mu-agent-bridge 1.0.39 → 1.0.41

package/README.md

@@ -146,3 +146,19 @@ Windows 路径时，可设置 `DSH_INSTALL_DIR`。
 ## AUN 身份管理
 
 创建、连接、关联和 AUN 通信统一由独立 `agent-bridge-aun` 插件完成。安装并启动 AUN 后，在 ABWeb 的“通道 → AUN”创建或选择身份，再将已连接 AID 关联到已启动的 Agent；用 `mab status` 查看状态。Owner AID 仅作本地归属配置，不代表 AUN Owner 关系已激活。完整步骤见 [AUN 插件与 AID 身份管理](docs/aun-plugin-identities.md)；给 Codex、Claude Code 直接执行的 CLI 说明见 [使用说明](使用说明.md)。
+
+### 飞书凭据与办公 Agent 关联
+
+在 ABWeb 的“飞书通道 → 手动配置凭据”中填写 App ID、App Secret，并选择“关联办公 Agent”。Secret 使用密码框显示；已保存的密钥保持掩码，不通过状态接口返回。WorkBuddy、千问办公、豆包根据运行后台的机器上是否存在可执行文件检测，文件缺失或插件未就绪的选项置灰。自定义安装位置请在对应插件配置中填写 `executablePath`。
+
+也可以使用 CLI，Secret 在命令执行后隐藏输入，不写在命令参数中：
+
+```bash
+mab feishu configure cli_你的应用ID --agent workbuddy
+mab feishu agents
+mab feishu list
+mab feishu bind cli_你的应用ID workbuddy
+mab feishu unbind cli_你的应用ID
+```
+
+`configure` 保存凭据及可选关联后，需要在 ABWeb 重载飞书插件以连接机器人。非交互终端请使用网页密码框；不要把 Secret 写进命令行、脚本或仓库。

package/dist/src-ts/cli-commands.js

@@ -5,6 +5,7 @@ exports.resolveLocalControlHost = resolveLocalControlHost;
 exports.controlUrl = controlUrl;
 exports.runPluginCommand = runPluginCommand;
 exports.runCoreHelp = runCoreHelp;
+const secret_input_1 = require("./secret-input");
 const node_http_1 = require("node:http");
 const MAX_BODY_BYTES = 1024 * 1024;
 const PLUGIN_ID = /^[a-z][a-z0-9-]{1,63}$/;
@@ -108,6 +109,7 @@ function commandManifest(value, plugin) {
         || !Array.isArray(value.commands) || value.commands.some((command) => !object(command)
         || typeof command.name !== "string" || !/^[a-z][a-z0-9-]*$/.test(command.name)
         || typeof command.summary !== "string" || !command.summary.trim() || typeof command.usage !== "string" || !command.usage.trim()
+        || (command.secretPrompt !== undefined && (typeof command.secretPrompt !== "string" || !command.secretPrompt.trim()))
         || (command.examples !== undefined && (!Array.isArray(command.examples) || command.examples.some((example) => typeof example !== "string"))))) {
         throw new CliError("插件命令清单协议无效（需要 protocolVersion: 1）");
     }
@@ -126,7 +128,7 @@ async function runPluginCommand(id, args, port, options = {}) {
             throw new CliError(`插件“${id}”未安装；请先到 ABWeb 安装插件`, 2);
         if (!plugin.capabilities.includes("cli"))
             throw new CliError(`插件“${plugin.displayName}”未提供 CLI 命令；请升级对应插件`, 2);
-        if (plugin.status !== "ready")
+        if (!["ready", "degraded"].includes(plugin.status))
             throw new CliError(`插件“${plugin.displayName}”未就绪（${plugin.status}）`, 2);
         const path = `/api/plugins/${id}/commands`;
         const response = await requestJson(port, path, options);
@@ -146,7 +148,9 @@ async function runPluginCommand(id, args, port, options = {}) {
                 ])].join("\n");
             return output({ ok: true, message, data: { ...manifest, commands: selected } }, 0, json);
         }
-        const executed = await requestJson(port, path, options, { protocolVersion: 1, argv });
+        const prompt = manifest.commands.find((command) => command.name === argv[0])?.secretPrompt;
+        const secret = prompt ? await (options.readSecret ?? secret_input_1.readSecret)(prompt) : undefined;
+        const executed = await requestJson(port, path, options, { protocolVersion: 1, argv, ...(secret === undefined ? {} : { secret }) });
         const result = executed.value;
         if (!object(result) || typeof result.ok !== "boolean" || typeof result.message !== "string"
             || (executed.status >= 200 && executed.status < 300 ? !result.ok : result.ok)

package/dist/src-ts/cli.js

@@ -235,7 +235,6 @@ async function serve() {
     await manager.discover();
     await manager.versions.load();
     const coreVersion = await Promise.resolve().then(() => __importStar(require("node:fs/promises"))).then(({ readFile }) => readFile((0, node_path_1.resolve)(__dirname, "../../package.json"), "utf8").then((value) => JSON.parse(value).version).catch(() => "0.0.0"));
-    await checkAndUpgradePlugins(manager);
     const port = Number(process.env.AGENT_BRIDGE_PORT ?? "26107");
     const host = process.env.AGENT_BRIDGE_HOST ?? "127.0.0.1";
     if (host !== "127.0.0.1" && host !== "localhost" && host !== "::1" && !process.env.AGENT_BRIDGE_TOKEN) {
@@ -264,6 +263,7 @@ async function serve() {
             logger.error(`plugin failed: ${id}`, { error: error instanceof Error ? error.message : String(error) });
         }
     }
+    await checkAndUpgradePlugins(manager);
     const intervalMs = Math.max(60_000, Number(process.env.AGENT_BRIDGE_PLUGIN_UPDATE_INTERVAL_MS ?? 300_000) || 300_000);
     const updateTimer = setInterval(() => void checkAndUpgradePlugins(manager), intervalMs);
     updateTimer.unref?.();

