parentElement) {
           const buttons = [...parent.querySelectorAll(${JSON.stringify(sendButtonSelector)})];
@@ -213,6 +362,8 @@ class ChatgptCdpClient {
     })()`);
         if (!ready)
             throw new Error("ChatGPT 输入框含有未发送内容，或桌面端发送按钮未就绪");
+        if (attachments?.length)
+            await this.injectAttachments(attachments, slot);
         await this.cdp("Input.insertText", { text });
         const inputMatches = await this.evaluate(`document.querySelector(${JSON.stringify(exports.editorSelector)})?.innerText.trim() === ${JSON.stringify(text.trim())}`);
         if (!inputMatches)
@@ -239,22 +390,36 @@ class ChatgptCdpClient {
         while (Date.now() < deadline) {
             await sleep(800);
             const raw = await this.evaluate(`(() => {
+        const previous = new Set(${JSON.stringify(Array.isArray(beforeMessages) ? beforeMessages : [])}.map(item => JSON.stringify(item)));
+        let hasArtifacts = false;
+        const artifacts = [...document.querySelectorAll(${JSON.stringify(assistantMessageSelector)})].flatMap(node => {
+          const message = node.closest('[data-response-annotation-target][data-response-annotation-conversation]');
+          if (!message) return [];
+          const conversationId = message.getAttribute('data-response-annotation-conversation');
+          const messageId = message.getAttribute('data-response-annotation-target');
+          if (!conversationId || !messageId || previous.has(JSON.stringify([conversationId, messageId]))) return [];
+          hasArtifacts ||= Boolean(node.querySelector('a[href], img[src], video[src], source[src], [data-file-reference][data-prompt-link-href]'));
+          return [{ conversationId, messageId }];
+        });
         const before = ${JSON.stringify(beforeTurns)};
         const turns = [...document.querySelectorAll(${JSON.stringify(exports.turnSelector)})];
+        const userText = node => (node?.querySelector('[data-markdown-text-tone="user-message"]') ?? node)?.innerText.trim().replace(/\\s+/g, ' ');
+        const expectedUserText = ${JSON.stringify(text.trim().replace(/\s+/g, " "))};
         const turn = turns.findLast((item, index) => {
           const id = item.getAttribute(${JSON.stringify(turnIdAttribute)});
           const oldIndex = before.findIndex(entry => entry.id === id);
           const old = oldIndex < 0 ? undefined : before[oldIndex];
           const users = item.querySelectorAll(${JSON.stringify(exports.userBubbleSelector)});
           const fresh = oldIndex < 0 || index >= before.length || users.length > (old?.users ?? 0);
-          return fresh && users.item(users.length - 1)?.innerText.trim() === ${JSON.stringify(text.trim())};
+          return fresh && userText(users.item(users.length - 1)) === expectedUserText;
         });
         if (!turn) {
           const assistants = [...document.querySelectorAll(${JSON.stringify(assistantMessageSelector)})];
           const fallback = assistants.length > ${beforeAssistantCount}
             ? assistants.at(-1)?.innerText.trim() ?? ""
             : "";
-          return JSON.stringify({ reply: fallback, active: Boolean(document.querySelector(${JSON.stringify(stopButtonSelector)})) });
+          const submitted = [...document.querySelectorAll(${JSON.stringify(exports.userBubbleSelector)})].some(node => userText(node) === expectedUserText);
+          return JSON.stringify({ reply: fallback, artifacts, hasArtifacts, submitted, active: Boolean(document.querySelector(${JSON.stringify(stopButtonSelector)})) });
         }
         const user = turn.querySelectorAll(${JSON.stringify(exports.userBubbleSelector)}).item(turn.querySelectorAll(${JSON.stringify(exports.userBubbleSelector)}).length - 1);
         const unit = user?.closest(${JSON.stringify(contentUnitSelector)});
@@ -264,14 +429,20 @@ class ChatgptCdpClient {
         const legacyReplies = [...turn.querySelectorAll('[data-message-author-role="assistant"]')].map(item => item.innerText.trim()).filter(Boolean);
         const reply = replies.at(-1) ?? legacyReplies.at(-1) ?? "";
         const active = Boolean(document.querySelector(${JSON.stringify(stopButtonSelector)}));
-        return JSON.stringify({ reply, active });
+        return JSON.stringify({ reply, active, artifacts, hasArtifacts, submitted: true });