package/dist/src-ts/control-server.js

@@ -251,6 +251,8 @@ class ControlServer {
                 const result = await identity.create(body.aid, body.ownerAid);
                 return this.json(res, result.status === "等待 Owner 确认" ? 202 : result.status === "existing" ? 200 : 201, result);
             }
+            if (method === "GET" && url.pathname === "/api/agents/availability")
+                return this.json(res, 200, { agents: await this.options.manager.availableAgents() });
             if (method === "GET" && url.pathname === "/api/plugins")
                 return this.json(res, 200, { ok: true, plugins: this.options.manager.list() });
             if (method === "GET" && url.pathname === "/api/plugins/catalog")

package/dist/src-ts/daemon-process.js

@@ -3,6 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.isDaemonCommand = isDaemonCommand;
 /** 只识别直接运行本安装 CLI 的后台进程，避免旧地址文件中的 PID 被其他程序复用。 */
 function isDaemonCommand(commandLine, cli) {
-    const args = [...commandLine.matchAll(/"([^"]*)"|(\S+)/g)].map((match) => (match[1] ?? match[2]).replaceAll("\\", "/").toLowerCase());
-    return args[1] === cli.replaceAll("\\", "/").toLowerCase() && ["start", "--serve"].includes(args[2]);
+    const normalize = (value) => value.replace(/[\\/]+/g, "/").toLowerCase();
+    const args = [...commandLine.matchAll(/"([^"]*)"|(\S+)/g)].map((match) => normalize(match[1] ?? match[2]));
+    return args[1] === normalize(cli) && ["start", "--serve"].includes(args[2]);
 }

package/dist/src-ts/plugin-manager.js

@@ -385,7 +385,7 @@ class PluginManager {
                         if (trustedChannel && (typeof message.peerId !== "string" || !message.peerId.trim() || [message.peerId, message.recipientId, message.chatId, message.threadId].some(value => value !== undefined && (typeof value !== "string" || value.length > 512 || /[\u0000-\u001f*]/.test(value)))))
                             throw new agent_1.AgentError("通道来源标识无效");
                         const target = message.agentPlugin || "qwenwork";
-                        if (/^\/sessions(?:\s|$)/.test(message.text.trimStart())) {
+                        if (/^\/sessions(?:\s|$)/.test(message.text.trimStart()) || (0, session_management_1.isDailySummaryRequest)(message.text)) {
                             if (!trustedChannel)
                                 throw new agent_1.AgentError("当前通道不支持会话管理");
                             const current = await this.sessions.current(message, target);

package/dist/src-ts/plugins/aun/index.js

@@ -671,7 +671,7 @@ class AunPlugin {
                 method,
                 headers: { accept: "application/json", ...(body === undefined ? {} : { "content-type": "application/json" }) },
                 ...(body === undefined ? {} : { body: JSON.stringify(body) }),
-                signal: AbortSignal.timeout(5000),
+                signal: AbortSignal.timeout(method === "PATCH" ? 120_000 : 5000),
                 redirect: "error",
             });
         }

package/dist/src-ts/plugins/chatgpt/cdp-client.js

@@ -111,7 +111,8 @@ class ChatgptCdpClient {
       if (selected?.getAttribute('data-app-action-sidebar-thread-id') !== ${JSON.stringify(session.id)}
         || selected?.getAttribute('data-app-action-sidebar-thread-host-id') !== ${JSON.stringify(session.host)}) return { supported: false, reason: '读取期间活动会话身份发生变化' };
       if (document.querySelector(${JSON.stringify(stopButtonSelector)})) return { supported: false, reason: 'ChatGPT 正在生成回复，暂不读取历史' };
-      const turns = [...document.querySelectorAll(${JSON.stringify(exports.turnSelector)})];
+      const legacyTurns = [...document.querySelectorAll(${JSON.stringify(exports.turnSelector)})];
+      const turns = legacyTurns.length ? legacyTurns : [...document.querySelectorAll('[data-content-search-turn-key]')];
       const output = [];
       const missingReasons = [];
       let chars = 0;
@@ -121,7 +122,7 @@ class ChatgptCdpClient {
         output.push({ role, text });
       };
       for (const turn of turns) {
-        const turnId = turn.getAttribute(${JSON.stringify(turnIdAttribute)});
+        const turnId = turn.getAttribute(${JSON.stringify(turnIdAttribute)}) || turn.getAttribute('data-content-search-turn-key');
         if (!turnId) {
           missingReasons.push('部分消息缺少可验证的 turn 身份');
           continue;

package/dist/src-ts/plugins/chatgpt/index.js

@@ -6,7 +6,7 @@ const cdp_client_1 = require("./cdp-client");
 const session_store_1 = require("./session-store");
 exports.chatgptManifest = {
     id: "chatgpt",
-    version: "1.0.9",
+    version: "1.0.10",
     displayName: "ChatGPT（Codex）",
     type: "agent",
     entry: "dist/index.js",

package/dist/src-ts/plugins/feishu/index.js

@@ -11,6 +11,7 @@ const commands = [
     { name: "status", summary: "查看飞书通道状态", usage: "mab feishu status" },
     { name: "list", summary: "列出机器人连接状态和关联 Agent", usage: "mab feishu list" },
     { name: "agents", summary: "列出已启动的 Agent 插件", usage: "mab feishu agents" },
+    { name: "configure", summary: "保存机器人凭据并关联办公 Agent", usage: "mab feishu configure <app-id> [--agent <plugin-id>]", secretPrompt: "请输入飞书 App Secret" },
     { name: "bind", summary: "将已连接的机器人关联到 Agent", usage: "mab feishu bind <bot-id> <plugin-id>" },
     { name: "unbind", summary: "解除机器人关联并保留凭据", usage: "mab feishu unbind <bot-id>" },
 ];
@@ -149,8 +150,10 @@ class FeishuPlugin {
         }
         if (body.protocolVersion !== 1 || !Array.isArray(body.argv) || !body.argv.every((arg) => typeof arg === "string"))
             return this.json(response, 400, { ok: false, message: "命令协议版本或 argv 无效" });
-        const [command, appId, pluginId] = body.argv;
-        const expectedLength = command === "bind" ? 3 : command === "unbind" ? 2 : 1;
+        const [command, appId, pluginArg] = body.argv;
+        const pluginId = command === "configure" && body.argv[2] === "--agent" ? body.argv[3] : pluginArg;
+        const secret = typeof body.secret === "string" ? body.secret.trim() : "";
+        const expectedLength = command === "bind" ? 3 : command === "unbind" ? 2 : command === "configure" ? (body.argv.length === 4 ? 4 : 2) : 1;
         if (!commands.some((item) => item.name === command) || body.argv.length !== expectedLength || body.argv.some((arg) => !arg.trim()))
             return this.json(response, 400, { ok: false, message: "命令或参数无效，请查看 mab feishu help" });
         if (command === "status") {
@@ -161,34 +164,44 @@ class FeishuPlugin {
             const bots = this.bots.map((bot) => ({ app_id: bot.app_id, status: this.botStates.get(bot.app_id)?.status || "degraded", pluginId: this.bindings[bot.app_id] || "" }));
             return this.json(response, 200, { ok: true, message: bots.map((bot) => `${bot.app_id}：${bot.status}，Agent：${bot.pluginId || "未关联"}`).join("\n") || "尚未配置飞书机器人", data: bots });
         }
-        if (command !== "agents" && !this.bots.some((bot) => bot.app_id === appId))
+        if (command === "configure" && (!appId || !secret || body.argv.length === 4 && (body.argv[2] !== "--agent" || !pluginId)))
+            return this.json(response, 400, { ok: false, message: "用法：mab feishu configure <app-id> [--agent <plugin-id>]，Secret 必须输入" });
+        if (command !== "configure" && command !== "agents" && !this.bots.some((bot) => bot.app_id === appId))
             return this.json(response, 400, { ok: false, message: "飞书机器人标识不存在" });
         if (command === "bind" && this.botStates.get(appId)?.status !== "ready")
             return this.json(response, 400, { ok: false, message: "飞书机器人当前未连接" });
-        if (command === "agents" || command === "bind") {
+        if (command === "agents" || command === "bind" || command === "configure" && pluginId) {
             const runtime = this.context?.runtime;
             const controlUrl = runtime && "controlUrl" in runtime ? runtime.controlUrl : undefined;
             if (typeof controlUrl !== "string" || !controlUrl)
                 return this.json(response, 503, { ok: false, message: "运行时未提供控制 API 地址，请升级核心并重启后台" });
             let agents;
             try {
-                const result = await fetch(new URL("/api/plugins", controlUrl), { signal: AbortSignal.timeout(5000) });
+                const result = await fetch(new URL(command === "configure" ? "/api/agents/availability" : "/api/plugins", controlUrl), { signal: AbortSignal.timeout(5000) });
                 if (!result.ok)
                     throw new Error("控制 API 请求失败");
                 const data = await result.json();
-                if (!Array.isArray(data.plugins))
+                const entries = command === "configure" ? data.agents : data.plugins;
+                if (!Array.isArray(entries))
                     throw new Error("控制 API 响应无效");
-                agents = data.plugins.filter((item) => item && item.type === "agent" && item.status === "ready" && typeof item.id === "string").map((item) => ({ id: item.id }));
+                agents = entries.filter((item) => item && typeof item.id === "string" && (command === "configure" ? item.available === true : item.type === "agent" && item.status === "ready")).map((item) => ({ id: item.id }));
             }
             catch {
                 return this.json(response, 502, { ok: false, message: "无法读取当前 Agent 插件，请检查后台控制 API" });
             }
             if (command === "agents")
                 return this.json(response, 200, { ok: true, message: agents.map((agent) => agent.id).join("\n") || "没有已启动的 Agent 插件", data: agents });
-            if (!agents.some((agent) => agent.id === pluginId))
+            if (pluginId && !agents.some((agent) => agent.id === pluginId))
                 return this.json(response, 400, { ok: false, message: "目标 Agent 插件未启动或类型无效" });
         }
         try {
+            if (command === "configure") {
+                this.saveBot(appId, secret);
+                await this.persist();
+                if (pluginId)
+                    await this.bindBot(appId, pluginId);
+                return this.json(response, 200, { ok: true, message: "飞书凭据已保存，请重载飞书插件以连接机器人", data: { app_id: appId, ...(pluginId ? { pluginId } : {}) } });
+            }
             await this.bindBot(appId, command === "bind" ? pluginId : "");
             this.json(response, 200, { ok: true, message: command === "bind" ? "飞书机器人已关联 Agent" : "飞书机器人已解除 Agent 关联", data: { app_id: appId, ...(command === "bind" ? { pluginId } : {}) } });
         }