       })()`);
             const state = JSON.parse(String(raw));
             const reply = state.reply.trim();
-            stable = reply && reply === previous ? stable + 1 : 0;
-            previous = reply;
-            if (reply && stable >= 2 && !state.active)
-                return reply;
+            const signature = JSON.stringify([reply, state.artifacts, state.hasArtifacts]);
+            stable = (reply || state.hasArtifacts) && signature === previous ? stable + 1 : 0;
+            previous = signature;
+            if ((reply || state.hasArtifacts) && stable >= 2 && !state.active) {
+                const output = state.hasArtifacts && state.artifacts?.length ? await this.readArtifacts(state.artifacts, origin, outputDirectory, startedAt, state.submitted) : [];
+                if (output.length)
+                    return { text: reply, attachments: output };
+                if (reply)
+                    return reply;
+            }
         }
         throw new Error("ChatGPT UI 回复超时");
     }
@@ -315,6 +486,168 @@ class ChatgptCdpClient {
     recoverDraft() {
         return (0, cdp_draft_1.recoverCdpDraft)(this.evaluate.bind(this), exports.editorSelector, stopButtonSelector, this.dataDir);
     }
+    async injectAttachments(items, slot) {
+        const files = items.map(item => ({ filename: (0, attachments_1.attachmentFilename)(item.filename), contentType: item.contentType, data: Buffer.from(item.data).toString("base64") }));
+        await this.evaluate(String.raw `(async () => {
+      const editor = document.querySelector(${JSON.stringify(exports.editorSelector)});
+      if (!editor || document.querySelector('button[aria-label^="Remove "]')) throw new Error('ChatGPT 输入框已有附件或未就绪，未发送消息');
+      const entry = [...document.scripts].find(script => /\/assets\/index-[^/]+\.js$/.test(script.src));
+      if (!entry) throw new Error('ChatGPT 桌面原生接口入口未找到');
+      const source = await (await fetch(entry.src)).text();
+      const rpc = source.match(/["'](\.\/rpc-[\w-]+\.js)["']/);
+      if (!rpc) throw new Error('ChatGPT 桌面原生附件接口未找到');
+      const { appServices: services } = await import(new URL(rpc[1], entry.src).href);
+      const state = { services, paths: [], buttons: new Set(), observer: null }; globalThis[${JSON.stringify(slot)}] = state;
+      const transfer = new DataTransfer();
+      for (const item of ${JSON.stringify(files)}) {
+        const binary = atob(item.data); const bytes = new Uint8Array(binary.length);
+        for (let index = 0; index < binary.length; index++) bytes[index] = binary.charCodeAt(index);
+        const result = await services.workspaceFiles.createTemporaryFile({ bytes, fileName: item.filename });
+        if (!result?.path) throw new Error('ChatGPT 临时附件创建失败');
+        state.paths.push(result.path);
+        const file = new File([bytes], item.filename, { type: item.contentType });
+        Object.defineProperty(file, 'path', { value: result.path }); transfer.items.add(file);
+      }
+      const names = ${JSON.stringify(files.map(file => `Remove ${file.filename}`))};
+      const capture = () => {
+        for (const button of document.querySelectorAll('button[aria-label^="Remove "]')) {
+          if (names.includes(button.getAttribute('aria-label'))) state.buttons.add(button);
+        }
+      };
+      state.observer = new MutationObserver(capture);
+      state.observer.observe(document.body, { childList: true, subtree: true });
+      editor.dispatchEvent(new ClipboardEvent('paste', { bubbles: true, cancelable: true, clipboardData: transfer }));
+      capture();
+    })()`);
+        await this.waitFor(`(() => {
+      const names = ${JSON.stringify(files.map(file => `Remove ${file.filename}`))};
+      const current = [...document.querySelectorAll('button[aria-label^="Remove "]')].map(node => node.getAttribute('aria-label'));
+      const ready = current.length === names.length && names.every(name => current.filter(value => value === name).length === names.filter(value => value === name).length);
+      if (ready) globalThis[${JSON.stringify(slot)}]?.observer?.disconnect();
+      return ready;
+    })()`, "ChatGPT 附件上传未确认");
+    }
+    async readArtifacts(messages, origin, outputDirectory, startedAt, submitted = false) {
+        const active = await this.activeSession();