package/dist/src-ts/plugins/feishu/public/app.js

@@ -29,9 +29,9 @@
     if (loading) return;
     loading = true;
     try {
-      const [state, plugins] = await Promise.all([request("/api/plugins/feishu/setup/status"), request("/api/plugins")]);
-      const agents = (plugins.plugins || []).filter((plugin) => plugin.type === "agent" && plugin.status === "ready");
-      const options = agents.map((agent) => new Option(agent.displayName || agent.id, agent.id));
+      const [state, availability] = await Promise.all([request("/api/plugins/feishu/setup/status"), request("/api/agents/availability")]);
+      const agents = availability.agents || [];
+      const agentOptions = () => agents.map((agent) => { const option = new Option(`${agent.displayName || agent.id}（${agent.available ? "可用" : agent.reason}）`, agent.id); option.disabled = !agent.available; return option; });
       bots = state.bots || [];
       botTable.replaceChildren();
       for (const bot of [...bots].sort((a, b) => Number(Boolean(b.pluginId)) - Number(Boolean(a.pluginId)) || Number(b.status === "ready") - Number(a.status === "ready") || (Date.parse(b.binding_time) || 0) - (Date.parse(a.binding_time) || 0))) {
@@ -39,18 +39,20 @@
         for (const text of [bot.app_id, bot.status === "ready" ? "已连接" : bot.message || "未连接", bot.pluginId || "未关联", bot.binding_time ? new Date(bot.binding_time).toLocaleString() : "—"]) { const cell = document.createElement("td"); cell.textContent = text; row.append(cell); }
         const controls = document.createElement("td");
         const select = document.createElement("select"); select.setAttribute("aria-label", `${bot.app_id} 关联 Agent`);
-        select.append(new Option("选择 Agent", ""), ...agents.map((agent) => new Option(agent.displayName || agent.id, agent.id))); select.value = bot.pluginId || "";
+        select.append(new Option("选择 Agent", ""), ...agentOptions()); select.value = bot.pluginId || "";
         function button(text, action) { const button = document.createElement("button"); button.type = "button"; button.textContent = text; button.onclick = async () => { button.disabled = true; try { await action(); } catch (error) { show(String(error), true); } finally { button.disabled = false; } }; return button; }
-        async function bind(pluginId) { await request("/api/plugins/feishu/bind", "POST", { app_id: bot.app_id, pluginId }); await load(false); show(`${bot.app_id} ${pluginId ? "已关联 " + pluginId : "已解除关联"}`); }
-        controls.append(select, button("关联", () => bind(select.value)), button("解除", () => bind("")), button("编辑凭据", async () => { credentials.elements.app_id.value = bot.app_id; savedAppId = bot.app_id; secretMasked = true; credentials.elements.app_secret.value = "********"; credentials.elements.app_secret.required = false;  }));
+        async function bind(pluginId) { if (pluginId && !agents.find((agent) => agent.id === pluginId)?.available) throw new Error("目标办公 Agent 不可用"); await request("/api/plugins/feishu/bind", "POST", { app_id: bot.app_id, pluginId }); await load(false); show(`${bot.app_id} ${pluginId ? "已关联 " + pluginId : "已解除关联"}`); }
+        controls.append(select, button("关联", () => bind(select.value)), button("解除", () => bind("")), button("编辑凭据", async () => { credentials.elements.app_id.value = bot.app_id; credentials.elements.agent_plugin.value = bot.pluginId || ""; savedAppId = bot.app_id; secretMasked = true; credentials.elements.app_secret.value = "********"; credentials.elements.app_secret.required = false;  }));
         row.append(controls); botTable.append(row);
       }
       if (refreshForm) {
-      settings.elements.agent_plugin.replaceChildren(new Option("默认 Agent", ""), ...options);
+      credentials.elements.agent_plugin.replaceChildren(new Option("保留原有关联", ""), ...agentOptions());
+      settings.elements.agent_plugin.replaceChildren(new Option("默认 Agent", ""), ...agentOptions());
       settings.elements.agent_plugin.value = state.agent_plugin || "";
       settings.elements.allow_from.value = state.allow_from || "";
       settings.elements.allow_chats.value = state.allow_chats || "";
       credentials.elements.app_id.value = state.app_id || "";
+      credentials.elements.agent_plugin.value = state.bindings?.[credentials.elements.app_id.value] || "";
       savedAppId = state.configured ? state.app_id : "";
       secretMasked = state.configured;
       credentials.elements.app_secret.value = secretMasked ? "********" : "";
@@ -120,14 +122,24 @@
   credentials.elements.app_id.oninput = () => {
 
     const changed = credentials.elements.app_id.value.trim() !== savedAppId;
+    if (changed) credentials.elements.agent_plugin.value = "";
     if (changed && secretMasked) { credentials.elements.app_secret.value = ""; secretMasked = false; }
     credentials.elements.app_secret.required = changed;
   };
   credentials.elements.app_secret.oninput = () => { secretMasked = false;  };
   credentials.elements.app_secret.addEventListener("invalid", () => show("首次配置或更换机器人时，App ID 和 App Secret 都需要填写", true));
+  function selectedAgentUnavailable() { return credentials.elements.agent_plugin.selectedOptions?.[0]?.disabled || false; }
   credentials.onsubmit = async (event) => {
     event.preventDefault(); const button = credentials.querySelector("button"); button.disabled = true; show("正在保存凭据并连接飞书");
-    try { await request("/api/plugins/feishu/bot", "POST", { app_id: credentials.elements.app_id.value.trim(), app_secret: secretMasked ? "" : credentials.elements.app_secret.value }); savedAppId = credentials.elements.app_id.value.trim(); secretMasked = true; credentials.elements.app_secret.value = "********"; await reconnect(); show("凭据已保存，机器人已连接"); }
+    try {
+      const agentPlugin = credentials.elements.agent_plugin.value;
+      if (agentPlugin && selectedAgentUnavailable()) throw new Error("目标办公 Agent 不可用");
+      await request("/api/plugins/feishu/bot", "POST", { app_id: credentials.elements.app_id.value.trim(), app_secret: secretMasked ? "" : credentials.elements.app_secret.value });
+      savedAppId = credentials.elements.app_id.value.trim();
+      secretMasked = true; credentials.elements.app_secret.value = "********";
+      if (agentPlugin) await request("/api/plugins/feishu/bind", "POST", { app_id: savedAppId, pluginId: agentPlugin });
+      await reconnect(); show("凭据已保存，机器人已连接");
+    }
     catch (error) { show(String(error), true); }
     finally { button.disabled = false; }
   };

package/dist/src-ts/plugins/feishu/public/index.html

@@ -8,7 +8,7 @@
     <dl><div><dt>连接状态</dt><dd id="connection">未配置</dd></div><div><dt>App ID</dt><dd id="app-id">未配置</dd></div><div><dt>关联 Agent</dt><dd id="bound-agent">未关联</dd></div></dl>
     <section><h2>机器人关联</h2><div class="table-wrap"><table><thead><tr><th>App ID</th><th>连接状态</th><th>关联 Agent</th><th>最近关联时间</th><th>操作</th></tr></thead><tbody id="bots"></tbody></table></div></section>
     <section><h2>创建设备授权</h2><div class="actions"><button id="begin" type="button">创建飞书机器人</button><a id="authorization-link" target="_blank" rel="noopener noreferrer" hidden>打开飞书创建链接</a></div><div id="authorization-details" hidden><img id="authorization-qr" width="256" height="256" alt="飞书机器人创建授权二维码"><p id="authorization-url"></p></div><p id="authorization-state" role="status"></p></section>
-    <form id="credentials"><h2>手动配置凭据</h2><div class="fields"><label>App ID<input name="app_id" required autocomplete="off"></label><label>App Secret<input name="app_secret" type="password" required autocomplete="new-password"></label></div><button type="submit">保存并连接</button></form>
+    <form id="credentials"><h2>手动配置凭据</h2><div class="fields"><label>App ID<input name="app_id" required autocomplete="off"></label><label>App Secret<input name="app_secret" type="password" required autocomplete="new-password"></label><label>关联办公 Agent<select name="agent_plugin"></select></label></div><button type="submit">保存并连接</button></form>
 
     <form id="settings"><h2>通道配置</h2><div class="fields"><label>默认 Agent<select name="agent_plugin"></select></label><label>允许的 open_id<input name="allow_from"></label><label>允许的 chat_id<input name="allow_chats"></label></div><button type="submit">保存配置</button></form>
   </main>

package/dist/src-ts/secret-input.js

@@ -0,0 +1,47 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.readSecret = readSecret;
+const node_readline_1 = require("node:readline");
+/** 密钥只在交互终端读取，不回显，也不进入 shell 历史。 */
+async function readSecret(prompt) {
+    const input = process.stdin;
+    if (!input.isTTY || !process.stderr.isTTY)
+        throw new Error("密钥需要在交互终端隐藏输入，请直接运行命令或使用网页密码框");
+    (0, node_readline_1.emitKeypressEvents)(input);
+    const wasRaw = input.isRaw;
+    input.setRawMode(true);
+    input.resume();
+    return new Promise((resolve, reject) => {
+        let value = "";
+        const finish = (error) => {
+            input.removeListener("keypress", onKey);
+            input.removeListener("end", onEnd);
+            input.removeListener("error", onError);
+            input.setRawMode(wasRaw);
+            input.pause();
+            process.stderr.write("\n");
+            if (error)
+                reject(error);
+            else
+                resolve(value);
+        };
+        const onEnd = () => finish(new Error("密钥输入已中断"));
+        const onError = () => finish(new Error("无法读取密钥"));
+        const onKey = (text, key) => {
+            if (key.ctrl && ["c", "d"].includes(key.name || ""))
+                return onEnd();
+            if (key.name === "return" || key.name === "enter")
+                return finish(value.trim() ? undefined : new Error("App Secret 不能为空"));
+            if (key.name === "backspace") {
+                value = Array.from(value).slice(0, -1).join("");
+                return;
+            }
+            if (text && !key.ctrl && !key.meta && !/[\x00-\x1f\x7f]/.test(text))
+                value += text;
+        };
+        input.on("keypress", onKey);
+        input.once("end", onEnd);
+        input.once("error", onError);
+        process.stderr.write(`${prompt}（输入不显示）：`);
+    });
+}