+        if (!origin || !active || active.host !== origin.host)
+            throw new Error("ChatGPT 附件所属会话无法确认");
+        if (active.id !== origin.id)
+            throw new Error("ChatGPT 会话已变化，未读取输出附件");
+        let conversationId = active.id.replace(/^local:/, "");
+        if (conversationId.startsWith("client-new-thread:")) {
+            const ids = [...new Set(messages.map(message => message.conversationId))];
+            if (active.id !== origin.id || !submitted || ids.length !== 1 || !/^[a-f0-9]{8}(?:-[a-f0-9]{4}){3}-[a-f0-9]{12}$/i.test(ids[0]))
+                throw new Error("ChatGPT 新会话身份尚未确认，未读取输出附件");
+            conversationId = ids[0];
+        }
+        const scoped = messages.filter(message => typeof message.conversationId === "string" && typeof message.messageId === "string"
+            && message.conversationId === conversationId);
+        const sessionGuard = `const selected = document.querySelector('[data-app-action-sidebar-thread-selected="true"], [data-app-action-sidebar-thread-active="true"]');
+      if (selected?.getAttribute('data-app-action-sidebar-thread-id') !== ${JSON.stringify(active.id)}
+        || selected?.getAttribute('data-app-action-sidebar-thread-host-id') !== ${JSON.stringify(active.host)}) throw new Error('ChatGPT 会话已变化，未读取输出附件');`;
+        const references = await this.evaluate(`(() => {
+      ${sessionGuard}
+      const messages = ${JSON.stringify(scoped)};
+      const references = [];
+      for (const node of document.querySelectorAll(${JSON.stringify(assistantMessageSelector)})) {
+        const message = node.closest('[data-response-annotation-target][data-response-annotation-conversation]');
+        if (!message || !messages.some(item => item.conversationId === message.getAttribute('data-response-annotation-conversation') && item.messageId === message.getAttribute('data-response-annotation-target'))) continue;
+        for (const link of node.querySelectorAll('a[href], img[src], video[src], source[src], [data-file-reference][data-prompt-link-href]')) {
+          const href = link.getAttribute('href') ?? link.getAttribute('src') ?? link.getAttribute('data-prompt-link-href');
+          if (href) references.push(href);
+        }
+      }
+      return references;
+    })()`);
+        const paths = [...new Set(references.map(href => chatgptAttachmentPath(href, outputDirectory)).filter((path) => Boolean(path)))];
+        if (paths.length > attachments_1.MAX_ATTACHMENTS)
+            throw new Error("单条消息最多包含 8 个附件");
+        const output = [];
+        let total = 0;
+        for (const path of paths) {
+            const fileSlot = `__agentBridgeChatgptOutput_${(0, node_crypto_1.randomUUID)().replaceAll("-", "")}`;
+            let file;
+            let readFailure;
+            try {
+                const metadata = await this.evaluate(`(async () => {
+        ${sessionGuard}
+        globalThis[${JSON.stringify(fileSlot)}] = '';
+        const call = (name, params) => new Promise((resolve, reject) => {
+          const requestId = crypto.randomUUID();
+          const finish = () => { clearTimeout(timer); window.removeEventListener('message', receive); };
+          const receive = event => {
+            const response = event.data;
+            if ((event.source !== window && !(event.source === null && event.origin === '')) || response?.type !== 'fetch-response' || response.requestId !== requestId) return;
+            finish();
+            if (response.responseType !== 'success' || response.status !== 200) { reject(new Error('ChatGPT 输出附件读取失败')); return; }
+            try { resolve(JSON.parse(response.bodyJsonString)); } catch { reject(new Error('ChatGPT 输出附件响应无效')); }
+          };
+          const timer = setTimeout(() => { finish(); reject(new Error('ChatGPT 输出附件读取超时')); }, ${this.timeoutMs});
+          window.addEventListener('message', receive);
+          try { window.electronBridge.sendMessageFromView({ type: 'fetch', requestId, method: 'POST', url: 'vscode://codex/' + name, body: JSON.stringify(params) }); }
+          catch (error) { finish(); reject(error); }
+        });
+        const params = { hostId: ${JSON.stringify(active.host)}, path: ${JSON.stringify(path)} };
+        const metadata = await call('read-file-metadata', params);
+        if (!metadata.isFile || !Number.isSafeInteger(metadata.sizeBytes) || metadata.sizeBytes <= 0) throw new Error('ChatGPT 输出附件元数据无效');
+        if (!Number.isFinite(metadata.createdAtMs) || metadata.createdAtMs < ${startedAt - 5000}) throw new Error('ChatGPT 输出附件不是本轮创建的文件');
+        if (metadata.sizeBytes > ${attachments_1.MAX_ATTACHMENT_BYTES}) throw new Error('单个附件不能超过 32 MiB');
+        if (metadata.sizeBytes > ${attachments_1.MAX_TOTAL_ATTACHMENT_BYTES - total}) throw new Error('单条消息附件总大小不能超过 64 MiB');
+        { ${sessionGuard} }
+        const entry = [...document.scripts].find(script => /\\/assets\\/index-[^/]+\\.js$/.test(script.src));
+        if (!entry) throw new Error('ChatGPT 桌面原生接口入口未找到');
+        const source = await (await fetch(entry.src)).text();
+        const rpc = source.match(/["'](\\.\\/rpc-[\\w-]+\\.js)["']/);
+        if (!rpc) throw new Error('ChatGPT 桌面原生附件接口未找到');
+        const { appServices: services } = await import(new URL(rpc[1], entry.src).href);
+        { ${sessionGuard} }
+        const file = await services.workspaceFiles.read({ ...params, representation: 'blob' });
+        { ${sessionGuard} }
+        if (globalThis[${JSON.stringify(fileSlot)}] !== '') throw new Error('ChatGPT 输出附件读取已取消');
+        if (typeof file.blob !== 'string' || file.blob.length !== Math.ceil(metadata.sizeBytes / 3) * 4) throw new Error('ChatGPT 输出附件内容无效');
+        globalThis[${JSON.stringify(fileSlot)}] = file.blob;
+        return { length: file.blob.length, size: metadata.sizeBytes };
+      })()`);
+                if (!Number.isSafeInteger(metadata.length) || metadata.length <= 0 || metadata.length > Math.ceil(attachments_1.MAX_ATTACHMENT_BYTES / 3) * 4)
+                    throw new Error("ChatGPT 输出附件内容无效");
+                const chunks = [];
+                for (let offset = 0; offset < metadata.length; offset += 256 * 1024) {
+                    const chunk = await this.evaluate(`(() => { ${sessionGuard} return globalThis[${JSON.stringify(fileSlot)}]?.slice(${offset}, ${offset + 256 * 1024}); })()`);
+                    if (typeof chunk !== "string" || chunk.length !== Math.min(256 * 1024, metadata.length - offset))
+                        throw new Error("ChatGPT 输出附件分块读取失败");
+                    chunks.push(chunk);
+                }
+                file = { ...metadata, contentsBase64: chunks.join("") };
+            }
+            catch (error) {
+                readFailure = error;
+                throw error;
+            }
+            finally {
+                try {
+                    await this.evaluate(`delete globalThis[${JSON.stringify(fileSlot)}]`);
+                }
+                catch (cleanupError) {
+                    if (readFailure === undefined)
+                        throw cleanupError;
+                    throw new AggregateError([readFailure, cleanupError], `${readFailure instanceof Error ? readFailure.message : String(readFailure)}；输出附件缓存清理失败`, { cause: readFailure });
+                }
+            }
+            if (typeof file.contentsBase64 !== "string" || file.contentsBase64.length > Math.ceil(attachments_1.MAX_ATTACHMENT_BYTES / 3) * 4)
+                throw new Error("ChatGPT 输出附件内容无效");
+            const data = Buffer.from(file.contentsBase64, "base64");
+            if (data.toString("base64") !== file.contentsBase64 || data.byteLength !== file.size)
+                throw new Error("ChatGPT 输出附件大小或编码不一致");
+            const filename = (0, attachments_1.attachmentFilename)(path);
+            const imageType = (0, attachments_1.detectImageContentType)(data);
+            const types = { txt: "text/plain", md: "text/markdown", pdf: "application/pdf", json: "application/json", zip: "application/zip", mp4: "video/mp4", webm: "video/webm", mov: "video/quicktime", mp3: "audio/mpeg", wav: "audio/wav" };
+            const contentType = imageType ?? file.mimeType ?? types[filename.split(".").at(-1)?.toLowerCase() ?? ""] ?? "application/octet-stream";
+            output.push({ kind: imageType ? "image" : "file", data, filename, contentType });
+            total += data.byteLength;
+            (0, attachments_1.validateAttachments)(output);
+        }
+        return output;
+    }
     async waitFor(expression, message) {
         const deadline = Date.now() + this.timeoutMs;
         while (Date.now() < deadline) {