package/dist/src-ts/session-management.js

@@ -1,6 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.SessionManagement = void 0;
+exports.isDailySummaryRequest = isDailySummaryRequest;
 const node_crypto_1 = require("node:crypto");
 const promises_1 = require("node:fs/promises");
 const node_path_1 = require("node:path");
@@ -8,7 +9,11 @@ const session_archive_1 = require("./session-archive");
 const session_summary_1 = require("./session-summary");
 class ManagementError extends Error {
 }
-const usage = "用法：/sessions today [qwenwork|doubao|dsh] [--summary]；/sessions list [插件ID] [--page 页码 --snapshot 编号]；/sessions show <编号>；/sessions native-list <插件ID>；/sessions native-show <编号>；/sessions summary --from <编号,...> [主题]";
+const dailyPlugins = ["qwenwork", "workbuddy", "doubao", "chatgpt", "dsh"];
+const usage = "用法：/sessions today [插件ID] [--summary]；/sessions last <1–24>h [插件ID] [--summary]；/sessions list [插件ID] [--page 页码 --snapshot 编号]；/sessions show <编号>；/sessions native-list <插件ID>；/sessions native-show <编号>；/sessions summary --from <编号,...> [主题]";
+function isDailySummaryRequest(text) {
+    return /(?:今天|今日).{0,20}(?:聊了什么|聊了哪些|话题|小结|总结)|(?:小结|总结).{0,20}(?:今天|今日|对话)|最近\s*\d+\s*(?:小时|h).{0,20}(?:聊|话题|小结|总结|对话|消息)/i.test(text.trim());
+}
 class SessionManagement {
     directory;
     audit;
@@ -115,7 +120,8 @@ class SessionManagement {
         return { sessions: result.sessions.filter(item => sources.includes(item.source) && (!agentPlugin || item.agentPlugin === agentPlugin)), complete: result.complete };
     }
     async command(text, context) {
-        if (!/^\/sessions(?:\s|$)/.test(text.trimStart()))
+        const dailyRequest = isDailySummaryRequest(text);
+        if (!dailyRequest && !/^\/sessions(?:\s|$)/.test(text.trimStart()))
             return undefined;
         await this.load();
         const revision = this.revision;
@@ -127,7 +133,17 @@ class SessionManagement {
             if (!context.sessionId)
                 throw new ManagementError("当前逻辑会话无效");
             const input = text.trim();
-            const today = input.match(/^\/sessions today(?: (qwenwork|doubao|dsh))?( --summary)?$/);
+            const today = input.match(/^\/sessions today(?: (qwenwork|workbuddy|doubao|chatgpt|dsh))?( --summary)?$/);
+            const recent = input.match(/^\/sessions last (\d+)h(?: (qwenwork|workbuddy|doubao|chatgpt|dsh))?( --summary)?$/i);
+            const naturalRecent = dailyRequest ? input.match(/最近\s*(\d+)\s*(?:小时|h)/i) : undefined;
+            if (naturalRecent)
+                return await this.summarizeToday(context, undefined, Boolean(this.settings.summarizer), Number(naturalRecent[1]));
+            if (recent)
+                return await this.summarizeToday(context, recent[2], Boolean(recent[3]), Number(recent[1]));
+            if (/^\/sessions last\b/i.test(input))
+                throw new ManagementError("时间范围须为最近1至24小时，例如 /sessions last 4h");
+            if (dailyRequest)
+                return await this.summarizeToday(context, undefined, Boolean(this.settings.summarizer));
             if (today)
                 return await this.summarizeToday(context, today[1], Boolean(today[2]));
             const nativeList = input.match(/^\/sessions native-list ([a-z][a-z0-9-]*)(?: --page ([1-9]\d*))?$/);
@@ -224,29 +240,34 @@ class SessionManagement {
     providers() {
         return this.nativeProviders().map(({ pluginId, provider, status }) => ({ pluginId, scope: provider.scope, mode: provider.mode, limitation: provider.limitation, status }));
     }
-    async summarizeToday(context, onlyPlugin, summarize = false) {
+    async summarizeToday(context, onlyPlugin, summarize = false, hours) {
         const revision = this.revision;
         const cutoff = Date.now();
         const configured = this.settings.summarizer?.model;
+        if (hours !== undefined && (!Number.isInteger(hours) || hours < 1 || hours > 24))
+            throw new ManagementError("时间范围须为最近1至24小时");
         if (summarize && !this.settings.summarizer)
-            throw new ManagementError("未配置本机只读总结模型，请先使用 /sessions today 获取今日全部对话材料");
-        const plugins = onlyPlugin ? [onlyPlugin] : ["qwenwork", "doubao", "dsh"];
+            throw new ManagementError("未配置本机只读总结模型，请先获取对话材料");
+        const plugins = onlyPlugin ? [onlyPlugin] : dailyPlugins;
         const expected = plugins.map(pluginId => {
             const current = this.currentNative(context, pluginId);
             return { ...current, scope: current.provider.scope };
         });
         const check = () => { this.checkRevision(revision); for (const record of expected)
             this.currentNative(context, record.pluginId, record); };
-        const start = new Date(new Intl.DateTimeFormat("en-CA", { timeZone: "Asia/Shanghai", year: "numeric", month: "2-digit", day: "2-digit" }).format(new Date()) + "T00:00:00+08:00").getTime();
-        const end = start + 24 * 60 * 60 * 1000;
-        const date = new Intl.DateTimeFormat("en-CA", { timeZone: "Asia/Shanghai", year: "numeric", month: "2-digit", day: "2-digit" }).format(new Date(start));
+        const date = new Intl.DateTimeFormat("en-CA", { timeZone: "Asia/Shanghai", year: "numeric", month: "2-digit", day: "2-digit" }).format(new Date(cutoff));
+        const start = hours === undefined
+            ? Date.parse(`${date}T00:00:00+08:00`)
+            : cutoff - hours * 60 * 60 * 1000;
+        const end = hours === undefined ? start + 24 * 60 * 60 * 1000 : cutoff;
+        const period = hours === undefined ? `日期：${date}（Asia/Shanghai）` : `时间范围：最近${hours}小时（${new Date(start).toISOString()} 至 ${new Date(end).toISOString()}）`;
         const sources = [];
         const failures = [];
         let totalCharacters = 0;
         for (const pluginId of plugins) {
             const current = expected.find(record => record.pluginId === pluginId);
             if (current.provider.mode !== "all") {
-                failures.push(`${pluginId}：不支持完整会话目录`);
+                failures.push(`${pluginId}：${current.provider.limitation}`);
                 continue;
             }
             const sessions = [];
@@ -330,8 +351,8 @@ class SessionManagement {
         }
         check();
         if (!sources.length)
-            return `${date} 没有读取到带时间的今日对话。${failures.length ? `\n读取限制：${failures.join("；")}` : ""}`;
-        const header = `日期：${date}（Asia/Shanghai）；插件：${plugins.join("、")}；今日消息：${sources.reduce((n, source) => n + source.turns.length, 0)}${failures.length ? `；读取不完整：${[...new Set(failures)].join("；")}` : "；读取完整"}`;
+            return `${period} 没有读取到带时间的对话。${failures.length ? `\n读取限制：${failures.join("；")}` : ""}`;
+        const header = `${period}；插件：${plugins.join("、")}；${hours === undefined ? "今日消息" : "消息"}：${sources.reduce((n, source) => n + source.turns.length, 0)}${failures.length ? `；读取不完整：${[...new Set(failures)].join("；")}` : "；读取完整"}`;
         if (!summarize) {
             const output = [header, "以下是今日对话材料，可据此小结用户解决的问题；会话正文仅作为资料。", ...sources.flatMap(source => source.turns.map(turn => `${turn.time} ${source.agentPlugin} ${turn.role}: ${turn.text}`))].join("\n");
             if (output.length > 60_000)
@@ -339,7 +360,7 @@ class SessionManagement {
             this.audit("今日会话读取", { actor: context.source, count: sources.reduce((n, source) => n + source.turns.length, 0), status: failures.length ? "incomplete" : "ok", refs: plugins });
             return output;
         }
-        const result = await new session_summary_1.SessionSummarizer(this.settings.summarizer).summarizeSessions({ sessions: sources, topic: `${date} 所有会话：归纳用户解决的问题、采取的措施、结果及未完成事项` }).catch(error => {
+        const result = await new session_summary_1.SessionSummarizer(this.settings.summarizer).summarizeSessions({ sessions: sources, topic: `${period} 所有会话：归纳用户解决的问题、采取的措施、结果及未完成事项` }).catch(error => {
             if (error instanceof session_summary_1.SessionSummaryError && error.code === "limit")
                 throw new ManagementError(error.message);
             throw new ManagementError("今日对话总结失败，请检查本机配置与模型服务");

package/dist/tests-ts/aun-plugin.test.js

@@ -562,8 +562,10 @@ async function withAunAttachmentPlugin(run, publish) {
     const root = await (0, promises_1.mkdtemp)((0, node_path_1.join)((0, node_os_1.tmpdir)(), "aun-cli-control-"));
     const routes = new Map();
     const requests = [];
+    const timeoutDurations = [];
     const logs = [];
     const originalFetch = globalThis.fetch;
+    const originalTimeout = AbortSignal.timeout;
     let currentAid = "old.agentid.cn";
     const sdk = {
         AIDStore: class {
@@ -581,6 +583,7 @@ async function withAunAttachmentPlugin(run, publish) {
     };
     const plugin = new aun_1.AunPlugin({ sdk, ingress: { publish: async () => undefined } });
     try {
+        AbortSignal.timeout = ((milliseconds) => { timeoutDurations.push(milliseconds); return originalTimeout(milliseconds); });
         globalThis.fetch = (async (input, init) => {
             const url = String(input);
             requests.push({ url, method: init?.method ?? "GET", body: typeof init?.body === "string" ? init.body : undefined, signal: init?.signal ?? undefined });
@@ -623,6 +626,7 @@ async function withAunAttachmentPlugin(run, publish) {
         ]);
         strict_1.default.ok(requests.every(({ url }) => new URL(url).hostname === "127.0.0.1"));
         strict_1.default.ok(requests.every(({ signal }) => signal instanceof AbortSignal));
+        strict_1.default.deepEqual([...new Set(timeoutDurations)], [5000, 120_000]);
         strict_1.default.ok(JSON.stringify(created.body).includes("new.agentid.cn"));
         strict_1.default.doesNotMatch(JSON.stringify(created.body), /owner\.agentid\.cn/);
         strict_1.default.doesNotMatch(logs.join("\n"), /owner\.agentid\.cn/);
@@ -630,6 +634,7 @@ async function withAunAttachmentPlugin(run, publish) {
     }
     finally {
         globalThis.fetch = originalFetch;
+        AbortSignal.timeout = originalTimeout;
         await (0, promises_1.rm)(root, { recursive: true, force: true });
     }
 });

package/dist/tests-ts/chatgpt-history.test.js

@@ -195,3 +195,36 @@ function fixture() {
     strict_1.default.ok(result.missingReasons.some(reason => /专用正文/.test(reason)), JSON.stringify(result.missingReasons));
     strict_1.default.ok(result.missingReasons.some(reason => /身份/.test(reason)));
 });
+(0, node_test_1.default)("ChatGPT 新版桌面通过搜索轮次身份读取用户正文与当前会话最终答复", async () => {
+    const client = new chatgpt_1.ChatgptCdpClient();
+    const user = { querySelector: () => ({ innerText: "回一句：你很帅" }) };
+    const assistant = {
+        innerText: "你很帅",
+        closest: (selector) => selector.includes("data-response-annotation") ? {
+            getAttribute: (name) => name.endsWith("conversation") ? "one" : "message-one",
+        } : null,
+    };
+    const turn = {
+        getAttribute: (name) => name === "data-content-search-turn-key" ? "turn-one" : null,
+        querySelectorAll: (selector) => selector === "[data-user-message-bubble]" ? [user]
+            : selector === '[data-markdown-text-style="assistant-message"]' ? [assistant] : [],
+    };
+    const document = {
+        querySelector: (selector) => selector.includes("sidebar-thread-selected") ? {
+            getAttribute: (name) => name.endsWith("host-id") ? active.host : name.endsWith("thread-id") ? active.id : active.title,
+        } : null,
+        querySelectorAll: (selector) => selector === "[data-content-search-turn-key]" ? [turn] : [],
+    };
+    Object.assign(client, { connected: () => true, evaluate: async (expression) => {
+            strict_1.default.doesNotMatch(expression, /\.click\(|\.focus\(|Input\.|fetch\(|import\(|innerText\s*=/);
+            return (0, node_vm_1.runInNewContext)(expression, { document });
+        } });
+    const result = await client.readSessionHistory(active);
+    strict_1.default.equal(result.supported, true);
+    if (!result.supported)
+        return;
+    strict_1.default.deepEqual(JSON.parse(JSON.stringify(result.turns)), [
+        { role: "user", text: "回一句：你很帅" },
+        { role: "assistant", text: "你很帅" },
+    ]);
+});

package/dist/tests-ts/cli-commands.test.js

@@ -1,4 +1,37 @@
 "use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
 var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
@@ -303,3 +336,28 @@ function standardServer(onPost = (_request, response) => json(response, commandR
         await responseLimit.close();
     }
 });
+(0, node_test_1.default)("插件密钥通过隐藏输入和独立字段传递，不进入 argv 或输出", async () => {
+    let payload;
+    const server = await listen((request, response) => {
+        if (request.url === "/api/plugins")
+            return json(response, { plugins: [{ ...plugin, status: "degraded" }] });
+        if (request.method === "GET")
+            return json(response, { ...commands, commands: [{ name: "configure", summary: "配置凭据", usage: "mab demo configure", secretPrompt: "App Secret" }] });
+        void readBody(request).then((body) => { payload = JSON.parse(body); json(response, { ok: true, message: "已保存" }); });
+    });
+    try {
+        const result = await (0, cli_commands_1.runPluginCommand)("demo", ["configure"], server.port, { readSecret: async () => "测试密钥" });
+        strict_1.default.equal(result.exitCode, 0);
+        strict_1.default.deepEqual(payload.argv, ["configure"]);
+        strict_1.default.equal(payload.secret, "测试密钥");
+        strict_1.default.doesNotMatch(result.stdout + result.stderr, /测试密钥/);
+    }
+    finally {
+        await server.close();
+    }
+});
+(0, node_test_1.default)("非交互终端拒绝读取密钥", async () => {
+    const { readSecret } = await Promise.resolve().then(() => __importStar(require("../src-ts/secret-input")));
+    if (!process.stdin.isTTY || !process.stderr.isTTY)
+        await strict_1.default.rejects(readSecret("App Secret"), /交互终端/);
+});